@aliyunrds/ctxdb 1.0.7 → 1.0.8-beta.0

package/dist/hooks/hermes-post-llm-call.js

@@ -1,18 +1,20 @@
 #!/usr/bin/env node
 import {
   captureParsedMessages
-} from "../chunk-DC5NWGDW.js";
-import "../chunk-X2BX6LR6.js";
+} from "../chunk-HF2CWTRU.js";
+import "../chunk-NJJBT52C.js";
 import {
   HttpClient,
   agentFromArgvWithFallback,
   debug,
   load,
   setDebug
-} from "../chunk-S5W4FQ7M.js";
+} from "../chunk-AAZLOCVB.js";
 import {
   shouldSkipHooks
-} from "../chunk-UEKR2Z3S.js";
+} from "../chunk-5ML4VSXN.js";
+import "../chunk-R67JELM7.js";
+import "../chunk-VIG4SYLU.js";
 
 // src/hooks/hermes-post-llm-call.ts
 import { pathToFileURL } from "url";

package/dist/hooks/hermes-pre-llm-call.js

@@ -2,17 +2,17 @@
 import {
   HOOK_TIMEOUT_MS,
   composeSessionStart
-} from "../chunk-NFTGG6WK.js";
+} from "../chunk-24CNB3XJ.js";
 import {
   composeUserPromptSubmit
-} from "../chunk-R2QS6ACP.js";
+} from "../chunk-BBTXHFMD.js";
 import {
   fetchKbCatalogBlock
-} from "../chunk-DPLMBHLU.js";
-import "../chunk-QVXDI77N.js";
+} from "../chunk-WSMZOFZQ.js";
+import "../chunk-CAXRYH6E.js";
 import {
   isCircuitOpen
-} from "../chunk-X2BX6LR6.js";
+} from "../chunk-NJJBT52C.js";
 import {
   HttpClient,
   agentFromArgvWithFallback,
@@ -20,10 +20,12 @@ import {
   isComplete,
   load,
   setDebug
-} from "../chunk-S5W4FQ7M.js";
+} from "../chunk-AAZLOCVB.js";
 import {
   shouldSkipHooks
-} from "../chunk-UEKR2Z3S.js";
+} from "../chunk-5ML4VSXN.js";
+import "../chunk-R67JELM7.js";
+import "../chunk-VIG4SYLU.js";
 
 // src/hooks/hermes-pre-llm-call.ts
 import { pathToFileURL } from "url";

package/dist/hooks/pre-tool-use.js

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
 import {
   shouldSkipHooks
-} from "../chunk-UEKR2Z3S.js";
+} from "../chunk-5ML4VSXN.js";
+import "../chunk-VIG4SYLU.js";
 
 // src/hooks/pre-tool-use.ts
 async function main() {

package/dist/hooks/session-start.js

@@ -3,12 +3,12 @@ import {
   HOOK_TIMEOUT_MS,
   composeSessionStart,
   formatSessionStartStdout
-} from "../chunk-NFTGG6WK.js";
-import "../chunk-DPLMBHLU.js";
-import "../chunk-QVXDI77N.js";
+} from "../chunk-24CNB3XJ.js";
+import "../chunk-WSMZOFZQ.js";
+import "../chunk-CAXRYH6E.js";
 import {
   isCircuitOpen
-} from "../chunk-X2BX6LR6.js";
+} from "../chunk-NJJBT52C.js";
 import {
   HttpClient,
   agentFromArgvWithFallback,
@@ -16,10 +16,12 @@ import {
   isComplete,
   load,
   setDebug
-} from "../chunk-S5W4FQ7M.js";
+} from "../chunk-AAZLOCVB.js";
 import {
   shouldSkipHooks
-} from "../chunk-UEKR2Z3S.js";
+} from "../chunk-5ML4VSXN.js";
+import "../chunk-R67JELM7.js";
+import "../chunk-VIG4SYLU.js";
 
