@cnwenf/occ 2.1.279 → 2.1.281

package/dist/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env bun
-globalThis.MACRO={"VERSION":"2.1.279","BUILD_TIME":"2026-07-24T07:02:14.850Z","FEEDBACK_CHANNEL":"","ISSUES_EXPLAINER":"","NATIVE_PACKAGE_URL":"","PACKAGE_URL":"@cnwenf/occ","VERSION_CHANGELOG":""};
+globalThis.MACRO={"VERSION":"2.1.281","BUILD_TIME":"2026-07-24T09:21:36.637Z","FEEDBACK_CHANNEL":"","ISSUES_EXPLAINER":"","NATIVE_PACKAGE_URL":"","PACKAGE_URL":"@cnwenf/occ","VERSION_CHANGELOG":""};
 // @bun
 var __create = Object.create;
 var __getProtoOf = Object.getPrototypeOf;
@@ -684818,22 +684818,22 @@ var init_OccWelcome = __esm(() => {
   jsx_runtime263 = __toESM(require_jsx_runtime(), 1);
   OCC_LOGOS = {
     wide: normalizeLogo([
-      "      \u2880\u28E0\u28E4\u28C0",
-      "   \u2880\u28FE\u281F\u2809\u2809\u283B\u28F7\u28C4",
-      "  \u28F0\u28FF\u2803  \u28C0  \u2818\u28FF\u28C6",
-      " \u28B8\u28FF\u2847  \u28FF\u28FF\u2847  \u28FF\u28FF  \u2830\u2844",
-      "  \u28BF\u28F7  \u283B\u281F  \u28F0\u28FF\u280F \u2880\u281E",
-      "   \u283B\u28F7\u28C4  \u28E0\u28FE\u281F  \u2870\u280B",
-      "     \u2819\u283F\u283F\u281B\u2801  \u2818\u2801"
+      "\u259F\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2599",
+      "\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u259B",
+      "\u2588\u2588        ",
+      "\u2588\u2588        ",
+      "\u2588\u2588        ",
+      "\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u259C",
+      "\u259C\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u259B"
     ]),
     compact: normalizeLogo([
-      "   \u28E0\u28E4\u28C4",
-      " \u28F0\u287F\u280B\u2819\u28BF\u28C6",
-      "\u28B0\u28FF  \u28FF\u2847 \u28FF\u2847\u28A0",
-      " \u28BF\u28E7 \u281B \u28F0\u287F\u28A0\u2803",
-      "  \u2819\u283F\u28F6\u283F\u280B \u2818"
+      "\u259F\u2588\u2588\u2588\u2588\u2588\u2588\u2599",
+      "\u2588\u2588      ",
+      "\u2588\u2588      ",
+      "\u2588\u2588      ",
+      "\u259C\u2588\u2588\u2588\u2588\u2588\u2588\u259B"
     ]),
-    plain: normalizeLogo([" \u28E0\u28C4", "\u28B8\u2847\u28FF\u2847\u28A0", " \u283B\u2836\u280B\u2818"])
+    plain: normalizeLogo(["\u259F\u2588\u2588\u2588\u2588\u2599", "\u2588\u2588    ", "\u259C\u2588\u2588\u2588\u2588\u259B"])
   };
 });
 
@@ -812143,7 +812143,7 @@ function registerMcpAddCommand(mcp2) {
 ` + `  claude mcp add --transport http corridor https://app.corridor.dev/api/mcp --header "Authorization: Bearer ..."
 
 ` + `  # Add stdio server with environment variables:
-` + `  claude mcp add -e API_KEY=xxx my-server -- npx my-mcp-server
+` + `  claude mcp add my-server -e API_KEY=xxx -- npx my-mcp-server
 
 ` + `  # Add stdio server with subprocess flags:
 ` + "  claude mcp add my-server -- my-command --some-flag arg1").option("-s, --scope <scope>", "Configuration scope (local, user, or project)", "local").option("-t, --transport <transport>", "Transport type (stdio, sse, http). Defaults to stdio if not specified.").option("-e, --env <env...>", "Set environment variables (e.g. -e KEY=value)").option("-H, --header <header...>", 'Set WebSocket headers (e.g. -H "X-Api-Key: abc123" -H "X-Custom: value")').option("--client-id <clientId>", "OAuth client ID for HTTP/SSE servers").option("--client-secret", "Prompt for OAuth client secret (or set MCP_CLIENT_SECRET env var)").option("--callback-port <port>", "Fixed port for OAuth callback (for servers requiring pre-registered redirect URIs)").helpOption("-h, --help", "Display help for command").addOption(new Option("--xaa", "Enable XAA (SEP-990) for this server. Requires 'claude mcp xaa setup' first. Also requires --client-id and --client-secret (for the MCP server's AS).").hideHelp(!isXaaEnabled())).action(async (name3, commandOrUrl, args, options) => {
@@ -819935,6 +819935,8 @@ __export(exports_mcp3, {
   mcpServeHandler: () => mcpServeHandler,
   mcpResetChoicesHandler: () => mcpResetChoicesHandler,
   mcpRemoveHandler: () => mcpRemoveHandler,
+  mcpLogoutHandler: () => mcpLogoutHandler,
+  mcpLoginHandler: () => mcpLoginHandler,
   mcpListHandler: () => mcpListHandler,
   mcpGetHandler: () => mcpGetHandler,
   mcpAddJsonHandler: () => mcpAddJsonHandler,
@@ -819942,6 +819944,7 @@ __export(exports_mcp3, {
 });
 import { stat as stat57 } from "fs/promises";
 import { cwd as cwd3 } from "process";
+import readline5 from "readline";
 async function checkMcpServerHealth(name3, server) {
   try {
     const result = await connectToServer(name3, server);
@@ -820239,6 +820242,66 @@ async function mcpResetChoicesHandler() {
   cliOk(`All project-scoped (.mcp.json) server approvals and rejections have been reset.
