devto-mcp 0.5.3 → 0.7.0

package/README.md

@@ -14,12 +14,11 @@ This is a one-time global install. Each project is linked individually via `devt
 
 ## Setup
 
-1. Create an account and get an API key at [devto.ai](https://devto.ai)
+1. Create an account at [devto.ai](https://devto.ai). Connect Jira from the onboarding screen at [devto.ai/onboard](https://devto.ai/onboard) — click **Connect with Jira** and authorize via OAuth. No tokens to copy.
 
-2. Log in and configure your Anthropic key:
+2. Configure your Anthropic key:
 
 ```bash
-devto login
 devto config set anthropic-key sk-ant-xxxx
 ```
 
@@ -30,6 +29,10 @@ cd your-project
 devto init
 ```
 
+`devto init` opens your browser to `devto.ai/cli/authorize`. A short code is displayed — confirm it matches in the browser, click **Approve**, and the CLI receives your API key silently. No copy-pasting.
+
+If you prefer to paste an API key manually, select option **[2]** at the prompt. Get your key from [devto.ai/dashboard/keys](https://devto.ai/dashboard/keys).
+
 This creates:
 - `.devto.json` — project config (workspace URL, project key, provider)
 - `.devto/config.json` — credentials (API key, scoped to this project)
@@ -69,7 +72,7 @@ DevTo generates a structured plan. Run `confirm_plan` to push it to your project
 
 | Command | Description |
 |---|---|
-| `devto login` | Authenticate with your API key (global) |
+| `devto login` | Authenticate globally (browser flow or paste API key) |
 | `devto init` | Link this project to DevTo |
 | `devto unlink` | Unlink this project (removes .devto.json, .devto/, registry entry) |
 | `devto status` | Show connection and active project config |

package/dist/cli.d.ts

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 /**
- * DevTo CLI — devto <command>
+ * devto CLI — devto <command>
  *
  * Commands:
- *   devto login                          Authenticate with your DevTo API key
+ *   devto login                          Authenticate with your devto API key
  *   devto logout                         Clear global credentials
  *   devto status                         Show current connection status
- *   devto init                           Link this project to DevTo
- *   devto unlink                         Unlink this project from DevTo
+ *   devto init                           Link this project to devto
+ *   devto unlink                         Unlink this project from devto
  *   devto doctor                         Test full connection chain
  *   devto sync                           Re-sync workspace configuration
  *   devto verbose                        Toggle verbose mode

package/dist/cli.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 "use strict";
 /**
- * DevTo CLI — devto <command>
+ * devto CLI — devto <command>
  *
  * Commands:
- *   devto login                          Authenticate with your DevTo API key
+ *   devto login                          Authenticate with your devto API key
  *   devto logout                         Clear global credentials
  *   devto status                         Show current connection status
- *   devto init                           Link this project to DevTo
- *   devto unlink                         Unlink this project from DevTo
+ *   devto init                           Link this project to devto
+ *   devto unlink                         Unlink this project from devto
  *   devto doctor                         Test full connection chain
  *   devto sync                           Re-sync workspace configuration
  *   devto verbose                        Toggle verbose mode
@@ -54,7 +54,7 @@ const path = __importStar(require("path"));
 const os = __importStar(require("os"));
 const config_1 = require("./config");
 const command = process.argv[2];
-const NO_PROJECT_MESSAGE = `\nNo project linked in this directory.\nRun \`devto init\` to link this project to a DevTo workspace.\n`;
+const NO_PROJECT_MESSAGE = `\nNo project linked in this directory.\nRun \`devto init\` to link this project to a devto workspace.\n`;
 /**
  * Require .devto.json in the directory tree.
  * If not found, print message and exit. Used by status, doctor, sync.
@@ -180,14 +180,116 @@ async function fetchWorkspaces(apiKey) {
         return [];
     }
 }
+/**
+ * Open a URL in the user's default browser (best-effort, non-blocking).
+ * Silently swallows failures — the CLI also prints the URL so manual copy-paste works.
