kojee-mcp 0.5.13 → 0.5.15

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kojee-mcp",
-  "version": "0.5.13",
+  "version": "0.5.15",
   "type": "module",
   "main": "dist/index.js",
   "exports": {
@@ -16,7 +16,7 @@
   },
   "_buildNote": "src/version.ts resolves package.json via '../package.json' from import.meta.url; this assumes dist output stays flat one level under the package root (tsup default outDir=dist, no nesting). If the build adds outDir nesting or a deeper entry, update version.ts's relative path.",
   "scripts": {
-    "build": "tsup src/cli.ts src/index.ts src/lib.ts --format esm --dts --clean",
+    "build": "tsup src/cli.ts src/index.ts src/lib.ts --format esm --dts --clean && tsx scripts/bundle-plugins.ts",
     "prepublishOnly": "npm run build && node scripts/verify-tarball.mjs",
     "dev": "tsup src/cli.ts --format esm --watch",
     "typecheck": "tsc --noEmit",

package/dist/wizard-L4MYRLJI.js

@@ -1,382 +0,0 @@
-import {
-  clearRuntimeRecord,
-  readRecordedRuntime,
-  recordRuntime
-} from "./chunk-EW72ZNQL.js";
-import {
-  buildCodexMcpServerTable,
-  buildCodexStopHookBlock,
-  removeCodexConfig,
-  writeCodexConfig
-} from "./chunk-65KRRDHP.js";
-import {
-  kojeeHomeDir
-} from "./chunk-SQL56SEB.js";
-import {
-  WIZARD_RUNTIMES,
-  isWizardRuntime
-} from "./chunk-LVL25VLO.js";
-import {
-  resolveSignatureEmission,
-  resolveWebhookConfig
-} from "./chunk-V5VZPYMZ.js";
-import {
-  secureFile
-} from "./chunk-BLEGIR35.js";
-import {
-  CODEX_LISTEN_CAP_MS,
-  buildWebhookReceiverNote
-} from "./chunk-X672ZN7V.js";
-
-// src/wizard/wizard.ts
-import crypto from "crypto";
-import fs from "fs";
-import path from "path";
-var DEFAULT_BROKER_URL = "https://rosie-staging.kojee.net";
-function generateWebhookSecret() {
-  return crypto.randomBytes(32).toString("hex");
-}
-async function resolveRuntime(opts) {
-  if (opts.runtime !== void 0) {
-    if (!isWizardRuntime(opts.runtime)) {
-      return {
-        error: `Unknown --runtime "${opts.runtime}". Expected one of: ${WIZARD_RUNTIMES.join(", ")}.`
-      };
-    }
-    return { runtime: opts.runtime };
-  }
-  if (opts.interactive && opts.promptRuntime) {
-    const picked = await opts.promptRuntime();
-    if (!isWizardRuntime(picked)) {
-      return { error: `Unknown runtime "${picked}". Expected one of: ${WIZARD_RUNTIMES.join(", ")}.` };
-    }
-    return { runtime: picked };
-  }
-  return { runtime: "claude-code" };
-}
-function resolveWizardWebhook(opts) {
-  const env = opts.env ?? process.env;
-  const url = (opts.webhookUrl ?? env["KOJEE_WEBHOOK_URL"] ?? "").trim();
-  let secret = (opts.webhookSecret ?? env["KOJEE_WEBHOOK_SECRET"] ?? "").trim();
-  if (url && !secret) secret = generateWebhookSecret();
-  const sigFormat = (opts.webhookSignatureFormat ?? env["KOJEE_WEBHOOK_SIGNATURE_FORMAT"] ?? "").trim();
-  const sigHeader = (opts.webhookSignatureHeader ?? env["KOJEE_WEBHOOK_SIGNATURE_HEADER"] ?? "").trim();
-  const sigPrefix = opts.webhookSignaturePrefix ?? env["KOJEE_WEBHOOK_SIGNATURE_PREFIX"];
-  const signatureEnv = [];
-  if (sigFormat) signatureEnv.push(["KOJEE_WEBHOOK_SIGNATURE_FORMAT", sigFormat]);
-  if (sigHeader) signatureEnv.push(["KOJEE_WEBHOOK_SIGNATURE_HEADER", sigHeader]);
-  if (sigPrefix !== void 0) signatureEnv.push(["KOJEE_WEBHOOK_SIGNATURE_PREFIX", sigPrefix]);
-  const emission = resolveSignatureEmission(Object.fromEntries(signatureEnv));
-  const resolution = resolveWebhookConfig({
-    KOJEE_WEBHOOK_URL: url,
-    KOJEE_WEBHOOK_SECRET: secret,
-    ...env["KOJEE_WEBHOOK_TIMEOUT_MS"] !== void 0 ? { KOJEE_WEBHOOK_TIMEOUT_MS: env["KOJEE_WEBHOOK_TIMEOUT_MS"] } : {},
