@ultikits/cli 1.2.0 → 2.0.1

package/dist/src/lib/confirm.js

@@ -0,0 +1,47 @@
+// Confirmation for destructive commands (modules delete, versions withdraw).
+//
+// The user must type the exact target string: the module identifier, or
+// <identifier>@<version> for a withdrawal. On a terminal without -y the CLI asks
+// for it; otherwise --confirm <same string> is required. -y alone is never enough,
+// so a script that adds -y to every command cannot delete anything by accident.
+// Callers must check the result before sending any request.
+import readline from 'node:readline/promises';
+export async function requireConfirmation(options) {
+    const { expected, flagValue } = options;
+    if (flagValue !== undefined) {
+        if (flagValue === expected)
+            return { ok: true };
+        return { ok: false, reason: `--confirm 的值必须与 ${expected} 完全一致（区分大小写），未发送任何请求。` };
+    }
+    if (!options.interactive || options.yes) {
+        return {
+            ok: false,
+            reason: `非交互模式或使用了 -y 时，必须加 --confirm ${expected} 确认（单有 -y 不够），未发送任何请求。`,
+        };
+    }
+    const ask = options.ask ?? askOnTerminal;
+    let answer;
+    try {
+        answer = await ask(`${options.warning}\n请输入 ${expected} 确认（输入其他内容取消）：`);
+    }
+    catch {
+        // Ctrl-C / Ctrl-D: readline rejects (AbortError on Node 24); treat it as a cancel.
+        return { ok: false, reason: '已取消（输入被中断），未发送任何请求。' };
+    }
+    if (answer === expected)
+        return { ok: true };
+    return { ok: false, reason: `输入与 ${expected} 不一致，已取消，未发送任何请求。` };
+}
+export function isInteractiveTerminal() {
+    return Boolean(process.stdin.isTTY && process.stdout.isTTY);
+}
+async function askOnTerminal(question) {
+    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+    try {
+        return await rl.question(question);
+    }
+    finally {
+        rl.close();
+    }
+}
+//# sourceMappingURL=confirm.js.map

package/dist/src/lib/logger.d.ts

@@ -3,3 +3,9 @@ export declare function error(msg: string): void;
 export declare function info(msg: string): void;
 export declare function warn(msg: string): void;
 export declare function spinner(text: string): import("ora").Ora;
+/** Output sink for commands; tests pass a capturing one. */
+export interface Io {
+    out(msg: string): void;
+    err(msg: string): void;
+}
+export declare const consoleIo: Io;

package/dist/src/lib/logger.js

@@ -15,4 +15,8 @@ export function warn(msg) {
 export function spinner(text) {
     return ora({ text, color: 'cyan' });
 }
+export const consoleIo = {
+    out: (msg) => console.log(msg),
+    err: (msg) => console.error(msg),
+};
 //# sourceMappingURL=logger.js.map

package/dist/src/lib/mask.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Masked form of a credential for display: known prefix + first 4 + •••• + last 4.
+ * Anything that does not look like a UltiCloud credential is fully masked.
+ */
+export declare function maskCredential(value: string): string;
+/** Replaces every occurrence of `secret` in `text` with its masked form. */
+export declare function redact(text: string, secret: string | undefined | null): string;

package/dist/src/lib/mask.js

@@ -0,0 +1,18 @@
+/**
+ * Masked form of a credential for display: known prefix + first 4 + •••• + last 4.
+ * Anything that does not look like a UltiCloud credential is fully masked.
+ */
+export function maskCredential(value) {
+    const match = /^(uc[cdu]_)(.+)$/.exec(value);
+    if (!match || match[2].length < 12)
+        return '••••';
+    const body = match[2];
+    return `${match[1]}${body.slice(0, 4)}••••${body.slice(-4)}`;
+}
+/** Replaces every occurrence of `secret` in `text` with its masked form. */
+export function redact(text, secret) {
+    if (!secret)
+        return text;
+    return text.split(secret).join(maskCredential(secret));
+}
+//# sourceMappingURL=mask.js.map

package/dist/src/lib/paging.d.ts

@@ -0,0 +1,5 @@
+import type { Page } from '../types.js';
+/** Largest pageSize the contract allows for the list routes. */
+export declare const MAX_PAGE_SIZE = 100;
+/** Fetches page 1, 2, … until `total` items are collected or a page comes back empty. */
+export declare function fetchAllPages<T>(fetchPage: (page: number) => Promise<Page<T>>): Promise<T[]>;

package/dist/src/lib/paging.js

@@ -0,0 +1,16 @@
+/** Largest pageSize the contract allows for the list routes. */
+export const MAX_PAGE_SIZE = 100;
+/** Hard stop so a server that keeps reporting a larger total cannot loop forever. */
+const MAX_PAGES = 1000;
+/** Fetches page 1, 2, … until `total` items are collected or a page comes back empty. */
+export async function fetchAllPages(fetchPage) {
+    const items = [];
+    for (let page = 1; page <= MAX_PAGES; page++) {
+        const result = await fetchPage(page);
+        items.push(...result.items);
+        if (result.items.length === 0 || items.length >= result.total)
+            break;
+    }
+    return items;
+}
+//# sourceMappingURL=paging.js.map

