@geekmidas/cli 10.0.0-alpha.10 → 10.0.0-alpha.12

package/dist/keystore-C9rint2E.cjs

@@ -0,0 +1,101 @@
+const require_chunk = require('./chunk-CUT6urMc.cjs');
+const node_fs = require_chunk.__toESM(require("node:fs"));
+const node_path = require_chunk.__toESM(require("node:path"));
+const node_fs_promises = require_chunk.__toESM(require("node:fs/promises"));
+const node_os = require_chunk.__toESM(require("node:os"));
+const node_crypto = require_chunk.__toESM(require("node:crypto"));
+
+//#region src/secrets/keystore.ts
+/** Key length for AES-256 encryption */
+const KEY_LENGTH = 32;
+/**
+* Get the keystore directory for a project.
+* Keys are stored at ~/.gkm/{project-name}/
+*
+* @param projectName - Name of the project (defaults to current directory name)
+* @returns Path to the keystore directory
+*/
+function getKeystoreDir(projectName) {
+	const name = projectName ?? (0, node_path.basename)(process.cwd());
+	return (0, node_path.join)((0, node_os.homedir)(), ".gkm", name);
+}
+/**
+* Get the path to a stage's encryption key.
+*
+* @param stage - Stage name (e.g., 'development', 'production')
+* @param projectName - Name of the project (defaults to current directory name)
+* @returns Path to the key file
+*/
+function getKeyPath(stage, projectName) {
+	return (0, node_path.join)(getKeystoreDir(projectName), `${stage}.key`);
+}
+/**
+* Generate a new encryption key for a stage.
+* The key is stored at ~/.gkm/{project-name}/{stage}.key with restricted permissions.
+*
+* @param stage - Stage name
+* @param projectName - Project name (defaults to current directory name)
+* @returns The generated key as a hex string
+*/
+async function generateKey(stage, projectName) {
+	const keyDir = getKeystoreDir(projectName);
+	const keyPath = getKeyPath(stage, projectName);
+	await (0, node_fs_promises.mkdir)(keyDir, {
+		recursive: true,
+		mode: 448
+	});
+	const key = (0, node_crypto.randomBytes)(KEY_LENGTH).toString("hex");
+	await (0, node_fs_promises.writeFile)(keyPath, key, {
+		mode: 384,
+		encoding: "utf-8"
+	});
+	await (0, node_fs_promises.chmod)(keyPath, 384);
+	return key;
+}
+/**
+* Read an encryption key for a stage.
+*
+* @param stage - Stage name
+* @param projectName - Project name (defaults to current directory name)
+* @returns The key as a hex string, or null if not found
+*/
+async function readKey(stage, projectName) {
+	const keyPath = getKeyPath(stage, projectName);
+	if (!(0, node_fs.existsSync)(keyPath)) return null;
+	const key = await (0, node_fs_promises.readFile)(keyPath, "utf-8");
+	return key.trim();
+}
+/**
+* Get or create a key for a stage.
+* If the key already exists, it is returned. Otherwise, a new key is generated.
+*
+* @param stage - Stage name
+* @param projectName - Project name (defaults to current directory name)
+* @returns The key as a hex string
+*/
+async function getOrCreateKey(stage, projectName) {
+	const existingKey = await readKey(stage, projectName);
+	if (existingKey) return existingKey;
+	return generateKey(stage, projectName);
+}
+
+//#endregion
+Object.defineProperty(exports, 'getKeyPath', {
+  enumerable: true,
+  get: function () {
+    return getKeyPath;
+  }
+});
+Object.defineProperty(exports, 'getOrCreateKey', {
+  enumerable: true,
+  get: function () {
+    return getOrCreateKey;
+  }
+});
+Object.defineProperty(exports, 'readKey', {
+  enumerable: true,
+  get: function () {
+    return readKey;
+  }
+});
+//# sourceMappingURL=keystore-C9rint2E.cjs.map

