peakurl 1.0.3 → 1.1.0

package/bin/peakurl.js

@@ -4,14 +4,6 @@
 import { readFile as readFile3 } from "fs/promises";
 import { Command, CommanderError, InvalidArgumentError } from "commander";
 
-// src/commands/core.ts
-import { cwd } from "process";
-
-// src/config/store.ts
-import { chmod, mkdir, readFile, unlink, writeFile } from "fs/promises";
-import { dirname, join } from "path";
-import envPaths from "env-paths";
-
 // src/lib/errors.ts
 var CliError = class extends Error {
   exitCode;
@@ -33,159 +25,6 @@ function ensureCliError(error) {
   return new CliError("Unexpected error.");
 }
 
-// src/config/store.ts
-var CONFIG_FILENAME = "config.json";
-var STATE_FILENAME = "state.json";
-function getConfigPath() {
-  const paths = envPaths("peakurl", { suffix: "" });
-  const directory = process.platform === "darwin" ? paths.data : paths.config;
-  return join(directory, CONFIG_FILENAME);
-}
-function getStatePath() {
-  return join(envPaths("peakurl", { suffix: "" }).config, STATE_FILENAME);
-}
-async function ensureParentDir(filePath) {
-  const directory = dirname(filePath);
-  await mkdir(directory, { recursive: true, mode: 448 });
-  return directory;
-}
-var ConfigStore = class {
-  filePath;
-  /**
-   * Creates a config store bound to one on-disk file.
-   *
-   * @param filePath Optional override used by tests or advanced callers.
-   */
-  constructor(filePath = getConfigPath()) {
-    this.filePath = filePath;
-  }
-  /**
-   * Loads the stored credential set from disk.
-   *
-   * Missing files are treated as "not configured yet" instead of as hard
-   * errors so first-run CLI flows remain clean.
-   *
-   * @returns Stored config or `null` when the file does not exist.
-   * @throws {CliError} When the file exists but is unreadable or invalid.
-   */
-  async load() {
-    try {
-      const content = await readFile(this.filePath, "utf8");
-      const parsed = JSON.parse(content);
-      const apiBaseUrl = typeof parsed?.apiBaseUrl === "string" ? parsed.apiBaseUrl : typeof parsed?.baseUrl === "string" ? parsed.baseUrl : void 0;
-      if (typeof apiBaseUrl !== "string" || typeof parsed?.apiKey !== "string") {
-        throw new CliError(`Invalid config file: ${this.filePath}`);
-      }
-      return {
-        apiBaseUrl,
-        apiKey: parsed.apiKey
-      };
-    } catch (error) {
-      if (error instanceof Error && "code" in error && typeof error.code === "string" && error.code === "ENOENT") {
-        return null;
-      }
-      if (error instanceof CliError) {
-        throw error;
-      }
-      throw new CliError(
-        `Could not read PeakURL config at ${this.filePath}.`,
-        1,
-        {
-          cause: error instanceof Error ? error : void 0
-        }
-      );
-    }
-  }
-  /**
-   * Persists one credential set to disk with restrictive file permissions.
-   *
-   * The chmod step is best-effort because Windows and some filesystems do not
-   * expose POSIX permission bits in the same way as Unix-like systems.
-   *
-   * @param config Normalized credential set to write.
-   */
-  async save(config) {
-    const directory = await ensureParentDir(this.filePath);
-    await writeFile(this.filePath, `${JSON.stringify(config, null, 2)}
-`, {
-      mode: 384
-    });
-    try {
-      await chmod(directory, 448);
-      await chmod(this.filePath, 384);
-    } catch {
-    }
-  }
-  /**
-   * Removes the stored credential file.
-   *
-   * @returns `true` when a saved config file existed and was removed.
-   * @throws {CliError} When the file exists but cannot be removed.
-   */
-  async clear() {
-    try {
-      await unlink(this.filePath);
-      return true;
-    } catch (error) {
-      if (error instanceof Error && "code" in error && typeof error.code === "string" && error.code === "ENOENT") {
-        return false;
-      }
-      throw new CliError(
-        `Could not remove PeakURL config at ${this.filePath}.`,
-        1,
-        {
-          cause: error instanceof Error ? error : void 0
-        }
-      );
-    }
-  }
-};
-var StateStore = class {
-  filePath;
-  /**
-   * Creates a state store bound to one on-disk file.
-   *
-   * @param filePath Optional override used by tests or advanced callers.
-   */
-  constructor(filePath = getStatePath()) {
-    this.filePath = filePath;
-  }
-  /**
-   * Loads cached state from disk.
-   *
-   * Missing or invalid files are treated as empty state because the CLI can
-   * always recompute update metadata on the next successful network check.
-   *
-   * @returns Parsed state object or an empty object.
-   */
-  async load() {
-    try {
-      const content = await readFile(this.filePath, "utf8");
-      const parsed = JSON.parse(content);
-      return parsed && typeof parsed === "object" ? parsed : {};
-    } catch {
-      return {};
-    }
-  }
-  /**
-   * Persists cached state to disk.
-   *
-   * @param state State payload to save.
-   */
-  async save(state) {
-    const directory = await ensureParentDir(this.filePath);
-    await writeFile(this.filePath, `${JSON.stringify(state, null, 2)}
-`, {
-      mode: 384
-    });
-    try {
-      await chmod(directory, 448);
-      await chmod(this.filePath, 384);
-    } catch {
-    }
-  }
-};
-
 // src/lib/url.ts
 function validateHttpUrl(parsed, label) {
   if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
@@ -260,72 +99,289 @@ function normalizeWebhookUrl(value) {
   }
 }
 
-// src/lib/auth.ts
-var AUTH_REQUIRED_MESSAGE = "PeakURL credentials are not configured.";
-var EXAMPLE_BASE_URL = "https://example.com/api/v1";
-var EXAMPLE_API_KEY = "YOUR_API_KEY";
-function authRows(commandName) {
-  const retryCommand = commandName ? `peakurl ${commandName}` : "peakurl whoami";
-  const rows2 = [
-    [
-      "Save credentials",
-      `peakurl login --base-url ${EXAMPLE_BASE_URL}
---api-key ${EXAMPLE_API_KEY}`,
-      "Regular use on this machine"
-    ],
-    [
-      "Set environment variables",
-      `PEAKURL_BASE_URL=${EXAMPLE_BASE_URL}
-PEAKURL_API_KEY=${EXAMPLE_API_KEY}`,
-      "CI, scripts, or one-off use"
-    ],
-    ["Then run", retryCommand, "After completing one of the steps above"]
-  ];
-  return rows2;
+// src/api/client.ts
+function isApiResponse(value) {
+  return Boolean(
+    value && typeof value === "object" && "success" in value && "message" in value && "timestamp" in value
+  );
 }
-function getLoginConfig(input, env) {
-  const apiBaseUrl = input.baseUrl?.trim() || env.PEAKURL_BASE_URL?.trim();
-  const apiKey = input.apiKey?.trim() || env.PEAKURL_API_KEY?.trim();
-  if (!apiBaseUrl || !apiKey) {
-    throw new CliError(
-      "Missing credentials. Provide --base-url and --api-key, or set PEAKURL_BASE_URL and PEAKURL_API_KEY."
