@clien-ai/mcp 0.1.0

package/dist/cli.js

@@ -0,0 +1,280 @@
+#!/usr/bin/env node
+/**
+ * `clien-mcp` CLI entry.
+ *
+ * Subcommands (argv[2]):
+ *   - (omitted)    Start the MCP stdio server (how Claude Code invokes us).
+ *   - install      Register the server in Claude Code's config.
+ *   - logout       Clear stored credentials so the next run re-OAuths.
+ *   - status       Print which storage backend holds the token + token age.
+ *   - help         Print usage.
+ *   - version      Print the version.
+ *
+ * Global flags:
+ *   --debug        Surface stack traces in fatal errors.
+ *
+ * Exit codes (see ../util/exit-codes.ts for the canonical map):
+ *   0 success, 1 generic, 2 auth-fail, 3 fs-fail, 4 network-fail, 5 invalid-args
+ */
+import { runAuthorize } from './commands/authorize.js';
+import { runInstall } from './commands/install.js';
+import { runLogout } from './commands/logout.js';
+import { runStatus } from './commands/status.js';
+import { startStdioServer } from './server.js';
+import { PACKAGE_NAME, PACKAGE_VERSION } from './config.js';
+import { EXIT_CODES, classifyError } from './util/exit-codes.js';
+// ---------- Help / usage ----------
+function printUsage(stream = process.stdout) {
+    stream.write([
+        `${PACKAGE_NAME} v${PACKAGE_VERSION}`,
+        '',
+        'Usage:',
+        '  npx @clien-ai/mcp                          Start the MCP server (how Claude Code invokes us).',
+        '  npx @clien-ai/mcp install [--json]         Register the server in Claude Code config.',
+        '                       [--no-browser]',
+        '  npx @clien-ai/mcp authorize --token <r>    Seed a refresh token (headless / non-TTY auth).',
+        '  npx @clien-ai/mcp logout [--json]          Clear stored credentials.',
+        '  npx @clien-ai/mcp status [--json]          Show backend, token presence, last refresh.',
+        '  npx @clien-ai/mcp help                     Show this help.',
+        '  npx @clien-ai/mcp version                  Show the version.',
+        '',
+        'Global flags:',
+        '  --debug                                    Show stack traces on fatal errors.',
+        '',
+        'Env:',
+        '  CLIEN_MCP_ENV=test|prod                    Switch between test and prod environments.',
+        '  CLIEN_MCP_SERVER_URL=...                   Override the Clien.ai server URL.',
+        '  CLIEN_MCP_SUPABASE_URL=...                 Override the Supabase auth URL.',
+        '  CLIEN_MCP_CLIENT_ID=...                    Override the OAuth client id.',
+        '  CLIEN_MCP_CLAUDE_CONFIG=...                Path to Claude Code config (install only).',
+        '  CLIEN_MCP_REFRESH_TOKEN=...                Pre-seeded refresh token (skips browser OAuth).',
+        '',
+        'Exit codes:',
+        '  0  success',
+        '  1  generic / uncategorized error',
+        '  2  authentication failed',
+        '  3  filesystem operation failed',
+        '  4  network operation failed',
+        '  5  invalid arguments / unknown flag',
+        '',
+        'Docs: https://clien.ai',
+        '',
+    ].join('\n'));
+}
+// ---------- Flag validation with Levenshtein suggestion ----------
+const GLOBAL_FLAGS = ['--debug', '-h', '--help', '-v', '--version'];
+const ALLOWED_FLAGS_BY_COMMAND = {
+    install: ['--no-browser', '--json'],
+    // `authorize` accepts the refresh token via `--token VALUE`, `--token=VALUE`,
+    // or `-t VALUE` (added in cluster 1's headless-OAuth fix). Without this
+    // entry the flag validation rejects valid invocations as "Unknown flag".
+    authorize: ['--token', '-t'],
+    logout: ['--json'],
+    status: ['--json'],
+    help: [],
+    version: [],
+    '': [], // default (server mode)
+    serve: [],
+    server: [],
+    start: [],
+};
+/** Crude Levenshtein for "did you mean" suggestions. */
+function editDistance(a, b) {
+    if (a === b)
+        return 0;
+    if (!a.length)
+        return b.length;
+    if (!b.length)
+        return a.length;
+    // Single-row DP — TS strict-array-access is happier than with a 2-D array,
+    // and the algorithm is identical (O(min(a, b)) memory).
+    let prev = [];
+    for (let j = 0; j <= b.length; j++)
+        prev.push(j);
+    for (let i = 1; i <= a.length; i++) {
+        const curr = [i];
+        for (let j = 1; j <= b.length; j++) {
+            const cost = a[i - 1] === b[j - 1] ? 0 : 1;
+            curr.push(Math.min((prev[j] ?? 0) + 1, (curr[j - 1] ?? 0) + 1, (prev[j - 1] ?? 0) + cost));
+        }
+        prev = curr;
+    }
+    return prev[b.length] ?? 0;
+}
+function suggestFlag(unknown, allowed) {
+    let best = null;
+    for (const f of allowed) {
+        const d = editDistance(unknown, f);
+        if (best === null || d < best.dist)
+            best = { flag: f, dist: d };
+    }
+    // Only suggest if the edit distance is small enough to be plausible.
