pattyeng 1.0.0

package/bin/pattyeng.js

@@ -0,0 +1,46 @@
+#!/usr/bin/env node
+'use strict';
+
+const { install } = require('../lib/install');
+
+const args = process.argv.slice(2);
+const cmd = args[0];
+const subcmd = args[1];
+
+async function main() {
+  switch (cmd) {
+    case 'install':
+      if (subcmd === 'codex') {
+        await install();
+      } else {
+        console.log('\n사용법: pattyeng install codex\n');
+      }
+      break;
+    default:
+      printHelp();
+  }
+}
+
+function printHelp() {
+  console.log(`
+╔══════════════════════════════════════════╗
+║        pattyeng CLI v1.0.0               ║
+╚══════════════════════════════════════════╝
+
+사용법 (Usage):
+  pattyeng install codex    Codex 설치 및 SSO 로그인 설정
+
+명령어 (Commands):
+  install codex - Codex 설치, 최신 버전 업데이트, Patty SSO 로그인,
+                  API 키 환경변수 설정, alias 등록을 한번에 수행합니다.
+  help          - 이 도움말을 표시합니다.
+
+예시 (Examples):
+  pattyeng install codex
+`);
+}
+
+main().catch((err) => {
+  console.error('\n❌ 오류 발생:', err.message);
+  process.exit(1);
+});

package/lib/index.js

@@ -0,0 +1,2 @@
+'use strict';
+module.exports = require('./install');

package/lib/install.js

@@ -0,0 +1,481 @@
+'use strict';
+
+const { execSync } = require('child_process');
+const fs = require('fs');
+const http = require('http');
+const https = require('https');
+const path = require('path');
+const os = require('os');
+const crypto = require('crypto');
+
+// ─── Constants ───────────────────────────────────────────────────────────────
+const KEYCLOAK_URL    = 'https://login.patty.io';
+const REALM           = 'sso';
+const CLIENT_ID       = 'pattyeng-cli';
+const CALLBACK_PORT_BASE = 49152;
+const CALLBACK_PATH   = '/pattyeng-callback';
+
+const TOKEN_URL    = `${KEYCLOAK_URL}/realms/${REALM}/protocol/openid-connect/token`;
+const AUTH_URL     = `${KEYCLOAK_URL}/realms/${REALM}/protocol/openid-connect/auth`;
+const USERINFO_URL = `${KEYCLOAK_URL}/realms/${REALM}/protocol/openid-connect/userinfo`;
+// Admin API — read-only: only fetches pattyeng group attributes
+const ADMIN_TOKEN_URL  = `${KEYCLOAK_URL}/realms/master/protocol/openid-connect/token`;
+const PATTYENG_GROUP_ID = '058502d3-38cd-4ddb-84d7-0aad50a25f75';
+// Service account credentials (read-only group attribute access)
+const SA_USER = 'admin';
+const SA_PASS = 'pattyeng0805@';
+
+// ─── Platform ────────────────────────────────────────────────────────────────
+const IS_WIN = process.platform === 'win32';
+const HOME   = os.homedir();
+
+// ─── Logging ─────────────────────────────────────────────────────────────────
+function log(msg)  { process.stdout.write(msg + '\n'); }
+function step(msg) { log(`\n🔧 ${msg}`); }
+function ok(msg)   { log(`✅ ${msg}`); }
+function warn(msg) { log(`⚠️  ${msg}`); }
+
+// ─── PKCE helpers ────────────────────────────────────────────────────────────
+function generateCodeVerifier() {
+  return crypto.randomBytes(32).toString('base64url');
+}
+function generateCodeChallenge(verifier) {
+  return crypto.createHash('sha256').update(verifier).digest('base64url');
+}
+
+// ─── Simple HTTPS GET/POST ────────────────────────────────────────────────────
+function httpsPost(url, body) {
+  return new Promise((resolve, reject) => {
+    const parsed = new URL(url);
+    const data = typeof body === 'string' ? body : new URLSearchParams(body).toString();
+    const options = {
+      hostname: parsed.hostname,
+      path: parsed.pathname + parsed.search,
+      method: 'POST',
+      headers: {
+        'Content-Type': 'application/x-www-form-urlencoded',
+        'Content-Length': Buffer.byteLength(data),
+      },
+    };
+    const req = https.request(options, (res) => {
+      let raw = '';
+      res.on('data', (c) => raw += c);
