@decocms/mesh 2.54.0 → 2.55.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decocms/mesh",
-  "version": "2.54.0",
+  "version": "2.55.0",
   "description": "MCP Mesh - Self-hostable MCP Gateway for managing AI connections and tools",
   "author": "Deco team",
   "license": "MIT",

package/dist/client/assets/connect-DhcqxjCL.js

@@ -1 +0,0 @@
-import{c as T,bx as M,j as e,by as P,Y as q,r as R,ab as h,a as O}from"./index-BFVvPqrB.js";import{u as A}from"./useQuery-BjPTe_W-.js";import{u as _}from"./useMutation-7JLPlPaT.js";import{B as y}from"./button-J3cF8gn2.js";import{C as N,a as v}from"./card-BEYPRwIW.js";import{i as L,a as U}from"./mcp-oauth-3en47Te1.js";import{c as C,C as K,a as k}from"./circle-alert-B3wSJq8g.js";const Q=[["path",{d:"M15 3h6v6",key:"1q9fwt"}],["path",{d:"M10 14 21 3",key:"gplh6r"}],["path",{d:"M18 13v6a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V8a2 2 0 0 1 2-2h6",key:"a6xqqp"}]],D=C("external-link",Q);const H=[["path",{d:"M21 12a9 9 0 1 1-6.219-8.56",key:"13zald"}]],w=C("loader-circle",H);const J=[["path",{d:"M3 12a9 9 0 0 1 9-9 9.75 9.75 0 0 1 6.74 2.74L21 8",key:"v9h5vc"}],["path",{d:"M21 3v5h-5",key:"1q7to0"}],["path",{d:"M21 12a9 9 0 0 1-9 9 9.75 9.75 0 0 1-6.74-2.74L3 16",key:"3uifl3"}],["path",{d:"M8 16H3v5",key:"1cv678"}]],Y=C("refresh-cw",J),B=t=>{const n=T.c(6);let i;n[0]!==t?({...i}=t,n[0]=t,n[1]=i):i=n[1];const{theme:a}=M(),d=a===void 0?"system":a;let r;n[2]===Symbol.for("react.memo_cache_sentinel")?(r={"--normal-bg":"var(--popover)","--normal-text":"var(--popover-foreground)","--normal-border":"var(--border)"},n[2]=r):r=n[2];let m;return n[3]!==i||n[4]!==d?(m=e.jsx(P,{theme:d,className:"toaster group",style:r,...i}),n[3]=i,n[4]=d,n[5]=m):m=n[5],m},b={session:t=>["user-sandbox-session",t]};function V({sessionId:t,onComplete:n,onError:i}){const a=q(),[p,d]=R.useState(null),{data:r,isLoading:m,error:j}=A({queryKey:b.session(t),queryFn:async()=>{const s=await fetch(`/api/user-sandbox/sessions/${t}`);if(!s.ok){const o=await s.json();throw new Error(o.error||"Failed to load session")}return s.json()}}),F=_({mutationFn:async({appName:s,connectionId:o})=>{const l=await fetch(`/api/user-sandbox/sessions/${t}/configure`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({app_name:s,connection_id:o})});if(!l.ok){const u=await l.json();throw new Error(u.error||"Configuration failed")}return l.json()},onSuccess:()=>{a.invalidateQueries({queryKey:b.session(t)})}}),x=_({mutationFn:async()=>{const s=await fetch(`/api/user-sandbox/sessions/${t}/complete`,{method:"POST",headers:{"Content-Type":"application/json"}});if(!s.ok){const o=await s.json();throw new Error(o.error||"Failed to complete")}return s.json()},onSuccess:s=>{s.redirectUrl?window.location.href=s.redirectUrl:(h.success("Setup complete!"),a.invalidateQueries({queryKey:b.session(t)}),n?.({agentId:s.agentId,redirectUrl:s.redirectUrl}))},onError:s=>{const o=s instanceof Error?s:new Error("Failed to complete");h.error(o.message),i?.(o)}}),S=async s=>{d(s.app_name);try{const o=await fetch(`/api/user-sandbox/sessions/${t}/provision`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({app_name:s.app_name})});if(!o.ok){const g=await o.json();throw new Error(g.error||"Failed to provision connection")}const u=(await o.json()).connection_id;if(s.connection_type==="HTTP"||s.connection_type==="SSE"||s.connection_type==="Websocket"){const g=`/mcp/${u}`,z=await L({url:g,token:null});if(!z.isAuthenticated&&z.supportsOAuth){h.info("Opening authentication window...");const c=await U({connectionId:u,clientName:s.title,timeout:3e5});if(c.error)throw new Error(c.error);if(c.tokenInfo){const E=await fetch(`/api/connections/${u}/oauth-token`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({accessToken:c.tokenInfo.accessToken,refreshToken:c.tokenInfo.refreshToken,expiresIn:c.tokenInfo.expiresIn,scope:c.tokenInfo.scope,clientId:c.tokenInfo.clientId,clientSecret:c.tokenInfo.clientSecret,tokenEndpoint:c.tokenInfo.tokenEndpoint})});if(!E.ok){const $=await E.json().catch(()=>({}));throw new Error($.error||"Failed to save authentication tokens. Please try again.")}}}}await F.mutateAsync({appName:s.app_name,connectionId:u}),h.success(`${s.title} connected successfully`)}catch(o){console.error("Connection error:",o);const l=o instanceof Error?o:new Error("Failed to connect");h.error(l.message),i?.