@layr-labs/ecloud-cli 0.1.2 → 0.2.0-dev.1

package/VERSION

@@ -1,2 +1,2 @@
-version=0.1.2
-commit=0ed0e2b700f0a34b7085cab92494a06d8a91fb56
+version=0.2.0-dev.1
+commit=35df3373f12cb596228cecb42ac3f962cc1c4127

package/dist/commands/auth/generate.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/commands/auth/generate.ts","../../../src/utils/security.ts","../../../src/telemetry.ts","../../../src/utils/globalConfig.ts"],"sourcesContent":["/**\n * Auth Generate Command\n *\n * Generate a new private key and optionally store it in OS keyring\n */\n\nimport { Command, Flags } from \"@oclif/core\";\nimport { confirm } from \"@inquirer/prompts\";\nimport { generateNewPrivateKey, storePrivateKey, keyExists } from \"@layr-labs/ecloud-sdk\";\nimport { showPrivateKey, displayWarning } from \"../../utils/security\";\nimport { withTelemetry } from \"../../telemetry\";\n\nexport default class AuthGenerate extends Command {\n  static description = \"Generate a new private key\";\n\n  static aliases = [\"auth:gen\", \"auth:new\"];\n\n  static examples = [\n    \"<%= config.bin %> <%= command.id %>\",\n    \"<%= config.bin %> <%= command.id %> --store\",\n  ];\n\n  static flags = {\n    store: Flags.boolean({\n      description: \"Automatically store in OS keyring\",\n      default: false,\n    }),\n  };\n\n  async run(): Promise<void> {\n    return withTelemetry(this, async () => {\n      const { flags } = await this.parse(AuthGenerate);\n\n      // Generate new key\n      this.log(\"Generating new private key...\\n\");\n      const { privateKey, address } = generateNewPrivateKey();\n\n      // Display key securely\n      const content = `\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\nA new private key was generated for you.\n\nIMPORTANT: You MUST backup this key now.\n           It will never be shown again.\n\nAddress:     ${address}\nPrivate key: ${privateKey}\n\n⚠️  SECURITY WARNING:\n   • Anyone with this key can control your account\n   • Never share it or commit it to version control\n   • Store it in a secure password manager\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\nPress 'q' to exit and continue...\n`;\n\n      const displayed = await showPrivateKey(content);\n\n      if (!displayed) {\n        this.log(\"Key generation cancelled.\");\n        return;\n      }\n\n      // Ask about storing\n      let shouldStore = flags.store;\n\n      if (!shouldStore && displayed) {\n        shouldStore = await confirm({\n          message: \"Store this key in your OS keyring?\",\n          default: true,\n        });\n      }\n\n      if (shouldStore) {\n        // Check if key already exists\n        const exists = await keyExists();\n\n        if (exists) {\n          displayWarning([\n            `WARNING: A private key for ecloud already exists!`,\n            \"If you continue, the existing key will be PERMANENTLY REPLACED.\",\n            \"This cannot be undone!\",\n            \"\",\n            \"The previous key will be lost forever if you haven't backed it up.\",\n          ]);\n\n          const confirmReplace = await confirm({\n            message: `Replace existing key for ecloud?`,\n            default: false,\n          });\n\n          if (!confirmReplace) {\n            this.log(\n              \"\\nKey not stored. If you did not save your new key when it was displayed, it is now lost and cannot be recovered.\",\n            );\n            return;\n          }\n        }\n\n        // Store the key\n        try {\n          await storePrivateKey(privateKey);\n          this.log(`\\n✓ Private key stored in OS keyring`);\n          this.log(`✓ Address: ${address}`);\n          this.log(\"\\nYou can now use ecloud commands without --private-key flag.\");\n        } catch (err: any) {\n          this.error(`Failed to store key: ${err.message}`);\n        }\n      } else {\n        this.log(\"\\nKey not stored in keyring.\");\n        this.log(\"Remember to save the key shown above in a secure location.\");\n      }\n    });\n  }\n}\n","/**\n * Security utilities for CLI\n *\n * Functions for securely displaying and handling sensitive content\n * like private keys.\n */\n\nimport { spawn, execSync } from \"child_process\";\nimport { platform } from \"os\";\nimport { select, password } from \"@inquirer/prompts\";\n\n/**\n * Display sensitive content using system pager (less/more)\n * Returns true if content was displayed, false if user aborted\n */\nexport async function showPrivateKey(content: string): Promise<boolean> {\n  // Try to use system pager\n  const pager = detectPager();\n\n  if (pager) {\n    try {\n      await runPager(pager, content);\n      return true;\n    } catch (err) {\n      console.error(`Failed to run pager: ${err}`);\n      // Fall through to fallback\n    }\n  }\n\n  // No pager available - give user a choice\n  console.log(\"\\nNo pager (less/more) found on PATH.\");\n  console.log(\"For security, avoid printing private keys to the terminal.\");\n  console.log(\"\");\n\n  const choice = await select({\n    message: \"Choose an option:\",\n    choices: [\n      { name: \"Abort (recommended)\", value: \"abort\" },\n      { name: \"Print and clear screen\", value: \"print\" },\n    ],\n  });\n\n  if (choice === \"print\") {\n    console.log(content);\n    console.log(\"\");\n    console.log(\"Press Enter after you have securely saved the key.\");\n    console.log(\"The screen will be cleared...\");\n\n    // Wait for Enter\n    await password({\n      message: \"\",\n      mask: \"\",\n    });\n\n    clearTerminal();\n    return true;\n  }\n\n  return false; // User aborted\n}\n\n/**\n * Detect system pager (less or more)\n */\nfunction detectPager(): string | null {\n  // Check PAGER env var first\n  if (process.env.PAGER) {\n    const pagerEnv = process.env.PAGER.trim();\n    // Only allow simple command names without arguments or special characters\n    if (/^[a-zA-Z0-9_-]+$/.test(pagerEnv)) {\n      return pagerEnv;\n    }\n  }\n\n  // Try common pagers\n  const pagers = [\"less\", \"more\"];\n\n  for (const pagerCmd of pagers) {\n    if (commandExists(pagerCmd)) {\n      return pagerCmd;\n    }\n  }\n\n  return null;\n}\n\n/**\n * Run pager with content\n */\nfunction runPager(pager: string, content: string): Promise<void> {\n  return new Promise((resolve, reject) => {\n    const child = spawn(pager, [], {\n      stdio: [\"pipe\", \"inherit\", \"inherit\"],\n    });\n\n    child.on(\"error\", reject);\n    child.on(\"exit\", (code) => {\n      if (code === 0) {\n        resolve();\n      } else {\n        reject(new Error(`Pager exited with code ${code}`));\n      }\n    });\n\n    try {\n      const written = child.stdin!.write(content);\n      if (!written) {\n        child.stdin!.once(\"drain\", () => {\n          try {\n            child.stdin!.end();\n          } catch (err) {\n            reject(err);\n          }\n        });\n      } else {\n        child.stdin!.end();\n      }\n    } catch (err) {\n      reject(err);\n    }\n  });\n}\n\n/**\n * Check if command exists\n */\nfunction commandExists(command: string): boolean {\n  try {\n    const cmd = platform() === \"win32\" ? `where ${command}` : `which ${command}`;\n    execSync(cmd, { stdio: \"ignore\" });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Clear terminal screen\n */\nexport function clearTerminal(): void {\n  if (platform() === \"win32\") {\n    process.stdout.write(\"\\x1Bc\");\n  } else {\n    process.stdout.write(\"\\x1B[2J\\x1B[3J\\x1B[H\");\n  }\n}\n\n/**\n * Get hidden input (password-style)\n */\nexport async function getHiddenInput(message: string): Promise<string> {\n  return await password({\n    message,\n    mask: \"*\",\n  });\n}\n\n/**\n * Display multi-line warning for destructive operations\n */\nexport function displayWarning(lines: string[]): void {\n  const width = lines.length > 0 ? Math.max(...lines.map((l) => l.length)) + 4 : 4;\n  const border = \"⚠\".repeat(width);\n\n  console.log(\"\");\n  console.log(border);\n  for (const line of lines) {\n    console.log(`⚠  ${line}`);\n  }\n  console.log(border);\n  console.log(\"\");\n}\n","/**\n * Telemetry utilities for CLI commands\n *\n * Provides helpers to wrap command execution with telemetry tracking\n */\n\nimport {\n  createTelemetryClient,\n  createAppEnvironment,\n  createMetricsContext,\n  addMetric,\n  addMetricWithDimensions,\n  emitMetrics,\n  type TelemetryClient,\n  getBuildType,\n} from \"@layr-labs/ecloud-sdk\";\nimport { Command } from \"@oclif/core\";\nimport {\n  getDefaultEnvironment,\n  getOrCreateUserUUID,\n  getGlobalTelemetryPreference,\n} from \"./utils/globalConfig\";\n\n/**\n * Create a telemetry client for CLI usage\n */\nexport function createCLITelemetryClient(): TelemetryClient {\n  // Get user UUID from CLI's globalConfig (handles I/O)\n  const userUUID = getOrCreateUserUUID();\n  const environment = createAppEnvironment(userUUID);\n\n  // Get telemetry preference from CLI's globalConfig\n  const telemetryEnabled = getGlobalTelemetryPreference();\n\n  return createTelemetryClient(environment, \"ecloud-cli\", {\n    telemetryEnabled: telemetryEnabled !== false, // Enabled by default, disabled only if explicitly set to false\n  });\n}\n\n/**\n * Wrap a command execution with telemetry\n *\n * @param command - The CLI command instance\n * @param action - The command action to execute\n * @returns The result of the action\n */\nexport async function withTelemetry<T>(command: Command, action: () => Promise<T>): Promise<T> {\n  const client = createCLITelemetryClient();\n  const metrics = createMetricsContext();\n\n  // Set source to identify CLI usage\n  metrics.properties[\"source\"] = \"ecloud-cli\";\n\n  // Set command name in properties\n  metrics.properties[\"command\"] = command.id || command.constructor.name;\n\n  // Set environment in properties\n  const environment = getDefaultEnvironment() || \"sepolia\";\n  metrics.properties[\"environment\"] = environment;\n\n  // Set buildType in properties\n  const buildType = getBuildType() || \"prod\";\n  metrics.properties[\"build_type\"] = buildType;\n\n  // Set CLI version if available\n  const cliVersion = command.config.version;\n  if (cliVersion) {\n    metrics.properties[\"cli_version\"] = cliVersion;\n  }\n\n  // Add initial count metric\n  addMetric(metrics, \"Count\", 1);\n\n  let actionError: Error | undefined;\n  let result: T;\n\n  try {\n    result = await action();\n    return result;\n  } catch (err) {\n    actionError = err instanceof Error ? err : new Error(String(err));\n    throw err;\n  } finally {\n    // Add result metric\n    const resultValue = actionError ? \"Failure\" : \"Success\";\n    const dimensions: Record<string, string> = {};\n    if (actionError) {\n      dimensions[\"error\"] = actionError.message;\n    }\n    addMetricWithDimensions(metrics, resultValue, 1, dimensions);\n\n    // Add duration metric\n    const duration = Date.now() - metrics.startTime.getTime();\n    addMetric(metrics, \"DurationMilliseconds\", duration);\n\n    // Emit all metrics\n    try {\n      await emitMetrics(client, metrics);\n      await client.close();\n    } catch {\n      // Silently ignore telemetry errors\n    }\n  }\n}\n","/**\n * Global configuration management\n *\n * Stores user-level configuration that persists across all CLI usage.\n * - $XDG_CONFIG_HOME/ecloud[BuildSuffix]/config.yaml (if XDG_CONFIG_HOME is set)\n * - Or ~/.config/ecloud[BuildSuffix]/config.yaml (fallback)\n *\n * Where BuildSuffix is:\n * - \"\" (empty) for production builds\n * - \"-dev\" for development builds\n */\n\nimport * as fs from \"fs\";\nimport * as path from \"path\";\nimport * as os from \"os\";\nimport { load as loadYaml, dump as dumpYaml } from \"js-yaml\";\nimport { getBuildType } from \"@layr-labs/ecloud-sdk\";\nimport * as crypto from \"crypto\";\nconst GLOBAL_CONFIG_FILE = \"config.yaml\";\n\nexport interface ProfileCacheEntry {\n  updated_at: number; // Unix timestamp in milliseconds\n  profiles: { [appId: string]: string }; // appId -> profile name\n}\n\nexport interface GlobalConfig {\n  first_run?: boolean;\n  telemetry_enabled?: boolean;\n  user_uuid?: string;\n  default_environment?: string;\n  last_version_check?: number;\n  last_known_version?: string;\n  profile_cache?: {\n    [environment: string]: ProfileCacheEntry;\n  };\n  directory_links?: {\n    [environment: string]: {\n      [directoryPath: string]: string;\n    };\n  };\n}\n\n// Profile cache TTL: 24 hours in milliseconds\nconst PROFILE_CACHE_TTL_MS = 24 * 60 * 60 * 1000;\n\n/**\n * Get the XDG-compliant directory where global ecloud config should be stored\n */\nfunction getGlobalConfigDir(): string {\n  // First check XDG_CONFIG_HOME\n  const configHome = process.env.XDG_CONFIG_HOME;\n\n  let baseDir: string;\n  if (configHome && path.isAbsolute(configHome)) {\n    baseDir = configHome;\n  } else {\n    // Fall back to ~/.config\n    baseDir = path.join(os.homedir(), \".config\");\n  }\n\n  // Use environment-specific config directory\n  const buildType = getBuildType();\n  const buildSuffix = buildType === \"dev\" ? \"-dev\" : \"\";\n  const configDirName = `ecloud${buildSuffix}`;\n\n  return path.join(baseDir, configDirName);\n}\n\n/**\n * Get the full path to the global config file\n */\nfunction getGlobalConfigPath(): string {\n  return path.join(getGlobalConfigDir(), GLOBAL_CONFIG_FILE);\n}\n\n/**\n * Load global configuration, creating defaults if needed\n */\nexport function loadGlobalConfig(): GlobalConfig {\n  const configPath = getGlobalConfigPath();\n\n  // If file doesn't exist, return defaults for first run\n  if (!fs.existsSync(configPath)) {\n    return {\n      first_run: true,\n    };\n  }\n\n  try {\n    const content = fs.readFileSync(configPath, \"utf-8\");\n    const config = loadYaml(content) as GlobalConfig;\n    return config || { first_run: true };\n  } catch {\n    // If parsing fails, return defaults\n    return {\n      first_run: true,\n    };\n  }\n}\n\n/**\n * Save global configuration to disk\n */\nexport function saveGlobalConfig(config: GlobalConfig): void {\n  const configPath = getGlobalConfigPath();\n\n  // Ensure directory exists\n  const configDir = path.dirname(configPath);\n  fs.mkdirSync(configDir, { recursive: true, mode: 0o755 });\n\n  // Write config file\n  const content = dumpYaml(config, { lineWidth: -1 });\n  fs.writeFileSync(configPath, content, { mode: 0o644 });\n}\n\nfunction normalizeDirectoryPath(directoryPath: string): string {\n  const resolved = path.resolve(directoryPath);\n  try {\n    return fs.realpathSync(resolved);\n  } catch {\n    return resolved;\n  }\n}\n\n/**\n * Get linked app ID for a directory in an environment\n */\nexport function getLinkedAppForDirectory(environment: string, directoryPath: string): string | null {\n  if (!directoryPath) {\n    return null;\n  }\n\n  const config = loadGlobalConfig();\n  const links = config.directory_links?.[environment];\n  if (!links) {\n    return null;\n  }\n\n  const normalizedPath = normalizeDirectoryPath(directoryPath);\n  const appId = links[normalizedPath];\n  return appId || null;\n}\n\n/**\n * Link a directory to an app ID in an environment\n */\nexport function setLinkedAppForDirectory(\n  environment: string,\n  directoryPath: string,\n  appId: string,\n): void {\n  if (!directoryPath || !environment) {\n    return;\n  }\n\n  const config = loadGlobalConfig();\n  if (!config.directory_links) {\n    config.directory_links = {};\n  }\n  if (!config.directory_links[environment]) {\n    config.directory_links[environment] = {};\n  }\n\n  const normalizedPath = normalizeDirectoryPath(directoryPath);\n  // Normalize appId to lowercase for consistent lookups\n  config.directory_links[environment][normalizedPath] = appId.toLowerCase();\n  saveGlobalConfig(config);\n}\n\n/**\n * Get the user's preferred deployment environment\n */\nexport function getDefaultEnvironment(): string | undefined {\n  const config = loadGlobalConfig();\n  return config.default_environment;\n}\n\n/**\n * Set the user's preferred deployment environment\n */\nexport function setDefaultEnvironment(environment: string): void {\n  const config = loadGlobalConfig();\n  config.default_environment = environment;\n  config.first_run = false; // No longer first run after setting environment\n  saveGlobalConfig(config);\n}\n\n/**\n * Check if this is the user's first time running the CLI\n */\nexport function isFirstRun(): boolean {\n  const config = loadGlobalConfig();\n  return config.first_run === true;\n}\n\n/**\n * Mark that the first run has been completed\n */\nexport function markFirstRunComplete(): void {\n  const config = loadGlobalConfig();\n  config.first_run = false;\n  saveGlobalConfig(config);\n}\n\n/**\n * Get the global telemetry preference\n */\nexport function getGlobalTelemetryPreference(): boolean | undefined {\n  const config = loadGlobalConfig();\n  return config.telemetry_enabled;\n}\n\n/**\n * Set the global telemetry preference\n */\nexport function setGlobalTelemetryPreference(enabled: boolean): void {\n  const config = loadGlobalConfig();\n  config.telemetry_enabled = enabled;\n  config.first_run = false; // No longer first run after setting preference\n  saveGlobalConfig(config);\n}\n\n// ==================== Profile Cache Functions ====================\n\n/**\n * Get cached profile names for an environment\n * Returns null if cache is missing or expired (older than 24 hours)\n */\nexport function getProfileCache(environment: string): Record<string, string> | null {\n  const config = loadGlobalConfig();\n  const cacheEntry = config.profile_cache?.[environment];\n\n  if (!cacheEntry) {\n    return null;\n  }\n\n  // Check if cache is expired\n  const now = Date.now();\n  if (now - cacheEntry.updated_at > PROFILE_CACHE_TTL_MS) {\n    return null;\n  }\n\n  return cacheEntry.profiles;\n}\n\n/**\n * Set cached profile names for an environment\n */\nexport function setProfileCache(environment: string, profiles: Record<string, string>): void {\n  const config = loadGlobalConfig();\n\n  if (!config.profile_cache) {\n    config.profile_cache = {};\n  }\n\n  config.profile_cache[environment] = {\n    updated_at: Date.now(),\n    profiles,\n  };\n\n  saveGlobalConfig(config);\n}\n\n/**\n * Invalidate profile cache for a specific environment or all environments\n */\nexport function invalidateProfileCache(environment?: string): void {\n  const config = loadGlobalConfig();\n\n  if (!config.profile_cache) {\n    return;\n  }\n\n  if (environment) {\n    // Invalidate specific environment\n    delete config.profile_cache[environment];\n  } else {\n    // Invalidate all environments\n    config.profile_cache = {};\n  }\n\n  saveGlobalConfig(config);\n}\n\n/**\n * Update a single profile name in the cache\n * This is useful after deploy or profile set to update just one entry\n */\nexport function updateProfileCacheEntry(\n  environment: string,\n  appId: string,\n  profileName: string,\n): void {\n  const config = loadGlobalConfig();\n\n  if (!config.profile_cache) {\n    config.profile_cache = {};\n  }\n\n  if (!config.profile_cache[environment]) {\n    config.profile_cache[environment] = {\n      updated_at: Date.now(),\n      profiles: {},\n    };\n  }\n\n  // Normalize appId to lowercase for consistent lookups\n  const normalizedAppId = appId.toLowerCase();\n  config.profile_cache[environment].profiles[normalizedAppId] = profileName;\n  config.profile_cache[environment].updated_at = Date.now();\n\n  saveGlobalConfig(config);\n}\n\n/**\n * Get the user UUID from global config, or generate a new one if it doesn't exist\n */\nexport function getOrCreateUserUUID(): string {\n  const config = loadGlobalConfig();\n  if (config.user_uuid) {\n    return config.user_uuid;\n  }\n\n  // Generate a new UUID (v4)\n  const uuid = generateUUID();\n\n  // Save it to config\n  config.user_uuid = uuid;\n  config.first_run = false;\n  saveGlobalConfig(config);\n\n  return uuid;\n}\n\n/**\n * Generate a UUID v4\n */\nfunction generateUUID(): string {\n  // UUID v4 format: xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx\n  // Use cryptographically secure random values.\n  const bytes = crypto.randomBytes(16);\n  // Per RFC 4122 section 4.4, set bits for version and `clock_seq_hi_and_reserved`\n  bytes[6] = (bytes[6] & 0x0f) | 0x40; // Version 4\n  bytes[8] = (bytes[8] & 0x3f) | 0x80; // Variant 10\n  const hex = Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\"));\n  return (\n    hex.slice(0, 4).join(\"\") +\n    hex.slice(4, 6).join(\"\") +\n    \"-\" +\n    hex.slice(6, 8).join(\"\") +\n    \"-\" +\n    hex.slice(8, 10).join(\"\") +\n    \"-\" +\n    hex.slice(10, 12).join(\"\") +\n    \"-\" +\n    hex.slice(12, 16).join(\"\")\n  );\n}\n\n/**\n * Save user UUID to global config (preserves existing UUID if present)\n */\nexport function saveUserUUID(userUUID: string): void {\n  const config = loadGlobalConfig();\n  // Only update if not already set\n  if (!config.user_uuid) {\n    config.user_uuid = userUUID;\n    saveGlobalConfig(config);\n  }\n}\n"],"mappings":";;;AAMA,SAAS,SAAS,aAAa;AAC/B,SAAS,eAAe;AACxB,SAAS,uBAAuB,iBAAiB,iBAAiB;;;ACDlE,SAAS,OAAO,gBAAgB;AAChC,SAAS,gBAAgB;AACzB,SAAS,QAAQ,gBAAgB;AAMjC,eAAsB,eAAe,SAAmC;AAEtE,QAAM,QAAQ,YAAY;AAE1B,MAAI,OAAO;AACT,QAAI;AACF,YAAM,SAAS,OAAO,OAAO;AAC7B,aAAO;AAAA,IACT,SAAS,KAAK;AACZ,cAAQ,MAAM,wBAAwB,GAAG,EAAE;AAAA,IAE7C;AAAA,EACF;AAGA,UAAQ,IAAI,uCAAuC;AACnD,UAAQ,IAAI,4DAA4D;AACxE,UAAQ,IAAI,EAAE;AAEd,QAAM,SAAS,MAAM,OAAO;AAAA,IAC1B,SAAS;AAAA,IACT,SAAS;AAAA,MACP,EAAE,MAAM,uBAAuB,OAAO,QAAQ;AAAA,MAC9C,EAAE,MAAM,0BAA0B,OAAO,QAAQ;AAAA,IACnD;AAAA,EACF,CAAC;AAED,MAAI,WAAW,SAAS;AACtB,YAAQ,IAAI,OAAO;AACnB,YAAQ,IAAI,EAAE;AACd,YAAQ,IAAI,oDAAoD;AAChE,YAAQ,IAAI,+BAA+B;AAG3C,UAAM,SAAS;AAAA,MACb,SAAS;AAAA,MACT,MAAM;AAAA,IACR,CAAC;AAED,kBAAc;AACd,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAKA,SAAS,cAA6B;AAEpC,MAAI,QAAQ,IAAI,OAAO;AACrB,UAAM,WAAW,QAAQ,IAAI,MAAM,KAAK;AAExC,QAAI,mBAAmB,KAAK,QAAQ,GAAG;AACrC,aAAO;AAAA,IACT;AAAA,EACF;AAGA,QAAM,SAAS,CAAC,QAAQ,MAAM;AAE9B,aAAW,YAAY,QAAQ;AAC7B,QAAI,cAAc,QAAQ,GAAG;AAC3B,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AACT;AAKA,SAAS,SAAS,OAAe,SAAgC;AAC/D,SAAO,IAAI,QAAQ,CAACA,UAAS,WAAW;AACtC,UAAM,QAAQ,MAAM,OAAO,CAAC,GAAG;AAAA,MAC7B,OAAO,CAAC,QAAQ,WAAW,SAAS;AAAA,IACtC,CAAC;AAED,UAAM,GAAG,SAAS,MAAM;AACxB,UAAM,GAAG,QAAQ,CAAC,SAAS;AACzB,UAAI,SAAS,GAAG;AACd,QAAAA,SAAQ;AAAA,MACV,OAAO;AACL,eAAO,IAAI,MAAM,0BAA0B,IAAI,EAAE,CAAC;AAAA,MACpD;AAAA,IACF,CAAC;AAED,QAAI;AACF,YAAM,UAAU,MAAM,MAAO,MAAM,OAAO;AAC1C,UAAI,CAAC,SAAS;AACZ,cAAM,MAAO,KAAK,SAAS,MAAM;AAC/B,cAAI;AACF,kBAAM,MAAO,IAAI;AAAA,UACnB,SAAS,KAAK;AACZ,mBAAO,GAAG;AAAA,UACZ;AAAA,QACF,CAAC;AAAA,MACH,OAAO;AACL,cAAM,MAAO,IAAI;AAAA,MACnB;AAAA,IACF,SAAS,KAAK;AACZ,aAAO,GAAG;AAAA,IACZ;AAAA,EACF,CAAC;AACH;AAKA,SAAS,cAAc,SAA0B;AAC/C,MAAI;AACF,UAAM,MAAM,SAAS,MAAM,UAAU,SAAS,OAAO,KAAK,SAAS,OAAO;AAC1E,aAAS,KAAK,EAAE,OAAO,SAAS,CAAC;AACjC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAKO,SAAS,gBAAsB;AACpC,MAAI,SAAS,MAAM,SAAS;AAC1B,YAAQ,OAAO,MAAM,OAAO;AAAA,EAC9B,OAAO;AACL,YAAQ,OAAO,MAAM,sBAAsB;AAAA,EAC7C;AACF;AAeO,SAAS,eAAe,OAAuB;AACpD,QAAM,QAAQ,MAAM,SAAS,IAAI,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI;AAC/E,QAAM,SAAS,SAAI,OAAO,KAAK;AAE/B,UAAQ,IAAI,EAAE;AACd,UAAQ,IAAI,MAAM;AAClB,aAAW,QAAQ,OAAO;AACxB,YAAQ,IAAI,WAAM,IAAI,EAAE;AAAA,EAC1B;AACA,UAAQ,IAAI,MAAM;AAClB,UAAQ,IAAI,EAAE;AAChB;;;ACrKA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA,gBAAAC;AAAA,OACK;;;ACHP,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,YAAY,QAAQ;AACpB,SAAS,QAAQ,UAAU,QAAQ,gBAAgB;AACnD,SAAS,oBAAoB;AAC7B,YAAY,YAAY;AACxB,IAAM,qBAAqB;AAyB3B,IAAM,uBAAuB,KAAK,KAAK,KAAK;AAK5C,SAAS,qBAA6B;AAEpC,QAAM,aAAa,QAAQ,IAAI;AAE/B,MAAI;AACJ,MAAI,cAAmB,gBAAW,UAAU,GAAG;AAC7C,cAAU;AAAA,EACZ,OAAO;AAEL,cAAe,UAAQ,WAAQ,GAAG,SAAS;AAAA,EAC7C;AAGA,QAAM,YAAY,aAAa;AAC/B,QAAM,cAAc,cAAc,QAAQ,SAAS;AACnD,QAAM,gBAAgB,SAAS,WAAW;AAE1C,SAAY,UAAK,SAAS,aAAa;AACzC;AAKA,SAAS,sBAA8B;AACrC,SAAY,UAAK,mBAAmB,GAAG,kBAAkB;AAC3D;AAKO,SAAS,mBAAiC;AAC/C,QAAM,aAAa,oBAAoB;AAGvC,MAAI,CAAI,cAAW,UAAU,GAAG;AAC9B,WAAO;AAAA,MACL,WAAW;AAAA,IACb;AAAA,EACF;AAEA,MAAI;AACF,UAAM,UAAa,gBAAa,YAAY,OAAO;AACnD,UAAM,SAAS,SAAS,OAAO;AAC/B,WAAO,UAAU,EAAE,WAAW,KAAK;AAAA,EACrC,QAAQ;AAEN,WAAO;AAAA,MACL,WAAW;AAAA,IACb;AAAA,EACF;AACF;AAKO,SAAS,iBAAiB,QAA4B;AAC3D,QAAM,aAAa,oBAAoB;AAGvC,QAAM,YAAiB,aAAQ,UAAU;AACzC,EAAG,aAAU,WAAW,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAGxD,QAAM,UAAU,SAAS,QAAQ,EAAE,WAAW,GAAG,CAAC;AAClD,EAAG,iBAAc,YAAY,SAAS,EAAE,MAAM,IAAM,CAAC;AACvD;AA2DO,SAAS,wBAA4C;AAC1D,QAAM,SAAS,iBAAiB;AAChC,SAAO,OAAO;AAChB;AAgCO,SAAS,+BAAoD;AAClE,QAAM,SAAS,iBAAiB;AAChC,SAAO,OAAO;AAChB;AA2GO,SAAS,sBAA8B;AAC5C,QAAM,SAAS,iBAAiB;AAChC,MAAI,OAAO,WAAW;AACpB,WAAO,OAAO;AAAA,EAChB;AAGA,QAAM,OAAO,aAAa;AAG1B,SAAO,YAAY;AACnB,SAAO,YAAY;AACnB,mBAAiB,MAAM;AAEvB,SAAO;AACT;AAKA,SAAS,eAAuB;AAG9B,QAAM,QAAe,mBAAY,EAAE;AAEnC,QAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,QAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,QAAM,MAAM,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AACpE,SACE,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,IACvB,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,IACvB,MACA,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,IACvB,MACA,IAAI,MAAM,GAAG,EAAE,EAAE,KAAK,EAAE,IACxB,MACA,IAAI,MAAM,IAAI,EAAE,EAAE,KAAK,EAAE,IACzB,MACA,IAAI,MAAM,IAAI,EAAE,EAAE,KAAK,EAAE;AAE7B;;;AD3UO,SAAS,2BAA4C;AAE1D,QAAM,WAAW,oBAAoB;AACrC,QAAM,cAAc,qBAAqB,QAAQ;AAGjD,QAAM,mBAAmB,6BAA6B;AAEtD,SAAO,sBAAsB,aAAa,cAAc;AAAA,IACtD,kBAAkB,qBAAqB;AAAA;AAAA,EACzC,CAAC;AACH;AASA,eAAsB,cAAiB,SAAkB,QAAsC;AAC7F,QAAM,SAAS,yBAAyB;AACxC,QAAM,UAAU,qBAAqB;AAGrC,UAAQ,WAAW,QAAQ,IAAI;AAG/B,UAAQ,WAAW,SAAS,IAAI,QAAQ,MAAM,QAAQ,YAAY;AAGlE,QAAM,cAAc,sBAAsB,KAAK;AAC/C,UAAQ,WAAW,aAAa,IAAI;AAGpC,QAAM,YAAYC,cAAa,KAAK;AACpC,UAAQ,WAAW,YAAY,IAAI;AAGnC,QAAM,aAAa,QAAQ,OAAO;AAClC,MAAI,YAAY;AACd,YAAQ,WAAW,aAAa,IAAI;AAAA,EACtC;AAGA,YAAU,SAAS,SAAS,CAAC;AAE7B,MAAI;AACJ,MAAI;AAEJ,MAAI;AACF,aAAS,MAAM,OAAO;AACtB,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,kBAAc,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAChE,UAAM;AAAA,EACR,UAAE;AAEA,UAAM,cAAc,cAAc,YAAY;AAC9C,UAAM,aAAqC,CAAC;AAC5C,QAAI,aAAa;AACf,iBAAW,OAAO,IAAI,YAAY;AAAA,IACpC;AACA,4BAAwB,SAAS,aAAa,GAAG,UAAU;AAG3D,UAAM,WAAW,KAAK,IAAI,IAAI,QAAQ,UAAU,QAAQ;AACxD,cAAU,SAAS,wBAAwB,QAAQ;AAGnD,QAAI;AACF,YAAM,YAAY,QAAQ,OAAO;AACjC,YAAM,OAAO,MAAM;AAAA,IACrB,QAAQ;AAAA,IAER;AAAA,EACF;AACF;;;AF3FA,IAAqB,eAArB,MAAqB,sBAAqB,QAAQ;AAAA,EAChD,OAAO,cAAc;AAAA,EAErB,OAAO,UAAU,CAAC,YAAY,UAAU;AAAA,EAExC,OAAO,WAAW;AAAA,IAChB;AAAA,IACA;AAAA,EACF;AAAA,EAEA,OAAO,QAAQ;AAAA,IACb,OAAO,MAAM,QAAQ;AAAA,MACnB,aAAa;AAAA,MACb,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,MAAqB;AACzB,WAAO,cAAc,MAAM,YAAY;AACrC,YAAM,EAAE,MAAM,IAAI,MAAM,KAAK,MAAM,aAAY;AAG/C,WAAK,IAAI,iCAAiC;AAC1C,YAAM,EAAE,YAAY,QAAQ,IAAI,sBAAsB;AAGtD,YAAM,UAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,eAOP,OAAO;AAAA,eACP,UAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAWnB,YAAM,YAAY,MAAM,eAAe,OAAO;AAE9C,UAAI,CAAC,WAAW;AACd,aAAK,IAAI,2BAA2B;AACpC;AAAA,MACF;AAGA,UAAI,cAAc,MAAM;AAExB,UAAI,CAAC,eAAe,WAAW;AAC7B,sBAAc,MAAM,QAAQ;AAAA,UAC1B,SAAS;AAAA,UACT,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AAEA,UAAI,aAAa;AAEf,cAAM,SAAS,MAAM,UAAU;AAE/B,YAAI,QAAQ;AACV,yBAAe;AAAA,YACb;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,UACF,CAAC;AAED,gBAAM,iBAAiB,MAAM,QAAQ;AAAA,YACnC,SAAS;AAAA,YACT,SAAS;AAAA,UACX,CAAC;AAED,cAAI,CAAC,gBAAgB;AACnB,iBAAK;AAAA,cACH;AAAA,YACF;AACA;AAAA,UACF;AAAA,QACF;AAGA,YAAI;AACF,gBAAM,gBAAgB,UAAU;AAChC,eAAK,IAAI;AAAA,wCAAsC;AAC/C,eAAK,IAAI,mBAAc,OAAO,EAAE;AAChC,eAAK,IAAI,+DAA+D;AAAA,QAC1E,SAAS,KAAU;AACjB,eAAK,MAAM,wBAAwB,IAAI,OAAO,EAAE;AAAA,QAClD;AAAA,MACF,OAAO;AACL,aAAK,IAAI,8BAA8B;AACvC,aAAK,IAAI,4DAA4D;AAAA,MACvE;AAAA,IACF,CAAC;AAAA,EACH;AACF;","names":["resolve","getBuildType","getBuildType"]}
