@herbertgao/pi-extensions 2026.9.17 → 2026.9.18
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +14 -15
- package/node_modules/@herbertgao/pi-bark/package.json +2 -2
- package/node_modules/@herbertgao/pi-cc-extensions/README.en.md +4 -1
- package/node_modules/@herbertgao/pi-cc-extensions/README.md +4 -1
- package/node_modules/@herbertgao/pi-cc-extensions/package.json +75 -75
- package/node_modules/@herbertgao/pi-subagents/CHANGELOG.md +6 -0
- package/node_modules/@herbertgao/pi-subagents/package.json +7 -7
- package/node_modules/@herbertgao/resume-from/package.json +4 -2
- package/node_modules/@herbertgao/sol-pi/package.json +6 -6
- package/node_modules/@juicesharp/rpiv-ask-user-question/package.json +99 -99
- package/node_modules/@pi-plugins/fast-mode/package.json +1 -1
- package/node_modules/@tifan/pi-handoff/package.json +1 -1
- package/node_modules/@tifan/pi-handoff/src/index.ts +56 -26
- package/node_modules/@tifan/pi-mermaid-open/package.json +1 -1
- package/node_modules/@tifan/pi-preferred-thinking/package.json +1 -1
- package/node_modules/@tifan/pi-recap/package.json +1 -1
- package/node_modules/@tifan/pi-rename/package.json +1 -1
- package/node_modules/pi-antigravity/package.json +2 -2
- package/node_modules/pi-lens/package.json +158 -158
- package/node_modules/pi-multi-account/package.json +2 -2
- package/node_modules/pi-typesafe/README.md +1 -1
- package/node_modules/pi-typesafe/dist/auth.d.ts +9 -5
- package/node_modules/pi-typesafe/dist/auth.js +7 -3
- package/node_modules/pi-typesafe/dist/backends.d.ts +33 -3
- package/node_modules/pi-typesafe/dist/backends.js +95 -1
- package/node_modules/pi-typesafe/dist/client.d.ts +5 -5
- package/node_modules/pi-typesafe/dist/client.js +12 -9
- package/node_modules/pi-typesafe/dist/credentials.d.ts +14 -8
- package/node_modules/pi-typesafe/dist/credentials.js +10 -7
- package/node_modules/pi-typesafe/dist/errors.d.ts +2 -2
- package/node_modules/pi-typesafe/dist/index.d.ts +2 -2
- package/node_modules/pi-typesafe/dist/index.js +1 -1
- package/node_modules/pi-typesafe/dist/login.d.ts +2 -2
- package/node_modules/pi-typesafe/dist/login.js +2 -2
- package/node_modules/pi-typesafe/package.json +5 -5
- package/node_modules/pi-web-access/package.json +2 -2
- package/node_modules/remote-pi/package.json +5 -1
- package/package.json +16 -28
- package/node_modules/pi-mcp-adapter/CHANGELOG.md +0 -1013
- package/node_modules/pi-mcp-adapter/LICENSE +0 -21
- package/node_modules/pi-mcp-adapter/OAUTH.md +0 -369
- package/node_modules/pi-mcp-adapter/README.md +0 -1021
- package/node_modules/pi-mcp-adapter/abort.ts +0 -34
- package/node_modules/pi-mcp-adapter/agent-dir.ts +0 -68
- package/node_modules/pi-mcp-adapter/agent-plugin-loader.ts +0 -416
- package/node_modules/pi-mcp-adapter/agent-plugin-provenance.ts +0 -36
- package/node_modules/pi-mcp-adapter/app-bridge.bundle.js +0 -67
- package/node_modules/pi-mcp-adapter/banner.png +0 -0
- package/node_modules/pi-mcp-adapter/bearer-command-resolver.ts +0 -193
- package/node_modules/pi-mcp-adapter/claude-plugin-loader.ts +0 -365
- package/node_modules/pi-mcp-adapter/cli.js +0 -454
- package/node_modules/pi-mcp-adapter/commands.ts +0 -861
- package/node_modules/pi-mcp-adapter/config.ts +0 -1565
- package/node_modules/pi-mcp-adapter/consent-manager.ts +0 -95
- package/node_modules/pi-mcp-adapter/direct-tool-surface.ts +0 -244
- package/node_modules/pi-mcp-adapter/direct-tools.ts +0 -428
- package/node_modules/pi-mcp-adapter/dist/abort.d.ts +0 -2
- package/node_modules/pi-mcp-adapter/dist/abort.js +0 -36
- package/node_modules/pi-mcp-adapter/dist/abort.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/agent-dir.d.ts +0 -10
- package/node_modules/pi-mcp-adapter/dist/agent-dir.js +0 -63
- package/node_modules/pi-mcp-adapter/dist/agent-dir.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/agent-plugin-loader.d.ts +0 -8
- package/node_modules/pi-mcp-adapter/dist/agent-plugin-loader.js +0 -398
- package/node_modules/pi-mcp-adapter/dist/agent-plugin-loader.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/agent-plugin-provenance.d.ts +0 -1
- package/node_modules/pi-mcp-adapter/dist/agent-plugin-provenance.js +0 -31
- package/node_modules/pi-mcp-adapter/dist/agent-plugin-provenance.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/bearer-command-resolver.d.ts +0 -6
- package/node_modules/pi-mcp-adapter/dist/bearer-command-resolver.js +0 -194
- package/node_modules/pi-mcp-adapter/dist/bearer-command-resolver.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/claude-plugin-loader.d.ts +0 -9
- package/node_modules/pi-mcp-adapter/dist/claude-plugin-loader.js +0 -362
- package/node_modules/pi-mcp-adapter/dist/claude-plugin-loader.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/config.d.ts +0 -134
- package/node_modules/pi-mcp-adapter/dist/config.js +0 -1361
- package/node_modules/pi-mcp-adapter/dist/config.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/consent-manager.d.ts +0 -18
- package/node_modules/pi-mcp-adapter/dist/consent-manager.js +0 -88
- package/node_modules/pi-mcp-adapter/dist/consent-manager.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/elicitation-handler.d.ts +0 -17
- package/node_modules/pi-mcp-adapter/dist/elicitation-handler.js +0 -316
