@assetlab/mcp-server 1.0.3 → 1.2.0

package/README.md

@@ -1,112 +1,174 @@
-# @assetlab/mcp-server
-
-Connect [Claude](https://claude.ai) to your [AssetLab](https://assetlab.ca) account via the [Model Context Protocol](https://modelcontextprotocol.io). Ask Claude questions about your assets, work orders, PM schedules, and more — in plain language.
-
-## Prerequisites
-
-- [Node.js](https://nodejs.org) 18 or later
-- An AssetLab account with an API key (create one in **Settings → API Keys**)
-- [Claude Desktop](https://claude.ai/download) or [Claude Code](https://claude.ai/code)
-
-## Setup
-
-### Claude Desktop
-
-1. Open your Claude Desktop config file:
-   - **Mac:** `~/Library/Application Support/Claude/claude_desktop_config.json`
-   - **Windows:** `%APPDATA%\Claude\claude_desktop_config.json`
-
-2. Add the following to the `mcpServers` object (replace `al_live_...` with your API key):
-
-```json
-{
-  "mcpServers": {
-    "assetlab": {
-      "command": "npx",
-      "args": ["-y", "@assetlab/mcp-server"],
-      "env": {
-        "ASSETLAB_API_KEY": "al_live_...",
-        "ASSETLAB_API_URL": "your-api-url"
-      }
-    }
-  }
-}
-```
-
-> **Tip:** The easiest way to get this config is to click **Copy Claude Config** directly on your API key in **AssetLab Settings → API Keys** — it pre-fills your key and API URL automatically.
-
-3. Restart Claude Desktop. You should see the AssetLab tools available.
-
-### Claude Code
-
-```bash
-claude mcp add assetlab npx @assetlab/mcp-server \
-  -e ASSETLAB_API_KEY=al_live_... \
-  -e ASSETLAB_API_URL=your-api-url
-```
-
-## Example prompts
-
-Once connected, you can ask Claude things like:
-
-- *"Show me all overdue work orders"*
-- *"List critical assets at Site A"*
-- *"What PM schedules are due this month?"*
-- *"Summarize the current state of our facilities"*
-- *"Which projects are at risk or delayed?"*
-- *"Show me all assets linked to the HVAC system in Building 3"*
-- *"List open corrective work orders at all sites"*
-
-## Available tools
-
-| Tool | Description |
-|------|-------------|
-| `list_assets` | List assets with filters for site, building, system, and search |
-| `get_asset` | Get full details for a specific asset |
-| `list_work_orders` | List work orders filtered by status, priority, type, or site |
-| `get_work_order` | Get full details for a specific work order |
-| `list_sites` | List all sites in your organization |
-| `get_site` | Get details for a specific site |
-| `list_buildings` | List buildings, optionally filtered by site |
-| `list_locations` | List rooms and areas, optionally filtered by building |
-| `list_systems` | List systems (HVAC, plumbing, electrical, etc.) |
-| `list_system_groups` | List system groups |
-| `list_system_classes` | List top-level system classifications |
-| `list_pm_schedules` | List PM schedules filtered by status, frequency, or site |
-| `get_pm_schedule` | Get a PM schedule including tasks and linked assets |
-| `list_pm_templates` | List reusable PM templates |
-| `list_projects` | List capital projects filtered by status or health |
-| `get_project` | Get project details including budget and progress |
-| `list_contracts` | List vendor contracts |
-| `list_compliance_items` | List compliance/regulatory items |
-| `get_compliance_item` | Get a compliance item with linked PM schedules |
-| `get_dashboard_summary` | Get aggregated stats across assets, work orders, and sites |
-
-## Scopes
-
-API keys use scopes to control what Claude can access. Grant only the scopes you need:
-
-| Scope | Access |
-|-------|--------|
-| `assets:read` | Assets |
-| `work_orders:read` | Work orders |
-| `sites:read` | Sites and buildings |
-| `locations:read` | Locations |
-| `systems:read` | Systems, system groups, system classes |
-| `pm_schedules:read` | PM schedules and templates |
-| `projects:read` | Capital projects |
-| `contracts:read` | Vendor contracts |
-| `compliance:read` | Compliance items |
-| `dashboard:read` | Dashboard summary stats |
-| `*:*` | All resources |
-
-## Security
-
-- The MCP server runs **locally** on your machine via stdio — no network server is exposed
-- Your API key is scoped to your organization only
-- All data access is read-only and logged in AssetLab's audit log
-- API keys can be revoked at any time in **Settings → API Keys**
-
-## Support
-
-Questions or issues? Email [support@assetlab.ca](mailto:support@assetlab.ca).
