@wix/web50-cli 0.1.0 → 0.1.1

package/dist/cjs/auth/deviceFlow.js

@@ -1,6 +1,8 @@
 "use strict";
 
 exports.__esModule = true;
+exports.promptForSiteId = promptForSiteId;
+exports.refreshAccessToken = refreshAccessToken;
 exports.runDeviceFlow = runDeviceFlow;
 var readline = _interopRequireWildcard(require("readline"));
 var _print = require("../utils/print");
@@ -11,28 +13,62 @@ const DEVICE_CODE_URL = 'https://www.wixapis.com/oauth2/device/code';
 const TOKEN_URL = 'https://www.wixapis.com/oauth2/token';
 const POLL_INTERVAL_MS = 3000;
 const POLL_TIMEOUT_MS = 60_000;
+let verboseMode = false;
+function log(...args) {
+  if (verboseMode) {
+    console.log('[auth]', ...args);
+  }
+}
 async function sleep(ms) {
   return new Promise(resolve => setTimeout(resolve, ms));
 }
 async function requestDeviceCode() {
-  const res = await fetch(`${DEVICE_CODE_URL}?client_id=${CLIENT_ID}&scope=session_bound_access`);
+  const url = `${DEVICE_CODE_URL}?client_id=${CLIENT_ID}&scope=session_bound_access`;
+  log(`POST ${url}`);
+  const res = await fetch(url);
+  log(`Response: ${res.status} ${res.statusText}`);
   if (!res.ok) {
+    const body = await res.text().catch(() => '');
+    log(`Error body: ${body}`);
     throw new Error(`Device code request failed: ${res.status} ${res.statusText}`);
   }
-  return res.json();
+  const data = await res.json();
+  log(`Device code response:`, JSON.stringify(data, null, 2));
+  return data;
 }
 async function pollToken(deviceCode) {
   const deadline = Date.now() + POLL_TIMEOUT_MS;
-  const url = `${TOKEN_URL}` + `?grant_type=${encodeURIComponent('urn:ietf:params:oauth:grant-type:device_code')}` + `&client_id=${CLIENT_ID}` + `&device_code=${encodeURIComponent(deviceCode)}`;
+  const body = {
+    grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
+    client_id: CLIENT_ID,
+    device_code: deviceCode
+  };
+  log(`Poll URL: POST ${TOKEN_URL}`);
+  log(`Request body:`, JSON.stringify(body, null, 2));
+  let attempt = 0;
   while (Date.now() < deadline) {
-    const res = await fetch(url, {
-      method: 'POST'
+    attempt++;
+    log(`Poll attempt #${attempt}`);
+    const res = await fetch(TOKEN_URL, {
+      method: 'POST',
+      headers: {
+        'Content-Type': 'application/json'
+      },
+      body: JSON.stringify(body)
     });
+    log(`Response: ${res.status} ${res.statusText}`);
     if (res.ok) {
-      return res.json();
+      const token = await res.json();
+      log(`Token response:`, JSON.stringify({
+        ...token,
+        access_token: '***',
+        refresh_token: '***'
+      }, null, 2));
+      return token;
     }
-    const body = await res.json().catch(() => ({}));
-    if (body.error === 'access_denied') {
+    const errorBody = await res.json().catch(() => ({}));
+    log(`Poll error body:`, JSON.stringify(errorBody, null, 2));
+    if (errorBody.error === 'access_denied') {
       throw new Error('Access denied');
     }
 
@@ -41,6 +77,51 @@ async function pollToken(deviceCode) {
   }
   throw new Error('Verification failed — timed out after 60 seconds. Please run `web5 login` again.');
 }
+async function promptForSiteId() {
+  return new Promise(resolve => {
+    const rl = readline.createInterface({
+      input: process.stdin,
+      output: process.stdout
+    });
+    rl.question('  Enter your site ID (msid) or press Enter to skip: ', answer => {
+      rl.close();
+      const trimmed = answer.trim();
+      const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+      resolve(UUID_RE.test(trimmed) ? trimmed : null);
+    });
+  });
+}
+async function refreshAccessToken(refreshToken, siteId) {
+  const body = {
+    grant_type: 'refresh_token',
+    client_id: CLIENT_ID,
+    refresh_token: refreshToken
+  };
+  if (siteId) {
+    body.site_id = siteId;
+  }
+  log(`Refreshing access token: POST ${TOKEN_URL}`);
+  const res = await fetch(TOKEN_URL, {
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/json'
+    },
+    body: JSON.stringify(body)
+  });
+  log(`Refresh response: ${res.status} ${res.statusText}`);
+  if (!res.ok) {
+    const errorBody = await res.json().catch(() => ({}));
+    log(`Refresh error body:`, JSON.stringify(errorBody, null, 2));
+    throw new Error(`Token refresh failed (${res.status}): ${errorBody.error ?? res.statusText}`);
+  }
+  const token = await res.json();
+  log(`Refresh token response:`, JSON.stringify({
+    ...token,
+    access_token: '***',
+    refresh_token: '***'
+  }, null, 2));
+  return token;
+}
 async function pressEnterToContinue() {
   return new Promise(resolve => {
     const rl = readline.createInterface({
@@ -53,16 +134,21 @@ async function pressEnterToContinue() {
     });
   });
 }
-async function runDeviceFlow() {
+async function runDeviceFlow(verbose = false, noBrowser = false) {
+  verboseMode = verbose;
   const code = await requestDeviceCode();
   console.log('');
   (0, _print.info)(`Verification code:  ${code.userCode}`);
   console.log(`  ${code.verificationUri}`);
   console.log('');
-  await pressEnterToContinue();
-  const open = (await Promise.resolve().then(() => _interopRequireWildcard(require('open')))).default;
-  await open(code.verificationUri);
-  console.log('');
+  if (noBrowser) {
+    (0, _print.info)('Open the URL above in your browser to authenticate.');
+  } else {
+    await pressEnterToContinue();
+    const open = (await Promise.resolve().then(() => _interopRequireWildcard(require('open')))).default;
+    await open(code.verificationUri);
+    console.log('');
+  }
   const spin = (0, _print.spinner)('Waiting for approval...');
   try {
     const token = await pollToken(code.deviceCode);

