npm - @thinkingai/ae-cli - Versions diffs - 6.0.48-customer.1 → 6.0.48-workbuddy - Mend

@thinkingai/ae-cli 6.0.48-customer.1 → 6.0.48-workbuddy

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (80) hide show

package/dist/auth-QPEVVBKT.js DELETED Viewed

@@ -1,465 +0,0 @@
-import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
-import {
-  getLocalCliPackageInfo
-} from "./chunk-E2JKXMVO.js";
-import {
-  printError,
-  printOutput,
-  runHostCompatCheck
-} from "./chunk-KEWVSO64.js";
-import {
-  CliTokenValidationUnavailableError,
-  clearCliToken,
-  mintCliToken,
-  validateCliTokenOnServer
-} from "./chunk-RWXIXOZG.js";
-import {
-  SecureStoreAuthError,
-  clear,
-  load,
-  missingAeHostGuidance,
-  missingAeHostHint,
-  resolveHost,
-  save
-} from "./chunk-O6K2ODUE.js";
-import {
-  getFallbackCliToken,
-  loadConfig,
-  normalizeUrl,
-  saveConfig
-} from "./chunk-KZ6ZHF5J.js";
-import {
-  PermissionError
-} from "./chunk-533JK3YX.js";
-import {
-  logger
-} from "./chunk-FR2EDAQM.js";
-// src/core/device-auth.ts
-import { execFileSync } from "child_process";
-var DeviceFlowUnsupportedError = class extends Error {
-  constructor() {
-    super("This AE server does not support device code login (it may be an older server version).");
-    this.name = "DeviceFlowUnsupportedError";
-  }
-};
-function looksLikeMissingEndpoint(status, contentType, body) {
-  if (status === 404) return true;
-  if (contentType && contentType.toLowerCase().includes("text/html")) return true;
-  const head = body.trimStart().toLowerCase();
-  return head.startsWith("<!doctype html") || head.startsWith("<html");
-}
-function openBrowser(url, _execFile) {
-  let parsedUrl;
-  try {
-    parsedUrl = new URL(url);
-  } catch {
-    logger.warn(`openBrowser: invalid URL, not opening`);
-    return false;
-  }
-  if (!["http:", "https:"].includes(parsedUrl.protocol)) {
-    logger.warn(`openBrowser: unsafe protocol "${parsedUrl.protocol}", not opening`);
-    return false;
-  }
-  const safeLogUrl = `${parsedUrl.origin}${parsedUrl.pathname}`;
-  const exec = _execFile ?? execFileSync;
-  try {
-    if (process.platform === "darwin") {
-      exec("open", [url], { timeout: 5e3 });
-      return true;
-    }
-    if (process.platform === "win32") {
-      exec("cmd", ["/c", "start", "", url], { timeout: 5e3 });
-      return true;
-    }
-    exec("xdg-open", [url], { timeout: 5e3 });
-    return true;
-  } catch (e) {
-    logger.warn(`openBrowser: failed to open ${safeLogUrl}: ${e.message}`);
-    return false;
-  }
-}
-async function authorizeDevice(host) {
-  const base = host.replace(/\/+$/, "");
-  const url = `${base}/api/auth/device/authorize`;
-  let resp;
-  try {
-    resp = await fetch(url, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" }
-    });
-  } catch (e) {
-    throw new Error(`Device authorize request failed: ${e.message}`);
-  }
-  const contentType = resp.headers.get("content-type");
-  const text = await resp.text().catch(() => "");
-  if (looksLikeMissingEndpoint(resp.status, contentType, text)) {
-    throw new DeviceFlowUnsupportedError();
-  }
-  if (!resp.ok) {
-    throw new Error(`Device authorize returned HTTP ${resp.status}: ${text}`);
-  }
-  let body;
-  try {
-    body = JSON.parse(text);
-  } catch {
-    throw new Error("Device authorize returned invalid JSON");
-  }
-  if (!body.device_code || !body.user_code) {
-    throw new Error("Device authorize response missing required fields");
-  }
-  return body;
-}
-async function pollDeviceToken(host, deviceCode) {
-  const base = host.replace(/\/+$/, "");