package/dist/keystore-C9rint2E.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"keystore-C9rint2E.cjs","names":["projectName?: string","stage: string"],"sources":["../src/secrets/keystore.ts"],"sourcesContent":["import { randomBytes } from 'node:crypto';\nimport { existsSync } from 'node:fs';\nimport { chmod, mkdir, readFile, rm, writeFile } from 'node:fs/promises';\nimport { homedir } from 'node:os';\nimport { basename, join } from 'node:path';\n\n/** Key length for AES-256 encryption */\nconst KEY_LENGTH = 32; // 256 bits\n\n/**\n * Get the keystore directory for a project.\n * Keys are stored at ~/.gkm/{project-name}/\n *\n * @param projectName - Name of the project (defaults to current directory name)\n * @returns Path to the keystore directory\n */\nexport function getKeystoreDir(projectName?: string): string {\n\tconst name = projectName ?? basename(process.cwd());\n\treturn join(homedir(), '.gkm', name);\n}\n\n/**\n * Get the path to a stage's encryption key.\n *\n * @param stage - Stage name (e.g., 'development', 'production')\n * @param projectName - Name of the project (defaults to current directory name)\n * @returns Path to the key file\n */\nexport function getKeyPath(stage: string, projectName?: string): string {\n\treturn join(getKeystoreDir(projectName), `${stage}.key`);\n}\n\n/**\n * Check if a key exists for a stage.\n */\nexport function keyExists(stage: string, projectName?: string): boolean {\n\treturn existsSync(getKeyPath(stage, projectName));\n}\n\n/**\n * Generate a new encryption key for a stage.\n * The key is stored at ~/.gkm/{project-name}/{stage}.key with restricted permissions.\n *\n * @param stage - Stage name\n * @param projectName - Project name (defaults to current directory name)\n * @returns The generated key as a hex string\n */\nexport async function generateKey(\n\tstage: string,\n\tprojectName?: string,\n): Promise<string> {\n\tconst keyDir = getKeystoreDir(projectName);\n\tconst keyPath = getKeyPath(stage, projectName);\n\n\t// Ensure keystore directory exists with restricted permissions\n\tawait mkdir(keyDir, { recursive: true, mode: 0o700 });\n\n\t// Generate random key\n\tconst key = randomBytes(KEY_LENGTH).toString('hex');\n\n\t// Write key with restricted permissions (owner read/write only)\n\tawait writeFile(keyPath, key, { mode: 0o600, encoding: 'utf-8' });\n\n\t// Ensure permissions are set correctly (in case file existed)\n\tawait chmod(keyPath, 0o600);\n\n\treturn key;\n}\n\n/**\n * Read an encryption key for a stage.\n *\n * @param stage - Stage name\n * @param projectName - Project name (defaults to current directory name)\n * @returns The key as a hex string, or null if not found\n */\nexport async function readKey(\n\tstage: string,\n\tprojectName?: string,\n): Promise<string | null> {\n\tconst keyPath = getKeyPath(stage, projectName);\n\n\tif (!existsSync(keyPath)) {\n\t\treturn null;\n\t}\n\n\tconst key = await readFile(keyPath, 'utf-8');\n\treturn key.trim();\n}\n\n/**\n * Read an encryption key for a stage, throwing if not found.\n */\nexport async function requireKey(\n\tstage: string,\n\tprojectName?: string,\n): Promise<string> {\n\tconst key = await readKey(stage, projectName);\n\n\tif (!key) {\n\t\tconst name = projectName ?? basename(process.cwd());\n\t\tthrow new Error(\n\t\t\t`Encryption key not found for stage \"${stage}\" in project \"${name}\". ` +\n\t\t\t\t`Expected key at: ${getKeyPath(stage, projectName)}`,\n\t\t);\n\t}\n\n\treturn key;\n}\n\n/**\n * Delete a key for a stage.\n */\nexport async function deleteKey(\n\tstage: string,\n\tprojectName?: string,\n): Promise<void> {\n\tconst keyPath = getKeyPath(stage, projectName);\n\n\tif (existsSync(keyPath)) {\n\t\tawait rm(keyPath);\n\t}\n}\n\n/**\n * Get or create a key for a stage.\n * If the key already exists, it is returned. Otherwise, a new key is generated.\n *\n * @param stage - Stage name\n * @param projectName - Project name (defaults to current directory name)\n * @returns The key as a hex string\n */\nexport async function getOrCreateKey(\n\tstage: string,\n\tprojectName?: string,\n): Promise<string> {\n\tconst existingKey = await readKey(stage, projectName);\n\n\tif (existingKey) {\n\t\treturn existingKey;\n\t}\n\n\treturn generateKey(stage, projectName);\n}\n"],"mappings":";;;;;;;;;AAOA,MAAM,aAAa;;;;;;;;AASnB,SAAgB,eAAeA,aAA8B;CAC5D,MAAM,OAAO,eAAe,wBAAS,QAAQ,KAAK,CAAC;AACnD,QAAO,oBAAK,sBAAS,EAAE,QAAQ,KAAK;AACpC;;;;;;;;AASD,SAAgB,WAAWC,OAAeD,aAA8B;AACvE,QAAO,oBAAK,eAAe,YAAY,GAAG,EAAE,MAAM,MAAM;AACxD;;;;;;;;;AAiBD,eAAsB,YACrBC,OACAD,aACkB;CAClB,MAAM,SAAS,eAAe,YAAY;CAC1C,MAAM,UAAU,WAAW,OAAO,YAAY;AAG9C,OAAM,4BAAM,QAAQ;EAAE,WAAW;EAAM,MAAM;CAAO,EAAC;CAGrD,MAAM,MAAM,6BAAY,WAAW,CAAC,SAAS,MAAM;AAGnD,OAAM,gCAAU,SAAS,KAAK;EAAE,MAAM;EAAO,UAAU;CAAS,EAAC;AAGjE,OAAM,4BAAM,SAAS,IAAM;AAE3B,QAAO;AACP;;;;;;;;AASD,eAAsB,QACrBC,OACAD,aACyB;CACzB,MAAM,UAAU,WAAW,OAAO,YAAY;AAE9C,MAAK,wBAAW,QAAQ,CACvB,QAAO;CAGR,MAAM,MAAM,MAAM,+BAAS,SAAS,QAAQ;AAC5C,QAAO,IAAI,MAAM;AACjB;;;;;;;;;AA4CD,eAAsB,eACrBC,OACAD,aACkB;CAClB,MAAM,cAAc,MAAM,QAAQ,OAAO,YAAY;AAErD,KAAI,YACH,QAAO;AAGR,QAAO,YAAY,OAAO,YAAY;AACtC"}

