@com55/node-red-ai-access 0.2.0-beta.1 → 0.2.0-beta.3

package/dist/plugin.d.cts

@@ -23,8 +23,11 @@ interface AccessLinkCreated extends AccessLinkPublic {
 interface AccessLinkRecord {
     id: string;
     tokenHash: string;
-    /** Raw token kept in memory so admins can re-copy the GET URL. */
-    token: string;
+    /**
+     * @deprecated Legacy field: raw tokens are no longer kept. Only `tokenHash` is
+     * used for validation; any `token` on an inserted record is dropped.
+     */
+    token?: string;
     /**
      * Token surface. Optional for in-memory migration of pre-kind records
      * (treated as `get_link` by {@link resolveAccessLinkKind}).
@@ -82,11 +85,6 @@ declare class AccessLinkStore {
     private isActive;
     list(): AccessLinkPublic[];
     create(input?: CreateAccessLinkInput): AccessLinkCreated;
-    /**
-     * Raw token for an active link (in-memory only). Used to rebuild the GET URL
-     * for admin "Copy link" — never logs the value.
-     */
-    peekToken(linkId: string): string | null;
     revoke(linkId: string): AccessLinkPublic;
     /**
      * Look up a link by id even if revoked/expired (still in memory).
@@ -602,7 +600,11 @@ interface NodeRedPluginSettings {
     userDir: string;
     httpAdminRoot?: string;
     httpNodeRoot?: string | false;
-    httpStatic?: string | string[];
+    httpStatic?: string | (string | {
+        path: string;
+        root?: string;
+    })[];
+    httpStaticRoot?: string;
     adminAuth?: unknown;
     aiAccess?: AiAccessSettings;
 }
@@ -615,8 +617,13 @@ interface NodeRedPluginAPI {
     httpNode?: Express;
     nodes?: {
         eachNode(listener: (node: {
+            id?: string;
             type?: string;
             url?: string;
+            name?: string;
+            z?: string;
+            d?: boolean;
+            disabled?: boolean;
         }) => void): void;
     };
     events?: {
@@ -752,14 +759,21 @@ declare function packageVersion(): string;
 /**
  * Node-RED plugin entry for @com55/node-red-ai-access.
  *
- * Registers /mcp admin page, access links, proposals, flows, logs APIs,
+ * Registers the /ai-access dashboard, access links, proposals, flows, logs APIs,
  * and the /mcp/rpc Streamable HTTP endpoint.
  */
 
+/**
+ * True for MCP Streamable HTTP GET requests (they ask for `text/event-stream`
+ * and not HTML). Browsers opening `/mcp` are redirected to `/ai-access`.
+ */
+/** Media ranges from an Accept header with q > 0 (q=0 means "not acceptable"). */
+declare function acceptedMediaTypes(accept: string | undefined): Set<string>;
+declare function isMcpStreamRequest(req: Request): boolean;
 declare function registerRoutes(RED: NodeRedPluginAPI, serviceOptions?: CreatePluginServicesOptions): void;
 /**
  * Node-RED plugin factory. Loaded via `ai-access.cjs` → `dist/plugin.cjs`.
  */
 declare function registerAiAccessPlugin(RED: NodeRedPluginAPI): void;
 
