@codemieai/code 0.0.54 → 0.0.56

package/dist/mcp/auth/mcp-oauth-provider.js

@@ -0,0 +1,156 @@
+/**
+ * MCP OAuth Client Provider
+ *
+ * Implements the OAuthClientProvider interface from the MCP SDK for browser-based
+ * OAuth authorization code flow. All state is memory-only (no persistent storage).
+ *
+ * Flow: 401 → resource metadata → auth server metadata → dynamic client registration
+ * (client_name from MCP_CLIENT_NAME env var, default "CodeMie CLI") → browser authorization → callback → token exchange.
+ */
+import { execFile } from 'child_process';
+import { logger } from '../../utils/logger.js';
+import { getMcpClientName } from '../constants.js';
+import { startCallbackServer } from './callback-server.js';
+/**
+ * In-memory OAuth provider for MCP authorization code flow.
+ * Tokens and client info are stored in memory only — re-auth required each session.
+ */
+export class McpOAuthProvider {
+    _redirectUrl;
+    _clientInfo;
+    _tokens;
+    _codeVerifier;
+    // Callback server state (active during authorization)
+    callbackWait;
+    callbackClose;
+    get redirectUrl() {
+        return this._redirectUrl;
+    }
+    get clientMetadata() {
+        return {
+            client_name: getMcpClientName(),
+            redirect_uris: this._redirectUrl ? [this._redirectUrl] : [],
+            grant_types: ['authorization_code', 'refresh_token'],
+            response_types: ['code'],
+            token_endpoint_auth_method: 'none',
+        };
+    }
+    /**
+     * Pre-start the callback server so that clientMetadata.redirect_uris is
+     * populated before the SDK calls registerClient(). Must be called before
+     * connecting the HTTP transport.
+     */
+    async ensureCallbackServer() {
+        if (this.callbackWait)
+            return;
+        const { redirectUrl, waitForCallback, close } = await startCallbackServer();
+        this._redirectUrl = redirectUrl;
+        this.callbackWait = waitForCallback;
+        this.callbackClose = close;
+        logger.debug(`[mcp-proxy] Callback server pre-started: ${redirectUrl}`);
+    }
+    clientInformation() {
+        return this._clientInfo;
+    }
+    saveClientInformation(info) {
+        this._clientInfo = info;
+        logger.debug('[mcp-proxy] Saved client information (memory-only)');
+    }
+    tokens() {
+        return this._tokens;
+    }
+    saveTokens(tokens) {
+        this._tokens = tokens;
+        logger.debug('[mcp-proxy] Saved OAuth tokens (memory-only)');
+    }
+    async redirectToAuthorization(authorizationUrl) {
+        // Start ephemeral callback server if not already running
+        if (!this.callbackWait) {
+            const { redirectUrl, waitForCallback, close } = await startCallbackServer();
+            this._redirectUrl = redirectUrl;
+            this.callbackWait = waitForCallback;
+            this.callbackClose = close;
+        }
+        const url = authorizationUrl.toString();
+        logger.debug(`[mcp-proxy] Opening browser for authorization`);
+        console.error('[mcp-proxy] Opening browser for MCP server authorization...');
+        openBrowser(url);
+    }
+    saveCodeVerifier(codeVerifier) {
+        this._codeVerifier = codeVerifier;
+    }
+    codeVerifier() {
+        return this._codeVerifier || '';
+    }
+    invalidateCredentials(scope) {
+        if (scope === 'all' || scope === 'tokens') {
+            this._tokens = undefined;
+        }
+        if (scope === 'all' || scope === 'client') {
+            this._clientInfo = undefined;
+        }
+        if (scope === 'all' || scope === 'verifier') {
+            this._codeVerifier = undefined;
+        }
+        logger.debug(`[mcp-proxy] Invalidated credentials: ${scope}`);
+    }
+    /**
+     * Wait for the OAuth callback after browser redirect.
+     * Returns the authorization code from the callback.
+     * This is called externally by the bridge after auth() returns 'REDIRECT'.
+     */
+    async waitForAuthorizationCode() {
+        if (!this.callbackWait) {
+            throw new Error('No active authorization flow — callback server not started');
+        }
+        try {
+            const result = await this.callbackWait;
+            logger.debug('[mcp-proxy] Received authorization callback');
+            return result.code;
+        }
+        finally {
+            this.callbackWait = undefined;
+            this.callbackClose = undefined;
+        }
+    }
+    /**
+     * Clean up the callback server if still running (e.g., on shutdown).
+     */
+    dispose() {
+        this.callbackClose?.();
+        this.callbackWait = undefined;
+        this.callbackClose = undefined;
+    }
+}
+/**
+ * Open a URL in the system default browser.
+ * Cross-platform: macOS (open), Windows (start), Linux (xdg-open).
+ */
+function openBrowser(url) {
+    const platform = process.platform;
+    let command;
+    let args;
+    if (platform === 'darwin') {
+        command = 'open';
+        args = [url];
+    }
+    else if (platform === 'win32') {
+        // Use PowerShell Start-Process to avoid CMD metacharacter parsing:
+        // `cmd /c start "" url` splits on `&`, truncating auth URLs with query params.
+        // PowerShell passes the URL directly to the OS shell handler, preserving all chars.
+        const escapedUrl = url.replace(/'/g, "''"); // PowerShell single-quote escaping
+        command = 'powershell';
+        args = ['-NoProfile', '-Command', `Start-Process '${escapedUrl}'`];
+    }
+    else {
+        command = 'xdg-open';
+        args = [url];
+    }
+    execFile(command, args, (error) => {
+        if (error) {
+            // Don't fail — user can manually copy the URL from stderr
+            console.error(`[mcp-proxy] Could not open browser automatically. Please open this URL:\n${url}`);
+        }
+    });
+}
+//# sourceMappingURL=mcp-oauth-provider.js.map

