@unclick/mcp-server 0.2.4 → 0.2.5

package/dist/heygen-tool.js

@@ -0,0 +1,134 @@
+// HeyGen API integration for the UnClick MCP server.
+// Uses the HeyGen REST API via fetch - no external dependencies.
+// Users must supply an API key from app.heygen.com/settings.
+const HG_API_BASE = "https://api.heygen.com";
+// ─── Auth validation ──────────────────────────────────────────────────────────
+function requireKey(args) {
+    const key = String(args.api_key ?? "").trim();
+    if (!key)
+        throw new Error("api_key is required. Get one at app.heygen.com/settings.");
+    return key;
+}
+// ─── API helpers ──────────────────────────────────────────────────────────────
+async function hgGet(apiKey, path) {
+    const res = await fetch(`${HG_API_BASE}${path}`, {
+        headers: {
+            "x-api-key": apiKey,
+            "Content-Type": "application/json",
+        },
+    });
+    const data = await res.json();
+    if (!res.ok) {
+        const msg = data.message ?? data.error ?? `HTTP ${res.status}`;
+        throw new Error(`HeyGen error (${res.status}): ${msg}`);
+    }
+    return data;
+}
+async function hgPost(apiKey, path, body) {
+    const res = await fetch(`${HG_API_BASE}${path}`, {
+        method: "POST",
+        headers: {
+            "x-api-key": apiKey,
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify(body),
+    });
+    const data = await res.json();
+    if (!res.ok) {
+        const msg = data.message ?? data.error ?? `HTTP ${res.status}`;
+        throw new Error(`HeyGen error (${res.status}): ${msg}`);
+    }
+    return data;
+}
+// ─── Operations ───────────────────────────────────────────────────────────────
+export async function heygen_create_avatar_video(args) {
+    const apiKey = requireKey(args);
+    const avatarId = String(args.avatar_id ?? "").trim();
+    const script = String(args.script ?? "").trim();
+    if (!avatarId)
+        throw new Error("avatar_id is required.");
+    if (!script)
+        throw new Error("script is required (the text the avatar will speak).");
+    const voiceId = args.voice_id ? String(args.voice_id) : undefined;
+    const backgroundUrl = args.background_url ? String(args.background_url) : undefined;
+    const width = args.width ? Number(args.width) : 1280;
+    const height = args.height ? Number(args.height) : 720;
+    const body = {
+        video_inputs: [
+            {
+                character: {
+                    type: "avatar",
+                    avatar_id: avatarId,
+                    avatar_style: args.avatar_style ?? "normal",
+                },
+                voice: voiceId
+                    ? { type: "text", input_text: script, voice_id: voiceId }
+                    : { type: "text", input_text: script },
+                background: backgroundUrl
+                    ? { type: "image", url: backgroundUrl }
+                    : { type: "color", value: "#ffffff" },
+            },
+        ],
+        dimension: { width, height },
+    };
+    if (args.title)
+        body.title = String(args.title);
+    if (args.test !== undefined)
+        body.test = Boolean(args.test);
+    const result = await hgPost(apiKey, "/v2/video/generate", body);
+    const videoId = (result.data?.video_id ?? result.video_id);
+    return {
+        video_id: videoId ?? null,
+        status: "submitted",
+        note: "Use heygen_get_video_status with the video_id to poll for completion.",
+        raw: result,
+    };
+}
+export async function heygen_list_avatars(args) {
+    const apiKey = requireKey(args);
+    const data = await hgGet(apiKey, "/v2/avatars");
+    const avatars = data.data?.avatars ?? [];
+    return {
+        count: avatars.length,
+        avatars: avatars.map((a) => ({
+            avatar_id: a.avatar_id,
+            name: a.avatar_name,
+            gender: a.gender ?? null,
+            preview_image_url: a.preview_image_url ?? null,
+        })),
+    };
+}
+export async function heygen_get_video_status(args) {
+    const apiKey = requireKey(args);
+    const videoId = String(args.video_id ?? "").trim();
+    if (!videoId)
+        throw new Error("video_id is required.");
+    const data = await hgGet(apiKey, `/v1/video_status.get?video_id=${encodeURIComponent(videoId)}`);
+    const info = data.data ?? data;
+    return {
+        video_id: videoId,
+        status: info.status ?? null,
+        video_url: info.video_url ?? null,
+        thumbnail_url: info.thumbnail_url ?? null,
+        duration: info.duration ?? null,
+        created_at: info.created_at ?? null,
+        error: info.error ?? null,
+        raw: data,
+    };
+}
+export async function heygen_list_voices(args) {
+    const apiKey = requireKey(args);
+    const data = await hgGet(apiKey, "/v2/voices");
+    const voices = data.data?.voices ?? [];
+    return {
+        count: voices.length,
+        voices: voices.map((v) => ({
+            voice_id: v.voice_id,
+            name: v.name,
+            language: v.language,
+            gender: v.gender,
+            preview_audio: v.preview_audio ?? null,
+        })),
+    };
+}
+//# sourceMappingURL=heygen-tool.js.map

