@com55/node-red-ai-access 0.1.1 → 0.2.0-beta.2

package/dist/plugin.d.cts

@@ -23,8 +23,11 @@ interface AccessLinkCreated extends AccessLinkPublic {
 interface AccessLinkRecord {
     id: string;
     tokenHash: string;
-    /** Raw token kept in memory so admins can re-copy the GET URL. */
-    token: string;
+    /**
+     * @deprecated Legacy field: raw tokens are no longer kept. Only `tokenHash` is
+     * used for validation; any `token` on an inserted record is dropped.
+     */
+    token?: string;
     /**
      * Token surface. Optional for in-memory migration of pre-kind records
      * (treated as `get_link` by {@link resolveAccessLinkKind}).
@@ -82,11 +85,6 @@ declare class AccessLinkStore {
     private isActive;
     list(): AccessLinkPublic[];
     create(input?: CreateAccessLinkInput): AccessLinkCreated;
-    /**
-     * Raw token for an active link (in-memory only). Used to rebuild the GET URL
-     * for admin "Copy link" — never logs the value.
-     */
-    peekToken(linkId: string): string | null;
     revoke(linkId: string): AccessLinkPublic;
     /**
      * Look up a link by id even if revoked/expired (still in memory).
@@ -176,7 +174,7 @@ interface AiAccessPaths {
     root: string;
     proposals: string;
     logs: string;
-    /** Persisted AI Access settings (`settings.json`). */
+    /** Persisted AI Access settings (`config.json`). */
     settings: string;
 }
 
@@ -221,11 +219,16 @@ declare class AuditLog {
 
 type ProposalStatus = 'pending' | 'approved' | 'rejected' | 'failed' | 'withdrawn' | 'expired' | 'superseded';
 type ProposalType = 'replace_flow';
-interface ProposalCreator {
+interface AccessLinkProposalCreator {
     kind: 'access-link';
     linkId: string;
     label?: string;
 }
+type ProposalCreator = AccessLinkProposalCreator | {
+    kind: 'oauth';
+    clientId: string;
+    user: string;
+};
 type ProposalDecisionBy = {
     kind: 'admin';
     username?: string;
@@ -329,11 +332,11 @@ declare class ProposalStore {
 }
 
