@forumone/throughline 2.2.0 → 2.3.0-pr-315-e1a501e

package/dist/mcp-oauth/cimd.js

@@ -0,0 +1,93 @@
+/*
+A client ID metadata document (CIMD): a client whose `client_id` is an HTTPS URL
+serving its own registration. Claude and ChatGPT both prefer it to registering,
+and it is the better arrangement for this server too — nothing is written for a
+client until somebody consents, and there is no open endpoint to fill a table.
+draft-ietf-oauth-client-id-metadata-document.
+
+Fetching a URL a stranger supplies is the risk, so the fetch is narrow: HTTPS on
+the default port, a host name rather than an IP literal, no redirects followed,
+five seconds, and 64 KB. What the document says is then held to the same
+allowlist as a registration — its redirects must all match one enabled rule —
+so a document can only ever describe an app this site already accepts.
+*/
+const MAX_BYTES = 64 * 1024;
+const TIMEOUT_MS = 5_000;
+/** Whether `clientId` is the kind of URL this server will fetch. */
+export function isMetadataDocumentUrl(clientId) {
+    let url;
+    try {
+        url = new URL(clientId);
+    }
+    catch {
+        return false;
+    }
+    if (url.protocol !== 'https:' || url.port !== '' || url.username || url.password || url.hash) {
+        return false;
+    }
+    const host = url.hostname;
+    if (host === 'localhost' || host.endsWith('.localhost') || host.endsWith('.internal'))
+        return false;
+    if (/^\d+(\.\d+){3}$/.test(host) || host.startsWith('['))
+        return false;
+    if (!host.includes('.'))
+        return false;
+    return url.pathname !== '/';
+}
+/** The document at `clientId`, or why it could not be used. */
+export async function fetchClientMetadata(clientId, fetchImpl = fetch) {
+    if (!isMetadataDocumentUrl(clientId))
+        return { error: 'client_id is not a URL this server fetches.' };
+    let response;
+    try {
+        response = await fetchImpl(clientId, {
+            redirect: 'manual',
+            headers: { accept: 'application/json' },
+            signal: AbortSignal.timeout(TIMEOUT_MS),
+        });
+    }
+    catch {
+        return { error: 'The client metadata document could not be fetched.' };
+    }
+    if (response.status !== 200) {
+        return { error: `The client metadata document answered ${response.status}.` };
+    }
+    const declared = Number(response.headers.get('content-length') ?? '0');
+    if (declared > MAX_BYTES)
+        return { error: 'The client metadata document is too large.' };
+    const text = await response.text();
+    if (text.length > MAX_BYTES)
+        return { error: 'The client metadata document is too large.' };
+    let doc;
+    try {
+        doc = JSON.parse(text);
+    }
+    catch {
+        return { error: 'The client metadata document is not JSON.' };
+    }
+    if (!doc || typeof doc !== 'object')
+        return { error: 'The client metadata document is not an object.' };
+    const record = doc;
+    if (record['client_id'] !== clientId) {
+        return { error: 'The client metadata document names a different client_id.' };
+    }
+    const redirects = record['redirect_uris'];
+    if (!Array.isArray(redirects) || !redirects.every((each) => typeof each === 'string')) {
+        return { error: 'The client metadata document has no redirect_uris.' };
+    }
+    const method = record['token_endpoint_auth_method'];
+    if (method !== undefined && method !== 'none') {
+        const supported = record['token_endpoint_auth_methods_supported'];
+        if (!(Array.isArray(supported) && supported.includes('none'))) {
+            return {
+                error: 'This server accepts public clients only (token_endpoint_auth_method "none").',
+            };
+        }
+    }
+    return {
+        client_id: clientId,
+        redirect_uris: redirects,
+        ...(typeof record['client_name'] === 'string' ? { client_name: record['client_name'] } : {}),
+    };
+}
+//# sourceMappingURL=cimd.js.map