package/dist/heygen-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"heygen-tool.js","sourceRoot":"","sources":["../src/heygen-tool.ts"],"names":[],"mappings":"AAAA,qDAAqD;AACrD,iEAAiE;AACjE,6DAA6D;AAE7D,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAoB7C,iFAAiF;AAEjF,SAAS,UAAU,CAAC,IAA6B;IAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IACtF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iFAAiF;AAEjF,KAAK,UAAU,KAAK,CAAI,MAAc,EAAE,IAAY;IAClD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,GAAG,IAAI,EAAE,EAAE;QAC/C,OAAO,EAAE;YACP,WAAW,EAAE,MAAM;YACnB,cAAc,EAAE,kBAAkB;SACnC;KACF,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA6B,CAAC;IACzD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,GAAG,GAAI,IAAI,CAAC,OAAkB,IAAK,IAAI,CAAC,KAAgB,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,CAAC,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,IAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,MAAM,CAAI,MAAc,EAAE,IAAY,EAAE,IAAa;IAClE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,GAAG,IAAI,EAAE,EAAE;QAC/C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,WAAW,EAAE,MAAM;YACnB,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA6B,CAAC;IACzD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,GAAG,GAAI,IAAI,CAAC,OAAkB,IAAK,IAAI,CAAC,KAAgB,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,CAAC,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,IAAS,CAAC;AACnB,CAAC;AAED,iFAAiF;AAEjF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAA6B;IAC5E,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAErF,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAEvD,MAAM,IAAI,GAA4B;QACpC,YAAY,EAAE;YACZ;gBACE,SAAS,EAAE;oBACT,IAAI,EAAE,QAAQ;oBACd,SAAS,EAAE,QAAQ;oBACnB,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,QAAQ;iBAC5C;gBACD,KAAK,EAAE,OAAO;oBACZ,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE;oBACzD,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE;gBACxC,UAAU,EAAE,aAAa;oBACvB,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE;oBACvC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE;aACxC;SACF;QACD,SAAS,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;KAC7B,CAAC;IAEF,IAAI,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE5D,MAAM,MAAM,GAAG,MAAM,MAAM,CACzB,MAAM,EAAE,oBAAoB,EAAE,IAAI,CACnC,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAuB,CAAC;IAEjF,OAAO;QACL,QAAQ,EAAE,OAAO,IAAI,IAAI;QACzB,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE,uEAAuE;QAC7E,GAAG,EAAE,MAAM;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAA6B;IACrE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,MAAM,KAAK,CACtB,MAAM,EAAE,aAAa,CACtB,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;IACzC,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,MAAM;QACrB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3B,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,IAAI,EAAE,CAAC,CAAC,WAAW;YACnB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI;YACxB,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,IAAI,IAAI;SAC/C,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAA6B;IACzE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAEvD,MAAM,IAAI,GAAG,MAAM,KAAK,CACtB,MAAM,EAAE,iCAAiC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CACvE,CAAC;IAEF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;IAC/B,OAAO;QACL,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI;QAC3B,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;QACjC,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,IAAI;QACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;QAC/B,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;QACnC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;QACzB,GAAG,EAAE,IAAI;KACV,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAA6B;IACpE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,MAAM,KAAK,CACtB,MAAM,EAAE,YAAY,CACrB,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC;IACvC,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM;QACpB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,aAAa,EAAE,CAAC,CAAC,aAAa,IAAI,IAAI;SACvC,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC"}

package/dist/higgsfield-tool.d.ts

@@ -0,0 +1,5 @@
+export declare function higgsfield_generate_video(args: Record<string, unknown>): Promise<unknown>;
+export declare function higgsfield_generate_image(args: Record<string, unknown>): Promise<unknown>;
+export declare function higgsfield_get_styles(args: Record<string, unknown>): Promise<unknown>;
+export declare function higgsfield_get_status(args: Record<string, unknown>): Promise<unknown>;
+//# sourceMappingURL=higgsfield-tool.d.ts.map

package/dist/higgsfield-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"higgsfield-tool.d.ts","sourceRoot":"","sources":["../src/higgsfield-tool.ts"],"names":[],"mappings":"AAoDA,wBAAsB,yBAAyB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAqB/F;AAED,wBAAsB,yBAAyB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAqB/F;AAED,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAS3F;AAED,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAiB3F"}

