@nocobase/cli 2.1.0-alpha.26 → 2.1.0-alpha.28

package/dist/commands/license/plugins/sync.js

@@ -0,0 +1,267 @@
+/**
+ * This file is part of the NocoBase (R) project.
+ * Copyright (c) 2020-2024 NocoBase Co., Ltd.
+ * Authors: NocoBase Team.
+ *
+ * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
+ * For more information, please refer to: https://www.nocobase.com/agreement.
+ */
+import { Command, Flags } from '@oclif/core';
+import pc from 'picocolors';
+import { readFile } from 'node:fs/promises';
+import path from 'node:path';
+import { licenseEnvFlag, licenseJsonFlag, licensePkgUrlFlag, requireLicenseRuntime } from '../shared.js';
+import { syncLicensedPlugins } from './shared.js';
+import { resolvePluginStoragePath } from '../../../lib/plugin-storage.js';
+import { commandOutput } from '../../../lib/run-npm.js';
+import { startTask, stopTask, succeedTask, updateTask } from '../../../lib/ui.js';
+const SYNC_LOADING_DELAY_MS = 1200;
+const SYNC_LOADING_UPDATE_MS = 5000;
+const LOCAL_CLI_PACKAGE_JSON_PATH = 'node_modules/@nocobase/cli/package.json';
+const DOCKER_CLI_PACKAGE_JSON_PATH = '/opt/nb/node_modules/@nocobase/cli/package.json';
+const DEFAULT_DOCKER_REGISTRY = 'nocobase/nocobase';
+const DEFAULT_DOCKER_VERSION = 'alpha';
+function formatActionLabel(action) {
+    switch (action) {
+        case 'installed':
+            return pc.green('installed');
+        case 'updated':
+            return pc.cyan('updated');
+        case 'removed':
+            return pc.yellow('removed');
+        case 'skipped':
+            return pc.dim('skipped');
+    }
+}
+function trimValue(value) {
+    const text = String(value ?? '').trim();
+    return text || undefined;
+}
+function normalizeDockerPlatform(value) {
+    const text = trimValue(value);
+    if (!text || text === 'auto') {
+        return undefined;
+    }
+    if (text === 'linux/amd64' || text === 'linux/arm64') {
+        return text;
+    }
+    return undefined;
+}
+function normalizePluginRegistryVersion(version) {
+    const normalized = version.trim();
+    const rcMatch = normalized.match(/^(.+)-rc\.\d{8,}$/);
+    if (rcMatch) {
+        return rcMatch[1];
+    }
+    const betaMatch = normalized.match(/^(.+-beta\.\d+)\.\d{8,}$/);
+    if (betaMatch) {
+        return betaMatch[1];
+    }
+    const alphaMatch = normalized.match(/^(.+-alpha\.\d+)\.\d{8,}$/);
+    if (alphaMatch) {
+        return alphaMatch[1];
+    }
+    return normalized;
+}
+async function parseVersionFromPackageJson(content, sourceLabel) {
+    let parsed;
+    try {
+        parsed = JSON.parse(content);
+    }
+    catch {
+        throw new Error(`Failed to parse ${sourceLabel}.`);
+    }
+    const version = trimValue(parsed.version);
+    if (!version) {
+        throw new Error(`Missing version in ${sourceLabel}.`);
+    }
+    return version;
+}
+async function resolveLocalAppVersion(runtime) {
+    const packageJsonPath = path.join(runtime.projectRoot, LOCAL_CLI_PACKAGE_JSON_PATH);
+    let content;
+    try {
+        content = await readFile(packageJsonPath, 'utf8');
+    }
+    catch {
+        throw new Error(`Missing ${LOCAL_CLI_PACKAGE_JSON_PATH} for env "${runtime.envName}" at ${packageJsonPath}.`);
+    }
+    return await parseVersionFromPackageJson(content, packageJsonPath);
+}
+async function resolveDockerAppVersion(runtime) {
+    const config = runtime.env.config ?? {};
+    const imageRef = `${trimValue(config.dockerRegistry) || DEFAULT_DOCKER_REGISTRY}:${trimValue(config.downloadVersion) || DEFAULT_DOCKER_VERSION}`;
+    const args = [
+        'run',
+        '--rm',
+        '--network',
+        runtime.workspaceName,
+    ];
+    const dockerPlatform = normalizeDockerPlatform(config.dockerPlatform);
+    if (dockerPlatform) {
