@mikoto_zero/minigame-open-mcp 1.5.8 → 1.5.9

package/bin/minigame-open-mcp

@@ -16,17 +16,17 @@ const __dirname = dirname(__filename);
 // Get package root directory
 const packageRoot = join(__dirname, '..');
 
-// Check if bundled version exists
-const distPath = join(packageRoot, 'dist', 'server-bundle.js');
+// Check if compiled version exists
+const distPath = join(packageRoot, 'dist', 'server.js');
 
 if (existsSync(distPath)) {
-    // Use bundled version (ES Module dynamic import)
+    // Use compiled version (ES Module dynamic import)
     import(distPath).catch(error => {
         console.error('❌ Failed to start server:', error);
         process.exit(1);
     });
 } else {
-    console.error('❌ Server bundle not found. Please build the project first:');
-    console.error('   npm run build:all');
+    console.error('❌ Server not found. Please build the project first:');
+    console.error('   npm run build');
     process.exit(1);
 }

package/dist/__tests__/version.test.d.ts

@@ -0,0 +1,4 @@
+/**
+ * 基础测试 - 确保测试框架正常工作
+ */
+//# sourceMappingURL=version.test.d.ts.map

package/dist/__tests__/version.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/version.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/__tests__/version.test.js

@@ -0,0 +1,18 @@
+"use strict";
+/**
+ * 基础测试 - 确保测试框架正常工作
+ */
+describe('Basic Tests', () => {
+    test('simple math should work', () => {
+        expect(1 + 1).toBe(2);
+    });
+    test('string concatenation should work', () => {
+        expect('hello' + ' ' + 'world').toBe('hello world');
+    });
+    test('array operations should work', () => {
+        const arr = [1, 2, 3];
+        expect(arr.length).toBe(3);
+        expect(arr[0]).toBe(1);
+    });
+});
+//# sourceMappingURL=version.test.js.map

package/dist/__tests__/version.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.test.js","sourceRoot":"","sources":["../../src/__tests__/version.test.ts"],"names":[],"mappings":";AAAA;;GAEG;AAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,IAAI,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,OAAO,GAAG,GAAG,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACxC,MAAM,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACtB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/core/auth/oauth.d.ts

@@ -0,0 +1,34 @@
+/**
+ * OAuth 2.0 Device Code Flow 实现
+ * 职责：处理 OAuth 网络请求
+ */
+import type { MacToken } from '../types/index.js';
+/**
+ * Device Code Response
+ */
+export interface DeviceCodeData {
+    device_code: string;
+    qrcode_url: string;
+    expires_in?: number;
+    interval?: number;
+}
+/**
+ * Poll options
+ */
+export interface PollOptions {
+    maxAttempts?: number;
+    intervalMs?: number;
+}
+/**
+ * 请求 device code
+ */
+export declare function requestDeviceCode(environment?: string): Promise<DeviceCodeData>;
+/**
+ * 生成授权 URL
+ */
+export declare function generateAuthUrl(qrcodeUrl: string, environment?: string): string;
+/**
+ * 轮询获取 token
+ */
+export declare function pollForToken(deviceCode: string, environment?: string, options?: PollOptions): Promise<MacToken>;
+//# sourceMappingURL=oauth.d.ts.map

package/dist/core/auth/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../src/core/auth/oauth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAElD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,WAAW,GAAE,MAAqB,GAAG,OAAO,CAAC,cAAc,CAAC,CA0CnG;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,GAAE,MAAqB,GAAG,MAAM,CAG7F;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,UAAU,EAAE,MAAM,EAClB,WAAW,GAAE,MAAqB,EAClC,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,QAAQ,CAAC,CA8EnB"}

