tailar 0.2.0

package/dist/api/client.js

@@ -0,0 +1,329 @@
+/**
+ * API Client Module
+ *
+ * Handles all API interactions with the Tailar web API
+ */
+import fetch from "node-fetch";
+import { logger } from "../utils/logger.js";
+import { getAuthHeaders, authenticate, isAuthenticated } from "../auth/flow.js";
+import { getStoredToken, clearToken } from "../auth/storage.js";
+// Lazy-load API_BASE_URL to ensure .env file is loaded first
+// This is a function because .env file is loaded after module imports
+function getApiBaseUrl() {
+    return process.env.API_BASE_URL || "https://tailar.dev/api/cli";
+}
+const MAX_RETRIES = 3;
+const RETRY_DELAY = 1000; // 1 second
+/** Avoid infinite spinner when API is unreachable (default tailar.dev or wrong host). */
+const DEFAULT_REQUEST_TIMEOUT_MS = 45_000;
+/**
+ * Make an authenticated API request with retry logic
+ */
+async function apiRequest(endpoint, options = {}) {
+    const { requireAuth = false, retries = MAX_RETRIES, method, body, headers: customHeaders, } = options;
+    let attempt = 0;
+    let lastError = null;
+    while (attempt <= retries) {
+        try {
+            const headers = {
+                "Content-Type": "application/json",
+                "User-Agent": "tailar-cli",
+                ...(customHeaders || {}),
+            };
+            // Add auth headers if required
+            if (requireAuth) {
+                try {
+                    const authHeaders = await getAuthHeaders();
+                    Object.assign(headers, authHeaders);
+                }
+                catch (error) {
+                    // Not authenticated, try to authenticate
+                    if (error instanceof Error &&
+                        error.message.includes("Not authenticated")) {
+                        logger.info("Authentication required. Starting authentication flow...");
+                        await authenticate();
+                        // Retry with new auth headers
+                        const authHeaders = await getAuthHeaders();
+                        Object.assign(headers, authHeaders);
+                    }
+                    else {
+                        throw error;
+                    }
+                }
+            }
+            const fetchInit = {
+                method: method || "GET",
+                headers,
+            };
+            if (body) {
+                fetchInit.body = body;
+            }
+            const fullUrl = `${getApiBaseUrl()}${endpoint}`;
+            const timeoutMs = Number(process.env.TAILAR_CLI_REQUEST_TIMEOUT_MS) ||
+                DEFAULT_REQUEST_TIMEOUT_MS;
+            const abortController = new AbortController();
+            const timeoutId = setTimeout(() => abortController.abort(), timeoutMs);
+            fetchInit.signal = abortController.signal;
+            let response;
+            try {
+                response = await fetch(fullUrl, fetchInit);
+            }
+            catch (e) {
+                const aborted = e instanceof Error &&
+                    (e.name === "AbortError" || e.message.includes("aborted"));
+                if (aborted) {
+                    throw new Error(`Request timed out after ${timeoutMs}ms (${fullUrl}). ` +
+                        `If you run the Tailar web app locally, set API_BASE_URL in this project's .env, e.g. API_BASE_URL=http://localhost:3000/api/cli`);
+                }
+                throw e;
+            }
+            finally {
+                clearTimeout(timeoutId);
+            }
+            // Handle authentication errors
+            if (response.status === 401) {
+                if (requireAuth && attempt === 0) {
+                    // Try to re-authenticate once
+                    logger.warn("Authentication expired. Re-authenticating...");
+                    await authenticate();
+                    attempt++;
+                    continue;
+                }
+                throw new Error("Authentication failed. Please run authentication again.");
+            }
+            // Handle subscription errors
+            if (response.status === 403) {
+                const errorData = (await response.json().catch(() => ({})));
+                const reason = errorData.reason || errorData.error || "Subscription required";
+                throw new Error(`Access denied: ${reason}\n` +
+                    `Visit https://tailar.dev/choose-plan to upgrade your subscription.`);
+            }
+            // Handle not found errors
+            if (response.status === 404) {
+                const errorData = (await response.json().catch(() => ({})));
+                throw new Error(errorData.error || "Resource not found");
+            }
+            // Handle other errors
+            if (!response.ok) {
+                const errorData = (await response.json().catch(() => ({})));
+                throw new Error(errorData.error || `API request failed: ${response.statusText}`);
