@padua/cli 1.13.0 → 2.0.0

package/dist/commands/login/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/commands/login/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,mEAAmE;IACnE,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAElC,2DAA2D;IAC3D,GAAG,CAAC,EAAE,SAAS,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IAEf,+DAA+D;IAC/D,WAAW,EAAE,MAAM,CAAC;IAEpB,qDAAqD;IACrD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,4DAA4D;IAC5D,SAAS,EAAE,MAAM,CAAC;IAElB,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,uCAAuC;IACvC,OAAO,EAAE,OAAO,CAAC;IAEjB,uDAAuD;IACvD,OAAO,EAAE,OAAO,CAAC;IAEjB,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,oCAAoC;IACpC,GAAG,EAAE,aAAa,CAAC;IAEnB,wDAAwD;IACxD,YAAY,EAAE,aAAa,CAAC;IAE5B,gDAAgD;IAChD,GAAG,EAAE,aAAa,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,2CAA2C;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,0DAA0D;IAC1D,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,yCAAyC;IACzC,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,wCAAwC;IACxC,KAAK,CAAC,EAAE,OAAO,CAAC;IAEhB,uDAAuD;IACvD,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,+CAA+C;IAC/C,YAAY,CAAC,EAAE,OAAO,CAAC;IAEvB,6EAA6E;IAC7E,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAID,mEAAmE;AACnE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED,kDAAkD;AAClD,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAapD;AAED,oFAAoF;AACpF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED,sEAAsE;AACtE,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAExD;AAED,oFAAoF;AACpF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE5D;AAED,yDAAyD;AACzD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAElE;AAED,gDAAgD;AAChD,wBAAgB,YAAY,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAEzD;AAED,+FAA+F;AAC/F,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,MAAM,CAQvF;AAED,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,MAAM,CAE/D"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/commands/login/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,mEAAmE;IACnE,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAElC,2DAA2D;IAC3D,GAAG,CAAC,EAAE,SAAS,CAAC;IAEhB,6DAA6D;IAC7D,GAAG,CAAC,EAAE,cAAc,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IAEf,+DAA+D;IAC/D,WAAW,EAAE,MAAM,CAAC;IAEpB,qDAAqD;IACrD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,4DAA4D;IAC5D,SAAS,EAAE,MAAM,CAAC;IAElB,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,uCAAuC;IACvC,OAAO,EAAE,OAAO,CAAC;IAEjB,uDAAuD;IACvD,OAAO,EAAE,OAAO,CAAC;IAEjB,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,oCAAoC;IACpC,GAAG,EAAE,aAAa,CAAC;IAEnB,6CAA6C;IAC7C,QAAQ,EAAE,aAAa,CAAC;IAExB,wDAAwD;IACxD,YAAY,EAAE,aAAa,CAAC;IAE5B,gDAAgD;IAChD,GAAG,EAAE,aAAa,CAAC;IAEnB,wDAAwD;IACxD,MAAM,EAAE,aAAa,CAAC;IAEtB,2DAA2D;IAC3D,SAAS,EAAE,aAAa,CAAC;IAEzB,qDAAqD;IACrD,SAAS,EAAE,aAAa,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,2CAA2C;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,0DAA0D;IAC1D,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,yCAAyC;IACzC,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,wCAAwC;IACxC,KAAK,CAAC,EAAE,OAAO,CAAC;IAEhB,uDAAuD;IACvD,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,+CAA+C;IAC/C,YAAY,CAAC,EAAE,OAAO,CAAC;IAEvB,6EAA6E;IAC7E,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAID,mEAAmE;AACnE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED,kDAAkD;AAClD,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAapD;AAED,oFAAoF;AACpF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED,sEAAsE;AACtE,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAExD;AAED,oFAAoF;AACpF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE5D;AAED,yDAAyD;AACzD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAElE;AAED,gDAAgD;AAChD,wBAAgB,YAAY,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAEzD;AAED,+FAA+F;AAC/F,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,MAAM,CAQvF;AAED,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,MAAM,CAE/D"}

