@circle-fin/usdckit 0.17.1 → 0.18.0

package/dist/esm/cli/register-entity-secret.js

@@ -0,0 +1,205 @@
+// Copyright (c) 2025, Circle Internet Group, Inc.
+// All rights reserved.
+//
+// Circle Internet Group, Inc. CONFIDENTIAL
+//
+// This file includes unpublished proprietary source code of Circle Internet
+// Group, Inc. The copyright notice above does not
+// evidence any actual or intended publication of such source code. Disclosure
+// of this source code or any related proprietary information is strictly
+// prohibited without the express written permission of Circle Internet Group, Inc.
+var __addDisposableResource = (this && this.__addDisposableResource) || function (env, value, async) {
+    if (value !== null && value !== void 0) {
+        if (typeof value !== "object" && typeof value !== "function") throw new TypeError("Object expected.");
+        var dispose, inner;
+        if (async) {
+            if (!Symbol.asyncDispose) throw new TypeError("Symbol.asyncDispose is not defined.");
+            dispose = value[Symbol.asyncDispose];
+        }
+        if (dispose === void 0) {
+            if (!Symbol.dispose) throw new TypeError("Symbol.dispose is not defined.");
+            dispose = value[Symbol.dispose];
+            if (async) inner = dispose;
+        }
+        if (typeof dispose !== "function") throw new TypeError("Object not disposable.");
+        if (inner) dispose = function() { try { inner.call(this); } catch (e) { return Promise.reject(e); } };
+        env.stack.push({ value: value, dispose: dispose, async: async });
+    }
+    else if (async) {
+        env.stack.push({ async: true });
+    }
+    return value;
+};
+var __disposeResources = (this && this.__disposeResources) || (function (SuppressedError) {
+    return function (env) {
+        function fail(e) {
+            env.error = env.hasError ? new SuppressedError(e, env.error, "An error was suppressed during disposal.") : e;
+            env.hasError = true;
+        }
+        var r, s = 0;
+        function next() {
+            while (r = env.stack.pop()) {
+                try {
+                    if (!r.async && s === 1) return s = 0, env.stack.push(r), Promise.resolve().then(next);
+                    if (r.dispose) {
+                        var result = r.dispose.call(r.value);
+                        if (r.async) return s |= 2, Promise.resolve(result).then(next, function(e) { fail(e); return next(); });
+                    }
+                    else s |= 1;
+                }
+                catch (e) {
+                    fail(e);
+                }
+            }
+            if (s === 1) return env.hasError ? Promise.reject(env.error) : Promise.resolve();
+            if (env.hasError) throw env.error;
+        }
+        return next();
+    };
+})(typeof SuppressedError === "function" ? SuppressedError : function (error, suppressed, message) {
+    var e = new Error(message);
+    return e.name = "SuppressedError", e.error = error, e.suppressed = suppressed, e;
+});
+import { randomBytes } from 'crypto';
+import { mkdir, open, rename } from 'fs/promises';
+import { dirname, resolve } from 'path';
+import { initiateDeveloperControlledWalletsClient } from '@circle-fin/developer-controlled-wallets';
+import { input, password, confirm } from '@inquirer/prompts';
+import axios from 'axios';
+import { VERSION } from '../metadata.js';
+import { createSecureTempFile, bold, italic, mask } from './utils.js';
+async function registerEntitySecretCiphertext(input) {
+    const baseUrl = input.baseUrl ?? 'https://api.circle.com';
+    const client = initiateDeveloperControlledWalletsClient({
+        apiKey: input.apiKey,
+        entitySecret: input.entitySecret,
+        baseUrl,
+        userAgent: `Circle-USDCKit/${VERSION}`,
+    });
+    const response = await axios.request({
+        method: 'POST',
+        url: `${baseUrl}/v1/w3s/config/entity/entitySecret`,
+        headers: {
+            Authorization: 'Bearer ' + input.apiKey,
+            'Content-Type': 'application/json',
+        },
+        data: {
+            entitySecretCiphertext: await client.generateEntitySecretCiphertext(),
+        },
+    });
+    return response.data;
+}
+export async function action(params) {
+    const env_1 = { stack: [], error: void 0, hasError: false };
+    try {
+        const answers = {
+            apiKey: params.apiKey ??
+                (await password({
+                    message: 'Enter API key:',
+                    mask: '*',
+                    validate: (input) => input !== '',
+                })),
+            entitySecret: params.entitySecret ??
+                (await password({
