albert-heijn-mcp 1.3.0

package/dist/ahapi/shoppingList.js

@@ -0,0 +1,58 @@
+/** Shopping list (boodschappenlijst). Returns "Server in order mode" while a delivery order is active. */
+const SHOPPING_LIST_PATH = "/mobile-services/shoppinglist/v2/items";
+/** Reports whether err is the "Server in order mode" response. */
+export function isOrderMode(err) {
+    return err instanceof Error && err.message.includes("Server in order mode");
+}
+export async function getShoppingList(c) {
+    const res = await c.request(SHOPPING_LIST_PATH);
+    return (res.items ?? []).map((it) => {
+        const product = it.productDetails?.product;
+        return {
+            productId: product?.webshopId ?? 0,
+            name: product?.title || it.description || "",
+            quantity: it.quantity,
+            position: it.position,
+            checked: it.strikedthrough ?? false,
+            raw: { type: it.type, originCode: it.originCode, description: it.description },
+        };
+    });
+}
+function patchShoppingList(c, items) {
+    return c.request(SHOPPING_LIST_PATH, { method: "PATCH", body: { items } });
+}
+/**
+ * Adds products (product ID → units to add). The PATCH sets quantities rather
+ * than adding to them, so products already on the list are sent with their
+ * current quantity plus the units added.
+ */
+export async function addProductsToShoppingList(c, quantities) {
+    const current = new Map((await getShoppingList(c)).filter((it) => it.productId).map((it) => [it.productId, it.quantity]));
+    const items = [...quantities].map(([productId, quantity]) => ({
+        description: "",
+        productId,
+        quantity: (current.get(productId) ?? 0) + quantity,
+        type: "SHOPPABLE",
+        originCode: "PRD",
+        strikeThrough: false,
+    }));
+    return patchShoppingList(c, items);
+}
+/** Adds a free-text item. AH stores free-text items with quantity 1 and ignores other quantities. */
+export function addTextToShoppingList(c, text) {
+    return patchShoppingList(c, [{ description: text, quantity: 1, type: "SHOPPABLE", originCode: "PRD", strikeThrough: false }]);
+}
+/** Removes items from getShoppingList by setting their quantity to 0. */
+export function removeFromShoppingList(c, items) {
+    return patchShoppingList(c, items.map((it) => ({
+        // AH matches product items by productId and free-text items by description.
+        // GET omits type and originCode; use the values sent when adding.
+        description: it.raw.description || it.name,
+        ...(it.productId ? { productId: it.productId } : {}),
+        quantity: 0,
+        type: it.raw.type || "SHOPPABLE",
+        originCode: it.raw.originCode || "PRD",
+        strikeThrough: false,
+    })));
+}
+//# sourceMappingURL=shoppingList.js.map

package/dist/ahapi/shoppingList.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shoppingList.js","sourceRoot":"","sources":["../../src/ahapi/shoppingList.ts"],"names":[],"mappings":"AAEA,0GAA0G;AAC1G,MAAM,kBAAkB,GAAG,wCAAwC,CAAC;AAepE,kEAAkE;AAClE,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,OAAO,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,CAAW;IAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,OAAO,CAUxB,kBAAkB,CAAC,CAAC;IACvB,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;QAClC,MAAM,OAAO,GAAG,EAAE,CAAC,cAAc,EAAE,OAAO,CAAC;QAC3C,OAAO;YACL,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,CAAC;YAClC,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW,IAAI,EAAE;YAC5C,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,OAAO,EAAE,EAAE,CAAC,cAAc,IAAI,KAAK;YACnC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE;SAC/E,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAYD,SAAS,iBAAiB,CAAC,CAAW,EAAE,KAAsB;IAC5D,OAAO,CAAC,CAAC,OAAO,CAAO,kBAAkB,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;AACnF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,CAAW,EAAE,UAA+B;IAC1F,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC1H,MAAM,KAAK,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5D,WAAW,EAAE,EAAE;QACf,SAAS;QACT,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,QAAQ;QAClD,IAAI,EAAE,WAAW;QACjB,UAAU,EAAE,KAAK;QACjB,aAAa,EAAE,KAAK;KACrB,CAAC,CAAC,CAAC;IACJ,OAAO,iBAAiB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,qBAAqB,CAAC,CAAW,EAAE,IAAY;IAC7D,OAAO,iBAAiB,CAAC,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAChI,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,sBAAsB,CAAC,CAAW,EAAE,KAAiB;IACnE,OAAO,iBAAiB,CACtB,CAAC,EACD,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACjB,4EAA4E;QAC5E,kEAAkE;QAClE,WAAW,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,IAAI;QAC1C,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,QAAQ,EAAE,CAAC;QACX,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,WAAW;QAChC,UAAU,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,IAAI,KAAK;QACtC,aAAa,EAAE,KAAK;KACrB,CAAC,CAAC,CACJ,CAAC;AACJ,CAAC"}