package/dist/commands/login/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/commands/login/types.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;AAwGH,4CAEC;AAGD,sCAaC;AAGD,gDAEC;AAGD,8CAEC;AAGD,sDAEC;AAGD,sDAEC;AAGD,oCAEC;AAGD,kDAQC;AAGD,gDAEC;AA9DD,cAAc;AAEd,mEAAmE;AACnE,SAAgB,gBAAgB,CAAC,KAAa;IAC5C,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,kDAAkD;AAClD,SAAgB,aAAa,CAAC,KAAa;IACzC,MAAM,YAAY,GAAG;QACnB,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW;QAClD,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY;QACnE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB;QACpD,gBAAgB,EAAE,gBAAgB;QAClC,YAAY;QACZ,cAAc;QACd,WAAW;QACX,YAAY;QACZ,YAAY;KACb,CAAC;IACF,OAAO,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,oFAAoF;AACpF,SAAgB,kBAAkB,CAAC,KAAa;IAC9C,OAAO,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED,sEAAsE;AACtE,SAAgB,iBAAiB,CAAC,KAAa;IAC7C,OAAO,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC5F,CAAC;AAED,oFAAoF;AACpF,SAAgB,qBAAqB,CAAC,KAAa;IACjD,OAAO,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC5F,CAAC;AAED,yDAAyD;AACzD,SAAgB,qBAAqB,CAAC,MAAmB;IACvD,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,IAAI,MAAM,CAAC,YAAY,EAAE,WAAW,IAAI,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;AAChH,CAAC;AAED,gDAAgD;AAChD,SAAgB,YAAY,CAAC,MAAmB;IAC9C,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,IAAI,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACzD,CAAC;AAED,+FAA+F;AAC/F,SAAgB,mBAAmB,CAAC,OAAqB,EAAE,MAAoB;IAC7E,OAAO,CACL,OAAO,CAAC,OAAO;QACf,OAAO,CAAC,GAAG,CAAC,aAAa;QACzB,OAAO,CAAC,GAAG,CAAC,WAAW;QACvB,MAAM,EAAE,cAAc;QACtB,SAAS,CACV,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,SAAgB,kBAAkB,CAAC,MAAoB;IACrD,OAAO,MAAM,EAAE,MAAM,IAAI,WAAW,CAAC;AACvC,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/commands/login/types.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;AAyHH,4CAEC;AAGD,sCAaC;AAGD,gDAEC;AAGD,8CAEC;AAGD,sDAEC;AAGD,sDAEC;AAGD,oCAEC;AAGD,kDAQC;AAGD,gDAEC;AA9DD,cAAc;AAEd,mEAAmE;AACnE,SAAgB,gBAAgB,CAAC,KAAa;IAC5C,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,kDAAkD;AAClD,SAAgB,aAAa,CAAC,KAAa;IACzC,MAAM,YAAY,GAAG;QACnB,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW;QAClD,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY;QACnE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB;QACpD,gBAAgB,EAAE,gBAAgB;QAClC,YAAY;QACZ,cAAc;QACd,WAAW;QACX,YAAY;QACZ,YAAY;KACb,CAAC;IACF,OAAO,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,oFAAoF;AACpF,SAAgB,kBAAkB,CAAC,KAAa;IAC9C,OAAO,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED,sEAAsE;AACtE,SAAgB,iBAAiB,CAAC,KAAa;IAC7C,OAAO,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC5F,CAAC;AAED,oFAAoF;AACpF,SAAgB,qBAAqB,CAAC,KAAa;IACjD,OAAO,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC5F,CAAC;AAED,yDAAyD;AACzD,SAAgB,qBAAqB,CAAC,MAAmB;IACvD,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,IAAI,MAAM,CAAC,YAAY,EAAE,WAAW,IAAI,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;AAChH,CAAC;AAED,gDAAgD;AAChD,SAAgB,YAAY,CAAC,MAAmB;IAC9C,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,IAAI,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACzD,CAAC;AAED,+FAA+F;AAC/F,SAAgB,mBAAmB,CAAC,OAAqB,EAAE,MAAoB;IAC7E,OAAO,CACL,OAAO,CAAC,OAAO;QACf,OAAO,CAAC,GAAG,CAAC,aAAa;QACzB,OAAO,CAAC,GAAG,CAAC,WAAW;QACvB,MAAM,EAAE,cAAc;QACtB,SAAS,CACV,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,SAAgB,kBAAkB,CAAC,MAAoB;IACrD,OAAO,MAAM,EAAE,MAAM,IAAI,WAAW,CAAC;AACvC,CAAC"}

package/dist/commands/status/aws-checks.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Status checks for AWS services: CodeArtifact and ECR.
