@botconnector/bccli 0.4.16 → 0.5.0-rc.4

package/dist/chunk-3CYQYHPK.js

@@ -1,202 +0,0 @@
-#!/usr/bin/env node
-import {
-  quarantineCorruptFile,
-  writeFileAtomic
-} from "./chunk-TLCL6DC7.js";
-
-// src/mcp/oauth.ts
-import { spawn } from "child_process";
-import { existsSync, mkdirSync, readFileSync } from "fs";
-import { createServer } from "http";
-import { dirname, join } from "path";
-import { auth } from "@modelcontextprotocol/sdk/client/auth.js";
-var oauthStorePath = (home) => join(home, "mcp-oauth.json");
-function readStore(home) {
-  const path = oauthStorePath(home);
-  if (!existsSync(path)) return {};
-  try {
-    return JSON.parse(readFileSync(path, "utf8"));
-  } catch (error) {
-    quarantineCorruptFile(path, error);
-    return {};
-  }
-}
-function writeStore(home, store) {
-  const path = oauthStorePath(home);
-  mkdirSync(dirname(path), { recursive: true });
-  writeFileAtomic(path, `${JSON.stringify(store, null, 2)}
-`, 384);
-}
-function hasStoredTokens(home, serverUrl) {
-  return Boolean(readStore(home)[serverUrl]?.tokens);
-}
-function clearTokens(home, serverUrl) {
-  const store = readStore(home);
-  const entry = store[serverUrl];
-  if (!entry?.tokens && !entry?.client && !entry?.codeVerifier && !entry?.discovery) return false;
-  delete store[serverUrl];
-  writeStore(home, store);
-  return true;
-}
-function openCommand(url, platform) {
-  if (url.protocol !== "http:" && url.protocol !== "https:") return void 0;
-  if (platform === "win32") return { command: "rundll32.exe", args: ["url.dll,FileProtocolHandler", url.href] };
-  return { command: platform === "darwin" ? "open" : "xdg-open", args: [url.href] };
-}
-function defaultOpen(url, deps = {}) {
-  const plan = openCommand(url, deps.platform ?? process.platform);
-  if (!plan) return;
-  const child = (deps.spawn ?? spawn)(plan.command, plan.args, { detached: true, stdio: "ignore" });
-  child.unref();
-  child.on("error", () => {
-  });
-}
-var FileOAuthProvider = class {
-  opts;
-  constructor(opts) {
-    this.opts = opts;
-  }
-  /**
-   * Always defined: MCP SDK treats a missing redirectUrl as a non-interactive
-   * (client_credentials) flow and would try a token exchange without a code.
-   */
-  get redirectUrl() {
-    return this.opts.redirectUrl ?? "http://127.0.0.1:1/callback";
-  }
-  get clientMetadata() {
-    return {
-      client_name: "BCCLI",
-      redirect_uris: [String(this.redirectUrl)],
-      grant_types: ["authorization_code", "refresh_token"],
-      response_types: ["code"],
-      token_endpoint_auth_method: "none"
-    };
-  }
-  entry() {
-    return readStore(this.opts.home)[this.opts.serverUrl] ?? {};
-  }
-  patch(patch) {
-    const store = readStore(this.opts.home);
-    const next = { ...store[this.opts.serverUrl], ...patch };
-    for (const key of Object.keys(next)) {
-      if (next[key] === void 0) delete next[key];
-    }
-    store[this.opts.serverUrl] = next;
-    if (Object.keys(next).length === 0) delete store[this.opts.serverUrl];
-    writeStore(this.opts.home, store);
-  }
-  clientInformation() {
-    return this.entry().client;
-  }
-  saveClientInformation(clientInformation) {
-    this.patch({ client: clientInformation });
-  }
-  tokens() {
-    return this.entry().tokens;
-  }
-  saveTokens(tokens) {
-    this.patch({ tokens });
-  }
-  saveCodeVerifier(codeVerifier) {
-    this.patch({ codeVerifier });
-  }
-  codeVerifier() {
-    return this.entry().codeVerifier ?? "";
