@mod-computer/cli 0.2.3 → 0.2.5

package/dist/commands/auth.js

@@ -1,259 +0,0 @@
-// glassware[type="implementation", id="impl-cli-auth-command--649dd0cd", specifications="specification-spec-auth-login--c8f45e62,specification-spec-auth-status--36efb6a8,specification-spec-auth-logout--79cb4081"]
-import { readConfig, writeConfig } from '../lib/storage.js';
-import { openBrowser } from '../lib/browser.js';
-import { startAuthServer } from '../lib/auth-server.js';
-import { createModUser } from '@mod/mod-core';
-import { addUserToSharePolicy } from '../daemon/share-policy.js';
-// Auth worker URL - configurable via environment variable
-// Uses the Cloudflare Worker for OAuth
-const AUTH_WORKER_URL = process.env.MOD_AUTH_URL || 'https://mod-auth-worker.mod-workers.workers.dev';
-export async function authCommand(args, repo) {
-    const [subcommand, ...rest] = args;
-    switch (subcommand) {
-        case 'login':
-            await handleLogin(rest, repo);
-            break;
-        case 'logout':
-            await handleLogout();
-            break;
-        case 'status':
-            await handleStatus();
-            break;
-        default:
-            if (!subcommand) {
-                await handleStatus();
-            }
-            else {
-                console.error('Usage: mod auth <login|logout|status>');
-                console.error('Available commands:');
-                console.error('  login [--dev]  Sign in with Google OAuth (or use --dev for local testing)');
-                console.error('  logout         Sign out and clear credentials');
-                console.error('  status         Show current authentication state');
-                process.exit(1);
-            }
-    }
-    process.exit(0);
-}
-// glassware[type="implementation", id="impl-handle-login--58bdb73b", specifications="specification-spec-auth-login--c8f45e62,specification-spec-open-browser--397b6a28,specification-spec-manual-url--b37b2760,specification-spec-validate-token--d3856b2d,specification-spec-success-message--b3bb1875,specification-spec-create-user-doc--282489ae,specification-spec-register-user-doc--e611f1db"]
-async function handleLogin(args = [], repo) {
-    // Check for --dev flag
-    const isDev = args.includes('--dev');
-    // Check if already authenticated
-    const config = readConfig();
-    if (config.auth) {
-        console.log(`Already signed in as ${config.auth.email}`);
-        console.log('');
-        console.log('Run `mod auth logout` to sign out first.');
-        return;
-    }
-    // Dev mode: create local user without OAuth
-    if (isDev) {
-        await handleDevLogin(repo);
-        return;
-    }
-    // Start localhost server to receive callback
-    const { port, result, close } = await startAuthServer();
-    // Build auth URL with callback port
-    const authUrl = `${AUTH_WORKER_URL}/auth/cli?port=${port}`;
-    console.log('Opening browser to sign in...');
-    // Try to open browser
-    const opened = await openBrowser(authUrl);
-    if (!opened) {
-        console.log('');
-        console.log('Could not open browser. Please visit:');
-        console.log(authUrl);
-        console.log('');
-    }
-    console.log('Waiting for authentication...');
-    try {
-        // Wait for auth callback
-        const authResult = await result;
-        // Validate token with server and get existing userDocId
-        let userDocId;
-        let authUserId;
-        try {
-            const authProfile = await validateAndGetAuthProfile(authResult.googleIdToken);
-            userDocId = authProfile.userDocId;
-            authUserId = authProfile.userId;
-        }
-        catch (error) {
-            // If validation fails, continue - we'll create user doc below
-        }
-        // If no userDocId (new user), create user document and register with server
-        if (!userDocId) {
-            try {
-                const modUser = createModUser(repo);
-                const userDoc = await modUser.findOrCreate({
-                    email: authResult.email,
-                    name: authResult.name,
-                    googleId: authResult.googleId,
-                    avatar: null,
-                });
-                userDocId = userDoc.id;
-                // Register the new userDocId with auth worker
-                await registerUserDoc(authResult.googleIdToken, userDocId);
-            }
-            catch (error) {
-                console.warn('Could not create/register user document:', error);
-                // Continue without userDocId - it can be set up later
-            }
-        }
-        // Add user doc to share policy if available
-        if (userDocId) {
-            addUserToSharePolicy(userDocId);
-        }
-        // Store credentials in config
-        const updatedConfig = readConfig();
-        updatedConfig.auth = {
-            googleIdToken: authResult.googleIdToken,
-            userId: authUserId || '',
-            googleId: authResult.googleId,
-            email: authResult.email,
-            name: authResult.name,
-            userDocId: userDocId || '',
-        };
-        writeConfig(updatedConfig);
-        console.log('');
-        console.log(`Signed in as ${authResult.email}`);
-    }
-    catch (error) {
-        if (error instanceof Error) {
-            if (error.message.includes('timed out')) {
-                console.error('');
-                console.error('Authentication timed out. Please try again.');
