@codiac.io/codiac-cli 1.2.175 → 1.2.202

package/dist/ops/docker-credentials-store.js

@@ -0,0 +1,238 @@
+"use strict";
+// MOVED TO ops-common
+// import * as path from "path";
+// import { inject } from 'inversify';
+// import { INTERFACES } from '@codiac.io/codiac-common';
+// import { BetterConsoleLogger } from "@codiac.io/codiac-common/better-logger"
+// import { IBetterLogger, LogLevel } from '@codiac.io/codiac-common/IBetterLogger';
+// import { CodiacError } from "@codiac.io/codiac-common/contracts";
+// import { CliExec, JsonUtils } from '@codiac.io/codiac-ops-common';
+// import { INTERFACES_CLI } from './INTERFACES_CLI';
+// import { IDockerConfig, RegistryCredentials, UsernamePassword } from './docker-config';
+// import { DOCKER_CONSTANTS } from './docker-constants';
+// /**
+//  * Credentials store:
+//  * @see https://docs.docker.com/engine/reference/commandline/cli/
+//  * @see https://docs.docker.com/engine/reference/commandline/login/#credentials-store
+//  *
+//  *  **EITHER** docker is set to store creds in the docker config  by default `$HOME/.docker/config.json`, overridden by env var `DOCKER_CONFIG` )
+//  *  
+//  *  **OR** it stores them in an external creds store, declared in the docker config as the value of the property `credsStore`.
+//  *  The value of the credsStore setting is the suffix of the creds store helper program, 
+//  *  which MUST be cenventionally named as `"docker-credential-${suffix}"`.
+//  *  these programs MUST support a `get`, `store`, and `delete` method.
+//  *  (NOTE: logging in stores em, logging out deletes them).
+//  * 
+//  *  SO:  In this case, to get the login creds for docker, we need to:
+//  * 
+//  *  a) get the path to the docker config:   `path = 'echo $DOCKER_CONFIG' || '$HOME/.docker/config.json'` 
+//  * 
+//  *  b) load the docker config:  `let config = JSON.parse(load[path to config.json])`
+//  * 
+//  *  c) check if the `credHelpers` contains the registry url youre looking for, 
+//  * 
+//  *     if not, fall back to `credsStore` property,
+//  * 
+//  *     if not, fall back to `auths` property which contains the creds for each registry
+//  * 
+//  *  d) if theres a credsStore or credHelpers, 
+//  * 
+//  *     1) Assemble the name of the binary: `let binary = 'docker-crenential-${credsStoreValue}';`
+//  * 
+//  *     2) fire the get command:  `let credsJson = spawnAndLog('${binary} get ${registry}')`
+//  * 
+//  *        NOTE:  there may be a "list" command, like there is for the "desktop" store.
+//  *        if these creds arent there we have to throw 401 (missing or invalid creds),
+//  *        and the CLI needs to recognize that missing creds error type so that it can prompt for creds.
+//  *        and it should continue to loop a prompt while receiving a 401 invalid creds response (tho its called unauthorized).
+//  *  
+//  *  Q: Shall we throw on an unauthorized response (403)?  Or prompt them for creds again?  
+//  */
+// export class DockerCredentialsStore {
+//   /** The fully qualified pathname of the docker config file that the docker runtime is using. */
+//   public static configPath: string = DockerCredentialsStore.getConfigPath();
+//   /** Factory method that determines which creds store docker is configured for 
+//    * and spins up an instance with a matching configuration.  */
+//   public static create(): DockerCredentialsStore {
+//     try {
+//       let config = this.loadDockerConfig();
+//       // TODO:  Get the logger from the CLI's IOC container.
+//       let logger = new BetterConsoleLogger();
+//       let instance = new DockerCredentialsStore(config, new CliExec(logger), logger);
+//       return instance;
+//     } catch (err) {
+//       throw err;
+//     }
+//   }
+//   /** Determines the fully qualified pathname of the docker config file that the docker runtime is using. */
+//   private static getConfigPath(): string {
+//     let homePath = (process.platform === "win32") ? process.env["HOMEPATH"]! : process.env["HOME"]!;
+//     let override = process.env[DOCKER_CONSTANTS.CONFIG_PATH_ENV_VAR_NAME];
+//     return override || path.posix.join(homePath, DOCKER_CONSTANTS.DEFAULT_CONFIG_FOLDER, DOCKER_CONSTANTS.DEFAULT_CONFIG_FILE)
+//   }
+//   private static loadDockerConfig(): IDockerConfig {
+//     try {
+//       let config = JsonUtils.deserializeJsonFile<IDockerConfig>(this.configPath);
+//       if (!config) throw new CodiacError(`Docker config file does not exist at [${this.configPath}].`)
+//       return config;
+//     } catch (err) {
+//       throw err;
+//     }
+//   }
+//   // -------------------------------------------------------------------------------------
+//   //  NOTE:  Below is a help output from running: $ docker-credential-desktop --help
+//   //         Do ALL cred helpers have these methods?  
