@hubfluencer/mcp 0.1.0 → 0.2.0

package/README.md

@@ -12,6 +12,11 @@ auth is an opaque bearer token passed through from an env var.
 No install step — run it on demand with `npx` (commands below). For local development,
 build from source instead: see [Develop](#develop).
 
+> **Run these in a normal terminal** (Terminal, iTerm, your IDE's terminal) — **not inside a
+> running Claude Code / agent session.** A nested `claude` forwards its arguments to the model
+> as a prompt instead of executing the `mcp add` subcommand, so the server is never registered
+> (you'll later see `/mcp` → *Failed to reconnect: -32000*). See [Troubleshooting](#troubleshooting).
+
 ### 1. Connect (recommended — no copy-paste)
 
 Run the device-link login. It prints a URL + short code; you approve it in the signed-in
@@ -19,7 +24,7 @@ Hubfluencer app, and a scoped access token is saved locally to `~/.hubfluencer/c
 (mode 0600) — the MCP server reads it from there automatically.
 
 ```bash
-npx -y -p @hubfluencer/mcp hubfluencer-login "Claude Code"
+npx -y @hubfluencer/mcp login "Claude Code"
 #  1. Open:        https://hubfluencer.com/connect?code=ABCD-EFGH
 #  2. Confirm code: ABCDEFGH
 #  3. Click Approve.  →  ✓ Connected.
@@ -31,6 +36,12 @@ Then register the server (no token env needed — it uses the stored credential)
 claude mcp add hubfluencer -- npx -y @hubfluencer/mcp
 ```
 
+Verify it connected:
+
+```bash
+claude mcp list   # → hubfluencer: ... ✓ Connected
+```
+
 ### Alternative: paste an access token
 
 Create a token in the app (**Settings → Access tokens**, scoped `video:generate`+`video:read` —
@@ -96,6 +107,15 @@ If it returns `terminal:false`, the render is still going — call `wait_for_com
 > TikTok/Instagram requires a human-linked social account and is out of scope —
 > return the MP4 + a suggested caption instead.
 
+## Troubleshooting
+
+| Symptom | Cause & fix |
+|---|---|
+| `/mcp` → **Failed to reconnect: -32000** | The server process never started — almost always because `claude mcp add` was run **inside a Claude session** (a nested `claude` runs the line as a prompt, not the subcommand), so nothing was registered. Re-run the `claude mcp add` above in a **normal terminal**, then `claude mcp list` to confirm. |
+| `npm error could not determine executable to run` | You're on a cached **0.1.x** (which shipped two bins). 0.2.0+ ships a single bin and resolves cleanly. Force a fresh fetch: `npx --ignore-existing -y @hubfluencer/mcp`. |
+| `npm error 404 … @hubfluencer/mcp` immediately after a release | npm registry/CDN propagation lag (a couple of minutes after publish). Wait and retry — it self-heals. |
+| Tools fail with **"Not connected to Hubfluencer"** | No token resolved. Run `npx -y @hubfluencer/mcp login`, or pass `--env HUBFLUENCER_API_TOKEN=…`. |
+
 ## Develop
 
 ```bash
@@ -105,6 +125,10 @@ bun run dev        # runs the stdio server (talk to it via an MCP client)
 bun run build      # emits dist/
 ```
 
+The package exposes a single bin, `hubfluencer-mcp`: with no args it starts the stdio MCP
+server; `hubfluencer-mcp login [name]` runs the device-link login. This is why
+`npx -y @hubfluencer/mcp` and `npx -y @hubfluencer/mcp login` both work without `-p`.
+
 ## License
 
 [MIT](./LICENSE) © Monocursive

package/dist/index.js

@@ -11964,7 +11964,7 @@ var require_dist = __commonJS((exports, module) => {
 });
 
 // src/index.ts
-import { writeFile } from "node:fs/promises";
+import { writeFile as writeFile2 } from "node:fs/promises";
 