package/dist/keystore-TxeYM7an.mjs

@@ -0,0 +1,83 @@
+import { existsSync } from "node:fs";
+import { basename, join } from "node:path";
+import { chmod, mkdir, readFile, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { randomBytes } from "node:crypto";
+
+//#region src/secrets/keystore.ts
+/** Key length for AES-256 encryption */
+const KEY_LENGTH = 32;
+/**
+* Get the keystore directory for a project.
+* Keys are stored at ~/.gkm/{project-name}/
+*
+* @param projectName - Name of the project (defaults to current directory name)
+* @returns Path to the keystore directory
+*/
+function getKeystoreDir(projectName) {
+	const name = projectName ?? basename(process.cwd());
+	return join(homedir(), ".gkm", name);
+}
+/**
+* Get the path to a stage's encryption key.
+*
+* @param stage - Stage name (e.g., 'development', 'production')
+* @param projectName - Name of the project (defaults to current directory name)
+* @returns Path to the key file
+*/
+function getKeyPath(stage, projectName) {
+	return join(getKeystoreDir(projectName), `${stage}.key`);
+}
+/**
+* Generate a new encryption key for a stage.
+* The key is stored at ~/.gkm/{project-name}/{stage}.key with restricted permissions.
+*
+* @param stage - Stage name
+* @param projectName - Project name (defaults to current directory name)
+* @returns The generated key as a hex string
+*/
+async function generateKey(stage, projectName) {
+	const keyDir = getKeystoreDir(projectName);
+	const keyPath = getKeyPath(stage, projectName);
+	await mkdir(keyDir, {
+		recursive: true,
+		mode: 448
+	});
+	const key = randomBytes(KEY_LENGTH).toString("hex");
+	await writeFile(keyPath, key, {
+		mode: 384,
+		encoding: "utf-8"
+	});
+	await chmod(keyPath, 384);
+	return key;
+}
+/**
+* Read an encryption key for a stage.
+*
+* @param stage - Stage name
+* @param projectName - Project name (defaults to current directory name)
+* @returns The key as a hex string, or null if not found
+*/
+async function readKey(stage, projectName) {
+	const keyPath = getKeyPath(stage, projectName);
+	if (!existsSync(keyPath)) return null;
+	const key = await readFile(keyPath, "utf-8");
+	return key.trim();
+}
+/**
+* Get or create a key for a stage.
+* If the key already exists, it is returned. Otherwise, a new key is generated.
+*
+* @param stage - Stage name
+* @param projectName - Project name (defaults to current directory name)
+* @returns The key as a hex string
+*/
+async function getOrCreateKey(stage, projectName) {
+	const existingKey = await readKey(stage, projectName);
+	if (existingKey) return existingKey;
+	return generateKey(stage, projectName);
+}
+
+//#endregion
+export { getKeyPath, getOrCreateKey, readKey };
+//# sourceMappingURL=keystore-TxeYM7an.mjs.map

