@purveyors/cli 0.25.0 → 0.30.0

package/dist/lib/supabase.js

@@ -1,103 +0,0 @@
-import { createClient } from '@supabase/supabase-js';
-import { readCredentials, writeCredentials, deleteCredentials } from './config.js';
-import { AuthError } from './errors.js';
-/**
- * Public Supabase values — identical to what ships in every purveyors.io client bundle.
- * These are NOT secrets. The anon key only grants access through RLS policies.
- * Override via environment variables for dev/staging.
- */
-const SUPABASE_URL = process.env.PURVEYORS_SUPABASE_URL || 'https://bjblfzfdtfvuitqdbodn.supabase.co';
-const SUPABASE_ANON_KEY = process.env.PURVEYORS_SUPABASE_ANON_KEY ||
-    'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImJqYmxmemZkdGZ2dWl0cWRib2RuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3MzgwMTQ2OTAsImV4cCI6MjA1MzU5MDY5MH0.v1YcBAxFSvEthKPp4PkV3BCAsXYJn9Z2nuJBcEfnJFo';
-/**
- * Create a Supabase client with no session (anonymous/unauthenticated).
- * Used for login flows before we have a token.
- */
-export function createAnonClient() {
-    return createClient(SUPABASE_URL, SUPABASE_ANON_KEY, {
-        auth: {
-            persistSession: false,
-            autoRefreshToken: false,
-        },
-    });
-}
-/**
- * Create a Supabase client initialized with stored credentials.
- * Throws AuthError if no credentials are found.
- */
-export async function createAuthenticatedClient() {
-    const creds = await readCredentials();
-    if (!creds) {
-        throw new AuthError('Not logged in. Run `purvey auth login` first.');
-    }
-    const client = createClient(SUPABASE_URL, SUPABASE_ANON_KEY, {
-        auth: {
-            persistSession: false,
-            autoRefreshToken: false,
-        },
-    });
-    const { data, error } = await client.auth.setSession({
-        access_token: creds.accessToken,
-        refresh_token: creds.refreshToken,
-    });
-    // If the session was refreshed (access token rotated), persist the new tokens
-    if (!error && data.session && data.session.access_token !== creds.accessToken) {
-        await writeCredentials({
-            ...creds, // preserve user info
-            accessToken: data.session.access_token,
-            refreshToken: data.session.refresh_token,
-            expiresAt: (data.session.expires_at ?? 0) * 1000,
-        });
-    }
-    if (error || !data.session) {
-        // Refresh failed — both access and refresh tokens are expired/revoked
-        await deleteCredentials();
-        throw new AuthError('Session expired. Run `purvey auth login` to re-authenticate.\n' +
-            (error ? `  Reason: ${error.message}` : ''));
-    }
-    return client;
-}
-/**
- * Validate stored credentials by making a lightweight Supabase auth call.
- * Returns the user object if valid, null if expired/invalid.
- */
-export async function validateSession() {
-    const creds = await readCredentials();
-    if (!creds)
-        return null;
-    // Even if access token is expired, try refreshing via createAuthenticatedClient
-    // (it uses setSession which handles refresh automatically)
-    try {
-        const client = await createAuthenticatedClient();
-        const { data: { user }, error, } = await client.auth.getUser();
-        if (error || !user)
-            return null;
-        // Fetch app-level role from user_roles table
-        let appRoles = [];
-        try {
-            const { data: roleData } = await client
-                .from('user_roles')
-                .select('user_role')
-                .eq('id', user.id)
-                .single();
-            if (roleData?.user_role && Array.isArray(roleData.user_role)) {
-                appRoles = roleData.user_role;
-            }
-        }
-        catch {
-            // user_roles query failed — fall back to auth role
-        }
-        // Re-read credentials (may have been refreshed by createAuthenticatedClient)
-        const freshCreds = await readCredentials();
-        return {
-            id: user.id,
-            email: user.email,
-            role: appRoles.length > 0 ? appRoles.join(', ') : (user.role ?? 'authenticated'),
-            expiresAt: freshCreds?.expiresAt ?? creds.expiresAt,
-        };
-    }
-    catch {
-        return null;
-    }
-}
-//# sourceMappingURL=supabase.js.map

