@cachly-dev/mcp-server 0.10.6 → 0.10.7

package/LICENSE

@@ -1,202 +0,0 @@
-
-                                 Apache License
-                           Version 2.0, January 2004
-                        http://www.apache.org/licenses/
-
-   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-   1. Definitions.
-
-      "License" shall mean the terms and conditions for use, reproduction,
-      and distribution as defined by Sections 1 through 9 of this document.
-
-      "Licensor" shall mean the copyright owner or entity authorized by
-      the copyright owner that is granting the License.
-
-      "Legal Entity" shall mean the union of the acting entity and all
-      other entities that control, are controlled by, or are under common
-      control with that entity. For the purposes of this definition,
-      "control" means (i) the power, direct or indirect, to cause the
-      direction or management of such entity, whether by contract or
-      otherwise, or (ii) ownership of fifty percent (50%) or more of the
-      outstanding shares, or (iii) beneficial ownership of such entity.
-
-      "You" (or "Your") shall mean an individual or Legal Entity
-      exercising permissions granted by this License.
-
-      "Source" form shall mean the preferred form for making modifications,
-      including but not limited to software source code, documentation
-      source, and configuration files.
-
-      "Object" form shall mean any form resulting from mechanical
-      transformation or translation of a Source form, including but
-      not limited to compiled object code, generated documentation,
-      and conversions to other media types.
-
-      "Work" shall mean the work of authorship, whether in Source or
-      Object form, made available under the License, as indicated by a
-      copyright notice that is included in or attached to the work
-      (an example is provided in the Appendix below).
-
-      "Derivative Works" shall mean any work, whether in Source or Object
-      form, that is based on (or derived from) the Work and for which the
-      editorial revisions, annotations, elaborations, or other modifications
-      represent, as a whole, an original work of authorship. For the purposes
-      of this License, Derivative Works shall not include works that remain
-      separable from, or merely link (or bind by name) to the interfaces of,
-      the Work and Derivative Works thereof.
-
-      "Contribution" shall mean any work of authorship, including
-      the original version of the Work and any modifications or additions
-      to that Work or Derivative Works thereof, that is intentionally
-      submitted to Licensor for inclusion in the Work by the copyright owner
-      or by an individual or Legal Entity authorized to submit on behalf of
-      the copyright owner. For the purposes of this definition, "submitted"
-      means any form of electronic, verbal, or written communication sent
-      to the Licensor or its representatives, including but not limited to
-      communication on electronic mailing lists, source code control systems,
-      and issue tracking systems that are managed by, or on behalf of, the
-      Licensor for the purpose of discussing and improving the Work, but
-      excluding communication that is conspicuously marked or otherwise
-      designated in writing by the copyright owner as "Not a Contribution."
-
-      "Contributor" shall mean Licensor and any individual or Legal Entity
-      on behalf of whom a Contribution has been received by Licensor and
-      subsequently incorporated within the Work.
-
-   2. Grant of Copyright License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      copyright license to reproduce, prepare Derivative Works of,
-      publicly display, publicly perform, sublicense, and distribute the
-      Work and such Derivative Works in Source or Object form.
-
-   3. Grant of Patent License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      (except as stated in this section) patent license to make, have made,
-      use, offer to sell, sell, import, and otherwise transfer the Work,
-      where such license applies only to those patent claims licensable
-      by such Contributor that are necessarily infringed by their
-      Contribution(s) alone or by combination of their Contribution(s)
-      with the Work to which such Contribution(s) was submitted. If You
-      institute patent litigation against any entity (including a
-      cross-claim or counterclaim in a lawsuit) alleging that the Work
-      or a Contribution incorporated within the Work constitutes direct
-      or contributory patent infringement, then any patent licenses
-      granted to You under this License for that Work shall terminate
-      as of the date such litigation is filed.
