@objectstack/cli 4.0.3 → 4.0.5

package/dist/commands/plugin/validate.js

@@ -1,251 +0,0 @@
-// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.
-import { Args, Command, Flags } from '@oclif/core';
-import chalk from 'chalk';
-import path from 'path';
-import fs from 'fs';
-import crypto from 'crypto';
-import { createTimer, printHeader, printKV, printStep, printSuccess, printError } from '../../utils/format.js';
-/**
- * Validate a plugin artifact (.tgz) for structural integrity, checksum
- * correctness, digital signature, and platform compatibility.
- *
- * Architecture alignment: `npm pack --dry-run`, `helm lint`, `vsce ls`.
- */
-export default class PluginValidate extends Command {
-    static description = 'Validate a plugin artifact for integrity and compliance';
-    static args = {
-        artifact: Args.string({ description: 'Path to the artifact file', required: true }),
-    };
-    static flags = {
-        verifySignature: Flags.boolean({ description: 'Verify digital signature', default: true, allowNo: true }),
-        publicKeyPath: Flags.string({ description: 'Path to public key for signature verification' }),
-        verifyChecksums: Flags.boolean({ description: 'Verify SHA-256 checksums', default: true, allowNo: true }),
-        validateMetadata: Flags.boolean({ description: 'Validate metadata schema compliance', default: true, allowNo: true }),
-        platformVersion: Flags.string({ description: 'Target platform version for compatibility check' }),
-        json: Flags.boolean({ description: 'Output result as JSON' }),
-    };
-    async run() {
-        const { args, flags } = await this.parse(PluginValidate);
-        const timer = createTimer();
-        if (!flags.json) {
-            printHeader('Plugin Validate');
-        }
-        try {
-            const artifactPath = path.resolve(process.cwd(), args.artifact);
-            if (!fs.existsSync(artifactPath)) {
-                throw new Error(`Artifact not found: ${artifactPath}`);
-            }
-            if (!flags.json) {
-                printKV('Artifact', path.relative(process.cwd(), artifactPath));
-                printStep('Reading artifact...');
-            }
-            const artifactBuffer = fs.readFileSync(artifactPath);
-            const findings = [];
-            // 1. Verify file existence and basic structure
-            if (artifactBuffer.length === 0) {
-                findings.push({ severity: 'error', rule: 'artifact.empty', message: 'Artifact file is empty' });
-            }
-            // 2. Try to parse as JSON manifest
-            let manifest;
-            try {
-                manifest = JSON.parse(artifactBuffer.toString('utf-8'));
-                findings.push({ severity: 'info', rule: 'manifest.parsed', message: 'Manifest parsed successfully' });
-            }
-            catch {
-                findings.push({ severity: 'error', rule: 'manifest.invalid', message: 'Artifact does not contain valid JSON manifest' });
-            }
-            // 3. Validate required manifest fields
-            if (manifest) {
-                if (!flags.json)
-                    printStep('Validating manifest fields...');
-                if (!manifest.manifest && !manifest.name) {
-                    findings.push({ severity: 'warning', rule: 'manifest.name', message: 'No package name found in manifest' });
-                }
-                if (!manifest.manifest?.version && !manifest.version) {
-                    findings.push({ severity: 'warning', rule: 'manifest.version', message: 'No version found in manifest' });
-                }
-            }
-            // 4. Checksum verification
-            let checksumResult;
-            if (flags.verifyChecksums) {
-                if (!flags.json)
-                    printStep('Verifying checksums...');
-                const checksumFile = artifactPath + '.sha256';
-                if (fs.existsSync(checksumFile)) {
-                    const checksumContent = fs.readFileSync(checksumFile, 'utf-8').trim();
-                    const expectedHash = checksumContent.split(/\s+/)[0];
-                    const actualHash = crypto.createHash('sha256').update(artifactBuffer).digest('hex');
-                    if (expectedHash === actualHash) {
-                        checksumResult = { passed: true };
-                        findings.push({ severity: 'info', rule: 'checksum.sha256', message: 'SHA-256 checksum verified' });
-                    }
-                    else {
-                        checksumResult = { passed: false, mismatches: ['artifact'] };
-                        findings.push({ severity: 'error', rule: 'checksum.sha256', message: `SHA-256 mismatch: expected ${expectedHash.slice(0, 16)}..., got ${actualHash.slice(0, 16)}...` });