package/dist/keystore-TxeYM7an.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"keystore-TxeYM7an.mjs","names":["projectName?: string","stage: string"],"sources":["../src/secrets/keystore.ts"],"sourcesContent":["import { randomBytes } from 'node:crypto';\nimport { existsSync } from 'node:fs';\nimport { chmod, mkdir, readFile, rm, writeFile } from 'node:fs/promises';\nimport { homedir } from 'node:os';\nimport { basename, join } from 'node:path';\n\n/** Key length for AES-256 encryption */\nconst KEY_LENGTH = 32; // 256 bits\n\n/**\n * Get the keystore directory for a project.\n * Keys are stored at ~/.gkm/{project-name}/\n *\n * @param projectName - Name of the project (defaults to current directory name)\n * @returns Path to the keystore directory\n */\nexport function getKeystoreDir(projectName?: string): string {\n\tconst name = projectName ?? basename(process.cwd());\n\treturn join(homedir(), '.gkm', name);\n}\n\n/**\n * Get the path to a stage's encryption key.\n *\n * @param stage - Stage name (e.g., 'development', 'production')\n * @param projectName - Name of the project (defaults to current directory name)\n * @returns Path to the key file\n */\nexport function getKeyPath(stage: string, projectName?: string): string {\n\treturn join(getKeystoreDir(projectName), `${stage}.key`);\n}\n\n/**\n * Check if a key exists for a stage.\n */\nexport function keyExists(stage: string, projectName?: string): boolean {\n\treturn existsSync(getKeyPath(stage, projectName));\n}\n\n/**\n * Generate a new encryption key for a stage.\n * The key is stored at ~/.gkm/{project-name}/{stage}.key with restricted permissions.\n *\n * @param stage - Stage name\n * @param projectName - Project name (defaults to current directory name)\n * @returns The generated key as a hex string\n */\nexport async function generateKey(\n\tstage: string,\n\tprojectName?: string,\n): Promise<string> {\n\tconst keyDir = getKeystoreDir(projectName);\n\tconst keyPath = getKeyPath(stage, projectName);\n\n\t// Ensure keystore directory exists with restricted permissions\n\tawait mkdir(keyDir, { recursive: true, mode: 0o700 });\n\n\t// Generate random key\n\tconst key = randomBytes(KEY_LENGTH).toString('hex');\n\n\t// Write key with restricted permissions (owner read/write only)\n\tawait writeFile(keyPath, key, { mode: 0o600, encoding: 'utf-8' });\n\n\t// Ensure permissions are set correctly (in case file existed)\n\tawait chmod(keyPath, 0o600);\n\n\treturn key;\n}\n\n/**\n * Read an encryption key for a stage.\n *\n * @param stage - Stage name\n * @param projectName - Project name (defaults to current directory name)\n * @returns The key as a hex string, or null if not found\n */\nexport async function readKey(\n\tstage: string,\n\tprojectName?: string,\n): Promise<string | null> {\n\tconst keyPath = getKeyPath(stage, projectName);\n\n\tif (!existsSync(keyPath)) {\n\t\treturn null;\n\t}\n\n\tconst key = await readFile(keyPath, 'utf-8');\n\treturn key.trim();\n}\n\n/**\n * Read an encryption key for a stage, throwing if not found.