lua-cli 3.15.3 → 3.16.0

package/dist/services/analytics.js

@@ -1,317 +0,0 @@
-/**
- * Analytics Service
- * Non-blocking PostHog telemetry for CLI usage tracking.
- *
- * Opt-out: Set LUA_TELEMETRY=false env var, or run `lua telemetry off`.
- * All tracking is anonymous (hashed API key or machine UUID).
- * Analytics never blocks commands or throws errors to the user.
- */
-import { PostHog } from 'posthog-node';
-import crypto from 'crypto';
-import { readFileSync, writeFileSync, mkdirSync, existsSync } from 'fs';
-import { platform, release, arch } from 'os';
-import { POSTHOG_API_KEY, POSTHOG_HOST, TELEMETRY_FILE, CLI_CONFIG_DIR } from '../config/constants.js';
-import { getToken, checkApiKey } from '../services/auth.js';
-import { readYamlConfig } from '../utils/files.js';
-let client = null;
-let sessionConfig = null;
-let sessionDistinctId = null;
-let sessionContext = {};
-// =============================================================================
-// Opt-out Logic
-// =============================================================================
-function isTelemetryDisabled() {
-    const envVal = process.env.LUA_TELEMETRY;
-    if (envVal !== undefined) {
-        return ['false', '0', 'off', 'no'].includes(envVal.toLowerCase());
-    }
-    const config = loadTelemetryConfig();
-    return !config.enabled;
-}
-function loadTelemetryConfig() {
-    if (sessionConfig)
-        return sessionConfig;
-    try {
-        if (existsSync(TELEMETRY_FILE)) {
-            sessionConfig = JSON.parse(readFileSync(TELEMETRY_FILE, 'utf8'));
-            return sessionConfig;
-        }
-    }
-    catch {
-        // Corrupt file — regenerate
-    }
-    sessionConfig = {
-        enabled: true,
-        anonymousId: crypto.randomUUID(),
-        noticeShown: false,
-    };
-    saveTelemetryConfig(sessionConfig);
-    return sessionConfig;
-}
-function saveTelemetryConfig(config) {
-    try {
-        if (!existsSync(CLI_CONFIG_DIR)) {
-            mkdirSync(CLI_CONFIG_DIR, { recursive: true });
-        }
-        writeFileSync(TELEMETRY_FILE, JSON.stringify(config, null, 2), 'utf8');
-    }
-    catch {
-        // Silently ignore write failures
-    }
-}
-// =============================================================================
-// Distinct ID
-// =============================================================================
-function getDistinctId(apiKey) {
-    if (sessionDistinctId && !apiKey)
-        return sessionDistinctId;
-    if (apiKey) {
-        sessionDistinctId = crypto.createHash('sha256').update(apiKey).digest('hex').substring(0, 16);
-    }
-    else {
-        const config = loadTelemetryConfig();
-        sessionDistinctId = `anon_${config.anonymousId}`;
-    }
-    return sessionDistinctId;
-}
-// =============================================================================
-// PostHog Client Lifecycle
-// =============================================================================
-function getClient() {
-    if (isTelemetryDisabled())
-        return null;
-    if (!client) {
-        const apiKey = process.env.LUA_POSTHOG_KEY || POSTHOG_API_KEY;
-        if (!apiKey)
-            return null;
-        client = new PostHog(apiKey, {
-            host: POSTHOG_HOST,
-            flushAt: 1,
-            flushInterval: 0,
-        });
-    }
-    return client;
-}
-// =============================================================================
-// Public API
-// =============================================================================
-/**
- * Show first-run telemetry notice (once per install).
- */
-export function showTelemetryNoticeIfNeeded() {
-    if (isTelemetryDisabled())
-        return;
-    const config = loadTelemetryConfig();
-    if (config.noticeShown)
-        return;
-    console.error('');
-    console.error('  Lua CLI collects usage data to improve the developer experience.');
-    console.error('  To opt out, run: lua telemetry off');
-    console.error('  Or set: LUA_TELEMETRY=false');
-    console.error('');
-    config.noticeShown = true;
-    saveTelemetryConfig(config);
-}
-/**
- * Opportunistically load API key and yaml config to enrich analytics context.
