@ankimcp/anki-mcp-server 0.18.5 → 0.19.0

package/dist/tunnel/commands/tunnel.command.js

@@ -0,0 +1,225 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deriveDashboardUrl = deriveDashboardUrl;
+exports.handleTunnel = handleTunnel;
+const core_1 = require("@nestjs/core");
+const common_1 = require("@nestjs/common");
+const app_module_1 = require("../../app.module");
+const tunnel_1 = require("..");
+const tunnel_mcp_service_1 = require("../tunnel-mcp.service");
+const app_config_service_1 = require("../../app-config.service");
+const config_1 = require("../../config");
+const spinner_1 = require("../../cli/spinner");
+const bootstrap_1 = require("../../bootstrap");
+const perform_login_1 = require("./perform-login");
+function displayBox(cli, title, url) {
+    cli.box(title, url);
+}
+function deriveDashboardUrl(tunnelUrl) {
+    const url = new URL(tunnelUrl);
+    url.hostname = url.hostname.replace(/^tunnel\./, "web.");
+    return url.origin;
+}
+function formatConnectionError(error, tunnelUrl) {
+    if (error instanceof tunnel_1.TunnelClientError && error.originalError) {
+        const origError = error.originalError;
+        if (origError.code === "ECONNREFUSED") {
+            return `Cannot connect to tunnel server at ${tunnelUrl}
+   Make sure the tunnel server is running.`;
+        }
+    }
+    if (error instanceof Error) {
+        if (error.message.includes("ECONNREFUSED") ||
+            error.message.includes("connect ECONNREFUSED")) {
+            return `Cannot connect to tunnel server at ${tunnelUrl}
+   Make sure the tunnel server is running.`;
+        }
+        if (error.message.includes("timeout") ||
+            error.message.includes("Connection timeout")) {
+            return `Connection timeout to ${tunnelUrl}
+   The tunnel server may be unavailable or slow to respond.`;
+        }
+        if (error.message.includes("Unauthorized") ||
+            error.message.includes("401")) {
+            return `Authentication failed
+   Your credentials may be invalid. Try: ankimcp --logout && ankimcp --login`;
+        }
+    }
+    const message = error instanceof Error ? error.message : String(error);
+    return `Failed to connect: ${message}`;
+}
+async function ensureCredentials(cli, credentialsService, deviceFlowService) {
+    const existing = await credentialsService.loadCredentials();
+    if (existing) {
+        return existing;
+    }
+    if (!process.stdout.isTTY) {
+        cli.error("Not logged in and running non-interactively. Run: ankimcp --login first.");
+        process.exit(1);
+    }
+    cli.info("Not logged in — starting authentication flow...");
+    cli.blank();
+    try {
+        const credentials = await (0, perform_login_1.performLogin)({
+            credentialsService,
+            deviceFlowService,
+            cli,
+        });
+        cli.info("Continuing to tunnel...");
+        cli.blank();
+        return credentials;
+    }
+    catch (error) {
+        cli.blank();
+        if (error instanceof tunnel_1.DeviceFlowError) {
+            cli.error((0, perform_login_1.translateDeviceFlowError)(error));
+        }
+        else {
+            cli.error(`Login failed: ${error instanceof Error ? error.message : String(error)}`, error instanceof Error ? error : undefined);
+        }
+        cli.blank();
+        process.exit(1);
+    }
+}
+async function handleTunnel(cli, tunnelUrl, debug, readOnly) {
+    const credentialsService = new tunnel_1.CredentialsService();
+    const validatedConfig = (0, config_1.loadValidatedConfig)({
+        debug,
+        readOnly,
+        tunnel: tunnelUrl,
+    });
+    const appConfigService = new app_config_service_1.AppConfigService(validatedConfig);
+    const deviceFlowService = new tunnel_1.DeviceFlowService(appConfigService);
+    let app;
+    let tunnelClient;
+    let shuttingDown = false;
