@chnxthr/knowledge-mcp 0.0.0-stage → 0.3.1

package/dist/store/supabase.js

@@ -0,0 +1,269 @@
+import { getConfig } from '../core/config.js';
+import { getSupabase } from './supabase_client.js';
+import { generateKey, hashKey, toRole } from './keys.js';
+const SLACK_COLS = 'id,channel_name,channel_id,purpose,category,enabled,sort_order';
+/** PostgREST/Postgres "column does not exist" — an app_users table created before the scope columns. */
+function isMissingColumnError(e) {
+    const code = e?.code;
+    return code === '42703' || code === 'PGRST204';
+}
+function fail(what, error) {
+    throw new Error(`[supabase] ${what}: ${error.message}`);
+}
+export class SupabaseStore {
+    kind = 'supabase';
+    location;
+    sb;
+    schema;
+    constructor() {
+        this.sb = getSupabase();
+        this.schema = getConfig().data.schema;
+        let host = 'supabase';
+        try {
+            host = new URL(process.env.SUPABASE_URL ?? '').host;
+        }
+        catch {
+            /* keep the generic name */
+        }
+        this.location = `${host} (schema ${this.schema})`;
+    }
+    t(table) {
+        return this.sb.schema(this.schema).from(table);
+    }
+    // ── API keys ──
+    async validateKey(rawKey) {
+        const { data, error } = await this.sb.rpc('validate_mcp_key', { p_key: rawKey });
+        if (error)
+            return { ok: false, reason: `validate_mcp_key RPC failed: ${error.message}` };
+        const row = Array.isArray(data) ? data[0] : data;
+        if (!row)
+            return { ok: false, reason: 'validate_mcp_key returned no row' };
+        if (!row.ok)
+            return { ok: false, reason: row.reason ?? 'auth failed' };
+        return {
+            ok: true,
+            keyId: String(row.key_id),
+            orgId: row.org_id ?? getConfig().orgId,
+            role: toRole(row.role),
+            email: row.email ?? null,
+        };
+    }
+    async createKey(input) {
+        const key = generateKey();
+        const { data, error } = await this.sb
+            .from('mcp_keys')
+            .insert({
+            key_hash: hashKey(key),
+            org_id: input.orgId,
+            role: input.role ?? 'member',
+            email: input.email?.toLowerCase() ?? null,
+            label: input.label ?? null,
+            expires_at: input.expiresAt ?? null,
+        })
+            .select('id')
+            .single();
+        if (error)
+            fail('create key (rerun sql/supabase.sql if the label column is missing)', error);
+        return { id: String(data.id), key };
+    }
+    async listKeys() {
+        const { data, error } = await this.sb
+            .from('mcp_keys')
+            .select('id, org_id, role, email, label, active, expires_at, created_at')
+            .order('created_at');
+        if (error)
+            fail('list keys', error);
+        return (data ?? []).map((r) => ({
+            id: String(r.id),
+            orgId: String(r.org_id),
+            role: toRole(r.role),
+            email: r.email ?? null,
+            label: r.label ?? null,
+            active: !!r.active,
+            expiresAt: r.expires_at ?? null,
+            createdAt: String(r.created_at),
+        }));
+    }
+    async revokeKey(id) {
+        const { data, error } = await this.sb.from('mcp_keys').update({ active: false }).eq('id', id).eq('active', true).select('id');
+        if (error)
+            fail('revoke key', error);
+        return (data ?? []).length > 0;
+    }
+    // ── Users ──
+    async getUser(email) {
+        const e = email.toLowerCase();
+        const { data, error } = await this.t('app_users')
+            .select('email, role, name, allowed_slack_channels, allowed_drive_folders, allowed_tools')
+            .eq('email', e)
+            .maybeSingle();
+        if (error) {
+            if (!isMissingColumnError(error))
+                fail('read app_users', error);
+            // Older table without the scope columns → role only, scopes unknown (= no limit).
+            const r2 = await this.t('app_users').select('email, role').eq('email', e).maybeSingle();
+            if (r2.error)
+                fail('read app_users', r2.error);
+            return r2.data ? { email: e, role: String(r2.data.role), scopesKnown: false } : null;
+        }
+        if (!data)
+            return null;
+        return {
+            email: String(data.email),
+            role: String(data.role),
+            name: data.name ?? null,
+            allowedSlackChannels: data.allowed_slack_channels ?? null,
+            allowedDriveFolders: data.allowed_drive_folders ?? null,
+            allowedTools: data.allowed_tools ?? null,
+            scopesKnown: true,
+        };
+    }
+    async upsertUser(u) {
+        const { error } = await this.t('app_users').upsert({
+            email: u.email.toLowerCase(),
+            role: u.role,
+            name: u.name ?? null,
+            allowed_slack_channels: u.allowedSlackChannels?.length ? u.allowedSlackChannels : null,
+            allowed_drive_folders: u.allowedDriveFolders?.length ? u.allowedDriveFolders : null,
+            allowed_tools: u.allowedTools?.length ? u.allowedTools : null,
+        }, { onConflict: 'email' });
+        if (error)
+            fail('save user', error);
+    }
+    async listUsers() {
+        const { data, error } = await this.t('app_users')
+            .select('email, role, name, allowed_slack_channels, allowed_drive_folders, allowed_tools')
+            .order('email');
+        if (error)
+            fail('list users', error);
+        return (data ?? []).map((r) => ({
