@newpeak/barista-cli 0.1.11 → 0.1.13

package/docs/commands/arabica/auth/index.md

@@ -1,296 +0,0 @@
-# arabica auth
-
-Manage Arabica authentication.
-
-## Overview
-
-The `arabica auth` command group provides authentication management for the Arabica sales platform. Arabica is a single-tenant SaaS platform, which means it does not require tenant context like Liberica. Authentication uses the standard `POST /api/login` endpoint for login and `POST /api/member/user/register` for user registration.
-
-Key differences from Liberica authentication:
-
-- **No tenant concept**: Arabica operates as a single-tenant platform
-- **Account-based login**: Uses account (username or email) instead of username/tenant pair
-- **Registration support**: Includes user registration functionality
-- **Remember me option**: Supports persistent login sessions
-
-## Commands
-
-### login
-
-Login to Arabica with account credentials.
-
-**Usage:**
-```
-barista arabica auth login [env] [account] [password] [options]
-```
-
-**Arguments:**
-
-| Argument | Type | Required | Description |
-|----------|------|----------|-------------|
-| env | string | No | Target environment (dev\|test\|prod-cn\|prod-jp) |
-| account | string | No | Account username or email |
-| password | string | No | Account password |
-
-**Options:**
-
-| Option | Type | Required | Default | Description |
-|--------|------|----------|---------|-------------|
-| --env | string | No | Current context | Target environment |
-| --account | string | No | Interactive input | Account username or email |
-| --password | string | No | Interactive input | Account password |
-| --remember | boolean | No | false | Remember login status |
-
-**Examples:**
-
-Interactive mode (all fields prompted):
-```bash
-barista arabica auth login
-```
-
-With positional arguments:
-```bash
-barista arabica auth login dev user@example.com mypassword
-```
-
-With options:
-```bash
-barista arabica auth login --env dev --account user@example.com --password mypassword --remember
-```
-
-Mixed (positional + options):
-```bash
-barista arabica auth login dev --account user@example.com --password mypassword
-```
-
-**API Endpoint:**
-- **Method**: `POST /api/login`
-- **Body**: `{ account: string, password: string, rememberMe: boolean }`
-- **Response**: `{ success: boolean, data: { token: string, expiresAt?: string } }`
-
-**Error Handling:**
-
-| Error Code | Description | Trigger Condition |
-|------------|-------------|-------------------|
-| INVALID_CREDENTIALS | Invalid account or password | Wrong account/password combination |
-| ACCOUNT_LOCKED | Account is locked | Multiple failed login attempts |
-| NETWORK_ERROR | Network connection failed | Cannot reach Arabica server |
-
-**Implementation Notes:**
-- Interactive prompts use `inquirer` for secure password input (masked)
-- Successful login stores token via `tokenManager.setToken()` in system keychain
-- Token format in keychain: `arabica:{environment}` (no tenant component)
-- The `--remember` flag extends token validity on the server side
-
----
-
-### register
-
-Register a new Arabica account.
-
-**Usage:**
-```
-barista arabica auth register [options]
-```
-
-**Options:**
-
-| Option | Type | Required | Default | Description |
-|--------|------|----------|---------|-------------|
-| --env | string | No | Current context | Target environment |
-| --email | string | No | Interactive input | Email address |
-| --account | string | No | Interactive input | Account username |
-| --password | string | No | Interactive input | Account password |
-| --phone | string | No | Interactive input | Phone number (optional) |
-
-**Examples:**
-
-Interactive mode (all fields prompted):
-```bash
-barista arabica auth register
-```
-
-With all options:
-```bash
-barista arabica auth register \
-  --env dev \
-  --email newuser@example.com \
-  --account newuser \
-  --password mypassword \
-  --phone "+86 13800138000"
-```
-
-Minimal registration (prompts for missing fields):
-```bash
-barista arabica auth register --email newuser@example.com --account newuser
-```
-
-**API Endpoint:**
-- **Method**: `POST /api/member/user/register`
-- **Body**: `{ email: string, account: string, password: string, phone?: string }`
-- **Response**: `{ success: boolean, data: { userId?: string } }`
-
-**Error Handling:**
-
-| Error Code | Description | Trigger Condition |
-|------------|-------------|-------------------|
-| EMAIL_EXISTS | Email already registered | Duplicate email address |
-| ACCOUNT_EXISTS | Account username taken | Duplicate account name |
-| INVALID_EMAIL | Invalid email format | Email format validation failed |
-| WEAK_PASSWORD | Password too weak | Password does not meet requirements |
-
-**Implementation Notes:**
-- Email and account are both required and must be unique
-- Phone number is optional but recommended for account recovery
-- After successful registration, user must login separately to obtain token
-- Registration does not automatically authenticate the user
-
----
-
-### status
-
-Check Arabica authentication status across all environments.
