@herbertgao/pi-extensions 2026.9.17 → 2026.9.18

package/node_modules/pi-mcp-adapter/cli.js

@@ -1,454 +0,0 @@
-#!/usr/bin/env node
-
-import fs from "node:fs";
-import path from "node:path";
-import os from "node:os";
-import { pathToFileURL } from "node:url";
-import stripJsonComments from "strip-json-comments";
-
-const HOME = os.homedir();
-
-function expandHome(input) {
-  if (input === "~") return HOME;
-  if (input.startsWith("~/")) return path.resolve(HOME, input.slice(2));
-  return path.resolve(input);
-}
-
-function readPiConfig() {
-  const dir = process.env.PI_PACKAGE_DIR?.trim();
-  if (!dir) return undefined;
-  try {
-    return JSON.parse(fs.readFileSync(path.join(path.resolve(dir), "package.json"), "utf8")).piConfig;
-  } catch {
-    return undefined;
-  }
-}
-
-function getConfigDirName() {
-  const configDir = readPiConfig()?.configDir;
-  return typeof configDir === "string" && configDir.trim() ? configDir.trim() : ".pi";
-}
-
-function getAgentDir() {
-  const piConfig = readPiConfig();
-  const appName = typeof piConfig?.name === "string" && piConfig.name.trim() ? piConfig.name.trim() : "pi";
-  const configured = process.env[`${appName.toUpperCase()}_CODING_AGENT_DIR`]?.trim();
-  if (configured) return expandHome(configured);
-  return path.join(HOME, getConfigDirName(), "agent");
-}
-
-const AGENT_DIR = getAgentDir();
-const PI_CONFIG_PATH = path.join(AGENT_DIR, "mcp.json");
-const GENERIC_GLOBAL_CONFIG_PATH = path.join(HOME, ".config", "mcp", "mcp.json");
-const AGENTS_GLOBAL_CONFIG_PATH = path.join(HOME, ".agents", "mcp.json");
-const AGENTS_NESTED_GLOBAL_CONFIG_PATH = path.join(HOME, ".agents", "mcp", "mcp.json");
-const PROJECT_CONFIG_PATH = path.resolve(process.cwd(), ".mcp.json");
-const PROJECT_PI_CONFIG_PATH = path.resolve(process.cwd(), getConfigDirName(), "mcp.json");
-
-const IMPORT_PATHS = {
-  cursor: [path.join(HOME, ".cursor", "mcp.json")],
-  "claude-code": [
-    path.join(HOME, ".claude", "mcp.json"),
-    path.join(HOME, ".claude.json"),
-    path.join(HOME, ".claude", "claude_desktop_config.json"),
-  ],
-  "claude-desktop": [path.join(HOME, "Library", "Application Support", "Claude", "claude_desktop_config.json")],
-  codex: [
-    path.join(HOME, ".codex", "config.toml"),
-    path.join(HOME, ".codex", "config.json"),
-  ],
-  opencode: [
-    path.join(HOME, ".config", "opencode", "opencode.json"),
-    path.resolve(process.cwd(), "opencode.json"),
-  ],
-  windsurf: [path.join(HOME, ".windsurf", "mcp.json")],
-  vscode: [path.resolve(process.cwd(), ".vscode", "mcp.json")],
-};
-
-function printHelp(log = console.log) {
-  log("pi-mcp-adapter helper\n");
-  log("Install the package with:");
-  log("  pi install npm:pi-mcp-adapter\n");
-  log("Then optionally run:");
-  log("  pi-mcp-adapter init       Detect host configs and scaffold Pi imports");
-  log("  pi-mcp-adapter init --dry-run");
-  log("  pi-mcp-adapter init --discover-host-configs  Opt in to host config fallback discovery");
-  log("");
-  log("Bearer token storage (servers configured with auth: \"bearer\" and bearerTokenStore: true):");
-  log("  pi-mcp-adapter token set <server>     Store a token read from stdin (masked prompt or pipe; never argv)");
-  log("  pi-mcp-adapter token status <server>  Report whether a stored token matches the configured URL");
-  log("  pi-mcp-adapter token remove <server>  Remove the stored token");
-  log("");
-  log("Jev API key storage (SYSTEMONE_ENDPOINT selects the provider endpoint):");
-  log("  pi-mcp-adapter key set systemone     Store a key read from stdin (masked prompt or pipe; never argv)");
-  log("  pi-mcp-adapter key status systemone  Report the effective credential source without revealing it");
-  log("  pi-mcp-adapter key remove systemone  Remove the stored key");
-}
-
-function readJsonFile(filePath) {
-  return JSON.parse(stripJsonComments(fs.readFileSync(filePath, "utf-8"), { trailingCommas: true }));
-}
-
-function loadPiConfig() {
-  if (!fs.existsSync(PI_CONFIG_PATH)) {
-    return { mcpServers: {} };
-  }
-
-  const raw = readJsonFile(PI_CONFIG_PATH);
-  const mcpServers = raw.mcpServers ?? raw["mcp-servers"] ?? {};
-  if (!mcpServers || typeof mcpServers !== "object" || Array.isArray(mcpServers)) {
-    throw new Error(`Invalid MCP config at ${PI_CONFIG_PATH}: expected \"mcpServers\" to be an object`);
-  }
-
-  const normalized = { ...raw };
