@bowenqt/qiniu-ai-sdk 0.10.0 → 0.13.0

package/dist/modules/mcp/index.js

@@ -0,0 +1,34 @@
+"use strict";
+/**
+ * MCP module public exports.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_MCP_CONFIG = exports.TokenManager = exports.FileTokenStore = exports.MemoryTokenStore = exports.refreshAccessToken = exports.generateState = exports.generateCodeChallenge = exports.generateCodeVerifier = exports.OAuthError = exports.DeviceCodeFlow = exports.PKCEFlow = exports.MCPHttpTransportError = exports.MCPHttpTransport = exports.getAllMCPToolsAsRegistered = exports.adaptMCPToolsToRegistry = exports.MCPClientError = exports.MCPClient = void 0;
+// Client
+var client_1 = require("./client");
+Object.defineProperty(exports, "MCPClient", { enumerable: true, get: function () { return client_1.MCPClient; } });
+Object.defineProperty(exports, "MCPClientError", { enumerable: true, get: function () { return client_1.MCPClientError; } });
+var adapter_1 = require("./adapter");
+Object.defineProperty(exports, "adaptMCPToolsToRegistry", { enumerable: true, get: function () { return adapter_1.adaptMCPToolsToRegistry; } });
+Object.defineProperty(exports, "getAllMCPToolsAsRegistered", { enumerable: true, get: function () { return adapter_1.getAllMCPToolsAsRegistered; } });
+// HTTP Transport (Phase 3)
+var http_transport_1 = require("./http-transport");
+Object.defineProperty(exports, "MCPHttpTransport", { enumerable: true, get: function () { return http_transport_1.MCPHttpTransport; } });
+Object.defineProperty(exports, "MCPHttpTransportError", { enumerable: true, get: function () { return http_transport_1.MCPHttpTransportError; } });
+// OAuth (Phase 3)
+var oauth_1 = require("./oauth");
+Object.defineProperty(exports, "PKCEFlow", { enumerable: true, get: function () { return oauth_1.PKCEFlow; } });
+Object.defineProperty(exports, "DeviceCodeFlow", { enumerable: true, get: function () { return oauth_1.DeviceCodeFlow; } });
+Object.defineProperty(exports, "OAuthError", { enumerable: true, get: function () { return oauth_1.OAuthError; } });
+Object.defineProperty(exports, "generateCodeVerifier", { enumerable: true, get: function () { return oauth_1.generateCodeVerifier; } });
+Object.defineProperty(exports, "generateCodeChallenge", { enumerable: true, get: function () { return oauth_1.generateCodeChallenge; } });
+Object.defineProperty(exports, "generateState", { enumerable: true, get: function () { return oauth_1.generateState; } });
+Object.defineProperty(exports, "refreshAccessToken", { enumerable: true, get: function () { return oauth_1.refreshAccessToken; } });
+// Token Store (Phase 3)
+var token_store_1 = require("./token-store");
+Object.defineProperty(exports, "MemoryTokenStore", { enumerable: true, get: function () { return token_store_1.MemoryTokenStore; } });
+Object.defineProperty(exports, "FileTokenStore", { enumerable: true, get: function () { return token_store_1.FileTokenStore; } });
+Object.defineProperty(exports, "TokenManager", { enumerable: true, get: function () { return token_store_1.TokenManager; } });
+var types_1 = require("./types");
+Object.defineProperty(exports, "DEFAULT_MCP_CONFIG", { enumerable: true, get: function () { return types_1.DEFAULT_MCP_CONFIG; } });
+//# sourceMappingURL=index.js.map

package/dist/modules/mcp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/modules/mcp/index.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAEH,SAAS;AACT,mCAAqD;AAA5C,mGAAA,SAAS,OAAA;AAAE,wGAAA,cAAc,OAAA;AAClC,qCAAgF;AAAvE,kHAAA,uBAAuB,OAAA;AAAE,qHAAA,0BAA0B,OAAA;AAE5D,2BAA2B;AAC3B,mDAA+F;AAAtF,kHAAA,gBAAgB,OAAA;AAAE,uHAAA,qBAAqB,OAAA;AAEhD,kBAAkB;AAClB,iCASiB;AARb,iGAAA,QAAQ,OAAA;AACR,uGAAA,cAAc,OAAA;AACd,mGAAA,UAAU,OAAA;AACV,6GAAA,oBAAoB,OAAA;AACpB,8GAAA,qBAAqB,OAAA;AACrB,sGAAA,aAAa,OAAA;AACb,2GAAA,kBAAkB,OAAA;AAItB,wBAAwB;AACxB,6CAMuB;AALnB,+GAAA,gBAAgB,OAAA;AAChB,6GAAA,cAAc,OAAA;AACd,2GAAA,YAAY,OAAA;AAiBhB,iCAA6C;AAApC,2GAAA,kBAAkB,OAAA"}

package/dist/modules/mcp/index.mjs

@@ -0,0 +1,14 @@
+/**
+ * MCP module public exports.
