@cachly-dev/mcp-server 0.10.65 → 0.10.66

package/apps/travel-chaos-organizer/telegram-bot/bot.py

@@ -1,504 +0,0 @@
-"""
-TCO Telegram Bot
-Commands: /start /link /unlink /trips /next /inbox /status /help
-Forward any document/image/text → parsed via TCO AI
-Inline keyboards for trip assignment
-"""
-import logging
-import os
-from dotenv import load_dotenv
-import httpx
-from telegram import (
-    Update, InlineKeyboardButton, InlineKeyboardMarkup,
-)
-from telegram.ext import (
-    Application, CallbackQueryHandler, CommandHandler,
-    ContextTypes, MessageHandler, filters,
-)
-
-load_dotenv()
-TOKEN = os.environ["TELEGRAM_BOT_TOKEN"]
-API_URL = os.environ.get("TCO_API_URL", "http://localhost:8000")
-BOT_SECRET = os.environ.get("TCO_BOT_SECRET", TOKEN)
-
-logging.basicConfig(level=logging.INFO)
-log = logging.getLogger(__name__)
-
-_ICONS = {
-    "flight": "✈️", "train": "🚂", "bus": "🚌", "hotel": "🏨",
-    "rental_car": "🚗", "activity": "🎡", "transfer": "🚕",
-    "document": "📄", "other": "📋",
-}
-
-
-# ── Auth helpers ────────────────────────────────────────────────────────────────
-
-def _bot_headers(user_id: str | None = None) -> dict:
-    h = {"X-Bot-Token": BOT_SECRET}
-    if user_id:
-        h["X-User-Id"] = user_id
-    return h
-
-
-async def get_linked_user(chat_id: str) -> dict | None:
-    async with httpx.AsyncClient(timeout=10) as c:
-        r = await c.get(
-            f"{API_URL}/api/v1/users/by-telegram/{chat_id}",
-            headers=_bot_headers(),
-        )
-        if r.status_code == 200:
-            return r.json()
-    return None
-
-
-async def _require_link(update: Update) -> dict | None:
-    """Return linked user or send prompt and return None."""
-    user = await get_linked_user(str(update.effective_chat.id))
-    if not user:
-        await update.message.reply_text(
-            "🔗 Bitte zuerst Konto verknüpfen:\n\n"
-            "1. TCO-App → Einstellungen → *Mit Telegram verknüpfen*\n"
-            "2. Sende mir den PIN: `/link 123456`",
-            parse_mode="Markdown",
-        )
-    return user
-
-
-# ── Commands ────────────────────────────────────────────────────────────────────
-
-async def cmd_start(update: Update, ctx: ContextTypes.DEFAULT_TYPE):
-    chat_id = str(update.effective_chat.id)
-    user = await get_linked_user(chat_id)
-    if user:
-        await update.message.reply_text(
-            f"👋 Willkommen zurück!\n\n"
-            f"Plan: *{'✦ Pro' if user.get('plan') == 'pro' else 'Free'}*\n\n"
-            f"/trips — Reisen anzeigen\n/next — Nächstes Event\n/inbox — Chaos Inbox",
-            parse_mode="Markdown",
-        )
-    else:
-        await update.message.reply_text(
-            "✈️ *Travel Chaos Organizer Bot*\n\n"
-            "Ich helfe dir, deine Reisedokumente zu verwalten.\n\n"
-            "*Erste Schritte:*\n"
-            "1. Öffne die TCO-App → Einstellungen → Telegram verknüpfen\n"
-            "2. Du bekommst einen 6-stelligen PIN\n"
-            "3. Schreib mir: `/link 123456`\n\n"
-            "Danach kannst du mir Buchungsbestätigungen, Screenshots oder PDFs schicken!",
-            parse_mode="Markdown",
-        )
-
-
-async def cmd_help(update: Update, ctx: ContextTypes.DEFAULT_TYPE):
-    await update.message.reply_text(
-        "*TCO Bot — Befehle:*\n\n"
-        "/trips — Deine Reisen\n"