- package/node_modules/pi-mcp-adapter/dist/elicitation-handler.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/errors.d.ts +0 -131
- package/node_modules/pi-mcp-adapter/dist/errors.js +0 -278
- package/node_modules/pi-mcp-adapter/dist/errors.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/http-ca.d.ts +0 -8
- package/node_modules/pi-mcp-adapter/dist/http-ca.js +0 -88
- package/node_modules/pi-mcp-adapter/dist/http-ca.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/jev-client.d.ts +0 -14
- package/node_modules/pi-mcp-adapter/dist/jev-client.js +0 -367
- package/node_modules/pi-mcp-adapter/dist/jev-client.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/jev-contracts.d.ts +0 -77
- package/node_modules/pi-mcp-adapter/dist/jev-contracts.js +0 -2
- package/node_modules/pi-mcp-adapter/dist/jev-contracts.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/jev-key-store.d.ts +0 -51
- package/node_modules/pi-mcp-adapter/dist/jev-key-store.js +0 -205
- package/node_modules/pi-mcp-adapter/dist/jev-key-store.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/json-schema-validator.d.ts +0 -2
- package/node_modules/pi-mcp-adapter/dist/json-schema-validator.js +0 -68
- package/node_modules/pi-mcp-adapter/dist/json-schema-validator.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/lifecycle.d.ts +0 -56
- package/node_modules/pi-mcp-adapter/dist/lifecycle.js +0 -410
- package/node_modules/pi-mcp-adapter/dist/lifecycle.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/logger.d.ts +0 -51
- package/node_modules/pi-mcp-adapter/dist/logger.js +0 -131
- package/node_modules/pi-mcp-adapter/dist/logger.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/mcp-auth-fetch.d.ts +0 -26
- package/node_modules/pi-mcp-adapter/dist/mcp-auth-fetch.js +0 -103
- package/node_modules/pi-mcp-adapter/dist/mcp-auth-fetch.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/mcp-auth-flow.d.ts +0 -118
- package/node_modules/pi-mcp-adapter/dist/mcp-auth-flow.js +0 -1097
- package/node_modules/pi-mcp-adapter/dist/mcp-auth-flow.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/mcp-auth.d.ts +0 -170
- package/node_modules/pi-mcp-adapter/dist/mcp-auth.js +0 -1142
- package/node_modules/pi-mcp-adapter/dist/mcp-auth.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/mcp-bearer-store.d.ts +0 -24
- package/node_modules/pi-mcp-adapter/dist/mcp-bearer-store.js +0 -203
- package/node_modules/pi-mcp-adapter/dist/mcp-bearer-store.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/mcp-callback-server.d.ts +0 -53
- package/node_modules/pi-mcp-adapter/dist/mcp-callback-server.js +0 -441
- package/node_modules/pi-mcp-adapter/dist/mcp-callback-server.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/mcp-oauth-provider.d.ts +0 -148
- package/node_modules/pi-mcp-adapter/dist/mcp-oauth-provider.js +0 -689
- package/node_modules/pi-mcp-adapter/dist/mcp-oauth-provider.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/mcp-probe.d.ts +0 -6
- package/node_modules/pi-mcp-adapter/dist/mcp-probe.js +0 -166
- package/node_modules/pi-mcp-adapter/dist/mcp-probe.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/mcp-tasks.d.ts +0 -102
- package/node_modules/pi-mcp-adapter/dist/mcp-tasks.js +0 -369
- package/node_modules/pi-mcp-adapter/dist/mcp-tasks.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/mcp-trace.d.ts +0 -95
- package/node_modules/pi-mcp-adapter/dist/mcp-trace.js +0 -242
- package/node_modules/pi-mcp-adapter/dist/mcp-trace.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/metadata-cache.d.ts +0 -19
- package/node_modules/pi-mcp-adapter/dist/metadata-cache.js +0 -301
- package/node_modules/pi-mcp-adapter/dist/metadata-cache.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/npx-resolver.d.ts +0 -6
- package/node_modules/pi-mcp-adapter/dist/npx-resolver.js +0 -505
- package/node_modules/pi-mcp-adapter/dist/npx-resolver.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/package-mcp-loader.d.ts +0 -2
- package/node_modules/pi-mcp-adapter/dist/package-mcp-loader.js +0 -144
- package/node_modules/pi-mcp-adapter/dist/package-mcp-loader.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/request-headers-command.d.ts +0 -10
- package/node_modules/pi-mcp-adapter/dist/request-headers-command.js +0 -312
- package/node_modules/pi-mcp-adapter/dist/request-headers-command.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/resource-tools.d.ts +0 -1
- package/node_modules/pi-mcp-adapter/dist/resource-tools.js +0 -15
- package/node_modules/pi-mcp-adapter/dist/resource-tools.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/runtime-owner.d.ts +0 -13
- package/node_modules/pi-mcp-adapter/dist/runtime-owner.js +0 -97
- package/node_modules/pi-mcp-adapter/dist/runtime-owner.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/sampling-handler.d.ts +0 -17
- package/node_modules/pi-mcp-adapter/dist/sampling-handler.js +0 -203
- package/node_modules/pi-mcp-adapter/dist/sampling-handler.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/secure-keyring.d.ts +0 -11
- package/node_modules/pi-mcp-adapter/dist/secure-keyring.js +0 -172
- package/node_modules/pi-mcp-adapter/dist/secure-keyring.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/server-manager.d.ts +0 -157
- package/node_modules/pi-mcp-adapter/dist/server-manager.js +0 -1745
