@mcp-abap-adt/core 4.8.1 → 4.8.3

package/dist/src/handlers/view/readonly/handleReadView.d.ts

@@ -0,0 +1,33 @@
+import type { HandlerContext } from '../../../lib/handlers/interfaces';
+export declare const TOOL_DEFINITION: {
+    readonly name: "ReadView";
+    readonly available_in: readonly ["onprem", "cloud", "legacy"];
+    readonly description: "[read-only] Read ABAP view (CDS view) source code and metadata (package, responsible, description, etc.).";
+    readonly inputSchema: {
+        readonly type: "object";
+        readonly properties: {
+            readonly view_name: {
+                readonly type: "string";
+                readonly description: "View name (e.g., Z_MY_VIEW).";
+            };
+            readonly version: {
+                readonly type: "string";
+                readonly enum: readonly ["active", "inactive"];
+                readonly description: "Version to read: \"active\" (default) or \"inactive\".";
+                readonly default: "active";
+            };
+        };
+        readonly required: readonly ["view_name"];
+    };
+};
+export declare function handleReadView(context: HandlerContext, args: {
+    view_name: string;
+    version?: 'active' | 'inactive';
+}): Promise<{
+    isError: boolean;
+    content: {
+        type: string;
+        text: any;
+    }[];
+}>;
+//# sourceMappingURL=handleReadView.d.ts.map

package/dist/src/handlers/view/readonly/handleReadView.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handleReadView.d.ts","sourceRoot":"","sources":["../../../../../src/handlers/view/readonly/handleReadView.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAOvE,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;CAqBlB,CAAC;AAEX,wBAAsB,cAAc,CAClC,OAAO,EAAE,cAAc,EACvB,IAAI,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAA;CAAE;;;;;;GAwD7D"}

package/dist/src/handlers/view/readonly/handleReadView.js

@@ -0,0 +1,85 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TOOL_DEFINITION = void 0;
+exports.handleReadView = handleReadView;
+const clients_1 = require("../../../lib/clients");
+const utils_1 = require("../../../lib/utils");
+exports.TOOL_DEFINITION = {
+    name: 'ReadView',
+    available_in: ['onprem', 'cloud', 'legacy'],
+    description: '[read-only] Read ABAP view (CDS view) source code and metadata (package, responsible, description, etc.).',
+    inputSchema: {
+        type: 'object',
+        properties: {
+            view_name: {
+                type: 'string',
+                description: 'View name (e.g., Z_MY_VIEW).',
+            },
+            version: {
+                type: 'string',
+                enum: ['active', 'inactive'],
+                description: 'Version to read: "active" (default) or "inactive".',
+                default: 'active',
+            },
+        },
+        required: ['view_name'],
+    },
+};
+async function handleReadView(context, args) {
+    const { connection, logger } = context;
+    try {
+        const { view_name, version = 'active' } = args;
+        if (!view_name)
+            return (0, utils_1.return_error)(new Error('view_name is required'));
+        const client = (0, clients_1.createAdtClient)(connection, logger);
+        const viewName = view_name.toUpperCase();
+        const obj = client.getView();
+        let source_code = null;
+        try {
+            const readResult = await obj.read({ viewName }, version);
+            if (readResult?.readResult?.data) {
+                source_code =
+                    typeof readResult.readResult.data === 'string'
+                        ? readResult.readResult.data
+                        : safeStringify(readResult.readResult.data);
+            }
+        }
+        catch (e) {
+            logger?.warn(`Could not read source for ${viewName}: ${e?.message}`);
+        }
+        let metadata = null;
+        try {
+            const metaResult = await obj.readMetadata({ viewName });
+            if (metaResult?.metadataResult?.data) {
+                metadata =
+                    typeof metaResult.metadataResult.data === 'string'
+                        ? metaResult.metadataResult.data
+                        : safeStringify(metaResult.metadataResult.data);
+            }
+        }
+        catch (e) {
+            logger?.warn(`Could not read metadata for ${viewName}: ${e?.message}`);
+        }
+        return (0, utils_1.return_response)({
+            data: JSON.stringify({
+                success: true,
+                view_name: viewName,
+                version,
+                source_code,
+                metadata,
+            }, null, 2),
+        });
+    }
+    catch (error) {
+        return (0, utils_1.return_error)(error);
+    }
+}
+function safeStringify(data) {
+    try {
+        return JSON.stringify(data);
+    }
+    catch {
+        return String(data);
+    }
+}
+//# sourceMappingURL=handleReadView.js.map

