@fourier-labs/harbour 0.1.7 → 0.1.8

package/dist/packages/harbour-cli/src/auth.js

@@ -4,7 +4,7 @@ import { chmod, mkdir, readFile, rm, writeFile } from "node:fs/promises";
 import { homedir, platform } from "node:os";
 import { dirname, join } from "node:path";
 import { spawn } from "node:child_process";
-const scopes = "harbour:operate harbour:source-save offline_access";
+export const requestedOAuthScopes = "mcp";
 export function tokenStorePath(env = process.env) {
     return join(env.XDG_CONFIG_HOME?.trim() || join(homedir(), ".config"), "harbour", "tokens.json");
 }
@@ -65,7 +65,7 @@ export async function login(mcpUrl, tenant, output) {
         const state = randomBytes(24).toString("base64url");
         const challenge = createHash("sha256").update(verifier).digest("base64url");
         const authorize = new URL(metadata.authorization_endpoint);
-        authorize.search = new URLSearchParams({ response_type: "code", client_id: registered.client_id, redirect_uri: callback.redirectUri, scope: scopes, state, resource: mcpUrl, code_challenge: challenge, code_challenge_method: "S256" }).toString();
+        authorize.search = new URLSearchParams({ response_type: "code", client_id: registered.client_id, redirect_uri: callback.redirectUri, scope: requestedOAuthScopes, state, resource: mcpUrl, code_challenge: challenge, code_challenge_method: "S256" }).toString();
         output("Harbour is opening your browser to sign in.");
         openBrowser(authorize.toString());
         output(`If it does not open, visit: ${authorize}`);
@@ -109,7 +109,7 @@ async function discover(mcpUrl) {
     const server = protectedResource.authorization_servers?.[0];
     if (!server)
         throw new Error("Harbour did not advertise a sign-in service.");
-    const wellKnown = new URL("/.well-known/oauth-authorization-server", server).toString();
+    const wellKnown = authorizationServerMetadataUrl(server);
     const metadata = await json(wellKnown);
     if (!metadata.authorization_endpoint || !metadata.token_endpoint || !metadata.registration_endpoint)
         throw new Error("Harbour sign-in metadata is incomplete.");
@@ -123,6 +123,7 @@ async function token(endpoint, values) {
 }
 async function json(url, init) { const response = await fetch(url, { ...init, redirect: "error" }); if (!response.ok)
     throw new Error(`Harbour sign-in request failed (${response.status}).`); return response.json(); }
+export function authorizationServerMetadataUrl(server) { return `${server.replace(/\/$/, "")}/.well-known/oauth-authorization-server`; }
 function validToken(value) { return Boolean(value && typeof value === "object" && typeof value.accessToken === "string" && typeof value.clientId === "string" && typeof value.tokenEndpoint === "string"); }
 function isMissing(error) { return Boolean(error && typeof error === "object" && error.code === "ENOENT"); }
 function loopbackCallback() {

package/dist/packages/harbour-cli/src/version.js

@@ -1 +1 @@
-export const CLI_VERSION = "0.1.7";
+export const CLI_VERSION = "0.1.8";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fourier-labs/harbour",
-  "version": "0.1.7",
+  "version": "0.1.8",
   "description": "Harbour productionisation helper",
   "type": "module",
   "bin": { "harbour": "./dist/packages/harbour-cli/src/cli.js" },