+# @assetlab/mcp-server
+
+Connect [Claude](https://claude.ai) to your [AssetLab](https://assetlab.ca) account via the [Model Context Protocol](https://modelcontextprotocol.io). Ask Claude questions about your assets, work orders, PM schedules, and more — in plain language.
+
+## Prerequisites
+
+- [Node.js](https://nodejs.org) 18 or later
+- An AssetLab account with an API key (create one in **Settings → API Keys**)
+- [Claude Desktop](https://claude.ai/download) or [Claude Code](https://claude.ai/code)
+
+## Setup
+
+### Claude Desktop
+
+1. Open your Claude Desktop config file:
+   - **Mac:** `~/Library/Application Support/Claude/claude_desktop_config.json`
+   - **Windows:** `%APPDATA%\Claude\claude_desktop_config.json`
+
+2. Add the following to the `mcpServers` object (replace `al_live_...` with your API key):
+
+```json
+{
+  "mcpServers": {
+    "assetlab": {
+      "command": "npx",
+      "args": ["-y", "@assetlab/mcp-server"],
+      "env": {
+        "ASSETLAB_API_KEY": "al_live_...",
+        "ASSETLAB_API_URL": "your-api-url"
+      }
+    }
+  }
+}
+```
+
+> **Tip:** The easiest way to get this config is to click **Copy Claude Config** directly on your API key in **AssetLab Settings → API Keys** — it pre-fills your key and API URL automatically.
+
+3. Restart Claude Desktop. You should see the AssetLab tools available.
+
+### Claude Code
+
+```bash
+claude mcp add assetlab npx @assetlab/mcp-server \
+  -e ASSETLAB_API_KEY=al_live_... \
+  -e ASSETLAB_API_URL=your-api-url
+```
+
+## Example prompts
+
+Once connected, you can ask Claude things like:
+
+- *"Show me all overdue work orders"*
+- *"List critical assets at Site A"*
+- *"What PM schedules are due this month?"*
+- *"Summarize the current state of our facilities"*
+- *"Which projects are at risk or delayed?"*
+- *"Show me all assets linked to the HVAC system in Building 3"*
+- *"List open corrective work orders at all sites"*
+- *"What's the total cost history for Asset X?"*
+- *"Show me all project milestones that are at risk"*
+- *"What's the FCI trend for Site A over the past year?"*
+- *"List all replacement plans due in 2027"*
+
+## Available tools
+
+| Tool | Description |
+|------|-------------|
+| `list_assets` | List assets with filters for site, building, system, and search |
+| `get_asset` | Get full details for a specific asset |
+| `list_work_orders` | List work orders filtered by status, priority, type, or site |
+| `get_work_order` | Get full details for a specific work order |
+| `list_sites` | List all sites in your organization |
+| `get_site` | Get details for a specific site |
+| `list_buildings` | List buildings, optionally filtered by site |
+| `list_locations` | List rooms and areas, optionally filtered by building |
+| `list_systems` | List systems (HVAC, plumbing, electrical, etc.) |
+| `list_system_groups` | List system groups |
+| `list_system_classes` | List top-level system classifications |
+| `list_pm_schedules` | List PM schedules filtered by status, frequency, or site |
+| `get_pm_schedule` | Get a PM schedule including tasks and linked assets |
+| `list_pm_templates` | List reusable PM templates |
+| `list_projects` | List capital projects filtered by status or health |
+| `get_project` | Get project details including budget and progress |
+| `list_contracts` | List vendor contracts |
+| `list_compliance_items` | List compliance/regulatory items |
+| `get_compliance_item` | Get a compliance item with linked PM schedules |
+| `get_dashboard_summary` | Get aggregated stats across assets, work orders, and sites |
+| `list_budgets` | List annual funding budgets by year, site, building, or funding source |
+| `get_budget` | Get a single annual funding budget |
+| `list_asset_comments` | List comments on assets, filterable by asset |
+| `get_asset_comment` | Get a single asset comment |
+| `list_asset_costs` | List asset cost records (repairs, PM, operations, replacements) |
+| `get_asset_cost` | Get a single asset cost record with related names |
+| `list_asset_replacement_plans` | List asset replacement plans for lifecycle planning |