-                    }
-                }
-                else {
-                    findings.push({ severity: 'warning', rule: 'checksum.missing', message: 'No .sha256 checksum file found alongside artifact' });
-                }
-            }
-            // 5. Signature verification
-            let signatureResult;
-            if (flags.verifySignature) {
-                if (!flags.json)
-                    printStep('Verifying signature...');
-                const sigFile = artifactPath + '.sig';
-                if (fs.existsSync(sigFile) && flags.publicKeyPath && fs.existsSync(flags.publicKeyPath)) {
-                    try {
-                        const publicKey = fs.readFileSync(flags.publicKeyPath, 'utf-8');
-                        const signature = fs.readFileSync(sigFile, 'utf-8');
-                        const verifier = crypto.createVerify('RSA-SHA256');
-                        verifier.update(artifactBuffer);
-                        const valid = verifier.verify(publicKey, signature, 'base64');
-                        signatureResult = { passed: valid, failureReason: valid ? undefined : 'Signature does not match' };
-                        findings.push({
-                            severity: valid ? 'info' : 'error',
-                            rule: 'signature.verify',
-                            message: valid ? 'Digital signature verified' : 'Digital signature verification failed',
-                        });
-                    }
-                    catch (e) {
-                        signatureResult = { passed: false, failureReason: e.message };
-                        findings.push({ severity: 'error', rule: 'signature.verify', message: `Signature verification error: ${e.message}` });
-                    }
-                }
-                else if (fs.existsSync(sigFile) && !flags.publicKeyPath) {
-                    findings.push({ severity: 'warning', rule: 'signature.nokey', message: 'Signature file found but no --publicKeyPath provided' });
-                }
-                else if (!fs.existsSync(sigFile)) {
-                    findings.push({ severity: 'info', rule: 'signature.absent', message: 'No signature file found (unsigned artifact)' });
-                }
-            }
-            // 6. Platform compatibility check
-            let platformResult;
-            if (flags.platformVersion && manifest) {
-                if (!flags.json)
-                    printStep('Checking platform compatibility...');
-                const engine = manifest.manifest?.engine || manifest.engine;
-                const required = engine?.objectstack;
-                if (required) {
-                    // Semver range check supporting >=, >, ^, ~, and exact versions
-                    const parseSemver = (v) => {
-                        const parts = v.replace(/^v/, '').split('.').map(p => parseInt(p, 10));
-                        return { major: parts[0] || 0, minor: parts[1] || 0, patch: parts[2] || 0 };
-                    };
-                    const target = parseSemver(flags.platformVersion);
-                    let compatible = false;
-                    let matched = false;
-                    // >=X.Y.Z — greater than or equal
-                    const gteMatch = required.match(/^>=\s*([\d.]+)/);
-                    if (gteMatch) {
-                        const req = parseSemver(gteMatch[1]);
-                        compatible = (target.major > req.major) ||
-                            (target.major === req.major && target.minor > req.minor) ||
-                            (target.major === req.major && target.minor === req.minor && target.patch >= req.patch);
-                        matched = true;
-                    }
-                    // >X.Y.Z — strictly greater than
-                    if (!matched) {
-                        const gtMatch = required.match(/^>\s*([\d.]+)/);
-                        if (gtMatch) {
-                            const req = parseSemver(gtMatch[1]);
-                            compatible = (target.major > req.major) ||
-                                (target.major === req.major && target.minor > req.minor) ||
-                                (target.major === req.major && target.minor === req.minor && target.patch > req.patch);
-                            matched = true;
-                        }
-                    }
-                    // ^X.Y.Z — caret range (same major, >= minor.patch)
-                    if (!matched) {
-                        const caretMatch = required.match(/^\^\s*([\d.]+)/);
-                        if (caretMatch) {
-                            const req = parseSemver(caretMatch[1]);
