@carrierllc/mcp 0.7.0 → 0.8.0

package/dist/cli.js

@@ -39,7 +39,7 @@ import {
   verifyStorefront,
   walletScreen,
   which
-} from "./chunk-CQ6EOLA7.js";
+} from "./chunk-JROD4YAU.js";
 import {
   copyTree,
   exists,
@@ -97,6 +97,7 @@ var MCP_URL = "https://mcp.carrier.llc/mcp";
 var API_URL = "https://api.carrier.llc";
 var MCP_HOME = "https://mcp.carrier.llc";
 var SIGN_UP_URL = "https://accounts.carrier.llc/sign-up";
+var CLERK_FAPI_URL = "https://clerk.carrier.llc";
 var SIGN_IN_URL = "https://accounts.carrier.llc/sign-in";
 var CONSOLE_URL = "https://app.carrier.llc";
 var ONBOARDING_URL = "https://app.carrier.llc/onboarding";
@@ -1287,6 +1288,214 @@ async function runHome(opts) {
   }
 }
 
+// src/cli/lib/signup.ts
+var DEFAULT_MAX_CODE_ATTEMPTS = 3;
+function parseEnvironment(raw) {
+  const env = raw ?? {};
+  const signUp = env.user_settings?.sign_up ?? {};
+  const display = env.display_config ?? {};
+  const result = {
+    legalConsentRequired: signUp.legal_consent_enabled === true,
+    captchaEnabled: signUp.captcha_enabled === true
+  };
+  if (display.terms_url) result.termsUrl = display.terms_url;
+  if (display.privacy_policy_url) result.privacyUrl = display.privacy_policy_url;
+  return result;
+}
+async function readSignupEnvironment(fetchImpl, clerkUrl) {
+  const url = `${clerkUrl}/v1/environment?__clerk_api_version=2025-04-10&_clerk_js_version=5.0.0`;
+  const res = await fetchImpl(url, { headers: { Accept: "application/json" } });
+  if (!res.ok) throw new Error(`Clerk environment returned ${res.status}`);
+  return parseEnvironment(await res.json());
+}
+function looksLikeEmail(value) {
+  return /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(value);
+}
+async function apiError(res) {
+  let body = {};
+  try {
+    body = await res.json();
+  } catch {
+  }
+  const out = {
+    message: body.error ?? `Carrier API returned ${res.status}`
+  };
+  if (body.code) out.code = body.code;
+  if (res.status === 429 && body.retry_after_seconds) {
+    const hours = Math.ceil(body.retry_after_seconds / 3600);
+    out.message += ` Try again in about ${hours}h, or sign up in a browser: carrier open signup`;
+  }
+  return out;
+}
+function cancelled() {
+  return { ok: false, cancelled: true, message: "Sign-up cancelled." };
+}
+async function signup(opts) {
+  const io = opts.io;
+  const fetchImpl = opts.fetchImpl ?? fetch;
+  const apiUrl = opts.apiUrl ?? API_URL;
+  const clerkUrl = opts.clerkUrl ?? CLERK_FAPI_URL;
+  const maxAttempts = opts.maxCodeAttempts ?? DEFAULT_MAX_CODE_ATTEMPTS;
+  let environment;
+  try {
+    environment = await readSignupEnvironment(fetchImpl, clerkUrl);
+  } catch (e) {
+    return {
+      ok: false,
+      message: withNextStep(
+        `Could not read sign-up settings: ${e instanceof Error ? e.message : String(e)}`,
+        [
+          "Verify outbound HTTPS to clerk.carrier.llc",
+          "Sign up in a browser instead: carrier open signup"
+        ]
+      )
+    };
+  }
+  if (environment.captchaEnabled) {
+    return {
+      ok: false,
+      message: withNextStep("Sign-up on this instance requires a CAPTCHA, which needs a browser.", [
+        "Sign up in a browser: carrier open signup",
+        "Then come back and run: carrier login"
+      ])
+    };
+  }
+  const email = await io.text("Email address");
+  if (email === null) return cancelled();
+  if (!looksLikeEmail(email.trim())) {
+    return { ok: false, message: `"${email.trim()}" does not look like an email address.` };
+  }
+  const firstName = await io.text("First name");
+  if (firstName === null) return cancelled();
+  const lastName = await io.text("Last name");
+  if (lastName === null) return cancelled();
+  const password2 = await io.password("Password");
+  if (password2 === null) return cancelled();
+  let legalAccepted = false;
+  if (environment.legalConsentRequired) {
+    io.note?.(
+      [
+        `Terms: ${environment.termsUrl ?? "https://carrier.llc/terms"}`,
+        `Privacy: ${environment.privacyUrl ?? "https://carrier.llc/privacy"}`
+      ].join("\n"),
+      "Before you continue"
+    );
+    const accepted = await io.confirm("Do you accept the terms and privacy policy?");
+    if (accepted === null) return cancelled();
+    if (!accepted) {
+      return { ok: false, message: "An account cannot be created without accepting the terms." };
+    }
+    legalAccepted = true;
+  }
+  const headers = {
+    "Content-Type": "application/json",
+    Accept: "application/json",
+    "User-Agent": `carrier-cli/${CARRIER_VERSION}`
+  };
+  io.step?.("Creating your account");
+  let started;
+  try {
+    const res = await fetchImpl(`${apiUrl}/v1/signup`, {
+      method: "POST",
+      headers,
+      body: JSON.stringify({
+        email_address: email.trim(),
+        password: password2,
+        first_name: firstName.trim(),
+        last_name: lastName.trim(),
+        ...legalAccepted ? { legal_accepted: true } : {}
+      })
+    });
+    if (!res.ok) {
