@bike4mind/cli 3.4.0 → 4.0.0

package/dist/ApiClient-_JrM_xWw.mjs

@@ -0,0 +1,133 @@
+#!/usr/bin/env node
+import { b as logger, g as DeviceFlowClient, h as AuthenticatedApiClient, t as ConfigStore } from "./ConfigStore-BwqsQ0U9.mjs";
+import { t as version } from "./package-CQaam4Dq.mjs";
+import { isAxiosError } from "axios";
+import { Readable } from "node:stream";
+//#region src/auth/OAuthClient.ts
+/**
+* The CLI's RFC 8628 `client_id`; the desktop app registers under its own. Typed against the
+* server allowlist so dropping this id there fails this build rather than this client's logins
+* (see OAUTH_DEVICE_CLIENT_IDS).
+*/
+const CLI_OAUTH_CLIENT_ID = "b4m-cli";
+/**
+* The shared device-flow client, pinned to the CLI's registration.
+*/
+var OAuthClient = class extends DeviceFlowClient {
+	constructor(baseURL = "http://localhost:3000") {
+		super({
+			baseUrl: baseURL,
+			clientId: CLI_OAUTH_CLIENT_ID
+		});
+	}
+};
+//#endregion
+//#region src/auth/providerKeyFailure.ts
+const PROVIDER_KEY_ERROR_CODES = /* @__PURE__ */ new Set(["provider_not_configured", "provider_rejected"]);
+/**
+* A 401 whose body names a missing or rejected AI-provider key (e.g. /api/ai/tts). The
+* Bike4Mind credential was accepted, so refreshing or re-authenticating cannot fix it.
+* Shared by the ApiClient refresh interceptor and mapApiError in mcp/b4mApiClient.ts.
+*/
+function isProviderKeyFailure(data) {
+	const body = decodeBinaryBody(data);
+	if (!body || typeof body !== "object") return false;
+	const { errorCode } = body;
+	return typeof errorCode === "string" && PROVIDER_KEY_ERROR_CODES.has(errorCode);
+}
+/**
+* An arraybuffer-typed request (every @bike4mind/sdk call, through ApiClient.fetch) gets its
+* error body as raw bytes, and the refresh interceptor sees it before any caller can decode it.
+*/
+function decodeBinaryBody(data) {
+	const bytes = data instanceof ArrayBuffer ? Buffer.from(data) : ArrayBuffer.isView(data) ? Buffer.from(data.buffer, data.byteOffset, data.byteLength) : void 0;
+	if (!bytes) return data;
+	try {
+		return JSON.parse(bytes.toString("utf8"));
+	} catch {
+		return;
+	}
+}
+//#endregion
+//#region src/auth/ApiClient.ts
+const USER_AGENT = `b4m-cli/${version}`;
+/**
+* Per-request timeout. Generous by design: a waited chat (POST /api/chat with wait:true)
+* runs a full server-side quest, so the bound only exists to stop a hung backend from
+* wedging a caller forever, not to cap a normal long quest. Override with B4M_API_TIMEOUT_MS
+* (0 disables the timeout entirely).
+*/
+const DEFAULT_API_TIMEOUT_MS = 6e5;
+function resolveTimeoutMs() {
+	const raw = process.env.B4M_API_TIMEOUT_MS;
+	if (raw === void 0 || raw.trim() === "") return DEFAULT_API_TIMEOUT_MS;
+	const parsed = Number(raw);
+	return Number.isFinite(parsed) && parsed >= 0 ? parsed : DEFAULT_API_TIMEOUT_MS;
+}
+/**
+* The shared authenticated client, wired to the CLI's storage, logger and branding.
+*/
+var ApiClient = class extends AuthenticatedApiClient {
+	/**
+	* @param apiKey - When set, requests authenticate with this instance API key via
+	*   the `x-api-key` header and the OAuth-JWT path (Bearer injection + refresh-on-401)
+	*   is bypassed entirely. Omit to keep the default stored-JWT behavior unchanged.
+	*/
+	constructor(baseURL = "http://localhost:3000", configStore, apiKey) {
+		super({
+			baseUrl: baseURL,
+			tokenStore: configStore || new ConfigStore(),
+			oauthClient: new OAuthClient(baseURL),
+			logger,
+			apiKey,
+			timeoutMs: resolveTimeoutMs(),
+			headers: {
+				"User-Agent": USER_AGENT,
+				"X-B4M-Client": USER_AGENT
+			},
+			reauthMessages: {
+				refreshFailed: "Authentication expired. Please run `b4m login` again.",
+				stillUnauthorized: "Authentication failed. Please run /login to authenticate.",
+				notLoggedIn: "Authentication failed: not logged in. Please run `b4m login` to authenticate."
+			},
+			isPassThrough401: isProviderKeyFailure
+		});
+		this.fetch = async (input, init = {}) => {
+			const headers = Object.fromEntries(new Headers(init.headers));
+			try {
+				return toFetchResponse(await this.getAxiosInstance().request({
+					url: input instanceof Request ? input.url : String(input),
+					method: init.method ?? "GET",
+					headers,
+					data: init.body ?? void 0,
+					signal: init.signal ?? void 0,
+					responseType: /text\/event-stream/i.test(headers.accept ?? "") ? "stream" : "arraybuffer",
+					...init.redirect && init.redirect !== "follow" ? { maxRedirects: 0 } : {}
+				}));
+			} catch (error) {
+				if (isAxiosError(error) && error.response) return toFetchResponse(error.response);
+				throw error;
+			}
+		};
+	}
+	get baseURL() {
+		return this.getAxiosInstance().defaults.baseURL ?? "";
+	}
+};
+function toFetchResponse(response) {
+	const headers = new Headers();
+	for (const [name, value] of Object.entries(response.headers)) if (value !== void 0 && value !== null) headers.set(name, Array.isArray(value) ? value.join(", ") : String(value));
+	const body = [
+		101,
+		204,
+		205,
+		304
+	].includes(response.status) ? null : response.data instanceof Readable ? Readable.toWeb(response.data) : response.data;
+	return new Response(body, {
+		status: response.status,
+		statusText: response.statusText,
+		headers
+	});
+}
+//#endregion
+export { isProviderKeyFailure as n, OAuthClient as r, ApiClient as t };