transloadit 4.7.2 → 4.7.3

package/README.md

@@ -57,6 +57,16 @@ export TRANSLOADIT_SECRET="YOUR_TRANSLOADIT_SECRET"
 npx transloadit --help
 ```
 
+### Minting Bearer Tokens (Hosted MCP)
+
+If you want to connect an agent to the Transloadit-hosted MCP endpoint, mint a short-lived bearer
+token via `POST /token`:
+
+```bash
+# Prints JSON to stdout (stderr may include npx/npm noise)
+npx -y transloadit auth token --aud mcp
+```
+
 ### Processing Media
 
 Create Assemblies to process files using Assembly Instructions (steps) or Templates:

package/dist/cli/commands/BaseCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"BaseCommand.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/BaseCommand.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAA;AAEtB,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAA;AAC3C,OAAO,EAAE,WAAW,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAEvE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAGjD,uBAAe,WAAY,SAAQ,OAAO;IACxC,cAAc,qBAEZ;IAEF,IAAI,UAEF;IAEF,QAAQ,qBAGN;IAEF,SAAS,CAAC,MAAM,EAAG,UAAU,CAAA;IAC7B,SAAS,CAAC,MAAM,EAAG,iBAAiB,CAAA;IAEpC,SAAS,CAAC,WAAW,IAAI,IAAI;IAQ7B,SAAS,CAAC,WAAW,IAAI,OAAO;aAed,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CACzD;AAED,8BAAsB,oBAAqB,SAAQ,WAAW;IAC7C,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAQrD,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CACtD;AAED,8BAAsB,sBAAuB,SAAQ,WAAW;IAC/C,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAKrD,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CACtD"}
+{"version":3,"file":"BaseCommand.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/BaseCommand.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAA;AAEtB,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAA;AAC3C,OAAO,EAAE,WAAW,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAEvE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAGjD,uBAAe,WAAY,SAAQ,OAAO;IACxC,cAAc,qBAEZ;IAEF,IAAI,UAEF;IAEF,QAAQ,qBAGN;IAEF,SAAS,CAAC,MAAM,EAAG,UAAU,CAAA;IAC7B,SAAS,CAAC,MAAM,EAAG,iBAAiB,CAAA;IAEpC,SAAS,CAAC,WAAW,IAAI,IAAI;IAQ7B,SAAS,CAAC,WAAW,IAAI,OAAO;aAgBd,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CACzD;AAED,8BAAsB,oBAAqB,SAAQ,WAAW;IAC7C,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAQrD,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CACtD;AAED,8BAAsB,sBAAuB,SAAQ,WAAW;IAC/C,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAKrD,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CACtD"}

package/dist/cli/commands/BaseCommand.js

@@ -2,7 +2,7 @@ import 'dotenv/config';
 import process from 'node:process';
 import { Command, Option } from 'clipanion';
 import { Transloadit as TransloaditClient } from "../../Transloadit.js";
-import { getEnvCredentials } from "../helpers.js";
+import { requireEnvCredentials } from "../helpers.js";
 import OutputCtl, { LOG_LEVEL_DEFAULT, LOG_LEVEL_NAMES, parseLogLevel } from "../OutputCtl.js";
 class BaseCommand extends Command {
     logLevelOption = Option.String('-l,--log-level', {
@@ -24,13 +24,16 @@ class BaseCommand extends Command {
         });
     }
     setupClient() {
-        const creds = getEnvCredentials();
-        if (!creds) {
-            this.output.error('Please provide API authentication in the environment variables TRANSLOADIT_KEY and TRANSLOADIT_SECRET');
+        const credsResult = requireEnvCredentials();
+        if (!credsResult.ok) {
+            this.output.error(credsResult.error);
             return false;
         }
         const endpoint = this.endpoint || process.env.TRANSLOADIT_ENDPOINT;
-        this.client = new TransloaditClient({ ...creds, ...(endpoint && { endpoint }) });
+        this.client = new TransloaditClient({
+            ...credsResult.credentials,
+            ...(endpoint && { endpoint }),
+        });
         return true;
     }
 }

package/dist/cli/commands/BaseCommand.js.map

@@ -1 +1 @@
-{"version":3,"file":"BaseCommand.js","sourceRoot":"","sources":["../../../src/cli/commands/BaseCommand.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAA;AACtB,OAAO,OAAO,MAAM,cAAc,CAAA;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AAC3C,OAAO,EAAE,WAAW,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AAEjD,OAAO,SAAS,EAAE,EAAE,iBAAiB,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAE9F,MAAe,WAAY,SAAQ,OAAO;IACxC,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE;QAC/C,WAAW,EAAE,cAAc,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B;KACjF,CAAC,CAAA;IAEF,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE;QACxC,WAAW,EAAE,uBAAuB;KACrC,CAAC,CAAA;IAEF,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE;QACrC,WAAW,EACT,2FAA2F;KAC9F,CAAC,CAAA;IAEQ,MAAM,CAAa;IACnB,MAAM,CAAoB;IAE1B,WAAW;QACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAA;QAC7F,IAAI,CAAC,MAAM,GAAG,IAAI,SAAS,CAAC;YAC1B,QAAQ;YACR,QAAQ,EAAE,IAAI,CAAC,IAAI;SACpB,CAAC,CAAA;IACJ,CAAC;IAES,WAAW;QACnB,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAA;QACjC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,uGAAuG,CACxG,CAAA;YACD,OAAO,KAAK,CAAA;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAA;QAElE,IAAI,CAAC,MAAM,GAAG,IAAI,iBAAiB,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAA;QAChF,OAAO,IAAI,CAAA;IACb,CAAC;CAGF;AAED,MAAM,OAAgB,oBAAqB,SAAQ,WAAW;IACnD,KAAK,CAAC,OAAO;QACpB,IAAI,CAAC,WAAW,EAAE,CAAA;QAClB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,OAAO,CAAC,CAAA;QACV,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,GAAG,EAAE,CAAA;IACzB,CAAC;CAGF;AAED,MAAM,OAAgB,sBAAuB,SAAQ,WAAW;IACrD,KAAK,CAAC,OAAO;QACpB,IAAI,CAAC,WAAW,EAAE,CAAA;QAClB,OAAO,MAAM,IAAI,CAAC,GAAG,EAAE,CAAA;IACzB,CAAC;CAGF"}
+{"version":3,"file":"BaseCommand.js","sourceRoot":"","sources":["../../../src/cli/commands/BaseCommand.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAA;AACtB,OAAO,OAAO,MAAM,cAAc,CAAA;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AAC3C,OAAO,EAAE,WAAW,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AAErD,OAAO,SAAS,EAAE,EAAE,iBAAiB,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAE9F,MAAe,WAAY,SAAQ,OAAO;IACxC,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE;QAC/C,WAAW,EAAE,cAAc,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B;KACjF,CAAC,CAAA;IAEF,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE;QACxC,WAAW,EAAE,uBAAuB;KACrC,CAAC,CAAA;IAEF,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE;QACrC,WAAW,EACT,2FAA2F;KAC9F,CAAC,CAAA;IAEQ,MAAM,CAAa;IACnB,MAAM,CAAoB;IAE1B,WAAW;QACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAA;QAC7F,IAAI,CAAC,MAAM,GAAG,IAAI,SAAS,CAAC;YAC1B,QAAQ;YACR,QAAQ,EAAE,IAAI,CAAC,IAAI;SACpB,CAAC,CAAA;IACJ,CAAC;IAES,WAAW;QACnB,MAAM,WAAW,GAAG,qBAAqB,EAAE,CAAA;QAC3C,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;YACpC,OAAO,KAAK,CAAA;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAA;QAElE,IAAI,CAAC,MAAM,GAAG,IAAI,iBAAiB,CAAC;YAClC,GAAG,WAAW,CAAC,WAAW;YAC1B,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC;SAC9B,CAAC,CAAA;QACF,OAAO,IAAI,CAAA;IACb,CAAC;CAGF;AAED,MAAM,OAAgB,oBAAqB,SAAQ,WAAW;IACnD,KAAK,CAAC,OAAO;QACpB,IAAI,CAAC,WAAW,EAAE,CAAA;QAClB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,OAAO,CAAC,CAAA;QACV,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,GAAG,EAAE,CAAA;IACzB,CAAC;CAGF;AAED,MAAM,OAAgB,sBAAuB,SAAQ,WAAW;IACrD,KAAK,CAAC,OAAO;QACpB,IAAI,CAAC,WAAW,EAAE,CAAA;QAClB,OAAO,MAAM,IAAI,CAAC,GAAG,EAAE,CAAA;IACzB,CAAC;CAGF"}

package/dist/cli/commands/auth.d.ts

@@ -6,6 +6,10 @@ export interface RunSigOptions {
 export interface RunSmartSigOptions {
     providedInput?: string;
 }
+export interface RequestTokenOptions {
+    endpoint?: string;
+    aud?: string;
+}
 export declare function runSig(options?: RunSigOptions): Promise<void>;
 export declare function runSmartSig(options?: RunSmartSigOptions): Promise<void>;
 /**
@@ -25,4 +29,15 @@ export declare class SmartCdnSignatureCommand extends UnauthenticatedCommand {
     static usage: import("clipanion").Usage;
     protected run(): Promise<number | undefined>;
 }
+/**
+ * Mint a short-lived bearer token via POST /token (HTTP Basic Auth).
