@thinkingai/ae-cli 6.1.17 → 6.1.18

package/dist/chunk-ZZUOD757.js

@@ -1,598 +0,0 @@
-import {
-  logger
-} from "./chunk-LYVNONC4.js";
-
-// src/core/config.ts
-import fs3 from "fs";
-import path from "path";
-
-// src/core/json-utils.ts
-import fs from "fs";
-import { createRequire } from "module";
-var require2 = createRequire(import.meta.url);
-var JSONbig = require2("json-bigint");
-var jsonParser = JSONbig({ storeAsString: true });
-var INTEGER_TOKEN = /^-?(?:0|[1-9]\d*)$/;
-function normalizeParsedNumbers(lossless, native) {
-  if (typeof lossless === "string" && typeof native === "number") {
-    if (INTEGER_TOKEN.test(lossless) && !Number.isSafeInteger(native)) {
-      return lossless;
-    }
-    return native;
-  }
-  if (Array.isArray(lossless) && Array.isArray(native)) {
-    for (let index = 0; index < lossless.length; index++) {
-      lossless[index] = normalizeParsedNumbers(lossless[index], native[index]);
-    }
-    return lossless;
-  }
-  if (lossless !== null && native !== null && typeof lossless === "object" && typeof native === "object") {
-    for (const key of Object.keys(lossless)) {
-      lossless[key] = normalizeParsedNumbers(lossless[key], native[key]);
-    }
-  }
-  return lossless;
-}
-function safeJsonParse(text) {
-  const lossless = jsonParser.parse(text);
-  return normalizeParsedNumbers(lossless, JSON.parse(text));
-}
-function safeReadJsonFile(filePath) {
-  const content = fs.readFileSync(filePath, "utf-8");
-  return safeJsonParse(content);
-}
-
-// src/core/url-utils.ts
-function normalizeUrl(url) {
-  if (!url) return url;
-  if (!url.startsWith("http://") && !url.startsWith("https://")) {
-    url = `https://${url}`;
-  }
-  return url.replace(/\/$/, "");
-}
-
-// src/core/sandbox-runtime.ts
-import { homedir } from "os";
-import { join } from "path";
-import fs2 from "fs";
-var LINUX_SANDBOX_RUNTIME_ROOT = "/home/ta/te_agent_ta";
-function getDefaultSandboxRuntimeRoot() {
-  if (process.platform === "linux") {
-    return LINUX_SANDBOX_RUNTIME_ROOT;
-  }
-  return homedir();
-}
-function getSandboxRuntimeRoot() {
-  return process.env.SANDBOX_RUNTIME_ROOT || getDefaultSandboxRuntimeRoot();
-}
-function getSandboxAeConfigDir() {
-  return join(getSandboxRuntimeRoot(), ".ae-config");
-}
-function getSandboxCliTokenFilePath() {
-  return join(getSandboxAeConfigDir(), "cli-token.json");
-}
-function isAeSandboxRuntime() {
-  if (process.env.SANDBOX_RUNTIME_ROOT) {
-    return true;
-  }
-  try {
-    if (fs2.existsSync(getSandboxCliTokenFilePath())) {
-      return true;
-    }
-  } catch {
-  }
-  return false;
-}
-
-// src/core/config.ts
-var CONFIG_DIR = path.join(process.env.HOME || "", ".ae-cli");
-var CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
-function sandboxCliTokenCandidatePaths() {
-  const paths = [getSandboxCliTokenFilePath()];
-  const homeFallback = path.join(process.env.HOME || "", ".ae-config", "cli-token.json");
-  if (!paths.includes(homeFallback)) {
-    paths.push(homeFallback);
-  }
-  return paths;
-}
-function readSandboxCliTokenEntry() {
-  for (const file of sandboxCliTokenCandidatePaths()) {
-    if (!fs3.existsSync(file)) continue;
-    try {
-      const data = safeReadJsonFile(file);
-      if (data && typeof data === "object" && !Array.isArray(data)) {
-        const url = data.url;
-        const token = data.token ?? data["cli-token"];
-        if (url && token) {
-          return { url, token };
-        }
-      }
-    } catch {
-    }
-  }
-  return null;
-}
-function forceMigrateFromFallback() {
-  const entry = readSandboxCliTokenEntry();
-  if (!entry) return null;
-  return { [entry.url]: entry.token };
-}
-function getFallbackCliToken(hostUrl) {
-  const store = forceMigrateFromFallback();
-  if (!store) return null;
