@lumi-ai-lab/harness-data 0.0.21 → 0.0.23

package/README.md

@@ -24,7 +24,7 @@ or:
 GITHUB_TOKEN=... npx @lumi-ai-lab/harness-data install
 ```
 
-Without a GitHub token, the installer interactively asks for local absolute paths to `cas-cli`, `qdm-indicators-cli`, `qdm-cmr-cli`, and `harness-data-wikis`. CAS username and password are always collected interactively.
+Without a GitHub token, the installer interactively asks for local absolute paths to `cas-cli`, `qdm-indicators-cli`, `qdm-cmr-cli`, `qdm-sql-cli`, and `harness-data-wikis`. CAS username and password are always collected interactively.
 
 Update an existing runtime interactively:
 
@@ -32,12 +32,20 @@ Update an existing runtime interactively:
 npx @lumi-ai-lab/harness-data update
 ```
 
+Reconfigure CAS credentials after an account/password change or after `.qdm-auth` was deleted:
+
+```bash
+npx @lumi-ai-lab/harness-data auth --dir /path/to/runtime
+```
+
+The command recreates `.qdm-auth/cas`, stores the new encrypted CAS credentials, refreshes the CMR, Indicators, and SQL tokens, and validates all three tokens.
+
 Diagnose a runtime:
 
 ```bash
 npx @lumi-ai-lab/harness-data doctor
 ```
 
-The runtime is assembled from the `harness-data` runtime bundle, platform-specific CLI Release assets, `harness-data-wikis`, generated local config, CAS credentials, and selected Agent symlinks.
+The runtime is assembled from the `harness-data` runtime bundle, platform-specific CLI Release assets, `harness-data-wikis`, generated local config, CAS credentials, and selected Agent symlinks. SQL CLI tokens are fetched through `cas-cli token --app rtp`.
 
 `--agent` supports `claude`, `codex`, `pi`, `openclaw`, `hermes`, `both`, and `all`; the default is `all`. `both` installs Claude + Codex, while `all` installs Claude + Codex + Pi + OpenClaw + Hermes.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumi-ai-lab/harness-data",
-  "version": "0.0.21",
+  "version": "0.0.23",
   "description": "Installer and updater for Harness Data",
   "type": "module",
   "bin": {

package/src/cli.js

@@ -2,8 +2,9 @@ import { installCommand } from "./commands/install.js";
 import { updateCommand } from "./commands/update.js";
 import { doctorCommand } from "./commands/doctor.js";
 import { versionCommand } from "./commands/version.js";
+import { authCommand } from "./commands/auth.js";
 
-const commands = new Set(["install", "update", "doctor", "version"]);
+const commands = new Set(["install", "update", "auth", "doctor", "version"]);
 
 function parse(argv) {
   const args = argv.slice(2);
@@ -31,17 +32,19 @@ export async function main(argv) {
   const { command, options, unknown } = parse(argv);
   if (command === "install") return installCommand(options);
   if (command === "update") return updateCommand(options);
+  if (command === "auth") return authCommand(options);
   if (command === "doctor") return doctorCommand(options);
   if (command === "version") return versionCommand(options);
-  console.log(`Usage: harness-data <install|update|doctor|version> [options]
+  console.log(`Usage: harness-data <install|update|auth|doctor|version> [options]
 
 Commands:
   install  Install a Harness Data runtime in the current directory
   update   Interactively check and apply runtime, CLI, and wikis updates
+  auth     Configure CAS credentials and refresh access tokens
   doctor   Diagnose workspace CLI, config, auth, index, and Agent hooks
   version  Print installer, repository, wikis, and manifest versions
 
