@grigoreo-dev/otask-mcp 1.2.0

package/README.md

@@ -0,0 +1,168 @@
+# otask-mcp-server
+
+[MCP-сервер](https://modelcontextprotocol.io) для [O!task API](https://api.otask.ru/docs). Отдаёт операции O!task (воркспейс/задачи) как MCP-инструменты для агентов (Cursor, OpenCode, n8n MCP Client Tool).
+
+## Установка
+
+```bash
+npm i -g @grigoreo-dev/otask-mcp
+# или: npx @grigoreo-dev/otask-mcp
+# HTTP: npx otask-mcp-http   # bin name stays unscoped
+```
+
+Публикация на npm: push tag `vX.Y.Z` (версия в tag = `package.json`). CI: `.github/workflows/publish.yml` (OIDC Trusted Publisher, без `NPM_TOKEN`).
+
+## Режимы
+
+| Режим | Команда | Как выбирается | Авторизация клиента |
+|-------|---------|----------------|---------------------|
+| **stdio** | `bun start` | Локальный процесс; всегда берёт credentials из env сервера | Без HTTP; задайте `OTASK_*` в env |
+| **HTTP gateway** | `bun run start:http` | Есть `OTASK_AUTH_KEY` **или** `OTASK_EMAIL`+`OTASK_PASSWORD` | `Authorization: Bearer <MCP_AUTH_TOKEN>` |
+| **HTTP passthrough** | `bun run start:http` | Нет credentials `OTASK_*` в env | `Authorization: Bearer <токен O!task>` (проксируется в API) |
+
+Определение: `hasServerOtaskCredentials()` — gateway, если задан статический ключ или email+password; иначе passthrough. Проверка: `GET /health` → `authMode: "gateway" | "passthrough"`.
+
+stdio требует `OTASK_*` (без них падает при старте). HTTP gateway требует `MCP_AUTH_TOKEN`, если заданы `OTASK_*` (иначе падает при старте).
+
+## Переменные окружения
+
+| Переменная | Где используется | Когда обязательна | Назначение |
+|------------|------------------|-------------------|------------|
+| `OTASK_AUTH_KEY` | stdio, HTTP gateway | stdio **или** gateway (альтернатива: email/password) | Статический O!task Bearer, которым пользуется сервер |
+| `OTASK_EMAIL` | stdio, HTTP gateway | вместе с `OTASK_PASSWORD` как альтернатива ключу | Логин для получения токена |
+| `OTASK_PASSWORD` | stdio, HTTP gateway | вместе с `OTASK_EMAIL` | Пароль для логина |
+| `MCP_AUTH_TOKEN` | HTTP gateway | режим gateway | Общий секрет, который должен отправлять клиент; **не** токен O!task |
+| `OTASK_ALLOWED_PROJECTS` | stdio, HTTP gateway | опционально | Список slug и/или числовых ID проектов через запятую |
+| `PORT` | HTTP | опционально (по умолчанию `3847`) | Порт прослушивания |
+| `HOST` | HTTP | опционально (по умолчанию `0.0.0.0`) | Адрес привязки |
+
+## HTTP-заголовки
+
+| Заголовок | Режим | Назначение |
+|-----------|-------|------------|
+| `Authorization: Bearer …` | gateway | Должен совпадать с `MCP_AUTH_TOKEN` |
+| `Authorization: Bearer …` | passthrough | Токен O!task API; проксируется на каждый запрос к API |
+| `X-Otask-Allowed-Projects` | **только passthrough** | Slug/ID через запятую; в gateway игнорируется (используйте env) |
+
+## Эндпоинты (HTTP)
+
+| | |
+|---|---|
+| MCP | `POST`/`GET` `/mcp` (Streamable HTTP) |
+| Health | `GET /health` → `{ ok, mode, authMode, projectGuard }`, где `projectGuard` — `"env" \| "header" \| "off"` |
+
+Пример деплоя: `https://otask-mcp.grigoreo.dev/mcp` (порт `3847` в Docker).
+
+## Примеры для n8n
+
+### Gateway (credentials O!task хранит сервер)
+
+Env сервера:
+
+```env
+OTASK_AUTH_KEY=...
+MCP_AUTH_TOKEN=super-secret-mcp-token
+OTASK_ALLOWED_PROJECTS=my-project,42
+```
+
+n8n **MCP Client Tool**:
+
+- URL: `https://otask-mcp.example/mcp`
+- Transport: **HTTP Streamable**