+                    message: 'Enter Entity Secret (leave empty to auto-generate):',
+                    mask: '*',
+                    validate: (input) => input === '' || /^[0-9a-fA-F]{64}$/.test(input),
+                })).replace(/^$/, randomBytes(32).toString('hex')),
+            recoveryFileDownloadPath: params.recoveryFileDownloadPath ??
+                (await input({
+                    message: 'Enter path for the recovery file:',
+                    default: 'recovery.dat',
+                })),
+            saveToEnvFile: params.saveToEnvFile ??
+                ((await input({
+                    message: 'Enter path to an environment file to append credentials (leave empty to skip):',
+                    default: '.env',
+                })) ||
+                    undefined),
+            baseUrl: params.baseUrl,
+        };
+        if (params.confirm !== false) {
+            const confirmation = (await confirm({
+                message: `
+You are about to register the following Entity Secret with Circle:
+  • ${bold('API Key')}: ${mask(answers.apiKey, { clear: answers.apiKey.length * 0.25 })}
+  • ${bold('API Base URL')}: ${answers.baseUrl}
+  • ${bold('Entity Secret')}: ${answers.entitySecret}
+  • ${bold('Recovery File Download Path')}: ${answers.recoveryFileDownloadPath}
+  • ${bold('Save to environment file')}: ${answers.saveToEnvFile ?? italic('SKIP')}
+
+⚠️ Do you want to proceed ⚠️ ?
+      `.trim(),
+                default: false,
+            })) &&
+                (await confirm({
+                    message: 'Confirm Entity Secret has been stored safely',
+                    default: false,
+                }));
+            if (!confirmation)
+                return;
+        }
+        answers.recoveryFileDownloadPath = resolve(answers.recoveryFileDownloadPath);
+        answers.saveToEnvFile = answers.saveToEnvFile !== undefined ? resolve(answers.saveToEnvFile) : answers.saveToEnvFile;
+        await mkdir(dirname(answers.recoveryFileDownloadPath), { recursive: true });
+        const recoveryFile = __addDisposableResource(env_1, await createSecureTempFile({ ext: '.dat' }), true);
+        if (answers.saveToEnvFile !== undefined) {
+            await mkdir(dirname(answers.saveToEnvFile), { recursive: true });
+        }
+        console.log('Registering Entity Secret...');
+        const response = await registerEntitySecretCiphertext(answers);
+        console.log('Entity Secret registered successfully!');
+        await recoveryFile.write(response.data.recoveryFile);
+        await recoveryFile.close();
+        try {
+            await rename(recoveryFile.filepath, answers.recoveryFileDownloadPath);
+            console.log(`Recovery file saved to: ${answers.recoveryFileDownloadPath}`);
+        }
+        catch (error) {
+            console.error('Failed to save recovery file at specified location', error);
+            console.log(`Recovery file saved to: ${recoveryFile.filepath}`);
+        }
+        if (answers.saveToEnvFile !== undefined) {
+            const env_2 = { stack: [], error: void 0, hasError: false };
+            try {
+                const envFile = __addDisposableResource(env_2, await open(answers.saveToEnvFile, 'a', 0o600), true);
+                await envFile.appendFile([
+                    `CIRCLE_API_KEY=${answers.apiKey}`,
+                    `CIRCLE_ENTITY_SECRET=${answers.entitySecret}`,
+                    '', // Add trailing newline
+                ].join('\n'));
+            }
+            catch (e_1) {
+                env_2.error = e_1;
+                env_2.hasError = true;
+            }
+            finally {
+                const result_1 = __disposeResources(env_2);
+                if (result_1)
+                    await result_1;
+            }
+        }
+    }
+    catch (e_2) {
+        env_1.error = e_2;
+        env_1.hasError = true;
+    }
+    finally {
+        const result_2 = __disposeResources(env_1);
+        if (result_2)
+            await result_2;
+    }
+}
+export default function (program) {
+    return program
+        .command('register-entity-secret')
+        .description('Register an Entity Secret with Circle Wallets')
+        .option('--api-key <key>', 'Circle API Key')
+        .option('--entity-secret <key>', 'Entity Secret for registration')
+        .option('--recovery-file-download-path <path>', 'Filepath to save the recovery file')
+        .option('--base-url <url>', 'Base URL for Circle API', 'https://api.circle.com')
+        .option('--save-to-env-file <file>', 'Save credentials to environment file')
+        .option('--no-confirm', 'Skip confirmation prompt')
+        .action(action);
+}
+//# sourceMappingURL=register-entity-secret.js.map

