@reporting-bi/cli 0.0.21 → 0.1.0

package/dist/index.js

@@ -9557,12 +9557,12 @@ var require_dist2 = __commonJS({
         throw new Error(`Unknown format "${name}"`);
       return f;
     };
-    function addFormats(ajv, list7, fs7, exportName) {
+    function addFormats(ajv, list7, fs8, exportName) {
       var _a2;
       var _b;
       (_a2 = (_b = ajv.opts.code).formats) !== null && _a2 !== void 0 ? _a2 : _b.formats = (0, codegen_1._)`require("ajv-formats/dist/formats").${exportName}`;
       for (const f of list7)
-        ajv.addFormat(f, fs7[f]);
+        ajv.addFormat(f, fs8[f]);
     }
     module2.exports = exports2 = formatsPlugin;
     Object.defineProperty(exports2, "__esModule", { value: true });
@@ -9572,12 +9572,12 @@ var require_dist2 = __commonJS({
 
 // src/commands/login.ts
 var http = __toESM(require("node:http"));
-var import_node_child_process = require("node:child_process");
+var import_node_child_process2 = require("node:child_process");
 
 // src/config.ts
-var fs = __toESM(require("node:fs"));
+var fs2 = __toESM(require("node:fs"));
 var path = __toESM(require("node:path"));
-var os = __toESM(require("node:os"));
+var os2 = __toESM(require("node:os"));
 
 // ../rp-auth-client-v2/dist/client.js
 var DEFAULT_OPTIONS = {
@@ -9784,28 +9784,87 @@ var ReportingAuthClient = class {
 
 // src/config.ts
 var import_rp_client = __toESM(require_dist());
-var CONFIG_DIR = path.join(os.homedir(), ".config", "reporting-bi");
+
+// src/crypto.ts
+var crypto = __toESM(require("node:crypto"));
+var fs = __toESM(require("node:fs"));
+var os = __toESM(require("node:os"));
+var import_node_child_process = require("node:child_process");
+var SALT = "reporting-bi-credentials";
+var ALGORITHM = "aes-256-gcm";
+function getMachineId() {
+  try {
+    switch (process.platform) {
+      case "linux":
+        return fs.readFileSync("/etc/machine-id", "utf-8").trim();
+      case "darwin":
+        return (0, import_node_child_process.execSync)("ioreg -rd1 -c IOPlatformExpertDevice", { encoding: "utf-8" }).match(/"IOPlatformUUID"\s*=\s*"([^"]+)"/)?.[1] ?? os.hostname();
+      case "win32":
+        return (0, import_node_child_process.execSync)("reg query HKLM\\SOFTWARE\\Microsoft\\Cryptography /v MachineGuid", { encoding: "utf-8" }).match(/MachineGuid\s+REG_SZ\s+(.+)/)?.[1]?.trim() ?? os.hostname();
+      default:
+        return os.hostname();
+    }
+  } catch {
+    return os.hostname();
+  }
+}
+function deriveKey() {
+  return crypto.scryptSync(getMachineId(), SALT, 32);
+}
+function encrypt(plaintext) {
+  const key = deriveKey();
+  const iv = crypto.randomBytes(12);
+  const cipher = crypto.createCipheriv(ALGORITHM, key, iv);
