@cognite/cli 1.3.4-alpha.selfsigned → 1.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE.md +6 -0
- package/README.md +12 -0
- package/_templates/app/new/claude/mcp.json.ejs.t +11 -0
- package/_templates/app/new/config/vite.config.ts.ejs.t +6 -3
- package/_templates/app/new/config/vitest.config.ts.ejs.t +5 -0
- package/_templates/app/new/cursor/mcp.json.ejs.t +10 -0
- package/_templates/app/new/root/.npmrc.ejs.t +1 -1
- package/_templates/app/new/root/AGENTS.md.ejs.t +107 -12
- package/_templates/app/new/root/gitignore.ejs.t +7 -0
- package/_templates/app/new/root/package.json.ejs.t +5 -3
- package/_templates/app/new/src/App.test.tsx.ejs.t +37 -11
- package/_templates/app/new/src/App.tsx.ejs.t +46 -64
- package/_templates/app/new/vscode/mcp.json.ejs.t +11 -0
- package/dist/chunk-Z7JAPCBW.js +13 -0
- package/dist/cli/cli.js +103 -61
- package/dist/deploy/index.d.ts +100 -31
- package/dist/deploy/index.js +1 -1
- package/dist/index.d.ts +1 -1
- package/dist/index.js +1 -1
- package/package.json +5 -4
- package/dist/chunk-BXCPVUBR.js +0 -9
package/dist/cli/cli.js
CHANGED
|
@@ -1,13 +1,13 @@
|
|
|
1
1
|
#!/usr/bin/env node
|
|
2
|
-
import{a as o,e as
|
|
3
|
-
See: ${
|
|
4
|
-
See: ${
|
|
5
|
-
${r}`),{cause:t}):null}o(
|
|
2
|
+
import{a as o,e as bt}from"../chunk-A5ASLC6T.js";import{writeSync as Ja}from"fs";import{Command as za}from"commander";import{createReadStream as yi,existsSync as hi,writeFileSync as Si}from"fs";import{basename as wi,dirname as vi,join as Ci,resolve as Qe}from"path";import{parseScope as Ei,signBundle as Pi,validateScopes as bi}from"@cognite/app-sdk/codesigning";var kt="https://docs.cognite.com/cdf/access/";function U(e){return e!==null&&typeof e=="object"}o(U,"isRecord");function J(e){return e instanceof Error&&"status"in e&&typeof e.status=="number"}o(J,"isHttpError");function Un(e){switch(e){case 401:return`Your credentials are invalid or expired. Check your client ID and secret.
|
|
3
|
+
See: ${kt}`;case 403:return`You don't have the required CDF capabilities. Please contact your CDF admin.
|
|
4
|
+
See: ${kt}`;default:return}}o(Un,"httpStatusHint");function V(e){let t=e instanceof Error?e:new Error(String(e));if(!J(t))return null;let r=Un(t.status);return r?Object.assign(new Error(`${t.message}
|
|
5
|
+
${r}`),{cause:t}):null}o(V,"enrichedHttpError");function Kn(e){if(!U(e))return null;let t=e.missing;if(Array.isArray(t))return t;let r=e.data;if(U(r)){let n=r.error;if(U(n)&&Array.isArray(n.missing))return n.missing;if(Array.isArray(r.missing))return r.missing}return null}o(Kn,"findMissingArray");function Ln(e,t){if(!J(e)||e.status!==400)return!1;let r=Kn(e);return r?r.some(n=>U(n)&&typeof n.externalId=="string"&&t.includes(n.externalId)):!1}o(Ln,"isMissingExternalIdError");function Oe(e,t){return J(e)&&e.status===404||Ln(e,t)}o(Oe,"isNotFoundError");var At=["DRAFT","PUBLISHED","DEPRECATED","ARCHIVED"],Dt=["ACTIVE","PREVIEW"],_e=class _e extends Error{constructor(t,r){super(`Version ${r} of app ${t} not found`),this.name="AppVersionNotFoundError",this.appExternalId=t,this.version=r}};o(_e,"AppVersionNotFoundError");var K=_e;function he(e,t){return e.includes(t)}o(he,"includesValue");function Nn(e){return he(At,e)}o(Nn,"isAppVersionLifecycleState");function jn(e){return he(Dt,e)}o(jn,"isAppVersionAlias");function Mn(e){return typeof e.version=="string"&&Nn(e.lifecycleState)&&typeof e.entrypoint=="string"&&typeof e.createdTime=="number"&&typeof e.createdBy=="string"&&typeof e.appExternalId=="string"&&(e.alias===void 0||jn(e.alias))&&(e.comment===void 0||typeof e.comment=="string")}o(Mn,"isAppVersion");function xt(e){if(!U(e))throw new Error("Invalid version response: not an object");if(!Mn(e))throw new Error("Invalid version response: missing or malformed fields");return e}o(xt,"parseAppVersion");var Ue=class Ue{constructor(t){this.client=t}get appsBasePath(){return`/api/v1/projects/${encodeURIComponent(this.client.project)}/apphosting/apps`}async createApp(t,r,n){try{await this.client.post(this.appsBasePath,{data:{items:[{externalId:t,name:r,description:n}]}})}catch(i){throw V(i)??i}}async uploadVersion(t,r,n,i,s="index.html"){console.log(`\u{1F4E4} Uploading version ${r}...`);let a=new FormData;a.append("file",new Blob([new Uint8Array(n)]),i),a.append("version",r),a.append("entryPath",s);let p=encodeURIComponent(t),c=`${this.appsBasePath}/${p}/versions`,l=await this.client.authenticate(),d=`${this.client.getBaseUrl()}${c}`,m=new AbortController,y=setTimeout(()=>m.abort(),300*1e3),f;try{f=await fetch(d,{method:"POST",headers:{Authorization:`Bearer ${l}`},body:a,signal:m.signal})}catch(u){throw u instanceof Error&&u.name==="AbortError"?new Error("Upload timed out after 5 minutes"):u}finally{clearTimeout(y)}if(!f.ok){let u=await f.text(),S=u;try{let N=JSON.parse(u);if(U(N)){let x=N.error;if(typeof x=="string")S=x;else if(U(x)){let A=x.message,H=x.code;S=typeof A=="string"?A:H!=null?`Unknown error (code: ${H})`:u}else{let A=N.message;S=typeof A=="string"?A:u}}}catch{}let h=f.headers.get("x-request-id"),b=h?` | X-Request-ID: ${h}`:"",g=Object.assign(new Error(`Upload failed: ${f.status} \u2014 ${S}${b}`),{status:f.status});throw V(g)??g}console.log(`\u2705 Version ${r} uploaded`)}async getVersion(t,r){let n=encodeURIComponent(t),i=encodeURIComponent(r),s=`${this.appsBasePath}/${n}/versions/${i}`;try{let a=await this.client.get(s);return xt(a.data)}catch(a){throw Oe(a,[t,r])?new K(t,r):V(a)??a}}async getActiveVersion(t){let r=encodeURIComponent(t),n=`${this.appsBasePath}/${r}/active`;try{let i=await this.client.get(n);return xt(i.data)}catch(i){if(Oe(i,[t]))return null;throw V(i)??i}}async updateVersions(t,r){let n=encodeURIComponent(t),i=`${this.appsBasePath}/${n}/versions/update`;try{await this.client.post(i,{data:{items:r}})}catch(s){throw V(s)??s}}async submitSignatures(t,r,n){let i=encodeURIComponent(t),s=encodeURIComponent(r),a=`${this.appsBasePath}/${i}/versions/${s}/signatures`;try{await this.client.post(a,{data:{items:n}})}catch(p){throw V(p)??p}}async listSignatures(t,r){let n=encodeURIComponent(t),i=encodeURIComponent(r),s=`${this.appsBasePath}/${n}/versions/${i}/signatures/list`;try{let a=await this.client.post(s,{data:{}});return Bn(a.data)}catch(a){throw V(a)??a}}};o(Ue,"AppHostingApi");var Se=Ue,Hn=["VALID","REVOKED","EXPIRED","SIGNED_BEFORE_KEY_ISSUED","IAT_IN_FUTURE","BUNDLE_TOO_OLD","KEY_NOT_IN_REGISTRY"],Vn=["developer","certifier"];function Bn(e){if(!U(e))throw new Error("Invalid signatures response: expected an object with an items array");let{items:t}=e;if(!Array.isArray(t))throw new Error("Invalid signatures response: items property is missing or not an array");return t.flatMap(r=>{let n=Gn(r);return n?[n]:[]})}o(Bn,"parseStoredSignatures");function Gn(e){if(!U(e))return null;let{signerKid:t,signerRole:r,signatureIat:n,receivedAt:i,createdTime:s,status:a}=e;return typeof t!="string"||t===""||!he(Vn,r)||typeof n!="number"||typeof i!="number"||typeof s!="number"||!he(Hn,a)?null:{signerKid:t,signerRole:r,signatureIat:n,receivedAt:i,createdTime:s,status:a}}o(Gn,"parseStoredSignature");var Ke=class Ke{constructor(t){this.api=new Se(t)}getVersion(t,r){return this.api.getVersion(t,r)}uploadVersion(t,r,n,i,s){return this.api.uploadVersion(t,r,n,i,s)}async ensureApp(t,r,n){console.log("\u{1F50D} Ensuring app exists...");try{await this.api.createApp(t,r,n),console.log(`\u2705 App '${t}' created`)}catch(i){if(J(i)&&i.status===409){console.log(`\u2705 App '${t}' already exists`);return}throw i}}async submitSignatures(t,r,n){n.length!==0&&(console.log(`\u{1F50F} Submitting ${n.length} signature${n.length===1?"":"s"} for version ${r}...`),await this.api.submitSignatures(t,r,n),console.log("\u2705 Signatures stored"))}listSignatures(t,r){return this.api.listSignatures(t,r)}async publishVersion(t,r){await this.api.updateVersions(t,[{version:r,update:{lifecycleState:{set:"PUBLISHED"}}}])}async publishAndActivate(t,r){console.log(`\u{1F680} Publishing and activating version ${r}...`),await this.api.updateVersions(t,[{version:r,update:{lifecycleState:{set:"PUBLISHED"},alias:{set:"ACTIVE"}}}]),console.log(`\u2705 Version ${r} is now PUBLISHED and ACTIVE`)}getActiveVersion(t){return this.api.getActiveVersion(t)}async deactivateVersion(t,r){await this.api.updateVersions(t,[{version:r,update:{alias:{setNull:!0}}}])}async activateVersion(t,r){let n=null;try{n=await this.api.getActiveVersion(t)}catch{n=null}let i=n&&n.version!==r?n.version:void 0;return await this.api.updateVersions(t,[{version:r,update:{alias:{set:"ACTIVE"}}}]),{supersededVersion:i}}async deploy(t,r,n,i,s,a,p=!1){console.log(`
|
|
6
6
|
\u{1F680} Deploying application via App Hosting API...
