@databasin/mcp-client 0.2.0-beta.1 → 0.2.1

package/README.md

@@ -1,26 +1,26 @@
 # DataBasin MCP Client
 
-Local stdio MCP client for DataBasin. It keeps Microsoft Entra credentials in the OS-protected MSAL cache and calls only the versioned DataBasin SvelteKit machine façade over HTTPS.
+Local stdio MCP proxy for DataBasin. It uses Auth0 device sign-in, keeps tokens in OS-protected credential storage, and connects to DataBasin's Streamable HTTP MCP endpoint with the official MCP SDK.
 
 Production is the default. The non-production profile is selected with `--environment np`.
 
-## NP beta pilot
+## Version 0.2.1 authentication fix
 
-The `0.2.0-beta.1` candidate is for the DataBasin team and invited beta testers against NP only. Install the exact version so npm's production `latest` tag remains on the production-compatible `0.1.0` line:
+Version `0.2.1` adds Auth0 login using the providers enabled for the DataBasin MCP native application. Version `0.2.0` supported only direct Microsoft Entra login; its cached sessions do not establish an Auth0 login. After upgrading, sign in again. Existing Entra credentials are neither reused nor deleted. The true MCP transport, support tickets, and notifications remain unchanged. Production is the default:
 
 ```bash
-npx -y @databasin/mcp-client@0.2.0-beta.1 doctor --environment np
-npx -y @databasin/mcp-client@0.2.0-beta.1 login --environment np
+npx -y @databasin/mcp-client@0.2.1 doctor
+npx -y @databasin/mcp-client@0.2.1 login
 ```
 
-The beta requires Node.js 22.20+ or Node.js 24 and an available OS-protected credential store. `doctor` reports the selected fixed profile, runtime support, credential-store availability, and sign-in state; it never prints account identity, tokens, or credentials.
+The client requires Node.js 22.20+ or Node.js 24 and an available OS-protected credential store. `doctor` reports the selected fixed profile, runtime support, credential-store availability, and sign-in state; it never prints account identity, tokens, or credentials.
 
-Use the exact beta version in the host configuration during the pilot:
+For non-production, use the same stable package with the NP profile:
 
-| Host | NP beta setup |
+| Host | NP setup |
 | --- | --- |
-| Codex | `codex mcp add databasin-np -- npx -y @databasin/mcp-client@0.2.0-beta.1 --environment np` |
-| Claude Code | `claude mcp add --transport stdio --scope user databasin-np -- npx -y @databasin/mcp-client@0.2.0-beta.1 --environment np` |
+| Codex | `codex mcp add databasin-np -- npx -y @databasin/mcp-client@0.2.1 --environment np` |
+| Claude Code | `claude mcp add --transport stdio --scope user databasin-np -- npx -y @databasin/mcp-client@0.2.1 --environment np` |
 | Claude Desktop / Cursor-compatible config | Use the `mcpServers` JSON below |
 | VS Code | Use the `servers` JSON below in user or workspace `mcp.json` |
 | OpenCode v2 | Use the `mcp.servers` JSON below in `opencode.jsonc` |
@@ -33,7 +33,7 @@ Claude Desktop and other hosts that accept the common `mcpServers` shape:
     "databasin-np": {
       "type": "stdio",
       "command": "npx",
-      "args": ["-y", "@databasin/mcp-client@0.2.0-beta.1", "--environment", "np"]
+      "args": ["-y", "@databasin/mcp-client@0.2.1", "--environment", "np"]
     }
   }
 }
@@ -47,7 +47,7 @@ VS Code `mcp.json`:
     "databasinNp": {
       "type": "stdio",
       "command": "npx",
-      "args": ["-y", "@databasin/mcp-client@0.2.0-beta.1", "--environment", "np"]
+      "args": ["-y", "@databasin/mcp-client@0.2.1", "--environment", "np"]
     }
   }
 }
@@ -62,19 +62,21 @@ OpenCode v2 `opencode.jsonc`:
     "servers": {
       "databasin-np": {
         "type": "local",
-        "command": ["npx", "-y", "@databasin/mcp-client@0.2.0-beta.1", "--environment", "np"]
+        "command": ["npx", "-y", "@databasin/mcp-client@0.2.1", "--environment", "np"]
       }
     }
   }
 }
 ```
 
-On native Windows, a host that cannot launch `npx` directly should use `cmd` with arguments beginning `[/c, npx, ...]` (JSON string form: `["/c", "npx", ...]`). Restart the host after changing its MCP configuration so it refreshes the 13-tool inventory.
+On native Windows, a host that cannot launch `npx` directly should use `cmd` with arguments beginning `[/c, npx, ...]` (JSON string form: `["/c", "npx", ...]`). Restart the host after changing its MCP configuration so it refreshes the server-owned tool inventory.
 
-The only remote façades are:
+The only remote MCP endpoints are:
 
-- Production: `https://databasin.cloud/api/v1/mcp`
-- NP: `https://databasin-ui-np.grayriver-813df174.centralus.azurecontainerapps.io/api/v1/mcp`
+- Production: `https://databasin.cloud/mcp`
+- NP: `https://databasin-ui-np.grayriver-813df174.centralus.azurecontainerapps.io/mcp`
+
+The downstream connection pins MCP `2026-07-28` and has no REST or legacy-protocol fallback. Tool discovery and listing are public protocol operations. The client obtains a local access token only for `tools/call`, adds it as a bearer credential to that request, and rejects HTTP redirects so credentials cannot cross origins.
 
 ## Install and connect
 
@@ -105,15 +107,17 @@ To use non-production:
 npx -y @databasin/mcp-client --environment np
 ```
 
