@dobbyai/mcp-external 1.0.4 → 1.2.0

package/dist/http-server.js

@@ -0,0 +1,455 @@
+/**
+ * HTTP Server for Dobby MCP
+ *
+ * Express app serving MCP over Streamable HTTP transport with OAuth 2.1 auth.
+ * Runs alongside the existing STDIO mode — selected via --transport http.
+ *
+ * Endpoints:
+ *   GET  / — Landing/info page: HTML for browsers, JSON otherwise (no auth)
+ *   GET  /.well-known/oauth-authorization-server — OAuth metadata (via mcpAuthRouter)
+ *   GET  /authorize — Redirect to web app consent page (via mcpAuthRouter)
+ *   POST /token — Token exchange proxy (via mcpAuthRouter)
+ *   POST /register — Dynamic client registration proxy (via mcpAuthRouter)
+ *   POST /revoke — Token revocation proxy (via mcpAuthRouter)
+ *   POST /mcp — Streamable HTTP MCP endpoint (Bearer auth required)
+ *   GET  /mcp — SSE stream for Streamable HTTP (Bearer auth required)
+ *   DELETE /mcp — Session termination (Bearer auth required)
+ *   GET  /health — Health check (no auth)
+ */
+import express from "express";
+import cors from "cors";
+import { randomUUID } from "node:crypto";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { mcpAuthRouter } from "@modelcontextprotocol/sdk/server/auth/router.js";
+import { requireBearerAuth } from "@modelcontextprotocol/sdk/server/auth/middleware/bearerAuth.js";
+import { createOAuthProvider, } from "./auth/oauth-provider.js";
+import { log } from "./lib/log.js";
+// ============================================
+// Session Management
+// ============================================
+/** Active transport sessions keyed by session ID */
+const sessions = new Map();
+/**
+ * Principal (`user:org:tenant`) that OWNS each session. A session may only be
+ * used or terminated by the SAME principal that created it (2026-07-05 audit
+ * M-12). Without this, any holder of a valid bearer token who knew/guessed a
+ * session ID could hijack another user's MCP session (its tool context runs
+ * under the original principal). Bound to the stable identity from the token's
+ * `extra` (survives token refresh), not the raw token.
+ */
+const sessionPrincipals = new Map();
+function principalKey(req) {
+    const extra = req.auth?.extra ?? {};
+    return `${extra.user_id ?? ""}:${extra.org_id ?? ""}:${extra.tenant_id ?? ""}`;
+}
+/**
+ * Cross-wiring guard (2026-07-18 customer incident): the SDK correlates
+ * JSON-RPC responses to HTTP streams by the CLIENT-chosen request id and
+ * silently OVERWRITES that mapping when a second POST on the same session
+ * reuses an id that is still in flight. The first handler's late response is
+ * then delivered on the SECOND request's SSE stream with a matching id — the
+ * client trusts a payload that belongs to a different tool call (observed
+ * live: a list_services result parsed as get_task's). The MCP spec forbids id
+ * reuse within a session; reject the dangerous in-flight subset loudly so a
+ * retrying client gets an explicit error instead of silently wrong data.
+ * Completed requests are removed from the SDK map, so clients that reset id
+ * counters between turns keep working.
+ *
+ * Returns the offending id, or null when the body is clean. The in-flight
+ * requestId→streamId map is SDK-private (`_webStandardTransport` since 1.29,
+ * the transport itself before) — if an SDK upgrade moves it the guard
+ * disarms, which the http-concurrency tests catch loudly.
+ */
+function findInflightIdCollision(transport, body) {
+    const inner = transport._webStandardTransport ??
+        transport;
+    const mapping = inner._requestToStreamMapping;
+    if (!(mapping instanceof Map))
+        return null;
+    const messages = Array.isArray(body) ? body : [body];
+    const seenInBatch = new Set();
+    for (const msg of messages) {
+        if (!msg || typeof msg !== "object")
+            continue;
+        const m = msg;
+        // A JSON-RPC request has both `method` and `id` (notifications lack an
+        // id, responses lack a method) — only requests enter the SDK's mapping.