package/dist/ahapi/stores.js

@@ -0,0 +1,35 @@
+/** Stores nearest to a Dutch postal code. */
+export async function searchStores(c, postalCode) {
+    const query = `query SearchStores($filter: StoresFilterInput) {
+  storesSearch(filter: $filter, limit: 5) {
+    result { id name storeType address { street houseNumber postalCode city } }
+  }
+}`;
+    const data = await c.graphql(query, { filter: { postalCode } });
+    return data.storesSearch.result ?? [];
+}
+export async function getBargains(c, storeId) {
+    const query = `query Bargains($storeId: String!) {
+  bargainItems(storeId: $storeId) {
+    product { id title brand }
+    categoryTitle
+    stock
+    markdown { markdownType markdownExpirationDate markdownPercentage }
+    bargainPrice { priceWas priceNow }
+  }
+}`;
+    const data = await c.graphql(query, { storeId: String(storeId) });
+    return (data.bargainItems ?? []).map((b) => ({
+        productId: b.product.id,
+        title: b.product.title,
+        brand: b.product.brand,
+        category: b.categoryTitle,
+        markdownType: b.markdown?.markdownType,
+        discount: b.markdown?.markdownPercentage,
+        expirationDate: b.markdown?.markdownExpirationDate,
+        stock: b.stock,
+        priceWas: b.bargainPrice?.priceWas,
+        priceNow: b.bargainPrice?.priceNow,
+    }));
+}
+//# sourceMappingURL=stores.js.map

package/dist/ahapi/stores.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stores.js","sourceRoot":"","sources":["../../src/ahapi/stores.ts"],"names":[],"mappings":"AASA,6CAA6C;AAC7C,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,CAAW,EAAE,UAAkB;IAChE,MAAM,KAAK,GAAG;;;;EAId,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,OAAO,CAA+C,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IAC9G,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,IAAI,EAAE,CAAC;AACxC,CAAC;AAiBD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,CAAW,EAAE,OAAe;IAC5D,MAAM,KAAK,GAAG;;;;;;;;EAQd,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,OAAO,CAQzB,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxC,OAAO,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3C,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE;QACvB,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK;QACtB,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK;QACtB,QAAQ,EAAE,CAAC,CAAC,aAAa;QACzB,YAAY,EAAE,CAAC,CAAC,QAAQ,EAAE,YAAY;QACtC,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,kBAAkB;QACxC,cAAc,EAAE,CAAC,CAAC,QAAQ,EAAE,sBAAsB;QAClD,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,QAAQ,EAAE,CAAC,CAAC,YAAY,EAAE,QAAQ;QAClC,QAAQ,EAAE,CAAC,CAAC,YAAY,EAAE,QAAQ;KACnC,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/auth/login.js

@@ -0,0 +1,15 @@
+/** code=... in a pasted URL or console line. */
+const CODE_PARAM = /[?&]code=([A-Za-z0-9._~-]+)/;
+/** A bare code. */
+const BARE_CODE = /^[A-Za-z0-9._~-]{8,}$/;
+/** Extracts the login code from the pasted redirect link, console line, or bare code. */
+export function extractCode(input) {
+    const trimmed = input.trim();
+    const match = CODE_PARAM.exec(trimmed);
+    if (match?.[1])
+        return match[1];
+    if (BARE_CODE.test(trimmed))
+        return trimmed;
+    throw new Error("no login code found: paste the appie://login-exit?code=... link or the code itself");
+}
+//# sourceMappingURL=login.js.map

package/dist/auth/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/auth/login.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,MAAM,UAAU,GAAG,6BAA6B,CAAC;AACjD,mBAAmB;AACnB,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAE1C,yFAAyF;AACzF,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC5C,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;AACxG,CAAC"}