+ *
+ * This is intentionally stdout-clean JSON so it can be used by agents and scripts.
+ */
+export declare class TokenCommand extends UnauthenticatedCommand {
+    static paths: string[][];
+    static usage: import("clipanion").Usage;
+    aud: string | undefined;
+    protected run(): Promise<number | undefined>;
+}
 //# sourceMappingURL=auth.d.ts.map

package/dist/cli/commands/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/auth.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AAgLzD,MAAM,WAAW,aAAa;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,wBAAsB,MAAM,CAAC,OAAO,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBvE;AAED,wBAAsB,WAAW,CAAC,OAAO,GAAE,kBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBjF;AAED;;GAEG;AACH,qBAAa,gBAAiB,SAAQ,sBAAsB;IAC1D,OAAgB,KAAK,aAKpB;IAED,OAAgB,KAAK,4BAYnB;IAEF,SAAS,qBAEP;cAEc,GAAG,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAqBnD;AAED;;GAEG;AACH,qBAAa,wBAAyB,SAAQ,sBAAsB;IAClE,OAAgB,KAAK,aAKpB;IAED,OAAgB,KAAK,4BAkBnB;cAEc,GAAG,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAqBnD"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/auth.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AAgLzD,MAAM,WAAW,aAAa;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAkJD,wBAAsB,MAAM,CAAC,OAAO,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBvE;AAED,wBAAsB,WAAW,CAAC,OAAO,GAAE,kBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBjF;AAED;;GAEG;AACH,qBAAa,gBAAiB,SAAQ,sBAAsB;IAC1D,OAAgB,KAAK,aAKpB;IAED,OAAgB,KAAK,4BAYnB;IAEF,SAAS,qBAEP;cAEc,GAAG,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAoBnD;AAED;;GAEG;AACH,qBAAa,wBAAyB,SAAQ,sBAAsB;IAClE,OAAgB,KAAK,aAKpB;IAED,OAAgB,KAAK,4BAkBnB;cAEc,GAAG,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAoBnD;AAED;;;;GAIG;AACH,qBAAa,YAAa,SAAQ,sBAAsB;IACtD,OAAgB,KAAK,aAAsB;IAE3C,OAAgB,KAAK,4BAWnB;IAEF,GAAG,qBAED;cAEuB,GAAG,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAoB5D"}

package/dist/cli/commands/auth.js

@@ -3,7 +3,7 @@ import { Command, Option } from 'clipanion';
 import { z } from 'zod';
 import { assemblyAuthInstructionsSchema, assemblyInstructionsSchema, } from "../../alphalib/types/template.js";
 import { Transloadit } from "../../Transloadit.js";
-import { getEnvCredentials, readCliInput } from "../helpers.js";
+import { readCliInput, requireEnvCredentials } from "../helpers.js";
 import { UnauthenticatedCommand } from "./BaseCommand.js";
 const smartCdnParamsSchema = z
     .object({
@@ -52,7 +52,23 @@ function normalizeUrlParams(params) {
     }
     return normalized;
 }
-const getCredentials = getEnvCredentials;
+function parseJsonObject(input, schema) {
+    let parsed;
+    try {
+        parsed = JSON.parse(input);
+    }
+    catch (error) {
+        return { ok: false, error: `Failed to parse JSON from stdin: ${error.message}` };
+    }
+    if (parsed == null || typeof parsed !== 'object' || Array.isArray(parsed)) {
+        return { ok: false, error: 'Invalid params provided via stdin. Expected a JSON object.' };
+    }
+    const parsedResult = schema.safeParse(parsed);
+    if (!parsedResult.success) {
+        return { ok: false, error: `Invalid params: ${formatIssues(parsedResult.error.issues)}` };
+    }
+    return { ok: true, value: parsedResult.data };
+}
 // Core logic for signature generation
 function generateSignature(input, credentials, algorithm) {
     const { authKey, authSecret } = credentials;
@@ -61,21 +77,11 @@ function generateSignature(input, credentials, algorithm) {
         params = { auth: { key: authKey } };
     }
     else {
-        let parsed;
-        try {
-            parsed = JSON.parse(input);
-        }
-        catch (error) {
-            return { ok: false, error: `Failed to parse JSON from stdin: ${error.message}` };
+        const parsedResult = parseJsonObject(input, cliSignatureParamsSchema);
+        if (!parsedResult.ok) {
+            return { ok: false, error: parsedResult.error };
         }
-        if (parsed == null || typeof parsed !== 'object' || Array.isArray(parsed)) {
-            return { ok: false, error: 'Invalid params provided via stdin. Expected a JSON object.' };
-        }
-        const parsedResult = cliSignatureParamsSchema.safeParse(parsed);
-        if (!parsedResult.success) {
-            return { ok: false, error: `Invalid params: ${formatIssues(parsedResult.error.issues)}` };
-        }
-        const parsedParams = parsedResult.data;
+        const parsedParams = parsedResult.value;
         const existingAuth = parsedParams.auth ?? {};
         params = {
             ...parsedParams,
@@ -103,21 +109,11 @@ function generateSmartCdnUrl(input, credentials) {
             error: 'Missing params provided via stdin. Expected a JSON object with workspace, template, input, and optional Smart CDN parameters.',
         };
     }
-    let parsed;
-    try {
-        parsed = JSON.parse(input);
-    }
-    catch (error) {
-        return { ok: false, error: `Failed to parse JSON from stdin: ${error.message}` };
+    const parsedResult = parseJsonObject(input, smartCdnParamsSchema);
+    if (!parsedResult.ok) {
+        return { ok: false, error: parsedResult.error };
     }
-    if (parsed == null || typeof parsed !== 'object' || Array.isArray(parsed)) {
-        return { ok: false, error: 'Invalid params provided via stdin. Expected a JSON object.' };
-    }
-    const parsedResult = smartCdnParamsSchema.safeParse(parsed);
-    if (!parsedResult.success) {
-        return { ok: false, error: `Invalid params: ${formatIssues(parsedResult.error.issues)}` };
-    }
-    const { workspace, template, input: inputFieldRaw, url_params, expire_at_ms } = parsedResult.data;
+    const { workspace, template, input: inputFieldRaw, url_params, expire_at_ms } = parsedResult.value;
     const urlParams = normalizeUrlParams(url_params);
     let expiresAt;
     if (typeof expire_at_ms === 'string') {
@@ -146,13 +142,135 @@ function generateSmartCdnUrl(input, credentials) {
         return { ok: false, error: `Failed to generate Smart CDN URL: ${error.message}` };
     }
 }
+const tokenErrorSchema = z
+    .object({
+    error: z.string(),
+    message: z.string().optional(),
+})
+    .passthrough();
+const tokenSuccessSchema = z
+    .object({
+    access_token: z.string().min(1),
+})
+    .passthrough();
+const buildBasicAuthHeaderValue = (credentials) => `Basic ${Buffer.from(`${credentials.authKey}:${credentials.authSecret}`, 'utf8').toString('base64')}`;
+const isLoopbackHost = (hostname) => hostname === 'localhost' || hostname === '::1' || hostname.startsWith('127.');
+const normalizeTokenBaseEndpoint = (raw) => {
+    const baseRaw = (raw || process.env.TRANSLOADIT_ENDPOINT || 'https://api2.transloadit.com').trim();
+    let url;
+    try {
+        url = new URL(baseRaw);
+    }
+    catch {
+        return {
+            ok: false,
+            error: 'Invalid endpoint URL. Use --endpoint https://api2.transloadit.com (or set TRANSLOADIT_ENDPOINT).',
+        };
+    }
+    if (url.username || url.password) {
+        return { ok: false, error: 'Endpoint must not include username/password.' };
+    }
+    if (url.search || url.hash) {
+        return { ok: false, error: 'Endpoint must not include query string or hash.' };
+    }
+    if (url.protocol !== 'https:') {
+        if (url.protocol === 'http:' && isLoopbackHost(url.hostname)) {
+            // Allowed for local development only.
+        }
+        else {
+            return {
+                ok: false,
+                error: 'Refusing to send credentials to a non-HTTPS endpoint. Use https://... (or http://localhost for local development).',
+            };
+        }
+    }
+    // If someone pasted the token URL, normalize it back to the API base to avoid /token/token.
+    const pathLower = url.pathname.toLowerCase();
+    if (pathLower === '/token' || pathLower === '/token/') {
+        url.pathname = '/';
+    }
+    if (!url.pathname.endsWith('/')) {
+        url.pathname = `${url.pathname}/`;
+    }
+    return { ok: true, baseUrl: url };
+};
+async function requestTokenWithCredentials(credentials, options = {}) {
+    const endpointResult = normalizeTokenBaseEndpoint(options.endpoint);
+    if (!endpointResult.ok) {
+        return { ok: false, error: endpointResult.error };
+    }
+    const url = new URL('token', endpointResult.baseUrl).toString();
+    const aud = (options.aud ?? 'mcp').trim() || 'mcp';
+    const body = new URLSearchParams({ grant_type: 'client_credentials', aud }).toString();
+    let res;
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), 15_000);
+    try {
+        res = await fetch(url, {
+            method: 'POST',
+            // Never follow redirects with Basic Auth credentials.
