@archastro/intern 1.0.0

package/dist/index.js

@@ -0,0 +1,249 @@
+#!/usr/bin/env node
+import { createRequire } from "node:module";
+import { parseArguments, flag, option, options, parseToolInput, } from "./args.js";
+import { loadConfig } from "./config.js";
+import { Credentials } from "./credentials.js";
+import { InternError } from "./errors.js";
+import { McpClient, ToolCallError } from "./mcp.js";
+import { login } from "./oauth.js";
+import { publishDirectory } from "./publish.js";
+const version = createRequire(import.meta.url)("../package.json").version;
+export async function run(argv) {
+    const args = parseArguments(argv);
+    if (flag(args, "version") || args.command === "version") {
+        process.stdout.write(`${version}\n`);
+        return 0;
+    }
+    if (flag(args, "help") || args.command === "help") {
+        process.stdout.write(HELP);
+        return 0;
+    }
+    const config = loadConfig({ origin: option(args, "origin") });
+    const credentials = new Credentials(config);
+    const client = new McpClient(config, credentials);
+    const compact = flag(args, "compact");
+    let output;
+    switch (args.command) {
+        case "login": {
+            requirePositionals(args.positionals, 0, "intern login");
+            await login(config, credentials, {
+                openBrowser: !flag(args, "no-open"),
+                notify: (message) => process.stderr.write(`${message}\n`),
+            });
+            output = await client.callTool("intern_auth_status", {});
+            break;
+        }
+        case "logout": {
+            requirePositionals(args.positionals, 0, "intern logout");
+            const removed = await credentials.logout();
+            output = {
+                signedOut: !config.accessToken,
+                credentialsRemoved: removed,
+                environmentOverride: Boolean(config.accessToken),
+            };
+            break;
+        }
+        case "status":
+            requirePositionals(args.positionals, 0, "intern status");
+            output = await authorizationStatus(client);
+            break;
+        case "auth":
+            if (args.positionals[0] !== "status" || args.positionals.length !== 1) {
+                throw usage("Usage: intern auth status");
+            }
+            output = await authorizationStatus(client);
+            break;
+        case "tools":
+            requirePositionals(args.positionals, 0, "intern tools");
+            output = { tools: await client.listTools() };
+            break;
+        case "call": {
+            const tool = args.positionals[0];
+            if (!tool || args.positionals.length > 2) {
+                throw usage("Usage: intern call <tool-name> [JSON] [--input-file PATH]");
+            }
+            output = await client.callTool(tool, await parseToolInput(args));
+            break;
+        }
+        case "resources":
+            requirePositionals(args.positionals, 0, "intern resources");
+            output = await client.listResources();
+            break;
+        case "read": {
+            const uri = onlyPositional(args.positionals, "Usage: intern read <resource-uri>");
+            output = { contents: await client.readResource(uri) };
+            break;
+        }
+        case "sites":
+            requirePositionals(args.positionals, 0, "intern sites");
+            output = await client.callTool("intern_list_sites", {});
+            break;
+        case "guide":
+            requirePositionals(args.positionals, 0, "intern guide");
+            output = await client.callTool("intern_get_authoring_guide", {});
+            break;
+        case "plugins": {
+            if (args.positionals.length > 1)
+                throw usage("Usage: intern plugins [site]");
+            const site = args.positionals[0];
+            output = site
+                ? await client.callTool("intern_list_site_plugins", { site })
+                : await client.callTool("intern_list_available_plugins", {});
+            break;
+        }
+        case "source": {
+            const site = onlyPositional(args.positionals, "Usage: intern source <site>");
+            output = await client.callTool("intern_get_site_source", { site });
+            break;
+        }
+        case "fetch": {
+            const url = onlyPositional(args.positionals, "Usage: intern fetch <url>");
+            output = await client.callTool("intern_fetch_url", { url });
+            break;
+        }
+        case "publish": {
+            if (args.positionals.length > 1) {
+                throw usage("Usage: intern publish [directory] --site <slug> [--message TEXT]");
+            }
+            const site = option(args, "site");
+            if (!site)
+                throw usage("intern publish requires --site <slug>");
