@mcp-consultant-tools/azure-b2c 27.0.0 → 28.0.0-beta.5

package/build/b2c-client.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Azure B2C Graph API client
+ *
+ * Handles authentication, client setup, response mapping, and error enhancement.
+ */
+import { Client } from '@microsoft/microsoft-graph-client';
+import type { AzureB2CConfig, B2CUser, B2CGroup } from './models/index.js';
+export declare class B2CClient {
+    private config;
+    private graphClient;
+    private credential;
+    constructor(config: AzureB2CConfig);
+    /** Get the resolved config */
+    getConfig(): AzureB2CConfig;
+    /** Get or create the Microsoft Graph client */
+    getClient(): Client;
+    /** Check if operation is permitted */
+    checkPermission(operation: string, enabled: boolean): void;
+    /** Map Graph API user response to B2CUser */
+    mapUserResponse(response: any): B2CUser;
+    /** Map array of Graph API user responses */
+    mapUsersResponse(responses: any[]): B2CUser[];
+    /** Map Graph API group response to B2CGroup */
+    mapGroupResponse(response: any): B2CGroup;
+    /** Map array of Graph API group responses */
+    mapGroupsResponse(responses: any[]): B2CGroup[];
+    /** Enhance error with helpful context */
+    enhanceError(error: any, operation: string): Error;
+}
+//# sourceMappingURL=b2c-client.d.ts.map

package/build/b2c-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"b2c-client.d.ts","sourceRoot":"","sources":["../src/b2c-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,mCAAmC,CAAC;AAE3D,OAAO,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE3E,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,UAAU,CAAuC;gBAE7C,MAAM,EAAE,cAAc;IAclC,8BAA8B;IAC9B,SAAS,IAAI,cAAc;IAI3B,+CAA+C;IAC/C,SAAS,IAAI,MAAM;IAoBnB,sCAAsC;IACtC,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAS1D,6CAA6C;IAC7C,eAAe,CAAC,QAAQ,EAAE,GAAG,GAAG,OAAO;IAoBvC,4CAA4C;IAC5C,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE;IAI7C,+CAA+C;IAC/C,gBAAgB,CAAC,QAAQ,EAAE,GAAG,GAAG,QAAQ;IAUzC,6CAA6C;IAC7C,iBAAiB,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,QAAQ,EAAE;IAI/C,yCAAyC;IACzC,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,GAAG,KAAK;CAsCnD"}

