securegate-cli-tool 2.1.3 → 2.1.5

package/index.js

@@ -1,351 +1,351 @@
-#!/usr/bin/env node
-
-/**
- * SecureGate CLI - Setup and manage security keys
- * Run: npx securegate setup
- */
-
-const https = require('https');
-const http = require('http');
-const crypto = require('crypto');
-const os = require('os');
-const fs = require('fs');
-const path = require('path');
-const readline = require('readline');
-
-// Configuration
-const SUPABASE_URL = 'https://pbrmsfoowrjqsikgkijb.supabase.co';
-const CONFIG_DIR = path.join(os.homedir(), '.securegate');
-const CONFIG_FILE = path.join(CONFIG_DIR, 'config.json');
-
-// ANSI colors
-const colors = {
-    reset: '\x1b[0m',
-    green: '\x1b[32m',
-    yellow: '\x1b[33m',
-    cyan: '\x1b[36m',
-    red: '\x1b[31m',
-    bold: '\x1b[1m',
-    dim: '\x1b[2m',
-};
-
-function log(msg, color = '') {
-    console.log(`${color}${msg}${colors.reset}`);
-}
-
-function banner() {
-    console.log(`
-${colors.cyan}${colors.bold}🔐 SecureGate Setup${colors.reset}
-${colors.dim}━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━${colors.reset}
-`);
-}
-
-// Get device fingerprint (machine-based)
-function getDeviceFingerprint() {
-    const cpus = os.cpus();
-    const networkInterfaces = os.networkInterfaces();
-
-    // Get first MAC address
-    let mac = '';
-    for (const [name, interfaces] of Object.entries(networkInterfaces)) {
-        for (const iface of interfaces) {
-            if (iface.mac && iface.mac !== '00:00:00:00:00:00') {
-                mac = iface.mac;
-                break;
-            }
-        }
-        if (mac) break;
-    }
-
-    const fingerprint = [
-        os.hostname(),
-        os.platform(),
-        os.arch(),
-        cpus[0]?.model || 'unknown',
-        mac,
-        os.totalmem().toString(),
-    ].join('|');
-
-    return crypto.createHash('sha256').update(fingerprint).digest('hex').substring(0, 32);
-}
-
-// Get public IP
-async function getPublicIP() {
-    return new Promise((resolve) => {
-        https.get('https://api.ipify.org?format=json', (res) => {
-            let data = '';
-            res.on('data', chunk => data += chunk);
-            res.on('end', () => {
-                try {
-                    resolve(JSON.parse(data).ip);
-                } catch {
-                    resolve('unknown');
-                }
-            });
-        }).on('error', () => resolve('unknown'));
-    });
-}
-
-// Get geolocation
-async function getGeoLocation(ip) {
-    return new Promise((resolve) => {
-        http.get(`http://ip-api.com/json/${ip}?fields=status,country,countryCode,city`, (res) => {
-            let data = '';
-            res.on('data', chunk => data += chunk);
-            res.on('end', () => {
-                try {
-                    const result = JSON.parse(data);
-                    if (result.status === 'success') {
-                        resolve({ country: result.country, code: result.countryCode, city: result.city });
-                    } else {
-                        resolve(null);
-                    }
-                } catch {
-                    resolve(null);
-                }
-            });
-        }).on('error', () => resolve(null));
-    });
-}
-
-// Make HTTP request
-function httpRequest(url, options = {}) {
-    return new Promise((resolve, reject) => {
-        const urlObj = new URL(url);
-        const isHttps = urlObj.protocol === 'https:';
-        const lib = isHttps ? https : http;
-
-        const req = lib.request(url, {
-            method: options.method || 'GET',
-            headers: options.headers || {},
-        }, (res) => {
-            let data = '';
-            res.on('data', chunk => data += chunk);
-            res.on('end', () => {
-                try {
-                    resolve({ status: res.statusCode, data: JSON.parse(data) });
-                } catch {
-                    resolve({ status: res.statusCode, data });
-                }
-            });
-        });
-
-        req.on('error', reject);
-
-        if (options.body) {
-            req.write(options.body);
