@cefense-npm/cefense-cli 0.1.0

package/dist/core/config.js

@@ -0,0 +1,85 @@
+import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+export const DEFAULT_API_URL = "https://cefense.com";
+const DISCOVERY_TTL_MS = 5 * 60_000;
+export function dataDir() {
+    return join(homedir(), ".cefense-cli");
+}
+export function ensureDataDir() {
+    const dir = dataDir();
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true, mode: 0o700 });
+    return dir;
+}
+function filePath(name) {
+    return join(dataDir(), name);
+}
+function readJson(name) {
+    try {
+        return JSON.parse(readFileSync(filePath(name), "utf8"));
+    }
+    catch {
+        return null;
+    }
+}
+function writeJson(name, value, mode = 0o600) {
+    ensureDataDir();
+    writeFileSync(filePath(name), `${JSON.stringify(value, null, 2)}\n`, { mode });
+}
+export function readPreferences() {
+    return readJson("config.json") ?? {};
+}
+export function writePreferences(preferences) {
+    writeJson("config.json", preferences);
+}
+export function normaliseApiUrl(value) {
+    const trimmed = value.trim().replace(/\/+$/, "");
+    const withScheme = /^https?:\/\//i.test(trimmed) ? trimmed : `https://${trimmed}`;
+    return new URL(withScheme).origin;
+}
+export function resolveApiUrl(flag) {
+    const candidate = flag ?? process.env.CEFENSE_API_URL ?? readPreferences().apiUrl ?? DEFAULT_API_URL;
+    return normaliseApiUrl(candidate);
+}
+export function readRepoDefault(scope) {
+    return (readJson("defaults.json") ?? {})[scope] ?? null;
+}
+export function writeRepoDefault(scope, value) {
+    const all = readJson("defaults.json") ?? {};
+    all[scope] = value;
+    writeJson("defaults.json", all);
+}
+export function clearRepoDefault(scope) {
+    const all = readJson("defaults.json") ?? {};
+    if (!(scope in all))
+        return false;
+    delete all[scope];
+    writeJson("defaults.json", all);
+    return true;
+}
+export function readCachedDiscovery(apiUrl) {
+    const entry = (readJson("discovery.json") ?? {})[apiUrl];
+    if (!entry)
+        return null;
+    if (Date.now() - entry.fetchedAt > DISCOVERY_TTL_MS)
+        return null;
+    return entry.config;
+}
+export function writeCachedDiscovery(apiUrl, config) {
+    const all = readJson("discovery.json") ?? {};
+    all[apiUrl] = { fetchedAt: Date.now(), config };
+    writeJson("discovery.json", all);
+}
+export function credentialsFilePath() {
+    return filePath("credentials.json");
+}
+export function removeCredentialsFile() {
+    try {
+        rmSync(credentialsFilePath(), { force: true });
+    }
+    catch {
+        return;
+    }
+}
+//# sourceMappingURL=config.js.map

package/dist/core/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,MAAM,CAAC,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAYrD,MAAM,gBAAgB,GAAG,CAAC,GAAG,MAAM,CAAC;AAEpC,MAAM,UAAU,OAAO;IACrB,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,QAAQ,CAAI,IAAY;IAC/B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAM,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,KAAc,EAAE,IAAI,GAAG,KAAK;IAC3D,aAAa,EAAE,CAAC;IAChB,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,QAAQ,CAAiB,aAAa,CAAC,IAAI,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,WAA2B;IAC1D,SAAS,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,OAAO,EAAE,CAAC;IAClF,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAa;IACzC,MAAM,SAAS,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,eAAe,EAAE,CAAC,MAAM,IAAI,eAAe,CAAC;IACrG,OAAO,eAAe,CAAC,SAAS,CAAC,CAAC;AACpC,CAAC;AAID,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,CAAC,QAAQ,CAAe,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,KAAkB;IAChE,MAAM,GAAG,GAAG,QAAQ,CAAe,eAAe,CAAC,IAAI,EAAE,CAAC;IAC1D,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;IACnB,SAAS,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,MAAM,GAAG,GAAG,QAAQ,CAAe,eAAe,CAAC,IAAI,EAAE,CAAC;IAC1D,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAClC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;IAClB,SAAS,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IAChC,OAAO,IAAI,CAAC;AACd,CAAC;AAMD,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,MAAM,KAAK,GAAG,CAAC,QAAQ,CAAiB,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACzE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,GAAG,gBAAgB;QAAE,OAAO,IAAI,CAAC;IACjE,OAAO,KAAK,CAAC,MAAM,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,MAAyB;IAC5E,MAAM,GAAG,GAAG,QAAQ,CAAiB,gBAAgB,CAAC,IAAI,EAAE,CAAC;IAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC;IAChD,SAAS,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,QAAQ,CAAC,kBAAkB,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,IAAI,CAAC;QACH,MAAM,CAAC,mBAAmB,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;AACH,CAAC"}

