@copado/agentia-cli 0.122.0-alpha.1 → 1.0.0-beta.0

package/dist/lib/auth-config.js

@@ -1,516 +1,20 @@
-import { confirm } from '@inquirer/prompts';
-import { normalizeAiDomain, normalizeAiGatewayUrl, normalizeAiOrgId, normalizeAiWorkspaceId, resolveAiCredentials, } from './ai-config.js';
-import { AiGateway } from './ai-gateway.js';
-import { deleteAuthProfile, ensureLocalKeychainId, localProfileKeychainId, readAuthProfile, updateAuthProfile, writeAuthProfile, } from './auth-profile.js';
-import { CicdGateway, normalizeCicdBaseUrl } from './cicd-gateway.js';
-import { isCicdRegion } from './cicd-region.js';
-import { ALL_CREDENTIAL_TYPES, credentialLabel, CredentialStoreError, deleteAiDomain, deleteAiGatewayUrl, deleteAiOrgId, deleteAiWorkspaceId, deleteCicdBaseUrl, deleteCredential, deleteCredentialForKey, deleteCrtDomain, deleteCrtOrgId, getAiDomain, getAiGatewayUrl, getAiOrgId, getAiWorkspaceId, getCicdBaseUrl, getCredential, getCredentialForKey, getCrtDomain, getCrtOrgId, maskSecret, setCredentialForKey, } from './credential-store.js';
-import { clearUserContext } from './defaults-store.js';
-import { normalizeLocalGatewayBaseUrl, readLocalGatewayConfig } from './local-gateway-config.js';
-import { collectTestingConfigurationIssues, normalizeCrtDomain, normalizeCrtOrgId, } from './testing-config.js';
-import { TestingGateway } from './testing-gateway.js';
-import { getUserContext } from './user-context.js';
-export const COPADO_ACCOUNT_SUMMARY_LOGIN_URL = 'https://login.salesforce.com/?startURL=%2Flightning%2Fn%2Fcopado__Account_Summary';
-export const COPADO_ROBOTIC_PERSONAL_ACCESS_KEY_URL = 'https://robotic.copado.com/settings/users/me';
-export class AuthSetError extends Error {
-    exitCode;
-    constructor(message, exitCode = 2) {
-        super(message);
-        this.name = 'AuthSetError';
-        this.exitCode = exitCode;
-    }
-}
-export function formatTerminalHyperlink(label, url) {
-    if (!process.stdout.isTTY) {
-        return `${label} (${url})`;
-    }
-    return `\u001B]8;;${url}\u0007${label}\u001B]8;;\u0007 (${url})`;
-}
-export function formatCicdApiKeyHelp() {
-    const accountSummary = formatTerminalHyperlink('Account Summary', COPADO_ACCOUNT_SUMMARY_LOGIN_URL);
-    return `Create a Copado API key on the API Key tab of the ${accountSummary} page.`;
-}
-export function formatPersonalAccessKeyHelp() {
-    const settings = formatTerminalHyperlink('Copado Robotic Testing user settings', COPADO_ROBOTIC_PERSONAL_ACCESS_KEY_URL);
-    return `Create a Personal Access Key in the ${settings} page.`;
-}
-export function getCicdAuthStatus() {
-    const local = readAuthProfile('local');
-    const profile = local?.cicd === undefined ? readAuthProfile('global')?.cicd : local.cicd;
-    const scopedCredential = local?.cicd === undefined ? getCredential('cicd') : getCredentialForKey('cicd', local.keychainId);
-    const localConfig = readLocalGatewayConfig();
-    if (localConfig.enabled) {
-        const apiKey = localConfig.apiKey || scopedCredential;
-        if (apiKey === null || apiKey.trim().length === 0) {
-            return {
-                baseUrl: normalizeLocalGatewayBaseUrl(localConfig.url),
-                local: true,
-                set: false,
-            };
-        }
-        return {
-            baseUrl: normalizeLocalGatewayBaseUrl(localConfig.url),
-            local: true,
-            masked: maskSecret(apiKey),
-            set: true,
-            source: local?.cicd === undefined ? 'global' : 'local',
-        };
