squidcloudctl 1.2.0 → 3.0.0

package/dist/chunk-YRSMMECJ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/scripts/scripts-watch.ts"],"names":["scriptsWatch","args"],"mappings":"AAAA,eAAOA,KAAuCC,CAAAA,CAAgC,CAC5E,OAAA,CAAQ,GAAA,CAAI,6BAA6B,EAC3C","file":"chunk-YRSMMECJ.js","sourcesContent":["export default async function scriptsWatch(...args: unknown[]): Promise<void> {\n  console.log('Command not yet implemented')\n}\n"]}

package/dist/chunk-Z4BTW3UI.js

@@ -0,0 +1,2 @@
+async function e(...n){console.log("Command not yet implemented");}export{e as a};//# sourceMappingURL=chunk-Z4BTW3UI.js.map
+//# sourceMappingURL=chunk-Z4BTW3UI.js.map

package/dist/chunk-Z4BTW3UI.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/util/feedback.ts"],"names":["feedback","args"],"mappings":"AAAA,eAAOA,KAAmCC,CAAAA,CAAgC,CACxE,OAAA,CAAQ,GAAA,CAAI,6BAA6B,EAC3C","file":"chunk-Z4BTW3UI.js","sourcesContent":["export default async function feedback(...args: unknown[]): Promise<void> {\n  console.log('Command not yet implemented')\n}\n"]}

package/dist/chunk-ZGBTOZ7M.js

@@ -0,0 +1,2 @@
+async function o(...n){console.log("Command not yet implemented");}export{o as a};//# sourceMappingURL=chunk-ZGBTOZ7M.js.map
+//# sourceMappingURL=chunk-ZGBTOZ7M.js.map

package/dist/chunk-ZGBTOZ7M.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/forms/forms-submissions.ts"],"names":["formsSubmissions","args"],"mappings":"AAAA,eAAOA,KAA2CC,CAAAA,CAAgC,CAChF,OAAA,CAAQ,GAAA,CAAI,6BAA6B,EAC3C","file":"chunk-ZGBTOZ7M.js","sourcesContent":["export default async function formsSubmissions(...args: unknown[]): Promise<void> {\n  console.log('Command not yet implemented')\n}\n"]}

package/dist/chunk-ZQ2OIVG3.js

@@ -0,0 +1,2 @@
+import {m,n as n$1}from'./chunk-WVCLY4PF.js';import {randomBytes,createHash}from'crypto';import n from'os';import o,{existsSync,readFileSync}from'fs';import {blake3}from'@noble/hashes/blake3.js';import f from'path';import {randomBytes as randomBytes$1}from'@noble/hashes/utils.js';import {sha256}from'@noble/hashes/sha2.js';import {hkdf}from'@noble/hashes/hkdf.js';import {gcm}from'@noble/ciphers/aes.js';var D=["/etc/machine-id","/var/lib/dbus/machine-id","/etc/hostid"];function F(){for(let t of D)try{if(existsSync(t))return readFileSync(t,"utf-8").trim()}catch{continue}return createHash("sha256").update(n.hostname()+n.arch()+n.platform()).digest("hex")}function p(){let i=[F(),n.hostname(),n.platform(),n.arch(),n.release()].join(":");return m(blake3(i))}function N(){return randomBytes(32).toString("hex")}var d=f.join(n.homedir(),".squidcloud"),s=f.join(d,".session");function S(){let e=p(),t=new TextEncoder().encode(e);return hkdf(sha256,t,new Uint8Array(32),"squidcloud-fallback-v1",32)}async function y(e){let t=S(),i=randomBytes$1(12),a=new TextEncoder().encode(e),m$1=gcm(t,i).encrypt(a);o.existsSync(d)||o.mkdirSync(d,{recursive:true,mode:448});let g={iv:m(i),data:m(m$1)};o.writeFileSync(s,JSON.stringify(g),{mode:384,encoding:"utf-8"});}async function x(){try{if(!o.existsSync(s))return null;let e=o.readFileSync(s,"utf-8"),{iv:t,data:i}=JSON.parse(e),a=S(),m=gcm(a,n$1(t)).decrypt(n$1(i));return new TextDecoder().decode(m)}catch{return null}}async function c(){try{o.existsSync(s)&&o.unlinkSync(s);}catch{}}async function W(){try{let e=await x();if(!e)return null;let t=JSON.parse(e);return !t.session_id||!t.access_token?(await c(),null):t}catch{return await c(),null}}async function X(e){await y(JSON.stringify(e));}async function Y(){await c();}function Z(e){return Date.now()>=e.expires_at}function $(e){return e.expires_at-Date.now()<=12e4}function ee(e){return e.expires_at-Date.now()}export{p as a,N as b,y as c,x as d,c as e,W as f,X as g,Y as h,Z as i,$ as j,ee as k};//# sourceMappingURL=chunk-ZQ2OIVG3.js.map
+//# sourceMappingURL=chunk-ZQ2OIVG3.js.map