- package/node_modules/pi-mcp-adapter/dist/server-manager.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/session-approvals.d.ts +0 -34
- package/node_modules/pi-mcp-adapter/dist/session-approvals.js +0 -140
- package/node_modules/pi-mcp-adapter/dist/session-approvals.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/session-recovery.d.ts +0 -26
- package/node_modules/pi-mcp-adapter/dist/session-recovery.js +0 -142
- package/node_modules/pi-mcp-adapter/dist/session-recovery.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/state.d.ts +0 -73
- package/node_modules/pi-mcp-adapter/dist/state.js +0 -2
- package/node_modules/pi-mcp-adapter/dist/state.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/types.d.ts +0 -642
- package/node_modules/pi-mcp-adapter/dist/types.js +0 -331
- package/node_modules/pi-mcp-adapter/dist/types.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/ui-app-bridge-helpers.d.ts +0 -6
- package/node_modules/pi-mcp-adapter/dist/ui-app-bridge-helpers.js +0 -37
- package/node_modules/pi-mcp-adapter/dist/ui-app-bridge-helpers.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/ui-resource-handler.d.ts +0 -17
- package/node_modules/pi-mcp-adapter/dist/ui-resource-handler.js +0 -219
- package/node_modules/pi-mcp-adapter/dist/ui-resource-handler.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/ui-stream-types.d.ts +0 -104
- package/node_modules/pi-mcp-adapter/dist/ui-stream-types.js +0 -59
- package/node_modules/pi-mcp-adapter/dist/ui-stream-types.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/ui-tool-visibility.d.ts +0 -4
- package/node_modules/pi-mcp-adapter/dist/ui-tool-visibility.js +0 -27
- package/node_modules/pi-mcp-adapter/dist/ui-tool-visibility.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/unix-socket-transport.d.ts +0 -15
- package/node_modules/pi-mcp-adapter/dist/unix-socket-transport.js +0 -85
- package/node_modules/pi-mcp-adapter/dist/unix-socket-transport.js.map +0 -1
- package/node_modules/pi-mcp-adapter/dist/utils.d.ts +0 -41
- package/node_modules/pi-mcp-adapter/dist/utils.js +0 -417
- package/node_modules/pi-mcp-adapter/dist/utils.js.map +0 -1
- package/node_modules/pi-mcp-adapter/elicitation-handler.ts +0 -358
- package/node_modules/pi-mcp-adapter/error-signal.ts +0 -32
- package/node_modules/pi-mcp-adapter/errors.ts +0 -364
- package/node_modules/pi-mcp-adapter/examples/jev-accessibility-loop.mjs +0 -85
- package/node_modules/pi-mcp-adapter/examples/jev-semantic-filter.mjs +0 -34
- package/node_modules/pi-mcp-adapter/failure-backoff.ts +0 -23
- package/node_modules/pi-mcp-adapter/glimpse-ui.ts +0 -80
- package/node_modules/pi-mcp-adapter/host-html-template.ts +0 -515
- package/node_modules/pi-mcp-adapter/http-ca.ts +0 -84
- package/node_modules/pi-mcp-adapter/index.ts +0 -2106
- package/node_modules/pi-mcp-adapter/init.ts +0 -721
- package/node_modules/pi-mcp-adapter/jev-client.ts +0 -300
- package/node_modules/pi-mcp-adapter/jev-contracts.ts +0 -53
- package/node_modules/pi-mcp-adapter/jev-key-store.ts +0 -192
- package/node_modules/pi-mcp-adapter/json-schema-validator.ts +0 -83
- package/node_modules/pi-mcp-adapter/lazy-loader.ts +0 -7
- package/node_modules/pi-mcp-adapter/lifecycle.ts +0 -457
- package/node_modules/pi-mcp-adapter/logger.ts +0 -169
- package/node_modules/pi-mcp-adapter/mcp-auth-fetch.ts +0 -113
- package/node_modules/pi-mcp-adapter/mcp-auth-flow.ts +0 -1296
- package/node_modules/pi-mcp-adapter/mcp-auth.ts +0 -1287
- package/node_modules/pi-mcp-adapter/mcp-bearer-store.ts +0 -250
- package/node_modules/pi-mcp-adapter/mcp-callback-server.ts +0 -534
- package/node_modules/pi-mcp-adapter/mcp-code.ts +0 -495
- package/node_modules/pi-mcp-adapter/mcp-install.ts +0 -60
- package/node_modules/pi-mcp-adapter/mcp-keyring-helper.cjs +0 -89
- package/node_modules/pi-mcp-adapter/mcp-oauth-provider.ts +0 -819
- package/node_modules/pi-mcp-adapter/mcp-output-guard.ts +0 -511
- package/node_modules/pi-mcp-adapter/mcp-panel-theme.ts +0 -104
- package/node_modules/pi-mcp-adapter/mcp-panel.ts +0 -1099
- package/node_modules/pi-mcp-adapter/mcp-probe.ts +0 -201
- package/node_modules/pi-mcp-adapter/mcp-references.ts +0 -373
- package/node_modules/pi-mcp-adapter/mcp-script-worker.mjs +0 -137
- package/node_modules/pi-mcp-adapter/mcp-setup-panel.ts +0 -747
- package/node_modules/pi-mcp-adapter/mcp-status.ts +0 -105
- package/node_modules/pi-mcp-adapter/mcp-tasks.ts +0 -467
- package/node_modules/pi-mcp-adapter/mcp-trace.ts +0 -306
- package/node_modules/pi-mcp-adapter/metadata-cache.ts +0 -362
- package/node_modules/pi-mcp-adapter/namespace-tools.ts +0 -334
- package/node_modules/pi-mcp-adapter/npx-resolver.ts +0 -543
- package/node_modules/pi-mcp-adapter/oauth-handler.ts +0 -30
- package/node_modules/pi-mcp-adapter/oauth.ts +0 -52
- package/node_modules/pi-mcp-adapter/onboarding-state.ts +0 -76
- package/node_modules/pi-mcp-adapter/package-mcp-loader.ts +0 -156
- package/node_modules/pi-mcp-adapter/package.json +0 -219
- package/node_modules/pi-mcp-adapter/panel-keys.ts +0 -53
- package/node_modules/pi-mcp-adapter/prompts.ts +0 -385
- package/node_modules/pi-mcp-adapter/proxy-modes.ts +0 -1735
- package/node_modules/pi-mcp-adapter/request-headers-command.ts +0 -333
- package/node_modules/pi-mcp-adapter/resource-tools.ts +0 -17
- package/node_modules/pi-mcp-adapter/runtime-owner.ts +0 -106
