@fudrouter/fsrouter 0.6.63 → 0.6.64

package/open-sse/mcp-server/scopeEnforcement.js

@@ -1,80 +0,0 @@
-import { MCP_TOOL_MAP } from "./schemas/tools.ts";
-function normalizeScopeList(raw) {
-  if (!Array.isArray(raw)) return [];
-  const normalized = raw.filter((value) => typeof value === "string").map((value) => value.trim()).filter(Boolean);
-  return Array.from(new Set(normalized));
-}
-function extractMetaScopeList(meta) {
-  if (!meta || typeof meta !== "object") return [];
-  const metaRecord = meta;
-  const direct = normalizeScopeList(metaRecord.scopes);
-  if (direct.length > 0) return direct;
-  const auth = metaRecord.auth;
-  if (auth && typeof auth === "object") {
-    const authScopes = normalizeScopeList(auth.scopes);
-    if (authScopes.length > 0) return authScopes;
-  }
-  const omni = metaRecord.omniroute;
-  if (omni && typeof omni === "object") {
-    const omniScopes = normalizeScopeList(omni.scopes);
-    if (omniScopes.length > 0) return omniScopes;
-  }
-  return [];
-}
-function scopeMatches(grantedScope, requiredScope) {
-  if (grantedScope === "*" || grantedScope === requiredScope) {
-    return true;
-  }
-  if (grantedScope.endsWith("*")) {
-    const prefix = grantedScope.slice(0, -1);
-    return requiredScope.startsWith(prefix);
-  }
-  return false;
-}
-function resolveCallerScopeContext(extra, fallbackScopes = []) {
-  const callerId = typeof extra?.authInfo?.clientId === "string" && extra.authInfo.clientId.trim() || typeof extra?.sessionId === "string" && extra.sessionId.trim() || "anonymous";
-  const authScopes = normalizeScopeList(extra?.authInfo?.scopes);
-  if (authScopes.length > 0) {
-    return { callerId, scopes: authScopes, source: "authInfo" };
-  }
-  const metaScopes = extractMetaScopeList(extra?._meta);
-  if (metaScopes.length > 0) {
-    return { callerId, scopes: metaScopes, source: "meta" };
-  }
-  const fallback = normalizeScopeList(fallbackScopes);
-  if (fallback.length > 0) {
-    return { callerId, scopes: fallback, source: "env" };
-  }
-  return { callerId, scopes: [], source: "none" };
-}
-function evaluateToolScopes(toolName, callerScopes, enforceScopes, inlineScopes) {
-  const provided = normalizeScopeList(callerScopes);
-  if (!enforceScopes) {
-    return { allowed: true, required: [], provided, missing: [] };
-  }
-  const toolScopes = inlineScopes ?? MCP_TOOL_MAP[toolName]?.scopes;
-  const required = Array.isArray(toolScopes) ? Array.from(toolScopes) : [];
-  if (required.length === 0) {
-    return {
-      allowed: false,
-      required: [],
-      provided,
-      missing: [],
-      reason: "tool_definition_missing"
-    };
-  }
-  const missing = required.filter(
-    (requiredScope) => !provided.some((grantedScope) => scopeMatches(grantedScope, requiredScope))
-  );
-  return {
-    allowed: missing.length === 0,
-    required,
-    provided,
-    missing,
-    reason: missing.length > 0 ? "missing_scopes" : void 0
-  };
-}
-export {
-  evaluateToolScopes,
-  resolveCallerScopeContext
-};