@getdial/cli 0.33.2 → 0.33.4

package/dist/lib/api.js

@@ -1,6 +1,7 @@
 import { request, fetch as undiciFetch, FormData as UndiciFormData, setGlobalDispatcher, EnvHttpProxyAgent, } from "undici";
 import { logger } from "./log.js";
 import { VERSION } from "./version.js";
+import { refParamsHeader } from "./ref-params.js";
 // Route this package's undici requests through HTTP(S)_PROXY when one is set.
 // The `undici` npm package keeps its OWN global dispatcher, which — unlike
 // Node's built-in fetch (wired by NODE_USE_ENV_PROXY) — ignores the proxy env
@@ -24,6 +25,15 @@ const USER_AGENT = `@getdial/cli/${VERSION}`;
 export function baseUrl() {
     return process.env.DIAL_API_URL ?? DEFAULT_BASE;
 }
+// Attach the attribution ref params (base64 of the install-time ref-params.txt)
+// so the server can tie this machine's requests to how the user originally
+// arrived. No-op when the user never went through an attributed install.
+export function applyRefParamsHeader(headers) {
+    const ref = refParamsHeader();
+    if (ref)
+        headers["x-dial-ref-params"] = ref;
+    return headers;
+}
 export async function apiPost(path, body, apiKey, extraHeaders) {
     return apiRequest("POST", path, body, apiKey, extraHeaders);
 }
@@ -57,11 +67,11 @@ function toResult(statusCode, text) {
 }
 async function apiRequest(method, path, body, apiKey, extraHeaders) {
     const url = `${baseUrl()}${path}`;
-    const headers = {
+    const headers = applyRefParamsHeader({
         "content-type": "application/json",
         "user-agent": USER_AGENT,
         ...(extraHeaders ?? {}),
-    };
+    });
     if (apiKey)
         headers.authorization = `Bearer ${apiKey}`;
     try {
@@ -79,7 +89,7 @@ async function apiRequest(method, path, body, apiKey, extraHeaders) {
 /** POST a multipart/form-data body (file uploads). fetch sets the boundary header itself. */
 export async function apiPostMultipart(path, form, apiKey) {
     const url = `${baseUrl()}${path}`;
-    const headers = {};
+    const headers = applyRefParamsHeader({ "user-agent": USER_AGENT });
     if (apiKey)
         headers.authorization = `Bearer ${apiKey}`;
     try {

package/dist/lib/ref-params.js

@@ -0,0 +1,37 @@
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import { paths } from "./paths.js";
+import { logger } from "./log.js";
+// Reads the attribution ref params the install script persisted to
+// ${dataDir}/ref-params.txt and returns them base64-encoded for the
+// X-Dial-Ref-Params header. The CLI forwards the file verbatim — no parsing, no
+// allowlist here; the server decodes + validates. Cached per process (the file is
+// write-once and stable for the CLI's lifetime).
+let cache;
+function compute() {
+    const file = join(paths().dataDir, "ref-params.txt");
+    try {
+        const text = readFileSync(file, "utf8");
+        if (!text.trim())
+            return null;
+        return Buffer.from(text, "utf8").toString("base64");
+    }
+    catch (err) {
+        // No file is the normal case (the user never went through an attributed
+        // install) — not an error worth logging. Anything else is unexpected.
+        if (err?.code === "ENOENT")
+            return null;
+        logger.warn({ err }, "failed to read ref-params.txt");
+        return null;
+    }
+}
+/** Base64 of ref-params.txt for the X-Dial-Ref-Params header, or null if absent. */
+export function refParamsHeader() {
+    if (!cache)
+        cache = { value: compute() };
+    return cache.value;
+}
+/** Test-only: clear the per-process cache. */
+export function resetRefParamsCache() {
+    cache = undefined;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getdial/cli",
-  "version": "0.33.2",
+  "version": "0.33.4",
   "description": "Dial CLI — install, sign up, and run the local listen service.",
   "license": "MIT",
   "repository": {