+  const encrypted = Buffer.concat([cipher.update(plaintext, "utf-8"), cipher.final()]);
+  const tag = cipher.getAuthTag();
+  return JSON.stringify({
+    encrypted: true,
+    iv: iv.toString("base64"),
+    tag: tag.toString("base64"),
+    data: encrypted.toString("base64")
+  });
+}
+function decrypt(ciphertext) {
+  const { iv, tag, data } = JSON.parse(ciphertext);
+  const key = deriveKey();
+  const decipher = crypto.createDecipheriv(ALGORITHM, key, Buffer.from(iv, "base64"));
+  decipher.setAuthTag(Buffer.from(tag, "base64"));
+  return Buffer.concat([decipher.update(Buffer.from(data, "base64")), decipher.final()]).toString("utf-8");
+}
+function isEncrypted(content2) {
+  try {
+    const parsed = JSON.parse(content2);
+    return parsed.encrypted === true;
+  } catch {
+    return false;
+  }
+}
+
+// src/config.ts
+var CONFIG_DIR = path.join(os2.homedir(), ".config", "reporting-bi");
 var CREDENTIALS_FILE = path.join(CONFIG_DIR, "credentials.json");
 var CLIENT_ID = "0D6693D4-4358-4C08-BA80-A94A97B7F47C";
 var CLIENT_SECRET = "48481427819bb41798bd74fa109c90b184ca4d64d20e60dfbe8430299f06f73e";
 function loadCredentials() {
   try {
-    const data = fs.readFileSync(CREDENTIALS_FILE, "utf-8");
+    const raw = fs2.readFileSync(CREDENTIALS_FILE, "utf-8");
+    const data = isEncrypted(raw) ? decrypt(raw) : raw;
     return JSON.parse(data);
   } catch {
     return { active: null, connections: {} };
   }
 }
 function saveCredentials(data) {
-  fs.mkdirSync(CONFIG_DIR, { recursive: true, mode: 448 });
-  fs.writeFileSync(CREDENTIALS_FILE, JSON.stringify(data, null, 2), { mode: 384 });
+  fs2.mkdirSync(CONFIG_DIR, { recursive: true, mode: 448 });
+  const content2 = encrypt(JSON.stringify(data, null, 2));
+  fs2.writeFileSync(CREDENTIALS_FILE, content2, { mode: 384 });
 }
 function findLocalConfig(startDir) {
   let dir = path.resolve(startDir || process.cwd());
   while (true) {
     const configPath = path.join(dir, ".rpbi", "config.json");
     try {
-      const data = JSON.parse(fs.readFileSync(configPath, "utf-8"));
+      const data = JSON.parse(fs2.readFileSync(configPath, "utf-8"));
       if (data.domain) return { domain: data.domain, accounting: data.accounting };
     } catch {
     }
@@ -10093,7 +10152,7 @@ function renderCallback(status3, title, message) {
 function openBrowser(url2) {
   const platform = process.platform;
   const cmd = platform === "darwin" ? "open" : platform === "win32" ? 'start ""' : "xdg-open";
-  (0, import_node_child_process.exec)(`${cmd} ${JSON.stringify(url2)}`);
+  (0, import_node_child_process2.exec)(`${cmd} ${JSON.stringify(url2)}`);
 }
 async function login(args) {
   const { positional, flags } = parseArgs(args);
@@ -10272,7 +10331,7 @@ async function use(args) {
 }
 
