@kitae9999/openlog-cli 0.2.0 → 1.0.0

package/README.md

@@ -17,6 +17,7 @@ MCP tools:
 - `list_my_liked_posts`
 - `upload_post_image`
 - `publish_post`
+- `push_working_brief`
 - `get_post_detail`
 
 MCP client configuration:

package/dist/api-client.js

@@ -12,9 +12,14 @@ export class ApiError extends Error {
 export class OpenLogApiClient {
     apiBaseUrl;
     accessToken;
+    refreshToken;
+    onTokenRefresh;
+    refreshPromise;
     constructor(options = {}) {
         this.apiBaseUrl = (options.apiBaseUrl ?? getApiBaseUrl()).replace(/\/$/, "");
         this.accessToken = options.accessToken;
+        this.refreshToken = options.refreshToken;
+        this.onTokenRefresh = options.onTokenRefresh;
     }
     async get(path) {
         return this.request(path, { method: "GET" });
@@ -26,6 +31,13 @@ export class OpenLogApiClient {
             body: body ? JSON.stringify(body) : undefined,
         });
     }
+    async put(path, body) {
+        return this.request(path, {
+            method: "PUT",
+            headers: body ? { "content-type": "application/json" } : undefined,
+            body: body ? JSON.stringify(body) : undefined,
+        });
+    }
     async postNoContent(path, body) {
         await this.request(path, {
             method: "POST",
@@ -40,7 +52,7 @@ export class OpenLogApiClient {
             body: body ? JSON.stringify(body) : undefined,
         });
     }
-    async request(path, init) {
+    async request(path, init, allowRefresh = true) {
         const url = `${this.apiBaseUrl}${path}`;
         const response = await fetch(url, {
             ...init,
@@ -51,6 +63,10 @@ export class OpenLogApiClient {
                     : {}),
             },
         });
+        if (response.status === 401 && allowRefresh && this.refreshToken) {
+            await this.refreshAccessToken();
+            return this.request(path, init, false);
+        }
         if (!response.ok) {
             throw new ApiError(response.status, url, await readErrorMessage(response));
         }
@@ -59,6 +75,37 @@ export class OpenLogApiClient {
         }
         return (await response.json());
     }
+    async refreshAccessToken() {
+        if (!this.refreshPromise) {
+            this.refreshPromise = this.performTokenRefresh().finally(() => {
+                this.refreshPromise = undefined;
+            });
+        }
+        await this.refreshPromise;
+    }
+    async performTokenRefresh() {
+        const response = await fetch(`${this.apiBaseUrl}/auth/device/refresh`, {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify({ refreshToken: this.refreshToken }),
+        });
+        if (!response.ok) {
+            throw new ApiError(response.status, `${this.apiBaseUrl}/auth/device/refresh`, await readErrorMessage(response));
+        }
+        const tokens = (await response.json());
+        if (!isRefreshedTokens(tokens)) {
+            throw new Error("OpenLog refresh response is incomplete.");
+        }
+        this.accessToken = tokens.accessToken;
+        this.refreshToken = tokens.refreshToken;
+        await this.onTokenRefresh?.(tokens);
+    }
+}
+function isRefreshedTokens(value) {
+    return Boolean(value.accessToken &&
+        value.refreshToken &&
+        Number.isFinite(value.expiresIn) &&
+        Number.isFinite(value.refreshExpiresIn));
 }
 async function readErrorMessage(response) {
     try {

package/dist/auth-store.js

@@ -10,8 +10,11 @@ export async function readAuthFile() {
         }
         return {
             accessToken: parsed.accessToken,
+            refreshToken: parsed.refreshToken,
             apiBaseUrl: parsed.apiBaseUrl,
             createdAt: parsed.createdAt,
+            accessTokenExpiresAt: parsed.accessTokenExpiresAt,
+            refreshTokenExpiresAt: parsed.refreshTokenExpiresAt,
         };
     }
     catch (error) {
@@ -24,20 +27,40 @@ export async function readAuthFile() {
         throw error;
     }
 }
-export async function writeAuthFile(accessToken) {
+export async function writeAuthFile(tokens) {
     const authFile = {
-        accessToken,
+        accessToken: tokens.accessToken,
+        refreshToken: tokens.refreshToken,
         apiBaseUrl: getApiBaseUrl(),
         createdAt: new Date().toISOString(),
+        accessTokenExpiresAt: expiresAt(tokens.expiresIn),
+        refreshTokenExpiresAt: expiresAt(tokens.refreshExpiresIn),
     };
+    await persistAuthFile(authFile);
+    return authFile;
+}
+export async function updateAuthFileTokens(authFile, tokens) {
+    const updatedAuthFile = {
+        ...authFile,
+        accessToken: tokens.accessToken,
+        refreshToken: tokens.refreshToken,
+        accessTokenExpiresAt: expiresAt(tokens.expiresIn),
+        refreshTokenExpiresAt: expiresAt(tokens.refreshExpiresIn),
+    };
+    await persistAuthFile(updatedAuthFile);
+    return updatedAuthFile;
+}
+async function persistAuthFile(authFile) {
     const authFilePath = getAuthFilePath();
     await mkdir(path.dirname(authFilePath), { recursive: true, mode: 0o700 });
     await writeFile(authFilePath, `${JSON.stringify(authFile, null, 2)}\n`, {
         mode: 0o600,
     });
     await chmod(authFilePath, 0o600);
-    return authFile;
 }
 export async function deleteAuthFile() {
     await rm(getAuthFilePath(), { force: true });
 }
+function expiresAt(expiresIn) {
+    return new Date(Date.now() + expiresIn * 1000).toISOString();
+}

