@mcp-z/oauth 1.0.0

package/dist/esm/lib/account-server/loopback.js

@@ -0,0 +1,372 @@
+/**
+ * Loopback OAuth account management tools.
+ *
+ * Provides account management for LoopbackOAuthProvider (server-managed multi-account).
+ * Users can add multiple accounts, switch between them, and manage identities.
+ *
+ * Tools:
+ * - account-me: Show current user identity (email, alias, session expiry)
+ * - account-switch: Use account (add if needed, switch if already linked)
+ * - account-remove: Remove account and delete tokens
+ * - account-list: Show all linked accounts (returns empty array if none)
+ */ import { ErrorCode, McpError } from '@modelcontextprotocol/sdk/types.js';
+import { z } from 'zod';
+import { addAccount, getAccountInfo, getActiveAccount, getLinkedAccounts, removeAccount, setAccountInfo, setActiveAccount } from '../../account-utils.js';
+import { createAccountMe } from './me.js';
+import { findAccountByEmailOrAlias } from './shared-utils.js';
+/**
+ * Create loopback OAuth account management tools.
+ * Returns 4 tools: account-me, account-switch, account-remove, account-list.
+ */ export function createLoopback(config) {
+    const { service, store, logger, auth } = config;
+    // Create account-me tool
+    const meTools = createAccountMe({
+        service,
+        store,
+        logger,
+        mode: 'loopback'
+    });
+    const tools = [
+        ...meTools.tools,
+        // account-switch
+        {
+            name: 'account-switch',
+            config: {
+                description: `Use ${service} account (smart mode). If email/alias provided and already linked, switches to it without triggering OAuth. If not linked or no email provided, triggers OAuth browser flow to add account. Returns account email, whether it was newly added, and total account count.`,
+                inputSchema: {
+                    email: z.string().optional().describe('Email address to link (if already linked, switches without OAuth)'),
+                    alias: z.string().optional().describe('Optional alias for easy identification')
+                },
+                outputSchema: {
+                    result: z.discriminatedUnion('type', [
+                        z.object({
+                            type: z.literal('success'),
+                            email: z.string(),
+                            isNew: z.boolean(),
+                            totalAccounts: z.number(),
+                            message: z.string()
+                        })
+                    ])
+                }
+            },
+            handler: async (args)=>{
+                const params = args;
+                try {
+                    var _ref;
+                    logger.info(`Starting account switch for ${service}`, {
+                        email: params.email,
+                        alias: params.alias
+                    });
+                    // Get existing accounts
+                    const existingAccounts = await getLinkedAccounts(store, {
+                        service
+                    });
+                    let email;
+                    let isNew;
+                    // Smart behavior: check if email provided and already linked
+                    if (params.email) {
+                        // Find account by email or alias
+                        const accountId = await findAccountByEmailOrAlias(store, service, params.email);
+                        if (accountId) {
+                            // Account already linked - just switch to it
+                            email = accountId;
+                            isNew = false;
+                            logger.info(`Account already linked: ${email}, switching without OAuth`);
+                            // Set as active account
+                            await setActiveAccount(store, {
+                                service,
+                                accountId: email
+                            });
+                            // Update alias if provided
+                            if (params.alias) {
+                                var _ref1;
+                                const existingInfo = await getAccountInfo(store, {
+                                    accountId: email,
+                                    service
+                                });
+                                const accountInfo = {
+                                    email,
+                                    alias: params.alias,
+                                    addedAt: (_ref1 = existingInfo === null || existingInfo === void 0 ? void 0 : existingInfo.addedAt) !== null && _ref1 !== void 0 ? _ref1 : new Date().toISOString()
+                                };
+                                await setAccountInfo(store, {
+                                    accountId: email,
+                                    service
+                                }, accountInfo);
+                            }
+                            const result = {
+                                type: 'success',
+                                email,
+                                isNew: false,
+                                totalAccounts: existingAccounts.length,
+                                message: `Account already linked: ${email}. Set as active account (no OAuth needed).`
+                            };
+                            return {
+                                content: [
+                                    {
+                                        type: 'text',
+                                        text: JSON.stringify(result, null, 2)
+                                    }
+                                ],
+                                structuredContent: {
+                                    result
+                                }
+                            };
+                        }
+                    }
+                    // Not linked or no email provided - trigger OAuth flow for new account
+                    // Check if provider supports interactive authentication
+                    if (!auth.authenticateNewAccount) {
+                        throw new Error('Account switching requires interactive authentication. ' + 'The current auth provider does not support authenticateNewAccount().');
+                    }
+                    // Trigger new authentication with account selection
+                    email = await auth.authenticateNewAccount();
+                    // Check if account already exists (in case OAuth returned different email than requested)
+                    isNew = !existingAccounts.includes(email);
+                    if (isNew) {
+                        // Add new account
+                        await addAccount(store, {
+                            service,
+                            accountId: email
+                        });
+                        logger.info(`Added new ${service} account`, {
+                            email
+                        });
+                    } else {
+                        logger.info(`Account already linked: ${email}`);
+                    }
+                    // Set/update account info
+                    const existingInfo = await getAccountInfo(store, {
+                        accountId: email,
+                        service
+                    });
+                    const accountInfo = {
+                        email,
+                        ...params.alias ? {
+                            alias: params.alias
+                        } : {},
+                        addedAt: isNew ? new Date().toISOString() : (_ref = existingInfo === null || existingInfo === void 0 ? void 0 : existingInfo.addedAt) !== null && _ref !== void 0 ? _ref : new Date().toISOString()
+                    };
+                    await setAccountInfo(store, {
+                        accountId: email,
