@databasin/mcp-client 0.1.0 → 0.2.0

package/README.md

@@ -1,108 +1,179 @@
 # DataBasin MCP Client
 
-Run DataBasin tools locally in Codex, Claude Code, and other MCP clients. The package uses stdio locally and calls the remote DataBasin API over HTTPS as the signed-in user.
+Local stdio MCP proxy for DataBasin. It keeps Microsoft Entra credentials in the OS-protected MSAL cache and connects to DataBasin's true Streamable HTTP MCP endpoint with the official MCP SDK.
 
-Production is the default. Users do not need to configure an API URL, tenant ID, client ID, scope, bearer token, callback port, or client secret.
+Production is the default. The non-production profile is selected with `--environment np`.
 
-## Requirements
+## Version 0.2.0 production release
 
-- Node.js 22.14 or newer
-- A DataBasin account
-- A supported OS credential store: Windows DPAPI, macOS Keychain, or Linux Secret Service/LibSecret
+Version `0.2.0` replaces the legacy REST adapter with a true MCP proxy for the deployed production server, including support tickets and notifications. Upgrade clients pinned to `0.1.0` or `0.2.0-beta.1`; those versions do not implement this transport. Production is the default:
 
-## Sign in with your assistant
+```bash
+npx -y @databasin/mcp-client@0.2.0 doctor
+npx -y @databasin/mcp-client@0.2.0 login
+```
 
-After adding the MCP server, ask your assistant to connect to DataBasin. It can:
+The client requires Node.js 22.20+ or Node.js 24 and an available OS-protected credential store. `doctor` reports the selected fixed profile, runtime support, credential-store availability, and sign-in state; it never prints account identity, tokens, or credentials.
 
-1. Call `databasin_auth_status` to check the local session.
-2. Call `databasin_login` when sign-in is needed. It returns Microsoft's short-lived device-login URL and user code immediately.
-3. Give you that URL and code. You can complete sign-in from any browser or device, after which the assistant calls `databasin_auth_status` again.
+For non-production, use the same stable package with the NP profile:
 
-Enter credentials only on Microsoft's page. The assistant receives the intentionally displayable, short-lived device user code, but never receives the password, OAuth device code, authorization code, access token, refresh token, or signed-in account identity.
+| Host | NP setup |
+| --- | --- |
+| Codex | `codex mcp add databasin-np -- npx -y @databasin/mcp-client@0.2.0 --environment np` |
+| Claude Code | `claude mcp add --transport stdio --scope user databasin-np -- npx -y @databasin/mcp-client@0.2.0 --environment np` |
+| Claude Desktop / Cursor-compatible config | Use the `mcpServers` JSON below |
+| VS Code | Use the `servers` JSON below in user or workspace `mcp.json` |
+| OpenCode v2 | Use the `mcp.servers` JSON below in `opencode.jsonc` |
 
-The CLI remains available as a fallback:
+Claude Desktop and other hosts that accept the common `mcpServers` shape:
 
-```bash
-npx -y @databasin/mcp-client login
+```json
+{
+  "mcpServers": {
+    "databasin-np": {
+      "type": "stdio",
+      "command": "npx",
+      "args": ["-y", "@databasin/mcp-client@0.2.0", "--environment", "np"]
+    }
+  }
+}
 ```
 
-Assistant-driven login uses Microsoft's OAuth device authorization flow. CLI fallback uses Authorization Code with PKCE and an ephemeral `http://localhost` loopback callback. Both use a public client; no client secret is installed on the user's machine. MSAL stores and refreshes the session in the operating system credential store.
+VS Code `mcp.json`:
+
+```json
+{
+  "servers": {
+    "databasinNp": {
+      "type": "stdio",
+      "command": "npx",
+      "args": ["-y", "@databasin/mcp-client@0.2.0", "--environment", "np"]
+    }
+  }
+}
+```
 
-Check or clear the session:
+OpenCode v2 `opencode.jsonc`:
 
-```bash
-npx -y @databasin/mcp-client status
-npx -y @databasin/mcp-client logout
+```jsonc
+{
+  "$schema": "https://opencode.ai/config.json",
+  "mcp": {
+    "servers": {
+      "databasin-np": {
+        "type": "local",
+        "command": ["npx", "-y", "@databasin/mcp-client@0.2.0", "--environment", "np"]
+      }
+    }
+  }
+}
 ```
 
