@mediamonks/canopy-cli 0.4.4 → 0.5.0

package/dist/login-Dif9Y32q.mjs

@@ -1,174 +0,0 @@
-import { n as writeConfig, t as readConfig } from "./config-C-z7st1X.mjs";
-import { n as reportErrors, t as openBrowser } from "./ui-C8VuPzGp.mjs";
-import { defineCommand } from "citty";
-import * as p from "@clack/prompts";
-import { createHash, randomBytes } from "node:crypto";
-import { createServer } from "node:http";
-//#region src/login.ts
-/**
-* canopy login | whoami | logout — browser PKCE flow against OneLogin (public
-* client), then trade the ID token for a platform CLI token via POST
-* /v1/auth/cli-token. See docs/03-architecture.md "CLI auth".
-*/
-const CALLBACK_PORT = 8976;
-const REDIRECT_URI = `http://127.0.0.1:${CALLBACK_PORT}/callback`;
-const LOGIN_TIMEOUT_MS = 300 * 1e3;
-const base64url = (buf) => buf.toString("base64url");
-const whoamiCommand = defineCommand({
-	meta: {
-		name: "whoami",
-		description: "Show the current Canopy login"
-	},
-	run: reportErrors("whoami", async () => {
-		const config = readConfig();
-		if (!config.token) throw new Error("Not logged in — run `canopy login`.");
-		console.log(`${config.email ?? "<unknown email>"} — ${config.apiUrl}`);
-		if (config.tokenExpiresAt !== void 0) {
-			const expired = Date.parse(config.tokenExpiresAt) < Date.now();
-			console.log(expired ? `Token EXPIRED ${config.tokenExpiresAt} — run \`canopy login\` again.` : `Token expires ${config.tokenExpiresAt}.`);
-		}
-	})
-});
-const logoutCommand = defineCommand({
-	meta: {
-		name: "logout",
-		description: "Sign out: forget the local CLI token"
-	},
-	run: reportErrors("logout", async () => {
-		const config = readConfig();
-		if (!config.token) {
-			console.log("Not logged in.");
-			return;
-		}
-		const next = { ...config };
-		delete next.token;
-		delete next.tokenExpiresAt;
-		delete next.email;
-		writeConfig(next);
-		console.log(`Logged out${config.email ? ` (${config.email})` : ""} — token removed from ~/.canopy/config.json.`);
-	})
-});
-/** Wait for OneLogin to redirect back to the local loopback server. */
-function waitForCallback(expectedState) {
-	return new Promise((resolve, reject) => {
-		const server = createServer((req, res) => {
-			const url = new URL(req.url ?? "/", REDIRECT_URI);
-			if (url.pathname !== "/callback") {
-				res.writeHead(404).end();
-				return;
-			}
-			const code = url.searchParams.get("code");
-			const state = url.searchParams.get("state");
-			const ok = Boolean(code) && state === expectedState;
-			res.writeHead(ok ? 200 : 400, { "content-type": "text/html" }).end(ok ? "<h1>Logged in</h1><p>You can close this tab and return to the terminal.</p>" : "<h1>Login failed</h1><p>Return to the terminal and try again.</p>");
-			server.close();
-			clearTimeout(timer);
-			if (ok) resolve(code);
-			else reject(new Error(url.searchParams.get("error_description") ?? "Login rejected"));
-		});
-		const timer = setTimeout(() => {
-			server.close();
-			reject(/* @__PURE__ */ new Error("Timed out waiting for the browser login (5 minutes)."));
-		}, LOGIN_TIMEOUT_MS);
-		server.on("error", (err) => reject(err.message.includes("EADDRINUSE") ? /* @__PURE__ */ new Error(`Port ${CALLBACK_PORT} is in use — close the other process and retry.`) : err));
-		server.listen(CALLBACK_PORT, "127.0.0.1");
-	});
-}
-const loginCommand = defineCommand({
-	meta: {
