@invizi/cli 0.1.1 → 0.1.2

package/dist/auth.js

@@ -3,14 +3,17 @@ const DEFAULT_SCOPE = 'openid profile email offline_access';
 function sleep(ms) {
     return new Promise(resolve => setTimeout(resolve, ms));
 }
+// Defaults — public client-side values, not secrets
+const AUTH0_DEFAULTS = {
+    domain: 'dev-u1fgwppsg73adwpc.us.auth0.com',
+    audience: 'https://api-dev.invizi.co',
+    clientId: 'RK5mtxCZygkrBkQr9n2CkgSkjFFsYSsI',
+};
 function getAuth0Config(config = loadConfig()) {
     const auth = config.auth;
-    const domain = process.env.AUTH0_DOMAIN || config.auth0Domain || auth?.domain;
-    const audience = process.env.AUTH0_AUDIENCE || config.auth0Audience || auth?.audience;
-    const clientId = process.env.AUTH0_CLIENT_ID || config.auth0ClientId || auth?.clientId;
-    if (!domain || !audience || !clientId) {
-        throw new Error('Missing AUTH0_DOMAIN, AUTH0_AUDIENCE, or AUTH0_CLIENT_ID. Set env vars or save them in config.');
-    }
+    const domain = process.env.AUTH0_DOMAIN || config.auth0Domain || auth?.domain || AUTH0_DEFAULTS.domain;
+    const audience = process.env.AUTH0_AUDIENCE || config.auth0Audience || auth?.audience || AUTH0_DEFAULTS.audience;
+    const clientId = process.env.AUTH0_CLIENT_ID || config.auth0ClientId || auth?.clientId || AUTH0_DEFAULTS.clientId;
     return { domain, audience, clientId };
 }
 function getStoredAuth() {
@@ -165,23 +168,9 @@ async function login() {
     throw new Error('Login timed out before authorization completed.');
 }
 async function status() {
-    const auth = getStoredAuth();
-    if (!auth) {
-        if (process.env.INVIZI_API_KEY) {
-            console.log('No Auth0 token stored. Using INVIZI_API_KEY fallback.');
-        }
-        else {
-            console.log('Not logged in. Run: invizi auth login');
-            return 1;
-        }
-    }
-    else {
-        const ttlSec = Math.max(0, Math.floor((auth.expiresAt - Date.now()) / 1000));
-        console.log(`Token: present (expires in ~${ttlSec}s)`);
-    }
     const header = await getAuthorizationHeader();
     if (!header) {
-        console.log('No credentials available.');
+        console.log('Not logged in. Run: invizi auth login');
         return 1;
     }
     // Use v1 protocol (auth.me) instead of /api/me (not exposed via nginx)
@@ -202,8 +191,9 @@ async function status() {
     const me = response.result;
     console.log(`User: ${me.id} (${me.role}) via ${me.authProvider}`);
     let email = me.email || null;
-    if (!email && auth?.accessToken && auth?.domain) {
-        const profile = await fetchAuth0UserProfile(auth.accessToken, auth.domain);
+    const storedAuth = getStoredAuth();
+    if (!email && storedAuth?.accessToken && storedAuth?.domain) {
+        const profile = await fetchAuth0UserProfile(storedAuth.accessToken, storedAuth.domain);
         email = inferEmail(profile);
     }
     if (email) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@invizi/cli",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Invizi CLI",
   "type": "module",
   "bin": {