+            output = await publishDirectory(client, {
+                site,
+                directory: args.positionals[0] ?? ".",
+                message: option(args, "message") ?? `Publish ${site} from Intern CLI`,
+                plugins: options(args, "plugin").map(parsePlugin),
+            });
+            break;
+        }
+        case "visibility": {
+            if (args.positionals.length !== 2 ||
+                !["private", "public"].includes(args.positionals[1])) {
+                throw usage("Usage: intern visibility <site> private|public");
+            }
+            output = await client.callTool("intern_set_site_visibility", {
+                site: args.positionals[0],
+                visibility: args.positionals[1],
+            });
+            break;
+        }
+        case "invite": {
+            if (args.positionals.length !== 2)
+                throw usage("Usage: intern invite <site> <email>");
+            output = await client.callTool("intern_invite_site_guest", {
+                site: args.positionals[0],
+                email: args.positionals[1],
+            });
+            break;
+        }
+        case "guests": {
+            const site = onlyPositional(args.positionals, "Usage: intern guests <site>");
+            output = await client.callTool("intern_list_site_guests", { site });
+            break;
+        }
+        case "revoke": {
+            if (args.positionals.length !== 2)
+                throw usage("Usage: intern revoke <site> <grant-id>");
+            output = await client.callTool("intern_revoke_site_guest", {
+                site: args.positionals[0],
+                grant: args.positionals[1],
+            });
+            break;
+        }
+        case "delete": {
+            const site = onlyPositional(args.positionals, "Usage: intern delete <site> --yes");
+            if (!flag(args, "yes"))
+                throw usage("Permanent deletion requires --yes");
+            output = await client.callTool("intern_delete_site", { site });
+            break;
+        }
+        default:
+            throw usage(`Unknown command ${args.command}. Run \`intern help\` for usage.`);
+    }
+    printJSON(output, compact);
+    return 0;
+}
+async function authorizationStatus(client) {
+    try {
+        return await client.callTool("intern_auth_status", {});
+    }
+    catch (error) {
+        if (error instanceof InternError && error.code === "auth_required") {
+            return { authorized: false };
+        }
+        throw error;
+    }
+}
+function parsePlugin(value) {
+    const [plugin, binding, ...rest] = value.split(":");
+    if (!plugin || rest.length > 0)
+        throw usage(`Invalid plugin ${value}; use key or key:binding`);
+    return { plugin, ...(binding ? { binding } : {}), config: {} };
+}
+function onlyPositional(values, message) {
+    if (values.length !== 1)
+        throw usage(message);
+    return values[0];
+}
+function requirePositionals(values, count, command) {
+    if (values.length !== count)
+        throw usage(`Usage: ${command}`);
+}
+function usage(message) {
+    return new InternError("usage", message);
+}
+function printJSON(value, compact) {
+    process.stdout.write(`${JSON.stringify(value, null, compact ? undefined : 2)}\n`);
+}
+const HELP = `Intern CLI ${version}
+
+Usage:
+  intern login [--no-open]             Connect through TryIntern browser OAuth
+  intern logout                        Remove stored credentials
+  intern status                        Show the current user and organization
+  intern publish [DIR] --site SLUG     Create or update a site from static files
+  intern sites                         List sites
+  intern source SITE                   Read editable source
+  intern plugins [SITE]                List available or installed plugins
+  intern guide                         Read the current authoring guide
+  intern fetch URL                     Read an authorized served Intern URL
+  intern visibility SITE private|public
+  intern invite SITE EMAIL
+  intern guests SITE
+  intern revoke SITE GRANT_ID
+  intern delete SITE --yes
+
+Live MCP surface:
+  intern tools                         List every hosted Intern tool and schema
+  intern call TOOL [JSON]              Call any hosted tool
+  intern call TOOL --input-file PATH   Read tool arguments from a JSON file or -
+  intern resources                     List hosted resources and templates
+  intern read URI                      Read a hosted resource
+
+Options:
+  --origin URL       Override https://tryintern.dev (or set INTERN_BASE_URL)
+  --compact          Emit compact JSON
+  --plugin KEY[:BINDING]  Request a plugin while creating a site; repeatable
+
+Credentials are stored in ~/.config/intern with mode 0600. Set
+INTERN_ACCESS_TOKEN for an ephemeral bearer override. Command results are JSON.
