@gethmy/mcp 2.13.4 → 2.14.0

package/dist/lib/api-client.js

@@ -210,6 +210,140 @@ function getMemoryDir() {
 var DEFAULT_API_URL = "https://app.gethmy.com/api", LOCAL_CONFIG_FILENAME = ".harmony-mcp.json";
 var init_config = () => {};
 
+// src/oauth-login.ts
+function oauthBaseFromApiUrl(apiUrl) {
+  return `${new URL(apiUrl).origin}/oauth`;
+}
+var MCP_RESOURCE_URL, LOGIN_TIMEOUT_MS;
+var init_oauth_login = __esm(() => {
+  MCP_RESOURCE_URL = process.env.HARMONY_MCP_RESOURCE || "https://mcp.gethmy.com";
+  LOGIN_TIMEOUT_MS = 5 * 60 * 1000;
+});
+
+// src/oauth-refresh.ts
+var exports_oauth_refresh = {};
+__export(exports_oauth_refresh, {
+  refreshOAuthToken: () => refreshOAuthToken
+});
+import {
+  closeSync,
+  openSync,
+  renameSync,
+  rmSync,
+  statSync,
+  writeSync
+} from "node:fs";
+import { join as join2 } from "node:path";
+function lockPath() {
+  return join2(getConfigDir(), LOCK_FILENAME);
+}
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function withRefreshLock(fn) {
+  const path = lockPath();
+  const deadline = Date.now() + LOCK_ACQUIRE_TIMEOUT_MS;
+  let held = false;
+  while (Date.now() < deadline) {
+    try {
+      const fd = openSync(path, "wx");
+      writeSync(fd, String(process.pid));
+      closeSync(fd);
+      held = true;
+      break;
+    } catch (err) {
+      if (err.code !== "EEXIST") {
+        break;
+      }
+      try {
+        const age = Date.now() - statSync(path).mtimeMs;
+        if (age > LOCK_STALE_MS) {
+          const claim = `${path}.stale.${process.pid}`;
+          try {
+            renameSync(path, claim);
+            rmSync(claim, { force: true });
+          } catch {}
+          continue;
+        }
+      } catch {
+        continue;
+      }
+      await sleep(LOCK_RETRY_MS);
+    }
+  }
+  try {
+    return await fn();
+  } finally {
+    if (held) {
+      try {
+        rmSync(path, { force: true });
+      } catch {}
+    }
+  }
+}
+function refreshOAuthToken() {
+  if (inFlight)
+    return inFlight;
+  inFlight = doRefresh().finally(() => {
+    inFlight = null;
+  });
+  return inFlight;
+}
+async function doRefresh() {
+  const before = loadConfig();
+  if (!before.oauthRefreshToken || !before.oauthClientId)
+    return null;
+  return withRefreshLock(async () => {
+    const config = loadConfig();
+    if (config.oauthRefreshToken !== before.oauthRefreshToken && config.oauthAccessToken) {
+      return config.oauthAccessToken;
+    }
+    if (!config.oauthRefreshToken || !config.oauthClientId)
+      return null;
+    const base = oauthBaseFromApiUrl(config.apiUrl);
+    let res;
+    try {
+      res = await fetch(`${base}/token`, {
+        method: "POST",
+        headers: { "Content-Type": "application/x-www-form-urlencoded" },
+        body: new URLSearchParams({
+          grant_type: "refresh_token",
+          refresh_token: config.oauthRefreshToken,
+          client_id: config.oauthClientId
+        }).toString()
+      });
+    } catch {
+      return null;
+    }
+    if (!res.ok) {
+      const errorCode = await res.json().then((b) => b?.error ?? null).catch(() => null);
+      if (errorCode === "invalid_grant") {
+        saveConfig({
+          oauthAccessToken: null,
+          oauthRefreshToken: null,
+          oauthExpiresAt: null,
+          oauthClientId: null
+        });
+      }
+      return null;
+    }
+    const body = await res.json().catch(() => null);
+    if (!body?.access_token || !body.refresh_token)
+      return null;
+    saveConfig({
+      oauthAccessToken: body.access_token,
+      oauthRefreshToken: body.refresh_token,
