@agent-deck/backend 1.1.4 → 1.1.5

package/dist/data/default-mcp-services.js

@@ -0,0 +1,77 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_MCP_SERVICES = void 0;
+/**
+ * Preset remote MCP service cards seeded on first install (empty services table).
+ * Users can delete cards they do not need. Not re-added on subsequent starts.
+ *
+ * Skipped:
+ * - Docmost — requires a self-hosted instance URL per user
+ * - Obsidian — local MCP (stdio); not a remote HTTP preset
+ */
+exports.DEFAULT_MCP_SERVICES = [
+    {
+        name: 'Linear',
+        type: 'mcp',
+        url: 'https://mcp.linear.app/mcp',
+        description: 'Issues, projects, and team workflows in Linear',
+        cardColor: '#5E6AD2',
+    },
+    {
+        name: 'GitHub',
+        type: 'mcp',
+        url: 'https://api.githubcopilot.com/mcp/',
+        description: 'Repositories, issues, and pull requests via GitHub Copilot MCP',
+        cardColor: '#24292F',
+    },
+    {
+        name: 'Notion',
+        type: 'mcp',
+        url: 'https://mcp.notion.com/mcp',
+        description: 'Pages, databases, and workspace content in Notion',
+        cardColor: '#37352F',
+    },
+    {
+        name: 'Gmail',
+        type: 'mcp',
+        url: 'https://gmailmcp.googleapis.com/mcp/v1',
+        description: 'Read and manage Gmail messages',
+        cardColor: '#EA4335',
+    },
+    {
+        name: 'Google Calendar',
+        type: 'mcp',
+        url: 'https://calendarmcp.googleapis.com/mcp/v1',
+        description: 'Events and schedules in Google Calendar',
+        cardColor: '#4285F4',
+    },
+    {
+        name: 'Google Drive',
+        type: 'mcp',
+        url: 'https://drivemcp.googleapis.com/mcp/v1',
+        description: 'Files and folders in Google Drive',
+        cardColor: '#0F9D58',
+    },
+    {
+        name: 'Draw.io',
+        type: 'mcp',
+        url: 'https://mcp.draw.io/mcp',
+        description: 'Diagrams and whiteboards with draw.io',
+        cardColor: '#F08705',
+    },
+    {
+        name: 'Slack',
+        type: 'mcp',
+        url: 'https://mcp.slack.com/mcp',
+        description: 'Channels, messages, and workspace actions in Slack',
+        cardColor: '#4A154B',
+    },
+    {
+        name: 'Figma',
+        type: 'mcp',
+        url: 'https://mcp.figma.com/mcp',
+        description: 'Design files, components, and comments in Figma',
+        cardColor: '#F24E1E',
+    },
+];
+//# sourceMappingURL=default-mcp-services.js.map

package/dist/data/default-mcp-services.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-mcp-services.js","sourceRoot":"","sources":["../../src/data/default-mcp-services.ts"],"names":[],"mappings":";;;AAEA;;;;;;;GAOG;AACU,QAAA,oBAAoB,GAAyB;IACxD;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,KAAK;QACX,GAAG,EAAE,4BAA4B;QACjC,WAAW,EAAE,gDAAgD;QAC7D,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,KAAK;QACX,GAAG,EAAE,oCAAoC;QACzC,WAAW,EAAE,gEAAgE;QAC7E,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,KAAK;QACX,GAAG,EAAE,4BAA4B;QACjC,WAAW,EAAE,mDAAmD;QAChE,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,KAAK;QACX,GAAG,EAAE,wCAAwC;QAC7C,WAAW,EAAE,gCAAgC;QAC7C,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,KAAK;QACX,GAAG,EAAE,2CAA2C;QAChD,WAAW,EAAE,yCAAyC;QACtD,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,KAAK;QACX,GAAG,EAAE,wCAAwC;QAC7C,WAAW,EAAE,mCAAmC;QAChD,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,KAAK;QACX,GAAG,EAAE,yBAAyB;QAC9B,WAAW,EAAE,uCAAuC;QACpD,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,KAAK;QACX,GAAG,EAAE,2BAA2B;QAChC,WAAW,EAAE,oDAAoD;QACjE,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,KAAK;QACX,GAAG,EAAE,2BAA2B;QAChC,WAAW,EAAE,iDAAiD;QAC9D,SAAS,EAAE,SAAS;KACrB;CACF,CAAC"}

package/dist/data/oauth-provider-guides.d.ts

@@ -0,0 +1,23 @@
+export type OAuthSetupMode = 'dynamic' | 'managed' | 'manual' | 'unavailable';
+export type OAuthProviderGuide = {
+    provider: string;
+    setupMode: OAuthSetupMode;
+    title: string;
+    redirectUri: string;
+    steps: string[];
+    docsUrl?: string;
+    unavailableReason?: string;
+    /** Pre-filled app manifest (Slack: paste at Create New App → From a manifest). */
+    manifestJson?: string;
+    /** Deep link to provider app creation UI. */
+    createAppUrl?: string;
+    /** Shorter alternative when full setup is too heavy. */
+    easierAlternative?: string;
+};
+/** Slack MCP app manifest with redirect URI and common user scopes pre-filled. */
+export declare function getSlackMcpAppManifest(redirectUri?: string): string;
+export declare function inferOAuthProvider(serviceUrl: string, authServers?: string[]): string;
+export declare function resolveOAuthSetupMode(provider: string, supportsDynamicRegistration?: boolean): OAuthSetupMode;
+export declare function getOAuthProviderGuide(provider: string): OAuthProviderGuide;
+export { getOAuthRedirectUri } from '../config/oauth-redirect';
+//# sourceMappingURL=oauth-provider-guides.d.ts.map