 // src/hooks/session-start.ts
 import { pathToFileURL } from "url";

package/dist/hooks/stop.js

@@ -1,18 +1,20 @@
 #!/usr/bin/env node
 import {
   captureTurn
-} from "../chunk-DC5NWGDW.js";
-import "../chunk-X2BX6LR6.js";
+} from "../chunk-HF2CWTRU.js";
+import "../chunk-NJJBT52C.js";
 import {
   HttpClient,
   agentFromArgvWithFallback,
   debug,
   load,
   setDebug
-} from "../chunk-S5W4FQ7M.js";
+} from "../chunk-AAZLOCVB.js";
 import {
   shouldSkipHooks
-} from "../chunk-UEKR2Z3S.js";
+} from "../chunk-5ML4VSXN.js";
+import "../chunk-R67JELM7.js";
+import "../chunk-VIG4SYLU.js";
 
 // src/hooks/stop.ts
 async function readStdinJson() {

package/dist/hooks/user-prompt-submit.js

@@ -2,12 +2,12 @@
 import {
   composeUserPromptSubmit,
   formatUserPromptSubmitStdout
-} from "../chunk-R2QS6ACP.js";
-import "../chunk-DPLMBHLU.js";
-import "../chunk-QVXDI77N.js";
+} from "../chunk-BBTXHFMD.js";
+import "../chunk-WSMZOFZQ.js";
+import "../chunk-CAXRYH6E.js";
 import {
   isCircuitOpen
-} from "../chunk-X2BX6LR6.js";
+} from "../chunk-NJJBT52C.js";
 import {
   HttpClient,
   agentFromArgvWithFallback,
@@ -15,10 +15,12 @@ import {
   isComplete,
   load,
   setDebug
-} from "../chunk-S5W4FQ7M.js";
+} from "../chunk-AAZLOCVB.js";
 import {
   shouldSkipHooks
-} from "../chunk-UEKR2Z3S.js";
+} from "../chunk-5ML4VSXN.js";
+import "../chunk-R67JELM7.js";
+import "../chunk-VIG4SYLU.js";
 
 // src/hooks/user-prompt-submit.ts
 import { pathToFileURL } from "url";

package/dist/opencode/index.js

@@ -1,7 +1,10 @@
+// <define:__CTXDB_DISTRIBUTION_MANIFEST__>
+var define_CTXDB_DISTRIBUTION_MANIFEST_default = { id: "public", packageName: "@aliyunrds/ctxdb", packageRegistry: null, capabilities: { interactiveLogin: false, managedCredentials: false } };
+
 // src/config.ts
-import { readFileSync as readFileSync2, existsSync as existsSync2 } from "fs";
+import { readFileSync as readFileSync2, existsSync as existsSync2, statSync as statSync2 } from "fs";
 import { homedir as homedir2 } from "os";
-import { join as join2 } from "path";
+import { dirname as dirname2, join as join2 } from "path";
 
 // ../shared/src/graph-context.ts
 var GRAPH_CONTEXT_TAG = "graphrag";
@@ -828,6 +831,18 @@ function isRecallTraceRecord(value) {
   return isNonNegativeFinite(record.duration_ms) && typeof record.outcome === "string" && TRACE_OUTCOMES.has(record.outcome) && (typeof record.failure_reason === "string" || record.failure_reason === null) && Array.isArray(record.returned_memories) && Array.isArray(record.returned_knowledge) && Boolean(selection) && Array.isArray(selection?.selected) && Array.isArray(selection?.excluded) && isNonNegativeFinite(selection?.token_estimate) && typeof record.recall_context === "string";
 }
 
