@build-astron-co/nimbus 0.4.1 → 0.4.3

package/src/commands/auth-cloud.ts

@@ -1,407 +0,0 @@
-/**
- * Cloud Credential Management Commands
- *
- * Validate and display cloud provider credentials.
- *
- * Usage:
- *   nimbus auth aws [--profile <name>]
- *   nimbus auth gcp [--project <name>]
- *   nimbus auth azure [--subscription <id>]
- */
-
-import { logger } from '../utils';
-import { ui } from '../wizard/ui';
-
-export interface AuthCloudOptions {
-  profile?: string;
-  project?: string;
-  subscription?: string;
-  region?: string;
-}
-
-/**
- * Check if a CLI tool is installed
- */
-async function isCliInstalled(cmd: string): Promise<boolean> {
-  const { execFile } = await import('child_process');
-  const { promisify } = await import('util');
-  const execFileAsync = promisify(execFile);
-
-  try {
-    await execFileAsync(cmd, ['--version'], { timeout: 5000 });
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-/**
- * Run a CLI command and capture output
- */
-async function runCommand(
-  cmd: string,
-  args: string[]
-): Promise<{ stdout: string; success: boolean }> {
-  const { execFile } = await import('child_process');
-  const { promisify } = await import('util');
-  const execFileAsync = promisify(execFile);
-
-  try {
-    const { stdout } = await execFileAsync(cmd, args, { timeout: 15000 });
-    return { stdout: stdout.trim(), success: true };
-  } catch (error: any) {
-    return { stdout: error.stdout?.trim() || error.message, success: false };
-  }
-}
-
-/**
- * nimbus auth aws — Validate AWS credentials
- */
-export async function authAwsCommand(options: AuthCloudOptions = {}): Promise<void> {
-  logger.info('Validating AWS credentials', { options });
-
-  ui.header('AWS Credentials');
-
-  // Check if AWS CLI is installed
-  const installed = await isCliInstalled('aws');
-  if (!installed) {
-    ui.error('AWS CLI is not installed');
-    ui.newLine();
-    ui.print('Install the AWS CLI:');
-    ui.print(`  ${ui.dim('brew install awscli')} (macOS)`);
-    ui.print(`  ${ui.dim('pip install awscli')} (pip)`);
-    ui.print(`  ${ui.dim('https://aws.amazon.com/cli/')} (official)`);
-    return;
-  }
-
-  ui.startSpinner({ message: 'Validating AWS credentials...' });
-
-  // Get caller identity
-  const identityArgs = ['sts', 'get-caller-identity', '--output', 'json'];
-  if (options.profile) {
-    identityArgs.push('--profile', options.profile);
-  }
-
-  const identity = await runCommand('aws', identityArgs);
-
-  if (!identity.success) {
-    ui.stopSpinnerFail('AWS credentials validation failed');
-    ui.newLine();
-    ui.error('Unable to validate AWS credentials');
-    ui.print(ui.dim(identity.stdout));
-    ui.newLine();
-    ui.print('Configure credentials:');
-    ui.print(`  ${ui.dim('aws configure')}`);
-    ui.print(`  ${ui.dim('export AWS_ACCESS_KEY_ID=...')}`);
-    ui.print(`  ${ui.dim('export AWS_SECRET_ACCESS_KEY=...')}`);
-    return;
-  }
-
-  ui.stopSpinnerSuccess('AWS credentials valid');
-  ui.newLine();
-
-  // Parse identity
-  try {
-    const data = JSON.parse(identity.stdout);
-    ui.print(`  ${ui.bold('Account:')}  ${data.Account}`);
-    ui.print(`  ${ui.bold('User ARN:')} ${data.Arn}`);
-    ui.print(`  ${ui.bold('User ID:')}  ${data.UserId}`);
-  } catch {
-    ui.print(`  ${identity.stdout}`);
-  }
-
-  // Get current region
-  const regionArgs = ['configure', 'get', 'region'];
-  if (options.profile) {
-    regionArgs.push('--profile', options.profile);
-  }
-
-  const region = await runCommand('aws', regionArgs);
-  if (region.success && region.stdout) {
-    ui.print(`  ${ui.bold('Region:')}   ${region.stdout}`);
-  }
-
-  if (options.profile) {
-    ui.print(`  ${ui.bold('Profile:')}  ${options.profile}`);
-  }
-
-  ui.newLine();
-  ui.success('AWS credentials are configured and valid');
-}
-
-/**
- * nimbus auth gcp — Validate GCP credentials
- */
-export async function authGcpCommand(options: AuthCloudOptions = {}): Promise<void> {
-  logger.info('Validating GCP credentials', { options });
-
-  ui.header('GCP Credentials');
-
-  // Check if gcloud CLI is installed
-  const installed = await isCliInstalled('gcloud');
-  if (!installed) {
-    ui.error('Google Cloud SDK (gcloud) is not installed');