package/dist/core/auth/oauth.js

@@ -0,0 +1,118 @@
+/**
+ * OAuth 2.0 Device Code Flow 实现
+ * 职责：处理 OAuth 网络请求
+ */
+import { EnvConfig } from '../utils/env.js';
+/**
+ * 请求 device code
+ */
+export async function requestDeviceCode(environment = 'production') {
+    const endpoints = EnvConfig.getEndpoints(environment);
+    const clientId = EnvConfig.clientId;
+    if (!clientId) {
+        throw new Error('❌ 未配置 Client ID\n\n' +
+            '请设置环境变量：TAPTAP_MCP_CLIENT_ID\n\n' +
+            '获取方式：\n' +
+            '1. 登录 TapTap 开放平台: https://developer.taptap.cn\n' +
+            '2. 创建或选择应用\n' +
+            '3. 在「开发者中心 - 应用配置」中获取 Client ID');
+    }
+    const url = `https://${endpoints.authHost}/oauth2/v1/device/code`;
+    const params = new URLSearchParams({
+        client_id: clientId,
+        response_type: 'device_code',
+        scope: 'public_profile'
+    });
+    const response = await fetch(url, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/x-www-form-urlencoded'
+        },
+        body: params
+    });
+    if (!response.ok) {
+        throw new Error(`Failed to get device code: ${response.status} ${response.statusText}`);
+    }
+    const json = await response.json();
+    if (json.success === true && json.data) {
+        return json.data;
+    }
+    throw new Error(`Failed to get device code: ${json.data?.msg || 'Unknown error'}`);
+}
+/**
+ * 生成授权 URL
+ */
+export function generateAuthUrl(qrcodeUrl, environment = 'production') {
+    const endpoints = EnvConfig.getEndpoints(environment);
+    return endpoints.qrcodeBaseUrl + encodeURIComponent(qrcodeUrl);
+}
+/**
+ * 轮询获取 token
+ */
+export async function pollForToken(deviceCode, environment = 'production', options) {
+    const endpoints = EnvConfig.getEndpoints(environment);
+    const clientId = EnvConfig.clientId;
+    if (!clientId) {
+        throw new Error('❌ 未配置 Client ID，请设置环境变量：TAPTAP_MCP_CLIENT_ID');
+    }
+    const url = `https://${endpoints.authHost}/oauth2/v1/token`;
+    const maxAttempts = options?.maxAttempts || 60;
+    const intervalMs = options?.intervalMs || 2000;
+    let attempts = 0;
+    while (attempts < maxAttempts) {
+        attempts++;
+        await new Promise(resolve => setTimeout(resolve, intervalMs));
+        const params = new URLSearchParams({
+            grant_type: 'device_token',
+            client_id: clientId,
+            secret_type: 'hmac-sha-1',
+            code: deviceCode
+        });
+        try {
+            const response = await fetch(url, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/x-www-form-urlencoded'
+                },
+                body: params
+            });
+            const json = await response.json();
+            // 成功获取 token
+            if (json.success === true && json.data) {
+                return {
+                    kid: json.data.kid,
+                    mac_key: json.data.mac_key,
+                    token_type: json.data.token_type || 'mac',
+                    mac_algorithm: json.data.mac_algorithm || 'hmac-sha-1'
+                };
+            }
+            // 检查错误类型
+            const error = json.data?.error;
+            if (error === 'authorization_pending' || error === 'authorization_waiting') {
+                // 继续等待
+                if (attempts % 5 === 0) {
+                    const elapsed = attempts * (intervalMs / 1000);
+                    process.stderr.write(`⏳ 等待授权中... (${elapsed}秒)\n`);
+                }
+                continue;
+            }
+            // 其他错误
+            if (error === 'expired_token') {
+                throw new Error('❌ 授权码已过期，请重新获取授权链接');
+            }
+            if (error === 'access_denied') {
+                throw new Error('❌ 用户拒绝授权');
+            }
+            throw new Error(`❌ 授权失败: ${json.data?.error_description || error || 'Unknown error'}`);
+        }
+        catch (error) {
+            if (error instanceof Error && error.message.includes('❌')) {
+                throw error;
+            }
+            // 网络错误，继续轮询
+            continue;
+        }
+    }
+    throw new Error('⏰ 授权超时（2分钟），请重新获取授权链接');
+}
+//# sourceMappingURL=oauth.js.map

