@cnwenf/occ 2.1.280 → 2.1.281

package/dist/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env bun
-globalThis.MACRO={"VERSION":"2.1.280","BUILD_TIME":"2026-07-24T09:01:43.886Z","FEEDBACK_CHANNEL":"","ISSUES_EXPLAINER":"","NATIVE_PACKAGE_URL":"","PACKAGE_URL":"@cnwenf/occ","VERSION_CHANGELOG":""};
+globalThis.MACRO={"VERSION":"2.1.281","BUILD_TIME":"2026-07-24T09:21:36.637Z","FEEDBACK_CHANNEL":"","ISSUES_EXPLAINER":"","NATIVE_PACKAGE_URL":"","PACKAGE_URL":"@cnwenf/occ","VERSION_CHANGELOG":""};
 // @bun
 var __create = Object.create;
 var __getProtoOf = Object.getPrototypeOf;
@@ -819935,6 +819935,8 @@ __export(exports_mcp3, {
   mcpServeHandler: () => mcpServeHandler,
   mcpResetChoicesHandler: () => mcpResetChoicesHandler,
   mcpRemoveHandler: () => mcpRemoveHandler,
+  mcpLogoutHandler: () => mcpLogoutHandler,
+  mcpLoginHandler: () => mcpLoginHandler,
   mcpListHandler: () => mcpListHandler,
   mcpGetHandler: () => mcpGetHandler,
   mcpAddJsonHandler: () => mcpAddJsonHandler,
@@ -819942,6 +819944,7 @@ __export(exports_mcp3, {
 });
 import { stat as stat57 } from "fs/promises";
 import { cwd as cwd3 } from "process";
+import readline5 from "readline";
 async function checkMcpServerHealth(name3, server) {
   try {
     const result = await connectToServer(name3, server);
@@ -820239,6 +820242,66 @@ async function mcpResetChoicesHandler() {
   cliOk(`All project-scoped (.mcp.json) server approvals and rejections have been reset.
 You will be prompted for approval next time you start Claude Code.`);
 }
+async function mcpLoginHandler(name3, options) {
+  logEvent2("tengu_mcp_oauth_login", {
+    name: name3
+  });
+  const server = getMcpConfigByName(name3);
+  if (!server) {
+    const { servers } = await getAllMcpConfigs();
+    cliError(`No MCP server named "${name3}". Configured servers: ${Object.keys(servers).join(", ")}`);
+  }
+  if (server.type === "claudeai-proxy") {
+    cliError(`"${name3}" is a claude.ai connector \u2014 it authenticates via your Anthropic account. Run \`claude auth login\` instead.`);
+  }
+  if (server.type !== "http" && server.type !== "sse") {
+    cliError(`"${name3}" doesn't support OAuth login \u2014 it's only available for HTTP and SSE servers.`);
+  }
+  const noBrowser = options.noBrowser === true;
+  const onAuthorizationUrl = (url3) => {
+    console.log(noBrowser ? `Open this URL in a browser to authorize:
+${url3}` : `Opening browser to authorize MCP server "${name3}"\u2026
+${url3}`);
+  };
+  const onWaitingForCallback = noBrowser ? (submit) => {
+    console.log(`
+After authorizing, paste the full redirect URL here and press Enter:`);
+    const rl = readline5.createInterface({ input: process.stdin });
+    rl.question("> ", (answer) => {
+      rl.close();
+      submit(answer.trim());
+    });
+  } : undefined;
+  try {
+    await performMCPOAuthFlow(name3, server, onAuthorizationUrl, undefined, {
+      skipBrowserOpen: noBrowser,
+      onWaitingForCallback
+    });
+    cliOk(`Successfully authenticated with MCP server "${name3}".`);
+  } catch (error52) {
+    cliError(`Failed to authenticate with MCP server "${name3}": ${error52.message}`);
+  }
+}
+async function mcpLogoutHandler(name3) {
+  logEvent2("tengu_mcp_oauth_logout", {
+    name: name3
+  });
+  const server = getMcpConfigByName(name3);
+  if (!server) {
+    const { servers } = await getAllMcpConfigs();
+    cliError(`No MCP server named "${name3}". Configured servers: ${Object.keys(servers).join(", ")}`);
+  }
+  if (server.type !== "http" && server.type !== "sse") {
+    cliError(`"${name3}" doesn't use OAuth \u2014 there are no stored credentials to clear.`);
+  }
+  try {
+    await revokeServerTokens(name3, server, {});
+    clearMcpClientConfig(name3, server);
+    cliOk(`Cleared stored OAuth credentials for MCP server "${name3}".`);
+  } catch (error52) {
+    cliError(`Failed to clear credentials for MCP server "${name3}": ${error52.message}`);
