@0xinsider/mcp 1.3.1 → 2.0.1

package/dist/product-cli/index.js

@@ -0,0 +1,354 @@
+import { API_CLIENT_OPERATIONS, OxinsiderApiError, RequestTimeoutError, isListEnvelope, paginatePages, paginationResumePoint, } from "#sdk";
+import { VERSION } from "../constants.js";
+import { CliError } from "./errors.js";
+import { login, logout } from "./oauth.js";
+import { CliApiClient } from "./client.js";
+const commands = {
+    "markets search": { operation: "searchMarkets", argument: "q", query: true },
+    "markets explore": { operation: "exploreMarkets" },
+    "market snapshot": { operation: "getMarketSnapshot", argument: "condition_id" },
+    "market intel": { operation: "getMarketIntel", argument: "condition_id" },
+    "traders get": { operation: "getTrader", argument: "address" },
+    "traders pnl": { operation: "getTraderPnl", argument: "address" },
+    "leaderboard list": { operation: "listLeaderboard" },
+    "whales list": { operation: "listWhaleTrades" },
+    "positions list": { operation: "listPositions" },
+    "pick today": { operation: "getPickOfTheDay" },
+    "reports daily": { operation: "getDailyReportSnapshot" },
+    usage: { operation: "getUsage" },
+    whoami: { operation: "getAccountIdentity" },
+};
+const commandMap = new Map(Object.entries(commands));
+const roots = new Set([
+    ...Object.keys(commands).map((command) => command.split(" ")[0]),
+    "login",
+    "logout",
+    "api",
+    "completions",
+    "--version",
+    "-v",
+]);
+export function isProductCommand(value) {
+    return value !== undefined && roots.has(value);
+}
+export function productHelp() {
+    return `Product commands:
+  login                         Show a verification URL and code; wait for browser approval
+  whoami                        Read the authenticated account and credential identity
+  logout                        Revoke and remove only the stored CLI session
+  markets search <query>         Search markets
+  markets explore               Browse markets
+  market snapshot|intel <id>     Read a market
+  traders get|pnl <wallet>       Read a wallet
+  leaderboard list              Read the leaderboard
+  whales list                   Read large trades
+  positions list                Read positions
+  pick today                    Read today's pick
+  reports daily                 Read the current UTC-day report (--query date=YYYY-MM-DD to select)
+  usage                         Read your API usage (OAuth usage scope)
+  api call <operation-id>        Call a registered, non-administrative JSON GET operation
+  completions bash|zsh|fish      Print shell completion setup
+  --version                     Print the package version
+
+Data options:
+  --json                        One JSON document (default, including in pipes)
+  --table                       Tab-separated human view; metadata goes to stderr
+  --query name=value            Add an API query parameter; repeat for array values
+  --path name=value             Supply a path parameter for api call
+  --limit N / --cursor VALUE     Set a page size or starting cursor
+  --pages N                     Follow at most N pages (1-100); bound reached exits 8
+  --timeout-ms N                Deadline per request including retries (1-300000; default 30000)
+  --retries N                   SDK retries (0-3; default 2); respects Retry-After
+  --help                        Show help without credentials or network requests
+
+Environment:
+  OXINSIDER_API_KEY              Overrides stored CLI credentials; never saved or revoked by logout
+  OXINSIDER_CONFIG_DIR           Private session directory (default: $XDG_CONFIG_HOME/0xinsider/cli)
+  OXINSIDER_API_URL              Production API or loopback development origin only
+
+Exit codes: 0 success, 2 usage, 3 credentials, 4 access/subscription, 5 rate limit,
+6 upstream/storage/contract, 7 network/timeout, 8 bounded incomplete traversal, 130 interrupted.
