@credibledata/cred-cli 0.0.103 → 0.0.105

package/node_modules/@credibledata/cli-auth/dist/index.d.ts

@@ -0,0 +1,86 @@
+/**
+ * How `cred` (cli/) and `ms2ad` (admincli/) choose which token in `~/.cred`
+ * to send. Both CLIs read the same file, so they must agree on this; before
+ * this package each had its own copy, and the copies disagreed.
+ *
+ * Why tokens are chosen by audience and not by field name: the `cred` CLI
+ * writes the Auth0 access token to both `accessToken` and `jwtAccessToken`,
+ * but the VS Code extension writes the id token to `accessToken` and the
+ * access token to `jwtAccessToken`. Whichever tool wrote last decides what
+ * `accessToken` holds. The JWT `aud` claim does not depend on who wrote it:
+ * an access token is issued for the Auth0 API (`audience`), an id token for
+ * the client (`clientId`).
+ *
+ * No runtime dependencies on purpose: this package is bundled into the
+ * published `@credibledata/cred-cli` tarball, and anything it required would
+ * have to be bundled too.
+ */
+/** The token fields of one deployment's entry in `~/.cred`. */
+export interface StoredTokens {
+    /** The access token if `cred` wrote it, the id token if the extension did. */
+    accessToken?: string;
+    /** The access token. Both `cred` and the extension write it. */
+    jwtAccessToken?: string;
+    /** The id token. Only `cred` writes it. */
+    idToken?: string;
+}
+/** The two public Auth0 values a token's `aud` claim is matched against. */
+export interface TokenAudiences {
+    /** The Auth0 API identifier. An access token's `aud` names it. */
+    audience: string;
+    /** The Auth0 client id. An id token's `aud` names it. */
+    clientId: string;
+}
+/** The two Auth0 tokens, told apart by audience. */
+export interface ResolvedTokens {
+    /** Issued for the Auth0 API. This is what goes in an `Authorization` header. */
+    apiAccessToken?: string;
+    /** Issued for the Auth0 client id. Carries the user's profile claims. */
+    idToken?: string;
+}
+/** The JWT claims the CLIs read. */
+export interface JwtClaims {
+    aud?: string | string[];
+    exp?: number;
+    iat?: number;
+    sub?: string;
+    [claim: string]: unknown;
+}
+/**
+ * The payload of a JWT, or `undefined` for anything that is not one: a value
+ * that is not a string, an empty value, an opaque token, or a payload that is
+ * not base64url-encoded JSON.
+ * The signature is not checked. The CLIs only use the claims to choose which
+ * token to send; the server verifies it.
+ */
+export declare function decodeJwtClaims(token: unknown): JwtClaims | undefined;
+/**
+ * Sort the stored token fields into access token and id token by audience.
+ *
+ * The rules, each pinned by test/tokens.test.js:
+ *
+ * 1. `accessToken` is examined before `jwtAccessToken`. The first one issued
+ *    for `audiences.audience` is the access token; the first one issued for
+ *    `audiences.clientId` is the id token.
+ * 2. A token that does not decode as a JWT is never returned as the access
+ *    token. That includes an opaque (non-JWT) token: the control plane reads
+ *    a `Bearer` header as a JWT and rejects anything else, so sending one only
+ *    turns "run `cred login`" into a 401. Service-account keys are opaque too,
+ *    but they are flagged `isServiceAccountToken` in `~/.cred` and sent as
+ *    `ApiKey` by the caller before it ever gets here.
+ * 3. A JWT issued for neither value is not returned either. After a VS Code
+ *    sign-out the extension leaves a stale id token in `accessToken` and
+ *    blanks `jwtAccessToken`; sending that id token got a 401.
+ * 4. Expiry is not checked. Choosing the token and deciding whether it is
+ *    still good are separate questions; `cred` reports expiry itself and the
+ *    server rejects an expired token either way.
+ * 5. An id token found in the two fields wins over the stored `idToken`. Only
+ *    `cred` writes `idToken`, and it writes access tokens into both fields, so
+ *    an id token there was written by the extension after `cred` last wrote
+ *    and is the newer one.
+ *
+ * `audiences` is `undefined` for a deployment name this build does not know
+ * (a `~/.cred` written by a newer CLI). Nothing can be matched then, so no
+ * access token is returned.
+ */
+export declare function resolveTokens(stored: StoredTokens, audiences: TokenAudiences | undefined): ResolvedTokens;