 // ../../node_modules/@modelcontextprotocol/sdk/node_modules/zod/v3/helpers/util.js
 var util;
@@ -29569,11 +29569,88 @@ function clientFromEnv() {
   const token = process.env.HUBFLUENCER_API_TOKEN || stored.token;
   const baseUrl = process.env.HUBFLUENCER_BASE_URL || stored.base_url || "https://hubfluencer.com";
   if (!token) {
-    throw new Error("Not connected to Hubfluencer. Run `hubfluencer-login` to connect, or set " + "HUBFLUENCER_API_TOKEN (create one in the app: Settings → Access tokens).");
+    throw new Error("Not connected to Hubfluencer. Run `npx -y @hubfluencer/mcp login` to connect, or set " + "HUBFLUENCER_API_TOKEN (create one in the app: Settings → Access tokens).");
   }
   return new HubfluencerClient(baseUrl, token);
 }
 
+// src/login.ts
+import { chmod, mkdir, writeFile } from "node:fs/promises";
+import { dirname } from "node:path";
+var MAX_POLLS = 120;
+var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+async function runLogin(clientName = "Claude Code") {
+  const BASE = (process.env.HUBFLUENCER_BASE_URL || "https://hubfluencer.com").replace(/\/+$/, "").replace(/\/api$/, "");
+  assertSafeBaseUrl(BASE);
+  const startRes = await fetch(`${BASE}/api/agent-link/start`, {
+    method: "POST",
+    headers: { "content-type": "application/json", accept: "application/json" },
+    body: JSON.stringify({
+      client_name: clientName,
+      scopes: ["video:generate", "video:read"]
+    })
+  });
+  if (!startRes.ok) {
+    console.error(`Could not start login (HTTP ${startRes.status}). Check HUBFLUENCER_BASE_URL.`);
+    process.exit(1);
+  }
+  const start = await startRes.json();
+  const url = start.verification_uri_complete || start.verification_uri;
+  console.error(`
+Connect this agent to Hubfluencer:
+`);
+  console.error(`  1. Open:   ${url}`);
+  console.error(`  2. Confirm code:  ${start.user_code}`);
+  console.error(`  3. Click Approve (you'll need to be signed in).
+`);
+  console.error("Waiting for approval…");
+  let intervalMs = Math.max(2, start.interval ?? 5) * 1000;
+  const MAX_INTERVAL_MS = 30000;
+  for (let i = 0;i < MAX_POLLS; i++) {
+    await sleep(intervalMs);
+    const pollRes = await fetch(`${BASE}/api/agent-link/poll`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/json",
+        accept: "application/json"
+      },
+      body: JSON.stringify({ device_code: start.device_code })
+    });
+    const body = await pollRes.json().catch(() => ({}));
+    if (pollRes.ok && body.status === "approved" && body.token) {
+      await storeToken(body.token, BASE);
+      console.error(`
+✓ Connected. Access token saved to ${CREDENTIALS_PATH}.`);
+      console.error(`  Revoke anytime in the app: Settings → Access tokens.
+`);
+      return;
+    }
+    if (body.status === "slow_down") {
+      intervalMs = Math.min(intervalMs + 5000, MAX_INTERVAL_MS);
+      continue;
+    }
+    if (body.status === "pending")
+      continue;
+    console.error(`
+✗ ${body.error || body.status || `HTTP ${pollRes.status}`}. Run login again.`);
+    process.exit(1);
+  }
+  console.error(`
+✗ Timed out waiting for approval. Run login again.`);
+  process.exit(1);
+}
+async function storeToken(token, base) {
+  const dir = dirname(CREDENTIALS_PATH);
+  await mkdir(dir, { recursive: true, mode: 448 });
+  await writeFile(CREDENTIALS_PATH, JSON.stringify({ token, base_url: base }, null, 2), {
+    mode: 384
+  });
+  try {
+    await chmod(CREDENTIALS_PATH, 384);
+    await chmod(dir, 448);
+  } catch {}
+}
+
 // src/uploads.ts
 import { open, readFile, stat } from "node:fs/promises";
 import { basename, extname, isAbsolute as isAbsolute2, resolve as resolve2, sep as sep2 } from "node:path";
