@feastalytics/cli 0.1.2 → 0.1.3

package/README.md

@@ -93,6 +93,53 @@ To refresh from a local checkout instead of GitHub, run `npx skills add ./feast
 - `FEAST_API_URL` — override the API base URL (e.g. a local dev server)
 - `FEAST_API_KEY` — override the static API key
 
+### Non-interactive credentials
+
+`feast login` stores tokens under `~/.config/feast-cli/` and refreshes them on
+demand. That does not work where there is no interactive login and no writable
+home directory — most importantly inside a sandboxed agent, where the token is
+supplied by the host and must never be readable by the agent itself.
+
+Set `FEAST_ACCESS_TOKEN` for that case:
+
+```bash
+export FEAST_ACCESS_TOKEN="$TOKEN"
+export FEAST_ORGANIZATION_ID=4fafb31e-dd46-4081-9778-c298e577a1d1
+export FEAST_PREFERRED_ROLE=OWNER
+feast call listCampaigns
+```
+
+- `FEAST_ACCESS_TOKEN` — access token sent verbatim as `x-access-token`
+- `FEAST_ORGANIZATION_ID` — **pins** the organization
+- `FEAST_PREFERRED_ROLE` — **pins** the role; a role name (`OWNER`) or a full role ARN
+
+When `FEAST_ACCESS_TOKEN` is set the CLI reads no token from disk, refreshes
+nothing, and **never decodes the token**. Normally the organization and role are
+read from the token's `cognito:groups` claim, so both must be supplied instead.
+
+Not decoding the token is the point, not a limitation: it lets the token be an
+opaque placeholder that a secret store substitutes for the real value after the
+request leaves the machine, so a compromised sandbox yields nothing.
+
+`FEAST_ORGANIZATION_ID` and `FEAST_PREFERRED_ROLE` pin the session rather than
+just defaulting it. `--org` and `--role` may repeat the pinned value but cannot
+change it:
+
+```
+$ FEAST_ORGANIZATION_ID=org-A feast call listCampaigns --org org-B
+FEAST_ORGANIZATION_ID pins this session to org-A, so --org org-B is not allowed.
+```
+
+Pinning the role is how you run an agent at **reduced** privilege. The API
+validates a requested role against the user's real Cognito groups, so it will
+happily accept `OWNER` from a user who is an owner — only the pin can hold that
+user's agent down to `VIEWER`.
+
+Neither pin is a security boundary on its own: both are ordinary environment
+variables, so anything that can set env vars in the same process tree can change
+them. They stop a tool call from wandering, not a determined process. Scope the
+token itself if you need a hard guarantee.
+
 ## Development
 
 ```bash

package/dist/cli.js

@@ -8656,146 +8656,6 @@ function errorMessage(error) {
 // src/main.ts
 import fs2 from "fs";
 
-// src/browserLogin.ts
-import { spawn } from "child_process";
-import { createHash, randomBytes } from "crypto";
-import http from "http";
-var CALLBACK_TIMEOUT_MS = 5 * 60 * 1e3;
-function base64url(buffer) {
-  return buffer.toString("base64url");
-}
-function tabHtml(title, body) {
-  return `<!doctype html><html><head><meta charset="utf-8"><title>${title}</title>
-<style>body{font-family:-apple-system,system-ui,sans-serif;background:#0f0f0f;color:#f5f5f5;
-display:flex;min-height:100vh;align-items:center;justify-content:center;margin:0}
-.card{text-align:center;padding:2rem 3rem}.t{font-size:1.4rem;font-weight:600;margin-bottom:.5rem}
-.b{color:#a1a1a1}</style></head><body><div class="card">
-<div class="t">${title}</div><div class="b">${body}</div></div></body></html>`;
-}
-function openBrowser(url) {
-  let command;
-  let args;
-  if (process.platform === "darwin") {
-    command = "open";
-    args = [url];
-  } else if (process.platform === "win32") {
-    command = "cmd";
-    args = ["/c", "start", "", url];
-  } else {
-    command = "xdg-open";
-    args = [url];
-  }
-  try {
-    const child = spawn(command, args, { stdio: "ignore", detached: true });
-    child.on("error", () => {
-    });
-    child.unref();
-  } catch {
-  }
-}
-function startLoopback(expectedState) {
-  return new Promise((resolveOuter, rejectOuter) => {