\n */\nexport async function requireKey(\n\tstage: string,\n\tprojectName?: string,\n): Promise<string> {\n\tconst key = await readKey(stage, projectName);\n\n\tif (!key) {\n\t\tconst name = projectName ?? basename(process.cwd());\n\t\tthrow new Error(\n\t\t\t`Encryption key not found for stage \"${stage}\" in project \"${name}\". ` +\n\t\t\t\t`Expected key at: ${getKeyPath(stage, projectName)}`,\n\t\t);\n\t}\n\n\treturn key;\n}\n\n/**\n * Delete a key for a stage.\n */\nexport async function deleteKey(\n\tstage: string,\n\tprojectName?: string,\n): Promise<void> {\n\tconst keyPath = getKeyPath(stage, projectName);\n\n\tif (existsSync(keyPath)) {\n\t\tawait rm(keyPath);\n\t}\n}\n\n/**\n * Get or create a key for a stage.\n * If the key already exists, it is returned. Otherwise, a new key is generated.\n *\n * @param stage - Stage name\n * @param projectName - Project name (defaults to current directory name)\n * @returns The key as a hex string\n */\nexport async function getOrCreateKey(\n\tstage: string,\n\tprojectName?: string,\n): Promise<string> {\n\tconst existingKey = await readKey(stage, projectName);\n\n\tif (existingKey) {\n\t\treturn existingKey;\n\t}\n\n\treturn generateKey(stage, projectName);\n}\n"],"mappings":";;;;;;;;AAOA,MAAM,aAAa;;;;;;;;AASnB,SAAgB,eAAeA,aAA8B;CAC5D,MAAM,OAAO,eAAe,SAAS,QAAQ,KAAK,CAAC;AACnD,QAAO,KAAK,SAAS,EAAE,QAAQ,KAAK;AACpC;;;;;;;;AASD,SAAgB,WAAWC,OAAeD,aAA8B;AACvE,QAAO,KAAK,eAAe,YAAY,GAAG,EAAE,MAAM,MAAM;AACxD;;;;;;;;;AAiBD,eAAsB,YACrBC,OACAD,aACkB;CAClB,MAAM,SAAS,eAAe,YAAY;CAC1C,MAAM,UAAU,WAAW,OAAO,YAAY;AAG9C,OAAM,MAAM,QAAQ;EAAE,WAAW;EAAM,MAAM;CAAO,EAAC;CAGrD,MAAM,MAAM,YAAY,WAAW,CAAC,SAAS,MAAM;AAGnD,OAAM,UAAU,SAAS,KAAK;EAAE,MAAM;EAAO,UAAU;CAAS,EAAC;AAGjE,OAAM,MAAM,SAAS,IAAM;AAE3B,QAAO;AACP;;;;;;;;AASD,eAAsB,QACrBC,OACAD,aACyB;CACzB,MAAM,UAAU,WAAW,OAAO,YAAY;AAE9C,MAAK,WAAW,QAAQ,CACvB,QAAO;CAGR,MAAM,MAAM,MAAM,SAAS,SAAS,QAAQ;AAC5C,QAAO,IAAI,MAAM;AACjB;;;;;;;;;AA4CD,eAAsB,eACrBC,OACAD,aACkB;CAClB,MAAM,cAAc,MAAM,QAAQ,OAAO,YAAY;AAErD,KAAI,YACH,QAAO;AAGR,QAAO,YAAY,OAAO,YAAY;AACtC"}

package/dist/{openapi-Xx0A7Wg0.mjs → openapi-Bs3-5q_r.mjs}

@@ -1,5 +1,5 @@
-import { ConstructGenerator, isPartitionedRoutes } from "./discover-CAlFgYec.mjs";
-import { loadWorkspaceConfig } from "./config-DVVph9yz.mjs";
+import { ConstructGenerator, isPartitionedRoutes } from "./discover-BYHQwQqu.mjs";
+import { loadWorkspaceConfig } from "./config-DTsVjKZD.mjs";
 import { dirname, join, relative, resolve } from "node:path";
 import { kebabCase } from "@geekmidas/manifest";
 import { mkdir, writeFile } from "node:fs/promises";
@@ -2018,4 +2018,4 @@ async function runOpenApiInSubprocess(appCwd, appName) {
 
 //#endregion
 export { EndpointGenerator, OPENAPI_OUTPUT_PATH, generateOpenApi, generateOpenApiFrom, normalizeRoutes, openApiPathFor, openapiCommand, resolveOpenApiConfig, runtimeFor };
-//# sourceMappingURL=openapi-Xx0A7Wg0.mjs.map
+//# sourceMappingURL=openapi-Bs3-5q_r.mjs.map