@uzqw/shared 0.1.0 → 0.1.2

package/dist/index.d.ts

@@ -1,29 +1,60 @@
 import { z } from 'zod';
 
+/** 环境：local 本地测试 / staging 线上测试 / prod 线上正式 */
+type RecolxEnv = "local" | "staging" | "prod";
 interface RecolxConfig {
     /** OAuth client id（developer 客户端注册名） */
     clientId?: string;
-    /** OAuth 回调地址（本地 stdio 自收） */
+    /** OAuth 回调地址（本地 8199） */
     redirectUri?: string;
-    /** token 落盘文件名（~/.recolx/ 内；默认 tokens-mcp.json 与 CLI 分离） */
+    /** token 落盘文件名；缺省 tokens-mcp-{env}.json（每环境独立登录态） */
     tokenFile?: string;
-    /** token 落盘目录（测试注入用），默认 ~/.recolx */
+    /** token 落盘目录；缺省 ~/.recolx */
     tokenDir?: string;
-    /** API base，默认 http://127.0.0.1:8005（本地 dev） */
+    /** 环境：local | staging | prod；缺省按 配置文件 > RECOLX_ENV > prod */
+    env?: RecolxEnv;
+    /** 后端地址覆盖（自定义部署逃生舱）；缺省按环境预设 */
     apiBase?: string;
-    /** 授权页地址；缺省 = `${apiBase}/open/oauth/authorize` */
+    /** 授权页地址（developer 模式）；缺省 = `${apiBase}/open/oauth/authorize` */
     authorizationUrl?: string;
-    /** token/refresh 端点；缺省 = `${apiBase}/open/oauth/token`（grant_type 区分） */
+    /** token/refresh 端点（developer 模式）；缺省 = `${apiBase}/open/oauth/token` */
     tokenUrl?: string;
+    /** Logto 端点（logto 模式），默认 https://test-auth.recolx.ai */
+    logtoEndpoint?: string;
+    /** Logto application id（logto 模式；需在 Logto 控制台注册 redirect_uri=http://localhost:8199/auth/callback） */
+    logtoClientId?: string;
     /** 附加请求头 */
     extraHeaders?: Record<string, string>;
     /** fetch 实现（测试注入用），默认全局 fetch */
     fetch?: typeof fetch;
 }
-declare const DEFAULT_API_BASE: string;
+declare const DEFAULT_ENV: RecolxEnv;
 declare const DEFAULT_CLIENT_ID: string;
 declare const DEFAULT_REDIRECT_URI = "http://localhost:8199/auth/callback";
-declare function resolveConfig(config: RecolxConfig): Required<Pick<RecolxConfig, "clientId" | "redirectUri" | "tokenFile" | "apiBase" | "authorizationUrl" | "tokenUrl">> & Pick<RecolxConfig, "extraHeaders" | "fetch" | "tokenDir">;
+declare const DEFAULT_LOGTO_ENDPOINT: string;
+declare const DEFAULT_LOGTO_CLIENT_ID: string;
+/** 默认后端地址（prod 预设；RECOLX_API_BASE 可覆盖） */
+declare const DEFAULT_API_BASE = "https://api.recolx.ai/api";
+/** 环境预设：后端地址 + 鉴权模式 + Logto 配置（logto 模式用）。authMode 由环境推导，不再猜 IP。
+ *  prod 的 Logto 为独立实例，地址/应用 id 未知——留空，logto 模式登录时明确报错，绝不静默连到测试实例。 */
+declare const ENV_PRESETS: Record<RecolxEnv, {
+    apiBase: string;
+    authMode: "developer" | "logto";
+    logtoEndpoint: string;
+    logtoClientId: string;
+}>;
+/** 环境配置文件路径（AI set_env / install --env 共用）；RECOLX_ENV_CONFIG 为测试钩子。 */
+declare function envConfigPath(): string;
+/** 读取环境配置文件中的 env；无文件/非法值返回 null */
+declare function readEnvConfig(): RecolxEnv | null;
+/** 写入环境配置文件（AI set_env / install --env 共用） */
+declare function writeEnvConfig(env: RecolxEnv): void;
+/** 解析最终环境：实例配置 > 配置文件 > RECOLX_ENV > prod */
+declare function resolveEnv(env?: RecolxEnv): RecolxEnv;
+declare function resolveConfig(config: RecolxConfig): Required<Pick<RecolxConfig, "clientId" | "redirectUri" | "tokenFile" | "apiBase" | "authorizationUrl" | "tokenUrl" | "logtoEndpoint" | "logtoClientId">> & {