+ */
+import type { CodeArtifactStatus, ECRStatus } from './types';
+import type { CodeArtifactConfig, EcrConfig } from '../login/types';
+/**
+ * Check CodeArtifact authentication status by parsing .npmrc (project or global)
+ */
+export declare function checkCodeArtifactStatus(config: CodeArtifactConfig): Promise<CodeArtifactStatus>;
+/**
+ * Check ECR authentication status by parsing ~/.docker/config.json
+ */
+export declare function checkECRStatus(config: EcrConfig): Promise<ECRStatus>;
+//# sourceMappingURL=aws-checks.d.ts.map

package/dist/commands/status/aws-checks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws-checks.d.ts","sourceRoot":"","sources":["../../../src/commands/status/aws-checks.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,KAAK,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAMpE;;GAEG;AACH,wBAAsB,uBAAuB,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA+CrG;AAmBD;;GAEG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAmD1E"}

package/dist/commands/status/aws-checks.js

@@ -0,0 +1,145 @@
+"use strict";
+/**
+ * Status checks for AWS services: CodeArtifact and ECR.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkCodeArtifactStatus = checkCodeArtifactStatus;
+exports.checkECRStatus = checkECRStatus;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+// ---------------------------------------------------------------------------
+// CodeArtifact
+// ---------------------------------------------------------------------------
+/**
+ * Check CodeArtifact authentication status by parsing .npmrc (project or global)
+ */
+async function checkCodeArtifactStatus(config) {
+    const projectNpmrcPath = path.join(process.cwd(), '.npmrc');
+    const globalNpmrcPath = path.join(os.homedir(), '.npmrc');
+    let npmrcPath = null;
+    let location = null;
+    if (fs.existsSync(projectNpmrcPath)) {
+        npmrcPath = projectNpmrcPath;
+        location = 'project';
+    }
+    else if (fs.existsSync(globalNpmrcPath)) {
+        npmrcPath = globalNpmrcPath;
+        location = 'global';
+    }
+    if (!npmrcPath || !location) {
+        return { authenticated: false, error: 'No .npmrc file found (checked project and global)' };
+    }
+    try {
+        const content = fs.readFileSync(npmrcPath, 'utf-8');
+        const registryPattern = new RegExp(`//([^/]+\\.d\\.codeartifact\\.[^/]+\\.amazonaws\\.com/npm/${config.repository}/).*:_authToken=(.+)`, 'm');
+        const match = content.match(registryPattern);
+        if (!match) {
+            return { authenticated: false, location, error: `No CodeArtifact token found in .npmrc (${location})` };
+        }
+        const registry = `https://${match[1]}`;
+        const token = match[2].trim();
+        const expiresAt = parseJwtExpiry(token);
+        if (expiresAt && expiresAt < new Date()) {
+            return { authenticated: false, registry, expiresAt, location, error: 'Token expired' };
+        }
+        return { authenticated: true, registry, expiresAt: expiresAt ?? undefined, location };
+    }
+    catch (error) {
+        return {
+            authenticated: false,
+            location,
+            error: `Failed to read .npmrc (${location}): ${error.message}`,
+        };
+    }
+}
+function parseJwtExpiry(token) {
+    try {
+        const parts = token.split('.');
+        if (parts.length !== 3)
+            return null;
+        const decoded = Buffer.from(parts[1], 'base64url').toString('utf-8');
+        const data = JSON.parse(decoded);
+        return data.exp ? new Date(data.exp * 1000) : null;
+    }
+    catch {
+        return null;
+    }
+}
+// ---------------------------------------------------------------------------
+// ECR
+// ---------------------------------------------------------------------------
+/**
+ * Check ECR authentication status by parsing ~/.docker/config.json
+ */
+async function checkECRStatus(config) {
+    const dockerConfigPath = path.join(os.homedir(), '.docker', 'config.json');
+    const registry = `${config.accountId}.dkr.ecr.${config.region}.amazonaws.com`;
+    if (!fs.existsSync(dockerConfigPath)) {
+        return { authenticated: false, registry, error: 'No ~/.docker/config.json found' };
+    }
+    try {
+        const content = fs.readFileSync(dockerConfigPath, 'utf-8');
+        const dockerConfig = JSON.parse(content);
+        if (dockerConfig.credHelpers) {
+            const helperKey = Object.keys(dockerConfig.credHelpers).find((k) => k.includes('ecr') && k.includes(config.region));
+            if (helperKey)