+{"version":3,"sources":["../../../src/commands/auth/generate.ts","../../../src/utils/security.ts","../../../src/telemetry.ts","../../../src/utils/globalConfig.ts"],"sourcesContent":["/**\n * Auth Generate Command\n *\n * Generate a new private key and optionally store it in OS keyring\n */\n\nimport { Command, Flags } from \"@oclif/core\";\nimport { confirm } from \"@inquirer/prompts\";\nimport { generateNewPrivateKey, storePrivateKey, keyExists } from \"@layr-labs/ecloud-sdk\";\nimport { showPrivateKey, displayWarning } from \"../../utils/security\";\nimport { withTelemetry } from \"../../telemetry\";\n\nexport default class AuthGenerate extends Command {\n  static description = \"Generate a new private key\";\n\n  static aliases = [\"auth:gen\", \"auth:new\"];\n\n  static examples = [\n    \"<%= config.bin %> <%= command.id %>\",\n    \"<%= config.bin %> <%= command.id %> --store\",\n  ];\n\n  static flags = {\n    store: Flags.boolean({\n      description: \"Automatically store in OS keyring\",\n      default: false,\n    }),\n  };\n\n  async run(): Promise<void> {\n    return withTelemetry(this, async () => {\n      const { flags } = await this.parse(AuthGenerate);\n\n      // Generate new key\n      this.log(\"Generating new private key...\\n\");\n      const { privateKey, address } = generateNewPrivateKey();\n\n      // Display key securely\n      const content = `\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\nA new private key was generated for you.\n\nIMPORTANT: You MUST backup this key now.\n           It will never be shown again.\n\nAddress:     ${address}\nPrivate key: ${privateKey}\n\n⚠️  SECURITY WARNING:\n   • Anyone with this key can control your account\n   • Never share it or commit it to version control\n   • Store it in a secure password manager\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\nPress 'q' to exit and continue...\n`;\n\n      const displayed = await showPrivateKey(content);\n\n      if (!displayed) {\n        this.log(\"Key generation cancelled.\");\n        return;\n      }\n\n      // Ask about storing\n      let shouldStore = flags.store;\n\n      if (!shouldStore && displayed) {\n        shouldStore = await confirm({\n          message: \"Store this key in your OS keyring?\",\n          default: true,\n        });\n      }\n\n      if (shouldStore) {\n        // Check if key already exists\n        const exists = await keyExists();\n\n        if (exists) {\n          displayWarning([\n            `WARNING: A private key for ecloud already exists!`,\n            \"If you continue, the existing key will be PERMANENTLY REPLACED.\",\n            \"This cannot be undone!\",\n            \"\",\n            \"The previous key will be lost forever if you haven't backed it up.\",\n          ]);\n\n          const confirmReplace = await confirm({\n            message: `Replace existing key for ecloud?`,\n            default: false,\n          });\n\n          if (!confirmReplace) {\n            this.log(\n              \"\\nKey not stored. If you did not save your new key when it was displayed, it is now lost and cannot be recovered.\",\n            );\n            return;\n          }\n        }\n\n        // Store the key\n        try {\n          await storePrivateKey(privateKey);\n          this.log(`\\n✓ Private key stored in OS keyring`);\n          this.log(`✓ Address: ${address}`);\n          this.log(\"\\nYou can now use ecloud commands without --private-key flag.\");\n        } catch (err: any) {\n          this.error(`Failed to store key: ${err.message}`);\n        }\n      } else {\n        this.log(\"\\nKey not stored in keyring.\");\n        this.log(\"Remember to save the key shown above in a secure location.\");\n      }\n    });\n  }\n}\n","/**\n * Security utilities for CLI\n *\n * Functions for securely displaying and handling sensitive content\n * like private keys.\n */\n\nimport { spawn, execSync } from \"child_process\";\nimport { platform } from \"os\";\nimport { select, password } from \"@inquirer/prompts\";\n\n/**\n * Display sensitive content using system pager (less/more)\n * Returns true if content was displayed, false if user aborted\n */\nexport async function showPrivateKey(content: string): Promise<boolean> {\n  // Try to use system pager\n  const pager = detectPager();\n\n  if (pager) {\n    try {\n      await runPager(pager, content);\n      return true;\n    } catch (err) {\n      console.error(`Failed to run pager: ${err}`);\n      // Fall through to fallback\n    }\n  }\n\n  // No pager available - give user a choice\n  console.log(\"\\nNo pager (less/more) found on PATH.\");\n  console.log(\"For security, avoid printing private keys to the terminal.\");\n  console.log(\"\");\n\n  const choice = await select({\n    message: \"Choose an option:\",\n    choices: [\n      { name: \"Abort (recommended)\", value: \"abort\" },\n      { name: \"Print and clear screen\", value: \"print\" },\n    ],\n  });\n\n  if (choice === \"print\") {\n    console.log(content);\n    console.log(\"\");\n    console.log(\"Press Enter after you have securely saved the key.\");\n    console.log(\"The screen will be cleared...\");\n\n    // Wait for Enter\n    await password({\n      message: \"\",\n      mask: \"\",\n    });\n\n    clearTerminal();\n    return true;\n  }\n\n  return false; // User aborted\n}\n\n/**\n * Detect system pager (less or more)\n */\nfunction detectPager(): string | null {\n  // Check PAGER env var first\n  if (process.env.PAGER) {\n    const pagerEnv = process.env.PAGER.trim();\n    // Only allow simple command names without arguments or special characters\n    if (/^[a-zA-Z0-9_-]+$/.test(pagerEnv)) {\n      return pagerEnv;\n    }\n  }\n\n  // Try common pagers\n  const pagers = [\"less\", \"more\"];\n\n  for (const pagerCmd of pagers) {\n    if (commandExists(pagerCmd)) {\n      return pagerCmd;\n    }\n  }\n\n  return null;\n}\n\n/**\n * Run pager with content\n */\nfunction runPager(pager: string, content: string): Promise<void> {\n  return new Promise((resolve, reject) => {\n    const child = spawn(pager, [], {\n      stdio: [\"pipe\", \"inherit\", \"inherit\"],\n    });\n\n    child.on(\"error\", reject);\n    child.on(\"exit\", (code) => {\n      if (code === 0) {\n        resolve();\n      } else {\n        reject(new Error(`Pager exited with code ${code}`));\n      }\n    });\n\n    try {\n      const written = child.stdin!.write(content);\n      if (!written) {\n        child.stdin!.once(\"drain\", () => {\n          try {\n            child.stdin!.end();\n          } catch (err) {\n            reject(err);\n          }\n        });\n      } else {\n        child.stdin!.end();\n      }\n    } catch (err) {\n      reject(err);\n    }\n  });\n}\n\n/**\n * Check if command exists\n */\nfunction commandExists(command: string): boolean {\n  try {\n    const cmd = platform() === \"win32\" ? `where ${command}` : `which ${command}`;\n    execSync(cmd, { stdio: \"ignore\" });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Clear terminal screen\n */\nexport function clearTerminal(): void {\n  if (platform() === \"win32\") {\n    process.stdout.write(\"\\x1Bc\");\n  } else {\n    process.stdout.write(\"\\x1B[2J\\x1B[3J\\x1B[H\");\n  }\n}\n\n/**\n * Get hidden input (password-style)\n */\nexport async function getHiddenInput(message: string): Promise<string> {\n  return await password({\n    message,\n    mask: \"*\",\n  });\n}\n\n/**\n * Display multi-line warning for destructive operations\n */\nexport function displayWarning(lines: string[]): void {\n  const width = lines.length > 0 ? Math.max(...lines.map((l) => l.length)) + 4 : 4;\n  const border = \"⚠\".repeat(width);\n\n  console.log(\"\");\n  console.log(border);\n  for (const line of lines) {\n    console.log(`⚠  ${line}`);\n  }\n  console.log(border);\n  console.log(\"\");\n}\n","/**\n * Telemetry utilities for CLI commands\n *\n * Provides helpers to wrap command execution with telemetry tracking\n */\n\nimport {\n  createTelemetryClient,\n  createAppEnvironment,\n  createMetricsContext,\n  addMetric,\n  addMetricWithDimensions,\n  emitMetrics,\n  type TelemetryClient,\n  getBuildType,\n} from \"@layr-labs/ecloud-sdk\";\nimport { Command } from \"@oclif/core\";\nimport {\n  getDefaultEnvironment,\n  getOrCreateUserUUID,\n  getGlobalTelemetryPreference,\n} from \"./utils/globalConfig\";\n\n/**\n * Create a telemetry client for CLI usage\n */\nexport function createCLITelemetryClient(): TelemetryClient {\n  // Get user UUID from CLI's globalConfig (handles I/O)\n  const userUUID = getOrCreateUserUUID();\n  const environment = createAppEnvironment(userUUID);\n\n  // Get telemetry preference from CLI's globalConfig\n  const telemetryEnabled = getGlobalTelemetryPreference();\n\n  return createTelemetryClient(environment, \"ecloud-cli\", {\n    telemetryEnabled: telemetryEnabled !== false, // Enabled by default, disabled only if explicitly set to false\n  });\n}\n\n/**\n * Wrap a command execution with telemetry\n *\n * @param command - The CLI command instance\n * @param action - The command action to execute\n * @returns The result of the action\n */\nexport async function withTelemetry<T>(command: Command, action: () => Promise<T>): Promise<T> {\n  const client = createCLITelemetryClient();\n  const metrics = createMetricsContext();\n\n  // Set source to identify CLI usage\n  metrics.properties[\"source\"] = \"ecloud-cli\";\n\n  // Set command name in properties\n  metrics.properties[\"command\"] = command.id || command.constructor.name;\n\n  // Set environment in properties\n  const environment = getDefaultEnvironment() || \"sepolia\";\n  metrics.properties[\"environment\"] = environment;\n\n  // Set buildType in properties\n  const buildType = getBuildType() || \"prod\";\n  metrics.properties[\"build_type\"] = buildType;\n\n  // Set CLI version if available\n  const cliVersion = command.config.version;\n  if (cliVersion) {\n    metrics.properties[\"cli_version\"] = cliVersion;\n  }\n\n  // Add initial count metric\n  addMetric(metrics, \"Count\", 1);\n\n  let actionError: Error | undefined;\n  let result: T;\n\n  try {\n    result = await action();\n    return result;\n  } catch (err) {\n    actionError = err instanceof Error ? err : new Error(String(err));\n    throw err;\n  } finally {\n    // Add result metric\n    const resultValue = actionError ? \"Failure\" : \"Success\";\n    const dimensions: Record<string, string> = {};\n    if (actionError) {\n      dimensions[\"error\"] = actionError.message;\n    }\n    addMetricWithDimensions(metrics, resultValue, 1, dimensions);\n\n    // Add duration metric\n    const duration = Date.now() - metrics.startTime.getTime();\n    addMetric(metrics, \"DurationMilliseconds\", duration);\n\n    // Emit all metrics\n    try {\n      await emitMetrics(client, metrics);\n      await client.close();\n    } catch {\n      // Silently ignore telemetry errors\n    }\n  }\n}\n","/**\n * Global configuration management\n *\n * Stores user-level configuration that persists across all CLI usage.\n * - $XDG_CONFIG_HOME/ecloud[BuildSuffix]/config.yaml (if XDG_CONFIG_HOME is set)\n * - Or ~/.config/ecloud[BuildSuffix]/config.yaml (fallback)\n *\n * Where BuildSuffix is:\n * - \"\" (empty) for production builds\n * - \"-dev\" for development builds\n */\n\nimport * as fs from \"fs\";\nimport * as path from \"path\";\nimport * as os from \"os\";\nimport { load as loadYaml, dump as dumpYaml } from \"js-yaml\";\nimport { getBuildType } from \"@layr-labs/ecloud-sdk\";\nimport * as crypto from \"crypto\";\nconst GLOBAL_CONFIG_FILE = \"config.yaml\";\n\nexport interface ProfileCacheEntry {\n  updated_at: number; // Unix timestamp in milliseconds\n  profiles: { [appId: string]: string }; // appId -> profile name\n}\n\nexport interface GlobalConfig {\n  first_run?: boolean;\n  telemetry_enabled?: boolean;\n  user_uuid?: string;\n  default_environment?: string;\n  last_version_check?: number;\n  last_known_version?: string;\n  profile_cache?: {\n    [environment: string]: ProfileCacheEntry;\n  };\n  directory_links?: {\n    [environment: string]: {\n      [directoryPath: string]: string;\n    };\n  };\n}\n\n// Profile cache TTL: 24 hours in milliseconds\nconst PROFILE_CACHE_TTL_MS = 24 * 60 * 60 * 1000;\n\n/**\n * Get the XDG-compliant directory where global ecloud config should be stored\n */\nfunction getGlobalConfigDir(): string {\n  // First check XDG_CONFIG_HOME\n  const configHome = process.env.XDG_CONFIG_HOME;\n\n  let baseDir: string;\n  if (configHome && path.isAbsolute(configHome)) {\n    baseDir = configHome;\n  } else {\n    // Fall back to ~/.config\n    baseDir = path.join(os.homedir(), \".config\");\n  }\n\n  // Use environment-specific config directory\n  const buildType = getBuildType();\n  const buildSuffix = buildType === \"dev\" ? \"-dev\" : \"\";\n  const configDirName = `ecloud${buildSuffix}`;\n\n  return path.join(baseDir, configDirName);\n}\n\n/**\n * Get the full path to the global config file\n */\nfunction getGlobalConfigPath(): string {\n  return path.join(getGlobalConfigDir(), GLOBAL_CONFIG_FILE);\n}\n\n/**\n * Load global configuration, creating defaults if needed\n */\nexport function loadGlobalConfig(): GlobalConfig {\n  const configPath = getGlobalConfigPath();\n\n  // If file doesn't exist, return defaults for first run\n  if (!fs.existsSync(configPath)) {\n    return {\n      first_run: true,\n    };\n  }\n\n  try {\n    const content = fs.readFileSync(configPath, \"utf-8\");\n    const config = loadYaml(content) as GlobalConfig;\n    return config || { first_run: true };\n  } catch {\n    // If parsing fails, return defaults\n    return {\n      first_run: true,\n    };\n  }\n}\n\n/**\n * Save global configuration to disk\n */\nexport function saveGlobalConfig(config: GlobalConfig): void {\n  const configPath = getGlobalConfigPath();\n\n  // Ensure directory exists\n  const configDir = path.dirname(configPath);\n  fs.mkdirSync(configDir, { recursive: true, mode: 0o755 });\n\n  // Write config file\n  const content = dumpYaml(config, { lineWidth: -1 });\n  fs.writeFileSync(configPath, content, { mode: 0o644 });\n}\n\nfunction normalizeDirectoryPath(directoryPath: string): string {\n  const resolved = path.resolve(directoryPath);\n  try {\n    return fs.realpathSync(resolved);\n  } catch {\n    return resolved;\n  }\n}\n\n/**\n * Get linked app ID for a directory in an environment\n */\nexport function getLinkedAppForDirectory(\n  environment: string,\n  directoryPath: string,\n): string | null {\n  if (!directoryPath) {\n    return null;\n  }\n\n  const config = loadGlobalConfig();\n  const links = config.directory_links?.[environment];\n  if (!links) {\n    return null;\n  }\n\n  const normalizedPath = normalizeDirectoryPath(directoryPath);\n  const appId = links[normalizedPath];\n  return appId || null;\n}\n\n/**\n * Link a directory to an app ID in an environment\n */\nexport function setLinkedAppForDirectory(\n  environment: string,\n  directoryPath: string,\n  appId: string,\n): void {\n  if (!directoryPath || !environment) {\n    return;\n  }\n\n  const config = loadGlobalConfig();\n  if (!config.directory_links) {\n    config.directory_links = {};\n  }\n  if (!config.directory_links[environment]) {\n    config.directory_links[environment] = {};\n  }\n\n  const normalizedPath = normalizeDirectoryPath(directoryPath);\n  // Normalize appId to lowercase for consistent lookups\n  config.directory_links[environment][normalizedPath] = appId.toLowerCase();\n  saveGlobalConfig(config);\n}\n\n/**\n * Get the user's preferred deployment environment\n */\nexport function getDefaultEnvironment(): string | undefined {\n  const config = loadGlobalConfig();\n  return config.default_environment;\n}\n\n/**\n * Set the user's preferred deployment environment\n */\nexport function setDefaultEnvironment(environment: string): void {\n  const config = loadGlobalConfig();\n  config.default_environment = environment;\n  config.first_run = false; // No longer first run after setting environment\n  saveGlobalConfig(config);\n}\n\n/**\n * Check if this is the user's first time running the CLI\n */\nexport function isFirstRun(): boolean {\n  const config = loadGlobalConfig();\n  return config.first_run === true;\n}\n\n/**\n * Mark that the first run has been completed\n */\nexport function markFirstRunComplete(): void {\n  const config = loadGlobalConfig();\n  config.first_run = false;\n  saveGlobalConfig(config);\n}\n\n/**\n * Get the global telemetry preference\n */\nexport function getGlobalTelemetryPreference(): boolean | undefined {\n  const config = loadGlobalConfig();\n  return config.telemetry_enabled;\n}\n\n/**\n * Set the global telemetry preference\n */\nexport function setGlobalTelemetryPreference(enabled: boolean): void {\n  const config = loadGlobalConfig();\n  config.telemetry_enabled = enabled;\n  config.first_run = false; // No longer first run after setting preference\n  saveGlobalConfig(config);\n}\n\n// ==================== Profile Cache Functions ====================\n\n/**\n * Get cached profile names for an environment\n * Returns null if cache is missing or expired (older than 24 hours)\n */\nexport function getProfileCache(environment: string): Record<string, string> | null {\n  const config = loadGlobalConfig();\n  const cacheEntry = config.profile_cache?.[environment];\n\n  if (!cacheEntry) {\n    return null;\n  }\n\n  // Check if cache is expired\n  const now = Date.now();\n  if (now - cacheEntry.updated_at > PROFILE_CACHE_TTL_MS) {\n    return null;\n  }\n\n  return cacheEntry.profiles;\n}\n\n/**\n * Set cached profile names for an environment\n */\nexport function setProfileCache(environment: string, profiles: Record<string, string>): void {\n  const config = loadGlobalConfig();\n\n  if (!config.profile_cache) {\n    config.profile_cache = {};\n  }\n\n  config.profile_cache[environment] = {\n    updated_at: Date.now(),\n    profiles,\n  };\n\n  saveGlobalConfig(config);\n}\n\n/**\n * Invalidate profile cache for a specific environment or all environments\n */\nexport function invalidateProfileCache(environment?: string): void {\n  const config = loadGlobalConfig();\n\n  if (!config.profile_cache) {\n    return;\n  }\n\n  if (environment) {\n    // Invalidate specific environment\n    delete config.profile_cache[environment];\n  } else {\n    // Invalidate all environments\n    config.profile_cache = {};\n  }\n\n  saveGlobalConfig(config);\n}\n\n/**\n * Update a single profile name in the cache\n * This is useful after deploy or profile set to update just one entry\n */\nexport function updateProfileCacheEntry(\n  environment: string,\n  appId: string,\n  profileName: string,\n): void {\n  const config = loadGlobalConfig();\n\n  if (!config.profile_cache) {\n    config.profile_cache = {};\n  }\n\n  if (!config.profile_cache[environment]) {\n    config.profile_cache[environment] = {\n      updated_at: Date.now(),\n      profiles: {},\n    };\n  }\n\n  // Normalize appId to lowercase for consistent lookups\n  const normalizedAppId = appId.toLowerCase();\n  config.profile_cache[environment].profiles[normalizedAppId] = profileName;\n  config.profile_cache[environment].updated_at = Date.now();\n\n  saveGlobalConfig(config);\n}\n\n/**\n * Get the user UUID from global config, or generate a new one if it doesn't exist\n */\nexport function getOrCreateUserUUID(): string {\n  const config = loadGlobalConfig();\n  if (config.user_uuid) {\n    return config.user_uuid;\n  }\n\n  // Generate a new UUID (v4)\n  const uuid = generateUUID();\n\n  // Save it to config\n  config.user_uuid = uuid;\n  config.first_run = false;\n  saveGlobalConfig(config);\n\n  return uuid;\n}\n\n/**\n * Generate a UUID v4\n */\nfunction generateUUID(): string {\n  // UUID v4 format: xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx\n  // Use cryptographically secure random values.\n  const bytes = crypto.randomBytes(16);\n  // Per RFC 4122 section 4.4, set bits for version and `clock_seq_hi_and_reserved`\n  bytes[6] = (bytes[6] & 0x0f) | 0x40; // Version 4\n  bytes[8] = (bytes[8] & 0x3f) | 0x80; // Variant 10\n  const hex = Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\"));\n  return (\n    hex.slice(0, 4).join(\"\") +\n    hex.slice(4, 6).join(\"\") +\n    \"-\" +\n    hex.slice(6, 8).join(\"\") +\n    \"-\" +\n    hex.slice(8, 10).join(\"\") +\n    \"-\" +\n    hex.slice(10, 12).join(\"\") +\n    \"-\" +\n    hex.slice(12, 16).join(\"\")\n  );\n}\n\n/**\n * Save user UUID to global config (preserves existing UUID if present)\n */\nexport function saveUserUUID(userUUID: string): void {\n  const config = loadGlobalConfig();\n  // Only update if not already set\n  if (!config.user_uuid) {\n    config.user_uuid = userUUID;\n    saveGlobalConfig(config);\n  }\n}\n"],"mappings":";;;AAMA,SAAS,SAAS,aAAa;AAC/B,SAAS,eAAe;AACxB,SAAS,uBAAuB,iBAAiB,iBAAiB;;;ACDlE,SAAS,OAAO,gBAAgB;AAChC,SAAS,gBAAgB;AACzB,SAAS,QAAQ,gBAAgB;AAMjC,eAAsB,eAAe,SAAmC;AAEtE,QAAM,QAAQ,YAAY;AAE1B,MAAI,OAAO;AACT,QAAI;AACF,YAAM,SAAS,OAAO,OAAO;AAC7B,aAAO;AAAA,IACT,SAAS,KAAK;AACZ,cAAQ,MAAM,wBAAwB,GAAG,EAAE;AAAA,IAE7C;AAAA,EACF;AAGA,UAAQ,IAAI,uCAAuC;AACnD,UAAQ,IAAI,4DAA4D;AACxE,UAAQ,IAAI,EAAE;AAEd,QAAM,SAAS,MAAM,OAAO;AAAA,IAC1B,SAAS;AAAA,IACT,SAAS;AAAA,MACP,EAAE,MAAM,uBAAuB,OAAO,QAAQ;AAAA,MAC9C,EAAE,MAAM,0BAA0B,OAAO,QAAQ;AAAA,IACnD;AAAA,EACF,CAAC;AAED,MAAI,WAAW,SAAS;AACtB,YAAQ,IAAI,OAAO;AACnB,YAAQ,IAAI,EAAE;AACd,YAAQ,IAAI,oDAAoD;AAChE,YAAQ,IAAI,+BAA+B;AAG3C,UAAM,SAAS;AAAA,MACb,SAAS;AAAA,MACT,MAAM;AAAA,IACR,CAAC;AAED,kBAAc;AACd,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAKA,SAAS,cAA6B;AAEpC,MAAI,QAAQ,IAAI,OAAO;AACrB,UAAM,WAAW,QAAQ,IAAI,MAAM,KAAK;AAExC,QAAI,mBAAmB,KAAK,QAAQ,GAAG;AACrC,aAAO;AAAA,IACT;AAAA,EACF;AAGA,QAAM,SAAS,CAAC,QAAQ,MAAM;AAE9B,aAAW,YAAY,QAAQ;AAC7B,QAAI,cAAc,QAAQ,GAAG;AAC3B,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AACT;AAKA,SAAS,SAAS,OAAe,SAAgC;AAC/D,SAAO,IAAI,QAAQ,CAACA,UAAS,WAAW;AACtC,UAAM,QAAQ,MAAM,OAAO,CAAC,GAAG;AAAA,MAC7B,OAAO,CAAC,QAAQ,WAAW,SAAS;AAAA,IACtC,CAAC;AAED,UAAM,GAAG,SAAS,MAAM;AACxB,UAAM,GAAG,QAAQ,CAAC,SAAS;AACzB,UAAI,SAAS,GAAG;AACd,QAAAA,SAAQ;AAAA,MACV,OAAO;AACL,eAAO,IAAI,MAAM,0BAA0B,IAAI,EAAE,CAAC;AAAA,MACpD;AAAA,IACF,CAAC;AAED,QAAI;AACF,YAAM,UAAU,MAAM,MAAO,MAAM,OAAO;AAC1C,UAAI,CAAC,SAAS;AACZ,cAAM,MAAO,KAAK,SAAS,MAAM;AAC/B,cAAI;AACF,kBAAM,MAAO,IAAI;AAAA,UACnB,SAAS,KAAK;AACZ,mBAAO,GAAG;AAAA,UACZ;AAAA,QACF,CAAC;AAAA,MACH,OAAO;AACL,cAAM,MAAO,IAAI;AAAA,MACnB;AAAA,IACF,SAAS,KAAK;AACZ,aAAO,GAAG;AAAA,IACZ;AAAA,EACF,CAAC;AACH;AAKA,SAAS,cAAc,SAA0B;AAC/C,MAAI;AACF,UAAM,MAAM,SAAS,MAAM,UAAU,SAAS,OAAO,KAAK,SAAS,OAAO;AAC1E,aAAS,KAAK,EAAE,OAAO,SAAS,CAAC;AACjC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAKO,SAAS,gBAAsB;AACpC,MAAI,SAAS,MAAM,SAAS;AAC1B,YAAQ,OAAO,MAAM,OAAO;AAAA,EAC9B,OAAO;AACL,YAAQ,OAAO,MAAM,sBAAsB;AAAA,EAC7C;AACF;AAeO,SAAS,eAAe,OAAuB;AACpD,QAAM,QAAQ,MAAM,SAAS,IAAI,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI;AAC/E,QAAM,SAAS,SAAI,OAAO,KAAK;AAE/B,UAAQ,IAAI,EAAE;AACd,UAAQ,IAAI,MAAM;AAClB,aAAW,QAAQ,OAAO;AACxB,YAAQ,IAAI,WAAM,IAAI,EAAE;AAAA,EAC1B;AACA,UAAQ,IAAI,MAAM;AAClB,UAAQ,IAAI,EAAE;AAChB;;;ACrKA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA,gBAAAC;AAAA,OACK;;;ACHP,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,YAAY,QAAQ;AACpB,SAAS,QAAQ,UAAU,QAAQ,gBAAgB;AACnD,SAAS,oBAAoB;AAC7B,YAAY,YAAY;AACxB,IAAM,qBAAqB;AAyB3B,IAAM,uBAAuB,KAAK,KAAK,KAAK;AAK5C,SAAS,qBAA6B;AAEpC,QAAM,aAAa,QAAQ,IAAI;AAE/B,MAAI;AACJ,MAAI,cAAmB,gBAAW,UAAU,GAAG;AAC7C,cAAU;AAAA,EACZ,OAAO;AAEL,cAAe,UAAQ,WAAQ,GAAG,SAAS;AAAA,EAC7C;AAGA,QAAM,YAAY,aAAa;AAC/B,QAAM,cAAc,cAAc,QAAQ,SAAS;AACnD,QAAM,gBAAgB,SAAS,WAAW;AAE1C,SAAY,UAAK,SAAS,aAAa;AACzC;AAKA,SAAS,sBAA8B;AACrC,SAAY,UAAK,mBAAmB,GAAG,kBAAkB;AAC3D;AAKO,SAAS,mBAAiC;AAC/C,QAAM,aAAa,oBAAoB;AAGvC,MAAI,CAAI,cAAW,UAAU,GAAG;AAC9B,WAAO;AAAA,MACL,WAAW;AAAA,IACb;AAAA,EACF;AAEA,MAAI;AACF,UAAM,UAAa,gBAAa,YAAY,OAAO;AACnD,UAAM,SAAS,SAAS,OAAO;AAC/B,WAAO,UAAU,EAAE,WAAW,KAAK;AAAA,EACrC,QAAQ;AAEN,WAAO;AAAA,MACL,WAAW;AAAA,IACb;AAAA,EACF;AACF;AAKO,SAAS,iBAAiB,QAA4B;AAC3D,QAAM,aAAa,oBAAoB;AAGvC,QAAM,YAAiB,aAAQ,UAAU;AACzC,EAAG,aAAU,WAAW,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAGxD,QAAM,UAAU,SAAS,QAAQ,EAAE,WAAW,GAAG,CAAC;AAClD,EAAG,iBAAc,YAAY,SAAS,EAAE,MAAM,IAAM,CAAC;AACvD;AA8DO,SAAS,wBAA4C;AAC1D,QAAM,SAAS,iBAAiB;AAChC,SAAO,OAAO;AAChB;AAgCO,SAAS,+BAAoD;AAClE,QAAM,SAAS,iBAAiB;AAChC,SAAO,OAAO;AAChB;AA2GO,SAAS,sBAA8B;AAC5C,QAAM,SAAS,iBAAiB;AAChC,MAAI,OAAO,WAAW;AACpB,WAAO,OAAO;AAAA,EAChB;AAGA,QAAM,OAAO,aAAa;AAG1B,SAAO,YAAY;AACnB,SAAO,YAAY;AACnB,mBAAiB,MAAM;AAEvB,SAAO;AACT;AAKA,SAAS,eAAuB;AAG9B,QAAM,QAAe,mBAAY,EAAE;AAEnC,QAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,QAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,QAAM,MAAM,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AACpE,SACE,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,IACvB,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,IACvB,MACA,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,IACvB,MACA,IAAI,MAAM,GAAG,EAAE,EAAE,KAAK,EAAE,IACxB,MACA,IAAI,MAAM,IAAI,EAAE,EAAE,KAAK,EAAE,IACzB,MACA,IAAI,MAAM,IAAI,EAAE,EAAE,KAAK,EAAE;AAE7B;;;AD9UO,SAAS,2BAA4C;AAE1D,QAAM,WAAW,oBAAoB;AACrC,QAAM,cAAc,qBAAqB,QAAQ;AAGjD,QAAM,mBAAmB,6BAA6B;AAEtD,SAAO,sBAAsB,aAAa,cAAc;AAAA,IACtD,kBAAkB,qBAAqB;AAAA;AAAA,EACzC,CAAC;AACH;AASA,eAAsB,cAAiB,SAAkB,QAAsC;AAC7F,QAAM,SAAS,yBAAyB;AACxC,QAAM,UAAU,qBAAqB;AAGrC,UAAQ,WAAW,QAAQ,IAAI;AAG/B,UAAQ,WAAW,SAAS,IAAI,QAAQ,MAAM,QAAQ,YAAY;AAGlE,QAAM,cAAc,sBAAsB,KAAK;AAC/C,UAAQ,WAAW,aAAa,IAAI;AAGpC,QAAM,YAAYC,cAAa,KAAK;AACpC,UAAQ,WAAW,YAAY,IAAI;AAGnC,QAAM,aAAa,QAAQ,OAAO;AAClC,MAAI,YAAY;AACd,YAAQ,WAAW,aAAa,IAAI;AAAA,EACtC;AAGA,YAAU,SAAS,SAAS,CAAC;AAE7B,MAAI;AACJ,MAAI;AAEJ,MAAI;AACF,aAAS,MAAM,OAAO;AACtB,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,kBAAc,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAChE,UAAM;AAAA,EACR,UAAE;AAEA,UAAM,cAAc,cAAc,YAAY;AAC9C,UAAM,aAAqC,CAAC;AAC5C,QAAI,aAAa;AACf,iBAAW,OAAO,IAAI,YAAY;AAAA,IACpC;AACA,4BAAwB,SAAS,aAAa,GAAG,UAAU;AAG3D,UAAM,WAAW,KAAK,IAAI,IAAI,QAAQ,UAAU,QAAQ;AACxD,cAAU,SAAS,wBAAwB,QAAQ;AAGnD,QAAI;AACF,YAAM,YAAY,QAAQ,OAAO;AACjC,YAAM,OAAO,MAAM;AAAA,IACrB,QAAQ;AAAA,IAER;AAAA,EACF;AACF;;;AF3FA,IAAqB,eAArB,MAAqB,sBAAqB,QAAQ;AAAA,EAChD,OAAO,cAAc;AAAA,EAErB,OAAO,UAAU,CAAC,YAAY,UAAU;AAAA,EAExC,OAAO,WAAW;AAAA,IAChB;AAAA,IACA;AAAA,EACF;AAAA,EAEA,OAAO,QAAQ;AAAA,IACb,OAAO,MAAM,QAAQ;AAAA,MACnB,aAAa;AAAA,MACb,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,MAAqB;AACzB,WAAO,cAAc,MAAM,YAAY;AACrC,YAAM,EAAE,MAAM,IAAI,MAAM,KAAK,MAAM,aAAY;AAG/C,WAAK,IAAI,iCAAiC;AAC1C,YAAM,EAAE,YAAY,QAAQ,IAAI,sBAAsB;AAGtD,YAAM,UAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,eAOP,OAAO;AAAA,eACP,UAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAWnB,YAAM,YAAY,MAAM,eAAe,OAAO;AAE9C,UAAI,CAAC,WAAW;AACd,aAAK,IAAI,2BAA2B;AACpC;AAAA,MACF;AAGA,UAAI,cAAc,MAAM;AAExB,UAAI,CAAC,eAAe,WAAW;AAC7B,sBAAc,MAAM,QAAQ;AAAA,UAC1B,SAAS;AAAA,UACT,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AAEA,UAAI,aAAa;AAEf,cAAM,SAAS,MAAM,UAAU;AAE/B,YAAI,QAAQ;AACV,yBAAe;AAAA,YACb;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,UACF,CAAC;AAED,gBAAM,iBAAiB,MAAM,QAAQ;AAAA,YACnC,SAAS;AAAA,YACT,SAAS;AAAA,UACX,CAAC;AAED,cAAI,CAAC,gBAAgB;AACnB,iBAAK;AAAA,cACH;AAAA,YACF;AACA;AAAA,UACF;AAAA,QACF;AAGA,YAAI;AACF,gBAAM,gBAAgB,UAAU;AAChC,eAAK,IAAI;AAAA,wCAAsC;AAC/C,eAAK,IAAI,mBAAc,OAAO,EAAE;AAChC,eAAK,IAAI,+DAA+D;AAAA,QAC1E,SAAS,KAAU;AACjB,eAAK,MAAM,wBAAwB,IAAI,OAAO,EAAE;AAAA,QAClD;AAAA,MACF,OAAO;AACL,aAAK,IAAI,8BAA8B;AACvC,aAAK,IAAI,4DAA4D;AAAA,MACvE;AAAA,IACF,CAAC;AAAA,EACH;AACF;","names":["resolve","getBuildType","getBuildType"]}