package/dist/core/auth/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/core/auth/oauth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAqB5C;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,cAAsB,YAAY;IACxE,MAAM,SAAS,GAAG,SAAS,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;IAEpC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,qBAAqB;YACrB,kCAAkC;YAClC,SAAS;YACT,kDAAkD;YAClD,cAAc;YACd,iCAAiC,CAClC,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,WAAW,SAAS,CAAC,QAAQ,wBAAwB,CAAC;IAElE,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,SAAS,EAAE,QAAQ;QACnB,aAAa,EAAE,aAAa;QAC5B,KAAK,EAAE,gBAAgB;KACxB,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;SACpD;QACD,IAAI,EAAE,MAAM;KACb,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAS,CAAC;IAE1C,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC,IAAsB,CAAC;IACrC,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC,CAAC;AACrF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,SAAiB,EAAE,cAAsB,YAAY;IACnF,MAAM,SAAS,GAAG,SAAS,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;IACtD,OAAO,SAAS,CAAC,aAAa,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;AACjE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,UAAkB,EAClB,cAAsB,YAAY,EAClC,OAAqB;IAErB,MAAM,SAAS,GAAG,SAAS,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;IAEpC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,GAAG,GAAG,WAAW,SAAS,CAAC,QAAQ,kBAAkB,CAAC;IAC5D,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,EAAE,CAAC;IAC/C,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,IAAI,CAAC;IAE/C,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,OAAO,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC9B,QAAQ,EAAE,CAAC;QACX,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;QAE9D,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,cAAc;YAC1B,SAAS,EAAE,QAAQ;YACnB,WAAW,EAAE,YAAY;YACzB,IAAI,EAAE,UAAU;SACjB,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;iBACpD;gBACD,IAAI,EAAE,MAAM;aACb,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAS,CAAC;YAE1C,aAAa;YACb,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACvC,OAAO;oBACL,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG;oBAClB,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;oBAC1B,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,KAAK;oBACzC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,YAAY;iBAC3C,CAAC;YAChB,CAAC;YAED,SAAS;YACT,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;YAE/B,IAAI,KAAK,KAAK,uBAAuB,IAAI,KAAK,KAAK,uBAAuB,EAAE,CAAC;gBAC3E,OAAO;gBACP,IAAI,QAAQ,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvB,MAAM,OAAO,GAAG,QAAQ,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;oBAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,OAAO,MAAM,CAAC,CAAC;gBACrD,CAAC;gBACD,SAAS;YACX,CAAC;YAED,OAAO;YACP,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACxC,CAAC;YAED,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;YAC9B,CAAC;YAED,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,IAAI,EAAE,iBAAiB,IAAI,KAAK,IAAI,eAAe,EAAE,CAAC,CAAC;QACzF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1D,MAAM,KAAK,CAAC;YACd,CAAC;YACD,YAAY;YACZ,SAAS;QACX,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;AAC3C,CAAC"}

package/dist/core/auth/oauthState.d.ts

@@ -0,0 +1,41 @@
+/**
+ * OAuth 全局状态管理
+ * 用于在 server.ts 和 handlers 之间共享 OAuth 状态
+ */
+/**
+ * OAuth 待完成状态
+ */
+interface PendingOAuthState {
+    deviceCode: string;
+    environment: string;
+}
+/**
+ * 全局 OAuth 状态
+ */
+declare class OAuthStateManager {
+    private pendingState;
+    private authInProgress;
+    /**
+     * 设置待完成的 OAuth 状态
+     */
+    setPendingState(state: PendingOAuthState | null): void;
+    /**
+     * 获取待完成的 OAuth 状态
+     */
+    getPendingState(): PendingOAuthState | null;
+    /**
+     * 清除待完成的 OAuth 状态
+     */
+    clearPendingState(): void;
+    /**
+     * 设置授权进行中标志
+     */
+    setAuthInProgress(inProgress: boolean): void;
+    /**
+     * 检查是否有授权正在进行
+     */
+    isAuthInProgress(): boolean;
+}
+export declare const oauthState: OAuthStateManager;
+export {};
+//# sourceMappingURL=oauthState.d.ts.map

package/dist/core/auth/oauthState.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthState.d.ts","sourceRoot":"","sources":["../../../src/core/auth/oauthState.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,UAAU,iBAAiB;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,cAAM,iBAAiB;IACrB,OAAO,CAAC,YAAY,CAAkC;IACtD,OAAO,CAAC,cAAc,CAAkB;IAExC;;OAEG;IACH,eAAe,CAAC,KAAK,EAAE,iBAAiB,GAAG,IAAI,GAAG,IAAI;IAItD;;OAEG;IACH,eAAe,IAAI,iBAAiB,GAAG,IAAI;IAI3C;;OAEG;IACH,iBAAiB,IAAI,IAAI;IAIzB;;OAEG;IACH,iBAAiB,CAAC,UAAU,EAAE,OAAO,GAAG,IAAI;IAI5C;;OAEG;IACH,gBAAgB,IAAI,OAAO;CAG5B;AAGD,eAAO,MAAM,UAAU,mBAA0B,CAAC"}