package/dist/mcp-oauth/cimd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cimd.js","sourceRoot":"","sources":["../../src/mcp-oauth/cimd.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;EAYE;AAQF,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,CAAA;AAC3B,MAAM,UAAU,GAAG,KAAK,CAAA;AAExB,oEAAoE;AACpE,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAA;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7F,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAA;IACzB,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QACnF,OAAO,KAAK,CAAA;IACd,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IACtE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IACrC,OAAO,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAA;AAC7B,CAAC;AAID,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAgB,EAChB,YAAuB,KAAK;IAE5B,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC;QAClC,OAAO,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAA;IAEjE,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE;YACnC,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;YACvC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC;SACxC,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,oDAAoD,EAAE,CAAA;IACxE,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,OAAO,EAAE,KAAK,EAAE,yCAAyC,QAAQ,CAAC,MAAM,GAAG,EAAE,CAAA;IAC/E,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,CAAA;IACtE,IAAI,QAAQ,GAAG,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAA;IACxF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAClC,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAA;IAE3F,IAAI,GAAY,CAAA;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAA;IAC/D,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QACjC,OAAO,EAAE,KAAK,EAAE,gDAAgD,EAAE,CAAA;IACpE,MAAM,MAAM,GAAG,GAA8B,CAAA;IAC7C,IAAI,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,EAAE,KAAK,EAAE,2DAA2D,EAAE,CAAA;IAC/E,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC,CAAA;IACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QACtF,OAAO,EAAE,KAAK,EAAE,oDAAoD,EAAE,CAAA;IACxE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,4BAA4B,CAAC,CAAA;IACnD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9C,MAAM,SAAS,GAAG,MAAM,CAAC,uCAAuC,CAAC,CAAA;QACjE,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC9D,OAAO;gBACL,KAAK,EAAE,8EAA8E;aACtF,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO;QACL,SAAS,EAAE,QAAQ;QACnB,aAAa,EAAE,SAAqB;QACpC,GAAG,CAAC,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7F,CAAA;AACH,CAAC"}

package/dist/mcp-oauth/clients.d.ts

@@ -0,0 +1,42 @@
+export declare const MCP_CLIENT_KINDS: readonly ["claude", "claudeCode", "chatgpt"];
+export type McpClientKind = (typeof MCP_CLIENT_KINDS)[number];
+export interface McpClientRule {
+    kind: McpClientKind;
+    /** What the consent screen and the Connect MCP page call it. */
+    label: string;
+    /** Redirect URIs matched exactly. */
+    redirectUris?: readonly string[];
+    /** Redirect URI prefixes, for a callback that carries a per-connector id. */
+    redirectPrefixes?: readonly string[];
+    /** Loopback paths, matched on any port. */
+    loopbackPaths?: readonly string[];
+}
+export declare const MCP_CLIENT_RULES: Readonly<Record<McpClientKind, McpClientRule>>;
+/** True for an `http://localhost`, `127.0.0.1` or `[::1]` redirect. */
+export declare function isLoopback(uri: string): boolean;
+/**
+ * The rule a redirect URI belongs to, among those switched on — or `undefined`
+ * if it belongs to none.
+ */
+export declare function clientKindFor(uri: string, enabled?: (kind: McpClientKind) => boolean): McpClientKind | undefined;
+/**
+ * The one rule every one of a client's redirect URIs matches, or a reason.
+ *
+ * A client whose callbacks span two rules is refused rather than labelled by
+ * either: the consent screen could only name one of them, and the code could go
+ * to the other.
+ */
+export declare function classifyRedirects(uris: readonly unknown[], enabled?: (kind: McpClientKind) => boolean): {
+    kind: McpClientKind;
+} | {
+    error: string;
+};
+/**
+ * Whether `requested` is one of a client's registered redirects.
+ *
+ * Exact, except that a loopback redirect is compared with its port ignored
+ * (RFC 8252 §7.3): a native app registers once and listens on whatever port is
+ * free each time.
+ */
+export declare function redirectRegistered(requested: string, registered: readonly string[]): boolean;
+//# sourceMappingURL=clients.d.ts.map

package/dist/mcp-oauth/clients.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clients.d.ts","sourceRoot":"","sources":["../../src/mcp-oauth/clients.ts"],"names":[],"mappings":"AA6BA,eAAO,MAAM,gBAAgB,8CAA+C,CAAA;AAC5E,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE7D,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,aAAa,CAAA;IACnB,gEAAgE;IAChE,KAAK,EAAE,MAAM,CAAA;IACb,qCAAqC;IACrC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,2CAA2C;IAC3C,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAClC;AAED,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,CAoB3E,CAAA;AAYD,uEAAuE;AACvE,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAG/C;AA+BD;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,CAAC,IAAI,EAAE,aAAa,KAAK,OAAoB,GACrD,aAAa,GAAG,SAAS,CAE3B;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,SAAS,OAAO,EAAE,EACxB,OAAO,GAAE,CAAC,IAAI,EAAE,aAAa,KAAK,OAAoB,GACrD;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAmB7C;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAe5F"}

