@floomhq/floom 1.0.64 → 2.0.0

package/dist/login.js

@@ -1,259 +0,0 @@
-import { createServer } from "node:http";
-import { createServer as createNetServer } from "node:net";
-import open from "open";
-import ora from "ora";
-import { getApiUrl, writeConfig } from "./config.js";
-import { c, header, symbols } from "./ui.js";
-import { FloomError, friendlyHttp, friendlyNetwork } from "./errors.js";
-const DEFAULT_PORT = 7456;
-const TIMEOUT_MS = 5 * 60 * 1000;
-export async function login() {
-    const apiUrl = getApiUrl();
-    const port = await pickPort();
-    process.stdout.write(header());
-    process.stdout.write(`${symbols.arrow}  Opening browser to sign in with Google...\n\n`);
-    const spinner = ora({
-        text: c.dim("Waiting for sign-in to complete..."),
-        color: "yellow",
-    }).start();
-    let tokens;
-    try {
-        tokens = await waitForCallback(port);
-    }
-    catch (err) {
-        spinner.stop();
-        if (err instanceof Error && /timed out/i.test(err.message)) {
-            throw new FloomError("No worries - try `npx -y @floomhq/floom login` again when ready.");
-        }
-        throw err;
-    }
-    spinner.text = c.dim("Verifying your account...");
-    const expiresIn = Number(tokens.expires_in ?? "3600");
-    const expiresAt = Math.floor(Date.now() / 1000) + (Number.isFinite(expiresIn) ? expiresIn : 3600);
-    let me;
-    try {
-        const meRes = await fetch(`${apiUrl}/api/me`, {
-            headers: { authorization: `Bearer ${tokens.access_token}` },
-        });
-        if (!meRes.ok) {
-            spinner.stop();
-            throw friendlyHttp(meRes.status, "verify your sign-in");
-        }
-        me = (await meRes.json());
-    }
-    catch (err) {
-        spinner.stop();
-        if (err instanceof FloomError)
-            throw err;
-        throw friendlyNetwork(err);
-    }
-    await writeConfig({
-        apiUrl,
-        accessToken: tokens.access_token,
-        refreshToken: tokens.refresh_token,
-        expiresAt,
-        email: me.email,
-    });
-    spinner.stop();
-    process.stdout.write(`${symbols.ok}  Signed in as ${c.bold(me.email ?? me.id)}\n`);
-    process.stdout.write(`   ${c.dim("Your token is saved at ~/.floom/config.json")}\n\n`);
-}
-/** Reserve a free port. Prefers 7456 for existing Supabase CLI auth setups. */
-async function pickPort() {
-    if (await canListen(DEFAULT_PORT))
-        return DEFAULT_PORT;
-    return reserveEphemeralPort();
-}
-function canListen(port) {
-    return new Promise((resolve) => {
-        const server = createNetServer();
-        server.once("error", () => resolve(false));
-        server.listen(port, "127.0.0.1", () => {
-            server.close(() => resolve(true));
-        });
-    });
-}
-function reserveEphemeralPort() {
-    return new Promise((resolve, reject) => {
-        const server = createNetServer();
-        server.once("error", reject);
-        server.listen(0, "127.0.0.1", () => {
-            const address = server.address();
-            if (!address || typeof address === "string") {
-                server.close();
-                reject(new FloomError("Could not reserve a local sign-in port."));
-                return;
-            }
-            const port = address.port;
-            server.close(() => resolve(port));
-        });
-    });
-}
-function waitForCallback(port) {
-    return new Promise((resolve, reject) => {
-        const apiUrl = getApiUrl();
-        let settled = false;
-        const server = createServer((req, res) => {
-            // CORS preflight from the browser bridge page.
