@get-dx/cli 0.3.5 → 0.3.6

package/dist/commands/auth.js

@@ -59,14 +59,14 @@ export function authCommand() {
                 throw new CliError("Account web API token or personal access token is required");
             }
         }
-        const runtime = buildRuntime(context, {
+        const runtime = await buildRuntime(context, {
             apiBaseUrl,
             token,
             webBaseUrl,
         });
         const response = await getAuthInfo(runtime);
         persistBaseUrls(apiBaseUrl, webBaseUrl);
-        setToken(apiBaseUrl, token);
+        await setToken(apiBaseUrl, token);
         if (context.json) {
             renderJson({
                 ...response,
@@ -114,7 +114,7 @@ export function authCommand() {
         },
     ]))
         .action(wrapAction(async (_options, command) => {
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         const response = await getAuthInfo(runtime);
         if (runtime.context.json) {
             renderJson({

package/dist/commands/catalog/entities.js

@@ -51,7 +51,7 @@ export function entitiesCommand() {
         if (!options.type) {
             throw new CliError("--type is required", EXIT_CODES.ARGUMENT_ERROR);
         }
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         const resolvedValues = await resolveValuesForEntityType(runtime, options.type, options.property, options.alias);
         const response = await createEntity(runtime, options.identifier, {
             type: options.type,
@@ -87,7 +87,7 @@ export function entitiesCommand() {
         },
     ]))
         .action(wrapAction(async (identifier, _options, command) => {
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         const response = await deleteEntity(runtime, identifier);
         if (runtime.context.json) {
             renderJson(response);
@@ -125,7 +125,7 @@ export function entitiesCommand() {
         },
     ]))
         .action(wrapAction(async (identifier, options, command) => {
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         const resolvedValues = await resolveValuesForExistingEntity(runtime, identifier, options.property, options.alias);
         const response = await updateEntity(runtime, identifier, {
             ...getEntityMutationOptionValues(options),
@@ -174,7 +174,7 @@ export function entitiesCommand() {
         if (!options.identifier) {
             throw new CliError("--identifier is required", EXIT_CODES.ARGUMENT_ERROR);
         }
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         const resolvedValues = await resolveValuesForEntityType(runtime, options.type, options.property, options.alias);
         const response = await upsertEntity(runtime, options.identifier, {
             type: options.type,
@@ -210,7 +210,7 @@ export function entitiesCommand() {
         },
     ]))
         .action(wrapAction(async (identifier, options, command) => {
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         const response = await getEntity(runtime, identifier);
         const processedResponse = processIncludes(response, options);
         if (runtime.context.json) {
@@ -247,7 +247,7 @@ export function entitiesCommand() {
         },
     ]))
         .action(wrapAction(async (options, command) => {
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         const response = await listEntities(runtime, {
             cursor: options.cursor,
             limit: options.limit,
@@ -284,7 +284,7 @@ export function entitiesCommand() {
         },
     ]))
         .action(wrapAction(async (identifier, options, command) => {
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         const response = await getEntityTasks(runtime, identifier, {
             cursor: options.cursor,
             limit: options.limit,
@@ -317,7 +317,7 @@ export function entitiesCommand() {
         },
     ]))
         .action(wrapAction(async (identifier, options, command) => {
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         const response = await getEntityScorecards(runtime, identifier, {
             cursor: options.cursor,
             limit: options.limit,