package/dist/mcp-oauth/clients.js

@@ -0,0 +1,151 @@
+/*
+Which apps may connect, decided by where they send the person back to.
+
+An OAuth client names itself — in a registration request, or in a metadata
+document at its `client_id` URL — and anybody can claim to be "Claude". What a
+client cannot fake is its redirect URI: the authorization code goes there, so a
+client that registers somebody else's callback never sees a code. That makes
+the redirect the one honest thing about a client, and this file is the whole
+allowlist of them.
+
+So a client is recognised by its redirect URIs, never by its name. Registration
+is refused unless every redirect it asks for matches one rule here, the consent
+screen names the client by the rule it matched rather than by what it calls
+itself, and an administrator turns each rule on or off.
+
+The callbacks are the clients' own documentation:
+
+- **Claude** — claude.ai, Claude Desktop, mobile and Cowork share one hosted
+  callback. https://claude.com/docs/connectors/building/authentication
+- **Claude Code** — a native app, so an RFC 8252 loopback redirect on a port it
+  picks per session. Matched with the port ignored, on `localhost` as well as
+  the IP literals, because Claude Code declares `localhost`. Any other program
+  on the person's computer can listen there too, which is why the consent
+  screen warns when this is the rule that matched.
+- **ChatGPT** — the stable callback when the authorization server returns `iss`
+  (RFC 9207, which this one does), and the per-connector form otherwise.
+  https://developers.openai.com/plugins/build/auth
+*/
+export const MCP_CLIENT_KINDS = ['claude', 'claudeCode', 'chatgpt'];
+export const MCP_CLIENT_RULES = {
+    claude: {
+        kind: 'claude',
+        label: 'Claude',
+        redirectUris: [
+            'https://claude.ai/api/mcp/auth_callback',
+            'https://claude.com/api/mcp/auth_callback',
+        ],
+    },
+    claudeCode: {
+        kind: 'claudeCode',
+        label: 'Claude Code',
+        loopbackPaths: ['/callback'],
+    },
+    chatgpt: {
+        kind: 'chatgpt',
+        label: 'ChatGPT',
+        redirectUris: ['https://chatgpt.com/connector_platform_oauth_redirect'],
+        redirectPrefixes: ['https://chatgpt.com/connector/oauth/'],
+    },
+};
+const LOOPBACK_HOSTS = new Set(['localhost', '127.0.0.1', '[::1]']);
+function parse(uri) {
+    try {
+        return new URL(uri);
+    }
+    catch {
+        return undefined;
+    }
+}
+/** True for an `http://localhost`, `127.0.0.1` or `[::1]` redirect. */
+export function isLoopback(uri) {
+    const url = parse(uri);
+    return Boolean(url && url.protocol === 'http:' && LOOPBACK_HOSTS.has(url.hostname));
+}
+/*
+A URI with a fragment, credentials or an unparseable shape matches nothing:
+RFC 6749 §3.1.2 forbids the first, and the second is how an open-looking URL
+smuggles a different host past a prefix check (`https://chatgpt.com/connector/
+oauth/x@evil.example` parses with `evil.example` as the host).
+*/
+function plain(url) {
+    return url.hash === '' && url.username === '' && url.password === '';
+}
+function matchesRule(uri, rule) {
+    const url = parse(uri);
+    if (!url || !plain(url))
+        return false;
+    if (rule.loopbackPaths && url.protocol === 'http:' && LOOPBACK_HOSTS.has(url.hostname)) {
+        return rule.loopbackPaths.includes(url.pathname) && url.search === '';
+    }
+    if (url.protocol !== 'https:')
+        return false;
+    if (rule.redirectUris?.includes(uri))
+        return true;
+    return Boolean(rule.redirectPrefixes?.some((prefix) => uri.startsWith(prefix) &&
+        uri.length > prefix.length &&
+        /^[A-Za-z0-9_-]+$/.test(uri.slice(prefix.length))));
+}
+/**
+ * The rule a redirect URI belongs to, among those switched on — or `undefined`
+ * if it belongs to none.
+ */
+export function clientKindFor(uri, enabled = () => true) {
+    return MCP_CLIENT_KINDS.find((kind) => enabled(kind) && matchesRule(uri, MCP_CLIENT_RULES[kind]));
+}
+/**
+ * The one rule every one of a client's redirect URIs matches, or a reason.
+ *
+ * A client whose callbacks span two rules is refused rather than labelled by
+ * either: the consent screen could only name one of them, and the code could go
+ * to the other.
+ */
+export function classifyRedirects(uris, enabled = () => true) {
+    if (uris.length === 0)
+        return { error: 'At least one redirect URI is required.' };
+    if (uris.length > 10)
+        return { error: 'At most ten redirect URIs may be registered.' };
+    let kind;
+    for (const uri of uris) {
+        if (typeof uri !== 'string')
+            return { error: 'Every redirect URI must be a string.' };
+        const matched = clientKindFor(uri, () => true);
+        if (!matched)
+            return { error: `${uri} is not a redirect this site accepts.` };
+        if (!enabled(matched)) {
+            return {
+                error: `${MCP_CLIENT_RULES[matched].label} connections are turned off on this site. An administrator can turn them on under MCP access.`,
+            };
+        }
+        if (kind && kind !== matched) {
+            return { error: 'Every redirect URI must belong to the same app.' };
+        }
+        kind = matched;
+    }
+    return kind ? { kind } : { error: 'At least one redirect URI is required.' };
+}
+/**
+ * Whether `requested` is one of a client's registered redirects.
+ *
+ * Exact, except that a loopback redirect is compared with its port ignored
+ * (RFC 8252 §7.3): a native app registers once and listens on whatever port is
+ * free each time.
+ */
+export function redirectRegistered(requested, registered) {
+    if (registered.includes(requested))
+        return true;
+    if (!isLoopback(requested))
+        return false;
+    const want = parse(requested);
+    if (!want || !plain(want))
+        return false;
+    return registered.some((each) => {
+        const have = parse(each);
+        return Boolean(have &&
+            isLoopback(each) &&
+            have.hostname === want.hostname &&
+            have.pathname === want.pathname &&
+            have.search === want.search);
+    });
+}
+//# sourceMappingURL=clients.js.map