-            const origin = req.headers.origin ?? "*";
-            if (req.method === "OPTIONS") {
-                res.writeHead(204, {
-                    "access-control-allow-origin": origin,
-                    "access-control-allow-methods": "POST, OPTIONS",
-                    "access-control-allow-headers": "content-type",
-                    "access-control-allow-private-network": "true",
-                    "access-control-max-age": "600",
-                });
-                res.end();
-                return;
-            }
-            if (req.method === "GET" && req.url?.startsWith("/cli-callback?")) {
-                try {
-                    const data = parseCallbackQuery(req.url);
-                    if (!data.access_token || !data.refresh_token) {
-                        res.writeHead(400, {
-                            "content-type": "text/html; charset=utf-8",
-                        });
-                        res.end(localCallbackPage("Missing tokens from OAuth response."));
-                        return;
-                    }
-                    res.writeHead(200, {
-                        "content-type": "text/html; charset=utf-8",
-                        "referrer-policy": "no-referrer",
-                    });
-                    res.end(localCallbackPage("Signed in. You can close this tab."));
-                    settled = true;
-                    cleanup();
-                    resolve(data);
-                }
-                catch {
-                    res.writeHead(400, { "content-type": "text/html; charset=utf-8" });
-                    res.end(localCallbackPage("Invalid OAuth response."));
-                }
-                return;
-            }
-            if (req.method === "POST" && req.url === "/cli-callback") {
-                let body = "";
-                req.on("data", (chunk) => { body += chunk.toString("utf8"); });
-                req.on("end", () => {
-                    try {
-                        const data = parseCallbackBody(body, req.headers["content-type"]);
-                        if (!data.access_token || !data.refresh_token) {
-                            res.writeHead(400, {
-                                "access-control-allow-origin": origin,
-                                "access-control-allow-private-network": "true",
-                                "content-type": "text/html; charset=utf-8",
-                            });
-                            res.end(localCallbackPage("Missing tokens from OAuth response."));
-                            return;
-                        }
-                        res.writeHead(200, {
-                            "access-control-allow-origin": origin,
-                            "access-control-allow-private-network": "true",
-                            "content-type": "text/html; charset=utf-8",
-                        });
-                        res.end(localCallbackPage("Signed in. You can close this tab."));
-                        settled = true;
-                        cleanup();
-                        resolve(data);
-                    }
-                    catch {
-                        res.writeHead(400, { "content-type": "text/html; charset=utf-8", "access-control-allow-origin": origin });
-                        res.end(localCallbackPage("Invalid OAuth response."));
-                    }
-                });
-                return;
-            }
-            res.writeHead(404, { "content-type": "text/plain" });
-            res.end("Not found");
-        });
-        const timer = setTimeout(() => {
-            if (settled)
-                return;
-            settled = true;
-            cleanup();
-            reject(new Error("Login timed out after 5 minutes."));
-        }, TIMEOUT_MS);
-        function cleanup() {
-            clearTimeout(timer);
-            server.close();
-        }
-        server.on("error", (err) => {
-            if (settled)
-                return;
-            settled = true;
-            clearTimeout(timer);
-            reject(new FloomError(`Local auth server failed on port ${port}.`, `Is port ${port} already in use? (${err.message})`));
-        });
-        server.listen(port, "127.0.0.1", () => {
-            const target = `${apiUrl}/auth/cli?port=${port}`;
-            open(target).catch((e) => {
-                const msg = e instanceof Error ? e.message : String(e);
