papermark 0.9.0 → 0.10.0

package/dist/index.js

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 
 // src/index.ts
+import { readFileSync as readFileSync3 } from "fs";
 import { Command as Command2 } from "commander";
 
 // src/commands/analytics.ts
@@ -790,6 +791,28 @@ async function tryOpenBrowser(url) {
   } catch {
   }
 }
+async function revokeToken(token) {
+  try {
+    const issuer = deriveIssuer();
+    const as = await discover(issuer);
+    if (!as.revocation_endpoint) return "unsupported";
+    const res = await fetch(as.revocation_endpoint, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/x-www-form-urlencoded",
+        Accept: "application/json"
+      },
+      body: new URLSearchParams({
+        token,
+        token_type_hint: "access_token",
+        client_id: CLIENT_ID
+      })
+    });
+    return res.ok ? "revoked" : "failed";
+  } catch {
+    return "failed";
+  }
+}
 
 // src/commands/auth.ts
 function registerAuthCommands(program2) {
@@ -814,9 +837,24 @@ function registerAuthCommands(program2) {
       }
     }
   );
-  program2.command("logout").description("Remove the stored API token").action(() => {
+  program2.command("logout").description("Remove the stored API token").action(async () => {
+    const token = getToken();
+    const source = getTokenSource();
+    const revocation = token && source === "config" ? await revokeToken(token) : "skipped";
     clearToken();
-    emit({ removed: true }, () => chalk3.green("\u2713") + " Token removed.");
+    if (revocation === "skipped" && (source === "env" || source === "credentials-file")) {
+      process.stderr.write(
+        chalk3.dim(`Note: token comes from ${source}; not revoked server-side.`) + "\n"
+      );
+    } else if (revocation === "failed") {
+      process.stderr.write(
+        chalk3.yellow("! ") + "Could not revoke the token server-side; it remains valid until expiry.\n"
+      );
+    }
+    emit(
+      { removed: true, revocation },
+      () => revocation === "revoked" ? chalk3.green("\u2713") + " Token revoked and removed." : chalk3.green("\u2713") + " Token removed."
+    );
   });
   program2.command("whoami").description("Show the active token and API URL").action(() => {
     const token = getToken();
@@ -1203,6 +1241,18 @@ function parsePermissionEntries(opts) {
   );
 }
 
+// src/validate.ts
+function parseLimit(value) {
+  if (value === void 0) return void 0;
+  const n = Number(value);
+  if (!Number.isInteger(n) || n < 1 || n > 100) {
+    throw new ValidationError(
+      `Invalid --limit ${JSON.stringify(value)}. Expected an integer 1-100.`
+    );
+  }
+  return n;
+}
+
 // src/commands/datarooms.ts
 function registerDataroomsCommands(program2) {
   const dr = program2.command("datarooms").alias("dr").description("Manage datarooms");
@@ -1211,7 +1261,7 @@ function registerDataroomsCommands(program2) {
       if (opts.json) setRuntime({ json: true });
       try {
         const res = await api.listDatarooms({
-          limit: opts.limit ? Number(opts.limit) : void 0,
+          limit: parseLimit(opts.limit),
           cursor: opts.cursor,
           query: opts.query
         });
@@ -1280,14 +1330,14 @@ More results: --cursor ${res.next_cursor}`) : out;
           const norm = v.toLowerCase();
           if (norm === "on") return true;
           if (norm === "off") return false;
-          throw new Error(
+          throw new ValidationError(
             `Invalid value for ${flag}: ${JSON.stringify(v)} (expected "on" or "off").`
           );
         };
         const bulk = tri(opts.bulkDownload, "--bulk-download");
         if (bulk !== void 0) body.allow_bulk_download = bulk;
         if (Object.keys(body).length === 0) {
-          throw new Error(
+          throw new ValidationError(
             "Pass at least one field to update (e.g. --name, --description, --bulk-download off)."
           );
         }
@@ -1310,7 +1360,7 @@ More results: --cursor ${res.next_cursor}`) : out;
       try {
         const res = await api.listLinks({
           dataroom_id: id,
-          limit: opts.limit ? Number(opts.limit) : void 0,
+          limit: parseLimit(opts.limit),
           cursor: opts.cursor
         });
         emit(res, () => {
@@ -1339,7 +1389,7 @@ More results: --cursor ${res.next_cursor}`) : out;
       try {
         const res = await api.listVisitors({
           dataroom_id: id,
-          limit: opts.limit ? Number(opts.limit) : void 0,
+          limit: parseLimit(opts.limit),
           cursor: opts.cursor,
           email: opts.email
         });
@@ -1454,12 +1504,12 @@ More results: --cursor ${res.next_cursor}`) : out;
       try {
         const folderIsRoot = opts.folderId === "" || opts.folderId === "root";
         if (opts.root && opts.folderId !== void 0 && !folderIsRoot) {
-          throw new Error(
+          throw new ValidationError(
             "Pass either --root or --folder-id <fid>, not both."