-    );
+function networkError(apiBaseUrl, error) {
+  if (error instanceof Error && error.message) {
+    return `Could not reach PeakURL at ${apiBaseUrl}. ${error.message}`;
   }
-  return {
-    apiBaseUrl: getApiBaseUrl(apiBaseUrl),
-    apiKey
-  };
+  return `Could not reach PeakURL at ${apiBaseUrl}.`;
 }
-async function getAuthConfig(env, store = new ConfigStore()) {
-  const saved = await store.load();
-  const apiBaseUrl = env.PEAKURL_BASE_URL?.trim() || saved?.apiBaseUrl;
-  const apiKey = env.PEAKURL_API_KEY?.trim() || saved?.apiKey;
-  if (!apiBaseUrl || !apiKey) {
-    throw new CliError(AUTH_REQUIRED_MESSAGE, 1, {
-      kind: "auth_required"
-    });
+var ApiClient = class {
+  /**
+   * Creates a client bound to one resolved credential set.
+   *
+   * @param config Explicit API base URL plus bearer API key.
+   */
+  constructor(config) {
+    this.config = config;
+  }
+  config;
+  /**
+   * Loads the currently authenticated user.
+   *
+   * PeakURL accepts bearer API keys on `GET /users/me`, which is also the
+   * CLI login verification flow.
+   *
+   * @returns API response envelope containing the authenticated user.
+   */
+  whoami() {
+    return this.request("GET", "users/me");
+  }
+  /**
+   * Loads the current system status snapshot for the authenticated site.
+   *
+   * @returns API response envelope containing system status sections.
+   */
+  getStatus() {
+    return this.request("GET", "system/status");
+  }
+  /**
+   * Creates a short URL.
+   *
+   * @param payload Request body accepted by `POST /api/v1/urls`.
+   * @returns API response envelope containing the created link.
+   */
+  createUrl(payload) {
+    return this.request("POST", "urls", payload);
+  }
+  /**
+   * Lists short URLs with optional pagination and filtering.
+   *
+   * The current PeakURL app returns `{ items, meta }` under `data`, but the
+   * CLI keeps a slightly broader compatibility type for future-proofing.
+   *
+   * @param query Optional query-string values.
+   * @returns API response envelope containing list data.
+   */
+  listUrls(query) {
+    return this.request("GET", "urls", void 0, query);
+  }
+  /**
+   * Exports the full accessible link dataset for the authenticated user.
+   *
+   * @param query Optional search and sort values.
+   * @returns API response envelope containing the full export payload.
+   */
+  exportUrls(query) {
+    return this.request(
+      "GET",
+      "urls/export",
+      void 0,
+      query
+    );
+  }
+  /**
+   * Imports multiple short links in one bulk request.
+   *
+   * @param payload Request body accepted by `POST /api/v1/urls/bulk`.
+   * @returns API response envelope containing created rows plus row errors.
+   */
+  importUrls(payload) {
+    return this.request("POST", "urls/bulk", payload);
+  }
+  /**
+   * Loads a single short URL by identifier or alias.
+   *
+   * PeakURL resolves IDs, short codes, and aliases through the same route.
+   *
+   * @param idOrAlias Link identifier, short code, or alias.
+   * @returns API response envelope containing the resolved link.
+   */
+  getUrl(idOrAlias) {
+    return this.request(
+      "GET",
+      `urls/${encodeURIComponent(idOrAlias)}`
+    );
+  }
+  /**
+   * Deletes a short URL by its stable row ID.
+   *
+   * The current PeakURL backend delete route expects the row ID. The CLI can
+   * still accept an alias at the command layer by resolving it first.
+   *
+   * @param id Stable link row ID.
+   * @returns API response envelope containing the deletion result.
+   */
+  deleteUrl(id) {
+    return this.request(
+      "DELETE",
+      `urls/${encodeURIComponent(id)}`
+    );
+  }
+  /**
+   * Deletes multiple short URLs in a single bulk operation.
+   *
+   * @param ids Array of short URL IDs to delete.
+   * @returns API response envelope with deleted count.
+   */
+  deleteUrlsBulk(ids) {
+    return this.request("DELETE", "urls/bulk", { ids });
+  }
+  /**
+   * Deletes all accessible short URLs for the authenticated user.
+   *
+   * @returns API response envelope with deleted count.
+   */
+  clearUrls() {
+    return this.request("DELETE", "urls");
+  }
+  /**
+   * Empties all short links currently in trash.
+   *
+   * @returns API response envelope with deleted count.
+   */
+  emptyTrash() {
+    return this.request("DELETE", "urls/trash");
+  }
+  /**
+   * Lists audit log activity entries.
+   *
+   * @param query Optional query-string parameters for pagination or filters.
+   * @returns API response envelope containing activity items and meta.
+   */
+  listActivity(query) {
+    return this.request(
+      "GET",
+      "analytics/activity",
+      void 0,
+      query
+    );
+  }
+  /**
+   * Deletes a single audit log activity entry by its row ID.
+   *
+   * @param id Audit log row ID.
+   * @returns API response envelope confirming deletion.
+   */
+  deleteActivity(id) {
+    return this.request(
+      "DELETE",
+      `analytics/activity/${encodeURIComponent(id)}`
+    );
+  }
+  /**
+   * Deletes multiple audit log activity entries in bulk.
+   *
+   * @param ids Array of audit log row IDs.
+   * @returns API response envelope with deleted count.
+   */
+  deleteActivityBulk(ids) {
+    return this.request(
+      "DELETE",
+      "analytics/activity/bulk",
+      { ids }
+    );
+  }
+  /**
+   * Clears all audit log activity records.
+   *
+   * @returns API response envelope confirming all logs were deleted.
+   */
+  clearActivity() {
+    return this.request("DELETE", "analytics/activity");
+  }
+  /**
+   * Lists outbound webhooks for the authenticated user.
+   *
+   * @returns API response envelope containing webhook rows.
+   */
+  listWebhooks() {
+    return this.request("GET", "webhooks");
+  }
+  /**
+   * Creates one outbound webhook subscription.
+   *
+   * @param payload Request body accepted by `POST /api/v1/webhooks`.
+   * @returns API response envelope containing the created webhook.
+   */
+  createWebhook(payload) {
+    return this.request("POST", "webhooks", payload);
+  }
+  /**
+   * Deletes one webhook by its stable row ID.
+   *
+   * @param id Webhook identifier returned by the list/create endpoints.
+   * @returns API response envelope containing the deletion result.
+   */
+  deleteWebhook(id) {
+    return this.request(
+      "DELETE",
+      `webhooks/${encodeURIComponent(id)}`
+    );
+  }
+  /**
+   * Performs one authenticated API request and normalizes the response.
+   *
+   * @param method HTTP method to send.
+   * @param path Route path relative to `/api/v1`.
+   * @param body Optional JSON body.
+   * @param query Optional query-string values.
+   * @returns Parsed PeakURL response envelope.
+   * @throws {CliError} When the network request fails or the API returns an error.
+   */
+  async request(method, path, body, query) {
+    const url = buildApiUrl(this.config.apiBaseUrl, path, query);
+    let response;
+    try {
+      response = await fetch(url, {
+        method,
+        headers: {
+          Accept: "application/json",
+          Authorization: `Bearer ${this.config.apiKey}`,
+          ...body ? { "Content-Type": "application/json" } : {}
+        },
+        body: body ? JSON.stringify(body) : void 0
+      });
+    } catch (error) {
+      throw new CliError(networkError(this.config.apiBaseUrl, error), 1, {
+        cause: error instanceof Error ? error : void 0
+      });
+    }
+    const rawText = await response.text();
+    if (!rawText) {
+      if (!response.ok) {
+        throw new CliError(
+          `PeakURL request failed with HTTP ${response.status}.`
+        );
+      }
+      return {
+        success: true,
+        message: "Request completed.",
+        data: void 0,
+        timestamp: (/* @__PURE__ */ new Date()).toISOString()
+      };
+    }
+    let parsed;
+    try {
+      parsed = JSON.parse(rawText);
+    } catch {
+      if (!response.ok) {
+        throw new CliError(
+          `PeakURL request failed with HTTP ${response.status}.`
+        );
+      }
+      throw new CliError("PeakURL returned an invalid JSON response.");
+    }
+    if (!isApiResponse(parsed)) {
+      throw new CliError(
+        "PeakURL returned an unexpected response envelope."