+- Credential / header: `Authorization: Bearer super-secret-mcp-token`
+- **Не** отправляйте `X-Otask-Allowed-Projects` (allow-list берётся из env сервера)
+
+### Passthrough (токен O!task у клиента)
+
+Env сервера: без `OTASK_AUTH_KEY` / `OTASK_EMAIL` / `OTASK_PASSWORD`.
+
+n8n **MCP Client Tool**:
+
+- URL: `https://otask-mcp.example/mcp`
+- Transport: **HTTP Streamable**
+- Credential / header: `Authorization: Bearer <тот же токен, что и для api.otask.ru>`
+- Опционально: `X-Otask-Allowed-Projects: eng-backlog,99`
+
+### Stdio (Cursor / OpenCode)
+
+```env
+OTASK_AUTH_KEY=...
+# или OTASK_EMAIL + OTASK_PASSWORD
+OTASK_ALLOWED_PROJECTS=my-project
+```
+
+```bash
+bun start
+```
+
+## Инструменты
+
+Регистрируются в `src/tools/registry.ts` (краткие intent для агентов):
+
+| Инструмент | Назначение |
+|------------|------------|
+| `otask_get_task` | Получить одну задачу по workspace + slug задачи (посмотреть поля перед обновлением) |
+| `otask_update_task` | Обновить существующую задачу (name, board, performers, tags, description, …) |
+| `otask_list_projects` | Список проектов воркспейса (с фильтром по allow-list, если задан) |
+| `otask_list_project_tasks` | Список задач в проекте |
+| `otask_list_board` | Список досок/колонок (статусов) проекта — узнать `board_id` / `board_column_id` |
+| `otask_list_members` | Список участников воркспейса (ID исполнителей для назначения) |
+| `otask_list_tags` | Список тегов воркспейса для меток |
+| `otask_list_comments` | Список комментариев к задаче |
+| `otask_add_comment` | Добавить комментарий (опционально `parent_id` для ответов) |
+| `otask_create_task` | Создать задачу (обязательно: `ws_slug`, `project_id`, `name`, `board_id`, `board_column_id`, `end_at`) |
+| `otask_move_task` | Переместить задачу в другую колонку доски (статус) |
+| `otask_archive_task` | Архивировать задачу |
+
+Если активен allow-list проектов, project-scoped инструменты проверяют членство (или фильтруют списки); пустой allow-list = доступны все проекты.
+
+## Allow-list проектов
+
+Формат: **slug** и/или **числовые ID** через запятую (пробелы обрезаются). Пусто / не задано = выключено.
+
+### Gateway / stdio — env
+
+```env
+OTASK_ALLOWED_PROJECTS=product-roadmap,eng-backlog,42
+```
+
+`GET /health` → `projectGuard: "env"`, если значение непустое.
+
+### Passthrough — заголовок запроса
+
+```http
+X-Otask-Allowed-Projects: product-roadmap,42
+```
+
+`GET /health` (с этим заголовком) → `projectGuard: "header"`. Gateway этот заголовок игнорирует и всегда использует `OTASK_ALLOWED_PROJECTS`.
+
+## Снимок API-документации
+
+Пересобрать локальный каталог API из HTML-доки O!task (Scribe):
+
+```bash
+bun run docs:parse
+```
+
+Пишет в `docs/catalog/` с живой HTML-страницы доки (или `bun run docs:parse --file path` для офлайн HTML).
+
+## Разработка
+
+```bash
+bun install
+bun run build          # tsc → dist/
+bun test               # bun test
+bun start              # stdio MCP
+bun run start:http     # Streamable HTTP MCP
+bun run dev            # stdio hot reload
+bun run dev:http       # HTTP hot reload
+```
+
+### Добавление инструмента
+
+1. `src/services/api.ts` / `client.ts` — метод API при необходимости  
+2. `src/schemas/` — Zod input schema  
+3. `src/tools/my-tool.ts` — `createMyTool({ api, guard })` → `ToolDefinition`  
+4. `src/tools/registry.ts` — добавить factory в `toolFactories`  
+
+`server.ts` / `register.ts` править не нужно — регистрация централизована.

