npm - @skhema/cli - Versions diffs - 0.3.1 - Mend

@skhema/cli 0.3.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (168) hide show

package/README.md +163 -0
package/bin/skhema.js +2 -0
package/dist/cli.d.ts +2 -0
package/dist/cli.d.ts.map +1 -0
package/dist/cli.js +92 -0
package/dist/commands/agent.d.ts +3 -0
package/dist/commands/agent.d.ts.map +1 -0
package/dist/commands/agent.js +154 -0
package/dist/commands/api.d.ts +19 -0
package/dist/commands/api.d.ts.map +1 -0
package/dist/commands/api.js +97 -0
package/dist/commands/auth.d.ts +3 -0
package/dist/commands/auth.d.ts.map +1 -0
package/dist/commands/auth.js +403 -0
package/dist/commands/component.d.ts +3 -0
package/dist/commands/component.d.ts.map +1 -0
package/dist/commands/component.js +221 -0
package/dist/commands/contribute.d.ts +3 -0
package/dist/commands/contribute.d.ts.map +1 -0
package/dist/commands/contribute.js +318 -0
package/dist/commands/element.d.ts +7 -0
package/dist/commands/element.d.ts.map +1 -0
package/dist/commands/element.js +167 -0
package/dist/commands/export.d.ts +9 -0
package/dist/commands/export.d.ts.map +1 -0
package/dist/commands/export.js +42 -0
package/dist/commands/init.d.ts +49 -0
package/dist/commands/init.d.ts.map +1 -0
package/dist/commands/init.js +275 -0
package/dist/commands/link.d.ts +8 -0
package/dist/commands/link.d.ts.map +1 -0
package/dist/commands/link.js +70 -0
package/dist/commands/resource.d.ts +3 -0
package/dist/commands/resource.d.ts.map +1 -0
package/dist/commands/resource.js +88 -0
package/dist/commands/skills.d.ts +3 -0
package/dist/commands/skills.d.ts.map +1 -0
package/dist/commands/skills.js +113 -0
package/dist/commands/strategy.d.ts +3 -0
package/dist/commands/strategy.d.ts.map +1 -0
package/dist/commands/strategy.js +143 -0
package/dist/commands/webhook.d.ts +3 -0
package/dist/commands/webhook.d.ts.map +1 -0
package/dist/commands/webhook.js +77 -0
package/dist/commands/workspace.d.ts +8 -0
package/dist/commands/workspace.d.ts.map +1 -0
package/dist/commands/workspace.js +219 -0
package/dist/index.d.ts +2 -0
package/dist/index.d.ts.map +1 -0
package/dist/index.js +1 -0
package/dist/lib/api/client.d.ts +27 -0
package/dist/lib/api/client.d.ts.map +1 -0
package/dist/lib/api/client.js +71 -0
package/dist/lib/api/command-helpers.d.ts +27 -0
package/dist/lib/api/command-helpers.d.ts.map +1 -0
package/dist/lib/api/command-helpers.js +77 -0
package/dist/lib/api/credential-context.d.ts +3 -0
package/dist/lib/api/credential-context.d.ts.map +1 -0
package/dist/lib/api/credential-context.js +13 -0
package/dist/lib/api/export-cli.d.ts +14 -0
package/dist/lib/api/export-cli.d.ts.map +1 -0
package/dist/lib/api/export-cli.js +26 -0
package/dist/lib/api/formats.d.ts +12 -0
package/dist/lib/api/formats.d.ts.map +1 -0
package/dist/lib/api/formats.js +18 -0
package/dist/lib/api/passthrough.d.ts +34 -0
package/dist/lib/api/passthrough.d.ts.map +1 -0
package/dist/lib/api/passthrough.js +106 -0
package/dist/lib/api/payload.d.ts +16 -0
package/dist/lib/api/payload.d.ts.map +1 -0
package/dist/lib/api/payload.js +53 -0
package/dist/lib/api/run-command.d.ts +69 -0
package/dist/lib/api/run-command.d.ts.map +1 -0
package/dist/lib/api/run-command.js +127 -0
package/dist/lib/api/scope.d.ts +8 -0
package/dist/lib/api/scope.d.ts.map +1 -0
package/dist/lib/api/scope.js +16 -0
package/dist/lib/api/transfer.d.ts +57 -0
package/dist/lib/api/transfer.d.ts.map +1 -0
package/dist/lib/api/transfer.js +153 -0
package/dist/lib/auth/api-key-admin.d.ts +39 -0
package/dist/lib/auth/api-key-admin.d.ts.map +1 -0
package/dist/lib/auth/api-key-admin.js +66 -0
package/dist/lib/auth/api-key-store.d.ts +8 -0
package/dist/lib/auth/api-key-store.d.ts.map +1 -0
package/dist/lib/auth/api-key-store.js +109 -0
package/dist/lib/auth/device-flow.d.ts +4 -0