+      );
+    }
+    if (!response.ok || !parsed.success) {
+      const statusCode = response.status === 401 ? 2 : 1;
+      throw new CliError(
+        parsed.message || `PeakURL request failed with HTTP ${response.status}.`,
+        statusCode
+      );
+    }
+    return parsed;
   }
-  return {
-    apiBaseUrl: getApiBaseUrl(apiBaseUrl),
-    apiKey
-  };
-}
-
-// src/lib/core.ts
-import { createHash } from "crypto";
-import {
-  chmod as chmod2,
-  copyFile,
-  lstat,
-  mkdir as mkdir2,
-  mkdtemp,
-  rm,
-  writeFile as writeFile2
-} from "fs/promises";
-import { tmpdir } from "os";
-import { dirname as dirname2, join as join2, resolve } from "path";
-import { posix as pathPosix } from "path";
-import { inflateRawSync } from "zlib";
+};
 
 // src/lib/output.ts
 function writeStdout(message = "") {
@@ -455,14 +511,329 @@ function formatTable(headers, rows2, target = "stdout") {
     )
   ].join("\n");
 }
-function formatDetailsTable(rows2, target = "stdout") {
-  return formatTable(["Detail", "Information"], rows2, target);
+function formatDetailsTable(rows2, target = "stdout") {
+  return formatTable(["Detail", "Information"], rows2, target);
+}
+function writeJson(value) {
+  writeStdout(JSON.stringify(value, null, 2));
+}
+
+// src/lib/activity.ts
+var ACTIVITY_LIST_KEYS = [
+  "items",
+  "results",
+  "activities",
+  "history"
+];
+function asObject(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function asString(value) {
+  return typeof value === "string" && value.trim() ? value.trim() : void 0;
+}
+function asNumber(value) {
+  return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+}
+function truncate(value, maxLength) {
+  return value.length > maxLength ? `${value.slice(0, maxLength - 1)}\u2026` : value;
+}
+function getActivityMeta(data) {
+  const record = asObject(data);
+  if (!record) {
+    return null;
+  }
+  const meta = asObject(record.meta);
+  if (meta) {
+    return {
+      page: asNumber(meta.page),
+      limit: asNumber(meta.limit),
+      totalItems: asNumber(meta.totalItems),
+      totalPages: asNumber(meta.totalPages)
+    };
+  }
+  return {
+    page: asNumber(record.page),
+    limit: asNumber(record.limit),
+    totalItems: asNumber(record.total),
+    totalPages: asNumber(record.totalPages)
+  };
+}
+function extractActivity(data) {
+  if (Array.isArray(data)) {
+    return data;
+  }
+  const record = asObject(data);
+  if (record) {
+    for (const key of ACTIVITY_LIST_KEYS) {
+      const value = record[key];
+      if (Array.isArray(value)) {
+        return value;
+      }
+    }
+  }
+  return [];
+}
+function formatActivityTable(items) {
+  if (items.length === 0) {
+    return "No activity logs found.";
+  }
+  const headers = [
+    "ID",
+    "Action",
+    "User",
+    "IP Address",
+    "Timestamp",
+    "Message"
+  ];
+  const rows2 = items.map((item) => [
+    truncate(asString(item.id) || "-", 18),
+    truncate(asString(item.type) || "-", 18),
+    truncate(
+      asString(item.userName) || asString(item.userEmail) || "-",
+      18
+    ),
+    truncate(asString(item.ipAddress) || "-", 16),
+    truncate(asString(item.createdAt) || "-", 22),
+    truncate(asString(item.message) || "-", 40)
+  ]);
+  return formatTable(headers, rows2);
+}
+function formatActivitySummary(data, count) {
+  const meta = getActivityMeta(data);
+  if (!meta) {
+    return `${count} activity record${count === 1 ? "" : "s"} returned.`;
+  }
+  const total = meta.totalItems;
+  const page = meta.page;
+  const totalPages = meta.totalPages;
+  if (total !== void 0 && page !== void 0 && totalPages !== void 0) {
+    return `Page ${page} of ${totalPages}. ${total} total activity record${total === 1 ? "" : "s"}.`;
+  }
+  return `${count} activity record${count === 1 ? "" : "s"} returned.`;
+}
+
+// src/config/store.ts
+import { chmod, mkdir, readFile, unlink, writeFile } from "fs/promises";
+import { dirname, join } from "path";
+import envPaths from "env-paths";
+var CONFIG_FILENAME = "config.json";
+var STATE_FILENAME = "state.json";
+function getConfigPath() {
+  const paths = envPaths("peakurl", { suffix: "" });
+  const directory = process.platform === "darwin" ? paths.data : paths.config;
+  return join(directory, CONFIG_FILENAME);
+}
+function getStatePath() {
+  return join(envPaths("peakurl", { suffix: "" }).config, STATE_FILENAME);
+}
+async function ensureParentDir(filePath) {
+  const directory = dirname(filePath);
+  await mkdir(directory, { recursive: true, mode: 448 });
+  return directory;
+}
+var ConfigStore = class {
+  filePath;
+  /**
+   * Creates a config store bound to one on-disk file.
+   *
+   * @param filePath Optional override used by tests or advanced callers.
+   */
+  constructor(filePath = getConfigPath()) {
+    this.filePath = filePath;
+  }
+  /**
+   * Loads the stored credential set from disk.
+   *
+   * Missing files are treated as "not configured yet" instead of as hard
+   * errors so first-run CLI flows remain clean.
+   *
+   * @returns Stored config or `null` when the file does not exist.
+   * @throws {CliError} When the file exists but is unreadable or invalid.
+   */
+  async load() {
+    try {
+      const content = await readFile(this.filePath, "utf8");
+      const parsed = JSON.parse(content);
+      const apiBaseUrl = typeof parsed?.apiBaseUrl === "string" ? parsed.apiBaseUrl : typeof parsed?.baseUrl === "string" ? parsed.baseUrl : void 0;
+      if (typeof apiBaseUrl !== "string" || typeof parsed?.apiKey !== "string") {
+        throw new CliError(`Invalid config file: ${this.filePath}`);
+      }
+      return {
+        apiBaseUrl,
+        apiKey: parsed.apiKey
+      };
+    } catch (error) {
+      if (error instanceof Error && "code" in error && typeof error.code === "string" && error.code === "ENOENT") {
+        return null;
+      }
+      if (error instanceof CliError) {
+        throw error;
+      }
+      throw new CliError(
+        `Could not read PeakURL config at ${this.filePath}.`,
+        1,
+        {
+          cause: error instanceof Error ? error : void 0
+        }
+      );
+    }
+  }
+  /**
+   * Persists one credential set to disk with restrictive file permissions.
+   *
+   * The chmod step is best-effort because Windows and some filesystems do not
+   * expose POSIX permission bits in the same way as Unix-like systems.
+   *
+   * @param config Normalized credential set to write.
+   */
+  async save(config) {
+    const directory = await ensureParentDir(this.filePath);
+    await writeFile(this.filePath, `${JSON.stringify(config, null, 2)}
+`, {
+      mode: 384
+    });
+    try {
+      await chmod(directory, 448);
+      await chmod(this.filePath, 384);
+    } catch {
+    }
+  }
+  /**
+   * Removes the stored credential file.
