@whooshbang/sdk 1.0.0-rc.14 → 1.0.0-rc.18

package/README.md

@@ -78,6 +78,54 @@ both the previous and the current secret so a rotation overlap has no gap. Use
 `verifyWhooshBangWebhook` (or `verifyWebhookSignature`) for signature-only
 verification of any signed body.
 
+## Channel connections
+
+`listConnectionProviders` reports what a project can connect to, the setup
+modes each provider supports, and the WhooshBang-owned identities an
+environment may select. `listChannelConnections`, `createChannelConnection`,
+`getChannelConnection`, `updateChannelConnection`, and
+`archiveChannelConnection` cover the per-environment lifecycle. Credential
+material, and any reference to it, is structurally absent from every one of
+these results — including for the shared identities WhooshBang operates.
+
+Create takes an explicit idempotency key and returns a `pending` connection.
+Update carries the `row_version` that was read, so a rename and a disable made
+at the same time cannot silently undo each other. Archiving is terminal:
+reconnecting later is a new connection, so consent a subscriber gave to the
+archived identity is never revived under it.
+
+`createChannelConnection` is discriminated on `mode`. `whooshbang_shared`
+names a disclosed WhooshBang-owned identity by `shared_identity_id`.
+`customer_byok` supplies the customer's own provider credential — for Telegram,
+the bot token BotFather issued — and names no identity at all. The absence is
+deliberate: an endpoint that digested a client-supplied identity would answer
+"already claimed" for a bot the caller does not own, which would turn create
+into an oracle for whether any given bot is connected to WhooshBang by anyone.
+The identity is derived server-side from a provider-validated `getMe`. Pass
+`confirm_webhook_takeover` only when the customer accepts that an existing
+webhook on that bot will be replaced; without it, an occupied bot is refused.
+
+`repairChannelConnection`, `rotateChannelConnectionCredential`,
+`checkChannelConnectionHealth`, and `purgeChannelConnection` operate one
+connection after it exists. Repair reprovisions the delivery path with the
+credential already in custody. Rotate replaces that credential while keeping
+the identity, so subscribers stay bound to what they consented to. Purge
+releases the provider-side delivery path, destroys custody, and archives; it is
+repeat-safe, so a caller that lost the first response can confirm the outcome.
+
+All four are `connections:write`, including `checkChannelConnectionHealth`. A
+health check makes a live provider call and advances the connection's recorded
+health, so it is not a safe read; read `health` from `getChannelConnection`
+when the last recorded answer is enough.
+
+The Problem vocabulary is closed, so these refusals reuse published codes and
+differ by `field_errors[].code`: a rejected credential is `request_invalid`
+with `provider_credential_invalid`, an occupied webhook is `request_invalid`
+with `webhook_takeover_required`, an identity already connected by anyone is
+`idempotency_conflict` with `provider_identity_claimed`, an unreachable
+provider is `provider_outcome_unknown`, and a rate-limited one is
+`provider_retryable` with `retryAt`.
+
 ## Machine clients
 
 `createMachineCredential` generates the C0-03 secret with Web Crypto and
@@ -116,8 +164,9 @@ then revoke a replacement. Product delivery methods continue to use project-
 or machine-scoped credentials; the client does not persist either credential
 kind.
 
-Delivery, project creation, endpoint create/rotate, machine administration, and
-acknowledgement side-effects require an explicit idempotency key. Credential
+Delivery, project creation, endpoint create/rotate, connection creation,
+machine administration, and acknowledgement side-effects require an explicit
+idempotency key. Credential
 lifecycle create/rotate/revoke calls follow their one-time-reveal or intrinsic
 repeat-safe contract instead. The client sends each call exactly once. A
 transport failure on a side effect raises an error with
@@ -158,6 +207,6 @@ node packages/sdk-js/examples/send-interactive-message.mjs
 ## Compatibility
 
 The exact runtime dependency is
-`@whooshbang/contracts@1.0.0-rc.13`. Successful payloads are
+`@whooshbang/contracts@1.0.0-rc.16`. Successful payloads are
 validated with its packaged validators, while additive response fields remain
 available on the returned object.