package/dist/core/credentials.d.ts

@@ -0,0 +1,17 @@
+import type { StoredCredentials } from "./types.js";
+export type CredentialBackend = "keychain" | "file" | "environment" | "none";
+export interface CredentialState {
+    credentials: StoredCredentials | null;
+    backend: CredentialBackend;
+}
+export declare function keychainName(): string;
+export declare function credentialsFromEnvironment(apiUrl: string): StoredCredentials | null;
+export declare function loadCredentials(apiUrl: string): Promise<CredentialState>;
+export interface SaveResult {
+    backend: CredentialBackend;
+    warning: string | null;
+}
+export declare function saveCredentials(apiUrl: string, credentials: StoredCredentials): Promise<SaveResult>;
+export declare function deleteCredentials(apiUrl: string): Promise<void>;
+export declare function listStoredOrigins(): Promise<string[]>;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/core/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/core/credentials.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAIpD,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,MAAM,GAAG,aAAa,GAAG,MAAM,CAAC;AAE7E,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACtC,OAAO,EAAE,iBAAiB,CAAC;CAC5B;AAsBD,wBAAgB,YAAY,IAAI,MAAM,CAIrC;AAkCD,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAYnF;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAiB9E;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,iBAAiB,GAC7B,OAAO,CAAC,UAAU,CAAC,CA2BrB;AAED,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAerE;AAED,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAE3D"}

package/dist/core/credentials.js

@@ -0,0 +1,139 @@
+import { chmodSync, existsSync, readFileSync, writeFileSync } from "node:fs";
+import { credentialsFilePath, ensureDataDir, removeCredentialsFile } from "./config.js";
+const SERVICE = "cefense-cli";
+let keyringModule;
+async function loadKeyring() {
+    if (keyringModule !== undefined)
+        return keyringModule;
+    try {
+        keyringModule = (await import("@napi-rs/keyring"));
+    }
+    catch {
+        keyringModule = null;
+    }
+    return keyringModule;
+}
+export function keychainName() {
+    if (process.platform === "darwin")
+        return "the macOS Keychain";
+    if (process.platform === "win32")
+        return "Windows Credential Manager";
+    return "the system keyring";
+}
+function parse(raw) {
+    if (!raw)
+        return null;
+    try {
+        const value = JSON.parse(raw);
+        return typeof value?.accessToken === "string" ? value : null;
+    }
+    catch {
+        return null;
+    }
+}
+function readFileStore() {
+    try {
+        if (!existsSync(credentialsFilePath()))
+            return {};
+        return JSON.parse(readFileSync(credentialsFilePath(), "utf8"));
+    }
+    catch {
+        return {};
+    }
+}
+function writeFileStore(store) {
+    ensureDataDir();
+    const path = credentialsFilePath();
+    writeFileSync(path, `${JSON.stringify(store, null, 2)}\n`, { mode: 0o600 });
+    try {
+        chmodSync(path, 0o600);
+    }
+    catch {
+        return;
+    }
+}
+export function credentialsFromEnvironment(apiUrl) {
+    const token = process.env.CEFENSE_TOKEN?.trim();
+    if (!token)
+        return null;
+    return {
+        accessToken: token,
+        refreshToken: null,
+        expiresAt: null,
+        subject: null,
+        email: null,
+        clientId: "",
+        issuer: apiUrl,
+    };
+}
+export async function loadCredentials(apiUrl) {
+    const fromEnvironment = credentialsFromEnvironment(apiUrl);
+    if (fromEnvironment)
+        return { credentials: fromEnvironment, backend: "environment" };
+    const keyring = await loadKeyring();
+    if (keyring) {
+        try {
+            const stored = parse(new keyring.Entry(SERVICE, apiUrl).getPassword());
+            if (stored)
+                return { credentials: stored, backend: "keychain" };
+        }
+        catch {
+            void 0;
+        }
+    }
+    const stored = readFileStore()[apiUrl] ?? null;
+    if (stored)
+        return { credentials: stored, backend: "file" };
+    return { credentials: null, backend: "none" };
+}
+export async function saveCredentials(apiUrl, credentials) {
+    const keyring = await loadKeyring();
+    if (keyring) {
+        try {
+            new keyring.Entry(SERVICE, apiUrl).setPassword(JSON.stringify(credentials));
+            return { backend: "keychain", warning: null };
+        }
+        catch (error) {
+            if (process.platform === "win32") {
+                throw error;
+            }
+            const store = readFileStore();
+            store[apiUrl] = credentials;
+            writeFileStore(store);
+            return {
+                backend: "file",
+                warning: `${keychainName()} was unavailable, so the token was written to ${credentialsFilePath()} with owner-only permissions.`,
+            };
+        }
+    }
+    const store = readFileStore();
+    store[apiUrl] = credentials;
+    writeFileStore(store);
+    return {
+        backend: "file",
+        warning: `No system keyring was available, so the token was written to ${credentialsFilePath()} with owner-only permissions.`,
+    };
+}
+export async function deleteCredentials(apiUrl) {
+    const keyring = await loadKeyring();
+    if (keyring) {
+        try {
+            new keyring.Entry(SERVICE, apiUrl).deletePassword();
+        }
+        catch {
+            void 0;
+        }
+    }
+    const store = readFileStore();
+    if (apiUrl in store) {
+        delete store[apiUrl];
+        if (Object.keys(store).length === 0)
+            removeCredentialsFile();
+        else
+            writeFileStore(store);
+    }
+}
+export async function listStoredOrigins() {
+    return Object.keys(readFileStore());
+}
+//# sourceMappingURL=credentials.js.map