+    if (best && best.dist <= 3)
+        return best.flag;
+    return null;
+}
+/**
+ * Validate flags for a subcommand. Returns ok=true if every dash-prefixed
+ * argv item is recognized; otherwise ok=false with a "Unknown flag …" message
+ * including a "did you mean" suggestion when one is plausible.
+ *
+ * Subcommand-specific positional arguments (e.g. `authorize --token <r>`)
+ * should be filtered out by the caller before passing argv here.
+ */
+function validateFlags(command, argv) {
+    const allowed = [...(ALLOWED_FLAGS_BY_COMMAND[command] ?? []), ...GLOBAL_FLAGS];
+    for (const arg of argv) {
+        if (!arg.startsWith('-'))
+            continue;
+        // Strip `--key=value` form to its `--key` for lookup.
+        const flagName = arg.includes('=') ? arg.slice(0, arg.indexOf('=')) : arg;
+        if (allowed.includes(flagName))
+            continue;
+        const suggestion = suggestFlag(flagName, allowed);
+        const tail = suggestion
+            ? ` Did you mean ${suggestion}?`
+            : ` Run \`clien-mcp help\` for the supported flags.`;
+        return {
+            ok: false,
+            message: `Unknown flag: ${flagName}.${tail}`,
+        };
+    }
+    return { ok: true };
+}
+// ---------- Error formatting ----------
+function formatFatal(err, debug) {
+    const message = err instanceof Error ? err.message : String(err);
+    if (debug && err instanceof Error && err.stack) {
+        return `error: ${message}\n${err.stack}`;
+    }
+    return `error: ${message}`;
+}
+/**
+ * Match a boolean flag in argv, accepting both `--flag` and `--flag=true`/
+ * `--flag=1` forms. The `=value` form is what `validateFlags` permits via
+ * its `--key=value` strip-to-`--key` lookup; without this helper, the
+ * dispatcher's `argv.includes('--flag')` would silently miss it.
+ */
+function hasFlag(argv, name) {
+    for (const arg of argv) {
+        if (arg === name)
+            return true;
+        if (arg.startsWith(`${name}=`)) {
+            const value = arg.slice(name.length + 1).toLowerCase();
+            // `--flag=` (empty), `--flag=true`, `--flag=1` -> true.
+            // `--flag=false`, `--flag=0` -> false.
+            if (value === 'false' || value === '0')
+                return false;
+            return true;
+        }
+    }
+    return false;
+}
+// ---------- Main dispatcher ----------
+export async function main(argv) {
+    void argv; // `--debug` is read by the outer isMainModule entrypoint; main() doesn't render fatals itself.
+    const cmd = argv[0] ?? '';
+    const isHelp = cmd === 'help' || cmd === '-h' || cmd === '--help';
+    const isVersion = cmd === 'version' || cmd === '-v' || cmd === '--version';
+    // Validate flags before the dispatch table. Don't apply to subcommands that
+    // accept positional values we don't yet model here (none today; placeholder).
+    const validation = validateFlags(isHelp ? 'help' : isVersion ? 'version' : cmd, argv.slice(1));
+    if (!validation.ok) {
+        process.stderr.write(`${validation.message}\n`);
+        return EXIT_CODES.INVALID_ARGS;
+    }
+    switch (cmd) {
+        case '':
+        case 'serve':
+        case 'server':
+        case 'start': {
+            await startStdioServer();
+            // stdio server runs until stdin closes — we never return here.
+            return EXIT_CODES.SUCCESS;
+        }
+        case 'install': {
+            const noBrowser = hasFlag(argv, '--no-browser');
+            const json = hasFlag(argv, '--json');
+            // --json implies non-interactive (agents pipe to jq); always suppress
+            // the browser open so JSON stdout isn't intermixed with a launcher.
+            await runInstall({ openBrowser: !noBrowser && !json, json });
+            return EXIT_CODES.SUCCESS;
+        }
+        case 'logout': {
+            const json = hasFlag(argv, '--json');
+            await runLogout({ json });
+            return EXIT_CODES.SUCCESS;
+        }
+        case 'status': {
+            const json = hasFlag(argv, '--json');
+            await runStatus({ json });
+            return EXIT_CODES.SUCCESS;
+        }
+        case 'authorize': {
+            // Accept `--token VALUE` and `--token=VALUE` forms.
