@inquir/compute-cli 0.1.2 → 0.1.4

package/dist/utils/redact.js

@@ -0,0 +1,45 @@
+/**
+ * Secret redaction. Tokens and API keys must never appear in output, logs, or
+ * `--debug` traces. We redact by (a) known patterns and (b) any value explicitly
+ * registered at runtime (the resolved credential, env values, etc.).
+ */
+const registeredSecrets = new Set();
+/** Token/credential shapes to scrub even if not explicitly registered. */
+const SECRET_PATTERNS = [
+    /inq_pat_[A-Za-z0-9._-]+/g, // Personal Access Tokens
+    /\bBearer\s+[A-Za-z0-9._-]{8,}/gi, // Authorization: Bearer <token>
+];
+/** Register a concrete secret value so it is masked wherever it appears. */
+export function registerSecret(value) {
+    if (value && value.length >= 6) {
+        registeredSecrets.add(value);
+    }
+}
+/** For tests / isolation. */
+export function clearRegisteredSecrets() {
+    registeredSecrets.clear();
+}
+/** Mask a single token for display: keep a hint of the prefix + last 4 chars. */
+export function maskToken(value) {
+    if (!value)
+        return '(none)';
+    if (value.length <= 8)
+        return '****';
+    const prefixMatch = /^([a-z]+_[a-z]+_)/i.exec(value);
+    const prefix = prefixMatch ? prefixMatch[1] : value.slice(0, 4);
+    return `${prefix}…${value.slice(-4)}`;
+}
+/** Redact all known secrets from an arbitrary string. */
+export function redact(input) {
+    let output = input;
+    for (const secret of registeredSecrets) {
+        if (secret) {
+            output = output.split(secret).join(maskToken(secret));
+        }
+    }
+    for (const pattern of SECRET_PATTERNS) {
+        output = output.replace(pattern, (match) => maskToken(match.replace(/^Bearer\s+/i, '')));
+    }
+    return output;
+}
+//# sourceMappingURL=redact.js.map

package/dist/utils/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/utils/redact.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;AAE5C,0EAA0E;AAC1E,MAAM,eAAe,GAAa;IAChC,0BAA0B,EAAE,yBAAyB;IACrD,iCAAiC,EAAE,gCAAgC;CACpE,CAAC;AAEF,4EAA4E;AAC5E,MAAM,UAAU,cAAc,CAAC,KAAgC;IAC7D,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QAC/B,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,6BAA6B;AAC7B,MAAM,UAAU,sBAAsB;IACpC,iBAAiB,CAAC,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,SAAS,CAAC,KAAyB;IACjD,IAAI,CAAC,KAAK;QAAE,OAAO,QAAQ,CAAC;IAC5B,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACrC,MAAM,WAAW,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAChE,OAAO,GAAG,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,MAAM,CAAC,KAAa;IAClC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,MAAM,MAAM,IAAI,iBAAiB,EAAE,CAAC;QACvC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/utils/version.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Read the CLI version from package.json so it never drifts from the published
+ * version. Works both from the built `dist/utils/version.js` and from the
+ * `src/utils/version.ts` source under Vitest — package.json is two levels up
+ * from this file in both cases.
+ */
+export declare function getVersion(): string;
+//# sourceMappingURL=version.d.ts.map

package/dist/utils/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/utils/version.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,wBAAgB,UAAU,IAAI,MAAM,CASnC"}

package/dist/utils/version.js

@@ -0,0 +1,21 @@
+import { readFileSync } from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+/**
+ * Read the CLI version from package.json so it never drifts from the published
+ * version. Works both from the built `dist/utils/version.js` and from the
+ * `src/utils/version.ts` source under Vitest — package.json is two levels up
+ * from this file in both cases.
+ */
+export function getVersion() {
+    try {
+        const here = path.dirname(fileURLToPath(import.meta.url));
+        const pkgPath = path.resolve(here, '..', '..', 'package.json');
+        const pkg = JSON.parse(readFileSync(pkgPath, 'utf8'));
+        return pkg.version ?? '0.0.0';
+    }
+    catch {
+        return '0.0.0';
+    }
+}
+//# sourceMappingURL=version.js.map

package/dist/utils/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/utils/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAyB,CAAC;QAC9E,OAAO,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inquir/compute-cli",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "type": "module",
   "description": "Workspace-first CLI for Inquir Compute.",
   "bin": {
@@ -10,15 +10,17 @@
     "dist"
   ],
   "scripts": {
+    "clean": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\"",
     "build": "npm --prefix ../.. run build --workspace @inquir/compute && tsc -p tsconfig.json",
-    "prepublishOnly": "npm run build",
+    "build:self": "tsc -p tsconfig.json",
+    "prepublishOnly": "npm run clean && npm run build",
     "test": "npx vitest run -c vitest.config.ts"
   },
   "publishConfig": {
     "access": "public"
   },
   "dependencies": {
-    "@inquir/compute": "^0.1.1",
+    "@inquir/compute": "^0.1.2",
     "tsx": "^4.19.2"
   },
   "devDependencies": {