@sembix/cli 1.2.1 → 1.4.0

package/dist/utils/studio-api.d.ts

@@ -0,0 +1,53 @@
+import { StudioApiClient } from '../services/studio-api-client.js';
+import type { StudioProfile, StudioAuthTokens, StartWorkflowConfiguration, WorkflowStartResponse, FetchWorkflowRunResponse, FetchWorkflowRunListItem, SearchParams } from '../types.js';
+/**
+ * Creates a Studio API client with automatic token refresh handling.
+ *
+ * This factory function:
+ * 1. Loads the specified profile (or default) and validates authentication
+ * 2. Creates a StudioApiClient instance
+ * 3. Wraps API calls to handle token refresh on 401 errors
+ *
+ * @param profileName - Optional profile name (defaults to active profile)
+ * @returns StudioApiClient instance with token refresh capability
+ * @throws Error if profile not found or tokens invalid/expired
+ */
+export declare function createStudioApiClient(profileName?: string): Promise<StudioApiClient>;
+/**
+ * Convenience function to start a workflow execution.
+ *
+ * @param projectId - Project ID containing the workflow
+ * @param workflowId - Workflow ID to execute
+ * @param startConfiguration - Workflow input configuration
+ * @param profileName - Optional profile name
+ * @returns Workflow start response with run ID and task ARN
+ */
+export declare function startWorkflow(projectId: string, workflowId: string, startConfiguration: StartWorkflowConfiguration, profileName?: string): Promise<WorkflowStartResponse>;
+/**
+ * Convenience function to get workflow run details.
+ *
+ * @param workflowId - Workflow ID
+ * @param runId - Run ID to fetch
+ * @param profileName - Optional profile name
+ * @returns Workflow run details
+ */
+export declare function getWorkflowRun(workflowId: string, runId: string, profileName?: string): Promise<FetchWorkflowRunResponse>;
+/**
+ * Convenience function to search workflow runs.
+ *
+ * @param params - Search parameters (filters, pagination, sorting)
+ * @param profileName - Optional profile name
+ * @returns List of workflow runs matching search criteria
+ */
+export declare function searchWorkflowRuns(params: SearchParams, profileName?: string): Promise<FetchWorkflowRunListItem>;
+/**
+ * Convenience function to stop a running workflow.
+ *
+ * @param projectId - Project ID containing the workflow
+ * @param workflowId - Workflow ID
+ * @param runId - Run ID to stop
+ * @param profileName - Optional profile name
+ */
+export declare function stopWorkflowRun(projectId: string, workflowId: string, runId: string, profileName?: string): Promise<void>;
+export type { StudioProfile, StudioAuthTokens, StartWorkflowConfiguration, WorkflowStartResponse, FetchWorkflowRunResponse, FetchWorkflowRunListItem, SearchParams };
+//# sourceMappingURL=studio-api.d.ts.map

package/dist/utils/studio-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"studio-api.d.ts","sourceRoot":"","sources":["../../src/utils/studio-api.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAOnE,OAAO,KAAK,EACV,aAAa,EACb,gBAAgB,EAChB,0BAA0B,EAC1B,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,EACxB,YAAY,EACb,MAAM,aAAa,CAAC;AAErB;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CA+C1F;AAED;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CACjC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,kBAAkB,EAAE,0BAA0B,EAC9C,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,qBAAqB,CAAC,CAGhC;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAClC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,wBAAwB,CAAC,CAGnC;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,YAAY,EACpB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,wBAAwB,CAAC,CAGnC;AAED;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAGf;AAGD,YAAY,EACV,aAAa,EACb,gBAAgB,EAChB,0BAA0B,EAC1B,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,EACxB,YAAY,EACb,CAAC"}

