@carven-time/mcp 0.1.1

package/dist/__tests__/tools.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/__tests__/tools.test.js

@@ -0,0 +1,157 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+// Mock the client module before importing tools
+vi.mock('../client.js', () => ({
+    api: {
+        get: vi.fn(),
+        post: vi.fn(),
+        put: vi.fn(),
+        delete: vi.fn(),
+    },
+}));
+import { handleTool, toolDefs } from '../tools.js';
+import { api } from '../client.js';
+const mockApi = vi.mocked(api);
+beforeEach(() => {
+    vi.clearAllMocks();
+});
+describe('handleTool', () => {
+    // ── check_availability ──────────────────────────────────────────
+    it('check_availability calls GET /v1/availability with params', async () => {
+        mockApi.get.mockResolvedValue({ slots: [] });
+        const result = await handleTool('check_availability', {
+            start_date: '2026-04-01',
+            end_date: '2026-04-03',
+            duration_mins: 60,
+        });
+        expect(mockApi.get).toHaveBeenCalledWith('/v1/availability?start_date=2026-04-01&end_date=2026-04-03&duration_mins=60');
+        expect(JSON.parse(result.content[0].text)).toEqual({ slots: [] });
+    });
+    it('check_availability with only required param', async () => {
+        mockApi.get.mockResolvedValue({ slots: [] });
+        await handleTool('check_availability', { start_date: '2026-04-01' });
+        expect(mockApi.get).toHaveBeenCalledWith('/v1/availability?start_date=2026-04-01');
+    });
+    // ── create_booking_link ─────────────────────────────────────────
+    it('create_booking_link calls POST /v1/links', async () => {
+        mockApi.post.mockResolvedValue({ links: ['https://carven.time/...'] });
+        await handleTool('create_booking_link', {
+            template_id: 'tmpl-1',
+            timeslots: [{ start_time: '2026-04-01T10:00:00Z', end_time: '2026-04-01T10:30:00Z' }],
+            recipient_name: 'Alice',
+            recipient_email: 'alice@example.com',
+        });
+        expect(mockApi.post).toHaveBeenCalledWith('/v1/links', {
+            template_id: 'tmpl-1',
+            timeslots: [{ start_time: '2026-04-01T10:00:00Z', end_time: '2026-04-01T10:30:00Z' }],
+            recipient_name: 'Alice',
+            recipient_email: 'alice@example.com',
+            message: undefined,
+        });
+    });
+    // ── get_booking_status ──────────────────────────────────────────
+    it('get_booking_status calls GET /v1/bookings/:id', async () => {
+        mockApi.get.mockResolvedValue({ status: 'CONFIRMED' });
+        await handleTool('get_booking_status', { booking_id: 'b-123' });
+        expect(mockApi.get).toHaveBeenCalledWith('/v1/bookings/b-123');
+    });
+    // ── get_signup_sheet ────────────────────────────────────────────
+    it('get_signup_sheet calls GET /v1/sheets/:id', async () => {
+        mockApi.get.mockResolvedValue({ title: 'Potluck' });
+        await handleTool('get_signup_sheet', { sheet_id: 's-1' });
+        expect(mockApi.get).toHaveBeenCalledWith('/v1/sheets/s-1');
+    });
+    // ── claim_signup_slot ───────────────────────────────────────────
+    it('claim_signup_slot calls POST /v1/sheets/:id/claims', async () => {
+        mockApi.post.mockResolvedValue({ claimed: true });
+        await handleTool('claim_signup_slot', {
+            sheet_id: 's-1',
+            slot_id: 'slot-1',
+            claimant_name: 'Bob',
+            claimant_email: 'bob@example.com',
+        });
+        expect(mockApi.post).toHaveBeenCalledWith('/v1/sheets/s-1/claims', {
+            slot_id: 'slot-1',
+            claimant_name: 'Bob',
+            claimant_email: 'bob@example.com',
+            claimant_phone: undefined,
+            custom_field_responses: undefined,
+        });
+    });
+    // ── get_round ───────────────────────────────────────────────────
+    it('get_round calls GET /v1/rounds/:id', async () => {
+        mockApi.get.mockResolvedValue({ id: 'r-1' });
+        await handleTool('get_round', { round_id: 'r-1' });
+        expect(mockApi.get).toHaveBeenCalledWith('/v1/rounds/r-1');
+    });
+    // ── submit_availability ─────────────────────────────────────────
+    it('submit_availability calls POST /v1/rounds/:id/availability', async () => {
+        mockApi.post.mockResolvedValue({ ok: true });
+        await handleTool('submit_availability', {
+            round_id: 'r-1',
+            availability: { '2026-04-01T10:00:00Z': 'PREFERRED' },
+            guest_name: 'Alice',
+            guest_email: 'alice@example.com',
+        });
+        expect(mockApi.post).toHaveBeenCalledWith('/v1/rounds/r-1/availability', {
+            availability: { '2026-04-01T10:00:00Z': 'PREFERRED' },
+            guest_name: 'Alice',