package/dist/esm/cli/register-entity-secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-entity-secret.js","sourceRoot":"","sources":["../../../src/cli/register-entity-secret.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,uBAAuB;AACvB,EAAE;AACF,2CAA2C;AAC3C,EAAE;AACF,4EAA4E;AAC5E,kDAAkD;AAClD,8EAA8E;AAC9E,yEAAyE;AACzE,mFAAmF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEnF,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAA;AACpC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAEvC,OAAO,EAAE,wCAAwC,EAAE,MAAM,0CAA0C,CAAA;AACnG,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAA;AAC5D,OAAO,KAAK,MAAM,OAAO,CAAA;AAEzB,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAExC,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AAQrE,KAAK,UAAU,8BAA8B,CAAC,KAA0C;IACtF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,wBAAwB,CAAA;IAEzD,MAAM,MAAM,GAAG,wCAAwC,CAAC;QACtD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,OAAO;QACP,SAAS,EAAE,kBAAkB,OAAO,EAAE;KACvC,CAAC,CAAA;IAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAyC;QAC3E,MAAM,EAAE,MAAM;QACd,GAAG,EAAE,GAAG,OAAO,oCAAoC;QACnD,OAAO,EAAE;YACP,aAAa,EAAE,SAAS,GAAG,KAAK,CAAC,MAAM;YACvC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE;YACJ,sBAAsB,EAAE,MAAM,MAAM,CAAC,8BAA8B,EAAE;SACtE;KACF,CAAC,CAAA;IACF,OAAO,QAAQ,CAAC,IAAI,CAAA;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,MAO5B;;;QACC,MAAM,OAAO,GAAG;YACd,MAAM,EACJ,MAAM,CAAC,MAAM;gBACb,CAAC,MAAM,QAAQ,CAAC;oBACd,OAAO,EAAE,gBAAgB;oBACzB,IAAI,EAAE,GAAG;oBACT,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE;iBAClC,CAAC,CAAC;YACL,YAAY,EACV,MAAM,CAAC,YAAY;gBACnB,CACE,MAAM,QAAQ,CAAC;oBACb,OAAO,EAAE,qDAAqD;oBAC9D,IAAI,EAAE,GAAG;oBACT,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;iBACrE,CAAC,CACH,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClD,wBAAwB,EACtB,MAAM,CAAC,wBAAwB;gBAC/B,CAAC,MAAM,KAAK,CAAC;oBACX,OAAO,EAAE,mCAAmC;oBAC5C,OAAO,EAAE,cAAc;iBACxB,CAAC,CAAC;YACL,aAAa,EACX,MAAM,CAAC,aAAa;gBACpB,CAAC,CAAC,MAAM,KAAK,CAAC;oBACZ,OAAO,EAAE,gFAAgF;oBACzF,OAAO,EAAE,MAAM;iBAChB,CAAC,CAAC;oBACD,SAAS,CAAC;YACd,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAA;QAED,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAC7B,MAAM,YAAY,GAChB,CAAC,MAAM,OAAO,CAAC;gBACb,OAAO,EAAE;;MAEX,