+`;
+async function main() {
+    try {
+        process.exitCode = await run(process.argv.slice(2));
+    }
+    catch (error) {
+        if (error instanceof ToolCallError) {
+            process.stderr.write(`${JSON.stringify(error.output, null, 2)}\n`);
+            process.exitCode = 1;
+            return;
+        }
+        const code = error instanceof InternError ? error.code : "internal_error";
+        const message = error instanceof Error ? error.message : String(error);
+        const details = error instanceof InternError ? error.details : undefined;
+        process.stderr.write(`${JSON.stringify({ error: { code, message, ...(details === undefined ? {} : { details }) } }, null, 2)}\n`);
+        process.exitCode = code === "usage" ? 2 : 1;
+    }
+}
+await main();
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EACL,cAAc,EACd,IAAI,EACJ,MAAM,EACN,OAAO,EACP,cAAc,GACf,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,MAAM,OAAO,GACX,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,iBAAiB,CACjD,CAAC,OAAO,CAAC;AAEV,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAc;IACtC,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACxD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;QACrC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACtC,IAAI,MAAe,CAAC;IAEpB,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,kBAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC;YACxD,MAAM,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE;gBAC/B,WAAW,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;gBACnC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC;aAC1D,CAAC,CAAC;YACH,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;YACzD,MAAM;QACR,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,kBAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,eAAe,CAAC,CAAC;YACzD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,CAAC;YAC3C,MAAM,GAAG;gBACP,SAAS,EAAE,CAAC,MAAM,CAAC,WAAW;gBAC9B,kBAAkB,EAAE,OAAO;gBAC3B,mBAAmB,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC;aACjD,CAAC;YACF,MAAM;QACR,CAAC;QACD,KAAK,QAAQ;YACX,kBAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,eAAe,CAAC,CAAC;YACzD,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAC3C,MAAM;QACR,KAAK,MAAM;YACT,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtE,MAAM,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC3C,CAAC;YACD,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAC3C,MAAM;QACR,KAAK,OAAO;YACV,kBAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC;YACxD,MAAM,GAAG,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC;YAC7C,MAAM;QACR,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzC,MAAM,KAAK,CACT,2DAA2D,CAC5D,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;YACjE,MAAM;QACR,CAAC;QACD,KAAK,WAAW;YACd,kBAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,kBAAkB,CAAC,CAAC;YAC5D,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,EAAE,CAAC;YACtC,MAAM;QACR,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,GAAG,GAAG,cAAc,CACxB,IAAI,CAAC,WAAW,EAChB,mCAAmC,CACpC,CAAC;YACF,MAAM,GAAG,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YACtD,MAAM;QACR,CAAC;QACD,KAAK,OAAO;YACV,kBAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC;YACxD,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;YACxD,MAAM;QACR,KAAK,OAAO;YACV,kBAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC;YACxD,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,4BAA4B,EAAE,EAAE,CAAC,CAAC;YACjE,MAAM;QACR,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;gBAC7B,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,GAAG,IAAI;gBACX,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,CAAC;gBAC7D,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,+BAA+B,EAAE,EAAE,CAAC,CAAC;YAC/D,MAAM;QACR,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,IAAI,GAAG,cAAc,CACzB,IAAI,CAAC,WAAW,EAChB,6BAA6B,CAC9B,CAAC;YACF,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,MAAM;QACR,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,2BAA2B,CAAC,CAAC;YAC1E,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YAC5D,MAAM;QACR,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,MAAM,KAAK,CACT,kEAAkE,CACnE,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAClC,IAAI,CAAC,IAAI;gBAAE,MAAM,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAChE,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE;gBACtC,IAAI;gBACJ,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,GAAG;gBACrC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,WAAW,IAAI,kBAAkB;gBACrE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;aAClD,CAAC,CAAC;YACH,MAAM;QACR,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