@gpsglobal-ai/gpsglobal 1.4.7 → 1.4.9

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog — gpsglobal
 
+## 1.4.9 — 2026-06-21
+
+- **`doctor`:** checks OAuth AS `registration_endpoint` (DCR) for VS Code zero-config Connect
+- **`setup`:** prints VS Code Connect hint after OAuth config merge
+
+## 1.4.8 — 2026-06-21
+
+- **fix(setup):** CLI exits cleanly after `setup` / `login` — clear OAuth timeout, close loopback server, disable axios keep-alive (no more Ctrl+C)
+
 ## 1.4.7 — 2026-06-21
 
 - **README** — document `get_fund_wiki` `format=linked` default (PDF page deep links)

package/dist/cli/browser-login-internals.d.ts

@@ -0,0 +1,5 @@
+import http from 'node:http';
+/** @internal — exported for unit tests only */
+export declare function findFreePort(): Promise<number>;
+/** @internal — exported for unit tests only */
+export declare function closeHttpServer(server: http.Server): Promise<void>;

package/dist/cli/browser-login-internals.js

@@ -0,0 +1,24 @@
+import { createServer as createNetServer } from 'node:net';
+/** @internal — exported for unit tests only */
+export async function findFreePort() {
+    return new Promise((resolve, reject) => {
+        const srv = createNetServer();
+        srv.listen(0, '127.0.0.1', () => {
+            const addr = srv.address();
+            if (!addr || typeof addr === 'string') {
+                reject(new Error('Could not bind loopback port'));
+                return;
+            }
+            const port = addr.port;
+            srv.close(() => resolve(port));
+        });
+        srv.on('error', reject);
+    });
+}
+/** @internal — exported for unit tests only */
+export function closeHttpServer(server) {
+    return new Promise((resolve) => {
+        server.closeAllConnections?.();
+        server.close(() => resolve());
+    });
+}