|
|
7
|
-
`);try{await this.ensureApp(t,r,n),await this.uploadVersion(t,i,s,a),
|
|
8
|
-
\u2705 Deployment successful!`)}catch(
|
|
9
|
-
${s}`)}let i=await n.json();if(!i.access_token)throw new Error("No access token returned from CDF authentication");return i.access_token},"getTokenCdf"),
|
|
10
|
-
${l}`)}let
|
|
7
|
+
`);try{await this.ensureApp(t,r,n),await this.uploadVersion(t,i,s,a),p&&await this.publishAndActivate(t,i),console.log(`
|
|
8
|
+
\u2705 Deployment successful!`)}catch(c){let l=c instanceof Error?c.message:String(c);throw Object.assign(new Error(`Deployment failed: ${l}`),{cause:c})}}};o(Ke,"AppHostingClient");var E=Ke;import Yn from"path";var It=".cognite-bundles";function $t(e,t){return`${e}-${t}.zip`}o($t,"bundleFileName");function z(e,t,r){return Yn.join(e,It,$t(t,r))}o(z,"bundlePath");import{existsSync as qn,readFileSync as Jn}from"fs";var Rt=[".dev.sig",".cert.sig"];function se(e,t={}){let r=t.existsSync??qn,n=t.readFileSync??((s,a)=>Jn(s,a)),i=[];for(let s of Rt){let a=`${e}${s}`;if(!r(a))continue;let p=n(a,"utf8").trim();p.length>0&&i.push(p)}return i}o(se,"discoverSignatures");import{existsSync as io,readFileSync as so}from"fs";import{resolve as ao}from"path";import{array as zn,boolean as Wn,check as Tt,forward as Ft,literal as Xn,maxLength as Zn,minLength as Qn,nonEmpty as te,object as Ot,optional as W,picklist as eo,pipe as B,safeParse as to,string as L,url as ro}from"valibot";var Le=B(L(),te("must not be empty")),Ne=B(L(),te("must not be empty"),Zn(256,"must be 256 characters or fewer")),je=B(L(),te("must not be empty"),ro("must be a valid URL")),Me=B(L(),te("must not be empty")),He=B(L(),te("must not be empty")),no=B(Ot({org:Me,project:He,baseUrl:je,deployClientId:W(L(),""),deploySecretName:W(L(),""),published:W(Wn(),!1),idpType:W(eo(["cdf","entra_id"]),"cdf"),tenantId:W(L())}),Ft(Tt(e=>e.idpType!=="entra_id"||!!e.tenantId,'must be set when idpType is "entra_id"'),["tenantId"]),Ft(Tt(e=>!e.deployClientId||!!e.deploySecretName,"must be set when deployClientId is set"),["deploySecretName"])),oo=Ot({name:Le,externalId:Ne,versionTag:B(L(),te("must not be empty")),description:W(L(),""),deployments:B(zn(no),Qn(1,"must contain at least one deployment")),infra:W(Xn("appsApi"))});function Ve(e){let t=to(oo,e);if(t.success)return t.output;let r=t.issues[0],n=r.path?.map(s=>s.key).join(".")??"",i=n?`"${n}" `:"";throw new Error(`app.json: ${i}${r.message}`)}o(Ve,"validateAppConfig");function v(e,t={}){let{validator:r=Ve,existsSync:n=io,readFileSync:i=so}=t,s=ao(e,"app.json");if(!n(s))throw new Error(`No app.json found at ${s}. Make sure you're running this command from your app's root directory.`);let a=i(s,"utf-8"),p;try{p=JSON.parse(a)}catch{throw new Error("Failed to parse app.json \u2014 check that it contains valid JSON.")}return r(p)}o(v,"loadAppConfig");import{CogniteClient as Fo}from"@cognite/sdk";import{CogniteClient as go}from"@cognite/sdk";var po=o(()=>{let e=process.env.DEPLOYMENT_SECRETS;if(!e)return{};try{let t=JSON.parse(e),r={};for(let[n,i]of Object.entries(t))if(typeof i=="string"){let s=n.toLowerCase().replace(/_/g,"-");r[s]=i}return r}catch(t){return console.error("Error parsing DEPLOYMENT_SECRETS:",t),{}}},"loadSecretsFromEnv"),co=o(e=>{let t;if(process.env.DEPLOYMENT_SECRET&&(t=process.env.DEPLOYMENT_SECRET),t||(t=po()[e]),t||(t=process.env[e]),!t)throw new Error(`Secret not found in environment: ${e}`);return t},"getSecretFromEnv"),lo=o(e=>{if(!e)return"";try{return new URL(e).hostname.replace(/\.cognitedata\.com$/,"")}catch{let t=e.replace(/^https?:\/\//,"");return t=t.split("/")[0],t=t.split(":")[0],t=t.replace(/\.cognitedata\.com$/,""),t}},"extractClusterFromUrl"),mo=o(async(e,t)=>{let r=`Basic ${btoa(`${e}:${t}`)}`,n=await fetch("https://auth.cognite.com/oauth2/token",{method:"POST",headers:{Authorization:r,"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"client_credentials"})});if(!n.ok){let s=await n.text();throw new Error(`Failed to get token from CDF: ${n.status} ${n.statusText}
|
|
9
|
+
${s}`)}let i=await n.json();if(!i.access_token)throw new Error("No access token returned from CDF authentication");return i.access_token},"getTokenCdf"),uo=o(async(e,t,r,n)=>{if(!n)throw new Error("Entra ID authentication requires 'baseUrl' to be set in deployment configuration");let i=lo(n);if(!i)throw new Error(`Entra ID authentication requires 'baseUrl' to be a valid CDF URL (e.g., https://cluster.cognitedata.com), got: ${n}`);let s=`https://login.microsoftonline.com/${r}/oauth2/v2.0/token`,a=`https://${i}.cognitedata.com/.default`,p=await fetch(s,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({client_id:e,client_secret:t,scope:a,grant_type:"client_credentials"})});if(!p.ok){let l=await p.text();throw new Error(`Failed to get token from Entra ID: ${p.status} ${p.statusText}
|
|
10
|
+
${l}`)}let c=await p.json();if(!c.access_token)throw new Error("No access token returned from Entra ID authentication");return c.access_token},"getTokenEntra"),Be=o(async(e,t=process.env)=>{if(t.COGNITE_TOKEN)return t.COGNITE_TOKEN;let{deployClientId:r,deploySecretName:n,idpType:i="cdf",tenantId:s,baseUrl:a}=e,p=co(n);if(i==="entra_id"){if(!s)throw new Error("Entra ID authentication requires 'tenantId' in deployment configuration");return uo(r,p,s,a)}return mo(r,p)},"getToken");async function ae(e,t,r=process.env,n){let i=await Be(e,r),s=r.COGNITE_BASE_URL??e.baseUrl,a=(n??(p=>new go(p)))({appId:t,project:e.project,baseUrl:s,oidcTokenProvider:o(async()=>i,"oidcTokenProvider")});return await a.authenticate(),a}o(ae,"getSdk");import Eo from"os";import Po from"path";import bo from"open";import{buildAuthorizationUrl as ko,calculatePKCECodeChallenge as xo,discovery as Ao,None as Do,randomPKCECodeVerifier as Io,randomState as $o}from"openid-client";import fo from"https";import{authorizationCodeGrant as yo}from"openid-client";function _t(e){return e.replace(/[&<>"']/g,t=>({"&":"&","<":"<",">":">",'"':""","'":"'"})[t]??t)}o(_t,"escapeHtml");function Ge(e,t,r){let n=_t(t),i=_t(r);return`<html><body style="font-family: system-ui; padding: 40px; text-align: center;">
|
|
11
11
|
<h1>${n}</h1><p>${i}</p><p>You can close this window.</p>${e==="success"?`<style>
|
|
12
12
|
@keyframes checkmark {
|
|
13
13
|
0% { transform: scale(0); }
|
|
@@ -16,31 +16,34 @@ ${l}`)}let p=await c.json();if(!p.access_token)throw new Error("No access token
|
|
|
16
16
|
}
|
|
17
17
|
h1 { animation: checkmark 0.5s ease-out; }
|
|
18
18
|
</style>`:""}
|
|
19
|
-
</body></html>`}o(
|
|
20
|
-
`),r.logger.log(`\u{1F4E1} Fetching OpenID configuration from ${t.authority}...`);let n
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
NODE_EXTRA_CA_CERTS=/path/to/ca-bundle.crt cognite apps deploy --interactive`,{cause:m});let f=d?`: ${d.message}`:"";throw new Error(`Could not reach ${t.authority}${f}`,{cause:m})}let i=r.randomPKCECodeVerifier(),s=await r.calculatePKCECodeChallenge(i),a=r.randomState(),c={redirect_uri:t.redirectUri,scope:"openid profile email",code_challenge:s,code_challenge_method:"S256",state:a};e&&(c.organization_hint=e);let p=r.buildAuthorizationUrl(n,c).toString(),l=await r.getOrCreateCertificates(t.certDir);e&&r.logger.log(`\u{1F3E2} Organization: ${e}`),r.logger.log(`\u{1F680} Opening browser for authentication...
|
|
24
|
-
`);try{await r.open(p)}catch(m){let d=m instanceof Error?m.message:String(m);r.logger.error("\u274C Failed to open browser automatically."),r.logger.error(` Reason: ${d}`),r.logger.error(`Please open this URL manually:
|
|
25
|
-
`),r.logger.error(p),r.logger.error("")}return r.startCallbackServer(t,l,n,i,a)}o(rt,"loginImpl");async function I(e,t,r={}){let{login:n=nt,getSdk:i=Y,createClient:s=o(a=>new wn(a),"createClient")}=r;if(t.interactive){let a=t.orgHint||e.org||void 0,c=await n(a),p=s({appId:t.appId,project:e.project,baseUrl:e.baseUrl,getToken:o(async()=>c.access_token,"getToken")});return await p.authenticate(),p}return i(e,t.appId)}o(I,"getClientForDeployment");import ot from"enquirer";var it="Enter custom target...";function st(e,t){let r=t.map((n,i)=>` ${i}: ${n.org}/${n.project}`).join(`
|
|
19
|
+
</body></html>`}o(Ge,"generateHtml");async function ho(e,t,r,n,i,s){let a=new URL(e.url??"/",`https://${e.headers.host??"localhost"}`);if(a.pathname!=="/")return t.writeHead(404),t.end("Not found"),{shouldClose:!1};try{console.log("\u{1F504} Exchanging authorization code for tokens...");let p=await s.authorizationCodeGrant(r,a,{pkceCodeVerifier:n,expectedState:i});return t.writeHead(200,{"Content-Type":"text/html"}),t.end(Ge("success","Login Successful!","You can close this window and return to the terminal.")),{shouldClose:!0,tokens:p}}catch(p){let c=p instanceof Error?p:new Error(String(p));return t.writeHead(400,{"Content-Type":"text/html"}),t.end(Ge("error","Authentication Error",c.message)),{shouldClose:!0,error:c}}}o(ho,"handleCallback");function So(e){let t=e/6e4,r=Math.round(t*10)/10;return`${r} ${r===1?"minute":"minutes"}`}o(So,"formatTimeoutMinutes");function Ut(e,t,r,n,i,s={createServer:fo.createServer,setTimeout:globalThis.setTimeout,clearTimeout:globalThis.clearTimeout,authorizationCodeGrant:yo}){return new Promise((a,p)=>{let c=s.createServer(t,async(m,y)=>{try{let f=await ho(m,y,r,n,i,s);f.shouldClose&&(d(),f.error?p(f.error):f.tokens?a(f.tokens):p(new Error("No tokens received")))}catch(f){d(),p(f instanceof Error?f:new Error(String(f)))}}),l=s.setTimeout(()=>{d(),p(new Error(`Login timeout - no response received within ${So(e.loginTimeout)}`))},e.loginTimeout);function d(){s.clearTimeout(l),c.close()}o(d,"cleanup"),c.on("error",m=>{d(),m.code==="EADDRINUSE"?console.error(`\u274C Port ${e.port} is already in use.`):console.error(`\u274C Server error: ${m.message}`),p(m)}),c.listen(e.port,"127.0.0.1",()=>{console.log(`\u{1F310} Local HTTPS server started on https://localhost:${e.port}`)})})}o(Ut,"startCallbackServer");import{mkdirSync as wo}from"fs";import{loadLocalCertificates as vo}from"@cognite/app-sdk/https";var Co={loadLocalCertificates:vo,mkdirSync:wo,logger:console};async function Kt(e,t=Co){t.mkdirSync(e,{recursive:!0});let{cert:r,key:n,source:i}=await t.loadLocalCertificates({certDir:e});return i==="mkcert"?t.logger.log("\u{1F510} Using mkcert certificates for HTTPS"):(t.logger.log("\u{1F510} Using in-memory self-signed certificate for HTTPS \u2014 your browser will give you a warning."),t.logger.log(" Run `npx @cognite/cli@latest apps setup-https` to install trusted local https certificates.")),{cert:r,key:n}}o(Kt,"getOrCreateCertificates");var Ro={authority:"https://auth.cognite.com",clientId:"0404baaa-0a90-43a2-aba7-a110b53fb41c",redirectUri:"https://localhost:3000/",port:3e3,loginTimeout:300*1e3,certDir:Po.join(Eo.homedir(),".cdf-login")},To={open:bo,getOrCreateCertificates:Kt,startCallbackServer:Ut,discovery:Ao,buildAuthorizationUrl:ko,randomPKCECodeVerifier:Io,calculatePKCECodeChallenge:xo,randomState:$o,logger:console};async function Nt(e,t=Ro,r){return r===void 0?Lt(e,t,To):Lt(e,t,r)}o(Nt,"login");async function Lt(e,t,r){r.logger.log(`\u{1F510} Starting CDF login flow...
|
|
20
|
+
`),r.logger.log(`\u{1F4E1} Fetching OpenID configuration from ${t.authority}...`);let n=await r.discovery(new URL(t.authority),t.clientId,void 0,Do()),i=r.randomPKCECodeVerifier(),s=await r.calculatePKCECodeChallenge(i),a=r.randomState(),p={redirect_uri:t.redirectUri,scope:"openid profile email",code_challenge:s,code_challenge_method:"S256",state:a};e&&(p.organization_hint=e);let c=r.buildAuthorizationUrl(n,p).toString(),l=await r.getOrCreateCertificates(t.certDir);e&&r.logger.log(`\u{1F3E2} Organization: ${e}`),r.logger.log(`\u{1F680} Opening browser for authentication...