+            }
+            return (await response.json());
+        }
+        catch (error) {
+            lastError = error instanceof Error ? error : new Error(String(error));
+            // Don't retry on authentication/subscription errors
+            if (lastError.message.includes("Authentication") ||
+                lastError.message.includes("Access denied") ||
+                lastError.message.includes("not found")) {
+                throw lastError;
+            }
+            // Retry on network errors
+            if (attempt < retries) {
+                attempt++;
+                await new Promise((resolve) => setTimeout(resolve, RETRY_DELAY * attempt));
+                continue;
+            }
+            throw lastError;
+        }
+    }
+    throw lastError || new Error("API request failed");
+}
+/**
+ * Fetch registry.json from API
+ */
+export async function fetchRegistry(options = {}) {
+    try {
+        const params = new URLSearchParams();
+        if (options.version) {
+            params.append("version", options.version);
+        }
+        const endpoint = `/registry${params.toString() ? `?${params.toString()}` : ""}`;
+        // Registry is public endpoint (no auth required)
+        const registry = await apiRequest(endpoint, {
+            requireAuth: false,
+            method: "GET",
+        });
+        return registry;
+    }
+    catch (error) {
+        logger.error(`Failed to fetch registry: ${error instanceof Error ? error.message : String(error)}`);
+        throw error;
+    }
+}
+/**
+ * Fetch a single component file from API
+ */
+export async function fetchComponentFile(type, name, filePath, options = {}) {
+    try {
+        const params = new URLSearchParams();
+        params.append("path", filePath);
+        if (options.variant) {
+            params.append("variant", options.variant);
+        }
+        const endpoint = `/components/${type}/${name}/file?${params.toString()}`;
+        // If requireAuth is true, check authentication upfront and use auth headers from the start
+        // This prevents repeated authentication prompts for paid components
+        if (options.requireAuth === true) {
+            // Check if already authenticated
+            if (!(await isAuthenticated())) {
+                logger.info("Authentication required. Starting authentication flow...");
+                await authenticate();
+            }
+            // Use auth headers from the start
+            const response = await fetch(`${getApiBaseUrl()}${endpoint}`, {
+                method: "GET",
+                headers: {
+                    "User-Agent": "tailar-cli",
+                    ...(await getAuthHeaders()),
+                },
+            });
+            if (!response.ok) {
+                if (response.status === 403) {
+                    const errorData = (await response.json().catch(() => ({})));
+                    const reason = errorData.reason || errorData.error || "Subscription required";
+                    throw new Error(`Access denied: ${reason}\n` +
+                        `Visit https://tailar.dev/choose-plan to upgrade your subscription.`);
+                }
+                throw new Error(`Failed to fetch file: ${response.statusText}`);
+            }
+            return await response.text();
+        }
+        // For free components (requireAuth === false or undefined), try without auth first
+        // This allows free components to work without authentication
+        let response = await fetch(`${getApiBaseUrl()}${endpoint}`, {
+            method: "GET",
+            headers: {
+                "User-Agent": "tailar-cli",
+            },
+        });
+        // Handle 401 responses - component requires authentication
+        if (response.status === 401) {
+            // Try to authenticate and retry
+            logger.info("Authentication required. Starting authentication flow...");
+            await authenticate();
+            // Retry with auth headers
+            const retryResponse = await fetch(`${getApiBaseUrl()}${endpoint}`, {
+                method: "GET",
+                headers: {
+                    "User-Agent": "tailar-cli",
+                    ...(await getAuthHeaders()),
+                },
+            });
+            if (!retryResponse.ok) {
+                throw new Error(`Failed to fetch file: ${retryResponse.statusText}`);
+            }
+            return await retryResponse.text();
+        }
+        if (response.status === 403) {
+            const errorData = (await response.json().catch(() => ({})));
+            const reason = errorData.reason || errorData.error || "Subscription required";
+            throw new Error(`Access denied: ${reason}\n` +
+                `Visit https://tailar.dev/choose-plan to upgrade your subscription.`);
+        }
+        if (!response.ok) {
+            throw new Error(`Failed to fetch file: ${response.statusText}`);
+        }
