@ontologie/cli 0.1.0-preview.1

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAQH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AA8DD,wBAAgB,aAAa,CAAC,KAAK,EAAE,cAAc,GAAG,eAAe,CAyCpE;AAED,gDAAgD;AAChD,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAG9C;AAMD,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAKD,2DAA2D;AAC3D,wBAAgB,cAAc,IAAI,UAAU,CAO3C;AAED,2CAA2C;AAC3C,wBAAgB,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,CAGvD;AAED,sEAAsE;AACtE,wBAAgB,gBAAgB,IAAI,OAAO,GAAG,IAAI,CAGjD;AAED,wCAAwC;AACxC,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAOhD"}

package/dist/config.js

@@ -0,0 +1,127 @@
+/**
+ * Config resolution chain -- flag > ONTOLOGIE_* env > DF_* env (deprecated) > ~/.ontologierc YAML > ~/.dfrc (deprecated) > error
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import * as os from 'node:os';
+import { parse as parseYaml } from 'yaml';
+import { addWarning, DEPRECATION_DFRC, DEPRECATION_LEGACY_ENV } from './output/warnings.js';
+/** Warn once per session about deprecated env/config */
+const warned = new Set();
+function warnOnce(key, msg) {
+    if (warned.has(key))
+        return;
+    warned.add(key);
+    process.stderr.write(`\x1b[33m\u26a0 ${msg}\x1b[0m\n`);
+    // Structured warning for JSON consumers
+    if (key === 'dfrc') {
+        addWarning(DEPRECATION_DFRC);
+    }
+    else {
+        // key is the deprecated env var name (e.g., 'DF_API_KEY')
+        const replacement = msg.match(/Use (\S+)/)?.[1] ?? key;
+        addWarning(DEPRECATION_LEGACY_ENV(key, replacement));
+    }
+}
+function envWithFallback(primary, deprecated) {
+    const val = process.env[primary];
+    if (val)
+        return val;
+    const fallback = process.env[deprecated];
+    if (fallback) {
+        warnOnce(deprecated, `${deprecated} is deprecated. Use ${primary} instead.`);
+        return fallback;
+    }
+    return undefined;
+}
+function loadRc() {
+    const primaryPath = path.join(os.homedir(), '.ontologierc');
+    if (fs.existsSync(primaryPath)) {
+        try {
+            const content = fs.readFileSync(primaryPath, 'utf-8');
+            return parseYaml(content) || {};
+        }
+        catch {
+            return {};
+        }
+    }
+    const legacyPath = path.join(os.homedir(), '.dfrc');
+    if (fs.existsSync(legacyPath)) {
+        warnOnce('dfrc', '~/.dfrc is deprecated. Rename to ~/.ontologierc');
+        try {
+            const content = fs.readFileSync(legacyPath, 'utf-8');
+            return parseYaml(content) || {};
+        }
+        catch {
+            return {};
+        }
+    }
+    return {};
+}
+export function resolveConfig(flags) {
+    const profileName = flags.profile
+        || envWithFallback('ONTOLOGIE_PROFILE', 'DF_PROFILE')
+        || 'default';
+    const profiles = loadRc();
+    const profile = profiles[profileName] || {};
+    const apiUrl = flags.apiUrl
+        || envWithFallback('ONTOLOGIE_API_URL', 'DF_API_URL')
+        || profile.api_url
+        || 'https://api.dataforge.io';
+    const apiKey = flags.apiKey
+        || envWithFallback('ONTOLOGIE_API_KEY', 'DF_API_KEY')
+        || profile.api_key;
+    const workspaceId = flags.workspace
+        || envWithFallback('ONTOLOGIE_WORKSPACE_ID', 'DF_WORKSPACE_ID')
+        || profile.workspace_id;
+    const spaceId = flags.space
+        || flags.espace // deprecated compat
+        || envWithFallback('ONTOLOGIE_SPACE_ID', 'DF_ESPACE_ID')
+        || profile.space_id
+        || profile.espace_id;
+    if (!apiKey) {
+        throw Object.assign(new Error('No API key found. Set --api-key, ONTOLOGIE_API_KEY, or add to ~/.ontologierc'), { code: 'AUTHENTICATION_ERROR', statusCode: 401 });
+    }
+    if (!workspaceId) {
+        throw Object.assign(new Error('No workspace ID found. Set --workspace, ONTOLOGIE_WORKSPACE_ID, or add to ~/.ontologierc'), { code: 'AUTHENTICATION_ERROR', statusCode: 401 });
+    }
+    return { apiUrl, apiKey, workspaceId, spaceId, profile: profileName };
+}
+/** Mask an API key for display: df_abc...xyz */
+export function maskApiKey(key) {
+    if (key.length <= 10)
+        return key.slice(0, 3) + '...';
+    return key.slice(0, 6) + '...' + key.slice(-4);
+}
+const CONFIG_DIR = path.join(os.homedir(), '.dataforge');
+const CONFIG_PATH = path.join(CONFIG_DIR, 'config.json');
+/** Load the JSON config file (~/.dataforge/config.json) */
+export function loadConfigFile() {
+    try {
+        const content = fs.readFileSync(CONFIG_PATH, 'utf-8');
+        return JSON.parse(content);
