@lobu/gateway 2.8.0

package/dist/auth/external/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/auth/external/client.ts"],"names":[],"mappings":";;;AAAA,6CAA0C;AAC1C,qCAA0C;AAC1C,4CAA8C;AAG9C,6DAI8B;AAE9B,MAAM,MAAM,GAAG,IAAA,mBAAY,EAAC,sBAAsB,CAAC,CAAC;AACpD,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AAC1D,MAAM,sBAAsB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC7C,MAAM,aAAa,GAAG,cAAc,CAAC;AAmFrC,MAAa,kBAAkB;IAM7B,YAA6B,MAA0B;QAA1B,WAAM,GAAN,MAAM,CAAoB;QAL/C,mBAAc,GAGX,IAAI,CAAC;IAE0C,CAAC;IAE3D,oBAAoB;QAClB,OAAO,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,KAAa,EACb,YAAoB,EACpB,WAAoB;QAEpB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,YAAY,CACjD,KAAK,EACL,YAAY,EACZ,WAAW,CACZ,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,IAAY,EACZ,YAAoB,EACpB,WAAoB;QAEpB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CACzD,IAAI,EACJ,YAAY,EACZ,WAAW,CACZ,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,WAAmB;QACrC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE;YACjD,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,WAAW,EAAE;gBACtC,MAAM,EAAE,kBAAkB;aAC3B;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,8BAA8B,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAC7D,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAqB,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE;YAC7C,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC5C,OAAO;YACL,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC;YAClD,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,sBAAsB,IAAI,QAAQ,CAAC,QAAQ,CAAC;SACjE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,wBAAwB;QAC5B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,sBAAsB,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,iBAAiB,EAAE,CAAC;QACxE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBACpB,KAAK,YAAY,KAAK;gBACtB,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EACxC,CAAC;gBACD,MAAM,CAAC,IAAI,CACT,8FAA8F,CAC/F,CAAC;gBACF,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC;oBAC/C,kBAAkB,EAAE,IAAI;iBACzB,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC,iBAAiB,EAAE,CAAC;YACzE,CAAC;YAED,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,uBAAuB,CAC3B,YAAoB,EACpB,eAAwB;QAExB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,sBAAsB,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,YAAY,CACpE,YAAY,EACZ,eAAe,CAChB,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACjC,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW;YAC/B,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC;YAC1D,CAAC,CAAC,SAAS,CAAC;QAEd,uCACK,MAAM,KACT,IAAI,IACJ;IACJ,CAAC;IAED,MAAM,CAAC,YAAY;QACjB,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IAClC,CAAC;IAED,MAAM,CAAC,OAAO,CACZ,gBAAwB,EACxB,UAA6C;QAE7C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QAC1C,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAE7B,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACjD,MAAM,YAAY,GAAG,yBAAyB,CAAC;QAE/C,0EAA0E;QAC1E,iEAAiE;QACjE,MAAM,WAAW,GAAG,GAAG,gBAAgB,GAAG,YAAY,EAAE,CAAC;QACzD,MAAM,sBAAsB,GAAG;YAC7B,wBAAwB,YAAY,EAAE;SACvC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,WAAW,CAAC,CAAC;QAEvC,OAAO,IAAI,kBAAkB,CAAC;YAC5B,SAAS;YACT,WAAW;YACX,sBAAsB;YACtB,KAAK,EAAE,aAAa;YACpB,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,OAE3B;QACC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC/C,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAC/D,QAAQ,EACR;YACE,iBAAiB,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,kBAAkB;SAC/C,CACF,CAAC;QAEF,MAAM,QAAQ,GAAG,CAAA,kBAAkB,aAAlB,kBAAkB,uBAAlB,kBAAkB,CAAE,SAAS,KAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QACvE,MAAM,YAAY,GAChB,CAAA,kBAAkB,aAAlB,kBAAkB,uBAAlB,kBAAkB,CAAE,aAAa,KAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QAEhE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,qCAAqC,CAAC;QACpE,MAAM,uBAAuB,GAC3B,CAAA,kBAAkB,aAAlB,kBAAkB,uBAAlB,kBAAkB,CAAE,0BAA0B;YAC9C,IAAI,CAAC,6BAA6B,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAEhE,OAAO;YACL,QAAQ;YACR,YAAY;YACZ,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,KAAI,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,sBAAsB,CAAA;YACrE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAI,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,cAAc,CAAA;YAC1D,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,KAAI,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,iBAAiB,CAAA;YACnE,sBAAsB,EACpB,IAAI,CAAC,MAAM,CAAC,sBAAsB;iBAClC,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,6BAA6B,CAAA;YACzC,mBAAmB,EAAE,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,qBAAqB,KAAI,EAAE;YAC1D,uBAAuB;SACxB,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,QAAoC;QAC3D,MAAM,cAAc,GAAwB;YAC1C,EAAE,EAAE,eAAe;YACnB,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,OAAO,EAAE,QAAQ,CAAC,OAAQ;YAC1B,QAAQ,EAAE,QAAQ,CAAC,QAAS;YAC5B,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACpC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,aAAa;YACzC,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,MAAM;YACpB,SAAS,EAAE,oBAAoB;YAC/B,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB;YACzD,mBAAmB,EAAE,KAAK;SAC3B,CAAC;QAEF,OAAO,IAAI,oBAAW,CAAC,cAAc,CAAC,CAAC;IACzC,CAAC;IAEO,qBAAqB,CAC3B,QAAoC;QAEpC,OAAO,IAAI,4CAAuB,CAAC;YACjC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,QAAQ,EAAE,QAAQ,CAAC,QAAS;YAC5B,sBAAsB,EAAE,QAAQ,CAAC,sBAAuB;YACxD,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,aAAa;YACzC,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB;SAC1D,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,gBAAgB;QAC5B,IACE,IAAI,CAAC,cAAc;YACnB,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,GAAG,sBAAsB,EACpE,CAAC;YACD,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;QACtC,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAE9C,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,4CAA4C,YAAY,EAAE,CAAC,CAAC;gBACxE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC;gBAC3C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,CAAC,IAAI,CACT,+CAA+C,YAAY,KAAK,QAAQ,CAAC,MAAM,EAAE,CAClF,CAAC;oBACF,SAAS;gBACX,CAAC;gBAED,MAAM,QAAQ,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAsB,CAAC;gBAC9D,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;oBAChD,YAAY,EAAE,YAAY;oBAC1B,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,QAAQ,CAAC,sBAAsB;oBACpE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,cAAc;oBACzD,WAAW,EACT,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,QAAQ,CAAC,iBAAiB,IAAI,IAAI;oBAC/D,sBAAsB,EACpB,IAAI,CAAC,MAAM,CAAC,sBAAsB;wBAClC,QAAQ,CAAC,6BAA6B;wBACtC,IAAI;oBACN,oBAAoB,EAAE,QAAQ,CAAC,qBAAqB,IAAI,IAAI;iBAC7D,CAAC,CAAC;gBACH,IAAI,CAAC,cAAc,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC3D,OAAO,QAAQ,CAAC;YAClB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;oBACxD,YAAY,EAAE,YAAY;oBAC1B,KAAK;iBACN,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,CAAC,cAAc,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,gBAAgB;QACtB,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,CAAC,GAAG,gBAAgB,mCAAmC,CAAC,CAAC;QAE5E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC;YAChD,MAAM,gBAAgB,GAAG,GAAG,MAAM,mCAAmC,CAAC;YACtE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC3C,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAAC,WAAM,CAAC;YACP,sEAAsE;QACxE,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,2BAA2B,CACvC,QAAkC,EAClC,OAAyC;;QAEzC,IAAI,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,iBAAiB,CAAA,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,0BAA0B,EAAE,CAAC;YACvD,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,qBAAqB,CAAA,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,iBAAiB,CAAA,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACxD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,mBAAmB,GAAG,IAAI,CAAC,6BAA6B,CAC5D,QAAQ,CAAC,qCAAqC,EAC9C,SAAS,CACV,CAAC;YACF,MAAM,mBAAmB,GACvB,CAAC,CAAC,QAAQ,CAAC,6BAA6B;iBACxC,MAAA,QAAQ,CAAC,qBAAqB,0CAAE,QAAQ,CAAC,2CAAsB,CAAC,CAAA,CAAC;YAEnE,MAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE;gBAC1D,oBAAoB,EAAE,QAAQ,CAAC,qBAAqB;gBACpD,mBAAmB;gBACnB,mBAAmB;aACpB,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,qBAAqB,EAAE;gBAC3D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,MAAM,EAAE,kBAAkB;oBAC1B,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,WAAW,EAAE,uBAAuB;oBACpC,aAAa,EAAE;wBACb,IAAI,CAAC,MAAM,CAAC,WAAW;wBACvB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,IAAI,EAAE,CAAC;qBAC9C,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;oBACzC,WAAW,EAAE,mBAAmB;wBAC9B,CAAC,CAAC,CAAC,oBAAoB,EAAE,eAAe,EAAE,2CAAsB,CAAC;wBACjE,CAAC,CAAC,CAAC,oBAAoB,EAAE,eAAe,CAAC;oBAC3C,cAAc,EAAE,CAAC,MAAM,CAAC;oBACxB,0BAA0B,EAAE,mBAAmB;iBAChD,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE;oBACtD,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,SAAS;iBACV,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,WAAW,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA6B,CAAC;YACxE,MAAM,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;YAC/C,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE;gBAC7C,QAAQ,EAAE,WAAW,CAAC,SAAS;gBAC/B,uBAAuB,EACrB,WAAW,CAAC,0BAA0B,IAAI,mBAAmB;aAChE,CAAC,CAAC;YACH,OAAO,WAAW,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,0BAA0B;QACtC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACtE,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAA6B,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACrE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAClC,WAAqC;QAErC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GACd,WAAW,CAAC,wBAAwB;YACpC,WAAW,CAAC,wBAAwB,GAAG,CAAC;YACtC,CAAC,CAAC,IAAI,CAAC,GAAG,CACN,EAAE,EACF,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,wBAAwB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CACrE;YACH,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;QAEvB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAC9B,uBAAuB,EACvB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAC3B,UAAU,CACX,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAEO,6BAA6B,CACnC,gBAAsC,EACtC,YAAqB;QAErB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;QAEhD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9C,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBACtC,OAAO,oBAAoB,CAAC;YAC9B,CAAC;YACD,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBACvC,OAAO,qBAAqB,CAAC;YAC/B,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACtC,OAAO,oBAAoB,CAAC;QAC9B,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACvC,OAAO,qBAAqB,CAAC;QAC/B,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,OAAO,oBAAoB,CAAC;IAC9B,CAAC;CACF;AA9cD,gDA8cC"}

