@anyknown/mcp 0.2.0 → 0.3.0

package/README.md

@@ -9,7 +9,7 @@ Each server has one `auth`: `none`, `bearer`, `api_key` (a header or query param
 
 It has no public URL. The only way in is product's `MCP` service binding, which calls the `Hub` `WorkerEntrypoint` over RPC (`src/rpc/`). Product owns authentication, scope checks (`mcp:use`, `product:admin`), request validation, activity and the OAuth cookie; the hub trusts the `userId` product passes.
 
-Tokens, API keys, basic credentials and OAuth client secrets are sealed to the user's public key under the server id and opened only through product's `KeyringMcp` entrypoint (`KEYRING`, a service binding to `product` / `product-staging` that exposes only `seal` / `open` for kind `mcp`), so that entrypoint has to be deployed before this worker. The OAuth cookie carries the client id but never the secret; the hub opens the client secret itself when it exchanges the code. Disconnecting or removing a server drops its OAuth client along with its credential. A locked Keyring is `key_locked` (423); a user with no public key yet is `no_user_key` (409).
+Tokens, API keys, basic credentials and OAuth client secrets are sealed to the user's public key under the server id and opened only through product's `KeyringMcp` entrypoint (`KEYRING`, a service binding to `product` / `product-staging` that exposes only `seal` / `open` for kind `mcp`), so that entrypoint has to be deployed before this worker. The OAuth cookie carries the client id and, when connect brings a new client, its secret sealed the same way (never in the clear); the hub opens it itself when it exchanges the code, and saves the client with the credential only once the sign-in completes, so an abandoned sign-in leaves the working client alone. A refresh sends the saved secret only when it belongs to the credential's client id. Disconnecting or removing a server drops its OAuth client along with its credential. A locked Keyring is `key_locked` (423); a user with no public key yet is `no_user_key` (409).
 
 ## Where tools come from
 

package/dist/portable/constants.d.ts

@@ -5,6 +5,7 @@ export declare const JSON_MAX_BYTES = 4000000;
 export declare const YAML_MAX_BYTES = 512000;
 export declare const SDL_MAX_BYTES = 512000;
 export declare const INTROSPECTION_MAX_BYTES = 8000000;
+export declare const OAUTH_JSON_MAX_BYTES = 1000000;
 export declare const TOOLS_MAX = 500;
 export declare const INPUT_SCHEMA_MAX = 64000;
 export declare const DESCRIPTION_MAX = 1000;

package/dist/portable/index.d.ts

@@ -1,6 +1,6 @@
 export { applyAuth } from "./apply-auth";
 export { callTool } from "./call-tool";
-export { ARG_ERRORS_MAX, DELETE_BATCH, DESCRIPTION_MAX, INPUT_SCHEMA_MAX, INTROSPECTION_MAX_BYTES, JSON_MAX_BYTES, KINDS, MAX_PAGES, NO_SESSION, RESULT_TEXT_MAX, SDL_MAX_BYTES, TOOL_NAME_MAX, TOOLS_MAX, YAML_MAX_BYTES, } from "./constants";
+export { ARG_ERRORS_MAX, DELETE_BATCH, DESCRIPTION_MAX, INPUT_SCHEMA_MAX, INTROSPECTION_MAX_BYTES, JSON_MAX_BYTES, KINDS, MAX_PAGES, NO_SESSION, OAUTH_JSON_MAX_BYTES, RESULT_TEXT_MAX, SDL_MAX_BYTES, TOOL_NAME_MAX, TOOLS_MAX, YAML_MAX_BYTES, } from "./constants";
 export { callGraphql, readGraphql } from "./graphql";
 export { callMcpTool, listMcpTools, mcpRequest } from "./mcp";
 export type { McpSession } from "./mcp";

package/dist/portable/mcp/list-mcp-tools.d.ts

@@ -3,4 +3,5 @@ import type { McpSession } from "./types";
 export declare function listMcpTools(upstream: Upstream, session: McpSession): Promise<{
     tools: UpstreamTool[];
     session: McpSession;
+    complete: boolean;
 }>;

package/dist/portable/oauth/capped-json.d.ts

@@ -0,0 +1 @@
+export declare function cappedJson(response: Response): Promise<unknown>;

package/dist/portable/types.d.ts

@@ -64,6 +64,7 @@ export type ReadResult = {
     dropped: number;
     defaults: SpecDefaults;
     session: McpSession | null;
+    complete: boolean;
 };
 export type ToolRow = {
     server_id: string;

package/dist/public.d.ts

@@ -1,4 +1,4 @@
-export type { AdminServerItem, ApiKeySettings, CallInput, CompleteOauthInput, ConnectInput, ConnectResult, CreatedServer, CreateServerInput, DescribedItem, HubResult, McpServerRow, OauthSettings, OwnServerInput, SearchInput, ServerItem, ToolHit, ToolItem, Transient, } from "./rpc/types";
+export type { AdminServerItem, ApiKeySettings, CallInput, CompleteOauthInput, ConnectInput, ConnectResult, CreatedServer, CreateServerInput, DescribedItem, HubResult, McpServerRow, OauthSettings, SearchInput, ServerItem, ToolHit, ToolItem, Transient, } from "./rpc/types";
 export type { McpHubRpc } from "./rpc/hub-rpc";
 export type { McpAuth, McpConnectionStatus, McpKind } from "./schema";
 export type { McpErrorCode } from "./errors";

package/dist/rpc/hub-rpc.d.ts

@@ -1,4 +1,4 @@
-import type { AdminServerInput, AdminServerItem, CallInput, CompleteOauthInput, ConnectInput, ConnectResult, CreatedServer, CreateServerInput, DescribedItem, HubResult, McpServerRow, OwnServerInput, SearchInput, ServerItem, ToolHit, ToolItem } from "./types";
+import type { AdminServerInput, AdminServerItem, CallInput, CompleteOauthInput, ConnectInput, ConnectResult, CreatedServer, CreateServerInput, DescribedItem, HubResult, McpServerRow, SearchInput, ServerItem, ToolHit, ToolItem } from "./types";
 export interface McpHubRpc {
     search(userId: string, input: SearchInput): Promise<HubResult<ToolHit[]>>;
     describe(userId: string, tools: string[]): Promise<HubResult<{
@@ -10,7 +10,6 @@ export interface McpHubRpc {
     serverTools(userId: string, serverId: string): Promise<HubResult<{
         items: ToolItem[];
     }>>;
-    addServer(userId: string, input: OwnServerInput): Promise<McpServerRow>;
     createServer(userId: string, input: CreateServerInput): Promise<HubResult<CreatedServer>>;
     connectServer(userId: string, serverId: string, input: ConnectInput): Promise<HubResult<ConnectResult>>;
     completeOauth(userId: string, input: CompleteOauthInput): Promise<HubResult<{

package/dist/rpc/types.d.ts

@@ -20,6 +20,7 @@ export type Transient = {
     token_endpoint: string;
     resource: string;
     client_id: string;
+    client_secret_sealed?: string | null;
     exp: number;
 };
 export type SearchInput = {
@@ -59,11 +60,6 @@ export type ToolItem = {
     description: string;
     annotations: unknown;
 };
-export type OwnServerInput = {
-    name: string;
-    url: string;
-    auth: McpAuth;
-};
 export type ApiKeySettings = {
     in: "header" | "query";
     name: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anyknown/mcp",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/anyknown-com/mcp.git"