@kwonye/mcpx 0.1.0

package/dist/core/config.js

@@ -0,0 +1,71 @@
+import { z } from "zod";
+import { getConfigPath } from "./paths.js";
+import { readJsonFile, writeJsonAtomic } from "../util/fs.js";
+const clientStateSchema = z.object({
+    status: z.enum(["SYNCED", "UNSUPPORTED_HTTP", "ERROR", "SKIPPED"]),
+    lastSyncAt: z.string().optional(),
+    message: z.string().optional(),
+    configPath: z.string().optional()
+});
+const httpServerSchema = z.object({
+    transport: z.literal("http"),
+    url: z.url(),
+    headers: z.record(z.string(), z.string()).optional()
+});
+const stdioServerSchema = z.object({
+    transport: z.literal("stdio"),
+    command: z.string().min(1),
+    args: z.array(z.string()).optional(),
+    env: z.record(z.string(), z.string()).optional(),
+    cwd: z.string().min(1).optional()
+});
+const serverSchema = z.discriminatedUnion("transport", [httpServerSchema, stdioServerSchema]);
+const configSchema = z.object({
+    schemaVersion: z.literal(1).default(1),
+    gateway: z.object({
+        port: z.number().int().min(1).max(65535).default(37373),
+        tokenRef: z.string().default("secret://local_gateway_token"),
+        autoStart: z.boolean().default(true)
+    }).default({
+        port: 37373,
+        tokenRef: "secret://local_gateway_token",
+        autoStart: true
+    }),
+    servers: z.record(z.string(), serverSchema).default({}),
+    clients: z.record(z.string(), clientStateSchema).default({})
+});
+export function defaultConfig() {
+    return {
+        schemaVersion: 1,
+        gateway: {
+            port: 37373,
+            tokenRef: "secret://local_gateway_token",
+            autoStart: true
+        },
+        servers: {},
+        clients: {}
+    };
+}
+export function loadConfig(configPath = getConfigPath()) {
+    const raw = readJsonFile(configPath, defaultConfig());
+    const parsed = configSchema.safeParse(raw);
+    if (!parsed.success) {
+        return defaultConfig();
+    }
+    const clientEntries = {};
+    for (const [key, value] of Object.entries(parsed.data.clients)) {
+        if (["claude", "codex", "cursor", "cline", "vscode"].includes(key)) {
+            clientEntries[key] = value;
+        }
+    }
+    return {
+        schemaVersion: 1,
+        gateway: parsed.data.gateway,
+        servers: parsed.data.servers,
+        clients: clientEntries
+    };
+}
+export function saveConfig(config, configPath = getConfigPath()) {
+    writeJsonAtomic(configPath, config);
+}
+//# sourceMappingURL=config.js.map

package/dist/core/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAE9D,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,kBAAkB,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAClE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAC5B,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE;IACZ,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACrD,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,CAAC,CAAC,kBAAkB,CAAC,WAAW,EAAE,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAE9F,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QACvD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,8BAA8B,CAAC;QAC5D,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KACrC,CAAC,CAAC,OAAO,CAAC;QACT,IAAI,EAAE,KAAK;QACX,QAAQ,EAAE,8BAA8B;QACxC,SAAS,EAAE,IAAI;KAChB,CAAC;IACF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC7D,CAAC,CAAC;AAEH,MAAM,UAAU,aAAa;IAC3B,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,OAAO,EAAE;YACP,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,8BAA8B;YACxC,SAAS,EAAE,IAAI;SAChB;QACD,OAAO,EAAE,EAAE;QACX,OAAO,EAAE,EAAE;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,UAAU,GAAG,aAAa,EAAE;IACrD,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,aAAa,EAAE,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,aAAa,EAAE,CAAC;IACzB,CAAC;IAED,MAAM,aAAa,GAA+D,EAAE,CAAC;IACrF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACnE,aAAa,CAAC,GAAe,CAAC,GAAG,KAAK,CAAC;QACzC,CAAC;IACH,CAAC;IAED,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;QAC5B,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;QAC5B,OAAO,EAAE,aAAa;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAkB,EAAE,UAAU,GAAG,aAAa,EAAE;IACzE,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;AACtC,CAAC"}