+            email: String(r.email),
+            role: String(r.role),
+            name: r.name ?? null,
+            allowedSlackChannels: r.allowed_slack_channels ?? null,
+            allowedDriveFolders: r.allowed_drive_folders ?? null,
+            allowedTools: r.allowed_tools ?? null,
+            scopesKnown: true,
+        }));
+    }
+    async removeUser(email) {
+        const { data, error } = await this.t('app_users').delete().eq('email', email.toLowerCase()).select('email');
+        if (error)
+            fail('remove user', error);
+        return (data ?? []).length > 0;
+    }
+    // ── Audit log ──
+    async logToolCall(row) {
+        try {
+            const { error } = await this.t('mcp_tool_calls').insert({
+                tool: row.tool,
+                email: row.email,
+                role: row.role,
+                ok: row.ok,
+                error: row.error ? row.error.slice(0, 2000) : null,
+                duration_ms: row.durationMs,
+                source: 'knowledge-mcp',
+            });
+            if (error)
+                console.error('[tool-log] insert failed:', error.message);
+        }
+        catch (e) {
+            console.error('[tool-log] insert failed:', e instanceof Error ? e.message : e);
+        }
+    }
+    // ── OAuth ──
+    async getOAuthClient(clientId) {
+        const { data, error } = await this.t('mcp_oauth_clients').select('client_data').eq('client_id', clientId).maybeSingle();
+        if (error)
+            fail('read oauth client', error);
+        return data ? data.client_data : null;
+    }
+    async saveOAuthClient(client) {
+        const { error } = await this.t('mcp_oauth_clients').upsert({
+            client_id: client.client_id,
+            client_data: client,
+            client_name: typeof client.client_name === 'string' ? client.client_name : null,
+            last_used_at: new Date().toISOString(),
+        }, { onConflict: 'client_id' });
+        if (error)
+            fail('save oauth client', error);
+    }
+    async touchOAuthClient(clientId) {
+        const { error } = await this.t('mcp_oauth_clients').update({ last_used_at: new Date().toISOString() }).eq('client_id', clientId);
+        if (error)
+            fail('touch oauth client', error);
+    }
+    async recordRefreshToken(jti, email, clientId, expiresAt) {
+        const { error } = await this.t('mcp_refresh_tokens').insert({ jti, email: email.toLowerCase(), client_id: clientId, expires_at: expiresAt });
+        if (error)
+            fail('record refresh token', error);
+    }
+    async consumeRefreshToken(jti, rotatedTo) {
+        const t = new Date().toISOString();
+        // Update only an active row — of two concurrent refreshes, one wins.
+        const { data, error } = await this.t('mcp_refresh_tokens')
+            .update({ revoked_at: t, rotated_to: rotatedTo })
+            .eq('jti', jti)
+            .is('revoked_at', null)
+            .gt('expires_at', t)
+            .select('jti');
+        if (error)
+            fail('consume refresh token', error);
+        if (data && data.length > 0)
+            return 'ok';
+        const r2 = await this.t('mcp_refresh_tokens').select('jti').eq('jti', jti).maybeSingle();
+        if (r2.error)
+            fail('consume refresh token', r2.error);
+        return r2.data ? 'revoked' : 'unknown';
+    }
+    async revokeAllRefreshForEmail(email) {
+        const { error } = await this.t('mcp_refresh_tokens')
+            .update({ revoked_at: new Date().toISOString() })
+            .eq('email', email.toLowerCase())
+            .is('revoked_at', null);
+        if (error)
+            fail('revoke refresh tokens', error);
+    }
+    async purgeExpiredRefreshTokens() {
+        const { error } = await this.t('mcp_refresh_tokens').delete().lt('expires_at', new Date().toISOString());
+        if (error)
+            fail('purge refresh tokens', error);
+    }
+    // ── Plugin state ──
+    async getState(namespace, key) {
+        const { data, error } = await this.t('mcp_plugin_state').select('value').eq('namespace', namespace).eq('key', key).maybeSingle();
+        if (error)
+            fail('read plugin state (rerun sql/supabase.sql if mcp_plugin_state is missing)', error);
+        return data ? data.value : null;
+    }
+    async setState(namespace, key, value) {
+        const { error } = await this.t('mcp_plugin_state').upsert({ namespace, key, value: value ?? null, updated_at: new Date().toISOString() }, { onConflict: 'namespace,key' });
+        if (error)
+            fail('save plugin state', error);
+    }
+    async deleteState(namespace, key) {
+        const { error } = await this.t('mcp_plugin_state').delete().eq('namespace', namespace).eq('key', key);
+        if (error)
+            fail('delete plugin state', error);
+    }
+    // ── Slack channel map ──
+    async listSlackChannels() {
+        const { data, error } = await this.t('slack_channels').select(SLACK_COLS).order('sort_order');
+        if (error)
+            fail('read slack_channels', error);
+        return (data ?? []);
+    }
+    async insertSlackChannels(rows) {
+        if (!rows.length)
+            return;
+        const { error } = await this.t('slack_channels').insert(rows);
+        if (error)
+            fail('insert slack_channels', error);
+    }
+    async updateSlackChannel(id, patch) {
+        const { error } = await this.t('slack_channels').update(patch).eq('id', id);
+        if (error)
+            fail('update slack_channels', error);
+    }
+}
+//# sourceMappingURL=supabase.js.map

