@euqns/nudge-mcp 0.1.0

package/README.md

@@ -0,0 +1,153 @@
+# Nudge MCP
+
+A [Model Context Protocol](https://modelcontextprotocol.io) server that exposes
+the Nudge board (this repo's Trello-like app) to MCP clients — Claude Desktop,
+Claude Code, Cursor, anything that speaks MCP over stdio.
+
+It lets an LLM list boards, create cards, assign people, move tasks between
+columns, drop comments, and read your notifications — using your identity, so
+mentions and activity logs attribute correctly.
+
+## How it authenticates
+
+Nudge's auth is Google-only with an `@joygame.com` domain restriction, and
+the JWTs are signed by the Convex deployment itself — there's no key the MCP
+server could re-sign with from a CLI. So the MCP uses **personal access
+tokens**, bootstrapped over a one-shot localhost handshake:
+
+1. Run `npx -y @euqns/nudge-mcp setup` in a terminal.
+2. The CLI opens your browser to Nudge's `/mcp-setup` page (you'll sign in
+   with Google if you aren't already).
+3. Click **Authorize**. The page generates a token in your name and sends it
+   to the CLI over `http://127.0.0.1:<random-port>/callback`. The token is
+   never displayed, never typed, never logged.
+4. The CLI writes `~/.nudge/credentials` at mode 0600 and prints the snippet
+   you paste into your MCP client — that snippet contains **no secrets**.
+
+Replay protection is via a fresh per-run state nonce; mismatched POSTs are
+rejected with 403. The listener only binds to `127.0.0.1` and times out
+after 5 minutes.
+
+You can manage tokens (name, last-used, revoke) from **profile → MCP
+tokens** in the web app.
+
+## Install
+
+For end users:
+
+```bash
+npx -y @euqns/nudge-mcp setup
+```
+
+That's the whole install. No clone, no `npm run build`, no JSON editing
+beyond the snippet the CLI prints.
+
+For local development of this repo:
+
+```bash
+cd mcp
+npm install
+npm run build
+node dist/index.js setup   # uses the default app URL
+```
+
+## Configure
+
+After `setup` succeeds, copy this into your MCP client. The token lives in
+`~/.nudge/credentials`, so the client config is the same on every machine
+and contains no secrets:
+
+### Claude Desktop
+
+`~/Library/Application Support/Claude/claude_desktop_config.json`:
+
+```json
+{
+  "mcpServers": {
+    "nudge": {
+      "command": "npx",
+      "args": ["-y", "@euqns/nudge-mcp"]
+    }
+  }
+}
+```
+
+Restart Claude Desktop. The Nudge tools appear under the tools menu.
+
+### Claude Code
+
+```bash
+claude mcp add nudge npx -y @euqns/nudge-mcp
+```
+
+### Cursor
+
+`.cursor/mcp.json`:
+
+```json
+{
+  "mcpServers": {
+    "nudge": {
+      "command": "npx",
+      "args": ["-y", "@euqns/nudge-mcp"]
+    }
+  }
+}
+```
+
+## Overrides
+
+If you need to point at a non-production deployment (PR preview, local dev
+against `convex dev`), `setup` accepts `--app-url`:
+
+```bash
+npx -y @euqns/nudge-mcp setup --app-url http://localhost:5173
+```
+
+You can also bypass the credentials file entirely by setting
+`NUDGE_CONVEX_URL` and `NUDGE_TOKEN` in the MCP client's `env` block —
+useful for CI or containers.
+
+## Tools
+
+| Tool | What it does |
+|---|---|
+| `whoami` | Identity bound to the token (id, email, displayName, team). |
+| `list_boards` | Every board the user is a member of. |
+| `get_board` | Board layout: lists, labels, members, your role. |
+| `create_board` | New board (caller becomes owner, default Backlog/In progress/Review/Done columns). |
+| `list_lists` / `create_list` | Read or add columns. |
+| `list_cards` | All cards on a board (subtasks hidden by default). |
+| `my_cards` | All cards across all boards where the caller is assigned, soonest due first. |
+| `get_card` | One card incl. its description doc. |
+| `create_card` | New card in a list (pass `parentCardId` for subtasks). |
+| `update_card` | Patch title/icon/dueDate/assigneeIds/labelIds/priority/listId/description. Pass `'none'` to clear `dueDate`/`priority`. |
+| `move_card` | Drop into another list. Auto-completes if landing in a Done list. |
+| `set_card_completed` | Flip the complete bit explicitly. |
+| `delete_card` | Hard-delete with cascade (subtasks, comments, activity, notifications). |
+| `create_label` | Board-scoped label. |
+| `list_comments` / `add_comment` | Comment threads on a card. `@username` mentions notify. |
+| `list_members` | Board members (use the returned ids for `assigneeIds`). |
+| `find_user_by_email` | Resolve an email to a user id — handy before assigning. |
+| `my_notifications` | Recent notifications (assigned / mentioned / commented / moved / updated). |
+
+## Boundary notes
+
+- The server runs every call as the user the token belongs to — board access
+  is checked against `memberships`, the same table the web app reads. There
+  is no "elevated" mode.
