@ggui-ai/mcp-server 0.1.0-rc.1

package/dist/user-session-auth.js

@@ -0,0 +1,148 @@
+/**
+ * Cookie name. Distinct from `ggui_console_session` so cross-kind
+ * confusion is impossible — a cookie value never gets misinterpreted
+ * as a different auth artifact. Change carries a compat concern (the
+ * `/login` mint endpoint, `cookieAuthMiddleware`, and `/logout` clear
+ * read this exact name); keep this export as the single source of
+ * truth.
+ */
+export const USER_SESSION_COOKIE_NAME = 'ggui_user_session';
+/**
+ * Default cookie TTL (seconds). 8 hours mirrors the console session
+ * cookie default — operators leaving a tab open for a workday don't
+ * get re-prompted, but a stale cookie on a forgotten device expires
+ * before it ages further. Operators wanting longer sessions pass
+ * `ttlSec` at mount time.
+ */
+export const DEFAULT_USER_SESSION_TTL_SEC = 8 * 60 * 60;
+/**
+ * Format the `Set-Cookie` header value. Caller does
+ * `res.setHeader('Set-Cookie', formatUserSessionCookieHeader(...))`.
+ *
+ * The bearer is URL-encoded so values containing `;` / `,` / `=`
+ * survive the cookie wire format. `extractUserSessionCookie` decodes
+ * symmetrically.
+ */
+export function formatUserSessionCookieHeader(input) {
+    const ttlSec = input.ttlSec ?? DEFAULT_USER_SESSION_TTL_SEC;
+    const attrs = [
+        `${USER_SESSION_COOKIE_NAME}=${encodeURIComponent(input.bearer)}`,
+        `Path=${input.path ?? '/'}`,
+        `Max-Age=${ttlSec}`,
+        `SameSite=${input.sameSite ?? 'Lax'}`,
+        `HttpOnly`,
+    ];
+    if (input.secure)
+        attrs.push('Secure');
+    return attrs.join('; ');
+}
+/**
+ * Format a `Set-Cookie` header that immediately invalidates the
+ * user-session cookie. Used by `/logout` and `/revoke-bearer` so the
+ * browser drops it without waiting for `Max-Age`.
+ *
+ * `Max-Age=0` is the canonical clear pattern; matching attrs (Path,
+ * Secure) are required so the browser pairs this with the original
+ * mint and replaces it.
+ */
+export function formatClearUserSessionCookieHeader(input) {
+    const attrs = [
+        `${USER_SESSION_COOKIE_NAME}=`,
+        `Path=${input.path ?? '/'}`,
+        `Max-Age=0`,
+        `SameSite=${input.sameSite ?? 'Lax'}`,
+        `HttpOnly`,
+    ];
+    if (input.secure)
+        attrs.push('Secure');
+    return attrs.join('; ');
+}
+/**
+ * Read the user-session cookie value from a `Cookie` header string.
+ * Returns the URL-decoded bearer, or `null` when the cookie is absent
+ * / malformed.
+ *
+ * Manual parser — same shape as `extractDevtoolCookie`. Tolerant of
+ * multi-cookie headers (`a=1; ggui_user_session=xyz; b=2`); rejects
+ * empty values rather than treating them as an authenticated bearer.
+ */
+export function extractUserSessionCookie(cookieHeader) {
+    if (!cookieHeader)
+        return null;
+    const pairs = cookieHeader.split(';');
+    for (const raw of pairs) {
+        const trimmed = raw.trim();
+        if (!trimmed)
+            continue;
+        const eq = trimmed.indexOf('=');
+        if (eq <= 0)
+            continue;
+        const name = trimmed.slice(0, eq);
+        if (name !== USER_SESSION_COOKIE_NAME)
+            continue;
+        const value = trimmed.slice(eq + 1);
+        if (!value)
+            return null;
+        try {
+            return decodeURIComponent(value);
+        }
+        catch {
+            // Malformed URL-encoding — treat as no cookie. The browser
+            // shouldn't produce this, but defensive.
+            return null;
+        }
+    }
+    return null;
+}
+/**
+ * Read the cookie off Node `IncomingHttpHeaders` directly. Thin
+ * wrapper for callers operating below Express (raw `IncomingMessage`,
+ * WebSocket upgrade).
+ */
+export function readUserSessionCookieFromHeaders(headers) {
+    const raw = headers['cookie'];
+    if (typeof raw === 'string')
+        return extractUserSessionCookie(raw);
+    return null;
+}
+/**
+ * Express middleware that bridges the cookie → header path.
+ *
+ * When a request arrives WITHOUT an `Authorization` header but WITH a
+ * valid user-session cookie, the middleware synthesizes
+ * `Authorization: Bearer <cookie>` so every existing
+ * `resolveIdentity(auth, req)` call works transparently. No new auth
+ * codepath, no new gate logic.
+ *
+ * When the request already has an `Authorization` header, the cookie
+ * is ignored — the explicit header wins. This preserves the existing
+ * `/mcp` ingress posture (claude.ai's connector sends Authorization;
+ * the cookie does not interfere with it).
+ *
+ * Composition-time: mount BEFORE any gate that reads
+ * `req.headers['authorization']` (the `/ggui/console/llm-keys` gate,
+ * the `/mcp` ingress, etc.). Order matters — middleware runs
+ * top-to-bottom in the Express chain.
+ */
+export function cookieAuthMiddleware() {
+    return (req, _res, next) => {
+        if (req.headers['authorization']) {
+            next();
+            return;
+        }
+        const cookieValue = readUserSessionCookieFromHeaders(req.headers);
+        if (cookieValue) {
+            req.headers['authorization'] = `Bearer ${cookieValue}`;
+        }
+        next();
+    };
+}
+/**
+ * Read the user-session cookie off an Express request. Used by
+ * `/logout` to know whether there's anything to clear, by
+ * `/revoke-bearer` to identify the pairing to revoke, and by tests
+ * that need to inspect the cookie without going through middleware.
+ */
+export function readUserSessionCookie(req) {
+    return readUserSessionCookieFromHeaders(req.headers);
+}