package/dist/lib/auth/device-flow.d.ts.map +1 -0
package/dist/lib/auth/device-flow.js +109 -0
package/dist/lib/auth/entitlements.d.ts +16 -0
package/dist/lib/auth/entitlements.d.ts.map +1 -0
package/dist/lib/auth/entitlements.js +89 -0
package/dist/lib/auth/localhost-flow.d.ts +4 -0
package/dist/lib/auth/localhost-flow.d.ts.map +1 -0
package/dist/lib/auth/localhost-flow.js +134 -0
package/dist/lib/auth/oauth-client.d.ts +33 -0
package/dist/lib/auth/oauth-client.d.ts.map +1 -0
package/dist/lib/auth/oauth-client.js +96 -0
package/dist/lib/auth/token-store.d.ts +6 -0
package/dist/lib/auth/token-store.d.ts.map +1 -0
package/dist/lib/auth/token-store.js +136 -0
package/dist/lib/auth/types.d.ts +49 -0
package/dist/lib/auth/types.d.ts.map +1 -0
package/dist/lib/auth/types.js +1 -0
package/dist/lib/banner.d.ts +2 -0
package/dist/lib/banner.d.ts.map +1 -0
package/dist/lib/banner.js +82 -0
package/dist/lib/config-store.d.ts +23 -0
package/dist/lib/config-store.d.ts.map +1 -0
package/dist/lib/config-store.js +53 -0
package/dist/lib/config.d.ts +20 -0
package/dist/lib/config.d.ts.map +1 -0
package/dist/lib/config.js +33 -0
package/dist/lib/contribute/author-resolver.d.ts +13 -0
package/dist/lib/contribute/author-resolver.d.ts.map +1 -0
package/dist/lib/contribute/author-resolver.js +63 -0
package/dist/lib/contribute/embed-generator.d.ts +4 -0
package/dist/lib/contribute/embed-generator.d.ts.map +1 -0
package/dist/lib/contribute/embed-generator.js +108 -0
package/dist/lib/contribute/link-generator.d.ts +11 -0
package/dist/lib/contribute/link-generator.d.ts.map +1 -0
package/dist/lib/contribute/link-generator.js +119 -0
package/dist/lib/contribute/method-schema.d.ts +239 -0
package/dist/lib/contribute/method-schema.d.ts.map +1 -0
package/dist/lib/contribute/method-schema.js +172 -0
package/dist/lib/contribute/profile-resolver.d.ts +2 -0
package/dist/lib/contribute/profile-resolver.d.ts.map +1 -0
package/dist/lib/contribute/profile-resolver.js +25 -0
package/dist/lib/contribute/types.d.ts +91 -0
package/dist/lib/contribute/types.d.ts.map +1 -0
package/dist/lib/contribute/types.js +1 -0
package/dist/lib/mcp/registrar.d.ts +26 -0
package/dist/lib/mcp/registrar.d.ts.map +1 -0
package/dist/lib/mcp/registrar.js +69 -0
package/dist/lib/mcp/registry.d.ts +54 -0
package/dist/lib/mcp/registry.d.ts.map +1 -0
package/dist/lib/mcp/registry.js +105 -0
package/dist/lib/open.d.ts +2 -0
package/dist/lib/open.d.ts.map +1 -0
package/dist/lib/open.js +24 -0
package/dist/lib/output.d.ts +25 -0
package/dist/lib/output.d.ts.map +1 -0
package/dist/lib/output.js +74 -0
package/dist/lib/skills/installer.d.ts +4 -0
package/dist/lib/skills/installer.d.ts.map +1 -0
package/dist/lib/skills/installer.js +100 -0
package/dist/lib/skills/lock.d.ts +4 -0
package/dist/lib/skills/lock.d.ts.map +1 -0
package/dist/lib/skills/lock.js +28 -0
package/dist/lib/skills/platform-detect.d.ts +4 -0
package/dist/lib/skills/platform-detect.d.ts.map +1 -0
package/dist/lib/skills/platform-detect.js +89 -0
package/dist/lib/skills/types.d.ts +29 -0
package/dist/lib/skills/types.d.ts.map +1 -0
package/dist/lib/skills/types.js +1 -0
package/dist/postinstall.d.ts +2 -0
package/dist/postinstall.d.ts.map +1 -0
package/dist/postinstall.js +11 -0
package/package.json +67 -0
package/skills/.manifest.json +15 -0
package/skills/skhema-challenge-framing/SKILL.md +28 -0
package/skills/skhema-coherence-check/SKILL.md +28 -0
package/skills/skhema-element-decomposition/SKILL.md +28 -0
package/skills/skhema-element-writer/SKILL.md +20 -0
package/skills/skhema-judgment-audit/SKILL.md +28 -0
package/skills/skhema-semantic-sharpening/SKILL.md +28 -0
package/skills/skhema-strategy-advisor/SKILL.md +20 -0
package/skills/skhema-workspace-navigator/SKILL.md +20 -0

