pleumrouter 0.5.23 → 0.5.25

package/README.md

@@ -97,7 +97,7 @@ npm link          # 로컬에서 pleum 명령 노출
 
 1. `npm version patch` (또는 minor/major)로 `package.json` bump 후 커밋.
 2. `git tag cli-v$(node -p "require('./package.json').version")` → `git push origin HEAD --tags`.
-3. 워크플로가 `secrets.NPM_TOKEN`으로 `npm publish --provenance` 실행.
+3. 워크플로가 `secrets.NPM_TOKEN`으로 `npm publish` 실행. (private GitHub repo라 `--provenance` 불가)
 
 태그 규칙: `cli-v{semver}` (예: `cli-v0.5.15`).
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pleumrouter",
-  "version": "0.5.23",
+  "version": "0.5.25",
   "description": "Official PleumRouter terminal CLI — launch any coding agent against PleumRouter.",
   "type": "module",
   "bin": {

package/src/config.mjs

@@ -62,15 +62,9 @@ export function clearCredentials(existing) {
 }
 
 /**
- * 사용 가능한 세션 보유 여부. 레거시 `key`(plm_)만 있는 상태는 requireAuth()가 거부하므로
- * (아래 requireAuth 참조) 미로그인으로 취급한다 — 그래야 런처가 자동으로 재로그인을 태운다.
+ * JWT payload 파싱(서명 검증 없는 디코드) — iat, exp 등의 클레임 추출용.
  */
-export function isLoggedIn(cfg = readConfig()) {
-  return Boolean(cfg?.access_token);
-}
-
-/** JWT payload `exp`(epoch sec) — 서명 검증 없이 refresh 트리거 힌트. */
-export function readJwtExp(token) {
+export function readJwtPayload(token) {
   if (typeof token !== "string") return null;
   const parts = token.split(".");
   const segment = parts[1];
@@ -80,14 +74,32 @@ export function readJwtExp(token) {
     const pad = b64.length % 4;
     if (pad) b64 += "=".repeat(4 - pad);
     const json = Buffer.from(b64, "base64").toString("utf8");
-    const payload = JSON.parse(json);
-    return typeof payload.exp === "number" ? payload.exp : null;
+    return JSON.parse(json);
   } catch {
     return null;
   }
 }
 
-/** access가 곧 만료(기본 60s 여유)면 true. */
+/** JWT payload `exp`(epoch sec) */
+export function readJwtExp(token) {
+  const payload = readJwtPayload(token);
+  return typeof payload?.exp === "number" ? payload.exp : null;
+}
+
+/** JWT payload `iat`(epoch sec) */
+export function readJwtIat(token) {
+  const payload = readJwtPayload(token);
+  return typeof payload?.iat === "number" ? payload.iat : null;
+}
+
+/** 토큰 만료 여부 판정 (skewSeconds 여유 포함, unparseable은 false 반환) */
+export function isTokenExpired(token, skewSeconds = 0) {
+  const exp = readJwtExp(token);
+  if (exp == null) return false;
+  return exp * 1000 <= Date.now() + skewSeconds * 1000;
+}
+
+/** access가 곧 만료(기본 60s 여유)면 true. unparseable은 만료로 간주. */
 export function accessTokenIsStale(accessToken, skewSeconds = 60) {
   const exp = readJwtExp(accessToken);
   if (exp == null) return true;
@@ -95,29 +107,59 @@ export function accessTokenIsStale(accessToken, skewSeconds = 60) {
 }
 