package/dist/auth/external/device-code-client.d.ts

@@ -0,0 +1,41 @@
+import { BaseOAuth2Client } from "../oauth/base-client";
+import type { OAuthCredentials } from "../oauth/credentials";
+export declare const DEVICE_CODE_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:device_code";
+export interface DeviceCodeClientConfig {
+    clientId: string;
+    clientSecret?: string;
+    tokenUrl: string;
+    deviceAuthorizationUrl: string;
+    scope: string;
+    tokenEndpointAuthMethod?: "none" | "client_secret_post" | "client_secret_basic";
+}
+export interface DeviceAuthorizationStartResult {
+    deviceAuthId: string;
+    userCode: string;
+    verificationUri: string;
+    verificationUriComplete?: string;
+    interval: number;
+    expiresIn: number;
+}
+export type DeviceAuthorizationPollResult = {
+    status: "pending";
+    interval?: number;
+} | {
+    status: "complete";
+    credentials: OAuthCredentials;
+} | {
+    status: "error";
+    error: string;
+    errorCode?: string;
+};
+export declare class GenericDeviceCodeClient extends BaseOAuth2Client {
+    private readonly config;
+    constructor(config: DeviceCodeClientConfig);
+    requestDeviceCode(): Promise<DeviceAuthorizationStartResult>;
+    pollForToken(deviceAuthId: string, intervalSeconds?: number): Promise<DeviceAuthorizationPollResult>;
+    private buildCredentials;
+    private buildAuthenticatedFormBody;
+    private parseJsonResponse;
+    private formatOAuthError;
+}
+//# sourceMappingURL=device-code-client.d.ts.map