-    let resolveCode = () => {
-    };
-    let rejectCode = () => {
-    };
-    const waitForCode = new Promise((resolve, reject) => {
-      resolveCode = resolve;
-      rejectCode = reject;
-    });
-    waitForCode.catch(() => {
-    });
-    const server = http.createServer((req, res) => {
-      const url = new URL(req.url ?? "/", "http://127.0.0.1");
-      if (url.pathname !== "/callback") {
-        res.writeHead(404);
-        res.end();
-        return;
-      }
-      const error = url.searchParams.get("error");
-      if (error != null) {
-        res.writeHead(200, { "Content-Type": "text/html" });
-        res.end(tabHtml("Authorization declined", "You can close this tab."));
-        rejectCode(new Error(`Authorization declined: ${error}`));
-        return;
-      }
-      if (url.searchParams.get("state") !== expectedState) {
-        res.writeHead(400, { "Content-Type": "text/html" });
-        res.end(
-          tabHtml("Invalid request", "State mismatch \u2014 retry from the CLI.")
-        );
-        rejectCode(new Error("State mismatch \u2014 aborting (possible CSRF)"));
-        return;
-      }
-      const code = url.searchParams.get("code");
-      if (code == null || code.length === 0) {
-        res.writeHead(400);
-        res.end();
-        rejectCode(new Error("Authorization callback did not include a code"));
-        return;
-      }
-      res.writeHead(200, {
-        "Content-Type": "text/html",
-        Connection: "close"
-      });
-      res.end(
-        tabHtml(
-          "You're all set \u2713",
-          "The feast CLI is authorized. Close this tab and return to your terminal."
-        )
-      );
-      resolveCode(code);
-    });
-    const timeout = setTimeout(() => {
-      rejectCode(
-        new Error("Timed out waiting for browser authorization (5 minutes)")
-      );
-    }, CALLBACK_TIMEOUT_MS);
-    const close = () => {
-      clearTimeout(timeout);
-      server.closeAllConnections?.();
-      server.close();
-    };
-    server.on("error", rejectOuter);
-    server.listen(0, "127.0.0.1", () => {
-      server.unref();
-      const address = server.address();
-      const port = typeof address === "object" && address != null ? address.port : 0;
-      resolveOuter({ port, waitForCode, close });
-    });
-  });
-}
-async function browserLogin() {
-  const codeVerifier = base64url(randomBytes(32));
-  const codeChallenge = base64url(
-    createHash("sha256").update(codeVerifier).digest()
-  );
-  const state = base64url(randomBytes(16));
-  const { port, waitForCode, close } = await startLoopback(state);
-  try {
-    const authUrl = `${getWebBaseUrl()}/oauth?port=${port}&state=${encodeURIComponent(state)}&challenge=${encodeURIComponent(codeChallenge)}`;
-    console.error("Opening your browser to authorize the feast CLI...");
-    console.error(`If it doesn't open, visit:
-  ${authUrl}
-`);
-    openBrowser(authUrl);
-    const code = await waitForCode;
-    const client = createHttpCaller({});
-    const response = await client.api.auth.exchangeAuthCode.mutate({
-      code,
-      codeVerifier
-    });
-    const tokens = response?.tokens;
-    if (tokens?.accessToken?.jwtToken == null) {
-      throw new Error("Authorization failed: empty token response");
-    }
-    saveTokens(tokens);
-    return tokens;
-  } finally {
-    close();
-  }
-}
-
 // src/generated/manifest.ts
 var CLI_MANIFEST = {
   "awsAccountId": "891817334910",
@@ -10879,7 +10739,8 @@ var CLI_MANIFEST = {
               "funnel",
               "organizationFilePublic",
               "organizationFilePrivate",
-              "creativeLibrary"
+              "creativeLibrary",
+              "creativeLibraryBroll"
             ]
           },
           "key": {
@@ -11360,7 +11221,7 @@ var CLI_MANIFEST = {
     {
       "id": "getMediaUploadUrl",
       "domain": "core",