-The assistant can call `databasin_login` and give you the short-lived Microsoft device URL and code. Enter credentials only on Microsoft’s page. The client never sends credentials or tokens through MCP tool output.
+The assistant can call `databasin_login` and give you the DataBasin Auth0 activation URL and a short-lived user code. Enter credentials only on the sign-in page or the identity provider it redirects you to. The client never sends credentials or tokens through MCP tool output.
+
+Auth0 login output is restricted to `https://databasin.us.auth0.com/activate`; both CLI and assistant login use device authorization. Raw device codes and tokens remain private to the client. Authentication requests reject redirects; unexpected login hosts, schemes, paths, queries, ports, and fragments are rejected. No callback URL, client secret, or password is configured in the plugin.
 
-Device login output is restricted to the HTTPS `microsoft.com/devicelogin` endpoint (with an optional trailing slash, canonicalized away). Interactive CLI login is restricted to the configured tenant’s exact `login.microsoftonline.com/<tenant>/oauth2/v2.0/authorize` path and client ID. Credential-bearing URLs, redirects to other hosts, other schemes, ports, fragments, and unexpected paths fail closed before a URL is opened or returned. Raw MSAL device codes, polling intervals/handles, and provider messages are discarded immediately; only the validated verification URL, human-entered user code, and expiry are retained.
+Auth0 access tokens undergo RS256 signature verification against the pinned tenant JWKS, plus issuer, environment-specific API audience, authorized client, subject, and expiry checks. Refresh tokens are stored only in the OS-protected store, separately by provider, environment, client, and audience. Refresh-token rotation is serialized across processes. Logout clears this client's local Auth0 session and cancels pending login; it does not sign out the website or erase legacy Entra sessions. The server independently validates tokens and authorizes every product operation. Entra support remains available in the code for explicitly configured non-Auth0 profiles; built-in hosted profiles do not silently fall back to it.
 
-Before using an MSAL access token, the client fail-closes on its tenant, issuer, audience, delegated scope, timing, authority, account, and expiry metadata. JWT payload decoding here is local defense-in-depth, not signature verification; the DataBasin API remains the cryptographic validation and authorization boundary.
+Automatic renewal requires both the native application's Refresh Token grant and the API's Allow Offline Access setting. The client requests `offline_access`; if Auth0 does not issue a refresh token, it requires sign-in again when the access token expires. It does not silently substitute another provider or keep expired credentials working.
 
 ## Tools
 
-The MCP server exposes thirteen tools in two deliberately separate groups. Eleven product tools call the remote DataBasin façade:
+The production server currently exposes twenty product tools, plus this client's two local authentication helpers (twenty-two total). Product tools are discovered dynamically from the remote DataBasin MCP server and mirrored over local stdio. Their names, descriptions, annotations, input/output schemas, and timeout metadata are server-owned; this package does not keep a second product-tool contract. The current server catalog is:
 
 - `databasin_get_capabilities` — fetch the server-owned capability allowlist.
 - `databasin_get_context` — fetch authorized project and connector metadata.
@@ -127,19 +131,21 @@ The MCP server exposes thirteen tools in two deliberately separate groups. Eleve
 - `databasin_cancel_query` — request cancellation and report the server’s truthful state.
 - `databasin_run_assistant` — run the read-only DataBasin assistant (a server-side Claude Code agent) that browses metadata and runs DataBasin skills over multiple steps to answer a natural-language request.
 