(l)}finally{d(null)}},I=r?.apps.every(s=>s.status.configured),f=r?.session.status==="completed";return m?e.jsx("div",{className:"min-h-screen bg-background flex items-center justify-center",children:e.jsx(w,{className:"size-8 animate-spin text-muted-foreground"})}):j?e.jsx("div",{className:"min-h-screen bg-background flex items-center justify-center p-4",children:e.jsx(N,{className:"max-w-md w-full",children:e.jsx(v,{className:"pt-6",children:e.jsxs("div",{className:"flex flex-col items-center gap-4 text-center",children:[e.jsx("div",{className:"size-12 rounded-full bg-destructive/10 flex items-center justify-center",children:e.jsx(K,{className:"size-6 text-destructive"})}),e.jsxs("div",{children:[e.jsx("h2",{className:"text-lg font-semibold",children:"Session Error"}),e.jsx("p",{className:"text-sm text-muted-foreground mt-1",children:j instanceof Error?j.message:"Failed to load"})]})]})})})}):r?e.jsxs("div",{className:"min-h-screen bg-background",children:[e.jsx(B,{}),e.jsxs("div",{className:"max-w-lg mx-auto px-4 py-12",children:[e.jsxs("div",{className:"text-center mb-8",children:[r.template.icon&&e.jsx("div",{className:"size-16 mx-auto mb-4 rounded-xl bg-muted flex items-center justify-center overflow-hidden",children:e.jsx("img",{src:r.template.icon,alt:"",className:"size-10 object-contain"})}),e.jsx("h1",{className:"text-2xl font-semibold tracking-tight",children:r.template.title}),r.template.description&&e.jsx("p",{className:"text-muted-foreground mt-2",children:r.template.description})]}),f&&e.jsx(N,{className:"mb-6 border-green-500/20 bg-green-500/5",children:e.jsx(v,{className:"pt-6",children:e.jsxs("div",{className:"flex items-center gap-3",children:[e.jsx("div",{className:"size-10 rounded-full bg-green-500/10 flex items-center justify-center",children:e.jsx(k,{className:"size-5 text-green-500"})}),e.jsxs("div",{children:[e.jsx("p",{className:"font-medium",children:"Setup Complete"}),e.jsx("p",{className:"text-sm text-muted-foreground",children:"Your integrations are ready to use."})]})]})})}),e.jsx("div",{className:"space-y-3",children:r.apps.map(s=>e.jsx(N,{children:e.jsx(v,{className:"py-4",children:e.jsxs("div",{className:"flex items-center gap-4",children:[e.jsx("div",{className:"size-10 rounded-lg bg-muted flex items-center justify-center shrink-0 overflow-hidden",children:s.icon?e.jsx("img",{src:s.icon,alt:"",className:"size-6 object-contain"}):e.jsx("span",{className:"text-lg",children:"📦"})}),e.jsxs("div",{className:"flex-1 min-w-0",children:[e.jsx("p",{className:"font-medium truncate",children:s.title}),e.jsx("p",{className:"text-sm text-muted-foreground",children:s.status.configured?e.jsxs("span",{className:"text-green-600 dark:text-green-400 flex items-center gap-1",children:[e.jsx(k,{className:"size-3"})," Connected"]}):s.requires_oauth?"Requires authentication":"Ready to connect"})]}),!s.status.configured&&!f&&e.jsx(y,{size:"sm",onClick:()=>S(s),disabled:p!==null||x.isPending,children:p===s.app_name?e.jsxs(e.Fragment,{children:[e.jsx(w,{className:"size-4 mr-2 animate-spin"}),"Connecting..."]}):e.jsxs(e.Fragment,{children:[e.jsx(D,{className:"size-4 mr-2"}),"Connect"]})}),s.status.configured&&!f&&e.jsxs(y,{size:"sm",variant:"outline",onClick:()=>S(s),disabled:p!==null||x.isPending,children:[e.jsx(Y,{className:"size-4 mr-2"}),"Reconnect"]}),f&&e.jsx("div",{className:"size-8 rounded-full bg-green-500/10 flex items-center justify-center",children:e.jsx(k,{className:"size-4 text-green-500"})})]})})},s.app_name))}),I&&!f&&e.jsx("div",{className:"mt-6",children:e.jsx(y,{className:"w-full",size:"lg",onClick:()=>x.mutate(),disabled:x.isPending,children:x.isPending?e.jsxs(e.Fragment,{children:[e.jsx(w,{className:"size-4 mr-2 animate-spin"}),"Completing..."]}):"Complete Setup"})}),e.jsx("div",{className:"mt-8 pt-6 border-t text-center",children:e.jsxs("p",{className:"text-xs text-muted-foreground",children:["Session expires:"," ",new Date(r.session.expires_at).toLocaleString()]})})]})]}):null}function oe(){const t=T.c(3);let n;t[0]===Symbol.for("react.memo_cache_sentinel")?(n={from:"/connect/$sessionId"},t[0]=n):n=t[0];const{sessionId:i}=O(n);let a;return t[1]!==i?(a=e.jsx(V,{sessionId:i}),t[1]=i,t[2]=a):a=t[2],a}export{oe as default};

