npm - @lyrra/mcp-server - Versions diffs - 1.0.0 → 1.1.0 - Mend

@lyrra/mcp-server 1.0.0 → 1.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (87) hide show

package/Dockerfile +16 -0
package/README.md +59 -4
package/dist/client.d.ts +7 -1
package/dist/client.d.ts.map +1 -1
package/dist/client.js +5 -5
package/dist/client.js.map +1 -1
package/dist/config.d.ts +1 -0
package/dist/config.d.ts.map +1 -1
package/dist/config.js +1 -0
package/dist/config.js.map +1 -1
package/dist/http-server.d.ts +8 -0
package/dist/http-server.d.ts.map +1 -0
package/dist/http-server.js +466 -0
package/dist/http-server.js.map +1 -0
package/dist/index.js +8 -71
package/dist/index.js.map +1 -1
package/dist/server-factory.d.ts +8 -0
package/dist/server-factory.d.ts.map +1 -0
package/dist/server-factory.js +82 -0
package/dist/server-factory.js.map +1 -0
package/dist/tools/admin.d.ts +132 -0
package/dist/tools/admin.d.ts.map +1 -1
package/dist/tools/admin.js +105 -101
package/dist/tools/admin.js.map +1 -1
package/dist/tools/ai-designer.d.ts +148 -0
package/dist/tools/ai-designer.d.ts.map +1 -1
package/dist/tools/ai-designer.js +80 -76
package/dist/tools/ai-designer.js.map +1 -1
package/dist/tools/analytics.d.ts +47 -0
package/dist/tools/analytics.d.ts.map +1 -1
package/dist/tools/analytics.js +38 -34
package/dist/tools/analytics.js.map +1 -1
package/dist/tools/auth.d.ts +30 -0
package/dist/tools/auth.d.ts.map +1 -1
package/dist/tools/auth.js +31 -27
package/dist/tools/auth.js.map +1 -1
package/dist/tools/blocks.d.ts +200 -0
package/dist/tools/blocks.d.ts.map +1 -1
package/dist/tools/blocks.js +154 -150
package/dist/tools/blocks.js.map +1 -1
package/dist/tools/connections.d.ts +86 -0
package/dist/tools/connections.d.ts.map +1 -1
package/dist/tools/connections.js +70 -66
package/dist/tools/connections.js.map +1 -1
package/dist/tools/eduflow.d.ts +223 -0
package/dist/tools/eduflow.d.ts.map +1 -1
package/dist/tools/eduflow.js +114 -93
package/dist/tools/eduflow.js.map +1 -1
package/dist/tools/participants.d.ts +110 -0
package/dist/tools/participants.d.ts.map +1 -1
package/dist/tools/participants.js +62 -58
package/dist/tools/participants.js.map +1 -1
package/dist/tools/presentation.d.ts +116 -0
package/dist/tools/presentation.d.ts.map +1 -1
package/dist/tools/presentation.js +51 -47
package/dist/tools/presentation.js.map +1 -1
package/dist/tools/projects.d.ts +65 -0
package/dist/tools/projects.d.ts.map +1 -1
package/dist/tools/projects.js +48 -44
package/dist/tools/projects.js.map +1 -1
package/dist/tools/resources.d.ts +46 -0
package/dist/tools/resources.d.ts.map +1 -1
package/dist/tools/resources.js +32 -28
package/dist/tools/resources.js.map +1 -1
package/dist/tools/store.d.ts +62 -0
package/dist/tools/store.d.ts.map +1 -1
package/dist/tools/store.js +59 -55
package/dist/tools/store.js.map +1 -1
package/mcp-config.example.json +4 -5
package/package.json +7 -2
package/src/client.ts +12 -5
package/src/config.ts +1 -0
package/src/http-server.ts +573 -0
package/src/index.ts +7 -96
package/src/server-factory.ts +109 -0
package/src/tools/admin.ts +20 -14
package/src/tools/ai-designer.ts +16 -10
package/src/tools/analytics.ts +13 -7
package/src/tools/auth.ts +32 -26
package/src/tools/blocks.ts +18 -12
package/src/tools/connections.ts +14 -8
package/src/tools/eduflow.ts +36 -12
package/src/tools/participants.ts +15 -9
package/src/tools/presentation.ts +12 -6
package/src/tools/projects.ts +14 -8
package/src/tools/resources.ts +12 -6
package/src/tools/store.ts +14 -8

package/src/http-server.ts ADDED Viewed

@@ -0,0 +1,573 @@
+#!/usr/bin/env node
+/**
+ * LYRRA Studio MCP HTTP Server
+ * Provides Streamable HTTP transport with OAuth 2.0 for Claude.ai integration.
