nolo-cli 0.1.31 → 0.1.33

package/auth/rn/tokenManager.ts

@@ -1,72 +0,0 @@
-// auth/rn/tokenManager.ts
-import * as Keychain from "react-native-keychain";
-import type { TokenManager } from "../types";
-import { safelyParseJSON } from "../types";
-import { parseToken } from "../token";
-
-const STORAGE_KEY = "app_tokens";
-
-function tokenUserId(token: string): string | null {
-  const parsed = parseToken(token);
-  return typeof parsed?.userId === "string" ? parsed.userId : null;
-}
-
-export const rnTokenManager: TokenManager = {
-  async getTokens() {
-    try {
-      const credentials = await Keychain.getGenericPassword({
-        service: STORAGE_KEY,
-      });
-      if (!credentials) return [];
-      const tokens = safelyParseJSON(credentials.password);
-      return Array.isArray(tokens) ? tokens : [tokens];
-    } catch (error) {
-      console.error("Failed to get tokens:", error);
-      return [];
-    }
-  },
-
-  async storeToken(newToken: string) {
-    if (!newToken) return;
-    try {
-      const tokens = await this.getTokens();
-      const newUserId = tokenUserId(newToken);
-      const filtered = tokens.filter((token) => {
-        if (token === newToken) return false;
-        return !newUserId || tokenUserId(token) !== newUserId;
-      });
-      filtered.unshift(newToken);
-      await Keychain.setGenericPassword(STORAGE_KEY, JSON.stringify(filtered), {
-        service: STORAGE_KEY,
-      });
-    } catch (error) {
-      console.error("Failed to store tokens:", error);
-    }
-  },
-
-  async removeToken(tokenToRemove: string) {
-    if (!tokenToRemove) return;
-    try {
-      const tokens = await this.getTokens();
-      const filtered = tokens.filter((token) => token !== tokenToRemove);
-      await Keychain.setGenericPassword(STORAGE_KEY, JSON.stringify(filtered), {
-        service: STORAGE_KEY,
-      });
-    } catch (error) {
-      console.error("Failed to remove token:", error);
-    }
-  },
-
-  async initTokens() {
-    return this.getTokens();
-  },
-};
-
-// 可选: 如果需要清除所有token的功能
-export const clearAllTokens = async () => {
-  try {
-    await Keychain.resetGenericPassword({ service: STORAGE_KEY });
-  } catch (error) {
-    console.error("Failed to clear tokens:", error);
-  }
-};