-                            compatible = target.major === req.major &&
-                                ((target.minor > req.minor) ||
-                                    (target.minor === req.minor && target.patch >= req.patch));
-                            matched = true;
-                        }
-                    }
-                    // ~X.Y.Z — tilde range (same major.minor, >= patch)
-                    if (!matched) {
-                        const tildeMatch = required.match(/^~\s*([\d.]+)/);
-                        if (tildeMatch) {
-                            const req = parseSemver(tildeMatch[1]);
-                            compatible = target.major === req.major && target.minor === req.minor && target.patch >= req.patch;
-                            matched = true;
-                        }
-                    }
-                    // Exact version match
-                    if (!matched && /^\d+\.\d+\.\d+$/.test(required)) {
-                        const req = parseSemver(required);
-                        compatible = target.major === req.major && target.minor === req.minor && target.patch === req.patch;
-                        matched = true;
-                    }
-                    if (matched) {
-                        platformResult = { compatible, requiredRange: required, targetVersion: flags.platformVersion };
-                        findings.push({
-                            severity: compatible ? 'info' : 'error',
-                            rule: 'platform.compatibility',
-                            message: compatible
-                                ? `Compatible with platform v${flags.platformVersion}`
-                                : `Requires platform ${required}, but target is v${flags.platformVersion}`,
-                        });
-                    }
-                }
-                else {
-                    platformResult = { compatible: true, targetVersion: flags.platformVersion };
-                    findings.push({ severity: 'info', rule: 'platform.noreq', message: 'No platform version requirement specified — assumed compatible' });
-                }
-            }
-            // 7. Summary
-            const errors = findings.filter(f => f.severity === 'error').length;
-            const warns = findings.filter(f => f.severity === 'warning').length;
-            const infos = findings.filter(f => f.severity === 'info').length;
-            const valid = errors === 0;
-            const result = {
-                valid,
-                checksumVerification: checksumResult,
-                signatureVerification: signatureResult,
-                platformCompatibility: platformResult,
-                findings,
-                summary: { errors, warnings: warns, infos },
-            };
-            if (flags.json) {
-                console.log(JSON.stringify(result, null, 2));
-                return;
-            }
-            console.log('');
-            if (valid) {
-                printSuccess(`Validation passed ${chalk.dim(`(${timer.display()})`)}`);
-            }
-            else {
-                printError(`Validation failed ${chalk.dim(`(${timer.display()})`)}`);
-            }
-            console.log('');
-            for (const finding of findings) {
-                const icon = finding.severity === 'error' ? chalk.red('✗')
-                    : finding.severity === 'warning' ? chalk.yellow('⚠')
-                        : chalk.blue('ℹ');
-                console.log(`  ${icon} ${chalk.dim(`[${finding.rule}]`)} ${finding.message}`);
-            }
-            console.log('');
-            printKV('Errors', errors);
-            printKV('Warnings', warns);
-            printKV('Info', infos);
-            console.log('');
-            if (!valid) {
-                this.exit(1);
-            }
-        }
-        catch (error) {
-            if (flags.json) {
-                console.log(JSON.stringify({ valid: false, findings: [{ severity: 'error', rule: 'system', message: error.message }], summary: { errors: 1, warnings: 0, infos: 0 } }));
-                this.exit(1);
-            }
-            printError(error.message || String(error));
-            this.exit(1);
-        }
-    }
-}
-//# sourceMappingURL=validate.js.map