package/dist/cjs/auth/deviceFlow.js.map

@@ -1 +1 @@
-{"version":3,"names":["readline","_interopRequireWildcard","require","_print","e","t","WeakMap","r","n","__esModule","o","i","f","__proto__","default","has","get","set","hasOwnProperty","call","Object","defineProperty","getOwnPropertyDescriptor","CLIENT_ID","DEVICE_CODE_URL","TOKEN_URL","POLL_INTERVAL_MS","POLL_TIMEOUT_MS","sleep","ms","Promise","resolve","setTimeout","requestDeviceCode","res","fetch","ok","Error","status","statusText","json","pollToken","deviceCode","deadline","Date","now","url","encodeURIComponent","method","body","catch","error","pressEnterToContinue","rl","createInterface","input","process","stdin","output","stdout","question","close","runDeviceFlow","code","console","log","info","userCode","verificationUri","open","then","spin","spinner","token","succeed","err","fail"],"sources":["../../../src/auth/deviceFlow.ts"],"sourcesContent":["import * as readline from 'readline';\nimport { spinner, info } from '../utils/print';\n\n// const CLIENT_ID = '602051c7-ec4b-4334-b90d-b029b076ba8f';\nconst CLIENT_ID = '6f95cec8-3e98-48b9-b4e5-1fb92fcd9973';\nconst DEVICE_CODE_URL = 'https://www.wixapis.com/oauth2/device/code';\nconst TOKEN_URL = 'https://www.wixapis.com/oauth2/token';\nconst POLL_INTERVAL_MS = 3000;\nconst POLL_TIMEOUT_MS = 60_000;\n\ninterface DeviceCodeResponse {\n  deviceCode: string;\n  userCode: string;\n  verificationUri: string;\n  expiresIn: number;\n}\n\nexport interface TokenResponse {\n  access_token: string;\n  token_type: string;\n  expires_in: number;\n  refresh_token: string;\n}\n\nasync function sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\nasync function requestDeviceCode(): Promise<DeviceCodeResponse> {\n  const res = await fetch(\n    `${DEVICE_CODE_URL}?client_id=${CLIENT_ID}&scope=session_bound_access`,\n  );\n  if (!res.ok) {\n    throw new Error(\n      `Device code request failed: ${res.status} ${res.statusText}`,\n    );\n  }\n  return res.json() as Promise<DeviceCodeResponse>;\n}\n\nasync function pollToken(deviceCode: string): Promise<TokenResponse> {\n  const deadline = Date.now() + POLL_TIMEOUT_MS;\n  const url =\n    `${TOKEN_URL}` +\n    `?grant_type=${encodeURIComponent(\n      'urn:ietf:params:oauth:grant-type:device_code',\n    )}` +\n    `&client_id=${CLIENT_ID}` +\n    `&device_code=${encodeURIComponent(deviceCode)}`;\n\n  while (Date.now() < deadline) {\n    const res = await fetch(url, { method: 'POST' });\n\n    if (res.ok) {\n      return res.json() as Promise<TokenResponse>;\n    }\n\n    const body = (await res.json().catch(() => ({}))) as { error?: string };\n\n    if (body.error === 'access_denied') {\n      throw new Error('Access denied');\n    }\n\n    // authorization_pending, slow_down, unknown_error, or any transient error → keep polling\n    await sleep(POLL_INTERVAL_MS);\n  }\n\n  throw new Error(\n    'Verification failed — timed out after 60 seconds. Please run `web5 login` again.',\n  );\n}\n\nasync function pressEnterToContinue(): Promise<void> {\n  return new Promise((resolve) => {\n    const rl = readline.createInterface({\n      input: process.stdin,\n      output: process.stdout,\n    });\n    rl.question('  Press Enter to open in browser...', () => {\n      rl.close();\n      resolve();\n    });\n  });\n}\n\nexport async function runDeviceFlow(): Promise<TokenResponse> {\n  const code = await requestDeviceCode();\n\n  console.log('');\n  info(`Verification code:  ${code.userCode}`);\n  console.log(`  ${code.verificationUri}`);\n  console.log('');\n\n  await pressEnterToContinue();\n\n  const open = (await import('open')).default;\n  await open(code.verificationUri);\n  console.log('');\n\n  const spin = spinner('Waiting for approval...');\n\n  try {\n    const token = await pollToken(code.deviceCode);\n    spin.succeed('Approved');\n    return token;\n  } catch (err) {\n    spin.fail('Authentication failed');\n    throw err;\n  }\n}\n"],"mappings":";;;;AAAA,IAAAA,QAAA,GAAAC,uBAAA,CAAAC,OAAA;AACA,IAAAC,MAAA,GAAAD,OAAA;AAA+C,SAAAD,wBAAAG,CAAA,EAAAC,CAAA,6BAAAC,OAAA,MAAAC,CAAA,OAAAD,OAAA,IAAAE,CAAA,OAAAF,OAAA,YAAAL,uBAAA,YAAAA,CAAAG,CAAA,EAAAC,CAAA,SAAAA,CAAA,IAAAD,CAAA,IAAAA,CAAA,CAAAK,UAAA,SAAAL,CAAA,MAAAM,CAAA,EAAAC,CAAA,EAAAC,CAAA,KAAAC,SAAA,QAAAC,OAAA,EAAAV,CAAA,iBAAAA,CAAA,uBAAAA,CAAA,yBAAAA,CAAA,SAAAQ,CAAA,MAAAF,CAAA,GAAAL,CAAA,GAAAG,CAAA,GAAAD,CAAA,QAAAG,CAAA,CAAAK,GAAA,CAAAX,CAAA,UAAAM,CAAA,CAAAM,GAAA,CAAAZ,CAAA,GAAAM,CAAA,CAAAO,GAAA,CAAAb,CAAA,EAAAQ,CAAA,gBAAAP,CAAA,IAAAD,CAAA,gBAAAC,CAAA,OAAAa,cAAA,CAAAC,IAAA,CAAAf,CAAA,EAAAC,CAAA,OAAAM,CAAA,IAAAD,CAAA,GAAAU,MAAA,CAAAC,cAAA,KAAAD,MAAA,CAAAE,wBAAA,CAAAlB,CAAA,EAAAC,CAAA,OAAAM,CAAA,CAAAK,GAAA,IAAAL,CAAA,CAAAM,GAAA,IAAAP,CAAA,CAAAE,CAAA,EAAAP,CAAA,EAAAM,CAAA,IAAAC,CAAA,CAAAP,CAAA,IAAAD,CAAA,CAAAC,CAAA,WAAAO,CAAA,KAAAR,CAAA,EAAAC,CAAA;AAE/C;AACA,MAAMkB,SAAS,GAAG,sCAAsC;AACxD,MAAMC,eAAe,GAAG,4CAA4C;AACpE,MAAMC,SAAS,GAAG,sCAAsC;AACxD,MAAMC,gBAAgB,GAAG,IAAI;AAC7B,MAAMC,eAAe,GAAG,MAAM;AAgB9B,eAAeC,KAAKA,CAACC,EAAU,EAAiB;EAC9C,OAAO,IAAIC,OAAO,CAAEC,OAAO,IAAKC,UAAU,CAACD,OAAO,EAAEF,EAAE,CAAC,CAAC;AAC1D;AAEA,eAAeI,iBAAiBA,CAAA,EAAgC;EAC9D,MAAMC,GAAG,GAAG,MAAMC,KAAK,CACrB,GAAGX,eAAe,cAAcD,SAAS,6BAC3C,CAAC;EACD,IAAI,CAACW,GAAG,CAACE,EAAE,EAAE;IACX,MAAM,IAAIC,KAAK,CACb,+BAA+BH,GAAG,CAACI,MAAM,IAAIJ,GAAG,CAACK,UAAU,EAC7D,CAAC;EACH;EACA,OAAOL,GAAG,CAACM,IAAI,CAAC,CAAC;AACnB;AAEA,eAAeC,SAASA,CAACC,UAAkB,EAA0B;EACnE,MAAMC,QAAQ,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAGlB,eAAe;EAC7C,MAAMmB,GAAG,GACP,GAAGrB,SAAS,EAAE,GACd,eAAesB,kBAAkB,CAC/B,8CACF,CAAC,EAAE,GACH,cAAcxB,SAAS,EAAE,GACzB,gBAAgBwB,kBAAkB,CAACL,UAAU,CAAC,EAAE;EAElD,OAAOE,IAAI,CAACC,GAAG,CAAC,CAAC,GAAGF,QAAQ,EAAE;IAC5B,MAAMT,GAAG,GAAG,MAAMC,KAAK,CAACW,GAAG,EAAE;MAAEE,MAAM,EAAE;IAAO,CAAC,CAAC;IAEhD,IAAId,GAAG,CAACE,EAAE,EAAE;MACV,OAAOF,GAAG,CAACM,IAAI,CAAC,CAAC;IACnB;IAEA,MAAMS,IAAI,GAAI,MAAMf,GAAG,CAACM,IAAI,CAAC,CAAC,CAACU,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAwB;IAEvE,IAAID,IAAI,CAACE,KAAK,KAAK,eAAe,EAAE;MAClC,MAAM,IAAId,KAAK,CAAC,eAAe,CAAC;IAClC;;IAEA;IACA,MAAMT,KAAK,CAACF,gBAAgB,CAAC;EAC/B;EAEA,MAAM,IAAIW,KAAK,CACb,kFACF,CAAC;AACH;AAEA,eAAee,oBAAoBA,CAAA,EAAkB;EACnD,OAAO,IAAItB,OAAO,CAAEC,OAAO,IAAK;IAC9B,MAAMsB,EAAE,GAAGrD,QAAQ,CAACsD,eAAe,CAAC;MAClCC,KAAK,EAAEC,OAAO,CAACC,KAAK;MACpBC,MAAM,EAAEF,OAAO,CAACG;IAClB,CAAC,CAAC;IACFN,EAAE,CAACO,QAAQ,CAAC,qCAAqC,EAAE,MAAM;MACvDP,EAAE,CAACQ,KAAK,CAAC,CAAC;MACV9B,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;EACJ,CAAC,CAAC;AACJ;AAEO,eAAe+B,aAAaA,CAAA,EAA2B;EAC5D,MAAMC,IAAI,GAAG,MAAM9B,iBAAiB,CAAC,CAAC;EAEtC+B,OAAO,CAACC,GAAG,CAAC,EAAE,CAAC;EACf,IAAAC,WAAI,EAAC,uBAAuBH,IAAI,CAACI,QAAQ,EAAE,CAAC;EAC5CH,OAAO,CAACC,GAAG,CAAC,KAAKF,IAAI,CAACK,eAAe,EAAE,CAAC;EACxCJ,OAAO,CAACC,GAAG,CAAC,EAAE,CAAC;EAEf,MAAMb,oBAAoB,CAAC,CAAC;EAE5B,MAAMiB,IAAI,GAAG,CAAC,MAAAvC,OAAA,CAAAC,OAAA,GAAAuC,IAAA,OAAArE,uBAAA,CAAAC,OAAA,CAAa,MAAM,GAAC,EAAEY,OAAO;EAC3C,MAAMuD,IAAI,CAACN,IAAI,CAACK,eAAe,CAAC;EAChCJ,OAAO,CAACC,GAAG,CAAC,EAAE,CAAC;EAEf,MAAMM,IAAI,GAAG,IAAAC,cAAO,EAAC,yBAAyB,CAAC;EAE/C,IAAI;IACF,MAAMC,KAAK,GAAG,MAAMhC,SAAS,CAACsB,IAAI,CAACrB,UAAU,CAAC;IAC9C6B,IAAI,CAACG,OAAO,CAAC,UAAU,CAAC;IACxB,OAAOD,KAAK;EACd,CAAC,CAAC,OAAOE,GAAG,EAAE;IACZJ,IAAI,CAACK,IAAI,CAAC,uBAAuB,CAAC;IAClC,MAAMD,GAAG;EACX;AACF","ignoreList":[]}
+{"version":3,"names":["readline","_interopRequireWildcard","require","_print","e","t","WeakMap","r","n","__esModule","o","i","f","__proto__","default","has","get","set","hasOwnProperty","call","Object","defineProperty","getOwnPropertyDescriptor","CLIENT_ID","DEVICE_CODE_URL","TOKEN_URL","POLL_INTERVAL_MS","POLL_TIMEOUT_MS","verboseMode","log","args","console","sleep","ms","Promise","resolve","setTimeout","requestDeviceCode","url","res","fetch","status","statusText","ok","body","text","catch","Error","data","json","JSON","stringify","pollToken","deviceCode","deadline","Date","now","grant_type","client_id","device_code","attempt","method","headers","token","access_token","refresh_token","errorBody","error","promptForSiteId","rl","createInterface","input","process","stdin","output","stdout","question","answer","close","trimmed","trim","UUID_RE","test","refreshAccessToken","refreshToken","siteId","site_id","pressEnterToContinue","runDeviceFlow","verbose","noBrowser","code","info","userCode","verificationUri","open","then","spin","spinner","succeed","err","fail"],"sources":["../../../src/auth/deviceFlow.ts"],"sourcesContent":["import * as readline from 'readline';\nimport { spinner, info } from '../utils/print';\n\n// const CLIENT_ID = '602051c7-ec4b-4334-b90d-b029b076ba8f';\nconst CLIENT_ID = '6f95cec8-3e98-48b9-b4e5-1fb92fcd9973';\nconst DEVICE_CODE_URL = 'https://www.wixapis.com/oauth2/device/code';\nconst TOKEN_URL = 'https://www.wixapis.com/oauth2/token';\nconst POLL_INTERVAL_MS = 3000;\nconst POLL_TIMEOUT_MS = 60_000;\n\nlet verboseMode = false;\n\nfunction log(...args: unknown[]): void {\n  if (verboseMode) {\n    console.log('[auth]', ...args);\n  }\n}\n\ninterface DeviceCodeResponse {\n  deviceCode: string;\n  userCode: string;\n  verificationUri: string;\n  expiresIn: number;\n}\n\nexport interface TokenResponse {\n  access_token: string;\n  token_type: string;\n  expires_in: number;\n  refresh_token: string;\n}\n\nasync function sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\nasync function requestDeviceCode(): Promise<DeviceCodeResponse> {\n  const url = `${DEVICE_CODE_URL}?client_id=${CLIENT_ID}&scope=session_bound_access`;\n  log(`POST ${url}`);\n\n  const res = await fetch(url);\n  log(`Response: ${res.status} ${res.statusText}`);\n\n  if (!res.ok) {\n    const body = await res.text().catch(() => '');\n    log(`Error body: ${body}`);\n    throw new Error(\n      `Device code request failed: ${res.status} ${res.statusText}`,\n    );\n  }\n\n  const data = (await res.json()) as DeviceCodeResponse;\n  log(`Device code response:`, JSON.stringify(data, null, 2));\n  return data;\n}\n\nasync function pollToken(deviceCode: string): Promise<TokenResponse> {\n  const deadline = Date.now() + POLL_TIMEOUT_MS;\n  const body = {\n    grant_type: 'urn:ietf:params:oauth:grant-type:device_code',\n    client_id: CLIENT_ID,\n    device_code: deviceCode,\n  };\n\n  log(`Poll URL: POST ${TOKEN_URL}`);\n  log(`Request body:`, JSON.stringify(body, null, 2));\n\n  let attempt = 0;\n  while (Date.now() < deadline) {\n    attempt++;\n    log(`Poll attempt #${attempt}`);\n    const res = await fetch(TOKEN_URL, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify(body),\n    });\n    log(`Response: ${res.status} ${res.statusText}`);\n\n    if (res.ok) {\n      const token = (await res.json()) as TokenResponse;\n      log(\n        `Token response:`,\n        JSON.stringify(\n          { ...token, access_token: '***', refresh_token: '***' },\n          null,\n          2,\n        ),\n      );\n      return token;\n    }\n\n    const errorBody = (await res.json().catch(() => ({}))) as {\n      error?: string;\n    };\n    log(`Poll error body:`, JSON.stringify(errorBody, null, 2));\n\n    if (errorBody.error === 'access_denied') {\n      throw new Error('Access denied');\n    }\n\n    // authorization_pending, slow_down, unknown_error, or any transient error → keep polling\n    await sleep(POLL_INTERVAL_MS);\n  }\n\n  throw new Error(\n    'Verification failed — timed out after 60 seconds. Please run `web5 login` again.',\n  );\n}\n\nexport async function promptForSiteId(): Promise<string | null> {\n  return new Promise((resolve) => {\n    const rl = readline.createInterface({\n      input: process.stdin,\n      output: process.stdout,\n    });\n    rl.question(\n      '  Enter your site ID (msid) or press Enter to skip: ',\n      (answer) => {\n        rl.close();\n        const trimmed = answer.trim();\n        const UUID_RE =\n          /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n        resolve(UUID_RE.test(trimmed) ? trimmed : null);\n      },\n    );\n  });\n}\n\nexport async function refreshAccessToken(\n  refreshToken: string,\n  siteId?: string,\n): Promise<TokenResponse> {\n  const body: Record<string, string> = {\n    grant_type: 'refresh_token',\n    client_id: CLIENT_ID,\n    refresh_token: refreshToken,\n  };\n\n  if (siteId) {\n    body.site_id = siteId;\n  }\n\n  log(`Refreshing access token: POST ${TOKEN_URL}`);\n\n  const res = await fetch(TOKEN_URL, {\n    method: 'POST',\n    headers: { 'Content-Type': 'application/json' },\n    body: JSON.stringify(body),\n  });\n\n  log(`Refresh response: ${res.status} ${res.statusText}`);\n\n  if (!res.ok) {\n    const errorBody = (await res.json().catch(() => ({}))) as {\n      error?: string;\n    };\n    log(`Refresh error body:`, JSON.stringify(errorBody, null, 2));\n    throw new Error(\n      `Token refresh failed (${res.status}): ${\n        errorBody.error ?? res.statusText\n      }`,\n    );\n  }\n\n  const token = (await res.json()) as TokenResponse;\n  log(\n    `Refresh token response:`,\n    JSON.stringify(\n      { ...token, access_token: '***', refresh_token: '***' },\n      null,\n      2,\n    ),\n  );\n  return token;\n}\n\nasync function pressEnterToContinue(): Promise<void> {\n  return new Promise((resolve) => {\n    const rl = readline.createInterface({\n      input: process.stdin,\n      output: process.stdout,\n    });\n    rl.question('  Press Enter to open in browser...', () => {\n      rl.close();\n      resolve();\n    });\n  });\n}\n\nexport async function runDeviceFlow(\n  verbose = false,\n  noBrowser = false,\n): Promise<TokenResponse> {\n  verboseMode = verbose;\n  const code = await requestDeviceCode();\n\n  console.log('');\n  info(`Verification code:  ${code.userCode}`);\n  console.log(`  ${code.verificationUri}`);\n  console.log('');\n\n  if (noBrowser) {\n    info('Open the URL above in your browser to authenticate.');\n  } else {\n    await pressEnterToContinue();\n    const open = (await import('open')).default;\n    await open(code.verificationUri);\n    console.log('');\n  }\n\n  const spin = spinner('Waiting for approval...');\n\n  try {\n    const token = await pollToken(code.deviceCode);\n    spin.succeed('Approved');\n    return token;\n  } catch (err) {\n    spin.fail('Authentication failed');\n    throw err;\n  }\n}\n"],"mappings":";;;;;;AAAA,IAAAA,QAAA,GAAAC,uBAAA,CAAAC,OAAA;AACA,IAAAC,MAAA,GAAAD,OAAA;AAA+C,SAAAD,wBAAAG,CAAA,EAAAC,CAAA,6BAAAC,OAAA,MAAAC,CAAA,OAAAD,OAAA,IAAAE,CAAA,OAAAF,OAAA,YAAAL,uBAAA,YAAAA,CAAAG,CAAA,EAAAC,CAAA,SAAAA,CAAA,IAAAD,CAAA,IAAAA,CAAA,CAAAK,UAAA,SAAAL,CAAA,MAAAM,CAAA,EAAAC,CAAA,EAAAC,CAAA,KAAAC,SAAA,QAAAC,OAAA,EAAAV,CAAA,iBAAAA,CAAA,uBAAAA,CAAA,yBAAAA,CAAA,SAAAQ,CAAA,MAAAF,CAAA,GAAAL,CAAA,GAAAG,CAAA,GAAAD,CAAA,QAAAG,CAAA,CAAAK,GAAA,CAAAX,CAAA,UAAAM,CAAA,CAAAM,GAAA,CAAAZ,CAAA,GAAAM,CAAA,CAAAO,GAAA,CAAAb,CAAA,EAAAQ,CAAA,gBAAAP,CAAA,IAAAD,CAAA,gBAAAC,CAAA,OAAAa,cAAA,CAAAC,IAAA,CAAAf,CAAA,EAAAC,CAAA,OAAAM,CAAA,IAAAD,CAAA,GAAAU,MAAA,CAAAC,cAAA,KAAAD,MAAA,CAAAE,wBAAA,CAAAlB,CAAA,EAAAC,CAAA,OAAAM,CAAA,CAAAK,GAAA,IAAAL,CAAA,CAAAM,GAAA,IAAAP,CAAA,CAAAE,CAAA,EAAAP,CAAA,EAAAM,CAAA,IAAAC,CAAA,CAAAP,CAAA,IAAAD,CAAA,CAAAC,CAAA,WAAAO,CAAA,KAAAR,CAAA,EAAAC,CAAA;AAE/C;AACA,MAAMkB,SAAS,GAAG,sCAAsC;AACxD,MAAMC,eAAe,GAAG,4CAA4C;AACpE,MAAMC,SAAS,GAAG,sCAAsC;AACxD,MAAMC,gBAAgB,GAAG,IAAI;AAC7B,MAAMC,eAAe,GAAG,MAAM;AAE9B,IAAIC,WAAW,GAAG,KAAK;AAEvB,SAASC,GAAGA,CAAC,GAAGC,IAAe,EAAQ;EACrC,IAAIF,WAAW,EAAE;IACfG,OAAO,CAACF,GAAG,CAAC,QAAQ,EAAE,GAAGC,IAAI,CAAC;EAChC;AACF;AAgBA,eAAeE,KAAKA,CAACC,EAAU,EAAiB;EAC9C,OAAO,IAAIC,OAAO,CAAEC,OAAO,IAAKC,UAAU,CAACD,OAAO,EAAEF,EAAE,CAAC,CAAC;AAC1D;AAEA,eAAeI,iBAAiBA,CAAA,EAAgC;EAC9D,MAAMC,GAAG,GAAG,GAAGd,eAAe,cAAcD,SAAS,6BAA6B;EAClFM,GAAG,CAAC,QAAQS,GAAG,EAAE,CAAC;EAElB,MAAMC,GAAG,GAAG,MAAMC,KAAK,CAACF,GAAG,CAAC;EAC5BT,GAAG,CAAC,aAAaU,GAAG,CAACE,MAAM,IAAIF,GAAG,CAACG,UAAU,EAAE,CAAC;EAEhD,IAAI,CAACH,GAAG,CAACI,EAAE,EAAE;IACX,MAAMC,IAAI,GAAG,MAAML,GAAG,CAACM,IAAI,CAAC,CAAC,CAACC,KAAK,CAAC,MAAM,EAAE,CAAC;IAC7CjB,GAAG,CAAC,eAAee,IAAI,EAAE,CAAC;IAC1B,MAAM,IAAIG,KAAK,CACb,+BAA+BR,GAAG,CAACE,MAAM,IAAIF,GAAG,CAACG,UAAU,EAC7D,CAAC;EACH;EAEA,MAAMM,IAAI,GAAI,MAAMT,GAAG,CAACU,IAAI,CAAC,CAAwB;EACrDpB,GAAG,CAAC,uBAAuB,EAAEqB,IAAI,CAACC,SAAS,CAACH,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;EAC3D,OAAOA,IAAI;AACb;AAEA,eAAeI,SAASA,CAACC,UAAkB,EAA0B;EACnE,MAAMC,QAAQ,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAG7B,eAAe;EAC7C,MAAMiB,IAAI,GAAG;IACXa,UAAU,EAAE,8CAA8C;IAC1DC,SAAS,EAAEnC,SAAS;IACpBoC,WAAW,EAAEN;EACf,CAAC;EAEDxB,GAAG,CAAC,kBAAkBJ,SAAS,EAAE,CAAC;EAClCI,GAAG,CAAC,eAAe,EAAEqB,IAAI,CAACC,SAAS,CAACP,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;EAEnD,IAAIgB,OAAO,GAAG,CAAC;EACf,OAAOL,IAAI,CAACC,GAAG,CAAC,CAAC,GAAGF,QAAQ,EAAE;IAC5BM,OAAO,EAAE;IACT/B,GAAG,CAAC,iBAAiB+B,OAAO,EAAE,CAAC;IAC/B,MAAMrB,GAAG,GAAG,MAAMC,KAAK,CAACf,SAAS,EAAE;MACjCoC,MAAM,EAAE,MAAM;MACdC,OAAO,EAAE;QAAE,cAAc,EAAE;MAAmB,CAAC;MAC/ClB,IAAI,EAAEM,IAAI,CAACC,SAAS,CAACP,IAAI;IAC3B,CAAC,CAAC;IACFf,GAAG,CAAC,aAAaU,GAAG,CAACE,MAAM,IAAIF,GAAG,CAACG,UAAU,EAAE,CAAC;IAEhD,IAAIH,GAAG,CAACI,EAAE,EAAE;MACV,MAAMoB,KAAK,GAAI,MAAMxB,GAAG,CAACU,IAAI,CAAC,CAAmB;MACjDpB,GAAG,CACD,iBAAiB,EACjBqB,IAAI,CAACC,SAAS,CACZ;QAAE,GAAGY,KAAK;QAAEC,YAAY,EAAE,KAAK;QAAEC,aAAa,EAAE;MAAM,CAAC,EACvD,IAAI,EACJ,CACF,CACF,CAAC;MACD,OAAOF,KAAK;IACd;IAEA,MAAMG,SAAS,GAAI,MAAM3B,GAAG,CAACU,IAAI,CAAC,CAAC,CAACH,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAEnD;IACDjB,GAAG,CAAC,kBAAkB,EAAEqB,IAAI,CAACC,SAAS,CAACe,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE3D,IAAIA,SAAS,CAACC,KAAK,KAAK,eAAe,EAAE;MACvC,MAAM,IAAIpB,KAAK,CAAC,eAAe,CAAC;IAClC;;IAEA;IACA,MAAMf,KAAK,CAACN,gBAAgB,CAAC;EAC/B;EAEA,MAAM,IAAIqB,KAAK,CACb,kFACF,CAAC;AACH;AAEO,eAAeqB,eAAeA,CAAA,EAA2B;EAC9D,OAAO,IAAIlC,OAAO,CAAEC,OAAO,IAAK;IAC9B,MAAMkC,EAAE,GAAGrE,QAAQ,CAACsE,eAAe,CAAC;MAClCC,KAAK,EAAEC,OAAO,CAACC,KAAK;MACpBC,MAAM,EAAEF,OAAO,CAACG;IAClB,CAAC,CAAC;IACFN,EAAE,CAACO,QAAQ,CACT,sDAAsD,EACrDC,MAAM,IAAK;MACVR,EAAE,CAACS,KAAK,CAAC,CAAC;MACV,MAAMC,OAAO,GAAGF,MAAM,CAACG,IAAI,CAAC,CAAC;MAC7B,MAAMC,OAAO,GACX,iEAAiE;MACnE9C,OAAO,CAAC8C,OAAO,CAACC,IAAI,CAACH,OAAO,CAAC,GAAGA,OAAO,GAAG,IAAI,CAAC;IACjD,CACF,CAAC;EACH,CAAC,CAAC;AACJ;AAEO,eAAeI,kBAAkBA,CACtCC,YAAoB,EACpBC,MAAe,EACS;EACxB,MAAMzC,IAA4B,GAAG;IACnCa,UAAU,EAAE,eAAe;IAC3BC,SAAS,EAAEnC,SAAS;IACpB0C,aAAa,EAAEmB;EACjB,CAAC;EAED,IAAIC,MAAM,EAAE;IACVzC,IAAI,CAAC0C,OAAO,GAAGD,MAAM;EACvB;EAEAxD,GAAG,CAAC,iCAAiCJ,SAAS,EAAE,CAAC;EAEjD,MAAMc,GAAG,GAAG,MAAMC,KAAK,CAACf,SAAS,EAAE;IACjCoC,MAAM,EAAE,MAAM;IACdC,OAAO,EAAE;MAAE,cAAc,EAAE;IAAmB,CAAC;IAC/ClB,IAAI,EAAEM,IAAI,CAACC,SAAS,CAACP,IAAI;EAC3B,CAAC,CAAC;EAEFf,GAAG,CAAC,qBAAqBU,GAAG,CAACE,MAAM,IAAIF,GAAG,CAACG,UAAU,EAAE,CAAC;EAExD,IAAI,CAACH,GAAG,CAACI,EAAE,EAAE;IACX,MAAMuB,SAAS,GAAI,MAAM3B,GAAG,CAACU,IAAI,CAAC,CAAC,CAACH,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAEnD;IACDjB,GAAG,CAAC,qBAAqB,EAAEqB,IAAI,CAACC,SAAS,CAACe,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9D,MAAM,IAAInB,KAAK,CACb,yBAAyBR,GAAG,CAACE,MAAM,MACjCyB,SAAS,CAACC,KAAK,IAAI5B,GAAG,CAACG,UAAU,EAErC,CAAC;EACH;EAEA,MAAMqB,KAAK,GAAI,MAAMxB,GAAG,CAACU,IAAI,CAAC,CAAmB;EACjDpB,GAAG,CACD,yBAAyB,EACzBqB,IAAI,CAACC,SAAS,CACZ;IAAE,GAAGY,KAAK;IAAEC,YAAY,EAAE,KAAK;IAAEC,aAAa,EAAE;EAAM,CAAC,EACvD,IAAI,EACJ,CACF,CACF,CAAC;EACD,OAAOF,KAAK;AACd;AAEA,eAAewB,oBAAoBA,CAAA,EAAkB;EACnD,OAAO,IAAIrD,OAAO,CAAEC,OAAO,IAAK;IAC9B,MAAMkC,EAAE,GAAGrE,QAAQ,CAACsE,eAAe,CAAC;MAClCC,KAAK,EAAEC,OAAO,CAACC,KAAK;MACpBC,MAAM,EAAEF,OAAO,CAACG;IAClB,CAAC,CAAC;IACFN,EAAE,CAACO,QAAQ,CAAC,qCAAqC,EAAE,MAAM;MACvDP,EAAE,CAACS,KAAK,CAAC,CAAC;MACV3C,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;EACJ,CAAC,CAAC;AACJ;AAEO,eAAeqD,aAAaA,CACjCC,OAAO,GAAG,KAAK,EACfC,SAAS,GAAG,KAAK,EACO;EACxB9D,WAAW,GAAG6D,OAAO;EACrB,MAAME,IAAI,GAAG,MAAMtD,iBAAiB,CAAC,CAAC;EAEtCN,OAAO,CAACF,GAAG,CAAC,EAAE,CAAC;EACf,IAAA+D,WAAI,EAAC,uBAAuBD,IAAI,CAACE,QAAQ,EAAE,CAAC;EAC5C9D,OAAO,CAACF,GAAG,CAAC,KAAK8D,IAAI,CAACG,eAAe,EAAE,CAAC;EACxC/D,OAAO,CAACF,GAAG,CAAC,EAAE,CAAC;EAEf,IAAI6D,SAAS,EAAE;IACb,IAAAE,WAAI,EAAC,qDAAqD,CAAC;EAC7D,CAAC,MAAM;IACL,MAAML,oBAAoB,CAAC,CAAC;IAC5B,MAAMQ,IAAI,GAAG,CAAC,MAAA7D,OAAA,CAAAC,OAAA,GAAA6D,IAAA,OAAA/F,uBAAA,CAAAC,OAAA,CAAa,MAAM,GAAC,EAAEY,OAAO;IAC3C,MAAMiF,IAAI,CAACJ,IAAI,CAACG,eAAe,CAAC;IAChC/D,OAAO,CAACF,GAAG,CAAC,EAAE,CAAC;EACjB;EAEA,MAAMoE,IAAI,GAAG,IAAAC,cAAO,EAAC,yBAAyB,CAAC;EAE/C,IAAI;IACF,MAAMnC,KAAK,GAAG,MAAMX,SAAS,CAACuC,IAAI,CAACtC,UAAU,CAAC;IAC9C4C,IAAI,CAACE,OAAO,CAAC,UAAU,CAAC;IACxB,OAAOpC,KAAK;EACd,CAAC,CAAC,OAAOqC,GAAG,EAAE;IACZH,IAAI,CAACI,IAAI,CAAC,uBAAuB,CAAC;IAClC,MAAMD,GAAG;EACX;AACF","ignoreList":[]}

