ai-fly 0.1.1 → 0.3.0-alpha.2

package/dist/{run-Be8H-IRf.mjs → run-DbPXAm6h.mjs}

@@ -1,7 +1,8 @@
 import { t as CliError } from "./errors-BGtxPkM7.mjs";
-import { o as parseArgv } from "./config-CO3WyW2H.mjs";
-import { a as ringsForRun, c as consumersRoot, i as printListeners, n as ctxHomedir, o as waitForSignals, p as listKeyrings, r as ctxOut, t as createSdkFabricFactory } from "./common-4VeA_3wo.mjs";
-import { n as createFabricProviderTransport, t as startEngine } from "./runtime-Dg4en1D8.mjs";
+import { n as parseArgv } from "./args-CSxXW9eD.mjs";
+import { n as consumersRoot, s as listKeyrings } from "./store-BiTS2FTl.mjs";
+import { a as ringsForRun, i as printListeners, n as ctxHomedir, o as waitForSignals, r as ctxOut, t as createSdkFabricFactory } from "./common-CgxCXeTt.mjs";
+import { n as createFabricProviderTransport, t as startEngine } from "./runtime-D_nxUEjd.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/consumer/run.ts
 async function run(argv, ctx = {}) {
@@ -11,7 +12,8 @@ async function run(argv, ctx = {}) {
 			tilde: true
 		},
 		"strict-ports": { type: "boolean" },
-		relay: { type: "multi" }
+		relay: { type: "multi" },
+		proxy: { type: "string" }
 	}, { homedir: ctx.homedir ?? homedir() });
 	const out = ctxOut(ctx);
 	const root = consumersRoot(options.data, ctxHomedir(ctx));
@@ -19,7 +21,8 @@ async function run(argv, ctx = {}) {
 	for (const w of warnings) out(`warning: ${w}`);
 	const engineRings = ringsForRun(rings);
 	if (engineRings.length === 0) throw new CliError("error: no imported providers - run 'ai-fly import <aifly1-link>' or 'ai-fly join <token>' first");
-	const factory = await createSdkFabricFactory(options.relay, ctx);
+	const factory = await createSdkFabricFactory(options.relay, ctx, void 0, options.proxy);
+	out(`gateway starting - booting fabric for ${engineRings.length} provider ring(s) (unreachable relays can stall this ~30s; Ctrl+C to abort)...`);
 	const engine = await startEngine({
 		rings: engineRings,
 		consumersRoot: root,

package/dist/{runtime-Dg4en1D8.mjs → runtime-D_nxUEjd.mjs}

@@ -1,6 +1,6 @@
-import { a as FRAME_TYPE, s as HTTP_METHODS } from "./sdk-C6xDRbzg.mjs";
-import { g as reconcileKeyMetadata, m as loadKeyring, s as applyCatalog, v as saveKeyring } from "./common-4VeA_3wo.mjs";
-import { i as splitBody, n as FabricWireAdapter, t as WireSession } from "./mux-xHl9Jrbi.mjs";
+import { i as FRAME_TYPE, o as HTTP_METHODS } from "./frames-BDqvhB2Y.mjs";
+import { c as loadKeyring, f as saveKeyring, t as applyCatalog, u as reconcileKeyMetadata } from "./store-BiTS2FTl.mjs";
+import { i as splitBody, n as FabricWireAdapter, t as WireSession } from "./mux-CS1zhF4W.mjs";
 import { n as desiredPortFor, r as listenWithFallback, t as LOOPBACK_HOST } from "./ports-pI59MtmI.mjs";
 import { Hono } from "hono";
 import { createAdaptorServer } from "@hono/node-server";

