@crypto512/jicon-mcp 2.2.1 → 2.3.19

package/dist/session/context.js

@@ -0,0 +1,107 @@
+/**
+ * Session Context for per-request state access
+ *
+ * Uses AsyncLocalStorage to provide access to session-scoped resources
+ * (buffers, clients, credentials) within tool handlers without passing
+ * them explicitly through function parameters.
+ */
+import { AsyncLocalStorage } from "node:async_hooks";
+/**
+ * AsyncLocalStorage instance for session context
+ */
+const sessionStorage = new AsyncLocalStorage();
+/**
+ * Run a function with session context in scope
+ *
+ * @param context - Session context to make available
+ * @param fn - Function to run with context
+ */
+export function runWithSession(context, fn) {
+    return sessionStorage.run(context, fn);
+}
+/**
+ * Get the current session context
+ * Returns undefined if not running within a session
+ */
+export function getSessionContext() {
+    return sessionStorage.getStore();
+}
+/**
+ * Check if we're running within a session context
+ */
+export function hasSessionContext() {
+    return sessionStorage.getStore() !== undefined;
+}
+// ============================================================================
+// Buffer Access
+// ============================================================================
+/**
+ * Get the ContentBuffer for the current session
+ * Throws if not running within a session context
+ */
+export function getSessionBuffer() {
+    const ctx = sessionStorage.getStore();
+    if (!ctx) {
+        throw new Error("No session context - buffer operations require an active session. " +
+            "Ensure the request is wrapped with runWithSession().");
+    }
+    return ctx.buffer;
+}
+/**
+ * Try to get the session buffer, returning undefined if no session
+ */
+export function tryGetSessionBuffer() {
+    return sessionStorage.getStore()?.buffer;
+}
+// ============================================================================
+// Client Access
+// ============================================================================
+/**
+ * Get the Jira client for the current session
+ * Returns null if Jira is not configured for this session
+ */
+export function getSessionJiraClient() {
+    return sessionStorage.getStore()?.jiraClient ?? null;
+}
+/**
+ * Get the Confluence client for the current session
+ * Returns null if Confluence is not configured for this session
+ */
+export function getSessionConfluenceClient() {
+    return sessionStorage.getStore()?.confluenceClient ?? null;
+}
+/**
+ * Get the Tempo client for the current session
+ * Returns null if Tempo is not configured for this session
+ */
+export function getSessionTempoClient() {
+    return sessionStorage.getStore()?.tempoClient ?? null;
+}
+// ============================================================================
+// Write-Home Validator Access
+// ============================================================================
+/**
+ * Get the WriteHomeValidator for the current session
+ * Returns null if write-home is not enabled or Confluence is not configured
+ */
+export function getSessionWriteHomeValidator() {
+    return sessionStorage.getStore()?.writeHomeValidator ?? null;
+}
+// ============================================================================
+// Credentials Access
+// ============================================================================
+/**
+ * Get credentials from the current session context
+ * Returns empty object if no session context
+ */
+export function getSessionCredentials() {
+    return sessionStorage.getStore()?.credentials ?? {};
+}
+/**
+ * Get the session ID for the current context
+ * Returns undefined if no session context
+ */
+export function getSessionId() {
+    return sessionStorage.getStore()?.sessionId;
+}
+//# sourceMappingURL=context.js.map

package/dist/session/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/session/context.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAqBrD;;GAEG;AACH,MAAM,cAAc,GAAG,IAAI,iBAAiB,EAAkB,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAuB,EACvB,EAAwB;IAExB,OAAO,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,cAAc,CAAC,QAAQ,EAAE,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,cAAc,CAAC,QAAQ,EAAE,KAAK,SAAS,CAAC;AACjD,CAAC;AAED,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,EAAE,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,oEAAoE;YACpE,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,cAAc,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC;AAC3C,CAAC;AAED,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,cAAc,CAAC,QAAQ,EAAE,EAAE,UAAU,IAAI,IAAI,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO,cAAc,CAAC,QAAQ,EAAE,EAAE,gBAAgB,IAAI,IAAI,CAAC;AAC7D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,cAAc,CAAC,QAAQ,EAAE,EAAE,WAAW,IAAI,IAAI,CAAC;AACxD,CAAC;AAED,+EAA+E;AAC/E,8BAA8B;AAC9B,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,UAAU,4BAA4B;IAC1C,OAAO,cAAc,CAAC,QAAQ,EAAE,EAAE,kBAAkB,IAAI,IAAI,CAAC;AAC/D,CAAC;AAED,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,cAAc,CAAC,QAAQ,EAAE,EAAE,WAAW,IAAI,EAAE,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,cAAc,CAAC,QAAQ,EAAE,EAAE,SAAS,CAAC;AAC9C,CAAC"}

