@loop_ouroboros/mcp-hub-lite 1.2.5 → 1.2.7

package/dist/server/src/services/connection/connection-manager.js

@@ -1,5 +1,7 @@
 import { Client } from '@modelcontextprotocol/sdk/client/index.js';
 import { TransportFactory } from '../../utils/transports/transport-factory.js';
+import { UnauthorizedError, auth } from '@modelcontextprotocol/sdk/client/auth.js';
+import { StreamableHttpTransport } from '../../utils/transports/streamable-http-transport.js';
 import { logger, LOG_MODULES, formatMcpMessageForLogging, logNotificationMessage } from '../../utils/logger.js';
 import { getAppVersion } from '../../utils/version.js';
 import { getMcpCommDebugSetting } from '../../utils/json-utils.js';
@@ -98,6 +100,10 @@ export class McpConnectionManager {
         const serverId = server.id || 'unknown';
         const compositeKey = getCompositeKey(serverName, serverIndex);
         const { maxRetries, baseRetryDelay } = this.getRetryConfig();
+        // Create OAuth provider once per-connect (shared across retries)
+        const isStreamableHttp = server.type === 'streamable-http' || server.type === 'http';
+        let oauthProvider = null;
+        let oauthStarted = false;
         // Retry loop for connection attempts
         let lastError;
         for (let attempt = 1; attempt <= maxRetries; attempt++) {
@@ -111,7 +117,21 @@ export class McpConnectionManager {
                 // 4. Get server info
                 const serverInfo = this.getServerInfo(serverId);
                 // 5. Create transport and set up callbacks
-                const { transport, pid } = this.initializeTransport(server, serverInfo, compositeKey, serverName, serverIndex);
+                const { transport, pid } = this.initializeTransport(server, serverInfo, compositeKey, serverName, serverIndex, oauthProvider ?? undefined);
+                // Capture OAuth provider from the transport (reuse across retries)
+                if (!oauthProvider && transport instanceof StreamableHttpTransport) {
+                    const provider = transport.getOAuthProvider();
+                    if (provider) {
+                        oauthProvider =
+                            provider;
+                    }
+                }
+                // Start OAuth callback server once before connecting
+                if (oauthProvider && !oauthStarted) {
+                    await oauthProvider.startCallbackServer();
+                    oauthStarted = true;
+                    logger.info(`OAuth callback server started for [${compositeKey}]`, LOG_MODULES.CONNECTION_MANAGER);
+                }
                 // 6. Establish client connection
                 const client = await this.establishClientConnection(transport);
                 // 7. Register connection
@@ -122,12 +142,30 @@ export class McpConnectionManager {
                 this.publishConnectionEvents(serverName, serverIndex);
                 // 10. Refresh resources
                 await this.refreshServerResources(serverName, serverIndex, server.type);
+                // 11. Request log notifications from downstream server
+                await this.requestLoggingFromServer(compositeKey, client, server.type);
                 return true;
             }
             catch (error) {
+                // Handle OAuth flow for Streamable HTTP servers (only on first attempt)
+                if (isStreamableHttp &&
+                    oauthProvider &&
+                    error instanceof UnauthorizedError &&
+                    attempt === 1) {
+                    logger.info(`OAuth required for server [${compositeKey}], waiting for browser auth...`, LOG_MODULES.CONNECTION_MANAGER);
+                    const oauthHandled = await this.handleOAuthFlow(oauthProvider, server.url || '', compositeKey);
+                    if (oauthHandled) {
+                        logger.info(`OAuth flow completed for [${compositeKey}], retrying connection...`, LOG_MODULES.CONNECTION_MANAGER);
+                        continue; // Retry connection — authProvider now has tokens
+                    }
+                }
                 lastError = await this.handleConnectionError(error, compositeKey, attempt, maxRetries, baseRetryDelay);
             }
         }
+        // Clean up callback server
+        if (oauthProvider) {
+            await oauthProvider.stopCallbackServer();
+        }
         // All retries failed
         this.handleFinalFailure(compositeKey, serverName, serverIndex, lastError);
         return false;
@@ -186,7 +224,7 @@ export class McpConnectionManager {
     /**
      * Creates transport and sets up all callbacks.
      */
-    initializeTransport(server, serverInfo, compositeKey, serverName, serverIndex) {
+    initializeTransport(server, serverInfo, compositeKey, serverName, serverIndex, authProvider) {
         const readyPatterns = server.type === 'stdio' ? (serverInfo.config.template.readyPatterns ?? []) : undefined;
         const readyTimeout = configManager.getConfig().system.startup?.readyTimeout ?? 120000;
         const transport = TransportFactory.createTransport({
@@ -194,7 +232,8 @@ export class McpConnectionManager {
             name: serverName
         }, compositeKey, {
             readyPatterns,
-            readyTimeout
+            readyTimeout,
+            authProvider
         });
         // Set up message handler for notifications/message
         transport.onmessage = (message) => {
@@ -357,6 +396,76 @@ export class McpConnectionManager {
             resources
         });
     }
+    /**
+     * Sends logging/setLevel request to downstream server to start receiving log notifications.
+     * This is a best-effort request — servers that don't support logging will silently ignore it.
+     */
+    async requestLoggingFromServer(compositeKey, client, serverType) {
+        // SSE is unidirectional — cannot send requests to the server
+        if (serverType === 'sse')
+            return;
+        try {
