@tacitai/mcp-server 0.5.0 → 0.6.0

package/dist/setup.js

@@ -33,6 +33,7 @@ import * as path from 'path';
 import * as os from 'os';
 import * as http from 'http';
 import * as crypto from 'crypto';
+import * as readline from 'readline';
 import { execFile } from 'child_process';
 import { TacitClient, TacitApiError } from './client.js';
 function parseArgs(argv) {
@@ -314,6 +315,81 @@ async function deviceAuthFlow(apiUrl) {
         });
     });
 }
+function prompt(question, hidden = false) {
+    return new Promise((resolve) => {
+        const rl = readline.createInterface({ input: process.stdin, output: process.stderr });
+        if (hidden && process.stdin.isTTY) {
+            process.stderr.write(question);
+            const stdin = process.stdin;
+            stdin.setRawMode(true);
+            stdin.resume();
+            stdin.setEncoding('utf-8');
+            let input = '';
+            const onData = (ch) => {
+                if (ch === '\n' || ch === '\r' || ch === '\u0004') {
+                    stdin.setRawMode(false);
+                    stdin.pause();
+                    stdin.removeListener('data', onData);
+                    rl.close();
+                    process.stderr.write('\n');
+                    resolve(input);
+                }
+                else if (ch === '\u007F' || ch === '\b') {
+                    if (input.length > 0)
+                        input = input.slice(0, -1);
+                }
+                else if (ch === '\u0003') {
+                    process.exit(1);
+                }
+                else {
+                    input += ch;
+                }
+            };
+            stdin.on('data', onData);
+        }
+        else {
+            rl.question(question, (answer) => {
+                rl.close();
+                resolve(answer.trim());
+            });
+        }
+    });
+}
+async function loginFlow(apiUrl) {
+    process.stderr.write('\n  Log in with your TACIT credentials.\n\n');
+    const email = await prompt('  Email: ');
+    const pin = await prompt('  PIN:   ', true);
+    if (!email || !pin) {
+        process.stderr.write('Error: email and PIN are required.\n');
+        process.exit(1);
+    }
+    const loginUrl = apiUrl.endsWith('/api/v1')
+        ? `${apiUrl}/auth/login`
+        : `${apiUrl}/api/v1/auth/login`;
+    const res = await fetch(loginUrl, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ email, pin }),
+    });
+    if (!res.ok) {
+        const body = await res.text().catch(() => '');
+        if (res.status === 401) {
+            process.stderr.write('\n  Login failed — check your email and PIN.\n');
+        }
+        else {
+            process.stderr.write(`\n  Login failed (${res.status}): ${body}\n`);
+        }
+        process.exit(1);
+    }
+    const data = await res.json();
+    const token = typeof data['session_token'] === 'string' ? data['session_token'] : '';
+    const workspaceName = typeof data['workspace_name'] === 'string' ? data['workspace_name'] : '';
+    if (!token) {
+        process.stderr.write('Error: login returned no session token.\n');
+        process.exit(1);
+    }
+    return { token, workspaceName };
+}
 // ─── Smoke synthesis ──────────────────────────────────────────────────────────
 const SMOKE_QUERY = 'What is in this knowledge base?';
 async function runSmoke(apiUrl, token) {
@@ -348,15 +424,8 @@ async function runSmoke(apiUrl, token) {
 // ─── Main export ──────────────────────────────────────────────────────────────
 export async function setup(argv) {
     const opts = parseArgs(argv);
-    // Resolve api-url: flag > env.
-    const apiUrl = opts.apiUrl ?? process.env['TACIT_API_URL'] ?? null;
-    if (!apiUrl) {
-        process.stderr.write('Error: no API URL configured.\n' +
-            'Provide --api-url <url> or set TACIT_API_URL environment variable.\n' +
-            'Example: npx @tacitai/mcp-server setup --api-url https://tacit-beta-prod.fly.dev --token <your-token>\n' +
-            '\nGet your token from: https://beta.tacitai.app → Settings → Bearer token\n');
-        process.exit(1);
-    }
+    // Resolve api-url: flag > env > default.
+    const apiUrl = opts.apiUrl ?? process.env['TACIT_API_URL'] ?? 'https://beta.tacitai.app';
     // Determine profile and token.
     let profile = opts.profile;
     let token = opts.token;
@@ -365,23 +434,27 @@ export async function setup(argv) {
     const envVarNameForProfile = profileToEnvVar(profile);
     const envToken = process.env[envVarNameForProfile] ?? process.env['TACIT_TOKEN'] ?? null;
     if (!token && !envToken && !opts.dryRun) {
-        // Neither --token nor env set and not a dry-run → run automated device-auth flow.
-        let deviceResult;
+        // Neither --token nor env set and not a dry-run → authenticate interactively.
+        // Try device-auth (browser flow) first; fall back to login prompt.
+        let authenticated = false;
         try {
-            deviceResult = await deviceAuthFlow(apiUrl);
+            const deviceResult = await deviceAuthFlow(apiUrl);
+            token = deviceResult.token;
+            expiresAt = deviceResult.expiresAt;
+            if (!opts.profileExplicit && deviceResult.workspaceName) {
+                profile = workspaceNameToProfile(deviceResult.workspaceName);
+            }
+            authenticated = true;
         }
-        catch (err) {
-            const msg = err instanceof Error ? err.message : String(err);
-            process.stderr.write(`Error during device authentication: ${msg}\n`);
-            process.exit(1);
-            return; // unreachable; satisfies TypeScript
+        catch {
+            // Device-auth not available — fall back to login prompt.
         }
-        // Token from device flow — use in memory only (NEVER log/write).
-        token = deviceResult.token;
-        expiresAt = deviceResult.expiresAt;
-        // AC-12: derive profile from workspace_name unless --profile was explicit.
-        if (!opts.profileExplicit && deviceResult.workspaceName) {
-            profile = workspaceNameToProfile(deviceResult.workspaceName);
+        if (!authenticated) {
+            const loginResult = await loginFlow(apiUrl);
+            token = loginResult.token;
+            if (!opts.profileExplicit && loginResult.workspaceName) {
+                profile = workspaceNameToProfile(loginResult.workspaceName);
+            }
         }
     }
     // Final env-var name derived from (possibly updated) profile.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tacitai/mcp-server",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "stdio MCP server wrapping Tacit /api/v1 REST/SSE API",
   "license": "MIT",
   "repository": {