@aaronsb/kg-cli 0.6.1

package/dist/cli/mcp-config.js

@@ -0,0 +1,358 @@
+"use strict";
+/**
+ * MCP File Access Configuration Commands
+ *
+ * ADR-062: MCP File Ingestion Security Model
+ *
+ * Manage path allowlist for secure file/directory ingestion from MCP server.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mcpConfigCommand = void 0;
+const commander_1 = require("commander");
+const mcp_allowlist_1 = require("../lib/mcp-allowlist");
+const colors = __importStar(require("./colors"));
+const colors_1 = require("./colors");
+const help_formatter_1 = require("./help-formatter");
+const fs = __importStar(require("fs"));
+const config_1 = require("../lib/config");
+const auth_client_1 = require("../lib/auth/auth-client");
+const axios_1 = __importDefault(require("axios"));
+exports.mcpConfigCommand = (0, help_formatter_1.setCommandHelp)(new commander_1.Command('mcp-config'), 'Manage MCP file access allowlist', `Manage path allowlist for secure file/directory ingestion from MCP server.
+
+Security Model (ADR-062):
+- Fail-secure validation (blocked patterns checked first)
+- Explicit allowlist (no access without configuration)
+- CLI-only management (agent can read, not write)
+- Path resolution prevents traversal attacks
+
+Configuration stored in: ~/.config/kg/mcp-allowed-paths.json`)
+    .showHelpAfterError('(add --help for additional information)')
+    .showSuggestionAfterError()
+    .addCommand(new commander_1.Command('init-allowlist')
+    .description('Initialize allowlist with safe defaults')
+    .action(async () => {
+    try {
+        const manager = new mcp_allowlist_1.McpAllowlistManager();
+        await manager.initialize();
+        const config = manager.getConfig();
+        if (!config) {
+            console.error(colors.status.error('✗ Failed to initialize allowlist'));
+            process.exit(1);
+        }
+        console.log(colors.status.success(`✓ Initialized allowlist at: ${manager.getAllowlistPath()}`));
+        console.log();
+        console.log(colors.status.info('Default configuration:'));
+        console.log(colors.status.dim('  Allowed directories: (none - add with: kg mcp-config allow-dir)'));
+        console.log(colors.status.dim(`  Allowed patterns: ${config.allowed_patterns.join(', ')}`));
+        console.log(colors.status.dim(`  Blocked patterns: ${config.blocked_patterns.length} patterns`));
+        console.log(colors.status.dim(`  Max file size: ${config.max_file_size_mb}MB`));
+        console.log();
+        console.log(colors.status.info('Next steps:'));
+        console.log(colors.ui.command('  kg mcp-config allow-dir ~/Documents/research'));
+        console.log(colors.ui.command('  kg mcp-config allow-dir ~/Projects/*/docs'));
+    }
+    catch (error) {
+        console.error(colors.status.error(`✗ Error: ${error.message}`));
+        process.exit(1);
+    }
+}))
+    .addCommand(new commander_1.Command('allow-dir')
+    .description('Add allowed directory')
+    .argument('<directory>', 'Directory path (supports ~ and glob patterns like ~/Projects/*/docs)')
+    .action(async (directory) => {
+    try {
+        const manager = new mcp_allowlist_1.McpAllowlistManager();
+        manager.addAllowedDirectory(directory);
+        console.log(colors.status.success(`✓ Added allowed directory: ${directory}`));
+        console.log();
+        console.log(colors.status.info('Test access:'));
+        console.log(colors.ui.command(`  kg mcp-config test-path ${directory}/example.md`));
+    }
+    catch (error) {
+        console.error(colors.status.error(`✗ Error: ${error.message}`));
+        process.exit(1);
+    }
+}))
+    .addCommand(new commander_1.Command('remove-dir')
+    .description('Remove allowed directory')
+    .argument('<directory>', 'Directory path to remove')
+    .action(async (directory) => {
+    try {
+        const manager = new mcp_allowlist_1.McpAllowlistManager();
+        manager.removeAllowedDirectory(directory);
+        console.log(colors.status.success(`✓ Removed allowed directory: ${directory}`));
+    }
+    catch (error) {
+        console.error(colors.status.error(`✗ Error: ${error.message}`));
+        process.exit(1);
+    }
+}))
+    .addCommand(new commander_1.Command('allow-pattern')
+    .description('Add allowed file pattern')
+    .argument('<pattern>', 'Glob pattern (e.g., "**/*.md", "**/*.png")')
+    .action(async (pattern) => {
+    try {
+        const manager = new mcp_allowlist_1.McpAllowlistManager();
+        manager.addAllowedPattern(pattern);
+        console.log(colors.status.success(`✓ Added allowed pattern: ${pattern}`));
+    }
+    catch (error) {
+        console.error(colors.status.error(`✗ Error: ${error.message}`));
+        process.exit(1);
+    }
+}))
+    .addCommand(new commander_1.Command('remove-pattern')