+            let token;
+            for (let i = 1; i < argv.length; i++) {
+                const arg = argv[i];
+                if (arg === '--token' || arg === '-t') {
+                    token = argv[i + 1];
+                    i++;
+                }
+                else if (arg && arg.startsWith('--token=')) {
+                    token = arg.slice('--token='.length);
+                }
+            }
+            try {
+                await runAuthorize({ token });
+                return 0;
+            }
+            catch (err) {
+                // `runAuthorize` writes its own stderr for the two expected paths
+                // (missing token, Supabase rejected token). Anything else — config
+                // load failure, save backend failure, unexpected throw — would
+                // exit silently with code 4 unless we surface it here.
+                const message = err instanceof Error ? err.message : String(err);
+                if (!/missing refresh token|refresh token rejected/i.test(message)) {
+                    process.stderr.write(`error: ${message}\n`);
+                }
+                return 4;
+            }
+        }
+        case 'help':
+        case '-h':
+        case '--help':
+            printUsage();
+            return EXIT_CODES.SUCCESS;
+        case 'version':
+        case '-v':
+        case '--version':
+            process.stdout.write(`${PACKAGE_VERSION}\n`);
+            return EXIT_CODES.SUCCESS;
+        default:
+            process.stderr.write(`Unknown command: ${cmd}\n\n`);
+            printUsage(process.stderr);
+            return EXIT_CODES.INVALID_ARGS;
+    }
+}
+// Test helper: lets test files invoke the dispatcher without exiting the
+// process. Production runs go through the unconditional invocation below.
+export const __testing = { main, validateFlags, formatFatal, classifyError };
+/* istanbul ignore next */
+const isMainModule = typeof process !== 'undefined' &&
+    process.argv[1] !== undefined &&
+    // ts-node / tsx may put the source path here; check both .ts and .js endings.
+    /cli\.[mc]?[jt]sx?$/.test(process.argv[1]);
+/* istanbul ignore next */
+if (isMainModule) {
+    const argv = process.argv.slice(2);
+    const debug = argv.includes('--debug');
+    main(argv)
+        .then((code) => {
+        if (code !== 0)
+            process.exit(code);
+    })
+        .catch((err) => {
+        process.stderr.write(`${formatFatal(err, debug)}\n`);
+        process.exit(classifyError(err));
+    });
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC9C,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC3D,OAAO,EAAE,UAAU,EAAE,aAAa,EAAuB,MAAM,sBAAsB,CAAA;AAErF,qCAAqC;AAErC,SAAS,UAAU,CAAC,SAAgC,OAAO,CAAC,MAAM;IAChE,MAAM,CAAC,KAAK,CACV;QACE,GAAG,YAAY,KAAK,eAAe,EAAE;QACrC,EAAE;QACF,QAAQ;QACR,iGAAiG;QACjG,yFAAyF;QACzF,uCAAuC;QACvC,8FAA8F;QAC9F,wEAAwE;QACxE,0FAA0F;QAC1F,8DAA8D;QAC9D,gEAAgE;QAChE,EAAE;QACF,eAAe;QACf,iFAAiF;QACjF,EAAE;QACF,MAAM;QACN,yFAAyF;QACzF,gFAAgF;QAChF,8EAA8E;QAC9E,4EAA4E;QAC5E,yFAAyF;QACzF,8FAA8F;QAC9F,EAAE;QACF,aAAa;QACb,cAAc;QACd,oCAAoC;QACpC,4BAA4B;QAC5B,kCAAkC;QAClC,+BAA+B;QAC/B,uCAAuC;QACvC,EAAE;QACF,wBAAwB;QACxB,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAA;AACH,CAAC;AAED,oEAAoE;AAEpE,MAAM,YAAY,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,CAAU,CAAA;AAE5E,MAAM,wBAAwB,GAAsC;IAClE,OAAO,EAAE,CAAC,cAAc,EAAE,QAAQ,CAAC;IACnC,8EAA8E;IAC9E,wEAAwE;IACxE,yEAAyE;IACzE,SAAS,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC;IAC5B,MAAM,EAAE,CAAC,QAAQ,CAAC;IAClB,MAAM,EAAE,CAAC,QAAQ,CAAC;IAClB,IAAI,EAAE,EAAE;IACR,OAAO,EAAE,EAAE;IACX,EAAE,EAAE,EAAE,EAAE,wBAAwB;IAChC,KAAK,EAAE,EAAE;IACT,MAAM,EAAE,EAAE;IACV,KAAK,EAAE,EAAE;CACV,CAAA;AAED,wDAAwD;AACxD,SAAS,YAAY,CAAC,CAAS,EAAE,CAAS;IACxC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAA;IACrB,IAAI,CAAC,CAAC,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC,MAAM,CAAA;IAC9B,IAAI,CAAC,CAAC,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC,MAAM,CAAA;IAC9B,2EAA2E;IAC3E,wDAAwD;IACxD,IAAI,IAAI,GAAa,EAAE,CAAA;IACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAChD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,IAAI,GAAa,CAAC,CAAC,CAAC,CAAA;QAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC1C,IAAI,CAAC,IAAI,CACP,IAAI,CAAC,GAAG,CACN,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAClB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EACtB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAC1B,CACF,CAAA;QACH,CAAC;QACD,IAAI,GAAG,IAAI,CAAA;IACb,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;AAC5B,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,OAA0B;IAC9D,IAAI,IAAI,GAA0C,IAAI,CAAA;IACtD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QAClC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI;YAAE,IAAI,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;IACjE,CAAC;IACD,qEAAqE;IACrE,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAA;IAC5C,OAAO,IAAI,CAAA;AACb,CAAC;AAOD;;;;;;;GAOG;AACH,SAAS,aAAa,CAAC,OAAe,EAAE,IAAuB;IAC7D,