package/dist/cli/arguments.d.ts

@@ -0,0 +1,22 @@
+/**
+ * A very small argv reader.
+ *
+ * `node:util`'s `parseArgs` is here and capable, but it wants the option
+ * vocabulary declared up front and this CLI's options differ per command. The
+ * whole grammar is `wb <words…> [--flag value] [--switch]`, which is a dozen
+ * lines to read directly and no dependency to carry into a package a library
+ * consumer also installs.
+ */
+export interface ParsedArguments {
+    /** The command path: `["project", "create"]`. */
+    readonly words: readonly string[];
+    readonly options: ReadonlyMap<string, string>;
+    readonly switches: ReadonlySet<string>;
+    /** Values repeated across several `--flag value` pairs, e.g. `--scope`. */
+    readonly repeated: ReadonlyMap<string, readonly string[]>;
+}
+export declare function parseArguments(argv: readonly string[]): ParsedArguments;
+export declare class UsageError extends Error {
+    constructor(message: string);
+}
+export declare function required(parsed: ParsedArguments, name: string, what: string): string;

package/dist/cli/arguments.js

@@ -0,0 +1,59 @@
+const SWITCHES = new Set([
+    "help",
+    "json",
+    "version",
+    "credential-stdin",
+    "yes",
+]);
+export function parseArguments(argv) {
+    const words = [];
+    const options = new Map();
+    const switches = new Set();
+    const repeated = new Map();
+    for (let index = 0; index < argv.length; index += 1) {
+        const token = argv[index];
+        if (!token.startsWith("--")) {
+            words.push(token);
+            continue;
+        }
+        const body = token.slice(2);
+        const equals = body.indexOf("=");
+        const name = equals === -1 ? body : body.slice(0, equals);
+        if (equals !== -1) {
+            const value = body.slice(equals + 1);
+            options.set(name, value);
+            repeated.set(name, [...(repeated.get(name) ?? []), value]);
+            continue;
+        }
+        if (SWITCHES.has(name)) {
+            switches.add(name);
+            continue;
+        }
+        const next = argv[index + 1];
+        if (next === undefined || next.startsWith("--")) {
+            // A bare unknown flag is a switch rather than an error: the command
+            // decides what it does and does not understand, and it can say so in its
+            // own words.
+            switches.add(name);
+            continue;
+        }
+        options.set(name, next);
+        repeated.set(name, [...(repeated.get(name) ?? []), next]);
+        index += 1;
+    }
+    return { options, repeated, switches, words };
+}
+export class UsageError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "UsageError";
+    }
+}
+export function required(parsed, name, what) {
+    const value = parsed.options.get(name);
+    if (value === undefined || value.length === 0) {
+        throw new UsageError(`--${name} is required: ${what}.`);
+    }
+    return value;
+}
+//# sourceMappingURL=arguments.js.map

package/dist/cli/arguments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"arguments.js","sourceRoot":"","sources":["../../src/cli/arguments.ts"],"names":[],"mappings":"AAkBA,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;IACvB,MAAM;IACN,MAAM;IACN,SAAS;IACT,kBAAkB;IAClB,KAAK;CACN,CAAC,CAAC;AAEH,MAAM,UAAU,cAAc,CAAC,IAAuB;IACpD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE7C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAW,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1D,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;YAClB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACzB,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;YAC3D,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,oEAAoE;YACpE,yEAAyE;YACzE,aAAa;YACb,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxB,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1D,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,OAAO,UAAW,SAAQ,KAAK;IACnC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,UAAU,QAAQ,CACtB,MAAuB,EACvB,IAAY,EACZ,IAAY;IAEZ,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,UAAU,CAAC,KAAK,IAAI,iBAAiB,IAAI,GAAG,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/cli/commands.d.ts

@@ -0,0 +1,14 @@
+import { type ParsedArguments } from "./arguments.js";
+import { type Writer } from "./output.js";
+import { resolveOrigin } from "./session.js";
+export interface CommandContext {
+    readonly parsed: ParsedArguments;
+    readonly writer: Writer;
+    readonly origin: string;
+    readonly openUrl: (url: string) => Promise<void>;
+    readonly readStdin: () => Promise<string>;
+    readonly credentialsFile?: string;
+}
+export declare function resolveCommand(words: readonly string[]): ((context: CommandContext) => Promise<void>) | null;
+export declare const COMMAND_NAMES: string[];
+export { resolveOrigin };