package/dist/chunk-ZQ2OIVG3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/auth/fingerprint.ts","../src/lib/auth/keychain.ts","../src/lib/auth/session.ts"],"names":["MACHINE_ID_PATHS","getMachineId","p","existsSync","readFileSync","createHash","os","computeDeviceFingerprint","data","bytesToHex","blake3","generateDeviceId","randomBytes","FALLBACK_DIR","path","FALLBACK_FILE","getFallbackKey","fingerprint","ikm","hkdf","sha256","storeSession","sessionJson","key","iv","plaintext","encrypted","gcm","fs","payload","getSession","raw","decrypted","hexToBytes","deleteSession","loadSession","session","saveSession","clearSession","isSessionExpired","shouldRefreshToken","getTimeUntilExpiry"],"mappings":"qZAMA,IAAMA,CAAAA,CAAmB,CACvB,iBAAA,CACA,0BAAA,CACA,aACF,CAAA,CAEA,SAASC,GAAuB,CAC9B,IAAA,IAAWC,KAAKF,CAAAA,CACd,GAAI,CACF,GAAIG,UAAAA,CAAWD,CAAC,EACd,OAAOE,YAAAA,CAAaF,EAAG,OAAO,CAAA,CAAE,MAEpC,CAAA,KAAQ,CACN,QACF,CAGF,OADUG,WAAW,QAAQ,CAAA,CAAE,OAAOC,CAAAA,CAAG,QAAA,GAAaA,CAAAA,CAAG,IAAA,EAAK,CAAIA,CAAAA,CAAG,QAAA,EAAU,EAAE,MAAA,CAAO,KAAK,CAE/F,CAEO,SAASC,GAAmC,CASjD,IAAMC,CAAAA,CAPa,CADDP,CAAAA,EAAa,CAG7BK,EAAG,QAAA,EAAS,CACZA,EAAG,QAAA,EAAS,CACZA,EAAG,IAAA,EAAK,CACRA,CAAAA,CAAG,OAAA,EACL,CAAA,CACwB,KAAK,GAAG,CAAA,CAChC,OAAOG,CAAAA,CAAWC,MAAAA,CAAOF,CAAI,CAAC,CAChC,CAEO,SAASG,CAAAA,EAA2B,CACzC,OAAOC,WAAAA,CAAY,EAAE,EAAE,QAAA,CAAS,KAAK,CACvC,CC9BA,IAAMC,CAAAA,CAAeC,CAAAA,CAAK,IAAA,CAAKR,CAAAA,CAAG,OAAA,GAAW,aAAa,CAAA,CACpDS,EAAgBD,CAAAA,CAAK,IAAA,CAAKD,EAAc,UAAU,CAAA,CAExD,SAASG,CAAAA,EAA6B,CACpC,IAAMC,EAAcV,CAAAA,EAAyB,CACvCW,EAAM,IAAI,WAAA,GAAc,MAAA,CAAOD,CAAW,CAAA,CAChD,OAAOE,IAAAA,CAAKC,MAAAA,CAAQF,EAAK,IAAI,UAAA,CAAW,EAAE,CAAA,CAAG,wBAAA,CAA0B,EAAE,CAC3E,CAEA,eAAsBG,CAAAA,CAAaC,CAAAA,CAAoC,CACrE,IAAMC,CAAAA,CAAMP,CAAAA,GACNQ,CAAAA,CAAKZ,aAAAA,CAAY,EAAE,CAAA,CACnBa,CAAAA,CAAY,IAAI,WAAA,EAAY,CAAE,MAAA,CAAOH,CAAW,CAAA,CAEhDI,GAAAA,CADMC,IAAIJ,CAAAA,CAAKC,CAAE,EACD,OAAA,CAAQC,CAAS,CAAA,CAClCG,CAAAA,CAAG,UAAA,CAAWf,CAAY,GAC7Be,CAAAA,CAAG,SAAA,CAAUf,EAAc,CAAE,SAAA,CAAW,KAAM,IAAA,CAAM,GAAM,CAAC,CAAA,CAE7D,IAAMgB,EAAU,CACd,EAAA,CAAIpB,EAAWe,CAAE,CAAA,CACjB,KAAMf,CAAAA,CAAWiB,GAAS,CAC5B,CAAA,CACAE,CAAAA,CAAG,aAAA,CAAcb,EAAe,IAAA,CAAK,SAAA,CAAUc,CAAO,CAAA,CAAG,CAAE,KAAM,GAAA,CAAO,QAAA,CAAU,OAAQ,CAAC,EAC7F,CAEA,eAAsBC,CAAAA,EAAqC,CACzD,GAAI,CACF,GAAI,CAACF,CAAAA,CAAG,UAAA,CAAWb,CAAa,CAAA,CAAG,OAAO,IAAA,CAC1C,IAAMgB,CAAAA,CAAMH,CAAAA,CAAG,aAAab,CAAAA,CAAe,OAAO,EAC5C,CAAE,EAAA,CAAAS,CAAAA,CAAI,IAAA,CAAAhB,CAAK,CAAA,CAAI,KAAK,KAAA,CAAMuB,CAAG,EAC7BR,CAAAA,CAAMP,CAAAA,GAENgB,CAAAA,CADML,GAAAA,CAAIJ,CAAAA,CAAKU,GAAAA,CAAWT,CAAE,CAAC,EACb,OAAA,CAAQS,GAAAA,CAAWzB,CAAI,CAAC,CAAA,CAC9C,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAOwB,CAAS,CAC3C,MAAQ,CACN,OAAO,IACT,CACF,CAEA,eAAsBE,CAAAA,EAA+B,CACnD,GAAI,CACEN,CAAAA,CAAG,UAAA,CAAWb,CAAa,CAAA,EAC7Ba,CAAAA,CAAG,WAAWb,CAAa,EAE/B,MAAQ,CAER,CACF,CCvDA,eAAsBoB,CAAAA,EAA4C,CAChE,GAAI,CACF,IAAMJ,EAAM,MAAMD,CAAAA,GAClB,GAAI,CAACC,CAAAA,CAAK,OAAO,IAAA,CACjB,IAAMK,EAAU,IAAA,CAAK,KAAA,CAAML,CAAG,CAAA,CAC9B,OAAI,CAACK,CAAAA,CAAQ,UAAA,EAAc,CAACA,CAAAA,CAAQ,YAAA,EAClC,MAAMF,GAAc,CACb,IAAA,EAEFE,CACT,CAAA,KAAQ,CACN,aAAMF,CAAAA,EAAc,CACb,IACT,CACF,CAEA,eAAsBG,EAAYD,CAAAA,CAAsC,CACtE,MAAMf,CAAAA,CAAa,IAAA,CAAK,UAAUe,CAAO,CAAC,EAC5C,CAEA,eAAsBE,CAAAA,EAA8B,CAClD,MAAMJ,CAAAA,GACR,CAEO,SAASK,EAAiBH,CAAAA,CAAgC,CAC/D,OAAO,IAAA,CAAK,GAAA,EAAI,EAAKA,EAAQ,UAC/B,CAEO,SAASI,CAAAA,CAAmBJ,CAAAA,CAAgC,CAEjE,OAAQA,CAAAA,CAAQ,UAAA,CAAa,IAAA,CAAK,GAAA,EAAI,EAAM,IAC9C,CAEO,SAASK,GAAmBL,CAAAA,CAA+B,CAChE,OAAOA,CAAAA,CAAQ,UAAA,CAAa,IAAA,CAAK,GAAA,EACnC","file":"chunk-ZQ2OIVG3.js","sourcesContent":["import { createHash, randomBytes } from 'node:crypto'\nimport os from 'node:os'\nimport { readFileSync, existsSync } from 'node:fs'\nimport { blake3 } from '@noble/hashes/blake3.js'\nimport { bytesToHex } from '../crypto/ssp.js'\n\nconst MACHINE_ID_PATHS = [\n  '/etc/machine-id',\n  '/var/lib/dbus/machine-id',\n  '/etc/hostid',\n]\n\nfunction getMachineId(): string {\n  for (const p of MACHINE_ID_PATHS) {\n    try {\n      if (existsSync(p)) {\n        return readFileSync(p, 'utf-8').trim()\n      }\n    } catch {\n      continue\n    }\n  }\n  const h = createHash('sha256').update(os.hostname() + os.arch() + os.platform()).digest('hex')\n  return h\n}\n\nexport function computeDeviceFingerprint(): string {\n  const machineId = getMachineId()\n  const components = [\n    machineId,\n    os.hostname(),\n    os.platform(),\n    os.arch(),\n    os.release(),\n  ]\n  const data = components.join(':')\n  return bytesToHex(blake3(data))\n}\n\nexport function generateDeviceId(): string {\n  return randomBytes(32).toString('hex')\n}\n","import os from 'node:os'\nimport path from 'node:path'\nimport fs from 'node:fs'\nimport { randomBytes } from '@noble/hashes/utils.js'\nimport { sha256 } from '@noble/hashes/sha2.js'\nimport { hkdf } from '@noble/hashes/hkdf.js'\nimport { blake3 } from '@noble/hashes/blake3.js'\nimport { gcm } from '@noble/ciphers/aes.js'\nimport { bytesToHex, hexToBytes } from '../crypto/ssp.js'\nimport { computeDeviceFingerprint } from './fingerprint.js'\n\nconst FALLBACK_DIR = path.join(os.homedir(), '.squidcloud')\nconst FALLBACK_FILE = path.join(FALLBACK_DIR, '.session')\n\nfunction getFallbackKey(): Uint8Array {\n  const fingerprint = computeDeviceFingerprint()\n  const ikm = new TextEncoder().encode(fingerprint)\n  return hkdf(sha256, ikm, new Uint8Array(32), 'squidcloud-fallback-v1', 32)\n}\n\nexport async function storeSession(sessionJson: string): Promise<void> {\n  const key = getFallbackKey()\n  const iv = randomBytes(12)\n  const plaintext = new TextEncoder().encode(sessionJson)\n  const aes = gcm(key, iv)\n  const encrypted = aes.encrypt(plaintext)\n  if (!fs.existsSync(FALLBACK_DIR)) {\n    fs.mkdirSync(FALLBACK_DIR, { recursive: true, mode: 0o700 })\n  }\n  const payload = {\n    iv: bytesToHex(iv),\n    data: bytesToHex(encrypted),\n  }\n  fs.writeFileSync(FALLBACK_FILE, JSON.stringify(payload), { mode: 0o600, encoding: 'utf-8' })\n}\n\nexport async function getSession(): Promise<string | null> {\n  try {\n    if (!fs.existsSync(FALLBACK_FILE)) return null\n    const raw = fs.readFileSync(FALLBACK_FILE, 'utf-8')\n    const { iv, data } = JSON.parse(raw) as { iv: string; data: string }\n    const key = getFallbackKey()\n    const aes = gcm(key, hexToBytes(iv))\n    const decrypted = aes.decrypt(hexToBytes(data))\n    return new TextDecoder().decode(decrypted)\n  } catch {\n    return null\n  }\n}\n\nexport async function deleteSession(): Promise<void> {\n  try {\n    if (fs.existsSync(FALLBACK_FILE)) {\n      fs.unlinkSync(FALLBACK_FILE)\n    }\n  } catch {\n    // ignore\n  }\n}\n","import { SquidSession } from '../crypto/ssp.js'\nimport { storeSession, getSession, deleteSession } from './keychain.js'\n\nexport async function loadSession(): Promise<SquidSession | null> {\n  try {\n    const raw = await getSession()\n    if (!raw) return null\n    const session = JSON.parse(raw) as SquidSession\n    if (!session.session_id || !session.access_token) {\n      await deleteSession()\n      return null\n    }\n    return session\n  } catch {\n    await deleteSession()\n    return null\n  }\n}\n\nexport async function saveSession(session: SquidSession): Promise<void> {\n  await storeSession(JSON.stringify(session))\n}\n\nexport async function clearSession(): Promise<void> {\n  await deleteSession()\n}\n\nexport function isSessionExpired(session: SquidSession): boolean {\n  return Date.now() >= session.expires_at\n}\n\nexport function shouldRefreshToken(session: SquidSession): boolean {\n  const twoMinutes = 2 * 60 * 1000\n  return (session.expires_at - Date.now()) <= twoMinutes\n}\n\nexport function getTimeUntilExpiry(session: SquidSession): number {\n  return session.expires_at - Date.now()\n}\n"]}

