@decocms/mesh 2.42.0 → 2.43.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decocms/mesh",
-  "version": "2.42.0",
+  "version": "2.43.0",
   "description": "MCP Mesh - Self-hostable MCP Gateway for managing AI connections and tools",
   "author": "Deco team",
   "license": "MIT",

package/dist/client/assets/constants-DEnPiVHJ.js

@@ -1 +0,0 @@
-import{x as t,B as a}from"./index-C5IjOzE8.js";const e=t(a,{target:"draft-7"});export{e as B};

package/dist/client/assets/mcp-oauth-8WlobB9v.js

@@ -1 +0,0 @@
-import{a2 as P,a3 as $,a4 as L,a5 as R}from"./index-C5IjOzE8.js";function I(n){let e=0;for(let t=0;t<n.length;t++){const r=n.charCodeAt(t);e=(e<<5)-e+r,e=e&e}return Math.abs(e).toString(16)}const b=new Map,O="mcp:oauth:callback:";class V{serverUrl;_clientMetadata;_redirectUrl;_windowMode;_state=null;_codeVerifier=null;_clientInfo=null;_tokens=null;constructor(e){this.serverUrl=e.serverUrl,this._redirectUrl=e.callbackUrl??`${window.location.origin}/oauth/callback`,this._windowMode=e.windowMode??"popup";const t=e.scope?Array.isArray(e.scope)?e.scope.join(" "):e.scope:void 0;this._clientMetadata={redirect_uris:[this._redirectUrl],token_endpoint_auth_method:"none",grant_types:["authorization_code","refresh_token"],response_types:["code"],client_name:e.clientName??"@decocms/mesh MCP client",...t&&{scope:t}},b.set(I(this.serverUrl),this)}get redirectUrl(){return this._redirectUrl}get clientMetadata(){return this._clientMetadata}state(){return this._state||(this._state=crypto.randomUUID()),this._state}getStoredState(){return this._state}clientInformation(){return this._clientInfo??void 0}saveClientInformation(e){this._clientInfo=e}tokens(){return this._tokens??void 0}saveTokens(e){this._tokens=e}redirectToAuthorization(e){if(this._windowMode==="tab")window.open(e.toString(),"_blank")||(window.location.href=e.toString());else{const o=window.screenX+(window.outerWidth-600)/2,a=window.screenY+(window.outerHeight-700)/2;if(!window.open(e.toString(),"mcp-oauth",`width=600,height=700,left=${o},top=${a},popup=yes`))throw new Error("OAuth popup was blocked. Please allow popups for this site and try again.")}}saveCodeVerifier(e){this._codeVerifier=e}codeVerifier(){if(!this._codeVerifier)throw new Error("Code verifier not found");return this._codeVerifier}invalidateCredentials(){this._clientInfo=null,this._tokens=null,this._codeVerifier=null,this._state=null}getServerUrl(){return this.serverUrl}cleanup(){b.delete(I(this.serverUrl))}}async function j(n){const e=n.meshUrl??window.location.origin,t=new URL(`/mcp/${n.connectionId}`,e),r=new V({serverUrl:t.href,clientName:n.clientName,clientUri:n.clientUri,callbackUrl:n.callbackUrl,scope:n.scope,windowMode:n.windowMode});try{const o=new Promise((i,u)=>{const d=n.timeout||12e4;let _,w=!1;const T=r.state(),m=`${O}${T}`,h=()=>{window.removeEventListener("message",S),window.removeEventListener("storage",A),clearTimeout(_);try{localStorage.removeItem(m)}catch{}},g=async c=>{if(w)return;if(w=!0,!c.success){h(),u(new Error(c.error||"OAuth authentication failed"));return}const{code:p,state:M}=c;if(!p){h(),u(new Error("Missing authorization code"));return}if(r.getStoredState()!==M){h(),u(new Error("OAuth state mismatch - possible CSRF attack"));return}try{const v=(await P(t))?.authorization_servers?.[0]||t,U=await $(v),f=r.clientInformation();if(!f){h(),u(new Error("Client information not found"));return}const E=r.codeVerifier(),C=await L(v,{metadata:U,clientInformation:f,authorizationCode:p,codeVerifier:E,redirectUri:r.redirectUrl,resource:new URL(t)});h(),i({tokens:C,clientId:f.client_id??null,clientSecret:"client_secret"in f?f.client_secret:null,tokenEndpoint:U?.token_endpoint??null})}catch(y){h(),u(y)}},S=async c=>{c.origin===window.location.origin&&c.data?.type==="mcp:oauth:callback"&&await g(c.data)},A=async c=>{if(!