package/dist/cli/commands.js

@@ -0,0 +1,257 @@
+import { randomUUID } from "node:crypto";
+import { required, UsageError } from "./arguments.js";
+import { emit, emitSecret, table } from "./output.js";
+import { authorizedClient, resolveOrigin, signIn, signOut } from "./session.js";
+/**
+ * Every side-effecting call needs an idempotency key, and a person running a
+ * command by hand has no opinion about one. Generating it means a retried
+ * `wb message send` after a dropped connection is a replay rather than a
+ * second message — but only within the one invocation, which is why `--key`
+ * exists for anybody scripting a genuinely repeatable operation.
+ */
+function idempotency(parsed) {
+    return { idempotencyKey: parsed.options.get("key") ?? randomUUID() };
+}
+/**
+ * `connection` unless asked otherwise, which matches what the API does for an
+ * ordinary subscriber id. Naming it on every send keeps a script auditable:
+ * somebody reading it can see which transport it meant without knowing the
+ * defaulting rule.
+ */
+function deliveryTarget(parsed) {
+    const value = parsed.options.get("target") ?? "connection";
+    if (value !== "connection" && value !== "simulator") {
+        throw new UsageError("--target must be connection or simulator.");
+    }
+    return value;
+}
+function environmentArguments(parsed) {
+    return {
+        environmentId: required(parsed, "environment", "the environment id the operation acts in"),
+        projectId: required(parsed, "project", "the project id"),
+    };
+}
+async function client(context) {
+    return authorizedClient({
+        ...(context.credentialsFile === undefined
+            ? {}
+            : { credentialsFile: context.credentialsFile }),
+        origin: context.origin,
+    });
+}
+const commands = {
+    async login(context) {
+        const scopes = context.parsed.repeated.get("scope");
+        const session = await signIn({
+            ...(context.credentialsFile === undefined
+                ? {}
+                : { credentialsFile: context.credentialsFile }),
+            openUrl: context.openUrl,
+            origin: context.origin,
+            ...(scopes && scopes.length > 0 ? { scopes } : {}),
+        });
+        const api = await client(context);
+        const account = await api.getAccount();
+        emit(context.writer, { account: account.id, origin: context.origin, scopes: session.scopes }, [
+            `Signed in to ${context.origin}.`,
+            `Account ${account.id}.`,
+            `Permissions: ${session.scopes.join(", ")}`,
+        ]);
+    },
+    async logout(context) {
+        const removed = await signOut(context.origin, context.credentialsFile);
+        emit(context.writer, { origin: context.origin, signedOut: removed }, [
+            removed
+                ? `Signed out of ${context.origin}.`
+                : `Not signed in to ${context.origin}.`,
+        ]);
+    },
+    async whoami(context) {
+        const account = await (await client(context)).getAccount();
+        emit(context.writer, account, [
+            `Account ${account.id}`,
+            ...(account.name ? [account.name] : []),
+        ]);
+    },
+    async "project list"(context) {
+        const projects = await (await client(context)).listProjects();
+        emit(context.writer, projects, table([
+            ["ID", "SLUG", "NAME"],
+            ...projects.items.map((project) => [
+                project.id,
+                project.slug,
+                project.name,
+            ]),
+        ]));
+    },
+    async "project create"(context) {
+        const name = context.parsed.words[2];
+        if (!name)
+            throw new UsageError("wb project create <name> [--slug <slug>]");
+        const slug = context.parsed.options.get("slug") ??
+            name
+                .toLowerCase()
+                .replace(/[^a-z0-9]+/gu, "-")
+                .replace(/^-+|-+$/gu, "");
+        const project = await (await client(context)).createProject({ name, slug }, idempotency(context.parsed));
+        emit(context.writer, project, [
+            `Created project ${project.id} (${project.slug}).`,
+            ...table([
+                ["ENVIRONMENT", "KIND", "DEFAULT NOTIFIER"],
+                ...project.environments.map((environment) => [
+                    environment.id,
+                    environment.kind,
+                    environment.default_notifier.id,
+                ]),
+            ]),
+        ]);
+    },
+    async "credential create"(context) {
+        const { environmentId, projectId } = environmentArguments(context.parsed);
+        const label = required(context.parsed, "label", "what this credential is for");
+        // The contract types the scope list as a bounded tuple, so a plain
+        // string[] cannot be passed. The values are validated by the API either
+        // way; the assertion buys the caller a shape the compiler accepts.
+        const scopes = (context.parsed.repeated.get("scope") ?? [
+            "messages:write",
+            "messages:read",
+            "subscriptions:write",
+            "subscriptions:read",
+        ]);
+        const created = await (await client(context)).createApiCredential(projectId, environmentId, { label, scopes });
+        if (context.writer.json) {
+            emit(context.writer, created, []);
+            return;
+        }
+        emitSecret(context.writer, created.secret, "The complete secret is shown once and is not retrievable later. Store it now.");
+    },
+    async "connection list"(context) {
+        const { environmentId, projectId } = environmentArguments(context.parsed);
+        const connections = await (await client(context)).listChannelConnections(projectId, environmentId);
+        emit(context.writer, connections, table([
+            ["ID", "MODE", "STATUS", "NAME"],
+            ...connections.items.map((connection) => [
+                connection.id,
+                connection.mode,
+                connection.status,
+                connection.display_name,
+            ]),
+        ]));
