@actionway/cli 0.18.15 → 0.18.17

package/dist/index.js

@@ -12573,11 +12573,22 @@ function deviceErrorDetail(value) {
   const message = typeof error?.message === "string" ? error.message : "";
   return [code, message].filter(Boolean).join(": ");
 }
-async function startDevicePairing(gateway, codeChallenge, fetchImpl = fetch) {
+async function startDevicePairing(gateway, codeChallenge, fetchImpl = fetch, context = {}) {
   const response = await fetchImpl(`${stripSlash(gateway)}/api/auth/cli-device/start`, {
     method: "POST",
-    headers: { Accept: "application/json", "Content-Type": "application/json" },
-    body: JSON.stringify({ code_challenge: codeChallenge }),
+    headers: {
+      Accept: "application/json",
+      "Content-Type": "application/json",
+      "x-actionway-cli-version": getCliVersion(),
+      ...context.clientContext ? localClientContextHeaders(context.clientContext) : {}
+    },
+    body: JSON.stringify({
+      code_challenge: codeChallenge,
+      ...context.installAttribution ? {
+        install_session_id: context.installAttribution.installSessionId,
+        install_source: context.installAttribution.installSource
+      } : {}
+    }),
     signal: AbortSignal.timeout(DEVICE_START_TIMEOUT_MS)
   });
   const value = await readDeviceJson(response);
@@ -12750,6 +12761,18 @@ async function login(options = {}) {
   const sleep = options.sleepImpl ?? defaultSleep;
   const onNotice = options.onNotice ?? ((message) => process.stderr.write(`${message}
 `));
+  let failureReported = false;
+  const reportInstallEvent = async (event) => {
+    if (!options.installAttribution || !options.onInstallEvent) return;
+    try {
+      await options.onInstallEvent(event);
+    } catch {
+    }
+  };
+  const reportInstallFailure = async (failureStage2, failureReason) => {
+    failureReported = true;
+    await reportInstallEvent({ event: "install_failed", failureStage: failureStage2, failureReason });
+  };
   const gateway = resolveGatewayUrl(options.gateway, env);
   const gatewaySource = options.gateway?.trim() ? "flag" : (env.ACTIONWAY_GATEWAY_URL ?? "").trim() ? "env" : "default";
   let clientId = options.clientId?.trim() || (env.ACTIONWAY_OAUTH_CLIENT_ID ?? "").trim();
@@ -12771,6 +12794,7 @@ async function login(options = {}) {
     throw error;
   };
   if (!!clientId !== !!issuer) {
+    await reportInstallFailure("configuration", "configuration_invalid");
     throw new CliError(
       "E_SCHEMA",
       "client_id and issuer overrides must be provided together",
@@ -12783,6 +12807,7 @@ async function login(options = {}) {
     try {
       discovered = await fetchCliOAuthConfig(gateway, fetchImpl);
     } catch (error) {
+      await reportInstallFailure("configuration", "configuration_unavailable");
       const message = error instanceof Error ? error.message : String(error);
       return withAuthContext(new CliError(
         "E_BACKEND",
@@ -12794,9 +12819,13 @@ async function login(options = {}) {
     issuer ||= discovered.issuer;
   }
   const timeoutMs = options.timeoutSeconds !== void 0 && Number.isFinite(options.timeoutSeconds) && options.timeoutSeconds > 0 ? options.timeoutSeconds * 1e3 : DEFAULT_LOGIN_TIMEOUT_MS;
+  let failureStage = "pairing";
   try {
     const verifier = randomBase64Url();
-    const pairing = await startDevicePairing(gateway, pkceChallenge(verifier), fetchImpl);
+    const pairing = await startDevicePairing(gateway, pkceChallenge(verifier), fetchImpl, {
+      ...options.installAttribution ? { installAttribution: options.installAttribution } : {},
+      ...options.clientContext ? { clientContext: options.clientContext } : {}
+    });
     onNotice(
       `Sign in to Actionway on any device:
   ${pairing.verificationUrl}
@@ -12805,6 +12834,7 @@ async function login(options = {}) {
     if (options.noBrowser) onNotice(`Open this URL to approve the sign-in:
 ${pairing.verificationUrlComplete}`);
     else openBrowser(pairing.verificationUrlComplete, onNotice);
+    failureStage = "authorization";
     const deadline = Date.now() + Math.min(timeoutMs, pairing.expiresInS * 1e3);
     let approvalCode = null;
     for (; ; ) {
@@ -12814,6 +12844,7 @@ ${pairing.verificationUrlComplete}`);
         break;
       }
       if (poll.status === "denied") {
+        await reportInstallFailure("authorization", "authorization_denied");
         throw new CliError(
           "E_BACKEND",
           "the sign-in request was denied in the browser",
@@ -12821,6 +12852,7 @@ ${pairing.verificationUrlComplete}`);
         );
       }
       if (poll.status === "expired") {
+        await reportInstallFailure("authorization", "authorization_expired");
         throw new CliError(
           "E_BACKEND",
           "the sign-in code expired before it was approved",
@@ -12828,6 +12860,7 @@ ${pairing.verificationUrlComplete}`);
         );
       }
       if (Date.now() >= deadline) {
+        await reportInstallFailure("authorization", "authorization_timeout");