- * Called from withErrorHandling before every command. Never throws.
- */
-export async function enrichAnalyticsContext() {
-    if (isTelemetryDisabled())
-        return;
-    try {
-        let apiKey = null;
-        try {
-            apiKey = getToken();
-        }
-        catch {
-            /* no key — enrich without identity */
-        }
-        if (apiKey) {
-            // Check if transitioning from anonymous to authenticated
-            const previousDistinctId = sessionDistinctId;
-            const wasAnonymous = previousDistinctId?.startsWith('anon_');
-            sessionContext.apiKey = apiKey;
-            // Link anonymous → authenticated identity in PostHog (once per session)
-            if (wasAnonymous) {
-                const newDistinctId = getDistinctId(apiKey);
-                const ph = getClient();
-                if (ph && previousDistinctId) {
-                    ph.alias({ distinctId: newDistinctId, alias: previousDistinctId });
-                }
-            }
-            // Identify user in PostHog with person properties (cached to avoid network call)
-            const currentHash = getDistinctId(apiKey);
-            const telemetryConfig = loadTelemetryConfig();
-            if (telemetryConfig.identifiedApiKeyHash === currentHash) {
-                // Cached — identify with stored data (no network call)
-                const ph = getClient();
-                if (ph) {
-                    ph.identify({
-                        distinctId: currentHash,
-                        properties: {
-                            email: telemetryConfig.identifiedEmail || null,
-                            name: telemetryConfig.identifiedName || null,
-                            os: platform(),
-                        },
-                    });
-                }
-            }
-            else {
-                // New API key or first time — fetch user data and cache
-                try {
-                    const userData = await checkApiKey(apiKey);
-                    if (userData) {
-                        telemetryConfig.identifiedApiKeyHash = currentHash;
-                        telemetryConfig.identifiedEmail = userData.email;
-                        telemetryConfig.identifiedName = userData.fullName;
-                        saveTelemetryConfig(telemetryConfig);
-                        const ph = getClient();
-                        if (ph) {
-                            ph.identify({
-                                distinctId: currentHash,
-                                properties: {
-                                    email: userData.email || null,
-                                    name: userData.fullName || null,
-                                    os: platform(),
-                                },
-                            });
-                        }
-                    }
-                }
-                catch {
-                    // Best-effort — don't block commands
-                }
-            }
-        }
-        const config = readYamlConfig();
-        if (config?.agent?.agentId) {
-            sessionContext.agentId = config.agent.agentId;
-        }
-        if (config?.agent?.orgId) {
-            sessionContext.orgId = config.agent.orgId;
-        }
-    }
-    catch {
-        // Best-effort — never block the command
-    }
-}
-/**
- * Track a command execution event. Fire-and-forget, never throws.
- */
-export function trackCommand(params) {
-    try {
-        const ph = getClient();
-        if (!ph)
-            return;
-        const distinctId = getDistinctId(sessionContext.apiKey);
-        ph.capture({
-            distinctId,
-            event: 'cli_command_executed',
-            properties: {
-                command: params.commandName,
-                success: params.success,
-                duration_ms: params.durationMs,
-                cli_version: params.cliVersion,
-                error_message: params.error?.substring(0, 200) || null,
-                os: platform(),
-                os_version: release(),
-                arch: arch(),
-                node_version: process.version,
-                ci_mode: !!process.env.CI || !process.stdin.isTTY,
-                org_id: sessionContext.orgId || null,
-                agent_id: sessionContext.agentId || null,
-                ...params.properties,
-            },
-        });
-    }
-    catch {
-        // Never throw from analytics
-    }
-}
-/**
- * Track a specific named event with properties. Fire-and-forget, never throws.
- * Use for per-command events (e.g., 'cli_push_completed', 'cli_compile_completed').
- * Auto-enriched with distinct ID, OS, CLI version, and session context.