+            guest_email: 'alice@example.com',
+            is_flexible: undefined,
+        });
+    });
+    // ── get_working_hours ───────────────────────────────────────────
+    it('get_working_hours calls GET /v1/working-hours', async () => {
+        mockApi.get.mockResolvedValue({ hours: [] });
+        await handleTool('get_working_hours', {});
+        expect(mockApi.get).toHaveBeenCalledWith('/v1/working-hours');
+    });
+    // ── set_working_hours ───────────────────────────────────────────
+    it('set_working_hours calls PUT /v1/working-hours', async () => {
+        const hours = [{ day_of_week: 1, start_time: '09:00', end_time: '17:00' }];
+        mockApi.put.mockResolvedValue({ ok: true });
+        await handleTool('set_working_hours', { hours });
+        expect(mockApi.put).toHaveBeenCalledWith('/v1/working-hours', { hours });
+    });
+    // ── delete_working_hours_day ────────────────────────────────────
+    it('delete_working_hours_day calls DELETE /v1/working-hours/:day', async () => {
+        mockApi.delete.mockResolvedValue(undefined);
+        const result = await handleTool('delete_working_hours_day', { day_of_week: 0 });
+        expect(mockApi.delete).toHaveBeenCalledWith('/v1/working-hours/0');
+        expect(JSON.parse(result.content[0].text)).toEqual({ ok: true, deleted_day: 0 });
+    });
+    // ── get_date_overrides ──────────────────────────────────────────
+    it('get_date_overrides calls GET /v1/date-overrides', async () => {
+        mockApi.get.mockResolvedValue({ overrides: [] });
+        await handleTool('get_date_overrides', {});
+        expect(mockApi.get).toHaveBeenCalledWith('/v1/date-overrides');
+    });
+    // ── set_date_overrides ──────────────────────────────────────────
+    it('set_date_overrides calls PUT /v1/date-overrides', async () => {
+        const overrides = [{ date: '2026-04-01', is_blocked: true }];
+        mockApi.put.mockResolvedValue({ ok: true });
+        await handleTool('set_date_overrides', { overrides });
+        expect(mockApi.put).toHaveBeenCalledWith('/v1/date-overrides', { overrides });
+    });
+    // ── delete_date_override ────────────────────────────────────────
+    it('delete_date_override calls DELETE /v1/date-overrides/:date', async () => {
+        mockApi.delete.mockResolvedValue(undefined);
+        const result = await handleTool('delete_date_override', { date: '2026-04-01' });
+        expect(mockApi.delete).toHaveBeenCalledWith('/v1/date-overrides/2026-04-01');
+        expect(JSON.parse(result.content[0].text)).toEqual({ ok: true, deleted_date: '2026-04-01' });
+    });
+    // ── Error handling ──────────────────────────────────────────────
+    it('wraps API errors in errorResult', async () => {
+        mockApi.get.mockRejectedValue(new Error('Network failure'));
+        const result = await handleTool('check_availability', { start_date: '2026-04-01' });
+        expect(JSON.parse(result.content[0].text)).toEqual({ error: 'Network failure' });
+    });
+    it('returns error for unknown tool', async () => {
+        const result = await handleTool('nonexistent_tool', {});
+        expect(JSON.parse(result.content[0].text)).toEqual({ error: 'Unknown tool: nonexistent_tool' });
+    });
+    // ── Tool count check ────────────────────────────────────────────
+    it('all 13 tool definitions are defined', () => {
+        expect(toolDefs).toHaveLength(13);
+    });
+});
+//# sourceMappingURL=tools.test.js.map

package/dist/__tests__/tools.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.test.js","sourceRoot":"","sources":["../../src/__tests__/tools.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAE7D,gDAAgD;AAChD,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7B,GAAG,EAAE;QACH,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;QACZ,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;QACb,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;QACZ,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;KAChB;CACF,CAAC,CAAC,CAAA;AAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAElC,MAAM,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;AAE9B,UAAU,CAAC,GAAG,EAAE;IACd,EAAE,CAAC,aAAa,EAAE,CAAA;AACpB,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,mEAAmE;IACnE,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAA;QAE5C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,oBAAoB,EAAE;YACpD,UAAU,EAAE,YAAY;YACxB,QAAQ,EAAE,YAAY;YACtB,aAAa,EAAE,EAAE;SAClB,CAAC,CAAA;QAEF,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,oBAAoB,CACtC,6EAA6E,CAC9E,CAAA;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAA;IACnE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAA;QAE5C,MAAM,UAAU,CAAC,oBAAoB,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAA;QAEpE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC,wCAAwC,CAAC,CAAA;IACpF,CAAC,CAAC,CAAA;IAEF,mEAAmE;IACnE,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAA;QAEtE,MAAM,UAAU,CAAC,qBAAqB,EAAE;YACtC,WAAW,EAAE,QAAQ;YACrB,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,sBAAsB,EAAE,QAAQ,EAAE,sBAAsB,EAAE,CAAC;YACrF,cAAc,EAAE,OAAO;YACvB,eAAe,EAAE,mBAAmB;SACrC,CAAC,CAAA;QAEF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,WAAW,EAAE;YACrD,WAAW,EAAE,QAAQ;YACrB,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,sBAAsB,EAAE,QAAQ,EAAE,sBAAsB,EAAE,CAAC;YACrF,cAAc,EAAE,OAAO;YACvB,eAAe,EAAE,mBAAmB;YACpC,OAAO,EAAE,SAAS;SACnB,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,mEAAmE;IACnE,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;QAEtD,MAAM,UAAU,CAAC,oBAAoB,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAA;QAE/D,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;IAEF,mEAAmE;IACnE,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;QAEnD,MAAM,UAAU,CAAC,kBAAkB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;QAEzD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;IAEF,mEAAmE;IACnE,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;QAEjD,MAAM,UAAU,CAAC,mBAAmB,EAAE;YACpC,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,QAAQ;YACjB,aAAa,EAAE,KAAK;YACpB,cAAc,EAAE,iBAAiB;SAClC,CAAC,CAAA;QAEF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,uBAAuB,EAAE;YACjE,OAAO,EAAE,QAAQ;YACjB,aAAa,EAAE,KAAK;YACpB,cAAc,EAAE,iBAAiB;YACjC,cAAc,EAAE,SAAS;YACzB,sBAAsB,EAAE,SAAS;SAClC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,mEAAmE;IACnE,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QAE5C,MAAM,UAAU,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;QAElD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;IAEF,mEAAmE;IACnE,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;QAE5C,MAAM,UAAU,CAAC,qBAAqB,EAAE;YACtC,QAAQ,EAAE,KAAK;YACf,YAAY,EAAE,EAAE,sBAAsB,EAAE,WAAW,EAAE;YACrD,UAAU,EAAE,OAAO;YACnB,WAAW,EAAE,mBAAmB;SACjC,CAAC,CAAA;QAEF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,6BAA6B,EAAE;YACvE,YAAY,EAAE,EAAE,sBAAsB,EAAE,WAAW,EAAE;YACrD,UAAU,EAAE,OAAO;YACnB,WAAW,EAAE,mBAAmB;YAChC,WAAW,EAAE,SAAS;SACvB,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,mEAAmE;IACnE,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAA;QAE5C,MAAM,UAAU,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAA;QAEzC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;IAEF,mEAAmE;IACnE,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,KAAK,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;QAC1E,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;QAE3C,MAAM,UAAU,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QAEhD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAC1E,CAAC,CAAC,CAAA;IAEF,mEAAmE;IACnE,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAA;QAE3C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,0BAA0B,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAA;QAE/E,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,qBAAqB,CAAC,CAAA;QAClE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAA;IAClF,CAAC,CAAC,CAAA;IAEF,mEAAmE;IACnE,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAA;QAEhD,MAAM,UAAU,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAA;QAE1C,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;IAEF,mEAAmE;IACnE,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,SAAS,GAAG,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5D,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;QAE3C,MAAM,UAAU,CAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;QAErD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;IAC/E,CAAC,CAAC,CAAA;IAEF,mEAAmE;IACnE,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAA;QAE3C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAA;QAE/E,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,+BAA+B,CAAC,CAAA;QAC5E,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAA;IAC9F,CAAC,CAAC,CAAA;IAEF,mEAAmE;IACnE,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAA;QAE3D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,oBAAoB,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAA;QAEnF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAA;IAClF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAA;QAEvD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAA;IACjG,CAAC,CAAC,CAAA;IAEF,mEAAmE;IACnE,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/auth.d.ts

@@ -0,0 +1,12 @@
+export declare function getApiBase(): string;
+/**
+ * Get a valid access token, refreshing if needed.
+ * Returns null if not authenticated.
+ */
+export declare function getAccessToken(): Promise<string | null>;
+export declare function isAuthenticated(): boolean;
+/**
+ * Interactive OAuth login flow.
+ * Opens browser for consent, runs local callback server.