package/dist/src/handlers/view/readonly/handleReadView.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handleReadView.js","sourceRoot":"","sources":["../../../../../src/handlers/view/readonly/handleReadView.ts"],"names":[],"mappings":";;;AA+BA,wCA0DC;AAzFD,kDAAuD;AAEvD,8CAI4B;AAEf,QAAA,eAAe,GAAG;IAC7B,IAAI,EAAE,UAAU;IAChB,YAAY,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAU;IACpD,WAAW,EACT,2GAA2G;IAC7G,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,SAAS,EAAE;gBACT,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,8BAA8B;aAC5C;YACD,OAAO,EAAE;gBACP,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC;gBAC5B,WAAW,EAAE,oDAAoD;gBACjE,OAAO,EAAE,QAAQ;aAClB;SACF;QACD,QAAQ,EAAE,CAAC,WAAW,CAAC;KACxB;CACO,CAAC;AAEJ,KAAK,UAAU,cAAc,CAClC,OAAuB,EACvB,IAA4D;IAE5D,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC;QAC/C,IAAI,CAAC,SAAS;YAAE,OAAO,IAAA,oBAAY,EAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;QAExE,MAAM,MAAM,GAAG,IAAA,yBAAe,EAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QAE7B,IAAI,WAAW,GAAkB,IAAI,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,IAAI,CAC/B,EAAE,QAAQ,EAAE,EACZ,OAAgC,CACjC,CAAC;YACF,IAAI,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;gBACjC,WAAW;oBACT,OAAO,UAAU,CAAC,UAAU,CAAC,IAAI,KAAK,QAAQ;wBAC5C,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI;wBAC5B,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,EAAE,IAAI,CAAC,6BAA6B,QAAQ,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,QAAQ,GAAkB,IAAI,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;YACxD,IAAI,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;gBACrC,QAAQ;oBACN,OAAO,UAAU,CAAC,cAAc,CAAC,IAAI,KAAK,QAAQ;wBAChD,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI;wBAChC,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,EAAE,IAAI,CAAC,+BAA+B,QAAQ,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,OAAO,IAAA,uBAAe,EAAC;YACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;gBACE,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,QAAQ;gBACnB,OAAO;gBACP,WAAW;gBACX,QAAQ;aACT,EACD,IAAI,EACJ,CAAC,CACF;SACe,CAAC,CAAC;IACtB,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO,IAAA,oBAAY,EAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAa;IAClC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/src/lib/auth/IAuthBrokerFactory.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Interface for AuthBrokerFactory
+ * Allows different implementations for different server versions
+ */
+import type { AuthBroker } from '@mcp-abap-adt/auth-broker';
+export interface IAuthBrokerFactory {
+    /**
+     * Initialize default broker based on CLI args and .env file presence
+     * Called once at server startup
+     */
+    initializeDefaultBroker(): Promise<void>;
+    /**
+     * Get or create auth broker for specific destination
+     * If destination already has broker, returns existing one
+     * Otherwise creates new broker with serviceKeyStore
+     */
+    getOrCreateAuthBroker(destination?: string): Promise<AuthBroker | undefined>;
+}
+//# sourceMappingURL=IAuthBrokerFactory.d.ts.map

package/dist/src/lib/auth/IAuthBrokerFactory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IAuthBrokerFactory.d.ts","sourceRoot":"","sources":["../../../../src/lib/auth/IAuthBrokerFactory.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAE5D,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,uBAAuB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzC;;;;OAIG;IACH,qBAAqB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;CAC9E"}

package/dist/src/lib/auth/IAuthBrokerFactory.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Interface for AuthBrokerFactory
+ * Allows different implementations for different server versions
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=IAuthBrokerFactory.js.map