+                return { authenticated: true, registry };
+        }
+        if (!dockerConfig.auths) {
+            return { authenticated: false, registry, error: 'No Docker auth entries found' };
+        }
+        const ecrEntry = Object.keys(dockerConfig.auths).find((k) => k.includes(config.accountId) && k.includes('ecr') && k.includes(config.region));
+        if (!ecrEntry) {
+            return { authenticated: false, registry, error: 'No ECR credentials found' };
+        }
+        if (dockerConfig.credsStore && !dockerConfig.auths[ecrEntry]?.auth) {
+            return { authenticated: true, registry };
+        }
+        if (!dockerConfig.auths[ecrEntry]?.auth) {
+            return { authenticated: false, registry, error: 'No ECR credentials found' };
+        }
+        return { authenticated: true, registry };
+    }
+    catch (error) {
+        return {
+            authenticated: false,
+            registry,
+            error: `Failed to read Docker config: ${error.message}`,
+        };
+    }
+}
+//# sourceMappingURL=aws-checks.js.map

package/dist/commands/status/aws-checks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws-checks.js","sourceRoot":"","sources":["../../../src/commands/status/aws-checks.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAeH,0DA+CC;AAsBD,wCAmDC;AArID,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AAIzB,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E;;GAEG;AACI,KAAK,UAAU,uBAAuB,CAAC,MAA0B;IACtE,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC5D,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;IAE1D,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,IAAI,QAAQ,GAAgC,IAAI,CAAC;IAEjD,IAAI,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACpC,SAAS,GAAG,gBAAgB,CAAC;QAC7B,QAAQ,GAAG,SAAS,CAAC;IACvB,CAAC;SAAM,IAAI,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QAC1C,SAAS,GAAG,eAAe,CAAC;QAC5B,QAAQ,GAAG,QAAQ,CAAC;IACtB,CAAC;IAED,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,mDAAmD,EAAE,CAAC;IAC9F,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACpD,MAAM,eAAe,GAAG,IAAI,MAAM,CAChC,6DAA6D,MAAM,CAAC,UAAU,sBAAsB,EACpG,GAAG,CACJ,CAAC;QACF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAE7C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,0CAA0C,QAAQ,GAAG,EAAE,CAAC;QAC1G,CAAC;QAED,MAAM,QAAQ,GAAG,WAAW,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QAExC,IAAI,SAAS,IAAI,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YACxC,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;QACzF,CAAC;QAED,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,IAAI,SAAS,EAAE,QAAQ,EAAE,CAAC;IACxF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,aAAa,EAAE,KAAK;YACpB,QAAQ;YACR,KAAK,EAAE,0BAA0B,QAAQ,MAAO,KAAe,CAAC,OAAO,EAAE;SAC1E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEpC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAqB,CAAC;QACrD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM;AACN,8EAA8E;AAE9E;;GAEG;AACI,KAAK,UAAU,cAAc,CAAC,MAAiB;IACpD,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,SAAS,YAAY,MAAM,CAAC,MAAM,gBAAgB,CAAC;IAE9E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;IACrF,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAItC,CAAC;QAEF,IAAI,YAAY,CAAC,WAAW,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,IAAI,CAC1D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CACtD,CAAC;YACF,IAAI,SAAS;gBAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC1D,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YACxB,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC;QACnF,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CACnD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CACtF,CAAC;QAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;QAC/E,CAAC;QAED,IAAI,YAAY,CAAC,UAAU,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC;YACnE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC3C,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC;YACxC,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;QAC/E,CAAC;QAED,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,aAAa,EAAE,KAAK;YACpB,QAAQ;YACR,KAAK,EAAE,iCAAkC,KAAe,CAAC,OAAO,EAAE;SACnE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/commands/status/checks.d.ts

@@ -1,37 +1,21 @@
-import { SSOStatus, CodeArtifactStatus, ECRStatus } from './types';
-import { CodeArtifactConfig, EcrConfig } from '../login/types';
 /**
- * Parse profile config from ~/.aws/config to extract region
+ * Status check barrel — re-exports all check functions and utilities.