+ */
+export declare function login(apiBase?: string): Promise<void>;

package/dist/auth.js

@@ -0,0 +1,299 @@
+import { readFileSync, writeFileSync, mkdirSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { createServer } from 'node:http';
+import { randomBytes, createHash } from 'node:crypto';
+const CONFIG_DIR = join(homedir(), '.carven');
+/** Per-environment token file based on API URL */
+function getTokenFile() {
+    const apiBase = process.env.CARVEN_API_URL ?? 'https://api.carven.app';
+    const envHash = createHash('sha256').update(apiBase).digest('hex').slice(0, 8);
+    return join(CONFIG_DIR, `mcp-token-${envHash}.json`);
+}
+let cachedTokens = null;
+export function getApiBase() {
+    return cachedTokens?.api_base ?? process.env.CARVEN_API_URL ?? 'https://api.carven.app';
+}
+/** Frontend app base URL — used for the OAuth consent page */
+function getAppBase() {
+    return process.env.CARVEN_APP_URL ?? 'https://carven.app';
+}
+function loadTokens() {
+    if (cachedTokens)
+        return cachedTokens;
+    try {
+        if (!existsSync(getTokenFile()))
+            return null;
+        const data = JSON.parse(readFileSync(getTokenFile(), 'utf-8'));
+        cachedTokens = data;
+        return data;
+    }
+    catch {
+        return null;
+    }
+}
+function saveTokens(tokens) {
+    mkdirSync(CONFIG_DIR, { recursive: true });
+    writeFileSync(getTokenFile(), JSON.stringify(tokens, null, 2), { mode: 0o600 });
+    cachedTokens = tokens;
+}
+async function refreshTokens(stored) {
+    const res = await fetch(`${stored.api_base}/api/oauth/token`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({
+            grant_type: 'refresh_token',
+            refresh_token: stored.refresh_token,
+            client_id: stored.client_id,
+            client_secret: stored.client_secret,
+        }),
+    });
+    if (!res.ok) {
+        throw new Error(`Token refresh failed: ${res.status} ${await res.text()}`);
+    }
+    const data = await res.json();
+    const updated = {
+        ...stored,
+        access_token: data.access_token,
+        refresh_token: data.refresh_token,
+        expires_at: Date.now() + data.expires_in * 1000 - 60_000, // 1min buffer
+    };
+    saveTokens(updated);
+    return updated;
+}
+/**
+ * Get a valid access token, refreshing if needed.
+ * Returns null if not authenticated.
+ */
+export async function getAccessToken() {
+    let tokens = loadTokens();
+    if (!tokens)
+        return null;
+    // Refresh if expired or within 1 minute of expiry
+    if (Date.now() >= tokens.expires_at) {
+        try {
+            tokens = await refreshTokens(tokens);
+        }
+        catch {
+            // Refresh failed — token may be revoked
+            cachedTokens = null;
+            return null;
+        }
+    }
+    return tokens.access_token;
+}
+export function isAuthenticated() {
+    return loadTokens() !== null;
+}
+// ── Callback page HTML ──────────────────────────────────────────
+function callbackPage(status, detail) {
+    const configs = {
+        success: {
+            icon: `<svg width="48" height="48" viewBox="0 0 24 24" fill="none" stroke="#16a34a" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M22 11.08V12a10 10 0 1 1-5.93-9.14"/><polyline points="22 4 12 14.01 9 11.01"/></svg>`,
+            title: 'Connected to Carven',
+            message: 'You can close this window and return to your AI assistant.',
+            color: '#16a34a',
+        },
+        denied: {
+            icon: `<svg width="48" height="48" viewBox="0 0 24 24" fill="none" stroke="#dc2626" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="10"/><line x1="15" y1="9" x2="9" y2="15"/><line x1="9" y1="9" x2="15" y2="15"/></svg>`,
+            title: 'Authorization Denied',
+            message: 'You denied access. Close this window and try again if needed.',
+            color: '#dc2626',
+        },
+        error: {
+            icon: `<svg width="48" height="48" viewBox="0 0 24 24" fill="none" stroke="#dc2626" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="10"/><line x1="12" y1="8" x2="12" y2="12"/><line x1="12" y1="16" x2="12.01" y2="16"/></svg>`,
+            title: 'Something Went Wrong',
+            message: detail ?? 'An error occurred during authentication.',
+            color: '#dc2626',
+        },
+    };
+    const c = configs[status];
+    return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Carven — ${c.title}</title>
+  <style>
+    * { margin: 0; padding: 0; box-sizing: border-box; }
+    body {
+      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif;
+      background: #f8fafc;
+      color: #0f172a;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      min-height: 100vh;
+    }
+    .card {
+      background: #fff;
+      border-radius: 16px;
+      box-shadow: 0 1px 3px rgba(0,0,0,0.08), 0 4px 24px rgba(0,0,0,0.04);
+      padding: 48px;
+      max-width: 420px;
+      width: 100%;
+      text-align: center;
+    }
+    .icon { margin-bottom: 20px; }
+    h1 {
+      font-size: 20px;
+      font-weight: 600;
+      letter-spacing: -0.3px;
+      margin-bottom: 8px;
+      color: #0f172a;
+    }
+    p {
+      font-size: 15px;
+      color: #64748b;
+      line-height: 1.5;
+    }
+    .badge {
+      display: inline-block;
+      margin-top: 24px;
+      padding: 6px 14px;
+      border-radius: 999px;
+      font-size: 12px;
+      font-weight: 500;
+      letter-spacing: 0.3px;
+      background: ${c.color}10;
+      color: ${c.color};
+      border: 1px solid ${c.color}20;
+    }
+    .logo {
+      margin-bottom: 32px;
+      font-size: 14px;
+      font-weight: 600;
+      letter-spacing: 1.5px;
+      text-transform: uppercase;
+      color: #94a3b8;
+    }
+  </style>
+</head>
+<body>
+  <div class="card">
+    <div class="logo">CARVEN</div>
+    <div class="icon">${c.icon}</div>
+    <h1>${c.title}</h1>
+    <p>${c.message}</p>
+    <div class="badge">${status === 'success' ? 'MCP Connected' : status === 'denied' ? 'Access Denied' : 'Error'}</div>
+  </div>
+</body>
+</html>`;
+}
+/**
+ * Interactive OAuth login flow.