-## Codex
+On native Windows, a host that cannot launch `npx` directly should use `cmd` with arguments beginning `[/c, npx, ...]` (JSON string form: `["/c", "npx", ...]`). Restart the host after changing its MCP configuration so it refreshes the server-owned tool inventory.
+
+The only remote MCP endpoints are:
+
+- Production: `https://databasin.cloud/mcp`
+- NP: `https://databasin-ui-np.grayriver-813df174.centralus.azurecontainerapps.io/mcp`
+
+The downstream connection pins MCP `2026-07-28` and has no REST or legacy-protocol fallback. Tool discovery and listing are public protocol operations. The client obtains a local access token only for `tools/call`, adds it as a bearer credential to that request, and rejects HTTP redirects so credentials cannot cross origins.
+
+## Install and connect
 
 ```bash
-codex mcp add databasin -- npx -y @databasin/mcp-client
+npx -y @databasin/mcp-client
 ```
 
-Equivalent `config.toml`:
+The client requires an OS credential store. On Linux, an available and unlocked
+Secret Service/libsecret keyring is required; headless environments must provide
+one explicitly. The client fails closed rather than falling back to a plaintext
+token cache.
+
+Codex:
 
-```toml
-[mcp_servers.databasin]
-command = "npx"
-args = ["-y", "@databasin/mcp-client"]
+```bash
+codex mcp add databasin -- npx -y @databasin/mcp-client
 ```
 
-## Claude Code
+Claude Code:
 
 ```bash
 claude mcp add --transport stdio --scope user databasin -- npx -y @databasin/mcp-client
 ```
 
-Equivalent `.mcp.json` entry:
+To use non-production:
 
-```json
-{
-  "mcpServers": {
-    "databasin": {
-      "command": "npx",
-      "args": ["-y", "@databasin/mcp-client"]
-    }
-  }
-}
+```bash
+npx -y @databasin/mcp-client --environment np
 ```
 
-## Non-production
+The assistant can call `databasin_login` and give you the short-lived Microsoft device URL and code. Enter credentials only on Microsoft’s page. The client never sends credentials or tokens through MCP tool output.
 
-Production is selected when no environment is supplied. To use the DataBasin NP environment, add the option to the MCP command. The assistant-driven login tools automatically use that environment:
+Device login output is restricted to the HTTPS `microsoft.com/devicelogin` endpoint (with an optional trailing slash, canonicalized away). Interactive CLI login is restricted to the configured tenant’s exact `login.microsoftonline.com/<tenant>/oauth2/v2.0/authorize` path and client ID. Credential-bearing URLs, redirects to other hosts, other schemes, ports, fragments, and unexpected paths fail closed before a URL is opened or returned. Raw MSAL device codes, polling intervals/handles, and provider messages are discarded immediately; only the validated verification URL, human-entered user code, and expiry are retained.
 
-```toml
-[mcp_servers.databasin_np]
-command = "npx"
-args = ["-y", "@databasin/mcp-client", "--environment", "np"]
-```
+Before using an MSAL access token, the client fail-closes on its tenant, issuer, audience, delegated scope, timing, authority, account, and expiry metadata. JWT payload decoding here is local defense-in-depth, not signature verification; the DataBasin API remains the cryptographic validation and authorization boundary.
+
+## Tools
 
-For CLI fallback, run `npx -y @databasin/mcp-client login --environment np`.
+The production server currently exposes twenty product tools, plus this client's two local authentication helpers (twenty-two total). Product tools are discovered dynamically from the remote DataBasin MCP server and mirrored over local stdio. Their names, descriptions, annotations, input/output schemas, and timeout metadata are server-owned; this package does not keep a second product-tool contract. The current server catalog is:
 
-`test`, `staging`, and `non-production` are accepted aliases for `np`; `production` is accepted as an alias for `prod`.
+- `databasin_get_capabilities` — fetch the server-owned capability allowlist.
+- `databasin_get_context` — fetch authorized project and connector metadata.
+- `databasin_search` — bounded authorized metadata search.
+- `databasin_get_schema` — bounded non-secret schema metadata.
+- `databasin_run_agent` — run the fixed `metadata_readonly` profile for an explicit institution and optional project/connector scope.
+- `databasin_get_agent_run` — read an authorized run status/result.
+- `databasin_cancel_agent_run` — request cancellation and report the server’s truthful state.
+- `databasin_run_query` — execute a single read-only `SELECT`/`WITH` statement against an authorized connector and return up to `maxRows` rows.
+- `databasin_get_query_status` — read an authorized query's status, and its columns/rows/error once terminal.
+- `databasin_cancel_query` — request cancellation and report the server’s truthful state.
+- `databasin_run_assistant` — run the read-only DataBasin assistant (a server-side Claude Code agent) that browses metadata and runs DataBasin skills over multiple steps to answer a natural-language request.
 
