@adverant-nexus/cli 2.0.1 → 3.0.0

package/dist/auth/auth-client.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Nexus Authentication Client
+ *
+ * Handles all authentication operations with Nexus Auth service
+ */
+import type { LoginRequest, LoginResponse, RegisterRequest, RefreshTokenRequest, RefreshTokenResponse, UserInfo, Organization, APIKey, CreateAPIKeyRequest, CreateAPIKeyResponse, WhoAmIResponse } from '@adverant-nexus/types';
+export interface AuthClientConfig {
+    baseURL: string;
+    timeout?: number;
+    retryAttempts?: number;
+}
+export declare class AuthClient {
+    private client;
+    constructor(config: AuthClientConfig);
+    /**
+     * Set access token for authenticated requests
+     */
+    setAccessToken(token: string): void;
+    /**
+     * Clear access token
+     */
+    clearAccessToken(): void;
+    /**
+     * Register a new user
+     */
+    register(request: RegisterRequest): Promise<LoginResponse>;
+    /**
+     * Login with email and password
+     */
+    login(request: LoginRequest): Promise<LoginResponse>;
+    /**
+     * Refresh access token
+     */
+    refreshToken(request: RefreshTokenRequest): Promise<RefreshTokenResponse>;
+    /**
+     * Logout (revoke tokens)
+     */
+    logout(): Promise<void>;
+    /**
+     * Get current user info
+     */
+    getMe(): Promise<UserInfo>;
+    /**
+     * Get whoami info (user + org + permissions)
+     */
+    whoami(): Promise<WhoAmIResponse>;
+    /**
+     * List user's organizations
+     */
+    listOrganizations(): Promise<Organization[]>;
+    /**
+     * Get organization details
+     */
+    getOrganization(orgId: string): Promise<Organization>;
+    /**
+     * Create a new organization
+     */
+    createOrganization(name: string, slug?: string): Promise<Organization>;
+    /**
+     * Create an API key
+     */
+    createAPIKey(request: CreateAPIKeyRequest): Promise<CreateAPIKeyResponse>;
+    /**
+     * List API keys (without secrets)
+     */
+    listAPIKeys(organizationId?: string): Promise<APIKey[]>;
+    /**
+     * Revoke an API key
+     */
+    revokeAPIKey(keyId: string): Promise<void>;
+    /**
+     * Get API key details
+     */
+    getAPIKey(keyId: string): Promise<APIKey>;
+    /**
+     * Validate API key format
+     */
+    static isValidAPIKeyFormat(key: string): boolean;
+    /**
+     * Get API key prefix from full key
+     */
+    static getKeyPrefix(key: string): string;
+}
+//# sourceMappingURL=auth-client.d.ts.map

package/dist/auth/auth-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-client.d.ts","sourceRoot":"","sources":["../../src/auth/auth-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EACV,YAAY,EACZ,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,QAAQ,EACR,YAAY,EACZ,MAAM,EACN,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EAEf,MAAM,uBAAuB,CAAC;AAE/B,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAAgB;gBAElB,MAAM,EAAE,gBAAgB;IA0BpC;;OAEG;IACH,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAInC;;OAEG;IACH,gBAAgB,IAAI,IAAI;IAIxB;;OAEG;IACG,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC;IAKhE;;OAEG;IACG,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC;IAK1D;;OAEG;IACG,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAK/E;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAI7B;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC;IAKhC;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC;IAKvC;;OAEG;IACG,iBAAiB,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IAKlD;;OAEG;IACG,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAK3D;;OAEG;IACG,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAK5E;;OAEG;IACG,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAK/E;;OAEG;IACG,WAAW,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAM7D;;OAEG;IACG,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhD;;OAEG;IACG,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAK/C;;OAEG;IACH,MAAM,CAAC,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIhD;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;CAGzC"}