+    },
+    async "connection providers"(context) {
+        const { environmentId, projectId } = environmentArguments(context.parsed);
+        const providers = await (await client(context)).listConnectionProviders(projectId, environmentId);
+        emit(context.writer, providers, table([
+            ["PROVIDER", "SHARED IDENTITY", "DISPLAY NAME"],
+            ...providers.items.flatMap((provider) => provider.shared_identities.map((identity) => [
+                provider.provider,
+                identity.id,
+                identity.display_name,
+            ])),
+        ]));
+    },
+    async "connection create"(context) {
+        const { environmentId, projectId } = environmentArguments(context.parsed);
+        const mode = required(context.parsed, "mode", "whooshbang_shared, customer_managed, or customer_byok");
+        const displayName = required(context.parsed, "name", "what to call this connection");
+        let request = {
+            display_name: displayName,
+            mode,
+        };
+        if (mode === "whooshbang_shared") {
+            request["shared_identity_id"] = required(context.parsed, "shared-identity", "which shared identity to select — see `wb connection providers`");
+        }
+        else if (mode === "customer_byok") {
+            if (!context.parsed.switches.has("credential-stdin")) {
+                throw new UsageError("customer_byok needs --credential-stdin, and the token on standard input. A bot token passed as an argument is visible to every process on the machine and lands in your shell history.");
+            }
+            request = {
+                ...request,
+                confirm_webhook_takeover: true,
+                credential: (await context.readStdin()).trim(),
+            };
+        }
+        else if (mode === "customer_managed") {
+            const username = context.parsed.options.get("username");
+            if (username)
+                request["suggested_username"] = username;
+        }
+        const connection = await (await client(context)).createChannelConnection(projectId, environmentId, request, idempotency(context.parsed));
+        emit(context.writer, connection, [
+            `Created connection ${connection.id} (${connection.status}).`,
+            ...(connection.setup?.handoff_url
+                ? [`Finish setup in Telegram: ${connection.setup.handoff_url}`]
+                : []),
+        ]);
+    },
+    async "connection route"(context) {
+        const { environmentId, projectId } = environmentArguments(context.parsed);
+        const routes = await (await client(context)).attachNotifierConnection(projectId, environmentId, {
+            connection_id: required(context.parsed, "connection", "the connection to route through"),
+            notifier_id: required(context.parsed, "notifier", "the notifier to route"),
+        });
+        emit(context.writer, routes, table([
+            ["NOTIFIER", "CONNECTION", "DEFAULT"],
+            ...routes.items.map((route) => [
+                route.notifier_id,
+                route.connection_id,
+                route.is_default ? "yes" : "no",
+            ]),
+        ]));
+    },
+    async "link create"(context) {
+        const { environmentId, projectId } = environmentArguments(context.parsed);
+        const connectionId = context.parsed.options.get("connection");
+        const link = await (await client(context)).createSubscriptionLinkInEnvironment(projectId, environmentId, {
+            channels: ["telegram"],
+            ...(connectionId === undefined ? {} : { connection_id: connectionId }),
+            subscriber_id: required(context.parsed, "subscriber", "your own identifier for this subscriber"),
+        }, idempotency(context.parsed));
+        emit(context.writer, link, [
+            `Link ${link.id} (${link.status}).`,
+            // A link carries no authorization URL once it has been used, and an
+            // idempotent replay returns the used one. Printing "undefined" there
+            // would read as a defect rather than as the link having done its job.
+            ...(link.authorization_url
+                ? ["Send the subscriber here:", link.authorization_url]
+                : ["This link has already been used; issue another to invite again."]),
+        ]);
+    },
+    async "message send"(context) {
+        const { environmentId, projectId } = environmentArguments(context.parsed);
+        const message = await (await client(context)).createMessageInEnvironment(projectId, environmentId, {
+            content: {
+                text: required(context.parsed, "text", "the message body"),
+                type: "text",
+            },
+            delivery_target: deliveryTarget(context.parsed),
+            to: {
+                subscriber_id: required(context.parsed, "subscriber", "who to send to"),
+            },
+        }, idempotency(context.parsed));
+        emit(context.writer, message, [
+            `Accepted ${message.id} (${message.state}).`,
+            `Read it with: wb message get ${message.id} --project ${projectId} --environment ${environmentId}`,
+        ]);
+    },
+    async "message get"(context) {
+        const { environmentId, projectId } = environmentArguments(context.parsed);
+        const messageId = context.parsed.words[2];
+        if (!messageId)
+            throw new UsageError("wb message get <message-id>");
+        const message = await (await client(context)).getMessageInEnvironment(projectId, environmentId, messageId);
+        emit(context.writer, message, [
+            `${message.id} ${message.state}`,
+            `provider: ${message.delivery.highest_proven_provider_state}`,
+            `attempts: ${message.delivery.attempt_count}`,
+        ]);
+    },
+};
+export function resolveCommand(words) {
+    const two = words.slice(0, 2).join(" ");
+    const one = words[0] ?? "";
+    return commands[two] ?? commands[one] ?? null;
+}
+export const COMMAND_NAMES = Object.keys(commands);
+export { resolveOrigin };
+//# sourceMappingURL=commands.js.map

