@n24q02m/hull 0.0.0-stage → 0.4.0-beta.10

package/build/oauth/jwt-issuer.js

@@ -0,0 +1,205 @@
+/**
+ * JWT Issuer and JWKS generation for TypeScript MCP servers.
+ * Uses jose (industry-standard, zero-dep, Web Crypto compatible).
+ *
+ * Two signing modes, selected at construction:
+ *
+ * - LOCAL single-user (credentialSecret unset): RSA-2048, RS256, kid="key-1",
+ *   keys generated on first run and persisted to disk so they survive restarts
+ *   on a real machine. Behavior is unchanged from the pre-stability-fix code.
+ *
+ * - HTTP multi-user (credentialSecret set): Ed25519, EdDSA, signing key DERIVED
+ *   deterministically from CREDENTIAL_SECRET via HKDF-SHA256. No disk I/O. Every
+ *   container replica converges on the same key without a shared volume or
+ *   external secret store, so OAuth tokens survive container recreation
+ *   (Watchtower :latest redeploys). kid is the base64url SHA-256 thumbprint of
+ *   the raw public key.
+ *
+ * The two modes are different deployments that never exchange tokens
+ * (iss/aud are server-scoped); the per-mode algorithm split is permanent and
+ * intentional. Each process runs exactly one algorithm; the verify path uses
+ * that single alg, never a {RS256, EdDSA} union.
+ */
+import { createHash, createPrivateKey } from 'node:crypto';
+import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import * as jose from 'jose';
+import { deriveJwtSigningSeed } from '../crypto/kdf.js';
+const DEFAULT_KEYS_DIR = join(homedir(), '.hull', 'jwt-keys');
+// RFC 8410 PKCS8 DER prefix for an Ed25519 private key. Prepended to the
+// 32-byte HKDF seed to build an importable PKCS8 key (jose 6.2.3 cannot import
+// a raw seed via importJWK d-only).
+const ED25519_PKCS8_PREFIX = Buffer.from('302e020100300506032b657004220420', 'hex');
+export class JWTIssuer {
+    constructor(serverName, keysDir = DEFAULT_KEYS_DIR, credentialSecret = null) {
+        this.kid = 'key-1';
+        this.privateKey = null;
+        this.publicKey = null;
+        this.okpX = null;
+        this._initialized = false;
+        this.serverName = serverName;
+        this.keysDir = keysDir;
+        this.credentialSecret = credentialSecret;
+        this.alg = credentialSecret ? 'EdDSA' : 'RS256';
+        this.privateKeyPath = join(this.keysDir, `${serverName}_private.pem`);
+        this.publicKeyPath = join(this.keysDir, `${serverName}_public.pem`);
+    }
+    /** Must call before using issuer — loads/generates (RSA) or derives (EdDSA) keys. */
+    async init() {
+        if (this._initialized)
+            return;
+        if (this.credentialSecret) {
+            await this.deriveEddsaKeys(this.credentialSecret);
+            // Don't name the source env var in the message: only serverName + the
+            // public kid thumbprint are logged (never the secret), and the literal
+            // "CREDENTIAL_SECRET" token trips the SAST logger-credential heuristic
+            // for no real benefit (parity with core-py jwt_issuer.py).
+            console.error(`JWTIssuer[${this.serverName}]: HTTP multi-user mode, EdDSA signing key derived (kid=${this.kid})`);
+        }
+        else {
+            await this.loadOrGenerateRsaKeys();
+            console.error(`JWTIssuer[${this.serverName}]: local single-user mode, RS256 key on disk (${this.keysDir})`);
+        }
+        this._initialized = true;
+    }
+    async deriveEddsaKeys(credentialSecret) {
+        const seed = deriveJwtSigningSeed(credentialSecret, this.serverName);
+        const der = Buffer.concat([ED25519_PKCS8_PREFIX, seed]);
+        const pem = `-----BEGIN PRIVATE KEY-----\n${der.toString('base64')}\n-----END PRIVATE KEY-----\n`;
+        this.privateKey = await jose.importPKCS8(pem, 'EdDSA', { extractable: false });
+        // Recover the public JWK x via node:crypto (jose has no seed->public path).
+        const jwk = createPrivateKey(pem).export({ format: 'jwk' });
+        this.okpX = jwk.x;
+        this.publicKey = (await jose.importJWK({ kty: 'OKP', crv: 'Ed25519', x: jwk.x }, 'EdDSA'));
+        this.kid = createHash('sha256').update(Buffer.from(jwk.x, 'base64url')).digest('base64url').slice(0, 16);
+    }
+    async loadOrGenerateRsaKeys() {
+        mkdirSync(this.keysDir, { recursive: true, mode: 0o700 });
+        if (process.platform !== 'win32') {
+            chmodSync(this.keysDir, 0o700);
+        }
+        if (existsSync(this.privateKeyPath) && existsSync(this.publicKeyPath)) {
+            const privatePem = readFileSync(this.privateKeyPath, 'utf-8');
+            const publicPem = readFileSync(this.publicKeyPath, 'utf-8');
+            this.privateKey = await jose.importPKCS8(privatePem, 'RS256', { extractable: false });
+            this.publicKey = await jose.importSPKI(publicPem, 'RS256', { extractable: true });
+        }
+        else {
+            const { publicKey, privateKey } = await jose.generateKeyPair('RS256', {
+                modulusLength: 2048,
+                extractable: true
+            });
+            const privatePem = await jose.exportPKCS8(privateKey);
+            const publicPem = await jose.exportSPKI(publicKey);
+            writeFileSync(this.privateKeyPath, privatePem, { mode: 0o600 });
+            writeFileSync(this.publicKeyPath, publicPem, { mode: 0o644 });