package/dist/chunk-ZXNTK3KX.js

@@ -0,0 +1,2 @@
+async function o(...n){console.log("Command not yet implemented");}export{o as a};//# sourceMappingURL=chunk-ZXNTK3KX.js.map
+//# sourceMappingURL=chunk-ZXNTK3KX.js.map

package/dist/chunk-ZXNTK3KX.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/time/time-proof.ts"],"names":["timeProof","args"],"mappings":"AAAA,eAAOA,KAAoCC,CAAAA,CAAgC,CACzE,OAAA,CAAQ,GAAA,CAAI,6BAA6B,EAC3C","file":"chunk-ZXNTK3KX.js","sourcesContent":["export default async function timeProof(...args: unknown[]): Promise<void> {\n  console.log('Command not yet implemented')\n}\n"]}

package/dist/chunk-ZY4RVPTF.js

@@ -0,0 +1,2 @@
+async function o(...n){console.log("Command not yet implemented");}export{o as a};//# sourceMappingURL=chunk-ZY4RVPTF.js.map
+//# sourceMappingURL=chunk-ZY4RVPTF.js.map

package/dist/chunk-ZY4RVPTF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/monitor/monitor-automations.ts"],"names":["monitorAutomations","args"],"mappings":"AAAA,eAAOA,KAA6CC,CAAAA,CAAgC,CAClF,OAAA,CAAQ,GAAA,CAAI,6BAA6B,EAC3C","file":"chunk-ZY4RVPTF.js","sourcesContent":["export default async function monitorAutomations(...args: unknown[]): Promise<void> {\n  console.log('Command not yet implemented')\n}\n"]}

package/dist/chunk-ZZSRCXWK.js

@@ -0,0 +1,2 @@
+async function n(...o){console.log("Command not yet implemented");}export{n as a};//# sourceMappingURL=chunk-ZZSRCXWK.js.map
+//# sourceMappingURL=chunk-ZZSRCXWK.js.map

package/dist/chunk-ZZSRCXWK.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/auth/auth-sessions.ts"],"names":["authSessions","args"],"mappings":"AAAA,eAAOA,KAAuCC,CAAAA,CAAgC,CAC5E,OAAA,CAAQ,GAAA,CAAI,6BAA6B,EAC3C","file":"chunk-ZZSRCXWK.js","sourcesContent":["export default async function authSessions(...args: unknown[]): Promise<void> {\n  console.log('Command not yet implemented')\n}\n"]}

package/dist/collab-activity-R6AYISVI.js

@@ -0,0 +1,2 @@
+export{a as default}from'./chunk-KZ7RBLQY.js';//# sourceMappingURL=collab-activity-R6AYISVI.js.map
+//# sourceMappingURL=collab-activity-R6AYISVI.js.map

package/dist/collab-activity-R6AYISVI.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"collab-activity-R6AYISVI.js"}

package/dist/collab-invite-TUWJGMNS.js

@@ -0,0 +1,2 @@
+export{a as default}from'./chunk-AZ4774YQ.js';//# sourceMappingURL=collab-invite-TUWJGMNS.js.map
+//# sourceMappingURL=collab-invite-TUWJGMNS.js.map

package/dist/collab-invite-TUWJGMNS.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"collab-invite-TUWJGMNS.js"}

package/dist/collab-leave-GRSWXTOP.js

@@ -0,0 +1,2 @@
+export{a as default}from'./chunk-NB4OO3VK.js';//# sourceMappingURL=collab-leave-GRSWXTOP.js.map
+//# sourceMappingURL=collab-leave-GRSWXTOP.js.map

package/dist/collab-leave-GRSWXTOP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"collab-leave-GRSWXTOP.js"}

package/dist/collab-list-ZKZTNIGX.js

@@ -0,0 +1,2 @@
+export{a as default}from'./chunk-XHGWAAJS.js';//# sourceMappingURL=collab-list-ZKZTNIGX.js.map
+//# sourceMappingURL=collab-list-ZKZTNIGX.js.map

package/dist/collab-list-ZKZTNIGX.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"collab-list-ZKZTNIGX.js"}

package/dist/collab-remove-2HYNLLLX.js

@@ -0,0 +1,2 @@
+export{a as default}from'./chunk-N6QOCJDY.js';//# sourceMappingURL=collab-remove-2HYNLLLX.js.map
+//# sourceMappingURL=collab-remove-2HYNLLLX.js.map

package/dist/collab-remove-2HYNLLLX.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"collab-remove-2HYNLLLX.js"}

package/dist/collab-transfer-HC5KHBV5.js

@@ -0,0 +1,2 @@
+export{a as default}from'./chunk-4VH6P4GC.js';//# sourceMappingURL=collab-transfer-HC5KHBV5.js.map
+//# sourceMappingURL=collab-transfer-HC5KHBV5.js.map

package/dist/collab-transfer-HC5KHBV5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"collab-transfer-HC5KHBV5.js"}

