@tinybirdco/sdk 0.0.1

package/dist/api/workspaces.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Tinybird Workspace API client
+ */
+/**
+ * Workspace information from Tinybird API
+ */
+export interface TinybirdWorkspace {
+    /** Workspace ID (UUID) */
+    id: string;
+    /** Workspace name */
+    name: string;
+    /** User ID of the workspace owner */
+    user_id: string;
+    /** Email of the workspace owner */
+    user_email: string;
+    /** Workspace scope */
+    scope: string;
+    /** Main branch (null for main workspace) */
+    main: string | null;
+}
+/**
+ * API configuration for workspace operations
+ */
+export interface WorkspaceApiConfig {
+    /** Tinybird API base URL */
+    baseUrl: string;
+    /** Workspace token */
+    token: string;
+}
+/**
+ * Error thrown by workspace API operations
+ */
+export declare class WorkspaceApiError extends Error {
+    readonly status: number;
+    readonly body?: unknown | undefined;
+    constructor(message: string, status: number, body?: unknown | undefined);
+}
+/**
+ * Get workspace information
+ * GET /v1/workspace
+ *
+ * @param config - API configuration
+ * @returns Workspace information
+ */
+export declare function getWorkspace(config: WorkspaceApiConfig): Promise<TinybirdWorkspace>;
+//# sourceMappingURL=workspaces.d.ts.map

package/dist/api/workspaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.d.ts","sourceRoot":"","sources":["../../src/api/workspaces.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,0BAA0B;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,sBAAsB;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,4BAA4B;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,sBAAsB;IACtB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;aAGxB,MAAM,EAAE,MAAM;aACd,IAAI,CAAC,EAAE,OAAO;gBAF9B,OAAO,EAAE,MAAM,EACC,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,OAAO,YAAA;CAKjC;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,iBAAiB,CAAC,CAqB5B"}

package/dist/api/workspaces.js

@@ -0,0 +1,39 @@
+/**
+ * Tinybird Workspace API client
+ */
+/**
+ * Error thrown by workspace API operations
+ */
+export class WorkspaceApiError extends Error {
+    status;
+    body;
+    constructor(message, status, body) {
+        super(message);
+        this.status = status;
+        this.body = body;
+        this.name = "WorkspaceApiError";
+    }
+}
+/**
+ * Get workspace information
+ * GET /v1/workspace
+ *
+ * @param config - API configuration
+ * @returns Workspace information
+ */
+export async function getWorkspace(config) {
+    const url = new URL("/v1/workspace", config.baseUrl);
+    const response = await fetch(url.toString(), {
+        method: "GET",
+        headers: {
+            Authorization: `Bearer ${config.token}`,
+        },
+    });
+    if (!response.ok) {
+        const body = await response.text();
+        throw new WorkspaceApiError(`Failed to get workspace: ${response.status} ${response.statusText}`, response.status, body);
+    }
+    const data = (await response.json());
+    return data;
+}
+//# sourceMappingURL=workspaces.js.map

package/dist/api/workspaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.js","sourceRoot":"","sources":["../../src/api/workspaces.ts"],"names":[],"mappings":"AAAA;;GAEG;AA8BH;;GAEG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAGxB;IACA;IAHlB,YACE,OAAe,EACC,MAAc,EACd,IAAc;QAE9B,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAU;QAG9B,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAA0B;IAE1B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAErD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QAC3C,MAAM,EAAE,KAAK;QACb,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE;SACxC;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,iBAAiB,CACzB,4BAA4B,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,EACpE,QAAQ,CAAC,MAAM,EACf,IAAI,CACL,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAsB,CAAC;IAC1D,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/api/workspaces.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=workspaces.test.d.ts.map

package/dist/api/workspaces.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.test.d.ts","sourceRoot":"","sources":["../../src/api/workspaces.test.ts"],"names":[],"mappings":""}