package/dist/store/supabase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supabase.js","sourceRoot":"","sources":["../../src/store/supabase.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAKzD,MAAM,UAAU,GAAG,gEAAgE,CAAC;AAEpF,wGAAwG;AACxG,SAAS,oBAAoB,CAAC,CAAU;IACtC,MAAM,IAAI,GAAI,CAA+B,EAAE,IAAI,CAAC;IACpD,OAAO,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,UAAU,CAAC;AACjD,CAAC;AAED,SAAS,IAAI,CAAC,IAAY,EAAE,KAA0B;IACpD,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,OAAO,aAAa;IACf,IAAI,GAAG,UAAmB,CAAC;IAC3B,QAAQ,CAAS;IACT,EAAE,CAAiB;IACnB,MAAM,CAAS;IAEhC;QACE,IAAI,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC;QACxB,IAAI,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;QACtC,IAAI,IAAI,GAAG,UAAU,CAAC;QACtB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,GAAG,IAAI,YAAY,IAAI,CAAC,MAAM,GAAG,CAAC;IACpD,CAAC;IAEO,CAAC,CAAC,KAAa;QACrB,OAAO,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IAED,iBAAiB;IACjB,KAAK,CAAC,WAAW,CAAC,MAAc;QAC9B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACjF,IAAI,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACzF,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACjD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;QAC3E,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC;QACvE,OAAO;YACL,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YACzB,KAAK,EAAE,GAAG,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,KAAK;YACtC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YACtB,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,IAAI;SACzB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAa;QAC3B,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAClC,IAAI,CAAC,UAAU,CAAC;aAChB,MAAM,CAAC;YACN,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC;YACtB,MAAM,EAAE,KAAK,CAAC,KAAK;YACnB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,QAAQ;YAC5B,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,IAAI;YACzC,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;YAC1B,UAAU,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;SACpC,CAAC;aACD,MAAM,CAAC,IAAI,CAAC;aACZ,MAAM,EAAE,CAAC;QACZ,IAAI,KAAK;YAAE,IAAI,CAAC,oEAAoE,EAAE,KAAK,CAAC,CAAC;QAC7F,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAClC,IAAI,CAAC,UAAU,CAAC;aAChB,MAAM,CAAC,gEAAgE,CAAC;aACxE,KAAK,CAAC,YAAY,CAAC,CAAC;QACvB,IAAI,KAAK;YAAE,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACpC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9B,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAChB,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YACvB,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;YACpB,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI;YACtB,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI;YACtB,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM;YAClB,SAAS,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;YAC/B,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;SAChC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,EAAU;QACxB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9H,IAAI,KAAK;YAAE,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,cAAc;IACd,KAAK,CAAC,OAAO,CAAC,KAAa;QACzB,MAAM,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QAC9B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;aAC9C,MAAM,CAAC,iFAAiF,CAAC;aACzF,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;aACd,WAAW,EAAE,CAAC;QACjB,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC;gBAAE,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;YAChE,kFAAkF;YAClF,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACxF,IAAI,EAAE,CAAC,KAAK;gBAAE,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;YAC/C,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACvF,CAAC;QACD,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;YACvB,oBAAoB,EAAG,IAAI,CAAC,sBAA0C,IAAI,IAAI;YAC9E,mBAAmB,EAAG,IAAI,CAAC,qBAAyC,IAAI,IAAI;YAC5E,YAAY,EAAG,IAAI,CAAC,aAAiC,IAAI,IAAI;YAC7D,WAAW,EAAE,IAAI;SAClB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,CAAa;QAC5B,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,CAChD;YACE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE;YAC5B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;YACpB,sBAAsB,EAAE,CAAC,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI;YACtF,qBAAqB,EAAE,CAAC,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI;YACnF,aAAa,EAAE,CAAC,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI;SAC9D,EACD,EAAE,UAAU,EAAE,OAAO,EAAE,CACxB,CAAC;QACF,IAAI,KAAK;YAAE,