@bedrockio/ai 0.5.0 → 0.5.1

package/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.5.1
+
+- Added basic api key authorization.
+
 ## 0.5.0
 
 - Added `McpServer` and basic handling of using it in tools.

package/dist/cjs/McpServer.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const SUPPORTED_VERSIONS = ['2025-03-26', '2025-06-18'];
 const ERROR_INVALID_SESSION = -32000;
+const ERROR_UNAUTHORIZED = -32001;
 const ERROR_METHOD_NOT_FOUND = -32601;
 const ERROR_INVALID_REQUEST = -32600;
 const ERROR_INVALID_PARAMS = -32602;
@@ -17,6 +18,7 @@ class McpServer {
             return;
         }
         this.assertValidTransport(body);
+        await this.assertAuthorization(ctx);
         let result;
         if (method === 'initialize') {
             this.setNewSessionId(ctx);
@@ -57,10 +59,21 @@ class McpServer {
             throw new InvalidRequestError();
         }
     }
+    async assertAuthorization(ctx) {
+        const { apiKeyRequired, isValidApiKey } = this.options;
+        const bearer = this.getBearer(ctx);
+        if (apiKeyRequired || bearer) {
+            const isValid = await isValidApiKey(bearer, ctx);
+            if (!isValid) {
+                throw new UnauthorizedError();
+            }
+        }
+    }
     assertValidSession(ctx) {
         if (!this.hasValidSessionId(ctx)) {
             throw new InvalidSessionError();
         }
+        ctx.set('content-type', 'application/json; charset=utf-8');
     }
     // Calls
     initialize(body) {
@@ -88,7 +101,7 @@ class McpServer {
         };
     }
     listTools() {
-        const { tools } = this.options;
+        const { tools = [] } = this.options;
         return {
             result: {
                 tools: tools.map((tool) => {
@@ -179,6 +192,11 @@ class McpServer {
             ctx.set('mcp-session-id', sessionId);
         }
     }
+    // Authorization helpers
+    getBearer(ctx) {
+        const authorization = ctx.get('authorization') || '';
+        return authorization.match(/Bearer (.+)/)?.[1];
+    }
     // Version helpers
     isSupportedVersion(version) {
         return SUPPORTED_VERSIONS.includes(version);
@@ -197,6 +215,18 @@ class InvalidRequestError extends Error {
         };
     }
 }
+class UnauthorizedError extends Error {
+    status = 401;
+    toJSON() {
+        return {
+            jsonrpc: '2.0',
+            error: {
+                code: ERROR_UNAUTHORIZED,
+                message: 'Unauthorized',
+            },
+        };
+    }
+}
 class InvalidSessionError extends Error {
     status = 404;
     toJSON() {