package/dist/commands/plugin/validate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../../src/commands/plugin/validate.ts"],"names":[],"mappings":"AAAA,yEAAyE;AAEzE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAA2B,MAAM,uBAAuB,CAAC;AAExI;;;;;GAKG;AACH,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,OAAO;IACjD,MAAM,CAAU,WAAW,GAAG,yDAAyD,CAAC;IAExF,MAAM,CAAU,IAAI,GAAG;QACrB,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,2BAA2B,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;KACpF,CAAC;IAEF,MAAM,CAAU,KAAK,GAAG;QACtB,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACzG,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,+CAA+C,EAAE,CAAC;QAC7F,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACzG,gBAAgB,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,qCAAqC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACrH,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,iDAAiD,EAAE,CAAC;QACjG,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,uBAAuB,EAAE,CAAC;KAC9D,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;QAE5B,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAChB,WAAW,CAAC,iBAAiB,CAAC,CAAC;QACjC,CAAC;QAED,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAEhE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,uBAAuB,YAAY,EAAE,CAAC,CAAC;YACzD,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBAChB,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;gBAChE,SAAS,CAAC,qBAAqB,CAAC,CAAC;YACnC,CAAC;YAED,MAAM,cAAc,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;YACrD,MAAM,QAAQ,GAA8E,EAAE,CAAC;YAE/F,+CAA+C;YAC/C,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAClG,CAAC;YAED,mCAAmC;YACnC,IAAI,QAA6C,CAAC;YAClD,IAAI,CAAC;gBACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;gBACxD,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CAAC;YACxG,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC,CAAC;YAC3H,CAAC;YAED,uCAAuC;YACvC,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,KAAK,CAAC,IAAI;oBAAE,SAAS,CAAC,+BAA+B,CAAC,CAAC;gBAE5D,IAAI,CAAE,QAAgB,CAAC,QAAQ,IAAI,CAAE,QAAgB,CAAC,IAAI,EAAE,CAAC;oBAC3D,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAC;gBAC9G,CAAC;gBACD,IAAI,CAAE,QAAgB,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAE,QAAgB,CAAC,OAAO,EAAE,CAAC;oBACvE,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CAAC;gBAC5G,CAAC;YACH,CAAC;YAED,2BAA2B;YAC3B,IAAI,cAAsE,CAAC;YAC3E,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;gBAC1B,IAAI,CAAC,KAAK,CAAC,IAAI;oBAAE,SAAS,CAAC,wBAAwB,CAAC,CAAC;gBACrD,MAAM,YAAY,GAAG,YAAY,GAAG,SAAS,CAAC;gBAC9C,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;oBAChC,MAAM,eAAe,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;oBACtE,MAAM,YAAY,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;oBACrD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACpF,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;wBAChC,cAAc,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;wBAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;oBACrG,CAAC;yBAAM,CAAC;wBACN,cAAc,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;wBAC7D,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,8BAA8B,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC1K,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,mDAAmD,EAAE,CAAC,CAAC;gBACjI,CAAC;YACH,CAAC;YAED,4BAA4B;YAC5B,IAAI,eAAwE,CAAC;YAC7E,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;gBAC1B,IAAI,CAAC,KAAK,CAAC,IAAI;oBAAE,SAAS,CAAC,wBAAwB,CAAC,CAAC;gBACrD,MAAM,OAAO,GAAG,YAAY,GAAG,MAAM,CAAC;gBACtC,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;oBACxF,IAAI,CAAC;wBACH,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;wBAChE,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;wBACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;wBACnD,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;wBAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;wBAC9D,eAAe,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,0BAA0B,EAAE,CAAC;wBACnG,QAAQ,CAAC,IAAI,CAAC;4BACZ,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;4BAClC,IAAI,EAAE,kBAAkB;4BACxB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,uCAAuC;yBACxF,CAAC,CAAC;oBACL,CAAC;oBAAC,OAAO,CAAM,EAAE,CAAC;wBAChB,eAAe,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;wBAC9D,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,iCAAiC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBACxH,CAAC;gBACH,CAAC;qBAAM,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;oBAC1D,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,sDAAsD,EAAE,CAAC,CAAC;gBACnI,CAAC;qBAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;oBACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC,CAAC;gBACxH,CAAC;YACH,CAAC;YAED,kCAAkC;YAClC,IAAI,cAAmG,CAAC;YACxG,IAAI,KAAK,CAAC,eAAe,IAAI,QAAQ,EAAE,CAAC;gBACtC,IAAI,CAAC,KAAK,CAAC,IAAI;oBAAE,SAAS,CAAC,oCAAoC,CAAC,CAAC;gBACjE,MAAM,MAAM,GAAI,QAAgB,CAAC,QAAQ,EAAE,MAAM,IAAK,QAAgB,CAAC,MAAM,CAAC;gBAC9E,MAAM,QAAQ,GAAG,MAAM,EAAE,WAAiC,CAAC;gBAC3D,IAAI,QAAQ,EAAE,CAAC;oBACb,gEAAgE;oBAChE,MAAM,WAAW,GAAG,CAAC,CAAS,EAAE,EAAE;wBAChC,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;wBACvE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC9E,CAAC,CAAC;oBAEF,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