-
-   4. Redistribution. You may reproduce and distribute copies of the
-      Work or Derivative Works thereof in any medium, with or without
-      modifications, and in Source or Object form, provided that You
-      meet the following conditions:
-
-      (a) You must give any other recipients of the Work or
-          Derivative Works a copy of this License; and
-
-      (b) You must cause any modified files to carry prominent notices
-          stating that You changed the files; and
-
-      (c) You must retain, in the Source form of any Derivative Works
-          that You distribute, all copyright, patent, trademark, and
-          attribution notices from the Source form of the Work,
-          excluding those notices that do not pertain to any part of
-          the Derivative Works; and
-
-      (d) If the Work includes a "NOTICE" text file as part of its
-          distribution, then any Derivative Works that You distribute must
-          include a readable copy of the attribution notices contained
-          within such NOTICE file, excluding those notices that do not
-          pertain to any part of the Derivative Works, in at least one
-          of the following places: within a NOTICE text file distributed
-          as part of the Derivative Works; within the Source form or
-          documentation, if provided along with the Derivative Works; or,
-          within a display generated by the Derivative Works, if and
-          wherever such third-party notices normally appear. The contents
-          of the NOTICE file are for informational purposes only and
-          do not modify the License. You may add Your own attribution
-          notices within Derivative Works that You distribute, alongside
-          or as an addendum to the NOTICE text from the Work, provided
-          that such additional attribution notices cannot be construed
-          as modifying the License.
-
-      You may add Your own copyright statement to Your modifications and
-      may provide additional or different license terms and conditions
-      for use, reproduction, or distribution of Your modifications, or
-      for any such Derivative Works as a whole, provided Your use,
-      reproduction, and distribution of the Work otherwise complies with
-      the conditions stated in this License.
-
-   5. Submission of Contributions. Unless You explicitly state otherwise,
-      any Contribution intentionally submitted for inclusion in the Work
-      by You to the Licensor shall be under the terms and conditions of
-      this License, without any additional terms or conditions.
-      Notwithstanding the above, nothing herein shall supersede or modify
-      the terms of any separate license agreement you may have executed
-      with Licensor regarding such Contributions.
-
-   6. Trademarks. This License does not grant permission to use the trade
-      names, trademarks, service marks, or product names of the Licensor,
-      except as required for reasonable and customary use in describing the
-      origin of the Work and reproducing the content of the NOTICE file.
-
-   7. Disclaimer of Warranty. Unless required by applicable law or
-      agreed to in writing, Licensor provides the Work (and each
-      Contributor provides its Contributions) on an "AS IS" BASIS,
-      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-      implied, including, without limitation, any warranties or conditions
-      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-      PARTICULAR PURPOSE. You are solely responsible for determining the
-      appropriateness of using or redistributing the Work and assume any
-      risks associated with Your exercise of permissions under this License.
-
-   8. Limitation of Liability. In no event and under no legal theory,
-      whether in tort (including negligence), contract, or otherwise,
-      unless required by applicable law (such as deliberate and grossly
-      negligent acts) or agreed to in writing, shall any Contributor be
-      liable to You for damages, including any direct, indirect, special,
-      incidental, or consequential damages of any character arising as a
-      result of this License or out of the use or inability to use the
-      Work (including but not limited to damages for loss of goodwill,
-      work stoppage, computer failure or malfunction, or any and all
-      other commercial damages or losses), even if such Contributor
-      has been advised of the possibility of such damages.
-
-   9. Accepting Warranty or Additional Liability. While redistributing
-      the Work or Derivative Works thereof, You may choose to offer,
-      and charge a fee for, acceptance of support, warranty, indemnity,
-      or other liability obligations and/or rights consistent with this
-      License. However, in accepting such obligations, You may act only
-      on Your own behalf and on Your sole responsibility, not on behalf
-      of any other Contributor, and only if You agree to indemnify,
-      defend, and hold each Contributor harmless for any liability
-      incurred by, or claims asserted against, such Contributor by reason
-      of your accepting any such warranty or additional liability.
-
-   END OF TERMS AND CONDITIONS
-
-   APPENDIX: How to apply the Apache License to your work.