package/dist/data/oauth-provider-guides.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-provider-guides.d.ts","sourceRoot":"","sources":["../../src/data/oauth-provider-guides.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,aAAa,CAAC;AAK9E,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,cAAc,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kFAAkF;IAClF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6CAA6C;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wDAAwD;IACxD,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,kFAAkF;AAClF,wBAAgB,sBAAsB,CAAC,WAAW,SAAwB,GAAG,MAAM,CA8ClF;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,GAAE,MAAM,EAAO,GAAG,MAAM,CAazF;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,2BAA2B,CAAC,EAAE,OAAO,GACpC,cAAc,CAMhB;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,kBAAkB,CAkG1E;AAED,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/data/oauth-provider-guides.js

@@ -0,0 +1,180 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getOAuthRedirectUri = void 0;
+exports.getSlackMcpAppManifest = getSlackMcpAppManifest;
+exports.inferOAuthProvider = inferOAuthProvider;
+exports.resolveOAuthSetupMode = resolveOAuthSetupMode;
+exports.getOAuthProviderGuide = getOAuthProviderGuide;
+const shared_oauth_apps_1 = require("../config/shared-oauth-apps");
+const oauth_redirect_1 = require("../config/oauth-redirect");
+/** Slack MCP app manifest with redirect URI and common user scopes pre-filled. */
+function getSlackMcpAppManifest(redirectUri = (0, oauth_redirect_1.getOAuthRedirectUri)()) {
+    return JSON.stringify({
+        display_information: {
+            name: 'Agent Deck',
+            description: 'Connect AI agents to your Slack workspace through Agent Deck.',
+            long_description: 'Agent Deck lets you authorize Slack so AI agents can read and search channels and direct messages you belong to, and send messages when you approve. Each user connects with their own Slack account. Tokens are stored on your Agent Deck instance.',
+            background_color: '#2c2d30',
+        },
+        features: {
+            bot_user: {
+                display_name: 'Agent Deck MCP',
+                always_online: false,
+            },
+        },
+        oauth_config: {
+            redirect_urls: [redirectUri],
+            scopes: {
+                bot: ['users:read'],
+                user: [
+                    'search:read.public',
+                    'search:read.private',
+                    'search:read.mpim',
+                    'search:read.im',
+                    'search:read.files',
+                    'search:read.users',
+                    'chat:write',
+                    'channels:history',
+                    'groups:history',
+                    'mpim:history',
+                    'im:history',
+                    'canvases:read',
+                    'canvases:write',
+                    'users:read',
+                    'users:read.email',
+                ],
+            },
+        },
+        settings: {
+            org_deploy_enabled: true,
+        },
+    }, null, 2);
+}
+function inferOAuthProvider(serviceUrl, authServers = []) {
+    const url = serviceUrl.toLowerCase();
+    if (url.includes('figma.com'))
+        return 'figma';
+    if (url.includes('slack.com'))
+        return 'slack';
+    if (url.includes('googleapis.com') || authServers.some((s) => s.includes('accounts.google.com'))) {
+        return 'google';
+    }
+    if (url.includes('linear.app'))
+        return 'linear';
+    if (url.includes('notion.com'))
+        return 'notion';
+    if (url.includes('githubcopilot.com') || authServers.some((s) => s.includes('github.com'))) {
+        return 'github';
+    }
+    return 'custom';
+}
+function resolveOAuthSetupMode(provider, supportsDynamicRegistration) {
+    if (provider === 'figma')
+        return 'unavailable';
+    if ((0, shared_oauth_apps_1.hasSharedOAuthApp)(provider))
+        return 'managed';
+    if (supportsDynamicRegistration)
+        return 'dynamic';
+    if (provider === 'linear' || provider === 'notion')
+        return 'dynamic';
+    return 'manual';
+}
+function getOAuthProviderGuide(provider) {
+    const redirectUri = (0, oauth_redirect_1.getOAuthRedirectUri)();
+    const base = {
+        provider,
+        redirectUri,
+    };
+    switch (provider) {
+        case 'google':
+            return {
+                ...base,
+                setupMode: 'manual',
+                title: 'Google OAuth app',
+                docsUrl: 'https://developers.google.com/workspace/guides/configure-mcp-servers',
+                steps: [
+                    'Open Google Cloud Console → APIs & Services → Credentials.',
+                    'Create an OAuth 2.0 Client ID (type: Web application or Desktop).',
+                    `Add authorized redirect URI: ${redirectUri}`,
+                    'Enable the Gmail / Calendar / Drive MCP APIs for your project if prompted.',
+                    'Paste the Client ID and Client Secret below, then click Connect.',
+                ],
+            };
+        case 'slack':
+            if ((0, shared_oauth_apps_1.hasSharedOAuthApp)('slack')) {
+                return {
+                    ...base,
+                    setupMode: 'managed',
+                    title: 'Slack',
+                    docsUrl: 'https://docs.slack.dev/ai/slack-mcp-server/',
+                    steps: [
+                        'Click Connect — Agent Deck uses the shared Slack OAuth app.',
+                        'Sign in and approve access for your workspace (one time per workspace).',
+                    ],
+                };
+            }
+            return {
+                ...base,
+                setupMode: 'manual',
+                title: 'Slack MCP (~10 min, one-time)',
+                docsUrl: 'https://docs.slack.dev/ai/slack-mcp-server/',
+                createAppUrl: 'https://api.slack.com/apps/new',
+                manifestJson: getSlackMcpAppManifest(redirectUri),
+                easierAlternative: 'If this is too much: use Slack MCP inside Cursor or Claude Code (partner apps), and keep this card as a reminder—or wait for a future Agent Deck shared OAuth app.',
+                steps: [
+                    ...((0, oauth_redirect_1.isOAuthRedirectHttps)()
+                        ? []
+                        : [
+                            'Set AGENT_DECK_PUBLIC_URL to your Agent Deck HTTPS origin (e.g. https://oauth.agent-deck.dev) so the manifest redirect URL uses https:// — required for Slack public distribution.',
+                        ]),
+                    'Use the buttons below: copy the manifest → open Slack app creator → Create New App → From a manifest → paste → Create.',
+                    'In the new app: Agents & AI Apps → enable Model Context Protocol (MCP). OAuth & Permissions → opt in to PKCE if shown.',
+                    'Basic Information → copy Client ID and Client Secret → paste below → Connect → approve in browser.',
+                ],
+            };
+        case 'figma':
+            return {
+                ...base,
+                setupMode: 'unavailable',
+                title: 'Figma remote MCP',
+                docsUrl: 'https://developers.figma.com/docs/figma-mcp-server/remote-server-installation/',
+                unavailableReason: 'Figma remote MCP only allows OAuth from approved clients (Cursor, Claude Code, VS Code). Agent Deck cannot complete OAuth until Figma opens third-party registration. Use Figma in your agent app directly, or add a local MCP with a Figma personal access token.',
+                steps: [],
+            };
+        case 'github':
+            return {
+                ...base,
+                setupMode: 'manual',
+                title: 'GitHub',
+                docsUrl: 'https://docs.github.com/en/apps/oauth-apps',
+                steps: [
+                    'Create a GitHub OAuth App or use a fine-grained Personal Access Token.',
+                    `For OAuth app, set callback URL: ${redirectUri}`,
+                    'Alternatively set Authorization: Bearer <PAT> in service headers.',
+                    'Paste Client ID and Secret below for OAuth, then Connect.',
+                ],
+            };
+        case 'linear':
+        case 'notion':
+            return {
+                ...base,
+                setupMode: 'dynamic',
+                title: provider === 'linear' ? 'Linear' : 'Notion',
+                steps: ['Click Connect — Agent Deck registers automatically and opens the login page.'],
+            };
+        default:
+            return {
+                ...base,
+                setupMode: 'manual',
+                title: 'OAuth application',
+                steps: [
+                    'Create an OAuth app with this MCP provider.',
+                    `Set redirect URI to: ${redirectUri}`,
+                    'Paste Client ID and Client Secret below, then Connect.',
+                ],
+            };
+    }
+}
+var oauth_redirect_2 = require("../config/oauth-redirect");
+Object.defineProperty(exports, "getOAuthRedirectUri", { enumerable: true, get: function () { return oauth_redirect_2.getOAuthRedirectUri; } });
+//# sourceMappingURL=oauth-provider-guides.js.map

