@unclick/mcp-server 0.2.3 → 0.2.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (324) hide show
  1. package/README.md +139 -153
  2. package/dist/airtable-tool.d.ts +2 -0
  3. package/dist/airtable-tool.d.ts.map +1 -0
  4. package/dist/airtable-tool.js +154 -0
  5. package/dist/airtable-tool.js.map +1 -0
  6. package/dist/algolia-tool.d.ts +5 -0
  7. package/dist/algolia-tool.d.ts.map +1 -0
  8. package/dist/algolia-tool.js +121 -0
  9. package/dist/algolia-tool.js.map +1 -0
  10. package/dist/anthropic-tool.d.ts +3 -0
  11. package/dist/anthropic-tool.d.ts.map +1 -0
  12. package/dist/anthropic-tool.js +123 -0
  13. package/dist/anthropic-tool.js.map +1 -0
  14. package/dist/asana-tool.d.ts +8 -0
  15. package/dist/asana-tool.d.ts.map +1 -0
  16. package/dist/asana-tool.js +218 -0
  17. package/dist/asana-tool.js.map +1 -0
  18. package/dist/assemblyai-tool.d.ts +7 -0
  19. package/dist/assemblyai-tool.d.ts.map +1 -0
  20. package/dist/assemblyai-tool.js +127 -0
  21. package/dist/assemblyai-tool.js.map +1 -0
  22. package/dist/calendly-tool.d.ts +6 -0
  23. package/dist/calendly-tool.d.ts.map +1 -0
  24. package/dist/calendly-tool.js +182 -0
  25. package/dist/calendly-tool.js.map +1 -0
  26. package/dist/circleci-tool.d.ts +7 -0
  27. package/dist/circleci-tool.d.ts.map +1 -0
  28. package/dist/circleci-tool.js +133 -0
  29. package/dist/circleci-tool.js.map +1 -0
  30. package/dist/clickup-tool.d.ts +2 -0
  31. package/dist/clickup-tool.d.ts.map +1 -0
  32. package/dist/clickup-tool.js +153 -0
  33. package/dist/clickup-tool.js.map +1 -0
  34. package/dist/cohere-tool.d.ts +7 -0
  35. package/dist/cohere-tool.d.ts.map +1 -0
  36. package/dist/cohere-tool.js +225 -0
  37. package/dist/cohere-tool.js.map +1 -0
  38. package/dist/connectors/figma.d.ts +3 -0
  39. package/dist/connectors/figma.d.ts.map +1 -0
  40. package/dist/connectors/figma.js +18 -0
  41. package/dist/connectors/figma.js.map +1 -0
  42. package/dist/connectors/index.d.ts +3 -1
  43. package/dist/connectors/index.d.ts.map +1 -1
  44. package/dist/connectors/index.js +5 -1
  45. package/dist/connectors/index.js.map +1 -1
  46. package/dist/connectors/line.d.ts +3 -0
  47. package/dist/connectors/line.d.ts.map +1 -0
  48. package/dist/connectors/line.js +18 -0
  49. package/dist/connectors/line.js.map +1 -0
  50. package/dist/convertkit-tool.d.ts +7 -0
  51. package/dist/convertkit-tool.d.ts.map +1 -0
  52. package/dist/convertkit-tool.js +213 -0
  53. package/dist/convertkit-tool.js.map +1 -0
  54. package/dist/datadog-tool.d.ts +7 -0
  55. package/dist/datadog-tool.d.ts.map +1 -0
  56. package/dist/datadog-tool.js +121 -0
  57. package/dist/datadog-tool.js.map +1 -0
  58. package/dist/deepl-tool.d.ts +5 -0
  59. package/dist/deepl-tool.d.ts.map +1 -0
  60. package/dist/deepl-tool.js +137 -0
  61. package/dist/deepl-tool.js.map +1 -0
  62. package/dist/ebay-tool.d.ts +5 -0
  63. package/dist/ebay-tool.d.ts.map +1 -0
  64. package/dist/ebay-tool.js +179 -0
  65. package/dist/ebay-tool.js.map +1 -0
  66. package/dist/elevenlabs-tool.d.ts +6 -0
  67. package/dist/elevenlabs-tool.d.ts.map +1 -0
  68. package/dist/elevenlabs-tool.js +166 -0
  69. package/dist/elevenlabs-tool.js.map +1 -0
  70. package/dist/etsy-tool.d.ts +6 -0
  71. package/dist/etsy-tool.d.ts.map +1 -0
  72. package/dist/etsy-tool.js +125 -0
  73. package/dist/etsy-tool.js.map +1 -0
  74. package/dist/exchangerate-tool.d.ts +5 -0
  75. package/dist/exchangerate-tool.d.ts.map +1 -0
  76. package/dist/exchangerate-tool.js +139 -0
  77. package/dist/exchangerate-tool.js.map +1 -0
  78. package/dist/figma-tool.d.ts +8 -0
  79. package/dist/figma-tool.d.ts.map +1 -0
  80. package/dist/figma-tool.js +231 -0
  81. package/dist/figma-tool.js.map +1 -0
  82. package/dist/flyio-tool.d.ts +6 -0
  83. package/dist/flyio-tool.d.ts.map +1 -0
  84. package/dist/flyio-tool.js +158 -0
