kalvium-worklog 1.4.3 → 1.4.5

package/dist/capture-token.d.ts

@@ -1,7 +1,7 @@
 /**
  * Try headless mode first (fast — works if session is still valid).
  * If no session, opens a headed browser and waits for manual login.
- * On platforms without Playwright (e.g. Android/Termux), uses the
- * phone's built-in browser + a local HTTP server to capture the token.
+ * On platforms without Playwright (e.g. Android/Termux), uses a
+ * reverse proxy to capture the token automatically.
  */
 export declare function captureToken(): Promise<boolean>;

package/dist/capture-token.js

@@ -1,7 +1,5 @@
 import { PROFILE_DIR, TOKEN_FILE, ensureInstallDir, saveToken, } from "./config.js";
 import * as readline from "readline";
-import { createServer } from "http";
-import { execSync } from "child_process";
 /**
  * Check if Playwright is available on this platform.
  * Playwright doesn't support Android/Termux.
@@ -20,24 +18,21 @@ function isPlaywrightAvailable() {
 /**
  * Try headless mode first (fast — works if session is still valid).
  * If no session, opens a headed browser and waits for manual login.
- * On platforms without Playwright (e.g. Android/Termux), uses the
- * phone's built-in browser + a local HTTP server to capture the token.
+ * On platforms without Playwright (e.g. Android/Termux), uses a
+ * reverse proxy to capture the token automatically.
  */
 export async function captureToken() {
     ensureInstallDir();
     if (!isPlaywrightAvailable()) {
-        return captureTokenViaBrowser();
+        return captureTokenViaProxy();
     }
-    // Lazy import — only load Playwright when available
     const { chromium } = await import("playwright");
-    // Step 1: Try headless (quick — works if session is still valid)
     console.log("Trying headless mode (existing session)...");
     let data = await tryCapture(chromium, true);
     if (data) {
         console.log("  Session still valid — token captured!");
     }
     else {
-        // Step 2: Need manual login
         console.log("  No valid session. Opening browser for manual login...");
         data = await tryCapture(chromium, false);
     }
@@ -53,184 +48,31 @@ export async function captureToken() {
 }
 /**
  * Capture token on platforms without Playwright (Android/Termux).
- * Starts a local HTTP server, opens the phone's browser to kalvium.community,
- * and after login the user pastes a JS snippet that sends the token back.
+ * Simple manual paste — user gets token from desktop and pastes it.
  */
-async function captureTokenViaBrowser() {
-    const PORT = 4567;
+async function captureTokenViaProxy() {
     console.log("\n  ========================================");
-    console.log("  Browser-based token capture (no Playwright)");
+    console.log("  Token Setup (Android/Termux)");
     console.log("  ========================================\n");
-    // Start local HTTP server
-    const tokenPromise = new Promise((resolve) => {
-        const server = createServer((req, res) => {
-            res.setHeader("Access-Control-Allow-Origin", "*");
-            res.setHeader("Access-Control-Allow-Headers", "Content-Type");
-            res.setHeader("Access-Control-Allow-Methods", "GET, POST, OPTIONS");
-            if (req.method === "OPTIONS") {
-                res.writeHead(204);
-                res.end();
-                return;
-            }
-            let body = "";
-            req.on("data", (chunk) => {
-                body += chunk;
-            });
-            req.on("end", () => {
-                // Token capture endpoint
-                if (req.url?.startsWith("/capture")) {
-                    try {
-                        let data;
-                        if (body) {
-                            data = JSON.parse(body);
-                        }
-                        else {
-                            const url = new URL(req.url, `http://localhost:${PORT}`);
-                            const tokenParam = url.searchParams.get("token");
-                            if (!tokenParam) {
-                                res.writeHead(400);
-                                res.end("Missing token");
-                                return;
-                            }