+                        service
+                    }, accountInfo);
+                    // Set as active account
+                    await setActiveAccount(store, {
+                        service,
+                        accountId: email
+                    });
+                    const totalAccounts = isNew ? existingAccounts.length + 1 : existingAccounts.length;
+                    const result = {
+                        type: 'success',
+                        email,
+                        isNew,
+                        totalAccounts,
+                        message: isNew ? `Successfully added ${service} account: ${email} (${totalAccounts} total)` : `Account already linked: ${email}. Set as active account.`
+                    };
+                    return {
+                        content: [
+                            {
+                                type: 'text',
+                                text: JSON.stringify(result, null, 2)
+                            }
+                        ],
+                        structuredContent: {
+                            result
+                        }
+                    };
+                } catch (error) {
+                    const message = error instanceof Error ? error.message : String(error);
+                    throw new McpError(ErrorCode.InternalError, `Error switching ${service} account: ${message}`, {
+                        stack: error instanceof Error ? error.stack : undefined
+                    });
+                }
+            }
+        },
+        // account-remove
+        {
+            name: 'account-remove',
+            config: {
+                description: `Remove ${service} account and delete stored tokens permanently. If removing the active account, the first remaining account becomes active. Requires email or alias parameter.`,
+                inputSchema: {
+                    accountId: z.string().min(1).describe('Email address or alias of account to remove')
+                },
+                outputSchema: {
+                    result: z.discriminatedUnion('type', [
+                        z.object({
+                            type: z.literal('success'),
+                            service: z.string(),
+                            removed: z.string(),
+                            remainingAccounts: z.number(),
+                            newActiveAccount: z.string().optional(),
+                            message: z.string()
+                        })
+                    ])
+                }
+            },
+            handler: async (args)=>{
+                const params = args;
+                try {
+                    const linkedAccounts = await getLinkedAccounts(store, {
+                        service
+                    });
+                    if (linkedAccounts.length === 0) {
+                        throw new Error(`No ${service} accounts to remove`);
+                    }
+                    // Find account by email or alias
+                    const accountId = await findAccountByEmailOrAlias(store, service, params.accountId);
+                    if (!accountId) {
+                        throw new Error(`Account not found: ${params.accountId}`);
+                    }
+                    // Get current active account
+                    const activeAccount = await getActiveAccount(store, {
+                        service
+                    });
+                    const removingActive = activeAccount === accountId;
+                    // Remove the account
+                    await removeAccount(store, {
+                        service,
+                        accountId
+                    });
+                    const remainingAccounts = linkedAccounts.filter((id)=>id !== accountId);
+                    // If we removed the active account, set first remaining as active
+                    let newActiveAccount;
+                    if (removingActive && remainingAccounts.length > 0) {
+                        const firstRemaining = remainingAccounts[0];
+                        if (firstRemaining) {
+                            newActiveAccount = firstRemaining;
+                            await setActiveAccount(store, {
+                                service,
+                                accountId: newActiveAccount
+                            });
+                        }
+                    }
+                    logger.info(`Successfully removed ${service} account`, {
+                        accountId,
+                        remainingAccounts: remainingAccounts.length
+                    });
+                    const result = {
+                        type: 'success',
+                        service,
+                        removed: accountId,
+                        remainingAccounts: remainingAccounts.length,
+                        ...newActiveAccount && {
+                            newActiveAccount
+                        },
+                        message: `Removed ${service} account: ${accountId}${newActiveAccount ? `. Active account is now: ${newActiveAccount}` : ''}`
+                    };
+                    return {
+                        content: [
+                            {
+                                type: 'text',
+                                text: JSON.stringify(result, null, 2)
+                            }
+                        ],
+                        structuredContent: {
+                            result
+                        }
+                    };
+                } catch (error) {
+                    const message = error instanceof Error ? error.message : String(error);
+                    throw new McpError(ErrorCode.InternalError, `Error removing ${service} account: ${message}`, {
+                        stack: error instanceof Error ? error.stack : undefined
+                    });
+                }
+            }
+        },
+        // account-list
+        {
+            name: 'account-list',
+            config: {
+                description: `List all linked ${service} accounts with their aliases and active status.`,
+                inputSchema: {},
+                outputSchema: {
+                    result: z.discriminatedUnion('type', [
+                        z.object({
+                            type: z.literal('success'),
+                            service: z.string(),
+                            accounts: z.array(z.object({
+                                email: z.string(),
+                                alias: z.string().optional(),
+                                isActive: z.boolean()
+                            })),
+                            totalAccounts: z.number(),
+                            message: z.string()
+                        })
+                    ])
+                }
+            },
+            handler: async ()=>{
+                try {
+                    const linkedAccounts = await getLinkedAccounts(store, {
+                        service
+                    });
+                    // Return empty array gracefully (no error when no accounts)
+                    if (linkedAccounts.length === 0) {
+                        const result = {
+                            type: 'success',
+                            service,
+                            accounts: [],
+                            totalAccounts: 0,
+                            message: `No ${service} accounts linked. Use account-switch to add an account.`
+                        };
+                        return {
+                            content: [
+                                {
+                                    type: 'text',
+                                    text: JSON.stringify(result, null, 2)
+                                }
+                            ],
+                            structuredContent: {