+No arguments, serve, init, and 0xinsider-mcp retain their MCP behavior.`;
+}
+function integer(value, flag, min, max) {
+    if (value === undefined || !/^\d+$/.test(value))
+        throw new CliError(2, `${flag} requires an integer from ${min} to ${max}.`);
+    const result = Number(value);
+    if (!Number.isSafeInteger(result) || result < min || result > max)
+        throw new CliError(2, `${flag} must be between ${min} and ${max}.`);
+    return result;
+}
+function pair(value, target, flag) {
+    const index = value?.indexOf("=") ?? -1;
+    if (!value || index < 1)
+        throw new CliError(2, `${flag} requires name=value.`);
+    const key = value.slice(0, index);
+    if (!/^[a-zA-Z][a-zA-Z0-9_]*$/.test(key) || (flag === "--path" && Object.hasOwn(target, key)))
+        throw new CliError(2, `${flag} has an invalid or repeated parameter name.`);
+    if (["token", "api_key", "access_token", "authorization"].includes(key.toLowerCase()))
+        throw new CliError(2, "Credentials belong in the environment or stored session, never query parameters.");
+    const next = value.slice(index + 1);
+    if (flag === "--query" && key === "limit") {
+        if (Object.hasOwn(target, key))
+            throw new CliError(2, "Repeated limit parameter.");
+        target[key] = integer(next, flag, 1, 1000);
+    }
+    else if (Object.hasOwn(target, key)) {
+        if (key === "cursor")
+            throw new CliError(2, "Repeated cursor parameter.");
+        const previous = target[key];
+        target[key] = Array.isArray(previous) ? [...previous, next] : [String(previous), next];
+    }
+    else
+        target[key] = next;
+}
+function parse(args) {
+    const result = {
+        positionals: [],
+        query: {},
+        path: {},
+        pages: 1,
+        timeoutMs: 30_000,
+        retries: 2,
+        table: false,
+    };
+    const seen = new Set();
+    let literal = false;
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        if (literal || !arg.startsWith("--")) {
+            result.positionals.push(arg);
+            continue;
+        }
+        if (arg === "--") {
+            literal = true;
+            continue;
+        }
+        if (!["--query", "--path"].includes(arg) && seen.has(arg))
+            throw new CliError(2, `Repeated option ${arg}.`);
+        seen.add(arg);
+        switch (arg) {
+            case "--json":
+                break;
+            case "--table":
+                result.table = true;
+                break;
+            case "--query":
+                pair(args[++i], result.query, arg);
+                break;
+            case "--path":
+                pair(args[++i], result.path, arg);
+                break;
+            case "--limit":
+                if (Object.hasOwn(result.query, "limit"))
+                    throw new CliError(2, "Repeated limit parameter.");
+                result.query.limit = integer(args[++i], arg, 1, 1000);
+                break;
+            case "--cursor": {
+                const value = args[++i];
+                if (!value || value.startsWith("--"))
+                    throw new CliError(2, "--cursor requires a value.");
+                if (Object.hasOwn(result.query, "cursor"))
+                    throw new CliError(2, "Repeated cursor parameter.");
+                result.query.cursor = value;
+                break;
+            }
+            case "--pages":
+                result.pages = integer(args[++i], arg, 1, 100);
+                break;
+            case "--timeout-ms":
+                result.timeoutMs = integer(args[++i], arg, 1, 300_000);
+                break;
+            case "--retries":
+                result.retries = integer(args[++i], arg, 0, 3);
+                break;
+            default:
+                throw new CliError(2, `Unknown option ${arg}. Use --help.`);
+        }
+    }
+    if (seen.has("--json") && seen.has("--table"))
+        throw new CliError(2, "Choose --json or --table, not both.");
+    return result;
+}
+function table(value) {
+    if (isListEnvelope(value)) {
+        const rows = value.data.map((row) => typeof row === "object" && row !== null ? row : { value: row });
+        const columns = [...new Set(rows.flatMap((row) => Object.keys(row)))];
+        console.log(columns.join("\t"));
+        for (const row of rows)
+            console.log(columns.map((column) => JSON.stringify(row[column]) ?? "").join("\t"));
+        const { data: _data, ...metadata } = value;
+        console.error(JSON.stringify(metadata));
+    }
+    else {
+        console.log(JSON.stringify(value, null, 2));
+    }
+}
+function emit(value, human) {
+    if (human)
+        table(value);
+    else
+        console.log(JSON.stringify(value));
+}
+function selectOperation(options) {
+    const args = [...options.positionals];
+    let operation;
+    if (args[0] === "api" && args[1] === "call") {
