@helixlife-ai/xiantao 0.1.7 → 0.1.8

package/README.md

@@ -44,10 +44,8 @@ For machine callers, use `xt tool exec`, keep `--json`, pass an explicit profile
 ### Auth
 
 - `xt login`
-- `xt bind`
 - `xt status`
 - `xt logout`
-- `xt auth bind`
 - `xt tool login`
 
 ### Tool Run
@@ -75,8 +73,6 @@ For the common Xiantao tool product, `tool search`, `tool inspect`, `tool run`,
 
 When resolving tools from `--toolProductUuid`, the CLI caches the `/tool/menus?is_all=1` result locally for 12 hours per `profile + toolProductUuid` to avoid repeated full-menu fetches.
 
-For remote-agent flows where the Xiantao web login callback cannot hit the machine running the CLI, use `xt bind --xiantao-token <token> --profile openclaw`. The bind command creates the upload auth session, calls the same `/user/skills/bind_user` API directly, waits for confirmation, and persists both the upload token and the Xiantao token locally. If you already created the auth session elsewhere, you can reuse it with `xt bind --auth-key <auth_key> --token-key <token_key> --xiantao-token <token>`.
-
 ## Development
 
 ```bash

package/dist/lib/xiantao-auth.js

@@ -3,7 +3,7 @@ import { AUTH_BIND_ENDPOINT, PASSPORT_JUMP_ENDPOINT } from './constants.js';
 import { openUrl } from './open-url.js';
 import { XtzError } from './errors.js';
 import { requestJson } from './http.js';
-import { loadXiantaoToken, requireXiantaoToken, saveXiantaoToken } from './storage.js';
+import { getXiantaoTokenPath, loadXiantaoToken, requireXiantaoToken, saveXiantaoToken } from './storage.js';
 export async function getXiantaoAuthContext(agent, tokenOverride) {
     const token = tokenOverride?.trim() || process.env.XIANTAO_TOKEN?.trim() || await requireXiantaoToken(agent);
     return { agent, token };
@@ -29,34 +29,24 @@ export async function loginXiantao(agent) {
         tokenPath,
     };
 }
-export async function bindUserWithXiantaoToken(agent, authKey, token) {
-    await requestJson(AUTH_BIND_ENDPOINT, {
-        body: JSON.stringify({ auth_key: authKey }),
-        headers: {
-            Authorization: `Bearer ${token}`,
-            'Content-Type': 'application/json',
-            origin: 'https://www.helixlife.net',
-            platform: 'pc',
-            referer: 'https://www.helixlife.net/',
-            source: 'PC',
-        },
-        method: 'POST',
-    }, { agent, tokenKind: 'xiantao' });
-    const tokenPath = await saveXiantaoToken(agent, token);
-    return {
-        browserOpened: false,
-        reused: true,
-        token,
-        tokenPath,
-    };
-}
 export async function bindUserWithStoredXiantaoToken(agent, authKey) {
     const auth = await loadXiantaoAuthContext(agent);
     if (!auth) {
         return undefined;
     }
     try {
-        return await bindUserWithXiantaoToken(agent, authKey, auth.token);
+        await requestJson(AUTH_BIND_ENDPOINT, {
+            body: JSON.stringify({ auth_key: authKey }),
+            headers: {
+                Authorization: `Bearer ${auth.token}`,
+                'Content-Type': 'application/json',
+                origin: 'https://www.helixlife.net',
+                platform: 'pc',
+                referer: 'https://www.helixlife.net/',
+                source: 'PC',
+            },
+            method: 'POST',
+        }, { agent, tokenKind: 'xiantao' });
     }
     catch (error) {
         if (error instanceof XtzError && error.message.includes('仙桃网页授权已过期或无效')) {
@@ -64,6 +54,12 @@ export async function bindUserWithStoredXiantaoToken(agent, authKey) {
         }
         throw error;
     }
+    return {
+        browserOpened: false,
+        reused: true,
+        token: auth.token,
+        tokenPath: getXiantaoTokenPath(agent),
+    };
 }
 async function createLoginSession() {
     let resolveToken;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@helixlife-ai/xiantao",
-  "version": "0.1.7",
+  "version": "0.1.8",
   "description": "CLI for Xiantao bioinformatics tools",
   "type": "module",
   "main": "dist/index.js",