package/dist/data/oauth-provider-guides.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-provider-guides.js","sourceRoot":"","sources":["../../src/data/oauth-provider-guides.ts"],"names":[],"mappings":";;;AAsBA,wDA8CC;AAED,gDAaC;AAED,sDASC;AAED,sDAkGC;AAhMD,mEAAgE;AAChE,6DAAqF;AAkBrF,kFAAkF;AAClF,SAAgB,sBAAsB,CAAC,WAAW,GAAG,IAAA,oCAAmB,GAAE;IACxE,OAAO,IAAI,CAAC,SAAS,CACnB;QACE,mBAAmB,EAAE;YACnB,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,+DAA+D;YAC5E,gBAAgB,EACd,sPAAsP;YACxP,gBAAgB,EAAE,SAAS;SAC5B;QACD,QAAQ,EAAE;YACR,QAAQ,EAAE;gBACR,YAAY,EAAE,gBAAgB;gBAC9B,aAAa,EAAE,KAAK;aACrB;SACF;QACD,YAAY,EAAE;YACZ,aAAa,EAAE,CAAC,WAAW,CAAC;YAC5B,MAAM,EAAE;gBACN,GAAG,EAAE,CAAC,YAAY,CAAC;gBACnB,IAAI,EAAE;oBACJ,oBAAoB;oBACpB,qBAAqB;oBACrB,kBAAkB;oBAClB,gBAAgB;oBAChB,mBAAmB;oBACnB,mBAAmB;oBACnB,YAAY;oBACZ,kBAAkB;oBAClB,gBAAgB;oBAChB,cAAc;oBACd,YAAY;oBACZ,eAAe;oBACf,gBAAgB;oBAChB,YAAY;oBACZ,kBAAkB;iBACnB;aACF;SACF;QACD,QAAQ,EAAE;YACR,kBAAkB,EAAE,IAAI;SACzB;KACF,EACD,IAAI,EACJ,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAgB,kBAAkB,CAAC,UAAkB,EAAE,cAAwB,EAAE;IAC/E,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9C,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9C,IAAI,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,EAAE,CAAC;QACjG,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChD,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChD,IAAI,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QAC3F,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,qBAAqB,CACnC,QAAgB,EAChB,2BAAqC;IAErC,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,aAAa,CAAC;IAC/C,IAAI,IAAA,qCAAiB,EAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAClD,IAAI,2BAA2B;QAAE,OAAO,SAAS,CAAC;IAClD,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACrE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,qBAAqB,CAAC,QAAgB;IACpD,MAAM,WAAW,GAAG,IAAA,oCAAmB,GAAE,CAAC;IAC1C,MAAM,IAAI,GAAG;QACX,QAAQ;QACR,WAAW;KACZ,CAAC;IAEF,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO;gBACL,GAAG,IAAI;gBACP,SAAS,EAAE,QAAQ;gBACnB,KAAK,EAAE,kBAAkB;gBACzB,OAAO,EAAE,sEAAsE;gBAC/E,KAAK,EAAE;oBACL,4DAA4D;oBAC5D,mEAAmE;oBACnE,gCAAgC,WAAW,EAAE;oBAC7C,4EAA4E;oBAC5E,kEAAkE;iBACnE;aACF,CAAC;QACJ,KAAK,OAAO;YACV,IAAI,IAAA,qCAAiB,EAAC,OAAO,CAAC,EAAE,CAAC;gBAC/B,OAAO;oBACL,GAAG,IAAI;oBACP,SAAS,EAAE,SAAS;oBACpB,KAAK,EAAE,OAAO;oBACd,OAAO,EAAE,6CAA6C;oBACtD,KAAK,EAAE;wBACL,6DAA6D;wBAC7D,yEAAyE;qBAC1E;iBACF,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,GAAG,IAAI;gBACP,SAAS,EAAE,QAAQ;gBACnB,KAAK,EAAE,+BAA+B;gBACtC,OAAO,EAAE,6CAA6C;gBACtD,YAAY,EAAE,gCAAgC;gBAC9C,YAAY,EAAE,sBAAsB,CAAC,WAAW,CAAC;gBACjD,iBAAiB,EACf,oKAAoK;gBACtK,KAAK,EAAE;oBACL,GAAG,CAAC,IAAA,qCAAoB,GAAE;wBACxB,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC;4BACE,oLAAoL;yBACrL,CAAC;oBACN,wHAAwH;oBACxH,wHAAwH;oBACxH,oGAAoG;iBACrG;aACF,CAAC;QACJ,KAAK,OAAO;YACV,OAAO;gBACL,GAAG,IAAI;gBACP,SAAS,EAAE,aAAa;gBACxB,KAAK,EAAE,kBAAkB;gBACzB,OAAO,EAAE,gFAAgF;gBACzF,iBAAiB,EACf,oQAAoQ;gBACtQ,KAAK,EAAE,EAAE;aACV,CAAC;QACJ,KAAK,QAAQ;YACX,OAAO;gBACL,GAAG,IAAI;gBACP,SAAS,EAAE,QAAQ;gBACnB,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE,4CAA4C;gBACrD,KAAK,EAAE;oBACL,wEAAwE;oBACxE,oCAAoC,WAAW,EAAE;oBACjD,mEAAmE;oBACnE,2DAA2D;iBAC5D;aACF,CAAC;QACJ,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ;YACX,OAAO;gBACL,GAAG,IAAI;gBACP,SAAS,EAAE,SAAS;gBACpB,KAAK,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;gBAClD,KAAK,EAAE,CAAC,8EAA8E,CAAC;aACxF,CAAC;QACJ;YACE,OAAO;gBACL,GAAG,IAAI;gBACP,SAAS,EAAE,QAAQ;gBACnB,KAAK,EAAE,mBAAmB;gBAC1B,KAAK,EAAE;oBACL,6CAA6C;oBAC7C,wBAAwB,WAAW,EAAE;oBACrC,wDAAwD;iBACzD;aACF,CAAC;IACN,CAAC;AACH,CAAC;AAED,2DAA+D;AAAtD,qHAAA,mBAAmB,OAAA"}

