tripo-cli 0.2.0 → 0.3.0

package/README.md

@@ -15,7 +15,7 @@ tripo login          # browser approves, key arrives automatically; or --paste /
 tripo make knight.png --for game-mobile --then texture,rig,convert:fbx
 ```
 
-Works with both Tripo regions from the same install — international (`openapi.tripo3d.ai`, console `developers.tripo3d.ai`, email login + Stripe) and China mainland (`openapi.tripo3d.com`, console `developers.tripo3d.com`, SMS login + Alipay). `tripo login` runs an RFC 8628 device flow: the terminal shows a short code, the browser signs in (each console's own method) and approves, and the key lands in the CLI automatically — with graceful fallback to open-the-keys-page-and-paste when the device-auth backend is unavailable. You never pick a region when a key is in hand: the key is probed against both regions and whichever accepts it wins; `tripo topup` then opens the matching billing page (`/billing` on ov, `/billing/recharge` on cn). If a config was moved between machines, `tripo doctor` detects the mismatch and prints the one-line fix.
+Works with both Tripo regions from the same install — international (`openapi.tripo3d.ai`, console `developers.tripo3d.ai`, email login + Stripe) and China mainland (`openapi.tripo3d.com`, console `developers.tripo3d.com`, SMS login + Alipay). `tripo login` runs an RFC 8628 device flow: the terminal shows a short code, the browser signs in (each console's own method) and approves, and the key lands in the CLI automatically — with graceful fallback to open-the-keys-page-and-paste when the device-auth backend is unavailable. The same flow works without a TTY: `tripo login --region ov|cn` from an agent or CI prints the verification URL + code and waits for the browser approval, so an AI agent can start the login and relay the code to its human. You never pick a region when a key is in hand: the key is probed against both regions and whichever accepts it wins; `tripo topup` then opens the matching billing page (`/billing` on ov, `/billing/recharge` on cn). If a config was moved between machines, `tripo doctor` detects the mismatch and prints the one-line fix.
 
 ## Why this CLI
 
@@ -101,6 +101,7 @@ tripo batch run assets.yaml --concurrency 2
 | `TRIPO_REGION` | `ov` or `cn` — normally unnecessary: `tripo login` probes both regions with your key and stores the right one automatically |
 | `TRIPO_API_BASE_URL` / `TRIPO_PLATFORM_BASE_URL` | endpoint overrides |
 | `TRIPO_HOME` | config/history directory (default `~/.tripo`) |
+| `HTTPS_PROXY` / `HTTP_PROXY` / `NO_PROXY` | standard proxy variables, honored for all CLI traffic (plain Node fetch ignores them) |
 | `TRIPO_LLM_BASE_URL` / `TRIPO_LLM_API_KEY` / `TRIPO_LLM_MODEL` | optional OpenAI-compatible LLM for `tripo ai` conversation mode |
 
 ## Development

package/dist/cli.js

@@ -1,7 +1,9 @@
 #!/usr/bin/env node
+import { installProxyFromEnv } from './core/proxy.js';
 import { runCli } from './program.js';
 process.on('SIGINT', () => {
     process.stderr.write('\n');
     process.exit(130);
 });
+await installProxyFromEnv();
 void runCli(process.argv);

package/dist/commands/doctor.js

@@ -67,7 +67,7 @@ export function registerDoctorCommand(program) {
                 // simply live in the other region. Probe and hand over the exact fix.