+   *
+   * @returns `true` when a saved config file existed and was removed.
+   * @throws {CliError} When the file exists but cannot be removed.
+   */
+  async clear() {
+    try {
+      await unlink(this.filePath);
+      return true;
+    } catch (error) {
+      if (error instanceof Error && "code" in error && typeof error.code === "string" && error.code === "ENOENT") {
+        return false;
+      }
+      throw new CliError(
+        `Could not remove PeakURL config at ${this.filePath}.`,
+        1,
+        {
+          cause: error instanceof Error ? error : void 0
+        }
+      );
+    }
+  }
+};
+var StateStore = class {
+  filePath;
+  /**
+   * Creates a state store bound to one on-disk file.
+   *
+   * @param filePath Optional override used by tests or advanced callers.
+   */
+  constructor(filePath = getStatePath()) {
+    this.filePath = filePath;
+  }
+  /**
+   * Loads cached state from disk.
+   *
+   * Missing or invalid files are treated as empty state because the CLI can
+   * always recompute update metadata on the next successful network check.
+   *
+   * @returns Parsed state object or an empty object.
+   */
+  async load() {
+    try {
+      const content = await readFile(this.filePath, "utf8");
+      const parsed = JSON.parse(content);
+      return parsed && typeof parsed === "object" ? parsed : {};
+    } catch {
+      return {};
+    }
+  }
+  /**
+   * Persists cached state to disk.
+   *
+   * @param state State payload to save.
+   */
+  async save(state) {
+    const directory = await ensureParentDir(this.filePath);
+    await writeFile(this.filePath, `${JSON.stringify(state, null, 2)}
+`, {
+      mode: 384
+    });
+    try {
+      await chmod(directory, 448);
+      await chmod(this.filePath, 384);
+    } catch {
+    }
+  }
+};
+
+// src/lib/auth.ts
+var AUTH_REQUIRED_MESSAGE = "PeakURL credentials are not configured.";
+var EXAMPLE_BASE_URL = "https://example.com/api/v1";
+var EXAMPLE_API_KEY = "YOUR_API_KEY";
+function authRows(commandName) {
+  const retryCommand = commandName ? `peakurl ${commandName}` : "peakurl whoami";
+  const rows2 = [
+    [
+      "Save credentials",
+      `peakurl login --base-url ${EXAMPLE_BASE_URL}
+--api-key ${EXAMPLE_API_KEY}`,
+      "Regular use on this machine"
+    ],
+    [
+      "Set environment variables",
+      `PEAKURL_BASE_URL=${EXAMPLE_BASE_URL}
+PEAKURL_API_KEY=${EXAMPLE_API_KEY}`,
+      "CI, scripts, or one-off use"
+    ],
+    ["Then run", retryCommand, "After completing one of the steps above"]
+  ];
+  return rows2;
+}
+function getLoginConfig(input, env) {
+  const apiBaseUrl = input.baseUrl?.trim() || env.PEAKURL_BASE_URL?.trim();
+  const apiKey = input.apiKey?.trim() || env.PEAKURL_API_KEY?.trim();
+  if (!apiBaseUrl || !apiKey) {
+    throw new CliError(
+      "Missing credentials. Provide --base-url and --api-key, or set PEAKURL_BASE_URL and PEAKURL_API_KEY."
+    );
+  }
+  return {
+    apiBaseUrl: getApiBaseUrl(apiBaseUrl),
+    apiKey
+  };
 }
-function writeJson(value) {
-  writeStdout(JSON.stringify(value, null, 2));
+async function getAuthConfig(env, store = new ConfigStore()) {
+  const saved = await store.load();
+  const apiBaseUrl = env.PEAKURL_BASE_URL?.trim() || saved?.apiBaseUrl;
+  const apiKey = env.PEAKURL_API_KEY?.trim() || saved?.apiKey;
+  if (!apiBaseUrl || !apiKey) {
+    throw new CliError(AUTH_REQUIRED_MESSAGE, 1, {
+      kind: "auth_required"
+    });
+  }
+  return {
+    apiBaseUrl: getApiBaseUrl(apiBaseUrl),
+    apiKey
+  };
 }
 
 // src/lib/core.ts
+import { createHash } from "crypto";
+import {
+  chmod as chmod2,
+  copyFile,
+  lstat,
+  mkdir as mkdir2,
+  mkdtemp,
+  rm,
+  writeFile as writeFile2
+} from "fs/promises";
+import { tmpdir } from "os";
+import { dirname as dirname2, join as join2, resolve } from "path";
+import { posix as pathPosix } from "path";
+import { inflateRawSync } from "zlib";
 var DEFAULT_RELEASE_API_URL = "https://api.peakurl.org/v1/update";
 var DEFAULT_CORE_PACKAGE_URL = "https://peakurl.org/latest.zip";
 var EOCD_SIGNATURE = 101010256;
@@ -481,7 +852,7 @@ function getCorePackageUrl(env) {
     "package download"
   );
 }
-function asString(value) {
+function asString2(value) {
   return typeof value === "string" && value.trim() ? value.trim() : void 0;
 }
 function validateUrl(value, label) {
@@ -500,7 +871,7 @@ function validateUrl(value, label) {
   return parsed.toString();
 }
 function normalizeSha256(value) {
-  const candidate = asString(value)?.toLowerCase();
+  const candidate = asString2(value)?.toLowerCase();
   if (!candidate || !/^[a-f0-9]{64}$/.test(candidate)) {
     throw new CliError(
       "PeakURL release metadata is missing a valid SHA-256 checksum."