+ */
+function openBrowser(url) {
+    try {
+        const { spawn } = require("child_process");
+        const platform = process.platform;
+        if (platform === "darwin") {
+            spawn("open", [url], { stdio: "ignore", detached: true }).unref();
+        }
+        else if (platform === "win32") {
+            spawn("cmd", ["/c", "start", "", url], { stdio: "ignore", detached: true, shell: false }).unref();
+        }
+        else {
+            spawn("xdg-open", [url], { stdio: "ignore", detached: true }).unref();
+        }
+    }
+    catch {
+        /* ignore — user can click the printed URL */
+    }
+}
+/**
+ * Device-code authorization: open the browser, display a short code, and poll
+ * the API until the user approves. Returns the issued API key. Throws on
+ * timeout, denial, or network failure.
+ */
+async function browserLogin() {
+    const apiUrl = process.env.DEVTO_API_URL ?? "https://api.devto.ai";
+    let start;
+    try {
+        const res = await fetch(`${apiUrl}/api/v1/cli/device/start`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json", "X-DevTo-Version": config_1.VERSION },
+            body: "{}",
+        });
+        if (!res.ok)
+            throw new Error(`${res.status}`);
+        start = (await res.json());
+    }
+    catch {
+        throw new Error("Could not reach devto to start browser sign-in. Check your internet connection.");
+    }
+    const openUrl = start.verification_url_complete ?? start.verification_url ?? "https://devto.ai/cli/authorize";
+    console.log("\nOpening browser to sign in...");
+    console.log(`  ${openUrl}`);
+    console.log(`\n  Verify the code matches:  ${start.user_code}\n`);
+    openBrowser(openUrl);
+    // ── Poll until approved / denied / expired ──────────────────────────
+    const deadline = Date.now() + start.expires_in * 1000;
+    const intervalMs = Math.max(2, start.interval) * 1000;
+    const spinnerFrames = ["⠋", "⠙", "⠹", "⠸", "⠼", "⠴", "⠦", "⠧", "⠇", "⠏"];
+    let frame = 0;
+    const spinner = setInterval(() => {
+        process.stdout.write(`\r  ${spinnerFrames[frame++ % spinnerFrames.length]} Waiting for you to authorize...`);
+    }, 100);
+    try {
+        while (Date.now() < deadline) {
+            await new Promise((r) => setTimeout(r, intervalMs));
+            let res;
+            try {
+                res = await fetch(`${apiUrl}/api/v1/cli/device/poll`, {
+                    method: "POST",
+                    headers: { "Content-Type": "application/json", "X-DevTo-Version": config_1.VERSION },
+                    body: JSON.stringify({ device_code: start.device_code }),
+                });
+            }
+            catch {
+                continue; // transient network failure — keep polling
+            }
+            if (res.status === 200) {
+                const data = (await res.json());
+                if (data.status === "approved" && data.api_key) {
+                    clearInterval(spinner);
+                    process.stdout.write("\r\x1b[K"); // clear spinner line
+                    console.log("  Authorized.\n");
+                    return data.api_key;
+                }
+            }
+            else if (res.status === 202) {
+                continue; // still pending
+            }
+            else {
+                const data = (await res.json().catch(() => ({})));
+                clearInterval(spinner);
+                process.stdout.write("\r\x1b[K");
+                if (data.code === "CLI_DEVICE_DENIED") {
+                    throw new Error("Authorization was denied.");
+                }
+                if (data.code === "CLI_DEVICE_EXPIRED") {
+                    throw new Error("Authorization expired. Run `devto init` again.");
+                }
+                throw new Error(data.message ?? "Authorization failed.");
+            }
+        }
+        throw new Error("Timed out waiting for authorization. Run `devto init` again.");
+    }
+    finally {
+        clearInterval(spinner);
+        process.stdout.write("\r\x1b[K");
+    }
+}
 async function login() {
-    console.log("\nDevTo Login (global)\n");