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,SAAS;QACb,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;aAC9C,MAAM,CAAC,iFAAiF,CAAC;aACzF,KAAK,CAAC,OAAO,CAAC,CAAC;QAClB,IAAI,KAAK;YAAE,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9B,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;YACtB,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;YACpB,oBAAoB,EAAE,CAAC,CAAC,sBAAsB,IAAI,IAAI;YACtD,mBAAmB,EAAE,CAAC,CAAC,qBAAqB,IAAI,IAAI;YACpD,YAAY,EAAE,CAAC,CAAC,aAAa,IAAI,IAAI;YACrC,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAa;QAC5B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5G,IAAI,KAAK;YAAE,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QACtC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,kBAAkB;IAClB,KAAK,CAAC,WAAW,CAAC,GAAmB;QACnC,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC;gBACtD,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;gBAClD,WAAW,EAAE,GAAG,CAAC,UAAU;gBAC3B,MAAM,EAAE,eAAe;aACxB,CAAC,CAAC;YACH,IAAI,KAAK;gBAAE,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACvE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IAED,cAAc;IACd,KAAK,CAAC,cAAc,CAAC,QAAgB;QACnC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QACxH,IAAI,KAAK;YAAE,IAAI,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,WAA0C,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAkC;QACtD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,MAAM,CACxD;YACE,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,WAAW,EAAE,MAAM;YACnB,WAAW,EAAE,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;YAC/E,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACvC,EACD,EAAE,UAAU,EAAE,WAAW,EAAE,CAC5B,CAAC;QACF,IAAI,KAAK;YAAE,IAAI,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QACrC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACjI,IAAI,KAAK;YAAE,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,GAAW,EAAE,KAAa,EAAE,QAAgB,EAAE,SAAiB;QACtF,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7I,IAAI,KAAK;YAAE,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,GAAW,EAAE,SAAiB;QACtD,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACnC,qEAAqE;QACrE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC;aACvD,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;aAChD,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC;aACd,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC;aACtB,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;aACnB,MAAM,CAAC,KAAK,CAAC,CAAC;QACjB,IAAI,KAAK;YAAE,IAAI,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;QAChD,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QACzF,IAAI,EAAE,CAAC,KAAK;YAAE,IAAI,CAAC,uBAAuB,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;QACtD,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,KAAa;QAC1C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC;aACjD,MAAM,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;aAChD,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;aAChC,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAC1B,IAAI,KAAK;YAAE,IAAI,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,yBAAyB;QAC7B,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACzG,IAAI,KAAK;YAAE,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC;IAED,qBAAqB;IACrB,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,GAAW;QAC3C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QACjI,IAAI,KAAK;YAAE,IAAI,CAAC,2EAA2E,EAAE,KAAK,CAAC,CAAC;QACpG,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,GAAW,EAAE,KAAc;QAC3D,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,MAAM,CACvD,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAC9E,EAAE,UAAU,EAAE,eAAe,EAAE,CAChC,CAAC;QACF,IAAI,KAAK;YAAE,IAAI,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,GAAW;QAC9C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACtG,IAAI,KAAK;YAAE,IAAI,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;IAChD,CAAC;IAED,0BAA0B;IAC1B,KAAK,CAAC,iBAAiB;QACrB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC9F,IAAI,KAAK;YAAE,IAAI,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;QAC9C,OAAO,CAAC,IAAI,IAAI,EAAE,CAAsB,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,IAAwC;QAChE,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QACzB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9D,IAAI,KAAK;YAAE,IAAI,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,EAAU,EAAE,KAAwB;QAC3D,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5E,IAAI,KAAK;YAAE,IAAI,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;IAClD,CAAC;CACF"}