+        return await response.text();
+    }
+    catch (error) {
+        if (error instanceof Error && error.message.includes("Access denied")) {
+            throw error;
+        }
+        logger.error(`Failed to fetch component file: ${error instanceof Error ? error.message : String(error)}`);
+        throw error;
+    }
+}
+/**
+ * Fetch component metadata from API
+ * @param requireAuth - If true, requires authentication (default: true for proper access checking)
+ */
+export async function fetchComponentMetadata(type, name, requireAuth = true) {
+    try {
+        const endpoint = `/components/${type}/${name}`;
+        // Metadata endpoint requires auth for proper subscription checking
+        const metadata = await apiRequest(endpoint, {
+            requireAuth,
+            method: "GET",
+        });
+        return metadata;
+    }
+    catch (error) {
+        logger.error(`Failed to fetch component metadata: ${error instanceof Error ? error.message : String(error)}`);
+        throw error;
+    }
+}
+/**
+ * Check if user has access to a component (via metadata endpoint)
+ * @param registryEntry - Optional registry entry to check subscription requirements before API call
+ */
+export async function checkSubscription(type, name, registryEntry) {
+    // If registry entry is provided and component doesn't require subscription, allow access immediately
+    if (registryEntry &&
+        (!registryEntry.requiresSubscription ||
+            (registryEntry.subscriptionTier || 0) === 0)) {
+        return { accessible: true };
+    }
+    try {
+        // For paid components or when registry entry is not provided, check via API
+        // Require auth for proper subscription checking
+        const metadata = await fetchComponentMetadata(type, name, true);
+        if (!metadata.requiresSubscription) {
+            return { accessible: true };
+        }
+        // For paid components, isAccessible must be explicitly true
+        // If it's false, undefined, or missing, deny access
+        // This handles the case where unauthenticated users get isAccessible: false
+        if (metadata.isAccessible !== true) {
+            // If isAccessible is explicitly false, use the reason from API
+            if (metadata.isAccessible === false && metadata.reason) {
+                return {
+                    accessible: false,
+                    reason: metadata.reason,
+                };
+            }
+            // isAccessible is false with no reason: server treated the request as anonymous.
+            // This happens when a locally-valid token was revoked server-side.
+            // If we have stored credentials, clear them and trigger a fresh auth flow.
+            const storedToken = await getStoredToken();
+            if (storedToken) {
+                logger.warn("Session revoked or expired. Re-authenticating...");
+                await clearToken();
+                await authenticate();
+                // Retry once with the new token
+                const retryMetadata = await fetchComponentMetadata(type, name, true);
+                if (!retryMetadata.requiresSubscription ||
+                    retryMetadata.isAccessible === true) {
+                    return { accessible: true };
+                }
+                return {
+                    accessible: false,
+                    reason: retryMetadata.reason ?? "Subscription required.",
+                };
+            }
+            return {
+                accessible: false,
+                reason: "Authentication and subscription required. Please authenticate first.",
+            };
+        }
+        return { accessible: true };
+    }
+    catch (error) {
+        // If authentication fails or API error, deny access
+        if (error instanceof Error &&
+            (error.message.includes("Authentication") ||
+                error.message.includes("Not authenticated") ||
+                error.message.includes("Authentication required"))) {
+            return {
+                accessible: false,
+                reason: "Authentication required. Please authenticate first.",
+            };
+        }
+        // For other errors, deny access
+        return {
+            accessible: false,
+            reason: error instanceof Error ? error.message : "Failed to verify access",
+        };