package/dist/mcp/auth/mcp-oauth-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-oauth-provider.js","sourceRoot":"","sources":["../../../src/mcp/auth/mcp-oauth-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAuB,MAAM,sBAAsB,CAAC;AAShF;;;GAGG;AACH,MAAM,OAAO,gBAAgB;IACnB,YAAY,CAAqB;IACjC,WAAW,CAA0C;IACrD,OAAO,CAA0B;IACjC,aAAa,CAAqB;IAE1C,sDAAsD;IAC9C,YAAY,CAAsC;IAClD,aAAa,CAA2B;IAEhD,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,IAAI,cAAc;QAChB,OAAO;YACL,WAAW,EAAE,gBAAgB,EAAE;YAC/B,aAAa,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE;YAC3D,WAAW,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;YACpD,cAAc,EAAE,CAAC,MAAM,CAAC;YACxB,0BAA0B,EAAE,MAAM;SACnC,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,oBAAoB;QACxB,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO;QAC9B,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,MAAM,mBAAmB,EAAE,CAAC;QAC5E,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,eAAe,CAAC;QACpC,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;QAC3B,MAAM,CAAC,KAAK,CAAC,4CAA4C,WAAW,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,iBAAiB;QACf,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,qBAAqB,CAAC,IAAiC;QACrD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,MAAM,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACrE,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,UAAU,CAAC,MAAmB;QAC5B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,MAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,gBAAqB;QACjD,yDAAyD;QACzD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,MAAM,mBAAmB,EAAE,CAAC;YAC5E,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;YAChC,IAAI,CAAC,YAAY,GAAG,eAAe,CAAC;YACpC,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;QAC7B,CAAC;QAED,MAAM,GAAG,GAAG,gBAAgB,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC9D,OAAO,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC;QAE7E,WAAW,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAED,gBAAgB,CAAC,YAAoB;QACnC,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC;IACpC,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC;IAClC,CAAC;IAED,qBAAqB,CAAC,KAA6D;QACjF,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC1C,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QAC3B,CAAC;QACD,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC1C,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC/B,CAAC;QACD,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YAC5C,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QACjC,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,wCAAwC,KAAK,EAAE,CAAC,CAAC;IAChE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,wBAAwB;QAC5B,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC;YACvC,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC5D,OAAO,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;YAC9B,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QACjC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,OAAO;QACL,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACvB,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;QAC9B,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;IACjC,CAAC;CACF;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,IAAI,OAAe,CAAC;IACpB,IAAI,IAAc,CAAC;IAEnB,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,GAAG,MAAM,CAAC;QACjB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;SAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,mEAAmE;QACnE,+EAA+E;QAC/E,oFAAoF;QACpF,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,mCAAmC;QAC/E,OAAO,GAAG,YAAY,CAAC;QACvB,IAAI,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,kBAAkB,UAAU,GAAG,CAAC,CAAC;IACrE,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,UAAU,CAAC;QACrB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IAED,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;QAChC,IAAI,KAAK,EAAE,CAAC;YACV,0DAA0D;YAC1D,OAAO,CAAC,KAAK,CAAC,4EAA4E,GAAG,EAAE,CAAC,CAAC;QACnG,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/mcp/constants.d.ts

@@ -0,0 +1,5 @@
+/** Default client_name for MCP OAuth dynamic client registration. Overridable via MCP_CLIENT_NAME env var. */
+export declare const DEFAULT_MCP_CLIENT_NAME = "CodeMie CLI";
+/** Get the MCP client name from env var or default. */
+export declare function getMcpClientName(): string;
+//# sourceMappingURL=constants.d.ts.map

package/dist/mcp/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/mcp/constants.ts"],"names":[],"mappings":"AAAA,8GAA8G;AAC9G,eAAO,MAAM,uBAAuB,gBAAgB,CAAC;AAErD,uDAAuD;AACvD,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC"}