 /**
- * Persisted AI Access settings under `<userDir>/.ai-access/settings.json`.
+ * Persisted AI Access settings under `<userDir>/.ai-access/config.json`.
  *
  * Precedence for effective values (highest wins):
- * 1. Disk file keys present in `.ai-access/settings.json` (sidebar AI Access UI)
- * 2. `settings.js` `aiAccess` block
+ * 1. `settings.js` `aiAccess` block (locked keys)
+ * 2. Disk file keys present in `.ai-access/config.json` (sidebar AI Access UI)
  * 3. Built-in defaults
  *
  * Changes via PUT /mcp/api/v1/settings update memory + disk immediately
@@ -347,6 +350,18 @@ interface PersistedAiAccessSettings {
     defaultLinkTtlSeconds?: number;
     defaultDeploymentType?: DeploymentType;
     maxActiveLinks?: number;
+    publicBaseUrl?: string;
+    corsAllowedOrigins?: string[];
+    rateLimitWindowMs?: number;
+    rateLimitMaxPerIp?: number;
+    rateLimitMaxPerToken?: number;
+    oauth?: {
+        enabled?: boolean;
+        accessTokenTtlSec?: number;
+        refreshIdleTtlSec?: number;
+        refreshMaxLifetimeSec?: number;
+        dcrMaxClients?: number;
+    };
 }
 interface EffectiveAiAccessSettings {
     enabled: boolean;
@@ -354,18 +369,31 @@ interface EffectiveAiAccessSettings {
     defaultLinkTtlSeconds: number;
     defaultDeploymentType: DeploymentType;
     maxActiveLinks: number;
+    publicBaseUrl: string;
+    corsAllowedOrigins: string[];
+    rateLimitWindowMs: number;
+    rateLimitMaxPerIp: number;
+    rateLimitMaxPerToken: number;
+    oauth: {
+        enabled: boolean;
+        accessTokenTtlSec: number;
+        refreshIdleTtlSec: number;
+        refreshMaxLifetimeSec: number;
+        dcrMaxClients: number;
+    };
 }
 type SettingsSource = 'default' | 'settings.js' | 'disk';
 interface EffectiveAiAccessSettingsWithMeta extends EffectiveAiAccessSettings {
     sources: Record<keyof EffectiveAiAccessSettings, SettingsSource>;
 }
+type Warn = (message: string) => void;
 declare class SettingsStore {
     private readonly paths;
     private readonly filePath;
     private disk;
     private settingsJs;
     private cached;
-    constructor(paths: AiAccessPaths, settingsJsAiAccess?: PersistedAiAccessSettings);
+    constructor(paths: AiAccessPaths, settingsJsAiAccess?: PersistedAiAccessSettings, warn?: Warn);
     getEffective(): EffectiveAiAccessSettingsWithMeta;
     getDisk(): PersistedAiAccessSettings;
     /**
@@ -473,17 +501,25 @@ interface AiAccessSettings {
     /**
      * Explicit public base URL (e.g. `https://nodered.example.com`) used for
      * absolute URLs (access-link `url`, proposal `reviewUrl`, `accessLinksUrl`).
-     * Overrides `Host` / `X-Forwarded-*`. settings.js only.
+     * Overrides `Host` / `X-Forwarded-*`. Editable in the AI Access settings sidebar unless locked by settings.js.
      */
     publicBaseUrl?: string;
     /**
      * Browser origins allowed to call the AI-facing endpoints (`/mcp/a`,
      * `/mcp/api`, `/mcp/rpc`) cross-origin, e.g. `['https://app.example.com']`.
-     * Default: none (no CORS headers). settings.js only.
+     * Default: none (no CORS headers). Editable in the AI Access settings sidebar unless locked by settings.js.
      */
     corsAllowedOrigins?: string[];
+    oauth?: {
+        enabled?: boolean;
+        accessTokenTtlSec?: number;
+        refreshIdleTtlSec?: number;
+        /** Absolute refresh-family lifetime in seconds; default 7776000 (90 days), 0 = unlimited. */
+        refreshMaxLifetimeSec?: number;
+        dcrMaxClients?: number;
+    };
 }
-type AiAccessPermission = 'read' | '*';
+type AiAccessPermission = 'read' | 'propose' | '*';
 interface AiAccessCapabilities {
     view: boolean;
     manageLinks: boolean;
@@ -529,7 +565,13 @@ interface AiAccessStatusCallerAccessLink {
      */
     baseUrls?: Partial<AiAccessStatusCallerBaseUrls>;
 }
-type AiAccessStatusCaller = AiAccessStatusCallerAdmin | AiAccessStatusCallerAccessLink;
+interface AiAccessStatusCallerOAuth {
+    kind: 'oauth';
+    clientId: string;
+    user: string;
+    scopes: string[];
+}
+type AiAccessStatusCaller = AiAccessStatusCallerAdmin | AiAccessStatusCallerAccessLink | AiAccessStatusCallerOAuth;
 interface AiAccessStatus {
     ok: boolean;
     version: string;
@@ -557,6 +599,12 @@ interface AiAccessStatus {
 interface NodeRedPluginSettings {
     userDir: string;
     httpAdminRoot?: string;
+    httpNodeRoot?: string | false;
+    httpStatic?: string | (string | {
+        path: string;
+        root?: string;
+    })[];
+    httpStaticRoot?: string;
     adminAuth?: unknown;
     aiAccess?: AiAccessSettings;
 }
@@ -566,6 +614,21 @@ interface NodeRedAuthAPI {
 interface NodeRedPluginAPI {
     settings: NodeRedPluginSettings;
     httpAdmin: Express;
+    httpNode?: Express;
+    nodes?: {
+        eachNode(listener: (node: {
+            id?: string;
+            type?: string;
+            url?: string;
+            name?: string;
+            z?: string;
+            d?: boolean;
+            disabled?: boolean;
+        }) => void): void;
+    };
+    events?: {
+        on(event: string, listener: () => void): void;
+    };
     auth: NodeRedAuthAPI;
     plugins: {
         registerPlugin: (id: string, definition?: Record<string, unknown>) => void;
@@ -584,6 +647,8 @@ interface AccessLinkAuthInfo {
     createdAt: string;
     expiresAt: string;
     createdBy?: string;
+    oauthClientId?: string;
+    oauthUser?: string;
 }
 interface AuthenticatedRequest extends Request {
     user?: {

package/docs/api/openapi.yaml

@@ -425,6 +425,42 @@ paths:
         '413':
           $ref: '#/components/responses/PayloadTooLarge'
 