-  const url = `${base}/api/auth/device/token`;
-  let resp;
-  try {
-    resp = await fetch(url, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ device_code: deviceCode })
-    });
-  } catch (e) {
-    return { status: "error", message: `Network error: ${e.message}` };
-  }
-  if (resp.status === 200) {
-    let body;
-    try {
-      body = await resp.json();
-    } catch {
-      return { status: "error", message: "Token response is not valid JSON" };
-    }
-    if (!body.access_token) {
-      return { status: "error", message: "Token response missing access_token" };
-    }
-    return { status: "approved", tokens: body };
-  }
-  if (resp.status === 400) {
-    let errorBody;
-    try {
-      errorBody = await resp.json();
-    } catch {
-      errorBody = {};
-    }
-    const err = errorBody.error;
-    if (err === "authorization_pending") return { status: "pending" };
-    if (err === "slow_down") return { status: "slow_down" };
-    if (err === "expired_token") return { status: "expired" };
-    return { status: "error", message: `Unknown error: ${err ?? "unknown"}` };
-  }
-  if (resp.status === 403) {
-    let errorBody = {};
-    try {
-      errorBody = await resp.json();
-    } catch {
-    }
-    return {
-      status: "denied",
-      code: errorBody.code ?? "CLI_ACCESS_DISABLED",
-      message: errorBody.message ?? errorBody.error ?? "CLI access is disabled for this account.",
-      hint: errorBody.hint
-    };
-  }
-  const contentType = resp.headers.get("content-type");
-  const text = await resp.text().catch(() => "");
-  if (looksLikeMissingEndpoint(resp.status, contentType, text)) {
-    return { status: "unsupported" };
-  }
-  return { status: "error", message: `Unexpected HTTP ${resp.status} from token endpoint` };
-}
-function buildVerificationUrl(host, userCode) {
-  return `${host.replace(/\/+$/, "")}/device-activate?user_code=${encodeURIComponent(userCode)}`;
-}
-async function pollDeviceFlow(host, deviceCode, options = {}, onStatus) {
-  const emit = (msg) => {
-    if (onStatus) onStatus(msg);
-  };
-  let intervalMs = options.intervalMs ?? 5e3;
-  const expiresIn = options.expiresIn ?? 300;
-  const deadline = Date.now() + expiresIn * 1e3;
-  let pollCount = 0;
-  while (Date.now() < deadline) {
-    await sleep(intervalMs);
-    pollCount++;
-    const result = await pollDeviceToken(host, deviceCode);
-    if (result.status === "approved") {
-      emit(`Authorization successful! (polled ${pollCount} time(s))`);
-      return result.tokens;
-    }
-    if (result.status === "pending") {
-      if (pollCount % 5 === 0) {
-        const remaining = Math.max(0, Math.round((deadline - Date.now()) / 1e3));
-        emit(`Waiting for authorization... (expires in ${remaining}s)`);
-      }
-      logger.info(`device-auth: poll #${pollCount} pending`);
-      continue;
-    }
-    if (result.status === "slow_down") {
-      intervalMs += 5e3;
-      logger.info(`device-auth: slow_down received, new interval=${intervalMs}ms`);
-      continue;
-    }
-    if (result.status === "expired") {
-      throw new Error(
-        `Device code has expired. Please run ae-cli auth login again to restart the authorization flow.`
-      );
-    }
-    if (result.status === "denied") {
-      throw new PermissionError(result.message, result.code, result.hint);
-    }
-    if (result.status === "unsupported") {
-      throw new DeviceFlowUnsupportedError();
-    }
-    if (result.status === "error") {
-      logger.warn(`device-auth: poll error: ${result.message}`);
-      emit(`Poll error: ${result.message}`);