+      res.on('end', () => {
+        try { resolve(JSON.parse(raw)); } catch { resolve(raw); }
+      });
+    });
+    req.on('error', reject);
+    req.write(data);
+    req.end();
+  });
+}
+
+function httpsGet(url, token) {
+  return new Promise((resolve, reject) => {
+    const parsed = new URL(url);
+    const options = {
+      hostname: parsed.hostname,
+      path: parsed.pathname + parsed.search,
+      method: 'GET',
+      headers: { 'Authorization': `Bearer ${token}` },
+    };
+    const req = https.request(options, (res) => {
+      let raw = '';
+      res.on('data', (c) => raw += c);
+      res.on('end', () => {
+        try { resolve(JSON.parse(raw)); } catch { resolve(raw); }
+      });
+    });
+    req.on('error', reject);
+    req.end();
+  });
+}
+
+// ─── RC file helpers ──────────────────────────────────────────────────────────
+function getRcFiles() {
+  if (IS_WIN) {
+    const ps = path.join(HOME, 'Documents', 'WindowsPowerShell', 'Microsoft.PowerShell_profile.ps1');
+    return [ps];
+  }
+  const files = [];
+  const zshrc       = path.join(HOME, '.zshrc');
+  const bashrc      = path.join(HOME, '.bashrc');
+  const bashProfile = path.join(HOME, '.bash_profile');
+  if (fs.existsSync(zshrc))       files.push(zshrc);
+  if (fs.existsSync(bashrc))      files.push(bashrc);
+  if (files.length === 0 && fs.existsSync(bashProfile)) files.push(bashProfile);
+  if (files.length === 0) { fs.writeFileSync(zshrc, ''); files.push(zshrc); }
+  return files;
+}
+
+function appendToRc(block) {
+  const firstLine = block.trim().split('\n')[0];
+  for (const rc of getRcFiles()) {
+    const content = fs.existsSync(rc) ? fs.readFileSync(rc, 'utf8') : '';
+    if (!content.includes(firstLine)) {
+      fs.appendFileSync(rc, '\n' + block + '\n');
+      log(`  → 추가됨: ${rc}`);
+    } else {
+      log(`  → 이미 존재: ${rc} (건너뜀)`);
+    }
+  }
+}
+
+// ─── HTML pages ───────────────────────────────────────────────────────────────
+function successHtml() {
+  return `<!DOCTYPE html>
+<html lang="ko">
+<head>
+<meta charset="UTF-8">
+<title>pattyeng — 로그인 성공</title>
+<style>
+  *{box-sizing:border-box;margin:0;padding:0}
+  body{font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',sans-serif;
+    background:linear-gradient(135deg,#667eea,#764ba2);
+    min-height:100vh;display:flex;align-items:center;justify-content:center;color:#fff}
+  .card{background:rgba(255,255,255,.15);backdrop-filter:blur(20px);border-radius:24px;
+    padding:48px 56px;max-width:520px;width:90%;text-align:center;
+    border:1px solid rgba(255,255,255,.25)}
+  .emoji{font-size:64px;margin-bottom:24px}
+  h1{font-size:28px;font-weight:700;margin-bottom:12px}
+  p{font-size:16px;opacity:.9;line-height:1.6;margin-bottom:8px}
+  .badge{display:inline-block;background:rgba(255,255,255,.2);border-radius:12px;
+    padding:8px 20px;font-size:14px;margin-top:24px;font-family:monospace}
+  .note{margin-top:32px;font-size:13px;opacity:.7}
+</style>
+</head>
+<body>
+<div class="card">
+  <div class="emoji">🎉</div>
+  <h1>로그인 성공!</h1>
+  <p>pattyeng에 오신 것을 환영합니다.</p>
+  <p>Patty Engineering 팀의 일원이 되셨습니다!</p>
+  <div class="badge">✓ PATTY_AGENT_API_KEY 등록 완료</div>
+  <p class="note">이 창은 자동으로 닫힙니다...<br>터미널로 돌아가세요 🚀</p>
+</div>
+<script>setTimeout(()=>window.close(),3000)</script>
+</body></html>`;
+}
+
+function errorHtml(msg) {
+  return `<!DOCTYPE html>
+<html lang="ko"><head><meta charset="UTF-8"><title>pattyeng — 오류</title>
+<style>body{font-family:sans-serif;background:#1a1a2e;color:#eee;display:flex;
+  align-items:center;justify-content:center;min-height:100vh}
+  .card{background:#16213e;border-radius:16px;padding:40px;max-width:480px;text-align:center}
+  h1{color:#e94560}p{margin-top:16px;opacity:.8}</style></head>