-## Tools
+Support tools are also discovered: `databasin_get_support_context`, `databasin_list_support_tickets`, `databasin_get_support_ticket`, `databasin_create_support_ticket`, `databasin_add_support_ticket_message`, `databasin_update_support_ticket`, `databasin_list_support_notifications`, `databasin_mark_support_notification_read`, and `databasin_mark_all_support_notifications_read`. Support operations include writes; follow their server-owned schemas and annotations. Ticket/message data includes authorized email fields, and optional values may be null.
+
+The other two tools, `databasin_auth_status` and `databasin_login`, are client-local authentication helpers. They interact only with the local MSAL credential manager and Microsoft sign-in; they are not part of the remote product catalog.
+
+No organization configuration is required. Unscoped `databasin_get_context` and `databasin_search` discover metadata only across organizations the signed-in user is authorized to access. A project-scoped search must include its `institutionId`; account discovery is not a wildcard and never broadens server-side authorization.
 
-- `databasin_auth_status`: check whether the local DataBasin session is authenticated without exposing account identity
-- `databasin_login`: return Microsoft device-login instructions without blocking the assistant
-- `databasin_get_context`: list caller-visible projects and connection identifiers
-- `databasin_search`: search visible pipelines, connectors, and automations
-- `databasin_browse_schema`: browse catalogs, schemas, tables, and columns
-- `databasin_get_operation`: read bounded query status and results
-- `databasin_cancel_operation`: request cancellation of a visible query operation
+The client does not expose arbitrary SQL, shell commands, connector credentials, arbitrary URLs, or arbitrary headers. The remote server validates product inputs, authorization, output safety, query policy, and response bounds. `databasin_run_query` accepts only a single read-only `SELECT`/`WITH` statement under that server-owned contract. Every product success is the MCP result returned by the server, including its structured `{ "data": T, "correlationId": "..." }` payload.
 
-Tool output is bounded and inspected for credential-like fields. API URLs are fixed by the selected release profile, authentication tokens remain inside MSAL, and the agent cannot supply arbitrary URLs or headers.
+`databasin_run_agent` accepts the scope and execution fields advertised in its discovered schema and always uses the server-owned `metadata_readonly` profile. The remote MCP tool owns run creation, bounded polling, cancellation on MCP abort, authorization rechecks, and any idempotency behavior; the local proxy performs one `tools/call` and forwards its cancellation signal.
 
-## Publishing
+Agent status, result, and cancellation responses include the complete server-authorized scope. A canonical run contains `runId`, the three scope IDs (nullable where optional), `profile`, `status`, bounded `result`/`error`, and `createdAt`/`updatedAt`. Cancellation reports the state returned by the server and does not imply completion before the server says `cancelled`.
 
-The package publishes only `dist/` and this README. Before publishing:
+`databasin_run_query` accepts the bounded connector, SQL, and row-limit fields in the discovered schema. The remote MCP tool owns its bounded polling and timeout behavior. Status and cancellation remain explicit tools for follow-up. A canonical query result contains `queryId`, `connectorId`, `status`, bounded `columns`/`data`/`rowCount`, `truncated`, and `error`.
+
+`databasin_run_assistant` remains the server's bounded, read-only assistant operation. It is metadata-and-skills only; use `databasin_run_query` for SQL. The server advertises the accepted input and output schemas plus the call timeout in MCP metadata, and the client mirrors them without local copies. This transport change does not replace or modify the server's existing Claude Agent SDK runtime.
+
+## CLI fallback
+
+```bash
+npx -y @databasin/mcp-client login
+npx -y @databasin/mcp-client status
+npx -y @databasin/mcp-client logout
+npx -y @databasin/mcp-client login --environment np
+npx -y @databasin/mcp-client doctor --environment np
+```
+
+Environment aliases `production` and `staging`/`test` are accepted for `prod` and `np` respectively.
+
+## Development
 
 ```bash
 npm ci
 npm run verify
-npm pack --dry-run
-npm publish --access public
+npm audit --omit=dev --audit-level=high
+npm run verify:package
+```
+
+`npm run verify` runs the TypeScript check, unit tests, build, and stdio child-process E2E. CI runs those checks on Node 22 and 24 across Linux, macOS, and Windows, audits production dependencies, and verifies the exact package allowlist with `npm pack --dry-run --json`.
+
+Release qualification uses an exact local tarball, never a mutable dist-tag. After `npm pack`, an authorized tester with an existing production session can run the read-only qualification:
+
+```bash
+DATABASIN_MCP_TARBALL=./databasin-mcp-client-0.2.0.tgz npm run qualify:package
 ```
 
