@minionry/minion 0.7.36

package/dist/server/services/platform-token-lifecycle.js

@@ -0,0 +1,95 @@
+// Copyright (c) 2025-present Minionry, Inc.
+// SPDX-License-Identifier: LicenseRef-Minionry-Software
+import { getCredentials, shouldRefreshToken, updateCredentials, } from './platform-credentials.js';
+const PERIODIC_CHECK_INTERVAL_MS = 24 * 60 * 60 * 1000;
+export class TokenLifecycle {
+    deps;
+    intervalHandle = null;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    async maybeRefresh() {
+        const creds = getCredentials();
+        if (!creds)
+            return false;
+        if (!shouldRefreshToken(creds))
+            return true;
+        try {
+            const response = await fetch(`${this.deps.platformUrl}/api/auth/device/refresh`, {
+                method: 'POST',
+                headers: {
+                    'Authorization': `Bearer ${creds.token}`,
+                    'Content-Type': 'application/json'
+                }
+            });
+            if (response.ok) {
+                const data = await response.json();
+                updateCredentials({
+                    token: data.accessToken,
+                    lastRefreshedAt: new Date().toISOString()
+                });
+                return true;
+            }
+            if (response.status === 401 || response.status === 403) {
+                console.warn(`[Platform] Token refresh failed — auth is expired (${response.status}). Run \`minion login --force\`.`);
+                this.notifyAuthExpired();
+                return false;
+            }
+            console.warn(`[Platform] Token refresh failed with status ${response.status}, will retry later`);
+            return true;
+        }
+        catch (err) {
+            console.warn('[Platform] Token refresh error:', err);
+            return true;
+        }
+    }
+    async verify() {
+        const creds = getCredentials();
+        if (!creds?.token)
+            return false;
+        try {
+            const response = await fetch(`${this.deps.platformUrl}/api/auth/device/verify`, {
+                method: 'POST',
+                headers: { 'Authorization': `Bearer ${creds.token}` },
+            });
+            if (response.status === 401 || response.status === 403) {
+                console.warn(`[Platform] Token verify rejected (${response.status}) — auth is expired.`);
+                return false;
+            }
+            return true;
+        }
+        catch {
+            return true;
+        }
+    }
+    notifyAuthExpired() {
+        this.deps.send({
+            type: 'clientAuthExpired',
+            data: {
+                connectionId: this.deps.getConnectionId(),
+                message: 'The CLI\'s device token is invalid — run `minion login --force` on the machine.',
+            },
+        });
+    }
+    maybeVerifyInParallel() {
+        const creds = getCredentials();
+        if (!creds || !shouldRefreshToken(creds))
+            return;
+        this.verify().then((valid) => {
+            if (!valid)
+                this.notifyAuthExpired();
+        }).catch(() => { });
+    }
+    startPeriodicCheck() {
+        this.stopPeriodicCheck();
+        this.intervalHandle = setInterval(() => {
+            this.maybeRefresh();
+        }, PERIODIC_CHECK_INTERVAL_MS);
+    }
+    stopPeriodicCheck() {
+        if (this.intervalHandle) {
+            clearInterval(this.intervalHandle);
+            this.intervalHandle = null;
+        }
+    }
+}

package/dist/server/services/platform-url.js

@@ -0,0 +1,17 @@
+// Copyright (c) 2025-present Minionry, Inc.
+// SPDX-License-Identifier: LicenseRef-Minionry-Software
+export const DEFAULT_PLATFORM_URL = 'https://api.minionry.com';
+export function resolvePlatformUrl() {
+    return process.env.PLATFORM_URL || DEFAULT_PLATFORM_URL;
+}
+const CLI_ENVIRONMENTS = new Set(['production', 'staging', 'dev']);
+export const DEFAULT_CLI_ENVIRONMENT = 'production';
+export function resolveCliEnvironment() {
+    const raw = process.env.MINIONRY_ENV;
+    return raw && CLI_ENVIRONMENTS.has(raw) ? raw : DEFAULT_CLI_ENVIRONMENT;
+}
+export function parseDeclaredEnvironment(value) {
+    return typeof value === 'string' && CLI_ENVIRONMENTS.has(value)
+        ? value
+        : DEFAULT_CLI_ENVIRONMENT;
+}