package/dist/secret-SA37VND5.mjs

@@ -0,0 +1,95 @@
+import { n as UsageError, r as reportCliError } from "./errors-BGtxPkM7.mjs";
+import { n as parseArgv } from "./args-CSxXW9eD.mjs";
+import { d as str, l as resolveDataDir } from "./common-CqxqIg6D.mjs";
+import { t as SecretsStore } from "./secrets-BYI6ooTJ.mjs";
+import { homedir } from "node:os";
+import process from "node:process";
+import { createInterface } from "node:readline";
+import { Writable } from "node:stream";
+//#region src/cli/commands/provider/secret.ts
+const SPEC = {
+	data: {
+		type: "string",
+		tilde: true
+	},
+	value: { type: "string" },
+	stdin: { type: "boolean" },
+	"no-bearer": { type: "boolean" }
+};
+const USAGE = `usage:
+  ai-fly secret set <name> [--value <v> | --stdin] [--no-bearer] [--data <dir>]
+  ai-fly secret list [--data <dir>]
+  ai-fly secret remove <name> [--data <dir>]
+(the raw value is never displayed or returned - there is no 'secret get')`;
+async function run(argv, ctx = {}) {
+	try {
+		const home = ctx.homedir ?? homedir();
+		const { options, positionals } = parseArgv(argv, SPEC, { homedir: home });
+		const sub = positionals[0];
+		if (sub === "set") return await set(options, positionals, home);
+		if (sub === "list") return list(options, home);
+		if (sub === "remove") return remove(options, positionals, home);
+		if (sub === void 0) throw new UsageError(USAGE);
+		throw new UsageError(`error: unknown secret subcommand '${sub}' (known: set, list, remove)`);
+	} catch (err) {
+		return reportCliError(err);
+	}
+}
+/** 隐藏输入（TTY）：回显屏蔽为 *；非 TTY 无 --value/--stdin 即报错。 */
+async function readHidden(prompt) {
+	const muted = new Writable({ write(chunk, _enc, callback) {
+		process.stdout.write(/\r|\n/.test(String(chunk)) ? "\n" : "*");
+		callback();
+	} });
+	const rl = createInterface({
+		input: process.stdin,
+		output: muted,
+		terminal: true
+	});
+	const answer = await new Promise((resolve) => {
+		rl.question(prompt, (value) => resolve(value));
+	});
+	rl.close();
+	return answer;
+}
+async function set(options, positionals, home) {
+	const name = positionals[1];
+	if (name === void 0) throw new UsageError("error: secret set requires a <name> argument");
+	let value = options.value === void 0 ? void 0 : String(options.value);
+	if (options.stdin === true) value = await readFileSyncStdin();
+	else if (value === void 0) {
+		if (!process.stdin.isTTY) throw new UsageError("error: no TTY - pass --value <v> or --stdin for the secret value");
+		value = (await readHidden(`value for '${name}': `)).trim();
+	}
+	if (value === "") throw new UsageError("error: secret value must not be empty");
+	const entry = SecretsStore.open(resolveDataDir(void 0, home)).set(name, value, { bearerPrefix: options["no-bearer"] !== true });
+	process.stdout.write(`secret set: ${entry.name} (bearer prefix ${entry.bearerPrefix ? "on" : "off"}) - inject with service add --secret ${entry.name}\n`);
+	return 0;
+}
+async function readFileSyncStdin() {
+	const chunks = [];
+	for await (const chunk of process.stdin) chunks.push(Buffer.from(chunk));
+	return Buffer.concat(chunks).toString("utf8").trim();
+}
+function list(options, home) {
+	const secrets = SecretsStore.open(resolveDataDir(str(options.data), home)).list();
+	const out = (line) => {
+		process.stdout.write(`${line}\n`);
+	};
+	out(`secrets (${secrets.length})`);
+	for (const entry of secrets) {
+		const created = new Date(entry.createdAt).toISOString().slice(0, 16).replace("T", " ");
+		const updated = entry.updatedAt === entry.createdAt ? "" : ` updated ${new Date(entry.updatedAt).toISOString().slice(0, 16).replace("T", " ")}`;
+		out(`  ${entry.name.padEnd(24)} ${created}${updated}  bearer:${entry.bearerPrefix ? "on" : "off"}`);
+	}
+	return 0;
+}
+function remove(options, positionals, home) {
+	const name = positionals[1];
+	if (name === void 0) throw new UsageError("error: secret remove requires a <name> argument");
+	SecretsStore.open(resolveDataDir(str(options.data), home)).remove(name);
+	process.stdout.write(`secret removed: ${name}\n`);
+	return 0;
+}
+//#endregion
+export { run };