-Publishing from CI should use npm trusted publishing with provenance. Choose and record DataBasin's approved package license before the first public release; the package is currently marked `UNLICENSED`.
+Set `DATABASIN_MCP_QUALIFY_ENVIRONMENT=np` to qualify against NP instead. This check installs the exact artifact in a temporary directory, starts its stdio executable, checks local sign-in and the twenty-two-tool inventory, and calls only context/search/support read operations. It never creates agent jobs, executes SQL, or changes support data, and does not print credentials or business content. The old `qualify:np` script remains only for historical beta lifecycle qualification.
+
+Release approval still requires proof of the Entra registration, tenant, issuer, audience, delegated scope, and wrong-claim rejection behavior for each environment.

package/dist/auth-schema.d.ts

@@ -0,0 +1,23 @@
+import { z } from 'zod';
+export declare const AssistantAuthOutputSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    status: z.ZodLiteral<"pending">;
+    environment: z.ZodEnum<{
+        prod: "prod";
+        np: "np";
+    }>;
+    loginUrl: z.ZodNullable<z.ZodString>;
+    userCode: z.ZodOptional<z.ZodString>;
+    expiresAt: z.ZodOptional<z.ZodISODateTime>;
+    message: z.ZodString;
+}, z.core.$strict>, ...z.ZodObject<{
+    status: z.ZodLiteral<"authenticated" | "not_authenticated" | "failed">;
+    environment: z.ZodEnum<{
+        prod: "prod";
+        np: "np";
+    }>;
+    loginUrl: z.ZodNull;
+    userCode: z.ZodOptional<z.ZodNever>;
+    expiresAt: z.ZodOptional<z.ZodNever>;
+    message: z.ZodString;
+}, z.core.$strict>[]], "status">;
+//# sourceMappingURL=auth-schema.d.ts.map

package/dist/auth-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-schema.d.ts","sourceRoot":"","sources":["../src/auth-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAoBxB,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;gCAuBpC,CAAC"}

package/dist/auth-schema.js

@@ -0,0 +1,42 @@
+import { z } from 'zod';
+import { validateDeviceLoginUrl } from './login-url.js';
+const authEnvironment = z.enum(['prod', 'np']);
+const URL_LIKE_AUTH_MESSAGE = /(?:\b(?:https?|hxxps?|ftp|file|data|javascript)\s*:\s*(?:[/\\]\s*){0,2}|\bwww\s*(?:\.|\[\.\]|\(\.\))|(?:\b|@)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.|\[\.\]|\(\.\)))+[a-z]{2,63}(?=\b|[/:?#])|\b(?:localhost|(?:\d{1,3}\.){3}\d{1,3})(?=[:/\s]|$))/iu;
+const authMessage = z.string().max(1_000).refine((value) => !URL_LIKE_AUTH_MESSAGE.test(normalizeAuthMessage(value)), 'The authentication message was rejected.');
+const safeDeviceLoginUrl = z.string().max(4_096).superRefine((value, context) => {
+    try {
+        validateDeviceLoginUrl(value);
+    }
+    catch {
+        context.addIssue({ code: 'custom', message: 'The authentication result was rejected.' });
+    }
+});
+export const AssistantAuthOutputSchema = z.discriminatedUnion('status', [
+    z.object({
+        status: z.literal('pending'),
+        environment: authEnvironment,
+        loginUrl: safeDeviceLoginUrl.nullable(),
+        userCode: z.string().trim().regex(/^[A-Z0-9-]{4,32}$/iu).optional(),
+        expiresAt: z.iso.datetime().optional(),
+        message: authMessage
+    }).strict(),
+    ...['authenticated', 'not_authenticated', 'failed'].map((status) => z.object({
+        status: z.literal(status),
+        environment: authEnvironment,
+        loginUrl: z.null(),
+        userCode: z.never().optional(),
+        expiresAt: z.never().optional(),
+        message: authMessage
+    }).strict())
+]).superRefine((value, context) => {
+    if (value.status !== 'pending')
+        return;
+    const hasPrompt = value.loginUrl !== null;
+    if (hasPrompt !== (value.userCode !== undefined) || hasPrompt !== (value.expiresAt !== undefined)) {
+        context.addIssue({ code: 'custom', message: 'The authentication result has an invalid pending state.' });
+    }
+});
+function normalizeAuthMessage(value) {
+    return value.normalize('NFKC').replace(/[\u200B-\u200D\u2060\uFEFF]/gu, '').replace(/\s+/gu, ' ');
+}
+//# sourceMappingURL=auth-schema.js.map

