ctx7 0.4.5 → 0.5.0

package/dist/index.js

@@ -1155,17 +1155,88 @@ function buildAuthorizationUrl(baseUrl3, clientId, redirectUri, codeChallenge, s
   url.searchParams.set("response_type", "code");
   return url.toString();
 }
+var DEVICE_CODE_GRANT = "urn:ietf:params:oauth:grant-type:device_code";
+var DEFAULT_DEVICE_POLL_INTERVAL_SECONDS = 5;
+function shouldUseDeviceFlow() {
+  if (process.env.SSH_CONNECTION || process.env.SSH_CLIENT || process.env.SSH_TTY) return true;
+  if (process.platform === "linux" && !process.env.DISPLAY && !process.env.WAYLAND_DISPLAY) {
+    return true;
+  }
+  return false;
+}
+async function startDeviceAuthorization(baseUrl3, clientId) {
+  const params = new URLSearchParams({ client_id: clientId });
+  try {
+    const hostname2 = os.hostname();
+    if (hostname2) params.set("hostname", hostname2);
+  } catch {
+  }
+  const response = await fetch(`${baseUrl3}/api/oauth/device/code`, {
+    method: "POST",
+    headers: { "Content-Type": "application/x-www-form-urlencoded" },
+    body: params.toString()
+  });
+  if (!response.ok) {
+    const err = await response.json().catch(() => ({}));
+    throw new Error(err.error_description || err.error || "Failed to start device authorization");
+  }
+  return await response.json();
+}
+async function pollDeviceToken(baseUrl3, clientId, deviceCode) {
+  let response;
+  try {
+    response = await fetch(`${baseUrl3}/api/oauth/device/token`, {
+      method: "POST",
+      headers: { "Content-Type": "application/x-www-form-urlencoded" },
+      body: new URLSearchParams({
+        grant_type: DEVICE_CODE_GRANT,
+        device_code: deviceCode,
+        client_id: clientId
+      }).toString()
+    });
+  } catch (error) {
+    return {
+      status: "transient",
+      errorMessage: error instanceof Error ? error.message : "network error"
+    };
+  }
+  if (response.ok) {
+    const tokens = await response.json();
+    return { status: "approved", tokens };
+  }
+  if (response.status >= 500) {
+    const err2 = await response.json().catch(() => ({}));
+    return {
+      status: "transient",
+      errorMessage: err2.error_description || err2.error || `HTTP ${response.status}`
+    };
+  }
+  const err = await response.json().catch(() => ({}));
+  switch (err.error) {
+    case "authorization_pending":
+      return { status: "pending" };
+    case "slow_down":
+      return { status: "slow_down" };
+    case "access_denied":
+      return { status: "denied" };
+    case "expired_token":
+      return { status: "expired" };
+    default:
+      throw new Error(err.error_description || err.error || "Device token poll failed");
+  }
+}
 