+      oauthExpiresAt: Date.now() + (body.expires_in ?? 0) * 1000
+    });
+    return body.access_token;
+  });
+}
+var inFlight = null, LOCK_FILENAME = "refresh.lock", LOCK_STALE_MS = 30000, LOCK_ACQUIRE_TIMEOUT_MS = 35000, LOCK_RETRY_MS = 100;
+var init_oauth_refresh = __esm(() => {
+  init_config();
+  init_oauth_login();
+});
+
 // src/prompt-builder.ts
 var exports_prompt_builder = {};
 __export(exports_prompt_builder, {
@@ -699,140 +833,6 @@ var init_prompt_builder = __esm(() => {
     execute: `EXECUTE MODE: Implement this task completely. Write production-ready code following best practices. Include necessary tests and documentation.`
   };
 });
-
-// src/oauth-login.ts
-function oauthBaseFromApiUrl(apiUrl) {
-  return `${new URL(apiUrl).origin}/oauth`;
-}
-var MCP_RESOURCE_URL, LOGIN_TIMEOUT_MS;
-var init_oauth_login = __esm(() => {
-  MCP_RESOURCE_URL = process.env.HARMONY_MCP_RESOURCE || "https://mcp.gethmy.com";
-  LOGIN_TIMEOUT_MS = 5 * 60 * 1000;
-});
-
-// src/oauth-refresh.ts
-var exports_oauth_refresh = {};
-__export(exports_oauth_refresh, {
-  refreshOAuthToken: () => refreshOAuthToken
-});
-import {
-  closeSync,
-  openSync,
-  renameSync,
-  rmSync,
-  statSync,
-  writeSync
-} from "node:fs";
-import { join as join2 } from "node:path";
-function lockPath() {
-  return join2(getConfigDir(), LOCK_FILENAME);
-}
-function sleep(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
-async function withRefreshLock(fn) {
-  const path = lockPath();
-  const deadline = Date.now() + LOCK_ACQUIRE_TIMEOUT_MS;
-  let held = false;
-  while (Date.now() < deadline) {
-    try {
-      const fd = openSync(path, "wx");
-      writeSync(fd, String(process.pid));
-      closeSync(fd);
-      held = true;
-      break;
-    } catch (err) {
-      if (err.code !== "EEXIST") {
-        break;
-      }
-      try {
-        const age = Date.now() - statSync(path).mtimeMs;
-        if (age > LOCK_STALE_MS) {
-          const claim = `${path}.stale.${process.pid}`;
-          try {
-            renameSync(path, claim);
-            rmSync(claim, { force: true });
-          } catch {}
-          continue;
-        }
-      } catch {
-        continue;
-      }
-      await sleep(LOCK_RETRY_MS);
-    }
-  }
-  try {
-    return await fn();
-  } finally {
-    if (held) {
-      try {
-        rmSync(path, { force: true });
-      } catch {}
-    }
-  }
-}
-function refreshOAuthToken() {
-  if (inFlight)
-    return inFlight;
-  inFlight = doRefresh().finally(() => {
-    inFlight = null;
-  });
-  return inFlight;
-}
-async function doRefresh() {
-  const before = loadConfig();
-  if (!before.oauthRefreshToken || !before.oauthClientId)
-    return null;
-  return withRefreshLock(async () => {
-    const config = loadConfig();
-    if (config.oauthRefreshToken !== before.oauthRefreshToken && config.oauthAccessToken) {
-      return config.oauthAccessToken;
-    }
-    if (!config.oauthRefreshToken || !config.oauthClientId)
-      return null;
-    const base = oauthBaseFromApiUrl(config.apiUrl);
-    let res;
-    try {
-      res = await fetch(`${base}/token`, {
-        method: "POST",
-        headers: { "Content-Type": "application/x-www-form-urlencoded" },
-        body: new URLSearchParams({
-          grant_type: "refresh_token",
-          refresh_token: config.oauthRefreshToken,
-          client_id: config.oauthClientId
-        }).toString()
-      });
-    } catch {
-      return null;
-    }
-    if (!res.ok) {
-      const errorCode = await res.json().then((b) => b?.error ?? null).catch(() => null);
-      if (errorCode === "invalid_grant") {
-        saveConfig({
-          oauthAccessToken: null,