package/dist/utils/studio-api.js

@@ -0,0 +1,102 @@
+// Service layer imports
+import { StudioApiClient } from '../services/studio-api-client.js';
+import { CognitoAuthService } from '../services/cognito-auth.js';
+// Utility imports
+import { getAuthenticatedProfile, saveTokens } from './studio-config.js';
+/**
+ * Creates a Studio API client with automatic token refresh handling.
+ *
+ * This factory function:
+ * 1. Loads the specified profile (or default) and validates authentication
+ * 2. Creates a StudioApiClient instance
+ * 3. Wraps API calls to handle token refresh on 401 errors
+ *
+ * @param profileName - Optional profile name (defaults to active profile)
+ * @returns StudioApiClient instance with token refresh capability
+ * @throws Error if profile not found or tokens invalid/expired
+ */
+export async function createStudioApiClient(profileName) {
+    const { profile, tokens } = await getAuthenticatedProfile(profileName);
+    // Create base client
+    const client = new StudioApiClient(profile, tokens);
+    // Wrap client methods to handle token refresh on 401
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const originalRequest = client._makeRequest.bind(client);
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    client._makeRequest = async function (method, path, body, queryParams) {
+        try {
+            return await originalRequest(method, path, body, queryParams);
+        }
+        catch (error) {
+            // If 401 error, attempt token refresh and retry
+            const errorWithStatus = error;
+            if (errorWithStatus.statusCode === 401) {
+                try {
+                    const authService = new CognitoAuthService(profile);
+                    const newTokens = await authService.refreshTokens(tokens.refreshToken);
+                    // Save refreshed tokens
+                    await saveTokens(profile.name, newTokens);
+                    // Update client tokens
+                    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+                    client.tokens = newTokens;
+                    // Retry original request with new tokens
+                    return await originalRequest(method, path, body, queryParams);
+                }
+                catch {
+                    throw new Error(`Authentication failed and token refresh unsuccessful. Run "sembix login --profile ${profile.name}" to re-authenticate.`);
+                }
+            }
+            throw error;
+        }
+    };
+    return client;
+}
+/**
+ * Convenience function to start a workflow execution.
+ *
+ * @param projectId - Project ID containing the workflow
+ * @param workflowId - Workflow ID to execute
+ * @param startConfiguration - Workflow input configuration
+ * @param profileName - Optional profile name
+ * @returns Workflow start response with run ID and task ARN
+ */
+export async function startWorkflow(projectId, workflowId, startConfiguration, profileName) {
+    const client = await createStudioApiClient(profileName);
+    return client.startWorkflow(projectId, workflowId, startConfiguration);
+}
+/**
+ * Convenience function to get workflow run details.
+ *
+ * @param workflowId - Workflow ID
+ * @param runId - Run ID to fetch
+ * @param profileName - Optional profile name
+ * @returns Workflow run details
+ */
+export async function getWorkflowRun(workflowId, runId, profileName) {
+    const client = await createStudioApiClient(profileName);
+    return client.getWorkflowRun(workflowId, runId);
+}
+/**
+ * Convenience function to search workflow runs.
+ *
+ * @param params - Search parameters (filters, pagination, sorting)
+ * @param profileName - Optional profile name
+ * @returns List of workflow runs matching search criteria
+ */
+export async function searchWorkflowRuns(params, profileName) {
+    const client = await createStudioApiClient(profileName);
+    return client.searchWorkflowRuns(params);
+}
+/**
+ * Convenience function to stop a running workflow.
+ *
+ * @param projectId - Project ID containing the workflow
+ * @param workflowId - Workflow ID
+ * @param runId - Run ID to stop
+ * @param profileName - Optional profile name
+ */
+export async function stopWorkflowRun(projectId, workflowId, runId, profileName) {
+    const client = await createStudioApiClient(profileName);
+    return client.stopWorkflowRun(projectId, workflowId, runId);
+}
+//# sourceMappingURL=studio-api.js.map