|
|
21
|
+
`);try{await r.open(c)}catch(d){let m=d instanceof Error?d.message:String(d);r.logger.error("\u274C Failed to open browser automatically."),r.logger.error(` Reason: ${m}`),r.logger.error(`Please open this URL manually:
|
|
22
|
+
`),r.logger.error(c),r.logger.error("")}return r.startCallbackServer(t,l,n,i,a)}o(Lt,"loginImpl");async function I(e,t,r={}){let{login:n=Nt,getSdk:i=ae,createClient:s=o(a=>new Fo(a),"createClient")}=r;if(t.interactive){let a=t.orgHint||e.org||void 0,p=await n(a),c=s({appId:t.appId,project:e.project,baseUrl:e.baseUrl,getToken:o(async()=>p.access_token,"getToken")});return await c.authenticate(),c}return i(e,t.appId)}o(I,"getClientForDeployment");import jt from"enquirer";var Mt="Enter custom target...";function Ht(e,t){let r=t.map((n,i)=>` ${i}: ${n.org}/${n.project}`).join(`
|
|
26
23
|
`);throw new Error(`Deployment "${e}" not found. Available deployments:
|
|
27
|
-
${r}`)}o(
|
|
24
|
+
${r}`)}o(Ht,"deploymentNotFoundError");function k(e,t){if(e.length===0)throw new Error("No deployments configured in app.json");if(t===void 0)return e[0];if(/^\d+$/.test(t)){let n=e[Number.parseInt(t)];if(n)return n;Ht(t,e)}let r=e.find(n=>n.project===t||`${n.org}/${n.project}`===t);if(r)return r;Ht(t,e)}o(k,"findDeployment");function $(e){let t=[];return e.deployClientId||t.push("deployClientId"),e.deploySecretName||t.push("deploySecretName"),t}o($,"getMissingCredentials");async function R(e,t){if(t.baseUrl&&t.project)return{org:t.org??"",project:t.project,baseUrl:t.baseUrl,deployClientId:"",deploySecretName:"",published:!1,idpType:"cdf"};if(t.deployment!==void 0)return k(e.deployments,t.deployment);let r=[...e.deployments.map(s=>`${s.org}/${s.project}`),Mt],{selected:n}=await jt.prompt({type:"select",name:"selected",message:"Select deployment target",choices:r});if(n!==Mt){let s=e.deployments.find(a=>`${a.org}/${a.project}`===n);if(s)return s;throw new Error(`Deployment "${n}" could not be resolved from app.json.`)}let i=await jt.prompt([{type:"input",name:"baseUrl",message:"CDF Base URL",initial:"https://api.cognitedata.com"},{type:"input",name:"project",message:"CDF Project",validate:o(s=>s?!0:"Project is required","validate")},{type:"input",name:"org",message:"Organization (for login hint)",initial:""}]);return{org:i.org||"",project:i.project,baseUrl:i.baseUrl,deployClientId:"",deploySecretName:"",published:!1,idpType:"cdf"}}o(R,"resolveDeployment");import{existsSync as ui,readFileSync as gi}from"fs";import{execFile as Uo}from"child_process";import{promisify as Ko}from"util";import{execFileSync as Vt}from"child_process";import{platform as Oo}from"os";import _o from"path";function _(e,t={}){let{platform:r=Oo}=t;switch(r()){case"darwin":return e==="macos";case"win32":return e==="windows";default:return e==="other"}}o(_,"isOS");function Bt(e,t={}){let{exec:r=Vt,log:n=console.log}=t,[i,s]=_("macos",t)?["open",[e]]:_("windows",t)?["rundll32",["url.dll,FileProtocolHandler",e]]:["xdg-open",[e]];try{r(i,s)}catch{n(`Could not open browser \u2014 open manually:
|
|
25
|
+
${e}`)}}o(Bt,"openInBrowser");function Gt(e,t={}){let{exec:r=Vt,log:n=console.log}=t,[i,s]=_("macos",t)?["open",["-R",e]]:_("windows",t)?["explorer",[`/select,${e}`]]:["xdg-open",[_o.dirname(e)]];try{r(i,s)}catch{n(`Could not open file manager \u2014 files are at:
|
|
26
|
+
${e}`)}}o(Gt,"revealInFileManager");var qt="cognite-flows",Lo=Ko(Uo),Jt=o((e,t)=>Lo(e,t),"defaultExecFile"),No=-25300,jo=No&255;function Mo(e){if(!(e instanceof Error)||!("code"in e)||e.code!==jo)return!1;let t="stderr"in e?String(e.stderr):"";return/could not be found/i.test(t)||t===""}o(Mo,"isKeychainNotFoundError");async function zt(e,t,r={}){if(!_("macos",r))throw new Error("Keychain storage is only supported on macOS");let{execFile:n=Jt}=r;await n("security",["add-generic-password","-a",e,"-s",qt,"-w",Buffer.from(t,"utf-8").toString("base64"),"-U"])}o(zt,"storeKeyInKeychain");async function we(e,t={}){if(!_("macos",t))return null;let{execFile:r=Jt}=t;try{let{stdout:n}=await r("security",["find-generic-password","-a",e,"-s",qt,"-w"]);return Buffer.from(n.trim(),"base64").toString("utf-8")}catch(n){if(Mo(n))return null;throw n}}o(we,"readKeyFromKeychain");import{pbkdf2 as Bo,randomBytes as Go}from"crypto";import{promisify as Yo}from"util";import{CompactEncrypt as qo,base64url as Wt,compactDecrypt as Jo}from"jose";var Ho=new TextEncoder,Vo=new TextDecoder,Ye={encode:o(e=>Ho.encode(e),"encode"),decode:o(e=>Vo.decode(e),"decode")};var zo=Yo(Bo),ze=6e5,Wo="sha512",qe="PBKDF2-HMAC-SHA512",Je=16,ve="A256GCM",Xo=32,Ce=2e6;async function Xt(e,t,r){return await zo(e,t,r,Xo,Wo)}o(Xt,"deriveKey");async function Zt(e,t,r=ze){if(!Number.isInteger(r)||r<1||r>Ce)throw new Error(`Invalid iterations: must be an integer between 1 and ${Ce}`);let n=Go(Je),i=await Xt(t,n,r);return await new qo(Ye.encode(e)).setProtectedHeader({alg:"dir",enc:ve,kdf:qe,kdf_iter:r,kdf_salt:Wt.encode(n)}).encrypt(i)}o(Zt,"encryptStringAsJwe");async function Qt(e,t){let{plaintext:r}=await Jo(e,async n=>{if(!e.length)throw new Error("Unexpected JWE empty value");if(t.length<15)throw new Error(`Invalid passphrase it should be at least ${15} but got ${t.length}`);if(n.alg!=="dir")throw new Error(`Unexpected JWE alg "${String(n.alg)}"; only "dir" is supported`);if(n.enc!==ve)throw new Error(`Unexpected JWE enc "${String(n.enc)}"; only "${ve}" is supported`);if(n.kdf!==qe)throw new Error(`Unexpected KDF "${String(n.kdf)}"; only "${qe}" is supported`);let i=Number(n.kdf_iter);if(!Number.isInteger(i)||i<1||i>Ce)throw new Error(`Invalid kdf_iter in JWE header: must be an integer between 1 and ${Ce}`);if(typeof n.kdf_salt!="string")throw new Error("Missing kdf_salt in JWE header");let s=Wt.decode(n.kdf_salt);if(s.length!==Je)throw new Error(`Invalid kdf_salt length in JWE header: expected ${Je} bytes, got ${s.length}`);return await Xt(t,s,i)},{keyManagementAlgorithms:["dir"],contentEncryptionAlgorithms:[ve]});return Ye.decode(r)}o(Qt,"decryptJweAsString");function Zo(e){let t=e.trim();return t.startsWith("eyJ")&&t.split(".").length===5}o(Zo,"isJweCompact");var er=Zo;import{existsSync as ei,readdirSync as ti,readFileSync as ri}from"fs";import{join as We}from"path";import{homedir as Qo}from"os";import{join as tr}from"path";function T(e={}){let{env:t=process.env,homedir:r=Qo}=e,n=t.COGNITE_CLI_HOME?.trim()||tr(r(),".cognite-cli");return{home:n,keysDir:tr(n,"keys")}}o(T,"getConfig");var re=".pub.pem",Xe=".key.jwe",Ze=".meta.json";function Ee(e){switch(e.kind){case"keychain":return"Keychain";case"encrypted-file":return e.path;case"public-only":return"public-only (private key missing)"}}o(Ee,"formatLocalKeySource");function ni(e){return{existsSync:e.existsSync??ei,readdirSync:e.readdirSync??ti,readFileSync:e.readFileSync??((t,r)=>ri(t,r)),isOS:e.isOS??(t=>_(t)),readKeyFromKeychain:e.readKeyFromKeychain??(t=>we(t))}}o(ni,"resolveDeps");function oi(e){try{let t=JSON.parse(e);if(typeof t=="object"&&t!==null&&!Array.isArray(t)&&"email"in t&&typeof t.email=="string")return t.email}catch{}}o(oi,"readEmailFromMeta");function ii(e,t){return t.existsSync(e)?t.readdirSync(e).filter(r=>r.endsWith(re)):[]}o(ii,"publicKeyEntries");function si(e){return e.slice(0,-re.length)}o(si,"kidFromPublicKeyFilename");async function ai(e,t,r){if(r.isOS("macos")&&await r.readKeyFromKeychain(e).catch(()=>null)!==null)return{kind:"keychain"};let n=We(t,`${e}${Xe}`);return r.existsSync(n)?{kind:"encrypted-file",path:n}:{kind:"public-only"}}o(ai,"resolveSource");async function Pe(e=T().keysDir,t={}){let r=ni(t),n=new Set,i=ii(e,r).flatMap(s=>{let a=si(s);return!a||n.has(a)?[]:(n.add(a),[{kid:a,entry:s}])});return Promise.all(i.map(async({kid:s,entry:a})=>{let p=await ai(s,e,r),c=We(e,`${s}${Ze}`),l;try{l=oi(r.readFileSync(c,"utf8"))}catch{}return{kid:s,source:p,publicKeyPath:We(e,a),email:l}}))}o(Pe,"discoverLocalKeys");import pi from"enquirer";async function ci(e){return pi.prompt(e)}o(ci,"defaultPrompt");async function rr(e,t={}){let{prompt:r=ci}=t,{passphrase:n}=await r({type:"password",name:"passphrase",message:e});return n}o(rr,"promptPassphrase");import di from"enquirer";import{statSync as li}from"fs";function nr(e,t=li){return e.map(r=>({key:r,mtime:t(r.publicKeyPath).mtimeMs})).sort((r,n)=>n.mtime-r.mtime).map(({key:r})=>r)}o(nr,"sortByMtime");async function mi(e){return di.prompt(e)}o(mi,"defaultPrompt");async function or(e,t={}){if(e.length===1)return e[0];let{prompt:r=mi,sortByMtime:n=nr}=t,i=n(e),s=i[0],{choice:a}=await r({type:"select",name:"choice",message:"Select signing identity",choices:[{name:"latest",message:`Use latest: ${s.kid}`},{name:"pick",message:"Pick from list"}]});if(a==="latest")return s;if(a==="pick"){let{kid:p}=await r({type:"select",name:"kid",message:"Select signing identity",choices:i.map(l=>({name:l.kid,message:[l.kid,l.email,Ee(l.source)].filter(Boolean).join(" \u2014 ")}))}),c=i.find(l=>l.kid===p);if(!c)throw new Error("No signing identity selected");return c}else throw new Error(`Unexpected choice: "${a}"`)}o(or,"promptSigningIdentity");function fi(e){return{existsSync:e.existsSync??ui,readFileSync:e.readFileSync??((t,r)=>gi(t,r)),readKeyFromKeychain:e.readKeyFromKeychain??we,decryptJweAsString:e.decryptJweAsString??Qt,discoverLocalKeys:e.discoverLocalKeys??Pe,keysDir:e.keysDir??T().keysDir,promptPassphrase:e.promptPassphrase??rr,promptSigningIdentity:e.promptSigningIdentity??or}}o(fi,"resolveDeps");async function ir(e,t={}){let r=fi(t);if(e.keyPath){if(!r.existsSync(e.keyPath))throw new Error(`Key file not found: ${e.keyPath}`);if(!e.kid)throw new Error("--signing-identity <kid> is required when using --key");let s=r.readFileSync(e.keyPath,"utf-8").trim();if(er(s)){if(!e.interactive)throw new Error(`Key at ${e.keyPath} is passphrase-encrypted. Pass --interactive to enter the passphrase.`);let a=await r.promptPassphrase(`Passphrase for key ${e.kid}: `);return{privateKeyPem:await r.decryptJweAsString(s,a),kid:e.kid}}return{privateKeyPem:s,kid:e.kid}}let n=await r.discoverLocalKeys(r.keysDir);if(n.length===0)throw new Error("No signing keys found. Run `cognite keys generate` or pass --key.");let i;if(e.kid)i=n.find(s=>s.kid===e.kid);else if(e.interactive)i=await r.promptSigningIdentity(n);else throw new Error("--signing-identity <kid> is required. Pass --interactive to select it interactively.");if(!i)throw new Error(`No key found with kid "${e.kid}"`);switch(i.source.kind){case"keychain":{let s=await r.readKeyFromKeychain(i.kid);if(!s)throw new Error(`Key "${i.kid}" not found in Keychain`);return{privateKeyPem:s,kid:i.kid}}case"encrypted-file":{if(!e.interactive)throw new Error(`Key "${i.kid}" is passphrase-encrypted. Pass --interactive to enter the passphrase, or store the key in macOS Keychain for non-interactive use.`);let s=await r.promptPassphrase(`Passphrase for key ${i.kid}: `);return{privateKeyPem:await r.decryptJweAsString(r.readFileSync(i.source.path,"utf-8"),s),kid:i.kid}}case"public-only":throw new Error(`Key "${i.kid}" has no private key on this machine (public-only).`)}}o(ir,"resolvePrivateKey");var ki=o(async(e,t,r,n,i)=>{let s=await I(e,{interactive:i.browserAuth??!1,appId:t,orgHint:i.org});await new E(s).submitSignatures(t,r,n)},"defaultSubmitSignatures");function xi(e){let t=yi(e);return new ReadableStream({start(r){t.on("data",n=>{let i=typeof n=="string"?Buffer.from(n):n;r.enqueue(new Uint8Array(i))}),t.on("end",()=>r.close()),t.on("error",n=>r.error(n))},cancel(){t.destroy()}})}o(xi,"createWebStreamFromFile");function Ai(e){return{existsSync:e.existsSync??hi,writeFileSync:e.writeFileSync??Si,createBundleStream:e.createBundleStream??xi,signBundle:e.signBundle??Pi,parseScope:e.parseScope??Ei,validateScopes:e.validateScopes??bi,loadAppConfig:e.loadAppConfig??v,resolvePrivateKey:e.resolvePrivateKey??(t=>ir(t)),submitSignatures:e.submitSignatures??ki,discoverSignatures:e.discoverSignatures??se}}o(Ai,"resolveDeps");async function sr(e,t,r={},n=process.cwd()){let i=Ai(r),s=t.appid,a=t.appVersion,p=[],c=i.loadAppConfig(n);if(s=s??c.externalId,a=a??c.versionTag,t.scope&&t.scope.length>0?p=t.scope.map(i.parseScope):p=c.deployments.map(g=>({org:g.org,project:g.project})),!s)throw new Error("--appid is required (or set externalId in app.json)");if(!a)throw new Error("--app-version is required (or set versionTag in app.json)");let l=e?Qe(n,e):z(n,s,a);if(!i.existsSync(l)){let g=e?"":" (default derived from app.json \u2014 pass [bundle] explicitly to override, or run `cognite apps deploy` first to populate .cognite-bundles/)";throw new Error(`Bundle not found: ${l}${g}`)}let d=i.validateScopes(p);if(d.length>0)throw new Error(`Invalid scopes:
|
|
27
|
+
${d.join(`
|
|
28
|
+
`)}`);let{privateKeyPem:m,kid:y}=await i.resolvePrivateKey({keyPath:t.key?Qe(n,t.key):void 0,kid:t.signingIdentity,interactive:t.interactive}),f=i.createBundleStream(l),u=await i.signBundle({privateKeyPem:m,kid:y,appId:s,version:a,bundleStream:f,role:t.asCertifier?"certifier":"developer",scopes:p}),S=t.output?Qe(n,t.output):Ci(vi(l),`${wi(l)}.${t.asCertifier?"cert":"dev"}.sig`);i.writeFileSync(S,u.token,"utf-8"),console.log(`\u2705 Signed: ${S}`),console.log(` kid: ${u.kid}`),console.log(` bundle: ${u.payload.bundleSha256}`),console.log(` scopes: ${u.payload.scopes.map(g=>`${g.org}/${g.project}`).join(", ")}`),t.verbose&&console.log(`
|
|
29
|
+
Payload:`,JSON.stringify(u.payload,null,2));let h=Array.from(new Set([...i.discoverSignatures(l),u.token])),b=t.interactive?await R(c,{deployment:t.deployment,baseUrl:t.baseUrl,project:t.project,org:t.org}):k(c.deployments,t.deployment);if(!t.browserAuth){let g=$(b);if(g.length>0)throw new Error(`Deployment ${b.org}/${b.project} is missing ${g.join(" and ")} in app.json. Pass --browser-auth to authenticate via browser instead.`)}await i.submitSignatures(b,s,a,h,t),console.log(`
|
|
30
|
+
To publish: npx @cognite/cli apps publish .`)}o(sr,"handleSign");function ar(e,t={}){return e.command("sign [bundle]").description("Sign an app bundle (defaults to .cognite-bundles/<app>-<version>.zip)").option("--key <path>","Private key PEM file path").option("-s, --signing-identity <kid>","Key ID for Keychain or file lookup").option("--appid <id>","Application ID (default: externalId from app.json)").option("-i, --identifier <id>","Alias for --appid").option("--app-version <version>","App version (default: versionTag from app.json)").option("--scope <org/project...>","Deployment scope(s) (default: deployments from app.json)").option("-r, --requirements <org/project...>","Alias for --scope").option("-o, --output <path>","Output file path (default: <bundle>.<dev|cert>.sig)").option("-v, --verbose","Display full payload after signing").option("--as-certifier","Counter-sign a developer signature as certifier").option("--interactive","Enable interactive prompts (key selection, passphrase, deployment target selection)",!1).option("--browser-auth","Use browser-based PKCE auth when submitting the signature",!1).option("-d, --deployment <target>","Deployment target from app.json (index or name; submit step only)").option("--base-url <url>","CDF base URL (only with --interactive)").option("--project <project>","CDF project name (only with --interactive)").option("--org <org>","Organization hint for login (only with --interactive or --browser-auth)").action((r,n)=>{let i={...n,appid:n.identifier??n.appid,scope:n.requirements??n.scope};return sr(r,i,t)})}o(ar,"registerSignCommand");import{existsSync as Di}from"fs";import{resolve as Ii}from"path";import{config as $i}from"dotenv";function F(e,t={existsSync:Di,config:$i}){let r=Ii(e,".env");t.existsSync(r)&&(console.log(`Loading environment variables from ${r}`),t.config({path:r}))}o(F,"loadEnvFile");function O(e){e.infra!=="appsApi"&&(console.error(`
|
|
28
31
|
\u26A0\uFE0F Legacy infrastructure is no longer supported.