-      "description": "Get a presigned S3 upload URL for a media file in a given scope (passBuilder, funnel, organizationFilePublic, organizationFilePrivate, creativeLibrary). Set cropped to store a cropped variant under the scope's cropped/ subfolder. PUT the file bytes to the returned presignedUrl, then reference the returned url/key.",
+      "description": "Get a presigned S3 upload URL for a media file in a given scope (passBuilder, funnel, organizationFilePublic, organizationFilePrivate, creativeLibrary, creativeLibraryBroll). Set cropped to store a cropped variant under the scope's cropped/ subfolder. PUT the file bytes to the returned presignedUrl, then reference the returned url/key.",
       "needsApproval": false,
       "type": "mutation",
       "path": [
@@ -11378,7 +11239,8 @@ var CLI_MANIFEST = {
               "funnel",
               "organizationFilePublic",
               "organizationFilePrivate",
-              "creativeLibrary"
+              "creativeLibrary",
+              "creativeLibraryBroll"
             ]
           },
           "fileName": {
@@ -11581,7 +11443,7 @@ var CLI_MANIFEST = {
     {
       "id": "listMedia",
       "domain": "core",
-      "description": "List uploaded media files for the organization across one or more scopes (passBuilder, funnel, organizationFilePublic, organizationFilePrivate, creativeLibrary). Each file is tagged with its scope and a canDelete flag. Set mediaOnly to return only image/video files. Set cropped to list the cropped variants (each scope's cropped/ subfolder) instead of the base files.",
+      "description": "List uploaded media files for the organization across one or more scopes (passBuilder, funnel, organizationFilePublic, organizationFilePrivate, creativeLibrary, creativeLibraryBroll). Each file is tagged with its scope and a canDelete flag. Set mediaOnly to return only image/video files. Set cropped to list the cropped variants (each scope's cropped/ subfolder) instead of the base files.",
       "needsApproval": false,
       "type": "query",
       "path": [
@@ -11601,7 +11463,8 @@ var CLI_MANIFEST = {
                 "funnel",
                 "organizationFilePublic",
                 "organizationFilePrivate",
-                "creativeLibrary"
+                "creativeLibrary",
+                "creativeLibraryBroll"
               ]
             },
             "minItems": 1
@@ -18265,6 +18128,234 @@ ${available}`
   };
 }
 
+// src/actingContext.ts
+function environmentAccessToken() {
+  const token = process.env.FEAST_ACCESS_TOKEN;
+  return token != null && token.length > 0 ? token : void 0;
+}
+function firstNonEmpty(...values) {
+  for (const value of values) {
+    if (value != null && value.length > 0) {
+      return value;
+    }
+  }
+  return void 0;
+}
+function roleLabelFromArn(arn) {
+  return arn.split("/").pop()?.split(".").pop() ?? arn;
+}
+function buildPreferredRole(organizationId, role) {
+  if (role.startsWith("arn:")) {
+    return role;
+  }
+  if (!CLI_MANIFEST.organizationRoles.includes(role)) {
+    throw new Error(
+      `Unknown role "${role}". Expected one of ${CLI_MANIFEST.organizationRoles.join(", ")}, or a full role ARN.`
+    );
+  }
+  return formRoleArn(organizationId, role);
+}
+function resolvePinned(pinned, flag, variableName, flagName) {
+  if (pinned == null) {
+    return flag;
+  }
+  if (flag != null && flag !== pinned) {
+    throw new Error(
+      `${variableName} pins this session to ${pinned}, so ${flagName} ${flag} is not allowed.`
+    );
+  }
+  return pinned;
+}
+function resolveFromEnvironment(accessToken, orgFlag, roleFlag) {
+  const organizationId = resolvePinned(
+    firstNonEmpty(process.env.FEAST_ORGANIZATION_ID),
+    orgFlag,
+    "FEAST_ORGANIZATION_ID",
+    "--org"
+  );
+  if (organizationId == null) {
+    throw new Error(
+      "FEAST_ACCESS_TOKEN is set, so the organization cannot be read from the token. Pass --org <organizationId> or set FEAST_ORGANIZATION_ID."