+            // Re-import with extractable: false for in-memory storage
+            this.privateKey = await jose.importPKCS8(privatePem, 'RS256', { extractable: false });
+            this.publicKey = await jose.importSPKI(publicPem, 'RS256', { extractable: true });
+        }
+    }
+    /**
+     * Return JWKS payload for /.well-known/jwks.json. Always a `keys` array
+     * (multi-key-aware for future rotation). RSA mode emits an RSA JWK; EdDSA
+     * mode emits an OKP JWK.
+     */
+    async getJwks() {
+        if (!this.publicKey)
+            throw new Error('JWTIssuer not initialized');
+        if (this.alg === 'EdDSA') {
+            return {
+                keys: [{ kty: 'OKP', crv: 'Ed25519', x: this.okpX, use: 'sig', alg: 'EdDSA', kid: this.kid }]
+            };
+        }
+        const jwk = await jose.exportJWK(this.publicKey);
+        jwk.kid = this.kid;
+        jwk.use = 'sig';
+        jwk.alg = 'RS256';
+        return { keys: [jwk] };
+    }
+    /** Issue a JWT access token (typ="access") signed with the active alg. */
+    async issueAccessToken(sub, expiresInSeconds = 3600) {
+        if (!this.privateKey)
+            throw new Error('JWTIssuer not initialized');
+        return new jose.SignJWT({ sub, typ: 'access' })
+            .setProtectedHeader({ alg: this.alg, kid: this.kid })
+            .setIssuer(this.serverName)
+            .setAudience(this.serverName)
+            .setIssuedAt()
+            .setExpirationTime(`${expiresInSeconds}s`)
+            .sign(this.privateKey);
+    }
+    /**
+     * Issue a JWT refresh token (typ="refresh") signed with the active alg.
+     *
+     * Defaults to a 1-year (31536000s) lifetime so long-running MCP clients can
+     * mint fresh access tokens without forcing the user back through the browser
+     * PKCE flow. The access token stays short-lived (1h); the refresh token is the
+     * renewal credential and is rotated on every use (the /token refresh handler
+     * issues a new refresh token each time), so the security control is rotation,
+     * not a short TTL. A short refresh TTL was the residual re-auth driver: a
+     * self-hosted server a user touches only intermittently (less than once a
+     * month) would silently expire its refresh token between sessions, forcing a
+     * fresh browser OAuth tab on the next use. With a 1-year floor, only a
+     * genuinely long idle gap re-prompts. Same key / iss / aud as access tokens;
+     * the typ claim is the only thing distinguishing them, and verifyAccessToken
+     * rejects typ="refresh" so a refresh token can never be used as an access
+     * token at the /mcp resource.
+     */
+    async issueRefreshToken(sub, expiresInSeconds = 31536000) {
+        if (!this.privateKey)
+            throw new Error('JWTIssuer not initialized');
+        return new jose.SignJWT({ sub, typ: 'refresh' })
+            .setProtectedHeader({ alg: this.alg, kid: this.kid })
+            .setIssuer(this.serverName)
+            .setAudience(this.serverName)
+            .setIssuedAt()
+            .setExpirationTime(`${expiresInSeconds}s`)
+            .sign(this.privateKey);
+    }
+    /**
+     * Verify a JWT access token and return its payload. Throws on failure (bad
+     * signature, wrong issuer/audience, expired) — the same jose errors existing
+     * callers already catch. The verify path uses the single active algorithm,
+     * never a union. Additionally rejects tokens whose typ claim is "refresh"
+     * (throwing jose.errors.JWTClaimValidationFailed) so a refresh token cannot
+     * be replayed as an access token. Tokens with typ="access" OR a missing typ
+     * claim are accepted (the latter keeps already-issued pre-refresh-support
+     * tokens valid).
+     */
+    async verifyAccessToken(token) {
+        if (!this.publicKey)
+            throw new Error('JWTIssuer not initialized');
+        const { payload } = await jose.jwtVerify(token, this.publicKey, {
+            issuer: this.serverName,
+            audience: this.serverName,
+            algorithms: [this.alg]
+        });
+        if (payload.typ === 'refresh') {
+            throw new jose.errors.JWTClaimValidationFailed('Refresh token cannot be used as an access token', payload, 'typ');
+        }
+        return payload;
+    }
+    /**
+     * Verify a JWT refresh token and return its payload. Same key / audience /
+     * issuer checks as verifyAccessToken and throws the same jose errors on
+     * failure; uses the single active algorithm. Additionally asserts
+     * typ=="refresh" (throwing jose.errors.JWTClaimValidationFailed otherwise) so
+     * an access token can never be exchanged at the refresh grant.
+     */
+    async verifyRefreshToken(token) {
+        if (!this.publicKey)
+            throw new Error('JWTIssuer not initialized');
+        const { payload } = await jose.jwtVerify(token, this.publicKey, {
+            issuer: this.serverName,
+            audience: this.serverName,
+            algorithms: [this.alg]
+        });
+        if (payload.typ !== 'refresh') {
+            throw new jose.errors.JWTClaimValidationFailed('Token is not a refresh token', payload, 'typ');
+        }
+        return payload;
+    }
+}
+//# sourceMappingURL=jwt-issuer.js.map

