@stackable-labs/cli-app-extension 1.16.0 → 1.18.0

package/dist/index.js

@@ -2,8 +2,10 @@
 
 // src/index.tsx
 import { createRequire } from "module";
+import { createServer } from "http";
 import { program } from "commander";
 import { render } from "ink";
+import open from "open";
 
 // src/App.tsx
 import { join as join3 } from "path";
@@ -752,9 +754,17 @@ import { useEffect as useEffect2, useState as useState6 } from "react";
 // src/lib/api.ts
 var DEFAULT_ADMIN_API_URL = "https://api-use1.stackablelabs.io/admin";
 var getAdminApiBaseUrl = () => process.env.ADMIN_API_BASE_URL ?? DEFAULT_ADMIN_API_URL;
-var fetchApps = async () => {
+var CLI_CLIENT_NAME = "@stackable-labs/cli-app-extension";
+var authHeaders = (token) => ({
+  authorization: `Bearer ${token}`,
+  "content-type": "application/json",
+  "x-client-name": CLI_CLIENT_NAME
+});
+var fetchApps = async (token) => {
   const baseUrl = getAdminApiBaseUrl();
-  const res = await fetch(`${baseUrl}/app-extension`);
+  const res = await fetch(`${baseUrl}/app-extension`, {
+    headers: authHeaders(token)
+  });
   if (!res.ok) {
     throw new Error(`Failed to fetch apps${baseUrl !== DEFAULT_ADMIN_API_URL ? ` (from ${baseUrl})` : ""}: ${res.status} ${res.statusText}`);
   }
@@ -767,11 +777,11 @@ var fetchApps = async () => {
     iconUrl
   }));
 };
-var createExtensionRemote = async (appId, payload) => {
+var createExtensionRemote = async (appId, payload, token) => {
   const baseUrl = getAdminApiBaseUrl();
   const res = await fetch(`${baseUrl}/app-extension/${appId}/extensions`, {
     method: "POST",
-    headers: { "content-type": "application/json" },
+    headers: authHeaders(token),
     body: JSON.stringify(payload)
   });
   if (!res.ok) {
@@ -780,9 +790,11 @@ var createExtensionRemote = async (appId, payload) => {
   }
   return res.json();
 };
-var fetchExtensions = async (appId) => {
+var fetchExtensions = async (appId, token) => {
   const baseUrl = getAdminApiBaseUrl();
-  const res = await fetch(`${baseUrl}/app-extension/${appId}/extensions`);
+  const res = await fetch(`${baseUrl}/app-extension/${appId}/extensions`, {
+    headers: authHeaders(token)
+  });
   if (!res.ok) {
     throw new Error(`Failed to fetch Extensions: ${res.status} ${res.statusText}`);
   }
@@ -800,11 +812,11 @@ var fetchExtensions = async (appId) => {
     ])
   );
 };
-var updateExtension = async (appId, extensionId, payload) => {
+var updateExtension = async (appId, extensionId, payload, token) => {
   const baseUrl = getAdminApiBaseUrl();
   const res = await fetch(`${baseUrl}/app-extension/${appId}/extensions/${extensionId}`, {
     method: "PUT",
-    headers: { "content-type": "application/json" },
+    headers: authHeaders(token),
     body: JSON.stringify(payload)
   });
   if (!res.ok) {
@@ -859,13 +871,13 @@ var Banner = () => {
 
 // src/components/AppSelect.tsx
 import { jsx as jsx11, jsxs as jsxs11 } from "react/jsx-runtime";
-var AppSelect = ({ onSubmit }) => {
+var AppSelect = ({ token, onSubmit }) => {
   const [apps, setApps] = useState6([]);
   const [loading, setLoading] = useState6(true);
   const [error, setError] = useState6();
   const [cursor, setCursor] = useState6(0);
   useEffect2(() => {
-    fetchApps().then(setApps).catch((err) => setError(err instanceof Error ? err.message : String(err))).finally(() => setLoading(false));
+    fetchApps(token).then(setApps).catch((err) => setError(err instanceof Error ? err.message : String(err))).finally(() => setLoading(false));
   }, []);
   useInput6((_, key) => {
     if (loading || error || apps.length === 0) return;
@@ -917,13 +929,13 @@ import { Box as Box12, Text as Text12, useInput as useInput7 } from "ink";
 import Spinner3 from "ink-spinner";
 import { useEffect as useEffect3, useState as useState7 } from "react";
 import { jsx as jsx12, jsxs as jsxs12 } from "react/jsx-runtime";