package/node_modules/@credibledata/cli-auth/dist/index.js

@@ -0,0 +1,102 @@
+"use strict";
+/**
+ * How `cred` (cli/) and `ms2ad` (admincli/) choose which token in `~/.cred`
+ * to send. Both CLIs read the same file, so they must agree on this; before
+ * this package each had its own copy, and the copies disagreed.
+ *
+ * Why tokens are chosen by audience and not by field name: the `cred` CLI
+ * writes the Auth0 access token to both `accessToken` and `jwtAccessToken`,
+ * but the VS Code extension writes the id token to `accessToken` and the
+ * access token to `jwtAccessToken`. Whichever tool wrote last decides what
+ * `accessToken` holds. The JWT `aud` claim does not depend on who wrote it:
+ * an access token is issued for the Auth0 API (`audience`), an id token for
+ * the client (`clientId`).
+ *
+ * No runtime dependencies on purpose: this package is bundled into the
+ * published `@credibledata/cred-cli` tarball, and anything it required would
+ * have to be bundled too.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeJwtClaims = decodeJwtClaims;
+exports.resolveTokens = resolveTokens;
+/**
+ * The payload of a JWT, or `undefined` for anything that is not one: a value
+ * that is not a string, an empty value, an opaque token, or a payload that is
+ * not base64url-encoded JSON.
+ * The signature is not checked. The CLIs only use the claims to choose which
+ * token to send; the server verifies it.
+ */
+function decodeJwtClaims(token) {
+    // ~/.cred is hand-editable JSON, so a field typed string may hold anything.
+    if (typeof token !== "string")
+        return undefined;
+    const payload = token.split(".")[1];
+    if (!payload)
+        return undefined;
+    try {
+        const base64 = payload.replace(/-/g, "+").replace(/_/g, "/");
+        const binary = atob(base64.padEnd(Math.ceil(base64.length / 4) * 4, "="));
+        // atob yields one char per byte; percent-encode the bytes so
+        // decodeURIComponent reads them as UTF-8 (a name claim may not be ASCII).
+        const utf8 = decodeURIComponent(Array.from(binary, (c) => "%" + c.charCodeAt(0).toString(16).padStart(2, "0")).join(""));
+        const claims = JSON.parse(utf8);
+        return claims !== null && typeof claims === "object"
+            ? claims
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function audienceMatches(claims, expected) {
+    if (!claims?.aud)
+        return false;
+    return Array.isArray(claims.aud)
+        ? claims.aud.includes(expected)
+        : claims.aud === expected;
+}
+/**
+ * Sort the stored token fields into access token and id token by audience.
+ *
+ * The rules, each pinned by test/tokens.test.js:
+ *
+ * 1. `accessToken` is examined before `jwtAccessToken`. The first one issued
+ *    for `audiences.audience` is the access token; the first one issued for
+ *    `audiences.clientId` is the id token.
+ * 2. A token that does not decode as a JWT is never returned as the access
+ *    token. That includes an opaque (non-JWT) token: the control plane reads
+ *    a `Bearer` header as a JWT and rejects anything else, so sending one only
+ *    turns "run `cred login`" into a 401. Service-account keys are opaque too,
+ *    but they are flagged `isServiceAccountToken` in `~/.cred` and sent as
+ *    `ApiKey` by the caller before it ever gets here.
+ * 3. A JWT issued for neither value is not returned either. After a VS Code
+ *    sign-out the extension leaves a stale id token in `accessToken` and
+ *    blanks `jwtAccessToken`; sending that id token got a 401.
+ * 4. Expiry is not checked. Choosing the token and deciding whether it is
+ *    still good are separate questions; `cred` reports expiry itself and the
+ *    server rejects an expired token either way.
+ * 5. An id token found in the two fields wins over the stored `idToken`. Only
+ *    `cred` writes `idToken`, and it writes access tokens into both fields, so
+ *    an id token there was written by the extension after `cred` last wrote
+ *    and is the newer one.
+ *
+ * `audiences` is `undefined` for a deployment name this build does not know
+ * (a `~/.cred` written by a newer CLI). Nothing can be matched then, so no
+ * access token is returned.
+ */
+function resolveTokens(stored, audiences) {
+    let apiAccessToken;
+    let idToken;
+    if (audiences) {
+        for (const candidate of [stored.accessToken, stored.jwtAccessToken]) {
+            const claims = decodeJwtClaims(candidate);
+            if (!apiAccessToken && audienceMatches(claims, audiences.audience)) {
+                apiAccessToken = candidate;
+            }
+            else if (!idToken && audienceMatches(claims, audiences.clientId)) {
+                idToken = candidate;
+            }
+        }
+    }
+    return { apiAccessToken, idToken: idToken ?? stored.idToken };
+}