package/build/oauth/jwt-issuer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-issuer.js","sourceRoot":"","sources":["../../src/oauth/jwt-issuer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC1D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACvF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAEvD,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;AAE7D,yEAAyE;AACzE,+EAA+E;AAC/E,oCAAoC;AACpC,MAAM,oBAAoB,GAAG,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAA;AAEnF,MAAM,OAAO,SAAS;IAapB,YAAY,UAAkB,EAAE,OAAO,GAAG,gBAAgB,EAAE,gBAAgB,GAAkB,IAAI;QAN1F,QAAG,GAAG,OAAO,CAAA;QACb,eAAU,GAA0B,IAAI,CAAA;QACxC,cAAS,GAA0B,IAAI,CAAA;QACvC,SAAI,GAAkB,IAAI,CAAA;QAC1B,iBAAY,GAAG,KAAK,CAAA;QAG1B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAA;QACxC,IAAI,CAAC,GAAG,GAAG,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAA;QAC/C,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,UAAU,cAAc,CAAC,CAAA;QACrE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,UAAU,aAAa,CAAC,CAAA;IACrE,CAAC;IAED,qFAAqF;IACrF,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,YAAY;YAAE,OAAM;QAC7B,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;YACjD,sEAAsE;YACtE,uEAAuE;YACvE,uEAAuE;YACvE,2DAA2D;YAC3D,OAAO,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,UAAU,2DAA2D,IAAI,CAAC,GAAG,GAAG,CAAC,CAAA;QACnH,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAA;YAClC,OAAO,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,UAAU,iDAAiD,IAAI,CAAC,OAAO,GAAG,CAAC,CAAA;QAC7G,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAA;IAC1B,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,gBAAwB;QACpD,MAAM,IAAI,GAAG,oBAAoB,CAAC,gBAAgB,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;QACpE,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC,CAAA;QACvD,MAAM,GAAG,GAAG,gCAAgC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,+BAA+B,CAAA;QACjG,IAAI,CAAC,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAA;QAC9E,4EAA4E;QAC5E,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAkB,CAAA;QAC5E,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAA;QACjB,IAAI,CAAC,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,CAAmB,CAAA;QAC5G,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC1G,CAAC;IAEO,KAAK,CAAC,qBAAqB;QACjC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACzD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAChC,CAAC;QAED,IAAI,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YACtE,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;YAC7D,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAA;YAC3D,IAAI,CAAC,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAA;YACrF,IAAI,CAAC,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;QACnF,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE;gBACpE,aAAa,EAAE,IAAI;gBACnB,WAAW,EAAE,IAAI;aAClB,CAAC,CAAA;YAEF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAA;YACrD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;YAElD,aAAa,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YAC/D,aAAa,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YAE7D,0DAA0D;YAC1D,IAAI,CAAC,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAA;YACrF,IAAI,CAAC,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;QACnF,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;QACjE,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;YACzB,OAAO;gBACL,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,CAAC,IAAc,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;aACxG,CAAA;QACH,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAChD,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAA;QAClB,GAAG,CAAC,GAAG,GAAG,KAAK,CAAA;QACf,GAAG,CAAC,GAAG,GAAG,OAAO,CAAA;QACjB,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAA;IACxB,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,gBAAgB,CAAC,GAAW,EAAE,gBAAgB,GAAG,IAAI;QACzD,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;QAClE,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;aAC5C,kBAAkB,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;aACpD,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC;aAC1B,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC;aAC5B,WAAW,EAAE;aACb,iBAAiB,CAAC,GAAG,gBAAgB,GAAG,CAAC;aACzC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAC1B,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,iBAAiB,CAAC,GAAW,EAAE,gBAAgB,GAAG,QAAQ;QAC9D,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;QAClE,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;aAC7C,kBAAkB,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;aACpD,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC;aAC1B,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC;aAC5B,WAAW,EAAE;aACb,iBAAiB,CAAC,GAAG,gBAAgB,GAAG,CAAC;aACzC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAC1B,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,iBAAiB,CAAC,KAAa;QACnC,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;QACjE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE;YAC9D,MAAM,EAAE,IAAI,CAAC,UAAU;YACvB,QAAQ,EAAE,IAAI,CAAC,UAAU;YACzB,UAAU,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;SACvB,CAAC,CAAA;QACF,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,iDAAiD,EAAE,OAAO,EAAE,KAAK,CAAC,CAAA;QACnH,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,kBAAkB,CAAC,KAAa;QACpC,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;QACjE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE;YAC9D,MAAM,EAAE,IAAI,CAAC,UAAU;YACvB,QAAQ,EAAE,IAAI,CAAC,UAAU;YACzB,UAAU,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;SACvB,CAAC,CAAA;QACF,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,8BAA8B,EAAE,OAAO,EAAE,KAAK,CAAC,CAAA;QAChG,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;CACF"}