package/dist/auth/auth-client.js

@@ -0,0 +1,145 @@
+/**
+ * Nexus Authentication Client
+ *
+ * Handles all authentication operations with Nexus Auth service
+ */
+import axios from 'axios';
+export class AuthClient {
+    client;
+    constructor(config) {
+        this.client = axios.create({
+            baseURL: config.baseURL,
+            timeout: config.timeout || 30000,
+            headers: {
+                'Content-Type': 'application/json',
+            },
+        });
+        // Response interceptor for error handling
+        this.client.interceptors.response.use((response) => response, (error) => {
+            if (error.response) {
+                const authError = {
+                    code: error.response.data?.code || 'UNKNOWN_ERROR',
+                    message: error.response.data?.message || error.message,
+                    details: error.response.data?.details,
+                };
+                throw authError;
+            }
+            throw error;
+        });
+    }
+    /**
+     * Set access token for authenticated requests
+     */
+    setAccessToken(token) {
+        this.client.defaults.headers.common['Authorization'] = `Bearer ${token}`;
+    }
+    /**
+     * Clear access token
+     */
+    clearAccessToken() {
+        delete this.client.defaults.headers.common['Authorization'];
+    }
+    /**
+     * Register a new user
+     */
+    async register(request) {
+        const response = await this.client.post('/auth/register', request);
+        return response.data;
+    }
+    /**
+     * Login with email and password
+     */
+    async login(request) {
+        const response = await this.client.post('/auth/login', request);
+        return response.data;
+    }
+    /**
+     * Refresh access token
+     */
+    async refreshToken(request) {
+        const response = await this.client.post('/auth/refresh', request);
+        return response.data;
+    }
+    /**
+     * Logout (revoke tokens)
+     */
+    async logout() {
+        await this.client.post('/auth/logout');
+    }
+    /**
+     * Get current user info
+     */
+    async getMe() {
+        const response = await this.client.get('/users/me');
+        return response.data;
+    }
+    /**
+     * Get whoami info (user + org + permissions)
+     */
+    async whoami() {
+        const response = await this.client.get('/auth/whoami');
+        return response.data;
+    }
+    /**
+     * List user's organizations
+     */
+    async listOrganizations() {
+        const response = await this.client.get('/organizations');
+        return response.data.organizations;
+    }
+    /**
+     * Get organization details
+     */
+    async getOrganization(orgId) {
+        const response = await this.client.get(`/organizations/${orgId}`);
+        return response.data;
+    }
+    /**
+     * Create a new organization
+     */
+    async createOrganization(name, slug) {
+        const response = await this.client.post('/organizations', { name, slug });
+        return response.data;
+    }
+    /**
+     * Create an API key
+     */
+    async createAPIKey(request) {
+        const response = await this.client.post('/api-keys', request);
+        return response.data;
+    }
+    /**
+     * List API keys (without secrets)
+     */
+    async listAPIKeys(organizationId) {
+        const params = organizationId ? { organization_id: organizationId } : {};
+        const response = await this.client.get('/api-keys', { params });
+        return response.data.api_keys;
+    }
+    /**
+     * Revoke an API key
+     */
+    async revokeAPIKey(keyId) {
+        await this.client.delete(`/api-keys/${keyId}`);
+    }
+    /**
+     * Get API key details
+     */
+    async getAPIKey(keyId) {
+        const response = await this.client.get(`/api-keys/${keyId}`);
+        return response.data;
+    }
+    /**
+     * Validate API key format
+     */
+    static isValidAPIKeyFormat(key) {
+        return /^brain_[A-Za-z0-9_-]{64}$/.test(key);
+    }
+    /**
+     * Get API key prefix from full key
+     */
+    static getKeyPrefix(key) {
+        return key.substring(0, 20);
+    }
+}
+//# sourceMappingURL=auth-client.js.map

package/dist/auth/auth-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-client.js","sourceRoot":"","sources":["../../src/auth/auth-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAwB,MAAM,OAAO,CAAC;AAsB7C,MAAM,OAAO,UAAU;IACb,MAAM,CAAgB;IAE9B,YAAY,MAAwB;QAClC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,KAAK;YAChC,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;aACnC;SACF,CAAC,CAAC;QAEH,0CAA0C;QAC1C,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CACnC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,EACtB,CAAC,KAAK,EAAE,EAAE;YACR,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,MAAM,SAAS,GAAc;oBAC3B,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,IAAI,eAAe;oBAClD,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,IAAI,KAAK,CAAC,OAAO;oBACtD,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO;iBACtC,CAAC;gBACF,MAAM,SAAS,CAAC;YAClB,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,KAAa;QAC1B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;IAC3E,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,OAAwB;QACrC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAgB,gBAAgB,EAAE,OAAO,CAAC,CAAC;QAClF,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CAAC,OAAqB;QAC/B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAgB,aAAa,EAAE,OAAO,CAAC,CAAC;QAC/E,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,OAA4B;QAC7C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAuB,eAAe,EAAE,OAAO,CAAC,CAAC;QACxF,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAW,WAAW,CAAC,CAAC;QAC9D,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAiB,cAAc,CAAC,CAAC;QACvE,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB;QACrB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAoC,gBAAgB,CAAC,CAAC;QAC5F,OAAO,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,KAAa;QACjC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAe,kBAAkB,KAAK,EAAE,CAAC,CAAC;QAChF,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CAAC,IAAY,EAAE,IAAa;QAClD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAe,gBAAgB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACxF,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,OAA4B;QAC7C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAuB,WAAW,EAAE,OAAO,CAAC,CAAC;QACpF,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,cAAuB;QACvC,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAyB,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACxF,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,KAAa;QAC9B,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,KAAK,EAAE,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,KAAa;QAC3B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAS,aAAa,KAAK,EAAE,CAAC,CAAC;QACrE,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,mBAAmB,CAAC,GAAW;QACpC,OAAO,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,GAAW;QAC7B,OAAO,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9B,CAAC;CACF"}