+    }
+    catch {
+        return { activeProfile: 'default', profiles: {} };
+    }
+}
+/** Persist the JSON config file to disk */
+export function saveConfigFile(config) {
+    fs.mkdirSync(CONFIG_DIR, { recursive: true });
+    fs.writeFileSync(CONFIG_PATH, JSON.stringify(config, null, 2));
+}
+/** Return the currently active profile, or null if none configured */
+export function getActiveProfile() {
+    const config = loadConfigFile();
+    return config.profiles[config.activeProfile] ?? null;
+}
+/** Switch the active profile by name */
+export function switchProfile(name) {
+    const config = loadConfigFile();
+    if (!config.profiles[name]) {
+        throw new Error(`Profile "${name}" not found. Available: ${Object.keys(config.profiles).join(', ') || '(none)'}`);
+    }
+    config.activeProfile = name;
+    saveConfigFile(config);
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAiC5F,wDAAwD;AACxD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;AACjC,SAAS,QAAQ,CAAC,GAAW,EAAE,GAAW;IACxC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO;IAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,GAAG,WAAW,CAAC,CAAC;IACvD,wCAAwC;IACxC,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACnB,UAAU,CAAC,gBAAgB,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,0DAA0D;QAC1D,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;QACvD,UAAU,CAAC,sBAAsB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,UAAkB;IAC1D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,UAAU,EAAE,GAAG,UAAU,uBAAuB,OAAO,WAAW,CAAC,CAAC;QAC7E,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,MAAM;IACb,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;IAC5D,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YACtD,OAAO,SAAS,CAAC,OAAO,CAA8B,IAAI,EAAE,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;IACpD,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,QAAQ,CAAC,MAAM,EAAE,iDAAiD,CAAC,CAAC;QACpE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACrD,OAAO,SAAS,CAAC,OAAO,CAA8B,IAAI,EAAE,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAqB;IACjD,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO;WAC5B,eAAe,CAAC,mBAAmB,EAAE,YAAY,CAAC;WAClD,SAAS,CAAC;IACf,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IAE5C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM;WACtB,eAAe,CAAC,mBAAmB,EAAE,YAAY,CAAC;WAClD,OAAO,CAAC,OAAO;WACf,0BAA0B,CAAC;IAEhC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM;WACtB,eAAe,CAAC,mBAAmB,EAAE,YAAY,CAAC;WAClD,OAAO,CAAC,OAAO,CAAC;IAErB,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS;WAC9B,eAAe,CAAC,wBAAwB,EAAE,iBAAiB,CAAC;WAC5D,OAAO,CAAC,YAAY,CAAC;IAE1B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK;WACtB,KAAK,CAAC,MAAM,CAAE,oBAAoB;WAClC,eAAe,CAAC,oBAAoB,EAAE,cAAc,CAAC;WACrD,OAAO,CAAC,QAAQ;WAChB,OAAO,CAAC,SAAS,CAAC;IAEvB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CAAC,8EAA8E,CAAC,EACzF,EAAE,IAAI,EAAE,sBAAsB,EAAE,UAAU,EAAE,GAAG,EAAE,CAClD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CAAC,0FAA0F,CAAC,EACrG,EAAE,IAAI,EAAE,sBAAsB,EAAE,UAAU,EAAE,GAAG,EAAE,CAClD,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AACxE,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;IACrD,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAmBD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;AACzD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;AAEzD,2DAA2D;AAC3D,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACpD,CAAC;AACH,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,gBAAgB;IAC9B,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC;AACvD,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,2BAA2B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC;IACpH,CAAC;IACD,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;IAC5B,cAAc,CAAC,MAAM,CAAC,CAAC;AACzB,CAAC"}

package/dist/credentials.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Encrypted credentials file — AES-256-GCM with PBKDF2 key derivation.
+ * File: ~/.ontologie/credentials.enc
+ * Pure Node.js crypto — zero native dependencies.
+ */
+export declare function isEncryptedFilePresent(): boolean;
+export declare function encryptedFileGet(profile: string, password: string): string | null;
+export declare function encryptedFileSet(profile: string, apiKey: string, password: string): void;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAiDH,wBAAgB,sBAAsB,IAAI,OAAO,CAEhD;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUjF;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAyBxF"}