+        if (typeof m.method !== "string")
+            continue;
+        if (typeof m.id !== "string" && typeof m.id !== "number")
+            continue;
+        if (mapping.has(m.id) || seenInBatch.has(m.id))
+            return m.id;
+        seenInBatch.add(m.id);
+    }
+    return null;
+}
+// ============================================
+// Per-request logging
+// ============================================
+/**
+ * Identity fields safe to log: internal IDs only — NEVER the bearer token.
+ * Populated by requireBearerAuth by the time the response finishes; undefined
+ * on unauthenticated (401) requests.
+ */
+function principalFields(req) {
+    const extra = req.auth?.extra;
+    if (!extra)
+        return { clientId: req.auth?.clientId };
+    return {
+        clientId: req.auth?.clientId,
+        userId: extra.user_id,
+        orgId: extra.org_id,
+        tenantId: extra.tenant_id,
+    };
+}
+/**
+ * One structured JSON log line per request on the MCP data plane. Before this
+ * existed a pod's entire lifetime output was the 8-line startup banner, and
+ * the 2026-07-18 cross-labeled-response incident was unforensicable — the only
+ * per-request record was the Caddy access log. Captures just enough to
+ * correlate a request to its session, principal, and JSON-RPC id; payload
+ * bodies are deliberately NOT logged.
+ */
+function mcpRequestLogger(req, res, next) {
+    const startedAt = Date.now();
+    let logged = false;
+    const finish = () => {
+        if (logged)
+            return;
+        logged = true;
+        // req.body is parsed by express.json() before the routes run. A body may
+        // be a single JSON-RPC message or a batch array.
+        const body = req.body;
+        const rpcs = Array.isArray(body)
+            ? body
+            : body && typeof body === "object"
+                ? [body]
+                : [];
+        const rpcMethods = rpcs
+            .map((r) => r.method)
+            .filter((m) => typeof m === "string");
+        const toolName = rpcs.find((r) => r.method === "tools/call")?.params;
+        const rpcIds = rpcs.map((r) => r.id).filter((id) => id !== undefined);
+        // On initialize the session ID is assigned in the RESPONSE header.
+        const sessionId = req.headers["mcp-session-id"] ??
+            res.getHeader("mcp-session-id");
+        const status = res.statusCode;
+        const durationMs = Date.now() - startedAt;
+        const method = rpcMethods.join(",") || undefined;
+        const tool = typeof toolName?.name === "string" ? toolName.name : undefined;
+        const level = status >= 500 ? "error" : status >= 400 ? "warn" : "info";
+        log[level](`mcp ${req.method} ${method ?? ""}${tool ? `(${tool})` : ""} ${status} ${durationMs}ms`.replace(/\s+/g, " "), {
+            httpMethod: req.method,
+            rpcMethod: method,
+            toolName: tool,
+            rpcId: rpcIds.length === 1 ? rpcIds[0] : rpcIds.length ? rpcIds : undefined,
+            sessionId,
+            ...principalFields(req),
+            status,
+            durationMs,
+            userAgent: req.headers["user-agent"],
+        });
+    };
+    // 'finish' for normal responses; 'close' so long-lived SSE streams
+    // (GET /mcp) and aborted requests still log once, with durationMs = stream
+    // lifetime.
+    res.on("finish", finish);
+    res.on("close", finish);
+    next();
+}
+// ============================================
+// CORS configuration
+// ============================================
+/**
+ * CORS policy for the MCP HTTP transport.
+ *
+ * We reflect ANY browser origin, which is safe ONLY because `credentials` is
+ * disabled: the MCP data plane (`/mcp`) authenticates via Bearer tokens in the
+ * `Authorization` header, and the OAuth proxy routes (`/authorize` redirect,
+ * `/token`/`/register`/`/revoke`) carry client credentials / auth codes in the
+ * request body — never via ambient cookies. With no cross-origin credentials to
+ * leak, reflecting the origin exposes nothing.