,IACE,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;gBAC7B,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,EACrD,CAAC;gBACD,MAAM,KAAK,CAAC,gDAAgD,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,4BAA4B,EAAE;gBAC3D,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;gBACzB,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;aAChC,CAAC,CAAC;YACH,MAAM;QACR,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;gBAC/B,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACrD,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,0BAA0B,EAAE;gBACzD,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;gBACzB,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;aAC3B,CAAC,CAAC;YACH,MAAM;QACR,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,IAAI,GAAG,cAAc,CACzB,IAAI,CAAC,WAAW,EAChB,6BAA6B,CAC9B,CAAC;YACF,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACpE,MAAM;QACR,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;gBAC/B,MAAM,KAAK,CAAC,wCAAwC,CAAC,CAAC;YACxD,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,0BAA0B,EAAE;gBACzD,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;gBACzB,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;aAC3B,CAAC,CAAC;YACH,MAAM;QACR,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,IAAI,GAAG,cAAc,CACzB,IAAI,CAAC,WAAW,EAChB,mCAAmC,CACpC,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACzE,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/D,MAAM;QACR,CAAC;QACD;YACE,MAAM,KAAK,CACT,mBAAmB,IAAI,CAAC,OAAO,kCAAkC,CAClE,CAAC;IACN,CAAC;IAED,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3B,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,MAAiB;IAClD,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,QAAQ,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACnE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAC/B,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAKhC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAC5B,MAAM,KAAK,CAAC,kBAAkB,KAAK,0BAA0B,CAAC,CAAC;IACjE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,cAAc,CAAC,MAAgB,EAAE,OAAe;IACvD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9C,OAAO,MAAM,CAAC,CAAC,CAAE,CAAC;AACpB,CAAC;AAED,SAAS,kBAAkB,CACzB,MAAgB,EAChB,KAAa,EACb,OAAe;IAEf,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK;QAAE,MAAM,KAAK,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,KAAK,CAAC,OAAe;IAC5B,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,OAAgB;IACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAC5D,CAAC;AACJ,CAAC;AAED,MAAM,IAAI,GAAG,cAAc,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgCjC,CAAC;AAEF,KAAK,UAAU,IAAI;IACjB,IAAI,CAAC;QACH,OAAO,CAAC,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;YACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACnE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC1E,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QACzE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAC5G,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,MAAM,IAAI,EAAE,CAAC"}

package/dist/mcp.d.ts

@@ -0,0 +1,23 @@
+import type { InternConfig } from "./config.js";
+import { Credentials } from "./credentials.js";
+import { InternError } from "./errors.js";
+export declare class ToolCallError extends InternError {
+    readonly output: unknown;
+    constructor(output: unknown);
+}
+export declare class McpClient {
+    private readonly config;
+    private readonly credentials;
+    private readonly fetchFn;
+    private sequence;
+    constructor(config: InternConfig, credentials: Credentials, fetchFn?: typeof fetch);
+    listTools(): Promise<unknown>;
+    callTool(name: string, args: Record<string, unknown>): Promise<unknown>;
+    listResources(): Promise<{
+        resources: unknown;
+        resourceTemplates: unknown;
+    }>;
+    readResource(uri: string): Promise<unknown>;
+    private rpc;
+    private request;
+}

package/dist/mcp.js

@@ -0,0 +1,140 @@
+import { InternError } from "./errors.js";
+export class ToolCallError extends InternError {
+    output;
+    constructor(output) {
+        const error = isRecord(output) && isRecord(output.error) ? output.error : undefined;
+        super(typeof error?.code === "string" ? error.code : "tool_failed", typeof error?.message === "string"
+            ? error.message
+            : "Intern tool call failed", output);
+        this.output = output;
+    }
+}
+export class McpClient {
+    config;
+    credentials;
+    fetchFn;
+    sequence = 0;
+    constructor(config, credentials, fetchFn = fetch) {
+        this.config = config;
+        this.credentials = credentials;
+        this.fetchFn = fetchFn;