package/dist/utils/studio-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"studio-api.js","sourceRoot":"","sources":["../../src/utils/studio-api.ts"],"names":[],"mappings":"AAAA,wBAAwB;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEjE,kBAAkB;AAClB,OAAO,EAAE,uBAAuB,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAazE;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,WAAoB;IAC9D,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,uBAAuB,CAAC,WAAW,CAAC,CAAC;IAEvE,qBAAqB;IACrB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAEpD,qDAAqD;IACrD,8DAA8D;IAC9D,MAAM,eAAe,GAAI,MAAc,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAElE,8DAA8D;IAC7D,MAAc,CAAC,YAAY,GAAG,KAAK,WAClC,MAAc,EACd,IAAY,EACZ,IAAc,EACd,WAAqC;QAErC,IAAI,CAAC;YACH,OAAO,MAAM,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,gDAAgD;YAChD,MAAM,eAAe,GAAG,KAAgC,CAAC;YACzD,IAAI,eAAe,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;gBACvC,IAAI,CAAC;oBACH,MAAM,WAAW,GAAG,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAC;oBACpD,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;oBAEvE,wBAAwB;oBACxB,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;oBAE1C,uBAAuB;oBACvB,8DAA8D;oBAC7D,MAAc,CAAC,MAAM,GAAG,SAAS,CAAC;oBAEnC,yCAAyC;oBACzC,OAAO,MAAM,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;gBAChE,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,IAAI,KAAK,CACb,qFAAqF,OAAO,CAAC,IAAI,uBAAuB,CACzH,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,SAAiB,EACjB,UAAkB,EAClB,kBAA8C,EAC9C,WAAoB;IAEpB,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAAkB,EAClB,KAAa,EACb,WAAoB;IAEpB,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAoB,EACpB,WAAoB;IAEpB,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAAiB,EACjB,UAAkB,EAClB,KAAa,EACb,WAAoB;IAEpB,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;AAC9D,CAAC"}

package/dist/utils/studio-config.d.ts

@@ -0,0 +1,74 @@
+export { readProfile, writeProfile, listProfiles, getDefaultProfile, setDefaultProfile, deleteProfile, type StudioProfile, type StudioConfig } from './config-file.js';
+import type { StudioAuthTokens } from '../types.js';
+import type { StudioProfile } from './config-file.js';
+/**
+ * Saves authentication tokens for a profile
+ * Tokens are stored in ~/.sembix/tokens/{profile-name}.json with 0o600 permissions
+ *
+ * @param profileName - Name of the profile
+ * @param tokens - Authentication tokens to save
+ */
+export declare function saveTokens(profileName: string, tokens: StudioAuthTokens): Promise<void>;
+/**
+ * Loads authentication tokens for a profile
+ * Returns undefined if tokens don't exist or file cannot be read
+ *
+ * @param profileName - Name of the profile
+ * @returns Authentication tokens or undefined if not found
+ */
+export declare function loadTokens(profileName: string): Promise<StudioAuthTokens | undefined>;
+/**
+ * Deletes stored authentication tokens for a profile
+ *
+ * @param profileName - Name of the profile
+ */
+export declare function deleteTokens(profileName: string): Promise<void>;
+/**
+ * Checks if authentication tokens are still valid based on expiration time
+ *
+ * @param tokens - Authentication tokens to validate
+ * @returns true if tokens are valid and not expired
+ */
+export declare function isTokenValid(tokens: StudioAuthTokens): boolean;
+/**
+ * Lists all profiles that have stored authentication tokens
+ *
+ * @returns Array of profile names with stored tokens
+ */
+export declare function listTokenProfiles(): Promise<string[]>;
+/**
+ * Gets token information for a profile without exposing the token values
+ * Useful for displaying token status to users
+ *
+ * @param profileName - Name of the profile
+ * @returns Object with token status information or undefined if no tokens exist
+ */
+export declare function getTokenInfo(profileName: string): Promise<{
+    expiresAt: string;
+    isValid: boolean;
+} | undefined>;
+/**
+ * Gets the active Studio profile, using the specified profile name or falling back to default
+ * Throws an error if no profile is found
+ *
+ * @param profileName - Optional profile name to use
+ * @returns The active Studio profile
+ * @throws Error if no profile is configured
+ */
+export declare function getActiveProfile(profileName?: string): Promise<StudioProfile>;
+/**
+ * Gets the active profile with valid authentication tokens
+ * Supports multiple authentication methods with priority:
+ * 1. Client credentials (CI/CD)
+ * 2. Stored tokens (file-based)
+ * 3. Interactive login (if TTY available)
+ *
+ * @param profileName - Optional profile name to use
+ * @returns Object containing the profile and valid tokens
+ * @throws Error if authentication fails
+ */
+export declare function getAuthenticatedProfile(profileName?: string): Promise<{
+    profile: StudioProfile;
+    tokens: StudioAuthTokens;
+}>;
+//# sourceMappingURL=studio-config.d.ts.map

