mc8yp 2.8.2 → 2.8.4

package/dist/{add-B3clXbA3.mjs → add-Sf15gY0D.mjs}

@@ -1,5 +1,4 @@
-import { t as __commonJSMin } from "./rolldown-runtime-CMFfr-1z.mjs";
-import { a as parse, c as url, i as setStoredC8yAuth, l as consola, o as pipe, r as getStoredC8yAuth, s as string, t as cleanTenantUrl, u as defineCommand } from "./cli.mjs";
+import { a as requestTfaSession, c as pipe, d as consola, f as defineCommand, i as getStoredC8yAuth, l as string, m as __commonJSMin, n as cleanTenantUrl, o as setStoredC8yAuth, s as parse, t as TfaRequiredError, u as url } from "./cli.mjs";
 import process$1, { exit, stdin, stdout } from "node:process";
 import { styleText } from "node:util";
 import "node:path";
@@ -637,6 +636,28 @@ let u$1 = class u extends y {
 		});
 	}
 };
+var n = class extends y {
+	get userInputWithCursor() {
+		if (this.state === "submit") return this.userInput;
+		const t = this.userInput;
+		if (this.cursor >= t.length) return `${this.userInput}\u2588`;
+		const r = t.slice(0, this.cursor), s = t.slice(this.cursor, this.cursor + 1), e = t.slice(this.cursor + 1);
+		return `${r}${styleText("inverse", s)}${e}`;
+	}
+	get cursor() {
+		return this._cursor;
+	}
+	constructor(t) {
+		super({
+			...t,
+			initialUserInput: t.initialUserInput ?? t.initialValue
+		}), this.on("userInput", (r) => {
+			this._setValue(r);
+		}), this.on("finalize", () => {
+			this.value || (this.value = t.defaultValue), this.value === void 0 && (this.value = "");
+		});
+	}
+};
 //#endregion
 //#region node_modules/.pnpm/@clack+prompts@1.8.0/node_modules/@clack/prompts/dist/index.mjs
 function isUnicodeSupported() {
@@ -698,6 +719,47 @@ ${e ? styleText("cyan", S_BAR_END) : ""}
 }).prompt();
 `${styleText("dim", "↑/↓")}`, `${styleText("dim", "Enter:")}`;
 `${styleText("gray", S_BAR)}`;
+const text = (t) => new n({
+	validate: t.validate,
+	placeholder: t.placeholder,
+	defaultValue: t.defaultValue,
+	initialValue: t.initialValue,
+	output: t.output,
+	signal: t.signal,
+	input: t.input,
+	render() {
+		const r = t?.withGuide ?? settings.withGuide, l = `${`${r ? `${styleText("gray", S_BAR)}
+` : ""}${symbol(this.state)}  `}${t.message}
+`, d = t.placeholder && t.placeholder.length > 0 ? styleText("inverse", t.placeholder[0]) + styleText("dim", t.placeholder.slice(1)) : styleText(["inverse", "hidden"], "_"), o = this.userInput ? this.userInputWithCursor : d, s = this.value ?? "";
+		switch (this.state) {
+			case "validating": {
+				const n = r ? `${styleText("cyan", S_BAR)}  ` : "", i = r ? styleText("cyan", S_BAR_END) : "";
+				return `${l}${n}${styleText("dim", o)}
+${i}  ${styleText("dim", "Validating...")}
+`;
+			}
+			case "error": {
+				const n = this.error ? `  ${styleText("yellow", this.error)}` : "", i = r ? `${styleText("yellow", S_BAR)}  ` : "", c = r ? styleText("yellow", S_BAR_END) : "";
+				return `${l.trim()}
+${i}${o}
+${c}${n}
+`;
+			}
+			case "submit": {
+				const n = s ? `${r ? "  " : ""}${styleText("dim", s)}` : "";
+				return `${l}${r ? styleText("gray", S_BAR) : ""}${n}`;
+			}
+			case "cancel": {
+				const n = s ? `  ${styleText(["strikethrough", "dim"], s)}` : "", i = r ? styleText("gray", S_BAR) : "";
+				return `${l}${i}${n}${s.trim() ? `
+${i}` : ""}`;
+			}
+			default: return `${l}${r ? `${styleText("cyan", S_BAR)}  ` : ""}${o}
+${r ? styleText("cyan", S_BAR_END) : ""}
+`;
+		}
+	}
+}).prompt();
 //#endregion
 //#region src/cli/subcommands/subcommands/add.ts
 const command = defineCommand({
@@ -712,6 +774,12 @@ const command = defineCommand({
 				cancel: "reject"
 			});
 			parse(pipe(string(), url()), tenantUrl);
+			const { protocol, hostname } = new URL(tenantUrl);
+			if (protocol === "http:" && ![
+				"localhost",
+				"127.0.0.1",
+				"[::1]"
+			].includes(hostname)) consola.warn(`${tenantUrl} uses plain http — your password (and TFA code) would be sent unencrypted. Use https unless this is a trusted local setup.`);
 			const user = await consola.prompt("Username:", {
 				type: "text",
 				cancel: "reject"
@@ -737,15 +805,38 @@ const command = defineCommand({
 					exit();
 				}
 			}
-			await setStoredC8yAuth({
-				tenantUrl,
+			const creds = {
+				tenantUrl: cleanTenantUrl(tenantUrl),
 				user,
 				password: passwordPrompt
+			};
+			try {
+				await setStoredC8yAuth(creds);
+				consola.success("Credentials saved successfully!");
+				exit();
+				return;
+			} catch (error) {
+				if (!(error instanceof TfaRequiredError)) throw error;
+			}
+			consola.info("Two-factor authentication is enabled for this user.");
+			const tfaCode = await text({
+				message: "TFA code from your authenticator app:",
+				validate: (value) => /^\s*\d{6,8}\s*$/.test(value ?? "") ? void 0 : "Enter the 6-digit code."
+			});
+			if (isCancel(tfaCode)) {
+				cancel("Cancelled.");
+				exit();
+				return;
+			}
+			const tfaSession = await requestTfaSession(creds, tfaCode);
+			await setStoredC8yAuth({
+				...creds,
+				tfaSession
 			});
-			consola.success("Credentials saved successfully!");
+			consola.success(`Credentials saved successfully! TFA session valid until ${new Date(tfaSession.expiresAt).toLocaleString()}.`);
 			exit();
 		} catch (error) {
-			consola.error("Failed to add credentials:", error);
+			consola.error(`Failed to add credentials: ${error instanceof Error ? error.message : String(error)}`);
 			exit();
 		}
 	}