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,wBAAwB,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,YAAY,CAAC,CAAA;IAC/E,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAClC,sDAAsD;QACtD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;QACzE,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAoC,CAAC;YAAE,SAAQ;QAEpE,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QACjD,MAAM,IAAI,GAAG,UAAU;YACrB,CAAC,CAAC,iBAAiB,UAAU,GAAG;YAChC,CAAC,CAAC,kDAAkD,CAAA;QACtD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,iBAAiB,QAAQ,IAAI,IAAI,EAAE;SAC7C,CAAA;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;AACrB,CAAC;AAED,yCAAyC;AAEzC,SAAS,WAAW,CAAC,GAAY,EAAE,KAAc;IAC/C,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAChE,IAAI,KAAK,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAC/C,OAAO,UAAU,OAAO,KAAK,GAAG,CAAC,KAAK,EAAE,CAAA;IAC1C,CAAC;IACD,OAAO,UAAU,OAAO,EAAE,CAAA;AAC5B,CAAC;AAED;;;;;GAKG;AACH,SAAS,OAAO,CAAC,IAAuB,EAAE,IAAY;IACpD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAC7B,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;YACtD,wDAAwD;YACxD,uCAAuC;YACvC,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,GAAG;gBAAE,OAAO,KAAK,CAAA;YACpD,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,wCAAwC;AAExC,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAuB;IAChD,KAAK,IAAI,CAAA,CAAC,+FAA+F;IACzG,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAEzB,MAAM,MAAM,GAAG,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,QAAQ,CAAA;IACjE,MAAM,SAAS,GAAG,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,WAAW,CAAA;IAE1E,4EAA4E;IAC5E,8EAA8E;IAC9E,MAAM,UAAU,GAAG,aAAa,CAC9B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,EAC7C,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CACd,CAAA;IACD,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,OAAO,IAAI,CAAC,CAAA;QAC/C,OAAO,UAAU,CAAC,YAAY,CAAA;IAChC,CAAC;IAED,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,EAAE,CAAC;QACR,KAAK,OAAO,CAAC;QACb,KAAK,QAAQ,CAAC;QACd,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,gBAAgB,EAAE,CAAA;YACxB,+DAA+D;YAC/D,OAAO,UAAU,CAAC,OAAO,CAAA;QAC3B,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAA;YAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;YACpC,sEAAsE;YACtE,oEAAoE;YACpE,MAAM,UAAU,CAAC,EAAE,WAAW,EAAE,CAAC,SAAS,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YAC5D,OAAO,UAAU,CAAC,OAAO,CAAA;QAC3B,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;YACpC,MAAM,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;YACzB,OAAO,UAAU,CAAC,OAAO,CAAA;QAC3B,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;YACpC,MAAM,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;YACzB,OAAO,UAAU,CAAC,OAAO,CAAA;QAC3B,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,oDAAoD;YACpD,IAAI,KAAyB,CAAA;YAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;gBACnB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;oBACtC,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;oBACnB,CAAC,EAAE,CAAA;gBACL,CAAC;qBAAM,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC7C,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;gBACtC,CAAC;YACH,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;gBAC7B,OAAO,CAAC,CAAA;YACV,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,kEAAkE;gBAClE,mEAAmE;gBACnE,+DAA+D;gBAC/D,uDAAuD;gBACvD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBAChE,IAAI,CAAC,+CAA+C,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBACnE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,OAAO,IAAI,CAAC,CAAA;gBAC7C,CAAC;gBACD,OAAO,CAAC,CAAA;YACV,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC;QACZ,KAAK,IAAI,CAAC;QACV,KAAK,QAAQ;YACX,UAAU,EAAE,CAAA;YACZ,OAAO,UAAU,CAAC,OAAO,CAAA;QAC3B,KAAK,SAAS,CAAC;QACf,KAAK,IAAI,CAAC;QACV,KAAK,WAAW;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,eAAe,IAAI,CAAC,CAAA;YAC5C,OAAO,UAAU,CAAC,OAAO,CAAA;QAC3B;YACE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,GAAG,MAAM,CAAC,CAAA;YACnD,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YAC1B,OAAO,UAAU,CAAC,YAAY,CAAA;IAClC,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,0EAA0E;AAC1E,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,CAAA;AAE5E,0BAA0B;AAC1B,MAAM,YAAY,GAChB,OAAO,OAAO,KAAK,WAAW;IAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;IAC7B,8EAA8E;IAC9E,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;AAE5C,0BAA0B;AAC1B,IAAI,YAAY,EAAE,CAAC;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;IACtC,IAAI,CAAC,IAAI,CAAC;SACP,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACb,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpC,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACpD,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;AACN,CAAC"}

package/dist/commands/authorize.js

@@ -0,0 +1,57 @@
+/**
+ * `clien-mcp authorize --token <refresh>` — paste-mode auth for headless
+ * environments (devcontainers, CI runners, remote SSH) where the user can't
+ * complete a browser OAuth flow but CAN obtain a refresh token from a
+ * one-time browser session on their laptop. See issue #169.
