@merchbase/cli 1.0.2 → 3.0.0

package/dist/secret-input.js

@@ -0,0 +1,53 @@
+export const readSecretFromStdin = async () => {
+    let value = "";
+    for await (const chunk of process.stdin) {
+        value += String(chunk);
+    }
+    return value.trim();
+};
+export const readSecretFromPrompt = (prompt) => {
+    if (!(process.stdin.isTTY && process.stdin.setRawMode)) {
+        throw createCliError("BAD_REQUEST", "auth set needs <api-key>, --stdin, or an interactive terminal prompt.");
+    }
+    return new Promise((resolve, reject) => {
+        const input = process.stdin;
+        const onData = (chunk) => {
+            const text = chunk.toString("utf8");
+            for (const character of text) {
+                if (character === "\u0003") {
+                    cleanup();
+                    process.stdout.write("\n");
+                    reject(createCliError("ABORTED", "auth set was canceled."));
+                    return;
+                }
+                if (character === "\r" || character === "\n") {
+                    cleanup();
+                    process.stdout.write("\n");
+                    resolve(buffer.trim());
+                    return;
+                }
+                if (character === "\u007f") {
+                    buffer = buffer.slice(0, -1);
+                    return;
+                }
+                buffer += character;
+            }
+        };
+        const cleanup = () => {
+            input.off("data", onData);
+            input.setRawMode(false);
+            input.pause();
+        };
+        let buffer = "";
+        process.stdout.write(prompt);
+        input.setRawMode(true);
+        input.resume();
+        input.on("data", onData);
+    });
+};
+const createCliError = (code, message) => {
+    const error = new Error(message);
+    error.code = code;
+    return error;
+};
+//# sourceMappingURL=secret-input.js.map

package/dist/secret-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-input.js","sourceRoot":"","sources":["../src/secret-input.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,IAAI,EAAE;IAC1C,IAAI,KAAK,GAAG,EAAE,CAAC;IAEf,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACtC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACxB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,MAAc,EAAE,EAAE;IACnD,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACrD,MAAM,cAAc,CAChB,aAAa,EACb,uEAAuE,CAC1E,CAAC;IACN,CAAC;IAED,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;YAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAEpC,KAAK,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;gBAC3B,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;oBACzB,OAAO,EAAE,CAAC;oBACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC3B,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC,CAAC;oBAC5D,OAAO;gBACX,CAAC;gBAED,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;oBAC3C,OAAO,EAAE,CAAC;oBACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC3B,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;oBACvB,OAAO;gBACX,CAAC;gBAED,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;oBACzB,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;oBAC7B,OAAO;gBACX,CAAC;gBAED,MAAM,IAAI,SAAS,CAAC;YACxB,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,GAAG,EAAE;YACjB,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC1B,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACxB,KAAK,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC,CAAC;QAEF,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACvB,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACP,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,EAAE;IACrD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,CAA6B,CAAC;IAC7D,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;IAClB,OAAO,KAAK,CAAC;AACjB,CAAC,CAAC"}

package/dist/secure-store.d.ts

@@ -0,0 +1,23 @@
+interface CommandResult {
+    stderr: string;
+    stdout: string;
+}
+type SecureStoreCommandRunner = (file: string, args: string[]) => Promise<CommandResult>;
+export interface SecureStoreStatus {
+    account: string;
+    available: boolean;
+    configured: boolean;
+    kind: "macos-keychain" | "unsupported";
+    reason?: string;
+    service: string;
+}
+export interface SecureStore {
+    clearApiKey(): Promise<boolean>;
+    getStatus(): Promise<SecureStoreStatus>;
+    readApiKey(): Promise<string | null>;
+    writeApiKey(apiKey: string): Promise<void>;
+}
+export declare const createSecureStore: (runCommand?: SecureStoreCommandRunner, platform?: NodeJS.Platform) => SecureStore;
+export declare const secureStore: SecureStore;
+export {};
+//# sourceMappingURL=secure-store.d.ts.map