+    }
+    async listTools() {
+        return resultField(await this.rpc("tools/list", {}), "tools");
+    }
+    async callTool(name, args) {
+        const response = asRecord(await this.rpc("tools/call", { name, arguments: args }));
+        const output = response.structuredContent ?? textOutput(response);
+        if (response.isError === true)
+            throw new ToolCallError(output);
+        return output;
+    }
+    async listResources() {
+        const resources = resultField(await this.rpc("resources/list", {}), "resources");
+        const resourceTemplates = resultField(await this.rpc("resources/templates/list", {}), "resourceTemplates");
+        return { resources, resourceTemplates };
+    }
+    async readResource(uri) {
+        return resultField(await this.rpc("resources/read", { uri }), "contents");
+    }
+    async rpc(method, params) {
+        const id = ++this.sequence;
+        let token = await this.credentials.accessToken();
+        let response = await this.request(id, method, params, token);
+        if (response.status === 401 && !this.config.accessToken) {
+            token = await this.credentials.accessToken(true);
+            response = await this.request(id, method, params, token);
+        }
+        if (!response.ok) {
+            const body = await response.text();
+            throw new InternError(response.status === 401 ? "auth_required" : "mcp_http_error", response.status === 401
+                ? "Intern authorization is no longer valid; run `intern login` again"
+                : `Intern service request failed with HTTP ${response.status}`, safeRemoteBody(body));
+        }
+        const envelope = parseEnvelope(await response.text(), response.headers.get("content-type"), id);
+        if (envelope.error) {
+            throw new InternError("mcp_protocol_error", envelope.error.message ?? "Intern service returned a protocol error", envelope.error);
+        }
+        if (!("result" in envelope)) {
+            throw new InternError("mcp_protocol_error", "Intern service response omitted a result");
+        }
+        return envelope.result;
+    }
+    request(id, method, params, token) {
+        return this.fetchFn(this.config.resource, {
+            method: "POST",
+            redirect: "error",
+            signal: AbortSignal.timeout(120_000),
+            headers: {
+                accept: "application/json, text/event-stream",
+                authorization: `Bearer ${token}`,
+                "content-type": "application/json",
+                "user-agent": "intern-cli/0.1",
+            },
+            body: JSON.stringify({ jsonrpc: "2.0", id, method, params }),
+        });
+    }
+}
+function parseEnvelope(body, contentType, expectedId) {
+    let value;
+    if (contentType?.includes("text/event-stream")) {
+        const events = body
+            .split(/\r?\n\r?\n/)
+            .map((event) => event
+            .split(/\r?\n/)
+            .filter((line) => line.startsWith("data:"))
+            .map((line) => line.slice(5).trimStart())
+            .join("\n"))
+            .filter(Boolean);
+        const candidate = events.at(-1);
+        if (!candidate)
+            throw new InternError("mcp_protocol_error", "Intern service returned an empty event stream");
+        value = parseJSON(candidate);
+    }
+    else {
+        value = parseJSON(body);
+    }
+    if (!isRecord(value) || value.jsonrpc !== "2.0" || value.id !== expectedId) {
+        throw new InternError("mcp_protocol_error", "Intern service returned an invalid JSON-RPC response");
+    }
+    return value;
+}
+function parseJSON(value) {
+    try {
+        return JSON.parse(value);
+    }
+    catch {
+        throw new InternError("mcp_protocol_error", "Intern service returned invalid JSON");
+    }
+}
+function textOutput(result) {
+    const text = result.content?.find((item) => item.type === "text")?.text;
+    if (!text)
+        return null;
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return text;
+    }
+}
+function resultField(value, field) {
+    const result = asRecord(value);
+    if (!(field in result)) {
+        throw new InternError("mcp_protocol_error", `Intern service response omitted ${field}`);
+    }
+    return result[field];
+}
+function asRecord(value) {
+    if (!isRecord(value))
+        throw new InternError("mcp_protocol_error", "Intern service returned an invalid result");
+    return value;
+}
+function safeRemoteBody(body) {
+    const trimmed = body.trim();
+    return trimmed.length > 0 && trimmed.length <= 2_000 ? trimmed : undefined;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=mcp.js.map

