@amerged/ohmyhost-mcp 0.1.19 → 0.1.21

package/src/apps/product-cli/command.ts

@@ -1,5 +1,7 @@
 import type { ManagedMailCommand } from "@ohmyhost/sdk-ts";
 import { USER_API_KEY_ID } from "@ohmyhost/contracts/user-api-keys";
+import { WORKOS_USER_API_KEY_PATTERN } from "@ohmyhost/workos-auth-contracts/user-api-keys";
+import { isProfileName, isProfileUserId } from "./profile-store.js";
 export type ProductCliCommand =
   | {
       readonly kind: "github-connect";
@@ -125,6 +127,11 @@ export type ProductCliCommand =
       readonly organizationId: string;
       readonly credentialStore: "native";
     }
+  | {
+      readonly kind: "referral-link";
+      readonly organizationId: string;
+      readonly credentialStore: "native";
+    }
   | {
       readonly kind: "credits-balance";
       readonly organizationId: string;
@@ -182,8 +189,11 @@ export type ProductCliCommand =
   | {
       readonly kind: "login";
       readonly organizationId?: string;
+      /** The user the browser must sign in as; a different account stores nothing. */
+      readonly userId?: string;
       readonly credentialStore: "native";
     }
+  | { readonly kind: "profile-list" }
   | {
       readonly kind: "logout";
       readonly revoke: boolean;
@@ -251,6 +261,18 @@ export type ProductCliCommand =
       readonly projectId: string;
       readonly credentialStore: "native";
     }
+  | {
+      readonly kind: "project-flag-status";
+      readonly projectId: string;
+      readonly credentialStore: "native";
+    }
+  | {
+      readonly kind: "project-flag-set";
+      readonly projectId: string;
+      readonly enabled: boolean;
+      readonly idempotencyKey: string;
+      readonly credentialStore: "native";
+    }
   | {
       readonly kind: "database-write";
       readonly projectId: string;
@@ -421,6 +443,10 @@ export type ProductCliCommand =
       readonly idempotencyKey: string;
       readonly stdin: true;
       readonly wait: boolean;
+      /** Handed over from an OHMYHOST_TOKEN process: only a key of this account may run it. */
+      readonly environmentToken?: HandedAccount;
+      /** Handed over for a saved login: the login that runs it must belong to this account. */
+      readonly profileAccount?: HandedAccount;
       readonly credentialStore: "native";
     }
   | {
@@ -497,6 +523,25 @@ export type ProductCliCommand =
       readonly credentialStore: "native";
     };
 
+/**
+ * Remove the global login selector from argv. Every authenticated command accepts it; `login` uses
+ * the same flag to name the login it adds. The value is an alias, never a credential.
+ */
+export const extractProfileName = (
+  argv: readonly string[],
+): { readonly argv: readonly string[]; readonly profileName?: string } => {
+  const index = argv.indexOf("--profile-name");
+  if (index < 0) return { argv };
+  const value = argv[index + 1];
+  if (
+    value === undefined ||
+    !isProfileName(value) ||
+    argv.indexOf("--profile-name", index + 1) >= 0
+  )
+    throw new InvalidCommandError();
+  return { argv: [...argv.slice(0, index), ...argv.slice(index + 2)], profileName: value };
+};
+
 export class InvalidCommandError extends Error {
   public constructor() {
     super("The command arguments are invalid.");
@@ -521,6 +566,7 @@ export type RecognizedCommandLabel =
   | "version"
   | "whoami"
   | "credits account"
+  | "referral link"
   | "credits balance"
   | "credits usage"
   | "budget get"
@@ -528,6 +574,7 @@ export type RecognizedCommandLabel =
   | "init"
   | "login"
   | "logout"
+  | "profile list"
   | "operation get"
   | "operation reconcile"
   | "token create"
@@ -548,6 +595,8 @@ export type RecognizedCommandLabel =
   | "project dev-share rotate"
   | "project dev-share revoke"
   | "project dev-access mode"
+  | "project flag status"
+  | "project flag set"
   | "project handle check"
   | "project handle set"
   | "database write"
@@ -598,6 +647,10 @@ export const recognizedCommandLabel = (argv: readonly string[]): RecognizedComma
   if (values.includes("--version")) return "version";