-  if (hostUrl && store[hostUrl]) return store[hostUrl];
-  const entries = Object.values(store);
-  if (entries.length === 1) return entries[0];
-  return null;
-}
-function ensureDir() {
-  if (!fs3.existsSync(CONFIG_DIR)) fs3.mkdirSync(CONFIG_DIR, { recursive: true });
-}
-function dedupeNormalizedHosts(config) {
-  const hosts = {};
-  for (const [url, entry] of Object.entries(config.hosts)) {
-    const key = normalizeUrl(url);
-    if (!hosts[key]) {
-      hosts[key] = entry;
-    }
-  }
-  return {
-    activeHost: config.activeHost ? normalizeUrl(config.activeHost) : "",
-    hosts
-  };
-}
-function configNeedsNormalization(config) {
-  if (config.activeHost && normalizeUrl(config.activeHost) !== config.activeHost) return true;
-  const keys = Object.keys(config.hosts);
-  if (keys.some((url) => normalizeUrl(url) !== url)) return true;
-  return new Set(keys.map(normalizeUrl)).size !== keys.length;
-}
-function loadConfig() {
-  try {
-    if (fs3.existsSync(CONFIG_FILE)) {
-      const raw = safeReadJsonFile(CONFIG_FILE);
-      if (raw.defaultHost && !raw.activeHost) {
-        const migrated = dedupeNormalizedHosts(migrateConfig(raw));
-        saveConfig(migrated);
-        return migrated;
-      }
-      const rawConfig = raw;
-      if (configNeedsNormalization(rawConfig)) {
-        const config = dedupeNormalizedHosts(rawConfig);
-        saveConfig(config);
-        return config;
-      }
-      return rawConfig;
-    }
-  } catch (err) {
-    logger.error(`Error loading config: ${err.message}`);
-    console.error(`Error loading config: ${err.message}`);
-  }
-  return { activeHost: "", hosts: {} };
-}
-function migrateConfig(old) {
-  const hosts = {};
-  const oldHost = old.defaultHost;
-  if (old.hosts) {
-    for (const [key, val] of Object.entries(old.hosts)) {
-      const url = normalizeUrl(key.startsWith("http") ? key : `https://${key}`);
-      hosts[url] = val;
-    }
-  }
-  const activeHost = normalizeUrl(oldHost.startsWith("http") ? oldHost : `https://${oldHost}`);
-  if (!hosts[activeHost]) {
-    hosts[activeHost] = { label: "default" };
-  }
-  return { activeHost, hosts };
-}
-function saveConfig(config) {
-  ensureDir();
-  fs3.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2));
-  logger.info(`Config saved: activeHost=${config.activeHost}, hosts=${Object.keys(config.hosts).length}`);
-}
-function getActiveHost() {
-  const sandboxHost = readSandboxCliTokenEntry()?.url;
-  if (sandboxHost) return sandboxHost;
-  const config = loadConfig();
-  return config.activeHost || "";
-}
-function setActiveHost(url) {
-  url = normalizeUrl(url);
-  const config = loadConfig();
-  if (!config.hosts[url]) {
-    throw new Error(`Host ${url} is not in the configured hosts list. Add it first.`);
-  }
-  config.activeHost = url;
-  saveConfig(config);
-}
-function addHost(url, label) {
-  url = normalizeUrl(url);
-  label = normalizeLabel(label);
-  const config = loadConfig();
-  assertUniqueHostLabel(config, label, url);
-  config.hosts[url] = { label };
-  if (!config.activeHost) {
-    config.activeHost = url;
-  }
-  saveConfig(config);
-}
-function updateHostLabel(url, label) {
-  url = normalizeUrl(url);
-  label = normalizeLabel(label);
-  const config = loadConfig();
-  if (!config.hosts[url]) {
-    throw new Error(`Host is not configured: ${url}`);
-  }
-  assertUniqueHostLabel(config, label, url);
-  config.hosts[url].label = label;
-  saveConfig(config);
-}
-function normalizeLabel(label) {
-  const normalized = label.trim();
-  if (!normalized) {
-    throw new Error("Label cannot be empty.");
-  }
-  return normalized;
-}
-function assertUniqueHostLabel(config, label, excludeUrl) {
-  const duplicate = Object.entries(config.hosts).find(([url, entry]) => url !== excludeUrl && entry.label === label);