package/dist/mcp/constants.js

@@ -0,0 +1,7 @@
+/** Default client_name for MCP OAuth dynamic client registration. Overridable via MCP_CLIENT_NAME env var. */
+export const DEFAULT_MCP_CLIENT_NAME = 'CodeMie CLI';
+/** Get the MCP client name from env var or default. */
+export function getMcpClientName() {
+    return process.env.MCP_CLIENT_NAME || DEFAULT_MCP_CLIENT_NAME;
+}
+//# sourceMappingURL=constants.js.map

package/dist/mcp/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/mcp/constants.ts"],"names":[],"mappings":"AAAA,8GAA8G;AAC9G,MAAM,CAAC,MAAM,uBAAuB,GAAG,aAAa,CAAC;AAErD,uDAAuD;AACvD,MAAM,UAAU,gBAAgB;IAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,uBAAuB,CAAC;AAChE,CAAC"}

package/dist/mcp/proxy-logger.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Simple file logger for the MCP proxy.
+ * Writes to ~/.codemie/mcp-proxy.log — independent of the main logger.
+ * Enabled when CODEMIE_DEBUG=true or MCP_PROXY_DEBUG=true.
+ */
+export declare function proxyLog(message: string): void;
+//# sourceMappingURL=proxy-logger.d.ts.map

package/dist/mcp/proxy-logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-logger.d.ts","sourceRoot":"","sources":["../../src/mcp/proxy-logger.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAoBH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAQ9C"}

package/dist/mcp/proxy-logger.js

@@ -0,0 +1,32 @@
+/**
+ * Simple file logger for the MCP proxy.
+ * Writes to ~/.codemie/mcp-proxy.log — independent of the main logger.
+ * Enabled when CODEMIE_DEBUG=true or MCP_PROXY_DEBUG=true.
+ */
+import { appendFileSync, mkdirSync } from 'fs';
+import { join } from 'path';
+import { homedir } from 'os';
+const enabled = process.env.CODEMIE_DEBUG === 'true'
+    || process.env.CODEMIE_DEBUG === '1'
+    || process.env.MCP_PROXY_DEBUG === 'true'
+    || process.env.MCP_PROXY_DEBUG === '1';
+const logDir = join(homedir(), '.codemie', 'logs');
+const logFile = join(logDir, 'mcp-proxy.log');
+try {
+    mkdirSync(logDir, { recursive: true });
+}
+catch {
+    // ignore
+}
+export function proxyLog(message) {
+    if (!enabled)
+        return;
+    const line = `[${new Date().toISOString()}] ${message}\n`;
+    try {
+        appendFileSync(logFile, line);
+    }
+    catch {
+        // ignore — can't log if file write fails
+    }
+}
+//# sourceMappingURL=proxy-logger.js.map

package/dist/mcp/proxy-logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-logger.js","sourceRoot":"","sources":["../../src/mcp/proxy-logger.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAE7B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,MAAM;OAC/C,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,GAAG;OACjC,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,MAAM;OACtC,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,GAAG,CAAC;AAEzC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;AACnD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAE9C,IAAI,CAAC;IACH,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACzC,CAAC;AAAC,MAAM,CAAC;IACP,SAAS;AACX,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAAe;IACtC,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,MAAM,IAAI,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,OAAO,IAAI,CAAC;IAC1D,IAAI,CAAC;QACH,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,yCAAyC;IAC3C,CAAC;AACH,CAAC"}

package/dist/mcp/stdio-http-bridge.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Stdio-to-HTTP MCP Bridge
+ *
+ * Pipes JSON-RPC messages between a StdioServerTransport (Claude Code side)
+ * and a StreamableHTTPClientTransport (real MCP server side).
+ *
+ * Lazy connect: the HTTP transport is created and started only when the first
+ * stdio message arrives. If the server requires OAuth, the auth flow runs during
+ * that first connection (blocking the first message until auth completes).
+ *
+ * Cookie jar: Node's fetch doesn't persist cookies between requests. Some MCP
+ * auth gateways set session cookies during the OAuth flow that must be sent with
+ * subsequent requests. The bridge maintains a per-origin cookie jar automatically.
+ */
+export interface BridgeOptions {
+    /** The real MCP server URL to connect to */
+    serverUrl: string;
+}
+export declare class StdioHttpBridge {
+    private stdioTransport;
+    private httpTransport;
+    private oauthProvider;
+    private serverUrl;
+    private cookieJar;
+    private connected;
+    private connecting;
+    private shuttingDown;
+    private pendingMessages;
+    constructor(options: BridgeOptions);
+    /**
+     * Start the bridge: begin listening on stdio immediately.
+     * HTTP connection is deferred until the first message arrives.
+     */
+    start(): Promise<void>;
+    /**
+     * Handle a message from Claude Code (stdio side).
+     * On the first message, lazily connect the HTTP transport.
+     */
+    private handleStdioMessage;
+    /**
+     * Lazily create and connect the HTTP transport to the real MCP server.
+     * Handles OAuth authorization if the server returns 401.
+     */
+    private connectHttpTransport;
+    /**
+     * Create an HTTP transport with cookie jar and logging.
+     */
+    private createHttpTransport;
+    /**
+     * Handle the OAuth authorization code flow.
+     */
+    private handleOAuthFlow;
+    /**
+     * Forward any messages that arrived while we were connecting/authenticating.
+     * UnauthorizedError is re-thrown so the caller can handle the OAuth flow.
+     */
+    private flushPendingMessages;
+    /**
+     * Graceful shutdown: close both transports. Idempotent.
+     */
+    shutdown(): Promise<void>;
+}
+//# sourceMappingURL=stdio-http-bridge.d.ts.map