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;MACjF,IAAI,CAAC,cAAc,CAAC,KAAK,OAAO,CAAC,OAAO;MACxC,IAAI,CAAC,eAAe,CAAC,KAAK,OAAO,CAAC,YAAY;MAC9C,IAAI,CAAC,6BAA6B,CAAC,KAAK,OAAO,CAAC,wBAAwB;MACxE,IAAI,CAAC,0BAA0B,CAAC,KAAK,OAAO,CAAC,aAAa,IAAI,MAAM,CAAC,MAAM,CAAC;;;OAG3E,CAAC,IAAI,EAAE;gBACN,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;gBACH,CAAC,MAAM,OAAO,CAAC;oBACb,OAAO,EAAE,8CAA8C;oBACvD,OAAO,EAAE,KAAK;iBACf,CAAC,CAAC,CAAA;YAEL,IAAI,CAAC,YAAY;gBAAE,OAAM;QAC3B,CAAC;QAED,OAAO,CAAC,wBAAwB,GAAG,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAA;QAC5E,OAAO,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAA;QAEpH,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3E,MAAY,YAAY,kCAAG,MAAM,oBAAoB,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,OAAA,CAAA;QAEtE,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACxC,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAClE,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAA;QAC3C,MAAM,QAAQ,GAAG,MAAM,8BAA8B,CAAC,OAAO,CAAC,CAAA;QAC9D,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAA;QAErD,MAAM,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACpD,MAAM,YAAY,CAAC,KAAK,EAAE,CAAA;QAE1B,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,wBAAwB,CAAC,CAAA;YACrE,OAAO,CAAC,GAAG,CAAC,2BAA2B,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAAA;QAC5E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,oDAAoD,EAAE,KAAK,CAAC,CAAA;YAC1E,OAAO,CAAC,GAAG,CAAC,2BAA2B,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAA;QACjE,CAAC;QAED,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;;;gBACxC,MAAY,OAAO,kCAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,CAAC,OAAA,CAAA;gBAEnE,MAAM,OAAO,CAAC,UAAU,CACtB;oBACE,kBAAkB,OAAO,CAAC,MAAM,EAAE;oBAClC,wBAAwB,OAAO,CAAC,YAAY,EAAE;oBAC9C,EAAE,EAAE,uBAAuB;iBAC5B,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAA;;;;;;;;;;;SACF;;;;;;;;;;;CACF;AAED,MAAM,CAAC,OAAO,WAAW,OAAgB;IACvC,OAAO,OAAO;SACX,OAAO,CAAC,wBAAwB,CAAC;SACjC,WAAW,CAAC,+CAA+C,CAAC;SAC5D,MAAM,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;SAC3C,MAAM,CAAC,uBAAuB,EAAE,gCAAgC,CAAC;SACjE,MAAM,CAAC,sCAAsC,EAAE,oCAAoC,CAAC;SACpF,MAAM,CAAC,kBAAkB,EAAE,yBAAyB,EAAE,wBAAwB,CAAC;SAC/E,MAAM,CAAC,2BAA2B,EAAE,sCAAsC,CAAC;SAC3E,MAAM,CAAC,cAAc,EAAE,0BAA0B,CAAC;SAClD,MAAM,CAAC,MAAM,CAAC,CAAA;AACnB,CAAC"}