package/dist/commands/auth/auth-status.js

@@ -0,0 +1,29 @@
+import fs from 'node:fs';
+import os from 'node:os';
+import chalk from 'chalk';
+import { apiGet } from '../../lib/api/client.js';
+import { success, warn as warnMark, muted } from '../../lib/output/brand.js';
+import { isJsonMode } from '../../lib/output/logger.js';
+import { tokenExpiresAt, getCredentialsPath } from '../../lib/auth/oauth-session.js';
+export default async function authStatus() {
+    const credsExist = fs.existsSync(getCredentialsPath());
+    const minsLeft = tokenExpiresAt ? Math.round((tokenExpiresAt - Date.now()) / 60000) : null;
+    let apiOk = false, email = null;
+    try {
+        const r = await apiGet('/user/whoami');
+        apiOk = !!r;
+        email = r?.email || null;
+    }
+    catch { }
+    if (isJsonMode()) {
+        console.log(JSON.stringify({ authenticated: apiOk, email, credentials: credsExist, minutes_left: minsLeft }, null, 2));
+        return;
+    }
+    console.log();
+    console.log(`  ${chalk.bold('session')}      ${apiOk ? success('valid') : warnMark('invalid or expired')}`);
+    console.log(`  ${chalk.bold('account')}      ${email || muted('unknown')}`);
+    console.log(`  ${chalk.bold('credentials')}  ${credsExist ? muted('~/.squidcloud/credentials') : warnMark('none — run `squidcloudctl login`')}`);
+    if (minsLeft !== null)
+        console.log(`  ${chalk.bold('expires in')}    ${minsLeft > 1440 ? `${Math.round(minsLeft / 1440)}d` : minsLeft > 60 ? `${Math.round(minsLeft / 60)}h` : `${minsLeft}m`}`);
+    console.log(`  ${chalk.bold('host')}         ${muted(os.hostname())}\n`);
+}

package/dist/commands/auth/index.js

@@ -0,0 +1,2 @@
+export{a as logout}from'../../chunk-RRGGKRRS.js';export{a as whoami}from'../../chunk-43FK57CR.js';export{a as authStatus}from'../../chunk-NJC4W2S6.js';export{a as authSessions}from'../../chunk-ZZSRCXWK.js';export{a as authRevoke}from'../../chunk-ADVALEDT.js';export{a as login}from'../../chunk-4FZZ3I76.js';export{a as loginDevice}from'../../chunk-GFTSNOCG.js';import'../../chunk-OEURGJIH.js';//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/commands/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"index.js"}

package/dist/commands/auth/login-device.js

@@ -0,0 +1,70 @@
+import os from 'node:os';
+import { randomUUID } from 'node:crypto';
+import chalk from 'chalk';
+import { setAuthState, writeCredentials } from '../../lib/auth/oauth-session.js';
+import { SUPABASE_URL } from '../../lib/auth/constants.js';
+import { renderBanner } from '../../lib/output/banner.js';
+import { success, error as errMark, muted } from '../../lib/output/brand.js';
+const CLIENT_ID = 'squidcloud-cli';
+export default async function loginDevice() {
+    console.log(renderBanner({ tagline: false }));
+    const deviceResp = await fetch(`${SUPABASE_URL}/functions/v1/cli-oauth/device`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({
+            client_id: CLIENT_ID,
+            machine_id: randomUUID().replace(/-/g, ''),
+            device_name: os.hostname() || 'desktop',
+            platform: `${process.platform}-${process.arch}`,
+        }),
+    });
+    const deviceData = (await deviceResp.json());
+    if (!deviceData.device_code)
+        throw new Error(String(deviceData.error || deviceData.message || 'Device registration failed'));
+    const userCode = String(deviceData.user_code || '');
+    const verifyUrl = String(deviceData.verification_url || deviceData.verify_url || `https://squidcloud.vercel.app/cli/device?code=${userCode}`);
+    const interval = Number(deviceData.interval || 5);
+    const expiresAt = Date.now() + Number(deviceData.expires_in || 900) * 1000;
+    console.log(`  ${chalk.bold('Device authorization')}\n`);
+    console.log(`  1. Open:  ${chalk.cyan(verifyUrl)}`);
+    console.log(`  2. Code:  ${chalk.bold(userCode)}\n`);
+    try {
+        const { openBrowser } = await import('../../lib/utils/open.js');
+        openBrowser(verifyUrl);
+    }
+    catch { }
+    while (Date.now() < expiresAt) {
+        await new Promise((r) => setTimeout(r, interval * 1000));
+        const pollResp = await fetch(`${SUPABASE_URL}/functions/v1/cli-oauth/device/poll`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ client_id: CLIENT_ID, device_code: deviceData.device_code }),
+        });
+        const pollData = (await pollResp.json());
+        if (pollData.authorization_pending)
+            continue;
+        if (pollData.error === 'slow_down' || pollData.slow_down) {
+            await new Promise((r) => setTimeout(r, 3000));
+            continue;
+        }
+        if (!pollData.token && !pollData.access_token) {
+            throw new Error(String(pollData.error || pollData.message || 'Authorization failed'));
+        }
+        const token = String(pollData.token || pollData.access_token);
+        const expiresInMs = typeof pollData.expires_in === 'number' ? pollData.expires_in * 1000 : 7776000000;
+        writeCredentials({
+            version: 2, token,
+            token_prefix: String(pollData.token_prefix || token.slice(0, 8)),
+            email: String(pollData.user_email || 'unknown'),
+            expires_at: Math.floor((Date.now() + expiresInMs) / 1000),
+            device_id: String(pollData.device_id || ''),
+            anon_key: String(pollData.anon_key || ''),
+        });
+        setAuthState(token, String(pollData.user_email || 'unknown'), Date.now() + expiresInMs, pollData.anon_key || null);
+        console.log(`\n  ${success(`Authorized as ${pollData.user_email || 'user'}`)}`);
+        console.log(`  ${muted('credentials saved — every command now just works')}\n`);
+        return;
+    }
+    console.log(`\n  ${errMark('Device code expired. Try again.')}\n`);
+    process.exit(1);
+}