package/auth/routes.ts

@@ -1,173 +0,0 @@
-// auth/routes.ts
-import { API_VERSION } from "../database/config";
-
-export interface RouteParams {
-  userId?: string;
-}
-
-export const authRoutes = {
-  login: {
-    path: `${API_VERSION}/users/login`,
-    method: "POST" as const,
-    createPath: () => `${API_VERSION}/users/login`,
-  },
-  signup: {
-    path: `${API_VERSION}/users/signup`,
-    method: "POST" as const,
-    createPath: () => `${API_VERSION}/users/signup`,
-  },
-  users: {
-    cliLoginStart: {
-      path: `${API_VERSION}/users/cli-login/start`,
-      method: "POST" as const,
-      createPath: () => `${API_VERSION}/users/cli-login/start`,
-    },
-    cliLoginAuthorize: {
-      path: `${API_VERSION}/users/cli-login/authorize`,
-      method: "POST" as const,
-      createPath: () => `${API_VERSION}/users/cli-login/authorize`,
-    },
-    cliLoginPoll: {
-      path: `${API_VERSION}/users/cli-login/poll`,
-      method: "POST" as const,
-      createPath: () => `${API_VERSION}/users/cli-login/poll`,
-    },
-    list: {
-      path: `${API_VERSION}/users`,
-      method: "GET" as const,
-      createPath: () => `${API_VERSION}/users`,
-    },
-    usageReport: {
-      path: `${API_VERSION}/users/usage-report`,
-      method: "GET" as const,
-      createPath: () => `${API_VERSION}/users/usage-report`,
-    },
-    providerBillingHealth: {
-      path: `${API_VERSION}/users/provider-billing-health`,
-      method: "GET" as const,
-      createPath: () => `${API_VERSION}/users/provider-billing-health`,
-    },
-    providerBillingDrilldown: {
-      path: `${API_VERSION}/users/provider-billing-drilldown`,
-      method: "GET" as const,
-      createPath: () => `${API_VERSION}/users/provider-billing-drilldown`,
-    },
-    providerCredentials: {
-      path: `${API_VERSION}/users/provider-credentials`,
-      method: "GET" as const,
-      createPath: () => `${API_VERSION}/users/provider-credentials`,
-    },
-    providerCredentialLifecycle: {
-      path: `${API_VERSION}/users/provider-credentials/lifecycle`,
-      method: "POST" as const,
-      createPath: () => `${API_VERSION}/users/provider-credentials/lifecycle`,
-    },
-    billingAnomalyLifecycle: {
-      path: `${API_VERSION}/users/billing-anomalies/lifecycle`,
-      method: "POST" as const,
-      createPath: () => `${API_VERSION}/users/billing-anomalies/lifecycle`,
-    },
-    billingAnomalyDrilldown: {
-      path: `${API_VERSION}/users/billing-anomalies/drilldown`,
-      method: "GET" as const,
-      createPath: () => `${API_VERSION}/users/billing-anomalies/drilldown`,
-    },
-    billingAnomalyAudit: {
-      path: `${API_VERSION}/users/billing-anomalies/audit`,
-      method: "POST" as const,
-      createPath: () => `${API_VERSION}/users/billing-anomalies/audit`,
-    },
-    detail: {
-      path: `${API_VERSION}/users/:userId`,
-      method: "GET" as const,
-      createPath: (params: RouteParams) =>
-        `${API_VERSION}/users/${params.userId}`,
-    },
-    sessionRevoke: {