package/dist/session/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Session management module
+ *
+ * Provides session-scoped state for MCP requests:
+ * - Per-session content buffers (isolated from other sessions)
+ * - Per-session API clients with their caches
+ * - Per-session WriteHomeValidator
+ * - Automatic session cleanup after timeout
+ */
+export { SessionManager, initializeSessionManager, getSessionManager, shutdownSessionManager, type SessionData, type SessionClients, type SessionManagerConfig, } from "./manager.js";
+export { runWithSession, getSessionContext, hasSessionContext, type SessionContext, getSessionBuffer, tryGetSessionBuffer, getSessionJiraClient, getSessionConfluenceClient, getSessionTempoClient, getSessionWriteHomeValidator, getSessionCredentials, getSessionId, } from "./context.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/session/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/session/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,iBAAiB,EACjB,sBAAsB,EACtB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,KAAK,cAAc,EAEnB,gBAAgB,EAChB,mBAAmB,EAEnB,oBAAoB,EACpB,0BAA0B,EAC1B,qBAAqB,EAErB,4BAA4B,EAE5B,qBAAqB,EACrB,YAAY,GACb,MAAM,cAAc,CAAC"}

package/dist/session/index.js

@@ -0,0 +1,22 @@
+/**
+ * Session management module
+ *
+ * Provides session-scoped state for MCP requests:
+ * - Per-session content buffers (isolated from other sessions)
+ * - Per-session API clients with their caches
+ * - Per-session WriteHomeValidator
+ * - Automatic session cleanup after timeout
+ */
+// Session manager
+export { SessionManager, initializeSessionManager, getSessionManager, shutdownSessionManager, } from "./manager.js";
+// Session context (AsyncLocalStorage)
+export { runWithSession, getSessionContext, hasSessionContext, 
+// Buffer access
+getSessionBuffer, tryGetSessionBuffer, 
+// Client access
+getSessionJiraClient, getSessionConfluenceClient, getSessionTempoClient, 
+// Write-home validator access
+getSessionWriteHomeValidator, 
+// Credentials access
+getSessionCredentials, getSessionId, } from "./context.js";
+//# sourceMappingURL=index.js.map

package/dist/session/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/session/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,kBAAkB;AAClB,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,iBAAiB,EACjB,sBAAsB,GAIvB,MAAM,cAAc,CAAC;AAEtB,sCAAsC;AACtC,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,iBAAiB;AAEjB,gBAAgB;AAChB,gBAAgB,EAChB,mBAAmB;AACnB,gBAAgB;AAChB,oBAAoB,EACpB,0BAA0B,EAC1B,qBAAqB;AACrB,8BAA8B;AAC9B,4BAA4B;AAC5B,qBAAqB;AACrB,qBAAqB,EACrB,YAAY,GACb,MAAM,cAAc,CAAC"}