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            await client.request({ method: 'logging/setLevel', params: { level: 'info' } }, { timeout: 5000 });
+            logger.info(`Sent logging/setLevel to server [${compositeKey}]`, LOG_MODULES.CONNECTION_MANAGER);
+        }
+        catch {
+            // Server may not support logging — not an error condition
+            logger.debug(`Server [${compositeKey}] does not support logging/setLevel`, LOG_MODULES.CONNECTION_MANAGER);
+        }
+    }
+    /**
+     * Handles the OAuth authorization flow for Streamable HTTP servers.
+     * Starts a local callback server, waits for the user to complete auth in the browser,
+     * then finishes the auth on the transport.
+     *
+     * @returns true if OAuth was handled successfully, false otherwise
+     */
+    async handleOAuthFlow(provider, serverUrl, compositeKey) {
+        try {
+            const callbackServer = provider.getCallbackServer();
+            if (!callbackServer) {
+                logger.warn(`No callback server for [${compositeKey}]`, LOG_MODULES.CONNECTION_MANAGER);
+                return false;
+            }
+            // SDK has already called redirectToAuthorization via authProvider
+            // Wait for the auth code from the callback server
+            const authCode = await new Promise((resolve, reject) => {
+                const timeout = setTimeout(() => {
+                    callbackServer.removeAllListeners('auth-code-received');
+                    resolve(null);
+                }, 5 * 60 * 1000);
+                callbackServer.once('auth-code-received', (code) => {
+                    clearTimeout(timeout);
+                    resolve(code);
+                });
+                callbackServer.once('error', (err) => {
+                    clearTimeout(timeout);
+                    reject(err);
+                });
+            });
+            if (!authCode) {
+                logger.warn(`OAuth flow timed out for server [${compositeKey}]`, LOG_MODULES.CONNECTION_MANAGER);
+                return false;
+            }
+            // Exchange the authorization code for tokens via SDK
+            logger.info(`Exchanging OAuth code for tokens for [${compositeKey}]...`, LOG_MODULES.CONNECTION_MANAGER);
+            const result = await auth(provider, {
+                serverUrl,
+                authorizationCode: authCode
+            });
+            if (result === 'AUTHORIZED') {
+                logger.info(`OAuth token exchange succeeded for [${compositeKey}]`, LOG_MODULES.CONNECTION_MANAGER);
+                return true;
+            }
+            logger.warn(`OAuth token exchange returned ${result} for [${compositeKey}]`, LOG_MODULES.CONNECTION_MANAGER);
+            return false;
+        }
+        catch (error) {
+            logger.error(`OAuth flow error for server [${compositeKey}]: ${error instanceof Error ? error.message : String(error)}`, LOG_MODULES.CONNECTION_MANAGER);
+            return false;
+        }
+    }
     /**
      * Handles connection error with logging and retry delay.
      */
@@ -375,10 +484,18 @@ export class McpConnectionManager {
      */
     handleFinalFailure(compositeKey, serverName, serverIndex, lastError) {
         const errorMessage = lastError?.message || 'Connection failed after all retries';
+        // Fetch recent error logs (stderr) to help diagnose startup failures
+        const recentErrorLogs = logStorage.getLogs(compositeKey, { level: 'error', limit: 10 });
+        const logDetail = recentErrorLogs.length > 0
+            ? '\n\n--- Recent stderr output ---\n' + recentErrorLogs.map((l) => l.message).join('\n')
+            : '';
+        // Write connection error to logStorage so it appears in the log viewer
+        // This ensures errors from all transport types (stdio, streamable-http, sse) are visible
+        logStorage.append(compositeKey, 'error', `[CONNECTION] ${errorMessage}`);
         logger.error(`Failed to connect to server ${compositeKey} after retries:`, lastError, LOG_MODULES.CONNECTION_MANAGER);
         this.serverStatus.set(compositeKey, {
             connected: false,
-            error: errorMessage,
+            error: errorMessage + logDetail,
             lastCheck: Date.now(),
             toolsCount: 0,
             resourcesCount: 0
@@ -387,7 +504,7 @@ export class McpConnectionManager {
             serverName,
             serverIndex,
             status: 'error',
-            error: errorMessage,
+            error: errorMessage + logDetail,
             timestamp: Date.now()
         });
     }
@@ -995,6 +1112,29 @@ export class McpConnectionManager {
         }
         return undefined;
     }
+    /**
+     * Gets all connected instance indexes for a server.
+     * @param serverName - Server name
+     * @returns Array of connected instance indexes, empty if none connected
+     */
+    getConnectedIndexes(serverName) {
+        // Directly iterate instances via hubManager, check each via getStatus
+        // This bypasses serverNameToCompositeKeys which may have stale/missing entries
+        // Note: We do NOT filter by instance.enabled here because:
+        // - enabled=false means "do not auto-start" (config), not "cannot be connected" (runtime)
+        // - A user can manually start an enabled=false instance, which should still appear in list_servers
+        const instances = hubManager.getServerInstancesByName(serverName);
+        const connectedIndexes = [];
+        for (const instance of instances) {
+            if (instance.index !== undefined) {
+                const status = this.getStatus(serverName, instance.index);
+                if (status?.connected) {
+                    connectedIndexes.push(instance.index);
+                }
+            }
+        }
+        return connectedIndexes;
+    }
     /**
      * Gets the composite key of the first connected instance for a server name.
      * This is a backward compatibility method for code that expects getServerIdByName.