package/dist/secure-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-store.d.ts","sourceRoot":"","sources":["../src/secure-store.ts"],"names":[],"mappings":"AAiBA,UAAU,aAAa;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAClB;AAED,KAAK,wBAAwB,GAAG,CAC5B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EAAE,KACb,OAAO,CAAC,aAAa,CAAC,CAAC;AAE5B,MAAM,WAAW,iBAAiB;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,IAAI,EAAE,gBAAgB,GAAG,aAAa,CAAC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IACxB,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,SAAS,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACxC,UAAU,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACrC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9C;AAiJD,eAAO,MAAM,iBAAiB,GAC1B,aAAY,wBAAgD,EAC5D,0BAA2B,KAC5B,WAMF,CAAC;AAEF,eAAO,MAAM,WAAW,aAAsB,CAAC"}

package/dist/secure-store.js

@@ -0,0 +1,156 @@
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+const execFileAsync = promisify(execFile);
+const KEYCHAIN_ACCOUNT = "default";
+const KEYCHAIN_SERVICE = "merchbase-cli";
+const MACOS_MISSING_SECRET_PATTERNS = [
+    "could not be found in the keychain",
+    "the specified item could not be found in the keychain",
+];
+const runSecureStoreCommand = async (file, args) => {
+    const result = await execFileAsync(file, args, {
+        encoding: "utf8",
+    });
+    return {
+        stderr: result.stderr,
+        stdout: result.stdout,
+    };
+};
+const createMacOsSecureStore = (runCommand) => {
+    const readApiKey = async () => {
+        try {
+            const result = await runCommand("security", [
+                "find-generic-password",
+                "-a",
+                KEYCHAIN_ACCOUNT,
+                "-s",
+                KEYCHAIN_SERVICE,
+                "-w",
+            ]);
+            return toOptionalSecret(result.stdout);
+        }
+        catch (error) {
+            if (isMissingSecretError(error)) {
+                return null;
+            }
+            throw createSecureStoreError("INTERNAL_ERROR", "Failed to read MerchBase auth from macOS Keychain.");
+        }
+    };
+    return {
+        clearApiKey: async () => {
+            try {
+                await runCommand("security", [
+                    "delete-generic-password",
+                    "-a",
+                    KEYCHAIN_ACCOUNT,
+                    "-s",
+                    KEYCHAIN_SERVICE,
+                ]);
+                return true;
+            }
+            catch (error) {
+                if (isMissingSecretError(error)) {
+                    return false;
+                }
+                throw createSecureStoreError("INTERNAL_ERROR", "Failed to clear MerchBase auth from macOS Keychain.");
+            }
+        },
+        getStatus: async () => {
+            try {
+                await runCommand("security", ["list-keychains"]);
+            }
+            catch {
+                return makeStatus({
+                    available: false,
+                    configured: false,
+                    kind: "macos-keychain",
+                    reason: "macOS Keychain is unavailable from this runtime.",
+                });
+            }
+            try {