-var ExtensionSelect = ({ appId, command, onSubmit, onBack }) => {
+var ExtensionSelect = ({ appId, token, command, onSubmit, onBack }) => {
   const [extensions, setExtensions] = useState7([]);
   const [loading, setLoading] = useState7(true);
   const [error, setError] = useState7();
   const [cursor, setCursor] = useState7(0);
   useEffect3(() => {
-    fetchExtensions(appId).then((byId) => setExtensions(Object.values(byId))).catch((err) => setError(err instanceof Error ? err.message : String(err))).finally(() => setLoading(false));
+    fetchExtensions(appId, token).then((byId) => setExtensions(Object.values(byId))).catch((err) => setError(err instanceof Error ? err.message : String(err))).finally(() => setLoading(false));
   }, [appId]);
   useInput7((_, key) => {
     if (key.upArrow) {
@@ -1074,6 +1086,7 @@ var readDevContext = async (projectRoot) => {
     appId: stackableEnv.APP_ID || null,
     extensionId: stackableEnv.EXTENSION_ID || null,
     appName: stackableEnv.APP_NAME || null,
+    orgId: stackableEnv.ORG_ID || null,
     extensionPort,
     previewPort
   };
@@ -1498,7 +1511,7 @@ var derivePermissions2 = (targets) => {
   }
   return [...permissions];
 };
-var App = ({ command, initialName, initialExtensionId, options }) => {
+var App = ({ command, token, initialName, initialExtensionId, options }) => {
   const { exit } = useApp();
   const [step, setStep] = useState8("app");
   const [name, setName] = useState8(initialName ?? options?.name ?? "");
@@ -1636,7 +1649,7 @@ var App = ({ command, initialName, initialExtensionId, options }) => {
           },
           bundleUrl: bundleUrl || void 0,
           enabled
-        });
+        }, token);
         updateStep(0, "done");
         setExtensionVersion(resolvedVersion);
         setStep("updateDone");
@@ -1664,7 +1677,7 @@ var App = ({ command, initialName, initialExtensionId, options }) => {
             allowedDomains: []
           },
           bundleUrl: `http://localhost:${extensionPort}`
-        });
+        }, token);
         resolvedExtensionId = created.id;
         setExtensionId(created.id);
         updateStep(0, "done");
@@ -1703,13 +1716,14 @@ var App = ({ command, initialName, initialExtensionId, options }) => {
   };
   switch (step) {
     case "app": {
-      return /* @__PURE__ */ jsx13(AppSelect, { onSubmit: handleAppSelect });
+      return /* @__PURE__ */ jsx13(AppSelect, { token, onSubmit: handleAppSelect });
     }
     case "extensionSelect": {
       return /* @__PURE__ */ jsx13(
         ExtensionSelect,
         {
           appId: selectedApp.id,
+          token,
           command,
           onSubmit: handleExtensionSelect,
           onBack: goBack
@@ -1880,7 +1894,7 @@ var startDevServer = (projectRoot) => {
 import { Box as Box14, Text as Text14 } from "ink";
 import { useState as useState9, useEffect as useEffect4 } from "react";
 import { jsx as jsx14, jsxs as jsxs14 } from "react/jsx-runtime";
-var DevSetup = ({ initialContext, onReady }) => {
+var DevSetup = ({ initialContext, token, onReady }) => {
   const [step, setStep] = useState9("app");
   const [selectedApp, setSelectedApp] = useState9(null);
   useEffect4(() => {
@@ -1902,7 +1916,7 @@ var DevSetup = ({ initialContext, onReady }) => {
   if (step === "app") {
     return /* @__PURE__ */ jsxs14(Box14, { flexDirection: "column", children: [
       /* @__PURE__ */ jsx14(Box14, { marginBottom: 1, children: /* @__PURE__ */ jsx14(Text14, { children: "Select the App for your extension:" }) }),
-      /* @__PURE__ */ jsx14(AppSelect, { onSubmit: handleAppSelect })
+      /* @__PURE__ */ jsx14(AppSelect, { token, onSubmit: handleAppSelect })
     ] });
   }
   return /* @__PURE__ */ jsxs14(Box14, { flexDirection: "column", children: [
@@ -1911,6 +1925,7 @@ var DevSetup = ({ initialContext, onReady }) => {