-      if (result.message.includes("HTTP 401") || result.message.includes("HTTP 403")) {
-        throw new Error(`Authorization denied (${result.message}). Please check your configuration or run ae-cli auth login again.`);
-      }
-      continue;
-    }
-  }
-  throw new Error(
-    `Authorization timed out (not completed within ${expiresIn}s). Please run ae-cli auth login again.`
-  );
-}
-async function runDeviceFlow(host, options = {}, onStatus) {
-  const emit = (msg) => {
-    if (onStatus) onStatus(msg);
-  };
-  emit("Requesting authorization code from server...");
-  const auth = await authorizeDevice(host);
-  const userCode = auth.user_code;
-  const verifyUrl = buildVerificationUrl(host, userCode);
-  const expiresIn = auth.expires_in ?? 300;
-  emit("");
-  emit(`Verification code: ${userCode}`);
-  emit(`Open the following link in your browser to complete authorization:`);
-  emit(`  ${verifyUrl}`);
-  emit("");
-  if (!options.noBrowser) {
-    const opened = openBrowser(verifyUrl);
-    if (opened) {
-      emit("(Attempted to open the link in your browser)");
-    } else {
-      emit("(Could not open browser automatically; please copy the link above manually)");
-    }
-    emit("");
-  }
-  return pollDeviceFlow(host, auth.device_code, { intervalMs: (auth.interval ?? 5) * 1e3, expiresIn }, onStatus);
-}
-function sleep(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
-// src/commands/auth.ts
-var HOST_OPTION_DESC = "Override active AE host URL (e.g., https://ta.thinkingdata.cn)";
-function getExplicitAuthHostOverride(program, opts) {
-  return opts.host || program.opts().host;
-}
-function resolveAuthHost(program, opts) {
-  return resolveHost(getExplicitAuthHostOverride(program, opts));
-}
-async function validateExistingCliToken(host, cliToken) {
-  try {
-    await validateCliTokenOnServer(host, cliToken);
-    return true;
-  } catch (error) {
-    if (error instanceof CliTokenValidationUnavailableError) {
-      logger.warn(`auth status: ${error.message}; trusting the stored CLI token for compatibility`);
-      return true;
-    }
-    if (!(error instanceof SecureStoreAuthError)) {
-      throw error;
-    }
-    printError("auth", error.message);
-    process.exitCode = 1;
-    return false;
-  }
-}
-function activateHostAfterLogin(host, explicitHostOverride) {
-  if (!explicitHostOverride) return;
-  const normalized = normalizeUrl(host);
-  const config = loadConfig();
-  if (!config.hosts[normalized]) {
-    config.hosts[normalized] = { label: normalized };
-  }
-  config.activeHost = normalized;
-  saveConfig(config);
-  logger.info(`Active host set to ${normalized} after login`);
-}
-async function persistDeviceTokens(host, tokens) {
-  const DEFAULT_EXPIRES_IN = 72e3;
-  const MAX_EXPIRES_IN = 86400 * 365;
-  let expiresInSeconds = tokens.expires_in ?? DEFAULT_EXPIRES_IN;
-  if (!Number.isFinite(expiresInSeconds) || expiresInSeconds <= 0 || expiresInSeconds > MAX_EXPIRES_IN) {
-    logger.warn(`auth login: expires_in=${tokens.expires_in} is out of range, falling back to ${DEFAULT_EXPIRES_IN}s`);
-    expiresInSeconds = DEFAULT_EXPIRES_IN;
-  }
-  const expiresAt = new Date(Date.now() + expiresInSeconds * 1e3).toISOString();
-  const cliToken = await mintCliToken(host, tokens.access_token, false);
-  save(host, {
-    accessToken: tokens.access_token,
-    refreshToken: tokens.refresh_token ?? "",
-    accessExpiresAt: expiresAt,
-    cliToken
-  });
-  await runHostCompatCheck(getLocalCliPackageInfo(), host);
-}
-function loginSummary(host, tokens) {
-  return {
-    authenticated: true,
-    host,
-    token: tokens.access_token.slice(0, 8) + "..."