+- Convex actions run on the same backend as the app, so MCP-driven changes
+  appear in real time in any open browser tab.
+- The token is sent as a regular argument over the wire (HTTPS to Convex).
+  Anyone reading the JSON payload would see it, which is why we hash on the
+  server and only ever return the plaintext at creation time.
+
+## Development
+
+```bash
+npm run dev   # tsx watcher — useful with `node --inspect` on the MCP host
+npm run build # tsc to dist/
+```
+
+The server doesn't reload tools at runtime; restart the MCP client when you
+change tool definitions in `src/index.ts`.

package/dist/credentials.js

@@ -0,0 +1,44 @@
+// Local credentials file persistence. Tokens never sit in shell env or MCP
+// client JSON — they're held in `~/.nudge/credentials` (mode 0600) so only
+// the user can read them.
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+export const CREDENTIALS_DIR = path.join(os.homedir(), ".nudge");
+export const CREDENTIALS_PATH = path.join(CREDENTIALS_DIR, "credentials");
+export async function readCredentials() {
+    try {
+        const raw = await fs.readFile(CREDENTIALS_PATH, "utf8");
+        const parsed = JSON.parse(raw);
+        if (typeof parsed.token !== "string" ||
+            typeof parsed.convexUrl !== "string") {
+            return null;
+        }
+        return { token: parsed.token, convexUrl: parsed.convexUrl };
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return null;
+        throw err;
+    }
+}
+export async function writeCredentials(creds) {
+    await fs.mkdir(CREDENTIALS_DIR, { recursive: true, mode: 0o700 });
+    // chmod the file explicitly after write — fs.writeFile's `mode` is only
+    // applied on file creation, so a pre-existing wider-mode file would keep
+    // its old perms otherwise.
+    await fs.writeFile(CREDENTIALS_PATH, JSON.stringify(creds, null, 2), {
+        mode: 0o600,
+    });
+    await fs.chmod(CREDENTIALS_PATH, 0o600);
+}
+export async function deleteCredentials() {
+    try {
+        await fs.unlink(CREDENTIALS_PATH);
+    }
+    catch (err) {
+        if (err.code !== "ENOENT")
+            throw err;
+    }
+}
+//# sourceMappingURL=credentials.js.map

package/dist/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,2EAA2E;AAC3E,0BAA0B;AAE1B,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAO7B,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AACjE,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;AAE1E,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;QACvD,IACE,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;YAChC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EACpC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IAC9D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAkB;IACvD,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,wEAAwE;IACxE,yEAAyE;IACzE,2BAA2B;IAC3B,MAAM,EAAE,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;QACnE,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC;IAClE,CAAC;AACH,CAAC"}

package/dist/index.js

@@ -0,0 +1,360 @@
+#!/usr/bin/env node
+// Nudge MCP server. Exposes the Nudge board's everyday operations (boards,
+// lists, cards, comments, members, notifications) as MCP tools backed by
+// Convex actions.
+//
+// Usage:
+//   nudge-mcp setup       # one-time browser-based auth — writes ~/.nudge/credentials
+//   nudge-mcp             # default: run the MCP stdio server using stored credentials
+//
+// Override the stored credentials with NUDGE_CONVEX_URL / NUDGE_TOKEN env
+// vars if you need to (CI, container, debugging).
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { CallToolRequestSchema, ListToolsRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
+import { ConvexHttpClient } from "convex/browser";
+import { makeFunctionReference } from "convex/server";
+import { z } from "zod";
+import { CREDENTIALS_PATH, readCredentials } from "./credentials.js";
+import { runSetup } from "./setup.js";
+// ---- entrypoint dispatch --------------------------------------------------
+const subcommand = process.argv[2];
+if (subcommand === "setup") {
+    try {
+        await runSetup(process.argv.slice(3));
+        process.exit(0);
+    }
+    catch (err) {
+        console.error("[nudge-mcp setup] failed:", err instanceof Error ? err.message : err);
+        process.exit(1);
+    }
+}
+if (subcommand === "--help" || subcommand === "-h" || subcommand === "help") {
+    console.log([
+        "Nudge MCP server",
+        "",
+        "Commands:",
+        "  nudge-mcp setup [--app-url URL]   Run the browser-based setup flow.",
+        "  nudge-mcp                         Start the MCP stdio server (default).",
+        "",
+        `Credentials live at ${CREDENTIALS_PATH} (mode 0600).`,
+        "Override with NUDGE_CONVEX_URL / NUDGE_TOKEN env vars if needed.",
+    ].join("\n"));
+    process.exit(0);
+}
+// ---- credentials ----------------------------------------------------------
+const stored = await readCredentials();
+const CONVEX_URL = process.env.NUDGE_CONVEX_URL ?? stored?.convexUrl;
+const TOKEN = process.env.NUDGE_TOKEN ?? stored?.token;
+if (!CONVEX_URL || !TOKEN) {
+    console.error([
+        "[nudge-mcp] No credentials found.",
+        "",
+        "Run `npx -y @euqns/nudge-mcp setup` once to authorize this machine,",
+        "or set NUDGE_CONVEX_URL and NUDGE_TOKEN in the environment.",
+    ].join("\n"));
+    process.exit(1);
+}
+const convex = new ConvexHttpClient(CONVEX_URL);
+// `mcp.X` is the user-facing surface in convex/mcp.ts; we reference it by name
+// because the MCP server is published independently of the Convex codegen and
+// shouldn't rely on the app's generated types.