+    const gracefulExit = async (code, message) => {
+        if (shuttingDown) {
+            process.exit(code);
+        }
+        shuttingDown = true;
+        try {
+            if (message) {
+                cli.info(message);
+            }
+            tunnelClient?.disconnect();
+            if (app) {
+                await app.close();
+            }
+        }
+        catch (err) {
+            cli.error(`Cleanup error: ${err instanceof Error ? err.message : String(err)}`);
+        }
+        process.exit(code);
+    };
+    cli.blank();
+    try {
+        const credentials = await ensureCredentials(cli, credentialsService, deviceFlowService);
+        const stopSpinner = (0, spinner_1.startSpinner)("Starting MCP service...");
+        let tunnelMcpService;
+        const logLevel = debug ? "debug" : "info";
+        const pinoLogger = (0, bootstrap_1.createPinoLogger)(bootstrap_1.LOG_DESTINATION.STDERR, logLevel);
+        const loggerService = (0, bootstrap_1.createLoggerService)(pinoLogger);
+        if (debug) {
+            common_1.Logger.overrideLogger(["log", "error", "warn", "debug", "verbose"]);
+        }
+        common_1.Logger.overrideLogger(loggerService);
+        try {
+            app = await core_1.NestFactory.createApplicationContext(app_module_1.AppModule.forTunnel({ debug, readOnly }), {
+                logger: loggerService,
+            });
+            tunnelMcpService = app.get(tunnel_mcp_service_1.TunnelMcpService);
+            stopSpinner();
+            cli.success("MCP service ready");
+        }
+        catch (error) {
+            stopSpinner();
+            cli.error(`Failed to start MCP service: ${error instanceof Error ? error.message : String(error)}`, error instanceof Error ? error : undefined);
+            cli.blank();
+            return await gracefulExit(1);
+        }
+        cli.blank();
+        const mcpHandler = {
+            async handle(request) {
+                const responseBody = await tunnelMcpService.handleRequest(request.body);
+                return {
+                    status: 200,
+                    headers: { "content-type": "application/json" },
+                    body: responseBody,
+                };
+            },
+        };
+        const effectiveTunnelUrl = tunnelUrl ?? validatedConfig.tunnel.serverUrl;
+        tunnelClient = new tunnel_1.TunnelClient(mcpHandler, credentialsService, deviceFlowService, effectiveTunnelUrl);
+        tunnelClient.on("error", (error) => {
+            if (error instanceof tunnel_1.TunnelClientError &&
+                error.code === "session_expired") {
+                cli.blank();
+                cli.error(error.message);
+                void gracefulExit(1);
+                return;
+            }
+            if (tunnelClient?.isConnected()) {
+                cli.error(`Tunnel error: ${error.message}`, error);
+            }
+        });
+        const connectSpinner = (0, spinner_1.startSpinner)("Connecting to tunnel service...");
+        let publicUrl;
+        try {
+            publicUrl = await tunnelClient.connect(credentials);
+            connectSpinner();
+            cli.success("Tunnel established");
+            cli.blank();
+        }
+        catch (error) {
+            connectSpinner();
+            if (error instanceof tunnel_1.TunnelClientError &&
+                error.code === "session_expired") {
+                cli.blank();
+                cli.error(error.message);
+                return await gracefulExit(1);
+            }
+            const errorMessage = formatConnectionError(error, effectiveTunnelUrl);
+            cli.error(errorMessage, error instanceof Error ? error : undefined);
+            cli.blank();
+            return await gracefulExit(1);
+        }
+        displayBox(cli, "🚇 Tunnel URL", publicUrl);
+        cli.blank();