package/dist/utils/studio-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"studio-config.d.ts","sourceRoot":"","sources":["../../src/utils/studio-config.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,aAAa,EACb,KAAK,aAAa,EAClB,KAAK,YAAY,EAClB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAwBtD;;;;;;GAMG;AACH,wBAAsB,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAK7F;AAED;;;;;;GAMG;AACH,wBAAsB,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAW3F;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CASrE;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAU9D;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAY3D;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAAG,SAAS,CAAC,CASpH;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAmBnF;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,uBAAuB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3E,OAAO,EAAE,aAAa,CAAC;IACvB,MAAM,EAAE,gBAAgB,CAAC;CAC1B,CAAC,CAqED"}

package/dist/utils/studio-config.js

@@ -0,0 +1,213 @@
+import { homedir } from 'os';
+import { join } from 'path';
+import { promises as fs } from 'fs';
+import { existsSync } from 'fs';
+// Re-export profile management functions from config-file
+export { readProfile, writeProfile, listProfiles, getDefaultProfile, setDefaultProfile, deleteProfile } from './config-file.js';
+import { readProfile, getDefaultProfile } from './config-file.js';
+import { hasClientCredentials, isInteractive } from './environment.js';
+import { CognitoAuthService } from '../services/cognito-auth.js';
+// Token storage directory
+const TOKENS_DIR = join(homedir(), '.sembix', 'tokens');
+/**
+ * Ensures the tokens directory exists with secure permissions
+ */
+async function ensureTokensDirectory() {
+    if (!existsSync(TOKENS_DIR)) {
+        await fs.mkdir(TOKENS_DIR, { recursive: true, mode: 0o700 });
+    }
+}
+/**
+ * Gets the file path for a profile's token storage
+ */
+function getTokenFilePath(profileName) {
+    return join(TOKENS_DIR, `${profileName}.json`);
+}
+/**
+ * Saves authentication tokens for a profile
+ * Tokens are stored in ~/.sembix/tokens/{profile-name}.json with 0o600 permissions
+ *
+ * @param profileName - Name of the profile
+ * @param tokens - Authentication tokens to save
+ */
+export async function saveTokens(profileName, tokens) {
+    await ensureTokensDirectory();
+    const tokenFile = getTokenFilePath(profileName);
+    const content = JSON.stringify(tokens, null, 2);
+    await fs.writeFile(tokenFile, content, { mode: 0o600 });
+}
+/**
+ * Loads authentication tokens for a profile
+ * Returns undefined if tokens don't exist or file cannot be read
+ *
+ * @param profileName - Name of the profile
+ * @returns Authentication tokens or undefined if not found
+ */
+export async function loadTokens(profileName) {
+    try {
+        const tokenFile = getTokenFilePath(profileName);
+        if (!existsSync(tokenFile)) {
+            return undefined;
+        }
+        const content = await fs.readFile(tokenFile, 'utf-8');
+        return JSON.parse(content);
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Deletes stored authentication tokens for a profile
+ *
+ * @param profileName - Name of the profile
+ */
+export async function deleteTokens(profileName) {
+    try {
+        const tokenFile = getTokenFilePath(profileName);
+        if (existsSync(tokenFile)) {
+            await fs.unlink(tokenFile);
+        }
+    }
+    catch {
+        // Ignore errors if file doesn't exist
+    }
+}
+/**
+ * Checks if authentication tokens are still valid based on expiration time
+ *
+ * @param tokens - Authentication tokens to validate
+ * @returns true if tokens are valid and not expired
+ */
+export function isTokenValid(tokens) {
+    try {
+        const expiresAt = new Date(tokens.expiresAt);
+        const now = new Date();
+        // Add 5 minute buffer to account for clock skew and request time
+        const bufferMs = 5 * 60 * 1000;
+        return expiresAt.getTime() - now.getTime() > bufferMs;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Lists all profiles that have stored authentication tokens
+ *
+ * @returns Array of profile names with stored tokens
+ */
+export async function listTokenProfiles() {
+    try {
+        if (!existsSync(TOKENS_DIR)) {
+            return [];
+        }
+        const files = await fs.readdir(TOKENS_DIR);
+        return files
+            .filter(file => file.endsWith('.json'))