  85. package/dist/flyio-tool.js.map +1 -0
  86. package/dist/gdelt-tool.d.ts +5 -0
  87. package/dist/gdelt-tool.d.ts.map +1 -0
  88. package/dist/gdelt-tool.js +177 -0
  89. package/dist/gdelt-tool.js.map +1 -0
  90. package/dist/github-tool.d.ts +2 -0
  91. package/dist/github-tool.d.ts.map +1 -0
  92. package/dist/github-tool.js +165 -0
  93. package/dist/github-tool.js.map +1 -0
  94. package/dist/gitlab-tool.d.ts +2 -0
  95. package/dist/gitlab-tool.d.ts.map +1 -0
  96. package/dist/gitlab-tool.js +127 -0
  97. package/dist/gitlab-tool.js.map +1 -0
  98. package/dist/groq-tool.d.ts +3 -0
  99. package/dist/groq-tool.d.ts.map +1 -0
  100. package/dist/groq-tool.js +109 -0
  101. package/dist/groq-tool.js.map +1 -0
  102. package/dist/gumroad-tool.d.ts +6 -0
  103. package/dist/gumroad-tool.d.ts.map +1 -0
  104. package/dist/gumroad-tool.js +90 -0
  105. package/dist/gumroad-tool.js.map +1 -0
  106. package/dist/heygen-tool.d.ts +5 -0
  107. package/dist/heygen-tool.d.ts.map +1 -0
  108. package/dist/heygen-tool.js +134 -0
  109. package/dist/heygen-tool.js.map +1 -0
  110. package/dist/higgsfield-tool.d.ts +5 -0
  111. package/dist/higgsfield-tool.d.ts.map +1 -0
  112. package/dist/higgsfield-tool.js +120 -0
  113. package/dist/higgsfield-tool.js.map +1 -0
  114. package/dist/igdb-tool.d.ts +6 -0
  115. package/dist/igdb-tool.d.ts.map +1 -0
  116. package/dist/igdb-tool.js +140 -0
  117. package/dist/igdb-tool.js.map +1 -0
  118. package/dist/keychain-crypto.d.ts +24 -0
  119. package/dist/keychain-crypto.d.ts.map +1 -0
  120. package/dist/keychain-crypto.js +60 -0
  121. package/dist/keychain-crypto.js.map +1 -0
  122. package/dist/keychain-secure-input.d.ts +17 -0
  123. package/dist/keychain-secure-input.d.ts.map +1 -0
  124. package/dist/keychain-secure-input.js +229 -0
  125. package/dist/keychain-secure-input.js.map +1 -0
  126. package/dist/keychain-tool.d.ts +3 -0
  127. package/dist/keychain-tool.d.ts.map +1 -0
  128. package/dist/keychain-tool.js +516 -0
  129. package/dist/keychain-tool.js.map +1 -0
  130. package/dist/kling-tool.d.ts +3 -0
  131. package/dist/kling-tool.d.ts.map +1 -0
  132. package/dist/kling-tool.js +102 -0
  133. package/dist/kling-tool.js.map +1 -0
  134. package/dist/lemonsqueezy-tool.d.ts +7 -0
  135. package/dist/lemonsqueezy-tool.d.ts.map +1 -0
  136. package/dist/lemonsqueezy-tool.js +220 -0
  137. package/dist/lemonsqueezy-tool.js.map +1 -0
  138. package/dist/line-tool.d.ts +7 -0
  139. package/dist/line-tool.d.ts.map +1 -0
  140. package/dist/line-tool.js +188 -0
  141. package/dist/line-tool.js.map +1 -0
  142. package/dist/linear-tool.d.ts +2 -0
  143. package/dist/linear-tool.d.ts.map +1 -0
  144. package/dist/linear-tool.js +186 -0
  145. package/dist/linear-tool.js.map +1 -0
  146. package/dist/local-catalog-handlers.d.ts +3 -0
  147. package/dist/local-catalog-handlers.d.ts.map +1 -0
  148. package/dist/local-catalog-handlers.js +1254 -0
  149. package/dist/local-catalog-handlers.js.map +1 -0
  150. package/dist/mailchimp-tool.d.ts +8 -0
  151. package/dist/mailchimp-tool.d.ts.map +1 -0
  152. package/dist/mailchimp-tool.js +138 -0
  153. package/dist/mailchimp-tool.js.map +1 -0
  154. package/dist/mapbox-tool.d.ts +6 -0
  155. package/dist/mapbox-tool.d.ts.map +1 -0
  156. package/dist/mapbox-tool.js +106 -0
  157. package/dist/mapbox-tool.js.map +1 -0
  158. package/dist/mistral-tool.d.ts +4 -0
  159. package/dist/mistral-tool.d.ts.map +1 -0
  160. package/dist/mistral-tool.js +145 -0
  161. package/dist/mistral-tool.js.map +1 -0
  162. package/dist/mixpanel-tool.d.ts +6 -0
  163. package/dist/mixpanel-tool.d.ts.map +1 -0
  164. package/dist/mixpanel-tool.js +162 -0
  165. package/dist/mixpanel-tool.js.map +1 -0
  166. package/dist/monday-tool.d.ts +7 -0
  167. package/dist/monday-tool.d.ts.map +1 -0
  168. package/dist/monday-tool.js +206 -0
  169. package/dist/monday-tool.js.map +1 -0