package/build/oauth/pkce.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Verify PKCE code challenge.
+ * Throws an error if verification fails.
+ *
+ * @param codeVerifier The PKCE code verifier.
+ * @param codeChallenge The stored code challenge.
+ * @param method The code challenge method (S256 or plain).
+ */
+export declare function verifyPKCE(codeVerifier: string, codeChallenge: string, method: string): void;
+//# sourceMappingURL=pkce.d.ts.map

package/build/oauth/pkce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.d.ts","sourceRoot":"","sources":["../../src/oauth/pkce.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAqB5F"}

package/build/oauth/pkce.js

@@ -0,0 +1,34 @@
+import { createHash, timingSafeEqual } from 'node:crypto';
+/**
+ * Verify PKCE code challenge.
+ * Throws an error if verification fails.
+ *
+ * @param codeVerifier The PKCE code verifier.
+ * @param codeChallenge The stored code challenge.
+ * @param method The code challenge method (S256 or plain).
+ */
+export function verifyPKCE(codeVerifier, codeChallenge, method) {
+    if (method === 'S256') {
+        const digest = createHash('sha256').update(codeVerifier).digest('base64url');
+        const expected = Buffer.from(digest);
+        const actual = Buffer.from(codeChallenge);
+        const isLengthEqual = expected.length === actual.length;
+        const compareActual = isLengthEqual ? actual : expected;
+        if (!timingSafeEqual(expected, compareActual) || !isLengthEqual) {
+            throw new Error('invalid_grant: PKCE verification failed');
+        }
+    }
+    else if (method === 'plain') {
+        const expected = Buffer.from(codeVerifier);
+        const actual = Buffer.from(codeChallenge);
+        const isLengthEqual = expected.length === actual.length;
+        const compareActual = isLengthEqual ? actual : expected;
+        if (!timingSafeEqual(expected, compareActual) || !isLengthEqual) {
+            throw new Error('invalid_grant: PKCE plain verification failed');
+        }
+    }
+    else {
+        throw new Error('unsupported_challenge_method');
+    }
+}
+//# sourceMappingURL=pkce.js.map

package/build/oauth/pkce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.js","sourceRoot":"","sources":["../../src/oauth/pkce.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAEzD;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,YAAoB,EAAE,aAAqB,EAAE,MAAc;IACpF,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACpC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QACzC,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAA;QACvD,MAAM,aAAa,GAAG,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAA;QACvD,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;QAC5D,CAAC;IACH,CAAC;SAAM,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QACzC,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAA;QACvD,MAAM,aAAa,GAAG,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAA;QACvD,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;QAClE,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;IACjD,CAAC;AACH,CAAC"}