+            redirect: 'error',
+            signal: controller.signal,
+            headers: {
+                Authorization: buildBasicAuthHeaderValue(credentials),
+                Accept: 'application/json',
+                'Content-Type': 'application/x-www-form-urlencoded',
+            },
+            body,
+        });
+    }
+    catch (err) {
+        clearTimeout(timeout);
+        if (err instanceof Error && err.name === 'AbortError') {
+            return { ok: false, error: 'Failed to mint bearer token: request timed out after 15s.' };
+        }
+        const message = err instanceof Error ? err.message : String(err);
+        return { ok: false, error: `Failed to mint bearer token: ${message}` };
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+    const text = await res.text();
+    const trimmed = text.trim();
+    let parsedJson = null;
+    try {
+        parsedJson = trimmed ? JSON.parse(trimmed) : null;
+    }
+    catch {
+        parsedJson = null;
+    }
+    if (res.ok) {
+        if (parsedJson == null) {
+            return { ok: false, error: 'Token response was not valid JSON.' };
+        }
+        const parsed = tokenSuccessSchema.safeParse(parsedJson);
+        if (!parsed.success) {
+            return { ok: false, error: 'Token response did not include an access_token.' };
+        }
+        return { ok: true, output: trimmed };
+    }
+    const parsedError = tokenErrorSchema.safeParse(parsedJson);
+    if (parsedError.success) {
+        return {
+            ok: false,
+            error: parsedError.data.message
+                ? `${parsedError.data.error}: ${parsedError.data.message}`
+                : parsedError.data.error,
+        };
+    }
+    return {
+        ok: false,
+        error: `Token request failed (${res.status}): ${trimmed || res.statusText}`,
+    };
+}
 export async function runSig(options = {}) {
-    const credentials = getCredentials();
-    if (credentials == null) {
-        console.error('Missing credentials. Please set TRANSLOADIT_KEY and TRANSLOADIT_SECRET environment variables.');
+    const credentialsResult = requireEnvCredentials();
+    if (!credentialsResult.ok) {
+        console.error(credentialsResult.error);
         process.exitCode = 1;
         return;
     }
+    const credentials = credentialsResult.credentials;
     const { content } = await readCliInput({
         providedInput: options.providedInput,
         allowStdinWhenNoPath: true,
@@ -168,12 +286,13 @@ export async function runSig(options = {}) {
     }
 }
 export async function runSmartSig(options = {}) {
-    const credentials = getCredentials();
-    if (credentials == null) {
-        console.error('Missing credentials. Please set TRANSLOADIT_KEY and TRANSLOADIT_SECRET environment variables.');
+    const credentialsResult = requireEnvCredentials();
+    if (!credentialsResult.ok) {
+        console.error(credentialsResult.error);
         process.exitCode = 1;
         return;
     }
+    const credentials = credentialsResult.credentials;
     const { content } = await readCliInput({
         providedInput: options.providedInput,
         allowStdinWhenNoPath: true,
@@ -215,11 +334,12 @@ export class SignatureCommand extends UnauthenticatedCommand {
         description: 'Signature algorithm to use (sha1, sha256, sha384, sha512)',
     });
     async run() {
-        const credentials = getCredentials();
-        if (credentials == null) {
-            this.output.error('Missing credentials. Please set TRANSLOADIT_KEY and TRANSLOADIT_SECRET environment variables.');
+        const credentialsResult = requireEnvCredentials();
+        if (!credentialsResult.ok) {
+            this.output.error(credentialsResult.error);
             return 1;
         }
+        const credentials = credentialsResult.credentials;
         const { content } = await readCliInput({ allowStdinWhenNoPath: true });
         const rawInput = (content ?? '').trim();
         const result = generateSignature(rawInput, credentials, this.algorithm);
@@ -261,11 +381,12 @@ export class SmartCdnSignatureCommand extends UnauthenticatedCommand {
         ],
     });
     async run() {
-        const credentials = getCredentials();
-        if (credentials == null) {
-            this.output.error('Missing credentials. Please set TRANSLOADIT_KEY and TRANSLOADIT_SECRET environment variables.');
+        const credentialsResult = requireEnvCredentials();
+        if (!credentialsResult.ok) {
+            this.output.error(credentialsResult.error);
             return 1;
         }
+        const credentials = credentialsResult.credentials;
         const { content } = await readCliInput({ allowStdinWhenNoPath: true });
         const rawInput = (content ?? '').trim();
         const result = generateSmartCdnUrl(rawInput, credentials);
@@ -277,4 +398,44 @@ export class SmartCdnSignatureCommand extends UnauthenticatedCommand {
         return 1;
     }
 }
+/**
+ * Mint a short-lived bearer token via POST /token (HTTP Basic Auth).
+ *
+ * This is intentionally stdout-clean JSON so it can be used by agents and scripts.
+ */
+export class TokenCommand extends UnauthenticatedCommand {
+    static paths = [['auth', 'token']];
+    static usage = Command.Usage({
+        category: 'Auth',
+        description: 'Mint a short-lived bearer token',
+        details: `
+      Calls POST /token using HTTP Basic Auth (TRANSLOADIT_KEY + TRANSLOADIT_SECRET) and prints the
+      JSON response to stdout.
+    `,
+        examples: [
+            ['Mint an MCP token (default aud)', 'transloadit auth token'],
+            ['Override audience', 'transloadit auth token --aud api2'],
+        ],
+    });
+    aud = Option.String('--aud', {
+        description: 'Token audience (default: mcp).',
+    });
+    async run() {
+        const credentialsResult = requireEnvCredentials();
+        if (!credentialsResult.ok) {
+            this.output.error(credentialsResult.error);
+            return 1;
+        }
+        const result = await requestTokenWithCredentials(credentialsResult.credentials, {
+            endpoint: this.endpoint,
+            aud: this.aud,
+        });
+        if (result.ok) {
+            process.stdout.write(`${result.output}\n`);
+            return undefined;
+        }
+        this.output.error(result.error);
+        return 1;
+    }
+}
 //# sourceMappingURL=auth.js.map

package/dist/cli/commands/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/cli/commands/auth.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,cAAc,CAAA;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AAE3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,GAC3B,MAAM,kCAAkC,CAAA;AAEzC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AAMzD,MAAM,oBAAoB,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC;IACrD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,sBAAsB,CAAC;IACnD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACrD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3D,CAAC;KACD,WAAW,EAAE,CAAA;AAEhB,MAAM,wBAAwB,GAAG,0BAA0B;KACxD,MAAM,CAAC,EAAE,IAAI,EAAE,8BAA8B,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;KACrE,OAAO,EAAE;KACT,WAAW,EAAE,CAAA;AAIhB,SAAS,YAAY,CAAC,MAAkB;IACtC,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAA;QAC7C,OAAO,GAAG,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAA;IACpC,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAA;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,SAAS,CAAA;IACnC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAC7B,CAAC,IAAI,EAA6B,EAAE,CAClC,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,SAAS,CACpF,CAAA;QACD,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAA;IACvD,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QACzF,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAgC;IAC1D,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,SAAS,CAAA;IACpC,IAAI,UAA2C,CAAA;IAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;QAChD,IAAI,eAAe,KAAK,SAAS;YAAE,SAAQ;QAC3C,IAAI,UAAU,IAAI,IAAI;YAAE,UAAU,GAAG,EAAE,CAAA;QACvC,UAAU,CAAC,GAAG,CAAC,GAAG,eAAe,CAAA;IACnC,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,MAAM,cAAc,GAAG,iBAAiB,CAAA;AAKxC,sCAAsC;AACtC,SAAS,iBAAiB,CACxB,KAAa,EACb,WAAoD,EACpD,SAAkB;IAElB,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,WAAW,CAAA;IAC3C,IAAI,MAA0B,CAAA;IAE9B,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACjB,MAAM,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAA;IACrC,CAAC;SAAM,CAAC;QACN,IAAI,MAAe,CAAA;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAqC,KAAe,CAAC,OAAO,EAAE,EAAE,CAAA;QAC7F,CAAC;QAED,IAAI,MAAM,IAAI,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4DAA4D,EAAE,CAAA;QAC3F,CAAC;QAED,MAAM,YAAY,GAAG,wBAAwB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QAC/D,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,CAAA;QAC3F,CAAC;QAED,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAA;QACtC,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,IAAI,EAAE,CAAA;QAE5C,MAAM,GAAG;YACP,GAAG,YAAY;YACf,IAAI,EAAE;gBACJ,GAAG,YAAY;gBACf,GAAG,EAAE,OAAO;aACb;SACF,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAA;IACvD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa,CAAC,MAA4B,EAAE,SAAS,CAAC,CAAA;QAC/E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAA;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAkC,KAAe,CAAC,OAAO,EAAE,EAAE,CAAA;IAC1F,CAAC;AACH,CAAC;AAED,0CAA0C;AAC1C,SAAS,mBAAmB,CAC1B,KAAa,EACb,WAAoD;IAEpD,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,WAAW,CAAA;IAE3C,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACjB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EACH,+HAA+H;SAClI,CAAA;IACH,CAAC;IAED,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAqC,KAAe,CAAC,OAAO,EAAE,EAAE,CAAA;IAC7F,CAAC;IAED,IAAI,MAAM,IAAI,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4DAA4D,EAAE,CAAA;IAC3F,CAAC;IAED,MAAM,YAAY,GAAG,oBAAoB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IAC3D,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,CAAA;IAC3F,CAAC;IAED,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,YAAY,CAAC,IAAI,CAAA;IACjG,MAAM,SAAS,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAA;IAEhD,IAAI,SAA6B,CAAA;IACjC,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;QACtD,IAAI,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gDAAgD,EAAE,CAAA;QAC/E,CAAC;QACD,SAAS,GAAG,YAAY,CAAA;IAC1B,CAAC;SAAM,CAAC;QACN,SAAS,GAAG,YAAY,CAAA;IAC1B,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;IAE5F,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAA;IACvD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,CAAC,oBAAoB,CAAC;YAC5C,SAAS;YACT,QAAQ;YACR,KAAK,EAAE,UAAU;YACjB,SAAS;YACT,SAAS;SACV,CAAC,CAAA;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAsC,KAAe,CAAC,OAAO,EAAE,EAAE,CAAA;IAC9F,CAAC;AACH,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,UAAyB,EAAE;IACtD,MAAM,WAAW,GAAG,cAAc,EAAE,CAAA;IACpC,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;QACxB,OAAO,CAAC,KAAK,CACX,+FAA+F,CAChG,CAAA;QACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;QACpB,OAAM;IACR,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,YAAY,CAAC;QACrC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,oBAAoB,EAAE,IAAI;KAC3B,CAAC,CAAA;IACF,MAAM,QAAQ,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IACvC,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;IAE1E,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAA;IAC5C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC3B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;IACtB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,UAA8B,EAAE;IAChE,MAAM,WAAW,GAAG,cAAc,EAAE,CAAA;IACpC,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;QACxB,OAAO,CAAC,KAAK,CACX,+FAA+F,CAChG,CAAA;QACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;QACpB,OAAM;IACR,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,YAAY,CAAC;QACrC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,oBAAoB,EAAE,IAAI;KAC3B,CAAC,CAAA;IACF,MAAM,QAAQ,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IACvC,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;IAEzD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAA;IAC5C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC3B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;IACtB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,gBAAiB,SAAQ,sBAAsB;IAC1D,MAAM,CAAU,KAAK,GAAG;QACtB,CAAC,MAAM,EAAE,WAAW,CAAC;QACrB,CAAC,MAAM,EAAE,KAAK,CAAC;QACf,CAAC,WAAW,CAAC;QACb,CAAC,KAAK,CAAC,EAAE,WAAW;KACrB,CAAA;IAED,MAAM,CAAU,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACpC,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,0CAA0C;QACvD,OAAO,EAAE;;;KAGR;QACD,QAAQ,EAAE;YACR,CAAC,oBAAoB,EAAE,+CAA+C,CAAC;YACvE,CAAC,gBAAgB,EAAE,kEAAkE,CAAC;YACtF,CAAC,aAAa,EAAE,yCAAyC,CAAC;SAC3D;KACF,CAAC,CAAA;IAEF,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE;QAC1C,WAAW,EAAE,2DAA2D;KACzE,CAAC,CAAA;IAEQ,KAAK,CAAC,GAAG;QACjB,MAAM,WAAW,GAAG,cAAc,EAAE,CAAA;QACpC,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,+FAA+F,CAChG,CAAA;YACD,OAAO,CAAC,CAAA;QACV,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,YAAY,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAA;QACtE,MAAM,QAAQ,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QACvC,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QAEvE,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAA;YAC1C,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC/B,OAAO,CAAC,CAAA;IACV,CAAC;;AAGH;;GAEG;AACH,MAAM,OAAO,wBAAyB,SAAQ,sBAAsB;IAClE,MAAM,CAAU,KAAK,GAAG;QACtB,CAAC,MAAM,EAAE,WAAW,CAAC;QACrB,CAAC,MAAM,EAAE,WAAW,CAAC;QACrB,CAAC,WAAW,CAAC;QACb,CAAC,WAAW,CAAC,EAAE,WAAW;KAC3B,CAAA;IAED,MAAM,CAAU,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACpC,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,iCAAiC;QAC9C,OAAO,EAAE;;;;KAIR;QACD,QAAQ,EAAE;YACR;gBACE,wBAAwB;gBACxB,+EAA+E;aAChF;YACD;gBACE,aAAa;gBACb,+EAA+E;aAChF;SACF;KACF,CAAC,CAAA;IAEQ,KAAK,CAAC,GAAG;QACjB,MAAM,WAAW,GAAG,cAAc,EAAE,CAAA;QACpC,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,+FAA+F,CAChG,CAAA;YACD,OAAO,CAAC,CAAA;QACV,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,YAAY,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAA;QACtE,MAAM,QAAQ,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QACvC,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;QAEzD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAA;YAC1C,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC/B,OAAO,CAAC,CAAA;IACV,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/cli/commands/auth.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,cAAc,CAAA;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AAE3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,GAC3B,MAAM,kCAAkC,CAAA;AAEzC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAClD,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AAMzD,MAAM,oBAAoB,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC;IACrD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,sBAAsB,CAAC;IACnD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACrD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3D,CAAC;KACD,WAAW,EAAE,CAAA;AAEhB,MAAM,wBAAwB,GAAG,0BAA0B;KACxD,MAAM,CAAC,EAAE,IAAI,EAAE,8BAA8B,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;KACrE,OAAO,EAAE;KACT,WAAW,EAAE,CAAA;AAIhB,SAAS,YAAY,CAAC,MAAkB;IACtC,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAA;QAC7C,OAAO,GAAG,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAA;IACpC,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAA;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,SAAS,CAAA;IACnC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAC7B,CAAC,IAAI,EAA6B,EAAE,CAClC,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,SAAS,CACpF,CAAA;QACD,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAA;IACvD,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QACzF,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAgC;IAC1D,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,SAAS,CAAA;IACpC,IAAI,UAA2C,CAAA;IAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;QAChD,IAAI,eAAe,KAAK,SAAS;YAAE,SAAQ;QAC3C,IAAI,UAAU,IAAI,IAAI;YAAE,UAAU,GAAG,EAAE,CAAA;QACvC,UAAU,CAAC,GAAG,CAAC,GAAG,eAAe,CAAA;IACnC,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC;AAMD,SAAS,eAAe,CACtB,KAAa,EACb,MAAe;IAEf,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAqC,KAAe,CAAC,OAAO,EAAE,EAAE,CAAA;IAC7F,CAAC;IAED,IAAI,MAAM,IAAI,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4DAA4D,EAAE,CAAA;IAC3F,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IAC7C,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,CAAA;IAC3F,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,IAAI,EAAE,CAAA;AAC/C,CAAC;AAED,sCAAsC;AACtC,SAAS,iBAAiB,CACxB,KAAa,EACb,WAAoD,EACpD,SAAkB;IAElB,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,WAAW,CAAA;IAC3C,IAAI,MAA0B,CAAA;IAE9B,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACjB,MAAM,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAA;IACrC,CAAC;SAAM,CAAC;QACN,MAAM,YAAY,GAAG,eAAe,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAA;QACrE,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;YACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,EAAE,CAAA;QACjD,CAAC;QAED,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,CAAA;QACvC,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,IAAI,EAAE,CAAA;QAE5C,MAAM,GAAG;YACP,GAAG,YAAY;YACf,IAAI,EAAE;gBACJ,GAAG,YAAY;gBACf,GAAG,EAAE,OAAO;aACb;SACF,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAA;IACvD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa,CAAC,MAA4B,EAAE,SAAS,CAAC,CAAA;QAC/E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAA;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAkC,KAAe,CAAC,OAAO,EAAE,EAAE,CAAA;IAC1F,CAAC;AACH,CAAC;AAED,0CAA0C;AAC1C,SAAS,mBAAmB,CAC1B,KAAa,EACb,WAAoD;IAEpD,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,WAAW,CAAA;IAE3C,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACjB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EACH,+HAA+H;SAClI,CAAA;IACH,CAAC;IAED,MAAM,YAAY,GAAG,eAAe,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAA;IACjE,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,EAAE,CAAA;IACjD,CAAC;IAED,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,YAAY,CAAC,KAAK,CAAA;IAClG,MAAM,SAAS,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAA;IAEhD,IAAI,SAA6B,CAAA;IACjC,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;QACtD,IAAI,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gDAAgD,EAAE,CAAA;QAC/E,CAAC;QACD,SAAS,GAAG,YAAY,CAAA;IAC1B,CAAC;SAAM,CAAC;QACN,SAAS,GAAG,YAAY,CAAA;IAC1B,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;IAE5F,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAA;IACvD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,CAAC,oBAAoB,CAAC;YAC5C,SAAS;YACT,QAAQ;YACR,KAAK,EAAE,UAAU;YACjB,SAAS;YACT,SAAS;SACV,CAAC,CAAA;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAsC,KAAe,CAAC,OAAO,EAAE,EAAE,CAAA;IAC9F,CAAC;AACH,CAAC;AAiBD,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC;KACD,WAAW,EAAE,CAAA;AAEhB,MAAM,kBAAkB,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAChC,CAAC;KACD,WAAW,EAAE,CAAA;AAEhB,MAAM,yBAAyB,GAAG,CAAC,WAAoD,EAAU,EAAE,CACjG,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,OAAO,IAAI,WAAW,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAA;AAEvG,MAAM,cAAc,GAAG,CAAC,QAAgB,EAAW,EAAE,CACnD,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,KAAK,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;AAI/E,MAAM,0BAA0B,GAAG,CAAC,GAAY,EAAmB,EAAE;IACnE,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