@@ -29786,7 +29863,7 @@ async function downloadTo(videoUrl, savePath) {
     await reader.cancel().catch(() => {});
   }
   const buf = Buffer.concat(chunks, total);
-  await writeFile(target, buf);
+  await writeFile2(target, buf);
   return { saved_to: target, bytes: buf.length };
 }
 function ok(payload, links = []) {
@@ -29883,7 +29960,7 @@ function tool(fn) {
     }
   };
 }
-var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+var sleep2 = (ms) => new Promise((r) => setTimeout(r, ms));
 var kindSchema = exports_external.enum(["short", "editor"]).describe("Project kind");
 var RO = { readOnlyHint: true, destructiveHint: false, openWorldHint: true };
 var WRITE = {
@@ -29891,7 +29968,7 @@ var WRITE = {
   destructiveHint: false,
   openWorldHint: true
 };
-var server = new McpServer({ name: "hubfluencer", version: "0.1.0" });
+var server = new McpServer({ name: "hubfluencer", version: "0.2.0" });
 var registerTool = server.registerTool.bind(server);
 async function pollToTerminal(client, kind, slug, extra, budgetMs, intervalMs) {
   const deadline = Date.now() + budgetMs;
@@ -29899,7 +29976,7 @@ async function pollToTerminal(client, kind, slug, extra, budgetMs, intervalMs) {
   let n = 0;
   while (!status.terminal && Date.now() + intervalMs <= deadline) {
     await reportProgress(extra, ++n, `stage: ${status.stage}`);
-    await sleep(intervalMs);
+    await sleep2(intervalMs);
     status = await fetchStatus(client, kind, slug);
   }
   return status;
@@ -29921,7 +29998,7 @@ async function pollSegmentToTerminal(client, slug, segmentId, extra, budgetMs, i
   let { status, error: error2 } = await read();
   while (status !== "completed" && status !== "failed" && Date.now() + intervalMs <= deadline) {
     await reportProgress(extra, ++n, `segment ${sid}: ${status}`);
-    await sleep(intervalMs);
+    await sleep2(intervalMs);
     ({ status, error: error2 } = await read());
   }
   return {
@@ -30532,7 +30609,7 @@ async function pollUploadToReady(client, slug, uploadId, extra, budgetMs, interv
   let { status, error: error2 } = await read();
   while (status !== "ready" && status !== "failed" && Date.now() + intervalMs <= deadline) {
     await reportProgress(extra, ++n, `upload ${uid}: ${status}`);
-    await sleep(intervalMs);
+    await sleep2(intervalMs);
     ({ status, error: error2 } = await read());
   }
   return {
@@ -30780,6 +30857,10 @@ registerTool("download_result", {
   }, link);
 }));
 async function main() {
+  if (process.argv[2] === "login") {
+    await runLogin(process.argv[3]);
+    return;
+  }
   const transport = new StdioServerTransport;
   await server.connect(transport);
   console.error("hubfluencer-mcp running on stdio");

package/package.json

@@ -1,14 +1,13 @@
 {
   "name": "@hubfluencer/mcp",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Model Context Protocol server for Hubfluencer — let AI agents generate post-ready shorts and editor ads.",
   "license": "MIT",
   "author": "Monocursive <contact@monocursive.com>",
   "private": false,
   "type": "module",
   "bin": {
-    "hubfluencer-mcp": "./dist/index.js",
-    "hubfluencer-login": "./dist/login.js"
+    "hubfluencer-mcp": "./dist/index.js"
   },
   "main": "./dist/index.js",
   "files": [
@@ -20,7 +19,7 @@
   ],
   "scripts": {
     "dev": "bun run src/index.ts",
-    "build": "rm -rf dist && bun build src/index.ts src/login.ts --target node --outdir dist",
+    "build": "rm -rf dist && bun build src/index.ts --target node --outdir dist",
     "prepublishOnly": "bun run build",
     "start": "node dist/index.js",
     "test": "bun test",

