@aderis-erp/cli 1.1.3 → 1.1.5

package/dist/lib/auth/index.js

@@ -4,6 +4,7 @@
  */
 import axios from 'axios';
 import { clearSupportSession, getAuthType, getBaseUrls, getContext, getSupportSession, missingCredentialsMessage, saveCachedTenants, saveSupportSession, saveTokens, SESSION_EXPIRED_MESSAGE, unauthorizedMessage, } from '../config.js';
+import { assertProductionAccess } from '../production-guard.js';
 import { AuthError, TenantMismatchError } from './errors.js';
 import { runBrowserFlow } from './flow.js';
 import { requireOAuthContext } from './guards.js';
@@ -49,6 +50,7 @@ function withTenantAssertion(rounds, tenantId) {
 }
 export async function login(context, options = {}) {
     requireOAuthContext(context, 'Browser login');
+    assertProductionAccess(context);
     return runBrowserFlow(context, keycloakProvider, [{ prompt: options.prompt }], {
         log: options.log,
         openBrowser: options.openBrowser,
@@ -99,6 +101,9 @@ export async function getValidToken(contextName) {
  */
 export async function getAuthHeaders(contextName) {
     const context = requireContext(contextName);
+    // Every API request fetches its headers here, so production is refused before
+    // a token is read or refreshed. `login` guards the minting of live tokens.
+    assertProductionAccess(context);
     if (getAuthType(context) === 'api_key') {
         if (!context.api_key) {
             throw new Error(missingCredentialsMessage(context));

package/dist/lib/paths.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Expands a leading `~` to the user's home directory.
+ *
+ * The shell only expands a tilde that starts a word, so `-f ~/log.jsonl`
+ * arrives expanded but `--file=~/log.jsonl` reaches us verbatim and would
+ * otherwise be looked up as a directory called `~`.
+ */
+export declare function resolveUserPath(input: string): string;

package/dist/lib/paths.js

@@ -0,0 +1,16 @@
+import os from 'node:os';
+import path from 'node:path';
+/**
+ * Expands a leading `~` to the user's home directory.
+ *
+ * The shell only expands a tilde that starts a word, so `-f ~/log.jsonl`
+ * arrives expanded but `--file=~/log.jsonl` reaches us verbatim and would
+ * otherwise be looked up as a directory called `~`.
+ */
+export function resolveUserPath(input) {
+    if (input === '~')
+        return os.homedir();
+    if (input.startsWith('~/'))
+        return path.join(os.homedir(), input.slice(2));
+    return input;
+}

package/dist/lib/production-guard.d.ts

@@ -0,0 +1,42 @@
+import { type Context } from './config.js';
+/**
+ * The Claude organisation of Aderis AG. From an aderis.com address, it is the
+ * only Claude account that may drive the `live` environment through this CLI.
+ */
+export declare const ADERIS_CLAUDE_ORGANIZATION_UUID = "f5d2d8c1-7256-4628-89d9-45c029577670";
+/** Staff addresses: the guard applies to these and to nobody else. */
+export declare const ADERIS_EMAIL_DOMAIN = "aderis.com";
+/** The Claude Code account that is running this process. */
+export interface ClaudeAccount {
+    email?: string;
+    organizationUuid?: string;
+}
+/** Thrown when a Claude account outside the Aderis organisation reaches for production. */
+export declare class ProductionAccessError extends Error {
+    constructor(message: string);
+}
+/**
+ * The Claude Code account driving this process, or `null` when no Claude Code
+ * session is (`CLAUDECODE` unset): a person at the terminal is not gated.
+ *
+ * Claude Code exports the account into the environment of every command it
+ * runs (`CLAUDE_CODE_USER_EMAIL`, `CLAUDE_CODE_ORGANIZATION_UUID`); whatever the
+ * environment lacks is filled in from the stored account file.
+ */
+export declare function detectClaudeAccount(env?: NodeJS.ProcessEnv, homedir?: string): ClaudeAccount | null;
+/** Whether an address belongs to Aderis staff (case-insensitive). */
+export declare function isAderisAddress(email?: string): boolean;
+/** The error shown when production is refused; names the account so the fix is obvious. */
+export declare function productionRefusedMessage(context: Context, account: ClaudeAccount): string;
+/**
+ * Refuses production for Aderis staff who drive the CLI from Claude Code with a
+ * Claude account outside the Aderis organisation, so no customer data passes
+ * through a personal Claude subscription. Fails exactly when all three hold:
+ * the context is `live`, the Claude account has an aderis.com address, and its
+ * organisation is not {@link ADERIS_CLAUDE_ORGANIZATION_UUID}.
+ *
+ * Runs before any token is read, refreshed or minted. It is a client-side
+ * tripwire against the accidental case, not a security boundary: the API
+ * cannot tell which Claude account made a call.
+ */
+export declare function assertProductionAccess(context: Context, account?: ClaudeAccount | null): void;