+ *
+ * Reflecting the origin together with `credentials: true` is the classic
+ * dangerous CORS combo (any site could read credentialed responses), so
+ * `credentials` MUST stay `false`. If cookie-based auth is ever introduced on
+ * this server, replace the reflect-any-origin callback with an explicit
+ * allowlist BEFORE re-enabling credentials.
+ */
+export const corsOptions = {
+    origin: (origin, callback) => {
+        // Allow requests with no origin (curl, server-to-server, native MCP clients)
+        if (!origin)
+            return callback(null, true);
+        // Reflect any browser origin — safe because credentials are disabled below.
+        callback(null, true);
+    },
+    methods: ["GET", "POST", "DELETE", "OPTIONS"],
+    allowedHeaders: ["Content-Type", "Authorization", "Mcp-Session-Id"],
+    exposedHeaders: ["Mcp-Session-Id"],
+    credentials: false,
+    maxAge: 86400,
+};
+// ============================================
+// Start HTTP Server
+// ============================================
+export async function startHttpServer(config) {
+    const { port, issuerUrl, mcpPublicUrl, createMcpServer } = config;
+    // Create OAuth proxy provider
+    const { provider, tokenVerifier } = createOAuthProvider({
+        issuerUrl,
+        mcpPublicUrl,
+    });
+    const app = express();
+    // ============================================
+    // CORS — reflect any origin, credentials disabled (see corsOptions above)
+    // ============================================
+    app.use(cors(corsOptions));
+    // Parse JSON for MCP requests
+    app.use(express.json());
+    // Structured per-request logging on the MCP data plane only — /health and
+    // the OAuth proxy routes stay quiet (health probes would spam; OAuth URLs
+    // carry authorization codes).
+    app.use("/mcp", mcpRequestLogger);
+    // ============================================
+    // OAuth proxy routes (served by MCP SDK's mcpAuthRouter)
+    // ============================================
+    const authRouter = mcpAuthRouter({
+        provider,
+        issuerUrl: new URL(issuerUrl),
+        baseUrl: new URL(mcpPublicUrl),
+        serviceDocumentationUrl: new URL(`${issuerUrl}/docs/mcp`),
+        scopesSupported: ["mcp:read", "mcp:execute", "mcp:pro", "mcp:*"],
+    });
+    app.use(authRouter);
+    // ============================================
+    // Landing page (no auth) — humans and clients hitting the bare domain.
+    // Express's default "Cannot GET /" reads as a broken server; peers
+    // (e.g. mcp.sentry.dev) serve a minimal info page here instead.
+    // ============================================
+    const docsUrl = `${issuerUrl}/docs/mcp`;
+    app.get("/", (req, res) => {
+        // Browsers get HTML; curl / programmatic clients (Accept: */*) get JSON.
+        if (req.accepts(["json", "html"]) === "html") {
+            res.type("html").send(`<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>Dobby MCP Server</title>
+<style>
+  body { margin: 0; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif; background: #0a0f1e; color: #e5e7eb; display: flex; min-height: 100vh; align-items: center; justify-content: center; }
+  main { max-width: 640px; padding: 48px 24px; }
+  h1 { font-size: 28px; margin: 0 0 8px; color: #fff; }
+  h1 .accent { color: #7d95f0; }
+  h2 { font-size: 13px; text-transform: uppercase; letter-spacing: .08em; color: #6b7280; margin: 28px 0 8px; }
+  p, li { color: #9ca3af; line-height: 1.6; font-size: 15px; }
+  ul { padding-left: 20px; margin: 0; }
+  li { margin: 6px 0; }
+  code { background: #161d33; border: 1px solid #26304f; border-radius: 6px; padding: 2px 8px; font-size: 13px; color: #aab8f5; }
+  pre { background: #161d33; border: 1px solid #26304f; border-radius: 8px; padding: 12px 16px; overflow-x: auto; font-size: 14px; color: #aab8f5; margin: 0; }
+  a { color: #7d95f0; }
+  strong { color: #d1d5db; }
+</style>
+</head>
+<body>
+<main>
+  <h1>Dobby <span class="accent">MCP</span> Server</h1>