-The other two tools, `databasin_auth_status` and `databasin_login`, are client-local authentication helpers. They interact only with the local MSAL credential manager and Microsoft sign-in; they are not part of the eleven-tool DataBasin product façade and do not call DataBasin product routes.
+Support tools are also discovered: `databasin_get_support_context`, `databasin_list_support_tickets`, `databasin_get_support_ticket`, `databasin_create_support_ticket`, `databasin_add_support_ticket_message`, `databasin_update_support_ticket`, `databasin_list_support_notifications`, `databasin_mark_support_notification_read`, and `databasin_mark_all_support_notifications_read`. Support operations include writes; follow their server-owned schemas and annotations. Ticket/message data includes authorized email fields, and optional values may be null.
+
+The other two tools, `databasin_auth_status` and `databasin_login`, are client-local authentication helpers. They interact with Auth0 and the OS credential store; they are not part of the remote product catalog.
 
 No organization configuration is required. Unscoped `databasin_get_context` and `databasin_search` discover metadata only across organizations the signed-in user is authorized to access. A project-scoped search must include its `institutionId`; account discovery is not a wildcard and never broadens server-side authorization.
 
-The client does not expose arbitrary SQL, shell commands, connector credentials, arbitrary URLs, or arbitrary headers. `databasin_run_query` accepts only a single read-only `SELECT`/`WITH` statement, enforced server-side; multi-statement text and any mutating keyword are rejected outright, and `language`/`sessionId`/`timeoutSeconds` are never caller-facing (`language` is always `sql`; `timeoutSeconds` is a fixed server-side constant). Every remote success is the strict envelope `{ "data": T, "correlationId": "..." }` and must match the response `X-Correlation-Id` header.
+The client does not expose arbitrary SQL, shell commands, connector credentials, arbitrary URLs, or arbitrary headers. The remote server validates product inputs, authorization, output safety, query policy, and response bounds. `databasin_run_query` accepts only a single read-only `SELECT`/`WITH` statement under that server-owned contract. Every product success is the MCP result returned by the server, including its structured `{ "data": T, "correlationId": "..." }` payload.
 
-`databasin_run_agent` accepts `institutionId`, `prompt`, an optional JSON-object `context`, optional `projectInternalId`, `connectorId`, `model`, and top-level `maxTurns` (`1..100`). The optional model is restricted to the server-owned `haiku` or `sonnet` allowlist; omitting it uses `haiku`. Its profile is always `metadata_readonly`. Agent creation and cancellation each accept an optional UUID `idempotencyKey` for replay after a lost response; otherwise the client generates one. The key is sent only as `Idempotency-Key`, never in the request body. Polling is bounded to 30 minutes with bounded backoff and honors MCP cancellation.
+`databasin_run_agent` accepts the scope and execution fields advertised in its discovered schema and always uses the server-owned `metadata_readonly` profile. The remote MCP tool owns run creation, bounded polling, cancellation on MCP abort, authorization rechecks, and any idempotency behavior; the local proxy performs one `tools/call` and forwards its cancellation signal.
 
 Agent status, result, and cancellation responses include the complete server-authorized scope. A canonical run contains `runId`, the three scope IDs (nullable where optional), `profile`, `status`, bounded `result`/`error`, and `createdAt`/`updatedAt`. Cancellation reports the state returned by the server and does not imply completion before the server says `cancelled`.
 
-`databasin_run_query` accepts `connectorId`, `code` (the SQL text, 1–32768 bytes), and `maxRows` (`1..1000`, default `1000`). Unlike agent runs, query creation and cancellation take no idempotency key. Polling is bounded to 2 minutes with the same bounded backoff, since a query is meant to feel like a fast synchronous tool call rather than a long-running job; on timeout the last observed non-terminal status is returned with its `queryId` for `databasin_get_query_status`/`databasin_cancel_query` to follow up. A canonical query result contains `queryId`, `connectorId`, `status`, bounded `columns`/`data`/`rowCount` (populated once terminal, otherwise `null`), `truncated`, and `error`.
+`databasin_run_query` accepts the bounded connector, SQL, and row-limit fields in the discovered schema. The remote MCP tool owns its bounded polling and timeout behavior. Status and cancellation remain explicit tools for follow-up. A canonical query result contains `queryId`, `connectorId`, `status`, bounded `columns`/`data`/`rowCount`, `truncated`, and `error`.
 