package/dist/auth/external/device-code-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-code-client.d.ts","sourceRoot":"","sources":["../../../src/auth/external/device-code-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,eAAO,MAAM,sBAAsB,iDACa,CAAC;AAEjD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,uBAAuB,CAAC,EACpB,MAAM,GACN,oBAAoB,GACpB,qBAAqB,CAAC;CAC3B;AAED,MAAM,WAAW,8BAA8B;IAC7C,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,6BAA6B,GACrC;IACE,MAAM,EAAE,SAAS,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GACD;IACE,MAAM,EAAE,UAAU,CAAC;IACnB,WAAW,EAAE,gBAAgB,CAAC;CAC/B,GACD;IACE,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAwBN,qBAAa,uBAAwB,SAAQ,gBAAgB;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,sBAAsB;IAIrD,iBAAiB,IAAI,OAAO,CAAC,8BAA8B,CAAC;IAgC5D,YAAY,CAChB,YAAY,EAAE,MAAM,EACpB,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,6BAA6B,CAAC;IAiDzC,OAAO,CAAC,gBAAgB;IAaxB,OAAO,CAAC,0BAA0B;YAyBpB,iBAAiB;IAc/B,OAAO,CAAC,gBAAgB;CAmBzB"}

package/dist/auth/external/device-code-client.js

@@ -0,0 +1,128 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GenericDeviceCodeClient = exports.DEVICE_CODE_GRANT_TYPE = void 0;
+const base_client_1 = require("../oauth/base-client");
+exports.DEVICE_CODE_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:device_code";
+class GenericDeviceCodeClient extends base_client_1.BaseOAuth2Client {
+    constructor(config) {
+        super("external-device-code-client");
+        this.config = config;
+    }
+    async requestDeviceCode() {
+        var _a;
+        const { headers, body } = this.buildAuthenticatedFormBody({
+            client_id: this.config.clientId,
+            scope: this.config.scope,
+        });
+        const response = await fetch(this.config.deviceAuthorizationUrl, {
+            method: "POST",
+            headers,
+            body: body.toString(),
+        });
+        const data = await this.parseJsonResponse(response);
+        if (!response.ok || "error" in data) {
+            throw new Error(this.formatOAuthError("Device authorization failed", data));
+        }
+        return {
+            deviceAuthId: data.device_code,
+            userCode: data.user_code,
+            verificationUri: data.verification_uri,
+            verificationUriComplete: data.verification_uri_complete,
+            interval: Math.max((_a = data.interval) !== null && _a !== void 0 ? _a : 5, 1),
+            expiresIn: data.expires_in,
+        };
+    }
+    async pollForToken(deviceAuthId, intervalSeconds) {
+        const { headers, body } = this.buildAuthenticatedFormBody({
+            grant_type: exports.DEVICE_CODE_GRANT_TYPE,
+            device_code: deviceAuthId,
+            client_id: this.config.clientId,
+        });
+        const response = await fetch(this.config.tokenUrl, {
+            method: "POST",
+            headers,
+            body: body.toString(),
+        });
+        const data = await this.parseJsonResponse(response);
+        if (!response.ok || "error" in data) {
+            if ("error" in data) {
+                if (data.error === "authorization_pending") {
+                    return { status: "pending", interval: intervalSeconds };
+                }
+                if (data.error === "slow_down") {
+                    return {
+                        status: "pending",
+                        interval: Math.max((intervalSeconds !== null && intervalSeconds !== void 0 ? intervalSeconds : 5) + 5, 1),
+                    };
+                }
+                if (data.error === "expired_token" || data.error === "access_denied") {
+                    return {
+                        status: "error",
+                        error: data.error_description || data.error,
+                        errorCode: data.error,
+                    };
+                }
+            }
+            throw new Error(this.formatOAuthError("Device token polling failed", data));
+        }
+        const credentials = this.buildCredentials(data);
+        return {
+            status: "complete",
+            credentials,
+        };
+    }
+    buildCredentials(tokenData) {
+        var _a;
+        return {
+            accessToken: tokenData.access_token,
+            refreshToken: tokenData.refresh_token,
+            tokenType: tokenData.token_type || "Bearer",
+            expiresAt: (_a = this.calculateExpiresAt(tokenData.expires_in)) !== null && _a !== void 0 ? _a : Date.now() + 3600000,
+            scopes: this.parseScopes(tokenData.scope),
+        };
+    }
+    buildAuthenticatedFormBody(params) {
+        const body = new URLSearchParams(params);
+        const headers = {
+            Accept: "application/json",
+            "Content-Type": "application/x-www-form-urlencoded",
+        };
+        const authMethod = this.config.tokenEndpointAuthMethod || "none";
+        if (authMethod === "client_secret_basic") {
+            headers.Authorization = `Basic ${Buffer.from(`${this.config.clientId}:${this.config.clientSecret || ""}`).toString("base64")}`;
+        }
+        else if (authMethod === "client_secret_post" &&
+            this.config.clientSecret) {
+            body.set("client_secret", this.config.clientSecret);
+        }
+        return { headers, body };
+    }
+    async parseJsonResponse(response) {
+        const contentType = response.headers.get("content-type") || "";
+        if (contentType.includes("application/json")) {
+            return (await response.json());
+        }
+        const text = await response.text();
+        try {
+            return JSON.parse(text);
+        }
+        catch (_a) {
+            return { error: text || response.statusText };
+        }
+    }
+    formatOAuthError(prefix, data) {
+        if (data && typeof data === "object" && "error" in data) {
+            const record = data;
+            const error = typeof record.error === "string" ? record.error : "unknown_error";
+            const description = typeof record.error_description === "string"
+                ? record.error_description
+                : undefined;
+            return description
+                ? `${prefix}: ${error} - ${description}`
+                : `${prefix}: ${error}`;
+        }
+        return prefix;
+    }
+}
+exports.GenericDeviceCodeClient = GenericDeviceCodeClient;
+//# sourceMappingURL=device-code-client.js.map