package/dist/commands/auth/login.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/commands/auth/login.ts","../../../src/utils/security.ts","../../../src/telemetry.ts","../../../src/utils/globalConfig.ts"],"sourcesContent":["/**\n * Auth Login Command\n *\n * Store an existing private key in OS keyring\n */\n\nimport { Command } from \"@oclif/core\";\nimport { confirm, select } from \"@inquirer/prompts\";\nimport {\n  storePrivateKey,\n  keyExists,\n  validatePrivateKey,\n  getAddressFromPrivateKey,\n  getLegacyKeys,\n  getLegacyPrivateKey,\n  deleteLegacyPrivateKey,\n  type LegacyKey,\n} from \"@layr-labs/ecloud-sdk\";\nimport { getHiddenInput, displayWarning } from \"../../utils/security\";\nimport { withTelemetry } from \"../../telemetry\";\n\nexport default class AuthLogin extends Command {\n  static description = \"Store your private key in OS keyring\";\n\n  static examples = [\"<%= config.bin %> <%= command.id %>\"];\n\n  async run(): Promise<void> {\n    return withTelemetry(this, async () => {\n      // Check if key already exists\n      const exists = await keyExists();\n\n      if (exists) {\n        displayWarning([\n          \"WARNING: A private key for ecloud already exists!\",\n          \"Replacing it will cause PERMANENT DATA LOSS if not backed up.\",\n          \"The previous key will be lost forever.\",\n        ]);\n\n        const confirmReplace = await confirm({\n          message: \"Replace existing key?\",\n          default: false,\n        });\n\n        if (!confirmReplace) {\n          this.log(\"\\nLogin cancelled.\");\n          return;\n        }\n      }\n\n      // Check for legacy keys from eigenx-cli\n      const legacyKeys = await getLegacyKeys();\n      let privateKey: string | null = null;\n      let selectedKey: LegacyKey | null = null;\n\n      if (legacyKeys.length > 0) {\n        this.log(\"\\nFound legacy keys from eigenx-cli:\");\n        this.log(\"\");\n\n        // Display legacy keys\n        for (const key of legacyKeys) {\n          this.log(`  Address: ${key.address}`);\n          this.log(`  Environment: ${key.environment}`);\n          this.log(`  Source: ${key.source}`);\n          this.log(\"\");\n        }\n\n        const importLegacy = await confirm({\n          message: \"Would you like to import one of these legacy keys?\",\n          default: false,\n        });\n\n        if (importLegacy) {\n          // Create choices for selection\n          const choices = legacyKeys.map((key) => ({\n            name: `${key.address} (${key.environment} - ${key.source})`,\n            value: key,\n          }));\n\n          selectedKey = await select<LegacyKey>({\n            message: \"Select a key to import:\",\n            choices,\n          });\n\n          // Retrieve the actual private key\n          privateKey = await getLegacyPrivateKey(selectedKey.environment, selectedKey.source);\n\n          if (!privateKey) {\n            this.error(`Failed to retrieve legacy key for ${selectedKey.environment}`);\n          }\n\n          this.log(`\\nImporting key from ${selectedKey.source}:${selectedKey.environment}`);\n        }\n      }\n\n      // If no legacy key was selected, prompt for private key input\n      if (!privateKey) {\n        privateKey = await getHiddenInput(\"Enter your private key:\");\n\n        privateKey = privateKey.trim();\n      }\n\n      if (!validatePrivateKey(privateKey)) {\n        this.error(\"Invalid private key format. Please check and try again.\");\n      }\n\n      // Derive address for confirmation\n      const address = getAddressFromPrivateKey(privateKey);\n\n      this.log(`\\nAddress: ${address}`);\n\n      const confirmStore = await confirm({\n        message: \"Store this key in OS keyring?\",\n        default: true,\n      });\n\n      if (!confirmStore) {\n        this.log(\"\\nLogin cancelled.\");\n        return;\n      }\n\n      // Store in keyring\n      try {\n        await storePrivateKey(privateKey);\n        this.log(\"\\n✓ Private key stored in OS keyring\");\n        this.log(`✓ Address: ${address}`);\n        this.log(\"\\nNote: This key will be used for all environments (mainnet, sepolia, etc.)\");\n        this.log(\"You can now use ecloud commands without --private-key flag.\");\n\n        // Ask if user wants to delete the legacy key (only if save was successful)\n        if (selectedKey) {\n          this.log(\"\");\n          const confirmDelete = await confirm({\n            message: `Delete the legacy key from ${selectedKey.source}:${selectedKey.environment}?`,\n            default: false,\n          });\n\n          if (confirmDelete) {\n            const deleted = await deleteLegacyPrivateKey(\n              selectedKey.environment,\n              selectedKey.source,\n            );\n\n            if (deleted) {\n              this.log(\n                `\\n✓ Legacy key deleted from ${selectedKey.source}:${selectedKey.environment}`,\n              );\n              this.log(\"\\nNote: The key is now only stored in ecloud. You can still use it with\");\n              this.log(\"eigenx-cli by providing --private-key flag or EIGENX_PRIVATE_KEY env var.\");\n            } else {\n              this.log(\n                `\\n⚠️  Failed to delete legacy key from ${selectedKey.source}:${selectedKey.environment}`,\n              );\n              this.log(\"The key may have already been removed.\");\n            }\n          } else {\n            this.log(`\\nLegacy key kept in ${selectedKey.source}:${selectedKey.environment}`);\n            this.log(\"You can delete it later using 'eigenx auth logout' if needed.\");\n          }\n        }\n      } catch (err: any) {\n        this.error(`Failed to store key: ${err.message}`);\n      }\n    });\n  }\n}\n","/**\n * Security utilities for CLI\n *\n * Functions for securely displaying and handling sensitive content\n * like private keys.\n */\n\nimport { spawn, execSync } from \"child_process\";\nimport { platform } from \"os\";\nimport { select, password } from \"@inquirer/prompts\";\n\n/**\n * Display sensitive content using system pager (less/more)\n * Returns true if content was displayed, false if user aborted\n */\nexport async function showPrivateKey(content: string): Promise<boolean> {\n  // Try to use system pager\n  const pager = detectPager();\n\n  if (pager) {\n    try {\n      await runPager(pager, content);\n      return true;\n    } catch (err) {\n      console.error(`Failed to run pager: ${err}`);\n      // Fall through to fallback\n    }\n  }\n\n  // No pager available - give user a choice\n  console.log(\"\\nNo pager (less/more) found on PATH.\");\n  console.log(\"For security, avoid printing private keys to the terminal.\");\n  console.log(\"\");\n\n  const choice = await select({\n    message: \"Choose an option:\",\n    choices: [\n      { name: \"Abort (recommended)\", value: \"abort\" },\n      { name: \"Print and clear screen\", value: \"print\" },\n    ],\n  });\n\n  if (choice === \"print\") {\n    console.log(content);\n    console.log(\"\");\n    console.log(\"Press Enter after you have securely saved the key.\");\n    console.log(\"The screen will be cleared...\");\n\n    // Wait for Enter\n    await password({\n      message: \"\",\n      mask: \"\",\n    });\n\n    clearTerminal();\n    return true;\n  }\n\n  return false; // User aborted\n}\n\n/**\n * Detect system pager (less or more)\n */\nfunction detectPager(): string | null {\n  // Check PAGER env var first\n  if (process.env.PAGER) {\n    const pagerEnv = process.env.PAGER.trim();\n    // Only allow simple command names without arguments or special characters\n    if (/^[a-zA-Z0-9_-]+$/.test(pagerEnv)) {\n      return pagerEnv;\n    }\n  }\n\n  // Try common pagers\n  const pagers = [\"less\", \"more\"];\n\n  for (const pagerCmd of pagers) {\n    if (commandExists(pagerCmd)) {\n      return pagerCmd;\n    }\n  }\n\n  return null;\n}\n\n/**\n * Run pager with content\n */\nfunction runPager(pager: string, content: string): Promise<void> {\n  return new Promise((resolve, reject) => {\n    const child = spawn(pager, [], {\n      stdio: [\"pipe\", \"inherit\", \"inherit\"],\n    });\n\n    child.on(\"error\", reject);\n    child.on(\"exit\", (code) => {\n      if (code === 0) {\n        resolve();\n      } else {\n        reject(new Error(`Pager exited with code ${code}`));\n      }\n    });\n\n    try {\n      const written = child.stdin!.write(content);\n      if (!written) {\n        child.stdin!.once(\"drain\", () => {\n          try {\n            child.stdin!.end();\n          } catch (err) {\n            reject(err);\n          }\n        });\n      } else {\n        child.stdin!.end();\n      }\n    } catch (err) {\n      reject(err);\n    }\n  });\n}\n\n/**\n * Check if command exists\n */\nfunction commandExists(command: string): boolean {\n  try {\n    const cmd = platform() === \"win32\" ? `where ${command}` : `which ${command}`;\n    execSync(cmd, { stdio: \"ignore\" });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Clear terminal screen\n */\nexport function clearTerminal(): void {\n  if (platform() === \"win32\") {\n    process.stdout.write(\"\\x1Bc\");\n  } else {\n    process.stdout.write(\"\\x1B[2J\\x1B[3J\\x1B[H\");\n  }\n}\n\n/**\n * Get hidden input (password-style)\n */\nexport async function getHiddenInput(message: string): Promise<string> {\n  return await password({\n    message,\n    mask: \"*\",\n  });\n}\n\n/**\n * Display multi-line warning for destructive operations\n */\nexport function displayWarning(lines: string[]): void {\n  const width = lines.length > 0 ? Math.max(...lines.map((l) => l.length)) + 4 : 4;\n  const border = \"⚠\".repeat(width);\n\n  console.log(\"\");\n  console.log(border);\n  for (const line of lines) {\n    console.log(`⚠  ${line}`);\n  }\n  console.log(border);\n  console.log(\"\");\n}\n","/**\n * Telemetry utilities for CLI commands\n *\n * Provides helpers to wrap command execution with telemetry tracking\n */\n\nimport {\n  createTelemetryClient,\n  createAppEnvironment,\n  createMetricsContext,\n  addMetric,\n  addMetricWithDimensions,\n  emitMetrics,\n  type TelemetryClient,\n  getBuildType,\n} from \"@layr-labs/ecloud-sdk\";\nimport { Command } from \"@oclif/core\";\nimport {\n  getDefaultEnvironment,\n  getOrCreateUserUUID,\n  getGlobalTelemetryPreference,\n} from \"./utils/globalConfig\";\n\n/**\n * Create a telemetry client for CLI usage\n */\nexport function createCLITelemetryClient(): TelemetryClient {\n  // Get user UUID from CLI's globalConfig (handles I/O)\n  const userUUID = getOrCreateUserUUID();\n  const environment = createAppEnvironment(userUUID);\n\n  // Get telemetry preference from CLI's globalConfig\n  const telemetryEnabled = getGlobalTelemetryPreference();\n\n  return createTelemetryClient(environment, \"ecloud-cli\", {\n    telemetryEnabled: telemetryEnabled !== false, // Enabled by default, disabled only if explicitly set to false\n  });\n}\n\n/**\n * Wrap a command execution with telemetry\n *\n * @param command - The CLI command instance\n * @param action - The command action to execute\n * @returns The result of the action\n */\nexport async function withTelemetry<T>(command: Command, action: () => Promise<T>): Promise<T> {\n  const client = createCLITelemetryClient();\n  const metrics = createMetricsContext();\n\n  // Set source to identify CLI usage\n  metrics.properties[\"source\"] = \"ecloud-cli\";\n\n  // Set command name in properties\n  metrics.properties[\"command\"] = command.id || command.constructor.name;\n\n  // Set environment in properties\n  const environment = getDefaultEnvironment() || \"sepolia\";\n  metrics.properties[\"environment\"] = environment;\n\n  // Set buildType in properties\n  const buildType = getBuildType() || \"prod\";\n  metrics.properties[\"build_type\"] = buildType;\n\n  // Set CLI version if available\n  const cliVersion = command.config.version;\n  if (cliVersion) {\n    metrics.properties[\"cli_version\"] = cliVersion;\n  }\n\n  // Add initial count metric\n  addMetric(metrics, \"Count\", 1);\n\n  let actionError: Error | undefined;\n  let result: T;\n\n  try {\n    result = await action();\n    return result;\n  } catch (err) {\n    actionError = err instanceof Error ? err : new Error(String(err));\n    throw err;\n  } finally {\n    // Add result metric\n    const resultValue = actionError ? \"Failure\" : \"Success\";\n    const dimensions: Record<string, string> = {};\n    if (actionError) {\n      dimensions[\"error\"] = actionError.message;\n    }\n    addMetricWithDimensions(metrics, resultValue, 1, dimensions);\n\n    // Add duration metric\n    const duration = Date.now() - metrics.startTime.getTime();\n    addMetric(metrics, \"DurationMilliseconds\", duration);\n\n    // Emit all metrics\n    try {\n      await emitMetrics(client, metrics);\n      await client.close();\n    } catch {\n      // Silently ignore telemetry errors\n    }\n  }\n}\n","/**\n * Global configuration management\n *\n * Stores user-level configuration that persists across all CLI usage.\n * - $XDG_CONFIG_HOME/ecloud[BuildSuffix]/config.yaml (if XDG_CONFIG_HOME is set)\n * - Or ~/.config/ecloud[BuildSuffix]/config.yaml (fallback)\n *\n * Where BuildSuffix is:\n * - \"\" (empty) for production builds\n * - \"-dev\" for development builds\n */\n\nimport * as fs from \"fs\";\nimport * as path from \"path\";\nimport * as os from \"os\";\nimport { load as loadYaml, dump as dumpYaml } from \"js-yaml\";\nimport { getBuildType } from \"@layr-labs/ecloud-sdk\";\nimport * as crypto from \"crypto\";\nconst GLOBAL_CONFIG_FILE = \"config.yaml\";\n\nexport interface ProfileCacheEntry {\n  updated_at: number; // Unix timestamp in milliseconds\n  profiles: { [appId: string]: string }; // appId -> profile name\n}\n\nexport interface GlobalConfig {\n  first_run?: boolean;\n  telemetry_enabled?: boolean;\n  user_uuid?: string;\n  default_environment?: string;\n  last_version_check?: number;\n  last_known_version?: string;\n  profile_cache?: {\n    [environment: string]: ProfileCacheEntry;\n  };\n  directory_links?: {\n    [environment: string]: {\n      [directoryPath: string]: string;\n    };\n  };\n}\n\n// Profile cache TTL: 24 hours in milliseconds\nconst PROFILE_CACHE_TTL_MS = 24 * 60 * 60 * 1000;\n\n/**\n * Get the XDG-compliant directory where global ecloud config should be stored\n */\nfunction getGlobalConfigDir(): string {\n  // First check XDG_CONFIG_HOME\n  const configHome = process.env.XDG_CONFIG_HOME;\n\n  let baseDir: string;\n  if (configHome && path.isAbsolute(configHome)) {\n    baseDir = configHome;\n  } else {\n    // Fall back to ~/.config\n    baseDir = path.join(os.homedir(), \".config\");\n  }\n\n  // Use environment-specific config directory\n  const buildType = getBuildType();\n  const buildSuffix = buildType === \"dev\" ? \"-dev\" : \"\";\n  const configDirName = `ecloud${buildSuffix}`;\n\n  return path.join(baseDir, configDirName);\n}\n\n/**\n * Get the full path to the global config file\n */\nfunction getGlobalConfigPath(): string {\n  return path.join(getGlobalConfigDir(), GLOBAL_CONFIG_FILE);\n}\n\n/**\n * Load global configuration, creating defaults if needed\n */\nexport function loadGlobalConfig(): GlobalConfig {\n  const configPath = getGlobalConfigPath();\n\n  // If file doesn't exist, return defaults for first run\n  if (!fs.existsSync(configPath)) {\n    return {\n      first_run: true,\n    };\n  }\n\n  try {\n    const content = fs.readFileSync(configPath, \"utf-8\");\n    const config = loadYaml(content) as GlobalConfig;\n    return config || { first_run: true };\n  } catch {\n    // If parsing fails, return defaults\n    return {\n      first_run: true,\n    };\n  }\n}\n\n/**\n * Save global configuration to disk\n */\nexport function saveGlobalConfig(config: GlobalConfig): void {\n  const configPath = getGlobalConfigPath();\n\n  // Ensure directory exists\n  const configDir = path.dirname(configPath);\n  fs.mkdirSync(configDir, { recursive: true, mode: 0o755 });\n\n  // Write config file\n  const content = dumpYaml(config, { lineWidth: -1 });\n  fs.writeFileSync(configPath, content, { mode: 0o644 });\n}\n\nfunction normalizeDirectoryPath(directoryPath: string): string {\n  const resolved = path.resolve(directoryPath);\n  try {\n    return fs.realpathSync(resolved);\n  } catch {\n    return resolved;\n  }\n}\n\n/**\n * Get linked app ID for a directory in an environment\n */\nexport function getLinkedAppForDirectory(environment: string, directoryPath: string): string | null {\n  if (!directoryPath) {\n    return null;\n  }\n\n  const config = loadGlobalConfig();\n  const links = config.directory_links?.[environment];\n  if (!links) {\n    return null;\n  }\n\n  const normalizedPath = normalizeDirectoryPath(directoryPath);\n  const appId = links[normalizedPath];\n  return appId || null;\n}\n\n/**\n * Link a directory to an app ID in an environment\n */\nexport function setLinkedAppForDirectory(\n  environment: string,\n  directoryPath: string,\n  appId: string,\n): void {\n  if (!directoryPath || !environment) {\n    return;\n  }\n\n  const config = loadGlobalConfig();\n  if (!config.directory_links) {\n    config.directory_links = {};\n  }\n  if (!config.directory_links[environment]) {\n    config.directory_links[environment] = {};\n  }\n\n  const normalizedPath = normalizeDirectoryPath(directoryPath);\n  // Normalize appId to lowercase for consistent lookups\n  config.directory_links[environment][normalizedPath] = appId.toLowerCase();\n  saveGlobalConfig(config);\n}\n\n/**\n * Get the user's preferred deployment environment\n */\nexport function getDefaultEnvironment(): string | undefined {\n  const config = loadGlobalConfig();\n  return config.default_environment;\n}\n\n/**\n * Set the user's preferred deployment environment\n */\nexport function setDefaultEnvironment(environment: string): void {\n  const config = loadGlobalConfig();\n  config.default_environment = environment;\n  config.first_run = false; // No longer first run after setting environment\n  saveGlobalConfig(config);\n}\n\n/**\n * Check if this is the user's first time running the CLI\n */\nexport function isFirstRun(): boolean {\n  const config = loadGlobalConfig();\n  return config.first_run === true;\n}\n\n/**\n * Mark that the first run has been completed\n */\nexport function markFirstRunComplete(): void {\n  const config = loadGlobalConfig();\n  config.first_run = false;\n  saveGlobalConfig(config);\n}\n\n/**\n * Get the global telemetry preference\n */\nexport function getGlobalTelemetryPreference(): boolean | undefined {\n  const config = loadGlobalConfig();\n  return config.telemetry_enabled;\n}\n\n/**\n * Set the global telemetry preference\n */\nexport function setGlobalTelemetryPreference(enabled: boolean): void {\n  const config = loadGlobalConfig();\n  config.telemetry_enabled = enabled;\n  config.first_run = false; // No longer first run after setting preference\n  saveGlobalConfig(config);\n}\n\n// ==================== Profile Cache Functions ====================\n\n/**\n * Get cached profile names for an environment\n * Returns null if cache is missing or expired (older than 24 hours)\n */\nexport function getProfileCache(environment: string): Record<string, string> | null {\n  const config = loadGlobalConfig();\n  const cacheEntry = config.profile_cache?.[environment];\n\n  if (!cacheEntry) {\n    return null;\n  }\n\n  // Check if cache is expired\n  const now = Date.now();\n  if (now - cacheEntry.updated_at > PROFILE_CACHE_TTL_MS) {\n    return null;\n  }\n\n  return cacheEntry.profiles;\n}\n\n/**\n * Set cached profile names for an environment\n */\nexport function setProfileCache(environment: string, profiles: Record<string, string>): void {\n  const config = loadGlobalConfig();\n\n  if (!config.profile_cache) {\n    config.profile_cache = {};\n  }\n\n  config.profile_cache[environment] = {\n    updated_at: Date.now(),\n    profiles,\n  };\n\n  saveGlobalConfig(config);\n}\n\n/**\n * Invalidate profile cache for a specific environment or all environments\n */\nexport function invalidateProfileCache(environment?: string): void {\n  const config = loadGlobalConfig();\n\n  if (!config.profile_cache) {\n    return;\n  }\n\n  if (environment) {\n    // Invalidate specific environment\n    delete config.profile_cache[environment];\n  } else {\n    // Invalidate all environments\n    config.profile_cache = {};\n  }\n\n  saveGlobalConfig(config);\n}\n\n/**\n * Update a single profile name in the cache\n * This is useful after deploy or profile set to update just one entry\n */\nexport function updateProfileCacheEntry(\n  environment: string,\n  appId: string,\n  profileName: string,\n): void {\n  const config = loadGlobalConfig();\n\n  if (!config.profile_cache) {\n    config.profile_cache = {};\n  }\n\n  if (!config.profile_cache[environment]) {\n    config.profile_cache[environment] = {\n      updated_at: Date.now(),\n      profiles: {},\n    };\n  }\n\n  // Normalize appId to lowercase for consistent lookups\n  const normalizedAppId = appId.toLowerCase();\n  config.profile_cache[environment].profiles[normalizedAppId] = profileName;\n  config.profile_cache[environment].updated_at = Date.now();\n\n  saveGlobalConfig(config);\n}\n\n/**\n * Get the user UUID from global config, or generate a new one if it doesn't exist\n */\nexport function getOrCreateUserUUID(): string {\n  const config = loadGlobalConfig();\n  if (config.user_uuid) {\n    return config.user_uuid;\n  }\n\n  // Generate a new UUID (v4)\n  const uuid = generateUUID();\n\n  // Save it to config\n  config.user_uuid = uuid;\n  config.first_run = false;\n  saveGlobalConfig(config);\n\n  return uuid;\n}\n\n/**\n * Generate a UUID v4\n */\nfunction generateUUID(): string {\n  // UUID v4 format: xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx\n  // Use cryptographically secure random values.