package/dist/higgsfield-tool.js

@@ -0,0 +1,120 @@
+// Higgsfield AI API integration for the UnClick MCP server.
+// Uses the Higgsfield REST API via fetch - no external dependencies.
+// Users must supply an API key from higgsfield.ai.
+const HF_API_BASE = "https://api.higgsfield.ai/v1";
+// ─── Auth validation ──────────────────────────────────────────────────────────
+function requireKey(args) {
+    const key = String(args.api_key ?? "").trim();
+    if (!key)
+        throw new Error("api_key is required. Get one at higgsfield.ai.");
+    return key;
+}
+// ─── API helpers ──────────────────────────────────────────────────────────────
+async function hfGet(apiKey, path) {
+    const res = await fetch(`${HF_API_BASE}${path}`, {
+        headers: {
+            Authorization: `Bearer ${apiKey}`,
+            "Content-Type": "application/json",
+        },
+    });
+    const data = await res.json();
+    if (!res.ok) {
+        const msg = data.message ?? data.error ?? `HTTP ${res.status}`;
+        throw new Error(`Higgsfield error (${res.status}): ${msg}`);
+    }
+    return data;
+}
+async function hfPost(apiKey, path, body) {
+    const res = await fetch(`${HF_API_BASE}${path}`, {
+        method: "POST",
+        headers: {
+            Authorization: `Bearer ${apiKey}`,
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify(body),
+    });
+    const data = await res.json();
+    if (!res.ok) {
+        const msg = data.message ?? data.error ?? `HTTP ${res.status}`;
+        throw new Error(`Higgsfield error (${res.status}): ${msg}`);
+    }
+    return data;
+}
+// ─── Operations ───────────────────────────────────────────────────────────────
+export async function higgsfield_generate_video(args) {
+    const apiKey = requireKey(args);
+    const prompt = String(args.prompt ?? "").trim();
+    if (!prompt)
+        throw new Error("prompt is required.");
+    const body = { prompt };
+    if (args.style)
+        body.style = String(args.style);
+    if (args.duration)
+        body.duration = Number(args.duration);
+    if (args.aspect_ratio)
+        body.aspect_ratio = String(args.aspect_ratio);
+    if (args.negative_prompt)
+        body.negative_prompt = String(args.negative_prompt);
+    if (args.seed !== undefined)
+        body.seed = Number(args.seed);
+    const result = await hfPost(apiKey, "/video/generate", body);
+    return {
+        generation_id: result.id ?? result.generation_id ?? null,
+        status: result.status ?? "submitted",
+        prompt,
+        note: "Use higgsfield_get_status with the generation_id to poll for completion.",
+        raw: result,
+    };
+}
+export async function higgsfield_generate_image(args) {
+    const apiKey = requireKey(args);
+    const prompt = String(args.prompt ?? "").trim();
+    if (!prompt)
+        throw new Error("prompt is required.");
+    const body = { prompt };
+    if (args.style)
+        body.style = String(args.style);
+    if (args.width)
+        body.width = Number(args.width);
+    if (args.height)
+        body.height = Number(args.height);
+    if (args.negative_prompt)
+        body.negative_prompt = String(args.negative_prompt);
+    if (args.seed !== undefined)
+        body.seed = Number(args.seed);
+    const result = await hfPost(apiKey, "/image/generate", body);
+    return {
+        generation_id: result.id ?? result.generation_id ?? null,
+        status: result.status ?? "submitted",
+        image_url: result.image_url ?? result.url ?? null,
+        prompt,
+        raw: result,
+    };
+}
+export async function higgsfield_get_styles(args) {
+    const apiKey = requireKey(args);
+    const data = await hfGet(apiKey, "/styles");
+    const styles = data.styles ?? data.data ?? [];
+    return {
+        count: Array.isArray(styles) ? styles.length : 0,
+        styles,
+    };
+}
+export async function higgsfield_get_status(args) {
+    const apiKey = requireKey(args);
+    const generationId = String(args.generation_id ?? "").trim();
+    if (!generationId)
+        throw new Error("generation_id is required.");
+    const result = await hfGet(apiKey, `/generation/${encodeURIComponent(generationId)}`);
+    return {
+        generation_id: generationId,
+        status: result.status ?? null,
+        video_url: result.video_url ?? result.url ?? null,
+        image_url: result.image_url ?? null,
+        created_at: result.created_at ?? null,
+        completed_at: result.completed_at ?? null,
+        error: result.error ?? null,
+        raw: result,
+    };
+}
+//# sourceMappingURL=higgsfield-tool.js.map

package/dist/higgsfield-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"higgsfield-tool.js","sourceRoot":"","sources":["../src/higgsfield-tool.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,qEAAqE;AACrE,mDAAmD;AAEnD,MAAM,WAAW,GAAG,8BAA8B,CAAC;AAEnD,iFAAiF;AAEjF,SAAS,UAAU,CAAC,IAA6B;IAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC5E,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iFAAiF;AAEjF,KAAK,UAAU,KAAK,CAAI,MAAc,EAAE,IAAY;IAClD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,GAAG,IAAI,EAAE,EAAE;QAC/C,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,MAAM,EAAE;YACjC,cAAc,EAAE,kBAAkB;SACnC;KACF,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA6B,CAAC;IACzD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,GAAG,GAAI,IAAI,CAAC,OAAkB,IAAK,IAAI,CAAC,KAAgB,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,CAAC,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,IAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,MAAM,CAAI,MAAc,EAAE,IAAY,EAAE,IAAa;IAClE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,GAAG,IAAI,EAAE,EAAE;QAC/C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,MAAM,EAAE;YACjC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA6B,CAAC;IACzD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,GAAG,GAAI,IAAI,CAAC,OAAkB,IAAK,IAAI,CAAC,KAAgB,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,CAAC,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,IAAS,CAAC;AACnB,CAAC;AAED,iFAAiF;AAEjF,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAA6B;IAC3E,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAEpD,MAAM,IAAI,GAA4B,EAAE,MAAM,EAAE,CAAC;IACjD,IAAI,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,IAAI,CAAC,QAAQ;QAAE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,YAAY;QAAE,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACrE,IAAI,IAAI,CAAC,eAAe;QAAE,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC9E,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE3D,MAAM,MAAM,GAAG,MAAM,MAAM,CAA0B,MAAM,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAEtF,OAAO;QACL,aAAa,EAAE,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,aAAa,IAAI,IAAI;QACxD,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,WAAW;QACpC,MAAM;QACN,IAAI,EAAE,0EAA0E;QAChF,GAAG,EAAE,MAAM;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAA6B;IAC3E,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAEpD,MAAM,IAAI,GAA4B,EAAE,MAAM,EAAE,CAAC;IACjD,IAAI,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,IAAI,CAAC,MAAM;QAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,eAAe;QAAE,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC9E,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE3D,MAAM,MAAM,GAAG,MAAM,MAAM,CAA0B,MAAM,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAEtF,OAAO;QACL,aAAa,EAAE,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,aAAa,IAAI,IAAI;QACxD,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,WAAW;QACpC,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,GAAG,IAAI,IAAI;QACjD,MAAM;QACN,GAAG,EAAE,MAAM;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAA6B;IACvE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,MAAM,KAAK,CAA2C,MAAM,EAAE,SAAS,CAAC,CAAC;IAEtF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;IAC9C,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAA6B;IACvE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7D,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAG,MAAM,KAAK,CAA0B,MAAM,EAAE,eAAe,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAE/G,OAAO;QACL,aAAa,EAAE,YAAY;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;QAC7B,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,GAAG,IAAI,IAAI;QACjD,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;QACnC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;QACrC,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;QACzC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI;QAC3B,GAAG,EAAE,MAAM;KACZ,CAAC;AACJ,CAAC"}