package/dist/client/assets/constants-BOzgaCbN.js

@@ -1 +0,0 @@
-import{E as t,F as a}from"./index-BFVvPqrB.js";const e=t(a,{target:"draft-7"});export{e as B};

package/dist/client/assets/index-D6uekia5.js

@@ -1 +0,0 @@
-import{C as r,L as i,O as l,P as u,V as C,i as c,p as P,u as m}from"./index-BFVvPqrB.js";import{u as M,a as g,b as f,c as x,d as L,e as S,f as d}from"./use-collections-CBMJoxAu.js";import{u as A,a as K,b as R}from"./use-connection-BMf45qiZ.js";import{S as s}from"./constants-BmqLVuWU.js";import{K as b,a as h,W,c as w,g as O,b as V,d as _,e as E,f as I,u as Q}from"./constants-BmqLVuWU.js";import{g as j,l as G,a as U,r as k,u as v,b as F,c as H}from"./use-mcp-prompts-Cz_r1vTs.js";import{u as N,a as Y,b as q}from"./use-virtual-mcp-CDl7hSS2.js";import{a as B,h as X,i as Z}from"./mcp-oauth-3en47Te1.js";import"./useMutation-7JLPlPaT.js";import"./useQuery-BjPTe_W-.js";export{r as ConnectionEntitySchema,b as KEYS,i as Locator,l as ORG_ADMIN_PROJECT_SLUG,u as ProjectContextProvider,h as SELF_MCP_ALIAS_ID,s as StreamableHTTPClientTransport,C as VirtualMCPEntitySchema,W as WellKnownOrgMCPId,B as authenticateMcp,w as createMCPClient,j as getPrompt,O as getWellKnownCommunityRegistryConnection,V as getWellKnownDecopilotAgent,_ as getWellKnownMcpStudioConnection,E as getWellKnownOpenRouterConnection,I as getWellKnownRegistryConnection,X as handleOAuthCallback,Z as isConnectionAuthenticated,c as isStdioParameters,G as listPrompts,U as listResources,P as parseVirtualUrl,k as readResource,M as useCollectionActions,g as useCollectionItem,f as useCollectionList,A as useConnection,K as useConnectionActions,R as useConnections,Q as useMCPClient,v as useMCPPromptsList,F as useMCPPromptsListQuery,H as useMCPResourcesListQuery,x as useMCPToolCall,L as useMCPToolCallMutation,S as useMCPToolCallQuery,d as useMCPToolsListQuery,m as useProjectContext,N as useVirtualMCP,Y as useVirtualMCPActions,q as useVirtualMCPs};