+async function action(name, args) {
+    // makeFunctionReference accepts the "module:function" form Convex uses on
+    // the wire; the generic params are loose because the MCP server doesn't
+    // pull in the app's generated types.
+    const ref = makeFunctionReference(name);
+    try {
+        return await convex.action(ref, {
+            token: TOKEN,
+            ...args,
+        });
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        throw new Error(`Nudge action ${name} failed: ${msg}`);
+    }
+}
+// ---- tool definitions -----------------------------------------------------
+// Schemas defined with zod so we get runtime validation AND can dump JSON
+// schema for MCP's inputSchema field via zodToJsonSchema lite. We hand-roll a
+// tiny converter because we only need basic shapes (objects of primitives /
+// optional strings / unions).
+const schemas = {
+    whoami: z.object({}),
+    list_boards: z.object({}),
+    get_board: z.object({
+        boardId: z.string().describe("The board id (looks like 'kg…')."),
+    }),
+    create_board: z.object({
+        title: z.string().describe("Board title."),
+        description: z.string().optional(),
+        icon: z.string().optional().describe("Emoji or short icon string."),
+        swatch: z.string().optional().describe("CSS color for the board accent."),
+    }),
+    list_lists: z.object({ boardId: z.string() }),
+    create_list: z.object({ boardId: z.string(), title: z.string() }),
+    list_cards: z.object({
+        boardId: z.string(),
+        includeSubtasks: z.boolean().optional(),
+    }),
+    my_cards: z.object({}),
+    get_card: z.object({ cardId: z.string() }),
+    create_card: z.object({
+        boardId: z.string(),
+        listId: z.string(),
+        title: z.string(),
+        parentCardId: z
+            .string()
+            .optional()
+            .describe("Pass to make this card a subtask of another card."),
+    }),
+    update_card: z.object({
+        cardId: z.string(),
+        title: z.string().optional(),
+        icon: z.string().optional(),
+        dueDate: z
+            .union([z.number(), z.literal("none")])
+            .optional()
+            .describe("Unix ms timestamp, or 'none' to clear the due date."),
+        assigneeIds: z
+            .array(z.string())
+            .optional()
+            .describe("Replaces the current assignee list. Use list_members to resolve user ids."),
+        labelIds: z.array(z.string()).optional(),
+        priority: z
+            .enum(["urgent", "high", "medium", "low", "none"])
+            .optional(),
+        listId: z
+            .string()
+            .optional()
+            .describe("Move the card to a different list."),
+        description: z
+            .string()
+            .optional()
+            .describe("Plain-text description. Replaces the card body; line breaks become paragraphs."),
+    }),
+    move_card: z.object({
+        cardId: z.string(),
+        toListId: z.string(),
+        newOrder: z
+            .number()
+            .optional()
+            .describe("Optional sort key; omit to drop the card at the end of the target list."),
+    }),
+    set_card_completed: z.object({
+        cardId: z.string(),
+        completed: z.boolean(),
+    }),
+    delete_card: z.object({ cardId: z.string() }),
+    create_label: z.object({
+        boardId: z.string(),
+        name: z.string(),
+        color: z.string().describe("CSS color string."),
+    }),
+    list_comments: z.object({ cardId: z.string() }),
+    add_comment: z.object({
+        cardId: z.string(),
+        body: z.string(),
+        parentId: z
+            .string()
+            .optional()
+            .describe("Reply to a specific comment on the same card."),
+    }),
+    list_members: z.object({ boardId: z.string() }),
+    find_user_by_email: z.object({ email: z.string() }),
+    my_notifications: z.object({
+        limit: z.number().int().positive().max(200).optional(),
+    }),
+};
+const tools = {
+    whoami: {
+        description: "Return the Nudge user the current token belongs to (id, email, displayName, team, jobTitle).",
+        action: "mcp:whoami",
+    },
+    list_boards: {
+        description: "List boards the current user is a member of. Returns id, title, role, icon, swatch.",
+        action: "mcp:listBoards",
+    },
+    get_board: {
+        description: "Get a board's full layout: lists (in order), labels, members, and the caller's role.",
+        action: "mcp:getBoard",
+    },
+    create_board: {
+        description: "Create a new board. The caller becomes the owner and a default Backlog/In progress/Review/Done list set is seeded.",
+        action: "mcp:createBoard",
+    },
+    list_lists: {