+    env: RecolxEnv;
+    authMode: "developer" | "logto";
+} & Pick<RecolxConfig, "extraHeaders" | "fetch" | "tokenDir">;
 
 interface TokenSet {
     access_token: string;
@@ -57,13 +88,21 @@ declare class OAuth {
     readonly tokenStore: TokenStore;
     readonly authorizationUrl: string;
     readonly tokenUrl: string;
+    /** developer | logto（resolveConfig 已解析） */
+    readonly mode: "developer" | "logto";
     private readonly fetchImpl;
     constructor(config: RecolxConfig);
-    /** 构造授权请求（PKCE S256）。extraParams 用于本地联调注入 user_id（env=local 才接受）。 */
+    /** logto 模式 client id 校验：缺省抛错（authorize / exchangeCode 共用） */
+    private logtoClientId;
+    /** logto 模式端点校验：缺省抛错（prod 独立 Logto 未配置时明确报错，不静默连测试实例） */
+    private logtoEndpoint;
+    /** 构造授权请求（PKCE S256）。extraParams 用于本地联调注入 user_id（developer 模式，env=local 才接受）。 */
     createAuthorizationRequest(extraParams?: Record<string, string>): AuthorizationRequest;
-    /** 授权码换 token 并落盘；失败抛 Error（含状态码与响应体）。 */
+    /** 授权码换凭证并落盘；失败抛 Error（含状态码与响应体）。
+     *  developer 模式：直接换 developerOAuth JWT；
+     *  logto 模式：先换 Logto access token，再 POST /open/oauth/apikey 换 sk- 长期 key（落盘的是 sk- key）。 */
     exchangeCode(code: string, codeVerifier: string): Promise<TokenSet>;
-    /** 用 refresh_token 换新 token（后端滚动轮换），失败返回 null。 */
+    /** 用 refresh_token 换新 token（后端滚动轮换）；logto 模式无 refresh（sk- key 长期有效），恒返回 null。 */
     refresh(refreshToken: string): Promise<TokenSet | null>;
     /** 取可用 access token：未过期直接用；过期则滚动刷新；失败返回 null。 */
     getAccessToken(): Promise<string | null>;
@@ -73,15 +112,27 @@ declare class OAuth {
     logout(): Promise<void>;
 }
 
+interface EnvState {
+    env: RecolxEnv;
+    api_base: string;
+    auth_mode: "developer" | "logto";
+    logged_in: boolean;
+}
 declare class RecolxClient {
-    readonly oauth: OAuth;
-    readonly apiBase: string;
-    readonly extraHeaders: Record<string, string>;
+    oauth: OAuth;
+    apiBase: string;
+    env: RecolxEnv;
+    extraHeaders: Record<string, string>;
     /** 测试/联调用：设置后不再走 OAuth token 获取 */
     staticToken?: string;
-    private readonly fetchImpl;
+    private fetchImpl;
     constructor(config: RecolxConfig);
+    private applyConfig;
     get auth(): OAuth;
+    /** 切换环境：写 ~/.recolx/config.json 并即时重建 OAuth/API base；返回新状态 */
+    setEnv(env: RecolxEnv): Promise<EnvState>;
+    /** 当前环境状态（含登录态） */
+    getEnvState(): Promise<EnvState>;
     request(path: string, init?: RequestInit & {
         token?: string;
     }): Promise<unknown>;
@@ -617,6 +668,14 @@ type RecolxFileDetail = z.infer<typeof FileDetailSchema>;
 declare const LoginInput: z.ZodOptional<z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>>;
 declare const LogoutInput: z.ZodOptional<z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>>;
 declare const GetCurrentUserInput: z.ZodOptional<z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>>;
+declare const SetEnvInput: z.ZodObject<{
