intentdna 1.7.4 → 1.8.0

package/dist/cli/commands/auth.d.ts

@@ -0,0 +1,322 @@
+export interface AuthOptions {
+    subcommand: string;
+    tokenAction?: string;
+    userJwtAction?: string;
+    token?: string;
+    tokenId?: string;
+    userJwt?: string;
+    endpoint?: string;
+    projectId?: string;
+    organizationId?: string;
+    tokenName?: string;
+    orgName?: string;
+    projectName?: string;
+    orgSlug?: string;
+    projectSlug?: string;
+    projectHint?: string;
+    scopes?: string[];
+    expiresAt?: string;
+    includeRevoked?: boolean;
+    limit?: number;
+    dryRun?: boolean;
+    yes?: boolean;
+    json?: boolean;
+    env?: NodeJS.ProcessEnv;
+    configDir?: string;
+    fetch?: typeof globalThis.fetch;
+}
+interface StoredAuthConfig {
+    schema_version: "intentdna.auth_config.v1";
+    token: string;
+    token_preview: string;
+    token_prefix: string;
+    created_at: string;
+    updated_at: string;
+}
+interface StoredSupabaseUserJwtConfig {
+    schema_version: "intentdna.supabase_user_jwt_config.v1";
+    token: string;
+    token_preview: string;
+    token_prefix: string;
+    created_at: string;
+    updated_at: string;
+}
+interface AuthStatus {
+    schema_version: "intentdna.auth_status.v1";
+    mode: "api_token_auth_status";
+    authenticated: boolean;
+    credential_present: boolean;
+    verified_online: false;
+    network_performed: false;
+    runtime_authority: false;
+    source: "env" | "user_config" | "none";
+    config_path: string;
+    token_preview?: string;
+    missing: string[];
+    boundaries: string[];
+    next_commands: string[];
+}
+interface AuthTokenResult {
+    schema_version: "intentdna.auth_token_result.v1";
+    action: "set" | "clear";
+    status: "stored" | "cleared" | "already_clear" | "rejected";
+    config_path: string;
+    token_preview?: string;
+    raw_token_printed: false;
+    network_performed: false;
+    runtime_authority: false;
+    reason?: string;
+    boundaries: string[];
+}
+interface SupabaseUserJwtStatus {
+    schema_version: "intentdna.supabase_user_jwt_status.v1";
+    mode: "supabase_user_jwt_account_bridge_status";
+    credential_present: boolean;
+    credential_expired: boolean;
+    verified_online: false;
+    network_performed: false;
+    runtime_authority: false;
+    source: SupabaseUserJwtSource;
+    config_path: string;
+    token_preview?: string;
+    expires_at?: string;
+    missing: string[];
+    boundaries: string[];
+    next_commands: string[];
+}
+interface SupabaseUserJwtResult {
+    schema_version: "intentdna.supabase_user_jwt_result.v1";
+    action: "set" | "clear";
+    status: "stored" | "cleared" | "already_clear" | "rejected";
+    config_path: string;
+    token_preview?: string;
+    raw_token_printed: false;
+    network_performed: false;
+    runtime_authority: false;
+    reason?: string;
+    boundaries: string[];
+}
+type AuthIssueTokenStatus = "dry_run" | "issued" | "pending" | "rejected";
+type AuthBootstrapAccountStatus = "dry_run" | "bootstrapped" | "pending" | "rejected";
+type AuthProjectsStatus = "dry_run" | "ready" | "pending" | "rejected";
+type AuthTokensStatus = "dry_run" | "ready" | "revoked" | "pending" | "rejected";
+type AuthOnboardStatus = "dry_run" | "issued" | "pending" | "rejected";
+type SupabaseUserJwtSource = "option" | "env" | "user_config" | "none";
+interface AuthIssueTokenRequest {
+    schema_version: "intentdna.api_token_issue_request.v1";
+    name?: string;
+    organization_id?: string;
+    project_id?: string;
+    scopes: string[];
+    expires_at: string | null;
+}
+interface AuthBootstrapAccountRequest {