  170. package/dist/neon-tool.d.ts +7 -0
  171. package/dist/neon-tool.d.ts.map +1 -0
  172. package/dist/neon-tool.js +156 -0
  173. package/dist/neon-tool.js.map +1 -0
  174. package/dist/openai-tool.d.ts +6 -0
  175. package/dist/openai-tool.d.ts.map +1 -0
  176. package/dist/openai-tool.js +227 -0
  177. package/dist/openai-tool.js.map +1 -0
  178. package/dist/pagerduty-tool.d.ts +8 -0
  179. package/dist/pagerduty-tool.d.ts.map +1 -0
  180. package/dist/pagerduty-tool.js +185 -0
  181. package/dist/pagerduty-tool.js.map +1 -0
  182. package/dist/paypal-tool.d.ts +3 -0
  183. package/dist/paypal-tool.d.ts.map +1 -0
  184. package/dist/paypal-tool.js +157 -0
  185. package/dist/paypal-tool.js.map +1 -0
  186. package/dist/perplexity-tool.d.ts +2 -0
  187. package/dist/perplexity-tool.d.ts.map +1 -0
  188. package/dist/perplexity-tool.js +93 -0
  189. package/dist/perplexity-tool.js.map +1 -0
  190. package/dist/pika-tool.d.ts +4 -0
  191. package/dist/pika-tool.d.ts.map +1 -0
  192. package/dist/pika-tool.js +102 -0
  193. package/dist/pika-tool.js.map +1 -0
  194. package/dist/pinecone-tool.d.ts +6 -0
  195. package/dist/pinecone-tool.d.ts.map +1 -0
  196. package/dist/pinecone-tool.js +148 -0
  197. package/dist/pinecone-tool.js.map +1 -0
  198. package/dist/pinterest-tool.d.ts +7 -0
  199. package/dist/pinterest-tool.d.ts.map +1 -0
  200. package/dist/pinterest-tool.js +219 -0
  201. package/dist/pinterest-tool.js.map +1 -0
  202. package/dist/plaid-tool.d.ts +6 -0
  203. package/dist/plaid-tool.d.ts.map +1 -0
  204. package/dist/plaid-tool.js +149 -0
  205. package/dist/plaid-tool.js.map +1 -0
  206. package/dist/postman-tool.d.ts +2 -0
  207. package/dist/postman-tool.d.ts.map +1 -0
  208. package/dist/postman-tool.js +92 -0
  209. package/dist/postman-tool.js.map +1 -0
  210. package/dist/postmark-tool.d.ts +7 -0
  211. package/dist/postmark-tool.d.ts.map +1 -0
  212. package/dist/postmark-tool.js +148 -0
  213. package/dist/postmark-tool.js.map +1 -0
  214. package/dist/pushover-tool.d.ts +6 -0
  215. package/dist/pushover-tool.d.ts.map +1 -0
  216. package/dist/pushover-tool.js +146 -0
  217. package/dist/pushover-tool.js.map +1 -0
  218. package/dist/qc-tool.d.ts +4 -0
  219. package/dist/qc-tool.d.ts.map +1 -0
  220. package/dist/qc-tool.js +415 -0
  221. package/dist/qc-tool.js.map +1 -0
  222. package/dist/quickbooks-tool.d.ts +5 -0
  223. package/dist/quickbooks-tool.d.ts.map +1 -0
  224. package/dist/quickbooks-tool.js +160 -0
  225. package/dist/quickbooks-tool.js.map +1 -0
  226. package/dist/render-tool.d.ts +7 -0
  227. package/dist/render-tool.d.ts.map +1 -0
  228. package/dist/render-tool.js +158 -0
  229. package/dist/render-tool.js.map +1 -0
  230. package/dist/replicate-tool.d.ts +7 -0
  231. package/dist/replicate-tool.d.ts.map +1 -0
  232. package/dist/replicate-tool.js +172 -0
  233. package/dist/replicate-tool.js.map +1 -0
  234. package/dist/runway-tool.d.ts +4 -0
  235. package/dist/runway-tool.d.ts.map +1 -0
  236. package/dist/runway-tool.js +110 -0
  237. package/dist/runway-tool.js.map +1 -0
  238. package/dist/segment-tool.d.ts +6 -0
  239. package/dist/segment-tool.d.ts.map +1 -0
  240. package/dist/segment-tool.js +129 -0
  241. package/dist/segment-tool.js.map +1 -0
  242. package/dist/sendgrid-tool.d.ts +7 -0
  243. package/dist/sendgrid-tool.d.ts.map +1 -0
  244. package/dist/sendgrid-tool.js +124 -0
  245. package/dist/sendgrid-tool.js.map +1 -0
  246. package/dist/sentry-tool.d.ts +2 -0
  247. package/dist/sentry-tool.d.ts.map +1 -0
  248. package/dist/sentry-tool.js +123 -0
  249. package/dist/sentry-tool.js.map +1 -0
  250. package/dist/server.d.ts.map +1 -1
  251. package/dist/server.js +10 -0
  252. package/dist/server.js.map +1 -1
  253. package/dist/speedrun-tool.d.ts +6 -0
  254. package/dist/speedrun-tool.d.ts.map +1 -0
  255. package/dist/speedrun-tool.js +192 -0
