@vibecheckai/cli 2.5.1

package/dist/runtime/cli-errors.js

@@ -0,0 +1,354 @@
+"use strict";
+/**
+ * Shared CLI error formatting utilities
+ * Provides user-friendly, actionable error messages with optional debug information
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isDebugEnabled = isDebugEnabled;
+exports.redactSecrets = redactSecrets;
+exports.formatCliError = formatCliError;
+exports.classifyError = classifyError;
+const colors = {
+    reset: '\x1b[0m',
+    red: '\x1b[31m',
+    yellow: '\x1b[33m',
+    cyan: '\x1b[36m',
+    green: '\x1b[32m',
+    bold: '\x1b[1m',
+    dim: '\x1b[2m',
+};
+const c = {
+    red: (text) => `${colors.red}${text}${colors.reset}`,
+    yellow: (text) => `${colors.yellow}${text}${colors.reset}`,
+    cyan: (text) => `${colors.cyan}${text}${colors.reset}`,
+    green: (text) => `${colors.green}${text}${colors.reset}`,
+    bold: (text) => `${colors.bold}${text}${colors.reset}`,
+    dim: (text) => `${colors.dim}${text}${colors.reset}`,
+};
+/**
+ * Check if debug mode is enabled from argv or environment
+ */
+function isDebugEnabled(argv) {
+    // Support both array (process.argv) and object (parsed args)
+    if (Array.isArray(argv)) {
+        return argv.includes('--debug');
+    }
+    if (argv && typeof argv === 'object' && !Array.isArray(argv)) {
+        return !!argv.debug || !!argv.verbose;
+    }
+    return !!(process.env.DEBUG ||
+        process.env.GUARDRAIL_DEBUG ||
+        process.argv.includes('--debug'));
+}
+/**
+ * Redact secrets from text to prevent leaking API keys, tokens, etc.
+ */
+function redactSecrets(text) {
+    if (!text || typeof text !== 'string') {
+        return String(text || '');
+    }
+    let redacted = text;
+    // Redact API keys (apikey=, api_key=, apiKey=)
+    redacted = redacted.replace(/(?:apikey|api_key|apiKey)\s*=\s*([^\s"'&;]+)/gi, (match, key) => {
+        if (key.length > 8) {
+            return match.replace(key, key.substring(0, 4) + '***' + key.substring(key.length - 4));
+        }
+        return match.replace(key, '***');
+    });
+    // Redact tokens (token=, access_token=, bearer tokens)
+    redacted = redacted.replace(/(?:token|access_token|refresh_token)\s*=\s*([^\s"'&;]+)/gi, (match, token) => {
+        if (token.length > 8) {
+            return match.replace(token, token.substring(0, 4) + '***' + token.substring(token.length - 4));
+        }
+        return match.replace(token, '***');
+    });
+    // Redact Authorization headers (Authorization: Bearer, Authorization: Basic)
+    redacted = redacted.replace(/Authorization:\s*(?:Bearer|Basic)\s+([^\s"'&;]+)/gi, (match, auth) => {
+        if (auth.length > 8) {
+            return match.replace(auth, auth.substring(0, 4) + '***' + auth.substring(auth.length - 4));
+        }
+        return match.replace(auth, '***');
+    });
+    // Redact common secret patterns
+    const secretPatterns = [
+        /(?:password|pwd|passwd)\s*=\s*([^\s"'&;]+)/gi,
+        /(?:secret|secret_key)\s*=\s*([^\s"'&;]+)/gi,
+        /(?:private[_-]?key)\s*=\s*([^\s"'&;]+)/gi,
+    ];
+    for (const pattern of secretPatterns) {
+        redacted = redacted.replace(pattern, (match, secret) => {
+            return match.replace(secret, '***REDACTED***');
+        });
+    }
+    return redacted;
+}
+/**
+ * Extract file path from error message
+ */
+function extractPathFromMessage(message) {
+    const pathMatch = message.match(/['"]([^'"]+)['"]/);
+    return pathMatch ? pathMatch[1] : null;
+}
+/**
+ * Determine error type and extract context
+ */
+function classifyError(err) {
+    const error = err instanceof Error ? err : new Error(String(err));
+    const message = error.message || String(err);
+    const code = error.code || error.statusCode || error.name;
+    // API connection errors
+    if (code === 'ECONNREFUSED' ||
+        code === 'ECONNRESET' ||
+        code === 'ETIMEDOUT' ||
+        code === 'ENOTFOUND' ||
+        code === 'ENETUNREACH' ||
+        error.name === 'NetworkError' ||
+        message.includes('connect') ||
+        message.includes('network') ||
+        message.includes('timeout') ||
+        message.includes('ECONN')) {
+        return {
+            type: 'API_CONNECTION',
+            headline: 'Cannot connect to Guardrail API',