-        "/next — Nächstes Event\n"
-        "/inbox — Chaos Inbox\n"
-        "/status — Kontostatus\n"
-        "/link \\<PIN\\> — Konto verknüpfen\n"
-        "/unlink — Verknüpfung aufheben\n"
-        "/help — Diese Hilfe\n\n"
-        "*Dokumente senden:*\n"
-        "Einfach Buchungsbestätigung, PDF oder Screenshot schicken — wird automatisch mit KI geparst ✨\n\n"
-        "*Text senden:*\n"
-        "Buchungsbestätigung als Text einfügen und senden.",
-        parse_mode="Markdown",
-    )
-
-
-async def cmd_link(update: Update, ctx: ContextTypes.DEFAULT_TYPE):
-    if not ctx.args:
-        await update.message.reply_text("Bitte PIN angeben: `/link 123456`", parse_mode="Markdown")
-        return
-    pin = ctx.args[0].strip()
-    chat_id = str(update.effective_chat.id)
-    async with httpx.AsyncClient(timeout=10) as c:
-        r = await c.post(
-            f"{API_URL}/api/v1/users/telegram-link",
-            params={"pin": pin, "chat_id": chat_id},
-        )
-    if r.status_code == 200:
-        await update.message.reply_text(
-            "✅ *Konto erfolgreich verknüpft!*\n\n"
-            "Du kannst jetzt:\n"
-            "• Buchungsbestätigungen oder PDFs schicken → werden automatisch geparst\n"
-            "• /trips — Reisen anzeigen\n"
-            "• /inbox — Chaos Inbox verwalten\n"
-            "• /next — Nächstes Event anzeigen",
-            parse_mode="Markdown",
-        )
-    elif r.status_code == 410:
-        await update.message.reply_text("⏰ PIN abgelaufen. Bitte neuen PIN in der App generieren.")
-    elif r.status_code == 404:
-        await update.message.reply_text("❌ PIN nicht gefunden. Bitte prüfe die Eingabe.")
-    else:
-        await update.message.reply_text("⚠️ Fehler beim Verknüpfen. Bitte versuche es erneut.")
-
-
-async def cmd_unlink(update: Update, ctx: ContextTypes.DEFAULT_TYPE):
-    user = await _require_link(update)
-    if not user:
-        return
-    keyboard = InlineKeyboardMarkup([[
-        InlineKeyboardButton("✅ Ja, trennen", callback_data="unlink:confirm"),
-        InlineKeyboardButton("❌ Abbrechen", callback_data="unlink:cancel"),
-    ]])
-    await update.message.reply_text(
-        "⚠️ Telegram-Verknüpfung aufheben?\n\nDu erhältst dann keine Bot-Nachrichten mehr.",
-        reply_markup=keyboard,
-    )
-
-
-async def cmd_status(update: Update, ctx: ContextTypes.DEFAULT_TYPE):
-    chat_id = str(update.effective_chat.id)
-    user = await get_linked_user(chat_id)
-    if not user:
-        await update.message.reply_text(
-            "🔴 Konto *nicht verknüpft*\n\nNutze `/link <PIN>` zum Verbinden.",
-            parse_mode="Markdown",
-        )
-        return
-    plan = user.get("plan", "free")
-    plan_label = "✦ Pro" if plan == "pro" else "Free"
-    await update.message.reply_text(
-        f"✅ *Konto verknüpft*\n\nPlan: *{plan_label}*\n\nTelegramm-Chat-ID: `{chat_id}`",
-        parse_mode="Markdown",
-    )
-
-
-async def cmd_trips(update: Update, ctx: ContextTypes.DEFAULT_TYPE):
-    user = await _require_link(update)
-    if not user:
-        return
-    async with httpx.AsyncClient(timeout=10) as c:
-        r = await c.get(f"{API_URL}/api/v1/trips", headers=_bot_headers(user["id"]))
-    if r.status_code != 200:
-        await update.message.reply_text("⚠️ Fehler beim Laden der Trips.")