-          oauthRefreshToken: null,
-          oauthExpiresAt: null,
-          oauthClientId: null
-        });
-      }
-      return null;
-    }
-    const body = await res.json().catch(() => null);
-    if (!body?.access_token || !body.refresh_token)
-      return null;
-    saveConfig({
-      oauthAccessToken: body.access_token,
-      oauthRefreshToken: body.refresh_token,
-      oauthExpiresAt: Date.now() + (body.expires_in ?? 0) * 1000
-    });
-    return body.access_token;
-  });
-}
-var inFlight = null, LOCK_FILENAME = "refresh.lock", LOCK_STALE_MS = 30000, LOCK_ACQUIRE_TIMEOUT_MS = 35000, LOCK_RETRY_MS = 100;
-var init_oauth_refresh = __esm(() => {
-  init_config();
-  init_oauth_login();
-});
 // ../harmony-shared/dist/cardLinks.js
 var LINK_TYPE_INVERSES = {
   relates_to: "relates_to",
@@ -904,6 +904,8 @@ function serializeCommentThread(comments, options = {}) {
     const tags = [];
     if (c.edited_at)
       tags.push("edited");
+    if (c.reply_to_id)
+      tags.push(`reply to ${ref(c.reply_to_id)}`);
     if (c.supersedes_id)
       tags.push(`supersedes ${ref(c.supersedes_id)}`);
     if (c.confirms_id)
@@ -1315,6 +1317,12 @@ class HarmonyApiClient {
   async getCardExternalLinks(cardId) {
     return this.request("GET", `/cards/${cardId}/external-links`);
   }
+  async addExternalLink(cardId, url, title) {
+    return this.request("POST", `/cards/${cardId}/external-links`, {
+      url,
+      title
+    });
+  }
   async uploadArtifact(data) {
     return this.request("POST", "/artifacts", data);
   }
@@ -1366,6 +1374,7 @@ class HarmonyApiClient {
       commentType: opts?.commentType,
       supersedesId: opts?.supersedesId,
       confirmsId: opts?.confirmsId,
+      replyToId: opts?.replyToId,
       agentSessionId: opts?.agentSessionId
     });
   }
@@ -1818,12 +1827,6 @@ ${planContent.trim()}`;
   async updatePlaybook(playbookId, updates) {
     return this.request("PATCH", `/playbooks/${playbookId}`, updates);
   }
-  async runPlaybook(playbookId) {
-    return this.request("POST", `/playbooks/${playbookId}/run`);
-  }
-  async savePlaybookFromCard(data) {
-    return this.request("POST", "/playbooks/from-card", data);
-  }
 }
 var _promptModules = null;
 async function loadPromptModules() {

package/dist/lib/oauth-refresh.js

@@ -0,0 +1,350 @@
+var __defProp = Object.defineProperty;
+var __returnValue = (v) => v;
+function __exportSetter(name, newValue) {
+  this[name] = __returnValue.bind(null, newValue);
+}
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, {
+      get: all[name],
+      enumerable: true,
+      configurable: true,
+      set: __exportSetter.bind(all, name)
+    });
+};
+var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+
+// src/config.ts
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+function getConfigDir() {
+  return join(homedir(), ".harmony-mcp");
+}
+function getConfigPath() {
+  return join(getConfigDir(), "config.json");
+}
+function getLocalConfigPath(cwd) {
+  return join(cwd || process.cwd(), LOCAL_CONFIG_FILENAME);
+}
+function emptyConfig() {
+  return {
+    apiKey: null,
+    apiUrl: DEFAULT_API_URL,
+    activeWorkspaceId: null,
+    activeProjectId: null,
+    userEmail: null,
+    memoryDir: null,
+    oauthAccessToken: null,
+    oauthRefreshToken: null,
+    oauthExpiresAt: null,
+    oauthClientId: null
+  };
+}
+function loadConfig() {
+  const configPath = getConfigPath();
+  if (!existsSync(configPath)) {
+    return emptyConfig();
+  }
+  try {
+    const data = readFileSync(configPath, "utf-8");
+    const config = JSON.parse(data);
+    return {