+ *
+ * Individual check implementations live in:
+ *   - sso-checks.ts   — AWS SSO (checkSSOStatus)
+ *   - aws-checks.ts   — CodeArtifact, ECR
+ *   - mcp-checks.ts   — GitLab token, Atlassian token, MCP server
  */
+import type { SSOStatus } from './types';
 declare function getProfileRegion(profile: string): string | undefined;
-/**
- * Parse assumed role ARN to extract role name and session name
- * ARN format: arn:aws:sts::ACCOUNT:assumed-role/ROLE_NAME/SESSION_NAME
- */
 declare function parseAssumedRoleArn(arn: string): {
     roleName?: string;
     sessionName?: string;
 };
-/**
- * Derive account alias from profile name if it follows common convention
- * e.g., "paduafg-development" -> "development", "company-prod" -> "prod"
- */
 declare function deriveAccountAlias(profile: string): string | undefined;
-/**
- * Check SSO authentication status and get identity details
- */
 export declare function checkSSOStatus(profile: string): Promise<SSOStatus>;
-/**
- * Check CodeArtifact authentication status by parsing .npmrc (project or global)
- */
-export declare function checkCodeArtifactStatus(config: CodeArtifactConfig): Promise<CodeArtifactStatus>;
-/**
- * Check ECR authentication status by parsing ~/.docker/config.json
- */
-export declare function checkECRStatus(config: EcrConfig): Promise<ECRStatus>;
-/**
- * Format a relative time string (e.g., "in 11 hours" or "2 hours ago")
- */
 export declare function formatRelativeTime(date: Date): string;
+export { checkCodeArtifactStatus, checkECRStatus } from './aws-checks';
+export { checkGitLabToken, checkAtlassianToken, checkMcpServer, formatExpiresIn } from './mcp-checks';
 export { getProfileRegion, parseAssumedRoleArn, deriveAccountAlias };
 //# sourceMappingURL=checks.d.ts.map

package/dist/commands/status/checks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"checks.d.ts","sourceRoot":"","sources":["../../../src/commands/status/checks.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAK/D;;GAEG;AACH,iBAAS,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAgB7D;AAED;;;GAGG;AACH,iBAAS,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAMrF;AAED;;;GAGG;AACH,iBAAS,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAQ/D;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAyFxE;AAED;;GAEG;AACH,wBAAsB,uBAAuB,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAwErG;AA4BD;;GAEG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAwF1E;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAmBrD;AAGD,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,CAAC"}
+{"version":3,"file":"checks.d.ts","sourceRoot":"","sources":["../../../src/commands/status/checks.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AASzC,iBAAS,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAc7D;AAED,iBAAS,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAIrF;AAED,iBAAS,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAG/D;AAMD,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CA4CxE;AAmBD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAYrD;AAMD,OAAO,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAGtG,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/commands/status/checks.js

@@ -1,4 +1,12 @@
 "use strict";
+/**
+ * Status check barrel — re-exports all check functions and utilities.
+ *
+ * Individual check implementations live in:
+ *   - sso-checks.ts   — AWS SSO (checkSSOStatus)
+ *   - aws-checks.ts   — CodeArtifact, ECR
+ *   - mcp-checks.ts   — GitLab token, Atlassian token, MCP server
+ */
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     var desc = Object.getOwnPropertyDescriptor(m, k);
@@ -33,9 +41,8 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.formatExpiresIn = exports.checkMcpServer = exports.checkAtlassianToken = exports.checkGitLabToken = exports.checkECRStatus = exports.checkCodeArtifactStatus = void 0;
 exports.checkSSOStatus = checkSSOStatus;
-exports.checkCodeArtifactStatus = checkCodeArtifactStatus;
-exports.checkECRStatus = checkECRStatus;
 exports.formatRelativeTime = formatRelativeTime;
 exports.getProfileRegion = getProfileRegion;
 exports.parseAssumedRoleArn = parseAssumedRoleArn;
@@ -45,113 +52,62 @@ const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const os = __importStar(require("os"));
 const utils_1 = require("../login/utils");
-const CHECK_TIMEOUT_MS = 10000; // 10 seconds
-/**
- * Parse profile config from ~/.aws/config to extract region
- */
+const CHECK_TIMEOUT_MS = 10000;
+// ---------------------------------------------------------------------------