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/api/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhE,6DAA6D;AAC7D,sEAAsE;AACtE,SAAS,aAAa;IACpB,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,4BAA4B,CAAC;AAClE,CAAC;AACD,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,WAAW;AACrC,yFAAyF;AACzF,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAoB1C;;GAEG;AACH,KAAK,UAAU,UAAU,CACvB,QAAgB,EAChB,UAAwB,EAAE;IAE1B,MAAM,EACJ,WAAW,GAAG,KAAK,EACnB,OAAO,GAAG,WAAW,EACrB,MAAM,EACN,IAAI,EACJ,OAAO,EAAE,aAAa,GACvB,GAAG,OAAO,CAAC;IAEZ,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,SAAS,GAAiB,IAAI,CAAC;IAEnC,OAAO,OAAO,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,OAAO,GAA2B;gBACtC,cAAc,EAAE,kBAAkB;gBAClC,YAAY,EAAE,YAAY;gBAC1B,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;aACzB,CAAC;YAEF,+BAA+B;YAC/B,IAAI,WAAW,EAAE,CAAC;gBAChB,IAAI,CAAC;oBACH,MAAM,WAAW,GAAG,MAAM,cAAc,EAAE,CAAC;oBAC3C,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;gBACtC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,yCAAyC;oBACzC,IACE,KAAK,YAAY,KAAK;wBACtB,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAC3C,CAAC;wBACD,MAAM,CAAC,IAAI,CACT,0DAA0D,CAC3D,CAAC;wBACF,MAAM,YAAY,EAAE,CAAC;wBACrB,8BAA8B;wBAC9B,MAAM,WAAW,GAAG,MAAM,cAAc,EAAE,CAAC;wBAC3C,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;oBACtC,CAAC;yBAAM,CAAC;wBACN,MAAM,KAAK,CAAC;oBACd,CAAC;gBACH,CAAC;YACH,CAAC;YAED,MAAM,SAAS,GAAgC;gBAC7C,MAAM,EAAE,MAAM,IAAI,KAAK;gBACvB,OAAO;aACR,CAAC;YAEF,IAAI,IAAI,EAAE,CAAC;gBACT,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC;YACxB,CAAC;YAED,MAAM,OAAO,GAAG,GAAG,aAAa,EAAE,GAAG,QAAQ,EAAE,CAAC;YAChD,MAAM,SAAS,GACb,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;gBACjD,0BAA0B,CAAC;YAC7B,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;YAC9C,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;YACvE,SAAS,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC;YAE1C,IAAI,QAA2C,CAAC;YAChD,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,OAAO,GACX,CAAC,YAAY,KAAK;oBAClB,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC7D,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,IAAI,KAAK,CACb,2BAA2B,SAAS,OAAO,OAAO,KAAK;wBACrD,iIAAiI,CACpI,CAAC;gBACJ,CAAC;gBACD,MAAM,CAAC,CAAC;YACV,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;YAED,+BAA+B;YAC/B,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,IAAI,WAAW,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;oBACjC,8BAA8B;oBAC9B,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;oBAC5D,MAAM,YAAY,EAAE,CAAC;oBACrB,OAAO,EAAE,CAAC;oBACV,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;YACJ,CAAC;YAED,6BAA6B;YAC7B,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,MAAM,SAAS,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAGzD,CAAC;gBACF,MAAM,MAAM,GACV,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,KAAK,IAAI,uBAAuB,CAAC;gBACjE,MAAM,IAAI,KAAK,CACb,kBAAkB,MAAM,IAAI;oBAC1B,oEAAoE,CACvE,CAAC;YACJ,CAAC;YAED,0BAA0B;YAC1B,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,MAAM,SAAS,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAEzD,CAAC;gBACF,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI,oBAAoB,CAAC,CAAC;YAC3D,CAAC;YAED,sBAAsB;YACtB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAEzD,CAAC;gBACF,MAAM,IAAI,KAAK,CACb,SAAS,CAAC,KAAK,IAAI,uBAAuB,QAAQ,CAAC,UAAU,EAAE,CAChE,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAEtE,oDAAoD;YACpD,IACE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;gBAC5C,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAC3C,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EACvC,CAAC;gBACD,MAAM,SAAS,CAAC;YAClB,CAAC;YAED,0BAA0B;YAC1B,IAAI,OAAO,GAAG,OAAO,EAAE,CAAC;gBACtB,OAAO,EAAE,CAAC;gBACV,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAC5B,UAAU,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,CAC3C,CAAC;gBACF,SAAS;YACX,CAAC;YAED,MAAM,SAAS,CAAC;QAClB,CAAC;IACH,CAAC;IAED,MAAM,SAAS,IAAI,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;AACrD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAAwD,EAAE;IAE1D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,QAAQ,GAAG,YACf,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAChD,EAAE,CAAC;QAEH,iDAAiD;QACjD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAW,QAAQ,EAAE;YACpD,WAAW,EAAE,KAAK;YAClB,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CACV,6BACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;QACF,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAoD,EACpD,IAAY,EACZ,QAAgB,EAChB,UAAuD,EAAE;IAEzD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAChC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,QAAQ,GAAG,eAAe,IAAI,IAAI,IAAI,SAAS,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QAEzE,2FAA2F;QAC3F,oEAAoE;QACpE,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YACjC,iCAAiC;YACjC,IAAI,CAAC,CAAC,MAAM,eAAe,EAAE,CAAC,EAAE,CAAC;gBAC/B,MAAM,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;gBACxE,MAAM,YAAY,EAAE,CAAC;YACvB,CAAC;YAED,kCAAkC;YAClC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,aAAa,EAAE,GAAG,QAAQ,EAAE,EAAE;gBAC5D,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,YAAY,EAAE,YAAY;oBAC1B,GAAG,CAAC,MAAM,cAAc,EAAE,CAAC;iBAC5B;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,MAAM,SAAS,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAGzD,CAAC;oBACF,MAAM,MAAM,GACV,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,KAAK,IAAI,uBAAuB,CAAC;oBACjE,MAAM,IAAI,KAAK,CACb,kBAAkB,MAAM,IAAI;wBAC1B,oEAAoE,CACvE,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YAClE,CAAC;YAED,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;QAED,mFAAmF;QACnF,6DAA6D;QAC7D,IAAI,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,aAAa,EAAE,GAAG,QAAQ,EAAE,EAAE;YAC1D,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,YAAY,EAAE,YAAY;aAC3B;SACF,CAAC,CAAC;QAEH,2DAA2D;QAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,gCAAgC;YAChC,MAAM,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;YACxE,MAAM,YAAY,EAAE,CAAC;YACrB,0BAA0B;YAC1B,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,GAAG,aAAa,EAAE,GAAG,QAAQ,EAAE,EAAE;gBACjE,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,YAAY,EAAE,YAAY;oBAC1B,GAAG,CAAC,MAAM,cAAc,EAAE,CAAC;iBAC5B;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,yBAAyB,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC;YACvE,CAAC;YAED,OAAO,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;QACpC,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAGzD,CAAC;YACF,MAAM,MAAM,GACV,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,KAAK,IAAI,uBAAuB,CAAC;YACjE,MAAM,IAAI,KAAK,CACb,kBAAkB,MAAM,IAAI;gBAC1B,oEAAoE,CACvE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YACtE,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,CAAC,KAAK,CACV,mCACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;QACF,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAoD,EACpD,IAAY,EACZ,cAAuB,IAAI;IAE3B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,eAAe,IAAI,IAAI,IAAI,EAAE,CAAC;QAE/C,mEAAmE;QACnE,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAoB,QAAQ,EAAE;YAC7D,WAAW;YACX,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CACV,uCACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;QACF,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAoD,EACpD,IAAY,EACZ,aAGC;IAED,qGAAqG;IACrG,IACE,aAAa;QACb,CAAC,CAAC,aAAa,CAAC,oBAAoB;YAClC,CAAC,aAAa,CAAC,gBAAgB,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAC9C,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC;QACH,4EAA4E;QAC5E,gDAAgD;QAChD,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAEhE,IAAI,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC;YACnC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAC9B,CAAC;QAED,4DAA4D;QAC5D,oDAAoD;QACpD,4EAA4E;QAC5E,IAAI,QAAQ,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YACnC,+DAA+D;YAC/D,IAAI,QAAQ,CAAC,YAAY,KAAK,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACvD,OAAO;oBACL,UAAU,EAAE,KAAK;oBACjB,MAAM,EAAE,QAAQ,CAAC,MAAM;iBACxB,CAAC;YACJ,CAAC;YACD,iFAAiF;YACjF,mEAAmE;YACnE,2EAA2E;YAC3E,MAAM,WAAW,GAAG,MAAM,cAAc,EAAE,CAAC;YAC3C,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;gBAChE,MAAM,UAAU,EAAE,CAAC;gBACnB,MAAM,YAAY,EAAE,CAAC;gBACrB,gCAAgC;gBAChC,MAAM,aAAa,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gBACrE,IACE,CAAC,aAAa,CAAC,oBAAoB;oBACnC,aAAa,CAAC,YAAY,KAAK,IAAI,EACnC,CAAC;oBACD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;gBAC9B,CAAC;gBACD,OAAO;oBACL,UAAU,EAAE,KAAK;oBACjB,MAAM,EAAE,aAAa,CAAC,MAAM,IAAI,wBAAwB;iBACzD,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,UAAU,EAAE,KAAK;gBACjB,MAAM,EACJ,sEAAsE;aACzE,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,oDAAoD;QACpD,IACE,KAAK,YAAY,KAAK;YACtB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;gBACvC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC;gBAC3C,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC,EACpD,CAAC;YACD,OAAO;gBACL,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,qDAAqD;aAC9D,CAAC;QACJ,CAAC;QAED,gCAAgC;QAChC,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,MAAM,EACJ,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB;SACrE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/auth/browser.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Browser Utility
+ *
+ * Cross-platform browser opening functionality
+ */
+/**
+ * Open URL in default browser
+ * Cross-platform support (macOS, Linux, Windows)
+ */
+export declare function openBrowser(url: string): Promise<void>;
+//# sourceMappingURL=browser.d.ts.map

package/dist/auth/browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/auth/browser.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH;;;GAGG;AACH,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAiC5D"}

package/dist/auth/browser.js

@@ -0,0 +1,46 @@
+/**
+ * Browser Utility
+ *
+ * Cross-platform browser opening functionality
+ */
+import { logger } from "../utils/logger.js";
+/**
+ * Open URL in default browser
+ * Cross-platform support (macOS, Linux, Windows)
+ */
+export async function openBrowser(url) {
+    try {
+        // Use Node.js built-in child_process for cross-platform support
+        const { exec } = await import("child_process");
+        const { promisify } = await import("util");
+        const execAsync = promisify(exec);
+        const platform = process.platform;
+        let command;
+        if (platform === "win32") {
+            // Windows
+            command = `start "" "${url}"`;
+        }
+        else if (platform === "darwin") {
+            // macOS
+            command = `open "${url}"`;
+        }
+        else {
