latchkey 0.1.0

package/dist/src/cliCommands.js

@@ -0,0 +1,264 @@
+/**
+ * CLI command implementations with dependency injection for testability.
+ */
+import { existsSync, unlinkSync } from 'node:fs';
+import { createInterface } from 'node:readline';
+import { ApiCredentialStore } from './apiCredentialStore.js';
+import { ApiCredentialStatus } from './apiCredentials.js';
+import { CONFIG } from './config.js';
+import { EncryptedStorage } from './encryptedStorage.js';
+import { REGISTRY } from './registry.js';
+import { LoginCancelledError, LoginFailedError } from './services/index.js';
+import { run as curlRun } from './curl.js';
+// Curl flags that don't affect the HTTP request semantics but may not be supported by URL extraction.
+const CURL_PASSTHROUGH_FLAGS = new Set(['-v', '--verbose']);
+/**
+ * Default implementation of CLI dependencies.
+ */
+export function createDefaultDependencies() {
+    return {
+        registry: REGISTRY,
+        config: CONFIG,
+        runCurl: curlRun,
+        confirm: defaultConfirm,
+        exit: (code) => process.exit(code),
+        log: (message) => {
+            console.log(message);
+        },
+        errorLog: (message) => {
+            console.error(message);
+        },
+    };
+}
+function filterPassthroughFlags(args) {
+    return args.filter((arg) => !CURL_PASSTHROUGH_FLAGS.has(arg));
+}
+export function extractUrlFromCurlArguments(args) {
+    const filteredArgs = filterPassthroughFlags(args);
+    // Simple URL extraction: look for arguments that look like URLs
+    // or parse known curl argument patterns
+    for (let i = 0; i < filteredArgs.length; i++) {
+        const arg = filteredArgs[i];
+        if (arg === undefined)
+            continue;
+        // Skip flags and their values
+        if (arg.startsWith('-')) {
+            // Skip flags that take a value
+            if (['-H', '-d', '-X', '-o', '-w', '-u', '-A', '-e', '-b', '-c', '-F', '-T'].includes(arg)) {
+                i++; // Skip the next argument which is the value
+            }
+            continue;
+        }
+        // This looks like a URL
+        if (arg.startsWith('http://') || arg.startsWith('https://')) {
+            return arg;
+        }
+    }
+    return null;
+}
+async function defaultConfirm(message) {
+    const readline = createInterface({
+        input: process.stdin,
+        output: process.stdout,
+    });
+    return new Promise((resolve) => {
+        readline.question(`${message} (y/N) `, (answer) => {
+            readline.close();
+            resolve(answer.toLowerCase() === 'y' || answer.toLowerCase() === 'yes');
+        });
+    });
+}
+async function clearAll(deps, yes) {
+    const latchkeyStore = deps.config.credentialStorePath;
+    const browserState = deps.config.browserStatePath;
+    const filesToDelete = [];
+    if (existsSync(latchkeyStore)) {
+        filesToDelete.push(latchkeyStore);
+    }
+    if (existsSync(browserState)) {
+        filesToDelete.push(browserState);
+    }
+    if (filesToDelete.length === 0) {
+        deps.log('No files to delete.');
+        return;
+    }
+    if (!yes) {
+        deps.log('This will delete the following files:');
+        for (const filePath of filesToDelete) {
+            deps.log(`  ${filePath}`);
+        }
+        const confirmed = await deps.confirm('Are you sure you want to continue?');
+        if (!confirmed) {
+            deps.log('Aborted.');
+            deps.exit(1);
+        }
+    }
+    for (const filePath of filesToDelete) {
+        unlinkSync(filePath);
+        if (filePath === latchkeyStore) {
+            deps.log(`Deleted credentials store: ${filePath}`);
+        }
+        else {
+            deps.log(`Deleted browser state: ${filePath}`);
+        }
+    }
+}
+function createEncryptedStorageFromConfig(config) {
+    return new EncryptedStorage({
+        encryptionKeyOverride: config.encryptionKeyOverride,
+        serviceName: config.serviceName,
+        accountName: config.accountName,
+    });
+}
+function clearService(deps, serviceName) {
+    const service = deps.registry.getByName(serviceName);
+    if (service === null) {
+        deps.errorLog(`Error: Unknown service: ${serviceName}`);
+        deps.errorLog("Use 'latchkey services' to see available services.");
+        deps.exit(1);
+    }
+    const encryptedStorage = createEncryptedStorageFromConfig(deps.config);
+    const apiCredentialStore = new ApiCredentialStore(deps.config.credentialStorePath, encryptedStorage);
+    const deleted = apiCredentialStore.delete(serviceName);
+    if (deleted) {
+        deps.log(`API credentials for ${serviceName} have been cleared.`);
+    }
+    else {
+        deps.log(`No API credentials found for ${serviceName}.`);
+    }
+}
+/**
+ * Register all CLI commands on the given program.