+      apiKey: config.apiKey || null,
+      apiUrl: config.apiUrl || DEFAULT_API_URL,
+      activeWorkspaceId: config.activeWorkspaceId || null,
+      activeProjectId: config.activeProjectId || null,
+      userEmail: config.userEmail || null,
+      memoryDir: config.memoryDir || null,
+      oauthAccessToken: config.oauthAccessToken || null,
+      oauthRefreshToken: config.oauthRefreshToken || null,
+      oauthExpiresAt: typeof config.oauthExpiresAt === "number" ? config.oauthExpiresAt : null,
+      oauthClientId: config.oauthClientId || null
+    };
+  } catch {
+    return emptyConfig();
+  }
+}
+function saveConfig(config) {
+  const configDir = getConfigDir();
+  const configPath = getConfigPath();
+  if (!existsSync(configDir)) {
+    mkdirSync(configDir, { recursive: true, mode: 448 });
+  }
+  const existingConfig = loadConfig();
+  const newConfig = { ...existingConfig, ...config };
+  writeFileSync(configPath, JSON.stringify(newConfig, null, 2), {
+    mode: 384
+  });
+}
+function loadLocalConfig(cwd) {
+  const localConfigPath = getLocalConfigPath(cwd);
+  if (!existsSync(localConfigPath)) {
+    return null;
+  }
+  try {
+    const data = readFileSync(localConfigPath, "utf-8");
+    const config = JSON.parse(data);
+    return {
+      workspaceId: config.workspaceId || null,
+      projectId: config.projectId || null
+    };
+  } catch {
+    return null;
+  }
+}
+function saveLocalConfig(config, cwd) {
+  const localConfigPath = getLocalConfigPath(cwd);
+  const existingConfig = loadLocalConfig(cwd) || {
+    workspaceId: null,
+    projectId: null
+  };
+  const newConfig = { ...existingConfig, ...config };
+  const cleanConfig = {};
+  if (newConfig.workspaceId)
+    cleanConfig.workspaceId = newConfig.workspaceId;
+  if (newConfig.projectId)
+    cleanConfig.projectId = newConfig.projectId;
+  writeFileSync(localConfigPath, JSON.stringify(cleanConfig, null, 2));
+}
+function hasLocalConfig(cwd) {
+  return existsSync(getLocalConfigPath(cwd));
+}
+function getActiveCredential() {
+  const config = loadConfig();
+  if (config.oauthAccessToken)
+    return config.oauthAccessToken;
+  if (config.apiKey)
+    return config.apiKey;
+  throw new Error(`Not configured. Run "npx @gethmy/mcp setup" to connect Harmony.
+` + "Setup authorizes in your browser — no API key handling required.");
+}
+function getApiKey() {
+  return getActiveCredential();
+}
+function getApiUrl() {
+  const config = loadConfig();
+  return config.apiUrl;
+}
+function getUserEmail() {
+  const config = loadConfig();
+  return config.userEmail;
+}
+function setUserEmail(email) {
+  saveConfig({ userEmail: email });
+}
+function setActiveWorkspace(workspaceId, options) {
+  if (options?.local) {
+    saveLocalConfig({ workspaceId }, options.cwd);
+  } else {
+    saveConfig({ activeWorkspaceId: workspaceId });
+  }
+}
+function setActiveProject(projectId, options) {
+  if (options?.local) {
+    saveLocalConfig({ projectId }, options.cwd);
+  } else {
+    saveConfig({ activeProjectId: projectId });
+  }
+}
+function getActiveWorkspaceId(cwd) {
+  const localConfig = loadLocalConfig(cwd);
+  if (localConfig?.workspaceId) {
+    return localConfig.workspaceId;
+  }
+  return loadConfig().activeWorkspaceId;
+}
+function getActiveProjectId(cwd) {
+  const localConfig = loadLocalConfig(cwd);
+  if (localConfig?.projectId) {
+    return localConfig.projectId;
+  }
+  return loadConfig().activeProjectId;
+}
+function isConfigured() {
+  const config = loadConfig();
+  return !!(config.apiKey || config.oauthAccessToken);
+}
+function areSkillsInstalled(cwd) {
+  const home = homedir();