-            }
-            else if (error.message.includes('cancelled')) {
-                console.error('');
-                console.error('Authentication cancelled.');
-            }
-            else {
-                console.error('');
-                console.error(`Authentication failed: ${error.message}`);
-            }
-        }
-        process.exit(1);
-    }
-}
-// glassware[type="implementation", id="impl-handle-logout--1f8e80ea", specifications="specification-spec-auth-logout--79cb4081,specification-spec-logout-message--2785cc24"]
-async function handleLogout() {
-    const config = readConfig();
-    if (!config.auth) {
-        console.log('Not signed in.');
-        return;
-    }
-    const email = config.auth.email;
-    // Clear auth from config
-    config.auth = null;
-    writeConfig(config);
-    console.log('Signed out successfully');
-    console.log(`Removed credentials for ${email}`);
-}
-// glassware[type="implementation", id="impl-handle-status--b14ce725", specifications="specification-spec-auth-status--36efb6a8,specification-spec-status-output--b8935802"]
-async function handleStatus() {
-    const config = readConfig();
-    if (!config.auth) {
-        console.log('Not signed in.');
-        console.log('');
-        console.log('Sign in to sync with collaborators: mod auth login');
-        return;
-    }
-    console.log(`Signed in as ${config.auth.email}`);
-    if (config.auth.name && config.auth.name !== config.auth.email) {
-        console.log(`Name: ${config.auth.name}`);
-    }
-    console.log('Token expires: never');
-    // Check if token is still valid (optional)
-    try {
-        await validateAndGetAuthProfile(config.auth.googleIdToken);
-        console.log('Token status: valid');
-    }
-    catch (error) {
-        console.log('Token status: could not verify (server unavailable)');
-    }
-}
-// glassware[type="implementation", id="impl-validate-token--562d976d", specifications="specification-spec-validate-token--d3856b2d,specification-spec-load-user-doc--c7a835b0,specification-spec-auth-user-id--de3afa93"]
-/**
- * Validate token with server and get auth profile.
- * Returns existing userDocId for returning users, or empty string for new users.
- */
-async function validateAndGetAuthProfile(token) {
-    const response = await fetch(`${AUTH_WORKER_URL}/auth/me`, {
-        headers: {
-            Authorization: `Bearer ${token}`,
-        },
-    });
-    if (!response.ok) {
-        throw new Error('Token validation failed');
-    }
-    const data = (await response.json());
-    return {
-        userId: data.id || '',
-        userDocId: data.userDocId || '',
-    };
-}
-export async function fetchAuthProfile(token) {
-    return validateAndGetAuthProfile(token);
-}
-// glassware[type="implementation", id="impl-register-user-doc--c699a7d3", specifications="specification-spec-register-user-doc--e611f1db"]
-/**
- * Register a new userDocId with the auth worker.
- * Called for new users after creating their Automerge user document.
- */
-async function registerUserDoc(token, userDocId) {
-    const response = await fetch(`${AUTH_WORKER_URL}/auth/register-doc`, {
-        method: 'POST',
-        headers: {
-            'Authorization': `Bearer ${token}`,
-            'Content-Type': 'application/json',
-        },
-        body: JSON.stringify({ userDocId }),
-    });
-    if (!response.ok) {
-        throw new Error(`Failed to register user doc: ${response.status}`);
-    }
-}
-// glassware[type="implementation", id="impl-dev-login--d3f76c9b", specifications="specification-spec-create-user-doc--282489ae,specification-spec-token-storage--26199fe8"]
-/**
- * Handle dev login - creates a local user document for testing without OAuth.
- * This allows testing the full flow (auth → workspace creation → syncing) on localhost.
- * Uses a shared dev@localhost user that both CLI and web app can access.
- */
-async function handleDevLogin(repo) {
-    console.log('Setting up development authentication...');
-    const modUser = createModUser(repo);
-    try {
-        // Use findOrCreate to get shared dev user across CLI and web app
-        console.log('Looking for dev@localhost user...');
-        const userDoc = await modUser.findOrCreate({
-            email: 'dev@localhost',
-            name: 'Dev User',
-            googleId: 'dev-google-id',
-            avatar: null,
-        });
-        console.log('Using dev user document:', userDoc.id);
-        // Add user doc to share policy so it can sync
-        addUserToSharePolicy(userDoc.id);
-        // Store dev credentials in config
-        const config = readConfig();
-        config.auth = {
-            googleIdToken: 'dev-token',
-            userId: 'dev-user',
-            googleId: 'dev-google-id',
-            email: 'dev@localhost',
-            name: 'Dev User',
-            userDocId: userDoc.id,
-        };
-        writeConfig(config);
-        console.log('');
-        console.log('✓ Signed in as dev@localhost');
-        console.log(`  User Document ID: ${userDoc.id}`);
-        console.log('');
-        console.log('Note: This is development mode for local testing.');
-        console.log('Workspaces will sync via ws://localhost:3030');
-        console.log('The web app will use the same dev@localhost user.');
-    }
-    catch (error) {
-        console.error('Failed to setup dev user:', error.message);
-        process.exit(1);
-    }
-}