@voxli/cli 0.6.0 → 0.6.2

package/dist/commands/auth.js

@@ -1,6 +1,7 @@
 import { createInterface } from "node:readline/promises";
 import { stdin, stdout } from "node:process";
-import { writeConfig } from "../lib/config.js";
+import { join } from "node:path";
+import { findLocalConfigDir, writeConfig } from "../lib/config.js";
 import { register, ApiError } from "../lib/api.js";
 import { getStableHostname } from "../lib/hostname.js";
 import { browserAuth } from "../lib/browser-auth.js";
@@ -37,12 +38,30 @@ async function validateAndSave(token, extra, opts) {
         // Network error or other — warn but still save
         console.warn("Warning: could not validate token (network error). Saving anyway.");
     }
-    const target = opts?.local ? "local" : "global";
+    // Target selection:
+    // - --local: force cwd/.voxli (creates if missing).
+    // - default: reuse an existing local config in the cwd ancestor chain so
+    //   the listener (which reads local first) picks up the new credentials.
+    //   Falls back to the global config if no local one exists.
+    let writeOpts;
+    if (opts?.local) {
+        writeOpts = { configDir: join(process.cwd(), ".voxli") };
+    }
+    else {
+        const existingLocal = await findLocalConfigDir();
+        if (existingLocal) {
+            console.log(`Detected local config at ${existingLocal}; saving there.`);
+            writeOpts = { configDir: existingLocal };
+        }
+        else {
+            writeOpts = { target: "global" };
+        }
+    }
     const savedPath = await writeConfig({
         accessToken: token,
         refreshToken: extra?.refreshToken,
         clientId: extra?.clientId,
-    }, { target });
+    }, writeOpts);
     console.log(`${label} saved to ${savedPath}`);
 }
 export async function authCommand(opts) {

package/dist/commands/listen.js

@@ -3,7 +3,9 @@ import { spawn } from "node:child_process";
 import { resolveApiKey, resolveConfig, attemptTokenRefresh, } from "../lib/config.js";
 import { buildAgentIdentifier, getStableHostname } from "../lib/hostname.js";
 import { register, ApiError } from "../lib/api.js";
+import { getJwtExpiry } from "../lib/oauth.js";
 const POLL_INTERVAL = 5_000;
+const REFRESH_BUFFER_SECONDS = 30 * 60;
 export async function listenCommand(options) {
     const isEnvToken = !!resolveApiKey();
     let apiKey = null;
@@ -40,6 +42,19 @@ export async function listenCommand(options) {
     console.log(`Listening as ${displayName} (${uniqueIdentifier}) using credentials from ${credentialSource}`);
     while (true) {
         try {
+            // Proactively refresh if the token expires within the buffer window so
+            // newly-spawned subprocesses inherit a token that will outlast the test.
+            if (!isEnvToken) {
+                const exp = getJwtExpiry(apiKey);
+                const nowSec = Math.floor(Date.now() / 1000);
+                if (exp !== null && exp - nowSec < REFRESH_BUFFER_SECONDS) {
+                    const newToken = await attemptTokenRefresh(apiKey);
+                    if (newToken && newToken !== apiKey) {
+                        apiKey = newToken;
+                        console.log("Access token refreshed proactively.");
+                    }
+                }
+            }
             const data = await register(apiKey, {
                 name: displayName,
                 unique_identifier: uniqueIdentifier,

package/dist/lib/oauth.d.ts

@@ -13,6 +13,11 @@ export declare function refreshAccessToken(baseUrl: string, refreshToken: string
     accessToken: string;
     refreshToken?: string;
 }>;
+/**
+ * Read the `exp` claim (seconds since epoch) from a JWT access token.
+ * Returns null if the token isn't a parseable JWT or has no `exp`.
+ */
+export declare function getJwtExpiry(token: string): number | null;
 export declare function buildAuthorizeUrl(baseUrl: string, params: {
     clientId: string;
     redirectUri: string;

package/dist/lib/oauth.js

@@ -66,6 +66,22 @@ export async function refreshAccessToken(baseUrl, refreshToken, clientId) {
         refreshToken: data.refresh_token,
     };
 }
+/**
+ * Read the `exp` claim (seconds since epoch) from a JWT access token.
+ * Returns null if the token isn't a parseable JWT or has no `exp`.
+ */
+export function getJwtExpiry(token) {
+    const parts = token.split(".");
+    if (parts.length !== 3)
+        return null;
+    try {
+        const payload = JSON.parse(Buffer.from(parts[1], "base64url").toString("utf-8"));
+        return typeof payload.exp === "number" ? payload.exp : null;
+    }
+    catch {
+        return null;
+    }
+}
 export function buildAuthorizeUrl(baseUrl, params) {
     const url = new URL("/oauth/authorize", baseUrl);
     url.searchParams.set("response_type", "code");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voxli/cli",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "description": "CLI agent for running Voxli test scenarios locally",
   "type": "module",
   "bin": {