 // src/commands/auth.ts
 import pc4 from "picocolors";
 import ora from "ora";
 import open from "open";
+import boxen from "boxen";
 var baseUrl2 = "https://context7.com";
 function setAuthBaseUrl(url) {
   baseUrl2 = url;
 }
 function registerAuthCommands(program2) {
-  program2.command("login").description("Log in to Context7").option("--no-browser", "Don't open browser automatically").action(async (options) => {
+  program2.command("login").description("Log in to Context7").option("--no-browser", "Don't open browser automatically").option("--device", "Force device-code flow (use on SSH / headless hosts)").action(async (options) => {
     await loginCommand(options);
   });
   program2.command("logout").description("Log out of Context7").action(() => {
@@ -1175,7 +1246,131 @@ function registerAuthCommands(program2) {
     await whoamiCommand();
   });
 }
-async function performLogin(openBrowser = true) {
+function renderDeviceCodeBox(userCode, verificationUri, verificationUriComplete) {
+  const codeLine = `${pc4.dim("Your one-time code:")}
+
+    ${pc4.green(pc4.bold(userCode))}`;
+  const linkLine = verificationUriComplete ? `${pc4.dim("Open this link to approve:")}
+${pc4.cyan(verificationUriComplete)}
+
+${pc4.dim("Or visit")} ${pc4.cyan(verificationUri)} ${pc4.dim("and enter the code above.")}` : `${pc4.dim("Visit:")} ${pc4.cyan(verificationUri)}`;
+  return boxen(`${codeLine}
+
+${linkLine}`, {
+    title: "Sign in to Context7",
+    titleAlignment: "left",
+    padding: 1,
+    margin: { top: 1, bottom: 1, left: 2, right: 2 },
+    borderStyle: "round",
+    borderColor: "gray"
+  });
+}
+function waitForEnter(prompt) {
+  if (!process.stdin.isTTY) return Promise.resolve();
+  return new Promise((resolve3) => {
+    process.stdout.write(`  ${pc4.dim(prompt)} `);
+    const onData = (chunk) => {
+      if (chunk[0] === 3) {
+        process.stdin.removeListener("data", onData);
+        process.stdin.setRawMode?.(false);
+        process.stdin.pause();
+        process.stdout.write("\n");
+        process.exit(130);
+      }
+      process.stdin.removeListener("data", onData);
+      process.stdin.setRawMode?.(false);
+      process.stdin.pause();
+      process.stdout.write("\n");
+      resolve3();
+    };
+    process.stdin.setRawMode?.(true);
+    process.stdin.resume();
+    process.stdin.on("data", onData);
+  });
+}
+async function announceIdentity(accessToken) {
+  try {
+    const whoami = await fetchWhoami(accessToken);
+    const name = whoami.email || whoami.name;
+    if (!name) return "Login successful!";
+    const team = whoami.teamspace?.name;
+    return team ? `Logged in as ${pc4.bold(name)} ${pc4.dim(`(${team})`)}` : `Logged in as ${pc4.bold(name)}`;
+  } catch {
+    return "Login successful!";
+  }
+}
+async function performDeviceLogin(openBrowser = true) {
+  const spinner = ora("Preparing login...").start();
+  let authorization;
+  try {
+    authorization = await startDeviceAuthorization(baseUrl2, CLI_CLIENT_ID);
+  } catch (error) {
+    spinner.fail(pc4.red("Login failed"));
+    if (error instanceof Error) console.error(pc4.red(error.message));
+    return null;
+  }
+  spinner.stop();
+  console.log(
+    renderDeviceCodeBox(
+      authorization.user_code,
+      authorization.verification_uri,
+      authorization.verification_uri_complete
+    )
+  );
+  const target = authorization.verification_uri_complete ?? authorization.verification_uri;
+  if (openBrowser) {
+    await waitForEnter("Press Enter to open the browser, or Ctrl-C to quit...");
+    try {
+      await open(target);
+    } catch {
+      console.log(pc4.dim(`  Couldn't open a browser \u2014 visit the link above manually.`));
+    }
+  } else {
+    console.log(pc4.dim("  Open the link above in any browser to continue."));
+    console.log("");
+  }
+  const waitingSpinner = ora({ text: "Waiting for authorization...", indent: 2 }).start();
+  const deadline = Date.now() + authorization.expires_in * 1e3;
+  let intervalMs = (authorization.interval ?? DEFAULT_DEVICE_POLL_INTERVAL_SECONDS) * 1e3;
+  while (Date.now() < deadline) {
+    await new Promise((resolve3) => setTimeout(resolve3, intervalMs));
+    try {
+      const result = await pollDeviceToken(baseUrl2, CLI_CLIENT_ID, authorization.device_code);
+      if (result.status === "approved" && result.tokens) {
+        saveTokens(result.tokens);
+        const successText = await announceIdentity(result.tokens.access_token);
+        waitingSpinner.succeed(pc4.green(successText));
+        return result.tokens.access_token;
+      }
+      if (result.status === "slow_down") {
+        intervalMs += 5e3;
+        continue;
+      }
+      if (result.status === "denied") {
+        waitingSpinner.fail(pc4.red("Authorization denied."));
+        return null;
+      }
+      if (result.status === "expired") {
+        waitingSpinner.fail(pc4.red("Code expired. Run login again."));
+        return null;
+      }
+      if (result.status === "transient") {
+        intervalMs += 5e3;
+        continue;
+      }
+    } catch (error) {
+      waitingSpinner.fail(pc4.red("Login failed"));
+      if (error instanceof Error) console.error(pc4.red(error.message));
+      return null;
+    }
+  }
+  waitingSpinner.fail(pc4.red("Code expired without approval."));
+  return null;
+}
+async function performLogin(openBrowser = true, forceDevice = false) {
+  if (forceDevice || shouldUseDeviceFlow()) {
+    return performDeviceLogin(openBrowser);
+  }
   const spinner = ora("Preparing login...").start();
   try {
     const { codeVerifier, codeChallenge } = generatePKCE();
@@ -1242,7 +1437,7 @@ async function loginCommand(options) {
     return;
   }
   clearTokens();
-  const token = await performLogin(options.browser);
+  const token = await performLogin(options.browser, options.device ?? false);
   if (!token) {
     process.exit(1);
   }