+                                result
+                            }
+                        };
+                    }
+                    const activeAccountId = await getActiveAccount(store, {
+                        service
+                    });
+                    // Get account info for each linked account
+                    const accounts = await Promise.all(linkedAccounts.map(async (email)=>{
+                        const accountInfo = await getAccountInfo(store, {
+                            accountId: email,
+                            service
+                        });
+                        return {
+                            email,
+                            alias: accountInfo === null || accountInfo === void 0 ? void 0 : accountInfo.alias,
+                            isActive: email === activeAccountId
+                        };
+                    }));
+                    const result = {
+                        type: 'success',
+                        service,
+                        accounts,
+                        totalAccounts: linkedAccounts.length,
+                        message: `Found ${linkedAccounts.length} ${service} account(s)`
+                    };
+                    return {
+                        content: [
+                            {
+                                type: 'text',
+                                text: JSON.stringify(result, null, 2)
+                            }
+                        ],
+                        structuredContent: {
+                            result
+                        }
+                    };
+                } catch (error) {
+                    const message = error instanceof Error ? error.message : String(error);
+                    throw new McpError(ErrorCode.InternalError, `Error listing ${service} accounts: ${message}`, {
+                        stack: error instanceof Error ? error.stack : undefined
+                    });
+                }
+            }
+        }
+    ];
+    const prompts = [];
+    return {
+        tools,
+        prompts
+    };
+}

package/dist/esm/lib/account-server/loopback.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/kevin/Dev/Projects/ai/mcp-z/oauth/oauth/src/lib/account-server/loopback.ts"],"sourcesContent":["/**\n * Loopback OAuth account management tools.\n *\n * Provides account management for LoopbackOAuthProvider (server-managed multi-account).\n * Users can add multiple accounts, switch between them, and manage identities.\n *\n * Tools:\n * - account-me: Show current user identity (email, alias, session expiry)\n * - account-switch: Use account (add if needed, switch if already linked)\n * - account-remove: Remove account and delete tokens\n * - account-list: Show all linked accounts (returns empty array if none)\n */\n\nimport type { CallToolResult } from '@modelcontextprotocol/sdk/types.js';\nimport { ErrorCode, McpError } from '@modelcontextprotocol/sdk/types.js';\nimport { z } from 'zod';\nimport { addAccount, getAccountInfo, getActiveAccount, getLinkedAccounts, removeAccount, setAccountInfo, setActiveAccount } from '../../account-utils.ts';\nimport type { AccountInfo, McpPrompt, McpTool } from '../../types.ts';\nimport { createAccountMe } from './me.ts';\nimport { findAccountByEmailOrAlias } from './shared-utils.ts';\nimport type { AccountLoopbackConfig } from './types.ts';\n\n/**\n * Create loopback OAuth account management tools.\n * Returns 4 tools: account-me, account-switch, account-remove, account-list.\n */\nexport function createLoopback(config: AccountLoopbackConfig): { tools: McpTool[]; prompts: McpPrompt[] } {\n  const { service, store, logger, auth } = config;\n\n  // Create account-me tool\n  const meTools = createAccountMe({ service, store, logger, mode: 'loopback' });\n\n  const tools: McpTool[] = [\n    ...meTools.tools,\n    // account-switch\n    {\n      name: 'account-switch',\n      config: {\n        description: `Use ${service} account (smart mode). If email/alias provided and already linked, switches to it without triggering OAuth. If not linked or no email provided, triggers OAuth browser flow to add account. Returns account email, whether it was newly added, and total account count.`,\n        inputSchema: {\n          email: z.string().optional().describe('Email address to link (if already linked, switches without OAuth)'),\n          alias: z.string().optional().describe('Optional alias for easy identification'),\n        } as const,\n        outputSchema: {\n          result: z.discriminatedUnion('type', [\n            z.object({\n              type: z.literal('success'),\n              email: z.string(),\n              isNew: z.boolean(),\n              totalAccounts: z.number(),\n              message: z.string(),\n            }),\n          ]),\n        } as const,\n      },\n      handler: async (args: unknown): Promise<CallToolResult> => {\n        const params = args as { email?: string; alias?: string };\n        try {\n          logger.info(`Starting account switch for ${service}`, { email: params.email, alias: params.alias });\n\n          // Get existing accounts\n          const existingAccounts = await getLinkedAccounts(store, { service });\n\n          let email: string;\n          let isNew: boolean;\n\n          // Smart behavior: check if email provided and already linked\n          if (params.email) {\n            // Find account by email or alias\n            const accountId = await findAccountByEmailOrAlias(store, service, params.email);\n\n            if (accountId) {\n              // Account already linked - just switch to it\n              email = accountId;\n              isNew = false;\n              logger.info(`Account already linked: ${email}, switching without OAuth`);\n\n              // Set as active account\n              await setActiveAccount(store, { service, accountId: email });\n\n              // Update alias if provided\n              if (params.alias) {\n                const existingInfo = await getAccountInfo(store, { accountId: email, service });\n                const accountInfo: AccountInfo = {\n                  email,\n                  alias: params.alias,\n                  addedAt: existingInfo?.addedAt ?? new Date().toISOString(),\n                };\n                await setAccountInfo(store, { accountId: email, service }, accountInfo);\n              }\n\n              const result = {\n                type: 'success' as const,\n                email,\n                isNew: false,\n                totalAccounts: existingAccounts.length,\n                message: `Account already linked: ${email}. Set as active account (no OAuth needed).`,\n              };\n\n              return {\n                content: [{ type: 'text' as const, text: JSON.stringify(result, null, 2) }],\n                structuredContent: { result },\n              };\n            }\n          }\n\n          // Not linked or no email provided - trigger OAuth flow for new account\n          // Check if provider supports interactive authentication\n          if (!auth.authenticateNewAccount) {\n            throw new Error('Account switching requires interactive authentication. ' + 'The current auth provider does not support authenticateNewAccount().');\n          }\n\n          // Trigger new authentication with account selection\n          email = await auth.authenticateNewAccount();\n\n          // Check if account already exists (in case OAuth returned different email than requested)\n          isNew = !existingAccounts.includes(email);\n\n          if (isNew) {\n            // Add new account\n            await addAccount(store, { service, accountId: email });\n            logger.info(`Added new ${service} account`, { email });\n          } else {\n            logger.info(`Account already linked: ${email}`);\n          }\n\n          // Set/update account info\n          const existingInfo = await getAccountInfo(store, { accountId: email, service });\n          const accountInfo: AccountInfo = {\n            email,\n            ...