   while (values.length > 0) {
     const value = values.shift();
+    if (value === "--profile-name") {
+      values.shift();
+      continue;
+    }
     if (
       value === "--json" ||
       value === "--dry-run" ||
@@ -618,10 +671,12 @@ export const recognizedCommandLabel = (argv: readonly string[]): RecognizedComma
       value === "logout"
     )
       return value;
+    if (value === "profile" && values[0] === "list") return "profile list";
     if (value === "github" && values[0] === "connect") return "github connect";
     if (value === "github" && values[0] === "status") return "github status";
     if (value === "operation" && values[0] === "get") return "operation get";
     if (value === "credits" && values[0] === "account") return "credits account";
+    if (value === "referral" && values[0] === "link") return "referral link";
     if (value === "credits" && values[0] === "balance") return "credits balance";
     if (value === "billing" && values[0] === "recharge" && values[1] === "get")
       return "billing recharge get";
@@ -667,6 +722,10 @@ export const recognizedCommandLabel = (argv: readonly string[]): RecognizedComma
       return "project dev-access mode";
     if (value === "project" && values[0] === "dev-access" && values[1] === "create")
       return "project dev-access create";
+    if (value === "project" && values[0] === "flag" && values[1] === "status")
+      return "project flag status";
+    if (value === "project" && values[0] === "flag" && values[1] === "set")
+      return "project flag set";
     if (value === "database" && values[0] === "compute" && values[1] === "set")
       return "database compute set";
     if (value === "database" && values[0] === "compute" && values[1] === "get")
@@ -788,16 +847,32 @@ export const parseProductCliCommand = (argv: readonly string[]): ProductCliComma
   }
   if (dryRun) throw new InvalidCommandError();
   if (first === "login" && !revoke && !yes && !wait && !follow && !stdin) {
-    const options = parseOptionalOptions(values, ["--organization"]);
+    const options = parseOptionalOptions(values, ["--organization", "--user"]);
     const organizationId = options["--organization"];
-    if (organizationId !== undefined && !ORGANIZATION_ULID.test(organizationId))
+    const userId = options["--user"];
+    if (
+      (organizationId !== undefined && !ORGANIZATION_ULID.test(organizationId)) ||
+      (userId !== undefined && !isProfileUserId(userId))
+    )
       throw new InvalidCommandError();
     return {
       kind: "login",
       ...(organizationId === undefined ? {} : { organizationId }),
+      ...(userId === undefined ? {} : { userId }),
       credentialStore,
     };
   }
+  if (
+    first === "profile" &&
+    values.length === 1 &&
+    values[0] === "list" &&
+    !revoke &&
+    !yes &&
+    !wait &&
+    !follow &&
+    !stdin
+  )
+    return { kind: "profile-list" };
   if (first === "logout") {
     if (!yes && !wait && !follow && !stdin && values.length === 0)
       return { kind: "logout", revoke, credentialStore };
@@ -1030,6 +1105,12 @@ export const parseProductCliCommand = (argv: readonly string[]): ProductCliComma
     const options = parseOptions(values, ["--organization"]);
     return { kind: "credits-account", organizationId: options["--organization"], credentialStore };
   }
+  if (first === "referral" && values[0] === "link") {
+    values.shift();
+    if (yes || wait || follow || stdin) throw new InvalidCommandError();
+    const options = parseOptions(values, ["--organization"]);
+    return { kind: "referral-link", organizationId: options["--organization"], credentialStore };
+  }
   if (first === "credits" && values.shift() === "balance") {
     if (yes || wait || follow || stdin) throw new InvalidCommandError();
     const options = parseOptions(values, ["--organization"]);
@@ -1216,6 +1297,27 @@ export const parseProductCliCommand = (argv: readonly string[]): ProductCliComma
         credentialStore,
       };
     }
+    if (subcommand === "flag") {
