veryfront 0.1.1046 → 0.1.1048

package/esm/cli/app/handlers/view-handlers.js

@@ -6,7 +6,7 @@
  */
 import { navigateTo } from "../state.js";
 import { moveDown, moveUp } from "../components/list-select.js";
-import { login } from "../../auth/login.js";
+import { isApiKeyIdentity, login } from "../../auth/login.js";
 import { fetchRemoteProjects } from "../../sync/index.js";
 import { addLog, updateRemote } from "../state.js";
 const KEY_UP = "\x1b[A";
@@ -112,7 +112,7 @@ export function handleAuthKey(key, ctx) {
     update(navigateTo("dashboard"));
     void (async () => {
         const user = await login(provider);
-        if (user) {
+        if (user && !isApiKeyIdentity(user)) {
             const result = await fetchRemoteProjects();
             update(updateRemote({
                 user,

package/esm/cli/auth/index.d.ts

@@ -1,4 +1,4 @@
-export { type AuthMethod, createOAuthAuthorizationUrl, createOAuthState, deleteToken, ensureAuthenticated, hasToken, login, logout, readToken, saveToken, type UserInfo, validateToken, whoami, } from "./login.js";
+export { type ApiKeyIdentity, type AuthIdentity, type AuthMethod, createOAuthAuthorizationUrl, createOAuthState, deleteToken, ensureAuthenticated, hasToken, isApiKeyIdentity, login, logout, readToken, saveToken, type UserInfo, validateCredential, validateToken, whoami, } from "./login.js";
 export { type CallbackServer, getCallbackUrl, startCallbackServer } from "./callback-server.js";
 export { getTokenLocation } from "./token-store.js";
 export { canOpenBrowser, openBrowser } from "./browser.js";

package/esm/cli/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,UAAU,EACf,2BAA2B,EAC3B,gBAAgB,EAChB,WAAW,EACX,mBAAmB,EACnB,QAAQ,EACR,KAAK,EACL,MAAM,EACN,SAAS,EACT,SAAS,EACT,KAAK,QAAQ,EACb,aAAa,EACb,MAAM,GACP,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,KAAK,cAAc,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChG,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,2BAA2B,EAC3B,gBAAgB,EAChB,WAAW,EACX,mBAAmB,EACnB,QAAQ,EACR,gBAAgB,EAChB,KAAK,EACL,MAAM,EACN,SAAS,EACT,SAAS,EACT,KAAK,QAAQ,EACb,kBAAkB,EAClB,aAAa,EACb,MAAM,GACP,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,KAAK,cAAc,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChG,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC"}

package/esm/cli/auth/index.js

@@ -1,4 +1,4 @@
-export { createOAuthAuthorizationUrl, createOAuthState, deleteToken, ensureAuthenticated, hasToken, login, logout, readToken, saveToken, validateToken, whoami, } from "./login.js";
+export { createOAuthAuthorizationUrl, createOAuthState, deleteToken, ensureAuthenticated, hasToken, isApiKeyIdentity, login, logout, readToken, saveToken, validateCredential, validateToken, whoami, } from "./login.js";
 export { getCallbackUrl, startCallbackServer } from "./callback-server.js";
 export { getTokenLocation } from "./token-store.js";
 export { canOpenBrowser, openBrowser } from "./browser.js";