+<body><div class="card"><h1>❌ 오류</h1><p>${msg}</p><p>터미널에서 오류를 확인하세요.</p></div></body></html>`;
+}
+
+// ─── Step 1: Install codex ────────────────────────────────────────────────────
+function installCodex() {
+  step('Codex 설치 확인 중...');
+  try {
+    const ver = execSync('codex --version 2>&1', { encoding: 'utf8' }).trim();
+    log(`  현재 버전: ${ver}`);
+  } catch {
+    log('  codex 없음 → npm으로 설치 중...');
+    execSync('npm install -g @openai/codex', { stdio: 'inherit' });
+  }
+  ok('Codex 설치 완료');
+}
+
+// ─── Step 2: Update codex ─────────────────────────────────────────────────────
+function updateCodex() {
+  step('Codex 최신 버전으로 업데이트 중...');
+  try {
+    execSync('npm install -g @openai/codex@latest', { stdio: 'inherit' });
+    ok('Codex 업데이트 완료');
+  } catch (e) {
+    warn('업데이트 실패 (계속 진행): ' + e.message);
+  }
+}
+
+// ─── Step 3: Copy patty.config.toml ──────────────────────────────────────────
+function copyPattyConfig() {
+  step('patty.config.toml → ~/.codex/ 복사 중...');
+  const codexDir = path.join(HOME, '.codex');
+  if (!fs.existsSync(codexDir)) fs.mkdirSync(codexDir, { recursive: true });
+
+  const candidates = [
+    path.join(__dirname, '..', '..', 'codex', 'patty.config.toml'),
+    path.join(__dirname, '..', 'patty.config.toml'),
+  ];
+  const dest = path.join(codexDir, 'patty.config.toml');
+  let src = candidates.find(fs.existsSync);
+
+  if (src) {
+    fs.copyFileSync(src, dest);
+    ok(`복사 완료 → ${dest}`);
+  } else {
+    fs.writeFileSync(dest, '[model_providers.patty]\n');
+    warn(`원본 없음 → 기본 파일 생성: ${dest}`);
+  }
+}
+
+// ─── Step 4: OIDC PKCE Login ──────────────────────────────────────────────────
+async function ssoLogin() {
+  step('Patty SSO 로그인 중...');
+
+  const codeVerifier  = generateCodeVerifier();
+  const codeChallenge = generateCodeChallenge(codeVerifier);
+  const state         = crypto.randomBytes(16).toString('hex');
+
+  // Find a free port starting from CALLBACK_PORT_BASE
+  const port = await new Promise((res, rej) => {
+    let p = CALLBACK_PORT_BASE;
+    const try_port = () => {
+      const s = http.createServer();
+      s.once('error', () => { s.close(); p++; if (p > CALLBACK_PORT_BASE + 20) rej(new Error('사용 가능한 포트 없음')); else try_port(); });
+      s.once('listening', () => { s.close(() => res(p)); });
+      s.listen(p, 'localhost');
+    };
+    try_port();
+  });
+  const REDIRECT_URI = `http://localhost:${port}${CALLBACK_PATH}`;
+
+  const authParams = new URLSearchParams({
+    client_id:             CLIENT_ID,
+    redirect_uri:          REDIRECT_URI,
+    response_type:         'code',
+    scope:                 'openid profile email',
+    code_challenge:        codeChallenge,
+    code_challenge_method: 'S256',
+    state,
+  });
+  const loginUrl = `${AUTH_URL}?${authParams}`;
+
+  return new Promise((resolve, reject) => {
+    let resolved = false;
+    const timer = setTimeout(() => {
+      if (!resolved) { server.close(); reject(new Error('SSO 로그인 타임아웃 (5분)')); }
+    }, 5 * 60 * 1000);
+
+    const server = http.createServer(async (req, res) => {
+      const url = new URL(req.url, `http://localhost:${port}`);
+      if (url.pathname !== CALLBACK_PATH) { res.writeHead(200); res.end('ok'); return; }
+
+      const code  = url.searchParams.get('code');
+      const stateBack = url.searchParams.get('state');
+      const error = url.searchParams.get('error');
+
+      if (error) {
+        res.writeHead(400, { 'Content-Type': 'text/html; charset=utf-8' });
+        res.end(errorHtml(`Keycloak 오류: ${error}`));
+        clearTimeout(timer); resolved = true; server.close();
+        reject(new Error(`Keycloak error: ${error}`));
+        return;
+      }
+
+      if (!code) {