(params.alias ? { alias: params.alias } : {}),\n            addedAt: isNew ? new Date().toISOString() : (existingInfo?.addedAt ?? new Date().toISOString()),\n          };\n          await setAccountInfo(store, { accountId: email, service }, accountInfo);\n\n          // Set as active account\n          await setActiveAccount(store, { service, accountId: email });\n\n          const totalAccounts = isNew ? existingAccounts.length + 1 : existingAccounts.length;\n\n          const result = {\n            type: 'success' as const,\n            email,\n            isNew,\n            totalAccounts,\n            message: isNew ? `Successfully added ${service} account: ${email} (${totalAccounts} total)` : `Account already linked: ${email}. Set as active account.`,\n          };\n\n          return {\n            content: [{ type: 'text' as const, text: JSON.stringify(result, null, 2) }],\n            structuredContent: { result },\n          };\n        } catch (error) {\n          const message = error instanceof Error ? error.message : String(error);\n          throw new McpError(ErrorCode.InternalError, `Error switching ${service} account: ${message}`, {\n            stack: error instanceof Error ? error.stack : undefined,\n          });\n        }\n      },\n    },\n\n    // account-remove\n    {\n      name: 'account-remove',\n      config: {\n        description: `Remove ${service} account and delete stored tokens permanently. If removing the active account, the first remaining account becomes active. Requires email or alias parameter.`,\n        inputSchema: {\n          accountId: z.string().min(1).describe('Email address or alias of account to remove'),\n        } as const,\n        outputSchema: {\n          result: z.discriminatedUnion('type', [\n            z.object({\n              type: z.literal('success'),\n              service: z.string(),\n              removed: z.string(),\n              remainingAccounts: z.number(),\n              newActiveAccount: z.string().optional(),\n              message: z.string(),\n            }),\n          ]),\n        } as const,\n      },\n      handler: async (args: unknown): Promise<CallToolResult> => {\n        const params = args as { accountId: string };\n        try {\n          const linkedAccounts = await getLinkedAccounts(store, { service });\n          if (linkedAccounts.length === 0) {\n            throw new Error(`No ${service} accounts to remove`);\n          }\n\n          // Find account by email or alias\n          const accountId = await findAccountByEmailOrAlias(store, service, params.accountId);\n\n          if (!accountId) {\n            throw new Error(`Account not found: ${params.accountId}`);\n          }\n\n          // Get current active account\n          const activeAccount = await getActiveAccount(store, { service });\n          const removingActive = activeAccount === accountId;\n\n          // Remove the account\n          await removeAccount(store, { service, accountId });\n          const remainingAccounts = linkedAccounts.filter((id) => id !== accountId);\n\n          // If we removed the active account, set first remaining as active\n          let newActiveAccount: string | undefined;\n          if (removingActive && remainingAccounts.length > 0) {\n            const firstRemaining = remainingAccounts[0];\n            if (firstRemaining) {\n              newActiveAccount = firstRemaining;\n              await setActiveAccount(store, { service, accountId: newActiveAccount });\n            }\n          }\n\n          logger.info(`Successfully removed ${service} account`, { accountId, remainingAccounts: remainingAccounts.length });\n\n          const result = {\n            type: 'success' as const,\n            service,\n            removed: accountId,\n            remainingAccounts: remainingAccounts.length,\n            ...(newActiveAccount && { newActiveAccount }),\n            message: `Removed ${service} account: ${accountId}${newActiveAccount ? `. Active account is now: ${newActiveAccount}` : ''}`,\n          };\n\n          return {\n            content: [{ type: 'text' as const, text: JSON.stringify(result, null, 2) }],\n            structuredContent: { result },\n          };\n        } catch (error) {\n          const message = error instanceof Error ? error.message : String(error);\n          throw new McpError(ErrorCode.InternalError, `Error removing ${service} account: ${message}`, {\n            stack: error instanceof Error ? error.stack : undefined,\n          });\n        }\n      },\n    },\n\n    // account-list\n    {\n      name: 'account-list',\n      config: {\n        description: `List all linked ${service} accounts with their aliases and active status.`,\n        inputSchema: {} as const,\n        outputSchema: {\n          result: z.discriminatedUnion('type', [\n            z.object({\n              type: z.literal('success'),\n              service: z.string(),\n              accounts: z.array(\n                z.object({\n                  email: z.string(),\n                  alias: z.string().optional(),\n                  isActive: z.boolean(),\n                })\n              ),\n              totalAccounts: z.number(),\n              message: z.string(),\n            }),\n          ]),\n        } as const,\n      },\n      handler: async (): Promise<CallToolResult> => {\n        try {\n          const linkedAccounts = await getLinkedAccounts(store, { service });\n\n          // Return empty array gracefully (no error when no accounts)\n          if (linkedAccounts.length === 0) {\n            const result = {\n              type: 'success' as const,\n              service,\n              accounts: [],\n              totalAccounts: 0,\n              message: `No ${service} accounts linked. Use account-switch to add an account.`,\n            };\n\n            return {\n              content: [{ type: 'text' as const, text: JSON.stringify(result, null, 2) }],\n              structuredContent: { result },\n            };\n          }\n\n          const activeAccountId = await getActiveAccount(store, { service });\n\n          // Get account info for each linked account\n          const accounts = await Promise.all(\n            linkedAccounts.map(async (email) => {\n              const accountInfo = await getAccountInfo(store, { accountId: email, service });\n              return {\n                email,\n                alias: accountInfo?.alias,\n                isActive: email === activeAccountId,\n              };\n            })\n          );\n\n          const result = {\n            type: 'success' as const,\n            service,\n            accounts,\n            totalAccounts: linkedAccounts.length,\n            message: `Found ${linkedAccounts.length} ${service} account(s)`,\n          };\n\n          return {\n            content: [{ type: 'text' as const, text: JSON.stringify(result, null, 2) }],\n            structuredContent: { result },\n          };\n        } catch (error) {\n          const message = error instanceof Error ? error.message : String(error);\n          throw new McpError(ErrorCode.InternalError, `Error listing ${service} accounts: ${message}`, {\n            stack: error instanceof Error ? error.stack : undefined,\n          });\n        }\n      },\n    },\n  ];\n\n  const prompts: McpPrompt[] = [];\n\n  return { tools, prompts };\n}\n"],"names":["ErrorCode","McpError","z","addAccount","getAccountInfo","getActiveAccount","getLinkedAccounts","removeAccount","setAccountInfo","setActiveAccount","createAccountMe","findAccountByEmailOrAlias","createLoopback","config","service","store","logger","auth","meTools","mode","tools","name","description","inputSchema","email","string","optional","describe","alias","outputSchema","result","discriminatedUnion","object","type","literal","isNew","boolean","totalAccounts","number","message","handler","args","params","info","existingAccounts","accountId","existingInfo","accountInfo","addedAt","Date","toISOString","length","content","text","JSON","stringify","structuredContent","authenticateNewAccount","Error","includes","error","String","InternalError","stack","undefined","min","removed","remainingAccounts","newActiveAccount","linkedAccounts","activeAccount","removingActive","filter","id","firstRemaining","accounts","array","isActive","activeAccountId","Promise","all","map","prompts"],"mappings":"AAAA;;;;;;;;;;;CAWC,GAGD,SAASA,SAAS,EAAEC,QAAQ,QAAQ,qCAAqC;AACzE,SAASC,CAAC,QAAQ,MAAM;AACxB,SAASC,UAAU,EAAEC,cAAc,EAAEC,gBAAgB,EAAEC,iBAAiB,EAAEC,aAAa,EAAEC,cAAc,EAAEC,gBAAgB,QAAQ,yBAAyB;AAE1J,SAASC,eAAe,QAAQ,UAAU;AAC1C,SAASC,yBAAyB,QAAQ,oBAAoB;AAG9D;;;CAGC,GACD,OAAO,SAASC,eAAeC,MAA6B;IAC1D,MAAM,EAAEC,OAAO,EAAEC,KAAK,EAAEC,MAAM,EAAEC,IAAI,EAAE,GAAGJ;IAEzC,yBAAyB;IACzB,MAAMK,UAAUR,gBAAgB;QAAEI;QAASC;QAAOC;QAAQG,MAAM;IAAW;IAE3E,MAAMC,QAAmB;WACpBF,QAAQE,KAAK;QAChB,iBAAiB;QACjB;YACEC,MAAM;YACNR,QAAQ;gBACNS,aAAa,CAAC,IAAI,EAAER,QAAQ,uQAAuQ,CAAC;gBACpSS,aAAa;oBACXC,OAAOtB,EAAEuB,MAAM,GAAGC,QAAQ,GAAGC,QAAQ,CAAC;oBACtCC,OAAO1B,EAAEuB,MAAM,GAAGC,QAAQ,GAAGC,QAAQ,CAAC;gBACxC;gBACAE,cAAc;oBACZC,QAAQ5B,EAAE6B,kBAAkB,CAAC,QAAQ;wBACnC7B,EAAE8B,MAAM,CAAC;4BACPC,MAAM/B,EAAEgC,OAAO,CAAC;4BAChBV,OAAOtB,EAAEuB,MAAM;4BACfU,OAAOjC,EAAEkC,OAAO;4BAChBC,eAAenC,EAAEoC,MAAM;4BACvBC,SAASrC,EAAEuB,MAAM;wBACnB;qBACD;gBACH;YACF;YACAe,SAAS,OAAOC;gBACd,MAAMC,SAASD;gBACf,IAAI;;oBACFzB,OAAO2B,IAAI,CAAC,CAAC,4BAA4B,EAAE7B,SAAS,EAAE;wBAAEU,OAAOkB,OAAOlB,KAAK;wBAAEI,OAAOc,OAAOd,KAAK;oBAAC;oBAEjG,wBAAwB;oBACxB,MAAMgB,mBAAmB,MAAMtC,kBAAkBS,OAAO;wBAAED;oBAAQ;oBAElE,IAAIU;oBACJ,IAAIW;oBAEJ,6DAA6D;oBAC7D,IAAIO,OAAOlB,KAAK,EAAE;wBAChB,iCAAiC;wBACjC,MAAMqB,YAAY,MAAMlC,0BAA0BI,OAAOD,SAAS4B,OAAOlB,KAAK;wBAE9E,IAAIqB,WAAW;4BACb,6CAA6C;4BAC7CrB,QAAQqB;4BACRV,QAAQ;4BACRnB,OAAO2B,IAAI,CAAC,CAAC,wBAAwB,EAAEnB,MAAM,yBAAyB,CAAC;4BAEvE,wBAAwB;4BACxB,MAAMf,iBAAiBM,OAAO;gCAAED;gCAAS+B,WAAWrB;4BAAM;4BAE1D,2BAA2B;4BAC3B,IAAIkB,OAAOd,KAAK,EAAE;;gCAChB,MAAMkB,eAAe,MAAM1C,eAAeW,OAAO;oCAAE8B,WAAWrB;oCAAOV;gCAAQ;gCAC7E,MAAMiC,cAA2B;oCAC/BvB;oCACAI,OAAOc,OAAOd,KAAK;oCACnBoB,OAAO,WAAEF,yBAAAA,mCAAAA,aAAcE,OAAO,yCAAI,IAAIC,OAAOC,WAAW;gCAC1D;gCACA,MAAM1C,eAAeO,OAAO;oCAAE8B,WAAWrB;oCAAOV;gCAAQ,GAAGiC;4BAC7D;4BAEA,MAAMjB,SAAS;gCACbG,MAAM;gCACNT;gCACAW,OAAO;gCACPE,eAAeO,iBAAiBO,MAAM;gCACtCZ,SAAS,CAAC,wBAAwB,EAAEf,MAAM,0CAA0C,CAAC;4BACvF;4BAEA,OAAO;gCACL4B,SAAS;oCAAC;wCAAEnB,MAAM;wCAAiBoB,MAAMC,KAAKC,SAAS,CAACzB,QAAQ,MAAM;oCAAG;iCAAE;gCAC3E0B,mBAAmB;oCAAE1B;gCAAO;4BAC9B;wBACF;oBACF;oBAEA,uEAAuE;oBACvE,wDAAwD;oBACxD,IAAI,CAACb,KAAKwC,sBAAsB,EAAE;wBAChC,MAAM,IAAIC,MAAM,4DAA4D;oBAC9E;oBAEA,oDAAoD;oBACpDlC,QAAQ,MAAMP,KAAKwC,sBAAsB;oBAEzC,0FAA0F;oBAC1FtB,QAAQ,CAACS,iBAAiBe,QAAQ,CAACnC;oBAEnC,IAAIW,OAAO;wBACT,kBAAkB;wBAClB,MAAMhC,WAAWY,OAAO;4BAAED;4BAAS+B,WAAWrB;wBAAM;wBACpDR,OAAO2B,IAAI,CAAC,CAAC,UAAU,EAAE7B,QAAQ,QAAQ,CAAC,EAAE;4BAAEU;wBAAM;oBACtD,OAAO;wBACLR,OAAO2B,IAAI,CAAC,CAAC,wBAAwB,EAAEnB,OAAO;oBAChD;oBAEA,0BAA0B;oBAC1B,MAAMsB,eAAe,MAAM1C,eAAeW,OAAO;wBAAE8B,WAAWrB;wBAAOV;oBAAQ;oBAC7E,MAAMiC,cAA2B;wBAC/BvB;wBACA,GAAIkB,OAAOd,KAAK,GAAG;4BAAEA,OAAOc,OAAOd,KAAK;wBAAC,IAAI,CAAC,CAAC;wBAC/CoB,SAASb,QAAQ,IAAIc,OAAOC,WAAW,aAAMJ,yBAAAA,mCAAAA,aAAcE,OAAO,uCAAI,IAAIC,OAAOC,WAAW;oBAC9F;oBACA,MAAM1C,eAAeO,OAAO;wBAAE8B,WAAWrB;wBAAOV;oBAAQ,GAAGiC;oBAE3D,wBAAwB;oBACxB,MAAMtC,iBAAiBM,OAAO;wBAAED;wBAAS+B,WAAWrB;oBAAM;oBAE1D,MAAMa,gBAAgBF,QAAQS,iBAAiBO,MAAM,GAAG,IAAIP,iBAAiBO,MAAM;oBAEnF,MAAMrB,SAAS;wBACbG,MAAM;wBACNT;wBACAW;wBACAE;wBACAE,SAASJ,QAAQ,CAAC,mBAAmB,EAAErB,QAAQ,UAAU,EAAEU,MAAM,EAAE,EAAEa,cAAc,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAEb,MAAM,wBAAwB,CAAC;oBAC1J;oBAEA,OAAO;wBACL4B,SAAS;4BAAC;gCAAEnB,MAAM;gCAAiBoB,MAAMC,KAAKC,SAAS,CAACzB,QAAQ,MAAM;4BAAG;yBAAE;wBAC3E0B,mBAAmB;4BAAE1B;wBAAO;oBAC9B;gBACF,EAAE,OAAO8B,OAAO;oBACd,MAAMrB,UAAUqB,iBAAiBF,QAAQE,MAAMrB,OAAO,GAAGsB,OAAOD;oBAChE,MAAM,IAAI3D,SAASD,UAAU8D,aAAa,EAAE,CAAC,gBAAgB,EAAEhD,QAAQ,UAAU,EAAEyB,SAAS,EAAE;wBAC5FwB,OAAOH,iBAAiBF,QAAQE,MAAMG,KAAK,GAAGC;oBAChD;gBACF;YACF;QACF;QAEA,iBAAiB;QACjB;YACE3C,MAAM;YACNR,QAAQ;gBACNS,aAAa,CAAC,OAAO,EAAER,QAAQ,6JAA6J,CAAC;gBAC7LS,aAAa;oBACXsB,WAAW3C,EAAEuB,MAAM,GAAGwC,GAAG,CAAC,GAAGtC,QAAQ,CAAC;gBACxC;gBACAE,cAAc;oBACZC,QAAQ5B,EAAE6B,kBAAkB,CAAC,QAAQ;wBACnC7B,EAAE8B,MAAM,CAAC;4BACPC,MAAM/B,EAAEgC,OAAO,CAAC;4BAChBpB,SAASZ,EAAEuB,MAAM;4BACjByC,SAAShE,EAAEuB,MAAM;4BACjB0C,mBAAmBjE,EAAEoC,MAAM;4BAC3B8B,kBAAkBlE,EAAEuB,MAAM,GAAGC,QAAQ;4BACrCa,SAASrC,EAAEuB,MAAM;wBACnB;qBACD;gBACH;YACF;YACAe,SAAS,OAAOC;gBACd,MAAMC,SAASD;gBACf,IAAI;oBACF,MAAM4B,iBAAiB,MAAM/D,kBAAkBS,OAAO;wBAAED;oBAAQ;oBAChE,IAAIuD,eAAelB,MAAM,KAAK,GAAG;wBAC/B,MAAM,IAAIO,MAAM,CAAC,GAAG,EAAE5C,QAAQ,mBAAmB,CAAC;oBACpD;oBAEA,iCAAiC;oBACjC,MAAM+B,YAAY,MAAMlC,0BAA0BI,OAAOD,SAAS4B,OAAOG,SAAS;oBAElF,IAAI,CAACA,WAAW;wBACd,MAAM,IAAIa,MAAM,CAAC,mBAAmB,EAAEhB,OAAOG,SAAS,EAAE;oBAC1D;oBAEA,6BAA6B;oBAC7B,MAAMyB,gBAAgB,MAAMjE,iBAAiBU,OAAO;wBAAED;oBAAQ;oBAC9D,MAAMyD,iBAAiBD,kBAAkBzB;oBAEzC,qBAAqB;oBACrB,MAAMtC,cAAcQ,OAAO;wBAAED;wBAAS+B;oBAAU;oBAChD,MAAMsB,oBAAoBE,eAAeG,MAAM,CAAC,CAACC,KAAOA,OAAO5B;oBAE/D,kEAAkE;oBAClE,IAAIuB;oBACJ,IAAIG,kBAAkBJ,kBAAkBhB,MAAM,GAAG,GAAG;wBAClD,MAAMuB,iBAAiBP,iBAAiB,CAAC,EAAE;wBAC3C,IAAIO,gBAAgB;4BAClBN,mBAAmBM;4BACnB,MAAMjE,iBAAiBM,OAAO;gCAAED;gCAAS+B,WAAWuB;4BAAiB;wBACvE;oBACF;oBAEApD,OAAO2B,IAAI,CAAC,CAAC,qBAAqB,EAAE7B,QAAQ,QAAQ,CAAC,EAAE;wBAAE+B;wBAAWsB,mBAAmBA,kBAAkBhB,MAAM;oBAAC;oBAEhH,MAAMrB,SAAS;wBACbG,MAAM;wBACNnB;wBACAoD,SAASrB;wBACTsB,mBAAmBA,kBAAkBhB,MAAM;wBAC3C,GAAIiB,oBAAoB;4BAAEA;wBAAiB,CAAC;wBAC5C7B,SAAS,CAAC,QAAQ,EAAEzB,QAAQ,UAAU,EAAE+B,YAAYuB,mBAAmB,CAAC,yBAAyB,EAAEA,kBAAkB,GAAG,IAAI;oBAC9H;oBAEA,OAAO;wBACLhB,SAAS;4BAAC;gCAAEnB,MAAM;gCAAiBoB,MAAMC,KAAKC,SAAS,CAACzB,QAAQ,MAAM;4BAAG;yBAAE;wBAC3E0B,mBAAmB;4BAAE1B;wBAAO;oBAC9B;gBACF,EAAE,OAAO8B,OAAO;oBACd,MAAMrB,UAAUqB,iBAAiBF,QAAQE,MAAMrB,OAAO,GAAGsB,OAAOD;oBAChE,MAAM,IAAI3D,SAASD,UAAU8D,aAAa,EAAE,CAAC,eAAe,EAAEhD,QAAQ,UAAU,EAAEyB,SAAS,EAAE;wBAC3FwB,OAAOH,iBAAiBF,QAAQE,MAAMG,KAAK,GAAGC;oBAChD;gBACF;YACF;QACF;QAEA,eAAe;QACf;YACE3C,MAAM;YACNR,QAAQ;gBACNS,aAAa,CAAC,gBAAgB,EAAER,QAAQ,+CAA+C,CAAC;gBACxFS,aAAa,CAAC;gBACdM,cAAc;oBACZC,QAAQ5B,EAAE6B,kBAAkB,CAAC,QAAQ;wBACnC7B,EAAE8B,MAAM,CAAC;4BACPC,MAAM/B,EAAEgC,OAAO,CAAC;4BAChBpB,SAASZ,EAAEuB,MAAM;4BACjBkD,UAAUzE,EAAE0E,KAAK,CACf1E,EAAE8B,MAAM,CAAC;gCACPR,OAAOtB,EAAEuB,MAAM;gCACfG,OAAO1B,EAAEuB,MAAM,GAAGC,QAAQ;gCAC1BmD,UAAU3E,EAAEkC,OAAO;4BACrB;4BAEFC,eAAenC,EAAEoC,MAAM;4BACvBC,SAASrC,EAAEuB,MAAM;wBACnB;qBACD;gBACH;YACF;YACAe,SAAS;gBACP,IAAI;oBACF,MAAM6B,iBAAiB,MAAM/D,kBAAkBS,OAAO;wBAAED;oBAAQ;oBAEhE,4DAA4D;oBAC5D,IAAIuD,eAAelB,MAAM,KAAK,GAAG;wBAC/B,MAAMrB,SAAS;4BACbG,MAAM;4BACNnB;4BACA6D,UAAU,EAAE;4BACZtC,eAAe;4BACfE,SAAS,CAAC,GAAG,EAAEzB,QAAQ,uDAAuD,CAAC;wBACjF;wBAEA,OAAO;4BACLsC,SAAS;gCAAC;oCAAEnB,MAAM;oCAAiBoB,MAAMC,KAAKC,SAAS,CAACzB,QAAQ,MAAM;gCAAG;6BAAE;4BAC3E0B,mBAAmB;gCAAE1B;4BAAO;wBAC9B;oBACF;oBAEA,MAAMgD,kBAAkB,MAAMzE,iBAAiBU,OAAO;wBAAED;oBAAQ;oBAEhE,2CAA2C;oBAC3C,MAAM6D,WAAW,MAAMI,QAAQC,GAAG,CAChCX,eAAeY,GAAG,CAAC,OAAOzD;wBACxB,MAAMuB,cAAc,MAAM3C,eAAeW,OAAO;4BAAE8B,WAAWrB;4BAAOV;wBAAQ;wBAC5E,OAAO;4BACLU;4BACAI,KAAK,EAAEmB,wBAAAA,kCAAAA,YAAanB,KAAK;4BACzBiD,UAAUrD,UAAUsD;wBACtB;oBACF;oBAGF,MAAMhD,SAAS;wBACbG,MAAM;wBACNnB;wBACA6D;wBACAtC,eAAegC,eAAelB,MAAM;wBACpCZ,SAAS,CAAC,MAAM,EAAE8B,eAAelB,MAAM,CAAC,CAAC,EAAErC,QAAQ,WAAW,CAAC;oBACjE;oBAEA,OAAO;wBACLsC,SAAS;4BAAC;gCAAEnB,MAAM;gCAAiBoB,MAAMC,KAAKC,SAAS,CAACzB,QAAQ,MAAM;4BAAG;yBAAE;wBAC3E0B,mBAAmB;4BAAE1B;wBAAO;oBAC9B;gBACF,EAAE,OAAO8B,OAAO;oBACd,MAAMrB,UAAUqB,iBAAiBF,QAAQE,MAAMrB,OAAO,GAAGsB,OAAOD;oBAChE,MAAM,IAAI3D,SAASD,UAAU8D,aAAa,EAAE,CAAC,cAAc,EAAEhD,QAAQ,WAAW,EAAEyB,SAAS,EAAE;wBAC3FwB,OAAOH,iBAAiBF,QAAQE,MAAMG,KAAK,GAAGC;oBAChD;gBACF;YACF;QACF;KACD;IAED,MAAMkB,UAAuB,EAAE;IAE/B,OAAO;QAAE9D;QAAO8D;IAAQ;AAC1B"}

package/dist/esm/lib/account-server/me.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Account "me" tool - Who am I currently authenticated as?
