@redocly/cli 1.29.0 → 1.31.0

package/lib/commands/push.d.ts

@@ -1,4 +1,4 @@
-import { handlePush as handleCMSPush } from '../cms/commands/push';
+import { handlePush as handleCMSPush } from '../reunite/commands/push';
 import type { Config, Region } from '@redocly/openapi-core';
 import type { CommandArgs } from '../wrapper';
 import type { VerifyConfigOptions } from '../types';

package/lib/commands/push.js

@@ -13,9 +13,9 @@ const crypto_1 = require("crypto");
 const openapi_core_1 = require("@redocly/openapi-core");
 const utils_1 = require("@redocly/openapi-core/lib/utils");
 const miscellaneous_1 = require("../utils/miscellaneous");
-const login_1 = require("./login");
-const push_1 = require("../cms/commands/push");
-const api_client_1 = require("../cms/api/api-client");
+const auth_1 = require("./auth");
+const push_1 = require("../reunite/commands/push");
+const api_client_1 = require("../reunite/api/api-client");
 const DEFAULT_VERSION = 'latest';
 exports.DESTINATION_REGEX = 
 // eslint-disable-next-line no-useless-escape
@@ -31,7 +31,7 @@ async function handlePush({ argv, config }) {
     const isAuthorized = await client.isAuthorizedWithRedoclyByRegion();
     if (!isAuthorized) {
         try {
-            const clientToken = await (0, login_1.promptClientToken)(client.domain);
+            const clientToken = await (0, auth_1.promptClientToken)(client.domain);
             await client.login(clientToken);
         }
         catch (e) {