package/dist/esm/cli/register-entity-secret.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=register-entity-secret.test.d.ts.map

package/dist/esm/cli/register-entity-secret.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-entity-secret.test.d.ts","sourceRoot":"","sources":["../../../src/cli/register-entity-secret.test.ts"],"names":[],"mappings":""}

package/dist/esm/cli/register-entity-secret.test.js

@@ -0,0 +1,122 @@
+// Copyright (c) 2025, Circle Internet Group, Inc.
+// All rights reserved.
+//
+// Circle Internet Group, Inc. CONFIDENTIAL
+//
+// This file includes unpublished proprietary source code of Circle Internet
+// Group, Inc. The copyright notice above does not
+// evidence any actual or intended publication of such source code. Disclosure
+// of this source code or any related proprietary information is strictly
+// prohibited without the express written permission of Circle Internet Group, Inc.
+// import * as crypto from 'crypto'
+import * as fs from 'fs/promises';
+import * as path from 'path';
+import { initiateDeveloperControlledWalletsClient } from '@circle-fin/developer-controlled-wallets';
+import * as prompts from '@inquirer/prompts';
+import axios from 'axios';
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+import { VERSION } from '../metadata.js';
+import { action } from './register-entity-secret.js';
+import * as utils from './utils.js';
+// Mock dependencies
+vi.mock('fs/promises', async (importOriginal) => {
+    return {
+        ...(await importOriginal()),
+        mkdir: vi.fn(),
+        rename: vi.fn(),
+        open: vi.fn(() => ({
+            close: vi.fn(),
+            writeFile: vi.fn(),
+            appendFile: vi.fn(),
+            [Symbol.asyncDispose]: vi.fn(),
+        })),
+    };
+});
+vi.mock('@inquirer/prompts', () => ({
+    input: vi.fn(),
+    password: vi.fn(),
+    confirm: vi.fn(),
+}));
+vi.mock('axios');
+vi.mock('@circle-fin/developer-controlled-wallets', () => ({
+    initiateDeveloperControlledWalletsClient: vi.fn(() => ({
+        generateEntitySecretCiphertext: vi.fn().mockResolvedValue('mocked-ciphertext'),
+    })),
+}));
+vi.mock('./utils.js', async (importOriginal) => {
+    return {
+        ...(await importOriginal()),
+        createSecureTempFile: vi.fn(() => ({
+            write: vi.fn(),
+            close: vi.fn(),
+            filepath: '/tmp/mocked-temp-file.dat',
+            [Symbol.asyncDispose]: vi.fn(),
+        })),
+        bold: vi.fn((text) => `<bold>${text}</bold>`),
+        italic: vi.fn((text) => `<italic>${text}</italic>`),
+        mask: vi.fn((text) => `<mask>${text}</mask>`),
+    };
+});
+vi.mock('crypto', async (importOriginal) => {
+    return {
+        ...(await importOriginal()),
+        randomBytes: vi.fn(() => ({
+            toString: vi.fn(() => 'mocked-random-hex'),
+        })),
+    };
+});
+describe('register-entity-secret', () => {
+    const mockedAxios = axios;
+    beforeEach(() => {
+        vi.clearAllMocks();
+        // Setup default mock responses
+        mockedAxios.request = vi.fn().mockResolvedValue({
+            data: {
+                data: {
+                    recoveryFile: 'mocked-recovery-file-content',
+                },
+            },
+        });
+    });
+    afterEach(() => {
+        vi.restoreAllMocks();
+    });
+    it('should register entity secret successfully with user inputs', async () => {
+        const apiKey = 'test-api-key';
+        const entitySecret = 'mocked-random-hex';
+        const recoveryFileDownloadPath = 'a/b/c/recovery.dat';
+        const saveToEnvFile = 'x/y/z/.env';
+        const baseUrl = 'https://api.circle.com';
+        prompts.password.mockResolvedValueOnce(apiKey);
+        prompts.password.mockResolvedValueOnce(entitySecret);
+        prompts.input.mockResolvedValueOnce(recoveryFileDownloadPath);
+        prompts.input.mockResolvedValueOnce(saveToEnvFile);
+        prompts.confirm.mockResolvedValue(true);
+        await action({ baseUrl: 'https://api.circle.com' });
+        // Verify initiateDeveloperControlledWalletsClient was called with correct parameters
+        expect(initiateDeveloperControlledWalletsClient).toHaveBeenCalledWith({
+            apiKey,
+            entitySecret,
+            baseUrl,
+            userAgent: `Circle-USDCKit/${VERSION}`,
+        });
+        // Verify axios request was made correctly
+        expect(mockedAxios.request).toHaveBeenCalledWith({
+            method: 'POST',
+            url: 'https://api.circle.com/v1/w3s/config/entity/entitySecret',
+            headers: {
+                Authorization: 'Bearer test-api-key',
+                'Content-Type': 'application/json',
+            },
+            data: {
+                entitySecretCiphertext: 'mocked-ciphertext',
+            },
+        });
+        // Verify temporary file handling
+        expect(utils.createSecureTempFile).toHaveBeenCalledWith({ ext: '.dat' });
+        // Verify directories are created
+        expect(fs.mkdir).toHaveBeenCalledWith(path.dirname(path.resolve(recoveryFileDownloadPath)), { recursive: true });
+        expect(fs.mkdir).toHaveBeenCalledWith(path.dirname(path.resolve(saveToEnvFile)), { recursive: true });
+    });
+});
+//# sourceMappingURL=register-entity-secret.test.js.map