-        }
-        req.end();
-    });
-}
-
-// Create readline interface
-function createPrompt() {
-    return readline.createInterface({
-        input: process.stdin,
-        output: process.stdout,
-    });
-}
-
-// Ask question
-function ask(rl, question) {
-    return new Promise((resolve) => {
-        rl.question(question, (answer) => {
-            resolve(answer.trim());
-        });
-    });
-}
-
-// Load config
-function loadConfig() {
-    try {
-        if (fs.existsSync(CONFIG_FILE)) {
-            return JSON.parse(fs.readFileSync(CONFIG_FILE, 'utf8'));
-        }
-    } catch { }
-    return {};
-}
-
-// Save config
-function saveConfig(config) {
-    if (!fs.existsSync(CONFIG_DIR)) {
-        fs.mkdirSync(CONFIG_DIR, { recursive: true });
-    }
-    fs.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2));
-}
-
-// Main setup flow
-async function setup() {
-    banner();
-
-    const rl = createPrompt();
-
-    try {
-        // Step 1: Get JWT token
-        log('1. Authentication', colors.bold);
-        log('   Enter your Supabase JWT token (from browser after login):', colors.dim);
-        const token = await ask(rl, '   Token: ');
-
-        if (!token) {
-            log('   ❌ Token required', colors.red);
-            process.exit(1);
-        }
-        log('   ✓ Token received', colors.green);
-
-        // Step 2: Get connection ID
-        log('\n2. Connection', colors.bold);
-        log('   Enter your connection_id (e.g., open_abc123):', colors.dim);
-        const connectionId = await ask(rl, '   Connection ID: ');
-
-        if (!connectionId) {
-            log('   ❌ Connection ID required', colors.red);
-            process.exit(1);
-        }
-        log(`   ✓ Connection: ${connectionId}`, colors.green);
-
-        // Step 3: Detect environment
-        log('\n3. Detecting environment...', colors.bold);
-
-        const ip = await getPublicIP();
-        log(`   ✓ IP: ${ip}`, colors.green);
-
-        const geo = await getGeoLocation(ip);
-        if (geo) {
-            log(`   ✓ Location: ${geo.city}, ${geo.country} (${geo.code})`, colors.green);
-        } else {
-            log('   ⚠ Could not detect location', colors.yellow);
-        }
-
-        const fingerprint = getDeviceFingerprint();
-        log(`   ✓ Device: ${os.hostname()} (${os.platform()})`, colors.green);
-        log(`   ✓ Fingerprint: ${fingerprint.substring(0, 8)}...`, colors.dim);
-
-        // Step 4: Activate key
-        log('\n4. Generating security key...', colors.bold);
-
-        const response = await httpRequest(`${SUPABASE_URL}/functions/v1/activate-key`, {
-            method: 'POST',
-            headers: {
-                'Authorization': `Bearer ${token}`,
-                'Content-Type': 'application/json',
-            },
-            body: JSON.stringify({
-                connection_id: connectionId,
-                device_fingerprint: fingerprint,
-                label: `${os.hostname()} (${os.platform()})`,
-            }),
-        });
-
-        if (response.status !== 201) {
-            log(`   ❌ Failed: ${response.data.error || 'Unknown error'}`, colors.red);
-            process.exit(1);
-        }
-
-        const { security_key, bound_to, provider, usage } = response.data;
-
-        log('   ✓ Key activated!', colors.green);
-
-        // Save to config
-        const config = loadConfig();
-        config[connectionId] = {
-            security_key,
-            provider,
-            bound_to,
-            created_at: new Date().toISOString(),
-        };
-        saveConfig(config);
-
-        // Display result
-        console.log(`
-${colors.dim}━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━${colors.reset}
-
-${colors.bold}${colors.green}✓ Security Key Generated!${colors.reset}
-
-${colors.yellow}⚠ SAVE THIS KEY - IT WILL NOT BE SHOWN AGAIN!${colors.reset}
-
-${colors.cyan}Security Key:${colors.reset}
-${colors.bold}${security_key}${colors.reset}
-
-${colors.cyan}Bound to:${colors.reset}
-  • IP: ${bound_to.ip}
-  • Country: ${bound_to.country}
-  • Device: ${bound_to.device}
-