+ */
+export function registerCommands(program, deps) {
+    program
+        .command('services')
+        .description('List known and supported third-party services.')
+        .action(() => {
+        const serviceNames = deps.registry.services.map((service) => service.name);
+        deps.log(serviceNames.join(' '));
+    });
+    program
+        .command('clear')
+        .description('Clear stored API credentials.')
+        .argument('[service_name]', 'Name of the service to clear API credentials for')
+        .option('-y, --yes', 'Skip confirmation prompt when clearing all data')
+        .action(async (serviceName, options) => {
+        if (serviceName === undefined) {
+            await clearAll(deps, options.yes ?? false);
+        }
+        else {
+            clearService(deps, serviceName);
+        }
+    });
+    program
+        .command('status')
+        .description('Check the API credential status for a service.')
+        .argument('[service_name]', 'Name of the service to check status for')
+        .action((serviceName) => {
+        const encryptedStorage = createEncryptedStorageFromConfig(deps.config);
+        const apiCredentialStore = new ApiCredentialStore(deps.config.credentialStorePath, encryptedStorage);
+        if (serviceName === undefined) {
+            for (const service of deps.registry.services) {
+                const apiCredentials = apiCredentialStore.get(service.name);
+                if (apiCredentials === null) {
+                    deps.log(`${service.name}: ${ApiCredentialStatus.Missing}`);
+                }
+                else {
+                    const status = service.checkApiCredentials(apiCredentials);
+                    deps.log(`${service.name}: ${status}`);
+                }
+            }
+            return;
+        }
+        const service = deps.registry.getByName(serviceName);
+        if (service === null) {
+            deps.errorLog(`Error: Unknown service: ${serviceName}`);
+            deps.errorLog("Use 'latchkey services' to see available services.");
+            deps.exit(1);
+        }
+        const apiCredentials = apiCredentialStore.get(serviceName);
+        if (apiCredentials === null) {
+            deps.log(ApiCredentialStatus.Missing);
+            return;
+        }
+        const apiCredentialStatus = service.checkApiCredentials(apiCredentials);
+        deps.log(apiCredentialStatus);
+    });
+    program
+        .command('login')
+        .description('Login to a service and store the API credentials.')
+        .argument('<service_name>', 'Name of the service to login to')
+        .action(async (serviceName) => {
+        const service = deps.registry.getByName(serviceName);
+        if (service === null) {
+            deps.errorLog(`Error: Unknown service: ${serviceName}`);
+            deps.errorLog("Use 'latchkey services' to see available services.");
+            deps.exit(1);
+        }
+        const encryptedStorage = createEncryptedStorageFromConfig(deps.config);
+        const apiCredentialStore = new ApiCredentialStore(deps.config.credentialStorePath, encryptedStorage);
+        try {
+            const apiCredentials = await service
+                .getSession()
+                .login(encryptedStorage, deps.config.browserStatePath);
+            apiCredentialStore.save(service.name, apiCredentials);
+            deps.log('Done');
+        }
+        catch (error) {
+            if (error instanceof LoginCancelledError) {
+                deps.errorLog('Login cancelled.');
+                deps.exit(1);
+            }
+            if (error instanceof LoginFailedError) {
+                deps.errorLog(error.message);
+                deps.exit(1);
+            }
+            throw error;
+        }
+    });
+    program
+        .command('curl')
+        .description('Run curl with API credential injection.')