package/dist/lib/auth/localhost-flow.d.ts ADDED Viewed

@@ -0,0 +1,4 @@
+export declare function startLocalhostFlow(options?: {
+    organizationId?: string;
+}): Promise<void>;
+//# sourceMappingURL=localhost-flow.d.ts.map

package/dist/lib/auth/localhost-flow.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"localhost-flow.d.ts","sourceRoot":"","sources":["../../../src/lib/auth/localhost-flow.ts"],"names":[],"mappings":"AAsCA,wBAAsB,kBAAkB,CAAC,OAAO,CAAC,EAAE;IACjD,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB,GAAG,OAAO,CAAC,IAAI,CAAC,CA6HhB"}

package/dist/lib/auth/localhost-flow.js ADDED Viewed

@@ -0,0 +1,134 @@
+import chalk from 'chalk';
+import http from 'http';
+import ora from 'ora';
+import { LOGIN_TIMEOUT } from '../config.js';
+import { openBrowser } from '../open.js';
+import { log } from '../output.js';
+import { buildAuthorizeUrl, exchangeCodeForTokens, fetchUserInfo, generatePKCE, generateState, } from './oauth-client.js';
+import { storeCredentials } from './token-store.js';
+const SUCCESS_HTML = `<!DOCTYPE html>
+<html>
+<head><title>Skhema CLI</title><style>
+body { font-family: -apple-system, BlinkMacSystemFont, sans-serif; display: flex; justify-content: center; align-items: center; min-height: 100vh; margin: 0; background: #0a0a0a; color: #fafafa; }
+.card { text-align: center; padding: 2rem; }
+h1 { font-size: 1.5rem; margin-bottom: 0.5rem; }
+p { color: #a1a1aa; }
+</style></head>
+<body><div class="card"><h1>Authenticated</h1><p>You can close this window and return to the terminal.</p></div></body>
+</html>`;
+const ERROR_HTML = `<!DOCTYPE html>
+<html>
+<head><title>Skhema CLI - Error</title><style>
+body { font-family: -apple-system, BlinkMacSystemFont, sans-serif; display: flex; justify-content: center; align-items: center; min-height: 100vh; margin: 0; background: #0a0a0a; color: #fafafa; }
+.card { text-align: center; padding: 2rem; }
+h1 { font-size: 1.5rem; color: #ef4444; margin-bottom: 0.5rem; }
+p { color: #a1a1aa; }
+</style></head>
+<body><div class="card"><h1>Authentication Failed</h1><p>Please return to the terminal and try again.</p></div></body>
+</html>`;
+export async function startLocalhostFlow(options) {
+    const { codeVerifier, codeChallenge } = generatePKCE();
+    const state = generateState();
+    return new Promise((resolve, reject) => {
+        const server = http.createServer();
+        // Assigned once below, but read by `cleanup` before that point, so it must
+        // be declared up front (prefer-const cannot apply to a deferred init).
+        // eslint-disable-next-line prefer-const
+        let timeoutId;
+        const cleanup = () => {
+            clearTimeout(timeoutId);
+            server.close();
+        };
+        server.on('request', async (req, res) => {
+            const url = new URL(req.url, `http://${req.headers.host}`);
+            if (url.pathname !== '/callback') {
+                res.writeHead(404);
+                res.end('Not found');
+                return;
+            }
+            const code = url.searchParams.get('code');
+            const returnedState = url.searchParams.get('state');
+            const error = url.searchParams.get('error');
+            if (error) {
+                res.writeHead(200, { 'Content-Type': 'text/html' });
+                res.end(ERROR_HTML);
+                cleanup();
+                reject(new Error(`Authorization denied: ${error}`));
+                return;
+            }
+            if (!code || returnedState !== state) {
+                res.writeHead(200, { 'Content-Type': 'text/html' });
+                res.end(ERROR_HTML);
+                cleanup();
+                reject(new Error('Invalid callback: missing code or state mismatch'));
+                return;
+            }
+            const spinner = ora('Exchanging authorization code...').start();
+            try {
+                const address = server.address();
+                const redirectUri = `http://127.0.0.1:${address.port}/callback`;
+                const tokens = await exchangeCodeForTokens({
+                    code,
+                    redirectUri,
+                    codeVerifier,
+                });
+                spinner.text = 'Fetching user info...';
+                const userInfo = await fetchUserInfo(tokens.access_token);
+                const credentials = {
+                    access_token: tokens.access_token,
+                    refresh_token: tokens.refresh_token,
+                    token_type: tokens.token_type,
+                    expires_at: Date.now() + tokens.expires_in * 1000,
+                    scope: tokens.scope,
+                    user: {
+                        id: userInfo.sub,
+                        email: userInfo.email,
+                        name: userInfo.name,
+                    },
+                    organization: userInfo.organizations?.[0]
+                        ? {
+                            id: userInfo.organizations[0].id,
+                            name: userInfo.organizations[0].name,
+                            slug: userInfo.organizations[0].slug,
+                        }
+                        : undefined,
+                };
+                await storeCredentials(credentials);
+                spinner.succeed(`Logged in as ${chalk.cyan(userInfo.name)} (${userInfo.email})`);
+                res.writeHead(200, { 'Content-Type': 'text/html' });
+                res.end(SUCCESS_HTML);
+                cleanup();
+                resolve();
+            }
+            catch (err) {
+                spinner.fail('Authentication failed');
+                res.writeHead(200, { 'Content-Type': 'text/html' });
+                res.end(ERROR_HTML);
+                cleanup();
+                reject(err);
+            }
+        });
+        // Bind to random available port on localhost
+        server.listen(0, '127.0.0.1', () => {
+            const address = server.address();
+            const redirectUri = `http://127.0.0.1:${address.port}/callback`;
+            const authorizeUrl = buildAuthorizeUrl({
+                redirectUri,
+                codeChallenge,
+                state,
+                organizationId: options?.organizationId,
+            });
+            log(chalk.dim('Opening browser for authentication...'));
+            log(chalk.dim(`If the browser doesn't open, visit: ${authorizeUrl}`));
+            openBrowser(authorizeUrl).catch(() => {
+                log(chalk.yellow('Could not open browser automatically.'));
+                log(`Please visit: ${chalk.cyan(authorizeUrl)}`);
+            });
+        });
+        // 5-minute timeout
+        timeoutId = setTimeout(() => {
+            cleanup();
+            reject(new Error('Login timed out after 5 minutes. Please try again.'));
+        }, LOGIN_TIMEOUT);
+    });
+}