+                return makeStatus({
+                    available: true,
+                    configured: (await readApiKey()) !== null,
+                    kind: "macos-keychain",
+                });
+            }
+            catch (error) {
+                return makeStatus({
+                    available: false,
+                    configured: false,
+                    kind: "macos-keychain",
+                    reason: error instanceof Error
+                        ? error.message
+                        : "macOS Keychain auth is unavailable.",
+                });
+            }
+        },
+        readApiKey,
+        writeApiKey: async (apiKey) => {
+            try {
+                await runCommand("security", [
+                    "add-generic-password",
+                    "-a",
+                    KEYCHAIN_ACCOUNT,
+                    "-s",
+                    KEYCHAIN_SERVICE,
+                    "-w",
+                    apiKey,
+                    "-U",
+                    "-T",
+                    "/usr/bin/security",
+                ]);
+            }
+            catch {
+                throw createSecureStoreError("INTERNAL_ERROR", "Failed to store MerchBase auth in macOS Keychain.");
+            }
+        },
+    };
+};
+const unsupportedSecureStore = {
+    clearApiKey: () => Promise.reject(createSecureStoreError("PRECONDITION_FAILED", "Secure auth storage is currently supported on macOS Keychain only. Export MERCHBASE_API_KEY for this runtime.")),
+    getStatus: () => Promise.resolve(makeStatus({
+        available: false,
+        configured: false,
+        kind: "unsupported",
+        reason: "Secure auth storage is currently supported on macOS Keychain only.",
+    })),
+    readApiKey: () => Promise.resolve(null),
+    writeApiKey: () => Promise.reject(createSecureStoreError("PRECONDITION_FAILED", "Secure auth storage is currently supported on macOS Keychain only. Export MERCHBASE_API_KEY for this runtime.")),
+};
+export const createSecureStore = (runCommand = runSecureStoreCommand, platform = process.platform) => {
+    if (platform === "darwin") {
+        return createMacOsSecureStore(runCommand);
+    }
+    return unsupportedSecureStore;
+};
+export const secureStore = createSecureStore();
+const makeStatus = (status) => ({
+    account: KEYCHAIN_ACCOUNT,
+    service: KEYCHAIN_SERVICE,
+    ...status,
+});
+const toOptionalSecret = (value) => {
+    const trimmed = value.trim();
+    return trimmed.length > 0 ? trimmed : null;
+};
+const isMissingSecretError = (error) => {
+    const message = toCommandErrorMessage(error);
+    return MACOS_MISSING_SECRET_PATTERNS.some((pattern) => message.includes(pattern));
+};
+const toCommandErrorMessage = (error) => {
+    if (!error || typeof error !== "object") {
+        return "";
+    }
+    const commandError = error;
+    return [commandError.stderr, commandError.stdout, commandError.message]
+        .filter((value) => Boolean(value))
+        .join("\n")
+        .toLowerCase();
+};
+const createSecureStoreError = (code, message) => {
+    const error = new Error(message);
+    error.code = code;
+    return error;
+};
+//# sourceMappingURL=secure-store.js.map