+    .description('Remove allowed file pattern')
+    .argument('<pattern>', 'Pattern to remove')
+    .action(async (pattern) => {
+    try {
+        const manager = new mcp_allowlist_1.McpAllowlistManager();
+        manager.removeAllowedPattern(pattern);
+        console.log(colors.status.success(`✓ Removed allowed pattern: ${pattern}`));
+    }
+    catch (error) {
+        console.error(colors.status.error(`✗ Error: ${error.message}`));
+        process.exit(1);
+    }
+}))
+    .addCommand(new commander_1.Command('block-pattern')
+    .description('Add blocked file pattern (security)')
+    .argument('<pattern>', 'Glob pattern to block (e.g., "**/.env*", "**/*.key")')
+    .action(async (pattern) => {
+    try {
+        const manager = new mcp_allowlist_1.McpAllowlistManager();
+        manager.addBlockedPattern(pattern);
+        console.log(colors.status.success(`✓ Added blocked pattern: ${pattern}`));
+        console.log(colors.status.dim('  Files matching this pattern will be rejected for security'));
+    }
+    catch (error) {
+        console.error(colors.status.error(`✗ Error: ${error.message}`));
+        process.exit(1);
+    }
+}))
+    .addCommand(new commander_1.Command('unblock-pattern')
+    .description('Remove blocked file pattern')
+    .argument('<pattern>', 'Pattern to unblock')
+    .action(async (pattern) => {
+    try {
+        const manager = new mcp_allowlist_1.McpAllowlistManager();
+        manager.removeBlockedPattern(pattern);
+        console.log(colors.status.success(`✓ Removed blocked pattern: ${pattern}`));
+    }
+    catch (error) {
+        console.error(colors.status.error(`✗ Error: ${error.message}`));
+        process.exit(1);
+    }
+}))
+    .addCommand(new commander_1.Command('show-allowlist')
+    .description('Show current allowlist configuration')
+    .option('--json', 'Output as JSON')
+    .action(async (options) => {
+    try {
+        const manager = new mcp_allowlist_1.McpAllowlistManager();
+        const config = manager.getConfig();
+        if (!config) {
+            console.log(colors.status.warning('⚠ Allowlist not initialized'));
+            console.log();
+            console.log(colors.status.info('Initialize with:'));
+            console.log(colors.ui.command('  kg mcp-config init-allowlist'));
+            return;
+        }
+        if (options.json) {
+            console.log(JSON.stringify(config, null, 2));
+            return;
+        }
+        console.log(colors.ui.header('MCP File Access Allowlist'));
+        console.log((0, colors_1.separator)());
+        console.log();
+        console.log(colors.ui.subtitle(`Allowed Directories (${config.allowed_directories.length})`));
+        if (config.allowed_directories.length === 0) {
+            console.log(colors.status.dim('  (none - add with: kg mcp-config allow-dir ~/path)'));
+        }
+        else {
+            config.allowed_directories.forEach(dir => {
+                console.log(colors.status.success(`  ✓ ${dir}`));
+            });
+        }
+        console.log();
+        console.log(colors.ui.subtitle(`Allowed File Patterns (${config.allowed_patterns.length})`));
+        config.allowed_patterns.forEach(pattern => {
+            console.log(colors.status.success(`  ✓ ${pattern}`));
+        });
+        console.log();
+        console.log(colors.ui.subtitle(`Blocked Patterns (${config.blocked_patterns.length})`));
+        config.blocked_patterns.forEach(pattern => {
+            console.log(colors.status.error(`  ✗ ${pattern}`));
+        });
+        console.log();
+        console.log(colors.ui.subtitle('Limits'));
+        console.log(`  Max file size: ${config.max_file_size_mb}MB`);
+        console.log(`  Max files per directory: ${config.max_files_per_directory}`);
+        console.log();
+        console.log(colors.status.dim(`Configuration file: ${manager.getAllowlistPath()}`));
+    }
+    catch (error) {
+        console.error(colors.status.error(`✗ Error: ${error.message}`));
+        process.exit(1);
+    }
+}))
+    .addCommand(new commander_1.Command('test-path')
+    .description('Test if a path would be allowed')
+    .argument('<path>', 'File or directory path to test')
+    .action(async (testPath) => {
+    try {
+        const manager = new mcp_allowlist_1.McpAllowlistManager();
+        const result = manager.validatePath(testPath);
+        console.log(colors.ui.header('Path Validation Test'));
+        console.log((0, colors_1.separator)());
+        console.log();
+        console.log(colors.ui.subtitle(`Path: ${testPath}`));
+        console.log();
+        if (result.allowed) {
+            console.log(colors.status.success('✓ ALLOWED'));
+            // Check if file exists
+            if (fs.existsSync(testPath)) {
+                const stats = fs.statSync(testPath);