package/dist/auth-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-schema.js","sourceRoot":"","sources":["../src/auth-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAExD,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;AAC/C,MAAM,qBAAqB,GACzB,2PAA2P,CAAC;AAE9P,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAC9C,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,EACnE,0CAA0C,CAC3C,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9E,IAAI,CAAC;QACH,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;IACtE,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC5B,WAAW,EAAE,eAAe;QAC5B,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,EAAE;QACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;QACnE,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACtC,OAAO,EAAE,WAAW;KACrB,CAAC,CAAC,MAAM,EAAE;IACX,GAAI,CAAC,eAAe,EAAE,mBAAmB,EAAE,QAAQ,CAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QACtF,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACzB,WAAW,EAAE,eAAe;QAC5B,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE;QAClB,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;QAC9B,SAAS,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;QAC/B,OAAO,EAAE,WAAW;KACrB,CAAC,CAAC,MAAM,EAAE,CAAC;CACb,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO;IACvC,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC;IAC1C,IAAI,SAAS,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,SAAS,KAAK,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,CAAC;QAClG,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,yDAAyD,EAAE,CAAC,CAAC;IAC3G,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,+BAA+B,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AACpG,CAAC"}

package/dist/auth-tools.d.ts

@@ -0,0 +1,10 @@
+import { McpServer } from '@modelcontextprotocol/server';
+import type { AssistantAuthResult } from './auth.js';
+export declare const LOCAL_AUTH_TOOL_NAMES: readonly ["databasin_auth_status", "databasin_login"];
+type AuthTools = Readonly<{
+    startLogin(): Promise<AssistantAuthResult>;
+    getLoginStatus(): Promise<AssistantAuthResult>;
+}>;
+export declare function registerAuthTools(server: McpServer, auth: AuthTools): void;
+export {};
+//# sourceMappingURL=auth-tools.d.ts.map

package/dist/auth-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-tools.d.ts","sourceRoot":"","sources":["../src/auth-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAsB,MAAM,8BAA8B,CAAC;AAE7E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAMrD,eAAO,MAAM,qBAAqB,uDAGvB,CAAC;AAEZ,KAAK,SAAS,GAAG,QAAQ,CAAC;IACxB,UAAU,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC3C,cAAc,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAChD,CAAC,CAAC;AAKH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,GAAG,IAAI,CAgB1E"}