package/node_modules/@credibledata/cli-auth/package.json

@@ -0,0 +1,19 @@
+{
+   "name": "@credibledata/cli-auth",
+   "version": "0.0.0",
+   "private": true,
+   "description": "How cred and ms2ad choose the token to send from ~/.cred. Shipped inside @credibledata/cred-cli as a bundled dependency, never published on its own.",
+   "main": "./dist/index.js",
+   "types": "./dist/index.d.ts",
+   "files": [
+      "dist"
+   ],
+   "engines": {
+      "node": ">=20"
+   },
+   "scripts": {
+      "build": "tsc -p .",
+      "test": "node --test test/tokens.test.js"
+   },
+   "license": "ISC"
+}

package/package.json

@@ -1,25 +1,33 @@
 {
    "name": "@credibledata/cred-cli",
-   "version": "0.0.103",
+   "version": "0.0.105",
    "description": "A cli for Credible's package management.",
    "main": "./dist/index.js",
+   "files": [
+      "dist"
+   ],
    "engines": {
       "node": ">=20"
    },
    "scripts": {
       "dev": "npm link && npx tsc --watch",
-      "test": "c8 --reporter=text-summary --reporter=json-summary --reports-dir=coverage --exclude 'src/**/*.spec.ts' --exclude 'src/client/**' --exclude 'mocha.setup.ts' mocha --exit",
+      "build:auth": "tsc -p ../cli-auth && node scripts/sync-cli-auth.mjs",
+      "prepare": "npm run build:auth",
+      "prepack": "npm run build:auth",
+      "test": "npm run build:auth && npm --prefix ../cli-auth test && c8 --reporter=text-summary --reporter=json-summary --reports-dir=coverage --exclude 'src/**/*.spec.ts' --exclude 'src/client/**' --exclude 'src/client-codeassist/**' --exclude 'mocha.setup.ts' mocha --exit",
       "format": "prettier --write src",
       "format:check": "prettier --check src",
       "lint": "eslint . --fix",
       "lint:ci": "eslint . --max-warnings 0",
-      "typecheck": "tsc --noEmit",
+      "typecheck": "npm run build:auth && tsc --noEmit",
       "verify": "npm run format:check && npm run lint:ci && npm run typecheck && npm run test",
-      "build": "npx tsc",
+      "build": "npm run build:auth && npx tsc",
       "clean": "rimraf -g **/node_modules **/dist",
       "generate-types": "npm run generate-client",
       "install-globally": "npm install --quiet && npm run generate-types && npm run build && npm -g i . && node dist/index.js --cleanup && node dist/index.js --install",
-      "generate-client": "./generate-client.sh"
+      "generate-client": "./generate-client.sh",
+      "test:oracle": "ts-node src/setup-core/publisherconfig.oracle.ts",
+      "test:e2e-local": "ts-node src/setup-core/flow.e2e.ts"
    },
    "author": "",
    "license": "ISC",
@@ -28,6 +36,7 @@
       "registry": "https://registry.npmjs.org/"
    },
    "dependencies": {
+      "@credibledata/cli-auth": "file:../cli-auth",
       "archiver": "^7.0.1",
       "axios": "^1.16.0",
       "commander": "^12.1.0",
@@ -38,10 +47,13 @@
       "omelette": "^0.4.17",
       "winston": "^3.17.0"
    },
+   "bundleDependencies": [
+      "@credibledata/cli-auth"
+   ],
    "overrides": {
       "serialize-javascript": "^7.0.5",
       "diff": "^8.0.3",
-      "shell-quote": "^1.8.4"
+      "shell-quote": "^1.11.0"
    },
    "bin": {
       "cred": "dist/index.js"