package/dist/cli/commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/cli/commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKzC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAwB,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAe,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAWhF;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,MAAuB;IAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,UAAU,EAAE,EAAE,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,MAAuB;IAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC;IAC3D,IAAI,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;QACpD,MAAM,IAAI,UAAU,CAAC,2CAA2C,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAuB;IAInD,OAAO;QACL,aAAa,EAAE,QAAQ,CACrB,MAAM,EACN,aAAa,EACb,0CAA0C,CAC3C;QACD,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,gBAAgB,CAAC;KACzD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,OAAuB;IAC3C,OAAO,gBAAgB,CAAC;QACtB,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC;QACjD,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,QAAQ,GAA+D;IAC3E,KAAK,CAAC,KAAK,CAAC,OAAO;QACjB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC;YAC3B,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS;gBACvC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC;YACjD,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnD,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC;QACvC,IAAI,CACF,OAAO,CAAC,MAAM,EACd,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EACvE;YACE,gBAAgB,OAAO,CAAC,MAAM,GAAG;YACjC,WAAW,OAAO,CAAC,EAAE,GAAG;YACxB,gBAAgB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC5C,CACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAO;QAClB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE;YACnE,OAAO;gBACL,CAAC,CAAC,iBAAiB,OAAO,CAAC,MAAM,GAAG;gBACpC,CAAC,CAAC,oBAAoB,OAAO,CAAC,MAAM,GAAG;SAC1C,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAO;QAClB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;QAC3D,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE;YAC5B,WAAW,OAAO,CAAC,EAAE,EAAE;YACvB,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACxC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAO;QAC1B,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;QAC9D,IAAI,CACF,OAAO,CAAC,MAAM,EACd,QAAQ,EACR,KAAK,CAAC;YACJ,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC;YACtB,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;gBACjC,OAAO,CAAC,EAAE;gBACV,OAAO,CAAC,IAAI;gBACZ,OAAO,CAAC,IAAI;aACb,CAAC;SACH,CAAC,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAAO;QAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,UAAU,CAAC,0CAA0C,CAAC,CAAC;QAC5E,MAAM,IAAI,GACR,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YAClC,IAAI;iBACD,WAAW,EAAE;iBACb,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC;iBAC5B,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,CACpB,MAAM,MAAM,CAAC,OAAO,CAAC,CACtB,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE;YAC5B,mBAAmB,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,IAAI,IAAI;YAClD,GAAG,KAAK,CAAC;gBACP,CAAC,aAAa,EAAE,MAAM,EAAE,kBAAkB,CAAC;gBAC3C,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;oBAC3C,WAAW,CAAC,EAAE;oBACd,WAAW,CAAC,IAAI;oBAChB,WAAW,CAAC,gBAAgB,CAAC,EAAE;iBAChC,CAAC;aACH,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,OAAO;QAC/B,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,QAAQ,CACpB,OAAO,CAAC,MAAM,EACd,OAAO,EACP,6BAA6B,CAC9B,CAAC;QACF,mEAAmE;QACnE,wEAAwE;QACxE,mEAAmE;QACnE,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI;YACtD,gBAAgB;YAChB,eAAe;YACf,qBAAqB;YACrB,oBAAoB;SACrB,CAAoD,CAAC;QACtD,MAAM,OAAO,GAAG,MAAM,CACpB,MAAM,MAAM,CAAC,OAAO,CAAC,CACtB,CAAC,mBAAmB,CAAC,SAAS,EAAE,aAAa,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACnE,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;QACD,UAAU,CACR,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,MAAM,EACd,+EAA+E,CAChF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,OAAO;QAC7B,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1E,MAAM,WAAW,GAAG,MAAM,CACxB,MAAM,MAAM,CAAC,OAAO,CAAC,CACtB,CAAC,sBAAsB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACnD,IAAI,CACF,OAAO,CAAC,MAAM,EACd,WAAW,EACX,KAAK,CAAC;YACJ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC;YAChC,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC;gBACvC,UAAU,CAAC,EAAE;gBACb,UAAU,CAAC,IAAI;gBACf,UAAU,CAAC,MAAM;gBACjB,UAAU,CAAC,YAAY;aACxB,CAAC;SACH,CAAC,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,OAAO;QAClC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1E,MAAM,SAAS,GAAG,MAAM,CACtB,MAAM,MAAM,CAAC,OAAO,CAAC,CACtB,CAAC,uBAAuB