@dain-os/mcp-server 0.11.0 → 0.13.0

package/dist/oauth/config.js

@@ -0,0 +1,74 @@
+/**
+ * Configuration for the MCP server's embedded OAuth 2.1 authorization server.
+ *
+ * The cloud endpoint (mcp.dainos.app) is reachable from Claude in the browser,
+ * which only speaks OAuth — it has no field for a static Bearer token. So this
+ * server acts as a minimal, STATELESS OAuth authorization server that bridges
+ * the browser's OAuth flow onto the existing DainOS Personal Access Token (PAT)
+ * model:
+ *
+ *   - The user pastes a `dain_pat_...` token on the consent page (`/authorize`).
+ *   - We issue an OAuth authorization code, then access/refresh tokens, each of
+ *     which is an ENCRYPTED JWT (JWE) that embeds the PAT.
+ *   - On `/mcp`, we decrypt the access token to recover the PAT and call
+ *     api.dainos.app exactly as the Claude Code (raw-PAT) path does today.
+ *
+ * Statelessness is deliberate: the Vercel function has no datastore. Every
+ * token carries its own state, signed + encrypted under MCP_OAUTH_SECRET.
+ */
+import { createHash } from 'node:crypto';
+/** Env var holding the canonical public origin, e.g. `https://mcp.dainos.app`. */
+export const PUBLIC_URL_ENV = 'MCP_PUBLIC_URL';
+export const DEFAULT_PUBLIC_URL = 'https://mcp.dainos.app';
+/** Env var holding the symmetric secret used to encrypt every issued token. */
+export const OAUTH_SECRET_ENV = 'MCP_OAUTH_SECRET';
+/** Token lifetimes (seconds). */
+export const ACCESS_TOKEN_TTL_SECONDS = 60 * 60; // 1 hour
+export const REFRESH_TOKEN_TTL_SECONDS = 60 * 60 * 24 * 90; // 90 days
+// 30 seconds. NOTE: a stateless server cannot mark a code consumed, so a code
+// is technically replayable inside this window. PKCE bounds the risk (a code is
+// useless without the matching verifier, held only by the originating client),
+// and the short TTL shrinks the window. True single-use would require a store.
+export const AUTH_CODE_TTL_SECONDS = 30;
+export const CLIENT_REG_TTL_SECONDS = 60 * 60 * 24 * 365; // 1 year
+/** The single scope this server understands. */
+export const SCOPE = 'mcp';
+/** The DainOS PAT prefix. Kept in lock-step with the API's `PAT_PREFIX`. */
+export const PAT_PREFIX = 'dain_pat_';
+/** Where users mint a PAT. Surfaced on the consent page. */
+export const PAT_SETTINGS_URL = 'https://dainos.app/settings/api-tokens';
+/**
+ * Resolve this server's public base URL.
+ *
+ * Pinned to the configured canonical origin (MCP_PUBLIC_URL, default
+ * mcp.dainos.app). The inbound `Host` header is deliberately NOT trusted: it is
+ * attacker-controllable (a direct request to the raw function URL can carry any
+ * Host), and letting it set the issuer / authorization_endpoint / token_endpoint
+ * in the discovery documents (and the resource_metadata in the WWW-Authenticate
+ * challenge) would let a spoofed Host point an OAuth client's token fetch at an
+ * attacker-controlled endpoint. The connector always targets the canonical URL,
+ * so pinning is also correct, not just safe.
+ */
+export function resolveBaseUrl() {
+    return process.env[PUBLIC_URL_ENV] ?? DEFAULT_PUBLIC_URL;
+}
+/**
+ * Derive a 32-byte AES key from MCP_OAUTH_SECRET via SHA-256.
+ *
+ * @throws if the secret is missing or too short. The caller turns this into a
+ *   clear 500/oauth-disabled response rather than leaking a stack trace.
+ */
+export function getEncryptionKey() {
+    const secret = process.env[OAUTH_SECRET_ENV];
+    if (!secret || secret.length < 16) {
+        throw new Error(`${OAUTH_SECRET_ENV} is not set (need at least 16 characters). ` +
+            'The OAuth endpoints are disabled until it is configured on the deployment.');
+    }
+    return new Uint8Array(createHash('sha256').update(secret).digest());
+}
+/** True when the OAuth layer is configured and able to issue/verify tokens. */
+export function isOAuthConfigured() {
+    const secret = process.env[OAUTH_SECRET_ENV];
+    return typeof secret === 'string' && secret.length >= 16;
+}
+//# sourceMappingURL=config.js.map

