snow-flow 8.42.12 → 9.0.1

package/dist/cli/auth.js

@@ -1,770 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.setupEnterpriseFlow = setupEnterpriseFlow;
-exports.registerAuthCommands = registerAuthCommands;
-const prompts = __importStar(require("@clack/prompts"));
-const child_process_1 = require("child_process");
-const path_1 = __importDefault(require("path"));
-const promises_1 = __importDefault(require("fs/promises"));
-const os_1 = __importDefault(require("os"));
-const logger_js_1 = require("../utils/logger.js");
-const fs_1 = require("fs");
-const snow_code_config_js_1 = require("../config/snow-code-config.js");
-const proxy_js_1 = require("../mcp/enterprise-proxy/proxy.js");
-const sync_mcp_configs_js_1 = require("../utils/sync-mcp-configs.js");
-const authLogger = new logger_js_1.Logger('auth');
-// Helper function to fix binary permissions (critical for containers/codespaces)
-function fixSnowCodeBinaryPermissions() {
-    try {
-        const platforms = [
-            'snow-code-darwin-arm64',
-            'snow-code-darwin-x64',
-            'snow-code-linux-arm64',
-            'snow-code-linux-x64',
-            'snow-code-windows-x64'
-        ];
-        platforms.forEach(platform => {
-            // Try both global and local node_modules
-            const paths = [
-                path_1.default.join(process.cwd(), 'node_modules', '@groeimetai', platform, 'bin', 'snow-code'),
-                path_1.default.join(os_1.default.homedir(), '.npm', '_npx', 'node_modules', '@groeimetai', platform, 'bin', 'snow-code'),
-                path_1.default.join(__dirname, '..', '..', 'node_modules', '@groeimetai', platform, 'bin', 'snow-code')
-            ];
-            paths.forEach(binaryPath => {
-                if ((0, fs_1.existsSync)(binaryPath)) {
-                    try {
-                        (0, fs_1.chmodSync)(binaryPath, 0o755);
-                        authLogger.debug(`Fixed permissions for ${platform}`);
-                    }
-                    catch (err) {
-                        // Silently continue if chmod fails
-                    }
-                }
-            });
-        });
-    }
-    catch (error) {
-        // Silently continue if permission fixing fails
-    }
-}
-/**
- * Enterprise License Flow
- * Prompts user for enterprise license and configures enterprise MCP server
- */
-async function enterpriseLicenseFlow() {
-    try {
-        // Check if already configured
-        const alreadyConfigured = await (0, snow_code_config_js_1.isEnterpriseMcpConfigured)();
-        if (alreadyConfigured) {
-            const reconfigure = await prompts.confirm({
-                message: 'Enterprise MCP server is already configured. Reconfigure?',
-                initialValue: false,
-            });
-            if (prompts.isCancel(reconfigure) || !reconfigure) {
-                authLogger.debug('Skipping enterprise configuration (already configured)');
-                return;
-            }
-        }
-        // Ask if user has enterprise license
-        const hasEnterprise = await prompts.confirm({
-            message: 'Do you have a Snow-Flow Enterprise license?',
-            initialValue: false,
-        });
-        if (prompts.isCancel(hasEnterprise) || !hasEnterprise) {
-            authLogger.debug('Skipping enterprise configuration (user does not have license)');
-            return;
-        }
-        // Prompt for license key
-        const licenseKey = await prompts.text({
-            message: 'Enter your Enterprise License Key:',
-            placeholder: 'SNOW-ENT-CUST-ABC123',
-            validate: (value) => {
-                if (!value || value.trim().length === 0) {
-                    return 'License key is required';
-                }
-                if (!value.startsWith('SNOW-ENT-') && !value.startsWith('SNOW-SI-')) {
-                    return 'License key must start with SNOW-ENT- or SNOW-SI-';
-                }
-                return undefined;
-            },
-        });
-        if (prompts.isCancel(licenseKey)) {
-            authLogger.debug('Enterprise configuration cancelled by user');
-            return;
-        }
-        // Validate license key with enterprise server
-        prompts.log.step('Validating enterprise license...');
-        // Set license key temporarily for validation
-        const originalLicenseKey = process.env.SNOW_LICENSE_KEY;
-        process.env.SNOW_LICENSE_KEY = licenseKey;
-        let validation;
-        try {
-            validation = await (0, proxy_js_1.validateLicenseKey)(licenseKey);
-            if (!validation.valid) {
-                prompts.log.error(`License validation failed: ${validation.error || 'Unknown error'}`);