package/dist/server/src/services/event-bus.service.d.ts

@@ -159,11 +159,7 @@ export declare const EventTypes: {
     readonly TOOL_CALL_ERROR: "tool-call-error";
     readonly RESOURCES_UPDATED: "resources";
     readonly LOG_ENTRY: "log";
-    readonly LOGS_CLEARED: "logs-cleared";
-    readonly SYSTEM_HEALTH: "system-health";
     readonly CONFIGURATION_UPDATED: "configuration-updated";
-    readonly CLIENT_CONNECTED: "client-connected";
-    readonly CLIENT_DISCONNECTED: "client-disconnected";
 };
 export declare const eventBus: EventBusService;
 //# sourceMappingURL=event-bus.service.d.ts.map

package/dist/server/src/services/event-bus.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"event-bus.service.d.ts","sourceRoot":"","sources":["../../../../src/services/event-bus.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAExD;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,CAAC;CACjB;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,SAAS,CAAqD;IAEtE;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,IAAI;IAajD;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,SAAS,KAAK,IAAI,GAAG,MAAM,IAAI;IAU7E;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,WAAW;IAWnB;;;;;;;;;;;;;;OAcG;IACH,cAAc,IAAI,IAAI;IAItB;;;;;;;;;;;;;;OAcG;IACH,aAAa,IAAI,MAAM,EAAE;IAIzB;;;;;;;;;;;;;;;OAeG;IACH,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;CAI5C;AAGD,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;CAkCb,CAAC;AAGX,eAAO,MAAM,QAAQ,iBAAwB,CAAC"}
+{"version":3,"file":"event-bus.service.d.ts","sourceRoot":"","sources":["../../../../src/services/event-bus.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAExD;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,CAAC;CACjB;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,SAAS,CAAqD;IAEtE;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,IAAI;IAajD;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,SAAS,KAAK,IAAI,GAAG,MAAM,IAAI;IAU7E;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,WAAW;IAWnB;;;;;;;;;;;;;;OAcG;IACH,cAAc,IAAI,IAAI;IAItB;;;;;;;;;;;;;;OAcG;IACH,aAAa,IAAI,MAAM,EAAE;IAIzB;;;;;;;;;;;;;;;OAeG;IACH,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;CAI5C;AAGD,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;CA4Bb,CAAC;AAGX,eAAO,MAAM,QAAQ,iBAAwB,CAAC"}

package/dist/server/src/services/event-bus.service.js

@@ -188,13 +188,8 @@ export const EventTypes = {
     RESOURCES_UPDATED: 'resources',
     // Log related events
     LOG_ENTRY: 'log',
-    LOGS_CLEARED: 'logs-cleared',
     // System related events
-    SYSTEM_HEALTH: 'system-health',
-    CONFIGURATION_UPDATED: 'configuration-updated',
-    // Client related events
-    CLIENT_CONNECTED: 'client-connected',
-    CLIENT_DISCONNECTED: 'client-disconnected'
+    CONFIGURATION_UPDATED: 'configuration-updated'
 };
 // Create global event bus instance
 export const eventBus = new EventBusService();

package/dist/server/src/services/gateway/request-handlers/initialize-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"initialize-handler.d.ts","sourceRoot":"","sources":["../../../../../../src/services/gateway/request-handlers/initialize-handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAYpE;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAqElE"}
+{"version":3,"file":"initialize-handler.d.ts","sourceRoot":"","sources":["../../../../../../src/services/gateway/request-handlers/initialize-handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAYpE;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAsElE"}

package/dist/server/src/services/gateway/request-handlers/initialize-handler.js

@@ -36,6 +36,7 @@ export function registerInitializeHandlers(server) {
                     list: true,
                     read: true
                 },
+                logging: {},
                 experimental: {}
             }
         };