+  <p>Remote Model Context Protocol server for the <a href="https://dobby-ai.com">Dobby AI platform</a> — manage tasks, approvals, agents, and compliance from any MCP client.</p>
+  <h2>Endpoint</h2>
+  <pre>${mcpPublicUrl}/mcp</pre>
+  <h2>Connect</h2>
+  <ul>
+    <li><strong>OAuth 2.1</strong> — add <code>${mcpPublicUrl}</code> as a remote connector in Claude Code, Cursor, or VS Code and log in via the browser.</li>
+    <li><strong>API key</strong> — send <code>Authorization: Bearer &lt;key&gt;</code> with a Dobby tenant API key (<code>sk_live_*</code>) or gateway key (<code>gk_*</code>).</li>
+  </ul>
+  <h2>Links</h2>
+  <ul>
+    <li><a href="${docsUrl}">Documentation</a></li>
+    <li><a href="/health">Health</a></li>
+  </ul>
+</main>
+</body>
+</html>`);
+            return;
+        }
+        res.json({
+            name: "Dobby MCP Server",
+            version: "1.1.0",
+            transport: "streamable-http",
+            endpoint: `${mcpPublicUrl}/mcp`,
+            documentation: docsUrl,
+            health: `${mcpPublicUrl}/health`,
+            authentication: {
+                oauth: "OAuth 2.1 — add this server URL as a remote connector in your MCP client and log in via the browser",
+                bearer: "Authorization: Bearer <key> — a Dobby tenant API key (sk_live_*) or gateway key (gk_*)",
+            },
+        });
+    });
+    // ============================================
+    // Health check (no auth)
+    // ============================================
+    app.get("/health", (_req, res) => {
+        res.json({
+            status: "ok",
+            server: "dobby-mcp",
+            version: "1.1.0",
+            transport: "streamable-http",
+            activeSessions: sessions.size,
+            tokenCacheSize: tokenVerifier.cacheSize,
+        });
+    });
+    // ============================================
+    // MCP Streamable HTTP endpoint (Bearer auth required)
+    // ============================================
+    // resourceMetadataUrl → RFC 9728: clients discover the authorization server
+    // from the resource_metadata parameter in the WWW-Authenticate header on 401.
+    const bearerAuth = requireBearerAuth({
+        verifier: provider,
+        resourceMetadataUrl: `${mcpPublicUrl}/.well-known/oauth-protected-resource`,
+    });
+    // POST /mcp — JSON-RPC requests (initialize, tools/list, tools/call, etc.)
+    app.post("/mcp", bearerAuth, async (req, res) => {
+        const sessionId = req.headers["mcp-session-id"];
+        let transport;
+        if (sessionId && sessions.has(sessionId)) {
+            // Existing session — must belong to the SAME principal that created it
+            // (M-12). 404 (not 403) so a different principal can't confirm the
+            // session even exists.
+            if (sessionPrincipals.get(sessionId) !== principalKey(req)) {
+                res.status(404).json({
+                    jsonrpc: "2.0",
+                    error: { code: -32000, message: "Session not found" },
+                    id: null,
+                });
+                return;
+            }
+            transport = sessions.get(sessionId);
+            // Reject in-flight JSON-RPC id reuse before it reaches the transport —
+            // the SDK would overwrite its id→stream mapping and cross-deliver
+            // another request's response (see findInflightIdCollision).
+            const dupId = findInflightIdCollision(transport, req.body);
+            if (dupId !== null) {
+                res.status(400).json({
+                    jsonrpc: "2.0",
+                    error: {
+                        code: -32600,
+                        message: `Request id ${JSON.stringify(dupId)} is already in flight on this session — reusing it would cross-deliver another request's response. Retry with a fresh JSON-RPC id.`,
+                    },
+                    id: dupId,
+                });
+                return;
+            }
+        }
+        else if (!sessionId) {
+            // New session — create transport and connect to a fresh MCP server.
