@bonginkan/maria 4.2.10 → 4.2.13

package/dist/cli.cjs

@@ -876,6 +876,7 @@ var init_AuthenticationManager = __esm({
           this.clientId = config2.clientId;
           this.initialized = true;
         } catch (error2) {
+          console.warn("Auth config initialization failed, using fallbacks:", error2);
           this.authBase = this.getAuthBaseUrl();
           this.apiBase = this.getApiBaseUrl();
           this.clientId = process.env.MARIA_CLIENT_ID || "maria-cli";
@@ -922,7 +923,8 @@ var init_AuthenticationManager = __esm({
             return await this.refreshToken();
           }
           return true;
-        } catch {
+        } catch (error2) {
+          console.error("isAuthenticated failed:", error2);
           return false;
         }
       }
@@ -986,6 +988,7 @@ var init_AuthenticationManager = __esm({
           if (error2 instanceof AuthenticationRequiredError || error2 instanceof QuotaExceededError) {
             throw error2;
           }
+          console.error("getCurrentUser failed:", error2);
           throw new Error(ERROR_MESSAGES.NETWORK_ERROR);
         }
       }
@@ -1003,12 +1006,17 @@ var init_AuthenticationManager = __esm({
             return await this.loginWithLocalMock();
           }
           let tokens;
-          if (options.device) {
+          const forceDevice = options.device || process.env.MARIA_AUTH_DEVICE_FLOW === "true" || !this.canLaunchBrowser();
+          if (forceDevice) {
+            if (!options.device) {
+              console.warn("PKCE is unavailable in this environment; using device flow.");
+            }
             tokens = await this.loginWithDeviceFlow();
           } else {
             try {
               tokens = await this.loginWithPKCEFlow();
             } catch (error2) {
+              console.error("PKCE flow error:", error2);
               if (error2.message?.includes("ECONNREFUSED") || error2.message?.includes("fetch failed")) {
                 console.error("\n\u274C Authentication service is currently unavailable");
                 console.error("Please try one of the following:");
@@ -1030,6 +1038,7 @@ var init_AuthenticationManager = __esm({
           const user = await this.getCurrentUser();
           return { success: true, user, tokens };
         } catch (error2) {
+          console.error("Login failed:", error2);
           return {
             success: false,
             error: error2.message || "Login failed"
@@ -1121,7 +1130,8 @@ var init_AuthenticationManager = __esm({
           };
           await this.tokenStorage.save(updatedTokens);
           return true;
-        } catch {
+        } catch (error2) {
+          console.error("Token refresh failed:", error2);
           return false;
         }
       }
@@ -1163,6 +1173,7 @@ var init_AuthenticationManager = __esm({
             await open__default.default(authUrl);
           } catch (error2) {
             server.close();
+            console.error("Failed to open browser for authentication:", error2);
             throw new Error("Failed to open browser");
           }
           const authCode = await this.waitForCallback(server, pkceParams.state);
@@ -1186,57 +1197,62 @@ var init_AuthenticationManager = __esm({
        * Login with device flow (fallback)
        */
       async loginWithDeviceFlow() {
-        const response2 = await fetch(`${this.authBase}/oauth/device/start`, {
-          method: "POST",
-          headers: { "Content-Type": "application/json" },
-          body: JSON.stringify({
-            client_id: this.clientId,
-            scope: "user:profile user:inference org:create_api_key"
-          })
-        });
-        if (!response2.ok) {
-          throw new Error(`Device flow start failed: ${response2.statusText}`);
-        }
-        const raw = await response2.json();
-        const deviceResponse = {
-          verificationUri: raw.verification_uri || raw.verificationUri || "https://auth.maria-code.ai/device",
-          userCode: raw.user_code || raw.userCode || "",
-          deviceCode: raw.device_code || raw.deviceCode || "",
-          interval: (typeof raw.interval === "number" ? raw.interval : parseInt(String(raw.interval || 5), 10)) || 5,
-          expiresIn: (typeof raw.expires_in === "number" ? raw.expires_in : parseInt(String(raw.expires_in || raw.expiresIn || 600), 10)) || 600
-        };
-        const verificationUrl = deviceResponse.verificationUri;
-        console.log(`\u{1F510} Device Login`);
-        console.log(`Open: ${verificationUrl}`);
-        console.log(`Code: ${deviceResponse.userCode}`);
