@crystalplatforms/adm 0.2.3 → 0.3.0

package/src/utils/keychain.js

@@ -1,97 +0,0 @@
-const child_process = require('child_process');
-const os = require('os');
-const tokenEncryption = require('./token-encryption');
-
-const SERVICE = 'adm-cli';
-
-function isKeychainAvailable() {
-  if (os.platform() !== 'darwin') return false;
-  try {
-    child_process.execSync('security find-generic-password -s adm-cli 2>/dev/null', { stdio: 'pipe' });
-    return true;
-  } catch {
-    // Keychain exists but no entry yet — still usable
-    try {
-      child_process.execSync('security list-keychains >/dev/null 2>&1', { stdio: 'pipe' });
-      return true;
-    } catch {
-      return false;
-    }
-  }
-}
-
-function keychainSet(name, value) {
-  child_process.execSync(
-    `security add-generic-password -U -s "${SERVICE}" -a "${name}" -w "${value}"`,
-    { stdio: 'pipe' },
-  );
-}
-
-function keychainGet(name) {
-  try {
-    return child_process.execSync(
-      `security find-generic-password -s "${SERVICE}" -a "${name}" -w`,
-      { encoding: 'utf8', stdio: 'pipe' },
-    ).trim();
-  } catch {
-    return null;
-  }
-}
-
-function keychainDelete(name) {
-  try {
-    child_process.execSync(
-      `security delete-generic-password -s "${SERVICE}" -a "${name}"`,
-      { stdio: 'pipe' },
-    );
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-async function storeToken(name, token) {
-  if (isKeychainAvailable()) {
-    keychainSet(name, token);
-    return 'keychain';
-  }
-  await tokenEncryption.writeEncryptedToken(name, token);
-  return 'encrypted-file';
-}
-
-async function retrieveToken(name) {
-  if (isKeychainAvailable()) {
-    const val = keychainGet(name);
-    if (val) return val;
-  }
-  return tokenEncryption.readEncryptedToken(name);
-}
-
-async function removeToken(name) {
-  if (isKeychainAvailable()) {
-    return keychainDelete(name);
-  }
-  return tokenEncryption.deleteEncryptedToken(name);
-}
-
-async function listStoredServices() {
-  // Always check both keychain and encrypted file
-  const names = new Set();
-  if (isKeychainAvailable()) {
-    try {
-      const out = child_process.execSync(
-        `security dump-keychain 2>/dev/null | grep -A1 "svce.*${SERVICE}" | grep acct`,
-        { encoding: 'utf8', stdio: 'pipe' },
-      );
-      const matches = out.matchAll(/"acct"<blob>="([^"]+)"/g);
-      for (const m of matches) names.add(m[1]);
-    } catch { /* empty */ }
-  }
-  const fileNames = await tokenEncryption.listTokenNames();
-  fileNames.forEach(n => names.add(n));
-  return [...names];
-}
-
-module.exports = {
-  isKeychainAvailable, storeToken, retrieveToken, removeToken, listStoredServices,
-};

package/src/utils/open-url.js

@@ -1,15 +0,0 @@
-const { exec } = require('child_process');
-
-function openUrl(url, deps = {}) {
-  const execFn = deps.exec || ((cmd) => {
-    return new Promise((resolve, reject) => {
-      exec(cmd, (err) => err ? reject(err) : resolve());
-    });
-  });
-  const cmd = process.platform === 'darwin'
-    ? `open "${url}"`
-    : `xdg-open "${url}"`;
-  return execFn(cmd);
-}
-
-module.exports = { openUrl };