+ * Opens browser for consent, runs local callback server.
+ */
+export async function login(apiBase) {
+    const base = apiBase ?? getApiBase();
+    // PKCE
+    const codeVerifier = randomBytes(32).toString('base64url');
+    const codeChallenge = createHash('sha256').update(codeVerifier).digest('base64url');
+    const state = randomBytes(16).toString('hex');
+    // Official Carven MCP app credentials (first-party, pre-registered).
+    // These are safe to embed in source: this is a public OAuth client (CLI tool
+    // running on user machines), so the secret is not truly confidential — anyone
+    // who installs the package can extract it. Security relies on the per-user
+    // OAuth consent flow and PKCE challenge, not on secret confidentiality.
+    // This is the standard pattern used by GitHub CLI, Slack CLI, and similar tools.
+    const OFFICIAL_CLIENT_ID = '65f58750-cbac-4fb5-8668-572e68a735bd';
+    const OFFICIAL_CLIENT_SECRET = 'yA6JLOZ2fqeEWg0ZhBarSsKfjvWzNwo8dCcGADG_PWU';
+    // Allow env var overrides for third-party developers building their own agents
+    const clientId = process.env.CARVEN_CLIENT_ID || OFFICIAL_CLIENT_ID;
+    const clientSecret = process.env.CARVEN_CLIENT_SECRET || OFFICIAL_CLIENT_SECRET;
+    // Fetch the app's registered scopes dynamically
+    const infoRes = await fetch(`${base}/api/oauth/apps/info?client_id=${clientId}`);
+    if (!infoRes.ok) {
+        throw new Error(`Failed to fetch app info: ${infoRes.status}`);
+    }
+    const appInfo = await infoRes.json();
+    const scopeString = appInfo.scopes.join(' ');
+    const port = 9876;
+    const redirectUri = `http://localhost:${port}/callback`;
+    const authUrl = new URL(`${getAppBase()}/oauth/authorize`);
+    authUrl.searchParams.set('client_id', clientId);
+    authUrl.searchParams.set('redirect_uri', redirectUri);
+    authUrl.searchParams.set('response_type', 'code');
+    authUrl.searchParams.set('scope', scopeString);
+    authUrl.searchParams.set('state', state);
+    authUrl.searchParams.set('code_challenge', codeChallenge);
+    authUrl.searchParams.set('code_challenge_method', 'S256');
+    return new Promise((resolve, reject) => {
+        const server = createServer(async (req, res) => {
+            const url = new URL(req.url ?? '/', `http://localhost:${port}`);
+            if (url.pathname !== '/callback') {
+                res.writeHead(404);
+                res.end();
+                return;
+            }
+            const code = url.searchParams.get('code');
+            const returnedState = url.searchParams.get('state');
+            const error = url.searchParams.get('error');
+            if (error) {
+                res.writeHead(200, { 'Content-Type': 'text/html' });
+                res.end(callbackPage('denied'));
+                server.close();
+                reject(new Error(`Authorization denied: ${error}`));
+                return;
+            }
+            if (!code || returnedState !== state) {
+                res.writeHead(400, { 'Content-Type': 'text/html' });
+                res.end(callbackPage('error', 'Invalid callback parameters'));
+                server.close();
+                reject(new Error('Invalid callback parameters'));
+                return;
+            }
+            try {
+                // Exchange code for tokens
+                const tokenRes = await fetch(`${base}/api/oauth/token`, {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json' },
+                    body: JSON.stringify({
+                        grant_type: 'authorization_code',
+                        code,
+                        redirect_uri: redirectUri,
+                        client_id: clientId,
+                        client_secret: clientSecret,
+                        code_verifier: codeVerifier,
+                    }),
+                });
+                if (!tokenRes.ok) {
+                    throw new Error(`Token exchange failed: ${tokenRes.status}`);
+                }
+                const data = await tokenRes.json();
+                saveTokens({
+                    access_token: data.access_token,
+                    refresh_token: data.refresh_token,
+                    expires_at: Date.now() + data.expires_in * 1000 - 60_000,
+                    client_id: clientId,
+                    client_secret: clientSecret,
+                    api_base: base,
+                });
+                res.writeHead(200, { 'Content-Type': 'text/html' });
+                res.end(callbackPage('success'));
+                server.close();
+                resolve();
+            }
+            catch (err) {