-  };
-}
-function resolveLoginTeClaudeBase(host) {
-  const base = host.replace(/\/+$/, "");
-  const basePath = process.env.TE_CLAUDE_BASE_PATH || "/agent";
-  return base.endsWith(basePath) ? base : base + basePath;
-}
-function registerAuth(program) {
-  const auth = program.command("auth").description("Authentication management");
-  auth.command("login").description("Log in to AE using the device code flow (cross-platform; --no-browser to print URL only)").option("--host <url>", HOST_OPTION_DESC).option("--no-browser", "Do not auto-open the browser; only print the authorization URL (headless / Linux)").option("--no-wait", "Request the device code and print the authorization URL as JSON, then exit without polling (for AI agents / split-flow). Resume with --device-code").option("--device-code <code>", "Resume a split-flow login: poll for the given device code until authorized, then save the token").action(async (opts) => {
-    const explicitHost = getExplicitAuthHostOverride(program, opts);
-    const host = resolveAuthHost(program, opts);
-    if (!host) {
-      printError("config", "No AE host configured.", missingAeHostHint());
-      process.exit(1);
-    }
-    const config = loadConfig();
-    if (!config.hosts[host]) {
-      config.hosts[host] = { label: host };
-      if (!config.activeHost) {
-        config.activeHost = host;
-      }
-      saveConfig(config);
-      logger.info(`Host config auto-saved for ${host}`);
-      process.stderr.write(`[ae-cli] Config saved for ${host}
-`);
-    }
-    const noBrowser = !opts.browser;
-    const fmt = program.opts().format || "json";
-    const teClaudeBase = resolveLoginTeClaudeBase(host);
-    const emit = (msg) => process.stderr.write(`[ae-cli] ${msg}
-`);
-    try {
-      if (opts.deviceCode) {
-        const tokens2 = await pollDeviceFlow(teClaudeBase, opts.deviceCode, {}, emit);
-        await persistDeviceTokens(host, tokens2);
-        activateHostAfterLogin(host, explicitHost);
-        logger.info(`Device flow login successful for ${host} (resumed)`);
-        emit("Login successful! Token saved securely.");
-        await printOutput(loginSummary(host, tokens2), fmt);
-        return;
-      }
-      if (opts.wait === false) {
-        const authResp = await authorizeDevice(teClaudeBase);
-        await printOutput(
-          {
-            device_code: authResp.device_code,
-            user_code: authResp.user_code,
-            verification_url: buildVerificationUrl(teClaudeBase, authResp.user_code),
-            interval: authResp.interval,
-            expires_in: authResp.expires_in,
-            next: `Open verification_url in a browser to authorize, then run: ae-cli auth login --device-code ${authResp.device_code}`
-          },
-          fmt
-        );
-        return;
-      }
-      const tokens = await runDeviceFlow(teClaudeBase, { noBrowser }, emit);
-      await persistDeviceTokens(host, tokens);
-      activateHostAfterLogin(host, explicitHost);
-      logger.info(`Device flow login successful for ${host}`);
-      emit("Login successful! Token saved securely.");
-      await printOutput(loginSummary(host, tokens), fmt);
-    } catch (err) {
-      if (err instanceof DeviceFlowUnsupportedError) {
-        printError(
-          "auth",
-          err.message,
-          "Upgrade the AE server to a version that supports device login."
-        );
-        process.exit(1);
-      }
-      if (err instanceof PermissionError) {
-        printError("permission", err.message, err.hint, err.code);
-        process.exit(1);
-      }
-      printError("auth", err.message);
-      process.exit(1);
-    }
-  });
-  auth.command("status").description("Show authentication status for a host (--host or active host)").option("--host <url>", HOST_OPTION_DESC).action(async (opts) => {
-    const host = resolveAuthHost(program, opts);
-    if (!host) {
-      await printOutput(
-        {
-          authenticated: false,
-          host: "(none)",
-          hint: missingAeHostHint(),
-          next_steps: missingAeHostGuidance()
-        },
-        program.opts().format || "json"
-      );
-      return;
-    }
-    const secureEntry = load(host);
-    if (secureEntry) {
-      if (secureEntry.cliToken && !await validateExistingCliToken(host, secureEntry.cliToken)) {
-        return;
-      }