- */
-export function trackEvent(eventName, properties) {
-    try {
-        const ph = getClient();
-        if (!ph)
-            return;
-        const distinctId = getDistinctId(sessionContext.apiKey);
-        ph.capture({
-            distinctId,
-            event: eventName,
-            properties: {
-                os: platform(),
-                os_version: release(),
-                arch: arch(),
-                node_version: process.version,
-                ci_mode: !!process.env.CI || !process.stdin.isTTY,
-                org_id: sessionContext.orgId || null,
-                agent_id: sessionContext.agentId || null,
-                ...properties,
-            },
-        });
-    }
-    catch {
-        // Never throw from analytics
-    }
-}
-/**
- * Set telemetry enabled/disabled and persist.
- */
-export function setTelemetryEnabled(enabled) {
-    const config = loadTelemetryConfig();
-    config.enabled = enabled;
-    saveTelemetryConfig(config);
-}
-/**
- * Get current telemetry status.
- */
-export function getTelemetryStatus() {
-    const envVal = process.env.LUA_TELEMETRY;
-    const envOverride = envVal !== undefined;
-    return {
-        enabled: !isTelemetryDisabled(),
-        envOverride,
-    };
-}
-/**
- * Clears cached identity data from telemetry.json.
- * Called during re-authentication to ensure stale user data
- * is not carried over from a previous account.
- */
-export function clearIdentityCache() {
-    try {
-        const config = loadTelemetryConfig();
-        delete config.identifiedApiKeyHash;
-        delete config.identifiedEmail;
-        delete config.identifiedName;
-        saveTelemetryConfig(config);
-        // Also clear the in-memory session cache so enrichAnalyticsContext re-fetches
-        sessionDistinctId = null;
-    }
-    catch {
-        // Best-effort — never block auth flows
-    }
-}
-/**
- * Gracefully shutdown PostHog client.
- * Has a 1-second hard timeout to prevent blocking exit.
- */
-export async function shutdownAnalytics() {
-    if (!client)
-        return;
-    try {
-        await Promise.race([client.shutdown(), new Promise((resolve) => setTimeout(resolve, 1000).unref())]);
-    }
-    catch {
-        // Silently ignore shutdown errors
-    }
-    finally {
-        client = null;
-    }
-}
-//# sourceMappingURL=analytics.js.map

package/dist/services/analytics.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"analytics.js","sourceRoot":"","sources":["../../src/services/analytics.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACvG,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAWnD,IAAI,MAAM,GAAmB,IAAI,CAAC;AAClC,IAAI,aAAa,GAA2B,IAAI,CAAC;AACjD,IAAI,iBAAiB,GAAkB,IAAI,CAAC;AAC5C,IAAI,cAAc,GAA0D,EAAE,CAAC;AAE/E,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF,SAAS,mBAAmB;IAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACzC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;IACrC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;AACzB,CAAC;AAED,SAAS,mBAAmB;IAC1B,IAAI,aAAa;QAAE,OAAO,aAAa,CAAC;IAExC,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/B,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;YACjE,OAAO,aAAc,CAAC;QACxB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4BAA4B;IAC9B,CAAC;IAED,aAAa,GAAG;QACd,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,MAAM,CAAC,UAAU,EAAE;QAChC,WAAW,EAAE,KAAK;KACnB,CAAC;IACF,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACnC,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAuB;IAClD,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAChC,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,aAAa,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,iCAAiC;IACnC,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,cAAc;AACd,gFAAgF;AAEhF,SAAS,aAAa,CAAC,MAAsB;IAC3C,IAAI,iBAAiB,IAAI,CAAC,MAAM;QAAE,OAAO,iBAAiB,CAAC;IAE3D,IAAI,MAAM,EAAE,CAAC;QACX,iBAAiB,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChG,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACrC,iBAAiB,GAAG,QAAQ,MAAM,CAAC,WAAW,EAAE,CAAC;IACnD,CAAC;IAED,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,gFAAgF;AAChF,2BAA2B;AAC3B,gFAAgF;AAEhF,SAAS,SAAS;IAChB,IAAI,mBAAmB,EAAE;QAAE,OAAO,IAAI,CAAC;IAEvC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,eAAe,CAAC;QAC9D,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAEzB,MAAM,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE;YAC3B,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,CAAC;YACV,aAAa,EAAE,CAAC;SACjB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAChF,aAAa;AACb,gFAAgF;AAEhF;;GAEG;AACH,MAAM,UAAU,2BAA2B;IACzC,IAAI,mBAAmB,EAAE;QAAE,OAAO;IAElC,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;IACrC,IAAI,MAAM,CAAC,WAAW;QAAE,OAAO;IAE/B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACpF,OAAO,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACtD,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC/C,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAElB,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,IAAI,mBAAmB,EAAE;QAAE,OAAO;IAClC,IAAI,CAAC;QACH,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,GAAG,QAAQ,EAAE,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;QACxC,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,yDAAyD;YACzD,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;YAC7C,MAAM,YAAY,GAAG,kBAAkB,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;YAE7D,cAAc,CAAC,MAAM,GAAG,MAAM,CAAC;YAE/B,wEAAwE;YACxE,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;gBAC5C,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;gBACvB,IAAI,EAAE,IAAI,kBAAkB,EAAE,CAAC;oBAC7B,EAAE,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBACrE,CAAC;YACH,CAAC;YAED,iFAAiF;YACjF,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,eAAe,GAAG,mBAAmB,EAAE,CAAC;YAE9C,IAAI,eAAe,CAAC,oBAAoB,KAAK,WAAW,EAAE,CAAC;gBACzD,uDAAuD;gBACvD,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;gBACvB,IAAI,EAAE,EAAE,CAAC;oBACP,EAAE,CAAC,QAAQ,CAAC;wBACV,UAAU,EAAE,WAAW;wBACvB,UAAU,EAAE;4BACV,KAAK,EAAE,eAAe,CAAC,eAAe,IAAI,IAAI;4BAC9C,IAAI,EAAE,eAAe,CAAC,cAAc,IAAI,IAAI;4BAC5C,EAAE,EAAE,QAAQ,EAAE;yBACf;qBACF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,wDAAwD;gBACxD,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;oBAC3C,IAAI,QAAQ,EAAE,CAAC;wBACb,eAAe,CAAC,oBAAoB,GAAG,WAAW,CAAC;wBACnD,eAAe,CAAC,eAAe,GAAG,QAAQ,CAAC,KAAK,CAAC;wBACjD,eAAe,CAAC,cAAc,GAAG,QAAQ,CAAC,QAAQ,CAAC;wBACnD,mBAAmB,CAAC,eAAe,CAAC,CAAC;wBAErC,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;wBACvB,IAAI,EAAE,EAAE,CAAC;4BACP,EAAE,CAAC,QAAQ,CAAC;gCACV,UAAU,EAAE,WAAW;gCACvB,UAAU,EAAE;oCACV,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,IAAI;oCAC7B,IAAI,EAAE,QAAQ,CAAC,QAAQ,IAAI,IAAI;oCAC/B,EAAE,EAAE,QAAQ,EAAE;iCACf;6BACF,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,qCAAqC;gBACvC,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;QAChC,IAAI,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;YAC3B,cAAc,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QAChD,CAAC;QACD,IAAI,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YACzB,cAAc,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QAC5C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wCAAwC;IAC1C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,MAO5B;IACC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC,EAAE;YAAE,OAAO;QAEhB,MAAM,UAAU,GAAG,aAAa,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAExD,EAAE,CAAC,OAAO,CAAC;YACT,UAAU;YACV,KAAK,EAAE,sBAAsB;YAC7B,UAAU,EAAE;gBACV,OAAO,EAAE,MAAM,CAAC,WAAW;gBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,WAAW,EAAE,MAAM,CAAC,UAAU;gBAC9B,WAAW,EAAE,MAAM,CAAC,UAAU;gBAC9B,aAAa,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,IAAI;gBACtD,EAAE,EAAE,QAAQ,EAAE;gBACd,UAAU,EAAE,OAAO,EAAE;gBACrB,IAAI,EAAE,IAAI,EAAE;gBACZ,YAAY,EAAE,OAAO,CAAC,OAAO;gBAC7B,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;gBACjD,MAAM,EAAE,cAAc,CAAC,KAAK,IAAI,IAAI;gBACpC,QAAQ,EAAE,cAAc,CAAC,OAAO,IAAI,IAAI;gBACxC,GAAG,MAAM,CAAC,UAAU;aACrB;SACF,