+            .map(file => file.replace('.json', ''));
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Gets token information for a profile without exposing the token values
+ * Useful for displaying token status to users
+ *
+ * @param profileName - Name of the profile
+ * @returns Object with token status information or undefined if no tokens exist
+ */
+export async function getTokenInfo(profileName) {
+    const tokens = await loadTokens(profileName);
+    if (!tokens) {
+        return undefined;
+    }
+    return {
+        expiresAt: tokens.expiresAt,
+        isValid: isTokenValid(tokens)
+    };
+}
+/**
+ * Gets the active Studio profile, using the specified profile name or falling back to default
+ * Throws an error if no profile is found
+ *
+ * @param profileName - Optional profile name to use
+ * @returns The active Studio profile
+ * @throws Error if no profile is configured
+ */
+export async function getActiveProfile(profileName) {
+    // Try to get the specified profile or default profile
+    const targetProfile = profileName || await getDefaultProfile();
+    if (!targetProfile) {
+        throw new Error('No Studio profile configured. Run "sembix configure" to set up a profile.');
+    }
+    const profile = await readProfile(targetProfile);
+    if (!profile) {
+        throw new Error(`Profile "${targetProfile}" not found. Run "sembix profile list" to see available profiles.`);
+    }
+    return profile;
+}
+/**
+ * Gets the active profile with valid authentication tokens
+ * Supports multiple authentication methods with priority:
+ * 1. Client credentials (CI/CD)
+ * 2. Stored tokens (file-based)
+ * 3. Interactive login (if TTY available)
+ *
+ * @param profileName - Optional profile name to use
+ * @returns Object containing the profile and valid tokens
+ * @throws Error if authentication fails
+ */
+export async function getAuthenticatedProfile(profileName) {
+    const profile = await getActiveProfile(profileName);
+    // Priority 1: Check for client credentials (CI/CD)
+    if (hasClientCredentials()) {
+        const clientId = process.env.SEMBIX_CLIENT_ID;
+        const clientSecret = process.env.SEMBIX_CLIENT_SECRET;
+        try {
+            const authService = new CognitoAuthService(profile);
+            const tokens = await authService.authenticateWithClientCredentials(clientId, clientSecret);
+            return { profile, tokens };
+        }
+        catch (error) {
+            throw new Error(`Client credentials authentication failed: ${error instanceof Error ? error.message : String(error)}\n\n` +
+                `Check that SEMBIX_CLIENT_ID and SEMBIX_CLIENT_SECRET are correct.`);
+        }
+    }
+    // Priority 2: Load stored tokens
+    let tokens = await loadTokens(profile.name);
+    if (!tokens) {
+        // No stored tokens - guide user based on environment
+        if (isInteractive()) {
+            throw new Error(`No authentication tokens found for profile "${profile.name}".\n\n` +
+                `Run: sembix login --profile ${profile.name}`);
+        }
+        else {
+            throw new Error(`No authentication tokens found for profile "${profile.name}".\n\n` +
+                `For CI/CD environments, set these environment variables:\n` +
+                `  SEMBIX_CLIENT_ID=<your-m2m-client-id>\n` +
+                `  SEMBIX_CLIENT_SECRET=<your-m2m-client-secret>\n\n` +
+                `For interactive environments, run: sembix login --profile ${profile.name}`);
+        }
+    }
+    // Validate token expiry
+    if (!isTokenValid(tokens)) {
+        // Try to refresh if we have a refresh token
+        if (tokens.refreshToken) {
+            try {
+                const authService = new CognitoAuthService(profile);
+                tokens = await authService.refreshTokens(tokens.refreshToken);
+                await saveTokens(profile.name, tokens);
+                return { profile, tokens };
+            }
+            catch {
+                // Refresh failed - need to re-authenticate
+                throw new Error(`Authentication tokens for profile "${profile.name}" have expired and could not be refreshed.\n\n` +
+                    `Run: sembix login --profile ${profile.name}`);
+            }
+        }
+        throw new Error(`Authentication tokens for profile "${profile.name}" have expired.\n\n` +
+            `Run: sembix login --profile ${profile.name}`);
+    }
+    return { profile, tokens };
+}
+//# sourceMappingURL=studio-config.js.map