package/dist/client/assets/mcp-oauth-3en47Te1.js

@@ -1 +0,0 @@
-import{a7 as R,a8 as P,a9 as $,aa as V}from"./index-BFVvPqrB.js";function b(n){let e=0;for(let t=0;t<n.length;t++){const r=n.charCodeAt(t);e=(e<<5)-e+r,e=e&e}return Math.abs(e).toString(16)}const I=new Map,O="mcp:oauth:callback:";class x{serverUrl;_clientMetadata;_redirectUrl;_windowMode;_state=null;_codeVerifier=null;_clientInfo=null;_tokens=null;constructor(e){this.serverUrl=e.serverUrl,this._redirectUrl=e.callbackUrl??`${window.location.origin}/oauth/callback`,this._windowMode=e.windowMode??"popup";const t=e.scope?Array.isArray(e.scope)?e.scope.join(" "):e.scope:void 0;this._clientMetadata={redirect_uris:[this._redirectUrl],token_endpoint_auth_method:"none",grant_types:["authorization_code","refresh_token"],response_types:["code"],client_name:e.clientName??"@decocms/mesh MCP client",...t&&{scope:t}},I.set(b(this.serverUrl),this)}get redirectUrl(){return this._redirectUrl}get clientMetadata(){return this._clientMetadata}state(){return this._state||(this._state=crypto.randomUUID()),this._state}getStoredState(){return this._state}clientInformation(){return this._clientInfo??void 0}saveClientInformation(e){this._clientInfo=e}tokens(){return this._tokens??void 0}saveTokens(e){this._tokens=e}redirectToAuthorization(e){if(this._windowMode==="tab")window.open(e.toString(),"_blank")||(window.location.href=e.toString());else{const o=window.screenX+(window.outerWidth-600)/2,a=window.screenY+(window.outerHeight-700)/2;if(!window.open(e.toString(),"mcp-oauth",`width=600,height=700,left=${o},top=${a},popup=yes`))throw new Error("OAuth popup was blocked. Please allow popups for this site and try again.")}}saveCodeVerifier(e){this._codeVerifier=e}codeVerifier(){if(!this._codeVerifier)throw new Error("Code verifier not found");return this._codeVerifier}invalidateCredentials(){this._clientInfo=null,this._tokens=null,this._codeVerifier=null,this._state=null}getServerUrl(){return this.serverUrl}cleanup(){I.delete(b(this.serverUrl))}}async function D(n){const e=n.meshUrl??window.location.origin,t=new URL(`/mcp/${n.connectionId}`,e),r=new x({serverUrl:t.href,clientName:n.clientName,clientUri:n.clientUri,callbackUrl:n.callbackUrl,scope:n.scope,windowMode:n.windowMode});try{const o=new Promise((s,u)=>{const _=n.timeout||12e4;let h,w=!1;const M=r.state(),m=`${O}${M}`,d=()=>{window.removeEventListener("message",S),window.removeEventListener("storage",y),clearTimeout(h);try{localStorage.removeItem(m)}catch{}},g=async l=>{if(w)return;if(w=!0,!l.success){d(),u(new Error(l.error||"OAuth authentication failed"));return}const{code:p,state:E}=l;if(!p){d(),u(new Error("Missing authorization code"));return}if(r.getStoredState()!==E){d(),u(new Error("OAuth state mismatch - possible CSRF attack"));return}try{const v=(await R(t))?.authorization_servers?.[0]||t,U=await P(v),f=r.clientInformation();if(!f){d(),u(new Error("Client information not found"));return}const C=r.codeVerifier(),L=await $(v,{metadata:U,clientInformation:f,authorizationCode:p,codeVerifier:C,redirectUri:r.redirectUrl,resource:new URL(t)});d(),s({tokens:L,clientId:f.client_id??null,clientSecret:"client_secret"in f?f.client_secret:null,tokenEndpoint:U?.token_endpoint??null})}catch(A){d(),u(A)}},S=async l=>{l.origin===window.location.origin&&l.data?.type==="mcp:oauth:callback"&&await g(l.data)},y=async l=>{if(!(l.key!