+ * All endpoints are under /mcp/ for clean nginx routing.
+ */
+import crypto from 'crypto';
+import express from 'express';
+import type { Request, Response } from 'express';
+import cors from 'cors';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { createMcpServer } from './server-factory.js';
+import { LyrraClient } from './client.js';
+// ─── Configuration ───────────────────────────────────────────────────────────
+const PORT = parseInt(process.env.MCP_HTTP_PORT || '3002', 10);
+const BASE_URL = process.env.MCP_BASE_URL || 'https://lyrrastudio.com';
+const LYRRA_API_URL = process.env.LYRRA_API_URL || 'http://localhost:3001/api';
+// ─── In-memory stores ────────────────────────────────────────────────────────
+interface OAuthClient {
+  client_id: string;
+  client_secret?: string;
+  client_id_issued_at: number;
+  redirect_uris: string[];
+  grant_types: string[];
+  response_types: string[];
+  token_endpoint_auth_method: string;
+}
+const registeredClients = new Map<string, OAuthClient>();
+interface AuthCodeData {
+  oauthClientId: string;
+  codeChallenge: string;
+  codeChallengeMethod: string;
+  redirectUri: string;
+  state?: string;
+  apiKey: string;
+  expiresAt: number;
+}
+const authCodes = new Map<string, AuthCodeData>();
+interface TokenData {
+  oauthClientId: string;
+  apiKey: string;
+  expiresAt: number;
+}
+const accessTokens = new Map<string, TokenData>();
+const refreshTokens = new Map<string, { oauthClientId: string; apiKey: string }>();
+const mcpSessions = new Map<string, { transport: StreamableHTTPServerTransport; server: McpServer }>();
+// ─── Helper: Validate LYRRA API key ─────────────────────────────────────────
+async function validateApiKey(apiKey: string): Promise<boolean> {
+  try {
+    const res = await fetch(`${LYRRA_API_URL}/auth/me`, {
+      headers: { 'Content-Type': 'application/json', 'X-API-Key': apiKey },
+    });
+    return res.ok;
+  } catch {
+    return false;
+  }
+}
+// ─── Helper: Verify PKCE ────────────────────────────────────────────────────
+function verifyPkce(codeVerifier: string, codeChallenge: string, method: string): boolean {
+  if (method === 'S256') {
+    const hash = crypto.createHash('sha256').update(codeVerifier).digest('base64url');
+    return hash === codeChallenge;
+  }
+  return codeVerifier === codeChallenge; // plain
+}
+// ─── Helper: Verify Bearer token ─────────────────────────────────────────────
+function verifyBearerToken(req: Request): TokenData | null {
+  const auth = req.headers.authorization;
+  if (!auth?.startsWith('Bearer ')) return null;
+  const token = auth.slice(7);
+  const data = accessTokens.get(token);
+  if (!data) return null;
+  if (Date.now() > data.expiresAt) {
+    accessTokens.delete(token);
+    return null;
+  }
+  return data;
+}
+// ─── Authorize page HTML ─────────────────────────────────────────────────────
+function renderAuthorizePage(pendingToken: string, showError = false): string {
+  return `<!DOCTYPE html>
+<html lang="fr">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>LYRRA Studio - Autorisation MCP</title>
+  <style>
+    * { margin: 0; padding: 0; box-sizing: border-box; }
+    body {
+      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
+      background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
+      min-height: 100vh; display: flex; align-items: center; justify-content: center;
+    }
+    .card {
+      background: white; border-radius: 16px; padding: 40px;
+      max-width: 440px; width: 100%; box-shadow: 0 20px 60px rgba(0,0,0,0.2);
+    }
+    .logo { text-align: center; margin-bottom: 24px; }
+    .logo h1 { font-size: 28px; color: #333; }
+    .logo span { color: #667eea; }
+    .subtitle { text-align: center; color: #666; margin-bottom: 32px; font-size: 14px; line-height: 1.5; }
+    label { display: block; font-size: 13px; font-weight: 600; color: #444; margin-bottom: 6px; }
+    input {
+      width: 100%; padding: 12px 16px; border: 2px solid #e2e8f0;
+      border-radius: 8px; font-size: 14px; transition: border-color 0.2s;
+      margin-bottom: 16px; outline: none;
+    }
+    input:focus { border-color: #667eea; }
+    button {
+      width: 100%; padding: 14px; background: #667eea; color: white;
+      border: none; border-radius: 8px; font-size: 16px; font-weight: 600;
+      cursor: pointer; transition: background 0.2s;
+    }
+    button:hover { background: #5a6fd6; }
+    button:disabled { background: #a0aec0; cursor: not-allowed; }
+    .error { color: #e53e3e; font-size: 13px; margin-bottom: 16px; display: ${showError ? 'block' : 'none'}; }
+    .info { font-size: 12px; color: #888; text-align: center; margin-top: 16px; line-height: 1.5; }
+  </style>
+</head>
+<body>
+  <div class="card">
+    <div class="logo"><h1><span>LYRRA</span> Studio</h1></div>
+    <p class="subtitle">
+      Une application souhaite accéder à votre compte LYRRA Studio via MCP.<br>
+      Entrez vos identifiants API pour autoriser l'accès.