package/dist/mcp/stdio-http-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio-http-bridge.d.ts","sourceRoot":"","sources":["../../src/mcp/stdio-http-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAoEH,MAAM,WAAW,aAAa;IAC5B,4CAA4C;IAC5C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,cAAc,CAAuB;IAC7C,OAAO,CAAC,aAAa,CAA8C;IACnE,OAAO,CAAC,aAAa,CAAmB;IACxC,OAAO,CAAC,SAAS,CAAM;IACvB,OAAO,CAAC,SAAS,CAAmB;IACpC,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,eAAe,CAAwB;gBAEnC,OAAO,EAAE,aAAa;IAOlC;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAkB5B;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IA6B1B;;;OAGG;YACW,oBAAoB;IA8ClC;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAoE3B;;OAEG;YACW,eAAe;IAS7B;;;OAGG;YACW,oBAAoB;IAuBlC;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAwBhC"}

package/dist/mcp/stdio-http-bridge.js

@@ -0,0 +1,307 @@
+/**
+ * Stdio-to-HTTP MCP Bridge
+ *
+ * Pipes JSON-RPC messages between a StdioServerTransport (Claude Code side)
+ * and a StreamableHTTPClientTransport (real MCP server side).
+ *
+ * Lazy connect: the HTTP transport is created and started only when the first
+ * stdio message arrives. If the server requires OAuth, the auth flow runs during
+ * that first connection (blocking the first message until auth completes).
+ *
+ * Cookie jar: Node's fetch doesn't persist cookies between requests. Some MCP
+ * auth gateways set session cookies during the OAuth flow that must be sent with
+ * subsequent requests. The bridge maintains a per-origin cookie jar automatically.
+ */
+import { StreamableHTTPClientTransport, UnauthorizedError, } from '@modelcontextprotocol/client';
+import { StdioServerTransport } from '@modelcontextprotocol/server';
+import { logger } from '../utils/logger.js';
+import { proxyLog } from './proxy-logger.js';
+import { McpOAuthProvider } from './auth/mcp-oauth-provider.js';
+function log(msg) {
+    logger.debug(msg);
+    proxyLog(msg);
+}
+/** Serialize an error with all available details (message, cause, status, body, stack). */
+function errorDetail(error) {
+    if (!(error instanceof Error))
+        return String(error);
+    const parts = [`${error.constructor.name}: ${error.message}`];
+    for (const key of ['status', 'statusCode', 'code', 'body', 'response', 'statusText', 'data']) {
+        const val = error[key];
+        if (val !== undefined)
+            parts.push(`  ${key}: ${JSON.stringify(val).slice(0, 500)}`);
+    }
+    if (error.cause)
+        parts.push(`  cause: ${errorDetail(error.cause)}`);
+    if (error.stack)
+        parts.push(`  stack: ${error.stack}`);
+    return parts.join('\n');
+}
+/**
+ * Minimal cookie jar: stores Set-Cookie values keyed by origin, sends them
+ * back on subsequent requests to the same origin.
+ */
+class CookieJar {
+    /** origin → Map<cookie-name, full-cookie-string> */
+    cookies = new Map();
+    /** Extract and store cookies from a response's Set-Cookie headers. */
+    capture(requestUrl, response) {
+        const origin = new URL(requestUrl).origin;
+        // getSetCookie() returns individual Set-Cookie header values
+        const setCookies = response.headers.getSetCookie?.() ?? [];
+        if (setCookies.length === 0)
+            return;
+        let jar = this.cookies.get(origin);
+        if (!jar) {
+            jar = new Map();
+            this.cookies.set(origin, jar);
+        }
+        for (const raw of setCookies) {
+            const name = raw.split('=')[0]?.trim();
+            if (name) {
+                jar.set(name, raw.split(';')[0]); // store "name=value" only
+                log(`[mcp-proxy] Cookie stored for ${origin}: ${name}=***`);
+            }
+        }
+    }
+    /** Build a Cookie header value for the given request URL. */
+    headerFor(requestUrl) {
+        const origin = new URL(requestUrl).origin;
+        const jar = this.cookies.get(origin);
+        if (!jar || jar.size === 0)
+            return undefined;
+        return [...jar.values()].join('; ');
+    }
+}
+export class StdioHttpBridge {
+    stdioTransport;
+    httpTransport = null;
+    oauthProvider;
+    serverUrl;
+    cookieJar = new CookieJar();
+    connected = false;
+    connecting = false;
+    shuttingDown = false;
+    pendingMessages = [];
+    constructor(options) {
+        this.serverUrl = new URL(options.serverUrl);
+        this.oauthProvider = new McpOAuthProvider();
+        this.stdioTransport = new StdioServerTransport();
+        log(`[mcp-proxy] Bridge created for ${this.serverUrl}`);
+    }
+    /**
+     * Start the bridge: begin listening on stdio immediately.