       ExtensionSelect,
       {
         appId: selectedApp?.id || initialContext.appId,
+        token,
         onSubmit: handleExtensionSelect
       }
     )
@@ -2015,7 +2030,7 @@ var DevDashboard = ({
 
 // src/components/DevApp.tsx
 import { jsx as jsx16 } from "react/jsx-runtime";
-var DevApp = ({ options = {} }) => {
+var DevApp = ({ token, options = {} }) => {
   const [state, setState] = useState10("setup");
   const [devContext, setDevContext] = useState10(null);
   const [resolvedContext, setResolvedContext] = useState10(null);
@@ -2114,6 +2129,7 @@ var DevApp = ({ options = {} }) => {
         DevSetup,
         {
           initialContext: devContext,
+          token,
           onReady: handleSetupReady
         }
       );
@@ -2142,6 +2158,54 @@ var DevApp = ({ options = {} }) => {
   return /* @__PURE__ */ jsx16(Box16, { children: /* @__PURE__ */ jsx16(Text16, { children: "Loading..." }) });
 };
 
+// src/lib/auth.ts
+import { readFile as readFile3, writeFile as writeFile3, mkdir, unlink } from "fs/promises";
+import { join as join4 } from "path";
+import { homedir } from "os";
+var AUTH_DIR = join4(homedir(), ".stackable");
+var AUTH_FILE = join4(AUTH_DIR, "auth.json");
+var readAuthState = async () => {
+  try {
+    const content = await readFile3(AUTH_FILE, "utf8");
+    return JSON.parse(content);
+  } catch {
+    return null;
+  }
+};
+var writeAuthState = async (state) => {
+  await mkdir(AUTH_DIR, { recursive: true, mode: 448 });
+  await writeFile3(AUTH_FILE, JSON.stringify(state, null, 2), { mode: 384 });
+};
+var clearAuthState = async () => {
+  try {
+    await unlink(AUTH_FILE);
+  } catch {
+  }
+};
+var decodeJwtPayload = (token) => {
+  try {
+    const [, payload] = token.split(".");
+    if (!payload) return null;
+    const json = Buffer.from(payload, "base64url").toString("utf8");
+    return JSON.parse(json);
+  } catch {
+    return null;
+  }
+};
+var getToken = async () => {
+  const state = await readAuthState();
+  if (!state) {
+    throw new Error("Not authenticated. Run `stackable auth login` first.");
+  }
+  const payload = decodeJwtPayload(state.token);
+  if (payload?.exp && typeof payload.exp === "number") {
+    if (Date.now() >= payload.exp * 1e3) {
+      throw new Error("Session expired. Run `stackable auth login` to re-authenticate.");
+    }
+  }
+  return state.token;
+};
+
 // src/lib/versionCheck.ts
 import https from "https";
 var PACKAGE_NAME = "@stackable-labs/cli-app-extension";
@@ -2195,16 +2259,107 @@ var require2 = createRequire(import.meta.url);
 var { version } = require2("../package.json");
 checkForUpdate(version);
 program.name("stackable-app-extension").description("Stackable Labs - App Extension developer CLI").version(version);
-program.command("create" /* CREATE */).description("Create a new Extension project").argument("[name]", "Extension project name").option("--extension-port <port>", "Extension dev server port (default: 6543)").option("--preview-port <port>", "Preview dev server port").option("--skip-install", "Skip package manager install").option("--skip-git", "Skip git initialization").action((name, options) => {
-  render(/* @__PURE__ */ jsx17(App, { command: "create" /* CREATE */, initialName: name, options }));
+program.command("create" /* CREATE */).description("Create a new Extension project").argument("[name]", "Extension project name").option("--extension-port <port>", "Extension dev server port (default: 6543)").option("--preview-port <port>", "Preview dev server port").option("--skip-install", "Skip package manager install").option("--skip-git", "Skip git initialization").action(async (name, options) => {
+  const token = await getToken();
+  render(/* @__PURE__ */ jsx17(App, { command: "create" /* CREATE */, initialName: name, options, token }));
+});