package/dist/constants.d.ts

@@ -0,0 +1,3 @@
+export declare const API_BASE_URL = "https://api.otask.ru";
+export declare const CHARACTER_LIMIT = 25000;
+//# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY,yBAAyB,CAAC;AACnD,eAAO,MAAM,eAAe,QAAS,CAAC"}

package/dist/constants.js

@@ -0,0 +1,3 @@
+export const API_BASE_URL = "https://api.otask.ru";
+export const CHARACTER_LIMIT = 25_000;
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,YAAY,GAAG,sBAAsB,CAAC;AACnD,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC"}

package/dist/docs/parser.d.ts

@@ -0,0 +1,3 @@
+import type { DocsCatalog } from "./types.ts";
+export declare function parseOtaskDocsHtml(html: string): DocsCatalog;
+//# sourceMappingURL=parser.d.ts.map

package/dist/docs/parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../../src/docs/parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,WAAW,EAIZ,MAAM,YAAY,CAAC;AAsIpB,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CA0B5D"}

package/dist/docs/parser.js

@@ -0,0 +1,123 @@
+const METHODS = new Set(["GET", "POST", "PUT", "PATCH", "DELETE"]);
+function stripTags(html) {
+    return html
+        .replace(/<script[\s\S]*?<\/script>/gi, " ")
+        .replace(/<style[\s\S]*?<\/style>/gi, " ")
+        .replace(/<[^>]+>/g, " ")
+        .replace(/&nbsp;/g, " ")
+        .replace(/&amp;/g, "&")
+        .replace(/&lt;/g, "<")
+        .replace(/&gt;/g, ">")
+        .replace(/&quot;/g, '"')
+        .replace(/&#39;/g, "'")
+        .replace(/\s+/g, " ")
+        .trim();
+}
+function parseSidebar(html) {
+    const scopes = [];
+    const parts = html.split(/(?=<li[^>]*class="[^"]*sidebar__menu-item[^"]*")/i);
+    for (const part of parts) {
+        if (!/sidebar__menu-item/i.test(part))
+            continue;
+        const scopeMatch = part.match(/href=["']#([^"']+)["'][^>]*class=["'][^"']*sidebar__menu-link[^"']*["'][^>]*>[\s\S]*?<span[^>]*class=["'][^"']*sidebar__menu-link-name[^"']*["'][^>]*>([\s\S]*?)<\/span>/i);
+        if (!scopeMatch)
+            continue;
+        const id = scopeMatch[1];
+        const title = stripTags(scopeMatch[2]);
+        const endpointIds = [];
+        const endpointTitles = new Map();
+        const subRe = /href=["']#([^"']+)["'][^>]*class=["'][^"']*sidebar__submenu-link[^"']*["'][^>]*>([\s\S]*?)<\/a>/gi;
+        let sm;
+        while ((sm = subRe.exec(part)) !== null) {
+            const epId = sm[1];
+            if (epId === id)
+                continue;
+            endpointIds.push(epId);
+            endpointTitles.set(epId, stripTags(sm[2]));
+        }
+        scopes.push({ id, title, endpointIds, endpointTitles });
+    }
+    return scopes;
+}
+function findIdIndex(html, id) {
+    const patterns = [`id="${id}"`, `id='${id}'`];
+    let best = -1;
+    for (const p of patterns) {
+        const idx = html.indexOf(p);
+        if (idx !== -1 && (best === -1 || idx < best))
+            best = idx;
+    }
+    return best;
+}
+function sliceForEndpoint(html, endpointId, allEndpointIds) {
+    const start = findIdIndex(html, endpointId);
+    if (start === -1)
+        return "";
+    let end = html.length;
+    for (const otherId of allEndpointIds) {
+        if (otherId === endpointId)
+            continue;
+        const idx = findIdIndex(html, otherId);
+        if (idx > start && idx < end)
+            end = idx;
+    }
+    return html.slice(start, end);
+}
+function parseEndpointSlice(slice, id, sidebarTitle) {
+    if (!slice)
+        return null;
+    const text = stripTags(slice);
+    const methodMatch = text.match(/\b(GET|POST|PUT|PATCH|DELETE)\b/);
+    const method = methodMatch?.[1] ?? "GET";
+    if (!METHODS.has(method))
+        return null;
+    const pathMatch = text.match(/\/api\/v1\/[^\s<"]+/);
+    const path = pathMatch?.[0]?.replace(/[.,;)]+$/, "") ?? "";
+    const authRequired = /Требуется аутентификация/i.test(text) ||
+        /required authentication/i.test(text);
+    let title = sidebarTitle ?? "";
+    if (!title) {
+        const escaped = id.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+        const hMatch = slice.match(new RegExp(`id=["']${escaped}["'][^>]*>([\\s\\S]*?)<\\/h[1-6]>`, "i"));
+        if (hMatch)
+            title = stripTags(hMatch[1]);
+    }
+    const pathParams = [];
+    for (const m of path.matchAll(/\{([^}]+)\}/g)) {
+        pathParams.push({ name: m[1], required: true });
+    }
+    return {
+        id,
+        title,
+        method,
+        path,
+        authRequired,
+        pathParams,
+        queryParams: [],
+        bodyParams: [],
+        docsAnchor: `#${id}`,
+    };
+}
+export function parseOtaskDocsHtml(html) {
+    const sidebarScopes = parseSidebar(html);
+    const allEndpointIds = sidebarScopes.flatMap((s) => s.endpointIds);
+    const scopes = sidebarScopes.map((s) => {
+        const endpoints = [];
+        for (const epId of s.endpointIds) {
+            const slice = sliceForEndpoint(html, epId, allEndpointIds);
+            const record = parseEndpointSlice(slice, epId, s.endpointTitles.get(epId));
+            if (record)
+                endpoints.push(record);
+        }
+        return {
+            id: s.id,
+            title: s.title,
+            endpoints,
+        };
+    });
+    return {
+        generatedAt: new Date().toISOString(),
+        scopes,
+    };
+}
+//# sourceMappingURL=parser.js.map