+     * HTTP connection is deferred until the first message arrives.
+     */
+    async start() {
+        this.stdioTransport.onmessage = (message) => {
+            this.handleStdioMessage(message);
+        };
+        this.stdioTransport.onclose = () => {
+            log('[mcp-proxy] Stdio transport closed');
+            this.shutdown();
+        };
+        this.stdioTransport.onerror = (error) => {
+            log(`[mcp-proxy] Stdio transport error: ${error.message}`);
+        };
+        await this.stdioTransport.start();
+        log('[mcp-proxy] Stdio transport started, waiting for messages');
+    }
+    /**
+     * Handle a message from Claude Code (stdio side).
+     * On the first message, lazily connect the HTTP transport.
+     */
+    handleStdioMessage(message) {
+        if (this.shuttingDown)
+            return;
+        log(`[mcp-proxy] Received stdio message: ${JSON.stringify(message).slice(0, 200)}`);
+        if (this.connected && this.httpTransport) {
+            this.httpTransport.send(message).catch((error) => {
+                log(`[mcp-proxy] Error forwarding to HTTP:\n${errorDetail(error)}`);
+                this.shutdown();
+            });
+            return;
+        }
+        this.pendingMessages.push(message);
+        log(`[mcp-proxy] Queued message (${this.pendingMessages.length} pending), connecting=${this.connecting}`);
+        if (!this.connecting) {
+            this.connecting = true;
+            this.connectHttpTransport().catch((error) => {
+                if (this.shuttingDown) {
+                    log(`[mcp-proxy] Connection aborted during shutdown: ${errorDetail(error)}`);
+                    return;
+                }
+                log(`[mcp-proxy] Failed to connect to MCP server:\n${errorDetail(error)}`);
+                process.exit(1);
+            });
+        }
+    }
+    /**
+     * Lazily create and connect the HTTP transport to the real MCP server.
+     * Handles OAuth authorization if the server returns 401.
+     */
+    async connectHttpTransport() {
+        log(`[mcp-proxy] Connecting to MCP server: ${this.serverUrl}`);
+        await this.oauthProvider.ensureCallbackServer();
+        log('[mcp-proxy] Callback server pre-started');
+        this.httpTransport = this.createHttpTransport(this.oauthProvider);
+        log('[mcp-proxy] HTTP transport created with auth provider');
+        try {
+            log('[mcp-proxy] Starting HTTP transport...');
+            await this.httpTransport.start();
+            log('[mcp-proxy] HTTP transport started');
+            this.connected = true;
+            log('[mcp-proxy] HTTP transport connected');
+            try {
+                await this.flushPendingMessages();
+            }
+            catch (error) {
+                if (error instanceof UnauthorizedError) {
+                    log('[mcp-proxy] Auth required on first send, completing OAuth flow');
+                    await this.handleOAuthFlow(this.httpTransport);
+                    log('[mcp-proxy] OAuth complete, retrying queued messages');
+                    await this.flushPendingMessages();
+                }
+                else {
+                    throw error;
+                }
+            }
+        }
+        catch (error) {
+            if (error instanceof UnauthorizedError) {
+                log('[mcp-proxy] Auth required on start, completing OAuth flow');
+                await this.handleOAuthFlow(this.httpTransport);
+                this.connected = true;
+                log('[mcp-proxy] HTTP transport connected after OAuth');
+                await this.flushPendingMessages();
+            }
+            else {
+                throw error;
+            }
+        }
+        finally {
+            this.connecting = false;
+        }
+    }
+    /**
+     * Create an HTTP transport with cookie jar and logging.
+     */
+    createHttpTransport(authProvider) {
+        const jar = this.cookieJar;
+        // Wrap fetch to: (1) inject cookies, (2) capture Set-Cookie, (3) log details
+        const cookieFetch = async (input, init) => {
+            const reqUrl = typeof input === 'string' ? input : input instanceof URL ? input.toString() : input.url;
+            const method = init?.method ?? 'GET';
+            log(`[mcp-proxy] HTTP ${method} ${reqUrl}`);
+            if (init?.body)
+                log(`[mcp-proxy] Request body: ${String(init.body).slice(0, 300)}`);
+            // Inject stored cookies into the request
+            const cookieHeader = jar.headerFor(reqUrl);
+            if (cookieHeader && init?.headers) {