package/dist/auth/credentials-manager.d.ts

@@ -0,0 +1,82 @@
+/**
+ * Credentials Manager
+ *
+ * Secure storage and management of authentication credentials
+ */
+import type { AuthCredentials, APIKey } from '@adverant-nexus/types';
+export interface CredentialsManagerConfig {
+    credentialsDir?: string;
+    credentialsFile?: string;
+    apiKeysFile?: string;
+}
+export declare class CredentialsManager {
+    private credentialsDir;
+    private credentialsPath;
+    private apiKeysPath;
+    constructor(config?: CredentialsManagerConfig);
+    /**
+     * Ensure credentials directory exists with secure permissions
+     */
+    private ensureCredentialsDir;
+    /**
+     * Save credentials securely
+     */
+    saveCredentials(credentials: AuthCredentials): Promise<void>;
+    /**
+     * Load credentials
+     */
+    loadCredentials(): Promise<AuthCredentials | null>;
+    /**
+     * Clear credentials (logout)
+     */
+    clearCredentials(): Promise<void>;
+    /**
+     * Check if credentials are expired
+     */
+    isExpired(credentials: AuthCredentials): boolean;
+    /**
+     * Update credentials (after token refresh)
+     */
+    updateCredentials(updates: Partial<AuthCredentials>): Promise<void>;
+    /**
+     * Get current organization ID
+     */
+    getCurrentOrganizationId(): Promise<string | null>;
+    /**
+     * Set current organization
+     */
+    setCurrentOrganization(organizationId: string): Promise<void>;
+    /**
+     * Get current app ID
+     */
+    getCurrentAppId(): Promise<string | null>;
+    /**
+     * Set current app
+     */
+    setCurrentApp(appId: string): Promise<void>;
+    /**
+     * Save API key locally (for reference only, not the secret)
+     */
+    saveAPIKeyReference(apiKey: Omit<APIKey, 'key'>): Promise<void>;
+    /**
+     * List saved API key references
+     */
+    listAPIKeyReferences(): Promise<Omit<APIKey, 'key'>[]>;
+    /**
+     * Remove API key reference
+     */
+    removeAPIKeyReference(keyId: string): Promise<void>;
+    /**
+     * Check if user is authenticated
+     */
+    isAuthenticated(): Promise<boolean>;
+    /**
+     * Get credentials directory path
+     */
+    getCredentialsDir(): string;
+    /**
+     * Get credentials file path
+     */
+    getCredentialsPath(): string;
+}
+//# sourceMappingURL=credentials-manager.d.ts.map

package/dist/auth/credentials-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials-manager.d.ts","sourceRoot":"","sources":["../../src/auth/credentials-manager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAErE,MAAM,WAAW,wBAAwB;IACvC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,WAAW,CAAS;gBAEhB,MAAM,GAAE,wBAA6B;IAQjD;;OAEG;YACW,oBAAoB;IAWlC;;OAEG;IACG,eAAe,CAAC,WAAW,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAWlE;;OAEG;IACG,eAAe,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAYxD;;OAEG;IACG,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IAUvC;;OAEG;IACH,SAAS,CAAC,WAAW,EAAE,eAAe,GAAG,OAAO;IAShD;;OAEG;IACG,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAQzE;;OAEG;IACG,wBAAwB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAKxD;;OAEG;IACG,sBAAsB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAInE;;OAEG;IACG,eAAe,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAK/C;;OAEG;IACG,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjD;;OAEG;IACG,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IA6BrE;;OAEG;IACG,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;IAW5D;;OAEG;IACG,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYzD;;OAEG;IACG,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC;IAOzC;;OAEG;IACH,iBAAiB,IAAI,MAAM;IAI3B;;OAEG;IACH,kBAAkB,IAAI,MAAM;CAG7B"}