+        if (args.length !== 3)
+            throw new CliError(2, "Use api call <operation-id> with --path and --query parameters.");
+        const found = API_CLIENT_OPERATIONS.find((item) => item.operationId === args[2]);
+        if (!found ||
+            found.method !== "GET" ||
+            /\/(webhooks|stream|mcp)(\/|$)|\/export(\/|$)|\.md$/.test(found.path)) {
+            throw new CliError(2, "This is not a registered non-administrative JSON read operation.");
+        }
+        operation = found.operationId;
+    }
+    else {
+        const two = `${args[0]} ${args[1]}`;
+        const key = commandMap.has(two) ? two : args[0];
+        const command = commandMap.get(key);
+        if (!command)
+            throw new CliError(2, "Unknown product command. Use --help.");
+        args.splice(0, key.split(" ").length);
+        if (args.length !== (command.argument ? 1 : 0))
+            throw new CliError(2, `${key} ${command.argument ? `requires one ${command.argument}` : "takes no positional arguments"}.`);
+        if (command.argument) {
+            const target = command.query ? options.query : options.path;
+            if (Object.hasOwn(target, command.argument))
+                throw new CliError(2, "The positional parameter was also supplied as a flag.");
+            target[command.argument] = args[0];
+        }
+        if (key === "reports daily" && options.query.date === undefined)
+            options.query.date = new Date().toISOString().slice(0, 10);
+        operation = command.operation;
+    }
+    const contract = API_CLIENT_OPERATIONS.find((item) => item.operationId === operation);
+    if (!contract)
+        throw new CliError(6, "The CLI command has no SDK operation.");
+    const names = [...contract.path.matchAll(/\{([^}]+)\}/g)].map((match) => match[1]);
+    if (names.some((name) => !options.path[name]) ||
+        Object.keys(options.path).some((name) => !names.includes(name))) {
+        throw new CliError(2, `Required path parameters: ${names.join(", ") || "none"}.`);
+    }
+    return operation;
+}
+function completions(shell) {
+    const words = [...roots]
+        .filter((word) => !word.startsWith("-"))
+        .concat(["init", "serve", "help"])
+        .join(" ");
+    if (shell === "bash")
+        console.log(`complete -W '${words}' 0xinsider 0xinsider-mcp`);
+    else if (shell === "zsh")
+        console.log(`#compdef 0xinsider 0xinsider-mcp\n_arguments '1:command:(${words})'`);
+    else if (shell === "fish")
+        console.log(`complete -c 0xinsider -f -a '${words}'\ncomplete -c 0xinsider-mcp -f -a '${words}'`);
+    else
+        throw new CliError(2, "Choose completions bash, zsh, or fish.");
+}
+export async function runProductCli(args) {
+    if (args.includes("--help") || args.includes("-h")) {
+        console.log(productHelp());
+        return;
+    }
+    if (args[0] === "--version" || args[0] === "-v") {
+        if (args.length !== 1)
+            throw new CliError(2, "--version takes no arguments.");
+        console.log(VERSION);
+        return;
+    }
+    if (args[0] === "completions") {
+        if (args.length !== 2)
+            throw new CliError(2, "Use completions bash, zsh, or fish.");
+        completions(args[1]);
+        return;
+    }
+    const options = parse(args);
+    const controller = new AbortController();
+    const interrupt = () => controller.abort();
+    process.once("SIGINT", interrupt);
+    process.once("SIGTERM", interrupt);
+    try {
+        if (["login", "logout"].includes(args[0])) {
+            if (options.positionals.length !== 1 ||
+                args.some((arg) => arg.startsWith("--") && !["--json", "--table"].includes(arg)))
+                throw new CliError(2, "Login/logout accept only --json or --table.");
+            emit(await (args[0] === "login" ? login(controller.signal) : logout(controller.signal)), options.table);
+            return;
+        }
+        const operation = selectOperation(options);
+        const client = new CliApiClient(options.timeoutMs, options.retries);
+        const request = {
+            path: options.path,
+            query: options.query,
+            signal: controller.signal,
+        };
+        if (options.pages === 1) {
+            emit(await client.call(operation, request), options.table);
+            return;
+        }
+        if (options.table)
+            throw new CliError(2, "Multi-page output uses JSON to preserve each page's metadata.");
+        const pages = [];
+        try {
+            for await (const page of paginatePages(client, operation, {
+                ...request,
+                query: options.query,
+                maxPages: options.pages,
+            }))
+                pages.push(page);
+        }
+        catch (error) {
+            // A resume cursor is useful only if the caller also receives earlier pages.