package/dist/secure-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-store.js","sourceRoot":"","sources":["../src/secure-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC1C,MAAM,gBAAgB,GAAG,SAAS,CAAC;AACnC,MAAM,gBAAgB,GAAG,eAAe,CAAC;AACzC,MAAM,6BAA6B,GAAG;IAClC,oCAAoC;IACpC,uDAAuD;CACjD,CAAC;AAkCX,MAAM,qBAAqB,GAA6B,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;IACzE,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE;QAC3C,QAAQ,EAAE,MAAM;KACnB,CAAC,CAAC;IAEH,OAAO;QACH,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;KACxB,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAC3B,UAAoC,EACzB,EAAE;IACb,MAAM,UAAU,GAAG,KAAK,IAAI,EAAE;QAC1B,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE;gBACxC,uBAAuB;gBACvB,IAAI;gBACJ,gBAAgB;gBAChB,IAAI;gBACJ,gBAAgB;gBAChB,IAAI;aACP,CAAC,CAAC;YAEH,OAAO,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,MAAM,sBAAsB,CACxB,gBAAgB,EAChB,oDAAoD,CACvD,CAAC;QACN,CAAC;IACL,CAAC,CAAC;IAEF,OAAO;QACH,WAAW,EAAE,KAAK,IAAI,EAAE;YACpB,IAAI,CAAC;gBACD,MAAM,UAAU,CAAC,UAAU,EAAE;oBACzB,yBAAyB;oBACzB,IAAI;oBACJ,gBAAgB;oBAChB,IAAI;oBACJ,gBAAgB;iBACnB,CAAC,CAAC;gBAEH,OAAO,IAAI,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC9B,OAAO,KAAK,CAAC;gBACjB,CAAC;gBAED,MAAM,sBAAsB,CACxB,gBAAgB,EAChB,qDAAqD,CACxD,CAAC;YACN,CAAC;QACL,CAAC;QACD,SAAS,EAAE,KAAK,IAAI,EAAE;YAClB,IAAI,CAAC;gBACD,MAAM,UAAU,CAAC,UAAU,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;YACrD,CAAC;YAAC,MAAM,CAAC;gBACL,OAAO,UAAU,CAAC;oBACd,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,KAAK;oBACjB,IAAI,EAAE,gBAAgB;oBACtB,MAAM,EAAE,kDAAkD;iBAC7D,CAAC,CAAC;YACP,CAAC;YAED,IAAI,CAAC;gBACD,OAAO,UAAU,CAAC;oBACd,SAAS,EAAE,IAAI;oBACf,UAAU,EAAE,CAAC,MAAM,UAAU,EAAE,CAAC,KAAK,IAAI;oBACzC,IAAI,EAAE,gBAAgB;iBACzB,CAAC,CAAC;YACP,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,OAAO,UAAU,CAAC;oBACd,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,KAAK;oBACjB,IAAI,EAAE,gBAAgB;oBACtB,MAAM,EACF,KAAK,YAAY,KAAK;wBAClB,CAAC,CAAC,KAAK,CAAC,OAAO;wBACf,CAAC,CAAC,qCAAqC;iBAClD,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QACD,UAAU;QACV,WAAW,EAAE,KAAK,EAAE,MAAc,EAAE,EAAE;YAClC,IAAI,CAAC;gBACD,MAAM,UAAU,CAAC,UAAU,EAAE;oBACzB,sBAAsB;oBACtB,IAAI;oBACJ,gBAAgB;oBAChB,IAAI;oBACJ,gBAAgB;oBAChB,IAAI;oBACJ,MAAM;oBACN,IAAI;oBACJ,IAAI;oBACJ,mBAAmB;iBACtB,CAAC,CAAC;YACP,CAAC;YAAC,MAAM,CAAC;gBACL,MAAM,sBAAsB,CACxB,gBAAgB,EAChB,mDAAmD,CACtD,CAAC;YACN,CAAC;QACL,CAAC;KACJ,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAgB;IACxC,WAAW,EAAE,GAAG,EAAE,CACd,OAAO,CAAC,MAAM,CACV,sBAAsB,CAClB,qBAAqB,EACrB,+GAA+G,CAClH,CACJ;IACL,SAAS,EAAE,GAAG,EAAE,CACZ,OAAO,CAAC,OAAO,CACX,UAAU,CAAC;QACP,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE,aAAa;QACnB,MAAM,EAAE,oEAAoE;KAC/E,CAAC,CACL;IACL,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;IACvC,WAAW,EAAE,GAAG,EAAE,CACd,OAAO,CAAC,MAAM,CACV,sBAAsB,CAClB,qBAAqB,EACrB,+GAA+G,CAClH,CACJ;CACR,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC7B,aAAuC,qBAAqB,EAC5D,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAChB,EAAE;IACb,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,sBAAsB,CAAC,UAAU,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,sBAAsB,CAAC;AAClC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,iBAAiB,EAAE,CAAC;AAE/C,MAAM,UAAU,GAAG,CACf,MAAsD,EACrC,EAAE,CAAC,CAAC;IACrB,OAAO,EAAE,gBAAgB;IACzB,OAAO,EAAE,gBAAgB;IACzB,GAAG,MAAM;CACZ,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAAE,EAAE;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,KAAc,EAAE,EAAE;IAC5C,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC7C,OAAO,6BAA6B,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAClD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC5B,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,KAAc,EAAE,EAAE;IAC7C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,EAAE,CAAC;IACd,CAAC;IAED,MAAM,YAAY,GAAG,KAA8B,CAAC;IACpD,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC;SAClE,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;SAClD,IAAI,CAAC,IAAI,CAAC;SACV,WAAW,EAAE,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,EAAE;IAC7D,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,CAA6B,CAAC;IAC7D,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;IAClB,OAAO,KAAK,CAAC;AACjB,CAAC,CAAC"}

