exomind 0.3.2 → 0.3.4

package/README.md

@@ -42,6 +42,20 @@ exomind feedback "entities/Redis.md" positive
 
 加 `--json` 获取机器可读输出(脚本/管道):`exomind --json stats | jq .total_nodes`。
 
+## 凭证管理
+
+`exomind login` 输入的凭证持久化到本地,后续命令自动读取,无需重复登录。
+
+- **存储位置**:`~/.exomind/config.json`(明文 JSON),文件权限 `0600`(仅所有者可读写;Windows 无 POSIX 权限则忽略)。
+- **凭证类型**:服务端 `auth_middleware` 同时接受 **API Key**(从 `d.youhuale.cn/ui/account` 复制)与 **GitHub token**(`gh_` 前缀);两者统一以 `Authorization: Bearer` 发送,CLI 不关心是哪种。
+- **读取优先级**:`config.json` 的 `api_key` → 环境变量 `EXOMIND_API_KEY` → 旧版遗留文件 `~/.claude/scripts/.exomind-api-key`(向后兼容老安装)。三者任一存在即免登录。
+- **CI / 免登录**:只设环境变量 `EXOMIND_API_KEY`(可选 `EXOMIND_BASE_URL`)即可,完全不写本地文件。`config.json` 优先级高于环境变量,故已 `login` 的机器需 `--api-key` 才能临时覆盖。
+- **校验行为**:`login` 先探活 `/keywords` **通过后再落盘**——401/403 时**不写文件**,避免无效凭证覆盖已有有效配置;网络错误无法判定时仍保存并提示"登录成功(未校验)",稍后用 `exomind whoami` 复核。
+- **换号 / 登出**:重新 `exomind login` 覆盖旧凭证;彻底登出删 `~/.exomind/config.json`。
+- **安全提醒**:文件是**明文**,任何能读你 home 目录的进程都能拿到 key。共享机器 / 不信任环境请用环境变量,不要用 `login`。
+
+> 把 API Key 当密码对待:不提交进仓库、不贴进聊天。脚本化登录用 `exomind login --api-key ...`(注意别让 key 进 shell 历史或进程列表);交互式 `exomind login` 的 prompt 读取不走 shell 历史。
+
 ## 接入 Claude Code(一条命令,默认全装)
 
 ```bash

package/dist/cli.js

@@ -3119,7 +3119,7 @@ var {
 // package.json
 var package_default = {
   name: "exomind",
-  version: "0.3.2",
+  version: "0.3.4",
   description: "ExoMind \u8DE8\u5E73\u53F0\u547D\u4EE4\u884C\u5BA2\u6237\u7AEF \u2014 \u901A\u8FC7 REST \u4E0E ExoMind \u77E5\u8BC6\u5E93\u4EA4\u4E92(ingest/query/search/review),\u66FF\u4EE3 Windows \u4E0D\u53EF\u7528\u7684 MCP \u5BA2\u6237\u7AEF\u3002",
   bin: {
     exomind: "dist/cli.js"
@@ -3172,10 +3172,14 @@ function opTimeout(defaultMs) {
 var ApiError = class extends Error {
   status;
   detail;
-  constructor(status, detail) {
+  headers;
+  body;
+  constructor(status, detail, headers = {}, body = null) {
     super(`HTTP ${status}: ${detail}`);
     this.status = status;
     this.detail = detail;
+    this.headers = headers;
+    this.body = body;
   }
 };
 var ApiClient = class {
@@ -3219,13 +3223,18 @@ var ApiClient = class {
       });
       const text = await res.text();
       if (!res.ok) {
+        const headers = {};
+        res.headers?.forEach((v, k) => {
+          headers[k.toLowerCase()] = v;
+        });
         let detail = text || res.statusText;
+        let body = null;
         try {
-          const j = JSON.parse(text);
-          detail = j.detail || j.message || JSON.stringify(j);
+          body = JSON.parse(text);
+          detail = body.detail || body.message || JSON.stringify(body);
         } catch {
         }
-        throw new ApiError(res.status, String(detail).slice(0, 800));
+        throw new ApiError(res.status, String(detail).slice(0, 800), headers, body);
       }
       if (opts.text) return text;
       try {
@@ -3881,6 +3890,55 @@ function planIngestest(files, manifest, force) {
   }
   return { toIngest, toSkip };
 }
+var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+var suspended = false;
+async function ingestWithRetry(client, payload, timeoutMs) {
+  let rateAttempts = 0;
+  let quotaWaits = 0;
+  while (true) {
+    try {
+      return await client.post("/ingest", payload, { timeoutMs });