;oBAClD,IAAI,UAAU,GAAG,KAAK,CAAC;oBACvB,IAAI,OAAO,GAAG,KAAK,CAAC;oBAEpB,kCAAkC;oBAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;oBAClD,IAAI,QAAQ,EAAE,CAAC;wBACb,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;wBACrC,UAAU,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;4BACrC,CAAC,MAAM,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;4BACxD,CAAC,MAAM,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;wBAC1F,OAAO,GAAG,IAAI,CAAC;oBACjB,CAAC;oBAED,iCAAiC;oBACjC,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;wBAChD,IAAI,OAAO,EAAE,CAAC;4BACZ,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;4BACpC,UAAU,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;gCACrC,CAAC,MAAM,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;gCACxD,CAAC,MAAM,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;4BACzF,OAAO,GAAG,IAAI,CAAC;wBACjB,CAAC;oBACH,CAAC;oBAED,oDAAoD;oBACpD,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;wBACpD,IAAI,UAAU,EAAE,CAAC;4BACf,MAAM,GAAG,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;4BACvC,UAAU,GAAG,MAAM,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK;gCACrC,CAAC,CAAC,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;oCACzB,CAAC,MAAM,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;4BAC/D,OAAO,GAAG,IAAI,CAAC;wBACjB,CAAC;oBACH,CAAC;oBAED,oDAAoD;oBACpD,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;wBACnD,IAAI,UAAU,EAAE,CAAC;4BACf,MAAM,GAAG,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;4BACvC,UAAU,GAAG,MAAM,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC;4BACnG,OAAO,GAAG,IAAI,CAAC;wBACjB,CAAC;oBACH,CAAC;oBAED,sBAAsB;oBACtB,IAAI,CAAC,OAAO,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACjD,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;wBAClC,UAAU,GAAG,MAAM,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,CAAC;wBACpG,OAAO,GAAG,IAAI,CAAC;oBACjB,CAAC;oBAED,IAAI,OAAO,EAAE,CAAC;wBACZ,cAAc,GAAG,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC;wBAC/F,QAAQ,CAAC,IAAI,CAAC;4BACZ,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;4BACvC,IAAI,EAAE,wBAAwB;4BAC9B,OAAO,EAAE,UAAU;gCACjB,CAAC,CAAC,6BAA6B,KAAK,CAAC,eAAe,EAAE;gCACtD,CAAC,CAAC,qBAAqB,QAAQ,oBAAoB,KAAK,CAAC,eAAe,EAAE;yBAC7E,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,cAAc,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC;oBAC5E,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,gEAAgE,EAAE,CAAC,CAAC;gBACzI,CAAC;YACH,CAAC;YAED,aAAa;YACb,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;YACnE,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;YACpE,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;YACjE,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,CAAC;YAE3B,MAAM,MAAM,GAAG;gBACb,KAAK;gBACL,oBAAoB,EAAE,cAAc;gBACpC,qBAAqB,EAAE,eAAe;gBACtC,qBAAqB,EAAE,cAAc;gBACrC,QAAQ;gBACR,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE;aAC5C,CAAC;YAEF,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC7C,OAAO;YACT,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,IAAI,KAAK,EAAE,CAAC;gBACV,YAAY,CAAC,qBAAqB,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACzE,CAAC;iBAAM,CAAC;gBACN,UAAU,CAAC,qBAAqB,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACvE,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;oBACxD,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC;wBAClD,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAChF,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC1B,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAC3B,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAEhB,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;gBACxK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACf,CAAC;YACD,UAAU,CAAC,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC;IACH,CAAC"}

package/src/bin.ts

@@ -1,13 +0,0 @@
-// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.
-
-/**
- * ObjectStack CLI — oclif-based entry point.
- *
- * All commands are auto-discovered from `src/commands/` by oclif.
- * Plugins extend the CLI via oclif's built-in plugin system
- * (configured in package.json under "oclif.plugins").
- *
- * Run `os --help` for available commands.
- */
-
-export { execute } from '@oclif/core';

package/src/commands/auth/login.ts

@@ -1,188 +0,0 @@
-// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.
-
-import { Command, Flags } from '@oclif/core';
-import { printHeader, printSuccess, printError, printKV } from '../../utils/format.js';
-import { writeAuthConfig } from '../../utils/auth-config.js';
-import { ObjectStackClient } from '@objectstack/client';
-import * as readline from 'node:readline/promises';
-import { stdin as input, stdout as output } from 'node:process';
-
-/**
- * Prompt for a password with masked input (shows * per character).