package/lib/index.js

@@ -1,19 +1,20 @@
 #!/usr/bin/env node
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const path = require("path");
+const dotenv = require("dotenv");
 require("./utils/assert-node-version");
 const yargs = require("yargs");
 const colors = require("colorette");
-const openapi_core_1 = require("@redocly/openapi-core");
 const types_1 = require("./types");
 const preview_docs_1 = require("./commands/preview-docs");
 const stats_1 = require("./commands/stats");
 const split_1 = require("./commands/split");
 const join_1 = require("./commands/join");
-const push_status_1 = require("./cms/commands/push-status");
+const push_status_1 = require("./reunite/commands/push-status");
 const lint_1 = require("./commands/lint");
 const bundle_1 = require("./commands/bundle");
-const login_1 = require("./commands/login");
+const auth_1 = require("./commands/auth");
 const build_docs_1 = require("./commands/build-docs");
 const update_version_notifier_1 = require("./utils/update-version-notifier");
 const wrapper_1 = require("./wrapper");
@@ -22,6 +23,7 @@ const translations_1 = require("./commands/translations");
 const eject_1 = require("./commands/eject");
 const constants_1 = require("./commands/preview-project/constants");
 const push_1 = require("./commands/push");
+dotenv.config({ path: path.resolve(process.cwd(), './.env') });
 if (!('replaceAll' in String.prototype)) {
     require('core-js/actual/string/replace-all');
 }
@@ -521,32 +523,32 @@ yargs
     process.env.REDOCLY_CLI_COMMAND = 'check-config';
     (0, wrapper_1.commandWrapper)()(argv);
 })
-    .command('login', 'Login to the Redocly API registry with an access token.', async (yargs) => yargs.options({
+    .command('login', 'Log in to Redocly.', async (yargs) => yargs.options({
     verbose: {
         description: 'Include additional output.',
         type: 'boolean',
     },
-    region: {
-        description: 'Specify a region.',
-        alias: 'r',
-        choices: types_1.regionChoices,
+    residency: {
+        description: 'Residency of the application. Defaults to `us`.',
+        alias: ['r', 'region'],
+        type: 'string',
     },
     config: {
         description: 'Path to the config file.',
         requiresArg: true,
         type: 'string',
     },
+    next: {
+        description: 'Use Reunite application to login.',
+        type: 'boolean',
+    },
 }), (argv) => {
     process.env.REDOCLY_CLI_COMMAND = 'login';
-    (0, wrapper_1.commandWrapper)(login_1.handleLogin)(argv);
+    (0, wrapper_1.commandWrapper)(auth_1.handleLogin)(argv);
 })
-    .command('logout', 'Clear your stored credentials for the Redocly API registry.', (yargs) => yargs, async (argv) => {
+    .command('logout', 'Clear your stored credentials for the Redocly API registry.', (yargs) => yargs, (argv) => {
     process.env.REDOCLY_CLI_COMMAND = 'logout';
-    await (0, wrapper_1.commandWrapper)(async () => {
-        const client = new openapi_core_1.RedoclyClient();
-        client.logout();
-        process.stdout.write('Logged out from the Redocly account. ✋\n');
-    })(argv);
+    (0, wrapper_1.commandWrapper)(auth_1.handleLogout)(argv);
 })
     .command('preview', 'Preview Redocly project using one of the product NPM packages.', (yargs) => yargs.options({
     product: {
@@ -726,6 +728,92 @@ yargs
 }), (argv) => {
     process.env.REDOCLY_CLI_COMMAND = 'eject';
     (0, wrapper_1.commandWrapper)(eject_1.handleEject)(argv);
+})
+    .command('respect [files...]', 'Run Arazzo tests.', (yargs) => {
+    return yargs
+        .positional('files', {
+        describe: 'Test files or glob pattern.',
+        type: 'string',
+        array: true,
+        default: [],
+    })
+        .env('REDOCLY_CLI_RESPECT')
+        .options({
+        input: {
+            alias: 'i',
+            describe: 'Input parameters.',
+            type: 'string',
+        },
+        server: {
+            alias: 'S',
+            describe: 'Server parameters.',
+            type: 'string',
+        },
+        workflow: {
+            alias: 'w',
+            describe: 'Workflow name.',
+            type: 'string',
+            array: true,
+        },
+        skip: {
+            alias: 's',
+            describe: 'Workflow to skip.',
+            type: 'string',
+            array: true,
+        },
+        verbose: {
+            alias: 'v',
+            describe: 'Apply verbose mode.',
+            type: 'boolean',
+        },
+        'har-output': {
+            describe: 'Har file output name.',
+            type: 'string',
+        },
+        'json-output': {
+            describe: 'JSON file output name.',
+            type: 'string',
+        },
+        'client-cert': {
+            describe: 'Mutual TLS client certificate.',
+            type: 'string',
+        },
+        'client-key': {
+            describe: 'Mutual TLS client key.',
+            type: 'string',
+        },
+        'ca-cert': {
+            describe: 'Mutual TLS CA certificate.',
+            type: 'string',
+        },
+        severity: {
+            describe: 'Severity of the check.',
+            type: 'string',
+        },
+    });
+}, async (argv) => {
+    process.env.REDOCLY_CLI_COMMAND = 'respect';
+    const { handleRun } = await Promise.resolve().then(() => require('@redocly/respect-core'));
+    (0, wrapper_1.commandWrapper)(handleRun)(argv);
+})
+    .command('generate-arazzo <descriptionPath>', 'Auto-generate arazzo description file from an API description.', (yargs) => {
+    return yargs
+        .positional('descriptionPath', {
+        describe: 'Description file path.',
+        type: 'string',
+    })
+        .env('REDOCLY_CLI_RESPECT')
+        .options({
+        'output-file': {
+            alias: 'o',
+            describe: 'Output File name.',
+            type: 'string',
+        },
+    });
+}, async (argv) => {
+    process.env.REDOCLY_CLI_COMMAND = 'generate-arazzo';
+    const { handleGenerate } = await Promise.resolve().then(() => require('@redocly/respect-core'));
+    (0, wrapper_1.commandWrapper)(handleGenerate)(argv);
 })
     .completion('completion', 'Generate autocomplete script for `redocly` command.')
     .demandCommand(1)

package/lib/otel.d.ts

@@ -0,0 +1,10 @@
+import type { Analytics } from './utils/miscellaneous';
+type Events = {
+    [key: string]: Analytics;
+};
+export declare class OtelServerTelemetry {
+    init(): void;
+    send<K extends keyof Events>(event: K, data: Events[K]): void;
+}
+export declare const otelTelemetry: OtelServerTelemetry;
+export {};

