@lifeaitools/clauth 0.4.1 → 0.5.1

package/cli/api.js

@@ -1,113 +1,113 @@
-// cli/api.js
-// Thin client that calls the auth-vault Edge Function
-
-import { createRequire } from "module";
-const require = createRequire(import.meta.url);
-
-import Conf from "conf";
-import { getConfOptions } from "./conf-path.js";
-
-const config = new Conf(getConfOptions());
-
-// ============================================================
-// Get Edge Function base URL from local config
-// ============================================================
-export function getBaseUrl() {
-  const url = config.get("supabase_url") || process.env.CLAUTH_SUPABASE_URL;
-  if (!url) throw new Error("Supabase URL not configured. Run: clauth setup");
-  return `${url}/functions/v1/auth-vault`;
-}
-
-export function getAnonKey() {
-  const key = config.get("supabase_anon_key") || process.env.CLAUTH_SUPABASE_ANON_KEY;
-  if (!key) throw new Error("Supabase anon key not configured. Run: clauth setup");
-  return key;
-}
-
-// ============================================================
-// Core POST helper
-// ============================================================
-async function post(route, body) {
-  const url = `${getBaseUrl()}/${route}`;
-  const anonKey = getAnonKey();
-
-  const res = await fetch(url, {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json",
-      "Authorization": `Bearer ${anonKey}`
-    },
-    body: JSON.stringify(body)
-  });
-
-  const data = await res.json();
-  if (!res.ok && !data.error) throw new Error(`HTTP ${res.status}`);
-  return data;
-}
-
-// ============================================================
-// Auth-bearing calls (require HMAC token)
-// ============================================================
-async function authPost(route, password, machineHash, token, timestamp, extra = {}) {
-  return post(route, {
-    machine_hash: machineHash,
-    token,
-    timestamp,
-    password,
-    ...extra
-  });
-}
-
-// ============================================================
-// Exported API surface
-// ============================================================
-
-export async function retrieve(password, machineHash, token, timestamp, service) {
-  return authPost("retrieve", password, machineHash, token, timestamp, { service });
-}
-
-export async function write(password, machineHash, token, timestamp, service, value) {
-  return authPost("write", password, machineHash, token, timestamp, { service, value });
-}
-
-export async function enable(password, machineHash, token, timestamp, service, enabled) {
-  return authPost("enable", password, machineHash, token, timestamp, { service, enabled });
-}
-
-export async function addService(password, machineHash, token, timestamp, name, label, key_type, description) {
-  return authPost("add", password, machineHash, token, timestamp, { name, label, key_type, description });
-}
-
-export async function removeService(password, machineHash, token, timestamp, service, confirm) {
-  return authPost("remove", password, machineHash, token, timestamp, { service, confirm });
-}
-
-export async function revoke(password, machineHash, token, timestamp, service, confirm) {
-  return authPost("revoke", password, machineHash, token, timestamp, { service, confirm });
-}
-
-export async function status(password, machineHash, token, timestamp) {
-  return authPost("status", password, machineHash, token, timestamp);
-}
-
-export async function test(password, machineHash, token, timestamp) {
-  return authPost("test", password, machineHash, token, timestamp);
-}
-
-export async function changePassword(password, machineHash, token, timestamp, newSeedHash) {
-  return authPost("change-password", password, machineHash, token, timestamp, { new_hmac_seed_hash: newSeedHash });
-}
-
-export async function registerMachine(machineHash, seedHash, label, adminToken) {
-  return post("register-machine", {
-    machine_hash: machineHash,
-    hmac_seed_hash: seedHash,
-    label,
-    admin_token: adminToken
-  });
-}
-
-export default {
-  retrieve, write, enable, addService, removeService, revoke,
-  status, test, registerMachine, getBaseUrl, getAnonKey
-};
+// cli/api.js
+// Thin client that calls the auth-vault Edge Function
+
+import { createRequire } from "module";
+const require = createRequire(import.meta.url);
+
+import Conf from "conf";
+import { getConfOptions } from "./conf-path.js";
+
+const config = new Conf(getConfOptions());
+
+// ============================================================
+// Get Edge Function base URL from local config
+// ============================================================
+export function getBaseUrl() {
+  const url = config.get("supabase_url") || process.env.CLAUTH_SUPABASE_URL;
+  if (!url) throw new Error("Supabase URL not configured. Run: clauth setup");
+  return `${url}/functions/v1/auth-vault`;
+}
+
+export function getAnonKey() {
+  const key = config.get("supabase_anon_key") || process.env.CLAUTH_SUPABASE_ANON_KEY;
+  if (!key) throw new Error("Supabase anon key not configured. Run: clauth setup");
+  return key;
+}
+
+// ============================================================
+// Core POST helper
+// ============================================================
+async function post(route, body) {
+  const url = `${getBaseUrl()}/${route}`;
+  const anonKey = getAnonKey();
+
+  const res = await fetch(url, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      "Authorization": `Bearer ${anonKey}`
+    },
+    body: JSON.stringify(body)
+  });
+
+  const data = await res.json();
+  if (!res.ok && !data.error) throw new Error(`HTTP ${res.status}`);
+  return data;
+}
+
+// ============================================================
+// Auth-bearing calls (require HMAC token)
+// ============================================================
+async function authPost(route, password, machineHash, token, timestamp, extra = {}) {
+  return post(route, {
+    machine_hash: machineHash,
+    token,
+    timestamp,
+    password,
+    ...extra
+  });
+}
+
+// ============================================================
+// Exported API surface
+// ============================================================
+
+export async function retrieve(password, machineHash, token, timestamp, service) {
+  return authPost("retrieve", password, machineHash, token, timestamp, { service });
+}
+
+export async function write(password, machineHash, token, timestamp, service, value) {
+  return authPost("write", password, machineHash, token, timestamp, { service, value });
+}
+
+export async function enable(password, machineHash, token, timestamp, service, enabled) {
+  return authPost("enable", password, machineHash, token, timestamp, { service, enabled });
+}
+
+export async function addService(password, machineHash, token, timestamp, name, label, key_type, description) {
+  return authPost("add", password, machineHash, token, timestamp, { name, label, key_type, description });
+}
+
+export async function removeService(password, machineHash, token, timestamp, service, confirm) {
+  return authPost("remove", password, machineHash, token, timestamp, { service, confirm });
+}
+
+export async function revoke(password, machineHash, token, timestamp, service, confirm) {
+  return authPost("revoke", password, machineHash, token, timestamp, { service, confirm });
+}
+
+export async function status(password, machineHash, token, timestamp) {
+  return authPost("status", password, machineHash, token, timestamp);
+}
+
+export async function test(password, machineHash, token, timestamp) {
+  return authPost("test", password, machineHash, token, timestamp);
+}
+
+export async function changePassword(password, machineHash, token, timestamp, newSeedHash) {
+  return authPost("change-password", password, machineHash, token, timestamp, { new_hmac_seed_hash: newSeedHash });
+}
+
+export async function registerMachine(machineHash, seedHash, label, adminToken) {
+  return post("register-machine", {
+    machine_hash: machineHash,
+    hmac_seed_hash: seedHash,
+    label,
+    admin_token: adminToken
+  });
+}
+
+export default {
+  retrieve, write, enable, addService, removeService, revoke,
+  status, test, registerMachine, getBaseUrl, getAnonKey
+};