package/src/client.ts

@@ -185,8 +185,8 @@ export class HubfluencerClient {
 
 /**
  * Builds a client from the environment, falling back to the device-link
- * credential file (written by `hubfluencer-login`). Throws a clear, actionable
- * error if no token is available.
+ * credential file (written by `hubfluencer-mcp login`). Throws a clear,
+ * actionable error if no token is available.
  */
 export function clientFromEnv(): HubfluencerClient {
 	const stored = readStoredCredentials();
@@ -198,7 +198,7 @@ export function clientFromEnv(): HubfluencerClient {
 
 	if (!token) {
 		throw new Error(
-			"Not connected to Hubfluencer. Run `hubfluencer-login` to connect, or set " +
+			"Not connected to Hubfluencer. Run `npx -y @hubfluencer/mcp login` to connect, or set " +
 				"HUBFLUENCER_API_TOKEN (create one in the app: Settings → Access tokens).",
 		);
 	}

package/src/index.ts

@@ -35,6 +35,7 @@ import {
 	normalizeStatus,
 	resolveSavePath,
 } from "./core.js";
+import { runLogin } from "./login.js";
 import {
 	IMAGE_EXTS,
 	uploadImageFile,
@@ -322,7 +323,7 @@ const WRITE = {
 	openWorldHint: true,
 };
 
-const server = new McpServer({ name: "hubfluencer", version: "0.1.0" });
+const server = new McpServer({ name: "hubfluencer", version: "0.2.0" });
 
 // The SDK's `registerTool` is generic over the Zod input shape; with this many
 // tools its conditional types hit TS2589 ("excessively deep"). Inputs are still
@@ -2298,6 +2299,13 @@ registerTool(
 // ── Boot ──────────────────────────────────────────────────────────────────────
 
 async function main() {
+	// `hubfluencer-mcp login [name]` runs the device-link login instead of the
+	// server. Single bin keeps the install idiomatic: `npx -y @hubfluencer/mcp`
+	// starts the server; `npx -y @hubfluencer/mcp login` connects an account.
+	if (process.argv[2] === "login") {
+		await runLogin(process.argv[3]);
+		return;
+	}
 	const transport = new StdioServerTransport();
 	await server.connect(transport);
 	// stderr is safe; stdout is reserved for the MCP protocol.

package/src/login.ts

@@ -1,6 +1,9 @@
-#!/usr/bin/env node
 /**
- * `hubfluencer-login` — device-link CLI.
+ * Device-link login for the Hubfluencer MCP.
+ *
+ * Exposed as the `login` subcommand of the single `hubfluencer-mcp` bin:
+ *
+ *     npx -y @hubfluencer/mcp login ["Client Name"]
  *
  * Connects this agent to a Hubfluencer account without copy-pasting a token:
  * starts a link request, prints a URL + code for the user to approve in the
@@ -14,17 +17,21 @@ import { dirname } from "node:path";
 import { assertSafeBaseUrl } from "./client.js";
 import { CREDENTIALS_PATH } from "./credentials.js";
 
-const BASE = (process.env.HUBFLUENCER_BASE_URL || "https://hubfluencer.com")
-	.replace(/\/+$/, "")
-	.replace(/\/api$/, "");
-// Fail before printing a code / polling if the base would leak the token.
-assertSafeBaseUrl(BASE);
 const MAX_POLLS = 120;
 
 const sleep = (ms: number) => new Promise((r) => setTimeout(r, ms));
 