+        .allowUnknownOption()
+        .allowExcessArguments()
+        .action(async (_options, command) => {
+        const curlArguments = command.args;
+        const url = extractUrlFromCurlArguments(curlArguments);
+        if (url === null) {
+            deps.errorLog('Error: Could not extract URL from curl arguments.');
+            deps.exit(1);
+        }
+        const service = deps.registry.getByUrl(url);
+        if (service === null) {
+            deps.errorLog(`Error: No service matches URL: ${url}`);
+            deps.exit(1);
+        }
+        const encryptedStorage = createEncryptedStorageFromConfig(deps.config);
+        const apiCredentialStore = new ApiCredentialStore(deps.config.credentialStorePath, encryptedStorage);
+        let apiCredentials = apiCredentialStore.get(service.name);
+        if (apiCredentials === null) {
+            try {
+                apiCredentials = await service
+                    .getSession()
+                    .login(encryptedStorage, deps.config.browserStatePath);
+                apiCredentialStore.save(service.name, apiCredentials);
+            }
+            catch (error) {
+                if (error instanceof LoginCancelledError) {
+                    deps.errorLog('Login cancelled.');
+                    deps.exit(1);
+                }
+                if (error instanceof LoginFailedError) {
+                    deps.errorLog(error.message);
+                    deps.exit(1);
+                }
+                throw error;
+            }
+        }
+        const allArguments = [...apiCredentials.asCurlArguments(), ...curlArguments];
+        const result = deps.runCurl(allArguments);
+        deps.exit(result.returncode);
+    });
+}
+//# sourceMappingURL=cliCommands.js.map

package/dist/src/cliCommands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cliCommands.js","sourceRoot":"","sources":["../../src/cliCommands.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAkB,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAU,MAAM,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAY,QAAQ,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,GAAG,IAAI,OAAO,EAAE,MAAM,WAAW,CAAC;AAE3C,sGAAsG;AACtG,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;AAe5D;;GAEG;AACH,MAAM,UAAU,yBAAyB;IACvC,OAAO;QACL,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,OAAO;QAChB,OAAO,EAAE,cAAc;QACvB,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1C,GAAG,EAAE,CAAC,OAAe,EAAE,EAAE;YACvB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;QACD,QAAQ,EAAE,CAAC,OAAe,EAAE,EAAE;YAC5B,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAc;IAC5C,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,IAAc;IACxD,MAAM,YAAY,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAElD,gEAAgE;IAChE,wCAAwC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QAEhC,8BAA8B;QAC9B,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,+BAA+B;YAC/B,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3F,CAAC,EAAE,CAAC,CAAC,4CAA4C;YACnD,CAAC;YACD,SAAS;QACX,CAAC;QAED,wBAAwB;QACxB,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5D,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,OAAe;IAC3C,MAAM,QAAQ,GAAG,eAAe,CAAC;QAC/B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,QAAQ,CAAC,QAAQ,CAAC,GAAG,OAAO,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE;YAChD,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAqB,EAAE,GAAY;IACzD,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC;IACtD,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;IAElD,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9B,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAChC,OAAO;IACT,CAAC;IAED,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,IAAI,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QAClD,KAAK,MAAM,QAAQ,IAAI,aAAa,EAAE,CAAC;YACrC,IAAI,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;QAC5B,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;QAC3E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,aAAa,EAAE,CAAC;QACrC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACrB,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;YAC/B,IAAI,CAAC,GAAG,CAAC,8BAA8B,QAAQ,EAAE,CAAC,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,0BAA0B,QAAQ,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gCAAgC,CAAC,MAAc;IACtD,OAAO,IAAI,gBAAgB,CAAC;QAC1B,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;QACnD,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,IAAqB,EAAE,WAAmB;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IACrD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,2BAA2B,WAAW,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ,CAAC,oDAAoD,CAAC,CAAC;QACpE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACf,CAAC;IAED,MAAM,gBAAgB,GAAG,gCAAgC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvE,MAAM,kBAAkB,GAAG,IAAI,kBAAkB,CAC/C,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAC/B,gBAAgB,CACjB,CAAC;IACF,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAEvD,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC,GAAG,CAAC,uBAAuB,WAAW,qBAAqB,CAAC,