           );
         }
         if (!opts.root && opts.folderId === void 0) {
-          throw new Error(
+          throw new ValidationError(
             'Pass --folder-id <fid>, or --root (or --folder-id "") to move to the dataroom root.'
           );
         }
@@ -1727,7 +1777,7 @@ More results: --cursor ${res.next_cursor}`) : out;
       if (opts.json) setRuntime({ json: true });
       try {
         const res = await api.listDataroomFolders(id, {
-          limit: opts.limit ? Number(opts.limit) : void 0,
+          limit: parseLimit(opts.limit),
           cursor: opts.cursor,
           parent_id: opts.parent
         });
@@ -1786,7 +1836,7 @@ More results: --cursor ${res.next_cursor}`) : out;
         if (opts.color !== void 0)
           body.color = opts.color === "" ? null : opts.color;
         if (Object.keys(body).length === 0) {
-          throw new Error(
+          throw new ValidationError(
             "Pass at least one of --name, --icon, --color to update."
           );
         }
@@ -1827,7 +1877,7 @@ More results: --cursor ${res.next_cursor}`) : out;
     async (id, fid, opts) => {
       try {
         if (opts.parent === void 0) {
-          throw new Error(
+          throw new ValidationError(
             "Pass --parent <fid> (use empty string to move to the root)."
           );
         }
@@ -1850,7 +1900,7 @@ More results: --cursor ${res.next_cursor}`) : out;
       if (opts.json) setRuntime({ json: true });
       try {
         const res = await api.listDataroomDocuments(id, {
-          limit: opts.limit ? Number(opts.limit) : void 0,
+          limit: parseLimit(opts.limit),
           cursor: opts.cursor,
           folder_id: opts.folder
         });
@@ -1986,7 +2036,7 @@ function registerDocumentsCommands(program2) {
     if (opts.json) setRuntime({ json: true });
     try {
       const res = await api.listDocuments({
-        limit: opts.limit ? Number(opts.limit) : void 0,
+        limit: parseLimit(opts.limit),
         cursor: opts.cursor
       });
       emit(res, () => {
@@ -2019,7 +2069,7 @@ More results: --cursor ${res.next_cursor}`) : out;
     try {
       const res = await api.searchDocuments(
         query,
-        opts.limit ? Number(opts.limit) : void 0
+        parseLimit(opts.limit)
       );
       emit(res, () => {
         const rows = res.data.map((d) => ({
@@ -2043,7 +2093,7 @@ More results: --cursor ${res.next_cursor}`) : out;
           body.folder_id = opts.folderId === "" ? null : opts.folderId;
         }
         if (Object.keys(body).length === 0) {
-          throw new Error(
+          throw new ValidationError(
             "Pass at least one of --name or --folder-id to update."
           );
         }
@@ -2073,8 +2123,13 @@ More results: --cursor ${res.next_cursor}`) : out;
     async (filePath, opts) => {
       const spinner = ora2();
       try {
-        const stats = await stat(filePath);
-        if (!stats.isFile()) throw new Error(`${filePath} is not a file.`);
+        const stats = await stat(filePath).catch((statErr) => {
+          throw new ValidationError(
+            `Cannot read ${filePath}: ${statErr.message}`,
+            { code: statErr.code }
+          );
+        });
+        if (!stats.isFile()) throw new ValidationError(`${filePath} is not a file.`);
         const fileName = opts.name ?? basename(filePath);
         const contentType = lookupMimeType(filePath) || "application/octet-stream";
         spinner.start("Requesting upload URL");
@@ -2083,6 +2138,15 @@ More results: --cursor ${res.next_cursor}`) : out;
           content_type: contentType,
           content_length: stats.size
         });
+        if (getRuntime().dryRun) {
+          spinner.stop();
+          process.stderr.write(
+            `[dry-run] PUT <presigned upload_url from the response above> (file: ${filePath}, ${humanSize(stats.size)})
+[dry-run] POST ${"/v1/documents"} (name, upload_id, folder_id, create_link)
+`
+          );
+          return;
+        }
         spinner.succeed("Got presigned URL");
         spinner.start(`Uploading ${humanSize(stats.size)}`);
         const fileStream = Readable.toWeb(createReadStream(filePath));
@@ -2193,8 +2257,13 @@ More results: --cursor ${res.next_cursor}`) : out;