+    console.log("\ndevto Login (global)\n");
     console.log("Note: For per-project isolation, use `devto init` instead.");
     console.log("      `devto login` sets a global fallback key.\n");
     console.log("Get your API key from: https://devto.ai/dashboard/keys\n");
     const apiKey = await prompt("Paste your API key: ", true);
     if (!apiKey || !apiKey.startsWith("devto_")) {
-        console.error("\nInvalid key format. DevTo API keys start with 'devto_'.\nGet your key at https://devto.ai/dashboard/keys\n");
+        console.error("\nInvalid key format. devto API keys start with 'devto_'.\nGet your key at https://devto.ai/dashboard/keys\n");
         process.exit(1);
     }
     process.stdout.write("Validating... ");
@@ -197,42 +299,28 @@ async function login() {
         process.exit(1);
     }
     if (result === "unreachable") {
-        console.error("\nCould not reach DevTo API. Check your internet connection.\n");
+        console.error("\nCould not reach devto API. Check your internet connection.\n");
         process.exit(1);
     }
     const apiUrl = process.env.DEVTO_API_URL ?? "https://api.devto.ai";
     (0, config_1.writeConfig)({ api_key: apiKey, api_url: apiUrl });
     console.log("OK\n");
     console.log("Logged in! Your API key is saved to ~/.devto/config.json\n");
-    // Prompt for Anthropic key
-    console.log("────────────────────────────────────────────────");
-    console.log("DevTo uses the Anthropic API to generate AI plans locally.");
-    console.log("You need an Anthropic API key for the `create_plan` feature.");
-    console.log("Get one at: https://console.anthropic.com/settings/keys\n");
-    const setupAnthropic = await prompt("Set up Anthropic key now? (y/n): ");
-    if (setupAnthropic.toLowerCase() === "y" || setupAnthropic.toLowerCase() === "yes") {
-        const anthropicKey = await prompt("Paste your Anthropic API key: ", true);
-        if (!anthropicKey || !anthropicKey.startsWith("sk-ant-")) {
-            console.error("\nInvalid key format. Anthropic keys start with 'sk-ant-'.");
-            console.log("You can set it later: devto config set anthropic-key sk-ant-xxxx\n");
-        }
-        else {
-            (0, config_1.setAnthropicKey)(anthropicKey);
-            console.log("Anthropic key saved!\n");
-        }
-    }
-    else {
-        console.log("\nSkipped. You can set it later: devto config set anthropic-key sk-ant-xxxx\n");
-    }
     console.log("Next step: run `devto init` in your project directory.");
     console.log("Run `devto status` to verify your connection.\n");
 }
 async function logout() {
     const configDir = path.join(os.homedir(), ".devto");
-    if (fs.existsSync(configDir)) {
-        fs.rmSync(configDir, { recursive: true, force: true });
-        console.log("\nLogged out. Removed ~/.devto credentials.");
-        console.log("Note: Project .devto.json files are untouched — run `devto unlink` per project to remove them.\n");
+    const configFile = path.join(configDir, "config.json");
+    let removed = false;
+    if (fs.existsSync(configFile)) {
+        fs.unlinkSync(configFile);
+        removed = true;
+    }
+    if (removed) {
+        console.log("\nLogged out. Removed ~/.devto/config.json credentials.");
+        console.log("Note: ~/.devto/projects.json and project .devto.json files are untouched.");
+        console.log("Run `devto unlink` per project to remove project-level config.\n");
     }
     else {
         console.log("\nNo credentials found. Already logged out.\n");
@@ -247,7 +335,7 @@ async function status() {
         : globalConfig
             ? { config: globalConfig, source: "global" }
             : null;
-    console.log("\nDevTo Status");
+    console.log("\ndevto Status");
     console.log("────────────");
     console.log(`Project config: ${path.join(projectJson.dir, ".devto.json")}`);
     console.log(`  Workspace: ${projectJson.config.workspaceUrl}`);
@@ -268,15 +356,18 @@ async function status() {
     }
     console.log(`API URL: ${config.api_url}`);
     console.log(`API Key: ${config.api_key.slice(0, 12)}...`);