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,GAAG,CAAC,gCAAgC,WAAW,GAAG,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgB,EAAE,IAAqB;IACtE,OAAO;SACJ,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,gDAAgD,CAAC;SAC7D,MAAM,CAAC,GAAG,EAAE;QACX,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3E,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,+BAA+B,CAAC;SAC5C,QAAQ,CAAC,gBAAgB,EAAE,kDAAkD,CAAC;SAC9E,MAAM,CAAC,WAAW,EAAE,iDAAiD,CAAC;SACtE,MAAM,CAAC,KAAK,EAAE,WAA+B,EAAE,OAA0B,EAAE,EAAE;QAC5E,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAClC,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,gDAAgD,CAAC;SAC7D,QAAQ,CAAC,gBAAgB,EAAE,yCAAyC,CAAC;SACrE,MAAM,CAAC,CAAC,WAA+B,EAAE,EAAE;QAC1C,MAAM,gBAAgB,GAAG,gCAAgC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvE,MAAM,kBAAkB,GAAG,IAAI,kBAAkB,CAC/C,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAC/B,gBAAgB,CACjB,CAAC;QAEF,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBAC7C,MAAM,cAAc,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC5D,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;oBAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,KAAK,mBAAmB,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC9D,CAAC;qBAAM,CAAC;oBACN,MAAM,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC;oBAC3D,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;gBACzC,CAAC;YACH,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACrD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,QAAQ,CAAC,2BAA2B,WAAW,EAAE,CAAC,CAAC;YACxD,IAAI,CAAC,QAAQ,CAAC,oDAAoD,CAAC,CAAC;YACpE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC;QAED,MAAM,cAAc,GAAG,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAE3D,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QAED,MAAM,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC;QACxE,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,mDAAmD,CAAC;SAChE,QAAQ,CAAC,gBAAgB,EAAE,iCAAiC,CAAC;SAC7D,MAAM,CAAC,KAAK,EAAE,WAAmB,EAAE,EAAE;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACrD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,QAAQ,CAAC,2BAA2B,WAAW,EAAE,CAAC,CAAC;YACxD,IAAI,CAAC,QAAQ,CAAC,oDAAoD,CAAC,CAAC;YACpE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC;QAED,MAAM,gBAAgB,GAAG,gCAAgC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvE,MAAM,kBAAkB,GAAG,IAAI,kBAAkB,CAC/C,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAC/B,gBAAgB,CACjB,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,MAAM,OAAO;iBACjC,UAAU,EAAE;iBACZ,KAAK,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YACzD,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YACtD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;gBACzC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;gBAClC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACf,CAAC;YACD,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;gBACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC7B,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACf,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,yCAAyC,CAAC;SACtD,kBAAkB,EAAE;SACpB,oBAAoB,EAAE;SACtB,MAAM,CAAC,KAAK,EAAE,QAAiB,EAAE,OAA2B,EAAE,EAAE;QAC/D,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;QAEnC,MAAM,GAAG,GAAG,2BAA2B,CAAC,aAAa,CAAC,CAAC;QACvD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,IAAI,CAAC,QAAQ,CAAC,mDAAmD,CAAC,CAAC;YACnE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,QAAQ,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC;QAED,MAAM,gBAAgB,GAAG,gCAAgC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvE,MAAM,kBAAkB,GAAG,IAAI,kBAAkB,CAC/C,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAC/B,gBAAgB,CACjB,CAAC;QACF,IAAI,cAAc,GAA0B,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAEjF,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,cAAc,GAAG,MAAM,OAAO;qBAC3B,UAAU,EAAE;qBACZ,KAAK,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBACzD,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YACxD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;oBACzC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;oBAClC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACf,CAAC;gBACD,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;oBACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBAC7B,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACf,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,CAAC,GAAG,cAAc,CAAC,eAAe,EAAE,EAAE,GAAG,aAAa,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/src/config.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Configuration management for Latchkey.
+ */
+export declare class InsecureFilePermissionsError extends Error {
+    constructor(filePath: string, permissions: number);
+}
+export declare const DEFAULT_KEYRING_SERVICE_NAME = "latchkey";
+export declare const DEFAULT_KEYRING_ACCOUNT_NAME = "encryption-key";
+/**
+ * Configuration for Latchkey, sourced from environment variables with sensible defaults.
+ */
+export declare class Config {
+    readonly credentialStorePath: string;
+    readonly browserStatePath: string;
+    readonly curlCommand: string;
+    /**
+     * Encryption key override from environment variable.
+     * If set, this key will be used instead of the system keychain.
+     * The key should be a base64-encoded 256-bit (32-byte) value.
+     */
+    readonly encryptionKeyOverride: string | null;
+    readonly serviceName: string;
+    readonly accountName: string;
+    constructor(getEnv?: (name: string) => string | undefined);
+    /**
+     * Check that sensitive files have secure permissions.
+     * Throws InsecureFilePermissionsError if any file is readable by group or others.
+     */
+    checkSensitiveFilePermissions(): void;
+}
+/**
+ * Global configuration singleton, initialized from process.env at import time.
+ */
+export declare const CONFIG: Config;
+//# sourceMappingURL=config.d.ts.map

package/dist/src/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAOH,qBAAa,4BAA6B,SAAQ,KAAK;gBACzC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM;CAOlD;AASD,eAAO,MAAM,4BAA4B,aAAa,CAAC;AACvD,eAAO,MAAM,4BAA4B,mBAAmB,CAAC;AAmB7D;;GAEG;AACH,qBAAa,MAAM;IACjB,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;gBAEjB,MAAM,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAuC;IAwBtF;;;OAGG;IACH,6BAA6B,IAAI,IAAI;CAmBtC;AAED;;GAEG;AACH,eAAO,MAAM,MAAM,QAAe,CAAC"}

package/dist/src/config.js

@@ -0,0 +1,96 @@
+/**
+ * Configuration management for Latchkey.
+ */
+import { existsSync, statSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { isKeychainAvailable } from './keychain.js';
+export class InsecureFilePermissionsError extends Error {
+    constructor(filePath, permissions) {
+        const permissionsOctal = permissions.toString(8).padStart(3, '0');
+        super(`File ${filePath} has insecure permissions (${permissionsOctal}). Run: chmod 600 ${filePath}`);
+        this.name = 'InsecureFilePermissionsError';
+    }
+}
+const LATCHKEY_STORE_ENV_VAR = 'LATCHKEY_STORE';
+const LATCHKEY_BROWSER_STATE_ENV_VAR = 'LATCHKEY_BROWSER_STATE';
+const LATCHKEY_CURL_PATH_ENV_VAR = 'LATCHKEY_CURL_PATH';
+const LATCHKEY_ENCRYPTION_KEY_ENV_VAR = 'LATCHKEY_ENCRYPTION_KEY';
+const LATCHKEY_KEYRING_SERVICE_NAME_ENV_VAR = 'LATCHKEY_KEYRING_SERVICE_NAME';
+const LATCHKEY_KEYRING_ACCOUNT_NAME_ENV_VAR = 'LATCHKEY_KEYRING_ACCOUNT_NAME';
+export const DEFAULT_KEYRING_SERVICE_NAME = 'latchkey';
+export const DEFAULT_KEYRING_ACCOUNT_NAME = 'encryption-key';
+function getDefaultCredentialStorePath(encryptionEnabled) {
+    const filename = encryptionEnabled ? 'credentials.json.enc' : 'credentials.json';
+    return join(homedir(), '.latchkey', filename);
+}
+function getDefaultBrowserStatePath(encryptionEnabled) {
+    const filename = encryptionEnabled ? 'browser_state.json.enc' : 'browser_state.json';
+    return join(homedir(), '.latchkey', filename);
+}
+function resolvePathWithTildeExpansion(path) {
+    if (path.startsWith('~')) {
+        return resolve(homedir(), path.slice(2));
+    }
+    return resolve(path);
+}
+/**
+ * Configuration for Latchkey, sourced from environment variables with sensible defaults.
+ */
+export class Config {
+    credentialStorePath;
+    browserStatePath;
+    curlCommand;
+    /**
+     * Encryption key override from environment variable.
+     * If set, this key will be used instead of the system keychain.
+     * The key should be a base64-encoded 256-bit (32-byte) value.