package/dist/auth/external/device-code-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-code-client.js","sourceRoot":"","sources":["../../../src/auth/external/device-code-client.ts"],"names":[],"mappings":";;;AAAA,sDAAwD;AAG3C,QAAA,sBAAsB,GACjC,8CAA8C,CAAC;AA4DjD,MAAa,uBAAwB,SAAQ,8BAAgB;IAC3D,YAA6B,MAA8B;QACzD,KAAK,CAAC,6BAA6B,CAAC,CAAC;QADV,WAAM,GAAN,MAAM,CAAwB;IAE3D,CAAC;IAED,KAAK,CAAC,iBAAiB;;QACrB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,0BAA0B,CAAC;YACxD,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;SACzB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE;YAC/D,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;SACtB,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAEvC,QAAQ,CAAC,CAAC;QAEZ,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,IAAI,CAAC,gBAAgB,CAAC,6BAA6B,EAAE,IAAI,CAAC,CAC3D,CAAC;QACJ,CAAC;QAED,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,WAAW;YAC9B,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,eAAe,EAAE,IAAI,CAAC,gBAAgB;YACtC,uBAAuB,EAAE,IAAI,CAAC,yBAAyB;YACvD,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,MAAA,IAAI,CAAC,QAAQ,mCAAI,CAAC,EAAE,CAAC,CAAC;YACzC,SAAS,EAAE,IAAI,CAAC,UAAU;SAC3B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,YAAoB,EACpB,eAAwB;QAExB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,0BAA0B,CAAC;YACxD,UAAU,EAAE,8BAAsB;YAClC,WAAW,EAAE,YAAY;YACzB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;SAChC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;YACjD,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;SACtB,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAEvC,QAAQ,CAAC,CAAC;QAEZ,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACpC,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;gBACpB,IAAI,IAAI,CAAC,KAAK,KAAK,uBAAuB,EAAE,CAAC;oBAC3C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC;gBAC1D,CAAC;gBACD,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;oBAC/B,OAAO;wBACL,MAAM,EAAE,SAAS;wBACjB,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,eAAe,aAAf,eAAe,cAAf,eAAe,GAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;qBAClD,CAAC;gBACJ,CAAC;gBACD,IAAI,IAAI,CAAC,KAAK,KAAK,eAAe,IAAI,IAAI,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;oBACrE,OAAO;wBACL,MAAM,EAAE,OAAO;wBACf,KAAK,EAAE,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,KAAK;wBAC3C,SAAS,EAAE,IAAI,CAAC,KAAK;qBACtB,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,MAAM,IAAI,KAAK,CACb,IAAI,CAAC,gBAAgB,CAAC,6BAA6B,EAAE,IAAI,CAAC,CAC3D,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,WAAW;SACZ,CAAC;IACJ,CAAC;IAEO,gBAAgB,CACtB,SAAqC;;QAErC,OAAO;YACL,WAAW,EAAE,SAAS,CAAC,YAAY;YACnC,YAAY,EAAE,SAAS,CAAC,aAAa;YACrC,SAAS,EAAE,SAAS,CAAC,UAAU,IAAI,QAAQ;YAC3C,SAAS,EACP,MAAA,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,UAAU,CAAC,mCAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAS;YACzE,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC;SAC1C,CAAC;IACJ,CAAC;IAEO,0BAA0B,CAAC,MAA8B;QAI/D,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,OAAO,GAA2B;YACtC,MAAM,EAAE,kBAAkB;YAC1B,cAAc,EAAE,mCAAmC;SACpD,CAAC;QACF,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,uBAAuB,IAAI,MAAM,CAAC;QAEjE,IAAI,UAAU,KAAK,qBAAqB,EAAE,CAAC;YACzC,OAAO,CAAC,aAAa,GAAG,SAAS,MAAM,CAAC,IAAI,CAC1C,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,EAAE,CAC5D,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,CAAC;aAAM,IACL,UAAU,KAAK,oBAAoB;YACnC,IAAI,CAAC,MAAM,CAAC,YAAY,EACxB,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACtD,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAI,QAAkB;QACnD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAC/D,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC7C,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;QACtC,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;QAC/B,CAAC;QAAC,WAAM,CAAC;YACP,OAAO,EAAE,KAAK,EAAE,IAAI,IAAI,QAAQ,CAAC,UAAU,EAAO,CAAC;QACrD,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,MAAc,EAAE,IAAa;QACpD,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACxD,MAAM,MAAM,GAAG,IAGd,CAAC;YACF,MAAM,KAAK,GACT,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC;YACpE,MAAM,WAAW,GACf,OAAO,MAAM,CAAC,iBAAiB,KAAK,QAAQ;gBAC1C,CAAC,CAAC,MAAM,CAAC,iBAAiB;gBAC1B,CAAC,CAAC,SAAS,CAAC;YAChB,OAAO,WAAW;gBAChB,CAAC,CAAC,GAAG,MAAM,KAAK,KAAK,MAAM,WAAW,EAAE;gBACxC,CAAC,CAAC,GAAG,MAAM,KAAK,KAAK,EAAE,CAAC;QAC5B,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAhKD,0DAgKC"}

package/dist/auth/mcp/config-service.d.ts

@@ -0,0 +1,70 @@
+import type { SystemConfigResolver } from "../../services/system-config-resolver";
+import type { AgentSettingsStore } from "../settings/agent-settings-store";
+interface McpInput {
+    type: "promptString";
+    id: string;
+    description: string;
+}
+interface HttpMcpServerConfig {
+    id: string;
+    upstreamUrl: string;
+    oauth?: unknown;
+    inputs?: McpInput[];
+    headers?: Record<string, string>;
+    loginUrl?: string;
+    resource?: string;
+}
+interface WorkerMcpConfig {
+    mcpServers: Record<string, any>;
+}
+interface McpStatus {
+    id: string;
+    name: string;
+    requiresAuth: boolean;
+    requiresInput: boolean;
+}
+interface McpConfigServiceOptions {
+    agentSettingsStore?: AgentSettingsStore;
+    configResolver?: SystemConfigResolver;
+}
+export declare class McpConfigService {
+    private cache?;
+    private agentSettingsStore?;
+    private configResolver?;
+    constructor(options?: McpConfigServiceOptions);
+    /**
+     * Register additional global MCP servers (e.g. from system skills).
+     */
+    registerGlobalServers(servers: Record<string, any>): void;
+    /**
+     * Return MCP config tailored for a worker request.
+     */
+    getWorkerConfig(options: {
+        baseUrl: string;
+        workerToken: string;
+        deploymentName?: string;
+    }): Promise<WorkerMcpConfig>;
+    /**
+     * Get status of all MCPs for a specific agent
+     */
+    getMcpStatus(agentId: string): Promise<McpStatus[]>;
+    /**
+     * Get HTTP proxy metadata for a specific MCP server.
+     */
+    getHttpServer(id: string, agentId?: string): Promise<HttpMcpServerConfig | undefined>;
+    /**
+     * Get all HTTP proxy metadata for all MCP servers.
+     */
+    getAllHttpServers(agentId?: string): Promise<Map<string, HttpMcpServerConfig>>;
+    /**
+     * Return global MCP server configs in settings-compatible format.
+     */
+    getGlobalMcpServers(): Promise<Record<string, {
+        url?: string;
+        type?: "sse" | "stdio";
+    }>>;
+    private getAgentMcpServers;
+    private loadConfig;
+}
+export {};
+//# sourceMappingURL=config-service.d.ts.map