+    </p>
+    <form id="authForm" method="POST" action="/mcp/approve">
+      <input type="hidden" name="pending_token" value="${pendingToken}">
+      <label for="apiKey">Clé API (Client Secret)</label>
+      <input type="password" id="apiKey" name="api_key" placeholder="rak_XXXXXXXX_..." required>
+      <div class="error" id="error">Clé API invalide. Vérifiez votre Client Secret dans le tableau de bord.</div>
+      <button type="submit" id="submitBtn">Autoriser l'accès</button>
+    </form>
+    <p class="info">
+      Votre clé API est disponible dans le tableau de bord de votre institution,<br>
+      section « Serveur MCP » → Client Secret (visible uniquement à la création).
+    </p>
+  </div>
+  <script>
+    document.getElementById('authForm').addEventListener('submit', function() {
+      document.getElementById('submitBtn').disabled = true;
+      document.getElementById('submitBtn').textContent = 'Vérification...';
+    });
+  </script>
+</body>
+</html>`;
+}
+// ─── Create Express app ──────────────────────────────────────────────────────
+const app = express();
+app.use(cors({ origin: true, credentials: true, exposedHeaders: ['mcp-session-id'] }));
+app.use(express.json());
+app.use(express.urlencoded({ extended: true }));
+// ─── OAuth Protected Resource Metadata (RFC 9728) ────────────────────────────
+// Claude.ai fetches this to discover the authorization server
+app.get('/.well-known/oauth-protected-resource/mcp', (_req: Request, res: Response) => {
+  res.json({
+    resource: `${BASE_URL}/mcp`,
+    authorization_servers: [`${BASE_URL}/mcp`],
+    scopes_supported: ['mcp'],
+    resource_name: 'LYRRA Studio MCP',
+    resource_documentation: `${BASE_URL}/docs/mcp`,
+  });
+});
+app.get('/.well-known/oauth-protected-resource', (_req: Request, res: Response) => {
+  res.json({
+    resource: `${BASE_URL}/mcp`,
+    authorization_servers: [`${BASE_URL}/mcp`],
+    scopes_supported: ['mcp'],
+    resource_name: 'LYRRA Studio MCP',
+  });
+});
+// ─── OAuth Authorization Server Metadata (RFC 8414) ──────────────────────────
+app.get('/mcp/.well-known/oauth-authorization-server', (_req: Request, res: Response) => {
+  res.json({
+    issuer: `${BASE_URL}/mcp`,
+    authorization_endpoint: `${BASE_URL}/mcp/authorize`,
+    token_endpoint: `${BASE_URL}/mcp/token`,
+    registration_endpoint: `${BASE_URL}/mcp/register`,
+    revocation_endpoint: `${BASE_URL}/mcp/revoke`,
+    response_types_supported: ['code'],
+    grant_types_supported: ['authorization_code', 'refresh_token'],
+    code_challenge_methods_supported: ['S256'],
+    token_endpoint_auth_methods_supported: ['client_secret_post', 'none'],
+    scopes_supported: ['mcp'],
+    service_documentation: `${BASE_URL}/docs/mcp`,
+  });
+});
+// ─── Dynamic Client Registration (RFC 7591) ──────────────────────────────────
+app.post('/mcp/register', (req: Request, res: Response) => {
+  const { redirect_uris, grant_types, response_types, token_endpoint_auth_method, client_name } = req.body;
+  const clientId = `mcp_${crypto.randomBytes(16).toString('hex')}`;
+  const clientSecret = crypto.randomBytes(32).toString('hex');
+  const client: OAuthClient = {
+    client_id: clientId,
+    client_secret: clientSecret,
+    client_id_issued_at: Math.floor(Date.now() / 1000),
+    redirect_uris: redirect_uris || [],
+    grant_types: grant_types || ['authorization_code', 'refresh_token'],
+    response_types: response_types || ['code'],
+    token_endpoint_auth_method: token_endpoint_auth_method || 'client_secret_post',
+  };
+  registeredClients.set(clientId, client);
+  console.log(`[MCP OAuth] Registered client: ${clientId} (${client_name || 'unnamed'})`);
+  res.status(201).json({