package/src/utils/terminal-detection.js

@@ -1,26 +0,0 @@
-const CI_ENV_VARS = ['CI', 'TF_BUILD', 'GITHUB_ACTIONS', 'JENKINS_URL', 'BUILDKITE', 'TRAVIS', 'CIRCLECI', 'GITLAB_CI'];
-
-function isCI() {
-  return CI_ENV_VARS.some(key => process.env[key]);
-}
-
-function isTTY() {
-  return Boolean(process.stdout.isTTY);
-}
-
-function detectColorSupport() {
-  if (process.env.NO_COLOR) return false;
-  if (process.env.TERM === 'dumb') return false;
-  return Boolean(process.env.COLORTERM || process.env.TERM?.includes('color') || process.env.TERM?.includes('xterm'));
-}
-
-function isDarkMode() {
-  const colorfgbg = process.env.COLORFGBG;
-  if (!colorfgbg) return true;
-  const parts = colorfgbg.split(';');
-  if (parts.length < 2) return true;
-  const bg = parseInt(parts[1], 10);
-  return bg < 8;
-}
-
-module.exports = { detectColorSupport, isDarkMode, isCI, isTTY };

package/src/utils/token-encryption.js

@@ -1,96 +0,0 @@
-const crypto = require('crypto');
-const fs = require('fs');
-const path = require('path');
-const os = require('os');
-
-const ALGO = 'aes-256-gcm';
-const KEY_LEN = 32;
-const IV_LEN = 16;
-const TAG_LEN = 16;
-
-function configDir() {
-  return process.env.ADM_CONFIG_DIR || path.join(os.homedir(), '.adm');
-}
-
-function tokensFile() {
-  return path.join(configDir(), 'tokens.enc');
-}
-
-function getMachineKey() {
-  // Derive a stable key from machine-specific data
-  const homedir = os.homedir();
-  const hostname = os.hostname();
-  const username = os.userInfo().username;
-  const secret = `adm-cli-${username}@${hostname}:${homedir}`;
-  return crypto.scryptSync(secret, 'adm-cli-salt-v1', KEY_LEN);
-}
-
-function encrypt(text, key) {
-  const iv = crypto.randomBytes(IV_LEN);
-  const cipher = crypto.createCipheriv(ALGO, key, iv);
-  const encrypted = Buffer.concat([cipher.update(text, 'utf8'), cipher.final()]);
-  const tag = cipher.getAuthTag();
-  return Buffer.concat([iv, tag, encrypted]).toString('base64');
-}
-
-function decrypt(data, key) {
-  const buf = Buffer.from(data, 'base64');
-  const iv = buf.subarray(0, IV_LEN);
-  const tag = buf.subarray(IV_LEN, IV_LEN + TAG_LEN);
-  const encrypted = buf.subarray(IV_LEN + TAG_LEN);
-  const decipher = crypto.createDecipheriv(ALGO, key, iv);
-  decipher.setAuthTag(tag);
-  return decipher.update(encrypted) + decipher.final('utf8');
-}
-
-async function writeEncryptedToken(name, token) {
-  const dir = configDir();
-  if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
-
-  const key = getMachineKey();
-  const store = readAllTokens(key);
-  store[name] = token;
-
-  const json = JSON.stringify(store, null, 2);
-  const encrypted = encrypt(json, key);
-  fs.writeFileSync(tokensFile(), encrypted, 'utf8');
-  return true;
-}
-
-async function readEncryptedToken(name) {
-  const key = getMachineKey();
-  const store = readAllTokens(key);
-  return store[name] || undefined;
-}
-
-async function deleteEncryptedToken(name) {
-  const key = getMachineKey();
-  const store = readAllTokens(key);
-  if (!(name in store)) return false;
-  delete store[name];
-  const json = JSON.stringify(store, null, 2);
-  const encrypted = encrypt(json, key);
-  fs.writeFileSync(tokensFile(), encrypted, 'utf8');
-  return true;
-}
-
-async function listTokenNames() {
-  const key = getMachineKey();
-  const store = readAllTokens(key);
-  return Object.keys(store);
-}
-
-function readAllTokens(key) {
-  if (!fs.existsSync(tokensFile())) return {};
-  try {
-    const data = fs.readFileSync(tokensFile(), 'utf8').trim();
-    const json = decrypt(data, key);
-    return JSON.parse(json);
-  } catch {
-    return {};
-  }
-}
-
-module.exports = {
-  writeEncryptedToken, readEncryptedToken, deleteEncryptedToken, listTokenNames,
-};