@zoer7788/mcp-nexus-node 0.1.0 → 0.1.3

package/README.md

@@ -14,7 +14,6 @@ On `pub-118`:
 
 ```bash
 npm install -g @zoer7788/mcp-nexus-node
-MCP_NEXUS_ADMIN_URL=https://mcpnexus-pub118.omji.top \
 mcp-nexus pair
 ```
 
@@ -31,5 +30,6 @@ mcp-nexus serve
 mcp-nexus status
 ```
 
-DevSpace is installed as a package dependency. `cloudflared` must be available on
-the remote machine before creating public DevSpace projects.
+DevSpace is installed as a package dependency. `mcp-nexus pair` auto-downloads
+`cloudflared` on Linux x64/arm64 when missing. If Cloudflare is not authorized
+yet, `pair` starts the login flow first.

package/cli.js

@@ -14,6 +14,7 @@ const configPath = join(stateDir, "config.json");
 const projectsPath = join(stateDir, "projects.json");
 const tokensPath = join(stateDir, "tokens.json");
 const logDir = join(stateDir, "logs");
+const binDir = join(stateDir, "bin");
 const nodeIdPath = join(stateDir, "node-id");
 const packageDir = dirname(fileURLToPath(import.meta.url));
 const require = createRequire(import.meta.url);
@@ -21,6 +22,7 @@ const require = createRequire(import.meta.url);
 function ensureState() {
   mkdirSync(stateDir, { recursive: true });
   mkdirSync(logDir, { recursive: true });
+  mkdirSync(binDir, { recursive: true });
   if (!existsSync(projectsPath)) saveJson(projectsPath, []);
   if (!existsSync(tokensPath)) saveJson(tokensPath, { adminToken: randomHex(32) });
   if (!existsSync(configPath)) saveJson(configPath, {
@@ -63,6 +65,11 @@ function config() {
   };
 }
 
+function saveConfigPatch(patch) {
+  ensureState();
+  saveJson(configPath, { ...loadJson(configPath, {}), ...patch });
+}
+
 function tokens() {
   ensureState();
   return loadJson(tokensPath, {});
@@ -84,7 +91,11 @@ function run(cmd, args, options = {}) {
 }
 
 function commandExists(cmd) {
-  return spawnSync("sh", ["-lc", `command -v ${quote(cmd)}`], { encoding: "utf8" }).status === 0;
+  return Boolean(commandPath(cmd));
+}
+
+function commandPath(cmd) {
+  return spawnSync("sh", ["-lc", `command -v ${quote(cmd)}`], { encoding: "utf8" }).stdout.trim();
 }
 
 function quote(value) {
@@ -113,6 +124,43 @@ function adminUrl() {
   return cfg.adminUrl || `http://${localIp()}:${cfg.port || 9876}`;
 }
 
+function defaultControlHost() {
+  const cfg = config();
+  const id = readFileSync(nodeIdPath, "utf8").trim().slice(0, 8);
+  return `mcpnexus-${sanitize(hostname()).slice(0, 24)}-${id}.${cfg.baseDomain || "omji.top"}`;
+}
+
+function findCloudflareTunnel(name) {
+  const list = spawnSync(cloudflaredCommand(), ["tunnel", "list"], { encoding: "utf8" }).stdout || "";
+  return list.split("\n").map((line) => line.trim().split(/\s+/)).find((cols) => cols[1] === name)?.[0] || "";
+}
+
+function cloudflaredDownloadUrl() {
+  if (process.platform === "linux" && process.arch === "x64") return "https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-amd64";
+  if (process.platform === "linux" && process.arch === "arm64") return "https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-arm64";
+  throw new Error(`cloudflared auto-install is only supported on Linux x64/arm64, got ${process.platform}/${process.arch}`);
+}
+
+function cloudflaredCommand() {
+  const installed = commandPath("cloudflared");
+  if (installed) return installed;
+  const local = join(binDir, "cloudflared");
+  if (existsSync(local)) return local;
+  ensureState();
+  console.log("Installing cloudflared...");
+  run("sh", ["-lc", `curl -L --fail -o ${quote(local)} ${quote(cloudflaredDownloadUrl())} && chmod +x ${quote(local)}`]);
+  return local;
+}
+
+function ensureCloudflareAuth() {
+  const certFile = join(home, ".cloudflared", "cert.pem");
+  if (existsSync(certFile)) return;
+  console.log("Cloudflare authorization required. Opening login flow...");
+  const out = spawnSync(cloudflaredCommand(), ["tunnel", "login"], { stdio: "inherit" });
+  if (out.status !== 0) throw new Error("cloudflared tunnel login failed");
+  if (!existsSync(certFile)) throw new Error(`cloudflared login did not create ${certFile}`);
+}
+
 function json(res, status, body) {
   res.writeHead(status, {
     "content-type": "application/json; charset=utf-8",
@@ -152,7 +200,8 @@ function devspaceCommand() {
 
 function ensureTooling() {
   devspaceCommand();
-  if (!commandExists("cloudflared")) throw new Error("cloudflared command not found");
+  cloudflaredCommand();
+  ensureCloudflareAuth();
 }
 
 function projectStatus(project) {
@@ -168,7 +217,10 @@ function setupProject(input) {
   const name = String(input.name || "").trim();
   const root = String(input.root || input.path || "").trim();
   if (!name || !root) throw new Error("name and root are required");
-  if (!existsSync(root)) throw new Error(`root not found: ${root}`);
+  if (!existsSync(root)) {
+    if (input.createRoot) mkdirSync(root, { recursive: true });
+    else throw new Error(`root not found: ${root}`);
+  }
   const items = projects();