+    client_id: clientId,
+    client_secret: clientSecret,
+    client_id_issued_at: client.client_id_issued_at,
+    client_secret_expires_at: 0,
+    redirect_uris: client.redirect_uris,
+    grant_types: client.grant_types,
+    response_types: client.response_types,
+    token_endpoint_auth_method: client.token_endpoint_auth_method,
+  });
+});
+// ─── Authorization endpoint ──────────────────────────────────────────────────
+app.get('/mcp/authorize', (req: Request, res: Response) => {
+  const { client_id, redirect_uri, response_type, state, code_challenge, code_challenge_method, scope } = req.query;
+  if (response_type !== 'code') {
+    res.status(400).json({ error: 'unsupported_response_type' });
+    return;
+  }
+  if (!client_id || !redirect_uri || !code_challenge) {
+    res.status(400).json({ error: 'invalid_request', error_description: 'Missing required parameters' });
+    return;
+  }
+  // Verify client is registered
+  const client = registeredClients.get(client_id as string);
+  if (!client) {
+    res.status(400).json({ error: 'invalid_client', error_description: 'Client not registered' });
+    return;
+  }
+  // Encode auth params for the form
+  const pendingData = {
+    oauthClientId: client_id as string,
+    redirectUri: redirect_uri as string,
+    codeChallenge: code_challenge as string,
+    codeChallengeMethod: (code_challenge_method as string) || 'S256',
+    state: state as string | undefined,
+  };
+  const pendingToken = Buffer.from(JSON.stringify(pendingData)).toString('base64url');
+  res.setHeader('Content-Type', 'text/html; charset=utf-8');
+  res.send(renderAuthorizePage(pendingToken));
+});
+// ─── Approve endpoint (form POST from authorize page) ────────────────────────
+app.post('/mcp/approve', async (req: Request, res: Response) => {
+  try {
+    const { pending_token, api_key } = req.body;
+    if (!pending_token || !api_key) {
+      res.status(400).send('Paramètres manquants');
+      return;
+    }
+    let pendingData: {
+      oauthClientId: string;
+      redirectUri: string;
+      codeChallenge: string;
+      codeChallengeMethod: string;
+      state?: string;
+    };
+    try {
+      pendingData = JSON.parse(Buffer.from(pending_token, 'base64url').toString('utf-8'));
+    } catch {
+      res.status(400).send('Token invalide');
+      return;
+    }
+    // Validate the LYRRA API key
+    const isValid = await validateApiKey(api_key);
+    if (!isValid) {
+      res.setHeader('Content-Type', 'text/html; charset=utf-8');
+      res.send(renderAuthorizePage(pending_token, true));
+      return;
+    }
+    // Generate authorization code
+    const authCode = crypto.randomBytes(32).toString('hex');
+    authCodes.set(authCode, {
+      oauthClientId: pendingData.oauthClientId,
+      codeChallenge: pendingData.codeChallenge,
+      codeChallengeMethod: pendingData.codeChallengeMethod,
+      redirectUri: pendingData.redirectUri,
+      state: pendingData.state,
+      apiKey: api_key,
+      expiresAt: Date.now() + 10 * 60 * 1000,
+    });
+    // Redirect back with authorization code
+    const redirectUrl = new URL(pendingData.redirectUri);
+    redirectUrl.searchParams.set('code', authCode);
+    if (pendingData.state) {
+      redirectUrl.searchParams.set('state', pendingData.state);
+    }
+    console.log(`[MCP OAuth] Authorization granted, redirecting...`);
+    res.redirect(redirectUrl.toString());
+  } catch (error: any) {
+    console.error('[MCP OAuth] Approve error:', error);
+    res.status(500).send('Erreur interne');
+  }
+});
+// ─── Token endpoint ──────────────────────────────────────────────────────────
+app.post('/mcp/token', (req: Request, res: Response) => {
