alink-cli 0.8.5 → 0.8.7

package/README.md

@@ -1,41 +1,48 @@
 # alink-cli
 
-一条命令把当前电脑上的 Claude Code、Codex、Gemini、Qwen、Kimi 等编码 agent 接入 AgentLink。
+在手机上或浏览器里远程控制你电脑上的 Claude Code、Codex、Gemini、Qwen、Kimi 等编码 agent。
 
-```bash
-npx alink-cli
-```
+## 快速开始
+
+1. **全局安装**
+
+   ```bash
+   npm install -g alink-cli
+   ```
+
+2. **运行 CLI**
+
+   ```bash
+   alink-cli
+   ```
 
-直接运行会进入基于 Ink 的交互式 TUI。TUI 采用扁平菜单，最多两级：
+3. **按提示登录 AgentLink 账号**
 
-- 顶部状态栏实时显示 daemon 是否运行、PID、Hub、凭证状态。
-- 主菜单：启动 / 停止 / 重启 daemon、查看状态详情、登录 / 登出、查看机器、设置、帮助、退出。
-- 未登录时才显示扫码配对入口。
-- 启动 daemon 后它在后台运行，退出 TUI 不会停止它。
+   首次登录后，这台电脑会自动加入你的账号。之后直接运行 `alink-cli` 就能重新上线。
 
-首次运行输入 AgentLink 账号和密码，这台电脑会自动加入账号并上线。之后直接重复 `npx alink-cli` 即可管理或启动后台服务；账号密码不会保存到本机，登录会话 JWT 缓存于 `~/.agentlink/session`（0600）。
+4. **打开手机或浏览器访问控制台**
+
+   选择你的电脑、选择 agent、选择工作目录，然后发任务。输出会实时流回；锁屏或关掉浏览器后，任务仍会继续在电脑上运行。
+
+## 常用命令
 
 ```bash
-npm install -g alink-cli
-alink-cli help
-alink-cli login
-alink-cli status
-alink-cli machines
-alink-cli logout
-
-npx alink-cli --hub wss://your-hub.example.com
-npx alink-cli --dir /path/to/project
+alink-cli           # 启动或管理连接
+alink-cli login     # 登录并注册这台电脑
+alink-cli status    # 查看连接状态
+alink-cli machines  # 查看账号下的电脑
+alink-cli logout    # 退出登录
 ```
 
-- 全局安装后可直接使用 `alink-cli`（兼容旧命令 `agentlink`）。
-- `login`：登录账号并注册这台电脑，但不启动服务。
-- `status`：查看当前登录状态和 Hub。
-- `machines`：查看账号下的所有机器（在线/离线），不展示内部凭证；首次会验证一次账号密码，之后使用缓存的会话 JWT，无需重复输入。
-- `logout`：退出当前账号并清除本机登录记录，下次运行重新输入账号密码。
-- `--hub`：Hub 地址，默认 `wss://link.harmopath.com`。
-- `--dir`：默认工作目录，缺省为当前目录。
-- `--legacy`：临时运行旧 daemon；默认始终是 daemon-t3。
-- `--no-tui` / `AGENTLINK_TUI=0`：跳过交互式 TUI，按旧行为前台启动 daemon（适合脚本或非 TTY 环境）。
-- `CI=true` 或非 TTY 环境会自动跳过 TUI。
-
-Node.js 22.16+。连接为出站 WebSocket，无需端口转发；Hub 只转发 E2EE 密文。
+## 常用选项
+
+- `--dir <path>`：设置默认工作目录。
+- `--hub <url>`：连接到自己的 hub（自托管时使用）。
+- `--no-tui`：跳过交互界面，直接前台运行（适合脚本或非交互环境）。
+
+需要 Node.js 22.16 或更高版本。
+
+## 了解更多
+
+- 完整文档：[github.com/baichen99/agentlink](https://github.com/baichen99/agentlink)
+- 提交问题：[github.com/baichen99/agentlink/issues](https://github.com/baichen99/agentlink/issues)