-                authLogger.error(`License validation failed: ${validation.error}`);
-                // Restore original license key
-                if (originalLicenseKey) {
-                    process.env.SNOW_LICENSE_KEY = originalLicenseKey;
-                }
-                else {
-                    delete process.env.SNOW_LICENSE_KEY;
-                }
-                return;
-            }
-            prompts.log.success('✅ License validated successfully');
-            authLogger.info('Enterprise license validated successfully');
-            // Show available features
-            if (validation.features && validation.features.length > 0) {
-                prompts.log.info(`Available enterprise features: ${validation.features.join(', ')}`);
-            }
-        }
-        catch (error) {
-            prompts.log.error(`Failed to validate license: ${error.message}`);
-            authLogger.error(`License validation error: ${error.message}`);
-            // Restore original license key
-            if (originalLicenseKey) {
-                process.env.SNOW_LICENSE_KEY = originalLicenseKey;
-            }
-            else {
-                delete process.env.SNOW_LICENSE_KEY;
-            }
-            return;
-        }
-        // Ask for user role (required for seat management and JWT generation)
-        const role = await prompts.select({
-            message: 'Select your role',
-            options: [
-                {
-                    value: 'developer',
-                    label: 'Developer (Full access)',
-                    hint: 'Full read/write access to all enterprise tools',
-                },
-                {
-                    value: 'stakeholder',
-                    label: 'Stakeholder (Read-only)',
-                    hint: 'Read-only access for managers and stakeholders',
-                },
-                {
-                    value: 'admin',
-                    label: 'Admin (Management)',
-                    hint: 'Administrative access for team leads',
-                },
-            ],
-            initialValue: 'developer',
-        });
-        if (prompts.isCancel(role)) {
-            authLogger.debug('Enterprise configuration cancelled by user');
-            // Restore original license key
-            if (originalLicenseKey) {
-                process.env.SNOW_LICENSE_KEY = originalLicenseKey;
-            }
-            else {
-                delete process.env.SNOW_LICENSE_KEY;
-            }
-            return;
-        }
-        // Ask about credential mode
-        const credentialMode = await prompts.select({
-            message: 'How would you like to provide enterprise credentials?',
-            options: [
-                {
-                    value: 'server',
-                    label: 'Server-side (credentials stored encrypted on enterprise server)',
-                    hint: 'Recommended - most secure, requires portal configuration',
-                },
-                {
-                    value: 'skip',
-                    label: 'Skip for now (configure credentials later in portal)',
-                },
-            ],
-            initialValue: 'server',
-        });
-        if (prompts.isCancel(credentialMode)) {
-            authLogger.debug('Enterprise configuration cancelled by user');
-            // Restore original license key
-            if (originalLicenseKey) {
-                process.env.SNOW_LICENSE_KEY = originalLicenseKey;
-            }
-            else {
-                delete process.env.SNOW_LICENSE_KEY;
-            }
-            return;
-        }
-        const enterpriseConfig = {
-            licenseKey,
-            role: role,
-            serverUrl: validation.serverUrl,
-        };
-        // Inform user about server-side credentials
-        if (credentialMode === 'server') {
-            prompts.log.info('💡 Credentials for Jira/Azure/Confluence are configured in the enterprise portal');
-            prompts.log.info('   Visit: https://enterprise.snow-flow.dev to configure integrations');
-        }
-        // Add enterprise MCP server to SnowCode config (generates JWT)
-        prompts.log.step('Generating enterprise JWT token...');
-        await (0, snow_code_config_js_1.addEnterpriseMcpServer)(enterpriseConfig);
-        prompts.log.success('✅ Enterprise MCP server configured');
-        prompts.log.info('Enterprise tools are now available in SnowCode CLI');
-        authLogger.info('Enterprise MCP server configuration completed');
-        // Update documentation with enterprise features
-        // Pass the available features from license validation (e.g., 'jira', 'azdo', 'confluence')