+    );
+  }
+  const role = resolvePinned(
+    firstNonEmpty(process.env.FEAST_PREFERRED_ROLE),
+    roleFlag,
+    "FEAST_PREFERRED_ROLE",
+    "--role"
+  );
+  if (role == null) {
+    throw new Error(
+      "FEAST_ACCESS_TOKEN is set, so the role cannot be read from the token. Pass --role <role> or set FEAST_PREFERRED_ROLE."
+    );
+  }
+  const preferredRole = buildPreferredRole(organizationId, role);
+  return {
+    accessToken,
+    organizationId,
+    preferredRole,
+    roleLabel: roleLabelFromArn(preferredRole),
+    source: "environment"
+  };
+}
+async function resolveActingContext(orgFlag, roleFlag) {
+  const environmentToken = environmentAccessToken();
+  if (environmentToken != null) {
+    return resolveFromEnvironment(environmentToken, orgFlag, roleFlag);
+  }
+  const tokens = await ensureFreshTokens();
+  const accessToken = tokens.accessToken.jwtToken;
+  const organizationId = resolveOrganizationId(accessToken, orgFlag);
+  const resolved = resolvePreferredRole(accessToken, organizationId);
+  return {
+    accessToken,
+    organizationId,
+    preferredRole: resolved.arn,
+    roleLabel: resolved.orgRole.role,
+    source: "credentials"
+  };
+}
+
+// src/browserLogin.ts
+import { spawn } from "child_process";
+import { createHash, randomBytes } from "crypto";
+import http from "http";
+var CALLBACK_TIMEOUT_MS = 5 * 60 * 1e3;
+function base64url(buffer) {
+  return buffer.toString("base64url");
+}
+function tabHtml(title, body) {
+  return `<!doctype html><html><head><meta charset="utf-8"><title>${title}</title>
+<style>body{font-family:-apple-system,system-ui,sans-serif;background:#0f0f0f;color:#f5f5f5;
+display:flex;min-height:100vh;align-items:center;justify-content:center;margin:0}
+.card{text-align:center;padding:2rem 3rem}.t{font-size:1.4rem;font-weight:600;margin-bottom:.5rem}
+.b{color:#a1a1a1}</style></head><body><div class="card">
+<div class="t">${title}</div><div class="b">${body}</div></div></body></html>`;
+}
+function openBrowser(url) {
+  let command;
+  let args;
+  if (process.platform === "darwin") {
+    command = "open";
+    args = [url];
+  } else if (process.platform === "win32") {
+    command = "cmd";
+    args = ["/c", "start", "", url];
+  } else {
+    command = "xdg-open";
+    args = [url];
+  }
+  try {
+    const child = spawn(command, args, { stdio: "ignore", detached: true });
+    child.on("error", () => {
+    });
+    child.unref();
+  } catch {
+  }
+}
+function startLoopback(expectedState) {
+  return new Promise((resolveOuter, rejectOuter) => {
+    let resolveCode = () => {
+    };
+    let rejectCode = () => {
+    };
+    const waitForCode = new Promise((resolve, reject) => {
+      resolveCode = resolve;
+      rejectCode = reject;
+    });
+    waitForCode.catch(() => {
+    });
+    const server = http.createServer((req, res) => {
+      const url = new URL(req.url ?? "/", "http://127.0.0.1");
+      if (url.pathname !== "/callback") {
+        res.writeHead(404);
+        res.end();
+        return;
+      }
+      const error = url.searchParams.get("error");
+      if (error != null) {
+        res.writeHead(200, { "Content-Type": "text/html" });
+        res.end(tabHtml("Authorization declined", "You can close this tab."));
+        rejectCode(new Error(`Authorization declined: ${error}`));
+        return;
+      }
+      if (url.searchParams.get("state") !== expectedState) {
+        res.writeHead(400, { "Content-Type": "text/html" });
+        res.end(
+          tabHtml("Invalid request", "State mismatch \u2014 retry from the CLI.")