package/dist/bin.mjs

@@ -52350,6 +52350,7 @@ function isEnvelope(value) {
 //#endregion
 //#region src/tunnel/bridge.ts
 const TUNNEL_SCOPES = [AuthOrchestrationReadScope, AuthOrchestrationOperateScope];
+const hubFrameDecoder = new TextDecoder();
 const ResponseDefectEncoded = (cause) => ({
 	_tag: "Defect",
 	defect: cause instanceof Error ? {
@@ -52433,6 +52434,12 @@ const splitHubFrame = (text) => {
 		rest: text.slice(spaceAt + 1)
 	};
 };
+function isHttpTunnelRequestFrame(value) {
+	return typeof value === "object" && value !== null && value._tag === "HttpRequest" && typeof value.id === "string" && typeof value.method === "string" && typeof value.path === "string" && Array.isArray(value.headers) && (value.body === null || typeof value.body === "string");
+}
+function encodeHttpTunnelResponseFrame(frame) {
+	return JSON.stringify(frame);
+}
 const makeTunnelSocket = (input) => {
 	const runRaw = (handler, options) => scopedWith((scope) => gen(function* () {
 		const fiberSet = yield* make$62().pipe(provide$2(scope));
@@ -52478,7 +52485,7 @@ const runHubTunnel = (config) => gen(function* () {
 			const writeRaw = yield* socket.writer;
 			yield* forever(take$1(outbox).pipe(flatMap$1(writeRaw)));
 		}));
-		const attachTunnel = (tunnelId, live) => gen(function* () {
+		const attachRpcTunnel = (tunnelId, live) => gen(function* () {
 			yield* addFinalizer(() => sync(() => {
 				if (tunnels.get(tunnelId) !== live) return;
 				tunnels.delete(tunnelId);
@@ -52515,14 +52522,121 @@ const runHubTunnel = (config) => gen(function* () {
 				type: "tunnel_open",
 				tunnelId
 			}))) dropTunnel(tunnelId);
-			yield* logInfo("hub tunnel: attached", { tunnelId });
+			yield* logInfo("hub tunnel: attached", {
+				tunnelId,
+				purpose: live.purpose
+			});
 			yield* _await(live.closed);
 		}).pipe(catch_((error) => logWarning$1("hub tunnel: attach failed", {
 			tunnelId,
 			error
 		})));
-		yield* socket.runRaw((data) => {
-			if (typeof data !== "string") return;
+		const attachHttpTunnel = (tunnelId, live) => gen(function* () {
+			yield* addFinalizer(() => sync(() => {
+				if (tunnels.get(tunnelId) !== live) return;
+				tunnels.delete(tunnelId);
+				writeHub(JSON.stringify({
+					type: "tunnel_close",
+					tunnelId,
+					code: 1011,
+					reason: "daemon http tunnel ended"
+				}));
+			}));
+			const issued = yield* serverAuth.issueSession({
+				subject: "hub-tunnel-http",
+				label: "AgentLink hub tunnel HTTP proxy",
+				scopes: [...TUNNEL_SCOPES]
+			});
+			yield* addFinalizer(() => sessionsStore.markDisconnected(issued.sessionId).pipe(andThen(serverAuth.revokeSession(issued.sessionId)), ignore$1));
+			yield* sessionsStore.markConnected(issued.sessionId);
+			const serverConfig = yield* ServerConfig;
+			const httpClient = yield* HttpClient;
+			const localBaseUrl = `http://127.0.0.1:${serverConfig.port}`;
+			const sendEncrypted = (frame) => {
+				try {
+					const envelope = utf8ToEnvelope(config.enckey, encodeHttpTunnelResponseFrame(frame));
+					if (!writeHub(`${tunnelId} ${JSON.stringify(envelope)}`)) dropTunnel(tunnelId);
+				} catch {
+					dropTunnel(tunnelId);
+				}
+			};
+			live.onDecryptedFrame = (frame) => {
+				let requestFrame;
+				try {
+					const parsed = JSON.parse(frame);
+					if (!isHttpTunnelRequestFrame(parsed)) {
+						sendEncrypted({
+							_tag: "HttpResponse",
+							id: typeof parsed?.id === "string" ? parsed.id : "unknown",
+							status: 400,