+            // The session MUST be registered via onsessioninitialized: the SDK only
+            // assigns transport.sessionId while handleRequest processes the
+            // initialize message, so checking transport.sessionId right after
+            // connect() always saw undefined — no session was ever stored and every
+            // follow-up request 404'd "Session not found" (caught live on prod,
+            // 2026-07-12).
+            const newTransport = new StreamableHTTPServerTransport({
+                sessionIdGenerator: () => randomUUID(),
+                onsessioninitialized: (newSessionId) => {
+                    sessions.set(newSessionId, newTransport);
+                    sessionPrincipals.set(newSessionId, principalKey(req));
+                    log.info("mcp session initialized", {
+                        sessionId: newSessionId,
+                        ...principalFields(req),
+                        activeSessions: sessions.size,
+                    });
+                },
+            });
+            transport = newTransport;
+            // Connect MCP server to this transport
+            const mcpServer = await createMcpServer();
+            await mcpServer.connect(transport);
+            // Clean up on close
+            transport.onclose = () => {
+                if (transport.sessionId) {
+                    sessions.delete(transport.sessionId);
+                    sessionPrincipals.delete(transport.sessionId);
+                    log.info("mcp session closed", {
+                        sessionId: transport.sessionId,
+                        activeSessions: sessions.size,
+                    });
+                }
+            };
+        }
+        else {
+            // Invalid session ID
+            res.status(404).json({
+                jsonrpc: "2.0",
+                error: { code: -32000, message: "Session not found" },
+                id: null,
+            });
+            return;
+        }
+        await transport.handleRequest(req, res, req.body);
+    });
+    // GET /mcp — SSE stream for server-to-client notifications
+    app.get("/mcp", bearerAuth, async (req, res) => {
+        const sessionId = req.headers["mcp-session-id"];
+        // Session must exist AND belong to the requesting principal (M-12).
+        if (!sessionId ||
+            !sessions.has(sessionId) ||
+            sessionPrincipals.get(sessionId) !== principalKey(req)) {
+            res.status(404).json({
+                jsonrpc: "2.0",
+                error: { code: -32000, message: "Session not found" },
+                id: null,
+            });
+            return;
+        }
+        const transport = sessions.get(sessionId);
+        await transport.handleRequest(req, res);
+    });
+    // DELETE /mcp — Session termination
+    app.delete("/mcp", bearerAuth, async (req, res) => {
+        const sessionId = req.headers["mcp-session-id"];
+        // Only the owning principal may terminate the session (M-12).
+        if (!sessionId ||
+            !sessions.has(sessionId) ||
+            sessionPrincipals.get(sessionId) !== principalKey(req)) {
+            res.status(404).json({
+                jsonrpc: "2.0",
+                error: { code: -32000, message: "Session not found" },
+                id: null,
+            });
+            return;
+        }
+        const transport = sessions.get(sessionId);
+        await transport.close();
+        sessions.delete(sessionId);
+        sessionPrincipals.delete(sessionId);
+        res.status(200).json({ ok: true });
+    });
+    // ============================================
+    // Start listening
+    // ============================================
+    return new Promise((resolve) => {
+        const server = app.listen(port, () => {
+            // Structured on stdout — the old console.error banner landed in Cloud
+            // Logging at severity ERROR (stderr default) and was the pod's ONLY
+            // lifetime output.
+            log.info(`Dobby MCP HTTP server listening on port ${port}`, {
+                port,
+                issuerUrl,
+                mcpPublicUrl,
+                healthEndpoint: `http://localhost:${port}/health`,
+                mcpEndpoint: `POST http://localhost:${port}/mcp`,
+            });
+            resolve({ app, tokenVerifier, server });
+        });
+        // Keep idle keep-alive sockets warm longer than typical upstream LB/proxy
+        // idle timeouts (~60s). Node's default keepAliveTimeout is 5s, which drops
+        // idle Streamable-HTTP MCP sessions and surfaces as "connection lost" on the
+        // client (where the same call then succeeds on retry). headersTimeout must
+        // stay above keepAliveTimeout.
