@infimind/video-mcp-cli 1.0.11 → 1.0.13

package/dist/index.js

@@ -1,50 +1,150 @@
 #!/usr/bin/env node
-import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import { createServer } from "./server.js";
 /**
- * CLI Entry Point for Sora MCP Server
+ * sora-mcp CLI entry point (1.0.13).
  *
- * Usage: sora-mcp
+ * Subcommands:
+ *   - `auth login`  — open the browser to authorize WorkBuddy
+ *   - `auth status` — print JSON status (use --json for the machine-readable form)
+ *   - `auth logout` — revoke the WorkBuddy token and delete the local credential
+ *   - `serve`       — start the stdio MCP server (default if no subcommand)
  *
- * Environment Variables:
- *   SORA_MCP_TOKEN - MCP API token
- *   SORA_API_URL - API base URL (default: http://localhost:3000/api)
+ * Token resolution for `serve` (highest priority first):
+ *   1. --token / SORA_MCP_TOKEN env (legacy Claude Desktop path)
+ *   2. WorkBuddy credential file under ~/.workbuddy/connectors/infimind-video/auth/credentials.json
+ *
+ * Profile filtering:
+ *   - `--profile=workbuddy`  exposes only the 5 stable WorkBuddy tools
+ *   - `--profile=default`    exposes the full tool set (legacy behavior)
  */
-async function main() {
-    // Parse command line arguments
-    const args = process.argv.slice(2);
-    const tokenArg = args.find(arg => arg.startsWith("--token="));
-    const tokenEnvArg = args.find(arg => arg.startsWith("--token-env="));
-    const explicitTokenEnvName = tokenEnvArg?.split("=")[1];
-    const tokenEnvName = explicitTokenEnvName || "SORA_MCP_TOKEN";
-    if (tokenEnvArg && !explicitTokenEnvName) {
-        console.error("Error: --token-env value is empty");
-        console.error("Usage: sora-mcp --token-env=SORA_MCP_TOKEN");
-        process.exit(1);
-    }
-    const tokenFromEnv = process.env[tokenEnvName];
-    const token = tokenFromEnv || tokenArg?.split("=")[1];
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { createServer } from "./server.js";
+import { installRedactingWriters } from "./auth/redact.js";
+import { runLogin } from "./auth/login.js";
+import { runStatus } from "./auth/status.js";
+import { runLogout } from "./auth/logout.js";
+import { readCredentials } from "./auth/credentialWriter.js";
+import { filterToolsForProfile } from "./auth/profile.js";
+import { WORKBUDDY_TOOL_NAMES } from "./auth/profile.js";
+// Install redacting writers BEFORE any process.stdout / stderr write, so
+// that no token, code, or verifier can ever leave the process unwrapped.
+installRedactingWriters();
+function getFlag(name, args) {
+    const pref = `--${name}=`;
+    for (const a of args) {
+        if (a === `--${name}`)
+            return "true";
+        if (a.startsWith(pref))
+            return a.slice(pref.length);
+    }
+    return undefined;
+}
+function parseProfile(args) {
+    const raw = getFlag("profile", args);
+    if (raw === "workbuddy")
+        return "workbuddy";
+    return "default";
+}
+async function mainServe(args) {
+    const profile = parseProfile(args);
+    const explicitToken = getFlag("token", args);
+    const explicitTokenEnvName = getFlag("token-env", args) || "SORA_MCP_TOKEN";
+    const envToken = process.env[explicitTokenEnvName];
+    let token;
+    let tokenSource = "env";
+    if (explicitToken) {
+        token = explicitToken;
+        tokenSource = "flag";
+    }
+    else if (envToken) {
+        token = envToken;
+        tokenSource = "env";
+    }
+    else {
+        const creds = readCredentials();
+        if (creds) {
+            token = creds.accessToken;
+            tokenSource = "file";
+        }
+    }
     if (!token) {
-        console.error(`Error: token is required. Set ${tokenEnvName} or pass --token=YOUR_TOKEN.`);
-        process.exit(1);
-    }
-    // Get API URL from environment variable or use default
-    // Note: Default should be just the base path without /trpc
-    const apiUrl = process.env.SORA_API_URL || "http://localhost:3000/api";
-    // Create and start the MCP server
-    const server = createServer(token, apiUrl);
-    // Set up stdio transport
+        process.stderr.write(`Error: no token available. Run \`sora-mcp auth login\` first or set ${explicitTokenEnvName}.\n`);
+        process.exit(2);
+    }
+    if (tokenSource === "file" && envToken) {
+        // Edge case: both env and file are set; env wins. Print a one-line
+        // note so the user knows the legacy token is in use.