-
-**Usage:**
-```
-barista arabica auth status
-```
-
-**Output:**
-```
-🔐 Arabica Authentication Status
-
-  ✓ arabica (dev): Logged in
-  ✗ arabica (test): Not logged in
-  ✗ arabica (prod-cn): Not logged in
-  ✗ arabica (prod-jp): Not logged in
-```
-
-**Implementation Notes:**
-- Checks all four environments (dev, test, prod-cn, prod-jp)
-- Uses `tokenManager.getToken({ service: 'arabica', environment })` for each environment
-- No tenant component in token key since Arabica is single-tenant
-- Output uses chalk for colored status indicators (green checkmark for logged in, red X for not logged in)
-
----
-
-### logout
-
-Logout from Arabica and clear stored tokens.
-
-**Usage:**
-```
-barista arabica auth logout [options]
-```
-
-**Options:**
-
-| Option | Type | Required | Default | Description |
-|--------|------|----------|---------|-------------|
-| --env | string | No | Current context | Target environment to logout from |
-| --all | boolean | No | false | Clear all Arabica tokens across environments |
-
-**Examples:**
-
-Logout from current environment:
-```bash
-barista arabica auth logout
-```
-
-Logout from specific environment:
-```bash
-barista arabica auth logout --env dev
-```
-
-Logout from all environments:
-```bash
-barista arabica auth logout --all
-```
-
-**Implementation Notes:**
-- Without `--all`, clears token for the specified (or current) environment only
-- With `--all`, iterates through all credentials in keychain and deletes those with `arabica:*` prefix
-- Uses `tokenManager.deleteToken()` for single environment logout
-- Uses `tokenManager.findAllTokens()` and filters by service name for `--all` logout
-
----
-
-## Arabica vs Liberica Comparison Table
-
-| Feature | Arabica Auth | Liberica Auth |
-|---------|--------------|---------------|
-| **Platform Type** | Single-tenant SaaS | Multi-tenant SaaS |
-| **Tenant Required** | No | Yes (required) |
-| **Login Identifier** | Account (username/email) | Username + Tenant |
-| **Registration** | Supported | Not supported (admin only) |
-| **Remember Me** | Supported | Not supported |
-| **Token Key Format** | `arabica:{environment}` | `liberica:{environment}:{tenant}` |
-| **Login Endpoint** | `POST /api/login` | `POST /api/enterprise/loginApi` |
-| **Register Endpoint** | `POST /api/member/user/register` | N/A |
-
-## File Structure
-
-```
-src/commands/arabica/auth/
-├── index.ts      # Main auth command with login, register, status, logout implementations
-├── login.ts      # Login command factory (stub for future expansion)
-├── register.ts   # Register command factory (stub for future expansion)
-├── status.ts     # Status command factory (stub for future expansion)
-└── logout.ts     # Logout command factory (stub for future expansion)
-```
-
-**Implementation Pattern:**
-
-All four subcommands are implemented directly in `index.ts` using Commander.js `.command()` chaining. The individual files (`login.ts`, `register.ts`, `status.ts`, `logout.ts`) export factory functions that create empty Command instances for potential future refactoring.
