@lpm-registry/cli 0.57.0 → 0.59.0

package/lib/commands/token-rotate.js

@@ -1,25 +0,0 @@
-import { request } from "../api.js"
-import { setToken } from "../config.js"
-import { createSpinner, printHeader } from "../ui.js"
-
-export async function rotateToken() {
-	printHeader()
-	const spinner = createSpinner("Rotating token...").start()
-	try {
-		const response = await request("/-/token/rotate", {
-			method: "POST",
-		})
-
-		if (!response.ok) {
-			throw new Error(`Request failed with status ${response.status}`)
-		}
-
-		const data = await response.json()
-		const newToken = data.token
-
-		await setToken(newToken)
-		spinner.succeed("Token rotated successfully! Local config updated.")
-	} catch (error) {
-		spinner.fail(`Error: ${error.message}`)
-	}
-}

package/lib/commands/uninstall.js

@@ -1,107 +0,0 @@
-import { spawn } from "node:child_process"
-import fs from "node:fs"
-import path from "node:path"
-import { getPackageManager, getRegistryUrl, getToken } from "../config.js"
-import { createSpinner, log, printHeader } from "../ui.js"
-
-/**
- * Uninstall LPM packages.
- * Creates a temporary .npmrc with auth, runs the package manager's uninstall, and cleans up.
- *
- * @param {string[]} packages - Package names to uninstall
- * @param {object} [options]
- * @param {string} [options.pm] - Package manager override (npm, pnpm, yarn, bun)
- */
-export async function uninstall(packages, options) {
-	printHeader()
-
-	if (!packages || packages.length === 0) {
-		log.error("Please specify at least one package to uninstall.")
-		log.info("Usage: lpm uninstall @lpm.dev/owner.package-name")
-		process.exit(1)
-	}
-
-	const token = await getToken()
-	if (!token) {
-		log.error(
-			'You must be logged in to uninstall packages. Run "lpm login" first.',
-		)
-		process.exit(1)
-	}
-
-	const pm = getPackageManager(options?.pm)
-	const spinner = createSpinner(
-		`Preparing to uninstall ${packages.join(", ")}...`,
-	).start()
-
-	const baseRegistryUrl = getRegistryUrl()
-	const registryUrl = baseRegistryUrl.endsWith("/api/registry")
-		? baseRegistryUrl
-		: `${baseRegistryUrl}/api/registry`
-	const registryHost = registryUrl.replace(/^https?:/, "")
-
-	const npmrcContent = `${registryHost}/:_authToken=${token}
-@lpm.dev:registry=${registryUrl}
-`
-
-	const projectNpmrcPath = path.resolve(process.cwd(), ".npmrc")
-	let existingNpmrc = null
-	let tempNpmrcPath = null
-
-	if (pm === "npm") {
-		tempNpmrcPath = path.resolve(process.cwd(), `.npmrc.lpm-${Date.now()}`)
-		fs.writeFileSync(tempNpmrcPath, npmrcContent)
-	} else {
-		if (fs.existsSync(projectNpmrcPath)) {
-			existingNpmrc = fs.readFileSync(projectNpmrcPath, "utf8")
-		}
-		fs.writeFileSync(projectNpmrcPath, npmrcContent)
-	}
-
-	spinner.succeed(`Configuration generated. Running ${pm} uninstall...`)
-
-	const pmArgs =
-		pm === "npm"
-			? ["uninstall", ...packages, "--userconfig", tempNpmrcPath]
-			: ["uninstall", ...packages]
-
-	const child = spawn(pm, pmArgs, {
-		stdio: "inherit",
-		env: { ...process.env, LPM_TOKEN: token },
-	})
-
-	const cleanup = () => {
-		if (pm === "npm") {
-			if (tempNpmrcPath && fs.existsSync(tempNpmrcPath)) {
-				fs.unlinkSync(tempNpmrcPath)
-			}
-		} else {
-			if (existingNpmrc !== null) {
-				fs.writeFileSync(projectNpmrcPath, existingNpmrc)
-			} else if (fs.existsSync(projectNpmrcPath)) {
-				fs.unlinkSync(projectNpmrcPath)
-			}
-		}
-	}
-
-	child.on("close", code => {
-		cleanup()
-		if (code !== 0) {
-			log.error(`${pm} uninstall failed with code ${code}`)
-			process.exit(code)
-		} else {
-			log.success("Packages uninstalled successfully.")
-		}
-	})
-
-	child.on("error", err => {
-		log.error(`Failed to start ${pm}: ${err.message}`)
-		cleanup()
-		process.exit(1)
-	})
-
-	process.on("SIGINT", () => {
-		cleanup()
-		process.exit()
-	})
-}

