ali-skills 0.0.28 → 0.0.29

package/node_modules/@ali/cli-skills/dist/cli.mjs

@@ -2340,7 +2340,7 @@ function logSkillParseFailures(failures) {
 		if (f.hint) M.message(import_picocolors.default.yellow(`  提示: ${f.hint}`));
 	}
 }
-var version$1 = "2.0.29";
+var version$1 = "2.0.30";
 const isCancelled$1 = (value) => typeof value === "symbol";
 function redactSensitiveText(text) {
 	return text.replace(/(https?:\/\/)([^/\s:@]+)(?::([^@/\s]*))?@/gi, "$1").replace(/([?&](?:private_token|access_token|token|api_key|access_key|secret|password)=)[^&\s]+/gi, "$1***");
@@ -5597,7 +5597,12 @@ async function ensureSsoTicket() {
 		}
 		const errorData = await response.json().catch(() => ({ error: "Unknown error" }));
 		gatewayDebugLog(`sso-ticket failed: code=${errorData.code ?? "n/a"}, error=${errorData.error ?? "Unknown error"}`);
-		console.error(`${RED$3}获取 SSO_TICKET 失败: ${errorData.error || errorData.code || "Unknown error"}${RESET$3}`);
+		if (response.status === 401 && errorData.code === "INVALID_TOKEN") {
+			console.error(`${RED$3}ali-skills CLI 会话凭证（Gateway private token）已失效，无法获取 BUC SSO_TICKET${RESET$3}`);
+			console.log(`${TEXT$3}请重新登录: npx ali-skills login${RESET$3}`);
+			return null;
+		}
+		console.error(`${RED$3}获取 BUC SSO_TICKET 失败: ${errorData.error || errorData.code || "Unknown error"}${RESET$3}`);
 		return null;
 	} catch (error) {
 		gatewayDebugLog(`sso-ticket fetch exception: ${error.message}`);
@@ -5620,6 +5625,70 @@ const RESET$2 = "\x1B[0m";
 const GREEN$1 = "\x1B[32m";
 const RED$2 = "\x1B[31m";
 const YELLOW$2 = "\x1B[33m";
+const STREAM_TOTAL_TIMEOUT = 300 * 1e3;
+const STREAM_IDLE_TIMEOUT = 120 * 1e3;
+async function streamResponseBody(response, outputPath) {
+	if (!response.body) return;
+	const reader = response.body.getReader();
+	let idleTimer;
+	let idleRejectFn;
+	const idlePromise = new Promise((_, reject) => {
+		idleRejectFn = reject;
+	});
+	const resetIdle = () => {
+		clearTimeout(idleTimer);
+		idleTimer = setTimeout(() => idleRejectFn(/* @__PURE__ */ new Error("STREAM_IDLE_TIMEOUT")), STREAM_IDLE_TIMEOUT);
+	};
+	const totalTimer = setTimeout(() => idleRejectFn(/* @__PURE__ */ new Error("STREAM_TOTAL_TIMEOUT")), STREAM_TOTAL_TIMEOUT);
+	const readChunk = () => Promise.race([reader.read(), idlePromise]);
+	try {
+		if (outputPath) {
+			const { createWriteStream } = await import("fs");
+			const ws = createWriteStream(outputPath);
+			const done$ = new Promise((resolve, reject) => {
+				ws.on("finish", resolve);
+				ws.on("error", reject);
+			});
+			resetIdle();
+			for (;;) {
+				const { done, value } = await readChunk();
+				if (done) {
+					ws.end();
+					break;
+				}
+				resetIdle();
+				ws.write(value);
+			}
+			await done$;
+			return;
+		}
+		const decoder = new TextDecoder();
+		resetIdle();
+		for (;;) {
+			const { done, value } = await readChunk();
+			if (done) break;
+			resetIdle();
+			process.stdout.write(decoder.decode(value, { stream: true }));
+		}
+		const tail = decoder.decode();
+		if (tail) process.stdout.write(tail);
+	} catch (err) {
+		reader.cancel();
+		if (err?.message === "STREAM_IDLE_TIMEOUT") {
+			process.stderr.write(`\n${RED$2}流式超时：超过 ${STREAM_IDLE_TIMEOUT / 1e3}s 未收到数据${RESET$2}\n`);
+			process.exit(1);
+		}
+		if (err?.message === "STREAM_TOTAL_TIMEOUT") {