-
-      To apply the Apache License to your work, attach the following
-      boilerplate notice, with the fields enclosed by brackets "[]"
-      replaced with your own identifying information. (Don't include
-      the brackets!)  The text should be enclosed in the appropriate
-      comment syntax for the file format. We also recommend that a
-      file or class name and description of purpose be included on the
-      same "printed page" as the copyright notice for easier
-      identification within third-party archives.
-
-   Copyright [yyyy] [name of copyright owner]
-
-   Licensed under the Apache License, Version 2.0 (the "License");
-   you may not use this file except in compliance with the License.
-   You may obtain a copy of the License at
-
-       http://www.apache.org/licenses/LICENSE-2.0
-
-   Unless required by applicable law or agreed to in writing, software
-   distributed under the License is distributed on an "AS IS" BASIS,
-   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-   See the License for the specific language governing permissions and
-   limitations under the License.

package/dist/__tests__/auth.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/__tests__/auth.test.js

@@ -1,107 +0,0 @@
-import { describe, it, expect } from 'vitest';
-import { ErrorCode } from '@modelcontextprotocol/sdk/types.js';
-import { jwtExpiryMs, checkJwt, handleApiError } from '../auth.js';
-function makeJwt(payload) {
-    const header = Buffer.from(JSON.stringify({ alg: 'HS256', typ: 'JWT' })).toString('base64url');
-    const body = Buffer.from(JSON.stringify(payload)).toString('base64url');
-    return `${header}.${body}.fakesig`;
-}
-const nowSec = () => Math.floor(Date.now() / 1000);
-describe('jwtExpiryMs', () => {
-    it('returns null for an empty string', () => {
-        expect(jwtExpiryMs('')).toBeNull();
-    });
-    it('returns null for a plain (non-JWT) string', () => {
-        expect(jwtExpiryMs('not-a-token')).toBeNull();
-    });
-    it('returns null when the JWT has only two parts', () => {
-        expect(jwtExpiryMs('header.payload')).toBeNull();
-    });
-    it('returns null when the JWT has four parts', () => {
-        expect(jwtExpiryMs('a.b.c.d')).toBeNull();
-    });
-    it('returns null when the payload base64 is invalid', () => {
-        expect(jwtExpiryMs('header.!!!.sig')).toBeNull();
-    });
-    it('returns null when the payload has no exp field', () => {
-        expect(jwtExpiryMs(makeJwt({ sub: 'user-123', iat: nowSec() }))).toBeNull();
-    });
-    it('returns null when exp is 0', () => {
-        expect(jwtExpiryMs(makeJwt({ exp: 0 }))).toBeNull();
-    });
-    it('converts exp (seconds) to milliseconds', () => {
-        const expSec = nowSec() + 3600;
-        expect(jwtExpiryMs(makeJwt({ exp: expSec }))).toBe(expSec * 1000);
-    });
-    it('returns a past timestamp for an expired token', () => {
-        expect(jwtExpiryMs(makeJwt({ exp: nowSec() - 300 }))).toBeLessThan(Date.now());
-    });
-    it('returns a future timestamp for a valid token', () => {
-        expect(jwtExpiryMs(makeJwt({ exp: nowSec() + 86400 }))).toBeGreaterThan(Date.now());
-    });
-    it('handles a token expiring in less than 60 minutes', () => {
-        const expSec = nowSec() + 30 * 60;
-        const result = jwtExpiryMs(makeJwt({ exp: expSec }));
-        const minsLeft = Math.floor((result - Date.now()) / 60_000);
-        expect(minsLeft).toBeGreaterThanOrEqual(29);
-        expect(minsLeft).toBeLessThanOrEqual(30);
-    });
-    it('ignores extra claims', () => {
-        const expSec = nowSec() + 3600;
-        expect(jwtExpiryMs(makeJwt({ sub: 'u', iat: nowSec(), exp: expSec, plan: 'free' }))).toBe(expSec * 1000);
-    });
-    it('handles padding-free base64url payloads', () => {
-        // base64url (no =) — Buffer.from handles this natively
-        const expSec = nowSec() + 7200;