  256. package/dist/speedrun-tool.js.map +1 -0
  257. package/dist/spotify-tool.d.ts +8 -0
  258. package/dist/spotify-tool.d.ts.map +1 -0
  259. package/dist/spotify-tool.js +274 -0
  260. package/dist/spotify-tool.js.map +1 -0
  261. package/dist/square-tool.d.ts +5 -0
  262. package/dist/square-tool.d.ts.map +1 -0
  263. package/dist/square-tool.js +133 -0
  264. package/dist/square-tool.js.map +1 -0
  265. package/dist/stability-tool.d.ts +5 -0
  266. package/dist/stability-tool.d.ts.map +1 -0
  267. package/dist/stability-tool.js +190 -0
  268. package/dist/stability-tool.js.map +1 -0
  269. package/dist/steam-tool.d.ts +6 -0
  270. package/dist/steam-tool.d.ts.map +1 -0
  271. package/dist/steam-tool.js +222 -0
  272. package/dist/steam-tool.js.map +1 -0
  273. package/dist/stripe-tool.d.ts +7 -0
  274. package/dist/stripe-tool.d.ts.map +1 -0
  275. package/dist/stripe-tool.js +181 -0
  276. package/dist/stripe-tool.js.map +1 -0
  277. package/dist/tiktok-tool.d.ts +4 -0
  278. package/dist/tiktok-tool.d.ts.map +1 -0
  279. package/dist/tiktok-tool.js +129 -0
  280. package/dist/tiktok-tool.js.map +1 -0
  281. package/dist/togetherai-tool.d.ts +5 -0
  282. package/dist/togetherai-tool.d.ts.map +1 -0
  283. package/dist/togetherai-tool.js +129 -0
  284. package/dist/togetherai-tool.js.map +1 -0
  285. package/dist/toilets-tool.js +2 -2
  286. package/dist/tool-wiring.d.ts +7982 -18
  287. package/dist/tool-wiring.d.ts.map +1 -1
  288. package/dist/tool-wiring.js +5084 -18
  289. package/dist/tool-wiring.js.map +1 -1
  290. package/dist/trello-tool.d.ts +2 -0
  291. package/dist/trello-tool.d.ts.map +1 -0
  292. package/dist/trello-tool.js +166 -0
  293. package/dist/trello-tool.js.map +1 -0
  294. package/dist/turso-tool.d.ts +6 -0
  295. package/dist/turso-tool.d.ts.map +1 -0
  296. package/dist/turso-tool.js +158 -0
  297. package/dist/turso-tool.js.map +1 -0
  298. package/dist/twilio-tool.d.ts +8 -0
  299. package/dist/twilio-tool.d.ts.map +1 -0
  300. package/dist/twilio-tool.js +243 -0
  301. package/dist/twilio-tool.js.map +1 -0
  302. package/dist/upstash-tool.d.ts +8 -0
  303. package/dist/upstash-tool.d.ts.map +1 -0
  304. package/dist/upstash-tool.js +191 -0
  305. package/dist/upstash-tool.js.map +1 -0
  306. package/dist/whatsapp-tool.d.ts +6 -0
  307. package/dist/whatsapp-tool.d.ts.map +1 -0
  308. package/dist/whatsapp-tool.js +200 -0
  309. package/dist/whatsapp-tool.js.map +1 -0
  310. package/dist/woocommerce-tool.d.ts +4 -0
  311. package/dist/woocommerce-tool.d.ts.map +1 -0
  312. package/dist/woocommerce-tool.js +140 -0
  313. package/dist/woocommerce-tool.js.map +1 -0
  314. package/dist/youtube-tool.d.ts +7 -0
  315. package/dist/youtube-tool.d.ts.map +1 -0
  316. package/dist/youtube-tool.js +196 -0
  317. package/dist/youtube-tool.js.map +1 -0
  318. package/package.json +1 -1
  319. package/server.json +37 -37
  320. package/LICENSE +0 -216
  321. package/dist/cloudflare-worker.d.ts +0 -12
  322. package/dist/cloudflare-worker.d.ts.map +0 -1
  323. package/dist/cloudflare-worker.js +0 -50
  324. package/dist/cloudflare-worker.js.map +0 -1
package/dist/keychain-secure-input.js ADDED
@@ -0,0 +1,229 @@
1
+ // ─── UnClick Keychain Secure Input ───────────────────────────────────────────
2
+ // Two-tier credential collection:
3
+ // Tier 1: Check environment variables (common patterns per platform)
4
+ // Tier 2: Spin up a temporary localhost HTTP server with a masked input page
5
+ //
6
+ // IMPORTANT: Credentials never appear in any log, response, or chat message.
7
+ // The localhost server binds to 127.0.0.1 only. Nonce validation prevents replay attacks.
8
+ import { createServer } from "http";
9
+ import { randomBytes } from "crypto";
10
+ // ─── Module-level state ───────────────────────────────────────────────────────
11
+ // These Maps persist across MCP tool calls within the same server process.