+			process.stderr.write(`\n${RED$2}流式超时：总时长超过 ${STREAM_TOTAL_TIMEOUT / 1e3}s${RESET$2}\n`);
+			process.exit(1);
+		}
+		throw err;
+	} finally {
+		clearTimeout(idleTimer);
+		clearTimeout(totalTimer);
+		reader.releaseLock();
+	}
+}
 function openBrowser$1(url) {
 	const platform = process.platform;
 	spawn(platform === "darwin" ? "open" : platform === "win32" ? "start" : "xdg-open", [url], {
@@ -5713,7 +5782,7 @@ async function sendO2SdkRequest(targetUrl, options, withSsoTicket) {
 			ssoTicket = await ensureSsoTicket();
 			if (ssoTicket) ssoTicketSource = "gateway";
 		}
-		if (!ssoTicket) throw new Error("无法获取 SSO_TICKET，请重新登录后重试");
+		if (!ssoTicket) throw new Error("无法获取 BUC SSO_TICKET，请执行 npx ali-skills login 重新登录后重试");
 		headers.SSO_TICKET = ssoTicket;
 	}
 	let O2ClientCtor;
@@ -5850,7 +5919,7 @@ async function sendDirectRequest(targetUrl, platform, token, options) {
 	const controller = new AbortController();
 	const timeout = options.timeout || 3e4;
 	const timeoutId = setTimeout(() => controller.abort(), timeout);
-	const { response, responseBody } = await fetchWithRedirects(targetUrl, options.method.toUpperCase(), requestHeaders, body, timeout, options.quiet);
+	const { response, responseBody } = await fetchWithRedirects(targetUrl, options.method.toUpperCase(), requestHeaders, body, timeout, options.quiet, { stream: options.stream });
 	clearTimeout(timeoutId);
 	if (!options.quiet) {
 		const statusColor = response.ok ? GREEN$1 : RED$2;
@@ -5864,6 +5933,14 @@ async function sendDirectRequest(targetUrl, platform, token, options) {
 			console.log();
 		}
 	}
+	if (options.stream) {
+		if (options.output) {
+			await streamResponseBody(response, options.output);
+			if (!options.quiet) console.log(`${GREEN$1}✓ 已保存到 ${options.output}${RESET$2}`);
+		} else await streamResponseBody(response);
+		if (!response.ok) process.exit(1);
+		return;
+	}
 	let outputBody = responseBody;
 	if (!options.raw && options.pretty !== false) try {
 		const json = JSON.parse(responseBody);
@@ -5928,7 +6005,10 @@ async function sendSsoCookieDirectRequest(targetUrl, options) {
 	const controller = new AbortController();
 	const timeout = options.timeout || 3e4;
 	const timeoutId = setTimeout(() => controller.abort(), timeout);
-	const { response, responseBody, loginRedirectUrl } = await fetchWithRedirects(targetUrl, options.method.toUpperCase(), requestHeaders, body, timeout, options.quiet, { stopOnAlibabaLoginRedirect: true });
+	const { response, responseBody, loginRedirectUrl } = await fetchWithRedirects(targetUrl, options.method.toUpperCase(), requestHeaders, body, timeout, options.quiet, {
+		stopOnAlibabaLoginRedirect: true,
+		stream: options.stream
+	});
 	clearTimeout(timeoutId);
 	if (!options.quiet) {
 		const statusColor = response.ok ? GREEN$1 : RED$2;
@@ -5950,6 +6030,21 @@ async function sendSsoCookieDirectRequest(targetUrl, options) {
 		});
 		console.log();
 	}
+	if (options.stream) {
+		if (!response.ok) {
+			if (options.quiet && (loginRedirectUrl || response.headers.get("location"))) {
+				const location = loginRedirectUrl || response.headers.get("location") || "(empty)";
+				console.error(`HTTP ${response.status} ${response.statusText} (Location: ${location})`);
+				printReauthAndRetryHint(location, true);
+			}