package/package.json

@@ -0,0 +1,76 @@
+{
+  "name": "@ggui-ai/mcp-server",
+  "version": "0.1.0-rc.1",
+  "description": "Self-hosted MCP server for the ggui protocol. An HTTP/MCP binding layer over @ggui-ai/mcp-server-handlers and the reference adapters from @ggui-ai/mcp-server-core — run it via `ggui serve`.",
+  "keywords": [
+    "ggui",
+    "mcp",
+    "mcp-server",
+    "generative-ui",
+    "agent",
+    "self-hosted"
+  ],
+  "license": "Apache-2.0",
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.27.0",
+    "express": "^4.21.0",
+    "nodemailer": "^8.0.7",
+    "resend": "^6.12.2",
+    "ws": "^8.20.1",
+    "zod": "^4.3.6",
+    "@ggui-ai/console": "0.1.0-rc.1",
+    "@ggui-ai/mcp-server-core": "0.1.0-rc.1",
+    "@ggui-ai/mcp-server-handlers": "0.1.0-rc.1",
+    "@ggui-ai/negotiator": "0.1.0-rc.1",
+    "@ggui-ai/iframe-runtime": "0.1.0-rc.1",
+    "@ggui-ai/preview-a2ui": "0.1.0-rc.1",
+    "@ggui-ai/project-config": "0.1.0-rc.1",
+    "@ggui-ai/ui-registry": "0.1.0-rc.1",
+    "@ggui-ai/protocol": "0.1.0-rc.1",
+    "@ggui-ai/ui-gen": "0.1.0-rc.1"
+  },
+  "devDependencies": {
+    "@types/express": "^4.17.21",
+    "@types/node": "^22.0.0",
+    "@types/nodemailer": "^8.0.0",
+    "@types/ws": "^8.5.10",
+    "typescript": "^5.0.0",
+    "vitest": "^3.0.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/ggui-ai/ggui.git",
+    "directory": "packages/mcp-server"
+  },
+  "homepage": "https://github.com/ggui-ai/ggui/tree/main/packages/mcp-server",
+  "bugs": {
+    "url": "https://github.com/ggui-ai/ggui/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "author": "ggui contributors <hello@ggui.ai>",
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json && node ../scripts/fix-esm-imports.mjs dist",
+    "dev": "tsc --watch",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  }
+}