+    env: z.ZodEnum<["local", "staging", "prod"]>;
+}, "strip", z.ZodTypeAny, {
+    env: "local" | "staging" | "prod";
+}, {
+    env: "local" | "staging" | "prod";
+}>;
+declare const GetEnvInput: z.ZodOptional<z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>>;
 declare const ListFilesInput: z.ZodObject<{
     page: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
     page_size: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
@@ -705,4 +764,4 @@ interface RunOAuthCallbackOpts {
 }
 declare function runOAuthCallback(opts: RunOAuthCallbackOpts): Promise<OAuthCallbackResult>;
 
-export { type AuthorizationRequest, CurrentUserSchema, DEFAULT_API_BASE, DEFAULT_CLIENT_ID, DEFAULT_REDIRECT_URI, DeviceSchema, FileDetailSchema, FileListSchema, FileSchema, GetCurrentUserInput, GetFileInput, GetNoteInput, GetTranscriptInput, ListFilesInput, LoginInput, LogoutInput, OAuth, type OAuthCallbackResult, RecolxClient, type RecolxConfig, type RecolxCurrentUser, type RecolxDevice, type RecolxErrorType, type RecolxFile, type RecolxFileDetail, type RecolxFileList, type RecolxSegment, type RecolxSubscription, type RecolxSummary, type RecolxTranscript, type RunOAuthCallbackOpts, SegmentSchema, SubscriptionSchema, SummarySchema, TOKENS_MCP_PATH, type TokenSet, TokenStore, TranscriptSchema, classifyError, errorTypeFromStatus, generateCodeChallenge, generateCodeVerifier, generateState, localDayEnd, localDayStart, parseApiTimestamp, resolveConfig, runOAuthCallback };
+export { type AuthorizationRequest, CurrentUserSchema, DEFAULT_API_BASE, DEFAULT_CLIENT_ID, DEFAULT_ENV, DEFAULT_LOGTO_CLIENT_ID, DEFAULT_LOGTO_ENDPOINT, DEFAULT_REDIRECT_URI, DeviceSchema, ENV_PRESETS, type EnvState, FileDetailSchema, FileListSchema, FileSchema, GetCurrentUserInput, GetEnvInput, GetFileInput, GetNoteInput, GetTranscriptInput, ListFilesInput, LoginInput, LogoutInput, OAuth, type OAuthCallbackResult, RecolxClient, type RecolxConfig, type RecolxCurrentUser, type RecolxDevice, type RecolxEnv, type RecolxErrorType, type RecolxFile, type RecolxFileDetail, type RecolxFileList, type RecolxSegment, type RecolxSubscription, type RecolxSummary, type RecolxTranscript, type RunOAuthCallbackOpts, SegmentSchema, SetEnvInput, SubscriptionSchema, SummarySchema, TOKENS_MCP_PATH, type TokenSet, TokenStore, TranscriptSchema, classifyError, envConfigPath, errorTypeFromStatus, generateCodeChallenge, generateCodeVerifier, generateState, localDayEnd, localDayStart, parseApiTimestamp, readEnvConfig, resolveConfig, resolveEnv, runOAuthCallback, writeEnvConfig };

package/dist/index.js

@@ -1,16 +1,72 @@
 // src/config.ts
-var DEFAULT_API_BASE = process.env.RECOLX_API_BASE ?? "http://127.0.0.1:8005";
+import { readFileSync, writeFileSync, mkdirSync } from "fs";
+import { join } from "path";
+import { homedir } from "os";
+var DEFAULT_ENV = "prod";
 var DEFAULT_CLIENT_ID = process.env.RECOLX_MCP_CLIENT_ID ?? "recolx-mcp";
 var DEFAULT_REDIRECT_URI = "http://localhost:8199/auth/callback";
+var DEFAULT_LOGTO_ENDPOINT = process.env.RECOLX_LOGTO_ENDPOINT ?? "https://test-auth.recolx.ai";