package/dist/credentials.js

@@ -0,0 +1,79 @@
+/**
+ * Encrypted credentials file — AES-256-GCM with PBKDF2 key derivation.
+ * File: ~/.ontologie/credentials.enc
+ * Pure Node.js crypto — zero native dependencies.
+ */
+import * as crypto from 'node:crypto';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import * as os from 'node:os';
+const CRED_FILE = path.join(os.homedir(), '.ontologie', 'credentials.enc');
+const ALGORITHM = 'aes-256-gcm';
+const PBKDF2_ITERATIONS = 100_000;
+const KEY_LENGTH = 32;
+const IV_LENGTH = 16;
+const SALT_LENGTH = 32;
+const AUTH_TAG_LENGTH = 16;
+function deriveKey(password, salt) {
+    return crypto.pbkdf2Sync(password, salt, PBKDF2_ITERATIONS, KEY_LENGTH, 'sha256');
+}
+function encrypt(data, password) {
+    const salt = crypto.randomBytes(SALT_LENGTH);
+    const iv = crypto.randomBytes(IV_LENGTH);
+    const key = deriveKey(password, salt);
+    const cipher = crypto.createCipheriv(ALGORITHM, key, iv);
+    const encrypted = Buffer.concat([cipher.update(data, 'utf-8'), cipher.final()]);
+    const authTag = cipher.getAuthTag();
+    // Format: salt (32) + iv (16) + authTag (16) + encrypted (rest)
+    return Buffer.concat([salt, iv, authTag, encrypted]);
+}
+function decrypt(buffer, password) {
+    const salt = buffer.subarray(0, SALT_LENGTH);
+    const iv = buffer.subarray(SALT_LENGTH, SALT_LENGTH + IV_LENGTH);
+    const authTag = buffer.subarray(SALT_LENGTH + IV_LENGTH, SALT_LENGTH + IV_LENGTH + AUTH_TAG_LENGTH);
+    const encrypted = buffer.subarray(SALT_LENGTH + IV_LENGTH + AUTH_TAG_LENGTH);
+    const key = deriveKey(password, salt);
+    const decipher = crypto.createDecipheriv(ALGORITHM, key, iv);
+    decipher.setAuthTag(authTag);
+    return Buffer.concat([decipher.update(encrypted), decipher.final()]).toString('utf-8');
+}
+export function isEncryptedFilePresent() {
+    return fs.existsSync(CRED_FILE);
+}
+export function encryptedFileGet(profile, password) {
+    if (!fs.existsSync(CRED_FILE))
+        return null;
+    try {
+        const raw = fs.readFileSync(CRED_FILE);
+        const json = decrypt(raw, password);
+        const store = JSON.parse(json);
+        return store.profiles[profile]?.api_key || null;
+    }
+    catch {
+        return null;
+    }
+}
+export function encryptedFileSet(profile, apiKey, password) {
+    let store = { profiles: {} };
+    // Load existing if present
+    if (fs.existsSync(CRED_FILE)) {
+        try {
+            const raw = fs.readFileSync(CRED_FILE);
+            const json = decrypt(raw, password);
+            store = JSON.parse(json);
+        }
+        catch {
+            // Wrong password or corrupted — start fresh
+            store = { profiles: {} };
+        }
+    }
+    store.profiles[profile] = { api_key: apiKey };
+    const dir = path.dirname(CRED_FILE);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    }
+    const encrypted = encrypt(JSON.stringify(store), password);
+    fs.writeFileSync(CRED_FILE, encrypted);
+    fs.chmodSync(CRED_FILE, 0o600);
+}
+//# sourceMappingURL=credentials.js.map

package/dist/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC;AAC3E,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAClC,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,eAAe,GAAG,EAAE,CAAC;AAM3B,SAAS,SAAS,CAAC,QAAgB,EAAE,IAAY;IAC/C,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,QAAgB;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAChF,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAEpC,gEAAgE;IAChE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,OAAO,CAAC,MAAc,EAAE,QAAgB;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,GAAG,SAAS,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,GAAG,SAAS,EAAE,WAAW,GAAG,SAAS,GAAG,eAAe,CAAC,CAAC;IACpG,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,GAAG,SAAS,GAAG,eAAe,CAAC,CAAC;IAE7E,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC7D,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAE7B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,QAAgB;IAChE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACpC,MAAM,KAAK,GAAoB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,MAAc,EAAE,QAAgB;IAChF,IAAI,KAAK,GAAoB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAE9C,2BAA2B;IAC3B,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YACvC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACpC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,4CAA4C;YAC5C,KAAK,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAE9C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC3D,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACvC,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC"}