-    ...env["KOJEE_WEBHOOK_MAX_RETRIES"] !== void 0 ? { KOJEE_WEBHOOK_MAX_RETRIES: env["KOJEE_WEBHOOK_MAX_RETRIES"] } : {},
-    ...Object.fromEntries(signatureEnv)
-  });
-  const warning = resolution.warning ?? (emission.warnings.length > 0 ? emission.warnings.join("; ") : void 0);
-  if (resolution.error) {
-    return {
-      url,
-      secret,
-      redactedSummary: "",
-      signatureEnv,
-      signatureHeader: emission.header,
-      signaturePrefix: emission.prefix,
-      error: resolution.error
-    };
-  }
-  return {
-    url,
-    secret,
-    redactedSummary: resolution.config?.redactedSummary ?? `url=${url} secret=<redacted>`,
-    signatureEnv,
-    signatureHeader: emission.header,
-    signaturePrefix: emission.prefix,
-    ...warning !== void 0 ? { warning } : {}
-  };
-}
-function shellSingleQuote(value) {
-  return `'${value.replace(/'/g, `'\\''`)}'`;
-}
-function writeRuntimeEnvFile(runtime, url, secret, signatureEnv = []) {
-  const envPath = path.join(kojeeHomeDir(), ".kojee", `${runtime}.env`);
-  const body = [
-    `# kojee daemon env for runtime=${runtime} (source this before starting the daemon)`,
-    `export KOJEE_RUNTIME=${shellSingleQuote(runtime)}`,
-    `export KOJEE_WEBHOOK_URL=${shellSingleQuote(url)}`,
-    `export KOJEE_WEBHOOK_SECRET=${shellSingleQuote(secret)}`,
-    // Signature emission overrides (0.5.3) — only when explicitly configured.
-    ...signatureEnv.map(([k, v]) => `export ${k}=${shellSingleQuote(v)}`),
-    ""
-  ].join("\n");
-  fs.mkdirSync(path.dirname(envPath), { recursive: true, mode: 448 });
-  fs.writeFileSync(envPath, body, { mode: 384 });
-  secureFile(envPath);
-  return envPath;
-}
-var CODEX_UNVERIFIED_NOTE = "NOTE: live Codex verification (hook fires, MCP server connects, bounded listen works) has not been run on this build \u2014 confirm in a real Codex session. This is the owner morning step.";
-function runtimeUsesWebhook(runtime) {
-  return runtime === "codex" || runtime === "hermes" || runtime === "openclaw";
-}
-async function gatherGuidedInputs(runtime, opts) {
-  const preamble = [];
-  const next = { ...opts };
-  if (opts.promptUrl) {
-    const answered = (await opts.promptUrl(opts.url ?? DEFAULT_BROKER_URL)).trim();
-    next.url = (answered.length > 0 ? answered : opts.url ?? DEFAULT_BROKER_URL).replace(/\/+$/, "");
-  }
-  const brokerUrl = (next.url ?? DEFAULT_BROKER_URL).replace(/\/+$/, "");
-  if (opts.promptAuth) {
-    const mode = await opts.promptAuth();
-    if (mode === "token") {
-      const token = opts.promptToken ? (await opts.promptToken()).trim() : "";
-      if (!token) return { error: "No token entered. Re-run `kojee-mcp init` and paste a token, or choose pair mode." };
-      next.token = token;
-      next.url = brokerUrl;
-      preamble.push("Auth: token mode \u2014 the written MCP config will launch the proxy with --token/--url");
-      preamble.push("      (it enrolls its own per-token keystore on first boot).");
-    } else {
-      const code = opts.promptPairCode ? (await opts.promptPairCode()).trim() : "";
-      if (!code) return { error: "No pair code entered. Re-run `kojee-mcp init` and enter a pair code, or choose token mode." };
-      const pair = opts.runPair ?? (async (a) => {
-        const { runPair } = await import("./pair-P4ILCMT7.js");
-        const { pairedConfigPath } = await import("./paired-config-JTFLHMZ2.js");
-        const { defaultPairedKeystorePath } = await import("./keystore-XLEV3FL5.js");
-        return runPair({ code: a.code, url: a.url, keystorePath: defaultPairedKeystorePath(), configPath: pairedConfigPath() });
-      });
-      try {