-`databasin_run_assistant` accepts `connectorId` (required, so the assistant has an LLM to route to), `prompt` (1–32768 bytes), an optional `context` string (up to 4096 characters), and `maxTurns` (`1..25`, default `6`). It never accepts `model`, `sessionId`, `options`, or any tool/permission override — the assistant is stateless per call in v1 (no session continuity), and the server-side agent's read-only tool policy is enforced entirely on the façade, not by this client. The call is synchronous and may take up to a few minutes; the client gives this one endpoint a longer request timeout than the shared default so a legitimate in-progress run is never cut off client-side first. A canonical result contains `status` (`completed`/`failed`/`incomplete`), bounded `text`, `turns`, and `error`. This tool is metadata-and-skills only — it never executes SQL; use `databasin_run_query` for that.
+`databasin_run_assistant` remains the server's bounded, read-only assistant operation. It is metadata-and-skills only; use `databasin_run_query` for SQL. The server advertises the accepted input and output schemas plus the call timeout in MCP metadata, and the client mirrors them without local copies. This transport change does not replace or modify the server's existing Claude Agent SDK runtime.
 
 ## CLI fallback
 
@@ -164,12 +170,12 @@ npm run verify:package
 
 `npm run verify` runs the TypeScript check, unit tests, build, and stdio child-process E2E. CI runs those checks on Node 22 and 24 across Linux, macOS, and Windows, audits production dependencies, and verifies the exact package allowlist with `npm pack --dry-run --json`.
 
-Release qualification uses an exact local tarball, never a mutable dist-tag. After `npm pack`, an authorized tester with an existing NP session can run the read-only qualification:
+Release qualification uses an exact local tarball, never a mutable dist-tag. After `npm pack`, an authorized tester with an existing production session can run the read-only qualification:
 
 ```bash
-DATABASIN_MCP_BETA_TARBALL=./databasin-mcp-client-0.2.0-beta.1.tgz npm run qualify:np
+DATABASIN_MCP_TARBALL=./databasin-mcp-client-0.2.1.tgz npm run qualify:package
 ```
 
-The release owner may add `DATABASIN_MCP_QUALIFY_STATEFUL=1` plus explicit authorized connector/scope environment variables to exercise all 13 tools, including the agent, query, and assistant lifecycles. The command emits only package/version, counts, mode, and terminal statuses; resource identifiers, names, responses, and credentials are not evidence output.
+Set `DATABASIN_MCP_QUALIFY_ENVIRONMENT=np` to qualify against NP instead. This check installs the exact artifact in a temporary directory, starts its stdio executable, checks local sign-in and the twenty-two-tool inventory, and calls only context/search/support read operations. It never creates agent jobs, executes SQL, or changes support data, and does not print credentials or business content. The old `qualify:np` script remains only for historical beta lifecycle qualification.
 
-Release approval still requires proof of the Entra registration, tenant, issuer, audience, delegated scope, and wrong-claim rejection behavior for each environment.
+An authentication release requires a fresh Auth0 device login, signed-token validation, secure persistence across client restarts, refresh-token renewal, and authorized MCP calls against the target environment. Cached Microsoft sessions and mocked login tests are not substitutes for this release gate. Qualifying production does not claim that non-production login or every enabled identity provider was tested.

package/dist/auth-schema.d.ts

@@ -0,0 +1,23 @@
+import { z } from 'zod';
+export declare const AssistantAuthOutputSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    status: z.ZodLiteral<"pending">;
+    environment: z.ZodEnum<{
+        prod: "prod";
+        np: "np";
+    }>;
+    loginUrl: z.ZodNullable<z.ZodString>;
+    userCode: z.ZodOptional<z.ZodString>;
+    expiresAt: z.ZodOptional<z.ZodISODateTime>;
+    message: z.ZodString;
+}, z.core.$strict>, ...z.ZodObject<{
+    status: z.ZodLiteral<"authenticated" | "not_authenticated" | "failed">;
+    environment: z.ZodEnum<{
+        prod: "prod";
+        np: "np";
+    }>;
+    loginUrl: z.ZodNull;
+    userCode: z.ZodOptional<z.ZodNever>;
+    expiresAt: z.ZodOptional<z.ZodNever>;
+    message: z.ZodString;
+}, z.core.$strict>[]], "status">;
+//# sourceMappingURL=auth-schema.d.ts.map

package/dist/auth-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-schema.d.ts","sourceRoot":"","sources":["../src/auth-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAoBxB,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;gCAuBpC,CAAC"}

