@lumi-ai-lab/harness-data 0.0.22 → 0.0.23

package/README.md

@@ -32,6 +32,14 @@ Update an existing runtime interactively:
 npx @lumi-ai-lab/harness-data update
 ```
 
+Reconfigure CAS credentials after an account/password change or after `.qdm-auth` was deleted:
+
+```bash
+npx @lumi-ai-lab/harness-data auth --dir /path/to/runtime
+```
+
+The command recreates `.qdm-auth/cas`, stores the new encrypted CAS credentials, refreshes the CMR, Indicators, and SQL tokens, and validates all three tokens.
+
 Diagnose a runtime:
 
 ```bash

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumi-ai-lab/harness-data",
-  "version": "0.0.22",
+  "version": "0.0.23",
   "description": "Installer and updater for Harness Data",
   "type": "module",
   "bin": {

package/src/cli.js

@@ -2,8 +2,9 @@ import { installCommand } from "./commands/install.js";
 import { updateCommand } from "./commands/update.js";
 import { doctorCommand } from "./commands/doctor.js";
 import { versionCommand } from "./commands/version.js";
+import { authCommand } from "./commands/auth.js";
 
-const commands = new Set(["install", "update", "doctor", "version"]);
+const commands = new Set(["install", "update", "auth", "doctor", "version"]);
 
 function parse(argv) {
   const args = argv.slice(2);
@@ -31,17 +32,19 @@ export async function main(argv) {
   const { command, options, unknown } = parse(argv);
   if (command === "install") return installCommand(options);
   if (command === "update") return updateCommand(options);
+  if (command === "auth") return authCommand(options);
   if (command === "doctor") return doctorCommand(options);
   if (command === "version") return versionCommand(options);
-  console.log(`Usage: harness-data <install|update|doctor|version> [options]
+  console.log(`Usage: harness-data <install|update|auth|doctor|version> [options]
 
 Commands:
   install  Install a Harness Data runtime in the current directory
   update   Interactively check and apply runtime, CLI, and wikis updates
+  auth     Configure CAS credentials and refresh access tokens
   doctor   Diagnose workspace CLI, config, auth, index, and Agent hooks
   version  Print installer, repository, wikis, and manifest versions
 
-Install options:
+Install and auth options:
   --dir PATH                         Runtime directory (default: current directory)
   --agent NAME                       claude, codex, pi, openclaw, hermes, both, or all
   --github-token TOKEN               GitHub token for private Release assets

package/src/commands/auth.js

@@ -0,0 +1,34 @@
+import fs from "node:fs";
+import path from "node:path";
+import { findWorkspaceDir } from "../lib/paths.js";
+import { packageVersion } from "../lib/package.js";
+import { binaryName } from "../lib/platform.js";
+import { blank, header, ok, step } from "../lib/log.js";
+import { configureTokens, writeCasCredentials } from "./install.js";
+
+const requiredBinaries = ["cas-cli", "qdm-cmr-cli", "qdm-indicators-cli", "qdm-sql-cli"];
+
+function validateAuthRuntime(runtimeDir) {
+  if (!fs.existsSync(runtimeDir)) throw new Error(`runtime directory does not exist: ${runtimeDir}`);
+  for (const name of requiredBinaries) {
+    const file = path.join(runtimeDir, "bin", binaryName(name));
+    if (!fs.existsSync(file)) throw new Error(`runtime CLI is missing: ${file}`);
+  }
+}
+
+export async function authCommand(options = {}) {
+  const runtimeDir = findWorkspaceDir(options.dir);
+  validateAuthRuntime(runtimeDir);
+  header("Harness Data 认证配置", packageVersion(), [`运行目录：${runtimeDir}`]);
+
+  step(1, 2, "配置 CAS 凭证");
+  const casDir = await writeCasCredentials(runtimeDir, options);
+  blank();
+
+  step(2, 2, "刷新并校验访问 Token");
+  await configureTokens(runtimeDir, casDir);
+  blank();
+
+  ok("CAS 认证配置完成");
+  return { runtimeDir, casDir };
+}

package/src/commands/install.js

@@ -213,14 +213,18 @@ function casConfigDir(runtimeDir) {
   return path.join(runtimeDir, ".qdm-auth", "cas");
 }
 