-        const { message } = await pair({ code, url: brokerUrl });
-        preamble.push(`Auth: pair mode \u2014 ${message}`);
-      } catch (err) {
-        return { error: `Pairing failed: ${err.message}` };
-      }
-    }
-  }
-  if (runtimeUsesWebhook(runtime) && opts.promptWebhookUrl && opts.webhookUrl === void 0) {
-    const wh = (await opts.promptWebhookUrl()).trim();
-    if (wh.length > 0) next.webhookUrl = wh;
-  }
-  return { opts: next, preamble };
-}
-async function runWizard(opts) {
-  const resolved = await resolveRuntime(opts);
-  if ("error" in resolved) {
-    return { runtime: "claude-code", output: resolved.error, exitCode: 2 };
-  }
-  const runtime = resolved.runtime;
-  if (opts.uninstall) {
-    return runWizardUninstall(runtime, opts);
-  }
-  let effective = opts;
-  let preamble = [];
-  if (opts.interactive && (opts.promptUrl || opts.promptAuth || opts.promptWebhookUrl)) {
-    const gathered = await gatherGuidedInputs(runtime, opts);
-    if ("error" in gathered) {
-      return { runtime, output: gathered.error, exitCode: 2 };
-    }
-    effective = gathered.opts;
-    preamble = gathered.preamble;
-  }
-  const result = runtime === "claude-code" ? await configureClaudeCode(effective) : runtime === "codex" ? configureCodex(effective) : configureWebhookDaemon(runtime, effective);
-  if (preamble.length > 0 && result.exitCode === 0) {
-    return {
-      ...result,
-      output: [...preamble, "", result.output, "", whatHappensNext(runtime, effective)].join("\n")
-    };
-  }
-  return result;
-}
-function whatHappensNext(runtime, opts) {
-  const lines = ["What happens next:"];
-  lines.push("  - Restart your runtime so it picks up the new kojee config.");
-  if (opts.token) {
-    lines.push("  - First boot enrolls this token's own keystore (~/.kojee/keypair-<hash>.json).");
-  } else {
-    lines.push("  - The proxy uses your paired credentials (~/.kojee/config.json + keypair.json).");
-  }
-  lines.push("  - Verify with: kojee-mcp doctor");
-  return lines.join("\n");
-}
-async function configureClaudeCode(opts) {
-  const { runInit } = await import("./install-LJY2CHKG.js");
-  const report = runInit({
-    ...opts.configPath ? { configPath: opts.configPath } : {},
-    ...opts.hooksPath ? { hooksPath: opts.hooksPath } : {},
-    // Token mode threads --token/--url into the written args (per-token
-    // keystore). Paired mode leaves both unset ⇒ args stay `["kojee-mcp"]`.
-    ...opts.token && opts.url ? { token: opts.token, url: opts.url } : {}
-  });
-  recordRuntime("claude-code");
-  return { runtime: "claude-code", output: formatClaudeInit(report), exitCode: 0 };
-}
-function formatClaudeInit(report) {
-  const tick = (s) => {
-    if (s === "added") return "\u2713 added";
-    if (s === "already-installed") return "\u21BB already installed";
-    if (s === "preserved-different") return "\u26A0 preserved (existing entry differs \u2014 left untouched)";
-    if (s === "not-found") return "\u2014 not found";
-    return s ?? "\u2014";
-  };
-  const lines = ["Configured runtime: claude-code", "", "Installing kojee for Claude:"];
-  for (const t of report.targets) {
-    const label = t.kind === "cli" ? "CLI" : "Claude.app";
-    lines.push("");
-    lines.push(`  ${t.path} (${label})`);
-    lines.push(`    mcpServers.kojee           ${tick(t.mcpServer)}`);
-    if (t.kind === "cli") {
-      if (t.hooksPath) lines.push(`  ${t.hooksPath} (hooks)`);
-      lines.push(`    hooks.Stop                 ${tick(t.stopHook)}`);
-      lines.push(`    hooks.UserPromptSubmit     ${tick(t.userPromptSubmitHook)}`);
-    } else {