                 if (err instanceof CliError && err.exitCode === EXIT.AUTH && !process.env.TRIPO_API_BASE_URL) {
                     const detected = await detectRegionForKey(key);
-                    if (detected && detected.region !== region) {
+                    if (detected.ok && detected.region !== region) {
                         detail += ` — key belongs to region "${detected.region}"; run: tripo config set region ${detected.region}`;
                     }
                 }

package/dist/commands/login.js

@@ -11,8 +11,8 @@
 import * as p from '@clack/prompts';
 import { activeProfileName, DEFAULT_PROFILE, deleteProfile, describeKeySource, isValidProfileName, listProfiles, loadConfig, maskKey, REGION_DEFAULTS, resolveApiKey, resolvePlatformBaseUrl, resolveRegion, setActiveProfile, updateProfile, } from '../config/config.js';
 import { TripoClient } from '../core/client.js';
-import { DeviceAuthUnavailableError, requestDeviceCode, waitForDeviceApproval } from '../core/device-auth.js';
-import { AuthError, CliError, UsageError } from '../core/errors.js';
+import { DeviceAuthUnavailableError, requestDeviceCode, waitForDeviceApproval, } from '../core/device-auth.js';
+import { AuthError, CliError, NetworkError, UsageError } from '../core/errors.js';
 import { detectRegionForKey } from '../core/region.js';
 import { emitResult, isInteractive, log, shouldOpen, success, warn } from '../core/output.js';
 import { t } from '../i18n.js';
@@ -26,7 +26,7 @@ export function registerAuthCommands(program) {
         .description('sign in: browser authorizes, the key arrives automatically')
         .option('--paste', 'skip the browser flow; just paste an API key')
         .option('--key <key>', 'provide the API key directly (tsk_...); region is auto-detected')
-        .option('--region <region>', 'ov or cn — only needed for the browser flow; auto-detected once a key exists')
+        .option('--region <region>', 'ov or cn — needed for the browser flow; required for non-interactive login')
         .option('--profile <name>', 'save into a named profile (for a second account); becomes the active profile')
         .action(async (opts) => {
         await runLogin(opts);
@@ -169,10 +169,8 @@ export async function runLogin(opts) {
         return;
     }
     if (!isInteractive()) {
-        throw new UsageError(t({
-            zh: '非交互环境请用 TRIPO_API_KEY 环境变量或 tripo login --key tsk_...',
-            en: 'in non-interactive environments use the TRIPO_API_KEY env var or "tripo login --key tsk_..."',
-        }));
+        await runHeadlessLogin(region, profile, opts.paste);
+        return;
     }
     p.intro('tripo login');
     // The browser/paste flows need a console URL *before* any key exists — the
@@ -204,6 +202,77 @@ export async function runLogin(opts) {
         en: 'logged in! try: tripo make "a cute robot"',
     }));
 }
+/**
+ * Non-interactive login (agents, CI without a provisioned key): the same
+ * device flow, but with the verification URL and one-time code printed as
+ * plain text so the caller can relay them to a human, then a blocking poll
+ * until that human approves in a browser. The prompts of the interactive
+ * path are impossible here, so --region must be explicit (there is no key
+ * yet to probe, and the two regions have different console hosts) and
+ * --paste is rejected outright.
+ */
+async function runHeadlessLogin(region, profile, paste) {
+    if (paste) {
+        throw new UsageError(t({
+            zh: '--paste 需要交互终端;非交互环境请用设备码登录(tripo login --region ov|cn)或 TRIPO_API_KEY / --key',
+            en: '--paste needs an interactive terminal — use device login ("tripo login --region ov|cn"), TRIPO_API_KEY, or --key instead',
+        }));
+    }
+    if (!region) {
+        throw new UsageError(t({
+            zh: '非交互登录请指定 --region ov(海外站)或 cn(国内站),例如: tripo login --region ov;或改用 TRIPO_API_KEY / tripo login --key tsk_...',
+            en: 'non-interactive login needs an explicit --region ov (international) or cn (China mainland), e.g. "tripo login --region ov" — or use TRIPO_API_KEY / "tripo login --key tsk_..."',
+        }));
+    }
+    let grant;
+    try {
+        grant = await requestDeviceCode(region, profile === DEFAULT_PROFILE ? undefined : profile);
+    }
+    catch (err) {
+        if (err instanceof DeviceAuthUnavailableError) {
+            if (err.kind === 'unreachable') {
+                throw new CliError(t({
+                    zh: `连不上授权服务(${err.message})— 请检查本机网络/防火墙,出网走 HTTP 代理时设置 HTTPS_PROXY;或改用 TRIPO_API_KEY / tripo login --key tsk_...`,
+                    en: `cannot reach the authorization service (${err.message}) — check this machine's network/firewall (set HTTPS_PROXY when behind a proxy), or use TRIPO_API_KEY / "tripo login --key tsk_..."`,
+                }), EXIT.NETWORK);
+            }
+            // No paste fallback without a TTY — fail with every remaining option spelled out.
