@access-tokens/cli 1.0.0

package/dist/config/loader.js

@@ -0,0 +1,138 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConfigLoader = void 0;
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const fs = __importStar(require("fs-extra"));
+const YAML = __importStar(require("yaml"));
+const schemas_1 = require("./schemas");
+class ConfigLoader {
+    userConfigPath;
+    constructor(userConfigPath) {
+        this.userConfigPath =
+            userConfigPath ||
+                path.join(os.homedir(), ".access-tokens-cli", "config.yaml");
+    }
+    async loadUserConfig() {
+        const { userConfigPath } = this;
+        if (!(await fs.pathExists(userConfigPath))) {
+            return null;
+        }
+        return await this.loadConfig(userConfigPath);
+    }
+    async loadSyncConfig(syncConfigPath) {
+        if (!(await fs.pathExists(syncConfigPath))) {
+            throw new Error(`Sync config file not found: ${syncConfigPath}`);
+        }
+        return await this.loadConfig(syncConfigPath);
+    }
+    async loadConfig(configPath) {
+        const content = await fs.readFile(configPath, "utf-8");
+        const parsed = YAML.parse(content);
+        const result = schemas_1.configSchema.safeParse(parsed);
+        if (!result.success) {
+            throw new Error(`Invalid config at ${configPath}: ${result.error.message}`);
+        }
+        return result.data;
+    }
+    mergeConfigs(userConfig, syncConfig) {
+        const defaults = {
+            ...userConfig?.defaults,
+            ...syncConfig.defaults,
+        };
+        const mergedEndpoints = {};
+        const allEndpointNames = new Set([
+            ...Object.keys(userConfig?.endpoints || {}),
+            ...Object.keys(syncConfig.endpoints || {}),
+        ]);
+        for (const name of allEndpointNames) {
+            mergedEndpoints[name] = {
+                ...userConfig?.endpoints?.[name],
+                ...syncConfig.endpoints?.[name],
+            };
+        }
+        return {
+            defaults,
+            endpoints: mergedEndpoints,
+            tokens: syncConfig.tokens || [],
+        };
+    }
+    resolveEndpointConfig(endpointName, config) {
+        const endpointConfig = config.endpoints?.[endpointName];
+        if (!endpointConfig) {
+            throw new Error(`Endpoint '${endpointName}' not found in configuration`);
+        }
+        const { url } = endpointConfig;
+        if (!url) {
+            throw new Error(`Endpoint '${endpointName}' missing URL`);
+        }
+        const { defaults = {} } = config;
+        const adminToken = endpointConfig.adminToken || defaults.adminToken;
+        if (!adminToken) {
+            throw new Error(`No adminToken for endpoint '${endpointName}'`);
+        }
+        const authPath = endpointConfig.authPath || defaults.authPath || "/auth";
+        const adminPath = endpointConfig.adminPath || defaults.adminPath || "/admin";
+        return { url, adminToken, authPath, adminPath };
+    }
+    resolveDirectEndpointConfig(config, defaults) {
+        const { url, adminToken, authPath, adminPath } = config;
+        if (!adminToken) {
+            throw new Error("--admin-token is required when using --url");
+        }
+        return {
+            url,
+            adminToken,
+            authPath: authPath || defaults?.authPath || "/auth",
+            adminPath: adminPath || defaults?.adminPath || "/admin",
+        };
+    }
+    async resolveEndpointFromOptions(options) {
+        const userConfig = await this.loadUserConfig();
+        if (options.url) {
+            const optionsWithUrl = { ...options, url: options.url };
+            return this.resolveDirectEndpointConfig(optionsWithUrl, userConfig?.defaults);
+        }
+        else if (options.endpoint) {
+            return this.resolveEndpointConfig(options.endpoint, userConfig || {});
+        }
+        else {
+            throw new Error("Either --endpoint or --url must be specified");
+        }
+    }
+}
+exports.ConfigLoader = ConfigLoader;
+//# sourceMappingURL=loader.js.map