\n  const bytes = crypto.randomBytes(16);\n  // Per RFC 4122 section 4.4, set bits for version and `clock_seq_hi_and_reserved`\n  bytes[6] = (bytes[6] & 0x0f) | 0x40; // Version 4\n  bytes[8] = (bytes[8] & 0x3f) | 0x80; // Variant 10\n  const hex = Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\"));\n  return (\n    hex.slice(0, 4).join(\"\") +\n    hex.slice(4, 6).join(\"\") +\n    \"-\" +\n    hex.slice(6, 8).join(\"\") +\n    \"-\" +\n    hex.slice(8, 10).join(\"\") +\n    \"-\" +\n    hex.slice(10, 12).join(\"\") +\n    \"-\" +\n    hex.slice(12, 16).join(\"\")\n  );\n}\n\n/**\n * Save user UUID to global config (preserves existing UUID if present)\n */\nexport function saveUserUUID(userUUID: string): void {\n  const config = loadGlobalConfig();\n  // Only update if not already set\n  if (!config.user_uuid) {\n    config.user_uuid = userUUID;\n    saveGlobalConfig(config);\n  }\n}\n"],"mappings":";;;AAMA,SAAS,eAAe;AACxB,SAAS,SAAS,UAAAA,eAAc;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;;;ACVP,SAAS,OAAO,gBAAgB;AAChC,SAAS,gBAAgB;AACzB,SAAS,QAAQ,gBAAgB;AA6IjC,eAAsB,eAAe,SAAkC;AACrE,SAAO,MAAM,SAAS;AAAA,IACpB;AAAA,IACA,MAAM;AAAA,EACR,CAAC;AACH;AAKO,SAAS,eAAe,OAAuB;AACpD,QAAM,QAAQ,MAAM,SAAS,IAAI,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI;AAC/E,QAAM,SAAS,SAAI,OAAO,KAAK;AAE/B,UAAQ,IAAI,EAAE;AACd,UAAQ,IAAI,MAAM;AAClB,aAAW,QAAQ,OAAO;AACxB,YAAQ,IAAI,WAAM,IAAI,EAAE;AAAA,EAC1B;AACA,UAAQ,IAAI,MAAM;AAClB,UAAQ,IAAI,EAAE;AAChB;;;ACrKA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA,gBAAAC;AAAA,OACK;;;ACHP,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,YAAY,QAAQ;AACpB,SAAS,QAAQ,UAAU,QAAQ,gBAAgB;AACnD,SAAS,oBAAoB;AAC7B,YAAY,YAAY;AACxB,IAAM,qBAAqB;AAyB3B,IAAM,uBAAuB,KAAK,KAAK,KAAK;AAK5C,SAAS,qBAA6B;AAEpC,QAAM,aAAa,QAAQ,IAAI;AAE/B,MAAI;AACJ,MAAI,cAAmB,gBAAW,UAAU,GAAG;AAC7C,cAAU;AAAA,EACZ,OAAO;AAEL,cAAe,UAAQ,WAAQ,GAAG,SAAS;AAAA,EAC7C;AAGA,QAAM,YAAY,aAAa;AAC/B,QAAM,cAAc,cAAc,QAAQ,SAAS;AACnD,QAAM,gBAAgB,SAAS,WAAW;AAE1C,SAAY,UAAK,SAAS,aAAa;AACzC;AAKA,SAAS,sBAA8B;AACrC,SAAY,UAAK,mBAAmB,GAAG,kBAAkB;AAC3D;AAKO,SAAS,mBAAiC;AAC/C,QAAM,aAAa,oBAAoB;AAGvC,MAAI,CAAI,cAAW,UAAU,GAAG;AAC9B,WAAO;AAAA,MACL,WAAW;AAAA,IACb;AAAA,EACF;AAEA,MAAI;AACF,UAAM,UAAa,gBAAa,YAAY,OAAO;AACnD,UAAM,SAAS,SAAS,OAAO;AAC/B,WAAO,UAAU,EAAE,WAAW,KAAK;AAAA,EACrC,QAAQ;AAEN,WAAO;AAAA,MACL,WAAW;AAAA,IACb;AAAA,EACF;AACF;AAKO,SAAS,iBAAiB,QAA4B;AAC3D,QAAM,aAAa,oBAAoB;AAGvC,QAAM,YAAiB,aAAQ,UAAU;AACzC,EAAG,aAAU,WAAW,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAGxD,QAAM,UAAU,SAAS,QAAQ,EAAE,WAAW,GAAG,CAAC;AAClD,EAAG,iBAAc,YAAY,SAAS,EAAE,MAAM,IAAM,CAAC;AACvD;AA2DO,SAAS,wBAA4C;AAC1D,QAAM,SAAS,iBAAiB;AAChC,SAAO,OAAO;AAChB;AAgCO,SAAS,+BAAoD;AAClE,QAAM,SAAS,iBAAiB;AAChC,SAAO,OAAO;AAChB;AA2GO,SAAS,sBAA8B;AAC5C,QAAM,SAAS,iBAAiB;AAChC,MAAI,OAAO,WAAW;AACpB,WAAO,OAAO;AAAA,EAChB;AAGA,QAAM,OAAO,aAAa;AAG1B,SAAO,YAAY;AACnB,SAAO,YAAY;AACnB,mBAAiB,MAAM;AAEvB,SAAO;AACT;AAKA,SAAS,eAAuB;AAG9B,QAAM,QAAe,mBAAY,EAAE;AAEnC,QAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,QAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,QAAM,MAAM,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AACpE,SACE,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,IACvB,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,IACvB,MACA,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,IACvB,MACA,IAAI,MAAM,GAAG,EAAE,EAAE,KAAK,EAAE,IACxB,MACA,IAAI,MAAM,IAAI,EAAE,EAAE,KAAK,EAAE,IACzB,MACA,IAAI,MAAM,IAAI,EAAE,EAAE,KAAK,EAAE;AAE7B;;;AD3UO,SAAS,2BAA4C;AAE1D,QAAM,WAAW,oBAAoB;AACrC,QAAM,cAAc,qBAAqB,QAAQ;AAGjD,QAAM,mBAAmB,6BAA6B;AAEtD,SAAO,sBAAsB,aAAa,cAAc;AAAA,IACtD,kBAAkB,qBAAqB;AAAA;AAAA,EACzC,CAAC;AACH;AASA,eAAsB,cAAiB,SAAkB,QAAsC;AAC7F,QAAM,SAAS,yBAAyB;AACxC,QAAM,UAAU,qBAAqB;AAGrC,UAAQ,WAAW,QAAQ,IAAI;AAG/B,UAAQ,WAAW,SAAS,IAAI,QAAQ,MAAM,QAAQ,YAAY;AAGlE,QAAM,cAAc,sBAAsB,KAAK;AAC/C,UAAQ,WAAW,aAAa,IAAI;AAGpC,QAAM,YAAYC,cAAa,KAAK;AACpC,UAAQ,WAAW,YAAY,IAAI;AAGnC,QAAM,aAAa,QAAQ,OAAO;AAClC,MAAI,YAAY;AACd,YAAQ,WAAW,aAAa,IAAI;AAAA,EACtC;AAGA,YAAU,SAAS,SAAS,CAAC;AAE7B,MAAI;AACJ,MAAI;AAEJ,MAAI;AACF,aAAS,MAAM,OAAO;AACtB,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,kBAAc,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAChE,UAAM;AAAA,EACR,UAAE;AAEA,UAAM,cAAc,cAAc,YAAY;AAC9C,UAAM,aAAqC,CAAC;AAC5C,QAAI,aAAa;AACf,iBAAW,OAAO,IAAI,YAAY;AAAA,IACpC;AACA,4BAAwB,SAAS,aAAa,GAAG,UAAU;AAG3D,UAAM,WAAW,KAAK,IAAI,IAAI,QAAQ,UAAU,QAAQ;AACxD,cAAU,SAAS,wBAAwB,QAAQ;AAGnD,QAAI;AACF,YAAM,YAAY,QAAQ,OAAO;AACjC,YAAM,OAAO,MAAM;AAAA,IACrB,QAAQ;AAAA,IAER;AAAA,EACF;AACF;;;AFlFA,IAAqB,YAArB,cAAuC,QAAQ;AAAA,EAC7C,OAAO,cAAc;AAAA,EAErB,OAAO,WAAW,CAAC,qCAAqC;AAAA,EAExD,MAAM,MAAqB;AACzB,WAAO,cAAc,MAAM,YAAY;AAErC,YAAM,SAAS,MAAM,UAAU;AAE/B,UAAI,QAAQ;AACV,uBAAe;AAAA,UACb;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAED,cAAM,iBAAiB,MAAM,QAAQ;AAAA,UACnC,SAAS;AAAA,UACT,SAAS;AAAA,QACX,CAAC;AAED,YAAI,CAAC,gBAAgB;AACnB,eAAK,IAAI,oBAAoB;AAC7B;AAAA,QACF;AAAA,MACF;AAGA,YAAM,aAAa,MAAM,cAAc;AACvC,UAAI,aAA4B;AAChC,UAAI,cAAgC;AAEpC,UAAI,WAAW,SAAS,GAAG;AACzB,aAAK,IAAI,sCAAsC;AAC/C,aAAK,IAAI,EAAE;AAGX,mBAAW,OAAO,YAAY;AAC5B,eAAK,IAAI,cAAc,IAAI,OAAO,EAAE;AACpC,eAAK,IAAI,kBAAkB,IAAI,WAAW,EAAE;AAC5C,eAAK,IAAI,aAAa,IAAI,MAAM,EAAE;AAClC,eAAK,IAAI,EAAE;AAAA,QACb;AAEA,cAAM,eAAe,MAAM,QAAQ;AAAA,UACjC,SAAS;AAAA,UACT,SAAS;AAAA,QACX,CAAC;AAED,YAAI,cAAc;AAEhB,gBAAM,UAAU,WAAW,IAAI,CAAC,SAAS;AAAA,YACvC,MAAM,GAAG,IAAI,OAAO,KAAK,IAAI,WAAW,MAAM,IAAI,MAAM;AAAA,YACxD,OAAO;AAAA,UACT,EAAE;AAEF,wBAAc,MAAMC,QAAkB;AAAA,YACpC,SAAS;AAAA,YACT;AAAA,UACF,CAAC;AAGD,uBAAa,MAAM,oBAAoB,YAAY,aAAa,YAAY,MAAM;AAElF,cAAI,CAAC,YAAY;AACf,iBAAK,MAAM,qCAAqC,YAAY,WAAW,EAAE;AAAA,UAC3E;AAEA,eAAK,IAAI;AAAA,qBAAwB,YAAY,MAAM,IAAI,YAAY,WAAW,EAAE;AAAA,QAClF;AAAA,MACF;AAGA,UAAI,CAAC,YAAY;AACf,qBAAa,MAAM,eAAe,yBAAyB;AAE3D,qBAAa,WAAW,KAAK;AAAA,MAC/B;AAEA,UAAI,CAAC,mBAAmB,UAAU,GAAG;AACnC,aAAK,MAAM,yDAAyD;AAAA,MACtE;AAGA,YAAM,UAAU,yBAAyB,UAAU;AAEnD,WAAK,IAAI;AAAA,WAAc,OAAO,EAAE;AAEhC,YAAM,eAAe,MAAM,QAAQ;AAAA,QACjC,SAAS;AAAA,QACT,SAAS;AAAA,MACX,CAAC;AAED,UAAI,CAAC,cAAc;AACjB,aAAK,IAAI,oBAAoB;AAC7B;AAAA,MACF;AAGA,UAAI;AACF,cAAM,gBAAgB,UAAU;AAChC,aAAK,IAAI,2CAAsC;AAC/C,aAAK,IAAI,mBAAc,OAAO,EAAE;AAChC,aAAK,IAAI,6EAA6E;AACtF,aAAK,IAAI,6DAA6D;AAGtE,YAAI,aAAa;AACf,eAAK,IAAI,EAAE;AACX,gBAAM,gBAAgB,MAAM,QAAQ;AAAA,YAClC,SAAS,8BAA8B,YAAY,MAAM,IAAI,YAAY,WAAW;AAAA,YACpF,SAAS;AAAA,UACX,CAAC;AAED,cAAI,eAAe;AACjB,kBAAM,UAAU,MAAM;AAAA,cACpB,YAAY;AAAA,cACZ,YAAY;AAAA,YACd;AAEA,gBAAI,SAAS;AACX,mBAAK;AAAA,gBACH;AAAA,iCAA+B,YAAY,MAAM,IAAI,YAAY,WAAW;AAAA,cAC9E;AACA,mBAAK,IAAI,yEAAyE;AAClF,mBAAK,IAAI,2EAA2E;AAAA,YACtF,OAAO;AACL,mBAAK;AAAA,gBACH;AAAA,iDAA0C,YAAY,MAAM,IAAI,YAAY,WAAW;AAAA,cACzF;AACA,mBAAK,IAAI,wCAAwC;AAAA,YACnD;AAAA,UACF,OAAO;AACL,iBAAK,IAAI;AAAA,qBAAwB,YAAY,MAAM,IAAI,YAAY,WAAW,EAAE;AAChF,iBAAK,IAAI,+DAA+D;AAAA,UAC1E;AAAA,QACF;AAAA,MACF,SAAS,KAAU;AACjB,aAAK,MAAM,wBAAwB,IAAI,OAAO,EAAE;AAAA,MAClD;AAAA,IACF,CAAC;AAAA,EACH;AACF;","names":["select","getBuildType","getBuildType","select"]}
+{"version":3,"sources":["../../../src/commands/auth/login.ts","../../../src/utils/security.ts","../../../src/telemetry.ts","../../../src/utils/globalConfig.ts"],"sourcesContent":["/**\n * Auth Login Command\n *\n * Store an existing private key in OS keyring\n */\n\nimport { Command } from \"@oclif/core\";\nimport { confirm, select } from \"@inquirer/prompts\";\nimport {\n  storePrivateKey,\n  keyExists,\n  validatePrivateKey,\n  getAddressFromPrivateKey,\n  getLegacyKeys,\n  getLegacyPrivateKey,\n  deleteLegacyPrivateKey,\n  type LegacyKey,\n} from \"@layr-labs/ecloud-sdk\";\nimport { getHiddenInput, displayWarning } from \"../../utils/security\";\nimport { withTelemetry } from \"../../telemetry\";\n\nexport default class AuthLogin extends Command {\n  static description = \"Store your private key in OS keyring\";\n\n  static examples = [\"<%= config.bin %> <%= command.id %>\"];\n\n  async run(): Promise<void> {\n    return withTelemetry(this, async () => {\n      // Check if key already exists\n      const exists = await keyExists();\n\n      if (exists) {\n        displayWarning([\n          \"WARNING: A private key for ecloud already exists!\",\n          \"Replacing it will cause PERMANENT DATA LOSS if not backed up.\",\n          \"The previous key will be lost forever.\",\n        ]);\n\n        const confirmReplace = await confirm({\n          message: \"Replace existing key?\",\n          default: false,\n        });\n\n        if (!confirmReplace) {\n          this.log(\"\\nLogin cancelled.\");\n          return;\n        }\n      }\n\n      // Check for legacy keys from eigenx-cli\n      const legacyKeys = await getLegacyKeys();\n      let privateKey: string | null = null;\n      let selectedKey: LegacyKey | null = null;\n\n      if (legacyKeys.length > 0) {\n        this.log(\"\\nFound legacy keys from eigenx-cli:\");\n        this.log(\"\");\n\n        // Display legacy keys\n        for (const key of legacyKeys) {\n          this.log(`  Address: ${key.address}`);\n          this.log(`  Environment: ${key.environment}`);\n          this.log(`  Source: ${key.source}`);\n          this.log(\"\");\n        }\n\n        const importLegacy = await confirm({\n          message: \"Would you like to import one of these legacy keys?\",\n          default: false,\n        });\n\n        if (importLegacy) {\n          // Create choices for selection\n          const choices = legacyKeys.map((key) => ({\n            name: `${key.address} (${key.environment} - ${key.source})`,\n            value: key,\n          }));\n\n          selectedKey = await select<LegacyKey>({\n            message: \"Select a key to import:\",\n            choices,\n          });\n\n          // Retrieve the actual private key\n          privateKey = await getLegacyPrivateKey(selectedKey.environment, selectedKey.source);\n\n          if (!privateKey) {\n            this.error(`Failed to retrieve legacy key for ${selectedKey.environment}`);\n          }\n\n          this.log(`\\nImporting key from ${selectedKey.source}:${selectedKey.environment}`);\n        }\n      }\n\n      // If no legacy key was selected, prompt for private key input\n      if (!privateKey) {\n        privateKey = await getHiddenInput(\"Enter your private key:\");\n\n        privateKey = privateKey.trim();\n      }\n\n      if (!validatePrivateKey(privateKey)) {\n        this.error(\"Invalid private key format. Please check and try again.\");\n      }\n\n      // Derive address for confirmation\n      const address = getAddressFromPrivateKey(privateKey);\n\n      this.log(`\\nAddress: ${address}`);\n\n      const confirmStore = await confirm({\n        message: \"Store this key in OS keyring?\",\n        default: true,\n      });\n\n      if (!confirmStore) {\n        this.log(\"\\nLogin cancelled.\");\n        return;\n      }\n\n      // Store in keyring\n      try {\n        await storePrivateKey(privateKey);\n        this.log(\"\\n✓ Private key stored in OS keyring\");\n        this.log(`✓ Address: ${address}`);\n        this.log(\"\\nNote: This key will be used for all environments (mainnet, sepolia, etc.)\");\n        this.log(\"You can now use ecloud commands without --private-key flag.\");\n\n        // Ask if user wants to delete the legacy key (only if save was successful)\n        if (selectedKey) {\n          this.log(\"\");\n          const confirmDelete = await confirm({\n            message: `Delete the legacy key from ${selectedKey.source}:${selectedKey.environment}?`,\n            default: false,\n          });\n\n          if (confirmDelete) {\n            const deleted = await deleteLegacyPrivateKey(\n              selectedKey.environment,\n              selectedKey.source,\n            );\n\n            if (deleted) {\n              this.log(\n                `\\n✓ Legacy key deleted from ${selectedKey.source}:${selectedKey.environment}`,\n              );\n              this.log(\"\\nNote: The key is now only stored in ecloud. You can still use it with\");\n              this.log(\"eigenx-cli by providing --private-key flag or EIGENX_PRIVATE_KEY env var.\");\n            } else {\n              this.log(\n                `\\n⚠️  Failed to delete legacy key from ${selectedKey.source}:${selectedKey.environment}`,\n              );\n              this.log(\"The key may have already been removed.\");\n            }\n          } else {\n            this.log(`\\nLegacy key kept in ${selectedKey.source}:${selectedKey.environment}`);\n            this.log(\"You can delete it later using 'eigenx auth logout' if needed.\");\n          }\n        }\n      } catch (err: any) {\n        this.error(`Failed to store key: ${err.message}`);\n      }\n    });\n  }\n}\n","/**\n * Security utilities for CLI\n *\n * Functions for securely displaying and handling sensitive content\n * like private keys.\n */\n\nimport { spawn, execSync } from \"child_process\";\nimport { platform } from \"os\";\nimport { select, password } from \"@inquirer/prompts\";\n\n/**\n * Display sensitive content using system pager (less/more)\n * Returns true if content was displayed, false if user aborted\n */\nexport async function showPrivateKey(content: string): Promise<boolean> {\n  // Try to use system pager\n  const pager = detectPager();\n\n  if (pager) {\n    try {\n      await runPager(pager, content);\n      return true;\n    } catch (err) {\n      console.error(`Failed to run pager: ${err}`);\n      // Fall through to fallback\n    }\n  }\n\n  // No pager available - give user a choice\n  console.log(\"\\nNo pager (less/more) found on PATH.\");\n  console.log(\"For security, avoid printing private keys to the terminal.\");\n  console.log(\"\");\n\n  const choice = await select({\n    message: \"Choose an option:\",\n    choices: [\n      { name: \"Abort (recommended)\", value: \"abort\" },\n      { name: \"Print and clear screen\", value: \"print\" },\n    ],\n  });\n\n  if (choice === \"print\") {\n    console.log(content);\n    console.log(\"\");\n    console.log(\"Press Enter after you have securely saved the key.\");\n    console.log(\"The screen will be cleared...\");\n\n    // Wait for Enter\n    await password({\n      message: \"\",\n      mask: \"\",\n    });\n\n    clearTerminal();\n    return true;\n  }\n\n  return false; // User aborted\n}\n\n/**\n * Detect system pager (less or more)\n */\nfunction detectPager(): string | null {\n  // Check PAGER env var first\n  if (process.env.PAGER) {\n    const pagerEnv = process.env.PAGER.trim();\n    // Only allow simple command names without arguments or special characters\n    if (/^[a-zA-Z0-9_-]+$/.test(pagerEnv)) {\n      return pagerEnv;\n    }\n  }\n\n  // Try common pagers\n  const pagers = [\"less\", \"more\"];\n\n  for (const pagerCmd of pagers) {\n    if (commandExists(pagerCmd)) {\n      return pagerCmd;\n    }\n  }\n\n  return null;\n}\n\n/**\n * Run pager with content\n */\nfunction runPager(pager: string, content: string): Promise<void> {\n  return new Promise((resolve, reject) => {\n    const child = spawn(pager, [], {\n      stdio: [\"pipe\", \"inherit\", \"inherit\"],\n    });\n\n    child.on(\"error\", reject);\n    child.on(\"exit\", (code) => {\n      if (code === 0) {\n        resolve();\n      } else {\n        reject(new Error(`Pager exited with code ${code}`));\n      }\n    });\n\n    try {\n      const written = child.stdin!.write(content);\n      if (!written) {\n        child.stdin!.once(\"drain\", () => {\n          try {\n            child.stdin!.end();\n          } catch (err) {\n            reject(err);\n          }\n        });\n      } else {\n        child.stdin!.end();\n      }\n    } catch (err) {\n      reject(err);\n    }\n  });\n}\n\n/**\n * Check if command exists\n */\nfunction commandExists(command: string): boolean {\n  try {\n    const cmd = platform() === \"win32\" ? `where ${command}` : `which ${command}`;\n    execSync(cmd, { stdio: \"ignore\" });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Clear terminal screen\n */\nexport function clearTerminal(): void {\n  if (platform() === \"win32\") {\n    process.stdout.write(\"\\x1Bc\");\n  } else {\n    process.stdout.write(\"\\x1B[2J\\x1B[3J\\x1B[H\");\n  }\n}\n\n/**\n * Get hidden input (password-style)\n */\nexport async function getHiddenInput(message: string): Promise<string> {\n  return await password({\n    message,\n    mask: \"*\",\n  });\n}\n\n/**\n * Display multi-line warning for destructive operations\n */\nexport function displayWarning(lines: string[]): void {\n  const width = lines.length > 0 ? Math.max(...lines.map((l) => l.length)) + 4 : 4;\n  const border = \"⚠\".repeat(width);\n\n  console.log(\"\");\n  console.log(border);\n  for (const line of lines) {\n    console.log(`⚠  ${line}`);\n  }\n  console.log(border);\n  console.log(\"\");\n}\n","/**\n * Telemetry utilities for CLI commands\n *\n * Provides helpers to wrap command execution with telemetry tracking\n */\n\nimport {\n  createTelemetryClient,\n  createAppEnvironment,\n  createMetricsContext,\n  addMetric,\n  addMetricWithDimensions,\n  emitMetrics,\n  type TelemetryClient,\n  getBuildType,\n} from \"@layr-labs/ecloud-sdk\";\nimport { Command } from \"@oclif/core\";\nimport {\n  getDefaultEnvironment,\n  getOrCreateUserUUID,\n  getGlobalTelemetryPreference,\n} from \"./utils/globalConfig\";\n\n/**\n * Create a telemetry client for CLI usage\n */\nexport function createCLITelemetryClient(): TelemetryClient {\n  // Get user UUID from CLI's globalConfig (handles I/O)\n  const userUUID = getOrCreateUserUUID();\n  const environment = createAppEnvironment(userUUID);\n\n  // Get telemetry preference from CLI's globalConfig\n  const telemetryEnabled = getGlobalTelemetryPreference();\n\n  return createTelemetryClient(environment, \"ecloud-cli\", {\n    telemetryEnabled: telemetryEnabled !== false, // Enabled by default, disabled only if explicitly set to false\n  });\n}\n\n/**\n * Wrap a command execution with telemetry\n *\n * @param command - The CLI command instance\n * @param action - The command action to execute\n * @returns The result of the action\n */\nexport async function withTelemetry<T>(command: Command, action: () => Promise<T>): Promise<T> {\n  const client = createCLITelemetryClient();\n  const metrics = createMetricsContext();\n\n  // Set source to identify CLI usage\n  metrics.properties[\"source\"] = \"ecloud-cli\";\n\n  // Set command name in properties\n  metrics.properties[\"command\"] = command.id || command.constructor.name;\n\n  // Set environment in properties\n  const environment = getDefaultEnvironment() || \"sepolia\";\n  metrics.properties[\"environment\"] = environment;\n\n  // Set buildType in properties\n  const buildType = getBuildType() || \"prod\";\n  metrics.properties[\"build_type\"] = buildType;\n\n  // Set CLI version if available\n  const cliVersion = command.config.version;\n  if (cliVersion) {\n    metrics.properties[\"cli_version\"] = cliVersion;\n  }\n\n  // Add initial count metric\n  addMetric(metrics, \"Count\", 1);\n\n  let actionError: Error | undefined;\n  let result: T;\n\n  try {\n    result = await action();\n    return result;\n  } catch (err) {\n    actionError = err instanceof Error ? err : new Error(String(err));\n    throw err;\n  } finally {\n    // Add result metric\n    const resultValue = actionError ? \"Failure\" : \"Success\";\n    const dimensions: Record<string, string> = {};\n    if (actionError) {\n      dimensions[\"error\"] = actionError.message;\n    }\n    addMetricWithDimensions(metrics, resultValue, 1, dimensions);\n\n    // Add duration metric\n    const duration = Date.now() - metrics.startTime.getTime();\n    addMetric(metrics, \"DurationMilliseconds\", duration);\n\n    // Emit all metrics\n    try {\n      await emitMetrics(client, metrics);\n      await client.close();\n    } catch {\n      // Silently ignore telemetry errors\n    }\n  }\n}\n","/**\n * Global configuration management\n *\n * Stores user-level configuration that persists across all CLI usage.\n * - $XDG_CONFIG_HOME/ecloud[BuildSuffix]/config.yaml (if XDG_CONFIG_HOME is set)\n * - Or ~/.config/ecloud[BuildSuffix]/config.yaml (fallback)\n *\n * Where BuildSuffix is:\n * - \"\" (empty) for production builds\n * - \"-dev\" for development builds\n */\n\nimport * as fs from \"fs\";\nimport * as path from \"path\";\nimport * as os from \"os\";\nimport { load as loadYaml, dump as dumpYaml } from \"js-yaml\";\nimport { getBuildType } from \"@layr-labs/ecloud-sdk\";\nimport * as crypto from \"crypto\";\nconst GLOBAL_CONFIG_FILE = \"config.yaml\";\n\nexport interface ProfileCacheEntry {\n  updated_at: number; // Unix timestamp in milliseconds\n  profiles: { [appId: string]: string }; // appId -> profile name\n}\n\nexport interface GlobalConfig {\n  first_run?: boolean;\n  telemetry_enabled?: boolean;\n  user_uuid?: string;\n  default_environment?: string;\n  last_version_check?: number;\n  last_known_version?: string;\n  profile_cache?: {\n    [environment: string]: ProfileCacheEntry;\n  };\n  directory_links?: {\n    [environment: string]: {\n      [directoryPath: string]: string;\n    };\n  };\n}\n\n// Profile cache TTL: 24 hours in milliseconds\nconst PROFILE_CACHE_TTL_MS = 24 * 60 * 60 * 1000;\n\n/**\n * Get the XDG-compliant directory where global ecloud config should be stored\n */\nfunction getGlobalConfigDir(): string {\n  // First check XDG_CONFIG_HOME\n  const configHome = process.env.XDG_CONFIG_HOME;\n\n  let baseDir: string;\n  if (configHome && path.isAbsolute(configHome)) {\n    baseDir = configHome;\n  } else {\n    // Fall back to ~/.config\n    baseDir = path.join(os.homedir(), \".config\");\n  }\n\n  // Use environment-specific config directory\n  const buildType = getBuildType();\n  const buildSuffix = buildType === \"dev\" ? \"-dev\" : \"\";\n  const configDirName = `ecloud${buildSuffix}`;\n\n  return path.join(baseDir, configDirName);\n}\n\n/**\n * Get the full path to the global config file\n */\nfunction getGlobalConfigPath(): string {\n  return path.join(getGlobalConfigDir(), GLOBAL_CONFIG_FILE);\n}\n\n/**\n * Load global configuration, creating defaults if needed\n */\nexport function loadGlobalConfig(): GlobalConfig {\n  const configPath = getGlobalConfigPath();\n\n  // If file doesn't exist, return defaults for first run\n  if (!fs.existsSync(configPath)) {\n    return {\n      first_run: true,\n    };\n  }\n\n  try {\n    const content = fs.readFileSync(configPath, \"utf-8\");\n    const config = loadYaml(content) as GlobalConfig;\n    return config || { first_run: true };\n  } catch {\n    // If parsing fails, return defaults\n    return {\n      first_run: true,\n    };\n  }\n}\n\n/**\n * Save global configuration to disk\n */\nexport function saveGlobalConfig(config: GlobalConfig): void {\n  const configPath = getGlobalConfigPath();\n\n  // Ensure directory exists\n  const configDir = path.dirname(configPath);\n  fs.mkdirSync(configDir, { recursive: true, mode: 0o755 });\n\n  // Write config file\n  const content = dumpYaml(config, { lineWidth: -1 });\n  fs.writeFileSync(configPath, content, { mode: 0o644 });\n}\n\nfunction normalizeDirectoryPath(directoryPath: string): string {\n  const resolved = path.resolve(directoryPath);\n  try {\n    return fs.realpathSync(resolved);\n  } catch {\n    return resolved;\n  }\n}\n\n/**\n * Get linked app ID for a directory in an environment\n */\nexport function getLinkedAppForDirectory(\n  environment: string,\n  directoryPath: string,\n): string | null {\n  if (!directoryPath) {\n    return null;\n  }\n\n  const config = loadGlobalConfig();\n  const links = config.directory_links?.[environment];\n  if (!links) {\n    return null;\n  }\n\n  const normalizedPath = normalizeDirectoryPath(directoryPath);\n  const appId = links[normalizedPath];\n  return appId || null;\n}\n\n/**\n * Link a directory to an app ID in an environment\n */\nexport function setLinkedAppForDirectory(\n  environment: string,\n  directoryPath: string,\n  appId: string,\n): void {\n  if (!directoryPath || !environment) {\n    return;\n  }\n\n  const config = loadGlobalConfig();\n  if (!config.directory_links) {\n    config.directory_links = {};\n  }\n  if (!config.directory_links[environment]) {\n    config.directory_links[environment] = {};\n  }\n\n  const normalizedPath = normalizeDirectoryPath(directoryPath);\n  // Normalize appId to lowercase for consistent lookups\n  config.directory_links[environment][normalizedPath] = appId.toLowerCase();\n  saveGlobalConfig(config);\n}\n\n/**\n * Get the user's preferred deployment environment\n */\nexport function getDefaultEnvironment(): string | undefined {\n  const config = loadGlobalConfig();\n  return config.default_environment;\n}\n\n/**\n * Set the user's preferred deployment environment\n */\nexport function setDefaultEnvironment(environment: string): void {\n  const config = loadGlobalConfig();\n  config.default_environment = environment;\n  config.first_run = false; // No longer first run after setting environment\n  saveGlobalConfig(config);\n}\n\n/**\n * Check if this is the user's first time running the CLI\n */\nexport function isFirstRun(): boolean {\n  const config = loadGlobalConfig();\n  return config.first_run === true;\n}\n\n/**\n * Mark that the first run has been completed\n */\nexport function markFirstRunComplete(): void {\n  const config = loadGlobalConfig();\n  config.first_run = false;\n  saveGlobalConfig(config);\n}\n\n/**\n * Get the global telemetry preference\n */\nexport function getGlobalTelemetryPreference(): boolean | undefined {\n  const config = loadGlobalConfig();\n  return config.telemetry_enabled;\n}\n\n/**\n * Set the global telemetry preference\n */\nexport function setGlobalTelemetryPreference(enabled: boolean): void {\n  const config = loadGlobalConfig();\n  config.telemetry_enabled = enabled;\n  config.first_run = false; // No longer first run after setting preference\n  saveGlobalConfig(config);\n}\n\n// ==================== Profile Cache Functions ====================\n\n/**\n * Get cached profile names for an environment\n * Returns null if cache is missing or expired (older than 24 hours)\n */\nexport function getProfileCache(environment: string): Record<string, string> | null {\n  const config = loadGlobalConfig();\n  const cacheEntry = config.profile_cache?.