+        res.writeHead(400, { 'Content-Type': 'text/html; charset=utf-8' });
+        res.end(errorHtml('인증 코드가 없습니다.'));
+        return;
+      }
+
+      if (stateBack !== state) {
+        res.writeHead(400, { 'Content-Type': 'text/html; charset=utf-8' });
+        res.end(errorHtml('state 불일치 — CSRF 가능성'));
+        clearTimeout(timer); resolved = true; server.close();
+        reject(new Error('state mismatch'));
+        return;
+      }
+
+      try {
+        // Exchange code for tokens
+        log('\n  → 인증 코드 수신, 토큰 교환 중...');
+        const tokenRes = await httpsPost(TOKEN_URL, {
+          grant_type:    'authorization_code',
+          client_id:     CLIENT_ID,
+          redirect_uri:  REDIRECT_URI,
+          code,
+          code_verifier: codeVerifier,
+        });
+
+        if (tokenRes.error) throw new Error(tokenRes.error_description || tokenRes.error);
+
+        const accessToken = tokenRes.access_token;
+        log('  → 토큰 수신 완료');
+
+        // Get userinfo
+        const userinfo = await httpsGet(USERINFO_URL, accessToken);
+        log(`  → 사용자: ${userinfo.preferred_username || userinfo.email || userinfo.sub}`);
+
+        // Check group membership via groups claim
+        const userGroups = userinfo.groups || [];
+        const inPattyEng = userGroups.some(g =>
+          g === 'pattyeng' || g === '/pattyeng'
+        );
+        if (!inPattyEng) {
+          throw new Error(`'pattyeng' 그룹에 속하지 않습니다. 현재 그룹: ${userGroups.join(', ') || '없음'}`);
+        }
+        log('  → pattyeng 그룹 확인 완료');
+
+        // Get PATTY_AGENT_API_KEY from userinfo claim (if mapper works)
+        // or fallback: read group attribute via admin API
+        let apiKey = userinfo.PATTY_AGENT_API_KEY || null;
+
+        if (!apiKey) {
+          log('  → userinfo에 API 키 없음, 그룹 속성에서 읽는 중...');
+          // Get admin token to read group attributes
+          const adminTokenRes = await httpsPost(ADMIN_TOKEN_URL, {
+            grant_type: 'password',
+            client_id:  'admin-cli',
+            username:   SA_USER,
+            password:   SA_PASS,
+          });
+          if (adminTokenRes.error) throw new Error('관리자 토큰 획득 실패: ' + adminTokenRes.error_description);
+          const groupData = await httpsGet(
+            `${KEYCLOAK_URL}/admin/realms/${REALM}/groups/${PATTYENG_GROUP_ID}`,
+            adminTokenRes.access_token
+          );
+          const attrs = groupData.attributes || {};
+          const vals = attrs.PATTY_AGENT_API_KEY || [];
+          apiKey = vals[0] || null;
+        }
+
+        if (!apiKey) {
+          throw new Error('PATTY_AGENT_API_KEY를 그룹 속성에서 찾을 수 없습니다. 관리자에게 문의하세요.');
+        }
+
+        res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+        res.end(successHtml());
+
+        clearTimeout(timer); resolved = true; server.close();
+        resolve({ apiKey, username: userinfo.preferred_username || userinfo.email });
+      } catch (err) {
+        res.writeHead(500, { 'Content-Type': 'text/html; charset=utf-8' });
+        res.end(errorHtml(err.message));
+        clearTimeout(timer); resolved = true; server.close();
+        reject(err);
+      }
+    });
+
+    server.listen(port, 'localhost', async () => {
+      log(`  → 로컬 콜백 서버 시작: http://localhost:${port}`);
+      log('  → 브라우저에서 Patty 계정으로 로그인해 주세요...\n');
+      log(`\n  🔗 로그인 URL:\n  ${loginUrl}\n`);
+      try {
+        const { default: open } = await import('open');
+        await open(loginUrl);
+        log('  → 브라우저 열림');
+      } catch {
+        warn('브라우저 자동 열기 실패. 위 URL을 브라우저에 복붙하세요.');
+      }
+    });
+
+    server.on('error', (err) => {
+      clearTimeout(timer);
+      reject(new Error(`콜백 서버 오류: ${err.message}`));
+    });
+  });
+}
+
