@mcp-z/oauth 1.0.0

package/dist/cjs/lib/account-server/loopback.js

@@ -0,0 +1,778 @@
+/**
+ * Loopback OAuth account management tools.
+ *
+ * Provides account management for LoopbackOAuthProvider (server-managed multi-account).
+ * Users can add multiple accounts, switch between them, and manage identities.
+ *
+ * Tools:
+ * - account-me: Show current user identity (email, alias, session expiry)
+ * - account-switch: Use account (add if needed, switch if already linked)
+ * - account-remove: Remove account and delete tokens
+ * - account-list: Show all linked accounts (returns empty array if none)
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "createLoopback", {
+    enumerable: true,
+    get: function() {
+        return createLoopback;
+    }
+});
+var _types = require("@modelcontextprotocol/sdk/types.js");
+var _zod = require("zod");
+var _accountutilsts = require("../../account-utils.js");
+var _mets = require("./me.js");
+var _sharedutilsts = require("./shared-utils.js");
+function _array_like_to_array(arr, len) {
+    if (len == null || len > arr.length) len = arr.length;
+    for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
+    return arr2;
+}
+function _array_without_holes(arr) {
+    if (Array.isArray(arr)) return _array_like_to_array(arr);
+}
+function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
+    } else {
+        Promise.resolve(value).then(_next, _throw);
+    }
+}
+function _async_to_generator(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _define_property(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _instanceof(left, right) {
+    if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
+        return !!right[Symbol.hasInstance](left);
+    } else {
+        return left instanceof right;
+    }
+}
+function _iterable_to_array(iter) {
+    if (typeof Symbol !== "undefined" && iter[Symbol.iterator] != null || iter["@@iterator"] != null) return Array.from(iter);
+}
+function _non_iterable_spread() {
+    throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
+}
+function _object_spread(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property(target, key, source[key]);
+        });
+    }
+    return target;
+}
+function ownKeys(object, enumerableOnly) {
+    var keys = Object.keys(object);
+    if (Object.getOwnPropertySymbols) {
+        var symbols = Object.getOwnPropertySymbols(object);
+        if (enumerableOnly) {
+            symbols = symbols.filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(object, sym).enumerable;
+            });
+        }
+        keys.push.apply(keys, symbols);
+    }
+    return keys;
+}
+function _object_spread_props(target, source) {
+    source = source != null ? source : {};
+    if (Object.getOwnPropertyDescriptors) {
+        Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
+    } else {
+        ownKeys(Object(source)).forEach(function(key) {
+            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
+        });
+    }
+    return target;
+}
+function _to_consumable_array(arr) {
+    return _array_without_holes(arr) || _iterable_to_array(arr) || _unsupported_iterable_to_array(arr) || _non_iterable_spread();
+}
+function _unsupported_iterable_to_array(o, minLen) {
+    if (!o) return;
+    if (typeof o === "string") return _array_like_to_array(o, minLen);
+    var n = Object.prototype.toString.call(o).slice(8, -1);
+    if (n === "Object" && o.constructor) n = o.constructor.name;
+    if (n === "Map" || n === "Set") return Array.from(n);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array(o, minLen);
+}
+function _ts_generator(thisArg, body) {
+    var f, y, t, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    }, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype), d = Object.defineProperty;
+    return d(g, "next", {
+        value: verb(0)
+    }), d(g, "throw", {
+        value: verb(1)
+    }), d(g, "return", {
+        value: verb(2)
+    }), typeof Symbol === "function" && d(g, Symbol.iterator, {
+        value: function() {
+            return this;
+        }
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(g && (g = 0, op[0] && (_ = 0)), _)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+function createLoopback(config) {
+    var service = config.service, store = config.store, logger = config.logger, auth = config.auth;
+    // Create account-me tool
+    var meTools = (0, _mets.createAccountMe)({
+        service: service,
+        store: store,
+        logger: logger,
+        mode: 'loopback'
+    });
+    var tools = _to_consumable_array(meTools.tools).concat([
+        // account-switch
+        {
+            name: 'account-switch',
+            config: {
+                description: "Use ".concat(service, " account (smart mode). If email/alias provided and already linked, switches to it without triggering OAuth. If not linked or no email provided, triggers OAuth browser flow to add account. Returns account email, whether it was newly added, and total account count."),
+                inputSchema: {
+                    email: _zod.z.string().optional().describe('Email address to link (if already linked, switches without OAuth)'),
+                    alias: _zod.z.string().optional().describe('Optional alias for easy identification')
+                },
+                outputSchema: {