package/dist/core/auth/oauthState.js

@@ -0,0 +1,46 @@
+/**
+ * OAuth 全局状态管理
+ * 用于在 server.ts 和 handlers 之间共享 OAuth 状态
+ */
+/**
+ * 全局 OAuth 状态
+ */
+class OAuthStateManager {
+    constructor() {
+        this.pendingState = null;
+        this.authInProgress = false;
+    }
+    /**
+     * 设置待完成的 OAuth 状态
+     */
+    setPendingState(state) {
+        this.pendingState = state;
+    }
+    /**
+     * 获取待完成的 OAuth 状态
+     */
+    getPendingState() {
+        return this.pendingState;
+    }
+    /**
+     * 清除待完成的 OAuth 状态
+     */
+    clearPendingState() {
+        this.pendingState = null;
+    }
+    /**
+     * 设置授权进行中标志
+     */
+    setAuthInProgress(inProgress) {
+        this.authInProgress = inProgress;
+    }
+    /**
+     * 检查是否有授权正在进行
+     */
+    isAuthInProgress() {
+        return this.authInProgress;
+    }
+}
+// 导出单例
+export const oauthState = new OAuthStateManager();
+//# sourceMappingURL=oauthState.js.map

package/dist/core/auth/oauthState.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthState.js","sourceRoot":"","sources":["../../../src/core/auth/oauthState.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAUH;;GAEG;AACH,MAAM,iBAAiB;IAAvB;QACU,iBAAY,GAA6B,IAAI,CAAC;QAC9C,mBAAc,GAAY,KAAK,CAAC;IAoC1C,CAAC;IAlCC;;OAEG;IACH,eAAe,CAAC,KAA+B;QAC7C,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,UAAmB;QACnC,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,OAAO;AACP,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,iBAAiB,EAAE,CAAC"}

package/dist/core/auth/tokenStorage.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Token 持久化管理
+ * 职责：Token 的读取、保存、清除
+ */
+import type { MacToken } from '../types/index.js';
+export interface TokenStorageOptions {
+    environment?: string;
+}
+/**
+ * 获取 token 文件路径
+ */
+export declare function getTokenPath(): string;
+/**
+ * 从环境变量加载 token（优先级最高）
+ */
+export declare function loadTokenFromEnv(): MacToken | null;
+/**
+ * 从本地文件加载 token
+ */
+export declare function loadTokenFromFile(filePath?: string): MacToken | null;
+/**
+ * 加载 token（优先级：环境变量 > 本地文件）
+ */
+export declare function loadToken(filePath?: string): MacToken | null;
+/**
+ * 保存 token 到本地文件
+ */
+export declare function saveToken(token: MacToken, options?: TokenStorageOptions): void;
+/**
+ * 清除本地 token 文件
+ */
+export declare function clearToken(filePath?: string): void;
+//# sourceMappingURL=tokenStorage.d.ts.map

package/dist/core/auth/tokenStorage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenStorage.d.ts","sourceRoot":"","sources":["../../../src/core/auth/tokenStorage.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAElD,MAAM,WAAW,mBAAmB;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAGrC;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,QAAQ,GAAG,IAAI,CAalD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAgBpE;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAiB5D;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAoB9E;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAWlD"}