-                            data = JSON.parse(tokenParam);
-                        }
-                        if (data.refresh_token) {
-                            res.writeHead(200, { "Content-Type": "text/html" });
-                            res.end("<html><body style='font-family:sans-serif;text-align:center;padding:40px'><h2>✓ Token captured!</h2><p>You can close this tab and go back to Termux.</p></body></html>");
-                            resolve(data);
-                        }
-                        else {
-                            res.writeHead(400, { "Content-Type": "text/html" });
-                            res.end("<html><body><h2>Invalid token — missing refresh_token</h2></body></html>");
-                            resolve(null);
-                        }
-                    }
-                    catch {
-                        res.writeHead(400, { "Content-Type": "text/html" });
-                        res.end("<html><body><h2>Invalid JSON</h2></body></html>");
-                        resolve(null);
-                    }
-                    return;
-                }
-                // Main page — serves instructions + manual paste form
-                res.writeHead(200, { "Content-Type": "text/html" });
-                res.end(`<!DOCTYPE html>
-<html>
-<head>
-<meta name="viewport" content="width=device-width, initial-scale=1">
-<title>Kalvium Worklog — Login</title>
-<style>
-  * { box-sizing: border-box; }
-  body { font-family: -apple-system, sans-serif; max-width: 600px; margin: 0 auto; padding: 16px; line-height: 1.6; color: #333; }
-  h2 { color: #1a73e8; }
-  .step { background: #f0f4ff; border-radius: 12px; padding: 16px; margin: 12px 0; }
-  .step h3 { margin-top: 0; color: #1a73e8; }
-  .btn { display: block; text-align: center; background: #4285f4; color: white; padding: 14px; border-radius: 8px; text-decoration: none; font-size: 18px; font-weight: bold; margin: 12px 0; }
-  .btn-green { background: #34a853; }
-  .btn:active { opacity: 0.8; }
-  .code-box { background: #1e1e1e; color: #0f0; padding: 12px; border-radius: 8px; font-family: monospace; font-size: 12px; word-break: break-all; white-space: pre-wrap; user-select: all; }
-  .note { background: #fff8e1; border-radius: 8px; padding: 12px; margin: 12px 0; font-size: 14px; }
-  .warn { background: #fce4ec; border-radius: 8px; padding: 12px; margin: 12px 0; font-size: 14px; }
-  textarea { width: 100%; height: 120px; font-family: monospace; font-size: 12px; border: 2px solid #4285f4; border-radius: 8px; padding: 8px; }
-  #result { font-weight: bold; padding: 12px; border-radius: 8px; margin: 8px 0; display: none; }
-  .success { background: #e8f5e9; color: #2e7d32; }
-  .error { background: #ffebee; color: #c62828; }
-</style>
-</head>
-<body>
-<h2>Kalvium Worklog — Login</h2>
-
-<div class="step">
-  <h3>Step 1: Log in to Kalvium</h3>
-  <p>Tap below, log in with Google (2FA if asked).</p>
-  <a class="btn btn-green" href="https://kalvium.community/internships" target="_blank">Open Kalvium →</a>
-</div>
-
-<div class="step">
-  <h3>Step 2: Extract token</h3>
-  <p>After logging in, go to the Kalvium tab.<br>
-  <b>Type</b> this in the address bar (don't paste — type <code>javascript:</code> yourself, then paste the rest):</p>
-  <div class="code-box" id="jscode">javascript:void(function(){var t;for(var i=0;i<localStorage.length;i++){var k=localStorage.key(i),v=localStorage.getItem(i);if(v&&v.includes('refresh_token')){t=v}}if(!t){for(var i=0;i<sessionStorage.length;i++){var k=sessionStorage.key(i),v=sessionStorage.getItem(i);if(v&&v.includes('refresh_token')){t=v}}}if(t){fetch('http://localhost:${PORT}/capture',{method:'POST',body:t}).then(function(r){alert(r.ok?'Token sent! Go back to Termux':'Failed: '+r.status)}).catch(function(e){alert('Error: '+e)})}else{alert('No token found. Are you logged in?')}})()</div>
-  <p><small>👆 Long-press the code above → "Copy", then go to Kalvium tab, type <code>javascript:</code> in address bar, paste the rest after it, press Enter.</small></p>
-</div>
-
-<div class="warn">
-  <b>Brave users:</b> Brave strips <code>javascript:</code> when pasting. You must <b>type</b> <code>javascript:</code> manually, then paste only the code after <code>javascript:</code>.