+ *
+ * Provides current user identity across all auth modes:
+ * - Loopback: email, alias, sessionExpiresIn from stored tokens
+ * - DCR/Stateless: email from bearer token context, sessionExpiresIn=null
+ * - Device Code: email, sessionExpiresIn from stored tokens
+ * - Service Account: email, sessionExpiresIn="never" (JWT-based)
+ *
+ * Tool: {service}-account-me
+ */
+import type { McpPrompt, McpTool } from '../../types.js';
+import type { AccountMeConfig } from './types.js';
+/**
+ * Create account-me tool for current user identity.
+ *
+ * Returns email, optional alias (loopback only), and session expiry info.
+ * Throws error if no active account in loopback mode.
+ */
+export declare function createAccountMe(config: AccountMeConfig): {
+    tools: McpTool[];
+    prompts: McpPrompt[];
+};

package/dist/esm/lib/account-server/me.js

@@ -0,0 +1,170 @@
+/**
+ * Account "me" tool - Who am I currently authenticated as?
+ *
+ * Provides current user identity across all auth modes:
+ * - Loopback: email, alias, sessionExpiresIn from stored tokens
+ * - DCR/Stateless: email from bearer token context, sessionExpiresIn=null
+ * - Device Code: email, sessionExpiresIn from stored tokens
+ * - Service Account: email, sessionExpiresIn="never" (JWT-based)
+ *
+ * Tool: {service}-account-me
+ */ import { ErrorCode, McpError } from '@modelcontextprotocol/sdk/types.js';
+import { z } from 'zod';
+import { getAccountInfo, getActiveAccount, getToken } from '../../account-utils.js';
+/**
+ * Format milliseconds as human-readable duration
+ * Examples: "2h 15m", "45m", "30s"
+ */ function formatDuration(ms) {
+    const totalSeconds = Math.floor(ms / 1000);
+    if (totalSeconds < 60) {
+        return `${totalSeconds}s`;
+    }
+    const minutes = Math.floor(totalSeconds / 60);
+    if (minutes < 60) {
+        return `${minutes}m`;
+    }
+    const hours = Math.floor(minutes / 60);
+    const remainingMinutes = minutes % 60;
+    if (remainingMinutes === 0) {
+        return `${hours}h`;
+    }
+    return `${hours}h ${remainingMinutes}m`;
+}
+/**
+ * Create account-me tool for current user identity.
+ *
+ * Returns email, optional alias (loopback only), and session expiry info.
+ * Throws error if no active account in loopback mode.
+ */ export function createAccountMe(config) {
+    const { service, store, logger, mode } = config;
+    const tools = [
+        {
+            name: 'account-me',
+            config: {
+                description: `Show current ${service} user identity. Returns email, alias (if set), and session expiry information.`,
+                inputSchema: {},
+                outputSchema: {
+                    result: z.discriminatedUnion('type', [
+                        z.object({
+                            type: z.literal('success'),
+                            service: z.string(),
+                            email: z.string(),
+                            alias: z.string().optional(),
+                            sessionExpiresIn: z.string().nullable().optional(),
+                            message: z.string()
+                        })
+                    ])
+                }
+            },
+            handler: async (_args, extra)=>{
+                try {
+                    var _ref;
+                    // Mode-specific implementation
+                    if (mode === 'stateless') {
+                        // DCR/Stateless: Extract email from auth context
+                        const authContext = extra === null || extra === void 0 ? void 0 : extra.authContext;
+                        if (!(authContext === null || authContext === void 0 ? void 0 : authContext.accountId)) {
+                            throw new Error('No authentication context available. DCR mode requires bearer token.');
+                        }
+                        const result = {
+                            type: 'success',
+                            service,
+                            email: authContext.accountId,
+                            sessionExpiresIn: null,
+                            message: `Authenticated as ${authContext.accountId}. Session managed by MCP client.`
+                        };
+                        return {
+                            content: [
+                                {
+                                    type: 'text',
+                                    text: JSON.stringify(result, null, 2)
+                                }
+                            ],
+                            structuredContent: {
+                                result
+                            }
+                        };
+                    }
+                    // Loopback/Device Code/Service Account: Use store
+                    if (!store) {
+                        throw new Error('Store is required for non-stateless mode');
+                    }
+                    // Get active account
+                    const activeAccountId = await getActiveAccount(store, {
+                        service
+                    });
+                    if (!activeAccountId) {
+                        throw new Error(`No active ${service} account found. Use account-switch to add an account.`);
+                    }
+                    // Get account info (email, alias)
+                    const accountInfo = await getAccountInfo(store, {
+                        accountId: activeAccountId,
+                        service
+                    });
+                    const email = (_ref = accountInfo === null || accountInfo === void 0 ? void 0 : accountInfo.email) !== null && _ref !== void 0 ? _ref : activeAccountId;
+                    const alias = accountInfo === null || accountInfo === void 0 ? void 0 : accountInfo.alias;
+                    // Calculate session expiry
+                    let sessionExpiresIn = null;
+                    try {
+                        const token = await getToken(store, {
+                            accountId: activeAccountId,
+                            service
+                        });
+                        if (token === null || token === void 0 ? void 0 : token.expiresAt) {
+                            const now = Date.now();
+                            if (token.expiresAt > now) {
+                                sessionExpiresIn = formatDuration(token.expiresAt - now);