+							statusText: "Bad Request",
+							headers: [["content-type", "text/plain"]],
+							body: Buffer.from("Invalid HTTP tunnel request frame").toString("base64")
+						});
+						return;
+					}
+					requestFrame = parsed;
+				} catch {
+					sendEncrypted({
+						_tag: "HttpResponse",
+						id: "unknown",
+						status: 400,
+						statusText: "Bad Request",
+						headers: [["content-type", "text/plain"]],
+						body: Buffer.from("Malformed HTTP tunnel request frame").toString("base64")
+					});
+					return;
+				}
+				runFork(gen(function* () {
+					const targetUrl = `${localBaseUrl}${requestFrame.path}`;
+					const headers = { authorization: `Bearer ${issued.token}` };
+					for (const [key, value] of requestFrame.headers) {
+						const lower = key.toLowerCase();
+						if (lower === "authorization" || lower === "cookie") continue;
+						headers[lower] = value;
+					}
+					let request = make$61(requestFrame.method)(targetUrl).pipe(setHeaders(headers));
+					if (requestFrame.body !== null) request = setBody(uint8Array(Buffer.from(requestFrame.body, "base64")))(request);
+					const response = yield* httpClient.execute(request);
+					const responseBody = yield* response.arrayBuffer;
+					const responseHeaders = [];
+					for (const [key, value] of Object.entries(response.headers)) if (typeof value === "string") responseHeaders.push([key, value]);
+					return {
+						_tag: "HttpResponse",
+						id: requestFrame.id,
+						status: response.status,
+						statusText: "",
+						headers: responseHeaders,
+						body: Buffer.from(responseBody).toString("base64")
+					};
+				}).pipe(match$2({
+					onFailure: (cause) => ({
+						_tag: "HttpResponse",
+						id: requestFrame.id,
+						status: 502,
+						statusText: "Bad Gateway",
+						headers: [["content-type", "text/plain"]],
+						body: Buffer.from(cause instanceof Error ? cause.message : String(cause)).toString("base64")
+					}),
+					onSuccess: (response) => response
+				}), tap((frame) => sync(() => sendEncrypted(frame)))));
+			};
+			if (!writeHub(JSON.stringify({
+				type: "tunnel_open",
+				tunnelId
+			}))) dropTunnel(tunnelId);
+			yield* logInfo("hub tunnel: attached", {
+				tunnelId,
+				purpose: live.purpose
+			});
+			yield* _await(live.closed);
+		}).pipe(catch_((error) => logWarning$1("hub tunnel: attach failed", {
+			tunnelId,
+			error
+		})));
+		yield* socket.runRaw((rawData) => {
+			const data = typeof rawData === "string" ? rawData : rawData instanceof Uint8Array ? hubFrameDecoder.decode(rawData) : null;
+			if (data === null) return;
 			if (data.startsWith("{")) {
 				let control;
 				try {
@@ -52534,13 +52648,16 @@ const runHubTunnel = (config) => gen(function* () {
 					const tunnelId = control.tunnelId;
 					if (tunnels.has(tunnelId)) return;
 					return gen(function* () {
+						const closed = yield* make$70();
+						const purpose = control.purpose === "http" ? "http" : "rpc";
 						const live = {
-							closed: yield* make$70(),
+							closed,
 							pendingFrames: [],
+							purpose,
 							onDecryptedFrame: null
 						};
 						tunnels.set(tunnelId, live);
-						yield* forkScoped(scoped(attachTunnel(tunnelId, live)));
+						yield* forkScoped(scoped((purpose === "http" ? attachHttpTunnel : attachRpcTunnel)(tunnelId, live)));
 					});
 				}
 				if (control.type === "tunnel_close" && typeof control.tunnelId === "string") dropTunnel(control.tunnelId);