+ */
+// Client
+export { MCPClient, MCPClientError } from './client.mjs';
+export { adaptMCPToolsToRegistry, getAllMCPToolsAsRegistered } from './adapter.mjs';
+// HTTP Transport (Phase 3)
+export { MCPHttpTransport, MCPHttpTransportError } from './http-transport.mjs';
+// OAuth (Phase 3)
+export { PKCEFlow, DeviceCodeFlow, OAuthError, generateCodeVerifier, generateCodeChallenge, generateState, refreshAccessToken, } from './oauth.mjs';
+// Token Store (Phase 3)
+export { MemoryTokenStore, FileTokenStore, TokenManager, } from './token-store.mjs';
+export { DEFAULT_MCP_CONFIG } from './types.mjs';
+//# sourceMappingURL=index.js.map

package/dist/modules/mcp/oauth.d.ts

@@ -0,0 +1,101 @@
+/**
+ * OAuth 2.0 flows for MCP HTTP transport.
+ * Implements PKCE (browser) and Device Code (headless) flows.
+ *
+ * @see https://modelcontextprotocol.io/docs/concepts/authorization
+ */
+import type { MCPOAuthConfig } from './types';
+/** OAuth token response */
+export interface OAuthTokens {
+    accessToken: string;
+    refreshToken?: string;
+    expiresAt?: number;
+    tokenType: string;
+    scope?: string;
+}
+/** OAuth error */
+export declare class OAuthError extends Error {
+    readonly code?: string | undefined;
+    readonly description?: string | undefined;
+    constructor(message: string, code?: string | undefined, description?: string | undefined);
+}
+/**
+ * Generate PKCE code verifier (43-128 chars).
+ */
+export declare function generateCodeVerifier(): string;
+/**
+ * Generate PKCE code challenge (S256).
+ */
+export declare function generateCodeChallenge(verifier: string): string;
+/**
+ * Generate random state parameter.
+ */
+export declare function generateState(): string;
+/**
+ * PKCE Authorization Code Flow.
+ * Opens a browser for user authentication and starts a local callback server.
+ */
+export declare class PKCEFlow {
+    private readonly config;
+    private server;
+    private codeVerifier;
+    constructor(config: MCPOAuthConfig);
+    /**
+     * Build authorization URL.
+     */
+    buildAuthorizationUrl(redirectUri: string, state: string): string;
+    /**
+     * Start local callback server and wait for authorization code.
+     * Returns the authorization code.
+     * @param options.port - Port to listen on (default: random)
+     * @param options.expectedState - Expected state parameter to validate (required for security)
+     * @param options.timeoutMs - Timeout in milliseconds (default: 300000 = 5 minutes)
+     */
+    waitForCallback(options: {
+        port?: number;
+        expectedState: string;
+        timeoutMs?: number;
+    }): Promise<{
+        code: string;
+        state: string;
+    }>;
+    /**
+     * Exchange authorization code for tokens.
+     */
+    exchangeCode(code: string, redirectUri: string): Promise<OAuthTokens>;
+    /**
+     * Get the local callback server port.
+     */
+    getCallbackPort(): number | null;
+    /**
+     * Stop the callback server.
+     */
+    stopServer(): void;
+}
+/**
+ * Device Code Flow for headless environments.
+ */
+export declare class DeviceCodeFlow {
+    private readonly config;
+    constructor(config: MCPOAuthConfig);
+    /**
+     * Request device code from authorization server.
+     */
+    requestDeviceCode(): Promise<{
+        deviceCode: string;
+        userCode: string;
+        verificationUri: string;
+        verificationUriComplete?: string;
+        expiresIn: number;
+        interval: number;
+    }>;
+    /**
+     * Poll for token after user completes authentication.