package/dist/core/daemon.d.ts

@@ -0,0 +1,25 @@
+import { SecretsManager } from "./secrets.js";
+import type { McpxConfig } from "../types.js";
+export interface DaemonStatus {
+    running: boolean;
+    pid?: number;
+    pidFile: string;
+    logFile: string;
+    port?: number;
+}
+export interface DaemonStartResult {
+    started: boolean;
+    pid: number;
+    port: number;
+    message: string;
+}
+export declare function resolveGatewayPort(config: McpxConfig): Promise<number>;
+export declare function getDaemonStatus(config: McpxConfig): DaemonStatus;
+export declare function startDaemon(config: McpxConfig, cliPath: string, secrets: SecretsManager): Promise<DaemonStartResult>;
+export declare function stopDaemon(): {
+    stopped: boolean;
+    message: string;
+};
+export declare function restartDaemon(config: McpxConfig, cliPath: string, secrets: SecretsManager): Promise<DaemonStartResult>;
+export declare function readDaemonLogs(maxLines?: number): string;
+export declare function runDaemonForeground(config: McpxConfig, port: number, secrets: SecretsManager): Promise<void>;

package/dist/core/daemon.js

@@ -0,0 +1,174 @@
+import fs from "node:fs";
+import net from "node:net";
+import { spawn } from "node:child_process";
+import { getLogPath, getPidPath, ensureParentDir } from "./paths.js";
+import { createGatewayServer } from "../gateway/server.js";
+import { ensureGatewayToken, getGatewayTokenSecretName } from "./registry.js";
+import { saveConfig } from "./config.js";
+function readPidFromFile(pidPath = getPidPath()) {
+    if (!fs.existsSync(pidPath)) {
+        return null;
+    }
+    const raw = fs.readFileSync(pidPath, "utf8").trim();
+    if (!raw) {
+        return null;
+    }
+    const pid = Number(raw);
+    if (!Number.isFinite(pid) || pid <= 0) {
+        return null;
+    }
+    return pid;
+}
+function processExists(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function isPortAvailable(port) {
+    return new Promise((resolve) => {
+        const tester = net.createServer();
+        tester.once("error", () => {
+            resolve(false);
+        });
+        tester.once("listening", () => {
+            tester.close(() => resolve(true));
+        });
+        tester.listen(port, "127.0.0.1");
+    });
+}
+export async function resolveGatewayPort(config) {
+    if (await isPortAvailable(config.gateway.port)) {
+        return config.gateway.port;
+    }
+    for (let offset = 1; offset <= 20; offset += 1) {
+        const candidate = config.gateway.port + offset;
+        if (candidate > 65535) {
+            break;
+        }
+        if (await isPortAvailable(candidate)) {
+            config.gateway.port = candidate;
+            saveConfig(config);
+            return candidate;
+        }
+    }
+    throw new Error(`No available local port found near ${config.gateway.port}.`);
+}
+export function getDaemonStatus(config) {
+    const pidPath = getPidPath();
+    const pid = readPidFromFile(pidPath);
+    if (!pid) {
+        return {
+            running: false,
+            pidFile: pidPath,
+            logFile: getLogPath(),
