@youkno/edge-cli 1.21.25 → 1.21.26

package/dist/commands/wallet.js

@@ -0,0 +1,138 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerWallet = registerWallet;
+const crypto = __importStar(require("crypto"));
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const GOOGLE_TOKEN_URL = "https://oauth2.googleapis.com/token";
+const GOOGLE_WALLET_SCOPE = "https://www.googleapis.com/auth/wallet_object.issuer";
+const GOOGLE_ISSUER_API = "https://walletobjects.googleapis.com/walletobjects/v1/issuer";
+function signJwt(payload, privateKey) {
+    const header = Buffer.from(JSON.stringify({ alg: "RS256", typ: "JWT" })).toString("base64url");
+    const body = Buffer.from(JSON.stringify(payload)).toString("base64url");
+    const signature = crypto.sign("sha256", Buffer.from(`${header}.${body}`), privateKey).toString("base64url");
+    return `${header}.${body}.${signature}`;
+}
+async function getAccessToken(serviceAccountJson) {
+    const sa = JSON.parse(serviceAccountJson);
+    const now = Math.floor(Date.now() / 1000);
+    const assertion = signJwt({
+        iss: sa.client_email,
+        scope: GOOGLE_WALLET_SCOPE,
+        aud: GOOGLE_TOKEN_URL,
+        iat: now,
+        exp: now + 3600,
+    }, sa.private_key);
+    const res = await fetch(GOOGLE_TOKEN_URL, {
+        method: "POST",
+        headers: { "Content-Type": "application/x-www-form-urlencoded" },
+        body: `grant_type=urn:ietf:params:oauth:grant-type:jwt-bearer&assertion=${assertion}`,
+    });
+    if (!res.ok) {
+        const text = await res.text();
+        throw new Error(`Failed to get access token: ${res.status} ${text}`);
+    }
+    const data = (await res.json());
+    return data.access_token;
+}
+async function getIssuer(token, issuerId) {
+    const res = await fetch(`${GOOGLE_ISSUER_API}/${issuerId}`, {
+        headers: { Authorization: `Bearer ${token}` },
+    });
+    if (!res.ok) {
+        const text = await res.text();
+        throw new Error(`Failed to get issuer: ${res.status} ${text}`);
+    }
+    return (await res.json());
+}
+async function updateIssuer(token, issuer, callbackUrl) {
+    const body = {
+        ...issuer,
+        callbackOptions: { url: callbackUrl },
+    };
+    const res = await fetch(`${GOOGLE_ISSUER_API}/${issuer.issuerId}`, {
+        method: "PUT",
+        headers: {
+            Authorization: `Bearer ${token}`,
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify(body),
+    });
+    if (!res.ok) {
+        const text = await res.text();
+        throw new Error(`Failed to update issuer: ${res.status} ${text}`);
+    }
+    return (await res.json());
+}
+function registerWallet(program) {
+    const wallet = program.command("wallet").description("Google Wallet management commands");
+    wallet
+        .command("google:set-callback")
+        .description("Set the Google Wallet issuer callback URL")
+        .requiredOption("--issuer-id <id>", "Google Wallet issuer ID")
+        .requiredOption("--callback-url <url>", "Callback URL for save/del events")
+        .requiredOption("--key-file <path>", "Path to Google service account JSON key file")
+        .action(async (opts) => {
+        const keyPath = path.resolve(opts.keyFile);
+        if (!fs.existsSync(keyPath)) {
+            throw new Error(`Key file not found: ${keyPath}`);
+        }
+        const saJson = fs.readFileSync(keyPath, "utf-8");
+        process.stdout.write(`Authenticating as service account...\n`);
+        const token = await getAccessToken(saJson);
+        process.stdout.write(`Fetching issuer ${opts.issuerId}...\n`);
+        const issuer = await getIssuer(token, opts.issuerId);
+        process.stdout.write(`Setting callback URL: ${opts.callbackUrl}\n`);
+        const updated = await updateIssuer(token, issuer, opts.callbackUrl);
+        process.stdout.write(`Done. Issuer updated:\n`);
+        process.stdout.write(`${JSON.stringify(updated, null, 2)}\n`);
+    });
+    wallet
+        .command("google:get-issuer")
+        .description("Show current Google Wallet issuer configuration")
+        .requiredOption("--issuer-id <id>", "Google Wallet issuer ID")
+        .requiredOption("--key-file <path>", "Path to Google service account JSON key file")
+        .action(async (opts) => {
+        const keyPath = path.resolve(opts.keyFile);
+        if (!fs.existsSync(keyPath)) {
+            throw new Error(`Key file not found: ${keyPath}`);
+        }
+        const saJson = fs.readFileSync(keyPath, "utf-8");
+        const token = await getAccessToken(saJson);
+        const issuer = await getIssuer(token, opts.issuerId);
+        process.stdout.write(`${JSON.stringify(issuer, null, 2)}\n`);
+    });
+}