package/dist/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAe1C,MAAM,OAAO,aAAc,SAAQ,WAAW;IACvB;IAArB,YAAqB,MAAe;QAClC,MAAM,KAAK,GACT,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,KAAK,CACH,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAC5D,OAAO,KAAK,EAAE,OAAO,KAAK,QAAQ;YAChC,CAAC,CAAC,KAAK,CAAC,OAAO;YACf,CAAC,CAAC,yBAAyB,EAC7B,MAAM,CACP,CAAC;QATiB,WAAM,GAAN,MAAM,CAAS;IAUpC,CAAC;CACF;AAED,MAAM,OAAO,SAAS;IAID;IACA;IACA;IALX,QAAQ,GAAG,CAAC,CAAC;IAErB,YACmB,MAAoB,EACpB,WAAwB,EACxB,UAAwB,KAAK;QAF7B,WAAM,GAAN,MAAM,CAAc;QACpB,gBAAW,GAAX,WAAW,CAAa;QACxB,YAAO,GAAP,OAAO,CAAsB;IAC7C,CAAC;IAEJ,KAAK,CAAC,SAAS;QACb,OAAO,WAAW,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,IAAY,EACZ,IAA6B;QAE7B,MAAM,QAAQ,GAAG,QAAQ,CACvB,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CACxD,CAAC;QACF,MAAM,MAAM,GACV,QAAQ,CAAC,iBAAiB,IAAI,UAAU,CAAC,QAA0B,CAAC,CAAC;QACvE,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI;YAAE,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;QAC/D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,aAAa;QAIjB,MAAM,SAAS,GAAG,WAAW,CAC3B,MAAM,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE,CAAC,EACpC,WAAW,CACZ,CAAC;QACF,MAAM,iBAAiB,GAAG,WAAW,CACnC,MAAM,IAAI,CAAC,GAAG,CAAC,0BAA0B,EAAE,EAAE,CAAC,EAC9C,mBAAmB,CACpB,CAAC;QACF,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAW;QAC5B,OAAO,WAAW,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;IAC5E,CAAC;IAEO,KAAK,CAAC,GAAG,CACf,MAAc,EACd,MAA+B;QAE/B,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC;QAC3B,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;QACjD,IAAI,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAC7D,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACxD,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACjD,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,WAAW,CACnB,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,gBAAgB,EAC5D,QAAQ,CAAC,MAAM,KAAK,GAAG;gBACrB,CAAC,CAAC,mEAAmE;gBACrE,CAAC,CAAC,2CAA2C,QAAQ,CAAC,MAAM,EAAE,EAChE,cAAc,CAAC,IAAI,CAAC,CACrB,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,aAAa,CAC5B,MAAM,QAAQ,CAAC,IAAI,EAAE,EACrB,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EACpC,EAAE,CACH,CAAC;QACF,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,IAAI,WAAW,CACnB,oBAAoB,EACpB,QAAQ,CAAC,KAAK,CAAC,OAAO,IAAI,0CAA0C,EACpE,QAAQ,CAAC,KAAK,CACf,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,WAAW,CACnB,oBAAoB,EACpB,0CAA0C,CAC3C,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC,MAAM,CAAC;IACzB,CAAC;IAEO,OAAO,CACb,EAAU,EACV,MAAc,EACd,MAA+B,EAC/B,KAAa;QAEb,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;YACxC,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC;YACpC,OAAO,EAAE;gBACP,MAAM,EAAE,qCAAqC;gBAC7C,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,cAAc,EAAE,kBAAkB;gBAClC,YAAY,EAAE,gBAAgB;aAC/B;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;SAC7D,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,aAAa,CACpB,IAAY,EACZ,WAA0B,EAC1B,UAAkB;IAElB,IAAI,KAAc,CAAC;IACnB,IAAI,WAAW,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI;aAChB,KAAK,CAAC,YAAY,CAAC;aACnB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACb,KAAK;aACF,KAAK,CAAC,OAAO,CAAC;aACd,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;aAC1C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;aACxC,IAAI,CAAC,IAAI,CAAC,CACd;aACA,MAAM,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,SAAS;YACZ,MAAM,IAAI,WAAW,CACnB,oBAAoB,EACpB,+CAA+C,CAChD,CAAC;QACJ,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,IAAI,KAAK,CAAC,EAAE,KAAK,UAAU,EAAE,CAAC;QAC3E,MAAM,IAAI,WAAW,CACnB,oBAAoB,EACpB,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,OAAO,KAAmC,CAAC;AAC7C,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CACnB,oBAAoB,EACpB,sCAAsC,CACvC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,MAAsB;IACxC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,IAAI,CAAC;IACxE,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa;IAChD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,WAAW,CACnB,oBAAoB,EACpB,mCAAmC,KAAK,EAAE,CAC3C,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAClB,MAAM,IAAI,WAAW,CACnB,oBAAoB,EACpB,2CAA2C,CAC5C,CAAC;IACJ,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7E,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/oauth.d.ts

@@ -0,0 +1,9 @@
+import { type InternConfig } from "./config.js";
+import { Credentials, type CredentialRecord } from "./credentials.js";
+interface LoginOptions {
+    openBrowser?: boolean;
+    timeoutMs?: number;
+    notify?: (message: string) => void;
+}