package/dist/lib/auth/oauth-client.d.ts ADDED Viewed

@@ -0,0 +1,33 @@
+import type { PKCEPair, TokenResponse, UserInfoResponse } from './types.js';
+export declare function generatePKCE(): PKCEPair;
+export declare function generateState(): string;
+export declare function buildAuthorizeUrl(params: {
+    redirectUri: string;
+    codeChallenge: string;
+    state: string;
+    organizationId?: string;
+}): string;
+export declare function exchangeCodeForTokens(params: {
+    code: string;
+    redirectUri: string;
+    codeVerifier: string;
+}): Promise<TokenResponse>;
+export declare function refreshAccessToken(refreshToken: string): Promise<TokenResponse>;
+export declare class ConsentRequiredError extends Error {
+    constructor();
+}
+export interface SwitchOrganizationResponse {
+    access_token: string;
+    refresh_token: string;
+    token_type: string;
+    expires_in: number;
+    scope: string;
+    organization?: {
+        id: string;
+        name: string;
+        slug: string;
+    };
+}
+export declare function switchOrganization(accessToken: string, organizationId: string): Promise<SwitchOrganizationResponse>;
+export declare function fetchUserInfo(accessToken: string): Promise<UserInfoResponse>;
+//# sourceMappingURL=oauth-client.d.ts.map

package/dist/lib/auth/oauth-client.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"oauth-client.d.ts","sourceRoot":"","sources":["../../../src/lib/auth/oauth-client.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAE3E,wBAAgB,YAAY,IAAI,QAAQ,CAOvC;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE;IACxC,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;IACrB,KAAK,EAAE,MAAM,CAAA;IACb,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB,GAAG,MAAM,CAaT;AAED,wBAAsB,qBAAqB,CAAC,MAAM,EAAE;IAClD,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;CACrB,GAAG,OAAO,CAAC,aAAa,CAAC,CAqBzB;AAED,wBAAsB,kBAAkB,CACtC,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,aAAa,CAAC,CAkBxB;AAED,qBAAa,oBAAqB,SAAQ,KAAK;;CAK9C;AAED,MAAM,WAAW,0BAA0B;IACzC,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,CAAC,EAAE;QACb,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,EAAE,MAAM,CAAA;QACZ,IAAI,EAAE,MAAM,CAAA;KACb,CAAA;CACF;AAED,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,0BAA0B,CAAC,CAgCrC;AAED,wBAAsB,aAAa,CACjC,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,gBAAgB,CAAC,CAU3B"}