-        await updateDocumentationWithEnterprise(validation.features);
-    }
-    catch (error) {
-        if (error.message.includes('.mcp.json not found')) {
-            prompts.log.error('⚠️  Project not initialized');
-            prompts.log.message('');
-            prompts.log.info('💡 Next steps:');
-            prompts.log.message('  1. Run: snow-flow init');
-            prompts.log.message('  2. Then run: snow-flow auth login (to configure enterprise)');
-            prompts.log.message('');
-        }
-        else {
-            prompts.log.error(`Enterprise configuration failed: ${error.message}`);
-        }
-        authLogger.error(`Enterprise configuration error: ${error.message}`);
-    }
-}
-/**
- * Update project documentation (CLAUDE.md and AGENTS.md) with enterprise server information
- *
- * NOTE: Documentation generation has been moved to snow-code auth.ts
- * This function is now a no-op as snow-code handles the comprehensive documentation
- * generation when users run `snow-code auth login`.
- *
- * @deprecated Use snow-code auth login instead for enterprise documentation
- */
-async function updateDocumentationWithEnterprise(_enabledServices) {
-    // Documentation generation is now handled by snow-code auth login
-    // This prevents duplicate/conflicting documentation being written
-    authLogger.debug('Documentation generation delegated to snow-code auth login');
-}
-/**
- * Setup Enterprise Flow
- * DEPRECATED: Enterprise setup is now integrated into snow-code auth flow
- * This function redirects users to use snow-code auth login instead
- */
-async function setupEnterpriseFlow() {
-    prompts.log.message('');
-    prompts.log.info('⚠️  Enterprise setup has moved to snow-code auth flow');
-    prompts.log.message('');
-    prompts.log.info('Please use: snow-code auth login');
-    prompts.log.info('Then select "enterprise" when prompted for authentication provider');
-    prompts.log.message('');
-}
-/**
- * Ensure auth.json is in the correct location (snow-code with dash, not snowcode without)
- *
- * Snow-code binary may create auth.json at ~/.local/share/snowcode/ (without dash)
- * but the correct location is ~/.local/share/snow-code/ (with dash).
- * This function moves it if needed and creates a symlink for compatibility.
- */
-async function ensureCorrectAuthLocation() {
-    try {
-        const correctPath = path_1.default.join(os_1.default.homedir(), '.local', 'share', 'snow-code', 'auth.json');
-        const incorrectPath = path_1.default.join(os_1.default.homedir(), '.local', 'share', 'snowcode', 'auth.json');
-        // Check if file exists at incorrect location
-        try {
-            const stats = await promises_1.default.lstat(incorrectPath);
-            // If it's already a symlink pointing to the correct location, we're done
-            if (stats.isSymbolicLink()) {
-                const linkTarget = await promises_1.default.readlink(incorrectPath);
-                if (linkTarget === correctPath || path_1.default.resolve(path_1.default.dirname(incorrectPath), linkTarget) === correctPath) {
-                    authLogger.debug('Symlink already exists at correct location');
-                    return;
-                }
-            }
-            // File exists at wrong location and is NOT a symlink - move it
-            authLogger.info('Found auth.json at incorrect location (snowcode/ without dash)');
-            authLogger.info('Moving to correct location (snow-code/ with dash)...');
-            // Ensure correct directory exists
-            const correctDir = path_1.default.dirname(correctPath);
-            await promises_1.default.mkdir(correctDir, { recursive: true });
-            // Copy file to correct location
-            await promises_1.default.copyFile(incorrectPath, correctPath);
-            authLogger.info(`✅ Moved auth.json to: ${correctPath}`);
-            // Create symlink at old location for backwards compatibility
-            try {
-                const incorrectDir = path_1.default.dirname(incorrectPath);
-                await promises_1.default.mkdir(incorrectDir, { recursive: true });
-                // Remove old file after successful copy
-                await promises_1.default.unlink(incorrectPath);
-                // Create symlink
-                await promises_1.default.symlink(correctPath, incorrectPath);
-                authLogger.debug('Created symlink for backwards compatibility');
-            }
-            catch (symlinkError) {
-                // Symlink creation failed, but that's OK - just log it
-                authLogger.debug(`Could not create symlink: ${symlinkError.message}`);
