@lanonasis/cli 3.3.15 → 3.5.15

package/dist/mcp/server/utils/config.js

@@ -1,855 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __generator = (this && this.__generator) || function (thisArg, body) {
-    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
-    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
-    function verb(n) { return function (v) { return step([n, v]); }; }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while (g && (g = 0, op[0] && (_ = 0)), _) try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [op[0] & 2, t.value];
-            switch (op[0]) {
-                case 0: case 1: t = op; break;
-                case 4: _.label++; return { value: op[1], done: false };
-                case 5: _.label++; y = op[1]; op = [0]; continue;
-                case 7: op = _.ops.pop(); _.trys.pop(); continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
-                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
-                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
-                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop(); continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
-        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
-    }
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CLIConfig = void 0;
-var fs = require("fs/promises");
-var path = require("path");
-var os = require("os");
-var jwt_decode_1 = require("jwt-decode");
-var crypto_1 = require("crypto");
-var CLIConfig = /** @class */ (function () {
-    function CLIConfig() {
-        this.config = {};
-        this.configDir = path.join(os.homedir(), '.maas');
-        this.configPath = path.join(this.configDir, 'config.json');
-        this.lockFile = path.join(this.configDir, 'config.lock');
-    }
-    CLIConfig.prototype.init = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var _a;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
-                    case 0:
-                        _b.trys.push([0, 3, , 4]);
-                        return [4 /*yield*/, fs.mkdir(this.configDir, { recursive: true })];
-                    case 1:
-                        _b.sent();
-                        return [4 /*yield*/, this.load()];
-                    case 2:
-                        _b.sent();
-                        return [3 /*break*/, 4];
-                    case 3:
-                        _a = _b.sent();
-                        return [3 /*break*/, 4];
-                    case 4: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    CLIConfig.prototype.load = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var data, _a;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
-                    case 0:
-                        _b.trys.push([0, 3, , 4]);
-                        return [4 /*yield*/, fs.readFile(this.configPath, 'utf-8')];
-                    case 1:
-                        data = _b.sent();
-                        this.config = JSON.parse(data);
-                        // Handle version migration if needed
-                        return [4 /*yield*/, this.migrateConfigIfNeeded()];
-                    case 2:
-                        // Handle version migration if needed
-                        _b.sent();
-                        return [3 /*break*/, 4];
-                    case 3:
-                        _a = _b.sent();
-                        this.config = {};
-                        // Set version for new config
-                        this.config.version = CLIConfig.CONFIG_VERSION;
-                        return [3 /*break*/, 4];
-                    case 4: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    CLIConfig.prototype.migrateConfigIfNeeded = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var currentVersion;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        currentVersion = this.config.version;
-                        if (!!currentVersion) return [3 /*break*/, 2];
-                        // Legacy config without version, migrate to current version
-                        this.config.version = CLIConfig.CONFIG_VERSION;
-                        // Perform any necessary migrations for legacy configs
-                        // For now, just ensure the version is set
-                        return [4 /*yield*/, this.save()];
-                    case 1:
-                        // Perform any necessary migrations for legacy configs
-                        // For now, just ensure the version is set
-                        _a.sent();
-                        return [3 /*break*/, 4];
-                    case 2:
-                        if (!(currentVersion !== CLIConfig.CONFIG_VERSION)) return [3 /*break*/, 4];
-                        // Future version migrations would go here
-                        // For now, just update the version
-                        this.config.version = CLIConfig.CONFIG_VERSION;
-                        return [4 /*yield*/, this.save()];
-                    case 3:
-                        _a.sent();
-                        _a.label = 4;