package/dist/api/workspaces.test.js

@@ -0,0 +1,65 @@
+import { describe, it, expect, vi, beforeEach } from "vitest";
+import { getWorkspace, WorkspaceApiError, } from "./workspaces.js";
+// Mock fetch globally
+const mockFetch = vi.fn();
+global.fetch = mockFetch;
+describe("Workspace API client", () => {
+    const config = {
+        baseUrl: "https://api.tinybird.co",
+        token: "p.test-token",
+    };
+    beforeEach(() => {
+        mockFetch.mockReset();
+    });
+    describe("getWorkspace", () => {
+        it("returns workspace information", async () => {
+            const mockWorkspace = {
+                id: "9f42135e-3434-4d89-a90f-cb9cf74ce311",
+                name: "ts_client",
+                releases: [],
+                user_id: "412571dd-d2e6-4b3c-87b5-b29320414e22",
+                user_email: "user@example.com",
+                scope: "user",
+                main: null,
+            };
+            mockFetch.mockResolvedValueOnce({
+                ok: true,
+                json: () => Promise.resolve(mockWorkspace),
+            });
+            const result = await getWorkspace(config);
+            expect(mockFetch).toHaveBeenCalledWith("https://api.tinybird.co/v1/workspace", {
+                method: "GET",
+                headers: {
+                    Authorization: "Bearer p.test-token",
+                },
+            });
+            expect(result).toEqual(mockWorkspace);
+        });
+        it("throws WorkspaceApiError on failure", async () => {
+            mockFetch.mockResolvedValueOnce({
+                ok: false,
+                status: 401,
+                statusText: "Unauthorized",
+                text: () => Promise.resolve("Invalid token"),
+            });
+            await expect(getWorkspace(config)).rejects.toThrow(WorkspaceApiError);
+        });
+        it("includes status code in error", async () => {
+            mockFetch.mockResolvedValueOnce({
+                ok: false,
+                status: 403,
+                statusText: "Forbidden",
+                text: () => Promise.resolve("Access denied"),
+            });
+            try {
+                await getWorkspace(config);
+                expect.fail("Should have thrown");
+            }
+            catch (error) {
+                expect(error).toBeInstanceOf(WorkspaceApiError);
+                expect(error.status).toBe(403);
+            }
+        });
+    });
+});
+//# sourceMappingURL=workspaces.test.js.map

package/dist/api/workspaces.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.test.js","sourceRoot":"","sources":["../../src/api/workspaces.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EACL,YAAY,EACZ,iBAAiB,GAElB,MAAM,iBAAiB,CAAC;AAEzB,sBAAsB;AACtB,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAC1B,MAAM,CAAC,KAAK,GAAG,SAAS,CAAC;AAEzB,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,MAAM,MAAM,GAAuB;QACjC,OAAO,EAAE,yBAAyB;QAClC,KAAK,EAAE,cAAc;KACtB,CAAC;IAEF,UAAU,CAAC,GAAG,EAAE;QACd,SAAS,CAAC,SAAS,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;QAC5B,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;YAC7C,MAAM,aAAa,GAAG;gBACpB,EAAE,EAAE,sCAAsC;gBAC1C,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,EAAE;gBACZ,OAAO,EAAE,sCAAsC;gBAC/C,UAAU,EAAE,kBAAkB;gBAC9B,KAAK,EAAE,MAAM;gBACb,IAAI,EAAE,IAAI;aACX,CAAC;YAEF,SAAS,CAAC,qBAAqB,CAAC;gBAC9B,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;aAC3C,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;YAE1C,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CACpC,sCAAsC,EACtC;gBACE,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,aAAa,EAAE,qBAAqB;iBACrC;aACF,CACF,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,SAAS,CAAC,qBAAqB,CAAC;gBAC9B,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,UAAU,EAAE,cAAc;gBAC1B,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC;aAC7C,CAAC,CAAC;YAEH,MAAM,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;YAC7C,SAAS,CAAC,qBAAqB,CAAC;gBAC9B,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,UAAU,EAAE,WAAW;gBACvB,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC;aAC7C,CAAC,CAAC;YAEH,IAAI,CAAC;gBACH,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YACpC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;gBAChD,MAAM,CAAE,KAA2B,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACxD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/cli/auth.d.ts