-            }
-            prompts.log.success('✅ Auth credentials stored at correct location');
-        }
-        catch (err) {
-            if (err.code === 'ENOENT') {
-                // File doesn't exist at incorrect location - check if it's already at correct location
-                try {
-                    await promises_1.default.access(correctPath);
-                    authLogger.debug('Auth.json already at correct location');
-                }
-                catch {
-                    authLogger.debug('Auth.json not found at either location (will be created on next auth)');
-                }
-            }
-        }
-    }
-    catch (error) {
-        authLogger.warn(`Failed to ensure correct auth location: ${error.message}`);
-        // Don't throw - this is not critical enough to fail the auth process
-    }
-}
-/**
- * Update PROJECT-LEVEL MCP server config with ServiceNow credentials from auth.json
- *
- * IMPORTANT: This function ONLY updates project-level .mcp.json, NOT global config!
- * Each snow-flow project maintains its own isolated MCP configuration.
- */
-async function updateMCPServerConfig() {
-    try {
-        // Read SnowCode auth.json
-        const authPath = path_1.default.join(os_1.default.homedir(), '.local', 'share', 'snow-code', 'auth.json');
-        // Check if auth.json exists
-        try {
-            await promises_1.default.access(authPath);
-        }
-        catch {
-            authLogger.debug('auth.json does not exist yet, skipping MCP config update');
-            return;
-        }
-        const authJson = JSON.parse(await promises_1.default.readFile(authPath, 'utf-8'));
-        // Check if ServiceNow credentials exist
-        const servicenowCreds = authJson['servicenow'];
-        if (!servicenowCreds || servicenowCreds.type !== 'servicenow-oauth') {
-            authLogger.debug('No ServiceNow OAuth credentials found in auth.json');
-            return;
-        }
-        // Update PROJECT-LEVEL .mcp.json ONLY (no global config!)
-        const projectMcpPath = path_1.default.join(process.cwd(), '.mcp.json');
-        try {
-            await promises_1.default.access(projectMcpPath);
-            const projectMcp = JSON.parse(await promises_1.default.readFile(projectMcpPath, 'utf-8'));
-            // Support .mcp (snow-code 1.0.69), .mcpServers and .servers key formats
-            const serversKey = projectMcp.mcp ? 'mcp' : (projectMcp.mcpServers ? 'mcpServers' : 'servers');
-            if (projectMcp[serversKey] && projectMcp[serversKey]['servicenow-unified']) {
-                const server = projectMcp[serversKey]['servicenow-unified'];
-                // Support both "environment" (OpenCode) and "env" (Claude Desktop) keys
-                const envKey = server.environment !== undefined ? 'environment' : 'env';
-                if (!server[envKey]) {
-                    server[envKey] = {};
-                }
-                // Update credentials in the environment object
-                server[envKey]['SERVICENOW_INSTANCE_URL'] = servicenowCreds.instance;
-                server[envKey]['SERVICENOW_CLIENT_ID'] = servicenowCreds.clientId;
-                server[envKey]['SERVICENOW_CLIENT_SECRET'] = servicenowCreds.clientSecret;
-                await promises_1.default.writeFile(projectMcpPath, JSON.stringify(projectMcp, null, 2), 'utf-8');
-            }
-            else {
-                authLogger.debug('No servicenow-unified MCP server found in project .mcp.json');
-            }
-        }
-        catch (err) {
-            if (err.code === 'ENOENT') {
-                authLogger.warn('Project .mcp.json not found. Run "snow-flow init" to create one.');
-                prompts.log.warn('⚠️  No .mcp.json found in current directory');
-                prompts.log.info('💡 Run: snow-flow init');
-            }
-            else {
-                authLogger.debug(`Could not update project .mcp.json: ${err.message}`);
-            }
-        }
-    }
-    catch (error) {
-        authLogger.warn(`Failed to update MCP server config: ${error.message}`);
-        // Don't throw - this is not critical
-    }
-}
-function registerAuthCommands(program) {
-    const auth = program.command('auth').description('Authentication management (powered by SnowCode)');
-    // List available models for a provider
-    auth
-        .command('models')
-        .description('List available models for LLM providers')
-        .option('-p, --provider <provider>', 'Provider to list models for (anthropic, openai, google, ollama)')
-        .action(async (options) => {