+    } catch (e) {
+      if (!(e instanceof ApiError) || e.status !== 429) throw e;
+      const type = e.body?.type;
+      if (type === "daily_quota") {
+        if (++quotaWaits > 3) throw new ApiError(429, "\u914D\u989D\u8FDE\u7EED 3 \u4E2A\u81EA\u7136\u65E5\u672A\u6062\u590D,\u653E\u5F03");
+        await suspendUntilMidnight(Number(e.body?.reset ?? 0));
+        continue;
+      }
+      if (type === "rate_limit") {
+        if (++rateAttempts >= 5) throw new ApiError(429, "\u5E76\u53D1\u9650\u6D41,\u91CD\u8BD5 5 \u6B21\u4ECD\u5931\u8D25");
+        const retry = Number(e.headers["retry-after"] ?? e.body?.retry_after ?? 5);
+        process.stderr.write(dim(`  \u23F8 \u5E76\u53D1\u9650\u6D41,${retry}s \u540E\u91CD\u8BD5
+`));
+        await sleep(retry * 1e3);
+        continue;
+      }
+      throw e;
+    }
+  }
+}
+async function suspendUntilMidnight(resetEpoch) {
+  suspended = true;
+  const now = Date.now();
+  const waitMs = resetEpoch > 0 ? Math.max(1e3, resetEpoch * 1e3 - now) : 60 * 1e3;
+  process.stderr.write(
+    dim(`  \u23F8 \u4ECA\u65E5\u914D\u989D\u5DF2\u6EE1,\u6302\u8D77\u5230\u6B21\u65E5 0 \u70B9\u7EED\u8DD1(\u7EA6 ${Math.ceil(waitMs / 6e4)} \u5206\u949F)
+`)
+  );
+  process.stderr.write(dim("  Ctrl+C \u53EF\u5B89\u5168\u9000\u51FA(\u5DF2\u4FDD\u5B58\u8FDB\u5EA6),\u6B21\u65E5\u91CD\u8DD1\u540C\u547D\u4EE4\u5373\u53EF\u7EED\u8DD1\n"));
+  const start = Date.now();
+  while (Date.now() - start < waitMs) {
+    const remaining = waitMs - (Date.now() - start);
+    await sleep(Math.min(6e4, remaining));
+    const remainMin = Math.ceil((waitMs - (Date.now() - start)) / 6e4);
+    if (remainMin > 0) process.stderr.write(`\r  ${dim(`\u5269\u4F59\u7EA6 ${remainMin} \u5206\u949F`)}        `);
+  }
+  process.stderr.write(`
+  ${dim("\u5230\u8FBE 0 \u70B9,\u7EE7\u7EED\u6444\u5165\u2026")}
+`);
+  suspended = false;
+}
 async function runDirIngestest(client, opts, dir) {
   const files = walkDir(dir, !!opts.recursive, opts.pattern || "*.md");
   if (!files.length) {
@@ -3894,39 +3952,51 @@ async function runDirIngestest(client, opts, dir) {
     `\u76EE\u5F55 ${dir}: ${total} \u6587\u4EF6 \u2014 \u5F85\u6444\u5165 ${plan.toIngest.length},\u8DF3\u8FC7 ${plan.toSkip.length}
 `
   );
+  const onSigInt = () => {
+    if (suspended) {
+      saveManifest(manifest);
+      process.stderr.write("\n\u5DF2\u4FDD\u5B58\u8FDB\u5EA6,\u9000\u51FA\u3002\u6B21\u65E5\u91CD\u8DD1\u540C\u547D\u4EE4\u5373\u53EF\u7EED\u8DD1\u3002\n");
+    }
+    process.exit(130);
+  };
+  process.on("SIGINT", onSigInt);
   let added = 0;
   let updated = 0;
   let failed = 0;
-  for (let i = 0; i < plan.toIngest.length; i++) {
-    const f = plan.toIngest[i];
-    const prev = manifest[f.path];
-    process.stderr.write(`\u23F3 [${i + 1}/${plan.toIngest.length}] ${path4.basename(f.path)}\u2026
+  try {
+    for (let i = 0; i < plan.toIngest.length; i++) {
+      const f = plan.toIngest[i];
+      const prev = manifest[f.path];
+      process.stderr.write(`\u23F3 [${i + 1}/${plan.toIngest.length}] ${path4.basename(f.path)}\u2026
 `);
-    try {
-      const res = await client.post(
-        "/ingest",
-        { content: f.content, title: f.title, tags: opts.tag },
-        { timeoutMs: opTimeout(3e5) }
-      );