package/dist/core/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/core/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAGxF,MAAM,OAAO,GAAG,aAAa,CAAC;AAe9B,IAAI,aAAmG,CAAC;AAExG,KAAK,UAAU,WAAW;IACxB,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IACtD,IAAI,CAAC;QACH,aAAa,GAAG,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAEhD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,oBAAoB,CAAC;IAC/D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,4BAA4B,CAAC;IACtE,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED,SAAS,KAAK,CAAC,GAA8B;IAC3C,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;QACnD,OAAO,OAAO,KAAK,EAAE,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAID,SAAS,aAAa;IACpB,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC;YAAE,OAAO,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,mBAAmB,EAAE,EAAE,MAAM,CAAC,CAAc,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAgB;IACtC,aAAa,EAAE,CAAC;IAChB,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;IACnC,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,MAAc;IACvD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO;QACL,WAAW,EAAE,KAAK;QAClB,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,IAAI;QACX,QAAQ,EAAE,EAAE;QACZ,MAAM,EAAE,MAAM;KACf,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAc;IAClD,MAAM,eAAe,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,eAAe;QAAE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IAErF,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;IACpC,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YACvE,IAAI,MAAM;gBAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,CAAC,CAAC;QACT,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;IAC/C,IAAI,MAAM;QAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC5D,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,WAA8B;IAE9B,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;IACpC,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;YAC5E,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACjC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;YAC9B,KAAK,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC;YAC5B,cAAc,CAAC,KAAK,CAAC,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE,MAAM;gBACf,OAAO,EAAE,GAAG,YAAY,EAAE,iDAAiD,mBAAmB,EAAE,+BAA+B;aAChI,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,KAAK,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC;IAC5B,cAAc,CAAC,KAAK,CAAC,CAAC;IACtB,OAAO;QACL,OAAO,EAAE,MAAM;QACf,OAAO,EAAE,gEAAgE,mBAAmB,EAAE,+BAA+B;KAC9H,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAc;IACpD,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;IACpC,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,cAAc,EAAE,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,CAAC,CAAC;QACT,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;QACrB,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,qBAAqB,EAAE,CAAC;;YACxD,cAAc,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,OAAO,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;AACtC,CAAC"}