-        const { getAllProviderModels, getProviderModels } = await Promise.resolve().then(() => __importStar(require('../utils/dynamic-models.js')));
-        prompts.log.step('Available LLM Models');
-        if (options.provider) {
-            // List models for specific provider
-            prompts.log.info(`${options.provider.toUpperCase()}:`);
-            const models = await getProviderModels(options.provider);
-            if (models.length > 0) {
-                models.forEach((model, i) => {
-                    prompts.log.message(`  ${i + 1}. ${model.name}`);
-                    prompts.log.message(`     ID: ${model.value}`);
-                    if (model.contextWindow) {
-                        prompts.log.message(`     Context: ${model.contextWindow.toLocaleString()} tokens`);
-                    }
-                    prompts.log.message('');
-                });
-            }
-            else {
-                prompts.log.warn('  No models available for this provider');
-            }
-        }
-        else {
-            // List all providers
-            const allModels = await getAllProviderModels();
-            for (const [provider, models] of Object.entries(allModels)) {
-                prompts.log.info(`${provider.toUpperCase()}:`);
-                if (models.length > 0) {
-                    models.forEach((model, i) => {
-                        prompts.log.message(`  ${i + 1}. ${model.name}`);
-                        prompts.log.message(`     ID: ${model.value}`);
-                        prompts.log.message('');
-                    });
-                }
-                else {
-                    prompts.log.warn('  No models available');
-                }
-            }
-        }
-        prompts.log.message('Tip: Use --provider to see models for a specific provider');
-        prompts.log.message('Example: snow-flow auth models --provider anthropic');
-    });
-    // Login - delegate to SnowCode
-    auth
-        .command('login')
-        .description('Authenticate with LLM providers, ServiceNow, and Enterprise (via SnowCode)')
-        .action(async () => {
-        try {
-            // Check if snowcode is installed
-            try {
-                (0, child_process_1.execSync)('which snow-code', { stdio: 'ignore' });
-            }
-            catch {
-                prompts.log.error('SnowCode is not installed');
-                prompts.log.warn('Please run: npm install -g snow-flow');
-                prompts.log.info('This will install both snow-flow and snow-code');
-                return;
-            }
-            // Determine which SnowCode to use: prefer local, fallback to global
-            const localSnowCode = path_1.default.join(process.cwd(), 'node_modules', '@groeimetai', 'snow-code', 'bin', 'snow-code');
-            let snowcodeCommand = 'snow-code'; // fallback to global
-            try {
-                const fs = require('fs');
-                if (fs.existsSync(localSnowCode)) {
-                    snowcodeCommand = localSnowCode;
-                    authLogger.debug('Using local SnowCode installation');
-                }
-            }
-            catch {
-                authLogger.debug('Using global SnowCode installation');
-            }
-            prompts.intro('🚀 Starting authentication flow (powered by SnowCode)');
-            // Fix binary permissions before calling snow-code (critical for containers/codespaces)
-            fixSnowCodeBinaryPermissions();
-            // Call SnowCode auth login for LLM providers and ServiceNow OAuth
-            (0, child_process_1.execSync)(`${snowcodeCommand} auth login`, { stdio: 'inherit' });
-            // Post-processing: Ensure auth.json is in correct location
-            await ensureCorrectAuthLocation();
-            // Update MCP server config with ServiceNow credentials
-            await updateMCPServerConfig();
-            // 🔥 FIX: After snow-code auth login, check if enterprise was configured
-            // Read from the CORRECT location: ~/.snow-code/enterprise.json (where snow-code saves it)
-            const enterpriseConfigPath = path_1.default.join(os_1.default.homedir(), '.snow-code', 'enterprise.json');
-            try {
-                // Check if enterprise config exists
-                await promises_1.default.access(enterpriseConfigPath);
-                const enterpriseConfig = JSON.parse(await promises_1.default.readFile(enterpriseConfigPath, 'utf-8'));
-                if (enterpriseConfig && enterpriseConfig.token) {
-                    authLogger.debug('Found enterprise configuration from snow-code auth login');
-                    // Use the JWT token directly from snow-code (already validated!)