package/dist/authenticated-client.js

@@ -0,0 +1,34 @@
+import { OpenLogApiClient } from "./api-client.js";
+import { readAuthFile, updateAuthFileTokens, } from "./auth-store.js";
+let cachedClient;
+export async function createAuthenticatedApiClient() {
+    const authFile = await readAuthFile();
+    if (!authFile) {
+        throw new Error("Run `openlog login` before using OpenLog.");
+    }
+    const fingerprint = authFingerprint(authFile);
+    if (cachedClient?.fingerprint === fingerprint) {
+        return cachedClient.client;
+    }
+    const client = new OpenLogApiClient({
+        accessToken: authFile.accessToken,
+        refreshToken: authFile.refreshToken,
+        apiBaseUrl: authFile.apiBaseUrl,
+        onTokenRefresh: async (tokens) => {
+            const updatedAuthFile = await updateAuthFileTokens(authFile, tokens);
+            cachedClient = {
+                fingerprint: authFingerprint(updatedAuthFile),
+                client,
+            };
+        },
+    });
+    cachedClient = { fingerprint, client };
+    return client;
+}
+function authFingerprint(authFile) {
+    return [
+        authFile.apiBaseUrl,
+        authFile.accessToken,
+        authFile.refreshToken ?? "",
+    ].join("\u0000");
+}

package/dist/index.js

@@ -4,6 +4,7 @@ import { login } from "./login.js";
 import { runMcpServer } from "./mcp-server.js";
 import { installMcp, printMcpInstallHelp } from "./mcp-install.js";
 import { ApiError, OpenLogApiClient } from "./api-client.js";
+import { createAuthenticatedApiClient } from "./authenticated-client.js";
 const command = process.argv[2] ?? "help";
 const subcommand = process.argv[3];
 try {
@@ -11,8 +12,7 @@ try {
         await login();
     }
     else if (command === "logout") {
-        await deleteAuthFile();
-        console.log("Logged out.");
+        await logout();
     }
     else if (command === "whoami") {
         await whoami();
@@ -56,17 +56,28 @@ async function installMcpCommand() {
     });
 }
 async function whoami() {
-    const authFile = await readAuthFile();
-    if (!authFile) {
-        throw new Error("Not logged in. Run `openlog login` first.");
-    }
-    const apiClient = new OpenLogApiClient({
-        accessToken: authFile.accessToken,
-        apiBaseUrl: authFile.apiBaseUrl,
-    });
+    const apiClient = await createAuthenticatedApiClient();
     const me = await apiClient.get("/auth/me");
     console.log(JSON.stringify(me, null, 2));
 }
+async function logout() {
+    const authFile = await readAuthFile();
+    if (authFile?.refreshToken) {
+        try {
+            const apiClient = new OpenLogApiClient({
+                apiBaseUrl: authFile.apiBaseUrl,
+            });
+            await apiClient.postNoContent("/auth/device/revoke", {
+                refreshToken: authFile.refreshToken,
+            });
+        }
+        catch (error) {
+            console.error(`Warning: remote session revoke failed: ${formatCliError(error)}`);
+        }
+    }
+    await deleteAuthFile();
+    console.log("Logged out.");
+}
 function printMcpStartupHint() {
     if (!process.stderr.isTTY) {
         return;
@@ -94,6 +105,7 @@ Available tools:
   list_my_liked_posts
   upload_post_image
   publish_post
+  push_working_brief
   get_post_detail
 `);
 }