+     */
+    pollForToken(deviceCode: string, interval: number, expiresIn: number, onPending?: () => void): Promise<OAuthTokens>;
+}
+/**
+ * Refresh an access token using refresh token.
+ */
+export declare function refreshAccessToken(config: MCPOAuthConfig, refreshToken: string): Promise<OAuthTokens>;
+//# sourceMappingURL=oauth.d.ts.map

package/dist/modules/mcp/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../src/modules/mcp/oauth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE9C,2BAA2B;AAC3B,MAAM,WAAW,WAAW;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,kBAAkB;AAClB,qBAAa,UAAW,SAAQ,KAAK;aAGb,IAAI,CAAC,EAAE,MAAM;aACb,WAAW,CAAC,EAAE,MAAM;gBAFpC,OAAO,EAAE,MAAM,EACC,IAAI,CAAC,EAAE,MAAM,YAAA,EACb,WAAW,CAAC,EAAE,MAAM,YAAA;CAK3C;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAG9D;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED;;;GAGG;AACH,qBAAa,QAAQ;IACjB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,YAAY,CAAc;gBAEtB,MAAM,EAAE,cAAc;IAIlC;;OAEG;IACH,qBAAqB,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM;IAsBjE;;;;;;OAMG;IACG,eAAe,CAAC,OAAO,EAAE;QAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IA+D5C;;OAEG;IACG,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAkD3E;;OAEG;IACH,eAAe,IAAI,MAAM,GAAG,IAAI;IAQhC;;OAEG;IACH,UAAU,IAAI,IAAI;CAMrB;AAED;;GAEG;AACH,qBAAa,cAAc;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;gBAE5B,MAAM,EAAE,cAAc;IAIlC;;OAEG;IACG,iBAAiB,IAAI,OAAO,CAAC;QAC/B,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;QACjB,eAAe,EAAE,MAAM,CAAC;QACxB,uBAAuB,CAAC,EAAE,MAAM,CAAC;QACjC,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;KACpB,CAAC;IA6CF;;OAEG;IACG,YAAY,CACd,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,SAAS,CAAC,EAAE,MAAM,IAAI,GACvB,OAAO,CAAC,WAAW,CAAC;CAiE1B;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACpC,MAAM,EAAE,cAAc,EACtB,YAAY,EAAE,MAAM,GACrB,OAAO,CAAC,WAAW,CAAC,CA8CtB"}

package/dist/modules/mcp/oauth.js

@@ -0,0 +1,347 @@
+"use strict";
+/**
+ * OAuth 2.0 flows for MCP HTTP transport.
+ * Implements PKCE (browser) and Device Code (headless) flows.
+ *
+ * @see https://modelcontextprotocol.io/docs/concepts/authorization
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DeviceCodeFlow = exports.PKCEFlow = exports.OAuthError = void 0;
+exports.generateCodeVerifier = generateCodeVerifier;
+exports.generateCodeChallenge = generateCodeChallenge;
+exports.generateState = generateState;
+exports.refreshAccessToken = refreshAccessToken;
+const crypto = __importStar(require("node:crypto"));
+const http = __importStar(require("node:http"));
+/** OAuth error */
+class OAuthError extends Error {
+    constructor(message, code, description) {
+        super(message);
+        this.code = code;
+        this.description = description;
+        this.name = 'OAuthError';
+    }
+}
+exports.OAuthError = OAuthError;
+/**
+ * Generate PKCE code verifier (43-128 chars).
+ */
+function generateCodeVerifier() {
+    return crypto.randomBytes(32).toString('base64url');
+}
+/**
+ * Generate PKCE code challenge (S256).
+ */
+function generateCodeChallenge(verifier) {
+    const hash = crypto.createHash('sha256').update(verifier).digest();
+    return hash.toString('base64url');
+}
+/**
+ * Generate random state parameter.
+ */
+function generateState() {
+    return crypto.randomBytes(16).toString('hex');
+}
+/**
+ * PKCE Authorization Code Flow.
+ * Opens a browser for user authentication and starts a local callback server.
+ */
+class PKCEFlow {
+    constructor(config) {
+        this.server = null;
+        this.codeVerifier = '';
+        this.config = config;
+    }
+    /**
+     * Build authorization URL.