package/esm/cli/auth/login.d.ts

@@ -6,12 +6,20 @@ export interface UserInfo {
     email: string;
     name?: string;
 }
+export interface ApiKeyIdentity {
+    authenticated: true;
+    type: "apiKey";
+}
+export type AuthIdentity = UserInfo | ApiKeyIdentity;
 export declare function createOAuthState(): string;
-export declare function createOAuthAuthorizationUrl(provider: "google" | "github" | "microsoft", callbackUrl: string, state: string): string;
-export declare function validateToken(token: string): Promise<UserInfo | null>;
-export declare function login(method?: AuthMethod): Promise<UserInfo | null>;
-export declare function ensureAuthenticated(env?: EnvironmentConfig): Promise<UserInfo | null>;
-export declare function logout(): Promise<void>;
-export declare function whoami(env?: EnvironmentConfig): Promise<UserInfo | null>;
+export declare function createOAuthAuthorizationUrl(provider: "google" | "github" | "microsoft", callbackUrl: string, state: string, env?: EnvironmentConfig): string;
+export declare function validateToken(token: string, env?: EnvironmentConfig): Promise<UserInfo | null>;
+export declare function isApiKeyToken(token: string): boolean;
+export declare function isApiKeyIdentity(identity: AuthIdentity): identity is ApiKeyIdentity;
+export declare function validateCredential(token: string, env?: EnvironmentConfig): Promise<AuthIdentity | null>;
+export declare function login(method?: AuthMethod, env?: EnvironmentConfig): Promise<AuthIdentity | null>;
+export declare function ensureAuthenticated(env?: EnvironmentConfig): Promise<AuthIdentity | null>;
+export declare function logout(env?: EnvironmentConfig): Promise<void>;
+export declare function whoami(env?: EnvironmentConfig): Promise<AuthIdentity | null>;
 export { deleteToken, hasToken, readToken, saveToken };
 //# sourceMappingURL=login.d.ts.map

package/esm/cli/auth/login.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/login.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,iBAAiB,EAAwB,MAAM,2BAA2B,CAAC;AACzF,OAAO,EAAE,WAAW,EAAoB,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAQjG,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,GAAG,OAAO,CAAC;AAErE,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AASD,wBAAgB,gBAAgB,IAAI,MAAM,CAIzC;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,QAAQ,GAAG,QAAQ,GAAG,WAAW,EAC3C,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,MAAM,CAQR;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAgB3E;AA6ID,wBAAsB,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CA8BzE;AAED,wBAAsB,mBAAmB,CACvC,GAAG,GAAE,iBAA0C,GAC9C,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAqB1B;AAED,wBAAsB,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAI5C;AAED,wBAAsB,MAAM,CAC1B,GAAG,GAAE,iBAA0C,GAC9C,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAmD1B;AAED,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC"}
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/login.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,iBAAiB,EAAwB,MAAM,2BAA2B,CAAC;AACzF,OAAO,EAAE,WAAW,EAAoB,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAQjG,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,GAAG,OAAO,CAAC;AAErE,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,IAAI,CAAC;IACpB,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,cAAc,CAAC;AASrD,wBAAgB,gBAAgB,IAAI,MAAM,CAIzC;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,QAAQ,GAAG,QAAQ,GAAG,WAAW,EAC3C,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,GAAG,GAAE,iBAA0C,GAC9C,MAAM,CAQR;AAED,wBAAsB,aAAa,CACjC,KAAK,EAAE,MAAM,EACb,GAAG,GAAE,iBAA0C,GAC9C,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAgB1B;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,YAAY,GAAG,QAAQ,IAAI,cAAc,CAEnF;AAqBD,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,MAAM,EACb,GAAG,GAAE,iBAA0C,GAC9C,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAQ9B;AAgJD,wBAAsB,KAAK,CACzB,MAAM,CAAC,EAAE,UAAU,EACnB,GAAG,GAAE,iBAA0C,GAC9C,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAkC9B;AAED,wBAAsB,mBAAmB,CACvC,GAAG,GAAE,iBAA0C,GAC9C,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAqB9B;AAED,wBAAsB,MAAM,CAAC,GAAG,GAAE,iBAA0C,GAAG,OAAO,CAAC,IAAI,CAAC,CAI3F;AAyCD,wBAAsB,MAAM,CAC1B,GAAG,GAAE,iBAA0C,GAC9C,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAiC9B;AAED,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC"}