+  const workingDir = cwd || process.cwd();
+  const foundPaths = [];
+  const globalSkillsDir = join(home, ".agents", "skills");
+  const globalSkillPath = join(globalSkillsDir, "hmy", "SKILL.md");
+  if (existsSync(globalSkillPath)) {
+    foundPaths.push(globalSkillPath);
+    return { installed: true, location: "global", paths: foundPaths };
+  }
+  const claudeGlobalSkill = join(home, ".claude", "skills", "hmy.md");
+  if (existsSync(claudeGlobalSkill)) {
+    foundPaths.push(claudeGlobalSkill);
+    return { installed: true, location: "global", paths: foundPaths };
+  }
+  const claudeGlobalSkillAlt = join(home, ".claude", "skills", "hmy", "SKILL.md");
+  if (existsSync(claudeGlobalSkillAlt)) {
+    foundPaths.push(claudeGlobalSkillAlt);
+    return { installed: true, location: "global", paths: foundPaths };
+  }
+  const localSkillPath = join(workingDir, ".claude", "skills", "hmy.md");
+  if (existsSync(localSkillPath)) {
+    foundPaths.push(localSkillPath);
+    return { installed: true, location: "local", paths: foundPaths };
+  }
+  const localSkillPathAlt = join(workingDir, ".claude", "skills", "hmy", "SKILL.md");
+  if (existsSync(localSkillPathAlt)) {
+    foundPaths.push(localSkillPathAlt);
+    return { installed: true, location: "local", paths: foundPaths };
+  }
+  return { installed: false, location: null, paths: [] };
+}
+function hasProjectContext(cwd) {
+  const localConfig = loadLocalConfig(cwd);
+  return !!(localConfig?.workspaceId || localConfig?.projectId);
+}
+function getMemoryDir() {
+  const config = loadConfig();
+  if (config.memoryDir)
+    return config.memoryDir;
+  return join(homedir(), ".harmony", "memory");
+}
+var DEFAULT_API_URL = "https://app.gethmy.com/api", LOCAL_CONFIG_FILENAME = ".harmony-mcp.json";
+var init_config = () => {};
+
+// src/oauth-login.ts
+function oauthBaseFromApiUrl(apiUrl) {
+  return `${new URL(apiUrl).origin}/oauth`;
+}
+var MCP_RESOURCE_URL, LOGIN_TIMEOUT_MS;
+var init_oauth_login = __esm(() => {
+  MCP_RESOURCE_URL = process.env.HARMONY_MCP_RESOURCE || "https://mcp.gethmy.com";
+  LOGIN_TIMEOUT_MS = 5 * 60 * 1000;
+});
+
+// src/oauth-refresh.ts
+var exports_oauth_refresh = {};
+__export(exports_oauth_refresh, {
+  refreshOAuthToken: () => refreshOAuthToken
+});
+import {
+  closeSync,
+  openSync,
+  renameSync,
+  rmSync,
+  statSync,
+  writeSync
+} from "node:fs";
+import { join as join2 } from "node:path";
+function lockPath() {
+  return join2(getConfigDir(), LOCK_FILENAME);
+}
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function withRefreshLock(fn) {
+  const path = lockPath();
+  const deadline = Date.now() + LOCK_ACQUIRE_TIMEOUT_MS;
+  let held = false;
+  while (Date.now() < deadline) {
+    try {
+      const fd = openSync(path, "wx");
+      writeSync(fd, String(process.pid));
+      closeSync(fd);
+      held = true;
+      break;
+    } catch (err) {
+      if (err.code !== "EEXIST") {
+        break;
+      }
+      try {
+        const age = Date.now() - statSync(path).mtimeMs;
+        if (age > LOCK_STALE_MS) {
+          const claim = `${path}.stale.${process.pid}`;
+          try {
+            renameSync(path, claim);
+            rmSync(claim, { force: true });
+          } catch {}
+          continue;
+        }
+      } catch {
+        continue;
+      }
+      await sleep(LOCK_RETRY_MS);
+    }
+  }
+  try {
+    return await fn();
+  } finally {
+    if (held) {
+      try {
+        rmSync(path, { force: true });
+      } catch {}
+    }
+  }
+}
+function refreshOAuthToken() {
+  if (inFlight)
+    return inFlight;
+  inFlight = doRefresh().finally(() => {
+    inFlight = null;
+  });
