@integrity-labs/agt-cli 0.28.150 → 0.28.151

package/dist/mcp/remote-oauth-proxy.js

@@ -0,0 +1,168 @@
+#!/usr/bin/env node
+import { createRequire as __augmentedCreateRequire } from 'module';
+globalThis.require ??= __augmentedCreateRequire(import.meta.url);
+
+// src/remote-oauth-proxy.ts
+import { createInterface } from "readline";
+import { readFileSync } from "fs";
+import { fileURLToPath } from "url";
+import { resolve as resolvePath } from "path";
+var URL_ENV = "AGT_REMOTE_MCP_URL";
+var TOKEN_FILE_ENV = "AGT_REMOTE_MCP_TOKEN_FILE";
+var TOKEN_VAR_ENV = "AGT_REMOTE_MCP_TOKEN_VAR";
+var REMOTE_FETCH_TIMEOUT_MS = 3e4;
+var remoteUrl = process.env[URL_ENV] ?? "";
+var tokenFile = process.env[TOKEN_FILE_ENV] ?? "";
+var tokenVar = process.env[TOKEN_VAR_ENV] ?? "";
+var label = process.env["AGT_REMOTE_MCP_LABEL"] || tokenVar || "remote-oauth";
+function logErr(msg) {
+  process.stderr.write(`[remote-oauth-proxy:${label}] ${msg}
+`);
+}
+function readCurrentToken(file, varName) {
+  let raw;
+  try {
+    raw = readFileSync(file, "utf8");
+  } catch {
+    return null;
+  }
+  let value = null;
+  for (const line of raw.split("\n")) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#")) continue;
+    const eq = trimmed.indexOf("=");
+    if (eq < 0) continue;
+    const key = trimmed.slice(0, eq).replace(/^export\s+/, "").trim();
+    if (key !== varName) continue;
+    let v = trimmed.slice(eq + 1).trim();
+    if (v.length >= 2 && (v[0] === '"' && v[v.length - 1] === '"' || v[0] === "'" && v[v.length - 1] === "'")) {
+      v = v.slice(1, -1);
+    }
+    value = v;
+  }
+  return value && value.length > 0 ? value : null;
+}
+function jsonRpcError(id, code, message) {
+  return JSON.stringify({ jsonrpc: "2.0", id: id ?? null, error: { code, message } });
+}
+function extractJsonRpcMessages(contentType, body) {
+  const ct = (contentType || "").toLowerCase();
+  const out = [];
+  if (ct.includes("text/event-stream")) {
+    for (const line of body.split("\n")) {
+      const t = line.trimEnd();
+      if (!t.startsWith("data:")) continue;
+      const payload = t.slice(5).trim();
+      if (!payload || payload === "[DONE]") continue;
+      try {
+        JSON.parse(payload);
+        out.push(payload);
+      } catch {
+      }
+    }
+    return out;
+  }
+  const trimmed = body.trim();
+  if (!trimmed) return out;
+  try {
+    JSON.parse(trimmed);
+    out.push(trimmed);
+  } catch {
+  }
+  return out;
+}
+async function forward(line, id, isNotification) {
+  const token = readCurrentToken(tokenFile, tokenVar);
+  if (!token) {
+    logErr(`no token in ${tokenFile} (var ${tokenVar})`);
+    return isNotification ? [] : [jsonRpcError(id, -32e3, `${label}: no current access token available (reconnect the integration)`)];
+  }
+  let res;
+  try {
+    res = await fetch(remoteUrl, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Accept: "application/json, text/event-stream",
+        Authorization: `Bearer ${token}`
+      },
+      body: line,
+      signal: AbortSignal.timeout(REMOTE_FETCH_TIMEOUT_MS)
+    });
+  } catch (err) {
+    logErr(`fetch failed: ${err.message}`);
+    return isNotification ? [] : [jsonRpcError(id, -32001, `${label}: transport error contacting MCP server`)];
+  }
+  const ct = res.headers.get("content-type") ?? "";
+  let body = "";
+  try {
+    body = await res.text();
+  } catch {
+    body = "";
+  }
+  if (isNotification) return [];
+  const messages = extractJsonRpcMessages(ct, body);
+  if (messages.length > 0) return messages;
+  const detail = body.slice(0, 300).replace(/\s+/g, " ").trim();