package/dist/core/discovery.d.ts

@@ -0,0 +1,8 @@
+import type { CliConfigResponse } from "./types.js";
+declare function compareVersions(left: string, right: string): number;
+export declare function fetchDiscovery(apiUrl: string, options?: {
+    refresh?: boolean;
+}): Promise<CliConfigResponse>;
+export declare function assertVersionSupported(config: CliConfigResponse): void;
+export { compareVersions };
+//# sourceMappingURL=discovery.d.ts.map

package/dist/core/discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../src/core/discovery.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD,iBAAS,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAa5D;AAED,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO,GAClC,OAAO,CAAC,iBAAiB,CAAC,CAoC5B;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAOtE;AAED,OAAO,EAAE,eAAe,EAAE,CAAC"}

package/dist/core/discovery.js

@@ -0,0 +1,62 @@
+import { CefenseError } from "./errors.js";
+import { readCachedDiscovery, writeCachedDiscovery } from "./config.js";
+import { USER_AGENT, VERSION } from "../version.js";
+function compareVersions(left, right) {
+    const parse = (value) => value
+        .split("-")[0]
+        .split(".")
+        .map((part) => Number.parseInt(part, 10) || 0);
+    const a = parse(left);
+    const b = parse(right);
+    for (let index = 0; index < Math.max(a.length, b.length); index += 1) {
+        const diff = (a[index] ?? 0) - (b[index] ?? 0);
+        if (diff !== 0)
+            return diff < 0 ? -1 : 1;
+    }
+    return 0;
+}
+export async function fetchDiscovery(apiUrl, options = {}) {
+    if (!options.refresh) {
+        const cached = readCachedDiscovery(apiUrl);
+        if (cached)
+            return cached;
+    }
+    let response;
+    try {
+        response = await fetch(`${apiUrl}/api/cli/config`, {
+            headers: { accept: "application/json", "user-agent": USER_AGENT },
+            signal: AbortSignal.timeout(15_000),
+        });
+    }
+    catch (cause) {
+        throw new CefenseError(`Could not reach the Cefense API at ${apiUrl}.`, {
+            remedy: "Check your connection, or point somewhere else with --api-url.",
+            cause,
+        });
+    }
+    if (response.status === 503) {
+        throw new CefenseError("The Cefense CLI is not configured on this instance.", {
+            remedy: `Ask an operator to set CEFENSE_CLI_OAUTH_CLIENT_ID on ${apiUrl}.`,
+        });
+    }
+    if (!response.ok) {
+        throw new CefenseError(`The Cefense API at ${apiUrl} returned ${response.status} for /api/cli/config.`, {
+            remedy: "Confirm the URL points at a Cefense deployment.",
+        });
+    }
+    const config = (await response.json());
+    if (!config?.auth?.clientId || !config.auth.authorizationEndpoint) {
+        throw new CefenseError(`The Cefense API at ${apiUrl} returned an unusable CLI configuration.`);
+    }
+    writeCachedDiscovery(apiUrl, config);
+    return config;
+}
+export function assertVersionSupported(config) {
+    if (!config.minimumCliVersion)
+        return;
+    if (compareVersions(VERSION, config.minimumCliVersion) >= 0)
+        return;
+    throw new CefenseError(`This Cefense deployment requires CLI ${config.minimumCliVersion} or newer, and this is ${VERSION}.`, { remedy: "Upgrade with npm install -g cefense@latest." });
+}
+export { compareVersions };
+//# sourceMappingURL=discovery.js.map