package/dist/auth/session.js

@@ -0,0 +1,125 @@
+import { rm } from "node:fs/promises";
+import { AhClient, ContextError, exchangeCode, hasStatus, refreshToken, wrapError } from "../ahapi/index.js";
+import { loadTokens, saveTokens, toTokenFile, withFileLock } from "./tokens.js";
+/** Refresh this long before the access token expires. */
+const REFRESH_MARGIN_MS = 60_000;
+/** No tokens are stored. */
+export class NotLoggedInError extends Error {
+    constructor() {
+        super("not logged in");
+        this.name = "NotLoggedInError";
+    }
+    logText() {
+        return this.message;
+    }
+}
+/** AH rejected the stored refresh token (expired or revoked): the user must log in again. */
+export class SessionExpiredError extends ContextError {
+    constructor(cause) {
+        super("token refresh failed; log in again", cause);
+        this.name = "SessionExpiredError";
+    }
+}
+function expiresSoon(tf) {
+    // No refresh if AH sent no lifetime: NaN compares false.
+    return Date.parse(tf.expires_at ?? "") - Date.now() < REFRESH_MARGIN_MS;
+}
+/**
+ * Login session: stored tokens and API clients built from them.
+ *
+ * Token writes are serialised, within this process and across all processes
+ * sharing the tokens file: refresh tokens rotate, so parallel refreshes would
+ * race, and a pending refresh must not undo a logout or login.
+ * Tokens are re-read on every call to pick up refreshes by other processes.
+ */
+export class Session {
+    tokensPath;
+    #lock = Promise.resolve();
+    constructor(tokensPath) {
+        this.tokensPath = tokensPath;
+    }
+    #withLock(fn) {
+        const locked = () => withFileLock(this.tokensPath, fn);
+        const run = this.#lock.then(locked, locked);
+        this.#lock = run.catch(() => { });
+        return run;
+    }
+    /** Reports whether a refresh token is stored. */
+    async isAuthenticated() {
+        try {
+            return Boolean((await loadTokens(this.tokensPath))?.refresh_token);
+        }
+        catch {
+            return false;
+        }
+    }
+    /** Returns an authenticated client, refreshing the token first if it expires soon. */
+    async client() {
+        // Lock only to refresh: another process may have refreshed meanwhile, so re-check.
+        const tf = await this.#requireTokens();
+        if (!expiresSoon(tf))
+            return new AhClient(tf.access_token);
+        return this.#withLock(async () => {
+            let fresh = await this.#requireTokens();
+            if (expiresSoon(fresh))
+                fresh = await this.#refresh(fresh);
+            return new AhClient(fresh.access_token);
+        });
+    }
+    /** After AH rejected staleAccessToken: refreshes (unless already replaced) and returns a new client. */
+    refreshAfterRejection(staleAccessToken) {
+        return this.#withLock(async () => {
+            let tf = await this.#requireTokens();
+            if (tf.access_token === staleAccessToken)
+                tf = await this.#refresh(tf);
+            return new AhClient(tf.access_token);
+        });
+    }
+    async #requireTokens() {
+        const tf = await loadTokens(this.tokensPath);
+        if (!tf?.refresh_token)
+            throw new NotLoggedInError();
+        return tf;
+    }
+    async #refresh(tf) {
+        let tok;
+        try {
+            tok = await refreshToken(new AhClient(), tf.refresh_token);
+        }
+        catch (err) {
+            // 400/401 mean the refresh token is no good; anything else may be temporary.
+            throw hasStatus(err, 400) || hasStatus(err, 401) ? new SessionExpiredError(err) : wrapError("token refresh failed", err);
+        }
+        const next = toTokenFile(tok);
+        await saveTokens(this.tokensPath, next);
+        return next;
+    }
+    /** Exchanges a login code for tokens and saves them. */
+    completeLogin(code) {
+        return this.#withLock(async () => {
+            let tok;
+            try {
+                tok = await exchangeCode(new AhClient(), code);
+            }
+            catch (err) {
+                throw wrapError("exchange code (codes are single-use and expire quickly; log in again for a new one)", err);
+            }
+            await saveTokens(this.tokensPath, toTokenFile(tok));
+        });
+    }
+    /** Deletes the tokens file, even if corrupt. Returns whether it existed. */
+    logout() {
+        return this.#withLock(async () => {
+            try {
+                await rm(this.tokensPath);
+                return true;
+            }
+            catch (err) {
+                if (err.code === "ENOENT")
+                    return false;
+                throw wrapError("remove tokens", err);
+            }
+        });
+    }
+}
+//# sourceMappingURL=session.js.map