(c.key!==m||!c.newValue))try{const p=JSON.parse(c.newValue);await g(p)}catch{}};window.addEventListener("message",S),window.addEventListener("storage",A),_=setTimeout(()=>{w||(w=!0,h(),u(new Error("OAuth authentication timeout")))},d)});if(await R(r,{serverUrl:t})==="REDIRECT"){const i=await o;return{token:i.tokens.access_token,tokenInfo:{accessToken:i.tokens.access_token,refreshToken:i.tokens.refresh_token??null,expiresIn:i.tokens.expires_in??null,scope:i.tokens.scope??null,clientId:i.clientId,clientSecret:i.clientSecret,tokenEndpoint:i.tokenEndpoint},error:null}}const l=r.tokens(),s=r.clientInformation();return{token:l?.access_token||null,tokenInfo:l?{accessToken:l.access_token,refreshToken:l.refresh_token??null,expiresIn:l.expires_in??null,scope:l.scope??null,clientId:s?.client_id??null,clientSecret:s&&"client_secret"in s?s.client_secret:null,tokenEndpoint:null}:null,error:null}}catch(o){return{token:null,tokenInfo:null,error:o instanceof Error?o.message:String(o)}}finally{r.cleanup()}}function k(n,e){if(window.opener&&!window.opener.closed)return window.opener.postMessage(n,window.location.origin),!0;if(e)try{const t=`${O}${e}`;return localStorage.setItem(t,JSON.stringify(n)),!0}catch{}return!1}async function D(){const n=new URLSearchParams(window.location.search),e=n.get("code");let t=n.get("state");const r=n.get("error"),o=n.get("error_description");let a=t;if(t)try{const s=atob(t),i=JSON.parse(s);i.clientState&&(a=i.clientState)}catch{}if(r){const s=o||r;return k({type:"mcp:oauth:callback",success:!1,error:s},a),{success:!1,error:s}}if(!e||!t){const s="Missing code or state parameter";return k({type:"mcp:oauth:callback",success:!1,error:s},a),{success:!1,error:s}}return t=a||t,k({type:"mcp:oauth:callback",success:!0,code:e,state:t},t)?{success:!0}:{success:!1,error:"Parent window not available"}}function x(n){try{return new URL(n).pathname.match(/^\/mcp\/([^/]+)/)?.[1]??null}catch{return null}}async function N(n,e){try{const t=`/api/connections/${n}/oauth-token/status`,r=e?new URL(t,e).href:t,o=await fetch(r,{credentials:e?"omit":"include"});return o.ok?{hasToken:(await o.json()).hasToken===!0}:{hasToken:!1}}catch{return{hasToken:!1}}}async function J({url:n,token:e,meshUrl:t}){try{const r=new Headers;r.set("Content-Type","application/json"),r.set("Accept","application/json, text/event-stream");const o=await fetch(n,{method:"POST",headers:r,body:JSON.stringify({jsonrpc:"2.0",id:1,method:"initialize",params:{protocolVersion:"2025-06-18",capabilities:{},clientInfo:{name:"@decocms/mesh MCP client",version:"1.0.0"}}})}),a=x(n),l=t??new URL(n).origin;if(o.ok)return{isAuthenticated:!0,supportsOAuth:!1,hasOAuthToken:(a?await N(a,l):{hasToken:!1}).hasToken};let s;try{const d=await o.json();s=d.error||d.message}catch{}return o.status>=500?{isAuthenticated:!1,supportsOAuth:!1,hasOAuthToken:!1,error:s||`HTTP ${o.status}`,isServerError:!0}:{isAuthenticated:!1,supportsOAuth:!!o.headers.get("WWW-Authenticate"),hasOAuthToken:!1,error:s||`HTTP ${o.status}`}}catch(r){return console.error("[isConnectionAuthenticated] Error:",r),{isAuthenticated:!1,supportsOAuth:!1,hasOAuthToken:!1,error:r.message}}}export{j as a,D as h,J as i};

package/dist/client/assets/useInfiniteQuery-0UTvb_je.js

@@ -1 +0,0 @@
-import{I as u}from"./infiniteQueryObserver-CMctzjZY.js";import{W as i}from"./index-C5IjOzE8.js";function t(e,r){return i(e,u,r)}export{t as u};

package/dist/client/assets/useQuery-BlDghdjF.js

@@ -1 +0,0 @@
-import{W as u,X as s}from"./index-C5IjOzE8.js";function o(e,r){return u(e,s,r)}export{o as u};