-        return
-    trips = r.json()
-    if not trips:
-        await update.message.reply_text("📭 Noch keine Trips. Erstelle deinen ersten Trip in der TCO-App!")
-        return
-    # Build inline keyboard — each trip is a button to view its timeline
-    buttons = [
-        [InlineKeyboardButton(
-            f"{'✈️ ' if t.get('start_date') else '📋 '}{t['name']}",
-            callback_data=f"trip:{t['id']}:{t['name'][:20]}",
-        )]
-        for t in trips[:8]
-    ]
-    await update.message.reply_text(
-        f"🗺️ *Deine Trips ({len(trips)}):*",
-        reply_markup=InlineKeyboardMarkup(buttons),
-        parse_mode="Markdown",
-    )
-
-
-async def cmd_next(update: Update, ctx: ContextTypes.DEFAULT_TYPE):
-    user = await _require_link(update)
-    if not user:
-        return
-    async with httpx.AsyncClient(timeout=10) as c:
-        r = await c.get(f"{API_URL}/api/v1/trips", headers=_bot_headers(user["id"]))
-    if r.status_code != 200 or not r.json():
-        await update.message.reply_text("Keine Trips gefunden.")
-        return
-    from datetime import datetime, timezone
-    today = datetime.now(timezone.utc).date().isoformat()
-    upcoming = [t for t in r.json() if t.get("start_date") and t["start_date"] >= today]
-    if not upcoming:
-        await update.message.reply_text("📭 Kein bevorstehender Trip gefunden.")
-        return
-    t = upcoming[0]
-    start = t.get("start_date", "?")[:10]
-    end = t.get("end_date", "?")[:10] if t.get("end_date") else "?"
-    days = ""
-    try:
-        from datetime import date
-        d = (date.fromisoformat(start) - date.today()).days
-        days = f" (in {d} {'Tag' if d == 1 else 'Tagen'})"
-    except Exception:
-        pass
-    keyboard = InlineKeyboardMarkup([[
-        InlineKeyboardButton("📅 Timeline anzeigen", callback_data=f"trip:{t['id']}:{t['name'][:20]}"),
-    ]])
-    await update.message.reply_text(
-        f"🗓️ *Nächster Trip:*\n\n*{t['name']}*\nStart: {start}{days}\nEnde: {end}",
-        reply_markup=keyboard,
-        parse_mode="Markdown",
-    )
-
-
-async def cmd_inbox(update: Update, ctx: ContextTypes.DEFAULT_TYPE):
-    user = await _require_link(update)
-    if not user:
-        return
-    async with httpx.AsyncClient(timeout=10) as c:
-        r = await c.get(
-            f"{API_URL}/api/v1/inbox?status_filter=pending",
-            headers=_bot_headers(user["id"]),
-        )
-    if r.status_code != 200:
-        await update.message.reply_text("⚠️ Fehler beim Laden des Inbox.")
-        return
-    items = r.json()
-    if not items:
-        await update.message.reply_text("🎉 Chaos Inbox ist leer!")
-        return
-    # Show first 5 items with assign/reject buttons
-    for item in items[:5]:
-        pd = item.get("parsed_data") or {}
-        title = pd.get("title") or "(kein Titel)"
-        itype = pd.get("type") or "other"
-        icon = _ICONS.get(itype, "📋")
-        provider = pd.get("provider") or ""
-        ref = pd.get("booking_ref") or ""
-        lines = [f"{icon} *{title}*"]
-        if provider:
-            lines.append(f"Anbieter: {provider}")
-        if ref:
-            lines.append(f"Ref: `{ref}`")
-        keyboard = InlineKeyboardMarkup([[
-            InlineKeyboardButton("✈️ Trip zuweisen", callback_data=f"assign:{item['id']}:pick"),
-            InlineKeyboardButton("🗑️ Löschen", callback_data=f"reject:{item['id']}"),
-        ]])
-        await update.message.reply_text(
-            "\n".join(lines),
-            reply_markup=keyboard,
-            parse_mode="Markdown",
-        )
-    if len(items) > 5:
-        await update.message.reply_text(f"… und {len(items) - 5} weitere. Öffne die App für die vollständige Ansicht.")