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACpD,IAAI,CACF,OAAO,CAAC,MAAM,EACd,SAAS,EACT,KAAK,CAAC;YACJ,CAAC,UAAU,EAAE,iBAAiB,EAAE,cAAc,CAAC;YAC/C,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CACtC,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;gBAC3C,QAAQ,CAAC,QAAQ;gBACjB,QAAQ,CAAC,EAAE;gBACX,QAAQ,CAAC,YAAY;aACtB,CAAC,CACH;SACF,CAAC,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,OAAO;QAC/B,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,QAAQ,CACnB,OAAO,CAAC,MAAM,EACd,MAAM,EACN,uDAAuD,CACxD,CAAC;QACF,MAAM,WAAW,GAAG,QAAQ,CAC1B,OAAO,CAAC,MAAM,EACd,MAAM,EACN,8BAA8B,CAC/B,CAAC;QAEF,IAAI,OAAO,GAA4B;YACrC,YAAY,EAAE,WAAW;YACzB,IAAI;SACL,CAAC;QACF,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACjC,OAAO,CAAC,oBAAoB,CAAC,GAAG,QAAQ,CACtC,OAAO,CAAC,MAAM,EACd,iBAAiB,EACjB,iEAAiE,CAClE,CAAC;QACJ,CAAC;aAAM,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;YACpC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,UAAU,CAClB,wLAAwL,CACzL,CAAC;YACJ,CAAC;YACD,OAAO,GAAG;gBACR,GAAG,OAAO;gBACV,wBAAwB,EAAE,IAAI;gBAC9B,UAAU,EAAE,CAAC,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;aAC/C,CAAC;QACJ,CAAC;aAAM,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACxD,IAAI,QAAQ;gBAAE,OAAO,CAAC,oBAAoB,CAAC,GAAG,QAAQ,CAAC;QACzD,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CACvB,MAAM,MAAM,CAAC,OAAO,CAAC,CACtB,CAAC,uBAAuB,CACvB,SAAS,EACT,aAAa,EACb,OAAgB,EAChB,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAC5B,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE;YAC/B,sBAAsB,UAAU,CAAC,EAAE,KAAK,UAAU,CAAC,MAAM,IAAI;YAC7D,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,WAAW;gBAC/B,CAAC,CAAC,CAAC,6BAA6B,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC/D,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,OAAO;QAC9B,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,MAAM,CACnB,MAAM,MAAM,CAAC,OAAO,CAAC,CACtB,CAAC,wBAAwB,CAAC,SAAS,EAAE,aAAa,EAAE;YACnD,aAAa,EAAE,QAAQ,CACrB,OAAO,CAAC,MAAM,EACd,YAAY,EACZ,iCAAiC,CAClC;YACD,WAAW,EAAE,QAAQ,CACnB,OAAO,CAAC,MAAM,EACd,UAAU,EACV,uBAAuB,CACxB;SACF,CAAC,CAAC;QACH,IAAI,CACF,OAAO,CAAC,MAAM,EACd,MAAM,EACN,KAAK,CAAC;YACJ,CAAC,UAAU,EAAE,YAAY,EAAE,SAAS,CAAC;YACrC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC7B,KAAK,CAAC,WAAW;gBACjB,KAAK,CAAC,aAAa;gBACnB,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;aAChC,CAAC;SACH,CAAC,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAO;QACzB,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1E,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,MAAM,CACjB,MAAM,MAAM,CAAC,OAAO,CAAC,CACtB,CAAC,mCAAmC,CACnC,SAAS,EACT,aAAa,EACb;YACE,QAAQ,EAAE,CAAC,UAAU,CAAC;YACtB,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;YACtE,aAAa,EAAE,QAAQ,CACrB,OAAO,CAAC,MAAM,EACd,YAAY,EACZ,yCAAyC,CAC1C;SACF,EACD,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAC5B,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE;YACzB,QAAQ,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,IAAI;YACnC,oEAAoE;YACpE,qEAAqE;YACrE,sEAAsE;YACtE,GAAG,CAAC,IAAI,CAAC,iBAAiB;gBACxB,CAAC,CAAC,CAAC,2BAA2B,EAAE,IAAI,CAAC,iBAAiB,CAAC;gBACvD,CAAC,CAAC,CAAC,iEAAiE,CAAC,CAAC;SACzE,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAO;QAC1B,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,CACpB,MAAM,MAAM,CAAC,OAAO,CAAC,CACtB,CAAC,0BAA0B,CAC1B,SAAS,EACT,aAAa,EACb;YACE,OAAO,EAAE;gBACP,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,kBAAkB,CAAC;gBAC1D,IAAI,EAAE,MAAM;aACb;YACD,eAAe,EAAE,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC;YAC/C,EAAE,EAAE;gBACF,aAAa,EAAE,QAAQ,CACrB,OAAO,CAAC,MAAM,EACd,YAAY,EACZ,gBAAgB,CACjB;aACF;SACO,EACV,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAC5B,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE;YAC5B,YAAY,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,KAAK,IAAI;YAC5C,gCAAgC,OAAO,CAAC,EAAE,cAAc,SAAS,kBAAkB,aAAa,EAAE;SACnG,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAO;QACzB,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1E,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,UAAU,CAAC,6BAA6B,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,MAAM,CACpB,MAAM,MAAM,CAAC,OAAO,CAAC,CACtB,CAAC,uBAAuB,CAAC,SAAS,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;QAC/D,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE;YAC5B,GAAG,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,KAAK,EAAE;YAChC,aAAa,OAAO,CAAC,QAAQ,CAAC,6BAA6B,EAAE;YAC7D,aAAa,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE;SAC9C,CAAC,CAAC;IACL,CAAC;CACF,CAAC;AAEF,MAAM,UAAU,cAAc,CAC5B,KAAwB;IAExB,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAEnD,OAAO,EAAE,aAAa,EAAE,CAAC"}

