@creezio/mcp-facade 0.22.0

package/dist/oauth/index.d.ts

@@ -0,0 +1,9 @@
+export type { CreateMcpHonoAppOptions, McpApiKeyRecord, McpConnectedServer, McpOAuthAdapters, McpOAuthRoutesConfig, McpOAuthSession, McpOAuthSessionBridge, McpOAuthSessionUser, McpOAuthSqliteDatabase, McpServerAuthContext, McpStreamableTransport, } from "./types.js";
+export { ACCESS_TOKEN_TTL_S, REFRESH_TOKEN_TTL_S, MCP_SCOPE, MCP_SCOPE_LEGACY, MCP_SCOPE_READ, MCP_SCOPE_WRITE, MCP_SCOPES, McpPublicUrlRequiredError, canonicalizeMcpUrl, configureMcpOAuth, consumeAuthCode, createAuthCode, createRefreshToken, getClient, getMcpOAuthAdapters, isMcpPublicUrlRequiredError, mcpBaseUrl, mcpOauthReady, mcpResourceUrl, normalizeMcpScopes, peekAuthCode, pruneExpiredCodes, registerClient, resetMcpOAuthAdaptersForTests, resolveMcpPublicUrl, resourceAcceptable, rotateRefreshToken, signAccessToken, touchOAuthClientLastUsed, verifyAccessToken, verifyClientSecret, verifyPkceS256, } from "./store.js";
+export type { ConsumedCode, CreateCodeInput, McpAccessToken, McpOAuthClient, RegisterClientInput, RotatedRefresh, } from "./store.js";
+export { checkMcpRateLimit, rateLimitHeaders, resetMcpRateLimits, } from "./rate-limit.js";
+export type { McpRateLimitResult } from "./rate-limit.js";
+export { mcpCorsAllowlist, resolveMcpCorsOrigin } from "./cors-policy.js";
+export { createMcpOAuthRoutes } from "./routes.js";
+export { createMcpHonoApp } from "./hono-app.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/oauth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/oauth/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,uBAAuB,EACvB,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,UAAU,EACV,yBAAyB,EACzB,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,SAAS,EACT,mBAAmB,EACnB,2BAA2B,EAC3B,UAAU,EACV,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,cAAc,EACd,6BAA6B,EAC7B,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,wBAAwB,EACxB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,GACf,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,YAAY,EACZ,eAAe,EACf,cAAc,EACd,cAAc,EACd,mBAAmB,EACnB,cAAc,GACf,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAE1D,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAE1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC"}

package/dist/oauth/index.js

@@ -0,0 +1,6 @@
+export { ACCESS_TOKEN_TTL_S, REFRESH_TOKEN_TTL_S, MCP_SCOPE, MCP_SCOPE_LEGACY, MCP_SCOPE_READ, MCP_SCOPE_WRITE, MCP_SCOPES, McpPublicUrlRequiredError, canonicalizeMcpUrl, configureMcpOAuth, consumeAuthCode, createAuthCode, createRefreshToken, getClient, getMcpOAuthAdapters, isMcpPublicUrlRequiredError, mcpBaseUrl, mcpOauthReady, mcpResourceUrl, normalizeMcpScopes, peekAuthCode, pruneExpiredCodes, registerClient, resetMcpOAuthAdaptersForTests, resolveMcpPublicUrl, resourceAcceptable, rotateRefreshToken, signAccessToken, touchOAuthClientLastUsed, verifyAccessToken, verifyClientSecret, verifyPkceS256, } from "./store.js";
+export { checkMcpRateLimit, rateLimitHeaders, resetMcpRateLimits, } from "./rate-limit.js";
+export { mcpCorsAllowlist, resolveMcpCorsOrigin } from "./cors-policy.js";
+export { createMcpOAuthRoutes } from "./routes.js";
+export { createMcpHonoApp } from "./hono-app.js";
+//# sourceMappingURL=index.js.map