-
-
-# ── Callback query handlers ─────────────────────────────────────────────────────
-
-async def handle_callback(update: Update, ctx: ContextTypes.DEFAULT_TYPE):
-    query = update.callback_query
-    await query.answer()
-    data = query.data or ""
-    chat_id = str(update.effective_chat.id)
-    user = await get_linked_user(chat_id)
-    if not user:
-        await query.edit_message_text("⚠️ Konto nicht verknüpft. Nutze /link.")
-        return
-
-    # ── unlink confirm/cancel ──────────────────────────────────────────────
-    if data == "unlink:confirm":
-        async with httpx.AsyncClient(timeout=10) as c:
-            await c.delete(
-                f"{API_URL}/api/v1/users/telegram-unlink",
-                headers={"Authorization": f"X-User-Id {user['id']}", **_bot_headers(user["id"])},
-            )
-        await query.edit_message_text("✅ Verknüpfung aufgehoben. Auf Wiedersehen!")
-        return
-    if data == "unlink:cancel":
-        await query.edit_message_text("❌ Abgebrochen. Verknüpfung bleibt bestehen.")
-        return
-
-    # ── show trip timeline ─────────────────────────────────────────────────
-    if data.startswith("trip:"):
-        parts = data.split(":", 2)
-        trip_id = parts[1]
-        trip_name = parts[2] if len(parts) > 2 else "Trip"
-        async with httpx.AsyncClient(timeout=10) as c:
-            r = await c.get(f"{API_URL}/api/v1/trips/{trip_id}/items", headers=_bot_headers(user["id"]))
-        if r.status_code != 200 or not r.json():
-            await query.edit_message_text(f"📂 *{trip_name}* hat noch keine Einträge.", parse_mode="Markdown")
-            return
-        items = r.json()
-        lines = [f"📅 *{trip_name}* — {len(items)} Einträge\n"]
-        for i in items[:10]:
-            icon = _ICONS.get(i.get("type", "other"), "📋")
-            time = i.get("event_at", "")[:16].replace("T", " ") if i.get("event_at") else ""
-            lines.append(f"{icon} *{i['title']}*{(' · ' + time) if time else ''}")
-        if len(items) > 10:
-            lines.append(f"… +{len(items) - 10} weitere")
-        await query.edit_message_text("\n".join(lines), parse_mode="Markdown")
-        return
-
-    # ── assign inbox item — pick trip ──────────────────────────────────────
-    if data.startswith("assign:") and data.endswith(":pick"):
-        inbox_id = data.split(":")[1]
-        async with httpx.AsyncClient(timeout=10) as c:
-            r = await c.get(f"{API_URL}/api/v1/trips", headers=_bot_headers(user["id"]))
-        trips = r.json() if r.status_code == 200 else []
-        if not trips:
-            await query.edit_message_text("📭 Keine Trips vorhanden. Erstelle zuerst einen Trip in der App.")
-            return
-        buttons = [
-            [InlineKeyboardButton(t["name"], callback_data=f"assign:{inbox_id}:{t['id']}")]
-            for t in trips[:8]
-        ]
-        buttons.append([InlineKeyboardButton("❌ Abbrechen", callback_data=f"assign:{inbox_id}:cancel")])
-        await query.edit_message_reply_markup(InlineKeyboardMarkup(buttons))
-        return
-
-    if data.startswith("assign:") and data.endswith(":cancel"):
-        await query.edit_message_reply_markup(None)
-        return
-
-    # ── assign inbox item to specific trip ─────────────────────────────────
-    if data.startswith("assign:"):
-        parts = data.split(":", 2)
-        inbox_id, trip_id = parts[1], parts[2]
-        if trip_id in ("pick", "cancel"):
-            return
-        async with httpx.AsyncClient(timeout=10) as c:
-            r = await c.post(
-                f"{API_URL}/api/v1/inbox/{inbox_id}/assign",
-                json={"trip_id": trip_id, "type": "other"},
-                headers=_bot_headers(user["id"]),
-            )
-        if r.status_code == 200:
-            await query.edit_message_text("✅ Dem Trip zugewiesen!", parse_mode="Markdown")
-        else:
-            await query.edit_message_text(f"⚠️ Fehler beim Zuweisen ({r.status_code}).")