package/dist/esm/cli/register-entity-secret.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-entity-secret.test.js","sourceRoot":"","sources":["../../../src/cli/register-entity-secret.test.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,uBAAuB;AACvB,EAAE;AACF,2CAA2C;AAC3C,EAAE;AACF,4EAA4E;AAC5E,kDAAkD;AAClD,8EAA8E;AAC9E,yEAAyE;AACzE,mFAAmF;AAEnF,mCAAmC;AACnC,OAAO,KAAK,EAAE,MAAM,aAAa,CAAA;AACjC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAE5B,OAAO,EAAE,wCAAwC,EAAE,MAAM,0CAA0C,CAAA;AACnG,OAAO,KAAK,OAAO,MAAM,mBAAmB,CAAA;AAC5C,OAAO,KAAK,MAAM,OAAO,CAAA;AACzB,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAExE,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAExC,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAA;AACpD,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AAInC,oBAAoB;AACpB,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IAC9C,OAAO;QACL,GAAG,CAAC,MAAM,cAAc,EAAE,CAAC;QAC3B,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;QACd,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;QACf,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;YACjB,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;YACd,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;YAClB,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;YACnB,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE;SAC/B,CAAC,CAAC;KACJ,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC;IAClC,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;IACd,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;IACjB,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE;CACjB,CAAC,CAAC,CAAA;AAEH,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;AAEhB,EAAE,CAAC,IAAI,CAAC,0CAA0C,EAAE,GAAG,EAAE,CAAC,CAAC;IACzD,wCAAwC,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QACrD,8BAA8B,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,mBAAmB,CAAC;KAC/E,CAAC,CAAC;CACJ,CAAC,CAAC,CAAA;AAEH,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IAC7C,OAAO;QACL,GAAG,CAAC,MAAM,cAAc,EAAE,CAAC;QAC3B,oBAAoB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;YACjC,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;YACd,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;YACd,QAAQ,EAAE,2BAA2B;YACrC,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE;SAC/B,CAAC,CAAC;QACH,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,IAAI,SAAS,CAAC;QAC7C,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,IAAI,WAAW,CAAC;QACnD,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,IAAI,SAAS,CAAC;KAC9C,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACzC,OAAO;QACL,GAAG,CAAC,MAAM,cAAc,EAAE,CAAC;QAC3B,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;YACxB,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC;SAC3C,CAAC,CAAC;KACJ,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,MAAM,WAAW,GAAG,KAAyD,CAAA;IAE7E,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAA;QAElB,+BAA+B;QAC/B,WAAW,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAC9C,IAAI,EAAE;gBACJ,IAAI,EAAE;oBACJ,YAAY,EAAE,8BAA8B;iBAC7C;aACF;SACF,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,MAAM,GAAG,cAAc,CAAA;QAC7B,MAAM,YAAY,GAAG,mBAAmB,CAAA;QACxC,MAAM,wBAAwB,GAAG,oBAAoB,CAAA;QACrD,MAAM,aAAa,GAAG,YAAY,CAAA;QAClC,MAAM,OAAO,GAAG,wBAAwB,CAEvC;QAAC,OAAO,CAAC,QAAiB,CAAC,qBAAqB,CAAC,MAAM,CAAC,CACxD;QAAC,OAAO,CAAC,QAAiB,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAC9D;QAAC,OAAO,CAAC,KAAc,CAAC,qBAAqB,CAAC,wBAAwB,CAAC,CACvE;QAAC,OAAO,CAAC,KAAc,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAC5D;QAAC,OAAO,CAAC,OAAgB,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;QAElD,MAAM,MAAM,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAA;QAEnD,qFAAqF;QACrF,MAAM,CAAC,wCAAwC,CAAC,CAAC,oBAAoB,CAAC;YACpE,MAAM;YACN,YAAY;YACZ,OAAO;YACP,SAAS,EAAE,kBAAkB,OAAO,EAAE;SACvC,CAAC,CAAA;QAEF,0CAA0C;QAC1C,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC;YAC/C,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,0DAA0D;YAC/D,OAAO,EAAE;gBACP,aAAa,EAAE,qBAAqB;gBACpC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE;gBACJ,sBAAsB,EAAE,mBAAmB;aAC5C;SACF,CAAC,CAAA;QAEF,iCAAiC;QACjC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,oBAAoB,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;QAExE,iCAAiC;QACjC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAChH,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACvG,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/esm/cli/utils.d.ts