package/dist/cjs/auth/index.js

@@ -5,10 +5,23 @@ exports.getToken = getToken;
 exports.isAuthenticated = isAuthenticated;
 exports.login = login;
 exports.logout = logout;
+exports.switchSite = switchSite;
 var _deviceFlow = require("./deviceFlow");
 var _secretStore = require("./secretStore");
 var _print = require("../utils/print");
-async function login(apiKey) {
+// Refresh proactively if the access token expires within this window
+const EXPIRY_BUFFER_MS = 60_000;
+function credentialsFromToken(token, siteId) {
+  return {
+    access_token: token.access_token,
+    refresh_token: token.refresh_token,
+    expires_at: Date.now() + token.expires_in * 1000,
+    ...(siteId ? {
+      site_id: siteId
+    } : {})
+  };
+}
+async function login(apiKey, verbose = false, opts = {}) {
   if (apiKey) {
     await (0, _secretStore.writeCredentials)({
       api_key: apiKey
@@ -16,13 +29,31 @@ async function login(apiKey) {
     (0, _print.success)('API key saved');
     return;
   }
-  const token = await (0, _deviceFlow.runDeviceFlow)();
-  await (0, _secretStore.writeCredentials)({
-    access_token: token.access_token,
-    refresh_token: token.refresh_token
-  });
+  const token = await (0, _deviceFlow.runDeviceFlow)(verbose, opts.noBrowser ?? false);
+  console.log('');
+  const siteId = opts.siteId ?? (await (0, _deviceFlow.promptForSiteId)());
+  if (siteId) {
+    const siteToken = await (0, _deviceFlow.refreshAccessToken)(token.refresh_token, siteId);
+    await (0, _secretStore.writeCredentials)(credentialsFromToken(siteToken, siteId));
+  } else {
+    await (0, _secretStore.writeCredentials)(credentialsFromToken(token));
+  }
   (0, _print.success)('Authenticated');
-  (0, _print.success)('Tokens stored in system keychain');
+}
+async function switchSite(siteId) {
+  const creds = await (0, _secretStore.readCredentials)();
+  if (!creds) {
+    throw new Error('Not authenticated. Run `web5 login` first.');
+  }
+  if (creds.api_key) {
+    throw new Error('Cannot switch site when using an API key — re-run `web5 login --site-id <msid>` instead.');
+  }
+  if (!creds.refresh_token) {
+    throw new Error('No refresh token available. Run `web5 login` first.');
+  }
+  const refreshed = await (0, _deviceFlow.refreshAccessToken)(creds.refresh_token, siteId);
+  await (0, _secretStore.writeCredentials)(credentialsFromToken(refreshed, siteId));
+  (0, _print.success)(`Switched to site ${siteId}`);
 }
 async function logout() {
   await (0, _secretStore.clearCredentials)();
@@ -33,15 +64,37 @@ async function getToken() {
   if (!creds) {
     return null;
   }
-  if (creds.access_token) {
-    return creds.access_token;
-  }
+
+  // API key path — no expiry concept
   if (creds.api_key) {
     return creds.api_key;
   }
-  return creds.refresh_token ?? null;
+
+  // Access token still valid
+  if (creds.access_token && creds.expires_at && creds.expires_at - Date.now() > EXPIRY_BUFFER_MS) {
+    return creds.access_token;
+  }
+
+  // Access token missing or expiring soon — try refresh
+  if (creds.refresh_token) {
+    try {
+      const refreshed = await (0, _deviceFlow.refreshAccessToken)(creds.refresh_token, creds.site_id);
+      const updated = credentialsFromToken(refreshed, creds.site_id);
+      await (0, _secretStore.writeCredentials)(updated);
+      return updated.access_token;
+    } catch {
+      // Refresh token is expired or revoked — force re-login
+      await (0, _secretStore.clearCredentials)();
+      throw new Error('Session expired. Run `web5 login` to re-authenticate.');
+    }
+  }
+  return null;
 }
 async function isAuthenticated() {
-  return (await getToken()) !== null;
+  try {
+    return (await getToken()) !== null;
+  } catch {
+    return false;
+  }
 }
 //# sourceMappingURL=index.js.map