package/dist/config/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AACzB,2CAA6B;AAE7B,6CAA+B;AAC/B,2CAA6B;AAE7B,uCAKmB;AAEnB,MAAa,YAAY;IACN,cAAc,CAAS;IAExC,YAAY,cAAuB;QACjC,IAAI,CAAC,cAAc;YACjB,cAAc;gBACd,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,oBAAoB,EAAE,aAAa,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;QAChC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,cAAsB;QACzC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,+BAA+B,cAAc,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAC/C,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,UAAkB;QACzC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,sBAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAE9C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,qBAAqB,UAAU,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAC3D,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,YAAY,CAAC,UAAyB,EAAE,UAAkB;QACxD,MAAM,QAAQ,GAAG;YACf,GAAG,UAAU,EAAE,QAAQ;YACvB,GAAG,UAAU,CAAC,QAAQ;SACvB,CAAC;QAEF,MAAM,eAAe,GAAwB,EAAE,CAAC;QAEhD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;YAC/B,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,IAAI,EAAE,CAAC;YAC3C,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,IAAI,EAAE,CAAC;SAC3C,CAAC,CAAC;QAEH,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;YACpC,eAAe,CAAC,IAAI,CAAC,GAAG;gBACtB,GAAG,UAAU,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC;gBAChC,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC;aAChC,CAAC;QACJ,CAAC;QAED,OAAO;YACL,QAAQ;YACR,SAAS,EAAE,eAAe;YAC1B,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,EAAE;SAChC,CAAC;IACJ,CAAC;IAED,qBAAqB,CACnB,YAAoB,EACpB,MAAc;QAEd,MAAM,cAAc,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,YAAY,CAAC,CAAC;QACxD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,aAAa,YAAY,8BAA8B,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,EAAE,GAAG,EAAE,GAAG,cAAc,CAAC;QAC/B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,aAAa,YAAY,eAAe,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,EAAE,QAAQ,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC;QACjC,MAAM,UAAU,GAAG,cAAc,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAC;QACpE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,+BAA+B,YAAY,GAAG,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,OAAO,CAAC;QACzE,MAAM,SAAS,GACb,cAAc,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC;QAE7D,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAClD,CAAC;IAED,2BAA2B,CACzB,MAAwC,EACxC,QAA6B;QAE7B,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;QAExD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QAED,OAAO;YACL,GAAG;YACH,UAAU;YACV,QAAQ,EAAE,QAAQ,IAAI,QAAQ,EAAE,QAAQ,IAAI,OAAO;YACnD,SAAS,EAAE,SAAS,IAAI,QAAQ,EAAE,SAAS,IAAI,QAAQ;SACxD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,0BAA0B,CAC9B,OAEC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAE/C,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,MAAM,cAAc,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;YACxD,OAAO,IAAI,CAAC,2BAA2B,CACrC,cAAc,EACd,UAAU,EAAE,QAAQ,CACrB,CAAC;QACJ,CAAC;aAAM,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;QACxE,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;CACF;AAnID,oCAmIC"}

package/dist/config/schemas.d.ts

@@ -0,0 +1,52 @@
+import * as z from "zod";
+export declare const endpointConfigSchema: z.ZodObject<{
+    url: z.ZodOptional<z.ZodURL>;
+    adminToken: z.ZodOptional<z.ZodString>;
+    authPath: z.ZodOptional<z.ZodString>;
+    adminPath: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type EndpointConfig = z.infer<typeof endpointConfigSchema>;
+export declare const defaultsSchema: z.ZodObject<{
+    authPath: z.ZodOptional<z.ZodString>;
+    adminPath: z.ZodOptional<z.ZodString>;
+    adminToken: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type Defaults = z.infer<typeof defaultsSchema>;
+export declare const tokenDefinitionSchema: z.ZodObject<{
+    tokenId: z.ZodString;
+    secretPhc: z.ZodOptional<z.ZodString>;
+    owner: z.ZodString;
+    isAdmin: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    revoked: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    expiresAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodPipe<z.ZodISODateTime, z.ZodTransform<number, string>>, z.ZodNumber, z.ZodNull]>>;
+}, z.core.$strip>;
+export type TokenDefinition = z.infer<typeof tokenDefinitionSchema>;
+export declare const configSchema: z.ZodObject<{
+    defaults: z.ZodOptional<z.ZodObject<{
+        authPath: z.ZodOptional<z.ZodString>;
+        adminPath: z.ZodOptional<z.ZodString>;
+        adminToken: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    endpoints: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        url: z.ZodOptional<z.ZodURL>;
+        adminToken: z.ZodOptional<z.ZodString>;
+        authPath: z.ZodOptional<z.ZodString>;
+        adminPath: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    tokens: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        tokenId: z.ZodString;
+        secretPhc: z.ZodOptional<z.ZodString>;
+        owner: z.ZodString;
+        isAdmin: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        revoked: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        expiresAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodPipe<z.ZodISODateTime, z.ZodTransform<number, string>>, z.ZodNumber, z.ZodNull]>>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type Config = z.infer<typeof configSchema>;
+export type MergedEndpointConfig = {
+    url: string;
+    adminToken: string;
+    authPath: string;
+    adminPath: string;
+};
+//# sourceMappingURL=schemas.d.ts.map