package/dist/server/src/services/hub-tools/instance-selector.d.ts

@@ -17,11 +17,18 @@ export declare class InstanceSelector {
     private static roundRobinCounters;
     /**
      * Select best instance based on configured strategy
+     *
+     * @param serverName - Name of the server
+     * @param serverConfig - Server configuration
+     * @param requestOptions - Optional request options for instance selection
+     * @param statusChecker - Optional function to check instance connection status (for testing)
      */
     static selectInstance(serverName: string, serverConfig: ServerConfig, requestOptions?: {
         sessionId?: string;
         tags?: Record<string, string>;
-    }): ServerInstance | undefined;
+    }, statusChecker?: (serverName: string, index: number) => {
+        connected?: boolean;
+    } | undefined): ServerInstance | undefined;
     private static selectRandomInstance;
     private static selectRoundRobinInstance;
     private static selectTagMatchUniqueInstance;

package/dist/server/src/services/hub-tools/instance-selector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"instance-selector.d.ts","sourceRoot":"","sources":["../../../../../src/services/hub-tools/instance-selector.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAGnF;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;aAE1B,aAAa,EAAE,MAAM;aACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;aACpC,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAF3D,aAAa,EAAE,MAAM,EACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,YAAA,EACpC,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,YAAA;CAmB9E;AAED;;;GAGG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAA6B;IAE9D;;OAEG;IACH,MAAM,CAAC,cAAc,CACnB,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,YAAY,EAC1B,cAAc,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GACrE,cAAc,GAAG,SAAS;IA+B7B,OAAO,CAAC,MAAM,CAAC,oBAAoB;IAKnC,OAAO,CAAC,MAAM,CAAC,wBAAwB;IAUvC,OAAO,CAAC,MAAM,CAAC,4BAA4B;CAiC5C"}
+{"version":3,"file":"instance-selector.d.ts","sourceRoot":"","sources":["../../../../../src/services/hub-tools/instance-selector.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAInF;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;aAE1B,aAAa,EAAE,MAAM;aACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;aACpC,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAF3D,aAAa,EAAE,MAAM,EACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,YAAA,EACpC,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,YAAA;CAmB9E;AAED;;;GAGG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAA6B;IAE9D;;;;;;;OAOG;IACH,MAAM,CAAC,cAAc,CACnB,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,YAAY,EAC1B,cAAc,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,EACtE,aAAa,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,SAAS,GACzF,cAAc,GAAG,SAAS;IAwC7B,OAAO,CAAC,MAAM,CAAC,oBAAoB;IAKnC,OAAO,CAAC,MAAM,CAAC,wBAAwB;IAUvC,OAAO,CAAC,MAAM,CAAC,4BAA4B;CAiC5C"}

package/dist/server/src/services/hub-tools/instance-selector.js

@@ -1,4 +1,5 @@
 import { InstanceSelectionStrategy } from '../../models/server.model.js';
+import { mcpConnectionManager } from '../mcp-connection-manager.js';
 /**
  * Error thrown when tag-match-unique instance selection fails.
  * Passes raw data so the error class itself can format the message.
@@ -39,28 +40,41 @@ export class InstanceSelector {
     static roundRobinCounters = new Map();
     /**
      * Select best instance based on configured strategy
+     *
+     * @param serverName - Name of the server
+     * @param serverConfig - Server configuration
+     * @param requestOptions - Optional request options for instance selection
+     * @param statusChecker - Optional function to check instance connection status (for testing)
      */
-    static selectInstance(serverName, serverConfig, requestOptions) {
+    static selectInstance(serverName, serverConfig, requestOptions, statusChecker) {
         const { instances } = serverConfig;
         const instanceSelectionStrategy = serverConfig.template.instanceSelectionStrategy || InstanceSelectionStrategy.RANDOM;
-        // Filter instances - only use enabled instances
-        const enabledInstances = instances.filter((instance) => instance.enabled !== false);
-        if (enabledInstances.length === 0) {
+        // Use provided statusChecker or default to mcpConnectionManager.getStatus
+        const checkStatus = statusChecker || ((name, idx) => mcpConnectionManager.getStatus(name, idx));
+        // Filter instances - use runtime connected status, NOT config enabled flag
+        // enabled=false means "do not auto-start" but user can manually start it
+        const connectedInstances = instances.filter((instance) => {
+            if (instance.index === undefined)
+                return false;
+            const status = checkStatus(serverName, instance.index);
+            return status?.connected;
+        });
+        if (connectedInstances.length === 0) {
             return undefined;
         }
         // Single instance case - return directly
-        if (enabledInstances.length === 1) {
-            return enabledInstances[0];
+        if (connectedInstances.length === 1) {
+            return connectedInstances[0];
         }
         switch (instanceSelectionStrategy) {
             case InstanceSelectionStrategy.RANDOM:
-                return this.selectRandomInstance(enabledInstances);
+                return this.selectRandomInstance(connectedInstances);
             case InstanceSelectionStrategy.ROUND_ROBIN:
-                return this.selectRoundRobinInstance(serverName, enabledInstances);
+                return this.selectRoundRobinInstance(serverName, connectedInstances);
             case InstanceSelectionStrategy.TAG_MATCH_UNIQUE:
-                return this.selectTagMatchUniqueInstance(enabledInstances, requestOptions?.tags);
+                return this.selectTagMatchUniqueInstance(connectedInstances, requestOptions?.tags);
             default:
-                return enabledInstances[0]; // Fallback to first instance
+                return connectedInstances[0]; // Fallback to first instance
         }
     }
     static selectRandomInstance(instances) {