==m||!l.newValue))try{const p=JSON.parse(l.newValue);await g(p)}catch{}};window.addEventListener("message",S),window.addEventListener("storage",y),h=setTimeout(()=>{w||(w=!0,d(),u(new Error("OAuth authentication timeout")))},_)});if(await V(r,{serverUrl:t})==="REDIRECT"){const s=await o;return{token:s.tokens.access_token,tokenInfo:{accessToken:s.tokens.access_token,refreshToken:s.tokens.refresh_token??null,expiresIn:s.tokens.expires_in??null,scope:s.tokens.scope??null,clientId:s.clientId,clientSecret:s.clientSecret,tokenEndpoint:s.tokenEndpoint},error:null}}const c=r.tokens(),i=r.clientInformation();return{token:c?.access_token||null,tokenInfo:c?{accessToken:c.access_token,refreshToken:c.refresh_token??null,expiresIn:c.expires_in??null,scope:c.scope??null,clientId:i?.client_id??null,clientSecret:i&&"client_secret"in i?i.client_secret:null,tokenEndpoint:null}:null,error:null}}catch(o){return{token:null,tokenInfo:null,error:o instanceof Error?o.message:String(o)}}finally{r.cleanup()}}function k(n,e){if(window.opener&&!window.opener.closed)return window.opener.postMessage(n,window.location.origin),!0;if(e)try{const t=`${O}${e}`;return localStorage.setItem(t,JSON.stringify(n)),!0}catch{}return!1}async function J(){const n=new URLSearchParams(window.location.search),e=n.get("code");let t=n.get("state");const r=n.get("error"),o=n.get("error_description");let a=t;if(t)try{const i=atob(t),s=JSON.parse(i);s.clientState&&(a=s.clientState)}catch{}if(r){const i=o||r;return k({type:"mcp:oauth:callback",success:!1,error:i},a),{success:!1,error:i}}if(!e||!t){const i="Missing code or state parameter";return k({type:"mcp:oauth:callback",success:!1,error:i},a),{success:!1,error:i}}return t=a||t,k({type:"mcp:oauth:callback",success:!0,code:e,state:t},t)?{success:!0}:{success:!1,error:"Parent window not available"}}function T(){if(typeof window<"u"&&window.location?.origin)return window.location.origin}function N(n){try{const e=T();return(e?new URL(n,e):new URL(n)).pathname.match(/^\/mcp\/([^/]+)/)?.[1]??null}catch{return null}}async function z(n,e){try{const t=`/api/connections/${n}/oauth-token/status`,r=e?new URL(t,e).href:t,o=await fetch(r,{credentials:e?"omit":"include"});return o.ok?{hasToken:(await o.json()).hasToken===!0}:{hasToken:!1}}catch{return{hasToken:!1}}}async function K({url:n,token:e,meshUrl:t}){try{const r=new Headers;r.set("Content-Type","application/json"),r.set("Accept","application/json, text/event-stream");const o=await fetch(n,{method:"POST",headers:r,body:JSON.stringify({jsonrpc:"2.0",id:1,method:"initialize",params:{protocolVersion:"2025-06-18",capabilities:{},clientInfo:{name:"@decocms/mesh MCP client",version:"1.0.0"}}})}),a=N(n),c=T(),i=t??(c?new URL(n,c).origin:new URL(n).origin);if(o.ok)return{isAuthenticated:!0,supportsOAuth:!1,hasOAuthToken:(a?await z(a,i):{hasToken:!1}).hasToken};let s;try{const h=await o.json();s=h.error||h.message}catch{}return o.status>=500?{isAuthenticated:!1,supportsOAuth:!1,hasOAuthToken:!1,error:s||`HTTP ${o.status}`,isServerError:!0}:{isAuthenticated:!1,supportsOAuth:!!o.headers.get("WWW-Authenticate"),hasOAuthToken:!1,error:s||`HTTP ${o.status}`}}catch(r){return console.error("[isConnectionAuthenticated] Error:",r),{isAuthenticated:!1,supportsOAuth:!1,hasOAuthToken:!1,error:r.message}}}export{D as a,J as h,K as i};

package/dist/client/assets/useInfiniteQuery-CAMkyTNk.js

@@ -1 +0,0 @@
-import{I as u}from"./infiniteQueryObserver-Bg8GK9wP.js";import{a0 as i}from"./index-BFVvPqrB.js";function t(e,r){return i(e,u,r)}export{t as u};

package/dist/client/assets/useQuery-BjPTe_W-.js

@@ -1 +0,0 @@
-import{a0 as u,a1 as s}from"./index-BFVvPqrB.js";function o(e,r){return u(e,s,r)}export{o as u};