+            if (pages.length > 0)
+                emit({
+                    object: "cli_pages",
+                    pages,
+                    complete: false,
+                    next_cursor: paginationResumePoint(error)?.cursor ?? pages.at(-1)?.next_cursor ?? null,
+                }, false);
+            throw error;
+        }
+        const last = pages.at(-1);
+        const complete = last?.has_more === false;
+        emit({ object: "cli_pages", pages, complete, next_cursor: last?.next_cursor ?? null }, false);
+        if (!complete)
+            throw new CliError(8, "Traversal is incomplete at the requested page bound or a missing cursor. Returned pages preserve their metadata; use next_cursor to continue.");
+    }
+    catch (error) {
+        if (controller.signal.aborted)
+            throw new CliError(130, "Interrupted. No partial traversal was reported as complete.");
+        const resume = paginationResumePoint(error);
+        if (resume)
+            console.error(JSON.stringify({
+                pages_fetched: resume.pagesFetched,
+                resume_cursor: resume.cursor ?? null,
+            }));
+        if (error instanceof RequestTimeoutError)
+            throw new CliError(7, error.message);
+        if (error instanceof OxinsiderApiError) {
+            const code = error.status === 401
+                ? 3
+                : [402, 403, 423].includes(error.status)
+                    ? 4
+                    : error.status === 429
+                        ? 5
+                        : error.status === 0
+                            ? 7
+                            : error.status === 400
+                                ? 2
+                                : 6;
+            const requestId = error.meta?.request_id;
+            throw new CliError(code, `${error.message}${requestId ? ` (request ${requestId})` : ""}`);
+        }
+        if (error instanceof CliError)
+            throw error;
+        throw new CliError(6, "The CLI operation failed. Check your config directory permissions and retry. Credentials were not printed.");
+    }
+    finally {
+        process.removeListener("SIGINT", interrupt);
+        process.removeListener("SIGTERM", interrupt);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/product-cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/product-cli/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,EACd,aAAa,EACb,qBAAqB,GAMtB,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,QAAQ,GAAG;IACf,gBAAgB,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE;IAC5E,iBAAiB,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE;IAClD,iBAAiB,EAAE,EAAE,SAAS,EAAE,mBAAmB,EAAE,QAAQ,EAAE,cAAc,EAAE;IAC/E,cAAc,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc,EAAE;IACzE,aAAa,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE;IAC9D,aAAa,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE;IACjE,kBAAkB,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE;IACpD,aAAa,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE;IAC/C,gBAAgB,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE;IAChD,YAAY,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE;IAC9C,eAAe,EAAE,EAAE,SAAS,EAAE,wBAAwB,EAAE;IACxD,KAAK,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE;IAChC,MAAM,EAAE,EAAE,SAAS,EAAE,oBAAoB,EAAE;CACgD,CAAC;AAC9F,MAAM,UAAU,GAAG,IAAI,GAAG,CAGxB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC5B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC;IACpB,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO;IACP,QAAQ;IACR,KAAK;IACL,aAAa;IACb,WAAW;IACX,IAAI;CACL,CAAC,CAAC;AAEH,MAAM,UAAU,gBAAgB,CAAC,KAAyB;IACxD,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wEAoC+D,CAAC;AACzE,CAAC;AAYD,SAAS,OAAO,CAAC,KAAyB,EAAE,IAAY,EAAE,GAAW,EAAE,GAAW;IAChF,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAC7C,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,GAAG,IAAI,6BAA6B,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,GAAG,GAAG;QAC/D,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,GAAG,IAAI,oBAAoB,GAAG,QAAQ,GAAG,GAAG,CAAC,CAAC;IACtE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,IAAI,CACX,KAAyB,EACzB,MAAqC,EACrC,IAAY;IAEZ,MAAM,KAAK,GAAG,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,GAAG,IAAI,uBAAuB,CAAC,CAAC;IAC/E,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAClC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC3F,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,GAAG,IAAI,6CAA6C,CAAC,CAAC;IAC9E,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACnF,MAAM,IAAI,QAAQ,CAChB,CAAC,EACD,kFAAkF,CACnF,CAAC;IACJ,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACpC,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QAC1C,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,2BAA2B,CAAC,CAAC;QACnF,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;SAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;QACtC,IAAI,GAAG,KAAK,QAAQ;YAAE,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,4BAA4B,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;IACzF,CAAC;;QAAM,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