@@ -0,0 +1,86 @@
+/**
+ * Browser-based authentication for Tinybird CLI
+ *
+ * Implements OAuth flow via local HTTP server callback
+ */
+/**
+ * Port for the local OAuth callback server
+ */
+export declare const AUTH_SERVER_PORT = 49160;
+/**
+ * Default auth host (Tinybird cloud)
+ */
+export declare const DEFAULT_AUTH_HOST = "https://cloud.tinybird.co";
+/**
+ * Default API host (EU region)
+ */
+export declare const DEFAULT_API_HOST = "https://api.tinybird.co";
+/**
+ * Maximum time to wait for authentication (in seconds)
+ */
+export declare const SERVER_MAX_WAIT_TIME = 180;
+/**
+ * Get the auth host from environment or use default
+ */
+export declare function getAuthHost(): string;
+/**
+ * Result of a login attempt
+ */
+export interface AuthResult {
+    success: boolean;
+    token?: string;
+    baseUrl?: string;
+    workspaceName?: string;
+    userEmail?: string;
+    error?: string;
+}
+/**
+ * Options for the browser login flow
+ */
+export interface LoginOptions {
+    /** Override the default auth host */
+    authHost?: string;
+    /** Override the API host (region) */
+    apiHost?: string;
+}
+/**
+ * Token response from Tinybird auth API
+ */
+interface TokenResponse {
+    workspace_token: string;
+    user_token: string;
+    api_host: string;
+    workspace_name?: string;
+    user_email?: string;
+}
+/**
+ * Open a URL in the user's default browser
+ *
+ * Cross-platform support for macOS, Linux, and Windows
+ *
+ * @param url - URL to open
+ * @returns Promise that resolves to true if browser was opened successfully
+ */
+export declare function openBrowser(url: string): Promise<boolean>;
+/**
+ * Exchange an authorization code for tokens
+ *
+ * @param code - Authorization code from OAuth callback
+ * @param authHost - Auth host URL
+ * @returns Promise that resolves to token response
+ */
+export declare function exchangeCodeForTokens(code: string, authHost: string): Promise<TokenResponse>;
+/**
+ * Perform browser-based login flow
+ *
+ * 1. Starts a local HTTP server for OAuth callback
+ * 2. Opens the user's browser to the auth URL
+ * 3. Waits for the callback with auth code
+ * 4. Exchanges the code for tokens
+ *
+ * @param options - Login options
+ * @returns Promise that resolves to auth result
+ */
+export declare function browserLogin(options?: LoginOptions): Promise<AuthResult>;
+export {};
+//# sourceMappingURL=auth.d.ts.map

package/dist/cli/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/cli/auth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH;;GAEG;AACH,eAAO,MAAM,gBAAgB,QAAQ,CAAC;AAEtC;;GAEG;AACH,eAAO,MAAM,iBAAiB,8BAA8B,CAAC;AAE7D;;GAEG;AACH,eAAO,MAAM,gBAAgB,4BAA4B,CAAC;AAE1D;;GAEG;AACH,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAExC;;GAEG;AACH,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,qCAAqC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qCAAqC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,UAAU,aAAa;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AA+HD;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAyC/D;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,aAAa,CAAC,CAcxB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,YAAY,CAChC,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,UAAU,CAAC,CAuErB"}