package/dist/server/src/services/hub-tools/resource-generator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resource-generator.d.ts","sourceRoot":"","sources":["../../../../../src/services/hub-tools/resource-generator.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAUlE;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C;AA6ID;;GAEG;AACH,eAAO,MAAM,aAAa,oBAAoB,CAAC;AAE/C;;GAEG;AACH,eAAO,MAAM,cAAc,2BAA2B,CAAC;AAEvD;;GAEG;AACH,eAAO,MAAM,qBAAqB,uEACoC,CAAC;AAEvE;;GAEG;AACH,eAAO,MAAM,mBAAmB,kBAAkB,CAAC;AAEnD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,YAAY,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,wBAAwB,IAAI,QAAQ,EAAE,CAuFrD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,cAAc,GAAG,QAAQ,EAAE,GAAG,MAAM,GAAG,OAAO,CAAC,CAyGzD"}
+{"version":3,"file":"resource-generator.d.ts","sourceRoot":"","sources":["../../../../../src/services/hub-tools/resource-generator.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAUlE;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C;AA6ID;;GAEG;AACH,eAAO,MAAM,aAAa,oBAAoB,CAAC;AAE/C;;GAEG;AACH,eAAO,MAAM,cAAc,2BAA2B,CAAC;AAEvD;;GAEG;AACH,eAAO,MAAM,qBAAqB,uEACoC,CAAC;AAEvE;;GAEG;AACH,eAAO,MAAM,mBAAmB,kBAAkB,CAAC;AAEnD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,YAAY,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,wBAAwB,IAAI,QAAQ,EAAE,CAqErD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,cAAc,GAAG,QAAQ,EAAE,GAAG,MAAM,GAAG,OAAO,CAAC,CAyGzD"}

package/dist/server/src/services/hub-tools/resource-generator.js

@@ -178,24 +178,9 @@ export function generateDynamicResources() {
         if (!hasValidId(server)) {
             continue;
         }
-        let hasAnyConnectedInstance = false;
-        let firstConnectedInstanceIndex;
-        // First pass: check which instances are connected (consistent with /web/mcp/status API)
-        for (const instance of server.config.instances) {
-            const idx = instance.index;
-            if (idx === undefined) {
-                continue;
-            }
-            const instanceStatus = mcpConnectionManager.getStatus(server.name, idx);
-            if (instanceStatus?.connected) {
-                hasAnyConnectedInstance = true;
-                if (firstConnectedInstanceIndex === undefined) {
-                    firstConnectedInstanceIndex = idx;
-                }
-            }
-        }
-        // Skip server if no instances are connected
-        if (!hasAnyConnectedInstance) {
+        // Check if any instances are connected using getConnectedIndexes
+        const connectedIndexes = mcpConnectionManager.getConnectedIndexes(server.name);
+        if (connectedIndexes.length === 0) {
             continue;
         }
         // Second pass: generate resources for each connected instance
@@ -210,7 +195,7 @@ export function generateDynamicResources() {
             }
             // Server metadata resource (one per server, using first connected instance's index)
             // Only generate once when we hit the first connected instance
-            if (idx === firstConnectedInstanceIndex) {
+            if (idx === connectedIndexes[0]) {
                 resources.push({
                     uri: `hub://servers/${server.name}`,
                     name: `Server: ${server.name}`,