   versions.command("add <id> <file>").description("Upload a new version of an existing document").action(async (id, filePath) => {
     const spinner = ora2();
     try {
-      const stats = await stat(filePath);
-      if (!stats.isFile()) throw new Error(`${filePath} is not a file.`);
+      const stats = await stat(filePath).catch((statErr) => {
+        throw new ValidationError(
+          `Cannot read ${filePath}: ${statErr.message}`,
+          { code: statErr.code }
+        );
+      });
+      if (!stats.isFile()) throw new ValidationError(`${filePath} is not a file.`);
       const fileName = basename(filePath);
       const contentType = lookupMimeType(filePath) || "application/octet-stream";
       spinner.start("Requesting upload URL");
@@ -2203,6 +2272,15 @@ More results: --cursor ${res.next_cursor}`) : out;
         content_type: contentType,
         content_length: stats.size
       });
+      if (getRuntime().dryRun) {
+        spinner.stop();
+        process.stderr.write(
+          `[dry-run] PUT <presigned upload_url from the response above> (file: ${filePath}, ${humanSize(stats.size)})
+[dry-run] POST /v1/documents/${id}/versions (upload_id)
+`
+        );
+        return;
+      }
       spinner.succeed("Got presigned URL");
       spinner.start(`Uploading ${humanSize(stats.size)}`);
       const fileStream = Readable.toWeb(createReadStream(filePath));
@@ -2271,6 +2349,7 @@ More results: --cursor ${res.next_cursor}`) : out;
   });
 }
 async function finalizeDocumentCreation(doc, wantLink) {
+  if (getRuntime().dryRun) return;
   let link = null;
   let linkWarning = null;
   if (wantLink) {
@@ -2322,7 +2401,7 @@ function registerFoldersCommands(program2) {
       if (opts.json) setRuntime({ json: true });
       try {
         const res = await api.listFolders({
-          limit: opts.limit ? Number(opts.limit) : void 0,
+          limit: parseLimit(opts.limit),
           cursor: opts.cursor,
           parent_id: opts.parent
         });
@@ -2381,7 +2460,7 @@ More results: --cursor ${res.next_cursor}`) : out;
         if (opts.color !== void 0)
           body.color = opts.color === "" ? null : opts.color;
         if (Object.keys(body).length === 0) {
-          throw new Error(
+          throw new ValidationError(
             "Pass at least one of --name, --icon, --color to update."
           );
         }
@@ -2417,7 +2496,7 @@ More results: --cursor ${res.next_cursor}`) : out;
   ).action(async (id, opts) => {
     try {
       if (opts.parent === void 0) {
-        throw new Error(
+        throw new ValidationError(
           "Pass --parent <id> (use empty string to move to the root)."
         );
       }
@@ -2475,42 +2554,42 @@ function parseWatermarkConfig(opts) {
   if (provided.length === 0) return void 0;
   const missing = Object.entries(fields).filter(([, v]) => v === void 0).map(([k]) => flagNames[k]);
   if (missing.length > 0) {
-    throw new Error(
+    throw new ValidationError(
       `Watermark config is partial. Missing: ${missing.join(", ")}.`
     );
   }
   const tiled = fields.is_tiled.toLowerCase() === "true" || fields.is_tiled.toLowerCase() === "on";
   const tiledOff = fields.is_tiled.toLowerCase() === "false" || fields.is_tiled.toLowerCase() === "off";
   if (!tiled && !tiledOff) {
-    throw new Error(
+    throw new ValidationError(
       `Invalid --watermark-tiled value ${JSON.stringify(fields.is_tiled)} (expected on/off).`
     );
   }
   if (!WATERMARK_POSITIONS.includes(fields.position)) {
-    throw new Error(
+    throw new ValidationError(
       `Invalid --watermark-position ${JSON.stringify(fields.position)}. Expected one of: ${WATERMARK_POSITIONS.join(", ")}.`
     );
   }
   const rotation = Number(fields.rotation);
   if (!Number.isFinite(rotation) || !WATERMARK_ROTATIONS.includes(rotation)) {
-    throw new Error(
+    throw new ValidationError(
       `Invalid --watermark-rotation ${JSON.stringify(fields.rotation)}. Expected one of: ${WATERMARK_ROTATIONS.join(", ")}.`
     );
   }
   if (!/^#([0-9A-Fa-f]{3}){1,2}$/.test(fields.color)) {
-    throw new Error(
+    throw new ValidationError(
       `Invalid --watermark-color ${JSON.stringify(fields.color)}. Expected #RGB or #RRGGBB.`
     );
   }
   const fontSize = Number(fields.font_size);
   if (!Number.isInteger(fontSize) || fontSize < 1 || fontSize > 96) {
