@cachly-dev/mcp-server 0.10.83 → 0.10.85

package/dist/src/index.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { jwtExpiryMs, checkJwt, handleApiError, diagnoseAuth, planAuthHeal } from './auth.js';
+import { jwtExpiryMs, checkJwt, handleApiError, diagnoseAuth, planAuthHeal, readClientCredentialsFromEnv, buildClientCredentialsBody, clientCredentialsTokenUrl } from './auth.js';
 import { handleTcoTool } from './handlers/tco.js';
 import { notify } from './notifier.js';
 import { fileURLToPath } from 'node:url';
@@ -65,7 +65,7 @@ import { Redis } from 'ioredis';
 let API_URL = process.env.CACHLY_API_URL ?? 'https://api.cachly.dev';
 let JWT = process.env.CACHLY_JWT ?? '';
 const _EMBED_MODEL = process.env.CACHLY_EMBED_MODEL ?? '';
-const CURRENT_VERSION = '0.10.83';
+const CURRENT_VERSION = '0.10.85';
 // Max time to wait for a freshly-provisioned instance to become "running" before
 // giving up. Free-tier provisioning in high-latency regions can take 45–90s, so the
 // old hard-coded 25s caused spurious "instance_not_reachable" on first run.
@@ -1977,6 +1977,36 @@ if (process.argv[2] === 'publish') {
     }
     process.exit(0);
 }
+// ── CLI: cachly tool-specs / openapi ───────────────────────────────────────────
+// Emit the 114-tool surface in any agent framework's dialect, derived from the
+// single TOOLS source of truth. Lets OpenAI Assistants, the Anthropic Messages
+// API, LangChain, CrewAI and AutoGen wrap cachly without hand-written glue.
+//   npx @cachly-dev/mcp-server tool-specs --format=openai   > cachly.openai.json
+//   npx @cachly-dev/mcp-server openapi                      > cachly.openapi.json
+if (process.argv[2] === 'tool-specs' || process.argv[2] === 'openapi') {
+    const { renderToolSpecs } = await import('./toolspecs.js');
+    // Accept both "--format openai" and "--format=openai".
+    let format = 'openapi';
+    if (process.argv[2] !== 'openapi') {
+        const eqArg = process.argv.find(a => a.startsWith('--format='));
+        if (eqArg) {
+            format = eqArg.slice('--format='.length);
+        }
+        else {
+            const fmtFlag = process.argv.indexOf('--format');
+            if (fmtFlag !== -1)
+                format = process.argv[fmtFlag + 1] ?? 'openapi';
+        }
+    }
+    const valid = ['openapi', 'openai', 'anthropic', 'langchain'];
+    if (!valid.includes(format)) {
+        process.stderr.write(`\n❌ Unknown format "${format}". Use one of: ${valid.join(', ')}\n\n`);
+        process.exit(1);
+    }
+    // Exit only after stdout has fully flushed — on a pipe, write() is async and an
+    // immediate process.exit() truncates large payloads (~64KB) mid-flush.
+    process.stdout.write(renderToolSpecs(TOOLS, format, CURRENT_VERSION) + '\n', () => process.exit(0));
+}
 // ── CLI: cachly badge ─────────────────────────────────────────────────────────
 // Outputs the Markdown + HTML snippet for embedding a live Brain lesson-count
 // badge in any README or website. Badge SVG served by cachly API (public, no auth).