+            whatHappened: 'Failed to establish connection to the Guardrail service',
+            why: [
+                'Your internet connection may be down',
+                'The Guardrail service may be temporarily unavailable',
+                'A firewall or proxy may be blocking the connection',
+            ],
+            whatToDo: [
+                'Check your internet connection',
+                'Verify the service status at https://status.getguardrail.io',
+                'Check firewall/proxy settings if behind a corporate network',
+                'Try again in a few moments',
+            ],
+        };
+    }
+    // File not found errors
+    if (code === 'ENOENT' ||
+        message.includes('not found') ||
+        message.includes('Cannot find') ||
+        message.includes('does not exist')) {
+        const path = error.path || extractPathFromMessage(message);
+        return {
+            type: 'FILE_NOT_FOUND',
+            headline: 'File or directory not found',
+            whatHappened: `The requested file or directory could not be located${path ? `: ${path}` : ''}`,
+            why: [
+                'The file may have been moved or deleted',
+                'The path may be incorrect',
+                'You may not have the required files in your project',
+            ],
+            whatToDo: [
+                `Verify the path is correct${path ? `: ${path}` : ''}`,
+                'Check if the file exists in your project',
+                'Ensure you are running the command from the correct directory',
+            ],
+        };
+    }
+    // Permission errors
+    if (code === 'EACCES' ||
+        code === 'EPERM' ||
+        message.includes('permission') ||
+        message.includes('access denied') ||
+        message.includes('Permission denied')) {
+        return {
+            type: 'PERMISSION',
+            headline: 'Permission denied',
+            whatHappened: 'You do not have permission to perform this operation',
+            why: [
+                'The file or directory may be owned by another user',
+                'Your user account may not have the required privileges',
+                'The file system may have restricted access',
+            ],
+            whatToDo: [
+                'Check file permissions: `ls -la` (Unix) or check Properties (Windows)',
+                'Run with appropriate user privileges',
+                'Contact your system administrator if needed',
+            ],
+        };
+    }
+    // Configuration errors
+    if (code === 'EINVAL' ||
+        message.includes('invalid') ||
+        message.includes('configuration') ||
+        message.includes('config') ||
+        message.includes('missing') ||
+        error.name === 'ValidationError') {
+        return {
+            type: 'CONFIGURATION',
+            headline: 'Configuration error',
+            whatHappened: 'The configuration is invalid or missing required settings',
+            why: [
+                'Required configuration values may be missing',
+                'The configuration file may be malformed',
+                'Environment variables may not be set correctly',
+            ],
+            whatToDo: [
+                'Check your .env file or configuration file',
+                'Verify all required environment variables are set',
+                'Run `guardrail login` if authentication is required',
+                'See documentation: https://docs.getguardrail.io',
+            ],
+        };
+    }
+    // Authentication/Authorization errors
+    if (code === 401 ||
+        code === 'UNAUTHORIZED' ||
+        code === 403 ||
+        code === 'FORBIDDEN' ||
+        error.name === 'AuthenticationError' ||
+        message.includes('authentication') ||
+        message.includes('unauthorized') ||
+        message.includes('forbidden')) {
+        return {
+            type: 'AUTHENTICATION',
+            headline: code === 403 || code === 'FORBIDDEN' ? 'Access denied' : 'Authentication failed',
+            whatHappened: code === 403 || code === 'FORBIDDEN'
+                ? 'You do not have permission to access this resource'
+                : 'Your authentication credentials are invalid or expired',
+            why: [
+                code === 403 || code === 'FORBIDDEN'