package/dist/cli/auth.js

@@ -0,0 +1,284 @@
+/**
+ * Browser-based authentication for Tinybird CLI
+ *
+ * Implements OAuth flow via local HTTP server callback
+ */
+import * as http from "node:http";
+import { spawn } from "node:child_process";
+import { platform } from "node:os";
+import { URL } from "node:url";
+/**
+ * Port for the local OAuth callback server
+ */
+export const AUTH_SERVER_PORT = 49160;
+/**
+ * Default auth host (Tinybird cloud)
+ */
+export const DEFAULT_AUTH_HOST = "https://cloud.tinybird.co";
+/**
+ * Default API host (EU region)
+ */
+export const DEFAULT_API_HOST = "https://api.tinybird.co";
+/**
+ * Maximum time to wait for authentication (in seconds)
+ */
+export const SERVER_MAX_WAIT_TIME = 180;
+/**
+ * Get the auth host from environment or use default
+ */
+export function getAuthHost() {
+    return process.env.TINYBIRD_AUTH_HOST ?? DEFAULT_AUTH_HOST;
+}
+/**
+ * Generate the HTML callback page served by the local server
+ *
+ * This page extracts the code from the query string and POSTs it back to the server
+ *
+ * NOTE: State parameter validation is disabled until Tinybird backend supports it.
+ * TODO: Re-enable state validation once /api/cli-login echoes back the state parameter.
+ */
+function getCallbackHtml(authHost) {
+    return `<!DOCTYPE html>
+<html>
+<head>
+  <style>
+    body {
+      font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
+      background: #f5f5f5;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      height: 100vh;
+      margin: 0;
+    }
+    .container {
+      text-align: center;
+      padding: 2rem;
+    }
+    .spinner {
+      border: 3px solid #e0e0e0;
+      border-top: 3px solid #333;
+      border-radius: 50%;
+      width: 30px;
+      height: 30px;
+      animation: spin 1s linear infinite;
+      margin: 0 auto 1rem;
+    }
+    @keyframes spin {
+      0% { transform: rotate(0deg); }
+      100% { transform: rotate(360deg); }
+    }
+  </style>
+</head>
+<body>
+  <div class="container">
+    <div class="spinner"></div>
+    <p>Completing authentication...</p>
+  </div>
+  <script>
+    const searchParams = new URLSearchParams(window.location.search);
+    const code = searchParams.get('code');
+    const workspace = searchParams.get('workspace');
+    const region = searchParams.get('region');
+    const provider = searchParams.get('provider');
+    const host = "${authHost}";
+
+    if (!code) {
+      document.querySelector('.container').innerHTML = '<p>Missing authentication code. Please try again.</p>';
+    } else {
+      fetch('/?code=' + encodeURIComponent(code), { method: 'POST' })
+        .then(() => {
+          if (provider && region && workspace) {
+            window.location.href = host + "/" + provider + "/" + region + "/cli-login?workspace=" + workspace;
+          } else {
+            document.querySelector('.container').innerHTML = '<p>Authentication successful! You can close this tab.</p>';
+          }
+        })
+        .catch(() => {
+          document.querySelector('.container').innerHTML = '<p>Authentication failed. Please try again.</p>';
+        });
+    }
+  </script>
+</body>
+</html>`;
+}
+/**
+ * Start a local HTTP server to receive the OAuth callback
+ *
+ * @param onCode - Callback invoked when auth code is received
+ * @param authHost - Auth host for redirect URL in HTML
+ * @returns Promise that resolves to the server instance
+ *
+ * NOTE: State parameter validation is disabled until Tinybird backend supports it.
+ */
+function startAuthServer(onCode, authHost) {
+    return new Promise((resolve, reject) => {
+        const server = http.createServer((req, res) => {
+            const url = new URL(req.url ?? "/", `http://localhost:${AUTH_SERVER_PORT}`);
+            if (req.method === "GET") {
+                // Serve the callback HTML page
+                res.writeHead(200, { "Content-Type": "text/html" });
+                res.end(getCallbackHtml(authHost));
+            }
+            else if (req.method === "POST") {
+                // Receive the auth code
+                const code = url.searchParams.get("code");
+                if (!code) {
+                    res.writeHead(400);
+                    res.end("Missing code parameter");
+                    return;
+                }
+                onCode(code);
+                res.writeHead(200);
+                res.end();
+            }
+            else {
+                res.writeHead(405);
+                res.end("Method not allowed");
+            }
+        });
+        server.on("error", (err) => {
+            reject(new Error(`Failed to start auth server: ${err.message}`));
+        });
+        // Bind to localhost only for security (prevents network access)
+        server.listen(AUTH_SERVER_PORT, "127.0.0.1", () => {
+            resolve(server);
+        });
+    });
+}
+/**
+ * Open a URL in the user's default browser
+ *
+ * Cross-platform support for macOS, Linux, and Windows
+ *
+ * @param url - URL to open
+ * @returns Promise that resolves to true if browser was opened successfully
+ */
+export async function openBrowser(url) {
+    const os = platform();
+    let command;
+    let args;
+    switch (os) {
+        case "darwin":
+            command = "open";
+            args = [url];
+            break;
+        case "win32":
+            command = "cmd";
+            args = ["/c", "start", "", url];
+            break;