-                    case 4: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    CLIConfig.prototype.save = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.atomicSave()];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    CLIConfig.prototype.atomicSave = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var lockAcquired, tempPath;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, fs.mkdir(this.configDir, { recursive: true })];
-                    case 1:
-                        _a.sent();
-                        return [4 /*yield*/, this.acquireLock()];
-                    case 2:
-                        lockAcquired = _a.sent();
-                        if (!lockAcquired) {
-                            throw new Error('Could not acquire configuration lock. Another process may be modifying the config.');
-                        }
-                        _a.label = 3;
-                    case 3:
-                        _a.trys.push([3, , 6, 8]);
-                        // Set version and update timestamp
-                        this.config.version = CLIConfig.CONFIG_VERSION;
-                        this.config.lastUpdated = new Date().toISOString();
-                        tempPath = "".concat(this.configPath, ".tmp.").concat((0, crypto_1.randomUUID)());
-                        // Write to temporary file first
-                        return [4 /*yield*/, fs.writeFile(tempPath, JSON.stringify(this.config, null, 2), 'utf-8')];
-                    case 4:
-                        // Write to temporary file first
-                        _a.sent();
-                        // Atomic rename - this is the critical atomic operation
-                        return [4 /*yield*/, fs.rename(tempPath, this.configPath)];
-                    case 5:
-                        // Atomic rename - this is the critical atomic operation
-                        _a.sent();
-                        return [3 /*break*/, 8];
-                    case 6: 
-                    // Always release the lock
-                    return [4 /*yield*/, this.releaseLock()];
-                    case 7:
-                        // Always release the lock
-                        _a.sent();
-                        return [7 /*endfinally*/];
-                    case 8: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    CLIConfig.prototype.backupConfig = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var timestamp, backupPath, error_1;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        timestamp = new Date().toISOString().replace(/[:.]/g, '-');
-                        backupPath = path.join(this.configDir, "config.backup.".concat(timestamp, ".json"));
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 4, , 7]);
-                        // Check if config exists before backing up
-                        return [4 /*yield*/, fs.access(this.configPath)];
-                    case 2:
-                        // Check if config exists before backing up
-                        _a.sent();
-                        return [4 /*yield*/, fs.copyFile(this.configPath, backupPath)];
-                    case 3:
-                        _a.sent();
-                        return [2 /*return*/, backupPath];
-                    case 4:
-                        error_1 = _a.sent();
-                        if (!(error_1.code === 'ENOENT')) return [3 /*break*/, 6];
-                        // Config doesn't exist, create empty backup
-                        return [4 /*yield*/, fs.writeFile(backupPath, JSON.stringify({}, null, 2))];
-                    case 5:
-                        // Config doesn't exist, create empty backup
-                        _a.sent();
-                        return [2 /*return*/, backupPath];
-                    case 6: throw error_1;
-                    case 7: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    CLIConfig.prototype.acquireLock = function () {
-        return __awaiter(this, arguments, void 0, function (timeoutMs) {
-            var startTime, error_2, pidStr, pid, _a, _b;
-            if (timeoutMs === void 0) { timeoutMs = 5000; }
-            return __generator(this, function (_c) {
-                switch (_c.label) {
-                    case 0:
-                        startTime = Date.now();
-                        _c.label = 1;
-                    case 1:
-                        if (!(Date.now() - startTime < timeoutMs)) return [3 /*break*/, 18];
-                        _c.label = 2;
-                    case 2:
-                        _c.trys.push([2, 4, , 17]);
-                        // Try to create lock file exclusively
-                        return [4 /*yield*/, fs.writeFile(this.lockFile, process.pid.toString(), { flag: 'wx' })];
-                    case 3:
-                        // Try to create lock file exclusively
-                        _c.sent();
-                        return [2 /*return*/, true];
-                    case 4:
-                        error_2 = _c.sent();
-                        if (!(error_2.code === 'EEXIST')) return [3 /*break*/, 15];
-                        _c.label = 5;
-                    case 5:
-                        _c.trys.push([5, 12, , 14]);