+| `get_asset_replacement_plan` | Get a single replacement plan |
+| `list_asset_risk_history` | List risk assessment history for assets |
+| `get_asset_risk_history_entry` | Get a single risk history entry |
+| `list_work_order_comments` | List comments on work orders |
+| `get_work_order_comment` | Get a single work order comment |
+| `list_project_tasks` | List project tasks with status, priority, cost tracking |
+| `get_project_task` | Get a single project task |
+| `list_project_milestones` | List project milestones |
+| `get_project_milestone` | Get a single milestone |
+| `list_project_phases` | List project phases |
+| `get_project_phase` | Get a single phase |
+| `list_project_budget_items` | List project budget line items by category |
+| `get_project_budget_item` | Get a single budget item |
+| `list_project_time_entries` | List time entries for project labor tracking |
+| `get_project_time_entry` | Get a single time entry |
+| `list_project_comments` | List comments on projects (threaded) |
+| `get_project_comment` | Get a single project comment |
+| `list_compliance_records` | List compliance check completion records |
+| `get_compliance_record` | Get a single compliance record |
+| `list_site_fci_history` | List Facility Condition Index history for sites |
+| `get_site_fci_history_entry` | Get a single FCI history entry |
+| `list_dashboard_snapshots` | List monthly aggregate dashboard snapshots |
+| `get_dashboard_snapshot` | Get a single dashboard snapshot |
+| `list_vendor_site_assignments` | List vendor-to-site service mappings |
+| `get_vendor_site_assignment` | Get a single vendor site assignment |
+| `list_contract_sites` | List contract-to-site coverage mappings |
+| `list_custom_field_definitions` | List custom field schemas by entity type |
+| `get_custom_field_definition` | Get a single custom field definition |
+| `list_custom_field_values` | List custom field values by entity or field |
+| `get_custom_field_value` | Get a single custom field value |
+| `list_part_categories` | List part categories |
+| `get_part_category` | Get a single part category |
+
+## Scopes
+
+API keys use scopes to control what Claude can access. Grant only the scopes you need:
+
+| Scope | Access |
+|-------|--------|
+| `assets:read` | Assets |
+| `work_orders:read` | Work orders |
+| `sites:read` | Sites and buildings |
+| `locations:read` | Locations |
+| `systems:read` | Systems, system groups, system classes |
+| `pm_schedules:read` | PM schedules and templates |
+| `projects:read` | Capital projects |
+| `contracts:read` | Vendor contracts |
+| `compliance:read` | Compliance items |
+| `dashboard:read` | Dashboard summary stats |
+| `budgets:read` | Annual funding budgets |
+| `asset_comments:read` | Asset comments |
+| `asset_costs:read` | Asset cost records |
+| `asset_replacement_plans:read` | Asset replacement plans |
+| `asset_risk_history:read` | Asset risk history |
+| `work_order_comments:read` | Work order comments |
+| `project_tasks:read` | Project tasks |
+| `project_milestones:read` | Project milestones |
+| `project_phases:read` | Project phases |
+| `project_budget_items:read` | Project budget items |
+| `project_time_entries:read` | Project time entries |
+| `project_comments:read` | Project comments |
+| `compliance_records:read` | Compliance records |
+| `site_fci_history:read` | Site FCI history |
+| `dashboard_snapshots:read` | Dashboard snapshots |
+| `vendor_site_assignments:read` | Vendor site assignments |
+| `contract_sites:read` | Contract site mappings |
+| `custom_fields:read` | Custom field definitions and values |
+| `part_categories:read` | Part categories |
+| `*:*` | All resources |
+
+## Security
+
+- The MCP server runs **locally** on your machine via stdio — no network server is exposed
+- Your API key is scoped to your organization only
+- All data access is read-only and logged in AssetLab's audit log
+- API keys can be revoked at any time in **Settings → API Keys**
+
+## Support
+
+Questions or issues? Email [support@assetlab.ca](mailto:support@assetlab.ca).