@@ -2026,8 +2056,9 @@ if (!process.argv[2] && process.stdout.isTTY) {
     console.log('  cachly gives it a permanent brain — pre-briefed every session.');
     console.log('');
     console.log('  \x1b[1mCommands:\x1b[0m');
-    console.log('  \x1b[32m  npx @cachly-dev/mcp-server@latest demo\x1b[0m     ← Start here (no account)');
-    console.log('  \x1b[32m  npx @cachly-dev/mcp-server@latest setup\x1b[0m    ← Wire up your AI editors');
+    console.log('  \x1b[1m\x1b[32m  npx @cachly-dev/mcp-server@latest autopilot\x1b[0m ← \x1b[1mOne command, fully ready\x1b[0m');
+    console.log('  \x1b[32m  npx @cachly-dev/mcp-server@latest demo\x1b[0m     ← Try it first (no account)');
+    console.log('  \x1b[36m  npx @cachly-dev/mcp-server@latest setup\x1b[0m    ← Interactive setup (pick editors)');
     console.log('  \x1b[36m  npx @cachly-dev/mcp-server@latest health\x1b[0m   ← Check everything works');
     console.log('  \x1b[36m  npx @cachly-dev/mcp-server@latest digest\x1b[0m   ← Weekly Brain summary');
     console.log('  \x1b[36m  npx @cachly-dev/mcp-server@latest share\x1b[0m    ← Share your Brain stats');
@@ -2037,7 +2068,7 @@ if (!process.argv[2] && process.stdout.isTTY) {
     console.log('  \x1b[36m  npx @cachly-dev/mcp-server@latest upgrade\x1b[0m  ← Check for updates');
     console.log('');
     console.log('  \x1b[90mWorks with: Claude Code · Cursor · Windsurf · GitHub Copilot · Cline · Zed\x1b[0m');
-    console.log('  \x1b[90mFree forever · GDPR · German servers · 107 MCP tools\x1b[0m');
+    console.log('  \x1b[90mFree forever · GDPR · German servers · 114 MCP tools\x1b[0m');
     console.log('');
     process.exit(0);
 }
@@ -2453,7 +2484,11 @@ if (process.argv[2] === 'health') {
 }
 // ── CLI: cachly setup (interactive — no flags required) ───────────────────────
 // Usage: npx @cachly-dev/mcp-server setup
-if (process.argv[2] === 'setup') {
+// `autopilot` is the one-command entrypoint: it runs the exact same wizard as
+// `setup` but fully automatic (no prompts) — auth → instance → all editor
+// configs → CLAUDE.md → git/starter bootstrap → health, in a single shot.
+const _isAutopilotCli = process.argv[2] === 'autopilot';
+if (process.argv[2] === 'setup' || _isAutopilotCli) {
     const { writeFile, mkdir, readFile } = await import('node:fs/promises');
     const { existsSync } = await import('node:fs');
     const { resolve, dirname } = await import('node:path');
@@ -2472,8 +2507,12 @@ if (process.argv[2] === 'setup') {
     // a readline question against a non-TTY stdin never resolves and hangs the
     // wizard forever. Treat that exactly like --yes so we never block.
     const stdinIsInteractive = process.stdin.isTTY === true;
-    const nonInteractive = process.argv.includes('--yes') || process.argv.includes('-y') || !stdinIsInteractive;
-    if (!stdinIsInteractive && !process.argv.includes('--yes') && !process.argv.includes('-y')) {
+    // `autopilot` is always fully automatic — it IS the one-step onboarding.
+    const nonInteractive = _isAutopilotCli || process.argv.includes('--yes') || process.argv.includes('-y') || !stdinIsInteractive;
+    if (_isAutopilotCli) {
+        console.log('🤖 Autopilot — one-command setup (auth → instance → configs → Brain), zero prompts.\n');
+    }
+    else if (!stdinIsInteractive && !process.argv.includes('--yes') && !process.argv.includes('-y')) {
         console.log('ℹ️  Non-interactive terminal detected — running in automatic mode (no prompts).\n');
     }
     const rl = createInterface({ input: process.stdin, output: process.stdout });
@@ -2842,22 +2881,40 @@ if (process.argv[2] === 'setup') {
     // ── Step 5b: Bootstrap Brain from git history ─────────────────────────────
     // Pre-populates the Brain with real lessons so the first session_start shows
     // actual project knowledge instead of an empty brain.