 You will be prompted for approval next time you start Claude Code.`);
 }
+async function mcpLoginHandler(name3, options) {
+  logEvent2("tengu_mcp_oauth_login", {
+    name: name3
+  });
+  const server = getMcpConfigByName(name3);
+  if (!server) {
+    const { servers } = await getAllMcpConfigs();
+    cliError(`No MCP server named "${name3}". Configured servers: ${Object.keys(servers).join(", ")}`);
+  }
+  if (server.type === "claudeai-proxy") {
+    cliError(`"${name3}" is a claude.ai connector \u2014 it authenticates via your Anthropic account. Run \`claude auth login\` instead.`);
+  }
+  if (server.type !== "http" && server.type !== "sse") {
+    cliError(`"${name3}" doesn't support OAuth login \u2014 it's only available for HTTP and SSE servers.`);
+  }
+  const noBrowser = options.noBrowser === true;
+  const onAuthorizationUrl = (url3) => {
+    console.log(noBrowser ? `Open this URL in a browser to authorize:
+${url3}` : `Opening browser to authorize MCP server "${name3}"\u2026
+${url3}`);
+  };
+  const onWaitingForCallback = noBrowser ? (submit) => {
+    console.log(`
+After authorizing, paste the full redirect URL here and press Enter:`);
+    const rl = readline5.createInterface({ input: process.stdin });
+    rl.question("> ", (answer) => {
+      rl.close();
+      submit(answer.trim());
+    });
+  } : undefined;
+  try {
+    await performMCPOAuthFlow(name3, server, onAuthorizationUrl, undefined, {
+      skipBrowserOpen: noBrowser,
+      onWaitingForCallback
+    });
+    cliOk(`Successfully authenticated with MCP server "${name3}".`);
+  } catch (error52) {
+    cliError(`Failed to authenticate with MCP server "${name3}": ${error52.message}`);
+  }
+}
+async function mcpLogoutHandler(name3) {
+  logEvent2("tengu_mcp_oauth_logout", {
+    name: name3
+  });
+  const server = getMcpConfigByName(name3);
+  if (!server) {
+    const { servers } = await getAllMcpConfigs();
+    cliError(`No MCP server named "${name3}". Configured servers: ${Object.keys(servers).join(", ")}`);
+  }
+  if (server.type !== "http" && server.type !== "sse") {
+    cliError(`"${name3}" doesn't use OAuth \u2014 there are no stored credentials to clear.`);
+  }
+  try {
+    await revokeServerTokens(name3, server, {});
+    clearMcpClientConfig(name3, server);
+    cliOk(`Cleared stored OAuth credentials for MCP server "${name3}".`);
+  } catch (error52) {
+    cliError(`Failed to clear credentials for MCP server "${name3}": ${error52.message}`);
+  }
+}
 var jsx_runtime500;
 var init_mcp5 = __esm(() => {
   init_p_map();
@@ -821808,7 +821871,7 @@ __export(exports_autoMode, {
   autoModeConfigHandler: () => autoModeConfigHandler
 });
 import { readFileSync as readFileSync37 } from "fs";
-import * as readline5 from "readline/promises";
+import * as readline6 from "readline/promises";
 function writeRules(rules2) {
   process.stdout.write(jsonStringify(rules2, null, 2) + `
 `);
@@ -821947,7 +822010,7 @@ function readUserSettingsRaw(path43) {
 async function defaultConfirm(message) {
   if (!process.stdin.isTTY)
     return false;
-  const rl = readline5.createInterface({
+  const rl = readline6.createInterface({
     input: process.stdin,
     output: process.stdout
   });
@@ -822903,6 +822966,8 @@ async function run() {
       sortOptions: true
     }, {
       compareOptions: (a6, b6) => getOptionSortKey(a6).localeCompare(getOptionSortKey(b6))
+    }, process.stdout.isTTY ? {} : {
+      helpWidth: 80
     });
   }
   const program3 = new Command().configureHelp(createSortedHelpConfig()).enablePositionalOptions();
@@ -825063,9 +825128,7 @@ Usage: claude --remote "your task description"`, () => gracefulShutdown(1));
   if (feature("UDS_INBOX")) {
     program3.addOption(new Option("--messaging-socket-path <path>", "Unix domain socket path for the UDS messaging server (defaults to a tmp path)"));
   }
-  if (feature("KAIROS") || feature("KAIROS_BRIEF")) {
-    program3.addOption(new Option("--brief", "Enable SendUserMessage tool for agent-to-user communication"));
-  }
+  program3.addOption(new Option("--brief", "Enable SendUserMessage tool for agent-to-user communication"));
   if (feature("KAIROS")) {