+        server.keepAliveTimeout = 65000;
+        server.headersTimeout = 66000;
+    });
+}
+//# sourceMappingURL=http-server.js.map

package/dist/http-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-server.js","sourceRoot":"","sources":["../src/http-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,IAA0B,MAAM,MAAM,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,aAAa,EAAE,MAAM,iDAAiD,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,MAAM,gEAAgE,CAAC;AACnG,OAAO,EACL,mBAAmB,GAEpB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAiBnC,+CAA+C;AAC/C,qBAAqB;AACrB,+CAA+C;AAE/C,oDAAoD;AACpD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyC,CAAC;AAElE;;;;;;;GAOG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEpD,SAAS,YAAY,CAAC,GAErB;IACC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;IACpC,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,IAAI,KAAK,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;AACjF,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,uBAAuB,CAC9B,SAAwC,EACxC,IAAa;IAEb,MAAM,KAAK,GACR,SAAgD,CAAC,qBAAqB;QACvE,SAAS,CAAC;IACZ,MAAM,OAAO,GAAI,KAAiC,CAAC,uBAAuB,CAAC;IAC3E,IAAI,CAAC,CAAC,OAAO,YAAY,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC/C,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QAC9C,MAAM,CAAC,GAAG,GAAyC,CAAC;QACpD,uEAAuE;QACvE,wEAAwE;QACxE,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;YAAE,SAAS;QAC3C,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;YAAE,SAAS;QACnE,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,OAAO,CAAC,CAAC,EAAE,CAAC;QAC5D,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+CAA+C;AAC/C,sBAAsB;AACtB,+CAA+C;AAE/C;;;;GAIG;AACH,SAAS,eAAe,CAAC,GAExB;IACC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC;IAC9B,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;IACpD,OAAO;QACL,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ;QAC5B,MAAM,EAAE,KAAK,CAAC,OAAO;QACrB,KAAK,EAAE,KAAK,CAAC,MAAM;QACnB,QAAQ,EAAE,KAAK,CAAC,SAAS;KAC1B,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CACvB,GAAoB,EACpB,GAAqB,EACrB,IAA0B;IAE1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,MAAM,MAAM,GAAG,GAAG,EAAE;QAClB,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,GAAG,IAAI,CAAC;QAEd,yEAAyE;QACzE,iDAAiD;QACjD,MAAM,IAAI,GAAY,GAAG,CAAC,IAAI,CAAC;QAC/B,MAAM,IAAI,GAAmC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAC9D,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAChC,CAAC,CAAC,CAAC,IAA+B,CAAC;gBACnC,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,UAAU,GAAG,IAAI;aACpB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,YAAY,CAAC,EAAE,MAC9B,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QAEtE,mEAAmE;QACnE,MAAM,SAAS,GACZ,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAwB;YACpD,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAwB,CAAC;QAE1D,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC;QAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAC1C,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC;QACjD,MAAM,IAAI,GAAG,OAAO,QAAQ,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAE5E,MAAM,KAAK,GAAG,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACxE,GAAG,CAAC,KAAK,CAAC,CACR,OAAO,GAAG,CAAC,MAAM,IAAI,MAAM,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,MAAM,IAAI,UAAU,IAAI,CAAC,OAAO,CAC7F,MAAM,EACN,GAAG,CACJ,EACD;YACE,UAAU,EAAE,GAAG,CAAC,MAAM;YACtB,SAAS,EAAE,MAAM;YACjB,QAAQ,EAAE,IAAI;YACd,KAAK,EACH,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YACtE,SAAS;YACT,GAAG,eAAe,CAChB,GAEC,CACF;YACD,MAAM;YACN,UAAU;YACV,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC;SACrC,CACF,CAAC;IACJ,CAAC,CAAC;IAEF,mEAAmE;IACnE,2EAA2E;IAC3E,YAAY;IACZ,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACxB,IAAI,EAAE,CAAC;AACT,CAAC;AAED,+CAA+C;AAC/C,qBAAqB;AACrB,+CAA+C;AAE/C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,WAAW,GAAgB;IACtC,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE;QAC3B,6EAA6E;QAC7E,IAAI,CAAC,MAAM;YAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACzC,4EAA4E;QAC5E,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC;IAC7C,cAAc,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,gBAAgB,CAAC;IACnE,cAAc,EAAE,CAAC,gBAAgB,CAAC;IAClC,WAAW,EAAE,KAAK;IAClB,MAAM,EAAE,KAAK;CACd,CAAC;AAEF,+CAA+C;AAC/C,oBAAoB;AACpB,+CAA+C;AAE/C,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAwB;IAM5D,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,eAAe,EAAE,GAAG,MAAM,CAAC;IAElE,8BAA8B;IAC9B,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,mBAAmB,CAAC;QACtD,SAAS;QACT,YAAY;KACb,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IAEtB,+CAA+C;IAC/C,0EAA0E;IAC1E,+CAA+C;IAE/C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAE3B,8BAA8B;IAC9B,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAExB,0EAA0E;IAC1E,0EAA0E;IAC1E,8BAA8B;IAC9B,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAElC,+CAA+C;IAC/C,yDAAyD;IACzD,+CAA+C;IAE/C,MAAM,UAAU,GAAG,aAAa,CAAC;QAC/B,QAAQ;QACR,SAAS,EAAE,IAAI,GAAG,CAAC,SAAS,CAAC;QAC7B,OAAO,EAAE,IAAI,GAAG,CAAC,YAAY,CAAC;QAC9B,uBAAuB,EAAE,IAAI,GAAG,CAAC,GAAG,SAAS,WAAW,CAAC;QACzD,eAAe,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,CAAC;KACjE,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAEpB,+CAA+C;IAC/C,uEAAuE;IACvE,mEAAmE;IACnE,gEAAgE;IAChE,+CAA+C;IAE/C,MAAM,OAAO,GAAG,GAAG,SAAS,WAAW,CAAC;IAExC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACxB,yEAAyE;QACzE,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;YAC7C,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;SA0BnB,YAAY;;;iDAG4B,YAAY;;;;;mBAK1C,OAAO;;;;;QAKlB,CAAC,CAAC;YACJ,OAAO;QACT,CAAC;QAED,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,OAAO;YAChB,SAAS,EAAE,iBAAiB;YAC5B,QAAQ,EAAE,GAAG,YAAY,MAAM;YAC/B,aAAa,EAAE,OAAO;YACtB,MAAM,EAAE,GAAG,YAAY,SAAS;YAChC,cAAc,EAAE;gBACd,KAAK,EACH,qGAAqG;gBACvG,MAAM,EACJ,wFAAwF;aAC3F;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,+CAA+C;IAC/C,yBAAyB;IACzB,+CAA+C;IAE/C,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC/B,GAAG,CAAC,IAAI,CAAC;YACP,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE,OAAO;YAChB,SAAS,EAAE,iBAAiB;YAC5B,cAAc,EAAE,QAAQ,CAAC,IAAI;YAC7B,cAAc,EAAE,aAAa,CAAC,SAAS;SACxC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,+CAA+C;IAC/C,sDAAsD;IACtD,+CAA+C;IAE/C,4EAA4E;IAC5E,8EAA8E;IAC9E,MAAM,UAAU,GAAG,iBAAiB,CAAC;QACnC,QAAQ,EAAE,QAAQ;QAClB,mBAAmB,EAAE,GAAG,YAAY,uCAAuC;KAC5E,CAAC,CAAC;IAEH,2EAA2E;IAC3E,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9C,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;QACtE,IAAI,SAAwC,CAAC;QAE7C,IAAI,SAAS,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,uEAAuE;YACvE,mEAAmE;YACnE,uBAAuB;YACvB,IAAI,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE;oBACrD,EAAE,EAAE,IAAI;iBACT,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC;YAErC,uEAAuE;YACvE,kEAAkE;YAClE,4DAA4D;YAC5D,MAAM,KAAK,GAAG,uBAAuB,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3D,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,CAAC,KAAK;wBACZ,OAAO,EAAE,cAAc,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,oIAAoI;qBACjL;oBACD,EAAE,EAAE,KAAK;iBACV,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtB,oEAAoE;YACpE,wEAAwE;YACxE,gEAAgE;YAChE,kEAAkE;YAClE,wEAAwE;YACxE,oEAAoE;YACpE,eAAe;YACf,MAAM,YAAY,GAAG,IAAI,6BAA6B,CAAC;gBACrD,