-      lines.push(`    (hooks not applicable for Claude.app agent mode)`);
-    }
-  }
-  lines.push("");
-  if (report.targets.some((t) => t.kind === "desktop" && t.mcpServer === "added")) {
-    lines.push(
-      "Existing Claude.app agent-mode sessions snapshotted the previous config",
-      "and won't pick up this change automatically. Start a NEW agent-mode",
-      "session (not a resumed one) to use the updated kojee config.",
-      ""
-    );
-  }
-  lines.push("To verify: in any new CC session, run /mcp and confirm `kojee` is listed.");
-  lines.push("                          run /hooks and confirm both Stop and UserPromptSubmit show the kojee entries.");
-  lines.push("To remove: `kojee-mcp init --uninstall`");
-  return lines.join("\n");
-}
-function configureCodex(opts) {
-  const wh = resolveWizardWebhook(opts);
-  if (wh.error) {
-    return { runtime: "codex", output: `webhook env ERROR: ${wh.error}`, exitCode: 2 };
-  }
-  const url = wh.url || "https://YOUR-CODEX-WEBHOOK-RECEIVER.local/kojee";
-  const secret = wh.secret || generateWebhookSecret();
-  const tokenArgs = opts.token && opts.url ? { token: opts.token, url: opts.url } : {};
-  writeCodexConfig({
-    ...opts.configPath ? { configPath: opts.configPath } : {},
-    ...opts.hooksPath ? { hooksPath: opts.hooksPath } : {},
-    webhookUrl: url,
-    webhookSecret: secret,
-    ...wh.signatureEnv.length > 0 ? { signatureEnv: wh.signatureEnv } : {},
-    ...tokenArgs
-  });
-  recordRuntime("codex");
-  const lines = [];
-  lines.push("Configured runtime: codex");
-  lines.push("Wake mode: webhook-sink + stop-hook peek (Codex has no channel injection).");
-  lines.push("");
-  lines.push("Wrote [mcp_servers.kojee] to ~/.codex/config.toml:");
-  lines.push(indent(buildCodexMcpServerTable({
-    webhookUrl: url,
-    webhookSecret: "<redacted>",
-    ...wh.signatureEnv.length > 0 ? { signatureEnv: wh.signatureEnv } : {},
-    // Redact the gateway token in the human-readable printed copy (it ends up
-    // in result.output → cli.ts console.error). The WRITTEN config above keeps
-    // the real token; only this printed report is redacted, like webhookSecret.
-    ...tokenArgs.token ? { token: "<redacted>", url: tokenArgs.url } : {}
-  })));
-  if (wh.warning) lines.push(`webhook WARNING: ${wh.warning}`);
-  lines.push("");
-  lines.push("Wrote the Codex Stop hook (~/.codex/hooks.json; inline TOML form):");
-  lines.push(indent(buildCodexStopHookBlock()));
-  lines.push("");
-  lines.push(`webhook: ${wh.url ? wh.redactedSummary : "(receiver URL not set \u2014 fill KOJEE_WEBHOOK_URL above)"}`);
-  lines.push(`bounded-listen cap: ${CODEX_LISTEN_CAP_MS}ms (the model picks listen vs drain vs ignore).`);
-  lines.push("");
-  lines.push("Next steps (codex):");
-  lines.push("  Restart Codex (or start a new `codex` / `codex exec` session) to load the MCP server and hook.");
-  lines.push("  Stand up your webhook receiver at KOJEE_WEBHOOK_URL \u2014 contract:");
-  lines.push(indent(buildWebhookReceiverNote({ header: wh.signatureHeader, prefix: wh.signaturePrefix })));
-  lines.push("  Verify: kojee-mcp doctor");
-  lines.push("");
-  lines.push(CODEX_UNVERIFIED_NOTE);
-  return { runtime: "codex", output: lines.join("\n"), exitCode: 0 };
-}
-function configureWebhookDaemon(runtime, opts) {
-  const wh = resolveWizardWebhook(opts);
-  if (wh.error) {
-    return { runtime, output: `webhook env ERROR: ${wh.error}`, exitCode: 2 };
-  }
-  recordRuntime(runtime);
-  const lines = [];
-  lines.push(`Configured runtime: ${runtime}`);
-  lines.push("Wake mode: webhook sink (daemon-consumed). NO MCP-config file, NO hooks written.");