+                    ? 'Your account may not have the required permissions'
+                    : 'Your API key may be missing, invalid, or expired',
+                'You may need to upgrade your plan for this feature',
+            ],
+            whatToDo: [
+                code === 403 || code === 'FORBIDDEN'
+                    ? 'Check your account permissions and plan tier'
+                    : 'Run `guardrail login` to authenticate',
+                'Verify your API key at https://getguardrail.io/settings/keys',
+                'Check if this feature requires a premium plan',
+            ],
+        };
+    }
+    // Tier restriction errors
+    if (code === 'LIMIT_EXCEEDED' ||
+        code === 'FEATURE_NOT_AVAILABLE' ||
+        code === 'TIER_RESTRICTION' ||
+        message.includes('tier') ||
+        message.includes('upgrade') ||
+        message.includes('premium') ||
+        message.includes('limit')) {
+        return {
+            type: 'TIER_RESTRICTION',
+            headline: 'Feature not available on your plan',
+            whatHappened: 'This feature requires a higher tier subscription',
+            why: [
+                'Your current plan does not include this feature',
+                'You may have exceeded your usage limits',
+            ],
+            whatToDo: [
+                'Visit https://getguardrail.io/pricing to upgrade',
+                'Check your usage limits: `guardrail status`',
+                'Contact support if you believe this is an error',
+            ],
+        };
+    }
+    // Generic error
+    return {
+        type: 'UNKNOWN',
+        headline: 'An error occurred',
+        whatHappened: message || 'An unexpected error occurred',
+        why: ['An unexpected error occurred during execution'],
+        whatToDo: [
+            'Check the error message above for details',
+            'Run with --debug for more information',
+            'If the issue persists, contact support',
+        ],
+    };
+}
+/**
+ * Format a CLI error with user-friendly structure
+ */
+function formatCliError(err, options = {}) {
+    const { debug = false, context = '' } = options;
+    const debugMode = isDebugEnabled(debug !== false ? debug : process.argv);
+    const classification = classifyError(err);
+    const error = err instanceof Error ? err : new Error(String(err));
+    // Build the error message
+    const lines = [];
+    // Headline
+    lines.push(c.red(c.bold(`✗ ${classification.headline}`)));
+    lines.push('');
+    // What happened
+    lines.push(c.bold('What happened:'));
+    lines.push(`  ${classification.whatHappened}`);
+    if (context) {
+        lines.push(`  ${c.dim(`Context: ${context}`)}`);
+    }
+    lines.push('');
+    // Why it happened
+    if (classification.why && classification.why.length > 0) {
+        lines.push(c.bold('Why it happened:'));
+        classification.why.forEach((reason) => {
+            lines.push(`  • ${reason}`);
+        });
+        lines.push('');
+    }
+    // What to do next
+    if (classification.whatToDo && classification.whatToDo.length > 0) {
+        lines.push(c.bold('What to do next:'));
+        classification.whatToDo.slice(0, 3).forEach((action) => {
+            lines.push(`  • ${action}`);
+        });
+        lines.push('');
+    }
+    // Debug information
+    if (debugMode) {
+        lines.push(c.dim('─'.repeat(60)));
+        lines.push(c.dim(c.bold('Debug Information:')));
+        lines.push('');
+        // Stack trace
+        if (error.stack) {
+            lines.push(c.dim('Stack trace:'));
+            const redactedStack = redactSecrets(error.stack);
+            lines.push(c.dim(redactedStack));
+            lines.push('');
+        }
+        // Raw error details
+        lines.push(c.dim('Error details:'));
+        const errorDetails = {
+            name: error.name,
+            code: error.code || error.statusCode,
+            message: error.message,
+        };
+        if (error.response) {
+            errorDetails.response = {
+                status: error.response.status,
+                statusText: error.response.statusText,
+                body: redactSecrets(typeof error.response.body === 'string'
+                    ? error.response.body
+                    : JSON.stringify(error.response.body || {})),