-        expect(jwtExpiryMs(makeJwt({ exp: expSec, x: 'a' }))).toBe(expSec * 1000);
-    });
-});
-describe('checkJwt', () => {
-    it('throws InvalidRequest when jwt is empty', () => {
-        expect(() => checkJwt('')).toThrowError(expect.objectContaining({ code: ErrorCode.InvalidRequest, message: expect.stringContaining('CACHLY_JWT env var not set') }));
-    });
-    it('throws with setup URL when jwt is missing', () => {
-        expect(() => checkJwt('')).toThrowError(expect.objectContaining({ message: expect.stringContaining('cachly.dev/setup-ai') }));
-    });
-    it('throws InvalidRequest with expiry timestamp for an expired token', () => {
-        const expSec = nowSec() - 60;
-        const token = makeJwt({ exp: expSec });
-        expect(() => checkJwt(token)).toThrowError(expect.objectContaining({
-            code: ErrorCode.InvalidRequest,
-            message: expect.stringContaining('expired at'),
-        }));
-    });
-    it('does not throw for a valid non-expired token', () => {
-        expect(() => checkJwt(makeJwt({ exp: nowSec() + 3600 }))).not.toThrow();
-    });
-    it('does not throw for a token with no exp claim', () => {
-        expect(() => checkJwt(makeJwt({ sub: 'user' }))).not.toThrow();
-    });
-});
-describe('handleApiError', () => {
-    it('throws InvalidRequest for 401 with the detail message', () => {
-        expect(() => handleApiError(401, 'token expired')).toThrowError(expect.objectContaining({
-            code: ErrorCode.InvalidRequest,
-            message: expect.stringContaining('Authentication failed (401): token expired'),
-        }));
-    });
-    it('throws InvalidRequest for 403 with the detail message', () => {
-        expect(() => handleApiError(403, 'plan limit reached')).toThrowError(expect.objectContaining({
-            code: ErrorCode.InvalidRequest,
-            message: expect.stringContaining('Access denied (403): plan limit reached'),
-        }));
-    });
-    it('throws InternalError for other status codes', () => {
-        expect(() => handleApiError(500, 'server crash')).toThrowError(expect.objectContaining({
-            code: ErrorCode.InternalError,
-            message: expect.stringContaining('cachly API error 500: server crash'),
-        }));
-    });
-    it('includes the cachly.dev/setup-ai link for 401 errors', () => {
-        expect(() => handleApiError(401, 'Unauthorized')).toThrowError(expect.objectContaining({ message: expect.stringContaining('cachly.dev/setup-ai') }));
-    });
-    it('includes account access hint for 403 errors', () => {
-        expect(() => handleApiError(403, 'Forbidden')).toThrowError(expect.objectContaining({ message: expect.stringContaining('access to this resource') }));
-    });
-});
-//# sourceMappingURL=auth.test.js.map

package/dist/__tests__/auth.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.test.js","sourceRoot":"","sources":["../../src/__tests__/auth.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAY,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEnE,SAAS,OAAO,CAAC,OAAgC;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC/F,MAAM,IAAI,GAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1E,OAAO,GAAG,MAAM,IAAI,IAAI,UAAU,CAAC;AACrC,CAAC;AAED,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AAEnD,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;QAC/B,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,MAAM,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAE,CAAC;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,CAAC,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;QAC/B,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC3G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,uDAAuD;QACvD,MAAM,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;QAC/B,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CACrC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