@tellzm/register-oauth-client 0.1.0-beta.0

package/README.md

@@ -0,0 +1,44 @@
+# @axon/register-oauth-client
+
+One-shot CLI: register an OAuthClient row on the [Axon](https://tellzm.com) platform so an n8n install (or any other MCP client) can be authorized for a workspace.
+
+## Usage
+
+```bash
+npx @axon/register-oauth-client \
+  --token <workspace-admin-access-token> \
+  --redirect-uri http://localhost:5678/rest/oauth2-credential/callback \
+  --name "My n8n install"
+```
+
+The CLI prints:
+
+```
+client_id = mcp_7acf7a681f5baf20264f89f7cf8134f0
+name      = My n8n install
+```
+
+Paste the `client_id` into your n8n credential.
+
+## Flags
+
+| Flag | Required | Default | Description |
+|---|---|---|---|
+| `--token` | yes | — | Workspace-admin access token (must belong to a user with `OWNER` or `ADMIN` role). |
+| `--redirect-uri` | yes | — | OAuth callback URL. Repeat for multiple. n8n self-hosted: `<host>/rest/oauth2-credential/callback`. |
+| `--name` | no | `n8n-<timestamp>` | Human-readable label. |
+| `--api-base` | no | `https://api.tellzm.com` | API base URL. Override for UAT (`https://api.uat.tellzm.com`). |
+| `--confidential` | no | (off) | Create a confidential client (secret-bearing). Default is public/PKCE. |
+| `-h`, `--help` | no | — | Show help. |
+
+## Troubleshooting
+
+| HTTP status | Cause | Fix |
+|---|---|---|
+| 401 | Token expired or invalid | Get a fresh token from `tellzm.com/profile`. |
+| 403 | User isn't `OWNER`/`ADMIN` in any workspace | Use a token from a user with the right role. |
+| 400 | Validation error (invalid URI, missing field) | Check the printed error body. |
+
+## License
+
+MIT.

package/dist/cli.js

@@ -0,0 +1,120 @@
+#!/usr/bin/env node
+"use strict";
+// One-shot CLI for registering an OAuthClient row on the Axon platform.
+// Full behavior + tests land in T024–T026. This skeleton parses args and
+// validates them so the binary is executable from day one.
+function parseArgs(argv) {
+    const args = {
+        redirectUri: [],
+        apiBase: "https://api.tellzm.com",
+        isPublic: true,
+        help: false,
+    };
+    for (let i = 0; i < argv.length; i++) {
+        const a = argv[i];
+        switch (a) {
+            case "--token":
+                args.token = argv[++i];
+                break;
+            case "--redirect-uri":
+                args.redirectUri.push(argv[++i]);
+                break;
+            case "--name":
+                args.name = argv[++i];
+                break;
+            case "--api-base":
+                args.apiBase = argv[++i];
+                break;
+            case "--confidential":
+                args.isPublic = false;
+                break;
+            case "-h":
+            case "--help":
+                args.help = true;
+                break;
+            default:
+                if (a.startsWith("--")) {
+                    process.stderr.write(`Unknown flag: ${a}\n`);
+                    process.exit(2);
+                }
+        }
+    }
+    return args;
+}
+function printHelp() {
+    process.stdout.write(`
+@axon/register-oauth-client — register an OAuthClient on the Axon platform.
+
+USAGE
+  npx @axon/register-oauth-client --token <admin-token> --redirect-uri <url> [options]
+
+REQUIRED
+  --token <token>            Workspace-admin access token (OWNER or ADMIN role).
+  --redirect-uri <url>       n8n callback URL, e.g. http://localhost:5678/rest/oauth2-credential/callback.
+                             May be repeated for multiple URIs.
+
+OPTIONAL
+  --name <label>             Human-readable label. Defaults to "n8n-<timestamp>".
+  --api-base <url>           API base URL. Defaults to https://api.tellzm.com.
+  --confidential             Create a confidential (secret-bearing) client. Default is PKCE/public.
+  -h, --help                 Show this help.
+
+EXAMPLE
+  npx @axon/register-oauth-client \\
+    --token "..." \\
+    --redirect-uri http://localhost:5678/rest/oauth2-credential/callback \\
+    --name "My local n8n"
+`);
+}
+async function main() {
+    const args = parseArgs(process.argv.slice(2));
+    if (args.help) {
+        printHelp();
+        return;
+    }
+    if (!args.token) {
+        process.stderr.write("Error: --token is required.\n");
+        process.exit(2);
+    }
+    if (args.redirectUri.length === 0) {
+        process.stderr.write("Error: at least one --redirect-uri is required.\n");
+        process.exit(2);
+    }
+    const url = `${args.apiBase.replace(/\/$/, "")}/admin/oauth-clients`;
+    const body = {
+        name: args.name ?? `n8n-${new Date().toISOString()}`,
+        redirectUris: args.redirectUri,
+        isPublic: args.isPublic,
+    };
+    let res;
+    try {
+        res = await fetch(url, {
+            method: "POST",
+            headers: {
+                "content-type": "application/json",
+                authorization: `Bearer ${args.token}`,
+            },
+            body: JSON.stringify(body),
+        });
+    }
+    catch (err) {
+        process.stderr.write(`Network error: ${err instanceof Error ? err.message : String(err)}\n`);
+        process.exit(1);
+    }
+    const text = await res.text();
+    if (!res.ok) {
+        process.stderr.write(`HTTP ${res.status}: ${text}\n`);
+        process.exit(1);
+    }
+    const data = JSON.parse(text);
+    process.stdout.write(`client_id = ${data.clientId}\n`);
+    if (data.clientSecret) {
+        process.stdout.write(`client_secret = ${data.clientSecret}\n`);
+        process.stdout.write("Save this secret — it will not be shown again.\n");
+    }
+    process.stdout.write(`name = ${data.name}\n`);
+}
+main().catch((err) => {
+    process.stderr.write(`Unexpected error: ${err instanceof Error ? err.message : String(err)}\n`);
+    process.exit(1);
+});

package/package.json

@@ -0,0 +1,31 @@
+{
+  "name": "@tellzm/register-oauth-client",
+  "version": "0.1.0-beta.0",
+  "description": "One-shot CLI: register an OAuthClient row on the Axon platform so an n8n install (or other MCP client) can be authorized for a workspace.",
+  "keywords": ["axon", "tellzm", "oauth", "cli", "n8n"],
+  "license": "MIT",
+  "homepage": "https://docs.tellzm.com/n8n",
+  "author": { "name": "Axon", "url": "https://tellzm.com" },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/syncaty/tellzm.git",
+    "directory": "packages/register-oauth-client"
+  },
+  "bin": {
+    "register-oauth-client": "dist/cli.js"
+  },
+  "main": "dist/cli.js",
+  "files": ["dist", "README.md"],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "prepublishOnly": "npm run build"
+  },
+  "devDependencies": {
+    "@types/node": "^20",
+    "typescript": "^5",
+    "vitest": "^1"
+  }
+}