package/.github/workflows/build.yml

@@ -1,23 +0,0 @@
-name: build
-
-on:
-   push:
-      branches: [main]
-   pull_request:
-      branches: [main]
-
-# self contained tests
-jobs:
-   build:
-      name: Build
-      runs-on: Ubuntu-20.04
-      steps:
-         - uses: actions/checkout@v3
-         - name: Spin-up services
-           run: docker compose --profile ci up -d
-         - name: Install dependencies
-           run: docker exec -t cli-ci npm install
-         - name: Build code
-           run: docker exec -t cli-ci npm run build
-         - name: Run tests
-           run: docker exec -t cli-ci npm run test

package/.mocharc.json

@@ -1,10 +0,0 @@
-{
-    "extension": [
-        "ts"
-    ],
-    "spec": "src/**/*.spec.ts",
-    "require": [
-        "ts-node/register",
-        "mocha.setup.ts"
-    ]
-}

package/.prettierignore

@@ -1,2 +0,0 @@
-# OpenAPI output — generated by ./generate-client.sh, not hand-formatted
-src/client

package/.prettierrc

@@ -1,4 +0,0 @@
-{
-    "printWidth": 80,
-    "tabWidth": 3
-  }

package/README-DEV.md

@@ -1,40 +0,0 @@
-# MS2 CLI
-
-[![build](https://github.com/ms2data/service/actions/workflows/publish-cli.yml/badge.svg)](https://github.com/ms2data/service/actions/workflows/publish-cli.yml/badge.svg)
-
-### Overview
-
-This directory contains a simple CLI to create, update, delete, and list projects, packages, and versions in the MS2 Semantic Model Service.
-
-### Build and Run Instructions
-
-To build the CLI:
-
-```
-npm run build
-```
-
-To install the CLI globally:
-
-```
-sudo npm install -g .
-```
-
-Once the CLI is install, you can login and set your default environment:
-
-```
-cred login kjnesbit
-cred set environment malloy-samples
-```
-
-Then start publishing packages by changing to a package directory and running:
-
-```
-cred publish
-```
-
-You can run the following command to get help on other commands:
-
-```
-cred --help
-```