,8BAA8B,CAAC,CAAC,IAAI,EAAE,CAAA;IAElG,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EACH,kGAAkG;SACrG,CAAA;IACH,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8CAA8C,EAAE,CAAA;IAC7E,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAA;IAChF,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7D,sCAAsC;QACxC,CAAC;aAAM,CAAC;YACN,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EACH,oHAAoH;aACvH,CAAA;QACH,CAAC;IACH,CAAC;IAED,4FAA4F;IAC5F,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAA;IAC5C,IAAI,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACtD,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAA;IACpB,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,GAAG,CAAC,QAAQ,GAAG,GAAG,GAAG,CAAC,QAAQ,GAAG,CAAA;IACnC,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAA;AACnC,CAAC,CAAA;AAED,KAAK,UAAU,2BAA2B,CACxC,WAAoD,EACpD,UAA+B,EAAE;IAEjC,MAAM,cAAc,GAAG,0BAA0B,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IACnE,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,EAAE,CAAA;IACnD,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC/D,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,IAAI,KAAK,CAAA;IAElD,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,EAAE,UAAU,EAAE,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;IAEtF,IAAI,GAAa,CAAA;IACjB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAA;IAC5D,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACrB,MAAM,EAAE,MAAM;YACd,sDAAsD;YACtD,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE;gBACP,aAAa,EAAE,yBAAyB,CAAC,WAAW,CAAC;gBACrD,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI;SACL,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAY,CAAC,OAAO,CAAC,CAAA;QACrB,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2DAA2D,EAAE,CAAA;QAC1F,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAChE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,OAAO,EAAE,EAAE,CAAA;IACxE,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAA;IACvB,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAC3B,IAAI,UAAU,GAAY,IAAI,CAAA;IAC9B,IAAI,CAAC;QACH,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,UAAU,GAAG,IAAI,CAAA;IACnB,CAAC;IAED,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QACX,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;YACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAA;QACnE,CAAC;QACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QACvD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAA;QAChF,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;IACtC,CAAC;IAED,MAAM,WAAW,GAAG,gBAAgB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;IAC1D,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;QACxB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO;gBAC7B,CAAC,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,KAAK,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE;gBAC1D,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK;SAC3B,CAAA;IACH,CAAC;IAED,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,yBAAyB,GAAG,CAAC,MAAM,MAAM,OAAO,IAAI,GAAG,CAAC,UAAU,EAAE;KAC5E,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,UAAyB,EAAE;IACtD,MAAM,iBAAiB,GAAG,qBAAqB,EAAE,CAAA;IACjD,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC;QAC1B,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;QACtC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;QACpB,OAAM;IACR,CAAC;IACD,MAAM,WAAW,GAAG,iBAAiB,CAAC,WAAW,CAAA;IAEjD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,YAAY,CAAC;QACrC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,oBAAoB,EAAE,IAAI;KAC3B,CAAC,CAAA;IACF,MAAM,QAAQ,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IACvC,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;IAE1E,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAA;IAC5C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC3B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;IACtB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,UAA8B,EAAE;IAChE,MAAM,iBAAiB,GAAG,qBAAqB,EAAE,CAAA;IACjD,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC;QAC1B,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;QACtC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;QACpB,OAAM;IACR,CAAC;IACD,MAAM,WAAW,GAAG,iBAAiB,CAAC,WAAW,CAAA;IAEjD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,YAAY,CAAC;QACrC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,oBAAoB,EAAE,IAAI;KAC3B,CAAC,CAAA;IACF,MAAM,QAAQ,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IACvC,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;IAEzD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAA;IAC5C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC3B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;IACtB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,gBAAiB,SAAQ,sBAAsB;IAC1D,MAAM,CAAU,KAAK,GAAG;QACtB,CAAC,MAAM,EAAE,WAAW,CAAC;QACrB,CAAC,MAAM,EAAE,KAAK,CAAC;QACf,CAAC,WAAW,CAAC;QACb,CAAC,KAAK,CAAC,EAAE,WAAW;KACrB,CAAA;IAED,MAAM,CAAU,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACpC,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,0CAA0C;QACvD,OAAO,EAAE;;;KAGR;QACD,QAAQ,EAAE;YACR,CAAC,oBAAoB,EAAE,+CAA+C,CAAC;YACvE,CAAC,gBAAgB,EAAE,kEAAkE,CAAC;YACtF,CAAC,aAAa,EAAE,yCAAyC,CAAC;SAC3D;KACF,CAAC,CAAA;IAEF,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE;QAC1C,WAAW,EAAE,2DAA2D;KACzE,CAAC,CAAA;IAEQ,KAAK,CAAC,GAAG;QACjB,MAAM,iBAAiB,GAAG,qBAAqB,EAAE,CAAA;QACjD,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;YAC1C,OAAO,CAAC,CAAA;QACV,CAAC;QACD,MAAM,WAAW,GAAG,iBAAiB,CAAC,WAAW,CAAA;QAEjD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,YAAY,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAA;QACtE,MAAM,QAAQ,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QACvC,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QAEvE,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAA;YAC1C,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC/B,OAAO,CAAC,CAAA;IACV,CAAC;;AAGH;;GAEG;AACH,MAAM,OAAO,wBAAyB,SAAQ,sBAAsB;IAClE,MAAM,CAAU,KAAK,GAAG;QACtB,CAAC,MAAM,EAAE,WAAW,CAAC;QACrB,CAAC,MAAM,EAAE,WAAW,CAAC;QACrB,CAAC,WAAW,CAAC;QACb,CAAC,WAAW,CAAC,EAAE,WAAW;KAC3B,CAAA;IAED,MAAM,CAAU,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACpC,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,iCAAiC;QAC9C,OAAO,EAAE;;;;KAIR;QACD,QAAQ,EAAE;YACR;gBACE,wBAAwB;gBACxB,+EAA+E;aAChF;YACD;gBACE,aAAa;gBACb,+EAA+E;aAChF;SACF;KACF,CAAC,CAAA;IAEQ,KAAK,CAAC,GAAG;QACjB,MAAM,iBAAiB,GAAG,qBAAqB,EAAE,CAAA;QACjD,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;YAC1C,OAAO,CAAC,CAAA;QACV,CAAC;QACD,MAAM,WAAW,GAAG,iBAAiB,CAAC,WAAW,CAAA;QAEjD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,YAAY,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAA;QACtE,MAAM,QAAQ,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QACvC,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;QAEzD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAA;YAC1C,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC/B,OAAO,CAAC,CAAA;IACV,CAAC;;AAGH;;;;GAIG;AACH,MAAM,OAAO,YAAa,SAAQ,sBAAsB;IACtD,MAAM,CAAU,KAAK,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IAE3C,MAAM,CAAU,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACpC,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,iCAAiC;QAC9C,OAAO,EAAE;;;KAGR;QACD,QAAQ,EAAE;YACR,CAAC,iCAAiC,EAAE,wBAAwB,CAAC;YAC7D,CAAC,mBAAmB,EAAE,mCAAmC,CAAC;SAC3D;KACF,CAAC,CAAA;IAEF,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE;QAC3B,WAAW,EAAE,gCAAgC;KAC9C,CAAC,CAAA;IAEiB,KAAK,CAAC,GAAG;QAC1B,MAAM,iBAAiB,GAAG,qBAAqB,EAAE,CAAA;QACjD,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;YAC1C,OAAO,CAAC,CAAA;QACV,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC,iBAAiB,CAAC,WAAW,EAAE;YAC9E,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC,CAAA;QAEF,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAA;YAC1C,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC/B,OAAO,CAAC,CAAA;IACV,CAAC"}

package/dist/cli/commands/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,GAAG,EAAE,MAAM,WAAW,CAAA;AA4BzC,wBAAgB,SAAS,IAAI,GAAG,CA6C/B"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,GAAG,EAAE,MAAM,WAAW,CAAA;AA4BzC,wBAAgB,SAAS,IAAI,GAAG,CA8C/B"}

package/dist/cli/commands/index.js

@@ -1,7 +1,7 @@
 import { Builtins, Cli } from 'clipanion';
 import packageJson from '../../../package.json' with { type: 'json' };
 import { AssembliesCreateCommand, AssembliesDeleteCommand, AssembliesGetCommand, AssembliesLintCommand, AssembliesListCommand, AssembliesReplayCommand, } from "./assemblies.js";
-import { SignatureCommand, SmartCdnSignatureCommand } from "./auth.js";
+import { SignatureCommand, SmartCdnSignatureCommand, TokenCommand } from "./auth.js";
 import { BillsGetCommand } from "./bills.js";
 import { DocsRobotsGetCommand, DocsRobotsListCommand } from "./docs.js";
 import { NotificationsReplayCommand } from "./notifications.js";
@@ -19,6 +19,7 @@ export function createCli() {
     // Auth commands (signature generation)
     cli.register(SignatureCommand);
     cli.register(SmartCdnSignatureCommand);
+    cli.register(TokenCommand);
     // Assemblies commands
     cli.register(AssembliesCreateCommand);
     cli.register(AssembliesListCommand);