package/dist/oauth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/oauth/index.ts"],"names":[],"mappings":"AAcA,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,UAAU,EACV,yBAAyB,EACzB,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,SAAS,EACT,mBAAmB,EACnB,2BAA2B,EAC3B,UAAU,EACV,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,cAAc,EACd,6BAA6B,EAC7B,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,wBAAwB,EACxB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,GACf,MAAM,YAAY,CAAC;AAUpB,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAE1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC"}

package/dist/oauth/rate-limit.d.ts

@@ -0,0 +1,11 @@
+export type McpRateLimitResult = {
+    ok: boolean;
+    limit: number;
+    remaining: number;
+    retryAfter: number;
+};
+export declare function checkMcpRateLimit(bucket: string, limit: number, windowMs: number): McpRateLimitResult;
+export declare function rateLimitHeaders(result: McpRateLimitResult): Record<string, string>;
+/** Réservé aux tests ciblés. */
+export declare function resetMcpRateLimits(): void;
+//# sourceMappingURL=rate-limit.d.ts.map

package/dist/oauth/rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../src/oauth/rate-limit.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,kBAAkB,GAAG;IAC/B,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACf,kBAAkB,CAqBpB;AAED,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,kBAAkB,GACzB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAMxB;AAED,gCAAgC;AAChC,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC"}

package/dist/oauth/rate-limit.js

@@ -0,0 +1,32 @@
+const windows = new Map();
+export function checkMcpRateLimit(bucket, limit, windowMs) {
+    const now = Date.now();
+    let state = windows.get(bucket);
+    if (!state || now - state.startedAt >= windowMs) {
+        state = { startedAt: now, hits: 0 };
+        windows.set(bucket, state);
+    }
+    const retryAfter = Math.max(1, Math.ceil((state.startedAt + windowMs - now) / 1000));
+    if (state.hits >= limit) {
+        return { ok: false, limit, remaining: 0, retryAfter };
+    }
+    state.hits += 1;
+    return {
+        ok: true,
+        limit,
+        remaining: Math.max(0, limit - state.hits),
+        retryAfter,
+    };
+}
+export function rateLimitHeaders(result) {
+    return {
+        "X-RateLimit-Limit": String(result.limit),
+        "X-RateLimit-Remaining": String(result.remaining),
+        ...(result.ok ? {} : { "Retry-After": String(result.retryAfter) }),
+    };
+}
+/** Réservé aux tests ciblés. */
+export function resetMcpRateLimits() {
+    windows.clear();
+}
+//# sourceMappingURL=rate-limit.js.map

package/dist/oauth/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../src/oauth/rate-limit.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;AAS/C,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,KAAa,EACb,QAAgB;IAEhB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,IAAI,QAAQ,EAAE,CAAC;QAChD,KAAK,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CACzB,CAAC,EACD,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,GAAG,QAAQ,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CACrD,CAAC;IACF,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC;IACxD,CAAC;IACD,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;IAChB,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK;QACL,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC;QAC1C,UAAU;KACX,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,MAA0B;IAE1B,OAAO;QACL,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QACzC,uBAAuB,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;QACjD,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,gCAAgC;AAChC,MAAM,UAAU,kBAAkB;IAChC,OAAO,CAAC,KAAK,EAAE,CAAC;AAClB,CAAC"}

package/dist/oauth/routes.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Endpoints OAuth 2.1 du serveur MCP — SoT kit (port TempoFlow gold).
+ * Branding / session / cookie injectables via McpOAuthRoutesConfig.
+ */
+import { Hono } from "hono";
+import type { McpOAuthRoutesConfig } from "./types.js";
+export declare function createMcpOAuthRoutes(config: McpOAuthRoutesConfig): Hono;
+//# sourceMappingURL=routes.d.ts.map

package/dist/oauth/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/oauth/routes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AA0B5B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAOvD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAk0BvE"}