+        default:
+            // Linux and others
+            command = "xdg-open";
+            args = [url];
+            break;
+    }
+    return new Promise((resolve) => {
+        try {
+            const child = spawn(command, args, {
+                detached: true,
+                stdio: "ignore",
+            });
+            child.unref();
+            child.on("error", () => {
+                resolve(false);
+            });
+            // Give it a moment to potentially fail
+            setTimeout(() => resolve(true), 500);
+        }
+        catch {
+            resolve(false);
+        }
+    });
+}
+/**
+ * Exchange an authorization code for tokens
+ *
+ * @param code - Authorization code from OAuth callback
+ * @param authHost - Auth host URL
+ * @returns Promise that resolves to token response
+ */
+export async function exchangeCodeForTokens(code, authHost) {
+    const url = new URL("/api/cli-login", authHost);
+    url.searchParams.set("code", code);
+    const response = await fetch(url.toString());
+    if (!response.ok) {
+        const body = await response.text();
+        throw new Error(`Token exchange failed: ${response.status} ${response.statusText}\n${body}`);
+    }
+    return (await response.json());
+}
+/**
+ * Perform browser-based login flow
+ *
+ * 1. Starts a local HTTP server for OAuth callback
+ * 2. Opens the user's browser to the auth URL
+ * 3. Waits for the callback with auth code
+ * 4. Exchanges the code for tokens
+ *
+ * @param options - Login options
+ * @returns Promise that resolves to auth result
+ */
+export async function browserLogin(options = {}) {
+    const authHost = options.authHost ?? getAuthHost();
+    const apiHost = options.apiHost ?? DEFAULT_API_HOST;
+    let server = null;
+    let timeoutId = null;
+    try {
+        // Start the server first
+        const serverPromise = new Promise((resolve, reject) => {
+            // Set up timeout
+            timeoutId = setTimeout(() => {
+                reject(new Error("Authentication timed out after 180 seconds"));
+            }, SERVER_MAX_WAIT_TIME * 1000);
+            startAuthServer((code) => {
+                if (timeoutId)
+                    clearTimeout(timeoutId);
+                if (server) {
+                    resolve({ server, code });
+                }
+            }, authHost)
+                .then((srv) => {
+                server = srv;
+            })
+                .catch(reject);
+        });
+        // Wait for server to start
+        await new Promise((resolve) => setTimeout(resolve, 100));
+        // Build auth URL
+        const authUrl = new URL("/api/cli-login", authHost);
+        authUrl.searchParams.set("apiHost", apiHost);
+        console.log("Opening browser for authentication...");
+        // Open browser
+        await openBrowser(authUrl.toString());
+        console.log("\nIf the browser doesn't open, please visit:");
+        console.log(authUrl.toString());
+        // Wait for auth code
+        const { code } = await serverPromise;
+        // Exchange code for tokens
+        console.log("\nExchanging code for tokens...");
+        const tokens = await exchangeCodeForTokens(code, authHost);
+        return {
+            success: true,
+            token: tokens.workspace_token,
+            baseUrl: tokens.api_host,
+            workspaceName: tokens.workspace_name,
+            userEmail: tokens.user_email,
+        };
+    }
+    catch (error) {
+        return {
+            success: false,
+            error: error.message,
+        };
+    }
+    finally {
+        // Clean up
+        if (timeoutId)
+            clearTimeout(timeoutId);
+        if (server) {
+            server.close();
+        }
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/cli/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/cli/auth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAEtC;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,2BAA2B,CAAC;AAE7D;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AAE1D;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAExC;;GAEG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,iBAAiB,CAAC;AAC7D,CAAC;AAmCD;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,QAAgB;IACvC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBA2CW,QAAQ;;;;;;;;;;;;;;;;;;;QAmBpB,CAAC;AACT,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,eAAe,CACtB,MAA8B,EAC9B,QAAgB;IAEhB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,gBAAgB,EAAE,CAAC,CAAC;YAE5E,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACzB,+BAA+B;gBAC/B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;YACrC,CAAC;iBAAM,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACjC,wBAAwB;gBACxB,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAE1C,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACnB,GAAG,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;oBAClC,OAAO;gBACT,CAAC;gBAED,MAAM,CAAC,IAAI,CAAC,CAAC;gBACb,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAChC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;QAEH,gEAAgE;QAChE,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,WAAW,EAAE,GAAG,EAAE;YAChD,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW;IAC3C,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;IAEtB,IAAI,OAAe,CAAC;IACpB,IAAI,IAAc,CAAC;IAEnB,QAAQ,EAAE,EAAE,CAAC;QACX,KAAK,QAAQ;YACX,OAAO,GAAG,MAAM,CAAC;YACjB