nextclaw 0.13.9 → 0.13.10

package/dist/cli/index.js

@@ -3001,6 +3001,73 @@ function readLoginPayload(raw) {
   }
   return { token, role };
 }
+function persistPlatformToken(params) {
+  params.nextclawProvider.apiBase = params.v1Base;
+  params.nextclawProvider.apiKey = params.token;
+  params.providers.nextclaw = params.nextclawProvider;
+  saveConfig6(params.config, params.configPath);
+}
+function parseJsonText(raw) {
+  try {
+    return JSON.parse(raw);
+  } catch {
+    return null;
+  }
+}
+function readPlatformErrorMessage(raw, fallbackStatus) {
+  const parsed = parseJsonText(raw);
+  return typeof parsed === "object" && parsed && "error" in parsed && typeof parsed.error?.message === "string" ? parsed.error.message : raw || `Request failed (${fallbackStatus})`;
+}
+function readBrowserAuthStartPayload(raw) {
+  const parsed = parseJsonText(raw);
+  const data = typeof parsed === "object" && parsed && "data" in parsed ? parsed.data : null;
+  const sessionId = typeof data?.sessionId === "string" ? data.sessionId.trim() : "";
+  const verificationUri = typeof data?.verificationUri === "string" ? data.verificationUri.trim() : "";
+  const expiresAt = typeof data?.expiresAt === "string" ? data.expiresAt.trim() : "";
+  const intervalMs = typeof data?.intervalMs === "number" && Number.isFinite(data.intervalMs) ? Math.max(1e3, Math.trunc(data.intervalMs)) : 1500;
+  if (!sessionId || !verificationUri || !expiresAt) {
+    throw new Error("Browser authorization session payload is incomplete.");
+  }
+  return {
+    sessionId,
+    verificationUri,
+    expiresAt,
+    intervalMs
+  };
+}
+function readBrowserAuthPollPayload(raw) {
+  const parsed = parseJsonText(raw);
+  const data = typeof parsed === "object" && parsed && "data" in parsed ? parsed.data : null;
+  const status = typeof data?.status === "string" ? data.status.trim() : "";
+  if (status === "pending") {
+    return {
+      status,
+      nextPollMs: typeof data?.nextPollMs === "number" && Number.isFinite(data.nextPollMs) ? Math.max(1e3, Math.trunc(data.nextPollMs)) : 1500
+    };
+  }
+  if (status === "expired") {
+    return {
+      status,
+      message: typeof data?.message === "string" && data.message.trim() ? data.message.trim() : "Authorization session expired."
+    };
+  }
+  if (status !== "authorized") {
+    throw new Error("Unexpected browser authorization status.");
+  }
+  const token = typeof data?.token === "string" ? data.token.trim() : "";
+  const user = typeof data?.user === "object" && data.user ? data.user : null;
+  const role = typeof user?.role === "string" ? user.role.trim() : "user";
+  const email = typeof user?.email === "string" ? user.email.trim() : "";
+  if (!token || !email) {
+    throw new Error("Authorized browser login payload is incomplete.");
+  }
+  return {
+    status,
+    token,
+    role,
+    email
+  };
+}
 var PlatformAuthCommands = class {
   async loginResult(opts = {}) {
     const { configPath, config: config2, providers, nextclawProvider, platformBase, v1Base, inputApiBase } = resolveProviderConfig(opts);
@@ -3015,20 +3082,17 @@ var PlatformAuthCommands = class {
     });
     const raw = await response.text();
     if (!response.ok) {
-      let parsed = null;
-      try {
-        parsed = JSON.parse(raw);
-      } catch {
-        parsed = null;
-      }
-      const maybeMessage = typeof parsed === "object" && parsed && "error" in parsed && typeof parsed.error?.message === "string" ? parsed.error.message : raw || `Request failed (${response.status})`;
-      throw new Error(buildPlatformApiBaseErrorMessage(inputApiBase, maybeMessage));
+      throw new Error(buildPlatformApiBaseErrorMessage(inputApiBase, readPlatformErrorMessage(raw, response.status)));
     }
     const { token, role } = readLoginPayload(raw);
-    nextclawProvider.apiBase = v1Base;
-    nextclawProvider.apiKey = token;
-    providers.nextclaw = nextclawProvider;
-    saveConfig6(config2, configPath);
+    persistPlatformToken({
+      configPath,
+      config: config2,
+      providers,
+      nextclawProvider,
+      v1Base,
+      token
+    });
     return {
       token,
       role,
@@ -3037,6 +3101,73 @@ var PlatformAuthCommands = class {
       v1Base
     };
   }
+  async startBrowserAuth(opts = {}) {
+    const { platformBase, v1Base, inputApiBase } = resolveProviderConfig(opts);
+    const response = await fetch(`${platformBase}/platform/auth/browser/start`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({})
+    });
+    const raw = await response.text();
+    if (!response.ok) {
+      throw new Error(buildPlatformApiBaseErrorMessage(inputApiBase, readPlatformErrorMessage(raw, response.status)));
+    }
+    const result = readBrowserAuthStartPayload(raw);
+    return {
+      ...result,
+      platformBase,
+      v1Base
+    };
+  }
+  async pollBrowserAuth(params) {
+    const { configPath, config: config2, providers, nextclawProvider, platformBase, v1Base, inputApiBase } = resolveProviderConfig({
+      apiBase: params.apiBase
+    });
+    const response = await fetch(`${platformBase}/platform/auth/browser/poll`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({
+        sessionId: params.sessionId
+      })
+    });
+    const raw = await response.text();
+    if (!response.ok) {
+      throw new Error(buildPlatformApiBaseErrorMessage(inputApiBase, readPlatformErrorMessage(raw, response.status)));
+    }
+    const result = readBrowserAuthPollPayload(raw);
+    if (result.status === "pending") {
+      return {
+        status: "pending",
+        nextPollMs: result.nextPollMs ?? 1500
+      };
+    }
+    if (result.status === "expired") {
+      return {
+        status: "expired",
+        message: result.message ?? "Authorization session expired."