,4BAA4B,CAAC,EAAE,CAAC,CAC5H,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CACrC,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,EAAE,CAAC,CACrF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,MAAM,GAAG,MAAM,EAAE,GAAG,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAI,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CACxC,MAAM,CAAC,gBAAgB,CAAC;YACtB,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,YAAY,CAAC;SAC/C,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC,YAAY,CAC7D,MAAM,CAAC,gBAAgB,CAAC;YACtB,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,4CAA4C,CAAC;SAC/E,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC,CAAC,YAAY,CAClE,MAAM,CAAC,gBAAgB,CAAC;YACtB,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,yCAAyC,CAAC;SAC5E,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,YAAY,CAC5D,MAAM,CAAC,gBAAgB,CAAC;YACtB,IAAI,EAAE,SAAS,CAAC,aAAa;YAC7B,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,oCAAoC,CAAC;SACvE,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,YAAY,CAC5D,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,EAAE,CAAC,CACrF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,YAAY,CACzD,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,yBAAyB,CAAC,EAAE,CAAC,CACzF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/glama.json

@@ -1,29 +0,0 @@
-{
-  "$schema": "https://glama.ai/mcp/schemas/server.json",
-  "maintainers": [
-    "HeinrichNebula"
-  ],
-  "categories": [
-    "memory",
-    "developer-tools",
-    "productivity",
-    "knowledge-management",
-    "team-collaboration"
-  ],
-  "keywords": [
-    "persistent-memory",
-    "ai-memory",
-    "mcp-server",
-    "claude-code",
-    "cursor",
-    "copilot",
-    "windsurf",
-    "causal-trace",
-    "brain-predict",
-    "smart-recall",
-    "knowledge-graph",
-    "team-brain",
-    "gdpr",
-    "free-tier"
-  ]
-}

package/llms.txt

@@ -1,155 +0,0 @@
-# cachly AI Brain — MCP Server
-
-> Persistent memory layer for AI coding assistants. Gives Claude Code, Cursor, GitHub Copilot, Windsurf, Cline and Zed a permanent brain that learns from every session, bug fix, git commit, and CI run — automatically.
-
-## What cachly is
-
-cachly is an MCP (Model Context Protocol) server that adds long-term memory to AI coding assistants. Unlike conversation-window context, cachly memory persists forever across sessions, projects, and team members.
-
-It works by maintaining a Causal Knowledge Graph (CKG) — a structured store of lessons, bug fixes, architecture decisions, deployment commands, and failure patterns. On every session start, the AI receives a briefing with relevant lessons. On every fix or commit, new lessons are automatically stored.
-
-**Key differentiator**: causal_trace — given any error or problem description, traces the causal chain through the graph (root cause → intermediate causes → known fix). No other memory system does this.
-
-## Installation (zero config)
-
-```bash
-npx @cachly-dev/mcp-server@latest setup
-```
-
-This command: authenticates via OAuth device flow (one browser click), auto-detects all installed editors, writes the correct MCP config for each, creates CLAUDE.md with Brain rules, installs a git post-commit hook.
-
-Free tier: 25 MB, no credit card, German servers (GDPR).
-
-## Supported editors
-
-Claude Code, Cursor, Windsurf, VS Code, GitHub Copilot, Cline, Zed, Continue.dev
-
-## How memory works
-
-1. Session starts → AI receives: last session summary, open failures, relevant lessons, memory crystal (compressed history)
-2. During work → AI stores: WIP state, architecture decisions, file summaries
-3. Bug fixed → lesson stored: what failed, what worked, commands used, severity, file paths
-4. Editor closes → session summary saved, git log analyzed, ambient lessons extracted
-5. Next session → AI arrives pre-briefed
-
-## Tool catalog (89 tools)