+                const sizeMB = stats.size / (1024 * 1024);
+                console.log(colors.status.dim(`  File exists: ${sizeMB.toFixed(2)}MB`));
+            }
+            else {
+                console.log(colors.status.dim('  File does not exist (but path would be allowed)'));
+            }
+        }
+        else {
+            console.log(colors.status.error('✗ DENIED'));
+            console.log();
+            console.log(colors.ui.subtitle('Reason:'));
+            console.log(`  ${result.reason}`);
+            if (result.hint) {
+                console.log();
+                console.log(colors.ui.subtitle('Hint:'));
+                console.log(`  ${result.hint}`);
+            }
+        }
+    }
+    catch (error) {
+        console.error(colors.status.error(`✗ Error: ${error.message}`));
+        process.exit(1);
+    }
+}))
+    .addCommand(new commander_1.Command('oauth')
+    .description('Create OAuth client for MCP server')
+    .option('--name <name>', 'Custom client name')
+    .action(async (options) => {
+    try {
+        // Require authentication
+        const config = (0, config_1.getConfig)();
+        if (!config.isAuthenticated()) {
+            console.error(colors.status.error('✗ Authentication required'));
+            console.log('   Please login first: kg login');
+            process.exit(1);
+        }
+        const apiUrl = config.getApiUrl();
+        const authClient = new auth_client_1.AuthClient(apiUrl);
+        // Get OAuth client credentials
+        const oauthCreds = config.getOAuthCredentials();
+        if (!oauthCreds) {
+            console.error(colors.status.error('✗ No OAuth credentials found. Please login: kg login'));
+            process.exit(1);
+        }
+        // Get fresh access token
+        const tokenResponse = await authClient.getOAuthToken({
+            grant_type: 'client_credentials',
+            client_id: oauthCreds.client_id,
+            client_secret: oauthCreds.client_secret,
+            scope: oauthCreds.scopes.join(' ')
+        });
+        const token = tokenResponse.access_token;
+        const username = oauthCreds.username || 'unknown';
+        const clientName = options.name || `kg MCP Server (${username})`;
+        console.log();
+        console.log(colors.status.info('🔐 Creating OAuth client for MCP server...'));
+        console.log();
+        // Create additional personal OAuth client
+        const formData = new URLSearchParams();
+        formData.append('client_name', clientName);
+        formData.append('scope', 'read:* write:*');
+        const response = await axios_1.default.post(`${apiUrl}/auth/oauth/clients/personal/new`, formData, {
+            headers: {
+                'Authorization': `Bearer ${token}`,
+                'Content-Type': 'application/x-www-form-urlencoded'
+            }
+        });
+        const client = response.data;
+        console.log(colors.status.success('✅ OAuth client created successfully!'));
+        console.log();
+        console.log('═'.repeat(80));
+        console.log(colors.ui.header('CLAUDE DESKTOP CONFIG'));
+        console.log('═'.repeat(80));
+        console.log();
+        console.log('Add this to your Claude Desktop config:');
+        console.log();
+        console.log('  "knowledge-graph": {');
+        console.log('    "command": "kg-mcp-server",');
+        console.log('    "env": {');
+        console.log(`      "KG_OAUTH_CLIENT_ID": "${client.client_id}",`);
+        console.log(`      "KG_OAUTH_CLIENT_SECRET": "${client.client_secret}",`);
+        console.log('      "KG_API_URL": "http://localhost:8000"');
+        console.log('    }');
+        console.log('  }');
+        console.log();
+        console.log('═'.repeat(80));
+        console.log();
+        console.log(colors.status.warning('⚠️  IMPORTANT:'));
+        console.log('  • Keep these credentials secure!');
+        console.log('  • Client secret is shown only once');
+        console.log(colors.ui.command(`  • To revoke: kg oauth revoke ${client.client_id}`));
+        console.log();
+        console.log(colors.status.dim('Or add using claude CLI:'));
+        console.log();
+        console.log(`  claude mcp add knowledge-graph kg-mcp-server \\`);
+        console.log(`    --env KG_OAUTH_CLIENT_ID=${client.client_id} \\`);
+        console.log(`    --env KG_OAUTH_CLIENT_SECRET=${client.client_secret} \\`);
+        console.log(`    --env KG_API_URL=http://localhost:8000 \\`);
+        console.log(`    -s local`);
+        console.log();
+    }
+    catch (error) {
+        console.error(colors.status.error(`✗ Error: ${error.response?.data?.detail || error.message}`));
+        process.exit(1);
+    }
+}));
+//# sourceMappingURL=mcp-config.js.map