-                process.stdout.write(c.yellow(`Could not auto-open browser (${msg}).\n`) +
-                    c.dim(`Open this URL manually: ${target}\n`));
-            });
-        });
-    });
-}
-function parseCallbackQuery(url) {
-    const parsed = new URL(url, "http://127.0.0.1");
-    const result = {};
-    for (const key of ["access_token", "refresh_token", "expires_in", "token_type"]) {
-        const value = parsed.searchParams.get(key);
-        if (value)
-            result[key] = value;
-    }
-    return result;
-}
-function parseCallbackBody(body, contentType) {
-    const type = Array.isArray(contentType) ? contentType.join(";") : contentType ?? "";
-    if (type.includes("application/x-www-form-urlencoded")) {
-        const params = new URLSearchParams(body);
-        const parsed = {};
-        for (const key of ["access_token", "refresh_token", "expires_in", "token_type"]) {
-            const value = params.get(key);
-            if (value)
-                parsed[key] = value;
-        }
-        return parsed;
-    }
-    return JSON.parse(body);
-}
-function localCallbackPage(message) {
-    const safeMessage = escapeHtml(message);
-    return `<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1">
-  <title>Floom CLI sign-in</title>
-  <style>
-    :root { color-scheme: light; --ink: #111827; --muted: #4b5563; --line: #e5e7eb; --accent: #0f766e; --bg: #f8fafc; }
-    * { box-sizing: border-box; }
-    body { margin: 0; min-height: 100vh; display: grid; place-items: center; background: var(--bg); color: var(--ink); font-family: ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; }
-    main { width: min(560px, calc(100vw - 40px)); padding: 40px; background: #fff; border: 1px solid var(--line); border-radius: 16px; box-shadow: 0 24px 80px rgba(15, 23, 42, 0.08); }
-    .mark { display: inline-flex; align-items: center; gap: 10px; margin-bottom: 28px; font-weight: 700; letter-spacing: 0.02em; }
-    .dot { width: 10px; height: 10px; border-radius: 999px; background: var(--accent); display: inline-block; }
-    h1 { margin: 0; font-size: clamp(32px, 7vw, 56px); line-height: 0.95; letter-spacing: 0; }
-    p { margin: 20px 0 0; font-size: 18px; line-height: 1.55; color: var(--muted); }
-    code { display: inline-block; margin-top: 24px; padding: 10px 12px; border: 1px solid var(--line); border-radius: 8px; background: #f9fafb; color: var(--ink); font-size: 14px; }
-  </style>
-</head>
-<body>
-  <main>
-    <div class="mark"><span class="dot"></span><span>floom</span></div>
-    <h1>${safeMessage}</h1>
-    <p>Return to your terminal to continue. Your Floom CLI now has the token it needs.</p>
-    <code>floom doctor</code>
-  </main>
-</body>
-</html>`;
-}
-function escapeHtml(value) {
-    return value
-        .replace(/&/g, "&amp;")
-        .replace(/</g, "&lt;")
-        .replace(/>/g, "&gt;")
-        .replace(/"/g, "&quot;")
-        .replace(/'/g, "&#39;");
-}

package/dist/mcp.js

@@ -1,20 +0,0 @@
-import { c } from "./ui.js";
-export function printMcpSetup() {
-    const snippet = `## Floom
-- Use Floom skills from the local Floom skills folder when they match the task.
-- To install a shared skill, run \`npx -y @floomhq/floom add <slug-or-url> --target <claude|codex|cursor|opencode|kimi>\`.
-- To find reusable behavior, run \`npx -y @floomhq/floom search <query>\`.
-- MCP sync uses the skills directory configured for that agent; set \`FLOOM_SKILLS_DIR\` or the agent-specific env var when registering the server.`;
-    process.stdout.write(`\n${c.bold("Floom MCP setup")}\n\n`);
-    process.stdout.write(`${c.dim("Pick your tool:")}\n\n`);
-    process.stdout.write(`  ${c.bold("Claude Code")}\n`);
-    process.stdout.write(`  ${c.cyan("claude mcp add floom -- npx -y @floomhq/floom-mcp-sync")}\n\n`);
-    process.stdout.write(`  ${c.bold("Codex CLI")}\n`);
-    process.stdout.write(`  ${c.cyan("codex mcp add floom -- npx -y @floomhq/floom-mcp-sync")}\n\n`);
-    process.stdout.write(`  ${c.bold("Cursor / OpenCode / Kimi")}\n`);
-    process.stdout.write(`  ${c.cyan("Run the agent's MCP registration flow with FLOOM_SKILLS_DIR set to its skills root.")}\n`);
-    process.stdout.write(`  ${c.dim("Examples: ~/.cursor/skills-cursor, ~/.config/opencode/skills, ~/.kimi/skills")}\n\n`);
-    process.stdout.write(`${c.dim("Full guide:")} ${c.cyan("https://floom.dev/docs/mcp")}\n\n`);
-    process.stdout.write(`${c.dim("Recommended agent instruction snippet:")}\n\n`);
-    process.stdout.write(`${snippet}\n\n`);
-}