+			process.exit(1);
+		}
+		if (options.output) {
+			await streamResponseBody(response, options.output);
+			if (!options.quiet) console.log(`${GREEN$1}✓ 已保存到 ${options.output}${RESET$2}`);
+		} else await streamResponseBody(response);
+		return;
+	}
 	let outputBody = responseBody;
 	if (!options.raw && options.pretty !== false) try {
 		const json = JSON.parse(responseBody);
@@ -6006,12 +6101,20 @@ async function sendSsoTicketDirectRequest(targetUrl, options) {
 	const controller = new AbortController();
 	const timeout = options.timeout || 3e4;
 	const timeoutId = setTimeout(() => controller.abort(), timeout);
-	const { response, responseBody } = await fetchWithRedirects(targetUrl, options.method.toUpperCase(), requestHeaders, body, timeout, options.quiet);
+	const { response, responseBody } = await fetchWithRedirects(targetUrl, options.method.toUpperCase(), requestHeaders, body, timeout, options.quiet, { stream: options.stream });
 	clearTimeout(timeoutId);
 	if (!options.quiet) {
 		const statusColor = response.ok ? GREEN$1 : RED$2;
 		console.log(`${statusColor}${response.status} ${response.statusText}${RESET$2}`);
 	}
+	if (options.stream) {
+		if (options.output) {
+			await streamResponseBody(response, options.output);
+			if (!options.quiet) console.log(`${GREEN$1}✓ 已保存到 ${options.output}${RESET$2}`);
+		} else await streamResponseBody(response);
+		if (!response.ok) process.exit(1);
+		return;
+	}
 	let outputBody = responseBody;
 	if (!options.raw && options.pretty !== false) try {
 		const json = JSON.parse(responseBody);
@@ -6039,7 +6142,7 @@ async function sendPlainDirectRequest(targetUrl, options, allowSsoCookieFallback
 		console.log(`${DIM$2}→ 直接请求 (No Auth)${RESET$2}`);
 	}
 	const timeout = options.timeout || 3e4;
-	const { response, responseBody, sawAlibabaLoginRedirect } = await fetchWithRedirects(targetUrl, options.method.toUpperCase(), requestHeaders, body, timeout, options.quiet);
+	const { response, responseBody, sawAlibabaLoginRedirect } = await fetchWithRedirects(targetUrl, options.method.toUpperCase(), requestHeaders, body, timeout, options.quiet, { stream: options.stream });
 	if (allowSsoCookieFallback && sawAlibabaLoginRedirect) {
 		if (!options.quiet) {
 			console.log(`${YELLOW$2}检测到请求被重定向到 login.alibaba-inc.com，目标接口可能需要登录鉴权${RESET$2}`);
@@ -6063,6 +6166,14 @@ async function sendPlainDirectRequest(targetUrl, options, allowSsoCookieFallback
 			console.log();
 		}
 	}
+	if (options.stream) {
+		if (options.output) {
+			await streamResponseBody(response, options.output);
+			if (!options.quiet) console.log(`${GREEN$1}✓ 已保存到 ${options.output}${RESET$2}`);
+		} else await streamResponseBody(response);
+		if (!response.ok) process.exit(1);
+		return;
+	}
 	let outputBody = responseBody;
 	if (!options.raw && options.pretty !== false) try {
 		const json = JSON.parse(responseBody);
@@ -6090,11 +6201,18 @@ async function fetchWithRedirects(initialUrl, method, headers, body, timeout, qu
 				signal: controller.signal,
 				redirect: "manual"
 			});
-			if (!REDIRECT_STATUS_CODES.has(response.status)) return {
-				response,
-				responseBody: await response.text(),
-				sawAlibabaLoginRedirect
-			};
+			if (!REDIRECT_STATUS_CODES.has(response.status)) {
+				if (opts?.stream) return {
+					response,