package/dist/session/manager.d.ts

@@ -0,0 +1,186 @@
+/**
+ * Session Manager for MCP Server
+ *
+ * Manages session lifecycle with per-session:
+ * - Content buffers (isolated from other sessions)
+ * - API clients (with their caches)
+ * - Write-home validators
+ *
+ * Sessions are created on first request with credentials and automatically
+ * cleaned up after 1 hour of inactivity.
+ */
+import { ContentBuffer } from "../utils/content-buffer.js";
+import type { PartialRequestCredentials } from "../credentials/types.js";
+import { JiraClient } from "../jira/client.js";
+import { ConfluenceClient } from "../confluence/client.js";
+import { TempoClient } from "../tempo/client.js";
+import { WriteHomeValidator } from "../permissions/write-home-validator.js";
+import type { ApiConfig } from "../types.js";
+/**
+ * Per-session API clients with their caches
+ */
+export interface SessionClients {
+    jira: JiraClient | null;
+    confluence: ConfluenceClient | null;
+    tempo: TempoClient | null;
+}
+/**
+ * Session data stored by the manager
+ */
+export interface SessionData {
+    sessionId: string;
+    credentials: PartialRequestCredentials;
+    buffer: ContentBuffer;
+    clients: SessionClients;
+    writeHomeValidator: WriteHomeValidator | null;
+    createdAt: number;
+    lastActivity: number;
+}
+/**
+ * Configuration for the session manager
+ */
+export interface SessionManagerConfig {
+    /** Default Jira configuration (from environment) */
+    defaultJiraConfig: ApiConfig | null;
+    /** Default Confluence configuration (from environment) */
+    defaultConfluenceConfig: ApiConfig | null;
+    /** Whether write-home restriction is enabled */
+    writeHomeEnabled: boolean;
+    /** Maximum buffers per session (default: 10) */
+    maxBuffersPerSession?: number;
+    /** Maximum concurrent sessions (default: 1000, DoS protection) */
+    maxSessions?: number;
+    /** Session timeout in milliseconds (default: 15 minutes) */
+    sessionTimeoutMs?: number;
+    /** Callback when a session is destroyed (for transport cleanup coordination) */
+    onSessionDestroyed?: (sessionId: string) => void;
+}
+/**
+ * Session Manager
+ *
+ * Manages per-session state including:
+ * - ContentBuffer instances (isolated per session)
+ * - API clients with their caches
+ * - WriteHomeValidator instances
+ *
+ * Sessions are cleaned up after a configurable timeout of inactivity (default: 1 hour).
+ * The timeout is reset on actual tool calls.
+ */
+export declare class SessionManager {
+    private sessions;
+    private config;
+    private maxSessions;
+    private sessionTimeoutMs;
+    private cleanupInterval;
+    private onSessionDestroyed?;
+    constructor(config: SessionManagerConfig);
+    /**
+     * Start the session cleanup interval
+     * Checks every minute for sessions that have exceeded the timeout
+     */
+    private startCleanupInterval;
+    /**
+     * Clean up sessions that have exceeded the inactivity timeout
+     */
+    private cleanupTimedOutSessions;
+    /**
+     * Create a new session with the given credentials
+     * @throws Error if maximum sessions limit reached (DoS protection)
+     */
+    createSession(sessionId: string, credentials: PartialRequestCredentials): SessionData;
+    /**
+     * Get an existing session by ID
+     * Updates the lastActivity timestamp on access
+     */
+    getSession(sessionId: string): SessionData | undefined;
+    /**
+     * Get or create a session
+     * If session exists, returns it (and updates lastActivity)
+     * If session doesn't exist, creates it with the given credentials
+     *
+     * If existing session has different credentials than the request,
+     * recreates the affected clients to use the new credentials.
+     * This ensures per-request credential isolation in multi-user scenarios.
+     */
+    getOrCreateSession(sessionId: string, credentials: PartialRequestCredentials): SessionData;
+    /**
+     * Update session clients in-place when credentials change
+     * This preserves the session and its transport connection while updating API clients
+     *
+     * @param session - The existing session to update
+     * @param credentials - New credentials from the request
+     * @param options - Flags indicating which credentials changed
+     */
+    private updateSessionClients;
+    /**
+     * Destroy a session and clean up its resources
+     * Also triggers onSessionDestroyed callback for transport cleanup
+     */
+    destroySession(sessionId: string): void;
+    /**
+     * Get the number of active sessions
+     */
+    getSessionCount(): number;
+    /**
+     * Get the maximum sessions limit
+     */
+    getMaxSessions(): number;
+    /**
+     * Check if a session exists without updating its activity timestamp
+     */
+    hasSession(sessionId: string): boolean;
+    /**
+     * Update session activity timestamp without returning full session data
+     * Used to extend session lifetime when real activity occurs (tool calls)
+     *
+     * @returns true if session was found, false otherwise
+     */
+    touchSession(sessionId: string): boolean;
+    /**
+     * Set the callback for when a session is destroyed
+     * Used by HTTP transport for coordinated transport cleanup
+     */
+    setSessionDestroyedCallback(callback: (sessionId: string) => void): void;
+    /**
+     * Shutdown the session manager
+     * Destroys all sessions and stops the cleanup interval
+     */
+    shutdown(): void;
+    /**
+     * Get the session timeout in milliseconds
+     */
+    getSessionTimeoutMs(): number;
+    /**
+     * Resolve Jira configuration by merging partial per-request credentials with defaults
+     *
+     * Priority: per-request > environment defaults
+     * - URL from header OR URL from env
+     * - Token from header OR token from env
+     * - Both must be present for a valid config
+     */
+    private resolveJiraConfig;
+    /**
+     * Resolve Confluence configuration by merging partial per-request credentials with defaults
+     *
+     * Priority: per-request > environment defaults
+     * - URL from header OR URL from env
+     * - Token from header OR token from env
+     * - Both must be present for a valid config
+     */
+    private resolveConfluenceConfig;
+}
+/**
+ * Initialize the session manager singleton
+ * Must be called once during server startup
+ */
+export declare function initializeSessionManager(config: SessionManagerConfig): SessionManager;
+/**
+ * Get the session manager singleton
+ * Throws if not initialized
+ */
+export declare function getSessionManager(): SessionManager;
+/**
+ * Shutdown the session manager singleton
+ */
+export declare function shutdownSessionManager(): void;
+//# sourceMappingURL=manager.d.ts.map