package/dist/client.d.ts

@@ -30,6 +30,17 @@ export declare class AssetLabClient {
     constructor(config: AssetLabConfig);
     get<T = Record<string, unknown>>(path: string, params?: Record<string, string | number | undefined>): Promise<T>;
     list<T = Record<string, unknown>>(resource: string, params?: Record<string, string | number | undefined>): Promise<PaginatedResponse<T>>;
+    /**
+     * Fetch all pages of a paginated resource automatically.
+     * Uses per_page=1000 to minimize round-trips, then follows
+     * pagination until all rows are collected.
+     */
+    listAll<T = Record<string, unknown>>(resource: string, params?: Record<string, string | number | undefined>): Promise<{
+        data: T[];
+        total: number;
+    }>;
     getOne<T = Record<string, unknown>>(resource: string, id: string): Promise<SingleResponse<T>>;
+    post<T = Record<string, unknown>>(path: string, body: Record<string, unknown>): Promise<T>;
+    create<T = Record<string, unknown>>(resource: string, body: Record<string, unknown>): Promise<SingleResponse<T>>;
 }
 export declare function loadConfig(): AssetLabConfig;

package/dist/client.js

@@ -66,9 +66,62 @@ export class AssetLabClient {
     async list(resource, params) {
         return this.get(`/${resource}`, params);
     }
+    /**
+     * Fetch all pages of a paginated resource automatically.
+     * Uses per_page=1000 to minimize round-trips, then follows
+     * pagination until all rows are collected.
+     */
+    async listAll(resource, params) {
+        const allData = [];
+        let page = 1;
+        const perPage = 1000;
+        while (true) {
+            const result = await this.list(resource, { ...params, page, per_page: perPage });
+            allData.push(...result.data);
+            if (page >= result.pagination.total_pages)
+                break;
+            page++;
+        }
+        return { data: allData, total: allData.length };
+    }
     async getOne(resource, id) {
         return this.get(`/${resource}/${id}`);
     }
+    async post(path, body) {
+        const url = `${this.baseUrl}${path}`;
+        const res = await fetch(url, {
+            method: 'POST',
+            headers: {
+                'Authorization': `Bearer ${this.apiKey}`,
+                'Content-Type': 'application/json',
+            },
+            body: JSON.stringify(body),
+        });
+        if (!res.ok) {
+            const data = await res.json().catch(() => ({ error: `HTTP ${res.status}` }));
+            const message = data.error || `HTTP ${res.status}`;
+            switch (res.status) {
+                case 401:
+                    throw new AssetLabClientError(401, 'Authentication failed. Check your ASSETLAB_API_KEY.');
+                case 403:
+                    throw new AssetLabClientError(403, message.includes('scope')
+                        ? message
+                        : message.includes('expired')
+                            ? 'API key has expired. Generate a new one in AssetLab Settings > API Keys.'