;AAC5B,CAAC;AAED,SAAS,KAAK,CAAC,IAAuB;IACpC,MAAM,MAAM,GAAY;QACtB,WAAW,EAAE,EAAE;QACf,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,EAAE;QACR,KAAK,EAAE,CAAC;QACR,SAAS,EAAE,MAAM;QACjB,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,KAAK;KACb,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YACvD,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,mBAAmB,GAAG,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,QAAQ;gBACX,MAAM;YACR,KAAK,SAAS;gBACZ,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC;gBACpB,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBACnC,MAAM;YACR,KAAK,QAAQ;gBACX,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAClC,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC;oBACtC,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,2BAA2B,CAAC,CAAC;gBACrD,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;gBACtD,MAAM;YACR,KAAK,UAAU,EAAE,CAAC;gBAChB,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBACxB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;oBAAE,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,4BAA4B,CAAC,CAAC;gBAC1F,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;oBACvC,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,4BAA4B,CAAC,CAAC;gBACtD,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;gBAC5B,MAAM;YACR,CAAC;YACD,KAAK,SAAS;gBACZ,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC/C,MAAM;YACR,KAAK,cAAc;gBACjB,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;gBACvD,MAAM;YACR,KAAK,WAAW;gBACd,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC/C,MAAM;YACR;gBACE,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,kBAAkB,GAAG,eAAe,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;QAC3C,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,qCAAqC,CAAC,CAAC;IAC/D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,KAAK,CAAC,KAAc;IAC3B,IAAI,cAAc,CAAU,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAClC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAE,GAA+B,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAC5F,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAChC,KAAK,MAAM,GAAG,IAAI,IAAI;YACpB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACrF,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,CAAC;QAC3C,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,KAAc;IAC1C,IAAI,KAAK;QAAE,KAAK,CAAC,KAAK,CAAC,CAAC;;QACnB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,eAAe,CAAC,OAAgB;IACvC,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,SAAyB,CAAC;IAC9B,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YACnB,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,iEAAiE,CAAC,CAAC;QAC3F,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,IACE,CAAC,KAAK;YACN,KAAK,CAAC,MAAM,KAAK,KAAK;YACtB,oDAAoD,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EACrE,CAAC;YACD,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,kEAAkE,CAAC,CAAC;QAC5F,CAAC;QACD,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC;IAChC,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,sCAAsC,CAAC,CAAC;QAC5E,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,MAAM,IAAI,QAAQ,CAChB,CAAC,EACD,GAAG,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,+BAA+B,GAAG,CACrG,CAAC;QACJ,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;YAC5D,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC;gBACzC,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,uDAAuD,CAAC,CAAC;YACjF,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,GAAG,KAAK,eAAe,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;YAC7D,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7D,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAChC,CAAC;IACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC;IACtF,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,uCAAuC,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACnF,IACE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAC/D,CAAC;QACD,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,6BAA6B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB;IAC5C,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC;SACrB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;SACvC,MAAM,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;SACjC,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,2BAA2B,CAAC,CAAC;SAC/E,IAAI,KAAK,KAAK,KAAK;QACtB,OAAO,CAAC,GAAG,CAAC,4DAA4D,KAAK,IAAI,CAAC,CAAC;SAChF,IAAI,KAAK,KAAK,MAAM;QACvB,OAAO,CAAC,GAAG,CACT,gCAAgC,KAAK,uCAAuC,KAAK,GAAG,CACrF,CAAC;;QACC,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,wCAAwC,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAuB;IACzD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,+BAA+B,CAAC,CAAC;QAC9E,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,aAAa,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,qCAAqC,CAAC,CAAC;QACpF,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC3C,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAClC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,IACE,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;gBAChC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAEhF,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,6CAA6C,CAAC,CAAC;YACvE,IAAI,CACF,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAClF,OAAO,CAAC,KAAK,CACd,CAAC;YACF,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACpE,MAAM,OAAO,GAAsB;YACjC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC;QACF,IAAI,OAAO,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,KAAK;YACf,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,+DAA+D,CAAC,CAAC;QACzF,MAAM,KAAK,GAA+B,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE;gBACxD,GAAG,OAAO;gBACV,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,QAAQ,EAAE,OAAO,CAAC,KAAK;aACxB,CAAC;gBACA,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,4EAA4E;YAC5E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAClB,IAAI,CACF;oBACE,MAAM,EAAE,WAAW;oBACnB,KAAK;oBACL,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,qBAAqB,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,IAAI,IAAI;iBACvF,EACD,KAAK,CACN,CAAC;YACJ,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,KAAK,KAAK,CAAC;QAC1C,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QAC9F,IAAI,CAAC,QAAQ;YACX,MAAM,IAAI,QAAQ,CAChB,CAAC,EACD,+IAA+I,CAChJ,CAAC;IACN,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAC3B,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,6DAA6D,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,MAAM;YACR,OAAO,CAAC,KAAK,CACX,IAAI,CAAC,SAAS,CAAC;gBACb,aAAa,EAAE,MAAM,CAAC,YAAY;gBAClC,aAAa,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;aACrC,CAAC,CACH,CAAC;QACJ,IAAI,KAAK,YAAY,mBAAmB;YAAE,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/E,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;YACvC,MAAM,IAAI,GACR,KAAK,CAAC,MAAM,KAAK,GAAG;gBAClB,CAAC,CAAC,CAAC;gBACH,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;oBACtC,CAAC,CAAC,CAAC;oBACH,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG;wBACpB,CAAC,CAAC,CAAC;wBACH,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;4BAClB,CAAC,CAAC,CAAC;4BACH,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG;gCACpB,CAAC,CAAC,CAAC;gCACH,CAAC,CAAC,CAAC,CAAC;YAChB,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC;YACzC,MAAM,IAAI,QAAQ,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,aAAa,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,KAAK,YAAY,QAAQ;YAAE,MAAM,KAAK,CAAC;QAC3C,MAAM,IAAI,QAAQ,CAChB,CAAC,EACD,4GAA4G,CAC7G,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC5C,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC"}

package/dist/product-cli/oauth.d.ts

@@ -0,0 +1,10 @@
+export declare const API_ORIGIN = "https://api.0xinsider.com";
+export declare function apiOrigin(): string;
+export declare function login(signal: AbortSignal): Promise<unknown>;
+export declare function credentials(signal: AbortSignal, rejectedAccessToken?: string): Promise<{
+    apiKey: string;
+    origin: string;
+    source: string;
+}>;
+export declare function logout(signal: AbortSignal): Promise<unknown>;
+//# sourceMappingURL=oauth.d.ts.map

package/dist/product-cli/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/product-cli/oauth.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,UAAU,8BAA8B,CAAC;AAkBtD,wBAAgB,SAAS,IAAI,MAAM,CAyBlC;AAkGD,wBAAsB,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CA2GjE;AAED,wBAAsB,WAAW,CAC/B,MAAM,EAAE,WAAW,EACnB,mBAAmB,CAAC,EAAE,MAAM,GAC3B,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA6B7D;AAED,wBAAsB,MAAM,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAiClE"}

package/dist/product-cli/oauth.js

@@ -0,0 +1,246 @@
+import { setTimeout as delay } from "node:timers/promises";
+import { z } from "zod";
+import { CliError } from "./errors.js";
+import { readSession, saveSession, removeSession, withSessionLock, } from "./storage.js";
+export const API_ORIGIN = "https://api.0xinsider.com";
+const DEVICE_GRANT = "urn:ietf:params:oauth:grant-type:device_code";
+const LOGIN_SCOPE = "read usage";
+const tokenSchema = z.object({
+    access_token: z.string().min(1),
+    refresh_token: z.string().min(1),
+    token_type: z.literal("Bearer"),
+    expires_in: z.number().int().positive(),
+    scope: z.string().min(1),
+});
+const deviceSchema = z.object({
+    device_code: z.string().min(1),
+    user_code: z.string().min(1),
+    verification_uri: z.string().url(),
+    expires_in: z.number().int().positive().max(3600),
+    interval: z.number().int().positive().max(60),
+});
+export function apiOrigin() {
+    let value;
+    try {
+        value = new URL(process.env.OXINSIDER_API_URL || API_ORIGIN);
+    }
+    catch {
+        throw new CliError(2, "OXINSIDER_API_URL must be the production API origin or an explicit loopback development origin.");
+    }
+    const loopback = ["localhost", "127.0.0.1", "[::1]"].includes(value.hostname);
+    if (value.username ||
+        value.password ||
+        value.search ||
+        value.hash ||
+        value.pathname !== "/" ||
+        (value.origin !== API_ORIGIN && !(loopback && ["http:", "https:"].includes(value.protocol)))) {
+        throw new CliError(2, "Product CLI credentials can only be sent to the production API or a loopback development origin.");
