relayax-cli 0.4.24 → 0.4.25

package/dist/commands/publish.d.ts

@@ -27,6 +27,7 @@ export interface RequiresEnv {
     name: string;
     required?: boolean;
     description?: string;
+    setup_hint?: string;
 }
 export interface RequiresNpm {
     name: string;
@@ -74,7 +75,6 @@ export interface PublishMetadata {
     skill_details?: SkillDetail[];
     org_slug?: string;
 }
-export declare function createTarball(agentDir: string): Promise<string>;
 interface PublishResult {
     status: string;
     slug: string;
@@ -88,6 +88,6 @@ interface PublishResult {
         default_welcome?: string;
     } | null;
 }
-export declare function publishToApi(token: string, tarPath: string, metadata: PublishMetadata): Promise<PublishResult>;
+export declare function publishToApi(token: string, metadata: PublishMetadata): Promise<PublishResult>;
 export declare function registerPublish(program: Command): void;
 export {};

package/dist/commands/publish.js

@@ -3,14 +3,11 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createTarball = createTarball;
 exports.publishToApi = publishToApi;
 exports.registerPublish = registerPublish;
 const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
-const os_1 = __importDefault(require("os"));
 const js_yaml_1 = __importDefault(require("js-yaml"));
-const tar_1 = require("tar");
 const config_js_1 = require("../lib/config.js");
 const preamble_js_1 = require("../lib/preamble.js");
 const version_check_js_1 = require("../lib/version-check.js");
@@ -250,34 +247,14 @@ function resolveLongDescription(agentDir, yamlValue) {
     }
     return undefined;
 }
-async function createTarball(agentDir) {
-    const tmpFile = path_1.default.join(os_1.default.tmpdir(), `relay-publish-${Date.now()}.tar.gz`);
-    const dirsToInclude = VALID_DIRS.filter((d) => fs_1.default.existsSync(path_1.default.join(agentDir, d)));
-    // Include root-level files if they exist
-    const entries = [...dirsToInclude];
-    const rootFiles = ['relay.yaml', 'SKILL.md', 'guide.md'];
-    for (const file of rootFiles) {
-        if (fs_1.default.existsSync(path_1.default.join(agentDir, file))) {
-            entries.push(file);
-        }
-    }
-    await (0, tar_1.create)({
-        gzip: true,
-        file: tmpFile,
-        cwd: agentDir,
-    }, entries);
-    return tmpFile;
-}
-async function publishToApi(token, tarPath, metadata) {
-    const fileBuffer = fs_1.default.readFileSync(tarPath);
-    const blob = new Blob([fileBuffer], { type: 'application/gzip' });
-    const form = new FormData();
-    form.append('package', blob, `${metadata.slug}-${metadata.version}.tar.gz`);
-    form.append('metadata', JSON.stringify(metadata));
+async function publishToApi(token, metadata) {
     const res = await fetch(`${config_js_1.API_URL}/api/publish`, {
         method: 'POST',
-        headers: { Authorization: `Bearer ${token}` },
-        body: form,
+        headers: {
+            Authorization: `Bearer ${token}`,
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify(metadata),
         redirect: 'error',
     });
     const body = await res.json();
@@ -442,6 +419,27 @@ function registerPublish(program) {
                 console.error(`  → relay.yaml에 version: ${newVersion} 저장됨\n`);
             }
         }
+        // Auto-sync: relay.yaml의 contents에 정의된 소스를 .relay/에 동기화
+        try {
+            const yamlContent = fs_1.default.readFileSync(relayYamlPath, 'utf-8');
+            const yamlConfig = js_yaml_1.default.load(yamlContent);
+            const contents = yamlConfig.contents ?? [];
+            if (contents.length > 0) {
+                const { computeContentsDiff, syncContentsToRelay } = await import('./package.js');
+                const { diff: contentsDiff } = computeContentsDiff(contents, relayDir, agentDir);
+                const hasChanges = contentsDiff.some((d) => d.status === 'modified');
+                if (hasChanges) {
+                    syncContentsToRelay(contents, contentsDiff, relayDir, agentDir);
+                    if (!json) {
+                        const changedNames = contentsDiff.filter((d) => d.status === 'modified').map((d) => d.name);
+                        console.error(`\x1b[36m⚙ 소스 동기화:\x1b[0m ${changedNames.join(', ')}`);
+                    }
+                }
+            }
+        }
+        catch {
+            // sync 실패는 non-fatal — 기존 .relay/ 내용으로 publish 진행
+        }
         // Validate structure (콘텐츠는 .relay/ 안에 있음)
         const hasDirs = VALID_DIRS.some((d) => {
             const dirPath = path_1.default.join(relayDir, d);
@@ -709,10 +707,7 @@ function registerPublish(program) {
             console.error('\x1b[33m⚠ GUIDE.html은 더 이상 지원되지 않습니다. 상세페이지가 가이드 역할을 합니다.\x1b[0m');
             console.error('  long_description을 활용하거나 relayax.com에서 에이전트 정보를 편집하세요.\n');
         }
-        // Generate guide.md (consumer install guide)
-        const { generateGuide } = await import('../lib/guide.js');
-        const guideContent = generateGuide(config, detectedCommands, config.requires);
-        fs_1.default.writeFileSync(path_1.default.join(relayDir, 'guide.md'), guideContent);
+        // guide.md는 웹 API route에서 동적 생성 (/api/registry/{owner}/{slug}/guide.md)
         // Generate bin/relay-preamble.sh (self-contained tracking + update check)
         (0, preamble_js_1.generatePreambleBin)(relayDir, config.slug, config_js_1.API_URL);
         // Generate entry command (commands/{author}-{name}.md)
@@ -765,13 +760,11 @@ function registerPublish(program) {
                     return 'antigravity';
                 return 'unknown';
             }))];
-        let tarPath = null;
         try {
-            tarPath = await createTarball(relayDir);
             if (!json) {
                 console.error(`업로드 중...`);
             }
-            const result = await publishToApi(token, tarPath, metadata);
+            const result = await publishToApi(token, metadata);
             // Git push: commit and push to git server (required)
             const gitUrlRaw = result.git_url;
             if (gitUrlRaw) {
@@ -865,10 +858,5 @@ function registerPublish(program) {
             console.error(JSON.stringify({ error: 'PUBLISH_FAILED', message, fix: message }));
             process.exit(1);
         }
-        finally {
-            if (tarPath && fs_1.default.existsSync(tarPath)) {
-                fs_1.default.unlinkSync(tarPath);
-            }
-        }
     });
 }