package/dist/keychain.d.ts

@@ -0,0 +1,9 @@
+/**
+ * OS Keychain integration — macOS Keychain, Windows Credential Manager, Linux libsecret.
+ * Uses keytar (optional dependency) — gracefully degrades if unavailable.
+ */
+export declare function isKeychainAvailable(): Promise<boolean>;
+export declare function keychainGet(profile: string): Promise<string | null>;
+export declare function keychainSet(profile: string, key: string): Promise<void>;
+export declare function keychainDelete(profile: string): Promise<boolean>;
+//# sourceMappingURL=keychain.d.ts.map

package/dist/keychain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain.d.ts","sourceRoot":"","sources":["../src/keychain.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAwBH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC,CAE5D;AAED,wBAAsB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQzE;AAED,wBAAsB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAI7E;AAED,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQtE"}

package/dist/keychain.js

@@ -0,0 +1,51 @@
+/**
+ * OS Keychain integration — macOS Keychain, Windows Credential Manager, Linux libsecret.
+ * Uses keytar (optional dependency) — gracefully degrades if unavailable.
+ */
+const SERVICE_NAME = 'ontologie-cli';
+let _keytar;
+async function getKeytar() {
+    if (_keytar !== undefined)
+        return _keytar;
+    try {
+        const dynamicImport = new Function('specifier', 'return import(specifier)');
+        _keytar = await dynamicImport('keytar');
+        return _keytar;
+    }
+    catch {
+        _keytar = null;
+        return null;
+    }
+}
+export async function isKeychainAvailable() {
+    return (await getKeytar()) !== null;
+}
+export async function keychainGet(profile) {
+    const keytar = await getKeytar();
+    if (!keytar)
+        return null;
+    try {
+        return await keytar.getPassword(SERVICE_NAME, `${profile}:api_key`);
+    }
+    catch {
+        return null;
+    }
+}
+export async function keychainSet(profile, key) {
+    const keytar = await getKeytar();
+    if (!keytar)
+        throw new Error('Keychain not available. Install libsecret (Linux) or use encrypted file.');
+    await keytar.setPassword(SERVICE_NAME, `${profile}:api_key`, key);
+}
+export async function keychainDelete(profile) {
+    const keytar = await getKeytar();
+    if (!keytar)
+        return false;
+    try {
+        return await keytar.deletePassword(SERVICE_NAME, `${profile}:api_key`);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=keychain.js.map

package/dist/keychain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain.js","sourceRoot":"","sources":["../src/keychain.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,YAAY,GAAG,eAAe,CAAC;AAQrC,IAAI,OAAkC,CAAC;AAEvC,KAAK,UAAU,SAAS;IACtB,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,IAAI,QAAQ,CAAC,WAAW,EAAE,0BAA0B,CAA4C,CAAC;QACvH,OAAO,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAW,CAAC;QAClD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,IAAI,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,OAAO,CAAC,MAAM,SAAS,EAAE,CAAC,KAAK,IAAI,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAe;IAC/C,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;IACjC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,GAAG,OAAO,UAAU,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAe,EAAE,GAAW;IAC5D,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;IACjC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IACzG,MAAM,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,GAAG,OAAO,UAAU,EAAE,GAAG,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAe;IAClD,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;IACjC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,cAAc,CAAC,YAAY,EAAE,GAAG,OAAO,UAAU,CAAC,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/output/csv.d.ts

@@ -0,0 +1,5 @@
+/**
+ * CSV output with header row
+ */
+export declare function outputCsv(rows: Record<string, unknown>[], columns?: string[]): void;
+//# sourceMappingURL=csv.d.ts.map

package/dist/output/csv.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csv.d.ts","sourceRoot":"","sources":["../../src/output/csv.ts"],"names":[],"mappings":"AAAA;;GAEG;AASH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAanF"}

package/dist/output/csv.js

@@ -0,0 +1,22 @@
+/**
+ * CSV output with header row
+ */
+function escapeCsv(val) {
+    if (val.includes(',') || val.includes('"') || val.includes('\n')) {
+        return `"${val.replace(/"/g, '""')}"`;
+    }
+    return val;
+}
+export function outputCsv(rows, columns) {
+    if (rows.length === 0)
+        return;
+    const cols = columns || Object.keys(rows[0]);
+    // Header
+    process.stdout.write(cols.map(escapeCsv).join(',') + '\n');
+    // Rows
+    for (const row of rows) {
+        const line = cols.map(c => escapeCsv(String(row[c] ?? ''))).join(',');
+        process.stdout.write(line + '\n');
+    }
+}
+//# sourceMappingURL=csv.js.map

package/dist/output/csv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csv.js","sourceRoot":"","sources":["../../src/output/csv.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjE,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;IACxC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAA+B,EAAE,OAAkB;IAC3E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAE9B,MAAM,IAAI,GAAG,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAE7C,SAAS;IACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAE3D,OAAO;IACP,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACpC,CAAC;AACH,CAAC"}