-    }
-    const credential = scopedCredential;
-    if (credential === null) {
-        return { set: false };
-    }
-    return {
-        baseUrl: profile?.baseUrl ?? getCicdBaseUrl(),
-        masked: maskSecret(credential),
-        set: true,
-        source: local?.cicd === undefined ? 'global' : 'local',
-    };
-}
-export function getCrtAuthStatus() {
-    const local = readAuthProfile('local');
-    const metadata = local?.crt ?? readAuthProfile('global')?.crt;
-    const source = local?.crt === undefined ? 'global' : 'local';
-    const credential = local?.crt === undefined
-        ? getCredential('crt')
-        : local.keychainId === undefined
-            ? null
-            : getCredentialForKey('crt', local.keychainId);
-    const domain = metadata?.domain ?? getCrtDomain();
-    const orgId = metadata?.orgId ?? getCrtOrgId();
-    const issues = collectTestingConfigurationIssues({ domain, org: orgId, pak: credential });
-    const missing = issues.filter((issue) => issue.kind === 'missing').map((issue) => issue.field);
-    const set = credential !== null && credential.trim().length > 0;
-    const status = {
-        domain,
-        issues,
-        missing,
-        orgId,
-        ready: issues.length === 0,
-        set,
-        source,
-    };
-    if (!set) {
-        return status;
-    }
-    return {
-        ...status,
-        masked: maskSecret(credential),
-    };
-}
-export function getAiAuthStatus() {
-    const local = readAuthProfile('local');
-    const metadata = local?.ai ?? readAuthProfile('global')?.ai;
-    const credential = local?.ai === undefined ? getCredential('ai') : getCredentialForKey('ai', local.keychainId);
-    if (credential === null) {
-        return {
-            domain: metadata?.domain ?? getAiDomain(),
-            gatewayUrl: metadata?.gatewayUrl ?? getAiGatewayUrl(),
-            orgId: metadata?.orgId ?? getAiOrgId(),
-            set: false,
-            workspaceId: metadata?.workspaceId ?? getAiWorkspaceId(),
-        };
-    }
-    return {
-        domain: metadata?.domain ?? getAiDomain(),
-        gatewayUrl: metadata?.gatewayUrl ?? getAiGatewayUrl(),
-        masked: maskSecret(credential),
-        orgId: metadata?.orgId ?? getAiOrgId(),
-        set: true,
-        source: local?.ai === undefined ? 'global' : 'local',
-        workspaceId: metadata?.workspaceId ?? getAiWorkspaceId(),
-    };
-}
-export function isCicdConfigured() {
-    return getCicdAuthStatus().set;
-}
-export function resolveAuthUnsetTypes(options) {
-    const types = [];
-    if (options.cicd) {
-        types.push('cicd');
-    }
-    if (options.crt) {
-        types.push('crt');
-    }
-    if (options.ai) {
-        types.push('ai');
-    }
-    return types.length > 0 ? types : [...ALL_CREDENTIAL_TYPES];
-}
-export function formatAuthUnsetConfirmation(types) {
-    if (types.length === ALL_CREDENTIAL_TYPES.length) {
-        return 'Remove stored CICD, CRT, and AI authentication credentials?';
-    }
-    if (types.length === 1 && types[0] === 'cicd') {
-        return 'Remove stored CICD authentication credentials?';
-    }
-    if (types.length === 1 && types[0] === 'crt') {
-        return 'Remove stored CRT authentication credentials?';
-    }
-    if (types.length === 1 && types[0] === 'ai') {
-        return 'Remove stored AI authentication credentials?';
-    }
-    return 'Remove selected authentication credentials?';
-}
-let testConfirmFn;
-export function setAuthUnsetConfirmForTests(fn) {