package/dist/esm/McpServer.js

@@ -1,5 +1,6 @@
 const SUPPORTED_VERSIONS = ['2025-03-26', '2025-06-18'];
 const ERROR_INVALID_SESSION = -32000;
+const ERROR_UNAUTHORIZED = -32001;
 const ERROR_METHOD_NOT_FOUND = -32601;
 const ERROR_INVALID_REQUEST = -32600;
 const ERROR_INVALID_PARAMS = -32602;
@@ -15,6 +16,7 @@ export default class McpServer {
             return;
         }
         this.assertValidTransport(body);
+        await this.assertAuthorization(ctx);
         let result;
         if (method === 'initialize') {
             this.setNewSessionId(ctx);
@@ -55,10 +57,21 @@ export default class McpServer {
             throw new InvalidRequestError();
         }
     }
+    async assertAuthorization(ctx) {
+        const { apiKeyRequired, isValidApiKey } = this.options;
+        const bearer = this.getBearer(ctx);
+        if (apiKeyRequired || bearer) {
+            const isValid = await isValidApiKey(bearer, ctx);
+            if (!isValid) {
+                throw new UnauthorizedError();
+            }
+        }
+    }
     assertValidSession(ctx) {
         if (!this.hasValidSessionId(ctx)) {
             throw new InvalidSessionError();
         }
+        ctx.set('content-type', 'application/json; charset=utf-8');
     }
     // Calls
     initialize(body) {
@@ -86,7 +99,7 @@ export default class McpServer {
         };
     }
     listTools() {
-        const { tools } = this.options;
+        const { tools = [] } = this.options;
         return {
             result: {
                 tools: tools.map((tool) => {
@@ -177,6 +190,11 @@ export default class McpServer {
             ctx.set('mcp-session-id', sessionId);
         }
     }
+    // Authorization helpers
+    getBearer(ctx) {
+        const authorization = ctx.get('authorization') || '';
+        return authorization.match(/Bearer (.+)/)?.[1];
+    }
     // Version helpers
     isSupportedVersion(version) {
         return SUPPORTED_VERSIONS.includes(version);
@@ -194,6 +212,18 @@ class InvalidRequestError extends Error {
         };
     }
 }
+class UnauthorizedError extends Error {
+    status = 401;
+    toJSON() {
+        return {
+            jsonrpc: '2.0',
+            error: {
+                code: ERROR_UNAUTHORIZED,
+                message: 'Unauthorized',
+            },
+        };
+    }
+}
 class InvalidSessionError extends Error {
     status = 404;
     toJSON() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bedrockio/ai",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "Bedrock wrapper for common AI chatbots.",
   "type": "module",
   "scripts": {

package/types/McpServer.d.ts

@@ -15,6 +15,7 @@ export default class McpServer {
     }>;
     validateOptions(options: any): void;
     assertValidTransport(body: any): void;
+    assertAuthorization(ctx: any): Promise<void>;
     assertValidSession(ctx: any): void;
     initialize(body: any): {
         error: {
@@ -93,6 +94,7 @@ export default class McpServer {
     getSessionId(ctx: any): any;
     hasValidSessionId(ctx: any): boolean;
     setNewSessionId(ctx: any): void;
+    getBearer(ctx: any): any;
     isSupportedVersion(version: any): boolean;
 }
 //# sourceMappingURL=McpServer.d.ts.map

package/types/McpServer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"McpServer.d.ts","sourceRoot":"","sources":["../src/McpServer.js"],"names":[],"mappings":"AAOA;IACE,0BAGC;IADC,YAAsB;IAGxB;;;;;;;;;;;OAkCC;IAID,oCAOC;IAED,sCAKC;IAED,mCAIC;IAID;;;;;;;;;;;;;;;;;;;;MAmBC;IAED;;MAIC;IAED;;;;MAUC;IAED;;;;;;;;;;;;OAOC;IAED;;;;;;;OAaC;IAED;;;;;MAOC;IAID;;;;;MAOC;IAED;;;;;;;;;MAWC;IAID,wBAKC;IAED,4BAEC;IAID,4BAEC;IAED,qCAOC;IAED,gCAKC;IAID,0CAEC;CACF"}
+{"version":3,"file":"McpServer.d.ts","sourceRoot":"","sources":["../src/McpServer.js"],"names":[],"mappings":"AAQA;IACE,0BAGC;IADC,YAAsB;IAGxB;;;;;;;;;;;OAmCC;IAID,oCAOC;IAED,sCAKC;IAED,6CAUC;IAED,mCAKC;IAID;;;;;;;;;;;;;;;;;;;;MAmBC;IAED;;MAIC;IAED;;;;MAUC;IAED;;;;;;;;;;;;OAOC;IAED;;;;;;;OAaC;IAED;;;;;MAOC;IAID;;;;;MAOC;IAED;;;;;;;;;MAWC;IAID,wBAKC;IAED,4BAEC;IAID,4BAEC;IAED,qCAOC;IAED,gCAKC;IAID,yBAGC;IAID,0CAEC;CACF"}