+            };
+        }
+        if (error.body) {
+            errorDetails.body = redactSecrets(typeof error.body === 'string' ? error.body : JSON.stringify(error.body || {}));
+        }
+        const redactedDetails = redactSecrets(JSON.stringify(errorDetails, null, 2));
+        lines.push(c.dim(redactedDetails));
+    }
+    else {
+        lines.push(c.dim('💡 Run with --debug for detailed error information'));
+    }
+    // Determine exit code based on error type
+    let exitCode = 1; // Default: verification failed
+    if (classification.type === 'FILE_NOT_FOUND' ||
+        classification.type === 'CONFIGURATION' ||
+        classification.type === 'PERMISSION' ||
+        classification.type === 'AUTHENTICATION') {
+        exitCode = 2; // User error
+    }
+    else if (classification.type === 'TIER_RESTRICTION') {
+        exitCode = 2; // User error (need to upgrade)
+    }
+    else if (classification.type === 'API_CONNECTION') {
+        exitCode = 1; // Verification failed (couldn't complete check)
+    }
+    return {
+        exitCode,
+        message: lines.join('\n'),
+        type: classification.type,
+    };
+}
+//# sourceMappingURL=cli-errors.js.map

package/dist/runtime/cli-errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-errors.js","sourceRoot":"","sources":["../../src/runtime/cli-errors.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AA2CH,wCAaC;AAKD,sCAsDC;AA0MD,wCAuGC;AAGQ,sCAAa;AAratB,MAAM,MAAM,GAAG;IACb,KAAK,EAAE,SAAS;IAChB,GAAG,EAAE,UAAU;IACf,MAAM,EAAE,UAAU;IAClB,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,UAAU;IACjB,IAAI,EAAE,SAAS;IACf,GAAG,EAAE,SAAS;CACf,CAAC;AAEF,MAAM,CAAC,GAAG;IACR,GAAG,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,GAAG,GAAG,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE;IAC5D,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE;IAClE,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,GAAG,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE;IAC9D,KAAK,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,GAAG,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE;IAChE,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,GAAG,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE;IAC9D,GAAG,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,GAAG,GAAG,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE;CAC7D,CAAC;AAqBF;;GAEG;AACH,SAAgB,cAAc,CAAC,IAA+C;IAC5E,6DAA6D;IAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,OAAO,CAAC,CAAE,IAAY,CAAC,KAAK,IAAI,CAAC,CAAE,IAAY,CAAC,OAAO,CAAC;IAC1D,CAAC;IACD,OAAO,CAAC,CAAC,CACP,OAAO,CAAC,GAAG,CAAC,KAAK;QACjB,OAAO,CAAC,GAAG,CAAC,eAAe;QAC3B,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CACjC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,aAAa,CAAC,IAA+B;IAC3D,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC5B,CAAC;IAED,IAAI,QAAQ,GAAG,IAAI,CAAC;IAEpB,+CAA+C;IAC/C,QAAQ,GAAG,QAAQ,CAAC,OAAO,CACzB,gDAAgD,EAChD,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACb,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnB,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC,CACF,CAAC;IAEF,uDAAuD;IACvD,QAAQ,GAAG,QAAQ,CAAC,OAAO,CACzB,2DAA2D,EAC3D,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACf,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QACjG,CAAC;QACD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC,CACF,CAAC;IAEF,6EAA6E;IAC7E,QAAQ,GAAG,QAAQ,CAAC,OAAO,CACzB,oDAAoD,EACpD,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACd,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC,CACF,CAAC;IAEF,gCAAgC;IAChC,MAAM,cAAc,GAAG;QACrB,8CAA8C;QAC9C,4CAA4C;QAC5C,0CAA0C;KAC3C,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACrD,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,OAAe;IAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACpD,OAAO,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,GAAoB;IACzC,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAI,KAAa,CAAC,IAAI,IAAK,KAAa,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,CAAC;IAE5E,wBAAwB;IACxB,IACE,IAAI,KAAK,cAAc;QACvB,IAAI,KAAK,YAAY;QACrB,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,aAAa;QACtB,KAAK,CAAC,IAAI,KAAK,cAAc;QAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC3B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC3B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