+//   //         (the Docker docs suggest the helper interface only requires store, get, and erase).
+//   //  
+//   //    erase       Removes a set of credentials from the store
+//   //    get         Retrieves credentials from the store
+//   //    help        Help about any command
+//   //    list        Lists the credentials in the store
+//   //    move        Move credentials from one store to another
+//   //    store       Adds a set of credentials to the store
+//   //    version     Display the version of the credentials helper protocol
+//   // -------------------------------------------------------------------------------------
+//   /** Use the static factory method DockerCredentialsStore.create() instead.  */
+//   private constructor(@inject(INTERFACES_CLI.IDockerConfig) public config: IDockerConfig
+//     , @inject(CliExec) private _cliExec: CliExec
+//     , @inject(INTERFACES.IBetterLogger) private logger: IBetterLogger) {
+//   }
+//   /** Adds a set of credentials to the store. */
+//   public async store(creds: RegistryCredentials): Promise<void> {
+//     return new Promise<void>(async (resolve, reject) => {
+//       try {
+//         throw new CodiacError("store() is not implemented");
+//         // resolve();
+//       } catch (err) {
+//         reject(err);
+//       }
+//     });
+//   }
+//   private getCredsStoreNameFor(registry: string): string | undefined {
+//     let store: string | undefined;
+//     if (this.config.credHelpers && this.config.credHelpers[registry]) {
+//       store = this.config.credHelpers[registry];
+//     } else if (this.config.credsStore) {
+//       store = this.config.credsStore;
+//     }
+//     return store;
+//   }
+//   /** Retrieves credentials from the store. 
+//    * @param registry Domain name without any protocol or path.  (eg:  index.docker.io, or ourstuff.azurecr.io)
+//    */
+//   //  * @param scope scope prefix within the registry used as the prefix in the image name (eg: "letmeaskmydog" for the image "letmeaskmydog/toyhauler-base")
+//   public async tryGet(registry: string): Promise<UsernamePassword | undefined> {
+//     return new Promise<UsernamePassword | undefined>(async (resolve, reject) => {
+//       let creds: RegistryCredentials | undefined;
+//       try {
+//         let store = this.getCredsStoreNameFor(registry);
+//         if (store) {
+//           creds = await this.getFromStoreBinary(store, registry);
+//           // }
+//           // if (this.config.credHelpers && this.config.credHelpers[registry]) {
+//           //   store = this.config.credHelpers[registry];
+//           //   creds = await this.getFromStoreBinary(store, registry);
+//           // } else if (this.config.credsStore) {
+//           //   store = this.config.credsStore;
+//           //   creds = await this.getFromStoreBinary(store, registry);
+//         } else {
+//           store = DockerCredentialsStore.configPath;
+//           if (this.config.auths) {
+//             let userpass = this.config.auths[registry];
+//             if (userpass) creds = { ServerURL: registry, ...userpass }
+//           }
+//         }
+//         // if (!creds) throw new CodiacError(`No credentials exist for [${scope ? registry.concat("/", scope) : registry}] in [${store}].`);
+//         if (!creds) throw new CodiacError(`No credentials exist for [${registry}] in [${store}].`);
+//         resolve(creds);
+//       } catch (err) {
+//         this.logger.debug(`Error attempting to get creds for [${registry}].`, err);
+//         resolve(undefined);
+//       }
+//     });
+//   }
+//   /** 
+//    * @param storeName the unprefixed codename for the store (eg: "osxkeychain" or "desktop") 
+//   */
+//   private getFromStoreBinary(storeName: string, registry: string): Promise<RegistryCredentials | undefined> {
+//     return new Promise<RegistryCredentials | undefined>(async (resolve, reject) => {
+//       try {
+//         let binaryName = DOCKER_CONSTANTS.CRED_HELPER_PREFIX.concat(storeName);
+//         // NOTE:  Docker requires that the binary be in the path, so we shouldnt have to worry about the path.
+//         // ALSO:  The registry has to be passed in via STDIN, thus the echo-pipe-$1 syntax below...