12
+ // resolvedCredentials: platform -> credential (submitted by user, ready to pick up)
13
+ // activeServers: platform -> server info (waiting for user to open browser and submit)
14
+ const resolvedCredentials = new Map();
15
+ const activeServers = new Map();
16
+ // ─── Tier 1: Environment variable detection ───────────────────────────────────
17
+ const ENV_MAPPINGS = {
18
+ github: ["GITHUB_TOKEN", "GITHUB_PAT", "GITHUB_API_KEY", "GH_TOKEN"],
19
+ supabase: ["SUPABASE_KEY", "SUPABASE_SERVICE_ROLE_KEY", "SUPABASE_ANON_KEY"],
20
+ vercel: ["VERCEL_TOKEN", "VERCEL_API_TOKEN"],
21
+ stripe: ["STRIPE_SECRET_KEY", "STRIPE_API_KEY", "STRIPE_KEY"],
22
+ openai: ["OPENAI_API_KEY", "OPENAI_KEY"],
23
+ anthropic: ["ANTHROPIC_API_KEY", "ANTHROPIC_KEY"],
24
+ cloudflare: ["CLOUDFLARE_API_TOKEN", "CF_API_TOKEN", "CLOUDFLARE_TOKEN"],
25
+ slack: ["SLACK_BOT_TOKEN", "SLACK_TOKEN", "SLACK_API_TOKEN"],
26
+ discord: ["DISCORD_BOT_TOKEN", "DISCORD_TOKEN"],
27
+ notion: ["NOTION_API_KEY", "NOTION_TOKEN", "NOTION_INTEGRATION_TOKEN"],
28
+ airtable: ["AIRTABLE_API_KEY", "AIRTABLE_PAT"],
29
+ linear: ["LINEAR_API_KEY", "LINEAR_TOKEN"],
30
+ twilio: ["TWILIO_AUTH_TOKEN"],
31
+ sendgrid: ["SENDGRID_API_KEY"],
32
+ mailchimp: ["MAILCHIMP_API_KEY"],
33
+ datadog: ["DD_API_KEY", "DATADOG_API_KEY"],
34
+ pinecone: ["PINECONE_API_KEY"],
35
+ deepl: ["DEEPL_AUTH_KEY", "DEEPL_API_KEY"],
36
+ groq: ["GROQ_API_KEY"],
37
+ mistral: ["MISTRAL_API_KEY"],
38
+ cohere: ["COHERE_API_KEY", "CO_API_KEY"],
39
+ perplexity: ["PERPLEXITY_API_KEY", "PPLX_API_KEY"],
40
+ replicate: ["REPLICATE_API_TOKEN"],
41
+ resend: ["RESEND_API_KEY"],
42
+ postmark: ["POSTMARK_SERVER_TOKEN"],
43
+ sentry: ["SENTRY_AUTH_TOKEN"],
44
+ pagerduty: ["PAGERDUTY_API_KEY"],
45
+ digitalocean: ["DIGITALOCEAN_TOKEN", "DO_API_TOKEN"],
46
+ railway: ["RAILWAY_API_TOKEN"],
47
+ netlify: ["NETLIFY_AUTH_TOKEN"],
48
+ neon: ["NEON_API_KEY"],
49
+ render: ["RENDER_API_KEY"],
50
+ flyio: ["FLY_API_TOKEN"],
51
+ algolia: ["ALGOLIA_API_KEY"],
52
+ mixpanel: ["MIXPANEL_TOKEN"],
53
+ segment: ["SEGMENT_WRITE_KEY"],
54
+ assemblyai: ["ASSEMBLYAI_API_KEY"],
55
+ circleci: ["CIRCLECI_TOKEN"],
56
+ shopify: ["SHOPIFY_ACCESS_TOKEN"],
57
+ upstash: ["UPSTASH_REDIS_REST_TOKEN"],
58
+ turso: ["TURSO_AUTH_TOKEN"],
59
+ convertkit: ["CONVERTKIT_API_KEY"],
60
+ gumroad: ["GUMROAD_ACCESS_TOKEN"],
61
+ lemonsqueezy: ["LEMONSQUEEZY_API_KEY"],
62
+ togetherai: ["TOGETHER_API_KEY"],
63
+ higgsfield: ["HIGGSFIELD_API_KEY"],
64
+ heygen: ["HEYGEN_API_KEY"],
65
+ runway: ["RUNWAY_API_KEY"],
66
+ pika: ["PIKA_API_KEY"],
67
+ kling: ["KLING_API_KEY"],
68
+ };
69
+ export function checkEnvCredential(platform) {
70
+ const vars = ENV_MAPPINGS[platform] ?? [
71
+ `${platform.toUpperCase()}_API_KEY`,
72
+ `${platform.toUpperCase()}_TOKEN`,
73
+ ];
74
+ for (const v of vars) {
75
+ const val = process.env[v];
76
+ if (val && val.length > 5)
77
+ return val;
78
+ }
79
+ return null;
80
+ }
81
+ // ─── Tier 2: Temporary localhost secure input page ────────────────────────────
82
+ function buildHtml(platform, nonce, setupUrl) {
83
+ const setupLink = setupUrl
84
+ ? ` <a href="${setupUrl}" target="_blank">Get your key here</a>.`
85
+ : "";
86
+ return `<!DOCTYPE html>
87
+ <html><head>
88
+ <title>UnClick BackstagePass - Connect ${platform}</title>
89
+ <meta charset="utf-8">
90
+ <style>
91
+ * { margin: 0; padding: 0; box-sizing: border-box; }
92
+ body { background: #0a0a0a; color: #e0e0e0; font-family: -apple-system, sans-serif; display: flex; justify-content: center; align-items: center; min-height: 100vh; }
93
+ .card { background: #1a1a1a; border: 1px solid #333; border-radius: 12px; padding: 40px; max-width: 480px; width: 100%; }
94
+ h1 { font-size: 20px; margin-bottom: 8px; color: #61c1c4; }
95
+ p { font-size: 14px; color: #888; margin-bottom: 24px; }
96
+ a { color: #61c1c4; }
97
+ label { font-size: 13px; color: #aaa; display: block; margin-bottom: 8px; }
98