+            throw new CliError(t({
+                zh: `浏览器授权服务不可用(${err.message});请设置 TRIPO_API_KEY,运行 tripo login --key tsk_...,或在交互终端里运行 tripo login`,
+                en: `device authorization unavailable (${err.message}) — set TRIPO_API_KEY, run "tripo login --key tsk_...", or run "tripo login" in an interactive terminal`,
+            }), EXIT.AUTH);
+        }
+        throw err;
+    }
+    const minutes = Math.max(1, Math.round(grant.expires_in / 60));
+    log(t({
+        zh: [
+            '需要在浏览器完成授权;本命令会一直等待,直到授权完成或过期。请转告用户:',
+            `  1. 打开: ${grant.verification_url_complete}`,
+            '     (页面如果提示登录,先登录或注册 Tripo 账号 — 新账号有免费额度)',
+            `  2. 在「Verification code」输入框填入终端码: ${grant.user_code}`,
+            '  3. 账号已有多把 API Key 时页面会让用户选择一把;一把没有则自动创建',
+            `  4. 点击「Authorize」。此码 ${minutes} 分钟内有效`,
+        ].join('\n'),
+        en: [
+            'Authorization happens in a browser; this command keeps waiting until approved or expired. Relay these steps:',
+            `  1. Open: ${grant.verification_url_complete}`,
+            '     (if the page asks to sign in, sign in or sign up first — new accounts get free credits)',
+            `  2. Enter this one-time code in the "Verification code" field: ${grant.user_code}`,
+            '  3. An account with several API keys is asked to pick one; with none, a key is created automatically',
+            `  4. Click "Authorize". The code expires in ${minutes} minutes`,
+        ].join('\n'),
+    }));
+    const result = await waitForDeviceApproval(region, grant);
+    if (result.status === 'denied') {
+        throw new CliError(t({ zh: '授权被拒绝;重新运行 tripo login 再试', en: 'authorization denied — run "tripo login" again to retry' }), EXIT.AUTH);
+    }
+    if (result.status !== 'approved') {
+        throw new CliError(t({ zh: '授权超时或已过期;重新运行 tripo login 获取新的终端码', en: 'authorization expired — run "tripo login" again for a fresh code' }), EXIT.AUTH);
+    }
+    const saved = await validateAndSave(result.apikey, region, profile);
+    emitResult({ status: 'logged_in', profile, region: saved.region, key: maskKey(result.apikey), balance: saved.balance }, t({ zh: `登录完成(profile=${profile}, region=${saved.region})`, en: `logged in (profile=${profile}, region=${saved.region})` }));
+}
 /**
  * Preferred path: RFC 8628 device flow — the browser does the sign-in and a
  * one-click approve, the key arrives over the CLI↔console-API channel, and
@@ -228,6 +297,14 @@ async function deviceFlowWithFallback(region, profile) {
                     en: `device authorization backend error (${err.message}) — please report this; falling back to paste login`,
                 }));
             }
+            else if (err.kind === 'unreachable') {
+                // The console API could not be reached at all — the same network
+                // problem will likely hit key validation next, so say it loudly now.
+                warn(t({
+                    zh: `连不上授权服务(${err.message})— 疑似网络/代理问题(出网走 HTTP 代理时请设置 HTTPS_PROXY);已改用粘贴方式登录`,
+                    en: `cannot reach the authorization service (${err.message}) — likely a network/proxy issue (set HTTPS_PROXY if this machine needs a proxy); falling back to paste login`,
+                }));
+            }
             else {
                 log(t({ zh: '浏览器授权服务暂未开通,改用粘贴方式登录', en: 'device authorization not available yet — falling back to paste login' }));
             }
@@ -312,7 +389,10 @@ function safeTimeZone() {
  * email-first; cn: +86 SMS-first) live entirely on the website either way.
  */
 async function keyFromConsole(region, openBrowser) {
-    const keysUrl = `${platformUrlFor(region)}/keys`;
+    // The console SPA nests every page under a locale segment (/:lang/keys);
+    // a bare /keys is swallowed by the ":lang" route and lands on the home
+    // page. Both regions' backends use /en in their canonical URLs.