package/dist/cli/config.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Where the CLI keeps what it learned about a deployment.
+ *
+ * One file, holding one record per origin. A developer who works against
+ * staging and production is the ordinary case, not an exotic one, and a single
+ * unkeyed token would silently send staging work to production the first time
+ * somebody changed `--api-url`.
+ *
+ * `$XDG_CONFIG_HOME` is honoured where it is set, and `~/.config/whooshbang`
+ * otherwise, which is where this project already keeps operator files.
+ */
+export interface StoredSession {
+    /** The client id dynamic registration returned. Reused on later logins. */
+    readonly clientId: string;
+    readonly accessToken: string;
+    readonly refreshToken?: string;
+    /** Epoch milliseconds, or absent when the server named no expiry. */
+    readonly expiresAt?: number;
+    readonly scopes: readonly string[];
+}
+export interface StoredCredentials {
+    readonly version: 1;
+    /** Keyed by API origin, exactly as the caller spelled it. */
+    readonly origins: Record<string, StoredSession>;
+}
+export declare function credentialsDirectory(environment?: NodeJS.ProcessEnv): string;
+export declare function credentialsPath(environment?: NodeJS.ProcessEnv): string;
+/**
+ * A missing or unreadable file is an empty store rather than an error: not
+ * being logged in is the ordinary first state, and a corrupted file should send
+ * somebody to `wb login` rather than to a stack trace.
+ */
+export declare function readCredentials(file?: string): Promise<StoredCredentials>;
+/**
+ * Written owner-only, in a directory created owner-only.
+ *
+ * `writeFile`'s mode is subject to the process umask, so the permissions are
+ * set explicitly afterwards rather than hoped for. The token is a bearer
+ * credential for the whole account; a group-readable home directory is common
+ * enough that leaving this to umask is not a defensible default.
+ */
+export declare function writeCredentials(credentials: StoredCredentials, file?: string): Promise<void>;
+export declare function storeSession(origin: string, session: StoredSession, file?: string): Promise<void>;
+export declare function forgetSession(origin: string, file?: string): Promise<StoredSession | null>;
+export declare function loadSession(origin: string, file?: string): Promise<StoredSession | null>;