-  if (duplicate) {
-    throw new Error(`Label already exists: ${label}. Rename the existing label first: ${duplicate[0]}`);
-  }
-}
-function removeHost(url) {
-  url = normalizeUrl(url);
-  const config = loadConfig();
-  delete config.hosts[url];
-  if (config.activeHost === url) {
-    const remaining = Object.keys(config.hosts);
-    config.activeHost = remaining.length > 0 ? remaining[0] : "";
-  }
-  saveConfig(config);
-}
-function listHosts() {
-  const config = loadConfig();
-  return Object.entries(config.hosts).map(([url, entry]) => ({
-    url,
-    label: entry.label,
-    active: url === config.activeHost
-  }));
-}
-function resolveHostSelector(env) {
-  const raw = env.trim();
-  const selector = raw.startsWith("http://") || raw.startsWith("https://") ? normalizeUrl(raw) : raw;
-  const hosts = listHosts();
-  const byUrl = hosts.find((host) => host.url === selector);
-  if (byUrl) return { status: "found", host: byUrl };
-  const byLabel = hosts.filter((host) => host.label === raw);
-  if (byLabel.length === 1) return { status: "found", host: byLabel[0] };
-  if (byLabel.length > 1) return { status: "duplicate-label", matches: byLabel };
-  return { status: "not-found", hosts };
-}
-function getConfigDir() {
-  return CONFIG_DIR;
-}
-
-// src/core/secure-store.ts
-import crypto from "crypto";
-import fs4 from "fs";
-import os from "os";
-import path2 from "path";
-import { execFileSync } from "child_process";
-var STORE_DIR_SUFFIX = "secure-tokens";
-var SCRYPT_SALT = Buffer.from("ae-cli-secure-store-v1");
-var SCRYPT_N = 16384;
-var SCRYPT_R = 8;
-var SCRYPT_P = 1;
-var KEY_LEN = 32;
-var NONCE_LEN = 12;
-var REFRESH_TOKEN_PATH = "/v1/oauth/refreshForToken";
-function getMachineId() {
-  if (process.platform === "darwin") {
-    try {
-      const out = execFileSync(
-        "ioreg",
-        ["-rd1", "-c", "IOPlatformExpertDevice"],
-        { encoding: "utf8", timeout: 3e3 }
-      );
-      const m = out.match(/IOPlatformUUID.*?=.*?"([0-9A-F-]{36})"/i);
-      if (m?.[1]) return `darwin:${m[1]}`;
-    } catch {
-    }
-  }
-  if (process.platform === "linux") {
-    for (const p of ["/etc/machine-id", "/var/lib/dbus/machine-id"]) {
-      try {
-        const id = fs4.readFileSync(p, "utf8").trim();
-        if (id) return `linux:${id}`;
-      } catch {
-      }
-    }
-  }
-  if (process.platform === "win32") {
-    try {
-      const out = execFileSync(
-        "reg",
-        ["query", "HKLM\\SOFTWARE\\Microsoft\\Cryptography", "/v", "MachineGuid"],
-        { encoding: "utf8", timeout: 3e3 }
-      );
-      const m = out.match(/MachineGuid\s+REG_SZ\s+([0-9a-f-]+)/i);
-      if (m?.[1]) return `win32:${m[1]}`;
-    } catch {
-    }
-  }
-  const fallback = `${os.homedir()}|${os.hostname()}|${os.platform()}`;
-  logger.warn("secure-store: using fallback machine-id (HOME+hostname+platform)");
-  return `fallback:${fallback}`;
-}
-var _cachedMachineId;
-function getCachedMachineId() {
-  if (!_cachedMachineId) _cachedMachineId = getMachineId();
-  return _cachedMachineId;
-}
-function deriveKey(machineId) {
-  return crypto.scryptSync(machineId, SCRYPT_SALT, KEY_LEN, {
-    N: SCRYPT_N,
-    r: SCRYPT_R,
-    p: SCRYPT_P
-  });
-}
-var _cachedKey;
-function getKey() {
-  if (!_cachedKey) _cachedKey = deriveKey(getCachedMachineId());
-  return _cachedKey;
-}
-function encrypt(plaintext) {
-  const key = getKey();
-  const nonce = crypto.randomBytes(NONCE_LEN);
-  const cipher = crypto.createCipheriv("aes-256-gcm", key, nonce);
-  const encrypted = Buffer.concat([cipher.update(plaintext, "utf8"), cipher.final()]);
-  const tag = cipher.getAuthTag();
-  return {
-    nonce: nonce.toString("hex"),
-    tag: tag.toString("hex"),