+var DEFAULT_LOGTO_CLIENT_ID = process.env.RECOLX_LOGTO_CLIENT_ID ?? "7gxhhlqavsei898azq1e9";
+var DEFAULT_API_BASE = "https://api.recolx.ai/api";
+var ENV_PRESETS = {
+  // local 与 staging 共用同一套 Logto（test-auth.recolx.ai）：本地测试环境不再走 developer OAuth 单独体系。
+  // 前提：本地后端（192.168.3.194:8000）已接真实 Logto，且用户先用 App/Web 登录过（本地库有该 Logto sub）。
+  local: {
+    apiBase: "http://192.168.3.194:8000",
+    authMode: "logto",
+    logtoEndpoint: DEFAULT_LOGTO_ENDPOINT,
+    logtoClientId: DEFAULT_LOGTO_CLIENT_ID
+  },
+  staging: {
+    apiBase: "https://test-202412-api.recolx.cn/api",
+    authMode: "logto",
+    logtoEndpoint: DEFAULT_LOGTO_ENDPOINT,
+    logtoClientId: DEFAULT_LOGTO_CLIENT_ID
+  },
+  prod: { apiBase: DEFAULT_API_BASE, authMode: "logto", logtoEndpoint: "", logtoClientId: "" }
+};
+function envConfigPath() {
+  return process.env.RECOLX_ENV_CONFIG ?? join(homedir(), ".recolx", "config.json");
+}
+function isEnv(v) {
+  return v === "local" || v === "staging" || v === "prod";
+}
+function readEnvConfig() {
+  try {
+    const raw = JSON.parse(readFileSync(envConfigPath(), "utf8"));
+    return isEnv(raw.env) ? raw.env : null;
+  } catch {
+    return null;
+  }
+}
+function writeEnvConfig(env) {
+  mkdirSync(join(homedir(), ".recolx"), { recursive: true });
+  writeFileSync(envConfigPath(), JSON.stringify({ env }, null, 2) + "\n", "utf8");
+}
+function resolveEnv(env) {
+  if (isEnv(env)) return env;
+  const fromFile = readEnvConfig();
+  if (fromFile) return fromFile;
+  const fromVar = process.env.RECOLX_ENV;
+  if (isEnv(fromVar)) return fromVar;
+  return DEFAULT_ENV;
+}
 function resolveConfig(config) {
-  const apiBase = (config.apiBase ?? DEFAULT_API_BASE).replace(/\/+$/, "");
+  const env = resolveEnv(config.env);
+  const preset = ENV_PRESETS[env];
+  const apiBase = (config.apiBase ?? process.env.RECOLX_API_BASE ?? preset.apiBase).replace(/\/+$/, "");
+  const authMode = process.env.RECOLX_AUTH_MODE === "developer" || process.env.RECOLX_AUTH_MODE === "logto" ? process.env.RECOLX_AUTH_MODE : preset.authMode;
   return {
     clientId: config.clientId ?? DEFAULT_CLIENT_ID,
     redirectUri: config.redirectUri ?? DEFAULT_REDIRECT_URI,
-    tokenFile: config.tokenFile ?? "tokens-mcp.json",
+    tokenFile: config.tokenFile ?? `tokens-mcp-${env}.json`,
     apiBase,
     authorizationUrl: config.authorizationUrl ?? `${apiBase}/open/oauth/authorize`,
     tokenUrl: config.tokenUrl ?? `${apiBase}/open/oauth/token`,
+    env,
+    authMode,
+    logtoEndpoint: (config.logtoEndpoint ?? process.env.RECOLX_LOGTO_ENDPOINT ?? preset.logtoEndpoint).replace(/\/+$/, ""),
+    logtoClientId: config.logtoClientId ?? process.env.RECOLX_LOGTO_CLIENT_ID ?? preset.logtoClientId,
     extraHeaders: config.extraHeaders ?? {},
     fetch: config.fetch,
     tokenDir: config.tokenDir
@@ -19,14 +75,14 @@ function resolveConfig(config) {
 
 // src/token-store.ts
 import { readFile, writeFile, mkdir, rm } from "fs/promises";
-import { join } from "path";