+      const err = await apiError(res);
+      return {
+        ok: false,
+        message: withNextStep(err.message, [
+          "Already have an account? carrier login",
+          "Or sign up in a browser: carrier open signup"
+        ])
+      };
+    }
+    const body = await res.json();
+    if (!body.data?.sign_up_id || !body.data.client_token) {
+      return { ok: false, message: "Sign-up started but the response was incomplete." };
+    }
+    started = {
+      sign_up_id: body.data.sign_up_id,
+      client_token: body.data.client_token,
+      verification_required: body.data.verification_required !== false
+    };
+  } catch (e) {
+    return {
+      ok: false,
+      message: withNextStep(
+        `Could not reach the Carrier API: ${e instanceof Error ? e.message : String(e)}`,
+        ["Verify outbound HTTPS to api.carrier.llc"]
+      )
+    };
+  }
+  if (started.verification_required) {
+    io.note?.(`We sent a code to ${email.trim()}.`, "Check your email");
+  }
+  let lastError = "Verification failed.";
+  for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+    const code = await io.text("Verification code", { placeholder: "123456" });
+    if (code === null) return cancelled();
+    io.step?.("Verifying");
+    let res;
+    try {
+      res = await fetchImpl(`${apiUrl}/v1/signup/verify`, {
+        method: "POST",
+        headers,
+        body: JSON.stringify({
+          sign_up_id: started.sign_up_id,
+          client_token: started.client_token,
+          code: code.trim()
+        })
+      });
+    } catch (e) {
+      return {
+        ok: false,
+        message: withNextStep(
+          `Could not reach the Carrier API: ${e instanceof Error ? e.message : String(e)}`,
+          ["Your account may exist \u2014 try: carrier login"]
+        )
+      };
+    }
+    if (res.ok) {
+      const body = await res.json();
+      const result = {
+        ok: true,
+        message: "Account created.",
+        email: body.data?.email_address ?? email.trim()
+      };
+      if (body.data?.organization_id) result.organizationId = body.data.organization_id;
+      if (body.data?.organization_name) result.organizationName = body.data.organization_name;
+      return result;
+    }
+    const err = await apiError(res);
+    lastError = err.message;
+    if (err.code !== "form_code_incorrect") {
+      return {
+        ok: false,
+        message: withNextStep(err.message, [
+          "Your account may already exist \u2014 try: carrier login",
+          "Or finish in a browser: carrier open signup"
+        ])
+      };
+    }
+    if (attempt < maxAttempts) io.note?.("That code was not right. Try again.", "Incorrect code");
+  }
+  return {
+    ok: false,
+    message: withNextStep(lastError, [
+      `No attempts left after ${maxAttempts} tries.`,
+      "Start over: carrier signup",
+      "Or finish in a browser: carrier open signup"
+    ])
+  };
+}
+
 // src/cli/lib/domains.ts
 var ICCID = {
   flags: "--iccid <iccid>",
@@ -2315,6 +2524,125 @@ var CLI_DOMAINS = [
       }
     ]
   },
+  {
+    name: "onboard",
+    summary: "Connect a new account to OCS without opening a browser",
+    commands: [
+      {
+        name: "status",
+        transport: "rest",
+        restMethod: "GET",
+        restPath: "/v1/onboarding",
+        summary: "Show how far onboarding has got. Same state the console renders.",
+        options: []
+      },
+      {
+        name: "org",
+        transport: "rest",
+        restMethod: "POST",
+        restPath: "/v1/onboarding/org",
+        summary: "Record who the operator is (step 1).",
+        options: [
+          {
+            flags: "--name <name>",
+            description: "Operator name, max 128 characters",
+            arg: "name",
+            type: "string",
+            required: true
+          },
+          {
+            flags: "--website <url>",
+            description: "Public site, if there is one",
+            arg: "website",
+            type: "string"
+          },
+          {
+            flags: "--country <iso2>",
+            description: "ISO 3166-1 alpha-2 country, e.g. NL",
+            arg: "country",
+            type: "string"
+          },
+          {
+            flags: "--operator-type <type>",
+            description: "How the operator describes itself, e.g. mvno",
+            arg: "operatorType",
+            type: "string"
+          }
+        ]
+      },
+      {
+        name: "connect",
+        transport: "rest",
+        restMethod: "POST",
+        restPath: "/v1/onboarding/ocs-connect",
+        summary: "Connect your own eSIMVault token (step 2, BYO). Verified against OCS, then stored encrypted; the token is never echoed back.",
+        options: [
+          {
+            flags: "--token <token>",
+            description: "eSIMVault API token. A flag lands in shell history \u2014 prefer a leading space, or run this once from a fresh shell.",
+            arg: "token",
+            type: "string",
