@cookiecrumbs-eu/mcp 0.7.0 → 0.7.1

package/dist/cli/src/auth.js

@@ -1,62 +1,10 @@
-import { chmodSync, existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
-import { homedir } from 'node:os';
-import { dirname, join } from 'node:path';
 import { isDeviceTokenOk } from "./api.js";
 import { CliError } from "./errors.js";
 import { human, spinner } from "./output.js";
 import { openBrowser, sleep, pollMs } from "./util.js";
-/** `%APPDATA%/cookiecrumbs/credentials.json` on Windows, `~/.config/cookiecrumbs/credentials.json` elsewhere. */
-export function credentialsPath() {
-    if (process.env.COOKIECRUMBS_CREDENTIALS)
-        return process.env.COOKIECRUMBS_CREDENTIALS;
-    if (process.platform === 'win32') {
-        const base = process.env.APPDATA ?? join(homedir(), 'AppData', 'Roaming');
-        return join(base, 'cookiecrumbs', 'credentials.json');
-    }
-    const base = process.env.XDG_CONFIG_HOME ?? join(homedir(), '.config');
-    return join(base, 'cookiecrumbs', 'credentials.json');
-}
-export function readCredentials() {
-    const file = credentialsPath();
-    if (!existsSync(file))
-        return null;
-    try {
-        const c = JSON.parse(readFileSync(file, 'utf8'));
-        return c && typeof c.token === 'string' ? c : null;
-    }
-    catch {
-        return null;
-    }
-}
-export function writeCredentials(c) {
-    const file = credentialsPath();
-    mkdirSync(dirname(file), { recursive: true, mode: 0o700 });
-    writeFileSync(file, JSON.stringify({ ...c, saved_at: new Date().toISOString() }, null, 2) + '\n', { mode: 0o600 });
-    try {
-        chmodSync(file, 0o600);
-    }
-    catch {
-        /* Windows ignores POSIX modes; the file sits under the user's profile */
-    }
-    return file;
-}
-export function clearCredentials() {
-    const file = credentialsPath();
-    if (!existsSync(file))
-        return false;
-    rmSync(file);
-    return true;
-}
-/** COOKIECRUMBS_TOKEN wins over the credentials file. */
-export function resolveToken() {
-    const env = process.env.COOKIECRUMBS_TOKEN?.trim();
-    if (env)
-        return { token: env, source: 'env', creds: null };
-    const creds = readCredentials();
-    if (creds)
-        return { token: creds.token, source: 'file', creds };
-    return { token: null, source: null, creds: null };
-}
+// The credentials file and token resolution live in credentials.ts (shared with the MCP server);
+// re-exported here so every CLI caller keeps importing them from auth.ts.
+export { credentialsPath, readCredentials, writeCredentials, clearCredentials, resolveToken } from "./credentials.js";
 export const DEFAULT_SCOPES = ['banner:read', 'banner:write', 'banner:publish', 'scans:read', 'scans:run', 'logs:read', 'logs:export', 'sites:read', 'sites:write'];
 /** RFC 8628 device flow: print the URL + code, open the browser unless told not to, poll until a token arrives. */
 export async function deviceFlow(api, opts = {}) {

package/dist/cli/src/credentials.js

@@ -0,0 +1,60 @@
+/**
+ * The credentials file and token resolution — the part of the CLI's auth the MCP server shares.
+ * Deliberately dependency-free (node built-ins only): @cookiecrumbs-eu/mcp compiles this file in and
+ * must not drag the CLI's interactive dependencies (@clack/prompts, picocolors) along with it.
+ */
+import { chmodSync, existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+/** `%APPDATA%/cookiecrumbs/credentials.json` on Windows, `~/.config/cookiecrumbs/credentials.json` elsewhere. */
+export function credentialsPath() {
+    if (process.env.COOKIECRUMBS_CREDENTIALS)
+        return process.env.COOKIECRUMBS_CREDENTIALS;
+    if (process.platform === 'win32') {
+        const base = process.env.APPDATA ?? join(homedir(), 'AppData', 'Roaming');
+        return join(base, 'cookiecrumbs', 'credentials.json');
+    }
+    const base = process.env.XDG_CONFIG_HOME ?? join(homedir(), '.config');
+    return join(base, 'cookiecrumbs', 'credentials.json');
+}
+export function readCredentials() {
+    const file = credentialsPath();
+    if (!existsSync(file))
+        return null;
+    try {
+        const c = JSON.parse(readFileSync(file, 'utf8'));
+        return c && typeof c.token === 'string' ? c : null;
+    }
+    catch {
+        return null;
+    }
+}
+export function writeCredentials(c) {
+    const file = credentialsPath();
+    mkdirSync(dirname(file), { recursive: true, mode: 0o700 });
+    writeFileSync(file, JSON.stringify({ ...c, saved_at: new Date().toISOString() }, null, 2) + '\n', { mode: 0o600 });
+    try {
+        chmodSync(file, 0o600);
+    }
+    catch {
+        /* Windows ignores POSIX modes; the file sits under the user's profile */
+    }
+    return file;
+}
+export function clearCredentials() {
+    const file = credentialsPath();
+    if (!existsSync(file))
+        return false;
+    rmSync(file);
+    return true;
+}
+/** COOKIECRUMBS_TOKEN wins over the credentials file. */
+export function resolveToken() {
+    const env = process.env.COOKIECRUMBS_TOKEN?.trim();
+    if (env)
+        return { token: env, source: 'env', creds: null };
+    const creds = readCredentials();
+    if (creds)
+        return { token: creds.token, source: 'file', creds };
+    return { token: null, source: null, creds: null };
+}

package/dist/mcp/src/auth.js

@@ -9,7 +9,7 @@
  * a user code to and no browser to open, so an unauthenticated start-up returns instructions
  * instead of blocking on a poll loop.
  */
-import { credentialsPath, resolveToken } from "../../cli/src/auth.js";
+import { credentialsPath, resolveToken } from "../../cli/src/credentials.js";
 import { DEFAULT_API } from "./client.js";
 export function resolveCredentials(env = process.env) {
     const { token, source, creds } = resolveToken();

package/dist/mcp/src/server.js

@@ -18,7 +18,7 @@ import { McpApi, sanitiseClient } from "./client.js";
 import { loginInstructions, resolveCredentials } from "./auth.js";
 import { TOOLS, TOOL_MATRIX, resolveSite, toolAllowed } from "./tools.js";
 export const SERVER_NAME = 'cookiecrumbs';
-export const SERVER_VERSION = '0.7.0';
+export const SERVER_VERSION = '0.7.1';
 const text = (s) => ({ content: [{ type: 'text', text: s }] });
 const failure = (s) => ({ content: [{ type: 'text', text: s }], isError: true });
 /** RFC 9457 problem+json → something an agent can act on. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cookiecrumbs-eu/mcp",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "description": "CookieCrumbs MCP server — let an AI coding agent read and configure your consent banner, sites, scans, services, alerts, webhooks and templates through audited two-step writes",
   "license": "SEE LICENSE IN LICENSE",
   "author": "CookieCrumbs <hello@cookiecrumbs.eu> (https://cookiecrumbs.eu)",
@@ -29,7 +29,7 @@
   ],
   "type": "module",
   "bin": {
-    "cookiecrumbs-mcp": "./dist/mcp/src/index.js"
+    "cookiecrumbs-mcp": "dist/mcp/src/index.js"
   },
   "files": [
     "dist",