@zoer7788/mcp-nexus-node 0.1.2 → 0.1.3

package/README.md

@@ -30,6 +30,6 @@ mcp-nexus serve
 mcp-nexus status
 ```
 
-DevSpace is installed as a package dependency. `cloudflared` must be available on
-the remote machine. `mcp-nexus pair` creates the control tunnel automatically
-when Cloudflare auth is present at `~/.cloudflared/cert.pem`.
+DevSpace is installed as a package dependency. `mcp-nexus pair` auto-downloads
+`cloudflared` on Linux x64/arm64 when missing. If Cloudflare is not authorized
+yet, `pair` starts the login flow first.

package/cli.js

@@ -14,6 +14,7 @@ const configPath = join(stateDir, "config.json");
 const projectsPath = join(stateDir, "projects.json");
 const tokensPath = join(stateDir, "tokens.json");
 const logDir = join(stateDir, "logs");
+const binDir = join(stateDir, "bin");
 const nodeIdPath = join(stateDir, "node-id");
 const packageDir = dirname(fileURLToPath(import.meta.url));
 const require = createRequire(import.meta.url);
@@ -21,6 +22,7 @@ const require = createRequire(import.meta.url);
 function ensureState() {
   mkdirSync(stateDir, { recursive: true });
   mkdirSync(logDir, { recursive: true });
+  mkdirSync(binDir, { recursive: true });
   if (!existsSync(projectsPath)) saveJson(projectsPath, []);
   if (!existsSync(tokensPath)) saveJson(tokensPath, { adminToken: randomHex(32) });
   if (!existsSync(configPath)) saveJson(configPath, {
@@ -89,7 +91,11 @@ function run(cmd, args, options = {}) {
 }
 
 function commandExists(cmd) {
-  return spawnSync("sh", ["-lc", `command -v ${quote(cmd)}`], { encoding: "utf8" }).status === 0;
+  return Boolean(commandPath(cmd));
+}
+
+function commandPath(cmd) {
+  return spawnSync("sh", ["-lc", `command -v ${quote(cmd)}`], { encoding: "utf8" }).stdout.trim();
 }
 
 function quote(value) {
@@ -125,10 +131,36 @@ function defaultControlHost() {
 }
 
 function findCloudflareTunnel(name) {
-  const list = spawnSync("cloudflared", ["tunnel", "list"], { encoding: "utf8" }).stdout || "";
+  const list = spawnSync(cloudflaredCommand(), ["tunnel", "list"], { encoding: "utf8" }).stdout || "";
   return list.split("\n").map((line) => line.trim().split(/\s+/)).find((cols) => cols[1] === name)?.[0] || "";
 }
 
+function cloudflaredDownloadUrl() {
+  if (process.platform === "linux" && process.arch === "x64") return "https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-amd64";
+  if (process.platform === "linux" && process.arch === "arm64") return "https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-arm64";
+  throw new Error(`cloudflared auto-install is only supported on Linux x64/arm64, got ${process.platform}/${process.arch}`);
+}
+
+function cloudflaredCommand() {
+  const installed = commandPath("cloudflared");
+  if (installed) return installed;
+  const local = join(binDir, "cloudflared");
+  if (existsSync(local)) return local;
+  ensureState();
+  console.log("Installing cloudflared...");
+  run("sh", ["-lc", `curl -L --fail -o ${quote(local)} ${quote(cloudflaredDownloadUrl())} && chmod +x ${quote(local)}`]);
+  return local;
+}
+
+function ensureCloudflareAuth() {
+  const certFile = join(home, ".cloudflared", "cert.pem");
+  if (existsSync(certFile)) return;
+  console.log("Cloudflare authorization required. Opening login flow...");
+  const out = spawnSync(cloudflaredCommand(), ["tunnel", "login"], { stdio: "inherit" });
+  if (out.status !== 0) throw new Error("cloudflared tunnel login failed");
+  if (!existsSync(certFile)) throw new Error(`cloudflared login did not create ${certFile}`);
+}
+
 function json(res, status, body) {
   res.writeHead(status, {
     "content-type": "application/json; charset=utf-8",