package/build/b2c-client.js

@@ -0,0 +1,112 @@
+/**
+ * Azure B2C Graph API client
+ *
+ * Handles authentication, client setup, response mapping, and error enhancement.
+ */
+import { ClientSecretCredential } from '@azure/identity';
+import { Client } from '@microsoft/microsoft-graph-client';
+import { TokenCredentialAuthenticationProvider } from '@microsoft/microsoft-graph-client/authProviders/azureTokenCredentials/index.js';
+export class B2CClient {
+    config;
+    graphClient = null;
+    credential = null;
+    constructor(config) {
+        this.config = {
+            maxResults: 100,
+            cacheUsersTTL: 300,
+            ...config,
+        };
+        if (!this.config.tenantId || !this.config.clientId || !this.config.clientSecret) {
+            throw new Error('Azure B2C requires tenantId, clientId, and clientSecret configuration');
+        }
+    }
+    /** Get the resolved config */
+    getConfig() {
+        return this.config;
+    }
+    /** Get or create the Microsoft Graph client */
+    getClient() {
+        if (!this.graphClient) {
+            this.credential = new ClientSecretCredential(this.config.tenantId, this.config.clientId, this.config.clientSecret);
+            const authProvider = new TokenCredentialAuthenticationProvider(this.credential, {
+                scopes: ['https://graph.microsoft.com/.default'],
+            });
+            this.graphClient = Client.initWithMiddleware({
+                authProvider,
+            });
+        }
+        return this.graphClient;
+    }
+    /** Check if operation is permitted */
+    checkPermission(operation, enabled) {
+        if (!enabled) {
+            throw new Error(`${operation} is not enabled. ` +
+                `Set the appropriate environment variable to enable this operation.`);
+        }
+    }
+    /** Map Graph API user response to B2CUser */
+    mapUserResponse(response) {
+        return {
+            id: response.id,
+            displayName: response.displayName,
+            givenName: response.givenName,
+            surname: response.surname,
+            userPrincipalName: response.userPrincipalName,
+            mail: response.mail,
+            otherMails: response.otherMails,
+            identities: response.identities,
+            accountEnabled: response.accountEnabled,
+            createdDateTime: response.createdDateTime,
+            jobTitle: response.jobTitle,
+            department: response.department,
+            mobilePhone: response.mobilePhone,
+            city: response.city,
+            country: response.country,
+        };
+    }
+    /** Map array of Graph API user responses */
+    mapUsersResponse(responses) {
+        return responses.map((r) => this.mapUserResponse(r));
+    }
+    /** Map Graph API group response to B2CGroup */
+    mapGroupResponse(response) {
+        return {
+            id: response.id,
+            displayName: response.displayName,
+            description: response.description,
+            mailEnabled: response.mailEnabled,
+            securityEnabled: response.securityEnabled,
+        };
+    }
+    /** Map array of Graph API group responses */
+    mapGroupsResponse(responses) {
+        return responses.map((r) => this.mapGroupResponse(r));
+    }
+    /** Enhance error with helpful context */
+    enhanceError(error, operation) {
+        const message = error.message || String(error);
+        if (error.statusCode === 401 || message.includes('Unauthorized')) {
+            return new Error(`Unauthorized to ${operation}. ` +
+                `Verify app registration has correct API permissions (User.ReadWrite.All) ` +
+                `and "User Administrator" role assignment. ` +
+                `Original error: ${message}`);
+        }
+        if (error.statusCode === 403 || message.includes('Forbidden')) {
+            return new Error(`Forbidden to ${operation}. ` +
+                `The app may lack required permissions or role assignments. ` +
+                `Original error: ${message}`);
+        }
+        if (error.statusCode === 404 || message.includes('Request_ResourceNotFound')) {
+            return new Error(`Resource not found when attempting to ${operation}. ` +
+                `Verify the user/group ID is correct. ` +
+                `Original error: ${message}`);
+        }
+        if (message.includes('Invalid password')) {
+            return new Error(`Invalid password format. Password must meet Azure AD B2C complexity requirements: ` +
+                `8-256 characters, at least 3 of: lowercase, uppercase, digit, symbol. ` +
+                `Original error: ${message}`);
+        }
+        return new Error(`Failed to ${operation}: ${message}`);
+    }
+}
+//# sourceMappingURL=b2c-client.js.map

package/build/b2c-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"b2c-client.js","sourceRoot":"","sources":["../src/b2c-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,mCAAmC,CAAC;AAC3D,OAAO,EAAE,qCAAqC,EAAE,MAAM,gFAAgF,CAAC;AAGvI,MAAM,OAAO,SAAS;IACZ,MAAM,CAAiB;IACvB,WAAW,GAAkB,IAAI,CAAC;IAClC,UAAU,GAAkC,IAAI,CAAC;IAEzD,YAAY,MAAsB;QAChC,IAAI,CAAC,MAAM,GAAG;YACZ,UAAU,EAAE,GAAG;YACf,aAAa,EAAE,GAAG;YAClB,GAAG,MAAM;SACV,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAChF,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,+CAA+C;IAC/C,SAAS;QACP,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC,UAAU,GAAG,IAAI,sBAAsB,CAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,EACpB,IAAI,CAAC,MAAM,CAAC,QAAQ,EACpB,IAAI,CAAC,MAAM,CAAC,YAAY,CACzB,CAAC;YAEF,MAAM,YAAY,GAAG,IAAI,qCAAqC,CAAC,IAAI,CAAC,UAAU,EAAE;gBAC9E,MAAM,EAAE,CAAC,sCAAsC,CAAC;aACjD,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,kBAAkB,CAAC;gBAC3C,YAAY;aACb,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,sCAAsC;IACtC,eAAe,CAAC,SAAiB,EAAE,OAAgB;QACjD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,GAAG,SAAS,mBAAmB;gBAC7B,oEAAoE,CACvE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,eAAe,CAAC,QAAa;QAC3B,OAAO;YACL,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;SAC1B,CAAC;IACJ,CAAC;IAED,4CAA4C;IAC5C,gBAAgB,CAAC,SAAgB;QAC/B,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,+CAA+C;IAC/C,gBAAgB,CAAC,QAAa;QAC5B,OAAO;YACL,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,eAAe,EAAE,QAAQ,CAAC,eAAe;SAC1C,CAAC;IACJ,CAAC;IAED,6CAA6C;IAC7C,iBAAiB,CAAC,SAAgB;QAChC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,yCAAyC;IACzC,YAAY,CAAC,KAAU,EAAE,SAAiB;QACxC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;QAE/C,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACjE,OAAO,IAAI,KAAK,CACd,mBAAmB,SAAS,IAAI;gBAC9B,2EAA2E;gBAC3E,4CAA4C;gBAC5C,mBAAmB,OAAO,EAAE,CAC/B,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9D,OAAO,IAAI,KAAK,CACd,gBAAgB,SAAS,IAAI;gBAC3B,6DAA6D;gBAC7D,mBAAmB,OAAO,EAAE,CAC/B,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;YAC7E,OAAO,IAAI,KAAK,CACd,yCAAyC,SAAS,IAAI;gBACpD,uCAAuC;gBACvC,mBAAmB,OAAO,EAAE,CAC/B,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACzC,OAAO,IAAI,KAAK,CACd,oFAAoF;gBAClF,wEAAwE;gBACxE,mBAAmB,OAAO,EAAE,CAC/B,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,KAAK,CAAC,aAAa,SAAS,KAAK,OAAO,EAAE,CAAC,CAAC;IACzD,CAAC;CACF"}