-    // Anthropic key status
-    const hasAnthropic = config.anthropic_key || (() => { try {
-        (0, config_1.getAnthropicKey)();
-        return true;
-    }
-    catch {
-        return false;
-    } })();
-    console.log(`Anthropic Key: ${hasAnthropic ? "configured" : "missing (run `devto config set anthropic-key sk-ant-xxxx`)"}`);
+    // AI call routing
+    const hasLocalAnthropicKey = config.anthropic_key ||
+        (() => {
+            try {
+                (0, config_1.getAnthropicKey)();
+                return true;
+            }
+            catch {
+                return false;
+            }
+        })();
+    console.log(`AI calls: ${hasLocalAnthropicKey ? "your own key (Expert Mode)" : "via devto"}`);
     process.stdout.write("Connection: ");
     try {
         const headers = {
@@ -306,25 +397,35 @@ async function status() {
         }
     }
     catch {
-        console.log("Could not connect to DevTo API");
+        console.log("Could not connect to devto API");
     }
     console.log();
 }
 async function init() {
-    console.log("\nDevTo Init — Link this project to DevTo\n");
+    console.log("\ndevto Init — Link this project to devto\n");
     const globalConfig = (0, config_1.readConfig)();
     const existingProject = (0, config_1.readProjectConfig)();
     const existingJson = (0, config_1.findProjectJson)(process.cwd());
     const apiUrl = process.env.DEVTO_API_URL ?? globalConfig?.api_url ?? "https://api.devto.ai";
     // ── Step 1: Get API key ──────────────────────────────────────────────
+    // Preferred: browser-based device authorization (no key copy-paste).
+    // Fallbacks: reuse an existing project/global key, or paste one manually.
     let apiKey;
+    async function acquireKeyInteractively() {
+        const method = await prompt("Sign in? [1] Browser (recommended)  [2] Paste API key: ");
+        if (method.trim() === "2") {
+            console.log("Get your API key from: https://devto.ai/dashboard/keys\n");
+            return promptForApiKey();
+        }
+        return browserLogin();
+    }
     if (existingProject?.api_key) {
         const reuse = await prompt(`This project already has an API key (${existingProject.api_key.slice(0, 12)}...). Use it? (y/n): `);
         if (reuse.toLowerCase() === "y" || reuse.toLowerCase() === "yes") {
             apiKey = existingProject.api_key;
         }
         else {
-            apiKey = await promptForApiKey();
+            apiKey = await acquireKeyInteractively();
         }
     }
     else if (globalConfig?.api_key) {
@@ -333,12 +434,11 @@ async function init() {
             apiKey = globalConfig.api_key;
         }
         else {
-            apiKey = await promptForApiKey();
+            apiKey = await acquireKeyInteractively();
         }
     }
     else {
-        console.log("Get your API key from: https://devto.ai/dashboard/keys\n");
-        apiKey = await promptForApiKey();
+        apiKey = await acquireKeyInteractively();
     }
     // Validate the key
     process.stdout.write("Validating... ");
@@ -348,7 +448,7 @@ async function init() {
         process.exit(1);
     }
     if (validation === "unreachable") {
-        console.error("\nCould not reach DevTo API. Check your internet connection.\n");
+        console.error("\nCould not reach devto API. Check your internet connection.\n");
         process.exit(1);
     }
     console.log("OK");
@@ -388,16 +488,15 @@ async function init() {
     const projectKey = selected.projectKey;
     const provider = selected.providerType;
     const workspaceId = selected.id;
-    // ── Step 3: Check for Anthropic key ──────────────────────────────────
-    let anthropicKey = existingProject?.anthropic_key;
-    if (!anthropicKey) {
+    // Preserve any existing Anthropic key for Expert Mode users
+    const anthropicKey = existingProject?.anthropic_key ?? (() => {
         try {
-            anthropicKey = (0, config_1.getAnthropicKey)();
+            return (0, config_1.getAnthropicKey)();
         }
         catch {
-            // No Anthropic key yet — skip
+            return undefined;
         }