+                    result: _zod.z.discriminatedUnion('type', [
+                        _zod.z.object({
+                            type: _zod.z.literal('success'),
+                            email: _zod.z.string(),
+                            isNew: _zod.z.boolean(),
+                            totalAccounts: _zod.z.number(),
+                            message: _zod.z.string()
+                        })
+                    ])
+                }
+            },
+            handler: function(args) {
+                return _async_to_generator(function() {
+                    var params, _ref, existingAccounts, email, isNew, accountId, _ref1, existingInfo, accountInfo, result, existingInfo1, accountInfo1, totalAccounts, result1, error, message;
+                    return _ts_generator(this, function(_state) {
+                        switch(_state.label){
+                            case 0:
+                                params = args;
+                                _state.label = 1;
+                            case 1:
+                                _state.trys.push([
+                                    1,
+                                    16,
+                                    ,
+                                    17
+                                ]);
+                                logger.info("Starting account switch for ".concat(service), {
+                                    email: params.email,
+                                    alias: params.alias
+                                });
+                                return [
+                                    4,
+                                    (0, _accountutilsts.getLinkedAccounts)(store, {
+                                        service: service
+                                    })
+                                ];
+                            case 2:
+                                existingAccounts = _state.sent();
+                                if (!params.email) return [
+                                    3,
+                                    8
+                                ];
+                                return [
+                                    4,
+                                    (0, _sharedutilsts.findAccountByEmailOrAlias)(store, service, params.email)
+                                ];
+                            case 3:
+                                accountId = _state.sent();
+                                if (!accountId) return [
+                                    3,
+                                    8
+                                ];
+                                // Account already linked - just switch to it
+                                email = accountId;
+                                isNew = false;
+                                logger.info("Account already linked: ".concat(email, ", switching without OAuth"));
+                                // Set as active account
+                                return [
+                                    4,
+                                    (0, _accountutilsts.setActiveAccount)(store, {
+                                        service: service,
+                                        accountId: email
+                                    })
+                                ];
+                            case 4:
+                                _state.sent();
+                                if (!params.alias) return [
+                                    3,
+                                    7
+                                ];
+                                return [
+                                    4,
+                                    (0, _accountutilsts.getAccountInfo)(store, {
+                                        accountId: email,
+                                        service: service
+                                    })
+                                ];
+                            case 5:
+                                existingInfo = _state.sent();
+                                accountInfo = {
+                                    email: email,
+                                    alias: params.alias,
+                                    addedAt: (_ref1 = existingInfo === null || existingInfo === void 0 ? void 0 : existingInfo.addedAt) !== null && _ref1 !== void 0 ? _ref1 : new Date().toISOString()
+                                };
+                                return [
+                                    4,
+                                    (0, _accountutilsts.setAccountInfo)(store, {
+                                        accountId: email,
+                                        service: service
+                                    }, accountInfo)
+                                ];
+                            case 6:
+                                _state.sent();
+                                _state.label = 7;
+                            case 7:
+                                result = {
+                                    type: 'success',
+                                    email: email,
+                                    isNew: false,
+                                    totalAccounts: existingAccounts.length,
+                                    message: "Account already linked: ".concat(email, ". Set as active account (no OAuth needed).")