package/dist/cli/commands/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/cli/commands/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAEzC,OAAO,WAAW,MAAM,uBAAuB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAA;AAErE,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,iBAAiB,CAAA;AAExB,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAA;AAEtE,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAC5C,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAA;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAA;AAC/D,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAE3C,MAAM,UAAU,SAAS;IACvB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC;QAClB,WAAW,EAAE,iBAAiB;QAC9B,UAAU,EAAE,aAAa;QACzB,aAAa,EAAE,WAAW,CAAC,OAAO;KACnC,CAAC,CAAA;IAEF,oBAAoB;IACpB,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;IAClC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAA;IAErC,uCAAuC;IACvC,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAA;IAC9B,GAAG,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAA;IAEtC,sBAAsB;IACtB,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAA;IACrC,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAA;IACnC,GAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAA;IAClC,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAA;IACrC,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAA;IACrC,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAA;IAEnC,qBAAqB;IACrB,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAA;IACpC,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAA;IACjC,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAA;IACpC,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAA;IACpC,GAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAA;IAClC,GAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAA;IAElC,iBAAiB;IACjB,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAA;IAE7B,yBAAyB;IACzB,GAAG,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAA;IAExC,mBAAmB;IACnB,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAA;IAE3B,4CAA4C;IAC5C,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAA;IACnC,GAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAA;IAElC,OAAO,GAAG,CAAA;AACZ,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/cli/commands/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAEzC,OAAO,WAAW,MAAM,uBAAuB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAA;AAErE,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,iBAAiB,CAAA;AAExB,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAEpF,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAC5C,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAA;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAA;AAC/D,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAE3C,MAAM,UAAU,SAAS;IACvB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC;QAClB,WAAW,EAAE,iBAAiB;QAC9B,UAAU,EAAE,aAAa;QACzB,aAAa,EAAE,WAAW,CAAC,OAAO;KACnC,CAAC,CAAA;IAEF,oBAAoB;IACpB,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;IAClC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAA;IAErC,uCAAuC;IACvC,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAA;IAC9B,GAAG,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAA;IACtC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;IAE1B,sBAAsB;IACtB,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAA;IACrC,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAA;IACnC,GAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAA;IAClC,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAA;IACrC,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAA;IACrC,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAA;IAEnC,qBAAqB;IACrB,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAA;IACpC,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAA;IACjC,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAA;IACpC,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAA;IACpC,GAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAA;IAClC,GAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAA;IAElC,iBAAiB;IACjB,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAA;IAE7B,yBAAyB;IACzB,GAAG,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAA;IAExC,mBAAmB;IACnB,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAA;IAE3B,4CAA4C;IAC5C,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAA;IACnC,GAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAA;IAElC,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/cli/helpers.d.ts

@@ -1,8 +1,16 @@
 import type { Readable } from 'node:stream';
-export declare function getEnvCredentials(): {
+type EnvCredentials = {
     authKey: string;
     authSecret: string;
-} | null;
+};
+type RequireEnvCredentialsResult = {
+    ok: true;
+    credentials: EnvCredentials;
+} | {
+    ok: false;
+    error: string;
+};
+export declare function requireEnvCredentials(): RequireEnvCredentialsResult;
 export declare function createReadStream(file: string): Readable;
 export declare function streamToBuffer(stream: Readable): Promise<Buffer>;
 export interface CliInputResult {

package/dist/cli/helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../src/cli/helpers.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAG3C,wBAAgB,iBAAiB,IAAI;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAOlF;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAGvD;AAED,wBAAsB,cAAc,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAMtE;AAeD,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAC/B;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC,CAsBxF;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAQnD;AAGD,cAAc;AACd,YAAY,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAE1C,wBAAgB,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;AAC3D,wBAAgB,GAAG,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAA"}
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../src/cli/helpers.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAM3C,KAAK,cAAc,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAA;AAW7D,KAAK,2BAA2B,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,WAAW,EAAE,cAAc,CAAA;CAAE,GACzC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAEhC,wBAAgB,qBAAqB,IAAI,2BAA2B,CAInE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAGvD;AAED,wBAAsB,cAAc,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAMtE;AAeD,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAC/B;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC,CAsBxF;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAQnD;AAGD,cAAc;AACd,YAAY,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAE1C,wBAAgB,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;AAC3D,wBAAgB,GAAG,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAA"}

package/dist/cli/helpers.js

@@ -1,13 +1,20 @@
 import fs from 'node:fs';
 import fsp from 'node:fs/promises';
 import { isAPIError } from "./types.js";
-export function getEnvCredentials() {
+const MISSING_CREDENTIALS_MESSAGE = 'Missing credentials. Please set TRANSLOADIT_KEY and TRANSLOADIT_SECRET environment variables.';
+function getEnvCredentials() {
     const authKey = process.env.TRANSLOADIT_KEY ?? process.env.TRANSLOADIT_AUTH_KEY;
     const authSecret = process.env.TRANSLOADIT_SECRET ?? process.env.TRANSLOADIT_AUTH_SECRET;
     if (!authKey || !authSecret)
         return null;
     return { authKey, authSecret };
 }
+export function requireEnvCredentials() {
+    const credentials = getEnvCredentials();
+    if (credentials == null)
+        return { ok: false, error: MISSING_CREDENTIALS_MESSAGE };
+    return { ok: true, credentials };
+}
 export function createReadStream(file) {
     if (file === '-')
         return process.stdin;

package/dist/cli/helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../src/cli/helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,GAAG,MAAM,kBAAkB,CAAA;AAElC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEvC,MAAM,UAAU,iBAAiB;IAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAA;IAC/E,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAA;IAExF,IAAI,CAAC,OAAO,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAA;IAExC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAA;AAChC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,OAAO,CAAC,KAAK,CAAA;IACtC,OAAO,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAgB;IACnD,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IAClE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;AAC9B,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,EAAE,CAAA;IAElC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;IACjC,IAAI,IAAI,GAAG,EAAE,CAAA;IAEb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACxC,IAAI,IAAI,KAAK,CAAA;IACf,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAA4B;IAC7D,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,oBAAoB,GAAG,KAAK,EAAE,GAAG,OAAO,CAAA;IAC1E,MAAM,cAAc,GAAG,aAAa,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,SAAS,KAAK,GAAG,CAAC,CAAA;IAExF,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,KAAK,GAAG,IAAI,SAAS,IAAI,IAAI,EAAE,CAAA;IACpF,CAAC;IAED,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;QACtB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IACtD,CAAC;IAED,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;QACrD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;IACrD,CAAC;IAED,IAAI,oBAAoB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IACtD,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;AAC1C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO,GAAG,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,OAAO,EAAE,CAAA;IACvC,CAAC;IACD,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACzB,OAAO,GAAG,CAAC,OAAO,CAAA;IACpB,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAA;AACpB,CAAC;AAQD,MAAM,UAAU,GAAG,CAAI,GAAG,KAAY;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;IAC5D,MAAM,MAAM,GAAU,IAAI,KAAK,CAAC,MAAM,CAAC,CAAA;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAM,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../src/cli/helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,GAAG,MAAM,kBAAkB,CAAA;AAElC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEvC,MAAM,2BAA2B,GAC/B,+FAA+F,CAAA;AAIjG,SAAS,iBAAiB;IACxB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAA;IAC/E,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAA;IAExF,IAAI,CAAC,OAAO,