EACzB,CAAC;QACD,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,iCAAiC;YAC3C,YAAY,EAAE,yDAAyD;YACvE,GAAG,EAAE;gBACH,sCAAsC;gBACtC,sDAAsD;gBACtD,oDAAoD;aACrD;YACD,QAAQ,EAAE;gBACR,gCAAgC;gBAChC,6DAA6D;gBAC7D,6DAA6D;gBAC7D,4BAA4B;aAC7B;SACF,CAAC;IACJ,CAAC;IAED,wBAAwB;IACxB,IACE,IAAI,KAAK,QAAQ;QACjB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC7B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;QAC/B,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAClC,CAAC;QACD,MAAM,IAAI,GAAI,KAAa,CAAC,IAAI,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACpE,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,6BAA6B;YACvC,YAAY,EAAE,uDAAuD,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YAC9F,GAAG,EAAE;gBACH,yCAAyC;gBACzC,2BAA2B;gBAC3B,qDAAqD;aACtD;YACD,QAAQ,EAAE;gBACR,6BAA6B,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;gBACtD,0CAA0C;gBAC1C,+DAA+D;aAChE;SACF,CAAC;IACJ,CAAC;IAED,oBAAoB;IACpB,IACE,IAAI,KAAK,QAAQ;QACjB,IAAI,KAAK,OAAO;QAChB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC9B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;QACjC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EACrC,CAAC;QACD,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,QAAQ,EAAE,mBAAmB;YAC7B,YAAY,EAAE,sDAAsD;YACpE,GAAG,EAAE;gBACH,oDAAoD;gBACpD,wDAAwD;gBACxD,4CAA4C;aAC7C;YACD,QAAQ,EAAE;gBACR,uEAAuE;gBACvE,sCAAsC;gBACtC,6CAA6C;aAC9C;SACF,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,IACE,IAAI,KAAK,QAAQ;QACjB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC3B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;QACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC3B,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAChC,CAAC;QACD,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,qBAAqB;YAC/B,YAAY,EAAE,2DAA2D;YACzE,GAAG,EAAE;gBACH,8CAA8C;gBAC9C,yCAAyC;gBACzC,gDAAgD;aACjD;YACD,QAAQ,EAAE;gBACR,4CAA4C;gBAC5C,mDAAmD;gBACnD,qDAAqD;gBACrD,iDAAiD;aAClD;SACF,CAAC;IACJ,CAAC;IAED,sCAAsC;IACtC,IACE,IAAI,KAAK,GAAG;QACZ,IAAI,KAAK,cAAc;QACvB,IAAI,KAAK,GAAG;QACZ,IAAI,KAAK,WAAW;QACpB,KAAK,CAAC,IAAI,KAAK,qBAAqB;QACpC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAClC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAC7B,CAAC;QACD,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,uBAAuB;YAC1F,YAAY,EAAE,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,WAAW;gBAChD,CAAC,CAAC,oDAAoD;gBACtD,CAAC,CAAC,wDAAwD;YAC5D,GAAG,EAAE;gBACH,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,WAAW;oBAClC,CAAC,CAAC,oDAAoD;oBACtD,CAAC,CAAC,kDAAkD;gBACtD,oDAAoD;aACrD;YACD,QAAQ,EAAE;gBACR,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,WAAW;oBAClC,CAAC,CAAC,8CAA8C;oBAChD,CAAC,CAAC,uCAAuC;gBAC3C,8DAA8D;gBAC9D,+CAA+C;aAChD;SACF,CAAC;IACJ,CAAC;IAED,0BAA0B;IAC1B,IACE,IAAI,KAAK,gBAAgB;QACzB,IAAI,KAAK,uBAAuB;QAChC,IAAI,KAAK,kBAAkB;QAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;QACxB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC3B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EACzB,CAAC;QACD,OAAO;YACL,IAAI,EAAE,kBAAkB;YACxB,QAAQ,EAAE,oCAAoC;YAC9C,YAAY,EAAE,kDAAkD;YAChE,GAAG,EAAE;gBACH,iDAAiD;gBACjD,yCAAyC;aAC1C;YACD,QAAQ,EAAE;gBACR,kDAAkD;gBAClD,6CAA6C;gBAC7C,iDAAiD;aAClD;SACF,CAAC;IACJ,CAAC;IAED,gBAAgB;IAChB,OAAO;QACL,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,mBAAmB;QAC7B,YAAY,EAAE,OAAO,IAAI,8BAA8B;QACvD,GAAG,EAAE,CAAC,+CAA+C,CAAC;QACtD,QAAQ,EAAE;YACR,2CAA2C;YAC3C,uCAAuC;YACvC,wCAAwC;SACzC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,GAAoB,EAAE,UAAiC,EAAE;IACtF,MAAM,EAAE,KAAK,GAAG,KAAK,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC;IAChD,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,MAAM,cAAc,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAElE,0BAA0B;IAC1B,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,WAAW;IACX,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,gBAAgB;IAChB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACrC,KAAK,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,YAAY,EAAE,CAAC,CAAC;IAC/C,IAAI,OAAO,EAAE,CAAC;QACZ,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,YAAY,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,kBAAkB;IAClB,IAAI,cAAc,CAAC,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACvC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;YACpC,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