-      path: `${API_VERSION}/users/session-revoke`,
-      method: "POST" as const,
-      createPath: () => `${API_VERSION}/users/session-revoke`,
-    },
-    transfer: {
-      path: `${API_VERSION}/users/:userId/transfer`,
-      method: "POST" as const,
-      createPath: (params: RouteParams) =>
-        `${API_VERSION}/users/${params.userId}/transfer`,
-    },
-    delete: {
-      path: `${API_VERSION}/users/:userId`,
-      method: "DELETE" as const,
-      createPath: (params: RouteParams) =>
-        `${API_VERSION}/users/${params.userId}`,
-    },
-    disable: {
-      path: `${API_VERSION}/users/:userId/disable`,
-      method: "POST" as const,
-      createPath: (params: RouteParams) =>
-        `${API_VERSION}/users/${params.userId}/disable`,
-    },
-    enable: {
-      path: `${API_VERSION}/users/:userId/enable`,
-      method: "POST" as const,
-      createPath: (params: RouteParams) =>
-        `${API_VERSION}/users/${params.userId}/enable`,
-    },
-    adminPermissions: {
-      path: `${API_VERSION}/users/:userId/admin-permissions`,
-      method: "POST" as const,
-      createPath: (params: RouteParams) =>
-        `${API_VERSION}/users/${params.userId}/admin-permissions`,
-    },
-    sendEmail: {
-      path: `${API_VERSION}/users/send-email`,
-      method: "POST" as const,
-      createPath: () => `${API_VERSION}/users/send-email`,
-    },
-    emailPreferencesGet: {
-      path: `${API_VERSION}/users/email-preferences`,
-      method: "GET" as const,
-      createPath: () => `${API_VERSION}/users/email-preferences`,
-    },
-    emailPreferencesUpdate: {
-      path: `${API_VERSION}/users/email-preferences`,
-      method: "POST" as const,
-      createPath: () => `${API_VERSION}/users/email-preferences`,
-    },
-    emailReport: {
-      path: `${API_VERSION}/users/email-report`,
-      method: "GET" as const,
-      createPath: () => `${API_VERSION}/users/email-report`,
-    },
-    emailRetryRun: {
-      path: `${API_VERSION}/users/email-retry/run`,
-      method: "POST" as const,
-      createPath: () => `${API_VERSION}/users/email-retry/run`,
-    },
-    emailReplayFailures: {
-      path: `${API_VERSION}/users/email-replay-failures`,
-      method: "POST" as const,
-      createPath: () => `${API_VERSION}/users/email-replay-failures`,
-    },
-    emailConfigGet: {
-      path: `${API_VERSION}/users/email-config`,
-      method: "GET" as const,
-      createPath: () => `${API_VERSION}/users/email-config`,
-    },
-    emailConfigUpdate: {
-      path: `${API_VERSION}/users/email-config`,
-      method: "POST" as const,
-      createPath: () => `${API_VERSION}/users/email-config`,
-    },
-    rechargeHistory: {
-      path: `${API_VERSION}/users/:userId/recharge-history`,
-      method: "POST" as const,
-      createPath: (params: RouteParams) =>
-        `${API_VERSION}/users/${params.userId}/recharge-history`,
-    },
-  },
-} as const;
-
-// 简单的路径匹配器，只处理基本的参数提取
-export function createPathMatcher(routePath: string) {
-  return new RegExp(`^${routePath.replace(/:(\w+)/g, "([^/]+)")}$`);
-}