-import { homedir } from "os";
+import { join as join2 } from "path";
+import { homedir as homedir2 } from "os";
 var TokenStore = class {
   dir;
   path;
-  constructor(filename = "tokens-mcp.json", dir = join(homedir(), ".recolx")) {
+  constructor(filename = "tokens-mcp.json", dir = join2(homedir2(), ".recolx")) {
     this.dir = dir;
-    this.path = join(dir, filename);
+    this.path = join2(dir, filename);
   }
   async save(tokenSet) {
     await mkdir(this.dir, { recursive: true });
@@ -46,7 +102,7 @@ var TokenStore = class {
     }
   }
 };
-var TOKENS_MCP_PATH = join(homedir(), ".recolx", "tokens-mcp.json");
+var TOKENS_MCP_PATH = join2(homedir2(), ".recolx", "tokens-mcp.json");
 
 // src/oauth.ts
 import { createHash, randomBytes } from "crypto";
@@ -73,17 +129,52 @@ var OAuth = class {
   tokenStore;
   authorizationUrl;
   tokenUrl;
+  /** developer | logto（resolveConfig 已解析） */
+  mode;
   fetchImpl;
   constructor(config) {
     this.config = resolveConfig(config);
     this.tokenStore = new TokenStore(this.config.tokenFile, this.config.tokenDir);
     this.authorizationUrl = this.config.authorizationUrl;
     this.tokenUrl = this.config.tokenUrl;
+    this.mode = this.config.authMode;
     this.fetchImpl = this.config.fetch ?? fetch;
   }
-  /** 构造授权请求（PKCE S256）。extraParams 用于本地联调注入 user_id（env=local 才接受）。 */
+  /** logto 模式 client id 校验：缺省抛错（authorize / exchangeCode 共用） */
+  logtoClientId() {
+    const id = this.config.logtoClientId;
+    if (!id) {
+      throw new Error("logto \u6A21\u5F0F\u7F3A\u5C11 client id\uFF1A\u8BF7\u8BBE\u7F6E RECOLX_LOGTO_CLIENT_ID\uFF08Logto \u63A7\u5236\u53F0\u6CE8\u518C\u7684 application id\uFF09");
+    }
+    return id;
+  }
+  /** logto 模式端点校验：缺省抛错（prod 独立 Logto 未配置时明确报错，不静默连测试实例） */
+  logtoEndpoint() {
+    const ep = this.config.logtoEndpoint;
+    if (!ep) {
+      throw new Error("logto \u6A21\u5F0F\u7F3A\u5C11 Logto \u7AEF\u70B9\uFF1A\u5F53\u524D\u73AF\u5883\u7684 Logto \u5C1A\u672A\u914D\u7F6E\uFF08prod \u9700\u8BBE\u7F6E RECOLX_LOGTO_ENDPOINT\uFF09");
+    }
+    return ep;
+  }
+  /** 构造授权请求（PKCE S256）。extraParams 用于本地联调注入 user_id（developer 模式，env=local 才接受）。 */
   createAuthorizationRequest(extraParams = {}) {
     const codeVerifier = generateCodeVerifier();
+    const state = generateState();
+    if (this.mode === "logto") {
+      const { redirectUri } = this.config;
+      const logtoClientId = this.logtoClientId();
+      const logtoEndpoint = this.logtoEndpoint();
+      const params2 = new URLSearchParams({
+        client_id: logtoClientId,
+        redirect_uri: redirectUri,
+        response_type: "code",
+        scope: "openid profile email",
+        code_challenge: generateCodeChallenge(codeVerifier),
+        code_challenge_method: "S256",
+        state
+      });
+      return { url: `${logtoEndpoint}/oidc/auth?${params2.toString()}`, codeVerifier, state };
+    }
     const params = new URLSearchParams({
       client_id: this.config.clientId,
       redirect_uri: this.config.redirectUri,