+        displayBox(cli, "🌐 Dashboard", deriveDashboardUrl(publicUrl));
+        cli.blank();
+        cli.info("Tunnel is active. Press Ctrl+C to disconnect.");
+        cli.blank();
+        const logger = new common_1.Logger("TunnelCommand");
+        tunnelClient.on("request", (requestId, request) => {
+            logger.log(`Request ${requestId}: ${request.method} ${request.path}`);
+        });
+        tunnelClient.on("url_changed", (oldUrl, newUrl) => {
+            cli.blank();
+            cli.info(`🔄 Tunnel URL changed:`);
+            cli.info(`   Old: ${oldUrl}`);
+            cli.info(`   New: ${newUrl}`);
+            cli.blank();
+        });
+        tunnelClient.on("disconnected", (code, reason) => {
+            cli.blank();
+            cli.error(`Tunnel disconnected (code ${code}): ${reason}`);
+            cli.blank();
+        });
+        process.on("SIGINT", () => {
+            cli.blank();
+            void gracefulExit(0, "Shutting down...");
+        });
+        process.on("SIGTERM", () => {
+            cli.blank();
+            void gracefulExit(0, "Shutting down...");
+        });
+        await new Promise(() => { });
+    }
+    catch (error) {
+        cli.error(`Tunnel failed: ${error instanceof Error ? error.message : String(error)}`, error instanceof Error ? error : undefined);
+        cli.blank();
+        await gracefulExit(1);
+    }
+}
+//# sourceMappingURL=tunnel.command.js.map

package/dist/tunnel/commands/tunnel.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel.command.js","sourceRoot":"","sources":["../../../src/tunnel/commands/tunnel.command.ts"],"names":[],"mappings":";;AAgDA,gDAIC;AA4ID,oCA6PC;AA7bD,uCAA2C;AAC3C,2CAAsE;AACtE,iDAAyC;AACzC,+BAQkB;AAClB,8DAA+D;AAC/D,iEAAwD;AACxD,yCAA+C;AAE/C,+CAA6C;AAC7C,+CAIqB;AACrB,mDAAyE;AAKzE,SAAS,UAAU,CAAC,GAAQ,EAAE,KAAa,EAAE,GAAW;IACtD,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACtB,CAAC;AAmBD,SAAgB,kBAAkB,CAAC,SAAiB;IAClD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAC/B,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACzD,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AASD,SAAS,qBAAqB,CAAC,KAAc,EAAE,SAAiB;IAE9D,IAAI,KAAK,YAAY,0BAAiB,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QAC9D,MAAM,SAAS,GAAG,KAAK,CAAC,aAAkC,CAAC;QAC3D,IAAI,SAAS,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACtC,OAAO,sCAAsC,SAAS;2CACjB,CAAC;QACxC,CAAC;IACH,CAAC;IAGD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,IACE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;YACtC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAC9C,CAAC;YACD,OAAO,sCAAsC,SAAS;2CACjB,CAAC;QACxC,CAAC;QAGD,IACE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;YACjC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAC5C,CAAC;YACD,OAAO,yBAAyB,SAAS;4DACa,CAAC;QACzD,CAAC;QAGD,IACE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;YACtC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAC7B,CAAC;YACD,OAAO;6EACgE,CAAC;QAC1E,CAAC;IACH,CAAC;IAGD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,sBAAsB,OAAO,EAAE,CAAC;AACzC,CAAC;AAeD,KAAK,UAAU,iBAAiB,CAC9B,GAAQ,EACR,kBAAsC,EACtC,iBAAoC;IAEpC,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,eAAe,EAAE,CAAC;IAC5D,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAOD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC1B,GAAG,CAAC,KAAK,CACP,0EAA0E,CAC3E,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IAC5D,GAAG,CAAC,KAAK,EAAE,CAAC;IAEZ,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,IAAA,4BAAY,EAAC;YACrC,kBAAkB;YAClB,iBAAiB;YACjB,GAAG;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACpC,GAAG,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,WAAW,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,KAAK,EAAE,CAAC;QAEZ,IAAI,KAAK,YAAY,wBAAe,EAAE,CAAC;YACrC,GAAG,CAAC,KAAK,CAAC,IAAA,wCAAwB,EAAC,KAAK,CAAC,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