@xanots/sdk 0.0.4 → 0.0.6

package/dist/{login-command-QM5SBBI2.js → login-command-LCOOOPO2.js}

@@ -1,10 +1,14 @@
 import {
+  loopbackRedirectUri,
   openBrowser,
   startCallbackServer
-} from "./chunk-VTIL47DT.js";
+} from "./chunk-W5NOKYEG.js";
+import {
+  promptLine
+} from "./chunk-4PTSTDIG.js";
 import {
   envMetaCredentialVarsSet
-} from "./chunk-C56BC2FY.js";
+} from "./chunk-SG4UBJ47.js";
 import {
   CALLBACK_PATH,
   DEFAULT_PORT,
@@ -19,7 +23,10 @@ import {
   resolveAuthHost,
   resolveScope,
   writeCredential
-} from "./chunk-7REDODS2.js";
+} from "./chunk-LLWK6H77.js";
+import {
+  UsageError
+} from "./chunk-JQLR64UC.js";
 import "./chunk-GNPVYOPB.js";
 import {
   blank,
@@ -30,23 +37,81 @@ import {
   success,
   warn
 } from "./chunk-EZG76F7R.js";
+import "./chunk-OKNSR7MT.js";
 
 // src/emit/login-command.ts
 import * as client from "openid-client";
+
+// src/auth/paste.ts
+var EXAMPLE = "Paste either the full URL from your browser's address bar (http://127.0.0.1:\u2026/oauth/callback?code=\u2026) or just the code=\u2026 value from it.";
+function normalizePastedCallback(input, ctx) {
+  const trimmed = input.trim();
+  if (trimmed === "") throw new Error(`Nothing was pasted. ${EXAMPLE}`);
+  const params = extractParams(trimmed, ctx);
+  const error = params.get("error");
+  if (error) {
+    const description = params.get("error_description");
+    const authError = new Error(
+      `Authorization server returned error: ${error}${description ? ` (${description})` : ""}`
+    );
+    authError.error = error;
+    throw authError;
+  }
+  if (!params.get("code")) {
+    throw new Error(`That paste carries no \`code\` value. ${EXAMPLE}`);
+  }
+  if (!params.get("iss")) params.set("iss", ctx.issuer);
+  return `${ctx.redirectUri}?${params.toString()}`;
+}
+function extractParams(trimmed, ctx) {
+  const url = parseUrl(trimmed);
+  if (url) return url.searchParams;
+  const queryStart = trimmed.indexOf("?");
+  if (queryStart !== -1 && isRecognizedQuery(trimmed.slice(queryStart + 1))) {
+    return new URLSearchParams(trimmed.slice(queryStart + 1));
+  }
+  if (isRecognizedQuery(trimmed)) return new URLSearchParams(trimmed);
+  return new URLSearchParams({ code: trimmed, state: ctx.state, iss: ctx.issuer });
+}
+function isRecognizedQuery(value) {
+  return /(^|&)(code|error)=/.test(value);
+}
+function parseUrl(value) {
+  try {
+    const url = new URL(value);
+    return url.protocol === "http:" || url.protocol === "https:" ? url : void 0;
+  } catch {
+    return void 0;
+  }
+}
+
+// src/emit/login-command.ts
 async function runLoginCommand(args) {
   const authHost = resolveAuthHost(args);
   const scope = resolveScope(args);
   const port = args.port ?? DEFAULT_PORT;
   assertHttpsOrigin(authHost, "--origin");
+  if (args.paste && port === 0) {
+    throw new UsageError(
+      "`--port 0` asks for an ephemeral port, which --paste cannot use: nothing is bound, so the port is only part of the redirect URL's identity. Drop --port to use the default.",
+      { helpFor: { command: "login" } }
+    );
+  }
   if (!args.force && reportAlreadySignedIn(resolveAuthFilePath(args, "write"))) return;
+  if (args.paste && process.stdin.isTTY !== true) {
+    throw new UsageError(
+      "`--paste` reads the authorization code back from you, so it needs a terminal. For automation, use the XANO_REFRESH_TOKEN / XANO_CLIENT_ID environment credential instead.",
+      { helpFor: { command: "login" } }
+    );
+  }
   step(`Signing in to ${hostLabel(authHost)}`);
   let record;
   try {
-    record = await attemptLogin({ authHost, scope, port });
+    record = await attemptLogin({ authHost, scope, port, paste: args.paste });
   } catch (err) {
     if (oauthErrorCode(err) !== "invalid_client") throw err;
     warn("The registered client was rejected \u2014 re-registering and retrying once.");
-    record = await attemptLogin({ authHost, scope, port });
+    record = await attemptLogin({ authHost, scope, port, paste: args.paste, retry: true });
   }
   const authFilePath = resolveAuthFilePath(args, "write");
   writeCredential(authFilePath, record);
@@ -98,36 +163,7 @@ function reportAlreadySignedIn(authFilePath) {
 async function attemptLogin(p) {
   const verifier = client.randomPKCECodeVerifier();
   const state = client.randomState();
-  let listener;
-  try {