[environment];\n\n  if (!cacheEntry) {\n    return null;\n  }\n\n  // Check if cache is expired\n  const now = Date.now();\n  if (now - cacheEntry.updated_at > PROFILE_CACHE_TTL_MS) {\n    return null;\n  }\n\n  return cacheEntry.profiles;\n}\n\n/**\n * Set cached profile names for an environment\n */\nexport function setProfileCache(environment: string, profiles: Record<string, string>): void {\n  const config = loadGlobalConfig();\n\n  if (!config.profile_cache) {\n    config.profile_cache = {};\n  }\n\n  config.profile_cache[environment] = {\n    updated_at: Date.now(),\n    profiles,\n  };\n\n  saveGlobalConfig(config);\n}\n\n/**\n * Invalidate profile cache for a specific environment or all environments\n */\nexport function invalidateProfileCache(environment?: string): void {\n  const config = loadGlobalConfig();\n\n  if (!config.profile_cache) {\n    return;\n  }\n\n  if (environment) {\n    // Invalidate specific environment\n    delete config.profile_cache[environment];\n  } else {\n    // Invalidate all environments\n    config.profile_cache = {};\n  }\n\n  saveGlobalConfig(config);\n}\n\n/**\n * Update a single profile name in the cache\n * This is useful after deploy or profile set to update just one entry\n */\nexport function updateProfileCacheEntry(\n  environment: string,\n  appId: string,\n  profileName: string,\n): void {\n  const config = loadGlobalConfig();\n\n  if (!config.profile_cache) {\n    config.profile_cache = {};\n  }\n\n  if (!config.profile_cache[environment]) {\n    config.profile_cache[environment] = {\n      updated_at: Date.now(),\n      profiles: {},\n    };\n  }\n\n  // Normalize appId to lowercase for consistent lookups\n  const normalizedAppId = appId.toLowerCase();\n  config.profile_cache[environment].profiles[normalizedAppId] = profileName;\n  config.profile_cache[environment].updated_at = Date.now();\n\n  saveGlobalConfig(config);\n}\n\n/**\n * Get the user UUID from global config, or generate a new one if it doesn't exist\n */\nexport function getOrCreateUserUUID(): string {\n  const config = loadGlobalConfig();\n  if (config.user_uuid) {\n    return config.user_uuid;\n  }\n\n  // Generate a new UUID (v4)\n  const uuid = generateUUID();\n\n  // Save it to config\n  config.user_uuid = uuid;\n  config.first_run = false;\n  saveGlobalConfig(config);\n\n  return uuid;\n}\n\n/**\n * Generate a UUID v4\n */\nfunction generateUUID(): string {\n  // UUID v4 format: xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx\n  // Use cryptographically secure random values.\n  const bytes = crypto.randomBytes(16);\n  // Per RFC 4122 section 4.4, set bits for version and `clock_seq_hi_and_reserved`\n  bytes[6] = (bytes[6] & 0x0f) | 0x40; // Version 4\n  bytes[8] = (bytes[8] & 0x3f) | 0x80; // Variant 10\n  const hex = Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\"));\n  return (\n    hex.slice(0, 4).join(\"\") +\n    hex.slice(4, 6).join(\"\") +\n    \"-\" +\n    hex.slice(6, 8).join(\"\") +\n    \"-\" +\n    hex.slice(8, 10).join(\"\") +\n    \"-\" +\n    hex.slice(10, 12).join(\"\") +\n    \"-\" +\n    hex.slice(12, 16).join(\"\")\n  );\n}\n\n/**\n * Save user UUID to global config (preserves existing UUID if present)\n */\nexport function saveUserUUID(userUUID: string): void {\n  const config = loadGlobalConfig();\n  // Only update if not already set\n  if (!config.user_uuid) {\n    config.user_uuid = userUUID;\n    saveGlobalConfig(config);\n  }\n}\n"],"mappings":";;;AAMA,SAAS,eAAe;AACxB,SAAS,SAAS,UAAAA,eAAc;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;;;ACVP,SAAS,OAAO,gBAAgB;AAChC,SAAS,gBAAgB;AACzB,SAAS,QAAQ,gBAAgB;AA6IjC,eAAsB,eAAe,SAAkC;AACrE,SAAO,MAAM,SAAS;AAAA,IACpB;AAAA,IACA,MAAM;AAAA,EACR,CAAC;AACH;AAKO,SAAS,eAAe,OAAuB;AACpD,QAAM,QAAQ,MAAM,SAAS,IAAI,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI;AAC/E,QAAM,SAAS,SAAI,OAAO,KAAK;AAE/B,UAAQ,IAAI,EAAE;AACd,UAAQ,IAAI,MAAM;AAClB,aAAW,QAAQ,OAAO;AACxB,YAAQ,IAAI,WAAM,IAAI,EAAE;AAAA,EAC1B;AACA,UAAQ,IAAI,MAAM;AAClB,UAAQ,IAAI,EAAE;AAChB;;;ACrKA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA,gBAAAC;AAAA,OACK;;;ACHP,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,YAAY,QAAQ;AACpB,SAAS,QAAQ,UAAU,QAAQ,gBAAgB;AACnD,SAAS,oBAAoB;AAC7B,YAAY,YAAY;AACxB,IAAM,qBAAqB;AAyB3B,IAAM,uBAAuB,KAAK,KAAK,KAAK;AAK5C,SAAS,qBAA6B;AAEpC,QAAM,aAAa,QAAQ,IAAI;AAE/B,MAAI;AACJ,MAAI,cAAmB,gBAAW,UAAU,GAAG;AAC7C,cAAU;AAAA,EACZ,OAAO;AAEL,cAAe,UAAQ,WAAQ,GAAG,SAAS;AAAA,EAC7C;AAGA,QAAM,YAAY,aAAa;AAC/B,QAAM,cAAc,cAAc,QAAQ,SAAS;AACnD,QAAM,gBAAgB,SAAS,WAAW;AAE1C,SAAY,UAAK,SAAS,aAAa;AACzC;AAKA,SAAS,sBAA8B;AACrC,SAAY,UAAK,mBAAmB,GAAG,kBAAkB;AAC3D;AAKO,SAAS,mBAAiC;AAC/C,QAAM,aAAa,oBAAoB;AAGvC,MAAI,CAAI,cAAW,UAAU,GAAG;AAC9B,WAAO;AAAA,MACL,WAAW;AAAA,IACb;AAAA,EACF;AAEA,MAAI;AACF,UAAM,UAAa,gBAAa,YAAY,OAAO;AACnD,UAAM,SAAS,SAAS,OAAO;AAC/B,WAAO,UAAU,EAAE,WAAW,KAAK;AAAA,EACrC,QAAQ;AAEN,WAAO;AAAA,MACL,WAAW;AAAA,IACb;AAAA,EACF;AACF;AAKO,SAAS,iBAAiB,QAA4B;AAC3D,QAAM,aAAa,oBAAoB;AAGvC,QAAM,YAAiB,aAAQ,UAAU;AACzC,EAAG,aAAU,WAAW,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAGxD,QAAM,UAAU,SAAS,QAAQ,EAAE,WAAW,GAAG,CAAC;AAClD,EAAG,iBAAc,YAAY,SAAS,EAAE,MAAM,IAAM,CAAC;AACvD;AA8DO,SAAS,wBAA4C;AAC1D,QAAM,SAAS,iBAAiB;AAChC,SAAO,OAAO;AAChB;AAgCO,SAAS,+BAAoD;AAClE,QAAM,SAAS,iBAAiB;AAChC,SAAO,OAAO;AAChB;AA2GO,SAAS,sBAA8B;AAC5C,QAAM,SAAS,iBAAiB;AAChC,MAAI,OAAO,WAAW;AACpB,WAAO,OAAO;AAAA,EAChB;AAGA,QAAM,OAAO,aAAa;AAG1B,SAAO,YAAY;AACnB,SAAO,YAAY;AACnB,mBAAiB,MAAM;AAEvB,SAAO;AACT;AAKA,SAAS,eAAuB;AAG9B,QAAM,QAAe,mBAAY,EAAE;AAEnC,QAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,QAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,QAAM,MAAM,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AACpE,SACE,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,IACvB,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,IACvB,MACA,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,IACvB,MACA,IAAI,MAAM,GAAG,EAAE,EAAE,KAAK,EAAE,IACxB,MACA,IAAI,MAAM,IAAI,EAAE,EAAE,KAAK,EAAE,IACzB,MACA,IAAI,MAAM,IAAI,EAAE,EAAE,KAAK,EAAE;AAE7B;;;AD9UO,SAAS,2BAA4C;AAE1D,QAAM,WAAW,oBAAoB;AACrC,QAAM,cAAc,qBAAqB,QAAQ;AAGjD,QAAM,mBAAmB,6BAA6B;AAEtD,SAAO,sBAAsB,aAAa,cAAc;AAAA,IACtD,kBAAkB,qBAAqB;AAAA;AAAA,EACzC,CAAC;AACH;AASA,eAAsB,cAAiB,SAAkB,QAAsC;AAC7F,QAAM,SAAS,yBAAyB;AACxC,QAAM,UAAU,qBAAqB;AAGrC,UAAQ,WAAW,QAAQ,IAAI;AAG/B,UAAQ,WAAW,SAAS,IAAI,QAAQ,MAAM,QAAQ,YAAY;AAGlE,QAAM,cAAc,sBAAsB,KAAK;AAC/C,UAAQ,WAAW,aAAa,IAAI;AAGpC,QAAM,YAAYC,cAAa,KAAK;AACpC,UAAQ,WAAW,YAAY,IAAI;AAGnC,QAAM,aAAa,QAAQ,OAAO;AAClC,MAAI,YAAY;AACd,YAAQ,WAAW,aAAa,IAAI;AAAA,EACtC;AAGA,YAAU,SAAS,SAAS,CAAC;AAE7B,MAAI;AACJ,MAAI;AAEJ,MAAI;AACF,aAAS,MAAM,OAAO;AACtB,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,kBAAc,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAChE,UAAM;AAAA,EACR,UAAE;AAEA,UAAM,cAAc,cAAc,YAAY;AAC9C,UAAM,aAAqC,CAAC;AAC5C,QAAI,aAAa;AACf,iBAAW,OAAO,IAAI,YAAY;AAAA,IACpC;AACA,4BAAwB,SAAS,aAAa,GAAG,UAAU;AAG3D,UAAM,WAAW,KAAK,IAAI,IAAI,QAAQ,UAAU,QAAQ;AACxD,cAAU,SAAS,wBAAwB,QAAQ;AAGnD,QAAI;AACF,YAAM,YAAY,QAAQ,OAAO;AACjC,YAAM,OAAO,MAAM;AAAA,IACrB,QAAQ;AAAA,IAER;AAAA,EACF;AACF;;;AFlFA,IAAqB,YAArB,cAAuC,QAAQ;AAAA,EAC7C,OAAO,cAAc;AAAA,EAErB,OAAO,WAAW,CAAC,qCAAqC;AAAA,EAExD,MAAM,MAAqB;AACzB,WAAO,cAAc,MAAM,YAAY;AAErC,YAAM,SAAS,MAAM,UAAU;AAE/B,UAAI,QAAQ;AACV,uBAAe;AAAA,UACb;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAED,cAAM,iBAAiB,MAAM,QAAQ;AAAA,UACnC,SAAS;AAAA,UACT,SAAS;AAAA,QACX,CAAC;AAED,YAAI,CAAC,gBAAgB;AACnB,eAAK,IAAI,oBAAoB;AAC7B;AAAA,QACF;AAAA,MACF;AAGA,YAAM,aAAa,MAAM,cAAc;AACvC,UAAI,aAA4B;AAChC,UAAI,cAAgC;AAEpC,UAAI,WAAW,SAAS,GAAG;AACzB,aAAK,IAAI,sCAAsC;AAC/C,aAAK,IAAI,EAAE;AAGX,mBAAW,OAAO,YAAY;AAC5B,eAAK,IAAI,cAAc,IAAI,OAAO,EAAE;AACpC,eAAK,IAAI,kBAAkB,IAAI,WAAW,EAAE;AAC5C,eAAK,IAAI,aAAa,IAAI,MAAM,EAAE;AAClC,eAAK,IAAI,EAAE;AAAA,QACb;AAEA,cAAM,eAAe,MAAM,QAAQ;AAAA,UACjC,SAAS;AAAA,UACT,SAAS;AAAA,QACX,CAAC;AAED,YAAI,cAAc;AAEhB,gBAAM,UAAU,WAAW,IAAI,CAAC,SAAS;AAAA,YACvC,MAAM,GAAG,IAAI,OAAO,KAAK,IAAI,WAAW,MAAM,IAAI,MAAM;AAAA,YACxD,OAAO;AAAA,UACT,EAAE;AAEF,wBAAc,MAAMC,QAAkB;AAAA,YACpC,SAAS;AAAA,YACT;AAAA,UACF,CAAC;AAGD,uBAAa,MAAM,oBAAoB,YAAY,aAAa,YAAY,MAAM;AAElF,cAAI,CAAC,YAAY;AACf,iBAAK,MAAM,qCAAqC,YAAY,WAAW,EAAE;AAAA,UAC3E;AAEA,eAAK,IAAI;AAAA,qBAAwB,YAAY,MAAM,IAAI,YAAY,WAAW,EAAE;AAAA,QAClF;AAAA,MACF;AAGA,UAAI,CAAC,YAAY;AACf,qBAAa,MAAM,eAAe,yBAAyB;AAE3D,qBAAa,WAAW,KAAK;AAAA,MAC/B;AAEA,UAAI,CAAC,mBAAmB,UAAU,GAAG;AACnC,aAAK,MAAM,yDAAyD;AAAA,MACtE;AAGA,YAAM,UAAU,yBAAyB,UAAU;AAEnD,WAAK,IAAI;AAAA,WAAc,OAAO,EAAE;AAEhC,YAAM,eAAe,MAAM,QAAQ;AAAA,QACjC,SAAS;AAAA,QACT,SAAS;AAAA,MACX,CAAC;AAED,UAAI,CAAC,cAAc;AACjB,aAAK,IAAI,oBAAoB;AAC7B;AAAA,MACF;AAGA,UAAI;AACF,cAAM,gBAAgB,UAAU;AAChC,aAAK,IAAI,2CAAsC;AAC/C,aAAK,IAAI,mBAAc,OAAO,EAAE;AAChC,aAAK,IAAI,6EAA6E;AACtF,aAAK,IAAI,6DAA6D;AAGtE,YAAI,aAAa;AACf,eAAK,IAAI,EAAE;AACX,gBAAM,gBAAgB,MAAM,QAAQ;AAAA,YAClC,SAAS,8BAA8B,YAAY,MAAM,IAAI,YAAY,WAAW;AAAA,YACpF,SAAS;AAAA,UACX,CAAC;AAED,cAAI,eAAe;AACjB,kBAAM,UAAU,MAAM;AAAA,cACpB,YAAY;AAAA,cACZ,YAAY;AAAA,YACd;AAEA,gBAAI,SAAS;AACX,mBAAK;AAAA,gBACH;AAAA,iCAA+B,YAAY,MAAM,IAAI,YAAY,WAAW;AAAA,cAC9E;AACA,mBAAK,IAAI,yEAAyE;AAClF,mBAAK,IAAI,2EAA2E;AAAA,YACtF,OAAO;AACL,mBAAK;AAAA,gBACH;AAAA,iDAA0C,YAAY,MAAM,IAAI,YAAY,WAAW;AAAA,cACzF;AACA,mBAAK,IAAI,wCAAwC;AAAA,YACnD;AAAA,UACF,OAAO;AACL,iBAAK,IAAI;AAAA,qBAAwB,YAAY,MAAM,IAAI,YAAY,WAAW,EAAE;AAChF,iBAAK,IAAI,+DAA+D;AAAA,UAC1E;AAAA,QACF;AAAA,MACF,SAAS,KAAU;AACjB,aAAK,MAAM,wBAAwB,IAAI,OAAO,EAAE;AAAA,MAClD;AAAA,IACF,CAAC;AAAA,EACH;AACF;","names":["select","getBuildType","getBuildType","select"]}

package/dist/commands/auth/logout.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/commands/auth/logout.ts","../../../src/telemetry.ts","../../../src/utils/globalConfig.ts"],"sourcesContent":["/**\n * Auth Logout Command\n *\n * Remove private key from OS keyring\n */\n\nimport { Command, Flags } from \"@oclif/core\";\nimport { confirm } from \"@inquirer/prompts\";\nimport { deletePrivateKey, getPrivateKey, getAddressFromPrivateKey } from \"@layr-labs/ecloud-sdk\";\nimport { withTelemetry } from \"../../telemetry\";\n\nexport default class AuthLogout extends Command {\n  static description = \"Remove private key from OS keyring\";\n\n  static examples = [\n    \"<%= config.bin %> <%= command.id %>\",\n    \"<%= config.bin %> <%= command.id %> --force\",\n  ];\n\n  static flags = {\n    force: Flags.boolean({\n      description: \"Skip confirmation prompt\",\n      default: false,\n    }),\n  };\n\n  async run(): Promise<void> {\n    return withTelemetry(this, async () => {\n      const { flags } = await this.parse(AuthLogout);\n\n      // Check if key exists\n      const privateKey = await getPrivateKey();\n\n      if (!privateKey) {\n        this.log(\"No key found in keyring\");\n        this.log(\"\\nNothing to remove.\");\n        return;\n      }\n\n      // Show address\n      const address = getAddressFromPrivateKey(privateKey);\n      this.log(\"Found stored key:\");\n      this.log(`  Address: ${address}`);\n      this.log(\"\");\n\n      // Confirm unless forced\n      if (!flags.force) {\n        const confirmed = await confirm({\n          message: \"Remove private key from keyring?\",\n          default: false,\n        });\n\n        if (!confirmed) {\n          this.log(\"Logout cancelled\");\n          return;\n        }\n      }\n\n      // Remove from keyring\n      try {\n        const deleted = await deletePrivateKey();\n\n        if (deleted) {\n          this.log(\"\\n✓ Successfully removed key from keyring\");\n          this.log(\"\\nYou will need to provide --private-key flag for future commands,\");\n          this.log(\"or run 'ecloud auth login' to store a key again.\");\n        } else {\n          this.log(\"\\nFailed to remove key (it may have already been removed)\");\n        }\n      } catch (err: any) {\n        this.error(`Failed to remove key: ${err.message}`);\n      }\n    });\n  }\n}\n","/**\n * Telemetry utilities for CLI commands\n *\n * Provides helpers to wrap command execution with telemetry tracking\n */\n\nimport {\n  createTelemetryClient,\n  createAppEnvironment,\n  createMetricsContext,\n  addMetric,\n  addMetricWithDimensions,\n  emitMetrics,\n  type TelemetryClient,\n  getBuildType,\n} from \"@layr-labs/ecloud-sdk\";\nimport { Command } from \"@oclif/core\";\nimport {\n  getDefaultEnvironment,\n  getOrCreateUserUUID,\n  getGlobalTelemetryPreference,\n} from \"./utils/globalConfig\";\n\n/**\n * Create a telemetry client for CLI usage\n */\nexport function createCLITelemetryClient(): TelemetryClient {\n  // Get user UUID from CLI's globalConfig (handles I/O)\n  const userUUID = getOrCreateUserUUID();\n  const environment = createAppEnvironment(userUUID);\n\n  // Get telemetry preference from CLI's globalConfig\n  const telemetryEnabled = getGlobalTelemetryPreference();\n\n  return createTelemetryClient(environment, \"ecloud-cli\", {\n    telemetryEnabled: telemetryEnabled !== false, // Enabled by default, disabled only if explicitly set to false\n  });\n}\n\n/**\n * Wrap a command execution with telemetry\n *\n * @param command - The CLI command instance\n * @param action - The command action to execute\n * @returns The result of the action\n */\nexport async function withTelemetry<T>(command: Command, action: () => Promise<T>): Promise<T> {\n  const client = createCLITelemetryClient();\n  const metrics = createMetricsContext();\n\n  // Set source to identify CLI usage\n  metrics.properties[\"source\"] = \"ecloud-cli\";\n\n  // Set command name in properties\n  metrics.properties[\"command\"] = command.id || command.constructor.name;\n\n  // Set environment in properties\n  const environment = getDefaultEnvironment() || \"sepolia\";\n  metrics.properties[\"environment\"] = environment;\n\n  // Set buildType in properties\n  const buildType = getBuildType() || \"prod\";\n  metrics.properties[\"build_type\"] = buildType;\n\n  // Set CLI version if available\n  const cliVersion = command.config.version;\n  if (cliVersion) {\n    metrics.properties[\"cli_version\"] = cliVersion;\n  }\n\n  // Add initial count metric\n  addMetric(metrics, \"Count\", 1);\n\n  let actionError: Error | undefined;\n  let result: T;\n\n  try {\n    result = await action();\n    return result;\n  } catch (err) {\n    actionError = err instanceof Error ? err : new Error(String(err));\n    throw err;\n  } finally {\n    // Add result metric\n    const resultValue = actionError ? \"Failure\" : \"Success\";\n    const dimensions: Record<string, string> = {};\n    if (actionError) {\n      dimensions[\"error\"] = actionError.message;\n    }\n    addMetricWithDimensions(metrics, resultValue, 1, dimensions);\n\n    // Add duration metric\n    const duration = Date.now() - metrics.startTime.getTime();\n    addMetric(metrics, \"DurationMilliseconds\", duration);\n\n    // Emit all metrics\n    try {\n      await emitMetrics(client, metrics);\n      await client.close();\n    } catch {\n      // Silently ignore telemetry errors\n    }\n  }\n}\n","/**\n * Global configuration management\n *\n * Stores user-level configuration that persists across all CLI usage.\n * - $XDG_CONFIG_HOME/ecloud[BuildSuffix]/config.yaml (if XDG_CONFIG_HOME is set)\n * - Or ~/.config/ecloud[BuildSuffix]/config.yaml (fallback)\n *\n * Where BuildSuffix is:\n * - \"\" (empty) for production builds\n * - \"-dev\" for development builds\n */\n\nimport * as fs from \"fs\";\nimport * as path from \"path\";\nimport * as os from \"os\";\nimport { load as loadYaml, dump as dumpYaml } from \"js-yaml\";\nimport { getBuildType } from \"@layr-labs/ecloud-sdk\";\nimport * as crypto from \"crypto\";\nconst GLOBAL_CONFIG_FILE = \"config.yaml\";\n\nexport interface ProfileCacheEntry {\n  updated_at: number; // Unix timestamp in milliseconds\n  profiles: { [appId: string]: string }; // appId -> profile name\n}\n\nexport interface GlobalConfig {\n  first_run?: boolean;\n  telemetry_enabled?: boolean;\n  user_uuid?: string;\n  default_environment?: string;\n  last_version_check?: number;\n  last_known_version?: string;\n  profile_cache?: {\n    [environment: string]: ProfileCacheEntry;\n  };\n  directory_links?: {\n    [environment: string]: {\n      [directoryPath: string]: string;\n    };\n  };\n}\n\n// Profile cache TTL: 24 hours in milliseconds\nconst PROFILE_CACHE_TTL_MS = 24 * 60 * 60 * 1000;\n\n/**\n * Get the XDG-compliant directory where global ecloud config should be stored\n */\nfunction getGlobalConfigDir(): string {\n  // First check XDG_CONFIG_HOME\n  const configHome = process.env.XDG_CONFIG_HOME;\n\n  let baseDir: string;\n  if (configHome && path.isAbsolute(configHome)) {\n    baseDir = configHome;\n  } else {\n    // Fall back to ~/.config\n    baseDir = path.join(os.homedir(), \".config\");\n  }\n\n  // Use environment-specific config directory\n  const buildType = getBuildType();\n  const buildSuffix = buildType === \"dev\" ? \"-dev\" : \"\";\n  const configDirName = `ecloud${buildSuffix}`;\n\n  return path.join(baseDir, configDirName);\n}\n\n/**\n * Get the full path to the global config file\n */\nfunction getGlobalConfigPath(): string {\n  return path.join(getGlobalConfigDir(), GLOBAL_CONFIG_FILE);\n}\n\n/**\n * Load global configuration, creating defaults if needed\n */\nexport function loadGlobalConfig(): GlobalConfig {\n  const configPath = getGlobalConfigPath();\n\n  // If file doesn't exist, return defaults for first run\n  if (!fs.existsSync(configPath)) {\n    return {\n      first_run: true,\n    };\n  }\n\n  try {\n    const content = fs.readFileSync(configPath, \"utf-8\");\n    const config = loadYaml(content) as GlobalConfig;\n    return config || { first_run: true };\n  } catch {\n    // If parsing fails, return defaults\n    return {\n      first_run: true,\n    };\n  }\n}\n\n/**\n * Save global configuration to disk\n */\nexport function saveGlobalConfig(config: GlobalConfig): void {\n  const configPath = getGlobalConfigPath();\n\n  // Ensure directory exists\n  const configDir = path.dirname(configPath);\n  fs.mkdirSync(configDir, { recursive: true, mode: 0o755 });\n\n  // Write config file\n  const content = dumpYaml(config, { lineWidth: -1 });\n  fs.writeFileSync(configPath, content, { mode: 0o644 });\n}\n\nfunction normalizeDirectoryPath(directoryPath: string): string {\n  const resolved = path.resolve(directoryPath);\n  try {\n    return fs.realpathSync(resolved);\n  } catch {\n    return resolved;\n  }\n}\n\n/**\n * Get linked app ID for a directory in an environment\n */\nexport function getLinkedAppForDirectory(environment: string, directoryPath: string): string | null {\n  if (!directoryPath) {\n    return null;\n  }\n\n  const config = loadGlobalConfig();\n  const links = config.directory_links?.[environment];\n  if (!links) {\n    return null;\n  }\n\n  const normalizedPath = normalizeDirectoryPath(directoryPath);\n  const appId = links[normalizedPath];\n  return appId || null;\n}\n\n/**\n * Link a directory to an app ID in an environment\n */\nexport function setLinkedAppForDirectory(\n  environment: string,\n  directoryPath: string,\n  appId: string,\n): void {\n  if (!directoryPath || !environment) {\n    return;\n  }\n\n  const config = loadGlobalConfig();\n  if (!config.directory_links) {\n    config.directory_links = {};\n  }\n  if (!config.directory_links[environment]) {\n    config.directory_links[environment] = {};\n  }\n\n  const normalizedPath = normalizeDirectoryPath(directoryPath);\n  // Normalize appId to lowercase for consistent lookups\n  config.directory_links[environment][normalizedPath] = appId.toLowerCase();\n  saveGlobalConfig(config);\n}\n\n/**\n * Get the user's preferred deployment environment\n */\nexport function getDefaultEnvironment(): string | undefined {\n  const config = loadGlobalConfig();\n  return config.default_environment;\n}\n\n/**\n * Set the user's preferred deployment environment\n */\nexport function setDefaultEnvironment(environment: string): void {\n  const config = loadGlobalConfig();\n  config.default_environment = environment;\n  config.first_run = false; // No longer first run after setting environment\n  saveGlobalConfig(config);\n}\n\n/**\n * Check if this is the user's first time running the CLI\n */\nexport function isFirstRun(): boolean {\n  const config = loadGlobalConfig();\n  return config.first_run === true;\n}\n\n/**\n * Mark that the first run has been completed\n */\nexport function markFirstRunComplete(): void {\n  const config = loadGlobalConfig();\n  config.first_run = false;\n  saveGlobalConfig(config);\n}\n\n/**\n * Get the global telemetry preference\n */\nexport function getGlobalTelemetryPreference(): boolean | undefined {\n  const config = loadGlobalConfig();\n  return config.telemetry_enabled;\n}\n\n/**\n * Set the global telemetry preference\n */\nexport function setGlobalTelemetryPreference(enabled: boolean): void {\n  const config = loadGlobalConfig();\n  config.telemetry_enabled = enabled;\n  config.first_run = false; // No longer first run after setting preference\n  saveGlobalConfig(config);\n}\n\n// ==================== Profile Cache Functions ====================\n\n/**\n * Get cached profile names for an environment\n * Returns null if cache is missing or expired (older than 24 hours)\n */\nexport function getProfileCache(environment: string): Record<string, string> | null {\n  const config = loadGlobalConfig();\n  const cacheEntry = config.profile_cache?.[environment];\n\n  if (!cacheEntry) {\n    return null;\n  }\n\n  // Check if cache is expired\n  const now = Date.now();\n  if (now - cacheEntry.updated_at > PROFILE_CACHE_TTL_MS) {\n    return null;\n  }\n\n  return cacheEntry.profiles;\n}\n\n/**\n * Set cached profile names for an environment\n */\nexport function setProfileCache(environment: string, profiles: Record<string, string>): void {\n  const config = loadGlobalConfig();\n\n  if (!config.profile_cache) {\n    config.profile_cache = {};\n  }\n\n  config.profile_cache[environment] = {\n    updated_at: Date.now(),\n    profiles,\n  };\n\n  saveGlobalConfig(config);\n}\n\n/**\n * Invalidate profile cache for a specific environment or all environments\n */\nexport function invalidateProfileCache(environment?: string): void {\n  const config = loadGlobalConfig();\n\n  if (!config.profile_cache) {\n    return;\n  }\n\n  if (environment) {\n    // Invalidate specific environment\n    delete config.profile_cache[environment];\n  } else {\n    // Invalidate all environments\n    config.profile_cache = {};\n  }\n\n  saveGlobalConfig(config);\n}\n\n/**\n * Update a single profile name in the cache\n * This is useful after deploy or profile set to update just one entry\n */\nexport function updateProfileCacheEntry(\n  environment: string,\n  appId: string,\n  profileName: string,\n): void {\n  const config = loadGlobalConfig();\n\n  if (!config.profile_cache) {\n    config.profile_cache = {};\n  }\n\n  if (!config.profile_cache[environment]) {\n    config.profile_cache[environment] = {\n      updated_at: Date.now(),\n      profiles: {},\n    };\n  }\n\n  // Normalize appId to lowercase for consistent lookups\n  const normalizedAppId = appId.toLowerCase();\n  config.profile_cache[environment].profiles[normalizedAppId] = profileName;\n  config.profile_cache[environment].updated_at = Date.now();\n\n  saveGlobalConfig(config);\n}\n\n/**\n * Get the user UUID from global config, or generate a new one if it doesn't exist\n */\nexport function getOrCreateUserUUID(): string {\n  const config = loadGlobalConfig();\n  if (config.user_uuid) {\n    return config.user_uuid;\n  }\n\n  // Generate a new UUID (v4)\n  const uuid = generateUUID();\n\n  // Save it to config\n  config.user_uuid = uuid;\n  config.first_run = false;\n  saveGlobalConfig(config);\n\n  return uuid;\n}\n\n/**\n * Generate a UUID v4\n */\nfunction generateUUID(): string {\n  // UUID v4 format: xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx\n  // Use cryptographically secure random values.\n  const bytes = crypto.randomBytes(16);\n  // Per RFC 4122 section 4.4, set bits for version and `clock_seq_hi_and_reserved`\n  bytes[6] = (bytes[6] & 0x0f) | 0x40; // Version 4\n  bytes[8] = (bytes[8] & 0x3f) | 0x80; // Variant 10\n  const hex = Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\"));\n  return (\n    hex.slice(0, 4).join(\"\") +\n    hex.slice(4, 6).join(\"\") +\n    \"-\" +\n    hex.slice(6, 8).join(\"\") +\n    \"-\" +\n    hex.slice(8, 10).join(\"\") +\n    \"-\" +\n    hex.slice(10, 12).join(\"\") +\n    \"-\" +\n    hex.slice(12, 16).join(\"\")\n  );\n}\n\n/**\n * Save user UUID to global config (preserves existing UUID if present)\n */\nexport function saveUserUUID(userUUID: string): void {\n  const config = loadGlobalConfig();\n  // Only update if not already set\n  if (!config.user_uuid) {\n    config.user_uuid = userUUID;\n    saveGlobalConfig(config);\n  }\n}\n"],"mappings":";;;AAMA,SAAS,SAAS,aAAa;AAC/B,SAAS,eAAe;AACxB,SAAS,kBAAkB,eAAe,gCAAgC;;;ACF1E;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA,gBAAAA;AAAA,OACK;;;ACHP,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,YAAY,QAAQ;AACpB,SAAS,QAAQ,UAAU,QAAQ,gBAAgB;AACnD,SAAS,oBAAoB;AAC7B,YAAY,YAAY;AACxB,IAAM,qBAAqB;AAyB3B,IAAM,uBAAuB,KAAK,KAAK,KAAK;AAK5C,SAAS,qBAA6B;AAEpC,QAAM,aAAa,QAAQ,IAAI;AAE/B,MAAI;AACJ,MAAI,cAAmB,gBAAW,UAAU,GAAG;AAC7C,cAAU;AAAA,EACZ,OAAO;AAEL,cAAe,UAAQ,WAAQ,GAAG,SAAS;AAAA,EAC7C;AAGA,QAAM,YAAY,aAAa;AAC/B,QAAM,cAAc,cAAc,QAAQ,SAAS;AACnD,QAAM,gBAAgB,SAAS,WAAW;AAE1C,SAAY,UAAK,SAAS,aAAa;AACzC;AAKA,SAAS,sBAA8B;AACrC,SAAY,UAAK,mBAAmB,GAAG,kBAAkB;AAC3D;AAKO,SAAS,mBAAiC;AAC/C,QAAM,aAAa,oBAAoB;AAGvC,MAAI,CAAI,cAAW,UAAU,GAAG;AAC9B,WAAO;AAAA,MACL,WAAW;AAAA,IACb;AAAA,EACF;AAEA,MAAI;AACF,UAAM,UAAa,gBAAa,YAAY,OAAO;AACnD,UAAM,SAAS,SAAS,OAAO;AAC/B,WAAO,UAAU,EAAE,WAAW,KAAK;AAAA,EACrC,QAAQ;AAEN,WAAO;AAAA,MACL,WAAW;AAAA,IACb;AAAA,EACF;AACF;AAKO,SAAS,iBAAiB,QAA4B;AAC3D,QAAM,aAAa,oBAAoB;AAGvC,QAAM,YAAiB,aAAQ,UAAU;AACzC,EAAG,aAAU,WAAW,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAGxD,QAAM,UAAU,SAAS,QAAQ,EAAE,WAAW,GAAG,CAAC;AAClD,EAAG,iBAAc,YAAY,SAAS,EAAE,MAAM,IAAM,CAAC;AACvD;AA2DO,SAAS,wBAA4C;AAC1D,QAAM,SAAS,iBAAiB;AAChC,SAAO,OAAO;AAChB;AAgCO,SAAS,+BAAoD;AAClE,QAAM,SAAS,iBAAiB;AAChC,SAAO,OAAO;AAChB;AA2GO,SAAS,sBAA8B;AAC5C,QAAM,SAAS,iBAAiB;AAChC,MAAI,OAAO,WAAW;AACpB,WAAO,OAAO;AAAA,EAChB;AAGA,QAAM,OAAO,aAAa;AAG1B,SAAO,YAAY;AACnB,SAAO,YAAY;AACnB,mBAAiB,MAAM;AAEvB,SAAO;AACT;AAKA,SAAS,eAAuB;AAG9B,QAAM,QAAe,mBAAY,EAAE;AAEnC,QAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,QAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,QAAM,MAAM,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AACpE,SACE,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,IACvB,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,IACvB,MACA,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,IACvB,MACA,IAAI,MAAM,GAAG,EAAE,EAAE,KAAK,EAAE,IACxB,MACA,IAAI,MAAM,IAAI,EAAE,EAAE,KAAK,EAAE,IACzB,MACA,IAAI,MAAM,IAAI,EAAE,EAAE,KAAK,EAAE;AAE7B;;;AD3UO,SAAS,2BAA4C;AAE1D,QAAM,WAAW,oBAAoB;AACrC,QAAM,cAAc,qBAAqB,QAAQ;AAGjD,QAAM,mBAAmB,6BAA6B;AAEtD,SAAO,sBAAsB,aAAa,cAAc;AAAA,IACtD,kBAAkB,qBAAqB;AAAA;AAAA,EACzC,CAAC;AACH;AASA,eAAsB,cAAiB,SAAkB,QAAsC;AAC7F,QAAM,SAAS,yBAAyB;AACxC,QAAM,UAAU,qBAAqB;AAGrC,UAAQ,WAAW,QAAQ,IAAI;AAG/B,UAAQ,WAAW,SAAS,IAAI,QAAQ,MAAM,QAAQ,YAAY;AAGlE,QAAM,cAAc,sBAAsB,KAAK;AAC/C,UAAQ,WAAW,aAAa,IAAI;AAGpC,QAAM,YAAYC,cAAa,KAAK;AACpC,UAAQ,WAAW,YAAY,IAAI;AAGnC,QAAM,aAAa,QAAQ,OAAO;AAClC,MAAI,YAAY;AACd,YAAQ,WAAW,aAAa,IAAI;AAAA,EACtC;AAGA,YAAU,SAAS,SAAS,CAAC;AAE7B,MAAI;AACJ,MAAI;AAEJ,MAAI;AACF,aAAS,MAAM,OAAO;AACtB,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,kBAAc,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAChE,UAAM;AAAA,EACR,UAAE;AAEA,UAAM,cAAc,cAAc,YAAY;AAC9C,UAAM,aAAqC,CAAC;AAC5C,QAAI,aAAa;AACf,iBAAW,OAAO,IAAI,YAAY;AAAA,IACpC;AACA,4BAAwB,SAAS,aAAa,GAAG,UAAU;AAG3D,UAAM,WAAW,KAAK,IAAI,IAAI,QAAQ,UAAU,QAAQ;AACxD,cAAU,SAAS,wBAAwB,QAAQ;AAGnD,QAAI;AACF,YAAM,YAAY,QAAQ,OAAO;AACjC,YAAM,OAAO,MAAM;AAAA,IACrB,QAAQ;AAAA,IAER;AAAA,EACF;AACF;;;AD5FA,IAAqB,aAArB,MAAqB,oBAAmB,QAAQ;AAAA,EAC9C,OAAO,cAAc;AAAA,EAErB,OAAO,WAAW;AAAA,IAChB;AAAA,IACA;AAAA,EACF;AAAA,EAEA,OAAO,QAAQ;AAAA,IACb,OAAO,MAAM,QAAQ;AAAA,MACnB,aAAa;AAAA,MACb,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,MAAqB;AACzB,WAAO,cAAc,MAAM,YAAY;AACrC,YAAM,EAAE,MAAM,IAAI,MAAM,KAAK,MAAM,WAAU;AAG7C,YAAM,aAAa,MAAM,cAAc;AAEvC,UAAI,CAAC,YAAY;AACf,aAAK,IAAI,yBAAyB;AAClC,aAAK,IAAI,sBAAsB;AAC/B;AAAA,MACF;AAGA,YAAM,UAAU,yBAAyB,UAAU;AACnD,WAAK,IAAI,mBAAmB;AAC5B,WAAK,IAAI,cAAc,OAAO,EAAE;AAChC,WAAK,IAAI,EAAE;AAGX,UAAI,CAAC,MAAM,OAAO;AAChB,cAAM,YAAY,MAAM,QAAQ;AAAA,UAC9B,SAAS;AAAA,UACT,SAAS;AAAA,QACX,CAAC;AAED,YAAI,CAAC,WAAW;AACd,eAAK,IAAI,kBAAkB;AAC3B;AAAA,QACF;AAAA,MACF;AAGA,UAAI;AACF,cAAM,UAAU,MAAM,iBAAiB;AAEvC,YAAI,SAAS;AACX,eAAK,IAAI,gDAA2C;AACpD,eAAK,IAAI,oEAAoE;AAC7E,eAAK,IAAI,kDAAkD;AAAA,QAC7D,OAAO;AACL,eAAK,IAAI,2DAA2D;AAAA,QACtE;AAAA,MACF,SAAS,KAAU;AACjB,aAAK,MAAM,yBAAyB,IAAI,OAAO,EAAE;AAAA,MACnD;AAAA,IACF,CAAC;AAAA,EACH;AACF;","names":["getBuildType","getBuildType"]}