   if (items.some((p) => p.name === name)) throw new Error(`project already exists: ${name}`);
 
@@ -182,16 +234,15 @@ function setupProject(input) {
   const tunnelName = `devspace-${subdomain}`;
 
   let tunnelId = "";
-  const list = spawnSync("cloudflared", ["tunnel", "list"], { encoding: "utf8" }).stdout || "";
-  const existing = list.split("\n").map((line) => line.trim().split(/\s+/)).find((cols) => cols[1] === tunnelName);
-  if (existing) tunnelId = existing[0];
+  const existing = findCloudflareTunnel(tunnelName);
+  if (existing) tunnelId = existing;
   else {
-    const created = run("cloudflared", ["tunnel", "create", tunnelName]);
+    const created = run(cloudflaredCommand(), ["tunnel", "create", tunnelName]);
     tunnelId = (created.match(/[0-9a-f-]{36}/) || [])[0] || "";
     if (!tunnelId) throw new Error(`could not read tunnel id: ${created}`);
   }
 
-  run("cloudflared", ["tunnel", "route", "dns", tunnelName, hostnameValue]);
+  run(cloudflaredCommand(), ["tunnel", "route", "dns", tunnelName, hostnameValue]);
   const cfDir = join(home, ".cloudflared");
   const cfConfig = join(cfDir, `${subdomain}-config.yml`);
   const credFile = join(cfDir, `${tunnelId}.json`);
@@ -243,10 +294,57 @@ function setupProject(input) {
   };
   items.push(project);
   saveProjects(items);
-  startProject(name);
+  if (input.autostart !== false) startProject(name);
   return projectStatus(findProject(name));
 }
 
+function setupControl(hostnameValue) {
+  ensureState();
+  const cfDir = join(home, ".cloudflared");
+  ensureCloudflareAuth();
+  const host = String(hostnameValue || "").trim().toLowerCase();
+  if (!/^[a-z0-9.-]+$/.test(host) || !host.includes(".")) throw new Error("usage: mcp-nexus setup-control <hostname>");
+
+  const cfg = config();
+  const tunnelName = `mcp-nexus-${sanitize(host)}-control`;
+  let tunnelId = findCloudflareTunnel(tunnelName);
+  if (!tunnelId) {
+    const created = run(cloudflaredCommand(), ["tunnel", "create", tunnelName]);
+    tunnelId = (created.match(/[0-9a-f-]{36}/) || [])[0] || "";
+    if (!tunnelId) throw new Error(`could not read tunnel id: ${created}`);
+  }
+  run(cloudflaredCommand(), ["tunnel", "route", "dns", tunnelName, host]);
+
+  const cfConfig = join(cfDir, `${tunnelName}.yml`);
+  const credFile = join(cfDir, `${tunnelId}.json`);
+  writeFileSync(cfConfig, [
+    `tunnel: ${tunnelId}`,
+    `credentials-file: ${credFile}`,
+    "",
+    "ingress:",
+    `  - hostname: ${host}`,
+    `    service: http://127.0.0.1:${cfg.port || 9876}`,
+    "  - service: http_status:404",
+    "",
+  ].join("\n"));
+
+  const child = spawn(cloudflaredCommand(), ["tunnel", "--protocol", "http2", "--config", cfConfig, "run"], {
+    detached: true,
+    stdio: ["ignore", "ignore", "ignore"],
+  });
+  child.unref();
+  saveConfigPatch({ adminUrl: `https://${host}` });
+  console.log(`Admin URL: https://${host}`);
+  console.log(`Control tunnel: ${tunnelName}`);
+  console.log("Next: mcp-nexus pair");
+}
+
+function ensureControl() {
+  const cfg = config();
+  if (cfg.adminUrl || process.env.MCP_NEXUS_ADMIN_URL) return;
+  setupControl(defaultControlHost());
+}
+
 function spawnLogged(project, cmd, args, env, logName) {
   const logPath = join(logDir, logName);
   const child = spawn(cmd, args, {
@@ -272,7 +370,7 @@ function startProject(name) {
     DEVSPACE_CONFIG_DIR: project.config_dir,
   }, `${name}.out`);
   if (project.cloudflare_config) {
-    project.cloudflaredPid = spawnLogged(project, "cloudflared", ["tunnel", "--protocol", "http2", "--config", project.cloudflare_config, "run"], {}, `${name}-cloudflared.out`);
+    project.cloudflaredPid = spawnLogged(project, cloudflaredCommand(), ["tunnel", "--protocol", "http2", "--config", project.cloudflare_config, "run"], {}, `${name}-cloudflared.out`);
   }
   saveProjects(items);
   return projectStatus(project);
@@ -373,6 +471,7 @@ function startServeDetached() {
 
 async function pair() {
   ensureState();
+  ensureControl();
   const cfg = config();
   const pairCode = String(Math.floor(100000 + Math.random() * 900000));
   const pairingSecret = randomHex(16);
@@ -405,7 +504,8 @@ function status() {
 const command = process.argv[2] || "help";
 if (command === "serve") serve();
 else if (command === "pair") pair().catch((error) => { console.error(error.message); process.exit(1); });
+else if (command === "setup-control") { try { setupControl(process.argv[3]); } catch (error) { console.error(error.message); process.exit(1); } }
 else if (command === "status") status();
 else {
-  console.log("Usage: mcp-nexus <pair|serve|status>");
+  console.log("Usage: mcp-nexus <setup-control|pair|serve|status>");
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zoer7788/mcp-nexus-node",
-  "version": "0.1.0",
+  "version": "0.1.3",
   "description": "Remote node for MCP Nexus pairing and DevSpace project control.",
   "license": "MIT",
   "type": "module",