-
-### Session & Memory
-- session_start: Single-call session briefing — last summary, open failures, recent lessons, brain health
-- session_end: Save session summary when finishing work
-- session_handoff: Detailed handoff for next chat window
-- session_ping: Lightweight checkpoint every ~5 tool calls
-- auto_learn_session: Auto-learn from session observations without explicit calls
-- sync_file_changes: Associate recent file changes with brain knowledge
-
-### Lesson Storage & Recall
-- learn_from_attempts: Store structured lesson from any fix, deploy, or discovery
-- recall_best_solution: Best known solution for a topic with success/failure history
-- smart_recall: BM25+ semantic search across all brain data (11 languages: EN DE FR ES IT PT ZH JA KO AR HE)
-- brain_search: Full-text search over all brain data
-- recall_at: Brain archaeology — see what a lesson looked like at a point in time
-
-### Causal Analysis & Prediction
-- causal_trace: Root Cause Analysis through memory — problem → causal chain → known fix
-- brain_predict: Predictive pre-fetch — predicts likely failures given current context, returns fixes
-- brain_predict_failures: Pre-deploy failure prediction with probability percentages
-- trace_dependency: Find all lessons that depend on a given prerequisite
-- knowledge_decay: Confidence scoring for every lesson
-
-### Context Management
-- remember_context: Save architecture findings, decisions, file summaries
-- recall_context: Retrieve saved context by key (supports glob)
-- list_remembered: List all cached context entries
-- forget_context: Delete cached context entries
-- compact_recover: Reconstruct full context from Memory Crystal after context limit
-
-### Memory Maintenance
-- memory_consolidate: Weekly garbage collector — deduplicates, detects contradictions, expires stale lessons
-- memory_crystalize: Compress sessions into dense Memory Crystal snapshot
-- crystal_view: Inspect current Memory Crystal
-- brain_diff: See exactly what changed in the brain since a point in time
-- brain_doctor: Health check — lesson count, IQ boost %, open failures, recommendations
-- brain_from_git: Bootstrap brain lessons from existing git history
-
-### Team Brain
-- team_learn: Store lesson in shared team brain
-- team_recall: Recall from shared team brain (shows who learned what)
-- team_synthesize: Merge multiple contributors' lessons on same topic into canonical version
-- madc_deliberate: Multi-Agent Deliberation Chamber — 6 specialist agents vote on conflicting lessons
-
-### Knowledge Commons (Global)
-- syndicate: Contribute verified lesson to global Knowledge Commons
-- syndicate_search: Search global Knowledge Commons
-- syndicate_trending: Trending lessons globally
-- fedbrain_contribute: Contribute with cryptographic knowledge certificate
-- fedbrain_search: Context-weighted search of global commons
-- fedbrain_confirm: Confirm a syndicated lesson worked for you
-- publish_lesson: Publish lesson to Cachly Public Brain
-- import_public_brain: Import community lessons for a framework
-- global_learn: Store lesson that applies across all your projects
-- global_recall: Retrieve cross-project lessons
-
-### Continuous Learning Stream
-- cls_ingest: Ingest learning signals from git commits, CI runs, IDE diagnostics without session_end
-- cls_install_hooks: Generate git post-commit hook and GitHub Actions step for automatic learning
-
-### Autopilot — self-managing AI instructions
-- autopilot: Generate a CLAUDE.md / copilot-instructions.md / .github/copilot-instructions.md from actual Brain content. Supports Claude, Cursor, Copilot, Windsurf, Gemini. style="minimal" for just the hooks, style="full" for complete ruleset with examples. Re-run as the Brain learns more to continuously upgrade the instructions file.
-
-### Roadmap & Planning
-- roadmap_add: Add item to persistent project roadmap stored in Brain