+//         let cmd = `echo ${registry} | ${binaryName} get $1`
+//         // let creds = await this._cliExec.execAsyncJson<RegistryCredentials>(cmd, { cwd: process.cwd() }, LogLevel.debug, true);
+//         let json = await this._cliExec.execAsyncStdOut(cmd, { cwd: process.cwd() }, LogLevel.debug, true);
+//         if (!json || json == "") throw new CodiacError(`Credentials not found in store [${storeName}]. Response: ${json}`);
+//         let obj = JSON.parse(json);
+//         let creds = <RegistryCredentials>obj;
+//         resolve(creds);
+//       } catch (err) {
+//         reject(err);
+//       }
+//     });
+//   }
+//   /** Removes a set of credentials from the store. */
+//   public async erase(username: string, registry: string, scope?: string): Promise<void> {
+//     return new Promise<void>(async (resolve, reject) => {
+//       try {
+//         throw new CodiacError("erase() is not implemented");
+//         // resolve();
+//       } catch (err) {
+//         reject(err);
+//       }
+//     });
+//   }
+//   /** Lists the credentials in the store. */
+//   public async list(username?: string, registry?: string): Promise<RegistryCredentials[]> {
+//     return new Promise<RegistryCredentials[]>(async (resolve, reject) => {
+//       try {
+//         let creds: RegistryCredentials[] = [];
+//         // Gather up all the registries that are declared under creds helpers
+//         if (this.config.credHelpers) {
+//           for (let registryName in this.config.credHelpers) {
+//             let store = this.config.credHelpers[registryName];
+//             let helped = await this.getFromStoreBinary(store, registryName);
+//             if (helped) creds.push(helped);
+//           }
+//         }
+//         // Get all the creds in the main creds store
+//         if (this.config.credsStore) {
+//           let store = this.config.credsStore;
+//           let binaryName = DOCKER_CONSTANTS.CRED_HELPER_PREFIX.concat(store);
+//           let cmd = `${binaryName} list`;
+//           let json = await this._cliExec.execAsyncStdOut(cmd, { cwd: process.cwd() }, LogLevel.debug, true);
+//           if (json && json != "") {
+//             this.logger.trace(`${binaryName} list results`, json);
+//             let obj = JSON.parse(json);
+//             let inStore: RegistryCredentials[] = [];;
+//             for (let serverUrl in obj) {
+//               let regCreds: RegistryCredentials = { ServerURL: serverUrl, Username: obj[serverUrl], Secret: "undefined" };
+//               inStore.push(regCreds);
+//             }
+//             creds.push(...inStore);
+//           }
+//         }
+//         // Get any creds stored directly in the config file
+//         let store = DockerCredentialsStore.configPath;
+//         if (this.config.auths) {
+//           for (let registryName in this.config.auths) {
+//             let userpass = this.config.auths[registryName];
+//             if (userpass) creds.push({ ServerURL: registryName, ...userpass });
+//           }
+//         }
+//         if (registry) {
+//           creds = creds.filter(c => c.ServerURL == registry);
+//         }
+//         if (username) {
+//           creds = creds.filter(c => c.Username == username);
+//         }
+//         // TODO: select distinct by registry
+//         resolve(creds);
+//       } catch (err) {
+//         reject(err);
+//       }
+//     });
+//   }
+// }
+//# sourceMappingURL=docker-credentials-store.js.map

package/dist/ops/docker-registry-api-client/docker-registry-api-client.js

@@ -0,0 +1,289 @@
+"use strict";
+// COMMENTED OUT BC:  Moved to ops-common (and refactored)
+// import * as path from 'path';
+// import { ApiClientBase } from '@codiac.io/api-client-base/api-client-base';
+// import { inject } from 'inversify';
+// import * as urella from 'url';
+// import { INTERFACES, httpRestVerb } from '@codiac.io/codiac-common';
+// import { ListResult, SingleResult } from '@codiac.io/codiac-common/contracts';
+// import { CodiacError } from "@codiac.io/codiac-common/contracts";
+// import { IBetterLogger, LogLevel } from '@codiac.io/codiac-common/IBetterLogger';
+// import { CliExec } from '@codiac.io/codiac-ops-common';
+// import { ImageTagCriteria } from './entities/image-tag-criteria';
+// import { ImageTagList } from './entities/image-tag-list';
+// import { IDockerErrorResponse } from './entities/i-docker-error-response';
+// import { TokenResponse } from './entities/token-response';
+// import { DockerAuthTokenCriteria } from './entities/docker-auth-token-criteria';
+// import { Token } from './entities/token';
+// import { DockerActionPermissionsEnum } from './entities/docker-access-actions-enum';
+// import endpointsJson from './endpoints.json';
+// import { IClientForImageRegistry } from '@codiac.io/codiac-ops-common';
+// import { DockerCredentialsStore } from '@codiac.io/codiac-ops-common';
+// import { DOCKER_CONSTANTS } from '@codiac.io/codiac-ops-common';
+// import { RepositoryCriteria } from './entities/repository-criteria';
+// import { ImageRepository } from './entities/image-repository';
+// import { IDockerListResponse } from './entities/i-docker-list-response';
+// // Test "Authorization" header value
+// // letmeaskmydog:cd32d895-8074-4bbd-ba7a-3fa4bcf5f6ab   <--- The password here is an Access Token I created on docker hub in account settings/security
+// // Basic bGV0bWVhc2tteWRvZzpjZDMyZDg5NS04MDc0LTRiYmQtYmE3YS0zZmE0YmNmNWY2YWI=
+// // RECOMMENDED WORKFLOW:  ( per https://docs.docker.com/registry/spec/auth/token/ )
+// // 
+// // 1.  Try to make a request without a token
+// // 2.  if 401,
+// //   a.  Make a JWT request with the specs provided in the response (described on that page above)
+// //      1.  The queruystring will need a service, scope, and action
+// //      2.  The headers will need a basic auth header value "Authorization" = "Basic bGV0bWVhc2tteWRvZzpjZDMyZDg5NS04MDc0LTRiYmQtYmE3YS0zZmE0YmNmNWY2YWI="
+// // 3.  Run your request again with the JWT you got back  "Authorization" = "Bearer blahasdfksdfjksd..."