-      recordFile(manifest, f.path, f.content, f.title);
-      saveManifest(manifest);
-      if (prev) {
-        updated++;
-        process.stderr.write(`  ${green("\u2713")} \u66F4\u65B0 \u2014 \u5B9E\u4F53 ${res.entities ?? 0}/\u6982\u5FF5 ${res.concepts ?? 0}
+      try {
+        const res = await ingestWithRetry(
+          client,
+          { content: f.content, title: f.title, tags: opts.tag },
+          opTimeout(3e5)
+        );
+        recordFile(manifest, f.path, f.content, f.title);
+        saveManifest(manifest);
+        if (prev) {
+          updated++;
+          process.stderr.write(`  ${green("\u2713")} \u66F4\u65B0 \u2014 \u5B9E\u4F53 ${res.entities ?? 0}/\u6982\u5FF5 ${res.concepts ?? 0}
 `);
-      } else {
-        added++;
-        process.stderr.write(`  ${green("\u2713")} \u65B0\u589E \u2014 \u5B9E\u4F53 ${res.entities ?? 0}/\u6982\u5FF5 ${res.concepts ?? 0}
+        } else {
+          added++;
+          process.stderr.write(`  ${green("\u2713")} \u65B0\u589E \u2014 \u5B9E\u4F53 ${res.entities ?? 0}/\u6982\u5FF5 ${res.concepts ?? 0}
 `);
-      }
-    } catch (e) {
-      failed++;
-      process.stderr.write(`  ${red("\u2717")} ${e.message}
+        }
+      } catch (e) {
+        failed++;
+        process.stderr.write(`  ${red("\u2717")} ${e.message}
 `);
+      }
     }
+    cleanupStale(manifest, dir, files);
+    saveManifest(manifest);
+  } finally {
+    process.removeListener("SIGINT", onSigInt);
   }
-  cleanupStale(manifest, dir, files);
-  saveManifest(manifest);
   const allUpToDate = added + updated === 0 && plan.toSkip.length > 0 && failed === 0;
   output(
     { added, updated, skipped: plan.toSkip.length, failed, total, dir, allUpToDate },
@@ -4228,22 +4298,24 @@ async function login(_client, opts) {
     token = await prompt("\u51ED\u8BC1: ");
   }
   if (!token) throw new Error("\u672A\u63D0\u4F9B\u51ED\u8BC1");
-  saveConfig({ base_url: baseUrl, api_key: token });
   const probe = new ApiClient({ base_url: baseUrl, api_key: token });
+  let verified = true;
   try {
     await probe.get("/keywords");
   } catch (e) {
     if (e instanceof ApiError && (e.status === 401 || e.status === 403)) {
       throw new Error(`\u51ED\u8BC1\u6821\u9A8C\u5931\u8D25 (HTTP ${e.status}): ${e.detail}`);
     }
+    verified = false;
     console.log(
       yellow(
-        `\u8B66\u544A: \u65E0\u6CD5\u8FDE\u63A5 ${baseUrl} \u6821\u9A8C\u51ED\u8BC1 (${e instanceof Error ? e.message : String(e)})\u3002\u914D\u7F6E\u5DF2\u4FDD\u5B58,\u7A0D\u540E\u53EF\u7528 exomind whoami \u9A8C\u8BC1\u3002`
+        `\u8B66\u544A: \u65E0\u6CD5\u8FDE\u63A5 ${baseUrl} \u6821\u9A8C\u51ED\u8BC1 (${e instanceof Error ? e.message : String(e)})\u3002\u914D\u7F6E\u4ECD\u5C06\u4FDD\u5B58,\u7A0D\u540E\u53EF\u7528 exomind whoami \u9A8C\u8BC1\u3002`
       )
     );
   }
+  saveConfig({ base_url: baseUrl, api_key: token });
   const hint2 = token.length > 12 ? `${token.slice(0, 8)}\u2026${token.slice(-4)}` : token;
-  console.log(ok("\u767B\u5F55\u6210\u529F"));
+  console.log(ok(verified ? "\u767B\u5F55\u6210\u529F" : "\u767B\u5F55\u6210\u529F(\u672A\u6821\u9A8C)"));
   console.log(dim(`  \u670D\u52A1\u5668: ${baseUrl}`));
   console.log(dim(`  \u51ED\u8BC1: ${hint2} (${token.startsWith("gh_") ? "GitHub token" : "API Key"})`));
 }