npm - zephex - Versions diffs - 2.1.1 → 2.1.3 - Mend

zephex 2.1.1 → 2.1.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (2) hide show

package/dist/cli.js +49 -285
package/package.json +1 -1

package/dist/cli.js CHANGED Viewed

@@ -195,16 +195,13 @@ var require_picocolors = __commonJS((exports, module) => {
 });
 // src/cli.ts
-import { fileURLToPath as fileURLToPath3 } from "url";
+import { fileURLToPath as fileURLToPath2 } from "url";
 import { resolve, dirname } from "path";
 // src/commands/setup.ts
-import http from "node:http";
-import crypto from "node:crypto";
 import fs7 from "node:fs";
 import path3 from "node:path";
 import os3 from "node:os";
-import { fileURLToPath as fileURLToPath2 } from "node:url";
 import { spawnSync } from "node:child_process";
 // node_modules/.bun/@clack+prompts@0.9.1/node_modules/@clack/prompts/dist/index.mjs
@@ -1423,38 +1420,10 @@ async function runSkills(argv) {
 }
 // src/commands/setup.ts
-var CACHED_CLI_VERSION = null;
-function getCliVersion() {
-  if (CACHED_CLI_VERSION !== null)
-    return CACHED_CLI_VERSION;
-  try {
-    const here = fileURLToPath2(import.meta.url);
-    let dir = path3.dirname(here);
-    for (let depth = 0;depth < 6; depth++) {
-      const candidate = path3.join(dir, "package.json");
-      if (fs7.existsSync(candidate)) {
-        const json = JSON.parse(fs7.readFileSync(candidate, "utf8"));
-        if (json.name === "zephex" && typeof json.version === "string") {
-          CACHED_CLI_VERSION = json.version;
-          return CACHED_CLI_VERSION;
-        }
-      }
-      const parent = path3.dirname(dir);
-      if (parent === dir)
-        break;
-      dir = parent;
-    }
-  } catch {}
-  CACHED_CLI_VERSION = "unknown";
-  return CACHED_CLI_VERSION;
-}
-var DEFAULT_AUTH0_CLI_CLIENT_ID = process.env.AUTH0_CLI_CLIENT_ID ?? "AUTH0_CLI_CLIENT_ID_NOT_SET";
-var DEFAULT_AUTH0_DOMAIN = "zephex.us.auth0.com";
-var DEFAULT_AUTH0_AUDIENCE = "https://zephex.dev/mcp";
+var DEFAULT_AUTH0_CLI_CLIENT_ID = process.env.AUTH0_CLI_CLIENT_ID ?? "2JrCMEKyOdY1YDZxInqTamSGNSCX9DaS";
 var ZEPHEX_API_BASE = "https://zephex.dev";
 var ZEPHEX_MCP_URL = "https://zephex.dev/mcp";
 var DASHBOARD_KEYS_URL = "https://zephex.dev/dashboard/keys";
-var CALLBACK_PORTS = [52748, 52749, 52750];
 function parseFlags2(argv) {
   let mode = null;
   let editor = null;
@@ -1577,257 +1546,55 @@ function prettyPath2(absPath) {
   }
   return absPath;
 }
-function base64url(buf) {
-  return buf.toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-}
-function base64urlDecode(input) {
-  const pad = input.length % 4 === 0 ? "" : "=".repeat(4 - input.length % 4);
-  const normalized = input.replace(/-/g, "+").replace(/_/g, "/") + pad;
-  return Buffer.from(normalized, "base64");
-}
-function generatePkce() {
-  const verifier = base64url(crypto.randomBytes(32));
-  const challenge = base64url(crypto.createHash("sha256").update(verifier).digest());
-  return { verifier, challenge };
-}
-function decodeJwtEmail(token) {
-  try {
-    const parts = token.split(".");
-    if (parts.length < 2)
-      return null;
-    const payloadStr = base64urlDecode(parts[1] ?? "").toString("utf8");
-    const payload = JSON.parse(payloadStr);
-    const email = payload["email"];
-    if (typeof email === "string" && email.length > 0)
-      return email;
-    return null;
-  } catch {
-    return null;
-  }
-}
-var SUCCESS_HTML = `<!DOCTYPE html>
-<html>
-<head>
-  <title>Zephex Connected</title>
-  <style>
-    body { background: #0f0f13; color: #e0e0e0; font-family: ui-sans-serif, system-ui, sans-serif;
-           display: flex; align-items: center; justify-content: center; height: 100vh; margin: 0; }
-    .box { text-align: center; }
-    .check { font-size: 48px; color: #7c3aed; margin-bottom: 16px; }