+  /settings/check-public-url:
+    post:
+      tags: [Status]
+      summary: Check the configured public URL
+      description: Probes the MCP endpoint at the supplied HTTPS origin without following redirects.
+      operationId: checkPublicUrl
+      security:
+        - AdminSession: []
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              required: [publicBaseUrl]
+              properties:
+                publicBaseUrl:
+                  type: string
+                  format: uri
+      responses:
+        '200':
+          description: Probe result
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  ok: { type: boolean }
+                  status: { type: [integer, 'null'] }
+                  url: { type: string }
+                  error: { type: string }
+        '400':
+          $ref: '#/components/responses/BadRequest'
+        '401':
+          $ref: '#/components/responses/Unauthorized'
+
   /links:
     get:
       tags: [Access links]
@@ -1711,6 +1747,14 @@ components:
         maxActiveLinks:
           type: integer
           minimum: 1
+        publicBaseUrl:
+          type: string
+          format: uri
+        corsAllowedOrigins:
+          type: array
+          items:
+            type: string
+            format: uri
       additionalProperties: false
 
     AiAccessSettingsResponse:
@@ -1758,6 +1802,12 @@ components:
               $ref: '#/components/schemas/DeploymentType'
             maxActiveLinks:
               type: integer
+            publicBaseUrl:
+              type: string
+            corsAllowedOrigins:
+              type: array
+              items:
+                type: string
         sources:
           type: object
           additionalProperties:

package/docs/mcp-clients.md

@@ -1,5 +1,39 @@
 # MCP client setup
 
+## OAuth (for clients with OAuth discovery)
+
+Enable MCP OAuth in the AI Access editor sidebar and set a public HTTPS origin
+in **Public URL**. Give the client the MCP endpoint
+`https://YOUR-NODE-RED/mcp/rpc`. It can discover the authorization server from
+the protected resource metadata, register itself, and request `read` or
+`propose` scope. Sign in to Node-RED and approve the client on the consent page.
+The sidebar lists registered clients and lets an admin revoke them and their
+tokens. Localhost HTTP is supported for development. If `httpNodeRoot` is
+disabled, see the sidebar warning for the metadata fallback path.
+
+Notes:
+
+- Redirect URIs must use `https://`, or `http://` on a loopback host
+  (`localhost`, `127.0.0.1`, `[::1]`). Custom native-app schemes such as
+  `myapp://callback` are not supported.
+- The consent page uses your Node-RED editor login from the same browser (the
+  editor keeps its token in browser storage, not a cookie). Open the editor on
+  the same origin as the Public URL and sign in first; the consent page offers a
+  Retry button after you sign in.
+- Users with read-only Node-RED permission can approve only the `read` scope;
+  `propose` requires full (`*`) permission.
+- Clients that register but are never approved are removed after one hour and do
+  not count toward the client limit.
+- Refresh tokens are sliding: each refresh renews the idle lifetime. A token
+  chain also has a maximum lifetime of 90 days from approval by default; after
+  that the client must sign in again. Change it in the sidebar (0 = unlimited).
+  Lowering the maximum applies immediately to existing token chains. Raising it
+  or setting 0 does not extend the refresh token a client already holds; the new
+  limit takes effect from that chain's next successful refresh (and for new
+  chains).
+
+## Access-link bearer tokens
+
 Use an **mcp** access-link token from `/mcp` → Access links (kind = MCP token).
 Endpoint: `POST https://YOUR-NODE-RED/mcp/rpc` with
 `Authorization: Bearer <mcp-token>`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@com55/node-red-ai-access",
-  "version": "0.1.1",
+  "version": "0.2.0-beta.2",
   "description": "Node-RED plugin that gives AI agents temporary, owner-approved access via REST and MCP",
   "main": "dist/plugin.cjs",
   "types": "dist/plugin.d.cts",
@@ -82,7 +82,7 @@
   "author": "com55",
   "license": "MIT",
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.31.0",
+    "@modelcontextprotocol/sdk": "^1.32.2",
     "express": "^5.3.0",
     "express-rate-limit": "^8.5.2",
     "yaml": "^2.8.0",
@@ -99,18 +99,18 @@
     "eslint-plugin-import": "^2.32.0",
     "husky": "^9.1.7",
     "lint-staged": "^17.6.0",
-    "node-red": "4.1.12",
+    "node-red": "4.1.17",
     "prettier": "^3.9.10",
     "rimraf": "^6.1.3",
     "supertest": "^7.3.1",
     "tsup": "^8.5.1",
     "typescript": "^5.9.3",
     "typescript-eslint": "^8.71.1",
-    "vite": "^6.4.0",
+    "vite": "^8.3.5",
     "vitest": "^5.0.3"
   },
   "engines": {
-    "node": ">=20.0.0",
+    "node": ">=20.19.0",
     "npm": ">=10.0.0"
   },
   "repository": {