package/coverage/coverage-summary.json

@@ -1,40 +0,0 @@
-{"total": {"lines":{"total":3673,"covered":3391,"skipped":0,"pct":92.32},"statements":{"total":3673,"covered":3391,"skipped":0,"pct":92.32},"functions":{"total":100,"covered":95,"skipped":0,"pct":95},"branches":{"total":537,"covered":499,"skipped":0,"pct":92.92},"branchesTrue":{"total":0,"covered":0,"skipped":0,"pct":100}}
-,"/home/runner/work/service/service/cli/src/clientconfiguration.ts": {"lines":{"total":364,"covered":350,"skipped":0,"pct":96.15},"functions":{"total":25,"covered":22,"skipped":0,"pct":88},"statements":{"total":364,"covered":350,"skipped":0,"pct":96.15},"branches":{"total":59,"covered":51,"skipped":0,"pct":86.44}}
-,"/home/runner/work/service/service/cli/src/constants.ts": {"lines":{"total":228,"covered":228,"skipped":0,"pct":100},"functions":{"total":2,"covered":2,"skipped":0,"pct":100},"statements":{"total":228,"covered":228,"skipped":0,"pct":100},"branches":{"total":10,"covered":9,"skipped":0,"pct":90}}
-,"/home/runner/work/service/service/cli/src/logger.ts": {"lines":{"total":90,"covered":90,"skipped":0,"pct":100},"functions":{"total":1,"covered":1,"skipped":0,"pct":100},"statements":{"total":90,"covered":90,"skipped":0,"pct":100},"branches":{"total":13,"covered":11,"skipped":0,"pct":84.61}}
-,"/home/runner/work/service/service/cli/src/utils.ts": {"lines":{"total":115,"covered":93,"skipped":0,"pct":80.86},"functions":{"total":6,"covered":6,"skipped":0,"pct":100},"statements":{"total":115,"covered":93,"skipped":0,"pct":80.86},"branches":{"total":24,"covered":11,"skipped":0,"pct":45.83}}
-,"/home/runner/work/service/service/cli/src/validator.ts": {"lines":{"total":44,"covered":38,"skipped":0,"pct":86.36},"functions":{"total":2,"covered":2,"skipped":0,"pct":100},"statements":{"total":44,"covered":38,"skipped":0,"pct":86.36},"branches":{"total":16,"covered":15,"skipped":0,"pct":93.75}}
-,"/home/runner/work/service/service/cli/src/commands/connection/createconnections.ts": {"lines":{"total":109,"covered":109,"skipped":0,"pct":100},"functions":{"total":1,"covered":1,"skipped":0,"pct":100},"statements":{"total":109,"covered":109,"skipped":0,"pct":100},"branches":{"total":36,"covered":36,"skipped":0,"pct":100}}
-,"/home/runner/work/service/service/cli/src/commands/connection/deleteconnection.ts": {"lines":{"total":57,"covered":57,"skipped":0,"pct":100},"functions":{"total":1,"covered":1,"skipped":0,"pct":100},"statements":{"total":57,"covered":57,"skipped":0,"pct":100},"branches":{"total":11,"covered":11,"skipped":0,"pct":100}}
-,"/home/runner/work/service/service/cli/src/commands/connection/listconnections.ts": {"lines":{"total":58,"covered":58,"skipped":0,"pct":100},"functions":{"total":1,"covered":1,"skipped":0,"pct":100},"statements":{"total":58,"covered":58,"skipped":0,"pct":100},"branches":{"total":7,"covered":7,"skipped":0,"pct":100}}
-,"/home/runner/work/service/service/cli/src/commands/environment/createenvironment.ts": {"lines":{"total":73,"covered":73,"skipped":0,"pct":100},"functions":{"total":1,"covered":1,"skipped":0,"pct":100},"statements":{"total":73,"covered":73,"skipped":0,"pct":100},"branches":{"total":17,"covered":17,"skipped":0,"pct":100}}
-,"/home/runner/work/service/service/cli/src/commands/environment/deleteenvironment.ts": {"lines":{"total":48,"covered":48,"skipped":0,"pct":100},"functions":{"total":1,"covered":1,"skipped":0,"pct":100},"statements":{"total":48,"covered":48,"skipped":0,"pct":100},"branches":{"total":8,"covered":8,"skipped":0,"pct":100}}
-,"/home/runner/work/service/service/cli/src/commands/environment/getenvironment.ts": {"lines":{"total":43,"covered":43,"skipped":0,"pct":100},"functions":{"total":1,"covered":1,"skipped":0,"pct":100},"statements":{"total":43,"covered":43,"skipped":0,"pct":100},"branches":{"total":6,"covered":6,"skipped":0,"pct":100}}
-,"/home/runner/work/service/service/cli/src/commands/environment/listenvironments.ts": {"lines":{"total":67,"covered":67,"skipped":0,"pct":100},"functions":{"total":2,"covered":2,"skipped":0,"pct":100},"statements":{"total":67,"covered":67,"skipped":0,"pct":100},"branches":{"total":6,"covered":6,"skipped":0,"pct":100}}