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;gBACtC,oBAAoB,EAAE,CAAC,YAAY,EAAE,EAAE;oBACrC,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;oBACzC,iBAAiB,CAAC,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;oBACvD,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE;wBAClC,SAAS,EAAE,YAAY;wBACvB,GAAG,eAAe,CAAC,GAAG,CAAC;wBACvB,cAAc,EAAE,QAAQ,CAAC,IAAI;qBAC9B,CAAC,CAAC;gBACL,CAAC;aACF,CAAC,CAAC;YACH,SAAS,GAAG,YAAY,CAAC;YAEzB,uCAAuC;YACvC,MAAM,SAAS,GAAG,MAAM,eAAe,EAAE,CAAC;YAC1C,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAEnC,oBAAoB;YACpB,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;gBACvB,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;oBACxB,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;oBACrC,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;oBAC9C,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE;wBAC7B,SAAS,EAAE,SAAS,CAAC,SAAS;wBAC9B,cAAc,EAAE,QAAQ,CAAC,IAAI;qBAC9B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,qBAAqB;YACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE;gBACrD,EAAE,EAAE,IAAI;aACT,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,2DAA2D;IAC3D,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7C,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;QAEtE,oEAAoE;QACpE,IACE,CAAC,SAAS;YACV,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;YACxB,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,YAAY,CAAC,GAAG,CAAC,EACtD,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE;gBACrD,EAAE,EAAE,IAAI;aACT,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC;QAC3C,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,oCAAoC;IACpC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAChD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;QAEtE,8DAA8D;QAC9D,IACE,CAAC,SAAS;YACV,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;YACxB,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,YAAY,CAAC,GAAG,CAAC,EACtD,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE;gBACrD,EAAE,EAAE,IAAI;aACT,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC;QAC3C,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QACxB,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3B,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACpC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,+CAA+C;IAC/C,kBAAkB;IAClB,+CAA+C;IAE/C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;YACnC,sEAAsE;YACtE,oEAAoE;YACpE,mBAAmB;YACnB,GAAG,CAAC,IAAI,CAAC,2CAA2C,IAAI,EAAE,EAAE;gBAC1D,IAAI;gBACJ,SAAS;gBACT,YAAY;gBACZ,cAAc,EAAE,oBAAoB,IAAI,SAAS;gBACjD,WAAW,EAAE,yBAAyB,IAAI,MAAM;aACjD,CAAC,CAAC;YACH,OAAO,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,0EAA0E;QAC1E,2EAA2E;QAC3E,6EAA6E;QAC7E,2EAA2E;QAC3E,+BAA+B;QAC/B,MAAM,CAAC,gBAAgB,GAAG,KAAK,CAAC;QAChC,MAAM,CAAC,cAAc,GAAG,KAAK,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 /**
- * Dobby MCP Server
+ * Dobby MCP Server — CLI entry point
  *
  * Model Context Protocol server for Dobby AI Platform.
  * Enables access from Claude Desktop, Cursor, Windsurf, and other MCP clients.
@@ -9,6 +9,10 @@
  *   npx @dobbyai/mcp-external                    # STDIO mode (default)
  *   npx @dobbyai/mcp-external --transport http   # HTTP mode
  *   npx @dobbyai/mcp-external --setup            # Interactive setup
+ *
+ * The server factory (handler registration, tier enforcement) lives in
+ * server.ts — this file only parses the CLI and starts the transport.
+ * Importing THIS module runs main(); tests import server.ts instead.
  */
 export {};
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;GAUG"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;GAcG"}