package/dist/src/lib/auth/IAuthBrokerFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IAuthBrokerFactory.js","sourceRoot":"","sources":["../../../../src/lib/auth/IAuthBrokerFactory.ts"],"names":[],"mappings":";AAAA;;;GAGG"}

package/dist/src/lib/auth/IAuthBrokerFactoryConfig.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Configuration interface for AuthBrokerFactory
+ * Different server versions can implement their own config that conforms to this
+ */
+import type { ILogger } from '@mcp-abap-adt/interfaces';
+export interface IAuthBrokerFactoryConfig {
+    /** Default MCP destination from --mcp parameter */
+    defaultMcpDestination?: string;
+    /** Default destination (from --mcp or .env) */
+    defaultDestination?: string;
+    /** Path to .env file */
+    envFilePath?: string;
+    /** Custom path for auth broker storage */
+    authBrokerPath?: string;
+    /** Use unsafe mode (file-based session store) */
+    unsafe: boolean;
+    /** Transport type */
+    transportType: string;
+    /** Use auth-broker instead of .env file */
+    useAuthBroker?: boolean;
+    /** Port for browser auth callback server (to avoid conflicts with SSE/HTTP servers) */
+    browserAuthPort?: number;
+    /**
+     * Browser type for authentication (chrome, edge, firefox, system, headless, none)
+     * - 'system' (default): Opens system default browser
+     * - 'headless': Logs URL and waits for manual callback (SSH/remote sessions)
+     * - 'none': Logs URL and rejects immediately (automated tests)
+     */
+    browser?: string;
+    /** Logger instance (used as fallback if specific loggers are not provided) */
+    logger?: ILogger;
+    /** Optional logger for stores (service key store, session store) */
+    storeLogger?: ILogger;
+    /** Optional logger for token provider */
+    providerLogger?: ILogger;
+    /** Optional logger for auth broker */
+    brokerLogger?: ILogger;
+}
+//# sourceMappingURL=IAuthBrokerFactoryConfig.d.ts.map

package/dist/src/lib/auth/IAuthBrokerFactoryConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IAuthBrokerFactoryConfig.d.ts","sourceRoot":"","sources":["../../../../src/lib/auth/IAuthBrokerFactoryConfig.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAExD,MAAM,WAAW,wBAAwB;IACvC,mDAAmD;IACnD,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,+CAA+C;IAC/C,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,wBAAwB;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0CAA0C;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iDAAiD;IACjD,MAAM,EAAE,OAAO,CAAC;IAChB,qBAAqB;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,2CAA2C;IAC3C,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,uFAAuF;IACvF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,oEAAoE;IACpE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,yCAAyC;IACzC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,sCAAsC;IACtC,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB"}

package/dist/src/lib/auth/IAuthBrokerFactoryConfig.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Configuration interface for AuthBrokerFactory
+ * Different server versions can implement their own config that conforms to this
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=IAuthBrokerFactoryConfig.js.map

package/dist/src/lib/auth/IAuthBrokerFactoryConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IAuthBrokerFactoryConfig.js","sourceRoot":"","sources":["../../../../src/lib/auth/IAuthBrokerFactoryConfig.ts"],"names":[],"mappings":";AAAA;;;GAGG"}