|
|
29
32
|
|
|
30
33
|
Your app.json is missing \`"infra": "appsApi"\`, which means it was created for
|
|
31
34
|
the old CDF Application Registry. This deploy path has been removed.
|
|
32
35
|
|
|
33
36
|
To migrate: add \`"infra": "appsApi"\` to your app.json, wire up the correct authentication and re-deploy.
|
|
34
|
-
`),process.exit(1))}o(
|
|
37
|
+
`),process.exit(1))}o(O,"assertAppHostingInfra");async function Ri(e){let t=process.cwd();F(t);let r=v(t);O(r);let n=e.interactive?await R(r,e):k(r.deployments,e.deployment);if(!e.interactive){let d=$(n);if(d.length>0)throw new Error(`Deployment ${n.org}/${n.project} is missing ${d.join(" and ")} in app.json. Use \`npx @cognite/cli@latest apps activate --interactive\` for browser-based authentication instead.`)}let i=await I(n,{interactive:e.interactive,appId:r.externalId,orgHint:e.org}),s=new E(i),{externalId:a,versionTag:p}=r,c;try{c=await s.getVersion(a,p)}catch(d){throw d instanceof K?new Error(`Version ${p} of ${a} has not been deployed yet. Run \`npx @cognite/cli apps deploy\` first.`):d}if(c.alias==="ACTIVE"){console.log(` ${a} @ ${p} is already ACTIVE \u2014 nothing to do.`);return}if(c.lifecycleState==="DEPRECATED"||c.lifecycleState==="ARCHIVED")throw new Error(`Cannot activate ${a} @ ${p}: version is ${c.lifecycleState} (terminal).`);c.lifecycleState==="DRAFT"&&(await s.publishVersion(a,p),console.log(`\u2713 Published ${a} @ ${p} is now PUBLISHED`));let{supersededVersion:l}=await s.activateVersion(a,p);console.log(`\u2713 Activated ${a} @ ${p} is now ACTIVE`),l&&console.log(` Superseded ${l} \u2192 PUBLISHED`)}o(Ri,"handleActivate");function pr(e){return e.command("activate").description("Activate the current app version (publish if needed, then set ACTIVE alias)").argument("[path]","Path to the app folder (only `.` is currently supported)",".").option("-d, --deployment <target>","Deployment target from app.json (index or name)").option("--interactive","Use browser-based authentication instead of env-var credentials",!1).option("--base-url <url>","CDF base URL (only with --interactive)").option("--project <project>","CDF project name (only with --interactive)").option("--org <org>","Organization hint for login (only with --interactive)").addHelpText("after",`
|
|
35
38
|
Examples:
|
|
36
39
|
npx @cognite/cli apps activate . Activate using env-var auth
|
|
37
|
-
npx @cognite/cli apps activate . --interactive Activate using browser auth (no secrets needed)`).action((t,r)=>
|
|
38
|
-
`),initial:!1};async function
|
|
39
|
-
`),i=`link .specify/memory/constitution.md in specifyDir=${r}`,
|
|
40
|
+
npx @cognite/cli apps activate . --interactive Activate using browser auth (no secrets needed)`).action((t,r)=>Ri(r))}o(pr,"registerActivateCommand");import{readdirSync as zi}from"fs";import{basename as Er,dirname as Wi,normalize as Xi,resolve as le}from"path";import{fileURLToPath as Zi,pathToFileURL as Qi}from"url";import{Logger as es,runner as ts}from"hygen";import{execFileSync as pe}from"child_process";function be(e={}){let{execFileSync:t=pe}=e;try{return t("git",["--version"],{stdio:"ignore"}),!0}catch{return!1}}o(be,"isGitInstalled");function ke(e,t={}){let{execFileSync:r=pe}=t;try{return r("git",["-C",e,"status"],{stdio:"ignore"}),!0}catch{return!1}}o(ke,"isInsideGitRepo");function cr(e,t={}){let{execFileSync:r=pe}=t;r("git",["-C",e,"init"],{stdio:"pipe"}),r("git",["-C",e,"add","."],{stdio:"pipe"}),r("git",["-C",e,"commit","-m","Initial commit","--no-gpg-sign","--no-verify"],{stdio:"pipe"})}o(cr,"gitInitAndCommit");function lr(e={}){let{execFileSync:t=pe}=e;try{return String(t("git",["config","--get","user.name"],{encoding:"utf-8",stdio:["ignore","pipe","ignore"]})).trim()||void 0}catch{return}}o(lr,"gitUserName");function dr(e={}){let{execFileSync:t=pe}=e;try{return String(t("git",["config","--get","user.email"],{encoding:"utf-8",stdio:["ignore","pipe","ignore"]})).trim()||void 0}catch{return}}o(dr,"gitUserEmail");import{safeParse as Ti}from"valibot";function ce(e,t){return r=>{let n=Ti(t,r);return n.success?!0:`${e} ${n.issues[0].message}`}}o(ce,"toPromptValidator");var mr={name:ce("App name",Ne),displayName:ce("Display name",Le),baseUrl:ce("Base URL",je),org:ce("Org",Me),project:ce("Project",He)};function Fi(e,t){return e?async r=>{let n=t(r);return n===!0?e(r):n}:t}o(Fi,"composeValidators");function xe(e){return e.map(t=>{if(!(t.name in mr))return t;let r=mr[t.name];return{...t,validate:Fi(t.validate,r)}})}o(xe,"applySchemaValidators");import{basename as ur}from"path";import gr from"enquirer";function et(e){return e.replace(/[A-Z]/g,(t,r)=>r===0?t.toLowerCase():`-${t.toLowerCase()}`)}o(et,"kebabCase");var Oi={type:"confirm",name:"useSpecKit",message:["Enable spec-driven development?"," Adds the github/spec-kit slash commands (/speckit.specify, .clarify, .plan, .tasks, .implement)"," to your app for use in Claude Code or Cursor. They walk you through writing SPEC.md and"," generating a plan, tasks, and implementation."].join(`
|
|
41
|
+
`),initial:!1};async function _i(e,t,r){return e!==void 0?e:t?!!(await r([Oi])).useSpecKit:!1}o(_i,"resolveSpecKit");function Ui(e){return typeof e=="function"}o(Ui,"isFunctionInitial");function fr(e){return(e??"").trim().replace(/\/+$/,"")||"api"}o(fr,"normalizeCluster");function yr({isCurrentDir:e,dirName:t,onAppName:r,onUseSpecKit:n,presets:i={},specKit:s,prompt:a=gr.prompt.bind(gr)}){return()=>({prompt:o(async p=>{if(!Array.isArray(p))return a([p]);let c=Object.fromEntries(Object.entries(i).filter(w=>w[1]!==void 0)),l=Object.keys(c).length>0,d=e?ur(process.cwd()):t?ur(t):null,m=l&&d!==null,y=!m&&d?p.map(w=>w.name==="name"?{...w,initial:d}:w):p,f=xe(y),u=m&&d?{...c,name:d}:c,S=new Set(Object.keys(u)),h=f.filter(w=>!S.has(w.name)),b=h.findIndex(w=>w.name==="baseUrl"),g;if(m){let w=fr(u.cluster),j=o(C=>Ui(C.initial)?C.initial():C.initial,"resolveInitial"),ee=o(C=>{if(C.name==="baseUrl")return`https://${w}.cognitedata.com`;let G=j(C);if(G===void 0)throw new Error(`Non-interactive mode: --${et(C.name)} has no default. Pass it as a flag.`);return G},"deriveValue");g=Object.fromEntries(h.map(C=>[C.name,ee(C)]))}else if(b!==-1){let w=h.filter(D=>D.name!=="baseUrl"),j=w.length>0?await a(w):{},ee=typeof j.cluster=="string"?j.cluster:"",G=`https://${fr(ee||u.cluster)}.cognitedata.com`,Y=h[b],q=await a([{...Y,initial:G}]);g={...j,...q}}else g=h.length>0?await a(h):{};let N={...u,...g},x=typeof N.name=="string"?N.name:"";x&&r(x);let H=await _i(s,!m&&h.length>0,a);return n?.(H),{...N,name:x,useCurrentDir:e,directoryName:e?void 0:t??void 0,useSpecKit:H}},"prompt")})}o(yr,"createAppPrompter");async function hr(e,t,r){let n=[];Object.values(t).some(s=>s!==void 0)&&r!==null&&n.push({key:"name",value:r,label:"directory"});for(let[s,a]of Object.entries(t))a!==void 0&&n.push({key:s,value:a,label:`--${et(s)}`});for(let{key:s,value:a,label:p}of n){let c=e.find(d=>d.name===s)?.validate;if(!c)continue;let l=await c(a);if(l!==!0)throw new Error(`Invalid ${p}: ${l}`)}}o(hr,"validatePresets");import{cpSync as Hi,mkdirSync as wr,writeFileSync as Vi}from"fs";import{dirname as vr,posix as Bi,resolve as Z}from"path";import{fileURLToPath as Gi}from"url";import{copyFileSync as Ki,symlinkSync as Li}from"fs";import{dirname as Ni,join as ji}from"path";function Mi(e){if(e&&typeof e=="object"&&"code"in e&&typeof e.code=="string")return e.code}o(Mi,"errno");function Sr(e){return e instanceof Error?e.message:String(e)}o(Sr,"messageOf");function Ae({target:e,linkPath:t,label:r,symlink:n=Li,copyFile:i=Ki}){try{return n(e,t),!0}catch(s){let a=Mi(s);if(a==="EEXIST")return!0;let p=Sr(s);if(a==="EPERM"||a==="EACCES")try{let c=ji(Ni(t),e);return i(c,t),console.log(`\u2139\uFE0F Wrote ${r} as a copy of ${e} (symlinks need Developer Mode or an elevated shell on Windows).`),!0}catch(c){return console.warn(`\u26A0\uFE0F Could not create ${r} symlink: ${p} (copy fallback also failed: ${Sr(c)})`),!1}return console.warn(`\u26A0\uFE0F Could not create ${r} symlink:`,p),!1}}o(Ae,"linkOrCopyOrWarn");var Yi=Z(vr(Gi(import.meta.url)),"..","..","_vendor","spec-kit"),qi={branch_numbering:"sequential"},Ji=[{from:"templates",to:".specify/templates"},{from:"scripts/bash",to:".specify/scripts/bash"},{from:"commands",to:".claude/commands"},{from:"commands",to:".cursor/commands"}];function Cr({appDir:e,vendorDir:t=Yi}){let r=Z(e,".specify"),n=Z(r,"memory"),i=`prepare spec-kit install for appDir=${e}`;try{for(let{from:s,to:a}of Ji){let p=Z(e,a);i=`copy ${s} to ${a}`,wr(vr(p),{recursive:!0}),Hi(Z(t,s),p,{recursive:!0})}i=`write init-options.json under specifyDir=${r}`,Vi(Z(r,"init-options.json"),`${JSON.stringify(qi,null,2)}
|
|
42
|
+
`),i=`link .specify/memory/constitution.md in specifyDir=${r}`,wr(n,{recursive:!0}),Ae({target:Bi.join("..","..","AGENTS.md"),linkPath:Z(n,"constitution.md"),label:".specify/memory/constitution.md"})}catch(s){let a=s instanceof Error?s.message:String(s);throw new Error(`installSpecKit failed while ${i} (appDir=${e}, vendorDir=${t}): ${a}`,{cause:s})}}o(Cr,"installSpecKit");var Pr=le(Wi(Zi(import.meta.url)),"..","..","_templates");async function rs(){let e=le(Pr,"app","new","prompt.js");return(await import(Qi(e).href)).default}o(rs,"loadPromptDefs");function ns(e,t){return!e||t?null:Xi(e)}o(ns,"resolveDirName");function os(e,t,r){if(e)return{cwd:process.cwd(),display:"."};let n=t??r;if(!n)throw new Error("App creation completed without a target directory or name.");return{cwd:le(process.cwd(),n),display:n}}o(os,"resolveAppLocation");function is(e,t,r){let n=` npm install
|
|
40
43
|
npm run dev`,i="To deploy your app:",s="npx @cognite/cli apps deploy --interactive",a=r?`
|
|
41
44
|
To start spec-driven development:
|
|
42
45
|
Run /speckit.specify in Claude Code or Cursor and describe your app.
|
|
43
|
-
`:"",
|
|
46
|
+
`:"",p=` # Or fully non-interactive (deploys first target from app.json):
|
|
44
47
|
npx @cognite/cli apps deploy`;if(e){console.log(`
|
|
45
48
|
\u2705 App created successfully in current directory!
|
|
46
49
|
|
|
@@ -49,7 +52,7 @@ ${n}
|
|
|
49
52
|
${a}
|
|
50
53
|
${i}
|
|
51
54
|
${s}
|
|
52
|
-
${
|
|
55
|
+
${p}
|
|
53
56
|
`);return}console.log(`
|
|
54
57
|
\u2705 App created successfully!