+                res.writeHead(500, { 'Content-Type': 'text/html' });
+                res.end(callbackPage('error', 'Token exchange failed'));
+                server.close();
+                reject(err);
+            }
+        });
+        server.listen(port, () => {
+            console.error(`[carven-mcp] Opening browser for authorization...`);
+            console.error(`[carven-mcp] If the browser doesn't open, visit: ${authUrl.toString()}`);
+            // Dynamic import for ESM 'open' package
+            import('open').then(m => m.default(authUrl.toString())).catch(() => {
+                // open failed — user will use the URL printed above
+            });
+        });
+        // Timeout after 5 minutes
+        setTimeout(() => {
+            server.close();
+            reject(new Error('Login timed out after 5 minutes'));
+        }, 5 * 60 * 1000);
+    });
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAErD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAA;AAE7C,kDAAkD;AAClD,SAAS,YAAY;IACnB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,wBAAwB,CAAA;IACtE,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC9E,OAAO,IAAI,CAAC,UAAU,EAAE,aAAa,OAAO,OAAO,CAAC,CAAA;AACtD,CAAC;AAWD,IAAI,YAAY,GAAwB,IAAI,CAAA;AAE5C,MAAM,UAAU,UAAU;IACxB,OAAO,YAAY,EAAE,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,wBAAwB,CAAA;AACzF,CAAC;AAED,8DAA8D;AAC9D,SAAS,UAAU;IACjB,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,oBAAoB,CAAA;AAC3D,CAAC;AAED,SAAS,UAAU;IACjB,IAAI,YAAY;QAAE,OAAO,YAAY,CAAA;IACrC,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;YAAE,OAAO,IAAI,CAAA;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,EAAE,OAAO,CAAC,CAAC,CAAA;QAC9D,YAAY,GAAG,IAAI,CAAA;QACnB,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,MAAoB;IACtC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1C,aAAa,CAAC,YAAY,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC/E,YAAY,GAAG,MAAM,CAAA;AACvB,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,MAAoB;IAC/C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,QAAQ,kBAAkB,EAAE;QAC5D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,aAAa,EAAE,MAAM,CAAC,aAAa;SACpC,CAAC;KACH,CAAC,CAAA;IAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IAC5E,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAI1B,CAAA;IAED,MAAM,OAAO,GAAiB;QAC5B,GAAG,MAAM;QACT,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,MAAM,EAAE,cAAc;KACzE,CAAA;IACD,UAAU,CAAC,OAAO,CAAC,CAAA;IACnB,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,IAAI,MAAM,GAAG,UAAU,EAAE,CAAA;IACzB,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAExB,kDAAkD;IAClD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAA;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;YACxC,YAAY,GAAG,IAAI,CAAA;YACnB,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,YAAY,CAAA;AAC5B,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,UAAU,EAAE,KAAK,IAAI,CAAA;AAC9B,CAAC;AAED,mEAAmE;AAEnE,SAAS,YAAY,CAAC,MAAsC,EAAE,MAAe;IAC3E,MAAM,OAAO,GAAG;QACd,OAAO,EAAE;YACP,IAAI,EAAE,6OAA6O;YACnP,KAAK,EAAE,qBAAqB;YAC5B,OAAO,EAAE,4DAA4D;YACrE,KAAK,EAAE,SAAS;SACjB;QACD,MAAM,EAAE;YACN,IAAI,EAAE,+PAA+P;YACrQ,KAAK,EAAE,sBAAsB;YAC7B,OAAO,EAAE,+DAA+D;YACxE,KAAK,EAAE,SAAS;SACjB;QACD,KAAK,EAAE;YACL,IAAI,EAAE,qQAAqQ;YAC3Q,KAAK,EAAE,sBAAsB;YAC7B,OAAO,EAAE,MAAM,IAAI,0CAA0C;YAC7D,KAAK,EAAE,SAAS;SACjB;KACF,CAAA;IAED,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAEzB,OAAO;;;;;oBAKW,CAAC,CAAC,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBA0CP,CAAC,CAAC,KAAK;eACZ,CAAC,CAAC,KAAK;0BACI,CAAC,CAAC,KAAK;;;;;;;;;;;;;;;wBAeT,CAAC,CAAC,IAAI;UACpB,CAAC,CAAC,KAAK;SACR,CAAC,CAAC,OAAO;yBACO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO;;;QAGzG,CAAA;AACR,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,OAAgB;IAC1C,MAAM,IAAI,GAAG,OAAO,IAAI,UAAU,EAAE,CAAA;IAEpC,OAAO;IACP,MAAM,YAAY,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;IAC1D,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IACnF,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAE7C,qEAAqE;IACrE,6EAA6E;IAC7E,8EAA8E;IAC9E,2EAA2E;IAC3E,wEAAwE;IACxE,iFAAiF;IACjF,MAAM,kBAAkB,GAAG,sCAAsC,CAAA;IACjE,MAAM,sBAAsB,GAAG,6CAA6C,CAAA;IAE5E,+EAA+E;IAC/E,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,kBAAkB,CAAA;IACnE,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,sBAAsB,CAAA;IAE/E,gDAAgD;IAChD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,kCAAkC,QAAQ,EAAE,CAAC,CAAA;IAChF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAChE,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,EAA0B,CAAA;IAC5D,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAE5C,MAAM,IAAI,GAAG,IAAI,CAAA;IACjB,MAAM,WAAW,GAAG,oBAAoB,IAAI,WAAW,CAAA;IAEvD