-                    // No need to re-authenticate - just configure the MCP server with the existing token
-                    await (0, snow_code_config_js_1.addEnterpriseMcpServerWithToken)({
-                        token: enterpriseConfig.token,
-                        serverUrl: 'https://portal.snow-flow.dev',
-                    });
-                    // Sync MCP configurations
-                    try {
-                        await (0, sync_mcp_configs_js_1.syncMcpConfigs)(process.cwd());
-                        prompts.log.success('✓ Enterprise MCP server configured!');
-                    }
-                    catch (syncErr) {
-                        authLogger.warn(`MCP sync error: ${syncErr.message}`);
-                    }
-                }
-            }
-            catch (err) {
-                // Show warning if enterprise configuration failed
-                if (err.code === 'ENOENT') {
-                    // No enterprise config - user didn't select enterprise option
-                    authLogger.debug('No enterprise configuration found (user may have chosen manual setup)');
-                }
-                else if (err.message && err.message.includes('.mcp.json not found')) {
-                    prompts.log.message('');
-                    prompts.log.warn('⚠️  Enterprise MCP configuration skipped');
-                    prompts.log.info('   Run "snow-flow init" first to create .mcp.json');
-                    prompts.log.info('   Then run "snow-flow auth login" again to enable enterprise tools');
-                }
-                else if (err.message && !err.message.includes('ENOENT')) {
-                    // Only show error if it's not just "file doesn't exist"
-                    prompts.log.message('');
-                    prompts.log.warn('⚠️  Enterprise MCP configuration failed');
-                    prompts.log.info(`   ${err.message}`);
-                    authLogger.error(`Enterprise MCP configuration error: ${err.stack || err.message}`);
-                }
-                else {
-                    // Silently continue for expected cases
-                    authLogger.debug(`Enterprise conversion check: ${err.message}`);
-                }
-            }
-            // 🔥 ALWAYS sync MCP configs after auth login completes
-            // This ensures .claude/mcp-config.json is up-to-date even if enterprise wasn't configured
-            try {
-                authLogger.debug('Final MCP config sync after auth completion');
-                await (0, sync_mcp_configs_js_1.syncMcpConfigs)(process.cwd());
-            }
-            catch (syncErr) {
-                // Silent - already logged above if enterprise was configured
-                authLogger.debug(`Final sync: ${syncErr.message}`);
-            }
-        }
-        catch (error) {
-            // Error details are already shown via stdio: 'inherit'
-            // Only provide helpful context here
-            prompts.log.message('');
-            if (error.code === 'ENOENT') {
-                prompts.log.error('SnowCode command not found');
-                prompts.log.info('Please ensure snow-code is properly installed');
-            }
-            else {
-                prompts.log.error('Authentication process was interrupted or failed');
-                if (error.status) {
-                    prompts.log.info(`Exit code: ${error.status}`);
-                }
-                prompts.log.message('');
-                prompts.log.info('💡 Troubleshooting tips:');
-                prompts.log.message('  • Check your license key format (SNOW-ENT-* or SNOW-SI-*)');
-                prompts.log.message('  • Verify enterprise server is accessible');
-                prompts.log.message('  • Try running: snow-code auth login (for detailed errors)');
-                prompts.log.message('  • Check logs in ~/.local/share/snow-code/');
-            }
-            prompts.log.message('');
-        }
-    });
-    // List credentials
-    auth
-        .command('list')
-        .alias('ls')
-        .description('List configured credentials (via SnowCode)')