-Install options:
+Install and auth options:
   --dir PATH                         Runtime directory (default: current directory)
   --agent NAME                       claude, codex, pi, openclaw, hermes, both, or all
   --github-token TOKEN               GitHub token for private Release assets

package/src/commands/auth.js

@@ -0,0 +1,34 @@
+import fs from "node:fs";
+import path from "node:path";
+import { findWorkspaceDir } from "../lib/paths.js";
+import { packageVersion } from "../lib/package.js";
+import { binaryName } from "../lib/platform.js";
+import { blank, header, ok, step } from "../lib/log.js";
+import { configureTokens, writeCasCredentials } from "./install.js";
+
+const requiredBinaries = ["cas-cli", "qdm-cmr-cli", "qdm-indicators-cli", "qdm-sql-cli"];
+
+function validateAuthRuntime(runtimeDir) {
+  if (!fs.existsSync(runtimeDir)) throw new Error(`runtime directory does not exist: ${runtimeDir}`);
+  for (const name of requiredBinaries) {
+    const file = path.join(runtimeDir, "bin", binaryName(name));
+    if (!fs.existsSync(file)) throw new Error(`runtime CLI is missing: ${file}`);
+  }
+}
+
+export async function authCommand(options = {}) {
+  const runtimeDir = findWorkspaceDir(options.dir);
+  validateAuthRuntime(runtimeDir);
+  header("Harness Data 认证配置", packageVersion(), [`运行目录：${runtimeDir}`]);
+
+  step(1, 2, "配置 CAS 凭证");
+  const casDir = await writeCasCredentials(runtimeDir, options);
+  blank();
+
+  step(2, 2, "刷新并校验访问 Token");
+  await configureTokens(runtimeDir, casDir);
+  blank();
+
+  ok("CAS 认证配置完成");
+  return { runtimeDir, casDir };
+}

package/src/commands/doctor.js

@@ -3,7 +3,7 @@ import path from "node:path";
 import { run } from "../lib/exec.js";
 import { findWorkspaceDir } from "../lib/paths.js";
 import { binaryName } from "../lib/platform.js";
-import { concreteAgentNames } from "../lib/config.js";
+import { concreteAgentNames, qdmCliBinaries } from "../lib/config.js";
 
 function existsExecutable(file) {
   try {
@@ -36,8 +36,9 @@ function configPathsValid(workspace) {
   const file = path.join(workspace, "config", "qdm-cli-paths.env");
   if (!fs.existsSync(file)) return false;
   const content = fs.readFileSync(file, "utf8");
-  const matches = [...content.matchAll(/="([^"]+)"/g)].map((match) => match[1]);
-  return matches.length >= 3 && matches.every((entry) => fs.existsSync(entry));
+  const required = ["QDM_CMR_CLI", "QDM_INDICATORS_CLI", "QDM_SQL_CLI", "QDM_CAS_CLI"];
+  const values = new Map([...content.matchAll(/^export\s+([A-Z0-9_]+)="([^"]+)"/gm)].map((match) => [match[1], match[2]]));
+  return required.every((name) => values.has(name) && fs.existsSync(values.get(name)));
 }
 
 function casCredentialsValid(dir) {
@@ -66,7 +67,7 @@ export async function collectDoctor(workspace, options = {}) {
   add("wikis/reports", fs.existsSync(path.join(workspace, "wikis", "reports")));
   add("wikis/dims", fs.existsSync(path.join(workspace, "wikis", "dims")));
   add("wikis/rules", fs.existsSync(path.join(workspace, "wikis", "rules")));
-  for (const binary of ["data-harness-cli", "qdm-cmr-cli", "qdm-indicators-cli", "cas-cli"]) {
+  for (const binary of qdmCliBinaries) {
     add(`bin/${binary}`, existsExecutable(path.join(workspace, "bin", binaryName(binary))));
   }
   add("config/harness-config.yaml", fs.existsSync(path.join(workspace, "config", "harness-config.yaml")));
@@ -75,6 +76,7 @@ export async function collectDoctor(workspace, options = {}) {
   add("CAS credentials file", casCredentialsValid(casConfigDir), casConfigDir);
   add("CMR token", await tokenCheck(workspace, "qdm-cmr-cli", env));
   add("Indicators token", await tokenCheck(workspace, "qdm-indicators-cli", env));
+  add("SQL token", await tokenCheck(workspace, "qdm-sql-cli", env));
   add("Agent hook", concreteAgentNames.some((name) => agentOk(workspace, name)));
   for (const name of ["openclaw", "hermes"]) {
     if (fs.existsSync(path.join(workspace, `.${name}`))) {