+    const keysUrl = `${platformUrlFor(region)}/en/keys`;
     if (openBrowser && shouldOpen()) {
         openExternal(keysUrl);
         log(t({ zh: `已打开控制台 API Keys 页面(未弹出请手动访问):\n  ${keysUrl}`, en: `opened the console API Keys page (visit manually if it didn't open):\n  ${keysUrl}` }));
@@ -357,19 +437,17 @@ async function validateAndSave(key, selectedRegion, profile) {
         const client = new TripoClient({ apiKey: key });
         try {
             const balance = await client.getBalance();
-            finishSave(key, selectedRegion ?? 'ov', balance.balance, profile);
+            const region = selectedRegion ?? 'ov';
+            finishSave(key, region, balance.balance, profile);
+            return { region, balance: balance.balance };
         }
         catch (err) {
             throw asAuthError(err);
         }
-        return;
     }
     const detected = await detectRegionForKey(key);
-    if (!detected) {
-        throw new AuthError(t({
-            zh: 'Key 验证失败:国内(openapi.tripo3d.com)和海外(openapi.tripo3d.ai)都不接受这把 Key — 无效或已被删除',
-            en: 'key validation failed: rejected by both cn (openapi.tripo3d.com) and ov (openapi.tripo3d.ai) — invalid or deleted',
-        }));
+    if (!detected.ok) {
+        throw regionDetectionFailure(detected.failures);
     }
     if (selectedRegion && selectedRegion !== detected.region) {
         warn(t({
@@ -378,6 +456,39 @@ async function validateAndSave(key, selectedRegion, profile) {
         }));
     }
     finishSave(key, detected.region, detected.balance.balance, profile);
+    return { region: detected.region, balance: detected.balance.balance };
+}
+const REGION_HOSTS = { ov: 'openapi.tripo3d.ai', cn: 'openapi.tripo3d.com' };
+/**
+ * Turn the per-region probe failures into an honest error. "Invalid or
+ * deleted" is only ever claimed when both regions *answered* and rejected
+ * the key; any unreachable side turns the verdict into a network problem —
+ * the classic case being a firewalled/proxy-only server where a perfectly
+ * good key used to be reported as dead.
+ */
+function regionDetectionFailure(failures) {
+    if (failures.ov === 'rejected' && failures.cn === 'rejected') {
+        return new AuthError(t({
+            zh: 'Key 验证失败:国内(openapi.tripo3d.com)和海外(openapi.tripo3d.ai)都不接受这把 Key — 无效或已被删除',
+            en: 'key validation failed: rejected by both cn (openapi.tripo3d.com) and ov (openapi.tripo3d.ai) — invalid or deleted',
+        }));
+    }
+    const networkHint = t({
+        zh: '检查本机网络/防火墙;出网需要 HTTP 代理时,设置 HTTPS_PROXY 环境变量后重试;tripo doctor 可自检',
+        en: 'check this machine\'s network/firewall; if outbound traffic needs an HTTP proxy, set HTTPS_PROXY and retry; "tripo doctor" helps diagnose',
+    });
+    if (failures.ov === 'unreachable' && failures.cn === 'unreachable') {
+        return new NetworkError(t({
+            zh: '无法验证 Key:海外(openapi.tripo3d.ai)和国内(openapi.tripo3d.com)都连接失败 — 这是网络问题,不代表 Key 无效',
+            en: 'could not validate the key: both ov (openapi.tripo3d.ai) and cn (openapi.tripo3d.com) are unreachable — a network problem, not proof of a bad key',
+        }), networkHint);
+    }
+    const down = failures.ov === 'unreachable' ? 'ov' : 'cn';
+    const up = down === 'ov' ? 'cn' : 'ov';
+    return new NetworkError(t({
+        zh: `Key 验证失败:${up === 'cn' ? '国内' : '海外'}站(${REGION_HOSTS[up]})拒绝了这把 Key,而${down === 'cn' ? '国内' : '海外'}站(${REGION_HOSTS[down]})无法连接 — 如果 Key 属于${down === 'cn' ? '国内' : '海外'}站,请先解决网络问题`,
+        en: `key validation failed: ${up} (${REGION_HOSTS[up]}) rejected the key and ${down} (${REGION_HOSTS[down]}) is unreachable — if the key belongs to ${down}, fix the network first`,
+    }), networkHint);
 }
 function finishSave(key, region, balance, profile) {
     // Saving activates the profile: "the account I just logged into is the

package/dist/core/device-auth.js

@@ -19,11 +19,14 @@ export const DEVICE_CODE_DENIED = 4292;
 const REQUEST_TIMEOUT_MS = 15_000;
 /**
  * Thrown when the device-auth endpoints are missing or unusable — callers
- * fall back to paste. `kind` separates the two very different situations:
+ * fall back to paste. `kind` separates three very different situations:
  * 'not_deployed' (404 — feature flag off, a normal rollout state, fall back
- * quietly) vs 'backend_error' (5xx — the feature is deployed but broken;
- * fall back too, but surface the backend's message + request_id loudly so
- * the failure is reportable instead of silently masked).