 // src/commands/wiki.ts
-var fs2 = __toESM(require("node:fs"));
+var fs3 = __toESM(require("node:fs"));
 var DEFAULT_LANG = "cs";
 async function list2(flags) {
   const service = await createService("wiki");
@@ -10298,7 +10357,7 @@ async function search(query, flags) {
 }
 async function readContent(flags) {
   if (flags.file) {
-    return fs2.readFileSync(flags.file, "utf-8");
+    return fs3.readFileSync(flags.file, "utf-8");
   }
   if (flags.content) {
     return flags.content;
@@ -10372,21 +10431,21 @@ async function wiki(args) {
 }
 
 // src/commands/etl.ts
-var fs5 = __toESM(require("node:fs"));
+var fs6 = __toESM(require("node:fs"));
 
 // src/commands/etl-sync.ts
-var fs4 = __toESM(require("node:fs"));
+var fs5 = __toESM(require("node:fs"));
 var path3 = __toESM(require("node:path"));
 
 // src/manifest.ts
-var fs3 = __toESM(require("node:fs"));
+var fs4 = __toESM(require("node:fs"));
 var path2 = __toESM(require("node:path"));
-var crypto = __toESM(require("node:crypto"));
+var crypto2 = __toESM(require("node:crypto"));
 var RPBI_DIR = ".rpbi";
 var CONFIG_FILE = "config.json";
 var INDEX_FILE = "index.json";
 function computeHash(content2) {
-  return crypto.createHash("sha256").update(content2, "utf-8").digest("hex");
+  return crypto2.createHash("sha256").update(content2, "utf-8").digest("hex");
 }
 function getConfigPath(dir) {
   return path2.join(dir, RPBI_DIR, CONFIG_FILE);
@@ -10396,7 +10455,7 @@ function getIndexPath(dir) {
 }
 function readConfig(dir) {
   try {
-    const data = fs3.readFileSync(getConfigPath(dir), "utf-8");
+    const data = fs4.readFileSync(getConfigPath(dir), "utf-8");
     return JSON.parse(data);
   } catch {
     return null;
@@ -10404,15 +10463,15 @@ function readConfig(dir) {
 }
 function writeConfig(dir, config2) {
   const rpbiDir = path2.join(dir, RPBI_DIR);
-  fs3.mkdirSync(rpbiDir, { recursive: true });
-  fs3.writeFileSync(
+  fs4.mkdirSync(rpbiDir, { recursive: true });
+  fs4.writeFileSync(
     path2.join(rpbiDir, CONFIG_FILE),
     JSON.stringify(config2, null, 2)
   );
 }
 function readIndex(dir) {
   try {
-    const data = fs3.readFileSync(getIndexPath(dir), "utf-8");
+    const data = fs4.readFileSync(getIndexPath(dir), "utf-8");
     return JSON.parse(data);
   } catch {
     return [];
@@ -10420,8 +10479,8 @@ function readIndex(dir) {
 }
 function writeIndex(dir, index) {
   const rpbiDir = path2.join(dir, RPBI_DIR);
-  fs3.mkdirSync(rpbiDir, { recursive: true });
-  fs3.writeFileSync(
+  fs4.mkdirSync(rpbiDir, { recursive: true });
+  fs4.writeFileSync(
     path2.join(rpbiDir, INDEX_FILE),
     JSON.stringify(index, null, 2)
   );
@@ -10429,7 +10488,7 @@ function writeIndex(dir, index) {
 function findEtlRoot(startDir) {
   let dir = path2.resolve(startDir);
   while (true) {
-    if (fs3.existsSync(getConfigPath(dir))) return dir;
+    if (fs4.existsSync(getConfigPath(dir))) return dir;
     const parent = path2.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
@@ -10564,8 +10623,8 @@ function threadToMetaPath(thread) {
   return [".rpbi", "threads", typeToDirName(thread.type), ...segments].join("/");
 }
 function writeFileSync4(filePath, content2) {
-  fs4.mkdirSync(path3.dirname(filePath), { recursive: true });
-  fs4.writeFileSync(filePath, content2, "utf-8");
+  fs5.mkdirSync(path3.dirname(filePath), { recursive: true });
+  fs5.writeFileSync(filePath, content2, "utf-8");
 }
 function stripFields(obj, excludeFields) {
   const result = {};
@@ -10681,11 +10740,11 @@ async function push(flags, files) {
   console.log(`Pushing ${filesToPush.length} file(s)...`);
   for (const relPath of filesToPush) {
     const absPath = path3.join(root, relPath);
-    if (!fs4.existsSync(absPath)) {
+    if (!fs5.existsSync(absPath)) {
       console.log(`  Skipping ${relPath} (file not found)`);
       continue;
     }
-    const localContent = fs4.readFileSync(absPath, "utf-8");
+    const localContent = fs5.readFileSync(absPath, "utf-8");
     const entry = indexMap.get(relPath);
     if (entry) {
       if (!force) {
@@ -10779,11 +10838,11 @@ function detectModifiedFiles(root, index) {
   const modified = [];
   for (const entry of index) {
     const absPath = path3.join(root, entry.path);
-    if (!fs4.existsSync(absPath)) {
+    if (!fs5.existsSync(absPath)) {
       modified.push(entry.path);
       continue;
     }
-    const content2 = fs4.readFileSync(absPath, "utf-8");
+    const content2 = fs5.readFileSync(absPath, "utf-8");
     if (computeHash(content2) !== entry.hash) {
