@reshapr/reshapr-cli 0.0.4 → 0.0.6

package/dist/commands/login.js

@@ -26,11 +26,28 @@ export const loginCommand = new Command('login')
     .description(`Login to ${CLI_LABEL}`)
     .option('-u, --username <username>', `Your ${CLI_LABEL} username`)
     .option('-p, --password <password>', `Your ${CLI_LABEL} password`)
-    .option('-t, --token <token>', `Your ${CLI_LABEL} authentication token`)
     .option('-o, --org <org>', `Your ${CLI_LABEL} organization name`)
-    .option('-s, --server <server>', `Your ${CLI_LABEL} Control Plane URL`, 'https://app.resphar.io')
+    .option('-s, --server <server>', `Your ${CLI_LABEL} Control Plane URL`, 'https://try.reshapr.io')
     .option('-k, --insecure', 'Skip SSL certificate validation')
+    .option('--password-stdin', 'Read password from stdin')
     .action(async (options) => {
+    // Validate that --password and --password-stdin are not both provided.
+    if (options.password && options.passwordStdin) {
+        Logger.error('--password and --password-stdin are mutually exclusive.');
+        process.exit(1);
+    }
+    // If --password-stdin is set, read the password from stdin.
+    if (options.passwordStdin) {
+        if (process.stdin.isTTY) {
+            Logger.error('Error: --password-stdin requires piped input (e.g. echo "password" | reshapr login --password-stdin -u user)');
+            process.exit(1);
+        }
+        options.password = await readFromStdin();
+        if (!options.password) {
+            Logger.error('Error: password is empty when reading from stdin.');
+            process.exit(1);
+        }
+    }
     // First validate server URL and fetch server configuration.
     const configResponse = await fetch(`${options.server}/api/config`, {
         method: 'GET'
@@ -50,6 +67,15 @@ export const loginCommand = new Command('login')
         await handleSaaSLogin(options);
     }
 });
+function readFromStdin() {
+    return new Promise((resolve, reject) => {
+        let data = '';
+        process.stdin.setEncoding('utf8');
+        process.stdin.on('data', (chunk) => { data += chunk; });
+        process.stdin.on('end', () => { resolve(data.trim()); });
+        process.stdin.on('error', (err) => { reject(err); });
+    });
+}
 async function handleOnPremisesLogin(options) {
     // Handle on-premises login logic here if needed.
     if (!options.username) {

package/dist/commands/run.js

@@ -88,13 +88,13 @@ async function downloadComposeFile(release, destPath) {
     let content = await response.text();
     // Replace image tags with the requested release.
     content = content.replace(/(quay\.io\/reshapr\/[^:]+):[\w.-]+/g, `$1:${release}`);
-    fs.mkdirSync(RESHAPR_DIR, { recursive: true });
-    fs.writeFileSync(destPath, content, 'utf-8');
+    fs.mkdirSync(RESHAPR_DIR, { recursive: true, mode: 0o700 });
+    fs.writeFileSync(destPath, content, { encoding: 'utf-8', mode: 0o600 });
     Logger.success(`Compose file saved to ${destPath}`);
 }
 function saveRunState(release, composeFile) {
     const state = { release, composeFile, startedAt: new Date().toISOString() };
-    fs.writeFileSync(RUN_STATE_FILE, JSON.stringify(state, null, 2), 'utf-8');
+    fs.writeFileSync(RUN_STATE_FILE, JSON.stringify(state, null, 2), { encoding: 'utf-8', mode: 0o600 });
 }
 export function readRunState() {
     if (!fs.existsSync(RUN_STATE_FILE)) {

package/dist/utils/config.js

@@ -23,7 +23,7 @@ export class ConfigUtil {
     static writeConfig(config) {
         if (!fs.existsSync(ConfigUtil.configPath)) {
             try {
-                fs.mkdirSync(`${os.homedir()}/.${CLI_NAME}`, { recursive: true });
+                fs.mkdirSync(`${os.homedir()}/.${CLI_NAME}`, { recursive: true, mode: 0o700 });
             }
             catch (err) {
                 Logger.error('Failed to create config directory: ' + err);
@@ -48,7 +48,7 @@ export class ConfigUtil {
                 Logger.error('Failed to parse token: ' + err);
             }
         }
-        fs.writeFileSync(ConfigUtil.configPath, JSON.stringify(config, null, 2));
+        fs.writeFileSync(ConfigUtil.configPath, JSON.stringify(config, null, 2), { mode: 0o600 });
         Logger.success(`Configuration saved to ${ConfigUtil.configPath}`);
         ConfigUtil.config = config;
     }

package/dist/utils/editor.js

@@ -25,7 +25,7 @@ export async function openUpdateEditor(initialContent, onChanged) {
     const tempDir = os.tmpdir();
     const tempFile = path.join(tempDir, `${CLI_NAME}-update.json`);
     const initialData = JSON.stringify(initialContent, null, 2);
-    await fs.writeFile(tempFile, initialData, 'utf8');
+    await fs.writeFile(tempFile, initialData, { encoding: 'utf-8', mode: 0o600 });
     // Get the initial modification time
     const statsBefore = await fs.stat(tempFile);
     const mtimeBefore = statsBefore.mtime.getTime();

package/dist/version.js

@@ -1 +1 @@
-export const CLI_VERSION = "0.0.4";
+export const CLI_VERSION = "0.0.6";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reshapr/reshapr-cli",
-  "version": "0.0.4",
+  "version": "0.0.6",
   "description": "CLI for reshapr.io - The MCP Gateway for AI-Native API Access!",
   "type": "module",
   "main": "src/cli.ts",
@@ -24,12 +24,13 @@
     "lint": "eslint src/**/*.ts"
   },
   "dependencies": {
+    "@scarf/scarf": "^1.4.0",
     "chalk": "^5.4.1",
     "commander": "^14.0.0",
     "get-port": "^7.1.0",
     "inquirer": "^12.7.0",
     "js-yaml": "^4.1.0",
-    "open": "^10.2.0",
+    "open": "^11.0.0",
     "yocto-spinner": "^1.0.0"
   },
   "devDependencies": {