-                        return [4 /*yield*/, fs.readFile(this.lockFile, 'utf-8')];
-                    case 6:
-                        pidStr = _c.sent();
-                        pid = parseInt(pidStr.trim());
-                        if (!!isNaN(pid)) return [3 /*break*/, 11];
-                        _c.label = 7;
-                    case 7:
-                        _c.trys.push([7, 9, , 11]);
-                        // Check if process is still running (works on Unix-like systems)
-                        process.kill(pid, 0);
-                        // Process is running, wait and retry
-                        return [4 /*yield*/, new Promise(function (resolve) { return setTimeout(resolve, 100); })];
-                    case 8:
-                        // Process is running, wait and retry
-                        _c.sent();
-                        return [3 /*break*/, 1];
-                    case 9:
-                        _a = _c.sent();
-                        // Process is not running, remove stale lock
-                        return [4 /*yield*/, fs.unlink(this.lockFile).catch(function () { })];
-                    case 10:
-                        // Process is not running, remove stale lock
-                        _c.sent();
-                        return [3 /*break*/, 1];
-                    case 11: return [3 /*break*/, 14];
-                    case 12:
-                        _b = _c.sent();
-                        // Can't read lock file, remove it and retry
-                        return [4 /*yield*/, fs.unlink(this.lockFile).catch(function () { })];
-                    case 13:
-                        // Can't read lock file, remove it and retry
-                        _c.sent();
-                        return [3 /*break*/, 1];
-                    case 14: return [3 /*break*/, 16];
-                    case 15: throw error_2;
-                    case 16: return [3 /*break*/, 17];
-                    case 17: return [3 /*break*/, 1];
-                    case 18: return [2 /*return*/, false];
-                }
-            });
-        });
-    };
-    CLIConfig.prototype.releaseLock = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var _a;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
-                    case 0:
-                        _b.trys.push([0, 2, , 3]);
-                        return [4 /*yield*/, fs.unlink(this.lockFile)];
-                    case 1:
-                        _b.sent();
-                        return [3 /*break*/, 3];
-                    case 2:
-                        _a = _b.sent();
-                        return [3 /*break*/, 3];
-                    case 3: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    CLIConfig.prototype.getApiUrl = function () {
-        return process.env.MEMORY_API_URL ||
-            this.config.apiUrl ||
-            'https://api.lanonasis.com/api/v1';
-    };
-    // Service Discovery Integration
-    CLIConfig.prototype.discoverServices = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var axios, discoveryUrl, response, discovered, _a;
-            var _b, _c, _d, _e, _f;
-            return __generator(this, function (_g) {
-                switch (_g.label) {
-                    case 0:
-                        _g.trys.push([0, 4, , 6]);
-                        return [4 /*yield*/, Promise.resolve().then(function () { return require('axios'); })];
-                    case 1:
-                        axios = (_g.sent()).default;
-                        discoveryUrl = 'https://mcp.lanonasis.com/.well-known/onasis.json';
-                        return [4 /*yield*/, axios.get(discoveryUrl)];
-                    case 2:
-                        response = _g.sent();
-                        discovered = response.data;
-                        this.config.discoveredServices = {
-                            auth_base: ((_c = (_b = discovered.auth) === null || _b === void 0 ? void 0 : _b.login) === null || _c === void 0 ? void 0 : _c.replace('/auth/login', '')) || 'https://api.lanonasis.com',
-                            memory_base: 'https://api.lanonasis.com/api/v1',
-                            mcp_base: ((_d = discovered.endpoints) === null || _d === void 0 ? void 0 : _d.http) || 'https://mcp.lanonasis.com/api/v1',
-                            mcp_ws_base: ((_e = discovered.endpoints) === null || _e === void 0 ? void 0 : _e.websocket) || 'wss://mcp.lanonasis.com/ws',
-                            mcp_sse_base: ((_f = discovered.endpoints) === null || _f === void 0 ? void 0 : _f.sse) || 'https://mcp.lanonasis.com/api/v1/events',
-                            project_scope: 'lanonasis-maas'
-                        };
-                        return [4 /*yield*/, this.save()];
-                    case 3:
-                        _g.sent();
-                        return [3 /*break*/, 6];
-                    case 4:
-                        _a = _g.sent();
-                        // Service discovery failed, use fallback defaults
-                        if (process.env.CLI_VERBOSE === 'true') {
-                            console.log('Service discovery failed, using fallback defaults');