- package/node_modules/pi-mcp-adapter/sampling-handler.ts +0 -261
- package/node_modules/pi-mcp-adapter/sandbox-proxy-template.ts +0 -144
- package/node_modules/pi-mcp-adapter/search-ranking.ts +0 -309
- package/node_modules/pi-mcp-adapter/secure-keyring.ts +0 -170
- package/node_modules/pi-mcp-adapter/semantic-search.ts +0 -186
- package/node_modules/pi-mcp-adapter/server-manager.ts +0 -2088
- package/node_modules/pi-mcp-adapter/session-approvals.ts +0 -201
- package/node_modules/pi-mcp-adapter/session-recovery.ts +0 -158
- package/node_modules/pi-mcp-adapter/skills/mcp-scripting/SKILL.md +0 -49
- package/node_modules/pi-mcp-adapter/state.ts +0 -71
- package/node_modules/pi-mcp-adapter/tool-approval.ts +0 -205
- package/node_modules/pi-mcp-adapter/tool-metadata.ts +0 -302
- package/node_modules/pi-mcp-adapter/tool-registrar.ts +0 -255
- package/node_modules/pi-mcp-adapter/tool-result-renderer.ts +0 -573
- package/node_modules/pi-mcp-adapter/ts-shape.ts +0 -149
- package/node_modules/pi-mcp-adapter/types.ts +0 -1120
- package/node_modules/pi-mcp-adapter/ui-app-bridge-helpers.ts +0 -40
- package/node_modules/pi-mcp-adapter/ui-resource-handler.ts +0 -266
- package/node_modules/pi-mcp-adapter/ui-server.ts +0 -993
- package/node_modules/pi-mcp-adapter/ui-session.ts +0 -624
- package/node_modules/pi-mcp-adapter/ui-stream-types.ts +0 -89
- package/node_modules/pi-mcp-adapter/ui-tool-visibility.ts +0 -25
- package/node_modules/pi-mcp-adapter/unix-socket-transport.ts +0 -85
- package/node_modules/pi-mcp-adapter/utils.ts +0 -464
|
@@ -1,205 +0,0 @@
|
|
|
1
|
-
import { createSecureKeyringStore } from "./secure-keyring.js";
|
|
2
|
-
/** The Jev decisions endpoint used when `SYSTEMONE_ENDPOINT` is not set. */
|
|
3
|
-
export const JEV_DEFAULT_ENDPOINT = "https://api.typesafe.ai/v1/systemone";
|
|
4
|
-
const SYSTEMONE_ENDPOINT_ENV = "SYSTEMONE_ENDPOINT";
|
|
5
|
-
const SYSTEMONE_API_KEY_ENV = "SYSTEMONE_API_KEY";
|
|
6
|
-
/** TypeSafe-issued key: honored only for the default endpoint and never sent anywhere else. */
|
|
7
|
-
const LEGACY_TYPESAFE_API_KEY_ENV = "TYPESAFE_API_KEY";
|
|
8
|
-
/** Origin recorded in version 1 credential records. */
|
|
9
|
-
export const TYPESAFE_API_ORIGIN = "https://api.typesafe.ai";
|
|
10
|
-
/** Version 1 credential account, still read for the default endpoint. */
|
|
11
|
-
export const JEV_KEYRING_ACCOUNT = "typesafe@sha256(https://api.typesafe.ai)";
|
|
12
|
-
export const JEV_KEYRING_SERVICE = "pi-mcp-adapter.service-key";
|
|
13
|
-
const MAX_ENDPOINT_LENGTH = 512;
|
|
14
|
-
/** The path `@typesafe-ai/sdk` appends to whatever base URL it is given. */
|
|
15
|
-
export const JEV_SDK_PATH = "/v1/systemone";
|
|
16
|
-
export class JevCredentialStoreError extends Error {
|
|
17
|
-
operation;
|
|
18
|
-
code = "JEV_CREDENTIAL_STORE_UNAVAILABLE";
|
|
19
|
-
constructor(operation, cause) {
|
|
20
|
-
super(`Jev API key secure credential store unavailable during ${operation}. Configure or unlock the OS credential store and retry.`, { cause });
|
|
21
|
-
this.operation = operation;
|
|
22
|
-
this.name = "JevCredentialStoreError";
|
|
23
|
-
}
|
|
24
|
-
}
|
|
25
|
-
function validateApiKey(value) {
|
|
26
|
-
if (typeof value !== "string" || value.trim().length === 0 || /[\u0000-\u001f\u007f]/.test(value)) {
|
|
27
|
-
throw new Error("Jev API key must be a non-empty string without control characters");
|
|
28
|
-
}
|
|
29
|
-
return value;
|
|
30
|
-
}
|
|
31
|
-
/**
|
|
32
|
-
* Constrains the operator-supplied endpoint to an absolute HTTPS URL without credentials, query, or fragment, so
|
|
33
|
-
* the pinned fetch can match it exactly and a stray value cannot redirect requests or smuggle a query string.
|
|
34
|
-
*/
|
|
35
|
-
function parseEndpoint(raw, label) {
|
|
36
|
-
if (typeof raw !== "string" || raw.trim().length === 0)
|
|
37
|
-
throw new Error(`${label} must be a non-empty URL`);
|
|
38
|
-
if (raw.length > MAX_ENDPOINT_LENGTH)
|
|
39
|
-
throw new Error(`${label} must be at most ${MAX_ENDPOINT_LENGTH} characters`);
|
|
40
|
-
if (/[\u0000-\u001f\u007f\s]/.test(raw))
|
|
41
|
-
throw new Error(`${label} must not contain whitespace or control characters`);
|
|
42
|
-
let url;
|
|
43
|
-
try {
|
|
44
|
-
url = new URL(raw);
|
|
45
|
-
}
|
|
46
|
-
catch {
|
|
47
|
-
throw new Error(`${label} must be an absolute URL`);
|
|
48
|
-
}
|
|
49
|
-
if (url.protocol !== "https:")
|
|
50
|
-
throw new Error(`${label} must use https`);
|
|
51
|
-
if (url.username !== "" || url.password !== "")
|
|
52
|
-
throw new Error(`${label} must not embed credentials`);
|
|
53
|
-
if (url.search !== "")
|
|
54
|
-
throw new Error(`${label} must not include a query string`);
|
|
55
|
-
if (url.hash !== "")
|
|
56
|
-
throw new Error(`${label} must not include a fragment`);
|
|
57
|
-
if (url.pathname === "" || url.pathname === "/")
|
|
58
|
-
throw new Error(`${label} must include a path such as ${JEV_SDK_PATH}`);
|
|
59
|
-
return { href: `${url.origin}${url.pathname}`, origin: url.origin, path: url.pathname };
|
|
60
|
-
}
|
|
61
|
-
/**
|
|
62
|
-
* Resolves the Jev endpoint. An invalid `SYSTEMONE_ENDPOINT` resolves to `unavailable` instead of silently falling
|
|
63
|
-
* back to the default: sending an operator's judgment payload to a provider they did not ask for would be a data leak.