+                const headers = init.headers instanceof Headers ? init.headers : new Headers(init.headers);
+                headers.set('Cookie', cookieHeader);
+                init = { ...init, headers };
+                log(`[mcp-proxy] Injected cookies for ${new URL(reqUrl).origin}`);
+            }
+            // Log auth header presence (not value)
+            if (init?.headers instanceof Headers) {
+                log(`[mcp-proxy] Has Authorization: ${init.headers.has('Authorization')}`);
+                log(`[mcp-proxy] Request headers: ${[...init.headers.keys()].join(', ')}`);
+            }
+            const response = await fetch(input, init);
+            log(`[mcp-proxy] HTTP response: ${response.status} ${response.statusText}`);
+            const ct = response.headers.get('content-type');
+            if (ct)
+                log(`[mcp-proxy] Response content-type: ${ct}`);
+            // Capture any Set-Cookie headers from the response
+            jar.capture(reqUrl, response);
+            // Log error response bodies
+            if (!response.ok) {
+                const cloned = response.clone();
+                const errorBody = await cloned.text().catch(() => '(unreadable)');
+                log(`[mcp-proxy] Error response body: ${errorBody.slice(0, 500)}`);
+            }
+            return response;
+        };
+        const transport = new StreamableHTTPClientTransport(this.serverUrl, {
+            fetch: cookieFetch,
+            ...(authProvider ? { authProvider } : {}),
+        });
+        transport.onmessage = (message) => {
+            log(`[mcp-proxy] Received HTTP message: ${JSON.stringify(message).slice(0, 200)}`);
+            this.stdioTransport.send(message).catch((error) => {
+                log(`[mcp-proxy] Error forwarding to stdio: ${error.message}`);
+            });
+        };
+        transport.onclose = () => {
+            log('[mcp-proxy] HTTP transport closed');
+            this.shutdown();
+        };
+        transport.onerror = (error) => {
+            log(`[mcp-proxy] HTTP transport error:\n${errorDetail(error)}`);
+        };
+        return transport;
+    }
+    /**
+     * Handle the OAuth authorization code flow.
+     */
+    async handleOAuthFlow(transport) {
+        log('[mcp-proxy] Waiting for authorization code from browser...');
+        const code = await this.oauthProvider.waitForAuthorizationCode();
+        log('[mcp-proxy] Authorization code received, exchanging for token');
+        await transport.finishAuth(code);
+        log('[mcp-proxy] Token exchange complete, transport ready');
+    }
+    /**
+     * Forward any messages that arrived while we were connecting/authenticating.
+     * UnauthorizedError is re-thrown so the caller can handle the OAuth flow.
+     */
+    async flushPendingMessages() {
+        const messages = this.pendingMessages;
+        this.pendingMessages = [];
+        for (const message of messages) {
+            try {
+                await this.httpTransport.send(message);
+            }
+            catch (error) {
+                if (error instanceof UnauthorizedError) {
+                    const remaining = messages.slice(messages.indexOf(message));
+                    this.pendingMessages = remaining.concat(this.pendingMessages);
+                    log(`[mcp-proxy] UnauthorizedError during flush, re-queued ${remaining.length} message(s)`);
+                    throw error;
+                }
+                log(`[mcp-proxy] Error flushing pending message:\n${errorDetail(error)}`);
+            }
+        }
+        if (messages.length > 0) {
+            log(`[mcp-proxy] Flushed ${messages.length} pending message(s)`);
+        }
+    }
+    /**
+     * Graceful shutdown: close both transports. Idempotent.
+     */
+    async shutdown() {
+        if (this.shuttingDown)
+            return;
+        this.shuttingDown = true;
+        log('[mcp-proxy] Shutting down bridge');
+        this.oauthProvider.dispose();
+        try {
+            if (this.httpTransport) {
+                await this.httpTransport.terminateSession();
+                await this.httpTransport.close();
+            }
+        }
+        catch (error) {
+            log(`[mcp-proxy] Error closing HTTP transport: ${error.message}`);
+        }
+        try {
+            await this.stdioTransport.close();
+        }
+        catch (error) {
+            log(`[mcp-proxy] Error closing stdio transport: ${error.message}`);
+        }
+        log('[mcp-proxy] Bridge shutdown complete');
+    }
+}
+//# sourceMappingURL=stdio-http-bridge.js.map