package/dist/oauth/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/oauth/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,kFAAkF;AAClF,MAAM,CAAC,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAC/C,MAAM,CAAC,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;AAE3D,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAEnD,iCAAiC;AACjC,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,SAAS;AAC1D,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,UAAU;AACtE,8EAA8E;AAC9E,gFAAgF;AAChF,+EAA+E;AAC/E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACxC,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,SAAS;AAEnE,gDAAgD;AAChD,MAAM,CAAC,MAAM,KAAK,GAAG,KAAK,CAAC;AAE3B,4EAA4E;AAC5E,MAAM,CAAC,MAAM,UAAU,GAAG,WAAW,CAAC;AAEtC,4DAA4D;AAC5D,MAAM,CAAC,MAAM,gBAAgB,GAAG,wCAAwC,CAAC;AAEzE;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,kBAAkB,CAAC;AAC3D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,GAAG,gBAAgB,6CAA6C;YAC9D,4EAA4E,CAC/E,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,iBAAiB;IAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC7C,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;AAC3D,CAAC"}

package/dist/oauth/consent-page.d.ts

@@ -0,0 +1,24 @@
+/**
+ * The paste-PAT consent page served at GET /authorize.
+ *
+ * This is the one human-facing surface of the OAuth bridge. The user mints a
+ * DainOS API token, pastes it here, and the form POSTs back to /authorize,
+ * which issues an authorization code. All copy follows the project copy-style
+ * rule: UK English, no em/en dashes, plain ASCII punctuation.
+ *
+ * Every interpolated value originates from the OAuth client request, so it is
+ * HTML-escaped before it lands in an attribute. The PAT field is never
+ * pre-filled and is rendered as a password input.
+ */
+export interface ConsentPageParams {
+    clientId: string;
+    redirectUri: string;
+    codeChallenge: string;
+    codeChallengeMethod: string;
+    state?: string;
+    scope?: string;
+    /** Optional error banner shown after a rejected submission. */
+    error?: string;
+}
+export declare function renderConsentPage(params: ConsentPageParams): string;
+//# sourceMappingURL=consent-page.d.ts.map

package/dist/oauth/consent-page.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent-page.d.ts","sourceRoot":"","sources":["../../src/oauth/consent-page.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAgBD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAuEnE"}