-        return
-
-    # ── reject inbox item ──────────────────────────────────────────────────
-    if data.startswith("reject:"):
-        inbox_id = data.split(":")[1]
-        async with httpx.AsyncClient(timeout=10) as c:
-            await c.delete(f"{API_URL}/api/v1/inbox/{inbox_id}", headers=_bot_headers(user["id"]))
-        await query.edit_message_text("🗑️ Gelöscht.")
-        return
-
-
-# ── Message handlers ────────────────────────────────────────────────────────────
-
-async def handle_document(update: Update, ctx: ContextTypes.DEFAULT_TYPE):
-    user = await _require_link(update)
-    if not user:
-        return
-    msg = await update.message.reply_text("⏳ Analysiere Dokument…")
-    doc = update.message.document
-    photo = update.message.photo
-    try:
-        if photo:
-            file = await ctx.bot.get_file(photo[-1].file_id)
-            mime, fname = "image/jpeg", "photo.jpg"
-        elif doc:
-            file = await ctx.bot.get_file(doc.file_id)
-            mime = doc.mime_type or "application/octet-stream"
-            fname = doc.file_name or "document"
-        else:
-            await msg.edit_text("⚠️ Kein Dokument erkannt.")
-            return
-        file_bytes = await file.download_as_bytearray()
-        async with httpx.AsyncClient(timeout=60) as c:
-            r = await c.post(
-                f"{API_URL}/api/v1/parse/file",
-                files={"file": (fname, bytes(file_bytes), mime)},
-                headers=_bot_headers(user["id"]),
-            )
-        if r.status_code == 200:
-            parsed = r.json().get("parsed", {})
-            title = parsed.get("title") or "Dokument"
-            itype = parsed.get("type") or "other"
-            icon = _ICONS.get(itype, "📋")
-            ref = parsed.get("booking_ref") or ""
-            provider = parsed.get("provider") or ""
-            event_at = parsed.get("event_at") or ""
-            lines = [f"{icon} *{title}*", f"Typ: {itype}"]
-            if provider:
-                lines.append(f"Anbieter: {provider}")
-            if ref:
-                lines.append(f"Ref: `{ref}`")
-            if event_at:
-                lines.append(f"Datum: {event_at[:16].replace('T', ' ')}")
-            lines.append("\n📥 Im Chaos Inbox")
-            # Fetch trips for inline assignment
-            async with httpx.AsyncClient(timeout=10) as c2:
-                trips_r = await c2.get(f"{API_URL}/api/v1/trips", headers=_bot_headers(user["id"]))
-            inbox_id = r.json().get("inbox_id")
-            keyboard = None
-            if inbox_id and trips_r.status_code == 200 and trips_r.json():
-                trips = trips_r.json()[:6]
-                buttons = [
-                    [InlineKeyboardButton(f"➡️ {t['name']}", callback_data=f"assign:{inbox_id}:{t['id']}")]
-                    for t in trips
-                ]
-                buttons.append([InlineKeyboardButton("🗑️ Ablehnen", callback_data=f"reject:{inbox_id}")])
-                keyboard = InlineKeyboardMarkup(buttons)
-            await msg.edit_text(
-                "\n".join(lines),
-                reply_markup=keyboard,
-                parse_mode="Markdown",
-            )
-        elif r.status_code == 429:
-            await msg.edit_text("⚠️ Tageslimit erreicht. Morgen wieder verfügbar (oder auf Pro upgraden).")