-    ui.newLine();
-    ui.print('Install the Google Cloud SDK:');
-    ui.print(`  ${ui.dim('brew install google-cloud-sdk')} (macOS)`);
-    ui.print(`  ${ui.dim('https://cloud.google.com/sdk/docs/install')} (official)`);
-    return;
-  }
-
-  ui.startSpinner({ message: 'Validating GCP credentials...' });
-
-  // Get current account
-  const account = await runCommand('gcloud', [
-    'auth',
-    'list',
-    '--filter=status:ACTIVE',
-    '--format=value(account)',
-  ]);
-
-  if (!account.success || !account.stdout) {
-    ui.stopSpinnerFail('GCP credentials validation failed');
-    ui.newLine();
-    ui.error('No active GCP credentials found');
-    ui.print('Configure credentials:');
-    ui.print(`  ${ui.dim('gcloud auth login')}`);
-    ui.print(`  ${ui.dim('gcloud auth application-default login')}`);
-    return;
-  }
-
-  ui.stopSpinnerSuccess('GCP credentials valid');
-  ui.newLine();
-
-  ui.print(`  ${ui.bold('Account:')} ${account.stdout}`);
-
-  // Check Application Default Credentials
-  const adcCheck = await runCommand('gcloud', [
-    'auth',
-    'application-default',
-    'print-access-token',
-  ]);
-  if (adcCheck.success) {
-    ui.print(`  ${ui.bold('ADC:')}     ${ui.color('configured', 'green')}`);
-  } else {
-    ui.print(`  ${ui.bold('ADC:')}     ${ui.color('not configured', 'yellow')}`);
-    ui.print(ui.dim('  Set with: gcloud auth application-default login'));
-  }
-
-  // Get current project
-  const projectArgs = options.project
-    ? ['config', 'get-value', 'project', '--project', options.project]
-    : ['config', 'get-value', 'project'];
-  const project = await runCommand('gcloud', projectArgs);
-  if (project.success && project.stdout && project.stdout !== '(unset)') {
-    ui.print(`  ${ui.bold('Project:')} ${project.stdout}`);
-  } else if (options.project) {
-    ui.print(`  ${ui.bold('Project:')} ${options.project}`);
-  } else {
-    ui.print(`  ${ui.bold('Project:')} ${ui.color('not set', 'yellow')}`);
-    ui.print(ui.dim('  Set with: gcloud config set project PROJECT_ID'));
-  }
-
-  // Get current region
-  const region = await runCommand('gcloud', ['config', 'get-value', 'compute/region']);
-  if (region.success && region.stdout && region.stdout !== '(unset)') {
-    ui.print(`  ${ui.bold('Region:')}  ${region.stdout}`);
-  }
-
-  ui.newLine();
-  ui.success('GCP credentials are configured and valid');
-}
-
-/**
- * nimbus auth azure — Validate Azure credentials
- */
-export async function authAzureCommand(options: AuthCloudOptions = {}): Promise<void> {
-  logger.info('Validating Azure credentials', { options });
-
-  ui.header('Azure Credentials');
-
-  // Check if az CLI is installed
-  const installed = await isCliInstalled('az');
-  if (!installed) {
-    ui.error('Azure CLI (az) is not installed');
-    ui.newLine();
-    ui.print('Install the Azure CLI:');
-    ui.print(`  ${ui.dim('brew install azure-cli')} (macOS)`);
-    ui.print(
-      `  ${ui.dim('https://learn.microsoft.com/en-us/cli/azure/install-azure-cli')} (official)`
-    );
-    return;
-  }
-
-  ui.startSpinner({ message: 'Validating Azure credentials...' });
-
-  // Get current account
-  const account = await runCommand('az', ['account', 'show', '--output', 'json']);
-
-  if (!account.success) {
-    ui.stopSpinnerFail('Azure credentials validation failed');
-    ui.newLine();
-    ui.error('No active Azure credentials found');
-    ui.print('Configure credentials:');
-    ui.print(`  ${ui.dim('az login')}`);
-    return;
-  }
-
-  ui.stopSpinnerSuccess('Azure credentials valid');
-  ui.newLine();
-
-  try {
-    const data = JSON.parse(account.stdout);
-    ui.print(`  ${ui.bold('Subscription:')} ${data.name} (${data.id})`);
-    ui.print(`  ${ui.bold('Tenant:')}       ${data.tenantId}`);
-    ui.print(`  ${ui.bold('State:')}        ${data.state}`);
-
-    if (data.user) {
-      ui.print(`  ${ui.bold('User:')}         ${data.user.name} (${data.user.type})`);
-    }
-  } catch {
-    ui.print(`  ${account.stdout}`);
-  }
-
-  ui.newLine();
-  ui.success('Azure credentials are configured and valid');
-}
-
-/**
- * H1: AWS SSO Login — delegates to `aws sso login` so the CLI handles the browser flow.