+                                };
+                                return [
+                                    2,
+                                    {
+                                        content: [
+                                            {
+                                                type: 'text',
+                                                text: JSON.stringify(result, null, 2)
+                                            }
+                                        ],
+                                        structuredContent: {
+                                            result: result
+                                        }
+                                    }
+                                ];
+                            case 8:
+                                // Not linked or no email provided - trigger OAuth flow for new account
+                                // Check if provider supports interactive authentication
+                                if (!auth.authenticateNewAccount) {
+                                    throw new Error('Account switching requires interactive authentication. ' + 'The current auth provider does not support authenticateNewAccount().');
+                                }
+                                return [
+                                    4,
+                                    auth.authenticateNewAccount()
+                                ];
+                            case 9:
+                                // Trigger new authentication with account selection
+                                email = _state.sent();
+                                // Check if account already exists (in case OAuth returned different email than requested)
+                                isNew = !existingAccounts.includes(email);
+                                if (!isNew) return [
+                                    3,
+                                    11
+                                ];
+                                // Add new account
+                                return [
+                                    4,
+                                    (0, _accountutilsts.addAccount)(store, {
+                                        service: service,
+                                        accountId: email
+                                    })
+                                ];
+                            case 10:
+                                _state.sent();
+                                logger.info("Added new ".concat(service, " account"), {
+                                    email: email
+                                });
+                                return [
+                                    3,
+                                    12
+                                ];
+                            case 11:
+                                logger.info("Account already linked: ".concat(email));
+                                _state.label = 12;
+                            case 12:
+                                return [
+                                    4,
+                                    (0, _accountutilsts.getAccountInfo)(store, {
+                                        accountId: email,
+                                        service: service
+                                    })
+                                ];
+                            case 13:
+                                existingInfo1 = _state.sent();
+                                accountInfo1 = _object_spread_props(_object_spread({
+                                    email: email
+                                }, params.alias ? {
+                                    alias: params.alias
+                                } : {}), {
+                                    addedAt: isNew ? new Date().toISOString() : (_ref = existingInfo1 === null || existingInfo1 === void 0 ? void 0 : existingInfo1.addedAt) !== null && _ref !== void 0 ? _ref : new Date().toISOString()
+                                });
+                                return [
+                                    4,
+                                    (0, _accountutilsts.setAccountInfo)(store, {
+                                        accountId: email,
+                                        service: service
+                                    }, accountInfo1)
+                                ];
+                            case 14:
+                                _state.sent();
+                                // Set as active account
+                                return [
+                                    4,
+                                    (0, _accountutilsts.setActiveAccount)(store, {
+                                        service: service,
+                                        accountId: email
+                                    })
+                                ];
+                            case 15:
+                                _state.sent();
+                                totalAccounts = isNew ? existingAccounts.length + 1 : existingAccounts.length;
+                                result1 = {
+                                    type: 'success',
+                                    email: email,
+                                    isNew: isNew,
+                                    totalAccounts: totalAccounts,
+                                    message: isNew ? "Successfully added ".concat(service, " account: ").concat(email, " (").concat(totalAccounts, " total)") : "Account already linked: ".concat(email, ". Set as active account.")
+                                };
+                                return [
+                                    2,
+                                    {
+                                        content: [
+                                            {
+                                                type: 'text',
+                                                text: JSON.stringify(result1, null, 2)
+                                            }
+                                        ],
+                                        structuredContent: {
+                                            result: result1
+                                        }
+                                    }
+                                ];
+                            case 16:
+                                error = _state.sent();
+                                message = _instanceof(error, Error) ? error.message : String(error);
+                                throw new _types.McpError(_types.ErrorCode.InternalError, "Error switching ".concat(service, " account: ").concat(message), {
+                                    stack: _instanceof(error, Error) ? error.stack : undefined
+                                });
+                            case 17:
+                                return [
+                                    2
+                                ];
+                        }
+                    });
+                })();
+            }
+        },
+        // account-remove
+        {
+            name: 'account-remove',
+            config: {
+                description: "Remove ".concat(service, " account and delete stored tokens permanently. If removing the active account, the first remaining account becomes active. Requires email or alias parameter."),
+                inputSchema: {
+                    accountId: _zod.z.string().min(1).describe('Email address or alias of account to remove')
+                },
+                outputSchema: {
+                    result: _zod.z.discriminatedUnion('type', [
+                        _zod.z.object({
+                            type: _zod.z.literal('success'),
+                            service: _zod.z.string(),
+                            removed: _zod.z.string(),
+                            remainingAccounts: _zod.z.number(),
+                            newActiveAccount: _zod.z.string().optional(),
+                            message: _zod.z.string()
+                        })
+                    ])
+                }
+            },
+            handler: function(args) {
+                return _async_to_generator(function() {
+                    var params, linkedAccounts, accountId, activeAccount, removingActive, remainingAccounts, newActiveAccount, firstRemaining, result, error, message;
+                    return _ts_generator(this, function(_state) {
+                        switch(_state.label){
+                            case 0:
+                                params = args;
+                                _state.label = 1;