package/build/oauth/provider.d.ts

@@ -0,0 +1,52 @@
+/**
+ * OAuth 2.1 Provider logic for TypeScript MCP servers.
+ *
+ * Implements the "MCP Server as Authorization Server" pattern.
+ * The MCP Server issues JWTs, processes PKCE verification,
+ * and uses the Relay Server purely as a UI consent transport.
+ */
+import type { RelayConfigSchema } from '../schema/types.js';
+import { type IOAuthSessionCache } from './cache.js';
+import type { JWTIssuer } from './jwt-issuer.js';
+export { InMemoryAuthCache, type IOAuthSessionCache, type PreAuthSession } from './cache.js';
+export interface OAuthProviderOptions {
+    serverName: string;
+    relayBaseUrl: string;
+    relaySchema: RelayConfigSchema;
+    jwtIssuer: JWTIssuer;
+    cache?: IOAuthSessionCache;
+}
+export declare class OAuthProvider {
+    private serverName;
+    private relayBaseUrl;
+    private relaySchema;
+    private jwtIssuer;
+    private cache;
+    constructor(options: OAuthProviderOptions);
+    /**
+     * Create a relay session and return the URL to redirect the user to.
+     */
+    createAuthorizeRedirect(clientId: string, redirectUri: string, state: string, codeChallenge: string, codeChallengeMethod?: string): Promise<string>;
+    /**
+     * Exchange the authorization code (relay session ID) for an access_token.
+     * PKCE verification is performed.
+     *
+     * @param code The authorization code from the client.
+     * @param codeVerifier The PKCE code verifier.
+     * @param userIdExtractor Function to derive a unique user_id from the credentials.
+     * @returns Tuple of [access_token, credentials]
+     */
+    exchangeCode(code: string, codeVerifier: string, userIdExtractor: (credentials: Record<string, string>) => string): Promise<{
+        accessToken: string;
+        credentials: Record<string, string>;
+    }>;
+    /**
+     * Reconstruct relay session from pre-auth session.
+     */
+    private reconstructRelaySession;
+    /**
+     * Get RFC 8414 Authorization Server Metadata.
+     */
+    getMetadata(baseUrl: string): Record<string, unknown>;
+}
+//# sourceMappingURL=provider.d.ts.map

package/build/oauth/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../src/oauth/provider.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EAAqB,KAAK,kBAAkB,EAAuB,MAAM,YAAY,CAAA;AAC5F,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAGhD,OAAO,EACL,iBAAiB,EACjB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACpB,MAAM,YAAY,CAAA;AAEnB,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,iBAAiB,CAAA;IAC9B,SAAS,EAAE,SAAS,CAAA;IACpB,KAAK,CAAC,EAAE,kBAAkB,CAAA;CAC3B;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,UAAU,CAAQ;IAC1B,OAAO,CAAC,YAAY,CAAQ;IAC5B,OAAO,CAAC,WAAW,CAAmB;IACtC,OAAO,CAAC,SAAS,CAAW;IAC5B,OAAO,CAAC,KAAK,CAAoB;IAEjC,YAAY,OAAO,EAAE,oBAAoB,EAMxC;IAED;;OAEG;IACG,uBAAuB,CAC3B,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,EACrB,mBAAmB,SAAS,GAC3B,OAAO,CAAC,MAAM,CAAC,CAmBjB;IAED;;;;;;;;OAQG;IACG,YAAY,CAChB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EACpB,eAAe,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,MAAM,GAC/D,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC,CAoBvE;IAED;;OAEG;YACW,uBAAuB;IAwBrC;;OAEG;IACH,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAWpD;CACF"}