+     */
+    encryptionKeyOverride;
+    serviceName;
+    accountName;
+    constructor(getEnv = (name) => process.env[name]) {
+        this.curlCommand = getEnv(LATCHKEY_CURL_PATH_ENV_VAR) ?? 'curl';
+        this.encryptionKeyOverride = getEnv(LATCHKEY_ENCRYPTION_KEY_ENV_VAR) ?? null;
+        this.serviceName =
+            getEnv(LATCHKEY_KEYRING_SERVICE_NAME_ENV_VAR) ?? DEFAULT_KEYRING_SERVICE_NAME;
+        this.accountName =
+            getEnv(LATCHKEY_KEYRING_ACCOUNT_NAME_ENV_VAR) ?? DEFAULT_KEYRING_ACCOUNT_NAME;
+        // Determine if encryption will be enabled (either via key override or keychain)
+        const encryptionEnabled = this.encryptionKeyOverride !== null ||
+            isKeychainAvailable(this.serviceName, this.accountName);
+        const credentialStoreEnv = getEnv(LATCHKEY_STORE_ENV_VAR);
+        this.credentialStorePath = credentialStoreEnv
+            ? resolvePathWithTildeExpansion(credentialStoreEnv)
+            : getDefaultCredentialStorePath(encryptionEnabled);
+        const browserStateEnv = getEnv(LATCHKEY_BROWSER_STATE_ENV_VAR);
+        this.browserStatePath = browserStateEnv
+            ? resolvePathWithTildeExpansion(browserStateEnv)
+            : getDefaultBrowserStatePath(encryptionEnabled);
+    }
+    /**
+     * Check that sensitive files have secure permissions.
+     * Throws InsecureFilePermissionsError if any file is readable by group or others.
+     */
+    checkSensitiveFilePermissions() {
+        const filesToCheck = [this.credentialStorePath, this.browserStatePath];
+        for (const filePath of filesToCheck) {
+            if (!existsSync(filePath)) {
+                continue;
+            }
+            const stats = statSync(filePath);
+            if (stats.isDirectory()) {
+                continue;
+            }
+            const permissions = stats.mode & 0o777;
+            if ((permissions & 0o077) !== 0) {
+                throw new InsecureFilePermissionsError(filePath, permissions);
+            }
+        }
+    }
+}
+/**
+ * Global configuration singleton, initialized from process.env at import time.
+ */
+export const CONFIG = new Config();
+//# sourceMappingURL=config.js.map

package/dist/src/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEpD,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACrD,YAAY,QAAgB,EAAE,WAAmB;QAC/C,MAAM,gBAAgB,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAClE,KAAK,CACH,QAAQ,QAAQ,8BAA8B,gBAAgB,qBAAqB,QAAQ,EAAE,CAC9F,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AAED,MAAM,sBAAsB,GAAG,gBAAgB,CAAC;AAChD,MAAM,8BAA8B,GAAG,wBAAwB,CAAC;AAChE,MAAM,0BAA0B,GAAG,oBAAoB,CAAC;AACxD,MAAM,+BAA+B,GAAG,yBAAyB,CAAC;AAClE,MAAM,qCAAqC,GAAG,+BAA+B,CAAC;AAC9E,MAAM,qCAAqC,GAAG,+BAA+B,CAAC;AAE9E,MAAM,CAAC,MAAM,4BAA4B,GAAG,UAAU,CAAC;AACvD,MAAM,CAAC,MAAM,4BAA4B,GAAG,gBAAgB,CAAC;AAE7D,SAAS,6BAA6B,CAAC,iBAA0B;IAC/D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,kBAAkB,CAAC;IACjF,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,0BAA0B,CAAC,iBAA0B;IAC5D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACrF,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,6BAA6B,CAAC,IAAY;IACjD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,MAAM;IACR,mBAAmB,CAAS;IAC5B,gBAAgB,CAAS;IACzB,WAAW,CAAS;IAC7B;;;;OAIG;IACM,qBAAqB,CAAgB;IACrC,WAAW,CAAS;IACpB,WAAW,CAAS;IAE7B,YAAY,SAA+C,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QACpF,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,0BAA0B,CAAC,IAAI,MAAM,CAAC;QAChE,IAAI,CAAC,qBAAqB,GAAG,MAAM,CAAC,+BAA+B,CAAC,IAAI,IAAI,CAAC;QAC7E,IAAI,CAAC,WAAW;YACd,MAAM,CAAC,qCAAqC,CAAC,IAAI,4BAA4B,CAAC;QAChF,IAAI,CAAC,WAAW;YACd,MAAM,CAAC,qCAAqC,CAAC,IAAI,4BAA4B,CAAC;QAEhF,gFAAgF;QAChF,MAAM,iBAAiB,GACrB,IAAI,CAAC,qBAAqB,KAAK,IAAI;YACnC,mBAAmB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAE1D,MAAM,kBAAkB,GAAG,MAAM,CAAC,sBAAsB,CAAC,CAAC;QAC1D,IAAI,CAAC,mBAAmB,GAAG,kBAAkB;YAC3C,CAAC,CAAC,6BAA6B,CAAC,kBAAkB,CAAC;YACnD,CAAC,CAAC,6BAA6B,CAAC,iBAAiB,CAAC,CAAC;QAErD,MAAM,eAAe,GAAG,MAAM,CAAC,8BAA8B,CAAC,CAAC;QAC/D,IAAI,CAAC,gBAAgB,GAAG,eAAe;YACrC,CAAC,CAAC,6BAA6B,CAAC,eAAe,CAAC;YAChD,CAAC,CAAC,0BAA0B,CAAC,iBAAiB,CAAC,CAAC;IACpD,CAAC;IAED;;;OAGG;IACH,6BAA6B;QAC3B,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAEvE,KAAK,MAAM,QAAQ,IAAI,YAAY,EAAE,CAAC;YACpC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1B,SAAS;YACX,CAAC;YAED,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACjC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,SAAS;YACX,CAAC;YAED,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC;YACvC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,4BAA4B,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC"}

package/dist/src/curl.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Curl subprocess utilities.
+ */
+export interface CurlResult {
+    readonly returncode: number;
+    readonly stdout: string;
+    readonly stderr: string;
+}
+/**
+ * Type for the subprocess runner function (no output capture, for interactive use).
+ */
+export type SubprocessRunner = (args: readonly string[]) => CurlResult;
+/**
+ * Type for the capturing subprocess runner function (captures output).
+ */
+export type CapturingSubprocessRunner = (args: readonly string[], timeout: number) => CurlResult;
+export declare function setSubprocessRunner(runner: SubprocessRunner): void;
+export declare function resetSubprocessRunner(): void;
+export declare function setCapturingSubprocessRunner(runner: CapturingSubprocessRunner): void;
+export declare function resetCapturingSubprocessRunner(): void;
+/**
+ * Run curl without capturing output (for interactive CLI use).
+ */
+export declare function run(args: readonly string[]): CurlResult;
+/**
+ * Run curl with output capture (for credential checking).
+ */
+export declare function runCaptured(args: readonly string[], timeout?: number): CurlResult;
+//# sourceMappingURL=curl.d.ts.map

package/dist/src/curl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"curl.d.ts","sourceRoot":"","sources":["../../src/curl.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,UAAU,CAAC;AAEvE;;GAEG;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,KAAK,UAAU,CAAC;AA4BjG,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAElE;AAED,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C;AAED,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,yBAAyB,GAAG,IAAI,CAEpF;AAED,wBAAgB,8BAA8B,IAAI,IAAI,CAErD;AAED;;GAEG;AACH,wBAAgB,GAAG,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,CAEvD;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,SAAK,GAAG,UAAU,CAE7E"}

package/dist/src/curl.js

@@ -0,0 +1,53 @@
+/**
+ * Curl subprocess utilities.
+ */
+import { spawnSync } from 'node:child_process';
+import { CONFIG } from './config.js';
+function defaultSubprocessRunner(args) {
+    const result = spawnSync(CONFIG.curlCommand, args, {
+        stdio: ['inherit', 'inherit', 'inherit'],
+    });
+    return {
+        returncode: result.status ?? 1,
+        stdout: '',
+        stderr: '',
+    };
+}
+function defaultCapturingSubprocessRunner(args, timeout) {
+    const result = spawnSync(CONFIG.curlCommand, args, {
+        encoding: 'utf-8',
+        timeout: timeout * 1000,
+    });
+    return {
+        returncode: result.status ?? 1,
+        stdout: result.stdout,
+        stderr: result.stderr,
+    };
+}
+let subprocessRunner = defaultSubprocessRunner;
+let capturingSubprocessRunner = defaultCapturingSubprocessRunner;
+export function setSubprocessRunner(runner) {
+    subprocessRunner = runner;
+}
+export function resetSubprocessRunner() {
+    subprocessRunner = defaultSubprocessRunner;
+}
+export function setCapturingSubprocessRunner(runner) {
+    capturingSubprocessRunner = runner;
+}
+export function resetCapturingSubprocessRunner() {
+    capturingSubprocessRunner = defaultCapturingSubprocessRunner;
+}
+/**
+ * Run curl without capturing output (for interactive CLI use).