-- roadmap_update: Update roadmap item status, priority, details
-- roadmap_list: List roadmap items filtered by status, priority, tag, milestone
-- roadmap_next: Get the single most important next actionable item
-
-### Cache & Infrastructure
-- list_instances / create_instance / delete_instance: Manage Brain instances
-- cache_get / cache_set / cache_delete: Standard Redis/Valkey cache operations
-- cache_mget / cache_mset: Bulk pipeline (single round-trip)
-- cache_exists / cache_ttl / cache_keys / cache_stats: Cache introspection
-- semantic_search: Find cached entries by semantic similarity
-- cache_warmup: Pre-warm semantic cache with prompt/value pairs
-- cache_lock_acquire / cache_lock_release: Distributed locking
-- cache_stream_set / cache_stream_get: LLM token stream caching
-- index_project: Index source files for semantic search
-- detect_namespace: Classify prompts into semantic namespaces
-- get_connection_string: Get Redis/Valkey connection string
-- get_api_status: Full diagnostic — call when anything is broken
-
-### Organization & Teams
-- list_orgs / create_org / invite_member / get_org_plan: Multi-tenant organization management
-- ckg_inspect: Inspect Causal Knowledge Graph for a concept
-- autopilot: Generate CLAUDE.md / copilot-instructions.md for self-managing AI
-- setup_ai_memory: One-shot setup of 3-layer AI Memory system
-- brain_federate: Private org knowledge transfer
-
-## Comparison to alternatives
-
-| Feature | cachly | mem0 | Plain CLAUDE.md |
-|---------|--------|------|-----------------|
-| Persistent across sessions | ✅ | ✅ | Manual |
-| Causal root cause analysis | ✅ | ❌ | ❌ |
-| Automatic (no explicit calls) | ✅ | ❌ | ❌ |
-| Team knowledge sharing | ✅ | Paid | ❌ |
-| Failure prediction | ✅ | ❌ | ❌ |
-| Git-ambient learning | ✅ | ❌ | ❌ |
-| 11-language search | ✅ | ❌ | ❌ |
-| Free tier forever | ✅ | Limited | ✅ |
-| GDPR / EU servers | ✅ | ❌ | ✅ |
-
-## Pricing
-
-- Free: 25 MB, 1 instance, €0/month forever
-- Dev: 200 MB, €19/month
-- Pro: 900 MB, team features, €49/month
-- Speed: 900 MB + Dragonfly engine, €79/month
-- Business: 7 GB, €199/month
-
-All plans: German servers, GDPR-compliant, 99.9% SLA.
-
-## Links
-
-- npm: https://www.npmjs.com/package/@cachly-dev/mcp-server
-- GitHub: https://github.com/cachly-dev/cachly-mcp
-- Docs: https://cachly.dev/docs/ai-memory
-- Dashboard: https://cachly.dev

package/src/__tests__/auth.test.ts

@@ -1,147 +0,0 @@
-import { describe, it, expect } from 'vitest';
-import { ErrorCode, McpError } from '@modelcontextprotocol/sdk/types.js';
-import { jwtExpiryMs, checkJwt, handleApiError } from '../auth.js';
-
-function makeJwt(payload: Record<string, unknown>): string {
-  const header = Buffer.from(JSON.stringify({ alg: 'HS256', typ: 'JWT' })).toString('base64url');
-  const body   = Buffer.from(JSON.stringify(payload)).toString('base64url');
-  return `${header}.${body}.fakesig`;
-}
-
-const nowSec = () => Math.floor(Date.now() / 1000);
-
-describe('jwtExpiryMs', () => {
-  it('returns null for an empty string', () => {
-    expect(jwtExpiryMs('')).toBeNull();
-  });
-
-  it('returns null for a plain (non-JWT) string', () => {
-    expect(jwtExpiryMs('not-a-token')).toBeNull();
-  });
-
-  it('returns null when the JWT has only two parts', () => {
-    expect(jwtExpiryMs('header.payload')).toBeNull();
-  });
-
-  it('returns null when the JWT has four parts', () => {
-    expect(jwtExpiryMs('a.b.c.d')).toBeNull();
-  });
-
-  it('returns null when the payload base64 is invalid', () => {
-    expect(jwtExpiryMs('header.!!!.sig')).toBeNull();
-  });
-
-  it('returns null when the payload has no exp field', () => {
-    expect(jwtExpiryMs(makeJwt({ sub: 'user-123', iat: nowSec() }))).toBeNull();
-  });
-
-  it('returns null when exp is 0', () => {
-    expect(jwtExpiryMs(makeJwt({ exp: 0 }))).toBeNull();
-  });
-
-  it('converts exp (seconds) to milliseconds', () => {