-${colors.cyan}Usage:${colors.reset}
-${colors.dim}const openai = new OpenAI({
-  apiKey: '${security_key}',
-  baseURL: '${usage.baseURL}'
-});${colors.reset}
-
-${colors.dim}Config saved to: ${CONFIG_FILE}${colors.reset}
-
-${colors.dim}━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━${colors.reset}
-`);
-
-    } finally {
-        rl.close();
-    }
-}
-
-// List configured keys
-async function list() {
-    banner();
-
-    const config = loadConfig();
-    const keys = Object.entries(config);
-
-    if (keys.length === 0) {
-        log('No security keys configured yet.', colors.dim);
-        log('Run: npx securegate setup', colors.cyan);
-        return;
-    }
-
-    log('Configured Security Keys:', colors.bold);
-    console.log();
-
-    for (const [connectionId, data] of keys) {
-        const keyPreview = data.security_key.substring(0, 12) + '...';
-        log(`  ${connectionId}`, colors.cyan);
-        log(`    Key: ${keyPreview}`, colors.dim);
-        log(`    Provider: ${data.provider}`, colors.dim);
-        log(`    IP: ${data.bound_to?.ip || 'unknown'}`, colors.dim);
-        log(`    Created: ${data.created_at}`, colors.dim);
-        console.log();
-    }
-}
-
-// Show usage instructions
-function usage() {
-    console.log(`
-${colors.cyan}${colors.bold}SecureGate CLI${colors.reset}
-
-${colors.bold}Usage:${colors.reset}
-  npx securegate setup     Generate a new security key
-  npx securegate list      List configured keys
-  npx securegate help      Show this help
-
-${colors.bold}Example:${colors.reset}
-  1. First, create a connection in the SecureGate dashboard
-  2. Run: npx securegate setup
-  3. Enter your JWT token and connection ID
-  4. Use the generated key with OpenAI SDK
-`);
-}
-
-// Main
-const command = process.argv[2] || 'help';
-
-switch (command) {
-    case 'setup':
-        setup().catch(err => {
-            log(`Error: ${err.message}`, colors.red);
-            process.exit(1);
-        });
-        break;
-    case 'list':
-        list();
-        break;
-    case 'help':
-    default:
-        usage();
-}
+#!/usr/bin/env node
+
+/**
+ * SecureGate CLI - Setup and manage security keys
+ * Run: npx securegate setup
+ */
+
+const https = require('https');
+const http = require('http');
+const crypto = require('crypto');
+const os = require('os');
+const fs = require('fs');
+const path = require('path');
+const readline = require('readline');
+
+// Configuration
+const SUPABASE_URL = 'https://pbrmsfoowrjqsikgkijb.supabase.co';
+const CONFIG_DIR = path.join(os.homedir(), '.securegate');
+const CONFIG_FILE = path.join(CONFIG_DIR, 'config.json');
+
+// ANSI colors
+const colors = {
+    reset: '\x1b[0m',
+    green: '\x1b[32m',
+    yellow: '\x1b[33m',
+    cyan: '\x1b[36m',
+    red: '\x1b[31m',
+    bold: '\x1b[1m',
+    dim: '\x1b[2m',
+};
+
+function log(msg, color = '') {
+    console.log(`${color}${msg}${colors.reset}`);
+}
+
+function banner() {
+    console.log(`
+${colors.cyan}${colors.bold}🔐 SecureGate Setup${colors.reset}
+${colors.dim}━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━${colors.reset}
+`);
+}
+
+// Get device fingerprint (machine-based)
+function getDeviceFingerprint() {
+    const cpus = os.cpus();
+    const networkInterfaces = os.networkInterfaces();
+
+    // Get first MAC address
+    let mac = '';
+    for (const [name, interfaces] of Object.entries(networkInterfaces)) {
+        for (const iface of interfaces) {
+            if (iface.mac && iface.mac !== '00:00:00:00:00:00') {
+                mac = iface.mac;
+                break;
+            }
+        }
+        if (mac) break;
+    }
+
+    const fingerprint = [
+        os.hostname(),
+        os.platform(),
+        os.arch(),
+        cpus[0]?.model || 'unknown',
+        mac,
+        os.totalmem().toString(),
+    ].join('|');
+
+    return crypto.createHash('sha256').update(fingerprint).digest('hex').substring(0, 32);
+}
+
+// Get public IP
+async function getPublicIP() {
+    return new Promise((resolve) => {
+        https.get('https://api.ipify.org?format=json', (res) => {
+            let data = '';