+        );
+        rejectCode(new Error("State mismatch \u2014 aborting (possible CSRF)"));
+        return;
+      }
+      const code = url.searchParams.get("code");
+      if (code == null || code.length === 0) {
+        res.writeHead(400);
+        res.end();
+        rejectCode(new Error("Authorization callback did not include a code"));
+        return;
+      }
+      res.writeHead(200, {
+        "Content-Type": "text/html",
+        Connection: "close"
+      });
+      res.end(
+        tabHtml(
+          "You're all set \u2713",
+          "The feast CLI is authorized. Close this tab and return to your terminal."
+        )
+      );
+      resolveCode(code);
+    });
+    const timeout = setTimeout(() => {
+      rejectCode(
+        new Error("Timed out waiting for browser authorization (5 minutes)")
+      );
+    }, CALLBACK_TIMEOUT_MS);
+    const close = () => {
+      clearTimeout(timeout);
+      server.closeAllConnections?.();
+      server.close();
+    };
+    server.on("error", rejectOuter);
+    server.listen(0, "127.0.0.1", () => {
+      server.unref();
+      const address = server.address();
+      const port = typeof address === "object" && address != null ? address.port : 0;
+      resolveOuter({ port, waitForCode, close });
+    });
+  });
+}
+async function browserLogin() {
+  const codeVerifier = base64url(randomBytes(32));
+  const codeChallenge = base64url(
+    createHash("sha256").update(codeVerifier).digest()
+  );
+  const state = base64url(randomBytes(16));
+  const { port, waitForCode, close } = await startLoopback(state);
+  try {
+    const authUrl = `${getWebBaseUrl()}/oauth?port=${port}&state=${encodeURIComponent(state)}&challenge=${encodeURIComponent(codeChallenge)}`;
+    console.error("Opening your browser to authorize the feast CLI...");
+    console.error(`If it doesn't open, visit:
+  ${authUrl}
+`);
+    openBrowser(authUrl);
+    const code = await waitForCode;
+    const client = createHttpCaller({});
+    const response = await client.api.auth.exchangeAuthCode.mutate({
+      code,
+      codeVerifier
+    });
+    const tokens = response?.tokens;
+    if (tokens?.accessToken?.jwtToken == null) {
+      throw new Error("Authorization failed: empty token response");
+    }
+    saveTokens(tokens);
+    return tokens;
+  } finally {
+    close();
+  }
+}
+
 // src/prompt.ts
 import readline from "readline";
 function promptText(question) {
@@ -18349,6 +18440,7 @@ Commands:
 
 Call options:
   --org <organizationId>    Organization to act on (required unless you belong to exactly one)
+  --role <role|roleArn>     Role to act as, e.g. OWNER (required when FEAST_ACCESS_TOKEN is set)
   --input <json>            Tool input as a JSON string (default: {})
   --input-file <path>       Tool input from a JSON file
   --yes                     Skip the confirmation prompt for mutations
@@ -18356,11 +18448,18 @@ Call options:
 Environment:
   FEAST_API_URL             Override the API base URL (default: production)
   FEAST_WEB_URL             Override the web app base URL for browser login (default: production)
-  FEAST_NO_UPDATE_CHECK     Disable the daily check for a newer published version`;
+  FEAST_NO_UPDATE_CHECK     Disable the daily check for a newer published version
+
+Non-interactive credentials (for sandboxed agents):
+  FEAST_ACCESS_TOKEN        Access token to send verbatim. When set, no token is read
+                            from disk and none is refreshed, and the token is never
+                            decoded \u2014 so the organization and role must be supplied too.