package/dist/mcp-oauth/clients.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clients.js","sourceRoot":"","sources":["../../src/mcp-oauth/clients.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2BE;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,SAAS,CAAU,CAAA;AAe5E,MAAM,CAAC,MAAM,gBAAgB,GAAmD;IAC9E,MAAM,EAAE;QACN,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,QAAQ;QACf,YAAY,EAAE;YACZ,yCAAyC;YACzC,0CAA0C;SAC3C;KACF;IACD,UAAU,EAAE;QACV,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,aAAa;QACpB,aAAa,EAAE,CAAC,WAAW,CAAC;KAC7B;IACD,OAAO,EAAE;QACP,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,SAAS;QAChB,YAAY,EAAE,CAAC,uDAAuD,CAAC;QACvE,gBAAgB,EAAE,CAAC,sCAAsC,CAAC;KAC3D;CACF,CAAA;AAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;AAEnE,SAAS,KAAK,CAAC,GAAW;IACxB,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAA;IACtB,OAAO,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;AACrF,CAAC;AAED;;;;;EAKE;AACF,SAAS,KAAK,CAAC,GAAQ;IACrB,OAAO,GAAG,CAAC,IAAI,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,CAAA;AACtE,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,IAAmB;IACnD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAA;IACtB,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IAErC,IAAI,IAAI,CAAC,aAAa,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvF,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,CAAA;IACvE,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,IAAI,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IACjD,OAAO,OAAO,CACZ,IAAI,CAAC,gBAAgB,EAAE,IAAI,CACzB,CAAC,MAAM,EAAE,EAAE,CACT,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;QACtB,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;QAC1B,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CACpD,CACF,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAW,EACX,UAA4C,GAAG,EAAE,CAAC,IAAI;IAEtD,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,GAAG,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACnG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAwB,EACxB,UAA4C,GAAG,EAAE,CAAC,IAAI;IAEtD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAA;IACjF,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,8CAA8C,EAAE,CAAA;IACtF,IAAI,IAA+B,CAAA;IACnC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAA;QACrF,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QAC9C,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,KAAK,EAAE,GAAG,GAAG,uCAAuC,EAAE,CAAA;QAC7E,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACtB,OAAO;gBACL,KAAK,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC,KAAK,+FAA+F;aACzI,CAAA;QACH,CAAC;QACD,IAAI,IAAI,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7B,OAAO,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAA;QACrE,CAAC;QACD,IAAI,GAAG,OAAO,CAAA;IAChB,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAA;AAC9E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAiB,EAAE,UAA6B;IACjF,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAA;IAC/C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAA;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,CAAA;IAC7B,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IACvC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAA;QACxB,OAAO,OAAO,CACZ,IAAI;YACJ,UAAU,CAAC,IAAI,CAAC;YAChB,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;YAC/B,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;YAC/B,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAC5B,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/mcp-oauth/collections.d.ts

