@zaflun/lumio-cli 0.1.0 → 0.2.0

package/dist/index.js

@@ -1,6 +1,10 @@
 // src/program.ts
 import { Command } from "commander";
 
+// src/commands/login.ts
+import * as http from "http";
+import * as crypto from "crypto";
+
 // src/auth/credential-store.ts
 import * as fs from "fs";
 import * as path from "path";
@@ -54,6 +58,11 @@ var CredentialStore = class {
 };
 
 // src/commands/login.ts
+function generatePkceChallenge() {
+  const verifier = crypto.randomBytes(32).toString("base64url");
+  const challenge = crypto.createHash("sha256").update(verifier).digest("base64url");
+  return { verifier, challenge };
+}
 function registerLogin(program2) {
   program2.command("login").description("Authenticate with Lumio via browser (PKCE) or token").option("--token <token>", "Authenticate with an API token (for CI/CD)").option("--api-url <url>", "Custom API URL", "https://api.lumio.vision").action(async (options) => {
     const store = new CredentialStore();
@@ -62,12 +71,69 @@ function registerLogin(program2) {
       console.log("Authenticated with token.");
       return;
     }
-    console.log("Opening browser for authentication...");
-    const { default: open } = await import("open");
-    const pkceUrl = `${options.apiUrl}/v1/auth/cli/authorize`;
-    await open(pkceUrl);
-    console.log("Waiting for authentication callback...");
-    console.log("If the browser did not open, visit:", pkceUrl);
+    const { verifier, challenge } = generatePkceChallenge();
+    const state = crypto.randomBytes(16).toString("hex");
+    const port = 9876;
+    const redirectUri = `http://localhost:${port}/callback`;
+    await new Promise((resolve9, reject) => {
+      const server = http.createServer(async (req, res) => {
+        if (!req.url?.startsWith("/callback")) {
+          res.writeHead(404);
+          res.end();
+          return;
+        }
+        const url = new URL(req.url, `http://localhost:${port}`);
+        const code = url.searchParams.get("code");
+        const returnedState = url.searchParams.get("state");
+        if (returnedState !== state || !code) {
+          res.writeHead(400, { "Content-Type": "text/html" });
+          res.end("<html><body><h2>Authentication failed.</h2><p>Invalid state or missing code. You can close this window.</p></body></html>");
+          server.close();
+          reject(new Error("Authentication failed: invalid state or missing code"));
+          return;
+        }
+        try {
+          const tokenRes = await fetch(`${options.apiUrl}/v1/auth/cli/token`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({
+              grant_type: "authorization_code",
+              code,
+              redirect_uri: redirectUri,
+              code_verifier: verifier
+            })
+          });
+          if (!tokenRes.ok) {
+            throw new Error(`Token exchange failed: ${tokenRes.status}`);
+          }
+          const tokenData = await tokenRes.json();
+          store.saveToken(tokenData.access_token, options.apiUrl);
+          res.writeHead(200, { "Content-Type": "text/html" });
+          res.end("<html><body><h2>Authenticated!</h2><p>You can close this window and return to the CLI.</p></body></html>");
+        } catch (e) {
+          res.writeHead(500, { "Content-Type": "text/html" });
+          res.end("<html><body><h2>Authentication failed.</h2><p>Token exchange error. You can close this window.</p></body></html>");
+          server.close();
+          reject(e);
+          return;
+        }
+        server.close();
+        resolve9();
+      });
+      server.listen(port, async () => {
+        const pkceUrl = `${options.apiUrl}/v1/auth/cli/authorize?code_challenge=${challenge}&code_challenge_method=S256&redirect_uri=${encodeURIComponent(redirectUri)}&state=${state}`;
+        console.log("Opening browser for authentication...");
+        const { default: open } = await import("open");
+        await open(pkceUrl);
+        console.log("Waiting for authentication callback...");
+        console.log("If the browser did not open, visit:", pkceUrl);
+      });
+      setTimeout(() => {
+        server.close();
+        reject(new Error("Authentication timed out after 120 seconds"));
+      }, 12e4);
+    });
+    console.log("Authenticated successfully.");
   });
 }
 
@@ -253,7 +319,7 @@ function registerInit(program2) {
     const projectDir = path2.resolve(answers.name.toLowerCase().replace(/\s+/g, "-"));
     fs2.mkdirSync(projectDir, { recursive: true });
     const config = {
-      $schema: "https://docs.lumio.vision/schemas/lumio.config.schema.json",
+      $schema: "https://lumio.vision/schemas/lumio.config.schema.json",
       extensionId: extension.id,
       name: answers.name,
       description: answers.description,
@@ -528,8 +594,10 @@ function registerDeploy(program2) {
       const sourceBuffer = fs4.readFileSync(sourceArchive);
       formData.append("source", new Blob([sourceBuffer]), "source.tar.gz");
     }
+    const manifest = JSON.parse(configJson);
+    manifest.version = version;
     formData.append("version", version);
-    formData.append("manifest", configJson);
+    formData.append("manifest", JSON.stringify(manifest));
     formData.append("release_notes", releaseNotes);
     formData.append("is_breaking", String(!!options.breaking));
     try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zaflun/lumio-cli",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Lumio Extension CLI — Build, test, and deploy Lumio extensions",
   "type": "module",
   "main": "dist/index.js",