+{"version":3,"sources":["../../../src/commands/auth/logout.ts","../../../src/telemetry.ts","../../../src/utils/globalConfig.ts"],"sourcesContent":["/**\n * Auth Logout Command\n *\n * Remove private key from OS keyring\n */\n\nimport { Command, Flags } from \"@oclif/core\";\nimport { confirm } from \"@inquirer/prompts\";\nimport { deletePrivateKey, getPrivateKey, getAddressFromPrivateKey } from \"@layr-labs/ecloud-sdk\";\nimport { withTelemetry } from \"../../telemetry\";\n\nexport default class AuthLogout extends Command {\n  static description = \"Remove private key from OS keyring\";\n\n  static examples = [\n    \"<%= config.bin %> <%= command.id %>\",\n    \"<%= config.bin %> <%= command.id %> --force\",\n  ];\n\n  static flags = {\n    force: Flags.boolean({\n      description: \"Skip confirmation prompt\",\n      default: false,\n    }),\n  };\n\n  async run(): Promise<void> {\n    return withTelemetry(this, async () => {\n      const { flags } = await this.parse(AuthLogout);\n\n      // Check if key exists\n      const privateKey = await getPrivateKey();\n\n      if (!privateKey) {\n        this.log(\"No key found in keyring\");\n        this.log(\"\\nNothing to remove.\");\n        return;\n      }\n\n      // Show address\n      const address = getAddressFromPrivateKey(privateKey);\n      this.log(\"Found stored key:\");\n      this.log(`  Address: ${address}`);\n      this.log(\"\");\n\n      // Confirm unless forced\n      if (!flags.force) {\n        const confirmed = await confirm({\n          message: \"Remove private key from keyring?\",\n          default: false,\n        });\n\n        if (!confirmed) {\n          this.log(\"Logout cancelled\");\n          return;\n        }\n      }\n\n      // Remove from keyring\n      try {\n        const deleted = await deletePrivateKey();\n\n        if (deleted) {\n          this.log(\"\\n✓ Successfully removed key from keyring\");\n          this.log(\"\\nYou will need to provide --private-key flag for future commands,\");\n          this.log(\"or run 'ecloud auth login' to store a key again.\");\n        } else {\n          this.log(\"\\nFailed to remove key (it may have already been removed)\");\n        }\n      } catch (err: any) {\n        this.error(`Failed to remove key: ${err.message}`);\n      }\n    });\n  }\n}\n","/**\n * Telemetry utilities for CLI commands\n *\n * Provides helpers to wrap command execution with telemetry tracking\n */\n\nimport {\n  createTelemetryClient,\n  createAppEnvironment,\n  createMetricsContext,\n  addMetric,\n  addMetricWithDimensions,\n  emitMetrics,\n  type TelemetryClient,\n  getBuildType,\n} from \"@layr-labs/ecloud-sdk\";\nimport { Command } from \"@oclif/core\";\nimport {\n  getDefaultEnvironment,\n  getOrCreateUserUUID,\n  getGlobalTelemetryPreference,\n} from \"./utils/globalConfig\";\n\n/**\n * Create a telemetry client for CLI usage\n */\nexport function createCLITelemetryClient(): TelemetryClient {\n  // Get user UUID from CLI's globalConfig (handles I/O)\n  const userUUID = getOrCreateUserUUID();\n  const environment = createAppEnvironment(userUUID);\n\n  // Get telemetry preference from CLI's globalConfig\n  const telemetryEnabled = getGlobalTelemetryPreference();\n\n  return createTelemetryClient(environment, \"ecloud-cli\", {\n    telemetryEnabled: telemetryEnabled !== false, // Enabled by default, disabled only if explicitly set to false\n  });\n}\n\n/**\n * Wrap a command execution with telemetry\n *\n * @param command - The CLI command instance\n * @param action - The command action to execute\n * @returns The result of the action\n */\nexport async function withTelemetry<T>(command: Command, action: () => Promise<T>): Promise<T> {\n  const client = createCLITelemetryClient();\n  const metrics = createMetricsContext();\n\n  // Set source to identify CLI usage\n  metrics.properties[\"source\"] = \"ecloud-cli\";\n\n  // Set command name in properties\n  metrics.properties[\"command\"] = command.id || command.constructor.name;\n\n  // Set environment in properties\n  const environment = getDefaultEnvironment() || \"sepolia\";\n  metrics.properties[\"environment\"] = environment;\n\n  // Set buildType in properties\n  const buildType = getBuildType() || \"prod\";\n  metrics.properties[\"build_type\"] = buildType;\n\n  // Set CLI version if available\n  const cliVersion = command.config.version;\n  if (cliVersion) {\n    metrics.properties[\"cli_version\"] = cliVersion;\n  }\n\n  // Add initial count metric\n  addMetric(metrics, \"Count\", 1);\n\n  let actionError: Error | undefined;\n  let result: T;\n\n  try {\n    result = await action();\n    return result;\n  } catch (err) {\n    actionError = err instanceof Error ? err : new Error(String(err));\n    throw err;\n  } finally {\n    // Add result metric\n    const resultValue = actionError ? \"Failure\" : \"Success\";\n    const dimensions: Record<string, string> = {};\n    if (actionError) {\n      dimensions[\"error\"] = actionError.message;\n    }\n    addMetricWithDimensions(metrics, resultValue, 1, dimensions);\n\n    // Add duration metric\n    const duration = Date.now() - metrics.startTime.getTime();\n    addMetric(metrics, \"DurationMilliseconds\", duration);\n\n    // Emit all metrics\n    try {\n      await emitMetrics(client, metrics);\n      await client.close();\n    } catch {\n      // Silently ignore telemetry errors\n    }\n  }\n}\n","/**\n * Global configuration management\n *\n * Stores user-level configuration that persists across all CLI usage.\n * - $XDG_CONFIG_HOME/ecloud[BuildSuffix]/config.yaml (if XDG_CONFIG_HOME is set)\n * - Or ~/.config/ecloud[BuildSuffix]/config.yaml (fallback)\n *\n * Where BuildSuffix is:\n * - \"\" (empty) for production builds\n * - \"-dev\" for development builds\n */\n\nimport * as fs from \"fs\";\nimport * as path from \"path\";\nimport * as os from \"os\";\nimport { load as loadYaml, dump as dumpYaml } from \"js-yaml\";\nimport { getBuildType } from \"@layr-labs/ecloud-sdk\";\nimport * as crypto from \"crypto\";\nconst GLOBAL_CONFIG_FILE = \"config.yaml\";\n\nexport interface ProfileCacheEntry {\n  updated_at: number; // Unix timestamp in milliseconds\n  profiles: { [appId: string]: string }; // appId -> profile name\n}\n\nexport interface GlobalConfig {\n  first_run?: boolean;\n  telemetry_enabled?: boolean;\n  user_uuid?: string;\n  default_environment?: string;\n  last_version_check?: number;\n  last_known_version?: string;\n  profile_cache?: {\n    [environment: string]: ProfileCacheEntry;\n  };\n  directory_links?: {\n    [environment: string]: {\n      [directoryPath: string]: string;\n    };\n  };\n}\n\n// Profile cache TTL: 24 hours in milliseconds\nconst PROFILE_CACHE_TTL_MS = 24 * 60 * 60 * 1000;\n\n/**\n * Get the XDG-compliant directory where global ecloud config should be stored\n */\nfunction getGlobalConfigDir(): string {\n  // First check XDG_CONFIG_HOME\n  const configHome = process.env.XDG_CONFIG_HOME;\n\n  let baseDir: string;\n  if (configHome && path.isAbsolute(configHome)) {\n    baseDir = configHome;\n  } else {\n    // Fall back to ~/.config\n    baseDir = path.join(os.homedir(), \".config\");\n  }\n\n  // Use environment-specific config directory\n  const buildType = getBuildType();\n  const buildSuffix = buildType === \"dev\" ? \"-dev\" : \"\";\n  const configDirName = `ecloud${buildSuffix}`;\n\n  return path.join(baseDir, configDirName);\n}\n\n/**\n * Get the full path to the global config file\n */\nfunction getGlobalConfigPath(): string {\n  return path.join(getGlobalConfigDir(), GLOBAL_CONFIG_FILE);\n}\n\n/**\n * Load global configuration, creating defaults if needed\n */\nexport function loadGlobalConfig(): GlobalConfig {\n  const configPath = getGlobalConfigPath();\n\n  // If file doesn't exist, return defaults for first run\n  if (!fs.existsSync(configPath)) {\n    return {\n      first_run: true,\n    };\n  }\n\n  try {\n    const content = fs.readFileSync(configPath, \"utf-8\");\n    const config = loadYaml(content) as GlobalConfig;\n    return config || { first_run: true };\n  } catch {\n    // If parsing fails, return defaults\n    return {\n      first_run: true,\n    };\n  }\n}\n\n/**\n * Save global configuration to disk\n */\nexport function saveGlobalConfig(config: GlobalConfig): void {\n  const configPath = getGlobalConfigPath();\n\n  // Ensure directory exists\n  const configDir = path.dirname(configPath);\n  fs.mkdirSync(configDir, { recursive: true, mode: 0o755 });\n\n  // Write config file\n  const content = dumpYaml(config, { lineWidth: -1 });\n  fs.writeFileSync(configPath, content, { mode: 0o644 });\n}\n\nfunction normalizeDirectoryPath(directoryPath: string): string {\n  const resolved = path.resolve(directoryPath);\n  try {\n    return fs.realpathSync(resolved);\n  } catch {\n    return resolved;\n  }\n}\n\n/**\n * Get linked app ID for a directory in an environment\n */\nexport function getLinkedAppForDirectory(\n  environment: string,\n  directoryPath: string,\n): string | null {\n  if (!directoryPath) {\n    return null;\n  }\n\n  const config = loadGlobalConfig();\n  const links = config.directory_links?.[environment];\n  if (!links) {\n    return null;\n  }\n\n  const normalizedPath = normalizeDirectoryPath(directoryPath);\n  const appId = links[normalizedPath];\n  return appId || null;\n}\n\n/**\n * Link a directory to an app ID in an environment\n */\nexport function setLinkedAppForDirectory(\n  environment: string,\n  directoryPath: string,\n  appId: string,\n): void {\n  if (!directoryPath || !environment) {\n    return;\n  }\n\n  const config = loadGlobalConfig();\n  if (!config.directory_links) {\n    config.directory_links = {};\n  }\n  if (!config.directory_links[environment]) {\n    config.directory_links[environment] = {};\n  }\n\n  const normalizedPath = normalizeDirectoryPath(directoryPath);\n  // Normalize appId to lowercase for consistent lookups\n  config.directory_links[environment][normalizedPath] = appId.toLowerCase();\n  saveGlobalConfig(config);\n}\n\n/**\n * Get the user's preferred deployment environment\n */\nexport function getDefaultEnvironment(): string | undefined {\n  const config = loadGlobalConfig();\n  return config.default_environment;\n}\n\n/**\n * Set the user's preferred deployment environment\n */\nexport function setDefaultEnvironment(environment: string): void {\n  const config = loadGlobalConfig();\n  config.default_environment = environment;\n  config.first_run = false; // No longer first run after setting environment\n  saveGlobalConfig(config);\n}\n\n/**\n * Check if this is the user's first time running the CLI\n */\nexport function isFirstRun(): boolean {\n  const config = loadGlobalConfig();\n  return config.first_run === true;\n}\n\n/**\n * Mark that the first run has been completed\n */\nexport function markFirstRunComplete(): void {\n  const config = loadGlobalConfig();\n  config.first_run = false;\n  saveGlobalConfig(config);\n}\n\n/**\n * Get the global telemetry preference\n */\nexport function getGlobalTelemetryPreference(): boolean | undefined {\n  const config = loadGlobalConfig();\n  return config.telemetry_enabled;\n}\n\n/**\n * Set the global telemetry preference\n */\nexport function setGlobalTelemetryPreference(enabled: boolean): void {\n  const config = loadGlobalConfig();\n  config.telemetry_enabled = enabled;\n  config.first_run = false; // No longer first run after setting preference\n  saveGlobalConfig(config);\n}\n\n// ==================== Profile Cache Functions ====================\n\n/**\n * Get cached profile names for an environment\n * Returns null if cache is missing or expired (older than 24 hours)\n */\nexport function getProfileCache(environment: string): Record<string, string> | null {\n  const config = loadGlobalConfig();\n  const cacheEntry = config.profile_cache?.[environment];\n\n  if (!cacheEntry) {\n    return null;\n  }\n\n  // Check if cache is expired\n  const now = Date.now();\n  if (now - cacheEntry.updated_at > PROFILE_CACHE_TTL_MS) {\n    return null;\n  }\n\n  return cacheEntry.profiles;\n}\n\n/**\n * Set cached profile names for an environment\n */\nexport function setProfileCache(environment: string, profiles: Record<string, string>): void {\n  const config = loadGlobalConfig();\n\n  if (!config.profile_cache) {\n    config.profile_cache = {};\n  }\n\n  config.profile_cache[environment] = {\n    updated_at: Date.now(),\n    profiles,\n  };\n\n  saveGlobalConfig(config);\n}\n\n/**\n * Invalidate profile cache for a specific environment or all environments\n */\nexport function invalidateProfileCache(environment?: string): void {\n  const config = loadGlobalConfig();\n\n  if (!config.profile_cache) {\n    return;\n  }\n\n  if (environment) {\n    // Invalidate specific environment\n    delete config.profile_cache[environment];\n  } else {\n    // Invalidate all environments\n    config.profile_cache = {};\n  }\n\n  saveGlobalConfig(config);\n}\n\n/**\n * Update a single profile name in the cache\n * This is useful after deploy or profile set to update just one entry\n */\nexport function updateProfileCacheEntry(\n  environment: string,\n  appId: string,\n  profileName: string,\n): void {\n  const config = loadGlobalConfig();\n\n  if (!config.profile_cache) {\n    config.profile_cache = {};\n  }\n\n  if (!config.profile_cache[environment]) {\n    config.profile_cache[environment] = {\n      updated_at: Date.now(),\n      profiles: {},\n    };\n  }\n\n  // Normalize appId to lowercase for consistent lookups\n  const normalizedAppId = appId.toLowerCase();\n  config.profile_cache[environment].profiles[normalizedAppId] = profileName;\n  config.profile_cache[environment].updated_at = Date.now();\n\n  saveGlobalConfig(config);\n}\n\n/**\n * Get the user UUID from global config, or generate a new one if it doesn't exist\n */\nexport function getOrCreateUserUUID(): string {\n  const config = loadGlobalConfig();\n  if (config.user_uuid) {\n    return config.user_uuid;\n  }\n\n  // Generate a new UUID (v4)\n  const uuid = generateUUID();\n\n  // Save it to config\n  config.user_uuid = uuid;\n  config.first_run = false;\n  saveGlobalConfig(config);\n\n  return uuid;\n}\n\n/**\n * Generate a UUID v4\n */\nfunction generateUUID(): string {\n  // UUID v4 format: xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx\n  // Use cryptographically secure random values.\n  const bytes = crypto.randomBytes(16);\n  // Per RFC 4122 section 4.4, set bits for version and `clock_seq_hi_and_reserved`\n  bytes[6] = (bytes[6] & 0x0f) | 0x40; // Version 4\n  bytes[8] = (bytes[8] & 0x3f) | 0x80; // Variant 10\n  const hex = Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\"));\n  return (\n    hex.slice(0, 4).join(\"\") +\n    hex.slice(4, 6).join(\"\") +\n    \"-\" +\n    hex.slice(6, 8).join(\"\") +\n    \"-\" +\n    hex.slice(8, 10).join(\"\") +\n    \"-\" +\n    hex.slice(10, 12).join(\"\") +\n    \"-\" +\n    hex.slice(12, 16).join(\"\")\n  );\n}\n\n/**\n * Save user UUID to global config (preserves existing UUID if present)\n */\nexport function saveUserUUID(userUUID: string): void {\n  const config = loadGlobalConfig();\n  // Only update if not already set\n  if (!config.user_uuid) {\n    config.user_uuid = userUUID;\n    saveGlobalConfig(config);\n  }\n}\n"],"mappings":";;;AAMA,SAAS,SAAS,aAAa;AAC/B,SAAS,eAAe;AACxB,SAAS,kBAAkB,eAAe,gCAAgC;;;ACF1E;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA,gBAAAA;AAAA,OACK;;;ACHP,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,YAAY,QAAQ;AACpB,SAAS,QAAQ,UAAU,QAAQ,gBAAgB;AACnD,SAAS,oBAAoB;AAC7B,YAAY,YAAY;AACxB,IAAM,qBAAqB;AAyB3B,IAAM,uBAAuB,KAAK,KAAK,KAAK;AAK5C,SAAS,qBAA6B;AAEpC,QAAM,aAAa,QAAQ,IAAI;AAE/B,MAAI;AACJ,MAAI,cAAmB,gBAAW,UAAU,GAAG;AAC7C,cAAU;AAAA,EACZ,OAAO;AAEL,cAAe,UAAQ,WAAQ,GAAG,SAAS;AAAA,EAC7C;AAGA,QAAM,YAAY,aAAa;AAC/B,QAAM,cAAc,cAAc,QAAQ,SAAS;AACnD,QAAM,gBAAgB,SAAS,WAAW;AAE1C,SAAY,UAAK,SAAS,aAAa;AACzC;AAKA,SAAS,sBAA8B;AACrC,SAAY,UAAK,mBAAmB,GAAG,kBAAkB;AAC3D;AAKO,SAAS,mBAAiC;AAC/C,QAAM,aAAa,oBAAoB;AAGvC,MAAI,CAAI,cAAW,UAAU,GAAG;AAC9B,WAAO;AAAA,MACL,WAAW;AAAA,IACb;AAAA,EACF;AAEA,MAAI;AACF,UAAM,UAAa,gBAAa,YAAY,OAAO;AACnD,UAAM,SAAS,SAAS,OAAO;AAC/B,WAAO,UAAU,EAAE,WAAW,KAAK;AAAA,EACrC,QAAQ;AAEN,WAAO;AAAA,MACL,WAAW;AAAA,IACb;AAAA,EACF;AACF;AAKO,SAAS,iBAAiB,QAA4B;AAC3D,QAAM,aAAa,oBAAoB;AAGvC,QAAM,YAAiB,aAAQ,UAAU;AACzC,EAAG,aAAU,WAAW,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAGxD,QAAM,UAAU,SAAS,QAAQ,EAAE,WAAW,GAAG,CAAC;AAClD,EAAG,iBAAc,YAAY,SAAS,EAAE,MAAM,IAAM,CAAC;AACvD;AA8DO,SAAS,wBAA4C;AAC1D,QAAM,SAAS,iBAAiB;AAChC,SAAO,OAAO;AAChB;AAgCO,SAAS,+BAAoD;AAClE,QAAM,SAAS,iBAAiB;AAChC,SAAO,OAAO;AAChB;AA2GO,SAAS,sBAA8B;AAC5C,QAAM,SAAS,iBAAiB;AAChC,MAAI,OAAO,WAAW;AACpB,WAAO,OAAO;AAAA,EAChB;AAGA,QAAM,OAAO,aAAa;AAG1B,SAAO,YAAY;AACnB,SAAO,YAAY;AACnB,mBAAiB,MAAM;AAEvB,SAAO;AACT;AAKA,SAAS,eAAuB;AAG9B,QAAM,QAAe,mBAAY,EAAE;AAEnC,QAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,QAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,QAAM,MAAM,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AACpE,SACE,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,IACvB,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,IACvB,MACA,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,IACvB,MACA,IAAI,MAAM,GAAG,EAAE,EAAE,KAAK,EAAE,IACxB,MACA,IAAI,MAAM,IAAI,EAAE,EAAE,KAAK,EAAE,IACzB,MACA,IAAI,MAAM,IAAI,EAAE,EAAE,KAAK,EAAE;AAE7B;;;AD9UO,SAAS,2BAA4C;AAE1D,QAAM,WAAW,oBAAoB;AACrC,QAAM,cAAc,qBAAqB,QAAQ;AAGjD,QAAM,mBAAmB,6BAA6B;AAEtD,SAAO,sBAAsB,aAAa,cAAc;AAAA,IACtD,kBAAkB,qBAAqB;AAAA;AAAA,EACzC,CAAC;AACH;AASA,eAAsB,cAAiB,SAAkB,QAAsC;AAC7F,QAAM,SAAS,yBAAyB;AACxC,QAAM,UAAU,qBAAqB;AAGrC,UAAQ,WAAW,QAAQ,IAAI;AAG/B,UAAQ,WAAW,SAAS,IAAI,QAAQ,MAAM,QAAQ,YAAY;AAGlE,QAAM,cAAc,sBAAsB,KAAK;AAC/C,UAAQ,WAAW,aAAa,IAAI;AAGpC,QAAM,YAAYC,cAAa,KAAK;AACpC,UAAQ,WAAW,YAAY,IAAI;AAGnC,QAAM,aAAa,QAAQ,OAAO;AAClC,MAAI,YAAY;AACd,YAAQ,WAAW,aAAa,IAAI;AAAA,EACtC;AAGA,YAAU,SAAS,SAAS,CAAC;AAE7B,MAAI;AACJ,MAAI;AAEJ,MAAI;AACF,aAAS,MAAM,OAAO;AACtB,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,kBAAc,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAChE,UAAM;AAAA,EACR,UAAE;AAEA,UAAM,cAAc,cAAc,YAAY;AAC9C,UAAM,aAAqC,CAAC;AAC5C,QAAI,aAAa;AACf,iBAAW,OAAO,IAAI,YAAY;AAAA,IACpC;AACA,4BAAwB,SAAS,aAAa,GAAG,UAAU;AAG3D,UAAM,WAAW,KAAK,IAAI,IAAI,QAAQ,UAAU,QAAQ;AACxD,cAAU,SAAS,wBAAwB,QAAQ;AAGnD,QAAI;AACF,YAAM,YAAY,QAAQ,OAAO;AACjC,YAAM,OAAO,MAAM;AAAA,IACrB,QAAQ;AAAA,IAER;AAAA,EACF;AACF;;;AD5FA,IAAqB,aAArB,MAAqB,oBAAmB,QAAQ;AAAA,EAC9C,OAAO,cAAc;AAAA,EAErB,OAAO,WAAW;AAAA,IAChB;AAAA,IACA;AAAA,EACF;AAAA,EAEA,OAAO,QAAQ;AAAA,IACb,OAAO,MAAM,QAAQ;AAAA,MACnB,aAAa;AAAA,MACb,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,MAAqB;AACzB,WAAO,cAAc,MAAM,YAAY;AACrC,YAAM,EAAE,MAAM,IAAI,MAAM,KAAK,MAAM,WAAU;AAG7C,YAAM,aAAa,MAAM,cAAc;AAEvC,UAAI,CAAC,YAAY;AACf,aAAK,IAAI,yBAAyB;AAClC,aAAK,IAAI,sBAAsB;AAC/B;AAAA,MACF;AAGA,YAAM,UAAU,yBAAyB,UAAU;AACnD,WAAK,IAAI,mBAAmB;AAC5B,WAAK,IAAI,cAAc,OAAO,EAAE;AAChC,WAAK,IAAI,EAAE;AAGX,UAAI,CAAC,MAAM,OAAO;AAChB,cAAM,YAAY,MAAM,QAAQ;AAAA,UAC9B,SAAS;AAAA,UACT,SAAS;AAAA,QACX,CAAC;AAED,YAAI,CAAC,WAAW;AACd,eAAK,IAAI,kBAAkB;AAC3B;AAAA,QACF;AAAA,MACF;AAGA,UAAI;AACF,cAAM,UAAU,MAAM,iBAAiB;AAEvC,YAAI,SAAS;AACX,eAAK,IAAI,gDAA2C;AACpD,eAAK,IAAI,oEAAoE;AAC7E,eAAK,IAAI,kDAAkD;AAAA,QAC7D,OAAO;AACL,eAAK,IAAI,2DAA2D;AAAA,QACtE;AAAA,MACF,SAAS,KAAU;AACjB,aAAK,MAAM,yBAAyB,IAAI,OAAO,EAAE;AAAA,MACnD;AAAA,IACF,CAAC;AAAA,EACH;AACF;","names":["getBuildType","getBuildType"]}