@@ -718,13 +1089,13 @@ async function getCoreRelease(env) {
     throw new CliError("PeakURL release metadata could not be loaded.");
   }
   const payload = await response.json();
-  const version = asString(payload.version) || "latest";
+  const version = asString2(payload.version) || "latest";
   return {
     version,
     downloadUrl: getCorePackageUrl(env),
     checksumSha256: normalizeSha256(payload.checksumSha256),
-    releasedAt: asString(payload.releasedAt),
-    releaseNotesUrl: asString(payload.releaseNotesUrl)
+    releasedAt: asString2(payload.releasedAt),
+    releaseNotesUrl: asString2(payload.releaseNotesUrl)
   };
 }
 async function downloadCorePackage(release, targetPath, force = false) {
@@ -793,17 +1164,23 @@ var EXPORT_HEADERS = [
   "created_at"
 ];
 function text(value) {
-  return typeof value === "string" ? value : "";
+  if (typeof value === "string") {
+    return value;
+  }
+  if (typeof value === "number" || typeof value === "boolean") {
+    return String(value);
+  }
+  return "";
 }
 function csvValue(value) {
-  const content = value == null ? "" : String(value);
+  const content = value === null || value === void 0 ? "" : text(value);
   if (/[",\r\n]/.test(content)) {
     return `"${content.replace(/"/g, '""')}"`;
   }
   return content;
 }
 function xmlValue(value) {
-  return String(value ?? "").replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
+  return text(value ?? "").replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
 }
 function aliasValue(link) {
   return text(link.alias) || text(link.shortCode);
@@ -1093,7 +1470,7 @@ function getImportFormat(filePath, value) {
   );
 }
 async function readImportRows(filePath, format) {
-  let textContent = "";
+  let textContent;
   try {
     textContent = await readFile2(filePath, "utf8");
   } catch (error) {
@@ -1138,53 +1515,53 @@ function formatImportSummary(data) {
 
 // src/lib/links.ts
 var LIST_KEYS = ["urls", "items", "results"];
-function asObject(value) {
+function asObject2(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
-function asString2(value) {
+function asString3(value) {
   return typeof value === "string" && value.trim() ? value.trim() : void 0;
 }
-function asNumber(value) {
+function asNumber2(value) {
   return typeof value === "number" && Number.isFinite(value) ? value : void 0;
 }
 function pickText(link, keys) {
   for (const key of keys) {
-    const value = asString2(link[key]);
+    const value = asString3(link[key]);
     if (value) {
       return value;
     }
   }
   return void 0;
 }
-function truncate(value, maxLength) {
+function truncate2(value, maxLength) {
   return value.length > maxLength ? `${value.slice(0, maxLength - 1)}\u2026` : value;
 }
 function getListMeta(data) {
-  const record = asObject(data);
+  const record = asObject2(data);
   if (!record) {
     return null;
   }
-  const meta = asObject(record.meta);
+  const meta = asObject2(record.meta);
   if (meta) {
     return {
-      page: asNumber(meta.page),
-      limit: asNumber(meta.limit),
-      totalItems: asNumber(meta.totalItems),
-      totalPages: asNumber(meta.totalPages)
+      page: asNumber2(meta.page),
+      limit: asNumber2(meta.limit),
+      totalItems: asNumber2(meta.totalItems),
+      totalPages: asNumber2(meta.totalPages)
     };
   }
   return {
-    page: asNumber(record.page),
-    limit: asNumber(record.limit),
-    totalItems: asNumber(record.total),
-    totalPages: asNumber(record.totalPages)
+    page: asNumber2(record.page),
+    limit: asNumber2(record.limit),
+    totalItems: asNumber2(record.total),
+    totalPages: asNumber2(record.totalPages)
   };
 }
 function extractLinks(data) {
   if (Array.isArray(data)) {
     return data;
   }
-  const record = asObject(data);
+  const record = asObject2(data);
   if (record) {
     for (const key of LIST_KEYS) {
       const value = record[key];
@@ -1221,14 +1598,14 @@ function formatLinkDetails(link) {
     ["Alias", getLinkAlias(link)],
     ["Short URL", getLinkShortUrl(link)],
     ["Destination", getLinkDestination(link)],
-    ["Title", asString2(link.title)],
-    ["Status", asString2(link.status)],
+    ["Title", asString3(link.title)],
+    ["Status", asString3(link.status)],
     [
       "Clicks",
-      asNumber(link.clicks) === void 0 ? void 0 : String(link.clicks)
+      asNumber2(link.clicks) === void 0 ? void 0 : String(link.clicks)
     ],
-    ["Created", asString2(link.createdAt)],
-    ["Updated", asString2(link.updatedAt)]
+    ["Created", asString3(link.createdAt)],
+    ["Updated", asString3(link.updatedAt)]
   ].filter((entry) => Boolean(entry[1]));
   if (rows2.length === 0) {
     return "No link fields returned.";
@@ -1241,11 +1618,11 @@ function formatLinksTable(links) {
   }
   const headers = ["ID", "Alias", "Short URL", "Destination", "Status"];
   const rows2 = links.map((link) => [
-    truncate(getLinkId(link) || "-", 18),
-    truncate(getLinkAlias(link) || "-", 12),
-    truncate(getLinkShortUrl(link) || "-", 36),
-    truncate(getLinkDestination(link) || "-", 52),
-    truncate(asString2(link.status) || "-", 12)
+    truncate2(getLinkId(link) || "-", 18),
+    truncate2(getLinkAlias(link) || "-", 12),
+    truncate2(getLinkShortUrl(link) || "-", 36),
+    truncate2(getLinkDestination(link) || "-", 52),
+    truncate2(asString3(link.status) || "-", 12)
   ]);
   return formatTable(headers, rows2);
 }
@@ -1527,6 +1904,33 @@ function locationRows(location) {
     row("Download command", text3(location.downloadCommand), 60)
   ]);
 }
+function cacheRows(cache) {
+  if (!cache) {
+    return [];
+  }
+  const redisEndpoint = cache.redis?.available || cache.redis?.configured ? `${text3(cache.redis.host) ?? "127.0.0.1"}:${formatCount(cache.redis.port) ?? "6379"}` : void 0;
+  const redisStatus = cache.redis?.available ? cache.redis.serverVersion ? `Connected (v${cache.redis.serverVersion})` : "Connected" : cache.redis?.configured ? "Configured, unavailable" : void 0;
+  const apcuStatus = cache.apcu?.available ? "Available" : cache.apcu?.extensionLoaded ? "Loaded, disabled" : cache.apcu !== void 0 && cache.apcu !== null ? "Missing" : void 0;
+  return rows([
+    row("Status", formatState(cache.status)),
+    row("Enabled", yesNo(cache.enabled, "Enabled", "Disabled")),
+    row("Active driver", text3(cache.activeDriver)),
+    row("Configured driver", text3(cache.configuredDriver)),
+    row("Cache size", formatSize(cache.sizeBytes)),
+    row(
+      cache.activeDriver === "redis" || cache.activeDriver === "apcu" ? "Cached items" : "Cached files",
+      formatCount(cache.fileCount)
+    ),
+    row("Default TTL", formatSeconds(cache.defaultTtl)),
+    row("Negative TTL", formatSeconds(cache.negativeTtl)),
+    row("Cache directory", text3(cache.path), 60),
+    row("Directory exists", yesNo(cache.directoryExists)),
+    row("Directory writable", yesNo(cache.writable)),
+    row("Redis server", redisEndpoint),
+    row("Redis status", redisStatus),
+    row("APCu extension", apcuStatus)
+  ]);
+}
 function dataRows(data) {
   if (!data) {
     return [];
@@ -1575,6 +1979,7 @@ ${checks}` : void 0,
     section("Storage", storageRows(status2.storage)),
     section("Mail", mailRows(status2.mail)),
     section("Location", locationRows(status2.location)),
+    section("Cache", cacheRows(status2.cache)),
     section("Data", dataRows(status2.data))
   ].filter((value) => Boolean(value));
   return sections.length > 0 ? sections.join("\n\n") : "No system status fields returned.";
@@ -1846,7 +2251,7 @@ function text5(value) {
 function textList(value) {
   return Array.isArray(value) ? value.map((item) => text5(item)).filter((item) => Boolean(item)) : [];
 }
-function truncate2(value, maxLength) {
+function truncate3(value, maxLength) {
   return value.length > maxLength ? `${value.slice(0, maxLength - 1)}\u2026` : value;
 }
 function parseWebhookEvents(value, previous = []) {
@@ -1885,287 +2290,179 @@ function formatWebhookEventsTable() {
       event.description
     ])
   );
-}
-function formatWebhooksTable(webhooks) {
-  if (webhooks.length === 0) {
-    return "No webhooks found.";
-  }
-  return formatTable(
-    ["ID", "URL", "Events", "Status", "Secret"],
-    webhooks.map((webhook) => [
-      truncate2(getWebhookId(webhook) || "-", 18),
-      truncate2(getWebhookUrl(webhook) || "-", 42),
-      truncate2(getWebhookEvents(webhook).join(", ") || "-", 30),
-      webhook.isActive === false ? "inactive" : "active",
-      truncate2(text5(webhook.secretHint) || "-", 18)
-    ])
-  );
-}
-function formatWebhookDetails(webhook) {
-  const rows2 = [
-    ["ID", getWebhookId(webhook)],
-    ["URL", getWebhookUrl(webhook)],
-    [
-      "Events",
-      getWebhookEvents(webhook).length > 0 ? getWebhookEvents(webhook).join(", ") : void 0
-    ],
-    ["Status", webhook.isActive === false ? "inactive" : "active"],
-    ["Secret", text5(webhook.secret)],
-    ["Secret Hint", text5(webhook.secretHint)],
-    ["Created", text5(webhook.createdAt)]
-  ].filter((entry) => Boolean(entry[1]));
-  if (rows2.length === 0) {
-    return "No webhook fields returned.";
-  }
-  return formatDetailsTable(rows2);
-}
-function formatWebhooksSummary(webhooks) {
-  return `${webhooks.length} webhook${webhooks.length === 1 ? "" : "s"} returned.`;
-}
-
-// src/commands/core.ts
-async function downloadCore(options) {
-  const release = await getCoreRelease(process.env);
-  const result = await downloadCorePackage(
-    release,
-    cwd(),
-    Boolean(options.force)
-  );
-  const responseBody = {
-    success: true,
-    message: "PeakURL downloaded.",
-    data: result,
-    timestamp: (/* @__PURE__ */ new Date()).toISOString()
-  };
-  if (options.json) {
-    writeJson(responseBody);
-    return;
-  }
-  if (options.quiet) {
-    writeStdout(result.path);
-    return;
-  }
-  writeStdout(successLine(responseBody.message));
-  writeStdout(formatCoreDownload(result));
-}
-
-// src/commands/links.ts
-import { mkdir as mkdir3, writeFile as writeFile3 } from "fs/promises";
-import { dirname as dirname3, resolve as resolve2 } from "path";
-
-// src/api/client.ts
-function isApiResponse(value) {
-  return Boolean(
-    value && typeof value === "object" && "success" in value && "message" in value && "timestamp" in value
-  );
-}
-function networkError(apiBaseUrl, error) {
-  if (error instanceof Error && error.message) {
-    return `Could not reach PeakURL at ${apiBaseUrl}. ${error.message}`;
-  }
-  return `Could not reach PeakURL at ${apiBaseUrl}.`;
-}
-var ApiClient = class {
-  /**
-   * Creates a client bound to one resolved credential set.