package/dist/keychain-crypto.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Encrypt a plaintext string using AES-256-GCM.
+ * Key is derived from the caller's UnClick API key via PBKDF2.
+ */
+export declare function encrypt(plaintext: string, apiKey: string): {
+    encrypted_value: string;
+    iv: string;
+    auth_tag: string;
+};
+/**
+ * Decrypt a value previously encrypted with encrypt().
+ */
+export declare function decrypt(encrypted_value: string, iv: string, auth_tag: string, apiKey: string): string;
+/**
+ * Returns the first 12 hex characters of the SHA-256 hash of the API key.
+ * Used as a human-readable namespace in logs and error messages.
+ */
+export declare function hashKey(apiKey: string): string;
+/**
+ * Returns the full SHA-256 hex hash of the API key.
+ * Used as the lookup key in Supabase (never store the raw API key).
+ */
+export declare function hashKeyFull(apiKey: string): string;
+//# sourceMappingURL=keychain-crypto.d.ts.map

package/dist/keychain-crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain-crypto.d.ts","sourceRoot":"","sources":["../src/keychain-crypto.ts"],"names":[],"mappings":"AAuBA;;;GAGG;AACH,wBAAgB,OAAO,CACrB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAU3D;AAED;;GAEG;AACH,wBAAgB,OAAO,CACrB,eAAe,EAAE,MAAM,EACvB,EAAE,EAAe,MAAM,EACvB,QAAQ,EAAS,MAAM,EACvB,MAAM,EAAW,MAAM,GACtB,MAAM,CAQR;AAED;;;GAGG;AACH,wBAAgB,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAElD"}

package/dist/keychain-crypto.js

@@ -0,0 +1,60 @@
+// ─── Keychain Crypto ──────────────────────────────────────────────────────────
+// AES-256-GCM encryption for platform credentials.
+// Key derivation: PBKDF2 with a deterministic salt derived from the API key.
+// No external dependencies - Node.js built-in crypto only.
+import * as crypto from "crypto";
+const PBKDF2_ITERATIONS = 100_000;
+const KEY_BYTES = 32; // AES-256
+const IV_BYTES = 12; // 96-bit IV recommended for GCM
+// Deterministic salt: avoids storing a per-credential salt while still
+// using PBKDF2 for slow key derivation. The secret material is the API key.
+const KEYCHAIN_PEPPER = "unclick-keychain-v1";
+function deriveKey(apiKey) {
+    const salt = crypto
+        .createHash("sha256")
+        .update(`${KEYCHAIN_PEPPER}:${apiKey}`)
+        .digest();
+    return crypto.pbkdf2Sync(apiKey, salt, PBKDF2_ITERATIONS, KEY_BYTES, "sha256");
+}
+/**
+ * Encrypt a plaintext string using AES-256-GCM.
+ * Key is derived from the caller's UnClick API key via PBKDF2.
+ */
+export function encrypt(plaintext, apiKey) {
+    const key = deriveKey(apiKey);
+    const iv = crypto.randomBytes(IV_BYTES);
+    const cipher = crypto.createCipheriv("aes-256-gcm", key, iv);
+    const enc = Buffer.concat([cipher.update(plaintext, "utf8"), cipher.final()]);
+    return {
+        encrypted_value: enc.toString("hex"),
+        iv: iv.toString("hex"),
+        auth_tag: cipher.getAuthTag().toString("hex"),
+    };
+}
+/**
+ * Decrypt a value previously encrypted with encrypt().
+ */
+export function decrypt(encrypted_value, iv, auth_tag, apiKey) {
+    const key = deriveKey(apiKey);
+    const decipher = crypto.createDecipheriv("aes-256-gcm", key, Buffer.from(iv, "hex"));
+    decipher.setAuthTag(Buffer.from(auth_tag, "hex"));
+    return Buffer.concat([
+        decipher.update(Buffer.from(encrypted_value, "hex")),
+        decipher.final(),
+    ]).toString("utf8");
+}
+/**
+ * Returns the first 12 hex characters of the SHA-256 hash of the API key.
+ * Used as a human-readable namespace in logs and error messages.
+ */
+export function hashKey(apiKey) {
+    return crypto.createHash("sha256").update(apiKey).digest("hex").slice(0, 12);
+}
+/**
+ * Returns the full SHA-256 hex hash of the API key.
+ * Used as the lookup key in Supabase (never store the raw API key).
+ */
+export function hashKeyFull(apiKey) {
+    return crypto.createHash("sha256").update(apiKey).digest("hex");
+}
+//# sourceMappingURL=keychain-crypto.js.map

package/dist/keychain-crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain-crypto.js","sourceRoot":"","sources":["../src/keychain-crypto.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,mDAAmD;AACnD,6EAA6E;AAC7E,2DAA2D;AAE3D,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAEjC,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAClC,MAAM,SAAS,GAAW,EAAE,CAAC,CAAC,UAAU;AACxC,MAAM,QAAQ,GAAY,EAAE,CAAC,CAAC,gCAAgC;AAE9D,uEAAuE;AACvE,4EAA4E;AAC5E,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAE9C,SAAS,SAAS,CAAC,MAAc;IAC/B,MAAM,IAAI,GAAG,MAAM;SAChB,UAAU,CAAC,QAAQ,CAAC;SACpB,MAAM,CAAC,GAAG,eAAe,IAAI,MAAM,EAAE,CAAC;SACtC,MAAM,EAAE,CAAC;IACZ,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AACjF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,OAAO,CACrB,SAAiB,EACjB,MAAc;IAEd,MAAM,GAAG,GAAM,SAAS,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,EAAE,GAAO,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAM,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACjF,OAAO;QACL,eAAe,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;QACpC,EAAE,EAAe,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;QACnC,QAAQ,EAAS,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;KACrD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,OAAO,CACrB,eAAuB,EACvB,EAAuB,EACvB,QAAuB,EACvB,MAAuB;IAEvB,MAAM,GAAG,GAAQ,SAAS,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IACrF,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IAClD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QACpD,QAAQ,CAAC,KAAK,EAAE;KACjB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,MAAc;IACpC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC"}