+  FEAST_ORGANIZATION_ID     Pins the organization. --org must match it or be omitted.
+  FEAST_PREFERRED_ROLE      Pins the role. --role must match it or be omitted.`;
 function parseArgs(argv) {
   const positional = [];
   const flags = {};
-  const valueFlags = /* @__PURE__ */ new Set(["org", "input", "input-file", "domain"]);
+  const valueFlags = /* @__PURE__ */ new Set(["org", "role", "input", "input-file", "domain"]);
   for (let i = 0; i < argv.length; i++) {
     const arg = argv[i];
     if (!arg.startsWith("--")) {
@@ -18382,6 +18481,11 @@ function parseArgs(argv) {
   return { positional, flags };
 }
 async function commandLogin(args) {
+  if (environmentAccessToken() != null) {
+    throw new Error(
+      "FEAST_ACCESS_TOKEN is set, so this CLI is using credentials from the environment. Unset it to log in and store tokens on disk."
+    );
+  }
   if (args.flags["password"] === true) {
     const username = args.positional[0] ?? await promptText("Username: ");
     if (username.length === 0) {
@@ -18402,7 +18506,20 @@ async function commandLogin(args) {
   console.info(`Logged in as ${payload.username ?? payload.sub}`);
   console.info(`Tokens stored in ${getCredentialsPath()}`);
 }
-async function commandWhoami() {
+async function commandWhoami(args) {
+  if (environmentAccessToken() != null) {
+    const acting = await resolveActingContext(
+      args.flags["org"],
+      args.flags["role"]
+    );
+    console.info("Credentials: FEAST_ACCESS_TOKEN (environment)");
+    console.info(`Organization: ${acting.organizationId}`);
+    console.info(`Role: ${acting.roleLabel}`);
+    console.info(
+      "The token is opaque to this CLI, so the user and their other organizations cannot be listed."
+    );
+    return;
+  }
   const tokens = await ensureFreshTokens();
   const payload = decodeJwtPayload(tokens.accessToken.jwtToken);
   const orgRoles = listOrgRoles(tokens.accessToken.jwtToken);
@@ -18544,25 +18661,20 @@ ${issues.join("\n")}
 Run: feast describe ${tool.id}`
     );
   }
-  const tokens = await ensureFreshTokens();
-  const isWrite = tool.type === "mutation" || tool.needsApproval;
-  const organizationId = resolveOrganizationId(
-    tokens.accessToken.jwtToken,
-    args.flags["org"]
-  );
-  const resolved = resolvePreferredRole(
-    tokens.accessToken.jwtToken,
-    organizationId
+  const acting = await resolveActingContext(
+    args.flags["org"],
+    args.flags["role"]
   );
+  const isWrite = tool.type === "mutation" || tool.needsApproval;
   console.error(
-    `Acting on organization ${organizationId} as ${resolved.orgRole.role}`
+    `Acting on organization ${acting.organizationId} as ${acting.roleLabel}`
   );
   const client = createHttpCaller({
-    accessToken: tokens.accessToken.jwtToken,
-    preferredRole: resolved.arn
+    accessToken: acting.accessToken,
+    preferredRole: acting.preferredRole
   });
   if (isWrite) {
-    const organization = await verifyOrganization(client, organizationId);
+    const organization = await verifyOrganization(client, acting.organizationId);
     if (args.flags["yes"] !== true) {
       const orgLabel = organization.name != null ? `"${organization.name}" (${organization.id})` : organization.id;
       const approved = await promptConfirm(
@@ -18590,7 +18702,7 @@ async function runCli(argv) {
       console.info("Logged out");
       break;
     case "whoami":
-      await commandWhoami();
+      await commandWhoami(args);
       break;
     case "tools":
       commandTools(args);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@feastalytics/cli",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Command-line client for the Feastalytics platform — list, create, and update campaigns, automations, offers, and members-program rewards from the terminal.",
   "type": "module",
   "bin": {