package/lib/otel.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.otelTelemetry = exports.OtelServerTelemetry = void 0;
+const api_1 = require("@opentelemetry/api");
+const resources_1 = require("@opentelemetry/resources");
+const sdk_trace_node_1 = require("@opentelemetry/sdk-trace-node");
+const exporter_trace_otlp_http_1 = require("@opentelemetry/exporter-trace-otlp-http");
+const semantic_conventions_1 = require("@opentelemetry/semantic-conventions");
+const update_version_notifier_1 = require("./utils/update-version-notifier");
+const fetch_with_timeout_1 = require("./utils/fetch-with-timeout");
+const OTEL_TRACES_URL = process.env.OTEL_TRACES_URL || 'https://otel.cloud.redocly.com/v1/traces';
+class OtelServerTelemetry {
+    init() {
+        const nodeTracerProvider = new sdk_trace_node_1.NodeTracerProvider({
+            resource: new resources_1.Resource({
+                [semantic_conventions_1.ATTR_SERVICE_NAME]: `redocly-cli`,
+                [semantic_conventions_1.ATTR_SERVICE_VERSION]: `@redocly/cli@${update_version_notifier_1.version}`,
+            }),
+        });
+        nodeTracerProvider.addSpanProcessor(new sdk_trace_node_1.SimpleSpanProcessor(new exporter_trace_otlp_http_1.OTLPTraceExporter({
+            url: OTEL_TRACES_URL,
+            headers: {},
+            timeoutMillis: fetch_with_timeout_1.DEFAULT_FETCH_TIMEOUT,
+        })));
+        nodeTracerProvider.register();
+    }
+    send(event, data) {
+        const time = new Date();
+        const eventId = crypto.randomUUID();
+        const span = api_1.trace.getTracer('CliTelemetry').startSpan(`event.${event}`, {
+            attributes: {
+                'cloudevents.event_client.id': eventId,
+                'cloudevents.event_client.type': event,
+            },
+            startTime: time,
+        });
+        for (const [key, value] of Object.entries(data)) {
+            const keySnakeCase = key.replace(/([A-Z])/g, '_$1').toLowerCase();
+            if (value !== undefined) {
+                span.setAttribute(`cloudevents.event_data.${keySnakeCase}`, value);
+            }
+        }
+        span.end(time);
+    }
+}
+exports.OtelServerTelemetry = OtelServerTelemetry;
+exports.otelTelemetry = new OtelServerTelemetry();

package/lib/reunite/api/__tests__/domains.test.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const domains_1 = require("../domains");
+const domains_2 = require("../domains");
+describe('getDomain()', () => {
+    afterEach(() => {
+        delete process.env.REDOCLY_DOMAIN;
+    });
+    it('should return the domain from environment variable', () => {
+        process.env.REDOCLY_DOMAIN = 'test-domain';
+        expect((0, domains_1.getDomain)()).toBe('test-domain');
+    });
+    it('should return the default domain if no domain provided', () => {
+        process.env.REDOCLY_DOMAIN = '';
+        expect((0, domains_1.getDomain)()).toBe('https://app.cloud.redocly.com');
+    });
+});
+describe('getReuniteUrl()', () => {
+    it('should return US API URL when US region specified', () => {
+        expect((0, domains_2.getReuniteUrl)('us')).toBe('https://app.cloud.redocly.com/api');
+    });
+    it('should return EU API URL when EU region specified', () => {
+        expect((0, domains_2.getReuniteUrl)('eu')).toBe('https://app.cloud.eu.redocly.com/api');
+    });
+    it('should return custom domain API URL when custom domain specified', () => {
+        const customDomain = 'https://custom.domain.com';
+        expect((0, domains_2.getReuniteUrl)(customDomain)).toBe('https://custom.domain.com/api');
+    });
+    it('should return US API URL when no region specified', () => {
+        expect((0, domains_2.getReuniteUrl)()).toBe('https://app.cloud.redocly.com/api');
+    });
+});

package/lib/{cms → reunite}/api/api-client.d.ts

@@ -15,6 +15,15 @@ export declare class ReuniteApiError extends Error {
     status: number;
     constructor(message: string, status: number);
 }
+export declare class ReuniteApiClient implements BaseApiClient {
+    protected version: string;
+    protected command: string;
+    sunsetWarnings: SunsetWarningsBuffer;
+    constructor(version: string, command: string);
+    request(url: string, options: FetchWithTimeoutOptions): Promise<Response>;
+    private collectSunsetWarning;
+    private getSunsetDate;
+}
 declare class RemotesApi {
     private client;
     private readonly domain;

package/lib/{cms → reunite}/api/api-client.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ReuniteApi = exports.ReuniteApiError = void 0;
+exports.ReuniteApi = exports.ReuniteApiClient = exports.ReuniteApiError = void 0;
 exports.streamToBuffer = streamToBuffer;
 const colorette_1 = require("colorette");
 const fetch_with_timeout_1 = require("../../utils/fetch-with-timeout");
@@ -59,6 +59,7 @@ class ReuniteApiClient {
         return Date.parse(sunsetDate);
     }
 }
+exports.ReuniteApiClient = ReuniteApiClient;
 class RemotesApi {
     constructor(client, domain, apiKey) {
         this.client = client;