+  }
+}
 var jsx_runtime500;
 var init_mcp5 = __esm(() => {
   init_p_map();
@@ -821808,7 +821871,7 @@ __export(exports_autoMode, {
   autoModeConfigHandler: () => autoModeConfigHandler
 });
 import { readFileSync as readFileSync37 } from "fs";
-import * as readline5 from "readline/promises";
+import * as readline6 from "readline/promises";
 function writeRules(rules2) {
   process.stdout.write(jsonStringify(rules2, null, 2) + `
 `);
@@ -821947,7 +822010,7 @@ function readUserSettingsRaw(path43) {
 async function defaultConfirm(message) {
   if (!process.stdin.isTTY)
     return false;
-  const rl = readline5.createInterface({
+  const rl = readline6.createInterface({
     input: process.stdin,
     output: process.stdout
   });
@@ -822903,6 +822966,8 @@ async function run() {
       sortOptions: true
     }, {
       compareOptions: (a6, b6) => getOptionSortKey(a6).localeCompare(getOptionSortKey(b6))
+    }, process.stdout.isTTY ? {} : {
+      helpWidth: 80
     });
   }
   const program3 = new Command().configureHelp(createSortedHelpConfig()).enablePositionalOptions();
@@ -825124,18 +825189,30 @@ Usage: claude --remote "your task description"`, () => gracefulShutdown(1));
     } = await Promise.resolve().then(() => (init_mcp5(), exports_mcp3));
     await mcpRemoveHandler2(name3, options);
   });
-  mcp2.command("list").description("List configured MCP servers. Note: The workspace trust dialog is skipped and stdio servers from .mcp.json are spawned for health checks. Only use this command in directories you trust.").action(async () => {
+  mcp2.command("list").description("List configured MCP servers. Unapproved .mcp.json servers are shown as \u23F8 Pending approval and not connected to; approved servers are health-checked.").action(async () => {
     const {
       mcpListHandler: mcpListHandler2
     } = await Promise.resolve().then(() => (init_mcp5(), exports_mcp3));
     await mcpListHandler2();
   });
-  mcp2.command("get <name>").description("Get details about an MCP server. Note: The workspace trust dialog is skipped and stdio servers from .mcp.json are spawned for health checks. Only use this command in directories you trust.").action(async (name3) => {
+  mcp2.command("get <name>").description("Get details about an MCP server. Unapproved .mcp.json servers are shown as \u23F8 Pending approval and not connected to; approved servers are health-checked.").action(async (name3) => {
     const {
       mcpGetHandler: mcpGetHandler2
     } = await Promise.resolve().then(() => (init_mcp5(), exports_mcp3));
     await mcpGetHandler2(name3);
   });
+  mcp2.command("login <name>").description("Authenticate with an MCP server (HTTP, SSE, or claude.ai connector)").option("--no-browser", "Print the authorization URL instead of opening a browser (for SSH/headless sessions \u2014 paste the redirect URL back when prompted)").action(async (name3, options) => {
+    const {
+      mcpLoginHandler: mcpLoginHandler2
+    } = await Promise.resolve().then(() => (init_mcp5(), exports_mcp3));
+    await mcpLoginHandler2(name3, options);
+  });
+  mcp2.command("logout <name>").description("Clear stored OAuth credentials for an MCP server").action(async (name3) => {
+    const {
+      mcpLogoutHandler: mcpLogoutHandler2
+    } = await Promise.resolve().then(() => (init_mcp5(), exports_mcp3));
+    await mcpLogoutHandler2(name3);
+  });
   mcp2.command("add-json <name> <json>").description("Add an MCP server (stdio or SSE) with a JSON string").option("-s, --scope <scope>", "Configuration scope (local, user, or project)", "local").option("--client-secret", "Prompt for OAuth client secret (or set MCP_CLIENT_SECRET env var)").action(async (name3, json2, options) => {
     const {
       mcpAddJsonHandler: mcpAddJsonHandler2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cnwenf/occ",
-  "version": "2.1.280",
+  "version": "2.1.281",
   "license": "MIT",
   "type": "module",
   "bin": {