+// // 4.  That token is only good for that scope and actions and expires in 5 mins
+// // 5.  To refresh the token: skip the creds and use "access_type=refresh_token" and include "refresh_token=[the refresh token you got back]"
+// export class DockerRegistryApiClient extends ApiClientBase implements IClientForImageRegistry {
+//   /** 
+//    * @see https://docs.docker.com/registry/spec/api/#detail
+//    */
+//   public static readonly DOCKER_HUB_API_URL = 'https://index.docker.io/v1/';
+//   /** Why Docker makes discovery on their api so difficult is a mystery (if you have a GOOD attitude about it). 
+//    * @see https://stackoverflow.com/questions/35444178/public-docker-v2-api-endpoints
+//    */
+//   public static readonly DOCKER_HUB_OTHER_API_URL = 'https://hub.docker.com';
+//   /** Api url to use when acquiring auth tokens. */
+//   public static readonly DOCKER_HUB_AUTH_API_URL = 'https://auth.docker.io/';
+//   /** SERVICE NAME for the information being requested.  **NOT** The target url of the Docker Hub api. */
+//   public static readonly DOCKER_REGISTRY_SERVICE_NAME = "registry.docker.io";
+//   /** The identifier for this client provided to docker for recognition.
+//    * Accepted syntax is defined in [RFC6749 Appendix A.1](https://tools.ietf.org/html/rfc6749#appendix-A.1)   */
+//   public static readonly CLIENT_ID = "codiac_cli";
+//   /** The user creds provided in "bootstrap" encoded into a basic authentication token with its "Basic " prefix, 
+//    *  for use as the value of the Authorization header when requesting a scoped token. */
+//   // private static basicAuthHeaderValue: string;
+//   /** Inidicator that the bootstrap method has been run */
+//   private static bootstrapped: boolean = false;
+//   /** REQUIRED!! You MUST fire this at startup time in order to use this class.  */
+//   public static bootstrap( /* username: string, apiKey: string */): void {
+//     super.bootstrap_base(endpointsJson);
+//     // this.setBasicAuthCreds(username, apiKey);
+//     DockerRegistryApiClient.bootstrapped = true;
+//   }
+//   // private static setBasicAuthCreds(username: string, apiKey: string): void {
+//   //   this.basicAuthHeaderValue = this.buildBasicAuthenticationHeader(username, apiKey);
+//   // }  
+//   /**
+//    * @param registryDomain The server host name of the registry (eg: my.registry.io) (without any url protocol). 
+//    *              This value is the first part of a fully qualified image name, separated by a slash "/" character.   */
+//   static supports(registryDomain: string): boolean {
+//     if (registryDomain == ""
+//       || registryDomain == this.DOCKER_REGISTRY_SERVICE_NAME
+//       || registryDomain.startsWith(this.DOCKER_HUB_API_URL)  // <-- I think this one is wrong.  Really needs to be:  https://index.docker.io/v1/
+//     ) {
+//       return true;
+//     } else {
+//       return false;
+//     }
+//   }
+//   /* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * 
+//   *   _____          _                         ___  ___               _                   
+//   *  |_   _|        | |                        |  \/  |              | |                  
+//   *    | | _ __  ___| |_ __ _ _ __   ___ ___   | .  . | ___ _ __ ___ | |__   ___ _ __ ___ 
+//   *    | || '_ \/ __| __/ _` | '_ \ / __/ _ \  | |\/| |/ _ \ '_ ` _ \| '_ \ / _ \ '__/ __|
+//   *   _| || | | \__ \ || (_| | | | | (_|  __/  | |  | |  __/ | | | | | |_) |  __/ |  \__ \
+//   *   \___/_| |_|___/\__\__,_|_| |_|\___\___|  \_|  |_/\___|_| |_| |_|_.__/ \___|_|  |___/
+//   *                                                                                   
+//   * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
+//   constructor(@inject(DockerCredentialsStore) private credStore: DockerCredentialsStore, @inject(INTERFACES.ILogger) logger: IBetterLogger
+//     , apiRootUrl?: string, authToken?: string) {
+//     super(logger, apiRootUrl, authToken);
+//     if (!DockerRegistryApiClient.bootstrapped) throw new Error("Api client has not been initialized.  Please execute the static bootstrap() method during your app startup phase.");
+//     this._cliExec = new CliExec(logger);  // this wed be better of lazy-loaded cuz we arent always gonna use it.