-    throw new Error(
+    throw new ValidationError(
       `Invalid --watermark-font-size ${JSON.stringify(fields.font_size)}. Expected integer 1-96.`
     );
   }
   const opacity = Number(fields.opacity);
   if (!Number.isFinite(opacity) || opacity < 0 || opacity > 1) {
-    throw new Error(
+    throw new ValidationError(
       `Invalid --watermark-opacity ${JSON.stringify(fields.opacity)}. Expected 0-1.`
     );
   }
@@ -2543,7 +2622,7 @@ function registerLinksCommands(program2) {
       if (opts.json) setRuntime({ json: true });
       try {
         const res = await api.listLinks({
-          limit: opts.limit ? Number(opts.limit) : void 0,
+          limit: parseLimit(opts.limit),
           cursor: opts.cursor,
           document_id: opts.document,
           dataroom_id: opts.dataroom,
@@ -2608,7 +2687,7 @@ More results: --cursor ${res.next_cursor}`) : out;
     async (opts) => {
       try {
         if (!opts.document && !opts.dataroom) {
-          throw new Error("Either --document <id> or --dataroom <id> is required.");
+          throw new ValidationError("Either --document <id> or --dataroom <id> is required.");
         }
         if (opts.group && !opts.dataroom) {
           throw new Error("--group requires --dataroom <id>.");
@@ -2677,7 +2756,7 @@ More results: --cursor ${res.next_cursor}`) : out;
           const norm = v.toLowerCase();
           if (norm === "on") return true;
           if (norm === "off") return false;
-          throw new Error(
+          throw new ValidationError(
             `Invalid value for ${flag}: ${JSON.stringify(v)} (expected "on" or "off").`
           );
         };
@@ -2712,7 +2791,7 @@ More results: --cursor ${res.next_cursor}`) : out;
         if (wm !== void 0) body.enable_watermark = wm;
         const watermarkConfig = parseWatermarkConfig(opts);
         if (opts.watermarkClear && watermarkConfig !== void 0) {
-          throw new Error(
+          throw new ValidationError(
             "Pass either --watermark-clear or --watermark-* flags, not both."
           );
         }
@@ -2733,7 +2812,7 @@ More results: --cursor ${res.next_cursor}`) : out;
         if (opts.domain !== void 0) body.domain = opts.domain;
         if (opts.slug !== void 0) body.slug = opts.slug;
         if (Object.keys(body).length === 0) {
-          throw new Error(
+          throw new ValidationError(
             "Pass at least one field to update (e.g. --name, --expires, --password)."
           );
         }
@@ -2832,7 +2911,7 @@ function registerViewsCommands(program2) {
       if (opts.json) setRuntime({ json: true });
       try {
         const res = await api.listViews(opts.link, {
-          limit: opts.limit ? Number(opts.limit) : void 0,
+          limit: parseLimit(opts.limit),
           cursor: opts.cursor
         });
         emit(res, () => {
@@ -2864,7 +2943,7 @@ function registerVisitorsCommands(program2) {
       if (opts.json) setRuntime({ json: true });
       try {
         const res = await api.listVisitors({
-          limit: opts.limit ? Number(opts.limit) : void 0,
+          limit: parseLimit(opts.limit),
           cursor: opts.cursor,
           email: opts.email,
           dataroom_id: opts.dataroom
@@ -2900,7 +2979,7 @@ More results: --cursor ${res.next_cursor}`) : out;
       if (opts.json) setRuntime({ json: true });
       try {
         const res = await api.listVisitorViews(id, {
-          limit: opts.limit ? Number(opts.limit) : void 0,
+          limit: parseLimit(opts.limit),
           cursor: opts.cursor
         });
         emit(res, () => {
@@ -2924,8 +3003,18 @@ More results: --cursor ${res.next_cursor}`) : out;
 }
 
 // src/index.ts
+function cliVersion() {
+  try {
+    const pkg = JSON.parse(
+      readFileSync3(new URL("../package.json", import.meta.url), "utf8")
+    );
+    return pkg.version ?? "0.0.0";
+  } catch {
+    return "0.0.0";
+  }
+}
 var program = new Command2();
-program.name("papermark").description("Papermark CLI \u2014 manage documents, links, and views").version("0.1.0").option(
+program.name("papermark").description("Papermark CLI \u2014 manage documents, links, and views").version(cliVersion()).option(
   "--json",
   "emit machine-readable JSON on stdout (auto-enabled when piped)"
 ).option(