+            port: config.gateway.port
+        };
+    }
+    return {
+        running: processExists(pid),
+        pid,
+        pidFile: pidPath,
+        logFile: getLogPath(),
+        port: config.gateway.port
+    };
+}
+export async function startDaemon(config, cliPath, secrets) {
+    const existingStatus = getDaemonStatus(config);
+    if (existingStatus.running && existingStatus.pid) {
+        return {
+            started: false,
+            pid: existingStatus.pid,
+            port: config.gateway.port,
+            message: "mcpx daemon already running."
+        };
+    }
+    const port = await resolveGatewayPort(config);
+    ensureGatewayToken(config, secrets);
+    const pidPath = getPidPath();
+    const logPath = getLogPath();
+    ensureParentDir(pidPath);
+    ensureParentDir(logPath);
+    const logFd = fs.openSync(logPath, "a", 0o600);
+    const child = spawn(process.execPath, [cliPath, "daemon", "run", "--port", String(port)], {
+        detached: true,
+        stdio: ["ignore", logFd, logFd],
+        env: {
+            ...process.env,
+            MCPX_DAEMON_CHILD: "1"
+        }
+    });
+    child.unref();
+    fs.writeFileSync(pidPath, `${child.pid}\n`, { mode: 0o600 });
+    return {
+        started: true,
+        pid: child.pid ?? -1,
+        port,
+        message: "mcpx daemon started."
+    };
+}
+export function stopDaemon() {
+    const pidPath = getPidPath();
+    const pid = readPidFromFile(pidPath);
+    if (!pid) {
+        return {
+            stopped: false,
+            message: "mcpx daemon is not running."
+        };
+    }
+    try {
+        process.kill(pid, "SIGTERM");
+    }
+    catch {
+        // Ignore already dead process.
+    }
+    try {
+        fs.unlinkSync(pidPath);
+    }
+    catch {
+        // Ignore cleanup failure.
+    }
+    return {
+        stopped: true,
+        message: `Stopped mcpx daemon (pid ${pid}).`
+    };
+}
+export async function restartDaemon(config, cliPath, secrets) {
+    stopDaemon();
+    return startDaemon(config, cliPath, secrets);
+}
+export function readDaemonLogs(maxLines = 200) {
+    const logPath = getLogPath();
+    if (!fs.existsSync(logPath)) {
+        return "";
+    }
+    const lines = fs.readFileSync(logPath, "utf8").split("\n");
+    return lines.slice(Math.max(lines.length - maxLines, 0)).join("\n");
+}
+export function runDaemonForeground(config, port, secrets) {
+    return new Promise((resolve, reject) => {
+        const tokenName = getGatewayTokenSecretName(config);
+        const token = secrets.getSecret(tokenName);
+        if (!token) {
+            reject(new Error(`Local gateway token not found: ${tokenName}`));
+            return;
+        }
+        const server = createGatewayServer({
+            port,
+            expectedToken: token,
+            secrets
+        });
+        const cleanup = () => {
+            server.close(() => resolve());
+        };
+        process.on("SIGINT", cleanup);
+        process.on("SIGTERM", cleanup);
+        server.on("error", (error) => {
+            reject(error);
+        });
+    });
+}
+//# sourceMappingURL=daemon.js.map