package/dist/cli/browser-login.js

@@ -1,26 +1,13 @@
 import http from 'node:http';
-import { createServer as createNetServer } from 'node:net';
+import https from 'node:https';
 import { exec } from 'node:child_process';
-import { promisify } from 'node:util';
 import axios from 'axios';
 import { generatePkce, randomState } from '../lib/pkce.js';
 import { normalizeApiBase, writeGpsEnvFile, DEFAULT_ENV_PATH } from '../config/env.js';
-const execAsync = promisify(exec);
-async function findFreePort() {
-    return new Promise((resolve, reject) => {
-        const srv = createNetServer();
-        srv.listen(0, '127.0.0.1', () => {
-            const addr = srv.address();
-            if (!addr || typeof addr === 'string') {
-                reject(new Error('Could not bind loopback port'));
-                return;
-            }
-            const port = addr.port;
-            srv.close(() => resolve(port));
-        });
-        srv.on('error', reject);
-    });
-}
+import { closeHttpServer, findFreePort } from './browser-login-internals.js';
+/** One-shot HTTP clients — avoid keep-alive sockets keeping the CLI alive after setup. */
+const ephemeralHttpAgent = new http.Agent({ keepAlive: false });
+const ephemeralHttpsAgent = new https.Agent({ keepAlive: false });
 function openBrowser(url) {
     const cmd = process.platform === 'darwin' ? `open "${url}"` :
         process.platform === 'win32' ? `start "" "${url}"` :
@@ -38,58 +25,77 @@ export async function browserLogin(apiBase) {
     authorizeUrl.searchParams.set('state', state);
     authorizeUrl.searchParams.set('code_challenge', codeChallenge);
     authorizeUrl.searchParams.set('code_challenge_method', 'S256');
-    const codePromise = new Promise((resolve, reject) => {
-        const server = http.createServer((req, res) => {
-            const url = new URL(req.url ?? '/', `http://127.0.0.1:${port}`);
-            if (url.pathname !== '/callback') {
-                res.writeHead(404).end('Not found');
-                return;
-            }
-            const code = url.searchParams.get('code');
-            const returnedState = url.searchParams.get('state');
-            if (!code || returnedState !== state) {
-                res.writeHead(400).end('Invalid callback');
-                reject(new Error('OAuth callback missing code or state mismatch'));
-                server.close();
-                return;
-            }
-            res.writeHead(200, { 'Content-Type': 'text/html' });
-            res.end(`<!DOCTYPE html><html><body style="font-family:system-ui;background:#09090b;color:#fafafa;display:flex;align-items:center;justify-content:center;min-height:100vh">
+    let server;
+    let timeoutId;
+    try {
+        const codePromise = new Promise((resolve, reject) => {
+            server = http.createServer((req, res) => {
+                const url = new URL(req.url ?? '/', `http://127.0.0.1:${port}`);
+                if (url.pathname !== '/callback') {
+                    res.writeHead(404).end('Not found');
+                    return;
+                }
+                const code = url.searchParams.get('code');
+                const returnedState = url.searchParams.get('state');
+                if (!code || returnedState !== state) {
+                    res.writeHead(400).end('Invalid callback');
+                    reject(new Error('OAuth callback missing code or state mismatch'));
+                    return;
+                }
+                res.writeHead(200, { 'Content-Type': 'text/html' });
+                res.end(`<!DOCTYPE html><html><body style="font-family:system-ui;background:#09090b;color:#fafafa;display:flex;align-items:center;justify-content:center;min-height:100vh">
         <div style="text-align:center"><h1 style="color:#d4af37">GPS MCP connected</h1><p>You can close this tab and return to your terminal.</p></div></body></html>`);
-            resolve(code);
-            server.close();
+                resolve(code);
+            });
+            server.listen(port, '127.0.0.1');
+            server.on('error', reject);
         });
-        server.listen(port, '127.0.0.1');
-        server.on('error', reject);
-    });
-    console.log(`Opening browser for GPS sign-in…\n${authorizeUrl.href}\n`);
-    openBrowser(authorizeUrl.href);
-    const code = await Promise.race([
-        codePromise,
-        new Promise((_, reject) => setTimeout(() => reject(new Error('Browser login timed out after 3 minutes')), 180_000)),
-    ]);
-    const tokenResp = await axios.post(`${base}/api/v2/oauth/mcp-cli/token`, {
-        grant_type: 'authorization_code',
-        code,
-        redirect_uri: redirectUri,
-        code_verifier: codeVerifier,
-    }, { validateStatus: () => true });
-    if (tokenResp.status >= 400) {
-        const desc = tokenResp.data?.error_description ?? tokenResp.statusText;
-        throw new Error(`Token exchange failed: ${desc}`);
+        console.log(`Opening browser for GPS sign-in…\n${authorizeUrl.href}\n`);
+        openBrowser(authorizeUrl.href);
+        const code = await Promise.race([
+            codePromise,
+            new Promise((_, reject) => {
+                timeoutId = setTimeout(() => reject(new Error('Browser login timed out after 3 minutes')), 180_000);
+            }),
+        ]);
+        if (timeoutId) {
+            clearTimeout(timeoutId);
+            timeoutId = undefined;
+        }
+        const tokenResp = await axios.post(`${base}/api/v2/oauth/mcp-cli/token`, {
+            grant_type: 'authorization_code',
+            code,
+            redirect_uri: redirectUri,
+            code_verifier: codeVerifier,
+        }, {
+            validateStatus: () => true,
+            httpAgent: ephemeralHttpAgent,
+            httpsAgent: ephemeralHttpsAgent,
+        });
+        if (tokenResp.status >= 400) {
+            const desc = tokenResp.data?.error_description ?? tokenResp.statusText;
+            throw new Error(`Token exchange failed: ${desc}`);
+        }
+        const data = tokenResp.data;
+        writeGpsEnvFile({
+            apiBase: base,
+            accessToken: data.access_token,
+            lpId: data.lp_id,
+            role: data.role,
+            username: data.username,
+        }, DEFAULT_ENV_PATH);
+        return {
+            accessToken: data.access_token,
+            lpId: data.lp_id,
+            username: data.username,
+            role: data.role,
+        };
+    }
+    finally {
+        if (timeoutId)
+            clearTimeout(timeoutId);
+        if (server?.listening) {
+            await closeHttpServer(server).catch(() => undefined);
+        }
     }
-    const data = tokenResp.data;
-    writeGpsEnvFile({
-        apiBase: base,
-        accessToken: data.access_token,
-        lpId: data.lp_id,
-        role: data.role,
-        username: data.username,
-    }, DEFAULT_ENV_PATH);
-    return {
-        accessToken: data.access_token,
-        lpId: data.lp_id,
-        username: data.username,
-        role: data.role,
-    };
 }

