@syngy/account-cli-auth 0.1.0

package/package.json

@@ -0,0 +1,35 @@
+{
+  "name": "@syngy/account-cli-auth",
+  "version": "0.1.0",
+  "description": "Shared account CLI authentication helpers",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "scripts": {
+    "build": "rm -rf dist && tsc",
+    "dev": "tsx src/index.ts",
+    "test": "vitest run src/__tests__",
+    "type-check": "tsc --noEmit",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "commander": "^12.0.0",
+    "open": "^11.0.0",
+    "zod": "^3.24.1"
+  },
+  "devDependencies": {
+    "@types/node": "^20.19.27",
+    "tsx": "^4.21.0",
+    "typescript": "^5.9.3",
+    "vitest": "^3.0.8"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}

package/src/__tests__/auth-command.spec.ts

@@ -0,0 +1,74 @@
+import { mkdtempSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { describe, expect, it, vi } from "vitest";
+import { createAccountAuthCommand, listProfiles } from "../index";
+
+describe("account auth command", () => {
+  it("manages profile selection in the shared auth command", async () => {
+    const homeDir = mkdtempSync(join(tmpdir(), "account-cli-auth-command-"));
+    const logs: string[] = [];
+    const command = createAccountAuthCommand({
+      cliName: "qixi-cli",
+      cliVersion: "0.1.0",
+      configDirName: "qixi-cli",
+      homeDir: () => homeDir,
+      resolveRuntime: () => ({
+        host: "https://qixi.example.com",
+        accountHost: "https://account.example.com",
+        accountWebHost: "https://account.example.com",
+        scope: "user",
+        profile: undefined,
+      }),
+      output: (value) => logs.push(value),
+    });
+
+    await command.parseAsync(["node", "auth", "profiles", "use", "prod"]);
+    await command.parseAsync(["node", "auth", "profiles", "current"]);
+
+    expect(listProfiles({ homeDir, configDirName: "qixi-cli" })).toEqual([]);
+    expect(logs).toEqual(['Current profile set to "prod".', "prod"]);
+  });
+
+  it("runs jcode login from the shared auth command", async () => {
+    const homeDir = mkdtempSync(join(tmpdir(), "account-cli-auth-command-login-"));
+    const login = vi.fn().mockResolvedValue({
+      profile: "prod",
+      credentials: {
+        token: "access",
+        refreshToken: "refresh",
+        userId: "user_1",
+        host: "https://qixi.example.com",
+        accountHost: "https://account.example.com",
+        accountWebHost: "https://account.example.com",
+        scope: "user",
+      },
+    });
+    const command = createAccountAuthCommand({
+      cliName: "qixi-cli",
+      cliVersion: "0.1.0",
+      configDirName: "qixi-cli",
+      homeDir: () => homeDir,
+      resolveRuntime: () => ({
+        host: "https://qixi.example.com",
+        accountHost: "https://account.example.com",
+        accountWebHost: "https://account.example.com",
+        scope: "user",
+        profile: "prod",
+      }),
+      login,
+      output: () => undefined,
+    });
+
+    await command.parseAsync(["node", "auth", "login", "--profile", "prod", "--no-open"]);
+
+    expect(login).toHaveBeenCalledWith(
+      expect.objectContaining({
+        cliName: "qixi-cli",
+        configDirName: "qixi-cli",
+        profile: "prod",
+        openBrowser: false,
+      }),
+    );
+  });
+});

package/src/__tests__/credentials.spec.ts

@@ -0,0 +1,32 @@
+import { mkdtempSync, readFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { describe, expect, it } from "vitest";
+import { AccountCLICredentialsManager, listProfiles, saveCurrentProfile } from "../index";
+
+describe("account CLI credentials", () => {
+  it("stores credentials under ~/.config/<cli-name>", () => {
+    const homeDir = mkdtempSync(join(tmpdir(), "account-cli-auth-"));
+    new AccountCLICredentialsManager({ homeDir, configDirName: "qixi-cli", profile: "prod" }).saveCredentials({
+      token: "access",
+      refreshToken: "refresh",
+      expiresAt: 123,
+      userId: "user_1",
+      phone: "+8613800000000",
+      host: "https://qixi.example.com",
+      accountHost: "https://account.example.com",
+      accountWebHost: "https://account-web.example.com",
+      scope: "user",
+    });
+
+    const saved = JSON.parse(readFileSync(join(homeDir, ".config", "qixi-cli", "profiles", "prod", "credentials.json"), "utf8"));
+    expect(saved.token).toBe("access");
+    expect(listProfiles({ homeDir, configDirName: "qixi-cli" })).toEqual(["prod"]);
+  });
+
+  it("uses current profile from the same config directory", () => {
+    const homeDir = mkdtempSync(join(tmpdir(), "account-cli-auth-"));
+    saveCurrentProfile("prod", { homeDir, configDirName: "qixi-cli" });
+    expect(new AccountCLICredentialsManager({ homeDir, configDirName: "qixi-cli" }).profile).toBe("prod");
+  });
+});