package/dist/commands/catalog/entityTypes.js

@@ -39,7 +39,7 @@ export function entityTypesCommand() {
         if (modeCount > 1) {
             throw new CliError("--from-file and --from-stdin are mutually exclusive", EXIT_CODES.ARGUMENT_ERROR);
         }
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         let raw;
         if (options.fromFile) {
             raw = readYamlFile(options.fromFile);
@@ -71,7 +71,7 @@ export function entityTypesCommand() {
         },
     ]))
         .action(wrapAction(async (identifier, _options, command) => {
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         const response = await deleteEntityType(runtime, identifier);
         if (runtime.context.json) {
             renderJson(response);
@@ -99,7 +99,7 @@ export function entityTypesCommand() {
         },
     ]))
         .action(wrapAction(async (identifier, options, command) => {
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         const response = await getEntityType(runtime, identifier);
         const processedEntityType = processEntityTypeIncludes(response.entity_type, options);
         if (runtime.context.json) {
@@ -125,7 +125,7 @@ export function entityTypesCommand() {
         },
     ]))
         .action(wrapAction(async (path, options, command) => {
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         if (options.identifier) {
             const identifier = options.identifier;
             let entityTypeResponse;
@@ -190,7 +190,7 @@ export function entityTypesCommand() {
         },
     ]))
         .action(wrapAction(async (options, command) => {
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         const response = await listEntityTypes(runtime, {
             cursor: options.cursor,
             limit: options.limit,
@@ -231,7 +231,7 @@ export function entityTypesCommand() {
         if (modeCount > 1) {
             throw new CliError("--from-file and --from-stdin are mutually exclusive", EXIT_CODES.ARGUMENT_ERROR);
         }
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         let raw;
         if (options.fromFile) {
             raw = readYamlFile(options.fromFile);

package/dist/commands/init.js

@@ -31,7 +31,7 @@ export function initCommand() {
     ]))
         .action(wrapAction(async (commandOptions, command) => {
         const context = getContext(command);
-        let runtime = buildRuntimeSafe(context);
+        let runtime = await buildRuntimeSafe(context);
         ensureInteractive();
         await renderWelcomeAnimation();
         runtime = await ensureLoggedIn(context, runtime);
@@ -92,7 +92,7 @@ async function attemptLogin(apiBaseUrl, webBaseUrl, context) {
     if (!token) {
         throw new CliError("Account web API token is required");
     }
-    const runtime = buildRuntime(context, {
+    const runtime = await buildRuntime(context, {
         apiBaseUrl,
         token,
         webBaseUrl,
@@ -103,7 +103,7 @@ async function attemptLogin(apiBaseUrl, webBaseUrl, context) {
         throw new CliError(`Login failed`);
     }
     persistBaseUrls(apiBaseUrl, webBaseUrl);
-    setToken(apiBaseUrl, token);
+    await setToken(apiBaseUrl, token);
     renderAuthInfo(response, token, apiBaseUrl);
     return runtime;
 }

package/dist/commands/scorecards.js

@@ -39,7 +39,7 @@ export function scorecardsCommand() {
         if (modeCount > 1) {
             throw new CliError("--from-file and --from-stdin are mutually exclusive", EXIT_CODES.ARGUMENT_ERROR);
         }
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         let raw;
         if (options.fromFile) {
             raw = readYamlFile(options.fromFile);
@@ -71,7 +71,7 @@ export function scorecardsCommand() {
         },
     ]))
         .action(wrapAction(async (id, _options, command) => {
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         await deleteScorecard(runtime, id);
         if (runtime.context.json) {
             renderJson({ ok: true });
@@ -103,7 +103,7 @@ export function scorecardsCommand() {
     ]))
         .action(wrapAction(async (id, options, command) => {
         const includeSections = parseScorecardIncludeSections(options.include);
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         const response = await getScorecard(runtime, id);
         if (runtime.context.json) {
             const processedScorecard = processScorecardIncludes(response.scorecard, includeSections);
@@ -129,7 +129,7 @@ export function scorecardsCommand() {
         },
     ]))
         .action(wrapAction(async (path, options, command) => {
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         if (options.id) {
             const id = options.id;
             let scorecardResponse;
@@ -200,7 +200,7 @@ export function scorecardsCommand() {
     ]))
         .action(wrapAction(async (options, command) => {
         const includeSections = parseScorecardIncludeSections(options.include);
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         const response = await listScorecards(runtime, {
             cursor: options.cursor,
             limit: options.limit,
@@ -242,7 +242,7 @@ export function scorecardsCommand() {
         if (modeCount > 1) {
             throw new CliError("--from-file and --from-stdin are mutually exclusive", EXIT_CODES.ARGUMENT_ERROR);
         }
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         let raw;
         if (options.fromFile) {
             raw = readYamlFile(options.fromFile);