package/dist/oauth/consent-page.js

@@ -0,0 +1,98 @@
+/**
+ * The paste-PAT consent page served at GET /authorize.
+ *
+ * This is the one human-facing surface of the OAuth bridge. The user mints a
+ * DainOS API token, pastes it here, and the form POSTs back to /authorize,
+ * which issues an authorization code. All copy follows the project copy-style
+ * rule: UK English, no em/en dashes, plain ASCII punctuation.
+ *
+ * Every interpolated value originates from the OAuth client request, so it is
+ * HTML-escaped before it lands in an attribute. The PAT field is never
+ * pre-filled and is rendered as a password input.
+ */
+import { PAT_SETTINGS_URL } from './config.js';
+function escapeHtml(value) {
+    return value
+        .replace(/&/g, '&')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&#39;');
+}
+function hiddenField(name, value) {
+    if (value === undefined)
+        return '';
+    return `<input type="hidden" name="${escapeHtml(name)}" value="${escapeHtml(value)}" />`;
+}
+export function renderConsentPage(params) {
+    const errorBanner = params.error
+        ? `<p class="error" role="alert">${escapeHtml(params.error)}</p>`
+        : '';
+    return `<!DOCTYPE html>
+<html lang="en-GB">
+<head>
+<meta charset="utf-8" />
+<meta name="viewport" content="width=device-width, initial-scale=1" />
+<meta name="robots" content="noindex" />
+<title>Connect Claude to DainOS</title>
+<style>
+  :root { color-scheme: light dark; }
+  * { box-sizing: border-box; }
+  body {
+    font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
+    margin: 0; min-height: 100vh; display: flex; align-items: center; justify-content: center;
+    background: #0b1120; color: #e2e8f0; padding: 24px;
+  }
+  .card {
+    width: 100%; max-width: 460px; background: #111827; border: 1px solid #1f2937;
+    border-radius: 14px; padding: 32px; box-shadow: 0 10px 40px rgba(0,0,0,0.4);
+  }
+  h1 { font-size: 20px; margin: 0 0 8px; }
+  p { font-size: 14px; line-height: 1.5; color: #94a3b8; margin: 0 0 16px; }
+  ol { font-size: 14px; line-height: 1.6; color: #cbd5e1; padding-left: 20px; margin: 0 0 20px; }
+  a { color: #60a5fa; }
+  label { display: block; font-size: 13px; font-weight: 600; margin: 0 0 6px; color: #e2e8f0; }
+  input[type="password"] {
+    width: 100%; padding: 11px 12px; font-size: 14px; border-radius: 8px;
+    border: 1px solid #334155; background: #0b1120; color: #e2e8f0; font-family: monospace;
+  }
+  input[type="password"]:focus { outline: 2px solid #2563eb; border-color: #2563eb; }
+  button {
+    width: 100%; margin-top: 18px; padding: 12px; font-size: 15px; font-weight: 600;
+    border: none; border-radius: 8px; background: #2563eb; color: white; cursor: pointer;
+  }
+  button:hover { background: #1d4ed8; }
+  .error {
+    background: #7f1d1d; color: #fecaca; border: 1px solid #b91c1c;
+    border-radius: 8px; padding: 10px 12px; font-size: 13px; margin: 0 0 16px;
+  }
+  .hint { font-size: 12px; color: #64748b; margin-top: 16px; }
+</style>
+</head>
+<body>
+  <div class="card">
+    <h1>Connect Claude to DainOS</h1>
+    ${errorBanner}
+    <p>Claude is asking to connect to your DainOS account. Paste a personal access token to allow it.</p>
+    <ol>
+      <li>Open your <a href="${escapeHtml(PAT_SETTINGS_URL)}" target="_blank" rel="noopener">DainOS API tokens</a> page.</li>
+      <li>Create a token and copy it.</li>
+      <li>Paste it below, then choose Allow access.</li>
+    </ol>
+    <form method="POST" action="/authorize" autocomplete="off">
+      <label for="pat">DainOS API token</label>
+      <input id="pat" name="pat" type="password" placeholder="dain_pat_..." required autofocus />
+      ${hiddenField('client_id', params.clientId)}
+      ${hiddenField('redirect_uri', params.redirectUri)}
+      ${hiddenField('code_challenge', params.codeChallenge)}
+      ${hiddenField('code_challenge_method', params.codeChallengeMethod)}
+      ${hiddenField('state', params.state)}
+      ${hiddenField('scope', params.scope)}
+      <button type="submit">Allow access</button>
+    </form>
+    <p class="hint">Your token is encrypted into the connection and used only to act as you in DainOS. You can revoke it any time from the API tokens page.</p>
+  </div>
+</body>
+</html>`;
+}
+//# sourceMappingURL=consent-page.js.map

package/dist/oauth/consent-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent-page.js","sourceRoot":"","sources":["../../src/oauth/consent-page.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAa/C,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,KAAyB;IAC1D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,8BAA8B,UAAU,CAAC,IAAI,CAAC,YAAY,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAyB;IACzD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK;QAC9B,CAAC,CAAC,iCAAiC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM;QACjE,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MA4CH,WAAW;;;+BAGc,UAAU,CAAC,gBAAgB,CAAC;;;;;;;QAOnD,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC;QACzC,WAAW,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC;QAC/C,WAAW,CAAC,gBAAgB,EAAE,MAAM,CAAC,aAAa,CAAC;QACnD,WAAW,CAAC,uBAAuB,EAAE,MAAM,CAAC,mBAAmB,CAAC;QAChE,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC;QAClC,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC;;;;;;QAMlC,CAAC;AACT,CAAC"}