-,"/home/runner/work/service/service/cli/src/commands/environment/setenvironment.ts": {"lines":{"total":14,"covered":14,"skipped":0,"pct":100},"functions":{"total":1,"covered":1,"skipped":0,"pct":100},"statements":{"total":14,"covered":14,"skipped":0,"pct":100},"branches":{"total":2,"covered":2,"skipped":0,"pct":100}}
-,"/home/runner/work/service/service/cli/src/commands/environment/updateenvironment.ts": {"lines":{"total":168,"covered":160,"skipped":0,"pct":95.23},"functions":{"total":2,"covered":2,"skipped":0,"pct":100},"statements":{"total":168,"covered":160,"skipped":0,"pct":95.23},"branches":{"total":44,"covered":42,"skipped":0,"pct":95.45}}
-,"/home/runner/work/service/service/cli/src/commands/group/addmember.ts": {"lines":{"total":85,"covered":85,"skipped":0,"pct":100},"functions":{"total":1,"covered":1,"skipped":0,"pct":100},"statements":{"total":85,"covered":85,"skipped":0,"pct":100},"branches":{"total":14,"covered":14,"skipped":0,"pct":100}}
-,"/home/runner/work/service/service/cli/src/commands/group/creategroup.ts": {"lines":{"total":54,"covered":54,"skipped":0,"pct":100},"functions":{"total":1,"covered":1,"skipped":0,"pct":100},"statements":{"total":54,"covered":54,"skipped":0,"pct":100},"branches":{"total":8,"covered":8,"skipped":0,"pct":100}}
-,"/home/runner/work/service/service/cli/src/commands/group/deletegroup.ts": {"lines":{"total":45,"covered":45,"skipped":0,"pct":100},"functions":{"total":1,"covered":1,"skipped":0,"pct":100},"statements":{"total":45,"covered":45,"skipped":0,"pct":100},"branches":{"total":6,"covered":6,"skipped":0,"pct":100}}
-,"/home/runner/work/service/service/cli/src/commands/group/getgroup.ts": {"lines":{"total":47,"covered":47,"skipped":0,"pct":100},"functions":{"total":1,"covered":1,"skipped":0,"pct":100},"statements":{"total":47,"covered":47,"skipped":0,"pct":100},"branches":{"total":6,"covered":6,"skipped":0,"pct":100}}
-,"/home/runner/work/service/service/cli/src/commands/group/listgroups.ts": {"lines":{"total":45,"covered":45,"skipped":0,"pct":100},"functions":{"total":2,"covered":2,"skipped":0,"pct":100},"statements":{"total":45,"covered":45,"skipped":0,"pct":100},"branches":{"total":8,"covered":8,"skipped":0,"pct":100}}
-,"/home/runner/work/service/service/cli/src/commands/group/removemember.ts": {"lines":{"total":75,"covered":75,"skipped":0,"pct":100},"functions":{"total":1,"covered":1,"skipped":0,"pct":100},"statements":{"total":75,"covered":75,"skipped":0,"pct":100},"branches":{"total":11,"covered":11,"skipped":0,"pct":100}}
-,"/home/runner/work/service/service/cli/src/commands/groupaccesstoken/createToken.ts": {"lines":{"total":72,"covered":72,"skipped":0,"pct":100},"functions":{"total":1,"covered":1,"skipped":0,"pct":100},"statements":{"total":72,"covered":72,"skipped":0,"pct":100},"branches":{"total":11,"covered":11,"skipped":0,"pct":100}}
-,"/home/runner/work/service/service/cli/src/commands/groupaccesstoken/deleteToken.ts": {"lines":{"total":29,"covered":29,"skipped":0,"pct":100},"functions":{"total":1,"covered":1,"skipped":0,"pct":100},"statements":{"total":29,"covered":29,"skipped":0,"pct":100},"branches":{"total":4,"covered":4,"skipped":0,"pct":100}}
-,"/home/runner/work/service/service/cli/src/commands/groupaccesstoken/groupContainer.ts": {"lines":{"total":83,"covered":83,"skipped":0,"pct":100},"functions":{"total":1,"covered":1,"skipped":0,"pct":100},"statements":{"total":83,"covered":83,"skipped":0,"pct":100},"branches":{"total":13,"covered":13,"skipped":0,"pct":100}}
-,"/home/runner/work/service/service/cli/src/commands/groupaccesstoken/listTokens.ts": {"lines":{"total":29,"covered":29,"skipped":0,"pct":100},"functions":{"total":1,"covered":1,"skipped":0,"pct":100},"statements":{"total":29,"covered":29,"skipped":0,"pct":100},"branches":{"total":4,"covered":4,"skipped":0,"pct":100}}
-,"/home/runner/work/service/service/cli/src/commands/misc/login.ts": {"lines":{"total":343,"covered":232,"skipped":0,"pct":67.63},"functions":{"total":7,"covered":6,"skipped":0,"pct":85.71},"statements":{"total":343,"covered":232,"skipped":0,"pct":67.63},"branches":{"total":14,"covered":9,"skipped":0,"pct":64.28}}