+        description: "List columns (lists) on a board, ordered.",
+        action: "mcp:listLists",
+    },
+    create_list: {
+        description: "Add a column to a board. Appended after existing lists.",
+        action: "mcp:createList",
+    },
+    list_cards: {
+        description: "List cards on a board. Subtasks are hidden by default — pass includeSubtasks=true to include them.",
+        action: "mcp:listCards",
+    },
+    my_cards: {
+        description: "List every card across every board where the current user is assigned, soonest due first.",
+        action: "mcp:myCards",
+    },
+    get_card: {
+        description: "Get a card with its list title and Tiptap description doc.",
+        action: "mcp:getCard",
+    },
+    create_card: {
+        description: "Create a card in a list. Pass parentCardId to make it a subtask of an existing card.",
+        action: "mcp:createCard",
+    },
+    update_card: {
+        description: "Patch a card. Any field omitted is left untouched. Send dueDate='none' to clear, priority='none' to clear, listId to move.",
+        action: "mcp:updateCard",
+    },
+    move_card: {
+        description: "Move a card to another list on the same board.",
+        action: "mcp:moveCard",
+    },
+    set_card_completed: {
+        description: "Mark a card complete or reopen it. Note: dropping a card into a list flagged isDone (or titled 'Done') also auto-completes it.",
+        action: "mcp:setCardCompleted",
+    },
+    delete_card: {
+        description: "Delete a card and cascade-delete its subtasks, comments, activity, and notifications.",
+        action: "mcp:deleteCard",
+    },
+    create_label: {
+        description: "Create a board-scoped label.",
+        action: "mcp:createLabel",
+    },
+    list_comments: {
+        description: "List comments on a card, oldest first, with author email + name.",
+        action: "mcp:listComments",
+    },
+    add_comment: {
+        description: "Add a comment. Plain @username mentions notify board members; pass parentId to thread under another comment.",
+        action: "mcp:addComment",
+    },
+    list_members: {
+        description: "List members of a board (id, role, email, displayName).",
+        action: "mcp:listMembers",
+    },
+    find_user_by_email: {
+        description: "Look up a user by email — useful before assigning a card to someone via update_card.assigneeIds.",
+        action: "mcp:findUserByEmail",
+    },
+    my_notifications: {
+        description: "Recent notifications for the current user (assigned/mentioned/commented/moved/updated), newest first.",
+        action: "mcp:myNotifications",
+    },
+};
+// Convex actions are referenced as "module:function" in HTTP calls. Translate
+// the friendly "mcp:whoami" form into Convex's API path.
+function actionPath(slug) {
+    const [module, fn] = slug.split(":");
+    return `${module}/${fn}`;
+}
+// ---- json schema conversion ----------------------------------------------
+// Tiny zod → JSON schema for the cases the tools use. Bigger packages exist
+// but we don't want a heavyweight dep just to describe ~20 small inputs.
+function zodToJsonSchema(s) {
+    if (s instanceof z.ZodOptional) {
+        return zodToJsonSchema(s.unwrap());
+    }
+    if (s instanceof z.ZodObject) {
+        const shape = s.shape;
+        const properties = {};
+        const required = [];
+        for (const [key, child] of Object.entries(shape)) {
+            properties[key] = zodToJsonSchema(child);
+            if (!(child instanceof z.ZodOptional))
+                required.push(key);
+        }
+        const out = {
+            type: "object",
+            properties,
+            additionalProperties: false,
+        };
+        if (required.length > 0)
+            out.required = required;
+        return out;
+    }
+    if (s instanceof z.ZodString) {
+        return withDescription({ type: "string" }, s.description);
+    }
+    if (s instanceof z.ZodNumber) {
+        return withDescription({ type: "number" }, s.description);
+    }
+    if (s instanceof z.ZodBoolean) {
+        return withDescription({ type: "boolean" }, s.description);
+    }
+    if (s instanceof z.ZodArray) {
+        return withDescription({
+            type: "array",
+            items: zodToJsonSchema(s.element),
+        }, s.description);
+    }
+    if (s instanceof z.ZodLiteral) {
+        return { const: s.value };
+    }
+    if (s instanceof z.ZodEnum) {
+        return { type: "string", enum: s.options };
+    }
+    if (s instanceof z.ZodUnion) {
+        return {
+            anyOf: s.options.map(zodToJsonSchema),
+        };
+    }
+    // Fallback — accept anything. Better to be permissive than to break a tool
+    // call because our converter doesn't cover an exotic case.