+ * quietly), 'backend_error' (5xx — the feature is deployed but broken; fall
+ * back too, but surface the backend's message + request_id loudly so the
+ * failure is reportable instead of silently masked), and 'unreachable'
+ * (fetch itself failed — firewall/DNS/proxy; the same network problem will
+ * hit key validation next, so callers must warn about the network, not
+ * pretend the feature simply is not rolled out yet).
  */
 export class DeviceAuthUnavailableError extends Error {
     kind;
@@ -149,7 +152,7 @@ async function post(url, payload) {
         });
     }
     catch {
-        throw new DeviceAuthUnavailableError('not_deployed', `cannot reach ${url}`);
+        throw new DeviceAuthUnavailableError('unreachable', `cannot reach ${url}`);
     }
     if (response.status === 404 || response.status === 405) {
         throw new DeviceAuthUnavailableError('not_deployed', 'device auth endpoints not deployed');

package/dist/core/errors.js

@@ -39,8 +39,8 @@ export class ApiError extends CliError {
     }
 }
 export class NetworkError extends CliError {
-    constructor(message) {
-        super(message, EXIT.NETWORK);
+    constructor(message, suggestion) {
+        super(message, EXIT.NETWORK, suggestion);
     }
 }
 export class TaskFailedError extends CliError {

package/dist/core/proxy.js

@@ -0,0 +1,30 @@
+/**
+ * Node's built-in fetch (undici) ignores the HTTP_PROXY / HTTPS_PROXY /
+ * NO_PROXY environment variables, so on proxy-only networks (a common
+ * server setup) every CLI request fails with a network error while curl on
+ * the same machine works fine. When a proxy is configured in the
+ * environment, swap global fetch for undici's, driven by an
+ * EnvHttpProxyAgent — it routes through HTTP(S)_PROXY and honors NO_PROXY
+ * exclusions. Without proxy env vars this is a no-op, so the zero-config
+ * path stays on the built-in fetch.
+ */
+export async function installProxyFromEnv() {
+    const { env } = process;
+    if (!(env.HTTPS_PROXY || env.https_proxy || env.HTTP_PROXY || env.http_proxy))
+        return false;
+    // Imported lazily so undici only loads when a proxy is actually configured.
+    const { EnvHttpProxyAgent, fetch: undiciFetch } = await import('undici');
+    // The constructor emits an "EnvHttpProxyAgent is experimental" warning on
+    // stderr — noise on every command for proxy users; swallow just that.
+    const emitWarning = process.emitWarning;
+    process.emitWarning = () => { };
+    let dispatcher;
+    try {
+        dispatcher = new EnvHttpProxyAgent();
+    }
+    finally {
+        process.emitWarning = emitWarning;
+    }
+    globalThis.fetch = ((input, init) => undiciFetch(input, { ...init, dispatcher }));
+    return true;
+}

package/dist/core/region.js

@@ -2,10 +2,15 @@
  * Region auto-detection: a Tripo API key is valid in exactly one region
  * (ov = openapi.tripo3d.ai, cn = openapi.tripo3d.com), so instead of asking
  * the user "which region?" we probe both with the key and let the facts
- * decide. First successful probe wins; both failing means the key is dead.
+ * decide. First successful probe wins. When neither succeeds, the failure
+ * kind is reported per region: only an explicit auth rejection from a
+ * server that answered proves anything about the key — an unreachable host
+ * (firewall, DNS, missing proxy) must never be blamed on the key.
