basecamp-mcp 1.0.4 → 1.1.0

package/README.md

@@ -6,9 +6,13 @@ Model Context Protocol (MCP) server for Basecamp integration. Enables LLMs to in
 
 The Basecamp MCP server requires Node.js 18+ and works with various MCP clients including Claude Code CLI, Claude Desktop, Cursor, VS Code, and others.
 
-### Standard Configuration
+### Prerequisites
 
-The baseline setup applies across most tools:
+You need a Basecamp OAuth app. Register one at [37signals Launchpad](https://launchpad.37signals.com/integrations) with the redirect URI set to `http://localhost:7652/callback`.
+
+### Installation
+
+Add the MCP server to your client with your OAuth credentials:
 
 ```json
 {
@@ -18,114 +22,83 @@ The baseline setup applies across most tools:
       "args": ["-y", "basecamp-mcp@latest"],
       "env": {
         "BASECAMP_CLIENT_ID": "your_client_id",
-        "BASECAMP_CLIENT_SECRET": "your_client_secret",
-        "BASECAMP_REFRESH_TOKEN": "your_refresh_token",
-        "BASECAMP_USER_AGENT": "YourApp (your@email.com)",
-        "BASECAMP_ACCOUNT_ID": "account_id"
+        "BASECAMP_CLIENT_SECRET": "your_client_secret"
       }
     }
   }
 }
 ```
 
-### Installation by Client
-
 **Claude Code CLI:**
 ```bash
 claude mcp add basecamp npx basecamp-mcp@latest \
   -e BASECAMP_CLIENT_ID=your_client_id \
-  -e BASECAMP_CLIENT_SECRET=your_client_secret \
-  -e BASECAMP_REFRESH_TOKEN=your_refresh_token \
-  -e BASECAMP_USER_AGENT="YourApp (your@email.com)" \
-  -e BASECAMP_ACCOUNT_ID=account_id
+  -e BASECAMP_CLIENT_SECRET=your_client_secret
 ```
 
-**Claude Desktop:** Follow the MCP install guide using the standard config above.
+**Claude Desktop:** Follow the MCP install guide using the JSON config above.
 
-**Cursor:** One-click installation available, or manually add configuration through Settings → Tools & Integrations → New MCP Server.
+**Cursor:** Add configuration through Settings → Tools & Integrations → New MCP Server.
 
-**VS Code:** One-click installation provided, or use the CLI:
+**VS Code:**
 ```bash
 code --add-mcp '{"name":"basecamp","command":"npx","args":["-y", "basecamp-mcp@latest"]}'
 ```
 
-**Gemini CLI & Windsurf:** Refer to their respective documentation; use the standard config template.
-
-## Configuration
+### Authentication
 
-The server requires the following environment variables:
+Once the MCP server is running, authenticate using the built-in login tool:
 
-* **`BASECAMP_CLIENT_ID`** — Your Basecamp OAuth client ID
-* **`BASECAMP_CLIENT_SECRET`** — Your Basecamp OAuth client secret
-* **`BASECAMP_REFRESH_TOKEN`** — Your Basecamp refresh token for authentication
-* **`BASECAMP_USER_AGENT`** — Your application identifier (format: YourApp (our@email.com))
-* **`BASECAMP_ACCOUNT_ID`** — Your Basecamp account ID
+1. Call `basecamp_login` — a browser window will open for Basecamp authorization
+2. Authorize the app in your browser
+3. If you have multiple Basecamp accounts, call `basecamp_login` again with the desired `account_id`
+4. Done! Credentials are saved to `~/.config/basecamp-mcp/credentials.json`
 
-### Complete Configuration Example
+Use `basecamp_whoami` to check who you're logged in as, and `basecamp_logout` to remove stored credentials.
 
-```json
-{
-  "mcpServers": {
-    "basecamp": {
-      "command": "npx",
-      "args": ["-y", "basecamp-mcp@latest"],
-      "env": {
-        "BASECAMP_CLIENT_ID": "your_client_id",
-        "BASECAMP_CLIENT_SECRET": "your_client_secret",
-        "BASECAMP_REFRESH_TOKEN": "your_refresh_token",
-        "BASECAMP_USER_AGENT": "YourApp (your@email.com)",
-        "BASECAMP_ACCOUNT_ID": "account_id"
-      }
-    }
-  }
-}
-```
-
-## Usage
-
-### Running the Server
+## Configuration
 
-```bash
-npm start
-```
+The server requires these environment variables:
 
-Or for development with auto-reload:
+* **`BASECAMP_CLIENT_ID`** — Your Basecamp OAuth client ID
+* **`BASECAMP_CLIENT_SECRET`** — Your Basecamp OAuth client secret
 
-```bash
-npm run dev
-```
+## Available Tools
 
-### Available Tools
+### Authentication
+- `basecamp_login` - Authenticate with Basecamp via OAuth browser flow
+- `basecamp_logout` - Remove stored credentials
+- `basecamp_whoami` - Show the currently authenticated user
 