,KAAK,CACP,iBAAiB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACzE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC3C,CAAC;QACJ,CAAC;QAED,GAAG,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAyBM,KAAK,UAAU,YAAY,CAChC,GAAQ,EACR,SAAkB,EAClB,KAAe,EACf,QAAkB;IAElB,MAAM,kBAAkB,GAAG,IAAI,2BAAkB,EAAE,CAAC;IAGpD,MAAM,eAAe,GAAG,IAAA,4BAAmB,EAAC;QAC1C,KAAK;QACL,QAAQ;QACR,MAAM,EAAE,SAAS;KAClB,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,IAAI,qCAAgB,CAAC,eAAe,CAAC,CAAC;IAC/D,MAAM,iBAAiB,GAAG,IAAI,0BAAiB,CAAC,gBAAgB,CAAC,CAAC;IAKlE,IAAI,GAAwC,CAAC;IAC7C,IAAI,YAAsC,CAAC;IAI3C,IAAI,YAAY,GAAG,KAAK,CAAC;IAWzB,MAAM,YAAY,GAAG,KAAK,EACxB,IAAY,EACZ,OAAgB,EACA,EAAE;QAClB,IAAI,YAAY,EAAE,CAAC;YAGjB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QACD,YAAY,GAAG,IAAI,CAAC;QAEpB,IAAI,CAAC;YACH,IAAI,OAAO,EAAE,CAAC;gBACZ,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpB,CAAC;YACD,YAAY,EAAE,UAAU,EAAE,CAAC;YAC3B,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;YACpB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CACP,kBAAkB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACrE,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC;IAEF,GAAG,CAAC,KAAK,EAAE,CAAC;IAEZ,IAAI,CAAC;QAKH,MAAM,WAAW,GAAG,MAAM,iBAAiB,CACzC,GAAG,EACH,kBAAkB,EAClB,iBAAiB,CAClB,CAAC;QAGF,MAAM,WAAW,GAAG,IAAA,sBAAY,EAAC,yBAAyB,CAAC,CAAC;QAC5D,IAAI,gBAAkC,CAAC;QAGvC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1C,MAAM,UAAU,GAAG,IAAA,4BAAgB,EAAC,2BAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACtE,MAAM,aAAa,GAAG,IAAA,+BAAmB,EAAC,UAAU,CAAC,CAAC;QAKtD,IAAI,KAAK,EAAE,CAAC;YACV,eAAM,CAAC,cAAc,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;QACtE,CAAC;QACD,eAAM,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;QAErC,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,kBAAW,CAAC,wBAAwB,CAC9C,sBAAS,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EACxC;gBACE,MAAM,EAAE,aAAa;aACtB,CACF,CAAC;YACF,gBAAgB,GAAG,GAAG,CAAC,GAAG,CAAC,qCAAgB,CAAC,CAAC;YAC7C,WAAW,EAAE,CAAC;YACd,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,EAAE,CAAC;YACd,GAAG,CAAC,KAAK,CACP,gCAAgC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACxF,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC3C,CAAC;YACF,GAAG,CAAC,KAAK,EAAE,CAAC;YAEZ,OAAO,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;QAED,GAAG,CAAC,KAAK,EAAE,CAAC;QAGZ,MAAM,UAAU,GAAsB;YACpC,KAAK,CAAC,MAAM,CAAC,OAAO;gBAClB,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACxE,OAAO;oBACL,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI,EAAE,YAAY;iBACnB,CAAC;YACJ,CAAC;SACF,CAAC;QAMF,MAAM,kBAAkB,GAAG,SAAS,IAAI,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC;QAEzE,YAAY,GAAG,IAAI,qBAAY,CAC7B,UAAU,EACV,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,CACnB,CAAC;QAIF,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;YAExC,IACE,KAAK,YAAY,0BAAiB;gBAClC,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAChC,CAAC;gBACD,GAAG,CAAC,KAAK,EAAE,CAAC;gBACZ,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAIzB,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAGD,IAAI,YAAY,EAAE,WAAW,EAAE,EAAE,CAAC;gBAChC,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;YACrD,CAAC;QAEH,CAAC,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,IAAA,sBAAY,EAAC,iCAAiC,CAAC,CAAC;QACvE,IAAI,SAAiB,CAAC;QAEtB,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACpD,cAAc,EAAE,CAAC;YACjB,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;YAClC,GAAG,CAAC,KAAK,EAAE,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,cAAc,EAAE,CAAC;YAGjB,IACE,KAAK,YAAY,0BAAiB;gBAClC,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAChC,CAAC;gBACD,GAAG,CAAC,KAAK,EAAE,CAAC;gBACZ,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAGzB,OAAO,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,CAAC;YAGD,MAAM,YAAY,GAAG,qBAAqB,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