-   *
-   * @param config Explicit API base URL plus bearer API key.
-   */
-  constructor(config) {
-    this.config = config;
-  }
-  config;
-  /**
-   * Loads the currently authenticated user.
-   *
-   * PeakURL accepts bearer API keys on `GET /users/me`, which is also the
-   * CLI login verification flow.
-   *
-   * @returns API response envelope containing the authenticated user.
-   */
-  whoami() {
-    return this.request("GET", "users/me");
-  }
-  /**
-   * Loads the current system status snapshot for the authenticated site.
-   *
-   * @returns API response envelope containing system status sections.
-   */
-  getStatus() {
-    return this.request("GET", "system/status");
-  }
-  /**
-   * Creates a short URL.
-   *
-   * @param payload Request body accepted by `POST /api/v1/urls`.
-   * @returns API response envelope containing the created link.
-   */
-  createUrl(payload) {
-    return this.request("POST", "urls", payload);
-  }
-  /**
-   * Lists short URLs with optional pagination and filtering.
-   *
-   * The current PeakURL app returns `{ items, meta }` under `data`, but the
-   * CLI keeps a slightly broader compatibility type for future-proofing.
-   *
-   * @param query Optional query-string values.
-   * @returns API response envelope containing list data.
-   */
-  listUrls(query) {
-    return this.request("GET", "urls", void 0, query);
-  }
-  /**
-   * Exports the full accessible link dataset for the authenticated user.
-   *
-   * @param query Optional search and sort values.
-   * @returns API response envelope containing the full export payload.
-   */
-  exportUrls(query) {
-    return this.request(
-      "GET",
-      "urls/export",
-      void 0,
-      query
-    );
-  }
-  /**
-   * Imports multiple short links in one bulk request.
-   *
-   * @param payload Request body accepted by `POST /api/v1/urls/bulk`.
-   * @returns API response envelope containing created rows plus row errors.
-   */
-  importUrls(payload) {
-    return this.request("POST", "urls/bulk", payload);
-  }
-  /**
-   * Loads a single short URL by identifier or alias.
-   *
-   * PeakURL resolves IDs, short codes, and aliases through the same route.
-   *
-   * @param idOrAlias Link identifier, short code, or alias.
-   * @returns API response envelope containing the resolved link.
-   */
-  getUrl(idOrAlias) {
-    return this.request(
-      "GET",
-      `urls/${encodeURIComponent(idOrAlias)}`
-    );
+}
+function formatWebhooksTable(webhooks) {
+  if (webhooks.length === 0) {
+    return "No webhooks found.";
   }
-  /**
-   * Deletes a short URL by its stable row ID.
-   *
-   * The current PeakURL backend delete route expects the row ID. The CLI can
-   * still accept an alias at the command layer by resolving it first.
-   *
-   * @param id Stable link row ID.
-   * @returns API response envelope containing the deletion result.
-   */
-  deleteUrl(id) {
-    return this.request(
-      "DELETE",
-      `urls/${encodeURIComponent(id)}`
-    );
+  return formatTable(
+    ["ID", "URL", "Events", "Status", "Secret"],
+    webhooks.map((webhook) => [
+      truncate3(getWebhookId(webhook) || "-", 18),
+      truncate3(getWebhookUrl(webhook) || "-", 42),
+      truncate3(getWebhookEvents(webhook).join(", ") || "-", 30),
+      webhook.isActive === false ? "inactive" : "active",
+      truncate3(text5(webhook.secretHint) || "-", 18)
+    ])
+  );
+}
+function formatWebhookDetails(webhook) {
+  const rows2 = [
+    ["ID", getWebhookId(webhook)],
+    ["URL", getWebhookUrl(webhook)],
+    [
+      "Events",
+      getWebhookEvents(webhook).length > 0 ? getWebhookEvents(webhook).join(", ") : void 0
+    ],
+    ["Status", webhook.isActive === false ? "inactive" : "active"],
+    ["Secret", text5(webhook.secret)],
+    ["Secret Hint", text5(webhook.secretHint)],
+    ["Created", text5(webhook.createdAt)]
+  ].filter((entry) => Boolean(entry[1]));
+  if (rows2.length === 0) {
+    return "No webhook fields returned.";
   }
-  /**
-   * Lists outbound webhooks for the authenticated user.
-   *
-   * @returns API response envelope containing webhook rows.
-   */
-  listWebhooks() {
-    return this.request("GET", "webhooks");
+  return formatDetailsTable(rows2);
+}
+function formatWebhooksSummary(webhooks) {
+  return `${webhooks.length} webhook${webhooks.length === 1 ? "" : "s"} returned.`;
+}
+
+// src/commands/activity.ts
+async function listActivity(options) {
+  const config = await getAuthConfig(process.env);
+  const response = await new ApiClient(config).listActivity({
+    page: options.page,
+    limit: options.limit,
+    search: options.search
+  });
+  const items = extractActivity(response.data);
+  if (options.json) {
+    writeJson(response);
+    return;
   }
-  /**
-   * Creates one outbound webhook subscription.
-   *
-   * @param payload Request body accepted by `POST /api/v1/webhooks`.
-   * @returns API response envelope containing the created webhook.
-   */
-  createWebhook(payload) {
-    return this.request("POST", "webhooks", payload);
+  if (options.quiet) {
+    for (const item of items) {
+      if (item.id) {
+        writeStdout(String(item.id));
+      }
+    }
+    return;
   }
-  /**
-   * Deletes one webhook by its stable row ID.
-   *
-   * @param id Webhook identifier returned by the list/create endpoints.
-   * @returns API response envelope containing the deletion result.