-  lines.push("");
-  if (wh.warning) lines.push(`webhook WARNING: ${wh.warning}`);
-  if (wh.url) {
-    const envFile = writeRuntimeEnvFile(runtime, wh.url, wh.secret, wh.signatureEnv);
-    lines.push("Export these before starting the daemon (also written to a source-able file):");
-    lines.push(`  export KOJEE_RUNTIME=${shellSingleQuote(runtime)}`);
-    lines.push(`  export KOJEE_WEBHOOK_URL=${shellSingleQuote(wh.url)}`);
-    lines.push(`  export KOJEE_WEBHOOK_SECRET=<generated; in ${envFile}>`);
-    for (const [k, v] of wh.signatureEnv) lines.push(`  export ${k}=${shellSingleQuote(v)}`);
-    lines.push(`  (validated: ${wh.redactedSummary})`);
-    lines.push(`  source ${envFile}`);
-  } else {
-    lines.push("Set the daemon env (no receiver URL supplied yet):");
-    lines.push(`  export KOJEE_RUNTIME=${shellSingleQuote(runtime)}`);
-    lines.push(`  export KOJEE_WEBHOOK_URL="https://YOUR-RECEIVER.local/kojee"`);
-    lines.push(`  export KOJEE_WEBHOOK_SECRET=<generate a hex secret>`);
-    for (const [k, v] of wh.signatureEnv) lines.push(`  export ${k}=${shellSingleQuote(v)}`);
-  }
-  lines.push("");
-  lines.push("Receiver contract:");
-  lines.push(indent(buildWebhookReceiverNote({ header: wh.signatureHeader, prefix: wh.signaturePrefix })));
-  lines.push("");
-  lines.push(`Next steps (${runtime}):`);
-  lines.push("  Start the daemon with the env above. Verify: kojee-mcp doctor (after the daemon is up).");
-  return { runtime, output: lines.join("\n"), exitCode: 0 };
-}
-async function runWizardUninstall(runtime, opts) {
-  const effective = opts.runtime !== void 0 ? runtime : readRecordedRuntime() ?? runtime;
-  const lines = [`Uninstalling runtime: ${effective}`];
-  if (effective === "claude-code") {
-    const { runUninstall } = await import("./install-LJY2CHKG.js");
-    const report = runUninstall({
-      ...opts.configPath ? { configPath: opts.configPath } : {},
-      ...opts.hooksPath ? { hooksPath: opts.hooksPath } : {}
-    });
-    lines.push("Removing kojee from Claude:");
-    for (const t of report.targets) {
-      const label = t.kind === "cli" ? "CLI" : "Claude.app";
-      lines.push("");
-      lines.push(`  ${t.path} (${label})`);
-      lines.push(`    mcpServers.kojee   ${t.mcpServer ? "\u2713 removed" : "\u2014 not found"}`);
-      if (t.kind === "cli") {
-        if (t.hooksPath) lines.push(`  ${t.hooksPath} (hooks)`);
-        lines.push(`    hook entries       ${t.hooks ? "\u2713 removed" : "\u2014 not found"}`);
-      }
-    }
-  } else if (effective === "codex") {
-    const removed = removeCodexConfig({
-      ...opts.configPath ? { configPath: opts.configPath } : {},
-      ...opts.hooksPath ? { hooksPath: opts.hooksPath } : {}
-    });
-    lines.push(`  config.toml [mcp_servers.kojee]: ${removed.mcpServer ? "removed" : "not found"}`);
-    lines.push(`  hooks.json Stop: ${removed.stopHook ? "removed" : "not found"}`);
-  } else {
-    lines.push("  (hermes/openclaw write no MCP-config or hooks \u2014 nothing to tear down.");
-    lines.push("   Stop the daemon and unset KOJEE_WEBHOOK_URL/SECRET to disable the sink.)");
-    const envPath = path.join(kojeeHomeDir(), ".kojee", `${effective}.env`);
-    try {
-      fs.unlinkSync(envPath);
-      lines.push(`  removed ${envPath}`);
-    } catch {
-    }
-  }
-  clearRuntimeRecord();
-  return { runtime: effective, output: lines.join("\n"), exitCode: 0 };
-}
-function indent(s) {
-  return s.split("\n").map((l) => "    " + l).join("\n");
-}
-export {
-  CODEX_UNVERIFIED_NOTE,
-  DEFAULT_BROKER_URL,
-  generateWebhookSecret,
-  resolveRuntime,
-  resolveWizardWebhook,
-  runWizard
-};