package/dist/cli/mcp-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-config.js","sourceRoot":"","sources":["../../src/cli/mcp-config.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,yCAAoC;AACpC,wDAA2D;AAC3D,iDAAmC;AACnC,qCAAqC;AACrC,qDAAkD;AAElD,uCAAyB;AACzB,0CAA0C;AAC1C,yDAAqD;AACrD,kDAA0B;AAEb,QAAA,gBAAgB,GAAG,IAAA,+BAAc,EAC5C,IAAI,mBAAO,CAAC,YAAY,CAAC,EACzB,kCAAkC,EAClC;;;;;;;;6DAQ2D,CAC5D;KACE,kBAAkB,CAAC,yCAAyC,CAAC;KAC7D,wBAAwB,EAAE;KAC1B,UAAU,CACT,IAAI,mBAAO,CAAC,gBAAgB,CAAC;KAC1B,WAAW,CAAC,yCAAyC,CAAC;KACtD,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,mCAAmB,EAAE,CAAC;QAC1C,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;QAE3B,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;YACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,+BAA+B,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,CAAC;QAChG,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC,CAAC;QACpG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,uBAAuB,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5F,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,uBAAuB,MAAM,CAAC,gBAAgB,CAAC,MAAM,WAAW,CAAC,CAAC,CAAC;QACjG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC;QAChF,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,gDAAgD,CAAC,CAAC,CAAC;QACjF,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC,CAAC;IAEhF,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CACL;KACA,UAAU,CACT,IAAI,mBAAO,CAAC,WAAW,CAAC;KACrB,WAAW,CAAC,uBAAuB,CAAC;KACpC,QAAQ,CAAC,aAAa,EAAE,sEAAsE,CAAC;KAC/F,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE;IAC1B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,mCAAmB,EAAE,CAAC;QAC1C,OAAO,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAEvC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,8BAA8B,SAAS,EAAE,CAAC,CAAC,CAAC;QAC9E,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,6BAA6B,SAAS,aAAa,CAAC,CAAC,CAAC;IAEtF,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CACL;KACA,UAAU,CACT,IAAI,mBAAO,CAAC,YAAY,CAAC;KACtB,WAAW,CAAC,0BAA0B,CAAC;KACvC,QAAQ,CAAC,aAAa,EAAE,0BAA0B,CAAC;KACnD,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE;IAC1B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,mCAAmB,EAAE,CAAC;QAC1C,OAAO,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAE1C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,gCAAgC,SAAS,EAAE,CAAC,CAAC,CAAC;IAElF,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CACL;KACA,UAAU,CACT,IAAI,mBAAO,CAAC,eAAe,CAAC;KACzB,WAAW,CAAC,0BAA0B,CAAC;KACvC,QAAQ,CAAC,WAAW,EAAE,4CAA4C,CAAC;KACnE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,mCAAmB,EAAE,CAAC;QAC1C,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAEnC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC,CAAC;IAE5E,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CACL;KACA,UAAU,CACT,IAAI,mBAAO,CAAC,gBAAgB,CAAC;KAC1B,WAAW,CAAC,6BAA6B,CAAC;KAC1C,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC;KAC1C,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,mCAAmB,EAAE,CAAC;QAC1C,OAAO,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAEtC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,8BAA8B,OAAO,EAAE,CAAC,CAAC,CAAC;IAE9E,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CACL;KACA,UAAU,CACT,IAAI,mBAAO,CAAC,eAAe,CAAC;KACzB,WAAW,CAAC,qCAAqC,CAAC;KAClD,QAAQ,CAAC,WAAW,EAAE,sDAAsD,CAAC;KAC7E,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,mCAAmB,EAAE,CAAC;QAC1C,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAEnC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC,CAAC;IAEhG,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CACL;KACA,UAAU,CACT,IAAI,mBAAO,CAAC,iBAAiB,CAAC;KAC3B,WAAW,CAAC,6BAA6B,CAAC;KAC1C,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;KAC3C,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,mCAAmB,EAAE,CAAC;QAC1C,OAAO,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAEtC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,8BAA8B,OAAO,EAAE,CAAC,CAAC,CAAC;IAE9E,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CACL;KACA,UAAU,CACT,IAAI,mBAAO,CAAC,gBAAgB,CAAC;KAC1B,WAAW,CAAC,sCAAsC,CAAC;KACnD,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,mCAAmB,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QAEnC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,CAAC;YAClE,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,CAAC;YACjE,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,IAAA,kBAAS,GAAE,CAAC,CAAC;QACzB,OAAO,CAAC,GAAG,EAAE,CAAC;QAEd,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,wBAAwB,MAAM,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC9F,IAAI,MAAM,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC,CAAC;QACxF,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;gBACvC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC;YACnD,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;QAEd,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,0BAA0B,MAAM,