- * Falls back to plain readline.question() in non-TTY environments.
- */
-async function promptPassword(promptText: string): Promise<string> {
-  if (!process.stdin.isTTY) {
-    const rl = readline.createInterface({ input, output });
-    const answer = await rl.question(promptText);
-    rl.close();
-    return answer;
-  }
-
-  return new Promise((resolve) => {
-    const chars: string[] = [];
-    process.stdout.write(promptText);
-    process.stdin.setRawMode(true);
-    process.stdin.resume();
-    process.stdin.setEncoding('utf8');
-
-    const cleanup = () => {
-      process.stdin.setRawMode(false);
-      process.stdin.pause();
-      process.stdin.removeListener('data', handler);
-      process.stdout.write('\n');
-    };
-
-    const handler = (char: string) => {
-      switch (char) {
-        case '\u0003': // Ctrl+C
-          cleanup();
-          process.kill(process.pid, 'SIGINT');
-          break;
-        case '\r':
-        case '\n': // Enter
-          cleanup();
-          resolve(chars.join(''));
-          break;
-        case '\u007f': // Backspace
-          if (chars.length > 0) {
-            chars.pop();
-            process.stdout.clearLine(0);
-            process.stdout.cursorTo(0);
-            process.stdout.write(promptText + '*'.repeat(chars.length));
-          }
-          break;
-        default:
-          chars.push(char);
-          process.stdout.write('*');
-          break;
-      }
-    };
-
-    process.stdin.on('data', handler);
-  });
-}
-
-export default class AuthLogin extends Command {
-  static override description = 'Authenticate and store session credentials';
-
-  static override examples = [
-    '$ os auth login',
-    '$ os auth login --url https://api.example.com',
-    '$ os auth login --email user@example.com --password mypassword',
-  ];
-
-  static override flags = {
-    url: Flags.string({
-      char: 'u',
-      description: 'Server URL',
-      default: 'http://localhost:3000',
-      env: 'OBJECTSTACK_URL',
-    }),
-    email: Flags.string({
-      char: 'e',
-      description: 'Email address',
-    }),
-    password: Flags.string({
-      char: 'p',
-      description: 'Password',
-    }),
-    json: Flags.boolean({
-      description: 'Output as JSON',
-    }),
-  };
-
-  async run(): Promise<void> {
-    const { flags } = await this.parse(AuthLogin);
-
-    try {
-      if (!flags.json) {
-        printHeader('ObjectStack Login');
-        printKV('Server', flags.url);
-        console.log('');
-      }
-
-      // Prompt for credentials if not provided
-      let email = flags.email;
-      let password = flags.password;
-
-      if (!email || !password) {
-        const rl = readline.createInterface({ input, output });
-
-        if (!email) {
-          email = await rl.question('Email: ');
-        }
-
-        rl.close();
-
-        if (!password) {
-          password = await promptPassword('Password: ');
-        }
-      }
-
-      if (!email || !password) {
-        throw new Error('Email and password are required');
-      }
-
-      // Create client and authenticate
-      const client = new ObjectStackClient({
-        baseUrl: flags.url,
-      });
-
-      const response = await client.auth.login({
-        type: 'email',
-        email,
-        password,
-      });
-
-      // Check if login was successful
-      if (!response.data?.token && !response.data?.user) {
-        throw new Error('Login failed: Invalid response from server');
-      }
-
-      // Extract token - it might be in different locations depending on the auth system
-      const token = response.data?.token || (response as any).token;
-      const user = response.data?.user;
-
-      if (!token) {
-        throw new Error('Login failed: No token received from server');
-      }
-
-      // Store credentials
-      await writeAuthConfig({
-        url: flags.url,
-        token,
-        email: user?.email || email,
-        userId: user?.id,
-        createdAt: new Date().toISOString(),
-      });
-
-      if (flags.json) {
-        console.log(JSON.stringify({
-          success: true,
-          email: user?.email || email,
-          userId: user?.id,
-        }, null, 2));
-      } else {
-        printSuccess('Authentication successful');
-        printKV('Email', user?.email || email);
-        if (user?.id) {
-          printKV('User ID', user.id);
-        }
-        console.log('');
-        console.log('  Credentials stored in ~/.objectstack/credentials.json');
-        console.log('');
-      }
-    } catch (error: any) {
-      if (flags.json) {
-        console.log(JSON.stringify({
-          success: false,
-          error: error.message,
-        }, null, 2));
-        this.exit(1);
-      }
-      printError(error.message || String(error));
-      this.exit(1);
-    }
-  }
-}

package/src/commands/auth/logout.ts

@@ -1,51 +0,0 @@
-// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.