+    schema_version: "intentdna.account_bootstrap_request.v1";
+    organization_name?: string;
+    organization_slug?: string;
+    project_name?: string;
+    project_slug?: string;
+    local_project_hint?: string | null;
+}
+interface AuthBootstrapAccountResult {
+    schema_version: "intentdna.auth_bootstrap_account_result.v1";
+    generated_at: string;
+    status: AuthBootstrapAccountStatus;
+    endpoint?: string;
+    request: AuthBootstrapAccountRequest;
+    auth: {
+        supabase_user_jwt_present: boolean;
+        source: SupabaseUserJwtSource;
+    };
+    transport: {
+        network_performed: boolean;
+        hidden_transport: false;
+    };
+    mutation_performed: boolean;
+    runtime_authority: false;
+    bootstrap_receipt?: Record<string, unknown>;
+    missing: string[];
+    reasons: string[];
+    boundaries: string[];
+    next_commands: string[];
+}
+interface AuthIssueTokenResult {
+    schema_version: "intentdna.auth_issue_token_result.v1";
+    generated_at: string;
+    status: AuthIssueTokenStatus;
+    endpoint?: string;
+    request: AuthIssueTokenRequest;
+    auth: {
+        supabase_user_jwt_present: boolean;
+        source: SupabaseUserJwtSource;
+    };
+    local_storage: {
+        stored: boolean;
+        config_path: string;
+        token_preview?: string;
+    };
+    transport: {
+        network_performed: boolean;
+        hidden_transport: false;
+    };
+    runtime_authority: false;
+    raw_token_printed: false;
+    issue_receipt?: Record<string, unknown>;
+    missing: string[];
+    reasons: string[];
+    boundaries: string[];
+}
+interface AuthProjectsRequest {
+    schema_version: "intentdna.account_projects_request.v1";
+    method: "POST";
+    function: "list-projects";
+    body: null;
+}
+interface AuthProjectsResult {
+    schema_version: "intentdna.auth_projects_result.v1";
+    generated_at: string;
+    status: AuthProjectsStatus;
+    endpoint?: string;
+    request: AuthProjectsRequest;
+    auth: {
+        supabase_user_jwt_present: boolean;
+        source: SupabaseUserJwtSource;
+    };
+    transport: {
+        network_performed: boolean;
+        hidden_transport: false;
+    };
+    runtime_authority: false;
+    projects_receipt?: Record<string, unknown>;
+    missing: string[];
+    reasons: string[];
+    boundaries: string[];
+}
+interface AuthTokensRequest {
+    schema_version: "intentdna.api_tokens_manage_request.v1";
+    action: "list" | "revoke";
+    organization_id?: string;
+    project_id?: string;
+    token_id?: string;
+    include_revoked: boolean;
+    limit: number;
+}
+interface AuthTokensResult {
+    schema_version: "intentdna.auth_tokens_result.v1";
+    generated_at: string;
+    action: "list" | "revoke";
+    status: AuthTokensStatus;
+    endpoint?: string;
+    request: AuthTokensRequest;
+    auth: {
+        supabase_user_jwt_present: boolean;
+        source: SupabaseUserJwtSource;
+    };
+    mutation_confirmed: boolean;
+    transport: {
+        network_performed: boolean;
+        hidden_transport: false;
+    };
+    runtime_authority: false;
+    token_management_receipt?: Record<string, unknown>;
+    missing: string[];
+    reasons: string[];
+    boundaries: string[];
+}
+interface AuthOnboardResult {
+    schema_version: "intentdna.auth_onboard_result.v1";
+    generated_at: string;
+    status: AuthOnboardStatus;
+    selected_project: {
+        project_id?: string;
+        organization_id?: string;
+        project_name?: string;
+        organization_name?: string;
+        source: "explicit" | "single_project" | "unselected";