package/esm/cli/auth/login.js

@@ -20,17 +20,17 @@ export function createOAuthState() {
     dntShim.crypto.getRandomValues(bytes);
     return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
 }
-export function createOAuthAuthorizationUrl(provider, callbackUrl, state) {
+export function createOAuthAuthorizationUrl(provider, callbackUrl, state, env = getEnvironmentConfig()) {
     const stateBoundCallbackUrl = new URL(callbackUrl);
     stateBoundCallbackUrl.searchParams.set("state", state);
-    const authUrl = new URL(`${getApiUrl().replace(/\/$/, "")}/auth/${provider}`);
+    const authUrl = new URL(`${getApiUrl(env).replace(/\/$/, "")}/auth/${provider}`);
     authUrl.searchParams.set("redirect_uri", stateBoundCallbackUrl.toString());
     authUrl.searchParams.set("state", state);
     return authUrl.toString();
 }
-export async function validateToken(token) {
+export async function validateToken(token, env = getEnvironmentConfig()) {
     try {
-        const response = await fetch(`${getApiUrl()}/me`, {
+        const response = await fetch(`${getApiUrl(env).replace(/\/$/, "")}/me`, {
             headers: { Authorization: `Bearer ${token}`, Accept: "application/json" },
         });
         if (!response.ok) {
@@ -44,6 +44,36 @@ export async function validateToken(token) {
         return null;
     }
 }
+export function isApiKeyToken(token) {
+    return token.startsWith("vf_");
+}
+export function isApiKeyIdentity(identity) {
+    return "type" in identity && identity.type === "apiKey";
+}
+async function validateApiKey(token, env = getEnvironmentConfig()) {
+    if (!isApiKeyToken(token))
+        return false;
+    try {
+        const url = new URL(`${getApiUrl(env).replace(/\/$/, "")}/projects`);
+        url.searchParams.set("limit", "1");
+        const response = await fetch(url, {
+            headers: { Authorization: `Bearer ${token}`, Accept: "application/json" },
+        });
+        await response.body?.cancel();
+        return response.ok;
+    }
+    catch {
+        return false;
+    }
+}
+export async function validateCredential(token, env = getEnvironmentConfig()) {
+    if (!token)
+        return null;
+    if (isApiKeyToken(token)) {
+        return (await validateApiKey(token, env)) ? { authenticated: true, type: "apiKey" } : null;
+    }
+    return validateToken(token, env);
+}
 async function promptAuthMethod() {
     console.log();
     console.log("  " + dim("Choose authentication method:"));
@@ -97,9 +127,9 @@ async function promptAuthMethod() {
         setRawMode(false);
     }
 }
-async function loginWithOAuth(provider) {
+async function loginWithOAuth(provider, env) {
     console.log();
-    if (!canOpenBrowser()) {
+    if (!canOpenBrowser(env)) {
         console.log("  " + warning("Browser login not available in this environment."));
         console.log("  " + dim("Please use the API token option instead."));
         return null;
@@ -115,7 +145,7 @@ async function loginWithOAuth(provider) {
         return null;
     }
     const callbackUrl = getCallbackUrl(server.port);
-    const authUrl = createOAuthAuthorizationUrl(provider, callbackUrl, state);
+    const authUrl = createOAuthAuthorizationUrl(provider, callbackUrl, state, env);
     console.log("  " + brand("Opening browser to log in..."));
     console.log();
     try {
@@ -162,14 +192,14 @@ async function loginWithToken() {
     }
     return token;
 }
-export async function login(method) {
+export async function login(method, env = getEnvironmentConfig()) {
     const authMethod = method ?? (isTTY() ? await promptAuthMethod() : "token");
     let token = null;
     switch (authMethod) {
         case "google":
         case "github":
         case "microsoft":
-            token = await loginWithOAuth(authMethod);
+            token = await loginWithOAuth(authMethod, env);
             break;
         case "token":
             token = await loginWithToken();
@@ -178,29 +208,31 @@ export async function login(method) {
     if (!token)
         return null;
     console.log("  " + dim("Validating token..."));
-    const userInfo = await validateToken(token);
-    if (!userInfo) {
+    const identity = await validateCredential(token, env);
+    if (!identity) {
         console.log();
         console.log("  " + error("✗") + " Invalid token");
         return null;
     }
-    await saveToken(token);
+    await saveToken(token, env);
     console.log();
-    console.log("  " + success("✓") + " Logged in as " + brand(userInfo.email));
-    return userInfo;
+    console.log(isApiKeyIdentity(identity)
+        ? "  " + success("✓") + " Authenticated with an API key"