+    JWT = token; // set global JWT so handleTool can authenticate
+    let gitLessonCount = 0;
     if (existsSync(resolve(cwd, '.git'))) {
         process.stdout.write('⏳ Bootstrapping Brain from git history (~10s)...');
         try {
-            JWT = token; // set global JWT so handleTool can authenticate
             const gitResult = await handleTool('brain_from_git', {
                 instance_id: instance.id,
                 repo_path: cwd,
                 limit: 100,
             });
             const match = gitResult.match(/(\d+) lesson/);
+            gitLessonCount = match ? parseInt(match[1], 10) : 0;
             console.log(` ✓  ${match ? match[1] + ' lessons' : 'done'} extracted from git history`);
         }
         catch (e) {
             console.log(` (skipped: ${e.message.slice(0, 80)})`);
         }
     }
+    // ── Step 5c: Seed the starter corpus when git yielded nothing ─────────────
+    // Closes the empty-brain gap: a fresh repo (no .git, shallow clone, or no
+    // fix-shaped commits) would otherwise leave the Brain empty and the very first
+    // smart_recall returning nothing. Seeding 16 curated universal lessons makes
+    // the single setup command produce an immediately-useful Brain — true 1-step
+    // onboarding. Idempotent; never overwrites real lessons.
+    if (gitLessonCount === 0) {
+        process.stdout.write('🌱 Seeding 16 universal engineering lessons (first recall works instantly)...');
+        try {
+            await handleTool('brain_seed_starter', { instance_id: instance.id });
+            console.log(' ✓');
+        }
+        catch (e) {
+            console.log(` (skipped: ${e.message.slice(0, 60)})`);
+        }
+    }
     // ── Step 6: Show Brain health (Aha moment) ────────────────────────────────
     // Fetch brain health from the API to show the user what their agent will see.
     process.stdout.write('\n⏳ Fetching your Brain health preview...');
@@ -3103,6 +3160,40 @@ if (process.argv[2] === 'learn-git') {
     process.exit(0);
 }
 // ── Start ─────────────────────────────────────────────────────────────────────
+// M2M / headless auth: if no JWT but client credentials are present, run the
+// OAuth2 client_credentials grant before any credential-missing handling. This
+// makes cachly fully non-interactive for CI runners, agent orchestrators and
+// AI-to-AI pipelines — no device flow, no human, no browser.
+if (!JWT) {
+    const creds = readClientCredentialsFromEnv();
+    if (creds) {
+        try {
+            const res = await fetch(clientCredentialsTokenUrl(creds), {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+                body: buildClientCredentialsBody(creds),
+                signal: AbortSignal.timeout(8000),
+            });
+            if (res.ok) {
+                const tok = await res.json();
+                if (tok.access_token) {
+                    JWT = tok.access_token;
+                    setEmbedJwt(tok.access_token);
+                    sendFunnelEvent('m2m_auth_completed', { grant: 'client_credentials', client_id: creds.clientId });
+                    process.stderr.write('🤖 cachly: authenticated via client_credentials (M2M, headless).\n');
+                }
+            }
+            else {
+                process.stderr.write(`⚠️  cachly: client_credentials auth failed (${res.status}). Check CACHLY_CLIENT_ID / CACHLY_CLIENT_SECRET.\n`);
+                sendFunnelEvent('m2m_auth_failed', { status: res.status });
+            }
+        }
+        catch (err) {
+            process.stderr.write(`⚠️  cachly: client_credentials auth error: ${err.message}\n`);
+            sendFunnelEvent('m2m_auth_failed', { reason: 'network' });
+        }
+    }
+}
 // Credential-missing handling at startup. The critical distinction is HOW we were
 // launched, because writing anything to stdout in stdio-MCP mode corrupts the
 // JSON-RPC stream and exiting kills the zero-credential device-flow onboarding.
@@ -3110,7 +3201,7 @@ if (process.argv[2] === 'learn-git') {
 //   • Editor as an MCP stdio server (non-TTY)  → ONE stderr hint, then KEEP RUNNING
 //     so tools/list works and the first tool call starts the browser sign-in.
 // Skip entirely for CLI subcommands that intentionally run without credentials.
-const _cliNoAuthCommands = ['demo', 'share', 'publish', 'health', 'setup', 'init', 'digest', 'invite', 'badge', 'join', 'upgrade'];
+const _cliNoAuthCommands = ['demo', 'share', 'publish', 'health', 'setup', 'autopilot', 'init', 'digest', 'invite', 'badge', 'join', 'upgrade', 'tool-specs', 'openapi'];
 if (!JWT && !_cliNoAuthCommands.includes(process.argv[2] ?? '')) {
     const runningInTerminal = !process.argv[2] && process.stdout.isTTY === true && _isMain;
     if (runningInTerminal) {