|
|
64
|
-
*/
|
|
65
|
-
export function resolveJevEndpoint(env = process.env) {
|
|
66
|
-
if (Object.hasOwn(env, SYSTEMONE_ENDPOINT_ENV)) {
|
|
67
|
-
try {
|
|
68
|
-
return { status: "resolved", source: "environment", endpoint: parseEndpoint(env[SYSTEMONE_ENDPOINT_ENV], SYSTEMONE_ENDPOINT_ENV) };
|
|
69
|
-
}
|
|
70
|
-
catch (error) {
|
|
71
|
-
return { status: "unavailable", message: error instanceof Error ? error.message : `${SYSTEMONE_ENDPOINT_ENV} is invalid.` };
|
|
72
|
-
}
|
|
73
|
-
}
|
|
74
|
-
return { status: "resolved", source: "default", endpoint: parseEndpoint(JEV_DEFAULT_ENDPOINT, "the default Jev endpoint") };
|
|
75
|
-
}
|
|
76
|
-
/** Keyring account for an endpoint, so keys for different providers coexist instead of overwriting each other. */
|
|
77
|
-
export function jevKeyringAccount(endpoint) {
|
|
78
|
-
return `systemone@sha256(${endpoint.href})`;
|
|
79
|
-
}
|
|
80
|
-
function store() {
|
|
81
|
-
return createSecureKeyringStore(JEV_KEYRING_SERVICE);
|
|
82
|
-
}
|
|
83
|
-
function requireEndpoint(endpoint) {
|
|
84
|
-
if (endpoint)
|
|
85
|
-
return endpoint;
|
|
86
|
-
const resolution = resolveJevEndpoint();
|
|
87
|
-
if (resolution.status === "unavailable")
|
|
88
|
-
throw new Error(resolution.message);
|
|
89
|
-
return resolution.endpoint;
|
|
90
|
-
}
|
|
91
|
-
/**
|
|
92
|
-
* Version 1 records were written before the endpoint was configurable, so they are accepted only for the default
|
|
93
|
-
* endpoint.
|
|
94
|
-
*/
|
|
95
|
-
function parseStoredKey(payload, endpoint) {
|
|
96
|
-
let value;
|
|
97
|
-
try {
|
|
98
|
-
value = JSON.parse(payload);
|
|
99
|
-
}
|
|
100
|
-
catch {
|
|
101
|
-
throw new Error("invalid record");
|
|
102
|
-
}
|
|
103
|
-
if (!value || typeof value !== "object" || Array.isArray(value))
|
|
104
|
-
throw new Error("invalid record");
|
|
105
|
-
const record = value;
|
|
106
|
-
const keys = Object.keys(record);
|
|
107
|
-
if (record.version === 2) {
|
|
108
|
-
if (keys.length !== 3 || !["version", "endpoint", "apiKey"].every(key => Object.hasOwn(record, key)))
|
|
109
|
-
throw new Error("invalid record fields");
|
|
110
|
-
if (record.endpoint !== endpoint.href)
|
|
111
|
-
throw new Error("invalid or mismatched record");
|
|
112
|
-
return validateApiKey(record.apiKey);
|
|
113
|
-
}
|
|
114
|
-
if (record.version === 1) {
|
|
115
|
-
if (keys.length !== 4 || !["version", "provider", "origin", "apiKey"].every(key => Object.hasOwn(record, key)))
|
|
116
|
-
throw new Error("invalid record fields");
|
|
117
|
-
if (record.provider !== "typesafe" || record.origin !== TYPESAFE_API_ORIGIN)
|
|
118
|
-
throw new Error("invalid or mismatched record");
|
|
119
|
-
if (endpoint.href !== JEV_DEFAULT_ENDPOINT)
|
|
120
|
-
throw new Error("invalid or mismatched record");
|
|
121
|
-
return validateApiKey(record.apiKey);
|
|
122
|
-
}
|
|
123
|
-
throw new Error("invalid record version");
|
|
124
|
-
}
|
|
125
|
-
function readStoredKey(secretStore, endpoint) {
|
|
126
|
-
try {
|
|
127
|
-
let payload = secretStore.read(jevKeyringAccount(endpoint));
|
|
128
|
-
if (payload === undefined && endpoint.href === JEV_DEFAULT_ENDPOINT)
|
|
129
|
-
payload = secretStore.read(JEV_KEYRING_ACCOUNT);
|
|
130
|
-
return payload === undefined ? undefined : parseStoredKey(payload, endpoint);
|
|
131
|
-
}
|
|
132
|
-
catch (error) {
|
|
133
|
-
throw new JevCredentialStoreError("read", error);
|
|
134
|
-
}
|
|
135
|
-
}
|
|
136
|
-
export function resolveJevCredential(env = process.env, endpoint, secretStore = store()) {
|
|
137
|
-
let target;
|
|
138
|
-
if (endpoint)
|
|
139
|
-
target = endpoint;
|
|
140
|
-
else {
|
|
141
|
-
const resolution = resolveJevEndpoint(env);
|
|
142
|
-
if (resolution.status === "unavailable")
|
|
143
|
-
return resolution;
|
|
144
|
-
target = resolution.endpoint;
|
|
145
|
-
}
|
|
146
|
-
if (Object.hasOwn(env, SYSTEMONE_API_KEY_ENV)) {
|
|
147
|
-
try {
|
|
148
|
-
return { status: "present", source: "environment", apiKey: validateApiKey(env[SYSTEMONE_API_KEY_ENV]) };
|
|
149
|
-
}
|
|
150
|
-
catch {
|
|
151
|
-
return { status: "unavailable", message: `${SYSTEMONE_API_KEY_ENV} is present but invalid.` };
|
|
152
|
-
}
|
|
153
|
-
}
|
|
154
|
-
const legacySet = Object.hasOwn(env, LEGACY_TYPESAFE_API_KEY_ENV);
|
|
155
|
-
if (legacySet && target.href === JEV_DEFAULT_ENDPOINT) {
|
|
156
|
-
try {
|
|
157
|
-
return { status: "present", source: "environment", apiKey: validateApiKey(env[LEGACY_TYPESAFE_API_KEY_ENV]) };
|
|
158
|
-
}
|
|
159
|
-
catch {
|
|
160
|
-
return { status: "unavailable", message: `${LEGACY_TYPESAFE_API_KEY_ENV} is present but invalid.` };
|
|
161
|
-
}
|
|
162
|
-
}
|
|
163
|
-
let stored;
|
|
164
|
-
try {
|
|
165
|
-
stored = readStoredKey(secretStore, target);
|
|
166
|
-
}
|
|
167
|
-
catch (error) {
|
|
168
|
-
if (!(error instanceof JevCredentialStoreError))
|
|
169
|
-
throw error;
|
|
170
|
-
return { status: "unavailable", message: error.message };
|
|
171
|
-
}
|
|
172
|
-
if (stored !== undefined)
|
|
173
|
-
return { status: "present", source: "keyring", apiKey: stored };
|
|
174
|
-
// A TypeSafe-issued credential is never sent to another endpoint, but it must not mask a credential stored for
|
|
175
|
-
// this endpoint either, so it is only reported once nothing for this endpoint resolves.