package/auth/server/accessActivity.ts

@@ -1,144 +0,0 @@
-import { DB_PREFIX } from "../../database/keys";
-import { getServerAuthorityStore } from "../../database/server/db";
-
-import { balanceLockManager } from "./locks";
-
-export type AccessActivitySource = "login" | "token";
-
-export interface RecentAccessEntry {
-  timestamp: number;
-  source: AccessActivitySource;
-  ip: string;
-  device: string;
-}
-
-const MAX_RECENT_ACCESSES = 8;
-
-const normalizeIp = (ip?: string | null) => (ip || "").trim();
-
-export const maskIpAddress = (ip?: string | null): string => {
-  const normalized = normalizeIp(ip);
-  if (!normalized) return "Unknown IP";
-
-  if (normalized.includes(":")) {
-    const segments = normalized.split(":").filter(Boolean);
-    if (segments.length === 0) return "Unknown IP";
-    return `${segments.slice(0, 3).join(":")}:*`;
-  }
-
-  const parts = normalized.split(".");
-  if (parts.length !== 4) return normalized;
-  return `${parts[0]}.${parts[1]}.${parts[2]}.*`;
-};
-
-export const summarizeUserAgent = (userAgent?: string | null): string => {
-  const ua = (userAgent || "").toLowerCase();
-  if (!ua) return "Unknown device";
-
-  const platform = ua.includes("iphone")
-    ? "iPhone"
-    : ua.includes("ipad")
-      ? "iPad"
-      : ua.includes("android")
-        ? "Android"
-        : ua.includes("mac os x")
-          ? "Mac"
-          : ua.includes("windows")
-            ? "Windows"
-            : ua.includes("linux")
-              ? "Linux"
-              : "Unknown device";
-
-  const browser = ua.includes("edg/")
-    ? "Edge"
-    : ua.includes("chrome/")
-      ? "Chrome"
-      : ua.includes("firefox/")
-        ? "Firefox"
-        : ua.includes("safari/") && !ua.includes("chrome/")
-          ? "Safari"
-          : ua.includes("bun/")
-            ? "Bun"
-            : ua.includes("nolo")
-              ? "Nolo"
-              : "Browser";
-
-  return `${platform} · ${browser}`;
-};
-
-export const mergeRecentAccesses = (
-  existing: unknown,
-  entry: RecentAccessEntry,
-  replaceWithinMs = 0
-): RecentAccessEntry[] => {
-  const list = Array.isArray(existing)
-    ? existing.filter(
-      (item): item is RecentAccessEntry =>
-        !!item &&
-        typeof item === "object" &&
-        typeof (item as RecentAccessEntry).timestamp === "number" &&
-        typeof (item as RecentAccessEntry).source === "string" &&
-        typeof (item as RecentAccessEntry).ip === "string" &&
-        typeof (item as RecentAccessEntry).device === "string"
-    )
-    : [];
-
-  const [latest, ...rest] = list;
-  const shouldReplaceLatest =
-    !!latest &&
-    replaceWithinMs > 0 &&
-    entry.timestamp - latest.timestamp < replaceWithinMs &&
-    latest.source === entry.source &&
-    latest.ip === entry.ip &&
-    latest.device === entry.device;
-
-  if (shouldReplaceLatest) {
-    return [{ ...latest, timestamp: entry.timestamp }, ...rest].slice(
-      0,
-      MAX_RECENT_ACCESSES
-    );
-  }
-
-  return [entry, ...list].slice(0, MAX_RECENT_ACCESSES);
-};
-
-export async function recordUserAccessActivity(
-  userId: string,
-  options: {
-    source: AccessActivitySource;
-    ip?: string | null;
-    userAgent?: string | null;
-    timestamp?: number;
-    replaceWithinMs?: number;
-    updateLastLoginAt?: boolean;
-    updateLastActiveAt?: boolean;
-  }
-) {
-  const timestamp = options.timestamp ?? Date.now();
-  const key = `${DB_PREFIX.USER}${userId}`;
-  const store = getServerAuthorityStore();
-  const lock = balanceLockManager.getLock(userId);
-
-  await lock.runExclusive(async () => {
-    const user = await store.get(key).catch(() => null);
-    if (!user) return;
-
-    const entry: RecentAccessEntry = {
-      timestamp,
-      source: options.source,
-      ip: maskIpAddress(options.ip),
-      device: summarizeUserAgent(options.userAgent),
-    };
-
-    await store.put(key, {
-      ...user,
-      ...(options.updateLastActiveAt ? { lastActiveAt: timestamp } : {}),
-      ...(options.updateLastLoginAt ? { lastLoginAt: timestamp } : {}),
-      recentAccesses: mergeRecentAccesses(
-        user.recentAccesses,
-        entry,
-        options.replaceWithinMs ?? 0
-      ),
-    });
-  });
-}

package/auth/server/adminPermissions.ts

@@ -1,43 +0,0 @@
-import {
-  checkAdminPermission,
-  createErrorResponse,
-  createSuccessResponse,
-  handleOptionsRequest,
-} from "./shared";
-import { updateUserAdminPermissions } from "./usageManagementAccess";
-
-export async function handleUpdateUserAdminPermissions(req: Request, userId: string) {
-  if (req.method === "OPTIONS") {
-    return handleOptionsRequest();
-  }
-
-  const permissionError = checkAdminPermission(req.user?.userId);
-  if (permissionError) return permissionError;
-
-  if (!userId) {
-    return createErrorResponse("User ID is required", 400);
-  }
-
-  try {
-    const body = await req.json().catch(() => ({}));
-    const usageManagement = body?.usageManagement;
-    if (typeof usageManagement !== "boolean") {
-      return createErrorResponse("usageManagement must be boolean", 400);
-    }
-
-    const updatedUser = await updateUserAdminPermissions(userId, {
-      usageManagement,
-    });
-    if (!updatedUser) {
-      return createErrorResponse("User not found", 404);
-    }
-
-    return createSuccessResponse({
-      success: true,
-      userId,
-      adminPermissions: updatedUser.adminPermissions,
-    });
-  } catch {
-    return createErrorResponse("Failed to update admin permissions");
-  }
-}