package/dist/setup-help.d.ts

@@ -1,3 +1,3 @@
-export type CliSetupHelpTarget = "global" | "merch-account-get" | "merch-account-sync" | "products-sync" | "sales-sync";
+export type CliSetupHelpTarget = "global" | "merch-account-get";
 export declare const buildSetupHelpText: (target: CliSetupHelpTarget) => Promise<string | null>;
 //# sourceMappingURL=setup-help.d.ts.map

package/dist/setup-help.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup-help.d.ts","sourceRoot":"","sources":["../src/setup-help.ts"],"names":[],"mappings":"AAYA,MAAM,MAAM,kBAAkB,GACxB,QAAQ,GACR,mBAAmB,GACnB,oBAAoB,GACpB,eAAe,GACf,YAAY,CAAC;AAiBnB,eAAO,MAAM,kBAAkB,GAC3B,QAAQ,kBAAkB,KAC3B,OAAO,CAAC,MAAM,GAAG,IAAI,CAOvB,CAAC"}
+{"version":3,"file":"setup-help.d.ts","sourceRoot":"","sources":["../src/setup-help.ts"],"names":[],"mappings":"AASA,MAAM,MAAM,kBAAkB,GAAG,QAAQ,GAAG,mBAAmB,CAAC;AAUhE,eAAO,MAAM,kBAAkB,GAC3B,QAAQ,kBAAkB,KAC3B,OAAO,CAAC,MAAM,GAAG,IAAI,CAOvB,CAAC"}

package/dist/setup-help.js

@@ -1,40 +1,29 @@
 import { createMerchbaseClient, } from "@merchbase/http-client";
+import { getMissingAuthMessage, resolveAuthState } from "./auth.js";
 import { loadConfig } from "./config.js";
-const API_KEY_ENV_VAR = "MERCHBASE_API_KEY";
-const ACCOUNT_SETUP_LINE = "Set the default account with `merchbase config set account <accountId> [marketplace]`.";
 const REMOTE_STEP_KEYS_BY_TARGET = {
-    global: ["ingestion-client", "merch-account"],
-    "merch-account-get": ["ingestion-client", "merch-account"],
-    "merch-account-sync": ["ingestion-client"],
-    "products-sync": ["ingestion-client", "merch-account"],
-    "sales-sync": ["ingestion-client", "merch-account"],
-};
-const CLI_ACTIONS_BY_API_PATH = {
-    "api.public.merchAccount.sync": "`merchbase merch-account sync`",
+    global: ["ingestion-client", "find-account", "sync-metadata"],
+    "merch-account-get": ["ingestion-client", "find-account", "sync-metadata"],
 };
 export const buildSetupHelpText = async (target) => {
     const lines = await getSetupHelpLines(target);
     if (lines.length === 0) {
         return null;
     }
-    return ["Setup:", ...lines.map((line) => `  ${line}`)].join("\n");
+    return ["Readiness:", ...lines.map((line) => `  ${line}`)].join("\n");
 };
 const getSetupHelpLines = async (target) => {
     const config = await loadConfig();
-    const apiKey = resolveApiKey();
+    const auth = await resolveAuthState();
     const lines = [];
-    if (!apiKey) {
-        lines.push(`Set \`${API_KEY_ENV_VAR}\` in your environment.`);
-    }
-    if (!config.account) {
-        lines.push(ACCOUNT_SETUP_LINE);
+    if (!auth.apiKey) {
+        lines.push(getMissingAuthMessage());
     }
-    if (!(apiKey && config.account)) {
+    if (!auth.apiKey) {
         return lines;
     }
     const setupStatus = await loadRemoteSetupStatus({
-        accountId: config.account,
-        apiKey,
+        apiKey: auth.apiKey,
         baseUrl: config.baseUrl,
         marketplace: config.marketplace,
     });
@@ -44,9 +33,7 @@ const getSetupHelpLines = async (target) => {
     return [...lines, ...getRemoteSetupLines(target, setupStatus)];
 };
 const loadRemoteSetupStatus = async (input) => {
-    const headers = {
-        "x-merchbase-account": input.accountId,
-    };
+    const headers = {};
     if (input.marketplace) {
         headers["x-merchbase-marketplace"] = input.marketplace;
     }
@@ -72,19 +59,12 @@ const formatRemoteSetupLine = (step) => {
     if (step.key === "ingestion-client") {
         return "Connect an ingestion client for the selected account.";
     }
-    const action = step.actionPath
-        ? CLI_ACTIONS_BY_API_PATH[step.actionPath]
-        : null;
-    if (action) {
-        return `Run ${action}.`;
+    if (step.key === "find-account") {
+        return "Enable automatic planning; account discovery runs before merch data is available.";
     }
-    return step.title.endsWith(".") ? step.title : `${step.title}.`;
-};
-const resolveApiKey = () => {
-    const apiKey = process.env[API_KEY_ENV_VAR]?.trim();
-    if (!apiKey || apiKey === "null" || apiKey === "undefined") {
-        return undefined;
+    if (step.key === "sync-metadata") {
+        return "Enable automatic planning; account metadata sync runs before product and sales reads are complete.";
     }
-    return apiKey;
+    return step.title.endsWith(".") ? step.title : `${step.title}.`;
 };
 //# sourceMappingURL=setup-help.js.map