     program3.addOption(new Option("--assistant", "Force assistant mode (Agent SDK daemon use)").hideHelp());
   }
@@ -825086,8 +825149,9 @@ Usage: claude --remote "your task description"`, () => gracefulShutdown(1));
   program3.addOption(new Option("--daemon-worker <kind>", "Run as a B daemon worker of the given kind (internal)").hideHelp());
   program3.addOption(new Option("--teleport [session]", "Resume a teleport session, optionally specify session ID").hideHelp());
   program3.addOption(new Option("--remote [description]", "Create a remote session with the given description").hideHelp());
+  program3.addOption(new Option("--remote-control [name]", "Start an interactive session with Remote Control enabled (optionally named)").argParser((value) => value || true));
+  program3.addOption(new Option("--remote-control-session-name-prefix <prefix>", "Prefix for auto-generated Remote Control session names (default: hostname)"));
   if (feature("BRIDGE_MODE")) {
-    program3.addOption(new Option("--remote-control [name]", "Start an interactive session with Remote Control enabled (optionally named)").argParser((value) => value || true).hideHelp());
     program3.addOption(new Option("--rc [name]", "Alias for --remote-control").argParser((value) => value || true).hideHelp());
   }
   if (feature("HARD_FAIL")) {
@@ -825125,18 +825189,30 @@ Usage: claude --remote "your task description"`, () => gracefulShutdown(1));
     } = await Promise.resolve().then(() => (init_mcp5(), exports_mcp3));
     await mcpRemoveHandler2(name3, options);
   });
-  mcp2.command("list").description("List configured MCP servers. Note: The workspace trust dialog is skipped and stdio servers from .mcp.json are spawned for health checks. Only use this command in directories you trust.").action(async () => {
+  mcp2.command("list").description("List configured MCP servers. Unapproved .mcp.json servers are shown as \u23F8 Pending approval and not connected to; approved servers are health-checked.").action(async () => {
     const {
       mcpListHandler: mcpListHandler2
     } = await Promise.resolve().then(() => (init_mcp5(), exports_mcp3));
     await mcpListHandler2();
   });
-  mcp2.command("get <name>").description("Get details about an MCP server. Note: The workspace trust dialog is skipped and stdio servers from .mcp.json are spawned for health checks. Only use this command in directories you trust.").action(async (name3) => {
+  mcp2.command("get <name>").description("Get details about an MCP server. Unapproved .mcp.json servers are shown as \u23F8 Pending approval and not connected to; approved servers are health-checked.").action(async (name3) => {
     const {
       mcpGetHandler: mcpGetHandler2
     } = await Promise.resolve().then(() => (init_mcp5(), exports_mcp3));
     await mcpGetHandler2(name3);
   });
+  mcp2.command("login <name>").description("Authenticate with an MCP server (HTTP, SSE, or claude.ai connector)").option("--no-browser", "Print the authorization URL instead of opening a browser (for SSH/headless sessions \u2014 paste the redirect URL back when prompted)").action(async (name3, options) => {
+    const {
+      mcpLoginHandler: mcpLoginHandler2
+    } = await Promise.resolve().then(() => (init_mcp5(), exports_mcp3));
+    await mcpLoginHandler2(name3, options);
+  });
+  mcp2.command("logout <name>").description("Clear stored OAuth credentials for an MCP server").action(async (name3) => {
+    const {
+      mcpLogoutHandler: mcpLogoutHandler2
+    } = await Promise.resolve().then(() => (init_mcp5(), exports_mcp3));
+    await mcpLogoutHandler2(name3);
+  });
   mcp2.command("add-json <name> <json>").description("Add an MCP server (stdio or SSE) with a JSON string").option("-s, --scope <scope>", "Configuration scope (local, user, or project)", "local").option("--client-secret", "Prompt for OAuth client secret (or set MCP_CLIENT_SECRET env var)").action(async (name3, json2, options) => {
     const {
       mcpAddJsonHandler: mcpAddJsonHandler2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cnwenf/occ",
-  "version": "2.1.279",
+  "version": "2.1.281",
   "license": "MIT",
   "type": "module",
   "bin": {