-#### Projects
+### Projects
 - `basecamp_list_projects` - List all accessible projects with optional filtering
 - `basecamp_get_project` - Get detailed project information including dock configuration
 
-#### Messages
+### Messages
 - `basecamp_list_messages` - List messages in a message board with optional filtering
 - `basecamp_list_message_types` - List available message types/categories for a project
 - `basecamp_get_message` - Get single message details
 - `basecamp_create_message` - Create new message with optional category and draft status
 - `basecamp_update_message` - Update message with advanced content editing (supports full replacement, append, prepend, search/replace)
 
-#### TODOs
+### TODOs
 - `basecamp_get_todoset` - Get todo set container with all todo lists
 - `basecamp_list_todos` - List todos in a list with status filtering (active/archived)
 - `basecamp_create_todo` - Create new todo with optional description
 - `basecamp_complete_todo` - Mark todo as complete
 - `basecamp_uncomplete_todo` - Mark todo as incomplete
 
-#### Comments
+### Comments
 - `basecamp_list_comments` - List comments on any resource (works universally on all recording types)
 - `basecamp_create_comment` - Add comment to any resource
 - `basecamp_update_comment` - Update comment with advanced content editing (supports full replacement, append, prepend, search/replace)
 
-#### People
+### People
 - `basecamp_get_me` - Get personal information for the authenticated user
 - `basecamp_list_people` - List all people with optional filtering by name, email, or title
 - `basecamp_get_person` - Get person details
 
-#### Kanban
+### Kanban
 - `basecamp_list_kanban_columns` - List all columns in a kanban board
 - `basecamp_list_kanban_cards` - List cards in a column with steps and assignees
 - `basecamp_get_kanban_card` - Get complete details of a specific card
@@ -133,7 +106,7 @@ npm run dev
 - `basecamp_update_kanban_card` - Update card with advanced content editing (supports full replacement, append, prepend, search/replace, plus title, due date, assignees, notifications, and complete step array management)
 - `basecamp_move_kanban_card` - Move a card to a different column and/or position
 
-#### Activity
+### Activity
 - `basecamp_list_recordings` - Browse recent activity globally or across specific projects, with filtering by type, date range, person, and text search. All filters support multiple values for OR-matching (e.g., multiple project IDs, person IDs, types, or search terms)
 - `basecamp_list_campfire_messages` - Browse chat messages from Campfires with filtering by campfire, person, text content, and date range. All filters support multiple values for OR-matching
 

package/dist/index.d.ts

@@ -1,21 +1,3 @@
 #!/usr/bin/env node
-/**
- * Basecamp MCP Server
- *
- * MCP server for interacting with Basecamp API, providing tools for:
- * - Projects (discovering bucket IDs)
- * - Messages (with patch support for updates)
- * - TODOs (sets, lists, todos)
- * - Comments (universal - work on any resource)
- * - People
- * - Kanban (cards, columns, steps)
- * - Activity (recordings browsing)
- *
- * Environment variables required:
- * - BASECAMP_CLIENT_ID
- * - BASECAMP_CLIENT_SECRET
- * - BASECAMP_REFRESH_TOKEN
- * - BASECAMP_USER_AGENT
- */
 export {};
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;GAiBG"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -1,58 +1,23 @@
 #!/usr/bin/env node
-/**
- * Basecamp MCP Server
- *
- * MCP server for interacting with Basecamp API, providing tools for:
- * - Projects (discovering bucket IDs)
- * - Messages (with patch support for updates)
- * - TODOs (sets, lists, todos)
- * - Comments (universal - work on any resource)
- * - People
- * - Kanban (cards, columns, steps)
- * - Activity (recordings browsing)
- *
- * Environment variables required:
- * - BASECAMP_CLIENT_ID
- * - BASECAMP_CLIENT_SECRET
- * - BASECAMP_REFRESH_TOKEN
- * - BASECAMP_USER_AGENT
- */
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { registerActivityTools } from "./tools/activity.js";
+import { registerAuthTools } from "./tools/auth.js";
 import { registerCommentTools } from "./tools/comments.js";
 import { registerDocumentTools } from "./tools/documents.js";
 import { registerKanbanTools } from "./tools/kanban.js";
 import { registerMessageTools } from "./tools/messages.js";
 import { registerPeopleTools } from "./tools/people.js";
-// Import tool registration functions
 import { registerProjectTools } from "./tools/projects.js";
 import { registerTodoTools } from "./tools/todos.js";
 import { registerUploadTools } from "./tools/uploads.js";
-/**
- * Main server initialization and startup
- */
 async function main() {
-    // Validate required environment variables
-    const requiredEnvVars = [
-        "BASECAMP_CLIENT_ID",
-        "BASECAMP_CLIENT_SECRET",
-        "BASECAMP_REFRESH_TOKEN",
-        "BASECAMP_USER_AGENT",
-    ];
-    const missing = requiredEnvVars.filter((varName) => !process.env[varName]);
-    if (missing.length > 0) {
-        console.error(`ERROR: Missing required environment variables: ${missing.join(", ")}`);
-        console.error("Please set these in your environment or .env file before starting the server.");
-        process.exit(1);
-    }
-    // Create MCP server instance
     const server = new McpServer({
         name: "basecamp-mcp-server",
         version: "1.0.0",
     });
-    // Register all tool categories
     console.error("Registering tools...");
+    registerAuthTools(server);
     registerProjectTools(server);
     registerMessageTools(server);
     registerTodoTools(server);
@@ -63,14 +28,10 @@ async function main() {
     registerDocumentTools(server);
     registerUploadTools(server);
     console.error("Tools registered successfully");
-    // Create stdio transport
     const transport = new StdioServerTransport();
-    // Connect server to transport
     await server.connect(transport);
     console.error("Basecamp MCP server running on stdio");
-    console.error("Waiting for client connection...");
 }
-// Run the server
 main().catch((error) => {
     console.error("Fatal error starting Basecamp MCP server:", error);
     process.exit(1);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,qCAAqC;AACrC,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD;;GAEG;AACH,KAAK,UAAU,IAAI;IACjB,0CAA0C;IAC1C,MAAM,eAAe,GAAG;QACtB,oBAAoB;QACpB,wBAAwB;QACxB,wBAAwB;QACxB,qBAAqB;KACtB,CAAC;IAEF,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CACX,kDAAkD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvE,CAAC;QACF,OAAO,CAAC,KAAK,CACX,+EAA+E,CAChF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,6BAA6B;IAC7B,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,+BAA+B;IAC/B,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACtC,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC7B,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC7B,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1B,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC7B,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC9B,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC9B,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAE/C,yBAAyB;IACzB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAE7C,8BAA8B;IAC9B,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,OAAO,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACtD,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;AACpD,CAAC;AAED,iBAAiB;AACjB,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;IAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,KAAK,UAAU,IAAI;IAClB,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC5B,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,OAAO;KAChB,CAAC,CAAC;IAEH,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACtC,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1B,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC7B,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC7B,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1B,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC7B,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC9B,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC9B,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAE/C,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,OAAO,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;AACvD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACtB,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;IAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC,CAAC,CAAC"}