@@ -0,0 +1,10 @@
+import type { CollectionConfig, GlobalConfig, PayloadRequest } from 'payload';
+import { type McpOAuthRuntime } from './runtime.js';
+type UserDoc = Record<string, unknown>;
+/** The person signed in to the admin, or nobody if the request came through MCP. */
+export declare function signedInPerson(req: PayloadRequest): UserDoc | undefined;
+export declare function clientsCollection(runtime: McpOAuthRuntime, group: string): CollectionConfig;
+export declare function grantsCollection(runtime: McpOAuthRuntime, group: string): CollectionConfig;
+export declare function accessGlobal(runtime: McpOAuthRuntime, group: string): GlobalConfig;
+export {};
+//# sourceMappingURL=collections.d.ts.map

package/dist/mcp-oauth/collections.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"collections.d.ts","sourceRoot":"","sources":["../../src/mcp-oauth/collections.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAU,gBAAgB,EAAS,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAG5F,OAAO,EAKL,KAAK,eAAe,EACrB,MAAM,cAAc,CAAA;AAuBrB,KAAK,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAEtC,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,GAAG,SAAS,CAMvE;AA0BD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,GAAG,gBAAgB,CAgD3F;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,GAAG,gBAAgB,CA0E1F;AAQD,wBAAgB,YAAY,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,CA+ElF"}