package/dist/config/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../src/config/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAQzB,eAAO,MAAM,oBAAoB;;;;;iBAK/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,cAAc;;;;iBAIzB,CAAC;AAEH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,eAAO,MAAM,qBAAqB;;;;;;;iBAOhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;iBAIvB,CAAC;AAEH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAElD,MAAM,MAAM,oBAAoB,GAAG;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC"}

package/dist/config/schemas.js

@@ -0,0 +1,67 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.configSchema = exports.tokenDefinitionSchema = exports.defaultsSchema = exports.endpointConfigSchema = void 0;
+const z = __importStar(require("zod"));
+const dateSchema = z.union([
+    z.iso.datetime().transform((s) => Math.floor(new Date(s).getTime() / 1000)),
+    z.number().int().positive(),
+    z.null(),
+]);
+exports.endpointConfigSchema = z.object({
+    url: z.url().optional(),
+    adminToken: z.string().optional(),
+    authPath: z.string().optional(),
+    adminPath: z.string().optional(),
+});
+exports.defaultsSchema = z.object({
+    authPath: z.string().optional(),
+    adminPath: z.string().optional(),
+    adminToken: z.string().optional(),
+});
+exports.tokenDefinitionSchema = z.object({
+    tokenId: z.string(),
+    secretPhc: z.string().optional(),
+    owner: z.string(),
+    isAdmin: z.boolean().optional().default(false),
+    revoked: z.boolean().optional().default(false),
+    expiresAt: dateSchema.optional(),
+});
+exports.configSchema = z.object({
+    defaults: exports.defaultsSchema.optional(),
+    endpoints: z.record(z.string(), exports.endpointConfigSchema).optional(),
+    tokens: z.array(exports.tokenDefinitionSchema).optional(),
+});
+//# sourceMappingURL=schemas.js.map

package/dist/config/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/config/schemas.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AAEzB,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC;IACzB,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAC3E,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC3B,CAAC,CAAC,IAAI,EAAE;CACT,CAAC,CAAC;AAEU,QAAA,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAIU,QAAA,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAIU,QAAA,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC9C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC9C,SAAS,EAAE,UAAU,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAIU,QAAA,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,QAAQ,EAAE,sBAAc,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,4BAAoB,CAAC,CAAC,QAAQ,EAAE;IAChE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,6BAAqB,CAAC,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC"}

package/dist/main.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=main.d.ts.map

package/dist/main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":""}

package/dist/main.js

@@ -0,0 +1,18 @@
+#!/usr/bin/env node
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const cli_1 = require("./cli");
+(async () => {
+    const code = await (0, cli_1.run)({
+        argv: process.argv.slice(2),
+        env: process.env,
+        stdin: process.stdin,
+        stdout: process.stdout,
+        stderr: process.stderr,
+    });
+    process.exit(code);
+})().catch((err) => {
+    console.error("Fatal error:", err);
+    process.exit(1);
+});
+//# sourceMappingURL=main.js.map

package/dist/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":";;;AACA,+BAA4B;AAE5B,CAAC,KAAK,IAAI,EAAE;IACV,MAAM,IAAI,GAAG,MAAM,IAAA,SAAG,EAAC;QACrB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACjB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/utils/client-factory.d.ts

@@ -0,0 +1,4 @@
+import { AccessTokensClient } from "@access-tokens/client";
+import { MergedEndpointConfig } from "../config/schemas";
+export declare function createClient(config: MergedEndpointConfig): AccessTokensClient;
+//# sourceMappingURL=client-factory.d.ts.map

package/dist/utils/client-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-factory.d.ts","sourceRoot":"","sources":["../../src/utils/client-factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD,wBAAgB,YAAY,CAAC,MAAM,EAAE,oBAAoB,GAAG,kBAAkB,CAO7E"}