-        .action(async () => {
-        try {
-            fixSnowCodeBinaryPermissions();
-            (0, child_process_1.execSync)('snow-code auth list', { stdio: 'inherit' });
-        }
-        catch (error) {
-            prompts.log.error('SnowCode is not installed. Run: npm install -g snow-flow');
-        }
-    });
-    // Logout
-    auth
-        .command('logout')
-        .description('Log out from a configured provider (via SnowCode)')
-        .action(async () => {
-        try {
-            fixSnowCodeBinaryPermissions();
-            (0, child_process_1.execSync)('snow-code auth logout', { stdio: 'inherit' });
-        }
-        catch (error) {
-            prompts.log.error('SnowCode is not installed. Run: npm install -g snow-flow');
-        }
-    });
-    // Sync credentials to portal
-    auth
-        .command('sync')
-        .description('Sync local credentials to Enterprise Portal')
-        .action(async () => {
-        prompts.intro('Credential Sync');
-        try {
-            // Read .env file from current directory
-            const envPath = path_1.default.join(process.cwd(), '.env');
-            const envContent = await promises_1.default.readFile(envPath, 'utf-8');
-            // Parse environment variables
-            const envVars = {};
-            envContent.split('\n').forEach(line => {
-                const match = line.match(/^([^=]+)=(.*)$/);
-                if (match) {
-                    envVars[match[1].trim()] = match[2].trim().replace(/^["']|["']$/g, '');
-                }
-            });
-            const licenseKey = envVars.SNOW_ENTERPRISE_LICENSE_KEY;
-            const enterpriseUrl = envVars.SNOW_ENTERPRISE_URL || 'https://portal.snow-flow.dev';
-            if (!licenseKey) {
-                prompts.log.error('No enterprise license key found in .env');
-                prompts.outro('Sync failed');
-                return;
-            }
-            // Login first to get customer token
-            prompts.log.step('Authenticating with enterprise portal...');
-            const username = envVars.SNOW_ENTERPRISE_USERNAME;
-            const password = envVars.SNOW_ENTERPRISE_PASSWORD;
-            if (!username || !password) {
-                prompts.log.error('Username or password not found in .env');
-                prompts.log.info('Add SNOW_ENTERPRISE_USERNAME and SNOW_ENTERPRISE_PASSWORD to .env');
-                prompts.outro('Sync failed');
-                return;
-            }
-            const loginResponse = await fetch(`${enterpriseUrl}/api/user-auth/login`, {
-                method: 'POST',
-                headers: { 'Content-Type': 'application/json' },
-                body: JSON.stringify({ licenseKey, username, password })
-            });
-            const loginData = await loginResponse.json();
-            if (!loginResponse.ok || !loginData.success) {
-                prompts.log.error('Authentication failed: ' + (loginData.error || 'Invalid credentials'));
-                prompts.outro('Sync failed');
-                return;
-            }
-            const token = loginData.token;
-            const credentialsToSync = [];
-            // Check Jira credentials
-            if (envVars.SNOW_JIRA_BASE_URL && envVars.SNOW_JIRA_EMAIL && envVars.SNOW_JIRA_API_TOKEN) {
-                credentialsToSync.push({
-                    service: 'jira',
-                    data: {
-                        service: 'jira',
-                        username: envVars.SNOW_JIRA_EMAIL,
-                        apiToken: envVars.SNOW_JIRA_API_TOKEN,
-                        instanceUrl: envVars.SNOW_JIRA_BASE_URL
-                    }
-                });
-            }
-            // Check Azure DevOps credentials
-            if (envVars.SNOW_AZURE_ORG && envVars.SNOW_AZURE_PAT) {
-                credentialsToSync.push({
-                    service: 'azdo',
-                    data: {
-                        service: 'azdo',
-                        username: envVars.SNOW_AZURE_ORG,
-                        apiToken: envVars.SNOW_AZURE_PAT,