-        const deadline = Date.now() + deviceResponse.expiresIn * 1e3;
-        const intervalMs = Math.max(1500, deviceResponse.interval * 1e3);
-        while (Date.now() < deadline) {
-          await this.sleep(intervalMs);
-          const finishResponse = await fetch(`${this.authBase}/oauth/device/finish`, {
+        try {
+          const response2 = await fetch(`${this.authBase}/oauth/device/start`, {
             method: "POST",
             headers: { "Content-Type": "application/json" },
             body: JSON.stringify({
               client_id: this.clientId,
-              device_code: deviceResponse.deviceCode
+              scope: "user:profile user:inference org:create_api_key"
             })
           });
-          if (finishResponse.status === 428 || finishResponse.status === 400) {
-            continue;
-          }
-          if (!finishResponse.ok) {
-            throw new Error(`Device flow failed: ${finishResponse.statusText}`);
-          }
-          const tokens = await finishResponse.json();
-          return {
-            idToken: tokens.id_token || tokens.access_token || "",
-            accessToken: tokens.access_token || tokens.id_token || "",
-            refreshToken: tokens.refresh_token || "",
-            customToken: tokens.custom_token,
-            expiresAt: Date.now() + (tokens.expires_in ? Number(tokens.expires_in) : 600) * 1e3
+          if (!response2.ok) {
+            throw new Error(`Device flow start failed: ${response2.statusText}`);
+          }
+          const raw = await response2.json();
+          const deviceResponse = {
+            verificationUri: raw.verification_uri || raw.verificationUri || "https://auth.maria-code.ai/device",
+            userCode: raw.user_code || raw.userCode || "",
+            deviceCode: raw.device_code || raw.deviceCode || "",
+            interval: (typeof raw.interval === "number" ? raw.interval : parseInt(String(raw.interval || 5), 10)) || 5,
+            expiresIn: (typeof raw.expires_in === "number" ? raw.expires_in : parseInt(String(raw.expires_in || raw.expiresIn || 600), 10)) || 600
           };
+          const verificationUrl = deviceResponse.verificationUri || `${this.authBase}/device`;
+          console.log(`\u{1F510} Device Login`);
+          console.log(`Open: ${verificationUrl}`);
+          console.log(`Code: ${deviceResponse.userCode}`);
+          const deadline = Date.now() + deviceResponse.expiresIn * 1e3;
+          const intervalMs = Math.max(1500, deviceResponse.interval * 1e3);
+          while (Date.now() < deadline) {
+            await this.sleep(intervalMs);
+            const finishResponse = await fetch(`${this.authBase}/oauth/device/finish`, {
+              method: "POST",
+              headers: { "Content-Type": "application/json" },
+              body: JSON.stringify({
+                client_id: this.clientId,
+                device_code: deviceResponse.deviceCode
+              })
+            });
+            if (finishResponse.status === 428 || finishResponse.status === 400) {
+              continue;
+            }
+            if (!finishResponse.ok) {
+              throw new Error(`Device flow failed: ${finishResponse.statusText}`);
+            }
+            const tokens = await finishResponse.json();
+            return {
+              idToken: tokens.id_token || tokens.access_token || "",
+              accessToken: tokens.access_token || tokens.id_token || "",
+              refreshToken: tokens.refresh_token || "",
+              customToken: tokens.custom_token,
+              expiresAt: Date.now() + (tokens.expires_in ? Number(tokens.expires_in) : 600) * 1e3
+            };
+          }
+          throw new Error(ERROR_MESSAGES.LOGIN_TIMEOUT);
+        } catch (error2) {
+          console.error("Device flow error:", error2);
+          throw error2;
         }
-        throw new Error(ERROR_MESSAGES.LOGIN_TIMEOUT);
       }
       /**
        * Generate PKCE parameters
@@ -1275,8 +1291,10 @@ var init_AuthenticationManager = __esm({
           } catch (error2) {
             lastError = error2;
             if (error2.code !== "EADDRINUSE") {
+              console.error("Failed to start callback server:", error2);
               throw error2;
             }
+            console.warn("Callback server port in use, retrying...", error2?.message || error2);
           }
         }
         throw lastError || new Error("Failed to find available port");
@@ -1308,6 +1326,7 @@ var init_AuthenticationManager = __esm({
         return new Promise((resolve4, reject) => {
           const timeout = setTimeout(() => {
             server.close();