package/dist/auth-schema.js

@@ -0,0 +1,42 @@
+import { z } from 'zod';
+import { validateAssistantLoginUrl } from './login-url.js';
+const authEnvironment = z.enum(['prod', 'np']);
+const URL_LIKE_AUTH_MESSAGE = /(?:\b(?:https?|hxxps?|ftp|file|data|javascript)\s*:\s*(?:[/\\]\s*){0,2}|\bwww\s*(?:\.|\[\.\]|\(\.\))|(?:\b|@)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.|\[\.\]|\(\.\)))+[a-z]{2,63}(?=\b|[/:?#])|\b(?:localhost|(?:\d{1,3}\.){3}\d{1,3})(?=[:/\s]|$))/iu;
+const authMessage = z.string().max(1_000).refine((value) => !URL_LIKE_AUTH_MESSAGE.test(normalizeAuthMessage(value)), 'The authentication message was rejected.');
+const safeDeviceLoginUrl = z.string().max(4_096).superRefine((value, context) => {
+    try {
+        validateAssistantLoginUrl(value);
+    }
+    catch {
+        context.addIssue({ code: 'custom', message: 'The authentication result was rejected.' });
+    }
+});
+export const AssistantAuthOutputSchema = z.discriminatedUnion('status', [
+    z.object({
+        status: z.literal('pending'),
+        environment: authEnvironment,
+        loginUrl: safeDeviceLoginUrl.nullable(),
+        userCode: z.string().trim().regex(/^[A-Z0-9-]{4,32}$/iu).optional(),
+        expiresAt: z.iso.datetime().optional(),
+        message: authMessage
+    }).strict(),
+    ...['authenticated', 'not_authenticated', 'failed'].map((status) => z.object({
+        status: z.literal(status),
+        environment: authEnvironment,
+        loginUrl: z.null(),
+        userCode: z.never().optional(),
+        expiresAt: z.never().optional(),
+        message: authMessage
+    }).strict())
+]).superRefine((value, context) => {
+    if (value.status !== 'pending')
+        return;
+    const hasPrompt = value.loginUrl !== null;
+    if (hasPrompt !== (value.userCode !== undefined) || hasPrompt !== (value.expiresAt !== undefined)) {
+        context.addIssue({ code: 'custom', message: 'The authentication result has an invalid pending state.' });
+    }
+});
+function normalizeAuthMessage(value) {
+    return value.normalize('NFKC').replace(/[\u200B-\u200D\u2060\uFEFF]/gu, '').replace(/\s+/gu, ' ');
+}
+//# sourceMappingURL=auth-schema.js.map

package/dist/auth-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-schema.js","sourceRoot":"","sources":["../src/auth-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAE3D,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;AAC/C,MAAM,qBAAqB,GACzB,2PAA2P,CAAC;AAE9P,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAC9C,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,EACnE,0CAA0C,CAC3C,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9E,IAAI,CAAC;QACH,yBAAyB,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;IACtE,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC5B,WAAW,EAAE,eAAe;QAC5B,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,EAAE;QACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;QACnE,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACtC,OAAO,EAAE,WAAW;KACrB,CAAC,CAAC,MAAM,EAAE;IACX,GAAI,CAAC,eAAe,EAAE,mBAAmB,EAAE,QAAQ,CAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QACtF,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACzB,WAAW,EAAE,eAAe;QAC5B,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE;QAClB,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;QAC9B,SAAS,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;QAC/B,OAAO,EAAE,WAAW;KACrB,CAAC,CAAC,MAAM,EAAE,CAAC;CACb,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO;IACvC,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC;IAC1C,IAAI,SAAS,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,SAAS,KAAK,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,CAAC;QAClG,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,yDAAyD,EAAE,CAAC,CAAC;IAC3G,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,+BAA+B,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AACpG,CAAC"}

package/dist/auth-tools.d.ts

@@ -0,0 +1,10 @@
+import { McpServer } from '@modelcontextprotocol/server';
+import type { AssistantAuthResult } from './auth.js';
+export declare const LOCAL_AUTH_TOOL_NAMES: readonly ["databasin_auth_status", "databasin_login"];
+type AuthTools = Readonly<{
+    startLogin(): Promise<AssistantAuthResult>;
+    getLoginStatus(): Promise<AssistantAuthResult>;
+}>;
+export declare function registerAuthTools(server: McpServer, auth: AuthTools): void;
+export {};
+//# sourceMappingURL=auth-tools.d.ts.map

