Something went wrong. Try again.
WIP: A simple cli for daily tangled use cases and AI integration. This is for my personal use right now, but happy if others get mileage fro
Something went wrong. Try again.
2.6 kB · 75 lines
TypeScript
at main
12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576import { execSync } from 'node:child_process';import type { TangledApiClient } from '../lib/api-client.js';import { getCurrentSessionMetadata, KeychainAccessError } from '../lib/session.js';
/** * Validate that the client is authenticated and has an active session * @throws Error if not authenticated or no session found * @returns The current session with did and handle */export async function requireAuth(client: TangledApiClient): Promise<{ did: string; handle: string;}> { if (!client.isAuthenticated()) { throw new Error('Must be authenticated. Run "tangled auth login" first.'); }
const session = client.getSession(); if (!session) { throw new Error('No active session found'); }
return session;}
function tryUnlockKeychain(): boolean { if (process.platform !== 'darwin') return false; try { execSync('security unlock-keychain', { stdio: 'inherit' }); return true; } catch { return false; }}
/** * Resume session and ensure the client is authenticated. * On macOS, if the keychain is locked, attempts to unlock it interactively * via `security unlock-keychain` before falling back to an error message. * Exits the process with a clear error message if authentication fails. */export async function ensureAuthenticated(client: TangledApiClient): Promise<void> { try { const authenticated = await client.resumeSession(); if (!authenticated) { // Distinguish "never logged in" from "session expired" so the message is // actionable. resumeSession only clears metadata when stored credentials // are missing entirely, so surviving metadata means the credentials were // present but could not be refreshed (an expired session). const metadata = await getCurrentSessionMetadata(); if (metadata) { console.error('✗ Session expired. Run "tangled auth login" to re-authenticate.'); } else { console.error('✗ Not authenticated. Run "tangled auth login" first.'); } process.exit(1); } } catch (error) { if (error instanceof KeychainAccessError) { const unlocked = tryUnlockKeychain(); if (unlocked) { try { const retried = await client.resumeSession(); if (retried) return; } catch { // fall through to error message } } console.error('✗ Cannot access keychain. Please unlock your Mac keychain and try again.'); console.error(' You can unlock it manually with: security unlock-keychain'); process.exit(1); } throw error; }}