-		name: "login",
-		description: "Sign in to Canopy via OneLogin"
-	},
-	args: { json: {
-		type: "boolean",
-		default: false,
-		description: "Emit machine-readable status to stdout (for agents/CI)"
-	} },
-	run: reportErrors("login", async ({ args }) => {
-		const json = args.json;
-		try {
-			await login(json);
-		} catch (err) {
-			if (json) console.log(JSON.stringify({
-				status: "error",
-				message: err instanceof Error ? err.message : String(err)
-			}));
-			throw err;
-		}
-	})
-});
-async function login(json) {
-	if (!json) p.intro("canopy login");
-	const config = readConfig();
-	const { issuer, cliClientId, apiUrl } = config;
-	if (cliClientId.includes("REPLACE")) throw new Error("The CLI's OneLogin app is not configured yet (set CANOPY_OIDC_CLIENT_ID or packages/cli/src/config.ts).");
-	const discoveryRes = await fetch(`${issuer}/.well-known/openid-configuration`);
-	if (!discoveryRes.ok) throw new Error(`OIDC discovery failed: ${discoveryRes.status}`);
-	const discovery = await discoveryRes.json();
-	const state = base64url(randomBytes(32));
-	const codeVerifier = base64url(randomBytes(32));
-	const authorizeUrl = new URL(discovery.authorization_endpoint);
-	authorizeUrl.search = new URLSearchParams({
-		response_type: "code",
-		client_id: cliClientId,
-		redirect_uri: REDIRECT_URI,
-		scope: "openid profile email",
-		state,
-		code_challenge: base64url(createHash("sha256").update(codeVerifier).digest()),
-		code_challenge_method: "S256"
-	}).toString();
-	const authorizeHref = authorizeUrl.toString();
-	openBrowser(authorizeHref);
-	const spin = json ? void 0 : p.spinner();
-	if (json) console.log(JSON.stringify({
-		status: "waiting",
-		url: authorizeHref
-	}));
-	else {
-		p.note(`If nothing opens, visit:\n${authorizeHref}`, "Opening OneLogin in your browser");
-		spin?.start("Waiting for you to sign in in the browser…");
-	}
-	let code;
-	try {
-		code = await waitForCallback(state);
-	} catch (err) {
-		spin?.error("Sign-in failed.");
-		throw err;
-	}
-	spin?.stop("Signed in with OneLogin.");
-	const tokenRes = await fetch(discovery.token_endpoint, {
-		method: "POST",
-		headers: { "content-type": "application/x-www-form-urlencoded" },
-		body: new URLSearchParams({
-			grant_type: "authorization_code",
-			client_id: cliClientId,
-			code,
-			redirect_uri: REDIRECT_URI,
-			code_verifier: codeVerifier
-		})
-	});
-	if (!tokenRes.ok) throw new Error(`Token exchange failed: ${tokenRes.status} ${await tokenRes.text()}`);
-	const { id_token: idToken } = await tokenRes.json();
-	if (!idToken) throw new Error("OneLogin returned no id_token.");
-	const cliTokenRes = await fetch(`${apiUrl}/v1/auth/cli-token`, {
-		method: "POST",
-		headers: { "content-type": "application/json" },
-		body: JSON.stringify({ id_token: idToken })
-	});
-	if (!cliTokenRes.ok) throw new Error(`Canopy rejected the login: ${cliTokenRes.status} ${await cliTokenRes.text()}`);
-	const { token, expires_at, user } = await cliTokenRes.json();
-	writeConfig({
-		...config,
-		token,
-		tokenExpiresAt: expires_at,
-		email: user.email
-	});
-	if (json) console.log(JSON.stringify({
-		status: "ok",
-		email: user.email,
-		expiresAt: expires_at
-	}));
-	else p.outro(`Logged in as ${user.name} <${user.email}> (token expires ${expires_at}).`);
-}
-//#endregion
-export { loginCommand, logoutCommand, whoamiCommand };