package/dist/server/src/services/hub-tools.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hub-tools.service.d.ts","sourceRoot":"","sources":["../../../../src/services/hub-tools.service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAOjE,OAAO,EAEL,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,cAAc,EACd,8BAA8B,EAC9B,cAAc,EAEf,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EACV,cAAc,EACd,iBAAiB,EACjB,uBAAuB,EACvB,aAAa,EACb,cAAc,EACd,6BAA6B,EAC7B,cAAc,EACf,MAAM,mCAAmC,CAAC;AAa3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,qBAAa,eAAe;;IAM1B;;;;;;;;;OASG;IACH,cAAc;IAId;;;;;;;;;OASG;IACG,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAyBpD;;;;;;;;;;;OAWG;IACG,iBAAiB,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC;QAC9D,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,WAAW,EAAE,CAAC;KACtB,CAAC;IA+CF;;;;;;;;;;OAUG;IACG,OAAO,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IAyB7D;;;;;;;;;;OAUG;IACG,uBAAuB,CAAC,IAAI,EAAE,6BAA6B,GAAG,OAAO,CAAC;QAC1E,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IAkCF;;;;;;;;;;OAUG;IACG,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC;QAC5C,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,KAAK,CAAC;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;SAAE,CAAC,CAAC;KAC/E,CAAC;IAmBF;;;;;;;;;;;OAWG;IACG,cAAc,CAAC,CAAC,SAAS,cAAc,EAC3C,QAAQ,EAAE,CAAC,EACX,QAAQ,EAAE,CAAC,SAAS,OAAO,iBAAiB,GACxC,iBAAiB,GACjB,CAAC,SAAS,OAAO,eAAe,GAC9B,uBAAuB,GACvB,CAAC,SAAS,OAAO,aAAa,GAC5B,aAAa,GACb,CAAC,SAAS,OAAO,cAAc,GAC7B,cAAc,GACd,CAAC,SAAS,OAAO,8BAA8B,GAC7C,6BAA6B,GAC7B,CAAC,SAAS,OAAO,cAAc,GAC7B,cAAc,GACd,KAAK,GAClB,OAAO,CACR,CAAC,SAAS,OAAO,iBAAiB,GAC9B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACtB,CAAC,SAAS,OAAO,eAAe,GAC9B;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,WAAW,EAAE,CAAA;KAAE,GAC5C,CAAC,SAAS,OAAO,aAAa,GAC5B,IAAI,GAAG,SAAS,GAChB,CAAC,SAAS,OAAO,cAAc,GAC7B,OAAO,GACP,CAAC,SAAS,OAAO,8BAA8B,GAC7C;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAC7D,CAAC,SAAS,OAAO,cAAc,GAC7B;QACE,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,KAAK,CAAC;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;SAAE,CAAC,CAAC;KAC/E,GACD,KAAK,CACpB;IAwED;;;;;;;;;;;OAWG;IACG,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;IAkStD;;;;;;;;OAQG;IACG,YAAY,IAAI,OAAO,CAC3B,MAAM,CACJ,MAAM,EACN;QACE,KAAK,EAAE,WAAW,EAAE,CAAC;KACtB,CACF,CACF;IAuCD;;;;;;;;OAQG;IACG,aAAa,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;IAK1C;;;;;;;;;;;;;OAaG;IACG,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CACpC;QACE,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,OAAO,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9B,cAAc,EAAE,MAAM,CAAC;QACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,aAAa,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;KACrB,GACD,IAAI,EAAE,GACN,QAAQ,EAAE,GACV,MAAM,CACT;CAiBF;AAED,eAAO,MAAM,eAAe,iBAAwB,CAAC"}
+{"version":3,"file":"hub-tools.service.d.ts","sourceRoot":"","sources":["../../../../src/services/hub-tools.service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAOjE,OAAO,EAEL,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,cAAc,EACd,8BAA8B,EAC9B,cAAc,EAEf,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EACV,cAAc,EACd,iBAAiB,EACjB,uBAAuB,EACvB,aAAa,EACb,cAAc,EACd,6BAA6B,EAC7B,cAAc,EACf,MAAM,mCAAmC,CAAC;AAa3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,qBAAa,eAAe;;IAM1B;;;;;;;;;OASG;IACH,cAAc;IAId;;;;;;;;;OASG;IACG,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAyBpD;;;;;;;;;;;OAWG;IACG,iBAAiB,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC;QAC9D,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,WAAW,EAAE,CAAC;KACtB,CAAC;IAqDF;;;;;;;;;;OAUG;IACG,OAAO,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IA+B7D;;;;;;;;;;OAUG;IACG,uBAAuB,CAAC,IAAI,EAAE,6BAA6B,GAAG,OAAO,CAAC;QAC1E,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IAkCF;;;;;;;;;;OAUG;IACG,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC;QAC5C,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,KAAK,CAAC;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;SAAE,CAAC,CAAC;KAC/E,CAAC;IAmBF;;;;;;;;;;;OAWG;IACG,cAAc,CAAC,CAAC,SAAS,cAAc,EAC3C,QAAQ,EAAE,CAAC,EACX,QAAQ,EAAE,CAAC,SAAS,OAAO,iBAAiB,GACxC,iBAAiB,GACjB,CAAC,SAAS,OAAO,eAAe,GAC9B,uBAAuB,GACvB,CAAC,SAAS,OAAO,aAAa,GAC5B,aAAa,GACb,CAAC,SAAS,OAAO,cAAc,GAC7B,cAAc,GACd,CAAC,SAAS,OAAO,8BAA8B,GAC7C,6BAA6B,GAC7B,CAAC,SAAS,OAAO,cAAc,GAC7B,cAAc,GACd,KAAK,GAClB,OAAO,CACR,CAAC,SAAS,OAAO,iBAAiB,GAC9B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACtB,CAAC,SAAS,OAAO,eAAe,GAC9B;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,WAAW,EAAE,CAAA;KAAE,GAC5C,CAAC,SAAS,OAAO,aAAa,GAC5B,IAAI,GAAG,SAAS,GAChB,CAAC,SAAS,OAAO,cAAc,GAC7B,OAAO,GACP,CAAC,SAAS,OAAO,8BAA8B,GAC7C;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAC7D,CAAC,SAAS,OAAO,cAAc,GAC7B;QACE,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,KAAK,CAAC;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;SAAE,CAAC,CAAC;KAC/E,GACD,KAAK,CACpB;IAwED;;;;;;;;;;;OAWG;IACG,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;IAsStD;;;;;;;;OAQG;IACG,YAAY,IAAI,OAAO,CAC3B,MAAM,CACJ,MAAM,EACN;QACE,KAAK,EAAE,WAAW,EAAE,CAAC;KACtB,CACF,CACF;IAuCD;;;;;;;;OAQG;IACG,aAAa,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;IAK1C;;;;;;;;;;;;;OAaG;IACG,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CACpC;QACE,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,OAAO,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9B,cAAc,EAAE,MAAM,CAAC;QACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,aAAa,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;KACrB,GACD,IAAI,EAAE,GACN,QAAQ,EAAE,GACV,MAAM,CACT;CAiBF;AAED,eAAO,MAAM,eAAe,iBAAwB,CAAC"}

