xgen-dex-cli 1.2.1 → 1.3.0

package/dist/chunks/{chunk-QXSCKZEG.js → chunk-ULMEXJOR.js}

@@ -361,15 +361,26 @@ function validateProfileName(input) {
   return name;
 }
 function validateServerUrl(input) {
+  const raw = input.trim();
+  if (!raw) {
+    throw new DexError("config_invalid", "\uC11C\uBC84 \uC8FC\uC18C\uB97C \uC785\uB825\uD558\uC138\uC694.");
+  }
+  const hasScheme = /^[a-zA-Z][a-zA-Z0-9+.-]*:\/\//.test(raw);
+  const bare = raw.replace(/^\/+/, "");
+  const local = /^(localhost|127\.0\.0\.1|\[?::1\]?)(:|$|\/)/i.test(bare);
+  const candidate = hasScheme ? raw : `${local ? "http" : "https"}://${bare}`;
   let url;
   try {
-    url = new URL(input.trim());
+    url = new URL(candidate);
   } catch {
-    throw new DexError("config_invalid", "\uC11C\uBC84 URL\uC740 http:// \uB610\uB294 https://\uB85C \uC2DC\uC791\uD574\uC57C \uD569\uB2C8\uB2E4.");
+    throw new DexError("config_invalid", "\uC11C\uBC84 \uC8FC\uC18C\uB97C \uC54C\uC544\uBCFC \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. \uC608: xgen.example.com");
   }
   if (url.protocol !== "http:" && url.protocol !== "https:") {
     throw new DexError("config_invalid", "\uC11C\uBC84 URL\uC740 http:// \uB610\uB294 https://\uB9CC \uC0AC\uC6A9\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4.");
   }
+  if (!url.hostname) {
+    throw new DexError("config_invalid", "\uC11C\uBC84 \uC8FC\uC18C\uC5D0 \uD638\uC2A4\uD2B8\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4. \uC608: xgen.example.com");
+  }
   if (url.username || url.password || url.search || url.hash) {
     throw new DexError("config_invalid", "\uC11C\uBC84 URL\uC5D0\uB294 \uC790\uACA9 \uC99D\uBA85, query, fragment\uB97C \uB123\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.");
   }
@@ -4437,22 +4448,104 @@ var DexEngine = class {
 };
 