-
-```typescript
-// index.ts pattern
-authCommand
-  .command('login')
-  .description('Login to Arabica')
-  .arguments('<env> [account] [password]')
-  .option('--env <environment>', 'Environment')
-  .option('--account <account>', 'Account')
-  .option('--password <password>', 'Password')
-  .option('--remember', 'Remember login status')
-  .action(async (env, account, password, options) => {
-    // Implementation
-  });
-```
-
-## Unit Tests
-
-Test file: `tests/unit/commands/arabica/auth.test.ts`
-
-**Test Coverage:**
-
-| Test Case | Description |
-|-----------|-------------|
-| Command creation | Verifies auth command is created with correct name and description |
-| Login subcommand | Tests login command existence, description, and all options (--env, --account, --password, --remember) |
-| Register subcommand | Tests register command existence, description, and all options (--env, --email, --account, --password, --phone) |
-| Status subcommand | Tests status command existence, description, and zero options |
-| Logout subcommand | Tests logout command existence, description, and options (--env, --all) |
-| No tenant option | Verifies Arabica login does NOT have --tenant option (unlike Liberica) |
-| Integration mocks | Verifies apiClient and tokenManager methods are called correctly |
-
-**Mock Strategy:**
-
-```typescript
-// Key modules are mocked for unit testing
-vi.mock('../../../../src/core/config/manager.js');
-vi.mock('../../../../src/core/auth/token-manager.js');
-vi.mock('../../../../src/core/api/client.js');
-vi.mock('chalk');
-vi.mock('inquirer');
-```
-
-**Running Tests:**
-
-```bash
-# Run all Arabica auth tests
-npm test -- tests/unit/commands/arabica/auth.test.ts
-
-# Run with coverage
-npm run test:coverage -- tests/unit/commands/arabica/auth.test.ts
-```

package/docs/commands/liberica/auth/index.md

@@ -1,133 +0,0 @@
-# liberica auth
-
-管理 Liberica 租户身份认证。
-
-## Commands
-
-### login
-
-登录 Liberica 租户账户。
-
-**Usage:**
-```
-barista liberica auth login [env] [tenant] [username] [password] [options]
-```
-
-**Arguments:**
-| 参数 | 类型 | 必填 | 说明 |
-|------|------|------|------|
-| env | string | ⬜ | 目标环境 (dev\|test\|prod-cn\|prod-jp) |
-| tenant | string | ⬜ | 租户名称 |
-| username | string | ⬜ | 用户名 |
-| password | string | ⬜ | 密码 |
-
-**Options:**
-| 选项 | 类型 | 必填 | 默认值 | 说明 |
-|------|------|------|--------|------|
-| --env | string | ⬜ | 当前上下文 | 目标环境 |
-| --tenant | string | ⬜ | 当前上下文 | 租户名称 |
-| --username | string | ⬜ | 交互输入 | 用户名 |
-| --password | string | ⬜ | 交互输入 | 密码 |
-
-**Examples:**
-
-Interactive mode (all args prompted):
-```bash
-barista liberica auth login
-```
-
-With positional arguments:
-```bash
-barista liberica auth login dev shanghai admin@shanghai.newpeaksh.com 123456
-```
-
-With options:
-```bash
-barista liberica auth login --env dev --tenant shanghai --username admin@shanghai.newpeaksh.com --password 123456
-```
-
-Mixed (positional + options):
-```bash
-barista liberica auth login dev --tenant shanghai --username admin@shanghai.newpeaksh.com --password 123456
-```
-
-**API:**
-- Endpoint: `POST /api/v1/auth/login`
-- Body: `{ username, password, tenant, service, environment }`
-- Response: `{ success: true, data: { token, expiresAt } }`
-
-**Error Codes:**
-| 错误码 | 错误消息 | 触发条件 |
-|--------|----------|----------|
-| USER_NOT_EXIST | 用户不存在 | 用户名未注册 |
-| PASSWORD_ERROR | 密码错误 | 密码不匹配 |
-| NETWORK_ERROR | 网络错误 | 无法连接到服务器 |
-
-**Implementation Notes:**
-- 交互式补全：tenant/username/password 未提供时使用 inquirer 交互输入
-- Token存储：成功登录后调用 `tokenManager.setToken()` 存入系统密钥链
-- 上下文更新：调用 `configManager.setTenant()` 更新默认租户
-
----
-
-### status
-
-检查 Liberica 认证状态。
-
-**Usage:**
-```
-barista liberica auth status
-```
-
-**Output:**
-```
-🔐 Liberica Authentication Status
-
-  ✓ liberica (electionjp) (dev): Logged in
-  ✗ liberica (electionjp) (test): Not logged in
-  ✗ liberica (electionjp) (prod-cn): Not logged in
-  ✗ liberica (electionjp) (prod-jp): Not logged in
-```
-
-**Implementation Notes:**
-- 遍历所有环境检查 Token 状态
-- 使用 `tokenManager.getToken()` 检查密钥链
-
----
-
-### logout
-
-登出并清除 Token。
-
-**Usage:**
-```
-barista liberica auth logout [options]
-```
-
-**Options:**
-| 选项 | 类型 | 必填 | 默认值 | 说明 |
-|------|------|------|--------|------|
-| --env | string | ⬜ | 当前上下文 | 目标环境 |
-| --all | boolean | ⬜ | false | 清除所有 Liberica Token |
-
-**Examples:**
-
-Logout current environment:
-```bash
-barista liberica auth logout --env dev
-```
-
-Logout all environments:
-```bash
-barista liberica auth logout --all
-```
-
-**Implementation Notes:**
-- 使用 `tokenManager.deleteToken()` 删除指定环境的 Token
-- 使用 `tokenManager.findAllTokens()` 遍历所有 Token
-
----
-
-## Design Reference
-
-完整设计文档见：[命令设计规范](../../COMMAND_DESIGN_SPEC.md#61-示例liberica-auth-login-命令)