+     */
+    buildAuthorizationUrl(redirectUri, state) {
+        this.codeVerifier = generateCodeVerifier();
+        const codeChallenge = generateCodeChallenge(this.codeVerifier);
+        const params = new URLSearchParams({
+            response_type: 'code',
+            client_id: this.config.clientId,
+            redirect_uri: redirectUri,
+            scope: this.config.scopes.join(' '),
+            state,
+            code_challenge: codeChallenge,
+            code_challenge_method: 'S256',
+        });
+        const authUrl = this.config.authorizationUrl;
+        if (!authUrl) {
+            throw new OAuthError('Authorization URL not configured');
+        }
+        return `${authUrl}?${params.toString()}`;
+    }
+    /**
+     * Start local callback server and wait for authorization code.
+     * Returns the authorization code.
+     * @param options.port - Port to listen on (default: random)
+     * @param options.expectedState - Expected state parameter to validate (required for security)
+     * @param options.timeoutMs - Timeout in milliseconds (default: 300000 = 5 minutes)
+     */
+    async waitForCallback(options) {
+        const { port = 0, expectedState, timeoutMs = 300000 } = options;
+        return new Promise((resolve, reject) => {
+            // Setup timeout
+            const timeoutId = setTimeout(() => {
+                this.stopServer();
+                reject(new OAuthError(`Callback timeout after ${timeoutMs}ms`));
+            }, timeoutMs);
+            this.server = http.createServer((req, res) => {
+                const url = new URL(req.url || '', `http://localhost:${port}`);
+                const code = url.searchParams.get('code');
+                const state = url.searchParams.get('state');
+                const error = url.searchParams.get('error');
+                const errorDescription = url.searchParams.get('error_description');
+                if (error) {
+                    res.writeHead(400, { 'Content-Type': 'text/html' });
+                    res.end(`<h1>Authorization Failed</h1><p>${errorDescription || error}</p>`);
+                    clearTimeout(timeoutId);
+                    this.stopServer();
+                    reject(new OAuthError(`Authorization failed: ${error}`, error, errorDescription || undefined));
+                    return;
+                }
+                if (!code || !state) {
+                    res.writeHead(400, { 'Content-Type': 'text/html' });
+                    res.end('<h1>Missing code or state</h1>');
+                    return;
+                }
+                // Validate state (CSRF protection)
+                if (state !== expectedState) {
+                    res.writeHead(400, { 'Content-Type': 'text/html' });
+                    res.end('<h1>Invalid state parameter</h1>');
+                    clearTimeout(timeoutId);
+                    this.stopServer();
+                    reject(new OAuthError('State mismatch: possible CSRF attack', 'state_mismatch'));
+                    return;
+                }
+                res.writeHead(200, { 'Content-Type': 'text/html' });
+                res.end('<h1>Authorization Successful</h1><p>You can close this window.</p>');
+                clearTimeout(timeoutId);
+                this.stopServer();
+                resolve({ code, state });
+            });
+            this.server.listen(port, '127.0.0.1', () => {
+                const addr = this.server?.address();
+                if (typeof addr === 'object' && addr) {
+                    // Server started on addr.port
+                }
+            });
+            this.server.on('error', (err) => {
+                clearTimeout(timeoutId);
+                reject(new OAuthError(`Callback server error: ${err.message}`));
+            });
+        });
+    }
+    /**
+     * Exchange authorization code for tokens.
+     */
+    async exchangeCode(code, redirectUri) {
+        const tokenUrl = this.config.tokenUrl;
+        if (!tokenUrl) {
+            throw new OAuthError('Token URL not configured');
+        }
+        const body = new URLSearchParams({
+            grant_type: 'authorization_code',
+            code,
+            redirect_uri: redirectUri,
+            client_id: this.config.clientId,
+            code_verifier: this.codeVerifier,
+        });
+        if (this.config.clientSecret) {
+            body.set('client_secret', this.config.clientSecret);
+        }
+        const response = await fetch(tokenUrl, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+            body: body.toString(),
+        });
+        if (!response.ok) {
+            const error = await response.json().catch(() => ({}));
+            throw new OAuthError(`Token exchange failed: ${response.status}`, error.error, error.error_description);
+        }
+        const data = await response.json();
+        return {
+            accessToken: data.access_token,
+            refreshToken: data.refresh_token,
+            expiresAt: data.expires_in ? Date.now() + data.expires_in * 1000 : undefined,
+            tokenType: data.token_type,
+            scope: data.scope,
+        };
+    }
+    /**
+     * Get the local callback server port.