+      };
+    }
+    persistPlatformToken({
+      configPath,
+      config: config2,
+      providers,
+      nextclawProvider,
+      v1Base,
+      token: result.token ?? ""
+    });
+    return {
+      status: "authorized",
+      token: result.token ?? "",
+      role: result.role ?? "user",
+      email: result.email ?? "",
+      platformBase,
+      v1Base
+    };
+  }
   async login(opts = {}) {
     const result = await this.loginResult(opts);
     console.log(`\u2713 Logged in to NextClaw platform (${result.platformBase})`);
@@ -3130,6 +3261,9 @@ function normalizeOptionalString3(value) {
   const trimmed = value.trim();
   return trimmed.length > 0 ? trimmed : void 0;
 }
+function isPlatformSessionToken(value) {
+  return typeof value === "string" && value.startsWith("nca.");
+}
 function resolveConfiguredLocalOrigin(config2) {
   const state = readServiceState();
   if (state && isProcessRunning(state.pid) && Number.isFinite(state.uiPort)) {
@@ -3240,8 +3374,8 @@ var RemoteCommands = class {
       },
       {
         name: "platform-token",
-        ok: Boolean(token),
-        detail: token ? "token configured" : 'run "nextclaw login" first'
+        ok: isPlatformSessionToken(token),
+        detail: isPlatformSessionToken(token) ? "platform session token configured" : 'run remote browser login or "nextclaw login" first'
       },
       {
         name: "platform-api-base",
@@ -6424,6 +6558,9 @@ function decodeJwtPayload(token) {
     return null;
   }
 }
+function isPlatformSessionToken2(token) {
+  return typeof token === "string" && token.startsWith("nca.");
+}
 function toRemoteRuntimeView(runtime2) {
   if (!runtime2) {
     return null;
@@ -6480,6 +6617,32 @@ var RemoteAccessHost = class {
     await this.deps.platformAuthCommands.loginResult(input);
     return this.getStatus();
   }
+  async startBrowserAuth(input) {
+    const result = await this.deps.platformAuthCommands.startBrowserAuth({
+      apiBase: input.apiBase
+    });
+    return {
+      sessionId: result.sessionId,
+      verificationUri: result.verificationUri,
+      expiresAt: result.expiresAt,
+      intervalMs: result.intervalMs
+    };
+  }
+  async pollBrowserAuth(input) {
+    const config2 = loadConfig13(getConfigPath6());
+    const result = await this.deps.platformAuthCommands.pollBrowserAuth({
+      apiBase: normalizeOptionalString5(input.apiBase) ?? normalizeOptionalString5(config2.remote.platformApiBase) ?? normalizeOptionalString5(config2.providers.nextclaw?.apiBase) ?? void 0,
+      sessionId: input.sessionId
+    });
+    if (result.status !== "authorized") {
+      return result;
+    }
+    return {
+      status: "authorized",
+      email: result.email,
+      role: result.role
+    };
+  }
   logout() {
     this.deps.platformAuthCommands.logout();
     return this.getStatus();
@@ -6592,7 +6755,7 @@ var RemoteAccessHost = class {
     };
   }
   readAccountView(params) {
-    if (!params.token) {
+    if (!isPlatformSessionToken2(params.token)) {
       return {
         loggedIn: false,
         apiBase: params.apiBase,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nextclaw",
-  "version": "0.13.9",
+  "version": "0.13.10",
   "description": "Lightweight personal AI assistant with CLI, multi-provider routing, and channel integrations.",
   "private": false,
   "type": "module",
@@ -40,15 +40,15 @@
     "commander": "^12.1.0",
     "yaml": "^2.8.1",
     "@nextclaw/core": "0.9.5",
-    "@nextclaw/mcp": "0.1.9",
+    "@nextclaw/mcp": "0.1.10",
     "@nextclaw/ncp": "0.3.1",
+    "@nextclaw/ncp-mcp": "0.1.10",
     "@nextclaw/ncp-agent-runtime": "0.2.1",
-    "@nextclaw/ncp-mcp": "0.1.9",
     "@nextclaw/ncp-toolkit": "0.4.1",
+    "@nextclaw/remote": "0.1.6",
     "@nextclaw/runtime": "0.2.5",
-    "@nextclaw/server": "0.10.9",
     "@nextclaw/openclaw-compat": "0.3.8",
-    "@nextclaw/remote": "0.1.5"
+    "@nextclaw/server": "0.10.10"
   },
   "devDependencies": {
     "@types/node": "^20.17.6",