@corvio/cli 0.1.0-beta.2 → 0.1.0-beta.3

package/README.md

@@ -3,7 +3,7 @@
 Official CLI for a user's Corvio Workspace. It supports an existing `CORVIO_API_KEY` and a browser device-link login.
 
 ```bash
-npm install --global @corvio/cli
+npm install --global @corvio/cli@beta
 export CORVIO_API_KEY='cvk_...'
 corvio auth status
 corvio ask --prompt 'Summarize recurring launch risks' --json

package/dist/cli.js

@@ -21,7 +21,7 @@ import {
   writeTextFile,
 } from "./core.js";
 
-const VERSION = "0.1.0-beta.2";
+const VERSION = "0.1.0-beta.3";
 const DEFAULT_API_BASE = "https://api.corvio.ai/v1";
 const DEFAULT_APP_BASE = "https://corvio.ai";
 const USER_AGENT = `corvio-cli/${VERSION}`;

package/dist/core.js

@@ -163,6 +163,51 @@ export class ApiClient {
     }
     return payload;
   }
+
+  async requestBytes(path, { query, headers = {}, auth = true } = {}) {
+    const url = new URL(`${this.baseUrl}${path.startsWith("/") ? path : `/${path}`}`);
+    for (const [key, value] of Object.entries(query || {})) {
+      if (value !== undefined && value !== null && value !== "") url.searchParams.set(key, String(value));
+    }
+    const requestHeaders = {
+      accept: "application/zip, application/octet-stream",
+      "user-agent": this.userAgent,
+      ...headers,
+    };
+    if (auth) {
+      if (!this.credential) {
+        throw new CliError("Corvio authentication is required.", { code: "auth_required", exitCode: EXIT.AUTH });
+      }
+      requestHeaders.authorization = `Bearer ${this.credential}`;
+    }
+    let response;
+    try {
+      response = await this.fetchImpl(url, { method: "GET", headers: requestHeaders });
+    } catch (cause) {
+      throw new CliError(`Unable to reach Corvio: ${cause instanceof Error ? cause.message : String(cause)}`, {
+        code: "network_error",
+        exitCode: EXIT.REMOTE,
+      });
+    }
+    const bytes = new Uint8Array(await response.arrayBuffer());
+    if (!response.ok) {
+      const text = new TextDecoder().decode(bytes);
+      let payload = {};
+      try {
+        payload = JSON.parse(text);
+      } catch {
+        payload = { message: text.slice(0, 500) };
+      }
+      const envelope = payload?.error || payload?.detail || payload || {};
+      throw new CliError(String(envelope.message || envelope.code || `Corvio request failed (${response.status}).`), {
+        code: String(envelope.code || `http_${response.status}`),
+        status: response.status,
+        exitCode: exitCodeForStatus(response.status),
+        details: envelope.details || null,
+      });
+    }
+    return bytes;
+  }
 }
 
 function configRoot(env = process.env) {
@@ -175,6 +220,10 @@ export function workspaceCredentialPath(env = process.env) {
   return join(configRoot(env), "credentials.json");
 }
 
+export function adminCredentialPath(env = process.env) {
+  return join(configRoot(env), "admin-credentials.json");
+}
+
 export async function readWorkspaceCredential(env = process.env) {
   const environmentKey = String(env.CORVIO_API_KEY || "").trim();
   if (environmentKey) {
@@ -241,16 +290,66 @@ export async function clearWorkspaceCredential(env = process.env) {
   return path;
 }
 
-export function readAdminCredential(env = process.env) {
+export async function readAdminCredential(env = process.env) {
   const key = String(env.CORVIO_ADMIN_API_KEY || "").trim();
-  if (!key) return null;
-  if (!key.startsWith("cva_")) {
-    throw new CliError("CORVIO_ADMIN_API_KEY must be a platform administrator cva_ key.", {
-      code: "invalid_admin_key",
+  if (key) {
+    if (!key.startsWith("cva_")) {
+      throw new CliError("CORVIO_ADMIN_API_KEY must be a platform administrator cva_ key.", {
+        code: "invalid_admin_key",
+        exitCode: EXIT.AUTH,
+      });
+    }
+    return { key, source: "environment", metadata: null };
+  }
+  const path = adminCredentialPath(env);
+  let parsed;
+  try {
+    parsed = JSON.parse(await readFile(path, "utf8"));
+  } catch (cause) {
+    if (cause?.code === "ENOENT") return null;
+    throw new CliError("Stored Corvio administrator credentials are unreadable.", {
+      code: "admin_credential_store_invalid",
+      exitCode: EXIT.AUTH,
+    });
+  }
+  const storedKey = String(parsed.api_key || "").trim();
+  if (!storedKey.startsWith("cva_")) {
+    throw new CliError("Stored Corvio administrator credentials are invalid; run `corvio-admin auth login` again.", {
+      code: "admin_credential_store_invalid",
       exitCode: EXIT.AUTH,
     });
   }
-  return { key, source: "environment" };
+  return { key: storedKey, source: "device_link", metadata: parsed };
+}
+
+export async function storeAdminCredential(payload, env = process.env) {
+  const path = adminCredentialPath(env);
+  const root = dirname(path);
+  await mkdir(root, { recursive: true, mode: 0o700 });
+  await chmod(root, 0o700).catch(() => {});
+  const document = {
+    version: 1,
+    api_key: payload.secret,
+    key_id: payload.key_id,
+    audience: payload.audience,
+    api_base: payload.api_base,
+    scopes: payload.scopes || [],
+    expires_at: payload.expires_at,
+    created_at: payload.created_at || new Date().toISOString(),
+    source: "device_link",
+  };
+  const temporary = `${path}.${randomUUID()}.tmp`;
+  await writeFile(temporary, `${JSON.stringify(document, null, 2)}\n`, { mode: 0o600, flag: "wx" });
+  await chmod(temporary, 0o600);
+  await rename(temporary, path);
+  await chmod(path, 0o600);
+  return { path };
+}
+
+export async function clearAdminCredential(env = process.env) {
+  const path = adminCredentialPath(env);
+  await rm(path, { force: true });
+  return path;
 }
 
 export function writeResult(value, { json = false, stdout = process.stdout } = {}) {
@@ -313,6 +412,13 @@ export async function writeTextFile(path, content) {
   return target;
 }
 
+export async function writeBinaryFile(path, content) {
+  const target = resolve(String(path));
+  await mkdir(dirname(target), { recursive: true });
+  await writeFile(target, content);
+  return target;
+}
+
 export function requireConfirmation(options, action) {
   if (!options.yes) {
     throw new CliError(`${action} requires --yes.`, { code: "confirmation_required" });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@corvio/cli",
-  "version": "0.1.0-beta.2",
+  "version": "0.1.0-beta.3",
   "description": "Official Corvio Workspace CLI for questions, knowledge search, documents, and Agent workflows.",
   "type": "module",
   "bin": {