package/dist/mcp/stdio-http-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio-http-bridge.js","sourceRoot":"","sources":["../../src/mcp/stdio-http-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACL,6BAA6B,EAC7B,iBAAiB,GAClB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAEhE,SAAS,GAAG,CAAC,GAAW;IACtB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClB,QAAQ,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC;AAED,2FAA2F;AAC3F,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,KAAK,GAAa,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACxE,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC;QAC7F,MAAM,GAAG,GAAI,KAA4C,CAAC,GAAG,CAAC,CAAC;QAC/D,IAAI,GAAG,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,KAAK,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpE,IAAI,KAAK,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IACvD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,MAAM,SAAS;IACb,oDAAoD;IAC5C,OAAO,GAAG,IAAI,GAAG,EAA+B,CAAC;IAEzD,sEAAsE;IACtE,OAAO,CAAC,UAAkB,EAAE,QAAkB;QAC5C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;QAC1C,6DAA6D;QAC7D,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC;QAC3D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEpC,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAChC,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YACvC,IAAI,IAAI,EAAE,CAAC;gBACT,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,0BAA0B;gBAC7D,GAAG,CAAC,iCAAiC,MAAM,KAAK,IAAI,MAAM,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,SAAS,CAAC,UAAkB;QAC1B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC7C,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;CACF;AAOD,MAAM,OAAO,eAAe;IAClB,cAAc,CAAuB;IACrC,aAAa,GAAyC,IAAI,CAAC;IAC3D,aAAa,CAAmB;IAChC,SAAS,CAAM;IACf,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;IAC5B,SAAS,GAAG,KAAK,CAAC;IAClB,UAAU,GAAG,KAAK,CAAC;IACnB,YAAY,GAAG,KAAK,CAAC;IACrB,eAAe,GAAqB,EAAE,CAAC;IAE/C,YAAY,OAAsB;QAChC,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,aAAa,GAAG,IAAI,gBAAgB,EAAE,CAAC;QAC5C,IAAI,CAAC,cAAc,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACjD,GAAG,CAAC,kCAAkC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,cAAc,CAAC,SAAS,GAAG,CAAC,OAAuB,EAAE,EAAE;YAC1D,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC,CAAC;QAEF,IAAI,CAAC,cAAc,CAAC,OAAO,GAAG,GAAG,EAAE;YACjC,GAAG,CAAC,oCAAoC,CAAC,CAAC;YAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,CAAC,CAAC;QAEF,IAAI,CAAC,cAAc,CAAC,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE;YAC7C,GAAG,CAAC,sCAAsC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7D,CAAC,CAAC;QAEF,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAClC,GAAG,CAAC,2DAA2D,CAAC,CAAC;IACnE,CAAC;IAED;;;OAGG;IACK,kBAAkB,CAAC,OAAuB;QAChD,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO;QAE9B,GAAG,CAAC,uCAAuC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAEpF,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACzC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACxD,GAAG,CAAC,0CAA0C,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACpE,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,CAAC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,GAAG,CAAC,+BAA+B,IAAI,CAAC,eAAe,CAAC,MAAM,yBAAyB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAE1G,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvB,IAAI,CAAC,oBAAoB,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACnD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;oBACtB,GAAG,CAAC,mDAAmD,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBAC7E,OAAO;gBACT,CAAC;gBACD,GAAG,CAAC,iDAAiD,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC3E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,oBAAoB;QAChC,GAAG,CAAC,yCAAyC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAE/D,MAAM,IAAI,CAAC,aAAa,CAAC,oBAAoB,EAAE,CAAC;QAChD,GAAG,CAAC,yCAAyC,CAAC,CAAC;QAE/C,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAClE,GAAG,CAAC,uDAAuD,CAAC,CAAC;QAE7D,IAAI,CAAC;YACH,GAAG,CAAC,wCAAwC,CAAC,CAAC;YAC9C,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;YACjC,GAAG,CAAC,oCAAoC,CAAC,CAAC;YAE1C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,GAAG,CAAC,sCAAsC,CAAC,CAAC;YAE5C,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;YACpC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;oBACvC,GAAG,CAAC,gEAAgE,CAAC,CAAC;oBACtE,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;oBAC/C,GAAG,CAAC,sDAAsD,CAAC,CAAC;oBAC5D,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBACpC,CAAC;qBAAM,CAAC;oBACN,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;gBACvC,GAAG,CAAC,2DAA2D,CAAC,CAAC;gBACjE,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,aAAc,CAAC,CAAC;gBAEhD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;gBACtB,GAAG,CAAC,kDAAkD,CAAC,CAAC;gBAExD,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;YACpC,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QAC1B,CAAC;IACH,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,YAA+B;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;QAE3B,6EAA6E;QAC7E,MAAM,WAAW,GAAiB,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtD,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAE,KAAiB,CAAC,GAAG,CAAC;YACpH,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,KAAK,CAAC;YACrC,GAAG,CAAC,oBAAoB,MAAM,IAAI,MAAM,EAAE,CAAC,CAAC;YAC5C,IAAI,IAAI,EAAE,IAAI;gBAAE,GAAG,CAAC,6BAA6B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAEpF,yCAAyC;YACzC,MAAM,YAAY,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,YAAY,IAAI,IAAI,EAAE,OAAO,EAAE,CAAC;gBAClC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,YAAY,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAiC,CAAC,CAAC;gBACrH,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;gBACpC,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC;gBAC5B,GAAG,CAAC,oCAAoC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YACpE,CAAC;YAED,uCAAuC;YACvC,IAAI,IAAI,EAAE,OAAO,YAAY,OAAO,EAAE,CAAC;gBACrC,GAAG,CAAC,kCAAkC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;gBAC3E,GAAG,CAAC,gCAAgC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC7E,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAE1C,GAAG,CAAC,8BAA8B,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YAC5E,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAChD,IAAI,EAAE;gBAAE,GAAG,CAAC,sCAAsC,EAAE,EAAE,CAAC,CAAC;YAExD,mDAAmD;YACnD,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAE9B,4BAA4B;YAC5B,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC;gBAChC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,CAAC;gBAClE,GAAG,CAAC,oCAAoC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACrE,CAAC;YAED,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC,IAAI,CAAC,SAAS,EAAE;YAClE,KAAK,EAAE,WAAW;YAClB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC,CAAC;QAEH,SAAS,CAAC,SAAS,GAAG,CAAC,OAAuB,EAAE,EAAE;YAChD,GAAG,CAAC,sCAAsC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACnF,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAY,EAAE,EAAE;gBACvD,GAAG,CAAC,0CAA0C,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACjE,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;YACvB,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,CAAC,CAAC;QAEF,SAAS,CAAC,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE;YACnC,GAAG,CAAC,sCAAsC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC,CAAC;QAEF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,eAAe,CAAC,SAAwC;QACpE,GAAG,CAAC,4DAA4D,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,wBAAwB,EAAE,CAAC;QACjE,GAAG,CAAC,+DAA+D,CAAC,CAAC;QAErE,MAAM,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACjC,GAAG,CAAC,sDAAsD,CAAC,CAAC;IAC9D,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,oBAAoB;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC;QACtC,IAAI,CAAC,eAAe,GAAG,EAAE,CAAC;QAE1B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,aAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;oBACvC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;oBAC5D,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;oBAC9D,GAAG,CAAC,yDAAyD,SAAS,CAAC,MAAM,aAAa,CAAC,CAAC;oBAC5F,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,GAAG,CAAC,gDAAgD,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,GAAG,CAAC,uBAAuB,QAAQ,CAAC,MAAM,qBAAqB,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO;QAC9B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAEzB,GAAG,CAAC,kCAAkC,CAAC,CAAC;QACxC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;QAE7B,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvB,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,EAAE,CAAC;gBAC5C,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;YACnC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,6CAA8C,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,8CAA+C,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,GAAG,CAAC,sCAAsC,CAAC,CAAC;IAC9C,CAAC;CACF"}