-async function writeCasCredentials(runtimeDir, options = {}) {
+export async function writeCasCredentials(runtimeDir, options = {}) {
   const username = options.casUsername || await ask("CAS 用户名：", options);
   const password = options.casPassword || await askSecret("CAS 密码：", options);
   if (!username || !password) throw new Error("CAS username and password are required");
   const dir = casConfigDir(runtimeDir);
   fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
   const env = { QDM_CAS_CONFIG_DIR: dir };
-  await run(path.join(runtimeDir, "bin", binaryName("cas-cli")), ["config", "set-credentials", "--username", username, "--password", password], { cwd: runtimeDir, env });
+  await run(path.join(runtimeDir, "bin", binaryName("cas-cli")), ["config", "set-credentials", "--username", username, "--password", password], {
+    cwd: runtimeDir,
+    env,
+    sensitiveArgs: [5]
+  });
   ok("CAS 凭证已加密保存到 .qdm-auth/cas/credentials.enc");
   return dir;
 }
@@ -229,13 +233,13 @@ export async function configureTokens(runtimeDir, casDir) {
   const env = { QDM_CAS_CONFIG_DIR: casDir };
   const bin = (name) => path.join(runtimeDir, "bin", binaryName(name));
   const cmrToken = (await run(bin("cas-cli"), ["token", "--app", "cmr"], { cwd: runtimeDir, env })).stdout.trim();
-  await run(bin("qdm-cmr-cli"), ["config", "set-token", cmrToken], { cwd: runtimeDir, env });
+  await run(bin("qdm-cmr-cli"), ["config", "set-token", cmrToken], { cwd: runtimeDir, env, sensitiveArgs: [2] });
   ok("CMR Token 已配置");
   const indicatorsToken = (await run(bin("cas-cli"), ["token", "--app", "indicators"], { cwd: runtimeDir, env })).stdout.trim();
-  await run(bin("qdm-indicators-cli"), ["config", "set-token", indicatorsToken], { cwd: runtimeDir, env });
+  await run(bin("qdm-indicators-cli"), ["config", "set-token", indicatorsToken], { cwd: runtimeDir, env, sensitiveArgs: [2] });
   ok("Indicators Token 已配置");
   const sqlToken = (await run(bin("cas-cli"), ["token", "--app", "rtp"], { cwd: runtimeDir, env })).stdout.trim();
-  await run(bin("qdm-sql-cli"), ["config", "set-token", sqlToken], { cwd: runtimeDir, env });
+  await run(bin("qdm-sql-cli"), ["config", "set-token", sqlToken], { cwd: runtimeDir, env, sensitiveArgs: [2] });
   ok("SQL Token 已配置");
   await run(bin("qdm-cmr-cli"), ["config", "check-token"], { cwd: runtimeDir, env });
   await run(bin("qdm-indicators-cli"), ["config", "check-token"], { cwd: runtimeDir, env });

package/src/lib/exec.js

@@ -20,7 +20,9 @@ export function run(command, args = [], options = {}) {
         return;
       }
       const detail = stderr.trim() || stdout.trim();
-      reject(new Error(`${command} ${args.join(" ")} failed${detail ? `: ${detail}` : ""}`));
+      const sensitiveArgs = new Set(options.sensitiveArgs || []);
+      const displayArgs = args.map((arg, index) => sensitiveArgs.has(index) ? "******" : arg);
+      reject(new Error(`${command} ${displayArgs.join(" ")} failed${detail ? `: ${detail}` : ""}`));
     });
   });
 }