package/dist/auth/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/auth/session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE7G,OAAO,EAAE,UAAU,EAAE,UAAU,EAAkB,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhG,yDAAyD;AACzD,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAEjC,4BAA4B;AAC5B,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC;QACE,KAAK,CAAC,eAAe,CAAC,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF;AAED,6FAA6F;AAC7F,MAAM,OAAO,mBAAoB,SAAQ,YAAY;IACnD,YAAY,KAAc;QACxB,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,SAAS,WAAW,CAAC,EAAa;IAChC,yDAAyD;IACzD,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,iBAAiB,CAAC;AAC1E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,OAAO;IACT,UAAU,CAAS;IAC5B,KAAK,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAE5C,YAAY,UAAkB;QAC5B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,SAAS,CAAI,EAAoB;QAC/B,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACjC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,eAAe;QACnB,IAAI,CAAC;YACH,OAAO,OAAO,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,sFAAsF;IACtF,KAAK,CAAC,MAAM;QACV,mFAAmF;QACnF,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QACvC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,QAAQ,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YAC/B,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YACxC,IAAI,WAAW,CAAC,KAAK,CAAC;gBAAE,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC3D,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,wGAAwG;IACxG,qBAAqB,CAAC,gBAAwB;QAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YAC/B,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YACrC,IAAI,EAAE,CAAC,YAAY,KAAK,gBAAgB;gBAAE,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACvE,OAAO,IAAI,QAAQ,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,CAAC,EAAE,EAAE,aAAa;YAAE,MAAM,IAAI,gBAAgB,EAAE,CAAC;QACrD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAa;QAC1B,IAAI,GAAG,CAAC;QACR,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,YAAY,CAAC,IAAI,QAAQ,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,6EAA6E;YAC7E,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;QAC3H,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,wDAAwD;IACxD,aAAa,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YAC/B,IAAI,GAAG,CAAC;YACR,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,YAAY,CAAC,IAAI,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;YACjD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,SAAS,CAAC,qFAAqF,EAAE,GAAG,CAAC,CAAC;YAC9G,CAAC;YACD,MAAM,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,MAAM;QACJ,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YAC/B,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC1B,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,KAAK,CAAC;gBACnE,MAAM,SAAS,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;YACxC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/auth/tokens.js