package/lib/commands/whoami.js

@@ -1,129 +0,0 @@
-import { request } from "../api.js"
-import { getRegistryUrl } from "../config.js"
-import { log, printHeader } from "../ui.js"
-
-export async function whoami(options = {}) {
-	if (!options.json) printHeader()
-	try {
-		const response = await request("/-/whoami")
-
-		if (!response.ok) {
-			throw new Error(`Request failed with status ${response.status}`)
-		}
-
-		const data = await response.json()
-
-		if (options.json) {
-			const result = {
-				username: data.username,
-				profileUsername: data.profile_username || null,
-				email: data.email || null,
-				plan: data.plan_tier || null,
-				hasPoolAccess: data.has_pool_access || false,
-				usage: data.usage || null,
-				limits: data.limits || null,
-				orgs: (data.organizations || []).map(org => ({
-					slug: org.slug,
-					name: org.name,
-					role: org.role,
-				})),
-			}
-			console.log(JSON.stringify(result, null, 2))
-			return
-		}
-
-		log.success(`Logged in as: ${data.username}`)
-
-		if (data.plan_tier) {
-			console.log("") // Spacer
-			log.info(`Plan: ${data.plan_tier.toUpperCase()}`)
-
-			// Pool subscription status
-			if (data.has_pool_access) {
-				log.success("Pool: Active")
-			} else {
-				log.info("Pool: Not subscribed")
-			}
-
-			if (data.usage) {
-				const storageMB = (data.usage.storage_bytes / (1024 * 1024)).toFixed(2)
-				const limits = data.limits || {}
-
-				// Storage Check - backend returns storageBytes (not storage_gb)
-				if (limits.storageBytes) {
-					const limitMB = (limits.storageBytes / (1024 * 1024)).toFixed(0)
-					const storageMsg = `Storage Used: ${storageMB}MB / ${limitMB}MB`
-					if (data.usage.storage_bytes > limits.storageBytes) {
-						log.error(`${storageMsg} (OVER LIMIT)`)
-					} else {
-						log.info(storageMsg)
-					}
-				} else {
-					log.info(`Storage Used: ${storageMB}MB`)
-				}
-
-				// Package Count Check - backend returns privatePackages (not private_packages)
-				if (limits.privatePackages !== undefined) {
-					if (
-						limits.privatePackages === Number.POSITIVE_INFINITY ||
-						limits.privatePackages === null
-					) {
-						log.info(
-							`Private Packages: ${data.usage.private_packages} (Unlimited)`,
-						)
-					} else {
-						const pkgMsg = `Private Packages: ${data.usage.private_packages} / ${limits.privatePackages}`
-						if (data.usage.private_packages > limits.privatePackages) {
-							log.error(`${pkgMsg} (OVER LIMIT)`)
-						} else {
-							log.info(pkgMsg)
-						}
-					}
-				} else {
-					log.info(`Private Packages: ${data.usage.private_packages}`)
-				}
-
-				// Over limit warning
-				const overStorage =
-					limits.storageBytes && data.usage.storage_bytes > limits.storageBytes
-				const overPackages =
-					limits.privatePackages &&
-					limits.privatePackages !== Number.POSITIVE_INFINITY &&
-					limits.privatePackages !== null &&
-					data.usage.private_packages > limits.privatePackages
-
-				if (overStorage || overPackages) {
-					const registryUrl = getRegistryUrl()
-					console.log("")
-					log.warn("Your account is over its plan limits.")
-					log.warn("Write access (publishing, inviting members) is restricted.")
-					log.warn(
-						`Upgrade your plan: ${registryUrl}/dashboard/settings/billing`,
-					)
-				}
-			}
-		}
-
-		// Display available scopes for publishing
-		const registryUrl = getRegistryUrl()
-		console.log("")
-		log.info("Available Scopes:")
-
-		// Personal scope
-		if (data.profile_username) {
-			log.info(`  Personal: @lpm.dev/${data.profile_username}.*`)
-		} else {
-			log.warn(`  Personal: Not set (${registryUrl}/dashboard/settings)`)
-		}
-
-		// Organization scopes
-		if (data.organizations?.length > 0) {
-			log.info("  Organizations:")
-			for (const org of data.organizations) {
-				log.info(`    @lpm.dev/${org.slug}.* (${org.role})`)
-			}
-		}
-	} catch (error) {
-		log.error(`Error: ${error.message}`)
-	}
-}