+                            : message);
+                case 429:
+                    throw new AssetLabClientError(429, 'Rate limit exceeded. Wait a moment and try again.');
+                case 400:
+                    throw new AssetLabClientError(400, message);
+                default:
+                    throw new AssetLabClientError(res.status, message);
+            }
+        }
+        return res.json();
+    }
+    async create(resource, body) {
+        return this.post(`/${resource}`, body);
+    }
 }
 export function loadConfig() {
     const apiKey = process.env.ASSETLAB_API_KEY;

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAqBH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,MAAM,CAAQ;IACd,YAAY,MAAc,EAAE,OAAe;QACzC,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;CACF;AAED,MAAM,OAAO,cAAc;IACjB,OAAO,CAAQ;IACf,MAAM,CAAQ;IAEtB,YAAY,MAAsB;QAChC,+DAA+D;QAC/D,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QAC3C,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,GAAG,IAAI,KAAK,CAAA;QACd,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,GAAG,CAAA;QAClB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAC7B,CAAC;IAED,KAAK,CAAC,GAAG,CACP,IAAY,EACZ,MAAoD;QAEpD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC,CAAA;QAC7C,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;oBAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;gBACpC,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YACtC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;gBACxC,cAAc,EAAE,kBAAkB;aACnC;SACF,CAAC,CAAA;QAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAA;YAC5E,MAAM,OAAO,GAAI,IAA2B,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAA;YAE1E,gCAAgC;YAChC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;gBACnB,KAAK,GAAG;oBACN,MAAM,IAAI,mBAAmB,CAAC,GAAG,EAAE,qDAAqD,CAAC,CAAA;gBAC3F,KAAK,GAAG;oBACN,MAAM,IAAI,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;wBAC1D,CAAC,CAAC,OAAO;wBACT,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;4BAC3B,CAAC,CAAC,0EAA0E;4BAC5E,CAAC,CAAC,OAAO,CAAC,CAAA;gBAChB,KAAK,GAAG;oBACN,MAAM,IAAI,mBAAmB,CAAC,GAAG,EAAE,mDAAmD,CAAC,CAAA;gBACzF,KAAK,GAAG;oBACN,MAAM,IAAI,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;gBAC7C;oBACE,MAAM,IAAI,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;YACtD,CAAC;QACH,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,EAAgB,CAAA;IACjC,CAAC;IAED,KAAK,CAAC,IAAI,CACR,QAAgB,EAChB,MAAoD;QAEpD,OAAO,IAAI,CAAC,GAAG,CAAuB,IAAI,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAA;IAC/D,CAAC;IAED,KAAK,CAAC,MAAM,CACV,QAAgB,EAChB,EAAU;QAEV,OAAO,IAAI,CAAC,GAAG,CAAoB,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAA;IAC1D,CAAC;CACF;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAA;IAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,qDAAqD;YACrD,oDAAoD,CACrD,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAA;IAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,qDAAqD;YACrD,iEAAiE,CAClE,CAAA;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;AAC3B,CAAC"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAqBH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,MAAM,CAAQ;IACd,YAAY,MAAc,EAAE,OAAe;QACzC,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;CACF;AAED,MAAM,OAAO,cAAc;IACjB,OAAO,CAAQ;IACf,MAAM,CAAQ;IAEtB,YAAY,MAAsB;QAChC,+DAA+D;QAC/D,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QAC3C,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,GAAG,IAAI,KAAK,CAAA;QACd,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,GAAG,CAAA;QAClB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAC7B,CAAC;IAED,KAAK,CAAC,GAAG,CACP,IAAY,EACZ,MAAoD;QAEpD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC,CAAA;QAC7C,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;oBAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;gBACpC,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YACtC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;gBACxC,cAAc,EAAE,kBAAkB;aACnC;SACF,CAAC,CAAA;QAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAA;YAC5E,MAAM,OAAO,GAAI,IAA2B,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAA;YAE1E,gCAAgC;YAChC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