package/dist/core/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../src/core/discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAGpD,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE,CAC9B,KAAK;SACF,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE;SACd,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACtB,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACvB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/C,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,UAAiC,EAAE;IAEnC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;IAC5B,CAAC;IAED,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,iBAAiB,EAAE;YACjD,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,YAAY,EAAE,UAAU,EAAE;YACjE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,YAAY,CAAC,sCAAsC,MAAM,GAAG,EAAE;YACtE,MAAM,EAAE,gEAAgE;YACxE,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,YAAY,CAAC,qDAAqD,EAAE;YAC5E,MAAM,EAAE,yDAAyD,MAAM,GAAG;SAC3E,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,YAAY,CAAC,sBAAsB,MAAM,aAAa,QAAQ,CAAC,MAAM,uBAAuB,EAAE;YACtG,MAAM,EAAE,iDAAiD;SAC1D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAsB,CAAC;IAC5D,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAClE,MAAM,IAAI,YAAY,CAAC,sBAAsB,MAAM,0CAA0C,CAAC,CAAC;IACjG,CAAC;IACD,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAyB;IAC9D,IAAI,CAAC,MAAM,CAAC,iBAAiB;QAAE,OAAO;IACtC,IAAI,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC;QAAE,OAAO;IACpE,MAAM,IAAI,YAAY,CACpB,wCAAwC,MAAM,CAAC,iBAAiB,0BAA0B,OAAO,GAAG,EACpG,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAC1D,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,eAAe,EAAE,CAAC"}

package/dist/core/errors.d.ts

@@ -0,0 +1,32 @@
+export declare const EXIT_OK = 0;
+export declare const EXIT_FINDINGS = 1;
+export declare const EXIT_USAGE = 2;
+export declare const EXIT_AUTH = 3;
+export declare const EXIT_API = 4;
+export declare const EXIT_INTERRUPTED = 130;
+export declare class CefenseError extends Error {
+    readonly remedy: string | null;
+    readonly exitCode: number;
+    readonly cause: unknown;
+    constructor(message: string, options?: {
+        remedy?: string | null;
+        exitCode?: number;
+        cause?: unknown;
+    });
+}
+export declare class AuthRequiredError extends CefenseError {
+    constructor(message?: string, remedy?: string);
+}
+export declare class UsageError extends CefenseError {
+    constructor(message: string, remedy?: string);
+}
+export declare class CancelledError extends CefenseError {
+    constructor(message?: string);
+}
+export declare class FeatureRequiredError extends CefenseError {
+    readonly feature: string;
+    constructor(feature: string, pricingUrl: string | null, webUrl: string);
+}
+export declare function isCefenseError(value: unknown): value is CefenseError;
+export declare function messageOf(value: unknown): string;
+//# sourceMappingURL=errors.d.ts.map

package/dist/core/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,IAAI,CAAC;AACzB,eAAO,MAAM,aAAa,IAAI,CAAC;AAC/B,eAAO,MAAM,UAAU,IAAI,CAAC;AAC5B,eAAO,MAAM,SAAS,IAAI,CAAC;AAC3B,eAAO,MAAM,QAAQ,IAAI,CAAC;AAC1B,eAAO,MAAM,gBAAgB,MAAM,CAAC;AAEpC,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,SAAkB,KAAK,EAAE,OAAO,CAAC;gBAG/B,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAO;CAQ/E;AAED,qBAAa,iBAAkB,SAAQ,YAAY;gBACrC,OAAO,SAA2B,EAAE,MAAM,SAAuB;CAI9E;AAED,qBAAa,UAAW,SAAQ,YAAY;gBAC9B,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;CAI7C;AAED,qBAAa,cAAe,SAAQ,YAAY;gBAClC,OAAO,SAAe;CAInC;AAED,qBAAa,oBAAqB,SAAQ,YAAY;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;gBAEb,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM;CAQvE;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAEpE;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAGhD"}