package/lib/config.js

@@ -1,328 +0,0 @@
-/**
- * CLI Configuration Management
- *
- * Handles both secure credential storage and general configuration.
- * Token storage migrated to secure-store for keychain integration.
- *
- * @module cli/lib/config
- */
-
-import Conf from "conf"
-import {
-	DEFAULT_REGISTRY_URL,
-	MAX_RETRIES,
-	REQUEST_TIMEOUT_MS,
-} from "./constants.js"
-import {
-	isUsingKeychain,
-	clearToken as secureClearToken,
-	getToken as secureGetToken,
-	setToken as secureSetToken,
-} from "./secure-store.js"
-
-// ============================================================================
-// General Configuration Store (non-sensitive data)
-// ============================================================================
-
-const config = new Conf({
-	projectName: "lpm-cli",
-	defaults: {
-		registryUrl: DEFAULT_REGISTRY_URL,
-		timeout: REQUEST_TIMEOUT_MS,
-		retries: MAX_RETRIES,
-	},
-})
-
-// ============================================================================
-// Token Management (Secure Storage)
-// ============================================================================
-
-/**
- * Transient token — set for the duration of an OIDC-authenticated publish.
- * Takes priority over all other token sources so the short-lived OIDC token
- * is used without writing to keychain or mutating process.env.
- * @type {string | null}
- */
-let _transientToken = null
-
-/**
- * Set a transient token that overrides all other token sources.
- * Used by OIDC token exchange to inject a short-lived publish token.
- * @param {string} token
- */
-export function setTransientToken(token) {
-	_transientToken = token
-}
-
-/**
- * Clear the transient token after use.
- */
-export function clearTransientToken() {
-	_transientToken = null
-}
-
-/**
- * Get the stored auth token from secure storage.
- * Priority: transient (OIDC) > LPM_TOKEN env var > secure storage > legacy storage
- * Tokens are scoped per registry URL so dev and production don't collide.
- * @returns {Promise<string | null>}
- */
-export async function getToken() {
-	// OIDC-exchanged short-lived token takes highest priority
-	if (_transientToken) return _transientToken
-
-	// Check environment variable first (useful for CI/CD and testing)
-	const envToken = process.env.LPM_TOKEN
-	if (envToken) return envToken
-
-	const registryUrl = getRegistryUrl()
-
-	// Try secure store (registry-scoped)
-	const secureToken = await secureGetToken(registryUrl)
-	if (secureToken) return secureToken
-
-	// Migration: check if token exists in old Conf storage
-	const legacyToken = config.get("token")
-	if (legacyToken) {
-		// Migrate to secure storage (scoped to current registry)
-		await secureSetToken(legacyToken, registryUrl)
-		config.delete("token")
-		return legacyToken
-	}
-
-	return null
-}
-
-/**
- * Set the auth token in secure storage (scoped to current registry).
- * @param {string | null} token
- * @returns {Promise<void>}
- */
-export async function setToken(token) {
-	const registryUrl = getRegistryUrl()
-	if (token === null) {
-		await secureClearToken(registryUrl)
-	} else {
-		await secureSetToken(token, registryUrl)
-	}
-	// Ensure legacy token is cleared
-	config.delete("token")
-}
-
-/**
- * Clear the auth token from secure storage (scoped to current registry).
- * @returns {Promise<void>}
- */
-export async function clearToken() {
-	await secureClearToken(getRegistryUrl())
-	config.delete("token")
-}
-
-/**
- * Store a refresh token in secure storage (Feature 44 Part B).
- * Uses the same secure-store as auth tokens with a "refresh:" prefix.
- * @param {string} refreshToken
- * @returns {Promise<void>}
- */
-export async function setRefreshToken(refreshToken) {
-	const registryUrl = getRegistryUrl()
-	await secureSetToken(refreshToken, `refresh:${registryUrl}`)
-}
-
-/**
- * Get the stored refresh token from secure storage.
- * @returns {Promise<string|null>}
- */
-export async function getRefreshToken() {
-	const registryUrl = getRegistryUrl()
-	return secureGetToken(`refresh:${registryUrl}`)
-}
-
-// ============================================================================
-// Registry URL Configuration
-// ============================================================================
-
-/**
- * Get the registry URL.
- * Priority: LPM_REGISTRY_URL env var > stored config > default
- * @returns {string}
- */
-export function getRegistryUrl() {
-	// Check environment variables first (useful for CI/CD and testing)
-	const envUrl = process.env.LPM_REGISTRY_URL