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,SAAiB,EAAE,UAAgC;IAC5E,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC,EAAE;YAAE,OAAO;QAEhB,MAAM,UAAU,GAAG,aAAa,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAExD,EAAE,CAAC,OAAO,CAAC;YACT,UAAU;YACV,KAAK,EAAE,SAAS;YAChB,UAAU,EAAE;gBACV,EAAE,EAAE,QAAQ,EAAE;gBACd,UAAU,EAAE,OAAO,EAAE;gBACrB,IAAI,EAAE,IAAI,EAAE;gBACZ,YAAY,EAAE,OAAO,CAAC,OAAO;gBAC7B,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;gBACjD,MAAM,EAAE,cAAc,CAAC,KAAK,IAAI,IAAI;gBACpC,QAAQ,EAAE,cAAc,CAAC,OAAO,IAAI,IAAI;gBACxC,GAAG,UAAU;aACd;SACF,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;IACrC,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACzC,MAAM,WAAW,GAAG,MAAM,KAAK,SAAS,CAAC;IACzC,OAAO;QACL,OAAO,EAAE,CAAC,mBAAmB,EAAE;QAC/B,WAAW;KACZ,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACrC,OAAO,MAAM,CAAC,oBAAoB,CAAC;QACnC,OAAO,MAAM,CAAC,eAAe,CAAC;QAC9B,OAAO,MAAM,CAAC,cAAc,CAAC;QAC7B,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC5B,8EAA8E;QAC9E,iBAAiB,GAAG,IAAI,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,uCAAuC;IACzC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACvG,CAAC;IAAC,MAAM,CAAC;QACP,kCAAkC;IACpC,CAAC;YAAS,CAAC;QACT,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/services/auth.d.ts

@@ -1,72 +0,0 @@
-/**
- * Authentication Service
- * Handles all authentication operations including API key management and OTP flows
- */
-import 'dotenv/config';
-import { UserData } from '../interfaces/admin.js';
-/**
- * Retrieves the API key from the following sources in priority order:
- * 1. LUA_API_KEY environment variable (CI/CD, Docker, manual export)
- *    — this also covers .env files, since dotenv/config (imported above)
- *    loads them into process.env before this function is called.
- * 2. ~/.lua-cli/credentials file (written by `lua auth configure`)
- *
- * Throws AuthenticationError with clear instructions if no key is found.
- */
-export declare function getToken(): string;
-/**
- * Returns the API key if present, or null if missing — never throws.
- *
- * Mirrors {@link getToken}'s priority order (env var, then credentials file)
- * but is safe to call from diagnostic / "doctor" code paths where authentication
- * is optional (e.g. `lua status`).
- */
-export declare function loadApiKey(): string | null;
-/**
- * Saves API key to ~/.lua-cli/credentials with owner-only permissions (0600).
- * Called by `lua auth configure` after successful server validation.
- *
- * @param apiKey - The API key to store
- */
-export declare function saveApiKey(apiKey: string): void;
-/**
- * Deletes the credentials file.
- * Called by `lua auth logout`.
- *
- * @returns true if deleted successfully, false if not found or deletion failed
- */
-export declare function deleteApiKey(): boolean;
-/**
- * Validates an API key with the server and retrieves user data.
- *
- * @param apiKey - The API key to validate
- * @returns Promise resolving to user data including admin info and organizations
- * @throws AuthenticationError if the API key is invalid
- */
-export declare function checkApiKey(apiKey: string): Promise<UserData>;
-/**
- * Requests an OTP (One-Time Password) to be sent to the specified email.
- * The OTP will be valid for a limited time and can be used once.
- *
- * @param email - Email address to send OTP to
- * @returns Promise resolving to true if OTP sent successfully, false otherwise
- */
-export declare function requestEmailOTP(email: string): Promise<boolean>;
-/**
- * Verifies an OTP code and retrieves a sign-in token.
- * The sign-in token can be used to generate an API key.
- *
- * @param email - Email address the OTP was sent to
- * @param pin - The OTP code received via email
- * @returns Promise resolving to sign-in token or null if verification failed
- */
-export declare function verifyOTPAndGetToken(email: string, pin: string): Promise<string | null>;
-/**
- * Generates a permanent API key using a sign-in token.
- * The sign-in token is obtained from successful OTP verification.