-</div>
-
-<div class="step">
-  <h3>Or: Paste token manually</h3>
-  <p>If the above doesn't work, extract the token another way and paste it here:</p>
-  <textarea id="manualToken" placeholder='Paste token JSON here (starts with {"access_token"...'></textarea>
-  <button class="btn" onclick="sendManual()">Send Token</button>
-  <div id="result"></div>
-</div>
-
-<script>
-function sendManual() {
-  var val = document.getElementById('manualToken').value.trim();
-  var result = document.getElementById('result');
-  result.style.display = 'block';
-  if (!val) { result.className = 'error'; result.textContent = 'Paste token JSON first'; return; }
-  fetch('http://localhost:${PORT}/capture', { method: 'POST', body: val })
-    .then(function(r) {
-      if (r.ok) { result.className = 'success'; result.textContent = '✓ Token sent! Go back to Termux.'; }
-      else { result.className = 'error'; result.textContent = 'Failed: ' + r.status; }
-    })
-    .catch(function(e) { result.className = 'error'; result.textContent = 'Error: ' + e; });
-}
-</script>
-
-</body>
-</html>`);
-            });
-        });
-        server.listen(PORT, () => {
-            console.log(`  Local server running on http://localhost:${PORT}`);
-        });
-        setTimeout(() => {
-            server.close();
-            resolve(null);
-        }, 300000);
-    });
-    // Open the localhost page in the browser
-    const localUrl = `http://localhost:${PORT}`;
-    try {
-        if (process.platform === "android") {
-            execSync(`termux-open-url ${localUrl}`, { stdio: "ignore" });
-        }
-        else {
-            execSync(`xdg-open ${localUrl} || open ${localUrl}`, {
-                stdio: "ignore",
-            });
-        }
-        console.log(`  Opened ${localUrl} in your browser.`);
-    }
-    catch {
-        console.log(`  Could not auto-open browser. Please open: ${localUrl}`);
-    }
-    console.log("\n  ────────────────────────────────────────────");
-    console.log("  A page opened in your browser with instructions:");
-    console.log("  1. Click 'Open Kalvium' and log in");
-    console.log("  2. Long-press 'Capture Token' → Bookmark it");
-    console.log("  3. Go to Kalvium tab → open the bookmark");
+    console.log("  Playwright doesn't work on Android, so you");
+    console.log("  need to get your token from a desktop.\n");
     console.log("  ────────────────────────────────────────────");
-    console.log("\n  Waiting for token (up to 5 minutes)...\n");
-    const data = await tokenPromise;
-    if (data) {
-        saveToken(data);
-        console.log(`\n✓ Token captured and saved to ${TOKEN_FILE}`);
-        console.log(`  Access token expires in: ${data.expires_in ?? "?"} seconds`);
-        console.log(`  Refresh token expires in: ${data.refresh_expires_in ?? "?"} seconds`);
-        return true;
-    }
-    // Fallback: manual paste
-    console.log("\n  Automatic capture failed. Let's try manual paste.");
+    console.log("  ON YOUR DESKTOP/LAPTOP:");
+    console.log("  ────────────────────────────────────────────");
+    console.log("  1. Install:  npm install -g kalvium-worklog");
+    console.log("  2. Run:      kalvium-worklog login");
+    console.log("  3. Log in with Google");
+    console.log("  4. Run:      cat ~/.kalvium/refresh_token.json");
+    console.log("  5. Copy the entire JSON output\n");
+    console.log("  ────────────────────────────────────────────");
+    console.log("  THEN ON YOUR PHONE:");
+    console.log("  ────────────────────────────────────────────");
+    console.log("  6. Paste the JSON below\n");
     return captureTokenManual();
 }
 /**
- * Manual token capture — fallback for platforms without Playwright.
- * Prompts the user to paste a refresh token JSON obtained from a desktop.
+ * Manual token capture — fallback.
+ * Prompts the user to paste a refresh token JSON.
  */
 async function captureTokenManual() {
     console.log("\n  ========================================");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kalvium-worklog",
-  "version": "1.4.3",
+  "version": "1.4.5",
   "description": "Auto-submit your daily Kalvium worklog without opening the website",
   "keywords": [
     "kalvium",