package/dist/server/src/services/hub-tools.service.js

@@ -91,9 +91,9 @@ export class HubToolsService {
         const servers = hubManager.getAllServers();
         const result = {};
         for (const server of servers.filter(hasValidId)) {
-            // Check if server is actually connected
-            const status = mcpConnectionManager.getStatusByName(server.name);
-            if (!status?.connected) {
+            // Use getConnectedIndexes for reliable multi-instance support
+            const indexes = mcpConnectionManager.getConnectedIndexes(server.name);
+            if (indexes.length === 0) {
                 continue;
             }
             // Use non-strict mode for management operations to avoid tag-match-unique errors
@@ -139,6 +139,11 @@ export class HubToolsService {
                 tools: toolSummaries
             };
         }
+        // Check if server has any connected instances before trying to get tools
+        const indexes = mcpConnectionManager.getConnectedIndexes(args.serverName);
+        if (indexes.length === 0) {
+            throw new Error(`Server not found: ${args.serverName}`);
+        }
         // Use server name level cache to get tools directly without triggering instance selection
         // This avoids tag-match-unique errors for multi-instance servers when listing tools
         const tools = mcpConnectionManager.getToolsByServerName(args.serverName);
@@ -180,6 +185,11 @@ export class HubToolsService {
             }
             return undefined;
         }
+        // Check if server has any connected instances before trying to get tools
+        const indexes = mcpConnectionManager.getConnectedIndexes(args.serverName);
+        if (indexes.length === 0) {
+            throw new Error(`Server not found: ${args.serverName}`);
+        }
         // Use server name level cache to get tools directly without triggering instance selection
         // This avoids tag-match-unique errors for multi-instance servers when getting tool details
         const tools = mcpConnectionManager.getToolsByServerName(args.serverName);
@@ -405,8 +415,15 @@ export class HubToolsService {
                 logger.debug(`selectBestInstance returned undefined for ${serverName}, trying direct instance selection with RANDOM strategy`, LOG_MODULES.HUB_TOOLS);
                 const serverConfig = hubManager.getServerByName(serverName);
                 if (serverConfig && serverConfig.instances.length > 0) {
-                    const enabledInstances = serverConfig.instances.filter((instance) => instance.enabled !== false);
-                    if (enabledInstances.length > 0) {
+                    // Filter: use runtime connected status, NOT config enabled flag
+                    // enabled=false means "do not auto-start" but user can manually start it
+                    const connectedInstances = serverConfig.instances.filter((instance) => {
+                        if (instance.index === undefined)
+                            return false;
+                        const status = mcpConnectionManager.getStatus(serverName, instance.index);
+                        return status?.connected;
+                    });
+                    if (connectedInstances.length > 0) {
                         // Use RANDOM strategy regardless of server's configured strategy
                         const selectedInstance = InstanceSelector.selectInstance(serverName, {
                             ...serverConfig,

package/dist/server/src/services/mcp-oauth/index.d.ts

@@ -0,0 +1,5 @@
+export { McpOAuthClientProvider } from './oauth-provider.js';
+export { OAuthCallbackServer } from './oauth-callback-server.js';
+export { OAuthTokenStorage } from './oauth-token-storage.js';
+export type { McpOAuthConfig, McpOAuthProviderOptions } from './oauth-types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/src/services/mcp-oauth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/services/mcp-oauth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,YAAY,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/server/src/services/mcp-oauth/index.js