-    testConfirmFn = fn;
-}
-export function resetAuthUnsetConfirmForTests() {
-    testConfirmFn = undefined;
-}
-export function hasAuthUnsetTestConfirm() {
-    return testConfirmFn !== undefined;
-}
-export async function confirmAuthUnset(types) {
-    const message = formatAuthUnsetConfirmation(types);
-    if (testConfirmFn !== undefined) {
-        return testConfirmFn(message);
-    }
-    return confirm({
-        default: false,
-        message,
-    });
-}
-function hasStoredCicdConfig() {
-    return getCredential('cicd') !== null || getCicdBaseUrl() !== null;
-}
-function hasStoredCrtConfig() {
-    return getCredential('crt') !== null || getCrtDomain() !== null || getCrtOrgId() !== null;
-}
-function hasStoredAiConfig() {
-    return (getCredential('ai') !== null ||
-        getAiDomain() !== null ||
-        getAiGatewayUrl() !== null ||
-        getAiOrgId() !== null ||
-        getAiWorkspaceId() !== null);
-}
-async function unsetCicdAuth(scope) {
-    const local = scope === 'local' ? readAuthProfile('local') : undefined;
-    const hadConfig = scope === 'local' ? local?.cicd !== undefined : hasStoredCicdConfig();
-    if (scope === 'local') {
-        const keychainId = localProfileKeychainId('cicd');
-        if (keychainId === undefined)
-            return false;
-        deleteCredentialForKey('cicd', keychainId);
-        await deleteAuthProfile('local', 'cicd');
-    }
-    else {
-        deleteCredential('cicd');
-        deleteCicdBaseUrl();
-        await deleteAuthProfile('global', 'cicd');
-    }
-    if (hadConfig && scope === 'global') {
-        await clearUserContext();
-    }
-    return hadConfig;
-}
-async function unsetCrtAuth(scope) {
-    const local = scope === 'local' ? readAuthProfile('local') : undefined;
-    const hadConfig = scope === 'local' ? local?.crt !== undefined : hasStoredCrtConfig();
-    if (scope === 'local') {
-        const keychainId = localProfileKeychainId('crt');
-        if (keychainId === undefined)
-            return false;
-        deleteCredentialForKey('crt', keychainId);
-        await deleteAuthProfile('local', 'crt');
-    }
-    else {
-        deleteCredential('crt');
-        deleteCrtDomain();
-        deleteCrtOrgId();
-        await deleteAuthProfile('global', 'crt');
-    }
-    return hadConfig;
-}
-async function unsetAiAuth(scope) {
-    const local = scope === 'local' ? readAuthProfile('local') : undefined;
-    const hadConfig = scope === 'local' ? local?.ai !== undefined : hasStoredAiConfig();
-    if (scope === 'local') {
-        const keychainId = localProfileKeychainId('ai');
-        if (keychainId === undefined)
-            return false;
-        deleteCredentialForKey('ai', keychainId);
-        await deleteAuthProfile('local', 'ai');
-    }
-    else {
-        deleteCredential('ai');
-        deleteAiDomain();
-        deleteAiGatewayUrl();
-        deleteAiOrgId();
-        deleteAiWorkspaceId();
-        await deleteAuthProfile('global', 'ai');
-    }
-    return hadConfig;
-}
-export async function applyAuthUnset(types, scope = 'global') {
-    const removed = await Promise.all(types.map(async (type) => ({
-        label: credentialLabel(type),
-        removed: type === 'cicd'
-            ? await unsetCicdAuth(scope)
-            : type === 'crt'
-                ? await unsetCrtAuth(scope)
-                : await unsetAiAuth(scope),
-        type,
-    })));
-    return { removed };
-}
-// Flag parsing, endpoint validation, and keychain writes are intentionally colocated.