 /**
- * 유효한 access_token을 반환. stale이면 refresh. 레거시 `key`(plm_)만 있으면 재로그인 안내.
+ * 사용 가능한 세션 보유 여부.
+ * 1) access_token 또는 refresh_token이 없으면 미로그인.
+ * 2) refresh_token이 이미 7일 만료되었으면 미로그인.
+ * 3) 레거시 `key`(plm_)만 있는 상태는 requireAuth()가 거부하므로 미로그인.
+ */
+export function isLoggedIn(cfg = readConfig()) {
+  if (!cfg?.access_token || !cfg?.refresh_token) return false;
+  if (isTokenExpired(cfg.refresh_token)) return false;
+  return true;
+}
+
+/**
+ * 7일 슬라이딩 세션 갱신 (1시간 스로틀링).
+ * CLI 접속 시 마지막 갱신(iat)으로부터 minIntervalSeconds(기본 3600초=1시간) 이상 지났거나
+ * access_token이 곧 만료(stale)되면 /v1/auth/refresh를 호출해 만료일을 현재+7일로 연장한다.
+ */
+export async function touchSession(cfg = readConfig(), { minIntervalSeconds = 3600 } = {}) {
+  if (!isLoggedIn(cfg)) return null;
+  const iat = readJwtIat(cfg.refresh_token) ?? readJwtIat(cfg.access_token);
+  const ageSeconds = iat ? Math.max(0, Math.floor(Date.now() / 1000 - iat)) : Infinity;
+  const isStale = accessTokenIsStale(cfg.access_token, 300);
+  if (!isStale && ageSeconds < minIntervalSeconds) {
+    return cfg.access_token;
+  }
+  return await refreshAccessToken(cfg);
+}
+
+/**
+ * 유효한 access_token을 반환. stale이거나 1시간 경과 시 refresh하여 슬라이딩 윈도우 유지.
+ * 레거시 `key`(plm_)만 있으면 재로그인 안내.
  */
 export async function requireAuth() {
-  const cfg = readConfig();
+  let cfg = readConfig();
   if (cfg?.key && !cfg?.access_token) {
     console.error(
       t("Legacy API key login is no longer supported. Run:\n  pleum login"),
     );
     process.exit(1);
   }
-  if (!cfg?.access_token || !cfg?.refresh_token) {
+  if (!isLoggedIn(cfg)) {
     console.error(t("Login required. Run this first:\n  pleum login"));
     process.exit(1);
   }
-  if (!accessTokenIsStale(cfg.access_token)) {
+  const token = await touchSession(cfg);
+  if (token) return token;
+
+  cfg = readConfig();
+  if (cfg?.access_token && !accessTokenIsStale(cfg.access_token, 0)) {
     return cfg.access_token;
   }
-  const refreshed = await refreshAccessToken(cfg);
-  if (!refreshed) {
-    console.error(t("Session expired. Run:\n  pleum login"));
-    process.exit(1);
-  }
-  return refreshed;
+
+  console.error(t("Session expired. Run:\n  pleum login"));
+  process.exit(1);
 }
 
 export async function refreshAccessToken(cfg = readConfig()) {
@@ -129,7 +171,12 @@ export async function refreshAccessToken(cfg = readConfig()) {
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ refresh_token: cfg.refresh_token }),
     });
-    if (!res.ok) return null;
+    if (!res.ok) {
+      if (res.status === 401 || res.status === 403) {
+        writeConfig(clearCredentials(cfg));
+      }
+      return null;
+    }
     const data = await res.json();
     if (!data.access_token || !data.refresh_token) return null;
     const exp = readJwtExp(data.access_token);

package/src/health.mjs

@@ -1,7 +1,7 @@
 // `pleum health` — 게이트웨이 연결성 + 로그인 상태 한눈에.
 // 셀프호스트/스테이징(PLEUM_BASE_URL) 점검·고객지원 트리아지용. 공개 /v1/health 재사용.
 
-import { ROOT, V1, readConfig } from "./config.mjs";
+import { ROOT, V1, readConfig, isLoggedIn } from "./config.mjs";
 import { style, divider } from "./ansi.mjs";
 import { t } from "./i18n.mjs";
 
@@ -39,7 +39,7 @@ export function renderHealth({ root, health, error, ms, keyPrefix }, styler = st
 
 export async function health() {
   const cfg = readConfig();
-  const keyPrefix = cfg?.access_token
+  const keyPrefix = isLoggedIn(cfg)
     ? "oauth"
     : cfg?.key
       ? cfg.key.slice(0, 8)

package/src/locales/es.mjs

@@ -24,6 +24,11 @@ export const ES = {
   "Google Antigravity CLI (agy)": "CLI de Google Antigravity (agy)",
   "Pi coding agent (picode is a Pi package)": "Agente Pi (picode es un paquete de Pi)",
   "Charmbracelet terminal coding agent": "Agente de terminal Charmbracelet",
+  "MiniMax's autonomous coding agent": "Agente de codificación autónomo de MiniMax",
+  "Xiaomi's terminal coding agent with persistent memory": "Agente de codificación de terminal de Xiaomi con memoria persistente",
+  "Autonomous personal AI coding agent": "Agente personal autónomo de codificación por IA",
+  "Terminal AI coding engine for complex tasks": "Motor de codificación de IA en terminal para tareas complejas",
+  "Local code execution & pair programmer": "Ejecución de código local y programador en pareja",
   "Available: {list}": "Disponibles: {list}",
   "Balance": "Saldo",
   "Balance is below the auto-charge threshold ({threshold} ₩).": "El saldo está por debajo del umbral de recarga automática ({threshold} ₩).",