package/dist/data/seed-default-services.d.ts

@@ -0,0 +1,3 @@
+import { DatabaseManager } from '../models/database';
+export declare function seedDefaultServicesIfEmpty(db: DatabaseManager): Promise<number>;
+//# sourceMappingURL=seed-default-services.d.ts.map

package/dist/data/seed-default-services.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-default-services.d.ts","sourceRoot":"","sources":["../../src/data/seed-default-services.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAGrD,wBAAsB,0BAA0B,CAAC,EAAE,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAUrF"}

package/dist/data/seed-default-services.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.seedDefaultServicesIfEmpty = seedDefaultServicesIfEmpty;
+const default_mcp_services_1 = require("./default-mcp-services");
+async function seedDefaultServicesIfEmpty(db) {
+    if (db.hasAnyServices()) {
+        return 0;
+    }
+    for (const preset of default_mcp_services_1.DEFAULT_MCP_SERVICES) {
+        await db.createService(preset);
+    }
+    return default_mcp_services_1.DEFAULT_MCP_SERVICES.length;
+}
+//# sourceMappingURL=seed-default-services.js.map

package/dist/data/seed-default-services.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-default-services.js","sourceRoot":"","sources":["../../src/data/seed-default-services.ts"],"names":[],"mappings":";;AAGA,gEAUC;AAZD,iEAA8D;AAEvD,KAAK,UAAU,0BAA0B,CAAC,EAAmB;IAClE,IAAI,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC;QACxB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,2CAAoB,EAAE,CAAC;QAC1C,MAAM,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,2CAAoB,CAAC,MAAM,CAAC;AACrC,CAAC"}

package/dist/lib/mcp-oauth-discovery.d.ts

@@ -0,0 +1,16 @@
+import { type OAuthSetupMode } from '../data/oauth-provider-guides';
+export type McpOAuthDiscovery = {
+    required: boolean;
+    resourceName?: string;
+    issuer?: string;
+    authorizationUrl?: string;
+    tokenUrl?: string;
+    scopesSupported?: string[];
+    bearerMethodsSupported?: string[];
+    provider?: string;
+    setupMode?: OAuthSetupMode;
+    supportsDynamicRegistration?: boolean;
+    error?: string;
+};
+export declare function discoverMcpOAuthRequirements(serviceUrl: string): Promise<McpOAuthDiscovery>;
+//# sourceMappingURL=mcp-oauth-discovery.d.ts.map

package/dist/lib/mcp-oauth-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-oauth-discovery.d.ts","sourceRoot":"","sources":["../../src/lib/mcp-oauth-discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,+BAA+B,CAAC;AAkBvC,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,2BAA2B,CAAC,EAAE,OAAO,CAAC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAqJF,wBAAsB,4BAA4B,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA2CjG"}

package/dist/lib/mcp-oauth-discovery.js

@@ -0,0 +1,161 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.discoverMcpOAuthRequirements = discoverMcpOAuthRequirements;
+const oauth_provider_guides_1 = require("../data/oauth-provider-guides");
+function finalizeOAuthDiscovery(serviceUrl, oauth, authServers = []) {
+    const provider = oauth.provider ?? (0, oauth_provider_guides_1.inferOAuthProvider)(serviceUrl, authServers);
+    const setupMode = (0, oauth_provider_guides_1.resolveOAuthSetupMode)(provider, oauth.supportsDynamicRegistration);
+    return {
+        ...oauth,
+        provider,
+        setupMode,
+        supportsDynamicRegistration: setupMode === 'dynamic' ? true : oauth.supportsDynamicRegistration ?? false,
+    };
+}
+function protectedResourceCandidates(serviceUrl) {
+    const parsed = new URL(serviceUrl);
+    const path = parsed.pathname.replace(/\/$/, '');
+    const candidates = new Set([
+        `${parsed.origin}/.well-known/oauth-protected-resource`,
+    ]);
+    if (path && path !== '/') {
+        candidates.add(`${parsed.origin}/.well-known/oauth-protected-resource${path}`);
+        candidates.add(`${parsed.origin}/.well-known/oauth-protected-resource${path}/`);
+    }
+    return [...candidates];
+}
+async function fetchJson(url) {
+    try {
+        const response = await fetch(url, {
+            headers: { Accept: 'application/json' },
+        });
+        if (!response.ok) {
+            return null;
+        }
+        return response.json();
+    }
+    catch {
+        return null;
+    }
+}
+async function fetchAuthorizationServerMetadata(issuerOrAsUrl) {
+    const trimmed = issuerOrAsUrl.replace(/\/$/, '');
+    const candidates = trimmed.includes('/.well-known/')
+        ? [trimmed]
+        : [
+            `${trimmed}/.well-known/oauth-authorization-server`,
+            `${trimmed}/.well-known/openid-configuration`,