 // ../../packages/engine/src/credential-store.ts
+import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
+import { dirname as dirname3, join as join3 } from "node:path";
 var SERVICE = "xgen-dex-cli";
 var ACCOUNT_PREFIX = "profile:";
+var activeBackend = "file";
+function credentialBackend() {
+  return activeBackend;
+}
+var keytarProbe = null;
+var KEYCHAIN_TIMEOUT_MS = 2e3;
+async function withTimeout2(work) {
+  let timer;
+  try {
+    return await Promise.race([
+      work,
+      new Promise((_, reject) => {
+        timer = setTimeout(() => reject(new Error("keychain timeout")), KEYCHAIN_TIMEOUT_MS);
+        timer.unref?.();
+      })
+    ]);
+  } finally {
+    if (timer) clearTimeout(timer);
+  }
+}
 async function loadKeytar() {
+  keytarProbe ??= (async () => {
+    if (process.env.DEX_NO_KEYCHAIN === "1") return null;
+    try {
+      const loaded = await import("keytar");
+      const keytar2 = loaded.default ?? loaded;
+      if (!keytar2.getPassword || !keytar2.setPassword || !keytar2.deletePassword) return null;
+      await withTimeout2(keytar2.getPassword(SERVICE, "__probe__"));
+      return keytar2;
+    } catch {
+      return null;
+    }
+  })();
+  const keytar = await keytarProbe;
+  activeBackend = keytar ? "keychain" : "file";
+  return keytar;
+}
+function filePath() {
+  return join3(dataDirectory(), "credentials.json");
+}
+function readFileStore() {
   try {
-    const loaded = await import("keytar");
-    const keytar = loaded.default ?? loaded;
-    if (!keytar.getPassword || !keytar.setPassword || !keytar.deletePassword) throw new Error("invalid keytar module");
-    return keytar;
-  } catch (error) {
-    throw new DexError(
-      "credential_store_unavailable",
-      "OS \uD0A4\uCCB4\uC778\uC744 \uC0AC\uC6A9\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. keytar \uC124\uCE58\uC640 OS \uD0A4\uB9C1 \uC0C1\uD0DC\uB97C \uD655\uC778\uD558\uC138\uC694.",
-      error
-    );
+    const raw = readFileSync(filePath(), "utf8");
+    const parsed = JSON.parse(raw);
+    return parsed && typeof parsed === "object" ? parsed : {};
+  } catch {
+    return {};
   }
 }
+function writeFileStore(values) {
+  const path = filePath();
+  mkdirSync(dirname3(path), { recursive: true });
+  const tmp = `${path}.tmp`;
+  writeFileSync(tmp, JSON.stringify(values, null, 2), { encoding: "utf8", mode: 384 });
+  try {
+    chmodSync(tmp, 384);
+  } catch {
+  }
+  renameSync(tmp, path);
+}
+async function secretGet(account) {
+  const keytar = await loadKeytar();
+  if (keytar) {
+    try {
+      return await withTimeout2(keytar.getPassword(SERVICE, account));
+    } catch {
+    }
+  }
+  return readFileStore()[account] ?? null;
+}
+async function secretSet(account, value) {
+  const keytar = await loadKeytar();
+  if (keytar) {
+    try {
+      if (value === null) await withTimeout2(keytar.deletePassword(SERVICE, account));
+      else await withTimeout2(keytar.setPassword(SERVICE, account, value));
+      return;
+    } catch {
+      activeBackend = "file";
+    }
+  }
+  const values = readFileStore();
+  if (value === null) delete values[account];
+  else values[account] = value;
+  if (Object.keys(values).length === 0 && existsSync(filePath())) {
+    try {
+      unlinkSync(filePath());
+    } catch {
+      writeFileStore(values);
+    }
+    return;
+  }
+  writeFileStore(values);
+}
 function parseSession(raw) {
   if (!raw) return null;
   try {
@@ -4463,7 +4556,7 @@ function parseSession(raw) {
     return null;
   }
 }
-var KeytarCredentialStore = class {
+var SystemCredentialStore = class {
   /**
    * 엔진의 `SecretPort` 로 내보내는 두 함수 — 프로파일 세션 말고 **임의의 비밀**
    * (MCP 서버 시크릿 · OAuth 상태)을 같은 백엔드에 둔다.
@@ -4472,29 +4565,20 @@ var KeytarCredentialStore = class {
    * 하나의 질문이고, 두 곳에 나뉘면 로그아웃할 때 한쪽이 남는다.
    */
   async getRaw(name) {
-    const keytar = await loadKeytar();
-    return keytar.getPassword(SERVICE, name);
+    return secretGet(name);
   }
   async setRaw(name, value) {
-    const keytar = await loadKeytar();
-    if (value === null) {
-      await keytar.deletePassword(SERVICE, name);
-      return true;
-    }
-    await keytar.setPassword(SERVICE, name, value);
+    await secretSet(name, value);
     return true;
   }
   async get(profile) {
-    const keytar = await loadKeytar();
-    return parseSession(await keytar.getPassword(SERVICE, ACCOUNT_PREFIX + profile));
+    return parseSession(await secretGet(ACCOUNT_PREFIX + profile));
   }
   async set(profile, session) {
-    const keytar = await loadKeytar();
-    await keytar.setPassword(SERVICE, ACCOUNT_PREFIX + profile, JSON.stringify(session));
+    await secretSet(ACCOUNT_PREFIX + profile, JSON.stringify(session));
   }
   async delete(profile) {
-    const keytar = await loadKeytar();
-    await keytar.deletePassword(SERVICE, ACCOUNT_PREFIX + profile);
+    await secretSet(ACCOUNT_PREFIX + profile, null);
   }
 };
 
@@ -4555,6 +4639,7 @@ export {
   dataDirectory,
   FileConfigStore,
   DexEngine,
-  KeytarCredentialStore
+  credentialBackend,
+  SystemCredentialStore
 };
-//# sourceMappingURL=chunk-QXSCKZEG.js.map
+//# sourceMappingURL=chunk-ULMEXJOR.js.map