package/src/locales/ja.mjs

@@ -24,6 +24,11 @@ export const JA = {
   "Google Antigravity CLI (agy)": "Google Antigravity CLI (agy)",
   "Pi coding agent (picode is a Pi package)": "Pi コーディングエージェント (picode は Pi パッケージ)",
   "Charmbracelet terminal coding agent": "Charmbracelet ターミナルコーディングエージェント",
+  "MiniMax's autonomous coding agent": "MiniMax の自律型コーディングエージェント",
+  "Xiaomi's terminal coding agent with persistent memory": "永続メモリを搭載した Xiaomi のターミナルコーディングエージェント",
+  "Autonomous personal AI coding agent": "個人向け自律型 AI コーディングエージェント",
+  "Terminal AI coding engine for complex tasks": "複雑なタスク向けターミナル AI コーディングエンジン",
+  "Local code execution & pair programmer": "ローカルコード実行＆ペアプログラマー",
   "Available: {list}": "利用可能: {list}",
   "Balance": "残高",
   "Balance is below the auto-charge threshold ({threshold} ₩).": "残高が自動チャージのしきい値 ({threshold} ₩) を下回っています。",

package/src/locales/ko.mjs

@@ -157,6 +157,11 @@ export const KO = {
   "Google Antigravity CLI (agy)": "Google Antigravity CLI (agy)",
   "Pi coding agent (picode is a Pi package)": "Pi 코딩 에이전트 (picode는 Pi 패키지)",
   "Charmbracelet terminal coding agent": "Charmbracelet 터미널 코딩 에이전트",
+  "MiniMax's autonomous coding agent": "MiniMax의 자율 코딩 에이전트",
+  "Xiaomi's terminal coding agent with persistent memory": "영구 메모리를 탑재한 Xiaomi의 터미널 코딩 에이전트",
+  "Autonomous personal AI coding agent": "개인용 자율 AI 코딩 에이전트",
+  "Terminal AI coding engine for complex tasks": "복잡한 작업을 위한 터미널 AI 코딩 엔진",
+  "Local code execution & pair programmer": "로컬 코드 실행 및 페어 프로그래머",
   "Log in": "로그인",
   "Log in via browser and save the API key": "브라우저로 로그인하고 API 키를 저장합니다",
   "Chat with a model": "모델과 채팅",

package/src/locales/zh.mjs

@@ -24,6 +24,11 @@ export const ZH = {
   "Google Antigravity CLI (agy)": "Google Antigravity CLI (agy)",
   "Pi coding agent (picode is a Pi package)": "Pi 编程代理（picode 是 Pi 包）",
   "Charmbracelet terminal coding agent": "Charmbracelet 终端编程代理",
+  "MiniMax's autonomous coding agent": "MiniMax 自主编程代理",
+  "Xiaomi's terminal coding agent with persistent memory": "带持久记忆的 Xiaomi 终端编程代理",
+  "Autonomous personal AI coding agent": "个人自主 AI 编程代理",
+  "Terminal AI coding engine for complex tasks": "用于复杂任务的终端 AI 编程引擎",
+  "Local code execution & pair programmer": "本地代码执行与结对编程器",
   "Available: {list}": "可用：{list}",
   "Balance": "余额",
   "Balance is below the auto-charge threshold ({threshold} ₩).": "余额低于自动充值阈值（{threshold} ₩）。",

package/src/menu.mjs

@@ -13,7 +13,7 @@ import { spawn } from "node:child_process";
 import { createInterface } from "node:readline";
 import { style, displayWidth, terminalWidth, hyperlink, sanitizeTerminalText } from "./ansi.mjs";
 import { keyFeeder, select } from "./interactive.mjs";
-import { readConfig, writeConfig, isLoggedIn } from "./config.mjs";
+import { readConfig, writeConfig, isLoggedIn, touchSession } from "./config.mjs";
 import { RECIPES, MANUAL } from "./recipes.mjs";
 import { onPath, launch } from "./launch.mjs";
 import { fetchModels, matchModels, listModels, formatModelLabel } from "./models.mjs";
@@ -44,6 +44,11 @@ const AGENT_DESC = {
   agy: "Google Antigravity CLI (agy)",
   pi: "Pi coding agent (picode is a Pi package)",
   crush: "Charmbracelet terminal coding agent",
+  minimax: "MiniMax's autonomous coding agent",
+  mimo: "Xiaomi's terminal coding agent with persistent memory",
+  openclaw: "Autonomous personal AI coding agent",
+  plandex: "Terminal AI coding engine for complex tasks",
+  interpreter: "Local code execution & pair programmer",
 };
 