|
|
55
58
|
|
|
@@ -62,9 +65,9 @@ ${a}
|
|
|
62
65
|
${i}
|
|
63
66
|
cd "${t}"
|
|
64
67
|
${s}
|
|
65
|
-
${
|
|
66
|
-
`)}o(
|
|
67
|
-
${n}`)}catch(t){let r=t instanceof Error?t.message:String(t);console.warn("\u26A0\uFE0F Could not pull skills:",r)}}o(
|
|
68
|
+
${p}
|
|
69
|
+
`)}o(is,"printSuccessMessage");async function ss(e){try{let{execSkillsCli:t,pullAllArgs:r}=await import("../skills-GQ5TZKCM.js");console.log("\u{1F9E0} Pulling skills into your app..."),t(r(),{cwd:e,timeout:3e4,stdio:["pipe","pipe","inherit"]});let n=le(e,".agents","skills"),i=0;try{i=zi(n).length}catch{console.warn(`Skills directory not found after pull \u2014 no skills may have been installed (expected: ${n})`)}let s=i>0?`${i} skills`:"skills";console.log(`\u2705 Installed ${s} successfully to
|
|
70
|
+
${n}`)}catch(t){let r=t instanceof Error?t.message:String(t);console.warn("\u26A0\uFE0F Could not pull skills:",r)}}o(ss,"pullSkillsInto");function as(e,t={}){let{isGitInstalled:r=be,isInsideGitRepo:n=ke,gitInitAndCommit:i=cr}=t;if(!r()){console.warn("git not found \u2014 skipping git repository initialisation");return}if(!n(e)){console.log("Initialising git repository...");try{i(e)}catch(s){let p=(s&&typeof s=="object"&&"stderr"in s&&s.stderr?String(s.stderr).trim():"")||(s instanceof Error?s.message:String(s));console.warn("Could not initialise git repository:",p)}}}o(as,"maybeInitGit");async function ps(e,t){let r=e==="."||e==="./",n=ns(e,r),i=null,s=!1,a={displayName:t.displayName,description:t.description,org:t.org,project:t.project,cluster:t.cluster,baseUrl:t.baseUrl},p=await rs(),c=xe(p),l=r?Er(process.cwd()):n?Er(n):null;await hr(c,a,l);let d=yr({isCurrentDir:r,dirName:n,onAppName:o(y=>{i=y},"onAppName"),onUseSpecKit:o(y=>{s=y},"onUseSpecKit"),presets:a,specKit:t.specKit});await ts(["app","new"],{templates:Pr,cwd:process.cwd(),logger:new es(console.log.bind(console)),createPrompter:d,debug:!!process.env.DEBUG});let m=os(r,n,i);Ae({target:"AGENTS.md",linkPath:le(m.cwd,"CLAUDE.md"),label:"CLAUDE.md"}),s&&Cr({appDir:m.cwd}),await ss(m.cwd),as(m.cwd),is(r,m.display,s)}o(ps,"handleCreate");function br(e){return e.command("create").description("Create a new application.").argument("[directory]","Target directory (. for current, or subdirectory name)").option("--display-name <name>","App display name (skips the prompt)").option("--description <description>","App description (skips the prompt)").option("--org <org>","Deployment org (skips the prompt)").option("--project <project>","Deployment project (skips the prompt)").option("--cluster <cluster>","CDF cluster, e.g. greenfield (skips the prompt)").option("--base-url <url>","CDF base URL, e.g. https://greenfield.cognitedata.com (skips the prompt; defaults to cluster-derived URL when omitted)").option("--spec-kit","Install spec-kit slash commands (skips the prompt)").option("--no-spec-kit","Skip spec-kit installation (skips the prompt)").addHelpText("after",`
|
|
68
71
|
Non-interactive use (CI, scripts, AI agents):
|
|
69
72
|
Pass [directory] plus --display-name, --description, --org, --project, --cluster, --base-url
|
|
70
73
|
to skip every prompt. Missing flags fall back to the interactive prompt.
|
|
@@ -77,14 +80,22 @@ Examples:
|
|
|
77
80
|
--display-name "My App" --description "My app" \\
|
|
78
81
|
--org cog-atlas --project atlas-greenfield --cluster greenfield \\
|
|
79
82
|
--base-url https://greenfield.cognitedata.com
|
|
80
|
-
Fully non-interactive`).action(
|
|
81
|
-
|
|
83
|
+
Fully non-interactive`).action(ps)}o(br,"registerCreateCommand");import cs from"path";async function ls(e,t,r){let n=await I(e,{interactive:t.interactive,appId:r,orgHint:t.org});return new E(n)}o(ls,"defaultGetApiClient");async function ds(e,t,r={}){let{loadEnvFile:n=F,loadAppConfig:i=v,getApiClient:s=ls}=r,a=cs.resolve(process.cwd(),e);n(a);let p=i(a);O(p);let c=t.interactive?await R(p,t):k(p.deployments,t.deployment);if(!t.interactive){let y=$(c);if(y.length>0)throw new Error(`Deployment ${c.org}/${c.project} is missing ${y.join(" and ")} in app.json. Use \`npx @cognite/cli@latest apps deactivate --interactive\` for browser-based authentication instead.`)}let l=await s(c,t,p.externalId),{externalId:d}=p,m=await l.getActiveVersion(d);if(!m){console.log(` ${d} has no active version \u2014 nothing to deactivate.`);return}await l.deactivateVersion(d,m.version),console.log(`\u2713 Deactivated ${d} @ ${m.version} \u2014 active alias removed`)}o(ds,"handleDeactivate");function kr(e){return e.command("deactivate").description("Deactivate the app by removing its active version from service").argument("[path]","Path to the app folder (only `.` is currently supported)",".").option("-d, --deployment <target>","Deployment target from app.json (index or name)").option("--interactive","Use browser-based authentication instead of env-var credentials",!1).option("--base-url <url>","CDF base URL (only with --interactive)").option("--project <project>","CDF project name (only with --interactive)").option("--org <org>","Organization hint for login (only with --interactive)").addHelpText("after",`
|
|
84
|
+
Examples:
|
|
85
|
+
npx @cognite/cli apps deactivate . Deactivate using env-var auth
|
|
86
|
+
npx @cognite/cli apps deactivate . --interactive Deactivate using browser auth (no secrets needed)`).action((t,r)=>ds(t,r))}o(kr,"registerDeactivateCommand");import{mkdir as hs,readFile as Ss}from"fs/promises";import{basename as ws,dirname as vs}from"path";import{execFileSync as De}from"child_process";import M from"fs";import P from"path";import{parseAndValidateManifestConfig as ms}from"@cognite/app-sdk/vite";import{BlobReader as us,Uint8ArrayWriter as gs,ZipWriter as fs}from"@zip.js/zip.js";var tt="package.json",rt="package-lock.json",xr="manifest.json",nt=".cognite",ys=[/^\.env(\..+)?$/i,/^\.secrets?$/i,/^\.token/i,/^\.cognite/i,/\.(key|pem|p12|pfx|jks|crt)$/i],ot=class ot{constructor(t="dist"){this.distPath=P.isAbsolute(t)?t:P.join(process.cwd(),t),this.appRoot=P.dirname(this.distPath)}validateBuildDirectory(){if(!M.existsSync(this.distPath))throw new Error(`Build directory "${this.distPath}" not found. Run build first.`);let t=P.join(this.appRoot,tt);if(!M.existsSync(t))throw new Error(`"${t}" not found. It is required for deployment.`);let r=P.join(this.appRoot,rt);if(!M.existsSync(r))throw new Error(`"${r}" not found. It is required for deployment.`)}async createZip(t="app.zip",r=!1){this.validateBuildDirectory(),console.log("\u{1F4E6} Packaging application...");let n=new fs(new gs,{level:9}),i=o(async(c,l)=>{await n.add(l,new us(await M.openAsBlob(c))),r&&console.log(` \u{1F4C4} ${l}`)},"addFile"),s=o(async c=>{let l=await M.promises.readdir(c,{withFileTypes:!0});for(let d of l){let m=P.join(c,d.name);d.isDirectory()?await s(m):await i(m,P.relative(this.distPath,m).replace(/\\/g,"/"))}},"addDir"),a;try{await s(this.distPath);let c=P.join(this.appRoot,tt);await i(c,P.posix.join(nt,tt));let l=P.join(this.appRoot,xr);if(M.existsSync(l)){let m=M.readFileSync(l,"utf-8");ms(m,l),await i(l,P.posix.join(nt,xr))}let d=P.join(this.appRoot,rt);await i(d,P.posix.join(nt,rt)),a=await n.close()}catch(c){let l=c instanceof Error?c.message:String(c);throw new Error(`Failed to create zip: ${l}`)}await M.promises.writeFile(t,a);let p=(a.byteLength/1024/1024).toFixed(2);return console.log(`\u2705 App packaged: ${t} (${p} MB)`),t}async createSourceArchive(t){console.log("\u{1F4E6} Packaging source for review...");let r;try{r=De("git",["-C",this.appRoot,"rev-parse","--show-toplevel"],{encoding:"utf-8",stdio:["pipe","pipe","pipe"]}).trim()}catch(c){throw c instanceof Error&&"code"in c&&c.code==="ENOENT"?new Error("git not found. Install git and ensure it is in your PATH."):new Error("Source packaging requires a git repository. Run `git init` first.")}let n=De("git",["-C",this.appRoot,"rev-parse","--show-prefix"],{encoding:"utf-8",stdio:["pipe","pipe","pipe"]}).trim(),i=n?n.replace(/\/$/,""):".",s=i==="."?"HEAD":`HEAD:${i}`;this.validateNoSensitiveFiles(r,s);try{De("git",["-C",r,"archive","--format=zip",`--output=${t}`,s])}catch(c){let l=c instanceof Error?c.message:String(c);throw new Error(`Failed to create source archive: ${l}`)}let p=(M.statSync(t).size/1024/1024).toFixed(2);return console.log(`\u2705 Source packaged: ${P.basename(t)} (${p} MB)`),t}validateNoSensitiveFiles(t,r){let n=De("git",["-C",t,"ls-tree","-r","--name-only",r],{encoding:"utf-8",stdio:["pipe","pipe","pipe"]}).trim().split(`
|
|
87
|
+
`).filter(Boolean),i=o(a=>a.split("/").some(p=>ys.some(c=>c.test(p))),"isSensitive"),s=n.filter(i);if(s.length>0)throw new Error(`Source archive would include sensitive files \u2014 remove them from git tracking first:
|
|
88
|
+
`+s.map(a=>` ${a}`).join(`
|
|
89
|
+
`)+`
|
|
90
|
+
Hint: git rm --cached <file>`)}};o(ot,"ApplicationPackager");var Q=ot;async function Ie(e,t,r,n){let{externalId:i,name:s,description:a,versionTag:p}=t,c=z(r,i,p);await hs(vs(c),{recursive:!0}),await new Q(`${r}/dist`).createZip(c,!0);let l=await Ss(c);await new E(e).deploy(i,s,a,p,l,ws(c),n)}o(Ie,"packageAndUpload");var it=o(async(e,t,r)=>{let n=await ae(e,r);await Ie(n,t,r,e.published)},"deploy");import{execSync as Cs}from"child_process";function st(e,t=!0,r={execSync:Cs}){console.log("\u{1F4E6} Building app with npm..."),r.execSync("npm run build",{cwd:e,stdio:t?"inherit":"pipe"}),console.log("\u2705 Build successful")}o(st,"buildApp");function Ar(e,t){let{org:r,project:n,baseUrl:i}=e,s;try{s=new URL(i).hostname}catch{return null}let{externalId:a,versionTag:p}=t,c=new URLSearchParams({cluster:s,customAppVersion:p,workspace:"industrial-tools"});return`https://${r}.fusion.cognite.com/${n}/flows-apps/app/${encodeURIComponent(a)}?${c}`}o(Ar,"generateFusionUrl");function Dr(e,t,r){let n=r?"\u{1F680} Deploy (Interactive)":"\u{1F680} Deploy",i=r?`${t.project} @ ${t.baseUrl}`:`${t.org}/${t.project}`;console.log(["",n,"=".repeat(n.length),`App: ${e.name} (${e.externalId})`,`Version: ${e.versionTag}`,`Target: ${i}`,""].join(`
|
|
91
|
+
`))}o(Dr,"printDeployInfo");function Ir(e,t){console.log(`
|
|
82
92
|
\u2705 Successfully deployed ${e.name} version ${e.versionTag} to ${t.org?`${t.org}/`:""}${t.project}`),console.log("\u{1F512} App is deployed in draft mode");let r=e.deployments.length>1?` -d ${t.project}`:"";console.log(`
|
|
83
|
-
To publish: npx @cognite/cli apps publish .${r}`),console.log(`To activate: npx @cognite/cli apps activate .${r}`)
|
|
93
|
+
To sign: npx @cognite/cli apps sign --interactive${r}`),console.log(`To publish: npx @cognite/cli apps publish .${r}`),console.log(`To activate: npx @cognite/cli apps activate .${r}`),console.log(`
|
|
94
|
+
To submit for certification: npx @cognite/cli apps submit`);let n=Ar(t,e);n&&console.log(`
|
|
84
95
|
\u{1F517} Open your app:
|
|
85
|
-
${n}`)}o(
|
|
86
|
-
\u{1F4E4} Deploying to ${t.org}/${t.project}...`),await i({...t,published:!1},{externalId:e.externalId,name:e.name,description:e.description,versionTag:e.versionTag},r),
|
|
87
|
-
\u{1F4E4} Deploying to ${t.project}...`)
|
|
96
|
+
${n}`)}o(Ir,"printDeployResult");async function Es(e,t,r,n,i){let s=$(t);if(s.length>0)throw new Error(`Deployment ${t.org}/${t.project} is missing ${s.join(" and ")} in app.json. Use \`cognite apps deploy --interactive\` for browser-based authentication instead.`);Dr(e,t,!1),n.skipBuild||st(r),console.log(`
|
|
97
|
+
\u{1F4E4} Deploying to ${t.org}/${t.project}...`),await i({...t,published:!1},{externalId:e.externalId,name:e.name,description:e.description,versionTag:e.versionTag},r),Ir(e,t)}o(Es,"handleDeployNonInteractive");async function Ps(e,t,r,n){Dr(e,t,!0),n.skipBuild||st(r);let i=await I(t,{interactive:!0,appId:e.externalId,orgHint:n.org});console.log(`
|
|
98
|
+
\u{1F4E4} Deploying to ${t.project}...`),await Ie(i,{externalId:e.externalId,name:e.name,description:e.description,versionTag:e.versionTag},r,!1),Ir(e,t)}o(Ps,"handleDeployInteractive");async function bs(e,t=process.cwd(),r={}){let{loadEnvFile:n=F,loadAppConfig:i=v,deploy:s=it}=r;n(t);let a=i(t);if(O(a),e.interactive){let c=await R(a,e);await Ps(a,c,t,e);return}let p=k(a.deployments,e.deployment);await Es(a,p,t,e,s)}o(bs,"handleDeploy");function $r(e){return e.command("deploy").description("Deploy your app to Cognite Data Fusion. Use --interactive for browser-based login (no env-var secrets required).").option("-d, --deployment <target>","Deployment target (index or project name)").option("--skip-build","Skip the build step",!1).option("--interactive","Use browser-based authentication instead of env-var credentials",!1).option("--base-url <url>","CDF base URL (only with --interactive)").option("--project <project>","CDF project name (only with --interactive)").option("--org <org>","Organization hint for login (only with --interactive)").addHelpText("after",`
|
|
88
99
|
Environment (non-interactive):
|
|
89
100
|
deployClientId and deploySecretName are configured per deployment in app.json.