@@ -168,7 +200,8 @@ function devspaceCommand() {
 
 function ensureTooling() {
   devspaceCommand();
-  if (!commandExists("cloudflared")) throw new Error("cloudflared command not found");
+  cloudflaredCommand();
+  ensureCloudflareAuth();
 }
 
 function projectStatus(project) {
@@ -204,12 +237,12 @@ function setupProject(input) {
   const existing = findCloudflareTunnel(tunnelName);
   if (existing) tunnelId = existing;
   else {
-    const created = run("cloudflared", ["tunnel", "create", tunnelName]);
+    const created = run(cloudflaredCommand(), ["tunnel", "create", tunnelName]);
     tunnelId = (created.match(/[0-9a-f-]{36}/) || [])[0] || "";
     if (!tunnelId) throw new Error(`could not read tunnel id: ${created}`);
   }
 
-  run("cloudflared", ["tunnel", "route", "dns", tunnelName, hostnameValue]);
+  run(cloudflaredCommand(), ["tunnel", "route", "dns", tunnelName, hostnameValue]);
   const cfDir = join(home, ".cloudflared");
   const cfConfig = join(cfDir, `${subdomain}-config.yml`);
   const credFile = join(cfDir, `${tunnelId}.json`);
@@ -267,10 +300,8 @@ function setupProject(input) {
 
 function setupControl(hostnameValue) {
   ensureState();
-  if (!commandExists("cloudflared")) throw new Error("cloudflared command not found");
   const cfDir = join(home, ".cloudflared");
-  const certFile = join(cfDir, "cert.pem");
-  if (!existsSync(certFile)) throw new Error(`cloudflared is not logged in: ${certFile} not found`);
+  ensureCloudflareAuth();
   const host = String(hostnameValue || "").trim().toLowerCase();
   if (!/^[a-z0-9.-]+$/.test(host) || !host.includes(".")) throw new Error("usage: mcp-nexus setup-control <hostname>");
 
@@ -278,11 +309,11 @@ function setupControl(hostnameValue) {
   const tunnelName = `mcp-nexus-${sanitize(host)}-control`;
   let tunnelId = findCloudflareTunnel(tunnelName);
   if (!tunnelId) {
-    const created = run("cloudflared", ["tunnel", "create", tunnelName]);
+    const created = run(cloudflaredCommand(), ["tunnel", "create", tunnelName]);
     tunnelId = (created.match(/[0-9a-f-]{36}/) || [])[0] || "";
     if (!tunnelId) throw new Error(`could not read tunnel id: ${created}`);
   }
-  run("cloudflared", ["tunnel", "route", "dns", tunnelName, host]);
+  run(cloudflaredCommand(), ["tunnel", "route", "dns", tunnelName, host]);
 
   const cfConfig = join(cfDir, `${tunnelName}.yml`);
   const credFile = join(cfDir, `${tunnelId}.json`);
@@ -297,7 +328,7 @@ function setupControl(hostnameValue) {
     "",
   ].join("\n"));
 
-  const child = spawn("cloudflared", ["tunnel", "--protocol", "http2", "--config", cfConfig, "run"], {
+  const child = spawn(cloudflaredCommand(), ["tunnel", "--protocol", "http2", "--config", cfConfig, "run"], {
     detached: true,
     stdio: ["ignore", "ignore", "ignore"],
   });
@@ -339,7 +370,7 @@ function startProject(name) {
     DEVSPACE_CONFIG_DIR: project.config_dir,
   }, `${name}.out`);
   if (project.cloudflare_config) {
-    project.cloudflaredPid = spawnLogged(project, "cloudflared", ["tunnel", "--protocol", "http2", "--config", project.cloudflare_config, "run"], {}, `${name}-cloudflared.out`);
+    project.cloudflaredPid = spawnLogged(project, cloudflaredCommand(), ["tunnel", "--protocol", "http2", "--config", project.cloudflare_config, "run"], {}, `${name}-cloudflared.out`);
   }
   saveProjects(items);
   return projectStatus(project);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zoer7788/mcp-nexus-node",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Remote node for MCP Nexus pairing and DevSpace project control.",
   "license": "MIT",
   "type": "module",