package/dist/commands/update.js

@@ -93,13 +93,7 @@ function registerUpdate(program) {
                 await (0, storage_js_1.clonePackage)(agent.git_url, agentDir);
             }
             else {
-                // Legacy tar.gz path
-                const tarPath = await (0, storage_js_1.downloadPackage)(agent.package_url, tempDir);
-                if (fs_1.default.existsSync(agentDir)) {
-                    fs_1.default.rmSync(agentDir, { recursive: true, force: true });
-                }
-                fs_1.default.mkdirSync(agentDir, { recursive: true });
-                await (0, storage_js_1.extractPackage)(tarPath, agentDir);
+                throw new Error('이 에이전트는 재설치가 필요합니다. relay install로 다시 설치하세요.');
             }
             // Inject preamble
             (0, preamble_js_1.injectPreambleToAgent)(agentDir, slug);

package/dist/lib/api.js

@@ -110,10 +110,12 @@ async function sendUsagePing(agentId, slug, version) {
     const deviceHash = createHash('sha256')
         .update(`${hostname()}:${userInfo().username}`)
         .digest('hex');
+    // CLI version
+    const pkg = require('../../package.json');
     // agentId(UUID)가 있으면 UUID 경로, 없으면 slug name으로 fallback
     const pathParam = agentId || slug.replace(/^@/, '').split('/').pop() || slug;
     const url = `${config_js_1.API_URL}/api/agents/${pathParam}/ping`;
-    const payload = { device_hash: deviceHash, slug };
+    const payload = { device_hash: deviceHash, slug, cli_version: pkg.version };
     if (version)
         payload.installed_version = version;
     const headers = { 'Content-Type': 'application/json' };

package/dist/lib/git-operations.js

@@ -148,7 +148,7 @@ async function gitPublishUpdate(sourceDir, remoteUrl, version) {
         gitAdd(sourceDir);
         gitCommit(sourceDir, `v${version}`);
         gitTag(sourceDir, `v${version}`);
-        gitPush(sourceDir, 'origin');
+        gitPush(sourceDir, 'origin', 'HEAD:main');
     }
     finally {
         fs_1.default.rmSync(tempCloneDir, { recursive: true, force: true });

package/dist/lib/installer.js

@@ -190,10 +190,11 @@ function checkRequires(agentDir) {
             }
             else {
                 const desc = env.description ? ` (${env.description})` : '';
+                const hint = env.setup_hint ? `\n    설정 방법:\n${env.setup_hint.split('\n').map((l) => `      ${l}`).join('\n')}` : '';
                 results.push({
                     label: 'env',
                     status: env.required !== false ? 'missing' : 'warn',
-                    message: `${env.name} — 미설정${desc}`,
+                    message: `${env.name} — 미설정${desc}${hint}`,
                 });
             }
         }

package/dist/lib/preamble.js

@@ -43,16 +43,24 @@ if [ -f "$HOME/.relay/token.json" ]; then
   _RELAY_TOKEN=$(grep -o '"access_token":"[^"]*"' "$HOME/.relay/token.json" 2>/dev/null | head -1 | cut -d'"' -f4)
 fi
 