-
-import { Command, Flags } from '@oclif/core';
-import { printHeader, printSuccess, printError } from '../../utils/format.js';
-import { deleteAuthConfig } from '../../utils/auth-config.js';
-
-export default class AuthLogout extends Command {
-  static override description = 'Clear stored authentication credentials';
-
-  static override examples = [
-    '$ os auth logout',
-  ];
-
-  static override flags = {
-    json: Flags.boolean({
-      description: 'Output as JSON',
-    }),
-  };
-
-  async run(): Promise<void> {
-    const { flags } = await this.parse(AuthLogout);
-
-    try {
-      if (!flags.json) {
-        printHeader('ObjectStack Logout');
-      }
-
-      await deleteAuthConfig();
-
-      if (flags.json) {
-        console.log(JSON.stringify({
-          success: true,
-          message: 'Credentials cleared',
-        }, null, 2));
-      } else {
-        printSuccess('Credentials cleared');
-        console.log('');
-      }
-    } catch (error: any) {
-      if (flags.json) {
-        console.log(JSON.stringify({
-          success: false,
-          error: error.message,
-        }, null, 2));
-        this.exit(1);
-      }
-      printError(error.message || String(error));
-      this.exit(1);
-    }
-  }
-}

package/src/commands/auth/whoami.ts

@@ -1,85 +0,0 @@
-// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.
-
-import { Command, Flags } from '@oclif/core';
-import { printHeader, printError, printKV } from '../../utils/format.js';
-import { createApiClient, requireAuth } from '../../utils/api-client.js';
-import { formatOutput } from '../../utils/output-formatter.js';
-
-export default class AuthWhoami extends Command {
-  static override description = 'Show current session information';
-
-  static override examples = [
-    '$ os auth whoami',
-    '$ os auth whoami --format json',
-    '$ os auth whoami --url https://api.example.com --token <token>',
-  ];
-
-  static override flags = {
-    url: Flags.string({
-      char: 'u',
-      description: 'Server URL',
-      env: 'OBJECTSTACK_URL',
-    }),
-    token: Flags.string({
-      char: 't',
-      description: 'Authentication token',
-      env: 'OBJECTSTACK_TOKEN',
-    }),
-    format: Flags.string({
-      char: 'f',
-      description: 'Output format',
-      options: ['json', 'table', 'yaml'],
-      default: 'table',
-    }),
-  };
-
-  async run(): Promise<void> {
-    const { flags } = await this.parse(AuthWhoami);
-
-    try {
-      const { client, token } = await createApiClient({
-        url: flags.url,
-        token: flags.token,
-      });
-
-      requireAuth(token);
-
-      // Check if we have a token
-      // Get current session info
-      const response = await client.auth.me();
-
-      const sessionData = response.data || response;
-
-      if (flags.format === 'json') {
-        formatOutput(sessionData, 'json');
-      } else if (flags.format === 'yaml') {
-        formatOutput(sessionData, 'yaml');
-      } else {
-        printHeader('Current Session');
-
-        if (sessionData.user) {
-          printKV('User ID', sessionData.user.id || '-');
-          printKV('Email', sessionData.user.email || '-');
-          printKV('Name', sessionData.user.name || '-');
-        }
-
-        if (sessionData.session) {
-          printKV('Session ID', sessionData.session.id || '-');
-          printKV('Expires At', sessionData.session.expiresAt || '-');
-        }
-
-        console.log('');
-      }
-    } catch (error: any) {
-      if (flags.format === 'json') {
-        console.log(JSON.stringify({
-          success: false,
-          error: error.message,
-        }, null, 2));
-        this.exit(1);
-      }
-      printError(error.message || String(error));
-      this.exit(1);
-    }
-  }
-}