@chrischall/mcp-host-cli 0.0.0-stage → 2.33.1

package/src/login.mjs

@@ -0,0 +1,53 @@
+// `connections login <principal id>`: run a connection's declared sign-in
+// again (`authFlow`, core/src/auth-flow.ts) — the one repair for a credential
+// that expired upstream short of revoking the connection, which loses the
+// grant and its usage history.
+//
+// On a terminal it is the conversation `/authorize` would have had: each
+// step's prompts asked here (a password without echo, the schema's default
+// type), answered through `/login/step` until the flow ends. Off a terminal it
+// prints nothing but the first answer and says how to continue with
+// `connections login-step`, because a script cannot be prompted and should
+// state its answers itself. Pulled out of index.mjs so the loop can be driven
+// by a scripted prompter: the CLI's own tests run over a pipe and so only ever
+// reach the non-interactive branch.
+
+/** Every state a login can end in that is not success (core `loginStateSchema`). */
+const FAILED = new Set(['rejected', 'unavailable', 'incoherent']);
+
+/**
+ * @param {(method: string, path: string, body?: unknown) => Promise<any>} api
+ * @param {string} id
+ * @param {{ interactive: boolean, prompter?: import('./prompt.mjs').Prompter, stderr?: { write(s: string): unknown } }} opts
+ * @returns {Promise<{ result: any, exitCode: number }>}
+ */
+export async function runLogin(api, id, { interactive, prompter, stderr = process.stderr }) {
+  const base = `/api/v1/principals/${encodeURIComponent(id)}/login`;
+  let result = await api('POST', base);
+  if (interactive && prompter) {
+    while (result.state === 'prompt') {
+      if (result.title) stderr.write(`${result.title}\n`);
+      if (result.description) stderr.write(`${result.description}\n`);
+      // Resolved by the server against the hosts the flow declared; absent
+      // when it was not on one, so there is nothing here to check.
+      if (result.link) stderr.write(`${result.link.label}: ${result.link.url}\n`);
+      /** @type {Record<string, string>} */
+      const answers = {};
+      for (const p of result.prompts ?? []) {
+        if (p.type === 'choice') answers[p.name] = await prompter.choose(p.label, p.options);
+        else if (p.type === 'text') answers[p.name] = await prompter.ask(p.label);
+        else answers[p.name] = await prompter.secret(p.label);
+      }
+      result = await api('POST', `${base}/step`, { login: result.login, step: result.step, answers });
+    }
+    return { result, exitCode: result.state === 'done' ? 0 : 1 };
+  }
+  if (result.state === 'prompt') {
+    stderr.write(
+      `mcp-host: continue with: mcp-host connections login-step ${id} --login ${result.login} --step ${result.step} --answers '{"<name>":"<value>"}'\n`,
+    );
+  }
+  // A prompt is not a failure off a terminal — it is the flow waiting for the
+  // scripted answer — but a refusal is, on either path.
+  return { result, exitCode: FAILED.has(result.state) ? 1 : 0 };
+}