package/dist/index.js

@@ -9,6 +9,7 @@ const product_1 = require("./commands/product");
 const shell_1 = require("./commands/shell");
 const token_1 = require("./commands/token");
 const uploadUsers_1 = require("./commands/uploadUsers");
+const wallet_1 = require("./commands/wallet");
 const program = new commander_1.Command();
 program
     .name("edge-cli")
@@ -33,6 +34,7 @@ program
 (0, token_1.registerToken)(program);
 (0, shell_1.registerShell)(program);
 (0, uploadUsers_1.registerUploadUsers)(program);
+(0, wallet_1.registerWallet)(program);
 program.parseAsync(process.argv).catch((error) => {
     process.stderr.write(`ERROR: ${error instanceof Error ? error.message : String(error)}\n`);
     process.exit(1);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@youkno/edge-cli",
-  "version": "1.21.25",
+  "version": "1.21.26",
   "description": "Cross-platform Edge CLI",
   "bin": "dist/index.js",
   "publishConfig": {

package/src/commands/wallet.ts

@@ -0,0 +1,128 @@
+import { Command } from "commander";
+import * as crypto from "crypto";
+import * as fs from "fs";
+import * as path from "path";
+
+const GOOGLE_TOKEN_URL = "https://oauth2.googleapis.com/token";
+const GOOGLE_WALLET_SCOPE = "https://www.googleapis.com/auth/wallet_object.issuer";
+const GOOGLE_ISSUER_API = "https://walletobjects.googleapis.com/walletobjects/v1/issuer";
+
+function signJwt(payload: Record<string, unknown>, privateKey: string): string {
+    const header = Buffer.from(JSON.stringify({ alg: "RS256", typ: "JWT" })).toString("base64url");
+    const body = Buffer.from(JSON.stringify(payload)).toString("base64url");
+    const signature = crypto.sign("sha256", Buffer.from(`${header}.${body}`), privateKey).toString("base64url");
+    return `${header}.${body}.${signature}`;
+}
+
+async function getAccessToken(serviceAccountJson: string): Promise<string> {
+    const sa = JSON.parse(serviceAccountJson);
+    const now = Math.floor(Date.now() / 1000);
+    const assertion = signJwt(
+        {
+            iss: sa.client_email,
+            scope: GOOGLE_WALLET_SCOPE,
+            aud: GOOGLE_TOKEN_URL,
+            iat: now,
+            exp: now + 3600,
+        },
+        sa.private_key,
+    );
+
+    const res = await fetch(GOOGLE_TOKEN_URL, {
+        method: "POST",
+        headers: { "Content-Type": "application/x-www-form-urlencoded" },
+        body: `grant_type=urn:ietf:params:oauth:grant-type:jwt-bearer&assertion=${assertion}`,
+    });
+
+    if (!res.ok) {
+        const text = await res.text();
+        throw new Error(`Failed to get access token: ${res.status} ${text}`);
+    }
+    const data = (await res.json()) as { access_token: string };
+    return data.access_token;
+}
+
+async function getIssuer(token: string, issuerId: string): Promise<Record<string, unknown>> {
+    const res = await fetch(`${GOOGLE_ISSUER_API}/${issuerId}`, {
+        headers: { Authorization: `Bearer ${token}` },
+    });
+    if (!res.ok) {
+        const text = await res.text();
+        throw new Error(`Failed to get issuer: ${res.status} ${text}`);
+    }
+    return (await res.json()) as Record<string, unknown>;
+}
+
+async function updateIssuer(
+    token: string,
+    issuer: Record<string, unknown>,
+    callbackUrl: string,
+): Promise<Record<string, unknown>> {
+    const body = {
+        ...issuer,
+        callbackOptions: { url: callbackUrl },
+    };
+