+            // Linux and other Unix-like systems
+            command = `xdg-open "${url}"`;
+        }
+        await execAsync(command);
+    }
+    catch (error) {
+        // Fallback: try using 'open' package if available
+        try {
+            const open = (await import("open")).default;
+            await open(url);
+        }
+        catch (fallbackError) {
+            logger.error(`Failed to open browser: ${error}`);
+            logger.info(`Please open this URL manually: ${url}`);
+            throw new Error(`Could not open browser. Please visit: ${url}`);
+        }
+    }
+}
+//# sourceMappingURL=browser.js.map

package/dist/auth/browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.js","sourceRoot":"","sources":["../../src/auth/browser.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW;IAC3C,IAAI,CAAC;QACH,gEAAgE;QAChE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;QAC/C,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAElC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,IAAI,OAAe,CAAC;QAEpB,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACzB,UAAU;YACV,OAAO,GAAG,aAAa,GAAG,GAAG,CAAC;QAChC,CAAC;aAAM,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,QAAQ;YACR,OAAO,GAAG,SAAS,GAAG,GAAG,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,oCAAoC;YACpC,OAAO,GAAG,aAAa,GAAG,GAAG,CAAC;QAChC,CAAC;QAED,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,kDAAkD;QAClD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YAC5C,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,aAAa,EAAE,CAAC;YACvB,MAAM,CAAC,KAAK,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAC;YACjD,MAAM,CAAC,IAAI,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,yCAAyC,GAAG,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/auth/flow.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Auth Flow Module
+ *
+ * Handles CLI authentication via device code flow
+ */
+import { type TokenData } from "./storage.js";
+/**
+ * Generate device code and start authentication flow
+ */
+export declare function authenticate(): Promise<TokenData>;
+/**
+ * Refresh an expired access token
+ */
+export declare function refreshToken(refreshTokenValue: string): Promise<TokenData>;
+/**
+ * Get Authorization header with current valid token
+ * Automatically refreshes token if expired
+ */
+export declare function getAuthHeaders(): Promise<Record<string, string>>;
+/**
+ * Check if user is authenticated
+ */
+export declare function isAuthenticated(): Promise<boolean>;
+/**
+ * Logout (clear stored tokens)
+ */
+export declare function logout(): Promise<void>;
+//# sourceMappingURL=flow.d.ts.map

package/dist/auth/flow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow.d.ts","sourceRoot":"","sources":["../../src/auth/flow.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,OAAO,EAKL,KAAK,SAAS,EACf,MAAM,cAAc,CAAC;AA4BtB;;GAEG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,SAAS,CAAC,CA+FvD;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAAC,SAAS,CAAC,CAsCpB;AAED;;;GAGG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAsBtE;AAED;;GAEG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,CAGxD;AAED;;GAEG;AACH,wBAAsB,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAG5C"}

package/dist/auth/flow.js

@@ -0,0 +1,171 @@
+/**
+ * Auth Flow Module
+ *
+ * Handles CLI authentication via device code flow
+ */
+import fetch from "node-fetch";
+import chalk from "chalk";
+import { logger } from "../utils/logger.js";
+import { openBrowser } from "./browser.js";
+import { getStoredToken, saveToken, clearToken, isTokenValid, } from "./storage.js";
+// Lazy-load API_BASE_URL to ensure .env file is loaded first
+// This is a function because .env file is loaded after module imports
+function getApiBaseUrl() {
+    return process.env.API_BASE_URL || "https://tailar.dev/api/cli";
+}
+const POLL_INTERVAL = 2000; // 2 seconds
+const MAX_WAIT_TIME = 10 * 60 * 1000; // 10 minutes
+/**
+ * Generate device code and start authentication flow
+ */
+export async function authenticate() {
+    logger.info("Starting authentication...");
+    try {
+        // Step 1: Get device code
+        const deviceCodeResponse = await fetch(`${getApiBaseUrl()}/device-code`, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+            },
+        });
+        if (!deviceCodeResponse.ok) {
+            throw new Error(`Failed to get device code: ${deviceCodeResponse.statusText}`);
+        }
+        const deviceData = (await deviceCodeResponse.json());
+        logger.break();
+        logger.info("To authenticate, please visit:");
+        logger.log(`  ${deviceData.verificationUrl}`);
+        logger.break();
+        logger.info("Enter this code when prompted:");
+        logger.log(`  ${chalk.bold(deviceData.userCode)}`);
+        logger.break();
+        // Step 2: Open browser
+        try {
+            await openBrowser(deviceData.verificationUrl);
+            logger.info("Opening browser...");
+        }