-  delete normalized["mcp-servers"];
-
-  const imports = Array.isArray(raw.imports) ? raw.imports.filter((value) => typeof value === "string") : undefined;
-  return {
-    ...normalized,
-    mcpServers,
-    imports,
-  };
-}
-
-function findAvailableImports() {
-  const found = [];
-
-  for (const [kind, candidates] of Object.entries(IMPORT_PATHS)) {
-    const existing = candidates.find((candidate) => fs.existsSync(candidate));
-    if (existing) {
-      found.push({ kind, path: existing });
-    }
-  }
-
-  return found;
-}
-
-function printDiscovery(log, imports) {
-  log("Config discovery:\n");
-
-  const paths = [
-    ["User-global standard MCP", GENERIC_GLOBAL_CONFIG_PATH],
-    ["User-global .agents MCP", AGENTS_GLOBAL_CONFIG_PATH],
-    ["User-global .agents nested MCP", AGENTS_NESTED_GLOBAL_CONFIG_PATH],
-    ["Pi global override", PI_CONFIG_PATH],
-    ["Project standard MCP", PROJECT_CONFIG_PATH],
-    ["Project Pi override", PROJECT_PI_CONFIG_PATH],
-  ];
-
-  for (const [label, filePath] of paths) {
-    const prefix = fs.existsSync(filePath) ? "✓" : "-";
-    log(`${prefix} ${label}: ${filePath}`);
-  }
-
-  log("\nCompatibility imports:\n");
-  if (imports.length === 0) {
-    log("- No host-specific MCP configs detected");
-    return;
-  }
-
-  for (const entry of imports) {
-    log(`✓ ${entry.kind}: ${entry.path}`);
-  }
-}
-
-function writePiConfig(config) {
-  fs.mkdirSync(path.dirname(PI_CONFIG_PATH), { recursive: true });
-  fs.writeFileSync(PI_CONFIG_PATH, `${JSON.stringify(config, null, 2)}\n`, "utf-8");
-}
-
-async function runInit(argv, log = console.log) {
-  const dryRun = argv.includes("--dry-run");
-  const discoverHostConfigs = argv.includes("--discover-host-configs");
-  const foundImports = findAvailableImports();
-  const existingConfig = loadPiConfig();
-  const existingImports = new Set(existingConfig.imports ?? []);
-  const importsToAdd = foundImports
-    .map((entry) => entry.kind)
-    .filter((kind) => !existingImports.has(kind));
-
-  printDiscovery(log, foundImports);
-
-  const discoverySettingChanged = discoverHostConfigs && existingConfig.settings?.hostConfigDiscovery !== "on";
-  if (importsToAdd.length === 0 && !discoverySettingChanged) {
-    log("\nNo Pi config changes needed.");
-    log("Standard MCP configs are discovered automatically, and host-specific imports are already configured or unavailable.");
-    return 0;
-  }
-
-  const nextConfig = {
-    ...existingConfig,
-    ...(discoverySettingChanged ? { settings: { ...existingConfig.settings, hostConfigDiscovery: "on" } } : {}),
-    ...(importsToAdd.length > 0 ? { imports: [...existingImports, ...importsToAdd] } : {}),
-    mcpServers: existingConfig.mcpServers ?? {},
-  };
-
-  if (importsToAdd.length > 0) {
-    log(`\nDetected host configs to import into Pi: ${importsToAdd.join(", ")}`);
-  }
-  if (discoverySettingChanged) {
-    log("Opting in to host-specific fallback discovery (standard and Pi-owned configs still take precedence).");
-  }
-
-  if (dryRun) {
-    log(`Dry run: would update ${PI_CONFIG_PATH}`);
-    return 0;
-  }
-
-  writePiConfig(nextConfig);
-  log(`Updated ${PI_CONFIG_PATH}`);
-  log("Pi will now keep reading standard MCP configs automatically, while these imports cover host-specific config formats.");
-  if (discoverySettingChanged) {
-    log("Host config discovery is explicit and does not write to or execute commands from external host files.");
-  }
-  return 0;
-}
-
-async function importTokenModules(error) {
-  try {
-    const [store, config, utils] = await Promise.all([
-      import("./dist/mcp-bearer-store.js"),
-      import("./dist/config.js"),
-      import("./dist/utils.js"),
-    ]);
-    return { store, config, utils };
-  } catch (err) {
-    error("Unable to load token command modules.");
-    error(`Import failed: ${err instanceof Error ? err.message : String(err)}`);
-    return undefined;
-  }
-}
-
-function readSecretFromStdin(stdin, prompt = "Enter bearer token (input hidden): ") {
-  if (stdin.isTTY) return readSecretMasked(stdin, prompt);
-  return new Promise((resolve, reject) => {
-    let data = "";
-    stdin.setEncoding("utf8");
-    stdin.on("data", (chunk) => {
-      data += chunk;
-    });
-    stdin.on("end", () => resolve(data.replace(/[\r\n]+$/, "")));
-    stdin.on("error", reject);
-  });
-}
-
-// Raw-mode masked prompt: the token never echoes to the terminal.