package/dist/login.js

@@ -14,18 +14,18 @@ export async function login() {
         ? "The approval page was opened in your browser."
         : "Open the URL above in your browser.");
     console.log("Waiting for approval...");
-    const accessToken = await pollForAccessToken(apiClient, deviceLogin);
-    await writeAuthFile(accessToken);
+    const tokens = await pollForTokens(apiClient, deviceLogin);
+    await writeAuthFile(tokens);
     console.log("Login successful.");
 }
-async function pollForAccessToken(apiClient, deviceLogin) {
+async function pollForTokens(apiClient, deviceLogin) {
     const deadline = Date.now() + deviceLogin.expiresIn * 1000;
     let interval = deviceLogin.interval;
     while (Date.now() < deadline) {
         await sleep(interval * 1000);
         const response = await apiClient.post("/auth/device/token", { deviceCode: deviceLogin.deviceCode });
         if (response.status === "APPROVED") {
-            return response.accessToken;
+            return response;
         }
         interval = response.interval ?? interval;
     }

package/dist/mcp-server.js

@@ -1,8 +1,8 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
-import { OpenLogApiClient } from "./api-client.js";
 import { readAuthFile } from "./auth-store.js";
+import { createAuthenticatedApiClient } from "./authenticated-client.js";
 import { getApiBaseUrl, getWebBaseUrl } from "./config.js";
 import { uploadPostImage } from "./post-image-upload.js";
 const WRITE_TOOL_ANNOTATIONS = {
@@ -14,7 +14,7 @@ const WRITE_TOOL_ANNOTATIONS = {
 export async function runMcpServer() {
     const server = new McpServer({
         name: "openlog",
-        version: "0.2.0",
+        version: "1.0.0",
     });
     server.registerTool("get_auth_status", {
         title: "Get OpenLog Auth Status",
@@ -31,7 +31,7 @@ export async function runMcpServer() {
                 });
             }
             apiBaseUrl = authFile.apiBaseUrl;
-            const me = await createAuthenticatedClient().then((client) => client.get("/auth/me"));
+            const me = await createAuthenticatedApiClient().then((client) => client.get("/auth/me"));
             return textResult({
                 authenticated: true,
                 apiBaseUrl: authFile.apiBaseUrl,
@@ -153,6 +153,26 @@ export async function runMcpServer() {
             url: new URL(postPath, `${getWebBaseUrl()}/`).toString(),
         };
     }));
+    server.registerTool("push_working_brief", {
+        title: "Push OpenLog Working Brief",
+        description: "Overwrite the workspace Now Working brief with a short status update: what was done, what is still open, and optional task/branch context. Latest write wins.",
+        annotations: {
+            ...WRITE_TOOL_ANNOTATIONS,
+            idempotentHint: true,
+        },
+        inputSchema: {
+            workspaceId: z.number().int().positive(),
+            title: z.string().min(1).max(255),
+            prose: z.string().min(1),
+            taskId: z.number().int().positive().optional(),
+            branch: z.string().max(255).optional(),
+        },
+    }, async ({ workspaceId, title, prose, taskId, branch }) => withAuthenticatedClient((client) => client.put(`/workspaces/${workspaceId}/working-brief`, {
+        title,
+        prose,
+        taskId: taskId ?? null,
+        branch: branch ?? null,
+    })));
     server.registerTool("get_post_detail", {
         title: "Get OpenLog Post Detail",
         description: "Return a public OpenLog post detail by author username and post slug.",
@@ -212,19 +232,9 @@ function createContentPreview(content) {
 function buildPublicPostPath(username, slug) {
     return `/@${encodeURIComponent(username)}/posts/${encodeURIComponent(slug)}`;
 }
-async function createAuthenticatedClient() {
-    const authFile = await readAuthFile();
-    if (!authFile) {
-        throw new Error("Run `openlog login` before using OpenLog MCP tools.");
-    }
-    return new OpenLogApiClient({
-        accessToken: authFile.accessToken,
-        apiBaseUrl: authFile.apiBaseUrl,
-    });
-}
 async function withAuthenticatedClient(callback) {
     try {
-        const client = await createAuthenticatedClient();
+        const client = await createAuthenticatedApiClient();
         const result = await callback(client);
         return textResult(result);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kitae9999/openlog-cli",
-  "version": "0.2.0",
+  "version": "1.0.0",
   "private": false,
   "description": "Official OpenLog CLI and MCP server.",
   "type": "module",
@@ -16,7 +16,8 @@
     "build": "tsc && chmod 755 dist/index.js",
     "dev": "tsx src/index.ts",
     "prepack": "npm run build",
-    "start": "node dist/index.js"
+    "start": "node dist/index.js",
+    "test": "tsx --test test/**/*.test.ts"
   },
   "files": [
     "dist",