+        catch (error) {
+            logger.warn("Could not open browser automatically");
+            logger.info(`Please visit: ${deviceData.verificationUrl}`);
+        }
+        // Step 3: Poll for authorization
+        const spinner = logger.spinner("Waiting for authorization...");
+        const startTime = Date.now();
+        while (Date.now() - startTime < MAX_WAIT_TIME) {
+            await new Promise((resolve) => setTimeout(resolve, POLL_INTERVAL));
+            const tokenResponse = await fetch(`${getApiBaseUrl()}/token`, {
+                method: "POST",
+                headers: {
+                    "Content-Type": "application/json",
+                },
+                body: JSON.stringify({
+                    deviceCode: deviceData.deviceCode,
+                    grantType: "device_code",
+                }),
+            });
+            const tokenData = (await tokenResponse.json());
+            if ("error" in tokenData) {
+                if (tokenData.error === "authorization_pending") {
+                    // Still waiting for authorization
+                    continue;
+                }
+                else {
+                    spinner.fail();
+                    throw new Error(`Authentication failed: ${tokenData.error}`);
+                }
+            }
+            else {
+                // Success! We got tokens
+                spinner.succeed("Authorization successful!");
+                const expiresAt = Math.floor(Date.now() / 1000) + tokenData.expiresIn;
+                const tokenDataToStore = {
+                    accessToken: tokenData.accessToken,
+                    refreshToken: tokenData.refreshToken,
+                    expiresAt,
+                };
+                await saveToken(tokenDataToStore);
+                logger.success("Authentication complete!");
+                return tokenDataToStore;
+            }
+        }
+        spinner.fail();
+        throw new Error("Authentication timeout. Please try again.");
+    }
+    catch (error) {
+        logger.error(`Authentication failed: ${error instanceof Error ? error.message : String(error)}`);
+        throw error;
+    }
+}
+/**
+ * Refresh an expired access token
+ */
+export async function refreshToken(refreshTokenValue) {
+    try {
+        const response = await fetch(`${getApiBaseUrl()}/refresh`, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+            },
+            body: JSON.stringify({
+                refreshToken: refreshTokenValue,
+            }),
+        });
+        if (!response.ok) {
+            const errorData = (await response.json());
+            throw new Error(`Token refresh failed: ${errorData.error || response.statusText}`);
+        }
+        const tokenData = (await response.json());
+        const expiresAt = Math.floor(Date.now() / 1000) + tokenData.expiresIn;
+        const tokenDataToStore = {
+            accessToken: tokenData.accessToken,
+            refreshToken: tokenData.refreshToken,
+            expiresAt,
+        };
+        await saveToken(tokenDataToStore);
+        return tokenDataToStore;
+    }
+    catch (error) {
+        logger.error(`Token refresh failed: ${error instanceof Error ? error.message : String(error)}`);
+        throw error;
+    }
+}
+/**
+ * Get Authorization header with current valid token
+ * Automatically refreshes token if expired
+ */
+export async function getAuthHeaders() {
+    let tokenData = await getStoredToken();
+    if (!tokenData) {
+        throw new Error("Not authenticated. Please run authentication first.");
+    }
+    // Check if token is expired or about to expire
+    if (!isTokenValid(tokenData)) {
+        logger.info("Token expired, refreshing...");
+        try {
+            tokenData = await refreshToken(tokenData.refreshToken);
+        }
+        catch (error) {
+            // Refresh failed, clear token and require re-authentication
+            await clearToken();
+            throw new Error("Token refresh failed. Please authenticate again.");
+        }
+    }
+    return {
+        Authorization: `Bearer ${tokenData.accessToken}`,
+    };
+}
+/**
+ * Check if user is authenticated
+ */
+export async function isAuthenticated() {
+    const tokenData = await getStoredToken();
+    return tokenData !== null && isTokenValid(tokenData);
+}
+/**
+ * Logout (clear stored tokens)
+ */
+export async function logout() {
+    await clearToken();
+    logger.success("Logged out successfully");
+}
+//# sourceMappingURL=flow.js.map