+    }
+    return value.origin;
+}
+class OAuthFailure extends CliError {
+    oauthCode;
+    constructor(oauthCode, status) {
+        const messages = {
+            access_denied: "The account owner denied access. Start login again if this was unintended.",
+            expired_token: "The login code expired. Run login again.",
+            invalid_grant: "This CLI session is expired or revoked. Run logout, then login again.",
+            invalid_client: "The CLI application is no longer registered. Run login again.",
+            invalid_scope: "The requested scopes are not available to this application.",
+            invalid_request: "The authorization request was rejected. Check the CLI version and retry login.",
+            temporarily_unavailable: "Authorization is rate-limited. Wait before starting again.",
+        };
+        super(status === 429 ? 5 : status >= 500 ? 6 : 3, messages[oauthCode] ||
+            "Authorization could not be completed. Retry later; no credential was printed.");
+        this.oauthCode = oauthCode;
+    }
+}
+async function oauthRequest(origin, path, body, signal, json = false) {
+    let response;
+    try {
+        response = await fetch(`${origin}${path}`, {
+            method: "POST",
+            redirect: "error",
+            headers: { "Content-Type": json ? "application/json" : "application/x-www-form-urlencoded" },
+            body: json ? JSON.stringify(body) : new URLSearchParams(body),
+            signal: AbortSignal.any([signal, AbortSignal.timeout(30_000)]),
+        });
+    }
+    catch (error) {
+        if (signal.aborted)
+            throw new CliError(130, "Interrupted. If you already approved access, review connected applications in Developers.");
+        if (error instanceof Error && ["TimeoutError", "AbortError"].includes(error.name))
+            throw new CliError(7, "Authorization request timed out.");
+        throw new CliError(7, "Authorization network request failed.");
+    }
+    let value;
+    try {
+        value = await response.json();
+    }
+    catch {
+        throw new CliError(6, "Authorization returned an unreadable response.");
+    }
+    if (!response.ok) {
+        const parsed = z.object({ error: z.string() }).safeParse(value);
+        throw new OAuthFailure(parsed.success ? parsed.data.error : "unknown", response.status);
+    }
+    return value;
+}
+function tokenSession(value, origin, clientId, ceiling) {
+    const parsed = tokenSchema.safeParse(value);
+    if (!parsed.success)
+        throw new CliError(6, "Authorization returned an invalid token response.");
+    const token = parsed.data;
+    const allowed = new Set(ceiling.split(" "));
+    if (token.scope.split(" ").some((scope) => !allowed.has(scope))) {
+        throw new CliError(6, "Authorization returned scopes beyond the approved request. Review and revoke this app in Developers.");
+    }
+    return {
+        version: 1,
+        origin,
+        clientId,
+        accessToken: token.access_token,
+        refreshToken: token.refresh_token,
+        expiresAt: Date.now() + token.expires_in * 1000,
+        scope: token.scope,
+    };
+}
+async function persistIssued(directory, session) {
+    try {
+        await saveSession(directory, session);
+    }
+    catch (error) {
+        throw new CliError(6, "Authorization succeeded but the session could not be saved reliably. Revoke this CLI connection in Developers, fix local storage, then log in again.", { cause: error });
+    }
+}
+export async function login(signal) {
+    const origin = apiOrigin();
+    return withSessionLock(async (directory) => {
+        if (await readSession(directory))
+            throw new CliError(2, "A CLI session is already stored. Run logout before connecting another account.");
+        if (process.env.OXINSIDER_API_KEY)
+            console.error("OXINSIDER_API_KEY is set. It will continue to override the stored session for data commands.");
+        const registration = await oauthRequest(origin, "/oauth/register", {
+            client_name: "0xinsider product CLI",
+            grant_types: [DEVICE_GRANT, "refresh_token"],
+            response_types: [],
+            scope: LOGIN_SCOPE,
+        }, signal, true);
+        const client = z.object({ client_id: z.string().min(1) }).safeParse(registration);
+        if (!client.success)
+            throw new CliError(6, "Authorization returned an invalid client registration.");
+        const started = deviceSchema.safeParse(await oauthRequest(origin, "/oauth/device/code", { client_id: client.data.client_id, scope: LOGIN_SCOPE }, signal));
+        if (!started.success)
+            throw new CliError(6, "Authorization returned an invalid device request.");
+        const device = started.data;
+        const verification = new URL(device.verification_uri);
+        const expectedHost = origin === API_ORIGIN ? "0xinsider.com" : new URL(origin).hostname;
+        if (verification.hostname !== expectedHost ||
+            verification.pathname !== "/oauth/device" ||
+            verification.username ||