package/dist/lib/auth/oauth-client.js ADDED Viewed

@@ -0,0 +1,96 @@
+import crypto from 'crypto';
+import { AUTH_BASE_URL, CLI_CLIENT_ID, OAUTH_SCOPES } from '../config.js';
+export function generatePKCE() {
+    const codeVerifier = crypto.randomBytes(32).toString('base64url');
+    const codeChallenge = crypto
+        .createHash('sha256')
+        .update(codeVerifier)
+        .digest('base64url');
+    return { codeVerifier, codeChallenge };
+}
+export function generateState() {
+    return crypto.randomBytes(16).toString('base64url');
+}
+export function buildAuthorizeUrl(params) {
+    const url = new URL(`${AUTH_BASE_URL}/api/auth/oauth/authorize`);
+    url.searchParams.set('client_id', CLI_CLIENT_ID);
+    url.searchParams.set('redirect_uri', params.redirectUri);
+    url.searchParams.set('response_type', 'code');
+    url.searchParams.set('scope', OAUTH_SCOPES);
+    url.searchParams.set('code_challenge', params.codeChallenge);
+    url.searchParams.set('code_challenge_method', 'S256');
+    url.searchParams.set('state', params.state);
+    if (params.organizationId) {
+        url.searchParams.set('organization_id', params.organizationId);
+    }
+    return url.toString();
+}
+export async function exchangeCodeForTokens(params) {
+    const response = await fetch(`${AUTH_BASE_URL}/api/auth/oauth/token`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+        body: new URLSearchParams({
+            grant_type: 'authorization_code',
+            client_id: CLI_CLIENT_ID,
+            code: params.code,
+            redirect_uri: params.redirectUri,
+            code_verifier: params.codeVerifier,
+        }),
+    });
+    if (!response.ok) {
+        const error = await response.json().catch(() => ({}));
+        throw new Error(`Token exchange failed: ${error.error || response.statusText}`);
+    }
+    return response.json();
+}
+export async function refreshAccessToken(refreshToken) {
+    const response = await fetch(`${AUTH_BASE_URL}/api/auth/oauth/token`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+        body: new URLSearchParams({
+            grant_type: 'refresh_token',
+            client_id: CLI_CLIENT_ID,
+            refresh_token: refreshToken,
+        }),
+    });
+    if (!response.ok) {
+        throw new Error('Token refresh failed. Please re-authenticate with `skhema auth login`.');
+    }
+    return response.json();
+}
+export class ConsentRequiredError extends Error {
+    constructor() {
+        super('Consent required for this organization');
+        this.name = 'ConsentRequiredError';
+    }
+}
+export async function switchOrganization(accessToken, organizationId) {
+    const response = await fetch(`${AUTH_BASE_URL}/api/auth/oauth/switch-organization`, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            Authorization: `Bearer ${accessToken}`,
+        },
+        body: JSON.stringify({ organization_id: organizationId }),
+    });
+    if (response.status === 403) {
+        const body = (await response.json().catch(() => ({})));
+        if (body.error === 'consent_required') {
+            throw new ConsentRequiredError();
+        }
+    }
+    if (!response.ok) {
+        const error = (await response.json().catch(() => ({})));
+        throw new Error(`Organization switch failed: ${error.error || response.statusText}`);
+    }
+    return response.json();
+}
+export async function fetchUserInfo(accessToken) {
+    const response = await fetch(`${AUTH_BASE_URL}/api/auth/oauth/userinfo`, {
+        headers: { Authorization: `Bearer ${accessToken}` },
+    });
+    if (!response.ok) {
+        throw new Error(`Failed to fetch user info: ${response.statusText}`);
+    }
+    return response.json();
+}

package/dist/lib/auth/token-store.d.ts ADDED Viewed

@@ -0,0 +1,6 @@
+import type { StoredCredentials } from './types.js';
+export declare function storeCredentials(credentials: StoredCredentials): Promise<void>;
+export declare function getStoredCredentials(): Promise<StoredCredentials | null>;
+export declare function clearCredentials(): Promise<void>;
+export declare function getStorageLocation(): string;
+//# sourceMappingURL=token-store.d.ts.map

package/dist/lib/auth/token-store.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"token-store.d.ts","sourceRoot":"","sources":["../../../src/lib/auth/token-store.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAoFnD,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,iBAAiB,GAC7B,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAuC9E;AAED,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAGtD;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAQ3C"}