+                            } else {
+                                sessionExpiresIn = 'expired';
+                            }
+                        } else {
+                            // No expiry = JWT-based service account or no token info
+                            sessionExpiresIn = 'never';
+                        }
+                    } catch  {
+                        // Token not found or error reading - treat as "never" (service account pattern)
+                        sessionExpiresIn = 'never';
+                    }
+                    const result = {
+                        type: 'success',
+                        service,
+                        email,
+                        ...alias && {
+                            alias
+                        },
+                        ...sessionExpiresIn && {
+                            sessionExpiresIn
+                        },
+                        message: `Authenticated as ${email}${alias ? ` (${alias})` : ''}${sessionExpiresIn ? `. Session expires in ${sessionExpiresIn}` : ''}.`
+                    };
+                    return {
+                        content: [
+                            {
+                                type: 'text',
+                                text: JSON.stringify(result, null, 2)
+                            }
+                        ],
+                        structuredContent: {
+                            result
+                        }
+                    };
+                } catch (error) {
+                    var _logger_error;
+                    const message = error instanceof Error ? error.message : String(error);
+                    logger === null || logger === void 0 ? void 0 : (_logger_error = logger.error) === null || _logger_error === void 0 ? void 0 : _logger_error.call(logger, 'account-me.error', {
+                        service,
+                        error: message
+                    });
+                    throw new McpError(ErrorCode.InternalError, `Error getting ${service} account info: ${message}`, {
+                        stack: error instanceof Error ? error.stack : undefined
+                    });
+                }
+            }
+        }
+    ];
+    const prompts = [];
+    return {
+        tools,
+        prompts
+    };
+}

package/dist/esm/lib/account-server/me.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/kevin/Dev/Projects/ai/mcp-z/oauth/oauth/src/lib/account-server/me.ts"],"sourcesContent":["/**\n * Account \"me\" tool - Who am I currently authenticated as?\n *\n * Provides current user identity across all auth modes:\n * - Loopback: email, alias, sessionExpiresIn from stored tokens\n * - DCR/Stateless: email from bearer token context, sessionExpiresIn=null\n * - Device Code: email, sessionExpiresIn from stored tokens\n * - Service Account: email, sessionExpiresIn=\"never\" (JWT-based)\n *\n * Tool: {service}-account-me\n */\n\nimport type { CallToolResult } from '@modelcontextprotocol/sdk/types.js';\nimport { ErrorCode, McpError } from '@modelcontextprotocol/sdk/types.js';\nimport { z } from 'zod';\nimport { getAccountInfo, getActiveAccount, getToken } from '../../account-utils.ts';\nimport type { CachedToken, McpPrompt, McpTool } from '../../types.ts';\nimport type { AccountMeConfig } from './types.ts';\n\n/**\n * Format milliseconds as human-readable duration\n * Examples: \"2h 15m\", \"45m\", \"30s\"\n */\nfunction formatDuration(ms: number): string {\n  const totalSeconds = Math.floor(ms / 1000);\n\n  if (totalSeconds < 60) {\n    return `${totalSeconds}s`;\n  }\n\n  const minutes = Math.floor(totalSeconds / 60);\n  if (minutes < 60) {\n    return `${minutes}m`;\n  }\n\n  const hours = Math.floor(minutes / 60);\n  const remainingMinutes = minutes % 60;\n\n  if (remainingMinutes === 0) {\n    return `${hours}h`;\n  }\n\n  return `${hours}h ${remainingMinutes}m`;\n}\n\n/**\n * Create account-me tool for current user identity.\n *\n * Returns email, optional alias (loopback only), and session expiry info.\n * Throws error if no active account in loopback mode.\n */\nexport function createAccountMe(config: AccountMeConfig): { tools: McpTool[]; prompts: McpPrompt[] } {\n  const { service, store, logger, mode } = config;\n\n  const tools: McpTool[] = [\n    {\n      name: 'account-me',\n      config: {\n        description: `Show current ${service} user identity. Returns email, alias (if set), and session expiry information.`,\n        inputSchema: {} as const,\n        outputSchema: {\n          result: z.discriminatedUnion('type', [\n            z.object({\n              type: z.literal('success'),\n              service: z.string(),\n              email: z.string(),\n              alias: z.string().optional(),\n              sessionExpiresIn: z.string().nullable().optional(),\n              message: z.string(),\n            }),\n          ]),\n        } as const,\n      },\n      handler: async (_args: unknown, extra?: unknown): Promise<CallToolResult> => {\n        try {\n          // Mode-specific implementation\n          if (mode === 'stateless') {\n            // DCR/Stateless: Extract email from auth context\n            const authContext = (extra as { authContext?: { accountId?: string } })?.authContext;\n\n            if (!authContext?.accountId) {\n              throw new Error('No authentication context available. DCR mode requires bearer token.');\n            }\n\n            const result = {\n              type: 'success' as const,\n              service,\n              email: authContext.accountId,\n              sessionExpiresIn: null, // Client-managed\n              message: `Authenticated as ${authContext.accountId}. Session managed by MCP client.`,\n            };\n\n            return {\n              content: [{ type: 'text' as const, text: JSON.stringify(result, null, 2) }],\n              structuredContent: { result },\n            };\n          }\n\n          // Loopback/Device Code/Service Account: Use store\n          if (!store) {\n            throw new Error('Store is required for non-stateless mode');\n          }\n\n          // Get active account\n          const activeAccountId = await getActiveAccount(store, { service });\n          if (!activeAccountId) {\n            throw new Error(`No active ${service} account found. Use account-switch to add an account.