+//     // TODO:  Load saved tokens from a user config
+//   }
+//   private _cliExec: CliExec;
+//   protected GetDefaultRootUrl(): string {
+//     return DockerRegistryApiClient.DOCKER_HUB_API_URL;
+//   }
+//   /** List of tokens that are scoped for specific image repositories and actions within them. 
+//    * In this class, this list is hydrated by ensureTokenFor(). */
+//   private tokens: { [scope: string]: Token } = {};
+//   /** Friendly syntax for assembling a call to requestToken(). */
+//   private async ensureTokenFor(scopedImageName: string, ...permissions: DockerActionPermissionsEnum[]): Promise<Token> {
+//     return new Promise<Token>(async (resolve, reject) => {
+//       try {
+//         // Lazy load the token
+//         let scope = `repository:${(scopedImageName.indexOf("/") < 0) ? "library/" : ""}${scopedImageName}:pull`
+//         if (!this.tokens[scope] || this.tokens[scope].expirationUtc < new Date(Date.now())) {
+//           let defaultIssuedAt = new Date(Date.now());
+//           let defaultTTL_ms = 60 * 1000;
+//           let tokenCriteria = {
+//             scope: scope,
+//             service: DockerRegistryApiClient.DOCKER_REGISTRY_SERVICE_NAME,
+//             client_id: DockerRegistryApiClient.CLIENT_ID,
+//             offline_token: true
+//           };
+//           let result = await this.requestToken(tokenCriteria, DockerRegistryApiClient.DOCKER_HUB_API_URL);
+//           if (result.success && result.output) {
+//             let issuedAt = (result.output.issued_at) ? new Date(result.output.issued_at) : defaultIssuedAt;
+//             let ttl_ms = (result.output.expires_in) ? result.output.expires_in * 1000 : defaultTTL_ms;
+//             let exp = new Date(issuedAt.getTime() + ttl_ms);
+//             this.tokens[scope] = new Token(result.output.token, scopedImageName, permissions, exp);
+//             // TODO:  Persist these to the client config file
+//           } else if (result.error) new CodiacError(`Error making token request for scope ${scope}:  ${result.message || ""} ${result.error.message}. ${result.output ? JSON.stringify(result.output) : ""}`, result.error);
+//           else throw new Error(`Token request for scope ${scope} failed without error.  ${result.message}.  ${result.output ? JSON.stringify(result.output) : ""}`);
+//         }
+//         resolve(this.tokens[scope]);
+//       } catch (err) {
+//         reject(err);
+//       }
+//     });
+//   }
+//   /** Makes the actual remote call to the Docker Hub Auth service acquire a token. 
+//    * This method is used internally by this class and there is no need to call it; 
+//    * it is exposed publically merely for general utility. */
+//   public async requestToken(tokenCriteria: DockerAuthTokenCriteria, tokenProviderService: string): Promise<SingleResult<TokenResponse>> {
+//     return new Promise<SingleResult<TokenResponse>>(async (resolve, reject) => {
+//       let result = new SingleResult<TokenResponse>(false);
+//       try {
+//         let ep = this.getEndpointFor<DockerAuthTokenCriteria>(DockerAuthTokenCriteria, httpRestVerb.GET);
+//         let relUrl = this.buildUrl(ep.route, tokenCriteria, true);
+//         // relUrl = path.join(DockerRegistryApiClient.DOCKER_HUB_AUTH_API_URL.replace("//", "/"), relUrl);
+//         let url = new urella.URL(relUrl, DockerRegistryApiClient.DOCKER_HUB_AUTH_API_URL).toString();
+//         let creds = await this.credStore.tryGet(tokenProviderService);  // we know we want DockerRegistryApiClient.DOCKER_HUB_API_URL
+//         if (!creds) throw new Error(`No credentials found for ${tokenProviderService}.`);
+//         let basicAuthHeaderValue = DockerRegistryApiClient.buildBasicAuthenticationHeader(creds.Username, creds.Secret);
+//         let headers = {
+//           Authorization: basicAuthHeaderValue,
+//           "Content-Type": "application/json"
+//         };
+//         let res = await this.makeHttpCall<ImageTagCriteria, ImageTagList | IDockerErrorResponse>(ep.httpMethod, url, {}, headers);
+//         if ((<IDockerErrorResponse>res).errors) {
+//           let errResponse = <IDockerErrorResponse>res;
+//           result.error = new Error(`Error from ${ep.httpMethod} ${url}: ${errResponse.errors[0].code} ${errResponse.errors[0].message}; ${JSON.stringify(errResponse.errors[0].detail)}`)
+//           result.message = result.error.message;
+//           this.logger.error(result.error.message, errResponse);
+//         } else {
+//           let tokenResponse = <TokenResponse>(<any>res)
+//           result.success = (tokenResponse && (tokenResponse.token != undefined) && (tokenResponse.token != ""));  // ugh!