package/dist/cli/config.js

@@ -0,0 +1,85 @@
+import { chmod, mkdir, readFile, rm, writeFile } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+const EMPTY = { origins: {}, version: 1 };
+export function credentialsDirectory(environment = process.env) {
+    const xdg = environment.XDG_CONFIG_HOME?.trim();
+    const base = xdg && xdg.length > 0 ? xdg : path.join(os.homedir(), ".config");
+    return path.join(base, "whooshbang");
+}
+export function credentialsPath(environment = process.env) {
+    return path.join(credentialsDirectory(environment), "cli-credentials.json");
+}
+/**
+ * A missing or unreadable file is an empty store rather than an error: not
+ * being logged in is the ordinary first state, and a corrupted file should send
+ * somebody to `wb login` rather than to a stack trace.
+ */
+export async function readCredentials(file = credentialsPath()) {
+    let contents;
+    try {
+        contents = await readFile(file, "utf8");
+    }
+    catch {
+        return EMPTY;
+    }
+    try {
+        const parsed = JSON.parse(contents);
+        if (typeof parsed !== "object" ||
+            parsed === null ||
+            parsed.version !== 1 ||
+            typeof parsed.origins !== "object" ||
+            parsed.origins === null) {
+            return EMPTY;
+        }
+        return parsed;
+    }
+    catch {
+        return EMPTY;
+    }
+}
+/**
+ * Written owner-only, in a directory created owner-only.
+ *
+ * `writeFile`'s mode is subject to the process umask, so the permissions are
+ * set explicitly afterwards rather than hoped for. The token is a bearer
+ * credential for the whole account; a group-readable home directory is common
+ * enough that leaving this to umask is not a defensible default.
+ */
+export async function writeCredentials(credentials, file = credentialsPath()) {
+    await mkdir(path.dirname(file), { mode: 0o700, recursive: true });
+    await chmod(path.dirname(file), 0o700).catch(() => undefined);
+    await writeFile(file, `${JSON.stringify(credentials, null, 2)}\n`, {
+        mode: 0o600,
+    });
+    await chmod(file, 0o600);
+}
+export async function storeSession(origin, session, file = credentialsPath()) {
+    const current = await readCredentials(file);
+    await writeCredentials({
+        origins: { ...current.origins, [origin]: session },
+        version: 1,
+    }, file);
+}
+export async function forgetSession(origin, file = credentialsPath()) {
+    const current = await readCredentials(file);
+    const session = current.origins[origin] ?? null;
+    if (!session)
+        return null;
+    const origins = { ...current.origins };
+    // eslint-disable-next-line @typescript-eslint/no-dynamic-delete
+    delete origins[origin];
+    if (Object.keys(origins).length === 0) {
+        // Nothing left to hold: remove the file rather than leave an empty husk
+        // that reads, to anybody auditing a home directory, like a live credential.
+        await rm(file, { force: true });
+        return session;
+    }
+    await writeCredentials({ origins, version: 1 }, file);
+    return session;
+}
+export async function loadSession(origin, file = credentialsPath()) {
+    const current = await readCredentials(file);
+    return current.origins[origin] ?? null;
+}
+//# sourceMappingURL=config.js.map

package/dist/cli/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/cli/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AA6B7B,MAAM,KAAK,GAAsB,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AAE7D,MAAM,UAAU,oBAAoB,CAClC,cAAiC,OAAO,CAAC,GAAG;IAE5C,MAAM,GAAG,GAAG,WAAW,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IAChD,MAAM,IAAI,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,cAAiC,OAAO,CAAC,GAAG;IAE5C,OAAO,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,EAAE,sBAAsB,CAAC,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAe,eAAe,EAAE;IAEhC,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7C,IACE,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,KAAK,IAAI;YACd,MAAgC,CAAC,OAAO,KAAK,CAAC;YAC/C,OAAQ,MAAgC,CAAC,OAAO,KAAK,QAAQ;YAC5D,MAAgC,CAAC,OAAO,KAAK,IAAI,EAClD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,MAA2B,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,WAA8B,EAC9B,OAAe,eAAe,EAAE;IAEhC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC9D,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACjE,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAc,EACd,OAAsB,EACtB,OAAe,eAAe,EAAE;IAEhC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,gBAAgB,CACpB;QACE,OAAO,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE;QAClD,OAAO,EAAE,CAAC;KACX,EACD,IAAI,CACL,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,OAAe,eAAe,EAAE;IAEhC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;IAChD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IACvC,gEAAgE;IAChE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;IACvB,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,wEAAwE;QACxE,4EAA4E;QAC5E,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChC,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,gBAAgB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACtD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAc,EACd,OAAe,eAAe,EAAE;IAEhC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IAC5C,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;AACzC,CAAC"}

package/dist/cli/main.d.ts

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+export declare function run(argv: readonly string[], overrides?: {
+    readonly credentialsFile?: string;
+    readonly openUrl?: (url: string) => Promise<void>;
+}): Promise<number>;