-        else:
-            await msg.edit_text(f"⚠️ Fehler beim Parsen ({r.status_code}). Prüfe Ollama.")
-    except Exception:
-        log.exception("handle_document error")
-        await msg.edit_text("⚠️ Technischer Fehler. Bitte versuche es erneut.")
-
-
-async def handle_text(update: Update, ctx: ContextTypes.DEFAULT_TYPE):
-    text = update.message.text or ""
-    if text.startswith("/"):
-        return
-    user = await _require_link(update)
-    if not user:
-        return
-    if len(text) < 20:
-        await update.message.reply_text("Text zu kurz zum Parsen. Bitte Buchungsbestätigung oder E-Mail einfügen.")
-        return
-    msg = await update.message.reply_text("⏳ Analysiere Text…")
-    async with httpx.AsyncClient(timeout=60) as c:
-        r = await c.post(
-            f"{API_URL}/api/v1/parse/text",
-            data={"raw_text": text},
-            headers=_bot_headers(user["id"]),
-        )
-    if r.status_code == 200:
-        parsed = r.json().get("parsed", {})
-        title = parsed.get("title") or "Text"
-        itype = parsed.get("type") or "other"
-        icon = _ICONS.get(itype, "📋")
-        inbox_id = r.json().get("inbox_id")
-        # Build inline keyboard for assignment
-        keyboard = None
-        if inbox_id:
-            async with httpx.AsyncClient(timeout=10) as c2:
-                trips_r = await c2.get(f"{API_URL}/api/v1/trips", headers=_bot_headers(user["id"]))
-            if trips_r.status_code == 200 and trips_r.json():
-                trips = trips_r.json()[:6]
-                buttons = [
-                    [InlineKeyboardButton(f"➡️ {t['name']}", callback_data=f"assign:{inbox_id}:{t['id']}")]
-                    for t in trips
-                ]
-                buttons.append([InlineKeyboardButton("🗑️ Ablehnen", callback_data=f"reject:{inbox_id}")])
-                keyboard = InlineKeyboardMarkup(buttons)
-        await msg.edit_text(
-            f"{icon} *{title}* erkannt und im Inbox gespeichert.",
-            reply_markup=keyboard,
-            parse_mode="Markdown",
-        )
-    elif r.status_code == 429:
-        await msg.edit_text("⚠️ Tageslimit erreicht.")
-    else:
-        await msg.edit_text("⚠️ Konnte Text nicht parsen.")
-
-
-def main():
-    app = Application.builder().token(TOKEN).build()
-    app.add_handler(CommandHandler("start", cmd_start))
-    app.add_handler(CommandHandler("help", cmd_help))
-    app.add_handler(CommandHandler("link", cmd_link))
-    app.add_handler(CommandHandler("unlink", cmd_unlink))
-    app.add_handler(CommandHandler("status", cmd_status))
-    app.add_handler(CommandHandler("trips", cmd_trips))
-    app.add_handler(CommandHandler("next", cmd_next))
-    app.add_handler(CommandHandler("inbox", cmd_inbox))
-    app.add_handler(CallbackQueryHandler(handle_callback))
-    app.add_handler(MessageHandler(filters.Document.ALL | filters.PHOTO, handle_document))
-    app.add_handler(MessageHandler(filters.TEXT & ~filters.COMMAND, handle_text))
-    log.info("TCO Bot starting…")
-    app.run_polling(drop_pending_updates=True)
-
-
-if __name__ == "__main__":
-    main()

package/apps/travel-chaos-organizer/telegram-bot/requirements.txt

@@ -1,3 +0,0 @@
-python-telegram-bot==21.6
-httpx==0.27.2
-python-dotenv==1.0.1

package/dist/src/__tests__/auth.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/src/__tests__/auth.test.js

@@ -1,107 +0,0 @@
-import { describe, it, expect } from 'vitest';
-import { ErrorCode } from '@modelcontextprotocol/sdk/types.js';
-import { jwtExpiryMs, checkJwt, handleApiError } from '../auth.js';
-function makeJwt(payload) {
-    const header = Buffer.from(JSON.stringify({ alg: 'HS256', typ: 'JWT' })).toString('base64url');
-    const body = Buffer.from(JSON.stringify(payload)).toString('base64url');
-    return `${header}.${body}.fakesig`;
-}
-const nowSec = () => Math.floor(Date.now() / 1000);