package/dist/project-CpiPLNby.mjs

@@ -1,54 +0,0 @@
-import { t as readConfig } from "./config-C-z7st1X.mjs";
-import { readFileSync } from "node:fs";
-import { join, resolve } from "node:path";
-//#region src/project.ts
-/**
-* Which project is a command about? Every project-scoped command resolves it
-* the same way: `--project <slug>` wins, otherwise canopy.json in the target
-* directory (the optional [dir] positional, defaulting to the cwd).
-*/
-/** The wildcard apex projects are served under, derived from the API origin's registrable domain. */
-function projectUrl(slug) {
-	const apiHost = new URL(readConfig().apiUrl).hostname;
-	return `https://${slug}.${apiHost.endsWith("workers.dev") ? "thanarie.dev" : apiHost.split(".").slice(-2).join(".")}`;
-}
-/** canopy.json parsed if present; undefined when the file is missing. */
-function tryReadCanopyJson(dir) {
-	let raw;
-	try {
-		raw = readFileSync(join(dir, "canopy.json"), "utf8");
-	} catch {
-		return;
-	}
-	return JSON.parse(raw);
-}
-function readCanopyJson(dir) {
-	const config = tryReadCanopyJson(dir);
-	if (config === void 0) throw new Error(`No canopy.json in ${dir} — run from a project created by \`canopy create\`, add one ({"slug": "<slug>", "dist": "dist"}), or pass --project <slug>.`);
-	if (!config.slug) throw new Error("canopy.json is missing \"slug\".");
-	return config;
-}
-/** For commands scoped to a project but not to a directory (db, rollback). */
-const projectFlagArgs = { project: {
-	type: "string",
-	description: "Project slug (overrides canopy.json in the target directory)"
-} };
-/** For commands that operate on a project directory (dev, deploy, open). */
-const projectDirArgs = {
-	dir: {
-		type: "positional",
-		description: "Project directory (defaults to the current directory)",
-		required: false
-	},
-	...projectFlagArgs
-};
-/** Resolve the target directory and project slug from the shared args. */
-function resolveProject(args) {
-	const dir = resolve(args.dir ?? ".");
-	return {
-		dir,
-		slug: args.project ?? readCanopyJson(dir).slug
-	};
-}
-//#endregion
-export { tryReadCanopyJson as a, resolveProject as i, projectFlagArgs as n, projectUrl as r, projectDirArgs as t };

package/dist/ui-C8VuPzGp.mjs

@@ -1,40 +0,0 @@
-import { spawn } from "node:child_process";
-import { cancel, isCancel } from "@clack/prompts";
-//#region src/ui.ts
-/**
-* Shared terminal UX plumbing: clack prompt unwrapping and uniform
-* command error reporting.
-*/
-/** Unwrap a clack prompt result, exiting cleanly when the user cancels (ctrl-c). */
-function unwrap(result) {
-	if (isCancel(result)) {
-		cancel("Aborted.");
-		process.exit(130);
-	}
-	return result;
-}
-/** Wrap a command action so failures print as `canopy <name>: <message>` and exit 1. */
-function reportErrors(name, action) {
-	return async (...args) => {
-		try {
-			await action(...args);
-		} catch (err) {
-			console.error(`canopy ${name}: ${err instanceof Error ? err.message : String(err)}`);
-			process.exit(1);
-		}
-	};
-}
-/** Guard interactive prompts: bail with a actionable message on non-TTY runs. */
-function requireTty(hint) {
-	if (!process.stdin.isTTY) throw new Error(`This needs an interactive terminal — ${hint}`);
-}
-/** Open a URL in the default browser, fire-and-forget. */
-function openBrowser(url) {
-	spawn(process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open", [url], {
-		stdio: "ignore",
-		detached: true,
-		shell: process.platform === "win32"
-	}).on("error", () => {}).unref();
-}
-//#endregion
-export { unwrap as i, reportErrors as n, requireTty as r, openBrowser as t };

package/dist/{version-check-CoWgQs2h.mjs → version-check-Cuh6HaLX.mjs}

@@ -1,7 +1,7 @@
-import { spawn } from "node:child_process";
 import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
+import { spawn } from "node:child_process";
 //#region src/version-check.ts
 /**
 * Best-effort "you're behind" notice for the CLI.