package/dist/tools/auth.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function registerAuthTools(server: McpServer): void;
+//# sourceMappingURL=auth.d.ts.map

package/dist/tools/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/tools/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAYzE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA2LzD"}

package/dist/tools/auth.js

@@ -0,0 +1,163 @@
+import { z } from "zod";
+import { initializeBasecampClient, clearTokenCache } from "../utils/auth.js";
+import { deleteCredentials, getCredentialsPath, readCredentials, writeCredentials, } from "../utils/credentials.js";
+import { handleBasecampError } from "../utils/errorHandlers.js";
+import { fetchBasecampAccounts, performBasecampOAuthLogin } from "../utils/oauth.js";
+export function registerAuthTools(server) {
+    server.registerTool("basecamp_login", {
+        title: "Login to Basecamp",
+        description: "Authenticate with Basecamp via OAuth. Opens a browser window for authorization. " +
+            "If you have multiple Basecamp accounts, call first without account_id to see the list, " +
+            "then call again with the desired account_id.",
+        inputSchema: {
+            account_id: z
+                .number()
+                .optional()
+                .describe("Basecamp account ID. If omitted and you have multiple accounts, returns the list to choose from."),
+        },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: true,
+        },
+    }, async (params) => {
+        try {
+            const { accessToken, refreshToken } = await performBasecampOAuthLogin();
+            const accounts = await fetchBasecampAccounts(accessToken);
+            if (accounts.length === 0) {
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: "No Basecamp 3 accounts found for this user.",
+                        },
+                    ],
+                };
+            }
+            let accountId;
+            if (params.account_id) {
+                const match = accounts.find((a) => a.id === params.account_id);
+                if (!match) {
+                    return {
+                        content: [
+                            {
+                                type: "text",
+                                text: `Account ID ${params.account_id} not found. Available accounts:\n${formatAccountList(accounts)}`,
+                            },
+                        ],
+                    };
+                }
+                accountId = String(match.id);
+            }
+            else if (accounts.length === 1) {
+                accountId = String(accounts[0].id);
+            }
+            else {
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: `Multiple Basecamp accounts found. Please call basecamp_login again with account_id set to one of:\n${formatAccountList(accounts)}`,
+                        },
+                    ],
+                };
+            }
+            clearTokenCache();
+            await writeCredentials({ refreshToken, accountId });
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `Login successful! Credentials saved to ${getCredentialsPath()}. Account ID: ${accountId}.`,
+                    },
+                ],
+            };
+        }
+        catch (error) {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `Login failed: ${error instanceof Error ? error.message : String(error)}`,
+                    },
+                ],
+            };
+        }
+    });
+    server.registerTool("basecamp_logout", {
+        title: "Logout from Basecamp",
+        description: "Remove stored Basecamp credentials.",
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: true,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
+    }, async () => {
+        clearTokenCache();
+        await deleteCredentials();
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `Logged out. Credentials removed from ${getCredentialsPath()}.`,
+                },
+            ],
+        };
+    });
+    server.registerTool("basecamp_whoami", {
+        title: "Who Am I (Basecamp)",
+        description: "Show the currently authenticated Basecamp user, or indicate if not logged in.",
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
+    }, async () => {
+        const creds = await readCredentials();
+        if (!creds) {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: "Not logged in. Use basecamp_login to authenticate.",
+                    },
+                ],
+            };
+        }
+        try {
+            const client = await initializeBasecampClient();
+            const response = await client.people.me({});
+            if (response.status !== 200 || !response.body) {
+                throw new Error("Failed to get profile");
+            }
+            const me = response.body;
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify({
+                            name: me.name,
+                            email: me.email_address,
+                            title: me.title,
+                            account_id: creds.accountId,
+                        }, null, 2),
+                    },
+                ],
+            };
+        }
+        catch (error) {
+            return {
+                content: [
+                    { type: "text", text: handleBasecampError(error) },
+                ],
+            };
+        }
+    });
+}
+function formatAccountList(accounts) {
+    return accounts.map((a) => `- ${a.name} (id: ${a.id})`).join("\n");
+}
+//# sourceMappingURL=auth.js.map