+//           result.output = tokenResponse;
+//           this.logger.debug(`Token successfully acquired for scope [${tokenCriteria.scope}].`, tokenResponse);
+//         }
+//       } catch (err) {
+//         result.message = `Error requesting token of scope [${tokenCriteria.scope}] for service [${tokenCriteria.service}]: ${err.message || err.stack}.`
+//         result.error = err;
+//       } finally {
+//         resolve(result);
+//       }
+//     });
+//   }
+//   public async authenticate(registryDomain: string, secret: string, username?: string): Promise<boolean> {
+//     return new Promise<boolean>(async (resolve, reject) => {
+//       try {
+//         let success = false;
+//         let userArg = (username) ? ` -u ${username}` : ``;  // We dont use "<token>" here.  Only do that with a creds store.
+//         let workingDir = process.cwd();
+//         let loginEnv: { [key: string]: any } = { ...process.env };
+//         loginEnv.registry_pwd = secret;
+//         let cmdLogin = `echo $registry_pwd | docker login ${registryDomain} ${userArg} --password-stdin`;
+//         // this.logger.notice(`Attempting to log into image registry [${this.styler.hilite(registryDomain)}]...`);
+//         this.logger.notice(`Attempting to log into image registry [${registryDomain}]...`);
+//         let result = await this._cliExec.execAsyncStdOut(cmdLogin, { cwd: workingDir, env: loginEnv }, LogLevel.detail, true);
+//         // need to differentiate login failures (401, 403) from other types of errors
+//         success = true;
+//         resolve(success);
+//       } catch (err) {
+//         reject(err);
+//       }
+//     });
+//   }
+//   public async push(registryDomain: string, scopedImageName: string, tag: string): Promise<void> {
+//     return new Promise<void>(async (resolve, reject) => {
+//       try {
+//         let fullImageId = registryDomain ? `${registryDomain}/${scopedImageName}:${tag}` : `${scopedImageName}:${tag}`;
+//         let scope = (scopedImageName.indexOf("/") >= 0) ? scopedImageName.split("/")[0] : undefined;
+//         let store = DockerCredentialsStore.create();
+//         let creds = await store.tryGet(registryDomain);
+//         if (!creds) throw new Error(`No credentials found for ${registryDomain}.`);
+//         let userArg = (creds.Username) ? ` -u ${creds.Username}` : ``;
+//         let passArg = (creds.Secret) ? ` -p ${creds.Secret}` : ``;
+//         let cmdLogin: string;
+//         let loginEnv: { [key: string]: any } = { ...process.env };
+//         let workingDir = process.cwd();
+//         // let regToken = "8c307c0b-e0ae-4945-9567-1da692b99322";
+//         // userArg = `-u "<token>"`; // nope that only works when using a credentials store.
+//         loginEnv.registry_pwd = creds.Secret;
+//         cmdLogin = `echo $registry_pwd | docker login ${registryDomain} ${userArg} --password-stdin`;
+//         // this.logger.notice(`Logging in and pushing [${this.styler.hilite(scopedImageName)}] to registry as [${this.styler.hilite(fullImageId)}]...`);
+//         this.logger.notice(`Logging in and pushing [${scopedImageName}] to registry as [${fullImageId}]...`);
+//         let cmdLoginAndPush = cmdLogin.concat(`  &&  docker push ${fullImageId}`);
+//         await this._cliExec.spawnAndLog(cmdLoginAndPush, workingDir, loginEnv, LogLevel.detail);
+//         resolve();
+//       } catch (err) {
+//         reject(err);
+//       }
+//     });
+//   }
+//   public async tryGetImageTags(scopedImageName: string): Promise<ListResult<string>> {
+//     return new Promise<ListResult<string>>(async (resolve, reject) => {
+//       try {
+//         let result = new ListResult<string>(false);
+//         // TODO: Validate character set in image name (this shd trap any backslashes meant to be fwd slashes)
+//         let nameInCatalog = scopedImageName;
+//         let scope = (scopedImageName.indexOf("/") >= 0) ? scopedImageName.split("/")[0] : undefined;
+//         if (!scope) nameInCatalog = DOCKER_CONSTANTS.PUBLIC_LIBRARY_SCOPE.concat("/", scopedImageName);
+//         let scopedToken = await this.ensureTokenFor(nameInCatalog, DockerActionPermissionsEnum.pull);
+//         let crit = new ImageTagCriteria(nameInCatalog);
+//         let ep = this.getEndpointFor<ImageTagCriteria>(ImageTagCriteria, httpRestVerb.GET);
+//         let url = this.buildUrl(ep.route, crit);
+//         let headers = {
+//           Authorization: `Bearer ${scopedToken.token}`
+//         };
+//         let res = await this.makeHttpCall<ImageTagCriteria, ImageTagList | IDockerErrorResponse>(ep.httpMethod, url, {}, headers);
+//         if ((<IDockerErrorResponse>res).errors) {
+//           let errRsponse = <IDockerErrorResponse>res;
+//           result.error = new Error(`Error from ${ep.httpMethod} ${url}: ${errRsponse.errors[0].code} ${errRsponse.errors[0].message}; ${JSON.stringify(errRsponse.errors[0].detail)}`)
+//           this.logger.debug(result.error.message, res);
+//           // This is where we should pick up the error and trigger a token request and reattempt.
