@kynver-app/mcp-agent-os 0.3.2 → 0.3.4

package/README.md

@@ -70,6 +70,7 @@ follow-ups instead of generic lifecycle text.
 | `KYNVER_API_KEY` | Bearer token for external authentication |
 | `KYNVER_AGENT_OS_SLUG` | Default agent slug when the tool's `slug` arg is omitted (defaults to `"ghost"`) |
 | `KYNVER_SERVICE_SECRET` | Required when running under SSE and forwarding internal `userId` headers |
+| `MCP_SSE_HOST` | SSE bind address (defaults to `127.0.0.1`) |
 | `PORT` | SSE port (defaults to `3101`) |
 
 ## OpenClaw / Claude Code config

package/SECURITY.md

@@ -0,0 +1,31 @@
+# Security — Kynver MCP packages
+
+## Recommended deployment
+
+- **Prefer stdio** (`npx @kynver-app/mcp-*`) from Cursor, Claude Code, or OpenClaw. The MCP host process owns the trust boundary.
+- **Avoid exposing SSE** (`start:sse`) to the public internet unless you terminate TLS and restrict access at a reverse proxy.
+
+## Secrets
+
+- Store `KYNVER_API_KEY` and `KYNVER_SERVICE_SECRET` in environment variables or your MCP host's secret store — never in git, query strings, or shared logs.
+- `KYNVER_SERVICE_SECRET` plus a valid user API key can impersonate any user on your Kynver deployment. Treat it as tier-0.
+
+## SSE mode (`start:sse`)
+
+When you run the optional HTTP/SSE server:
+
+| Control | Default | Purpose |
+|---------|---------|---------|
+| `MCP_SSE_HOST` | `127.0.0.1` | Bind address — keep localhost unless behind a proxy |
+| `PORT` | package-specific | Listen port |
+
+Authentication rules:
+
+- **Headers only** for internal auth on `GET /sse` — `X-Kynver-User-Id` + `X-Kynver-Service-Secret`. Never pass `secret` or `userId` in query strings.
+- **External API keys** may use `Authorization: Bearer <apiKey>` (preferred) or `?apiKey=` on `GET /sse` when your MCP client cannot set headers (EventSource). Query keys may appear in access logs.
+- **`POST /messages` requires the same API key or internal headers** used to open the SSE session — not `sessionId` alone.
+- Request bodies are capped at **1 MB**.
+
+## Reporting
+
+Report vulnerabilities to Kynver through your usual security channel for the Kynver deployment you operate.

package/dist/sse.d.ts

@@ -1,13 +1 @@
-/**
- * SSE entry point for the Agentic OS MCP server.
- *
- * Supports two authentication modes:
- *   1. Internal (Kynver dashboard): userId + KYNVER_SERVICE_SECRET query params
- *   2. External (Claude Code, Cursor, any MCP client): Kynver API key via
- *      query param (?apiKey=…) or Authorization header
- *
- * External keys are validated by calling GET /api/users/me on the Kynver API.
- * Once authenticated, tool calls execute on behalf of the resolved user via
- * the requestContext AsyncLocalStorage.
- */
 export {};

