@pharaoh-so/mcp 0.1.3 → 0.1.5

package/package.json

@@ -1,32 +1,33 @@
 {
-  "name": "@pharaoh-so/mcp",
-  "version": "0.1.3",
-  "description": "Stdio-to-SSE proxy for Pharaoh MCP — enables headless environments (VPS, SSH, CI) via device flow auth",
-  "type": "module",
-  "main": "dist/index.js",
-  "bin": {
-    "pharaoh-mcp": "./dist/index.js"
-  },
-  "files": [
-    "dist",
-    "README.md"
-  ],
-  "license": "MIT",
-  "engines": {
-    "node": ">=18"
-  },
-  "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.26.0"
-  },
-  "devDependencies": {
-    "@biomejs/biome": "^2.3.15",
-    "typescript": "^5.9.3",
-    "vitest": "^4.0.18"
-  },
-  "scripts": {
-    "build": "tsc && node -e \"const fs=require('fs'),f='dist/index.js',c=fs.readFileSync(f,'utf8');if(!c.startsWith('#!'))fs.writeFileSync(f,'#!/usr/bin/env node\\n'+c);fs.chmodSync(f,0o755)\"",
-    "typecheck": "tsc --noEmit",
-    "test": "vitest run",
-    "lint": "biome check src/"
-  }
-}
+	"name": "@pharaoh-so/mcp",
+	"version": "0.1.5",
+	"description": "Stdio-to-SSE proxy for Pharaoh MCP — enables headless environments (VPS, SSH, CI) via device flow auth",
+	"type": "module",
+	"main": "dist/index.js",
+	"bin": {
+		"pharaoh-mcp": "./dist/index.js"
+	},
+	"scripts": {
+		"build": "tsc && node -e \"const fs=require('fs'),f='dist/index.js',c=fs.readFileSync(f,'utf8');if(!c.startsWith('#!'))fs.writeFileSync(f,'#!/usr/bin/env node\\n'+c);fs.chmodSync(f,0o755)\"",
+		"typecheck": "tsc --noEmit",
+		"test": "vitest run",
+		"lint": "biome check src/"
+	},
+	"files": [
+		"dist",
+		"inspect-tools.json",
+		"README.md"
+	],
+	"license": "MIT",
+	"engines": {
+		"node": ">=18"
+	},
+	"dependencies": {
+		"@modelcontextprotocol/sdk": "^1.26.0"
+	},
+	"devDependencies": {
+		"@biomejs/biome": "^2.3.15",
+		"typescript": "^5.9.3",
+		"vitest": "^4.0.18"
+	}
+}

package/dist/helpers.d.ts

@@ -1,36 +0,0 @@
-/**
- * Pure helper functions for the mcp-proxy CLI — no side effects on import.
- * Separated from index.ts so tests can import without triggering main().
- */
-import type { TokenResponse } from "./auth.js";
-import type { Credentials } from "./credentials.js";
-/** Write one or more lines to stderr. */
-export declare function printLines(...lines: string[]): void;
-/** Parse CLI arguments. */
-export declare function parseArgs(argv?: string[]): {
-    server: string;
-    logout: boolean;
-};
-export declare function printUsage(): void;
-/**
- * Validate that a server-supplied SSE URL shares the same origin as the configured server.
- * Prevents a compromised auth response from redirecting the Bearer token to an attacker's host.
- * Falls back to `${server}/sse` if the URL is missing, malformed, or cross-origin.
- */
-export declare function resolveSseUrl(tokenSseUrl: string | undefined, server: string): string;
-/** Convert a token response to storable credentials. */
-export declare function tokenToCredentials(token: TokenResponse, sseUrl: string): Credentials;
-/** Format remaining TTL as human-readable string (e.g. "5d 12h"). */
-export declare function formatTtl(expiresAt: string): string;
-/**
- * Print setup instructions for Claude Code. Called in interactive mode
- * after auth completes (or when credentials already exist).
- */
-export declare function printSetupInstructions(): void;
-/** Format a credential identity string (e.g. "alice (my-org)"). */
-export declare function formatIdentity(creds: Credentials): string;
-/**
- * Determine if credentials are valid for proxy use.
- * Returns a diagnostic message if not, null if valid.
- */
-export declare function validateCredentials(creds: Credentials | null): string | null;

