@holin-work/holin-cli 1.0.0

package/bin/holin-cli.js

@@ -0,0 +1,160 @@
+#!/usr/bin/env node
+/**
+ * holin-cli — Accio cli-login authorization tool
+ *
+ * Usage (invoked by Accio platform):
+ *   HOLIN_API_KEY=holin_xxx holin-cli auth login
+ *
+ * On success: writes credentials to ~/.config/holin-auth/credentials.json, exits 0
+ * On failure: prints error to stderr, exits 1
+ */
+
+import { existsSync, mkdirSync, writeFileSync, readFileSync } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+
+// ── Constants ────────────────────────────────────────────────────────────────
+
+const MCP_URL = "https://api.holin.work/icbu/mcp";
+
+const CREDENTIALS_FILE = join(
+  process.env.XDG_CONFIG_HOME || join(homedir(), ".config"),
+  "holin-auth",
+  "credentials.json"
+);
+
+// ── Helpers ──────────────────────────────────────────────────────────────────
+
+function writeCredentials(data) {
+  const dir = join(CREDENTIALS_FILE, "..");
+  if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
+  writeFileSync(CREDENTIALS_FILE, JSON.stringify(data, null, 2), "utf-8");
+}
+
+function readCredentials() {
+  try {
+    return JSON.parse(readFileSync(CREDENTIALS_FILE, "utf-8"));
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Verify API key by calling holin_ping via MCP.
+ * Returns parsed ping result or throws on failure.
+ */
+async function pingVerify(apiKey) {
+  const res = await fetch(MCP_URL, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      "Accept": "application/json, text/event-stream",
+      "X-API-Key": apiKey,
+    },
+    body: JSON.stringify({
+      jsonrpc: "2.0",
+      id: 1,
+      method: "tools/call",
+      params: { name: "holin_ping", arguments: {} },
+    }),
+    signal: AbortSignal.timeout(10000),
+  });
+
+  if (!res.ok) {
+    throw new Error(`MCP server responded ${res.status}`);
+  }
+
+  const raw = await res.text();
+  // Parse SSE: find "data: {...}" line
+  for (const line of raw.split("\n")) {
+    const trimmed = line.trim();
+    if (trimmed.startsWith("data:")) {
+      const envelope = JSON.parse(trimmed.slice(5).trim());
+      const text = envelope?.result?.content?.[0]?.text;
+      if (text) return JSON.parse(text);
+    }
+  }
+  throw new Error("Unexpected response format from MCP server");
+}
+
+// ── Commands ─────────────────────────────────────────────────────────────────
+
+async function cmdAuthLogin() {
+  const apiKey = process.env.HOLIN_API_KEY?.trim();
+  if (!apiKey) {
+    console.error("[holin-cli] Error: HOLIN_API_KEY environment variable is not set.");
+    process.exit(1);
+  }
+  if (!apiKey.startsWith("holin_")) {
+    console.error("[holin-cli] Error: Invalid API Key format (must start with 'holin_').");
+    process.exit(1);
+  }
+
+  console.log("[holin-cli] Verifying API Key...");
+  let result;
+  try {
+    result = await pingVerify(apiKey);
+  } catch (err) {
+    console.error(`[holin-cli] Error: Failed to reach Holin service — ${err.message}`);
+    process.exit(1);
+  }
+
+  if (!result?.authorized) {
+    console.error("[holin-cli] Error: API Key is invalid or unauthorized.");
+    process.exit(1);
+  }
+
+  const creds = {
+    api_key: apiKey,
+    customer_id: result.customer_id || "",
+    customer_name: result.customer_name || "",
+    plan: result.plan || "",
+    authorized_at: new Date().toISOString(),
+  };
+
+  writeCredentials(creds);
+  console.log(
+    `[holin-cli] Connected: ${creds.customer_name || creds.customer_id} (${creds.plan})`
+  );
+}
+
+function cmdAuthLogout() {
+  if (existsSync(CREDENTIALS_FILE)) {
+    writeFileSync(CREDENTIALS_FILE, JSON.stringify({}, null, 2), "utf-8");
+    console.log("[holin-cli] Disconnected: credentials cleared.");
+  } else {
+    console.log("[holin-cli] No credentials found.");
+  }
+}
+
+function cmdAuthStatus() {
+  const creds = readCredentials();
+  if (!creds?.api_key) {
+    console.log("[holin-cli] Status: not connected.");
+    process.exit(1);
+  }
+  console.log(
+    `[holin-cli] Status: connected as ${creds.customer_name || creds.customer_id} (${creds.plan})`
+  );
+}
+
+// ── Entrypoint ────────────────────────────────────────────────────────────────
+
+const [, , cmd, sub] = process.argv;
+
+if (cmd === "auth" && sub === "login") {
+  cmdAuthLogin().catch((err) => {
+    console.error(`[holin-cli] Unexpected error: ${err.message}`);
+    process.exit(1);
+  });
+} else if (cmd === "auth" && sub === "logout") {
+  cmdAuthLogout();
+} else if (cmd === "auth" && sub === "status") {
+  cmdAuthStatus();
+} else {
+  console.log("Usage:");
+  console.log("  holin-cli auth login    — authorize with HOLIN_API_KEY env var");
+  console.log("  holin-cli auth logout   — clear stored credentials");
+  console.log("  holin-cli auth status   — check current auth status");
+  process.exit(1);
+}

package/package.json

@@ -0,0 +1,16 @@
+{
+  "name": "@holin-work/holin-cli",
+  "version": "1.0.0",
+  "description": "Holin CLI — Accio plugin authorization tool for ICBU batch listing",
+  "type": "module",
+  "bin": {
+    "holin-cli": "bin/holin-cli.js"
+  },
+  "files": [
+    "bin/"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "license": "MIT"
+}