package/dist/core/errors.js

@@ -0,0 +1,56 @@
+export const EXIT_OK = 0;
+export const EXIT_FINDINGS = 1;
+export const EXIT_USAGE = 2;
+export const EXIT_AUTH = 3;
+export const EXIT_API = 4;
+export const EXIT_INTERRUPTED = 130;
+export class CefenseError extends Error {
+    remedy;
+    exitCode;
+    cause;
+    constructor(message, options = {}) {
+        super(message);
+        this.name = "CefenseError";
+        this.remedy = options.remedy ?? null;
+        this.exitCode = options.exitCode ?? EXIT_API;
+        this.cause = options.cause;
+    }
+}
+export class AuthRequiredError extends CefenseError {
+    constructor(message = "You are not signed in.", remedy = "Run cf auth login.") {
+        super(message, { remedy, exitCode: EXIT_AUTH });
+        this.name = "AuthRequiredError";
+    }
+}
+export class UsageError extends CefenseError {
+    constructor(message, remedy) {
+        super(message, { remedy: remedy ?? null, exitCode: EXIT_USAGE });
+        this.name = "UsageError";
+    }
+}
+export class CancelledError extends CefenseError {
+    constructor(message = "Cancelled.") {
+        super(message, { exitCode: EXIT_INTERRUPTED });
+        this.name = "CancelledError";
+    }
+}
+export class FeatureRequiredError extends CefenseError {
+    feature;
+    constructor(feature, pricingUrl, webUrl) {
+        super(`The ${feature} feature pack is required.`, {
+            remedy: `Unlock it at ${pricingUrl ? new URL(pricingUrl, webUrl).toString() : `${webUrl}/pricing`}, or run cf billing upgrade ${feature}.`,
+            exitCode: EXIT_API,
+        });
+        this.name = "FeatureRequiredError";
+        this.feature = feature;
+    }
+}
+export function isCefenseError(value) {
+    return value instanceof CefenseError;
+}
+export function messageOf(value) {
+    if (value instanceof Error)
+        return value.message;
+    return String(value);
+}
+//# sourceMappingURL=errors.js.map

package/dist/core/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC;AACzB,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC;AAC/B,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC;AAC5B,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC;AAC1B,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAEpC,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,MAAM,CAAgB;IACtB,QAAQ,CAAS;IACR,KAAK,CAAU;IAEjC,YACE,OAAe,EACf,UAA0E,EAAE;QAE5E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC;QACrC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAC7C,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,YAAY;IACjD,YAAY,OAAO,GAAG,wBAAwB,EAAE,MAAM,GAAG,oBAAoB;QAC3E,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,MAAM,OAAO,UAAW,SAAQ,YAAY;IAC1C,YAAY,OAAe,EAAE,MAAe;QAC1C,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,OAAO,cAAe,SAAQ,YAAY;IAC9C,YAAY,OAAO,GAAG,YAAY;QAChC,KAAK,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,OAAO,oBAAqB,SAAQ,YAAY;IAC3C,OAAO,CAAS;IAEzB,YAAY,OAAe,EAAE,UAAyB,EAAE,MAAc;QACpE,KAAK,CAAC,OAAO,OAAO,4BAA4B,EAAE;YAChD,MAAM,EAAE,gBAAgB,UAAU,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,UAAU,+BAA+B,OAAO,GAAG;YAC1I,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,KAAK,YAAY,YAAY,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IACjD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC"}

package/dist/core/index.d.ts

@@ -0,0 +1,10 @@
+export { CefenseClient } from "./client.js";
+export { openSession, type GlobalOptions, type Session } from "./session.js";
+export { fetchDiscovery, assertVersionSupported, compareVersions } from "./discovery.js";
+export { loadCredentials, saveCredentials, deleteCredentials, listStoredOrigins, credentialsFromEnvironment, keychainName, type CredentialBackend, type CredentialState, } from "./credentials.js";
+export { challengeFor, createPkcePair, exchangeCode, redirectPorts, refreshCredentials, requestAuthorizationCode, revokeToken, } from "./oauth.js";
+export { DEFAULT_API_URL, dataDir, normaliseApiUrl, readPreferences, readRepoDefault, resolveApiUrl, writePreferences, writeRepoDefault, clearRepoDefault, } from "./config.js";
+export { defaultScope, gitRemote, gitToplevel, matchProject, parseGithubRemote, parseRepoArgument, resolveProject, type RepoLocation, type Resolution, } from "./repo.js";
+export { AuthRequiredError, CancelledError, CefenseError, FeatureRequiredError, UsageError, isCefenseError, EXIT_API, EXIT_AUTH, EXIT_FINDINGS, EXIT_INTERRUPTED, EXIT_OK, EXIT_USAGE, } from "./errors.js";
+export type * from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/core/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,KAAK,aAAa,EAAE,KAAK,OAAO,EAAE,MAAM,cAAc,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACzF,OAAO,EACL,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,0BAA0B,EAC1B,YAAY,EACZ,KAAK,iBAAiB,EACtB,KAAK,eAAe,GACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,aAAa,EACb,kBAAkB,EAClB,wBAAwB,EACxB,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,eAAe,EACf,OAAO,EACP,eAAe,EACf,eAAe,EACf,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,YAAY,EACZ,SAAS,EACT,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,KAAK,YAAY,EACjB,KAAK,UAAU,GAChB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,oBAAoB,EACpB,UAAU,EACV,cAAc,EACd,QAAQ,EACR,SAAS,EACT,aAAa,EACb,gBAAgB,EAChB,OAAO,EACP,UAAU,GACX,MAAM,aAAa,CAAC;AACrB,mBAAmB,YAAY,CAAC"}