+					responseBody: "",
+					sawAlibabaLoginRedirect
+				};
+				return {
+					response,
+					responseBody: await response.text(),
+					sawAlibabaLoginRedirect
+				};
+			}
 			const location = response.headers.get("location");
 			if (!location) return {
 				response,
@@ -6177,13 +6295,36 @@ async function sendGatewayRequest(targetUrl, platformKey, options, authMode = "g
 			error: "Unauthorized",
 			code: "UNKNOWN"
 		}))).code === "INVALID_TOKEN") {
-			console.error(`${RED$2}Error: Token 已失效，请重新登录${RESET$2}`);
-			console.log(`${TEXT$2}执行: npx ali-skills login${RESET$2}`);
+			console.error(`${RED$2}Error: ali-skills CLI 会话凭证（Gateway private token）已失效${RESET$2}`);
+			console.log(`${TEXT$2}请重新登录: npx ali-skills login${RESET$2}`);
 			process.exit(1);
 		}
 	}
-	const responseBody = await response.text();
 	const requestId = response.headers.get("X-Gateway-Request-Id");
+	if (options.stream) {
+		if (!options.quiet) {
+			const statusColor = response.ok ? GREEN$1 : RED$2;
+			console.log(`${statusColor}${response.status} ${response.statusText}${RESET$2}`);
+			if (requestId) console.log(`${DIM$2}Request ID: ${requestId}${RESET$2}`);
+			if (options.includeHeaders) {
+				console.log();
+				console.log(`${TEXT$2}Response Headers:${RESET$2}`);
+				response.headers.forEach((value, key) => console.log(`  ${key}: ${value}`));
+				console.log();
+			}
+		}
+		if (!response.ok) {
+			const errBody = await response.text().catch(() => "");
+			if (errBody) process.stderr.write(errBody + "\n");
+			process.exit(1);
+		}
+		if (options.output) {
+			await streamResponseBody(response, options.output);
+			if (!options.quiet) console.log(`${GREEN$1}✓ 已保存到 ${options.output}${RESET$2}`);
+		} else await streamResponseBody(response);
+		return;
+	}
+	const responseBody = await response.text();
 	if (!options.quiet) {
 		const statusColor = response.ok ? GREEN$1 : RED$2;
 		console.log(`${statusColor}${response.status} ${response.statusText}${RESET$2}`);
@@ -6839,6 +6980,7 @@ ${BOLD}Request Options:${RESET}
   -t, --timeout <ms>      Request timeout (default: 30000)
   --pretty                Pretty print JSON output (default: true)
   --raw                   Raw output without formatting
+  --stream                Stream response body as it arrives (useful for SSE / LLM APIs)
   -q, --quiet             Quiet mode, only output response body
 
 ${BOLD}Examples:${RESET}
@@ -6988,6 +7130,9 @@ function parseRequestOptions(args) {
 			case "--raw":
 				options.raw = true;
 				break;
+			case "--stream":
+				options.stream = true;
+				break;
 			case "--auth-mode":
 			case "--auth":
 				options.authMode = args[++i] ?? "auto";

package/node_modules/@ali/cli-skills/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ali/cli-skills",
-  "version": "2.0.29",
+  "version": "2.0.30",
   "description": "The open agent skills ecosystem",
   "type": "module",
   "bin": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ali-skills",
-  "version": "0.0.28",
+  "version": "0.0.29",
   "description": "The open agent skills ecosystem",
   "type": "module",
   "bin": {
@@ -31,7 +31,7 @@
   "author": "",
   "license": "MIT",
   "dependencies": {
-    "@ali/cli-skills": "^2.0.29"
+    "@ali/cli-skills": "^2.0.30"
   },
   "bundleDependencies": [
     "@ali/cli-skills"