@@ -0,0 +1,83 @@
+import type { FileHandle } from 'fs/promises';
+/**
+ * Formats text as italic for terminal display using ANSI escape codes.
+ *
+ * @param text - The string to be formatted as italic
+ * @returns The input string wrapped with ANSI escape codes for italic formatting
+ *
+ * @example
+ * ```
+ * console.log(italic('This will be italic in the terminal'));
+ * ```
+ *
+ * @public
+ */
+export declare function italic(text: string): string;
+/**
+ * Wraps the provided text with ANSI escape codes to display as bold in terminal output.
+ *
+ * @param text - The string to be formatted as bold
+ * @returns The input string wrapped with ANSI bold formatting codes
+ *
+ * @example
+ * ```typescript
+ * console.log(bold('This text will be bold'));
+ * ```
+ */
+export declare function bold(text: string): string;
+/**
+ * Masks a string by replacing characters with a mask character.
+ *
+ * @param text - The string to be masked
+ * @param options - Configuration options
+ * @param options.clear - Number of characters from the beginning to leave unmasked (default: 0)
+ * @param options.mask - Character to use for masking (default: '*')
+ * @returns A string with characters replaced by the mask character, except for the first `clear` characters
+ *
+ * @example
+ * // Mask an entire string
+ * mask("password") // "********"
+ *
+ * @example
+ * // Leave the first 2 characters unmasked
+ * mask("password", { clear: 2 }) // "pa******"
+ *
+ * @example
+ * // Use a custom mask character
+ * mask("password", { mask: "x" }) // "xxxxxxxx"
+ */
+export declare function mask(text: string, options?: {
+    clear?: number;
+    mask?: string;
+}): string;
+/**
+ * Creates a secure temporary file with random UUID and restricted permissions.
+ *
+ * This function creates a temporary file in the system's temp directory with 0o600 permissions
+ * (read/write for owner only) and a randomized name to prevent predictability.
+ *
+ * @param params - Configuration options for the temporary file
+ * @param params.prefix - Prefix for the generated filename (defaults to 'tmp')
+ * @param params.ext - File extension for the temporary file (defaults to empty string)
+ *
+ * @returns A FileHandle object extended with additional properties:
+ *   - `filename`: The generated name of the temporary file
+ *   - `filepath`: The full path to the temporary file
+ *
+ * @example
+ * ```ts
+ * // Create a secure temporary JSON file
+ * const tempFile = await createSecureTempFile({ prefix: 'config', ext: '.json' });
+ * console.log(tempFile.filepath); // Full path to the file
+ * await tempFile.writeFile('{"data": "example"}');
+ * await tempFile.close();
+ * ```
+ */
+export declare function createSecureTempFile(params?: {
+    prefix?: string;
+    ext?: string;
+}): Promise<FileHandle & {
+    filename: string;
+    filepath: string;
+}>;
+//# sourceMappingURL=utils.d.ts.map

package/dist/esm/cli/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/cli/utils.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAE7C;;;;;;;;;;;;GAYG;AACH,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,UAElC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,UAEhC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,UAGjF;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAO;cAgBxD,MAAM;cAAY,MAAM;GACxD"}