+        args.push('--platform', dockerPlatform);
+    }
+    args.push('--entrypoint', 'node', imageRef, '-p', `JSON.stringify(require(${JSON.stringify(DOCKER_CLI_PACKAGE_JSON_PATH)}).version)`);
+    let output;
+    try {
+        output = await commandOutput('docker', args, {
+            errorName: 'docker run',
+        });
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        throw new Error(`Missing ${DOCKER_CLI_PACKAGE_JSON_PATH} for env "${runtime.envName}" inside Docker image ${imageRef}. ${message}`);
+    }
+    const version = trimValue(output.replace(/^"+|"+$/g, ''));
+    if (!version) {
+        throw new Error(`Missing version in ${DOCKER_CLI_PACKAGE_JSON_PATH} for env "${runtime.envName}" inside Docker image ${imageRef}.`);
+    }
+    return version;
+}
+async function resolveManagedAppVersion(runtime) {
+    if (runtime.kind === 'local') {
+        return await resolveLocalAppVersion(runtime);
+    }
+    if (runtime.kind === 'docker') {
+        return await resolveDockerAppVersion(runtime);
+    }
+    throw new Error(`Env "${runtime.envName}" does not support automatic app version detection.`);
+}
+export default class LicensePluginsSync extends Command {
+    static summary = 'Synchronize commercial plugins for the selected env';
+    static description = 'Synchronize the commercial plugins allowed by the current saved license key.';
+    static examples = [
+        '<%= config.bin %> <%= command.id %>',
+        '<%= config.bin %> <%= command.id %> --env app1',
+        '<%= config.bin %> <%= command.id %> --env app1 --dry-run',
+        '<%= config.bin %> <%= command.id %> --env app1 --json',
+    ];
+    static flags = {
+        env: licenseEnvFlag,
+        json: licenseJsonFlag,
+        'pkg-url': licensePkgUrlFlag,
+        'dry-run': Flags.boolean({
+            description: 'Preview plugin changes without installing, upgrading, or removing anything',
+            default: false,
+        }),
+        version: Flags.string({
+            description: 'Registry version or dist-tag to synchronize. Defaults to the current workspace version.',
+        }),
+        verbose: Flags.boolean({
+            char: 'V',
+            description: 'Show detailed per-plugin sync logs',
+            default: false,
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(LicensePluginsSync);
+        const runtime = await requireLicenseRuntime(flags.env);
+        const version = trimValue(flags.version) || await resolveManagedAppVersion(runtime);
+        const registryVersion = normalizePluginRegistryVersion(version);
+        const shouldStreamLogs = !flags.json && Boolean(flags.verbose);
+        const pluginStoragePath = resolvePluginStoragePath(runtime.env.storagePath);
+        const shouldShowLoading = !flags.json && !flags.verbose;
+        if (!flags.json) {
+            this.log(pc.bold(flags['dry-run']
+                ? `Commercial plugin sync preview for env "${runtime.envName}"`
+                : `Commercial plugin sync for env "${runtime.envName}"`));
+            this.log(pc.dim(`App version: ${version}`));
+            if (registryVersion !== version) {
+                this.log(pc.dim(`Download version: ${registryVersion}`));
+            }
+            this.log(pc.dim(`Plugin storage path: ${pluginStoragePath}`));
+        }
+        let loadingStarted = false;
+        let loadingTimer;
+        let updateTimer;
+        let elapsedSeconds = 0;
+        if (shouldShowLoading) {
+            loadingTimer = setTimeout(() => {
+                loadingStarted = true;
+                elapsedSeconds = Math.floor(SYNC_LOADING_DELAY_MS / 1000);
+                startTask(flags['dry-run']
+                    ? 'Preparing commercial plugin sync preview. Please wait...'