+//           this.authToken = undefined;
+//         } else {
+//           let tagResponse = <ImageTagList>res;
+//           result.success = (tagResponse.tags && tagResponse.tags.length > 0);
+//           result.output = tagResponse;
+//         }
+//         resolve(result);
+//       } catch (err) {
+//         this.logger.write(`Error attempting getImageTags(${scopedImageName}): ${err.message || err.stack}.`);
+//         reject(err);
+//       }
+//     });
+//   }
+//   /** Performs a fuxzy text search for repositories in the catalog. 
+//    * NOTE:  Used OAuth token when running this endpoint in Postman. 
+//   */
+//   public async searchRepositories(query: string, isOfficial?: boolean, pageNumber?: number): Promise<ImageRepository[]> {
+//     return new Promise<ImageRepository[]>(async (resolve, reject) => {
+//       try {
+//         // let url = `https://hub.docker.com/v2/search/repositories/?query=rabbit`
+//         let crit = new RepositoryCriteria();
+//         crit.query = query;
+//         if (isOfficial != undefined) crit.is_official = isOfficial;
+//         if (pageNumber) crit.page = pageNumber;
+//         let ep = this.getEndpointFor<RepositoryCriteria>(RepositoryCriteria, httpRestVerb.GET);
+//         let url = this.buildUrl(ep.route, crit);
+//         let headers = {
+//           // this may only take an OAuth token
+//           // Authorization: `JWT ${OAuth.token}`  
+//         };
+//         let res = await this.makeHttpCall<RepositoryCriteria, IDockerListResponse<ImageRepository> | IDockerErrorResponse>(ep.httpMethod, url, {}, headers);
+//         let output: ImageRepository[];
+//         if ((<IDockerErrorResponse>res).errors) {
+//           let errResponse = <IDockerErrorResponse>res;
+//           throw new Error(`Error from ${ep.httpMethod} ${url}: ${errResponse.errors[0].code} ${errResponse.errors[0].message}; ${JSON.stringify(errResponse.errors[0].detail)}`)
+//           // this.logger.debug(result.error.message, res);
+//         } else {
+//           let tagResponse = <IDockerListResponse<ImageRepository>>res;
+//           output = tagResponse.results;
+//         }
+//         resolve(output);
+//       } catch (err) {
+//         reject(err);
+//       }
+//     });
+//   }
+// }
+//# sourceMappingURL=docker-registry-api-client.js.map

package/dist/ops/docker-registry-api-client/entities/blob-sum.d.ts

@@ -0,0 +1,7 @@
+export declare class Blob {
+    blobSum: string;
+    /**
+     * @param blobSum Digest
+     */
+    constructor(blobSum: string);
+}

package/dist/ops/docker-registry-api-client/entities/blob-sum.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Blob = void 0;
+class Blob {
+    /**
+     * @param blobSum Digest
+     */
+    constructor(blobSum) {
+        this.blobSum = blobSum;
+    }
+}
+exports.Blob = Blob;
+//# sourceMappingURL=blob-sum.js.map

package/dist/ops/docker-registry-api-client/entities/docker-access-actions-enum.d.ts

@@ -0,0 +1,5 @@
+/** The names of the permissions granted in (or requested for) a token's Access Control List (ACL). */
+export declare enum DockerActionPermissionsEnum {
+    pull = "pull",
+    push = "push"
+}

package/dist/ops/docker-registry-api-client/entities/docker-access-actions-enum.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DockerActionPermissionsEnum = void 0;
+/** The names of the permissions granted in (or requested for) a token's Access Control List (ACL). */
+var DockerActionPermissionsEnum;
+(function (DockerActionPermissionsEnum) {
+    DockerActionPermissionsEnum["pull"] = "pull";
+    DockerActionPermissionsEnum["push"] = "push";
+})(DockerActionPermissionsEnum = exports.DockerActionPermissionsEnum || (exports.DockerActionPermissionsEnum = {}));
+//# sourceMappingURL=docker-access-actions-enum.js.map

package/dist/ops/docker-registry-api-client/entities/docker-auth-token-criteria.d.ts

@@ -0,0 +1,30 @@
+export declare class DockerAuthTokenCriteria {
+    service: string;
+    scope: string;
+    offline_token?: boolean | undefined;
+    client_id?: string | undefined;
+    /**
+     *
+     * @param service The name of the service which hosts the resource.  eg:  "registry.docker.io"
+     * @param scope TL;DR: Colon-delimited string in format:  "[scopeLevel]:[scopeName]:[actions]".  eg: "?scope=repository:letmeaskmydog/toyhauler-base:pull,push".