-export { ACCESS_LINK_INVALID_MESSAGE, ACCESS_LINK_MISSING_MESSAGE, type AccessLinkAuthInfo, AccessLinkStore, type AiAccessCapabilities, type AiAccessPermission, type AiAccessSettings, type AiAccessStatus, EDITOR_SIDEBAR_ASSET_VERSION, MAX_PROPOSAL_JSON_BYTES, type NodeRedPluginAPI, SettingsStore, areAiFeaturesEnabled, bindSettingsStore, createPluginServices, registerAiAccessPlugin as default, getStorageDir, isAdminAuthEnabled, packageVersion, registerRoutes, renderEditorSidebarJs, renderEditorSidebarLoaderHtml, requireAccessLink, resolveAiAccessSettings };
+export { ACCESS_LINK_INVALID_MESSAGE, ACCESS_LINK_MISSING_MESSAGE, type AccessLinkAuthInfo, AccessLinkStore, type AiAccessCapabilities, type AiAccessPermission, type AiAccessSettings, type AiAccessStatus, EDITOR_SIDEBAR_ASSET_VERSION, MAX_PROPOSAL_JSON_BYTES, type NodeRedPluginAPI, SettingsStore, acceptedMediaTypes, areAiFeaturesEnabled, bindSettingsStore, createPluginServices, registerAiAccessPlugin as default, getStorageDir, isAdminAuthEnabled, isMcpStreamRequest, packageVersion, registerRoutes, renderEditorSidebarJs, renderEditorSidebarLoaderHtml, requireAccessLink, resolveAiAccessSettings };

package/docs/README.md

@@ -24,5 +24,5 @@ bodies. Use a **GET link** only as a fallback for headerless GET-only clients.
   `GET /mcp/api/v1/openapi.yaml` (JSON: `GET /mcp/api/v1/openapi.json`)
 - Discovery guide — `GET /mcp/api/v1` (unauthenticated JSON index)
 
-Mint tokens on the admin page at `/mcp` → **Access links** (admin `*` only).
-Each token works on **one** surface; wrong kind → `403 wrong_token_kind`.
+Mint tokens on the dashboard at `/ai-access` → **Access tokens** (admin `*`
+only). Each token works on **one** surface; wrong kind → `403 wrong_token_kind`.

package/docs/api/openapi.yaml

@@ -1361,8 +1361,8 @@ components:
                 error: 'Access link token has expired. Ask the user for a new access link.'
                 code: token_expired
                 expiredAt: '2026-01-01T12:00:00.000Z'
-                accessLinksUrl: 'https://node-red.example/mcp#links'
-                hint: 'Ask the user to create a new access link in Node-RED on the /mcp page → Access links (https://node-red.example/mcp#links).'
+                accessLinksUrl: 'https://node-red.example/ai-access#links'
+                hint: 'Ask the user to create a new access link in Node-RED on the /ai-access dashboard → Access tokens (https://node-red.example/ai-access#links).'
             askForNewLink:
               value:
                 error: 'Access link is invalid, revoked, or no longer available after a restart. Ask the user for a new access link.'
@@ -2252,14 +2252,14 @@ components:
         reviewUrl:
           type: string
           description: |
-            Absolute deep link (`https://host/mcp#proposal=<id>`) built from the
+            Absolute deep link (`https://host/ai-access#proposal=<id>`) built from the
             request Host/protocol. Uses `X-Forwarded-Host` / `X-Forwarded-Proto`
             only when Express `trust proxy` is enabled; otherwise falls back to
             the relative `reviewPath` when Host is unavailable.
         reviewPath:
           type: string
           description: |
-            Relative deep link `/mcp#proposal=<id>` (under `httpAdminRoot` when
+            Relative deep link `/ai-access#proposal=<id>` (under `httpAdminRoot` when
             set) that opens the admin page, switches to Proposals, and
             scrolls/highlights this item.
         createdBy:
@@ -2501,7 +2501,7 @@ components:
         preview:
           type: string
           enum: [html]
-          description: When set, the /mcp UI may offer a sandboxed HTML preview.
+          description: When set, the /ai-access dashboard may offer a sandboxed HTML preview.
 