package/dist/core/daemon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon.js","sourceRoot":"","sources":["../../src/core/daemon.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAE9E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAiBzC,SAAS,eAAe,CAAC,OAAO,GAAG,UAAU,EAAE;IAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY;IACzC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC;QAElC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACxB,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE;YAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAkB;IACzD,IAAI,MAAM,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;IAC7B,CAAC;IAED,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC;QAC/C,IAAI,SAAS,GAAG,KAAK,EAAE,CAAC;YACtB,MAAM;QACR,CAAC;QAED,IAAI,MAAM,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;YAChC,UAAU,CAAC,MAAM,CAAC,CAAC;YACnB,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAkB;IAChD,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,UAAU,EAAE;YACrB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;SAC1B,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC;QAC3B,GAAG;QACH,OAAO,EAAE,OAAO;QAChB,OAAO,EAAE,UAAU,EAAE;QACrB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;KAC1B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAkB,EAAE,OAAe,EAAE,OAAuB;IAC5F,MAAM,cAAc,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,cAAc,CAAC,OAAO,IAAI,cAAc,CAAC,GAAG,EAAE,CAAC;QACjD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,GAAG,EAAE,cAAc,CAAC,GAAG;YACvB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;YACzB,OAAO,EAAE,8BAA8B;SACxC,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC9C,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEpC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,eAAe,CAAC,OAAO,CAAC,CAAC;IACzB,eAAe,CAAC,OAAO,CAAC,CAAC;IAEzB,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE;QACxF,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC;QAC/B,GAAG,EAAE;YACH,GAAG,OAAO,CAAC,GAAG;YACd,iBAAiB,EAAE,GAAG;SACvB;KACF,CAAC,CAAC;IAEH,KAAK,CAAC,KAAK,EAAE,CAAC;IAEd,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAE7D,OAAO;QACL,OAAO,EAAE,IAAI;QACb,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QACpB,IAAI;QACJ,OAAO,EAAE,sBAAsB;KAChC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAErC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,6BAA6B;SACvC,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,+BAA+B;IACjC,CAAC;IAED,IAAI,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;IAC5B,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,4BAA4B,GAAG,IAAI;KAC7C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAkB,EAAE,OAAe,EAAE,OAAuB;IAC9F,UAAU,EAAE,CAAC;IACb,OAAO,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAQ,GAAG,GAAG;IAC3C,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAkB,EAAE,IAAY,EAAE,OAAuB;IAC3F,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,SAAS,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAE3C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,SAAS,EAAE,CAAC,CAAC,CAAC;YACjE,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,mBAAmB,CAAC;YACjC,IAAI;YACJ,aAAa,EAAE,KAAK;YACpB,OAAO;SACR,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAChC,CAAC,CAAC;QAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAE/B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3B,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/core/managed-index.d.ts

@@ -0,0 +1,4 @@
+import type { ManagedIndex } from "../types.js";
+export declare function defaultManagedIndex(): ManagedIndex;
+export declare function loadManagedIndex(filePath?: string): ManagedIndex;
+export declare function saveManagedIndex(index: ManagedIndex, filePath?: string): void;

package/dist/core/managed-index.js

@@ -0,0 +1,22 @@
+import { getManagedIndexPath } from "./paths.js";
+import { readJsonFile, writeJsonAtomic } from "../util/fs.js";
+export function defaultManagedIndex() {
+    return {
+        schemaVersion: 1,
+        managed: {}
+    };
+}
+export function loadManagedIndex(filePath = getManagedIndexPath()) {
+    const raw = readJsonFile(filePath, defaultManagedIndex());
+    if (!raw || typeof raw !== "object") {
+        return defaultManagedIndex();
+    }
+    if (raw.schemaVersion !== 1) {
+        return defaultManagedIndex();
+    }
+    return raw;
+}
+export function saveManagedIndex(index, filePath = getManagedIndexPath()) {
+    writeJsonAtomic(filePath, index);
+}
+//# sourceMappingURL=managed-index.js.map

package/dist/core/managed-index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-index.js","sourceRoot":"","sources":["../../src/core/managed-index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAE9D,MAAM,UAAU,mBAAmB;IACjC,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAQ,GAAG,mBAAmB,EAAE;IAC/D,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAE1D,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,mBAAmB,EAAE,CAAC;IAC/B,CAAC;IAED,IAAK,GAAkC,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;QAC5D,OAAO,mBAAmB,EAAE,CAAC;IAC/B,CAAC;IAED,OAAO,GAAmB,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAmB,EAAE,QAAQ,GAAG,mBAAmB,EAAE;IACpF,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AACnC,CAAC"}

package/dist/core/paths.d.ts

@@ -0,0 +1,12 @@
+export declare function getConfigRoot(): string;
+export declare function getDataRoot(): string;
+export declare function getStateRoot(): string;
+export declare function getConfigPath(): string;
+export declare function getManagedIndexPath(): string;
+export declare function getSecretNamesPath(): string;
+export declare function getRuntimeDir(): string;
+export declare function getLogDir(): string;
+export declare function getPidPath(): string;
+export declare function getLogPath(): string;
+export declare function ensureParentDir(filePath: string): void;
+export declare function ensureDir(dirPath: string): void;