package/dist/setup-help.js.map

@@ -1 +1 @@
-{"version":3,"file":"setup-help.js","sourceRoot":"","sources":["../src/setup-help.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,qBAAqB,GAIxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAC5C,MAAM,kBAAkB,GACpB,wFAAwF,CAAC;AAS7F,MAAM,0BAA0B,GAG5B;IACA,MAAM,EAAE,CAAC,kBAAkB,EAAE,eAAe,CAAC;IAC7C,mBAAmB,EAAE,CAAC,kBAAkB,EAAE,eAAe,CAAC;IAC1D,oBAAoB,EAAE,CAAC,kBAAkB,CAAC;IAC1C,eAAe,EAAE,CAAC,kBAAkB,EAAE,eAAe,CAAC;IACtD,YAAY,EAAE,CAAC,kBAAkB,EAAE,eAAe,CAAC;CACtD,CAAC;AAEF,MAAM,uBAAuB,GAAqC;IAC9D,8BAA8B,EAAE,gCAAgC;CACnE,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACnC,MAA0B,EACJ,EAAE;IACxB,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,OAAO,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtE,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,KAAK,EAAE,MAA0B,EAAE,EAAE;IAC3D,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,KAAK,CAAC,IAAI,CAAC,SAAS,eAAe,yBAAyB,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC;QAC5C,SAAS,EAAE,MAAM,CAAC,OAAO;QACzB,MAAM;QACN,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,WAAW,EAAE,MAAM,CAAC,WAAW;KAClC,CAAC,CAAC;IAEH,IAAI,CAAC,WAAW,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,CAAC,GAAG,KAAK,EAAE,GAAG,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;AACnE,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,KAAK,EAAE,KAKpC,EAAE,EAAE;IACD,MAAM,OAAO,GAA2B;QACpC,qBAAqB,EAAE,KAAK,CAAC,SAAS;KACzC,CAAC;IACF,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACpB,OAAO,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;IAC3D,CAAC;IAED,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,qBAAqB,CAAC;YACjC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO;SACV,CAAC,CAAC;QAEH,OAAO,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CACxB,MAA0B,EAC1B,WAAiC,EACnC,EAAE;IACA,MAAM,gBAAgB,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAE5D,OAAO,WAAW,CAAC,KAAK;SACnB,MAAM,CACH,CAAC,IAAwB,EAAE,EAAE,CACzB,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAClE;SACA,GAAG,CAAC,qBAAqB,CAAC,CAAC;AACpC,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,IAAwB,EAAE,EAAE;IACvD,IAAI,IAAI,CAAC,GAAG,KAAK,kBAAkB,EAAE,CAAC;QAClC,OAAO,uDAAuD,CAAC;IACnE,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU;QAC1B,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC;QAC1C,CAAC,CAAC,IAAI,CAAC;IACX,IAAI,MAAM,EAAE,CAAC;QACT,OAAO,OAAO,MAAM,GAAG,CAAC;IAC5B,CAAC;IAED,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;AACpE,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,GAAG,EAAE;IACvB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC;IACpD,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QACzD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC,CAAC"}
