@aiform/cli-core 0.1.0

package/README.md

@@ -0,0 +1,13 @@
+# @aiform/cli-core
+
+Hive CLI 共用底座：登录/cookie、JSON fetch（结构化错误）、隐藏密码输入、commander action 包装。被 [`@aiform/cli-workspace`](https://www.npmjs.com/package/@aiform/cli-workspace) 和 [`@aiform/cli-platform`](https://www.npmjs.com/package/@aiform/cli-platform) 依赖。一般不直接用。
+
+```js
+import { ApiClient, resolveBaseUrl, resolveCreds, runAction, promptHidden, die } from '@aiform/cli-core';
+
+const c = new ApiClient(resolveBaseUrl(opts.url, 'WORKSPACE_URL', 'http://localhost:3000'));
+await c.login(await resolveCreds(opts, { tag: 'my-cli', emailEnv: 'X_EMAIL', passwordEnv: 'X_PW' }));
+const { members } = await c.get('/api/members');
+```
+
+ESM only；要求 Node ≥ 20（用内置 `fetch` + `Headers.getSetCookie()`）。

package/package.json

@@ -0,0 +1,30 @@
+{
+  "name": "@aiform/cli-core",
+  "version": "0.1.0",
+  "description": "Shared HTTP-client plumbing for the hive CLIs (login/cookie, JSON fetch, hidden prompt)",
+  "license": "MIT",
+  "type": "module",
+  "main": "./src/index.mjs",
+  "types": "./src/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./src/index.d.ts",
+      "default": "./src/index.mjs"
+    }
+  },
+  "files": [
+    "src"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {
+    "vitest": "^2.1.8"
+  },
+  "scripts": {
+    "test": "vitest run"
+  }
+}