-   */
-  deleteWebhook(id) {
-    return this.request(
-      "DELETE",
-      `webhooks/${encodeURIComponent(id)}`
+  writeStdout(successLine(response.message || "Activity loaded."));
+  writeStdout(formatActivityTable(items));
+  writeStdout(formatActivitySummary(response.data, items.length));
+}
+async function deleteActivity(identifiers, options) {
+  const config = await getAuthConfig(process.env);
+  const client = new ApiClient(config);
+  if (options.all) {
+    const response2 = await client.clearActivity();
+    if (options.json) {
+      writeJson(response2);
+      return;
+    }
+    if (options.quiet) {
+      return;
+    }
+    writeStdout(
+      successLine(response2.message || "All activity logs deleted.")
     );
+    return;
   }
-  /**
-   * Performs one authenticated API request and normalizes the response.
-   *
-   * @param method HTTP method to send.
-   * @param path Route path relative to `/api/v1`.
-   * @param body Optional JSON body.
-   * @param query Optional query-string values.
-   * @returns Parsed PeakURL response envelope.
-   * @throws {CliError} When the network request fails or the API returns an error.
-   */
-  async request(method, path, body, query) {
-    const url = buildApiUrl(this.config.apiBaseUrl, path, query);
-    let response;
-    try {
-      response = await fetch(url, {
-        method,
-        headers: {
-          Accept: "application/json",
-          Authorization: `Bearer ${this.config.apiKey}`,
-          ...body ? { "Content-Type": "application/json" } : {}
-        },
-        body: body ? JSON.stringify(body) : void 0
-      });
-    } catch (error) {
-      throw new CliError(networkError(this.config.apiBaseUrl, error), 1, {
-        cause: error instanceof Error ? error : void 0
-      });
-    }
-    const rawText = await response.text();
-    if (!rawText) {
-      if (!response.ok) {
-        throw new CliError(
-          `PeakURL request failed with HTTP ${response.status}.`
-        );
+  const rawTargets = [];
+  if (typeof identifiers === "string" && identifiers.trim()) {
+    rawTargets.push(identifiers.trim());
+  } else if (Array.isArray(identifiers)) {
+    for (const item of identifiers) {
+      if (typeof item === "string" && item.trim()) {
+        rawTargets.push(item.trim());
       }
-      return {
-        success: true,
-        message: "Request completed.",
-        data: void 0,
-        timestamp: (/* @__PURE__ */ new Date()).toISOString()
-      };
     }
-    let parsed;
-    try {
-      parsed = JSON.parse(rawText);
-    } catch {
-      if (!response.ok) {
-        throw new CliError(
-          `PeakURL request failed with HTTP ${response.status}.`
-        );
+  }
+  if (options.ids) {
+    for (const id of options.ids.split(",")) {
+      const trimmed = id.trim();
+      if (trimmed) {
+        rawTargets.push(trimmed);
       }
-      throw new CliError("PeakURL returned an invalid JSON response.");
     }
-    if (!isApiResponse(parsed)) {
-      throw new CliError(
-        "PeakURL returned an unexpected response envelope."
-      );
+  }
+  const uniqueTargets = Array.from(new Set(rawTargets));
+  if (uniqueTargets.length === 0) {
+    throw new CliError(
+      "Specify one or more activity IDs to delete, or use --all to delete all activity logs."
+    );
+  }
+  if (uniqueTargets.length === 1) {
+    const response2 = await client.deleteActivity(uniqueTargets[0]);
+    if (options.json) {
+      writeJson(response2);
+      return;
     }
-    if (!response.ok || !parsed.success) {
-      const statusCode = response.status === 401 ? 2 : 1;
-      throw new CliError(
-        parsed.message || `PeakURL request failed with HTTP ${response.status}.`,
-        statusCode
-      );
+    if (options.quiet) {
+      return;
     }
-    return parsed;
+    writeStdout(successLine(response2.message || "Activity log deleted."));
+    return;
   }
-};
+  const response = await client.deleteActivityBulk(uniqueTargets);
+  if (options.json) {
+    writeJson(response);
+    return;
+  }
+  if (options.quiet) {
+    return;
+  }
+  writeStdout(
+    successLine(
+      response.message || `Deleted ${uniqueTargets.length} activity record${uniqueTargets.length === 1 ? "" : "s"}.`
+    )
+  );
+}
+async function clearActivity(options) {
+  const config = await getAuthConfig(process.env);
+  const response = await new ApiClient(config).clearActivity();
+  if (options.json) {
+    writeJson(response);
+    return;
+  }
+  if (options.quiet) {
+    return;
+  }
+  writeStdout(successLine(response.message || "All activity logs deleted."));
+}
+
+// src/commands/core.ts
+import { cwd } from "process";
+async function downloadCore(options) {
+  const release = await getCoreRelease(process.env);
+  const result = await downloadCorePackage(
+    release,
+    cwd(),
+    Boolean(options.force)
+  );
+  const responseBody = {
+    success: true,
+    message: "PeakURL downloaded.",
+    data: result,
+    timestamp: (/* @__PURE__ */ new Date()).toISOString()
+  };
+  if (options.json) {
+    writeJson(responseBody);
+    return;
+  }
+  if (options.quiet) {
+    writeStdout(result.path);
+    return;
+  }
+  writeStdout(successLine(responseBody.message));
+  writeStdout(formatCoreDownload(result));
+}
 
 // src/commands/links.ts
+import { mkdir as mkdir3, writeFile as writeFile3 } from "fs/promises";
+import { dirname as dirname3, resolve as resolve2 } from "path";
 function normalizeExpiresAt(value) {
   if (!value) {
     return void 0;
@@ -2308,17 +2605,93 @@ async function getLink(idOrAlias, options) {
   writeStdout(successLine(response.message));
   writeStdout(formatLinkDetails(response.data));
 }
-async function deleteLink(idOrAlias, options) {
+async function deleteLink(identifiers, options) {
   const config = await getAuthConfig(process.env);
   const client = new ApiClient(config);
-  const lookupResponse = await client.getUrl(idOrAlias);
-  const resolvedId = getLinkId(lookupResponse.data);
-  if (!resolvedId) {
+  if (options.all) {
+    const response2 = await client.clearUrls();
+    if (options.json) {
+      writeJson(response2);
+      return;
+    }
+    if (options.quiet) {
+      return;
+    }
+    writeStdout(
+      successLine(response2.message || "All short links deleted.")
+    );
+    return;
+  }
+  if (options.trash || options.emptyTrash) {
+    const response2 = await client.emptyTrash();
+    if (options.json) {
+      writeJson(response2);
+      return;
+    }
+    if (options.quiet) {
+      return;
+    }
+    writeStdout(successLine(response2.message || "Trash emptied."));
+    return;
+  }
+  const rawTargets = [];
+  if (typeof identifiers === "string" && identifiers.trim()) {
+    rawTargets.push(identifiers.trim());
+  } else if (Array.isArray(identifiers)) {
+    for (const item of identifiers) {
+      if (typeof item === "string" && item.trim()) {
+        rawTargets.push(item.trim());
+      }
+    }
+  }
+  if (options.ids) {
+    for (const id of options.ids.split(",")) {
+      const trimmed = id.trim();
+      if (trimmed) {
+        rawTargets.push(trimmed);
+      }
+    }
+  }
+  const uniqueTargets = Array.from(new Set(rawTargets));
+  if (uniqueTargets.length === 0) {
     throw new CliError(
-      "PeakURL returned a link record without an ID, so the CLI cannot delete it safely."
+      "Specify one or more link identifiers or aliases to delete, or use --all to delete all links."