  */
 import { REGION_DEFAULTS } from '../config/config.js';
 import { TripoClient } from './client.js';
+import { CliError } from './errors.js';
+import { EXIT } from '../knowledge/error-catalog.js';
 const PROBE_TIMEOUT_MS = 12_000;
 export function defaultProbeBases() {
     return { ov: REGION_DEFAULTS.ov.api, cn: REGION_DEFAULTS.cn.api };
@@ -14,7 +19,6 @@ export function defaultProbeBases() {
  * Probe both regions concurrently; resolve as soon as one accepts the key
  * (the other side may be slow/unreachable from this network — e.g. the
  * overseas host from mainland China — and must not delay the answer).
- * Returns undefined when both regions reject or are unreachable.
  */
 export async function detectRegionForKey(key, bases = defaultProbeBases()) {
     const probe = async (region) => {
@@ -27,18 +31,25 @@ export async function detectRegionForKey(key, bases = defaultProbeBases()) {
             });
             return { region, balance: await client.getBalance() };
         }
-        catch {
-            return undefined;
+        catch (err) {
+            // Only an authentication error is a verdict on the key; everything
+            // else (NetworkError, 5xx, malformed response) means "no answer".
+            return err instanceof CliError && err.exitCode === EXIT.AUTH ? 'rejected' : 'unreachable';
         }
     };
     return new Promise((resolve) => {
+        const failures = {};
         let pending = 2;
         for (const region of ['ov', 'cn']) {
-            void probe(region).then((hit) => {
-                if (hit)
-                    resolve(hit);
-                else if (--pending === 0)
-                    resolve(undefined);
+            void probe(region).then((outcome) => {
+                if (typeof outcome === 'string') {
+                    failures[region] = outcome;
+                    if (--pending === 0)
+                        resolve({ ok: false, failures });
+                }
+                else {
+                    resolve({ ok: true, ...outcome });
+                }
             });
         }
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tripo-cli",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Tripo 3D intelligent CLI — turn a prompt or an image into engine-ready 3D assets from your terminal (Tripo V3 API)",
   "keywords": [
     "tripo",
@@ -48,6 +48,7 @@
     "@clack/prompts": "^1.7.0",
     "commander": "^15.0.0",
     "picocolors": "^1.1.1",
+    "undici": "^6.28.0",
     "yaml": "^2.9.0"
   },
   "devDependencies": {

package/skill/SKILL.md

@@ -11,7 +11,19 @@ export TRIPO_API_KEY=tsk_...    # highest-priority auth; no interaction needed
 tripo doctor                    # verify key, network, balance
 ```
 
-If there is no key, ask the human to run `tripo login` or to provide `TRIPO_API_KEY`.
+If there is no key, run the device login **yourself** — it works without a TTY:
+
+```bash
+tripo login --region ov      # ov = international, cn = China mainland
+```
+
+It prints a verification URL and a one-time code, then blocks until the human
+approves in a browser (up to ~15 minutes — do not kill it early). Relay the URL
+and code to the human and tell them: sign in on that page first if it asks
+(sign-up gives free credits), enter the code, pick an API key if the account has
+several (one is created automatically if there are none), click Authorize. The
+key is then saved locally; never ask the human to paste a key into the chat. If
+the code expires (exit 3), just run the same command again.
 
 Regions (ov = international, cn = China mainland) share one CLI: `tripo login --key tsk_...` auto-detects which region the key belongs to. On exit code 3 (auth), run `tripo doctor` — it diagnoses key-vs-region mismatches and prints the exact fix (`tripo config set region cn|ov`).
 

package/skill/commands/account.md

@@ -3,8 +3,11 @@
 ## Auth
 
 ```bash
-export TRIPO_API_KEY=tsk_...     # best for agents/CI — zero interaction, bypasses profiles
-tripo login                      # humans: browser flow (or --paste / --key tsk_...)
+export TRIPO_API_KEY=tsk_...     # zero interaction when a key is already provisioned
+tripo login                      # humans in a terminal: interactive browser flow
+tripo login --region ov|cn       # agents/CI without a key: headless device flow — prints a
+                                 # verification URL + one-time code on stderr, waits for the
+                                 # human to authorize in a browser (≤15 min), saves the key
 tripo login --key tsk_... --region ov|cn
 tripo whoami                     # masked key + active profile + region + balance
 tripo logout                     # removes the local key of the active profile only