package/dist/src/types.d.ts

@@ -1,16 +1,13 @@
-export interface OAuthCredentials {
-    type: 'oauth';
-    access_token: string;
-    refresh_token: string;
-    expires_at: string;
-    api_url: string;
-}
-export interface AccessTokenCredentials {
-    type: 'access_token';
-    token: string;
-    api_url: string;
-}
-export type Credentials = OAuthCredentials | AccessTokenCredentials;
+/** Credential kinds the UltiCloud machine API accepts (contract: developer-client 1.1.0). */
+export type CredentialKind = 'cli' | 'developer';
+/** ~/.ultikits/credentials.json, format version 2. */
+export interface StoredCredential {
+    version: 2;
+    kind: CredentialKind;
+    credential: string;
+    credentialId?: string;
+    apiUrl: string;
+}
 export interface ProjectConfig {
     identifyString: string;
     name: string;
@@ -25,17 +22,13 @@ export interface PluginYml {
 }
 export interface ModuleMetadata {
     identifyString: string;
-    name: string;
+    /** Display name; only needed when publish has to create the module. */
+    name?: string;
     version: string;
     shortDescription?: string;
     changelog?: string;
     categoryId?: number;
 }
-export interface ApiResponse<T = any> {
-    code: string;
-    msg: string;
-    data?: T;
-}
 export interface CreateParams {
     moduleName: string;
     packageName: string;
@@ -43,3 +36,134 @@ export interface CreateParams {
     author: string;
     apiVersion: string;
 }
+export interface DeviceAuthorization {
+    deviceCode: string;
+    userCode: string;
+    verificationUri: string;
+    verificationUriComplete: string;
+    expiresIn: number;
+    interval: number;
+}
+export interface DeviceTokenResult {
+    kind: 'cli';
+    credential: string;
+    credentialId: string;
+    userId: number;
+}
+export interface Whoami {
+    id: number;
+    username: string;
+    developerName: string;
+    /** Optional in the contract; treat absence as "unknown". */
+    credential?: {
+        kind: CredentialKind;
+        scope: 'upload' | 'manage';
+    };
+}
+export interface UploadTicket {
+    uploadUrl: string;
+    method: 'PUT';
+    headers: Record<string, string>;
+    expiresAt: string;
+    maxBytes: number;
+}
+interface DevModuleVersionBase {
+    version: string;
+    sizeBytes: number;
+    sha256: string;
+}
+/** Status-specific fields from the frozen developer-client 1.1.0 export. */
+export type DevModuleVersion = DevModuleVersionBase & ({
+    status: 'pending_upload';
+    withdrawnAt: null;
+    isLatest: false;
+    downloadUrl: null;
+} | {
+    status: 'published';
+    withdrawnAt: null;
+    isLatest: boolean;
+    downloadUrl: string | null;
+} | {
+    status: 'withdrawn';
+    withdrawnAt: string;
+    isLatest: false;
+    downloadUrl: null;
+});
+export interface CreateVersionBody {
+    version: string;
+    changelog: string | null;
+    sha256: string;
+    sizeBytes: number;
+}
+export interface CreateVersionResult {
+    version: Extract<DevModuleVersion, {
+        status: 'pending_upload';
+    }>;
+    upload: UploadTicket;
+}
+export interface CreateModuleBody {
+    name: string;
+    identifier: string;
+    shortDescription: string;
+    description: string | null;
+    categoryId: number | null;
+    compatibleApiVersions: string | null;
+    tags: string[];
+}
+export interface DeveloperModule {
+    id: string;
+    identifier: string;
+    name: string;
+}
+export interface Page<T> {
+    items: T[];
+    total: number;
+    page: number;
+    pageSize: number;
+}
+/** developer.modules.list item; also the body of update and restore. */
+export interface ModuleListItem extends DeveloperModule {
+    shortDescription: string;
+    iconUrl: string | null;
+    category: {
+        id: number;
+        name: string;
+    } | null;
+    downloads: number;
+    latestVersion: string | null;
+    updatedAt: string;
+}
+/** PATCH body: every key optional, only the given ones are sent. */
+export interface UpdateModuleBody {
+    name?: string;
+    shortDescription?: string;
+    description?: string | null;
+    categoryId?: number | null;
+}
+export interface ModuleDeletion {
+    deletedAt: string;
+    restorableUntil: string;
+}
+export type WithdrawnVersion = Extract<DevModuleVersion, {
+    status: 'withdrawn';
+}>;
+/** catalogue.modules.versions.list item. */
+export interface PublicModuleVersion {
+    version: string;
+    isLatest: boolean;
+    publishedAt: string;
+    sizeBytes: number;
+    sha256: string;
+    changelog: string | null;
+    apiLevel: number | null;
+    download: {
+        kind: 'public';
+        url: string;
+    } | {
+        kind: 'license_required';
+    } | {
+        kind: 'withdrawn';
+        withdrawnAt: string;
+    };
+}
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ultikits/cli",
-  "version": "1.2.0",
+  "version": "2.0.1",
   "description": "CLI tool for publishing UltiTools plugin modules to UltiCloud marketplace",
   "type": "module",
   "bin": {