-    listener = await startCallbackServer({ callbackPath: CALLBACK_PATH, expectedState: state, port: p.port });
-  } catch (err) {
-    const code = err.code;
-    if (code === "EADDRINUSE") {
-      throw new Error(`Loopback port ${p.port} is in use. Pass a free one with --port <n> and retry.`);
-    }
-    throw err;
-  }
-  const provider = new OpenIdProvider({ authHost: p.authHost, redirectUri: listener.redirectUri, scope: p.scope });
-  let authorizeUrl;
-  try {
-    authorizeUrl = await provider.buildAuthUrl({ verifier, state });
-  } catch (err) {
-    listener.close();
-    throw err;
-  }
-  detail("Opening your browser to authorize \u2014 waiting for you to finish\u2026");
-  detail("If it doesn't open, paste this URL into your browser:");
-  detail(authorizeUrl);
-  openBrowser(authorizeUrl);
-  let callbackUrl;
-  try {
-    ({ callbackUrl } = await listener.waitForCallback);
-  } catch (err) {
-    listener.close();
-    if (oauthErrorCode(err) === "invalid_client") await provider.reset();
-    throw err;
-  }
+  const { callbackUrl, provider } = p.paste ? await acquireByPaste({ ...p, verifier, state }) : await acquireByLoopback({ ...p, verifier, state });
   let tokens;
   try {
     tokens = await provider.exchange(callbackUrl, { verifier, state });
@@ -161,7 +197,74 @@ async function attemptLogin(p) {
     client_id: provider.clientId()
   };
 }
+var MAX_PASTE_ATTEMPTS = 3;
+async function acquireByLoopback(p) {
+  let listener;
+  try {
+    listener = await startCallbackServer({ callbackPath: CALLBACK_PATH, expectedState: p.state, port: p.port });
+  } catch (err) {
+    const code = err.code;
+    if (code === "EADDRINUSE") {
+      throw new Error(`Loopback port ${p.port} is in use. Pass a free one with --port <n> and retry.`);
+    }
+    throw err;
+  }
+  const provider = new OpenIdProvider({ authHost: p.authHost, redirectUri: listener.redirectUri, scope: p.scope });
+  let authorizeUrl;
+  try {
+    authorizeUrl = await provider.buildAuthUrl({ verifier: p.verifier, state: p.state });
+  } catch (err) {
+    listener.close();
+    throw err;
+  }
+  detail("Opening your browser to authorize \u2014 waiting for you to finish\u2026");
+  detail("If it doesn't open, paste this URL into your browser:");
+  detail(authorizeUrl);
+  openBrowser(authorizeUrl);
+  try {
+    const { callbackUrl } = await listener.waitForCallback;
+    return { callbackUrl, provider };
+  } catch (err) {
+    listener.close();
+    if (oauthErrorCode(err) === "invalid_client") await provider.reset();
+    throw err;
+  }
+}
+async function acquireByPaste(p) {
+  const redirectUri = loopbackRedirectUri(p.port, CALLBACK_PATH);
+  const provider = new OpenIdProvider({ authHost: p.authHost, redirectUri, scope: p.scope });
+  const authorizeUrl = await provider.buildAuthUrl({ verifier: p.verifier, state: p.state });
+  blank();
+  if (p.retry) detail("Starting over with a freshly registered client \u2014 this is a NEW link and a NEW code.");
+  detail("Open this URL in any browser and finish signing in:");
+  detail(authorizeUrl);
+  blank();
+  detail(
+    `Your browser will then fail to load ${redirectUri} \u2014 that is expected, nothing is listening here. The address bar is what you want.`
+  );
+  openBrowser(authorizeUrl);
+  for (let attempt = 0; ; attempt++) {
+    const pasted = await promptLine("Paste that URL (or just the code from it):", {
+      noTtyHint: "--paste has to read the code from you, so it needs a terminal. For automation, use the XANO_REFRESH_TOKEN / XANO_CLIENT_ID environment credential instead.",
+      helpFor: { command: "login" }
+    });
+    try {
+      const callbackUrl = normalizePastedCallback(pasted, {
+        redirectUri,
+        state: p.state,
+        issuer: provider.issuer()
+      });
+      return { callbackUrl, provider };
+    } catch (err) {
+      if (oauthErrorCode(err) === "invalid_client") await provider.reset();
+      const unreadable = oauthErrorCode(err) === void 0;
+      if (!unreadable || attempt + 1 >= MAX_PASTE_ATTEMPTS) throw err;
+      warn(`${err instanceof Error ? err.message : String(err)}`);
+      detail("The link above is still valid \u2014 try pasting again.");
+    }
+  }
+}
 export {
   runLoginCommand
 };
-//# sourceMappingURL=login-command-QM5SBBI2.js.map
+//# sourceMappingURL=login-command-LCOOOPO2.js.map