package/dist/auth/mcp/config-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-service.d.ts","sourceRoot":"","sources":["../../../src/auth/mcp/config-service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAI3E,UAAU,QAAQ;IAChB,IAAI,EAAE,cAAc,CAAC;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,mBAAmB;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,eAAe;IACvB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CACjC;AAED,UAAU,SAAS;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,OAAO,CAAC;CACxB;AAOD,UAAU,uBAAuB;IAC/B,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,cAAc,CAAC,EAAE,oBAAoB,CAAC;CACvC;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,KAAK,CAAC,CAAe;IAC7B,OAAO,CAAC,kBAAkB,CAAC,CAAqB;IAChD,OAAO,CAAC,cAAc,CAAC,CAAuB;gBAElC,OAAO,GAAE,uBAA4B;IAMjD;;OAEG;IACH,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI;IAuBzD;;OAEG;IACG,eAAe,CAAC,OAAO,EAAE;QAC7B,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC,eAAe,CAAC;IAyF5B;;OAEG;IACG,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAuBzD;;OAEG;IACG,aAAa,CACjB,EAAE,EAAE,MAAM,EACV,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC;IAK3C;;OAEG;IACG,iBAAiB,CACrB,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAkB5C;;OAEG;IACG,mBAAmB,IAAI,OAAO,CAClC,MAAM,CAAC,MAAM,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,KAAK,GAAG,OAAO,CAAA;KAAE,CAAC,CACzD;YAUa,kBAAkB;YAkBlB,UAAU;CAWzB"}

