drop2run 0.2.0 → 0.2.1

package/README.md

@@ -72,7 +72,9 @@ DROP2RUN_TOKEN=d2r_...
 ```
 
 The environment wins over `~/.config/drop2run/config.json`, and that is the same file and precedence
-`@drop2run/mcp` uses, so signing in once covers both.
+`@drop2run/mcp` uses, so signing in once covers both — in either direction. That server runs the same
+two flows from its own `login` and `login_code` tools, so a sign-in done in a chat leaves this command
+line signed in too.
 
 `drop2run where` says which source is in force without printing the token, so "why is it using the wrong
 account" is answerable in an issue report or a CI log.

package/dist/index.js

@@ -1,10 +1,10 @@
 import { join, dirname, relative, sep, resolve } from "node:path";
 import { readFileSync, writeFileSync, chmodSync, renameSync, mkdirSync } from "node:fs";
 import { homedir, hostname } from "node:os";
-import { realpath, readdir, stat, readFile } from "node:fs/promises";
 import { spawn } from "node:child_process";
 import { randomBytes, createHash } from "node:crypto";
 import { createServer } from "node:http";
+import { realpath, readdir, stat, readFile } from "node:fs/promises";
 async function call(credentials, path, init2 = {}) {
   const response = await fetch(`${credentials.apiBaseUrl}/${path}`, {
     ...init2,
@@ -125,20 +125,188 @@ function clearToken(path = configPath()) {
   renameSync(temporary, path);
   return true;
 }
-function missingCredentialsMessage() {
-  return [
-    "No Drop2Run access token.",
-    "",
-    "Run `drop2run login` to sign in through a browser, which stores one for you.",
+function missingCredentialsMessage(surface = "cli") {
+  const signIn = surface === "mcp" ? [
+    "Call the `login` tool to sign in through a browser, which stores a token.",
     "",
+    "Where no browser can be opened on this machine — a container, a remote host — call",
+    "`login_code` instead and pass on the short code it gives you."
+  ] : ["Run `drop2run login` to sign in through a browser, which stores one for you."];
+  const byHand = surface === "mcp" ? [
+    "To set one without signing in here, create a token at",
+    "https://dropto.run/account/tokens and either:",
+    `  - put it in ${configPath()} as {"token": "d2r_..."}, which this`,
+    "    server reads on every call and needs no restart, or",
+    `  - set ${TOKEN_VARIABLE} in the environment and restart this server, since it reads`,
+    "    the environment it was started in."
+  ] : [
     "For CI, or where no browser can be opened, create a token at",
     "https://dropto.run/account/tokens and either:",
     `  - set ${TOKEN_VARIABLE} in the environment, or`,
-    `  - put it in ${configPath()} as {"token": "d2r_..."}`,
+    `  - put it in ${configPath()} as {"token": "d2r_..."}`
+  ];
+  return [
+    "No Drop2Run access token.",
+    "",
+    ...signIn,
+    "",
+    ...byHand,
     "",
     "The token is shown once when it is created and cannot be recovered afterwards."