+export declare function login(config: InternConfig, credentials: Credentials, options?: LoginOptions, fetchFn?: typeof fetch): Promise<CredentialRecord>;
+export {};

package/dist/oauth.js

@@ -0,0 +1,209 @@
+import { createHash, randomBytes } from "node:crypto";
+import { spawn } from "node:child_process";
+import http from "node:http";
+import { OAUTH_SCOPES } from "./config.js";
+import { parseTokens, } from "./credentials.js";
+import { InternError } from "./errors.js";
+export async function login(config, credentials, options = {}, fetchFn = fetch) {
+    const metadata = await discover(config, fetchFn);
+    const state = randomBytes(32).toString("base64url");
+    const verifier = randomBytes(48).toString("base64url");
+    const challenge = createHash("sha256").update(verifier).digest("base64url");
+    const callback = await listenForCallback(state, metadata.issuer, options.timeoutMs ?? 5 * 60_000);
+    try {
+        const clientId = await registerClient(metadata.registrationEndpoint, callback.redirectUri, fetchFn);
+        const authorizationURL = new URL(metadata.authorizationEndpoint);
+        for (const [key, value] of Object.entries({
+            response_type: "code",
+            client_id: clientId,
+            redirect_uri: callback.redirectUri,
+            scope: OAUTH_SCOPES.join(" "),
+            state,
+            code_challenge: challenge,
+            code_challenge_method: "S256",
+            resource: config.resource,
+        }))
+            authorizationURL.searchParams.set(key, value);
+        options.notify?.(`Open this URL to connect Intern:\n${authorizationURL.toString()}`);
+        if (options.openBrowser !== false)
+            openBrowser(authorizationURL.toString());
+        const code = await callback.wait();
+        const response = await fetchFn(metadata.tokenEndpoint, {
+            method: "POST",
+            redirect: "error",
+            signal: AbortSignal.timeout(30_000),
+            headers: { "content-type": "application/x-www-form-urlencoded" },
+            body: new URLSearchParams({
+                grant_type: "authorization_code",
+                code,
+                client_id: clientId,
+                redirect_uri: callback.redirectUri,
+                code_verifier: verifier,
+            }),
+        });
+        const body = await response.json().catch(() => null);
+        if (!response.ok) {
+            throw new InternError("oauth_exchange_failed", `Intern authorization failed (${remoteError(body, response.status)})`);
+        }
+        const record = {
+            version: 1,
+            issuer: metadata.issuer,
+            resource: config.resource,
+            clientId,
+            tokenEndpoint: metadata.tokenEndpoint,
+            tokens: parseTokens(body),
+        };
+        await credentials.save(record);
+        return record;
+    }
+    finally {
+        await callback.close();
+    }
+}
+async function discover(config, fetchFn) {
+    const protectedResource = await fetchJSON(new URL("/.well-known/oauth-protected-resource/mcp", config.origin).toString(), fetchFn);
+    if (!isRecord(protectedResource) ||
+        protectedResource.resource !== config.resource ||
+        !Array.isArray(protectedResource.authorization_servers) ||
+        protectedResource.authorization_servers.length !== 1 ||
+        typeof protectedResource.authorization_servers[0] !== "string") {
+        throw new InternError("oauth_discovery_failed", "Intern returned invalid protected-resource metadata");
+    }
+    const issuer = sameOriginURL(protectedResource.authorization_servers[0], config.origin);
+    const authorization = await fetchJSON(new URL("/.well-known/oauth-authorization-server", issuer).toString(), fetchFn);
+    if (!isRecord(authorization) || authorization.issuer !== issuer) {
+        throw new InternError("oauth_discovery_failed", "Intern returned invalid authorization-server metadata");
+    }
+    return {
+        issuer,
+        authorizationEndpoint: metadataEndpoint(authorization.authorization_endpoint, issuer),
+        tokenEndpoint: metadataEndpoint(authorization.token_endpoint, issuer),
+        registrationEndpoint: metadataEndpoint(authorization.registration_endpoint, issuer),
+    };
+}
+async function registerClient(endpoint, redirectUri, fetchFn) {
+    const response = await fetchFn(endpoint, {
+        method: "POST",
+        redirect: "error",
+        signal: AbortSignal.timeout(30_000),
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({
+            client_name: "Intern CLI",
+            redirect_uris: [redirectUri],
+            grant_types: ["authorization_code", "refresh_token"],
+            response_types: ["code"],