-async function main() {
-	const clientName = process.argv[2] || "Claude Code";
+/**
+ * Runs the device-link login flow. Resolves once the token is stored; calls
+ * `process.exit(1)` on a terminal failure (it's a CLI entry path). Invoked from
+ * index.ts when the bin is run as `hubfluencer-mcp login [name]`.
+ */
+export async function runLogin(clientName = "Claude Code"): Promise<void> {
+	const BASE = (process.env.HUBFLUENCER_BASE_URL || "https://hubfluencer.com")
+		.replace(/\/+$/, "")
+		.replace(/\/api$/, "");
+	// Fail before printing a code / polling if the base would leak the token.
+	assertSafeBaseUrl(BASE);
 
 	const startRes = await fetch(`${BASE}/api/agent-link/start`, {
 		method: "POST",
@@ -77,7 +84,7 @@ async function main() {
 		};
 
 		if (pollRes.ok && body.status === "approved" && body.token) {
-			await storeToken(body.token);
+			await storeToken(body.token, BASE);
 			console.error(
 				`\n✓ Connected. Access token saved to ${CREDENTIALS_PATH}.`,
 			);
@@ -101,12 +108,12 @@ async function main() {
 	process.exit(1);
 }
 
-async function storeToken(token: string) {
+async function storeToken(token: string, base: string) {
 	const dir = dirname(CREDENTIALS_PATH);
 	await mkdir(dir, { recursive: true, mode: 0o700 });
 	await writeFile(
 		CREDENTIALS_PATH,
-		JSON.stringify({ token, base_url: BASE }, null, 2),
+		JSON.stringify({ token, base_url: base }, null, 2),
 		{
 			mode: 0o600,
 		},
@@ -122,8 +129,3 @@ async function storeToken(token: string) {
 		// chmod is hardening — never fail the login over it
 	}
 }
-
-main().catch((e) => {
-	console.error("Fatal:", e instanceof Error ? e.message : String(e));
-	process.exit(1);
-});