|
|
90
101
|
deploySecretName is the name of the environment variable that holds the client
|
|
@@ -98,42 +109,73 @@ Examples:
|
|
|
98
109
|
npx @cognite/cli apps deploy -d my-project Deploy to project by name
|
|
99
110
|
npx @cognite/cli apps deploy --skip-build Deploy without rebuilding
|
|
100
111
|
npx @cognite/cli apps deploy --interactive Browser auth, prompts for target
|
|
101
|
-
npx @cognite/cli apps deploy --interactive -d 0 Browser auth, target chosen non-interactively`).action(t=>
|
|
112
|
+
npx @cognite/cli apps deploy --interactive -d 0 Browser auth, target chosen non-interactively`).action(t=>bs(t))}o($r,"registerDeployCommand");async function ks(e,t,r){let n=await I(e,{interactive:t.interactive,appId:r.externalId,orgHint:t.org});return new E(n)}o(ks,"defaultBuildApiClient");async function xs(e,t={}){let r=t.loadEnvFile??F,n=t.loadAppConfig??v,i=t.buildApiClient??ks,s=t.discoverSignatures??se,a=process.cwd();r(a);let p=n(a);O(p);let c=e.interactive?await R(p,e):k(p.deployments,e.deployment);if(!e.interactive){let u=$(c);if(u.length>0)throw new Error(`Deployment ${c.org}/${c.project} is missing ${u.join(" and ")} in app.json. Use \`cognite apps publish --interactive\` for browser-based authentication instead.`)}let l=await i(c,e,p),{externalId:d,versionTag:m}=p,y;try{y=await l.getVersion(d,m)}catch(u){throw u instanceof K?new Error(`Version ${m} of ${d} has not been deployed yet. Run \`npx @cognite/cli apps deploy\` first.`):u}if(y.alias==="ACTIVE"){console.log(` ${d} @ ${m} is already ACTIVE \u2014 nothing to do.`);return}if(y.lifecycleState==="PUBLISHED"){console.log(` ${d} @ ${m} is already PUBLISHED \u2014 nothing to do.`);return}if(y.lifecycleState==="DEPRECATED"||y.lifecycleState==="ARCHIVED")throw new Error(`Cannot publish ${d} @ ${m}: version is ${y.lifecycleState} (terminal).`);let f=s(z(a,d,m));f.length>0&&await l.submitSignatures(d,m,f),await l.publishVersion(d,m),console.log(`\u2713 Published ${d} @ ${m} is now PUBLISHED`),console.log(""),console.log("Run `npx @cognite/cli apps activate .` to make it active.")}o(xs,"handlePublish");function Rr(e){return e.command("publish").description("Publish the current app version (transition DRAFT \u2192 PUBLISHED)").argument("[path]","Path to the app folder (only `.` is currently supported)",".").option("-d, --deployment <target>","Deployment target from app.json (index or name)").option("--interactive","Use browser-based authentication instead of env-var credentials",!1).option("--base-url <url>","CDF base URL (only with --interactive)").option("--project <project>","CDF project name (only with --interactive)").option("--org <org>","Organization hint for login (only with --interactive)").addHelpText("after",`
|
|
102
113
|
Examples:
|
|
103
114
|
npx @cognite/cli apps publish . Publish using env-var auth
|
|
104
|
-
npx @cognite/cli apps publish . --interactive Publish using browser auth (no secrets needed)`).action((t,r)=>
|
|
115
|
+
npx @cognite/cli apps publish . --interactive Publish using browser auth (no secrets needed)`).action((t,r)=>xs(r))}o(Rr,"registerPublishCommand");import{spawnSync as As}from"child_process";import{mkdirSync as Ds}from"fs";import{resolve as at}from"path";var Is=["localhost","local.cognite.ai","*.local.cognite.ai"],$s={info:o(e=>{process.stdout.write(`${e}
|
|
116
|
+
`)},"info"),error:o(e=>{process.stderr.write(`${e}
|
|
117
|
+
`)},"error")},Rs={spawnSync:As,mkdirSync:Ds,logger:$s};function Ts(e){let t=e("mkcert",["-help"],{stdio:"ignore"});return t.status===0||t.status===1}o(Ts,"hasMkcert");function Fs({certDir:e=at(process.cwd(),"certificates/mkcert"),domains:t=Is,deps:r={}}={}){let n={...Rs,...r},{spawnSync:i,mkdirSync:s,logger:a}=n;if(!Ts(i))throw a.error("Error: mkcert is not installed."),a.error("Install it with: brew install mkcert (macOS, Linux, WSL)"),a.error("On Windows: choco install mkcert (or scoop install mkcert)"),a.error("See https://github.com/FiloSottile/mkcert#installation for other methods."),new Error("mkcert is not installed");if(a.info("\u2139\uFE0F Installing mkcert root CA into your local trust store."),a.info(" This allows your browser to trust locally-generated certificates."),a.info(" You may be prompted for your system password."),i("mkcert",["-install"],{stdio:"inherit"}).status!==0)throw new Error("`mkcert -install` failed");s(e,{recursive:!0});let c=at(e,"localhost.pem"),l=at(e,"localhost-key.pem");if(i("mkcert",["-cert-file",c,"-key-file",l,...t],{stdio:"inherit"}).status!==0)throw new Error("mkcert failed to generate certificates");return a.info(""),a.info("Certificates generated:"),a.info(` cert: ${c}`),a.info(` key: ${l}`),{certFile:c,keyFile:l}}o(Fs,"setupHttps");function Os(e){Fs({certDir:e.certDir})}o(Os,"handleSetupHttps");function Tr(e){return e.command("setup-https").description("Generate trusted local HTTPS certificates via mkcert").option("--cert-dir <path>","Directory to write certs into (default: ./certificates/mkcert)").addHelpText("after",`
|
|
118
|
+
Examples:
|
|
119
|
+
npx @cognite/cli@latest apps setup-https Generate certs in ./certificates/mkcert
|
|
120
|
+
npx @cognite/cli@latest apps setup-https --cert-dir certs Use a custom directory`).action(t=>Os(t))}o(Tr,"registerSetupHttpsCommand");function _s(e){return e.alias==="ACTIVE"?"ACTIVE":e.lifecycleState}o(_s,"describeStatus");function Us(e){if(e.length===0)return["Signatures: none stored"];let t=["Signatures:"];for(let r of e){let n=r.status==="VALID"?"\u2705":"\u274C",i=new Date(r.signatureIat).toISOString();t.push(` ${n} ${r.signerKid} (${r.signerRole}, signed ${i}) \u2014 ${r.status}`)}return t}o(Us,"formatSignatures");async function Ks(e){let t=process.cwd();F(t);let r=v(t);O(r);let n=e.interactive?await R(r,e):k(r.deployments,e.deployment);if(!e.interactive){let a=$(n);if(a.length>0)throw new Error(`Deployment ${n.org}/${n.project} is missing ${a.join(" and ")} in app.json. Use \`cognite apps status --interactive\` for browser-based authentication instead.`)}let i=await I(n,{interactive:e.interactive,appId:r.externalId,orgHint:e.org}),s=new E(i);console.log(""),console.log(`App: ${r.name} (${r.externalId})`),console.log(`Version: ${r.versionTag} (local)`);try{let a=await s.getVersion(r.externalId,r.versionTag);console.log(`Status: ${_s(a)}`);let p=await Ls(s,r.externalId,r.versionTag);if(console.log(""),p==="endpoint-unavailable")console.log("Signatures: backend endpoint not available on this cluster yet");else for(let c of Us(p))console.log(c);a.lifecycleState==="DRAFT"&&(console.log(""),console.log("Run `npx @cognite/cli apps publish .` to publish this version."))}catch(a){if(a instanceof K){console.log("Status: not deployed yet"),console.log(""),console.log("Run `npx @cognite/cli apps deploy` to upload this version.");return}throw a}}o(Ks,"handleStatus");async function Ls(e,t,r){try{return await e.listSignatures(t,r)}catch(n){if(J(n)&&n.status===404||n instanceof Error&&/status code: 404/.test(n.message))return"endpoint-unavailable";throw n}}o(Ls,"fetchSignatures");function Fr(e){return e.command("status").description("Show the deployment status and signatures of the current app version").argument("[path]","Path to the app folder (only `.` is currently supported)",".").option("-d, --deployment <target>","Deployment target from app.json (index or name)").option("--interactive","Use browser-based authentication instead of env-var credentials",!1).option("--base-url <url>","CDF base URL (only with --interactive)").option("--project <project>","CDF project name (only with --interactive)").option("--org <org>","Organization hint for login (only with --interactive)").addHelpText("after",`
|
|
105
121
|
Examples:
|
|
106
122
|
npx @cognite/cli apps status . Status using env-var auth
|
|
107
|
-
npx @cognite/cli apps status . --interactive Status using browser auth (no secrets needed)`).action((t,r)=>
|
|
123
|
+
npx @cognite/cli apps status . --interactive Status using browser auth (no secrets needed)`).action((t,r)=>Ks(r))}o(Fr,"registerStatusCommand");import{execFileSync as lt}from"child_process";import ct from"fs";import de from"path";import Bs from"readline";var Or="https://cognite.zendesk.com",Ns="360001234312",js="tf_360015295097",Ms="cognite_flows",Hs="360004885031";function Vs(e,t){let r=new URLSearchParams({locale:"en-us",brand_id:Hs,return_to:e});return`${t}/access?${r}`}o(Vs,"withLogin");function _r(e,t,r){let n=new URLSearchParams({ticket_form_id:Ns,tf_priority:"normal",tf_subject:e,[js]:Ms,tf_description:t});return Vs(`${r}/hc/en-us/requests/new?${n}`,r)}o(_r,"buildUrl");function Ur(e){return e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'")}o(Ur,"escapeHtml");function pt(e){return e.map(Ur).join("<br>")}o(pt,"toHtml");function Kr(e,t=Or){let{appName:r,externalId:n,versionTag:i,archiveName:s,developerName:a,cdfProject:p,cdfCluster:c}=e,l=["Dear Cognite Platform Team,","","I would like to submit my Flows app for review and certification.","",`App name: ${r}`,`App external ID: ${n}`,`Version: ${i}`,p?`CDF project: ${p}`:void 0,c?`CDF cluster: ${c}`:void 0,"","`npx @cognite/cli apps submit` verified App-Brief.md,","code-review-report.md, and design-review-report.md are committed to git.","","Attached (all from dist/submit/):",`[ ] ${s??"src-<sha>.zip"} \u2014 source archive`,`[ ] ${n}-${i}.zip \u2014 deploy bundle`,"[ ] Screen recording of the application (required for design review)","","Best regards,",a??"[Your name]"];return _r(`App Review Request: ${r}`,pt(l.filter(d=>d!==void 0)),t)}o(Kr,"buildAppReviewUrl");function Lr(e,t,r,n,i=Or){let s=pt(["Dear Cognite Platform Team,","","I would like to register my Flows app signing key for certified deployments.","",`Key ID (kid): ${e}`,`Developer email: ${t}`,`Expires: ${r}`,"","Please add the following entry to public_keys.yaml:"]),a=`<pre>${Ur(n.replace(/\r\n/g,`
|
|
124
|
+
`))}</pre>`,p=pt(["","Best Regards,","[Your name]","","(This registration request was generated by `npx @cognite/cli keys generate`.)"]);return _r(`Public Key Registration: ${t}`,`${s}<br>${a}${p}`,i)}o(Lr,"buildKeyRegistrationUrl");function Gs(){return new Promise(e=>{let t=Bs.createInterface({input:process.stdin,output:process.stdout});t.question(`
|
|
125
|
+
Press Enter to open the Zendesk form in your browser and reveal dist/submit/ in your file manager...`,()=>{t.close(),e()})})}o(Gs,"defaultPressEnter");var Ys=[{pattern:"App-Brief.md",label:"App-Brief.md",skill:"flows-app-brief"},{pattern:"reviews/code-review/*/code-review-report.md",label:"reviews/code-review/feedback-round-<N>/code-review-report.md",skill:"flows-code-review"},{pattern:"reviews/design-review/*/design-review-report.md",label:"reviews/design-review/feedback-round-<N>/design-review-report.md",skill:"flows-design-review"}];function qs(e){let t=Ys.filter(({pattern:r})=>lt("git",["-C",e,"ls-files","--",r],{encoding:"utf-8",stdio:["pipe","pipe","pipe"]}).trim().length===0);if(t.length>0){let r=t.map(({label:n,skill:i})=>` ${n} \u2192 /${i}`);throw new Error(`Certification files are missing or not committed. Run the required skills in Claude Code first:
|
|
126
|
+
|
|
127
|
+
`+r.join(`
|
|
128
|
+
`)+"\n\nAfter running the skills, commit the generated files and re-run `apps submit`.")}}o(qs,"assertArtifactsCommitted");async function Js(e=process.cwd(),t={}){let{openInBrowser:r=Bt,revealInFileManager:n=Gt,pressEnter:i=Gs,isInteractive:s=o(()=>process.stdout.isTTY===!0,"isInteractive")}=t;if(!be())throw new Error("git is not installed. Install git and ensure it is in your PATH.");if(!ke(e))throw new Error("Not a git repository. Run this command from your app's root directory.");F(e);let a=v(e);O(a),qs(e);let p=de.join(e,"dist","submit");ct.mkdirSync(p,{recursive:!0});let c=lt("git",["-C",e,"rev-parse","--short","HEAD"],{encoding:"utf-8",stdio:["pipe","pipe","pipe"]}).trim();if(lt("git",["-C",e,"status","--porcelain"],{encoding:"utf-8",stdio:["pipe","pipe","pipe"]}).trim().length>0)throw new Error(`Working tree has uncommitted changes. Commit or stash them before submitting for certification.