     );
   }
-  const response = await client.deleteUrl(resolvedId);
+  if (uniqueTargets.length === 1) {
+    const lookupResponse = await client.getUrl(uniqueTargets[0]);
+    const resolvedId = getLinkId(lookupResponse.data);
+    if (!resolvedId) {
+      throw new CliError(
+        "PeakURL returned a link record without an ID, so the CLI cannot delete it safely."
+      );
+    }
+    const response2 = await client.deleteUrl(resolvedId);
+    if (options.json) {
+      writeJson(response2);
+      return;
+    }
+    if (options.quiet) {
+      return;
+    }
+    writeStdout(successLine(response2.message));
+    return;
+  }
+  const resolvedIds = [];
+  for (const target of uniqueTargets) {
+    try {
+      const lookup = await client.getUrl(target);
+      const id = getLinkId(lookup.data);
+      if (id) {
+        resolvedIds.push(id);
+      } else {
+        resolvedIds.push(target);
+      }
+    } catch {
+      resolvedIds.push(target);
+    }
+  }
+  const response = await client.deleteUrlsBulk(resolvedIds);
   if (options.json) {
     writeJson(response);
     return;
@@ -2326,7 +2699,11 @@ async function deleteLink(idOrAlias, options) {
   if (options.quiet) {
     return;
   }
-  writeStdout(successLine(response.message));
+  writeStdout(
+    successLine(
+      response.message || `Deleted ${resolvedIds.length} short link${resolvedIds.length === 1 ? "" : "s"}.`
+    )
+  );
 }
 
 // src/commands/login.ts
@@ -2513,7 +2890,7 @@ async function deleteWebhook(id, options) {
   }
   writeStdout(successLine(response.message));
 }
-async function listWebhookEvents(options) {
+function listWebhookEvents(options) {
   const response = {
     success: true,
     message: "Webhook events loaded.",
@@ -2584,7 +2961,7 @@ function getRetryCommandName(argv) {
   if (!first || first.startsWith("-")) {
     return void 0;
   }
-  if (first === "webhook" || first === "webhooks") {
+  if (first === "webhook" || first === "webhooks" || first === "activity" || first === "activities") {
     const second = argv[3]?.trim();
     if (second && !second.startsWith("-")) {
       return `${first} ${second}`;
@@ -2710,8 +3087,57 @@ Run 'peakurl <command> --help' for command-specific flags and examples.`
     ["peakurl get docs", "peakurl get url_123 --json"]
   );
   addExamples(
-    program.command("delete").summary("Delete one short link").description("Delete a PeakURL short link by id or alias.").helpOption("-h, --help", "Show help").argument("<id-or-alias>", "Link identifier or alias").option("--json", "Print machine-readable output").option("--quiet", "Suppress success output").action(deleteLink),
-    ["peakurl delete docs", "peakurl delete url_123 --quiet"]
+    program.command("delete").summary("Delete short links").description(
+      "Delete PeakURL short links by ID or alias, in bulk, or clear all links."
+    ).helpOption("-h, --help", "Show help").argument("[id-or-alias...]", "Link identifier(s) or alias(es)").option("--all", "Delete all accessible short links").option(
+      "--trash, --empty-trash",
+      "Empty all short links currently in trash"
+    ).option(
+      "--ids <ids>",
+      "Comma-separated list of link IDs to bulk delete"
+    ).option("--json", "Print machine-readable output").option("--quiet", "Suppress success output").action(deleteLink),
+    [
+      "peakurl delete docs",
+      "peakurl delete docs pricing launch",
+      "peakurl delete --ids url_1,url_2,url_3",
+      "peakurl delete --empty-trash",
+      "peakurl delete --all"
+    ]
+  );
+  const activity = program.command("activity").alias("activities").summary("View and manage activity logs").helpOption("-h, --help", "Show help").description(
+    "View audit log activity entries, delete specific records, or clear all history."
+  );
+  addExamples(activity, [
+    "peakurl activity list",
+    "peakurl activity delete act_123 act_456",
+    "peakurl activity clear"
+  ]);
+  addExamples(
+    activity.command("list", { isDefault: true }).summary("List activity logs").description("List audit log activity records.").helpOption("-h, --help", "Show help").option("--page <number>", "Page number", parseNumber("page")).option("--limit <number>", "Page size", parseNumber("limit")).option("--search <query>", "Search term").option("--json", "Print machine-readable output").option("--quiet", "Print only activity record IDs").action(listActivity),
+    [
+      "peakurl activity",
+      "peakurl activity list",
+      "peakurl activity list --limit 25 --page 1",
+      "peakurl activity list --search delete --json"
+    ]
+  );
+  addExamples(
+    activity.command("delete").summary("Delete activity logs").description(
+      "Delete one or more activity logs by ID, or clear all logs with --all."
+    ).helpOption("-h, --help", "Show help").argument("[ids...]", "One or more activity log IDs to delete").option("--all", "Delete all activity log history").option(
+      "--ids <ids>",
+      "Comma-separated list of activity log IDs to delete"
+    ).option("--json", "Print machine-readable output").option("--quiet", "Suppress success output").action(deleteActivity),
+    [
+      "peakurl activity delete act_123",
+      "peakurl activity delete act_123 act_456",
+      "peakurl activity delete --ids act_1,act_2",
+      "peakurl activity delete --all"
+    ]
+  );
+  addExamples(
+    activity.command("clear").summary("Clear all activity logs").description("Delete all audit log activity records permanently.").helpOption("-h, --help", "Show help").option("--json", "Print machine-readable output").option("--quiet", "Suppress success output").action(clearActivity),
+    ["peakurl activity clear", "peakurl activity clear --json"]
   );
   addExamples(
     program.command("update").summary("Check for CLI updates").description(
@@ -2719,18 +3145,25 @@ Run 'peakurl <command> --help' for command-specific flags and examples.`
     ).helpOption("-h, --help", "Show help").option(
       "--check",
       "Alias for checking update status without changing anything"
-    ).option("--json", "Print machine-readable output").option("--quiet", "Print minimal output").action((options) => checkUpdate(options, version)),
+    ).option("--json", "Print machine-readable output").option("--quiet", "Print minimal output").action(
+      (options) => checkUpdate(options, version)
+    ),
     ["peakurl update", "peakurl update --check", "peakurl update --json"]
   );
   const webhook = program.command("webhook").alias("webhooks").summary("Manage webhooks").helpOption("-h, --help", "Show help").description("Manage outbound webhook integrations.");
   addExamples(webhook, [
+    "peakurl webhook",
     "peakurl webhook list",
     "peakurl webhook create https://example.com/api/webhooks/peakurl --event link.clicked",
     "peakurl webhook events"
   ]);
   addExamples(
-    webhook.command("list").summary("List webhooks").description("List outbound webhooks.").helpOption("-h, --help", "Show help").option("--json", "Print machine-readable output").option("--quiet", "Print minimal webhook identifiers").action(listWebhooks),
-    ["peakurl webhook list", "peakurl webhook list --json"]
+    webhook.command("list", { isDefault: true }).summary("List webhooks").description("List outbound webhooks.").helpOption("-h, --help", "Show help").option("--json", "Print machine-readable output").option("--quiet", "Print minimal webhook identifiers").action(listWebhooks),
+    [
+      "peakurl webhook",
+      "peakurl webhook list",
+      "peakurl webhook list --json"
+    ]
   );
   addExamples(
     webhook.command("create").summary("Create a webhook").description("Create an outbound webhook.").helpOption("-h, --help", "Show help").argument("<url>", "Webhook endpoint URL").option(