package/dist/tools/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/tools/auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,wBAAwB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EACN,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,GAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAErF,MAAM,UAAU,iBAAiB,CAAC,MAAiB;IAClD,MAAM,CAAC,YAAY,CAClB,gBAAgB,EAChB;QACC,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EACV,kFAAkF;YAClF,yFAAyF;YACzF,8CAA8C;QAC/C,WAAW,EAAE;YACZ,UAAU,EAAE,CAAC;iBACX,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACR,kGAAkG,CAClG;SACF;QACD,WAAW,EAAE;YACZ,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;SACnB;KACD,EACD,KAAK,EAAE,MAAM,EAAE,EAAE;QAChB,IAAI,CAAC;YACJ,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAClC,MAAM,yBAAyB,EAAE,CAAC;YAEnC,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,WAAW,CAAC,CAAC;YAE1D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,OAAO;oBACN,OAAO,EAAE;wBACR;4BACC,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,6CAA6C;yBACnD;qBACD;iBACD,CAAC;YACH,CAAC;YAED,IAAI,SAAiB,CAAC;YAEtB,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACvB,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAC1B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,UAAU,CACjC,CAAC;gBACF,IAAI,CAAC,KAAK,EAAE,CAAC;oBACZ,OAAO;wBACN,OAAO,EAAE;4BACR;gCACC,IAAI,EAAE,MAAM;gCACZ,IAAI,EAAE,cAAc,MAAM,CAAC,UAAU,oCAAoC,iBAAiB,CAAC,QAAQ,CAAC,EAAE;6BACtG;yBACD;qBACD,CAAC;gBACH,CAAC;gBACD,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC9B,CAAC;iBAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClC,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACpC,CAAC;iBAAM,CAAC;gBACP,OAAO;oBACN,OAAO,EAAE;wBACR;4BACC,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,sGAAsG,iBAAiB,CAAC,QAAQ,CAAC,EAAE;yBACzI;qBACD;iBACD,CAAC;YACH,CAAC;YAED,eAAe,EAAE,CAAC;YAElB,MAAM,gBAAgB,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;YAEpD,OAAO;gBACN,OAAO,EAAE;oBACR;wBACC,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,0CAA0C,kBAAkB,EAAE,iBAAiB,SAAS,GAAG;qBACjG;iBACD;aACD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO;gBACN,OAAO,EAAE;oBACR;wBACC,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,iBAAiB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;qBAC/E;iBACD;aACD,CAAC;QACH,CAAC;IACF,CAAC,CACD,CAAC;IAEF,MAAM,CAAC,YAAY,CAClB,iBAAiB,EACjB;QACC,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,qCAAqC;QAClD,WAAW,EAAE;YACZ,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACpB;KACD,EACD,KAAK,IAAI,EAAE;QACV,eAAe,EAAE,CAAC;QAClB,MAAM,iBAAiB,EAAE,CAAC;QAE1B,OAAO;YACN,OAAO,EAAE;gBACR;oBACC,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,wCAAwC,kBAAkB,EAAE,GAAG;iBACrE;aACD;SACD,CAAC;IACH,CAAC,CACD,CAAC;IAEF,MAAM,CAAC,YAAY,CAClB,iBAAiB,EACjB;QACC,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EACV,+EAA+E;QAChF,WAAW,EAAE;YACZ,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACpB;KACD,EACD,KAAK,IAAI,EAAE;QACV,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAC;QAEtC,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO;gBACN,OAAO,EAAE;oBACR;wBACC,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,oDAAoD;qBAC1D;iBACD;aACD,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,wBAAwB,EAAE,CAAC;YAChD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAE5C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC/C,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC1C,CAAC;YAED,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC;YAEzB,OAAO;gBACN,OAAO,EAAE;oBACR;wBACC,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CACnB;4BACC,IAAI,EAAE,EAAE,CAAC,IAAI;4BACb,KAAK,EAAE,EAAE,CAAC,aAAa;4BACvB,KAAK,EAAE,EAAE,CAAC,KAAK;4BACf,UAAU,EAAE,KAAK,CAAC,SAAS;yBAC3B,EACD,IAAI,EACJ,CAAC,CACD;qBACD;iBACD;aACD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO;gBACN,OAAO,EAAE;oBACR,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE;iBAClD;aACD,CAAC;QACH,CAAC;IACF,CAAC,CACD,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACzB,QAAwC;IAExC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpE,CAAC"}

