@optima-chat/commerce-cli 1.0.0

package/dist/api/rest/auth.d.ts

@@ -0,0 +1,56 @@
+interface DeviceAuthResponse {
+    device_code: string;
+    user_code: string;
+    verification_uri: string;
+    verification_uri_complete?: string;
+    expires_in: number;
+    interval: number;
+}
+interface TokenResponse {
+    access_token?: string;
+    refresh_token?: string;
+    token_type?: string;
+    expires_in?: number;
+    scope?: string;
+    error?: string;
+    error_description?: string;
+}
+interface UserResponse {
+    id: string;
+    email: string;
+    name: string;
+    role: string;
+}
+declare class AuthApiClient {
+    private client;
+    constructor();
+    /**
+     * 重新初始化客户端（当 Auth URL 改变时调用）
+     */
+    reinitialize(): void;
+    /**
+     * 请求 Device Code
+     */
+    requestDeviceCode(): Promise<DeviceAuthResponse>;
+    /**
+     * 轮询获取 Token
+     * 重要: 必须使用 application/x-www-form-urlencoded 格式（符合 RFC 8628）
+     */
+    pollDeviceToken(deviceCode: string, interval: number, expiresIn: number): Promise<TokenResponse>;
+    /**
+     * 获取当前用户信息
+     */
+    getCurrentUser(accessToken: string): Promise<UserResponse>;
+    /**
+     * 刷新 Token
+     */
+    refreshToken(refreshToken: string): Promise<TokenResponse>;
+    /**
+     * 登出（撤销 token）
+     */
+    logout(token: string): Promise<void>;
+    private sleep;
+}
+export declare const authApi: AuthApiClient;
+export {};
+//# sourceMappingURL=auth.d.ts.map

package/dist/api/rest/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/api/rest/auth.ts"],"names":[],"mappings":"AAYA,UAAU,kBAAkB;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,UAAU,aAAa;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,UAAU,YAAY;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,cAAM,aAAa;IACjB,OAAO,CAAC,MAAM,CAAgB;;IAQ9B;;OAEG;IACH,YAAY,IAAI,IAAI;IAIpB;;OAEG;IACG,iBAAiB,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAgBtD;;;OAGG;IACG,eAAe,CACnB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,aAAa,CAAC;IA+EzB;;OAEG;IACG,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAShE;;OAEG;IACG,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAkBhE;;OAEG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiB1C,OAAO,CAAC,KAAK;CAGd;AAGD,eAAO,MAAM,OAAO,eAAsB,CAAC"}