-// eslint-disable-next-line complexity
-export async function applyAuthSet(input) {
-    const credentials = [];
-    const aiPak = input.ai;
-    const crtPak = input.crt;
-    if (aiPak !== undefined) {
-        credentials.push({ type: 'ai', value: aiPak });
-    }
-    if (input.cicd !== undefined) {
-        credentials.push({ type: 'cicd', value: input.cicd });
-    }
-    if (crtPak !== undefined) {
-        credentials.push({ type: 'crt', value: crtPak });
-    }
-    if ((input.region !== undefined || input.customUrl !== undefined) && input.cicd === undefined) {
-        throw new AuthSetError('--region and --custom-url can only be used together with --cicd');
-    }
-    if (credentials.length === 0 &&
-        input.crtDomain === undefined &&
-        input.crtOrg === undefined &&
-        input.aiDomain === undefined &&
-        input.aiGatewayUrl === undefined &&
-        input.aiOrg === undefined &&
-        input.aiWorkspace === undefined) {
-        throw new AuthSetError('Must provide at least one of --cicd, --crt, --crt-domain, --crt-org, --ai, --ai-domain, --ai-org, --ai-gateway-url, or --ai-workspace');
-    }
-    if (input.region !== undefined && !isCicdRegion(input.region)) {
-        throw new AuthSetError(`Invalid region "${input.region}"`);
-    }
-    if (input.customUrl !== undefined) {
-        try {
-            normalizeCicdBaseUrl(input.customUrl);
-        }
-        catch (error) {
-            throw new AuthSetError(error.message);
-        }
-    }
-    for (const { type, value } of credentials) {
-        if (value.trim().length === 0) {
-            throw new AuthSetError(`--${type} value cannot be empty`);
-        }
-    }
-    let resolvedBaseUrl;
-    let aiDomain;
-    let aiGatewayUrl;
-    let aiOrgId;
-    let aiWorkspaceId;
-    let crtDomain;
-    let crtOrgId;
-    if (input.cicd !== undefined) {
-        resolvedBaseUrl = await resolveCicdEndpoint(input.cicd, input.region, input.customUrl);
-    }
-    if (input.crtDomain !== undefined) {
-        try {
-            crtDomain = normalizeCrtDomain(input.crtDomain);
-        }
-        catch (error) {
-            throw new AuthSetError(error.message);
-        }
-    }
-    if (input.crtOrg !== undefined) {
-        try {
-            crtOrgId = normalizeCrtOrgId(input.crtOrg);
-        }
-        catch (error) {
-            throw new AuthSetError(error.message);
-        }
-    }
-    if (input.aiDomain !== undefined) {
-        try {
-            aiDomain = normalizeAiDomain(input.aiDomain);
-        }
-        catch (error) {
-            throw new AuthSetError(error.message);
-        }
-    }
-    if (input.aiGatewayUrl !== undefined) {
-        try {
-            aiGatewayUrl = normalizeAiGatewayUrl(input.aiGatewayUrl);
-        }
-        catch (error) {
-            throw new AuthSetError(error.message);
-        }
-    }
-    if (input.aiOrg !== undefined) {
-        try {
-            aiOrgId = normalizeAiOrgId(input.aiOrg);
-        }
-        catch (error) {
-            throw new AuthSetError(error.message);
-        }
-    }
-    if (input.aiWorkspace !== undefined) {
-        try {
-            aiWorkspaceId = normalizeAiWorkspaceId(input.aiWorkspace);
-        }
-        catch (error) {
-            throw new AuthSetError(error.message);
-        }
-    }
-    const crtPat = crtPak?.trim();
-    if (crtPat !== undefined && crtPat.length > 0 && crtOrgId !== undefined) {
-        try {
-            crtDomain = await TestingGateway.resolveAndValidateDomain(crtPat, crtOrgId, crtDomain);
-        }
-        catch {
-            throw new AuthSetError('CRT credentials could not be validated for the selected domain.', 1);
-        }
-    }
-    const stored = credentials.map(({ type }) => ({
-        label: credentialLabel(type),
-        type,
-    }));
-    const scope = input.scope ?? 'global';
-    try {
-        if (scope === 'local' && credentials.length > 0) {
-            const currentProfile = readAuthProfile('local') ?? {};
-            if (currentProfile.keychainId === undefined) {
-                await writeAuthProfile('local', { ...currentProfile, keychainId: ensureLocalKeychainId() });
-            }
-        }
-        if (resolvedBaseUrl !== undefined) {
-            await updateAuthProfile(scope, 'cicd', { baseUrl: resolvedBaseUrl });
-        }
-        if (aiDomain !== undefined) {
-            await updateAuthProfile(scope, 'ai', {
-                domain: aiDomain,
-                gatewayUrl: aiGatewayUrl,
-                orgId: aiOrgId?.toString(),
-                workspaceId: aiWorkspaceId,
-            });
-        }
-        if (aiGatewayUrl !== undefined) {
-            await updateAuthProfile(scope, 'ai', {
-                domain: aiDomain,
-                gatewayUrl: aiGatewayUrl,
-                orgId: aiOrgId?.toString(),
-                workspaceId: aiWorkspaceId,
-            });
-        }
-        if (aiOrgId !== undefined) {
-            await updateAuthProfile(scope, 'ai', {
-                domain: aiDomain,
-                gatewayUrl: aiGatewayUrl,
-                orgId: aiOrgId.toString(),
-                workspaceId: aiWorkspaceId,
-            });
-        }
-        if (crtDomain !== undefined) {
-            await updateAuthProfile(scope, 'crt', { domain: crtDomain, orgId: crtOrgId?.toString() });
-        }
-        if (crtOrgId !== undefined) {
-            await updateAuthProfile(scope, 'crt', { domain: crtDomain, orgId: crtOrgId.toString() });
-        }
-        for (const { type, value } of credentials) {
-            if (scope === 'local') {
-                // Sequential writes preserve the shared local keychain identifier.