-                        }
-                        // Set fallback service endpoints to prevent double slash issues
-                        // Use mcp.lanonasis.com for MCP services (proxied to port 3001)
-                        this.config.discoveredServices = {
-                            auth_base: 'https://api.lanonasis.com', // CLI auth goes to central auth system
-                            memory_base: 'https://api.lanonasis.com/api/v1', // Memory via onasis-core
-                            mcp_base: 'https://mcp.lanonasis.com/api/v1', // MCP HTTP/REST
-                            mcp_ws_base: 'wss://mcp.lanonasis.com/ws', // MCP WebSocket
-                            mcp_sse_base: 'https://mcp.lanonasis.com/api/v1/events', // MCP SSE
-                            project_scope: 'lanonasis-maas' // Correct project scope
-                        };
-                        return [4 /*yield*/, this.save()];
-                    case 5:
-                        _g.sent();
-                        return [3 /*break*/, 6];
-                    case 6: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    CLIConfig.prototype.getDiscoveredApiUrl = function () {
-        var _a;
-        return ((_a = this.config.discoveredServices) === null || _a === void 0 ? void 0 : _a.auth_base) || this.getApiUrl();
-    };
-    // Enhanced authentication support
-    CLIConfig.prototype.setVendorKey = function (vendorKey) {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        // Validate vendor key format (pk_*.sk_*)
-                        if (!vendorKey.match(/^pk_[a-zA-Z0-9]+\.sk_[a-zA-Z0-9]+$/)) {
-                            throw new Error('Invalid vendor key format. Expected: pk_xxx.sk_xxx');
-                        }
-                        // Server-side validation
-                        return [4 /*yield*/, this.validateVendorKeyWithServer(vendorKey)];
-                    case 1:
-                        // Server-side validation
-                        _a.sent();
-                        this.config.vendorKey = vendorKey;
-                        this.config.authMethod = 'vendor_key';
-                        this.config.lastValidated = new Date().toISOString();
-                        return [4 /*yield*/, this.resetFailureCount()];
-                    case 2:
-                        _a.sent(); // Reset failure count on successful auth
-                        return [4 /*yield*/, this.save()];
-                    case 3:
-                        _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    CLIConfig.prototype.validateVendorKeyWithServer = function (vendorKey) {
-        return __awaiter(this, void 0, void 0, function () {
-            var axios, authBase, error_3;
-            var _a, _b, _c;
-            return __generator(this, function (_d) {
-                switch (_d.label) {
-                    case 0:
-                        _d.trys.push([0, 4, , 5]);
-                        return [4 /*yield*/, Promise.resolve().then(function () { return require('axios'); })];
-                    case 1:
-                        axios = (_d.sent()).default;
-                        // Ensure service discovery is done
-                        return [4 /*yield*/, this.discoverServices()];
-                    case 2:
-                        // Ensure service discovery is done
-                        _d.sent();
-                        authBase = ((_a = this.config.discoveredServices) === null || _a === void 0 ? void 0 : _a.auth_base) || 'https://api.lanonasis.com';
-                        // Test vendor key with health endpoint
-                        return [4 /*yield*/, axios.get("".concat(authBase, "/api/v1/health"), {
-                                headers: {
-                                    'X-API-Key': vendorKey,
-                                    'X-Auth-Method': 'vendor_key',
-                                    'X-Project-Scope': 'lanonasis-maas'
-                                },
-                                timeout: 10000
-                            })];
-                    case 3:
-                        // Test vendor key with health endpoint
-                        _d.sent();
-                        return [3 /*break*/, 5];
-                    case 4:
-                        error_3 = _d.sent();
-                        if (((_b = error_3.response) === null || _b === void 0 ? void 0 : _b.status) === 401 || ((_c = error_3.response) === null || _c === void 0 ? void 0 : _c.status) === 403) {
-                            throw new Error('Invalid vendor key: Authentication failed with server');
-                        }
-                        else if (error_3.code === 'ECONNREFUSED' || error_3.code === 'ENOTFOUND') {
-                            throw new Error('Cannot validate vendor key: Server unreachable');
-                        }
-                        else {
-                            throw new Error("Vendor key validation failed: ".concat(error_3.message));
-                        }
-                        return [3 /*break*/, 5];
-                    case 5: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    CLIConfig.prototype.getVendorKey = function () {