+      const action = values.shift();
+      if (yes || wait || follow || stdin) throw new InvalidCommandError();
+      if (action === "status") {
+        const options = parseOptions(values, ["--project"]);
+        return { kind: "project-flag-status", projectId: options["--project"], credentialStore };
+      }
+      if (action === "set") {
+        const options = parseOptions(values, ["--project", "--enabled", "--idempotency-key"]);
+        if (options["--enabled"] !== "true" && options["--enabled"] !== "false")
+          throw new InvalidCommandError();
+        return {
+          kind: "project-flag-set",
+          projectId: options["--project"],
+          enabled: options["--enabled"] === "true",
+          idempotencyKey: options["--idempotency-key"],
+          credentialStore,
+        };
+      }
+      throw new InvalidCommandError();
+    }
     if (subcommand === "dev-access" && values.shift() === "create") {
       if (yes || wait || follow || stdin) throw new InvalidCommandError();
       const options = parseOptions(values, ["--project"]);
@@ -1781,15 +1883,44 @@ export const parseProductCliCommand = (argv: readonly string[]): ProductCliComma
     values.shift();
     const name = values.shift();
     if (!isUserSecretName(name)) throw new InvalidCommandError();
-    const options = parseOptions(values, ["--project", "--environment", "--idempotency-key"]);
+    const options = parseOptionalOptions(values, [
+      "--project",
+      "--environment",
+      "--idempotency-key",
+      "--token-user",
+      "--token-organization",
+      "--profile-user",
+      "--profile-organization",
+    ]);
+    const projectId = options["--project"];
+    const environmentId = options["--environment"];
+    const idempotencyKey = options["--idempotency-key"];
+    const environmentToken = handedAccount(
+      options["--token-user"],
+      options["--token-organization"],
+    );
+    const profileAccount = handedAccount(
+      options["--profile-user"],
+      options["--profile-organization"],
+    );
+    // A key form and a saved-login form contradict each other; neither wins.
+    if (
+      projectId === undefined ||
+      environmentId === undefined ||
+      idempotencyKey === undefined ||
+      (environmentToken !== undefined && profileAccount !== undefined)
+    )
+      throw new InvalidCommandError();
     return {
       kind: "secret-set",
-      projectId: options["--project"],
-      environmentId: options["--environment"],
+      projectId,
+      environmentId,
       name,
-      idempotencyKey: options["--idempotency-key"],
+      idempotencyKey,
       stdin,
       wait,
+      ...(environmentToken === undefined ? {} : { environmentToken }),
+      ...(profileAccount === undefined ? {} : { profileAccount }),
       credentialStore,
     };
   }
@@ -2034,6 +2165,32 @@ const accessTtlSeconds = (value: string | undefined): number => {
 /** A platform organization identifier as the API returns it. */
 const ORGANIZATION_ULID = /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u;
 
+/** The account a command handed to a terminal must run as; never a credential. */
+export interface HandedAccount {
+  readonly userId: string;
+  readonly organizationId: string;
+}
+
+/**
+ * A user and an organization named together, or neither. A pasted key is refused here, before any
+ * message could repeat it.
+ */
+const handedAccount = (
+  userId: string | undefined,
+  organizationId: string | undefined,
+): HandedAccount | undefined => {
+  if (userId === undefined && organizationId === undefined) return undefined;
+  if (
+    userId === undefined ||
+    organizationId === undefined ||
+    !isProfileUserId(userId) ||
+    WORKOS_USER_API_KEY_PATTERN.test(userId) ||
+    !ORGANIZATION_ULID.test(organizationId)
+  )
+    throw new InvalidCommandError();
+  return { userId, organizationId };
+};
+
 const isValue = (value: string | undefined): value is string =>
   value !== undefined && value.length > 0 && !value.startsWith("--");