package/dist/docs/parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.js","sourceRoot":"","sources":["../../src/docs/parser.ts"],"names":[],"mappings":"AAOA,MAAM,OAAO,GAAG,IAAI,GAAG,CAAa,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAS/E,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI;SACR,OAAO,CAAC,6BAA6B,EAAE,GAAG,CAAC;SAC3C,OAAO,CAAC,2BAA2B,EAAE,GAAG,CAAC;SACzC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;SACxB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CACtB,mDAAmD,CACpD,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAEhD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAC3B,2KAA2K,CAC5K,CAAC;QACF,IAAI,CAAC,UAAU;YAAE,SAAS;QAE1B,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,CAAC;QACxC,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;QAEjD,MAAM,KAAK,GACT,mGAAmG,CAAC;QACtG,IAAI,EAA0B,CAAC;QAC/B,OAAO,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAE,CAAC;YACpB,IAAI,IAAI,KAAK,EAAE;gBAAE,SAAS;YAC1B,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,EAAU;IAC3C,MAAM,QAAQ,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC9C,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC;YAAE,IAAI,GAAG,GAAG,CAAC;IAC5D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CACvB,IAAY,EACZ,UAAkB,EAClB,cAAwB;IAExB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC5C,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAE5B,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;IACtB,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,IAAI,OAAO,KAAK,UAAU;YAAE,SAAS;QACrC,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACvC,IAAI,GAAG,GAAG,KAAK,IAAI,GAAG,GAAG,GAAG;YAAE,GAAG,GAAG,GAAG,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAa,EACb,EAAU,EACV,YAAqB;IAErB,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAClE,MAAM,MAAM,GAAI,WAAW,EAAE,CAAC,CAAC,CAA4B,IAAI,KAAK,CAAC;IACrE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IAE3D,MAAM,YAAY,GAChB,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;QACtC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAExC,IAAI,KAAK,GAAG,YAAY,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CACxB,IAAI,MAAM,CAAC,UAAU,OAAO,mCAAmC,EAAE,GAAG,CAAC,CACtE,CAAC;QACF,IAAI,MAAM;YAAE,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,UAAU,GAAiC,EAAE,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QAC9C,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,OAAO;QACL,EAAE;QACF,KAAK;QACL,MAAM;QACN,IAAI;QACJ,YAAY;QACZ,UAAU;QACV,WAAW,EAAE,EAAE;QACf,UAAU,EAAE,EAAE;QACd,UAAU,EAAE,IAAI,EAAE,EAAE;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,cAAc,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAEnE,MAAM,MAAM,GAAmB,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACrD,MAAM,SAAS,GAAqB,EAAE,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,kBAAkB,CAC/B,KAAK,EACL,IAAI,EACJ,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAC3B,CAAC;YACF,IAAI,MAAM;gBAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;QACD,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,SAAS;SACV,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/docs/types.d.ts

@@ -0,0 +1,29 @@
+export type HttpMethod = "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
+export interface DocParam {
+    name: string;
+    type?: string;
+    required?: boolean;
+    description?: string;
+}
+export interface EndpointRecord {
+    id: string;
+    title: string;
+    method: HttpMethod;
+    path: string;
+    authRequired: boolean;
+    pathParams: DocParam[];
+    queryParams: DocParam[];
+    bodyParams: DocParam[];
+    responseExample?: unknown;
+    docsAnchor: string;
+}
+export interface ScopeCatalog {
+    id: string;
+    title: string;
+    endpoints: EndpointRecord[];
+}
+export interface DocsCatalog {
+    generatedAt: string;
+    scopes: ScopeCatalog[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/docs/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/docs/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;AAErE,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,UAAU,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,OAAO,CAAC;IACtB,UAAU,EAAE,QAAQ,EAAE,CAAC;IACvB,WAAW,EAAE,QAAQ,EAAE,CAAC;IACxB,UAAU,EAAE,QAAQ,EAAE,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,cAAc,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,YAAY,EAAE,CAAC;CACxB"}

package/dist/docs/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/docs/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/docs/types.ts"],"names":[],"mappings":""}

package/dist/http-server.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=http-server.d.ts.map

package/dist/http-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-server.d.ts","sourceRoot":"","sources":["../src/http-server.ts"],"names":[],"mappings":""}