package/dist/mcp-oauth/collections.js

@@ -0,0 +1,236 @@
+import { isMcpApiKeyPrincipal } from '../mcp/api-key-access.js';
+import { MCP_CLIENT_KINDS, MCP_CLIENT_RULES } from './clients.js';
+import { MCP_ACCESS_SLUG, MCP_OAUTH_CLIENTS_SLUG, MCP_OAUTH_GRANTS_SLUG, MCP_OAUTH_STRATEGY, } from './runtime.js';
+/** The person signed in to the admin, or nobody if the request came through MCP. */
+export function signedInPerson(req) {
+    const user = req.user;
+    if (!user || isMcpApiKeyPrincipal(user))
+        return undefined;
+    if (user['_strategy'] === MCP_OAUTH_STRATEGY || user['_strategy'] === 'mcp-api-key')
+        return undefined;
+    return user;
+}
+function adminOnly(runtime) {
+    return ({ req }) => {
+        const user = signedInPerson(req);
+        return Boolean(user && runtime.isAdmin(user));
+    };
+}
+function ownOrAdmin(runtime) {
+    return ({ req }) => {
+        const user = signedInPerson(req);
+        if (!user)
+            return false;
+        if (runtime.isAdmin(user))
+            return true;
+        return { user: { equals: user['id'] } };
+    };
+}
+const never = () => false;
+const secret = { read: () => false, create: () => false, update: () => false };
+const kindOptions = MCP_CLIENT_KINDS.map((kind) => ({
+    label: MCP_CLIENT_RULES[kind].label,
+    value: kind,
+}));
+export function clientsCollection(runtime, group) {
+    return {
+        slug: MCP_OAUTH_CLIENTS_SLUG,
+        labels: { singular: 'MCP client', plural: 'MCP clients' },
+        admin: {
+            group,
+            useAsTitle: 'name',
+            defaultColumns: ['name', 'kind', 'method', 'lastUsedAt'],
+            description: 'Apps that have registered to connect over MCP. Recognised by where they send people back to, not by the name they give.',
+        },
+        access: { read: adminOnly(runtime), create: never, update: never, delete: adminOnly(runtime) },
+        fields: [
+            {
+                name: 'clientId',
+                type: 'text',
+                required: true,
+                unique: true,
+                index: true,
+                admin: { readOnly: true },
+            },
+            {
+                name: 'name',
+                type: 'text',
+                admin: { readOnly: true, description: 'What the app calls itself.' },
+            },
+            {
+                name: 'kind',
+                type: 'select',
+                required: true,
+                options: kindOptions,
+                admin: { readOnly: true },
+            },
+            {
+                name: 'method',
+                type: 'select',
+                required: true,
+                options: [
+                    { label: 'Registered (DCR)', value: 'dcr' },
+                    { label: 'Metadata document (CIMD)', value: 'cimd' },
+                ],
+                admin: { readOnly: true },
+            },
+            { name: 'redirectUris', type: 'json', required: true, admin: { readOnly: true } },
+            { name: 'fetchedAt', type: 'date', admin: { readOnly: true, hidden: true } },
+            { name: 'lastUsedAt', type: 'date', admin: { readOnly: true } },
+        ],
+    };
+}
+export function grantsCollection(runtime, group) {
+    const hidden = (name, type = 'text', index = false) => ({ name, type, index, access: secret, admin: { hidden: true } });
+    return {
+        slug: MCP_OAUTH_GRANTS_SLUG,
+        labels: { singular: 'Connected app', plural: 'Connected apps' },
+        admin: {
+            group,
+            useAsTitle: 'clientName',
+            defaultColumns: ['clientName', 'user', 'status', 'lastUsedAt', 'connectedAt'],
+            description: 'Every app somebody has connected over MCP, as them. Revoking one signs that app out at once.',
+        },
+        access: {
+            read: ownOrAdmin(runtime),
+            create: never,
+            update: never,
+            delete: adminOnly(runtime),
+        },
+        fields: [
+            {
+                name: 'user',
+                type: 'relationship',
+                relationTo: runtime.users,
+                required: true,
+                index: true,
+                admin: { readOnly: true },
+            },
+            { name: 'clientName', type: 'text', required: true, admin: { readOnly: true } },
+            {
+                name: 'kind',
+                type: 'select',
+                required: true,
+                options: kindOptions,
+                admin: { readOnly: true },
+            },
+            {
+                name: 'client',
+                type: 'relationship',
+                relationTo: MCP_OAUTH_CLIENTS_SLUG,
+                required: true,
+                admin: { readOnly: true },
+            },
+            {
+                name: 'status',
+                type: 'select',
+                required: true,
+                defaultValue: 'pending',
+                index: true,
+                options: [
+                    { label: 'Waiting for the app', value: 'pending' },
+                    { label: 'Connected', value: 'active' },
+                    { label: 'Revoked', value: 'revoked' },
+                ],
+                admin: { readOnly: true },
+            },
+            { name: 'redirectHost', type: 'text', admin: { readOnly: true } },
+            { name: 'connectedAt', type: 'date', admin: { readOnly: true } },
+            { name: 'lastUsedAt', type: 'date', admin: { readOnly: true } },
+            { name: 'revokedAt', type: 'date', admin: { readOnly: true } },
+            { name: 'revokedReason', type: 'text', admin: { readOnly: true } },
+            hidden('codeHash', 'text', true),
+            hidden('codeChallenge'),
+            hidden('codeRedirectUri'),
+            hidden('codeExpiresAt', 'date'),
+            hidden('accessHash', 'text', true),
+            hidden('accessExpiresAt', 'date'),
+            hidden('refreshHash', 'text', true),
+            hidden('previousRefreshHash', 'text', true),
+            hidden('rotatedAt', 'date'),
+            hidden('refreshExpiresAt', 'date'),
+        ],
+    };
+}
+/*
+The policy: which apps may connect, and what each role is offered once they
+have. An administrator's to edit, and read by the endpoints with
+`overrideAccess`. Its defaults are the host's, so an unsaved global behaves as
+configured (see `readPolicy`).
+*/
+export function accessGlobal(runtime, group) {
+    const toolOptions = runtime.tools.map((tool) => ({ label: tool.name, value: tool.name }));
+    const admin = adminOnly(runtime);
+    return {
+        slug: MCP_ACCESS_SLUG,
+        label: 'MCP access',
+        admin: {
+            group,
+            description: 'Who can connect AI apps to this site over MCP, and what each role can do once connected. Changes apply to existing connections at their next request.',
+        },
+        access: { read: admin, update: admin },
+        fields: [
+            {
+                name: 'clients',
+                type: 'group',
+                label: 'Apps that may connect',
+                admin: {
+                    description: 'Turning an app off refuses new connections and signs out existing ones at their next request.',
+                },
+                fields: MCP_CLIENT_KINDS.map((kind) => ({
+                    name: kind,
+                    type: 'checkbox',
+                    label: MCP_CLIENT_RULES[kind].label,
+                    defaultValue: runtime.defaults.clients[kind],
+                    ...(kind === 'claudeCode'
+                        ? {
+                            admin: {
+                                description: 'Signs in through a browser on the person’s own computer. Any app there that uses the same localhost callback is treated the same way.',
+                            },
+                        }
+                        : {}),
+                })),
+            },
+            {
+                name: 'editors',
+                type: 'group',
+                label: 'Everyone who is not an administrator',
+                fields: [
+                    {
+                        name: 'tools',
+                        type: 'select',
+                        hasMany: true,
+                        options: toolOptions,
+                        defaultValue: [...runtime.defaults.editorTools],
+                        admin: {
+                            description: 'The tools they are offered. A tool added to the site later is not offered until it is ticked here.',
+                        },
+                    },
+                ],
+            },
+            {
+                name: 'admins',
+                type: 'group',
+                label: 'Administrators',
+                fields: [
+                    {
+                        name: 'allTools',
+                        type: 'checkbox',
+                        label: 'Every tool, including ones added later',
+                        defaultValue: true,
+                    },
+                    {
+                        name: 'tools',
+                        type: 'select',
+                        hasMany: true,
+                        options: toolOptions,
+                        admin: {
+                            condition: (_, sibling) => !sibling.allTools,
+                        },
+                    },
+                ],
+            },
+        ],
+    };
+}
+//# sourceMappingURL=collections.js.map