package/dist/auth-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-tools.d.ts","sourceRoot":"","sources":["../src/auth-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAsB,MAAM,8BAA8B,CAAC;AAE7E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAMrD,eAAO,MAAM,qBAAqB,uDAGvB,CAAC;AAEZ,KAAK,SAAS,GAAG,QAAQ,CAAC;IACxB,UAAU,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC3C,cAAc,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAChD,CAAC,CAAC;AAKH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,GAAG,IAAI,CAgB1E"}

package/dist/auth-tools.js

@@ -0,0 +1,60 @@
+import { z, ZodError } from 'zod';
+import { AssistantAuthOutputSchema } from './auth-schema.js';
+import { safeCorrelationId } from './correlation.js';
+import { DataBasinError, publicError } from './errors.js';
+import { assertSafeOutput, sanitizeOutput } from './safety.js';
+export const LOCAL_AUTH_TOOL_NAMES = Object.freeze([
+    'databasin_auth_status',
+    'databasin_login'
+]);
+const emptyInput = z.object({}).strict();
+const annotations = { readOnlyHint: true, destructiveHint: false, openWorldHint: false };
+export function registerAuthTools(server, auth) {
+    server.registerTool(LOCAL_AUTH_TOOL_NAMES[0], {
+        title: 'Check DataBasin sign-in',
+        description: 'Check local sign-in state without returning account identity or credentials.',
+        inputSchema: emptyInput,
+        outputSchema: AssistantAuthOutputSchema,
+        annotations
+    }, async (_input, context) => authToolResult(() => auth.getLoginStatus(), context));
+    server.registerTool(LOCAL_AUTH_TOOL_NAMES[1], {
+        title: 'Sign in to DataBasin',
+        description: 'Start DataBasin device sign-in. Enter credentials only on the approved sign-in page; never provide credentials in chat.',
+        inputSchema: emptyInput,
+        outputSchema: AssistantAuthOutputSchema,
+        annotations: { ...annotations, readOnlyHint: false, openWorldHint: true }
+    }, async (_input, context) => authToolResult(() => auth.startLogin(), context));
+}
+async function authToolResult(operation, _context) {
+    try {
+        const output = AssistantAuthOutputSchema.parse(sanitizeOutput(await operation()));
+        const result = { ...output, message: authOutputMessage(output) };
+        assertSafeOutput(result);
+        return {
+            content: [{ type: 'text', text: JSON.stringify(result) }],
+            structuredContent: result
+        };
+    }
+    catch (error) {
+        const normalized = error instanceof ZodError
+            ? new DataBasinError('INVALID_ARGUMENT', error.issues[0]?.message ?? 'The tool arguments are invalid.')
+            : error;
+        const visible = publicError(normalized);
+        const { correlationId, ...publicFields } = visible;
+        const safe = { ...publicFields, correlationId: safeCorrelationId(correlationId) };
+        return { content: [{ type: 'text', text: JSON.stringify(safe) }], isError: true };
+    }
+}
+function authOutputMessage(output) {
+    if (output.status === 'pending') {
+        return output.loginUrl === null
+            ? 'DataBasin is preparing the device sign-in instructions.'
+            : 'DataBasin device sign-in is ready. Use the approved login URL and user code, then call databasin_auth_status.';
+    }
+    if (output.status === 'authenticated')
+        return 'DataBasin sign-in is complete.';
+    if (output.status === 'not_authenticated')
+        return 'DataBasin is not signed in. Call databasin_login to begin.';
+    return 'DataBasin sign-in did not complete. Call databasin_login to try again.';
+}
+//# sourceMappingURL=auth-tools.js.map