package/build/index.d.ts

@@ -1,25 +1,18 @@
 #!/usr/bin/env node
 /**
- * Azure AD B2C MCP Server
+ * @mcp-consultant-tools/azure-b2c
  *
- * Provides user management capabilities for Azure AD B2C tenants via Microsoft Graph API.
- *
- * Tools (11 total):
- * - Read-only (6): list-users, get-user, search-users, list-groups, get-user-groups, get-group-members
- * - Password (2): reset-user-password, force-password-change (requires AZURE_B2C_ENABLE_PASSWORD_RESET)
- * - User Create (1): create-user (requires AZURE_B2C_ENABLE_USER_CREATE)
- * - User Update (1): update-user (requires AZURE_B2C_ENABLE_USER_UPDATE)
- * - User Delete (1): delete-user (requires AZURE_B2C_ENABLE_USER_DELETE)
- *
- * Prompts (2):
- * - b2c-user-overview: Formatted user profile with group memberships
- * - b2c-tenant-summary: Tenant statistics and user breakdown
+ * MCP server for Azure AD B2C user management via Microsoft Graph API.
+ * Entry point: MCP server startup + backward-compatible registerAzureB2CTools().
  */
-import { AzureB2CService } from "./AzureB2CService.js";
-export { AzureB2CService };
-export type { AzureB2CConfig, B2CUser, B2CGroup, B2CIdentity, CreateUserRequest, UpdateUserRequest } from "./AzureB2CService.js";
 /**
- * Register Azure B2C tools and prompts on an MCP server
+ * Register Azure B2C tools and prompts on an MCP server.
+ * Backward-compatible API for the meta package.
  */
-export declare function registerAzureB2CTools(server: any, b2cService?: AzureB2CService): void;
+export declare function registerAzureB2CTools(server: any): void;
+export { B2CClient } from './b2c-client.js';
+export { UserService } from './services/user-service.js';
+export { GroupService } from './services/group-service.js';
+export type { AzureB2CConfig, B2CUser, B2CGroup, B2CIdentity, CreateUserRequest, UpdateUserRequest, TenantSummary, } from './models/index.js';
+export type { ServiceContext } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/build/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;GAeG;AAMH,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAcvD,OAAO,EAAE,eAAe,EAAE,CAAC;AAC3B,YAAY,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEjI;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,eAAe,QAsoB9E"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AA6EH;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,GAAG,GAAG,IAAI,CAIvD;AAGD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,YAAY,EACV,cAAc,EACd,OAAO,EACP,QAAQ,EACR,WAAW,EACX,iBAAiB,EACjB,iBAAiB,EACjB,aAAa,GACd,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC"}