package/src/http.mjs

@@ -0,0 +1,121 @@
+// 极简 HTTP 客户端：把 hive workspace / platform 的 Next.js API routes 当远端服务调。
+//
+// 设计：
+//   - 所有 API route 失败返回 `{ error: 'CODE', message?: '...' }` + 非 2xx 状态；
+//     这里把它包成 ApiError，CLI 直接 console.error + 退码。
+//   - 登录走 `POST /api/auth/login` `{email,password}` → `Set-Cookie`；不关心 cookie 名字，
+//     把所有 set-cookie 的 `name=value` 段拼起来当 `Cookie` 头回放即可。
+//   - bootstrap-token 这类非 cookie 鉴权由调用方传 `headers: { Authorization: 'Bearer ...' }`。
+
+export class ApiError extends Error {
+  /** @param {number} status @param {string} code @param {string} [detail] @param {string} [path] */
+  constructor(status, code, detail, path) {
+    const where = path ? ` (${path})` : '';
+    super(`${status} ${code}${detail ? `: ${detail}` : ''}${where}`);
+    this.name = 'ApiError';
+    this.status = status;
+    this.code = code;
+    this.detail = detail ?? null;
+  }
+}
+
+/** 去掉 baseUrl 尾斜杠，确保 path 以 `/` 开头。 */
+function joinUrl(baseUrl, path) {
+  const b = String(baseUrl).replace(/\/+$/, '');
+  const p = path.startsWith('/') ? path : `/${path}`;
+  return `${b}${p}`;
+}
+
+async function parseBody(res) {
+  const text = await res.text();
+  if (!text) return null;
+  try {
+    return JSON.parse(text);
+  } catch {
+    return { _raw: text };
+  }
+}
+
+export class ApiClient {
+  /** @param {string} baseUrl */
+  constructor(baseUrl) {
+    this.baseUrl = baseUrl;
+    /** @type {string|null} */
+    this.cookie = null;
+  }
+
+  /**
+   * `POST /api/auth/login`；成功后把 Set-Cookie 存到 this.cookie。
+   * @param {{email: string, password: string}} creds
+   */
+  async login({ email, password }) {
+    const res = await fetch(joinUrl(this.baseUrl, '/api/auth/login'), {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ email, password }),
+    });
+    if (res.status !== 200) {
+      const body = await parseBody(res);
+      throw new ApiError(
+        res.status,
+        body?.error ?? 'LOGIN_FAILED',
+        body?.message ?? (typeof body?._raw === 'string' ? body._raw.slice(0, 200) : undefined),
+        '/api/auth/login',
+      );
+    }
+    const setCookies = typeof res.headers.getSetCookie === 'function' ? res.headers.getSetCookie() : [];
+    const jar = setCookies.map((c) => c.split(';')[0].trim()).filter(Boolean);
+    if (jar.length === 0) throw new ApiError(res.status, 'NO_SET_COOKIE', 'login response carried no Set-Cookie', '/api/auth/login');
+    this.cookie = jar.join('; ');
+  }
+
+  /**
+   * 通用请求。2xx → 解析 JSON 返回；否则抛 ApiError。
+   * @param {string} method
+   * @param {string} path
+   * @param {{body?: unknown, headers?: Record<string,string>, query?: Record<string, string|number|boolean|undefined>}} [opts]
+   */
+  async request(method, path, opts = {}) {
+    let url = joinUrl(this.baseUrl, path);
+    if (opts.query) {
+      const qs = new URLSearchParams();
+      for (const [k, v] of Object.entries(opts.query)) {
+        if (v === undefined || v === null || v === false) continue;
+        qs.set(k, String(v === true ? 1 : v));
+      }
+      const s = qs.toString();
+      if (s) url += `?${s}`;
+    }
+    const headers = { ...(opts.headers ?? {}) };
+    if (this.cookie && !headers.Cookie) headers.Cookie = this.cookie;
+    let body;
+    if (opts.body !== undefined) {
+      headers['Content-Type'] = 'application/json';
+      body = JSON.stringify(opts.body);
+    }
+    const res = await fetch(url, { method, headers, body });
+    const parsed = await parseBody(res);
+    if (res.status < 200 || res.status >= 300) {
+      throw new ApiError(
+        res.status,
+        parsed?.error ?? 'HTTP_ERROR',
+        parsed?.message ?? (typeof parsed?._raw === 'string' ? parsed._raw.slice(0, 200) : undefined),
+        path,
+      );
+    }
+    return parsed;
+  }
+
+  get(path, opts) {
+    return this.request('GET', path, opts);
+  }
+  post(path, body, opts) {
+    return this.request('POST', path, { ...opts, body });
+  }
+  put(path, body, opts) {
+    return this.request('PUT', path, { ...opts, body });
+  }
+  del(path, opts) {
+    return this.request('DELETE', path, opts);
+  }
+}

package/src/index.d.ts

@@ -0,0 +1,46 @@
+// 手写类型声明（包体是纯 .mjs；这份 .d.ts 仅给 TS 消费者 / 编辑器用）。
+
+export class ApiError extends Error {
+  status: number;
+  code: string;
+  detail: string | null;
+  constructor(status: number, code: string, detail?: string, path?: string);
+}
+
+export interface ApiRequestOptions {
+  body?: unknown;
+  headers?: Record<string, string>;
+  query?: Record<string, string | number | boolean | undefined>;
+}
+
+export class ApiClient {
+  baseUrl: string;
+  cookie: string | null;
+  constructor(baseUrl: string);
+  login(creds: { email: string; password: string }): Promise<void>;
+  request(method: string, path: string, opts?: ApiRequestOptions): Promise<any>;
+  get(path: string, opts?: ApiRequestOptions): Promise<any>;
+  post(path: string, body?: unknown, opts?: ApiRequestOptions): Promise<any>;
+  put(path: string, body?: unknown, opts?: ApiRequestOptions): Promise<any>;
+  del(path: string, opts?: ApiRequestOptions): Promise<any>;
+}
+
+export function promptHidden(label: string): Promise<string>;
+
+export function die(tag: string, msg: string, code?: number): never;
+
+export function resolveBaseUrl(
+  optValue: string | undefined,
+  envName: string,
+  fallback: string,
+): string;
+
+export function resolveCreds(
+  opts: { email?: string; password?: string },
+  cfg: { tag: string; emailEnv: string; passwordEnv: string },
+): Promise<{ email: string; password: string }>;
+
+export function runAction<A extends unknown[]>(
+  tag: string,
+  fn: (...args: A) => Promise<void> | void,
+): (...args: A) => Promise<void>;