package/dist/keychain-secure-input.d.ts

@@ -0,0 +1,17 @@
+export interface SecureInputResult {
+    value: string;
+    source: "env" | "secure_input" | "direct";
+}
+export declare function checkEnvCredential(platform: string): string | null;
+export declare function startSecureInputServer(platform: string, setupUrl?: string): number;
+export declare function popResolvedCredential(platform: string): string | null;
+export declare function hasActiveServer(platform: string): boolean;
+export interface SecureConnectState {
+    status: "found_env" | "found_submitted" | "awaiting_input";
+    value?: string;
+    source?: "env" | "secure_input";
+    url?: string;
+    message: string;
+}
+export declare function resolveCredential(platform: string, setupUrl?: string): SecureConnectState;
+//# sourceMappingURL=keychain-secure-input.d.ts.map

package/dist/keychain-secure-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain-secure-input.d.ts","sourceRoot":"","sources":["../src/keychain-secure-input.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,KAAK,GAAG,cAAc,GAAG,QAAQ,CAAC;CAC3C;AAuED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUlE;AAuDD,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CA0DlF;AAGD,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOrE;AAGD,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEzD;AAID,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAI,WAAW,GAAG,iBAAiB,GAAG,gBAAgB,CAAC;IAC7D,KAAK,CAAC,EAAI,MAAM,CAAC;IACjB,MAAM,CAAC,EAAG,KAAK,GAAG,cAAc,CAAC;IACjC,GAAG,CAAC,EAAM,MAAM,CAAC;IACjB,OAAO,EAAG,MAAM,CAAC;CAClB;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,kBAAkB,CA8BzF"}

