@lumi-ai-lab/harness-data 0.0.14 → 0.0.15

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumi-ai-lab/harness-data",
-  "version": "0.0.14",
+  "version": "0.0.15",
   "description": "Installer and updater for Harness Data",
   "type": "module",
   "bin": {

package/src/commands/doctor.js

@@ -40,10 +40,15 @@ function configPathsValid(workspace) {
   return matches.length >= 3 && matches.every((entry) => fs.existsSync(entry));
 }
 
-function jsonFileValid(file) {
+function casCredentialsValid(dir) {
+  const encrypted = path.join(dir, "credentials.enc");
   try {
-    JSON.parse(fs.readFileSync(file, "utf8"));
-    return true;
+    if (fs.statSync(encrypted).size > 0) return true;
+  } catch {}
+
+  try {
+    const config = JSON.parse(fs.readFileSync(path.join(dir, "config.json"), "utf8"));
+    return Boolean(config?.cas?.username && config?.cas?.password);
   } catch {
     return false;
   }
@@ -65,7 +70,7 @@ export async function collectDoctor(workspace, options = {}) {
   add("config/harness-config.yaml", fs.existsSync(path.join(workspace, "config", "harness-config.yaml")));
   add("config/qdm-cli-paths.env", fs.existsSync(path.join(workspace, "config", "qdm-cli-paths.env")));
   add("config CLI paths", configPathsValid(workspace));
-  add("CAS credentials file", jsonFileValid(path.join(casConfigDir, "config.json")), casConfigDir);
+  add("CAS credentials file", casCredentialsValid(casConfigDir), casConfigDir);
   add("CMR token", await tokenCheck(workspace, "qdm-cmr-cli", env));
   add("Indicators token", await tokenCheck(workspace, "qdm-indicators-cli", env));
   add("Agent hook", concreteAgentNames.some((name) => agentOk(workspace, name)));

package/src/commands/install.js

@@ -170,8 +170,9 @@ async function writeCasCredentials(runtimeDir, options = {}) {
   if (!username || !password) throw new Error("CAS username and password are required");
   const dir = casConfigDir(runtimeDir);
   fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
-  fs.writeFileSync(path.join(dir, "config.json"), `${JSON.stringify({ cas: { username, password } }, null, 2)}\n`, { mode: 0o600 });
-  ok("CAS 凭证已保存到 .qdm-auth/cas/config.json");
+  const env = { QDM_CAS_CONFIG_DIR: dir };
+  await run(path.join(runtimeDir, "bin", binaryName("cas-cli")), ["config", "set-credentials", "--username", username, "--password", password], { cwd: runtimeDir, env });
+  ok("CAS 凭证已加密保存到 .qdm-auth/cas/credentials.enc");
   return dir;
 }
 

package/src/lib/config.js

@@ -36,16 +36,17 @@ export function writeLocalConfig(workspace, options = {}) {
 }
 
 export function validateCasConfigDir(dir) {
-  const file = path.join(dir, "config.json");
-  let config;
+  const encrypted = path.join(dir, "credentials.enc");
   try {
-    config = JSON.parse(fs.readFileSync(file, "utf8"));
-  } catch {
-    throw new Error(`CAS config is missing or invalid: ${file}`);
-  }
-  if (!config?.cas?.username || !config?.cas?.password) {
-    throw new Error(`CAS config must contain non-empty cas.username and cas.password: ${file}`);
-  }
+    if (fs.statSync(encrypted).size > 0) return;
+  } catch {}
+
+  const legacy = path.join(dir, "config.json");
+  try {
+    const config = JSON.parse(fs.readFileSync(legacy, "utf8"));
+    if (config?.cas?.username && config?.cas?.password) return;
+  } catch {}
+  throw new Error(`CAS credentials are missing or invalid in: ${dir}`);
 }
 
 export function linkAgents(workspace, agent) {