package/dist/lib/auth/token-store.js ADDED Viewed

@@ -0,0 +1,136 @@
+import { execSync } from 'child_process';
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+import { CREDENTIALS_DIR, CREDENTIALS_FILE, KEYCHAIN_ACCOUNT, KEYCHAIN_SERVICE, } from '../config.js';
+import { fetchUserInfo, refreshAccessToken } from './oauth-client.js';
+const TOKEN_REFRESH_BUFFER = 5 * 60 * 1000; // 5 minutes before expiry
+function getCredentialsFilePath() {
+    return path.join(os.homedir(), CREDENTIALS_DIR, CREDENTIALS_FILE);
+}
+function tryKeychainStore(data) {
+    if (process.platform !== 'darwin')
+        return false;
+    try {
+        // Delete existing entry if any
+        try {
+            execSync(`security delete-generic-password -s "${KEYCHAIN_SERVICE}" -a "${KEYCHAIN_ACCOUNT}" 2>/dev/null`, { stdio: 'ignore' });
+        }
+        catch {
+            /* ignore if doesn't exist */
+        }
+        execSync(`security add-generic-password -s "${KEYCHAIN_SERVICE}" -a "${KEYCHAIN_ACCOUNT}" -w "${data.replace(/"/g, '\\"')}"`, { stdio: 'ignore' });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function tryKeychainLoad() {
+    if (process.platform !== 'darwin')
+        return null;
+    try {
+        const result = execSync(`security find-generic-password -s "${KEYCHAIN_SERVICE}" -a "${KEYCHAIN_ACCOUNT}" -w 2>/dev/null`, { encoding: 'utf-8' });
+        return result.trim();
+    }
+    catch {
+        return null;
+    }
+}
+function tryKeychainDelete() {
+    if (process.platform !== 'darwin')
+        return false;
+    try {
+        execSync(`security delete-generic-password -s "${KEYCHAIN_SERVICE}" -a "${KEYCHAIN_ACCOUNT}" 2>/dev/null`, { stdio: 'ignore' });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function storeToFile(data) {
+    const dir = path.join(os.homedir(), CREDENTIALS_DIR);
+    fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    const filePath = getCredentialsFilePath();
+    fs.writeFileSync(filePath, data, { mode: 0o600 });
+}
+function loadFromFile() {
+    try {
+        const filePath = getCredentialsFilePath();
+        return fs.readFileSync(filePath, 'utf-8');
+    }
+    catch {
+        return null;
+    }
+}
+function deleteFile() {
+    try {
+        const filePath = getCredentialsFilePath();
+        if (fs.existsSync(filePath)) {
+            fs.unlinkSync(filePath);
+        }
+    }
+    catch {
+        /* ignore */
+    }
+}
+export async function storeCredentials(credentials) {
+    const data = JSON.stringify(credentials);
+    // Try keychain first, fall back to file
+    if (!tryKeychainStore(data)) {
+        storeToFile(data);
+    }
+}
+export async function getStoredCredentials() {
+    // Try keychain first, then file
+    const data = tryKeychainLoad() ?? loadFromFile();
+    if (!data)
+        return null;
+    try {
+        const credentials = JSON.parse(data);
+        // Auto-refresh if within buffer of expiry
+        if (credentials.expires_at - Date.now() < TOKEN_REFRESH_BUFFER) {
+            try {
+                const newTokens = await refreshAccessToken(credentials.refresh_token);
+                const userInfo = await fetchUserInfo(newTokens.access_token);
+                const refreshed = {
+                    ...credentials,
+                    access_token: newTokens.access_token,
+                    refresh_token: newTokens.refresh_token,
+                    expires_at: Date.now() + newTokens.expires_in * 1000,
+                    scope: newTokens.scope,
+                    user: {
+                        id: userInfo.sub,
+                        email: userInfo.email,
+                        name: userInfo.name,
+                    },
+                };
+                await storeCredentials(refreshed);
+                return refreshed;
+            }
+            catch {
+                // Refresh failed - return stale credentials, caller can handle
+                return credentials;
+            }
+        }
+        return credentials;
+    }
+    catch {
+        return null;
+    }
+}
+export async function clearCredentials() {
+    tryKeychainDelete();
+    deleteFile();
+}
+export function getStorageLocation() {
+    if (process.platform === 'darwin') {
+        const keychainData = tryKeychainLoad();
+        if (keychainData)
+            return `macOS Keychain (${KEYCHAIN_SERVICE})`;
+    }
+    const filePath = getCredentialsFilePath();
+    if (fs.existsSync(filePath))
+        return filePath;
+    return 'Not stored';
+}