package/dist/lib/supabase.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"supabase.js","sourceRoot":"","sources":["../../src/lib/supabase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAuB,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACnF,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC;;;;GAIG;AACH,MAAM,YAAY,GAChB,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,0CAA0C,CAAC;AACnF,MAAM,iBAAiB,GACrB,OAAO,CAAC,GAAG,CAAC,2BAA2B;IACvC,kNAAkN,CAAC;AAErN;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,YAAY,CAAC,YAAa,EAAE,iBAAkB,EAAE;QACrD,IAAI,EAAE;YACJ,cAAc,EAAE,KAAK;YACrB,gBAAgB,EAAE,KAAK;SACxB;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB;IAC7C,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAC;IAEtC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,YAAa,EAAE,iBAAkB,EAAE;QAC7D,IAAI,EAAE;YACJ,cAAc,EAAE,KAAK;YACrB,gBAAgB,EAAE,KAAK;SACxB;KACF,CAAC,CAAC;IAEH,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;QACnD,YAAY,EAAE,KAAK,CAAC,WAAW;QAC/B,aAAa,EAAE,KAAK,CAAC,YAAY;KAClC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;QAC9E,MAAM,gBAAgB,CAAC;YACrB,GAAG,KAAK,EAAE,qBAAqB;YAC/B,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;YACtC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;YACxC,SAAS,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,IAAI;SACjD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,sEAAsE;QACtE,MAAM,iBAAiB,EAAE,CAAC;QAC1B,MAAM,IAAI,SAAS,CACjB,gEAAgE;YAC9D,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC9C,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IAMnC,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAC;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,gFAAgF;IAChF,2DAA2D;IAC3D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,yBAAyB,EAAE,CAAC;QACjD,MAAM,EACJ,IAAI,EAAE,EAAE,IAAI,EAAE,EACd,KAAK,GACN,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAEhC,IAAI,KAAK,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAEhC,6CAA6C;QAC7C,IAAI,QAAQ,GAAa,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM;iBACpC,IAAI,CAAC,YAAY,CAAC;iBAClB,MAAM,CAAC,WAAW,CAAC;iBACnB,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;iBACjB,MAAM,EAAE,CAAC;YACZ,IAAI,QAAQ,EAAE,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7D,QAAQ,GAAG,QAAQ,CAAC,SAAqB,CAAC;YAC5C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;QACrD,CAAC;QAED,6EAA6E;QAC7E,MAAM,UAAU,GAAG,MAAM,eAAe,EAAE,CAAC;QAE3C,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,eAAe,CAAC;YAChF,SAAS,EAAE,UAAU,EAAE,SAAS,IAAI,KAAK,CAAC,SAAS;SACpD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/types/database.types.d.ts

@@ -1,13 +0,0 @@
-export type Json = string | number | boolean | null | {
-    [key: string]: Json | undefined;
-} | Json[];
-export type Database = {
-    public: {
-        Tables: Record<string, never>;
-        Views: Record<string, never>;
-        Functions: Record<string, never>;
-        Enums: Record<string, never>;
-        CompositeTypes: Record<string, never>;
-    };
-};
-//# sourceMappingURL=database.types.d.ts.map

package/dist/types/database.types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"database.types.d.ts","sourceRoot":"","sources":["../../src/types/database.types.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAA;CAAE,GAAG,IAAI,EAAE,CAAC;AAEnG,MAAM,MAAM,QAAQ,GAAG;IACrB,MAAM,EAAE;QACN,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC9B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC7B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACjC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC7B,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;KACvC,CAAC;CACH,CAAC"}

package/dist/types/database.types.js

@@ -1,8 +0,0 @@
-// This file is auto-generated by the Supabase Type Generation workflow.
-// Do NOT edit manually. Run the "Supabase Type Generation" GitHub Actions
-// workflow to regenerate from the live schema.
-//
-// To regenerate locally (requires SUPABASE_ACCESS_TOKEN env var):
-//   npx supabase gen types typescript --project-id bjblfzfdtfvuitqdbodn > src/types/database.types.ts
-export {};
-//# sourceMappingURL=database.types.js.map

package/dist/types/database.types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"database.types.js","sourceRoot":"","sources":["../../src/types/database.types.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,0EAA0E;AAC1E,+CAA+C;AAC/C,EAAE;AACF,kEAAkE;AAClE,sGAAsG"}