+// SSO helpers (kept here as they are small and tightly coupled)
+// ---------------------------------------------------------------------------
 function getProfileRegion(profile) {
     const awsConfigPath = path.join(os.homedir(), '.aws', 'config');
     if (!fs.existsSync(awsConfigPath))
         return undefined;
     try {
         const content = fs.readFileSync(awsConfigPath, 'utf-8');
-        // Match [profile name] or [default] section and extract region
         const profileSection = profile === 'default'
             ? '\\[default\\]'
             : `\\[profile\\s+${profile}\\]`;
         const regex = new RegExp(`${profileSection}[^\\[]*?region\\s*=\\s*([^\\s\\n]+)`, 's');
-        const match = content.match(regex);
-        return match?.[1];
+        return content.match(regex)?.[1];
     }
     catch {
         return undefined;
     }
 }
-/**
- * Parse assumed role ARN to extract role name and session name
- * ARN format: arn:aws:sts::ACCOUNT:assumed-role/ROLE_NAME/SESSION_NAME
- */
 function parseAssumedRoleArn(arn) {
     const match = arn.match(/assumed-role\/([^/]+)\/(.+)$/);
-    if (match) {
+    if (match)
         return { roleName: match[1], sessionName: match[2] };
-    }
     return {};
 }
-/**
- * Derive account alias from profile name if it follows common convention
- * e.g., "paduafg-development" -> "development", "company-prod" -> "prod"
- */
 function deriveAccountAlias(profile) {
-    // Common patterns: prefix-environment or just environment
     const parts = profile.split('-');
-    if (parts.length > 1) {
-        // Return the last part(s) as the account alias
-        return parts.slice(1).join('-');
-    }
-    return undefined;
+    return parts.length > 1 ? parts.slice(1).join('-') : undefined;
 }
-/**
- * Check SSO authentication status and get identity details
- */
+// ---------------------------------------------------------------------------
+// SSO check
+// ---------------------------------------------------------------------------
 async function checkSSOStatus(profile) {
     try {
         (0, utils_1.validateProfileName)(profile);
     }
     catch (error) {
-        return {
-            authenticated: false,
-            error: error.message,
-        };
+        return { authenticated: false, error: error.message };
     }
     const result = (0, child_process_1.spawnSync)('aws', ['sts', 'get-caller-identity', '--profile', profile, '--output', 'json'], {
         shell: false,
         timeout: CHECK_TIMEOUT_MS,
         maxBuffer: 1024 * 1024,
         stdio: ['pipe', 'pipe', 'pipe'],
-        env: {
-            ...(0, utils_1.getSubprocessEnv)(),
-            AWS_PROFILE: profile,
-        },
+        env: { ...(0, utils_1.getSubprocessEnv)(), AWS_PROFILE: profile },
     });
     if (result.error) {
         if (result.error.message.includes('ENOENT')) {
-            return {
-                authenticated: false,
-                error: 'AWS CLI not installed',
-            };
+            return { authenticated: false, error: 'AWS CLI not installed' };
         }
-        return {
-            authenticated: false,
-            error: result.error.message,
-        };
+        return { authenticated: false, error: result.error.message };
     }
     if (result.status !== 0) {
-        const stderr = result.stderr?.toString() || '';
-        if (stderr.includes('ExpiredToken') || stderr.includes('Token has expired')) {
-            return {
-                authenticated: false,
-                error: 'Session expired',
-            };
-        }
-        if (stderr.includes('profile') && stderr.includes('not found')) {
-            return {
-                authenticated: false,
-                error: `Profile '${profile}' not found`,
-            };
-        }
-        if (stderr.includes('No SSO configuration')) {
-            return {
-                authenticated: false,
-                error: 'Profile not configured for SSO',
-            };
-        }
-        return {
-            authenticated: false,
-            error: 'Not authenticated',
-        };
+        return parseSSOError(result.stderr?.toString() || '', profile);
     }
-    // Parse the JSON output
     try {
         const output = result.stdout?.toString() || '';
         const identity = JSON.parse(output);
@@ -160,209 +116,51 @@ async function checkSSOStatus(profile) {
         const accountAlias = deriveAccountAlias(profile);
         return {
             authenticated: true,
-            identity: {
-                userId: identity.UserId,
-                account: identity.Account,