-      const pastStaticExpiry = new Date(secureEntry.accessExpiresAt).getTime() < Date.now();
-      await printOutput(
-        {
-          authenticated: true,
-          host,
-          source: "secure-store",
-          accessExpiresAt: secureEntry.accessExpiresAt,
-          accessExpiresAtNote: "advisory: access token auto-slides on use server-side; re-login only if a command returns an auth error",
-          pastStaticExpiry,
-          hasCliToken: !!secureEntry.cliToken
-        },
-        program.opts().format || "json"
-      );
-      return;
-    }
-    const fallbackCliToken = getFallbackCliToken(host);
-    if (fallbackCliToken) {
-      if (!await validateExistingCliToken(host, fallbackCliToken)) {
-        return;
-      }
-      await printOutput(
-        {
-          authenticated: true,
-          host,
-          source: "sandbox-cli-token",
-          hasCliToken: true,
-          note: "sandbox-provisioned cli-token.json; no user access token in secure-store"
-        },
-        program.opts().format || "json"
-      );
-      return;
-    }
-    await printOutput({ authenticated: false, host, source: "none" }, program.opts().format || "json");
-  });
-  auth.command("logout").description("Clear stored credentials (access token, refresh token, and CLI token) for a host (--host or active host)").option("--host <url>", HOST_OPTION_DESC).action(async (opts) => {
-    const host = resolveAuthHost(program, opts);
-    if (!host) {
-      printError("config", "No AE host configured.", missingAeHostHint());
-      process.exit(1);
-    }
-    clearCliToken(host);
-    clear(host);
-    process.stderr.write(`[ae-cli] Credentials cleared for ${host}
-`);
-    await printOutput({ cleared: true, host }, program.opts().format || "json");
-  });
-}
-export {
-  activateHostAfterLogin,
-  registerAuth,
-  resolveLoginTeClaudeBase
-};

package/dist/auth-UMJAA72O.js DELETED Viewed

@@ -1,15 +0,0 @@
-import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
-import {
-  getToken,
-  invalidateAccessTokenForRetry,
-  resolveHost,
-  validateToken
-} from "./chunk-O6K2ODUE.js";
-import "./chunk-KZ6ZHF5J.js";
-import "./chunk-FR2EDAQM.js";
-export {
-  getToken,
-  invalidateAccessTokenForRetry,
-  resolveHost,
-  validateToken
-};

package/dist/chunk-533JK3YX.js DELETED Viewed

@@ -1,72 +0,0 @@
-import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
-// src/core/errors.ts
-var PermissionError = class extends Error {
-  constructor(message, code, hint) {
-    super(message);
-    this.code = code;
-    this.hint = hint;
-    this.name = "PermissionError";
-  }
-  code;
-  hint;
-};
-var CliValidationError = class extends Error {
-  code;
-  hint;
-  location;
-  constructor(message, options = {}) {
-    super(message);
-    this.name = "CliValidationError";
-    this.code = options.code;
-    this.hint = options.hint;
-    if (options.location) {
-      const location = {};
-      if (typeof options.location.segment === "number" && Number.isFinite(options.location.segment)) {
-        location.segment = options.location.segment;
-      }
-      if (typeof options.location.record === "number" && Number.isFinite(options.location.record)) {
-        location.record = options.location.record;
-      }
-      if (typeof options.location.field === "string" && options.location.field.length > 0) {
-        location.field = options.location.field;
-      }
-      if (Object.keys(location).length > 0) this.location = location;
-    }
-  }
-};
-var CommunityReportError = class extends Error {
-  code;
-  httpStatus;
-  hint;
-  meta;
-  constructor(message, options = {}) {
-    super(message, options.cause === void 0 ? void 0 : { cause: options.cause });
-    this.name = "CommunityReportError";
-    this.code = options.code;
-    this.httpStatus = options.httpStatus;
-    this.hint = options.hint;
-    this.meta = options.meta;
-  }
-};
-var LocalDataUploadError = class extends Error {
-  code;
-  httpStatus;
-  hint;
-  meta;
-  constructor(message, options = {}) {
-    super(message, options.cause === void 0 ? void 0 : { cause: options.cause });
-    this.name = "LocalDataUploadError";
-    this.code = options.code;
-    this.httpStatus = options.httpStatus;
-    this.hint = options.hint;
-    this.meta = options.meta;
-  }
-};
-export {
-  PermissionError,
-  CliValidationError,
-  CommunityReportError,
-  LocalDataUploadError
-};