-	if (envUrl) return envUrl
-
-	return config.get("registryUrl", DEFAULT_REGISTRY_URL)
-}
-
-/**
- * Set the registry URL.
- * @param {string} url
- */
-export function setRegistryUrl(url) {
-	config.set("registryUrl", url)
-}
-
-// ============================================================================
-// Timeout Configuration
-// ============================================================================
-
-/**
- * Get the request timeout in milliseconds.
- * @returns {number}
- */
-export function getTimeout() {
-	return config.get("timeout", REQUEST_TIMEOUT_MS)
-}
-
-/**
- * Set the request timeout in milliseconds.
- * @param {number} ms
- */
-export function setTimeout(ms) {
-	config.set("timeout", ms)
-}
-
-// ============================================================================
-// Retry Configuration
-// ============================================================================
-
-/**
- * Get the maximum retry count.
- * @returns {number}
- */
-export function getRetries() {
-	return config.get("retries", MAX_RETRIES)
-}
-
-/**
- * Set the maximum retry count.
- * @param {number} count
- */
-export function setRetries(count) {
-	config.set("retries", count)
-}
-
-// ============================================================================
-// Package Manager Configuration
-// ============================================================================
-
-const VALID_PACKAGE_MANAGERS = new Set(["npm", "pnpm", "yarn", "bun"])
-const DEFAULT_PACKAGE_MANAGER = "npm"
-
-/**
- * Get the configured package manager for install/uninstall operations.
- * Priority: --pm flag > LPM_PACKAGE_MANAGER env > config > "npm"
- * @param {string} [override] - CLI flag override (--pm value)
- * @returns {string}
- */
-export function getPackageManager(override) {
-	const pm =
-		override ||
-		process.env.LPM_PACKAGE_MANAGER ||
-		config.get("packageManager", DEFAULT_PACKAGE_MANAGER)
-
-	if (!VALID_PACKAGE_MANAGERS.has(pm)) {
-		return DEFAULT_PACKAGE_MANAGER
-	}
-
-	return pm
-}
-
-// ============================================================================
-// General Configuration Access
-// ============================================================================
-
-/**
- * Get all configuration values.
- * @returns {Promise<Record<string, unknown>>}
- */
-export async function getAllConfig() {
-	const usingKeychain = await isUsingKeychain()
-	const hasToken = !!(await getToken())
-
-	return {
-		registryUrl: getRegistryUrl(),
-		packageManager: getPackageManager(),
-		timeout: getTimeout(),
-		retries: getRetries(),
-		secureStorage: usingKeychain ? "keychain" : "encrypted-file",
-		authenticated: hasToken,
-	}
-}
-
-/**
- * Get a specific configuration value.
- * @param {string} key
- * @returns {unknown}
- */
-export function getConfigValue(key) {
-	const configMap = {
-		registry: getRegistryUrl,
-		registryUrl: getRegistryUrl,
-		packageManager: getPackageManager,
-		timeout: getTimeout,
-		retries: getRetries,
-	}
-
-	const getter = configMap[key]
-	if (getter) return getter()
-	return config.get(key)
-}
-
-/**
- * Set a specific configuration value.
- * @param {string} key
- * @param {unknown} value
- * @returns {boolean} - True if set successfully
- */
-export function setConfigValue(key, value) {
-	const configMap = {
-		registry: setRegistryUrl,
-		registryUrl: setRegistryUrl,
-		packageManager: val => {
-			if (VALID_PACKAGE_MANAGERS.has(val)) {
-				config.set("packageManager", val)
-			} else {
-				throw new Error(
-					`Invalid package manager "${val}". Valid options: ${[...VALID_PACKAGE_MANAGERS].join(", ")}`,
-				)
-			}
-		},
-		timeout: val => setTimeout(Number(val)),
-		retries: val => setRetries(Number(val)),
-	}
-
-	const setter = configMap[key]
-	if (setter) {
-		setter(value)
-		return true
-	}
-
-	// Allow setting arbitrary config values
-	config.set(key, value)
-	return true
-}
-
-/**
- * Delete a specific configuration value.
- * @param {string} key
- * @returns {boolean} - True if deleted
- */
-export function deleteConfigValue(key) {
-	const protectedKeys = ["registryUrl", "registry", "timeout", "retries"]
-	if (protectedKeys.includes(key)) {
-		// Reset to default instead of deleting
-		const defaults = {
-			registryUrl: DEFAULT_REGISTRY_URL,
-			registry: DEFAULT_REGISTRY_URL,
-			timeout: REQUEST_TIMEOUT_MS,
-			retries: MAX_RETRIES,
-		}
-		config.set(key === "registry" ? "registryUrl" : key, defaults[key])
-		return true
-	}
-
-	config.delete(key)
-	return true
-}