|
|
129
|
+
|
|
130
|
+
The source archive must exactly match the committed code so reviewers can verify what they receive.`);let d=`src-${c}.zip`,m=de.join(p,d);await new Q(de.join(e,"dist")).createSourceArchive(m);let f=`${a.externalId}-${a.versionTag}.zip`,u=de.join(e,".cognite-bundles",f),S=!1;ct.existsSync(u)&&(ct.copyFileSync(u,de.join(p,f)),S=!0);let h=Kr({appName:a.name,externalId:a.externalId,versionTag:a.versionTag,archiveName:d,developerName:lr(),cdfProject:a.deployments[0].project,cdfCluster:a.deployments[0].baseUrl});console.log(`
|
|
131
|
+
\u2705 Certification package ready: dist/submit/`),console.log(` ${d} \u2014 source archive (commit ${c})`),console.log(S?` ${f} \u2014 deploy bundle`:" \u26A0 Deploy bundle missing \u2014 run `apps deploy` to generate it, then re-run submit"),console.log(" \u2190 add your screen recording to this folder"),console.log(`
|
|
132
|
+
Attach all files from dist/submit/ to the Zendesk ticket.`),console.log(`
|
|
133
|
+
\u{1F517} ${h}`),s()&&(await i(),r(h),n(m))}o(Js,"handleSubmit");function Nr(e){return e.command("submit").description("Package source and open a pre-filled Zendesk form for app certification submission").addHelpText("after",`
|
|
134
|
+
Examples:
|
|
135
|
+
npx @cognite/cli apps submit Package source, open browser + file manager`).action(()=>Js())}o(Nr,"registerSubmitCommand");function jr(e){let t=e.command("apps").description("Manage Fusion Custom Apps \u2014 create, deploy, and manage version lifecycle");return br(t),$r(t),Fr(t),Rr(t),pr(t),kr(t),Tr(t),Nr(t),bt(t),ar(t),t}o(jr,"registerAppsCommand");import{existsSync as aa,mkdirSync as pa,writeFileSync as ca}from"fs";import{dirname as ht,join as ge}from"path";import{generateSigningKeyPair as la}from"@cognite/app-sdk/codesigning";import da from"open";function Mr(e,t){let r=e.getUTCFullYear(),n=e.getUTCMonth()+t,i=new Date(Date.UTC(r,n+1,0)).getUTCDate(),s=Math.min(e.getUTCDate(),i);return new Date(Date.UTC(r,n,s))}o(Mr,"addMonthsClamped");function dt(e){return e.toISOString().slice(0,10)}o(dt,"formatIsoDate");function Hr(e=new Date){return dt(e)}o(Hr,"todayIso");import zs,{Chalk as Ws}from"chalk";var me=new Ws({level:0});function Vr(e){return e.isTTY?zs:me}o(Vr,"chalkForStream");var $e=Uint8Array.from([48,42,48,5,6,3,43,101,112,3,33,0]),Br=32,Gr=44,Yr=60,Xs="services/app-hosting/src/kotlin/com/cognite/apphosting/signing/public_keys.yaml";function Zs(e){let t=e.replace(/-----BEGIN [^-]+-----/g,"").replace(/-----END [^-]+-----/g,"").replace(/\s+/g,"");if(t.length!==Gr&&t.length!==Yr)throw new Error(`Unexpected Ed25519 public key base64 length: got ${t.length} chars, expected ${Gr} (raw) or ${Yr} (X.509-wrapped)`);let r=Buffer.from(t,"base64");if(r.length===$e.length+Br&&r.subarray(0,$e.length).equals($e))return r.subarray($e.length).toString("base64");if(r.length===Br)return r.toString("base64");throw new Error(`Unexpected Ed25519 public key length: got ${r.length} bytes, expected 32 (raw) or 44 (X.509-wrapped)`)}o(Zs,"pemBodyOneLine");function mt(e,t=me,r=new Date){let n=qr(e.issuedAt??Hr(r)),i=qr(e.expires),s=Zs(e.publicKeyPem),a=" ",p=o((l,d)=>`${a}${t.cyan(l)}${t.dim(":")} ${d}
|
|
108
136
|
`,"kv"),c="";return c+=`
|
|
109
|
-
${t.bold("Add this entry to")} ${t.magenta(
|
|
137
|
+
${t.bold("Add this entry to")} ${t.magenta(Xs)} ${t.bold("under")} ${t.cyan("publicKeys:")}
|
|
110
138
|
|
|
111
|
-
`,c
|
|
112
|
-
`,c+=
|
|
113
|
-
`,"passphraseMismatchMsg"),
|
|
114
|
-
`),process.stdout.write(`Run \`cognite keys generate\` to create one (storage: ${
|
|
115
|
-
`);return}let r=["KID","SOURCE","EMAIL"],n=t.map(a=>[a.kid,
|
|
139
|
+
`,c+=` ${t.dim("-")} ${t.cyan("kid")}${t.dim(":")} ${t.green(e.kid)}
|
|
140
|
+
`,c+=p("publicKey",t.green(s)),c+=p("email",t.yellow(e.email)),c+=p("roles",`${t.dim("[")}${t.yellow("developer")}${t.dim("]")}`),c+=p("issuedAt",t.green(n)),c+=p("expiresAt",t.green(i)),c+=p("revokedAt",t.dim("null")),c}o(mt,"renderRegistryYamlBlock");function qr(e){let t=e.trim();if(/^\d{4}-\d{2}-\d{2}$/.test(t))return`${t}T00:00:00Z`;let r=new Date(t);if(Number.isNaN(r.getTime()))throw new Error(`Invalid date '${e}': expected YYYY-MM-DD or ISO-8601 instant`);return r.toISOString()}o(qr,"toIsoInstant");import Qs from"clipboardy";function Jr(e){return Qs.write(e)}o(Jr,"copyToClipboard");import{email as ea,pipe as ta,safeParse as ra,string as na}from"valibot";var oa=ta(na(),ea());function ne(e,t="email"){let r=e.trim();if(!r)throw new Error(`${t} is required`);if(!ra(oa,r).success)throw new Error(`${t} must look like an email (user@example.com); got "${e}"`);return r}o(ne,"parseEmail");function oe(e,t="--expires"){let r=Number(e);if(!Number.isInteger(r)||r<1||r>12)throw new Error(`${t} must be an integer between 1 and 12 (months); got "${e}"`);return r}o(oe,"parseExpiryMonths");import ft from"enquirer";var Re=3,zr="Signing identity (kid) \u2014 e.g. jsmith-dev-001 (lowercase letters, digits, hyphens)",Wr=`Key expiry in months (${1}-${12})`,Xr="Email address for the registry entry",Zr=`Passphrase for the encrypted private key (min ${15} chars)`,Qr="Confirm passphrase",en=o(()=>`Passphrase must be at least ${15} characters`,"passphraseTooShortMsg"),tn=o(e=>`Passphrases do not match (attempt ${e}/${Re}).
|
|
141
|
+
`,"passphraseMismatchMsg"),rn=`Passphrase confirmation failed after ${Re} attempts`,nn=o(e=>`A signing key with kid "${e}" already exists. Overwrite it?`,"confirmOverwriteMsg"),on="How would you like to submit your key registration?",sn="Open in browser",an="Copy link to clipboard";async function Te(e){return ft.prompt(e)}o(Te,"defaultPrompt");function yt(e){return t=>{try{return e(t),!0}catch(r){return r instanceof Error?r.message:"Invalid"}}}o(yt,"parserAsValidator");var sa=/^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/;function ue(e){let t=e.trim();if(!t)throw new Error("--kid must not be empty");if(t.length>64)throw new Error("--kid must be 64 characters or fewer");if(!sa.test(t))throw new Error("--kid must contain only lowercase letters, digits, and hyphens, and must not start or end with a hyphen (e.g. jsmith-dev-001)");return t}o(ue,"parseKid");async function pn(e={}){let{prompt:t=Te}=e,{kid:r}=await t({type:"input",name:"kid",message:zr,validate:yt(ue)});return ue(r)}o(pn,"promptKid");async function cn(e={}){let{prompt:t=o(n=>ft.prompt(n),"prompt")}=e,{action:r}=await t({type:"select",name:"action",message:on,choices:[{name:"browser",message:sn},{name:"clipboard",message:an}]});if(r!=="browser"&&r!=="clipboard")throw new Error(`Unexpected Zendesk action: ${r}`);return r}o(cn,"promptZendeskAction");async function ln(e={}){let{prompt:t=Te}=e,{months:r}=await t({type:"input",name:"months",message:Wr,initial:String(6),validate:yt(n=>oe(n,"expiry"))});return oe(r,"expiry")}o(ln,"promptExpiryMonths");async function dn(e={}){let{prompt:t=Te,gitUserEmail:r=dr}=e,{email:n}=await t({type:"input",name:"email",message:Xr,initial:r(),validate:yt(i=>ne(i,"email"))});return ne(n,"email")}o(dn,"promptEmail");async function mn(e={}){let{prompt:t=Te,stderr:r=process.stderr}=e;for(let n=1;n<=Re;n+=1){let{passphrase:i}=await t({type:"password",name:"passphrase",message:Zr,validate:o(a=>a.length>=15?!0:en(),"validate")}),{confirm:s}=await t({type:"password",name:"confirm",message:Qr});if(i===s)return i;r.write(tn(n))}throw new Error(rn)}o(mn,"promptPassphrase");async function un(e,t={}){let{prompt:r=o(i=>ft.prompt(i),"prompt")}=t,{confirmed:n}=await r({type:"confirm",name:"confirmed",message:nn(e),initial:!1});return n}o(un,"promptConfirmOverwrite");function ma(e){return{writeFileSync:e.writeFileSync??ca,mkdirSync:e.mkdirSync??pa,existsSync:e.existsSync??aa,generateSigningKeyPair:e.generateSigningKeyPair??la,encryptStringAsJwe:e.encryptStringAsJwe??Zt,storeKeyInKeychain:e.storeKeyInKeychain??zt,isOS:e.isOS??(t=>_(t)),promptKid:e.promptKid??pn,promptExpiryMonths:e.promptExpiryMonths??ln,promptEmail:e.promptEmail??dn,promptPassphrase:e.promptPassphrase??mn,promptConfirmOverwrite:e.promptConfirmOverwrite??un,discoverLocalKeys:e.discoverLocalKeys??(()=>Pe()),promptZendeskAction:e.promptZendeskAction??cn,openUrl:e.openUrl??(t=>da(t)),copyToClipboard:e.copyToClipboard??Jr}}o(ma,"resolveDeps");function fn(e,t={}){let r=ma(t),n=e.command("keys").description("Manage code signing keys");n.command("generate").description("Generate an Ed25519 keypair for code signing").option("-o, --output <path>","Encrypted private key output path (forces file storage even on macOS)").option("--no-keychain",`Skip macOS Keychain and write a passphrase-encrypted private key under ${T().keysDir} instead`).option("-e, --expires <months>",`Validity in months (${1}-${12}); skips the interactive prompt`).option("--email <address>","Email address for the registry entry; skips the interactive prompt").option("--kid <identifier>","Signing identity name for the registry (e.g. jsmith-dev-001); skips the interactive prompt").option("--force","Overwrite an existing key without prompting for confirmation").option("--copy-link","Copy the Zendesk registration link to the clipboard without prompting").option("--interactive","Prompt for any required flags that are not supplied",!1).action(i=>ya(i,r)),n.command("list").description("List local signing identities and their storage location").action(()=>ua(r))}o(fn,"registerKeysCommand");async function ua(e){let t=await e.discoverLocalKeys();if(t.length===0){process.stdout.write(`No signing identities found.
|
|
142
|
+
`),process.stdout.write(`Run \`cognite keys generate\` to create one (storage: ${T().keysDir}).
|
|
143
|
+
`);return}let r=["KID","SOURCE","EMAIL"],n=t.map(a=>[a.kid,Ee(a.source),a.email??"\u2014"]),i=r.map((a,p)=>Math.max(a.length,...n.map(c=>c[p].length))),s=o(a=>a.map((p,c)=>p.padEnd(i[c])).join(" ").trimEnd(),"fmt");process.stdout.write(`${s(r)}
|
|
116
144
|
`);for(let a of n)process.stdout.write(`${s(a)}
|
|
117
|
-
`)}o(
|
|
145
|
+
`)}o(ua,"handleList");function gn(e,t,r){let n=ge(T().keysDir,`${e}${re}`);return r.mkdirSync(ht(n),{recursive:!0}),r.writeFileSync(n,t),n}o(gn,"writePublicKey");async function ga(e,t,r,n,i,{force:s=!1}={}){let a=n??ge(T().keysDir,`${e}${Xe}`);if(i.mkdirSync(ht(a),{recursive:!0}),!s&&i.existsSync(a))throw new Error(`Refusing to overwrite existing key at ${a}. Delete it first if you really want to regenerate: rm ${a}`);let p=await i.encryptStringAsJwe(t,r);return i.writeFileSync(a,p,{mode:384}),a}o(ga,"writeEncryptedPrivateKey");function fa(e,t,r){let n=[];if(e.expires===void 0)n.push("--expires <months> is required. Pass --interactive to enter it interactively.");else try{oe(e.expires)}catch(i){n.push(i instanceof Error?i.message:String(i))}if(e.kid===void 0)n.push("--kid <identifier> is required. Pass --interactive to enter it interactively.");else try{let i=ue(e.kid),s=ge(T().keysDir,`${i}${re}`);r(s)&&!e.force&&n.push(`Key "${i}" already exists. Use --force to overwrite without prompting.`)}catch(i){n.push(i instanceof Error?i.message:String(i))}if(e.email===void 0)n.push("--email <address> is required. Pass --interactive to enter it interactively.");else try{ne(e.email,"--email")}catch(i){n.push(i instanceof Error?i.message:String(i))}return t||n.push("A passphrase is required for encrypted key storage. Pass --interactive to enter it interactively."),n}o(fa,"collectNonInteractiveErrors");async function ya(e,t,r=new Date){let{isOS:n,existsSync:i,mkdirSync:s,writeFileSync:a,generateSigningKeyPair:p,storeKeyInKeychain:c,promptExpiryMonths:l,promptKid:d,promptEmail:m,promptPassphrase:y,promptConfirmOverwrite:f}=t,u=e.interactive??!1,S=e.keychain!==!1&&n("macos")&&!e.output;if(!u){let D=fa(e,S,i);if(D.length>0)throw new Error(D.join(`
|
|
146
|
+
`))}let h;e.expires!==void 0?h=oe(e.expires):h=await l();let b=dt(Mr(r,h)),g;e.kid!==void 0?g=ue(e.kid):g=await d();let N=ge(T().keysDir,`${g}${re}`),x=i(N);if(x&&!e.force&&!await f(g)){process.stderr.write(`Aborted.
|
|
147
|
+
`);return}let A;e.email!==void 0?A=ne(e.email,"--email"):A=await m();let H=S?{kind:"keychain"}:{kind:"file",passphrase:await y()};process.stderr.write(`
|
|
118
148
|
Generating Ed25519 keypair...