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,UAAU,EAAE,kBAAkB,CAAC,CAAA;IAC1D,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;IAC/C,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAA;IACrD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAA;IACjD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;IAC9C,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IACxC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAA;IACzD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAA;IAEzD,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YAC7C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAA;YAC/D,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACjC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;gBAClB,GAAG,CAAC,GAAG,EAAE,CAAA;gBACT,OAAM;YACR,CAAC;YAED,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YACzC,MAAM,aAAa,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YACnD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YAE3C,IAAI,KAAK,EAAE,CAAC;gBACV,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAA;gBACnD,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAA;gBAC/B,MAAM,CAAC,KAAK,EAAE,CAAA;gBACd,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,KAAK,EAAE,CAAC,CAAC,CAAA;gBACnD,OAAM;YACR,CAAC;YAED,IAAI,CAAC,IAAI,IAAI,aAAa,KAAK,KAAK,EAAE,CAAC;gBACrC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAA;gBACnD,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC,CAAA;gBAC7D,MAAM,CAAC,KAAK,EAAE,CAAA;gBACd,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAA;gBAChD,OAAM;YACR,CAAC;YAED,IAAI,CAAC;gBACH,2BAA2B;gBAC3B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,kBAAkB,EAAE;oBACtD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,UAAU,EAAE,oBAAoB;wBAChC,IAAI;wBACJ,YAAY,EAAE,WAAW;wBACzB,SAAS,EAAE,QAAQ;wBACnB,aAAa,EAAE,YAAY;wBAC3B,aAAa,EAAE,YAAY;qBAC5B,CAAC;iBACH,CAAC,CAAA;gBAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;gBAC9D,CAAC;gBAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAI/B,CAAA;gBAED,UAAU,CAAC;oBACT,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;oBACjC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,MAAM;oBACxD,SAAS,EAAE,QAAQ;oBACnB,aAAa,EAAE,YAAY;oBAC3B,QAAQ,EAAE,IAAI;iBACf,CAAC,CAAA;gBAEF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAA;gBACnD,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAA;gBAChC,MAAM,CAAC,KAAK,EAAE,CAAA;gBACd,OAAO,EAAE,CAAA;YACX,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAA;gBACnD,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC,CAAA;gBACvD,MAAM,CAAC,KAAK,EAAE,CAAA;gBACd,MAAM,CAAC,GAAG,CAAC,CAAA;YACb,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;YACvB,OAAO,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAA;YAClE,OAAO,CAAC,KAAK,CAAC,oDAAoD,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;YACvF,wCAAwC;YACxC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBACjE,oDAAoD;YACtD,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,0BAA0B;QAC1B,UAAU,CAAC,GAAG,EAAE;YACd,MAAM,CAAC,KAAK,EAAE,CAAA;YACd,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAA;QACtD,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IACnB,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/client.d.ts

@@ -0,0 +1,12 @@
+export declare class CarvenApiError extends Error {
+    status: number;
+    body: unknown;
+    constructor(status: number, body: unknown);
+}
+export declare const api: {
+    get: (path: string) => Promise<unknown>;
+    post: (path: string, body: unknown) => Promise<unknown>;
+    put: (path: string, body: unknown) => Promise<unknown>;
+    patch: (path: string, body: unknown) => Promise<unknown>;
+    delete: (path: string) => Promise<unknown>;
+};

package/dist/client.js

@@ -0,0 +1,39 @@
+import { getAccessToken, getApiBase } from './auth.js';
+export class CarvenApiError extends Error {
+    status;
+    body;
+    constructor(status, body) {
+        super(`Carven API error ${status}: ${JSON.stringify(body)}`);
+        this.status = status;
+        this.body = body;
+        this.name = 'CarvenApiError';
+    }
+}
+async function request(method, path, body) {
+    const token = await getAccessToken();
+    if (!token) {
+        throw new Error('Not authenticated. Run the MCP server with CARVEN_CLIENT_ID and CARVEN_CLIENT_SECRET to connect your Carven account.');
+    }
+    const url = `${getApiBase()}/api${path}`;
+    const res = await fetch(url, {
+        method,
+        headers: {
+            'Authorization': `Bearer ${token}`,
+            ...(body ? { 'Content-Type': 'application/json' } : {}),
+        },
+        ...(body ? { body: JSON.stringify(body) } : {}),
+    });
+    const data = await res.json().catch(() => null);