-        return this.config.vendorKey;
-    };
-    CLIConfig.prototype.hasVendorKey = function () {
-        return !!this.config.vendorKey;
-    };
-    CLIConfig.prototype.setApiUrl = function (url) {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        this.config.apiUrl = url;
-                        return [4 /*yield*/, this.save()];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    CLIConfig.prototype.setToken = function (token) {
-        return __awaiter(this, void 0, void 0, function () {
-            var decoded;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        this.config.token = token;
-                        this.config.authMethod = 'jwt';
-                        this.config.lastValidated = new Date().toISOString();
-                        return [4 /*yield*/, this.resetFailureCount()];
-                    case 1:
-                        _a.sent(); // Reset failure count on successful auth
-                        // Decode token to get user info and expiry
-                        try {
-                            decoded = (0, jwt_decode_1.jwtDecode)(token);
-                            // Store token expiry
-                            if (typeof decoded.exp === 'number') {
-                                this.config.tokenExpiry = decoded.exp;
-                            }
-                            // Store user info
-                            this.config.user = {
-                                email: String(decoded.email || ''),
-                                organization_id: String(decoded.organizationId || ''),
-                                role: String(decoded.role || ''),
-                                plan: String(decoded.plan || '')
-                            };
-                        }
-                        catch (_b) {
-                            // Invalid token, don't store user info or expiry
-                            this.config.tokenExpiry = undefined;
-                        }
-                        return [4 /*yield*/, this.save()];
-                    case 2:
-                        _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    CLIConfig.prototype.getToken = function () {
-        return this.config.token;
-    };
-    CLIConfig.prototype.getCurrentUser = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                return [2 /*return*/, this.config.user];
-            });
-        });
-    };
-    CLIConfig.prototype.isAuthenticated = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var token, parts, lastPart, timestamp, thirtyDaysInMs, decoded, now;
-            return __generator(this, function (_a) {
-                token = this.getToken();
-                if (!token)
-                    return [2 /*return*/, false];
-                // Handle simple CLI tokens (format: cli_xxx_timestamp)
-                if (token.startsWith('cli_')) {
-                    parts = token.split('_');
-                    if (parts.length >= 3) {
-                        lastPart = parts[parts.length - 1];
-                        timestamp = lastPart ? parseInt(lastPart) : NaN;
-                        if (!isNaN(timestamp)) {
-                            thirtyDaysInMs = 30 * 24 * 60 * 60 * 1000;
-                            return [2 /*return*/, (Date.now() - timestamp) < thirtyDaysInMs];
-                        }
-                    }
-                    // If we can't parse timestamp, assume valid (fallback)
-                    return [2 /*return*/, true];
-                }
-                // Handle JWT tokens
-                try {
-                    decoded = (0, jwt_decode_1.jwtDecode)(token);
-                    now = Date.now() / 1000;
-                    return [2 /*return*/, typeof decoded.exp === 'number' && decoded.exp > now];
-                }
-                catch (_b) {
-                    return [2 /*return*/, false];
-                }
-                return [2 /*return*/];
-            });
-        });
-    };
-    CLIConfig.prototype.logout = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        this.config.token = undefined;
-                        this.config.user = undefined;
-                        return [4 /*yield*/, this.save()];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    CLIConfig.prototype.clear = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        this.config = {};
-                        return [4 /*yield*/, this.save()];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    CLIConfig.prototype.getConfigPath = function () {
-        return this.configPath;
-    };
-    CLIConfig.prototype.exists = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var _a;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
-                    case 0:
-                        _b.trys.push([0, 2, , 3]);
-                        return [4 /*yield*/, fs.access(this.configPath)];
-                    case 1:
-                        _b.sent();
-                        return [2 /*return*/, true];
-                    case 2:
-                        _a = _b.sent();
-                        return [2 /*return*/, false];