+        : "  " + success("✓") + " Logged in as " + brand(identity.email));
+    return identity;
 }
 export async function ensureAuthenticated(env = getEnvironmentConfig()) {
     if (env.apiToken) {
-        const userInfo = await validateToken(env.apiToken);
-        if (userInfo)
-            return userInfo;
+        const credential = await validateCredential(env.apiToken, env);
+        if (credential)
+            return credential;
         console.log("  " + warning("Warning: VERYFRONT_API_TOKEN is invalid"));
     }
     const storedToken = await readToken(env);
     if (storedToken) {
-        const userInfo = await validateToken(storedToken);
-        if (userInfo)
-            return userInfo;
+        const credential = await validateCredential(storedToken, env);
+        if (credential)
+            return credential;
         await deleteToken(env);
         console.log("  " + warning("Session expired. Please log in again."));
     }
@@ -208,40 +240,52 @@ export async function ensureAuthenticated(env = getEnvironmentConfig()) {
         cliLogger.error("Not logged in. Set VERYFRONT_API_TOKEN or run in interactive mode.");
         return null;
     }
-    return login();
+    return login(undefined, env);
 }
-export async function logout() {
-    await deleteToken();
+export async function logout(env = getEnvironmentConfig()) {
+    await deleteToken(env);
     console.log();
     console.log("  " + success("✓") + " Logged out");
 }
-export async function whoami(env = getEnvironmentConfig()) {
-    if (env.apiToken) {
-        const userInfo = await validateToken(env.apiToken);
-        if (userInfo) {
-            if (isJsonMode()) {
-                await outputJson(createSuccessEnvelope("whoami", { ...userInfo, source: "env" }));
-                return userInfo;
-            }
-            console.log();
-            console.log("  " + success("✓") + " Logged in as " + brand(userInfo.email));
-            console.log("  " + dim("(via VERYFRONT_API_TOKEN)"));
+async function reportCredential(token, source, env) {
+    const credential = await validateCredential(token, env);
+    if (!credential)
+        return null;
+    if (!isApiKeyIdentity(credential)) {
+        const userInfo = credential;
+        if (isJsonMode()) {
+            await outputJson(createSuccessEnvelope("whoami", { ...userInfo, source }));
             return userInfo;
         }
+        console.log();
+        console.log("  " + success("✓") + " Logged in as " + brand(userInfo.email));
     }
-    const storedToken = await readToken();
-    if (storedToken) {
-        const userInfo = await validateToken(storedToken);
-        if (userInfo) {
-            if (isJsonMode()) {
-                await outputJson(createSuccessEnvelope("whoami", { ...userInfo, source: "token-store" }));
-                return userInfo;
-            }
-            console.log();
-            console.log("  " + success("✓") + " Logged in as " + brand(userInfo.email));
-            console.log("  " + dim(`Token stored at: ${getTokenLocation()}`));
-            return userInfo;
+    else {
+        if (isJsonMode()) {
+            await outputJson(createSuccessEnvelope("whoami", {
+                authenticated: true,
+                credential_type: "api_key",
+                source,
+            }));
+            return { authenticated: true, type: "apiKey" };
         }
+        console.log();
+        console.log("  " + success("✓") + " Authenticated with an API key");
+    }
+    console.log("  " + dim(source === "env" ? "(via VERYFRONT_API_TOKEN)" : `Token stored at: ${getTokenLocation(env)}`));
+    return credential;
+}
+export async function whoami(env = getEnvironmentConfig()) {
+    if (env.apiToken) {
+        const result = await reportCredential(env.apiToken, "env", env);
+        if (result)
+            return result;
+    }
+    const storedToken = await readToken(env);
+    if (storedToken) {
+        const result = await reportCredential(storedToken, "token-store", env);
+        if (result)
+            return result;
     }
     if (isJsonMode()) {
         await outputJson(createSuccessEnvelope("whoami", { authenticated: false }));
@@ -253,7 +297,7 @@ export async function whoami(env = getEnvironmentConfig()) {
     // Show provider tokens
     try {
         const { listProviderTokens } = await import("./provider-store.js");
-        const providers = await listProviderTokens();
+        const providers = await listProviderTokens(env);
         for (const p of providers) {
             console.log("  " + success("✓") + ` ${p} API key configured`);
         }