@@ -0,0 +1,132 @@
+import { randomUUID } from "node:crypto";
+import { link, mkdir, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+/** <user config dir>/albert-heijn-mcp/tokens.json, per OS convention. */
+export function defaultTokensPath() {
+    let configDir;
+    if (process.platform === "darwin") {
+        configDir = join(homedir(), "Library", "Application Support");
+    }
+    else if (process.platform === "win32") {
+        configDir = process.env.APPDATA ?? join(homedir(), "AppData", "Roaming");
+    }
+    else {
+        configDir = process.env.XDG_CONFIG_HOME || join(homedir(), ".config");
+    }
+    return join(configDir, "albert-heijn-mcp", "tokens.json");
+}
+/** Token response → file format. */
+export function toTokenFile(t) {
+    const tf = { access_token: t.access_token, refresh_token: t.refresh_token };
+    if (t.expires_in)
+        tf.expires_at = new Date(Date.now() + t.expires_in * 1000).toISOString();
+    return tf;
+}
+/** Returns undefined if the file does not exist. */
+export async function loadTokens(path) {
+    let data;
+    try {
+        data = await readFile(path, "utf8");
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return undefined;
+        throw err;
+    }
+    return JSON.parse(data);
+}
+/** Writes atomically with mode 0600. */
+export async function saveTokens(path, tf) {
+    await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+    const tmp = `${path}.${process.pid}.tmp`;
+    await writeFile(tmp, JSON.stringify(tf, null, 2), { mode: 0o600 });
+    try {
+        await rename(tmp, path);
+    }
+    catch (err) {
+        await rm(tmp, { force: true });
+        throw err;
+    }
+}
+/** A lock older than this is from a crashed process (a refresh request times out after 30 s). */
+const LOCK_STALE_MS = 60_000;
+const LOCK_WAIT_MS = 70_000;
+/**
+ * Runs fn holding an exclusive lock on the tokens file, shared by all albert-heijn-mcp
+ * processes using it. Refresh tokens rotate, so two processes must not refresh at once.
+ * The lock file holds a random ID that identifies its owner (inode numbers get reused).
+ */
+export async function withFileLock(path, fn) {
+    const lock = `${path}.lock`;
+    const id = randomUUID();
+    await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+    const deadline = Date.now() + LOCK_WAIT_MS;
+    for (;;) {
+        try {
+            await writeFile(lock, id, { flag: "wx", mode: 0o600 });
+            break;
+        }
+        catch (err) {
+            if (err.code !== "EEXIST")
+                throw err;
+            if (await removeIfStale(lock))
+                continue;
+            if (Date.now() > deadline)
+                throw new Error(`timed out waiting for ${lock}`);
+            await new Promise((resolve) => setTimeout(resolve, 50));
+        }
+    }
+    try {
+        return await fn();
+    }
+    finally {
+        // Delete the lock only if it is still ours (not taken over as stale).
+        if ((await readLockId(lock)) === id)
+            await rm(lock, { force: true });
+    }
+}
+/** The lock's owner ID; undefined if the lock is gone, null if it can't be read. */
+async function readLockId(lock) {
+    try {
+        return await readFile(lock, "utf8");
+    }
+    catch (err) {
+        return err.code === "ENOENT" ? undefined : null;
+    }
+}
+/**
+ * Removes lock if it is stale; returns true if the caller should retry at once.
+ * The lock is first renamed aside, which only one process can do for a given
+ * file. If the file moved is a fresh lock that replaced the stale one in the
+ * meantime (a different owner ID), it is put back.
+ */
+async function removeIfStale(lock) {
+    // Read the ID before checking the age: a lock that replaced the stale one is
+    // fresh, so its ID is never taken for the stale one's.
+    const staleId = await readLockId(lock);
+    if (staleId === undefined)
+        return true;
+    // Unreadable (e.g. left by another user): treat as held, so the caller waits and times out.
+    if (staleId === null)
+        return false;
+    const seen = await stat(lock).catch(() => undefined);
+    if (!seen)
+        return true;
+    if (Date.now() - seen.mtimeMs <= LOCK_STALE_MS)
+        return false;
+    const aside = `${lock}.${process.pid}.${randomUUID()}`;
+    try {
+        await rename(lock, aside);
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return true;
+        throw err;
+    }
+    if ((await readLockId(aside)) !== staleId)
+        await link(aside, lock).catch(() => { });
+    await rm(aside, { force: true });
+    return true;
+}
+//# sourceMappingURL=tokens.js.map

package/dist/auth/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../src/auth/tokens.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAU1C,yEAAyE;AACzE,MAAM,UAAU,iBAAiB;IAC/B,IAAI,SAAiB,CAAC;IACtB,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;IAChE,CAAC;SAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACxC,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC3E,CAAC;SAAM,CAAC;QACN,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,EAAE,kBAAkB,EAAE,aAAa,CAAC,CAAC;AAC5D,CAAC;AAED,oCAAoC;AACpC,MAAM,UAAU,WAAW,CAAC,CAAQ;IAClC,MAAM,EAAE,GAAc,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC;IACvF,IAAI,CAAC,CAAC,UAAU;QAAE,EAAE,CAAC,UAAU,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3F,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,oDAAoD;AACpD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACvE,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAc,CAAC;AACvC,CAAC;AAED,wCAAwC;AACxC,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,EAAa;IAC1D,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACzC,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/B,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,MAAM,aAAa,GAAG,MAAM,CAAC;AAC7B,MAAM,YAAY,GAAG,MAAM,CAAC;AAE5B;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAI,IAAY,EAAE,EAAoB;IACtE,MAAM,IAAI,GAAG,GAAG,IAAI,OAAO,CAAC;IAC5B,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC;IAC3C,SAAS,CAAC;QACR,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACvD,MAAM;QACR,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC;YAChE,IAAI,MAAM,aAAa,CAAC,IAAI,CAAC;gBAAE,SAAS;YACxC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;YAC5E,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,sEAAsE;QACtE,IAAI,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE;YAAE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAQ,GAA6B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7E,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,6EAA6E;IAC7E,uDAAuD;IACvD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvC,4FAA4F;IAC5F,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,IAAI,aAAa;QAAE,OAAO,KAAK,CAAC;IAC7D,MAAM,KAAK,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,EAAE,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,OAAO;QAAE,MAAM,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnF,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/config.js