package/dist/keychain-secure-input.js

@@ -0,0 +1,229 @@
+// ─── UnClick Keychain Secure Input ───────────────────────────────────────────
+// Two-tier credential collection:
+//   Tier 1: Check environment variables (common patterns per platform)
+//   Tier 2: Spin up a temporary localhost HTTP server with a masked input page
+//
+// IMPORTANT: Credentials never appear in any log, response, or chat message.
+// The localhost server binds to 127.0.0.1 only. Nonce validation prevents replay attacks.
+import { createServer } from "http";
+import { randomBytes } from "crypto";
+// ─── Module-level state ───────────────────────────────────────────────────────
+// These Maps persist across MCP tool calls within the same server process.
+// resolvedCredentials: platform -> credential (submitted by user, ready to pick up)
+// activeServers: platform -> server info (waiting for user to open browser and submit)
+const resolvedCredentials = new Map();
+const activeServers = new Map();
+// ─── Tier 1: Environment variable detection ───────────────────────────────────
+const ENV_MAPPINGS = {
+    github: ["GITHUB_TOKEN", "GITHUB_PAT", "GITHUB_API_KEY", "GH_TOKEN"],
+    supabase: ["SUPABASE_KEY", "SUPABASE_SERVICE_ROLE_KEY", "SUPABASE_ANON_KEY"],
+    vercel: ["VERCEL_TOKEN", "VERCEL_API_TOKEN"],
+    stripe: ["STRIPE_SECRET_KEY", "STRIPE_API_KEY", "STRIPE_KEY"],
+    openai: ["OPENAI_API_KEY", "OPENAI_KEY"],
+    anthropic: ["ANTHROPIC_API_KEY", "ANTHROPIC_KEY"],
+    cloudflare: ["CLOUDFLARE_API_TOKEN", "CF_API_TOKEN", "CLOUDFLARE_TOKEN"],
+    slack: ["SLACK_BOT_TOKEN", "SLACK_TOKEN", "SLACK_API_TOKEN"],
+    discord: ["DISCORD_BOT_TOKEN", "DISCORD_TOKEN"],
+    notion: ["NOTION_API_KEY", "NOTION_TOKEN", "NOTION_INTEGRATION_TOKEN"],
+    airtable: ["AIRTABLE_API_KEY", "AIRTABLE_PAT"],
+    linear: ["LINEAR_API_KEY", "LINEAR_TOKEN"],
+    twilio: ["TWILIO_AUTH_TOKEN"],
+    sendgrid: ["SENDGRID_API_KEY"],
+    mailchimp: ["MAILCHIMP_API_KEY"],
+    datadog: ["DD_API_KEY", "DATADOG_API_KEY"],
+    pinecone: ["PINECONE_API_KEY"],
+    deepl: ["DEEPL_AUTH_KEY", "DEEPL_API_KEY"],
+    groq: ["GROQ_API_KEY"],
+    mistral: ["MISTRAL_API_KEY"],
+    cohere: ["COHERE_API_KEY", "CO_API_KEY"],
+    perplexity: ["PERPLEXITY_API_KEY", "PPLX_API_KEY"],
+    replicate: ["REPLICATE_API_TOKEN"],
+    resend: ["RESEND_API_KEY"],
+    postmark: ["POSTMARK_SERVER_TOKEN"],
+    sentry: ["SENTRY_AUTH_TOKEN"],
+    pagerduty: ["PAGERDUTY_API_KEY"],
+    digitalocean: ["DIGITALOCEAN_TOKEN", "DO_API_TOKEN"],
+    railway: ["RAILWAY_API_TOKEN"],
+    netlify: ["NETLIFY_AUTH_TOKEN"],
+    neon: ["NEON_API_KEY"],
+    render: ["RENDER_API_KEY"],
+    flyio: ["FLY_API_TOKEN"],
+    algolia: ["ALGOLIA_API_KEY"],
+    mixpanel: ["MIXPANEL_TOKEN"],
+    segment: ["SEGMENT_WRITE_KEY"],
+    assemblyai: ["ASSEMBLYAI_API_KEY"],
+    circleci: ["CIRCLECI_TOKEN"],
+    shopify: ["SHOPIFY_ACCESS_TOKEN"],
+    upstash: ["UPSTASH_REDIS_REST_TOKEN"],
+    turso: ["TURSO_AUTH_TOKEN"],
+    convertkit: ["CONVERTKIT_API_KEY"],
+    gumroad: ["GUMROAD_ACCESS_TOKEN"],
+    lemonsqueezy: ["LEMONSQUEEZY_API_KEY"],
+    togetherai: ["TOGETHER_API_KEY"],
+    higgsfield: ["HIGGSFIELD_API_KEY"],
+    heygen: ["HEYGEN_API_KEY"],
+    runway: ["RUNWAY_API_KEY"],
+    pika: ["PIKA_API_KEY"],
+    kling: ["KLING_API_KEY"],
+};
+export function checkEnvCredential(platform) {
+    const vars = ENV_MAPPINGS[platform] ?? [
+        `${platform.toUpperCase()}_API_KEY`,
+        `${platform.toUpperCase()}_TOKEN`,
+    ];
+    for (const v of vars) {
+        const val = process.env[v];
+        if (val && val.length > 5)
+            return val;
+    }
+    return null;
+}
+// ─── Tier 2: Temporary localhost secure input page ────────────────────────────
+function buildHtml(platform, nonce, setupUrl) {
+    const setupLink = setupUrl
+        ? ` <a href="${setupUrl}" target="_blank">Get your key here</a>.`
+        : "";
+    return `<!DOCTYPE html>
+<html><head>
+<title>UnClick BackstagePass - Connect ${platform}</title>
+<meta charset="utf-8">
+<style>
+  * { margin: 0; padding: 0; box-sizing: border-box; }
+  body { background: #0a0a0a; color: #e0e0e0; font-family: -apple-system, sans-serif; display: flex; justify-content: center; align-items: center; min-height: 100vh; }
+  .card { background: #1a1a1a; border: 1px solid #333; border-radius: 12px; padding: 40px; max-width: 480px; width: 100%; }
+  h1 { font-size: 20px; margin-bottom: 8px; color: #61c1c4; }
+  p { font-size: 14px; color: #888; margin-bottom: 24px; }
+  a { color: #61c1c4; }
+  label { font-size: 13px; color: #aaa; display: block; margin-bottom: 8px; }
+  input[type="password"] { width: 100%; padding: 12px; background: #111; border: 1px solid #333; border-radius: 8px; color: #fff; font-size: 14px; font-family: monospace; }
+  input:focus { outline: none; border-color: #61c1c4; }
+  button { width: 100%; padding: 12px; background: #61c1c4; color: #0a0a0a; border: none; border-radius: 8px; font-size: 14px; font-weight: 600; cursor: pointer; margin-top: 16px; }
+  button:hover { background: #4fa8ab; }
+  .note { font-size: 12px; color: #555; margin-top: 16px; text-align: center; }
+  .success { text-align: center; }