+    const res = await fetch(`${GOOGLE_ISSUER_API}/${issuer.issuerId}`, {
+        method: "PUT",
+        headers: {
+            Authorization: `Bearer ${token}`,
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify(body),
+    });
+
+    if (!res.ok) {
+        const text = await res.text();
+        throw new Error(`Failed to update issuer: ${res.status} ${text}`);
+    }
+    return (await res.json()) as Record<string, unknown>;
+}
+
+export function registerWallet(program: Command): void {
+    const wallet = program.command("wallet").description("Google Wallet management commands");
+
+    wallet
+        .command("google:set-callback")
+        .description("Set the Google Wallet issuer callback URL")
+        .requiredOption("--issuer-id <id>", "Google Wallet issuer ID")
+        .requiredOption("--callback-url <url>", "Callback URL for save/del events")
+        .requiredOption("--key-file <path>", "Path to Google service account JSON key file")
+        .action(async (opts: { issuerId: string; callbackUrl: string; keyFile: string }) => {
+            const keyPath = path.resolve(opts.keyFile);
+            if (!fs.existsSync(keyPath)) {
+                throw new Error(`Key file not found: ${keyPath}`);
+            }
+            const saJson = fs.readFileSync(keyPath, "utf-8");
+
+            process.stdout.write(`Authenticating as service account...\n`);
+            const token = await getAccessToken(saJson);
+
+            process.stdout.write(`Fetching issuer ${opts.issuerId}...\n`);
+            const issuer = await getIssuer(token, opts.issuerId);
+
+            process.stdout.write(`Setting callback URL: ${opts.callbackUrl}\n`);
+            const updated = await updateIssuer(token, issuer, opts.callbackUrl);
+
+            process.stdout.write(`Done. Issuer updated:\n`);
+            process.stdout.write(`${JSON.stringify(updated, null, 2)}\n`);
+        });
+
+    wallet
+        .command("google:get-issuer")
+        .description("Show current Google Wallet issuer configuration")
+        .requiredOption("--issuer-id <id>", "Google Wallet issuer ID")
+        .requiredOption("--key-file <path>", "Path to Google service account JSON key file")
+        .action(async (opts: { issuerId: string; keyFile: string }) => {
+            const keyPath = path.resolve(opts.keyFile);
+            if (!fs.existsSync(keyPath)) {
+                throw new Error(`Key file not found: ${keyPath}`);
+            }
+            const saJson = fs.readFileSync(keyPath, "utf-8");
+
+            const token = await getAccessToken(saJson);
+            const issuer = await getIssuer(token, opts.issuerId);
+
+            process.stdout.write(`${JSON.stringify(issuer, null, 2)}\n`);
+        });
+}

package/src/index.ts

@@ -9,6 +9,7 @@ import { registerProduct } from "./commands/product";
 import { registerShell } from "./commands/shell";
 import { registerToken } from "./commands/token";
 import { registerUploadUsers } from "./commands/uploadUsers";
+import { registerWallet } from "./commands/wallet";
 import { CliEnv } from "./lib/types";
 
 const program = new Command();
@@ -37,6 +38,7 @@ registerLogin(program);
 registerToken(program);
 registerShell(program);
 registerUploadUsers(program);
+registerWallet(program);
 
 program.parseAsync(process.argv).catch((error) => {
     process.stderr.write(`ERROR: ${error instanceof Error ? error.message : String(error)}\n`);