,kBAAkB;IAClB,IAAI,cAAc,CAAC,QAAQ,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACvC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;YACrD,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,oBAAoB;IACpB,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,cAAc;QACd,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;YAClC,MAAM,aAAa,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,oBAAoB;QACpB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACpC,MAAM,YAAY,GAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAG,KAAa,CAAC,IAAI,IAAK,KAAa,CAAC,UAAU;YACtD,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC;QACF,IAAK,KAAa,CAAC,QAAQ,EAAE,CAAC;YAC5B,YAAY,CAAC,QAAQ,GAAG;gBACtB,MAAM,EAAG,KAAa,CAAC,QAAQ,CAAC,MAAM;gBACtC,UAAU,EAAG,KAAa,CAAC,QAAQ,CAAC,UAAU;gBAC9C,IAAI,EAAE,aAAa,CACjB,OAAQ,KAAa,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ;oBAC9C,CAAC,CAAE,KAAa,CAAC,QAAQ,CAAC,IAAI;oBAC9B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAE,KAAa,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CACvD;aACF,CAAC;QACJ,CAAC;QACD,IAAK,KAAa,CAAC,IAAI,EAAE,CAAC;YACxB,YAAY,CAAC,IAAI,GAAG,aAAa,CAC/B,OAAQ,KAAa,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAE,KAAa,CAAC,IAAI,IAAI,EAAE,CAAC,CAC1G,CAAC;QACJ,CAAC;QAED,MAAM,eAAe,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7E,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,0CAA0C;IAC1C,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC,+BAA+B;IACjD,IACE,cAAc,CAAC,IAAI,KAAK,gBAAgB;QACxC,cAAc,CAAC,IAAI,KAAK,eAAe;QACvC,cAAc,CAAC,IAAI,KAAK,YAAY;QACpC,cAAc,CAAC,IAAI,KAAK,gBAAgB,EACxC,CAAC;QACD,QAAQ,GAAG,CAAC,CAAC,CAAC,aAAa;IAC7B,CAAC;SAAM,IAAI,cAAc,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACtD,QAAQ,GAAG,CAAC,CAAC,CAAC,+BAA+B;IAC/C,CAAC;SAAM,IAAI,cAAc,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACpD,QAAQ,GAAG,CAAC,CAAC,CAAC,gDAAgD;IAChE,CAAC;IAED,OAAO;QACL,QAAQ;QACR,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QACzB,IAAI,EAAE,cAAc,CAAC,IAAI;KAC1B,CAAC;AACJ,CAAC"}

package/dist/runtime/client.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Enterprise API Client
+ * - Real entitlement validation (no key prefix parsing)
+ * - Proper timeouts and retries with exponential backoff
+ * - User-agent for tracking
+ * - Circuit breaker pattern for resilience
+ */
+import { Tier } from './creds';
+export interface AuthValidateRequest {
+    apiKey: string;
+    client: {
+        version: string;
+        os: string;
+        arch: string;
+    };
+}
+export interface AuthValidateResponse {
+    ok: boolean;
+    tier: Tier;
+    email?: string;
+    entitlements?: string[];
+    expiresAt?: string;
+    issuedAt?: string;
+    reason?: string;
+}
+export interface ValidateResponse {
+    ok: boolean;
+    tier: Tier;
+    email?: string;
+    entitlements?: string[];
+    expiresAt?: string;
+    issuedAt?: string;
+    error?: string;
+}
+export interface ClientOptions {
+    baseUrl?: string;
+    timeout?: number;
+    maxRetries?: number;
+}
+/**
+ * Validate API key against the enterprise auth endpoint
+ * POST /v1/cli/auth/validate with proper request format and retries
+ */
+export declare function validateApiKey(opts: {
+    apiKey: string;
+    baseUrl?: string;
+    timeout?: number;
+    maxRetries?: number;
+}): Promise<ValidateResponse>;
+/**
+ * Legacy validate function - wraps new validateApiKey for backwards compatibility
+ */
+export declare function validateCredentials(opts: {
+    apiKey?: string;
+    accessToken?: string;
+    baseUrl?: string;
+    timeout?: number;
+}): Promise<ValidateResponse>;
+/**
+ * Refresh access token using refresh token
+ */
+export declare function refreshAccessToken(opts: {
+    refreshToken: string;
+    baseUrl?: string;
+}): Promise<{
+    accessToken?: string;
+    expiresIn?: number;
+    error?: string;
+}>;
+/**
+ * Calculate cache expiry (15 minutes from now)
+ */
+export declare function getCacheExpiry(minutes?: number): string;
+//# sourceMappingURL=client.d.ts.map