+                    : 'Synchronizing commercial plugins. Please wait...');
+                updateTimer = setInterval(() => {
+                    elapsedSeconds += Math.floor(SYNC_LOADING_UPDATE_MS / 1000);
+                    updateTask(flags['dry-run']
+                        ? `Preparing commercial plugin sync preview. Still working... (${elapsedSeconds}s elapsed)`
+                        : `Synchronizing commercial plugins. Still working... (${elapsedSeconds}s elapsed)`);
+                }, SYNC_LOADING_UPDATE_MS);
+            }, SYNC_LOADING_DELAY_MS);
+        }
+        let result;
+        try {
+            result = await syncLicensedPlugins(runtime, {
+                pkgUrl: flags['pkg-url'],
+                version: registryVersion,
+                dryRun: Boolean(flags['dry-run']),
+                onProgress: shouldStreamLogs
+                    ? async (detail) => {
+                        this.log(`${formatActionLabel(detail.action)} ${pc.bold(detail.packageName)}`);
+                        this.log(pc.dim(`  output: ${detail.outputDir}`));
+                        if (detail.warning) {
+                            this.log(pc.yellow(`  warning: ${detail.warning}`));
+                        }
+                    }
+                    : undefined,
+            });
+        }
+        finally {
+            if (loadingTimer) {
+                clearTimeout(loadingTimer);
+            }
+            if (updateTimer) {
+                clearInterval(updateTimer);
+            }
+            if (loadingStarted) {
+                stopTask();
+            }
+        }
+        const payload = {
+            ok: true,
+            env: runtime.envName,
+            kind: runtime.kind,
+            dryRun: Boolean(flags['dry-run']),
+            version,
+            registryVersion,
+            ...result,
+        };
+        if (flags.json) {
+            this.log(JSON.stringify(payload, null, 2));
+            return;
+        }
+        if (loadingStarted) {
+            succeedTask(flags['dry-run']
+                ? 'Commercial plugin sync preview is ready.'
+                : 'Commercial plugin sync completed.');
+        }
+        if (!flags.verbose) {
+            const changes = [];
+            if (result.installed.length > 0) {
+                changes.push(pc.green(`${result.installed.length} installed`));
+            }
+            if (result.updated.length > 0) {
+                changes.push(pc.cyan(`${result.updated.length} updated`));
+            }
+            if (result.removed.length > 0) {
+                changes.push(pc.yellow(`${result.removed.length} removed`));
+            }
+            if (result.skipped.length > 0) {
+                changes.push(pc.dim(`${result.skipped.length} skipped`));
+            }
+            if (changes.length === 0) {
+                changes.push(pc.dim('no plugin changes'));
+            }
+            this.log(`Result: ${changes.join(', ')}`);
+        }
+        else {
+            this.log(`Summary: ${result.installed.length} installed, ${result.updated.length} updated, ${result.removed.length} removed, ${result.skipped.length} skipped, ${result.warnings.length} warnings`);
+        }
+        if (result.warnings.length > 0 && !flags.verbose) {
+            for (const warning of result.warnings) {
+                this.log(pc.yellow(`Warning: ${warning}`));
+            }
+        }
+    }
+}

package/dist/commands/license/shared.js

@@ -0,0 +1,414 @@
+/**
+ * This file is part of the NocoBase (R) project.
+ * Copyright (c) 2020-2024 NocoBase Co., Ltd.
+ * Authors: NocoBase Team.
+ *
+ * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
+ * For more information, please refer to: https://www.nocobase.com/agreement.
+ */
+import { Flags } from '@oclif/core';
+import { mkdir, readFile, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+import { getEnvAsync, getInstanceIdAsync, keyDecrypt } from '@nocobase/license-kit';
+import _ from 'lodash';
+import { checkExternalDbConnection, readExternalDbConnectionConfig, } from "../../lib/db-connection-check.js";
+import { formatMissingManagedAppEnvMessage, resolveManagedAppRuntime } from '../../lib/app-runtime.js';
+import { buildRuntimeEnvVars } from '../../lib/runtime-env-vars.js';
+import { resolveLicensePkgUrlFromConfig } from '../../lib/cli-config.js';
+import { commandOutput } from '../../lib/run-npm.js';
+import { appUrl } from '../env/shared.js';