package/dist/cjs/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["_deviceFlow","require","_secretStore","_print","login","apiKey","writeCredentials","api_key","success","token","runDeviceFlow","access_token","refresh_token","logout","clearCredentials","getToken","creds","readCredentials","isAuthenticated"],"sources":["../../../src/auth/index.ts"],"sourcesContent":["import { runDeviceFlow } from './deviceFlow';\nimport {\n  writeCredentials,\n  readCredentials,\n  clearCredentials,\n} from './secretStore';\nimport { success } from '../utils/print';\n\nexport type { Credentials } from './secretStore';\n\nexport async function login(apiKey?: string): Promise<void> {\n  if (apiKey) {\n    await writeCredentials({ api_key: apiKey });\n    success('API key saved');\n    return;\n  }\n\n  const token = await runDeviceFlow();\n  await writeCredentials({\n    access_token: token.access_token,\n    refresh_token: token.refresh_token,\n  });\n  success('Authenticated');\n  success('Tokens stored in system keychain');\n}\n\nexport async function logout(): Promise<void> {\n  await clearCredentials();\n  success('Signed out \\u2014 credentials removed');\n}\n\nexport async function getToken(): Promise<string | null> {\n  const creds = await readCredentials();\n  if (!creds) {\n    return null;\n  }\n  if (creds.access_token) {\n    return creds.access_token;\n  }\n  if (creds.api_key) {\n    return creds.api_key;\n  }\n  return creds.refresh_token ?? null;\n}\n\nexport async function isAuthenticated(): Promise<boolean> {\n  return (await getToken()) !== null;\n}\n"],"mappings":";;;;;;;AAAA,IAAAA,WAAA,GAAAC,OAAA;AACA,IAAAC,YAAA,GAAAD,OAAA;AAKA,IAAAE,MAAA,GAAAF,OAAA;AAIO,eAAeG,KAAKA,CAACC,MAAe,EAAiB;EAC1D,IAAIA,MAAM,EAAE;IACV,MAAM,IAAAC,6BAAgB,EAAC;MAAEC,OAAO,EAAEF;IAAO,CAAC,CAAC;IAC3C,IAAAG,cAAO,EAAC,eAAe,CAAC;IACxB;EACF;EAEA,MAAMC,KAAK,GAAG,MAAM,IAAAC,yBAAa,EAAC,CAAC;EACnC,MAAM,IAAAJ,6BAAgB,EAAC;IACrBK,YAAY,EAAEF,KAAK,CAACE,YAAY;IAChCC,aAAa,EAAEH,KAAK,CAACG;EACvB,CAAC,CAAC;EACF,IAAAJ,cAAO,EAAC,eAAe,CAAC;EACxB,IAAAA,cAAO,EAAC,kCAAkC,CAAC;AAC7C;AAEO,eAAeK,MAAMA,CAAA,EAAkB;EAC5C,MAAM,IAAAC,6BAAgB,EAAC,CAAC;EACxB,IAAAN,cAAO,EAAC,uCAAuC,CAAC;AAClD;AAEO,eAAeO,QAAQA,CAAA,EAA2B;EACvD,MAAMC,KAAK,GAAG,MAAM,IAAAC,4BAAe,EAAC,CAAC;EACrC,IAAI,CAACD,KAAK,EAAE;IACV,OAAO,IAAI;EACb;EACA,IAAIA,KAAK,CAACL,YAAY,EAAE;IACtB,OAAOK,KAAK,CAACL,YAAY;EAC3B;EACA,IAAIK,KAAK,CAACT,OAAO,EAAE;IACjB,OAAOS,KAAK,CAACT,OAAO;EACtB;EACA,OAAOS,KAAK,CAACJ,aAAa,IAAI,IAAI;AACpC;AAEO,eAAeM,eAAeA,CAAA,EAAqB;EACxD,OAAO,CAAC,MAAMH,QAAQ,CAAC,CAAC,MAAM,IAAI;AACpC","ignoreList":[]}
+{"version":3,"names":["_deviceFlow","require","_secretStore","_print","EXPIRY_BUFFER_MS","credentialsFromToken","token","siteId","access_token","refresh_token","expires_at","Date","now","expires_in","site_id","login","apiKey","verbose","opts","writeCredentials","api_key","success","runDeviceFlow","noBrowser","console","log","promptForSiteId","siteToken","refreshAccessToken","switchSite","creds","readCredentials","Error","refreshed","logout","clearCredentials","getToken","updated","isAuthenticated"],"sources":["../../../src/auth/index.ts"],"sourcesContent":["import {\n  runDeviceFlow,\n  refreshAccessToken,\n  promptForSiteId,\n} from './deviceFlow';\nimport {\n  writeCredentials,\n  readCredentials,\n  clearCredentials,\n} from './secretStore';\nimport { success } from '../utils/print';\n\nexport type { Credentials } from './secretStore';\n\n// Refresh proactively if the access token expires within this window\nconst EXPIRY_BUFFER_MS = 60_000;\n\nfunction credentialsFromToken(\n  token: {\n    access_token: string;\n    refresh_token: string;\n    expires_in: number;\n  },\n  siteId?: string,\n) {\n  return {\n    access_token: token.access_token,\n    refresh_token: token.refresh_token,\n    expires_at: Date.now() + token.expires_in * 1000,\n    ...(siteId ? { site_id: siteId } : {}),\n  };\n}\n\nexport async function login(\n  apiKey?: string,\n  verbose = false,\n  opts: { siteId?: string; noBrowser?: boolean } = {},\n): Promise<void> {\n  if (apiKey) {\n    await writeCredentials({ api_key: apiKey });\n    success('API key saved');\n    return;\n  }\n\n  const token = await runDeviceFlow(verbose, opts.noBrowser ?? false);\n\n  console.log('');\n  const siteId = opts.siteId ?? (await promptForSiteId());\n  if (siteId) {\n    const siteToken = await refreshAccessToken(token.refresh_token, siteId);\n    await writeCredentials(credentialsFromToken(siteToken, siteId));\n  } else {\n    await writeCredentials(credentialsFromToken(token));\n  }\n\n  success('Authenticated');\n}\n\nexport async function switchSite(siteId: string): Promise<void> {\n  const creds = await readCredentials();\n  if (!creds) {\n    throw new Error('Not authenticated. Run `web5 login` first.');\n  }\n  if (creds.api_key) {\n    throw new Error('Cannot switch site when using an API key — re-run `web5 login --site-id <msid>` instead.');\n  }\n  if (!creds.refresh_token) {\n    throw new Error('No refresh token available. Run `web5 login` first.');\n  }\n  const refreshed = await refreshAccessToken(creds.refresh_token, siteId);\n  await writeCredentials(credentialsFromToken(refreshed, siteId));\n  success(`Switched to site ${siteId}`);\n}\n\nexport async function logout(): Promise<void> {\n  await clearCredentials();\n  success('Signed out \\u2014 credentials removed');\n}\n\nexport async function getToken(): Promise<string | null> {\n  const creds = await readCredentials();\n  if (!creds) {\n    return null;\n  }\n\n  // API key path — no expiry concept\n  if (creds.api_key) {\n    return creds.api_key;\n  }\n\n  // Access token still valid\n  if (\n    creds.access_token &&\n    creds.expires_at &&\n    creds.expires_at - Date.now() > EXPIRY_BUFFER_MS\n  ) {\n    return creds.access_token;\n  }\n\n  // Access token missing or expiring soon — try refresh\n  if (creds.refresh_token) {\n    try {\n      const refreshed = await refreshAccessToken(\n        creds.refresh_token,\n        creds.site_id,\n      );\n      const updated = credentialsFromToken(refreshed, creds.site_id);\n      await writeCredentials(updated);\n      return updated.access_token;\n    } catch {\n      // Refresh token is expired or revoked — force re-login\n      await clearCredentials();\n      throw new Error('Session expired. Run `web5 login` to re-authenticate.');\n    }\n  }\n\n  return null;\n}\n\nexport async function isAuthenticated(): Promise<boolean> {\n  try {\n    return (await getToken()) !== null;\n  } catch {\n    return false;\n  }\n}\n"],"mappings":";;;;;;;;AAAA,IAAAA,WAAA,GAAAC,OAAA;AAKA,IAAAC,YAAA,GAAAD,OAAA;AAKA,IAAAE,MAAA,GAAAF,OAAA;AAIA;AACA,MAAMG,gBAAgB,GAAG,MAAM;AAE/B,SAASC,oBAAoBA,CAC3BC,KAIC,EACDC,MAAe,EACf;EACA,OAAO;IACLC,YAAY,EAAEF,KAAK,CAACE,YAAY;IAChCC,aAAa,EAAEH,KAAK,CAACG,aAAa;IAClCC,UAAU,EAAEC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAGN,KAAK,CAACO,UAAU,GAAG,IAAI;IAChD,IAAIN,MAAM,GAAG;MAAEO,OAAO,EAAEP;IAAO,CAAC,GAAG,CAAC,CAAC;EACvC,CAAC;AACH;AAEO,eAAeQ,KAAKA,CACzBC,MAAe,EACfC,OAAO,GAAG,KAAK,EACfC,IAA8C,GAAG,CAAC,CAAC,EACpC;EACf,IAAIF,MAAM,EAAE;IACV,MAAM,IAAAG,6BAAgB,EAAC;MAAEC,OAAO,EAAEJ;IAAO,CAAC,CAAC;IAC3C,IAAAK,cAAO,EAAC,eAAe,CAAC;IACxB;EACF;EAEA,MAAMf,KAAK,GAAG,MAAM,IAAAgB,yBAAa,EAACL,OAAO,EAAEC,IAAI,CAACK,SAAS,IAAI,KAAK,CAAC;EAEnEC,OAAO,CAACC,GAAG,CAAC,EAAE,CAAC;EACf,MAAMlB,MAAM,GAAGW,IAAI,CAACX,MAAM,KAAK,MAAM,IAAAmB,2BAAe,EAAC,CAAC,CAAC;EACvD,IAAInB,MAAM,EAAE;IACV,MAAMoB,SAAS,GAAG,MAAM,IAAAC,8BAAkB,EAACtB,KAAK,CAACG,aAAa,EAAEF,MAAM,CAAC;IACvE,MAAM,IAAAY,6BAAgB,EAACd,oBAAoB,CAACsB,SAAS,EAAEpB,MAAM,CAAC,CAAC;EACjE,CAAC,MAAM;IACL,MAAM,IAAAY,6BAAgB,EAACd,oBAAoB,CAACC,KAAK,CAAC,CAAC;EACrD;EAEA,IAAAe,cAAO,EAAC,eAAe,CAAC;AAC1B;AAEO,eAAeQ,UAAUA,CAACtB,MAAc,EAAiB;EAC9D,MAAMuB,KAAK,GAAG,MAAM,IAAAC,4BAAe,EAAC,CAAC;EACrC,IAAI,CAACD,KAAK,EAAE;IACV,MAAM,IAAIE,KAAK,CAAC,4CAA4C,CAAC;EAC/D;EACA,IAAIF,KAAK,CAACV,OAAO,EAAE;IACjB,MAAM,IAAIY,KAAK,CAAC,0FAA0F,CAAC;EAC7G;EACA,IAAI,CAACF,KAAK,CAACrB,aAAa,EAAE;IACxB,MAAM,IAAIuB,KAAK,CAAC,qDAAqD,CAAC;EACxE;EACA,MAAMC,SAAS,GAAG,MAAM,IAAAL,8BAAkB,EAACE,KAAK,CAACrB,aAAa,EAAEF,MAAM,CAAC;EACvE,MAAM,IAAAY,6BAAgB,EAACd,oBAAoB,CAAC4B,SAAS,EAAE1B,MAAM,CAAC,CAAC;EAC/D,IAAAc,cAAO,EAAC,oBAAoBd,MAAM,EAAE,CAAC;AACvC;AAEO,eAAe2B,MAAMA,CAAA,EAAkB;EAC5C,MAAM,IAAAC,6BAAgB,EAAC,CAAC;EACxB,IAAAd,cAAO,EAAC,uCAAuC,CAAC;AAClD;AAEO,eAAee,QAAQA,CAAA,EAA2B;EACvD,MAAMN,KAAK,GAAG,MAAM,IAAAC,4BAAe,EAAC,CAAC;EACrC,IAAI,CAACD,KAAK,EAAE;IACV,OAAO,IAAI;EACb;;EAEA;EACA,IAAIA,KAAK,CAACV,OAAO,EAAE;IACjB,OAAOU,KAAK,CAACV,OAAO;EACtB;;EAEA;EACA,IACEU,KAAK,CAACtB,YAAY,IAClBsB,KAAK,CAACpB,UAAU,IAChBoB,KAAK,CAACpB,UAAU,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAGR,gBAAgB,EAChD;IACA,OAAO0B,KAAK,CAACtB,YAAY;EAC3B;;EAEA;EACA,IAAIsB,KAAK,CAACrB,aAAa,EAAE;IACvB,IAAI;MACF,MAAMwB,SAAS,GAAG,MAAM,IAAAL,8BAAkB,EACxCE,KAAK,CAACrB,aAAa,EACnBqB,KAAK,CAAChB,OACR,CAAC;MACD,MAAMuB,OAAO,GAAGhC,oBAAoB,CAAC4B,SAAS,EAAEH,KAAK,CAAChB,OAAO,CAAC;MAC9D,MAAM,IAAAK,6BAAgB,EAACkB,OAAO,CAAC;MAC/B,OAAOA,OAAO,CAAC7B,YAAY;IAC7B,CAAC,CAAC,MAAM;MACN;MACA,MAAM,IAAA2B,6BAAgB,EAAC,CAAC;MACxB,MAAM,IAAIH,KAAK,CAAC,uDAAuD,CAAC;IAC1E;EACF;EAEA,OAAO,IAAI;AACb;AAEO,eAAeM,eAAeA,CAAA,EAAqB;EACxD,IAAI;IACF,OAAO,CAAC,MAAMF,QAAQ,CAAC,CAAC,MAAM,IAAI;EACpC,CAAC,CAAC,MAAM;IACN,OAAO,KAAK;EACd;AACF","ignoreList":[]}