package/dist/providers/core/codemie-auth-helpers.d.ts

@@ -0,0 +1,22 @@
+import type { SSOAuthResult } from './types.js';
+export declare const DEFAULT_CODEMIE_BASE_URL = "https://codemie.lab.epam.com";
+export interface CodeMieUserInfo {
+    userId: string;
+    name: string;
+    username: string;
+    isAdmin: boolean;
+    applications: string[];
+    applications_admin: string[];
+    applicationsAdmin?: string[];
+    picture: string;
+    knowledgeBases: string[];
+    userType?: string;
+}
+export declare function ensureApiBase(rawUrl: string): string;
+export declare function buildAuthHeaders(auth: Record<string, string> | string): Record<string, string>;
+export declare function promptForCodeMieUrl(defaultUrl?: string, message?: string): Promise<string>;
+export declare function authenticateWithCodeMie(codeMieUrl: string, timeout?: number): Promise<SSOAuthResult>;
+export declare function fetchCodeMieUserInfo(apiUrl: string, cookies: Record<string, string>): Promise<CodeMieUserInfo>;
+export declare function fetchCodeMieUserInfo(apiUrl: string, jwtToken: string): Promise<CodeMieUserInfo>;
+export declare function selectCodeMieProject(authResult: SSOAuthResult): Promise<string>;
+//# sourceMappingURL=codemie-auth-helpers.d.ts.map

package/dist/providers/core/codemie-auth-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codemie-auth-helpers.d.ts","sourceRoot":"","sources":["../../../src/providers/core/codemie-auth-helpers.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAGhD,eAAO,MAAM,wBAAwB,iCAAiC,CAAC;AAEvE,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAMpD;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAkB9F;AAED,wBAAsB,mBAAmB,CACvC,UAAU,GAAE,MAAiC,EAC7C,OAAO,GAAE,MAAoC,GAC5C,OAAO,CAAC,MAAM,CAAC,CAoBjB;AAED,wBAAsB,uBAAuB,CAC3C,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,MAAe,GACvB,OAAO,CAAC,aAAa,CAAC,CAOxB;AAGD,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,OAAO,CAAC,eAAe,CAAC,CAAC;AAC5B,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,eAAe,CAAC,CAAC;AAsC5B,wBAAsB,oBAAoB,CAAC,UAAU,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CA6CrF"}