@matimo/core 0.1.0-alpha.10 → 0.1.0-alpha.12

package/dist/mcp/mcp-server.d.ts

@@ -0,0 +1,110 @@
+/**
+ * Matimo MCP Server
+ *
+ * Exposes all Matimo tools via the Model Context Protocol.
+ * Supports stdio (local/Claude Desktop) and HTTP (remote/Docker) transports.
+ *
+ * Architecture:
+ *   Client → MCP Protocol → MCPServer → MatimoInstance.execute() → Tool APIs
+ *   Secrets resolved via SecretResolverChain (env, dotenv, Vault, AWS SM)
+ *   HTTP mode protected by Bearer token (MATIMO_MCP_TOKEN)
+ */
+import { MatimoInstance } from '../matimo-instance';
+import type { SecretResolverChainConfig } from './secrets/types';
+export interface MCPServerOptions {
+    /** Transport mode. Default: 'stdio' */
+    transport?: 'stdio' | 'http';
+    /** HTTP port. Default: 3000. Only used in HTTP mode. */
+    port?: number;
+    /** Allowlist of tool names. If set, only these tools are exposed. */
+    tools?: string[];
+    /** Denylist of tool names. Excluded from exposure. */
+    excludeTools?: string[];
+    /** Secret resolver chain config. Default: env-only. */
+    secretResolver?: SecretResolverChainConfig;
+    /** Bearer token for HTTP mode. Also reads MATIMO_MCP_TOKEN env var. If not set in HTTP mode, auto-generated. */
+    mcpToken?: string;
+    /** Tool paths to load. Passed to MatimoInstance.init(). */
+    toolPaths?: string[];
+    /** Auto-discover @matimo/* packages. Default: true */
+    autoDiscover?: boolean;
+    /** Enable HTTPS. Requires cert+key or use selfSigned. Default: false */
+    https?: boolean;
+    /** Path to TLS certificate file (PEM). Required if https=true and selfSigned=false. */
+    certPath?: string;
+    /** Path to TLS private key file (PEM). Required if https=true and selfSigned=false. */
+    keyPath?: string;
+    /** Auto-generate self-signed certificate. Default: false. Certs stored in .matimo/certs/ */
+    selfSigned?: boolean;
+}
+export declare class MCPServer {
+    private readonly options;
+    private matimo;
+    private resolverChain;
+    private mcpServer;
+    private httpServer;
+    /** Filtered tools available for MCP registration */
+    private filteredTools;
+    /** The active bearer token (explicit, env, or auto-generated) */
+    private activeToken;
+    constructor(options?: MCPServerOptions);
+    /** Get the active bearer token (available after start()) */
+    getActiveToken(): string | null;
+    /**
+     * Start the MCP server.
+     *
+     * 1. Initialize secret resolver chain
+     * 2. Seed process.env with resolved secrets (for MatimoInstance compatibility)
+     * 3. Initialize MatimoInstance with tools
+     * 4. Register all tools on the MCP server
+     * 5. Connect transport (stdio or HTTP)
+     */
+    start(): Promise<void>;
+    /**
+     * Resolve all auth-related secrets for tools and seed them into process.env.
+     * This ensures MatimoInstance.injectAuthParameters() can find them.
+     */
+    private seedEnvironmentSecrets;
+    /**
+     * Create a new McpServer instance with all filtered tools registered.
+     * Each call returns a fresh server — used per-session in HTTP mode.
+     */
+    private createMcpServerWithTools;
+    /**
+     * Connect via stdio transport (for Claude Desktop, Cursor, etc.)
+     */
+    private connectStdio;
+    /**
+     * Connect via HTTP/HTTPS transport with Bearer token auth.
+     * Creates a new McpServer + transport per session to support multiple concurrent clients.
+     * Auto-generates a bearer token if none is provided.
+     */
+    private connectHttp;
+    /**
+     * Get TLS options for HTTPS mode.
+     * Supports user-provided certs or auto-generated self-signed certs.
+     */
+    private getTlsOptions;
+    /**
+     * Generate a self-signed TLS certificate using Node.js crypto.
+     * Certs are cached in .matimo/certs/ for reuse across restarts.
+     */
+    private generateSelfSignedCert;
+    /**
+     * Create a self-signed certificate using openssl CLI.
+     * Throws if openssl is unavailable or fails — provide --cert and --key paths as an alternative.
+     */
+    private createSelfSignedCertViaCli;
+    /**
+     * Gracefully stop the MCP server.
+     */
+    stop(): Promise<void>;
+    /** Get the MatimoInstance (for testing) */
+    getMatimoInstance(): MatimoInstance | null;
+}
+/**
+ * Factory function to create and start an MCP server.
+ * Convenience for one-liner usage.
+ */
+export declare function createMCPServer(options?: MCPServerOptions): Promise<MCPServer>;
+//# sourceMappingURL=mcp-server.d.ts.map

package/dist/mcp/mcp-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server.d.ts","sourceRoot":"","sources":["../../src/mcp/mcp-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAMpD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAKjE,MAAM,WAAW,gBAAgB;IAC/B,uCAAuC;IACvC,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC7B,wDAAwD;IACxD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,sDAAsD;IACtD,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,uDAAuD;IACvD,cAAc,CAAC,EAAE,yBAAyB,CAAC;IAC3C,gHAAgH;IAChH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,sDAAsD;IACtD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,wEAAwE;IACxE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,uFAAuF;IACvF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uFAAuF;IACvF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4FAA4F;IAC5F,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAqED,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAGL;IACnB,OAAO,CAAC,MAAM,CAA+B;IAC7C,OAAO,CAAC,aAAa,CAAoC;IACzD,OAAO,CAAC,SAAS,CAAiB;IAClC,OAAO,CAAC,UAAU,CAAiB;IACnC,oDAAoD;IACpD,OAAO,CAAC,aAAa,CAAwB;IAC7C,iEAAiE;IACjE,OAAO,CAAC,WAAW,CAAuB;gBAE9B,OAAO,GAAE,gBAAqB;IAW1C,4DAA4D;IAC5D,cAAc,IAAI,MAAM,GAAG,IAAI;IAI/B;;;;;;;;OAQG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAoE5B;;;OAGG;YACW,sBAAsB;IA2CpC;;;OAGG;YAEW,wBAAwB;IA+EtC;;OAEG;YACW,YAAY;IAiB1B;;;;OAIG;YACW,WAAW;IAoMzB;;;OAGG;YACW,aAAa;IAyB3B;;;OAGG;YACW,sBAAsB;IAyCpC;;;OAGG;YAEW,0BAA0B;IAqDxC;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAiD3B,2CAA2C;IAC3C,iBAAiB,IAAI,cAAc,GAAG,IAAI;CAG3C;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,CAIpF"}