package/dist/commands/snapshots.js

@@ -34,7 +34,7 @@ export function snapshotsCommand() {
     ]))
         .action(wrapAction(async (options, command) => {
         const id = parseRequiredTextOption(options.id, "--id");
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         const response = await listSnapshotCsatComments(runtime, {
             id,
             cursor: options.cursor,
@@ -73,7 +73,7 @@ export function snapshotsCommand() {
     ]))
         .action(wrapAction(async (options, command) => {
         const id = parseRequiredTextOption(options.id, "--id");
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         const response = await listSnapshotDriverComments(runtime, {
             id,
             cursor: options.cursor,
@@ -103,7 +103,7 @@ export function snapshotsCommand() {
     ]))
         .action(wrapAction(async (options, command) => {
         const snapshotId = parseRequiredTextOption(options.id, "--id");
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         const response = await getSnapshotInfo(runtime, snapshotId);
         if (runtime.context.json) {
             renderJson(response);
@@ -126,7 +126,7 @@ export function snapshotsCommand() {
         },
     ]))
         .action(wrapAction(async (_options, command) => {
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         const response = await listSnapshots(runtime);
         if (runtime.context.json) {
             renderJson(response);

package/dist/commands/studio/query.js

@@ -50,7 +50,7 @@ export function queryCommand() {
             throw new CliError("--output cannot be used with --json", EXIT_CODES.ARGUMENT_ERROR);
         }
         const variables = parseVariables(options.variable);
-        const runtime = buildRuntime(context);
+        const runtime = await buildRuntime(context);
         const progress = new AsyncProgressReporter();
         const queryRun = await executeQuery(runtime, progress, sql, variables);
         await waitForQuery(runtime, progress, queryRun.id);

package/dist/commands/teams.js

@@ -23,7 +23,7 @@ export function teamsCommand() {
     ]))
         .action(wrapAction(async (options, command) => {
         const teamEmails = parseTeamEmails(options.teamEmails);
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         const response = await findTeamByMembers(runtime, teamEmails);
         if (runtime.context.json) {
             renderJson(response);
@@ -53,7 +53,7 @@ export function teamsCommand() {
     ]))
         .action(wrapAction(async (options, command) => {
         const lookup = parseTeamInfoLookup(options);
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         const response = await getTeamInfo(runtime, lookup);
         if (runtime.context.json) {
             renderJson(response);
@@ -76,7 +76,7 @@ export function teamsCommand() {
         },
     ]))
         .action(wrapAction(async (_options, command) => {
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         const response = await listTeams(runtime);
         if (runtime.context.json) {
             renderJson(response);

package/dist/commands/workflowRuns/addLink.js

@@ -19,7 +19,7 @@ export function addLinkCommand() {
     ]))
         .action(wrapAction(async (workflowRunId, options, command) => {
         const context = getContext(command);
-        const runtime = buildRuntime(context);
+        const runtime = await buildRuntime(context);
         const response = await addLink(runtime, workflowRunId, options.url, options.label);
         if (runtime.context.json) {
             renderJson(response);

package/dist/commands/workflowRuns/changeStatus.js

@@ -23,7 +23,7 @@ export function changeStatusCommand() {
     ]))
         .action(wrapAction(async (workflowRunId, options, command) => {
         const context = getContext(command);
-        const runtime = buildRuntime(context);
+        const runtime = await buildRuntime(context);
         if (!isValidStatus(options.status)) {
             throw new CliError(`Invalid status: ${options.status}. Must be one of: SUCCEEDED, FAILED.`, EXIT_CODES.ARGUMENT_ERROR);
         }

package/dist/commands/workflowRuns/info.js

@@ -18,7 +18,7 @@ export function infoCommand() {
     ]))
         .action(wrapAction(async (workflowRunId, options, command) => {
         const context = getContext(command);
-        const runtime = buildRuntime(context);
+        const runtime = await buildRuntime(context);
         const infoResponse = await getWorkflowRun(runtime, workflowRunId);
         const workflowRun = infoResponse.body.workflow_run;
         if (runtime.context.json) {