- *
- * @param signInToken - Token obtained from OTP verification
- * @returns Promise resolving to API key or null if generation failed
- */
-export declare function generateApiKey(signInToken: string): Promise<string | null>;
-//# sourceMappingURL=auth.d.ts.map

package/dist/services/auth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/services/auth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,eAAe,CAAC;AAGvB,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AASlD;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,IAAI,MAAM,CA+BjC;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,IAAI,MAAM,GAAG,IAAI,CAU1C;AAMD;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAG/C;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,IAAI,OAAO,CAOtC;AAMD;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CASnE;AAMD;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CASrE;AAED;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAS7F;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAShF"}

package/dist/services/auth.js

@@ -1,173 +0,0 @@
-/**
- * Authentication Service
- * Handles all authentication operations including API key management and OTP flows
- */
-import 'dotenv/config';
-import { readFileSync, writeFileSync, mkdirSync, unlinkSync } from 'fs';
-import { dirname } from 'path';
-import AuthApi from '../api/auth.api.service.js';
-import { BASE_URLS, CREDENTIALS_FILE } from '../config/constants.js';
-import { AuthenticationError } from '../errors/auth.error.js';
-// ============================================================================
-// TOKEN RESOLUTION
-// ============================================================================
-/**
- * Retrieves the API key from the following sources in priority order:
- * 1. LUA_API_KEY environment variable (CI/CD, Docker, manual export)
- *    — this also covers .env files, since dotenv/config (imported above)
- *    loads them into process.env before this function is called.
- * 2. ~/.lua-cli/credentials file (written by `lua auth configure`)
- *
- * Throws AuthenticationError with clear instructions if no key is found.
- */
-export function getToken() {
-    // Priority 1: Environment variable (also catches .env values loaded by dotenv)
-    if (process.env.LUA_API_KEY) {
-        return process.env.LUA_API_KEY;
-    }
-    // Priority 2: Credentials file (written by `lua auth configure`)
-    try {
-        const token = readFileSync(CREDENTIALS_FILE, 'utf8').trim();
-        if (token)
-            return token;
-    }
-    catch {
-        // File doesn't exist or is not readable — fall through to error
-    }
-    // Embed full remediation in the message and tell withErrorHandling not to
-    // append its generic credential hint — the three options below are richer
-    // than the wrapper's default for this specific case (no key at all).
-    throw new AuthenticationError('No API key found.\n' +
-        '\n' +
-        '  Authenticate using one of these methods:\n' +
-        '\n' +
-        '    ➜  lua auth configure\n' +
-        '    ➜  export LUA_API_KEY="your-api-key-here"\n' +
-        '    ➜  Add LUA_API_KEY=... to a .env file\n' +
-        '\n' +
-        '  🔑 Get your API key at https://admin.heylua.ai', 'invalid_credentials', undefined, true);
-}
-/**
- * Returns the API key if present, or null if missing — never throws.
- *
- * Mirrors {@link getToken}'s priority order (env var, then credentials file)
- * but is safe to call from diagnostic / "doctor" code paths where authentication
- * is optional (e.g. `lua status`).
- */
-export function loadApiKey() {
-    if (process.env.LUA_API_KEY) {
-        return process.env.LUA_API_KEY;
-    }
-    try {
-        const token = readFileSync(CREDENTIALS_FILE, 'utf8').trim();
-        return token || null;
-    }
-    catch {
-        return null;
-    }
-}
-// ============================================================================
-// CREDENTIALS FILE OPERATIONS (Local Storage)
-// ============================================================================
-/**
- * Saves API key to ~/.lua-cli/credentials with owner-only permissions (0600).
- * Called by `lua auth configure` after successful server validation.
- *
- * @param apiKey - The API key to store
- */
-export function saveApiKey(apiKey) {
-    mkdirSync(dirname(CREDENTIALS_FILE), { recursive: true });
-    writeFileSync(CREDENTIALS_FILE, apiKey, { mode: 0o600 });
-}
-/**
- * Deletes the credentials file.
- * Called by `lua auth logout`.