+        process.stderr.write("[workbuddy-auth] note: SORA_MCP_TOKEN env is set; using it instead of the WorkBuddy credential\n");
+    }
+    const apiBaseUrl = process.env.SORA_API_URL || "https://aigc-next.iclip.cn/api";
+    const server = createServer(token, apiBaseUrl, {
+        profile,
+        filterTools: tools => filterToolsForProfile(tools, profile),
+        workbuddyToolNames: [...WORKBUDDY_TOOL_NAMES],
+    });
+    if (profile === "workbuddy") {
+        process.stderr.write(`[workbuddy-auth] profile=workbuddy; exposing ${WORKBUDDY_TOOL_NAMES.length} stable tools\n`);
+    }
     const transport = new StdioServerTransport();
-    // Connect the server to the transport
     await server.connect(transport);
-    // Server is now running and listening for messages via stdio
-    // Graceful shutdown
-    process.on("SIGINT", async () => {
-        await server.close();
-        process.exit(0);
-    });
+    const shutdown = async (sig) => {
+        try {
+            await server.close();
+        }
+        finally {
+            process.exit(0);
+        }
+    };
+    process.on("SIGINT", shutdown);
+    process.on("SIGTERM", shutdown);
+}
+async function mainAuth(args) {
+    const sub = args[0];
+    if (sub === "login") {
+        const result = await runLogin();
+        if (!result.ok) {
+            process.stderr.write(`Error: auth login failed: ${result.reason}\n`);
+            process.exit(1);
+        }
+        process.stdout.write("[workbuddy-auth] login complete\n");
+        return;
+    }
+    if (sub === "status") {
+        const wantJson = args.includes("--json");
+        const result = runStatus();
+        // Default human-readable output is a single line that WorkBuddy host
+        // can grep with `statusMatch: "Authenticated"`. The --json flag still
+        // emits the structured form so test scripts keep working.
+        if (wantJson) {
+            process.stdout.write(`${JSON.stringify({ authenticated: result.authenticated })}\n`);
+        }
+        else {
+            process.stdout.write(result.authenticated
+                ? "Authenticated\n"
+                : `Not authenticated: ${result.reason ?? "no credentials"}\n`);
+        }
+        process.exit(result.authenticated ? 0 : 1);
+    }
+    if (sub === "logout") {
+        const result = await runLogout();
+        if (!result.ok) {
+            process.stderr.write(`Error: revoke failed (${result.reason}). Local credential kept so you can retry.\n`);
+            process.exit(1);
+        }
+        process.stdout.write(`Logged out. revoked=${result.revoked} localDeleted=${result.localDeleted}\n`);
+        return;
+    }
+    process.stderr.write(`Usage: sora-mcp auth <login|status|logout>\n`);
+    process.exit(2);
+}
+async function main() {
+    const args = process.argv.slice(2);
+    if (args[0] === "auth") {
+        await mainAuth(args.slice(1));
+        return;
+    }
+    await mainServe(args);
 }
-main().catch((error) => {
-    console.error("Fatal error:", error);
+main().catch(err => {
+    process.stderr.write(`Fatal: ${err.message ?? String(err)}\n`);
     process.exit(1);
 });