+                            case 1:
+                                _state.trys.push([
+                                    1,
+                                    8,
+                                    ,
+                                    9
+                                ]);
+                                return [
+                                    4,
+                                    (0, _accountutilsts.getLinkedAccounts)(store, {
+                                        service: service
+                                    })
+                                ];
+                            case 2:
+                                linkedAccounts = _state.sent();
+                                if (linkedAccounts.length === 0) {
+                                    throw new Error("No ".concat(service, " accounts to remove"));
+                                }
+                                return [
+                                    4,
+                                    (0, _sharedutilsts.findAccountByEmailOrAlias)(store, service, params.accountId)
+                                ];
+                            case 3:
+                                accountId = _state.sent();
+                                if (!accountId) {
+                                    throw new Error("Account not found: ".concat(params.accountId));
+                                }
+                                return [
+                                    4,
+                                    (0, _accountutilsts.getActiveAccount)(store, {
+                                        service: service
+                                    })
+                                ];
+                            case 4:
+                                activeAccount = _state.sent();
+                                removingActive = activeAccount === accountId;
+                                // Remove the account
+                                return [
+                                    4,
+                                    (0, _accountutilsts.removeAccount)(store, {
+                                        service: service,
+                                        accountId: accountId
+                                    })
+                                ];
+                            case 5:
+                                _state.sent();
+                                remainingAccounts = linkedAccounts.filter(function(id) {
+                                    return id !== accountId;
+                                });
+                                if (!(removingActive && remainingAccounts.length > 0)) return [
+                                    3,
+                                    7
+                                ];
+                                firstRemaining = remainingAccounts[0];
+                                if (!firstRemaining) return [
+                                    3,
+                                    7
+                                ];
+                                newActiveAccount = firstRemaining;
+                                return [
+                                    4,
+                                    (0, _accountutilsts.setActiveAccount)(store, {
+                                        service: service,
+                                        accountId: newActiveAccount
+                                    })
+                                ];
+                            case 6:
+                                _state.sent();
+                                _state.label = 7;
+                            case 7:
+                                logger.info("Successfully removed ".concat(service, " account"), {
+                                    accountId: accountId,
+                                    remainingAccounts: remainingAccounts.length
+                                });
+                                result = _object_spread_props(_object_spread({
+                                    type: 'success',
+                                    service: service,
+                                    removed: accountId,
+                                    remainingAccounts: remainingAccounts.length
+                                }, newActiveAccount && {
+                                    newActiveAccount: newActiveAccount
+                                }), {
+                                    message: "Removed ".concat(service, " account: ").concat(accountId).concat(newActiveAccount ? ". Active account is now: ".concat(newActiveAccount) : '')
+                                });
+                                return [
+                                    2,
+                                    {
+                                        content: [
+                                            {
+                                                type: 'text',
+                                                text: JSON.stringify(result, null, 2)
+                                            }
+                                        ],
+                                        structuredContent: {
+                                            result: result
+                                        }
+                                    }
+                                ];
+                            case 8:
+                                error = _state.sent();
+                                message = _instanceof(error, Error) ? error.message : String(error);
+                                throw new _types.McpError(_types.ErrorCode.InternalError, "Error removing ".concat(service, " account: ").concat(message), {
+                                    stack: _instanceof(error, Error) ? error.stack : undefined
+                                });
+                            case 9:
+                                return [
+                                    2
+                                ];
+                        }
+                    });
+                })();
+            }
+        },
+        // account-list
+        {
+            name: 'account-list',
+            config: {
+                description: "List all linked ".concat(service, " accounts with their aliases and active status."),
+                inputSchema: {},
+                outputSchema: {
+                    result: _zod.z.discriminatedUnion('type', [
+                        _zod.z.object({
+                            type: _zod.z.literal('success'),
+                            service: _zod.z.string(),
+                            accounts: _zod.z.array(_zod.z.object({
+                                email: _zod.z.string(),
+                                alias: _zod.z.string().optional(),
+                                isActive: _zod.z.boolean()
+                            })),
+                            totalAccounts: _zod.z.number(),
+                            message: _zod.z.string()
+                        })
+                    ])
+                }
+            },
+            handler: function() {
+                return _async_to_generator(function() {
+                    var linkedAccounts, result, activeAccountId, accounts, result1, error, message;
+                    return _ts_generator(this, function(_state) {
+                        switch(_state.label){
+                            case 0:
+                                _state.trys.push([
+                                    0,
+                                    4,
+                                    ,
+                                    5
+                                ]);
+                                return [
+                                    4,
+                                    (0, _accountutilsts.getLinkedAccounts)(store, {
+                                        service: service
+                                    })
+                                ];
+                            case 1:
+                                linkedAccounts = _state.sent();
+                                // Return empty array gracefully (no error when no accounts)
+                                if (linkedAccounts.length === 0) {
+                                    result = {
+                                        type: 'success',
+                                        service: service,
+                                        accounts: [],
+                                        totalAccounts: 0,
+                                        message: "No ".concat(service, " accounts linked. Use account-switch to add an account.")
