@athsra/cli 0.1.0

package/src/lib/env-format.ts

@@ -0,0 +1,31 @@
+/**
+ * .env 형식 parser/serializer (KEY=value, # comment, blank lines).
+ * Phase 0 minimal — escape, multiline, $expansion 미지원.
+ */
+
+export function parseEnv(text: string): Record<string, string> {
+  const out: Record<string, string> = {};
+  for (const line of text.split('\n')) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith('#')) continue;
+    const eqIdx = trimmed.indexOf('=');
+    if (eqIdx < 0) continue;
+    const key = trimmed.slice(0, eqIdx).trim();
+    let value = trimmed.slice(eqIdx + 1).trim();
+    // strip surrounding quotes
+    if (
+      (value.startsWith('"') && value.endsWith('"')) ||
+      (value.startsWith("'") && value.endsWith("'"))
+    ) {
+      value = value.slice(1, -1);
+    }
+    out[key] = value;
+  }
+  return out;
+}
+
+export function serializeEnv(plain: Record<string, string>): string {
+  return Object.entries(plain)
+    .map(([k, v]) => `${k}=${v}`)
+    .join('\n');
+}

package/src/lib/keyring.ts

@@ -0,0 +1,65 @@
+import { Entry } from '@napi-rs/keyring';
+
+const SERVICE = 'athsra';
+
+function entry(account: string): Entry {
+  return new Entry(SERVICE, account);
+}
+
+export function setMasterPw(machineId: string, pw: string): void {
+  entry(`master-pw:${machineId}`).setPassword(pw);
+}
+
+export function getMasterPw(machineId: string): string | null {
+  try {
+    return entry(`master-pw:${machineId}`).getPassword();
+  } catch {
+    return null;
+  }
+}
+
+export function clearMasterPw(machineId: string): void {
+  try {
+    entry(`master-pw:${machineId}`).deletePassword();
+  } catch {
+    /* ignore */
+  }
+}
+
+export function setToken(machineId: string, token: string): void {
+  entry(`token:${machineId}`).setPassword(token);
+}
+
+export function getToken(machineId: string): string | null {
+  try {
+    return entry(`token:${machineId}`).getPassword();
+  } catch {
+    return null;
+  }
+}
+
+export function clearToken(machineId: string): void {
+  try {
+    entry(`token:${machineId}`).deletePassword();
+  } catch {
+    /* ignore */
+  }
+}
+
+export interface ProbeResult {
+  ok: boolean;
+  error?: string;
+}
+
+export function probeKeyring(): ProbeResult {
+  try {
+    const probe = entry('__probe__');
+    probe.setPassword('1');
+    const got = probe.getPassword();
+    probe.deletePassword();
+    if (got === '1') return { ok: true };
+    return { ok: false, error: 'set/get round-trip mismatch' };
+  } catch (err) {
+    return { ok: false, error: (err as Error).message };
+  }
+}

package/src/lib/legacy-session.ts

@@ -0,0 +1,37 @@
+import { existsSync, readFileSync, unlinkSync } from 'node:fs';
+import { SESSION_FILE } from './config.ts';
+
+interface LegacySession {
+  masterPw: string;
+  expiresAt: number;
+}
+
+/**
+ * Phase 0 plaintext session file (~/.athsra/session, 8h TTL, 0600)
+ * 의 1회성 migration helper. file 발견 시 master pw 반환 + file 삭제.
+ *
+ * Phase 1+: keyring (`@napi-rs/keyring`) 표준. 이 함수는
+ * 기존 사용자 1회 migration 후 영구 deprecated.
+ */
+export function consumeLegacySession(): { masterPw: string } | null {
+  if (!existsSync(SESSION_FILE)) return null;
+  let parsed: LegacySession | null = null;
+  try {
+    const raw = readFileSync(SESSION_FILE, 'utf-8');
+    if (raw) {
+      const json = JSON.parse(raw) as LegacySession;
+      if (typeof json.masterPw === 'string' && json.masterPw.length > 0) {
+        parsed = json;
+      }
+    }
+  } catch {
+    /* fall through to delete */
+  }
+  try {
+    unlinkSync(SESSION_FILE);
+  } catch {
+    /* ignore */
+  }
+  if (!parsed) return null;
+  return { masterPw: parsed.masterPw };
+}

package/src/lib/prompt.ts

@@ -0,0 +1,33 @@
+import prompts from 'prompts';
+
+export async function promptPassword(message: string): Promise<string> {
+  const response = await prompts({
+    type: 'password',
+    name: 'value',
+    message,
+  });
+  if (!response.value) {
+    throw new Error('cancelled');
+  }
+  return response.value as string;
+}
+
+export async function promptText(message: string, initial?: string): Promise<string> {
+  const response = await prompts({
+    type: 'text',
+    name: 'value',
+    message,
+    initial,
+  });
+  return (response.value as string) ?? '';
+}
+
+export async function promptConfirm(message: string, initial = false): Promise<boolean> {
+  const response = await prompts({
+    type: 'confirm',
+    name: 'value',
+    message,
+    initial,
+  });
+  return Boolean(response.value);
+}