+     */
+    getCallbackPort() {
+        const addr = this.server?.address();
+        if (typeof addr === 'object' && addr) {
+            return addr.port;
+        }
+        return null;
+    }
+    /**
+     * Stop the callback server.
+     */
+    stopServer() {
+        if (this.server) {
+            this.server.close();
+            this.server = null;
+        }
+    }
+}
+exports.PKCEFlow = PKCEFlow;
+/**
+ * Device Code Flow for headless environments.
+ */
+class DeviceCodeFlow {
+    constructor(config) {
+        this.config = config;
+    }
+    /**
+     * Request device code from authorization server.
+     */
+    async requestDeviceCode() {
+        const deviceCodeUrl = this.config.deviceCodeUrl;
+        if (!deviceCodeUrl) {
+            throw new OAuthError('Device code URL not configured');
+        }
+        const body = new URLSearchParams({
+            client_id: this.config.clientId,
+            scope: this.config.scopes.join(' '),
+        });
+        const response = await fetch(deviceCodeUrl, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+            body: body.toString(),
+        });
+        if (!response.ok) {
+            const error = await response.json().catch(() => ({}));
+            throw new OAuthError(`Device code request failed: ${response.status}`, error.error, error.error_description);
+        }
+        const data = await response.json();
+        return {
+            deviceCode: data.device_code,
+            userCode: data.user_code,
+            verificationUri: data.verification_uri,
+            verificationUriComplete: data.verification_uri_complete,
+            expiresIn: data.expires_in,
+            interval: data.interval || 5,
+        };
+    }
+    /**
+     * Poll for token after user completes authentication.
+     */
+    async pollForToken(deviceCode, interval, expiresIn, onPending) {
+        const tokenUrl = this.config.tokenUrl;
+        if (!tokenUrl) {
+            throw new OAuthError('Token URL not configured');
+        }
+        const deadline = Date.now() + expiresIn * 1000;
+        let currentInterval = interval * 1000;
+        while (Date.now() < deadline) {
+            await new Promise((resolve) => setTimeout(resolve, currentInterval));
+            const body = new URLSearchParams({
+                grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
+                device_code: deviceCode,
+                client_id: this.config.clientId,
+            });
+            const response = await fetch(tokenUrl, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+                body: body.toString(),
+            });
+            const data = await response.json();
+            if (data.access_token) {
+                return {
+                    accessToken: data.access_token,
+                    refreshToken: data.refresh_token,
+                    expiresAt: data.expires_in ? Date.now() + data.expires_in * 1000 : undefined,
+                    tokenType: data.token_type || 'Bearer',
+                    scope: data.scope,
+                };
+            }
+            if (data.error === 'authorization_pending') {
+                onPending?.();
+                continue;
+            }
+            if (data.error === 'slow_down') {
+                currentInterval += 5000; // Add 5 seconds
+                continue;
+            }
+            if (data.error) {
+                throw new OAuthError(`Device code polling failed: ${data.error}`, data.error, data.error_description);
+            }
+        }
+        throw new OAuthError('Device code expired');
+    }
+}
+exports.DeviceCodeFlow = DeviceCodeFlow;
+/**
+ * Refresh an access token using refresh token.