+program.command("scaffold" /* SCAFFOLD */).description("Scaffold a local project from an existing Extension").option("--extension-port <port>", "Extension dev server port (default: 6543)").option("--preview-port <port>", "Preview dev server port").option("--skip-install", "Skip package manager install").option("--skip-git", "Skip git initialization").action(async (options) => {
+  const token = await getToken();
+  render(/* @__PURE__ */ jsx17(App, { command: "scaffold" /* SCAFFOLD */, options, token }));
+});
+program.command("update" /* UPDATE */).description("Update an existing Extension").argument("[extensionId]", "Extension ID to update").option("--app-id <id>", "Skip App selection").option("--name <name>", "New Extension name").option("--targets <targets>", "Comma-separated target slots (validated against app)").option("--bundle-url <url>", "New bundle URL").option("--enabled <bool>", "Enable/disable Extension").option("--set-version <version>", "Explicit version (skips auto-compute)").action(async (extensionId, options) => {
+  const token = await getToken();
+  render(/* @__PURE__ */ jsx17(App, { command: "update" /* UPDATE */, initialExtensionId: extensionId, options, token }));
 });
-program.command("scaffold" /* SCAFFOLD */).description("Scaffold a local project from an existing Extension").option("--extension-port <port>", "Extension dev server port (default: 6543)").option("--preview-port <port>", "Preview dev server port").option("--skip-install", "Skip package manager install").option("--skip-git", "Skip git initialization").action((options) => {
-  render(/* @__PURE__ */ jsx17(App, { command: "scaffold" /* SCAFFOLD */, options }));
+program.command("dev" /* DEV */).description("Start dev servers with a public tunnel").option("--dir <path>", "Project root (default: cwd)").option("--extension-port <port>", "Override Extension port").option("--preview-port <port>", "Override Preview port").option("--no-tunnel", "Skip tunnel, just run vite dev").action(async (options) => {
+  const token = await getToken();
+  render(/* @__PURE__ */ jsx17(DevApp, { options, token }), { exitOnCtrlC: false });
+});
+var DASHBOARD_URL = process.env.ADMIN_DASHBOARD_URL ?? "https://admin.stackablelabs.io";
+var auth = program.command("auth").description("Manage CLI authentication");
+var LOGIN_TIMEOUT_MS = 5 * 60 * 1e3;
+auth.command("login").description("Authenticate with Stackable via browser").action(async () => {
+  let resolveToken;
+  let rejectToken;
+  const tokenPromise = new Promise((resolve, reject) => {
+    resolveToken = resolve;
+    rejectToken = reject;
+  });
+  const server = createServer((req, res) => {
+    const url = new URL(req.url, "http://localhost");
+    if (url.pathname === "/callback") {
+      const error = url.searchParams.get("error");
+      if (error) {
+        res.writeHead(200, { "content-type": "text/html" });
+        res.end("<html><body><h2>Authentication failed \u2014 you can close this tab.</h2></body></html>");
+        rejectToken(new Error(error));
+        return;
+      }
+      const token2 = url.searchParams.get("token");
+      if (token2) {
+        res.writeHead(200, { "content-type": "text/html" });
+        res.end("<html><body><h2>CLI authenticated \u2014 you can close this tab.</h2></body></html>");
+        resolveToken(token2);
+      } else {
+        res.writeHead(400, { "content-type": "text/plain" });
+        res.end("Missing token");
+      }
+    } else {
+      res.writeHead(404);
+      res.end();
+    }
+  });
+  await new Promise((r) => server.listen(0, "127.0.0.1", r));
+  const port = server.address().port;
+  const callbackUrl = `http://localhost:${port}/callback`;
+  const loginUrl = `${DASHBOARD_URL}/cli-auth?callback=${encodeURIComponent(callbackUrl)}`;
+  console.log(`
+Opening browser to authenticate...
