pleumrouter 0.5.12 → 0.5.14

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pleumrouter",
-  "version": "0.5.12",
+  "version": "0.5.14",
   "description": "Official PleumRouter terminal CLI — launch any coding agent against PleumRouter.",
   "type": "module",
   "bin": {

package/src/config.mjs

@@ -105,24 +105,6 @@ export async function requireAuth() {
   return refreshed;
 }
 
-/** @deprecated use requireAuth — kept as alias for gradual call-site migration */
-export function requireKey() {
-  // sync callers still exist; they must switch to await requireAuth().
-  // For sync contexts we only check presence and return access_token (no refresh).
-  const cfg = readConfig();
-  if (cfg?.key && !cfg?.access_token) {
-    console.error(
-      t("Legacy API key login is no longer supported. Run:\n  pleum login"),
-    );
-    process.exit(1);
-  }
-  if (!cfg?.access_token) {
-    console.error(t("Login required. Run this first:\n  pleum login"));
-    process.exit(1);
-  }
-  return cfg.access_token;
-}
-
 export async function refreshAccessToken(cfg = readConfig()) {
   if (!cfg?.refresh_token) return null;
   const base = (cfg.base_url || ROOT).replace(/\/+$/, "").replace(/\/v1$/, "");

package/src/run.mjs

@@ -1,7 +1,7 @@
 import { createInterface } from "node:readline";
 import { readFileSync, writeFileSync, mkdirSync, lstatSync } from "node:fs";
 import { join } from "node:path";
-import { V1, requireAuth, HISTORY_FILE, SESSIONS_DIR } from "./config.mjs";
+import { requireAuth, authFetch, HISTORY_FILE, SESSIONS_DIR } from "./config.mjs";
 import { fetchModels, formatTable, matchModels, formatModelLabel, safeModelText } from "./models.mjs";
 import { style, divider, sanitizeTerminalText } from "./ansi.mjs";
 import { createMarkdownStream } from "./markdown.mjs";
@@ -200,7 +200,8 @@ export async function run(rest) {
   let model = argModel;
   const piped = await readStdin();
   const oneShot = Boolean(inlinePrompt || piped || attachments.length);
-  const key = await requireAuth();
+  // 부팅 시점 1회 로그인 게이트. access_token은 각 요청이 authFetch에서 refresh한다.
+  await requireAuth();
   const callOpts = { tags, skipCache, reasoningEffort, serviceTier, reasoningMode };
 
   if (!model && !oneShot) {
@@ -226,7 +227,7 @@ export async function run(rest) {
         console.error(`ℹ ${t("Attaching and uploading {n} explicit local image(s).", { n })}`);
       }
       const messages = [{ role: "user", content }];
-      await streamChat(key, model, messages, { verbose, quiet: true, ...callOpts });
+      await streamChat(model, messages, { verbose, quiet: true, ...callOpts });
     } catch (e) {
       console.error(`${style.red("✗")} ${sanitizeTerminalText(e.message)}`);
       process.exit(1);
@@ -234,10 +235,10 @@ export async function run(rest) {
     process.exit(0);
   }
 
-  await repl(key, model, verbose, callOpts);
+  await repl(model, verbose, callOpts);
 }
 
-async function repl(key, initialModel, initialVerbose, {
+async function repl(initialModel, initialVerbose, {
   tags = [],
   skipCache = false,
   reasoningEffort = null,
@@ -263,7 +264,7 @@ async function repl(key, initialModel, initialVerbose, {
       const req = system ? [{ role: "system", content: system }, ...messages] : messages;
       const ac = new AbortController();
       currentAbort = ac;
-      const reply = await streamChat(key, model, req, {
+      const reply = await streamChat(model, req, {
         verbose,
         signal: ac.signal,
         tags,
@@ -487,7 +488,7 @@ async function handleSlash(text, ctx) {
 
 // SSE 스트리밍 채팅. fetchImpl 주입 가능(테스트용 — 네트워크 없이 SSE 파싱 검증).
 // 비용은 마지막 SSE 청크의 cost.krw — 스트리밍 응답엔 X-Cost-Krw 헤더가 없다(백엔드 계약).
-export async function streamChat(key, model, messages, {
+export async function streamChat(model, messages, {
   verbose = false,
   quiet = false,
   signal,
@@ -496,21 +497,25 @@ export async function streamChat(key, model, messages, {
   reasoningEffort = null,
   serviceTier = null,
   reasoningMode = null,
-  fetchImpl = fetch,
+  fetchImpl = null,
 } = {}) {
   const t0 = Date.now();
   const sp = spinner(t("{model} thinking…", { model: sanitizeTerminalText(model) }));
   let res;
   try {
     // 게이트웨이 패리티(0095): X-Pleum-Skip-Cache 헤더 + bounded tags 본문.
-    const headers = { "Content-Type": "application/json", Authorization: `Bearer ${key}` };
+    // authFetch가 Bearer + 401→refresh→재시도를 소유한다. 긴 REPL 세션 도중
+    // access_token이 만료돼도 자동 갱신돼야 한다(2026-07-27 버그 수정).
+    const headers = { "Content-Type": "application/json" };
     if (skipCache) headers["X-Pleum-Skip-Cache"] = "1";
     const bodyObj = { model, messages, stream: true, stream_options: { include_usage: true } };
     if (tags.length > 0) bodyObj.tags = tags.slice(0, 10);
     if (reasoningEffort) bodyObj.reasoning_effort = reasoningEffort;
     if (serviceTier) bodyObj.service_tier = serviceTier;
     if (reasoningMode) bodyObj.reasoning_mode = reasoningMode;
-    res = await fetchImpl(`${V1}/chat/completions`, {
+    // fetchImpl: 테스트용 네트워크 치환. 프로덕션은 authFetch(Bearer + 401 refresh).
+    const doFetch = fetchImpl || ((path, init) => authFetch(path, init));
+    res = await doFetch("/chat/completions", {
       method: "POST",
       headers,
       body: JSON.stringify(bodyObj),

package/src/upgrade.mjs

@@ -3,9 +3,10 @@ import { spawn } from "node:child_process";
 // 최신 버전으로 전역 재설치. brew tap 보류 상태라 npm 경로([[project_pleum_cli]]).
 export function upgrade() {
   console.log("▶ npm install -g pleumrouter@latest\n");
-  const child = spawn("npm", ["install", "-g", "pleumrouter@latest"], {
+  const bin = process.platform === "win32" ? "npm.cmd" : "npm";
+  const child = spawn(bin, ["install", "-g", "pleumrouter@latest"], {
     stdio: "inherit",
-    shell: process.platform === "win32",
+    shell: false,
   });
   child.on("error", (e) => {
     console.error(`✗ ${e.message}`);