package/dist/sse.js

@@ -1,130 +1,9 @@
-/**
- * SSE entry point for the Agentic OS MCP server.
- *
- * Supports two authentication modes:
- *   1. Internal (Kynver dashboard): userId + KYNVER_SERVICE_SECRET query params
- *   2. External (Claude Code, Cursor, any MCP client): Kynver API key via
- *      query param (?apiKey=…) or Authorization header
- *
- * External keys are validated by calling GET /api/users/me on the Kynver API.
- * Once authenticated, tool calls execute on behalf of the resolved user via
- * the requestContext AsyncLocalStorage.
- */
-import { SSEServerTransport } from "@modelcontextprotocol/sdk/server/sse.js";
-import { createServer } from "node:http";
+import { startKynverMcpSseServer } from "@kynver-app/mcp-sse-lib";
 import { createAgentOsServer } from "./server.js";
 import { requestContext } from "./lib/kynver-client.js";
-const PORT = parseInt(process.env.PORT ?? "3101", 10);
-const BASE_URL = process.env.KYNVER_API_URL ?? "https://kynver.com";
-const SERVICE_SECRET = process.env.KYNVER_SERVICE_SECRET ?? "";
-// ---------------------------------------------------------------------------
-// Session tracking — maps sessionId → { transport, userId }
-// ---------------------------------------------------------------------------
-const sessions = {};
-// ---------------------------------------------------------------------------
-// Helpers
-// ---------------------------------------------------------------------------
-/** Validate an external API key by calling the Kynver API. */
-async function resolveUser(apiKey) {
-    try {
-        const res = await fetch(`${BASE_URL}/api/users/me`, {
-            headers: { Authorization: `Bearer ${apiKey}` },
-        });
-        if (!res.ok)
-            return null;
-        const data = (await res.json());
-        return data.id ?? null;
-    }
-    catch {
-        return null;
-    }
-}
-/** Read and JSON-parse the request body (needed for raw http.Server). */
-function parseBody(req) {
-    return new Promise((resolve, reject) => {
-        const chunks = [];
-        req.on("data", (chunk) => chunks.push(chunk));
-        req.on("end", () => {
-            try {
-                resolve(JSON.parse(Buffer.concat(chunks).toString()));
-            }
-            catch (e) {
-                reject(e);
-            }
-        });
-        req.on("error", reject);
-    });
-}
-function parseUrl(req) {
-    return new URL(req.url ?? "/", `http://localhost:${PORT}`);
-}
-// ---------------------------------------------------------------------------
-// HTTP server
-// ---------------------------------------------------------------------------
-const httpServer = createServer(async (req, res) => {
-    const url = parseUrl(req);
-    const path = url.pathname;
-    // ── SSE connection ──────────────────────────────────────────────────
-    if (req.method === "GET" && path === "/sse") {
-        // Internal auth: Kynver dashboard passes userId + service secret
-        const internalUserId = url.searchParams.get("userId");
-        const internalSecret = url.searchParams.get("secret");
-        // External auth: API key via query param or Authorization header
-        const apiKey = url.searchParams.get("apiKey") ??
-            req.headers.authorization?.replace("Bearer ", "") ??
-            "";
-        let userId = null;
-        if (internalUserId && SERVICE_SECRET && internalSecret === SERVICE_SECRET) {
-            userId = internalUserId;
-        }
-        else if (apiKey) {
-            userId = await resolveUser(apiKey);
-        }
-        if (!userId) {
-            res.writeHead(401, { "Content-Type": "application/json" });
-            res.end(JSON.stringify({
-                error: "Unauthorized. Provide a valid Kynver API key.",
-            }));
-            return;
-        }
-        console.log(`[MCP SSE] New connection (userId: ${userId})`);
-        const transport = new SSEServerTransport("/messages", res);
-        sessions[transport.sessionId] = { transport, userId };
-        res.on("close", () => {
-            console.log(`[MCP SSE] Connection closed: ${transport.sessionId}`);
-            delete sessions[transport.sessionId];
-        });
-        const server = createAgentOsServer();
-        await server.connect(transport);
-        return;
-    }
-    // ── Message handler (client → server JSON-RPC messages) ─────────────
-    if (req.method === "POST" && path === "/messages") {
-        const sessionId = url.searchParams.get("sessionId");
-        const entry = sessionId ? sessions[sessionId] : undefined;
-        if (!entry) {
-            res.writeHead(400, { "Content-Type": "application/json" });
-            res.end(JSON.stringify({
-                error: "No active SSE session for this sessionId",
-            }));
-            return;
-        }
-        const body = await parseBody(req);
-        // Wrap in request context so kynver-client sends the right user headers
-        await requestContext.run({ userId: entry.userId }, async () => {
-            await entry.transport.handlePostMessage(req, res, body);
-        });
-        return;
-    }
-    // ── Health check ────────────────────────────────────────────────────
-    if (req.method === "GET" && path === "/health") {
-        res.writeHead(200, { "Content-Type": "text/plain" });
-        res.end("ok");
-        return;
-    }
-    res.writeHead(404, { "Content-Type": "application/json" });
-    res.end(JSON.stringify({ error: "Not found" }));
-});
-httpServer.listen(PORT, () => {
-    console.log(`[MCP SSE] Agentic OS server listening on port ${PORT}`);
+startKynverMcpSseServer({
+    label: "Agentic OS server",
+    defaultPort: 3101,
+    createMcpServer: createAgentOsServer,
+    requestContext,
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kynver-app/mcp-agent-os",
-  "version": "0.3.2",
+  "version": "0.3.4",
   "description": "Kynver Agentic OS MCP server — slug-keyed agent identity, goals, projects, sessions, and long-term memory",
   "type": "module",
   "bin": {
@@ -8,10 +8,11 @@
   },
   "files": [
     "dist",
-    "README.md"
+    "README.md",
+    "SECURITY.md"
   ],
   "scripts": {
-    "build": "node --max-old-space-size=8192 ../../node_modules/typescript/bin/tsc",
+    "build": "npm run build -w @kynver-app/mcp-sse-lib && node --max-old-space-size=8192 ../../node_modules/typescript/bin/tsc",
     "dev": "node --max-old-space-size=8192 ../../node_modules/typescript/bin/tsc --watch",
     "start": "node dist/index.js",
     "start:sse": "node dist/sse.js"
@@ -20,6 +21,7 @@
     "node": ">=18"
   },
   "dependencies": {
+    "@kynver-app/mcp-sse-lib": "*",
     "@modelcontextprotocol/sdk": "^1.27.0",
     "zod": "^3.23.0"
   },