-    data: encrypted.toString("hex")
-  };
-}
-function decrypt(blob) {
-  const key = getKey();
-  const nonce = Buffer.from(blob.nonce, "hex");
-  const tag = Buffer.from(blob.tag, "hex");
-  const data = Buffer.from(blob.data, "hex");
-  const decipher = crypto.createDecipheriv("aes-256-gcm", key, nonce);
-  decipher.setAuthTag(tag);
-  const decrypted = Buffer.concat([decipher.update(data), decipher.final()]);
-  return decrypted.toString("utf8");
-}
-function storeDir() {
-  return path2.join(getConfigDir(), STORE_DIR_SUFFIX);
-}
-function tokenFilePath(host) {
-  const safe = host.replace(/^https?:\/\//, "").replace(/[^a-zA-Z0-9._-]/g, "_");
-  return path2.join(storeDir(), `${safe}.enc.json`);
-}
-function ensureStoreDir() {
-  const dir = storeDir();
-  if (!fs4.existsSync(dir)) {
-    fs4.mkdirSync(dir, { recursive: true });
-    try {
-      fs4.chmodSync(dir, 448);
-    } catch {
-    }
-  }
-}
-function save(host, payload) {
-  ensureStoreDir();
-  const plaintext = JSON.stringify(payload);
-  const blob = encrypt(plaintext);
-  const filePath = tokenFilePath(host);
-  fs4.writeFileSync(filePath, JSON.stringify(blob, null, 2), { encoding: "utf8" });
-  try {
-    fs4.chmodSync(filePath, 384);
-  } catch {
-  }
-  logger.info(`secure-store: token saved for ${host}`);
-}
-function load(host) {
-  const filePath = tokenFilePath(host);
-  if (!fs4.existsSync(filePath)) return null;
-  try {
-    const raw = fs4.readFileSync(filePath, "utf8");
-    const blob = safeJsonParse(raw);
-    if (!blob?.nonce || !blob?.tag || !blob?.data) {
-      logger.warn(`secure-store: malformed blob for ${host}`);
-      return null;
-    }
-    const plaintext = decrypt(blob);
-    return JSON.parse(plaintext);
-  } catch (e) {
-    logger.error(`secure-store: decrypt failed for ${host}: ${e.message}`);
-    return null;
-  }
-}
-function clear(host) {
-  const filePath = tokenFilePath(host);
-  if (fs4.existsSync(filePath)) {
-    fs4.rmSync(filePath);
-    logger.info(`secure-store: token cleared for ${host}`);
-  }
-}
-async function getValidAccessToken(host) {
-  const payload = load(host);
-  if (!payload) {
-    throw new SecureStoreAuthError(
-      `No stored token for ${host}. Please run: ae-cli auth login`
-    );
-  }
-  const expiresAt = new Date(payload.accessExpiresAt).getTime();
-  const now = Date.now();
-  const needsRefresh = expiresAt - now < 6e4;
-  if (!needsRefresh) {
-    return payload.accessToken;
-  }
-  if (payload.refreshToken) {
-    logger.info(`secure-store: access token past local expiry for ${host}, refreshing\u2026`);
-    const refreshed = await doRefresh(host, payload.refreshToken);
-    save(host, { ...refreshed, cliToken: payload.cliToken });
-    logger.info(`secure-store: token refreshed for ${host}`);
-    return refreshed.accessToken;
-  }
-  logger.info(`secure-store: ${host} past static local expiry, no refresh token \u2014 returning stored token, server validates (lazy)`);
-  return payload.accessToken;
-}
-function loadCliToken(host) {
-  return load(host)?.cliToken ?? null;
-}
-async function doRefresh(host, refreshToken) {
-  const base = host.replace(/\/+$/, "");
-  const url = `${base}${REFRESH_TOKEN_PATH}`;
-  let resp;
-  try {
-    resp = await fetch(url, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ refreshToken })
-    });
-  } catch (e) {
-    throw new SecureStoreAuthError(
-      `Token refresh network error for ${host}: ${e.message}. Please run: ae-cli auth login`
-    );
-  }
-  if (!resp.ok) {
-    throw new SecureStoreAuthError(
-      `Token refresh failed (HTTP ${resp.status}) for ${host}. Please run: ae-cli auth login`
-    );
-  }
-  let body;
-  try {
-    body = safeJsonParse(await resp.text());
-  } catch {
-    throw new SecureStoreAuthError(