-,"/home/runner/work/service/service/cli/src/commands/misc/logout.ts": {"lines":{"total":9,"covered":9,"skipped":0,"pct":100},"functions":{"total":1,"covered":1,"skipped":0,"pct":100},"statements":{"total":9,"covered":9,"skipped":0,"pct":100},"branches":{"total":1,"covered":1,"skipped":0,"pct":100}}
-,"/home/runner/work/service/service/cli/src/commands/misc/loopbackOAuth.ts": {"lines":{"total":127,"covered":26,"skipped":0,"pct":20.47},"functions":{"total":3,"covered":2,"skipped":0,"pct":66.66},"statements":{"total":127,"covered":26,"skipped":0,"pct":20.47},"branches":{"total":2,"covered":2,"skipped":0,"pct":100}}
-,"/home/runner/work/service/service/cli/src/commands/misc/set-access-token.ts": {"lines":{"total":32,"covered":32,"skipped":0,"pct":100},"functions":{"total":1,"covered":1,"skipped":0,"pct":100},"statements":{"total":32,"covered":32,"skipped":0,"pct":100},"branches":{"total":3,"covered":3,"skipped":0,"pct":100}}
-,"/home/runner/work/service/service/cli/src/commands/package/deletepackage.ts": {"lines":{"total":58,"covered":58,"skipped":0,"pct":100},"functions":{"total":1,"covered":1,"skipped":0,"pct":100},"statements":{"total":58,"covered":58,"skipped":0,"pct":100},"branches":{"total":10,"covered":10,"skipped":0,"pct":100}}
-,"/home/runner/work/service/service/cli/src/commands/package/listpackages.ts": {"lines":{"total":74,"covered":74,"skipped":0,"pct":100},"functions":{"total":2,"covered":2,"skipped":0,"pct":100},"statements":{"total":74,"covered":74,"skipped":0,"pct":100},"branches":{"total":8,"covered":8,"skipped":0,"pct":100}}
-,"/home/runner/work/service/service/cli/src/commands/package/publish.ts": {"lines":{"total":236,"covered":234,"skipped":0,"pct":99.15},"functions":{"total":5,"covered":5,"skipped":0,"pct":100},"statements":{"total":236,"covered":234,"skipped":0,"pct":99.15},"branches":{"total":31,"covered":29,"skipped":0,"pct":93.54}}
-,"/home/runner/work/service/service/cli/src/commands/package/updatepackage.ts": {"lines":{"total":95,"covered":95,"skipped":0,"pct":100},"functions":{"total":1,"covered":1,"skipped":0,"pct":100},"statements":{"total":95,"covered":95,"skipped":0,"pct":100},"branches":{"total":20,"covered":20,"skipped":0,"pct":100}}
-,"/home/runner/work/service/service/cli/src/commands/permission/createpermission.ts": {"lines":{"total":181,"covered":181,"skipped":0,"pct":100},"functions":{"total":1,"covered":1,"skipped":0,"pct":100},"statements":{"total":181,"covered":181,"skipped":0,"pct":100},"branches":{"total":24,"covered":24,"skipped":0,"pct":100}}
-,"/home/runner/work/service/service/cli/src/commands/permission/scope.ts": {"lines":{"total":180,"covered":176,"skipped":0,"pct":97.77},"functions":{"total":5,"covered":5,"skipped":0,"pct":100},"statements":{"total":180,"covered":176,"skipped":0,"pct":97.77},"branches":{"total":26,"covered":25,"skipped":0,"pct":96.15}}
-,"/home/runner/work/service/service/cli/src/commands/version/archive-unarchive-version.ts": {"lines":{"total":108,"covered":101,"skipped":0,"pct":93.51},"functions":{"total":3,"covered":3,"skipped":0,"pct":100},"statements":{"total":108,"covered":101,"skipped":0,"pct":93.51},"branches":{"total":21,"covered":20,"skipped":0,"pct":95.23}}
-,"/home/runner/work/service/service/cli/src/commands/version/listversions.ts": {"lines":{"total":45,"covered":45,"skipped":0,"pct":100},"functions":{"total":1,"covered":1,"skipped":0,"pct":100},"statements":{"total":45,"covered":45,"skipped":0,"pct":100},"branches":{"total":7,"covered":7,"skipped":0,"pct":100}}
-,"/home/runner/work/service/service/cli/src/common/UserGroupId.ts": {"lines":{"total":137,"covered":130,"skipped":0,"pct":94.89},"functions":{"total":11,"covered":11,"skipped":0,"pct":100},"statements":{"total":137,"covered":130,"skipped":0,"pct":94.89},"branches":{"total":26,"covered":24,"skipped":0,"pct":92.3}}
-,"/home/runner/work/service/service/cli/src/polyfills/file.polyfill.ts": {"lines":{"total":6,"covered":6,"skipped":0,"pct":100},"functions":{"total":0,"covered":0,"skipped":0,"pct":100},"statements":{"total":6,"covered":6,"skipped":0,"pct":100},"branches":{"total":0,"covered":0,"skipped":0,"pct":100}}
-}