+    return {};
+}
+function withDescription(obj, description) {
+    if (description)
+        return { ...obj, description };
+    return obj;
+}
+// ---- server wiring --------------------------------------------------------
+const server = new Server({
+    name: "nudge-mcp",
+    version: "0.1.0",
+}, {
+    capabilities: {
+        tools: {},
+    },
+});
+server.setRequestHandler(ListToolsRequestSchema, () => {
+    const list = Object.keys(tools).map((name) => ({
+        name,
+        description: tools[name].description,
+        inputSchema: zodToJsonSchema(schemas[name]),
+    }));
+    return { tools: list };
+});
+server.setRequestHandler(CallToolRequestSchema, async (request) => {
+    const name = request.params.name;
+    if (!(name in tools)) {
+        throw new Error(`Unknown tool: ${name}`);
+    }
+    const schema = schemas[name];
+    const parsed = schema.safeParse(request.params.arguments ?? {});
+    if (!parsed.success) {
+        throw new Error(`Invalid arguments for ${name}: ${JSON.stringify(parsed.error.flatten())}`);
+    }
+    const result = await action(actionPath(tools[name].action), parsed.data);
+    // MCP returns tool results as content arrays. Encode our JSON as a single
+    // text block — readable by the model and easy to round-trip back.
+    return {
+        content: [
+            {
+                type: "text",
+                text: JSON.stringify(result, null, 2),
+            },
+        ],
+    };
+});
+const transport = new StdioServerTransport();
+await server.connect(transport);
+console.error("[nudge-mcp] listening on stdio");
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,2EAA2E;AAC3E,yEAAyE;AACzE,kBAAkB;AAClB,EAAE;AACF,SAAS;AACT,sFAAsF;AACtF,uFAAuF;AACvF,EAAE;AACF,0EAA0E;AAC1E,kDAAkD;AAElD,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GAEvB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC,8EAA8E;AAE9E,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAEnC,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;IAC5E,OAAO,CAAC,GAAG,CACT;QACE,kBAAkB;QAClB,EAAE;QACF,WAAW;QACX,uEAAuE;QACvE,2EAA2E;QAC3E,EAAE;QACF,uBAAuB,gBAAgB,eAAe;QACtD,kEAAkE;KACnE,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,8EAA8E;AAE9E,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC;AACvC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,MAAM,EAAE,SAAS,CAAC;AACrE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,MAAM,EAAE,KAAK,CAAC;AAEvD,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC;IAC1B,OAAO,CAAC,KAAK,CACX;QACE,mCAAmC;QACnC,EAAE;QACF,qEAAqE;QACrE,6DAA6D;KAC9D,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;AAEhD,+EAA+E;AAC/E,8EAA8E;AAC9E,+CAA+C;AAC/C,KAAK,UAAU,MAAM,CAAI,IAAY,EAAE,IAA6B;IAClE,0EAA0E;IAC1E,wEAAwE;IACxE,qCAAqC;IACrC,MAAM,GAAG,GAAG,qBAAqB,CAAuC,IAAI,CAAC,CAAC;IAC9E,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE;YAC9B,KAAK,EAAE,KAAK;YACZ,GAAG,IAAI;SACR,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,YAAY,GAAG,EAAE,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,8EAA8E;AAE9E,0EAA0E;AAC1E,8EAA8E;AAC9E,4EAA4E;AAC5E,8BAA8B;AAE9B,MAAM,OAAO,GAAG;IACd,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACpB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACzB,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;KACjE,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;QAC1C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;QACnE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;KAC1E,CAAC;IACF,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC7C,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACjE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACxC,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACtB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC1C,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,YAAY,EAAE,CAAC;aACZ,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,mDAAmD,CAAC;KACjE,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,OAAO,EAAE,CAAC;aACP,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;aACtC,QAAQ,EAAE;aACV,QAAQ,CACP,qDAAqD,CACtD;QACH,WAAW,EAAE,CAAC;aACX,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CACP,2EAA2E,CAC5E;QACH,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACxC,QAAQ,EAAE,CAAC;aACR,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;aACjD,QAAQ,EAAE;QACb,MAAM,EAAE,CAAC;aACN,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,oCAAoC,CAAC;QACjD,WAAW,EAAE,CAAC;aACX,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,gFAAgF,CACjF;KACJ,CAAC;IACF,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,yEAAyE,CAC1E;KACJ,CAAC;IACF,