+ */
+async function refreshAccessToken(config, refreshToken) {
+    const tokenUrl = config.tokenUrl;
+    if (!tokenUrl) {
+        throw new OAuthError('Token URL not configured');
+    }
+    const body = new URLSearchParams({
+        grant_type: 'refresh_token',
+        refresh_token: refreshToken,
+        client_id: config.clientId,
+    });
+    if (config.clientSecret) {
+        body.set('client_secret', config.clientSecret);
+    }
+    const response = await fetch(tokenUrl, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+        body: body.toString(),
+    });
+    if (!response.ok) {
+        const error = await response.json().catch(() => ({}));
+        throw new OAuthError(`Token refresh failed: ${response.status}`, error.error, error.error_description);
+    }
+    const data = await response.json();
+    return {
+        accessToken: data.access_token,
+        refreshToken: data.refresh_token || refreshToken,
+        expiresAt: data.expires_in ? Date.now() + data.expires_in * 1000 : undefined,
+        tokenType: data.token_type,
+        scope: data.scope,
+    };
+}
+//# sourceMappingURL=oauth.js.map

package/dist/modules/mcp/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/modules/mcp/oauth.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BH,oDAEC;AAKD,sDAGC;AAKD,sCAEC;AA4UD,gDAiDC;AA1aD,oDAAsC;AACtC,gDAAkC;AAYlC,kBAAkB;AAClB,MAAa,UAAW,SAAQ,KAAK;IACjC,YACI,OAAe,EACC,IAAa,EACb,WAAoB;QAEpC,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAS;QACb,gBAAW,GAAX,WAAW,CAAS;QAGpC,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC7B,CAAC;CACJ;AATD,gCASC;AAED;;GAEG;AACH,SAAgB,oBAAoB;IAChC,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACxD,CAAC;AAED;;GAEG;AACH,SAAgB,qBAAqB,CAAC,QAAgB;IAClD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;IACnE,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,SAAgB,aAAa;IACzB,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,MAAa,QAAQ;IAKjB,YAAY,MAAsB;QAH1B,WAAM,GAAuB,IAAI,CAAC;QAClC,iBAAY,GAAW,EAAE,CAAC;QAG9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,WAAmB,EAAE,KAAa;QACpD,IAAI,CAAC,YAAY,GAAG,oBAAoB,EAAE,CAAC;QAC3C,MAAM,aAAa,GAAG,qBAAqB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAE/D,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YAC/B,aAAa,EAAE,MAAM;YACrB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,YAAY,EAAE,WAAW;YACzB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACnC,KAAK;YACL,cAAc,EAAE,aAAa;YAC7B,qBAAqB,EAAE,MAAM;SAChC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,MAAM,IAAI,UAAU,CAAC,kCAAkC,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO,GAAG,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC7C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,eAAe,CAAC,OAIrB;QACG,MAAM,EAAE,IAAI,GAAG,CAAC,EAAE,aAAa,EAAE,SAAS,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC;QAEhE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,gBAAgB;YAChB,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,IAAI,CAAC,UAAU,EAAE,CAAC;gBAClB,MAAM,CAAC,IAAI,UAAU,CAAC,0BAA0B,SAAS,IAAI,CAAC,CAAC,CAAC;YACpE,CAAC,EAAE,SAAS,CAAC,CAAC;YAEd,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACzC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;gBAC/D,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC5C,MAAM,gBAAgB,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBAEnE,IAAI,KAAK,EAAE,CAAC;oBACR,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;oBACpD,GAAG,CAAC,GAAG,CAAC,mCAAmC,gBAAgB,IAAI,KAAK,MAAM,CAAC,CAAC;oBAC5E,YAAY,CAAC,SAAS,CAAC,CAAC;oBACxB,IAAI,CAAC,UAAU,EAAE,CAAC;oBAClB,MAAM,CAAC,IAAI,UAAU,CAAC,yBAAyB,KAAK,EAAE,EAAE,KAAK,EAAE,gBAAgB,IAAI,SAAS,CAAC,CAAC,CAAC;oBAC/F,OAAO;gBACX,CAAC;gBAED,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBAClB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;oBACpD,GAAG,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;oBAC1C,OAAO;gBACX,CAAC;gBAED,mCAAmC;gBACnC,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;oBAC1B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;oBACpD,GAAG,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;oBAC5C,YAAY,CAAC,SAAS,CAAC,CAAC;oBACxB,IAAI,CAAC,UAAU,EAAE,CAAC;oBAClB,MAAM,CAAC,IAAI,UAAU,CAAC,sCAAsC,EAAE,gBAAgB,CAAC,CAAC,CAAC;oBACjF,OAAO;gBACX,CAAC;gBAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;gBAC9E,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxB,IAAI,CAAC,UAAU,EAAE,CAAC;gBAClB,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7B,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;gBACvC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,EAAE,CAAC;oBACnC,8BAA8B;gBAClC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC5B,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxB,MAAM,CAAC,IAAI,UAAU,CAAC,0BAA0B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACpE,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,WAAmB;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QACtC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,MAAM,IAAI,UAAU,CAAC,0BAA0B,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC7B,UAAU,EAAE,oBAAoB;YAChC,IAAI;YACJ,YAAY,EAAE,WAAW;YACzB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,aAAa,EAAE,IAAI,CAAC,YAAY;SACnC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC3B,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;YACnC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACtD,MAAM,IAAI,UAAU,CAChB,0BAA0B,QAAQ,CAAC,MAAM,EAAE,EAC1C,KAA4B,CAAC,KAAK,EAClC,KAAwC,CAAC,iBAAiB,CAC9D,CAAC;QACN,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAM/B,CAAC;QAEF,OAAO;YACH,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;YAChC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS;YAC5E,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;SACpB,CAAC;IACN,CAAC;IAED;;OAEG;IACH,eAAe;QACX,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACpC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,IAAI,CAAC;QACrB,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,UAAU;QACN,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACvB,CAAC;IACL,CAAC;CACJ;AArLD,4BAqLC;AAED;;GAEG;AACH,MAAa,cAAc;IAGvB,YAAY,MAAsB;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB;QAQnB,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;QAChD,IAAI,CAAC,aAAa,EAAE,CAAC;YACjB,MAAM,IAAI,UAAU,CAAC,gCAAgC,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC7B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SACtC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE;YACxC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACtD,MAAM,IAAI,UAAU,CAChB,+BAA+B,QAAQ,CAAC,MAAM,EAAE,EAC/C,KAA4B,CAAC,KAAK,EAClC,KAAwC,CAAC,iBAAiB,CAC9D,CAAC;QACN,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAO/B,CAAC;QAEF,OAAO;YACH,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,eAAe,EAAE,IAAI,CAAC,gBAAgB;YACtC,uBAAuB,EAAE,IAAI,CAAC,yBAAyB;YACvD,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,CAAC;SAC/B,CAAC;IACN,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CACd,UAAkB,EAClB,QAAgB,EAChB,SAAiB,EACjB,SAAsB;QAEtB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QACtC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,MAAM,IAAI,UAAU,CAAC,0BAA0B,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC;QAC/C,IAAI,eAAe,GAAG,QAAQ,GAAG,IAAI,CAAC;QAEtC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC;YAErE,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;gBAC7B,UAAU,EAAE,8CAA8C;gBAC1D,WAAW,EAAE,UAAU;gBACvB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;aAClC,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;gBACnC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;aACxB,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAQ/B,CAAC;YAEF,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACpB,OAAO;oBACH,WAAW,EAAE,IAAI,CAAC,YAAY;oBAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;oBAChC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS;oBAC5E,SAAS,EAAE,IAAI,CAAC,UAAU,IAAI,QAAQ;oBACtC,KAAK,EAAE,IAAI,CAAC,KAAK;iBACpB,CAAC;YACN,CAAC;YAED,IAAI,IAAI,CAAC,KAAK,KAAK,uBAAuB,EAAE,CAAC;gBACzC,SAAS,EAAE,EAAE,CAAC;gBACd,SAAS;YACb,CAAC;YAED,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;gBAC7B,eAAe,IAAI,IAAI,CAAC,CAAC,gBAAgB;gBACzC,SAAS;YACb,CAAC;YAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACb,MAAM,IAAI,UAAU,CAChB,+BAA+B,IAAI,CAAC,KAAK,EAAE,EAC3C,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,iBAAiB,CACzB,CAAC;YACN,CAAC;QACL,CAAC;QAED,MAAM,IAAI,UAAU,CAAC,qBAAqB,CAAC,CAAC;IAChD,CAAC;CACJ;AAvID,wCAuIC;AAED;;GAEG;AACI,KAAK,UAAU,kBAAkB,CACpC,MAAsB,EACtB,YAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACZ,MAAM,IAAI,UAAU,CAAC,0BAA0B,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC7B,UAAU,EAAE,eAAe;QAC3B,aAAa,EAAE,YAAY;QAC3B,SAAS,EAAE,MAAM,CAAC,QAAQ;KAC7B,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACtB,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;QACnC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;KACxB,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtD,MAAM,IAAI,UAAU,CAChB,yBAAyB,QAAQ,CAAC,MAAM,EAAE,EACzC,KAA4B,CAAC,KAAK,EAClC,KAAwC,CAAC,iBAAiB,CAC9D,CAAC;IACN,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAM/B,CAAC;IAEF,OAAO;QACH,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,YAAY,EAAE,IAAI,CAAC,aAAa,IAAI,YAAY;QAChD,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS;QAC5E,SAAS,EAAE,IAAI,CAAC,UAAU;QAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;KACpB,CAAC;AACN,CAAC"}