+ input[type="password"] { width: 100%; padding: 12px; background: #111; border: 1px solid #333; border-radius: 8px; color: #fff; font-size: 14px; font-family: monospace; }
99
+ input:focus { outline: none; border-color: #61c1c4; }
100
+ button { width: 100%; padding: 12px; background: #61c1c4; color: #0a0a0a; border: none; border-radius: 8px; font-size: 14px; font-weight: 600; cursor: pointer; margin-top: 16px; }
101
+ button:hover { background: #4fa8ab; }
102
+ .note { font-size: 12px; color: #555; margin-top: 16px; text-align: center; }
103
+ .success { text-align: center; }
104
+ .success h1 { font-size: 24px; margin-bottom: 16px; }
105
+ </style>
106
+ </head><body>
107
+ <div class="card" id="form">
108
+ <h1>Connect ${platform}</h1>
109
+ <p>Paste your API key below. It will be encrypted and stored securely. This page closes automatically after submission.${setupLink}</p>
110
+ <label>API Key</label>
111
+ <input type="password" id="key" placeholder="Paste your key here" autofocus>
112
+ <button onclick="submit()">Connect</button>
113
+ <div class="note">Your key goes directly to local encryption. It never appears in your AI chat.</div>
114
+ </div>
115
+ <div class="card success" id="done" style="display:none">
116
+ <h1>Connected</h1>
117
+ <p>Your ${platform} key has been encrypted and stored. You can close this tab.</p>
118
+ </div>
119
+ <script>
120
+ async function submit() {
121
+ const key = document.getElementById('key').value.trim();
122
+ if (!key) return;
123
+ const res = await fetch('/submit', { method: 'POST', headers: {'Content-Type':'application/json'}, body: JSON.stringify({key, nonce:'${nonce}'}) });
124
+ if (res.ok) { document.getElementById('form').style.display='none'; document.getElementById('done').style.display='block'; setTimeout(() => window.close(), 2000); }
125
+ }
126
+ document.getElementById('key').addEventListener('keydown', e => { if (e.key === 'Enter') submit(); });
127
+ </script>
128
+ </body></html>`;
129
+ }
130
+ // Start a localhost server for the given platform. Stores result in resolvedCredentials when submitted.
131
+ // Returns port number immediately (non-blocking).
132
+ export function startSecureInputServer(platform, setupUrl) {
133
+ // If a server for this platform is already running, reuse it
134
+ const existing = activeServers.get(platform);
135
+ if (existing)
136
+ return existing.port;
137
+ const nonce = randomBytes(8).toString("hex");
138
+ // Use a deterministic-ish port range: 19283-19382
139
+ const port = 19283 + Math.floor(Math.random() * 100);
140
+ const html = buildHtml(platform, nonce, setupUrl);
141
+ const server = createServer((req, res) => {
142
+ if (req.method === "GET") {
143
+ res.writeHead(200, { "Content-Type": "text/html" });
144
+ res.end(html);
145
+ return;
146
+ }
147
+ if (req.method === "POST" && req.url === "/submit") {
148
+ let body = "";
149
+ req.on("data", (chunk) => { body += chunk; });
150
+ req.on("end", () => {
151
+ try {
152
+ const data = JSON.parse(body);
153
+ if (data.nonce === nonce && data.key && data.key.length > 5) {
154
+ res.writeHead(200, { "Content-Type": "application/json" });
155
+ res.end('{"ok":true}');
156
+ // Store resolved credential and clean up
157
+ resolvedCredentials.set(platform, data.key);
158
+ activeServers.delete(platform);
159
+ setTimeout(() => server.close(), 3000);
160
+ }
161
+ else {
162
+ res.writeHead(400);
163
+ res.end("Invalid");
164
+ }
165
+ }
166
+ catch {
167
+ res.writeHead(400);
168
+ res.end("Bad request");
169
+ }
170
+ });
171
+ return;
172
+ }
173
+ res.writeHead(404);
174
+ res.end("Not found");
175
+ });
176
+ server.listen(port, "127.0.0.1");
177
+ activeServers.set(platform, { port, server, nonce });
178
+ // Auto-shutdown after 5 minutes
179
+ setTimeout(() => {
180
+ if (activeServers.has(platform)) {
181
+ activeServers.delete(platform);
182
+ server.close();
183
+ }
184
+ }, 300_000);
185
+ return port;
186
+ }
187