package/dist/core/paths.js

@@ -0,0 +1,46 @@
+import os from "node:os";
+import path from "node:path";
+import fs from "node:fs";
+function envOrDefault(value, fallback) {
+    if (value && value.trim().length > 0) {
+        return value;
+    }
+    return fallback;
+}
+export function getConfigRoot() {
+    return envOrDefault(process.env.MCPX_CONFIG_HOME ?? process.env.XDG_CONFIG_HOME, path.join(os.homedir(), ".config"));
+}
+export function getDataRoot() {
+    return envOrDefault(process.env.MCPX_DATA_HOME ?? process.env.XDG_DATA_HOME, path.join(os.homedir(), ".local", "share"));
+}
+export function getStateRoot() {
+    return envOrDefault(process.env.MCPX_STATE_HOME ?? process.env.XDG_STATE_HOME, path.join(os.homedir(), ".local", "state"));
+}
+export function getConfigPath() {
+    return path.join(getConfigRoot(), "mcpx", "config.json");
+}
+export function getManagedIndexPath() {
+    return path.join(getDataRoot(), "mcpx", "managed-index.json");
+}
+export function getSecretNamesPath() {
+    return path.join(getDataRoot(), "mcpx", "secret-names.json");
+}
+export function getRuntimeDir() {
+    return path.join(getStateRoot(), "mcpx", "runtime");
+}
+export function getLogDir() {
+    return path.join(getStateRoot(), "mcpx", "logs");
+}
+export function getPidPath() {
+    return path.join(getRuntimeDir(), "daemon.pid");
+}
+export function getLogPath() {
+    return path.join(getLogDir(), "daemon.log");
+}
+export function ensureParentDir(filePath) {
+    fs.mkdirSync(path.dirname(filePath), { recursive: true });
+}
+export function ensureDir(dirPath) {
+    fs.mkdirSync(dirPath, { recursive: true });
+}
+//# sourceMappingURL=paths.js.map

package/dist/core/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/core/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,SAAS,YAAY,CAAC,KAAyB,EAAE,QAAgB;IAC/D,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;AACvH,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAC3H,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAC7H,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,YAAY,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,YAAY,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAe;IACvC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7C,CAAC"}

package/dist/core/registry.d.ts

@@ -0,0 +1,7 @@
+import type { McpxConfig, UpstreamServerSpec } from "../types.js";
+import { SecretsManager } from "./secrets.js";
+export declare function validateServerName(name: string): void;
+export declare function addServer(config: McpxConfig, name: string, spec: UpstreamServerSpec, force?: boolean): void;
+export declare function removeServer(config: McpxConfig, name: string, force?: boolean): void;
+export declare function getGatewayTokenSecretName(config: McpxConfig): string;
+export declare function ensureGatewayToken(config: McpxConfig, secrets: SecretsManager): string;

package/dist/core/registry.js

@@ -0,0 +1,33 @@
+export function validateServerName(name) {
+    if (!/^[a-zA-Z0-9][a-zA-Z0-9._-]{0,62}$/.test(name)) {
+        throw new Error("Invalid server name. Use 1-63 chars: letters, numbers, '.', '-', '_' and start with alphanumeric.");
+    }
+}
+export function addServer(config, name, spec, force = false) {
+    validateServerName(name);
+    if (config.servers[name] && !force) {
+        throw new Error(`Server \"${name}\" already exists. Use --force to overwrite.`);
+    }
+    config.servers[name] = spec;
+}
+export function removeServer(config, name, force = false) {
+    if (!config.servers[name] && !force) {
+        throw new Error(`Server \"${name}\" does not exist.`);
+    }
+    delete config.servers[name];
+}
+export function getGatewayTokenSecretName(config) {
+    if (!config.gateway.tokenRef.startsWith("secret://")) {
+        return "local_gateway_token";
+    }
+    return config.gateway.tokenRef.slice("secret://".length) || "local_gateway_token";
+}
+export function ensureGatewayToken(config, secrets) {
+    const secretName = getGatewayTokenSecretName(config);
+    const existing = secrets.getSecret(secretName);
+    if (existing) {
+        return existing;
+    }
+    return secrets.rotateLocalToken(secretName);
+}
+//# sourceMappingURL=registry.js.map