-                // eslint-disable-next-line no-await-in-loop
-                await updateAuthProfile(scope, type);
-            }
-            const keychainId = scope === 'local' ? readAuthProfile('local')?.keychainId : undefined;
-            setCredentialForKey(type, value, keychainId);
-        }
-    }
-    catch (error) {
-        if (error instanceof CredentialStoreError) {
-            throw new AuthSetError(`${error.message} Use AGENTIA_CICD_API_KEY for CICD, AGENTIA_AI_PAK for AI, or AGENTIA_CRT_PAK for CRT in CI/CD.`, 1);
-        }
-        throw error;
-    }
-    aiWorkspaceId = await resolveAiWorkspaceForAuthSet(input, {
-        domain: aiDomain,
-        gatewayUrl: aiGatewayUrl,
-        org: aiOrgId,
-        pak: aiPak?.trim(),
-        pat: aiPak?.trim(),
-        workspace: aiWorkspaceId,
-    });
-    if (aiWorkspaceId !== undefined) {
-        try {
-            await updateAuthProfile(scope, 'ai', {
-                domain: aiDomain,
-                gatewayUrl: aiGatewayUrl,
-                orgId: aiOrgId?.toString(),
-                workspaceId: aiWorkspaceId,
-            });
-        }
-        catch (error) {
-            if (error instanceof CredentialStoreError) {
-                throw new AuthSetError(`${error.message} Use AGENTIA_AI_PAK and AGENTIA_AI_WORKSPACE in CI/CD.`, 1);
-            }
-            throw error;
-        }
-    }
-    if (input.cicd !== undefined) {
-        await getUserContext({
-            forceRefresh: true,
-        });
-    }
-    return {
-        ai: aiDomain !== undefined || aiGatewayUrl !== undefined || aiOrgId !== undefined || aiWorkspaceId !== undefined
-            ? { domain: aiDomain, gatewayUrl: aiGatewayUrl, orgId: aiOrgId, workspaceId: aiWorkspaceId }
-            : undefined,
-        baseUrl: resolvedBaseUrl,
-        crt: crtDomain !== undefined || crtOrgId !== undefined ? { domain: crtDomain, orgId: crtOrgId } : undefined,
-        stored,
-    };
-}
-async function resolveCicdEndpoint(apiKey, region, customUrl) {
-    try {
-        return await CicdGateway.resolveAndValidateEndpoint(apiKey, {
-            customUrl,
-            region,
-        });
-    }
-    catch {
-        throw new AuthSetError('CICD API key could not be validated for the selected endpoint.', 1);
-    }
-}
-async function resolveAiWorkspaceForAuthSet(input, overrides) {
-    const aiTouched = input.ai !== undefined ||
-        input.aiDomain !== undefined ||
-        input.aiGatewayUrl !== undefined ||
-        input.aiOrg !== undefined ||
-        input.aiWorkspace !== undefined;
-    if (!aiTouched)
-        return undefined;
-    let credentials;
-    try {
-        credentials = resolveAiCredentials(overrides);
-    }
-    catch (error) {
-        if (input.ai !== undefined || input.aiWorkspace !== undefined) {
-            throw new AuthSetError(error.message, 1);
-        }
-        return overrides.workspace;
-    }
-    const candidateWorkspace = overrides.workspace ?? credentials.workspaceId;
-    const explicitWorkspace = overrides.workspace !== undefined;
-    if (candidateWorkspace !== undefined) {
-        try {
-            await AiGateway.getWorkspace(candidateWorkspace, { ...overrides, workspace: candidateWorkspace });
-            return candidateWorkspace;
-        }
-        catch (error) {
-            if (explicitWorkspace)
-                throw new AuthSetError(error.message, 1);
-        }
-    }
-    try {
-        const workspace = await AiGateway.createWorkspace(undefined, { ...overrides, workspace: undefined });