package/dist/cjs/auth/secretStore.js.map

@@ -1 +1 @@
-{"version":3,"names":["crypto","_interopRequireWildcard","require","os","path","_promises","_fs","e","t","WeakMap","r","n","__esModule","o","i","f","__proto__","default","has","get","set","hasOwnProperty","call","Object","defineProperty","getOwnPropertyDescriptor","SERVICE","ACCOUNT","CRED_FILE","join","homedir","_storeType","getDerivedKey","uid","String","userInfo","raw","hostname","createHash","update","digest","detectStore","keytar","Promise","resolve","then","setPassword","deletePassword","encrypt","plaintext","key","iv","randomBytes","cipher","createCipheriv","encrypted","Buffer","concat","final","tag","getAuthTag","toString","decrypt","ciphertext","buf","from","subarray","decipher","createDecipheriv","setAuthTag","writeCredentials","creds","store","payload","JSON","stringify","atomicWrite","readCredentials","apiKey","process","env","WEB5_API_KEY","api_key","getPassword","parse","readFile","trim","clearCredentials","unlink"],"sources":["../../../src/auth/secretStore.ts"],"sourcesContent":["import * as crypto from 'crypto';\nimport * as os from 'os';\nimport * as path from 'path';\nimport { readFile, unlink } from 'fs/promises';\nimport { atomicWrite } from '../utils/fs';\n\nconst SERVICE = 'wix-web5-cli';\nconst ACCOUNT = 'credentials';\nconst CRED_FILE = path.join(os.homedir(), '.wix', 'credentials.enc');\n\nexport interface Credentials {\n  access_token?: string;\n  refresh_token?: string;\n  api_key?: string;\n}\n\ntype StoreType = 'keychain' | 'file';\n\nlet _storeType: StoreType | null = null;\n\nfunction getDerivedKey(): Buffer {\n  const uid = String(os.userInfo().uid);\n  const raw = `${os.hostname()}:${uid}`;\n  return crypto.createHash('sha256').update(raw).digest();\n}\n\nasync function detectStore(): Promise<StoreType> {\n  if (_storeType) {\n    return _storeType;\n  }\n\n  try {\n    // Dynamic import — keytar is optional; throws if the native module is absent\n    const keytar = await import('keytar');\n    await keytar.setPassword(SERVICE, '_probe', 'test');\n    await keytar.deletePassword(SERVICE, '_probe');\n    _storeType = 'keychain';\n  } catch {\n    _storeType = 'file';\n  }\n\n  return _storeType;\n}\n\nfunction encrypt(plaintext: string): string {\n  const key = getDerivedKey();\n  const iv = crypto.randomBytes(12);\n  const cipher = crypto.createCipheriv('aes-256-gcm', key, iv);\n  const encrypted = Buffer.concat([\n    cipher.update(plaintext, 'utf8'),\n    cipher.final(),\n  ]);\n  const tag = cipher.getAuthTag();\n  return Buffer.concat([iv, tag, encrypted]).toString('base64');\n}\n\nfunction decrypt(ciphertext: string): string {\n  const key = getDerivedKey();\n  const buf = Buffer.from(ciphertext, 'base64');\n  const iv = buf.subarray(0, 12);\n  const tag = buf.subarray(12, 28);\n  const encrypted = buf.subarray(28);\n  const decipher = crypto.createDecipheriv('aes-256-gcm', key, iv);\n  decipher.setAuthTag(tag);\n  return decipher.update(encrypted) + decipher.final('utf8');\n}\n\nexport async function writeCredentials(creds: Credentials): Promise<void> {\n  const store = await detectStore();\n  const payload = JSON.stringify(creds);\n\n  if (store === 'keychain') {\n    const keytar = await import('keytar');\n    await keytar.setPassword(SERVICE, ACCOUNT, payload);\n  } else {\n    await atomicWrite(CRED_FILE, encrypt(payload), 0o600);\n  }\n}\n\nexport async function readCredentials(): Promise<Credentials | null> {\n  // Env var takes highest priority — used in CI/CD pipelines\n  const apiKey = process.env.WEB5_API_KEY;\n  if (apiKey) {\n    return { api_key: apiKey };\n  }\n\n  const store = await detectStore();\n\n  if (store === 'keychain') {\n    const keytar = await import('keytar');\n    const payload = await keytar.getPassword(SERVICE, ACCOUNT);\n    if (!payload) {\n      return null;\n    }\n    return JSON.parse(payload) as Credentials;\n  } else {\n    try {\n      const encrypted = await readFile(CRED_FILE, 'utf8');\n      return JSON.parse(decrypt(encrypted.trim())) as Credentials;\n    } catch {\n      return null;\n    }\n  }\n}\n\nexport async function clearCredentials(): Promise<void> {\n  const store = await detectStore();\n\n  if (store === 'keychain') {\n    const keytar = await import('keytar');\n    await keytar.deletePassword(SERVICE, ACCOUNT);\n  } else {\n    try {\n      await unlink(CRED_FILE);\n    } catch {\n      // Already gone — that's fine\n    }\n  }\n}\n"],"mappings":";;;;;;AAAA,IAAAA,MAAA,GAAAC,uBAAA,CAAAC,OAAA;AACA,IAAAC,EAAA,GAAAF,uBAAA,CAAAC,OAAA;AACA,IAAAE,IAAA,GAAAH,uBAAA,CAAAC,OAAA;AACA,IAAAG,SAAA,GAAAH,OAAA;AACA,IAAAI,GAAA,GAAAJ,OAAA;AAA0C,SAAAD,wBAAAM,CAAA,EAAAC,CAAA,6BAAAC,OAAA,MAAAC,CAAA,OAAAD,OAAA,IAAAE,CAAA,OAAAF,OAAA,YAAAR,uBAAA,YAAAA,CAAAM,CAAA,EAAAC,CAAA,SAAAA,CAAA,IAAAD,CAAA,IAAAA,CAAA,CAAAK,UAAA,SAAAL,CAAA,MAAAM,CAAA,EAAAC,CAAA,EAAAC,CAAA,KAAAC,SAAA,QAAAC,OAAA,EAAAV,CAAA,iBAAAA,CAAA,uBAAAA,CAAA,yBAAAA,CAAA,SAAAQ,CAAA,MAAAF,CAAA,GAAAL,CAAA,GAAAG,CAAA,GAAAD,CAAA,QAAAG,CAAA,CAAAK,GAAA,CAAAX,CAAA,UAAAM,CAAA,CAAAM,GAAA,CAAAZ,CAAA,GAAAM,CAAA,CAAAO,GAAA,CAAAb,CAAA,EAAAQ,CAAA,gBAAAP,CAAA,IAAAD,CAAA,gBAAAC,CAAA,OAAAa,cAAA,CAAAC,IAAA,CAAAf,CAAA,EAAAC,CAAA,OAAAM,CAAA,IAAAD,CAAA,GAAAU,MAAA,CAAAC,cAAA,KAAAD,MAAA,CAAAE,wBAAA,CAAAlB,CAAA,EAAAC,CAAA,OAAAM,CAAA,CAAAK,GAAA,IAAAL,CAAA,CAAAM,GAAA,IAAAP,CAAA,CAAAE,CAAA,EAAAP,CAAA,EAAAM,CAAA,IAAAC,CAAA,CAAAP,CAAA,IAAAD,CAAA,CAAAC,CAAA,WAAAO,CAAA,KAAAR,CAAA,EAAAC,CAAA;AAE1C,MAAMkB,OAAO,GAAG,cAAc;AAC9B,MAAMC,OAAO,GAAG,aAAa;AAC7B,MAAMC,SAAS,GAAGxB,IAAI,CAACyB,IAAI,CAAC1B,EAAE,CAAC2B,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,iBAAiB,CAAC;AAUpE,IAAIC,UAA4B,GAAG,IAAI;AAEvC,SAASC,aAAaA,CAAA,EAAW;EAC/B,MAAMC,GAAG,GAAGC,MAAM,CAAC/B,EAAE,CAACgC,QAAQ,CAAC,CAAC,CAACF,GAAG,CAAC;EACrC,MAAMG,GAAG,GAAG,GAAGjC,EAAE,CAACkC,QAAQ,CAAC,CAAC,IAAIJ,GAAG,EAAE;EACrC,OAAOjC,MAAM,CAACsC,UAAU,CAAC,QAAQ,CAAC,CAACC,MAAM,CAACH,GAAG,CAAC,CAACI,MAAM,CAAC,CAAC;AACzD;AAEA,eAAeC,WAAWA,CAAA,EAAuB;EAC/C,IAAIV,UAAU,EAAE;IACd,OAAOA,UAAU;EACnB;EAEA,IAAI;IACF;IACA,MAAMW,MAAM,GAAG,MAAAC,OAAA,CAAAC,OAAA,GAAAC,IAAA,OAAA5C,uBAAA,CAAAC,OAAA,CAAa,QAAQ,GAAC;IACrC,MAAMwC,MAAM,CAACI,WAAW,CAACpB,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC;IACnD,MAAMgB,MAAM,CAACK,cAAc,CAACrB,OAAO,EAAE,QAAQ,CAAC;IAC9CK,UAAU,GAAG,UAAU;EACzB,CAAC,CAAC,MAAM;IACNA,UAAU,GAAG,MAAM;EACrB;EAEA,OAAOA,UAAU;AACnB;AAEA,SAASiB,OAAOA,CAACC,SAAiB,EAAU;EAC1C,MAAMC,GAAG,GAAGlB,aAAa,CAAC,CAAC;EAC3B,MAAMmB,EAAE,GAAGnD,MAAM,CAACoD,WAAW,CAAC,EAAE,CAAC;EACjC,MAAMC,MAAM,GAAGrD,MAAM,CAACsD,cAAc,CAAC,aAAa,EAAEJ,GAAG,EAAEC,EAAE,CAAC;EAC5D,MAAMI,SAAS,GAAGC,MAAM,CAACC,MAAM,CAAC,CAC9BJ,MAAM,CAACd,MAAM,CAACU,SAAS,EAAE,MAAM,CAAC,EAChCI,MAAM,CAACK,KAAK,CAAC,CAAC,CACf,CAAC;EACF,MAAMC,GAAG,GAAGN,MAAM,CAACO,UAAU,CAAC,CAAC;EAC/B,OAAOJ,MAAM,CAACC,MAAM,CAAC,CAACN,EAAE,EAAEQ,GAAG,EAAEJ,SAAS,CAAC,CAAC,CAACM,QAAQ,CAAC,QAAQ,CAAC;AAC/D;AAEA,SAASC,OAAOA,CAACC,UAAkB,EAAU;EAC3C,MAAMb,GAAG,GAAGlB,aAAa,CAAC,CAAC;EAC3B,MAAMgC,GAAG,GAAGR,MAAM,CAACS,IAAI,CAACF,UAAU,EAAE,QAAQ,CAAC;EAC7C,MAAMZ,EAAE,GAAGa,GAAG,CAACE,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;EAC9B,MAAMP,GAAG,GAAGK,GAAG,CAACE,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC;EAChC,MAAMX,SAAS,GAAGS,GAAG,CAACE,QAAQ,CAAC,EAAE,CAAC;EAClC,MAAMC,QAAQ,GAAGnE,MAAM,CAACoE,gBAAgB,CAAC,aAAa,EAAElB,GAAG,EAAEC,EAAE,CAAC;EAChEgB,QAAQ,CAACE,UAAU,CAACV,GAAG,CAAC;EACxB,OAAOQ,QAAQ,CAAC5B,MAAM,CAACgB,SAAS,CAAC,GAAGY,QAAQ,CAACT,KAAK,CAAC,MAAM,CAAC;AAC5D;AAEO,eAAeY,gBAAgBA,CAACC,KAAkB,EAAiB;EACxE,MAAMC,KAAK,GAAG,MAAM/B,WAAW,CAAC,CAAC;EACjC,MAAMgC,OAAO,GAAGC,IAAI,CAACC,SAAS,CAACJ,KAAK,CAAC;EAErC,IAAIC,KAAK,KAAK,UAAU,EAAE;IACxB,MAAM9B,MAAM,GAAG,MAAAC,OAAA,CAAAC,OAAA,GAAAC,IAAA,OAAA5C,uBAAA,CAAAC,OAAA,CAAa,QAAQ,GAAC;IACrC,MAAMwC,MAAM,CAACI,WAAW,CAACpB,OAAO,EAAEC,OAAO,EAAE8C,OAAO,CAAC;EACrD,CAAC,MAAM;IACL,MAAM,IAAAG,eAAW,EAAChD,SAAS,EAAEoB,OAAO,CAACyB,OAAO,CAAC,EAAE,KAAK,CAAC;EACvD;AACF;AAEO,eAAeI,eAAeA,CAAA,EAAgC;EACnE;EACA,MAAMC,MAAM,GAAGC,OAAO,CAACC,GAAG,CAACC,YAAY;EACvC,IAAIH,MAAM,EAAE;IACV,OAAO;MAAEI,OAAO,EAAEJ;IAAO,CAAC;EAC5B;EAEA,MAAMN,KAAK,GAAG,MAAM/B,WAAW,CAAC,CAAC;EAEjC,IAAI+B,KAAK,KAAK,UAAU,EAAE;IACxB,MAAM9B,MAAM,GAAG,MAAAC,OAAA,CAAAC,OAAA,GAAAC,IAAA,OAAA5C,uBAAA,CAAAC,OAAA,CAAa,QAAQ,GAAC;IACrC,MAAMuE,OAAO,GAAG,MAAM/B,MAAM,CAACyC,WAAW,CAACzD,OAAO,EAAEC,OAAO,CAAC;IAC1D,IAAI,CAAC8C,OAAO,EAAE;MACZ,OAAO,IAAI;IACb;IACA,OAAOC,IAAI,CAACU,KAAK,CAACX,OAAO,CAAC;EAC5B,CAAC,MAAM;IACL,IAAI;MACF,MAAMlB,SAAS,GAAG,MAAM,IAAA8B,kBAAQ,EAACzD,SAAS,EAAE,MAAM,CAAC;MACnD,OAAO8C,IAAI,CAACU,KAAK,CAACtB,OAAO,CAACP,SAAS,CAAC+B,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,MAAM;MACN,OAAO,IAAI;IACb;EACF;AACF;AAEO,eAAeC,gBAAgBA,CAAA,EAAkB;EACtD,MAAMf,KAAK,GAAG,MAAM/B,WAAW,CAAC,CAAC;EAEjC,IAAI+B,KAAK,KAAK,UAAU,EAAE;IACxB,MAAM9B,MAAM,GAAG,MAAAC,OAAA,CAAAC,OAAA,GAAAC,IAAA,OAAA5C,uBAAA,CAAAC,OAAA,CAAa,QAAQ,GAAC;IACrC,MAAMwC,MAAM,CAACK,cAAc,CAACrB,OAAO,EAAEC,OAAO,CAAC;EAC/C,CAAC,MAAM;IACL,IAAI;MACF,MAAM,IAAA6D,gBAAM,EAAC5D,SAAS,CAAC;IACzB,CAAC,CAAC,MAAM;MACN;IAAA;EAEJ;AACF","ignoreList":[]}
+{"version":3,"names":["crypto","_interopRequireWildcard","require","os","path","_promises","_fs","e","t","WeakMap","r","n","__esModule","o","i","f","__proto__","default","has","get","set","hasOwnProperty","call","Object","defineProperty","getOwnPropertyDescriptor","SERVICE","ACCOUNT","CRED_FILE","join","homedir","_storeType","getDerivedKey","uid","String","userInfo","raw","hostname","createHash","update","digest","detectStore","keytar","Promise","resolve","then","setPassword","deletePassword","encrypt","plaintext","key","iv","randomBytes","cipher","createCipheriv","encrypted","Buffer","concat","final","tag","getAuthTag","toString","decrypt","ciphertext","buf","from","subarray","decipher","createDecipheriv","setAuthTag","writeCredentials","creds","store","payload","JSON","stringify","atomicWrite","readCredentials","apiKey","process","env","WEB5_API_KEY","api_key","getPassword","parse","readFile","trim","clearCredentials","unlink"],"sources":["../../../src/auth/secretStore.ts"],"sourcesContent":["import * as crypto from 'crypto';\nimport * as os from 'os';\nimport * as path from 'path';\nimport { readFile, unlink } from 'fs/promises';\nimport { atomicWrite } from '../utils/fs';\n\nconst SERVICE = 'wix-web5-cli';\nconst ACCOUNT = 'credentials';\nconst CRED_FILE = path.join(os.homedir(), '.wix', 'credentials.enc');\n\nexport interface Credentials {\n  access_token?: string;\n  refresh_token?: string;\n  expires_at?: number; // unix ms — when access_token expires\n  site_id?: string; // msid — when set, access_token is scoped to this site\n  api_key?: string;\n}\n\ntype StoreType = 'keychain' | 'file';\n\nlet _storeType: StoreType | null = null;\n\nfunction getDerivedKey(): Buffer {\n  const uid = String(os.userInfo().uid);\n  const raw = `${os.hostname()}:${uid}`;\n  return crypto.createHash('sha256').update(raw).digest();\n}\n\nasync function detectStore(): Promise<StoreType> {\n  if (_storeType) {\n    return _storeType;\n  }\n\n  try {\n    // Dynamic import — keytar is optional; throws if the native module is absent\n    const keytar = await import('keytar');\n    await keytar.setPassword(SERVICE, '_probe', 'test');\n    await keytar.deletePassword(SERVICE, '_probe');\n    _storeType = 'keychain';\n  } catch {\n    _storeType = 'file';\n  }\n\n  return _storeType;\n}\n\nfunction encrypt(plaintext: string): string {\n  const key = getDerivedKey();\n  const iv = crypto.randomBytes(12);\n  const cipher = crypto.createCipheriv('aes-256-gcm', key, iv);\n  const encrypted = Buffer.concat([\n    cipher.update(plaintext, 'utf8'),\n    cipher.final(),\n  ]);\n  const tag = cipher.getAuthTag();\n  return Buffer.concat([iv, tag, encrypted]).toString('base64');\n}\n\nfunction decrypt(ciphertext: string): string {\n  const key = getDerivedKey();\n  const buf = Buffer.from(ciphertext, 'base64');\n  const iv = buf.subarray(0, 12);\n  const tag = buf.subarray(12, 28);\n  const encrypted = buf.subarray(28);\n  const decipher = crypto.createDecipheriv('aes-256-gcm', key, iv);\n  decipher.setAuthTag(tag);\n  return decipher.update(encrypted) + decipher.final('utf8');\n}\n\nexport async function writeCredentials(creds: Credentials): Promise<void> {\n  const store = await detectStore();\n  const payload = JSON.stringify(creds);\n\n  if (store === 'keychain') {\n    const keytar = await import('keytar');\n    await keytar.setPassword(SERVICE, ACCOUNT, payload);\n  } else {\n    await atomicWrite(CRED_FILE, encrypt(payload), 0o600);\n  }\n}\n\nexport async function readCredentials(): Promise<Credentials | null> {\n  // Env var takes highest priority — used in CI/CD pipelines\n  const apiKey = process.env.WEB5_API_KEY;\n  if (apiKey) {\n    return { api_key: apiKey };\n  }\n\n  const store = await detectStore();\n\n  if (store === 'keychain') {\n    const keytar = await import('keytar');\n    const payload = await keytar.getPassword(SERVICE, ACCOUNT);\n    if (!payload) {\n      return null;\n    }\n    return JSON.parse(payload) as Credentials;\n  } else {\n    try {\n      const encrypted = await readFile(CRED_FILE, 'utf8');\n      return JSON.parse(decrypt(encrypted.trim())) as Credentials;\n    } catch {\n      return null;\n    }\n  }\n}\n\nexport async function clearCredentials(): Promise<void> {\n  const store = await detectStore();\n\n  if (store === 'keychain') {\n    const keytar = await import('keytar');\n    await keytar.deletePassword(SERVICE, ACCOUNT);\n  } else {\n    try {\n      await unlink(CRED_FILE);\n    } catch {\n      // Already gone — that's fine\n    }\n  }\n}\n"],"mappings":";;;;;;AAAA,IAAAA,MAAA,GAAAC,uBAAA,CAAAC,OAAA;AACA,IAAAC,EAAA,GAAAF,uBAAA,CAAAC,OAAA;AACA,IAAAE,IAAA,GAAAH,uBAAA,CAAAC,OAAA;AACA,IAAAG,SAAA,GAAAH,OAAA;AACA,IAAAI,GAAA,GAAAJ,OAAA;AAA0C,SAAAD,wBAAAM,CAAA,EAAAC,CAAA,6BAAAC,OAAA,MAAAC,CAAA,OAAAD,OAAA,IAAAE,CAAA,OAAAF,OAAA,YAAAR,uBAAA,YAAAA,CAAAM,CAAA,EAAAC,CAAA,SAAAA,CAAA,IAAAD,CAAA,IAAAA,CAAA,CAAAK,UAAA,SAAAL,CAAA,MAAAM,CAAA,EAAAC,CAAA,EAAAC,CAAA,KAAAC,SAAA,QAAAC,OAAA,EAAAV,CAAA,iBAAAA,CAAA,uBAAAA,CAAA,yBAAAA,CAAA,SAAAQ,CAAA,MAAAF,CAAA,GAAAL,CAAA,GAAAG,CAAA,GAAAD,CAAA,QAAAG,CAAA,CAAAK,GAAA,CAAAX,CAAA,UAAAM,CAAA,CAAAM,GAAA,CAAAZ,CAAA,GAAAM,CAAA,CAAAO,GAAA,CAAAb,CAAA,EAAAQ,CAAA,gBAAAP,CAAA,IAAAD,CAAA,gBAAAC,CAAA,OAAAa,cAAA,CAAAC,IAAA,CAAAf,CAAA,EAAAC,CAAA,OAAAM,CAAA,IAAAD,CAAA,GAAAU,MAAA,CAAAC,cAAA,KAAAD,MAAA,CAAAE,wBAAA,CAAAlB,CAAA,EAAAC,CAAA,OAAAM,CAAA,CAAAK,GAAA,IAAAL,CAAA,CAAAM,GAAA,IAAAP,CAAA,CAAAE,CAAA,EAAAP,CAAA,EAAAM,CAAA,IAAAC,CAAA,CAAAP,CAAA,IAAAD,CAAA,CAAAC,CAAA,WAAAO,CAAA,KAAAR,CAAA,EAAAC,CAAA;AAE1C,MAAMkB,OAAO,GAAG,cAAc;AAC9B,MAAMC,OAAO,GAAG,aAAa;AAC7B,MAAMC,SAAS,GAAGxB,IAAI,CAACyB,IAAI,CAAC1B,EAAE,CAAC2B,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,iBAAiB,CAAC;AAYpE,IAAIC,UAA4B,GAAG,IAAI;AAEvC,SAASC,aAAaA,CAAA,EAAW;EAC/B,MAAMC,GAAG,GAAGC,MAAM,CAAC/B,EAAE,CAACgC,QAAQ,CAAC,CAAC,CAACF,GAAG,CAAC;EACrC,MAAMG,GAAG,GAAG,GAAGjC,EAAE,CAACkC,QAAQ,CAAC,CAAC,IAAIJ,GAAG,EAAE;EACrC,OAAOjC,MAAM,CAACsC,UAAU,CAAC,QAAQ,CAAC,CAACC,MAAM,CAACH,GAAG,CAAC,CAACI,MAAM,CAAC,CAAC;AACzD;AAEA,eAAeC,WAAWA,CAAA,EAAuB;EAC/C,IAAIV,UAAU,EAAE;IACd,OAAOA,UAAU;EACnB;EAEA,IAAI;IACF;IACA,MAAMW,MAAM,GAAG,MAAAC,OAAA,CAAAC,OAAA,GAAAC,IAAA,OAAA5C,uBAAA,CAAAC,OAAA,CAAa,QAAQ,GAAC;IACrC,MAAMwC,MAAM,CAACI,WAAW,CAACpB,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC;IACnD,MAAMgB,MAAM,CAACK,cAAc,CAACrB,OAAO,EAAE,QAAQ,CAAC;IAC9CK,UAAU,GAAG,UAAU;EACzB,CAAC,CAAC,MAAM;IACNA,UAAU,GAAG,MAAM;EACrB;EAEA,OAAOA,UAAU;AACnB;AAEA,SAASiB,OAAOA,CAACC,SAAiB,EAAU;EAC1C,MAAMC,GAAG,GAAGlB,aAAa,CAAC,CAAC;EAC3B,MAAMmB,EAAE,GAAGnD,MAAM,CAACoD,WAAW,CAAC,EAAE,CAAC;EACjC,MAAMC,MAAM,GAAGrD,MAAM,CAACsD,cAAc,CAAC,aAAa,EAAEJ,GAAG,EAAEC,EAAE,CAAC;EAC5D,MAAMI,SAAS,GAAGC,MAAM,CAACC,MAAM,CAAC,CAC9BJ,MAAM,CAACd,MAAM,CAACU,SAAS,EAAE,MAAM,CAAC,EAChCI,MAAM,CAACK,KAAK,CAAC,CAAC,CACf,CAAC;EACF,MAAMC,GAAG,GAAGN,MAAM,CAACO,UAAU,CAAC,CAAC;EAC/B,OAAOJ,MAAM,CAACC,MAAM,CAAC,CAACN,EAAE,EAAEQ,GAAG,EAAEJ,SAAS,CAAC,CAAC,CAACM,QAAQ,CAAC,QAAQ,CAAC;AAC/D;AAEA,SAASC,OAAOA,CAACC,UAAkB,EAAU;EAC3C,MAAMb,GAAG,GAAGlB,aAAa,CAAC,CAAC;EAC3B,MAAMgC,GAAG,GAAGR,MAAM,CAACS,IAAI,CAACF,UAAU,EAAE,QAAQ,CAAC;EAC7C,MAAMZ,EAAE,GAAGa,GAAG,CAACE,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;EAC9B,MAAMP,GAAG,GAAGK,GAAG,CAACE,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC;EAChC,MAAMX,SAAS,GAAGS,GAAG,CAACE,QAAQ,CAAC,EAAE,CAAC;EAClC,MAAMC,QAAQ,GAAGnE,MAAM,CAACoE,gBAAgB,CAAC,aAAa,EAAElB,GAAG,EAAEC,EAAE,CAAC;EAChEgB,QAAQ,CAACE,UAAU,CAACV,GAAG,CAAC;EACxB,OAAOQ,QAAQ,CAAC5B,MAAM,CAACgB,SAAS,CAAC,GAAGY,QAAQ,CAACT,KAAK,CAAC,MAAM,CAAC;AAC5D;AAEO,eAAeY,gBAAgBA,CAACC,KAAkB,EAAiB;EACxE,MAAMC,KAAK,GAAG,MAAM/B,WAAW,CAAC,CAAC;EACjC,MAAMgC,OAAO,GAAGC,IAAI,CAACC,SAAS,CAACJ,KAAK,CAAC;EAErC,IAAIC,KAAK,KAAK,UAAU,EAAE;IACxB,MAAM9B,MAAM,GAAG,MAAAC,OAAA,CAAAC,OAAA,GAAAC,IAAA,OAAA5C,uBAAA,CAAAC,OAAA,CAAa,QAAQ,GAAC;IACrC,MAAMwC,MAAM,CAACI,WAAW,CAACpB,OAAO,EAAEC,OAAO,EAAE8C,OAAO,CAAC;EACrD,CAAC,MAAM;IACL,MAAM,IAAAG,eAAW,EAAChD,SAAS,EAAEoB,OAAO,CAACyB,OAAO,CAAC,EAAE,KAAK,CAAC;EACvD;AACF;AAEO,eAAeI,eAAeA,CAAA,EAAgC;EACnE;EACA,MAAMC,MAAM,GAAGC,OAAO,CAACC,GAAG,CAACC,YAAY;EACvC,IAAIH,MAAM,EAAE;IACV,OAAO;MAAEI,OAAO,EAAEJ;IAAO,CAAC;EAC5B;EAEA,MAAMN,KAAK,GAAG,MAAM/B,WAAW,CAAC,CAAC;EAEjC,IAAI+B,KAAK,KAAK,UAAU,EAAE;IACxB,MAAM9B,MAAM,GAAG,MAAAC,OAAA,CAAAC,OAAA,GAAAC,IAAA,OAAA5C,uBAAA,CAAAC,OAAA,CAAa,QAAQ,GAAC;IACrC,MAAMuE,OAAO,GAAG,MAAM/B,MAAM,CAACyC,WAAW,CAACzD,OAAO,EAAEC,OAAO,CAAC;IAC1D,IAAI,CAAC8C,OAAO,EAAE;MACZ,OAAO,IAAI;IACb;IACA,OAAOC,IAAI,CAACU,KAAK,CAACX,OAAO,CAAC;EAC5B,CAAC,MAAM;IACL,IAAI;MACF,MAAMlB,SAAS,GAAG,MAAM,IAAA8B,kBAAQ,EAACzD,SAAS,EAAE,MAAM,CAAC;MACnD,OAAO8C,IAAI,CAACU,KAAK,CAACtB,OAAO,CAACP,SAAS,CAAC+B,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,MAAM;MACN,OAAO,IAAI;IACb;EACF;AACF;AAEO,eAAeC,gBAAgBA,CAAA,EAAkB;EACtD,MAAMf,KAAK,GAAG,MAAM/B,WAAW,CAAC,CAAC;EAEjC,IAAI+B,KAAK,KAAK,UAAU,EAAE;IACxB,MAAM9B,MAAM,GAAG,MAAAC,OAAA,CAAAC,OAAA,GAAAC,IAAA,OAAA5C,uBAAA,CAAAC,OAAA,CAAa,QAAQ,GAAC;IACrC,MAAMwC,MAAM,CAACK,cAAc,CAACrB,OAAO,EAAEC,OAAO,CAAC;EAC/C,CAAC,MAAM;IACL,IAAI;MACF,MAAM,IAAA6D,gBAAM,EAAC5D,SAAS,CAAC;IACzB,CAAC,CAAC,MAAM;MACN;IAAA;EAEJ;AACF","ignoreList":[]}