package/dist/core/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/core/registry.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,CAAC,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,mGAAmG,CAAC,CAAC;IACvH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAkB,EAAE,IAAY,EAAE,IAAwB,EAAE,KAAK,GAAG,KAAK;IACjG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAEzB,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,8CAA8C,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAkB,EAAE,IAAY,EAAE,KAAK,GAAG,KAAK;IAC1E,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,oBAAoB,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAAkB;IAC1D,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACrD,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,qBAAqB,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAkB,EAAE,OAAuB;IAC5E,MAAM,UAAU,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAE/C,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,OAAO,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;AAC9C,CAAC"}

package/dist/core/secrets.d.ts

@@ -0,0 +1,16 @@
+export declare class SecretsManager {
+    private readonly service;
+    private readonly nameIndexPath;
+    constructor(service?: string, nameIndexPath?: string);
+    private loadNameIndex;
+    private saveNameIndex;
+    private trackSecretName;
+    private untrackSecretName;
+    listSecretNames(): string[];
+    setSecret(name: string, value: string): void;
+    removeSecret(name: string): void;
+    getSecret(name: string): string | null;
+    resolveMaybeSecret(value: string): string;
+    rotateLocalToken(secretName?: string): string;
+}
+export declare function readSecretValueFromStdin(): string;

package/dist/core/secrets.js

@@ -0,0 +1,108 @@
+import { execFileSync } from "node:child_process";
+import crypto from "node:crypto";
+import fs from "node:fs";
+import { getSecretNamesPath } from "./paths.js";
+import { readJsonFile, writeJsonAtomic } from "../util/fs.js";
+function parseSecretRef(ref) {
+    if (!ref.startsWith("secret://")) {
+        return null;
+    }
+    const name = ref.slice("secret://".length);
+    return name.length > 0 ? name : null;
+}
+export class SecretsManager {
+    service;
+    nameIndexPath;
+    constructor(service = "mcpx", nameIndexPath = getSecretNamesPath()) {
+        this.service = service;
+        this.nameIndexPath = nameIndexPath;
+    }
+    loadNameIndex() {
+        return readJsonFile(this.nameIndexPath, { names: [] });
+    }
+    saveNameIndex(index) {
+        const deduped = Array.from(new Set(index.names)).sort();
+        writeJsonAtomic(this.nameIndexPath, { names: deduped });
+    }
+    trackSecretName(name) {
+        const index = this.loadNameIndex();
+        if (!index.names.includes(name)) {
+            index.names.push(name);
+            this.saveNameIndex(index);
+        }
+    }
+    untrackSecretName(name) {
+        const index = this.loadNameIndex();
+        index.names = index.names.filter((entry) => entry !== name);
+        this.saveNameIndex(index);
+    }
+    listSecretNames() {
+        return this.loadNameIndex().names;
+    }
+    setSecret(name, value) {
+        if (process.platform !== "darwin") {
+            throw new Error("OS keychain integration is currently implemented for macOS only.");
+        }
+        execFileSync("security", ["add-generic-password", "-U", "-a", name, "-s", this.service, "-w", value], {
+            stdio: "ignore"
+        });
+        this.trackSecretName(name);
+    }
+    removeSecret(name) {
+        if (process.platform === "darwin") {
+            try {
+                execFileSync("security", ["delete-generic-password", "-a", name, "-s", this.service], {
+                    stdio: "ignore"
+                });
+            }
+            catch {
+                // Ignore missing keychain entry.
+            }
+        }
+        this.untrackSecretName(name);
+    }
+    getSecret(name) {
+        const envOverride = process.env[`MCPX_SECRET_${name}`];
+        if (envOverride && envOverride.length > 0) {
+            return envOverride;
+        }
+        if (process.platform !== "darwin") {
+            return null;
+        }
+        try {
+            return execFileSync("security", ["find-generic-password", "-w", "-a", name, "-s", this.service], {
+                encoding: "utf8"
+            }).trim();
+        }
+        catch {
+            return null;
+        }
+    }
+    resolveMaybeSecret(value) {
+        const secretName = parseSecretRef(value);
+        if (!secretName) {
+            return value;
+        }
+        const secret = this.getSecret(secretName);
+        if (!secret) {
+            throw new Error(`Secret not found: ${secretName}`);
+        }
+        return secret;
+    }
+    rotateLocalToken(secretName = "local_gateway_token") {
+        const token = crypto.randomBytes(32).toString("base64url");
+        this.setSecret(secretName, token);
+        return token;
+    }
+}
+export function readSecretValueFromStdin() {
+    if (process.stdin.isTTY) {
+        throw new Error("No value provided. Use --value or pipe a value via stdin.");
+    }
+    const content = fs.readFileSync(process.stdin.fd, "utf8").trim();
+    if (content.length === 0) {
+        throw new Error("Empty secret value provided.");
+    }
+    return content;
+}
+//# sourceMappingURL=secrets.js.map