+ *
+ * Validates the token by calling Supabase's refresh endpoint, then persists
+ * the rotated token via the same backend (keytar / encrypted file) the
+ * server uses. After this, subsequent MCP server starts skip OAuth entirely.
+ */
+import { loadConfig } from '../config.js';
+import { refreshAccessToken } from '../auth/oauth.js';
+import { saveRefreshToken } from '../auth/storage.js';
+/** Resolve the token from explicit option, then env var. */
+function resolveToken(opts) {
+    if (opts.token && opts.token.length > 0)
+        return opts.token;
+    const fromEnv = process.env.CLIEN_MCP_REFRESH_TOKEN;
+    if (fromEnv && fromEnv.length > 0)
+        return fromEnv;
+    return null;
+}
+/**
+ * Run the authorize flow. Returns the storage backend used. Throws if no
+ * token is provided or the token is rejected by the auth server.
+ */
+export async function runAuthorize(opts = {}) {
+    const stdout = opts.stdout ?? process.stdout;
+    const stderr = opts.stderr ?? process.stderr;
+    const token = resolveToken(opts);
+    if (!token) {
+        stderr.write('error: no refresh token provided. Pass --token <refresh> or set CLIEN_MCP_REFRESH_TOKEN.\n');
+        throw new Error('missing refresh token');
+    }
+    const config = loadConfig();
+    // Validate by performing a real refresh against Supabase. This catches
+    // typos, wrong-environment tokens, and revoked tokens up front instead of
+    // surfacing the failure in the middle of a tool call later.
+    let rotated;
+    try {
+        rotated = await refreshAccessToken(config, token);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        stderr.write(`error: refresh token rejected by auth server: ${msg}\n`);
+        throw err;
+    }
+    const backend = await saveRefreshToken(rotated.refreshToken);
+    stdout.write([
+        '',
+        `  ✓ Refresh token validated and saved (backend: ${backend}).`,
+        '  You can now run clien_research from non-interactive contexts.',
+        '',
+    ].join('\n'));
+    return { backend };
+}
+//# sourceMappingURL=authorize.js.map

package/dist/commands/authorize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorize.js","sourceRoot":"","sources":["../../src/commands/authorize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAcrD,4DAA4D;AAC5D,SAAS,YAAY,CAAC,IAAsB;IAC1C,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAA;IAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAA;IACnD,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAA;IACjD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAyB,EAAE;IAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAA;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAA;IAE5C,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IAChC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,CACV,4FAA4F,CAC7F,CAAA;QACD,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;IAC1C,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAA;IAE3B,uEAAuE;IACvE,0EAA0E;IAC1E,4DAA4D;IAC5D,IAAI,OAAO,CAAA;IACX,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAC5D,MAAM,CAAC,KAAK,CAAC,iDAAiD,GAAG,IAAI,CAAC,CAAA;QACtE,MAAM,GAAG,CAAA;IACX,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;IAC5D,MAAM,CAAC,KAAK,CACV;QACE,EAAE;QACF,mDAAmD,OAAO,IAAI;QAC9D,iEAAiE;QACjE,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAA;IAED,OAAO,EAAE,OAAO,EAAE,CAAA;AACpB,CAAC"}

package/dist/commands/install.js

@@ -0,0 +1,144 @@
+/**
+ * `npx @clien-ai/mcp install` — writes the clien entry into Claude Code's
+ * MCP server config so the user can skip the "copy/paste a JSON snippet" step.
+ *
+ * The flow:
+ *   1. Locate the Claude Code config file per-platform (default
+ *      `~/.claude.json`, overridable via CLIEN_MCP_CLAUDE_CONFIG).
+ *   2. Read (or create) the file with `{ mcpServers: {} }`.
+ *   3. Merge `mcpServers.clien = { command: 'npx', args: ['-y', '@clien-ai/mcp'] }`.