package/dist/login.js

@@ -1,377 +0,0 @@
-#!/usr/bin/env node
-var __create = Object.create;
-var __getProtoOf = Object.getPrototypeOf;
-var __defProp = Object.defineProperty;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __toESM = (mod, isNodeMode, target) => {
-  target = mod != null ? __create(__getProtoOf(mod)) : {};
-  const to = isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
-  for (let key of __getOwnPropNames(mod))
-    if (!__hasOwnProp.call(to, key))
-      __defProp(to, key, {
-        get: () => mod[key],
-        enumerable: true
-      });
-  return to;
-};
-var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, {
-      get: all[name],
-      enumerable: true,
-      configurable: true,
-      set: (newValue) => all[name] = () => newValue
-    });
-};
-
-// src/login.ts
-import { chmod, mkdir, writeFile } from "node:fs/promises";
-import { dirname } from "node:path";
-
-// src/core.ts
-import { createHash } from "node:crypto";
-import { isAbsolute, resolve, sep } from "node:path";
-function isPrivateOrMetadataHost(hostname) {
-  let host = hostname.trim().toLowerCase();
-  if (host.startsWith("[") && host.endsWith("]"))
-    host = host.slice(1, -1);
-  const zone = host.indexOf("%");
-  if (zone !== -1)
-    host = host.slice(0, zone);
-  const v4 = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(host);
-  if (v4) {
-    const o = v4.slice(1).map(Number);
-    if (o.some((n) => n > 255))
-      return false;
-    return isPrivateV4(o[0], o[1]);
-  }
-  if (host.includes(":")) {
-    const mapped = /(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})$/.exec(host);
-    if (mapped) {
-      const o = mapped[1].split(".").map(Number);
-      if (!o.some((n) => n > 255) && isPrivateV4(o[0], o[1])) {
-        return true;
-      }
-    }
-    if (host === "::1" || host === "::")
-      return true;
-    if (host === "::ffff:0:0")
-      return true;
-    if (/^f[cd]/.test(host))
-      return true;
-    if (/^fe[89ab]/.test(host))
-      return true;
-    return false;
-  }
-  return false;
-}
-function isPrivateV4(a, b) {
-  if (a === 127)
-    return true;
-  if (a === 10)
-    return true;
-  if (a === 172 && b >= 16 && b <= 31)
-    return true;
-  if (a === 192 && b === 168)
-    return true;
-  if (a === 169 && b === 254)
-    return true;
-  if (a === 0)
-    return true;
-  return false;
-}
-function assertSafeFetchUrl(url, opts = {}) {
-  let u;
-  try {
-    u = new URL(url);
-  } catch {
-    throw new Error(`Invalid Hubfluencer URL: ${url}`);
-  }
-  const host = u.hostname;
-  const isLoopback = host === "localhost" || host === "127.0.0.1" || host === "::1" || host === "[::1]";
-  if (u.protocol === "https:") {
-    if (isPrivateOrMetadataHost(host)) {
-      throw new Error(`Refusing to use a Hubfluencer URL pointing at a private/internal host (${host}). ` + "Use the public https endpoint.");
-    }
-    return u;
-  }
-  if (opts.allowLoopback && isLoopback)
-    return u;
-  throw new Error(`Refusing to use an insecure Hubfluencer URL (${u.protocol}//${host}). ` + "Use an https URL (or localhost for local development).");
-}
-function asRecord(v) {
-  return v && typeof v === "object" ? v : {};
-}
-function normalizeStatus(kind, slug, data) {
-  const d = asRecord(data);
-  const latest = asRecord(d.latest_render);
-  const videoUrl = latest.video_url ?? null;
-  if (kind === "short") {
-    const stage = d.stage ?? "unknown";
-    return {
-      kind,
-      slug,
-      stage,
-      terminal: stage === "video_ready" || stage === "failed",
-      ready: stage === "video_ready",
-      video_url: videoUrl,
-      error: d.error_message ?? null
-    };
-  }
-  const autopilot = d.autopilot_status ?? "unknown";
-  const renderStatus = latest.status ?? null;
-  const ready = renderStatus === "completed" && Boolean(videoUrl);
-  const terminal = ready || autopilot === "failed" || autopilot === "cancelled" || renderStatus === "failed";
-  return {
-    kind,
-    slug,
-    stage: autopilot,
-    terminal,
-    ready,
-    video_url: videoUrl,
-    error: d.autopilot_error_message ?? null
-  };
-}
-function idemKey(...parts) {