+  return inFlight;
+}
+async function doRefresh() {
+  const before = loadConfig();
+  if (!before.oauthRefreshToken || !before.oauthClientId)
+    return null;
+  return withRefreshLock(async () => {
+    const config = loadConfig();
+    if (config.oauthRefreshToken !== before.oauthRefreshToken && config.oauthAccessToken) {
+      return config.oauthAccessToken;
+    }
+    if (!config.oauthRefreshToken || !config.oauthClientId)
+      return null;
+    const base = oauthBaseFromApiUrl(config.apiUrl);
+    let res;
+    try {
+      res = await fetch(`${base}/token`, {
+        method: "POST",
+        headers: { "Content-Type": "application/x-www-form-urlencoded" },
+        body: new URLSearchParams({
+          grant_type: "refresh_token",
+          refresh_token: config.oauthRefreshToken,
+          client_id: config.oauthClientId
+        }).toString()
+      });
+    } catch {
+      return null;
+    }
+    if (!res.ok) {
+      const errorCode = await res.json().then((b) => b?.error ?? null).catch(() => null);
+      if (errorCode === "invalid_grant") {
+        saveConfig({
+          oauthAccessToken: null,
+          oauthRefreshToken: null,
+          oauthExpiresAt: null,
+          oauthClientId: null
+        });
+      }
+      return null;
+    }
+    const body = await res.json().catch(() => null);
+    if (!body?.access_token || !body.refresh_token)
+      return null;
+    saveConfig({
+      oauthAccessToken: body.access_token,
+      oauthRefreshToken: body.refresh_token,
+      oauthExpiresAt: Date.now() + (body.expires_in ?? 0) * 1000
+    });
+    return body.access_token;
+  });
+}
+var inFlight = null, LOCK_FILENAME = "refresh.lock", LOCK_STALE_MS = 30000, LOCK_ACQUIRE_TIMEOUT_MS = 35000, LOCK_RETRY_MS = 100;
+var init_oauth_refresh = __esm(() => {
+  init_config();
+  init_oauth_login();
+});
+init_oauth_refresh();
+
+export {
+  refreshOAuthToken
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gethmy/mcp",
-  "version": "2.13.4",
+  "version": "2.14.0",
   "description": "MCP server for Harmony Kanban board - enables AI coding agents to manage your boards",
   "publishConfig": {
     "access": "public"
@@ -16,6 +16,10 @@
     "./src/config.js": {
       "types": "./src/config.ts",
       "default": "./dist/lib/config.js"
+    },
+    "./src/oauth-refresh.js": {
+      "types": "./src/oauth-refresh.ts",
+      "default": "./dist/lib/oauth-refresh.js"
     }
   },
   "bin": {
@@ -55,7 +59,7 @@
     "bun": ">=1.0.0"
   },
   "scripts": {
-    "build": "rm -rf dist && bun build src/index.ts src/cli.ts --outdir dist --target node --external @clack/prompts --external @modelcontextprotocol/sdk --external commander --external hono --external picocolors --external zod && bun build src/api-client.ts src/config.ts --outdir dist/lib --root src --target node --external @clack/prompts --external @modelcontextprotocol/sdk --external commander --external hono --external picocolors --external zod",
+    "build": "rm -rf dist && bun build src/index.ts src/cli.ts --outdir dist --target node --external @clack/prompts --external @modelcontextprotocol/sdk --external commander --external hono --external picocolors --external zod && bun build src/api-client.ts src/config.ts src/oauth-refresh.ts --outdir dist/lib --root src --target node --external @clack/prompts --external @modelcontextprotocol/sdk --external commander --external hono --external picocolors --external zod",
     "build:bun": "bun build src/index.ts src/http.ts src/remote.ts src/cli.ts --outdir dist --target bun",
     "serve:remote": "bun src/remote.ts",
     "dev": "bun --watch src/index.ts",