+ */
+export function run(args) {
+    return subprocessRunner(args);
+}
+/**
+ * Run curl with output capture (for credential checking).
+ */
+export function runCaptured(args, timeout = 10) {
+    return capturingSubprocessRunner(args, timeout);
+}
+//# sourceMappingURL=curl.js.map

package/dist/src/curl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"curl.js","sourceRoot":"","sources":["../../src/curl.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,SAAS,EAAoB,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAkBrC,SAAS,uBAAuB,CAAC,IAAuB;IACtD,MAAM,MAAM,GAA6B,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,IAAgB,EAAE;QACvF,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;KACzC,CAAC,CAAC;IACH,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC;QAC9B,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,EAAE;KACX,CAAC;AACJ,CAAC;AAED,SAAS,gCAAgC,CAAC,IAAuB,EAAE,OAAe;IAChF,MAAM,MAAM,GAA6B,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,IAAgB,EAAE;QACvF,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,OAAO,GAAG,IAAI;KACxB,CAAC,CAAC;IACH,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC;QAC9B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC;AACJ,CAAC;AAED,IAAI,gBAAgB,GAAqB,uBAAuB,CAAC;AACjE,IAAI,yBAAyB,GAA8B,gCAAgC,CAAC;AAE5F,MAAM,UAAU,mBAAmB,CAAC,MAAwB;IAC1D,gBAAgB,GAAG,MAAM,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,gBAAgB,GAAG,uBAAuB,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,MAAiC;IAC5E,yBAAyB,GAAG,MAAM,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,8BAA8B;IAC5C,yBAAyB,GAAG,gCAAgC,CAAC;AAC/D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,GAAG,CAAC,IAAuB;IACzC,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,IAAuB,EAAE,OAAO,GAAG,EAAE;IAC/D,OAAO,yBAAyB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC"}

package/dist/src/encryptedStorage.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Encrypted file storage with automatic key management.
+ * Encryption keys are retrieved from:
+ * 1. Provided encryptionKeyOverride option
+ * 2. System keychain
+ * 3. Generated and stored in keychain (first run)
+ *
+ * Falls back to unencrypted storage with chmod 600 if keychain is unavailable.
+ */
+export declare class EncryptedStorageError extends Error {
+    constructor(message: string);
+}
+export declare class PathIsDirectoryError extends Error {
+    constructor(filePath: string);
+}
+export interface EncryptedStorageOptions {
+    encryptionKeyOverride?: string | null;
+    serviceName?: string;
+    accountName?: string;
+}
+/**
+ * Manages encrypted file storage with automatic key handling.
+ */
+export declare class EncryptedStorage {
+    private readonly key;
+    constructor(options?: EncryptedStorageOptions);
+    private static initializeKey;
+    private isEncryptionEnabled;
+    /**
+     * Read and decrypt a file.
+     */
+    readFile(filePath: string): string | null;
+    /**
+     * Encrypt and write data to a file.
+     * Creates parent directories. New files are created with chmod 600.
+     */
+    writeFile(filePath: string, content: string): void;
+}
+//# sourceMappingURL=encryptedStorage.d.ts.map

package/dist/src/encryptedStorage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryptedStorage.d.ts","sourceRoot":"","sources":["../../src/encryptedStorage.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAeH,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,QAAQ,EAAE,MAAM;CAI7B;AAED,MAAM,WAAW,uBAAuB;IACtC,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAgB;gBAExB,OAAO,GAAE,uBAA4B;IAIjD,OAAO,CAAC,MAAM,CAAC,aAAa;IAkC5B,OAAO,CAAC,mBAAmB;IAI3B;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAsCzC;;;OAGG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;CAwBnD"}