@dptech-corp/bohr-cli 2.6.28 → 2.6.31

package/CHANGELOG.md

@@ -15,6 +15,32 @@
 
 ## [Unreleased]
 
+## [2.6.31] - 2026-08-18
+
+### Added
+
+- **Vouch 登录支持双 audience（wenyon-svc + trisol-svc）**：device flow 和 token refresh 均请求双 audience，一次登录 wenyon 和 trisol 都可验签。存量单 audience 会话不受影响，升级后重新登录即可获得双 aud token。`BOHR_VOUCH_AUDIENCE` 支持逗号分隔覆盖。
+
+### Fixed
+
+- **`bohr file download` 现在输出信封，进度提示不再污染 stdout**：此前该命令无论成功或失败都只打印纯文本，`-o json` 也一样，机读调用方连成功都无法解析；进度行 `Downloading ... to ...` 还固定打在 stdout。现在成功返回含 `remote_path`、`dest_path`、`space`、`project_id`、`size` 的信封，上游非 2xx 返回携带上游 HTTP 状态的错误信封，进度提示仅在 human 输出下打到 stderr。上游状态原样透传，不在 CLI 侧把 400 改写成 not-found。
+- **`bohr job delete` 与 `bohr kb document list` 的失败路径补出信封**：此前二者失败时 stdout 为空，错误只以自由文本出现在 stderr，机读调用方拿不到可判别的 `error.code`。现在 `job delete` 在非 human 输出下透出上游失败信封（上游错误码原样保留），`kb document list` 对不存在的知识库返回 `RESOURCE_NOT_FOUND`、`http=404`、退出码 3 并给出 `bohr kb list` 指引。`job delete` 同一错误此前会重复输出两次，现已消除。
+- **`bohr project get` 传不存在的项目 ID 不再报成功**：该命令由项目列表接口按 ID 过滤实现，此前查不到项目时会返回 `ok:true` 与退出码 0，只是 `data.items` 为空，调用方无法用退出码或 `ok` 区分「项目不存在」与「查到了」。现在返回 `error.code=RESOURCE_NOT_FOUND`、`error.http=404`、退出码 3，与 `file stat`、`sandbox get`、`batchjob describe` 等命令的 not-found 形态一致，并给出 `bohr project list` 的指引。项目存在时的返回结构不变。
+
+## [2.6.30] - 2026-08-18
+
+### Added
+
+- **npm postinstall 自动下载 trisol 外部版**：`npm install -g @dptech-corp/bohr-cli` 后自动拉取 `?variant=bohrium` 的 trisol（与 wenyon 一致），无需手动 `bohr extension install trisol`；用 `BOHR_TRISOL_SERVER` / `BOHR_TRISOL_CHANNEL` 可指向非 prod 环境。
+- **`bohr trisol` 支持 `BOHR_TRISOL_API_URL` 指定 trisol 环境**：dev 构建设 `BOHR_TRISOL_API_URL=https://trisol-dev.dp.tech` 即连 dev；不设则用 trisol CLI 自身配置（prod 默认）。显式可逆，不焊死安装环境——迁移 prod 只需取消该变量。
+- **`bohr lkm parse` 异步 PDF 知识抽取**：支持 submit / query / result 子命令，通过 open-platform 调用 LKM 的论文解析服务。
+
+## [2.6.29] - 2026-08-18
+
+### Breaking
+
+- **`bohr tools install` 移至 `bohr extension install`**：安装 trisol/wenyon 等配套扩展 CLI 的命令归入扩展管理命令组（与 `extension add/list/info/remove/pin/verify` 并列），`bohr tools` 回归纯科学工具发现（list/search/info/domains/subdomains）。此前 `bohr tools install <tool>` 的调用请改为 `bohr extension install <tool>`，参数与行为不变（`--dry-run`/`--silent`/`--server`/`--channel` 及 `BOHR_TOOLS_SERVER` 环境变量照旧）。
+
 ## [2.6.28] - 2026-08-18
 
 ### Added

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dptech-corp/bohr-cli",
-  "version": "2.6.28",
+  "version": "2.6.31",
   "description": "CLI tool for Bohrium scientific computing platform",
   "bin": {
     "bohr": "run.js"
@@ -32,11 +32,11 @@
     "CHANGELOG.md"
   ],
   "optionalDependencies": {
-    "@dptech-corp/bohr-cli-darwin-arm64": "2.6.28",
-    "@dptech-corp/bohr-cli-darwin-amd64": "2.6.28",
-    "@dptech-corp/bohr-cli-linux-amd64": "2.6.28",
-    "@dptech-corp/bohr-cli-linux-arm64": "2.6.28",
-    "@dptech-corp/bohr-cli-windows-amd64": "2.6.28",
-    "@dptech-corp/bohr-cli-windows-arm64": "2.6.28"
+    "@dptech-corp/bohr-cli-darwin-arm64": "2.6.31",
+    "@dptech-corp/bohr-cli-darwin-amd64": "2.6.31",
+    "@dptech-corp/bohr-cli-linux-amd64": "2.6.31",
+    "@dptech-corp/bohr-cli-linux-arm64": "2.6.31",
+    "@dptech-corp/bohr-cli-windows-amd64": "2.6.31",
+    "@dptech-corp/bohr-cli-windows-arm64": "2.6.31"
   }
 }