package/dist/cjs/cli.js

@@ -4,15 +4,43 @@ var _commander = require("commander");
 var fs = _interopRequireWildcard(require("fs"));
 var path = _interopRequireWildcard(require("path"));
 var _login = require("./commands/login");
+var _logout = require("./commands/logout");
 var _init = require("./commands/init");
 var _validate = require("./commands/validate");
+var _serve = require("./commands/serve");
+var _embed = require("./commands/embed");
+var _conversationWizard = require("./commands/conversationWizard");
+var _instructions = require("./commands/instructions");
+var _deploy = require("./commands/deploy");
+var _getClientId = require("./commands/getClientId");
+var _whoami = require("./commands/whoami");
 function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function (e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, default: e }; if (null === e || "object" != typeof e && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (const t in e) "default" !== t && {}.hasOwnProperty.call(e, t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, t)) && (i.get || i.set) ? o(f, t, i) : f[t] = e[t]); return f; })(e, t); }
 // Read version from package.json at runtime (works from dist/cjs/ via ../../)
 const pkg = JSON.parse(fs.readFileSync(path.join(__dirname, '../../package.json'), 'utf8'));
 const program = new _commander.Command();
-program.name('web5').description('Developer CLI for the Web5 platform').version(pkg.version);
+program.name('web5').description('Developer CLI for the Web5 platform').version(pkg.version).option('--json', 'Output as machine-readable JSON (suppresses decorations)');
+
+// Propagate --json to child processes via environment variable so that
+// every command's action can call isJsonMode() without reading parent opts.
+program.hook('preAction', () => {
+  if (program.opts().json) {
+    process.env.WEB5_JSON_MODE = '1';
+  }
+});
+
+// ── Commands ──────────────────────────────────────────────────────────────
 program.addCommand(_login.loginCommand);
+program.addCommand(_logout.logoutCommand);
+program.addCommand(_whoami.whoamiCommand);
 program.addCommand(_init.initCommand);
 program.addCommand(_validate.validateCommand);
+program.addCommand(_deploy.deployCommand);
+program.addCommand(_serve.serveCommand);
+program.addCommand(_embed.embedCommand);
+program.addCommand(_getClientId.getClientIdCommand);
+
+// ── Wizards ───────────────────────────────────────────────────────────────
+program.addCommand(_instructions.instructionsCommand);
+program.addCommand(_conversationWizard.conversationsCommand);
 program.parseAsync(process.argv);
 //# sourceMappingURL=cli.js.map