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC7F,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;YACxC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,EAAE,CAAC;QAEd,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,qBAAqB,MAAM,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACxF,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;YACxC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,EAAE,CAAC;QAEd,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,gBAAgB,IAAI,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,8BAA8B,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC;QAC5E,OAAO,CAAC,GAAG,EAAE,CAAC;QAEd,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,uBAAuB,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,CAAC;IAEtF,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CACL;KACA,UAAU,CACT,IAAI,mBAAO,CAAC,WAAW,CAAC;KACrB,WAAW,CAAC,iCAAiC,CAAC;KAC9C,QAAQ,CAAC,QAAQ,EAAE,gCAAgC,CAAC;KACpD,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;IACzB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,mCAAmB,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAE9C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,IAAA,kBAAS,GAAE,CAAC,CAAC;QACzB,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,QAAQ,EAAE,CAAC,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,EAAE,CAAC;QAEd,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;YAEhD,uBAAuB;YACvB,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACpC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;gBAC1C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1E,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAElC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAChB,OAAO,CAAC,GAAG,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;gBACzC,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IAEH,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CACL;KACA,UAAU,CACT,IAAI,mBAAO,CAAC,OAAO,CAAC;KACjB,WAAW,CAAC,oCAAoC,CAAC;KACjD,MAAM,CAAC,eAAe,EAAE,oBAAoB,CAAC;KAC7C,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,IAAI,CAAC;QACH,yBAAyB;QACzB,MAAM,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;YAChE,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;YAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,IAAI,wBAAU,CAAC,MAAM,CAAC,CAAC;QAE1C,+BAA+B;QAC/B,MAAM,UAAU,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAChD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC,CAAC;YAC3F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,yBAAyB;QACzB,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC;YACnD,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SACnC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,aAAa,CAAC,YAAY,CAAC;QACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,IAAI,SAAS,CAAC;QAClD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,IAAI,kBAAkB,QAAQ,GAAG,CAAC;QAEjE,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC,CAAC;QAC9E,OAAO,CAAC,GAAG,EAAE,CAAC;QAEd,0CAA0C;QAC1C,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;QACvC,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;QAC3C,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAE3C,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,IAAI,CAC/B,GAAG,MAAM,kCAAkC,EAC3C,QAAQ,EACR;YACE,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,KAAK,EAAE;gBAClC,cAAc,EAAE,mCAAmC;aACpD;SACF,CACF,CAAC;QAEF,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC;QAE7B,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,CAAC;QAC3E,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,gCAAgC,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,oCAAoC,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,kCAAkC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QACrF,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,gCAAgC,MAAM,CAAC,SAAS,KAAK,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,oCAAoC,MAAM,CAAC,aAAa,KAAK,CAAC,CAAC;QAC3E,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,EAAE,CAAC;IAEhB,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAChG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CACL,CAAC"}

package/dist/cli/oauth.d.ts

@@ -0,0 +1,15 @@
+/**
+ * kg oauth - OAuth client management commands (ADR-054)
+ *
+ * Manage personal OAuth clients for CLI, MCP, scripts, etc.
+ */
+import { Command } from 'commander';
+/**
+ * OAuth command group object (for documentation generation)
+ */
+export declare const oauthCommand: Command;
+/**
+ * Register oauth command group
+ */
+export declare function registerOAuthCommand(program: Command): void;
+//# sourceMappingURL=oauth.d.ts.map

package/dist/cli/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/cli/oauth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAmSpC;;GAEG;AACH,eAAO,MAAM,YAAY,SAIxB,CAAC;AA4BF;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAE3D"}