package/lib/reunite/api/domains.d.ts

@@ -0,0 +1,4 @@
+import type { Region } from '@redocly/openapi-core';
+export declare const REUNITE_URLS: Record<Region, string>;
+export declare function getDomain(): string;
+export declare function getReuniteUrl(residency?: string): string;

package/lib/reunite/api/domains.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.REUNITE_URLS = void 0;
+exports.getDomain = getDomain;
+exports.getReuniteUrl = getReuniteUrl;
+exports.REUNITE_URLS = {
+    us: 'https://app.cloud.redocly.com',
+    eu: 'https://app.cloud.eu.redocly.com',
+};
+function getDomain() {
+    return process.env.REDOCLY_DOMAIN || exports.REUNITE_URLS.us;
+}
+function getReuniteUrl(residency) {
+    if (!residency)
+        residency = 'us';
+    let reuniteUrl = exports.REUNITE_URLS[residency];
+    if (!reuniteUrl) {
+        reuniteUrl = residency;
+    }
+    const url = new URL('/api', reuniteUrl).toString();
+    return url;
+}

package/lib/reunite/commands/__tests__/push.test.d.ts

@@ -0,0 +1 @@
+export {};

package/lib/reunite/commands/__tests__/utils.test.d.ts

@@ -0,0 +1 @@
+export {};

package/lib/types.d.ts

@@ -1,16 +1,17 @@
 import type { BundleOutputFormat, Region, Config, RuleSeverity } from '@redocly/openapi-core';
+import type { RespectOptions, GenerateArazzoFileOptions } from '@redocly/respect-core';
 import type { ArgumentsCamelCase } from 'yargs';
 import type { LintOptions } from './commands/lint';
 import type { BundleOptions } from './commands/bundle';
 import type { JoinOptions } from './commands/join';
-import type { LoginOptions } from './commands/login';
+import type { LoginOptions, LogoutOptions } from './commands/auth';
 import type { PushOptions } from './commands/push';
 import type { StatsOptions } from './commands/stats';
 import type { SplitOptions } from './commands/split';
 import type { PreviewDocsOptions } from './commands/preview-docs';
 import type { BuildDocsArgv } from './commands/build-docs/types';
-import type { PushOptions as CMSPushOptions } from './cms/commands/push';
-import type { PushStatusOptions } from './cms/commands/push-status';
+import type { PushOptions as CMSPushOptions } from './reunite/commands/push';
+import type { PushStatusOptions } from './reunite/commands/push-status';
 import type { PreviewProjectOptions } from './commands/preview-project/types';
 import type { TranslationsOptions } from './commands/translations';
 import type { EjectOptions } from './commands/eject';
@@ -27,7 +28,7 @@ export type Entrypoint = {
 export declare const outputExtensions: ReadonlyArray<BundleOutputFormat>;
 export type OutputExtensions = 'json' | 'yaml' | 'yml' | undefined;
 export declare const regionChoices: ReadonlyArray<Region>;
-export type CommandOptions = StatsOptions | SplitOptions | JoinOptions | PushOptions | CMSPushOptions | LintOptions | BundleOptions | LoginOptions | PreviewDocsOptions | BuildDocsArgv | PushStatusOptions | PreviewProjectOptions | TranslationsOptions | EjectOptions;
+export type CommandOptions = StatsOptions | SplitOptions | JoinOptions | PushOptions | CMSPushOptions | LintOptions | BundleOptions | LoginOptions | LogoutOptions | PreviewDocsOptions | BuildDocsArgv | PushStatusOptions | PreviewProjectOptions | TranslationsOptions | EjectOptions | RespectOptions | GenerateArazzoFileOptions;
 export type VerifyConfigOptions = {
     config?: string;
     'lint-config'?: RuleSeverity;