-describe('jwtExpiryMs', () => {
-    it('returns null for an empty string', () => {
-        expect(jwtExpiryMs('')).toBeNull();
-    });
-    it('returns null for a plain (non-JWT) string', () => {
-        expect(jwtExpiryMs('not-a-token')).toBeNull();
-    });
-    it('returns null when the JWT has only two parts', () => {
-        expect(jwtExpiryMs('header.payload')).toBeNull();
-    });
-    it('returns null when the JWT has four parts', () => {
-        expect(jwtExpiryMs('a.b.c.d')).toBeNull();
-    });
-    it('returns null when the payload base64 is invalid', () => {
-        expect(jwtExpiryMs('header.!!!.sig')).toBeNull();
-    });
-    it('returns null when the payload has no exp field', () => {
-        expect(jwtExpiryMs(makeJwt({ sub: 'user-123', iat: nowSec() }))).toBeNull();
-    });
-    it('returns null when exp is 0', () => {
-        expect(jwtExpiryMs(makeJwt({ exp: 0 }))).toBeNull();
-    });
-    it('converts exp (seconds) to milliseconds', () => {
-        const expSec = nowSec() + 3600;
-        expect(jwtExpiryMs(makeJwt({ exp: expSec }))).toBe(expSec * 1000);
-    });
-    it('returns a past timestamp for an expired token', () => {
-        expect(jwtExpiryMs(makeJwt({ exp: nowSec() - 300 }))).toBeLessThan(Date.now());
-    });
-    it('returns a future timestamp for a valid token', () => {
-        expect(jwtExpiryMs(makeJwt({ exp: nowSec() + 86400 }))).toBeGreaterThan(Date.now());
-    });
-    it('handles a token expiring in less than 60 minutes', () => {
-        const expSec = nowSec() + 30 * 60;
-        const result = jwtExpiryMs(makeJwt({ exp: expSec }));
-        const minsLeft = Math.floor((result - Date.now()) / 60_000);
-        expect(minsLeft).toBeGreaterThanOrEqual(29);
-        expect(minsLeft).toBeLessThanOrEqual(30);
-    });
-    it('ignores extra claims', () => {
-        const expSec = nowSec() + 3600;
-        expect(jwtExpiryMs(makeJwt({ sub: 'u', iat: nowSec(), exp: expSec, plan: 'free' }))).toBe(expSec * 1000);
-    });
-    it('handles padding-free base64url payloads', () => {
-        // base64url (no =) — Buffer.from handles this natively
-        const expSec = nowSec() + 7200;
-        expect(jwtExpiryMs(makeJwt({ exp: expSec, x: 'a' }))).toBe(expSec * 1000);
-    });
-});
-describe('checkJwt', () => {
-    it('throws InvalidRequest when jwt is empty', () => {
-        expect(() => checkJwt('')).toThrowError(expect.objectContaining({ code: ErrorCode.InvalidRequest, message: expect.stringContaining('CACHLY_JWT env var not set') }));
-    });
-    it('throws with setup URL when jwt is missing', () => {
-        expect(() => checkJwt('')).toThrowError(expect.objectContaining({ message: expect.stringContaining('cachly.dev/setup-ai') }));
-    });
-    it('throws InvalidRequest with expiry timestamp for an expired token', () => {
-        const expSec = nowSec() - 60;
-        const token = makeJwt({ exp: expSec });
-        expect(() => checkJwt(token)).toThrowError(expect.objectContaining({
-            code: ErrorCode.InvalidRequest,
-            message: expect.stringContaining('expired at'),
-        }));
-    });
-    it('does not throw for a valid non-expired token', () => {
-        expect(() => checkJwt(makeJwt({ exp: nowSec() + 3600 }))).not.toThrow();
-    });
-    it('does not throw for a token with no exp claim', () => {
-        expect(() => checkJwt(makeJwt({ sub: 'user' }))).not.toThrow();
-    });
-});
-describe('handleApiError', () => {
-    it('throws InvalidRequest for 401 with the detail message', () => {
-        expect(() => handleApiError(401, 'token expired')).toThrowError(expect.objectContaining({
-            code: ErrorCode.InvalidRequest,
-            message: expect.stringContaining('Authentication failed (401): token expired'),
-        }));
-    });
-    it('throws InvalidRequest for 403 with the detail message', () => {