@@ -0,0 +1,3 @@
+export { McpOAuthClientProvider } from './oauth-provider.js';
+export { OAuthCallbackServer } from './oauth-callback-server.js';
+export { OAuthTokenStorage } from './oauth-token-storage.js';

package/dist/server/src/services/mcp-oauth/oauth-callback-server.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Local HTTP server for OAuth callback handling.
+ *
+ * Listens on 127.0.0.1 with a dynamic port, captures the authorization code
+ * from the OAuth redirect, displays a success page to the user, and emits
+ * the code via EventEmitter. Auto-closes after 5 minutes of inactivity.
+ */
+import { EventEmitter } from 'node:events';
+export declare class OAuthCallbackServer extends EventEmitter {
+    private server;
+    private port;
+    private timeout;
+    constructor(port?: number);
+    get callbackUrl(): string;
+    get redirectUrl(): string;
+    start(): Promise<void>;
+    stop(): Promise<void>;
+}
+//# sourceMappingURL=oauth-callback-server.d.ts.map

package/dist/server/src/services/mcp-oauth/oauth-callback-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-callback-server.d.ts","sourceRoot":"","sources":["../../../../../src/services/mcp-oauth/oauth-callback-server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA2B3C,qBAAa,mBAAoB,SAAQ,YAAY;IACnD,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,OAAO,CAA+B;gBAElC,IAAI,GAAE,MAAU;IAK5B,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,IAAI,WAAW,IAAI,MAAM,CAExB;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA6CtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAkB5B"}

package/dist/server/src/services/mcp-oauth/oauth-callback-server.js

@@ -0,0 +1,100 @@
+/**
+ * Local HTTP server for OAuth callback handling.
+ *
+ * Listens on 127.0.0.1 with a dynamic port, captures the authorization code
+ * from the OAuth redirect, displays a success page to the user, and emits
+ * the code via EventEmitter. Auto-closes after 5 minutes of inactivity.
+ */
+import http from 'node:http';
+import { EventEmitter } from 'node:events';
+import { logger, LOG_MODULES } from '../../utils/logger/index.js';
+const CALLBACK_PATH = '/oauth/callback';
+const CALLBACK_TIMEOUT = 5 * 60 * 1000; // 5 minutes
+const SUCCESS_HTML = `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Authentication Successful</title>
+  <style>
+    body { font-family: system-ui, sans-serif; display: flex; justify-content: center; align-items: center; height: 100vh; margin: 0; background: #f5f5f5; }
+    .card { background: white; padding: 2rem; border-radius: 8px; box-shadow: 0 2px 8px rgba(0,0,0,0.1); text-align: center; max-width: 400px; }
+    h1 { color: #22c55e; margin: 0 0 0.5rem; }
+    p { color: #666; margin: 0; }
+  </style>
+</head>
+<body>
+  <div class="card">
+    <h1>Authentication Successful</h1>
+    <p>You can close this page and return to MCP Hub Lite.</p>
+  </div>
+</body>
+</html>`;
+export class OAuthCallbackServer extends EventEmitter {
+    server = null;
+    port;
+    timeout = null;
+    constructor(port = 0) {
+        super();
+        this.port = port;
+    }
+    get callbackUrl() {
+        return `http://127.0.0.1:${this.port}${CALLBACK_PATH}`;
+    }
+    get redirectUrl() {
+        return this.callbackUrl;
+    }
+    async start() {
+        return new Promise((resolve, reject) => {
+            this.server = http.createServer((req, res) => {
+                if (!req.url)
+                    return;
+                const url = new URL(req.url, `http://127.0.0.1:${this.port}`);
+                if (url.pathname === CALLBACK_PATH) {
+                    const code = url.searchParams.get('code');
+                    if (code) {
+                        logger.info('OAuth callback received authorization code', LOG_MODULES.dynamic('oauth'));
+                        this.emit('auth-code-received', code);
+                    }
+                    res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+                    res.end(SUCCESS_HTML);
+                }
+                else {
+                    res.writeHead(404);
+                    res.end('Not found');
+                }
+            });
+            this.server.on('error', (err) => {
+                logger.error(`OAuth callback server error: ${err.message}`, LOG_MODULES.dynamic('oauth'));
+                reject(err);
+            });
+            this.server.listen(this.port, '127.0.0.1', () => {
+                const addr = this.server.address();
+                if (addr && typeof addr === 'object') {
+                    this.port = addr.port;
+                }
+                logger.info(`OAuth callback server started on ${this.callbackUrl}`, LOG_MODULES.dynamic('oauth'));
+                this.timeout = setTimeout(() => this.stop(), CALLBACK_TIMEOUT);
+                resolve();
+            });
+        });
+    }
+    async stop() {
+        if (this.timeout) {
+            clearTimeout(this.timeout);
+            this.timeout = null;
+        }
+        return new Promise((resolve) => {
+            if (this.server) {
+                this.server.close(() => {
+                    logger.info('OAuth callback server stopped', LOG_MODULES.dynamic('oauth'));
+                    this.server = null;
+                    resolve();
+                });
+            }
+            else {
+                resolve();
+            }
+        });
+    }
+}