package/dist/utils/auth.d.ts

@@ -1,24 +1,4 @@
-/**
- * Authentication utilities for Basecamp API
- */
 import { type Client } from "basecamp-client";
-/**
- * Initialize and return an authenticated Basecamp client.
- *
- * Uses environment variables:
- * - BASECAMP_CLIENT_ID
- * - BASECAMP_CLIENT_SECRET
- * - BASECAMP_REFRESH_TOKEN
- * - BASECAMP_USER_AGENT (optional)
- * - BASECAMP_ACCOUNT_ID
- *
- * @param accountId - Basecamp account ID to use for the client
- * @returns Authenticated Basecamp client instance
- * @throws Error if required environment variables are missing or authentication fails
- */
 export declare function initializeBasecampClient(): Promise<Client>;
-/**
- * Clear the cached bearer token (useful for forcing token refresh)
- */
 export declare function clearTokenCache(): void;
 //# sourceMappingURL=auth.d.ts.map

package/dist/utils/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/utils/auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAe,KAAK,MAAM,EAAkB,MAAM,iBAAiB,CAAC;AAK3E;;;;;;;;;;;;;GAaG;AACH,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,MAAM,CAAC,CAwChE;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAEtC"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/utils/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,MAAM,EAAkB,MAAM,iBAAiB,CAAC;AAM3E,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,MAAM,CAAC,CAqBhE;AAED,wBAAgB,eAAe,IAAI,IAAI,CAEtC"}

package/dist/utils/auth.js

@@ -1,61 +1,25 @@
-/**
- * Authentication utilities for Basecamp API
- */
 import { buildClient, getBearerToken } from "basecamp-client";
-/** Cached bearer token to avoid repeated OAuth requests */
+import { readCredentials } from "./credentials.js";
+import { getClientCredentials } from "./oauth.js";
 let cachedBearerToken = null;
-/**
- * Initialize and return an authenticated Basecamp client.
- *
- * Uses environment variables:
- * - BASECAMP_CLIENT_ID
- * - BASECAMP_CLIENT_SECRET
- * - BASECAMP_REFRESH_TOKEN
- * - BASECAMP_USER_AGENT (optional)
- * - BASECAMP_ACCOUNT_ID
- *
- * @param accountId - Basecamp account ID to use for the client
- * @returns Authenticated Basecamp client instance
- * @throws Error if required environment variables are missing or authentication fails
- */
 export async function initializeBasecampClient() {
-    // Validate required environment variables
-    const requiredEnvVars = [
-        "BASECAMP_CLIENT_ID",
-        "BASECAMP_CLIENT_SECRET",
-        "BASECAMP_REFRESH_TOKEN",
-        "BASECAMP_ACCOUNT_ID",
-    ];
-    const missing = requiredEnvVars.filter((varName) => !process.env[varName]);
-    if (missing.length > 0) {
-        throw new Error(`Missing required environment variables: ${missing.join(", ")}. ` +
-            `Please set these in your environment or .env file.`);
+    const creds = await readCredentials();
+    if (!creds) {
+        throw new Error("Not logged in. Use basecamp_login to authenticate.");
     }
-    // Get bearer token (cache if possible to avoid repeated OAuth requests)
+    const { clientId, clientSecret } = getClientCredentials();
     if (!cachedBearerToken) {
-        try {
-            cachedBearerToken = await getBearerToken({
-                clientId: process.env.BASECAMP_CLIENT_ID,
-                clientSecret: process.env.BASECAMP_CLIENT_SECRET,
-                refreshToken: process.env.BASECAMP_REFRESH_TOKEN,
-                userAgent: process.env.BASECAMP_USER_AGENT,
-            });
-        }
-        catch (error) {
-            throw new Error(`Failed to obtain Basecamp access token: ${error instanceof Error ? error.message : String(error)}. ` +
-                `Check your BASECAMP_CLIENT_ID, BASECAMP_CLIENT_SECRET, and BASECAMP_REFRESH_TOKEN are correct.`);
-        }
+        cachedBearerToken = await getBearerToken({
+            clientId,
+            clientSecret,
+            refreshToken: creds.refreshToken,
+        });
     }
-    // Build and return client
     return buildClient({
         bearerToken: cachedBearerToken,
-        accountId: process.env.BASECAMP_ACCOUNT_ID,
-        userAgent: process.env.BASECAMP_USER_AGENT,
+        accountId: creds.accountId,
     });
 }
-/**
- * Clear the cached bearer token (useful for forcing token refresh)
- */
 export function clearTokenCache() {
     cachedBearerToken = null;
 }

