@leverstack/arcq 1.0.0

package/dist/lib/tls-core.js

@@ -0,0 +1,47 @@
+import https from 'https';
+// Owns arcq's TLS decision. By default no custom agent is used, so axios
+// performs full certificate verification. Insecure mode is opt-in and only
+// ever scopes the relaxed agent to arcq's own requests - it never touches
+// NODE_TLS_REJECT_UNAUTHORIZED (which would disable verification
+// process-wide).
+let insecureAgent;
+export function setInsecureTls(enabled) {
+    insecureAgent = enabled
+        ? new https.Agent({ rejectUnauthorized: false })
+        : undefined;
+}
+// The agent arcgis-core should attach to a request, or undefined on the
+// secure path (let axios use its verifying default).
+export function getHttpsAgent() {
+    return insecureAgent;
+}
+// Node's TLS error codes for an untrusted/invalid server certificate.
+const TLS_ERROR_CODES = new Set([
+    'DEPTH_ZERO_SELF_SIGNED_CERT',
+    'SELF_SIGNED_CERT_IN_CHAIN',
+    'UNABLE_TO_VERIFY_LEAF_SIGNATURE',
+    'UNABLE_TO_GET_ISSUER_CERT',
+    'UNABLE_TO_GET_ISSUER_CERT_LOCALLY',
+    'CERT_UNTRUSTED',
+    'CERT_NOT_YET_VALID',
+    'CERT_HAS_EXPIRED',
+    'ERR_TLS_CERT_ALTNAME_INVALID',
+]);
+// If `error` is a TLS certificate failure, return a friendly message naming
+// the host and the --insecure escape hatch; otherwise null (not a TLS error).
+export function tlsErrorMessage(error, url) {
+    const code = error?.code;
+    if (!code || !TLS_ERROR_CODES.has(code))
+        return null;
+    let host = url;
+    try {
+        host = new URL(url).host;
+    }
+    catch {
+        // fall back to the raw url in the message
+    }
+    return (`TLS certificate verification failed for ${host}. If this is a ` +
+        `trusted server with a self-signed certificate, re-run with ` +
+        `--insecure or set "insecure": true in ~/.arcq.json.`);
+}
+//# sourceMappingURL=tls-core.js.map

package/dist/lib/tls-core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tls-core.js","sourceRoot":"","sources":["../../lib/tls-core.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,yEAAyE;AACzE,2EAA2E;AAC3E,0EAA0E;AAC1E,iEAAiE;AACjE,iBAAiB;AACjB,IAAI,aAAsC,CAAC;AAE3C,MAAM,UAAU,cAAc,CAAC,OAAgB;IAC7C,aAAa,GAAG,OAAO;QACrB,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC;QAChD,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,wEAAwE;AACxE,qDAAqD;AACrD,MAAM,UAAU,aAAa;IAC3B,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,sEAAsE;AACtE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,6BAA6B;IAC7B,2BAA2B;IAC3B,iCAAiC;IACjC,2BAA2B;IAC3B,mCAAmC;IACnC,gBAAgB;IAChB,oBAAoB;IACpB,kBAAkB;IAClB,8BAA8B;CAC/B,CAAC,CAAC;AAEH,4EAA4E;AAC5E,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,GAAW;IACzD,MAAM,IAAI,GAAI,KAAkC,EAAE,IAAI,CAAC;IACvD,IAAI,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAErD,IAAI,IAAI,GAAG,GAAG,CAAC;IACf,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,0CAA0C;IAC5C,CAAC;IAED,OAAO,CACL,2CAA2C,IAAI,iBAAiB;QAChE,6DAA6D;QAC7D,qDAAqD,CACtD,CAAC;AACJ,CAAC"}

package/dist/lib/token-cmd.d.ts

@@ -0,0 +1 @@
+export default function tokenCmd(args: string[]): void;

package/dist/lib/token-cmd.js

@@ -0,0 +1,22 @@
+import { getToken, setTokenValue } from './token-core.js';
+export default function tokenCmd(args) {
+    const sub = args[0];
+    if (sub === 'show') {
+        console.log(getToken() || 'No token set.');
+        return;
+    }
+    if (sub === 'set') {
+        const token = args[1];
+        if (!token) {
+            console.log('Usage: arcq token set <token>');
+            return;
+        }
+        setTokenValue(token);
+        console.log('Token saved.');
+        return;
+    }
+    console.log('Usage:');
+    console.log('  arcq token set <token>');
+    console.log('  arcq token show');
+}
+//# sourceMappingURL=token-cmd.js.map

package/dist/lib/token-cmd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-cmd.js","sourceRoot":"","sources":["../../lib/token-cmd.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAE1D,MAAM,CAAC,OAAO,UAAU,QAAQ,CAAC,IAAc;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAEpB,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,eAAe,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QACD,aAAa,CAAC,KAAK,CAAC,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5B,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;AACnC,CAAC"}

package/dist/lib/token-core.d.ts

@@ -0,0 +1,3 @@
+export declare const tokenPath: string;
+export declare function getToken(): string | null;
+export declare function setTokenValue(token: string): void;

package/dist/lib/token-core.js

@@ -0,0 +1,18 @@
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+export const tokenPath = path.join(os.homedir(), '.arcq-token');
+export function getToken() {
+    if (fs.existsSync(tokenPath)) {
+        return fs.readFileSync(tokenPath, 'utf-8').trim();
+    }
+    return null;
+}
+export function setTokenValue(token) {
+    // The token is a secret: keep it readable only by the owner. writeFileSync's
+    // `mode` applies only when creating the file, so chmod afterwards to also
+    // tighten a pre-existing file written with looser permissions.
+    fs.writeFileSync(tokenPath, token.trim(), { mode: 0o600 });
+    fs.chmodSync(tokenPath, 0o600);
+}
+//# sourceMappingURL=token-core.js.map