package/dist/mcp-oauth/collections.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collections.js","sourceRoot":"","sources":["../../src/mcp-oauth/collections.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AAC/D,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AACjE,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EACrB,kBAAkB,GAEnB,MAAM,cAAc,CAAA;AAyBrB,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,GAAmB;IAChD,MAAM,IAAI,GAAG,GAAG,CAAC,IAA6C,CAAA;IAC9D,IAAI,CAAC,IAAI,IAAI,oBAAoB,CAAC,IAAa,CAAC;QAAE,OAAO,SAAS,CAAA;IAClE,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,kBAAkB,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,aAAa;QACjF,OAAO,SAAS,CAAA;IAClB,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,SAAS,CAAC,OAAwB;IACzC,OAAO,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;QACjB,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;QAChC,OAAO,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IAC/C,CAAC,CAAA;AACH,CAAC;AAED,SAAS,UAAU,CAAC,OAAwB;IAC1C,OAAO,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;QACjB,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;QAChC,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAA;QACvB,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QACtC,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAA;IACzC,CAAC,CAAA;AACH,CAAC;AAED,MAAM,KAAK,GAAW,GAAG,EAAE,CAAC,KAAK,CAAA;AACjC,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAA;AAE9E,MAAM,WAAW,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAClD,KAAK,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,KAAK;IACnC,KAAK,EAAE,IAAI;CACZ,CAAC,CAAC,CAAA;AAEH,MAAM,UAAU,iBAAiB,CAAC,OAAwB,EAAE,KAAa;IACvE,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,MAAM,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE;QACzD,KAAK,EAAE;YACL,KAAK;YACL,UAAU,EAAE,MAAM;YAClB,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAC;YACxD,WAAW,EACT,yHAAyH;SAC5H;QACD,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE;QAC9F,MAAM,EAAE;YACN;gBACE,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,IAAI;gBACX,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;aAC1B;YACD;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,MAAM;gBACZ,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,4BAA4B,EAAE;aACrE;YACD;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE,WAAW;gBACpB,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;aAC1B;YACD;gBACE,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE;oBACP,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,KAAK,EAAE;oBAC3C,EAAE,KAAK,EAAE,0BAA0B,EAAE,KAAK,EAAE,MAAM,EAAE;iBACrD;gBACD,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;aAC1B;YACD,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;YACjF,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YAC5E,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;SAChE;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAwB,EAAE,KAAa;IACtE,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,OAAwB,MAAM,EAAE,KAAK,GAAG,KAAK,EAAS,EAAE,CACpF,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAU,CAAA;IAE3E,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,MAAM,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,gBAAgB,EAAE;QAC/D,KAAK,EAAE;YACL,KAAK;YACL,UAAU,EAAE,YAAY;YACxB,cAAc,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,CAAC;YAC7E,WAAW,EACT,8FAA8F;SACjG;QACD,MAAM,EAAE;YACN,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC;YACzB,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC;SAC3B;QACD,MAAM,EAAE;YACN;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,cAAc;gBACpB,UAAU,EAAE,OAAO,CAAC,KAAc;gBAClC,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,IAAI;gBACX,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;aAC1B;YACD,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;YAC/E;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE,WAAW;gBACpB,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;aAC1B;YACD;gBACE,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,cAAc;gBACpB,UAAU,EAAE,sBAA+B;gBAC3C,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;aAC1B;YACD;gBACE,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,IAAI;gBACd,YAAY,EAAE,SAAS;gBACvB,KAAK,EAAE,IAAI;gBACX,OAAO,EAAE;oBACP,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,SAAS,EAAE;oBAClD,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE;oBACvC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE;iBACvC;gBACD,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;aAC1B;YACD,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;YACjE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;YAChE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;YAC/D,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;YAC9D,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;YAClE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC;YAChC,MAAM,CAAC,eAAe,CAAC;YACvB,MAAM,CAAC,iBAAiB,CAAC;YACzB,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC;YAC/B,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC;YAClC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC;YACjC,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC;YACnC,MAAM,CAAC,qBAAqB,EAAE,MAAM,EAAE,IAAI,CAAC;YAC3C,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC;YAC3B,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC;SACnC;KACF,CAAA;AACH,CAAC;AAED;;;;;EAKE;AACF,MAAM,UAAU,YAAY,CAAC,OAAwB,EAAE,KAAa;IAClE,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IACzF,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAA;IAEhC,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,YAAY;QACnB,KAAK,EAAE;YACL,KAAK;YACL,WAAW,EACT,uJAAuJ;SAC1J;QACD,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;QACtC,MAAM,EAAE;YACN;gBACE,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,uBAAuB;gBAC9B,KAAK,EAAE;oBACL,WAAW,EACT,+FAA+F;iBAClG;gBACD,MAAM,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAS,EAAE,CAAC,CAAC;oBAC7C,IAAI,EAAE,IAAI;oBACV,IAAI,EAAE,UAAU;oBAChB,KAAK,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,KAAK;oBACnC,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;oBAC5C,GAAG,CAAC,IAAI,KAAK,YAAY;wBACvB,CAAC,CAAC;4BACE,KAAK,EAAE;gCACL,WAAW,EACT,uIAAuI;6BAC1I;yBACF;wBACH,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC,CAAC;aACJ;YACD;gBACE,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,sCAAsC;gBAC7C,MAAM,EAAE;oBACN;wBACE,IAAI,EAAE,OAAO;wBACb,IAAI,EAAE,QAAQ;wBACd,OAAO,EAAE,IAAI;wBACb,OAAO,EAAE,WAAW;wBACpB,YAAY,EAAE,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;wBAC/C,KAAK,EAAE;4BACL,WAAW,EACT,oGAAoG;yBACvG;qBACF;iBACF;aACF;YACD;gBACE,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,gBAAgB;gBACvB,MAAM,EAAE;oBACN;wBACE,IAAI,EAAE,UAAU;wBAChB,IAAI,EAAE,UAAU;wBAChB,KAAK,EAAE,wCAAwC;wBAC/C,YAAY,EAAE,IAAI;qBACnB;oBACD;wBACE,IAAI,EAAE,OAAO;wBACb,IAAI,EAAE,QAAQ;wBACd,OAAO,EAAE,IAAI;wBACb,OAAO,EAAE,WAAW;wBACpB,KAAK,EAAE;4BACL,SAAS,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,CAAE,OAAkC,CAAC,QAAQ;yBACzE;qBACF;iBACF;aACF;SACF;KACF,CAAA;AACH,CAAC"}