package/build/oauth/provider.js

@@ -0,0 +1,98 @@
+/**
+ * OAuth 2.1 Provider logic for TypeScript MCP servers.
+ *
+ * Implements the "MCP Server as Authorization Server" pattern.
+ * The MCP Server issues JWTs, processes PKCE verification,
+ * and uses the Relay Server purely as a UI consent transport.
+ */
+import { createSession, pollForResult } from '../relay/client.js';
+import { InMemoryAuthCache } from './cache.js';
+import { verifyPKCE } from './pkce.js';
+export { InMemoryAuthCache } from './cache.js';
+export class OAuthProvider {
+    constructor(options) {
+        this.serverName = options.serverName;
+        this.relayBaseUrl = options.relayBaseUrl;
+        this.relaySchema = options.relaySchema;
+        this.jwtIssuer = options.jwtIssuer;
+        this.cache = options.cache ?? new InMemoryAuthCache();
+    }
+    /**
+     * Create a relay session and return the URL to redirect the user to.
+     */
+    async createAuthorizeRedirect(clientId, redirectUri, state, codeChallenge, codeChallengeMethod = 'S256') {
+        const session = await createSession(this.relayBaseUrl, this.serverName, this.relaySchema);
+        // Export private key for later credential retrieval
+        const privateJwk = await crypto.subtle.exportKey('jwk', session.keyPair.privateKey);
+        const preAuth = {
+            sessionId: session.sessionId,
+            clientId,
+            redirectUri,
+            state,
+            codeChallenge,
+            codeChallengeMethod,
+            keyPairJwk: privateJwk,
+            passphrase: session.passphrase,
+            expiresAt: Math.floor(Date.now() / 1000) + 600 // 10 minutes
+        };
+        this.cache.save(preAuth);
+        return session.relayUrl;
+    }
+    /**
+     * Exchange the authorization code (relay session ID) for an access_token.
+     * PKCE verification is performed.
+     *
+     * @param code The authorization code from the client.
+     * @param codeVerifier The PKCE code verifier.
+     * @param userIdExtractor Function to derive a unique user_id from the credentials.
+     * @returns Tuple of [access_token, credentials]
+     */
+    async exchangeCode(code, codeVerifier, userIdExtractor) {
+        const preAuth = this.cache.getAndDelete(code);
+        if (!preAuth)
+            throw new Error('invalid_grant: Expired or invalid code');
+        // Verify PKCE
+        verifyPKCE(codeVerifier, preAuth.codeChallenge, preAuth.codeChallengeMethod);
+        // Reconstruct relay session
+        const reconstructedSession = await this.reconstructRelaySession(preAuth);
+        // Poll for credentials (short timeout — form already submitted)
+        const credentials = await pollForResult(this.relayBaseUrl, reconstructedSession, 1000, 10_000);
+        // Extract unique user_id
+        const userId = userIdExtractor(credentials);
+        if (!userId)
+            throw new Error('server_error: Unable to extract user_id from credentials');
+        // Issue access token
+        const accessToken = await this.jwtIssuer.issueAccessToken(userId);
+        return { accessToken, credentials };
+    }
+    /**
+     * Reconstruct relay session from pre-auth session.
+     */
+    async reconstructRelaySession(preAuth) {
+        // Reconstruct key pair to decrypt relay credentials
+        const privateKey = await crypto.subtle.importKey('jwk', preAuth.keyPairJwk, { name: 'ECDH', namedCurve: 'P-256' }, true, ['deriveKey', 'deriveBits']);
+        const publicKey = await crypto.subtle.importKey('jwk', { ...preAuth.keyPairJwk, d: undefined }, { name: 'ECDH', namedCurve: 'P-256' }, true, []);
+        return {
+            sessionId: preAuth.sessionId,
+            keyPair: { privateKey, publicKey },
+            passphrase: preAuth.passphrase,
+            relayUrl: ''
+        };
+    }
+    /**
+     * Get RFC 8414 Authorization Server Metadata.
+     */
+    getMetadata(baseUrl) {
+        return {
+            issuer: baseUrl,
+            authorization_endpoint: `${baseUrl}/authorize`,
+            token_endpoint: `${baseUrl}/token`,
+            jwks_uri: `${baseUrl}/.well-known/jwks.json`,
+            response_types_supported: ['code'],
+            grant_types_supported: ['authorization_code'],
+            code_challenge_methods_supported: ['S256', 'plain'],
+            token_endpoint_auth_methods_supported: ['none']
+        };
+    }
+}
+//# sourceMappingURL=provider.js.map