package/dist/utils/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/utils/auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,WAAW,EAAe,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAE3E,2DAA2D;AAC3D,IAAI,iBAAiB,GAAkB,IAAI,CAAC;AAE5C;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB;IAC5C,0CAA0C;IAC1C,MAAM,eAAe,GAAG;QACtB,oBAAoB;QACpB,wBAAwB;QACxB,wBAAwB;QACxB,qBAAqB;KACtB,CAAC;IAEF,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,2CAA2C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAC/D,oDAAoD,CACvD,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,iBAAiB,GAAG,MAAM,cAAc,CAAC;gBACvC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAmB;gBACzC,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAuB;gBACjD,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAuB;gBACjD,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB;aAC3C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,2CAA2C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI;gBACnG,gGAAgG,CACnG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,OAAO,WAAW,CAAC;QACjB,WAAW,EAAE,iBAAiB;QAC9B,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAoB;QAC3C,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB;KAC3C,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,iBAAiB,GAAG,IAAI,CAAC;AAC3B,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/utils/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAe,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAElD,IAAI,iBAAiB,GAAkB,IAAI,CAAC;AAE5C,MAAM,CAAC,KAAK,UAAU,wBAAwB;IAC7C,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAC;IAEtC,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,oBAAoB,EAAE,CAAC;IAE1D,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACxB,iBAAiB,GAAG,MAAM,cAAc,CAAC;YACxC,QAAQ;YACR,YAAY;YACZ,YAAY,EAAE,KAAK,CAAC,YAAY;SAChC,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,WAAW,CAAC;QAClB,WAAW,EAAE,iBAAiB;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;KAC1B,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe;IAC9B,iBAAiB,GAAG,IAAI,CAAC;AAC1B,CAAC"}

package/dist/utils/contentOperations.d.ts

@@ -16,11 +16,11 @@ export declare const ContentOperationFields: {
         find: z.ZodString;
         replace: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        find: string;
         replace: string;
-    }, {
         find: string;
+    }, {
         replace: string;
+        find: string;
     }>, "many">>;
 };
 /**

package/dist/utils/credentials.d.ts

@@ -0,0 +1,9 @@
+export type Credentials = {
+    refreshToken: string;
+    accountId: string;
+};
+export declare function getCredentialsPath(): string;
+export declare function readCredentials(): Promise<Credentials | null>;
+export declare function writeCredentials(creds: Credentials): Promise<void>;
+export declare function deleteCredentials(): Promise<void>;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/utils/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/utils/credentials.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,WAAW,GAAG;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CAClB,CAAC;AASF,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAanE;AAED,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAKxE;AAED,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAMvD"}

package/dist/utils/credentials.js

@@ -0,0 +1,35 @@
+import { chmod, mkdir, readFile, unlink, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+const CREDENTIALS_PATH = join(homedir(), ".config", "basecamp-mcp", "credentials.json");
+export function getCredentialsPath() {
+    return CREDENTIALS_PATH;
+}
+export async function readCredentials() {
+    try {
+        const content = await readFile(CREDENTIALS_PATH, "utf-8");
+        const data = JSON.parse(content);
+        if (!data.refreshToken || !data.accountId) {
+            return null;
+        }
+        return { refreshToken: data.refreshToken, accountId: data.accountId };
+    }
+    catch {
+        return null;
+    }
+}
+export async function writeCredentials(creds) {
+    const dir = dirname(CREDENTIALS_PATH);
+    await mkdir(dir, { recursive: true });
+    await writeFile(CREDENTIALS_PATH, JSON.stringify(creds, null, 2), "utf-8");
+    await chmod(CREDENTIALS_PATH, 0o600);
+}
+export async function deleteCredentials() {
+    try {
+        await unlink(CREDENTIALS_PATH);
+    }
+    catch {
+        // File doesn't exist, nothing to do
+    }
+}
+//# sourceMappingURL=credentials.js.map

package/dist/utils/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/utils/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAO1C,MAAM,gBAAgB,GAAG,IAAI,CAC5B,OAAO,EAAE,EACT,SAAS,EACT,cAAc,EACd,kBAAkB,CAClB,CAAC;AAEF,MAAM,UAAU,kBAAkB;IACjC,OAAO,gBAAgB,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACpC,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEjC,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC;QACb,CAAC;QAED,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAkB;IACxD,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACtC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3E,MAAM,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACtC,IAAI,CAAC;QACJ,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACR,oCAAoC;IACrC,CAAC;AACF,CAAC"}