package/dist/utils/client-factory.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createClient = createClient;
+const client_1 = require("@access-tokens/client");
+function createClient(config) {
+    return new client_1.AccessTokensClient({
+        endpoint: config.url,
+        apiKey: config.adminToken,
+        authPath: config.authPath,
+        adminPath: config.adminPath,
+    });
+}
+//# sourceMappingURL=client-factory.js.map

package/dist/utils/client-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-factory.js","sourceRoot":"","sources":["../../src/utils/client-factory.ts"],"names":[],"mappings":";;AAIA,oCAOC;AAXD,kDAA2D;AAI3D,SAAgB,YAAY,CAAC,MAA4B;IACvD,OAAO,IAAI,2BAAkB,CAAC;QAC5B,QAAQ,EAAE,MAAM,CAAC,GAAG;QACpB,MAAM,EAAE,MAAM,CAAC,UAAU;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;AACL,CAAC"}

package/dist/utils/date-parser.d.ts

@@ -0,0 +1,3 @@
+export declare function parseDate(input: string): number | null;
+export declare function formatDate(timestamp: number): string;
+//# sourceMappingURL=date-parser.d.ts.map

package/dist/utils/date-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"date-parser.d.ts","sourceRoot":"","sources":["../../src/utils/date-parser.ts"],"names":[],"mappings":"AAAA,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAgBtD;AAED,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEpD"}

package/dist/utils/date-parser.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseDate = parseDate;
+exports.formatDate = formatDate;
+function parseDate(input) {
+    if (input === "null") {
+        return null;
+    }
+    if (/^\d+$/.test(input)) {
+        return parseInt(input);
+    }
+    const timestamp = Date.parse(input);
+    if (Number.isNaN(timestamp)) {
+        throw new Error(`Invalid date format: ${input}. Expected ISO 8601 date or Unix timestamp in seconds`);
+    }
+    return Math.floor(timestamp / 1000);
+}
+function formatDate(timestamp) {
+    return new Date(timestamp * 1000).toISOString();
+}
+//# sourceMappingURL=date-parser.js.map

package/dist/utils/date-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"date-parser.js","sourceRoot":"","sources":["../../src/utils/date-parser.ts"],"names":[],"mappings":";;AAAA,8BAgBC;AAED,gCAEC;AApBD,SAAgB,SAAS,CAAC,KAAa;IACrC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,wBAAwB,KAAK,uDAAuD,CACrF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;AACtC,CAAC;AAED,SAAgB,UAAU,CAAC,SAAiB;IAC1C,OAAO,IAAI,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;AAClD,CAAC"}

package/dist/utils/diff.d.ts

@@ -0,0 +1,17 @@
+import type { TokenRecord } from "@access-tokens/client";
+import type { TokenDefinition } from "../config/schemas";
+export type TokenChange = {
+    field: string;
+    oldValue: unknown;
+    newValue: unknown;
+};
+export type TokenDiff = {
+    tokenId: string;
+    exists: boolean;
+    changes: TokenChange[];
+    needsRevoke: boolean;
+    needsRestore: boolean;
+    needsUpdate: boolean;
+};
+export declare function compareTokens(definition: TokenDefinition, remote: TokenRecord | undefined): TokenDiff;
+//# sourceMappingURL=diff.d.ts.map

package/dist/utils/diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.d.ts","sourceRoot":"","sources":["../../src/utils/diff.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEzD,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,WAAW,EAAE,OAAO,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF,wBAAgB,aAAa,CAC3B,UAAU,EAAE,eAAe,EAC3B,MAAM,EAAE,WAAW,GAAG,SAAS,GAC9B,SAAS,CAyEX"}