package/build/oauth/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../src/oauth/provider.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,aAAa,EAAE,aAAa,EAAqB,MAAM,oBAAoB,CAAA;AAEpF,OAAO,EAAE,iBAAiB,EAAgD,MAAM,YAAY,CAAA;AAE5F,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAEtC,OAAO,EACL,iBAAiB,EAGlB,MAAM,YAAY,CAAA;AAUnB,MAAM,OAAO,aAAa;IAOxB,YAAY,OAA6B;QACvC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;QACpC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAA;QACxC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;QACtC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAA;QAClC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,iBAAiB,EAAE,CAAA;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,uBAAuB,CAC3B,QAAgB,EAChB,WAAmB,EACnB,KAAa,EACb,aAAqB,EACrB,mBAAmB,GAAG,MAAM;QAE5B,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,CAAA;QAEzF,oDAAoD;QACpD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QAEnF,MAAM,OAAO,GAAmB;YAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ;YACR,WAAW;YACX,KAAK;YACL,aAAa;YACb,mBAAmB;YACnB,UAAU,EAAE,UAAU;YACtB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,aAAa;SAC7D,CAAA;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACxB,OAAO,OAAO,CAAC,QAAQ,CAAA;IACzB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,YAAY,CAChB,IAAY,EACZ,YAAoB,EACpB,eAAgE;QAEhE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;QAC7C,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;QAEvE,cAAc;QACd,UAAU,CAAC,YAAY,EAAE,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAA;QAE5E,4BAA4B;QAC5B,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAA;QAExE,gEAAgE;QAChE,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,oBAAoB,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QAE9F,yBAAyB;QACzB,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,CAAC,CAAA;QAC3C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;QAExF,qBAAqB;QACrB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;QACjE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CAAA;IACrC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,uBAAuB,CAAC,OAAuB;QAC3D,oDAAoD;QACpD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC9C,KAAK,EACL,OAAO,CAAC,UAAU,EAClB,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EACrC,IAAI,EACJ,CAAC,WAAW,EAAE,YAAY,CAAC,CAC5B,CAAA;QACD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC7C,KAAK,EACL,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,EACvC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EACrC,IAAI,EACJ,EAAE,CACH,CAAA;QACD,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;YAClC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,QAAQ,EAAE,EAAE;SACb,CAAA;IACH,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,OAAe;QACzB,OAAO;YACL,MAAM,EAAE,OAAO;YACf,sBAAsB,EAAE,GAAG,OAAO,YAAY;YAC9C,cAAc,EAAE,GAAG,OAAO,QAAQ;YAClC,QAAQ,EAAE,GAAG,OAAO,wBAAwB;YAC5C,wBAAwB,EAAE,CAAC,MAAM,CAAC;YAClC,qBAAqB,EAAE,CAAC,oBAAoB,CAAC;YAC7C,gCAAgC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;YACnD,qCAAqC,EAAE,CAAC,MAAM,CAAC;SAChD,CAAA;IACH,CAAC;CACF"}

package/build/oauth/user-store.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Per-user encrypted credential store for MCP HTTP modes.
+ * Uses better-sqlite3 for persistence and Node.js crypto for AES-256-GCM at-rest encryption.
+ */
+export interface IUserCredentialStore {
+    saveCredentials(userId: string, config: Record<string, string>): void;
+    getCredentials(userId: string): Record<string, string> | null;
+    deleteCredentials(userId: string): void;
+}
+export declare class SqliteUserStore implements IUserCredentialStore {
+    private db;
+    private masterKey;
+    /**
+     * @param dbPath Path to the SQLite DB file.
+     * @param masterKey 32-byte AES key for at-rest encryption.
+     */
+    constructor(dbPath: string, masterKey: Buffer);
+    private encrypt;
+    private decrypt;
+    saveCredentials(userId: string, config: Record<string, string>): void;
+    getCredentials(userId: string): Record<string, string> | null;
+    deleteCredentials(userId: string): void;
+    close(): void;
+}
+//# sourceMappingURL=user-store.d.ts.map

package/build/oauth/user-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-store.d.ts","sourceRoot":"","sources":["../../src/oauth/user-store.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,MAAM,WAAW,oBAAoB;IACnC,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAA;IACrE,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAA;IAC7D,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CACxC;AAED,qBAAa,eAAgB,YAAW,oBAAoB;IAC1D,OAAO,CAAC,EAAE,CAAmB;IAC7B,OAAO,CAAC,SAAS,CAAQ;IAEzB;;;OAGG;IACH,YAAY,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAwB5C;IAED,OAAO,CAAC,OAAO;IASf,OAAO,CAAC,OAAO;IASf,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAapE;IAED,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAY5D;IAED,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAEtC;IAED,KAAK,IAAI,IAAI,CAEZ;CACF"}