+            required: true
+          }
+        ]
+      },
+      {
+        name: "managed",
+        transport: "rest",
+        restMethod: "POST",
+        restPath: "/v1/onboarding/managed-account",
+        summary: "Let Carrier provision the OCS sub-account instead (step 2, the primary path). Idempotent, and clears any BYO token.",
+        options: []
+      },
+      {
+        name: "plan",
+        transport: "rest",
+        restMethod: "POST",
+        restPath: "/v1/onboarding/plan",
+        summary: "Record the starting plan template (step 3).",
+        options: [
+          {
+            flags: "--template-id <id>",
+            description: "Package template to start from",
+            arg: "templateId",
+            type: "string",
+            required: true
+          },
+          {
+            flags: "--display-name <name>",
+            description: "What customers will see the plan called",
+            arg: "displayName",
+            type: "string",
+            required: true
+          }
+        ]
+      },
+      {
+        name: "plan-skip",
+        transport: "rest",
+        restMethod: "POST",
+        restPath: "/v1/onboarding/plan/skip",
+        summary: "Skip the plan step and come back to it later (step 3).",
+        options: []
+      },
+      {
+        name: "test-esim",
+        transport: "rest",
+        restMethod: "POST",
+        restPath: "/v1/onboarding/test-esim",
+        summary: "Read back one eSIM from the connected fleet (step 4). Nothing is provisioned; a demo ICCID with a reason comes back if OCS has nothing to show.",
+        options: []
+      },
+      {
+        name: "complete",
+        transport: "rest",
+        restMethod: "POST",
+        restPath: "/v1/onboarding/complete",
+        summary: "Mark onboarding done (step 5).",
+        options: []
+      }
+    ]
+  },
   // <generated:catalog-domains>
   // Generated from the MCP catalog by scripts/generate-domains.mjs. Do not edit by hand:
   // rebuild the server, re-run the generator, and review the diff.
@@ -4296,6 +4624,71 @@ program.command("login").description("Sign in from this terminal. Opens a browse
   }
   p3.outro("");
 });
+function clackSignupIO() {
+  return {
+    async text(message, opts) {
+      const value = await p3.text({ message, ...opts?.placeholder ? { placeholder: opts.placeholder } : {} });
+      return p3.isCancel(value) ? null : String(value ?? "").trim();
+    },
+    async password(message) {
+      const value = await p3.password({ message });
+      return p3.isCancel(value) ? null : String(value ?? "");
+    },
+    async confirm(message) {
+      const value = await p3.confirm({ message });
+      return p3.isCancel(value) ? null : Boolean(value);
+    },
+    step(message) {
+      p3.log.step(message);
+    },
+    note(body, title) {
+      p3.note(body, title);
+    }
+  };
+}
+program.command("signup").description("Create a Carrier account from this terminal, then sign in.").action(async () => {
+  header();
+  const result = await signup({ io: clackSignupIO() });
+  if (!result.ok) {
+    if (result.cancelled) {
+      p3.log.info(result.message);
+    } else {
+      p3.log.error(result.message);
+      process.exitCode = 1;
+    }
+    p3.outro("");
+    return;
+  }
+  p3.note(
+    [
+      `Account: ${result.email ?? "created"}`,
+      `Organization: ${result.organizationName ?? result.organizationId ?? "created"}`
+    ].join("\n"),
+    "Signed up"
+  );
+  const s = p3.spinner();
+  s.start("Signing in");
+  try {
+    const login2 = await login({
+      openBrowser: (url) => openUrl(url),
+      onUrl: (url) => s.message(`Finish sign-in at ${url.slice(0, 60)}\u2026`)
+    });
+    s.stop(login2.ok ? "Signed in" : "Sign-in did not finish");
+    if (login2.ok) {
+      p3.note("Try it: carrier intelligence fleet-health", "Next");
+    } else {
+      p3.log.warn(withNextStep(login2.message, ["Sign in when ready: carrier login"]));
+    }
+  } catch (e) {
+    s.stop("Sign-in did not finish");
+    p3.log.warn(
+      withNextStep(e instanceof Error ? e.message : String(e), [
+        "Your account exists \u2014 sign in when ready: carrier login"
+      ])
+    );
+  }
+  p3.outro("");
+});
 program.command("logout").description("Forget the stored sign-in on this machine.").action(async () => {
   header();
   await logout();
@@ -4385,7 +4778,7 @@ connectCmd.command("begin").description("Start or resume Stripe Connect onboardi
 });
 var openCmd = program.command("open").description("Open Carrier account / product URLs in your browser.");
 for (const [name, url, desc] of [
-  ["signup", SIGN_UP_URL, "Create a Carrier account (Clerk sign-up)"],
+  ["signup", SIGN_UP_URL, "Create a Carrier account in a browser (headless: carrier signup)"],
   ["signin", SIGN_IN_URL, "Sign in to Carrier"],
   ["console", CONSOLE_URL, "Open the Carrier console"],
   ["onboarding", ONBOARDING_URL, "Open console onboarding (link OCS / managed)"],