@@ -91,13 +182,55 @@ var OAuth = class {
       scope: "read",
       code_challenge: generateCodeChallenge(codeVerifier),
       code_challenge_method: "S256",
-      state: generateState(),
+      state,
       ...extraParams
     });
-    return { url: `${this.authorizationUrl}?${params.toString()}`, codeVerifier, state: params.get("state") };
+    return { url: `${this.authorizationUrl}?${params.toString()}`, codeVerifier, state };
   }
-  /** 授权码换 token 并落盘；失败抛 Error（含状态码与响应体）。 */
+  /** 授权码换凭证并落盘；失败抛 Error（含状态码与响应体）。
+   *  developer 模式：直接换 developerOAuth JWT；
+   *  logto 模式：先换 Logto access token，再 POST /open/oauth/apikey 换 sk- 长期 key（落盘的是 sk- key）。 */
   async exchangeCode(code, codeVerifier) {
+    if (this.mode === "logto") {
+      const { redirectUri } = this.config;
+      const logtoClientId = this.logtoClientId();
+      const logtoEndpoint = this.logtoEndpoint();
+      const tokenRes = await this.fetchImpl(`${logtoEndpoint}/oidc/token`, {
+        method: "POST",
+        headers: { "Content-Type": "application/x-www-form-urlencoded", Accept: "application/json" },
+        body: new URLSearchParams({
+          grant_type: "authorization_code",
+          code,
+          code_verifier: codeVerifier,
+          client_id: logtoClientId,
+          redirect_uri: redirectUri
+        })
+      });
+      if (!tokenRes.ok) {
+        throw new Error(`Logto token exchange failed: ${tokenRes.status} ${await tokenRes.text()}`);
+      }
+      const tokenBody = await tokenRes.json();
+      const logtoToken = tokenBody.access_token;
+      if (typeof logtoToken !== "string" || logtoToken.length === 0) {
+        throw new Error("Logto token exchange: missing access_token");
+      }
+      const keyRes = await this.fetchImpl(`${this.config.apiBase}/open/oauth/apikey`, {
+        method: "POST",
+        headers: { "Content-Type": "application/x-www-form-urlencoded", Accept: "application/json" },
+        body: new URLSearchParams({ logto_token: logtoToken })
+      });
+      if (!keyRes.ok) {
+        throw new Error(`Issue API key failed: ${keyRes.status} ${await keyRes.text()}`);
+      }
+      const body = await keyRes.json();
+      const apiKey = typeof body.api_key === "string" ? body.api_key : "";
+      if (!apiKey) {
+        throw new Error("Issue API key: missing api_key in response");
+      }
+      const tokenSet2 = { access_token: apiKey, token_type: "Bearer" };
+      await this.tokenStore.save(tokenSet2);
+      return tokenSet2;
+    }
     const res = await this.fetchImpl(this.tokenUrl, {
       method: "POST",
       headers: { "Content-Type": "application/x-www-form-urlencoded", Accept: "application/json" },
@@ -110,8 +243,9 @@ var OAuth = class {
     await this.tokenStore.save(tokenSet);
     return tokenSet;
   }
-  /** 用 refresh_token 换新 token（后端滚动轮换），失败返回 null。 */
+  /** 用 refresh_token 换新 token（后端滚动轮换）；logto 模式无 refresh（sk- key 长期有效），恒返回 null。 */
   async refresh(refreshToken) {
+    if (this.mode === "logto") return null;