package/dist/mcp-oauth/crypto.d.ts

@@ -0,0 +1,29 @@
+export declare const TOKEN_PREFIX: {
+    readonly access: "tlo_at_";
+    readonly refresh: "tlo_rt_";
+    readonly code: "tlo_ac_";
+    readonly client: "tlo_client_";
+};
+/** A fresh random token with a recognisable prefix. */
+export declare function newToken(prefix: string): string;
+/** A client id: shorter, because it is not a secret. */
+export declare function newClientId(): string;
+/** A key for one purpose, from the Payload secret. */
+export declare function deriveKey(secret: string, purpose: 'token' | 'request'): Buffer;
+/** What the database stores in place of a token. */
+export declare function hashToken(key: Buffer, token: string): string;
+/**
+ * PKCE S256 (RFC 7636 §4.6). The verifier is 43–128 unreserved characters;
+ * anything else fails before it is hashed.
+ */
+export declare function verifyPkce(verifier: unknown, challenge: string): boolean;
+/** A code challenge as RFC 7636 §4.2 shapes it: 43 base64url characters. */
+export declare function isCodeChallenge(value: unknown): value is string;
+/** Signs `value` with an expiry, for carrying through a URL. */
+export declare function seal(key: Buffer, value: object, ttlSeconds: number, now?: number): string;
+/**
+ * The sealed value, if this server signed it and it has not expired. The MAC is
+ * checked before anything is parsed.
+ */
+export declare function unseal<T extends object>(key: Buffer, sealed: unknown, now?: number): T | undefined;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/mcp-oauth/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/mcp-oauth/crypto.ts"],"names":[],"mappings":"AAqBA,eAAO,MAAM,YAAY;;;;;CAKf,CAAA;AAMV,uDAAuD;AACvD,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,wDAAwD;AACxD,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED,sDAAsD;AACtD,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAE9E;AAED,oDAAoD;AACpD,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAMxE;AAED,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE/D;AAED,gEAAgE;AAChE,wBAAgB,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,MAAM,CAM7F;AAED;;;GAGG;AACH,wBAAgB,MAAM,CAAC,CAAC,SAAS,MAAM,EACrC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,OAAO,EACf,GAAG,SAAa,GACf,CAAC,GAAG,SAAS,CAgBf"}