- * spawnSync with stdio: 'inherit' so device codes / browser prompts appear in terminal.
- */
-export async function loginAwsCommand(options: AuthCloudOptions = {}): Promise<void> {
-  const installed = await isCliInstalled('aws');
-  if (!installed) {
-    ui.error('AWS CLI is not installed. Install from https://aws.amazon.com/cli/');
-    return;
-  }
-
-  ui.info('Launching AWS SSO login...');
-  ui.print(ui.dim('The browser (or device code) flow is handled by the AWS CLI.'));
-  ui.newLine();
-
-  const { spawnSync } = await import('child_process');
-  const args = ['sso', 'login'];
-  if (options.profile) {
-    args.push('--profile', options.profile);
-  }
-
-  const result = spawnSync('aws', args, { stdio: 'inherit' });
-  if (result.status === 0) {
-    ui.success('AWS SSO login completed successfully.');
-  } else {
-    ui.error('AWS SSO login failed or was cancelled.');
-  }
-}
-
-/**
- * H1: GCP Login — delegates to `gcloud auth login --no-launch-browser` (device code flow).
- */
-export async function loginGcpCommand(options: AuthCloudOptions = {}): Promise<void> {
-  const installed = await isCliInstalled('gcloud');
-  if (!installed) {
-    ui.error('Google Cloud SDK not installed. See https://cloud.google.com/sdk/docs/install');
-    return;
-  }
-
-  ui.info('Launching GCP device-code login...');
-  ui.print(ui.dim('Follow the URL and code shown below to complete authentication.'));
-  ui.newLine();
-
-  const { spawnSync } = await import('child_process');
-  const args = ['auth', 'login', '--no-launch-browser'];
-  if (options.project) {
-    args.push('--project', options.project);
-  }
-
-  const result = spawnSync('gcloud', args, { stdio: 'inherit' });
-  if (result.status === 0) {
-    ui.success('GCP login completed successfully.');
-  } else {
-    ui.error('GCP login failed or was cancelled.');
-  }
-}
-
-/**
- * H1: Azure Login — delegates to `az login --use-device-code`.
- */
-export async function loginAzureCommand(options: AuthCloudOptions = {}): Promise<void> {
-  const installed = await isCliInstalled('az');
-  if (!installed) {
-    ui.error('Azure CLI not installed. See https://learn.microsoft.com/en-us/cli/azure/install-azure-cli');
-    return;
-  }
-
-  ui.info('Launching Azure device-code login...');
-  ui.print(ui.dim('Follow the URL and code shown below to complete authentication.'));
-  ui.newLine();
-
-  const { spawnSync } = await import('child_process');
-  const args = ['login', '--use-device-code'];
-  if (options.subscription) {
-    args.push('--subscription', options.subscription);
-  }
-
-  const result = spawnSync('az', args, { stdio: 'inherit' });
-  if (result.status === 0) {
-    ui.success('Azure login completed successfully.');
-  } else {
-    ui.error('Azure login failed or was cancelled.');
-  }
-}
-
-/**
- * Cloud auth parent command router
- */
-export async function authCloudCommand(
-  provider: string,
-  options: AuthCloudOptions = {}
-): Promise<void> {
-  switch (provider) {
-    case 'aws':
-      await authAwsCommand(options);
-      break;
-    case 'gcp':
-    case 'google':
-      await authGcpCommand(options);
-      break;
-    case 'azure':
-      await authAzureCommand(options);
-      break;
-    default:
-      ui.error(`Unknown cloud provider: ${provider}`);
-      ui.newLine();
-      ui.print('Supported providers:');
-      ui.print('  nimbus auth aws     — Validate AWS credentials');
-      ui.print('  nimbus auth gcp     — Validate GCP credentials');
-      ui.print('  nimbus auth azure   — Validate Azure credentials');
-  }
-}
-
-/**
- * Cloud login command router — delegates to CLI tools for SSO/OAuth flows (H1).