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC;QAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;KACvB,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC7C,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;KAChD,CAAC;IACF,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC/C,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,+CAA+C,CAAC;KAC7D,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC/C,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACnD,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC;QACzB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KACvD,CAAC;CACH,CAAC;AAIF,MAAM,KAAK,GAA8D;IACvE,MAAM,EAAE;QACN,WAAW,EACT,8FAA8F;QAChG,MAAM,EAAE,YAAY;KACrB;IACD,WAAW,EAAE;QACX,WAAW,EACT,qFAAqF;QACvF,MAAM,EAAE,gBAAgB;KACzB;IACD,SAAS,EAAE;QACT,WAAW,EACT,sFAAsF;QACxF,MAAM,EAAE,cAAc;KACvB;IACD,YAAY,EAAE;QACZ,WAAW,EACT,oHAAoH;QACtH,MAAM,EAAE,iBAAiB;KAC1B;IACD,UAAU,EAAE;QACV,WAAW,EAAE,2CAA2C;QACxD,MAAM,EAAE,eAAe;KACxB;IACD,WAAW,EAAE;QACX,WAAW,EAAE,yDAAyD;QACtE,MAAM,EAAE,gBAAgB;KACzB;IACD,UAAU,EAAE;QACV,WAAW,EACT,oGAAoG;QACtG,MAAM,EAAE,eAAe;KACxB;IACD,QAAQ,EAAE;QACR,WAAW,EACT,2FAA2F;QAC7F,MAAM,EAAE,aAAa;KACtB;IACD,QAAQ,EAAE;QACR,WAAW,EAAE,4DAA4D;QACzE,MAAM,EAAE,aAAa;KACtB;IACD,WAAW,EAAE;QACX,WAAW,EACT,sFAAsF;QACxF,MAAM,EAAE,gBAAgB;KACzB;IACD,WAAW,EAAE;QACX,WAAW,EACT,4HAA4H;QAC9H,MAAM,EAAE,gBAAgB;KACzB;IACD,SAAS,EAAE;QACT,WAAW,EAAE,gDAAgD;QAC7D,MAAM,EAAE,cAAc;KACvB;IACD,kBAAkB,EAAE;QAClB,WAAW,EACT,gIAAgI;QAClI,MAAM,EAAE,sBAAsB;KAC/B;IACD,WAAW,EAAE;QACX,WAAW,EACT,uFAAuF;QACzF,MAAM,EAAE,gBAAgB;KACzB;IACD,YAAY,EAAE;QACZ,WAAW,EAAE,8BAA8B;QAC3C,MAAM,EAAE,iBAAiB;KAC1B;IACD,aAAa,EAAE;QACb,WAAW,EAAE,kEAAkE;QAC/E,MAAM,EAAE,kBAAkB;KAC3B;IACD,WAAW,EAAE;QACX,WAAW,EACT,8GAA8G;QAChH,MAAM,EAAE,gBAAgB;KACzB;IACD,YAAY,EAAE;QACZ,WAAW,EAAE,yDAAyD;QACtE,MAAM,EAAE,iBAAiB;KAC1B;IACD,kBAAkB,EAAE;QAClB,WAAW,EACT,kGAAkG;QACpG,MAAM,EAAE,qBAAqB;KAC9B;IACD,gBAAgB,EAAE;QAChB,WAAW,EACT,uGAAuG;QACzG,MAAM,EAAE,qBAAqB;KAC9B;CACF,CAAC;AAEF,8EAA8E;AAC9E,yDAAyD;AACzD,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,GAAG,MAAM,IAAI,EAAE,EAAW,CAAC;AACpC,CAAC;AAED,6EAA6E;AAE7E,4EAA4E;AAC5E,yEAAyE;AACzE,SAAS,eAAe,CAAC,CAAe;IACtC,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/B,OAAO,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,CAAC,CAAC,KAAqC,CAAC;QACtD,MAAM,UAAU,GAA4B,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,UAAU,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;YACzC,IAAI,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,WAAW,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,GAAG,GAA4B;YACnC,IAAI,EAAE,QAAQ;YACd,UAAU;YACV,oBAAoB,EAAE,KAAK;SAC5B,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACjD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QAC7B,OAAO,eAAe,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QAC7B,OAAO,eAAe,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC;QAC9B,OAAO,eAAe,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5B,OAAO,eAAe,CACpB;YACE,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC,OAAuB,CAAC;SAClD,EACD,CAAC,CAAC,WAAW,CACd,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5B,OAAO;YACL,KAAK,EAAG,CAAC,CAAC,OAA0B,CAAC,GAAG,CAAC,eAAe,CAAC;SAC1D,CAAC;IACJ,CAAC;IACD,2EAA2E;IAC3E,2DAA2D;IAC3D,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,eAAe,CACtB,GAA4B,EAC5B,WAA+B;IAE/B,IAAI,WAAW;QAAE,OAAO,EAAE,GAAG,GAAG,EAAE,WAAW,EAAE,CAAC;IAChD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAE9E,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB;IACE,IAAI,EAAE,WAAW;IACjB,OAAO,EAAE,OAAO;CACjB,EACD;IACE,YAAY,EAAE;QACZ,KAAK,EAAE,EAAE;KACV;CACF,CACF,CAAC;AAEF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpD,MAAM,IAAI,GAAY,MAAM,CAAC,IAAI,CAAC,KAAK,CAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACrE,IAAI;QACJ,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW;QACpC,WAAW,EAAE,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAwB;KACnE,CAAC,CAAC,CAAC;IACJ,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;IAChE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAgB,CAAC;IAC7C,IAAI,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,yBAAyB,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,CAC3E,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,MAAM,CACzB,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,EAC9B,MAAM,CAAC,IAA+B,CACvC,CAAC;IACF,0EAA0E;IAC1E,kEAAkE;IAClE,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;aACtC;SACF;KACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAChC,OAAO,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC"}

package/dist/setup.js

@@ -0,0 +1,164 @@
+// `nudge-mcp setup` flow.