   ].join("\n");
 }
+const TIMEOUT_MS = 5 * 60 * 1e3;
+function newAttempt() {
+  const verifier = randomBytes(32).toString("base64url");
+  return {
+    verifier,
+    challenge: createHash("sha256").update(verifier).digest("base64url"),
+    state: randomBytes(16).toString("base64url")
+  };
+}
+function clientName(surface) {
+  const clean2 = (value) => value.trim().replace(/[^A-Za-z0-9._-]/g, "-");
+  const label = "";
+  const raw = clean2(hostname()).slice(0, 64 - label.length);
+  return `${raw === "" ? "drop2run" : raw}${label}`;
+}
+function openBrowser(url) {
+  const [command, args] = process.platform === "darwin" ? ["open", [url]] : process.platform === "win32" ? ["cmd", ["/c", "start", "", url]] : ["xdg-open", [url]];
+  try {
+    const child = spawn(command, [...args], { stdio: "ignore", detached: true });
+    child.unref();
+    child.on("error", () => {
+    });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function listen(state) {
+  return new Promise((resolveListener, rejectListener) => {
+    let settle = null;
+    let fail = null;
+    const received = new Promise((resolveCode, rejectCode) => {
+      settle = resolveCode;
+      fail = rejectCode;
+    });
+    const server = createServer((request2, response) => {
+      const url = new URL(request2.url ?? "/", "http://127.0.0.1");
+      if (url.pathname !== "/cb") {
+        response.writeHead(404, { "Content-Type": "text/plain" });
+        response.end("Not found.\n");
+        return;
+      }
+      const code = url.searchParams.get("code") ?? "";
+      const returned = url.searchParams.get("state") ?? "";
+      if (returned !== state || code === "") {
+        respond(
+          response,
+          400,
+          "Sign-in could not be completed",
+          "This did not come from the sign-in that was started here. Nothing has been changed."
+        );
+        fail?.(new Error("The browser returned a response that did not match this sign-in."));
+        return;
+      }
+      respond(response, 200, "Signed in", "You can close this tab now.");
+      settle?.({ code });
+    });
+    server.on("error", (error) => {
+      rejectListener(error);
+      fail?.(error instanceof Error ? error : new Error(String(error)));
+    });
+    server.listen(0, "127.0.0.1", () => {
+      const address = server.address();
+      if (address === null) {
+        rejectListener(new Error("Could not open a local port to receive the sign-in."));
+        return;
+      }
+      resolveListener({
+        port: address.port,
+        received,
+        close: () => server.close()
+      });
+    });
+  });
+}
+function respond(response, status, title, detail) {
+  response.writeHead(status, { "Content-Type": "text/html; charset=utf-8" });
+  response.end(
+    `<!doctype html><html lang="en"><head><meta charset="utf-8"><title>${title} — drop2run</title><style>body{font:16px/1.6 system-ui,sans-serif;margin:20vh auto;max-width:28rem;padding:0 1.5rem;color:#12211f}h1{font-size:1.4rem;margin:0 0 .5rem}p{margin:0;color:#64706e}@media(prefers-color-scheme:dark){body{background:#0d1413;color:#e8efee}p{color:#9aa8a6}}</style></head><body><h1>${title}</h1><p>${detail}</p></body></html>
+`
+  );
+}
+async function waitForCallback(received, timeoutMs = TIMEOUT_MS) {
+  let timer;
+  try {
+    return await Promise.race([
+      received,
+      new Promise((_, reject) => {
+        timer = setTimeout(
+          () => reject(new Error("Timed out waiting for the browser. Nothing has been changed.")),
+          timeoutMs
+        );
+      })
+    ]);
+  } finally {
+    if (timer !== void 0) clearTimeout(timer);
+  }
+}
+function consentUrl(dashboardUrl, attempt, port, name) {
+  const url = new URL("/cli-auth", dashboardUrl);
+  url.searchParams.set("challenge", attempt.challenge);
+  url.searchParams.set("state", attempt.state);