package/dist/commands/auth/login-oauth.js

@@ -0,0 +1,81 @@
+import { createServer } from 'node:http';
+import { randomUUID } from 'node:crypto';
+import chalk from 'chalk';
+import { setAuthState, writeCredentials, writeSbTokenFromUrl } from '../../lib/auth/oauth-session.js';
+import { openBrowser } from '../../lib/utils/open.js';
+import { renderBanner } from '../../lib/output/banner.js';
+import { success, muted, error as errMark } from '../../lib/output/brand.js';
+const SUPABASE_URL = 'https://aouqcwbdoyrccjcrhzzi.supabase.co';
+const CLIENT_ID = 'squidcloud-cli';
+export default async function loginOAuth() {
+    console.log(renderBanner({ tagline: false }));
+    const server = createServer();
+    await new Promise((resolveListen) => server.listen(0, '127.0.0.1', () => resolveListen()));
+    const address = server.address();
+    const state = randomUUID().replace(/-/g, '').slice(0, 16);
+    const redirectUri = `http://localhost:${address.port}/cli/callback`;
+    const authorizeUrl = `https://squidcloud.vercel.app/cli/authorize?redirect_uri=${encodeURIComponent(redirectUri)}&state=${state}`;
+    console.log(`  ${chalk.bold('Authorize SquidCloud CLI')}`);
+    console.log(`  ${muted('A browser window should have opened — approve access to continue.')}\n`);
+    console.log(`  ${muted('Or paste this link into any browser:')}`);
+    console.log(`  ${chalk.cyan(authorizeUrl)}\n`);
+    openBrowser(authorizeUrl);
+    let settled = false;
+    server.on('request', async (req, res) => {
+        if (settled)
+            return;
+        const url = new URL(req.url || '/', 'http://localhost');
+        if (!url.pathname.startsWith('/cli/callback')) {
+            res.writeHead(404).end();
+            return;
+        }
+        const code = url.searchParams.get('code');
+        const stateFromUrl = url.searchParams.get('state');
+        const sbTok = url.searchParams.get('sb_token');
+        if (sbTok)
+            writeSbTokenFromUrl(sbTok);
+        if (!code || stateFromUrl !== state) {
+            settled = true;
+            res.writeHead(400).end('Invalid authorization code or state mismatch');
+            server.close();
+            throw new Error('Invalid authorization code or state mismatch.');
+        }
+        try {
+            const machineId = randomUUID().replace(/-/g, '');
+            const tokenResp = await fetch(`${SUPABASE_URL}/functions/v1/cli-oauth/token`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({ grant_type: 'authorization_code', code, client_id: CLIENT_ID, machine_id: machineId }),
+            });
+            const tokenData = (await tokenResp.json());
+            const token = (tokenData.token || tokenData.access_token);
+            if (!token)
+                throw new Error(String(tokenData.error || 'No token returned'));
+            const expiresInMs = typeof tokenData.expires_in === 'number' ? tokenData.expires_in * 1000 : 7776000000;
+            writeCredentials({
+                version: 2,
+                token,
+                token_prefix: String(tokenData.token_prefix || token.slice(0, 8)),
+                email: String(tokenData.user_email || 'unknown'),
+                expires_at: Math.floor((Date.now() + expiresInMs) / 1000),
+                device_id: String(tokenData.device_id || ''),
+                anon_key: String(tokenData.anon_key || ''),
+            });
+            setAuthState(token, String(tokenData.user_email || 'unknown'), Date.now() + expiresInMs, tokenData.anon_key || null);
+            res.writeHead(200, { 'Content-Type': 'text/html' });
+            res.end('<html><body style="background:#050505;color:#fafafa;font-family:sans-serif;display:grid;place-items:center;height:100vh"><div><h2>&#10003; Authorized</h2><p>You can close this window and return to the terminal.</p></div></body></html>');
+            console.log(`\n  ${success(`Authorized as ${tokenData.user_email || 'user'}`)}`);
+            console.log(`  ${muted('credentials saved to ~/.squidcloud/credentials — every command now just works')}\n`);
+        }
+        catch (err) {
+            console.error(`\n  ${errMark(err instanceof Error ? err.message : String(err))}\n`);
+            if (!res.headersSent)
+                res.writeHead(500).end('Token exchange error');
+        }
+        finally {
+            settled = true;
+            server.close();
+        }
+    });
+    await new Promise((resolveEnd) => server.on('close', () => resolveEnd()));
+}

package/dist/commands/auth/logout.js

@@ -0,0 +1,23 @@
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { SUPABASE_URL } from '../../lib/auth/constants.js';
+import { clearOAuthSession, authToken } from '../../lib/auth/oauth-session.js';
+import { success, muted } from '../../lib/output/brand.js';
+export default async function logout() {
+    if (authToken) {
+        try {
+            await fetch(`${SUPABASE_URL}/functions/v1/cli-oauth/revoke`, {
+                method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ token: authToken }),
+            });
+        }
+        catch { /* local sign-out still safe */ }
+    }
+    clearOAuthSession();
+    try {
+        fs.rmSync(path.join(os.homedir(), '.squidcloud', 'cache', 'files.json'), { force: true });
+    }
+    catch { }
+    console.log(`\n  ${success('Signed out.')} Local credentials removed.`);
+    console.log(`  ${muted('Run `squidcloudctl login` to authenticate again.')}\n`);
+}

package/dist/commands/auth/whoami.js

@@ -0,0 +1,21 @@
+import chalk from 'chalk';
+import { apiGet } from '../../lib/api/client.js';
+import { success, muted } from '../../lib/output/brand.js';
+import { isJsonMode } from '../../lib/output/logger.js';
+export default async function whoami() {
+    const res = await apiGet('/user/whoami');
+    if (isJsonMode()) {
+        console.log(JSON.stringify(res, null, 2));
+        return;
+    }
+    const mb = res.total_size ? (res.total_size / 1048576).toFixed(1) : '0';
+    console.log();
+    console.log(`  ${chalk.bold('account')}     ${res.email || res.full_name || 'unknown'}`);
+    if (res.id)
+        console.log(`  ${chalk.bold('user id')}     ${muted(res.id)}`);
+    if (typeof res.total_files === 'number')
+        console.log(`  ${chalk.bold('storage')}      ${res.total_files} files · ${mb} MB`);
+    if (res.credits?.credits_remaining !== undefined)
+        console.log(`  ${chalk.bold('api credits')}  ${res.credits.credits_remaining}${res.credits.daily_limit ? ` / ${res.credits.daily_limit} today` : ''}`);
+    console.log(`\n  ${success('session valid')} — ${muted('~/.squidcloud/credentials')}\n`);
+}