+ *   4. Write atomically (via tmp file + rename).
+ *   5. Print next steps.
+ *   6. Optionally open the account page in the browser so the user is logged
+ *      in before the first OAuth round-trip (`--no-browser` skips it).
+ *
+ * The install is idempotent: running it twice leaves the config unchanged.
+ */
+import { existsSync, readFileSync, } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { writeFileAtomic } from '../util/atomic-write.js';
+const ACCOUNT_URL = 'https://clien.ai/app/account';
+const SERVER_KEY = 'clien';
+/**
+ * Resolve the Claude Code MCP config path.
+ *
+ * Priority:
+ *   1. CLIEN_MCP_CLAUDE_CONFIG env var
+ *   2. Platform-default `~/.claude.json` (macOS/Linux) or `%USERPROFILE%\.claude.json` (Windows)
+ *
+ * (Claude Code stores MCP servers under `.mcpServers` in `~/.claude.json`
+ * — this is the stable cross-platform location as of 2026-04.)
+ */
+export function resolveConfigPath(override) {
+    if (override && override.length > 0)
+        return override;
+    const fromEnv = process.env.CLIEN_MCP_CLAUDE_CONFIG;
+    if (fromEnv && fromEnv.length > 0)
+        return fromEnv;
+    return join(homedir(), '.claude.json');
+}
+function readConfig(path) {
+    if (!existsSync(path))
+        return {};
+    const raw = readFileSync(path, 'utf8').trim();
+    if (raw.length === 0)
+        return {};
+    try {
+        const parsed = JSON.parse(raw);
+        if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {
+            return parsed;
+        }
+        throw new Error('Config file did not contain a JSON object at the top level');
+    }
+    catch (err) {
+        throw new Error(`Failed to parse Claude Code config at ${path}: ${err.message}. ` +
+            `Fix or remove the file and re-run \`npx @clien-ai/mcp install\`.`);
+    }
+}
+function writeConfigAtomic(path, data) {
+    writeFileAtomic(path, `${JSON.stringify(data, null, 2)}\n`);
+}
+/** Build the mcpServers entry we add to Claude Code's config. */
+function buildEntry(packageName) {
+    return {
+        command: 'npx',
+        args: ['-y', packageName],
+    };
+}
+function entriesMatch(a, b) {
+    if (!a || typeof a !== 'object')
+        return false;
+    const ax = a;
+    if (ax.command !== b.command)
+        return false;
+    if (!Array.isArray(ax.args) || ax.args.length !== b.args.length)
+        return false;
+    return ax.args.every((v, i) => v === b.args[i]);
+}
+export async function runInstall(opts = {}) {
+    const packageName = opts.packageName ?? '@clien-ai/mcp';
+    const configPath = resolveConfigPath(opts.configPath);
+    const stdout = opts.stdout ?? process.stdout;
+    const created = !existsSync(configPath);
+    const previous = readConfig(configPath);
+    const entry = buildEntry(packageName);
+    const mcpServers = { ...(previous.mcpServers ?? {}) };
+    const existing = mcpServers[SERVER_KEY];
+    const alreadyMatches = entriesMatch(existing, entry);
+    let updated = false;
+    if (!alreadyMatches) {
+        mcpServers[SERVER_KEY] = entry;
+        updated = true;
+        const next = { ...previous, mcpServers };
+        writeConfigAtomic(configPath, next);
+    }
+    if (opts.json) {
+        stdout.write(JSON.stringify({ configPath, created, updated }) + '\n');
+    }
+    else {
+        stdout.write([
+            '',
+            `  ✓ Clien.ai MCP ${updated ? (created ? 'written' : 'merged') : 'already present'} at ${configPath}`,
+            '',
+            '  Next steps:',
+            '    1. Restart Claude Code to pick up the new server.',
+            '    2. Ask Claude Code: "run a deep research pass on my product idea" —',
+            '       it will call `clien_research` and prompt you to log in via your browser.',
+            '',
+            `  We'll open ${ACCOUNT_URL} so you're logged in before the first OAuth handshake.`,
+            '',
+        ].join('\n'));
+    }
+    if (opts.openBrowser !== false) {
+        try {
+            const opener = opts.browserOpener ?? (await defaultBrowserOpener());
+            if (opener)
+                await opener(ACCOUNT_URL);
+        }
+        catch {
+            // Browser open is a nice-to-have — the user can click the URL above.