+  url.searchParams.set("port", String(port));
+  url.searchParams.set("name", name);
+  return url.toString();
+}
+async function startDevice(apiBaseUrl, clientName2) {
+  const response = await fetch(`${apiBaseUrl}/auth/cli/device`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ clientName: clientName2 })
+  });
+  if (!response.ok) throw new Error(await problemDetail(response));
+  return await response.json();
+}
+async function pollDevice(apiBaseUrl, deviceCode) {
+  let response;
+  try {
+    response = await fetch(`${apiBaseUrl}/auth/cli/device/token`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ deviceCode })
+    });
+  } catch {
+    return { state: "pending" };
+  }
+  if (response.ok) {
+    const body = await response.json();
+    return { state: "granted", token: { token: body.token, name: body.name, email: body.email } };
+  }
+  const problem = await response.json().catch(() => null);
+  if (problem?.type === "authorization_pending") return { state: "pending" };
+  if (problem?.type === "slow_down") return { state: "slow_down" };
+  return {
+    state: "dead",
+    message: problem?.detail ?? `The API answered ${response.status}.`
+  };
+}
+async function problemDetail(response) {
+  const problem = await response.json().catch(() => null);
+  return problem?.detail ?? `The API answered ${response.status}.`;
+}
+async function exchange(apiBaseUrl, code, verifier) {
+  const response = await fetch(`${apiBaseUrl}/auth/cli/token`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ code, verifier })
+  });
+  if (!response.ok) throw new Error(await problemDetail(response));
+  const body = await response.json();
+  return { token: body.token, name: body.name, email: body.email };
+}
 const PROJECT_FILE = "drop2run.json";
 function projectPath(directory = process.cwd()) {
   return join(directory, PROJECT_FILE);
@@ -743,156 +911,6 @@ async function publish(credentials, source, site) {
 function publishDirectory(credentials, directory, site) {
   return publish(credentials, directorySource(directory), site);
 }
-const TIMEOUT_MS = 5 * 60 * 1e3;
-function newAttempt() {
-  const verifier = randomBytes(32).toString("base64url");
-  return {
-    verifier,
-    challenge: createHash("sha256").update(verifier).digest("base64url"),
-    state: randomBytes(16).toString("base64url")
-  };
-}
-function clientName() {
-  const raw = hostname().trim().replace(/[^A-Za-z0-9._-]/g, "-").slice(0, 64);
-  return raw === "" ? "drop2run-cli" : raw;
-}
-function openBrowser(url) {
-  const [command, args] = process.platform === "darwin" ? ["open", [url]] : process.platform === "win32" ? ["cmd", ["/c", "start", "", url]] : ["xdg-open", [url]];
-  try {
-    const child = spawn(command, [...args], { stdio: "ignore", detached: true });
-    child.unref();
-    child.on("error", () => {
-    });
-    return true;
-  } catch {
-    return false;
-  }
-}
-function listen(state) {
-  return new Promise((resolveListener, rejectListener) => {
-    let settle = null;
-    let fail = null;
-    const received = new Promise((resolveCode, rejectCode) => {
-      settle = resolveCode;
-      fail = rejectCode;
-    });
-    const server = createServer((request2, response) => {
-      const url = new URL(request2.url ?? "/", "http://127.0.0.1");
-      if (url.pathname !== "/cb") {
-        response.writeHead(404, { "Content-Type": "text/plain" });
-        response.end("Not found.\n");
-        return;
-      }
-      const code = url.searchParams.get("code") ?? "";
-      const returned = url.searchParams.get("state") ?? "";
-      if (returned !== state || code === "") {
-        respond(
-          response,
-          400,
-          "Sign-in could not be completed",
-          "This did not come from the sign-in that was started here. Nothing has been changed."