package/src/commands/install.js

@@ -1,7 +1,7 @@
 import fs from "node:fs";
 import path from "node:path";
 import { commandExists, run } from "../lib/exec.js";
-import { writeLocalConfig, linkAgents } from "../lib/config.js";
+import { localPathToolNames, writeLocalConfig, linkAgents } from "../lib/config.js";
 import { ask, askSecret, chooseAgent } from "../lib/prompt.js";
 import { readUserState, resolveWorkspaceDir, writeState } from "../lib/paths.js";
 import { installToolsFromManifest, manifestDigest, readManifest } from "../lib/manifest.js";
@@ -156,7 +156,7 @@ async function installLocalTools(runtimeDir, options = {}) {
   const binDir = path.join(runtimeDir, "bin");
   fs.mkdirSync(binDir, { recursive: true });
   const installed = {};
-  for (const name of ["cas-cli", "qdm-indicators-cli", "qdm-cmr-cli"]) {
+  for (const name of localPathToolNames) {
     const source = await promptExecutable(runtimeDir, name, options);
     const target = path.join(binDir, binaryName(name));
     if (path.resolve(source) !== path.resolve(target)) {
@@ -213,29 +213,37 @@ function casConfigDir(runtimeDir) {
   return path.join(runtimeDir, ".qdm-auth", "cas");
 }
 
-async function writeCasCredentials(runtimeDir, options = {}) {
+export async function writeCasCredentials(runtimeDir, options = {}) {
   const username = options.casUsername || await ask("CAS 用户名：", options);
   const password = options.casPassword || await askSecret("CAS 密码：", options);
   if (!username || !password) throw new Error("CAS username and password are required");
   const dir = casConfigDir(runtimeDir);
   fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
   const env = { QDM_CAS_CONFIG_DIR: dir };
-  await run(path.join(runtimeDir, "bin", binaryName("cas-cli")), ["config", "set-credentials", "--username", username, "--password", password], { cwd: runtimeDir, env });
+  await run(path.join(runtimeDir, "bin", binaryName("cas-cli")), ["config", "set-credentials", "--username", username, "--password", password], {
+    cwd: runtimeDir,
+    env,
+    sensitiveArgs: [5]
+  });
   ok("CAS 凭证已加密保存到 .qdm-auth/cas/credentials.enc");
   return dir;
 }
 
-async function configureTokens(runtimeDir, casDir) {
+export async function configureTokens(runtimeDir, casDir) {
   const env = { QDM_CAS_CONFIG_DIR: casDir };
   const bin = (name) => path.join(runtimeDir, "bin", binaryName(name));
   const cmrToken = (await run(bin("cas-cli"), ["token", "--app", "cmr"], { cwd: runtimeDir, env })).stdout.trim();
-  await run(bin("qdm-cmr-cli"), ["config", "set-token", cmrToken], { cwd: runtimeDir, env });
+  await run(bin("qdm-cmr-cli"), ["config", "set-token", cmrToken], { cwd: runtimeDir, env, sensitiveArgs: [2] });
   ok("CMR Token 已配置");
   const indicatorsToken = (await run(bin("cas-cli"), ["token", "--app", "indicators"], { cwd: runtimeDir, env })).stdout.trim();
-  await run(bin("qdm-indicators-cli"), ["config", "set-token", indicatorsToken], { cwd: runtimeDir, env });
+  await run(bin("qdm-indicators-cli"), ["config", "set-token", indicatorsToken], { cwd: runtimeDir, env, sensitiveArgs: [2] });
   ok("Indicators Token 已配置");
+  const sqlToken = (await run(bin("cas-cli"), ["token", "--app", "rtp"], { cwd: runtimeDir, env })).stdout.trim();
+  await run(bin("qdm-sql-cli"), ["config", "set-token", sqlToken], { cwd: runtimeDir, env, sensitiveArgs: [2] });
+  ok("SQL Token 已配置");
   await run(bin("qdm-cmr-cli"), ["config", "check-token"], { cwd: runtimeDir, env });
   await run(bin("qdm-indicators-cli"), ["config", "check-token"], { cwd: runtimeDir, env });
+  await run(bin("qdm-sql-cli"), ["config", "check-token"], { cwd: runtimeDir, env });
 }
 