@@ -0,0 +1,61 @@
+import { existsSync } from "node:fs";
+import { parseArgs } from "node:util";
+import { defaultTokensPath } from "./auth/tokens.js";
+const TRANSPORTS = ["stdio", "streamable-http"];
+export const USAGE = `Usage: albert-heijn-mcp [--transport stdio|streamable-http] [--remote] [--version] [--help]
+
+  --transport  stdio (default) or streamable-http
+  --remote     don't open a browser on login (also AH_REMOTE=true)
+
+Settings come from environment variables, also read from a .env file in the
+working directory. See README.md.`;
+/** Reads flags and environment variables. */
+export function loadConfig(argv, env = process.env) {
+    const { values } = parseArgs({
+        args: argv,
+        options: {
+            transport: { type: "string", default: "stdio" },
+            remote: { type: "boolean", default: false },
+            version: { type: "boolean", default: false },
+            help: { type: "boolean", short: "h", default: false },
+        },
+        strict: true,
+    });
+    const transport = values.transport;
+    if (!TRANSPORTS.includes(transport)) {
+        throw new Error(`unknown transport "${values.transport}" (use ${TRANSPORTS.join(" or ")})`);
+    }
+    const port = envInt(env, "AH_MCP_PORT", 3000);
+    const baseUrl = env.AH_MCP_BASE_URL || `http://localhost:${port}`;
+    if (!URL.canParse(baseUrl))
+        throw new Error(`AH_MCP_BASE_URL: "${baseUrl}" is not a URL (e.g. https://albert-heijn-mcp.example.com)`);
+    return {
+        transport,
+        remote: values.remote || env.AH_REMOTE === "true",
+        showVersion: values.version,
+        showHelp: values.help,
+        tokensPath: env.AH_TOKENS_PATH || defaultTokensPath(),
+        logFile: env.AH_LOG_FILE || undefined,
+        http: {
+            host: env.AH_MCP_HOST || "127.0.0.1",
+            port,
+            baseUrl,
+            token: env.AH_MCP_TOKEN || undefined,
+        },
+    };
+}
+function envInt(env, key, def) {
+    const v = env[key];
+    if (!v)
+        return def;
+    const n = Number(v);
+    if (!Number.isInteger(n))
+        throw new Error(`${key}: "${v}" is not a number`);
+    return n;
+}
+/** Loads ./.env if present; existing variables take precedence. */
+export function loadDotEnv(path = ".env") {
+    if (existsSync(path))
+        process.loadEnvFile(path);
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,iBAAiB,CAAU,CAAC;AAwBzD,MAAM,CAAC,MAAM,KAAK,GAAG;;;;;;kCAMa,CAAC;AAEnC,6CAA6C;AAC7C,MAAM,UAAU,UAAU,CAAC,IAAc,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG;IAC7E,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC3B,IAAI,EAAE,IAAI;QACV,OAAO,EAAE;YACP,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE;YAC/C,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;YAC3C,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;YAC5C,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;SACtD;QACD,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,MAAM,CAAC,SAAsB,CAAC;IAChD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,CAAC,SAAS,UAAU,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,GAAG,CAAC,eAAe,IAAI,oBAAoB,IAAI,EAAE,CAAC;IAClE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,OAAO,4DAA4D,CAAC,CAAC;IACtI,OAAO;QACL,SAAS;QACT,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,SAAS,KAAK,MAAM;QACjD,WAAW,EAAE,MAAM,CAAC,OAAO;QAC3B,QAAQ,EAAE,MAAM,CAAC,IAAI;QACrB,UAAU,EAAE,GAAG,CAAC,cAAc,IAAI,iBAAiB,EAAE;QACrD,OAAO,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;QACrC,IAAI,EAAE;YACJ,IAAI,EAAE,GAAG,CAAC,WAAW,IAAI,WAAW;YACpC,IAAI;YACJ,OAAO;YACP,KAAK,EAAE,GAAG,CAAC,YAAY,IAAI,SAAS;SACrC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,GAAsB,EAAE,GAAW,EAAE,GAAW;IAC9D,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC;IACnB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC5E,OAAO,CAAC,CAAC;AACX,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,UAAU,CAAC,IAAI,GAAG,MAAM;IACtC,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;AAClD,CAAC"}