package/dist/cjs/cli.js.map

@@ -1 +1 @@
-{"version":3,"names":["_commander","require","fs","_interopRequireWildcard","path","_login","_init","_validate","e","t","WeakMap","r","n","__esModule","o","i","f","__proto__","default","has","get","set","hasOwnProperty","call","Object","defineProperty","getOwnPropertyDescriptor","pkg","JSON","parse","readFileSync","join","__dirname","program","Command","name","description","version","addCommand","loginCommand","initCommand","validateCommand","parseAsync","process","argv"],"sources":["../../src/cli.ts"],"sourcesContent":["import { Command } from 'commander';\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { loginCommand } from './commands/login';\nimport { initCommand } from './commands/init';\nimport { validateCommand } from './commands/validate';\n\n// Read version from package.json at runtime (works from dist/cjs/ via ../../)\nconst pkg = JSON.parse(\n  fs.readFileSync(path.join(__dirname, '../../package.json'), 'utf8'),\n) as { version: string };\n\nconst program = new Command();\n\nprogram\n  .name('web5')\n  .description('Developer CLI for the Web5 platform')\n  .version(pkg.version);\n\nprogram.addCommand(loginCommand);\nprogram.addCommand(initCommand);\nprogram.addCommand(validateCommand);\n\nprogram.parseAsync(process.argv);\n"],"mappings":";;AAAA,IAAAA,UAAA,GAAAC,OAAA;AACA,IAAAC,EAAA,GAAAC,uBAAA,CAAAF,OAAA;AACA,IAAAG,IAAA,GAAAD,uBAAA,CAAAF,OAAA;AACA,IAAAI,MAAA,GAAAJ,OAAA;AACA,IAAAK,KAAA,GAAAL,OAAA;AACA,IAAAM,SAAA,GAAAN,OAAA;AAAsD,SAAAE,wBAAAK,CAAA,EAAAC,CAAA,6BAAAC,OAAA,MAAAC,CAAA,OAAAD,OAAA,IAAAE,CAAA,OAAAF,OAAA,YAAAP,uBAAA,YAAAA,CAAAK,CAAA,EAAAC,CAAA,SAAAA,CAAA,IAAAD,CAAA,IAAAA,CAAA,CAAAK,UAAA,SAAAL,CAAA,MAAAM,CAAA,EAAAC,CAAA,EAAAC,CAAA,KAAAC,SAAA,QAAAC,OAAA,EAAAV,CAAA,iBAAAA,CAAA,uBAAAA,CAAA,yBAAAA,CAAA,SAAAQ,CAAA,MAAAF,CAAA,GAAAL,CAAA,GAAAG,CAAA,GAAAD,CAAA,QAAAG,CAAA,CAAAK,GAAA,CAAAX,CAAA,UAAAM,CAAA,CAAAM,GAAA,CAAAZ,CAAA,GAAAM,CAAA,CAAAO,GAAA,CAAAb,CAAA,EAAAQ,CAAA,gBAAAP,CAAA,IAAAD,CAAA,gBAAAC,CAAA,OAAAa,cAAA,CAAAC,IAAA,CAAAf,CAAA,EAAAC,CAAA,OAAAM,CAAA,IAAAD,CAAA,GAAAU,MAAA,CAAAC,cAAA,KAAAD,MAAA,CAAAE,wBAAA,CAAAlB,CAAA,EAAAC,CAAA,OAAAM,CAAA,CAAAK,GAAA,IAAAL,CAAA,CAAAM,GAAA,IAAAP,CAAA,CAAAE,CAAA,EAAAP,CAAA,EAAAM,CAAA,IAAAC,CAAA,CAAAP,CAAA,IAAAD,CAAA,CAAAC,CAAA,WAAAO,CAAA,KAAAR,CAAA,EAAAC,CAAA;AAEtD;AACA,MAAMkB,GAAG,GAAGC,IAAI,CAACC,KAAK,CACpB3B,EAAE,CAAC4B,YAAY,CAAC1B,IAAI,CAAC2B,IAAI,CAACC,SAAS,EAAE,oBAAoB,CAAC,EAAE,MAAM,CACpE,CAAwB;AAExB,MAAMC,OAAO,GAAG,IAAIC,kBAAO,CAAC,CAAC;AAE7BD,OAAO,CACJE,IAAI,CAAC,MAAM,CAAC,CACZC,WAAW,CAAC,qCAAqC,CAAC,CAClDC,OAAO,CAACV,GAAG,CAACU,OAAO,CAAC;AAEvBJ,OAAO,CAACK,UAAU,CAACC,mBAAY,CAAC;AAChCN,OAAO,CAACK,UAAU,CAACE,iBAAW,CAAC;AAC/BP,OAAO,CAACK,UAAU,CAACG,yBAAe,CAAC;AAEnCR,OAAO,CAACS,UAAU,CAACC,OAAO,CAACC,IAAI,CAAC","ignoreList":[]}
+{"version":3,"names":["_commander","require","fs","_interopRequireWildcard","path","_login","_logout","_init","_validate","_serve","_embed","_conversationWizard","_instructions","_deploy","_getClientId","_whoami","e","t","WeakMap","r","n","__esModule","o","i","f","__proto__","default","has","get","set","hasOwnProperty","call","Object","defineProperty","getOwnPropertyDescriptor","pkg","JSON","parse","readFileSync","join","__dirname","program","Command","name","description","version","option","hook","opts","json","process","env","WEB5_JSON_MODE","addCommand","loginCommand","logoutCommand","whoamiCommand","initCommand","validateCommand","deployCommand","serveCommand","embedCommand","getClientIdCommand","instructionsCommand","conversationsCommand","parseAsync","argv"],"sources":["../../src/cli.ts"],"sourcesContent":["import { Command } from 'commander';\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { loginCommand } from './commands/login';\nimport { logoutCommand } from './commands/logout';\nimport { initCommand } from './commands/init';\nimport { validateCommand } from './commands/validate';\nimport { serveCommand } from './commands/serve';\nimport { embedCommand } from './commands/embed';\nimport { conversationsCommand } from './commands/conversationWizard';\nimport { instructionsCommand } from './commands/instructions';\nimport { deployCommand } from './commands/deploy';\nimport { getClientIdCommand } from './commands/getClientId';\nimport { whoamiCommand } from './commands/whoami';\n\n// Read version from package.json at runtime (works from dist/cjs/ via ../../)\nconst pkg = JSON.parse(\n  fs.readFileSync(path.join(__dirname, '../../package.json'), 'utf8'),\n) as { version: string };\n\nconst program = new Command();\n\nprogram\n  .name('web5')\n  .description('Developer CLI for the Web5 platform')\n  .version(pkg.version)\n  .option('--json', 'Output as machine-readable JSON (suppresses decorations)');\n\n// Propagate --json to child processes via environment variable so that\n// every command's action can call isJsonMode() without reading parent opts.\nprogram.hook('preAction', () => {\n  if (program.opts().json) {\n    process.env.WEB5_JSON_MODE = '1';\n  }\n});\n\n// ── Commands ──────────────────────────────────────────────────────────────\nprogram.addCommand(loginCommand);\nprogram.addCommand(logoutCommand);\nprogram.addCommand(whoamiCommand);\nprogram.addCommand(initCommand);\nprogram.addCommand(validateCommand);\nprogram.addCommand(deployCommand);\nprogram.addCommand(serveCommand);\nprogram.addCommand(embedCommand);\nprogram.addCommand(getClientIdCommand);\n\n// ── Wizards ───────────────────────────────────────────────────────────────\nprogram.addCommand(instructionsCommand);\nprogram.addCommand(conversationsCommand);\n\nprogram.parseAsync(process.argv);\n"],"mappings":";;AAAA,IAAAA,UAAA,GAAAC,OAAA;AACA,IAAAC,EAAA,GAAAC,uBAAA,CAAAF,OAAA;AACA,IAAAG,IAAA,GAAAD,uBAAA,CAAAF,OAAA;AACA,IAAAI,MAAA,GAAAJ,OAAA;AACA,IAAAK,OAAA,GAAAL,OAAA;AACA,IAAAM,KAAA,GAAAN,OAAA;AACA,IAAAO,SAAA,GAAAP,OAAA;AACA,IAAAQ,MAAA,GAAAR,OAAA;AACA,IAAAS,MAAA,GAAAT,OAAA;AACA,IAAAU,mBAAA,GAAAV,OAAA;AACA,IAAAW,aAAA,GAAAX,OAAA;AACA,IAAAY,OAAA,GAAAZ,OAAA;AACA,IAAAa,YAAA,GAAAb,OAAA;AACA,IAAAc,OAAA,GAAAd,OAAA;AAAkD,SAAAE,wBAAAa,CAAA,EAAAC,CAAA,6BAAAC,OAAA,MAAAC,CAAA,OAAAD,OAAA,IAAAE,CAAA,OAAAF,OAAA,YAAAf,uBAAA,YAAAA,CAAAa,CAAA,EAAAC,CAAA,SAAAA,CAAA,IAAAD,CAAA,IAAAA,CAAA,CAAAK,UAAA,SAAAL,CAAA,MAAAM,CAAA,EAAAC,CAAA,EAAAC,CAAA,KAAAC,SAAA,QAAAC,OAAA,EAAAV,CAAA,iBAAAA,CAAA,uBAAAA,CAAA,yBAAAA,CAAA,SAAAQ,CAAA,MAAAF,CAAA,GAAAL,CAAA,GAAAG,CAAA,GAAAD,CAAA,QAAAG,CAAA,CAAAK,GAAA,CAAAX,CAAA,UAAAM,CAAA,CAAAM,GAAA,CAAAZ,CAAA,GAAAM,CAAA,CAAAO,GAAA,CAAAb,CAAA,EAAAQ,CAAA,gBAAAP,CAAA,IAAAD,CAAA,gBAAAC,CAAA,OAAAa,cAAA,CAAAC,IAAA,CAAAf,CAAA,EAAAC,CAAA,OAAAM,CAAA,IAAAD,CAAA,GAAAU,MAAA,CAAAC,cAAA,KAAAD,MAAA,CAAAE,wBAAA,CAAAlB,CAAA,EAAAC,CAAA,OAAAM,CAAA,CAAAK,GAAA,IAAAL,CAAA,CAAAM,GAAA,IAAAP,CAAA,CAAAE,CAAA,EAAAP,CAAA,EAAAM,CAAA,IAAAC,CAAA,CAAAP,CAAA,IAAAD,CAAA,CAAAC,CAAA,WAAAO,CAAA,KAAAR,CAAA,EAAAC,CAAA;AAElD;AACA,MAAMkB,GAAG,GAAGC,IAAI,CAACC,KAAK,CACpBnC,EAAE,CAACoC,YAAY,CAAClC,IAAI,CAACmC,IAAI,CAACC,SAAS,EAAE,oBAAoB,CAAC,EAAE,MAAM,CACpE,CAAwB;AAExB,MAAMC,OAAO,GAAG,IAAIC,kBAAO,CAAC,CAAC;AAE7BD,OAAO,CACJE,IAAI,CAAC,MAAM,CAAC,CACZC,WAAW,CAAC,qCAAqC,CAAC,CAClDC,OAAO,CAACV,GAAG,CAACU,OAAO,CAAC,CACpBC,MAAM,CAAC,QAAQ,EAAE,0DAA0D,CAAC;;AAE/E;AACA;AACAL,OAAO,CAACM,IAAI,CAAC,WAAW,EAAE,MAAM;EAC9B,IAAIN,OAAO,CAACO,IAAI,CAAC,CAAC,CAACC,IAAI,EAAE;IACvBC,OAAO,CAACC,GAAG,CAACC,cAAc,GAAG,GAAG;EAClC;AACF,CAAC,CAAC;;AAEF;AACAX,OAAO,CAACY,UAAU,CAACC,mBAAY,CAAC;AAChCb,OAAO,CAACY,UAAU,CAACE,qBAAa,CAAC;AACjCd,OAAO,CAACY,UAAU,CAACG,qBAAa,CAAC;AACjCf,OAAO,CAACY,UAAU,CAACI,iBAAW,CAAC;AAC/BhB,OAAO,CAACY,UAAU,CAACK,yBAAe,CAAC;AACnCjB,OAAO,CAACY,UAAU,CAACM,qBAAa,CAAC;AACjClB,OAAO,CAACY,UAAU,CAACO,mBAAY,CAAC;AAChCnB,OAAO,CAACY,UAAU,CAACQ,mBAAY,CAAC;AAChCpB,OAAO,CAACY,UAAU,CAACS,+BAAkB,CAAC;;AAEtC;AACArB,OAAO,CAACY,UAAU,CAACU,iCAAmB,CAAC;AACvCtB,OAAO,CAACY,UAAU,CAACW,wCAAoB,CAAC;AAExCvB,OAAO,CAACwB,UAAU,CAACf,OAAO,CAACgB,IAAI,CAAC","ignoreList":[]}

package/dist/cjs/commands/bundle.js

@@ -0,0 +1,95 @@
+"use strict";
+
+exports.__esModule = true;
+exports.bundleCommand = void 0;
+exports.runBundle = runBundle;
+var _commander = require("commander");
+var _child_process = require("child_process");
+var _fs = require("fs");
+var path = _interopRequireWildcard(require("path"));
+var _project = require("../utils/project");
+var _print = require("../utils/print");
+function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function (e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, default: e }; if (null === e || "object" != typeof e && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (const t in e) "default" !== t && {}.hasOwnProperty.call(e, t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, t)) && (i.get || i.set) ? o(f, t, i) : f[t] = e[t]); return f; })(e, t); }
+async function runBundle(root, opts = {}) {
+  const {
+    watch,
+    minify = true,
+    outDir,
+    sourcemap
+  } = opts;
+  const viteBin = path.join(root, 'node_modules', '.bin', 'vite');
+  if (!(0, _fs.existsSync)(viteBin)) {
+    (0, _print.error)('vite not found. Run `npm install` in your project first.');
+    process.exit(1);
+  }
+  const args = ['build', '--config', 'src/vite.cdn.config.ts'];
+  if (!minify) args.push('--minify', 'false');
+  if (outDir) args.push('--outDir', outDir);
+  if (sourcemap) args.push('--sourcemap');
+  if (watch) {
+    // Non-blocking watch mode — let vite output flow through
+    args.push('--watch');
+    (0, _print.success)('Starting bundle watch mode (press Ctrl+C to stop)...');
+    const child = (0, _child_process.spawn)(`"${viteBin}"`, args, {
+      cwd: root,
+      shell: true,
+      stdio: 'inherit'
+    });
+    child.on('error', err_ => {
+      (0, _print.error)(err_.message);
+      process.exit(1);
+    });
+    await new Promise((_, reject) => {
+      child.on('exit', code => {
+        if (code !== 0) reject(new Error(`vite exited with code ${code}`));
+      });
+    });
+    return;
+  }
+  const sp = (0, _print.isJsonMode)() ? null : (0, _print.spinner)('Bundling actions and components...');
+  try {
+    (0, _child_process.execSync)(`"${viteBin}" ${args.join(' ')}`, {
+      cwd: root,
+      stdio: 'pipe'
+    });
+    sp == null || sp.stop();
+    const resolvedOutDir = outDir ? path.resolve(outDir) : path.join(root, 'dist', 'cdn');
+    if ((0, _print.isJsonMode)()) {
+      const files = (0, _fs.existsSync)(resolvedOutDir) ? (0, _fs.readdirSync)(resolvedOutDir).map(f => {
+        const full = path.join(resolvedOutDir, f);
+        return {
+          file: f,
+          size: (0, _fs.statSync)(full).size
+        };
+      }) : [];
+      console.log(JSON.stringify({
+        ok: true,
+        outDir: resolvedOutDir,
+        files
+      }));
+    } else {
+      sp == null || sp.stop();
+      (0, _print.success)('Bundle complete');
+    }
+  } catch (err_) {
+    var _stderr;
+    sp == null || sp.stop();
+    const msg = err_ instanceof Error ? ((_stderr = err_.stderr) == null ? void 0 : _stderr.toString().trim()) || err_.message : String(err_);
+    (0, _print.error)(msg);
+    process.exit(1);
+  }
+}
+const bundleCommand = exports.bundleCommand = new _commander.Command('bundle').description('Bundle actions and components into dist/cdn/').option('--watch', 'Re-bundle on source file changes').option('--no-minify', 'Disable minification (useful for debugging)').option('--outdir <path>', 'Override output directory (default: dist/cdn/)').option('--sourcemap', 'Generate source maps').action(async opts => {
+  const root = (0, _project.findProjectRoot)(process.cwd());
+  if (!root) {
+    (0, _print.error)('No web5.config.json found. Run this command from within a Web5 project.');
+    process.exit(1);
+  }
+  await runBundle(root, {
+    watch: opts.watch,
+    minify: opts.minify,
+    outDir: opts.outdir,
+    sourcemap: opts.sourcemap
+  });
+});
+//# sourceMappingURL=bundle.js.map