+  const { grant_type, code, redirect_uri, code_verifier, client_id, client_secret, refresh_token } = req.body;
+  if (grant_type === 'authorization_code') {
+    if (!code || !code_verifier) {
+      res.status(400).json({ error: 'invalid_request' });
+      return;
+    }
+    const authCode = authCodes.get(code);
+    if (!authCode) {
+      res.status(400).json({ error: 'invalid_grant', error_description: 'Invalid authorization code' });
+      return;
+    }
+    if (Date.now() > authCode.expiresAt) {
+      authCodes.delete(code);
+      res.status(400).json({ error: 'invalid_grant', error_description: 'Authorization code expired' });
+      return;
+    }
+    // Verify PKCE
+    if (!verifyPkce(code_verifier, authCode.codeChallenge, authCode.codeChallengeMethod)) {
+      res.status(400).json({ error: 'invalid_grant', error_description: 'PKCE verification failed' });
+      return;
+    }
+    // Verify redirect_uri matches
+    if (redirect_uri && redirect_uri !== authCode.redirectUri) {
+      res.status(400).json({ error: 'invalid_grant', error_description: 'Redirect URI mismatch' });
+      return;
+    }
+    // Consume the code
+    authCodes.delete(code);
+    // Issue tokens
+    const accessToken = `at_${crypto.randomBytes(32).toString('hex')}`;
+    const newRefreshToken = `rt_${crypto.randomBytes(32).toString('hex')}`;
+    const expiresIn = 86400; // 24h
+    accessTokens.set(accessToken, {
+      oauthClientId: authCode.oauthClientId,
+      apiKey: authCode.apiKey,
+      expiresAt: Date.now() + expiresIn * 1000,
+    });
+    refreshTokens.set(newRefreshToken, {
+      oauthClientId: authCode.oauthClientId,
+      apiKey: authCode.apiKey,
+    });
+    console.log(`[MCP OAuth] Issued tokens for client ${authCode.oauthClientId}`);
+    res.json({
+      access_token: accessToken,
+      token_type: 'bearer',
+      expires_in: expiresIn,
+      refresh_token: newRefreshToken,
+    });
+  } else if (grant_type === 'refresh_token') {
+    if (!refresh_token) {
+      res.status(400).json({ error: 'invalid_request' });
+      return;
+    }
+    const rtData = refreshTokens.get(refresh_token);
+    if (!rtData) {
+      res.status(400).json({ error: 'invalid_grant', error_description: 'Invalid refresh token' });
+      return;
+    }
+    const accessToken = `at_${crypto.randomBytes(32).toString('hex')}`;
+    const expiresIn = 86400;
+    accessTokens.set(accessToken, {
+      oauthClientId: rtData.oauthClientId,
+      apiKey: rtData.apiKey,
+      expiresAt: Date.now() + expiresIn * 1000,
+    });
+    console.log(`[MCP OAuth] Refreshed token for client ${rtData.oauthClientId}`);
+    res.json({
+      access_token: accessToken,
+      token_type: 'bearer',
+      expires_in: expiresIn,
+      refresh_token: refresh_token,
+    });
+  } else {
+    res.status(400).json({ error: 'unsupported_grant_type' });
+  }
+});
+// ─── Token revocation ────────────────────────────────────────────────────────
+app.post('/mcp/revoke', (req: Request, res: Response) => {
+  const { token } = req.body;
+  if (token) {
+    accessTokens.delete(token);
+    refreshTokens.delete(token);
+  }
+  res.status(200).json({});
+});
+// ─── Bearer auth middleware ──────────────────────────────────────────────────
+function requireAuth(req: Request, res: Response): TokenData | null {
+  const tokenData = verifyBearerToken(req);
+  if (!tokenData) {
+    res.status(401).json({
+      error: 'invalid_token',
+      error_description: 'Invalid or expired access token',
+    });
+    return null;
+  }
+  return tokenData;
+}
+// ─── MCP Protocol endpoint (Streamable HTTP) ────────────────────────────────
+app.post('/mcp', async (req: Request, res: Response) => {