;YACtE,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACpE,GAAG,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;QAKD,UAAU,CAAC,GAAG,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;QAC5C,GAAG,CAAC,KAAK,EAAE,CAAC;QACZ,UAAU,CAAC,GAAG,EAAE,cAAc,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/D,GAAG,CAAC,KAAK,EAAE,CAAC;QACZ,GAAG,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;QAC1D,GAAG,CAAC,KAAK,EAAE,CAAC;QAGZ,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,eAAe,CAAC,CAAC;QAC3C,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,SAAiB,EAAE,OAAO,EAAE,EAAE;YACxD,MAAM,CAAC,GAAG,CAAC,WAAW,SAAS,KAAK,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QAEH,YAAY,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,MAAc,EAAE,MAAc,EAAE,EAAE;YAChE,GAAG,CAAC,KAAK,EAAE,CAAC;YACZ,GAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACnC,GAAG,CAAC,IAAI,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;YAC9B,GAAG,CAAC,IAAI,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;YAC9B,GAAG,CAAC,KAAK,EAAE,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,YAAY,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,IAAY,EAAE,MAAc,EAAE,EAAE;YAC/D,GAAG,CAAC,KAAK,EAAE,CAAC;YACZ,GAAG,CAAC,KAAK,CAAC,6BAA6B,IAAI,MAAM,MAAM,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,KAAK,EAAE,CAAC;QACd,CAAC,CAAC,CAAC;QASH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;YACxB,GAAG,CAAC,KAAK,EAAE,CAAC;YACZ,KAAK,YAAY,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACzB,GAAG,CAAC,KAAK,EAAE,CAAC;YACZ,KAAK,YAAY,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAGH,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAEf,GAAG,CAAC,KAAK,CACP,kBAAkB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC1E,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC3C,CAAC;QACF,GAAG,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;AACH,CAAC"}

package/dist/tunnel/credentials.service.d.ts

@@ -0,0 +1,23 @@
+export interface TunnelCredentials {
+    access_token: string;
+    refresh_token: string;
+    expires_at: string;
+    user: {
+        id: string;
+        email: string;
+        tier: "free" | "paid";
+    };
+}
+export declare class CredentialsService {
+    private readonly logger;
+    private static readonly CREDENTIALS_DIR;
+    private static readonly CREDENTIALS_FILE;
+    getCredentialsPath(): string;
+    saveCredentials(credentials: TunnelCredentials): Promise<void>;
+    loadCredentials(): Promise<TunnelCredentials | null>;
+    clearCredentials(): Promise<void>;
+    hasCredentials(): Promise<boolean>;
+    isTokenExpired(credentials: TunnelCredentials): boolean;
+    private ensureCredentialsDirectory;
+    private validateCredentials;
+}

package/dist/tunnel/credentials.service.js

@@ -0,0 +1,152 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CredentialsService = void 0;
+const promises_1 = require("fs/promises");
+const path_1 = require("path");
+const os_1 = require("os");
+const fs_1 = require("fs");
+const common_1 = require("@nestjs/common");
+class CredentialsService {
+    logger = new common_1.Logger(CredentialsService.name);
+    static CREDENTIALS_DIR = (0, path_1.join)((0, os_1.homedir)(), ".ankimcp");
+    static CREDENTIALS_FILE = (0, path_1.join)(CredentialsService.CREDENTIALS_DIR, "credentials.json");
+    getCredentialsPath() {
+        return CredentialsService.CREDENTIALS_FILE;
+    }
+    async saveCredentials(credentials) {
+        try {
+            await this.ensureCredentialsDirectory();
+            const content = JSON.stringify(credentials, null, 2);
+            await (0, promises_1.writeFile)(CredentialsService.CREDENTIALS_FILE, content, {
+                encoding: "utf-8",
+                mode: 0o600,
+            });
+            await (0, promises_1.chmod)(CredentialsService.CREDENTIALS_FILE, 0o600);
+        }
+        catch (error) {