package/dist/core/auth/tokenStorage.js

@@ -0,0 +1,108 @@
+/**
+ * Token 持久化管理
+ * 职责：Token 的读取、保存、清除
+ */
+import * as path from 'node:path';
+import * as fs from 'node:fs';
+import { EnvConfig } from '../utils/env.js';
+/**
+ * 获取 token 文件路径
+ */
+export function getTokenPath() {
+    const cacheDir = EnvConfig.cacheDir;
+    return path.join(cacheDir, 'global', 'oauth-token.json');
+}
+/**
+ * 从环境变量加载 token（优先级最高）
+ */
+export function loadTokenFromEnv() {
+    const envToken = EnvConfig.macToken;
+    if (envToken) {
+        try {
+            const token = JSON.parse(envToken);
+            if (token.kid && token.mac_key) {
+                return token;
+            }
+        }
+        catch (error) {
+            process.stderr.write('⚠️  Invalid TAPTAP_MCP_MAC_TOKEN format in environment\n');
+        }
+    }
+    return null;
+}
+/**
+ * 从本地文件加载 token
+ */
+export function loadTokenFromFile(filePath) {
+    const tokenPath = filePath || getTokenPath();
+    if (fs.existsSync(tokenPath)) {
+        try {
+            const content = fs.readFileSync(tokenPath, 'utf8');
+            const token = JSON.parse(content);
+            if (token.kid && token.mac_key) {
+                return token;
+            }
+        }
+        catch (error) {
+            process.stderr.write(`⚠️  Invalid token file: ${tokenPath}\n`);
+        }
+    }
+    return null;
+}
+/**
+ * 加载 token（优先级：环境变量 > 本地文件）
+ */
+export function loadToken(filePath) {
+    // 1. Try environment variable
+    const envToken = loadTokenFromEnv();
+    if (envToken) {
+        process.stderr.write('✅ Loaded MAC Token from environment variable\n');
+        return envToken;
+    }
+    // 2. Try local file
+    const fileToken = loadTokenFromFile(filePath);
+    if (fileToken) {
+        const tokenPath = filePath || getTokenPath();
+        process.stderr.write(`✅ Loaded MAC Token from: ${tokenPath}\n`);
+        return fileToken;
+    }
+    return null;
+}
+/**
+ * 保存 token 到本地文件
+ */
+export function saveToken(token, options) {
+    const tokenPath = getTokenPath();
+    try {
+        const dir = path.dirname(tokenPath);
+        if (!fs.existsSync(dir)) {
+            fs.mkdirSync(dir, { recursive: true });
+        }
+        const tokenData = {
+            ...token,
+            saved_at: new Date().toISOString(),
+            environment: options?.environment
+        };
+        fs.writeFileSync(tokenPath, JSON.stringify(tokenData, null, 2), 'utf8');
+        process.stderr.write(`✅ Token saved to: ${tokenPath}\n`);
+    }
+    catch (error) {
+        process.stderr.write(`⚠️  Failed to save token: ${error instanceof Error ? error.message : String(error)}\n`);
+    }
+}
+/**
+ * 清除本地 token 文件
+ */
+export function clearToken(filePath) {
+    const tokenPath = filePath || getTokenPath();
+    if (fs.existsSync(tokenPath)) {
+        try {
+            fs.unlinkSync(tokenPath);
+            process.stderr.write(`✅ Token cleared: ${tokenPath}\n`);
+        }
+        catch (error) {
+            process.stderr.write(`⚠️  Failed to clear token: ${error instanceof Error ? error.message : String(error)}\n`);
+        }
+    }
+}
+//# sourceMappingURL=tokenStorage.js.map

package/dist/core/auth/tokenStorage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenStorage.js","sourceRoot":"","sources":["../../../src/core/auth/tokenStorage.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAO5C;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;IACpC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;IACpC,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAa,CAAC;YAC/C,IAAI,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC/B,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAiB;IACjD,MAAM,SAAS,GAAG,QAAQ,IAAI,YAAY,EAAE,CAAC;IAE7C,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAa,CAAC;YAE9C,IAAI,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC/B,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,SAAS,IAAI,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,QAAiB;IACzC,8BAA8B;IAC9B,MAAM,QAAQ,GAAG,gBAAgB,EAAE,CAAC;IACpC,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACvE,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,oBAAoB;IACpB,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,SAAS,GAAG,QAAQ,IAAI,YAAY,EAAE,CAAC;QAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,SAAS,IAAI,CAAC,CAAC;QAChE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,KAAe,EAAE,OAA6B;IACtE,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IAEjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QAED,MAAM,SAAS,GAAG;YAChB,GAAG,KAAK;YACR,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAClC,WAAW,EAAE,OAAO,EAAE,WAAW;SAClC,CAAC;QAEF,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACxE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,SAAS,IAAI,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,QAAiB;IAC1C,MAAM,SAAS,GAAG,QAAQ,IAAI,YAAY,EAAE,CAAC;IAE7C,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,SAAS,IAAI,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/core/network/httpClient.d.ts