package/dist/auth/mcp/config-service.js

@@ -0,0 +1,269 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpConfigService = void 0;
+const core_1 = require("@lobu/core");
+const logger = (0, core_1.createLogger)("mcp-config-service");
+class McpConfigService {
+    constructor(options = {}) {
+        this.agentSettingsStore = options.agentSettingsStore;
+        this.configResolver = options.configResolver;
+        logger.debug(`McpConfigService initialized`);
+    }
+    /**
+     * Register additional global MCP servers (e.g. from system skills).
+     */
+    registerGlobalServers(servers) {
+        if (!this.cache) {
+            this.cache = {
+                rawServers: {},
+                httpServers: new Map(),
+            };
+        }
+        const normalized = normalizeConfig({ mcpServers: servers });
+        for (const [id, raw] of Object.entries(normalized.rawServers)) {
+            if (this.cache.rawServers[id])
+                continue;
+            this.cache.rawServers[id] = raw;
+        }
+        for (const [id, http] of normalized.httpServers) {
+            if (this.cache.httpServers.has(id))
+                continue;
+            this.cache.httpServers.set(id, http);
+        }
+        logger.info(`Registered ${Object.keys(servers).length} global MCP(s) from system skills: ${Object.keys(servers).join(", ")}`);
+    }
+    /**
+     * Return MCP config tailored for a worker request.
+     */
+    async getWorkerConfig(options) {
+        const { baseUrl, workerToken } = options;
+        const config = await this.loadConfig();
+        const workerConfig = { mcpServers: {} };
+        const tokenData = (0, core_1.verifyWorkerToken)(workerToken);
+        if (!tokenData) {
+            logger.warn("Failed to verify worker token");
+            return workerConfig;
+        }
+        const { userId, agentId } = tokenData;
+        const effectiveAgentId = agentId || userId;
+        logger.info(`Building MCP config for user ${userId}`);
+        // Process global MCPs
+        for (const [id, serverConfig] of Object.entries(config.rawServers)) {
+            const cloned = cloneConfig(serverConfig);
+            const httpServer = config.httpServers.get(id);
+            if (httpServer) {
+                logger.info(`Configuring global MCP ${id}: baseUrl=${baseUrl}`);
+                cloned.url = baseUrl;
+                cloned.type = "sse";
+                cloned.headers = mergeHeaders(cloned.headers, workerToken, id);
+                logger.info(`Including global MCP ${id} with URL=${cloned.url} and X-Mcp-Id header`);
+            }
+            workerConfig.mcpServers[id] = cloned;
+        }
+        // Merge per-agent MCPs from live agent settings
+        const agentSettingsMcpServers = (await this.getAgentMcpServers(effectiveAgentId)) || {};
+        for (const [id, serverConfig] of Object.entries(agentSettingsMcpServers)) {
+            if (workerConfig.mcpServers[id]) {
+                logger.warn(`Per-agent MCP ${id} skipped - global MCP with same ID exists`);
+                continue;
+            }
+            const cloned = cloneConfig(serverConfig);
+            if (cloned.enabled === false) {
+                logger.debug(`Skipping disabled per-agent MCP ${id}`);
+                continue;
+            }
+            if (cloned.url) {
+                logger.info(`Configuring per-agent HTTP MCP ${id}: baseUrl=${baseUrl}`);
+                cloned.originalUrl = cloned.url;
+                cloned.url = baseUrl;
+                cloned.type = "sse";
+                cloned.headers = mergeHeaders(cloned.headers, workerToken, id);
+                cloned.perAgent = true;
+                logger.info(`Including per-agent HTTP MCP ${id}`);
+            }
+            else if (cloned.command) {
+                logger.info(`Including per-agent stdio MCP ${id}: ${cloned.command}`);
+            }
+            workerConfig.mcpServers[id] = cloned;
+        }
+        if (Object.keys(agentSettingsMcpServers).length > 0) {
+            logger.info(`Merged ${Object.keys(agentSettingsMcpServers).length} per-agent MCPs from settings for agent ${effectiveAgentId}`);
+        }
+        logger.info(`Returning worker config with ${Object.keys(workerConfig.mcpServers).length} MCPs for user ${userId}:`, {
+            mcpIds: Object.keys(workerConfig.mcpServers),
+            configs: Object.entries(workerConfig.mcpServers).map(([id, cfg]) => ({
+                id,
+                type: cfg.type,
+                hasUrl: !!cfg.url,
+                hasCommand: !!cfg.command,
+                perAgent: cfg.perAgent || false,
+            })),
+        });
+        return workerConfig;
+    }
+    /**
+     * Get status of all MCPs for a specific agent
+     */
+    async getMcpStatus(agentId) {
+        const httpServers = await this.getAllHttpServers(agentId);
+        const statuses = [];
+        for (const [id, httpServer] of httpServers) {
+            const hasOAuth = !!httpServer.oauth;
+            const hasLoginUrl = !!httpServer.loginUrl;
+            const requiresAuth = hasOAuth || hasLoginUrl;
+            const requiresInput = !!(httpServer.inputs && httpServer.inputs.length > 0);
+            statuses.push({
+                id,
+                name: id,
+                requiresAuth,
+                requiresInput,
+            });
+        }
+        return statuses;
+    }
+    /**
+     * Get HTTP proxy metadata for a specific MCP server.
+     */
+    async getHttpServer(id, agentId) {
+        const httpServers = await this.getAllHttpServers(agentId);
+        return httpServers.get(id);
+    }
+    /**
+     * Get all HTTP proxy metadata for all MCP servers.
+     */
+    async getAllHttpServers(agentId) {
+        const config = await this.loadConfig();
+        const merged = new Map(config.httpServers);
+        if (agentId) {
+            const agentMcpServers = await this.getAgentMcpServers(agentId);
+            for (const [id, serverConfig] of Object.entries(agentMcpServers)) {
+                if (merged.has(id))
+                    continue;
+                const httpServer = toHttpServerConfig(id, serverConfig);
+                if (httpServer) {
+                    merged.set(id, httpServer);
+                }
+            }
+        }
+        return merged;
+    }
+    /**
+     * Return global MCP server configs in settings-compatible format.
+     */
+    async getGlobalMcpServers() {
+        const config = await this.loadConfig();
+        const result = {};
+        for (const [id, raw] of Object.entries(config.rawServers)) {
+            const type = raw.type === "stdio" ? "stdio" : "sse";
+            result[id] = { url: raw.url, type };
+        }
+        return result;
+    }
+    async getAgentMcpServers(agentId) {
+        if (!this.agentSettingsStore) {
+            return {};
+        }
+        try {
+            const settings = await this.agentSettingsStore.getSettings(agentId);
+            return (settings === null || settings === void 0 ? void 0 : settings.mcpServers) || {};
+        }
+        catch (error) {
+            logger.warn(`Failed to load per-agent MCP settings for ${agentId}`, {
+                error,
+            });
+            return {};
+        }
+    }
+    async loadConfig() {
+        if (!this.cache) {
+            let globalMcpServers = {};
+            if (this.configResolver) {
+                globalMcpServers = await this.configResolver.getGlobalMcpServers();
+            }
+            const normalized = normalizeConfig({ mcpServers: globalMcpServers });
+            this.cache = normalized;
+        }
+        return this.cache;
+    }
+}
+exports.McpConfigService = McpConfigService;
+function normalizeConfig(config) {
+    const rawServers = {};
+    const httpServers = new Map();
+    for (const [id, serverConfig] of Object.entries(config.mcpServers)) {
+        if (!serverConfig || typeof serverConfig !== "object") {
+            continue;
+        }
+        const cloned = cloneConfig(serverConfig);
+        rawServers[id] = cloned;
+        if (typeof cloned.url === "string" && isHttpUrl(cloned.url)) {
+            httpServers.set(id, {
+                id,
+                upstreamUrl: cloned.url,
+                oauth: cloned.oauth && typeof cloned.oauth === "object"
+                    ? cloned.oauth
+                    : undefined,
+                inputs: Array.isArray(cloned.inputs)
+                    ? cloned.inputs.filter((input) => input &&
+                        typeof input === "object" &&
+                        input.type === "promptString")
+                    : undefined,
+                headers: cloned.headers && typeof cloned.headers === "object"
+                    ? cloned.headers
+                    : undefined,
+                loginUrl: typeof cloned.loginUrl === "string" ? cloned.loginUrl : undefined,
+                resource: typeof cloned.resource === "string" ? cloned.resource : undefined,
+            });
+        }
+    }
+    return { rawServers, httpServers };
+}
+function toHttpServerConfig(id, serverConfig) {
+    if (!serverConfig || typeof serverConfig !== "object") {
+        return null;
+    }
+    if (serverConfig.enabled === false) {
+        return null;
+    }
+    const cloned = cloneConfig(serverConfig);
+    if (typeof cloned.url !== "string" || !isHttpUrl(cloned.url)) {
+        return null;
+    }
+    return {
+        id,
+        upstreamUrl: cloned.url,
+        oauth: cloned.oauth && typeof cloned.oauth === "object"
+            ? cloned.oauth
+            : undefined,
+        inputs: Array.isArray(cloned.inputs)
+            ? cloned.inputs.filter((input) => input && typeof input === "object" && input.type === "promptString")
+            : undefined,
+        headers: cloned.headers && typeof cloned.headers === "object"
+            ? cloned.headers
+            : undefined,
+        loginUrl: typeof cloned.loginUrl === "string" ? cloned.loginUrl : undefined,
+    };
+}
+function cloneConfig(config) {
+    return JSON.parse(JSON.stringify(config));
+}
+function isHttpUrl(candidate) {
+    return candidate.startsWith("http://") || candidate.startsWith("https://");
+}
+function mergeHeaders(existingHeaders, workerToken, mcpId) {
+    const normalized = {};
+    if (existingHeaders && typeof existingHeaders === "object") {
+        for (const [key, value] of Object.entries(existingHeaders)) {
+            if (typeof value === "string") {
+                normalized[key] = value;
+            }
+            else if (value != null) {
+                normalized[key] = String(value);
+            }
+        }
+    }
+    normalized.Authorization = `Bearer ${workerToken}`;
+    normalized["X-Mcp-Id"] = mcpId;
+    return normalized;
+}
+//# sourceMappingURL=config-service.js.map