-    const expSec = nowSec() + 3600;
-    expect(jwtExpiryMs(makeJwt({ exp: expSec }))).toBe(expSec * 1000);
-  });
-
-  it('returns a past timestamp for an expired token', () => {
-    expect(jwtExpiryMs(makeJwt({ exp: nowSec() - 300 }))).toBeLessThan(Date.now());
-  });
-
-  it('returns a future timestamp for a valid token', () => {
-    expect(jwtExpiryMs(makeJwt({ exp: nowSec() + 86400 }))).toBeGreaterThan(Date.now());
-  });
-
-  it('handles a token expiring in less than 60 minutes', () => {
-    const expSec = nowSec() + 30 * 60;
-    const result = jwtExpiryMs(makeJwt({ exp: expSec }))!;
-    const minsLeft = Math.floor((result - Date.now()) / 60_000);
-    expect(minsLeft).toBeGreaterThanOrEqual(29);
-    expect(minsLeft).toBeLessThanOrEqual(30);
-  });
-
-  it('ignores extra claims', () => {
-    const expSec = nowSec() + 3600;
-    expect(jwtExpiryMs(makeJwt({ sub: 'u', iat: nowSec(), exp: expSec, plan: 'free' }))).toBe(expSec * 1000);
-  });
-
-  it('handles padding-free base64url payloads', () => {
-    // base64url (no =) — Buffer.from handles this natively
-    const expSec = nowSec() + 7200;
-    expect(jwtExpiryMs(makeJwt({ exp: expSec, x: 'a' }))).toBe(expSec * 1000);
-  });
-});
-
-describe('checkJwt', () => {
-  it('throws InvalidRequest when jwt is empty', () => {
-    expect(() => checkJwt('')).toThrowError(
-      expect.objectContaining({ code: ErrorCode.InvalidRequest, message: expect.stringContaining('CACHLY_JWT env var not set') }),
-    );
-  });
-
-  it('throws with setup URL when jwt is missing', () => {
-    expect(() => checkJwt('')).toThrowError(
-      expect.objectContaining({ message: expect.stringContaining('cachly.dev/setup-ai') }),
-    );
-  });
-
-  it('throws InvalidRequest with expiry timestamp for an expired token', () => {
-    const expSec = nowSec() - 60;
-    const token  = makeJwt({ exp: expSec });
-    expect(() => checkJwt(token)).toThrowError(
-      expect.objectContaining({
-        code: ErrorCode.InvalidRequest,
-        message: expect.stringContaining('expired at'),
-      }),
-    );
-  });
-
-  it('does not throw for a valid non-expired token', () => {
-    expect(() => checkJwt(makeJwt({ exp: nowSec() + 3600 }))).not.toThrow();
-  });
-
-  it('does not throw for a token with no exp claim', () => {
-    expect(() => checkJwt(makeJwt({ sub: 'user' }))).not.toThrow();
-  });
-});
-
-describe('handleApiError', () => {
-  it('throws InvalidRequest for 401 with the detail message', () => {
-    expect(() => handleApiError(401, 'token expired')).toThrowError(
-      expect.objectContaining({
-        code: ErrorCode.InvalidRequest,
-        message: expect.stringContaining('Authentication failed (401): token expired'),
-      }),
-    );
-  });
-
-  it('throws InvalidRequest for 403 with the detail message', () => {
-    expect(() => handleApiError(403, 'plan limit reached')).toThrowError(
-      expect.objectContaining({
-        code: ErrorCode.InvalidRequest,
-        message: expect.stringContaining('Access denied (403): plan limit reached'),
-      }),
-    );
-  });
-
-  it('throws InternalError for other status codes', () => {
-    expect(() => handleApiError(500, 'server crash')).toThrowError(
-      expect.objectContaining({
-        code: ErrorCode.InternalError,
-        message: expect.stringContaining('cachly API error 500: server crash'),
-      }),
-    );
-  });
-
-  it('includes the cachly.dev/setup-ai link for 401 errors', () => {
-    expect(() => handleApiError(401, 'Unauthorized')).toThrowError(
-      expect.objectContaining({ message: expect.stringContaining('cachly.dev/setup-ai') }),
-    );
-  });
-
-  it('includes account access hint for 403 errors', () => {
-    expect(() => handleApiError(403, 'Forbidden')).toThrowError(
-      expect.objectContaining({ message: expect.stringContaining('access to this resource') }),
-    );
-  });
-});