 export async function buildAndCheck(runtimeDir, options = {}) {
@@ -264,11 +272,12 @@ export function printDoctorSummary(doctor, options = {}) {
     ok("wikis/reports");
     ok("wikis/dims");
     ok("wikis/rules");
-    ok("4 个 CLI");
+    ok("5 个 CLI");
     ok("本地配置");
     ok("CAS 凭证");
     ok("CMR Token");
     ok("Indicators Token");
+    ok("SQL Token");
     if (!warnings.some((check) => check.name.startsWith("Agent hook"))) ok("Agent Hook");
     for (const check of warnings) warn(`${check.name}${check.detail ? ` (${check.detail})` : ""}`);
     return;

package/src/commands/update.js

@@ -19,7 +19,8 @@ export function isNonBlockingUpdateDoctorCheck(check) {
     check.name.startsWith("Agent hook .") ||
     check.name === "CAS credentials file" ||
     check.name === "CMR token" ||
-    check.name === "Indicators token";
+    check.name === "Indicators token" ||
+    check.name === "SQL token";
 }
 
 async function npmLatest() {

package/src/lib/config.js

@@ -20,6 +20,8 @@ export const agentLinks = {
   ],
 };
 export const agentChoiceText = agentChoices.join(", ");
+export const qdmCliBinaries = ["data-harness-cli", "qdm-cmr-cli", "qdm-indicators-cli", "qdm-sql-cli", "cas-cli"];
+export const localPathToolNames = ["cas-cli", "qdm-indicators-cli", "qdm-cmr-cli", "qdm-sql-cli"];
 
 export function hasAnyAgentHook(workspace) {
   return concreteAgentNames.some((name) => fs.existsSync(path.join(workspace, `.${name}`)));
@@ -35,8 +37,8 @@ export function writeLocalConfig(workspace, options = {}) {
   }
   const bin = (name) => path.join(workspace, "bin", binaryName(name)).replaceAll("\\", "/");
   const casConfigDir = path.join(workspace, ".qdm-auth", "cas").replaceAll("\\", "/");
-  fs.writeFileSync(harness, `paths:\n  knowledge: wikis\n\ncli:\n  qdm_cmr_cli: ${bin("qdm-cmr-cli")}\n  qdm_indicators_cli: ${bin("qdm-indicators-cli")}\n  qdm_cas_cli: ${bin("cas-cli")}\n`);
-  fs.writeFileSync(env, `export QDM_CMR_CLI="${bin("qdm-cmr-cli")}"\nexport QDM_INDICATORS_CLI="${bin("qdm-indicators-cli")}"\nexport QDM_CAS_CLI="${bin("cas-cli")}"\nexport QDM_CAS_CONFIG_DIR="${casConfigDir}"\n`);
+  fs.writeFileSync(harness, `paths:\n  knowledge: wikis\n\ncli:\n  qdm_cmr_cli: ${bin("qdm-cmr-cli")}\n  qdm_indicators_cli: ${bin("qdm-indicators-cli")}\n  qdm_sql_cli: ${bin("qdm-sql-cli")}\n  qdm_cas_cli: ${bin("cas-cli")}\n`);
+  fs.writeFileSync(env, `export QDM_CMR_CLI="${bin("qdm-cmr-cli")}"\nexport QDM_INDICATORS_CLI="${bin("qdm-indicators-cli")}"\nexport QDM_SQL_CLI="${bin("qdm-sql-cli")}"\nexport QDM_CAS_CLI="${bin("cas-cli")}"\nexport QDM_CAS_CONFIG_DIR="${casConfigDir}"\n`);
 }
 
 export function validateCasConfigDir(dir) {

package/src/lib/exec.js

@@ -20,7 +20,9 @@ export function run(command, args = [], options = {}) {
         return;
       }
       const detail = stderr.trim() || stdout.trim();
-      reject(new Error(`${command} ${args.join(" ")} failed${detail ? `: ${detail}` : ""}`));
+      const sensitiveArgs = new Set(options.sensitiveArgs || []);
+      const displayArgs = args.map((arg, index) => sensitiveArgs.has(index) ? "******" : arg);
+      reject(new Error(`${command} ${displayArgs.join(" ")} failed${detail ? `: ${detail}` : ""}`));
     });
   });
 }