package/dist/store/supabase_client.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Supabase service-role client (singleton).
+ *
+ * Supabase 저장소(store/supabase.ts)만 쓴다. 도구는 저장소 인터페이스(getStore)를 거친다.
+ * .env 의 SUPABASE_URL + SUPABASE_SERVICE_ROLE_KEY 로 부트스트랩.
+ *
+ * 첫 호출 시 client 생성, 이후 재사용. 환경변수 누락 시 throw.
+ */
+import { type SupabaseClient } from '@supabase/supabase-js';
+export declare function getSupabase(): SupabaseClient;

package/dist/store/supabase_client.js

@@ -0,0 +1,31 @@
+/**
+ * Supabase service-role client (singleton).
+ *
+ * Supabase 저장소(store/supabase.ts)만 쓴다. 도구는 저장소 인터페이스(getStore)를 거친다.
+ * .env 의 SUPABASE_URL + SUPABASE_SERVICE_ROLE_KEY 로 부트스트랩.
+ *
+ * 첫 호출 시 client 생성, 이후 재사용. 환경변수 누락 시 throw.
+ */
+import { createClient } from '@supabase/supabase-js';
+import WebSocket from 'ws';
+let _client = null;
+export function getSupabase() {
+    if (_client)
+        return _client;
+    const url = process.env.SUPABASE_URL;
+    const key = process.env.SUPABASE_SERVICE_ROLE_KEY;
+    if (!url || !key) {
+        throw new Error('[supabase] SUPABASE_URL / SUPABASE_SERVICE_ROLE_KEY missing in env. ' +
+            'MCP_STORE=supabase 는 두 키가 모두 있어야 동작.');
+    }
+    // Node 20 (Railway) 은 native WebSocket 이 없어 supabase realtime init 이 throw 한다.
+    // realtime 을 쓰진 않지만 createClient 가 RealtimeClient 를 자동 생성하므로, ws 를 transport 로 주입해 우회.
+    // (Node 버전 무관 — Railway 가 engines>=22 를 무시하고 Node 20 으로 실행하는 문제를 코드 레벨에서 해결)
+    _client = createClient(url, key, {
+        auth: { persistSession: false, autoRefreshToken: false },
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        realtime: { transport: WebSocket },
+    });
+    return _client;
+}
+//# sourceMappingURL=supabase_client.js.map