+        ];
+    for (const candidate of candidates) {
+        const data = await fetchJson(candidate);
+        if (data && typeof data === 'object') {
+            return data;
+        }
+    }
+    return null;
+}
+function applyKnownProviderFallbacks(serviceUrl, authServers, oauth) {
+    if (authServers.some((server) => server.includes('github.com/login/oauth'))) {
+        return finalizeOAuthDiscovery(serviceUrl, {
+            ...oauth,
+            required: true,
+            provider: 'github',
+            authorizationUrl: 'https://github.com/login/oauth/authorize',
+            tokenUrl: 'https://github.com/login/oauth/access_token',
+            supportsDynamicRegistration: false,
+        }, authServers);
+    }
+    return finalizeOAuthDiscovery(serviceUrl, oauth, authServers);
+}
+async function resolveFromProtectedResource(serviceUrl, metadata) {
+    const oauth = {
+        required: true,
+        resourceName: metadata.resource_name ?? metadata.resource,
+        scopesSupported: metadata.scopes_supported ?? [],
+        bearerMethodsSupported: metadata.bearer_methods_supported ?? [],
+    };
+    const authServers = metadata.authorization_servers ?? [];
+    if (authServers.length === 0) {
+        return finalizeOAuthDiscovery(serviceUrl, oauth, authServers);
+    }
+    const asMeta = await fetchAuthorizationServerMetadata(authServers[0]);
+    if (asMeta) {
+        oauth.issuer = asMeta.issuer;
+        oauth.authorizationUrl = asMeta.authorization_endpoint;
+        oauth.tokenUrl = asMeta.token_endpoint;
+        oauth.scopesSupported = asMeta.scopes_supported ?? oauth.scopesSupported;
+        oauth.supportsDynamicRegistration = Boolean(asMeta.registration_endpoint);
+    }
+    return applyKnownProviderFallbacks(serviceUrl, authServers, oauth);
+}
+async function probeWwwAuthenticate(serviceUrl) {
+    const headers = {
+        Accept: 'application/json, text/event-stream',
+        'Content-Type': 'application/json',
+    };
+    for (const method of ['GET', 'POST']) {
+        try {
+            const init = method === 'GET'
+                ? { method, headers: { Accept: headers.Accept } }
+                : {
+                    method,
+                    headers,
+                    body: JSON.stringify({ jsonrpc: '2.0', id: 1, method: 'tools/list', params: {} }),
+                };
+            const response = await fetch(serviceUrl, init);
+            const wwwAuth = response.headers.get('www-authenticate');
+            if (wwwAuth) {
+                return wwwAuth;
+            }
+        }
+        catch {
+            // try next method
+        }
+    }
+    return null;
+}
+function parseResourceMetadataUrl(wwwAuthenticate) {
+    const match = wwwAuthenticate.match(/resource_metadata="([^"]+)"/i);
+    return match?.[1] ?? null;
+}
+async function discoverMcpOAuthRequirements(serviceUrl) {
+    const oauth = { required: false };
+    try {
+        for (const candidate of protectedResourceCandidates(serviceUrl)) {
+            const data = await fetchJson(candidate);
+            if (data && typeof data === 'object') {
+                return resolveFromProtectedResource(serviceUrl, data);
+            }
+        }
+        const parsed = new URL(serviceUrl);
+        const asData = await fetchAuthorizationServerMetadata(parsed.origin);
+        if (asData?.authorization_endpoint) {
+            return finalizeOAuthDiscovery(serviceUrl, {
+                required: true,
+                issuer: asData.issuer,
+                authorizationUrl: asData.authorization_endpoint,
+                tokenUrl: asData.token_endpoint,
+                scopesSupported: asData.scopes_supported ?? [],
+                supportsDynamicRegistration: Boolean(asData.registration_endpoint),
+            });
+        }
+        const wwwAuth = await probeWwwAuthenticate(serviceUrl);
+        if (wwwAuth) {
+            const resourceMetadataUrl = parseResourceMetadataUrl(wwwAuth);
+            if (resourceMetadataUrl) {
+                const data = await fetchJson(resourceMetadataUrl);
+                if (data && typeof data === 'object') {
+                    return resolveFromProtectedResource(serviceUrl, data);
+                }
+            }
+            if (wwwAuth.toLowerCase().includes('oauth') || wwwAuth.toLowerCase().includes('bearer')) {
+                return finalizeOAuthDiscovery(serviceUrl, { required: true });
+            }
+        }
+    }
+    catch (error) {
+        oauth.error = error instanceof Error ? error.message : 'OAuth detection failed';
+    }
+    return oauth;
+}
+//# sourceMappingURL=mcp-oauth-discovery.js.map