+// src/distribution-capabilities.ts
+var PUBLIC_DISTRIBUTION = {
+  id: "public",
+  packageName: "@aliyunrds/ctxdb",
+  packageRegistry: null,
+  capabilities: {
+    interactiveLogin: false,
+    managedCredentials: false
+  }
+};
+var DISTRIBUTION_MANIFEST = typeof define_CTXDB_DISTRIBUTION_MANIFEST_default === "undefined" ? PUBLIC_DISTRIBUTION : define_CTXDB_DISTRIBUTION_MANIFEST_default;
+
 // src/config.ts
 var DEFAULT_BASE_URL = "https://context-database.aliyuncs.com";
 var DEFAULT_USER_ID = "default";
@@ -893,6 +908,40 @@ function applyDebugPolicy(cfg) {
   cfg.debugReason = policy.debugReason;
   return cfg;
 }
+function managedCredential(path) {
+  if (!existsSync2(path)) return null;
+  if (process.platform !== "win32" && (statSync2(path).mode & 63) !== 0) {
+    throw new Error(`credentials: ${path} must be owner-only (run chmod 600)`);
+  }
+  const raw = JSON.parse(readFileSync2(path, "utf8"));
+  if (raw.version !== 1 || !raw.records || typeof raw.records !== "object") {
+    throw new Error("credentials: unsupported credentials.json schema");
+  }
+  const unknownKeys = Object.keys(raw.records).filter(
+    (key) => key !== "contextdb/active"
+  );
+  if (unknownKeys.length > 0) {
+    throw new Error(`credentials: unsupported record key ${unknownKeys[0]}`);
+  }
+  const record = raw.records["contextdb/active"];
+  if (!record) return null;
+  if (record.kind !== "api-key" || typeof record.payload?.api_key !== "string" || !record.payload.api_key || typeof record.payload?.base_url !== "string" || !record.payload.base_url) {
+    throw new Error("credentials: invalid contextdb/active record");
+  }
+  let baseUrl;
+  try {
+    baseUrl = new URL(record.payload.base_url);
+  } catch {
+    throw new Error("credentials: invalid contextdb/active base_url");
+  }
+  if (!["https:", "http:"].includes(baseUrl.protocol) || baseUrl.username || baseUrl.password || baseUrl.search || baseUrl.hash) {
+    throw new Error("credentials: invalid contextdb/active base_url");
+  }
+  return {
+    apiKey: record.payload.api_key,
+    baseUrl: baseUrl.toString().replace(/\/$/, "")
+  };
+}
 function loadOpencodeConfig(options = {}) {
   const env = options.env ?? process.env;
   const path = options.path ?? defaultPath(env);
@@ -918,6 +967,13 @@ function loadOpencodeConfig(options = {}) {
     debugReason: null,
     kbCatalogInjection: coerceKbCatalogInjection(section.kb_catalog_injection)
   };
+  const managed = DISTRIBUTION_MANIFEST.capabilities.managedCredentials && options.managedCredentials !== false ? managedCredential(
+    options.credentialsPath ?? join2(dirname2(path), "credentials.json")
+  ) : null;
+  if (managed) {
+    cfg.apiKey = managed.apiKey;
+    cfg.baseUrl = managed.baseUrl;
+  }
   return applyEnv(cfg, env);
 }
 function isConfigured(cfg) {

package/dist/workers/version-check.js

@@ -4,7 +4,9 @@ import {
   recordVersionCheckFailure,
   recordVersionCheckSuccess,
   releaseVersionCheckLock
-} from "../chunk-Z6OHSEF2.js";
+} from "../chunk-ULAWTBBC.js";
+import "../chunk-R67JELM7.js";
+import "../chunk-VIG4SYLU.js";
 
 // src/workers/version-check.ts
 import { fileURLToPath } from "url";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aliyunrds/ctxdb",
-  "version": "1.0.7",
+  "version": "1.0.8-beta.0",
   "type": "module",
   "description": "Unified access layer for RDS ContextDatabase: `ctxdb` CLI (memory + KB ops), one-shot `setup --agent <qoder|qoderwork|codex|claude|opencode|hermes>` installer, per-agent config, hooks/plugins, and SKILL.md.",
   "license": "Apache-2.0",
@@ -44,6 +44,10 @@
   },
   "scripts": {
     "build": "tsup && pnpm --dir ../opencode build && mkdir -p dist/setup dist/opencode && cp ../opencode/dist/index.js dist/opencode/index.js && cp -r src/setup/skills dist/setup/ && chmod +x dist/hooks/*.js dist/cli/main.js",
+    "build:internal": "tsup --config tsup.internal.config.ts && pnpm --dir ../opencode build:internal && mkdir -p dist-internal/setup dist-internal/opencode && cp ../opencode/dist-internal/index.js dist-internal/opencode/index.js && cp -r src/setup/skills dist-internal/setup/ && chmod +x dist-internal/hooks/*.js dist-internal/cli/internal-main.js && node scripts/prepare-internal-package.mjs",
+    "test:distributions": "node scripts/smoke-distribution-builds.mjs",
+    "test:e2e:distributions:prepared": "node scripts/prepare-distribution-e2e.mjs && vitest run --config vitest.e2e.config.ts",
+    "test:e2e:distributions": "pnpm --dir ../shared build && pnpm build && pnpm build:internal && pnpm test:e2e:distributions:prepared",
     "test": "vitest run"
   }
 }