-                userArn: identity.Arn,
-                region,
-                roleName,
-                sessionName,
-                accountAlias,
-            },
-        };
-    }
-    catch {
-        return {
-            authenticated: false,
-            error: 'Failed to parse identity response',
-        };
-    }
-}
-/**
- * Check CodeArtifact authentication status by parsing .npmrc (project or global)
- */
-async function checkCodeArtifactStatus(config) {
-    // Check project .npmrc first (priority), then fallback to global
-    const projectNpmrcPath = path.join(process.cwd(), '.npmrc');
-    const globalNpmrcPath = path.join(os.homedir(), '.npmrc');
-    let npmrcPath = null;
-    let location = null;
-    if (fs.existsSync(projectNpmrcPath)) {
-        npmrcPath = projectNpmrcPath;
-        location = 'project';
-    }
-    else if (fs.existsSync(globalNpmrcPath)) {
-        npmrcPath = globalNpmrcPath;
-        location = 'global';
-    }
-    if (!npmrcPath || !location) {
-        return {
-            authenticated: false,
-            error: 'No .npmrc file found (checked project and global)',
-        };
-    }
-    try {
-        const content = fs.readFileSync(npmrcPath, 'utf-8');
-        // Build expected registry pattern
-        // Format: //domain-owner.d.codeartifact.region.amazonaws.com/npm/repo/:_authToken=TOKEN
-        const registryPattern = new RegExp(`//([^/]+\\.d\\.codeartifact\\.[^/]+\\.amazonaws\\.com/npm/${config.repository}/).*:_authToken=(.+)`, 'm');
-        const match = content.match(registryPattern);
-        if (!match) {
-            return {
-                authenticated: false,
-                location,
-                error: `No CodeArtifact token found in .npmrc (${location})`,
-            };
-        }
-        const registry = `https://${match[1]}`;
-        const token = match[2].trim();
-        // Try to decode the JWT to get expiry
-        const expiresAt = parseJwtExpiry(token);
-        if (expiresAt && expiresAt < new Date()) {
-            return {
-                authenticated: false,
-                registry,
-                expiresAt,
-                location,
-                error: 'Token expired',
-            };
-        }
-        return {
-            authenticated: true,
-            registry,
-            expiresAt: expiresAt || undefined,
-            location,
+            identity: { userId: identity.UserId, account: identity.Account, userArn: identity.Arn, region, roleName, sessionName, accountAlias },
         };
     }
-    catch (error) {
-        return {
-            authenticated: false,
-            location,
-            error: `Failed to read .npmrc (${location}): ${error.message}`,
-        };
-    }
-}
-/**
- * Parse JWT token to extract expiry time
- * CodeArtifact tokens are JWTs with an exp claim
- */
-function parseJwtExpiry(token) {
-    try {
-        // JWT format: header.payload.signature
-        const parts = token.split('.');
-        if (parts.length !== 3) {
-            return null;
-        }
-        // Decode the payload (base64url)
-        const payload = parts[1];
-        const decoded = Buffer.from(payload, 'base64url').toString('utf-8');
-        const data = JSON.parse(decoded);
-        if (data.exp) {
-            return new Date(data.exp * 1000);
-        }
-        return null;
-    }
     catch {
-        return null;
+        return { authenticated: false, error: 'Failed to parse identity response' };
     }
 }
-/**
- * Check ECR authentication status by parsing ~/.docker/config.json
- */
-async function checkECRStatus(config) {
-    const dockerConfigPath = path.join(os.homedir(), '.docker', 'config.json');
-    const registry = `${config.accountId}.dkr.ecr.${config.region}.amazonaws.com`;
-    if (!fs.existsSync(dockerConfigPath)) {
-        return {
-            authenticated: false,
-            registry,
-            error: 'No ~/.docker/config.json found',
-        };
+function parseSSOError(stderr, profile) {
+    if (stderr.includes('ExpiredToken') || stderr.includes('Token has expired')) {
+        return { authenticated: false, error: 'Session expired' };
     }
-    try {
-        const content = fs.readFileSync(dockerConfigPath, 'utf-8');
-        const dockerConfig = JSON.parse(content);
-        // Check if using credential helper for specific registries
-        if (dockerConfig.credHelpers) {
-            const helperKey = Object.keys(dockerConfig.credHelpers).find(k => k.includes('ecr') && k.includes(config.region));
-            if (helperKey) {