package/postinstall.js

@@ -1,8 +1,9 @@
 #!/usr/bin/env node
 /**
- * postinstall: downloads wenyon-cli (external) for the current platform.
+ * postinstall: downloads wenyon-cli and the trisol external edition
+ * (variant=bohrium) for the current platform.
  * Runs after `npm install -g @dptech-corp/bohr-cli`.
- * Failure is non-fatal — bohr-cli works without wenyon, and `bohr tools install wenyon`
+ * Failure is non-fatal — bohr-cli works without them, and `bohr extension install <tool>`
  * can retry later.
  */
 const https = require("https");
@@ -15,6 +16,12 @@ const crypto = require("crypto");
 const WENYON_SERVER = "https://wenyon.dp.tech";
 const INSTALL_DIR = path.join(os.homedir(), ".bohr", "tools", "wenyon", "current");
 
+// trisol is installed from the trisol manifest protocol (trisol-manifest).
+// BOHR_TRISOL_SERVER / BOHR_TRISOL_CHANNEL let a dev build point at a non-prod
+// env (e.g. https://trisol-dev.dp.tech + channel dev).
+const TRISOL_SERVER = process.env.BOHR_TRISOL_SERVER || "https://trisol.dp.tech";
+const TRISOL_INSTALL_DIR = path.join(os.homedir(), ".bohr", "tools", "trisol", "current");
+
 function getPlatform() {
   const p = os.platform();
   const a = os.arch();
@@ -76,12 +83,83 @@ function downloadToFile(url, dest, timeoutMs = 300000) {
   });
 }
 
-async function main() {
+// installTrisol downloads the trisol external edition (variant=bohrium) via
+// the trisol manifest protocol: fetch manifest → pick channel → download
+// binary + sha256 sidecar → verify → install to ~/.bohr/tools/trisol/current.
+async function installTrisol() {
   const platform = getPlatform();
-  if (!platform) {
-    // Unsupported platform for wenyon — skip silently
+  if (!platform) return;
+  const [osName, archName] = platform.split("-");
+
+  let manifest;
+  try {
+    const buf = await get(`${TRISOL_SERVER}/api/v1/cli/manifest`);
+    manifest = JSON.parse(buf.toString());
+  } catch (e) {
+    console.error(`[postinstall] trisol: could not fetch manifest (${e.message}), skipping`);
     return;
   }
+  const channel = process.env.BOHR_TRISOL_CHANNEL || manifest.default_channel || "stable";
+  const ch = (manifest.channels || {})[channel];
+  const version = ch && ch.version;
+  if (!version) {
+    console.error(`[postinstall] trisol: channel "${channel}" has no version, skipping`);
+    return;
+  }
+
+  const base = `${TRISOL_SERVER}/api/v1/cli/download/${version}/${osName}/${archName}`;
+  const binaryURL = `${base}?variant=bohrium`;
+  const shaURL = `${base}.sha256?variant=bohrium`;
+  const ext = osName === "windows" ? ".exe" : "";
+  const destPath = path.join(TRISOL_INSTALL_DIR, `trisol${ext}`);
+
+  // Skip re-download when the installed binary already matches this version.
+  if (fs.existsSync(destPath)) {
+    try {
+      const { execFileSync } = require("child_process");
+      const out = execFileSync(destPath, ["version"], { encoding: "utf8", timeout: 5000 });
+      if (out.includes(version)) {
+        console.log(`[postinstall] trisol ${version} already installed`);
+        return;
+      }
+    } catch (_) {
+      // version check failed, proceed with install
+    }
+  }
+
+  let expectedHash;
+  try {
+    const buf = await get(shaURL);
+    expectedHash = buf.toString().trim().split(/\s+/)[0];
+  } catch (e) {
+    console.error(`[postinstall] trisol: could not fetch sha256 (${e.message}), skipping`);
+    return;
+  }
+
+  console.log(`[postinstall] Installing trisol ${version} (${platform}, variant=bohrium)...`);
+  fs.mkdirSync(TRISOL_INSTALL_DIR, { recursive: true });
+  const tmpPath = destPath + ".tmp";
+  try {
+    const actualHash = await downloadToFile(binaryURL, tmpPath);
+    if (expectedHash && actualHash !== expectedHash) {
+      fs.unlinkSync(tmpPath);
+      console.error(`[postinstall] trisol: SHA256 mismatch (expected ${expectedHash}, got ${actualHash}), skipping`);
+      return;
+    }
+    fs.chmodSync(tmpPath, 0o755);
+    fs.renameSync(tmpPath, destPath);
+    console.log(`[postinstall] trisol ${version} installed to ${destPath}`);
+  } catch (e) {
+    try { fs.unlinkSync(tmpPath); } catch (_) {}
+    console.error(`[postinstall] trisol: download failed (${e.message}), skipping`);
+  }
+}
+
+async function main() {
+  const platform = getPlatform();
+  if (platform) {
+    await installTrisol();
+  }
 
   const metaUrl = `${WENYON_SERVER}/cli/releases/latest/download?platform=${platform}&variant=external`;