-function readSecretMasked(stdin, prompt) {
-  return new Promise((resolve, reject) => {
-    process.stderr.write(prompt);
-    stdin.setRawMode(true);
-    stdin.resume();
-    stdin.setEncoding("utf8");
-    let token = "";
-    const onData = (chunk) => {
-      for (const char of chunk) {
-        if (char === "\u0003") {
-          cleanup();
-          reject(new Error("Token entry cancelled"));
-          return;
-        }
-        if (char === "\r" || char === "\n") {
-          cleanup();
-          resolve(token);
-          return;
-        }
-        if (char === "\u007f" || char === "\b") {
-          token = token.slice(0, -1);
-          continue;
-        }
-        token += char;
-      }
-    };
-    const cleanup = () => {
-      stdin.setRawMode(false);
-      stdin.pause();
-      stdin.off("data", onData);
-      process.stderr.write("\n");
-    };
-    stdin.on("data", onData);
-  });
-}
-
-async function runToken(argv, log, error, stdin) {
-  const [action, serverName, ...extra] = argv;
-  if (!["set", "status", "remove"].includes(action) || !serverName) {
-    error("Usage: pi-mcp-adapter token <set|status|remove> <server>");
-    error("`token set` reads the token from stdin only. Never pass the token as an argument.");
-    return 1;
-  }
-  if (extra.length > 0) {
-    error("Unexpected extra arguments. The token must not be passed on the command line; pipe it on stdin or use the interactive prompt.");
-    return 1;
-  }
-
-  const modules = await importTokenModules(error);
-  if (!modules) return 1;
-
-  // Argv-derived text is sanitized before terminal output, and the resolved
-  // URL is never printed: it can embed userinfo or interpolated secrets.
-  const safeName = modules.utils.sanitizeTerminalText(serverName);
-  const definition = modules.config.loadMcpConfig(undefined, process.cwd()).mcpServers[serverName];
-  if (!definition) {
-    error(`Server "${safeName}" not found in the effective MCP config.`);
-    return 1;
-  }
-  if (definition.auth !== "bearer" || definition.bearerTokenStore !== true) {
-    error(`Server "${safeName}" is not configured for bearerTokenStore. Set "auth": "bearer" and "bearerTokenStore": true.`);
-    return 1;
-  }
-  // resolveServerUrl embeds the interpolated URL in its exceptions, so catch
-  // and redact: the URL can carry userinfo or interpolated secrets.
-  let serverUrl;
-  try {
-    serverUrl = modules.utils.resolveServerUrl(definition);
-  } catch {
-    error(`Server "${safeName}" has an invalid or unresolvable URL. Fix the server's url in the MCP config and retry.`);
-    return 1;
-  }
-  if (!serverUrl) {
-    error(`Server "${safeName}" has no URL configured.`);
-    return 1;
-  }
-
-  if (action === "set") {
-    const token = await readSecretFromStdin(stdin);
-    if (!token) {
-      error("No token provided on stdin.");
-      return 1;
-    }
-    try {
-      modules.store.saveBearerTokenForUrl(serverName, token, serverUrl);
-    } catch (err) {
-      error(modules.utils.sanitizeTerminalText(err instanceof Error ? err.message : String(err)));
-      return 1;
-    }
-    log(`Bearer token stored for "${safeName}" and bound to the configured server URL.`);
-    if (definition.bearerToken !== undefined || definition.bearerTokenEnv !== undefined) {
-      log("Note: this server also configures bearerToken or bearerTokenEnv, which take precedence over the stored token.");
-    }
-    return 0;
-  }
-
-  if (action === "status") {
-    const status = modules.store.inspectBearerTokenForUrl(serverName, serverUrl);
-    if (status.status === "present") {
-      log(`Bearer token is stored for "${safeName}".`);
-      return 0;
-    }
-    if (status.status === "url-mismatch") {
-      log(`Bearer token is stored for "${safeName}", but its URL does not match the current server URL. Run \`pi-mcp-adapter token set ${safeName}\` to rebind it.`);
-      return 1;
-    }
-    if (status.status === "unavailable") {
-      error(status.message);
-      return 1;
-    }
-    log(`No bearer token is stored for "${safeName}".`);
-    return 1;
-  }
-
-  try {
-    modules.store.removeBearerToken(serverName);
-  } catch (err) {
-    error(modules.utils.sanitizeTerminalText(err instanceof Error ? err.message : String(err)));
-    return 1;
-  }
-  log(`Bearer token removed for "${safeName}".`);
-  return 0;
-}
-
-async function runKey(argv, log, error, stdin) {
-  const [action, provider, ...extra] = argv;
-  // `typesafe` is the pre-endpoint provider name, kept for existing scripts.