+    if (!res.ok) {
+        throw new CarvenApiError(res.status, data);
+    }
+    return data;
+}
+export const api = {
+    get: (path) => request('GET', path),
+    post: (path, body) => request('POST', path, body),
+    put: (path, body) => request('PUT', path, body),
+    patch: (path, body) => request('PATCH', path, body),
+    delete: (path) => request('DELETE', path),
+};
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAEtD,MAAM,OAAO,cAAe,SAAQ,KAAK;IAE9B;IACA;IAFT,YACS,MAAc,EACd,IAAa;QAEpB,KAAK,CAAC,oBAAoB,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAHrD,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAS;QAGpB,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAA;IAC9B,CAAC;CACF;AAED,KAAK,UAAU,OAAO,CAAC,MAAc,EAAE,IAAY,EAAE,IAAc;IACjE,MAAM,KAAK,GAAG,MAAM,cAAc,EAAE,CAAA;IACpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,sHAAsH,CAAC,CAAA;IACzI,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,UAAU,EAAE,OAAO,IAAI,EAAE,CAAA;IACxC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM;QACN,OAAO,EAAE;YACP,eAAe,EAAE,UAAU,KAAK,EAAE;YAClC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD;QACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAC,CAAA;IAEF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;IAE/C,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC5C,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,GAAG,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;IAC3C,IAAI,EAAE,CAAC,IAAY,EAAE,IAAa,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC;IAClE,GAAG,EAAE,CAAC,IAAY,EAAE,IAAa,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC;IAChE,KAAK,EAAE,CAAC,IAAY,EAAE,IAAa,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;IACpE,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC;CAClD,CAAA"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,36 @@
+#!/usr/bin/env node
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { ListToolsRequestSchema, CallToolRequestSchema } from '@modelcontextprotocol/sdk/types.js';
+import { isAuthenticated, login } from './auth.js';
+import { toolDefs, handleTool } from './tools.js';
+const server = new Server({ name: 'carven', version: '0.1.0' }, { capabilities: { tools: {} } });
+server.setRequestHandler(ListToolsRequestSchema, async () => ({
+    tools: toolDefs.map(t => ({
+        name: t.name,
+        description: t.description,
+        inputSchema: t.inputSchema,
+    })),
+}));
+server.setRequestHandler(CallToolRequestSchema, async (req) => {
+    return handleTool(req.params.name, (req.params.arguments ?? {}));
+});
+async function main() {
+    // Connect transport immediately so the client doesn't time out
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    console.error('[carven-mcp] Server running on stdio');
+    // Trigger OAuth login in the background if not authenticated
+    // (works with both env var overrides and embedded official credentials)
+    if (!isAuthenticated()) {
+        console.error('[carven-mcp] Not authenticated. Starting OAuth flow...');
+        login()
+            .then(() => console.error('[carven-mcp] Successfully connected to Carven!'))
+            .catch((err) => console.error(`[carven-mcp] Auth failed: ${err.message}`));
+    }
+}
+main().catch(err => {
+    console.error('[carven-mcp] Fatal error:', err);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAA;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAA;AAChF,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAA;AAClG,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEjD,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EACpC,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAA;AAED,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAC5D,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;KAC3B,CAAC,CAAC;CACJ,CAAC,CAAC,CAAA;AAEH,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE;IAC1D,OAAO,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAA4B,CAAC,CAAA;AAC7F,CAAC,CAAC,CAAA;AAEF,KAAK,UAAU,IAAI;IACjB,+DAA+D;IAC/D,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAA;IAC5C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/B,OAAO,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAA;IAErD,6DAA6D;IAC7D,wEAAwE;IACxE,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAA;QACvE,KAAK,EAAE;aACJ,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;aAC3E,KAAK,CAAC,CAAC,GAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,6BAA6B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IACnF,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;IACjB,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAA;IAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}