package/dist/core/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../src/core/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAM9D,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3C,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED,MAAM,OAAO,cAAc;IACR,OAAO,CAAS;IAChB,aAAa,CAAS;IAEvC,YAAY,OAAO,GAAG,MAAM,EAAE,aAAa,GAAG,kBAAkB,EAAE;QAChE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAEO,aAAa;QACnB,OAAO,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,EAAc,EAAE,CAAC,CAAC;IACrE,CAAC;IAEO,aAAa,CAAC,KAAsB;QAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACxD,eAAe,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1D,CAAC;IAEO,eAAe,CAAC,IAAY;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,IAAY;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;QAC5D,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC,KAAK,CAAC;IACpC,CAAC;IAED,SAAS,CAAC,IAAY,EAAE,KAAa;QACnC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACtF,CAAC;QAED,YAAY,CAAC,UAAU,EAAE,CAAC,sBAAsB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE;YACpG,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;QAEH,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,YAAY,CAAC,IAAY;QACvB,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,YAAY,CAAC,UAAU,EAAE,CAAC,yBAAyB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;oBACpF,KAAK,EAAE,QAAQ;iBAChB,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,iCAAiC;YACnC,CAAC;QACH,CAAC;QAED,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,SAAS,CAAC,IAAY;QACpB,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;QACvD,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,UAAU,EAAE,CAAC,uBAAuB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;gBAC/F,QAAQ,EAAE,MAAM;aACjB,CAAC,CAAC,IAAI,EAAE,CAAC;QACZ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,kBAAkB,CAAC,KAAa;QAC9B,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,qBAAqB,UAAU,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,gBAAgB,CAAC,UAAU,GAAG,qBAAqB;QACjD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,MAAM,UAAU,wBAAwB;IACtC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACjE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/core/server-auth.d.ts

@@ -0,0 +1,19 @@
+import type { UpstreamServerSpec } from "../types.js";
+export type AuthTargetKind = "header" | "env";
+export interface AuthTarget {
+    kind: AuthTargetKind;
+    key: string;
+}
+export interface AuthBinding {
+    kind: AuthTargetKind;
+    key: string;
+    value: string;
+}
+export declare function toSecretRef(secretName: string): string;
+export declare function secretRefName(ref: string): string | null;
+export declare function defaultAuthSecretName(serverName: string, target: AuthTarget): string;
+export declare function resolveAuthTarget(spec: UpstreamServerSpec, header?: string, env?: string): AuthTarget;
+export declare function applyAuthReference(spec: UpstreamServerSpec, target: AuthTarget, secretRef: string): void;
+export declare function removeAuthReference(spec: UpstreamServerSpec, target: AuthTarget): string | null;
+export declare function listAuthBindings(spec: UpstreamServerSpec): AuthBinding[];
+export declare function maybePrefixBearer(target: AuthTarget, value: string, raw?: boolean): string;