package/dist/auth-tools.js

@@ -0,0 +1,60 @@
+import { z, ZodError } from 'zod';
+import { AssistantAuthOutputSchema } from './auth-schema.js';
+import { safeCorrelationId } from './correlation.js';
+import { DataBasinError, publicError } from './errors.js';
+import { assertSafeOutput, sanitizeOutput } from './safety.js';
+export const LOCAL_AUTH_TOOL_NAMES = Object.freeze([
+    'databasin_auth_status',
+    'databasin_login'
+]);
+const emptyInput = z.object({}).strict();
+const annotations = { readOnlyHint: true, destructiveHint: false, openWorldHint: false };
+export function registerAuthTools(server, auth) {
+    server.registerTool(LOCAL_AUTH_TOOL_NAMES[0], {
+        title: 'Check DataBasin sign-in',
+        description: 'Check local sign-in state without returning account identity or credentials.',
+        inputSchema: emptyInput,
+        outputSchema: AssistantAuthOutputSchema,
+        annotations
+    }, async (_input, context) => authToolResult(() => auth.getLoginStatus(), context));
+    server.registerTool(LOCAL_AUTH_TOOL_NAMES[1], {
+        title: 'Sign in to DataBasin',
+        description: 'Start Microsoft device sign-in. Enter credentials only on Microsoft\'s page; never provide credentials in chat.',
+        inputSchema: emptyInput,
+        outputSchema: AssistantAuthOutputSchema,
+        annotations: { ...annotations, readOnlyHint: false, openWorldHint: true }
+    }, async (_input, context) => authToolResult(() => auth.startLogin(), context));
+}
+async function authToolResult(operation, _context) {
+    try {
+        const output = AssistantAuthOutputSchema.parse(sanitizeOutput(await operation()));
+        const result = { ...output, message: authOutputMessage(output) };
+        assertSafeOutput(result);
+        return {
+            content: [{ type: 'text', text: JSON.stringify(result) }],
+            structuredContent: result
+        };
+    }
+    catch (error) {
+        const normalized = error instanceof ZodError
+            ? new DataBasinError('INVALID_ARGUMENT', error.issues[0]?.message ?? 'The tool arguments are invalid.')
+            : error;
+        const visible = publicError(normalized);
+        const { correlationId, ...publicFields } = visible;
+        const safe = { ...publicFields, correlationId: safeCorrelationId(correlationId) };
+        return { content: [{ type: 'text', text: JSON.stringify(safe) }], isError: true };
+    }
+}
+function authOutputMessage(output) {
+    if (output.status === 'pending') {
+        return output.loginUrl === null
+            ? 'Microsoft is preparing the device sign-in instructions.'
+            : 'Microsoft device sign-in is ready. Use the approved login URL and user code, then call databasin_auth_status.';
+    }
+    if (output.status === 'authenticated')
+        return 'DataBasin sign-in is complete.';
+    if (output.status === 'not_authenticated')
+        return 'DataBasin is not signed in. Call databasin_login to begin.';
+    return 'DataBasin sign-in did not complete. Call databasin_login to try again.';
+}
+//# sourceMappingURL=auth-tools.js.map

package/dist/auth-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-tools.js","sourceRoot":"","sources":["../src/auth-tools.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAElC,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE/D,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC;IACjD,uBAAuB;IACvB,iBAAiB;CACT,CAAC,CAAC;AAOZ,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACzC,MAAM,WAAW,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;AAEzF,MAAM,UAAU,iBAAiB,CAAC,MAAiB,EAAE,IAAe;IAClE,MAAM,CAAC,YAAY,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE;QAC5C,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,8EAA8E;QAC3F,WAAW,EAAE,UAAU;QACvB,YAAY,EAAE,yBAAyB;QACvC,WAAW;KACZ,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IAEpF,MAAM,CAAC,YAAY,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE;QAC5C,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,iHAAiH;QAC9H,WAAW,EAAE,UAAU;QACvB,YAAY,EAAE,yBAAyB;QACvC,WAAW,EAAE,EAAE,GAAG,WAAW,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE;KAC1E,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,SAA6C,EAC7C,QAAuB;IAEvB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;QACjE,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACzB,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAClE,iBAAiB,EAAE,MAAM;SAC1B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,UAAU,GAAG,KAAK,YAAY,QAAQ;YAC1C,CAAC,CAAC,IAAI,cAAc,CAAC,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,iCAAiC,CAAC;YACvG,CAAC,CAAC,KAAK,CAAC;QACV,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,EAAE,aAAa,EAAE,GAAG,YAAY,EAAE,GAAG,OAAO,CAAC;QACnD,MAAM,IAAI,GAAG,EAAE,GAAG,YAAY,EAAE,aAAa,EAAE,iBAAiB,CAAC,aAAa,CAAC,EAAE,CAAC;QAClF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAa,EAAE,CAAC;IACtG,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,MAA0E;IACnG,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC,QAAQ,KAAK,IAAI;YAC7B,CAAC,CAAC,yDAAyD;YAC3D,CAAC,CAAC,+GAA+G,CAAC;IACtH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,eAAe;QAAE,OAAO,gCAAgC,CAAC;IAC/E,IAAI,MAAM,CAAC,MAAM,KAAK,mBAAmB;QAAE,OAAO,4DAA4D,CAAC;IAC/G,OAAO,wEAAwE,CAAC;AAClF,CAAC"}