package/dist/secrets-BYI6ooTJ.mjs

@@ -0,0 +1,113 @@
+import { r as SECRET_NAME_SCHEMA } from "./rpc-contract-5qyWzT5t.mjs";
+import { i as ensurePrivateDir, n as StoreError, r as atomicWriteFileSync } from "./store-CrTUwskE.mjs";
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { z } from "zod";
+//#region src/provider/secrets.ts
+/** 文件形状：{ version: 1, secrets: { [name]: { value, createdAt, updatedAt, bearerPrefix } } }。
+*  旧文件无 bearerPrefix 字段按 true 读入（zod default，写入时补齐）。 */
+const SECRETS_FILE_SCHEMA = z.strictObject({
+	version: z.literal(1),
+	secrets: z.record(SECRET_NAME_SCHEMA, z.strictObject({
+		value: z.string().min(1).max(8192),
+		createdAt: z.number().int().min(0),
+		updatedAt: z.number().int().min(0),
+		bearerPrefix: z.boolean().default(true)
+	}))
+});
+const SECRETS_VALUE_MAX = 8192;
+var SecretsStore = class SecretsStore {
+	dataDir;
+	constructor(dataDir) {
+		this.dataDir = dataDir;
+	}
+	static filePath(dataDir) {
+		return join(dataDir, "secrets.json");
+	}
+	/** 打开（确保目录存在；文件不存在视为空库——首次 set 时落盘）。 */
+	static open(dataDir) {
+		ensurePrivateDir(dataDir);
+		return new SecretsStore(dataDir);
+	}
+	/** 读盘 + 校验（不存在 → 空库；损坏/非法抛 StoreError(corrupt)）。 */
+	read() {
+		const path = SecretsStore.filePath(this.dataDir);
+		if (!existsSync(path)) return {
+			version: 1,
+			secrets: {}
+		};
+		let raw;
+		try {
+			raw = readFileSync(path, "utf8");
+		} catch (err) {
+			throw new StoreError("corrupt", `error: cannot read ${path}: ${err.message}`);
+		}
+		let parsed;
+		try {
+			parsed = JSON.parse(raw);
+		} catch {
+			throw new StoreError("corrupt", `error: ${path} is not valid JSON (fix or remove it manually)`);
+		}
+		const result = SECRETS_FILE_SCHEMA.safeParse(parsed);
+		if (!result.success) throw new StoreError("corrupt", `error: ${path} failed validation: ${result.error.message}`);
+		return result.data;
+	}
+	write(data) {
+		atomicWriteFileSync(SecretsStore.filePath(this.dataDir), `${JSON.stringify(data, null, 2)}\n`);
+	}
+	/** 清单（名称/时间戳/bearer 开关；按名称排序稳定输出）。 */
+	list() {
+		const { secrets } = this.read();
+		return Object.entries(secrets).map(([name, entry]) => ({
+			name,
+			createdAt: entry.createdAt,
+			updatedAt: entry.updatedAt,
+			bearerPrefix: entry.bearerPrefix
+		})).sort((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0);
+	}
+	/** 取值（未知名返回 undefined——由调用方决定失败语义，如 secret_missing）。 */
+	get(name) {
+		const entry = this.read().secrets[name];
+		return entry === void 0 ? void 0 : entry.value;
+	}
+	/** 解析为最终注入头值：bearerPrefix 开启时前拼 "Bearer "（幂等：值已以
+	*  Bearer 开头则不再重复拼）。$secret:/test 一律走这里，不直接用 get()。 */
+	resolve(name) {
+		const entry = this.read().secrets[name];
+		if (entry === void 0) return void 0;
+		const bare = entry.value;
+		return { headerValue: entry.bearerPrefix && !/^Bearer\s/i.test(bare) ? `Bearer ${bare}` : bare };
+	}
+	/** 新增/覆写（返回清单投影；createdAt 首次落定时固定，覆写只动 updatedAt）。 */
+	set(name, value, opts) {
+		if (!SECRET_NAME_SCHEMA.safeParse(name).success) throw new StoreError("invalid", "error: secret name must be 1..128 chars of lowercase letters, digits, dot, dash, underscore");
+		if (value === "" || value.length > SECRETS_VALUE_MAX) throw new StoreError("invalid", `error: secret value must be 1..${SECRETS_VALUE_MAX} chars`);
+		const data = this.read();
+		const now = Date.now();
+		const previous = data.secrets[name];
+		const bearerPrefix = opts?.bearerPrefix ?? previous?.bearerPrefix ?? true;
+		const entry = {
+			value,
+			createdAt: previous === void 0 ? now : previous.createdAt,
+			updatedAt: now,
+			bearerPrefix
+		};
+		data.secrets[name] = entry;
+		this.write(data);
+		return {
+			name,
+			createdAt: entry.createdAt,
+			updatedAt: entry.updatedAt,
+			bearerPrefix
+		};
+	}
+	/** 删除（不存在抛 StoreError(not-found)——RPC 边界映射 NOT_FOUND）。 */
+	remove(name) {
+		const data = this.read();
+		if (data.secrets[name] === void 0) throw new StoreError("not-found", `error: secret '${name}' not found`);
+		delete data.secrets[name];
+		this.write(data);
+	}
+};
+//#endregion
+export { SecretsStore as t };

package/dist/secrets-u19-8EyW.mjs

@@ -0,0 +1,2 @@
+import { t as SecretsStore } from "./secrets-BYI6ooTJ.mjs";
+export { SecretsStore };