package/dist/runtime/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/runtime/client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAG/B,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,IAAI,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,IAAI,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAcD;;;GAGG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA0G5B;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAkD5B;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,OAAO,CAAC;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA0BxE;AAcD;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,GAAE,MAAW,GAAG,MAAM,CAI3D"}

package/dist/runtime/client.js

@@ -0,0 +1,222 @@
+"use strict";
+/**
+ * Enterprise API Client
+ * - Real entitlement validation (no key prefix parsing)
+ * - Proper timeouts and retries with exponential backoff
+ * - User-agent for tracking
+ * - Circuit breaker pattern for resilience
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateApiKey = validateApiKey;
+exports.validateCredentials = validateCredentials;
+exports.refreshAccessToken = refreshAccessToken;
+exports.getCacheExpiry = getCacheExpiry;
+const auth_utils_1 = require("./auth-utils");
+const DEFAULT_API_BASE = process.env.GUARDRAIL_API_BASE_URL || 'https://api.guardrail.dev';
+const DEFAULT_TIMEOUT = 10000;
+const DEFAULT_MAX_RETRIES = 3;
+const RETRY_DELAYS = [1000, 2000, 4000]; // Exponential backoff
+/**
+ * Sleep utility for retry delays
+ */
+function sleep(ms) {
+    return new Promise(resolve => setTimeout(resolve, ms));
+}
+/**
+ * Validate API key against the enterprise auth endpoint
+ * POST /v1/cli/auth/validate with proper request format and retries
+ */
+async function validateApiKey(opts) {
+    const baseUrl = opts.baseUrl || DEFAULT_API_BASE;
+    const timeout = opts.timeout || DEFAULT_TIMEOUT;
+    const maxRetries = opts.maxRetries ?? DEFAULT_MAX_RETRIES;
+    const clientMeta = (0, auth_utils_1.getClientMetadata)();
+    const requestBody = {
+        apiKey: opts.apiKey,
+        client: clientMeta,
+    };
+    let lastError = 'Unknown error';
+    for (let attempt = 0; attempt <= maxRetries; attempt++) {
+        const controller = new AbortController();
+        const timeoutId = setTimeout(() => controller.abort(), timeout);
+        try {
+            const res = await fetch(`${baseUrl}/v1/cli/auth/validate`, {
+                method: 'POST',
+                headers: {
+                    'content-type': 'application/json',
+                    'user-agent': `guardrail-cli/${clientMeta.version} (${clientMeta.os}; ${clientMeta.arch}; node ${process.version})`,
+                    'x-client-version': clientMeta.version,
+                },
+                body: JSON.stringify(requestBody),
+                signal: controller.signal,
+            });
+            clearTimeout(timeoutId);
+            if (!res.ok) {
+                const errorBody = await res.text().catch(() => '');
+                let errorMessage;
+                try {
+                    const errorJson = JSON.parse(errorBody);
+                    errorMessage = errorJson.reason || errorJson.message || errorJson.error || `HTTP ${res.status}`;
+                }
+                catch {
+                    errorMessage = `HTTP ${res.status}: ${res.statusText}`;
+                }
+                if (res.status === 401) {
+                    return { ok: false, tier: 'free', error: 'Invalid or expired API key' };
+                }
+                if (res.status === 403) {
+                    return { ok: false, tier: 'free', error: 'Access denied - API key revoked or suspended' };
+                }
+                if (res.status === 429) {
+                    lastError = 'Rate limited - please try again later';
+                    if (attempt < maxRetries) {
+                        await sleep(RETRY_DELAYS[attempt] || 4000);
+                        continue;
+                    }
+                    return { ok: false, tier: 'free', error: lastError };
+                }
+                if (res.status >= 500) {
+                    lastError = `Server error: ${errorMessage}`;
+                    if (attempt < maxRetries) {
+                        await sleep(RETRY_DELAYS[attempt] || 4000);
+                        continue;
+                    }
+                    return { ok: false, tier: 'free', error: lastError };
+                }
+                return { ok: false, tier: 'free', error: errorMessage };
+            }
+            const data = await res.json();
+            if (!data.ok) {