package/dist/oauth/crypto.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Stateless token minting + verification for the OAuth bridge.
+ *
+ * Every artefact the authorization server hands out (authorization code,
+ * access token, refresh token, and even the dynamically-registered client_id)
+ * is an encrypted JWT (JWE, `dir` + `A256GCM`) under the key derived from
+ * MCP_OAUTH_SECRET. Encryption (not mere signing) matters because the payload
+ * embeds the user's PAT: a leaked token is no worse than a leaked PAT, which is
+ * the same blast radius as today's raw-Bearer model.
+ *
+ * `typ` discriminates the four token kinds so an access token can never be
+ * replayed as an authorization code, etc. `jose.jwtDecrypt` validates `exp`
+ * for us, so expired tokens throw on decrypt.
+ */
+type TokenType = 'code' | 'access' | 'refresh' | 'client';
+export interface CodeClaims {
+    pat: string;
+    code_challenge: string;
+    client_id: string;
+    redirect_uri: string;
+}
+export interface AccessClaims {
+    pat: string;
+}
+export interface RefreshClaims {
+    pat: string;
+}
+export interface ClientClaims {
+    redirect_uris: string[];
+}
+export declare function issueAuthorizationCode(claims: CodeClaims): Promise<string>;
+export declare function readAuthorizationCode(token: string): Promise<CodeClaims & {
+    typ: TokenType;
+}>;
+export declare function issueAccessToken(claims: AccessClaims): Promise<string>;
+export declare function readAccessToken(token: string): Promise<AccessClaims>;
+export declare function issueRefreshToken(claims: RefreshClaims): Promise<string>;
+export declare function readRefreshToken(token: string): Promise<RefreshClaims>;
+export declare function issueClientId(claims: ClientClaims): Promise<string>;
+export declare function readClientId(token: string): Promise<ClientClaims>;
+/**
+ * Verify a PKCE `code_verifier` against the stored S256 `code_challenge`.
+ *
+ * challenge == base64url( SHA-256( verifier ) ). Compared in constant time.
+ */
+export declare function verifyPkceS256(verifier: string, challenge: string): boolean;
+export {};
+//# sourceMappingURL=crypto.d.ts.map

package/dist/oauth/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/oauth/crypto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAYH,KAAK,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE1D,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAuBD,wBAAsB,sBAAsB,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAEhF;AAED,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG;IAAE,GAAG,EAAE,SAAS,CAAA;CAAE,CAAC,CAEnG;AAED,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAE5E;AAED,wBAAsB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAE1E;AAED,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAE9E;AAED,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAE5E;AAED,wBAAsB,aAAa,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAEzE;AAED,wBAAsB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAEvE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAO3E"}

package/dist/oauth/crypto.js

@@ -0,0 +1,72 @@
+/**
+ * Stateless token minting + verification for the OAuth bridge.
+ *
+ * Every artefact the authorization server hands out (authorization code,
+ * access token, refresh token, and even the dynamically-registered client_id)
+ * is an encrypted JWT (JWE, `dir` + `A256GCM`) under the key derived from
+ * MCP_OAUTH_SECRET. Encryption (not mere signing) matters because the payload
+ * embeds the user's PAT: a leaked token is no worse than a leaked PAT, which is
+ * the same blast radius as today's raw-Bearer model.
+ *
+ * `typ` discriminates the four token kinds so an access token can never be
+ * replayed as an authorization code, etc. `jose.jwtDecrypt` validates `exp`
+ * for us, so expired tokens throw on decrypt.
+ */
+import { EncryptJWT, jwtDecrypt } from 'jose';
+import { createHash, timingSafeEqual } from 'node:crypto';
+import { ACCESS_TOKEN_TTL_SECONDS, AUTH_CODE_TTL_SECONDS, CLIENT_REG_TTL_SECONDS, REFRESH_TOKEN_TTL_SECONDS, getEncryptionKey, } from './config.js';
+async function encrypt(typ, claims, ttlSeconds) {
+    const nowSeconds = Math.floor(Date.now() / 1000);
+    return new EncryptJWT({ ...claims, typ })
+        .setProtectedHeader({ alg: 'dir', enc: 'A256GCM' })
+        .setIssuedAt(nowSeconds)
+        .setExpirationTime(nowSeconds + ttlSeconds)
+        .encrypt(getEncryptionKey());
+}
+async function decrypt(token, expectedTyp) {
+    const { payload } = await jwtDecrypt(token, getEncryptionKey());
+    if (payload['typ'] !== expectedTyp) {
+        throw new Error(`Token type mismatch: expected ${expectedTyp}, got ${String(payload['typ'])}`);
+    }
+    return payload;
+}
+export async function issueAuthorizationCode(claims) {
+    return encrypt('code', { ...claims }, AUTH_CODE_TTL_SECONDS);
+}
+export async function readAuthorizationCode(token) {
+    return decrypt(token, 'code');
+}
+export async function issueAccessToken(claims) {
+    return encrypt('access', { ...claims }, ACCESS_TOKEN_TTL_SECONDS);
+}
+export async function readAccessToken(token) {
+    return decrypt(token, 'access');
+}
+export async function issueRefreshToken(claims) {
+    return encrypt('refresh', { ...claims }, REFRESH_TOKEN_TTL_SECONDS);
+}
+export async function readRefreshToken(token) {
+    return decrypt(token, 'refresh');
+}
+export async function issueClientId(claims) {
+    return encrypt('client', { ...claims }, CLIENT_REG_TTL_SECONDS);
+}
+export async function readClientId(token) {
+    return decrypt(token, 'client');
+}
+/**
+ * Verify a PKCE `code_verifier` against the stored S256 `code_challenge`.
+ *
+ * challenge == base64url( SHA-256( verifier ) ). Compared in constant time.
+ */
+export function verifyPkceS256(verifier, challenge) {
+    if (!verifier || !challenge)
+        return false;
+    const computed = createHash('sha256').update(verifier).digest('base64url');
+    const a = Buffer.from(computed);
+    const b = Buffer.from(challenge);
+    if (a.length !== b.length)
+        return false;
+    return timingSafeEqual(a, b);
+}
+//# sourceMappingURL=crypto.js.map