-      `Token refresh returned invalid JSON for ${host}. Please run: ae-cli auth login`
-    );
-  }
-  if (body.return_code !== 0) {
-    throw new SecureStoreAuthError(
-      `Token refresh error (${body.return_code}: ${body.return_message ?? "unknown"}) for ${host}. Please run: ae-cli auth login`
-    );
-  }
-  const d = body.data;
-  const newAccess = d?.accessToken ?? d?.access_token ?? "";
-  const newRefresh = d?.refreshToken ?? d?.refresh_token ?? refreshToken;
-  const expiresIn = d?.expiresIn ?? d?.expires_in ?? 72e3;
-  if (!newAccess) {
-    throw new SecureStoreAuthError(
-      `Token refresh returned empty accessToken for ${host}. Please run: ae-cli auth login`
-    );
-  }
-  return {
-    accessToken: newAccess,
-    refreshToken: newRefresh,
-    accessExpiresAt: new Date(Date.now() + expiresIn * 1e3).toISOString()
-  };
-}
-var SecureStoreAuthError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "SecureStoreAuthError";
-  }
-};
-
-// src/core/host-guidance.ts
-var AE_TRIAL_URL = "https://thinkingai.cn/request-demo";
-var AE_HOST_SETUP_COMMAND = "ae-cli config set-host <url>";
-function missingAeHostHint(additionalAction) {
-  const actions = [
-    `If your organization already uses AgenticEngine, ask your administrator for its AE URL, then run: ${AE_HOST_SETUP_COMMAND}.`,
-    `If you do not have an AgenticEngine environment, request a trial: ${AE_TRIAL_URL}`
-  ];
-  if (additionalAction) actions.push(additionalAction);
-  return actions.join(" ");
-}
-function missingAeHostGuidance() {
-  return {
-    configure_host: AE_HOST_SETUP_COMMAND,
-    existing_customer: "Ask your AgenticEngine administrator for the AE environment URL.",
-    request_trial_url: AE_TRIAL_URL
-  };
-}
-
-// src/core/auth.ts
-function resolveHost(hostOverride) {
-  if (hostOverride) return normalizeUrl(hostOverride);
-  return getActiveHost();
-}
-async function validateToken(token, hostUrl) {
-  const url = `${hostUrl}/v1/oauth/checkToken`;
-  try {
-    const resp = await fetch(url, {
-      method: "POST",
-      headers: { "Content-Type": "application/x-www-form-urlencoded" },
-      body: new URLSearchParams({ accessToken: token }).toString()
-    });
-    const respJson = safeJsonParse(await resp.text());
-    return respJson?.return_code === 0;
-  } catch {
-    return false;
-  }
-}
-function invalidateAccessTokenForRetry(hostUrl) {
-  const payload = load(hostUrl);
-  if (!payload) return;
-  save(hostUrl, { ...payload, accessExpiresAt: (/* @__PURE__ */ new Date(0)).toISOString() });
-  logger.info(`auth: marked access token stale for retry on ${hostUrl}`);
-}
-async function getToken(hostUrl) {
-  if (!hostUrl) {
-    throw new Error(
-      `No AE host configured.
-` + missingAeHostHint()
-    );
-  }
-  try {
-    const secureToken = await getValidAccessToken(hostUrl);
-    logger.info(`Using secure-store token for ${hostUrl}`);
-    return secureToken;
-  } catch (e) {
-    if (e instanceof SecureStoreAuthError) {
-      logger.info(`secure-store: ${e.message}`);
-    } else {
-      logger.warn(`secure-store unexpected error: ${e.message}`);
-    }
-  }
-  throw new Error(
-    `Cannot obtain token for ${hostUrl}.
-Run: ae-cli auth login   (device code flow, cross-platform)`
-  );
-}
-
-export {
-  safeJsonParse,
-  safeReadJsonFile,
-  normalizeUrl,
-  getSandboxRuntimeRoot,
-  isAeSandboxRuntime,
-  getFallbackCliToken,
-  loadConfig,
-  saveConfig,
-  getActiveHost,
-  setActiveHost,
-  addHost,
-  updateHostLabel,
-  removeHost,
-  listHosts,
-  resolveHostSelector,
-  getConfigDir,
-  save,
-  load,
-  clear,
-  loadCliToken,
-  SecureStoreAuthError,
-  AE_TRIAL_URL,
-  missingAeHostHint,
-  missingAeHostGuidance,
-  resolveHost,
-  validateToken,
-  invalidateAccessTokenForRetry,
-  getToken
-};