+  return [jsonRpcError(id, -32002, `${label}: MCP server returned HTTP ${res.status}${detail ? ` (${detail})` : ""}`)];
+}
+function isMissingConfig() {
+  if (!remoteUrl) return URL_ENV;
+  if (!tokenFile) return TOKEN_FILE_ENV;
+  if (!tokenVar) return TOKEN_VAR_ENV;
+  return null;
+}
+async function main() {
+  const missing = isMissingConfig();
+  if (missing) {
+    logErr(`missing required env ${missing}; exiting`);
+    process.exit(1);
+  }
+  const rl = createInterface({ input: process.stdin, crlfDelay: Infinity });
+  let writeLock = Promise.resolve();
+  const writeReplies = (replies) => {
+    writeLock = writeLock.then(() => {
+      for (const reply of replies) process.stdout.write(reply + "\n");
+    });
+    return writeLock;
+  };
+  const inflight = /* @__PURE__ */ new Set();
+  rl.on("line", (line) => {
+    const text = line.trim();
+    if (!text) return;
+    let parsed;
+    try {
+      parsed = JSON.parse(text);
+    } catch {
+      logErr("dropping non-JSON stdin line");
+      return;
+    }
+    const isNotification = !("id" in parsed);
+    const id = parsed.id;
+    const task = forward(text, id, isNotification).then(writeReplies).catch((err) => {
+      logErr(`handler error: ${err.message}`);
+    });
+    inflight.add(task);
+    void task.finally(() => inflight.delete(task));
+  });
+  await new Promise((resolve) => rl.on("close", () => resolve()));
+  await Promise.all([...inflight]);
+  await writeLock;
+}
+var invokedDirectly = (() => {
+  try {
+    const entry = process.argv[1];
+    if (!entry) return false;
+    return fileURLToPath(import.meta.url) === resolvePath(entry);
+  } catch {
+    return false;
+  }
+})();
+if (invokedDirectly) {
+  void main();
+}
+export {
+  extractJsonRpcMessages,
+  main,
+  readCurrentToken
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.150",
+  "version": "0.28.151",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {
@@ -23,7 +23,7 @@
   },
   "scripts": {
     "build": "tsup && npm run build:mcp-assets && npm run build:cli-assets",
-    "build:mcp-assets": "mkdir -p dist/mcp && cp ../../packages/mcp/dist/index.js dist/mcp/index.js && cp ../../packages/mcp/dist/slack-channel.js dist/mcp/slack-channel.js && cp ../../packages/mcp/dist/direct-chat-channel.js dist/mcp/direct-chat-channel.js && cp ../../packages/mcp/dist/telegram-channel.js dist/mcp/telegram-channel.js && cp ../../packages/mcp/dist/teams-channel.js dist/mcp/teams-channel.js && cp ../../packages/mcp/dist/whatsapp-channel.js dist/mcp/whatsapp-channel.js && cp ../../packages/mcp/dist/whatsapp-link.js dist/mcp/whatsapp-link.js && cp ../../packages/augmented-admin-mcp/dist/index.js dist/mcp/augmented-admin.js",
+    "build:mcp-assets": "mkdir -p dist/mcp && cp ../../packages/mcp/dist/index.js dist/mcp/index.js && cp ../../packages/mcp/dist/slack-channel.js dist/mcp/slack-channel.js && cp ../../packages/mcp/dist/direct-chat-channel.js dist/mcp/direct-chat-channel.js && cp ../../packages/mcp/dist/telegram-channel.js dist/mcp/telegram-channel.js && cp ../../packages/mcp/dist/teams-channel.js dist/mcp/teams-channel.js && cp ../../packages/mcp/dist/whatsapp-channel.js dist/mcp/whatsapp-channel.js && cp ../../packages/mcp/dist/whatsapp-link.js dist/mcp/whatsapp-link.js && cp ../../packages/mcp/dist/remote-oauth-proxy.js dist/mcp/remote-oauth-proxy.js && cp ../../packages/augmented-admin-mcp/dist/index.js dist/mcp/augmented-admin.js",
     "build:cli-assets": "mkdir -p dist/assets && cp assets/impersonate-statusline.sh dist/assets/impersonate-statusline.sh && chmod +x dist/assets/impersonate-statusline.sh",
     "dev": "tsx watch src/bin/agt.ts",
     "test": "vitest run",