-        expect(() => handleApiError(403, 'plan limit reached')).toThrowError(expect.objectContaining({
-            code: ErrorCode.InvalidRequest,
-            message: expect.stringContaining('Access denied (403): plan limit reached'),
-        }));
-    });
-    it('throws InternalError for other status codes', () => {
-        expect(() => handleApiError(500, 'server crash')).toThrowError(expect.objectContaining({
-            code: ErrorCode.InternalError,
-            message: expect.stringContaining('cachly API error 500: server crash'),
-        }));
-    });
-    it('includes the cachly.dev/setup-ai link for 401 errors', () => {
-        expect(() => handleApiError(401, 'Unauthorized')).toThrowError(expect.objectContaining({ message: expect.stringContaining('cachly.dev/setup-ai') }));
-    });
-    it('includes account access hint for 403 errors', () => {
-        expect(() => handleApiError(403, 'Forbidden')).toThrowError(expect.objectContaining({ message: expect.stringContaining('access to this resource') }));
-    });
-});
-//# sourceMappingURL=auth.test.js.map

package/dist/src/__tests__/auth.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.test.js","sourceRoot":"","sources":["../../../src/__tests__/auth.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEnE,SAAS,OAAO,CAAC,OAAgC;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC/F,MAAM,IAAI,GAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1E,OAAO,GAAG,MAAM,IAAI,IAAI,UAAU,CAAC;AACrC,CAAC;AAED,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AAEnD,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;QAC/B,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,MAAM,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAE,CAAC;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,CAAC,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;QAC/B,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC3G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,uDAAuD;QACvD,MAAM,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;QAC/B,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CACrC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,4BAA4B,CAAC,EAAE,CAAC,CAC5H,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CACrC,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,EAAE,CAAC,CACrF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,MAAM,GAAG,MAAM,EAAE,GAAG,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAI,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CACxC,MAAM,CAAC,gBAAgB,CAAC;YACtB,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,YAAY,CAAC;SAC/C,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC,YAAY,CAC7D,MAAM,CAAC,gBAAgB,CAAC;YACtB,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,4CAA4C,CAAC;SAC/E,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC,CAAC,YAAY,CAClE,MAAM,CAAC,gBAAgB,CAAC;YACtB,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,yCAAyC,CAAC;SAC5E,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,YAAY,CAC5D,MAAM,CAAC,gBAAgB,CAAC;YACtB,IAAI,EAAE,SAAS,CAAC,aAAa;YAC7B,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,oCAAoC,CAAC;SACvE,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,YAAY,CAC5D,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,EAAE,CAAC,CACrF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,YAAY,CACzD,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,yBAAyB,CAAC,EAAE,CAAC,CACzF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/__tests__/brain-flow.test.d.ts

@@ -1,12 +0,0 @@
-/**
- * Use-case tests for the Cachly Brain flow.
- *
- * Tests the core Brain operations end-to-end using an in-memory Redis mock:
- *   learn_from_attempts → CKG update → recall_best_solution (BM25)
- *   session_start → lessons summary
- *   CKG: Bayesian confidence, contradiction detection
- *   Embeddings: provider detection, config sync
- *
- * Run: npx vitest run src/__tests__/brain-flow.test.ts
- */
-export {};