package/dist/src/lib/auth/IBrokerSessionConfig.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Configuration for creating an AuthBroker from a ready session
+ *
+ * This interface allows creating a broker without knowing WHERE the config came from
+ * (.env file, service key, HTTP headers, etc.)
+ *
+ * Factory decides what stores/providers to create based on authType and available data:
+ * - basic auth: only sessionStore (credentials are static)
+ * - jwt auth: sessionStore + tokenProvider (for token refresh)
+ * - jwt auth + serviceKeyPath: serviceKeyStore + sessionStore + tokenProvider
+ */
+import type { ILogger } from '@mcp-abap-adt/interfaces';
+/**
+ * Connection configuration from any source (.env, service key, headers)
+ */
+export interface IConnectionConfig {
+    /** SAP system URL */
+    serviceUrl: string;
+    /** SAP client number */
+    sapClient?: string;
+    /** Authentication type */
+    authType: 'basic' | 'jwt';
+    /** Username for basic auth */
+    username?: string;
+    /** Password for basic auth */
+    password?: string;
+    /** JWT token for jwt auth */
+    authorizationToken?: string;
+    /** Refresh token for jwt auth */
+    refreshToken?: string;
+    /** UAA URL for token refresh */
+    uaaUrl?: string;
+    /** UAA client ID */
+    uaaClientId?: string;
+    /** UAA client secret */
+    uaaClientSecret?: string;
+}
+/**
+ * Configuration for broker creation from a ready session
+ */
+export interface IBrokerSessionConfig {
+    /** Broker key (destination name or 'default') */
+    brokerKey: string;
+    /** Connection configuration (from .env, service key, headers, etc.) */
+    connectionConfig: IConnectionConfig;
+    /** Path to service keys directory (optional - if present, creates serviceKeyStore) */
+    serviceKeyPath?: string;
+    /** Path to sessions directory (optional - uses in-memory if not provided) */
+    sessionStorePath?: string;
+    /** Store type hint (abap or btp) */
+    storeType?: 'abap' | 'btp';
+    /** Use unsafe (file-based) session store */
+    unsafe?: boolean;
+    /** Port for browser auth callback (for JWT refresh) */
+    browserAuthPort?: number;
+    /** Browser type for OAuth (system, headless, none) */
+    browser?: string;
+    /** Logger instance */
+    logger?: ILogger;
+}
+/**
+ * Broker creation mode based on authType and available data
+ */
+export type BrokerMode = 'session-only' | 'session-provider' | 'full';
+//# sourceMappingURL=IBrokerSessionConfig.d.ts.map

package/dist/src/lib/auth/IBrokerSessionConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IBrokerSessionConfig.d.ts","sourceRoot":"","sources":["../../../../src/lib/auth/IBrokerSessionConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAExD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,qBAAqB;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,wBAAwB;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0BAA0B;IAC1B,QAAQ,EAAE,OAAO,GAAG,KAAK,CAAC;IAG1B,8BAA8B;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8BAA8B;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAGlB,6BAA6B;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iCAAiC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;IAGtB,gCAAgC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oBAAoB;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wBAAwB;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,iDAAiD;IACjD,SAAS,EAAE,MAAM,CAAC;IAElB,uEAAuE;IACvE,gBAAgB,EAAE,iBAAiB,CAAC;IAEpC,sFAAsF;IACtF,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,oCAAoC;IACpC,SAAS,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAE3B,4CAA4C;IAC5C,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB,uDAAuD;IACvD,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,sDAAsD;IACtD,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,sBAAsB;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,MAAM,UAAU,GAClB,cAAc,GACd,kBAAkB,GAClB,MAAM,CAAC"}

package/dist/src/lib/auth/IBrokerSessionConfig.js

@@ -0,0 +1,14 @@
+"use strict";
+/**
+ * Configuration for creating an AuthBroker from a ready session
+ *
+ * This interface allows creating a broker without knowing WHERE the config came from
+ * (.env file, service key, HTTP headers, etc.)
+ *
+ * Factory decides what stores/providers to create based on authType and available data:
+ * - basic auth: only sessionStore (credentials are static)
+ * - jwt auth: sessionStore + tokenProvider (for token refresh)
+ * - jwt auth + serviceKeyPath: serviceKeyStore + sessionStore + tokenProvider
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=IBrokerSessionConfig.js.map

package/dist/src/lib/auth/IBrokerSessionConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IBrokerSessionConfig.js","sourceRoot":"","sources":["../../../../src/lib/auth/IBrokerSessionConfig.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG"}