+            throw new Error(`Failed to save credentials to ${CredentialsService.CREDENTIALS_FILE}: ${error instanceof Error ? error.message : String(error)}`, { cause: error });
+        }
+    }
+    async loadCredentials() {
+        try {
+            await (0, promises_1.access)(CredentialsService.CREDENTIALS_FILE, fs_1.constants.F_OK | fs_1.constants.R_OK);
+            const content = await (0, promises_1.readFile)(CredentialsService.CREDENTIALS_FILE, {
+                encoding: "utf-8",
+            });
+            const credentials = JSON.parse(content);
+            const validation = this.validateCredentials(credentials);
+            if (!validation.valid) {
+                this.logger.warn(`Corrupted credentials file at ${CredentialsService.CREDENTIALS_FILE}:`);
+                validation.errors.forEach((error) => {
+                    this.logger.warn(`  - ${error}`);
+                });
+                return null;
+            }
+            return credentials;
+        }
+        catch (error) {
+            if (error.code === "ENOENT") {
+                return null;
+            }
+            this.logger.warn(`Failed to load credentials from ${CredentialsService.CREDENTIALS_FILE}: ${error instanceof Error ? error.message : String(error)}`);
+            return null;
+        }
+    }
+    async clearCredentials() {
+        try {
+            await (0, promises_1.unlink)(CredentialsService.CREDENTIALS_FILE);
+        }
+        catch (error) {
+            if (error.code !== "ENOENT") {
+                throw new Error(`Failed to delete credentials file: ${error instanceof Error ? error.message : String(error)}`, { cause: error });
+            }
+        }
+    }
+    async hasCredentials() {
+        try {
+            await (0, promises_1.access)(CredentialsService.CREDENTIALS_FILE, fs_1.constants.F_OK);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    isTokenExpired(credentials) {
+        const expiresAt = new Date(credentials.expires_at).getTime();
+        const now = Date.now();
+        const bufferMs = 60 * 1000;
+        return now >= expiresAt - bufferMs;
+    }
+    async ensureCredentialsDirectory() {
+        try {
+            await (0, promises_1.access)(CredentialsService.CREDENTIALS_DIR, fs_1.constants.F_OK);
+        }
+        catch (error) {
+            if (error.code === "ENOENT") {
+                await (0, promises_1.mkdir)(CredentialsService.CREDENTIALS_DIR, {
+                    recursive: true,
+                    mode: 0o700,
+                });
+            }
+            else {
+                throw error;
+            }
+        }
+    }
+    validateCredentials(obj) {
+        const errors = [];
+        if (!obj || typeof obj !== "object") {
+            errors.push("Credentials must be an object");
+            return { valid: false, errors };
+        }
+        const creds = obj;
+        if (!("access_token" in creds)) {
+            errors.push("Missing field: access_token");
+        }
+        else if (typeof creds.access_token !== "string") {
+            errors.push(`Invalid type for access_token: expected string, got ${typeof creds.access_token}`);
+        }
+        if (!("refresh_token" in creds)) {
+            errors.push("Missing field: refresh_token");
+        }
+        else if (typeof creds.refresh_token !== "string") {
+            errors.push(`Invalid type for refresh_token: expected string, got ${typeof creds.refresh_token}`);
+        }
+        if (!("expires_at" in creds)) {
+            errors.push("Missing field: expires_at");
+        }
+        else if (typeof creds.expires_at !== "string") {
+            errors.push(`Invalid type for expires_at: expected string, got ${typeof creds.expires_at}`);
+        }
+        if (!("user" in creds)) {
+            errors.push("Missing field: user");