package/dist/utils/studio-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"studio-config.js","sourceRoot":"","sources":["../../src/utils/studio-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAEhC,0DAA0D;AAC1D,OAAO,EACL,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,aAAa,EAGd,MAAM,kBAAkB,CAAC;AAK1B,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEjE,0BAA0B;AAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAExD;;GAEG;AACH,KAAK,UAAU,qBAAqB;IAClC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,WAAmB;IAC3C,OAAO,IAAI,CAAC,UAAU,EAAE,GAAG,WAAW,OAAO,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,WAAmB,EAAE,MAAwB;IAC5E,MAAM,qBAAqB,EAAE,CAAC;IAC9B,MAAM,SAAS,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAChD,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,WAAmB;IAClD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAqB,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,WAAmB;IACpD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;IACxC,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,MAAwB;IACnD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,iEAAiE;QACjE,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAC/B,OAAO,SAAS,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC3C,OAAO,KAAK;aACT,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;aACtC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,WAAmB;IACpD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,WAAoB;IACzD,sDAAsD;IACtD,MAAM,aAAa,GAAG,WAAW,IAAI,MAAM,iBAAiB,EAAE,CAAC;IAE/D,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,CAAC;IAEjD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,YAAY,aAAa,mEAAmE,CAC7F,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,WAAoB;IAIhE,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAEpD,mDAAmD;IACnD,IAAI,oBAAoB,EAAE,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAiB,CAAC;QAC/C,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAqB,CAAC;QAEvD,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,iCAAiC,CAChE,QAAQ,EACR,YAAY,CACb,CAAC;YACF,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,6CAA6C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM;gBACzG,mEAAmE,CACpE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,IAAI,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,qDAAqD;QACrD,IAAI,aAAa,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,+CAA+C,OAAO,CAAC,IAAI,QAAQ;gBACnE,+BAA+B,OAAO,CAAC,IAAI,EAAE,CAC9C,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CACb,+CAA+C,OAAO,CAAC,IAAI,QAAQ;gBACnE,4DAA4D;gBAC5D,2CAA2C;gBAC3C,qDAAqD;gBACrD,6DAA6D,OAAO,CAAC,IAAI,EAAE,CAC5E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,4CAA4C;QAC5C,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAC;gBACpD,MAAM,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;gBAC9D,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACvC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACP,2CAA2C;gBAC3C,MAAM,IAAI,KAAK,CACb,sCAAsC,OAAO,CAAC,IAAI,gDAAgD;oBAClG,+BAA+B,OAAO,CAAC,IAAI,EAAE,CAC9C,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,IAAI,KAAK,CACb,sCAAsC,OAAO,CAAC,IAAI,qBAAqB;YACvE,+BAA+B,OAAO,CAAC,IAAI,EAAE,CAC9C,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC"}

package/dist/utils/token-manager.d.ts

@@ -0,0 +1,4 @@
+export { saveTokens, loadTokens, deleteTokens, isTokenValid, listTokenProfiles, getTokenInfo } from './studio-config.js';
+export type { StudioAuthTokens } from '../types.js';
+export type { StudioProfile } from './config-file.js';
+//# sourceMappingURL=token-manager.d.ts.map

package/dist/utils/token-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-manager.d.ts","sourceRoot":"","sources":["../../src/utils/token-manager.ts"],"names":[],"mappings":"AACA,OAAO,EACL,UAAU,EACV,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACb,MAAM,oBAAoB,CAAC;AAG5B,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/utils/token-manager.js