+            verification.password ||
+            verification.search ||
+            verification.hash ||
+            (origin === API_ORIGIN
+                ? verification.protocol !== "https:"
+                : !["http:", "https:"].includes(verification.protocol))) {
+            throw new CliError(6, "Authorization returned an unexpected verification URL.");
+        }
+        console.error(`Open ${verification.href}\nEnter code: ${device.user_code}\nReview the account and scopes, then approve in your browser. Waiting for your decision...`);
+        let interval = device.interval * 1000;
+        const deadline = performance.now() + device.expires_in * 1000;
+        while (performance.now() < deadline) {
+            try {
+                await delay(Math.min(interval, Math.max(0, deadline - performance.now())), undefined, {
+                    signal,
+                });
+            }
+            catch {
+                throw new CliError(130, "Login interrupted. If you approved access, review connected applications in Developers.");
+            }
+            if (performance.now() >= deadline)
+                break;
+            try {
+                const value = await oauthRequest(origin, "/oauth/token", {
+                    grant_type: DEVICE_GRANT,
+                    client_id: client.data.client_id,
+                    device_code: device.device_code,
+                }, signal);
+                const session = tokenSession(value, origin, client.data.client_id, LOGIN_SCOPE);
+                await persistIssued(directory, session);
+                return {
+                    signed_in: true,
+                    source: "stored_session",
+                    scope: session.scope,
+                    expires_at: new Date(session.expiresAt).toISOString(),
+                };
+            }
+            catch (error) {
+                if (error instanceof OAuthFailure && error.oauthCode === "authorization_pending")
+                    continue;
+                if (error instanceof OAuthFailure && error.oauthCode === "slow_down") {
+                    interval += 5000;
+                    continue;
+                }
+                if (error instanceof CliError && error.exitCode === 7) {
+                    interval = Math.max(interval * 2, interval + 5000);
+                    console.error("Authorization polling was interrupted by the network; reducing polling frequency.");
+                    continue;
+                }
+                throw error;
+            }
+        }
+        throw new CliError(3, "The login code expired. Run login again.");
+    });
+}
+export async function credentials(signal, rejectedAccessToken) {
+    const origin = apiOrigin();
+    const environment = process.env.OXINSIDER_API_KEY;
+    if (environment)
+        return { apiKey: environment, origin, source: "environment" };
+    return withSessionLock(async (directory) => {
+        let session = await readSession(directory);
+        if (!session)
+            throw new CliError(3, "Sign in with `0xinsider login` or set OXINSIDER_API_KEY.");
+        if (session.origin !== origin)
+            throw new CliError(3, "The stored session belongs to a different API origin. Restore OXINSIDER_API_URL or use a separate OXINSIDER_CONFIG_DIR.");
+        signal.throwIfAborted();
+        if (session.expiresAt <= Date.now() + 60_000 || session.accessToken === rejectedAccessToken) {
+            const response = await oauthRequest(origin, "/oauth/token", {
+                grant_type: "refresh_token",
+                client_id: session.clientId,
+                refresh_token: session.refreshToken,
+            }, signal);
+            session = tokenSession(response, origin, session.clientId, session.scope);
+            await persistIssued(directory, session);
+        }
+        return { apiKey: session.accessToken, origin, source: "stored_session" };
+    }, signal);
+}
+export async function logout(signal) {
+    const origin = apiOrigin();
+    return withSessionLock(async (directory) => {
+        const session = await readSession(directory);
+        if (!session)
+            return {
+                signed_out: true,
+                stored_session: false,
+                environment_credential_unchanged: Boolean(process.env.OXINSIDER_API_KEY),
+            };
+        if (session.origin !== origin)
+            throw new CliError(3, "Restore the stored session's API origin before logout; credentials will not be sent elsewhere.");
+        // Refresh-token revocation still works after access-token expiry or subscription lapse.
+        await oauthRequest(origin, "/oauth/revoke", {
+            client_id: session.clientId,
+            token: session.refreshToken,
+            token_type_hint: "refresh_token",
+        }, signal);
+        await removeSession(directory);
+        return {
+            signed_out: true,
+            stored_session: true,
+            environment_credential_unchanged: Boolean(process.env.OXINSIDER_API_KEY),
+        };
+    });
+}
+//# sourceMappingURL=oauth.js.map