package/dist/utils/diff.js

@@ -0,0 +1,66 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.compareTokens = compareTokens;
+function compareTokens(definition, remote) {
+    const changes = [];
+    let needsRevoke = false;
+    let needsRestore = false;
+    if (!remote) {
+        return {
+            tokenId: definition.tokenId,
+            exists: false,
+            changes: [],
+            needsRevoke: false,
+            needsRestore: false,
+            needsUpdate: false,
+        };
+    }
+    const isRemoteRevoked = remote.revokedAt != null;
+    const shouldBeRevoked = definition.revoked || false;
+    if (shouldBeRevoked && !isRemoteRevoked) {
+        needsRevoke = true;
+    }
+    else if (!shouldBeRevoked && isRemoteRevoked) {
+        needsRestore = true;
+    }
+    if (definition.owner !== remote.owner) {
+        changes.push({
+            field: "owner",
+            oldValue: remote.owner,
+            newValue: definition.owner,
+        });
+    }
+    if (definition.isAdmin !== undefined &&
+        definition.isAdmin !== remote.isAdmin) {
+        changes.push({
+            field: "isAdmin",
+            oldValue: remote.isAdmin,
+            newValue: definition.isAdmin,
+        });
+    }
+    if (definition.secretPhc && definition.secretPhc !== remote.secretPhc) {
+        changes.push({
+            field: "secretPhc",
+            oldValue: "[hidden]",
+            newValue: "[updated]",
+        });
+    }
+    if (definition.expiresAt !== undefined &&
+        definition.expiresAt !== remote.expiresAt) {
+        changes.push({
+            field: "expiresAt",
+            oldValue: remote.expiresAt,
+            newValue: definition.expiresAt,
+        });
+    }
+    const needsUpdate = changes.length > 0;
+    return {
+        tokenId: definition.tokenId,
+        exists: true,
+        changes,
+        needsRevoke,
+        needsRestore,
+        needsUpdate,
+    };
+}
+//# sourceMappingURL=diff.js.map

package/dist/utils/diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.js","sourceRoot":"","sources":["../../src/utils/diff.ts"],"names":[],"mappings":";;AAmBA,sCA4EC;AA5ED,SAAgB,aAAa,CAC3B,UAA2B,EAC3B,MAA+B;IAE/B,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE;YACX,WAAW,EAAE,KAAK;YAClB,YAAY,EAAE,KAAK;YACnB,WAAW,EAAE,KAAK;SACnB,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC;IACjD,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,IAAI,KAAK,CAAC;IAEpD,IAAI,eAAe,IAAI,CAAC,eAAe,EAAE,CAAC;QACxC,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC;SAAM,IAAI,CAAC,eAAe,IAAI,eAAe,EAAE,CAAC;QAC/C,YAAY,GAAG,IAAI,CAAC;IACtB,CAAC;IAED,IAAI,UAAU,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,OAAO;YACd,QAAQ,EAAE,MAAM,CAAC,KAAK;YACtB,QAAQ,EAAE,UAAU,CAAC,KAAK;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,IACE,UAAU,CAAC,OAAO,KAAK,SAAS;QAChC,UAAU,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,EACrC,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,MAAM,CAAC,OAAO;YACxB,QAAQ,EAAE,UAAU,CAAC,OAAO;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,WAAW;YAClB,QAAQ,EAAE,UAAU;YACpB,QAAQ,EAAE,WAAW;SACtB,CAAC,CAAC;IACL,CAAC;IAED,IACE,UAAU,CAAC,SAAS,KAAK,SAAS;QAClC,UAAU,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,EACzC,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,WAAW;YAClB,QAAQ,EAAE,MAAM,CAAC,SAAS;YAC1B,QAAQ,EAAE,UAAU,CAAC,SAAS;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAEvC,OAAO;QACL,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,MAAM,EAAE,IAAI;QACZ,OAAO;QACP,WAAW;QACX,YAAY;QACZ,WAAW;KACZ,CAAC;AACJ,CAAC"}

package/dist/utils/logger.d.ts

@@ -0,0 +1,17 @@
+export type LogLevel = "quiet" | "normal" | "verbose";
+export type LogOptions = {
+    verbose?: boolean;
+    quiet?: boolean;
+};
+export declare class Logger {
+    private readonly level;
+    constructor(level?: LogLevel | LogOptions);
+    error(message: string, ...args: unknown[]): void;
+    warn(message: string, ...args: unknown[]): void;
+    info(message: string, ...args: unknown[]): void;
+    success(message: string, ...args: unknown[]): void;
+    verbose(message: string, ...args: unknown[]): void;
+    dryRun(message: string, ...args: unknown[]): void;
+    json(data: unknown): void;
+}
+//# sourceMappingURL=logger.d.ts.map

package/dist/utils/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEtD,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,qBAAa,MAAM;IACjB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;gBAErB,KAAK,GAAE,QAAQ,GAAG,UAAqB;IAYnD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAIhD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAM/C,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAO/C,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAOlD,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAOlD,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAOjD,IAAI,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI;CAI1B"}