package/esm/cli/auth/provider-store.d.ts

@@ -7,14 +7,15 @@
  *
  * @module cli/auth/provider-store
  */
+import { type EnvironmentConfig } from "../../src/config/index.js";
 export type ProviderName = "anthropic" | "openai";
 export interface ProviderCredential {
     apiKey: string;
     validatedAt: string;
     provider: ProviderName;
 }
-export declare function saveProviderToken(provider: ProviderName, credential: ProviderCredential): Promise<void>;
-export declare function readProviderToken(provider: ProviderName): Promise<ProviderCredential | null>;
-export declare function deleteProviderToken(provider: ProviderName): Promise<void>;
-export declare function listProviderTokens(): Promise<ProviderName[]>;
+export declare function saveProviderToken(provider: ProviderName, credential: ProviderCredential, env?: EnvironmentConfig): Promise<void>;
+export declare function readProviderToken(provider: ProviderName, env?: EnvironmentConfig): Promise<ProviderCredential | null>;
+export declare function deleteProviderToken(provider: ProviderName, env?: EnvironmentConfig): Promise<void>;
+export declare function listProviderTokens(env?: EnvironmentConfig): Promise<ProviderName[]>;
 //# sourceMappingURL=provider-store.d.ts.map

package/esm/cli/auth/provider-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider-store.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/provider-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,QAAQ,CAAC;AAElD,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,YAAY,CAAC;CACxB;AAUD,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,YAAY,EACtB,UAAU,EAAE,kBAAkB,GAC7B,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,YAAY,GACrB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAQpC;AAED,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,YAAY,GACrB,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,CAgBlE"}
+{"version":3,"file":"provider-store.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/provider-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,KAAK,iBAAiB,EAAwB,MAAM,2BAA2B,CAAC;AAKzF,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,QAAQ,CAAC;AAElD,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,YAAY,CAAC;CACxB;AAYD,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,YAAY,EACtB,UAAU,EAAE,kBAAkB,EAC9B,GAAG,CAAC,EAAE,iBAAiB,GACtB,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,YAAY,EACtB,GAAG,CAAC,EAAE,iBAAiB,GACtB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAQpC;AAED,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,YAAY,EACtB,GAAG,CAAC,EAAE,iBAAiB,GACtB,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,wBAAsB,kBAAkB,CAAC,GAAG,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAgBzF"}

package/esm/cli/auth/provider-store.js

@@ -10,45 +10,49 @@
 import { getEnvironmentConfig } from "../../src/config/index.js";
 import { join } from "../../src/platform/compat/path/index.js";
 import { createFileSystem } from "../../src/platform/index.js";
-function getTokenDir() {
-    const env = getEnvironmentConfig();
+import { CONFIG_DIR_NAME, TOKEN_FILE_PERMISSIONS } from "../shared/constants.js";
+function getTokenDir(env = getEnvironmentConfig()) {
     const configDir = env.xdgConfigHome
-        ? join(env.xdgConfigHome, "veryfront")
-        : join(env.homeDir, ".config", "veryfront");
+        ? join(env.xdgConfigHome, CONFIG_DIR_NAME)
+        : env.homeDir
+            ? join(env.homeDir, ".config", CONFIG_DIR_NAME)
+            : null;
+    if (!configDir)
+        throw new Error("Could not determine home directory");
     return join(configDir, "tokens");
 }
-export async function saveProviderToken(provider, credential) {
+export async function saveProviderToken(provider, credential, env) {
     const fs = createFileSystem();
-    const dir = getTokenDir();
+    const dir = getTokenDir(env);
     await fs.mkdir(dir, { recursive: true });
     const path = join(dir, provider);
     await fs.writeTextFile(path, JSON.stringify(credential));
-    await fs.chmod(path, 0o600);
+    await fs.chmod(path, TOKEN_FILE_PERMISSIONS);
 }
-export async function readProviderToken(provider) {
+export async function readProviderToken(provider, env) {
     const fs = createFileSystem();
     try {
-        const raw = await fs.readTextFile(join(getTokenDir(), provider));
+        const raw = await fs.readTextFile(join(getTokenDir(env), provider));
         return JSON.parse(raw);
     }
     catch {
         return null;
     }
 }
-export async function deleteProviderToken(provider) {
+export async function deleteProviderToken(provider, env) {
     const fs = createFileSystem();
     try {
-        await fs.remove(join(getTokenDir(), provider));
+        await fs.remove(join(getTokenDir(env), provider));
     }
     catch {
         // Token doesn't exist — fine
     }
 }
-export async function listProviderTokens() {
+export async function listProviderTokens(env) {
     const fs = createFileSystem();
     const providers = [];
     try {
-        for await (const entry of fs.readDir(getTokenDir())) {
+        for await (const entry of fs.readDir(getTokenDir(env))) {
             if (entry.isFile &&
                 (entry.name === "anthropic" || entry.name === "openai")) {
                 providers.push(entry.name);