-  return createHash("sha256").update(parts.join("|")).digest("hex").slice(0, 32);
-}
-function resolveSavePath(savePath) {
-  const base = resolve(process.env.HUBFLUENCER_OUTPUT_DIR || process.cwd());
-  const target = isAbsolute(savePath) ? resolve(savePath) : resolve(base, savePath);
-  if (!target.toLowerCase().endsWith(".mp4")) {
-    throw new Error("save_path must end in .mp4");
-  }
-  if (target !== base && !target.startsWith(base + sep)) {
-    throw new Error(`save_path must be inside ${base} (set HUBFLUENCER_OUTPUT_DIR to change). Refusing to write to ${target}.`);
-  }
-  return target;
-}
-function inferKind(prompt) {
-  const p = prompt.toLowerCase();
-  const wantsShort = /\b(short|quick|simple|snappy|single[- ]?clip|one[- ]?clip|teaser)\b/.test(p) || /(rapide|simple|court|clip unique|tease?r)/.test(p);
-  if (wantsShort)
-    return "short";
-  const wantsEditor = /\b(ads?|advert|advertisement|commercial|promo|campaign|launch|brand|story|stories|multi[- ]?scene|scenes?|narrat|explainer|chapters?|episodes?|testimonial|showcase|walkthrough|demo|spot)\b/.test(p) || /(pub(licit[ée])?|annonce|campagne|histoire|multi[- ]?sc[eè]ne|sc[eè]nes?|raconte|chapitres?|[eé]pisodes?|explicat|lancement|t[eé]moignage|d[eé]mo|vitrine)/.test(p);
-  return wantsEditor ? "editor" : "short";
-}
-
-// src/credentials.ts
-import { readFileSync, statSync } from "node:fs";
-import { homedir } from "node:os";
-import { join } from "node:path";
-var CREDENTIALS_PATH = process.env.HUBFLUENCER_CREDENTIALS || join(homedir(), ".hubfluencer", "credentials.json");
-function readStoredCredentials() {
-  let raw;
-  try {
-    raw = readFileSync(CREDENTIALS_PATH, "utf8");
-  } catch {
-    return {};
-  }
-  if (process.platform !== "win32") {
-    try {
-      const mode = statSync(CREDENTIALS_PATH).mode;
-      if (mode & 63) {
-        console.error(`Warning: ${CREDENTIALS_PATH} is accessible to other users ` + `(mode ${(mode & 511).toString(8)}). Run: chmod 600 ${CREDENTIALS_PATH}`);
-      }
-    } catch {}
-  }
-  try {
-    return JSON.parse(raw);
-  } catch {
-    return {};
-  }
-}
-
-// src/client.ts
-function makeError(status, body) {
-  let message = `Hubfluencer API error (HTTP ${status})`;
-  let code;
-  if (body && typeof body === "object") {
-    const b = body;
-    const errVal = b.error;
-    if (typeof errVal === "string") {
-      if (/^[a-z][a-z0-9_]*$/.test(errVal)) {
-        code = errVal;
-        message = b.message || errVal;
-      } else {
-        message = b.message || errVal;
-      }
-    } else if (errVal && typeof errVal === "object") {
-      const e = errVal;
-      code = e.code || undefined;
-      message = e.message || message;
-    } else if (typeof b.message === "string") {
-      message = b.message;
-    }
-  }
-  const err = new Error(message);
-  err.status = status;
-  err.code = code;
-  err.body = body;
-  return err;
-}
-function assertSafeBaseUrl(baseUrl) {
-  assertSafeFetchUrl(baseUrl, { allowLoopback: true });
-}
-
-class HubfluencerClient {
-  baseUrl;
-  token;
-  constructor(baseUrl, token) {
-    this.baseUrl = baseUrl;
-    this.token = token;
-    this.baseUrl = baseUrl.replace(/\/+$/, "").replace(/\/api$/, "");
-    assertSafeBaseUrl(this.baseUrl);
-  }
-  async request(method, path, opts = {}) {
-    const url = new URL(`${this.baseUrl}/api${path}`);
-    if (opts.query) {
-      for (const [k, v] of Object.entries(opts.query)) {
-        if (v !== undefined)
-          url.searchParams.set(k, String(v));
-      }
-    }
-    const headers = {
-      authorization: `Bearer ${this.token}`,
-      accept: "application/json"
-    };
-    if (opts.body !== undefined)
-      headers["content-type"] = "application/json";
-    if (opts.idempotencyKey)
-      headers["idempotency-key"] = opts.idempotencyKey;
-    let res;
-    try {
-      res = await fetch(url, {
-        method,
-        headers,
-        body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined,
-        signal: AbortSignal.timeout(60000)
-      });
-    } catch (e) {
-      if (e instanceof Error && (e.name === "TimeoutError" || e.name === "AbortError")) {
-        throw new Error(`Request to ${method} ${path} timed out after 60s.`);