package/dist/utils/logger.js

@@ -0,0 +1,62 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Logger = void 0;
+const chalk_1 = __importDefault(require("chalk"));
+class Logger {
+    level;
+    constructor(level = "normal") {
+        if (typeof level === "string") {
+            this.level = level;
+        }
+        else if (level.quiet) {
+            this.level = "quiet";
+        }
+        else if (level.verbose) {
+            this.level = "verbose";
+        }
+        else {
+            this.level = "normal";
+        }
+    }
+    error(message, ...args) {
+        console.error(chalk_1.default.red(message), ...args);
+    }
+    warn(message, ...args) {
+        if (this.level !== "quiet") {
+            console.warn(chalk_1.default.yellow(message), ...args);
+        }
+    }
+    info(message, ...args) {
+        if (this.level !== "quiet") {
+            // eslint-disable-next-line no-console
+            console.log(message, ...args);
+        }
+    }
+    success(message, ...args) {
+        if (this.level !== "quiet") {
+            // eslint-disable-next-line no-console
+            console.log(chalk_1.default.green(message), ...args);
+        }
+    }
+    verbose(message, ...args) {
+        if (this.level === "verbose") {
+            // eslint-disable-next-line no-console
+            console.log(chalk_1.default.gray(message), ...args);
+        }
+    }
+    dryRun(message, ...args) {
+        if (this.level !== "quiet") {
+            // eslint-disable-next-line no-console
+            console.log(chalk_1.default.cyan("[DRY RUN]"), message, ...args);
+        }
+    }
+    json(data) {
+        // eslint-disable-next-line no-console
+        console.log(JSON.stringify(data, null, 2));
+    }
+}
+exports.Logger = Logger;
+//# sourceMappingURL=logger.js.map

package/dist/utils/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":";;;;;;AAAA,kDAA0B;AAS1B,MAAa,MAAM;IACA,KAAK,CAAW;IAEjC,YAAY,QAA+B,QAAQ;QACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACrB,CAAC;aAAM,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACvB,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC;QACvB,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACzB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;QACxB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,GAAG,IAAe;QACvC,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,GAAG,IAAe;QACtC,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,GAAG,IAAe;QACtC,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YAC3B,sCAAsC;YACtC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,OAAO,CAAC,OAAe,EAAE,GAAG,IAAe;QACzC,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YAC3B,sCAAsC;YACtC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,OAAO,CAAC,OAAe,EAAE,GAAG,IAAe;QACzC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,sCAAsC;YACtC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,MAAM,CAAC,OAAe,EAAE,GAAG,IAAe;QACxC,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YAC3B,sCAAsC;YACtC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAa;QAChB,sCAAsC;QACtC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;CACF;AAzDD,wBAyDC"}

package/dist/utils/permissions.d.ts

@@ -0,0 +1,2 @@
+export declare function checkFilePermissions(filePath: string, containsAdminToken: boolean): Promise<void>;
+//# sourceMappingURL=permissions.d.ts.map

package/dist/utils/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../src/utils/permissions.ts"],"names":[],"mappings":"AAEA,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,MAAM,EAChB,kBAAkB,EAAE,OAAO,GAC1B,OAAO,CAAC,IAAI,CAAC,CAkBf"}

package/dist/utils/permissions.js

@@ -0,0 +1,55 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkFilePermissions = checkFilePermissions;
+const fs = __importStar(require("fs-extra"));
+async function checkFilePermissions(filePath, containsAdminToken) {
+    if (!containsAdminToken) {
+        return;
+    }
+    try {
+        const stats = await fs.stat(filePath);
+        const mode = stats.mode & parseInt("777", 8);
+        const worldReadable = (mode & parseInt("004", 8)) !== 0;
+        if (worldReadable) {
+            console.warn(`Warning: Config file ${filePath} is world-readable and contains adminToken. ` +
+                `Consider running: chmod 600 ${filePath}`);
+        }
+    }
+    catch {
+        // Ignore permission check errors
+    }
+}
+//# sourceMappingURL=permissions.js.map

package/dist/utils/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../src/utils/permissions.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,oDAqBC;AAvBD,6CAA+B;AAExB,KAAK,UAAU,oBAAoB,CACxC,QAAgB,EAChB,kBAA2B;IAE3B,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7C,MAAM,aAAa,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACxD,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CACV,wBAAwB,QAAQ,8CAA8C;gBAC5E,+BAA+B,QAAQ,EAAE,CAC5C,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iCAAiC;IACnC,CAAC;AACH,CAAC"}