package/dist/auth/flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow.js","sourceRoot":"","sources":["../../src/auth/flow.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EACL,cAAc,EACd,SAAS,EACT,UAAU,EACV,YAAY,GAEb,MAAM,cAAc,CAAC;AAEtB,6DAA6D;AAC7D,sEAAsE;AACtE,SAAS,aAAa;IACpB,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,4BAA4B,CAAC;AAClE,CAAC;AACD,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,YAAY;AACxC,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,aAAa;AAoBnD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAE1C,IAAI,CAAC;QACH,0BAA0B;QAC1B,MAAM,kBAAkB,GAAG,MAAM,KAAK,CAAC,GAAG,aAAa,EAAE,cAAc,EAAE;YACvE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;aACnC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,kBAAkB,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,8BAA8B,kBAAkB,CAAC,UAAU,EAAE,CAC9D,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,CAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,CAAuB,CAAC;QAE3E,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,eAAe,EAAE,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,EAAE,CAAC;QAEf,uBAAuB;QACvB,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;YACpD,MAAM,CAAC,IAAI,CAAC,iBAAiB,UAAU,CAAC,eAAe,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,iCAAiC;QACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,aAAa,EAAE,CAAC;YAC9C,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;YAEnE,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,GAAG,aAAa,EAAE,QAAQ,EAAE;gBAC5D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,UAAU,EAAE,UAAU,CAAC,UAAU;oBACjC,SAAS,EAAE,aAAa;iBACzB,CAAC;aACH,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,CAEvB,CAAC;YAEvB,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC;gBACzB,IAAI,SAAS,CAAC,KAAK,KAAK,uBAAuB,EAAE,CAAC;oBAChD,kCAAkC;oBAClC,SAAS;gBACX,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,EAAE,CAAC;oBACf,MAAM,IAAI,KAAK,CAAC,0BAA0B,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC/D,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,yBAAyB;gBACzB,OAAO,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;gBAE7C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC;gBACtE,MAAM,gBAAgB,GAAc;oBAClC,WAAW,EAAE,SAAS,CAAC,WAAW;oBAClC,YAAY,EAAE,SAAS,CAAC,YAAY;oBACpC,SAAS;iBACV,CAAC;gBAEF,MAAM,SAAS,CAAC,gBAAgB,CAAC,CAAC;gBAClC,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;gBAE3C,OAAO,gBAAgB,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,OAAO,CAAC,IAAI,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CACV,0BACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;QACF,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,iBAAyB;IAEzB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,aAAa,EAAE,UAAU,EAAE;YACzD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,YAAY,EAAE,iBAAiB;aAChC,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuB,CAAC;YAChE,MAAM,IAAI,KAAK,CACb,yBAAyB,SAAS,CAAC,KAAK,IAAI,QAAQ,CAAC,UAAU,EAAE,CAClE,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAkB,CAAC;QAE3D,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC;QACtE,MAAM,gBAAgB,GAAc;YAClC,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,SAAS;SACV,CAAC;QAEF,MAAM,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAClC,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CACV,yBACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;QACF,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,IAAI,SAAS,GAAG,MAAM,cAAc,EAAE,CAAC;IAEvC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IAED,+CAA+C;IAC/C,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,4DAA4D;YAC5D,MAAM,UAAU,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,OAAO;QACL,aAAa,EAAE,UAAU,SAAS,CAAC,WAAW,EAAE;KACjD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,SAAS,GAAG,MAAM,cAAc,EAAE,CAAC;IACzC,OAAO,SAAS,KAAK,IAAI,IAAI,YAAY,CAAC,SAAS,CAAC,CAAC;AACvD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM;IAC1B,MAAM,UAAU,EAAE,CAAC;IACnB,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;AAC5C,CAAC"}

package/dist/auth/storage.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Auth Storage Module
+ *
+ * Handles storing and retrieving CLI authentication tokens
+ * Platform-specific path resolution for credentials file
+ */
+export interface TokenData {
+    accessToken: string;
+    refreshToken: string;
+    expiresAt: number;
+    userId?: string;
+    email?: string;
+}
+/**
+ * Read stored token from credentials file
+ */
+export declare function getStoredToken(): Promise<TokenData | null>;
+/**
+ * Save token to credentials file
+ */
+export declare function saveToken(tokenData: TokenData): Promise<void>;
+/**
+ * Clear stored token (delete credentials file)
+ */
+export declare function clearToken(): Promise<void>;
+/**
+ * Check if token exists and is not expired
+ */
+export declare function isTokenValid(tokenData: TokenData | null): boolean;
+//# sourceMappingURL=storage.d.ts.map

package/dist/auth/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/auth/storage.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,MAAM,WAAW,SAAS;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AA8BD;;GAEG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CA2BhE;AAED;;GAEG;AACH,wBAAsB,SAAS,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBnE;AAED;;GAEG;AACH,wBAAsB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAUhD;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,SAAS,GAAG,IAAI,GAAG,OAAO,CAUjE"}