package/dist/http-server.js

@@ -0,0 +1,92 @@
+#!/usr/bin/env node
+import http from "node:http";
+import { API_BASE_URL } from "./constants.js";
+import { pickForwardRequestHeaders, pickForwardResponseHeaders } from "./proxy/headers.js";
+import { readBody } from "./proxy/read-body.js";
+function getAuthToken() {
+    const token = process.env.AUTH_TOKEN?.trim();
+    if (!token) {
+        throw new Error("AUTH_TOKEN environment variable is required for HTTP proxy mode");
+    }
+    return token;
+}
+function getPort() {
+    const raw = process.env.PORT?.trim() || "3847";
+    const port = Number.parseInt(raw, 10);
+    if (!Number.isFinite(port) || port < 1 || port > 65535) {
+        throw new Error(`Invalid PORT: ${raw}`);
+    }
+    return port;
+}
+function extractBearerToken(req) {
+    const auth = req.headers.authorization;
+    if (!auth?.startsWith("Bearer ")) {
+        return undefined;
+    }
+    return auth.slice("Bearer ".length).trim();
+}
+function sendJson(res, status, body) {
+    res.writeHead(status, { "Content-Type": "application/json" });
+    res.end(JSON.stringify(body));
+}
+async function handleRequest(req, res, authToken) {
+    const method = req.method ?? "GET";
+    const requestUrl = new URL(req.url ?? "/", `http://${req.headers.host ?? "localhost"}`);
+    if (requestUrl.pathname === "/health") {
+        sendJson(res, 200, { ok: true });
+        return;
+    }
+    if (!requestUrl.pathname.startsWith("/api/")) {
+        sendJson(res, 404, {
+            error: "Not found",
+            hint: "Proxy only forwards /api/* to O!task API",
+        });
+        return;
+    }
+    const clientToken = extractBearerToken(req);
+    if (!clientToken || clientToken !== authToken) {
+        sendJson(res, 401, {
+            error: "Unauthorized",
+            hint: "Send Authorization: Bearer <AUTH_TOKEN>",
+        });
+        return;
+    }
+    const upstreamUrl = `${API_BASE_URL}${requestUrl.pathname}${requestUrl.search}`;
+    const forwardHeaders = pickForwardRequestHeaders(req.headers);
+    forwardHeaders.Authorization = `Bearer ${authToken}`;
+    const body = await readBody(req);
+    const upstream = await fetch(upstreamUrl, {
+        method,
+        headers: forwardHeaders,
+        body,
+    });
+    const responseHeaders = pickForwardResponseHeaders(upstream.headers);
+    res.writeHead(upstream.status, responseHeaders);
+    if (method === "HEAD") {
+        res.end();
+        return;
+    }
+    const responseBody = Buffer.from(await upstream.arrayBuffer());
+    res.end(responseBody);
+}
+function main() {
+    const authToken = getAuthToken();
+    const port = getPort();
+    const server = http.createServer((req, res) => {
+        handleRequest(req, res, authToken).catch((error) => {
+            const message = error instanceof Error ? error.message : String(error);
+            if (!res.headersSent) {
+                sendJson(res, 502, { error: "Upstream proxy error", message });
+                return;
+            }
+            res.end();
+            console.error("Proxy error after headers sent:", message);
+        });
+    });
+    server.listen(port, () => {
+        console.error(`O!task HTTP proxy listening on http://localhost:${port}`);
+        console.error(`Forwarding /api/* -> ${API_BASE_URL}/api/*`);
+    });
+}
+main();
+//# sourceMappingURL=http-server.js.map