package/src/__tests__/login.spec.ts

@@ -0,0 +1,96 @@
+import { mkdtempSync, readFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { loginWithAccountJCode } from "../index";
+
+const openMock = vi.fn();
+
+vi.mock("open", () => ({
+  default: openMock,
+}));
+
+function pin(data: unknown, init: ResponseInit = {}) {
+  return new Response(JSON.stringify({ data }), {
+    status: init.status ?? 200,
+    headers: { "Content-Type": "application/json" },
+  });
+}
+
+describe("account jcode login", () => {
+  const originalFetch = globalThis.fetch;
+
+  beforeEach(() => {
+    openMock.mockReset();
+  });
+
+  afterEach(() => {
+    globalThis.fetch = originalFetch;
+  });
+
+  it("pairs through account API and saves credentials", async () => {
+    const homeDir = mkdtempSync(join(tmpdir(), "account-cli-auth-login-"));
+    const calls: string[] = [];
+    globalThis.fetch = vi.fn(async (input: RequestInfo | URL) => {
+      const url = String(input);
+      calls.push(url);
+      if (url.endsWith("/auth/v1/cli-jcode/sessions")) {
+        return pin({
+          session_id: "jcs_test_1",
+          jcode: "12345678",
+          status: "pending",
+          login_url: "https://account.example.com/cli-jcode?session_id=jcs_test_1",
+          expires_at: "2026-06-26T12:00:00Z",
+        });
+      }
+      if (url.endsWith("/auth/v1/cli-jcode/sessions/jcs_test_1")) {
+        return pin({
+          session_id: "jcs_test_1",
+          status: "confirmed",
+          expires_at: "2026-06-26T12:00:00Z",
+        });
+      }
+      if (url.endsWith("/auth/v1/cli-jcode/exchange")) {
+        return pin({
+          user: { id: "web_user:+8613800000000", phone: "+8613800000000", aud: "web_user" },
+          session: {
+            access_token: "access-token",
+            refresh_token: "refresh-token",
+            expires_at: 1782460800,
+            token_type: "Bearer",
+          },
+        });
+      }
+      throw new Error(`unexpected URL ${url}`);
+    }) as typeof fetch;
+
+    const result = await loginWithAccountJCode({
+      cliName: "qixi-cli",
+      cliVersion: "0.1.0",
+      configDirName: "qixi-cli",
+      homeDir,
+      profile: "prod",
+      host: "https://qixi.example.com",
+      accountHost: "https://account.example.com",
+      accountWebHost: "https://account.example.com",
+      scope: "user",
+      openBrowser: false,
+      pollIntervalMs: 1,
+      maxPollAttempts: 2,
+      output: () => undefined,
+    });
+
+    expect(openMock).not.toHaveBeenCalled();
+    expect(calls).toEqual([
+      "https://account.example.com/auth/v1/cli-jcode/sessions",
+      "https://account.example.com/auth/v1/cli-jcode/sessions/jcs_test_1",
+      "https://account.example.com/auth/v1/cli-jcode/exchange",
+    ]);
+    expect(result.profile).toBe("prod");
+    const saved = JSON.parse(readFileSync(join(homeDir, ".config", "qixi-cli", "profiles", "prod", "credentials.json"), "utf8"));
+    expect(saved.token).toBe("access-token");
+    expect(saved.refreshToken).toBe("refresh-token");
+    expect(saved.userId).toBe("web_user:+8613800000000");
+    expect(saved.phone).toBe("+8613800000000");
+  });
+});