+        }
+        else if (!creds.user || typeof creds.user !== "object") {
+            errors.push(`Invalid type for user: expected object, got ${typeof creds.user}`);
+        }
+        else {
+            const user = creds.user;
+            if (!("id" in user)) {
+                errors.push("Missing field: user.id");
+            }
+            else if (typeof user.id !== "string") {
+                errors.push(`Invalid type for user.id: expected string, got ${typeof user.id}`);
+            }
+            if (!("email" in user)) {
+                errors.push("Missing field: user.email");
+            }
+            else if (typeof user.email !== "string") {
+                errors.push(`Invalid type for user.email: expected string, got ${typeof user.email}`);
+            }
+            if (!("tier" in user)) {
+                errors.push("Missing field: user.tier");
+            }
+            else if (user.tier !== "free" && user.tier !== "paid") {
+                errors.push(`Invalid tier value: expected 'free' or 'paid', got '${String(user.tier)}'`);
+            }
+        }
+        return { valid: errors.length === 0, errors };
+    }
+}
+exports.CredentialsService = CredentialsService;
+//# sourceMappingURL=credentials.service.js.map

package/dist/tunnel/credentials.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.service.js","sourceRoot":"","sources":["../../src/tunnel/credentials.service.ts"],"names":[],"mappings":";;;AAAA,0CAAgF;AAChF,+BAA4B;AAC5B,2BAA6B;AAC7B,2BAA+B;AAC/B,2CAAwC;AAuCxC,MAAa,kBAAkB;IACZ,MAAM,GAAG,IAAI,eAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,CAAU,eAAe,GAAG,IAAA,WAAI,EAAC,IAAA,YAAO,GAAE,EAAE,UAAU,CAAC,CAAC;IAC9D,MAAM,CAAU,gBAAgB,GAAG,IAAA,WAAI,EAC7C,kBAAkB,CAAC,eAAe,EAClC,kBAAkB,CACnB,CAAC;IAMF,kBAAkB;QAChB,OAAO,kBAAkB,CAAC,gBAAgB,CAAC;IAC7C,CAAC;IASD,KAAK,CAAC,eAAe,CAAC,WAA8B;QAClD,IAAI,CAAC;YAEH,MAAM,IAAI,CAAC,0BAA0B,EAAE,CAAC;YAGxC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACrD,MAAM,IAAA,oBAAS,EAAC,kBAAkB,CAAC,gBAAgB,EAAE,OAAO,EAAE;gBAC5D,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;YAGH,MAAM,IAAA,gBAAK,EAAC,kBAAkB,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,iCAAiC,kBAAkB,CAAC,gBAAgB,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACjI,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC;IACH,CAAC;IAQD,KAAK,CAAC,eAAe;QACnB,IAAI,CAAC;YAEH,MAAM,IAAA,iBAAM,EACV,kBAAkB,CAAC,gBAAgB,EACnC,cAAS,CAAC,IAAI,GAAG,cAAS,CAAC,IAAI,CAChC,CAAC;YAGF,MAAM,OAAO,GAAG,MAAM,IAAA,mBAAQ,EAAC,kBAAkB,CAAC,gBAAgB,EAAE;gBAClE,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;YACH,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAsB,CAAC;YAG7D,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;YACzD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,iCAAiC,kBAAkB,CAAC,gBAAgB,GAAG,CACxE,CAAC;gBACF,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;oBAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC;gBACnC,CAAC,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,WAAW,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAEvD,OAAO,IAAI,CAAC;YACd,CAAC;YAGD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,mCAAmC,kBAAkB,CAAC,gBAAgB,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACpI,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAMD,KAAK,CAAC,gBAAgB;QACpB,IAAI,CAAC;YACH,MAAM,IAAA,iBAAM,EAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,MAAM,IAAI,KAAK,CACb,sCAAsC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC9F,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;YACJ,CAAC;QAEH,CAAC;IACH,CAAC;IAMD,KAAK,CAAC,cAAc;QAClB,IAAI,CAAC;YACH,MAAM,IAAA,iBAAM,EAAC,kBAAkB,CAAC,gBAAgB,EAAE,cAAS,CAAC,IAAI,CAAC,CAAC;YAClE,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IASD,cAAc,CAAC,WAA8B;QAC3C,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;QAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,