-                    case 3: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    // Enhanced credential validation methods
-    CLIConfig.prototype.validateStoredCredentials = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var vendorKey, token, axios, authBase, headers, error_4;
-            var _a;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
-                    case 0:
-                        _b.trys.push([0, 6, , 8]);
-                        vendorKey = this.getVendorKey();
-                        token = this.getToken();
-                        if (!vendorKey && !token) {
-                            return [2 /*return*/, false];
-                        }
-                        return [4 /*yield*/, Promise.resolve().then(function () { return require('axios'); })];
-                    case 1:
-                        axios = (_b.sent()).default;
-                        // Ensure service discovery is done
-                        return [4 /*yield*/, this.discoverServices()];
-                    case 2:
-                        // Ensure service discovery is done
-                        _b.sent();
-                        authBase = ((_a = this.config.discoveredServices) === null || _a === void 0 ? void 0 : _a.auth_base) || 'https://api.lanonasis.com';
-                        headers = {
-                            'X-Project-Scope': 'lanonasis-maas'
-                        };
-                        if (vendorKey) {
-                            headers['X-API-Key'] = vendorKey;
-                            headers['X-Auth-Method'] = 'vendor_key';
-                        }
-                        else if (token) {
-                            headers['Authorization'] = "Bearer ".concat(token);
-                            headers['X-Auth-Method'] = 'jwt';
-                        }
-                        // Validate against server with health endpoint
-                        return [4 /*yield*/, axios.get("".concat(authBase, "/api/v1/health"), {
-                                headers: headers,
-                                timeout: 10000
-                            })];
-                    case 3:
-                        // Validate against server with health endpoint
-                        _b.sent();
-                        // Update last validated timestamp
-                        this.config.lastValidated = new Date().toISOString();
-                        return [4 /*yield*/, this.resetFailureCount()];
-                    case 4:
-                        _b.sent();
-                        return [4 /*yield*/, this.save()];
-                    case 5:
-                        _b.sent();
-                        return [2 /*return*/, true];
-                    case 6:
-                        error_4 = _b.sent();
-                        // Increment failure count
-                        return [4 /*yield*/, this.incrementFailureCount()];
-                    case 7:
-                        // Increment failure count
-                        _b.sent();
-                        return [2 /*return*/, false];
-                    case 8: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    CLIConfig.prototype.refreshTokenIfNeeded = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var token, decoded, now, exp, axios, authBase, response, error_5;
-            var _a;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
-                    case 0:
-                        token = this.getToken();
-                        if (!token) {
-                            return [2 /*return*/];
-                        }
-                        _b.label = 1;
-                    case 1:
-                        _b.trys.push([1, 7, , 9]);
-                        // Check if token is JWT and if it's close to expiry
-                        if (token.startsWith('cli_')) {
-                            // CLI tokens don't need refresh, they're long-lived
-                            return [2 /*return*/];
-                        }
-                        decoded = (0, jwt_decode_1.jwtDecode)(token);
-                        now = Date.now() / 1000;
-                        exp = typeof decoded.exp === 'number' ? decoded.exp : 0;
-                        if (!(exp > 0 && (exp - now) < 300)) return [3 /*break*/, 6];
-                        return [4 /*yield*/, Promise.resolve().then(function () { return require('axios'); })];
-                    case 2:
-                        axios = (_b.sent()).default;
-                        return [4 /*yield*/, this.discoverServices()];
-                    case 3:
-                        _b.sent();
-                        authBase = ((_a = this.config.discoveredServices) === null || _a === void 0 ? void 0 : _a.auth_base) || 'https://api.lanonasis.com';
-                        return [4 /*yield*/, axios.post("".concat(authBase, "/v1/auth/refresh"), {}, {
-                                headers: {
-                                    'Authorization': "Bearer ".concat(token),
-                                    'X-Project-Scope': 'lanonasis-maas'
-                                },