     ProposalDiffPresenceNode:
       type: object

package/docs/errors.md

@@ -15,9 +15,9 @@ GET-link `401` responses include a `WWW-Authenticate: Bearer …` header.
 | --- | --- | --- | --- | --- |
 | `access_link_missing` | 401 | No Bearer / path token | Ask the user for a new access link of the right kind | GET, REST, MCP |
 | `bearer_scheme_required` | 401 | Auth used Basic (or non-Bearer) | Send `Authorization: Bearer <token>` | REST, MCP |
-| `token_expired` | 401 | Known token past `expiresAt` (body includes `expiredAt` and `accessLinksUrl`) | Ask the user to create a new link on the `/mcp` page → Access links (`accessLinksUrl`) | GET, REST, MCP |
+| `token_expired` | 401 | Known token past `expiresAt` (body includes `expiredAt` and `accessLinksUrl`) | Ask the user to create a new link on the `/ai-access` dashboard → Access tokens (`accessLinksUrl`) | GET, REST, MCP |
 | `access_link_invalid` | 401 | Unknown, revoked, or cleared after restart | Ask the user for a new access link | GET, REST, MCP |
-| `wrong_token_kind` | 403 | Token kind does not match this surface | Mint the matching kind on `/mcp` → Access links; show `tellUser` to the human | GET, REST, MCP |
+| `wrong_token_kind` | 403 | Token kind does not match this surface | Mint the matching kind on `/ai-access` → Access tokens; show `tellUser` to the human | GET, REST, MCP |
 | `ai_features_disabled` | 403 | Plugin AI features off | Owner enables AI Access / `adminAuth` | GET, REST, MCP |
 | `auth_required` | 401 | Admin session required | Sign in to the Node-RED editor | admin |
 | `insufficient_permissions` | 403 | Admin lacks required scope | Need `*` for link mint / approve | admin |

package/docs/mcp-clients.md

@@ -2,14 +2,15 @@
 
 ## OAuth (for clients with OAuth discovery)
 
-Enable MCP OAuth in the AI Access editor sidebar and set a public HTTPS origin
-in **Public URL**. Give the client the MCP endpoint
-`https://YOUR-NODE-RED/mcp/rpc`. It can discover the authorization server from
-the protected resource metadata, register itself, and request `read` or
-`propose` scope. Sign in to Node-RED and approve the client on the consent page.
-The sidebar lists registered clients and lets an admin revoke them and their
-tokens. Localhost HTTP is supported for development. If `httpNodeRoot` is
-disabled, see the sidebar warning for the metadata fallback path.
+Enable MCP OAuth (AI Access editor sidebar, or the dashboard **OAuth** tab at
+`/ai-access`) and set a public HTTPS origin in **Public URL** (dashboard
+**Settings** tab). Give the client the MCP endpoint `https://YOUR-NODE-RED/mcp`
+(`/mcp/rpc` also works). It can discover the authorization server from the
+protected resource metadata, register itself, and request `read` or `propose`
+scope. Sign in to Node-RED and approve the client on the consent page. The
+dashboard **OAuth** tab lists registered clients and lets an admin revoke them
+and their tokens. Localhost HTTP is supported for development. If `httpNodeRoot`
+is disabled, see the OAuth tab for the metadata fallback path.
 
 Notes:
 
@@ -26,16 +27,16 @@ Notes:
   not count toward the client limit.
 - Refresh tokens are sliding: each refresh renews the idle lifetime. A token
   chain also has a maximum lifetime of 90 days from approval by default; after
-  that the client must sign in again. Change it in the sidebar (0 = unlimited).
-  Lowering the maximum applies immediately to existing token chains. Raising it
-  or setting 0 does not extend the refresh token a client already holds; the new
-  limit takes effect from that chain's next successful refresh (and for new
-  chains).
+  that the client must sign in again. Change it on the dashboard OAuth tab (0 =
+  unlimited). Lowering the maximum applies immediately to existing token chains.
+  Raising it or setting 0 does not extend the refresh token a client already
+  holds; the new limit takes effect from that chain's next successful refresh
+  (and for new chains).
 