package/esm/cli/commands/build/command.d.ts

@@ -1,3 +1,5 @@
 import type { BuildOptions } from "./types.js";
+/** @internal */
+export declare function runWithBundlerShutdown<T>(operation: () => Promise<T>, stopBundler?: () => Promise<void>): Promise<T>;
 export declare function buildCommand(options: BuildOptions): Promise<void>;
 //# sourceMappingURL=command.d.ts.map

package/esm/cli/commands/build/command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/build/command.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAI/C,wBAAgB,YAAY,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAgFjE"}
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/build/command.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAI/C,gBAAgB;AAChB,wBAAsB,sBAAsB,CAAC,CAAC,EAC5C,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,WAAW,GAAE,MAAM,OAAO,CAAC,IAAI,CAG9B,GACA,OAAO,CAAC,CAAC,CAAC,CAiBZ;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAkFjE"}

package/esm/cli/commands/build/command.js

@@ -3,11 +3,35 @@ import { runtime } from "../../../src/platform/index.js";
 import { getConfig } from "../../../src/config/index.js";
 import { buildProduction } from "../../../src/build/index.js";
 import { withSpan } from "../../../src/observability/tracing/otlp-setup.js";
+import { cliLogger } from "../../utils/index.js";
 import { displayBuildConfig, displayBuildStart } from "./config-display.js";
 import { handleBuildError } from "./error-handler.js";
 import { displayBuildSuccess } from "./stats-display.js";
 import { isJsonMode, streamJsonLine } from "../../shared/json-output.js";
 import { ensureBuiltinContentProcessor } from "../../shared/ensure-content-processor.js";
+/** @internal */
+export async function runWithBundlerShutdown(operation, stopBundler = async () => {
+    const { stop } = await import("../../../src/extensions/bundler/index.js");
+    await stop();
+}) {
+    let result;
+    try {
+        result = await operation();
+    }
+    catch (operationError) {
+        try {
+            await stopBundler();
+        }
+        catch {
+            if (!isJsonMode()) {
+                cliLogger.warn("Bundler shutdown also failed after the build error");
+            }
+        }
+        throw operationError;
+    }
+    await stopBundler();
+    return result;
+}
 export function buildCommand(options) {
     return withSpan("cli.command.build", async () => {
         const outputDir = options.outputDir ?? join(options.projectDir, "dist");
@@ -20,26 +44,28 @@ export function buildCommand(options) {
             else {
                 displayBuildConfig({ ...options, outputDir });
             }
-            const adapter = await runtime.get();
-            await getConfig(options.projectDir, adapter);
-            await ensureBuiltinContentProcessor();
-            if (isJsonMode()) {
-                streamJsonLine({ type: "step", name: "config", status: "completed" });
-                streamJsonLine({ type: "step", name: "build", status: "started" });
-            }
-            else {
-                displayBuildStart();
-            }
-            const stats = await buildProduction({
-                projectDir: options.projectDir,
-                outputDir,
-                enableSplitting: options.splitting ?? true,
-                enableCompression: options.compress ?? true,
-                enablePrefetch: options.prefetch ?? true,
-                ssg: options.ssg ?? false,
-                include: options.include,
-                exclude: options.exclude,
-                dryRun,
+            const stats = await runWithBundlerShutdown(async () => {
+                const adapter = await runtime.get();
+                await getConfig(options.projectDir, adapter);
+                await ensureBuiltinContentProcessor();
+                if (isJsonMode()) {
+                    streamJsonLine({ type: "step", name: "config", status: "completed" });
+                    streamJsonLine({ type: "step", name: "build", status: "started" });
+                }
+                else {
+                    displayBuildStart();
+                }
+                return await buildProduction({
+                    projectDir: options.projectDir,
+                    outputDir,
+                    enableSplitting: options.splitting ?? true,
+                    enableCompression: options.compress ?? true,
+                    enablePrefetch: options.prefetch ?? true,
+                    ssg: options.ssg ?? false,
+                    include: options.include,
+                    exclude: options.exclude,
+                    dryRun,
+                });
             });
             const elapsed = Date.now() - startTime;
             if (isJsonMode()) {