package/dist/core/index.js

@@ -0,0 +1,9 @@
+export { CefenseClient } from "./client.js";
+export { openSession } from "./session.js";
+export { fetchDiscovery, assertVersionSupported, compareVersions } from "./discovery.js";
+export { loadCredentials, saveCredentials, deleteCredentials, listStoredOrigins, credentialsFromEnvironment, keychainName, } from "./credentials.js";
+export { challengeFor, createPkcePair, exchangeCode, redirectPorts, refreshCredentials, requestAuthorizationCode, revokeToken, } from "./oauth.js";
+export { DEFAULT_API_URL, dataDir, normaliseApiUrl, readPreferences, readRepoDefault, resolveApiUrl, writePreferences, writeRepoDefault, clearRepoDefault, } from "./config.js";
+export { defaultScope, gitRemote, gitToplevel, matchProject, parseGithubRemote, parseRepoArgument, resolveProject, } from "./repo.js";
+export { AuthRequiredError, CancelledError, CefenseError, FeatureRequiredError, UsageError, isCefenseError, EXIT_API, EXIT_AUTH, EXIT_FINDINGS, EXIT_INTERRUPTED, EXIT_OK, EXIT_USAGE, } from "./errors.js";
+//# sourceMappingURL=index.js.map

package/dist/core/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAoC,MAAM,cAAc,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACzF,OAAO,EACL,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,0BAA0B,EAC1B,YAAY,GAGb,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,aAAa,EACb,kBAAkB,EAClB,wBAAwB,EACxB,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,eAAe,EACf,OAAO,EACP,eAAe,EACf,eAAe,EACf,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,YAAY,EACZ,SAAS,EACT,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,GAGf,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,oBAAoB,EACpB,UAAU,EACV,cAAc,EACd,QAAQ,EACR,SAAS,EACT,aAAa,EACb,gBAAgB,EAChB,OAAO,EACP,UAAU,GACX,MAAM,aAAa,CAAC"}

package/dist/core/oauth.d.ts

@@ -0,0 +1,20 @@
+import type { CliConfigResponse, StoredCredentials } from "./types.js";
+export declare function challengeFor(verifier: string): string;
+export declare function createPkcePair(): {
+    verifier: string;
+    challenge: string;
+};
+export declare function constantTimeEquals(left: string, right: string): boolean;
+export declare function redirectPorts(redirectUris: string[]): number[];
+export interface AuthorizationCode {
+    code: string;
+    redirectUri: string;
+    verifier: string;
+}
+export declare function requestAuthorizationCode(config: CliConfigResponse, handlers: {
+    onUrl: (url: string) => void;
+}): Promise<AuthorizationCode>;
+export declare function exchangeCode(config: CliConfigResponse, authorization: AuthorizationCode): Promise<StoredCredentials>;
+export declare function refreshCredentials(config: CliConfigResponse, refreshToken: string): Promise<StoredCredentials>;
+export declare function revokeToken(config: CliConfigResponse, token: string): Promise<boolean>;
+//# sourceMappingURL=oauth.d.ts.map

package/dist/core/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/core/oauth.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAQvE,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,wBAAgB,cAAc,IAAI;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAGxE;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAKvE;AAED,wBAAgB,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAY9D;AA8CD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,iBAAiB,EACzB,QAAQ,EAAE;IAAE,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,GACzC,OAAO,CAAC,iBAAiB,CAAC,CA2F5B;AAkCD,wBAAsB,YAAY,CAChC,MAAM,EAAE,iBAAiB,EACzB,aAAa,EAAE,iBAAiB,GAC/B,OAAO,CAAC,iBAAiB,CAAC,CAgB5B;AAED,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,iBAAiB,EACzB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,iBAAiB,CAAC,CAY5B;AAED,wBAAsB,WAAW,CAAC,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAW5F"}