+  // Check if this is an OAuth/metadata request (no Authorization header = not an MCP protocol request)
+  const hasAuth = req.headers.authorization?.startsWith('Bearer ');
+  if (!hasAuth) {
+    res.status(401).json({ error: 'unauthorized' });
+    return;
+  }
+  const tokenData = requireAuth(req, res);
+  if (!tokenData) return;
+  try {
+    const sessionId = req.headers['mcp-session-id'] as string | undefined;
+    if (sessionId && mcpSessions.has(sessionId)) {
+      const session = mcpSessions.get(sessionId)!;
+      await session.transport.handleRequest(req, res, req.body);
+    } else {
+      // New session with user's API key
+      const client = new LyrraClient({
+        clientSecret: tokenData.apiKey,
+        apiUrl: LYRRA_API_URL,
+        eduflowUrl: process.env.LYRRA_EDUFLOW_API_URL || LYRRA_API_URL.replace('/api', '/eduflow'),
+      });
+      const server = createMcpServer(client);
+      const transport = new StreamableHTTPServerTransport({
+        sessionIdGenerator: () => crypto.randomUUID(),
+      });
+      transport.onclose = () => {
+        const sid = transport.sessionId;
+        if (sid) mcpSessions.delete(sid);
+        console.log(`[MCP HTTP] Session closed: ${sid}`);
+      };
+      await server.connect(transport);
+      if (transport.sessionId) {
+        mcpSessions.set(transport.sessionId, { transport, server });
+        console.log(`[MCP HTTP] New session: ${transport.sessionId}`);
+      }
+      await transport.handleRequest(req, res, req.body);
+    }
+  } catch (error: any) {
+    console.error('[MCP HTTP] POST error:', error);
+    if (!res.headersSent) {
+      res.status(500).json({ error: 'Internal server error' });
+    }
+  }
+});
+// Handle GET (SSE stream)
+app.get('/mcp', async (req: Request, res: Response) => {
+  // Check if it's a .well-known or authorize request (no auth needed)
+  // Those are handled by earlier routes, this is only for SSE
+  const tokenData = requireAuth(req, res);
+  if (!tokenData) return;
+  const sessionId = req.headers['mcp-session-id'] as string | undefined;
+  if (!sessionId || !mcpSessions.has(sessionId)) {
+    res.status(400).json({ error: 'Invalid or missing session ID' });
+    return;
+  }
+  const session = mcpSessions.get(sessionId)!;
+  await session.transport.handleRequest(req, res);
+});
+// Handle DELETE (close session)
+app.delete('/mcp', async (req: Request, res: Response) => {
+  const tokenData = requireAuth(req, res);
+  if (!tokenData) return;
+  const sessionId = req.headers['mcp-session-id'] as string | undefined;
+  if (!sessionId || !mcpSessions.has(sessionId)) {
+    res.status(404).json({ error: 'Session not found' });
+    return;
+  }
+  const session = mcpSessions.get(sessionId)!;
+  await session.transport.handleRequest(req, res);
+  mcpSessions.delete(sessionId);
+});
+// ─── Health check ────────────────────────────────────────────────────────────
+app.get('/mcp/health', (_req: Request, res: Response) => {
+  res.json({
+    status: 'ok',
+    service: 'LYRRA Studio MCP HTTP Server',
+    sessions: mcpSessions.size,
+    registeredClients: registeredClients.size,
+    timestamp: new Date().toISOString(),
+  });
+});
+// ─── Start server ────────────────────────────────────────────────────────────
+app.listen(PORT, () => {
+  console.log(`🚀 LYRRA Studio MCP HTTP Server running on port ${PORT}`);
+  console.log(`   OAuth metadata: ${BASE_URL}/mcp/.well-known/oauth-authorization-server`);
+  console.log(`   MCP endpoint:   ${BASE_URL}/mcp`);
+  console.log(`   Health check:   ${BASE_URL}/mcp/health`);
+});

package/src/index.ts CHANGED Viewed

@@ -1,107 +1,18 @@
 #!/usr/bin/env node
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
-import { client } from './client.js';