package/dist/store/supabase_client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supabase_client.js","sourceRoot":"","sources":["../../src/store/supabase_client.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,YAAY,EAAuB,MAAM,uBAAuB,CAAC;AAC1E,OAAO,SAAS,MAAM,IAAI,CAAC;AAE3B,IAAI,OAAO,GAA0B,IAAI,CAAC;AAE1C,MAAM,UAAU,WAAW;IACzB,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAE5B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IACrC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IAElD,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,sEAAsE;YACpE,sCAAsC,CACzC,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,uFAAuF;IACvF,6EAA6E;IAC7E,OAAO,GAAG,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE;QAC/B,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE;QACxD,8DAA8D;QAC9D,QAAQ,EAAE,EAAE,SAAS,EAAE,SAAgB,EAAE;KAC1C,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/store/tool_log.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Tool-call audit log — who called which tool, when, and whether it failed.
+ * Best effort: never blocks or fails the tool response. Arguments are not stored (they may hold secrets).
+ */
+import type { AuthContext } from '../core/auth.js';
+export declare function logToolCall(params: {
+    tool: string;
+    auth: AuthContext | undefined;
+    ok: boolean;
+    error: string | null;
+    durationMs: number;
+}): void;

package/dist/store/tool_log.js

@@ -0,0 +1,8 @@
+import { getStore } from './index.js';
+export function logToolCall(params) {
+    const { tool, auth, ok, error, durationMs } = params;
+    getStore()
+        .then((s) => s.logToolCall({ tool, email: auth?.email ?? null, role: auth?.role ?? null, ok, error, durationMs }))
+        .catch((e) => console.error('[tool-log] store unavailable:', e instanceof Error ? e.message : e));
+}
+//# sourceMappingURL=tool_log.js.map

package/dist/store/tool_log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool_log.js","sourceRoot":"","sources":["../../src/store/tool_log.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC,MAAM,UAAU,WAAW,CAAC,MAM3B;IACC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IACrD,QAAQ,EAAE;SACP,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;SACjH,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/G,CAAC"}

package/dist/store/types.d.ts

@@ -0,0 +1,96 @@
+/**
+ * Server state behind one interface, so the same server runs on a local SQLite file (default, zero setup)
+ * or on Supabase (shared Postgres for a team deployment).
+ */
+import type { OAuthClientInformationFull } from '@modelcontextprotocol/sdk/shared/auth.js';
+import type { Role } from '../core/auth.js';
+export type KeyCheck = {
+    ok: true;
+    keyId: string;
+    orgId: string;
+    role: Role;
+    email: string | null;
+} | {
+    ok: false;
+    reason: string;
+};
+export interface KeyInfo {
+    id: string;
+    orgId: string;
+    role: Role;
+    email: string | null;
+    label: string | null;
+    active: boolean;
+    expiresAt: string | null;
+    createdAt: string;
+}
+export interface NewKey {
+    email?: string | null;
+    role?: Role;
+    orgId: string;
+    label?: string | null;
+    expiresAt?: string | null;
+}
+/** app_users row. Array fields: null or empty = no limit on that dimension. */
+export interface UserRecord {
+    email: string;
+    /** 'admin' = every tool. Anything else = member, limited by the allowed_* fields. */
+    role: string;
+    name?: string | null;
+    allowedSlackChannels?: string[] | null;
+    allowedDriveFolders?: string[] | null;
+    /** Plugin ids (permission groups). */
+    allowedTools?: string[] | null;
+    /** False when the Supabase table predates the scope columns (role only). */
+    scopesKnown?: boolean;
+}
+export interface ToolCallRecord {
+    tool: string;
+    email: string | null;
+    role: string | null;
+    ok: boolean;
+    error: string | null;
+    durationMs: number;
+}
+export interface SlackChannelRow {
+    id: string;
+    channel_name: string;
+    channel_id: string | null;
+    purpose: string;
+    category: string | null;
+    enabled: boolean;
+    sort_order: number;
+}
+export type SlackChannelPatch = Partial<Pick<SlackChannelRow, 'channel_name' | 'channel_id' | 'purpose' | 'category' | 'enabled' | 'sort_order'>>;
+export type RefreshConsume = 'ok' | 'revoked' | 'unknown';
+export interface Store {
+    readonly kind: 'sqlite' | 'supabase';
+    /** Human-readable location for logs (file path or project host). Never contains secrets. */
+    readonly location: string;
+    validateKey(rawKey: string): Promise<KeyCheck>;
+    createKey(input: NewKey): Promise<{
+        id: string;
+        key: string;
+    }>;
+    listKeys(): Promise<KeyInfo[]>;
+    revokeKey(id: string): Promise<boolean>;
+    getUser(email: string): Promise<UserRecord | null>;
+    upsertUser(user: UserRecord): Promise<void>;
+    listUsers(): Promise<UserRecord[]>;
+    removeUser(email: string): Promise<boolean>;
+    logToolCall(row: ToolCallRecord): Promise<void>;
+    getOAuthClient(clientId: string): Promise<OAuthClientInformationFull | null>;
+    saveOAuthClient(client: OAuthClientInformationFull): Promise<void>;
+    touchOAuthClient(clientId: string): Promise<void>;
+    recordRefreshToken(jti: string, email: string, clientId: string, expiresAt: string): Promise<void>;
+    /** Atomically revoke an active refresh token. 'revoked' = it existed but was already revoked (reuse). */
+    consumeRefreshToken(jti: string, rotatedTo: string): Promise<RefreshConsume>;
+    revokeAllRefreshForEmail(email: string): Promise<void>;
+    purgeExpiredRefreshTokens(): Promise<void>;
+    getState(namespace: string, key: string): Promise<unknown | null>;
+    setState(namespace: string, key: string, value: unknown): Promise<void>;
+    deleteState(namespace: string, key: string): Promise<void>;
+    listSlackChannels(): Promise<SlackChannelRow[]>;
+    insertSlackChannels(rows: Array<Omit<SlackChannelRow, 'id'>>): Promise<void>;
+    updateSlackChannel(id: string, patch: SlackChannelPatch): Promise<void>;
+}