package/dist/index.js

@@ -0,0 +1,70 @@
+#!/usr/bin/env node
+// albert-heijn-mcp: a Model Context Protocol server for the Albert Heijn supermarket API.
+import { readFileSync } from "node:fs";
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { Session } from "./auth/session.js";
+import { loadConfig, loadDotEnv, USAGE } from "./config.js";
+import { closeLog, log, logToFile } from "./log.js";
+import { serveHttp } from "./server/http.js";
+import { newToolContext, registerTools } from "./tools/index.js";
+const { version } = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8"));
+/** Shown by clients that display server icons. */
+const ICON = {
+    src: `data:image/png;base64,${readFileSync(new URL("../assets/icon.png", import.meta.url)).toString("base64")}`,
+    mimeType: "image/png",
+    sizes: ["128x128"],
+};
+/** Sent to clients on connect. */
+const INSTRUCTIONS = "When you mention an Albert Heijn product or recipe to the user, link its name to its page: " +
+    "use the url field from the tool result, e.g. [AH Halfvolle melk](https://www.ah.nl/producten/product/wi...).";
+async function main() {
+    loadDotEnv();
+    const cfg = loadConfig(process.argv.slice(2));
+    if (cfg.showHelp) {
+        console.log(USAGE);
+        return;
+    }
+    if (cfg.showVersion) {
+        console.log(`albert-heijn-mcp ${version}`);
+        return;
+    }
+    if (cfg.logFile)
+        await logToFile(cfg.logFile);
+    log.info("albert-heijn-mcp", { version });
+    const ctx = newToolContext(new Session(cfg.tokensPath), cfg.remote);
+    const newServer = () => {
+        const server = new McpServer({ name: "Albert Heijn", version, icons: [ICON] }, { instructions: INSTRUCTIONS });
+        registerTools(server, ctx);
+        return server;
+    };
+    if (cfg.transport === "stdio") {
+        log.info("starting server", { transport: "stdio" });
+        await newServer().connect(new StdioServerTransport());
+        return;
+    }
+    const httpServer = await serveHttp(newServer, cfg.http);
+    const shutdown = () => {
+        log.info("shutting down");
+        httpServer.close(() => exit(0));
+        setTimeout(() => exit(0), 5000).unref();
+    };
+    process.once("SIGTERM", shutdown);
+    process.once("SIGINT", shutdown);
+}
+/** Exits once the log file has the last lines. */
+function exit(code) {
+    void closeLog().then(() => process.exit(code));
+}
+// Node would print these in full, possibly quoting AH's responses; log them safely instead.
+for (const event of ["uncaughtException", "unhandledRejection"]) {
+    process.on(event, (err) => {
+        log.error(event, { err });
+        exit(1);
+    });
+}
+main().catch((err) => {
+    log.error("fatal", { err });
+    exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,0FAA0F;AAE1F,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAE/F,CAAC;AAEF,kDAAkD;AAClD,MAAM,IAAI,GAAG;IACX,GAAG,EAAE,yBAAyB,YAAY,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;IAC/G,QAAQ,EAAE,WAAW;IACrB,KAAK,EAAE,CAAC,SAAS,CAAC;CACnB,CAAC;AAEF,kCAAkC;AAClC,MAAM,YAAY,GAChB,6FAA6F;IAC7F,8GAA8G,CAAC;AAEjH,KAAK,UAAU,IAAI;IACjB,UAAU,EAAE,CAAC;IACb,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,OAAO;QAAE,MAAM,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9C,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAE1C,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,GAAG,EAAE;QACrB,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAC;QAC/G,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC3B,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,IAAI,GAAG,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QAC9B,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QACpD,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC1B,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;IAC1C,CAAC,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAClC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED,kDAAkD;AAClD,SAAS,IAAI,CAAC,IAAY;IACxB,KAAK,QAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,4FAA4F;AAC5F,KAAK,MAAM,KAAK,IAAI,CAAC,mBAAmB,EAAE,oBAAoB,CAAU,EAAE,CAAC;IACzE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,GAAY,EAAE,EAAE;QACjC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1B,IAAI,CAAC,CAAC,CAAC,CAAC;IACV,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC,CAAC,CAAC;AACV,CAAC,CAAC,CAAC"}