-  if (!["set", "status", "remove"].includes(action) || (provider !== "systemone" && provider !== "typesafe")) {
-    error("Usage: pi-mcp-adapter key <set|status|remove> systemone");
-    error("`key set` reads the API key from stdin only. Never pass the key as an argument.");
-    return 1;
-  }
-  if (extra.length > 0) {
-    error("Unexpected extra arguments. The API key must not be passed on the command line; pipe it on stdin or use the interactive prompt.");
-    return 1;
-  }
-  let store;
-  try { store = await import("./dist/jev-key-store.js"); }
-  catch (err) {
-    error("Unable to load Jev key command module.");
-    error(`Import failed: ${err instanceof Error ? err.message : String(err)}`);
-    return 1;
-  }
-  const resolution = store.resolveJevEndpoint();
-  if (resolution.status === "unavailable") {
-    error("SYSTEMONE_ENDPOINT is set but invalid, so no key can be stored or read for it.");
-    error(resolution.message);
-    return 1;
-  }
-  const endpoint = resolution.endpoint;
-
-  if (action === "status") {
-    const status = store.resolveJevCredential(process.env, endpoint);
-    if (status.status === "present") { log(`source=${status.source}`); log(`endpoint=${endpoint.href}`); return 0; }
-    if (status.status === "unavailable") { error(`unavailable: ${status.message}`); return 1; }
-    log("missing");
-    return 1;
-  }
-  if (action === "set") {
-    const apiKey = await readSecretFromStdin(stdin, `Enter Jev API key for ${endpoint.href} (input hidden): `);
-    if (!apiKey) { error("No API key provided on stdin."); return 1; }
-    try { store.saveJevApiKey(apiKey, endpoint); }
-    catch (err) { error(err instanceof Error ? err.message : "Jev API key could not be stored."); return 1; }
-    log("Jev API key stored in the OS secure credential store.");
-    log(`endpoint=${endpoint.href}`);
-  } else {
-    try { store.removeJevApiKey(endpoint); }
-    catch (err) { error(err instanceof Error ? err.message : "Jev API key could not be removed."); return 1; }
-    log("Jev API key removed from the OS secure credential store.");
-  }
-  if (Object.hasOwn(process.env, "SYSTEMONE_API_KEY")) log("Note: SYSTEMONE_API_KEY is present and overrides the stored key.");
-  else if (Object.hasOwn(process.env, "TYPESAFE_API_KEY")) log(endpoint.href === store.JEV_DEFAULT_ENDPOINT
-    ? "Note: TYPESAFE_API_KEY is present and overrides the stored key."
-    : `Note: TYPESAFE_API_KEY is ignored for ${endpoint.href}; it is a TypeSafe credential and is never sent there.`);
-  return 0;
-}
-
-export async function main(argv = process.argv.slice(2), log = console.log, error = console.error, stdin = process.stdin) {
-  const [command, ...rest] = argv;
-
-  if (!command || command === "help" || command === "--help" || command === "-h") {
-    printHelp(log);
-    return 0;
-  }
-
-  if (command === "token") {
-    return runToken(rest, log, error, stdin);
-  }
-
-  if (command === "key") {
-    return runKey(rest, log, error, stdin);
-  }
-
-  if (command === "install") {
-    error("The custom downloader has been retired.");
-    error("Use `pi install npm:pi-mcp-adapter` instead, then optionally run `pi-mcp-adapter init`.");
-    return 1;
-  }
-
-  if (command === "init") {
-    return runInit(rest, log);
-  }
-
-  error(`Unknown command: ${command}`);
-  printHelp(log);
-  return 1;
-}
-
-const resolvedEntrypoint = process.argv[1] ? fs.realpathSync(process.argv[1]) : undefined;
-const isEntrypoint = resolvedEntrypoint && import.meta.url === pathToFileURL(resolvedEntrypoint).href;
-
-if (isEntrypoint) {
-  main().then((code) => {
-    process.exitCode = code;
-  }).catch((err) => {
-    console.error(`\nHelper failed: ${err instanceof Error ? err.message : String(err)}`);
-    process.exit(1);
-  });
-}