package/dist/auth-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-tools.js","sourceRoot":"","sources":["../src/auth-tools.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAElC,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE/D,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC;IACjD,uBAAuB;IACvB,iBAAiB;CACT,CAAC,CAAC;AAOZ,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACzC,MAAM,WAAW,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;AAEzF,MAAM,UAAU,iBAAiB,CAAC,MAAiB,EAAE,IAAe;IAClE,MAAM,CAAC,YAAY,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE;QAC5C,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,8EAA8E;QAC3F,WAAW,EAAE,UAAU;QACvB,YAAY,EAAE,yBAAyB;QACvC,WAAW;KACZ,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IAEpF,MAAM,CAAC,YAAY,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE;QAC5C,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,yHAAyH;QACtI,WAAW,EAAE,UAAU;QACvB,YAAY,EAAE,yBAAyB;QACvC,WAAW,EAAE,EAAE,GAAG,WAAW,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE;KAC1E,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,SAA6C,EAC7C,QAAuB;IAEvB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;QACjE,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACzB,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAClE,iBAAiB,EAAE,MAAM;SAC1B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,UAAU,GAAG,KAAK,YAAY,QAAQ;YAC1C,CAAC,CAAC,IAAI,cAAc,CAAC,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,iCAAiC,CAAC;YACvG,CAAC,CAAC,KAAK,CAAC;QACV,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,EAAE,aAAa,EAAE,GAAG,YAAY,EAAE,GAAG,OAAO,CAAC;QACnD,MAAM,IAAI,GAAG,EAAE,GAAG,YAAY,EAAE,aAAa,EAAE,iBAAiB,CAAC,aAAa,CAAC,EAAE,CAAC;QAClF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAa,EAAE,CAAC;IACtG,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,MAA0E;IACnG,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC,QAAQ,KAAK,IAAI;YAC7B,CAAC,CAAC,yDAAyD;YAC3D,CAAC,CAAC,+GAA+G,CAAC;IACtH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,eAAe;QAAE,OAAO,gCAAgC,CAAC;IAC/E,IAAI,MAAM,CAAC,MAAM,KAAK,mBAAmB;QAAE,OAAO,4DAA4D,CAAC;IAC/G,OAAO,wEAAwE,CAAC;AAClF,CAAC"}