package/dist/cli/doctor.js

@@ -78,6 +78,27 @@ export async function runDoctor() {
     catch {
         checks.push({ name: 'mcp-http', ok: true, detail: 'remote MCP unreachable (stdio mode OK)' });
     }
+    try {
+        const asMeta = await axios.get(`${apiBase}/api/v2/oauth/mcp-cli/.well-known/oauth-authorization-server`, {
+            timeout: 10_000,
+            validateStatus: () => true,
+        });
+        const hasDcr = asMeta.status === 200 && Boolean(asMeta.data?.registration_endpoint);
+        checks.push({
+            name: 'oauth-dcr',
+            ok: hasDcr,
+            detail: hasDcr
+                ? 'registration_endpoint present (VS Code Connect OK)'
+                : `AS metadata → ${asMeta.status} (VS Code may ask for manual client ID)`,
+        });
+    }
+    catch (err) {
+        checks.push({
+            name: 'oauth-dcr',
+            ok: false,
+            detail: err instanceof Error ? err.message : String(err),
+        });
+    }
     return { ok: checks.every((c) => c.ok), checks };
 }
 export function printDoctor(result) {

package/dist/cli/setup.js

@@ -50,5 +50,8 @@ export async function runSetup(options) {
     }
     console.log(`\nVerify: npx ${PACKAGE} doctor`);
     console.log(`Local dev: GPS_API_BASE=${LOCAL_GPS_API_BASE} npx ${PACKAGE} setup --mode=stdio`);
+    if (mode === 'oauth' || mode === 'remote') {
+        console.log('\nVS Code / Copilot: restart IDE → MCP: List Servers → Connect gpsglobal (DCR — no manual client ID).');
+    }
     console.log(`Done. Ask your AI: "list my GPS funds using ${MCP_SERVER_KEY}"`);
 }

package/dist/cli.js

@@ -100,11 +100,11 @@ async function main() {
     const args = process.argv.slice(2);
     if (args.includes('--stdio')) {
         await startStdioServer();
-        return;
+        return true;
     }
     if (args.includes('--http')) {
         await startHttpFromEnv();
-        return;
+        return true;
     }
     const cmd = args[0];
     if (!cmd || cmd === 'help' || args.includes('--help')) {
@@ -118,7 +118,7 @@ async function main() {
   npx ${PACKAGE} --stdio
   npx ${PACKAGE} --http
 `);
-        return;
+        return false;
     }
     if (cmd === 'setup') {
         const hostArg = args.find((a) => a.startsWith('--host='));
@@ -130,31 +130,36 @@ async function main() {
             useBrowser: !args.includes('--no-browser'),
             mode: mode ?? 'oauth',
         });
-        return;
+        return false;
     }
     if (cmd === 'doctor') {
         const result = await runDoctor();
         printDoctor(result);
         if (!result.ok)
             process.exit(1);
-        return;
+        return false;
     }
     if (cmd === 'login') {
         await runLogin(args.includes('--refresh'), args.includes('--browser'));
-        return;
+        return false;
     }
     if (cmd === 'status') {
         runStatus();
-        return;
+        return false;
     }
     if (cmd === 'print-config') {
         printConfig(process.env.GPS_MCP_ENV_PATH ?? DEFAULT_ENV_PATH);
-        return;
+        return false;
     }
     console.error(`Unknown command: ${cmd}`);
     process.exit(1);
 }
-main().catch((err) => {
+main()
+    .then((longRunning) => {
+    if (!longRunning)
+        process.exit(0);
+})
+    .catch((err) => {
     const msg = err instanceof Error ? err.message : String(err);
     console.error(msg);
     process.exit(1);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gpsglobal-ai/gpsglobal",
-  "version": "1.4.7",
+  "version": "1.4.9",
   "description": "GPS LP fund wiki MCP server — list_funds and get_fund_wiki for Cursor, Copilot, Claude",
   "type": "module",
   "main": "./dist/index.js",