package/dist/lib/mcp-oauth-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-oauth-discovery.js","sourceRoot":"","sources":["../../src/lib/mcp-oauth-discovery.ts"],"names":[],"mappings":";;AAuLA,oEA2CC;AAlOD,yEAIuC;AAgCvC,SAAS,sBAAsB,CAC7B,UAAkB,EAClB,KAAwB,EACxB,cAAwB,EAAE;IAE1B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAA,0CAAkB,EAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC/E,MAAM,SAAS,GAAG,IAAA,6CAAqB,EAAC,QAAQ,EAAE,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACrF,OAAO;QACL,GAAG,KAAK;QACR,QAAQ;QACR,SAAS;QACT,2BAA2B,EACzB,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,2BAA2B,IAAI,KAAK;KAC9E,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,UAAkB;IACrD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS;QACjC,GAAG,MAAM,CAAC,MAAM,uCAAuC;KACxD,CAAC,CAAC;IAEH,IAAI,IAAI,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACzB,UAAU,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,wCAAwC,IAAI,EAAE,CAAC,CAAC;QAC/E,UAAU,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,wCAAwC,IAAI,GAAG,CAAC,CAAC;IAClF,CAAC;IAED,OAAO,CAAC,GAAG,UAAU,CAAC,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAW;IAClC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACxC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gCAAgC,CAC7C,aAAqB;IAErB,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;QAClD,CAAC,CAAC,CAAC,OAAO,CAAC;QACX,CAAC,CAAC;YACE,GAAG,OAAO,yCAAyC;YACnD,GAAG,OAAO,mCAAmC;SAC9C,CAAC;IAEN,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrC,OAAO,IAAmC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,2BAA2B,CAClC,UAAkB,EAClB,WAAqB,EACrB,KAAwB;IAExB,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC;QAC5E,OAAO,sBAAsB,CAAC,UAAU,EAAE;YACxC,GAAG,KAAK;YACR,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ;YAClB,gBAAgB,EAAE,0CAA0C;YAC5D,QAAQ,EAAE,6CAA6C;YACvD,2BAA2B,EAAE,KAAK;SACnC,EAAE,WAAW,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,sBAAsB,CAAC,UAAU,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,UAAkB,EAClB,QAAmC;IAEnC,MAAM,KAAK,GAAsB;QAC/B,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,QAAQ,CAAC,aAAa,IAAI,QAAQ,CAAC,QAAQ;QACzD,eAAe,EAAE,QAAQ,CAAC,gBAAgB,IAAI,EAAE;QAChD,sBAAsB,EAAE,QAAQ,CAAC,wBAAwB,IAAI,EAAE;KAChE,CAAC;IAEF,MAAM,WAAW,GAAG,QAAQ,CAAC,qBAAqB,IAAI,EAAE,CAAC;IACzD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,sBAAsB,CAAC,UAAU,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,CAAC;IACvE,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,KAAK,CAAC,gBAAgB,GAAG,MAAM,CAAC,sBAAsB,CAAC;QACvD,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,cAAc,CAAC;QACvC,KAAK,CAAC,eAAe,GAAG,MAAM,CAAC,gBAAgB,IAAI,KAAK,CAAC,eAAe,CAAC;QACzE,KAAK,CAAC,2BAA2B,GAAG,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,2BAA2B,CAAC,UAAU,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,UAAkB;IACpD,MAAM,OAAO,GAAG;QACd,MAAM,EAAE,qCAAqC;QAC7C,cAAc,EAAE,kBAAkB;KACnC,CAAC;IAEF,KAAK,MAAM,MAAM,IAAI,CAAC,KAAK,EAAE,MAAM,CAAU,EAAE,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,IAAI,GACR,MAAM,KAAK,KAAK;gBACd,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE;gBACjD,CAAC,CAAC;oBACE,MAAM;oBACN,OAAO;oBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;iBAClF,CAAC;YACR,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;YACzD,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,wBAAwB,CAAC,eAAuB;IACvD,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACpE,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC5B,CAAC;AAEM,KAAK,UAAU,4BAA4B,CAAC,UAAkB;IACnE,MAAM,KAAK,GAAsB,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAErD,IAAI,CAAC;QACH,KAAK,MAAM,SAAS,IAAI,2BAA2B,CAAC,UAAU,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;YACxC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrC,OAAO,4BAA4B,CAAC,UAAU,EAAE,IAAiC,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrE,IAAI,MAAM,EAAE,sBAAsB,EAAE,CAAC;YACnC,OAAO,sBAAsB,CAAC,UAAU,EAAE;gBACxC,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,gBAAgB,EAAE,MAAM,CAAC,sBAAsB;gBAC/C,QAAQ,EAAE,MAAM,CAAC,cAAc;gBAC/B,eAAe,EAAE,MAAM,CAAC,gBAAgB,IAAI,EAAE;gBAC9C,2BAA2B,EAAE,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC;aACnE,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,UAAU,CAAC,CAAC;QACvD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,mBAAmB,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;YAC9D,IAAI,mBAAmB,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,mBAAmB,CAAC,CAAC;gBAClD,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACrC,OAAO,4BAA4B,CAAC,UAAU,EAAE,IAAiC,CAAC,CAAC;gBACrF,CAAC;YACH,CAAC;YAED,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACxF,OAAO,sBAAsB,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC;IAClF,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/lib/pkce.d.ts