+{"version":3,"file":"setup-help.js","sourceRoot":"","sources":["../src/setup-help.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,qBAAqB,GAIxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,MAAM,0BAA0B,GAG5B;IACA,MAAM,EAAE,CAAC,kBAAkB,EAAE,cAAc,EAAE,eAAe,CAAC;IAC7D,mBAAmB,EAAE,CAAC,kBAAkB,EAAE,cAAc,EAAE,eAAe,CAAC;CAC7E,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACnC,MAA0B,EACJ,EAAE;IACxB,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,OAAO,CAAC,YAAY,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1E,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,KAAK,EAAE,MAA0B,EAAE,EAAE;IAC3D,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACtC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC;QAC5C,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,WAAW,EAAE,MAAM,CAAC,WAAW;KAClC,CAAC,CAAC;IAEH,IAAI,CAAC,WAAW,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,CAAC,GAAG,KAAK,EAAE,GAAG,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;AACnE,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,KAAK,EAAE,KAIpC,EAAE,EAAE;IACD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACpB,OAAO,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;IAC3D,CAAC;IAED,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,qBAAqB,CAAC;YACjC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO;SACV,CAAC,CAAC;QAEH,OAAO,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CACxB,MAA0B,EAC1B,WAAiC,EACnC,EAAE;IACA,MAAM,gBAAgB,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAE5D,OAAO,WAAW,CAAC,KAAK;SACnB,MAAM,CACH,CAAC,IAAwB,EAAE,EAAE,CACzB,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAClE;SACA,GAAG,CAAC,qBAAqB,CAAC,CAAC;AACpC,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,IAAwB,EAAE,EAAE;IACvD,IAAI,IAAI,CAAC,GAAG,KAAK,kBAAkB,EAAE,CAAC;QAClC,OAAO,uDAAuD,CAAC;IACnE,CAAC;IAED,IAAI,IAAI,CAAC,GAAG,KAAK,cAAc,EAAE,CAAC;QAC9B,OAAO,mFAAmF,CAAC;IAC/F,CAAC;IAED,IAAI,IAAI,CAAC,GAAG,KAAK,eAAe,EAAE,CAAC;QAC/B,OAAO,oGAAoG,CAAC;IAChH,CAAC;IAED,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;AACpE,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@merchbase/cli",
-    "version": "1.0.2",
+    "version": "3.0.0",
     "description": "MerchBase CLI for MerchBase Core APIs",
     "type": "module",
     "bin": {
@@ -22,22 +22,23 @@
         "README.md"
     ],
     "publishConfig": {
-        "access": "public"
+        "access": "public",
+        "provenance": true
     },
     "scripts": {
         "build": "rm -rf dist && tsc -p tsconfig.json",
-        "dev": "tsx src/index.ts",
+        "dev": "tmp=$(mktemp) && bun run --cwd ../.. http-client:build >\"$tmp\" 2>&1 || { cat \"$tmp\" >&2; rm -f \"$tmp\"; exit 1; }; rm -f \"$tmp\" && tsx src/index.ts",
         "prepack": "bun run --cwd ../.. http-client:build && bun run build",
         "start": "node dist/index.js",
         "test": "vitest run --config vitest.config.ts"
     },
     "dependencies": {
-        "@merchbase/http-client": "1.0.2",
-        "commander": "^12.1.0"
+        "@merchbase/http-client": "3.0.0",
+        "commander": "12.1.0"
     },
     "devDependencies": {
-        "@types/node": "^24.3.0",
-        "tsx": "^4.20.4"
+        "@types/node": "24.10.13",
+        "tsx": "4.21.0"
     },
     "packageManager": "bun@1.1.27"
 }