+        }
+    }
+    return {
+        configPath,
+        created,
+        updated,
+        previous,
+    };
+}
+async function defaultBrowserOpener() {
+    try {
+        const mod = (await import('open'));
+        const fn = typeof mod === 'function'
+            ? mod
+            : mod.default;
+        return async (url) => {
+            await fn(url);
+        };
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=install.js.map

package/dist/commands/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../src/commands/install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EACL,UAAU,EACV,YAAY,GACb,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAmCzD,MAAM,WAAW,GAAG,8BAA8B,CAAA;AAClD,MAAM,UAAU,GAAG,OAAO,CAAA;AAE1B;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAiB;IACjD,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAA;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAA;IACnD,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAA;IAEjD,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAA;AACxC,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAA;IAChC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;IAC7C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAA;QACzC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,OAAO,MAAuB,CAAA;QAChC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAA;IAC/E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,KAAM,GAAa,CAAC,OAAO,IAAI;YAC1E,kEAAkE,CACrE,CAAA;IACH,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,IAAmB;IAC1D,eAAe,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;AAC7D,CAAC;AAED,iEAAiE;AACjE,SAAS,UAAU,CAAC,WAAmB;IACrC,OAAO;QACL,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC;KAC1B,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,CAAU,EAAE,CAAsC;IACtE,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC7C,MAAM,EAAE,GAAG,CAA0C,CAAA;IACrD,IAAI,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO;QAAE,OAAO,KAAK,CAAA;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IAC7E,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;AACjD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAuB,EAAE;IACxD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,eAAe,CAAA;IACvD,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACrD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAA;IAC5C,MAAM,OAAO,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAA;IAEvC,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;IACvC,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,CAAC,CAAA;IAErC,MAAM,UAAU,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC,EAA6B,CAAA;IAChF,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;IACvC,MAAM,cAAc,GAAG,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IAEpD,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,UAAU,CAAC,UAAU,CAAC,GAAG,KAAK,CAAA;QAC9B,OAAO,GAAG,IAAI,CAAA;QACd,MAAM,IAAI,GAAkB,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,CAAA;QACvD,iBAAiB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;IACrC,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAA;IACvE,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,KAAK,CACV;YACE,EAAE;YACF,oBAAoB,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,iBAAiB,OAAO,UAAU,EAAE;YACrG,EAAE;YACF,eAAe;YACf,uDAAuD;YACvD,yEAAyE;YACzE,iFAAiF;YACjF,EAAE;YACF,gBAAgB,WAAW,wDAAwD;YACnF,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAA;IACH,CAAC;IAED,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,MAAM,oBAAoB,EAAE,CAAC,CAAA;YACnE,IAAI,MAAM;gBAAE,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;IACH,CAAC;IAED,OAAO;QACL,UAAU;QACV,OAAO;QACP,OAAO;QACP,QAAQ;KACT,CAAA;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,CAEM,CAAA;QACvC,MAAM,EAAE,GACN,OAAO,GAAG,KAAK,UAAU;YACvB,CAAC,CAAE,GAAyC;YAC5C,CAAC,CAAE,GAAsD,CAAC,OAAO,CAAA;QACrE,OAAO,KAAK,EAAE,GAAW,EAAE,EAAE;YAC3B,MAAM,EAAE,CAAC,GAAG,CAAC,CAAA;QACf,CAAC,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/commands/logout.js

@@ -0,0 +1,35 @@
+/**
+ * `clien-mcp logout` — clear stored credentials so the next tool call
+ * triggers a fresh OAuth flow.
+ *
+ * Replaces the previous `node -e "require(...)"` workaround the README used
+ * to document. Agent-friendly: zero arguments, deterministic output, exits 0
+ * on success.
+ */
+import { clearTokens, getStorageStatus } from '../auth/storage.js';
+export async function runLogout(opts = {}) {
+    const stdout = opts.stdout ?? process.stdout;
+    const before = await getStorageStatus();
+    const hadTokenIn = before.hasToken ? before.backend : null;
+    await clearTokens();
+    if (opts.json) {
+        stdout.write(JSON.stringify({ ok: true, hadTokenIn }) + '\n');
+    }
+    else if (hadTokenIn) {
+        stdout.write([
+            '',
+            `  ✓ Cleared stored refresh token (was in ${hadTokenIn}).`,
+            '  Next clien_research call will trigger a fresh OAuth login.',
+            '',
+        ].join('\n'));
+    }
+    else {
+        stdout.write([
+            '',
+            '  No stored credentials found — already logged out.',
+            '',
+        ].join('\n'));
+    }
+    return { hadTokenIn };
+}
+//# sourceMappingURL=logout.js.map

package/dist/commands/logout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.js","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAalE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB,EAAE;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAA;IAC5C,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAA;IACvC,MAAM,UAAU,GAA6B,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAA;IAEpF,MAAM,WAAW,EAAE,CAAA;IAEnB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,CAAA;IAC/D,CAAC;SAAM,IAAI,UAAU,EAAE,CAAC;QACtB,MAAM,CAAC,KAAK,CACV;YACE,EAAE;YACF,4CAA4C,UAAU,IAAI;YAC1D,8DAA8D;YAC9D,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAA;IACH,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,KAAK,CACV;YACE,EAAE;YACF,qDAAqD;YACrD,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAA;IACH,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,CAAA;AACvB,CAAC"}

package/dist/commands/status.js

@@ -0,0 +1,70 @@
+/**
+ * `clien-mcp status` — print a diagnostic snapshot of the stored credentials.