@@ -0,0 +1,7 @@
+export interface PkcePair {
+    codeVerifier: string;
+    codeChallenge: string;
+}
+/** RFC 7636 PKCE with S256 code challenge. */
+export declare function generatePkcePair(): PkcePair;
+//# sourceMappingURL=pkce.d.ts.map

package/dist/lib/pkce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.d.ts","sourceRoot":"","sources":["../../src/lib/pkce.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,QAAQ;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,8CAA8C;AAC9C,wBAAgB,gBAAgB,IAAI,QAAQ,CAI3C"}

package/dist/lib/pkce.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generatePkcePair = generatePkcePair;
+const crypto_1 = require("crypto");
+/** RFC 7636 PKCE with S256 code challenge. */
+function generatePkcePair() {
+    const codeVerifier = (0, crypto_1.randomBytes)(32).toString('base64url');
+    const codeChallenge = (0, crypto_1.createHash)('sha256').update(codeVerifier).digest('base64url');
+    return { codeVerifier, codeChallenge };
+}
+//# sourceMappingURL=pkce.js.map

package/dist/lib/pkce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.js","sourceRoot":"","sources":["../../src/lib/pkce.ts"],"names":[],"mappings":";;AAQA,4CAIC;AAZD,mCAAiD;AAOjD,8CAA8C;AAC9C,SAAgB,gBAAgB;IAC9B,MAAM,YAAY,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,aAAa,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACpF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;AACzC,CAAC"}

package/dist/models/database.d.ts

@@ -6,6 +6,7 @@ export declare class DatabaseManager {
     private addColumnIfMissing;
     private migrate;
     private createTables;
+    hasAnyServices(): boolean;
     private createIndexes;
     private mapCredentialRow;
     getDeckCredentialsForDeck(deckId: string): Promise<Credential[]>;