@@ -0,0 +1,3 @@
+// Re-export token management functions from studio-config
+export { saveTokens, loadTokens, deleteTokens, isTokenValid, listTokenProfiles, getTokenInfo } from './studio-config.js';
+//# sourceMappingURL=token-manager.js.map

package/dist/utils/token-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-manager.js","sourceRoot":"","sources":["../../src/utils/token-manager.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,OAAO,EACL,UAAU,EACV,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACb,MAAM,oBAAoB,CAAC"}

package/dist/utils/ui.d.ts

@@ -2,7 +2,14 @@ import { Ora } from 'ora';
 /**
  * UI utilities for consistent terminal output
  */
-export declare function banner(): void;
+/**
+ * Check if the CLI is running in quiet mode (JSON/PRETTY output).
+ * In quiet mode, UI elements like banners and spinners should be suppressed.
+ *
+ * @returns true if quiet mode (default), false if TEXT mode
+ */
+export declare function isQuietMode(): boolean;
+export declare function banner(title?: string): void;
 export declare function section(title: string): void;
 export declare function success(message: string): void;
 export declare function error(message: string): void;
@@ -15,4 +22,51 @@ export declare function link(url: string, label?: string): string;
 export declare function highlight(text: string): string;
 export declare function dim(text: string): string;
 export declare function code(text: string): string;
+/**
+ * Clear the terminal screen for watch mode updates
+ */
+export declare function clearScreen(): void;
+/**
+ * Clear from cursor position to end of screen
+ * This allows keeping header stable while refreshing content below
+ */
+export declare function clearFromCursorDown(): void;
+/**
+ * Move cursor up N lines
+ */
+export declare function moveCursorUp(lines: number): void;
+/**
+ * Save current cursor position
+ */
+export declare function saveCursorPosition(): void;
+/**
+ * Restore saved cursor position
+ */
+export declare function restoreCursorPosition(): void;
+/**
+ * Hide cursor (prevents flicker during updates)
+ */
+export declare function hideCursor(): void;
+/**
+ * Show cursor
+ */
+export declare function showCursor(): void;
+/**
+ * Highlight a value that has changed (for watch mode change detection)
+ */
+export declare function changed(value: string): string;
+/**
+ * Truncate text for watch mode display
+ * @param text - Text to truncate
+ * @param maxLength - Maximum length before truncation (default: 300)
+ * @returns Truncated text with indicator if truncated
+ */
+export declare function truncateForWatch(text: string, maxLength?: number): string;
+/**
+ * Truncate and format object/value for watch mode display
+ * @param value - Value to format (string, object, etc.)
+ * @param maxLength - Maximum length for strings
+ * @returns Formatted string suitable for watch mode
+ */
+export declare function formatValueForWatch(value: any, maxLength?: number): string;
 //# sourceMappingURL=ui.d.ts.map

package/dist/utils/ui.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ui.d.ts","sourceRoot":"","sources":["../../src/utils/ui.ts"],"names":[],"mappings":"AACA,OAAY,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC;AAE/B;;GAEG;AAEH,wBAAgB,MAAM,IAAI,IAAI,CAQ7B;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAI3C;AAED,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE7C;AAED,wBAAgB,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE3C;AAED,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE7C;AAED,wBAAgB,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE1C;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,GAAG,CAKzC;AAED,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CASxD;AAED,wBAAgB,SAAS,IAAI,IAAI,CAEhC;AAED,wBAAgB,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED,wBAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAExC;AAED,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzC"}
+{"version":3,"file":"ui.d.ts","sourceRoot":"","sources":["../../src/utils/ui.ts"],"names":[],"mappings":"AACA,OAAY,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC;AAE/B;;GAEG;AAEH;;;;;GAKG;AACH,wBAAgB,WAAW,IAAI,OAAO,CASrC;AAED,wBAAgB,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAoB3C;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAK3C;AAED,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAG7C;AAED,wBAAgB,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAQ3C;AAED,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAG7C;AAED,wBAAgB,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAG1C;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,GAAG,CAoBzC;AAED,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAUxD;AAED,wBAAgB,SAAS,IAAI,IAAI,CAGhC;AAED,wBAAgB,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED,wBAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAExC;AAED,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzC;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,IAAI,CAElC;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAEhD;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC;AAED;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C;AAED;;GAEG;AACH,wBAAgB,UAAU,IAAI,IAAI,CAEjC;AAED;;GAEG;AACH,wBAAgB,UAAU,IAAI,IAAI,CAEjC;AAED;;GAEG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,GAAE,MAAY,GAAG,MAAM,CAQ9E;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,SAAS,GAAE,MAAY,GAAG,MAAM,CAqB/E"}