`);\n          }\n\n          // Get account info (email, alias)\n          const accountInfo = await getAccountInfo(store, { accountId: activeAccountId, service });\n          const email = accountInfo?.email ?? activeAccountId;\n          const alias = accountInfo?.alias;\n\n          // Calculate session expiry\n          let sessionExpiresIn: string | null = null;\n          try {\n            const token = await getToken<CachedToken>(store, { accountId: activeAccountId, service });\n            if (token?.expiresAt) {\n              const now = Date.now();\n              if (token.expiresAt > now) {\n                sessionExpiresIn = formatDuration(token.expiresAt - now);\n              } else {\n                sessionExpiresIn = 'expired';\n              }\n            } else {\n              // No expiry = JWT-based service account or no token info\n              sessionExpiresIn = 'never';\n            }\n          } catch {\n            // Token not found or error reading - treat as \"never\" (service account pattern)\n            sessionExpiresIn = 'never';\n          }\n\n          const result = {\n            type: 'success' as const,\n            service,\n            email,\n            ...(alias && { alias }),\n            ...(sessionExpiresIn && { sessionExpiresIn }),\n            message: `Authenticated as ${email}${alias ? ` (${alias})` : ''}${sessionExpiresIn ? `. Session expires in ${sessionExpiresIn}` : ''}.`,\n          };\n\n          return {\n            content: [{ type: 'text' as const, text: JSON.stringify(result, null, 2) }],\n            structuredContent: { result },\n          };\n        } catch (error) {\n          const message = error instanceof Error ? error.message : String(error);\n          logger?.error?.('account-me.error', { service, error: message });\n\n          throw new McpError(ErrorCode.InternalError, `Error getting ${service} account info: ${message}`, {\n            stack: error instanceof Error ? error.stack : undefined,\n          });\n        }\n      },\n    },\n  ];\n\n  const prompts: McpPrompt[] = [];\n\n  return { tools, prompts };\n}\n"],"names":["ErrorCode","McpError","z","getAccountInfo","getActiveAccount","getToken","formatDuration","ms","totalSeconds","Math","floor","minutes","hours","remainingMinutes","createAccountMe","config","service","store","logger","mode","tools","name","description","inputSchema","outputSchema","result","discriminatedUnion","object","type","literal","string","email","alias","optional","sessionExpiresIn","nullable","message","handler","_args","extra","authContext","accountId","Error","content","text","JSON","stringify","structuredContent","activeAccountId","accountInfo","token","expiresAt","now","Date","error","String","InternalError","stack","undefined","prompts"],"mappings":"AAAA;;;;;;;;;;CAUC,GAGD,SAASA,SAAS,EAAEC,QAAQ,QAAQ,qCAAqC;AACzE,SAASC,CAAC,QAAQ,MAAM;AACxB,SAASC,cAAc,EAAEC,gBAAgB,EAAEC,QAAQ,QAAQ,yBAAyB;AAIpF;;;CAGC,GACD,SAASC,eAAeC,EAAU;IAChC,MAAMC,eAAeC,KAAKC,KAAK,CAACH,KAAK;IAErC,IAAIC,eAAe,IAAI;QACrB,OAAO,GAAGA,aAAa,CAAC,CAAC;IAC3B;IAEA,MAAMG,UAAUF,KAAKC,KAAK,CAACF,eAAe;IAC1C,IAAIG,UAAU,IAAI;QAChB,OAAO,GAAGA,QAAQ,CAAC,CAAC;IACtB;IAEA,MAAMC,QAAQH,KAAKC,KAAK,CAACC,UAAU;IACnC,MAAME,mBAAmBF,UAAU;IAEnC,IAAIE,qBAAqB,GAAG;QAC1B,OAAO,GAAGD,MAAM,CAAC,CAAC;IACpB;IAEA,OAAO,GAAGA,MAAM,EAAE,EAAEC,iBAAiB,CAAC,CAAC;AACzC;AAEA;;;;;CAKC,GACD,OAAO,SAASC,gBAAgBC,MAAuB;IACrD,MAAM,EAAEC,OAAO,EAAEC,KAAK,EAAEC,MAAM,EAAEC,IAAI,EAAE,GAAGJ;IAEzC,MAAMK,QAAmB;QACvB;YACEC,MAAM;YACNN,QAAQ;gBACNO,aAAa,CAAC,aAAa,EAAEN,QAAQ,8EAA8E,CAAC;gBACpHO,aAAa,CAAC;gBACdC,cAAc;oBACZC,QAAQvB,EAAEwB,kBAAkB,CAAC,QAAQ;wBACnCxB,EAAEyB,MAAM,CAAC;4BACPC,MAAM1B,EAAE2B,OAAO,CAAC;4BAChBb,SAASd,EAAE4B,MAAM;4BACjBC,OAAO7B,EAAE4B,MAAM;4BACfE,OAAO9B,EAAE4B,MAAM,GAAGG,QAAQ;4BAC1BC,kBAAkBhC,EAAE4B,MAAM,GAAGK,QAAQ,GAAGF,QAAQ;4BAChDG,SAASlC,EAAE4B,MAAM;wBACnB;qBACD;gBACH;YACF;YACAO,SAAS,OAAOC,OAAgBC;gBAC9B,IAAI;;oBACF,+BAA+B;oBAC/B,IAAIpB,SAAS,aAAa;wBACxB,iDAAiD;wBACjD,MAAMqB,cAAeD,kBAAAA,4BAAD,AAACA,MAAoDC,WAAW;wBAEpF,IAAI,EAACA,wBAAAA,kCAAAA,YAAaC,SAAS,GAAE;4BAC3B,MAAM,IAAIC,MAAM;wBAClB;wBAEA,MAAMjB,SAAS;4BACbG,MAAM;4BACNZ;4BACAe,OAAOS,YAAYC,SAAS;4BAC5BP,kBAAkB;4BAClBE,SAAS,CAAC,iBAAiB,EAAEI,YAAYC,SAAS,CAAC,gCAAgC,CAAC;wBACtF;wBAEA,OAAO;4BACLE,SAAS;gCAAC;oCAAEf,MAAM;oCAAiBgB,MAAMC,KAAKC,SAAS,CAACrB,QAAQ,MAAM;gCAAG;6BAAE;4BAC3EsB,mBAAmB;gCAAEtB;4BAAO;wBAC9B;oBACF;oBAEA,kDAAkD;oBAClD,IAAI,CAACR,OAAO;wBACV,MAAM,IAAIyB,MAAM;oBAClB;oBAEA,qBAAqB;oBACrB,MAAMM,kBAAkB,MAAM5C,iBAAiBa,OAAO;wBAAED;oBAAQ;oBAChE,IAAI,CAACgC,iBAAiB;wBACpB,MAAM,IAAIN,MAAM,CAAC,UAAU,EAAE1B,QAAQ,qDAAqD,CAAC;oBAC7F;oBAEA,kCAAkC;oBAClC,MAAMiC,cAAc,MAAM9C,eAAec,OAAO;wBAAEwB,WAAWO;wBAAiBhC;oBAAQ;oBACtF,MAAMe,gBAAQkB,wBAAAA,kCAAAA,YAAalB,KAAK,uCAAIiB;oBACpC,MAAMhB,QAAQiB,wBAAAA,kCAAAA,YAAajB,KAAK;oBAEhC,2BAA2B;oBAC3B,IAAIE,mBAAkC;oBACtC,IAAI;wBACF,MAAMgB,QAAQ,MAAM7C,SAAsBY,OAAO;4BAAEwB,WAAWO;4BAAiBhC;wBAAQ;wBACvF,IAAIkC,kBAAAA,4BAAAA,MAAOC,SAAS,EAAE;4BACpB,MAAMC,MAAMC,KAAKD,GAAG;4BACpB,IAAIF,MAAMC,SAAS,GAAGC,KAAK;gCACzBlB,mBAAmB5B,eAAe4C,MAAMC,SAAS,GAAGC;4BACtD,OAAO;gCACLlB,mBAAmB;4BACrB;wBACF,OAAO;4BACL,yDAAyD;4BACzDA,mBAAmB;wBACrB;oBACF,EAAE,OAAM;wBACN,gFAAgF;wBAChFA,mBAAmB;oBACrB;oBAEA,MAAMT,SAAS;wBACbG,MAAM;wBACNZ;wBACAe;wBACA,GAAIC,SAAS;4BAAEA;wBAAM,CAAC;wBACtB,GAAIE,oBAAoB;4BAAEA;wBAAiB,CAAC;wBAC5CE,SAAS,CAAC,iBAAiB,EAAEL,QAAQC,QAAQ,CAAC,EAAE,EAAEA,MAAM,CAAC,CAAC,GAAG,KAAKE,mBAAmB,CAAC,qBAAqB,EAAEA,kBAAkB,GAAG,GAAG,CAAC,CAAC;oBACzI;oBAEA,OAAO;wBACLS,SAAS;4BAAC;gCAAEf,MAAM;gCAAiBgB,MAAMC,KAAKC,SAAS,CAACrB,QAAQ,MAAM;4BAAG;yBAAE;wBAC3EsB,mBAAmB;4BAAEtB;wBAAO;oBAC9B;gBACF,EAAE,OAAO6B,OAAO;wBAEdpC;oBADA,MAAMkB,UAAUkB,iBAAiBZ,QAAQY,MAAMlB,OAAO,GAAGmB,OAAOD;oBAChEpC,mBAAAA,8BAAAA,gBAAAA,OAAQoC,KAAK,cAAbpC,oCAAAA,mBAAAA,QAAgB,oBAAoB;wBAAEF;wBAASsC,OAAOlB;oBAAQ;oBAE9D,MAAM,IAAInC,SAASD,UAAUwD,aAAa,EAAE,CAAC,cAAc,EAAExC,QAAQ,eAAe,EAAEoB,SAAS,EAAE;wBAC/FqB,OAAOH,iBAAiBZ,QAAQY,MAAMG,KAAK,GAAGC;oBAChD;gBACF;YACF;QACF;KACD;IAED,MAAMC,UAAuB,EAAE;IAE/B,OAAO;QAAEvC;QAAOuC;IAAQ;AAC1B"}

package/dist/esm/lib/account-server/shared-utils.d.ts

@@ -0,0 +1,6 @@
+import type { Keyv } from 'keyv';
+/**
+ * Find account ID by email or alias lookup.
+ * Returns accountId if found, otherwise null.
+ */
+export declare function findAccountByEmailOrAlias(store: Keyv, service: string, emailOrAlias: string): Promise<string | null>;