+# CLI version (for usage tracking)
+_CLI_VERSION=""
+if command -v relay &>/dev/null; then
+  _CLI_VERSION=$(relay --version 2>/dev/null | head -1 | grep -o '[0-9][0-9.]*' || true)
+fi
+
 # Usage ping (with user identity if logged in)
 if command -v relay &>/dev/null; then
   relay ping "${slug}" --quiet 2>/dev/null &
 elif command -v curl &>/dev/null; then
   _AUTH_HEADER=""
   [ -n "$_RELAY_TOKEN" ] && _AUTH_HEADER="-H \\"Authorization: Bearer $_RELAY_TOKEN\\""
+  _CLI_VER_FIELD=""
+  [ -n "$_CLI_VERSION" ] && _CLI_VER_FIELD=",\\"cli_version\\":\\"$_CLI_VERSION\\""
   eval curl -sf --max-time 5 -X POST "${apiUrl}/api/agents/${agentSlug}/ping" \\
     -H "Content-Type: application/json" \\
     $_AUTH_HEADER \\
-    -d "{\\"device_hash\\":\\"$DEVICE_HASH\\",\\"slug\\":\\"${slug}\\"}" \\
+    -d "{\\"device_hash\\":\\"$DEVICE_HASH\\",\\"slug\\":\\"${slug}\\"$_CLI_VER_FIELD}" \\
     2>/dev/null &
 fi
 

package/dist/lib/storage.d.ts

@@ -1,9 +1,6 @@
-export declare function downloadPackage(url: string, destDir: string): Promise<string>;
-export declare function extractPackage(tarPath: string, destDir: string): Promise<void>;
 export declare function makeTempDir(): string;
 export declare function removeTempDir(dir: string): void;
 /**
  * Clone an agent from git URL to destination directory.
- * Replaces downloadPackage() + extractPackage() for git-based agents.
  */
 export declare function clonePackage(gitUrl: string, destDir: string, version?: string): Promise<void>;

package/dist/lib/storage.js

@@ -3,49 +3,20 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.downloadPackage = downloadPackage;
-exports.extractPackage = extractPackage;
 exports.makeTempDir = makeTempDir;
 exports.removeTempDir = removeTempDir;
 exports.clonePackage = clonePackage;
 const fs_1 = __importDefault(require("fs"));
-const path_1 = __importDefault(require("path"));
 const os_1 = __importDefault(require("os"));
-const fs_2 = require("fs");
-const promises_1 = require("stream/promises");
-const stream_1 = require("stream");
-const tar_1 = require("tar");
 const git_operations_js_1 = require("./git-operations.js");
-async function downloadPackage(url, destDir) {
-    const res = await fetch(url);
-    if (!res.ok) {
-        throw new Error(`패키지 다운로드 실패 (${res.status}): ${url}`);
-    }
-    const fileName = path_1.default.basename(new URL(url).pathname) || 'package.tar.gz';
-    const destPath = path_1.default.join(destDir, fileName);
-    const body = res.body;
-    if (!body) {
-        throw new Error('응답 본문이 비어 있습니다');
-    }
-    const nodeReadable = stream_1.Readable.fromWeb(body);
-    await (0, promises_1.pipeline)(nodeReadable, (0, fs_2.createWriteStream)(destPath));
-    return destPath;
-}
-async function extractPackage(tarPath, destDir) {
-    if (!fs_1.default.existsSync(destDir)) {
-        fs_1.default.mkdirSync(destDir, { recursive: true });
-    }
-    await (0, tar_1.extract)({ file: tarPath, cwd: destDir });
-}
 function makeTempDir() {
-    return fs_1.default.mkdtempSync(path_1.default.join(os_1.default.tmpdir(), 'relay-'));
+    return fs_1.default.mkdtempSync(os_1.default.tmpdir() + '/relay-');
 }
 function removeTempDir(dir) {
     fs_1.default.rmSync(dir, { recursive: true, force: true });
 }
 /**
  * Clone an agent from git URL to destination directory.
- * Replaces downloadPackage() + extractPackage() for git-based agents.
  */
 async function clonePackage(gitUrl, destDir, version) {
     await (0, git_operations_js_1.gitInstall)(gitUrl, destDir, version);