package/dist/log.js

@@ -0,0 +1,70 @@
+import { createWriteStream } from "node:fs";
+let file;
+/** Also appends logs to the file at path. */
+export function logToFile(path) {
+    return new Promise((resolve, reject) => {
+        const stream = createWriteStream(path, { flags: "a", mode: 0o600 });
+        stream.once("open", () => {
+            file = stream;
+            resolve();
+        });
+        stream.once("error", reject);
+    });
+}
+/**
+ * err as safe log text: our own messages and AH's status codes, never AH's
+ * response text or other data from outside, which may hold customer data.
+ */
+export function describeError(err) {
+    if (typeof err?.logText === "function")
+        return err.logText();
+    if (!(err instanceof Error))
+        return `non-error value (${typeof err})`;
+    // Plain errors are ours; others (e.g. a JSON parse error) may quote what they failed on.
+    if (err.constructor === Error)
+        return err.message;
+    const code = errorCode(err) ?? errorCode(err.cause);
+    return code ? `${err.name} ${code}` : err.name;
+}
+function errorCode(err) {
+    const code = err?.code;
+    return typeof code === "string" ? code : undefined;
+}
+function format(value) {
+    const s = String(value);
+    return /[\s"=]/.test(s) ? JSON.stringify(s) : s;
+}
+function write(level, msg, attrs) {
+    const parts = [`time=${new Date().toISOString()}`, `level=${level}`, `msg=${format(msg)}`];
+    for (const [key, value] of Object.entries(attrs)) {
+        // Errors, and whatever was thrown under err, are described safely.
+        const safe = value instanceof Error || key === "err" ? describeError(value) : value;
+        if (value !== undefined)
+            parts.push(`${key}=${format(safe)}`);
+    }
+    const line = `${parts.join(" ")}\n`;
+    process.stderr.write(line);
+    file?.write(line);
+}
+let closing;
+/** Flushes and closes the log file, waiting at most 1 s; call before exiting. Every call waits for the same flush. */
+export function closeLog() {
+    closing ??= new Promise((resolve) => {
+        const f = file;
+        file = undefined;
+        if (!f)
+            return resolve();
+        const timer = setTimeout(resolve, 1000);
+        f.end(() => {
+            clearTimeout(timer);
+            resolve();
+        });
+    });
+    return closing;
+}
+export const log = {
+    info: (msg, attrs = {}) => write("INFO", msg, attrs),
+    warn: (msg, attrs = {}) => write("WARN", msg, attrs),
+    error: (msg, attrs = {}) => write("ERROR", msg, attrs),
+};
+//# sourceMappingURL=log.js.map

package/dist/log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.js","sourceRoot":"","sources":["../src/log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAoB,MAAM,SAAS,CAAC;AAO9D,IAAI,IAA6B,CAAC;AAElC,6CAA6C;AAC7C,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;YACvB,IAAI,GAAG,MAAM,CAAC;YACd,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC;AAOD;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,IAAI,OAAQ,GAA+B,EAAE,OAAO,KAAK,UAAU;QAAE,OAAQ,GAAe,CAAC,OAAO,EAAE,CAAC;IACvG,IAAI,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC;QAAE,OAAO,oBAAoB,OAAO,GAAG,GAAG,CAAC;IACtE,yFAAyF;IACzF,IAAI,GAAG,CAAC,WAAW,KAAK,KAAK;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IAClD,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpD,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,MAAM,IAAI,GAAI,GAAsC,EAAE,IAAI,CAAC;IAC3D,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,KAAK,CAAC,KAAY,EAAE,GAAW,EAAE,KAA8B;IACtE,MAAM,KAAK,GAAG,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,SAAS,KAAK,EAAE,EAAE,OAAO,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3F,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,mEAAmE;QACnE,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACpF,IAAI,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;IACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;AACpB,CAAC;AAED,IAAI,OAAkC,CAAC;AAEvC,sHAAsH;AACtH,MAAM,UAAU,QAAQ;IACtB,OAAO,KAAK,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,CAAC,GAAG,IAAI,CAAC;QACf,IAAI,GAAG,SAAS,CAAC;QACjB,IAAI,CAAC,CAAC;YAAE,OAAO,OAAO,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACxC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,IAAI,EAAE,CAAC,GAAW,EAAE,KAAK,GAA4B,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC;IACrF,IAAI,EAAE,CAAC,GAAW,EAAE,KAAK,GAA4B,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC;IACrF,KAAK,EAAE,CAAC,GAAW,EAAE,KAAK,GAA4B,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;CACxF,CAAC"}