package/dist/api/rest/auth.js

@@ -0,0 +1,150 @@
+import { createAuthenticatedClient } from './base.js';
+import { getAuthUrl, getCurrentEnvConfig } from '../../utils/config.js';
+/**
+ * 根据当前环境返回对应的 OAuth Client ID
+ */
+function getClientId() {
+    const envConfig = getCurrentEnvConfig();
+    return envConfig.clientId;
+}
+class AuthApiClient {
+    client;
+    constructor() {
+        // 使用带自动 token 刷新的客户端
+        // 优先级：环境变量 > 配置文件 > 默认值
+        this.client = createAuthenticatedClient(getAuthUrl());
+    }
+    /**
+     * 重新初始化客户端（当 Auth URL 改变时调用）
+     */
+    reinitialize() {
+        this.client = createAuthenticatedClient(getAuthUrl());
+    }
+    /**
+     * 请求 Device Code
+     */
+    async requestDeviceCode() {
+        const response = await this.client.post('/api/v1/oauth/device/authorize', {
+            client_id: getClientId(),
+            scope: 'read user merchant',
+        }, {
+            headers: {
+                'Content-Type': 'application/json',
+            },
+        });
+        return response.data;
+    }
+    /**
+     * 轮询获取 Token
+     * 重要: 必须使用 application/x-www-form-urlencoded 格式（符合 RFC 8628）
+     */
+    async pollDeviceToken(deviceCode, interval, expiresIn) {
+        const startTime = Date.now();
+        const timeout = expiresIn * 1000;
+        let currentInterval = interval;
+        while (Date.now() - startTime < timeout) {
+            try {
+                // 使用 URLSearchParams 构造 form-urlencoded 数据
+                const params = new URLSearchParams();
+                params.append('grant_type', 'urn:ietf:params:oauth:grant-type:device_code');
+                params.append('device_code', deviceCode);
+                params.append('client_id', getClientId());
+                const response = await this.client.post('/api/v1/oauth/device/token', params, {
+                    headers: {
+                        'Content-Type': 'application/x-www-form-urlencoded',
+                    },
+                });
+                const data = response.data;
+                // 成功获取 token
+                if (data.access_token) {
+                    return data;
+                }
+                // 继续等待
+                if (data.error === 'authorization_pending') {
+                    await this.sleep(currentInterval * 1000);
+                    continue;
+                }
+                // slow_down: 增加轮询间隔
+                if (data.error === 'slow_down') {
+                    currentInterval += 5;
+                    await this.sleep(currentInterval * 1000);
+                    continue;
+                }
+                // 其他错误（用户拒绝、过期等）
+                return data;
+            }
+            catch (error) {
+                // 处理 HTTP 错误
+                if (error.response?.data) {
+                    const data = error.response.data;
+                    // authorization_pending 不是真正的错误
+                    if (data.error === 'authorization_pending') {
+                        await this.sleep(currentInterval * 1000);
+                        continue;
+                    }
+                    // slow_down
+                    if (data.error === 'slow_down') {
+                        currentInterval += 5;
+                        await this.sleep(currentInterval * 1000);
+                        continue;
+                    }
+                    // 其他错误
+                    return data;
+                }
+                // 网络错误
+                throw error;
+            }
+        }
+        // 超时
+        return {
+            error: 'expired_token',
+            error_description: 'Authorization timed out',
+        };
+    }
+    /**
+     * 获取当前用户信息
+     */
+    async getCurrentUser(accessToken) {
+        const response = await this.client.get('/api/v1/users/me', {
+            headers: {
+                Authorization: `Bearer ${accessToken}`,
+            },
+        });
+        return response.data;
+    }
+    /**
+     * 刷新 Token
+     */
+    async refreshToken(refreshToken) {
+        const params = new URLSearchParams();
+        params.append('grant_type', 'refresh_token');
+        params.append('refresh_token', refreshToken);
+        params.append('client_id', getClientId());
+        const response = await this.client.post('/api/v1/oauth/token', params, {
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+            },
+        });
+        return response.data;
+    }
+    /**
+     * 登出（撤销 token）
+     */
+    async logout(token) {
+        const params = new URLSearchParams();
+        params.append('token', token);
+        params.append('client_id', getClientId());
+        await this.client.post('/api/v1/oauth/revoke', params, {
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+                Authorization: `Bearer ${token}`,
+            },
+        });
+    }
+    sleep(ms) {
+        return new Promise(resolve => setTimeout(resolve, ms));
+    }
+}
+// 导出单例实例
+export const authApi = new AuthApiClient();
+//# sourceMappingURL=auth.js.map

package/dist/api/rest/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/api/rest/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AAEtD,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAExE;;GAEG;AACH,SAAS,WAAW;IAClB,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;IACxC,OAAO,SAAS,CAAC,QAAQ,CAAC;AAC5B,CAAC;AA4BD,MAAM,aAAa;IACT,MAAM,CAAgB;IAE9B;QACE,qBAAqB;QACrB,wBAAwB;QACxB,IAAI,CAAC,MAAM,GAAG,yBAAyB,CAAC,UAAU,EAAE,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,YAAY;QACV,IAAI,CAAC,MAAM,GAAG,yBAAyB,CAAC,UAAU,EAAE,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB;QACrB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACrC,gCAAgC,EAChC;YACE,SAAS,EAAE,WAAW,EAAE;YACxB,KAAK,EAAE,oBAAoB;SAC5B,EACD;YACE,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;aACnC;SACF,CACF,CAAC;QACF,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CACnB,UAAkB,EAClB,QAAgB,EAChB,SAAiB;QAEjB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,SAAS,GAAG,IAAI,CAAC;QACjC,IAAI,eAAe,GAAG,QAAQ,CAAC;QAE/B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,OAAO,EAAE,CAAC;YACxC,IAAI,CAAC;gBACH,2CAA2C;gBAC3C,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;gBACrC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,8CAA8C,CAAC,CAAC;gBAC5E,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;gBACzC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;gBAE1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACrC,4BAA4B,EAC5B,MAAM,EACN;oBACE,OAAO,EAAE;wBACP,cAAc,EAAE,mCAAmC;qBACpD;iBACF,CACF,CAAC;gBAEF,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;gBAE3B,aAAa;gBACb,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;oBACtB,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,OAAO;gBACP,IAAI,IAAI,CAAC,KAAK,KAAK,uBAAuB,EAAE,CAAC;oBAC3C,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;oBACzC,SAAS;gBACX,CAAC;gBAED,oBAAoB;gBACpB,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;oBAC/B,eAAe,IAAI,CAAC,CAAC;oBACrB,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;oBACzC,SAAS;gBACX,CAAC;gBAED,iBAAiB;gBACjB,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,aAAa;gBACb,IAAI,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;oBACzB,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAEjC,gCAAgC;oBAChC,IAAI,IAAI,CAAC,KAAK,KAAK,uBAAuB,EAAE,CAAC;wBAC3C,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;wBACzC,SAAS;oBACX,CAAC;oBAED,YAAY;oBACZ,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;wBAC/B,eAAe,IAAI,CAAC,CAAC;wBACrB,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;wBACzC,SAAS;oBACX,CAAC;oBAED,OAAO;oBACP,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,OAAO;gBACP,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,KAAK;QACL,OAAO;YACL,KAAK,EAAE,eAAe;YACtB,iBAAiB,EAAE,yBAAyB;SAC7C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,WAAmB;QACtC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAe,kBAAkB,EAAE;YACvE,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,WAAW,EAAE;aACvC;SACF,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,YAAoB;QACrC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;QAE1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACrC,qBAAqB,EACrB,MAAM,EACN;YACE,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;SACF,CACF,CAAC;QACF,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;QAE1C,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACpB,sBAAsB,EACtB,MAAM,EACN;YACE,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,aAAa,EAAE,UAAU,KAAK,EAAE;aACjC;SACF,CACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,EAAU;QACtB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACzD,CAAC;CACF;AAED,SAAS;AACT,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC"}