package/dist/commands/collab/index.js

@@ -0,0 +1,2 @@
+export{a as collabInvite}from'../../chunk-AZ4774YQ.js';export{a as collabList}from'../../chunk-XHGWAAJS.js';export{a as collabRemove}from'../../chunk-N6QOCJDY.js';export{a as collabActivity}from'../../chunk-KZ7RBLQY.js';export{a as collabLeave}from'../../chunk-NB4OO3VK.js';export{a as collabTransfer}from'../../chunk-4VH6P4GC.js';//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/commands/collab/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"index.js"}

package/dist/commands/deploy/index.js

@@ -0,0 +1,2 @@
+async function o(...n){console.log("Command not yet implemented");}export{o as default};//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/commands/deploy/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/commands/deploy/index.ts"],"names":["deploy","args"],"mappings":"AAAA,eAAOA,KAAiCC,CAAAA,CAAgC,CACtE,OAAA,CAAQ,GAAA,CAAI,6BAA6B,EAC3C","file":"index.js","sourcesContent":["export default async function deploy(...args: unknown[]): Promise<void> {\n  console.log('Command not yet implemented')\n}\n"]}

package/dist/commands/filereq/client.js

@@ -0,0 +1,37 @@
+import { SUPABASE_URL } from '../../lib/auth/constants.js';
+import { anonKey, sbToken } from '../../lib/auth/oauth-session.js';
+/** File requests live in PostgREST — the CLI OAuth token is a valid Supabase
+    JWT, so RLS applies exactly as it does for the dashboard. */
+async function rest(path, init = {}) {
+    if (!sbToken) {
+        throw new Error('File requests need an upgraded session. Re-run `squidcloudctl login` (browser flow) and try again.');
+    }
+    const res = await fetch(`${SUPABASE_URL}/rest/v1${path}`, {
+        ...init,
+        headers: {
+            'Content-Type': 'application/json',
+            Authorization: `Bearer ${sbToken}`,
+            apikey: anonKey || '',
+            Accept: 'application/json',
+            Prefer: 'return=representation',
+            ...(init.headers || {}),
+        },
+    });
+    const text = await res.text();
+    const data = text ? JSON.parse(text) : null;
+    if (!res.ok)
+        throw new Error(String(data?.message || `HTTP ${res.status}`));
+    return data;
+}
+export async function listRequests() {
+    return rest(`/file_requests?select=*&order=created_at.desc`);
+}
+export async function createRequest(p) {
+    return rest(`/rpc/create_file_request`, { method: 'POST', body: JSON.stringify(p) });
+}
+export async function submissionsFor(id) {
+    return rest(`/file_request_submissions?select=*,file:files(id,name,type,size)&file_request_id=eq.${id}&order=created_at.desc`);
+}
+export async function deleteRequest(id) {
+    await rest(`/file_requests?id=eq.${id}`, { method: 'DELETE' });
+}

package/dist/commands/filereq/create.js

@@ -0,0 +1,36 @@
+import chalk from 'chalk';
+import { createRequest } from './client.js';
+import { success } from '../../lib/output/brand.js';
+import { isJsonMode } from '../../lib/output/logger.js';
+export default async function filereqCreate(...args) {
+    const strArgs = args.filter((a) => typeof a === 'string');
+    const opts = (args.find((a) => a && typeof a === 'object') || {});
+    const title = strArgs[0];
+    if (!title)
+        throw new Error('Usage: squidcloudctl filereq create "Design assets" [--max-files 5] [--expires 7d]');
+    let expiresAt = null;
+    if (opts.expires) {
+        const m = String(opts.expires).match(/^(\d+)([dhm])$/);
+        expiresAt = m
+            ? new Date(Date.now() + Number(m[1]) * (m[2] === 'd' ? 86400 : m[2] === 'h' ? 3600 : 60) * 1000).toISOString()
+            : String(opts.expires);
+    }
+    const res = await createRequest({
+        p_title: title,
+        p_description: String(opts.description || ''),
+        p_folder_path: '',
+        p_max_files: Number(opts.maxFiles || 0),
+        p_max_size_per_file: 0,
+        p_allowed_types: null,
+        p_expires_at: expiresAt,
+    });
+    const out = Array.isArray(res) ? res[0] : res;
+    if (isJsonMode()) {
+        console.log(JSON.stringify(out, null, 2));
+        return;
+    }
+    console.log(`\n  ${success('file request created')}`);
+    if (out?.slug)
+        console.log(`  ${chalk.bold(`https://squidcloud.vercel.app/r/${out.slug}`)}`);
+    console.log();
+}

package/dist/commands/filereq/delete.js

@@ -0,0 +1,18 @@
+import { deleteRequest } from './client.js';
+import { success } from '../../lib/output/brand.js';
+export default async function filereqDelete(...args) {
+    const ref = args.filter((a) => typeof a === 'string')[0] || '';
+    if (!ref)
+        throw new Error('Usage: squidcloudctl filereq delete <#n | id | slug>');
+    const { listRequests } = await import('./client.js');
+    let id = ref.replace(/^#/, '');
+    if (!/^[0-9a-f-]{36}$/i.test(id)) {
+        const rows = await listRequests();
+        const m = (rows || []).find((r) => r.slug === id || String(r.id).startsWith(id) || r.title === id);
+        if (!m)
+            throw new Error(`File request "${ref}" not found. Run \`squidcloudctl filereq ls\`.`);
+        id = m.id;
+    }
+    await deleteRequest(id);
+    console.log(`\n  ${success('file request deleted')}\n`);
+}