-        return workspace.id;
-    }
-    catch (error) {
-        throw new AuthSetError(error.message, 1);
-    }
-}
-//# sourceMappingURL=auth-config.js.map
+import {modules} from './runtime.js';
+const AuthSetError = modules["auth-config.js"]["AuthSetError"]
+const COPADO_ACCOUNT_SUMMARY_LOGIN_URL = modules["auth-config.js"]["COPADO_ACCOUNT_SUMMARY_LOGIN_URL"]
+const COPADO_ROBOTIC_PERSONAL_ACCESS_KEY_URL = modules["auth-config.js"]["COPADO_ROBOTIC_PERSONAL_ACCESS_KEY_URL"]
+const applyAuthSet = modules["auth-config.js"]["applyAuthSet"]
+const applyAuthUnset = modules["auth-config.js"]["applyAuthUnset"]
+const confirmAuthUnset = modules["auth-config.js"]["confirmAuthUnset"]
+const formatAuthUnsetConfirmation = modules["auth-config.js"]["formatAuthUnsetConfirmation"]
+const formatCicdApiKeyHelp = modules["auth-config.js"]["formatCicdApiKeyHelp"]
+const formatPersonalAccessKeyHelp = modules["auth-config.js"]["formatPersonalAccessKeyHelp"]
+const formatTerminalHyperlink = modules["auth-config.js"]["formatTerminalHyperlink"]
+const getAiAuthStatus = modules["auth-config.js"]["getAiAuthStatus"]
+const getCicdAuthStatus = modules["auth-config.js"]["getCicdAuthStatus"]
+const getCrtAuthStatus = modules["auth-config.js"]["getCrtAuthStatus"]
+const hasAuthUnsetTestConfirm = modules["auth-config.js"]["hasAuthUnsetTestConfirm"]
+const isCicdConfigured = modules["auth-config.js"]["isCicdConfigured"]
+const resetAuthUnsetConfirmForTests = modules["auth-config.js"]["resetAuthUnsetConfirmForTests"]
+const resolveAuthUnsetTypes = modules["auth-config.js"]["resolveAuthUnsetTypes"]
+const setAuthUnsetConfirmForTests = modules["auth-config.js"]["setAuthUnsetConfirmForTests"]
+export {AuthSetError, COPADO_ACCOUNT_SUMMARY_LOGIN_URL, COPADO_ROBOTIC_PERSONAL_ACCESS_KEY_URL, applyAuthSet, applyAuthUnset, confirmAuthUnset, formatAuthUnsetConfirmation, formatCicdApiKeyHelp, formatPersonalAccessKeyHelp, formatTerminalHyperlink, getAiAuthStatus, getCicdAuthStatus, getCrtAuthStatus, hasAuthUnsetTestConfirm, isCicdConfigured, resetAuthUnsetConfirmForTests, resolveAuthUnsetTypes, setAuthUnsetConfirmForTests};

package/dist/lib/auth-profile.js

@@ -1,112 +1,8 @@
-import { randomUUID } from 'node:crypto';
-import { readFileSync } from 'node:fs';
-import { mkdir, rename, unlink, writeFile } from 'node:fs/promises';
-import path from 'node:path';
-import { getDefaultsStorePaths } from './defaults-store.js';
-function configPath(scope) {
-    const paths = getDefaultsStorePaths();
-    return scope === 'global' ? paths.globalPath : paths.userPath;
-}
-function readDocument(filePath) {
-    try {
-        const parsed = JSON.parse(readFileSync(filePath, 'utf8'));
-        return typeof parsed === 'object' && parsed !== null && !Array.isArray(parsed) ? parsed : {};
-    }
-    catch {
-        return {};
-    }
-}
-function validString(value) {
-    return typeof value === 'string' && value.trim().length > 0 ? value : undefined;
-}
-function parseProfile(value) {
-    if (typeof value !== 'object' || value === null || Array.isArray(value))
-        return undefined;
-    const source = value;
-    if (source.version !== 1)
-        return undefined;
-    const profile = { version: 1 };
-    const keychainId = validString(source.keychainId);
-    if (keychainId !== undefined)
-        profile.keychainId = keychainId;
-    for (const type of ['cicd', 'crt', 'ai']) {
-        const section = source[type];
-        if (typeof section !== 'object' || section === null || Array.isArray(section))