package/dist/http-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-server.js","sourceRoot":"","sources":["../src/http-server.ts"],"names":[],"mappings":";AACA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAC3F,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD,SAAS,YAAY;IACnB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;IAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO;IACd,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAoB;IAC9C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;IACvC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACjC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IAClE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,GAAoB,EACpB,GAAmB,EACnB,SAAiB;IAEjB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;IACnC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;IAExF,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACtC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACjB,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,0CAA0C;SACjD,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,WAAW,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACjB,KAAK,EAAE,cAAc;YACrB,IAAI,EAAE,yCAAyC;SAChD,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,GAAG,YAAY,GAAG,UAAU,CAAC,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;IAChF,MAAM,cAAc,GAAG,yBAAyB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9D,cAAc,CAAC,aAAa,GAAG,UAAU,SAAS,EAAE,CAAC;IAErD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IAEjC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,cAAc;QACvB,IAAI;KACL,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,0BAA0B,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrE,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAEhD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/D,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,IAAI;IACX,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IAEvB,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACjD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC/D,OAAO;YACT,CAAC;YACD,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,OAAO,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;QACvB,OAAO,CAAC,KAAK,CAAC,mDAAmD,IAAI,EAAE,CAAC,CAAC;QACzE,OAAO,CAAC,KAAK,CAAC,wBAAwB,YAAY,QAAQ,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,EAAE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,23 @@
+#!/usr/bin/env node
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { createEnvAuthResolver, validateStdioAuthConfig } from "./services/auth.js";
+import { projectGuardFromEnv } from "./services/project-guard.js";
+import { createMcpServer } from "./server.js";
+async function main() {
+    try {
+        validateStdioAuthConfig();
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        console.error(`ERROR: ${message}`);
+        process.exit(1);
+    }
+    const server = createMcpServer(createEnvAuthResolver(), projectGuardFromEnv());
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+}
+main().catch((error) => {
+    console.error("Server error:", error);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,KAAK,UAAU,IAAI;IACjB,IAAI,CAAC;QACH,uBAAuB,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,CAAC,KAAK,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,eAAe,CAC5B,qBAAqB,EAAE,EACvB,mBAAmB,EAAE,CACtB,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/mcp-http.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=mcp-http.d.ts.map

package/dist/mcp-http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-http.d.ts","sourceRoot":"","sources":["../src/mcp-http.ts"],"names":[],"mappings":""}