package/src/index.mjs

@@ -0,0 +1,3 @@
+export { ApiClient, ApiError } from './http.mjs';
+export { promptHidden } from './prompt.mjs';
+export { die, resolveBaseUrl, resolveCreds, runAction } from './options.mjs';

package/src/options.mjs

@@ -0,0 +1,50 @@
+import { promptHidden } from './prompt.mjs';
+import { ApiError } from './http.mjs';
+
+/** console.error(`[tag] msg`) + process.exit(code). */
+export function die(tag, msg, code = 1) {
+  console.error(`[${tag}] ${msg}`);
+  process.exit(code);
+}
+
+/** flag 优先，其次 env，最后 fallback。 */
+export function resolveBaseUrl(optValue, envName, fallback) {
+  return optValue || process.env[envName] || fallback;
+}
+
+/**
+ * 解析登录凭据：email 必须来自 --email / env；password 来自 --password / env / 隐藏输入。
+ * 缺 email → 退码 2；缺 password → 退码 2；Ctrl-C 取消 → 退码 130。
+ * @param {{email?: string, password?: string}} opts
+ * @param {{tag: string, emailEnv: string, passwordEnv: string}} cfg
+ * @returns {Promise<{email: string, password: string}>}
+ */
+export async function resolveCreds(opts, { tag, emailEnv, passwordEnv }) {
+  const email = opts.email || process.env[emailEnv];
+  if (!email) die(tag, `--email 或环境变量 ${emailEnv} 必填`, 2);
+  let password = opts.password || process.env[passwordEnv];
+  if (!password) {
+    try {
+      password = await promptHidden(`password for ${email}: `);
+    } catch {
+      die(tag, 'aborted', 130);
+    }
+  }
+  if (!password) die(tag, 'password 不能为空', 2);
+  return { email, password };
+}
+
+/**
+ * 包 commander action：捕获 ApiError / 普通 Error → `[tag] <msg>` + exit 1。
+ * 用法：`.action(runAction('hive-workspace', async (email, opts) => { ... }))`
+ */
+export function runAction(tag, fn) {
+  return async (...args) => {
+    try {
+      await fn(...args);
+    } catch (err) {
+      if (err instanceof ApiError) die(tag, err.message);
+      die(tag, err instanceof Error ? err.message : String(err));
+    }
+  };
+}

package/src/prompt.mjs

@@ -0,0 +1,52 @@
+import { createInterface } from 'node:readline';
+
+const CTRL_C = '\x03';
+const DEL = '\x7f';
+const BS = '\x08';
+
+/**
+ * 隐藏字符输入（密码等），逐字回显 '*'。
+ * Ctrl-C / 非 TTY 关 EOF 时 reject(new Error('aborted'))。
+ * @param {string} label
+ * @returns {Promise<string>}
+ */
+export function promptHidden(label) {
+  return new Promise((resolve, reject) => {
+    const rl = createInterface({
+      input: process.stdin,
+      output: process.stdout,
+      terminal: true,
+    });
+    process.stdout.write(label);
+    let buf = '';
+    const onData = (chunk) => {
+      const s = chunk.toString();
+      for (const ch of s) {
+        if (ch === '\n' || ch === '\r') {
+          process.stdout.write('\n');
+          process.stdin.removeListener('data', onData);
+          if (process.stdin.isTTY) process.stdin.setRawMode(false);
+          rl.close();
+          return resolve(buf);
+        }
+        if (ch === CTRL_C) {
+          process.stdin.removeListener('data', onData);
+          if (process.stdin.isTTY) process.stdin.setRawMode(false);
+          rl.close();
+          return reject(new Error('aborted'));
+        }
+        if (ch === DEL || ch === BS) {
+          if (buf.length > 0) {
+            buf = buf.slice(0, -1);
+            process.stdout.write('\b \b');
+          }
+          continue;
+        }
+        buf += ch;
+        process.stdout.write('*');
+      }
+    };
+    if (process.stdin.isTTY) process.stdin.setRawMode(true);
+    process.stdin.on('data', onData);
+  });
+}