package/dist/oauth/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/oauth/crypto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,sBAAsB,EACtB,yBAAyB,EACzB,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAuBrB,KAAK,UAAU,OAAO,CACpB,GAAc,EACd,MAA+B,EAC/B,UAAkB;IAElB,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACjD,OAAO,IAAI,UAAU,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,CAAC;SACtC,kBAAkB,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;SAClD,WAAW,CAAC,UAAU,CAAC;SACvB,iBAAiB,CAAC,UAAU,GAAG,UAAU,CAAC;SAC1C,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,OAAO,CAAI,KAAa,EAAE,WAAsB;IAC7D,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAChE,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,WAAW,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,iCAAiC,WAAW,SAAS,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,OAAuB,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAAkB;IAC7D,OAAO,OAAO,CAAC,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAa;IACvD,OAAO,OAAO,CAAkC,KAAK,EAAE,MAAM,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAoB;IACzD,OAAO,OAAO,CAAC,QAAQ,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAa;IACjD,OAAO,OAAO,CAAe,KAAK,EAAE,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAqB;IAC3D,OAAO,OAAO,CAAC,SAAS,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAa;IAClD,OAAO,OAAO,CAAgB,KAAK,EAAE,SAAS,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAoB;IACtD,OAAO,OAAO,CAAC,QAAQ,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAa;IAC9C,OAAO,OAAO,CAAe,KAAK,EAAE,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,SAAiB;IAChE,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3E,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC"}