package/dist/commands/auth/migrate.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/commands/auth/migrate.ts","../../../src/utils/security.ts","../../../src/telemetry.ts","../../../src/utils/globalConfig.ts"],"sourcesContent":["/**\n * Auth Migrate Command\n *\n * Migrate a legacy eigenx-cli key to ecloud\n */\n\nimport { Command } from \"@oclif/core\";\nimport { confirm, select } from \"@inquirer/prompts\";\nimport {\n  storePrivateKey,\n  keyExists,\n  getAddressFromPrivateKey,\n  getLegacyKeys,\n  getLegacyPrivateKey,\n  deleteLegacyPrivateKey,\n  type LegacyKey,\n} from \"@layr-labs/ecloud-sdk\";\nimport { displayWarning } from \"../../utils/security\";\nimport { withTelemetry } from \"../../telemetry\";\n\nexport default class AuthMigrate extends Command {\n  static description = \"Migrate a private key from eigenx-cli to ecloud\";\n\n  static examples = [\"<%= config.bin %> <%= command.id %>\"];\n\n  async run(): Promise<void> {\n    return withTelemetry(this, async () => {\n      const legacyKeys = await getLegacyKeys();\n\n      if (legacyKeys.length === 0) {\n        this.log(\"No legacy keys found from eigenx-cli.\");\n        this.log(\"\");\n        this.log(\"To manually add a key to ecloud, use:\");\n        this.log(\"  ecloud auth login\");\n        return;\n      }\n\n      // Display found legacy keys\n      this.log(\"\\nFound legacy keys from eigenx-cli:\");\n      this.log(\"\");\n\n      for (const key of legacyKeys) {\n        this.log(`  Address: ${key.address}`);\n        this.log(`  Environment: ${key.environment}`);\n        this.log(`  Source: ${key.source}`);\n        this.log(\"\");\n      }\n\n      // Create choices for selection\n      const choices = legacyKeys.map((key) => ({\n        name: `${key.address} (${key.environment} - ${key.source})`,\n        value: key,\n      }));\n\n      const selectedKey = await select<LegacyKey>({\n        message: \"Select a key to migrate:\",\n        choices,\n      });\n\n      // Retrieve the actual private key\n      const privateKey = await getLegacyPrivateKey(selectedKey.environment, selectedKey.source);\n\n      if (!privateKey) {\n        this.error(`Failed to retrieve legacy key for ${selectedKey.environment}`);\n      }\n\n      // Derive address for display\n      const address = getAddressFromPrivateKey(privateKey);\n      this.log(`\\nMigrating key: ${address}`);\n      this.log(`From: ${selectedKey.source}:${selectedKey.environment}`);\n\n      // Check if ecloud key already exists\n      const exists = await keyExists();\n\n      if (exists) {\n        this.log(\"\");\n        displayWarning([\n          \"WARNING: A private key for ecloud already exists!\",\n          \"Replacing it will cause PERMANENT DATA LOSS if not backed up.\",\n          \"The previous key will be lost forever.\",\n        ]);\n\n        const confirmReplace = await confirm({\n          message: \"Replace existing ecloud key?\",\n          default: false,\n        });\n\n        if (!confirmReplace) {\n          this.log(\"\\nMigration cancelled.\");\n          return;\n        }\n      }\n\n      // Store in ecloud keyring\n      try {\n        await storePrivateKey(privateKey);\n        this.log(\"\\n✓ Private key migrated to ecloud keyring\");\n        this.log(`✓ Address: ${address}`);\n        this.log(\"\\nNote: This key will be used for all environments (mainnet, sepolia, etc.)\");\n\n        // Ask if user wants to delete the legacy key (only if save was successful)\n        this.log(\"\");\n        const confirmDelete = await confirm({\n          message: `Delete the legacy key from ${selectedKey.source}:${selectedKey.environment}?`,\n          default: false,\n        });\n\n        if (confirmDelete) {\n          const deleted = await deleteLegacyPrivateKey(selectedKey.environment, selectedKey.source);\n\n          if (deleted) {\n            this.log(\n              `\\n✓ Legacy key deleted from ${selectedKey.source}:${selectedKey.environment}`,\n            );\n            this.log(\"\\nNote: The key is now only stored in ecloud. You can still use it with\");\n            this.log(\"eigenx-cli by providing --private-key flag or EIGENX_PRIVATE_KEY env var.\");\n          } else {\n            this.log(\n              `\\n⚠️  Failed to delete legacy key from ${selectedKey.source}:${selectedKey.environment}`,\n            );\n            this.log(\"The key may have already been removed.\");\n          }\n        } else {\n          this.log(`\\nLegacy key kept in ${selectedKey.source}:${selectedKey.environment}`);\n          this.log(\"You can delete it later using 'eigenx auth logout' if needed.\");\n        }\n\n        this.log(\"\");\n        this.log(\"Migration complete! You can now use ecloud commands without --private-key flag.\");\n      } catch (err: any) {\n        this.error(`Failed to migrate key: ${err.message}`);\n      }\n    });\n  }\n}\n","/**\n * Security utilities for CLI\n *\n * Functions for securely displaying and handling sensitive content\n * like private keys.\n */\n\nimport { spawn, execSync } from \"child_process\";\nimport { platform } from \"os\";\nimport { select, password } from \"@inquirer/prompts\";\n\n/**\n * Display sensitive content using system pager (less/more)\n * Returns true if content was displayed, false if user aborted\n */\nexport async function showPrivateKey(content: string): Promise<boolean> {\n  // Try to use system pager\n  const pager = detectPager();\n\n  if (pager) {\n    try {\n      await runPager(pager, content);\n      return true;\n    } catch (err) {\n      console.error(`Failed to run pager: ${err}`);\n      // Fall through to fallback\n    }\n  }\n\n  // No pager available - give user a choice\n  console.log(\"\\nNo pager (less/more) found on PATH.\");\n  console.log(\"For security, avoid printing private keys to the terminal.\");\n  console.log(\"\");\n\n  const choice = await select({\n    message: \"Choose an option:\",\n    choices: [\n      { name: \"Abort (recommended)\", value: \"abort\" },\n      { name: \"Print and clear screen\", value: \"print\" },\n    ],\n  });\n\n  if (choice === \"print\") {\n    console.log(content);\n    console.log(\"\");\n    console.log(\"Press Enter after you have securely saved the key.\");\n    console.log(\"The screen will be cleared...\");\n\n    // Wait for Enter\n    await password({\n      message: \"\",\n      mask: \"\",\n    });\n\n    clearTerminal();\n    return true;\n  }\n\n  return false; // User aborted\n}\n\n/**\n * Detect system pager (less or more)\n */\nfunction detectPager(): string | null {\n  // Check PAGER env var first\n  if (process.env.PAGER) {\n    const pagerEnv = process.env.PAGER.trim();\n    // Only allow simple command names without arguments or special characters\n    if (/^[a-zA-Z0-9_-]+$/.test(pagerEnv)) {\n      return pagerEnv;\n    }\n  }\n\n  // Try common pagers\n  const pagers = [\"less\", \"more\"];\n\n  for (const pagerCmd of pagers) {\n    if (commandExists(pagerCmd)) {\n      return pagerCmd;\n    }\n  }\n\n  return null;\n}\n\n/**\n * Run pager with content\n */\nfunction runPager(pager: string, content: string): Promise<void> {\n  return new Promise((resolve, reject) => {\n    const child = spawn(pager, [], {\n      stdio: [\"pipe\", \"inherit\", \"inherit\"],\n    });\n\n    child.on(\"error\", reject);\n    child.on(\"exit\", (code) => {\n      if (code === 0) {\n        resolve();\n      } else {\n        reject(new Error(`Pager exited with code ${code}`));\n      }\n    });\n\n    try {\n      const written = child.stdin!.write(content);\n      if (!written) {\n        child.stdin!.once(\"drain\", () => {\n          try {\n            child.stdin!.end();\n          } catch (err) {\n            reject(err);\n          }\n        });\n      } else {\n        child.stdin!.end();\n      }\n    } catch (err) {\n      reject(err);\n    }\n  });\n}\n\n/**\n * Check if command exists\n */\nfunction commandExists(command: string): boolean {\n  try {\n    const cmd = platform() === \"win32\" ? `where ${command}` : `which ${command}`;\n    execSync(cmd, { stdio: \"ignore\" });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Clear terminal screen\n */\nexport function clearTerminal(): void {\n  if (platform() === \"win32\") {\n    process.stdout.write(\"\\x1Bc\");\n  } else {\n    process.stdout.write(\"\\x1B[2J\\x1B[3J\\x1B[H\");\n  }\n}\n\n/**\n * Get hidden input (password-style)\n */\nexport async function getHiddenInput(message: string): Promise<string> {\n  return await password({\n    message,\n    mask: \"*\",\n  });\n}\n\n/**\n * Display multi-line warning for destructive operations\n */\nexport function displayWarning(lines: string[]): void {\n  const width = lines.length > 0 ? Math.max(...lines.map((l) => l.length)) + 4 : 4;\n  const border = \"⚠\".repeat(width);\n\n  console.log(\"\");\n  console.log(border);\n  for (const line of lines) {\n    console.log(`⚠  ${line}`);\n  }\n  console.log(border);\n  console.log(\"\");\n}\n","/**\n * Telemetry utilities for CLI commands\n *\n * Provides helpers to wrap command execution with telemetry tracking\n */\n\nimport {\n  createTelemetryClient,\n  createAppEnvironment,\n  createMetricsContext,\n  addMetric,\n  addMetricWithDimensions,\n  emitMetrics,\n  type TelemetryClient,\n  getBuildType,\n} from \"@layr-labs/ecloud-sdk\";\nimport { Command } from \"@oclif/core\";\nimport {\n  getDefaultEnvironment,\n  getOrCreateUserUUID,\n  getGlobalTelemetryPreference,\n} from \"./utils/globalConfig\";\n\n/**\n * Create a telemetry client for CLI usage\n */\nexport function createCLITelemetryClient(): TelemetryClient {\n  // Get user UUID from CLI's globalConfig (handles I/O)\n  const userUUID = getOrCreateUserUUID();\n  const environment = createAppEnvironment(userUUID);\n\n  // Get telemetry preference from CLI's globalConfig\n  const telemetryEnabled = getGlobalTelemetryPreference();\n\n  return createTelemetryClient(environment, \"ecloud-cli\", {\n    telemetryEnabled: telemetryEnabled !== false, // Enabled by default, disabled only if explicitly set to false\n  });\n}\n\n/**\n * Wrap a command execution with telemetry\n *\n * @param command - The CLI command instance\n * @param action - The command action to execute\n * @returns The result of the action\n */\nexport async function withTelemetry<T>(command: Command, action: () => Promise<T>): Promise<T> {\n  const client = createCLITelemetryClient();\n  const metrics = createMetricsContext();\n\n  // Set source to identify CLI usage\n  metrics.properties[\"source\"] = \"ecloud-cli\";\n\n  // Set command name in properties\n  metrics.properties[\"command\"] = command.id || command.constructor.name;\n\n  // Set environment in properties\n  const environment = getDefaultEnvironment() || \"sepolia\";\n  metrics.properties[\"environment\"] = environment;\n\n  // Set buildType in properties\n  const buildType = getBuildType() || \"prod\";\n  metrics.properties[\"build_type\"] = buildType;\n\n  // Set CLI version if available\n  const cliVersion = command.config.version;\n  if (cliVersion) {\n    metrics.properties[\"cli_version\"] = cliVersion;\n  }\n\n  // Add initial count metric\n  addMetric(metrics, \"Count\", 1);\n\n  let actionError: Error | undefined;\n  let result: T;\n\n  try {\n    result = await action();\n    return result;\n  } catch (err) {\n    actionError = err instanceof Error ? err : new Error(String(err));\n    throw err;\n  } finally {\n    // Add result metric\n    const resultValue = actionError ? \"Failure\" : \"Success\";\n    const dimensions: Record<string, string> = {};\n    if (actionError) {\n      dimensions[\"error\"] = actionError.message;\n    }\n    addMetricWithDimensions(metrics, resultValue, 1, dimensions);\n\n    // Add duration metric\n    const duration = Date.now() - metrics.startTime.getTime();\n    addMetric(metrics, \"DurationMilliseconds\", duration);\n\n    // Emit all metrics\n    try {\n      await emitMetrics(client, metrics);\n      await client.close();\n    } catch {\n      // Silently ignore telemetry errors\n    }\n  }\n}\n","/**\n * Global configuration management\n *\n * Stores user-level configuration that persists across all CLI usage.\n * - $XDG_CONFIG_HOME/ecloud[BuildSuffix]/config.yaml (if XDG_CONFIG_HOME is set)\n * - Or ~/.config/ecloud[BuildSuffix]/config.yaml (fallback)\n *\n * Where BuildSuffix is:\n * - \"\" (empty) for production builds\n * - \"-dev\" for development builds\n */\n\nimport * as fs from \"fs\";\nimport * as path from \"path\";\nimport * as os from \"os\";\nimport { load as loadYaml, dump as dumpYaml } from \"js-yaml\";\nimport { getBuildType } from \"@layr-labs/ecloud-sdk\";\nimport * as crypto from \"crypto\";\nconst GLOBAL_CONFIG_FILE = \"config.yaml\";\n\nexport interface ProfileCacheEntry {\n  updated_at: number; // Unix timestamp in milliseconds\n  profiles: { [appId: string]: string }; // appId -> profile name\n}\n\nexport interface GlobalConfig {\n  first_run?: boolean;\n  telemetry_enabled?: boolean;\n  user_uuid?: string;\n  default_environment?: string;\n  last_version_check?: number;\n  last_known_version?: string;\n  profile_cache?: {\n    [environment: string]: ProfileCacheEntry;\n  };\n  directory_links?: {\n    [environment: string]: {\n      [directoryPath: string]: string;\n    };\n  };\n}\n\n// Profile cache TTL: 24 hours in milliseconds\nconst PROFILE_CACHE_TTL_MS = 24 * 60 * 60 * 1000;\n\n/**\n * Get the XDG-compliant directory where global ecloud config should be stored\n */\nfunction getGlobalConfigDir(): string {\n  // First check XDG_CONFIG_HOME\n  const configHome = process.env.XDG_CONFIG_HOME;\n\n  let baseDir: string;\n  if (configHome && path.isAbsolute(configHome)) {\n    baseDir = configHome;\n  } else {\n    // Fall back to ~/.config\n    baseDir = path.join(os.homedir(), \".config\");\n  }\n\n  // Use environment-specific config directory\n  const buildType = getBuildType();\n  const buildSuffix = buildType === \"dev\" ? \"-dev\" : \"\";\n  const configDirName = `ecloud${buildSuffix}`;\n\n  return path.join(baseDir, configDirName);\n}\n\n/**\n * Get the full path to the global config file\n */\nfunction getGlobalConfigPath(): string {\n  return path.join(getGlobalConfigDir(), GLOBAL_CONFIG_FILE);\n}\n\n/**\n * Load global configuration, creating defaults if needed\n */\nexport function loadGlobalConfig(): GlobalConfig {\n  const configPath = getGlobalConfigPath();\n\n  // If file doesn't exist, return defaults for first run\n  if (!fs.existsSync(configPath)) {\n    return {\n      first_run: true,\n    };\n  }\n\n  try {\n    const content = fs.readFileSync(configPath, \"utf-8\");\n    const config = loadYaml(content) as GlobalConfig;\n    return config || { first_run: true };\n  } catch {\n    // If parsing fails, return defaults\n    return {\n      first_run: true,\n    };\n  }\n}\n\n/**\n * Save global configuration to disk\n */\nexport function saveGlobalConfig(config: GlobalConfig): void {\n  const configPath = getGlobalConfigPath();\n\n  // Ensure directory exists\n  const configDir = path.dirname(configPath);\n  fs.mkdirSync(configDir, { recursive: true, mode: 0o755 });\n\n  // Write config file\n  const content = dumpYaml(config, { lineWidth: -1 });\n  fs.writeFileSync(configPath, content, { mode: 0o644 });\n}\n\nfunction normalizeDirectoryPath(directoryPath: string): string {\n  const resolved = path.resolve(directoryPath);\n  try {\n    return fs.realpathSync(resolved);\n  } catch {\n    return resolved;\n  }\n}\n\n/**\n * Get linked app ID for a directory in an environment\n */\nexport function getLinkedAppForDirectory(environment: string, directoryPath: string): string | null {\n  if (!directoryPath) {\n    return null;\n  }\n\n  const config = loadGlobalConfig();\n  const links = config.directory_links?.[environment];\n  if (!links) {\n    return null;\n  }\n\n  const normalizedPath = normalizeDirectoryPath(directoryPath);\n  const appId = links[normalizedPath];\n  return appId || null;\n}\n\n/**\n * Link a directory to an app ID in an environment\n */\nexport function setLinkedAppForDirectory(\n  environment: string,\n  directoryPath: string,\n  appId: string,\n): void {\n  if (!directoryPath || !environment) {\n    return;\n  }\n\n  const config = loadGlobalConfig();\n  if (!config.directory_links) {\n    config.directory_links = {};\n  }\n  if (!config.directory_links[environment]) {\n    config.directory_links[environment] = {};\n  }\n\n  const normalizedPath = normalizeDirectoryPath(directoryPath);\n  // Normalize appId to lowercase for consistent lookups\n  config.directory_links[environment][normalizedPath] = appId.toLowerCase();\n  saveGlobalConfig(config);\n}\n\n/**\n * Get the user's preferred deployment environment\n */\nexport function getDefaultEnvironment(): string | undefined {\n  const config = loadGlobalConfig();\n  return config.default_environment;\n}\n\n/**\n * Set the user's preferred deployment environment\n */\nexport function setDefaultEnvironment(environment: string): void {\n  const config = loadGlobalConfig();\n  config.default_environment = environment;\n  config.first_run = false; // No longer first run after setting environment\n  saveGlobalConfig(config);\n}\n\n/**\n * Check if this is the user's first time running the CLI\n */\nexport function isFirstRun(): boolean {\n  const config = loadGlobalConfig();\n  return config.first_run === true;\n}\n\n/**\n * Mark that the first run has been completed\n */\nexport function markFirstRunComplete(): void {\n  const config = loadGlobalConfig();\n  config.first_run = false;\n  saveGlobalConfig(config);\n}\n\n/**\n * Get the global telemetry preference\n */\nexport function getGlobalTelemetryPreference(): boolean | undefined {\n  const config = loadGlobalConfig();\n  return config.telemetry_enabled;\n}\n\n/**\n * Set the global telemetry preference\n */\nexport function setGlobalTelemetryPreference(enabled: boolean): void {\n  const config = loadGlobalConfig();\n  config.telemetry_enabled = enabled;\n  config.first_run = false; // No longer first run after setting preference\n  saveGlobalConfig(config);\n}\n\n// ==================== Profile Cache Functions ====================\n\n/**\n * Get cached profile names for an environment\n * Returns null if cache is missing or expired (older than 24 hours)\n */\nexport function getProfileCache(environment: string): Record<string, string> | null {\n  const config = loadGlobalConfig();\n  const cacheEntry = config.profile_cache?.[environment];\n\n  if (!cacheEntry) {\n    return null;\n  }\n\n  // Check if cache is expired\n  const now = Date.now();\n  if (now - cacheEntry.updated_at > PROFILE_CACHE_TTL_MS) {\n    return null;\n  }\n\n  return cacheEntry.profiles;\n}\n\n/**\n * Set cached profile names for an environment\n */\nexport function setProfileCache(environment: string, profiles: Record<string, string>): void {\n  const config = loadGlobalConfig();\n\n  if (!config.profile_cache) {\n    config.profile_cache = {};\n  }\n\n  config.profile_cache[environment] = {\n    updated_at: Date.now(),\n    profiles,\n  };\n\n  saveGlobalConfig(config);\n}\n\n/**\n * Invalidate profile cache for a specific environment or all environments\n */\nexport function invalidateProfileCache(environment?: string): void {\n  const config = loadGlobalConfig();\n\n  if (!config.profile_cache) {\n    return;\n  }\n\n  if (environment) {\n    // Invalidate specific environment\n    delete config.profile_cache[environment];\n  } else {\n    // Invalidate all environments\n    config.profile_cache = {};\n  }\n\n  saveGlobalConfig(config);\n}\n\n/**\n * Update a single profile name in the cache\n * This is useful after deploy or profile set to update just one entry\n */\nexport function updateProfileCacheEntry(\n  environment: string,\n  appId: string,\n  profileName: string,\n): void {\n  const config = loadGlobalConfig();\n\n  if (!config.profile_cache) {\n    config.profile_cache = {};\n  }\n\n  if (!config.profile_cache[environment]) {\n    config.profile_cache[environment] = {\n      updated_at: Date.now(),\n      profiles: {},\n    };\n  }\n\n  // Normalize appId to lowercase for consistent lookups\n  const normalizedAppId = appId.toLowerCase();\n  config.profile_cache[environment].profiles[normalizedAppId] = profileName;\n  config.profile_cache[environment].updated_at = Date.now();\n\n  saveGlobalConfig(config);\n}\n\n/**\n * Get the user UUID from global config, or generate a new one if it doesn't exist\n */\nexport function getOrCreateUserUUID(): string {\n  const config = loadGlobalConfig();\n  if (config.user_uuid) {\n    return config.user_uuid;\n  }\n\n  // Generate a new UUID (v4)\n  const uuid = generateUUID();\n\n  // Save it to config\n  config.user_uuid = uuid;\n  config.first_run = false;\n  saveGlobalConfig(config);\n\n  return uuid;\n}\n\n/**\n * Generate a UUID v4\n */\nfunction generateUUID(): string {\n  // UUID v4 format: xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx\n  // Use cryptographically secure random values.\n  const bytes = crypto.randomBytes(16);\n  // Per RFC 4122 section 4.4, set bits for version and `clock_seq_hi_and_reserved`\n  bytes[6] = (bytes[6] & 0x0f) | 0x40; // Version 4\n  bytes[8] = (bytes[8] & 0x3f) | 0x80; // Variant 10\n  const hex = Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\"));\n  return (\n    hex.slice(0, 4).join(\"\") +\n    hex.slice(4, 6).join(\"\") +\n    \"-\" +\n    hex.slice(6, 8).join(\"\") +\n    \"-\" +\n    hex.slice(8, 10).join(\"\") +\n    \"-\" +\n    hex.slice(10, 12).join(\"\") +\n    \"-\" +\n    hex.slice(12, 16).join(\"\")\n  );\n}\n\n/**\n * Save user UUID to global config (preserves existing UUID if present)\n */\nexport function saveUserUUID(userUUID: string): void {\n  const config = loadGlobalConfig();\n  // Only update if not already set\n  if (!config.user_uuid) {\n    config.user_uuid = userUUID;\n    saveGlobalConfig(config);\n  }\n}\n"],"mappings":";;;AAMA,SAAS,eAAe;AACxB,SAAS,SAAS,UAAAA,eAAc;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;;;ACTP,SAAS,OAAO,gBAAgB;AAChC,SAAS,gBAAgB;AACzB,SAAS,QAAQ,gBAAgB;AAuJ1B,SAAS,eAAe,OAAuB;AACpD,QAAM,QAAQ,MAAM,SAAS,IAAI,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI;AAC/E,QAAM,SAAS,SAAI,OAAO,KAAK;AAE/B,UAAQ,IAAI,EAAE;AACd,UAAQ,IAAI,MAAM;AAClB,aAAW,QAAQ,OAAO;AACxB,YAAQ,IAAI,WAAM,IAAI,EAAE;AAAA,EAC1B;AACA,UAAQ,IAAI,MAAM;AAClB,UAAQ,IAAI,EAAE;AAChB;;;ACrKA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA,gBAAAC;AAAA,OACK;;;ACHP,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,YAAY,QAAQ;AACpB,SAAS,QAAQ,UAAU,QAAQ,gBAAgB;AACnD,SAAS,oBAAoB;AAC7B,YAAY,YAAY;AACxB,IAAM,qBAAqB;AAyB3B,IAAM,uBAAuB,KAAK,KAAK,KAAK;AAK5C,SAAS,qBAA6B;AAEpC,QAAM,aAAa,QAAQ,IAAI;AAE/B,MAAI;AACJ,MAAI,cAAmB,gBAAW,UAAU,GAAG;AAC7C,cAAU;AAAA,EACZ,OAAO;AAEL,cAAe,UAAQ,WAAQ,GAAG,SAAS;AAAA,EAC7C;AAGA,QAAM,YAAY,aAAa;AAC/B,QAAM,cAAc,cAAc,QAAQ,SAAS;AACnD,QAAM,gBAAgB,SAAS,WAAW;AAE1C,SAAY,UAAK,SAAS,aAAa;AACzC;AAKA,SAAS,sBAA8B;AACrC,SAAY,UAAK,mBAAmB,GAAG,kBAAkB;AAC3D;AAKO,SAAS,mBAAiC;AAC/C,QAAM,aAAa,oBAAoB;AAGvC,MAAI,CAAI,cAAW,UAAU,GAAG;AAC9B,WAAO;AAAA,MACL,WAAW;AAAA,IACb;AAAA,EACF;AAEA,MAAI;AACF,UAAM,UAAa,gBAAa,YAAY,OAAO;AACnD,UAAM,SAAS,SAAS,OAAO;AAC/B,WAAO,UAAU,EAAE,WAAW,KAAK;AAAA,EACrC,QAAQ;AAEN,WAAO;AAAA,MACL,WAAW;AAAA,IACb;AAAA,EACF;AACF;AAKO,SAAS,iBAAiB,QAA4B;AAC3D,QAAM,aAAa,oBAAoB;AAGvC,QAAM,YAAiB,aAAQ,UAAU;AACzC,EAAG,aAAU,WAAW,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAGxD,QAAM,UAAU,SAAS,QAAQ,EAAE,WAAW,GAAG,CAAC;AAClD,EAAG,iBAAc,YAAY,SAAS,EAAE,MAAM,IAAM,CAAC;AACvD;AA2DO,SAAS,wBAA4C;AAC1D,QAAM,SAAS,iBAAiB;AAChC,SAAO,OAAO;AAChB;AAgCO,SAAS,+BAAoD;AAClE,QAAM,SAAS,iBAAiB;AAChC,SAAO,OAAO;AAChB;AA2GO,SAAS,sBAA8B;AAC5C,QAAM,SAAS,iBAAiB;AAChC,MAAI,OAAO,WAAW;AACpB,WAAO,OAAO;AAAA,EAChB;AAGA,QAAM,OAAO,aAAa;AAG1B,SAAO,YAAY;AACnB,SAAO,YAAY;AACnB,mBAAiB,MAAM;AAEvB,SAAO;AACT;AAKA,SAAS,eAAuB;AAG9B,QAAM,QAAe,mBAAY,EAAE;AAEnC,QAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,QAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,QAAM,MAAM,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AACpE,SACE,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,IACvB,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,IACvB,MACA,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,IACvB,MACA,IAAI,MAAM,GAAG,EAAE,EAAE,KAAK,EAAE,IACxB,MACA,IAAI,MAAM,IAAI,EAAE,EAAE,KAAK,EAAE,IACzB,MACA,IAAI,MAAM,IAAI,EAAE,EAAE,KAAK,EAAE;AAE7B;;;AD3UO,SAAS,2BAA4C;AAE1D,QAAM,WAAW,oBAAoB;AACrC,QAAM,cAAc,qBAAqB,QAAQ;AAGjD,QAAM,mBAAmB,6BAA6B;AAEtD,SAAO,sBAAsB,aAAa,cAAc;AAAA,IACtD,kBAAkB,qBAAqB;AAAA;AAAA,EACzC,CAAC;AACH;AASA,eAAsB,cAAiB,SAAkB,QAAsC;AAC7F,QAAM,SAAS,yBAAyB;AACxC,QAAM,UAAU,qBAAqB;AAGrC,UAAQ,WAAW,QAAQ,IAAI;AAG/B,UAAQ,WAAW,SAAS,IAAI,QAAQ,MAAM,QAAQ,YAAY;AAGlE,QAAM,cAAc,sBAAsB,KAAK;AAC/C,UAAQ,WAAW,aAAa,IAAI;AAGpC,QAAM,YAAYC,cAAa,KAAK;AACpC,UAAQ,WAAW,YAAY,IAAI;AAGnC,QAAM,aAAa,QAAQ,OAAO;AAClC,MAAI,YAAY;AACd,YAAQ,WAAW,aAAa,IAAI;AAAA,EACtC;AAGA,YAAU,SAAS,SAAS,CAAC;AAE7B,MAAI;AACJ,MAAI;AAEJ,MAAI;AACF,aAAS,MAAM,OAAO;AACtB,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,kBAAc,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAChE,UAAM;AAAA,EACR,UAAE;AAEA,UAAM,cAAc,cAAc,YAAY;AAC9C,UAAM,aAAqC,CAAC;AAC5C,QAAI,aAAa;AACf,iBAAW,OAAO,IAAI,YAAY;AAAA,IACpC;AACA,4BAAwB,SAAS,aAAa,GAAG,UAAU;AAG3D,UAAM,WAAW,KAAK,IAAI,IAAI,QAAQ,UAAU,QAAQ;AACxD,cAAU,SAAS,wBAAwB,QAAQ;AAGnD,QAAI;AACF,YAAM,YAAY,QAAQ,OAAO;AACjC,YAAM,OAAO,MAAM;AAAA,IACrB,QAAQ;AAAA,IAER;AAAA,EACF;AACF;;;AFnFA,IAAqB,cAArB,cAAyC,QAAQ;AAAA,EAC/C,OAAO,cAAc;AAAA,EAErB,OAAO,WAAW,CAAC,qCAAqC;AAAA,EAExD,MAAM,MAAqB;AACzB,WAAO,cAAc,MAAM,YAAY;AACrC,YAAM,aAAa,MAAM,cAAc;AAEvC,UAAI,WAAW,WAAW,GAAG;AAC3B,aAAK,IAAI,uCAAuC;AAChD,aAAK,IAAI,EAAE;AACX,aAAK,IAAI,uCAAuC;AAChD,aAAK,IAAI,qBAAqB;AAC9B;AAAA,MACF;AAGA,WAAK,IAAI,sCAAsC;AAC/C,WAAK,IAAI,EAAE;AAEX,iBAAW,OAAO,YAAY;AAC5B,aAAK,IAAI,cAAc,IAAI,OAAO,EAAE;AACpC,aAAK,IAAI,kBAAkB,IAAI,WAAW,EAAE;AAC5C,aAAK,IAAI,aAAa,IAAI,MAAM,EAAE;AAClC,aAAK,IAAI,EAAE;AAAA,MACb;AAGA,YAAM,UAAU,WAAW,IAAI,CAAC,SAAS;AAAA,QACvC,MAAM,GAAG,IAAI,OAAO,KAAK,IAAI,WAAW,MAAM,IAAI,MAAM;AAAA,QACxD,OAAO;AAAA,MACT,EAAE;AAEF,YAAM,cAAc,MAAMC,QAAkB;AAAA,QAC1C,SAAS;AAAA,QACT;AAAA,MACF,CAAC;AAGD,YAAM,aAAa,MAAM,oBAAoB,YAAY,aAAa,YAAY,MAAM;AAExF,UAAI,CAAC,YAAY;AACf,aAAK,MAAM,qCAAqC,YAAY,WAAW,EAAE;AAAA,MAC3E;AAGA,YAAM,UAAU,yBAAyB,UAAU;AACnD,WAAK,IAAI;AAAA,iBAAoB,OAAO,EAAE;AACtC,WAAK,IAAI,SAAS,YAAY,MAAM,IAAI,YAAY,WAAW,EAAE;AAGjE,YAAM,SAAS,MAAM,UAAU;AAE/B,UAAI,QAAQ;AACV,aAAK,IAAI,EAAE;AACX,uBAAe;AAAA,UACb;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAED,cAAM,iBAAiB,MAAM,QAAQ;AAAA,UACnC,SAAS;AAAA,UACT,SAAS;AAAA,QACX,CAAC;AAED,YAAI,CAAC,gBAAgB;AACnB,eAAK,IAAI,wBAAwB;AACjC;AAAA,QACF;AAAA,MACF;AAGA,UAAI;AACF,cAAM,gBAAgB,UAAU;AAChC,aAAK,IAAI,iDAA4C;AACrD,aAAK,IAAI,mBAAc,OAAO,EAAE;AAChC,aAAK,IAAI,6EAA6E;AAGtF,aAAK,IAAI,EAAE;AACX,cAAM,gBAAgB,MAAM,QAAQ;AAAA,UAClC,SAAS,8BAA8B,YAAY,MAAM,IAAI,YAAY,WAAW;AAAA,UACpF,SAAS;AAAA,QACX,CAAC;AAED,YAAI,eAAe;AACjB,gBAAM,UAAU,MAAM,uBAAuB,YAAY,aAAa,YAAY,MAAM;AAExF,cAAI,SAAS;AACX,iBAAK;AAAA,cACH;AAAA,iCAA+B,YAAY,MAAM,IAAI,YAAY,WAAW;AAAA,YAC9E;AACA,iBAAK,IAAI,yEAAyE;AAClF,iBAAK,IAAI,2EAA2E;AAAA,UACtF,OAAO;AACL,iBAAK;AAAA,cACH;AAAA,iDAA0C,YAAY,MAAM,IAAI,YAAY,WAAW;AAAA,YACzF;AACA,iBAAK,IAAI,wCAAwC;AAAA,UACnD;AAAA,QACF,OAAO;AACL,eAAK,IAAI;AAAA,qBAAwB,YAAY,MAAM,IAAI,YAAY,WAAW,EAAE;AAChF,eAAK,IAAI,+DAA+D;AAAA,QAC1E;AAEA,aAAK,IAAI,EAAE;AACX,aAAK,IAAI,iFAAiF;AAAA,MAC5F,SAAS,KAAU;AACjB,aAAK,MAAM,0BAA0B,IAAI,OAAO,EAAE;AAAA,MACpD;AAAA,IACF,CAAC;AAAA,EACH;AACF;","names":["select","getBuildType","getBuildType","select"]}