package/dist/mcp/server.js

@@ -460,49 +460,6 @@ function createMcpServer() {
             return { content: [jsonText({ error: String(err) })], isError: true };
         }
     });
-    server.tool('relay_publish', '에이전트를 마켓플레이스에 배포합니다 (.relay/ 디렉토리를 tar로 패키징하여 업로드)', {
-        project_path: zod_1.z.string().optional().describe('프로젝트 경로 (.relay/relay.yaml이 있는 디렉토리)'),
-    }, async ({ project_path }) => {
-        try {
-            const projectPath = resolveMcpProjectPath(project_path);
-            const relayDir = path_1.default.join(projectPath, '.relay');
-            const relayYaml = path_1.default.join(relayDir, 'relay.yaml');
-            if (!fs_1.default.existsSync(relayYaml)) {
-                return { content: [jsonText({ error: 'NOT_INITIALIZED', message: '.relay/relay.yaml이 없습니다.' })], isError: true };
-            }
-            const token = await (0, config_js_1.getValidToken)();
-            if (!token) {
-                return { content: [jsonText({ error: 'LOGIN_REQUIRED', message: '배포하려면 로그인이 필요합니다.' })], isError: true };
-            }
-            const cfg = js_yaml_1.default.load(fs_1.default.readFileSync(relayYaml, 'utf-8'));
-            const { createTarball, publishToApi } = await import('../commands/publish.js');
-            // Generate bin/relay-preamble.sh (CLI publish와 동일하게)
-            (0, preamble_js_1.generatePreambleBin)(relayDir, cfg.slug, config_js_1.API_URL);
-            const tarPath = await createTarball(relayDir);
-            try {
-                const metadata = {
-                    slug: cfg.slug,
-                    name: cfg.name,
-                    description: cfg.description ?? '',
-                    tags: cfg.tags ?? [],
-                    commands: [],
-                    components: { skills: 0, agents: 0, rules: 0, commands: 0 },
-                    version: cfg.version,
-                    visibility: cfg.visibility ?? 'public',
-                    cli_version: pkg.version,
-                };
-                const result = await publishToApi(token, tarPath, metadata);
-                const cliUpdate = await getCliUpdateWarning();
-                return { content: [jsonTextWithUpdate(result, cliUpdate)] };
-            }
-            finally {
-                fs_1.default.unlinkSync(tarPath);
-            }
-        }
-        catch (err) {
-            return { content: [jsonText({ error: String(err) })], isError: true };
-        }
-    });
     // ═══ grant / access / join ═══
     server.tool('relay_grant_create', '에이전트 또는 Organization의 접근 코드를 생성합니다', {
         agent_slug: zod_1.z.string().optional().describe('에이전트 slug (agent 접근 코드 생성 시)'),

package/dist/prompts/create.md

@@ -68,6 +68,9 @@ relay.yaml이 없으면 새로 만들고, 있으면 변경사항을 반영합니
 - **env**: 환경변수 참조를 찾고 맥락에서 필수/선택 판단
   - 핵심 로직에서 사용 → `required: true`
   - 테스트/선택 기능에서 사용 → `required: false`
+  - cookie, token 등 비표준적 env는 `setup_hint`에 획득 방법을 기술 권장
+    - 예: `setup_hint: "1. klingai.com 로그인\n2. DevTools → Cookies\n3. cookie 문자열 복사"`
+    - 일반 API 키(OPENAI_API_KEY 등)는 description만으로 충분
 - **cli**: 외부 CLI 도구 참조 (playwright, ffmpeg 등)
 - **npm**: import/require 패키지
 - **mcp**: MCP 서버 참조 (supabase, github 등)
@@ -76,6 +79,10 @@ relay.yaml이 없으면 새로 만들고, 있으면 변경사항을 반영합니
 
 보안 점검:
 - 하드코딩된 API 키, 토큰 (sk-*, ghp_*, AKIA* 등)
+- 하드코딩된 cookie 값 (Cookie:, Set-Cookie, session_id=, _ga= 등)
+- 하드코딩된 Bearer/JWT 토큰 (Bearer ey..., Authorization: 등)
+- 100자 이상의 연속 alphanumeric/base64 문자열 (시크릿 의심)
+- 단, placeholder는 무시: YOUR_XXX, <your-xxx>, sk-xxx, PASTE_HERE 등 명백한 예시값
 - 파일 컨텍스트를 읽어 실제 시크릿 vs 예시 코드를 구분
 - 발견 시 **반드시 경고**하고 환경변수 대체 안내
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "relayax-cli",
-  "version": "0.4.24",
+  "version": "0.4.25",
   "description": "RelayAX Agent Team Marketplace CLI - Install and manage agent teams",
   "main": "dist/index.js",
   "bin": {
@@ -37,9 +37,7 @@
     "@inquirer/prompts": "^8.3.2",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "commander": "^13.1.0",
-    "form-data": "^4.0.5",
-    "js-yaml": "^4.1.1",
-    "tar": "^7.4.0"
+    "js-yaml": "^4.1.1"
   },
   "devDependencies": {
     "@types/js-yaml": "^4.0.9",