package/dist/models/database.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../../src/models/database.ts"],"names":[],"mappings":"AACA,OAAO,EACL,OAAO,EACP,kBAAkB,EAClB,kBAAkB,EAClB,IAAI,EACJ,eAAe,EACf,eAAe,EACf,WAAW,EACX,qBAAqB,EACrB,0BAA0B,EAC1B,wBAAwB,EACxB,UAAU,EACV,wBAAwB,EACxB,6BAA6B,EAC7B,cAAc,EACd,OAAO,EACP,QAAQ,EACR,mBAAmB,EACnB,mBAAmB,EACnB,sBAAsB,EACtB,2BAA2B,EAC3B,YAAY,EACb,MAAM,oBAAoB,CAAC;AAO5B,qBAAa,eAAe;IAC1B,OAAO,CAAC,EAAE,CAAoB;gBAElB,MAAM,GAAE,MAAwB;IAO5C,OAAO,CAAC,WAAW;IAOnB,OAAO,CAAC,kBAAkB;IAW1B,OAAO,CAAC,OAAO;IAyBf,OAAO,CAAC,YAAY;IA2IpB,OAAO,CAAC,aAAa;IAarB,OAAO,CAAC,gBAAgB;IAiBlB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAchE,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC;IA4EhE,OAAO,CAAC,aAAa;IAkCf,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAS/C,cAAc,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAOpC,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IA+C7E,0BAA0B,CAAC,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAsBxF,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAM3C,mBAAmB,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBvG,iBAAiB,CACrB,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM,EACnB,YAAY,CAAC,EAAE,MAAM,EACrB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC;IA2BV,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IA+BjD,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAgCzC,WAAW,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IAmC9B,aAAa,IAAI,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAgCrC,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IA2BpE,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAMxC,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASxC,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAevD,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;IAqB7D,qBAAqB,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC;IAYvE,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBnE,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMhD,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;IAiCzF,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IASrD,iBAAiB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAM1C,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IA2CpF,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO1C,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAM9C,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAe7D,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBnE,wBAAwB,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC;IAY7E,aAAa,CAAC,KAAK,EAAE;QACzB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,OAAO,EAAE,MAAM,CAAC;QAChB,aAAa,EAAE,MAAM,EAAE,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,OAAO,CAAC;IAgDpB,OAAO,CAAC,cAAc;IAiBhB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;IAyC9E,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAKjD,eAAe,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;IAKtC,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAsChF,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAK5C,iCAAiC,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAM5E,8BAA8B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAMtE,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAY5D,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB/D,sBAAsB,CAAC,KAAK,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC;IAUzE,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAe/D,KAAK,IAAI,IAAI;CAGd"}
+{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../../src/models/database.ts"],"names":[],"mappings":"AACA,OAAO,EACL,OAAO,EACP,kBAAkB,EAClB,kBAAkB,EAClB,IAAI,EACJ,eAAe,EACf,eAAe,EACf,WAAW,EACX,qBAAqB,EACrB,0BAA0B,EAC1B,wBAAwB,EACxB,UAAU,EACV,wBAAwB,EACxB,6BAA6B,EAC7B,cAAc,EACd,OAAO,EACP,QAAQ,EACR,mBAAmB,EACnB,mBAAmB,EACnB,sBAAsB,EACtB,2BAA2B,EAC3B,YAAY,EACb,MAAM,oBAAoB,CAAC;AAO5B,qBAAa,eAAe;IAC1B,OAAO,CAAC,EAAE,CAAoB;gBAElB,MAAM,GAAE,MAAwB;IAO5C,OAAO,CAAC,WAAW;IAOnB,OAAO,CAAC,kBAAkB;IAW1B,OAAO,CAAC,OAAO;IAyBf,OAAO,CAAC,YAAY;IA2IpB,cAAc,IAAI,OAAO;IAKzB,OAAO,CAAC,aAAa;IAarB,OAAO,CAAC,gBAAgB;IAiBlB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAchE,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC;IA4EhE,OAAO,CAAC,aAAa;IAkCf,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAS/C,cAAc,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAOpC,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IA+C7E,0BAA0B,CAAC,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAsBxF,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAM3C,mBAAmB,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBvG,iBAAiB,CACrB,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM,EACnB,YAAY,CAAC,EAAE,MAAM,EACrB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC;IA2BV,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IA+BjD,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAgCzC,WAAW,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IAmC9B,aAAa,IAAI,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAgCrC,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IA2BpE,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAMxC,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASxC,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAevD,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;IAqB7D,qBAAqB,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC;IAYvE,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBnE,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMhD,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;IAiCzF,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IASrD,iBAAiB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAM1C,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IA2CpF,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO1C,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAM9C,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAe7D,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBnE,wBAAwB,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC;IAY7E,aAAa,CAAC,KAAK,EAAE;QACzB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,OAAO,EAAE,MAAM,CAAC;QAChB,aAAa,EAAE,MAAM,EAAE,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,OAAO,CAAC;IAgDpB,OAAO,CAAC,cAAc;IAiBhB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;IAyC9E,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAKjD,eAAe,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;IAKtC,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAsChF,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAK5C,iCAAiC,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAM5E,8BAA8B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAMtE,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAY5D,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB/D,sBAAsB,CAAC,KAAK,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC;IAUzE,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAe/D,KAAK,IAAI,IAAI;CAGd"}

package/dist/models/database.js

@@ -182,6 +182,10 @@ class DatabaseManager {
       )
     `);
     }
+    hasAnyServices() {
+        const row = this.db.prepare('SELECT 1 FROM services LIMIT 1').get();
+        return row !== undefined;
+    }
     createIndexes() {
         this.db.exec(`
       CREATE INDEX IF NOT EXISTS idx_services_type ON services(type);