package/dist/auth/mcp/config-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-service.js","sourceRoot":"","sources":["../../../src/auth/mcp/config-service.ts"],"names":[],"mappings":";;;AAAA,qCAA6D;AAI7D,MAAM,MAAM,GAAG,IAAA,mBAAY,EAAC,oBAAoB,CAAC,CAAC;AAuClD,MAAa,gBAAgB;IAK3B,YAAY,UAAmC,EAAE;QAC/C,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC;QACrD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,OAA4B;QAChD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,KAAK,GAAG;gBACX,UAAU,EAAE,EAAE;gBACd,WAAW,EAAE,IAAI,GAAG,EAAE;aACvB,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,eAAe,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5D,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9D,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;gBAAE,SAAS;YACxC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC;QAClC,CAAC;QACD,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;YAChD,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,SAAS;YAC7C,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,CAAC,IAAI,CACT,cAAc,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,sCAAsC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjH,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,OAIrB;QACC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACvC,MAAM,YAAY,GAAoB,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QAEzD,MAAM,SAAS,GAAG,IAAA,wBAAiB,EAAC,WAAW,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC7C,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC;QACtC,MAAM,gBAAgB,GAAG,OAAO,IAAI,MAAM,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,gCAAgC,MAAM,EAAE,CAAC,CAAC;QAEtD,sBAAsB;QACtB,KAAK,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YACnE,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;YACzC,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAE9C,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,aAAa,OAAO,EAAE,CAAC,CAAC;gBAChE,MAAM,CAAC,GAAG,GAAG,OAAO,CAAC;gBACrB,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC;gBACpB,MAAM,CAAC,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;gBAC/D,MAAM,CAAC,IAAI,CACT,wBAAwB,EAAE,aAAa,MAAM,CAAC,GAAG,sBAAsB,CACxE,CAAC;YACJ,CAAC;YAED,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;QACvC,CAAC;QAED,gDAAgD;QAChD,MAAM,uBAAuB,GAC3B,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1D,KAAK,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,CAAC;YACzE,IAAI,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;gBAChC,MAAM,CAAC,IAAI,CACT,iBAAiB,EAAE,2CAA2C,CAC/D,CAAC;gBACF,SAAS;YACX,CAAC;YAED,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;YAEzC,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;gBAC7B,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;gBACtD,SAAS;YACX,CAAC;YAED,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,aAAa,OAAO,EAAE,CAAC,CAAC;gBACxE,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC;gBAChC,MAAM,CAAC,GAAG,GAAG,OAAO,CAAC;gBACrB,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC;gBACpB,MAAM,CAAC,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;gBAC/D,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACvB,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE,EAAE,CAAC,CAAC;YACpD,CAAC;iBAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YACxE,CAAC;YAED,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;QACvC,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpD,MAAM,CAAC,IAAI,CACT,UAAU,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,MAAM,2CAA2C,gBAAgB,EAAE,CACnH,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,IAAI,CACT,gCAAgC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,MAAM,kBAAkB,MAAM,GAAG,EACtG;YACE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC;YAC5C,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;gBACnE,EAAE;gBACF,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG;gBACjB,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO;gBACzB,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,KAAK;aAChC,CAAC,CAAC;SACJ,CACF,CAAC;QAEF,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,OAAe;QAChC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAgB,EAAE,CAAC;QAEjC,KAAK,MAAM,CAAC,EAAE,EAAE,UAAU,CAAC,IAAI,WAAW,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;YACpC,MAAM,WAAW,GAAG,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC;YAC1C,MAAM,YAAY,GAAG,QAAQ,IAAI,WAAW,CAAC;YAC7C,MAAM,aAAa,GAAG,CAAC,CAAC,CACtB,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAClD,CAAC;YAEF,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE;gBACF,IAAI,EAAE,EAAE;gBACR,YAAY;gBACZ,aAAa;aACd,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,EAAU,EACV,OAAgB;QAEhB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC1D,OAAO,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CACrB,OAAgB;QAEhB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAE3C,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAC/D,KAAK,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;gBACjE,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAC7B,MAAM,UAAU,GAAG,kBAAkB,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;gBACxD,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB;QAGvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACvC,MAAM,MAAM,GAA6D,EAAE,CAAC;QAC5E,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAE,OAAiB,CAAC,CAAC,CAAE,KAAe,CAAC;YAC1E,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QACtC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,OAAe;QAEf,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACpE,OAAO,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,UAAU,KAAI,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,6CAA6C,OAAO,EAAE,EAAE;gBAClE,KAAK;aACN,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,gBAAgB,GAAwB,EAAE,CAAC;YAC/C,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxB,gBAAgB,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,mBAAmB,EAAE,CAAC;YACrE,CAAC;YACD,MAAM,UAAU,GAAG,eAAe,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC;YACrE,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;CACF;AA7OD,4CA6OC;AAED,SAAS,eAAe,CAAC,MAA2C;IAClE,MAAM,UAAU,GAAwB,EAAE,CAAC;IAC3C,MAAM,WAAW,GAAG,IAAI,GAAG,EAA+B,CAAC;IAE3D,KAAK,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QACnE,IAAI,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;YACtD,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;QACzC,UAAU,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;QAExB,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5D,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE;gBAClB,EAAE;gBACF,WAAW,EAAE,MAAM,CAAC,GAAG;gBACvB,KAAK,EACH,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;oBAC9C,CAAC,CAAC,MAAM,CAAC,KAAK;oBACd,CAAC,CAAC,SAAS;gBACf,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;oBAClC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAClB,CAAC,KAAU,EAAE,EAAE,CACb,KAAK;wBACL,OAAO,KAAK,KAAK,QAAQ;wBACzB,KAAK,CAAC,IAAI,KAAK,cAAc,CAChC;oBACH,CAAC,CAAC,SAAS;gBACb,OAAO,EACL,MAAM,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;oBAClD,CAAC,CAAC,MAAM,CAAC,OAAO;oBAChB,CAAC,CAAC,SAAS;gBACf,QAAQ,EACN,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;gBACnE,QAAQ,EACN,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;aACpE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,kBAAkB,CACzB,EAAU,EACV,YAAiB;IAEjB,IAAI,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,YAAY,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;IACzC,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,EAAE;QACF,WAAW,EAAE,MAAM,CAAC,GAAG;QACvB,KAAK,EACH,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;YAC9C,CAAC,CAAC,MAAM,CAAC,KAAK;YACd,CAAC,CAAC,SAAS;QACf,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YAClC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAClB,CAAC,KAAU,EAAE,EAAE,CACb,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CACtE;YACH,CAAC,CAAC,SAAS;QACb,OAAO,EACL,MAAM,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;YAClD,CAAC,CAAC,MAAM,CAAC,OAAO;YAChB,CAAC,CAAC,SAAS;QACf,QAAQ,EAAE,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;KAC5E,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,MAAW;IAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,SAAS,CAAC,SAAiB;IAClC,OAAO,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,YAAY,CACnB,eAAwB,EACxB,WAAmB,EACnB,KAAa;IAEb,MAAM,UAAU,GAA2B,EAAE,CAAC;IAE9C,IAAI,eAAe,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;QAC3D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAsB,CAAC,EAAE,CAAC;YAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC1B,CAAC;iBAAM,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;gBACzB,UAAU,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAED,UAAU,CAAC,aAAa,GAAG,UAAU,WAAW,EAAE,CAAC;IACnD,UAAU,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;IAC/B,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/auth/mcp/proxy.d.ts