package/dist/lib/token-core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-core.js","sourceRoot":"","sources":["../../lib/token-core.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC;AAEhE,MAAM,UAAU,QAAQ;IACtB,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,6EAA6E;IAC7E,0EAA0E;IAC1E,+DAA+D;IAC/D,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC"}

package/dist/lib/types.d.ts

@@ -0,0 +1,65 @@
+export interface Config {
+    services?: Record<string, string>;
+    layers?: Record<string, string>;
+    insecure?: boolean;
+}
+export interface Context {
+    service?: string;
+    layerId?: number;
+    name?: string;
+    url: string;
+}
+export interface CatalogLayer {
+    id: number;
+    name: string;
+    type: string;
+    url: string;
+}
+export type Cache = Record<string, CatalogLayer[]>;
+export interface ArcGisError {
+    message: string;
+    code?: number;
+}
+export interface RawCatalogEntry {
+    id: number;
+    name: string;
+    type?: string;
+}
+export interface ServiceCatalogResponse {
+    layers?: RawCatalogEntry[];
+    tables?: RawCatalogEntry[];
+    error?: ArcGisError;
+}
+export interface ValidateResponse {
+    error?: ArcGisError;
+}
+export interface LayerField {
+    name: string;
+    type: string;
+    alias?: string;
+    length?: number;
+}
+export interface LayerMetadataResponse {
+    fields?: LayerField[];
+    error?: ArcGisError;
+}
+export interface Feature {
+    attributes: Record<string, unknown>;
+}
+export interface QueryResponse {
+    features?: Feature[];
+    exceededTransferLimit?: boolean;
+    count?: number;
+    error?: ArcGisError;
+}
+export interface QueryParams {
+    where?: string;
+    outFields?: string;
+    f?: string;
+    token?: string | null;
+    resultOffset?: number;
+    resultRecordCount?: number;
+    orderByFields?: string;
+    returnCountOnly?: boolean;
+    [key: string]: unknown;
+}

package/dist/lib/types.js

@@ -0,0 +1,3 @@
+// Shared data shapes passed between arcq's modules.
+export {};
+//# sourceMappingURL=types.js.map

package/dist/lib/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../lib/types.ts"],"names":[],"mappings":"AAAA,oDAAoD"}

package/dist/lib/version-cmd.d.ts

@@ -0,0 +1,2 @@
+export declare function getVersion(): string;
+export default function versionCmd(): void;

package/dist/lib/version-cmd.js

@@ -0,0 +1,22 @@
+import { createRequire } from 'module';
+const require = createRequire(import.meta.url);
+// Source (lib/ -> root) and compiled (dist/lib -> root) sit at different
+// depths, so probe both; the name check rejects an unrelated package.json
+// that happens to sit at the other depth.
+export function getVersion() {
+    for (const rel of ['../package.json', '../../package.json']) {
+        try {
+            const pkg = require(rel);
+            if (pkg.name === '@leverstack/arcq' && pkg.version)
+                return pkg.version;
+        }
+        catch {
+            // keep probing
+        }
+    }
+    return 'unknown';
+}
+export default function versionCmd() {
+    console.log(getVersion());
+}
+//# sourceMappingURL=version-cmd.js.map

package/dist/lib/version-cmd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-cmd.js","sourceRoot":"","sources":["../../lib/version-cmd.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AAEvC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/C,yEAAyE;AACzE,0EAA0E;AAC1E,0CAA0C;AAC1C,MAAM,UAAU,UAAU;IACxB,KAAK,MAAM,GAAG,IAAI,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAwC,CAAC;YAChE,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB,IAAI,GAAG,CAAC,OAAO;gBAAE,OAAO,GAAG,CAAC,OAAO,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,UAAU;IAChC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;AAC5B,CAAC"}

package/package.json

@@ -0,0 +1,65 @@
+{
+  "name": "@leverstack/arcq",
+  "version": "1.0.0",
+  "description": "CLI for querying ArcGIS feature services",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "prepare": "tsc -p tsconfig.build.json",
+    "lint": "eslint .",
+    "format": "npx prettier . --write",
+    "test": "mocha",
+    "bump": "scripts/bump-version.sh",
+    "release:tag": "scripts/release-tag.sh"
+  },
+  "keywords": [
+    "arcgis",
+    "cli",
+    "gis",
+    "esri",
+    "feature-service",
+    "arcgis-rest-api",
+    "agent",
+    "ai-agent"
+  ],
+  "author": "Leverstack LLC (https://leverstack.io)",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/jameseaster/arcq.git"
+  },
+  "bugs": "https://github.com/jameseaster/arcq/issues",
+  "homepage": "https://github.com/jameseaster/arcq#readme",
+  "engines": {
+    "node": ">=18"
+  },
+  "bin": {
+    "arcq": "./dist/bin/arcq.js"
+  },
+  "type": "module",
+  "dependencies": {
+    "axios": "^1.16.0"
+  },
+  "devDependencies": {
+    "@eslint/js": "^10.0.1",
+    "@types/chai": "^5.2.3",
+    "@types/mocha": "^10.0.10",
+    "@types/node": "^22.10.0",
+    "chai": "^6.2.2",
+    "eslint": "^10.3.0",
+    "globals": "^17.6.0",
+    "mocha": "^11.7.5",
+    "prettier": "3.8.3",
+    "tsx": "^4.19.2",
+    "typescript": "^5.7.2",
+    "typescript-eslint": "^8.18.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}