package/dist/src/lib/auth/brokerFactory.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Default implementation of AuthBrokerFactory
+ * Implements unified broker creation logic according to UNIFIED_BROKER_LOGIC.md
+ *
+ * Key principles:
+ * - One broker per destination (key = destination name or 'default')
+ * - Default broker created at startup based on CLI args and .env file presence
+ * - Shared stores for destinations with same directory and type
+ */
+import { AuthBroker } from '@mcp-abap-adt/auth-broker';
+import type { IAuthBrokerFactory } from './IAuthBrokerFactory.js';
+import type { IAuthBrokerFactoryConfig } from './IAuthBrokerFactoryConfig.js';
+/**
+ * Default implementation of IAuthBrokerFactory
+ */
+export declare class AuthBrokerFactory implements IAuthBrokerFactory {
+    private authBrokers;
+    private sharedStores;
+    private config;
+    private defaultBrokerInitialized;
+    constructor(config: IAuthBrokerFactoryConfig);
+    /**
+     * Get transport type from config
+     */
+    private getTransportType;
+    /**
+     * Check if transport type supports AuthBroker
+     */
+    private isTransportSupported;
+    /**
+     * Initialize default broker based on CLI args and .env file presence
+     * Called once at server startup
+     *
+     * Creates default broker ('default' key) according to unified logic:
+     * 1. --mcp=destination → default broker with serviceKeyStore for destination
+     * 2. --env=path → default broker with sessionStore from path (no serviceKeyStore)
+     * 3. stdio/sse + .env in current folder + NOT --auth-broker → default broker with sessionStore (no serviceKeyStore)
+     * 4. Other cases → default broker NOT created
+     */
+    initializeDefaultBroker(): Promise<void>;
+    /**
+     * Get default broker (if initialized)
+     */
+    getDefaultBroker(): AuthBroker | undefined;
+    /**
+     * Get or create AuthBroker for specific destination
+     * For HTTP/SSE: called when destination is specified in headers
+     * For stdio: called to get default broker
+     */
+    getOrCreateAuthBroker(destination?: string, _clientKey?: string): Promise<AuthBroker | undefined>;
+    /**
+     * Create broker for specific destination
+     * Internal method used by both initializeDefaultBroker and getOrCreateAuthBroker
+     */
+    private createBrokerForDestination;
+    /**
+     * Create broker using EnvFileSessionStore directly
+     * Used for --env=path option (Variant 2)
+     *
+     * EnvFileSessionStore reads connection config directly from .env file
+     * and stores token updates in memory (doesn't modify original file)
+     */
+    private createBrokerWithEnvFileStore;
+    /**
+     * Load .env file and populate session store with connection config
+     * @param envFilePath Path to .env file
+     * @param destination Destination name (usually 'default')
+     * @param broker AuthBroker instance
+     * @param logger Logger instance
+     * @returns Auth type from .env file ('basic' or 'jwt')
+     */
+    private loadEnvFileIntoSessionStore;
+    private createTokenProviderForDestination;
+    private wrapLegacyTokenProvider;
+    /**
+     * Get existing AuthBroker without creating new one
+     */
+    getAuthBroker(destination?: string): AuthBroker | undefined;
+    /**
+     * Clear all AuthBroker instances
+     */
+    clear(): void;
+}
+//# sourceMappingURL=brokerFactory.d.ts.map

package/dist/src/lib/auth/brokerFactory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"brokerFactory.d.ts","sourceRoot":"","sources":["../../../../src/lib/auth/brokerFactory.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAuBvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAE9E;;GAEG;AACH,qBAAa,iBAAkB,YAAW,kBAAkB;IAE1D,OAAO,CAAC,WAAW,CAAiC;IAIpD,OAAO,CAAC,YAAY,CAGhB;IAEJ,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,wBAAwB,CAAS;gBAE7B,MAAM,EAAE,wBAAwB;IAI5C;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAIxB;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAW5B;;;;;;;;;OASG;IACG,uBAAuB,IAAI,OAAO,CAAC,IAAI,CAAC;IA8M9C;;OAEG;IACH,gBAAgB,IAAI,UAAU,GAAG,SAAS;IAI1C;;;;OAIG;IACG,qBAAqB,CACzB,WAAW,CAAC,EAAE,MAAM,EACpB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IA8DlC;;;OAGG;YACW,0BAA0B;IAwPxC;;;;;;OAMG;YACW,4BAA4B;IAyD1C;;;;;;;OAOG;YACW,2BAA2B;YAiH3B,iCAAiC;IA4E/C,OAAO,CAAC,uBAAuB;IAkC/B;;OAEG;IACH,aAAa,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;IAO3D;;OAEG;IACH,KAAK,IAAI,IAAI;CAKd"}