-                // Credential helper is configured - assume authenticated
-                return {
-                    authenticated: true,
-                    registry,
-                };
-            }
-        }
-        // Check direct auth entries
-        if (!dockerConfig.auths) {
-            return {
-                authenticated: false,
-                registry,
-                error: 'No Docker auth entries found',
-            };
-        }
-        // Look for ECR registry entry
-        const ecrEntry = Object.keys(dockerConfig.auths).find(k => k.includes(config.accountId) && k.includes('ecr') && k.includes(config.region));
-        if (!ecrEntry) {
-            return {
-                authenticated: false,
-                registry,
-                error: 'No ECR credentials found',
-            };
-        }
-        // Check if using global credsStore (e.g., Docker Desktop)
-        // When credsStore is set, auths entries may be empty {} but credentials
-        // are stored in the system credential store
-        if (dockerConfig.credsStore && !dockerConfig.auths[ecrEntry]?.auth) {
-            // Registry entry exists + credsStore configured = credentials in external store
-            return {
-                authenticated: true,
-                registry,
-            };
-        }
-        // Check for inline auth token
-        if (!dockerConfig.auths[ecrEntry]?.auth) {
-            return {
-                authenticated: false,
-                registry,
-                error: 'No ECR credentials found',
-            };
-        }
-        // ECR auth exists inline
-        return {
-            authenticated: true,
-            registry,
-        };
+    if (stderr.includes('profile') && stderr.includes('not found')) {
+        return { authenticated: false, error: `Profile '${profile}' not found` };
     }
-    catch (error) {
-        return {
-            authenticated: false,
-            registry,
-            error: `Failed to read Docker config: ${error.message}`,
-        };
+    if (stderr.includes('No SSO configuration')) {
+        return { authenticated: false, error: 'Profile not configured for SSO' };
     }
+    return { authenticated: false, error: 'Not authenticated' };
 }
-/**
- * Format a relative time string (e.g., "in 11 hours" or "2 hours ago")
- */
+// ---------------------------------------------------------------------------
+// formatRelativeTime utility
+// ---------------------------------------------------------------------------
 function formatRelativeTime(date) {
     const now = new Date();
     const diffMs = date.getTime() - now.getTime();
     const diffMins = Math.round(diffMs / 60000);
     const diffHours = Math.round(diffMs / 3600000);
     if (diffMs < 0) {
-        // In the past
-        if (diffMins > -60) {
+        if (diffMins > -60)
             return `${Math.abs(diffMins)} minute${Math.abs(diffMins) !== 1 ? 's' : ''} ago`;
-        }
         return `${Math.abs(diffHours)} hour${Math.abs(diffHours) !== 1 ? 's' : ''} ago`;
     }
-    else {
-        // In the future
-        if (diffMins < 60) {
-            return `in ${diffMins} minute${diffMins !== 1 ? 's' : ''}`;
-        }
-        return `in ${diffHours} hour${diffHours !== 1 ? 's' : ''}`;
-    }
+    if (diffMins < 60)
+        return `in ${diffMins} minute${diffMins !== 1 ? 's' : ''}`;
+    return `in ${diffHours} hour${diffHours !== 1 ? 's' : ''}`;
 }
+// ---------------------------------------------------------------------------
+// Re-exports from sub-modules
+// ---------------------------------------------------------------------------
+var aws_checks_1 = require("./aws-checks");
+Object.defineProperty(exports, "checkCodeArtifactStatus", { enumerable: true, get: function () { return aws_checks_1.checkCodeArtifactStatus; } });
+Object.defineProperty(exports, "checkECRStatus", { enumerable: true, get: function () { return aws_checks_1.checkECRStatus; } });
+var mcp_checks_1 = require("./mcp-checks");
+Object.defineProperty(exports, "checkGitLabToken", { enumerable: true, get: function () { return mcp_checks_1.checkGitLabToken; } });
+Object.defineProperty(exports, "checkAtlassianToken", { enumerable: true, get: function () { return mcp_checks_1.checkAtlassianToken; } });
+Object.defineProperty(exports, "checkMcpServer", { enumerable: true, get: function () { return mcp_checks_1.checkMcpServer; } });
+Object.defineProperty(exports, "formatExpiresIn", { enumerable: true, get: function () { return mcp_checks_1.formatExpiresIn; } });
 //# sourceMappingURL=checks.js.map