-        );
-        fail?.(new Error("The browser returned a response that did not match this sign-in."));
-        return;
-      }
-      respond(response, 200, "Signed in", "You can close this tab and go back to the terminal.");
-      settle?.({ code });
-    });
-    server.on("error", (error) => {
-      rejectListener(error);
-      fail?.(error instanceof Error ? error : new Error(String(error)));
-    });
-    server.listen(0, "127.0.0.1", () => {
-      const address = server.address();
-      if (address === null) {
-        rejectListener(new Error("Could not open a local port to receive the sign-in."));
-        return;
-      }
-      resolveListener({
-        port: address.port,
-        received,
-        close: () => server.close()
-      });
-    });
-  });
-}
-function respond(response, status, title, detail) {
-  response.writeHead(status, { "Content-Type": "text/html; charset=utf-8" });
-  response.end(
-    `<!doctype html><html lang="en"><head><meta charset="utf-8"><title>${title} — drop2run</title><style>body{font:16px/1.6 system-ui,sans-serif;margin:20vh auto;max-width:28rem;padding:0 1.5rem;color:#12211f}h1{font-size:1.4rem;margin:0 0 .5rem}p{margin:0;color:#64706e}@media(prefers-color-scheme:dark){body{background:#0d1413;color:#e8efee}p{color:#9aa8a6}}</style></head><body><h1>${title}</h1><p>${detail}</p></body></html>
-`
-  );
-}
-async function waitForCallback(received, timeoutMs = TIMEOUT_MS) {
-  let timer;
-  try {
-    return await Promise.race([
-      received,
-      new Promise((_, reject) => {
-        timer = setTimeout(
-          () => reject(new Error("Timed out waiting for the browser. Nothing has been changed.")),
-          timeoutMs
-        );
-      })
-    ]);
-  } finally {
-    if (timer !== void 0) clearTimeout(timer);
-  }
-}
-function consentUrl(dashboardUrl, attempt, port, name) {
-  const url = new URL("/cli-auth", dashboardUrl);
-  url.searchParams.set("challenge", attempt.challenge);
-  url.searchParams.set("state", attempt.state);
-  url.searchParams.set("port", String(port));
-  url.searchParams.set("name", name);
-  return url.toString();
-}
-async function startDevice(apiBaseUrl, clientName2) {
-  const response = await fetch(`${apiBaseUrl}/auth/cli/device`, {
-    method: "POST",
-    headers: { "Content-Type": "application/json" },
-    body: JSON.stringify({ clientName: clientName2 })
-  });
-  if (!response.ok) throw new Error(await problemDetail(response));
-  return await response.json();
-}
-async function pollDevice(apiBaseUrl, deviceCode) {
-  let response;
-  try {
-    response = await fetch(`${apiBaseUrl}/auth/cli/device/token`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ deviceCode })
-    });
-  } catch {
-    return { state: "pending" };
-  }
-  if (response.ok) {
-    const body = await response.json();
-    return { state: "granted", token: { token: body.token, name: body.name, email: body.email } };
-  }
-  const problem = await response.json().catch(() => null);
-  if (problem?.type === "authorization_pending") return { state: "pending" };
-  if (problem?.type === "slow_down") return { state: "slow_down" };
-  return {
-    state: "dead",
-    message: problem?.detail ?? `The API answered ${response.status}.`
-  };
-}
-async function problemDetail(response) {
-  const problem = await response.json().catch(() => null);
-  return problem?.detail ?? `The API answered ${response.status}.`;
-}
-async function exchange(apiBaseUrl, code, verifier) {
-  const response = await fetch(`${apiBaseUrl}/auth/cli/token`, {
-    method: "POST",
-    headers: { "Content-Type": "application/json" },
-    body: JSON.stringify({ code, verifier })
-  });
-  if (!response.ok) throw new Error(await problemDetail(response));
-  const body = await response.json();
-  return { token: body.token, name: body.name, email: body.email };
-}
 function failure(text) {
   return { text, json: { error: text }, code: 1 };
 }
@@ -1240,7 +1258,7 @@ async function run(argv) {
   const positional = argv.filter((argument) => !argument.startsWith("-"));
   const [command, ...rest] = positional;
   if (argv.includes("--version")) {
-    const { version } = await import("./package-C6bEGZf_.js").then(
+    const { version } = await import("./package-D-UHpX_a.js").then(
       (module) => module.default
     );
     return { text: version, json: { version }, code: 0 };

package/dist/{package-C6bEGZf_.js → package-D-UHpX_a.js}

@@ -1,5 +1,5 @@
 const name = "drop2run";
-const version = "0.2.0";
+const version = "0.2.1";
 const description = "Publish a static site to Drop2Run from the command line.";
 const license = "MIT";
 const type = "module";

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "drop2run",
-	"version": "0.2.0",
+	"version": "0.2.1",
 	"description": "Publish a static site to Drop2Run from the command line.",
 	"license": "MIT",
 	"type": "module",