package/esm/cli/commands/build/handler.d.ts

@@ -7,7 +7,9 @@ export declare const getBuildArgsSchema: () => import("../../../src/internal-age
     output: import("../../../src/internal-agents/schema.js").Schema<string | undefined>;
     preset: import("../../../src/internal-agents/schema.js").Schema<string | undefined>;
     split: import("../../../src/internal-agents/schema.js").Schema<boolean>;
+    noSplit: import("../../../src/internal-agents/schema.js").Schema<boolean>;
     compress: import("../../../src/internal-agents/schema.js").Schema<boolean>;
+    noCompress: import("../../../src/internal-agents/schema.js").Schema<boolean>;
     prefetch: import("../../../src/internal-agents/schema.js").Schema<boolean>;
     ssg: import("../../../src/internal-agents/schema.js").Schema<boolean>;
     noSsg: import("../../../src/internal-agents/schema.js").Schema<boolean>;
@@ -19,7 +21,9 @@ export declare const BuildArgsSchema: import("../../../src/internal-agents/schem
     output: import("../../../src/internal-agents/schema.js").Schema<string | undefined>;
     preset: import("../../../src/internal-agents/schema.js").Schema<string | undefined>;
     split: import("../../../src/internal-agents/schema.js").Schema<boolean>;
+    noSplit: import("../../../src/internal-agents/schema.js").Schema<boolean>;
     compress: import("../../../src/internal-agents/schema.js").Schema<boolean>;
+    noCompress: import("../../../src/internal-agents/schema.js").Schema<boolean>;
     prefetch: import("../../../src/internal-agents/schema.js").Schema<boolean>;
     ssg: import("../../../src/internal-agents/schema.js").Schema<boolean>;
     noSsg: import("../../../src/internal-agents/schema.js").Schema<boolean>;
@@ -38,7 +42,9 @@ export declare const parseBuildArgs: (args: ParsedArgs) => import("../../shared/
     output: import("../../../src/internal-agents/schema.js").Schema<string | undefined>;
     preset: import("../../../src/internal-agents/schema.js").Schema<string | undefined>;
     split: import("../../../src/internal-agents/schema.js").Schema<boolean>;
+    noSplit: import("../../../src/internal-agents/schema.js").Schema<boolean>;
     compress: import("../../../src/internal-agents/schema.js").Schema<boolean>;
+    noCompress: import("../../../src/internal-agents/schema.js").Schema<boolean>;
     prefetch: import("../../../src/internal-agents/schema.js").Schema<boolean>;
     ssg: import("../../../src/internal-agents/schema.js").Schema<boolean>;
     noSsg: import("../../../src/internal-agents/schema.js").Schema<boolean>;