+export const licenseEnvFlag = Flags.string({
+    char: 'e',
+    description: 'CLI env name (from `nb env` / `nb init`). Defaults to the current env when omitted',
+});
+export const licenseJsonFlag = Flags.boolean({
+    description: 'Output the result as JSON',
+    default: false,
+});
+const DEFAULT_LICENSE_PKG_URL = 'https://pkg.nocobase.com/';
+const DEFAULT_DOCKER_REGISTRY = 'nocobase/nocobase';
+const DEFAULT_DOCKER_VERSION = 'alpha';
+export const licensePkgUrlFlag = Flags.string({
+    description: 'Commercial package service base URL',
+    hidden: true,
+});
+export async function requireLicenseRuntime(envName) {
+    const runtime = await resolveManagedAppRuntime(envName);
+    if (!runtime) {
+        throw new Error(formatMissingManagedAppEnvMessage(envName));
+    }
+    return runtime;
+}
+export function resolveLicenseDir(runtime) {
+    return path.resolve(runtime.env.storagePath, '.license');
+}
+export function resolveInstanceIdFile(runtime) {
+    return path.resolve(resolveLicenseDir(runtime), 'instance-id');
+}
+export function resolveLicenseKeyFile(runtime) {
+    return path.resolve(resolveLicenseDir(runtime), 'license-key');
+}
+export async function readSavedInstanceId(runtime) {
+    try {
+        const value = await readFile(resolveInstanceIdFile(runtime), 'utf8');
+        const normalized = value.trim();
+        return normalized || undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function trimValue(value) {
+    const text = String(value ?? '').trim();
+    return text || undefined;
+}
+function normalizeDockerPlatform(value) {
+    const text = trimValue(value);
+    if (!text || text === 'auto') {
+        return undefined;
+    }
+    if (text === 'linux/amd64' || text === 'linux/arm64') {
+        return text;
+    }
+    return undefined;
+}
+function resolveDockerLicenseImageRef(runtime) {
+    const config = runtime.env.config ?? {};
+    return `${trimValue(config.dockerRegistry) || DEFAULT_DOCKER_REGISTRY}:${trimValue(config.downloadVersion) || DEFAULT_DOCKER_VERSION}`;
+}
+function buildDockerLicenseDbFlagArgs(envVars) {
+    return [
+        '--db-dialect',
+        String(envVars.DB_DIALECT ?? ''),
+        '--db-host',
+        String(envVars.DB_HOST ?? ''),
+        '--db-port',
+        String(envVars.DB_PORT ?? ''),
+        '--db-database',
+        String(envVars.DB_DATABASE ?? ''),
+        '--db-user',
+        String(envVars.DB_USER ?? ''),
+        '--db-password',
+        String(envVars.DB_PASSWORD ?? ''),
+    ];
+}
+async function runDockerLicenseJsonCommand(runtime, commandArgs) {
+    const args = [
+        'run',
+        '--rm',
+        '--network',
+        runtime.dockerNetworkName || runtime.workspaceName,
+    ];
+    const dockerPlatform = normalizeDockerPlatform(runtime.env.config?.dockerPlatform);
+    if (dockerPlatform) {
+        args.push('--platform', dockerPlatform);
+    }
+    args.push('--entrypoint', 'nb', resolveDockerLicenseImageRef(runtime), ...commandArgs, '--json');
+    const output = await commandOutput('docker', args, {
+        errorName: 'docker run',
+    });
+    try {
+        return JSON.parse(output);
+    }
+    catch {
+        throw new Error(`Failed to parse Docker license command response: ${output}`);
+    }
+}
+function buildLicenseDbConfigFromEnvVars(envVars) {
+    return {
+        builtinDb: false,
+        dbDialect: trimValue(envVars.DB_DIALECT),
+        dbHost: trimValue(envVars.DB_HOST),
+        dbPort: trimValue(envVars.DB_PORT),
+        dbDatabase: trimValue(envVars.DB_DATABASE),
+        dbUser: trimValue(envVars.DB_USER),
+        dbPassword: envVars.DB_PASSWORD,
+    };
+}
+export async function validateLicenseDbConnectionFromEnvVars(envVars) {
+    const connectionConfig = readExternalDbConnectionConfig(buildLicenseDbConfigFromEnvVars(envVars));
+    if (!connectionConfig) {
+        throw new Error('Unsupported or incomplete database settings for instance ID generation.');
+    }
+    const validationError = await checkExternalDbConnection(connectionConfig);
+    if (validationError) {
+        throw new Error(validationError);
+    }
+}
+export async function withLicenseEnvVars(nextEnv, task) {
+    const previous = {};
+    for (const [key, value] of Object.entries(nextEnv)) {
+        previous[key] = process.env[key];
+        process.env[key] = value;
+    }
+    try {
+        return await task();
+    }
+    finally {
+        for (const key of Object.keys(nextEnv)) {