|
|
176
|
-
if (legacySet) {
|
|
177
|
-
return {
|
|
178
|
-
status: "unavailable",
|
|
179
|
-
message: `${LEGACY_TYPESAFE_API_KEY_ENV} is a TypeSafe credential and is not sent to ${target.href}; set ${SYSTEMONE_API_KEY_ENV} for that endpoint.`,
|
|
180
|
-
};
|
|
181
|
-
}
|
|
182
|
-
return { status: "missing" };
|
|
183
|
-
}
|
|
184
|
-
export function saveJevApiKey(apiKey, endpoint, secretStore = store()) {
|
|
185
|
-
const target = requireEndpoint(endpoint);
|
|
186
|
-
const record = { version: 2, endpoint: target.href, apiKey: validateApiKey(apiKey) };
|
|
187
|
-
try {
|
|
188
|
-
secretStore.write(jevKeyringAccount(target), JSON.stringify(record));
|
|
189
|
-
}
|
|
190
|
-
catch (error) {
|
|
191
|
-
throw new JevCredentialStoreError("write", error);
|
|
192
|
-
}
|
|
193
|
-
}
|
|
194
|
-
export function removeJevApiKey(endpoint, secretStore = store()) {
|
|
195
|
-
const target = requireEndpoint(endpoint);
|
|
196
|
-
try {
|
|
197
|
-
secretStore.remove(jevKeyringAccount(target));
|
|
198
|
-
if (target.href === JEV_DEFAULT_ENDPOINT)
|
|
199
|
-
secretStore.remove(JEV_KEYRING_ACCOUNT);
|
|
200
|
-
}
|
|
201
|
-
catch (error) {
|
|
202
|
-
throw new JevCredentialStoreError("remove", error);
|
|
203
|
-
}
|
|
204
|
-
}
|
|
205
|
-
//# sourceMappingURL=jev-key-store.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"jev-key-store.js","sourceRoot":"","sources":["../jev-key-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAA2B,MAAM,qBAAqB,CAAC;AAExF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,oBAAoB,GAAG,sCAAsC,CAAC;AAC3E,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AACpD,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AAClD,+FAA+F;AAC/F,MAAM,2BAA2B,GAAG,kBAAkB,CAAC;AACvD,uDAAuD;AACvD,MAAM,CAAC,MAAM,mBAAmB,GAAG,yBAAyB,CAAC;AAC7D,yEAAyE;AACzE,MAAM,CAAC,MAAM,mBAAmB,GAAG,0CAA0C,CAAC;AAC9E,MAAM,CAAC,MAAM,mBAAmB,GAAG,4BAA4B,CAAC;AAEhE,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,4EAA4E;AAC5E,MAAM,CAAC,MAAM,YAAY,GAAG,eAAe,CAAC;AAqB5C,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAE3B;IADZ,IAAI,GAAG,kCAAkC,CAAC;IACnD,YAAqB,SAAsC,EAAE,KAAc;QACzE,KAAK,CAAC,0DAA0D,SAAS,0DAA0D,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAD7H,cAAS,GAAT,SAAS,CAA6B;QAEzD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAOD,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClG,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,GAAW,EAAE,KAAa;IAC/C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC;IAC5G,IAAI,GAAG,CAAC,MAAM,GAAG,mBAAmB;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,mBAAmB,aAAa,CAAC,CAAC;IACpH,IAAI,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oDAAoD,CAAC,CAAC;IACvH,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAC3B,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC;IAAC,CAAC;IAC9D,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iBAAiB,CAAC,CAAC;IAC1E,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IACvG,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,kCAAkC,CAAC,CAAC;IACnF,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAC;IAC7E,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gCAAgC,YAAY,EAAE,CAAC,CAAC;IACzH,OAAO,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;AAC1F,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACrE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,sBAAsB,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC;YAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAC,sBAAsB,CAAW,EAAE,sBAAsB,CAAC,EAAE,CAAC;QAAC,CAAC;QACrJ,OAAO,KAAK,EAAE,CAAC;YAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,sBAAsB,cAAc,EAAE,CAAC;QAAC,CAAC;IAChJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,CAAC,oBAAoB,EAAE,0BAA0B,CAAC,EAAE,CAAC;AAC9H,CAAC;AAED,kHAAkH;AAClH,MAAM,UAAU,iBAAiB,CAAC,QAA6B;IAC7D,OAAO,oBAAoB,QAAQ,CAAC,IAAI,GAAG,CAAC;AAC9C,CAAC;AAED,SAAS,KAAK;IACZ,OAAO,wBAAwB,CAAC,mBAAmB,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,eAAe,CAAC,QAAyC;IAChE,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,UAAU,GAAG,kBAAkB,EAAE,CAAC;IACxC,IAAI,UAAU,CAAC,MAAM,KAAK,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7E,OAAO,UAAU,CAAC,QAAQ,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,OAAe,EAAE,QAA6B;IACpE,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IACpC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACnG,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC/I,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACvF,OAAO,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACzJ,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU,IAAI,MAAM,CAAC,MAAM,KAAK,mBAAmB;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC7H,IAAI,QAAQ,CAAC,IAAI,KAAK,oBAAoB;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC5F,OAAO,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,aAAa,CAAC,WAA+B,EAAE,QAA6B;IACnF,IAAI,CAAC;QACH,IAAI,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5D,IAAI,OAAO,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,KAAK,oBAAoB;YAAE,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACrH,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,MAAyB,OAAO,CAAC,GAAG,EACpC,QAA8B,EAC9B,cAAkC,KAAK,EAAE;IAEzC,IAAI,MAA2B,CAAC;IAChC,IAAI,QAAQ;QAAE,MAAM,GAAG,QAAQ,CAAC;SAC3B,CAAC;QACJ,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,UAAU,CAAC,MAAM,KAAK,aAAa;YAAE,OAAO,UAAU,CAAC;QAC3D,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;IAC/B,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,qBAAqB,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC;YAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,EAAE,CAAC;QAAC,CAAC;QAChH,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,qBAAqB,0BAA0B,EAAE,CAAC;QAAC,CAAC;IAC1G,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAC;IAClE,IAAI,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;QACtD,IAAI,CAAC;YAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,EAAE,CAAC;QAAC,CAAC;QACtH,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,2BAA2B,0BAA0B,EAAE,CAAC;QAAC,CAAC;IAChH,CAAC;IACD,IAAI,MAA0B,CAAC;IAC/B,IAAI,CAAC;QAAC,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IACpD,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,KAAK,YAAY,uBAAuB,CAAC;YAAE,MAAM,KAAK,CAAC;QAC7D,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC1F,+GAA+G;IAC/G,wFAAwF;IACxF,IAAI,SAAS,EAAE,CAAC;QACd,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE,GAAG,2BAA2B,gDAAgD,MAAM,CAAC,IAAI,SAAS,qBAAqB,qBAAqB;SACtJ,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,QAA8B,EAAE,cAAkC,KAAK,EAAE;IACrH,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;IACnG,IAAI,CAAC;QAAC,WAAW,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAC7E,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,uBAAuB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAA8B,EAAE,cAAkC,KAAK,EAAE;IACvG,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,WAAW,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,IAAI,KAAK,oBAAoB;YAAE,WAAW,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACpF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,uBAAuB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;AACzE,CAAC"}
|
|
@@ -1,68 +0,0 @@
|
|
|
1
|
-
import { Ajv } from "ajv";
|
|
2
|
-
import Ajv2020Import from "ajv/dist/2020.js";
|
|
3
|
-
import addFormatsImport from "ajv-formats";
|
|
4
|
-
import { AjvJsonSchemaValidator } from "@modelcontextprotocol/client/validators/ajv";
|
|
5
|
-
// ajv-formats types target its bundled ajv; the runtime accepts both instances.
|
|
6
|
-
const addFormats = addFormatsImport;
|
|
7
|
-
// Rust servers built with schemars annotate numbers with these formats. The
|
|
8
|
-
// `type`, `minimum`, and `maximum` keywords already carry the constraint, so
|
|
9
|
-
// registering them as always-valid only stops Ajv's "unknown format" warnings.
|
|
10
|
-
// int32, int64, float, and double are omitted: ajv-formats validates them.
|
|
11
|
-
const SCHEMARS_NUMERIC_FORMATS = [
|
|
12
|
-
"int", "int8", "int16", "int128",
|
|
13
|
-
"uint", "uint8", "uint16", "uint32", "uint64", "uint128",
|
|
14
|
-
];
|
|
15
|
-
function addKnownFormats(ajv) {
|
|
16
|
-
addFormats(ajv);
|
|
17
|
-
for (const format of SCHEMARS_NUMERIC_FORMATS)
|
|
18
|
-
ajv.addFormat(format, true);
|
|
19
|
-
}
|
|
20
|
-
const DRAFT_07_SCHEMA_URIS = new Set([
|
|
21
|
-
"http://json-schema.org/draft-07/schema",
|
|
22
|
-
"https://json-schema.org/draft-07/schema",
|
|
23
|
-
]);
|
|
24
|
-
const DRAFT_2020_12_SCHEMA_URIS = new Set([
|
|
25
|
-
"https://json-schema.org/draft/2020-12/schema",
|
|
26
|
-
]);
|
|
27
|
-
function schemaDialect(schema) {
|
|
28
|
-
if (!("$schema" in schema) || typeof schema.$schema !== "string") {
|
|
29
|
-
return { status: "unstamped" };
|
|
30
|
-
}
|
|
31
|
-
return {
|
|
32
|
-
status: "stamped",
|
|
33
|
-
uri: schema.$schema.endsWith("#") ? schema.$schema.slice(0, -1) : schema.$schema,
|
|
34
|
-
};
|
|
35
|
-
}
|
|
36
|
-
export function createJsonSchemaValidator() {
|
|
37
|
-
let draft07Validator;
|
|
38
|
-
let draft2020Validator;
|
|
39
|
-
return {
|
|
40
|
-
getValidator(schema) {
|
|
41
|
-
const dialect = schemaDialect(schema);
|
|
42
|
-
if (dialect.status === "unstamped" || DRAFT_2020_12_SCHEMA_URIS.has(dialect.uri)) {
|
|
43
|
-
draft2020Validator ??= (() => {
|
|
44
|
-
const Ajv2020 = Ajv2020Import;
|
|
45
|
-
const ajv = new Ajv2020({ strict: false, allErrors: true });
|
|
46
|
-
addKnownFormats(ajv);
|
|
47
|
-
return new AjvJsonSchemaValidator(ajv);
|
|
48
|
-
})();
|
|
49
|
-
return draft2020Validator.getValidator(schema);
|
|
50
|
-
}
|
|
51
|
-
if (!DRAFT_07_SCHEMA_URIS.has(dialect.uri)) {
|
|
52
|
-
throw new Error(`Unsupported JSON Schema dialect: ${dialect.uri}`);
|
|
53
|
-
}
|
|
54
|
-
draft07Validator ??= (() => {
|
|
55
|
-
const ajv = new Ajv({
|
|
56
|
-
strict: false,
|
|
57
|
-
validateFormats: true,
|
|
58
|
-
validateSchema: false,
|
|
59
|
-
allErrors: true,
|
|
60
|
-
});
|
|
61
|
-
addKnownFormats(ajv);
|
|
62
|
-
return new AjvJsonSchemaValidator(ajv);
|
|
63
|
-
})();
|
|
64
|
-
return draft07Validator.getValidator(schema);
|
|
65
|
-
},
|
|
66
|
-
};
|
|
67
|
-
}
|
|
68
|
-