package/dist/auth.d.ts

@@ -1,24 +1,29 @@
-import { type AccountInfo, type AuthenticationResult, type IPublicClientApplication } from '@azure/msal-node';
+import { type AccountInfo, type AuthenticationResult } from '@azure/msal-node';
 import { type DataBasinEnvironment, type DataBasinProfile } from './config.js';
+import { type RawDeviceCodeResponse } from './login-url.js';
 export interface AuthStatus {
     authenticated: boolean;
     environment: DataBasinEnvironment;
     username?: string;
 }
 export type AssistantAuthState = 'authenticated' | 'pending' | 'not_authenticated' | 'failed';
-export interface AssistantAuthResult {
-    status: AssistantAuthState;
+interface AssistantAuthResultBase {
     environment: DataBasinEnvironment;
+    message: string;
+}
+interface PendingAssistantAuthResult extends AssistantAuthResultBase {
+    status: 'pending';
     loginUrl: string | null;
     userCode?: string;
     expiresAt?: string;
-    message: string;
 }
-interface DeviceCodePrompt {
-    userCode: string;
-    verificationUri: string;
-    expiresIn: number;
+interface SettledAssistantAuthResult extends AssistantAuthResultBase {
+    status: Exclude<AssistantAuthState, 'pending'>;
+    loginUrl: null;
+    userCode?: never;
+    expiresAt?: never;
 }
+export type AssistantAuthResult = PendingAssistantAuthResult | SettledAssistantAuthResult;
 export interface PublicClientLike {
     getAllAccounts(): Promise<AccountInfo[]>;
     acquireTokenSilent(request: {
@@ -35,7 +40,8 @@ export interface PublicClientLike {
     acquireTokenByDeviceCode(request: {
         scopes: string[];
         timeout?: number;
-        deviceCodeCallback: (response: DeviceCodePrompt) => void;
+        cancel?: boolean;
+        deviceCodeCallback: (response: RawDeviceCodeResponse) => void;
     }): Promise<AuthenticationResult | null>;
     signOut(request: {
         account: AccountInfo;
@@ -44,6 +50,7 @@ export interface PublicClientLike {
 export interface AuthManagerOptions {
     createClient?: () => Promise<PublicClientLike>;
     openBrowser?: (url: string) => Promise<void>;
+    now?: () => number;
 }
 export declare class AuthManager {
     readonly profile: DataBasinProfile;
@@ -53,11 +60,16 @@ export declare class AuthManager {
     private lastLoginFailed;
     private readonly createClient;
     private readonly openBrowser;
+    private readonly now;
     constructor(profile: DataBasinProfile, options?: AuthManagerOptions);
     getAccessToken(): Promise<string>;
     login(): Promise<AuthStatus>;
     startLogin(): Promise<AssistantAuthResult>;
+    cancelPendingLogin(): void;
     getLoginStatus(): Promise<AssistantAuthResult>;
+    private pendingAssistantResult;
+    private cachedAssistantResult;
+    private failedAssistantResult;
     private beginDeviceLogin;
     private performDeviceLogin;
     private performInteractiveLogin;
@@ -68,6 +80,5 @@ export declare class AuthManager {
     private acquireSilent;
     private client;
 }
-export declare function createSecurePublicClient(profile: DataBasinProfile): Promise<IPublicClientApplication>;
-export {};
+export { createSecurePublicClient } from './credential-store.js';
 //# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,oBAAoB,EAEzB,KAAK,wBAAwB,EAC9B,MAAM,kBAAkB,CAAC;AAQ1B,OAAO,EAAgB,KAAK,oBAAoB,EAAE,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAG7F,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,OAAO,CAAC;IACvB,WAAW,EAAE,oBAAoB,CAAC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,kBAAkB,GAAG,eAAe,GAAG,SAAS,GAAG,mBAAmB,GAAG,QAAQ,CAAC;AAE9F,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,WAAW,EAAE,oBAAoB,CAAC;IAClC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,gBAAgB;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACzC,kBAAkB,CAAC,OAAO,EAAE;QAC1B,OAAO,EAAE,WAAW,CAAC;QACrB,MAAM,EAAE,MAAM,EAAE,CAAC;KAClB