package/dist/lib/production-guard.js

@@ -0,0 +1,94 @@
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+/**
+ * The Claude organisation of Aderis AG. From an aderis.com address, it is the
+ * only Claude account that may drive the `live` environment through this CLI.
+ */
+export const ADERIS_CLAUDE_ORGANIZATION_UUID = 'f5d2d8c1-7256-4628-89d9-45c029577670';
+/** Staff addresses: the guard applies to these and to nobody else. */
+export const ADERIS_EMAIL_DOMAIN = 'aderis.com';
+/** Thrown when a Claude account outside the Aderis organisation reaches for production. */
+export class ProductionAccessError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'ProductionAccessError';
+    }
+}
+function nonEmpty(value) {
+    return typeof value === 'string' && value.trim() ? value.trim() : undefined;
+}
+/**
+ * Claude Code keeps the signed-in account in `.claude.json` under
+ * `oauthAccount`, in `$CLAUDE_CONFIG_DIR` or the home directory. Unreadable or
+ * malformed means "nothing known", never an error: the file is Claude's, not ours.
+ */
+function readStoredAccount(env, homedir) {
+    const dir = env.CLAUDE_CONFIG_DIR ? path.resolve(env.CLAUDE_CONFIG_DIR) : homedir;
+    try {
+        // The directory is the local user's own CLAUDE_CONFIG_DIR or home, and the file name is fixed.
+        // nosemgrep: AIK_ts_generic_path_traversal
+        const parsed = JSON.parse(fs.readFileSync(path.join(dir, '.claude.json'), 'utf8'));
+        const account = parsed.oauthAccount;
+        if (!account || typeof account !== 'object')
+            return undefined;
+        return { email: nonEmpty(account.emailAddress), organizationUuid: nonEmpty(account.organizationUuid) };
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * The Claude Code account driving this process, or `null` when no Claude Code
+ * session is (`CLAUDECODE` unset): a person at the terminal is not gated.
+ *
+ * Claude Code exports the account into the environment of every command it
+ * runs (`CLAUDE_CODE_USER_EMAIL`, `CLAUDE_CODE_ORGANIZATION_UUID`); whatever the
+ * environment lacks is filled in from the stored account file.
+ */
+export function detectClaudeAccount(env = process.env, homedir = os.homedir()) {
+    if (!nonEmpty(env.CLAUDECODE))
+        return null;
+    const fromEnv = {
+        email: nonEmpty(env.CLAUDE_CODE_USER_EMAIL),
+        organizationUuid: nonEmpty(env.CLAUDE_CODE_ORGANIZATION_UUID),
+    };
+    if (fromEnv.email && fromEnv.organizationUuid)
+        return fromEnv;
+    const stored = readStoredAccount(env, homedir);
+    return {
+        email: fromEnv.email ?? stored?.email,
+        organizationUuid: fromEnv.organizationUuid ?? stored?.organizationUuid,
+    };
+}
+/** Whether an address belongs to Aderis staff (case-insensitive). */
+export function isAderisAddress(email) {
+    return email?.trim().toLowerCase().endsWith(`@${ADERIS_EMAIL_DOMAIN}`) ?? false;
+}
+/** The error shown when production is refused; names the account so the fix is obvious. */
+export function productionRefusedMessage(context, account) {
+    return (`Production access refused for context "${context.name}" (live): Claude Code is signed in as ` +
+        `${account.email} in Claude organisation ${account.organizationUuid ?? 'unknown'}, which is not the ` +
+        'Aderis organisation. Aderis staff may only reach production through a Claude account in the Aderis ' +
+        'organisation. Sign in to Claude Code with your Aderis Team account, or use a non-production context.');
+}
+/**
+ * Refuses production for Aderis staff who drive the CLI from Claude Code with a
+ * Claude account outside the Aderis organisation, so no customer data passes
+ * through a personal Claude subscription. Fails exactly when all three hold:
+ * the context is `live`, the Claude account has an aderis.com address, and its
+ * organisation is not {@link ADERIS_CLAUDE_ORGANIZATION_UUID}.
+ *
+ * Runs before any token is read, refreshed or minted. It is a client-side
+ * tripwire against the accidental case, not a security boundary: the API
+ * cannot tell which Claude account made a call.
+ */
+export function assertProductionAccess(context, account = detectClaudeAccount()) {
+    if (context.environment !== 'live')
+        return;
+    if (!account || !isAderisAddress(account.email))
+        return;
+    if (account.organizationUuid?.toLowerCase() === ADERIS_CLAUDE_ORGANIZATION_UUID)
+        return;
+    throw new ProductionAccessError(productionRefusedMessage(context, account));
+}