-    h1 { font-size: 24px; margin: 0 0 8px; }
-    p { color: #888; margin: 0; }
-  </style>
-</head>
-<body>
-  <div class="box">
-    <div class="check">✓</div>
-    <h1>You're connected to Zephex</h1>
-    <p>You can close this tab and return to your terminal.</p>
-  </div>
-</body>
-</html>`;
-function errorHtml(message) {
-  return `<!DOCTYPE html>
-<html>
-<head>
-  <title>Zephex — Login failed</title>
-  <style>
-    body { background: #0f0f13; color: #e0e0e0; font-family: ui-sans-serif, system-ui, sans-serif;
-           display: flex; align-items: center; justify-content: center; height: 100vh; margin: 0; }
-    .box { text-align: center; max-width: 480px; padding: 0 24px; }
-    .x { font-size: 48px; color: #dc2626; margin-bottom: 16px; }
-    h1 { font-size: 24px; margin: 0 0 8px; }
-    p { color: #888; margin: 0; }
-  </style>
-</head>
-<body>
-  <div class="box">
-    <div class="x">✕</div>
-    <h1>Login failed</h1>
-    <p>${escapeHtml(message)}</p>
-  </div>
-</body>
-</html>`;
-}
-async function startCallbackServer(expectedState) {
-  let lastErr = null;
-  for (const port of CALLBACK_PORTS) {
-    try {
-      const server = http.createServer();
-      await new Promise((resolve, reject) => {
-        const onError = (err) => {
-          server.removeListener("listening", onListen);
-          reject(err);
-        };
-        const onListen = () => {
-          server.removeListener("error", onError);
-          resolve();
-        };
-        server.once("error", onError);
-        server.once("listening", onListen);
-        server.listen(port, "127.0.0.1");
-      });
-      const result = new Promise((resolve, reject) => {
-        server.on("request", (req, res) => {
-          if (!req.url) {
-            res.writeHead(400).end();
-            return;
-          }
-          const reqUrl = new URL(req.url, `http://127.0.0.1:${port}`);
-          if (reqUrl.pathname !== "/callback") {
-            res.writeHead(404, { "Content-Type": "text/plain" }).end("Not found");
-            return;
-          }
-          const code = reqUrl.searchParams.get("code");
-          const state = reqUrl.searchParams.get("state");
-          const errParam = reqUrl.searchParams.get("error");
-          const errDesc = reqUrl.searchParams.get("error_description");
-          if (errParam) {
-            res.writeHead(400, { "Content-Type": "text/html; charset=utf-8" }).end(errorHtml(errDesc ?? errParam));
-            reject(new Error(`Auth0 returned error: ${errParam}${errDesc ? ` (${errDesc})` : ""}`));
-            return;
-          }
-          if (!code || !state) {
-            res.writeHead(400, { "Content-Type": "text/html; charset=utf-8" }).end(errorHtml("Missing authorization code or state."));
-            reject(new Error("Missing code or state on callback"));
-            return;
-          }
-          if (state !== expectedState) {
-            res.writeHead(400, { "Content-Type": "text/html; charset=utf-8" }).end(errorHtml("Invalid state — possible CSRF."));
-            reject(new Error("OAuth state mismatch — possible CSRF; aborting"));
-            return;
-          }
-          res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" }).end(SUCCESS_HTML);
-          resolve({ code, state });
-        });
-      });
-      return {
-        port,
-        waitForCallback: () => result,
-        close: () => {
-          server.close();
-        }
-      };
-    } catch (err) {
-      const e2 = err;
-      lastErr = e2 instanceof Error ? e2 : new Error(String(e2));
-      if (e2?.code !== "EADDRINUSE") {
-        throw lastErr;
-      }
-    }
-  }
-  throw new Error(`Could not bind any local callback port (${CALLBACK_PORTS.join(", ")}). ${lastErr?.message ?? ""}`.trim());
-}
-function escapeHtml(value) {
