mistagent 0.1.21 → 0.1.22

package/dist/src/api/auth.d.ts

@@ -1,7 +1,20 @@
-import type { AuthStatus, LoginResponse, UserInfo } from '../types/api.js';
+import type { AuthStatus, UserInfo } from '../types/api.js';
 export declare const authApi: {
     getStatus(): Promise<AuthStatus>;
-    login(username: string, password: string): Promise<LoginResponse>;
     getMe(): Promise<UserInfo>;
 };
+/** Supabase 直连登录 — POST /auth/v1/token?grant_type=password */
+export interface SupabaseLoginResult {
+    access_token: string;
+    refresh_token: string;
+    user: {
+        id: string;
+        email: string;
+        user_metadata: {
+            username?: string;
+            display_name?: string;
+        };
+    };
+}
+export declare function supabaseLogin(supabaseUrl: string, anonKey: string, email: string, password: string): Promise<SupabaseLoginResult>;
 //# sourceMappingURL=auth.d.ts.map

package/dist/src/api/auth.js

@@ -3,14 +3,24 @@ export const authApi = {
     getStatus() {
         return getClient().get('/api/v1/auth/status');
     },
-    login(username, password) {
-        return getClient().post('/api/v1/auth/login', {
-            username,
-            password,
-        });
-    },
     getMe() {
         return getClient().get('/api/v1/auth/me');
     },
 };
+export async function supabaseLogin(supabaseUrl, anonKey, email, password) {
+    const res = await fetch(`${supabaseUrl}/auth/v1/token?grant_type=password`, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            'apikey': anonKey,
+        },
+        body: JSON.stringify({ email, password }),
+    });
+    if (!res.ok) {
+        const body = await res.json().catch(() => null);
+        const msg = body?.error_description || body?.msg || 'Login failed';
+        throw new Error(msg);
+    }
+    return res.json();
+}
 //# sourceMappingURL=auth.js.map

package/dist/src/api/client.js

@@ -89,11 +89,9 @@ export class ApiClient {
         for (const [k, v] of Object.entries(params)) {
             url.searchParams.set(k, v);
         }
-        // SSE auth via query param
-        if (this.token) {
-            url.searchParams.set('token', this.token);
-        }
-        const res = await fetch(url.toString());
+        const res = await fetch(url.toString(), {
+            headers: this.authHeaders(),
+        });
         if (!res.ok) {
             throw new ApiError(res.status, await res.text());
         }
@@ -105,9 +103,6 @@ export class ApiClient {
     // SSE streaming via POST - for large payloads (e.g. messages with file contents)
     async streamPost(path, body) {
         const url = new URL(path, this.baseUrl);
-        if (this.token) {
-            url.searchParams.set('token', this.token);
-        }
         const res = await fetch(url.toString(), {
             method: 'POST',
             headers: {

package/dist/src/components/LoginPrompt.d.ts

@@ -1,6 +1,6 @@
 import React from 'react';
 interface LoginPromptProps {
-    onLogin: (username: string, password: string) => Promise<void>;
+    onLogin: (email: string, password: string) => Promise<void>;
     error?: string | null;
 }
 export declare const LoginPrompt: React.FC<LoginPromptProps>;