EAAE,GAAG,IAAI,CAAC;QAE3B,OAAO,GAAG,IAAI,SAAS,GAAG,QAAQ,CAAC;IACrC,CAAC;IAMO,KAAK,CAAC,0BAA0B;QACtC,IAAI,CAAC;YACH,MAAM,IAAA,iBAAM,EAAC,kBAAkB,CAAC,eAAe,EAAE,cAAS,CAAC,IAAI,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAEvD,MAAM,IAAA,gBAAK,EAAC,kBAAkB,CAAC,eAAe,EAAE;oBAC9C,SAAS,EAAE,IAAI;oBACf,IAAI,EAAE,KAAK;iBACZ,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IASO,mBAAmB,CAAC,GAAY;QACtC,MAAM,MAAM,GAAa,EAAE,CAAC;QAG5B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC7C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAClC,CAAC;QAED,MAAM,KAAK,GAAG,GAA8B,CAAC;QAG7C,IAAI,CAAC,CAAC,cAAc,IAAI,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YAClD,MAAM,CAAC,IAAI,CACT,uDAAuD,OAAO,KAAK,CAAC,YAAY,EAAE,CACnF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,CAAC,eAAe,IAAI,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAC9C,CAAC;aAAM,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,CACT,wDAAwD,OAAO,KAAK,CAAC,aAAa,EAAE,CACrF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,CAAC,YAAY,IAAI,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC3C,CAAC;aAAM,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,CAAC,IAAI,CACT,qDAAqD,OAAO,KAAK,CAAC,UAAU,EAAE,CAC/E,CAAC;QACJ,CAAC;QAGD,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACrC,CAAC;aAAM,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACzD,MAAM,CAAC,IAAI,CACT,+CAA+C,OAAO,KAAK,CAAC,IAAI,EAAE,CACnE,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,KAAK,CAAC,IAA+B,CAAC;YAGnD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACxC,CAAC;iBAAM,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;gBACvC,MAAM,CAAC,IAAI,CACT,kDAAkD,OAAO,IAAI,CAAC,EAAE,EAAE,CACnE,CAAC;YACJ,CAAC;YAGD,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC;gBACvB,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YAC3C,CAAC;iBAAM,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC1C,MAAM,CAAC,IAAI,CACT,qDAAqD,OAAO,IAAI,CAAC,KAAK,EAAE,CACzE,CAAC;YACJ,CAAC;YAGD,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC;gBACtB,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YAC1C,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACxD,MAAM,CAAC,IAAI,CACT,uDAAuD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC5E,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IAChD,CAAC;;AAhPH,gDAiPC"}

package/dist/tunnel/device-flow.service.d.ts

@@ -0,0 +1,46 @@
+import { AppConfigService } from "../app-config.service";
+export interface DeviceCodeResponse {
+    device_code: string;
+    user_code: string;
+    verification_uri: string;
+    verification_uri_complete?: string;
+    expires_in: number;
+    interval: number;
+}
+export interface TokenResponse {
+    access_token: string;
+    token_type: string;
+    expires_in: number;
+    refresh_token: string;
+    user: {
+        id: string;
+        email: string;
+        tier: "free" | "paid";
+    };
+}
+export interface DeviceFlowErrorResponse {
+    error: "authorization_pending" | "slow_down" | "expired_token" | "access_denied" | string;
+    error_description?: string;
+}
+export declare class DeviceFlowError extends Error {
+    readonly code: string;
+    readonly description?: string | undefined;
+    constructor(message: string, code: string, description?: string | undefined);
+}
+export declare class DeviceFlowService {
+    private readonly config;
+    private readonly client;
+    private readonly logger;
+    private readonly deviceEndpoint;
+    private readonly tokenEndpoint;
+    constructor(config: AppConfigService);
+    requestDeviceCode(): Promise<DeviceCodeResponse>;
+    pollForToken(deviceCode: string, interval: number, expiresIn: number): Promise<TokenResponse>;
+    refreshToken(refreshToken: string): Promise<TokenResponse>;
+    private sleep;
+    private handleError;
+    getConfig(): {
+        tunnelUrl: string;
+        clientId: string;
+    };
+}