package/dist/session/manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/session/manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAC5E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAQ7C;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACpC,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,yBAAyB,CAAC;IACvC,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,cAAc,CAAC;IACxB,kBAAkB,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,oDAAoD;IACpD,iBAAiB,EAAE,SAAS,GAAG,IAAI,CAAC;IACpC,0DAA0D;IAC1D,uBAAuB,EAAE,SAAS,GAAG,IAAI,CAAC;IAC1C,gDAAgD;IAChD,gBAAgB,EAAE,OAAO,CAAC;IAC1B,gDAAgD;IAChD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gFAAgF;IAChF,kBAAkB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;CAClD;AAGD;;;;;;;;;;GAUG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAkC;IAClD,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,gBAAgB,CAAS;IACjC,OAAO,CAAC,eAAe,CAA+B;IACtD,OAAO,CAAC,kBAAkB,CAAC,CAA8B;gBAE7C,MAAM,EAAE,oBAAoB;IAUxC;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAU5B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAc/B;;;OAGG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,yBAAyB,GAAG,WAAW;IAgDrF;;;OAGG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAQtD;;;;;;;;OAQG;IACH,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,yBAAyB,GAAG,WAAW;IA2B1F;;;;;;;OAOG;IACH,OAAO,CAAC,oBAAoB;IA4C5B;;;OAGG;IACH,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAmBvC;;OAEG;IACH,eAAe,IAAI,MAAM;IAIzB;;OAEG;IACH,cAAc,IAAI,MAAM;IAIxB;;OAEG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAItC;;;;;OAKG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IASxC;;;OAGG;IACH,2BAA2B,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI;IAIxE;;;OAGG;IACH,QAAQ,IAAI,IAAI;IAehB;;OAEG;IACH,mBAAmB,IAAI,MAAM;IAI7B;;;;;;;OAOG;IACH,OAAO,CAAC,iBAAiB;IA4BzB;;;;;;;OAOG;IACH,OAAO,CAAC,uBAAuB;CA2BhC;AAKD;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,oBAAoB,GAAG,cAAc,CAOrF;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,cAAc,CAKlD;AAED;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,IAAI,CAK7C"}