- */
-export async function loginCloudCommand(
-  provider: string,
-  options: AuthCloudOptions = {}
-): Promise<void> {
-  switch (provider) {
-    case 'aws':
-      await loginAwsCommand(options);
-      break;
-    case 'gcp':
-    case 'google':
-      await loginGcpCommand(options);
-      break;
-    case 'azure':
-      await loginAzureCommand(options);
-      break;
-    default:
-      ui.error(`Unknown cloud provider: ${provider}`);
-      ui.newLine();
-      ui.print('Supported providers:');
-      ui.print('  nimbus auth login aws     — AWS SSO login (browser/device code)');
-      ui.print('  nimbus auth login gcp     — GCP device-code login');
-      ui.print('  nimbus auth login azure   — Azure device-code login');
-  }
-}

package/src/commands/auth-list.ts

@@ -1,134 +0,0 @@
-/**
- * Auth List Command
- *
- * Display all available providers and their configuration status
- *
- * Usage: nimbus auth list
- */
-
-import { logger } from '../utils';
-import { ui } from '../wizard';
-import { authStore, AuthStore, getProviderNames, getProviderInfo } from '../auth';
-
-/**
- * Command options
- */
-export interface AuthListOptions {
-  json?: boolean;
-}
-
-/**
- * Run the auth list command
- */
-export async function authListCommand(options: AuthListOptions = {}): Promise<void> {
-  logger.info('Listing auth providers');
-
-  const providerNames = getProviderNames();
-  const status = authStore.getStatus();
-  const configuredProviders = new Set(status.providers.map(p => p.name));
-
-  // Build provider data
-  const providerData = providerNames.map(name => {
-    const info = getProviderInfo(name);
-    const credential = authStore.getProvider(name);
-    const isConfigured = configuredProviders.has(name);
-    const isDefault = status.defaultProvider === name;
-
-    return {
-      name,
-      displayName: info.displayName,
-      description: info.description,
-      isConfigured,
-      isDefault,
-      model: credential?.model || info.models.find(m => m.isDefault)?.id || info.models[0].id,
-      apiKey: credential?.apiKey,
-      baseUrl: credential?.baseUrl,
-      requiresApiKey: info.requiresApiKey,
-      apiKeyUrl: info.apiKeyUrl,
-    };
-  });
-
-  // JSON output mode
-  if (options.json) {
-    const safeOutput = providerData.map(p => ({
-      name: p.name,
-      displayName: p.displayName,
-      description: p.description,
-      isConfigured: p.isConfigured,
-      isDefault: p.isDefault,
-      model: p.model,
-      apiKey: p.apiKey ? AuthStore.maskApiKey(p.apiKey) : null,
-      baseUrl: p.baseUrl,
-      requiresApiKey: p.requiresApiKey,
-    }));
-
-    // Output sanitized JSON (API keys are already masked above)
-    ui.print(JSON.stringify(safeOutput, null, 2));
-    return;
-  }
-
-  // Human-readable table output
-  ui.newLine();
-  ui.section('LLM Providers');
-
-  // Build table data
-  const tableData: Array<Record<string, string>> = [];
-
-  for (const provider of providerData) {
-    const statusIcon = provider.isConfigured ? ui.color('✓', 'green') : ui.dim('—');
-    const statusText = provider.isConfigured ? 'Configured' : 'Not configured';
-
-    let apiKeyDisplay: string;
-    if (provider.isConfigured && provider.apiKey) {
-      apiKeyDisplay = AuthStore.maskApiKey(provider.apiKey);
-    } else if (!provider.requiresApiKey) {
-      apiKeyDisplay = ui.dim('(not needed)');
-    } else if (provider.isConfigured) {
-      apiKeyDisplay = ui.dim('(from env)');
-    } else {
-      apiKeyDisplay = ui.dim('—');
-    }
-
-    const modelDisplay = provider.isConfigured ? provider.model : ui.dim(provider.model);
-    const defaultDisplay = provider.isDefault ? ui.color('★', 'yellow') : '';
-
-    tableData.push({
-      provider: `${statusIcon} ${provider.displayName}`,
-      status: statusText,
-      apiKey: apiKeyDisplay,
-      model: modelDisplay,
-      default: defaultDisplay,
-    });
-  }
-
-  // Display table
-  ui.table({
-    columns: [
-      { key: 'provider', header: 'Provider', width: 25 },
-      { key: 'status', header: 'Status', width: 15 },
-      { key: 'apiKey', header: 'API Key', width: 20 },
-      { key: 'model', header: 'Model', width: 30 },