package/esm/cli/commands/build/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/build/handler.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yCAAyC,CAAC;AAQ3E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAExD;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;GAa9B,CAAC;AAEF,eAAO,MAAM,eAAe;;;;;;;;;;;GAAiC,CAAC;AAE9D;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,CAAC;AAE9E;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;GAWzB,CAAC;AAEH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA2BxE"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/build/handler.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yCAAyC,CAAC;AAQ3E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGxD;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;GAe9B,CAAC;AAEF,eAAO,MAAM,eAAe;;;;;;;;;;;;;GAAiC,CAAC;AAE9D;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,CAAC;AAE9E;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;GAazB,CAAC;AAEH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBxE"}

package/esm/cli/commands/build/handler.js

@@ -5,7 +5,8 @@ import { cliLogger } from "../../utils/index.js";
 import { cwd } from "../../../src/platform/index.js";
 import { CommonArgs, createArgParser, parseArgsOrThrow } from "../../shared/args.js";
 import { ensureCliBundlerContracts } from "../../shared/default-contracts.js";
-import { exitProcess, showLogo } from "../../utils/index.js";
+import { showLogo } from "../../utils/index.js";
+import { ensureBuiltinContentProcessor } from "../../shared/ensure-content-processor.js";
 /**
  * Schema factory for build command arguments
  */
@@ -13,7 +14,9 @@ export const getBuildArgsSchema = defineSchema((v) => v.object({
     output: v.string().optional(),
     preset: v.string().optional(),
     split: v.boolean().default(true),
+    noSplit: v.boolean().default(false),
     compress: v.boolean().default(true),
+    noCompress: v.boolean().default(false),
     prefetch: v.boolean().default(true),
     ssg: v.boolean().default(false),
     noSsg: v.boolean().default(false),
@@ -29,7 +32,9 @@ export const parseBuildArgs = createArgParser(BuildArgsSchema, {
     output: CommonArgs.output,
     preset: { keys: ["preset"], type: "string" },
     split: { keys: ["split"], type: "boolean" },
+    noSplit: { keys: ["no-split"], type: "boolean" },
     compress: { keys: ["compress"], type: "boolean" },
+    noCompress: { keys: ["no-compress"], type: "boolean" },
     prefetch: { keys: ["prefetch"], type: "boolean" },
     ssg: { keys: ["ssg"], type: "boolean" },
     noSsg: { keys: ["no-ssg"], type: "boolean" },
@@ -44,6 +49,7 @@ export async function handleBuildCommand(args) {
     const projectDir = cwd();
     const preset = opts.preset?.toLowerCase();
     if (preset === "embedded") {
+        await ensureBuiltinContentProcessor();
         await handleEmbeddedBuild(projectDir, opts.output);
         return;
     }
@@ -51,16 +57,14 @@ export async function handleBuildCommand(args) {
     await buildCommand({
         projectDir,
         outputDir: opts.output,
-        splitting: opts.split,
-        compress: opts.compress,
+        splitting: opts.split && !opts.noSplit,
+        compress: opts.compress && !opts.noCompress,
         prefetch: opts.prefetch,
         ssg: opts.ssg && !opts.noSsg,
         include: opts.include,
         exclude: opts.exclude,
         dryRun: opts.dryRun,
     });
-    // Build tools (esbuild) may leave hanging timers; force clean exit
-    exitProcess(0);
 }
 async function handleEmbeddedBuild(projectDir, outputDir) {
     const { buildEmbeddedPreset } = await import("../../../src/build/index.js");

package/esm/cli/commands/deploy/command-help.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-help.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/deploy/command-help.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,eAAO,MAAM,UAAU,EAAE,WAuCxB,CAAC"}
+{"version":3,"file":"command-help.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/deploy/command-help.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,eAAO,MAAM,UAAU,EAAE,WAwCxB,CAAC"}

package/esm/cli/commands/deploy/command-help.js

@@ -34,7 +34,8 @@ export const deployHelp = {
     ],
     notes: [
         "Requires VERYFRONT_API_TOKEN env var or veryfront.json config",
+        "Requires a successful veryfront push for the same project and branch",
         "Creates a new release from the specified branch",
-        "Deploys the release to the target environment",
+        "Verifies the target environment points to the created deployment before succeeding",
     ],
 };