+            token_endpoint_auth_method: "none",
+        }),
+    });
+    const body = await response.json().catch(() => null);
+    if (!response.ok || !isRecord(body) || typeof body.client_id !== "string") {
+        throw new InternError("oauth_registration_failed", `Intern could not register this CLI (${remoteError(body, response.status)})`);
+    }
+    return body.client_id;
+}
+async function listenForCallback(expectedState, expectedIssuer, timeoutMs) {
+    let settle;
+    let reject;
+    const result = new Promise((resolve, rejectResult) => {
+        settle = resolve;
+        reject = rejectResult;
+    });
+    let completed = false;
+    const server = http.createServer((request, response) => {
+        const url = new URL(request.url ?? "/", "http://127.0.0.1");
+        if (request.method !== "GET" || url.pathname !== "/callback") {
+            response.writeHead(404).end("Not found");
+            return;
+        }
+        const error = url.searchParams.get("error");
+        const state = url.searchParams.get("state");
+        const issuer = url.searchParams.get("iss");
+        const code = url.searchParams.get("code");
+        if (state !== expectedState || issuer !== expectedIssuer) {
+            response.writeHead(400, { "content-type": "text/plain; charset=utf-8" });
+            response.end("This authorization response did not match the Intern CLI request.");
+            return;
+        }
+        completed = true;
+        if (error || !code) {
+            response.writeHead(400, { "content-type": "text/plain; charset=utf-8" });
+            response.end("Intern authorization was not approved. You can close this window.");
+            reject?.(new InternError("oauth_denied", `Intern authorization was denied (${error ?? "missing_code"})`));
+            return;
+        }
+        response.writeHead(200, { "content-type": "text/html; charset=utf-8" });
+        response.end("<!doctype html><title>Intern connected</title><p>Intern CLI is connected. You can close this window.</p>");
+        settle?.(code);
+    });
+    await new Promise((resolve, rejectListen) => {
+        server.once("error", rejectListen);
+        server.listen(0, "127.0.0.1", () => resolve());
+    });
+    const timer = setTimeout(() => {
+        if (!completed)
+            reject?.(new InternError("oauth_timeout", "Timed out waiting for Intern authorization"));
+    }, timeoutMs);
+    const address = server.address();
+    return {
+        redirectUri: `http://127.0.0.1:${address.port}/callback`,
+        wait: () => result,
+        close: async () => {
+            clearTimeout(timer);
+            if (!server.listening)
+                return;
+            await new Promise((resolve) => server.close(() => resolve()));
+        },
+    };
+}
+function openBrowser(url) {
+    const command = process.platform === "darwin"
+        ? { file: "open", args: [url] }
+        : process.platform === "win32"
+            ? { file: "cmd", args: ["/c", "start", "", url] }
+            : { file: "xdg-open", args: [url] };
+    try {
+        const child = spawn(command.file, command.args, {
+            detached: true,
+            stdio: "ignore",
+        });
+        child.on("error", () => { });
+        child.unref();
+    }
+    catch {
+        // The URL has already been printed for terminals without a browser opener.
+    }
+}
+async function fetchJSON(url, fetchFn) {
+    const response = await fetchFn(url, {
+        redirect: "error",
+        signal: AbortSignal.timeout(30_000),
+        headers: { accept: "application/json" },
+    });
+    const body = await response.json().catch(() => null);
+    if (!response.ok) {
+        throw new InternError("oauth_discovery_failed", `Intern OAuth discovery failed (${remoteError(body, response.status)})`);
+    }
+    return body;
+}
+function metadataEndpoint(value, issuer) {
+    if (typeof value !== "string") {
+        throw new InternError("oauth_discovery_failed", "Intern OAuth metadata omitted an endpoint");
+    }
+    return sameOriginURL(value, issuer);
+}
+function sameOriginURL(value, expectedOrigin) {
+    const url = new URL(value);
+    if (url.origin !== expectedOrigin || url.username || url.password) {
+        throw new InternError("oauth_discovery_failed", "Intern OAuth metadata pointed outside its issuer");
+    }
+    return url.toString().replace(/\/$/, "");
+}
+function remoteError(value, status) {
+    return isRecord(value) && typeof value.error === "string"
+        ? value.error
+        : `HTTP ${status}`;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=oauth.js.map