- *
- * @returns true if deleted successfully, false if not found or deletion failed
- */
-export function deleteApiKey() {
-    try {
-        unlinkSync(CREDENTIALS_FILE);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-// ============================================================================
-// API OPERATIONS (Server Authentication)
-// ============================================================================
-/**
- * Validates an API key with the server and retrieves user data.
- *
- * @param apiKey - The API key to validate
- * @returns Promise resolving to user data including admin info and organizations
- * @throws AuthenticationError if the API key is invalid
- */
-export async function checkApiKey(apiKey) {
-    const authApi = new AuthApi(BASE_URLS.API);
-    const result = await authApi.checkApiKey(apiKey);
-    if (!result.success) {
-        throw new AuthenticationError('Invalid API key');
-    }
-    return result.data;
-}
-// ============================================================================
-// EMAIL OTP AUTHENTICATION FLOW
-// ============================================================================
-/**
- * Requests an OTP (One-Time Password) to be sent to the specified email.
- * The OTP will be valid for a limited time and can be used once.
- *
- * @param email - Email address to send OTP to
- * @returns Promise resolving to true if OTP sent successfully, false otherwise
- */
-export async function requestEmailOTP(email) {
-    try {
-        const authApi = new AuthApi(BASE_URLS.AUTH);
-        const result = await authApi.sendOtp(email);
-        return result.success;
-    }
-    catch (error) {
-        console.error('❌ Error requesting OTP:', error);
-        return false;
-    }
-}
-/**
- * Verifies an OTP code and retrieves a sign-in token.
- * The sign-in token can be used to generate an API key.
- *
- * @param email - Email address the OTP was sent to
- * @param pin - The OTP code received via email
- * @returns Promise resolving to sign-in token or null if verification failed
- */
-export async function verifyOTPAndGetToken(email, pin) {
-    try {
-        const authApi = new AuthApi(BASE_URLS.AUTH);
-        const result = await authApi.verifyOtp(email, pin);
-        return result.success ? result.data.signInToken : null;
-    }
-    catch (error) {
-        console.error('❌ Error verifying OTP:', error);
-        return null;
-    }
-}
-/**
- * Generates a permanent API key using a sign-in token.
- * The sign-in token is obtained from successful OTP verification.
- *
- * @param signInToken - Token obtained from OTP verification
- * @returns Promise resolving to API key or null if generation failed
- */
-export async function generateApiKey(signInToken) {
-    try {
-        const authApi = new AuthApi(BASE_URLS.AUTH);
-        const result = await authApi.getApiKey(signInToken);
-        return result.success ? result.data.apiKey : null;
-    }
-    catch (error) {
-        console.error('❌ Error generating API key:', error);
-        return null;
-    }
-}
-//# sourceMappingURL=auth.js.map

package/dist/services/auth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/services/auth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,eAAe,CAAC;AACvB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAE/B,OAAO,OAAO,MAAM,4BAA4B,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE9D,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;;;;;;;GAQG;AACH,MAAM,UAAU,QAAQ;IACtB,+EAA+E;IAC/E,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QAC5B,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IACjC,CAAC;IAED,iEAAiE;IACjE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5D,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;IAClE,CAAC;IAED,0EAA0E;IAC1E,0EAA0E;IAC1E,qEAAqE;IACrE,MAAM,IAAI,mBAAmB,CAC3B,qBAAqB;QACnB,IAAI;QACJ,8CAA8C;QAC9C,IAAI;QACJ,6BAA6B;QAC7B,iDAAiD;QACjD,6CAA6C;QAC7C,IAAI;QACJ,kDAAkD,EACpD,qBAAqB,EACrB,SAAS,EACT,IAAI,CACL,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU;IACxB,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QAC5B,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IACjC,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5D,OAAO,KAAK,IAAI,IAAI,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,8CAA8C;AAC9C,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,SAAS,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,aAAa,CAAC,gBAAgB,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY;IAC1B,IAAI,CAAC;QACH,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,yCAAyC;AACzC,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAc;IAC9C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAEjD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,MAAM,CAAC,IAAK,CAAC;AACtB,CAAC;AAED,+EAA+E;AAC/E,gCAAgC;AAChC,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAa;IACjD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5C,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAa,EAAE,GAAW;IACnE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACnD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,WAAmB;IACtD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}