package/dist/cjs/commands/bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_commander","require","_child_process","_fs","path","_interopRequireWildcard","_project","_print","e","t","WeakMap","r","n","__esModule","o","i","f","__proto__","default","has","get","set","hasOwnProperty","call","Object","defineProperty","getOwnPropertyDescriptor","runBundle","root","opts","watch","minify","outDir","sourcemap","viteBin","join","existsSync","error","process","exit","args","push","success","child","spawn","cwd","shell","stdio","on","err_","message","Promise","_","reject","code","Error","sp","isJsonMode","spinner","execSync","stop","resolvedOutDir","resolve","files","readdirSync","map","full","file","size","statSync","console","log","JSON","stringify","ok","_stderr","msg","stderr","toString","trim","String","bundleCommand","exports","Command","description","option","action","findProjectRoot","outdir"],"sources":["../../../src/commands/bundle.ts"],"sourcesContent":["import { Command } from 'commander';\nimport { execSync, spawn } from 'child_process';\nimport { existsSync, readdirSync, statSync } from 'fs';\nimport * as path from 'path';\nimport { findProjectRoot } from '../utils/project';\nimport { success, error, spinner, isJsonMode } from '../utils/print';\n\nexport interface BundleOptions {\n  watch?: boolean;\n  minify?: boolean;\n  outDir?: string;\n  sourcemap?: boolean;\n}\n\nexport async function runBundle(root: string, opts: BundleOptions = {}): Promise<void> {\n  const { watch, minify = true, outDir, sourcemap } = opts;\n\n  const viteBin = path.join(root, 'node_modules', '.bin', 'vite');\n  if (!existsSync(viteBin)) {\n    error('vite not found. Run `npm install` in your project first.');\n    process.exit(1);\n  }\n\n  const args = ['build', '--config', 'src/vite.cdn.config.ts'];\n  if (!minify) args.push('--minify', 'false');\n  if (outDir) args.push('--outDir', outDir);\n  if (sourcemap) args.push('--sourcemap');\n\n  if (watch) {\n    // Non-blocking watch mode — let vite output flow through\n    args.push('--watch');\n    success('Starting bundle watch mode (press Ctrl+C to stop)...');\n    const child = spawn(`\"${viteBin}\"`, args, {\n      cwd: root,\n      shell: true,\n      stdio: 'inherit',\n    });\n    child.on('error', (err_) => {\n      error(err_.message);\n      process.exit(1);\n    });\n    await new Promise<void>((_, reject) => {\n      child.on('exit', (code) => {\n        if (code !== 0) reject(new Error(`vite exited with code ${code}`));\n      });\n    });\n    return;\n  }\n\n  const sp = isJsonMode() ? null : spinner('Bundling actions and components...');\n  try {\n    execSync(`\"${viteBin}\" ${args.join(' ')}`, { cwd: root, stdio: 'pipe' });\n    sp?.stop();\n\n    const resolvedOutDir = outDir\n      ? path.resolve(outDir)\n      : path.join(root, 'dist', 'cdn');\n\n    if (isJsonMode()) {\n      const files = existsSync(resolvedOutDir)\n        ? readdirSync(resolvedOutDir).map((f) => {\n            const full = path.join(resolvedOutDir, f);\n            return { file: f, size: statSync(full).size };\n          })\n        : [];\n      console.log(JSON.stringify({ ok: true, outDir: resolvedOutDir, files }));\n    } else {\n      sp?.stop();\n      success('Bundle complete');\n    }\n  } catch (err_) {\n    sp?.stop();\n    const msg =\n      err_ instanceof Error\n        ? (err_ as Error & { stderr?: Buffer }).stderr?.toString().trim() ||\n          err_.message\n        : String(err_);\n    error(msg);\n    process.exit(1);\n  }\n}\n\nexport const bundleCommand = new Command('bundle')\n  .description('Bundle actions and components into dist/cdn/')\n  .option('--watch', 'Re-bundle on source file changes')\n  .option('--no-minify', 'Disable minification (useful for debugging)')\n  .option('--outdir <path>', 'Override output directory (default: dist/cdn/)')\n  .option('--sourcemap', 'Generate source maps')\n  .action(async (opts: {\n    watch?: boolean;\n    minify: boolean;\n    outdir?: string;\n    sourcemap?: boolean;\n  }) => {\n    const root = findProjectRoot(process.cwd());\n    if (!root) {\n      error(\n        'No web5.config.json found. Run this command from within a Web5 project.',\n      );\n      process.exit(1);\n    }\n    await runBundle(root, {\n      watch: opts.watch,\n      minify: opts.minify,\n      outDir: opts.outdir,\n      sourcemap: opts.sourcemap,\n    });\n  });\n"],"mappings":";;;;;AAAA,IAAAA,UAAA,GAAAC,OAAA;AACA,IAAAC,cAAA,GAAAD,OAAA;AACA,IAAAE,GAAA,GAAAF,OAAA;AACA,IAAAG,IAAA,GAAAC,uBAAA,CAAAJ,OAAA;AACA,IAAAK,QAAA,GAAAL,OAAA;AACA,IAAAM,MAAA,GAAAN,OAAA;AAAqE,SAAAI,wBAAAG,CAAA,EAAAC,CAAA,6BAAAC,OAAA,MAAAC,CAAA,OAAAD,OAAA,IAAAE,CAAA,OAAAF,OAAA,YAAAL,uBAAA,YAAAA,CAAAG,CAAA,EAAAC,CAAA,SAAAA,CAAA,IAAAD,CAAA,IAAAA,CAAA,CAAAK,UAAA,SAAAL,CAAA,MAAAM,CAAA,EAAAC,CAAA,EAAAC,CAAA,KAAAC,SAAA,QAAAC,OAAA,EAAAV,CAAA,iBAAAA,CAAA,uBAAAA,CAAA,yBAAAA,CAAA,SAAAQ,CAAA,MAAAF,CAAA,GAAAL,CAAA,GAAAG,CAAA,GAAAD,CAAA,QAAAG,CAAA,CAAAK,GAAA,CAAAX,CAAA,UAAAM,CAAA,CAAAM,GAAA,CAAAZ,CAAA,GAAAM,CAAA,CAAAO,GAAA,CAAAb,CAAA,EAAAQ,CAAA,gBAAAP,CAAA,IAAAD,CAAA,gBAAAC,CAAA,OAAAa,cAAA,CAAAC,IAAA,CAAAf,CAAA,EAAAC,CAAA,OAAAM,CAAA,IAAAD,CAAA,GAAAU,MAAA,CAAAC,cAAA,KAAAD,MAAA,CAAAE,wBAAA,CAAAlB,CAAA,EAAAC,CAAA,OAAAM,CAAA,CAAAK,GAAA,IAAAL,CAAA,CAAAM,GAAA,IAAAP,CAAA,CAAAE,CAAA,EAAAP,CAAA,EAAAM,CAAA,IAAAC,CAAA,CAAAP,CAAA,IAAAD,CAAA,CAAAC,CAAA,WAAAO,CAAA,KAAAR,CAAA,EAAAC,CAAA;AAS9D,eAAekB,SAASA,CAACC,IAAY,EAAEC,IAAmB,GAAG,CAAC,CAAC,EAAiB;EACrF,MAAM;IAAEC,KAAK;IAAEC,MAAM,GAAG,IAAI;IAAEC,MAAM;IAAEC;EAAU,CAAC,GAAGJ,IAAI;EAExD,MAAMK,OAAO,GAAG9B,IAAI,CAAC+B,IAAI,CAACP,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC;EAC/D,IAAI,CAAC,IAAAQ,cAAU,EAACF,OAAO,CAAC,EAAE;IACxB,IAAAG,YAAK,EAAC,0DAA0D,CAAC;IACjEC,OAAO,CAACC,IAAI,CAAC,CAAC,CAAC;EACjB;EAEA,MAAMC,IAAI,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,wBAAwB,CAAC;EAC5D,IAAI,CAACT,MAAM,EAAES,IAAI,CAACC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC;EAC3C,IAAIT,MAAM,EAAEQ,IAAI,CAACC,IAAI,CAAC,UAAU,EAAET,MAAM,CAAC;EACzC,IAAIC,SAAS,EAAEO,IAAI,CAACC,IAAI,CAAC,aAAa,CAAC;EAEvC,IAAIX,KAAK,EAAE;IACT;IACAU,IAAI,CAACC,IAAI,CAAC,SAAS,CAAC;IACpB,IAAAC,cAAO,EAAC,sDAAsD,CAAC;IAC/D,MAAMC,KAAK,GAAG,IAAAC,oBAAK,EAAC,IAAIV,OAAO,GAAG,EAAEM,IAAI,EAAE;MACxCK,GAAG,EAAEjB,IAAI;MACTkB,KAAK,EAAE,IAAI;MACXC,KAAK,EAAE;IACT,CAAC,CAAC;IACFJ,KAAK,CAACK,EAAE,CAAC,OAAO,EAAGC,IAAI,IAAK;MAC1B,IAAAZ,YAAK,EAACY,IAAI,CAACC,OAAO,CAAC;MACnBZ,OAAO,CAACC,IAAI,CAAC,CAAC,CAAC;IACjB,CAAC,CAAC;IACF,MAAM,IAAIY,OAAO,CAAO,CAACC,CAAC,EAAEC,MAAM,KAAK;MACrCV,KAAK,CAACK,EAAE,CAAC,MAAM,EAAGM,IAAI,IAAK;QACzB,IAAIA,IAAI,KAAK,CAAC,EAAED,MAAM,CAAC,IAAIE,KAAK,CAAC,yBAAyBD,IAAI,EAAE,CAAC,CAAC;MACpE,CAAC,CAAC;IACJ,CAAC,CAAC;IACF;EACF;EAEA,MAAME,EAAE,GAAG,IAAAC,iBAAU,EAAC,CAAC,GAAG,IAAI,GAAG,IAAAC,cAAO,EAAC,oCAAoC,CAAC;EAC9E,IAAI;IACF,IAAAC,uBAAQ,EAAC,IAAIzB,OAAO,KAAKM,IAAI,CAACL,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;MAAEU,GAAG,EAAEjB,IAAI;MAAEmB,KAAK,EAAE;IAAO,CAAC,CAAC;IACxES,EAAE,YAAFA,EAAE,CAAEI,IAAI,CAAC,CAAC;IAEV,MAAMC,cAAc,GAAG7B,MAAM,GACzB5B,IAAI,CAAC0D,OAAO,CAAC9B,MAAM,CAAC,GACpB5B,IAAI,CAAC+B,IAAI,CAACP,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC;IAElC,IAAI,IAAA6B,iBAAU,EAAC,CAAC,EAAE;MAChB,MAAMM,KAAK,GAAG,IAAA3B,cAAU,EAACyB,cAAc,CAAC,GACpC,IAAAG,eAAW,EAACH,cAAc,CAAC,CAACI,GAAG,CAAEjD,CAAC,IAAK;QACrC,MAAMkD,IAAI,GAAG9D,IAAI,CAAC+B,IAAI,CAAC0B,cAAc,EAAE7C,CAAC,CAAC;QACzC,OAAO;UAAEmD,IAAI,EAAEnD,CAAC;UAAEoD,IAAI,EAAE,IAAAC,YAAQ,EAACH,IAAI,CAAC,CAACE;QAAK,CAAC;MAC/C,CAAC,CAAC,GACF,EAAE;MACNE,OAAO,CAACC,GAAG,CAACC,IAAI,CAACC,SAAS,CAAC;QAAEC,EAAE,EAAE,IAAI;QAAE1C,MAAM,EAAE6B,cAAc;QAAEE;MAAM,CAAC,CAAC,CAAC;IAC1E,CAAC,MAAM;MACLP,EAAE,YAAFA,EAAE,CAAEI,IAAI,CAAC,CAAC;MACV,IAAAlB,cAAO,EAAC,iBAAiB,CAAC;IAC5B;EACF,CAAC,CAAC,OAAOO,IAAI,EAAE;IAAA,IAAA0B,OAAA;IACbnB,EAAE,YAAFA,EAAE,CAAEI,IAAI,CAAC,CAAC;IACV,MAAMgB,GAAG,GACP3B,IAAI,YAAYM,KAAK,GACjB,EAAAoB,OAAA,GAAC1B,IAAI,CAAiC4B,MAAM,qBAA5CF,OAAA,CAA8CG,QAAQ,CAAC,CAAC,CAACC,IAAI,CAAC,CAAC,KAC/D9B,IAAI,CAACC,OAAO,GACZ8B,MAAM,CAAC/B,IAAI,CAAC;IAClB,IAAAZ,YAAK,EAACuC,GAAG,CAAC;IACVtC,OAAO,CAACC,IAAI,CAAC,CAAC,CAAC;EACjB;AACF;AAEO,MAAM0C,aAAa,GAAAC,OAAA,CAAAD,aAAA,GAAG,IAAIE,kBAAO,CAAC,QAAQ,CAAC,CAC/CC,WAAW,CAAC,8CAA8C,CAAC,CAC3DC,MAAM,CAAC,SAAS,EAAE,kCAAkC,CAAC,CACrDA,MAAM,CAAC,aAAa,EAAE,6CAA6C,CAAC,CACpEA,MAAM,CAAC,iBAAiB,EAAE,gDAAgD,CAAC,CAC3EA,MAAM,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAC7CC,MAAM,CAAC,MAAOzD,IAKd,IAAK;EACJ,MAAMD,IAAI,GAAG,IAAA2D,wBAAe,EAACjD,OAAO,CAACO,GAAG,CAAC,CAAC,CAAC;EAC3C,IAAI,CAACjB,IAAI,EAAE;IACT,IAAAS,YAAK,EACH,yEACF,CAAC;IACDC,OAAO,CAACC,IAAI,CAAC,CAAC,CAAC;EACjB;EACA,MAAMZ,SAAS,CAACC,IAAI,EAAE;IACpBE,KAAK,EAAED,IAAI,CAACC,KAAK;IACjBC,MAAM,EAAEF,IAAI,CAACE,MAAM;IACnBC,MAAM,EAAEH,IAAI,CAAC2D,MAAM;IACnBvD,SAAS,EAAEJ,IAAI,CAACI;EAClB,CAAC,CAAC;AACJ,CAAC,CAAC","ignoreList":[]}