@dobbyai/mcp-external 1.1.0 → 1.2.0

package/dist/server.d.ts

@@ -0,0 +1,175 @@
+/**
+ * MCP Server factory
+ *
+ * Builds the Dobby MCP Server with all request handlers registered.
+ * Extracted from index.ts (2026-07-12) so tests can exercise the REAL
+ * handlers — index.ts runs main() on import, which is unsafe under vitest.
+ *
+ * In STDIO mode: tenant context comes from env/CLI config; full tool access
+ * (the local key already proves the tenant).
+ * In HTTP mode: tenant context comes from the OAuth token; tool access is
+ * ENFORCED per token from authInfo.scopes — the introspection endpoint
+ * (web/app/oauth/token/introspect) derives the effective mcp scope from the
+ * org's plan (tier) + the token's own scopes (read vs execute).
+ */
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+/**
+ * Structured "needs_selection" envelope — a user-scoped call omitted the scope
+ * argument it needs. Returned as machine-readable JSON (a client can JSON.parse
+ * `content[0].text` and read `status`/`argument`/`list_tool`) that is ALSO
+ * human-readable via the `message` field. isError stays true: the call could not
+ * proceed. UAT onboarding: return needs_selection, never silently inherit scope.
+ */
+export declare function needsSelectionResult(select: "organization" | "tenant", argument: "org_id" | "tenant_id", listTool: string): {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+};
+/**
+ * Structured "needs_pat" envelope — an identity/discovery call needs a Personal
+ * Access Token that is absent or not accepted. Names the env var to set and what
+ * it unlocks, as machine-readable JSON with a human `message` (UAT onboarding).
+ */
+export declare function needsPatResult(unlocks: string, detail?: string): {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+};
+/**
+ * Short-prompt onboarding: resolve the caller's SOLE tenant. Returns the
+ * tenant_id when the user belongs to exactly ONE tenant — so a user-scoped call
+ * that omitted `tenant_id` can proceed silently without a needs_selection
+ * round-trip — or null when there are zero, many, or the lookup fails (the
+ * caller then falls back to the structured needs_selection envelope). Reuses the
+ * same PAT-authed /api/v1/me/tenants endpoint as list_my_tenants.
+ */
+export declare function resolveSoleTenant(apiUrl: string, token: string): Promise<string | null>;
+export declare const WHOAMI_TOOL_DEF: {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {};
+        additionalProperties: boolean;
+    };
+    annotations: {
+        title: string;
+        readOnlyHint: boolean;
+        destructiveHint: boolean;
+        openWorldHint: boolean;
+    };
+};
+interface WhoamiStdioInput {
+    mode: "stdio";
+    apiUrl: string;
+    apiKey?: string;
+    tenantId?: string;
+    organizationId?: string;
+    gatewayEnabled: boolean;
+    userId: string;
+}
+interface WhoamiHttpInput {
+    mode: "http";
+    apiUrl: string;
+    authInfo?: {
+        token?: string;
+        scopes?: string[];
+        extra?: {
+            user_id?: string;
+            org_id?: string;
+            tenant_id?: string;
+            user_scoped?: boolean;
+            tenant_role?: string;
+            org_role?: string;
+            is_super_admin?: boolean;
+        };
+    };
+}
+/**
+ * Build the identity echo for `whoami`. Never throws and never returns an error
+ * envelope — missing credentials are reported as `missing[]` notes, not failures.
+ */
+export declare function handleWhoami(input: WhoamiStdioInput | WhoamiHttpInput): {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+};
+export declare const VALIDATE_CREDENTIALS_TOOL_DEF: {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {};
+        additionalProperties: boolean;
+    };
+    annotations: {
+        title: string;
+        readOnlyHint: boolean;
+        destructiveHint: boolean;
+        openWorldHint: boolean;
+    };
+};
+interface ValidateStdioInput {
+    mode: "stdio";
+    apiUrl: string;
+    apiKey?: string;
+    tenantId?: string;
+    gatewayEnabled: boolean;
+    gatewaySource: "explicit" | "api_key" | "none";
+}
+interface ValidateHttpInput {
+    mode: "http";
+    apiUrl: string;
+    authInfo?: {
+        token?: string;
+        scopes?: string[];
+        extra?: {
+            user_scoped?: boolean;
+            tenant_id?: string;
+        };
+    };
+}
+/**
+ * Run the credential validation. Never throws / never returns isError:true —
+ * failures are reported as `report.*.authorized=false` + `notes[]`.
+ */
+export declare function handleValidateCredentials(input: ValidateStdioInput | ValidateHttpInput): Promise<{
+    content: Array<{
+        type: "text";
+        text: string;
+    }>;
+    isError: boolean;
+}>;
+/**
+ * Resolve the gateway key to use for auth + audit logging.
+ * Priority: explicit DOBBY_GATEWAY_KEY > auto-detect gk_* in DOBBY_API_KEY > undefined (disabled)
+ */
+export declare function resolveGatewayKey(opts: {
+    gatewayKey?: string;
+    apiKey?: string;
+}): string | undefined;
+export interface CreateServerOptions {
+    /** 'stdio' uses env vars for tenant context; 'http' uses OAuth token */
+    mode: "stdio" | "http";
+    apiUrl?: string;
+    apiKey?: string;
+    tenantId?: string;
+    gatewayKey?: string;
+    gatewayUrl?: string;
+}
+/**
+ * Create an MCP Server with all handlers registered.
+ *
+ * In STDIO mode: tenant context comes from config/env vars.
+ * In HTTP mode: tenant context comes from OAuth token (extra.authInfo.extra.tenant_id).
+ * The DobbyClient is created lazily per-request in HTTP mode.
+ */
+export declare function createServer(opts?: CreateServerOptions): Promise<Server>;
+export {};
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAuDnE;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,cAAc,GAAG,QAAQ,EACjC,QAAQ,EAAE,QAAQ,GAAG,WAAW,EAChC,QAAQ,EAAE,MAAM;;;;;;EAmBjB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;;;;;;EAmB9D;AAsFD;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAexB;AAuHD,eAAO,MAAM,eAAe;;;;;;;;;;;;;;CAmB3B,CAAC;AAEF,UAAU,gBAAgB;IACxB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,eAAe;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE;QACT,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,KAAK,CAAC,EAAE;YACN,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,MAAM,CAAC,EAAE,MAAM,CAAC;YAChB,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,WAAW,CAAC,EAAE,OAAO,CAAC;YACtB,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,cAAc,CAAC,EAAE,OAAO,CAAC;SAC1B,CAAC;KACH,CAAC;CACH;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,gBAAgB,GAAG,eAAe;;;;;;EAyFrE;AAeD,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;CAmBzC,CAAC;AAEF,UAAU,kBAAkB;IAC1B,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,OAAO,CAAC;IACxB,aAAa,EAAE,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC;CAChD;AAED,UAAU,iBAAiB;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE;QACT,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,KAAK,CAAC,EAAE;YACN,WAAW,CAAC,EAAE,OAAO,CAAC;YACtB,SAAS,CAAC,EAAE,MAAM,CAAC;SACpB,CAAC;KACH,CAAC;CACH;AAED;;;GAGG;AACH,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,kBAAkB,GAAG,iBAAiB,GAC5C,OAAO,CAAC;IACT,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC,CA8HD;AAqDD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,MAAM,GAAG,SAAS,CAIrB;AAMD,MAAM,WAAW,mBAAmB;IAClC,wEAAwE;IACxE,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,IAAI,GAAE,mBAAuC,GAC5C,OAAO,CAAC,MAAM,CAAC,CAgdjB"}