package/dist/src/components/LoginPrompt.js

@@ -46,8 +46,8 @@ const SimpleInput = ({ value, onChange, onSubmit, mask }) => {
 // ── LoginPrompt ──────────────────────────────────────────
 export const LoginPrompt = ({ onLogin, error, }) => {
     const { subscribe, unsubscribe } = useKeypressContext();
-    const [step, setStep] = useState('username');
-    const [username, setUsername] = useState('');
+    const [step, setStep] = useState('email');
+    const [email, setEmail] = useState('');
     const [password, setPassword] = useState('');
     const [isLoading, setIsLoading] = useState(false);
     const [ctrlCPressedOnce, setCtrlCPressedOnce] = useState(false);
@@ -72,9 +72,9 @@ export const LoginPrompt = ({ onLogin, error, }) => {
         subscribe(ctrlCHandler, KeypressPriority.Normal);
         return () => unsubscribe(ctrlCHandler);
     }, [ctrlCHandler, subscribe, unsubscribe]);
-    const handleUsernameSubmit = useCallback((val) => {
+    const handleEmailSubmit = useCallback((val) => {
         if (val.trim()) {
-            setUsername(val.trim());
+            setEmail(val.trim());
             setStep('password');
         }
     }, []);
@@ -83,19 +83,19 @@ export const LoginPrompt = ({ onLogin, error, }) => {
             setPassword(val.trim());
             setIsLoading(true);
             try {
-                await onLogin(username, val.trim());
+                await onLogin(email, val.trim());
             }
-            catch {
+            finally {
                 setIsLoading(false);
-                setStep('username');
-                setUsername('');
+                setStep('email');
+                setEmail('');
                 setPassword('');
             }
         }
-    }, [onLogin, username]);
+    }, [onLogin, email]);
     return (_jsxs(Box, { flexDirection: "column", alignItems: "center", padding: 1, children: [_jsxs(Box, { marginBottom: 1, flexDirection: "column", children: [BANNER_LINES.map((line, i) => {
                         const gradient = getBannerGradient();
                         return (_jsx(Text, { color: gradient[i] ?? gradient[0], children: line }, i));
-                    }), _jsx(Text, { color: palette.textMuted, children: BANNER_SUBTITLE }), _jsx(Text, { color: palette.textDim, children: '  v' + VERSION })] }), _jsxs(Box, { flexDirection: "column", borderStyle: "round", borderColor: error ? palette.error : palette.border, paddingX: 3, paddingY: 1, width: 48, children: [error && (_jsx(Box, { marginBottom: 1, justifyContent: "center", children: _jsxs(Text, { color: palette.error, children: ['✗ ', error] }) })), isLoading ? (_jsx(Box, { justifyContent: "center", paddingY: 1, children: _jsx(Spinner, { label: "Authenticating..." }) })) : step === 'username' ? (_jsxs(Box, { flexDirection: "column", gap: 1, children: [_jsxs(Box, { children: [_jsx(Text, { color: palette.primary, bold: true, children: '  ❯ Username  ' }), _jsx(SimpleInput, { value: username, onChange: setUsername, onSubmit: handleUsernameSubmit })] }), _jsx(Box, { children: _jsx(Text, { color: palette.textDim, children: '  ○ Password' }) })] })) : (_jsxs(Box, { flexDirection: "column", gap: 1, children: [_jsxs(Box, { children: [_jsx(Text, { color: palette.success, children: '  ✓ ' }), _jsx(Text, { color: palette.textMuted, children: 'Username  ' }), _jsx(Text, { children: username })] }), _jsxs(Box, { children: [_jsx(Text, { color: palette.primary, bold: true, children: '  ❯ Password  ' }), _jsx(SimpleInput, { value: password, onChange: setPassword, onSubmit: handlePasswordSubmit, mask: "\u2022" })] })] })), _jsx(Box, { justifyContent: "center", marginTop: 1, children: ctrlCPressedOnce ? (_jsx(Text, { color: palette.warning, bold: true, children: "Press Ctrl-C again to exit" })) : (_jsxs(Text, { color: palette.textDim, dimColor: true, children: ["Press ", _jsx(Text, { color: palette.textMuted, children: "Enter" }), " to continue"] })) })] })] }));
+                    }), _jsx(Text, { color: palette.textMuted, children: BANNER_SUBTITLE }), _jsx(Text, { color: palette.textDim, children: '  v' + VERSION })] }), _jsxs(Box, { flexDirection: "column", borderStyle: "round", borderColor: error ? palette.error : palette.border, paddingX: 3, paddingY: 1, width: 48, children: [error && (_jsx(Box, { marginBottom: 1, justifyContent: "center", children: _jsxs(Text, { color: palette.error, children: ['✗ ', error] }) })), isLoading ? (_jsx(Box, { justifyContent: "center", paddingY: 1, children: _jsx(Spinner, { label: "Authenticating..." }) })) : step === 'email' ? (_jsxs(Box, { flexDirection: "column", gap: 1, children: [_jsxs(Box, { children: [_jsx(Text, { color: palette.primary, bold: true, children: '  ❯ Email     ' }), _jsx(SimpleInput, { value: email, onChange: setEmail, onSubmit: handleEmailSubmit })] }), _jsx(Box, { children: _jsx(Text, { color: palette.textDim, children: '  ○ Password' }) })] })) : (_jsxs(Box, { flexDirection: "column", gap: 1, children: [_jsxs(Box, { children: [_jsx(Text, { color: palette.success, children: '  ✓ ' }), _jsx(Text, { color: palette.textMuted, children: 'Email     ' }), _jsx(Text, { children: email })] }), _jsxs(Box, { children: [_jsx(Text, { color: palette.primary, bold: true, children: '  ❯ Password  ' }), _jsx(SimpleInput, { value: password, onChange: setPassword, onSubmit: handlePasswordSubmit, mask: "\u2022" })] })] })), _jsx(Box, { justifyContent: "center", marginTop: 1, children: ctrlCPressedOnce ? (_jsx(Text, { color: palette.warning, bold: true, children: "Press Ctrl-C again to exit" })) : (_jsxs(Text, { color: palette.textDim, dimColor: true, children: ["Press ", _jsx(Text, { color: palette.textMuted, children: "Enter" }), " to continue"] })) })] })] }));
 };
 //# sourceMappingURL=LoginPrompt.js.map