package/dist/utils/oauth.d.ts

@@ -0,0 +1,16 @@
+export declare function getClientCredentials(): {
+    clientId: string;
+    clientSecret: string;
+};
+export declare function performBasecampOAuthLogin(): Promise<{
+    accessToken: string;
+    refreshToken: string;
+}>;
+export type BasecampAccount = {
+    id: number;
+    name: string;
+    href: string;
+    product: string;
+};
+export declare function fetchBasecampAccounts(accessToken: string): Promise<BasecampAccount[]>;
+//# sourceMappingURL=oauth.d.ts.map

package/dist/utils/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/utils/oauth.ts"],"names":[],"mappings":"AAeA,wBAAgB,oBAAoB,IAAI;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACrB,CAWA;AAwID,wBAAsB,yBAAyB,IAAI,OAAO,CAAC;IAC1D,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACrB,CAAC,CAqBD;AAED,MAAM,MAAM,eAAe,GAAG;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,wBAAsB,qBAAqB,CAC1C,WAAW,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,EAAE,CAAC,CAiB5B"}

package/dist/utils/oauth.js

@@ -0,0 +1,131 @@
+import { exec } from "node:child_process";
+import { createServer, } from "node:http";
+import { platform } from "node:os";
+import { URL } from "node:url";
+const REDIRECT_PORT = 7652;
+const REDIRECT_URI = `http://localhost:${REDIRECT_PORT}/callback`;
+const AUTHORIZE_BASE = "https://launchpad.37signals.com/authorization/new";
+const TOKEN_URL = "https://launchpad.37signals.com/authorization/token";
+const AUTH_INFO_URL = "https://launchpad.37signals.com/authorization.json";
+export function getClientCredentials() {
+    const clientId = process.env.BASECAMP_CLIENT_ID;
+    const clientSecret = process.env.BASECAMP_CLIENT_SECRET;
+    if (!clientId || !clientSecret) {
+        throw new Error("Missing BASECAMP_CLIENT_ID and BASECAMP_CLIENT_SECRET environment variables.");
+    }
+    return { clientId, clientSecret };
+}
+function buildAuthorizeUrl(clientId) {
+    const params = new URLSearchParams({
+        type: "web_server",
+        client_id: clientId,
+        redirect_uri: REDIRECT_URI,
+    });
+    return `${AUTHORIZE_BASE}?${params.toString()}`;
+}
+function openBrowser(url) {
+    const os = platform();
+    const cmd = os === "darwin" ? "open" : os === "win32" ? "start" : "xdg-open";
+    exec(`${cmd} "${url}"`);
+}
+async function exchangeCodeForTokens(code, clientId, clientSecret) {
+    const response = await fetch(TOKEN_URL, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+            type: "web_server",
+            client_id: clientId,
+            client_secret: clientSecret,
+            redirect_uri: REDIRECT_URI,
+            code,
+        }),
+    });
+    if (!response.ok) {
+        const body = await response.text();
+        throw new Error(`Token exchange failed (${response.status}): ${body}`);
+    }
+    const data = (await response.json());
+    return { accessToken: data.access_token, refreshToken: data.refresh_token };
+}
+const SUCCESS_HTML = `<!DOCTYPE html>
+<html>
+<head><title>Basecamp MCP</title></head>
+<body style="font-family: system-ui, sans-serif; display: flex; justify-content: center; align-items: center; height: 100vh; margin: 0;">
+  <div style="text-align: center;">
+    <h1>Login successful!</h1>
+    <p>You can close this tab and return to your MCP client.</p>
+  </div>
+</body>
+</html>`;
+function startCallbackServer(clientId, clientSecret) {
+    return new Promise((resolveStart) => {
+        let resolveTokens;
+        const tokensPromise = new Promise((resolve) => {
+            resolveTokens = resolve;
+        });
+        const server = createServer(async (req, res) => {
+            const url = new URL(req.url || "/", `http://localhost:${REDIRECT_PORT}`);
+            if (url.pathname !== "/callback") {
+                res.writeHead(404);
+                res.end("Not found");
+                return;
+            }
+            const code = url.searchParams.get("code");
+            if (!code) {
+                const error = url.searchParams.get("error_description") ||
+                    "No authorization code received";
+                res.writeHead(400);
+                res.end(error);
+                server.close();
+                resolveTokens(null);
+                return;
+            }
+            try {
+                const tokens = await exchangeCodeForTokens(code, clientId, clientSecret);
+                res.writeHead(200, { "Content-Type": "text/html" });
+                res.end(SUCCESS_HTML);
+                server.close();
+                resolveTokens(tokens);
+            }
+            catch (err) {
+                res.writeHead(500);
+                res.end(`Token exchange failed: ${err instanceof Error ? err.message : String(err)}`);
+                server.close();
+                resolveTokens(null);
+            }
+        });
+        server.once("error", () => {
+            resolveStart(null);
+        });
+        server.once("listening", () => {
+            resolveStart({ waitForTokens: () => tokensPromise });
+        });
+        server.listen(REDIRECT_PORT, "127.0.0.1");
+    });
+}
+export async function performBasecampOAuthLogin() {
+    const { clientId, clientSecret } = getClientCredentials();
+    const serverHandle = await startCallbackServer(clientId, clientSecret);
+    if (!serverHandle) {
+        throw new Error(`Could not start local server on port ${REDIRECT_PORT}. Is another process using it?`);
+    }
+    const authorizeUrl = buildAuthorizeUrl(clientId);
+    openBrowser(authorizeUrl);
+    const tokens = await serverHandle.waitForTokens();
+    if (!tokens) {
+        throw new Error("Authentication failed — no tokens received");
+    }
+    return tokens;
+}
+export async function fetchBasecampAccounts(accessToken) {
+    const response = await fetch(AUTH_INFO_URL, {
+        headers: { Authorization: `Bearer ${accessToken}` },
+    });
+    if (!response.ok) {
+        const body = await response.text();
+        throw new Error(`Failed to fetch accounts (${response.status}): ${body}`);
+    }
+    const data = (await response.json());
+    return data.accounts.filter((a) => a.product === "bc3");
+}
+//# sourceMappingURL=oauth.js.map