package/dist/commands/workflowRuns/postMessage.js

@@ -22,7 +22,7 @@ export function postMessageCommand() {
     ]))
         .action(wrapAction(async (workflowRunId, options, command) => {
         const context = getContext(command);
-        const runtime = buildRuntime(context);
+        const runtime = await buildRuntime(context);
         const response = await postMessage(runtime, workflowRunId, options.message);
         if (runtime.context.json) {
             renderJson(response);

package/dist/commands/workflowRuns/trigger.js

@@ -52,7 +52,7 @@ export function triggerCommand() {
     ]))
         .action(wrapAction(async (workflowIdentifier, options, command) => {
         const context = getContext(command);
-        const runtime = buildRuntime(context);
+        const runtime = await buildRuntime(context);
         // Fetch list of all workflows, find the one that applies
         const workflowsResponse = await listWorkflows(runtime, {});
         const workflow = workflowsResponse.workflows.find((w) => w.identifier === workflowIdentifier);

package/dist/commands/workflows.js

@@ -35,7 +35,7 @@ export function workflowsCommand() {
         if (entityIdentifier && scope !== "ENTITY") {
             throw new CliError("--entity-identifier requires --scope ENTITY", EXIT_CODES.ARGUMENT_ERROR);
         }
-        const runtime = buildRuntime(getContext(command));
+        const runtime = await buildRuntime(getContext(command));
         const response = await listWorkflows(runtime, {
             scope,
             entity_identifier: entityIdentifier,

package/dist/runtime.js

@@ -6,10 +6,10 @@ import cliPackage from "../package.json" with { type: "json" };
 export function buildLogger(context) {
     return createLogger({ json: context.json || !process.stderr.isTTY });
 }
-export function buildRuntime(context, overrides) {
+export async function buildRuntime(context, overrides) {
     const apiBaseUrl = overrides?.apiBaseUrl ?? resolveApiBaseUrl();
     const webBaseUrl = overrides?.webBaseUrl ?? resolveWebBaseUrl();
-    const token = overrides?.token ?? getToken(apiBaseUrl);
+    const token = overrides?.token ?? (await getToken(apiBaseUrl));
     if (!token) {
         throw new CliError("No API token configured. Run `dx auth login --token <token>` or set DX_API_TOKEN.");
     }
@@ -22,10 +22,10 @@ export function buildRuntime(context, overrides) {
         logger: buildLogger(context),
     };
 }
-export function buildRuntimeSafe(context, overrides) {
+export async function buildRuntimeSafe(context, overrides) {
     const apiBaseUrl = overrides?.apiBaseUrl ?? resolveApiBaseUrl();
     const webBaseUrl = overrides?.webBaseUrl ?? resolveWebBaseUrl();
-    const token = overrides?.token ?? getToken(apiBaseUrl);
+    const token = overrides?.token ?? (await getToken(apiBaseUrl));
     if (!token) {
         return null;
     }