//# sourceMappingURL=json-schema-validator.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"json-schema-validator.js","sourceRoot":"","sources":["../json-schema-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC;AAC1B,OAAO,aAAa,MAAM,kBAAkB,CAAC;AAC7C,OAAO,gBAAgB,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAOrF,gFAAgF;AAChF,MAAM,UAAU,GAAG,gBAAsD,CAAC;AAE1E,4EAA4E;AAC5E,6EAA6E;AAC7E,+EAA+E;AAC/E,2EAA2E;AAC3E,MAAM,wBAAwB,GAAG;IAC/B,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ;IAChC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS;CACzD,CAAC;AAEF,SAAS,eAAe,CAAC,GAAQ;IAC/B,UAAU,CAAC,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,MAAM,IAAI,wBAAwB;QAAE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAC7E,CAAC;AAMD,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IACxD,wCAAwC;IACxC,yCAAyC;CAC1C,CAAC,CAAC;AACH,MAAM,yBAAyB,GAAwB,IAAI,GAAG,CAAC;IAC7D,8CAA8C;CAC/C,CAAC,CAAC;AAEH,SAAS,aAAa,CAAC,MAAsB;IAC3C,IAAI,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACjE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACjC,CAAC;IACD,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO;KACjF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,IAAI,gBAAoD,CAAC;IACzD,IAAI,kBAAsD,CAAC;IAE3D,OAAO;QACL,YAAY,CAAI,MAAsB;YACpC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;YACtC,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,IAAI,yBAAyB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjF,kBAAkB,KAAK,CAAC,GAAG,EAAE;oBAC3B,MAAM,OAAO,GAAG,aAAsC,CAAC;oBACvD,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC5D,eAAe,CAAC,GAAG,CAAC,CAAC;oBACrB,OAAO,IAAI,sBAAsB,CAAC,GAAG,CAAC,CAAC;gBACzC,CAAC,CAAC,EAAE,CAAC;gBACL,OAAO,kBAAkB,CAAC,YAAY,CAAI,MAAM,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CAAC,oCAAoC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;YACrE,CAAC;YAED,gBAAgB,KAAK,CAAC,GAAG,EAAE;gBACzB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC;oBAClB,MAAM,EAAE,KAAK;oBACb,eAAe,EAAE,IAAI;oBACrB,cAAc,EAAE,KAAK;oBACrB,SAAS,EAAE,IAAI;iBAChB,CAAC,CAAC;gBACH,eAAe,CAAC,GAAG,CAAC,CAAC;gBACrB,OAAO,IAAI,sBAAsB,CAAC,GAAG,CAAC,CAAC;YACzC,CAAC,CAAC,EAAE,CAAC;YACL,OAAO,gBAAgB,CAAC,YAAY,CAAI,MAAM,CAAC,CAAC;QAClD,CAAC;KACF,CAAC;AACJ,CAAC"}
|
|
@@ -1,56 +0,0 @@
|
|
|
1
|
-
import { type ServerDefinition } from "./types.ts";
|
|
2
|
-
import { type McpServerManager } from "./server-manager.ts";
|
|
3
|
-
import { hasPendingAuth } from "./mcp-auth-flow.ts";
|
|
4
|
-
export type ReconnectCallback = (serverName: string) => void | Promise<void>;
|
|
5
|
-
export type ReconnectFailureCallback = (serverName: string, error: unknown) => void;
|
|
6
|
-
export type HealthRestoredCallback = (serverName: string) => void | Promise<void>;
|
|
7
|
-
export type AuthRequiredCallback = (serverName: string) => void | Promise<void>;
|
|
8
|
-
export declare class McpLifecycleManager {
|
|
9
|
-
private readonly manager;
|
|
10
|
-
private readonly hasPendingAuthForServer;
|
|
11
|
-
private keepAliveServers;
|
|
12
|
-
private allServers;
|
|
13
|
-
private serverSettings;
|
|
14
|
-
private globalIdleTimeout;
|
|
15
|
-
private healthCheckInterval;
|
|
16
|
-
private onReconnect;
|
|
17
|
-
private onReconnectFailure;
|
|
18
|
-
private onHealthRestored;
|
|
19
|
-
private onAuthRequired;
|
|
20
|
-
private onIdleShutdown;
|
|
21
|
-
private activeHealthCheck;
|
|
22
|
-
private activeConvergence;
|
|
23
|
-
private shutdownPromise;
|
|
24
|
-
private retryStates;
|
|
25
|
-
private pendingMetadataPublications;
|
|
26
|
-
private stopped;
|
|
27
|
-
private removeHealthAbortListener;
|
|
28
|
-
constructor(manager: McpServerManager, hasPendingAuthForServer?: typeof hasPendingAuth);
|
|
29
|
-
setReconnectCallback(callback: ReconnectCallback): void;
|
|
30
|
-
setReconnectFailureCallback(callback: ReconnectFailureCallback): void;
|
|
31
|
-
setHealthRestoredCallback(callback: HealthRestoredCallback): void;
|
|
32
|
-
setAuthRequiredCallback(callback: AuthRequiredCallback): void;
|
|
33
|
-
markKeepAlive(name: string, definition: ServerDefinition): void;
|
|
34
|
-
registerServer(name: string, definition: ServerDefinition, settings?: {
|
|
35
|
-
idleTimeout?: number;
|
|
36
|
-
}): void;
|
|
37
|
-
unregisterServer(name: string): void;
|
|
38
|
-
setGlobalIdleTimeout(minutes: number): void;
|
|
39
|
-
setIdleShutdownCallback(callback: (serverName: string) => void): void;
|
|
40
|
-
startHealthChecks(signalOrInterval?: AbortSignal | number, maybeIntervalMs?: number): void;
|
|
41
|
-
ensureConverged(signal?: AbortSignal): Promise<void>;
|
|
42
|
-
private checkConnections;
|
|
43
|
-
private checkKeepAliveConnections;
|
|
44
|
-
private checkKeepAliveConnection;
|
|
45
|
-
private handleSupersededConnection;
|
|
46
|
-
private publishConnectedMetadata;
|
|
47
|
-
private notifyAuthRequired;
|
|
48
|
-
private shouldAttemptConnection;
|
|
49
|
-
private connectionFailureTarget;
|
|
50
|
-
private reportConnectionFailure;
|
|
51
|
-
private deferRefreshTimeout;
|
|
52
|
-
private recordRetry;
|
|
53
|
-
private getIdleTimeout;
|
|
54
|
-
gracefulShutdown(): Promise<void>;
|
|
55
|
-
private shutdownOnce;
|
|
56
|
-
}
|