-      { key: 'default', header: 'Default', width: 8 },
-    ],
-    data: tableData,
-  });
-
-  ui.newLine();
-
-  // Show hints for unconfigured providers
-  const unconfigured = providerData.filter(p => !p.isConfigured);
-  if (unconfigured.length > 0) {
-    ui.print(ui.dim('To configure a provider, run `nimbus login`'));
-    ui.newLine();
-
-    ui.print(ui.dim('API key URLs:'));
-    for (const provider of unconfigured) {
-      if (provider.apiKeyUrl) {
-        ui.print(ui.dim(`  ${provider.displayName}: ${provider.apiKeyUrl}`));
-      }
-    }
-    ui.newLine();
-  }
-}
-
-export default authListCommand;

package/src/commands/auth-profile.ts

@@ -1,121 +0,0 @@
-/**
- * Auth Profile Commands
- *
- * CLI commands for managing authentication profiles and switching providers
- */
-
-import { AuthStore } from '../auth/store';
-import { ui } from '../wizard/ui';
-
-/**
- * List all configured providers
- */
-async function authProfileListCommand(): Promise<void> {
-  ui.header('Auth Profiles');
-
-  const authStore = new AuthStore();
-  const status = authStore.getStatus();
-
-  if (!status.hasProviders) {
-    ui.warning('No providers configured. Run "nimbus login" to set up authentication.');
-    return;
-  }
-
-  ui.table({
-    columns: [
-      { key: 'name', header: 'Provider' },
-      { key: 'model', header: 'Model' },
-      { key: 'default', header: 'Default' },
-      { key: 'validatedAt', header: 'Validated' },
-    ],
-    data: status.providers.map(p => ({
-      name: p.name,
-      model: p.model || '-',
-      default: p.isDefault ? 'Yes' : '',
-      validatedAt: p.validatedAt ? new Date(p.validatedAt).toLocaleDateString() : '-',
-    })),
-  });
-}
-
-/**
- * Show the current default provider
- */
-async function authProfileShowCommand(): Promise<void> {
-  ui.header('Current Auth Profile');
-
-  const authStore = new AuthStore();
-  const defaultProvider = authStore.getDefaultProvider();
-
-  if (!defaultProvider) {
-    ui.warning('No default provider set. Run "nimbus login" to configure.');
-    return;
-  }
-
-  const status = authStore.getStatus();
-  const providerInfo = status.providers.find(p => p.name === defaultProvider);
-
-  ui.print(`  ${ui.color('Provider:', 'cyan')} ${defaultProvider}`);
-  if (providerInfo) {
-    ui.print(`  ${ui.color('Model:', 'cyan')} ${providerInfo.model || '-'}`);
-    ui.print(
-      `  ${ui.color('Validated:', 'cyan')} ${providerInfo.validatedAt ? new Date(providerInfo.validatedAt).toLocaleDateString() : '-'}`
-    );
-  }
-}
-
-/**
- * Switch the default provider
- */
-async function authProfileSwitchCommand(provider: string): Promise<void> {
-  ui.header(`Switch Auth Profile`);
-
-  const authStore = new AuthStore();
-
-  try {
-    authStore.setDefaultProvider(provider as any);
-    ui.success(`Default provider switched to "${provider}"`);
-    ui.info(`Persisted to ${authStore.getAuthPath()}`);
-  } catch (error: any) {
-    ui.error(error.message);
-    ui.info('Available providers:');
-    const status = authStore.getStatus();
-    status.providers.forEach(p => {
-      ui.print(`  - ${p.name}${p.isDefault ? ' (current default)' : ''}`);
-    });
-  }
-}
-
-/**
- * Main auth-profile command router
- */
-export async function authProfileCommand(subcommand: string, args: string[]): Promise<void> {
-  const positionalArgs: string[] = [];
-
-  for (let i = 0; i < args.length; i++) {
-    const arg = args[i];
-    if (!arg.startsWith('-')) {
-      positionalArgs.push(arg);
-    }
-  }
-
-  switch (subcommand) {
-    case 'list':
-    case 'ls':
-      await authProfileListCommand();
-      break;
-    case 'show':
-      await authProfileShowCommand();
-      break;
-    case 'switch':
-      if (positionalArgs.length < 1) {
-        ui.error('Usage: nimbus auth-profile switch <provider>');
-        ui.info('Example: nimbus auth-profile switch openai');
-        return;
-      }
-      await authProfileSwitchCommand(positionalArgs[0]);
-      break;
-    default:
-      ui.error(`Unknown auth-profile subcommand: ${subcommand || '(none)'}`);
-      ui.info('Available commands: list, show, switch <provider>');
-  }
-}