       modified.push(entry.path);
     }
@@ -10793,7 +10852,7 @@ function detectModifiedFiles(root, index) {
 function detectNewFiles(root, index) {
   const newFiles = [];
   const knownPaths = new Set(index.map((e) => e.path));
-  const entries = fs4.readdirSync(root, { withFileTypes: true });
+  const entries = fs5.readdirSync(root, { withFileTypes: true });
   for (const entry of entries) {
     if (!entry.isDirectory() || entry.name.startsWith(".")) continue;
     walkDir(path3.join(root, entry.name), root, knownPaths, newFiles);
@@ -10801,7 +10860,7 @@ function detectNewFiles(root, index) {
   return newFiles;
 }
 function walkDir(dir, root, knownPaths, result) {
-  const entries = fs4.readdirSync(dir, { withFileTypes: true });
+  const entries = fs5.readdirSync(dir, { withFileTypes: true });
   for (const entry of entries) {
     const full = path3.join(dir, entry.name);
     if (entry.isDirectory()) {
@@ -10829,8 +10888,8 @@ async function status2(flags) {
   console.log("");
   const modified = detectModifiedFiles(root, index);
   const newFiles = detectNewFiles(root, index);
-  const deleted = modified.filter((f) => !fs4.existsSync(path3.join(root, f)));
-  const changed = modified.filter((f) => fs4.existsSync(path3.join(root, f)));
+  const deleted = modified.filter((f) => !fs5.existsSync(path3.join(root, f)));
+  const changed = modified.filter((f) => fs5.existsSync(path3.join(root, f)));
   if (changed.length === 0 && newFiles.length === 0 && deleted.length === 0) {
     console.log("No changes.");
     return;
@@ -10867,10 +10926,10 @@ async function content(id, flags) {
   process.stdout.write(text2 || "");
 }
 async function exec2(id, flags) {
-  const service = await createService("etl");
+  const service = await createService("etl", { cwd: flags.dir || "." });
   let body = void 0;
   if (flags.file) {
-    body = fs5.readFileSync(flags.file, "utf-8");
+    body = fs6.readFileSync(flags.file, "utf-8");
   } else if (flags.sql) {
     body = flags.sql;
   }
@@ -10902,7 +10961,7 @@ async function etl(args) {
       return content(rest[0], flags);
     case "exec":
       if (!rest[0]) {
-        console.error('Usage: rpbi etl exec <id> [--sql "..."] [--file path]');
+        console.error('Usage: rpbi etl exec <id> [--file path] [--sql "..."]');
         process.exit(1);
       }
       return exec2(rest[0], flags);
@@ -16421,7 +16480,7 @@ __export(regexes_exports, {
   extendedDuration: () => extendedDuration,
   guid: () => guid,
   hex: () => hex,
-  hostname: () => hostname,
+  hostname: () => hostname2,
   html5Email: () => html5Email,
   idnEmail: () => idnEmail,
   integer: () => integer,
@@ -16498,7 +16557,7 @@ var cidrv4 = /^((25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(25[0-5]
 var cidrv6 = /^(([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|::|([0-9a-fA-F]{1,4})?::([0-9a-fA-F]{1,4}:?){0,6})\/(12[0-8]|1[01][0-9]|[1-9]?[0-9])$/;
 var base64 = /^$|^(?:[0-9a-zA-Z+/]{4})*(?:(?:[0-9a-zA-Z+/]{2}==)|(?:[0-9a-zA-Z+/]{3}=))?$/;
 var base64url = /^[A-Za-z0-9_-]*$/;
-var hostname = /^(?=.{1,253}\.?$)[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[-0-9a-zA-Z]{0,61}[0-9a-zA-Z])?)*\.?$/;
+var hostname2 = /^(?=.{1,253}\.?$)[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[-0-9a-zA-Z]{0,61}[0-9a-zA-Z])?)*\.?$/;
 var domain = /^([a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\.)+[a-zA-Z]{2,}$/;
 var e164 = /^\+[1-9]\d{6,14}$/;
 var dateSource = `(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))`;
@@ -27085,7 +27144,7 @@ __export(external_exports3, {
   guid: () => guid2,
   hash: () => hash,
   hex: () => hex2,
-  hostname: () => hostname2,
+  hostname: () => hostname3,
   httpUrl: () => httpUrl,
   includes: () => _includes,
   instanceof: () => _instanceof,
@@ -27297,7 +27356,7 @@ __export(schemas_exports3, {
   guid: () => guid2,
   hash: () => hash,
   hex: () => hex2,
-  hostname: () => hostname2,
+  hostname: () => hostname3,
   httpUrl: () => httpUrl,
   instanceof: () => _instanceof,
   int: () => int,
@@ -27801,7 +27860,7 @@ var ZodCustomStringFormat = /* @__PURE__ */ $constructor("ZodCustomStringFormat"
 function stringFormat(format, fnOrRegex, _params = {}) {
   return _stringFormat(ZodCustomStringFormat, format, fnOrRegex, _params);
 }
-function hostname2(_params) {
+function hostname3(_params) {
   return _stringFormat(ZodCustomStringFormat, "hostname", regexes_exports.hostname, _params);
 }
 function hex2(_params) {
@@ -34913,19 +34972,19 @@ function init(args) {
 }
 