-  }
-  redirectToAuthorization(authorizationUrl) {
-    return (this.opts.open ?? defaultOpen)(authorizationUrl);
-  }
-  saveDiscoveryState(state) {
-    this.patch({ discovery: state });
-  }
-  discoveryState() {
-    return this.entry().discovery;
-  }
-  invalidateCredentials(scope) {
-    if (scope === "all") {
-      this.patch({ client: void 0, tokens: void 0, codeVerifier: void 0, discovery: void 0 });
-      return;
-    }
-    if (scope === "client") this.patch({ client: void 0 });
-    if (scope === "tokens") this.patch({ tokens: void 0 });
-    if (scope === "verifier") this.patch({ codeVerifier: void 0 });
-    if (scope === "discovery") this.patch({ discovery: void 0 });
-  }
-};
-function parseCallback(input) {
-  const url = typeof input === "string" ? new URL(input) : input;
-  const error = url.searchParams.get("error");
-  if (error) {
-    const description = url.searchParams.get("error_description");
-    throw new Error(description ? `OAuth ${error}: ${description}` : `OAuth ${error}`);
-  }
-  const code = url.searchParams.get("code");
-  if (!code) throw new Error("OAuth callback is missing the code parameter.");
-  const state = url.searchParams.get("state") ?? void 0;
-  return { code, state };
-}
-var CALLBACK_TIMEOUT_MS = 18e4;
-async function authorizeMcpServer(spec, deps) {
-  let settle;
-  const codeReceived = new Promise((resolve, reject) => {
-    settle = { resolve, reject };
-  });
-  codeReceived.catch(() => {
-  });
-  const server = createServer((req, res) => {
-    const url = new URL(req.url ?? "/", "http://127.0.0.1");
-    if (url.pathname !== "/callback") {
-      res.writeHead(404);
-      res.end();
-      return;
-    }
-    try {
-      const { code } = parseCallback(url);
-      res.writeHead(200, { "content-type": "text/html; charset=utf-8" });
-      res.end("<html><body><p>BCCLI is connected. You can close this tab.</p></body></html>");
-      settle.resolve(code);
-    } catch (error) {
-      const escaped = error.message.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
-      res.writeHead(400, { "content-type": "text/html; charset=utf-8" });
-      res.end(`<html><body><p>${escaped}</p></body></html>`);
-      settle.reject(error);
-    }
-  });
-  const port = await new Promise((resolve, reject) => {
-    server.once("error", reject);
-    server.listen(0, "127.0.0.1", () => {
-      const address = server.address();
-      resolve(typeof address === "object" && address ? address.port : 0);
-    });
-  });
-  try {
-    const provider = new FileOAuthProvider({
-      home: deps.home,
-      serverUrl: spec.config.url,
-      redirectUrl: `http://127.0.0.1:${port}/callback`,
-      open: deps.open
-    });
-    const serverUrl = new URL(spec.config.url);
-    const result = await auth(provider, { serverUrl, fetchFn: deps.fetchFn });
-    if (result === "AUTHORIZED") return;
-    const timer = setTimeout(() => settle.reject(new Error("Timed out waiting for the OAuth callback.")), CALLBACK_TIMEOUT_MS);
-    let code;
-    try {
-      code = await codeReceived;
-    } finally {
-      clearTimeout(timer);
-    }
-    const second = await auth(provider, { serverUrl, authorizationCode: code, fetchFn: deps.fetchFn });
-    if (second !== "AUTHORIZED") throw new Error("OAuth authorization did not complete.");
-  } finally {
-    server.close();
-  }
-}
-
-export {
-  hasStoredTokens,
-  clearTokens,
-  defaultOpen,
-  FileOAuthProvider,
-  authorizeMcpServer
-};