package/dist/auth/credentials-manager.js

@@ -0,0 +1,200 @@
+/**
+ * Credentials Manager
+ *
+ * Secure storage and management of authentication credentials
+ */
+import fs from 'fs-extra';
+import path from 'path';
+import os from 'os';
+export class CredentialsManager {
+    credentialsDir;
+    credentialsPath;
+    apiKeysPath;
+    constructor(config = {}) {
+        this.credentialsDir = config.credentialsDir || path.join(os.homedir(), '.nexus');
+        this.credentialsPath = config.credentialsFile || path.join(this.credentialsDir, 'credentials.json');
+        this.apiKeysPath = config.apiKeysFile || path.join(this.credentialsDir, 'api-keys.json');
+        this.ensureCredentialsDir();
+    }
+    /**
+     * Ensure credentials directory exists with secure permissions
+     */
+    async ensureCredentialsDir() {
+        await fs.ensureDir(this.credentialsDir);
+        // Set secure permissions (0700 - read/write/execute for owner only)
+        try {
+            await fs.chmod(this.credentialsDir, 0o700);
+        }
+        catch (error) {
+            console.warn('Warning: Could not set secure permissions on credentials directory');
+        }
+    }
+    /**
+     * Save credentials securely
+     */
+    async saveCredentials(credentials) {
+        await fs.writeJSON(this.credentialsPath, credentials, { spaces: 2 });
+        // Set secure file permissions (0600 - read/write for owner only)
+        try {
+            await fs.chmod(this.credentialsPath, 0o600);
+        }
+        catch (error) {
+            console.warn('Warning: Could not set secure permissions on credentials file');
+        }
+    }
+    /**
+     * Load credentials
+     */
+    async loadCredentials() {
+        try {
+            if (await fs.pathExists(this.credentialsPath)) {
+                return await fs.readJSON(this.credentialsPath);
+            }
+            return null;
+        }
+        catch (error) {
+            console.error('Error loading credentials:', error);
+            return null;
+        }
+    }
+    /**
+     * Clear credentials (logout)
+     */
+    async clearCredentials() {
+        try {
+            if (await fs.pathExists(this.credentialsPath)) {
+                await fs.remove(this.credentialsPath);
+            }
+        }
+        catch (error) {
+            console.error('Error clearing credentials:', error);
+        }
+    }
+    /**
+     * Check if credentials are expired
+     */
+    isExpired(credentials) {
+        const expiresAt = new Date(credentials.expires_at);
+        const now = new Date();
+        // Consider expired if less than 5 minutes remaining
+        const bufferMs = 5 * 60 * 1000;
+        return expiresAt.getTime() - now.getTime() < bufferMs;
+    }
+    /**
+     * Update credentials (after token refresh)
+     */
+    async updateCredentials(updates) {
+        const current = await this.loadCredentials();
+        if (current) {
+            const updated = { ...current, ...updates };
+            await this.saveCredentials(updated);
+        }
+    }
+    /**
+     * Get current organization ID
+     */
+    async getCurrentOrganizationId() {
+        const credentials = await this.loadCredentials();
+        return credentials?.organization_id || null;
+    }
+    /**
+     * Set current organization
+     */
+    async setCurrentOrganization(organizationId) {
+        await this.updateCredentials({ organization_id: organizationId });
+    }
+    /**
+     * Get current app ID
+     */
+    async getCurrentAppId() {
+        const credentials = await this.loadCredentials();
+        return credentials?.app_id || null;
+    }
+    /**
+     * Set current app
+     */
+    async setCurrentApp(appId) {
+        await this.updateCredentials({ app_id: appId });
+    }
+    /**
+     * Save API key locally (for reference only, not the secret)
+     */
+    async saveAPIKeyReference(apiKey) {
+        let apiKeys = [];
+        try {
+            if (await fs.pathExists(this.apiKeysPath)) {
+                apiKeys = await fs.readJSON(this.apiKeysPath);
+            }
+        }
+        catch (error) {
+            // File doesn't exist or is corrupted, start fresh
+            apiKeys = [];
+        }
+        // Add or update API key
+        const existingIndex = apiKeys.findIndex((k) => k.id === apiKey.id);
+        if (existingIndex >= 0) {
+            apiKeys[existingIndex] = apiKey;
+        }
+        else {
+            apiKeys.push(apiKey);
+        }
+        await fs.writeJSON(this.apiKeysPath, apiKeys, { spaces: 2 });
+        try {
+            await fs.chmod(this.apiKeysPath, 0o600);
+        }
+        catch (error) {
+            console.warn('Warning: Could not set secure permissions on API keys file');
+        }
+    }
+    /**
+     * List saved API key references
+     */
+    async listAPIKeyReferences() {
+        try {
+            if (await fs.pathExists(this.apiKeysPath)) {
+                return await fs.readJSON(this.apiKeysPath);
+            }
+            return [];
+        }
+        catch (error) {
+            return [];
+        }
+    }
+    /**
+     * Remove API key reference
+     */
+    async removeAPIKeyReference(keyId) {
+        try {
+            if (await fs.pathExists(this.apiKeysPath)) {
+                let apiKeys = await fs.readJSON(this.apiKeysPath);
+                apiKeys = apiKeys.filter((k) => k.id !== keyId);
+                await fs.writeJSON(this.apiKeysPath, apiKeys, { spaces: 2 });
+            }
+        }
+        catch (error) {
+            console.error('Error removing API key reference:', error);
+        }
+    }
+    /**
+     * Check if user is authenticated
+     */
+    async isAuthenticated() {
+        const credentials = await this.loadCredentials();
+        if (!credentials)
+            return false;
+        return !this.isExpired(credentials);
+    }
+    /**
+     * Get credentials directory path
+     */
+    getCredentialsDir() {
+        return this.credentialsDir;
+    }
+    /**
+     * Get credentials file path
+     */
+    getCredentialsPath() {
+        return this.credentialsPath;
+    }
+}
+//# sourceMappingURL=credentials-manager.js.map