+  ${loginUrl}
+`);
+  await open(loginUrl);
+  const timeout = setTimeout(() => {
+    server.close();
+    rejectToken(new Error("Login timed out. Please try again."));
+  }, LOGIN_TIMEOUT_MS);
+  let token;
+  try {
+    token = await tokenPromise;
+  } catch (err) {
+    clearTimeout(timeout);
+    server.close();
+    console.error(err instanceof Error ? err.message : String(err));
+    process.exit(1);
+  }
+  clearTimeout(timeout);
+  server.close();
+  const [, payloadB64] = token.split(".");
+  const payload = JSON.parse(Buffer.from(payloadB64, "base64url").toString());
+  await writeAuthState({
+    token,
+    userId: payload.sub,
+    orgId: payload.orgId,
+    orgSlug: payload.orgSlug
+  });
+  console.log(`Logged in \u2014 org: ${payload.orgSlug ?? payload.orgId}`);
 });
-program.command("update" /* UPDATE */).description("Update an existing Extension").argument("[extensionId]", "Extension ID to update").option("--app-id <id>", "Skip App selection").option("--name <name>", "New Extension name").option("--targets <targets>", "Comma-separated target slots (validated against app)").option("--bundle-url <url>", "New bundle URL").option("--enabled <bool>", "Enable/disable Extension").option("--set-version <version>", "Explicit version (skips auto-compute)").action((extensionId, options) => {
-  render(/* @__PURE__ */ jsx17(App, { command: "update" /* UPDATE */, initialExtensionId: extensionId, options }));
+auth.command("logout").description("Clear stored CLI credentials").action(async () => {
+  await clearAuthState();
+  console.log("Logged out.");
 });
-program.command("dev" /* DEV */).description("Start dev servers with a public tunnel").option("--dir <path>", "Project root (default: cwd)").option("--extension-port <port>", "Override Extension port").option("--preview-port <port>", "Override Preview port").option("--no-tunnel", "Skip tunnel, just run vite dev").action((options) => {
-  render(/* @__PURE__ */ jsx17(DevApp, { options }), { exitOnCtrlC: false });
+auth.command("status").description("Show current authentication status").action(async () => {
+  const state = await readAuthState();
+  if (!state) {
+    console.log("Not logged in. Run `stackable auth login`.");
+    return;
+  }
+  const [, payloadB64] = state.token.split(".");
+  const payload = JSON.parse(Buffer.from(payloadB64, "base64url").toString());
+  const expiry = payload.exp ? new Date(payload.exp * 1e3) : null;
+  if (expiry && Date.now() >= expiry.getTime()) {
+    console.log(`Session expired (${expiry.toLocaleDateString()}). Run \`stackable auth login\` to re-authenticate.`);
+    return;
+  }
+  console.log(`Logged in \u2014 org: ${state.orgSlug ?? state.orgId}${expiry ? `. Token expires: ${expiry.toLocaleDateString()}.` : ""}`);
 });
 program.parse(process.argv.filter((arg) => arg !== "--"));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stackable-labs/cli-app-extension",
-  "version": "1.16.0",
+  "version": "1.18.0",
   "type": "module",
   "private": false,
   "bin": {
@@ -19,6 +19,7 @@
     "ink-spinner": "5.x",
     "ink-text-input": "6.x",
     "nypm": "0.4.x",
+    "open": "10.x",
     "react": "18.x"
   },
   "description": "CLI for scaffolding Stackable extension projects.",