@decocms/mesh 1.11.0 → 1.12.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decocms/mesh",
-  "version": "1.11.0",
+  "version": "1.12.0",
   "description": "MCP Mesh - Self-hostable MCP Gateway for managing AI connections and tools",
   "author": "Deco team",
   "license": "MIT",

package/dist/client/assets/constants-CRMW04Tq.js

@@ -1 +0,0 @@
-import{B as o}from"./use-binding-DQAwqqzW.js";import{F as s}from"./index-CytkXEgd.js";const e="mcp.mesh",m="mcp.mesh/publisher-provided",c=s(o,{target:"draft-07"});export{c as B,m as M,e as a};

package/dist/client/assets/mcp-oauth-D_E4Op0m.js

@@ -1 +0,0 @@
-import{O as I,Q as T,V,H as P}from"./auth-CPKE7Qi_.js";function A(r){let e=0;for(let t=0;t<r.length;t++){const o=r.charCodeAt(t);e=(e<<5)-e+o,e=e&e}return Math.abs(e).toString(16)}const S=new Map,U="mcp:oauth:callback:";class ${serverUrl;_clientMetadata;_redirectUrl;_state=null;_codeVerifier=null;_clientInfo=null;_tokens=null;constructor(e){this.serverUrl=e.serverUrl,this._redirectUrl=e.callbackUrl??`${window.location.origin}/oauth/callback`;const t=e.scope?Array.isArray(e.scope)?e.scope.join(" "):e.scope:void 0;this._clientMetadata={redirect_uris:[this._redirectUrl],token_endpoint_auth_method:"none",grant_types:["authorization_code","refresh_token"],response_types:["code"],client_name:e.clientName??"@decocms/mesh MCP client",...t&&{scope:t}},S.set(A(this.serverUrl),this)}get redirectUrl(){return this._redirectUrl}get clientMetadata(){return this._clientMetadata}state(){return this._state||(this._state=crypto.randomUUID()),this._state}getStoredState(){return this._state}clientInformation(){return this._clientInfo??void 0}saveClientInformation(e){this._clientInfo=e}tokens(){return this._tokens??void 0}saveTokens(e){this._tokens=e}redirectToAuthorization(e){const i=window.screenX+(window.outerWidth-600)/2,a=window.screenY+(window.outerHeight-700)/2;window.open(e.toString(),"mcp-oauth",`width=600,height=700,left=${i},top=${a},popup=yes`)}saveCodeVerifier(e){this._codeVerifier=e}codeVerifier(){if(!this._codeVerifier)throw new Error("Code verifier not found");return this._codeVerifier}invalidateCredentials(){this._clientInfo=null,this._tokens=null,this._codeVerifier=null,this._state=null}getServerUrl(){return this.serverUrl}cleanup(){S.delete(A(this.serverUrl))}}async function R(r){const e=new URL(`/mcp/${r.connectionId}`,window.location.origin),t=new $({serverUrl:e.href,clientName:r.clientName,clientUri:r.clientUri,callbackUrl:r.callbackUrl,scope:r.scope});try{const o=new Promise((l,n)=>{const u=r.timeout||12e4;let w,d=!1;const O=t.state(),p=`${U}${O}`,c=()=>{if(!d){d=!0,window.removeEventListener("message",g),window.removeEventListener("storage",_),clearTimeout(w);try{localStorage.removeItem(p)}catch{}}},m=async s=>{if(d)return;if(!s.success){c(),n(new Error(s.error||"OAuth authentication failed"));return}const{code:h,state:b}=s;if(!h){c(),n(new Error("Missing authorization code"));return}if(t.getStoredState()!==b){c(),n(new Error("OAuth state mismatch - possible CSRF attack"));return}try{const k=(await I(e))?.authorization_servers?.[0]||e,C=await T(k),y=t.clientInformation();if(!y){c(),n(new Error("Client information not found"));return}const M=t.codeVerifier(),E=await V(k,{metadata:C,clientInformation:y,authorizationCode:h,codeVerifier:M,redirectUri:t.redirectUrl,resource:new URL(e)});c(),l(E)}catch(v){c(),n(v)}},g=async s=>{s.origin===window.location.origin&&s.data?.type==="mcp:oauth:callback"&&await m(s.data)},_=async s=>{if(!(s.key!==p||!s.newValue))try{const h=JSON.parse(s.newValue);await m(h)}catch{}};window.addEventListener("message",g),window.addEventListener("storage",_),w=setTimeout(()=>{c(),n(new Error("OAuth authentication timeout"))},u)});return await P(t,{serverUrl:e})==="REDIRECT"?{token:(await o).access_token,error:null}:{token:t.tokens()?.access_token||null,error:null}}catch(o){return{token:null,error:o instanceof Error?o.message:String(o)}}finally{t.cleanup()}}function f(r,e){if(window.opener&&!window.opener.closed)return window.opener.postMessage(r,window.location.origin),!0;if(e)try{const t=`${U}${e}`;return localStorage.setItem(t,JSON.stringify(r)),!0}catch{}return!1}async function N(){const r=new URLSearchParams(window.location.search),e=r.get("code");let t=r.get("state");const o=r.get("error"),i=r.get("error_description");let a=t;if(t)try{const n=atob(t),u=JSON.parse(n);u.clientState&&(a=u.clientState)}catch{}if(o){const n=i||o;return f({type:"mcp:oauth:callback",success:!1,error:n},a),{success:!1,error:n}}if(!e||!t){const n="Missing code or state parameter";return f({type:"mcp:oauth:callback",success:!1,error:n},a),{success:!1,error:n}}return t=a||t,f({type:"mcp:oauth:callback",success:!0,code:e,state:t},t)?{success:!0}:{success:!1,error:"Parent window not available"}}async function H({url:r,token:e}){try{const t=new Headers;t.set("Content-Type","application/json"),t.set("Accept","application/json, text/event-stream");const o=await fetch(r,{method:"POST",headers:t,body:JSON.stringify({jsonrpc:"2.0",id:1,method:"initialize",params:{protocolVersion:"2025-06-18",capabilities:{},clientInfo:{name:"@decocms/mesh MCP client",version:"1.0.0"}}})});if(o.ok)return{isAuthenticated:!0,supportsOAuth:!0};let i;try{const n=await o.json();i=n.error||n.message}catch{}return o.status>=500?{isAuthenticated:!1,supportsOAuth:!1,error:i||`HTTP ${o.status}`,isServerError:!0}:{isAuthenticated:!1,supportsOAuth:!!o.headers.get("WWW-Authenticate"),error:i||`HTTP ${o.status}`}}catch(t){return console.error("[isConnectionAuthenticated] Error:",t),{isAuthenticated:!1,supportsOAuth:!1,error:t.message}}}export{R as a,N as h,H as i};

package/dist/client/assets/useQuery-DUm3_rZs.js

@@ -1 +0,0 @@
-import{a3 as u,ap as s}from"./index-CytkXEgd.js";function o(e,r){return u(e,s,r)}export{o as u};