     const res = await this.fetchImpl(this.tokenUrl, {
       method: "POST",
       headers: { "Content-Type": "application/x-www-form-urlencoded", Accept: "application/json" },
@@ -159,20 +293,36 @@ var OAuth = class {
 var RecolxClient = class {
   oauth;
   apiBase;
+  env;
   extraHeaders;
   /** 测试/联调用：设置后不再走 OAuth token 获取 */
   staticToken;
   fetchImpl;
   constructor(config) {
+    this.applyConfig(config);
+  }
+  applyConfig(config) {
     const resolved = resolveConfig(config);
     this.oauth = new OAuth(resolved);
     this.apiBase = resolved.apiBase;
+    this.env = resolved.env;
     this.extraHeaders = resolved.extraHeaders ?? {};
     this.fetchImpl = resolved.fetch ?? fetch;
   }
   get auth() {
     return this.oauth;
   }
+  /** 切换环境：写 ~/.recolx/config.json 并即时重建 OAuth/API base；返回新状态 */
+  async setEnv(env) {
+    writeEnvConfig(env);
+    this.applyConfig({});
+    return this.getEnvState();
+  }
+  /** 当前环境状态（含登录态） */
+  async getEnvState() {
+    const token = await this.oauth.getAccessToken();
+    return { env: this.env, api_base: this.apiBase, auth_mode: this.oauth.mode, logged_in: token !== null };
+  }
   async request(path, init) {
     const token = init?.token ?? this.staticToken ?? await this.oauth.getAccessToken();
     if (!token) {
@@ -308,6 +458,10 @@ var FileDetailSchema = FileSchema.extend({
 var LoginInput = z.object({}).optional();
 var LogoutInput = z.object({}).optional();
 var GetCurrentUserInput = z.object({}).optional();
+var SetEnvInput = z.object({
+  env: z.enum(["local", "staging", "prod"]).describe("\u76EE\u6807\u73AF\u5883\uFF1Alocal \u672C\u5730\u6D4B\u8BD5 / staging \u7EBF\u4E0A\u6D4B\u8BD5 / prod \u7EBF\u4E0A\u6B63\u5F0F")
+});
+var GetEnvInput = z.object({}).optional();
 var ListFilesInput = z.object({
   page: z.number().int().min(1).optional().default(1),
   page_size: z.number().int().min(1).max(100).optional().default(20),
@@ -460,12 +614,17 @@ export {
   CurrentUserSchema,
   DEFAULT_API_BASE,
   DEFAULT_CLIENT_ID,
+  DEFAULT_ENV,
+  DEFAULT_LOGTO_CLIENT_ID,
+  DEFAULT_LOGTO_ENDPOINT,
   DEFAULT_REDIRECT_URI,
   DeviceSchema,
+  ENV_PRESETS,
   FileDetailSchema,
   FileListSchema,
   FileSchema,
   GetCurrentUserInput,
+  GetEnvInput,
   GetFileInput,
   GetNoteInput,
   GetTranscriptInput,
@@ -475,12 +634,14 @@ export {
   OAuth,
   RecolxClient,
   SegmentSchema,
+  SetEnvInput,
   SubscriptionSchema,
   SummarySchema,
   TOKENS_MCP_PATH,
   TokenStore,
   TranscriptSchema,
   classifyError,
+  envConfigPath,
   errorTypeFromStatus,
   generateCodeChallenge,
   generateCodeVerifier,
@@ -488,6 +649,9 @@ export {
   localDayEnd,
   localDayStart,
   parseApiTimestamp,
+  readEnvConfig,
   resolveConfig,
-  runOAuthCallback
+  resolveEnv,
+  runOAuthCallback,
+  writeEnvConfig
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uzqw/shared",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Shared types, zod schemas, token store and API client for recolx MCP/CLI",
   "publishConfig": {
     "access": "public"