+            res.on('data', chunk => data += chunk);
+            res.on('end', () => {
+                try {
+                    resolve(JSON.parse(data).ip);
+                } catch {
+                    resolve('unknown');
+                }
+            });
+        }).on('error', () => resolve('unknown'));
+    });
+}
+
+// Get geolocation
+async function getGeoLocation(ip) {
+    return new Promise((resolve) => {
+        http.get(`http://ip-api.com/json/${ip}?fields=status,country,countryCode,city`, (res) => {
+            let data = '';
+            res.on('data', chunk => data += chunk);
+            res.on('end', () => {
+                try {
+                    const result = JSON.parse(data);
+                    if (result.status === 'success') {
+                        resolve({ country: result.country, code: result.countryCode, city: result.city });
+                    } else {
+                        resolve(null);
+                    }
+                } catch {
+                    resolve(null);
+                }
+            });
+        }).on('error', () => resolve(null));
+    });
+}
+
+// Make HTTP request
+function httpRequest(url, options = {}) {
+    return new Promise((resolve, reject) => {
+        const urlObj = new URL(url);
+        const isHttps = urlObj.protocol === 'https:';
+        const lib = isHttps ? https : http;
+
+        const req = lib.request(url, {
+            method: options.method || 'GET',
+            headers: options.headers || {},
+        }, (res) => {
+            let data = '';
+            res.on('data', chunk => data += chunk);
+            res.on('end', () => {
+                try {
+                    resolve({ status: res.statusCode, data: JSON.parse(data) });
+                } catch {
+                    resolve({ status: res.statusCode, data });
+                }
+            });
+        });
+
+        req.on('error', reject);
+
+        if (options.body) {
+            req.write(options.body);
+        }
+        req.end();
+    });
+}
+
+// Create readline interface
+function createPrompt() {
+    return readline.createInterface({
+        input: process.stdin,
+        output: process.stdout,
+    });
+}
+
+// Ask question
+function ask(rl, question) {
+    return new Promise((resolve) => {
+        rl.question(question, (answer) => {
+            resolve(answer.trim());
+        });
+    });
+}
+
+// Load config
+function loadConfig() {
+    try {
+        if (fs.existsSync(CONFIG_FILE)) {
+            return JSON.parse(fs.readFileSync(CONFIG_FILE, 'utf8'));
+        }
+    } catch { }
+    return {};
+}
+
+// Save config
+function saveConfig(config) {
+    if (!fs.existsSync(CONFIG_DIR)) {
+        fs.mkdirSync(CONFIG_DIR, { recursive: true });
+    }
+    fs.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2));
+}
+
+// Main setup flow
+async function setup() {
+    banner();
+
+    const rl = createPrompt();
+
+    try {
+        // Step 1: Get JWT token
+        log('1. Authentication', colors.bold);
+        log('   Enter your Supabase JWT token (from browser after login):', colors.dim);
+        const token = await ask(rl, '   Token: ');
+
+        if (!token) {
+            log('   ❌ Token required', colors.red);
+            process.exit(1);
+        }
+        log('   ✓ Token received', colors.green);
+
+        // Step 2: Get connection ID
+        log('\n2. Connection', colors.bold);
+        log('   Enter your connection_id (e.g., open_abc123):', colors.dim);
+        const connectionId = await ask(rl, '   Connection ID: ');
+
+        if (!connectionId) {
+            log('   ❌ Connection ID required', colors.red);
+            process.exit(1);
+        }
+        log(`   ✓ Connection: ${connectionId}`, colors.green);
+
+        // Step 3: Detect environment
+        log('\n3. Detecting environment...', colors.bold);
+
+        const ip = await getPublicIP();
+        log(`   ✓ IP: ${ip}`, colors.green);
+
+        const geo = await getGeoLocation(ip);
+        if (geo) {
+            log(`   ✓ Location: ${geo.city}, ${geo.country} (${geo.code})`, colors.green);