package/dist/api/rest/base.d.ts

@@ -0,0 +1,7 @@
+import { AxiosInstance } from 'axios';
+/**
+ * 创建带认证的 API 客户端
+ * 自动在请求前刷新 token（如果需要）
+ */
+export declare function createAuthenticatedClient(baseURL: string): AxiosInstance;
+//# sourceMappingURL=base.d.ts.map

package/dist/api/rest/base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../src/api/rest/base.ts"],"names":[],"mappings":"AAAA,OAAc,EAAE,aAAa,EAA8B,MAAM,OAAO,CAAC;AAGzE;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,CAiDxE"}

package/dist/api/rest/base.js

@@ -0,0 +1,51 @@
+import axios from 'axios';
+import { ensureValidToken } from '../../utils/config.js';
+/**
+ * 创建带认证的 API 客户端
+ * 自动在请求前刷新 token（如果需要）
+ */
+export function createAuthenticatedClient(baseURL) {
+    const client = axios.create({
+        baseURL,
+        timeout: 30000,
+        headers: {
+            'User-Agent': 'Optima-CLI/0.1.0',
+        },
+    });
+    // 请求拦截器：自动添加 token
+    client.interceptors.request.use(async (config) => {
+        // 跳过不需要认证的请求
+        const skipAuth = [
+            '/api/v1/oauth/device/authorize',
+            '/api/v1/oauth/device/token',
+            '/api/v1/oauth/token',
+        ];
+        const url = config.url || '';
+        if (skipAuth.some(path => url.includes(path))) {
+            return config;
+        }
+        // 获取有效 token（自动刷新）
+        // 如果 token 过期且刷新失败，ensureValidToken() 会抛出 AuthenticationError
+        try {
+            const token = await ensureValidToken();
+            if (token) {
+                config.headers.Authorization = `Bearer ${token}`;
+            }
+            else {
+                // 没有 token，需要登录
+                const { AuthenticationError } = await import('../../utils/error.js');
+                throw new AuthenticationError('未登录，请先执行 optima auth login');
+            }
+        }
+        catch (error) {
+            // Token 刷新失败或未登录，直接拒绝请求
+            // 错误会被传递到命令的 catch 块，由 handleError() 统一处理
+            return Promise.reject(error);
+        }
+        return config;
+    }, (error) => {
+        return Promise.reject(error);
+    });
+    return client;
+}
+//# sourceMappingURL=base.js.map

package/dist/api/rest/base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../src/api/rest/base.ts"],"names":[],"mappings":"AAAA,OAAO,KAAoD,MAAM,OAAO,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAe;IACvD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC1B,OAAO;QACP,OAAO,EAAE,KAAK;QACd,OAAO,EAAE;YACP,YAAY,EAAE,kBAAkB;SACjC;KACF,CAAC,CAAC;IAEH,mBAAmB;IACnB,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAC7B,KAAK,EAAE,MAAkC,EAAE,EAAE;QAC3C,aAAa;QACb,MAAM,QAAQ,GAAG;YACf,gCAAgC;YAChC,4BAA4B;YAC5B,qBAAqB;SACtB,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;QAC7B,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC9C,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,mBAAmB;QACnB,8DAA8D;QAC9D,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,gBAAgB,EAAE,CAAC;YACvC,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,OAAO,CAAC,aAAa,GAAG,UAAU,KAAK,EAAE,CAAC;YACnD,CAAC;iBAAM,CAAC;gBACN,gBAAgB;gBAChB,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;gBACrE,MAAM,IAAI,mBAAmB,CAAC,4BAA4B,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,wBAAwB;YACxB,0CAA0C;YAC1C,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;QACR,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}