-            continue;
-        const values = section;
-        if (type === 'cicd') {
-            const baseUrl = validString(values.baseUrl);
-            profile.cicd = baseUrl === undefined ? {} : { baseUrl };
-        }
-        else if (type === 'crt') {
-            const domain = validString(values.domain);
-            const orgId = validString(values.orgId);
-            profile.crt = { domain, orgId };
-        }
-        else {
-            const domain = validString(values.domain);
-            const gatewayUrl = validString(values.gatewayUrl);
-            const orgId = validString(values.orgId);
-            const workspaceId = validString(values.workspaceId);
-            profile.ai = { domain, gatewayUrl, orgId, workspaceId };
-        }
-    }
-    return profile;
-}
-export function readAuthProfile(scope) {
-    return parseProfile(readDocument(configPath(scope)).auth);
-}
-export function localProfileKeychainId(type) {
-    const profile = readAuthProfile('local');
-    return profile?.[type] === undefined ? undefined : profile.keychainId;
-}
-export function ensureLocalKeychainId() {
-    const current = readAuthProfile('local');
-    if (current?.keychainId !== undefined)
-        return current.keychainId;
-    return randomUUID();
-}
-export async function writeAuthProfile(scope, profile) {
-    const filePath = configPath(scope);
-    const document = readDocument(filePath);
-    document.auth = { ...profile, version: 1 };
-    await writeDocument(filePath, document);
-    return profile;
-}
-export async function updateAuthProfile(scope, type, metadata = undefined) {
-    const current = readAuthProfile(scope) ?? {};
-    const next = {
-        ...current,
-        [type]: metadata === undefined
-            ? (current[type] ?? {})
-            : {
-                ...current[type],
-                ...Object.fromEntries(Object.entries(metadata).filter(([, value]) => value !== undefined)),
-            },
-    };
-    if (scope === 'local')
-        next.keychainId = current.keychainId ?? ensureLocalKeychainId();
-    return writeAuthProfile(scope, next);
-}
-export async function deleteAuthProfile(scope, type) {
-    const current = readAuthProfile(scope);
-    if (current === undefined || current[type] === undefined)
-        return false;
-    const next = { ...current };
-    delete next[type];
-    await writeAuthProfile(scope, next);
-    return true;
-}
-async function writeDocument(filePath, document) {
-    await mkdir(path.dirname(filePath), { recursive: true });
-    const tempPath = `${filePath}.${process.pid}.tmp`;
-    try {
-        await writeFile(tempPath, `${JSON.stringify(document, null, 2)}\n`, 'utf8');
-        await rename(tempPath, filePath);
-    }
-    catch (error) {
-        await unlink(tempPath).catch(() => { });
-        throw error;
-    }
-}
-//# sourceMappingURL=auth-profile.js.map
+import {modules} from './runtime.js';
+const deleteAuthProfile = modules["auth-profile.js"]["deleteAuthProfile"]
+const ensureLocalKeychainId = modules["auth-profile.js"]["ensureLocalKeychainId"]
+const localProfileKeychainId = modules["auth-profile.js"]["localProfileKeychainId"]
+const readAuthProfile = modules["auth-profile.js"]["readAuthProfile"]
+const updateAuthProfile = modules["auth-profile.js"]["updateAuthProfile"]
+const writeAuthProfile = modules["auth-profile.js"]["writeAuthProfile"]
+export {deleteAuthProfile, ensureLocalKeychainId, localProfileKeychainId, readAuthProfile, updateAuthProfile, writeAuthProfile};