|
|
119
149
|
|
|
120
|
-
`);let{privateKeyPem:
|
|
121
|
-
`),process.stderr.write(`Private key: macOS Keychain (service: cognite-dune, account: ${
|
|
122
|
-
`)}else{
|
|
123
|
-
`),process.stderr.write(`Private key: ${
|
|
124
|
-
`),
|
|
125
|
-
`)}let
|
|
126
|
-
Signing identity (kid): ${
|
|
127
|
-
`),process.stderr.write(`Expires: ${
|
|
128
|
-
`)
|
|
129
|
-
|
|
130
|
-
|
|
131
|
-
|
|
132
|
-
|
|
133
|
-
`),
|
|
134
|
-
`);let
|
|
135
|
-
`)}
|
|
136
|
-
`)
|
|
137
|
-
${
|
|
138
|
-
`)}
|
|
139
|
-
|
|
150
|
+
`);let{privateKeyPem:w,publicKeyPem:j}=await p(g);if(H.kind==="keychain"){await c(g,w);let D=gn(g,j,t);process.stderr.write(`Public key: ${D}
|
|
151
|
+
`),process.stderr.write(`Private key: macOS Keychain (service: cognite-dune, account: ${g})
|
|
152
|
+
`)}else{let D=await ga(g,w,H.passphrase,e.output,t,{force:x}),_n=gn(g,j,t);process.stderr.write(`Public key: ${_n}
|
|
153
|
+
`),process.stderr.write(`Private key: ${D} (JWE, AES-256-GCM, PBKDF2-SHA512 x${ze.toLocaleString()})
|
|
154
|
+
`),n("macos")||process.stderr.write(` (macOS Keychain integration is the default on darwin; on this OS we use the file.)
|
|
155
|
+
`)}let ee=ge(T().keysDir,`${g}${Ze}`);s(ht(ee),{recursive:!0}),a(ee,JSON.stringify({email:A}));let C=Vr(process.stderr);process.stderr.write(`
|
|
156
|
+
Signing identity (kid): ${C.green(g)}
|
|
157
|
+
`),process.stderr.write(`Expires: ${b} (${h} month${h===1?"":"s"} from today)
|
|
158
|
+
`);let G={kid:g,publicKeyPem:j,email:A,expires:b};u||(process.stderr.write(`
|
|
159
|
+
Key registration data:
|
|
160
|
+
|
|
161
|
+
`),process.stderr.write(mt(G,C,r)));let Y=Lr(g,A,b,mt(G,me,r));process.stderr.write(`
|
|
162
|
+
${C.bold("Next:")}
|
|
163
|
+
`),process.stderr.write(` 1. Register your signing key \u2014 submit this pre-filled Zendesk request:
|
|
164
|
+
`);let q;if(e.copyLink?q="clipboard":u?q=await t.promptZendeskAction():q=null,q==="browser")try{await t.openUrl(Y),process.stderr.write(` Opening in browser...
|
|
165
|
+
`)}catch{process.stderr.write(` URL: ${Y}
|
|
166
|
+
`)}else if(q==="clipboard"){let D=!1;try{await t.copyToClipboard(Y),D=!0}catch{}process.stderr.write(D&&!e.copyLink?` Link copied to clipboard.
|
|
167
|
+
`:` URL: ${Y}
|
|
168
|
+
`)}else process.stderr.write(` URL: ${Y}
|
|
169
|
+
`);process.stderr.write(`
|
|
170
|
+
2. Once your key is approved, sign your Dune app:
|
|
171
|
+
`),process.stderr.write(` ${C.cyan(`cognite sign -s ${g}`)}
|
|
172
|
+
`)}o(ya,"handleGenerate");var yn=1e3,ha=new Set(["baseUrl","url","project","deployment","source","path","name","displayName","description"]);function Sa(e){return Object.fromEntries(Object.entries(e).map(([t,r])=>typeof r=="boolean"?[t,r]:ha.has(t)?[t,r]:[t,"[REDACTED]"]))}o(Sa,"sanitize");function wa(e){let t=[],r=e;for(;r;)r.parent&&t.unshift(r.name()),r=r.parent;return t.join(" ")}o(wa,"getCommandPath");function hn(e){try{let t=e(process.cwd());return{appExternalId:t.externalId,appVersionTag:t.versionTag}}catch{return{}}}o(hn,"tryLoadAppConfig");function St(e){return e.filter(t=>!t.startsWith("-")).join(" ")||"unknown"}o(St,"commandFromArgv");function Sn(e,t,r=v){e.hook("postAction",async(n,i)=>{try{let s={command:wa(i),options:Sa(i.opts()),success:!0,...hn(r)};t.track("Flows.CLI.Command",{...s}),await t.flush(yn)}catch{}})}o(Sn,"instrument");async function wn(e,t,r=v){try{let n={command:St(t),options:{},success:!1,...hn(r)};e.track("Flows.CLI.Command",{...n}),await e.flush(yn)}catch{}}o(wn,"trackFailure");var va="ERR_USE_AFTER_CLOSE";function Cn(e){return e instanceof Error&&"code"in e&&e.code===va}o(Cn,"isReadlineClosedError");function Ca(e){let t=Object.getPrototypeOf(e);return t===Object.prototype||t===null}o(Ca,"isPlainObject");function wt(e){return e==null||Cn(e)?!0:e instanceof Error?!1:!!(typeof e=="object"&&e!==null&&Ca(e)&&Object.keys(e).length===0)}o(wt,"isPromptCancel");var vn=!1;function En(){vn||(vn=!0,process.on("uncaughtException",e=>{Cn(e)&&(console.error(`
|
|
173
|
+
Cancelled.`),process.exit(130)),console.error(e),process.exit(1)}),process.on("unhandledRejection",e=>{wt(e)&&(console.error(`
|
|
174
|
+
Cancelled.`),process.exit(130)),console.error(e),process.exit(1)}))}o(En,"installCancelHandler");import{homedir as xa}from"os";import Pn from"mixpanel";var Ea="5c4d853e7c3b77b1eb4468d5329b278c",fe="cognite-cli",Pa=2e3,bn={env:process.env,init:Pn.init.bind(Pn)},ba={track:o(()=>{},"track"),flush:o(async()=>{},"flush")};function vt(e=process.env){return e.COGNITE_TELEMETRY_DISABLED==="1"||e.DO_NOT_TRACK==="1"}o(vt,"isTelemetryDisabled");function ka(e){return e.COGNITE_TELEMETRY_DEBUG==="1"}o(ka,"isDebug");function kn(e={}){let t=e.env??bn.env,r=e.init??bn.init,n=e.packageName,i=e.cliVersion,s=ka(t);if(vt(t))return s&&process.stderr.write(`[telemetry] disabled \u2014 noop tracker
|
|
175
|
+
`),ba;let a,p=new Set;function c(){if(a)return a;try{return a=r(Ea,{geolocate:!1,keepAlive:!1}),a}catch{return}}return o(c,"getClient"),{track(l,d={}){let m=c();if(!m)return;let y={...d,applicationId:fe,...n&&{packageName:n},...i&&{cliVersion:i},nodeVersion:process.version,platform:process.platform};s&&process.stderr.write(`[telemetry] track ${l} ${JSON.stringify(y)}
|
|
176
|
+
`);let f=o(()=>{},"finish"),u=new Promise(S=>{f=S});p.add(u);try{m.track(l,y,f)}catch{f()}u.finally(()=>p.delete(u))},async flush(l=Pa){if(p.size===0)return;let d,m=new Promise(y=>{d=setTimeout(y,l),d.unref?.()});try{await Promise.race([Promise.allSettled([...p]),m])}finally{d&&clearTimeout(d)}s&&process.stderr.write(`[telemetry] flush done (${p.size} still pending)
|
|
177
|
+
`)}}}o(kn,"createTelemetry");var Aa=xa();function ye(e,t=Aa){if(!t||t==="/")return e;let r=e.replaceAll(t,"~"),n=t.replaceAll("\\","/");return n!==t&&(r=r.replaceAll(n,"~")),r=r.replace(/(?<![A-Za-z0-9_])[A-Za-z]:[/\\]Users[/\\][^\s/\\]+(?=[/\\]|$)/g,"~"),r=r.replace(/(?<![A-Za-z0-9_])\/(?:Users|home)\/[^\s/]+(?=[/\\]|$)/g,"~"),r}o(ye,"redactHomedir");var Da=1e3,Ia="https://0a118cb02e3be57b1838bcfb5783a2bf@o4508040730968064.ingest.de.sentry.io/4510719268290640",$a={captureError:o(async()=>{},"captureError"),flush:o(async()=>{},"flush")};function Ra(e){return e.packageName&&e.cliVersion?`${e.packageName}@${e.cliVersion}`:e.cliVersion??"unknown"}o(Ra,"buildRelease");var Ta="192.0.2.0";function Fa(e){return e?.map(t=>({...t,...t.filename!==void 0&&{filename:ye(t.filename)},...t.abs_path!==void 0&&{abs_path:ye(t.abs_path)},...t.module!==void 0&&{module:ye(t.module)}}))}o(Fa,"scrubStackFrames");function Oa(e){let t={...e.user,email:void 0,username:void 0,ip_address:Ta,id:void 0},r=e.exception?.values?.map(n=>({...n,value:n.value!==void 0?ye(n.value):n.value,...n.stacktrace!==void 0&&{stacktrace:{...n.stacktrace,frames:Fa(n.stacktrace.frames)}}}));return{...e,message:e.message!==void 0?ye(e.message):e.message,user:t,server_name:void 0,...r!==void 0&&{exception:{...e.exception,values:r}}}}o(Oa,"scrubPii");function xn(e={}){let t=e.env??process.env;if(vt(t))return $a;let r=Ra(e),n="production",i=null,s=null;function a(){return{dsn:Ia,release:r,environment:n,defaultIntegrations:!1,integrations:[],sendDefaultPii:!1,enableLogs:!1,initialScope:{tags:{component:"cli",applicationId:fe},contexts:{cli:{applicationId:fe,node:process.version,platform:process.platform}}},beforeSend:Oa}}o(a,"buildInitOptions");async function p(){return i||(s||(s=(async()=>{try{let c=e.sdk??await import("@sentry/node");return c.init(a()),i=c,c}catch{return null}})()),s)}return o(p,"ensureSdk"),{async captureError(c,l){try{let d=await p();if(!d)return;let m={level:"fatal"};l?.command&&(m.tags={command:l.command},m.contexts={cli:{applicationId:fe,node:process.version,platform:process.platform,command:l.command}}),d.captureException(c,m)}catch{}},async flush(c=Da){try{if(!i)return;await i.flush(c)}catch{}}}}o(xn,"createErrorReporter");import{mkdirSync as _a,readFileSync as Ua,writeFileSync as Ka}from"fs";import{homedir as La}from"os";import{resolve as Fe}from"path";import{debuglog as Na}from"util";import{lt as ja,parse as An}from"semver";var Ma="https://registry.npmjs.org/@cognite/cli/latest",Ha=1500,Dn="upgrade-check.json",In=Fe(process.env.XDG_CACHE_HOME||Fe(La(),".cache"),"@cognite","cli"),Ct=Na("cognite-flows");function Va(e,t){return!e||!t||!An(e)||!An(t)?!1:ja(e,t)}o(Va,"isOutdated");async function Ba({timeout:e=Ha,registryUrl:t=Ma,fetchImpl:r=globalThis.fetch}={}){if(typeof r!="function")return null;try{let n=await r(t,{signal:AbortSignal.timeout(e)});if(!n?.ok)return null;let i=await n.json();return typeof i?.version=="string"?i.version:null}catch(n){return Ct("fetchLatestVersion failed (%s): %O",t,n),null}}o(Ba,"fetchLatestVersion");function Ga(e=In,t=864e5){try{let r=Ua(Fe(e,Dn),"utf-8"),n=JSON.parse(r);return typeof n.latest!="string"||typeof n.fetchedAt!="number"||Date.now()-n.fetchedAt>t?null:{latest:n.latest,fetchedAt:n.fetchedAt}}catch(r){return Ct("readUpgradeCheckCache failed (%s): %O",e,r),null}}o(Ga,"readUpgradeCheckCache");function Ya(e,t){try{_a(e,{recursive:!0});let r={latest:t,fetchedAt:Date.now()};Ka(Fe(e,Dn),JSON.stringify(r))}catch(r){Ct("writeUpgradeCheckCache failed (%s): %O",e,r)}}o(Ya,"writeUpgradeCheckCache");async function qa({cacheDir:e=In,...t}={}){let r=await Ba(t);r&&Ya(e,r)}o(qa,"startBackgroundUpgradeCheck");function $n(e,{onOutdated:t,cacheDir:r,...n}={}){let i=Ga(r);if(i){Va(e,i.latest)&&t?.(e,i.latest);return}qa({cacheDir:r,...n})}o($n,"preActionUpgradeCheck");import{default as Sg,chalkStderr as Rn}from"chalk";function Tn(e,t){let r=[`\u26A0 Update available: ${e} -> ${t}`," Run npx @cognite/cli@latest"],n=Math.max(...r.map(p=>[...p].length))+2,i="\u2500".repeat(n),s=o(p=>`\u2502 ${p}${" ".repeat(n-1-[...p].length)}\u2502`,"pad"),a=[`\u250C${i}\u2510`,...r.map(s),`\u2514${i}\u2518`].join(`
|
|
178
|
+
`);return Rn.bold.yellow(a)}o(Tn,"formatUpgradeWarning");function Wa(e){return e instanceof Error&&"code"in e&&typeof e.code=="string"&&e.code==="DEP0040"}o(Wa,"isDep0040Warning");var Pt=process,Xa=Pt.emit.bind(Pt);Pt.emit=function(e,...t){return e==="warning"&&Wa(t[0])?!1:Xa(e,...t)};En();var ie=new za;ie.name("cognite").description("Build and deploy React apps to Cognite Data Fusion").version("1.4.0").showHelpAfterError().configureOutput({writeOut:o(e=>Ja(1,e),"writeOut")});ie.hook("preAction",()=>{$n("1.4.0",{onOutdated:o((e,t)=>{console.warn(`
|
|
179
|
+
${Tn(e,t)}
|
|
180
|
+
`)},"onOutdated")})});jr(ie);fn(ie);var On=kn({packageName:"@cognite/cli",cliVersion:"1.4.0"}),Fn=xn({packageName:"@cognite/cli",cliVersion:"1.4.0"});Sn(ie,On);var Et=process.argv.slice(2);ie.parseAsync(Et,{from:"user"}).catch(async e=>{await wn(On,Et),wt(e)&&(console.error(`
|
|
181
|
+
Cancelled.`),process.exit(130)),await Fn.captureError(e,{command:St(Et)}),await Fn.flush(),console.error(e instanceof Error?`\u274C ${e.message}`:e),process.exit(1)});
|