+ *
+ * Used by agents and humans who want to confirm "am I logged in" before
+ * triggering a 25-minute research run. Outputs a machine-parseable JSON
+ * payload when `--json` is set, human-readable text otherwise.
+ *
+ * Note: token TTL (access-token expiry) isn't persisted on disk — only the
+ * refresh token is — so we surface what's actually knowable: backend, token
+ * presence, and the file's mtime when the encrypted-file backend is in use.
+ */
+import { existsSync, statSync } from 'node:fs';
+import { getStorageStatus, getTokenFilePath } from '../auth/storage.js';
+import { PACKAGE_NAME, PACKAGE_VERSION } from '../config.js';
+export async function runStatus(opts = {}) {
+    const stdout = opts.stdout ?? process.stdout;
+    const status = await getStorageStatus();
+    let tokenAgeMs = null;
+    let lastRefreshedAt = null;
+    if (status.backend === 'file' && status.hasToken) {
+        const path = getTokenFilePath();
+        if (existsSync(path)) {
+            try {
+                const stat = statSync(path);
+                tokenAgeMs = Math.max(0, Date.now() - stat.mtimeMs);
+                lastRefreshedAt = new Date(stat.mtimeMs).toISOString();
+            }
+            catch {
+                // benign — we just won't report mtime
+            }
+        }
+    }
+    const report = {
+        package: { name: PACKAGE_NAME, version: PACKAGE_VERSION },
+        backend: status.backend,
+        hasToken: status.hasToken,
+        tokenAgeMs,
+        lastRefreshedAt,
+    };
+    if (opts.json) {
+        stdout.write(JSON.stringify(report) + '\n');
+        return report;
+    }
+    const lines = ['', `  ${report.package.name} v${report.package.version}`, ''];
+    lines.push(`  Backend:        ${report.backend}`);
+    lines.push(`  Has token:      ${report.hasToken ? 'yes' : 'no'}`);
+    if (report.lastRefreshedAt) {
+        lines.push(`  Last refreshed: ${report.lastRefreshedAt} (${humanizeAge(report.tokenAgeMs)})`);
+    }
+    else if (report.backend === 'keytar' && report.hasToken) {
+        lines.push('  Last refreshed: (metadata not exposed by OS keychain)');
+    }
+    lines.push('');
+    stdout.write(lines.join('\n'));
+    return report;
+}
+function humanizeAge(ms) {
+    const sec = Math.round(ms / 1000);
+    if (sec < 60)
+        return `${sec}s ago`;
+    const min = Math.round(sec / 60);
+    if (min < 60)
+        return `${min}m ago`;
+    const hr = Math.round(min / 60);
+    if (hr < 48)
+        return `${hr}h ago`;
+    const day = Math.round(hr / 24);
+    return `${day}d ago`;
+}
+//# sourceMappingURL=status.js.map

package/dist/commands/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/commands/status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAC9C,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACvE,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AA0B5D,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB,EAAE;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAA;IAC5C,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAA;IAEvC,IAAI,UAAU,GAAkB,IAAI,CAAA;IACpC,IAAI,eAAe,GAAkB,IAAI,CAAA;IAEzC,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAA;QAC/B,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;gBAC3B,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAA;gBACnD,eAAe,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAA;YACxD,CAAC;YAAC,MAAM,CAAC;gBACP,sCAAsC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAiB;QAC3B,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,eAAe,EAAE;QACzD,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU;QACV,eAAe;KAChB,CAAA;IAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAA;QAC3C,OAAO,MAAM,CAAA;IACf,CAAC;IAED,MAAM,KAAK,GAAa,CAAC,EAAE,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;IACvF,KAAK,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;IACjD,KAAK,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IACjE,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,eAAe,KAAK,WAAW,CAAC,MAAM,CAAC,UAAW,CAAC,GAAG,CAAC,CAAA;IAChG,CAAC;SAAM,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAA;IACvE,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACd,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAE9B,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,WAAW,CAAC,EAAU;IAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAA;IACjC,IAAI,GAAG,GAAG,EAAE;QAAE,OAAO,GAAG,GAAG,OAAO,CAAA;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,EAAE,CAAC,CAAA;IAChC,IAAI,GAAG,GAAG,EAAE;QAAE,OAAO,GAAG,GAAG,OAAO,CAAA;IAClC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,EAAE,CAAC,CAAA;IAC/B,IAAI,EAAE,GAAG,EAAE;QAAE,OAAO,GAAG,EAAE,OAAO,CAAA;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;IAC/B,OAAO,GAAG,GAAG,OAAO,CAAA;AACtB,CAAC"}