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAA;IAExC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAA;AAChC,CAAC;AAMD,MAAM,UAAU,qBAAqB;IACnC,MAAM,WAAW,GAAG,iBAAiB,EAAE,CAAA;IACvC,IAAI,WAAW,IAAI,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAA;IACjF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;AAClC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,OAAO,CAAC,KAAK,CAAA;IACtC,OAAO,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAgB;IACnD,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IAClE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;AAC9B,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,EAAE,CAAA;IAElC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;IACjC,IAAI,IAAI,GAAG,EAAE,CAAA;IAEb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACxC,IAAI,IAAI,KAAK,CAAA;IACf,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAA4B;IAC7D,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,oBAAoB,GAAG,KAAK,EAAE,GAAG,OAAO,CAAA;IAC1E,MAAM,cAAc,GAAG,aAAa,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,SAAS,KAAK,GAAG,CAAC,CAAA;IAExF,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,KAAK,GAAG,IAAI,SAAS,IAAI,IAAI,EAAE,CAAA;IACpF,CAAC;IAED,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;QACtB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IACtD,CAAC;IAED,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;QACrD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;IACrD,CAAC;IAED,IAAI,oBAAoB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IACtD,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;AAC1C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO,GAAG,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,OAAO,EAAE,CAAA;IACvC,CAAC;IACD,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACzB,OAAO,GAAG,CAAC,OAAO,CAAA;IACpB,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAA;AACpB,CAAC;AAQD,MAAM,UAAU,GAAG,CAAI,GAAG,KAAY;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;IAC5D,MAAM,MAAM,GAAU,IAAI,KAAK,CAAC,MAAM,CAAC,CAAA;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAM,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "transloadit",
-  "version": "4.7.2",
+  "version": "4.7.3",
   "description": "Node.js SDK for Transloadit",
   "homepage": "https://github.com/transloadit/node-sdk/tree/main/packages/node",
   "bugs": {

package/src/cli/commands/BaseCommand.ts

@@ -2,7 +2,7 @@ import 'dotenv/config'
 import process from 'node:process'
 import { Command, Option } from 'clipanion'
 import { Transloadit as TransloaditClient } from '../../Transloadit.ts'
-import { getEnvCredentials } from '../helpers.ts'
+import { requireEnvCredentials } from '../helpers.ts'
 import type { IOutputCtl } from '../OutputCtl.ts'
 import OutputCtl, { LOG_LEVEL_DEFAULT, LOG_LEVEL_NAMES, parseLogLevel } from '../OutputCtl.ts'
 
@@ -32,17 +32,18 @@ abstract class BaseCommand extends Command {
   }
 
   protected setupClient(): boolean {
-    const creds = getEnvCredentials()
-    if (!creds) {
-      this.output.error(
-        'Please provide API authentication in the environment variables TRANSLOADIT_KEY and TRANSLOADIT_SECRET',
-      )
+    const credsResult = requireEnvCredentials()
+    if (!credsResult.ok) {
+      this.output.error(credsResult.error)
       return false
     }
 
     const endpoint = this.endpoint || process.env.TRANSLOADIT_ENDPOINT
 
-    this.client = new TransloaditClient({ ...creds, ...(endpoint && { endpoint }) })
+    this.client = new TransloaditClient({
+      ...credsResult.credentials,
+      ...(endpoint && { endpoint }),
+    })
     return true
   }
 

package/src/cli/commands/auth.ts

@@ -8,7 +8,7 @@ import {
 } from '../../alphalib/types/template.ts'
 import type { OptionalAuthParams } from '../../apiTypes.ts'
 import { Transloadit } from '../../Transloadit.ts'
-import { getEnvCredentials, readCliInput } from '../helpers.ts'
+import { readCliInput, requireEnvCredentials } from '../helpers.ts'
 import { UnauthenticatedCommand } from './BaseCommand.ts'
 
 type UrlParamPrimitive = string | number | boolean
@@ -68,40 +68,51 @@ function normalizeUrlParams(params?: Record<string, unknown>): NormalizedUrlPara
   return normalized
 }
 
-const getCredentials = getEnvCredentials
+type OutputResult = { ok: true; output: string } | { ok: false; error: string }
 
-// Result type for signature operations
-type SigResult = { ok: true; output: string } | { ok: false; error: string }
+type Result<T> = { ok: true; value: T } | { ok: false; error: string }
+
+function parseJsonObject<TSchema extends z.ZodTypeAny>(
+  input: string,
+  schema: TSchema,
+): Result<z.infer<TSchema>> {
+  let parsed: unknown
+  try {
+    parsed = JSON.parse(input)
+  } catch (error) {
+    return { ok: false, error: `Failed to parse JSON from stdin: ${(error as Error).message}` }
+  }
+
+  if (parsed == null || typeof parsed !== 'object' || Array.isArray(parsed)) {
+    return { ok: false, error: 'Invalid params provided via stdin. Expected a JSON object.' }
+  }
+
+  const parsedResult = schema.safeParse(parsed)
+  if (!parsedResult.success) {
+    return { ok: false, error: `Invalid params: ${formatIssues(parsedResult.error.issues)}` }
+  }
+
+  return { ok: true, value: parsedResult.data }
+}
 
 // Core logic for signature generation
 function generateSignature(
   input: string,
   credentials: { authKey: string; authSecret: string },
   algorithm?: string,
-): SigResult {
+): OutputResult {
   const { authKey, authSecret } = credentials
   let params: CliSignatureParams
 
   if (input === '') {
     params = { auth: { key: authKey } }
   } else {
-    let parsed: unknown
-    try {
-      parsed = JSON.parse(input)
-    } catch (error) {
-      return { ok: false, error: `Failed to parse JSON from stdin: ${(error as Error).message}` }
-    }
-
-    if (parsed == null || typeof parsed !== 'object' || Array.isArray(parsed)) {
-      return { ok: false, error: 'Invalid params provided via stdin. Expected a JSON object.' }
+    const parsedResult = parseJsonObject(input, cliSignatureParamsSchema)
+    if (!parsedResult.ok) {
+      return { ok: false, error: parsedResult.error }
     }
 
-    const parsedResult = cliSignatureParamsSchema.safeParse(parsed)
-    if (!parsedResult.success) {
-      return { ok: false, error: `Invalid params: ${formatIssues(parsedResult.error.issues)}` }
-    }
-
-    const parsedParams = parsedResult.data
+    const parsedParams = parsedResult.value
     const existingAuth = parsedParams.auth ?? {}
 
     params = {
@@ -126,7 +137,7 @@ function generateSignature(
 function generateSmartCdnUrl(
   input: string,
   credentials: { authKey: string; authSecret: string },
-): SigResult {
+): OutputResult {
   const { authKey, authSecret } = credentials
 
   if (input === '') {
@@ -137,23 +148,12 @@ function generateSmartCdnUrl(
     }
   }
 
-  let parsed: unknown
-  try {
-    parsed = JSON.parse(input)
-  } catch (error) {
-    return { ok: false, error: `Failed to parse JSON from stdin: ${(error as Error).message}` }
-  }
-
-  if (parsed == null || typeof parsed !== 'object' || Array.isArray(parsed)) {
-    return { ok: false, error: 'Invalid params provided via stdin. Expected a JSON object.' }
-  }
-
-  const parsedResult = smartCdnParamsSchema.safeParse(parsed)
-  if (!parsedResult.success) {
-    return { ok: false, error: `Invalid params: ${formatIssues(parsedResult.error.issues)}` }
+  const parsedResult = parseJsonObject(input, smartCdnParamsSchema)
+  if (!parsedResult.ok) {
+    return { ok: false, error: parsedResult.error }
   }
 
-  const { workspace, template, input: inputFieldRaw, url_params, expire_at_ms } = parsedResult.data
+  const { workspace, template, input: inputFieldRaw, url_params, expire_at_ms } = parsedResult.value
   const urlParams = normalizeUrlParams(url_params)
 
   let expiresAt: number | undefined
@@ -194,15 +194,163 @@ export interface RunSmartSigOptions {
   providedInput?: string
 }
 
+export interface RequestTokenOptions {
+  endpoint?: string
+  aud?: string
+}
+
+const tokenErrorSchema = z
+  .object({
+    error: z.string(),
+    message: z.string().optional(),
+  })
+  .passthrough()
+
+const tokenSuccessSchema = z
+  .object({
+    access_token: z.string().min(1),
+  })
+  .passthrough()
+
+const buildBasicAuthHeaderValue = (credentials: { authKey: string; authSecret: string }): string =>
+  `Basic ${Buffer.from(`${credentials.authKey}:${credentials.authSecret}`, 'utf8').toString('base64')}`
+
+const isLoopbackHost = (hostname: string): boolean =>
+  hostname === 'localhost' || hostname === '::1' || hostname.startsWith('127.')
+
+type TokenBaseResult = { ok: true; baseUrl: URL } | { ok: false; error: string }
+
+const normalizeTokenBaseEndpoint = (raw?: string): TokenBaseResult => {
+  const baseRaw = (raw || process.env.TRANSLOADIT_ENDPOINT || 'https://api2.transloadit.com').trim()
+
+  let url: URL
+  try {
+    url = new URL(baseRaw)
+  } catch {
+    return {
+      ok: false,
+      error:
+        'Invalid endpoint URL. Use --endpoint https://api2.transloadit.com (or set TRANSLOADIT_ENDPOINT).',
+    }
+  }
+
+  if (url.username || url.password) {
+    return { ok: false, error: 'Endpoint must not include username/password.' }
+  }
+  if (url.search || url.hash) {
+    return { ok: false, error: 'Endpoint must not include query string or hash.' }
+  }
+
+  if (url.protocol !== 'https:') {
+    if (url.protocol === 'http:' && isLoopbackHost(url.hostname)) {
+      // Allowed for local development only.
+    } else {
+      return {
+        ok: false,
+        error:
+          'Refusing to send credentials to a non-HTTPS endpoint. Use https://... (or http://localhost for local development).',
+      }
+    }
+  }
+
+  // If someone pasted the token URL, normalize it back to the API base to avoid /token/token.