-    }
+    })();
     // ── Step 4: Write .devto.json (project config) ──────────────────────
     (0, config_1.writeProjectJson)({
         workspaceUrl,
@@ -456,6 +555,15 @@ async function init() {
     }
     if (!mcpConfig.mcpServers)
         mcpConfig.mcpServers = {};
+    // Warn if overwriting a different user's credentials
+    const existingMcp = mcpConfig.mcpServers.devto;
+    if (existingMcp?.env?.DEVTO_API_KEY && existingMcp.env.DEVTO_API_KEY !== apiKey) {
+        const overwrite = await prompt(`\n⚠ .mcp.json already has a different devto API key (${existingMcp.env.DEVTO_API_KEY.slice(0, 12)}...).\nOverwrite with yours? (y/n): `);
+        if (overwrite.toLowerCase() !== "y" && overwrite.toLowerCase() !== "yes") {
+            console.log("\nAborted. Existing .mcp.json left unchanged.\n");
+            process.exit(0);
+        }
+    }
     mcpConfig.mcpServers.devto = mcpServerConfig;
     fs.writeFileSync(mcpJsonPath, JSON.stringify(mcpConfig, null, 2));
     console.log("MCP config written to .mcp.json");
@@ -478,25 +586,21 @@ async function init() {
     console.log(`Project:   ${projectKey}`);
     console.log(`Provider:  ${provider}`);
     console.log(`API key:   ${apiKey.slice(0, 12)}...`);
-    if (!anthropicKey) {
-        console.log("\nNote: Anthropic API key not configured.");
-        console.log("  AI plan generation (create_plan) requires an Anthropic key.");
-        console.log("  Run: devto config set anthropic-key sk-ant-xxxx");
-        console.log("  Then re-run `devto init` to update the MCP config.");
-        console.log("  Get one at: https://console.anthropic.com/settings/keys");
+    if (anthropicKey) {
+        console.log("AI calls:  Expert Mode (your own Anthropic key)");
     }
     console.log("\nRestart Claude Code to pick up the changes.\n");
 }
 async function unlink() {
-    console.log("\nDevTo Unlink — Remove this project from DevTo\n");
+    console.log("\ndevto Unlink — Remove this project from devto\n");
     const projectJson = (0, config_1.findProjectJson)(process.cwd());
     const devtoJsonPath = path.join(process.cwd(), ".devto.json");
     const devtoConfigDir = path.join(process.cwd(), ".devto");
     if (!projectJson && !fs.existsSync(devtoJsonPath) && !fs.existsSync(devtoConfigDir)) {
-        console.log("This project is not linked to DevTo.\n");
+        console.log("This project is not linked to devto.\n");
         return;
     }
-    const confirm = await prompt("Remove DevTo configuration from this project? (y/n): ");
+    const confirm = await prompt("Remove devto configuration from this project? (y/n): ");
     if (confirm.toLowerCase() !== "y" && confirm.toLowerCase() !== "yes") {
         console.log("Cancelled.\n");
         return;
@@ -546,7 +650,7 @@ async function unlink() {
 async function promptForApiKey() {
     const apiKey = await prompt("Paste your API key: ", true);
     if (!apiKey || !apiKey.startsWith("devto_")) {
-        console.error("\nInvalid key format. DevTo API keys start with 'devto_'.\nGet your key at https://devto.ai/dashboard/keys\n");
+        console.error("\nInvalid key format. devto API keys start with 'devto_'.\nGet your key at https://devto.ai/dashboard/keys\n");
         process.exit(1);
     }
     return apiKey;
@@ -556,17 +660,17 @@ function ensureGitignore(entry) {
     try {
         if (fs.existsSync(gitignorePath)) {
             const content = fs.readFileSync(gitignorePath, "utf-8");
-            if (!content.includes(entry)) {
-                const label = entry === ".devto.json" ? "DevTo project config"
+            if (!content.split('\n').some(line => line.trim() === entry)) {
+                const label = entry === ".devto.json" ? "devto project config"
                     : entry === ".mcp.json" ? "MCP config (contains API keys)"
-                        : "DevTo credentials (contains API keys)";
+                        : "devto credentials (contains API keys)";
                 fs.appendFileSync(gitignorePath, `\n# ${label}\n${entry}\n`);
             }
         }
         else {
-            const label = entry === ".devto.json" ? "DevTo project config"