 const autoInstallable = (r) => !/^https?:/.test(r.install); // URL이면 수동 설치 안내만
@@ -298,6 +303,7 @@ export async function mainMenu() {
   // login()의 실패(취소·2분 타임아웃·state 불일치)는 그대로 던져 bin/pleum.mjs의
   // 최상위 catch가 `✗ <메시지>` + exit 1로 처리하게 둔다(메뉴를 띄우지 않는다).
   if (!isLoggedIn()) await login();
+  else await touchSession().catch(() => {});
 
   for (;;) {
     const picked = await menuSelect();

package/src/recipes.mjs

@@ -13,8 +13,7 @@ import { ROOT, V1 } from "./config.mjs";
 //
 // 커스텀 엔드포인트가 없어 PleumRouter로 라우팅할 수 없으면 등록하지 않는다:
 //   Cursor CLI · Amp · Factory Droid · Kiro(공식 BYOK 없음, aws/kiro#9367) ·
-//   Cline CLI(cline auth가 사용자 cred를 디스크에 고정) ·
-//   OpenClaw(세션형 코딩 CLI가 아님).
+//   Cline CLI(cline auth가 사용자 cred를 디스크에 고정).
 export const RECIPES = {
   claude: {
     label: "Claude Code",
@@ -235,6 +234,84 @@ export const RECIPES = {
     env: (key) => ({ PLEUM_API_KEY: key }),
     args: () => [],
   },
+  minimax: {
+    label: "MiniMax Code",
+    bin: "mcode",
+    type: "env",
+    install: "npm install -g @minimax-ai/code@latest",
+    attribution: {
+      title: "MiniMax Code",
+      referer: "https://github.com/MiniMax-AI/minimax-code",
+    },
+    env: (key, model) => ({
+      OPENAI_BASE_URL: V1,
+      OPENAI_API_KEY: key,
+      ...(model ? { OPENAI_MODEL: model } : {}),
+    }),
+    args: (m) => (m ? ["--model", m] : []),
+  },
+  mimo: {
+    label: "MiMo Code",
+    bin: "mimo",
+    type: "env",
+    install: "npm install -g @mimo-ai/cli",
+    attribution: {
+      title: "MiMo Code",
+      referer: "https://github.com/XiaomiMiMo/MiMo-Code",
+    },
+    env: (key, model) => ({
+      OPENAI_BASE_URL: V1,
+      OPENAI_API_KEY: key,
+      ...(model ? { OPENAI_MODEL: model } : {}),
+    }),
+    args: (m) => (m ? ["--model", m] : []),
+  },
+  openclaw: {
+    label: "OpenClaw",
+    bin: "openclaw",
+    type: "env",
+    install: "npm install -g openclaw@latest",
+    attribution: {
+      title: "OpenClaw",
+      referer: "https://github.com/openclaw/openclaw",
+    },
+    env: (key, model) => ({
+      OPENAI_BASE_URL: V1,
+      OPENAI_API_KEY: key,
+      ...(model ? { OPENAI_MODEL: model } : {}),
+    }),
+    args: (m) => (m ? ["--model", m] : []),
+  },
+  plandex: {
+    label: "Plandex",
+    bin: "plandex",
+    type: "env",
+    install: "curl -sL https://plandex.ai/install.sh | bash",
+    attribution: {
+      title: "Plandex",
+      referer: "https://github.com/plandex-ai/plandex",
+    },
+    env: (key) => ({
+      OPENAI_API_BASE: V1,
+      OPENAI_API_KEY: key,
+    }),
+    args: () => [],
+  },
+  interpreter: {
+    label: "Open Interpreter",
+    bin: "interpreter",
+    type: "env",
+    install: "pip install open-interpreter",
+    attribution: {
+      title: "Open Interpreter",
+      referer: "https://github.com/OpenInterpreter/open-interpreter",
+    },
+    env: (key) => ({
+      OPENAI_API_BASE: V1,
+      OPENAI_API_KEY: key,
+    }),
+    args: (m) => (m ? ["--model", `openai/${m}`] : []),
+  },
 };
 
 export const LAUNCH_ALIASES = {
@@ -242,6 +319,13 @@ export const LAUNCH_ALIASES = {
   picode: "pi",
   ohmypi: "omp",
   "oh-my-pi": "omp",
+  qwencode: "qwen",
+  "qwen-code": "qwen",
+  "minimax-code": "minimax",
+  mcode: "minimax",
+  mimocode: "mimo",
+  "mimo-code": "mimo",
+  "open-interpreter": "interpreter",
 };
 
 export function resolveLaunchTool(name) {