package/dist/store/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/store/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/store/types.ts"],"names":[],"mappings":""}

package/dist/version.d.ts

@@ -0,0 +1 @@
+export declare const VERSION: string;

package/dist/version.js

@@ -0,0 +1,11 @@
+/** Package version, read from package.json (one directory above both src/ and dist/). */
+import { readFileSync } from 'node:fs';
+export const VERSION = (() => {
+    try {
+        return JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8')).version;
+    }
+    catch {
+        return '0.0.0';
+    }
+})();
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,MAAM,CAAC,MAAM,OAAO,GAAW,CAAC,GAAG,EAAE;IACnC,IAAI,CAAC;QACH,OAAQ,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAyB,CAAC,OAAO,CAAC;IACxH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC,CAAC,EAAE,CAAC"}

package/package.json

@@ -1,6 +1,82 @@
 {
   "name": "@chnxthr/knowledge-mcp",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.3.1",
+  "description": "Build your own MCP server from plugins. Auth (API keys, OAuth), per-user permissions, audit log, SQLite or Supabase state, and built-in Google Drive, Slack, GitHub and Railway connectors.",
+  "type": "module",
+  "license": "MIT",
+  "author": "chanthr",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/chanthr/internal-mcp.git",
+    "directory": "packages/knowledge-mcp"
+  },
+  "homepage": "https://github.com/chanthr/internal-mcp#readme",
+  "bugs": {
+    "url": "https://github.com/chanthr/internal-mcp/issues"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "mcp-server",
+    "mcp-gateway",
+    "claude",
+    "plugins",
+    "google-drive",
+    "slack",
+    "rag"
+  ],
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "bin": {
+    "knowledge-mcp": "dist/cli.js"
+  },
+  "files": [
+    "dist",
+    "sql",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "dev": "tsx watch src/cli.ts serve",
+    "start": "node dist/cli.js serve",
+    "typecheck": "tsc --noEmit",
+    "test": "node --import tsx --test --test-reporter=spec test/*.test.ts",
+    "prepack": "npm run build"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "@supabase/supabase-js": "^2.45.0",
+    "@types/express": "^5.0.6",
+    "dotenv": "^16.6.1",
+    "express": "^5.2.1",
+    "express-rate-limit": "^8.5.2",
+    "gpt-tokenizer": "^3.4.0",
+    "jose": "^5.10.0",
+    "pdf-parse": "^2.4.5",
+    "ws": "^8.21.0",
+    "xlsx": "https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz",
+    "yaml": "^2.9.0",
+    "zod": "^3.25.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "@types/pdf-parse": "^1.1.5",
+    "@types/ws": "^8.18.1",
+    "tsx": "^4.0.0",
+    "typescript": "^5.4.0"
+  },
+  "engines": {
+    "node": ">=22.13.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}