package/dist/src/main.js

@@ -3,7 +3,7 @@ import { render } from 'ink';
 import yargs from 'yargs';
 import { hideBin } from 'yargs/helpers';
 import { initClient } from './api/client.js';
-import { authApi } from './api/auth.js';
+import { authApi, supabaseLogin } from './api/auth.js';
 import { modelsApi } from './api/models.js';
 import { toolsApi } from './api/tools.js';
 import { skillsApi } from './api/skills.js';
@@ -211,16 +211,24 @@ export async function main() {
         terminalHeight: process.stdout.rows || 24,
     });
     const renderApp = (overrides = {}) => (_jsx(App, { serverUrl: serverUrl, token: overrides.token ?? token, username: overrides.username ?? username, authEnabled: authStatus.auth_enabled, version: healthData?.version ?? VERSION, healthData: healthData, availableCommands: commands, availableTools: tools, initialModels: models, initialCurrentModel: currentModel, initialSessions: initialSessions, initialTheme: initialTheme, onLogin: handleLogin, onLogout: handleLogout, loginError: overrides.loginError ?? loginError, isAuthenticated: overrides.isAuthenticated ?? isAuthenticated, ...getTerminalSize() }));
-    const handleLogin = async (user, pass) => {
+    const handleLogin = async (email, pass) => {
+        const sbUrl = authStatus.supabase_url;
+        const sbKey = authStatus.supabase_anon_key;
+        if (!sbUrl || !sbKey) {
+            loginError = 'Supabase not configured on server';
+            rerender(renderApp({ token: null, username: null, isAuthenticated: false, loginError }));
+            return;
+        }
         try {
-            const res = await authApi.login(user, pass);
+            const res = await supabaseLogin(sbUrl, sbKey, email, pass);
             client.setToken(res.access_token);
             saveToken(res.access_token);
             if (res.refresh_token) {
                 saveRefreshToken(res.refresh_token);
             }
             token = res.access_token;
-            username = res.user.username;
+            const meta = res.user?.user_metadata ?? {};
+            username = meta.display_name || meta.username || email;
             isAuthenticated = true;
             loginError = null;
             startTokenRefresh();

package/dist/src/types/api.d.ts

@@ -1,14 +1,3 @@
-export interface LoginResponse {
-    success: boolean;
-    access_token: string;
-    refresh_token?: string;
-    token_type: string;
-    user: {
-        user_id: string;
-        username: string;
-        display_name: string;
-    };
-}
 export interface UserInfo {
     success: boolean;
     user_id: string;

package/dist/src/utils/config.d.ts

@@ -1,4 +1,4 @@
-export declare const DEFAULT_SERVER_URL = "https://solidity.slowmist.ai";
+export declare const DEFAULT_SERVER_URL = "https://agent.slowmist.ai";
 export declare function getServerUrl(cliArg?: string): string;
 export declare function saveToken(token: string): void;
 export declare function loadToken(): string | null;

package/dist/src/utils/config.js

@@ -9,8 +9,8 @@ const TOKEN_FILE = join(CONFIG_DIR, 'token');
 // Supabase refresh token（用于自动续期 access_token）
 const REFRESH_TOKEN_FILE = join(CONFIG_DIR, 'refresh_token');
 // 后端服务器默认地址，可通过 CLI 参数或环境变量 MISTAGENT_SERVER 覆盖
-// 发布时由 publish.sh 自动切换为 'https://solidity.slowmist.ai'，发布后自动改回
-export const DEFAULT_SERVER_URL = 'https://solidity.slowmist.ai';
+// 发布时由 publish.sh 自动切换为 'https://agent.slowmist.ai'，发布后自动改回
+export const DEFAULT_SERVER_URL = 'https://agent.slowmist.ai';
 // 获取后端服务器地址，优先级: CLI 参数 > 环境变量 > 默认值
 // 非 localhost 地址强制要求 HTTPS，防止中间人攻击导致 token 泄露
 export function getServerUrl(cliArg) {

package/dist/src/utils/constants.d.ts

@@ -1,4 +1,4 @@
-export declare const VERSION = "0.1.21";
+export declare const VERSION = "0.1.22";
 export declare const BANNER_LINES: string[];
 export declare const BANNER_SUBTITLE = "          A  G  E  N  T";
 export declare function getBannerGradient(): string[];

package/dist/src/utils/constants.js

@@ -1,4 +1,4 @@
-export const VERSION = '0.1.21';
+export const VERSION = '0.1.22';
 // Banner as line array for per-line gradient coloring
 export const BANNER_LINES = [
     ' ███╗   ███╗██╗███████╗████████╗',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mistagent",
-  "version": "0.1.21",
+  "version": "0.1.22",
   "description": "MistAgent - Terminal AI Assistant",
   "type": "module",
   "main": "dist/index.js",