package/build/oauth/user-store.js

@@ -0,0 +1,85 @@
+/**
+ * Per-user encrypted credential store for MCP HTTP modes.
+ * Uses better-sqlite3 for persistence and Node.js crypto for AES-256-GCM at-rest encryption.
+ */
+import { createCipheriv, createDecipheriv, randomBytes } from 'node:crypto';
+import { chmodSync, mkdirSync } from 'node:fs';
+import { dirname } from 'node:path';
+import Database from 'better-sqlite3';
+export class SqliteUserStore {
+    /**
+     * @param dbPath Path to the SQLite DB file.
+     * @param masterKey 32-byte AES key for at-rest encryption.
+     */
+    constructor(dbPath, masterKey) {
+        if (masterKey.length !== 32)
+            throw new Error('masterKey must be 32 bytes');
+        this.masterKey = masterKey;
+        // Ensure directory exists with strict permissions (owner-only access).
+        // 0o700 = owner read+write+exec only; group/other denied. This is the
+        // secure default for a credential store directory.
+        mkdirSync(dirname(dbPath), { recursive: true, mode: 0o700 });
+        if (process.platform !== 'win32') {
+            chmodSync(dirname(dbPath), 0o700);
+        }
+        this.db = new Database(dbPath);
+        this.db.pragma('journal_mode = WAL');
+        this.db
+            .prepare(`
+      CREATE TABLE IF NOT EXISTS users (
+        user_id TEXT PRIMARY KEY,
+        encrypted_config BLOB NOT NULL,
+        created_at INTEGER NOT NULL,
+        updated_at INTEGER NOT NULL
+      )
+    `)
+            .run();
+    }
+    encrypt(plaintext) {
+        const iv = randomBytes(12);
+        const cipher = createCipheriv('aes-256-gcm', this.masterKey, iv, { authTagLength: 16 });
+        const encrypted = Buffer.concat([cipher.update(plaintext, 'utf-8'), cipher.final()]);
+        const tag = cipher.getAuthTag();
+        // Layout: [12 iv] [16 tag] [... ciphertext]
+        return Buffer.concat([iv, tag, encrypted]);
+    }
+    decrypt(payload) {
+        const iv = payload.subarray(0, 12);
+        const tag = payload.subarray(12, 28);
+        const ciphertext = payload.subarray(28);
+        const decipher = createDecipheriv('aes-256-gcm', this.masterKey, iv, { authTagLength: 16 });
+        decipher.setAuthTag(tag);
+        return Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString('utf-8');
+    }
+    saveCredentials(userId, config) {
+        const now = Math.floor(Date.now() / 1000);
+        const encrypted = this.encrypt(JSON.stringify(config));
+        this.db
+            .prepare(`
+        INSERT INTO users (user_id, encrypted_config, created_at, updated_at)
+        VALUES (?, ?, ?, ?)
+        ON CONFLICT(user_id) DO UPDATE SET
+          encrypted_config = excluded.encrypted_config,
+          updated_at = excluded.updated_at
+      `)
+            .run(userId, encrypted, now, now);
+    }
+    getCredentials(userId) {
+        const row = this.db.prepare('SELECT encrypted_config FROM users WHERE user_id = ?').get(userId);
+        if (!row)
+            return null;
+        try {
+            return JSON.parse(this.decrypt(Buffer.from(row.encrypted_config)));
+        }
+        catch {
+            return null;
+        }
+    }
+    deleteCredentials(userId) {
+        this.db.prepare('DELETE FROM users WHERE user_id = ?').run(userId);
+    }
+    close() {
+        this.db.close();
+    }
+}
+//# sourceMappingURL=user-store.js.map

package/build/oauth/user-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-store.js","sourceRoot":"","sources":["../../src/oauth/user-store.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAC3E,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AAQrC,MAAM,OAAO,eAAe;IAI1B;;;OAGG;IACH,YAAY,MAAc,EAAE,SAAiB;QAC3C,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;QAC1E,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAE1B,uEAAuE;QACvE,sEAAsE;QACtE,mDAAmD;QACnD,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAC5D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;QACnC,CAAC;QAED,IAAI,CAAC,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAA;QAC9B,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAA;QACpC,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC;;;;;;;KAOV,CAAC;aACC,GAAG,EAAE,CAAA;IACV,CAAC;IAEO,OAAO,CAAC,SAAiB;QAC/B,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAA;QAC1B,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAA;QACvF,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;QACpF,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;QAC/B,4CAA4C;QAC5C,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAA;IAC5C,CAAC;IAEO,OAAO,CAAC,OAAe;QAC7B,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAClC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QACpC,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QACvC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAA;QAC3F,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;QACxB,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IACzF,CAAC;IAED,eAAe,CAAC,MAAc,EAAE,MAA8B;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;QACzC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA;QAEtD,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC;;;;;;OAMR,CAAC;aACD,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;IACrC,CAAC;IAED,cAAc,CAAC,MAAc;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC,GAAG,CAAC,MAAM,CAEjF,CAAA;QAEb,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAA;QAErB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAA;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED,iBAAiB,CAAC,MAAc;QAC9B,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACpE,CAAC;IAED,KAAK;QACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAA;IACjB,CAAC;CACF"}

package/build/relay/browser.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Cross-platform browser opening with WSL detection.
+ */
+/**
+ * Try to open URL in default browser. Returns true if likely succeeded.
+ *
+ * Detection order:
+ * 1. win32: powershell.exe -EncodedCommand
+ * 2. darwin: `open` command
+ * 3. linux: check WSL then `xdg-open`
+ *
+ * Never throws. Returns false on failure.
+ */
+export declare function tryOpenBrowser(url: string): Promise<boolean>;
+//# sourceMappingURL=browser.d.ts.map

package/build/relay/browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/relay/browser.ts"],"names":[],"mappings":"AAAA;;GAEG;AA2EH;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CA6ClE"}