-      }
-      throw e instanceof Error ? new Error(`Network error on ${method} ${path}: ${e.message}`) : e;
-    }
-    if (res.status === 204)
-      return;
-    const text = await res.text();
-    let parsed;
-    if (text) {
-      try {
-        parsed = JSON.parse(text);
-      } catch {
-        parsed = text;
-      }
-    }
-    if (!res.ok)
-      throw makeError(res.status, parsed);
-    return parsed;
-  }
-  get(path, query) {
-    return this.request("GET", path, { query });
-  }
-  post(path, body, idempotencyKey) {
-    return this.request("POST", path, { body, idempotencyKey });
-  }
-  patch(path, body, idempotencyKey) {
-    return this.request("PATCH", path, { body, idempotencyKey });
-  }
-  put(path, body, idempotencyKey) {
-    return this.request("PUT", path, { body, idempotencyKey });
-  }
-  del(path) {
-    return this.request("DELETE", path);
-  }
-}
-function clientFromEnv() {
-  const stored = readStoredCredentials();
-  const token = process.env.HUBFLUENCER_API_TOKEN || stored.token;
-  const baseUrl = process.env.HUBFLUENCER_BASE_URL || stored.base_url || "https://hubfluencer.com";
-  if (!token) {
-    throw new Error("Not connected to Hubfluencer. Run `hubfluencer-login` to connect, or set " + "HUBFLUENCER_API_TOKEN (create one in the app: Settings → Access tokens).");
-  }
-  return new HubfluencerClient(baseUrl, token);
-}
-
-// src/login.ts
-var BASE = (process.env.HUBFLUENCER_BASE_URL || "https://hubfluencer.com").replace(/\/+$/, "").replace(/\/api$/, "");
-assertSafeBaseUrl(BASE);
-var MAX_POLLS = 120;
-var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
-async function main() {
-  const clientName = process.argv[2] || "Claude Code";
-  const startRes = await fetch(`${BASE}/api/agent-link/start`, {
-    method: "POST",
-    headers: { "content-type": "application/json", accept: "application/json" },
-    body: JSON.stringify({
-      client_name: clientName,
-      scopes: ["video:generate", "video:read"]
-    })
-  });
-  if (!startRes.ok) {
-    console.error(`Could not start login (HTTP ${startRes.status}). Check HUBFLUENCER_BASE_URL.`);
-    process.exit(1);
-  }
-  const start = await startRes.json();
-  const url = start.verification_uri_complete || start.verification_uri;
-  console.error(`
-Connect this agent to Hubfluencer:
-`);
-  console.error(`  1. Open:   ${url}`);
-  console.error(`  2. Confirm code:  ${start.user_code}`);
-  console.error(`  3. Click Approve (you'll need to be signed in).
-`);
-  console.error("Waiting for approval…");
-  let intervalMs = Math.max(2, start.interval ?? 5) * 1000;
-  const MAX_INTERVAL_MS = 30000;
-  for (let i = 0;i < MAX_POLLS; i++) {
-    await sleep(intervalMs);
-    const pollRes = await fetch(`${BASE}/api/agent-link/poll`, {
-      method: "POST",
-      headers: {
-        "content-type": "application/json",
-        accept: "application/json"
-      },
-      body: JSON.stringify({ device_code: start.device_code })
-    });
-    const body = await pollRes.json().catch(() => ({}));
-    if (pollRes.ok && body.status === "approved" && body.token) {
-      await storeToken(body.token);
-      console.error(`
-✓ Connected. Access token saved to ${CREDENTIALS_PATH}.`);
-      console.error(`  Revoke anytime in the app: Settings → Access tokens.
-`);
-      return;
-    }
-    if (body.status === "slow_down") {
-      intervalMs = Math.min(intervalMs + 5000, MAX_INTERVAL_MS);
-      continue;
-    }
-    if (body.status === "pending")
-      continue;
-    console.error(`
-✗ ${body.error || body.status || `HTTP ${pollRes.status}`}. Run login again.`);
-    process.exit(1);
-  }
-  console.error(`
-✗ Timed out waiting for approval. Run login again.`);
-  process.exit(1);
-}
-async function storeToken(token) {
-  const dir = dirname(CREDENTIALS_PATH);
-  await mkdir(dir, { recursive: true, mode: 448 });
-  await writeFile(CREDENTIALS_PATH, JSON.stringify({ token, base_url: BASE }, null, 2), {
-    mode: 384
-  });
-  try {
-    await chmod(CREDENTIALS_PATH, 384);
-    await chmod(dir, 448);
-  } catch {}
-}
-main().catch((e) => {
-  console.error("Fatal:", e instanceof Error ? e.message : String(e));
-  process.exit(1);
-});