@corenel/sidecar 0.8.0 → 0.8.1

package/dist/cli.js

@@ -25280,9 +25280,10 @@ function oauthConfigFromEnv(env = process.env) {
   return { issuer, clientId };
 }
 function openBrowser(url) {
-  const cmd = process.platform === "win32" ? "cmd" : process.platform === "darwin" ? "open" : "xdg-open";
-  const args = process.platform === "win32" ? ["/c", "start", "", url] : [url];
+  const [cmd, args] = process.platform === "win32" ? ["rundll32", ["url.dll,FileProtocolHandler", url]] : process.platform === "darwin" ? ["open", [url]] : ["xdg-open", [url]];
   const child = spawn6(cmd, args, { detached: true, stdio: "ignore" });
+  child.on("error", () => {
+  });
   child.unref();
 }
 async function exchangeCode2(p2) {
@@ -46192,7 +46193,7 @@ var FLAG_TO_KEY = {
   "--default-model": "defaultModel",
   "--name": "name"
 };
-var DEFAULT_GUEST_IMAGE2 = "prompd/corenel-sandbox:0.7.0";
+var DEFAULT_GUEST_IMAGE2 = "prompd/corenel-sandbox:0.8.1";
 function parseArgsWithProvenance(argv) {
   const explicit = /* @__PURE__ */ new Set();
   for (const a2 of argv) {
@@ -46880,6 +46881,49 @@ async function readMcpCredential(stateDir, server) {
   const cred = section[server];
   return isUsableCredential(cred) ? cred : null;
 }
+function isUsableClient(v2) {
+  if (typeof v2 !== "object" || v2 === null) return false;
+  const r2 = v2;
+  return typeof r2.clientId === "string" && r2.clientId.length > 0 && typeof r2.authServer === "string" && r2.authServer.length > 0 && (r2.clientSecret === void 0 || typeof r2.clientSecret === "string");
+}
+async function readMcpClient(stateDir, server) {
+  const doc = await readAuthJson(stateDir);
+  const section = doc.mcpClients;
+  if (typeof section !== "object" || section === null || Array.isArray(section)) return null;
+  const rec5 = section[server];
+  return isUsableClient(rec5) ? rec5 : null;
+}
+async function writeMcpClient(stateDir, server, client) {
+  const doc = await readAuthJson(stateDir);
+  const prev = doc.mcpClients;
+  const section = typeof prev === "object" && prev !== null && !Array.isArray(prev) ? { ...prev } : {};
+  section[server] = client;
+  const next = { ...doc, mcpClients: section };
+  const path = credentialFilePath(stateDir);
+  await mkdir4(credentialDir(stateDir), { recursive: true });
+  await writeFile2(path, `${JSON.stringify(next, null, 2)}
+`, { mode: 384 });
+  try {
+    await chmod(path, 384);
+  } catch {
+  }
+}
+async function clearMcpClient(stateDir, server) {
+  const doc = await readAuthJson(stateDir);
+  const prev = doc.mcpClients;
+  if (typeof prev !== "object" || prev === null || Array.isArray(prev)) return;
+  const section = { ...prev };
+  if (!(server in section)) return;
+  delete section[server];
+  const path = credentialFilePath(stateDir);
+  await mkdir4(credentialDir(stateDir), { recursive: true });
+  await writeFile2(path, `${JSON.stringify({ ...doc, mcpClients: section }, null, 2)}
+`, { mode: 384 });
+  try {
+    await chmod(path, 384);
+  } catch {
+  }
+}
 async function writeMcpCredential(stateDir, server, cred) {
   const doc = await readAuthJson(stateDir);
   const section = isMcpAuthSection(doc.mcp) ? { ...doc.mcp } : {};
@@ -47214,11 +47258,19 @@ async function loginToMcpServer(stateDir, server, deps = {}) {
     );
     const port = await getFreePort();
     const redirectUri = `http://localhost:${port}/callback`;
-    const registered2 = await registerClient(
+    const cached = await readMcpClient(stateDir, server.name);
+    const registered2 = cached && cached.authServer === discovered.authServer ? { clientId: cached.clientId, ...cached.clientSecret ? { clientSecret: cached.clientSecret } : {} } : await registerClient(
       meta,
       redirectUri,
       fetchImpl
     );
+    if (registered2 && !cached) {
+      await writeMcpClient(stateDir, server.name, {
+        clientId: registered2.clientId,
+        ...registered2.clientSecret ? { clientSecret: registered2.clientSecret } : {},
+        authServer: discovered.authServer
+      });
+    }
     if (!registered2) {
       return {
         ok: false,
@@ -47259,7 +47311,12 @@ async function loginToMcpServer(stateDir, server, deps = {}) {
     await writeMcpCredential(stateDir, server.name, cred);
     return { ok: true };
   } catch (e2) {
-    return { ok: false, reason: "failed", message: e2 instanceof Error ? e2.message : String(e2) };
+    const message = e2 instanceof Error ? e2.message : String(e2);
+    if (/invalid_client|unauthorized_client|client.{0,20}not.{0,10}found/i.test(message)) {
+      await clearMcpClient(stateDir, server.name).catch(() => {
+      });
+    }
+    return { ok: false, reason: "failed", message };
   }
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@corenel/sidecar",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "type": "module",
   "license": "Elastic-2.0",
   "description": "Prompd sidecar — a local capability server. Run it next to Prompd (prompd.app) so the browser app can reach your machine: local LLMs (Ollama/LM Studio/vLLM) without CORS, your filesystem, and (opt-in) shell.",
@@ -36,9 +36,9 @@
     "esbuild": "^0.21.5",
     "tsx": "^4.19.2",
     "typescript": "^5.9.3",
-    "@corenel/harness": "0.7.0",
     "@corenel/protocol": "0.7.0",
     "@corenel/tools-node": "0.3.2",
+    "@corenel/harness": "0.7.0",
     "@corenel/crew": "0.0.0"
   },
   "repository": {