package/dist/commands/filereq/list.js

@@ -0,0 +1,17 @@
+import chalk from 'chalk';
+import { listRequests } from './client.js';
+import { muted } from '../../lib/output/brand.js';
+import { isJsonMode } from '../../lib/output/logger.js';
+export default async function filereqList() {
+    const rows = await listRequests();
+    if (isJsonMode()) {
+        console.log(JSON.stringify({ count: rows?.length ?? 0, requests: rows }, null, 2));
+        return;
+    }
+    console.log();
+    for (const r of rows || []) {
+        const state = r.is_active === false ? chalk.dim('[closed]') : chalk.green('[open]');
+        console.log(`  ${chalk.cyan(r.title.padEnd(26).slice(0, 26))} ${state}  ${muted(r.slug || r.id)}`);
+    }
+    console.log(`\n  ${(rows || []).length} request(s)\n`);
+}

package/dist/commands/filereq/submissions.js

@@ -0,0 +1,29 @@
+import chalk from 'chalk';
+import { resolveFileRef } from '../../lib/refs.js';
+import { submissionsFor } from './client.js';
+import { muted } from '../../lib/output/brand.js';
+import { isJsonMode } from '../../lib/output/logger.js';
+export default async function filereqSubs(...args) {
+    const ref = args.filter((a) => typeof a === 'string')[0] || '';
+    if (!ref)
+        throw new Error('Usage: squidcloudctl filereq submissions <#n | id | slug>');
+    // Accept a request number from `filereq ls` OR any file-ref form.
+    let id = ref.replace(/^#/, '');
+    if (!/^[0-9a-f-]{36}$/i.test(id)) {
+        try {
+            id = (await resolveFileRef(ref)).entry.id;
+        }
+        catch { /* keep raw */ }
+    }
+    const rows = await submissionsFor(id);
+    if (isJsonMode()) {
+        console.log(JSON.stringify({ count: rows?.length ?? 0, submissions: rows }, null, 2));
+        return;
+    }
+    console.log();
+    for (const s of rows || []) {
+        const f = s.file || {};
+        console.log(`  ${chalk.cyan((f.name || s.file_name || '—').padEnd(30).slice(0, 30))} ${muted(String(f.size ?? s.file_size ?? '').padStart(9))}  ${muted(s.uploader_name || s.uploader_email || 'anonymous')}  ${muted(f.id || s.file_id || '')}`);
+    }
+    console.log(`\n  ${(rows || []).length} submission(s)\n`);
+}

package/dist/commands/files/download.js

@@ -0,0 +1,23 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import chalk from 'chalk';
+import { resolveFileRef } from '../../lib/refs.js';
+import { downloadFile } from '../../lib/transfer.js';
+import { success } from '../../lib/output/brand.js';
+import { isJsonMode } from '../../lib/output/logger.js';
+export default async function filesDownload(...args) {
+    const strArgs = args.filter((a) => typeof a === 'string');
+    const opts = (args.find((a) => a && typeof a === 'object') || {});
+    const ref = strArgs[0];
+    if (!ref)
+        throw new Error('Usage: squidcloudctl files dl <#n | id | name> [-o path]');
+    const { entry } = await resolveFileRef(ref);
+    if (!isJsonMode())
+        console.log(`\n  ${chalk.dim(`fetching ${entry.name}…`)}`);
+    const finalPath = await downloadFile({ id: entry.id, name: entry.name }, opts.out ? path.resolve(String(opts.out)) : undefined);
+    const size = fs.statSync(finalPath).size;
+    if (isJsonMode())
+        console.log(JSON.stringify({ file: finalPath, bytes: size, id: entry.id }, null, 2));
+    else
+        console.log(`  ${success('saved')} ${finalPath} (${(size / 1024).toFixed(1)} KB)\n`);
+}

package/dist/commands/files/list.js

@@ -0,0 +1,33 @@
+import chalk from 'chalk';
+import { listFiles } from '../../lib/refs.js';
+import { muted } from '../../lib/output/brand.js';
+import { isJsonMode } from '../../lib/output/logger.js';
+function humanBytes(n) {
+    if (!n && n !== 0)
+        return '—';
+    const units = ['B', 'KB', 'MB', 'GB', 'TB'];
+    let v = n, u = 0;
+    while (v >= 1024 && u < units.length - 1) {
+        v /= 1024;
+        u++;
+    }
+    return `${v.toFixed(v >= 100 || u === 0 ? 0 : 1)}${units[u]}`;
+}
+export default async function filesList(...args) {
+    const opts = (args.find((a) => a && typeof a === 'object') || {});
+    const entries = await listFiles({ refresh: !!opts.refresh });
+    if (isJsonMode()) {
+        console.log(JSON.stringify({ count: entries.length, files: entries }, null, 2));
+        return;
+    }
+    if (entries.length === 0) {
+        console.log(`\n  No files yet. Upload one:\n\n    ${chalk.cyan('squidcloudctl files upload ./report.pdf')}\n`);
+        return;
+    }
+    console.log();
+    for (let i = 0; i < entries.length; i++) {
+        const e = entries[i];
+        console.log(`  ${chalk.cyan(`[${String(i + 1).padStart(3)}]`)} ${(e.name ?? '—').padEnd(36).slice(0, 36)}  ${muted(humanBytes(e.size).padStart(9))}  ${muted(e.created_at ? String(e.created_at).slice(0, 10) : '')}  ${muted(e.id)}`);
+    }
+    console.log(`\n  ${entries.length} file(s) · reference any file as [#n | id-prefix | name] in every command\n`);
+}