+ // Check if a submitted credential is waiting to be picked up
188
+ export function popResolvedCredential(platform) {
189
+ const val = resolvedCredentials.get(platform);
190
+ if (val !== undefined) {
191
+ resolvedCredentials.delete(platform);
192
+ return val;
193
+ }
194
+ return null;
195
+ }
196
+ // Check if an input server is currently active for a platform
197
+ export function hasActiveServer(platform) {
198
+ return activeServers.has(platform);
199
+ }
200
+ export function resolveCredential(platform, setupUrl) {
201
+ // Tier 1: environment
202
+ const envVal = checkEnvCredential(platform);
203
+ if (envVal) {
204
+ return {
205
+ status: "found_env",
206
+ value: envVal,
207
+ source: "env",
208
+ message: `Credential for ${platform} found in environment.`,
209
+ };
210
+ }
211
+ // Check if user already submitted via browser
212
+ const submitted = popResolvedCredential(platform);
213
+ if (submitted) {
214
+ return {
215
+ status: "found_submitted",
216
+ value: submitted,
217
+ source: "secure_input",
218
+ message: `Credential for ${platform} received via secure input page.`,
219
+ };
220
+ }
221
+ // Tier 2: start (or reuse) the localhost server
222
+ const port = startSecureInputServer(platform, setupUrl);
223
+ return {
224
+ status: "awaiting_input",
225
+ url: `http://localhost:${port}`,
226
+ message: `Open http://localhost:${port} to securely enter your ${platform} API key. Then call keychain_secure_connect again to complete the connection.`,
227
+ };
228
+ }
229
+ //# sourceMappingURL=keychain-secure-input.js.map
package/dist/keychain-secure-input.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"keychain-secure-input.js","sourceRoot":"","sources":["../src/keychain-secure-input.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,kCAAkC;AAClC,uEAAuE;AACvE,+EAA+E;AAC/E,EAAE;AACF,6EAA6E;AAC7E,0FAA0F;AAE1F,OAAO,EAAE,YAAY,EAAe,MAAM,MAAM,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAerC,iFAAiF;AACjF,2EAA2E;AAC3E,oFAAoF;AACpF,uFAAuF;AAEvF,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAkB,CAAC;AACtD,MAAM,aAAa,GAAS,IAAI,GAAG,EAAwB,CAAC;AAE5D,iFAAiF;AAEjF,MAAM,YAAY,GAA6B;IAC7C,MAAM,EAAQ,CAAC,cAAc,EAAE,YAAY,EAAE,gBAAgB,EAAE,UAAU,CAAC;IAC1E,QAAQ,EAAM,CAAC,cAAc,EAAE,2BAA2B,EAAE,mBAAmB,CAAC;IAChF,MAAM,EAAQ,CAAC,cAAc,EAAE,kBAAkB,CAAC;IAClD,MAAM,EAAQ,CAAC,mBAAmB,EAAE,gBAAgB,EAAE,YAAY,CAAC;IACnE,MAAM,EAAQ,CAAC,gBAAgB,EAAE,YAAY,CAAC;IAC9C,SAAS,EAAK,CAAC,mBAAmB,EAAE,eAAe,CAAC;IACpD,UAAU,EAAI,CAAC,sBAAsB,EAAE,cAAc,EAAE,kBAAkB,CAAC;IAC1E,KAAK,EAAS,CAAC,iBAAiB,EAAE,aAAa,EAAE,iBAAiB,CAAC;IACnE,OAAO,EAAO,CAAC,mBAAmB,EAAE,eAAe,CAAC;IACpD,MAAM,EAAQ,CAAC,gBAAgB,EAAE,cAAc,EAAE,0BAA0B,CAAC;IAC5E,QAAQ,EAAM,CAAC,kBAAkB,EAAE,cAAc,CAAC;IAClD,MAAM,EAAQ,CAAC,gBAAgB,EAAE,cAAc,CAAC;IAChD,MAAM,EAAQ,CAAC,mBAAmB,CAAC;IACnC,QAAQ,EAAM,CAAC,kBAAkB,CAAC;IAClC,SAAS,EAAK,CAAC,mBAAmB,CAAC;IACnC,OAAO,EAAO,CAAC,YAAY,EAAE,iBAAiB,CAAC;IAC/C,QAAQ,EAAM,CAAC,kBAAkB,CAAC;IAClC,KAAK,EAAS,CAAC,gBAAgB,EAAE,eAAe,CAAC;IACjD,IAAI,EAAU,CAAC,cAAc,CAAC;IAC9B,OAAO,EAAO,CAAC,iBAAiB,CAAC;IACjC,MAAM,EAAQ,CAAC,gBAAgB,EAAE,YAAY,CAAC;IAC9C,UAAU,EAAI,CAAC,oBAAoB,EAAE,cAAc,CAAC;IACpD,SAAS,EAAK,CAAC,qBAAqB,CAAC;IACrC,MAAM,EAAQ,CAAC,gBAAgB,CAAC;IAChC,QAAQ,EAAM,CAAC,uBAAuB,CAAC;IACvC,MAAM,EAAQ,CAAC,mBAAmB,CAAC;IACnC,SAAS,EAAK,CAAC,mBAAmB,CAAC;IACnC,YAAY,EAAE,CAAC,oBAAoB,EAAE,cAAc,CAAC;IACpD,OAAO,EAAO,CAAC,mBAAmB,CAAC;IACnC,OAAO,EAAO,CAAC,oBAAoB,CAAC;IACpC,IAAI,EAAU,CAAC,cAAc,CAAC;IAC9B,MAAM,EAAQ,CAAC,gBAAgB,CAAC;IAChC,KAAK,EAAS,CAAC,eAAe,CAAC;IAC/B,OAAO,EAAO,CAAC,iBAAiB,CAAC;IACjC,QAAQ,EAAM,CAAC,gBAAgB,CAAC;IAChC,OAAO,EAAO,CAAC,mBAAmB,CAAC;IACnC,UAAU,EAAI,CAAC,oBAAoB,CAAC;IACpC,QAAQ,EAAM,CAAC,gBAAgB,CAAC;IAChC,OAAO,EAAO,CAAC,sBAAsB,CAAC;IACtC,OAAO,EAAO,CAAC,0BAA0B,CAAC;IAC1C,KAAK,EAAS,CAAC,kBAAkB,CAAC;IAClC,UAAU,EAAI,CAAC,oBAAoB,CAAC;IACpC,OAAO,EAAO,CAAC,sBAAsB,CAAC;IACtC,YAAY,EAAE,CAAC,sBAAsB,CAAC;IACtC,UAAU,EAAI,CAAC,kBAAkB,CAAC;IAClC,UAAU,EAAI,CAAC,oBAAoB,CAAC;IACpC,MAAM,EAAQ,CAAC,gBAAgB,CAAC;IAChC,MAAM,EAAQ,CAAC,gBAAgB,CAAC;IAChC,IAAI,EAAU,CAAC,cAAc,CAAC;IAC9B,KAAK,EAAS,CAAC,eAAe,CAAC;CAChC,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI;QACrC,GAAG,QAAQ,CAAC,WAAW,EAAE,UAAU;QACnC,GAAG,QAAQ,CAAC,WAAW,EAAE,QAAQ;KAClC,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;IACxC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AAEjF,SAAS,SAAS,CAAC,QAAgB,EAAE,KAAa,EAAE,QAAiB;IACnE,MAAM,SAAS,GAAG,QAAQ;QACxB,CAAC,CAAC,aAAa,QAAQ,0CAA0C;QACjE,CAAC,CAAC,EAAE,CAAC;IACP,OAAO;;yCAEgC,QAAQ;;;;;;;;;;;;;;;;;;;;gBAoBjC,QAAQ;2HACmG,SAAS;;;;;;;;YAQxH,QAAQ;;;;;;yIAMqH,KAAK;;;;;eAK/H,CAAC;AAChB,CAAC;AAED,wGAAwG;AACxG,kDAAkD;AAClD,MAAM,UAAU,sBAAsB,CAAC,QAAgB,EAAE,QAAiB;IACxE,6DAA6D;IAC7D,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC;IAEnC,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7C,kDAAkD;IAClD,MAAM,IAAI,GAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC;IACtD,MAAM,IAAI,GAAI,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IAEnD,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACvC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACzB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;YACpD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACd,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YACnD,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAqC,CAAC;oBAClE,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC5D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;wBAC3D,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;wBACvB,yCAAyC;wBACzC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;wBAC5C,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;wBAC/B,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;oBACzC,CAAC;yBAAM,CAAC;wBACN,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;wBACnB,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;oBACrB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACnB,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACjC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAErD,gCAAgC;IAChC,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/B,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;IACH,CAAC,EAAE,OAAO,CAAC,CAAC;IAEZ,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,MAAM,GAAG,GAAG,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrC,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,OAAO,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACrC,CAAC;AAYD,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,QAAiB;IACnE,sBAAsB;IACtB,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,MAAM,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAG,WAAW;YACpB,KAAK,EAAI,MAAM;YACf,MAAM,EAAG,KAAK;YACd,OAAO,EAAE,kBAAkB,QAAQ,wBAAwB;SAC5D,CAAC;IACJ,CAAC;IAED,8CAA8C;IAC9C,MAAM,SAAS,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAClD,IAAI,SAAS,EAAE,CAAC;QACd,OAAO;YACL,MAAM,EAAG,iBAAiB;YAC1B,KAAK,EAAI,SAAS;YAClB,MAAM,EAAG,cAAc;YACvB,OAAO,EAAE,kBAAkB,QAAQ,kCAAkC;SACtE,CAAC;IACJ,CAAC;IAED,gDAAgD;IAChD,MAAM,IAAI,GAAG,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACxD,OAAO;QACL,MAAM,EAAG,gBAAgB;QACzB,GAAG,EAAM,oBAAoB,IAAI,EAAE;QACnC,OAAO,EAAE,yBAAyB,IAAI,2BAA2B,QAAQ,+EAA+E;KACzJ,CAAC;AACJ,CAAC"}
package/dist/keychain-tool.d.ts ADDED
@@ -0,0 +1,3 @@
1
+ export declare function keychainGetCredential(platform: string, label?: string): Promise<string | null>;
2
+ export declare function keychainAction(action: string, args: Record<string, unknown>): Promise<unknown>;
3
+ //# sourceMappingURL=keychain-tool.d.ts.map
package/dist/keychain-tool.d.ts.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"keychain-tool.d.ts","sourceRoot":"","sources":["../src/keychain-tool.ts"],"names":[],"mappings":"AA0kBA,wBAAsB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,SAAY,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAqBvG;AA4BD,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,IAAI,EAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,OAAO,CAAC,CAgBlB"}