+{"version":3,"sources":["../../../src/commands/auth/migrate.ts","../../../src/utils/security.ts","../../../src/telemetry.ts","../../../src/utils/globalConfig.ts"],"sourcesContent":["/**\n * Auth Migrate Command\n *\n * Migrate a legacy eigenx-cli key to ecloud\n */\n\nimport { Command } from \"@oclif/core\";\nimport { confirm, select } from \"@inquirer/prompts\";\nimport {\n  storePrivateKey,\n  keyExists,\n  getAddressFromPrivateKey,\n  getLegacyKeys,\n  getLegacyPrivateKey,\n  deleteLegacyPrivateKey,\n  type LegacyKey,\n} from \"@layr-labs/ecloud-sdk\";\nimport { displayWarning } from \"../../utils/security\";\nimport { withTelemetry } from \"../../telemetry\";\n\nexport default class AuthMigrate extends Command {\n  static description = \"Migrate a private key from eigenx-cli to ecloud\";\n\n  static examples = [\"<%= config.bin %> <%= command.id %>\"];\n\n  async run(): Promise<void> {\n    return withTelemetry(this, async () => {\n      const legacyKeys = await getLegacyKeys();\n\n      if (legacyKeys.length === 0) {\n        this.log(\"No legacy keys found from eigenx-cli.\");\n        this.log(\"\");\n        this.log(\"To manually add a key to ecloud, use:\");\n        this.log(\"  ecloud auth login\");\n        return;\n      }\n\n      // Display found legacy keys\n      this.log(\"\\nFound legacy keys from eigenx-cli:\");\n      this.log(\"\");\n\n      for (const key of legacyKeys) {\n        this.log(`  Address: ${key.address}`);\n        this.log(`  Environment: ${key.environment}`);\n        this.log(`  Source: ${key.source}`);\n        this.log(\"\");\n      }\n\n      // Create choices for selection\n      const choices = legacyKeys.map((key) => ({\n        name: `${key.address} (${key.environment} - ${key.source})`,\n        value: key,\n      }));\n\n      const selectedKey = await select<LegacyKey>({\n        message: \"Select a key to migrate:\",\n        choices,\n      });\n\n      // Retrieve the actual private key\n      const privateKey = await getLegacyPrivateKey(selectedKey.environment, selectedKey.source);\n\n      if (!privateKey) {\n        this.error(`Failed to retrieve legacy key for ${selectedKey.environment}`);\n      }\n\n      // Derive address for display\n      const address = getAddressFromPrivateKey(privateKey);\n      this.log(`\\nMigrating key: ${address}`);\n      this.log(`From: ${selectedKey.source}:${selectedKey.environment}`);\n\n      // Check if ecloud key already exists\n      const exists = await keyExists();\n\n      if (exists) {\n        this.log(\"\");\n        displayWarning([\n          \"WARNING: A private key for ecloud already exists!\",\n          \"Replacing it will cause PERMANENT DATA LOSS if not backed up.\",\n          \"The previous key will be lost forever.\",\n        ]);\n\n        const confirmReplace = await confirm({\n          message: \"Replace existing ecloud key?\",\n          default: false,\n        });\n\n        if (!confirmReplace) {\n          this.log(\"\\nMigration cancelled.\");\n          return;\n        }\n      }\n\n      // Store in ecloud keyring\n      try {\n        await storePrivateKey(privateKey);\n        this.log(\"\\n✓ Private key migrated to ecloud keyring\");\n        this.log(`✓ Address: ${address}`);\n        this.log(\"\\nNote: This key will be used for all environments (mainnet, sepolia, etc.)\");\n\n        // Ask if user wants to delete the legacy key (only if save was successful)\n        this.log(\"\");\n        const confirmDelete = await confirm({\n          message: `Delete the legacy key from ${selectedKey.source}:${selectedKey.environment}?`,\n          default: false,\n        });\n\n        if (confirmDelete) {\n          const deleted = await deleteLegacyPrivateKey(selectedKey.environment, selectedKey.source);\n\n          if (deleted) {\n            this.log(\n              `\\n✓ Legacy key deleted from ${selectedKey.source}:${selectedKey.environment}`,\n            );\n            this.log(\"\\nNote: The key is now only stored in ecloud. You can still use it with\");\n            this.log(\"eigenx-cli by providing --private-key flag or EIGENX_PRIVATE_KEY env var.\");\n          } else {\n            this.log(\n              `\\n⚠️  Failed to delete legacy key from ${selectedKey.source}:${selectedKey.environment}`,\n            );\n            this.log(\"The key may have already been removed.\");\n          }\n        } else {\n          this.log(`\\nLegacy key kept in ${selectedKey.source}:${selectedKey.environment}`);\n          this.log(\"You can delete it later using 'eigenx auth logout' if needed.\");\n        }\n\n        this.log(\"\");\n        this.log(\"Migration complete! You can now use ecloud commands without --private-key flag.\");\n      } catch (err: any) {\n        this.error(`Failed to migrate key: ${err.message}`);\n      }\n    });\n  }\n}\n","/**\n * Security utilities for CLI\n *\n * Functions for securely displaying and handling sensitive content\n * like private keys.\n */\n\nimport { spawn, execSync } from \"child_process\";\nimport { platform } from \"os\";\nimport { select, password } from \"@inquirer/prompts\";\n\n/**\n * Display sensitive content using system pager (less/more)\n * Returns true if content was displayed, false if user aborted\n */\nexport async function showPrivateKey(content: string): Promise<boolean> {\n  // Try to use system pager\n  const pager = detectPager();\n\n  if (pager) {\n    try {\n      await runPager(pager, content);\n      return true;\n    } catch (err) {\n      console.error(`Failed to run pager: ${err}`);\n      // Fall through to fallback\n    }\n  }\n\n  // No pager available - give user a choice\n  console.log(\"\\nNo pager (less/more) found on PATH.\");\n  console.log(\"For security, avoid printing private keys to the terminal.\");\n  console.log(\"\");\n\n  const choice = await select({\n    message: \"Choose an option:\",\n    choices: [\n      { name: \"Abort (recommended)\", value: \"abort\" },\n      { name: \"Print and clear screen\", value: \"print\" },\n    ],\n  });\n\n  if (choice === \"print\") {\n    console.log(content);\n    console.log(\"\");\n    console.log(\"Press Enter after you have securely saved the key.\");\n    console.log(\"The screen will be cleared...\");\n\n    // Wait for Enter\n    await password({\n      message: \"\",\n      mask: \"\",\n    });\n\n    clearTerminal();\n    return true;\n  }\n\n  return false; // User aborted\n}\n\n/**\n * Detect system pager (less or more)\n */\nfunction detectPager(): string | null {\n  // Check PAGER env var first\n  if (process.env.PAGER) {\n    const pagerEnv = process.env.PAGER.trim();\n    // Only allow simple command names without arguments or special characters\n    if (/^[a-zA-Z0-9_-]+$/.test(pagerEnv)) {\n      return pagerEnv;\n    }\n  }\n\n  // Try common pagers\n  const pagers = [\"less\", \"more\"];\n\n  for (const pagerCmd of pagers) {\n    if (commandExists(pagerCmd)) {\n      return pagerCmd;\n    }\n  }\n\n  return null;\n}\n\n/**\n * Run pager with content\n */\nfunction runPager(pager: string, content: string): Promise<void> {\n  return new Promise((resolve, reject) => {\n    const child = spawn(pager, [], {\n      stdio: [\"pipe\", \"inherit\", \"inherit\"],\n    });\n\n    child.on(\"error\", reject);\n    child.on(\"exit\", (code) => {\n      if (code === 0) {\n        resolve();\n      } else {\n        reject(new Error(`Pager exited with code ${code}`));\n      }\n    });\n\n    try {\n      const written = child.stdin!.write(content);\n      if (!written) {\n        child.stdin!.once(\"drain\", () => {\n          try {\n            child.stdin!.end();\n          } catch (err) {\n            reject(err);\n          }\n        });\n      } else {\n        child.stdin!.end();\n      }\n    } catch (err) {\n      reject(err);\n    }\n  });\n}\n\n/**\n * Check if command exists\n */\nfunction commandExists(command: string): boolean {\n  try {\n    const cmd = platform() === \"win32\" ? `where ${command}` : `which ${command}`;\n    execSync(cmd, { stdio: \"ignore\" });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Clear terminal screen\n */\nexport function clearTerminal(): void {\n  if (platform() === \"win32\") {\n    process.stdout.write(\"\\x1Bc\");\n  } else {\n    process.stdout.write(\"\\x1B[2J\\x1B[3J\\x1B[H\");\n  }\n}\n\n/**\n * Get hidden input (password-style)\n */\nexport async function getHiddenInput(message: string): Promise<string> {\n  return await password({\n    message,\n    mask: \"*\",\n  });\n}\n\n/**\n * Display multi-line warning for destructive operations\n */\nexport function displayWarning(lines: string[]): void {\n  const width = lines.length > 0 ? Math.max(...lines.map((l) => l.length)) + 4 : 4;\n  const border = \"⚠\".repeat(width);\n\n  console.log(\"\");\n  console.log(border);\n  for (const line of lines) {\n    console.log(`⚠  ${line}`);\n  }\n  console.log(border);\n  console.log(\"\");\n}\n","/**\n * Telemetry utilities for CLI commands\n *\n * Provides helpers to wrap command execution with telemetry tracking\n */\n\nimport {\n  createTelemetryClient,\n  createAppEnvironment,\n  createMetricsContext,\n  addMetric,\n  addMetricWithDimensions,\n  emitMetrics,\n  type TelemetryClient,\n  getBuildType,\n} from \"@layr-labs/ecloud-sdk\";\nimport { Command } from \"@oclif/core\";\nimport {\n  getDefaultEnvironment,\n  getOrCreateUserUUID,\n  getGlobalTelemetryPreference,\n} from \"./utils/globalConfig\";\n\n/**\n * Create a telemetry client for CLI usage\n */\nexport function createCLITelemetryClient(): TelemetryClient {\n  // Get user UUID from CLI's globalConfig (handles I/O)\n  const userUUID = getOrCreateUserUUID();\n  const environment = createAppEnvironment(userUUID);\n\n  // Get telemetry preference from CLI's globalConfig\n  const telemetryEnabled = getGlobalTelemetryPreference();\n\n  return createTelemetryClient(environment, \"ecloud-cli\", {\n    telemetryEnabled: telemetryEnabled !== false, // Enabled by default, disabled only if explicitly set to false\n  });\n}\n\n/**\n * Wrap a command execution with telemetry\n *\n * @param command - The CLI command instance\n * @param action - The command action to execute\n * @returns The result of the action\n */\nexport async function withTelemetry<T>(command: Command, action: () => Promise<T>): Promise<T> {\n  const client = createCLITelemetryClient();\n  const metrics = createMetricsContext();\n\n  // Set source to identify CLI usage\n  metrics.properties[\"source\"] = \"ecloud-cli\";\n\n  // Set command name in properties\n  metrics.properties[\"command\"] = command.id || command.constructor.name;\n\n  // Set environment in properties\n  const environment = getDefaultEnvironment() || \"sepolia\";\n  metrics.properties[\"environment\"] = environment;\n\n  // Set buildType in properties\n  const buildType = getBuildType() || \"prod\";\n  metrics.properties[\"build_type\"] = buildType;\n\n  // Set CLI version if available\n  const cliVersion = command.config.version;\n  if (cliVersion) {\n    metrics.properties[\"cli_version\"] = cliVersion;\n  }\n\n  // Add initial count metric\n  addMetric(metrics, \"Count\", 1);\n\n  let actionError: Error | undefined;\n  let result: T;\n\n  try {\n    result = await action();\n    return result;\n  } catch (err) {\n    actionError = err instanceof Error ? err : new Error(String(err));\n    throw err;\n  } finally {\n    // Add result metric\n    const resultValue = actionError ? \"Failure\" : \"Success\";\n    const dimensions: Record<string, string> = {};\n    if (actionError) {\n      dimensions[\"error\"] = actionError.message;\n    }\n    addMetricWithDimensions(metrics, resultValue, 1, dimensions);\n\n    // Add duration metric\n    const duration = Date.now() - metrics.startTime.getTime();\n    addMetric(metrics, \"DurationMilliseconds\", duration);\n\n    // Emit all metrics\n    try {\n      await emitMetrics(client, metrics);\n      await client.close();\n    } catch {\n      // Silently ignore telemetry errors\n    }\n  }\n}\n","/**\n * Global configuration management\n *\n * Stores user-level configuration that persists across all CLI usage.\n * - $XDG_CONFIG_HOME/ecloud[BuildSuffix]/config.yaml (if XDG_CONFIG_HOME is set)\n * - Or ~/.config/ecloud[BuildSuffix]/config.yaml (fallback)\n *\n * Where BuildSuffix is:\n * - \"\" (empty) for production builds\n * - \"-dev\" for development builds\n */\n\nimport * as fs from \"fs\";\nimport * as path from \"path\";\nimport * as os from \"os\";\nimport { load as loadYaml, dump as dumpYaml } from \"js-yaml\";\nimport { getBuildType } from \"@layr-labs/ecloud-sdk\";\nimport * as crypto from \"crypto\";\nconst GLOBAL_CONFIG_FILE = \"config.yaml\";\n\nexport interface ProfileCacheEntry {\n  updated_at: number; // Unix timestamp in milliseconds\n  profiles: { [appId: string]: string }; // appId -> profile name\n}\n\nexport interface GlobalConfig {\n  first_run?: boolean;\n  telemetry_enabled?: boolean;\n  user_uuid?: string;\n  default_environment?: string;\n  last_version_check?: number;\n  last_known_version?: string;\n  profile_cache?: {\n    [environment: string]: ProfileCacheEntry;\n  };\n  directory_links?: {\n    [environment: string]: {\n      [directoryPath: string]: string;\n    };\n  };\n}\n\n// Profile cache TTL: 24 hours in milliseconds\nconst PROFILE_CACHE_TTL_MS = 24 * 60 * 60 * 1000;\n\n/**\n * Get the XDG-compliant directory where global ecloud config should be stored\n */\nfunction getGlobalConfigDir(): string {\n  // First check XDG_CONFIG_HOME\n  const configHome = process.env.XDG_CONFIG_HOME;\n\n  let baseDir: string;\n  if (configHome && path.isAbsolute(configHome)) {\n    baseDir = configHome;\n  } else {\n    // Fall back to ~/.config\n    baseDir = path.join(os.homedir(), \".config\");\n  }\n\n  // Use environment-specific config directory\n  const buildType = getBuildType();\n  const buildSuffix = buildType === \"dev\" ? \"-dev\" : \"\";\n  const configDirName = `ecloud${buildSuffix}`;\n\n  return path.join(baseDir, configDirName);\n}\n\n/**\n * Get the full path to the global config file\n */\nfunction getGlobalConfigPath(): string {\n  return path.join(getGlobalConfigDir(), GLOBAL_CONFIG_FILE);\n}\n\n/**\n * Load global configuration, creating defaults if needed\n */\nexport function loadGlobalConfig(): GlobalConfig {\n  const configPath = getGlobalConfigPath();\n\n  // If file doesn't exist, return defaults for first run\n  if (!fs.existsSync(configPath)) {\n    return {\n      first_run: true,\n    };\n  }\n\n  try {\n    const content = fs.readFileSync(configPath, \"utf-8\");\n    const config = loadYaml(content) as GlobalConfig;\n    return config || { first_run: true };\n  } catch {\n    // If parsing fails, return defaults\n    return {\n      first_run: true,\n    };\n  }\n}\n\n/**\n * Save global configuration to disk\n */\nexport function saveGlobalConfig(config: GlobalConfig): void {\n  const configPath = getGlobalConfigPath();\n\n  // Ensure directory exists\n  const configDir = path.dirname(configPath);\n  fs.mkdirSync(configDir, { recursive: true, mode: 0o755 });\n\n  // Write config file\n  const content = dumpYaml(config, { lineWidth: -1 });\n  fs.writeFileSync(configPath, content, { mode: 0o644 });\n}\n\nfunction normalizeDirectoryPath(directoryPath: string): string {\n  const resolved = path.resolve(directoryPath);\n  try {\n    return fs.realpathSync(resolved);\n  } catch {\n    return resolved;\n  }\n}\n\n/**\n * Get linked app ID for a directory in an environment\n */\nexport function getLinkedAppForDirectory(\n  environment: string,\n  directoryPath: string,\n): string | null {\n  if (!directoryPath) {\n    return null;\n  }\n\n  const config = loadGlobalConfig();\n  const links = config.directory_links?.[environment];\n  if (!links) {\n    return null;\n  }\n\n  const normalizedPath = normalizeDirectoryPath(directoryPath);\n  const appId = links[normalizedPath];\n  return appId || null;\n}\n\n/**\n * Link a directory to an app ID in an environment\n */\nexport function setLinkedAppForDirectory(\n  environment: string,\n  directoryPath: string,\n  appId: string,\n): void {\n  if (!directoryPath || !environment) {\n    return;\n  }\n\n  const config = loadGlobalConfig();\n  if (!config.directory_links) {\n    config.directory_links = {};\n  }\n  if (!config.directory_links[environment]) {\n    config.directory_links[environment] = {};\n  }\n\n  const normalizedPath = normalizeDirectoryPath(directoryPath);\n  // Normalize appId to lowercase for consistent lookups\n  config.directory_links[environment][normalizedPath] = appId.toLowerCase();\n  saveGlobalConfig(config);\n}\n\n/**\n * Get the user's preferred deployment environment\n */\nexport function getDefaultEnvironment(): string | undefined {\n  const config = loadGlobalConfig();\n  return config.default_environment;\n}\n\n/**\n * Set the user's preferred deployment environment\n */\nexport function setDefaultEnvironment(environment: string): void {\n  const config = loadGlobalConfig();\n  config.default_environment = environment;\n  config.first_run = false; // No longer first run after setting environment\n  saveGlobalConfig(config);\n}\n\n/**\n * Check if this is the user's first time running the CLI\n */\nexport function isFirstRun(): boolean {\n  const config = loadGlobalConfig();\n  return config.first_run === true;\n}\n\n/**\n * Mark that the first run has been completed\n */\nexport function markFirstRunComplete(): void {\n  const config = loadGlobalConfig();\n  config.first_run = false;\n  saveGlobalConfig(config);\n}\n\n/**\n * Get the global telemetry preference\n */\nexport function getGlobalTelemetryPreference(): boolean | undefined {\n  const config = loadGlobalConfig();\n  return config.telemetry_enabled;\n}\n\n/**\n * Set the global telemetry preference\n */\nexport function setGlobalTelemetryPreference(enabled: boolean): void {\n  const config = loadGlobalConfig();\n  config.telemetry_enabled = enabled;\n  config.first_run = false; // No longer first run after setting preference\n  saveGlobalConfig(config);\n}\n\n// ==================== Profile Cache Functions ====================\n\n/**\n * Get cached profile names for an environment\n * Returns null if cache is missing or expired (older than 24 hours)\n */\nexport function getProfileCache(environment: string): Record<string, string> | null {\n  const config = loadGlobalConfig();\n  const cacheEntry = config.profile_cache?.[environment];\n\n  if (!cacheEntry) {\n    return null;\n  }\n\n  // Check if cache is expired\n  const now = Date.now();\n  if (now - cacheEntry.updated_at > PROFILE_CACHE_TTL_MS) {\n    return null;\n  }\n\n  return cacheEntry.profiles;\n}\n\n/**\n * Set cached profile names for an environment\n */\nexport function setProfileCache(environment: string, profiles: Record<string, string>): void {\n  const config = loadGlobalConfig();\n\n  if (!config.profile_cache) {\n    config.profile_cache = {};\n  }\n\n  config.profile_cache[environment] = {\n    updated_at: Date.now(),\n    profiles,\n  };\n\n  saveGlobalConfig(config);\n}\n\n/**\n * Invalidate profile cache for a specific environment or all environments\n */\nexport function invalidateProfileCache(environment?: string): void {\n  const config = loadGlobalConfig();\n\n  if (!config.profile_cache) {\n    return;\n  }\n\n  if (environment) {\n    // Invalidate specific environment\n    delete config.profile_cache[environment];\n  } else {\n    // Invalidate all environments\n    config.profile_cache = {};\n  }\n\n  saveGlobalConfig(config);\n}\n\n/**\n * Update a single profile name in the cache\n * This is useful after deploy or profile set to update just one entry\n */\nexport function updateProfileCacheEntry(\n  environment: string,\n  appId: string,\n  profileName: string,\n): void {\n  const config = loadGlobalConfig();\n\n  if (!config.profile_cache) {\n    config.profile_cache = {};\n  }\n\n  if (!config.profile_cache[environment]) {\n    config.profile_cache[environment] = {\n      updated_at: Date.now(),\n      profiles: {},\n    };\n  }\n\n  // Normalize appId to lowercase for consistent lookups\n  const normalizedAppId = appId.toLowerCase();\n  config.profile_cache[environment].profiles[normalizedAppId] = profileName;\n  config.profile_cache[environment].updated_at = Date.now();\n\n  saveGlobalConfig(config);\n}\n\n/**\n * Get the user UUID from global config, or generate a new one if it doesn't exist\n */\nexport function getOrCreateUserUUID(): string {\n  const config = loadGlobalConfig();\n  if (config.user_uuid) {\n    return config.user_uuid;\n  }\n\n  // Generate a new UUID (v4)\n  const uuid = generateUUID();\n\n  // Save it to config\n  config.user_uuid = uuid;\n  config.first_run = false;\n  saveGlobalConfig(config);\n\n  return uuid;\n}\n\n/**\n * Generate a UUID v4\n */\nfunction generateUUID(): string {\n  // UUID v4 format: xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx\n  // Use cryptographically secure random values.\n  const bytes = crypto.randomBytes(16);\n  // Per RFC 4122 section 4.4, set bits for version and `clock_seq_hi_and_reserved`\n  bytes[6] = (bytes[6] & 0x0f) | 0x40; // Version 4\n  bytes[8] = (bytes[8] & 0x3f) | 0x80; // Variant 10\n  const hex = Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\"));\n  return (\n    hex.slice(0, 4).join(\"\") +\n    hex.slice(4, 6).join(\"\") +\n    \"-\" +\n    hex.slice(6, 8).join(\"\") +\n    \"-\" +\n    hex.slice(8, 10).join(\"\") +\n    \"-\" +\n    hex.slice(10, 12).join(\"\") +\n    \"-\" +\n    hex.slice(12, 16).join(\"\")\n  );\n}\n\n/**\n * Save user UUID to global config (preserves existing UUID if present)\n */\nexport function saveUserUUID(userUUID: string): void {\n  const config = loadGlobalConfig();\n  // Only update if not already set\n  if (!config.user_uuid) {\n    config.user_uuid = userUUID;\n    saveGlobalConfig(config);\n  }\n}\n"],"mappings":";;;AAMA,SAAS,eAAe;AACxB,SAAS,SAAS,UAAAA,eAAc;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;;;ACTP,SAAS,OAAO,gBAAgB;AAChC,SAAS,gBAAgB;AACzB,SAAS,QAAQ,gBAAgB;AAuJ1B,SAAS,eAAe,OAAuB;AACpD,QAAM,QAAQ,MAAM,SAAS,IAAI,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI;AAC/E,QAAM,SAAS,SAAI,OAAO,KAAK;AAE/B,UAAQ,IAAI,EAAE;AACd,UAAQ,IAAI,MAAM;AAClB,aAAW,QAAQ,OAAO;AACxB,YAAQ,IAAI,WAAM,IAAI,EAAE;AAAA,EAC1B;AACA,UAAQ,IAAI,MAAM;AAClB,UAAQ,IAAI,EAAE;AAChB;;;ACrKA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA,gBAAAC;AAAA,OACK;;;ACHP,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,YAAY,QAAQ;AACpB,SAAS,QAAQ,UAAU,QAAQ,gBAAgB;AACnD,SAAS,oBAAoB;AAC7B,YAAY,YAAY;AACxB,IAAM,qBAAqB;AAyB3B,IAAM,uBAAuB,KAAK,KAAK,KAAK;AAK5C,SAAS,qBAA6B;AAEpC,QAAM,aAAa,QAAQ,IAAI;AAE/B,MAAI;AACJ,MAAI,cAAmB,gBAAW,UAAU,GAAG;AAC7C,cAAU;AAAA,EACZ,OAAO;AAEL,cAAe,UAAQ,WAAQ,GAAG,SAAS;AAAA,EAC7C;AAGA,QAAM,YAAY,aAAa;AAC/B,QAAM,cAAc,cAAc,QAAQ,SAAS;AACnD,QAAM,gBAAgB,SAAS,WAAW;AAE1C,SAAY,UAAK,SAAS,aAAa;AACzC;AAKA,SAAS,sBAA8B;AACrC,SAAY,UAAK,mBAAmB,GAAG,kBAAkB;AAC3D;AAKO,SAAS,mBAAiC;AAC/C,QAAM,aAAa,oBAAoB;AAGvC,MAAI,CAAI,cAAW,UAAU,GAAG;AAC9B,WAAO;AAAA,MACL,WAAW;AAAA,IACb;AAAA,EACF;AAEA,MAAI;AACF,UAAM,UAAa,gBAAa,YAAY,OAAO;AACnD,UAAM,SAAS,SAAS,OAAO;AAC/B,WAAO,UAAU,EAAE,WAAW,KAAK;AAAA,EACrC,QAAQ;AAEN,WAAO;AAAA,MACL,WAAW;AAAA,IACb;AAAA,EACF;AACF;AAKO,SAAS,iBAAiB,QAA4B;AAC3D,QAAM,aAAa,oBAAoB;AAGvC,QAAM,YAAiB,aAAQ,UAAU;AACzC,EAAG,aAAU,WAAW,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAGxD,QAAM,UAAU,SAAS,QAAQ,EAAE,WAAW,GAAG,CAAC;AAClD,EAAG,iBAAc,YAAY,SAAS,EAAE,MAAM,IAAM,CAAC;AACvD;AA8DO,SAAS,wBAA4C;AAC1D,QAAM,SAAS,iBAAiB;AAChC,SAAO,OAAO;AAChB;AAgCO,SAAS,+BAAoD;AAClE,QAAM,SAAS,iBAAiB;AAChC,SAAO,OAAO;AAChB;AA2GO,SAAS,sBAA8B;AAC5C,QAAM,SAAS,iBAAiB;AAChC,MAAI,OAAO,WAAW;AACpB,WAAO,OAAO;AAAA,EAChB;AAGA,QAAM,OAAO,aAAa;AAG1B,SAAO,YAAY;AACnB,SAAO,YAAY;AACnB,mBAAiB,MAAM;AAEvB,SAAO;AACT;AAKA,SAAS,eAAuB;AAG9B,QAAM,QAAe,mBAAY,EAAE;AAEnC,QAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,QAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,QAAM,MAAM,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AACpE,SACE,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,IACvB,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,IACvB,MACA,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,IACvB,MACA,IAAI,MAAM,GAAG,EAAE,EAAE,KAAK,EAAE,IACxB,MACA,IAAI,MAAM,IAAI,EAAE,EAAE,KAAK,EAAE,IACzB,MACA,IAAI,MAAM,IAAI,EAAE,EAAE,KAAK,EAAE;AAE7B;;;AD9UO,SAAS,2BAA4C;AAE1D,QAAM,WAAW,oBAAoB;AACrC,QAAM,cAAc,qBAAqB,QAAQ;AAGjD,QAAM,mBAAmB,6BAA6B;AAEtD,SAAO,sBAAsB,aAAa,cAAc;AAAA,IACtD,kBAAkB,qBAAqB;AAAA;AAAA,EACzC,CAAC;AACH;AASA,eAAsB,cAAiB,SAAkB,QAAsC;AAC7F,QAAM,SAAS,yBAAyB;AACxC,QAAM,UAAU,qBAAqB;AAGrC,UAAQ,WAAW,QAAQ,IAAI;AAG/B,UAAQ,WAAW,SAAS,IAAI,QAAQ,MAAM,QAAQ,YAAY;AAGlE,QAAM,cAAc,sBAAsB,KAAK;AAC/C,UAAQ,WAAW,aAAa,IAAI;AAGpC,QAAM,YAAYC,cAAa,KAAK;AACpC,UAAQ,WAAW,YAAY,IAAI;AAGnC,QAAM,aAAa,QAAQ,OAAO;AAClC,MAAI,YAAY;AACd,YAAQ,WAAW,aAAa,IAAI;AAAA,EACtC;AAGA,YAAU,SAAS,SAAS,CAAC;AAE7B,MAAI;AACJ,MAAI;AAEJ,MAAI;AACF,aAAS,MAAM,OAAO;AACtB,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,kBAAc,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAChE,UAAM;AAAA,EACR,UAAE;AAEA,UAAM,cAAc,cAAc,YAAY;AAC9C,UAAM,aAAqC,CAAC;AAC5C,QAAI,aAAa;AACf,iBAAW,OAAO,IAAI,YAAY;AAAA,IACpC;AACA,4BAAwB,SAAS,aAAa,GAAG,UAAU;AAG3D,UAAM,WAAW,KAAK,IAAI,IAAI,QAAQ,UAAU,QAAQ;AACxD,cAAU,SAAS,wBAAwB,QAAQ;AAGnD,QAAI;AACF,YAAM,YAAY,QAAQ,OAAO;AACjC,YAAM,OAAO,MAAM;AAAA,IACrB,QAAQ;AAAA,IAER;AAAA,EACF;AACF;;;AFnFA,IAAqB,cAArB,cAAyC,QAAQ;AAAA,EAC/C,OAAO,cAAc;AAAA,EAErB,OAAO,WAAW,CAAC,qCAAqC;AAAA,EAExD,MAAM,MAAqB;AACzB,WAAO,cAAc,MAAM,YAAY;AACrC,YAAM,aAAa,MAAM,cAAc;AAEvC,UAAI,WAAW,WAAW,GAAG;AAC3B,aAAK,IAAI,uCAAuC;AAChD,aAAK,IAAI,EAAE;AACX,aAAK,IAAI,uCAAuC;AAChD,aAAK,IAAI,qBAAqB;AAC9B;AAAA,MACF;AAGA,WAAK,IAAI,sCAAsC;AAC/C,WAAK,IAAI,EAAE;AAEX,iBAAW,OAAO,YAAY;AAC5B,aAAK,IAAI,cAAc,IAAI,OAAO,EAAE;AACpC,aAAK,IAAI,kBAAkB,IAAI,WAAW,EAAE;AAC5C,aAAK,IAAI,aAAa,IAAI,MAAM,EAAE;AAClC,aAAK,IAAI,EAAE;AAAA,MACb;AAGA,YAAM,UAAU,WAAW,IAAI,CAAC,SAAS;AAAA,QACvC,MAAM,GAAG,IAAI,OAAO,KAAK,IAAI,WAAW,MAAM,IAAI,MAAM;AAAA,QACxD,OAAO;AAAA,MACT,EAAE;AAEF,YAAM,cAAc,MAAMC,QAAkB;AAAA,QAC1C,SAAS;AAAA,QACT;AAAA,MACF,CAAC;AAGD,YAAM,aAAa,MAAM,oBAAoB,YAAY,aAAa,YAAY,MAAM;AAExF,UAAI,CAAC,YAAY;AACf,aAAK,MAAM,qCAAqC,YAAY,WAAW,EAAE;AAAA,MAC3E;AAGA,YAAM,UAAU,yBAAyB,UAAU;AACnD,WAAK,IAAI;AAAA,iBAAoB,OAAO,EAAE;AACtC,WAAK,IAAI,SAAS,YAAY,MAAM,IAAI,YAAY,WAAW,EAAE;AAGjE,YAAM,SAAS,MAAM,UAAU;AAE/B,UAAI,QAAQ;AACV,aAAK,IAAI,EAAE;AACX,uBAAe;AAAA,UACb;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAED,cAAM,iBAAiB,MAAM,QAAQ;AAAA,UACnC,SAAS;AAAA,UACT,SAAS;AAAA,QACX,CAAC;AAED,YAAI,CAAC,gBAAgB;AACnB,eAAK,IAAI,wBAAwB;AACjC;AAAA,QACF;AAAA,MACF;AAGA,UAAI;AACF,cAAM,gBAAgB,UAAU;AAChC,aAAK,IAAI,iDAA4C;AACrD,aAAK,IAAI,mBAAc,OAAO,EAAE;AAChC,aAAK,IAAI,6EAA6E;AAGtF,aAAK,IAAI,EAAE;AACX,cAAM,gBAAgB,MAAM,QAAQ;AAAA,UAClC,SAAS,8BAA8B,YAAY,MAAM,IAAI,YAAY,WAAW;AAAA,UACpF,SAAS;AAAA,QACX,CAAC;AAED,YAAI,eAAe;AACjB,gBAAM,UAAU,MAAM,uBAAuB,YAAY,aAAa,YAAY,MAAM;AAExF,cAAI,SAAS;AACX,iBAAK;AAAA,cACH;AAAA,iCAA+B,YAAY,MAAM,IAAI,YAAY,WAAW;AAAA,YAC9E;AACA,iBAAK,IAAI,yEAAyE;AAClF,iBAAK,IAAI,2EAA2E;AAAA,UACtF,OAAO;AACL,iBAAK;AAAA,cACH;AAAA,iDAA0C,YAAY,MAAM,IAAI,YAAY,WAAW;AAAA,YACzF;AACA,iBAAK,IAAI,wCAAwC;AAAA,UACnD;AAAA,QACF,OAAO;AACL,eAAK,IAAI;AAAA,qBAAwB,YAAY,MAAM,IAAI,YAAY,WAAW,EAAE;AAChF,eAAK,IAAI,+DAA+D;AAAA,QAC1E;AAEA,aAAK,IAAI,EAAE;AACX,aAAK,IAAI,iFAAiF;AAAA,MAC5F,SAAS,KAAU;AACjB,aAAK,MAAM,0BAA0B,IAAI,OAAO,EAAE;AAAA,MACpD;AAAA,IACF,CAAC;AAAA,EACH;AACF;","names":["select","getBuildType","getBuildType","select"]}