package/dist/lib/auth/types.d.ts ADDED Viewed

@@ -0,0 +1,49 @@
+export interface StoredCredentials {
+    access_token: string;
+    refresh_token: string;
+    token_type: string;
+    expires_at: number;
+    scope: string;
+    user: {
+        id: string;
+        email: string;
+        name: string;
+    };
+    organization?: {
+        id: string;
+        name: string;
+        slug: string;
+    };
+}
+export interface DeviceCodeResponse {
+    device_code: string;
+    user_code: string;
+    verification_uri: string;
+    verification_uri_complete: string;
+    expires_in: number;
+    interval: number;
+}
+export interface TokenResponse {
+    access_token: string;
+    token_type: string;
+    expires_in: number;
+    refresh_token: string;
+    scope: string;
+}
+export interface PKCEPair {
+    codeVerifier: string;
+    codeChallenge: string;
+}
+export interface UserInfoResponse {
+    sub: string;
+    email: string;
+    name: string;
+    email_verified: boolean;
+    organizations?: Array<{
+        id: string;
+        name: string;
+        slug: string;
+        logo?: string;
+    }>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/lib/auth/types.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/lib/auth/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM,CAAA;QACV,KAAK,EAAE,MAAM,CAAA;QACb,IAAI,EAAE,MAAM,CAAA;KACb,CAAA;IACD,YAAY,CAAC,EAAE;QACb,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,EAAE,MAAM,CAAA;QACZ,IAAI,EAAE,MAAM,CAAA;KACb,CAAA;CACF;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB,EAAE,MAAM,CAAA;IACxB,yBAAyB,EAAE,MAAM,CAAA;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,QAAQ;IACvB,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,cAAc,EAAE,OAAO,CAAA;IACvB,aAAa,CAAC,EAAE,KAAK,CAAC;QACpB,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,EAAE,MAAM,CAAA;QACZ,IAAI,EAAE,MAAM,CAAA;QACZ,IAAI,CAAC,EAAE,MAAM,CAAA;KACd,CAAC,CAAA;CACH"}

package/dist/lib/auth/types.js ADDED Viewed

	@@ -0,0 +1 @@
1	+ export {};

package/dist/lib/banner.d.ts ADDED Viewed

	@@ -0,0 +1,2 @@
1	+ export declare function showBanner(cliVersion: string): void;
2	+ //# sourceMappingURL=banner.d.ts.map

package/dist/lib/banner.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"banner.d.ts","sourceRoot":"","sources":["../../src/lib/banner.ts"],"names":[],"mappings":"AAmEA,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAkCnD"}

package/dist/lib/banner.js ADDED Viewed

@@ -0,0 +1,82 @@
+import chalk from 'chalk';
+// ── Brand colors ────────────────────────────────────────────
+const BRAND_SECONDARY = '#ff82a2';
+function brandGradient(lines) {
+    return lines.map((line, i) => {
+        const t = lines.length > 1 ? i / (lines.length - 1) : 0;
+        const r = Math.round(0xff + (0xcd - 0xff) * t);
+        const g = Math.round(0x82 + (0x47 - 0x82) * t);
+        const b = Math.round(0xa2 + (0x6a - 0xa2) * t);
+        const hex = `#${r.toString(16).padStart(2, '0')}${g.toString(16).padStart(2, '0')}${b.toString(16).padStart(2, '0')}`;
+        return chalk.hex(hex)(line);
+    });
+}
+// ── ANSI helpers ──────────────────────────────────────────────
+function stripAnsi(str) {
+    // eslint-disable-next-line no-control-regex
+    return str.replace(/\x1b\[[0-9;]*m/g, '');
+}
+// ── Box-drawing ──────────────────────────────────────────────
+const BOX = {
+    tl: '\u250c', // ┌
+    tr: '\u2510', // ┐
+    bl: '\u2514', // └
+    br: '\u2518', // ┘
+    h: '\u2500', // ─
+    v: '\u2502', // │
+};
+function drawBox(title, lines, width) {
+    const innerWidth = width - 2;
+    const label = ` ${title} `;
+    const remaining = innerWidth - label.length;
+    const left = Math.floor(remaining / 2);
+    const right = remaining - left;
+    const top = `${BOX.tl}${BOX.h.repeat(left)}${label}${BOX.h.repeat(right)}${BOX.tr}`;
+    const rows = lines.map((line) => {
+        const visible = stripAnsi(line).length;
+        const pad = innerWidth - visible;
+        return `${BOX.v}${line}${' '.repeat(Math.max(0, pad))}${BOX.v}`;
+    });
+    const bottom = `${BOX.bl}${BOX.h.repeat(innerWidth)}${BOX.br}`;
+    return [top, ...rows, bottom].map((l) => chalk.dim(l)).join('\n');
+}
+// ── ASCII art (ANSI Shadow style) ────────────────────────────
+const ASCII_ART = `
+███████╗██╗  ██╗██╗  ██╗███████╗███╗   ███╗ █████╗
+██╔════╝██║ ██╔╝██║  ██║██╔════╝████╗ ████║██╔══██╗
+███████╗█████╔╝ ███████║█████╗  ██╔████╔██║███████║
+╚════██║██╔═██╗ ██╔══██║██╔══╝  ██║╚██╔╝██║██╔══██║
+███████║██║  ██╗██║  ██║███████╗██║ ╚═╝ ██║██║  ██║ ██╗
+╚══════╝╚═╝  ╚═╝╚═╝  ╚═╝╚══════╝╚═╝     ╚═╝╚═╝  ╚═╝ ╚═╝`.trimStart();
+// ── Main export ──────────────────────────────────────────────
+export function showBanner(cliVersion) {
+    const args = process.argv;
+    if (args.includes('--quiet') || args.includes('--json'))
+        return;
+    if (!process.stdout.isTTY)
+        return;
+    const boxWidth = 58;
+    // ── ASCII art ──
+    const rawLines = ASCII_ART.split('\n');
+    const artLines = brandGradient(rawLines).map((line) => ' ' + line);
+    console.log('');
+    console.log(artLines.join('\n'));
+    // ── Version ──
+    console.log(chalk.dim(`  v${cliVersion}`));
+    console.log('');
+    // ── Getting Started box ──
+    const tips = [
+        ['skhema auth login', 'Browser OAuth login'],
+        ['skhema auth login --headless', 'Device code (SSH)'],
+        ['skhema auth status', 'Show auth status'],
+        ['skhema skills install', 'Install AI skills'],
+        ['skhema skills list', 'Show installed skills'],
+        ['skhema --help', 'Show all commands'],
+    ];
+    const cmdWidth = 32;
+    const tipLines = tips.map(([cmd, desc]) => {
+        return `  ${chalk.hex(BRAND_SECONDARY)(cmd.padEnd(cmdWidth))}${desc}`;
+    });
+    console.log(drawBox('Getting Started', tipLines, boxWidth));
+    console.log('');
+}