 import { config } from './config.js';
+import { createMcpServer } from './server-factory.js';
-// Tools
-import { authTools } from './tools/auth.js';
-import { eduflowTools } from './tools/eduflow.js';
-import { blocksTools } from './tools/blocks.js';
-import { connectionsTools } from './tools/connections.js';
-import { participantsTools } from './tools/participants.js';
-import { analyticsTools } from './tools/analytics.js';
-import { aiDesignerTools } from './tools/ai-designer.js';
-import { presentationTools } from './tools/presentation.js';
-import { storeTools } from './tools/store.js';
-import { projectsTools } from './tools/projects.js';
-import { resourcesTools } from './tools/resources.js';
-import { adminTools } from './tools/admin.js';
-// Resources
-import { BLOCK_TYPES_RESOURCE } from './resources/block-types.js';
-import { FLOW_SCHEMA_RESOURCE } from './resources/flow-schema.js';
-const server = new McpServer({
-  name: 'lyrra-studio',
-  version: '1.0.0',
-  description: 'Serveur MCP pour piloter LYRRA Studio - Plateforme EdTech de création de parcours pédagogiques, conversion PDF→Audio, et store d\'audiobooks.',
-});
-// --- Register all tools ---
-const allTools: Record<string, { description: string; inputSchema: any; handler: (args: any) => Promise<any> }> = {
-  ...authTools,
-  ...eduflowTools,
-  ...blocksTools,
-  ...connectionsTools,
-  ...participantsTools,
-  ...analyticsTools,
-  ...aiDesignerTools,
-  ...presentationTools,
-  ...storeTools,
-  ...projectsTools,
-  ...resourcesTools,
-  ...adminTools,
-};
-for (const [name, tool] of Object.entries(allTools)) {
-  server.tool(
-    name,
-    tool.description,
-    tool.inputSchema.shape ? Object.fromEntries(
-      Object.entries(tool.inputSchema.shape).map(([key, schema]: [string, any]) => [key, schema])
-    ) : {},
-    async (args: any) => {
-      try {
-        const result = await tool.handler(args);
-        return {
-          content: [{ type: 'text' as const, text: JSON.stringify(result, null, 2) }],
-        };
-      } catch (error: any) {
-        return {
-          content: [{ type: 'text' as const, text: `Erreur: ${error.message}` }],
-          isError: true,
-        };
-      }
-    }
-  );
-}
-// --- Register resources ---
-server.resource(
-  'block-types',
-  BLOCK_TYPES_RESOURCE.uri,
-  { description: BLOCK_TYPES_RESOURCE.description, mimeType: BLOCK_TYPES_RESOURCE.mimeType },
-  async () => ({
-    contents: [{
-      uri: BLOCK_TYPES_RESOURCE.uri,
-      mimeType: BLOCK_TYPES_RESOURCE.mimeType,
-      text: JSON.stringify(BLOCK_TYPES_RESOURCE.content, null, 2),
-    }],
-  })
-);
-server.resource(
-  'flow-construction-guide',
-  FLOW_SCHEMA_RESOURCE.uri,
-  { description: FLOW_SCHEMA_RESOURCE.description, mimeType: FLOW_SCHEMA_RESOURCE.mimeType },
-  async () => ({
-    contents: [{
-      uri: FLOW_SCHEMA_RESOURCE.uri,
-      mimeType: FLOW_SCHEMA_RESOURCE.mimeType,
-      text: JSON.stringify(FLOW_SCHEMA_RESOURCE.content, null, 2),
-    }],
-  })
-);
-// --- Start server ---
+// --- Start server (stdio mode) ---
 async function main() {
-  if (!config.clientSecret && !process.env.LYRRA_CLIENT_SECRET) {
-    console.error('⚠️  LYRRA_CLIENT_SECRET non défini. Utilisez auth_login ou définissez les variables d\'environnement LYRRA_CLIENT_ID et LYRRA_CLIENT_SECRET.');
+  if (!config.clientSecret) {
+    console.error('⚠️  LYRRA_CLIENT_SECRET non défini. Définissez la variable d\'environnement LYRRA_CLIENT_SECRET.');
+  } else {
+    console.error('✅ LYRRA Studio MCP connecté (authentification par API Key).');
   }
+  const server = createMcpServer();
   const transport = new StdioServerTransport();
   await server.connect(transport);
 }