-                        instanceUrl: `https://dev.azure.com/${envVars.SNOW_AZURE_ORG}`
-                    }
-                });
-            }
-            // Check Confluence credentials
-            if (envVars.SNOW_CONFLUENCE_BASE_URL && envVars.SNOW_CONFLUENCE_EMAIL && envVars.SNOW_CONFLUENCE_API_TOKEN) {
-                credentialsToSync.push({
-                    service: 'confluence',
-                    data: {
-                        service: 'confluence',
-                        username: envVars.SNOW_CONFLUENCE_EMAIL,
-                        apiToken: envVars.SNOW_CONFLUENCE_API_TOKEN,
-                        instanceUrl: envVars.SNOW_CONFLUENCE_BASE_URL
-                    }
-                });
-            }
-            if (credentialsToSync.length === 0) {
-                prompts.log.warn('No credentials found in .env to sync');
-                prompts.outro('Nothing to sync');
-                return;
-            }
-            prompts.log.step(`Syncing ${credentialsToSync.length} credential(s)...`);
-            // Sync each credential
-            for (const cred of credentialsToSync) {
-                try {
-                    const response = await fetch(`${enterpriseUrl}/api/credentials/store`, {
-                        method: 'POST',
-                        headers: {
-                            'Content-Type': 'application/json',
-                            'Authorization': `Bearer ${token}`
-                        },
-                        body: JSON.stringify(cred.data)
-                    });
-                    const result = await response.json();
-                    if (response.ok && result.success) {
-                        prompts.log.success(`✓ ${cred.service} credentials synced`);
-                    }
-                    else {
-                        prompts.log.error(`✗ ${cred.service} failed: ${result.error || 'Unknown error'}`);
-                    }
-                }
-                catch (error) {
-                    prompts.log.error(`✗ ${cred.service} failed: ${error.message}`);
-                }
-            }
-            prompts.log.message('');
-            prompts.log.success('Credential sync complete!');
-            prompts.log.info('View your credentials at: ' + enterpriseUrl + '/portal/credentials');
-            // Update AGENTS.md and CLAUDE.md with enterprise workflow instructions
-            prompts.log.message('');
-            prompts.log.step('Updating project documentation with autonomous workflow...');
-            const enabledServices = credentialsToSync.map(c => c.service);
-            await updateDocumentationWithEnterprise(enabledServices);
-            prompts.log.message('');
-            prompts.log.info('📚 AI agents now have full autonomy over:');
-            if (enabledServices.includes('jira')) {
-                prompts.log.info('   • Jira: Story selection, updates, completion, commenting');
-            }
-            if (enabledServices.includes('azdo')) {
-                prompts.log.info('   • Azure DevOps: Work item management, status updates');
-            }
-            if (enabledServices.includes('confluence')) {
-                prompts.log.info('   • Confluence: Create & maintain documentation');
-            }
-            prompts.log.message('');
-            prompts.log.info('Agents will automatically:');
-            prompts.log.info('   1. Update stories in real-time during development');
-            prompts.log.info('   2. Link Update Sets to stories');
-            prompts.log.info('   3. Create comprehensive Confluence documentation');
-            prompts.log.info('   4. Move stories to Done with full traceability');
-            prompts.outro('Done');
-        }
-        catch (error) {
-            if (error.code === 'ENOENT') {
-                prompts.log.error('No .env file found in current directory');
-                prompts.log.info('Run: snow-flow auth login first');
-            }
-            else {
-                prompts.log.error('Sync failed: ' + error.message);
-            }
-            prompts.outro('Sync failed');
-        }
-    });
-}
-//# sourceMappingURL=auth.js.map