package/dist/mcp-http.js

@@ -0,0 +1,98 @@
+#!/usr/bin/env node
+import http from "node:http";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { createMcpServer } from "./server.js";
+import { authorizeHttpMcpRequest, createEnvAuthResolver, createPassthroughAuthResolver, extractBearerToken, extractProjectAllowListHeader, getHttpAuthMode, validateHttpAuthConfig, } from "./services/auth.js";
+import { projectGuardMode, resolveHttpProjectGuard, } from "./services/project-guard.js";
+function getPort() {
+    const raw = process.env.PORT?.trim() || "3847";
+    const port = Number.parseInt(raw, 10);
+    if (!Number.isFinite(port) || port < 1 || port > 65535) {
+        throw new Error(`Invalid PORT: ${raw}`);
+    }
+    return port;
+}
+function sendJson(res, status, body) {
+    res.writeHead(status, { "Content-Type": "application/json" });
+    res.end(JSON.stringify(body));
+}
+async function handleMcpRequest(req, res) {
+    const clientBearer = extractBearerToken(req.headers.authorization);
+    const authResult = authorizeHttpMcpRequest(clientBearer);
+    if (!authResult.ok) {
+        sendJson(res, authResult.status, {
+            error: authResult.error,
+            hint: authResult.hint,
+        });
+        return;
+    }
+    const auth = authResult.otaskBearer
+        ? createPassthroughAuthResolver(authResult.otaskBearer)
+        : createEnvAuthResolver();
+    const authMode = getHttpAuthMode();
+    const headerRaw = extractProjectAllowListHeader(req.headers);
+    const guard = resolveHttpProjectGuard({
+        authMode,
+        env: process.env,
+        headerRaw,
+    });
+    const transport = new StreamableHTTPServerTransport({
+        sessionIdGenerator: undefined,
+        enableJsonResponse: true,
+    });
+    const server = createMcpServer(auth, guard);
+    res.on("close", () => {
+        void transport.close();
+    });
+    await server.connect(transport);
+    await transport.handleRequest(req, res);
+}
+async function handleRequest(req, res) {
+    const requestUrl = new URL(req.url ?? "/", `http://${req.headers.host ?? "localhost"}`);
+    if (requestUrl.pathname === "/health") {
+        const authMode = getHttpAuthMode();
+        const headerRaw = extractProjectAllowListHeader(req.headers);
+        const guard = resolveHttpProjectGuard({
+            authMode,
+            env: process.env,
+            headerRaw,
+        });
+        sendJson(res, 200, {
+            ok: true,
+            mode: "mcp-streamable-http",
+            authMode,
+            projectGuard: projectGuardMode(authMode, guard),
+        });
+        return;
+    }
+    if (requestUrl.pathname === "/mcp") {
+        await handleMcpRequest(req, res);
+        return;
+    }
+    sendJson(res, 404, {
+        error: "Not found",
+        hint: "MCP endpoint: POST/GET /mcp",
+    });
+}
+function main() {
+    validateHttpAuthConfig();
+    const port = getPort();
+    const host = process.env.HOST?.trim() || "0.0.0.0";
+    http
+        .createServer((req, res) => {
+        handleRequest(req, res).catch((error) => {
+            const message = error instanceof Error ? error.message : String(error);
+            if (!res.headersSent) {
+                sendJson(res, 500, { error: "MCP server error", message });
+                return;
+            }
+            res.end();
+            console.error("MCP HTTP error:", message);
+        });
+    })
+        .listen(port, host, () => {
+        console.error(`O!task MCP HTTP http://${host}:${port}/mcp [${getHttpAuthMode()}]`);
+    });
+}
+main();
+//# sourceMappingURL=mcp-http.js.map