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAClC,uBAAuB,CAAC,OAAO,EAAE;QAC/B,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAClC,wBAAwB,CAAC,OAAO,EAAE;QAChC,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,kBAAkB,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,IAAI,CAAC;KAC1D,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IACzC,OAAO,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/C,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9C;AASD,qBAAa,WAAW;IASpB,QAAQ,CAAC,OAAO,EAAE,gBAAgB;IARpC,OAAO,CAAC,aAAa,CAAwC;IAC7D,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,WAAW,CAA0B;IAC7C,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAkC;IAC/D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiC;gBAGlD,OAAO,EAAE,gBAAgB,EAClC,OAAO,GAAE,kBAAuB;IAM5B,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;IAOjC,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC;IAI5B,UAAU,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAoC1C,cAAc,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAyCpD,OAAO,CAAC,gBAAgB;YA6BV,kBAAkB;YAelB,uBAAuB;YAiBvB,aAAa;IAqB3B,OAAO,CAAC,eAAe;IAiBjB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAOzB,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC;YAQrB,aAAa;IAgB3B,OAAO,CAAC,MAAM;CAUf;AAED,wBAAsB,wBAAwB,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CA2B3G"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,oBAAoB,EAC1B,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,KAAK,oBAAoB,EAAE,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAG/E,OAAO,EAGL,KAAK,qBAAqB,EAE3B,MAAM,gBAAgB,CAAC;AAGxB,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,OAAO,CAAC;IACvB,WAAW,EAAE,oBAAoB,CAAC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,kBAAkB,GAAG,eAAe,GAAG,SAAS,GAAG,mBAAmB,GAAG,QAAQ,CAAC;AAE9F,UAAU,uBAAuB;IAC/B,WAAW,EAAE,oBAAoB,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;CACjB;AACD,UAAU,0BAA2B,SAAQ,uBAAuB;IAClE,MAAM,EAAE,SAAS,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AACD,UAAU,0BAA2B,SAAQ,uBAAuB;IAClE,MAAM,EAAE,OAAO,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;IAC/C,QAAQ,EAAE,IAAI,CAAC;IACf,QAAQ,CAAC,EAAE,KAAK,CAAC;IACjB,SAAS,CAAC,EAAE,KAAK,CAAC;CACnB;AAED,MAAM,MAAM,mBAAmB,GAAG,0BAA0B,GAAG,0BAA0B,CAAC;AAE1F,MAAM,WAAW,gBAAgB;IAC/B,cAAc,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACzC,kBAAkB,CAAC,OAAO,EAAE;QAC1B,OAAO,EAAE,WAAW,CAAC;QACrB,MAAM,EAAE,MAAM,EAAE,CAAC;KAClB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAClC,uBAAuB,CAAC,OAAO,EAAE;QAC/B,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAClC,wBAAwB,CAAC,OAAO,EAAE;QAChC,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,kBAAkB,EAAE,CAAC,QAAQ,EAAE,qBAAqB,KAAK,IAAI,CAAC;KAC/D,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IACzC,OAAO,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/C,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAUD,qBAAa,WAAW;IAUpB,QAAQ,CAAC,OAAO,EAAE,gBAAgB;IATpC,OAAO,CAAC,aAAa,CAAwC;IAC7D,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,WAAW,CAA0B;IAC7C,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAkC;IAC/D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiC;IAC7D,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;gBAGxB,OAAO,EAAE,gBAAgB,EAClC,OAAO,GAAE,kBAAuB;IAO5B,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;IAOjC,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC;IAI5B,UAAU,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAoChD,kBAAkB,IAAI,IAAI;IAIpB,cAAc,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAYpD,OAAO,CAAC,sBAAsB;YAahB,qBAAqB;IAgBnC,OAAO,CAAC,qBAAqB;IAQ7B,OAAO,CAAC,gBAAgB;YAsCV,kBAAkB;YAqBlB,uBAAuB;YAiBvB,aAAa;IAoB3B,OAAO,CAAC,eAAe;IAoBjB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAOzB,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC;YAQrB,aAAa;IAe3B,OAAO,CAAC,MAAM;CAUf;AAcD,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC"}