+                return {
+                    ok: false,
+                    tier: 'free',
+                    error: data.reason || 'Validation failed'
+                };
+            }
+            return {
+                ok: true,
+                tier: data.tier || 'free',
+                email: data.email,
+                entitlements: data.entitlements,
+                expiresAt: data.expiresAt,
+                issuedAt: data.issuedAt,
+            };
+        }
+        catch (err) {
+            clearTimeout(timeoutId);
+            if (err.name === 'AbortError') {
+                lastError = 'Request timed out';
+            }
+            else if (err.code === 'ECONNREFUSED' || err.code === 'ENOTFOUND') {
+                lastError = 'Unable to reach Guardrail API - check your network connection';
+            }
+            else {
+                lastError = `Network error: ${err.message}`;
+            }
+            if (attempt < maxRetries) {
+                await sleep(RETRY_DELAYS[attempt] || 4000);
+                continue;
+            }
+        }
+    }
+    return { ok: false, tier: 'free', error: lastError };
+}
+/**
+ * Legacy validate function - wraps new validateApiKey for backwards compatibility
+ */
+async function validateCredentials(opts) {
+    if (!opts.apiKey && !opts.accessToken) {
+        return { ok: false, tier: 'free', error: 'No credentials provided' };
+    }
+    if (opts.apiKey) {
+        return validateApiKey({
+            apiKey: opts.apiKey,
+            baseUrl: opts.baseUrl,
+            timeout: opts.timeout,
+        });
+    }
+    // For access tokens, use the legacy endpoint
+    const baseUrl = opts.baseUrl || DEFAULT_API_BASE;
+    const timeout = opts.timeout || DEFAULT_TIMEOUT;
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), timeout);
+    try {
+        const clientMeta = (0, auth_utils_1.getClientMetadata)();
+        const res = await fetch(`${baseUrl}/v1/cli/validate`, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                'authorization': `Bearer ${opts.accessToken}`,
+                'user-agent': `guardrail-cli/${clientMeta.version} (node ${process.version})`,
+            },
+            body: JSON.stringify({ ts: new Date().toISOString() }),
+            signal: controller.signal,
+        });
+        clearTimeout(timeoutId);
+        if (!res.ok) {
+            if (res.status === 401) {
+                return { ok: false, tier: 'free', error: 'Invalid or expired credentials' };
+            }
+            return { ok: false, tier: 'free', error: `API error: ${res.status}` };
+        }
+        const data = await res.json();
+        return { ...data, ok: true };
+    }
+    catch (err) {
+        clearTimeout(timeoutId);
+        if (err.name === 'AbortError') {
+            return { ok: false, tier: 'free', error: 'Request timed out' };
+        }
+        return { ok: false, tier: 'free', error: `Network error: ${err.message}` };
+    }
+}
+/**
+ * Refresh access token using refresh token
+ */
+async function refreshAccessToken(opts) {
+    const baseUrl = opts.baseUrl || DEFAULT_API_BASE;
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), DEFAULT_TIMEOUT);
+    try {
+        const res = await fetch(`${baseUrl}/v1/cli/refresh`, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                'user-agent': `guardrail-cli/${getVersion()} (node ${process.version})`,
+            },
+            body: JSON.stringify({ refreshToken: opts.refreshToken }),
+            signal: controller.signal,
+        });
+        if (!res.ok) {
+            return { error: `Refresh failed: ${res.status}` };
+        }
+        return await res.json();
+    }
+    catch (err) {
+        return { error: err.message };
+    }
+    finally {
+        clearTimeout(timeoutId);
+    }
+}
+/**
+ * Get CLI version from package.json
+ */
+function getVersion() {
+    try {
+        const pkg = require('../../package.json');
+        return pkg.version || '0.0.0';
+    }
+    catch {
+        return '0.0.0';
+    }
+}
+/**
+ * Calculate cache expiry (15 minutes from now)
+ */
+function getCacheExpiry(minutes = 15) {
+    const expiry = new Date();
+    expiry.setMinutes(expiry.getMinutes() + minutes);
+    return expiry.toISOString();
+}
+//# sourceMappingURL=client.js.map