package/dist/esm/cli/utils.js

@@ -0,0 +1,112 @@
+// Copyright (c) 2025, Circle Internet Group, Inc.
+// All rights reserved.
+//
+// Circle Internet Group, Inc. CONFIDENTIAL
+//
+// This file includes unpublished proprietary source code of Circle Internet
+// Group, Inc. The copyright notice above does not
+// evidence any actual or intended publication of such source code. Disclosure
+// of this source code or any related proprietary information is strictly
+// prohibited without the express written permission of Circle Internet Group, Inc.
+import { randomUUID } from 'crypto';
+import { open } from 'fs/promises';
+import { tmpdir } from 'os';
+import { join } from 'path';
+/**
+ * Formats text as italic for terminal display using ANSI escape codes.
+ *
+ * @param text - The string to be formatted as italic
+ * @returns The input string wrapped with ANSI escape codes for italic formatting
+ *
+ * @example
+ * ```
+ * console.log(italic('This will be italic in the terminal'));
+ * ```
+ *
+ * @public
+ */
+export function italic(text) {
+    return `\x1b[3m${text}\x1b[0m`;
+}
+/**
+ * Wraps the provided text with ANSI escape codes to display as bold in terminal output.
+ *
+ * @param text - The string to be formatted as bold
+ * @returns The input string wrapped with ANSI bold formatting codes
+ *
+ * @example
+ * ```typescript
+ * console.log(bold('This text will be bold'));
+ * ```
+ */
+export function bold(text) {
+    return `\x1b[1m${text}\x1b[0m`;
+}
+/**
+ * Masks a string by replacing characters with a mask character.
+ *
+ * @param text - The string to be masked
+ * @param options - Configuration options
+ * @param options.clear - Number of characters from the beginning to leave unmasked (default: 0)
+ * @param options.mask - Character to use for masking (default: '*')
+ * @returns A string with characters replaced by the mask character, except for the first `clear` characters
+ *
+ * @example
+ * // Mask an entire string
+ * mask("password") // "********"
+ *
+ * @example
+ * // Leave the first 2 characters unmasked
+ * mask("password", { clear: 2 }) // "pa******"
+ *
+ * @example
+ * // Use a custom mask character
+ * mask("password", { mask: "x" }) // "xxxxxxxx"
+ */
+export function mask(text, options = {}) {
+    const { clear = 0, mask = '*' } = options;
+    return `${text.slice(0, clear)}${text.replace(/./g, mask).slice(clear)}`;
+}
+/**
+ * Creates a secure temporary file with random UUID and restricted permissions.
+ *
+ * This function creates a temporary file in the system's temp directory with 0o600 permissions
+ * (read/write for owner only) and a randomized name to prevent predictability.
+ *
+ * @param params - Configuration options for the temporary file
+ * @param params.prefix - Prefix for the generated filename (defaults to 'tmp')
+ * @param params.ext - File extension for the temporary file (defaults to empty string)
+ *
+ * @returns A FileHandle object extended with additional properties:
+ *   - `filename`: The generated name of the temporary file
+ *   - `filepath`: The full path to the temporary file
+ *
+ * @example
+ * ```ts
+ * // Create a secure temporary JSON file
+ * const tempFile = await createSecureTempFile({ prefix: 'config', ext: '.json' });
+ * console.log(tempFile.filepath); // Full path to the file
+ * await tempFile.writeFile('{"data": "example"}');
+ * await tempFile.close();
+ * ```
+ */
+export async function createSecureTempFile(params = {}) {
+    const { prefix = 'tmp', ext = '' } = params;
+    const filename = `${prefix}-${randomUUID()}${ext}`;
+    const filepath = join(tmpdir(), filename);
+    const fd = await open(filepath, 'wx', 0o600);
+    return new Proxy(fd, {
+        get(target, property) {
+            if (property === 'filename')
+                return filename;
+            if (property === 'filepath')
+                return filepath;
+            // eslint-disable-next-line @typescript-eslint/no-unsafe-return
+            return Reflect.get(target, property);
+        },
+        has(target, property) {
+            return property in target || ['filename', 'filepath'].includes(property);
+        },
+    });
+}
+//# sourceMappingURL=utils.js.map

package/dist/esm/cli/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../src/cli/utils.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,uBAAuB;AACvB,EAAE;AACF,2CAA2C;AAC3C,EAAE;AACF,4EAA4E;AAC5E,kDAAkD;AAClD,8EAA8E;AAC9E,yEAAyE;AACzE,mFAAmF;AAEnF,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAA;AAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAI3B;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,MAAM,CAAC,IAAY;IACjC,OAAO,UAAU,IAAI,SAAS,CAAA;AAChC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,IAAI,CAAC,IAAY;IAC/B,OAAO,UAAU,IAAI,SAAS,CAAA;AAChC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,IAAI,CAAC,IAAY,EAAE,UAA6C,EAAE;IAChF,MAAM,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,GAAG,GAAG,EAAE,GAAG,OAAO,CAAA;IACzC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAA;AAC1E,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAA4C,EAAE;IACvF,MAAM,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,GAAG,EAAE,EAAE,GAAG,MAAM,CAAA;IAC3C,MAAM,QAAQ,GAAG,GAAG,MAAM,IAAI,UAAU,EAAE,GAAG,GAAG,EAAE,CAAA;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,QAAQ,CAAC,CAAA;IACzC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;IAE5C,OAAO,IAAI,KAAK,CAAC,EAAE,EAAE;QACnB,GAAG,CAAC,MAAM,EAAE,QAAgB;YAC1B,IAAI,QAAQ,KAAK,UAAU;gBAAE,OAAO,QAAQ,CAAA;YAC5C,IAAI,QAAQ,KAAK,UAAU;gBAAE,OAAO,QAAQ,CAAA;YAC5C,+DAA+D;YAC/D,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QACtC,CAAC;QACD,GAAG,CAAC,MAAM,EAAE,QAAgB;YAC1B,OAAO,QAAQ,IAAI,MAAM,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAC1E,CAAC;KACF,CAAwD,CAAA;AAC3D,CAAC"}

package/dist/esm/cli/utils.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=utils.test.d.ts.map

package/dist/esm/cli/utils.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.test.d.ts","sourceRoot":"","sources":["../../../src/cli/utils.test.ts"],"names":[],"mappings":""}