+  .success h1 { font-size: 24px; margin-bottom: 16px; }
+</style>
+</head><body>
+<div class="card" id="form">
+  <h1>Connect ${platform}</h1>
+  <p>Paste your API key below. It will be encrypted and stored securely. This page closes automatically after submission.${setupLink}</p>
+  <label>API Key</label>
+  <input type="password" id="key" placeholder="Paste your key here" autofocus>
+  <button onclick="submit()">Connect</button>
+  <div class="note">Your key goes directly to local encryption. It never appears in your AI chat.</div>
+</div>
+<div class="card success" id="done" style="display:none">
+  <h1>Connected</h1>
+  <p>Your ${platform} key has been encrypted and stored. You can close this tab.</p>
+</div>
+<script>
+async function submit() {
+  const key = document.getElementById('key').value.trim();
+  if (!key) return;
+  const res = await fetch('/submit', { method: 'POST', headers: {'Content-Type':'application/json'}, body: JSON.stringify({key, nonce:'${nonce}'}) });
+  if (res.ok) { document.getElementById('form').style.display='none'; document.getElementById('done').style.display='block'; setTimeout(() => window.close(), 2000); }
+}
+document.getElementById('key').addEventListener('keydown', e => { if (e.key === 'Enter') submit(); });
+</script>
+</body></html>`;
+}
+// Start a localhost server for the given platform. Stores result in resolvedCredentials when submitted.
+// Returns port number immediately (non-blocking).
+export function startSecureInputServer(platform, setupUrl) {
+    // If a server for this platform is already running, reuse it
+    const existing = activeServers.get(platform);
+    if (existing)
+        return existing.port;
+    const nonce = randomBytes(8).toString("hex");
+    // Use a deterministic-ish port range: 19283-19382
+    const port = 19283 + Math.floor(Math.random() * 100);
+    const html = buildHtml(platform, nonce, setupUrl);
+    const server = createServer((req, res) => {
+        if (req.method === "GET") {
+            res.writeHead(200, { "Content-Type": "text/html" });
+            res.end(html);
+            return;
+        }
+        if (req.method === "POST" && req.url === "/submit") {
+            let body = "";
+            req.on("data", (chunk) => { body += chunk; });
+            req.on("end", () => {
+                try {
+                    const data = JSON.parse(body);
+                    if (data.nonce === nonce && data.key && data.key.length > 5) {
+                        res.writeHead(200, { "Content-Type": "application/json" });
+                        res.end('{"ok":true}');
+                        // Store resolved credential and clean up
+                        resolvedCredentials.set(platform, data.key);
+                        activeServers.delete(platform);
+                        setTimeout(() => server.close(), 3000);
+                    }
+                    else {
+                        res.writeHead(400);
+                        res.end("Invalid");
+                    }
+                }
+                catch {
+                    res.writeHead(400);
+                    res.end("Bad request");
+                }
+            });
+            return;
+        }
+        res.writeHead(404);
+        res.end("Not found");
+    });
+    server.listen(port, "127.0.0.1");
+    activeServers.set(platform, { port, server, nonce });
+    // Auto-shutdown after 5 minutes
+    setTimeout(() => {
+        if (activeServers.has(platform)) {
+            activeServers.delete(platform);
+            server.close();
+        }
+    }, 300_000);
+    return port;
+}
+// Check if a submitted credential is waiting to be picked up
+export function popResolvedCredential(platform) {
+    const val = resolvedCredentials.get(platform);
+    if (val !== undefined) {
+        resolvedCredentials.delete(platform);
+        return val;
+    }
+    return null;
+}
+// Check if an input server is currently active for a platform
+export function hasActiveServer(platform) {
+    return activeServers.has(platform);
+}
+export function resolveCredential(platform, setupUrl) {
+    // Tier 1: environment
+    const envVal = checkEnvCredential(platform);
+    if (envVal) {
+        return {
+            status: "found_env",
+            value: envVal,
+            source: "env",
+            message: `Credential for ${platform} found in environment.`,
+        };
+    }
+    // Check if user already submitted via browser
+    const submitted = popResolvedCredential(platform);
+    if (submitted) {
+        return {
+            status: "found_submitted",
+            value: submitted,
+            source: "secure_input",
+            message: `Credential for ${platform} received via secure input page.`,
+        };
+    }
+    // Tier 2: start (or reuse) the localhost server
+    const port = startSecureInputServer(platform, setupUrl);
+    return {
+        status: "awaiting_input",
+        url: `http://localhost:${port}`,
+        message: `Open http://localhost:${port} to securely enter your ${platform} API key. Then call keychain_secure_connect again to complete the connection.`,
+    };
+}
+//# sourceMappingURL=keychain-secure-input.js.map