+            const value = previous[key];
+            if (value === undefined) {
+                delete process.env[key];
+            }
+            else {
+                process.env[key] = value;
+            }
+        }
+    }
+}
+async function withLicenseEnv(runtime, task) {
+    return await withLicenseEnvVars(await buildRuntimeEnvVars(runtime), task);
+}
+export async function getCurrentLicenseEnv(runtime) {
+    if (runtime.kind === 'docker') {
+        const envVars = await buildRuntimeEnvVars(runtime);
+        const payload = await runDockerLicenseJsonCommand(runtime, [
+            'license',
+            'env',
+            ...buildDockerLicenseDbFlagArgs(envVars),
+        ]);
+        return payload?.env;
+    }
+    return await withLicenseEnv(runtime, async () => await getEnvAsync());
+}
+export async function generateInstanceIdFromEnvVars(envVars) {
+    const instanceId = String(await withLicenseEnvVars(envVars, async () => await getInstanceIdAsync())).trim();
+    if (!instanceId) {
+        throw new Error('Generated instance ID is empty.');
+    }
+    return instanceId;
+}
+export async function generateValidatedInstanceIdFromEnvVars(envVars) {
+    await validateLicenseDbConnectionFromEnvVars(envVars);
+    return await generateInstanceIdFromEnvVars(envVars);
+}
+async function generateInstanceIdForDockerRuntime(runtime) {
+    const envVars = await buildRuntimeEnvVars(runtime);
+    const payload = await runDockerLicenseJsonCommand(runtime, [
+        'license',
+        'generate-id',
+        ...buildDockerLicenseDbFlagArgs(envVars),
+    ]);
+    const instanceId = trimValue(payload.instanceId);
+    if (!instanceId) {
+        throw new Error('Docker instance ID generation did not return an instance ID.');
+    }
+    return instanceId;
+}
+export async function generateInstanceIdForRuntime(runtime) {
+    if (runtime.kind === 'docker') {
+        return await generateInstanceIdForDockerRuntime(runtime);
+    }
+    if (runtime.kind === 'local') {
+        return await generateValidatedInstanceIdFromEnvVars(await buildRuntimeEnvVars(runtime));
+    }
+    throw new Error(`Env "${runtime.envName}" does not support automatic instance ID generation.`);
+}
+export async function saveInstanceId(runtime, instanceId) {
+    const normalized = String(instanceId ?? '').trim();
+    if (!normalized) {
+        throw new Error('Generated instance ID is empty.');
+    }
+    await mkdir(resolveLicenseDir(runtime), { recursive: true });
+    await writeFile(resolveInstanceIdFile(runtime), `${normalized}\n`);
+    return normalized;
+}
+export async function generateAndSaveInstanceId(runtime) {
+    const instanceId = await generateInstanceIdForRuntime(runtime);
+    return await saveInstanceId(runtime, instanceId);
+}
+export async function ensureInstanceId(runtime, options = {}) {
+    if (!options.force) {
+        const saved = await readSavedInstanceId(runtime);
+        if (saved) {
+            return saved;
+        }
+    }
+    return await generateAndSaveInstanceId(runtime);
+}
+export function parseLicenseKey(key) {
+    try {
+        return JSON.parse(keyDecrypt(key));
+    }
+    catch {
+        throw new Error('invalid');
+    }
+}
+export async function saveLicenseKey(runtime, key) {
+    await mkdir(resolveLicenseDir(runtime), { recursive: true });
+    const filePath = resolveLicenseKeyFile(runtime);
+    await writeFile(filePath, key.trim());
+    return filePath;
+}
+export async function readSavedLicenseKey(runtime) {
+    try {
+        const value = await readFile(resolveLicenseKeyFile(runtime), 'utf8');
+        const normalized = value.trim();
+        return normalized || undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function matchSingleDomain(licenseDomain, currentDomain) {
+    let hostname = '';
+    let port = '';
+    try {
+        const url = new URL(currentDomain);
+        hostname = url.hostname;
+        port = url.port ? `:${url.port}` : '';
+    }
+    catch {
+        return false;
+    }
+    const fullDomain = hostname + port;
+    if (!licenseDomain.includes('*')) {
+        return fullDomain === licenseDomain;
+    }
+    const base = licenseDomain.replace('*', '');
+    return fullDomain.endsWith(base);
+}
+export function isDomainMatch(currentDomain, keyData) {
+    if (!keyData?.licenseKey?.domain || !currentDomain) {
+        return false;
+    }
+    const licenseDomains = String(keyData.licenseKey.domain)
+        .split(',')