+        } else {
+            log('   ⚠ Could not detect location', colors.yellow);
+        }
+
+        const fingerprint = getDeviceFingerprint();
+        log(`   ✓ Device: ${os.hostname()} (${os.platform()})`, colors.green);
+        log(`   ✓ Fingerprint: ${fingerprint.substring(0, 8)}...`, colors.dim);
+
+        // Step 4: Activate key
+        log('\n4. Generating security key...', colors.bold);
+
+        const response = await httpRequest(`${SUPABASE_URL}/functions/v1/activate-key`, {
+            method: 'POST',
+            headers: {
+                'Authorization': `Bearer ${token}`,
+                'Content-Type': 'application/json',
+            },
+            body: JSON.stringify({
+                connection_id: connectionId,
+                device_fingerprint: fingerprint,
+                label: `${os.hostname()} (${os.platform()})`,
+            }),
+        });
+
+        if (response.status !== 201) {
+            log(`   ❌ Failed: ${response.data.error || 'Unknown error'}`, colors.red);
+            process.exit(1);
+        }
+
+        const { security_key, bound_to, provider, usage } = response.data;
+
+        log('   ✓ Key activated!', colors.green);
+
+        // Save to config
+        const config = loadConfig();
+        config[connectionId] = {
+            security_key,
+            provider,
+            bound_to,
+            created_at: new Date().toISOString(),
+        };
+        saveConfig(config);
+
+        // Display result
+        console.log(`
+${colors.dim}━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━${colors.reset}
+
+${colors.bold}${colors.green}✓ Security Key Generated!${colors.reset}
+
+${colors.yellow}⚠ SAVE THIS KEY - IT WILL NOT BE SHOWN AGAIN!${colors.reset}
+
+${colors.cyan}Security Key:${colors.reset}
+${colors.bold}${security_key}${colors.reset}
+
+${colors.cyan}Bound to:${colors.reset}
+  • IP: ${bound_to.ip}
+  • Country: ${bound_to.country}
+  • Device: ${bound_to.device}
+
+${colors.cyan}Usage:${colors.reset}
+${colors.dim}const openai = new OpenAI({
+  apiKey: '${security_key}',
+  baseURL: '${usage.baseURL}'
+});${colors.reset}
+
+${colors.dim}Config saved to: ${CONFIG_FILE}${colors.reset}
+
+${colors.dim}━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━${colors.reset}
+`);
+
+    } finally {
+        rl.close();
+    }
+}
+
+// List configured keys
+async function list() {
+    banner();
+
+    const config = loadConfig();
+    const keys = Object.entries(config);
+
+    if (keys.length === 0) {
+        log('No security keys configured yet.', colors.dim);
+        log('Run: npx securegate setup', colors.cyan);
+        return;
+    }
+
+    log('Configured Security Keys:', colors.bold);
+    console.log();
+
+    for (const [connectionId, data] of keys) {
+        const keyPreview = data.security_key.substring(0, 12) + '...';
+        log(`  ${connectionId}`, colors.cyan);
+        log(`    Key: ${keyPreview}`, colors.dim);
+        log(`    Provider: ${data.provider}`, colors.dim);
+        log(`    IP: ${data.bound_to?.ip || 'unknown'}`, colors.dim);
+        log(`    Created: ${data.created_at}`, colors.dim);
+        console.log();
+    }
+}
+
+// Show usage instructions
+function usage() {
+    console.log(`
+${colors.cyan}${colors.bold}SecureGate CLI${colors.reset}
+
+${colors.bold}Usage:${colors.reset}
+  npx securegate setup     Generate a new security key
+  npx securegate list      List configured keys
+  npx securegate help      Show this help
+
+${colors.bold}Example:${colors.reset}
+  1. First, create a connection in the SecureGate dashboard
+  2. Run: npx securegate setup
+  3. Enter your JWT token and connection ID
+  4. Use the generated key with OpenAI SDK
+`);
+}
+
+// Main
+const command = process.argv[2] || 'help';
+
+switch (command) {
+    case 'setup':
+        setup().catch(err => {
+            log(`Error: ${err.message}`, colors.red);
+            process.exit(1);
+        });
+        break;
+    case 'list':
+        list();
+        break;
+    case 'help':
+    default:
+        usage();
+}