package/dist/oauth/handlers.d.ts

@@ -0,0 +1,89 @@
+/**
+ * OAuth 2.1 endpoint handlers for the paste-PAT bridge.
+ *
+ * Endpoints:
+ *   GET  /.well-known/oauth-protected-resource     metadata (RFC 9728)
+ *   GET  /.well-known/oauth-authorization-server    metadata (RFC 8414)
+ *   POST /register                                  Dynamic Client Registration (RFC 7591)
+ *   GET  /authorize                                 consent page (paste PAT)
+ *   POST /authorize                                 issue authorization code
+ *   POST /token                                     code -> token, refresh -> token
+ *
+ * The pure cores (validateAuthorizeRequest, createAuthorizationCode,
+ * exchangeAuthorizationCode, refreshTokens, recoverPat) are exported and unit
+ * tested directly; the handle* wrappers only do req/res plumbing.
+ */
+import type { IncomingMessage, ServerResponse } from 'node:http';
+/** An OAuth error renderable as an RFC 6749 error response. */
+export declare class OAuthError extends Error {
+    readonly error: string;
+    readonly status: number;
+    constructor(error: string, description: string, status?: number);
+    toBody(): {
+        error: string;
+        error_description: string;
+    };
+}
+export interface TokenResponse {
+    access_token: string;
+    token_type: 'Bearer';
+    expires_in: number;
+    refresh_token: string;
+    scope: string;
+}
+export interface AuthorizeParams {
+    clientId: string;
+    redirectUri: string;
+    codeChallenge: string;
+    codeChallengeMethod: string;
+    state?: string;
+    scope?: string;
+}
+export type AuthorizeValidation = {
+    ok: true;
+    parsed: AuthorizeParams;
+} | {
+    ok: false;
+    error: string;
+    description: string;
+};
+/**
+ * Validate the inbound /authorize parameters and the dynamically-registered
+ * client. Returns a discriminated result rather than throwing so both the GET
+ * (render) and POST (submit) paths can branch cleanly.
+ */
+export declare function validateAuthorizeRequest(params: Record<string, string | undefined>): Promise<AuthorizeValidation>;
+/** Mint a short-lived authorization code embedding the PAT + PKCE challenge. */
+export declare function createAuthorizationCode(input: {
+    pat: string;
+    clientId: string;
+    redirectUri: string;
+    codeChallenge: string;
+}): Promise<string>;
+/** authorization_code grant: verify the code + PKCE, return fresh tokens. */
+export declare function exchangeAuthorizationCode(form: Record<string, string>): Promise<TokenResponse>;
+/** refresh_token grant: re-issue an access token (and rotate the refresh token). */
+export declare function refreshTokens(form: Record<string, string>): Promise<TokenResponse>;
+/**
+ * Recover the underlying PAT from an inbound Authorization Bearer value.
+ *
+ * Accepts either a raw `dain_pat_...` (Claude Code path, unchanged) or an
+ * OAuth access token (encrypted JWT minted by /token). Returns null when the
+ * value is neither, so the caller can emit a 401 + WWW-Authenticate challenge.
+ */
+export declare function recoverPat(bearer: string | null): Promise<string | null>;
+/** Accept https on an allowlisted host, or http on loopback (local testing). */
+export declare function isAllowedRedirectUri(uri: string): boolean;
+export declare function handleProtectedResourceMetadata(res: ServerResponse, baseUrl: string): void;
+export declare function handleAuthorizationServerMetadata(res: ServerResponse, baseUrl: string): void;
+export declare function handleRegister(req: IncomingMessage & {
+    body?: unknown;
+}, res: ServerResponse): Promise<void>;
+/** GET shows the paste-PAT page; POST validates the PAT and issues a code. */
+export declare function handleAuthorize(req: IncomingMessage & {
+    body?: unknown;
+}, res: ServerResponse, query: Record<string, string | undefined>): Promise<void>;
+export declare function handleToken(req: IncomingMessage & {
+    body?: unknown;
+}, res: ServerResponse): Promise<void>;
+//# sourceMappingURL=handlers.d.ts.map

package/dist/oauth/handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/oauth/handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AA4BjE,+DAA+D;AAC/D,qBAAa,UAAW,SAAQ,KAAK;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBACZ,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAM;IAM5D,MAAM,IAAI;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAA;KAAE;CAGvD;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,QAAQ,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,eAAe,CAAA;CAAE,GACrC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AAMtD;;;;GAIG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACzC,OAAO,CAAC,mBAAmB,CAAC,CA6C9B;AAED,gFAAgF;AAChF,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,MAAM,CAAC,CAOlB;AAgBD,6EAA6E;AAC7E,wBAAsB,yBAAyB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,CAiCpG;AAED,oFAAoF;AACpF,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,CAUxF;AAED;;;;;;GAMG;AACH,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAS9E;AA+CD,gFAAgF;AAChF,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAWzD;AAiBD,wBAAgB,+BAA+B,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAE1F;AAED,wBAAgB,iCAAiC,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAE5F;AAED,wBAAsB,cAAc,CAClC,GAAG,EAAE,eAAe,GAAG;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,EACzC,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,IAAI,CAAC,CA0Bf;AAaD,8EAA8E;AAC9E,wBAAsB,eAAe,CACnC,GAAG,EAAE,eAAe,GAAG;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,EACzC,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACxC,OAAO,CAAC,IAAI,CAAC,CAqEf;AAED,wBAAsB,WAAW,CAC/B,GAAG,EAAE,eAAe,GAAG;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,EACzC,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,IAAI,CAAC,CAoBf"}