+     *        The resource in question, formatted as one of the space-delimited entries from the scope parameters
+     *        from the WWW-Authenticate header returned in an http 401 response.
+     *        This query parameter should be specified multiple times if there is more than one scope entry
+     *        from the WWW-Authenticate header.
+     *        The scope field may be empty to request a refresh token without providing any resource permissions to the returned bearer token.
+     *
+     * @param offline_token Whether to return a refresh token along with the bearer token.
+     *         A refresh token is capable of getting additional bearer tokens for the same subject with different scopes.
+     *         The refresh token does not have an expiration and should be considered completely opaque to the client.
+     * @param client_id String identifying the client. This client_id does not need to be registered with the authorization server
+     *         but should be set to a meaningful value in order to allow auditing keys created by unregistered clients.
+     *         Accepted syntax is defined in [RFC6749 Appendix A.1](https://tools.ietf.org/html/rfc6749#appendix-A.1).
+     *
+     * @see https://docs.docker.com/registry/spec/auth/token/#how-to-authenticate How to Authenticate
+     * @see https://docs.docker.com/registry/spec/auth/token/#requesting-a-token Requesting a Token
+     * @see https://docs.docker.com/registry/spec/auth/jwt/ Token Authentication Implementation
+     * @see https://tools.ietf.org/html/rfc6750#section-3 Section 3 of RFC 6750: The OAuth 2.0 Authorization Framework: Bearer Token Usage
+     * @see https://tools.ietf.org/html/rfc6749#appendix-A.1 RFC6749 Appendix A.1
+     */
+    constructor(service: string, scope: string, offline_token?: boolean | undefined, client_id?: string | undefined);
+}

package/dist/ops/docker-registry-api-client/entities/docker-auth-token-criteria.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DockerAuthTokenCriteria = void 0;
+class DockerAuthTokenCriteria {
+    /**
+     *
+     * @param service The name of the service which hosts the resource.  eg:  "registry.docker.io"
+     * @param scope TL;DR: Colon-delimited string in format:  "[scopeLevel]:[scopeName]:[actions]".  eg: "?scope=repository:letmeaskmydog/toyhauler-base:pull,push".
+     *        The resource in question, formatted as one of the space-delimited entries from the scope parameters
+     *        from the WWW-Authenticate header returned in an http 401 response.
+     *        This query parameter should be specified multiple times if there is more than one scope entry
+     *        from the WWW-Authenticate header.
+     *        The scope field may be empty to request a refresh token without providing any resource permissions to the returned bearer token.
+     *
+     * @param offline_token Whether to return a refresh token along with the bearer token.
+     *         A refresh token is capable of getting additional bearer tokens for the same subject with different scopes.
+     *         The refresh token does not have an expiration and should be considered completely opaque to the client.
+     * @param client_id String identifying the client. This client_id does not need to be registered with the authorization server
+     *         but should be set to a meaningful value in order to allow auditing keys created by unregistered clients.
+     *         Accepted syntax is defined in [RFC6749 Appendix A.1](https://tools.ietf.org/html/rfc6749#appendix-A.1).
+     *
+     * @see https://docs.docker.com/registry/spec/auth/token/#how-to-authenticate How to Authenticate
+     * @see https://docs.docker.com/registry/spec/auth/token/#requesting-a-token Requesting a Token
+     * @see https://docs.docker.com/registry/spec/auth/jwt/ Token Authentication Implementation
+     * @see https://tools.ietf.org/html/rfc6750#section-3 Section 3 of RFC 6750: The OAuth 2.0 Authorization Framework: Bearer Token Usage
+     * @see https://tools.ietf.org/html/rfc6749#appendix-A.1 RFC6749 Appendix A.1
+     */
+    constructor(service, scope, offline_token, client_id) {
+        this.service = service;
+        this.scope = scope;
+        this.offline_token = offline_token;
+        this.client_id = client_id;
+    }
+}
+exports.DockerAuthTokenCriteria = DockerAuthTokenCriteria;
+//# sourceMappingURL=docker-auth-token-criteria.js.map