+        project_count: number;
+        ambiguous: boolean;
+    };
+    endpoints: {
+        list_projects?: string;
+        issue_api_token?: string;
+    };
+    auth: {
+        supabase_user_jwt_present: boolean;
+        source: SupabaseUserJwtSource;
+    };
+    local_storage: {
+        stored: boolean;
+        config_path: string;
+        token_preview?: string;
+    };
+    transport: {
+        network_performed: boolean;
+        hidden_transport: false;
+    };
+    runtime_authority: false;
+    raw_token_printed: false;
+    projects_result: AuthProjectsResult;
+    issue_result?: AuthIssueTokenResult;
+    auth_status?: AuthStatus;
+    missing: string[];
+    reasons: string[];
+    boundaries: string[];
+    next_commands: string[];
+}
+export interface ResolvedAuthToken {
+    token?: string;
+    source: "env" | "user_config" | "none";
+    configPath: string;
+}
+export interface ResolvedSupabaseUserJwt {
+    token?: string;
+    source: SupabaseUserJwtSource;
+    configPath: string;
+    expiresAt?: string;
+    expired: boolean;
+}
+export declare function maskAuthToken(value: string | undefined): string | undefined;
+export declare function authConfigPath(env?: NodeJS.ProcessEnv, configDir?: string): string;
+export declare function supabaseUserJwtConfigPath(env?: NodeJS.ProcessEnv, configDir?: string): string;
+export declare function resolveAuthToken(params?: {
+    env?: NodeJS.ProcessEnv;
+    configDir?: string;
+}): Promise<ResolvedAuthToken>;
+export declare function isRejectedServiceRoleToken(token: string, env: NodeJS.ProcessEnv): boolean;
+export declare function buildAccountEndpoint(opts: AuthOptions, functionName: "bootstrap-account" | "list-projects" | "manage-api-tokens" | "list-receipts"): string | undefined;
+export declare function resolveSupabaseUserJwt(opts: Pick<AuthOptions, "userJwt" | "env" | "configDir"> & Partial<Pick<AuthOptions, "subcommand">>): Promise<ResolvedSupabaseUserJwt>;
+export declare function readStoredAuth(path: string): Promise<StoredAuthConfig | undefined>;
+export declare function readStoredSupabaseUserJwt(path: string): Promise<StoredSupabaseUserJwtConfig | undefined>;
+export declare function buildAuthStatus(params?: {
+    env?: NodeJS.ProcessEnv;
+    configDir?: string;
+}): Promise<AuthStatus>;
+export declare function buildSupabaseUserJwtStatus(params?: {
+    env?: NodeJS.ProcessEnv;
+    configDir?: string;
+}): Promise<SupabaseUserJwtStatus>;
+export declare function storeAuthToken(params: {
+    token: string;
+    env?: NodeJS.ProcessEnv;
+    configDir?: string;
+}): Promise<AuthTokenResult>;
+export declare function storeSupabaseUserJwt(params: {
+    token: string;
+    env?: NodeJS.ProcessEnv;
+    configDir?: string;
+}): Promise<SupabaseUserJwtResult>;
+export declare function clearAuthToken(params?: {
+    env?: NodeJS.ProcessEnv;
+    configDir?: string;
+}): Promise<AuthTokenResult>;
+export declare function clearSupabaseUserJwt(params?: {
+    env?: NodeJS.ProcessEnv;
+    configDir?: string;
+}): Promise<SupabaseUserJwtResult>;
+export declare function issueAuthToken(options: AuthOptions): Promise<AuthIssueTokenResult>;
+export declare function bootstrapAccount(options: AuthOptions): Promise<AuthBootstrapAccountResult>;
+export declare function listAuthProjects(options: AuthOptions): Promise<AuthProjectsResult>;
+export declare function manageAuthTokens(options: AuthOptions): Promise<AuthTokensResult>;
+export declare function onboardAuth(options: AuthOptions): Promise<AuthOnboardResult>;
+export declare function runAuth(options: AuthOptions): Promise<number>;
+export {};