+        .map((value) => value.trim())
+        .filter(Boolean);
+    return licenseDomains.some((licenseDomain) => matchSingleDomain(licenseDomain, currentDomain));
+}
+export function isDbMatch(env, keyData) {
+    const currentDb = env?.db;
+    const licenseDb = keyData?.instanceData?.db;
+    if (!currentDb || !licenseDb) {
+        return false;
+    }
+    if (currentDb?.id && licenseDb?.id) {
+        return currentDb.id === licenseDb.id;
+    }
+    return _.isEqual(_.omit(currentDb, ['id']), _.omit(licenseDb, ['id']));
+}
+export function isSysMatch(env, keyData) {
+    const instance = keyData?.instanceData;
+    if (!env || !instance) {
+        return false;
+    }
+    const normalize = (item) => ({
+        sys: item?.sys ?? null,
+        osVer: item?.osVer ?? null,
+    });
+    return _.isEqual(normalize(env), normalize(instance));
+}
+export async function getLicenseStatus(keyData) {
+    if (!keyData) {
+        return 'invalid';
+    }
+    if (keyData.licenseKey?.licenseStatus === 'invalid') {
+        return 'invalid';
+    }
+    const domain = String(keyData.service?.domain ?? '').trim();
+    const accessKeyId = String(keyData.accessKeyId ?? '').trim();
+    const accessKeySecret = String(keyData.accessKeySecret ?? '').trim();
+    if (!domain || !accessKeyId || !accessKeySecret) {
+        return 'active';
+    }
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), 5000);
+    try {
+        const response = await fetch(`${domain.replace(/\/$/, '')}/api/license_keys:getKeyStatus`, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                ...(keyData.service?.headers ?? {}),
+            },
+            body: JSON.stringify({
+                access_key_id: accessKeyId,
+                access_key_secret: accessKeySecret,
+            }),
+            signal: controller.signal,
+        });
+        const payload = await response.json();
+        return payload?.data?.status === 'active' ? 'active' : 'invalid';
+    }
+    catch {
+        return 'active';
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}
+export async function validateLicenseKey(runtime, key) {
+    let keyData;
+    let keyStatus;
+    try {
+        keyData = parseLicenseKey(key);
+    }
+    catch {
+        keyStatus = 'invalid';
+    }
+    const currentEnv = await getCurrentLicenseEnv(runtime);
+    const currentDomain = appUrl(runtime);
+    const dbMatch = isDbMatch(currentEnv, keyData);
+    const sysMatch = isSysMatch(currentEnv, keyData);
+    const envMatch = dbMatch && sysMatch;
+    const domainMatch = isDomainMatch(currentDomain, keyData);
+    const licenseStatus = await getLicenseStatus(keyData);
+    return {
+        current: {
+            env: currentEnv,
+            domain: currentDomain ? new URL(currentDomain).host : '',
+        },
+        keyData,
+        keyStatus,
+        dbMatch,
+        sysMatch,
+        envMatch,
+        domainMatch,
+        licenseStatus,
+    };
+}
+export function redactLicenseKey(value) {
+    const text = String(value ?? '').trim();
+    if (!text) {
+        return '';
+    }
+    if (text.length <= 8) {
+        return '*'.repeat(text.length);
+    }
+    return `${text.slice(0, 4)}...${text.slice(-4)}`;
+}
+export async function resolveLicenseServiceUrl(value) {
+    return (await resolveLicensePkgUrl(value)).replace(/\/+$/, '');
+}
+export async function resolveLicensePkgUrl(value) {
+    const normalized = String(value ?? '').trim() || await resolveLicensePkgUrlFromConfig();
+    return normalized.replace(/\/+$/, '') + '/';
+}
+function shouldRedactOutputKey(key) {
+    return /accesskeyid|accesskeysecret|secret|token|password|authorization/i.test(key);
+}
+function redactOutputValue(value) {
+    const text = String(value ?? '').trim();
+    if (!text) {
+        return '';
+    }
+    if (text.length <= 8) {
+        return '*'.repeat(text.length);
+    }
+    return `${text.slice(0, 2)}***${text.slice(-2)}`;
+}
+export function sanitizeLicenseOutput(value) {
+    if (Array.isArray(value)) {
+        return value.map((item) => sanitizeLicenseOutput(item));
+    }
+    if (value && typeof value === 'object') {
+        return Object.fromEntries(Object.entries(value).map(([key, nestedValue]) => [
+            key,
+            shouldRedactOutputKey(key)
+                ? redactOutputValue(String(nestedValue ?? ''))
+                : sanitizeLicenseOutput(nestedValue),
+        ]));
+    }
+    return value;
+}