+                                    };
+                                    return [
+                                        2,
+                                        {
+                                            content: [
+                                                {
+                                                    type: 'text',
+                                                    text: JSON.stringify(result, null, 2)
+                                                }
+                                            ],
+                                            structuredContent: {
+                                                result: result
+                                            }
+                                        }
+                                    ];
+                                }
+                                return [
+                                    4,
+                                    (0, _accountutilsts.getActiveAccount)(store, {
+                                        service: service
+                                    })
+                                ];
+                            case 2:
+                                activeAccountId = _state.sent();
+                                return [
+                                    4,
+                                    Promise.all(linkedAccounts.map(function(email) {
+                                        return _async_to_generator(function() {
+                                            var accountInfo;
+                                            return _ts_generator(this, function(_state) {
+                                                switch(_state.label){
+                                                    case 0:
+                                                        return [
+                                                            4,
+                                                            (0, _accountutilsts.getAccountInfo)(store, {
+                                                                accountId: email,
+                                                                service: service
+                                                            })
+                                                        ];
+                                                    case 1:
+                                                        accountInfo = _state.sent();
+                                                        return [
+                                                            2,
+                                                            {
+                                                                email: email,
+                                                                alias: accountInfo === null || accountInfo === void 0 ? void 0 : accountInfo.alias,
+                                                                isActive: email === activeAccountId
+                                                            }
+                                                        ];
+                                                }
+                                            });
+                                        })();
+                                    }))
+                                ];
+                            case 3:
+                                accounts = _state.sent();
+                                result1 = {
+                                    type: 'success',
+                                    service: service,
+                                    accounts: accounts,
+                                    totalAccounts: linkedAccounts.length,
+                                    message: "Found ".concat(linkedAccounts.length, " ").concat(service, " account(s)")
+                                };
+                                return [
+                                    2,
+                                    {
+                                        content: [
+                                            {
+                                                type: 'text',
+                                                text: JSON.stringify(result1, null, 2)
+                                            }
+                                        ],
+                                        structuredContent: {
+                                            result: result1
+                                        }
+                                    }
+                                ];
+                            case 4:
+                                error = _state.sent();
+                                message = _instanceof(error, Error) ? error.message : String(error);
+                                throw new _types.McpError(_types.ErrorCode.InternalError, "Error listing ".concat(service, " accounts: ").concat(message), {
+                                    stack: _instanceof(error, Error) ? error.stack : undefined
+                                });
+                            case 5:
+                                return [
+                                    2
+                                ];
+                        }
+                    });
+                })();
+            }
+        }
+    ]);
+    var prompts = [];
+    return {
+        tools: tools,
+        prompts: prompts
+    };
+}
+/* CJS INTEROP */ if (exports.__esModule && exports.default) { try { Object.defineProperty(exports.default, '__esModule', { value: true }); for (var key in exports) { exports.default[key] = exports[key]; } } catch (_) {}; module.exports = exports.default; }