package/dist/lib/config-store.d.ts ADDED Viewed

@@ -0,0 +1,23 @@
+/**
+ * User-level CLI preferences persisted at `~/.skhema/config.json` (mode 0600).
+ * Distinct from the credential stores (keychain/`credentials.json`/`api-key.json`)
+ * — this file holds only non-secret defaults such as the active workspace.
+ * Writes are merge-safe: unknown keys already in the file are preserved.
+ */
+export interface CliConfig {
+    /** Default workspace id used when a command omits `--workspace`. */
+    defaultWorkspaceId?: string;
+    [key: string]: unknown;
+}
+/** Read the full config object. Returns `{}` when the file is absent or invalid. */
+export declare function readConfig(): CliConfig;
+/**
+ * Merge `patch` into the existing config and persist it. Keys set to `undefined`
+ * are removed. The directory (0700) and file (0600) are created as needed.
+ */
+export declare function writeConfig(patch: CliConfig): CliConfig;
+export declare function getDefaultWorkspaceId(): string | undefined;
+/** Set (or, with `undefined`, clear) the default workspace id. */
+export declare function setDefaultWorkspaceId(workspaceId: string | undefined): void;
+export declare function getConfigLocation(): string;
+//# sourceMappingURL=config-store.d.ts.map

package/dist/lib/config-store.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"config-store.d.ts","sourceRoot":"","sources":["../../src/lib/config-store.ts"],"names":[],"mappings":"AAKA;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,oEAAoE;IACpE,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB;AAUD,oFAAoF;AACpF,wBAAgB,UAAU,IAAI,SAAS,CAWtC;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,CAavD;AAED,wBAAgB,qBAAqB,IAAI,MAAM,GAAG,SAAS,CAE1D;AAED,kEAAkE;AAClE,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAE3E;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C"}

package/dist/lib/config-store.js ADDED Viewed

@@ -0,0 +1,53 @@
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+import { CONFIG_FILE, CREDENTIALS_DIR } from './config.js';
+function getConfigDir() {
+    return path.join(os.homedir(), CREDENTIALS_DIR);
+}
+function getConfigFilePath() {
+    return path.join(getConfigDir(), CONFIG_FILE);
+}
+/** Read the full config object. Returns `{}` when the file is absent or invalid. */
+export function readConfig() {
+    try {
+        const raw = fs.readFileSync(getConfigFilePath(), 'utf-8');
+        const parsed = JSON.parse(raw);
+        if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {
+            return parsed;
+        }
+        return {};
+    }
+    catch {
+        return {};
+    }
+}
+/**
+ * Merge `patch` into the existing config and persist it. Keys set to `undefined`
+ * are removed. The directory (0700) and file (0600) are created as needed.
+ */
+export function writeConfig(patch) {
+    const current = readConfig();
+    const next = { ...current };
+    for (const [key, value] of Object.entries(patch)) {
+        if (value === undefined)
+            delete next[key];
+        else
+            next[key] = value;
+    }
+    fs.mkdirSync(getConfigDir(), { recursive: true, mode: 0o700 });
+    fs.writeFileSync(getConfigFilePath(), JSON.stringify(next, null, 2) + '\n', {
+        mode: 0o600,
+    });
+    return next;
+}
+export function getDefaultWorkspaceId() {
+    return readConfig().defaultWorkspaceId;
+}
+/** Set (or, with `undefined`, clear) the default workspace id. */
+export function setDefaultWorkspaceId(workspaceId) {
+    writeConfig({ defaultWorkspaceId: workspaceId });
+}
+export function getConfigLocation() {
+    return getConfigFilePath();
+}