+  const pathLower = url.pathname.toLowerCase()
+  if (pathLower === '/token' || pathLower === '/token/') {
+    url.pathname = '/'
+  }
+
+  if (!url.pathname.endsWith('/')) {
+    url.pathname = `${url.pathname}/`
+  }
+
+  return { ok: true, baseUrl: url }
+}
+
+async function requestTokenWithCredentials(
+  credentials: { authKey: string; authSecret: string },
+  options: RequestTokenOptions = {},
+): Promise<OutputResult> {
+  const endpointResult = normalizeTokenBaseEndpoint(options.endpoint)
+  if (!endpointResult.ok) {
+    return { ok: false, error: endpointResult.error }
+  }
+
+  const url = new URL('token', endpointResult.baseUrl).toString()
+  const aud = (options.aud ?? 'mcp').trim() || 'mcp'
+
+  const body = new URLSearchParams({ grant_type: 'client_credentials', aud }).toString()
+
+  let res: Response
+  const controller = new AbortController()
+  const timeout = setTimeout(() => controller.abort(), 15_000)
+  try {
+    res = await fetch(url, {
+      method: 'POST',
+      // Never follow redirects with Basic Auth credentials.
+      redirect: 'error',
+      signal: controller.signal,
+      headers: {
+        Authorization: buildBasicAuthHeaderValue(credentials),
+        Accept: 'application/json',
+        'Content-Type': 'application/x-www-form-urlencoded',
+      },
+      body,
+    })
+  } catch (err) {
+    clearTimeout(timeout)
+    if (err instanceof Error && err.name === 'AbortError') {
+      return { ok: false, error: 'Failed to mint bearer token: request timed out after 15s.' }
+    }
+    const message = err instanceof Error ? err.message : String(err)
+    return { ok: false, error: `Failed to mint bearer token: ${message}` }
+  } finally {
+    clearTimeout(timeout)
+  }
+
+  const text = await res.text()
+  const trimmed = text.trim()
+  let parsedJson: unknown = null
+  try {
+    parsedJson = trimmed ? JSON.parse(trimmed) : null
+  } catch {
+    parsedJson = null
+  }
+
+  if (res.ok) {
+    if (parsedJson == null) {
+      return { ok: false, error: 'Token response was not valid JSON.' }
+    }
+    const parsed = tokenSuccessSchema.safeParse(parsedJson)
+    if (!parsed.success) {
+      return { ok: false, error: 'Token response did not include an access_token.' }
+    }
+    return { ok: true, output: trimmed }
+  }
+
+  const parsedError = tokenErrorSchema.safeParse(parsedJson)
+  if (parsedError.success) {
+    return {
+      ok: false,
+      error: parsedError.data.message
+        ? `${parsedError.data.error}: ${parsedError.data.message}`
+        : parsedError.data.error,
+    }
+  }
+
+  return {
+    ok: false,
+    error: `Token request failed (${res.status}): ${trimmed || res.statusText}`,
+  }
+}
+
 export async function runSig(options: RunSigOptions = {}): Promise<void> {
-  const credentials = getCredentials()
-  if (credentials == null) {
-    console.error(
-      'Missing credentials. Please set TRANSLOADIT_KEY and TRANSLOADIT_SECRET environment variables.',
-    )
+  const credentialsResult = requireEnvCredentials()
+  if (!credentialsResult.ok) {
+    console.error(credentialsResult.error)
     process.exitCode = 1
     return
   }
+  const credentials = credentialsResult.credentials
 
   const { content } = await readCliInput({
     providedInput: options.providedInput,
@@ -220,14 +368,13 @@ export async function runSig(options: RunSigOptions = {}): Promise<void> {
 }
 
 export async function runSmartSig(options: RunSmartSigOptions = {}): Promise<void> {
-  const credentials = getCredentials()
-  if (credentials == null) {
-    console.error(
-      'Missing credentials. Please set TRANSLOADIT_KEY and TRANSLOADIT_SECRET environment variables.',
-    )
+  const credentialsResult = requireEnvCredentials()
+  if (!credentialsResult.ok) {
+    console.error(credentialsResult.error)
     process.exitCode = 1
     return
   }
+  const credentials = credentialsResult.credentials
 
   const { content } = await readCliInput({
     providedInput: options.providedInput,
@@ -274,13 +421,12 @@ export class SignatureCommand extends UnauthenticatedCommand {
   })
 
   protected async run(): Promise<number | undefined> {
-    const credentials = getCredentials()
-    if (credentials == null) {
-      this.output.error(
-        'Missing credentials. Please set TRANSLOADIT_KEY and TRANSLOADIT_SECRET environment variables.',
-      )
+    const credentialsResult = requireEnvCredentials()
+    if (!credentialsResult.ok) {
+      this.output.error(credentialsResult.error)
       return 1
     }
+    const credentials = credentialsResult.credentials
 
     const { content } = await readCliInput({ allowStdinWhenNoPath: true })
     const rawInput = (content ?? '').trim()
@@ -328,13 +474,12 @@ export class SmartCdnSignatureCommand extends UnauthenticatedCommand {
   })
 
   protected async run(): Promise<number | undefined> {
-    const credentials = getCredentials()
-    if (credentials == null) {
-      this.output.error(
-        'Missing credentials. Please set TRANSLOADIT_KEY and TRANSLOADIT_SECRET environment variables.',
-      )
+    const credentialsResult = requireEnvCredentials()
+    if (!credentialsResult.ok) {
+      this.output.error(credentialsResult.error)
       return 1
     }
+    const credentials = credentialsResult.credentials
 
     const { content } = await readCliInput({ allowStdinWhenNoPath: true })
     const rawInput = (content ?? '').trim()
@@ -349,3 +494,50 @@ export class SmartCdnSignatureCommand extends UnauthenticatedCommand {
     return 1
   }
 }
+
+/**
+ * Mint a short-lived bearer token via POST /token (HTTP Basic Auth).
+ *
+ * This is intentionally stdout-clean JSON so it can be used by agents and scripts.
+ */
+export class TokenCommand extends UnauthenticatedCommand {
+  static override paths = [['auth', 'token']]
+
+  static override usage = Command.Usage({
+    category: 'Auth',
+    description: 'Mint a short-lived bearer token',
+    details: `
+      Calls POST /token using HTTP Basic Auth (TRANSLOADIT_KEY + TRANSLOADIT_SECRET) and prints the
+      JSON response to stdout.
+    `,
+    examples: [
+      ['Mint an MCP token (default aud)', 'transloadit auth token'],
+      ['Override audience', 'transloadit auth token --aud api2'],
+    ],
+  })
+
+  aud = Option.String('--aud', {
+    description: 'Token audience (default: mcp).',
+  })
+
+  protected override async run(): Promise<number | undefined> {
+    const credentialsResult = requireEnvCredentials()
+    if (!credentialsResult.ok) {
+      this.output.error(credentialsResult.error)
+      return 1
+    }
+
+    const result = await requestTokenWithCredentials(credentialsResult.credentials, {
+      endpoint: this.endpoint,
+      aud: this.aud,
+    })
+
+    if (result.ok) {
+      process.stdout.write(`${result.output}\n`)
+      return undefined
+    }
+
+    this.output.error(result.error)
+    return 1
+  }
+}

package/src/cli/commands/index.ts

@@ -11,7 +11,7 @@ import {
   AssembliesReplayCommand,
 } from './assemblies.ts'
 
-import { SignatureCommand, SmartCdnSignatureCommand } from './auth.ts'
+import { SignatureCommand, SmartCdnSignatureCommand, TokenCommand } from './auth.ts'
 
 import { BillsGetCommand } from './bills.ts'
 import { DocsRobotsGetCommand, DocsRobotsListCommand } from './docs.ts'
@@ -40,6 +40,7 @@ export function createCli(): Cli {
   // Auth commands (signature generation)
   cli.register(SignatureCommand)
   cli.register(SmartCdnSignatureCommand)
+  cli.register(TokenCommand)
 
   // Assemblies commands
   cli.register(AssembliesCreateCommand)

package/src/cli/helpers.ts

@@ -3,7 +3,12 @@ import fsp from 'node:fs/promises'
 import type { Readable } from 'node:stream'
 import { isAPIError } from './types.ts'
 
-export function getEnvCredentials(): { authKey: string; authSecret: string } | null {
+const MISSING_CREDENTIALS_MESSAGE =
+  'Missing credentials. Please set TRANSLOADIT_KEY and TRANSLOADIT_SECRET environment variables.'
+
+type EnvCredentials = { authKey: string; authSecret: string }
+
+function getEnvCredentials(): { authKey: string; authSecret: string } | null {
   const authKey = process.env.TRANSLOADIT_KEY ?? process.env.TRANSLOADIT_AUTH_KEY
   const authSecret = process.env.TRANSLOADIT_SECRET ?? process.env.TRANSLOADIT_AUTH_SECRET
 
@@ -12,6 +17,16 @@ export function getEnvCredentials(): { authKey: string; authSecret: string } | n
   return { authKey, authSecret }
 }
 
+type RequireEnvCredentialsResult =
+  | { ok: true; credentials: EnvCredentials }
+  | { ok: false; error: string }
+
+export function requireEnvCredentials(): RequireEnvCredentialsResult {
+  const credentials = getEnvCredentials()
+  if (credentials == null) return { ok: false, error: MISSING_CREDENTIALS_MESSAGE }
+  return { ok: true, credentials }
+}
+
 export function createReadStream(file: string): Readable {
   if (file === '-') return process.stdin
   return fs.createReadStream(file)