+//
+// Brings up a one-shot localhost listener, opens the Nudge web app's
+// `/mcp-setup` route in the user's browser, and waits for the page to POST
+// the freshly-minted token back. The page generates the token via the
+// signed-in user's existing session — no copy-paste, no secret in the MCP
+// client config.
+import { spawn } from "node:child_process";
+import crypto from "node:crypto";
+import http from "node:http";
+import os from "node:os";
+import { CREDENTIALS_PATH, writeCredentials } from "./credentials.js";
+// Production deployment. Override with --app-url or NUDGE_APP_URL when
+// running against a different environment (PR preview, local dev, etc.).
+const DEFAULT_APP_URL = "https://trello-omega-nine.vercel.app";
+const SETUP_TIMEOUT_MS = 5 * 60_000;
+function parseArgs(argv) {
+    let appUrl = process.env.NUDGE_APP_URL ?? DEFAULT_APP_URL;
+    for (let i = 0; i < argv.length; i++) {
+        const arg = argv[i];
+        if (arg === "--app-url") {
+            const next = argv[i + 1];
+            if (!next)
+                throw new Error("--app-url requires a value");
+            appUrl = next;
+            i++;
+        }
+        else if (arg.startsWith("--app-url=")) {
+            appUrl = arg.slice("--app-url=".length);
+        }
+    }
+    return { appUrl: appUrl.replace(/\/$/, "") };
+}
+function openBrowser(url) {
+    // Hand-rolled instead of pulling in `open` — saves a dep + keeps the binary
+    // small. Detach + ignore stdio so the child outlives the parent if the
+    // setup CLI exits early.
+    const platform = process.platform;
+    if (platform === "darwin") {
+        spawn("open", [url], { detached: true, stdio: "ignore" }).unref();
+    }
+    else if (platform === "win32") {
+        // start.exe doesn't accept the URL directly without `""` as title — use
+        // cmd /c so quoting is handled correctly.
+        spawn("cmd", ["/c", "start", "", url], {
+            detached: true,
+            stdio: "ignore",
+        }).unref();
+    }
+    else {
+        spawn("xdg-open", [url], { detached: true, stdio: "ignore" }).unref();
+    }
+}
+function corsHeaders(origin) {
+    // The localhost listener lives for one auth handshake. Allow any origin —
+    // the `state` nonce in the POST body is what protects us, not Origin.
+    return {
+        "Access-Control-Allow-Origin": origin ?? "*",
+        "Access-Control-Allow-Methods": "POST, OPTIONS",
+        "Access-Control-Allow-Headers": "Content-Type",
+        "Access-Control-Max-Age": "86400",
+        Vary: "Origin",
+    };
+}
+async function readBody(req) {
+    const chunks = [];
+    for await (const c of req)
+        chunks.push(c);
+    return Buffer.concat(chunks).toString("utf8");
+}
+export async function runSetup(argv) {
+    const { appUrl } = parseArgs(argv);
+    const state = crypto.randomBytes(24).toString("base64url");
+    const hostname = os.hostname();
+    const result = await new Promise((resolve, reject) => {
+        const timeout = setTimeout(() => {
+            reject(new Error(`Timed out after ${SETUP_TIMEOUT_MS / 1000}s`));
+        }, SETUP_TIMEOUT_MS);
+        const server = http.createServer(async (req, res) => {
+            const origin = req.headers.origin;
+            if (req.method === "OPTIONS") {
+                res.writeHead(204, corsHeaders(origin));
+                res.end();
+                return;
+            }
+            if (req.method !== "POST" || req.url !== "/callback") {
+                res.writeHead(404, corsHeaders(origin));
+                res.end();
+                return;
+            }
+            try {
+                const body = await readBody(req);
+                const parsed = JSON.parse(body);
+                if (typeof parsed.token !== "string" ||
+                    typeof parsed.convexUrl !== "string" ||
+                    typeof parsed.state !== "string") {
+                    res.writeHead(400, corsHeaders(origin));
+                    res.end(JSON.stringify({ ok: false, error: "missing fields" }));
+                    return;
+                }
+                if (parsed.state !== state) {
+                    // CSRF/replay protection — only accept the state the CLI handed to
+                    // the browser when it opened the URL.
+                    res.writeHead(403, corsHeaders(origin));
+                    res.end(JSON.stringify({ ok: false, error: "state mismatch" }));
+                    return;
+                }
+                res.writeHead(200, {
+                    ...corsHeaders(origin),
+                    "Content-Type": "application/json",
+                });
+                res.end(JSON.stringify({ ok: true }));
+                clearTimeout(timeout);
+                resolve({
+                    token: parsed.token,
+                    convexUrl: parsed.convexUrl,
+                    state: parsed.state,
+                });
+                // Brief delay so the response has a chance to flush before close.