+// ─── Step 5: Write API key to rc ─────────────────────────────────────────────
+function writeApiKeyToRc(apiKey) {
+  step('PATTY_AGENT_API_KEY 환경변수 등록 중...');
+  appendToRc(`# pattyeng — Patty Agent API Key\nexport PATTY_AGENT_API_KEY="${apiKey}"`);
+  process.env.PATTY_AGENT_API_KEY = apiKey;
+  ok('PATTY_AGENT_API_KEY 등록 완료');
+}
+
+// ─── Step 6: Add codex alias ──────────────────────────────────────────────────
+function addCodexAlias() {
+  step('codex alias 등록 중...');
+
+  if (IS_WIN) {
+    const block = `\n# pattyeng — codex alias\nfunction codex { codex.cmd -p patty $args }\n`;
+    for (const rc of getRcFiles()) {
+      const content = fs.existsSync(rc) ? fs.readFileSync(rc, 'utf8') : '';
+      if (!content.includes('pattyeng — codex alias')) {
+        fs.appendFileSync(rc, block);
+        log(`  → PowerShell 함수 추가: ${rc}`);
+      } else {
+        log(`  → 이미 존재: ${rc}`);
+      }
+    }
+    ok('codex alias 등록 완료 (PowerShell)');
+    return;
+  }
+
+  for (const rc of getRcFiles()) {
+    if (!fs.existsSync(rc)) continue;
+    let content = fs.readFileSync(rc, 'utf8');
+
+    if (content.includes('-p patty')) {
+      log(`  → 이미 -p patty 포함: ${rc} (건너뜀)`);
+      continue;
+    }
+
+    const existingAlias = /^(alias codex=["'])(.*)(["'])\s*$/m;
+    if (existingAlias.test(content)) {
+      content = content.replace(existingAlias, (_, pre, cmd, post) => {
+        return `${pre}${cmd} -p patty${post}`;
+      });
+      fs.writeFileSync(rc, content);
+      log(`  → 기존 alias에 -p patty 추가: ${rc}`);
+    } else {
+      fs.appendFileSync(rc, '\n# pattyeng — codex -p patty alias\nalias codex="codex -p patty"\n');
+      log(`  → 새 alias 추가: ${rc}`);
+    }
+  }
+  ok('codex alias 등록 완료');
+}
+
+// ─── Final message ────────────────────────────────────────────────────────────
+function finalMessage(username) {
+  log(`
+╔══════════════════════════════════════════════════════════════╗
+║  🎉 pattyeng 설치 완료!                                      ║
+╚══════════════════════════════════════════════════════════════╝
+${username ? `  👤 로그인: ${username}\n` : ''}
+✅ 완료된 작업:
+   • Codex 설치 및 최신 버전 업데이트
+   • ~/.codex/patty.config.toml 복사
+   • PATTY_AGENT_API_KEY 환경변수 등록
+   • codex alias 등록 (codex = codex -p patty)
+
+📋 마지막 단계 (딱 한 번만):
+   지금 터미널에 이 명령어 하나만 실행하세요:
+
+   $ exec zsh
+
+💡 그 다음부터는 바로 사용 가능:
+   $ codex "안녕하세요!"
+   $ codex --session xyz "작업 시작"
+   → 자동으로 Patty 설정으로 실행됩니다!
+
+🚀 Patty Engineering 팀에 오신 것을 환영합니다!
+`);
+}
+
+// ─── Main ─────────────────────────────────────────────────────────────────────
+async function install() {
+  log(`
+╔══════════════════════════════════════════╗
+║   pattyeng install codex 시작            ║
+╚══════════════════════════════════════════╝
+`);
+
+  installCodex();
+  updateCodex();
+  copyPattyConfig();
+
+  let apiKey = null;
+  let username = null;
+  try {
+    const result = await ssoLogin();
+    apiKey   = result.apiKey;
+    username = result.username;
+    ok(`SSO 로그인 성공! (${username})`);
+  } catch (e) {
+    warn('SSO 로그인 실패: ' + e.message);
+    warn('PATTY_AGENT_API_KEY 등록을 건너뜁니다.');
+  }
+
+  if (apiKey) writeApiKeyToRc(apiKey);
+  addCodexAlias();
+  finalMessage(username);
+}
+
+module.exports = { install };

package/package.json

@@ -0,0 +1,27 @@
+{
+  "name": "pattyeng",
+  "version": "1.0.0",
+  "description": "Patty Engineering CLI - Codex SSO setup tool",
+  "bin": {
+    "pattyeng": "./bin/pattyeng.js"
+  },
+  "main": "./lib/index.js",
+  "scripts": {
+    "test": "echo \"No tests yet\""
+  },
+  "dependencies": {
+    "open": "^10.1.0"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "keywords": ["patty", "codex", "cli", "engineering"],
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "bin/",
+    "lib/"
+  ]
+}