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YACb,MAAM;QACR,KAAK,OAAO;YACV,OAAO,GAAG,KAAK,CAAC;YAChB,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;YAChC,MAAM;QACR;YACE,mBAAmB;YACnB,OAAO,GAAG,UAAU,CAAC;YACrB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YACb,MAAM;IACV,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;gBACjC,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,QAAQ;aAChB,CAAC,CAAC;YAEH,KAAK,CAAC,KAAK,EAAE,CAAC;YAEd,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACrB,OAAO,CAAC,KAAK,CAAC,CAAC;YACjB,CAAC,CAAC,CAAC;YAEH,uCAAuC;YACvC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAY,EACZ,QAAgB;IAEhB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IAChD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAEnC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAE7C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,0BAA0B,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,KAAK,IAAI,EAAE,CAC5E,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAkB,CAAC;AAClD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,UAAwB,EAAE;IAE1B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,WAAW,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,gBAAgB,CAAC;IAEpD,IAAI,MAAM,GAAuB,IAAI,CAAC;IACtC,IAAI,SAAS,GAAyC,IAAI,CAAC;IAE3D,IAAI,CAAC;QACH,yBAAyB;QACzB,MAAM,aAAa,GAAG,IAAI,OAAO,CAAwC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3F,iBAAiB;YACjB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC1B,MAAM,CAAC,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC,CAAC;YAClE,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC,CAAC;YAEhC,eAAe,CACb,CAAC,IAAI,EAAE,EAAE;gBACP,IAAI,SAAS;oBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;gBACvC,IAAI,MAAM,EAAE,CAAC;oBACX,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC,EACD,QAAQ,CACT;iBACE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;gBACZ,MAAM,GAAG,GAAG,CAAC;YACf,CAAC,CAAC;iBACD,KAAK,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC,CAAC,CAAC;QAEH,2BAA2B;QAC3B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAE/D,iBAAiB;QACjB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QACpD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAE7C,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QAErD,eAAe;QACf,MAAM,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEtC,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEhC,qBAAqB;QACrB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,aAAa,CAAC;QAErC,2BAA2B;QAC3B,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAE3D,OAAO;YACL,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,MAAM,CAAC,eAAe;YAC7B,OAAO,EAAE,MAAM,CAAC,QAAQ;YACxB,aAAa,EAAE,MAAM,CAAC,cAAc;YACpC,SAAS,EAAE,MAAM,CAAC,UAAU;SAC7B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAG,KAAe,CAAC,OAAO;SAChC,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,WAAW;QACX,IAAI,SAAS;YAAE,YAAY,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,MAAM,EAAE,CAAC;YACV,MAAsB,CAAC,KAAK,EAAE,CAAC;QAClC,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/cli/branch-store.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Branch token storage in ~/.tinybird/branches.json
+ */
+/**
+ * Information about a cached branch
+ */
+export interface BranchInfo {
+    /** Branch ID from Tinybird */
+    id: string;
+    /** Branch token for API access */
+    token: string;
+    /** When the branch was created/cached */
+    createdAt: string;
+}
+/**
+ * Structure of the branches.json file
+ */
+export interface BranchStore {
+    workspaces: Record<string, {
+        branches: Record<string, BranchInfo>;
+    }>;
+}
+/**
+ * Get the path to the branches.json file
+ */
+export declare function getBranchStorePath(): string;
+/**
+ * Load the branch store from disk
+ * Returns an empty store if the file doesn't exist
+ */
+export declare function loadBranchStore(): BranchStore;
+/**
+ * Save the branch store to disk
+ */
+export declare function saveBranchStore(store: BranchStore): void;
+/**
+ * Get a cached branch token
+ * Returns null if not cached
+ */
+export declare function getBranchToken(workspaceId: string, branchName: string): BranchInfo | null;
+/**
+ * Cache a branch token
+ */
+export declare function setBranchToken(workspaceId: string, branchName: string, info: BranchInfo): void;
+/**
+ * Remove a cached branch
+ */
+export declare function removeBranch(workspaceId: string, branchName: string): void;
+/**
+ * List all cached branches for a workspace
+ */
+export declare function listCachedBranches(workspaceId: string): Record<string, BranchInfo>;
+//# sourceMappingURL=branch-store.d.ts.map

package/dist/cli/branch-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"branch-store.d.ts","sourceRoot":"","sources":["../../src/cli/branch-store.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,8BAA8B;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAChB,MAAM,EACN;QACE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;KACtC,CACF,CAAC;CACH;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAoBD;;;GAGG;AACH,wBAAgB,eAAe,IAAI,WAAW,CAc7C;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAIxD;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,UAAU,GAAG,IAAI,CAGnB;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,UAAU,GACf,IAAI,CASN;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAO1E;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,MAAM,GAClB,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAG5B"}