 // src/autoupdate.ts
-var fs6 = __toESM(require("node:fs"));
+var fs7 = __toESM(require("node:fs"));
 var path4 = __toESM(require("node:path"));
-var os2 = __toESM(require("node:os"));
+var os3 = __toESM(require("node:os"));
 var https = __toESM(require("node:https"));
-var import_node_child_process2 = require("node:child_process");
-var CONFIG_DIR2 = path4.join(os2.homedir(), ".config", "reporting-bi");
+var import_node_child_process3 = require("node:child_process");
+var CONFIG_DIR2 = path4.join(os3.homedir(), ".config", "reporting-bi");
 var UPDATE_CHECK_FILE = path4.join(CONFIG_DIR2, "update-check.json");
 var CHECK_INTERVAL = 60 * 60 * 1e3;
 var PACKAGE_NAME = "@reporting-bi/cli";
 var INSTALL_PREFIX = detectPrefix();
 function detectPrefix() {
   try {
-    const realPath = fs6.realpathSync(process.argv[1]);
+    const realPath = fs7.realpathSync(process.argv[1]);
     const libIndex = realPath.indexOf(path4.join("lib", "node_modules"));
     if (libIndex > 0) {
       const prefix = realPath.slice(0, libIndex - 1);
@@ -34941,14 +35000,14 @@ function npmInstallCmd(version2) {
 }
 function loadUpdateCheck() {
   try {
-    return JSON.parse(fs6.readFileSync(UPDATE_CHECK_FILE, "utf-8"));
+    return JSON.parse(fs7.readFileSync(UPDATE_CHECK_FILE, "utf-8"));
   } catch {
     return { lastCheck: 0 };
   }
 }
 function saveUpdateCheck(data) {
-  fs6.mkdirSync(CONFIG_DIR2, { recursive: true });
-  fs6.writeFileSync(UPDATE_CHECK_FILE, JSON.stringify(data, null, 2));
+  fs7.mkdirSync(CONFIG_DIR2, { recursive: true });
+  fs7.writeFileSync(UPDATE_CHECK_FILE, JSON.stringify(data, null, 2));
 }
 function fetchLatestVersion() {
   return new Promise((resolve4) => {
@@ -34996,7 +35055,7 @@ async function checkForUpdate() {
     if (!latest) return;
     if (!isNewer(latest, "0.0.21")) return;
     console.log(`\x1B[33mUpdating ${PACKAGE_NAME} ${"0.0.21"} \u2192 ${latest}...\x1B[0m`);
-    (0, import_node_child_process2.execSync)(npmInstallCmd(latest), { stdio: "inherit" });
+    (0, import_node_child_process3.execSync)(npmInstallCmd(latest), { stdio: "inherit" });
     console.log(`\x1B[32mUpdated to ${latest}.\x1B[0m`);
   } catch {
   }
@@ -35012,7 +35071,7 @@ async function forceUpdate() {
     return;
   }
   console.log(`Updating ${PACKAGE_NAME} ${"0.0.21"} \u2192 ${latest}...`);
-  (0, import_node_child_process2.execSync)(npmInstallCmd(latest), { stdio: "inherit" });
+  (0, import_node_child_process3.execSync)(npmInstallCmd(latest), { stdio: "inherit" });
   console.log(`\x1B[32mUpdated to ${latest}.\x1B[0m`);
   saveUpdateCheck({ lastCheck: Date.now() });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reporting-bi/cli",
-  "version": "0.0.21",
+  "version": "0.1.0",
   "license": "UNLICENSED",
   "description": "Reporting.bi CLI — command-line interface for the Reporting.bi platform",
   "main": "./dist/index.js",