package/dist/secrets.js

@@ -1,17 +1,18 @@
-import { execaSync } from "execa";
+import { execa } from "execa";
+import * as crossKeychain from "cross-keychain";
 import { CliError } from "./errors.js";
 const SERVICE = "dx-cli";
-export function getToken(baseUrl) {
+export async function getToken(baseUrl) {
     if (process.env.DX_API_TOKEN) {
         return process.env.DX_API_TOKEN;
     }
-    return getSecretStore().get(baseUrl);
+    return await getSecretStore().get(baseUrl);
 }
-export function setToken(baseUrl, token) {
-    getSecretStore().set(baseUrl, token);
+export async function setToken(baseUrl, token) {
+    await getSecretStore().set(baseUrl, token);
 }
-export function deleteToken(baseUrl) {
-    getSecretStore().delete(baseUrl);
+export async function deleteToken(baseUrl) {
+    await getSecretStore().delete(baseUrl);
 }
 function getSecretStore(platform = process.platform) {
     if (platform === "darwin") {
@@ -20,28 +21,32 @@ function getSecretStore(platform = process.platform) {
     if (platform === "linux") {
         return linuxSecretStore();
     }
+    if (platform === "win32") {
+        return windowsSecretStore();
+    }
     throw new CliError(`Unsupported platform for secure token storage: ${platform}`);
 }
 function macosSecretStore() {
     return {
-        get(baseUrl) {
+        async get(baseUrl) {
             try {
-                return execaSync("security", [
+                const result = await execa("security", [
                     "find-generic-password",
                     "-s",
                     SERVICE,
                     "-a",
                     baseUrl,
                     "-w",
-                ]).stdout.trim();
+                ]);
+                return result.stdout?.trim() ?? null;
             }
             catch {
                 return null;
             }
         },
-        set(baseUrl, token) {
+        async set(baseUrl, token) {
             try {
-                execaSync("security", [
+                await execa("security", [
                     "add-generic-password",
                     "-U",
                     "-s",
@@ -63,9 +68,9 @@ function macosSecretStore() {
                     .join("\n"));
             }
         },
-        delete(baseUrl) {
+        async delete(baseUrl) {
             try {
-                execaSync("security", [
+                await execa("security", [
                     "delete-generic-password",
                     "-s",
                     SERVICE,
@@ -81,33 +86,70 @@ function macosSecretStore() {
 }
 function linuxSecretStore() {
     return {
-        get(baseUrl) {
+        async get(baseUrl) {
             try {
-                return execaSync("secret-tool", [
+                const result = await execa("secret-tool", [
                     "lookup",
                     "service",
                     SERVICE,
                     "account",
                     baseUrl,
-                ]).stdout.trim();
+                ]);
+                return result.stdout?.trim() ?? null;
             }
             catch {
                 return null;
             }
         },
-        set(baseUrl, token) {
+        async set(baseUrl, token) {
             try {
-                execaSync("secret-tool", ["store", "--label=dx-cli", "service", SERVICE, "account", baseUrl], { input: token });
+                await execa("secret-tool", ["store", "--label=dx-cli", "service", SERVICE, "account", baseUrl], { input: token });
             }
             catch (error) {
                 throw buildLinuxTokenStorageError(error);
             }
         },
-        delete(_baseUrl) {
+        async delete(_baseUrl) {
             throw new CliError("Linux token deletion is not supported by secret-tool in this implementation");
         },
     };
 }
+function windowsSecretStore() {
+    return {
+        async get(baseUrl) {
+            try {
+                return await crossKeychain.getPassword(SERVICE, encodeAccountName(baseUrl));
+            }
+            catch {
+                return null;
+            }
+        },
+        async set(baseUrl, token) {
+            try {
+                await crossKeychain.setPassword(SERVICE, encodeAccountName(baseUrl), token);
+            }
+            catch (error) {
+                throw new CliError([
+                    "Unable to save the DX API token securely using Windows Credential Manager.",
+                    "",
+                    "Set DX_API_TOKEN in the environment, or try again from a Windows session with Credential Manager access.",
+                    formatErrorDetails(error),
+                ]
+                    .filter(Boolean)
+                    .join("\n"));
+            }
+        },
+        async delete(baseUrl) {
+            await crossKeychain.deletePassword(SERVICE, encodeAccountName(baseUrl));
+        },
+    };
+}
+/**
+ * Encode an account name so it has only valid characters for Windows.
+ */
+function encodeAccountName(baseUrl) {
+    return Buffer.from(baseUrl).toString("base64");
+}
 function buildLinuxTokenStorageError(error) {
     if (hasErrorCode(error, "ENOENT")) {
         return new CliError([

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@get-dx/cli",
-  "version": "0.3.5",
+  "version": "0.3.6",
   "description": "DX CLI",
   "author": "DX <developers@getdx.com>",
   "bugs": {
@@ -41,6 +41,7 @@
   "dependencies": {
     "@inquirer/prompts": "^8.4.1",
     "commander": "^14.0.1",
+    "cross-keychain": "^1.1.0",
     "dayjs": "^1.11.20",
     "execa": "^9.6.1",
     "open": "^11.0.0",