@@ -0,0 +1,90 @@
+/**
+ * HTTP Client for TapTap API Requests
+ * Handles MAC authentication, request signing, headers, and error responses
+ */
+import { MacToken } from '../types/index.js';
+/**
+ * API 配置管理
+ * 管理 API 请求相关的配置和认证信息
+ */
+export declare class ApiConfig {
+    private static instance;
+    macToken: MacToken;
+    readonly clientId: string;
+    readonly signingKey: string;
+    readonly apiBaseUrl: string;
+    readonly environment: 'rnd' | 'production';
+    private constructor();
+    private validateConfig;
+    static getInstance(): ApiConfig;
+    /**
+     * Set MAC Token (called by Device Flow or manual configuration)
+     */
+    setMacToken(token: MacToken): void;
+    isConfigured(): boolean;
+}
+/**
+ * HTTP request options
+ */
+export interface RequestOptions {
+    headers?: Record<string, string>;
+    body?: unknown;
+    params?: Record<string, string>;
+    timeout?: number;
+}
+/**
+ * HTTP response wrapper
+ */
+export interface ApiResponse<T = unknown> {
+    success: boolean;
+    data?: T;
+    message?: string;
+    error?: string;
+}
+/**
+ * Generic HTTP Client for TapTap API
+ */
+export declare class HttpClient {
+    private config;
+    private overrideMacToken?;
+    /**
+     * @param context - Optional handler context (for macToken and projectPath)
+     */
+    constructor(context?: import('../types/index.js').HandlerContext);
+    /**
+     * Make a GET request
+     */
+    get<T = unknown>(path: string, options?: RequestOptions): Promise<T>;
+    /**
+     * Make a POST request
+     */
+    post<T = unknown>(path: string, options?: RequestOptions): Promise<T>;
+    /**
+     * Generic request method with MAC authentication and signature
+     */
+    private request;
+    /**
+     * Generate MAC Authorization header
+     * Format: MAC id="kid", ts="timestamp", nonce="random", mac="signature"
+     */
+    private generateMacAuthorization;
+    /**
+     * Build MAC signature base string
+     */
+    private buildMacSignatureBase;
+    /**
+     * Generate request signature for X-Tap-Sign header
+     * Format: HMAC-SHA256(method + url + headers + body, signing_key)
+     */
+    private generateSignature;
+    /**
+     * Get headers part for signature
+     * Only includes X-Tap-* headers (excluding X-Tap-Sign)
+     */
+    private getHeadersPart;
+    /**
+     * Generate random string
+     */
+    private generateRandomString;
+}
+//# sourceMappingURL=httpClient.d.ts.map

package/dist/core/network/httpClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"httpClient.d.ts","sourceRoot":"","sources":["../../../src/core/network/httpClient.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAI7C;;;GAGG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAY;IAE5B,QAAQ,EAAE,QAAQ,CAAC;IAC1B,SAAgB,QAAQ,EAAE,MAAM,CAAC;IACjC,SAAgB,UAAU,EAAE,MAAM,CAAC;IACnC,SAAgB,UAAU,EAAE,MAAM,CAAC;IACnC,SAAgB,WAAW,EAAE,KAAK,GAAG,YAAY,CAAC;IAElD,OAAO;IA0BP,OAAO,CAAC,cAAc;WAqBR,WAAW,IAAI,SAAS;IAOtC;;OAEG;IACI,WAAW,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI;IAIlC,YAAY,IAAI,OAAO;CAG/B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW,CAAC,CAAC,GAAG,OAAO;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAAY;IAC1B,OAAO,CAAC,gBAAgB,CAAC,CAAW;IAEpC;;OAEG;gBACS,OAAO,CAAC,EAAE,OAAO,mBAAmB,EAAE,cAAc;IAQhE;;OAEG;IACG,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,CAAC,CAAC;IAI9E;;OAEG;IACG,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,CAAC,CAAC;IAI/E;;OAEG;YACW,OAAO;IAqMrB;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAoChC;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAoB7B;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAiCzB;;;OAGG;IACH,OAAO,CAAC,cAAc;IAuBtB;;OAEG;IACH,OAAO,CAAC,oBAAoB;CAQ7B"}