 ## Access-link bearer tokens
 
-Use an **mcp** access-link token from `/mcp` → Access links (kind = MCP token).
-Endpoint: `POST https://YOUR-NODE-RED/mcp/rpc` with
+Use an **mcp** access-link token from `/ai-access` → Access tokens (kind = MCP
+token). Endpoint: `POST https://YOUR-NODE-RED/mcp/rpc` with
 `Authorization: Bearer <mcp-token>`.
 
 If your AI app cannot add MCP servers, create a **REST** or **GET link** token

package/docs/mcp-tools.md

@@ -126,7 +126,7 @@ Search the public Node-RED catalogue for modules to recommend. Returns module id
 
 ## `submit_proposal`
 
-Submit a replace_flow proposal for owner approval (does not deploy). Preferred for small string edits: payload: { flowId, nodes: [{ op:"replace_text", node, field, find, replace, occurrence? }] } — find must be unique unless occurrence (1-based) is set; multiple replace_text ops apply in order; yields a short readable diff. Or send a full tab: payload.flow from get_flow (id, type, label?, nodes[], configs?). Inputs (all top-level, next to each other): type="replace_flow", expectedRev (required string from list_flows/get_flow rev; expected_rev alias accepted), optional title (≤80 chars), and payload: { flowId, flow? } and/or payload.nodes / top-level nodes. Do not nest expectedRev inside payload. Payload size limit is 1500000 bytes (413 if exceeded). expectedRev is checked against the live rev at submit time (409 if stale). replace_text errors: 400 text_not_found; 409 ambiguous_match with matchCount. Unknown palette types return 400 unknown_node_type with nearest matches — call list_node_types / search_palette and ask the user to install via Manage palette (never auto-install). Returns a lean proposal (id, status, title, storedTitle, flowLabel, displayName, reviewUrl, changeSummary, …) by default; title may gain " in <flow>"; storedTitle is the title as saved (your title without that suffix, or the auto-generated title, which may already name the flow). Pass include_payload=true to include payload and baseFlow. When telling the user about the proposal, cite displayName and reviewUrl — not the raw id. Humans approve on the /mcp page (reviewUrl opens/scrolls to it).
+Submit a replace_flow proposal for owner approval (does not deploy). Preferred for small string edits: payload: { flowId, nodes: [{ op:"replace_text", node, field, find, replace, occurrence? }] } — find must be unique unless occurrence (1-based) is set; multiple replace_text ops apply in order; yields a short readable diff. Or send a full tab: payload.flow from get_flow (id, type, label?, nodes[], configs?). Inputs (all top-level, next to each other): type="replace_flow", expectedRev (required string from list_flows/get_flow rev; expected_rev alias accepted), optional title (≤80 chars), and payload: { flowId, flow? } and/or payload.nodes / top-level nodes. Do not nest expectedRev inside payload. Payload size limit is 1500000 bytes (413 if exceeded). expectedRev is checked against the live rev at submit time (409 if stale). replace_text errors: 400 text_not_found; 409 ambiguous_match with matchCount. Unknown palette types return 400 unknown_node_type with nearest matches — call list_node_types / search_palette and ask the user to install via Manage palette (never auto-install). Returns a lean proposal (id, status, title, storedTitle, flowLabel, displayName, reviewUrl, changeSummary, …) by default; title may gain " in <flow>"; storedTitle is the title as saved (your title without that suffix, or the auto-generated title, which may already name the flow). Pass include_payload=true to include payload and baseFlow. When telling the user about the proposal, cite displayName and reviewUrl — not the raw id. Humans approve on the /ai-access dashboard (reviewUrl opens/scrolls to it).
 
 | Parameter | Required | Type | Description |
 | --- | --- | --- | --- |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@com55/node-red-ai-access",
-  "version": "0.2.0-beta.1",
+  "version": "0.2.0-beta.3",
   "description": "Node-RED plugin that gives AI agents temporary, owner-approved access via REST and MCP",
   "main": "dist/plugin.cjs",
   "types": "dist/plugin.d.cts",