@@ -0,0 +1,68 @@
+import type { Context } from "hono";
+import { Hono } from "hono";
+import type { IMessageQueue } from "../../infrastructure/queue";
+import type { GrantStore } from "../../permissions/grant-store";
+import type { McpTool, McpToolCache } from "./tool-cache";
+interface HttpMcpServerConfig {
+    id: string;
+    upstreamUrl: string;
+    oauth?: unknown;
+    inputs?: unknown[];
+    headers?: Record<string, string>;
+    loginUrl?: string;
+    resource?: string;
+}
+interface McpConfigSource {
+    getHttpServer(id: string, agentId?: string): Promise<HttpMcpServerConfig | undefined>;
+    getAllHttpServers(agentId?: string): Promise<Map<string, HttpMcpServerConfig>>;
+}
+export declare class McpProxy {
+    private readonly configService;
+    private readonly grantStore?;
+    private readonly SESSION_TTL_SECONDS;
+    private readonly redisClient;
+    private app;
+    private toolCache?;
+    constructor(configService: McpConfigSource, queue: IMessageQueue, toolCache?: McpToolCache, grantStore?: GrantStore | undefined);
+    getApp(): Hono;
+    /**
+     * Check if this request is an MCP proxy request (has X-Mcp-Id header)
+     * Used by gateway to determine if root path requests should be handled by MCP proxy
+     */
+    isMcpRequest(c: Context): boolean;
+    /**
+     * Fetch tools and instructions for a specific MCP server.
+     * Performs MCP initialize handshake first to capture server instructions,
+     * then fetches tool list.
+     */
+    fetchToolsForMcp(mcpId: string, agentId: string, tokenData: any): Promise<{
+        tools: McpTool[];
+        instructions?: string;
+    }>;
+    private setupRoutes;
+    private handleListTools;
+    private handleCallTool;
+    private handleListAllTools;
+    private handleProxyRequest;
+    private getToolAnnotations;
+    private buildUpstreamHeaders;
+    private resolveCredentialToken;
+    private sendUpstreamRequest;
+    private forwardRequest;
+    private getRequestBodyAsText;
+    /**
+     * Re-initialize an MCP session by sending initialize + notifications/initialized.
+     * Called when upstream returns "Server not initialized" (stale session).
+     */
+    private reinitializeSession;
+    /**
+     * Auto-start device-code auth when an MCP upstream returns an auth error.
+     * Returns a user-facing message with the verification URL, or null on failure.
+     */
+    private tryAutoDeviceAuth;
+    private getSession;
+    private setSession;
+    private sendJsonRpcError;
+}
+export {};
+//# sourceMappingURL=proxy.d.ts.map

package/dist/auth/mcp/proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../../src/auth/mcp/proxy.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAEhE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAMhE,OAAO,KAAK,EAAmB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAwE3E,UAAU,mBAAmB;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,eAAe;IACvB,aAAa,CACX,EAAE,EAAE,MAAM,EACV,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAAC;IAC5C,iBAAiB,CACf,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC;CAC9C;AA4BD,qBAAa,QAAQ;IAOjB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAG9B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;IAT9B,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAW;IAC/C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAM;IAClC,OAAO,CAAC,GAAG,CAAO;IAClB,OAAO,CAAC,SAAS,CAAC,CAAe;gBAGd,aAAa,EAAE,eAAe,EAC/C,KAAK,EAAE,aAAa,EACpB,SAAS,CAAC,EAAE,YAAY,EACP,UAAU,CAAC,EAAE,UAAU,YAAA;IAS1C,MAAM,IAAI,IAAI;IAId;;;OAGG;IACH,YAAY,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO;IAIjC;;;;OAIG;IACG,gBAAgB,CACpB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,GAAG,GACb,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA0JvD,OAAO,CAAC,WAAW;YAeL,eAAe;YAmEf,cAAc;YAsLd,kBAAkB;YAgClB,kBAAkB;YAqDlB,kBAAkB;IAwBhC,OAAO,CAAC,oBAAoB;YA6Bd,sBAAsB;YAqCtB,mBAAmB;YA2DnB,cAAc;YAqGd,oBAAoB;IAYlC;;;OAGG;YACW,mBAAmB;IAsDjC;;;OAGG;YACW,iBAAiB;YAiDjB,UAAU;YAaV,UAAU;IAaxB,OAAO,CAAC,gBAAgB;CAezB"}