+                setTimeout(() => server.close(), 50);
+            }
+            catch (err) {
+                res.writeHead(500, corsHeaders(origin));
+                res.end(JSON.stringify({ ok: false, error: String(err) }));
+            }
+        });
+        server.on("error", (err) => {
+            clearTimeout(timeout);
+            reject(err);
+        });
+        server.listen(0, "127.0.0.1", () => {
+            const port = server.address().port;
+            const url = new URL("/mcp-setup", appUrl);
+            url.searchParams.set("port", String(port));
+            url.searchParams.set("state", state);
+            url.searchParams.set("hostname", hostname);
+            console.log("");
+            console.log("Opening Nudge in your browser to authorize this install…");
+            console.log("");
+            console.log("  If the browser doesn't open, visit:");
+            console.log(`  ${url.toString()}`);
+            console.log("");
+            openBrowser(url.toString());
+        });
+    });
+    await writeCredentials({
+        token: result.token,
+        convexUrl: result.convexUrl,
+    });
+    console.log(`✓ Token saved to ${CREDENTIALS_PATH} (mode 0600)`);
+    console.log("");
+    console.log("Add this to your MCP client config — no secrets needed:");
+    console.log("");
+    console.log(JSON.stringify({
+        mcpServers: {
+            nudge: {
+                command: "npx",
+                args: ["-y", "@euqns/nudge-mcp"],
+            },
+        },
+    }, null, 2));
+    console.log("");
+}
+//# sourceMappingURL=setup.js.map

package/dist/setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../src/setup.ts"],"names":[],"mappings":"AAAA,0BAA0B;AAC1B,EAAE;AACF,qEAAqE;AACrE,2EAA2E;AAC3E,sEAAsE;AACtE,0EAA0E;AAC1E,iBAAiB;AAEjB,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAGzB,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEtE,uEAAuE;AACvE,yEAAyE;AACzE,MAAM,eAAe,GAAG,sCAAsC,CAAC;AAE/D,MAAM,gBAAgB,GAAG,CAAC,GAAG,MAAM,CAAC;AAQpC,SAAS,SAAS,CAAC,IAAc;IAC/B,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,eAAe,CAAC;IAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YACzD,MAAM,GAAG,IAAI,CAAC;YACd,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,4EAA4E;IAC5E,uEAAuE;IACvE,yBAAyB;IACzB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACpE,CAAC;SAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,wEAAwE;QACxE,0CAA0C;QAC1C,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE;YACrC,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACxE,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,MAA0B;IAC7C,0EAA0E;IAC1E,sEAAsE;IACtE,OAAO;QACL,6BAA6B,EAAE,MAAM,IAAI,GAAG;QAC5C,8BAA8B,EAAE,eAAe;QAC/C,8BAA8B,EAAE,cAAc;QAC9C,wBAAwB,EAAE,OAAO;QACjC,IAAI,EAAE,QAAQ;KACf,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAyB;IAC/C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG;QAAE,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC;IACpD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAc;IAC3C,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;IAE/B,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACpE,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;QACnE,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAErB,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YAClD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAA4B,CAAC;YAExD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;gBACxC,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,WAAW,EAAE,CAAC;gBACrD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;gBACxC,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACjC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA6B,CAAC;gBAC5D,IACE,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;oBAChC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;oBACpC,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAChC,CAAC;oBACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;oBACxC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;oBAChE,OAAO;gBACT,CAAC;gBACD,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;oBAC3B,mEAAmE;oBACnE,sCAAsC;oBACtC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;oBACxC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;oBAChE,OAAO;gBACT,CAAC;gBACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;oBACjB,GAAG,WAAW,CAAC,MAAM,CAAC;oBACtB,cAAc,EAAE,kBAAkB;iBACnC,CAAC,CAAC;gBACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBACtC,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,OAAO,CAAC;oBACN,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;iBACpB,CAAC,CAAC;gBACH,kEAAkE;gBAClE,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;YACvC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;gBACxC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,IAAI,GAAI,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC;YACpD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YAC1C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACrC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAE3C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;YACxE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAEhB,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,gBAAgB,CAAC;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,oBAAoB,gBAAgB,cAAc,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;QACE,UAAU,EAAE;YACV,KAAK,EAAE;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,CAAC,IAAI,EAAE,kBAAkB,CAAC;aACjC;SACF;KACF,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC"}

package/package.json

@@ -0,0 +1,35 @@
+{
+  "name": "@euqns/nudge-mcp",
+  "version": "0.1.0",
+  "type": "module",
+  "description": "Model Context Protocol server for the Nudge board (the in-house Trello).",
+  "bin": {
+    "nudge-mcp": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "build": "tsc -p .",
+    "start": "node dist/index.js",
+    "dev": "tsx src/index.ts",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.4",
+    "convex": "^1.39.1",
+    "zod": "^3.23.8"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.6.3"
+  }
+}