         throw new CliError(
           "E_BACKEND",
           `login timed out after ${Math.round(timeoutMs / 1e3)} seconds`,
@@ -12836,6 +12869,7 @@ ${pairing.verificationUrlComplete}`);
       }
       await sleep(pairing.intervalS * 1e3);
     }
+    failureStage = "token_exchange";
     const tokens = await tokenRequest(
       issuer,
       new URLSearchParams({
@@ -12847,6 +12881,8 @@ ${pairing.verificationUrlComplete}`);
       }),
       fetchImpl
     );
+    await reportInstallEvent({ event: "install_token_exchanged" });
+    failureStage = "account_connection";
     const account = await fetchCliSession(gateway, tokens.accessToken, fetchImpl, {
       ...options.installAttribution ? { installAttribution: options.installAttribution } : {},
       ...options.clientContext ? { clientContext: options.clientContext } : {}
@@ -12874,6 +12910,11 @@ ${pairing.verificationUrlComplete}`);
     saveCredentials(credentials, env);
     return { credentials, account };
   } catch (error) {
+    if (!failureReported) {
+      const stage = typeof failureStage === "string" ? failureStage : "pairing";
+      const reason = stage === "pairing" ? "pairing_unavailable" : stage === "authorization" ? "authorization_unavailable" : stage === "token_exchange" ? "token_exchange_failed" : "account_connection_failed";
+      await reportInstallFailure(stage, reason);
+    }
     return withAuthContext(error);
   }
 }
@@ -13367,6 +13408,36 @@ async function captureInstallStarted(input) {
     return false;
   }
 }
+async function captureInstallAuthEvent(input) {
+  try {
+    const response = await fetchWithTimeout(
+      `${stripSlash2(input.gateway)}/api/analytics/install-auth`,
+      {
+        method: "POST",
+        headers: {
+          Accept: "application/json",
+          "Content-Type": "application/json",
+          "x-actionway-cli-version": getCliVersion(),
+          ...input.clientContext ? localClientContextHeaders(input.clientContext) : {}
+        },
+        body: JSON.stringify({
+          event: input.event.event,
+          installSessionId: input.installSessionId,
+          installSource: input.installSource,
+          ...input.event.event === "install_failed" ? {
+            failureStage: input.event.failureStage,
+            failureReason: input.event.failureReason
+          } : {}
+        })
+      },
+      ANALYTICS_TIMEOUT_MS,
+      input.fetchImpl ?? fetch
+    );
+    return response.ok;
+  } catch {
+    return false;
+  }
+}
 async function requestCliInstallSession(input) {
   const url = new URL(`${stripSlash2(input.gateway)}/api/auth/cli-session`);
   url.searchParams.set("install_session_id", input.installSessionId);
@@ -13470,6 +13541,15 @@ function registerInitCommand(program2, getClientContext = () => ({ runtimeOs: "o
           ...opts.browser === false ? { noBrowser: true } : {},
           installAttribution: { installSessionId, installSource },
           clientContext,
+          onInstallEvent: async (event) => {
+            await captureInstallAuthEvent({
+              gateway: initGateway,
+              installSessionId,
+              installSource,
+              event,
+              clientContext
+            });
+          },
           onNotice: (message) => emitEvent({ event: "auth", message })
         });
         account = {
@@ -13478,12 +13558,27 @@ function registerInitCommand(program2, getClientContext = () => ({ runtimeOs: "o
           walletId: loginResult.account.walletId
         };
       } else {
-        account = await connectInstallSession({
-          ...opts.gateway ? { explicitGateway: opts.gateway } : {},
-          installSessionId,
-          installSource,
-          clientContext
-        });
+        try {
+          account = await connectInstallSession({
+            ...opts.gateway ? { explicitGateway: opts.gateway } : {},
+            installSessionId,
+            installSource,
+            clientContext
+          });
+        } catch (error) {
+          await captureInstallAuthEvent({
+            gateway: initGateway,
+            installSessionId,
+            installSource,
+            clientContext,
+            event: {
+              event: "install_failed",
+              failureStage: error instanceof CliError && error.code === "E_NOT_AUTHENTICATED" ? "token_exchange" : "account_connection",
+              failureReason: error instanceof CliError && error.code === "E_NOT_AUTHENTICATED" ? "token_refresh_failed" : "account_connection_failed"
+            }
+          });
+          throw error;
+        }
       }
       const snapshot = whoamiSnapshot();
       ok({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@actionway/cli",
-  "version": "0.18.15",
+  "version": "0.18.17",
   "description": "actionway CLI 的本地端壳：Clerk OAuth 鉴权 + cli-core 共享命令面 + init / update / skill 物化 / 版本三链路（终端用户本地 Codex / Claude Code / WorkBuddy 使用）",
   "type": "module",
   "bin": {