+            console.error("OAuth callback timed out");
             reject(new Error(ERROR_MESSAGES.LOGIN_TIMEOUT));
           }, 5 * 60 * 1e3);
           server.on("request", (req, res) => {
@@ -1320,6 +1339,7 @@ var init_AuthenticationManager = __esm({
                 res.writeHead(400, { "Content-Type": "text/html" });
                 res.end(this.getErrorPage(error2));
                 clearTimeout(timeout);
+                console.error("OAuth callback returned error:", error2);
                 reject(new Error(error2));
                 return;
               }
@@ -1327,6 +1347,7 @@ var init_AuthenticationManager = __esm({
                 res.writeHead(400, { "Content-Type": "text/html" });
                 res.end(this.getErrorPage("Invalid state parameter"));
                 clearTimeout(timeout);
+                console.error("OAuth callback invalid state", { received: state, expected: expectedState });
                 reject(new Error(ERROR_MESSAGES.INVALID_STATE));
                 return;
               }
@@ -1344,28 +1365,39 @@ var init_AuthenticationManager = __esm({
        * Exchange authorization code for tokens
        */
       async exchangeCodeForTokens(code, codeVerifier, redirectUri) {
-        const response2 = await fetch(`${this.authBase}/oauth/token`, {
-          method: "POST",
-          headers: { "Content-Type": "application/json" },
-          body: JSON.stringify({
-            grant_type: "authorization_code",
-            client_id: this.clientId,
-            code,
-            code_verifier: codeVerifier,
-            redirect_uri: redirectUri
-          })
-        });
-        if (!response2.ok) {
-          throw new Error(`Token exchange failed: ${response2.statusText}`);
+        try {
+          const response2 = await fetch(`${this.authBase}/oauth/token`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({
+              grant_type: "authorization_code",
+              client_id: this.clientId,
+              code,
+              code_verifier: codeVerifier,
+              redirect_uri: redirectUri
+            })
+          });
+          if (!response2.ok) {
+            let bodyText = "";
+            try {
+              bodyText = await response2.text();
+            } catch {
+            }
+            console.error("Token exchange failed:", response2.status, response2.statusText, bodyText);
+            throw new Error(`Token exchange failed: ${response2.status} ${response2.statusText}`);
+          }
+          const tokens = await response2.json();
+          return {
+            idToken: tokens.id_token,
+            accessToken: tokens.access_token,
+            refreshToken: tokens.refresh_token,
+            customToken: tokens.custom_token,
+            expiresAt: Date.now() + tokens.expires_in * 1e3
+          };
+        } catch (error2) {
+          console.error("Token exchange request error:", error2);
+          throw error2;
         }
-        const tokens = await response2.json();
-        return {
-          idToken: tokens.id_token,
-          accessToken: tokens.access_token,
-          refreshToken: tokens.refresh_token,
-          customToken: tokens.custom_token,
-          expiresAt: Date.now() + tokens.expires_in * 1e3
-        };
       }
       /**
        * Revoke tokens on server
@@ -31627,8 +31659,8 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@bonginkan/maria",
-      version: "4.2.10",
-      description: "\u{1F680} MARIA v4.2.10 - Enterprise AI Development Platform with 100% Command Availability. Features 74 production-ready commands with comprehensive fallback implementation, local LLM support, and zero external dependencies. Includes natural language coding, AI safety evaluation, intelligent evolution system, episodic memory with PII masking, and real-time monitoring dashboard. Built with TypeScript AST-powered code generation, OAuth2.0 + PKCE authentication, quantum-resistant cryptography, and enterprise-grade performance.",
+      version: "4.2.13",
+      description: "\u{1F680} MARIA v4.2.13 - Enterprise AI Development Platform with 100% Command Availability. Features 74 production-ready commands with comprehensive fallback implementation, local LLM support, and zero external dependencies. Includes natural language coding, AI safety evaluation, intelligent evolution system, episodic memory with PII masking, and real-time monitoring dashboard. Built with TypeScript AST-powered code generation, OAuth2.0 + PKCE authentication, quantum-resistant cryptography, and enterprise-grade performance.",
       keywords: [
         "ai",
         "cli",