package/dist/{logout-command-THPASOHM.js → logout-command-J2AG5NKC.js}

@@ -5,7 +5,7 @@ import {
   readCredential,
   resolveAuthFilePath,
   resolveScope
-} from "./chunk-7REDODS2.js";
+} from "./chunk-LLWK6H77.js";
 import "./chunk-GNPVYOPB.js";
 import {
   detail,
@@ -65,4 +65,4 @@ async function runLogoutCommand(args) {
 export {
   runLogoutCommand
 };
-//# sourceMappingURL=logout-command-THPASOHM.js.map
+//# sourceMappingURL=logout-command-J2AG5NKC.js.map

package/dist/{marketplace-command-463DT7O7.js → marketplace-command-BCOAAN2I.js}

@@ -15,7 +15,7 @@ import {
   UsageError,
   indentBlock,
   missingArgument
-} from "./chunk-KGNJM4LN.js";
+} from "./chunk-JQLR64UC.js";
 import {
   blank,
   detail,
@@ -26,7 +26,7 @@ import {
   success,
   warn
 } from "./chunk-EZG76F7R.js";
-import "./chunk-YYSJAAJM.js";
+import "./chunk-OKNSR7MT.js";
 
 // src/emit/marketplace-catalogue.ts
 var DEFAULT_BASE_URL = "https://xare-rvr8-mnnt.dev.xano.io";
@@ -362,4 +362,4 @@ export {
   runMarketplaceListCommand,
   runMarketplaceSearchCommand
 };
-//# sourceMappingURL=marketplace-command-463DT7O7.js.map
+//# sourceMappingURL=marketplace-command-BCOAAN2I.js.map

package/dist/{meta-client-OW5WKWW7.js → meta-client-57ZWVHST.js}

@@ -1,6 +1,6 @@
 import {
   importWorkspaceArchive
-} from "./chunk-5WGEURVI.js";
+} from "./chunk-6AAT2AYQ.js";
 import {
   createEphemeral,
   deleteEphemeral,
@@ -167,4 +167,4 @@ ${text}`);
 export {
   MetaClient
 };
-//# sourceMappingURL=meta-client-OW5WKWW7.js.map
+//# sourceMappingURL=meta-client-57ZWVHST.js.map

package/dist/node.js

@@ -5,7 +5,7 @@ import {
 import {
   TEST_EXPECT_TYPES,
   expect
-} from "./chunk-PXXLBXOP.js";
+} from "./chunk-JRGDLAEA.js";
 import {
   addon,
   agent,
@@ -17,7 +17,7 @@ import {
   task,
   tool,
   workflowTest
-} from "./chunk-FN4OQT2J.js";
+} from "./chunk-CU5VOSTW.js";
 import {
   actionCall,
   actionPackageCall,
@@ -100,7 +100,7 @@ import {
   workflowTestCall,
   workspaceConfig,
   workspaceTrigger
-} from "./chunk-CYJ7R3AD.js";
+} from "./chunk-GC7ZQHW7.js";
 import {
   exportBundleJson,
   loadDefault,
@@ -108,19 +108,19 @@ import {
   run,
   writeArtifact,
   writeBundle
-} from "./chunk-DUC3PXDG.js";
-import "./chunk-KGNJM4LN.js";
+} from "./chunk-SOCYCBYG.js";
+import "./chunk-JQLR64UC.js";
 import {
   readLockFile,
   writeLockFile
-} from "./chunk-MFIHIS6B.js";
+} from "./chunk-OLQLJY5T.js";
 import "./chunk-GNPVYOPB.js";
 import "./chunk-EZG76F7R.js";
 import {
   Xano,
   workspace
-} from "./chunk-BPEEGJJA.js";
-import "./chunk-YYSJAAJM.js";
+} from "./chunk-3FQD3QME.js";
+import "./chunk-OKNSR7MT.js";
 import {
   LAMBDA_BINDINGS,
   LAMBDA_CODE_FILTERS,
@@ -167,7 +167,7 @@ import {
   toSearchParams,
   toolset,
   withFilters
-} from "./chunk-YUPQOLFX.js";
+} from "./chunk-CQBJNFDK.js";
 import "./chunk-WHOJWOSV.js";
 import {
   annotate,
@@ -176,7 +176,7 @@ import {
 import {
   resetLockOverrides,
   seedLockOverrides
-} from "./chunk-YUBJLB6G.js";
+} from "./chunk-EFH4NFPY.js";
 
 // src/values/lambda-file.ts
 import { readFileSync } from "fs";

package/dist/{profile-command-EUWPVWED.js → profile-command-ZPC2DPFV.js}

@@ -1,7 +1,7 @@
 import {
   getAccessToken
-} from "./chunk-C56BC2FY.js";
-import "./chunk-7REDODS2.js";
+} from "./chunk-SG4UBJ47.js";
+import "./chunk-LLWK6H77.js";
 import {
   isMachineOutput,
   writeJson
@@ -74,4 +74,4 @@ export {
   fetchProfile,
   runProfileCommand
 };
-//# sourceMappingURL=profile-command-EUWPVWED.js.map
+//# sourceMappingURL=profile-command-ZPC2DPFV.js.map