package/dist/mcp-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-http.js","sourceRoot":"","sources":["../src/mcp-http.ts"],"names":[],"mappings":";AACA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,6BAA6B,EAC7B,kBAAkB,EAClB,6BAA6B,EAC7B,eAAe,EACf,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,6BAA6B,CAAC;AAErC,SAAS,OAAO;IACd,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IAClE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,GAAoB,EAAE,GAAmB;IACvE,MAAM,YAAY,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,uBAAuB,CAAC,YAAY,CAAC,CAAC;IAEzD,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE;YAC/B,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,IAAI,EAAE,UAAU,CAAC,IAAI;SACtB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW;QACjC,CAAC,CAAC,6BAA6B,CAAC,UAAU,CAAC,WAAW,CAAC;QACvD,CAAC,CAAC,qBAAqB,EAAE,CAAC;IAE5B,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,6BAA6B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,uBAAuB,CAAC;QACpC,QAAQ;QACR,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,SAAS;KACV,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;QAClD,kBAAkB,EAAE,SAAS;QAC7B,kBAAkB,EAAE,IAAI;KACzB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAE5C,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACnB,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAoB,EAAE,GAAmB;IACpE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;IAExF,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,6BAA6B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,uBAAuB,CAAC;YACpC,QAAQ;YACR,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,SAAS;SACV,CAAC,CAAC;QACH,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACjB,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,qBAAqB;YAC3B,QAAQ;YACR,YAAY,EAAE,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC;SAChD,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,IAAI,UAAU,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QACnC,MAAM,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IAED,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;QACjB,KAAK,EAAE,WAAW;QAClB,IAAI,EAAE,6BAA6B;KACpC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,IAAI;IACX,sBAAsB,EAAE,CAAC;IAEzB,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAEnD,IAAI;SACD,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACzB,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACtC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC3D,OAAO;YACT,CAAC;YACD,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;SACD,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;QACvB,OAAO,CAAC,KAAK,CACX,0BAA0B,IAAI,IAAI,IAAI,SAAS,eAAe,EAAE,GAAG,CACpE,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC;AAED,IAAI,EAAE,CAAC"}

package/dist/proxy/headers.d.ts

@@ -0,0 +1,3 @@
+export declare function pickForwardRequestHeaders(headers: Record<string, string | string[] | undefined>): Record<string, string>;
+export declare function pickForwardResponseHeaders(headers: Headers): Record<string, string | string[]>;
+//# sourceMappingURL=headers.d.ts.map

package/dist/proxy/headers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"headers.d.ts","sourceRoot":"","sources":["../../src/proxy/headers.ts"],"names":[],"mappings":"AAWA,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GACrD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAgBxB;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,OAAO,GACf,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAWnC"}