-  return value.replace(/[&<>"']/g, (ch) => {
-    switch (ch) {
-      case "&":
-        return "&amp;";
-      case "<":
-        return "&lt;";
-      case ">":
-        return "&gt;";
-      case '"':
-        return "&quot;";
-      case "'":
-        return "&#39;";
-      default:
-        return ch;
-    }
-  });
-}
-async function exchangeCodeForToken(params) {
-  const resp = await fetch(`https://${params.domain}/oauth/token`, {
+async function loginAndGetApiKey(editor) {
+  const sessionResp = await fetch(`${ZEPHEX_API_BASE}/api/cli/session`, {
     method: "POST",
-    headers: { "Content-Type": "application/json" },
-    body: JSON.stringify({
-      grant_type: "authorization_code",
-      client_id: params.clientId,
-      code_verifier: params.verifier,
-      code: params.code,
-      redirect_uri: params.redirectUri
-    })
+    headers: { "Content-Type": "application/json" }
   });
-  if (!resp.ok) {
-    const text = await resp.text().catch(() => "");
-    throw new Error(`Token exchange failed (${resp.status}): ${text || resp.statusText}`);
-  }
-  const json = await resp.json();
-  if (!json.access_token || typeof json.access_token !== "string") {
-    throw new Error("Token response missing access_token");
+  if (!sessionResp.ok) {
+    throw new Error("Failed to start auth session. Is zephex.dev reachable?");
   }
-  return json;
-}
-async function loginAndGetApiKey(editor) {
-  const clientId = process.env["AUTH0_CLI_CLIENT_ID"] || DEFAULT_AUTH0_CLI_CLIENT_ID;
-  const domain = process.env["AUTH0_DOMAIN"] || DEFAULT_AUTH0_DOMAIN;
-  const audience = process.env["AUTH0_AUDIENCE"] || DEFAULT_AUTH0_AUDIENCE;
-  const { verifier, challenge } = generatePkce();
-  const state = base64url(crypto.randomBytes(16));
-  const callback = await startCallbackServer(state);
+  const { session_id } = await sessionResp.json();
+  const authUrl = `${ZEPHEX_API_BASE}/cli/auth?session=${encodeURIComponent(session_id)}`;
+  ye("Opening zephex.dev in your browser...", "Sign in");
   try {
-    const redirectUri = `http://127.0.0.1:${callback.port}/callback`;
-    const authorizeUrl = `https://${domain}/authorize` + `?response_type=code` + `&client_id=${encodeURIComponent(clientId)}` + `&redirect_uri=${encodeURIComponent(redirectUri)}` + `&scope=${encodeURIComponent("openid profile email")}` + `&state=${encodeURIComponent(state)}` + `&code_challenge=${encodeURIComponent(challenge)}` + `&code_challenge_method=S256` + `&audience=${encodeURIComponent(audience)}`;
-    ye("Opening zephex.dev in your browser...", "Sign in");
-    try {
-      await open_default(authorizeUrl);
-    } catch {
-      v2.message(`If your browser didn't open, paste this URL:
-${authorizeUrl}`);
-    }
-    const sp = L2();
-    sp.start("Waiting for you to sign in...");
-    try {
-      const { code } = await callback.waitForCallback();
-      sp.message("Waiting for you to sign in...");
-      const token = await exchangeCodeForToken({
-        domain,
-        clientId,
-        code,
-        verifier,
-        redirectUri
-      });
-      const email = decodeJwtEmail(token.id_token ?? "") ?? decodeJwtEmail(token.access_token);
-      const keyInfo = await provisionCliKey(token.access_token, editor);
-      sp.stop("Signed in");
-      return { keyInfo, email };
-    } catch (err) {
-      sp.stop("Sign-in failed");
-      throw err;
-    }
-  } finally {
-    callback.close();
-  }
-}
-async function provisionCliKey(accessToken, editor) {
-  const cliVersion = getCliVersion();
-  const resp = await fetch(`${ZEPHEX_API_BASE}/api/cli/create-key`, {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json",
-      Authorization: `Bearer ${accessToken}`,
-      "X-Zephex-CLI-Version": cliVersion,
-      "X-Zephex-Editor": editor,