package/dist/keychain-secure-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain-secure-input.js","sourceRoot":"","sources":["../src/keychain-secure-input.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,kCAAkC;AAClC,uEAAuE;AACvE,+EAA+E;AAC/E,EAAE;AACF,6EAA6E;AAC7E,0FAA0F;AAE1F,OAAO,EAAE,YAAY,EAAe,MAAM,MAAM,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAerC,iFAAiF;AACjF,2EAA2E;AAC3E,oFAAoF;AACpF,uFAAuF;AAEvF,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAkB,CAAC;AACtD,MAAM,aAAa,GAAS,IAAI,GAAG,EAAwB,CAAC;AAE5D,iFAAiF;AAEjF,MAAM,YAAY,GAA6B;IAC7C,MAAM,EAAQ,CAAC,cAAc,EAAE,YAAY,EAAE,gBAAgB,EAAE,UAAU,CAAC;IAC1E,QAAQ,EAAM,CAAC,cAAc,EAAE,2BAA2B,EAAE,mBAAmB,CAAC;IAChF,MAAM,EAAQ,CAAC,cAAc,EAAE,kBAAkB,CAAC;IAClD,MAAM,EAAQ,CAAC,mBAAmB,EAAE,gBAAgB,EAAE,YAAY,CAAC;IACnE,MAAM,EAAQ,CAAC,gBAAgB,EAAE,YAAY,CAAC;IAC9C,SAAS,EAAK,CAAC,mBAAmB,EAAE,eAAe,CAAC;IACpD,UAAU,EAAI,CAAC,sBAAsB,EAAE,cAAc,EAAE,kBAAkB,CAAC;IAC1E,KAAK,EAAS,CAAC,iBAAiB,EAAE,aAAa,EAAE,iBAAiB,CAAC;IACnE,OAAO,EAAO,CAAC,mBAAmB,EAAE,eAAe,CAAC;IACpD,MAAM,EAAQ,CAAC,gBAAgB,EAAE,cAAc,EAAE,0BAA0B,CAAC;IAC5E,QAAQ,EAAM,CAAC,kBAAkB,EAAE,cAAc,CAAC;IAClD,MAAM,EAAQ,CAAC,gBAAgB,EAAE,cAAc,CAAC;IAChD,MAAM,EAAQ,CAAC,mBAAmB,CAAC;IACnC,QAAQ,EAAM,CAAC,kBAAkB,CAAC;IAClC,SAAS,EAAK,CAAC,mBAAmB,CAAC;IACnC,OAAO,EAAO,CAAC,YAAY,EAAE,iBAAiB,CAAC;IAC/C,QAAQ,EAAM,CAAC,kBAAkB,CAAC;IAClC,KAAK,EAAS,CAAC,gBAAgB,EAAE,eAAe,CAAC;IACjD,IAAI,EAAU,CAAC,cAAc,CAAC;IAC9B,OAAO,EAAO,CAAC,iBAAiB,CAAC;IACjC,MAAM,EAAQ,CAAC,gBAAgB,EAAE,YAAY,CAAC;IAC9C,UAAU,EAAI,CAAC,oBAAoB,EAAE,cAAc,CAAC;IACpD,SAAS,EAAK,CAAC,qBAAqB,CAAC;IACrC,MAAM,EAAQ,CAAC,gBAAgB,CAAC;IAChC,QAAQ,EAAM,CAAC,uBAAuB,CAAC;IACvC,MAAM,EAAQ,CAAC,mBAAmB,CAAC;IACnC,SAAS,EAAK,CAAC,mBAAmB,CAAC;IACnC,YAAY,EAAE,CAAC,oBAAoB,EAAE,cAAc,CAAC;IACpD,OAAO,EAAO,CAAC,mBAAmB,CAAC;IACnC,OAAO,EAAO,CAAC,oBAAoB,CAAC;IACpC,IAAI,EAAU,CAAC,cAAc,CAAC;IAC9B,MAAM,EAAQ,CAAC,gBAAgB,CAAC;IAChC,KAAK,EAAS,CAAC,eAAe,CAAC;IAC/B,OAAO,EAAO,CAAC,iBAAiB,CAAC;IACjC,QAAQ,EAAM,CAAC,gBAAgB,CAAC;IAChC,OAAO,EAAO,CAAC,mBAAmB,CAAC;IACnC,UAAU,EAAI,CAAC,oBAAoB,CAAC;IACpC,QAAQ,EAAM,CAAC,gBAAgB,CAAC;IAChC,OAAO,EAAO,CAAC,sBAAsB,CAAC;IACtC,OAAO,EAAO,CAAC,0BAA0B,CAAC;IAC1C,KAAK,EAAS,CAAC,kBAAkB,CAAC;IAClC,UAAU,EAAI,CAAC,oBAAoB,CAAC;IACpC,OAAO,EAAO,CAAC,sBAAsB,CAAC;IACtC,YAAY,EAAE,CAAC,sBAAsB,CAAC;IACtC,UAAU,EAAI,CAAC,kBAAkB,CAAC;IAClC,UAAU,EAAI,CAAC,oBAAoB,CAAC;IACpC,MAAM,EAAQ,CAAC,gBAAgB,CAAC;IAChC,MAAM,EAAQ,CAAC,gBAAgB,CAAC;IAChC,IAAI,EAAU,CAAC,cAAc,CAAC;IAC9B,KAAK,EAAS,CAAC,eAAe,CAAC;CAChC,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI;QACrC,GAAG,QAAQ,CAAC,WAAW,EAAE,UAAU;QACnC,GAAG,QAAQ,CAAC,WAAW,EAAE,QAAQ;KAClC,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;IACxC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AAEjF,SAAS,SAAS,CAAC,QAAgB,EAAE,KAAa,EAAE,QAAiB;IACnE,MAAM,SAAS,GAAG,QAAQ;QACxB,CAAC,CAAC,aAAa,QAAQ,0CAA0C;QACjE,CAAC,CAAC,EAAE,CAAC;IACP,OAAO;;yCAEgC,QAAQ;;;;;;;;;;;;;;;;;;;;gBAoBjC,QAAQ;2HACmG,SAAS;;;;;;;;YAQxH,QAAQ;;;;;;yIAMqH,KAAK;;;;;eAK/H,CAAC;AAChB,CAAC;AAED,wGAAwG;AACxG,kDAAkD;AAClD,MAAM,UAAU,sBAAsB,CAAC,QAAgB,EAAE,QAAiB;IACxE,6DAA6D;IAC7D,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC;IAEnC,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7C,kDAAkD;IAClD,MAAM,IAAI,GAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC;IACtD,MAAM,IAAI,GAAI,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IAEnD,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACvC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACzB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;YACpD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACd,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YACnD,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAqC,CAAC;oBAClE,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC5D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;wBAC3D,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;wBACvB,yCAAyC;wBACzC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;wBAC5C,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;wBAC/B,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;oBACzC,CAAC;yBAAM,CAAC;wBACN,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;wBACnB,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;oBACrB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACnB,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACjC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAErD,gCAAgC;IAChC,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/B,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;IACH,CAAC,EAAE,OAAO,CAAC,CAAC;IAEZ,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,MAAM,GAAG,GAAG,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrC,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,OAAO,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACrC,CAAC;AAYD,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,QAAiB;IACnE,sBAAsB;IACtB,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,MAAM,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAG,WAAW;YACpB,KAAK,EAAI,MAAM;YACf,MAAM,EAAG,KAAK;YACd,OAAO,EAAE,kBAAkB,QAAQ,wBAAwB;SAC5D,CAAC;IACJ,CAAC;IAED,8CAA8C;IAC9C,MAAM,SAAS,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAClD,IAAI,SAAS,EAAE,CAAC;QACd,OAAO;YACL,MAAM,EAAG,iBAAiB;YAC1B,KAAK,EAAI,SAAS;YAClB,MAAM,EAAG,cAAc;YACvB,OAAO,EAAE,kBAAkB,QAAQ,kCAAkC;SACtE,CAAC;IACJ,CAAC;IAED,gDAAgD;IAChD,MAAM,IAAI,GAAG,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACxD,OAAO;QACL,MAAM,EAAG,gBAAgB;QACzB,GAAG,EAAM,oBAAoB,IAAI,EAAE;QACnC,OAAO,EAAE,yBAAyB,IAAI,2BAA2B,QAAQ,+EAA+E;KACzJ,CAAC;AACJ,CAAC"}

package/dist/keychain-tool.d.ts

@@ -0,0 +1,3 @@
+export declare function keychainGetCredential(platform: string, label?: string): Promise<string | null>;
+export declare function keychainAction(action: string, args: Record<string, unknown>): Promise<unknown>;
+//# sourceMappingURL=keychain-tool.d.ts.map