;gBACnB,KAAK,GAAG;oBACN,MAAM,IAAI,mBAAmB,CAAC,GAAG,EAAE,qDAAqD,CAAC,CAAA;gBAC3F,KAAK,GAAG;oBACN,MAAM,IAAI,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;wBAC1D,CAAC,CAAC,OAAO;wBACT,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;4BAC3B,CAAC,CAAC,0EAA0E;4BAC5E,CAAC,CAAC,OAAO,CAAC,CAAA;gBAChB,KAAK,GAAG;oBACN,MAAM,IAAI,mBAAmB,CAAC,GAAG,EAAE,mDAAmD,CAAC,CAAA;gBACzF,KAAK,GAAG;oBACN,MAAM,IAAI,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;gBAC7C;oBACE,MAAM,IAAI,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;YACtD,CAAC;QACH,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,EAAgB,CAAA;IACjC,CAAC;IAED,KAAK,CAAC,IAAI,CACR,QAAgB,EAChB,MAAoD;QAEpD,OAAO,IAAI,CAAC,GAAG,CAAuB,IAAI,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAA;IAC/D,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CACX,QAAgB,EAChB,MAAoD;QAEpD,MAAM,OAAO,GAAQ,EAAE,CAAA;QACvB,IAAI,IAAI,GAAG,CAAC,CAAA;QACZ,MAAM,OAAO,GAAG,IAAI,CAAA;QAEpB,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAI,QAAQ,EAAE,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;YACnF,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;YAE5B,IAAI,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW;gBAAE,MAAK;YAChD,IAAI,EAAE,CAAA;QACR,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CAAA;IACjD,CAAC;IAED,KAAK,CAAC,MAAM,CACV,QAAgB,EAChB,EAAU;QAEV,OAAO,IAAI,CAAC,GAAG,CAAoB,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAA;IAC1D,CAAC;IAED,KAAK,CAAC,IAAI,CACR,IAAY,EACZ,IAA6B;QAE7B,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAA;QAEpC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;gBACxC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAA;QAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAA;YAC5E,MAAM,OAAO,GAAI,IAA2B,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAA;YAE1E,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;gBACnB,KAAK,GAAG;oBACN,MAAM,IAAI,mBAAmB,CAAC,GAAG,EAAE,qDAAqD,CAAC,CAAA;gBAC3F,KAAK,GAAG;oBACN,MAAM,IAAI,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;wBAC1D,CAAC,CAAC,OAAO;wBACT,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;4BAC3B,CAAC,CAAC,0EAA0E;4BAC5E,CAAC,CAAC,OAAO,CAAC,CAAA;gBAChB,KAAK,GAAG;oBACN,MAAM,IAAI,mBAAmB,CAAC,GAAG,EAAE,mDAAmD,CAAC,CAAA;gBACzF,KAAK,GAAG;oBACN,MAAM,IAAI,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;gBAC7C;oBACE,MAAM,IAAI,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;YACtD,CAAC;QACH,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,EAAgB,CAAA;IACjC,CAAC;IAED,KAAK,CAAC,MAAM,CACV,QAAgB,EAChB,IAA6B;QAE7B,OAAO,IAAI,CAAC,IAAI,CAAoB,IAAI,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAA;IAC3D,CAAC;CACF;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAA;IAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,qDAAqD;YACrD,oDAAoD,CACrD,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAA;IAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,qDAAqD;YACrD,iEAAiE,CAClE,CAAA;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;AAC3B,CAAC"}

package/dist/oauth.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Minimal OAuth 2.0 Authorization Server for Claude.ai MCP integration.
+ *
+ * Implements just enough of OAuth 2.0 + PKCE to satisfy Claude.ai's connector flow:
+ *   1. Dynamic client registration (RFC 7591)
+ *   2. Authorization endpoint (shows "paste your API key" page)
+ *   3. Token endpoint (exchanges auth code for access token)
+ *
+ * The user's AssetLab API key becomes the OAuth access_token, so the existing
+ * MCP handler works unchanged (it reads Bearer token from Authorization header).
+ *
+ * Authorization codes are encrypted with AES-GCM using OAUTH_SECRET — fully
+ * stateless, no KV or Durable Objects needed.
+ */
+export declare function protectedResourceMetadata(origin: string): Response;
+export declare function authServerMetadata(origin: string): Response;
+export declare function handleRegister(request: Request): Promise<Response>;
+export declare function handleAuthorizeGet(request: Request): Response;
+export declare function handleAuthorizePost(request: Request, secret: string): Promise<Response>;
+export declare function handleToken(request: Request, secret: string): Promise<Response>;