-      "User-Agent": `zephex-cli/${cliVersion} (${process.platform}; node-${process.versions.node})`
-    },
-    body: JSON.stringify({ editor })
-  });
-  if (!resp.ok) {
-    let detail = "";
-    try {
-      const body = await resp.json();
-      if (body && typeof body.error === "string")
-        detail = body.error;
-    } catch {
-      detail = await resp.text().catch(() => "");
+    await open_default(authUrl);
+  } catch {
+    v2.message(`If your browser didn't open, paste this URL:
+${authUrl}`);
+  }
+  const sp = L2();
+  sp.start("Waiting for you to sign in...");
+  const POLL_INTERVAL = 2000;
+  const TIMEOUT = 5 * 60 * 1000;
+  const start = Date.now();
+  try {
+    while (Date.now() - start < TIMEOUT) {
+      await new Promise((r2) => setTimeout(r2, POLL_INTERVAL));
+      const pollResp = await fetch(`${ZEPHEX_API_BASE}/api/cli/poll?session=${encodeURIComponent(session_id)}`);
+      if (pollResp.status === 410) {
+        throw new Error("Session expired. Please try again.");
+      }
+      if (!pollResp.ok && pollResp.status !== 200) {
+        continue;
+      }
+      const data = await pollResp.json();
+      if (data.status === "complete" && data.key && data.name) {
+        sp.stop("Signed in");
+        return {
+          keyInfo: { key: data.key, name: data.name, created: new Date().toISOString() },
+          email: data.email ?? null
+        };
+      }
+      if (data.status === "error") {
+        throw new Error(data.error || "Authentication failed on server");
+      }
     }
-    throw new Error(`create-key failed (${resp.status})${detail ? `: ${detail}` : ""}`);
-  }
-  const json = await resp.json();
-  if (!json || typeof json.key !== "string" || typeof json.name !== "string" || typeof json.created !== "string") {
-    throw new Error("create-key returned an unexpected response shape");
+    throw new Error("Timed out waiting for sign-in (5 minutes). Please try again.");
+  } catch (err) {
+    sp.stop("Sign-in failed");
+    throw err;
   }
-  return { key: json.key, name: json.name, created: json.created };
 }
 function readJsonFile(filePath) {
   if (!fs7.existsSync(filePath))
@@ -2161,14 +1928,11 @@ async function runSetup(argv) {
     return;
   }
   const resolvedClientId = process.env["AUTH0_CLI_CLIENT_ID"] || DEFAULT_AUTH0_CLI_CLIENT_ID;
-  if (!resolvedClientId || resolvedClientId === "AUTH0_CLI_CLIENT_ID_NOT_SET") {
+  if (!resolvedClientId) {
     process.stderr.write(`
 Error: AUTH0_CLI_CLIENT_ID is not configured.
-` + "Run `node scripts/create-cli-auth0-app.mjs` to create the Auth0 Native\n" + `application, then set AUTH0_CLI_CLIENT_ID in your environment.
-` + `Alternatively create the app manually in the Auth0 dashboard:
-` + `  • Application type: Native
-` + `  • Allowed Callback URLs: http://localhost:52748/callback, http://localhost:52749/callback, http://localhost:52750/callback
-` + `  • Token Endpoint Auth Method: None
+` + `This should not happen with the published package. Report this at:
+` + `  https://github.com/zephex/mcp-proxy/issues
 `);
     process.exit(1);
@@ -2557,7 +2321,7 @@ if (subcommand === "skills") {
   process.exit(0);
 }
 var { spawn } = await import("node:child_process");
-var __filename2 = fileURLToPath3(import.meta.url);
+var __filename2 = fileURLToPath2(import.meta.url);
 var __dirname3 = dirname(__filename2);
 var serverPath = resolve(__dirname3, "tools/server.js");
 var child = spawn(process.execPath, [serverPath], {

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "zephex",
-  "version": "2.1.1",
+  "version": "2.1.3",
   "description": "Zephex MCP — codebase intelligence tools for AI coding agents. stdio server that runs locally, reads your project files, and proxies AI calls to the Zephex backend.",
   "type": "module",
   "main": "dist/cli.js",