package/dist/utils/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../src/utils/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAGN,YAAY,GACZ,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B,MAAM,aAAa,GAAG,IAAI,CAAC;AAC3B,MAAM,YAAY,GAAG,oBAAoB,aAAa,WAAW,CAAC;AAClE,MAAM,cAAc,GAAG,mDAAmD,CAAC;AAC3E,MAAM,SAAS,GAAG,qDAAqD,CAAC;AACxE,MAAM,aAAa,GAAG,oDAAoD,CAAC;AAE3E,MAAM,UAAU,oBAAoB;IAInC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAChD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IAExD,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACd,8EAA8E,CAC9E,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IAC1C,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QAClC,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,QAAQ;QACnB,YAAY,EAAE,YAAY;KAC1B,CAAC,CAAC;IACH,OAAO,GAAG,cAAc,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC/B,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;IACtB,MAAM,GAAG,GACR,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;IAClE,IAAI,CAAC,GAAG,GAAG,KAAK,GAAG,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,qBAAqB,CACnC,IAAY,EACZ,QAAgB,EAChB,YAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;QACvC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACpB,IAAI,EAAE,YAAY;YAClB,SAAS,EAAE,QAAQ;YACnB,aAAa,EAAE,YAAY;YAC3B,YAAY,EAAE,YAAY;YAC1B,IAAI;SACJ,CAAC;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAGlC,CAAC;IACF,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,YAAY,GAAG;;;;;;;;;QASb,CAAC;AAST,SAAS,mBAAmB,CAC3B,QAAgB,EAChB,YAAoB;IAEpB,OAAO,IAAI,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE;QACnC,IAAI,aAEK,CAAC;QAEV,MAAM,aAAa,GAAG,IAAI,OAAO,CAGvB,CAAC,OAAO,EAAE,EAAE;YACrB,aAAa,GAAG,OAAO,CAAC;QACzB,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,YAAY,CAC1B,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAE,EAAE;YACnD,MAAM,GAAG,GAAG,IAAI,GAAG,CAClB,GAAG,CAAC,GAAG,IAAI,GAAG,EACd,oBAAoB,aAAa,EAAE,CACnC,CAAC;YAEF,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBAClC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACrB,OAAO;YACR,CAAC;YAED,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAE1C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACX,MAAM,KAAK,GACV,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC;oBACzC,gCAAgC,CAAC;gBAClC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACf,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,aAAc,CAAC,IAAI,CAAC,CAAC;gBACrB,OAAO;YACR,CAAC;YAED,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;gBACzE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBACtB,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,aAAc,CAAC,MAAM,CAAC,CAAC;YACxB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CACN,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC5E,CAAC;gBACF,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,aAAc,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;QACF,CAAC,CACD,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACzB,YAAY,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE;YAC7B,YAAY,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB;IAI9C,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,oBAAoB,EAAE,CAAC;IAE1D,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAEvE,IAAI,CAAC,YAAY,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACd,wCAAwC,aAAa,gCAAgC,CACrF,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACjD,WAAW,CAAC,YAAY,CAAC,CAAC;IAE1B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,aAAa,EAAE,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,WAAmB;IAEnB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE;QAC3C,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE;KACnD,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACd,6BAA6B,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CACxD,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAElC,CAAC;IAEF,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;AACzD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "basecamp-mcp",
-  "version": "1.0.4",
+  "version": "1.1.0",
   "description": "Model Context Protocol (MCP) server for Basecamp integration. Enables LLMs to interact with Basecamp projects, messages, todos, comments, people, and kanban boards.",
   "type": "module",
   "main": "dist/index.js",