package/lib/utils/miscellaneous.d.ts

@@ -59,17 +59,18 @@ export type ExitCode = 0 | 1 | 2;
 export type Analytics = {
     event: string;
     event_time: string;
-    logged_in: boolean;
-    command: string | number;
-    arguments: Record<string, unknown>;
+    logged_in: 'yes' | 'no';
+    command: string;
+    arguments: string;
     node_version: string;
     npm_version: string;
+    os_platform: string;
     version: string;
     exit_code: ExitCode;
     environment?: string;
     environment_ci?: string;
     raw_input: string;
-    has_config?: boolean;
+    has_config?: 'yes' | 'no';
     spec_version?: string;
     spec_keyword?: string;
     spec_full_version?: string;

package/lib/utils/miscellaneous.js

@@ -37,6 +37,7 @@ const colorette_1 = require("colorette");
 const perf_hooks_1 = require("perf_hooks");
 const glob = require("glob");
 const fs = require("fs");
+const os = require("os");
 const readline = require("readline");
 const stream_1 = require("stream");
 const child_process_1 = require("child_process");
@@ -48,7 +49,7 @@ const reference_docs_config_schema_1 = require("@redocly/config/lib/reference-do
 const types_1 = require("../types");
 const update_version_notifier_1 = require("./update-version-notifier");
 const push_1 = require("../commands/push");
-const fetch_with_timeout_1 = require("./fetch-with-timeout");
+const api_1 = require("../reunite/api");
 async function getFallbackApisOrExit(argsApis, config) {
     const { apis } = config;
     const shouldFallbackToAllDefinitions = !(0, utils_1.isNotEmptyArray)(argsApis) && (0, utils_1.isNotEmptyObject)(apis);
@@ -448,33 +449,32 @@ async function sendTelemetry(argv, exit_code, has_config, spec_version, spec_key
         const { _: [command], $0: _, ...args } = argv;
         const event_time = new Date().toISOString();
         const redoclyClient = new openapi_core_1.RedoclyClient();
-        const logged_in = redoclyClient.hasTokens();
+        const { RedoclyOAuthClient } = await Promise.resolve().then(() => require('../auth/oauth-client'));
+        const oauthClient = new RedoclyOAuthClient('redocly-cli', update_version_notifier_1.version);
+        const reuniteUrl = (0, api_1.getReuniteUrl)(argv.residency);
+        const logged_in = redoclyClient.hasTokens() || (await oauthClient.isAuthorized(reuniteUrl));
         const data = {
             event: 'cli_command',
             event_time,
-            logged_in,
-            command,
-            arguments: cleanArgs(args),
+            logged_in: logged_in ? 'yes' : 'no',
+            command: `${command}`,
+            arguments: JSON.stringify(cleanArgs(args)),
             node_version: process.version,
             npm_version: (0, child_process_1.execSync)('npm -v').toString().replace('\n', ''),
+            os_platform: os.platform(),
             version: update_version_notifier_1.version,
             exit_code,
             environment: process.env.REDOCLY_ENVIRONMENT,
             environment_ci: process.env.CI,
             raw_input: cleanRawInput(process.argv.slice(2)),
-            has_config,
+            has_config: has_config ? 'yes' : 'no',
             spec_version,
             spec_keyword,
             spec_full_version,
         };
-        await (0, fetch_with_timeout_1.default)(`https://api.redocly.com/registry/telemetry/cli`, {
-            timeout: fetch_with_timeout_1.DEFAULT_FETCH_TIMEOUT,
-            method: 'POST',
-            headers: {
-                'content-type': 'application/json',
-            },
-            body: JSON.stringify(data),
-        });
+        const { otelTelemetry } = await Promise.resolve().then(() => require('../otel'));
+        otelTelemetry.init();
+        otelTelemetry.send(data.command, data);
     }
     catch (err) {
         // Do nothing.

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@redocly/cli",
-  "version": "1.29.0",
+  "version": "1.31.0",
   "description": "",
   "license": "MIT",
   "bin": {
-    "openapi": "bin/cli.js",
-    "redocly": "bin/cli.js"
+    "redocly": "bin/cli.js",
+    "openapi": "bin/cli.js"
   },
   "engines": {
     "node": ">=18.17.0",
@@ -30,22 +30,29 @@
     "OpenAPI linter",
     "Swagger linter",
     "AsyncAPI linter",
+    "Arazzo linter",
     "oas"
   ],
   "contributors": [
     "Roman Hotsiy <roman@redocly.com> (https://redocly.com/)"
   ],
   "dependencies": {
-    "@redocly/openapi-core": "1.29.0",
+    "@redocly/openapi-core": "1.31.0",
     "abort-controller": "^3.0.0",
     "chokidar": "^3.5.1",
     "colorette": "^1.2.0",
     "core-js": "^3.32.1",
+    "dotenv": "^16.4.7",
     "form-data": "^4.0.0",
     "get-port-please": "^3.0.1",
     "glob": "^7.1.6",
     "handlebars": "^4.7.6",
     "mobx": "^6.0.4",
+    "@opentelemetry/api": "1.9.0",
+    "@opentelemetry/exporter-trace-otlp-http": "0.53.0",
+    "@opentelemetry/resources": "1.26.0",
+    "@opentelemetry/sdk-trace-node": "1.26.0",
+    "@opentelemetry/semantic-conventions": "1.27.0",
     "pluralize": "^8.0.0",
     "react": "^17.0.0 || ^18.2.0 || ^19.0.0",
     "react-dom": "^17.0.0 || ^18.2.0 || ^19.0.0",