package/dist/helpers.js

@@ -1,124 +0,0 @@
-import { isExpired } from "./credentials.js";
-const DEFAULT_SERVER = "https://mcp.pharaoh.so";
-/** Write one or more lines to stderr. */
-export function printLines(...lines) {
-    process.stderr.write(lines.join("\n") + "\n");
-}
-/** Parse CLI arguments. */
-export function parseArgs(argv = process.argv.slice(2)) {
-    let server = DEFAULT_SERVER;
-    let logout = false;
-    for (let i = 0; i < argv.length; i++) {
-        if (argv[i] === "--server" && argv[i + 1]) {
-            server = argv[i + 1];
-            i++;
-        }
-        else if (argv[i] === "--logout") {
-            logout = true;
-        }
-    }
-    // Strip trailing slash
-    server = server.replace(/\/+$/, "");
-    // Reject non-HTTPS servers (allow loopback addresses for local dev)
-    try {
-        const parsed = new URL(server);
-        const isLoopback = parsed.hostname === "localhost" ||
-            parsed.hostname === "127.0.0.1" ||
-            parsed.hostname === "[::1]";
-        if (parsed.protocol !== "https:" && !isLoopback) {
-            printLines(`Pharaoh: --server must use HTTPS (got ${parsed.protocol}//…). Use https:// or http://localhost for local dev.`);
-            process.exit(1);
-        }
-        if (parsed.protocol !== "https:" && isLoopback) {
-            printLines("⚠ Warning: using insecure HTTP over loopback — do not use in production.");
-        }
-    }
-    catch {
-        printLines(`Pharaoh: --server is not a valid URL: ${server}`);
-        process.exit(1);
-    }
-    return { server, logout };
-}
-export function printUsage() {
-    printLines("Usage: pharaoh-mcp [options]", "", "Options:", "  --server <url>  Pharaoh server URL (default: https://mcp.pharaoh.so)", "  --logout        Clear stored credentials and exit", "  --help, -h      Show this help", "", "Add to Claude Code:", "  claude mcp add pharaoh -- npx @pharaoh-so/mcp", "");
-}
-/**
- * Validate that a server-supplied SSE URL shares the same origin as the configured server.
- * Prevents a compromised auth response from redirecting the Bearer token to an attacker's host.
- * Falls back to `${server}/sse` if the URL is missing, malformed, or cross-origin.
- */
-export function resolveSseUrl(tokenSseUrl, server) {
-    const fallback = `${server}/sse`;
-    if (!tokenSseUrl)
-        return fallback;
-    try {
-        const sseOrigin = new URL(tokenSseUrl).origin;
-        const serverOrigin = new URL(server).origin;
-        if (sseOrigin !== serverOrigin) {
-            printLines(`Pharaoh: ignoring cross-origin sse_url (${sseOrigin} ≠ ${serverOrigin})`);
-            return fallback;
-        }
-        return tokenSseUrl;
-    }
-    catch {
-        return fallback;
-    }
-}
-/** Convert a token response to storable credentials. */
-export function tokenToCredentials(token, sseUrl) {
-    return {
-        version: 1,
-        access_token: token.access_token,
-        expires_at: new Date(Date.now() + token.expires_in * 1000).toISOString(),
-        expires_in: token.expires_in,
-        sse_url: sseUrl,
-        github_login: token.github_login ?? null,
-        tenant_name: token.tenant_name ?? null,
-        repos: token.repos ?? [],
-    };
-}
-/** Format remaining TTL as human-readable string (e.g. "5d 12h"). */
-export function formatTtl(expiresAt) {
-    const remainingMs = new Date(expiresAt).getTime() - Date.now();
-    if (remainingMs <= 0)
-        return "expired";
-    const hours = Math.floor(remainingMs / 3_600_000);
-    const days = Math.floor(hours / 24);
-    const remHours = hours % 24;
-    if (days > 0)
-        return `${days}d ${remHours}h`;
-    if (hours > 0)
-        return `${hours}h`;
-    return `${Math.floor(remainingMs / 60_000)}m`;
-}
-/**
- * Print setup instructions for Claude Code. Called in interactive mode
- * after auth completes (or when credentials already exist).
- */
-export function printSetupInstructions() {
-    printLines("", "┌───────────────────────────────────────────────────────┐", "│  Next step: add Pharaoh to Claude Code                │", "│                                                       │", "│  If pharaoh is already registered (e.g. as SSE):      │", "│    claude mcp remove pharaoh                          │", "│                                                       │", "│  Then add as stdio proxy:                             │", "│    claude mcp add pharaoh -- npx @pharaoh-so/mcp     │", "│                                                       │", "│  Verify with:                                         │", "│    claude mcp list                                    │", "└───────────────────────────────────────────────────────┘", "");
-}
-/** Format a credential identity string (e.g. "alice (my-org)"). */
-export function formatIdentity(creds) {
-    return [
-        creds.github_login ?? "unknown",
-        creds.tenant_name ? `(${creds.tenant_name})` : null,
-    ]
-        .filter(Boolean)
-        .join(" ");
-}
-/**
- * Determine if credentials are valid for proxy use.
- * Returns a diagnostic message if not, null if valid.
- */
-export function validateCredentials(creds) {
-    if (!creds || isExpired(creds)) {
-        return [
-            "Pharaoh: no valid credentials — cannot start proxy.",
-            "Run this command first to authenticate:",
-            "  npx @pharaoh-so/mcp",
-            "",
-        ].join("\n");
-    }
-    return null;
-}