-                                timeout: 10000
-                            })];
-                    case 4:
-                        response = _b.sent();
-                        if (!response.data.token) return [3 /*break*/, 6];
-                        return [4 /*yield*/, this.setToken(response.data.token)];
-                    case 5:
-                        _b.sent();
-                        _b.label = 6;
-                    case 6: return [3 /*break*/, 9];
-                    case 7:
-                        error_5 = _b.sent();
-                        // If refresh fails, mark credentials as potentially invalid
-                        return [4 /*yield*/, this.incrementFailureCount()];
-                    case 8:
-                        // If refresh fails, mark credentials as potentially invalid
-                        _b.sent();
-                        return [3 /*break*/, 9];
-                    case 9: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    CLIConfig.prototype.clearInvalidCredentials = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        this.config.token = undefined;
-                        this.config.vendorKey = undefined;
-                        this.config.user = undefined;
-                        this.config.authMethod = undefined;
-                        this.config.tokenExpiry = undefined;
-                        this.config.lastValidated = undefined;
-                        this.config.authFailureCount = 0;
-                        this.config.lastAuthFailure = undefined;
-                        return [4 /*yield*/, this.save()];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    CLIConfig.prototype.incrementFailureCount = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        this.config.authFailureCount = (this.config.authFailureCount || 0) + 1;
-                        this.config.lastAuthFailure = new Date().toISOString();
-                        return [4 /*yield*/, this.save()];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    CLIConfig.prototype.resetFailureCount = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        this.config.authFailureCount = 0;
-                        this.config.lastAuthFailure = undefined;
-                        return [4 /*yield*/, this.save()];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    CLIConfig.prototype.getFailureCount = function () {
-        return this.config.authFailureCount || 0;
-    };
-    CLIConfig.prototype.getLastAuthFailure = function () {
-        return this.config.lastAuthFailure;
-    };
-    CLIConfig.prototype.shouldDelayAuth = function () {
-        var failureCount = this.getFailureCount();
-        return failureCount >= 3;
-    };
-    CLIConfig.prototype.getAuthDelayMs = function () {
-        var failureCount = this.getFailureCount();
-        if (failureCount < 3)
-            return 0;
-        // Progressive delays: 3 failures = 2s, 4 = 4s, 5 = 8s, 6+ = 16s max
-        var baseDelay = 2000; // 2 seconds
-        var maxDelay = 16000; // 16 seconds max
-        var delay = Math.min(baseDelay * Math.pow(2, failureCount - 3), maxDelay);
-        return delay;
-    };
-    // Generic get/set methods for MCP and other dynamic config
-    CLIConfig.prototype.get = function (key) {
-        return this.config[key];
-    };
-    CLIConfig.prototype.set = function (key, value) {
-        this.config[key] = value;
-    };
-    CLIConfig.prototype.setAndSave = function (key, value) {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        this.set(key, value);
-                        return [4 /*yield*/, this.save()];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    // MCP-specific helpers
-    CLIConfig.prototype.getMCPServerPath = function () {
-        return this.config.mcpServerPath || path.join(process.cwd(), 'onasis-gateway/mcp-server/server.js');
-    };
-    CLIConfig.prototype.getMCPServerUrl = function () {
-        var _a;
-        return ((_a = this.config.discoveredServices) === null || _a === void 0 ? void 0 : _a.mcp_ws_base) ||
-            this.config.mcpServerUrl ||
-            'wss://mcp.lanonasis.com/ws';
-    };
-    CLIConfig.prototype.getMCPRestUrl = function () {
-        var _a;
-        return ((_a = this.config.discoveredServices) === null || _a === void 0 ? void 0 : _a.mcp_base) ||
-            'https://mcp.lanonasis.com/api/v1';
-    };
-    CLIConfig.prototype.getMCPSSEUrl = function () {
-        var _a;
-        return ((_a = this.config.discoveredServices) === null || _a === void 0 ? void 0 : _a.mcp_sse_base) ||
-            'https://mcp.lanonasis.com/api/v1/events';
-    };
-    CLIConfig.prototype.shouldUseRemoteMCP = function () {
-        var preference = this.config.mcpPreference || 'auto';
-        switch (preference) {
-            case 'remote':
-                return true;
-            case 'local':
-                return false;
-            case 'auto':
-            default:
-                // Use remote if authenticated, otherwise local
-                return !!this.config.token;
-        }
-    };
-    CLIConfig.CONFIG_VERSION = '1.0.0';
-    return CLIConfig;
-}());
-exports.CLIConfig = CLIConfig;