+            const label = entry === ".devto.json" ? "devto project config"
                 : entry === ".mcp.json" ? "MCP config (contains API keys)"
-                    : "DevTo credentials (contains API keys)";
+                    : "devto credentials (contains API keys)";
             fs.writeFileSync(gitignorePath, `# ${label}\n${entry}\n`);
         }
     }
@@ -575,7 +679,7 @@ function ensureGitignore(entry) {
     }
 }
 async function doctor() {
-    console.log("\nDevTo Doctor — Connection Diagnostics\n");
+    console.log("\ndevto Doctor — Connection Diagnostics\n");
     const projectJson = requireProjectJson();
     const resolved = (0, config_1.resolveConfig)();
     const config = resolved?.config ?? null;
@@ -583,8 +687,8 @@ async function doctor() {
     console.log(`OK (${path.join(projectJson.dir, ".devto.json")})`);
     console.log(`  Workspace: ${projectJson.config.workspaceUrl}`);
     console.log(`  Project: ${projectJson.config.projectKey} (${projectJson.config.provider})`);
-    // 1. Check DevTo API reachable
-    process.stdout.write("DevTo API reachable ... ");
+    // 1. Check devto API reachable
+    process.stdout.write("devto API reachable ... ");
     const apiUrl = config?.api_url ?? (0, config_1.getApiUrl)();
     try {
         const res = await fetch(`${apiUrl}/api/v1/status`, {
@@ -665,15 +769,22 @@ async function doctor() {
             console.log("SKIP (cannot reach API)");
         }
     }
-    // 4. Check Anthropic key
-    process.stdout.write("Anthropic API key ... ");
-    try {
-        (0, config_1.getAnthropicKey)();
-        console.log("OK");
+    // 4. AI call routing
+    process.stdout.write("AI calls ... ");
+    const hasLocalAnthropicKey = (() => {
+        try {
+            (0, config_1.getAnthropicKey)();
+            return true;
+        }
+        catch {
+            return false;
+        }
+    })();
+    if (hasLocalAnthropicKey) {
+        console.log("Expert Mode (your own Anthropic key)");
     }
-    catch {
-        console.log("MISSING");
-        console.log("  Fix: Run `devto config set anthropic-key sk-ant-xxxx`");
+    else {
+        console.log("via devto (no local key needed)");
     }
     // 5. Check .mcp.json in current directory
     process.stdout.write("MCP config (.mcp.json) ... ");
@@ -701,7 +812,7 @@ async function doctor() {
     console.log();
 }
 async function sync() {
-    console.log("\nDevTo Sync — Workspace Configuration Discovery\n");
+    console.log("\ndevto Sync — Workspace Configuration Discovery\n");
     requireProjectJson();
     const config = (0, config_1.readConfig)();
     if (!config?.api_key) {
@@ -711,8 +822,8 @@ async function sync() {
     const apiUrl = config.api_url;
     process.stdout.write("Discovering workspace configuration... ");
     try {
-        const res = await fetch(`${apiUrl}/api/v1/jira/discover`, {
-            method: "POST",
+        const res = await fetch(`${apiUrl}/api/v1/project/summary`, {
+            method: "GET",
             headers: {
                 "Content-Type": "application/json",
                 Authorization: `Bearer ${config.api_key}`,
@@ -767,14 +878,14 @@ async function configSet() {
 }
 function printHelp() {
     console.log(`
-DevTo CLI — AI-powered work management
+devto CLI — AI-powered work management
 
 Usage:
-  devto login                          Authenticate with your DevTo API key
+  devto login                          Authenticate with your devto API key
   devto logout                         Clear global credentials (~/.devto)
   devto status                         Show connection status and active project
-  devto init                           Link this project to DevTo
-  devto unlink                         Unlink this project from DevTo
+  devto init                           Link this project to devto
+  devto unlink                         Unlink this project from devto
   devto doctor                         Test full connection chain
   devto sync                           Re-sync workspace configuration
   devto verbose                        Toggle verbose mode