package/dist/auth/credentials-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials-manager.js","sourceRoot":"","sources":["../../src/auth/credentials-manager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AASpB,MAAM,OAAO,kBAAkB;IACrB,cAAc,CAAS;IACvB,eAAe,CAAS;IACxB,WAAW,CAAS;IAE5B,YAAY,SAAmC,EAAE;QAC/C,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;QACjF,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QACpG,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAEzF,IAAI,CAAC,oBAAoB,EAAE,CAAC;IAC9B,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,oBAAoB;QAChC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAExC,oEAAoE;QACpE,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,WAA4B;QAChD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAErE,iEAAiE;QACjE,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe;QACnB,IAAI,CAAC;YACH,IAAI,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC9C,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACjD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB;QACpB,IAAI,CAAC;YACH,IAAI,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC9C,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,WAA4B;QACpC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,oDAAoD;QACpD,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAC/B,OAAO,SAAS,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,OAAiC;QACvD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC7C,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;YAC3C,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,wBAAwB;QAC5B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QACjD,OAAO,WAAW,EAAE,eAAe,IAAI,IAAI,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAAC,cAAsB;QACjD,MAAM,IAAI,CAAC,iBAAiB,CAAC,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe;QACnB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QACjD,OAAO,WAAW,EAAE,MAAM,IAAI,IAAI,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,KAAa;QAC/B,MAAM,IAAI,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CAAC,MAA2B;QACnD,IAAI,OAAO,GAA0B,EAAE,CAAC;QAExC,IAAI,CAAC;YACH,IAAI,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC1C,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kDAAkD;YAClD,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;QAED,wBAAwB;QACxB,MAAM,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC;QACnE,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAED,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAE7D,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB;QACxB,IAAI,CAAC;YACH,IAAI,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC1C,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC7C,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CAAC,KAAa;QACvC,IAAI,CAAC;YACH,IAAI,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC1C,IAAI,OAAO,GAA0B,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACzE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC;gBAChD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe;QACnB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QACjD,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QAE/B,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;CACF"}

package/dist/cli.d.ts

@@ -1,35 +1,10 @@
 /**
- * CLI Setup and Command Registration for Nexus CLI
+ * Nexus CLI - Main Application
  *
- * Sets up Commander.js with all commands, global options,
- * and help system integration.
+ * Orchestrates the entire CLI system with Commander.js
  */
-import { Command } from 'commander';
-import type { OutputFormat } from './types/output.js';
-export interface GlobalOptions {
-    config?: string;
-    profile?: string;
-    outputFormat?: OutputFormat;
-    verbose?: boolean;
-    quiet?: boolean;
-    noColor?: boolean;
-    timeout?: number;
-    retries?: number;
-}
 /**
- * Create and configure the CLI program
+ * Main CLI entry point
  */
-export declare function createCLI(): Command;
-/**
- * Setup CLI with global configuration and error handling
- */
-export declare function setupCLI(): Promise<Command>;
-/**
- * Register all commands (called from index.ts)
- */
-export declare function registerCommands(program: Command): void;
-/**
- * Parse CLI arguments and execute
- */
-export declare function runCLI(argv?: string[]): Promise<void>;
+export declare function runCLI(): Promise<void>;
 //# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMpC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,wBAAgB,SAAS,IAAI,OAAO,CAqCnC;AAED;;GAEG;AACH,wBAAsB,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,CA6BjD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAsDvD;AAED;;GAEG;AACH,wBAAsB,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAM3D"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAwIH;;GAEG;AACH,wBAAsB,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAuF5C"}