package/src/__tests__/commands/push-region.test.ts

@@ -1,6 +1,6 @@
 import { getMergedConfig } from '@redocly/openapi-core';
 import { handlePush } from '../../commands/push';
-import { promptClientToken } from '../../commands/login';
+import { promptClientToken } from '../../commands/auth';
 import { ConfigFixture } from '../fixtures/config';
 import { Readable } from 'node:stream';
 
@@ -23,7 +23,7 @@ jest.mock('fs', () => ({
 
 // Mock OpenAPI core
 jest.mock('@redocly/openapi-core');
-jest.mock('../../commands/login');
+jest.mock('../../commands/auth');
 jest.mock('../../utils/miscellaneous');
 
 const mockPromptClientToken = promptClientToken as jest.MockedFunction<typeof promptClientToken>;

package/src/auth/__tests__/device-flow.test.ts

@@ -0,0 +1,73 @@
+import { RedoclyOAuthDeviceFlow } from '../device-flow';
+
+jest.mock('child_process');
+
+describe('RedoclyOAuthDeviceFlow', () => {
+  const mockBaseUrl = 'https://test.redocly.com';
+  const mockClientName = 'test-client';
+  const mockVersion = '1.0.0';
+  let flow: RedoclyOAuthDeviceFlow;
+
+  beforeEach(() => {
+    flow = new RedoclyOAuthDeviceFlow(mockBaseUrl, mockClientName, mockVersion);
+    jest.resetAllMocks();
+  });
+
+  describe('verifyToken', () => {
+    it('returns true for valid token', async () => {
+      jest.spyOn(flow['apiClient'], 'request').mockResolvedValue({
+        json: () => Promise.resolve({ user: { id: '123' } }),
+      } as Response);
+
+      const result = await flow.verifyToken('valid-token');
+      expect(result).toBe(true);
+    });
+
+    it('returns false for invalid token', async () => {
+      jest.spyOn(flow['apiClient'], 'request').mockRejectedValue(new Error('Invalid token'));
+      const result = await flow.verifyToken('invalid-token');
+      expect(result).toBe(false);
+    });
+  });
+
+  describe('verifyApiKey', () => {
+    it('returns true for valid API key', async () => {
+      jest.spyOn(flow['apiClient'], 'request').mockResolvedValue({
+        json: () => Promise.resolve({ success: true }),
+      } as Response);
+
+      const result = await flow.verifyApiKey('valid-key');
+      expect(result).toBe(true);
+    });
+
+    it('returns false for invalid API key', async () => {
+      jest.spyOn(flow['apiClient'], 'request').mockRejectedValue(new Error('Invalid API key'));
+      const result = await flow.verifyApiKey('invalid-key');
+      expect(result).toBe(false);
+    });
+  });
+
+  describe('refreshToken', () => {
+    it('successfully refreshes token', async () => {
+      const mockResponse = {
+        access_token: 'new-token',
+        refresh_token: 'new-refresh',
+        expires_in: 3600,
+      };
+      jest.spyOn(flow['apiClient'], 'request').mockResolvedValue({
+        json: () => Promise.resolve(mockResponse),
+      } as Response);
+
+      const result = await flow.refreshToken('old-refresh-token');
+      expect(result).toEqual(mockResponse);
+    });
+
+    it('throws error when refresh fails', async () => {
+      jest.spyOn(flow['apiClient'], 'request').mockResolvedValue({
+        json: () => Promise.resolve({}),
+      } as Response);
+
+      await expect(flow.refreshToken('invalid-refresh')).rejects.toThrow('Failed to refresh token');
+    });
+  });
+});