package/dist/auth.d.ts

@@ -1,84 +1,23 @@
-import { type AccountInfo, type AuthenticationResult } from '@azure/msal-node';
-import { type DataBasinEnvironment, type DataBasinProfile } from './config.js';
-import { type RawDeviceCodeResponse } from './login-url.js';
-export interface AuthStatus {
-    authenticated: boolean;
-    environment: DataBasinEnvironment;
-    username?: string;
-}
-export type AssistantAuthState = 'authenticated' | 'pending' | 'not_authenticated' | 'failed';
-interface AssistantAuthResultBase {
-    environment: DataBasinEnvironment;
-    message: string;
-}
-interface PendingAssistantAuthResult extends AssistantAuthResultBase {
-    status: 'pending';
-    loginUrl: string | null;
-    userCode?: string;
-    expiresAt?: string;
-}
-interface SettledAssistantAuthResult extends AssistantAuthResultBase {
-    status: Exclude<AssistantAuthState, 'pending'>;
-    loginUrl: null;
-    userCode?: never;
-    expiresAt?: never;
-}
-export type AssistantAuthResult = PendingAssistantAuthResult | SettledAssistantAuthResult;
-export interface PublicClientLike {
-    getAllAccounts(): Promise<AccountInfo[]>;
-    acquireTokenSilent(request: {
-        account: AccountInfo;
-        scopes: string[];
-    }): Promise<AuthenticationResult>;
-    acquireTokenInteractive(request: {
-        scopes: string[];
-        openBrowser: (url: string) => Promise<void>;
-        prompt?: string;
-        successTemplate?: string;
-        errorTemplate?: string;
-    }): Promise<AuthenticationResult>;
-    acquireTokenByDeviceCode(request: {
-        scopes: string[];
-        timeout?: number;
-        cancel?: boolean;
-        deviceCodeCallback: (response: RawDeviceCodeResponse) => void;
-    }): Promise<AuthenticationResult | null>;
-    signOut(request: {
-        account: AccountInfo;
-    }): Promise<void>;
-}
+import { type Auth0Options } from './auth0.js';
+import { type AuthManagerOptions as EntraOptions } from './entra-auth.js';
+import type { DataBasinProfile } from './config.js';
+export type { AuthStatus, AssistantAuthState, AssistantAuthResult, PublicClientLike } from './entra-auth.js';
+export { createSecurePublicClient } from './credential-store.js';
 export interface AuthManagerOptions {
-    createClient?: () => Promise<PublicClientLike>;
-    openBrowser?: (url: string) => Promise<void>;
-    now?: () => number;
+    auth0?: Auth0Options;
+    entra?: EntraOptions;
 }
+/** Use the configured provider. Never treat a cached Entra login as an Auth0 session. */
 export declare class AuthManager {
     readonly profile: DataBasinProfile;
-    private clientPromise;
-    private tokenPromise;
-    private activeLogin;
-    private lastLoginFailed;
-    private readonly createClient;
-    private readonly openBrowser;
-    private readonly now;
+    private readonly provider;
     constructor(profile: DataBasinProfile, options?: AuthManagerOptions);
     getAccessToken(): Promise<string>;
-    login(): Promise<AuthStatus>;
-    startLogin(): Promise<AssistantAuthResult>;
+    login(): Promise<import("./entra-auth.js").AuthStatus>;
+    startLogin(): Promise<import("./entra-auth.js").AssistantAuthResult>;
+    getLoginStatus(): Promise<import("./entra-auth.js").AssistantAuthResult>;
     cancelPendingLogin(): void;
-    getLoginStatus(): Promise<AssistantAuthResult>;
-    private pendingAssistantResult;
-    private cachedAssistantResult;
-    private failedAssistantResult;
-    private beginDeviceLogin;
-    private performDeviceLogin;
-    private performInteractiveLogin;
-    private completeLogin;
-    private assistantResult;
     logout(): Promise<number>;
-    status(): Promise<AuthStatus>;
-    private acquireSilent;
-    private client;
+    status(): Promise<import("./entra-auth.js").AuthStatus>;
 }
-export { createSecurePublicClient } from './credential-store.js';
 //# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,oBAAoB,EAC1B,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,KAAK,oBAAoB,EAAE,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAG/E,OAAO,EAGL,KAAK,qBAAqB,EAE3B,MAAM,gBAAgB,CAAC;AAGxB,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,OAAO,CAAC;IACvB,WAAW,EAAE,oBAAoB,CAAC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,kBAAkB,GAAG,eAAe,GAAG,SAAS,GAAG,mBAAmB,GAAG,QAAQ,CAAC;AAE9F,UAAU,uBAAuB;IAC/B,WAAW,EAAE,oBAAoB,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;CACjB;AACD,UAAU,0BAA2B,SAAQ,uBAAuB;IAClE,MAAM,EAAE,SAAS,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AACD,UAAU,0BAA2B,SAAQ,uBAAuB;IAClE,MAAM,EAAE,OAAO,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;IAC/C,QAAQ,EAAE,IAAI,CAAC;IACf,QAAQ,CAAC,EAAE,KAAK,CAAC;IACjB,SAAS,CAAC,EAAE,KAAK,CAAC;CACnB;AAED,MAAM,MAAM,mBAAmB,GAAG,0BAA0B,GAAG,0BAA0B,CAAC;AAE1F,MAAM,WAAW,gBAAgB;IAC/B,cAAc,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACzC,kBAAkB,CAAC,OAAO,EAAE;QAC1B,OAAO,EAAE,WAAW,CAAC;QACrB,MAAM,EAAE,MAAM,EAAE,CAAC;KAClB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAClC,uBAAuB,CAAC,OAAO,EAAE;QAC/B,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAClC,wBAAwB,CAAC,OAAO,EAAE;QAChC,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,kBAAkB,EAAE,CAAC,QAAQ,EAAE,qBAAqB,KAAK,IAAI,CAAC;KAC/D,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IACzC,OAAO,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/C,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAUD,qBAAa,WAAW;IAUpB,QAAQ,CAAC,OAAO,EAAE,gBAAgB;IATpC,OAAO,CAAC,aAAa,CAAwC;IAC7D,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,WAAW,CAA0B;IAC7C,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAkC;IAC/D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiC;IAC7D,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;gBAGxB,OAAO,EAAE,gBAAgB,EAClC,OAAO,GAAE,kBAAuB;IAO5B,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;IAOjC,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC;IAI5B,UAAU,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAoChD,kBAAkB,IAAI,IAAI;IAIpB,cAAc,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAYpD,OAAO,CAAC,sBAAsB;YAahB,qBAAqB;IAgBnC,OAAO,CAAC,qBAAqB;IAQ7B,OAAO,CAAC,gBAAgB;YAsCV,kBAAkB;YAqBlB,uBAAuB;YAiBvB,aAAa;IAoB3B,OAAO,CAAC,eAAe;IAoBjB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAOzB,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC;YAQrB,aAAa;IAe3B,OAAO,CAAC,MAAM;CAUf;AAcD,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAoB,KAAK,kBAAkB,IAAI,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC5F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,YAAY,EAAE,UAAU,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC7G,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,MAAM,WAAW,kBAAkB;IAAG,KAAK,CAAC,EAAE,YAAY,CAAC;IAAC,KAAK,CAAC,EAAE,YAAY,CAAA;CAAE;AAElF,yFAAyF;AACzF,qBAAa,WAAW;IAEV,QAAQ,CAAC,OAAO,EAAE,gBAAgB;IAD9C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkC;gBACtC,OAAO,EAAE,gBAAgB,EAAE,OAAO,GAAE,kBAAuB;IAKhF,cAAc;IACd,KAAK;IACL,UAAU;IACV,cAAc;IACd,kBAAkB;IAClB,MAAM;IACN,MAAM;CACP"}