@neverinfamous/mysql-mcp 2.1.0

package/dist/adapters/mysql/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/adapters/mysql/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IACzD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAC3F,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;CAC9G,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IAC5D,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAC3F,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;CAC9G,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;CAC7F,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;CACvD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;QACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;QAC5E,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAC5E,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAC7D,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QACvE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;QACzD,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAC5D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;KAC5D,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IAClC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACxH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC;IAC3E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;IAClF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;IACxD,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC;CAC1F,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IAChD,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC;CAClF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;IACxC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IAC9D,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IAC7E,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;IACxF,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC;CAC1F,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;CAC3C,CAAC,CAAC;AAEH,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC;QACnB,kBAAkB;QAClB,gBAAgB;QAChB,iBAAiB;QACjB,cAAc;KACjB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;CACxD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;CAC5E,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACpD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;CACnD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IAChF,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC;QACnB,kBAAkB;QAClB,gBAAgB;QAChB,iBAAiB;QACjB,cAAc;KACjB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;CACxD,CAAC,CAAC;AAEH,gFAAgF;AAChF,eAAe;AACf,gFAAgF;AAEhF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IAC/C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAC7D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;CAC3E,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IAC/C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IAC7C,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;CAC9D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IAC/C,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IAClD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;CAC9E,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IAC/C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;CAChF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IAC/C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IAC9D,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC;CACjF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;CACxD,CAAC,CAAC;AAEH,gFAAgF;AAChF,eAAe;AACf,gFAAgF;AAEhF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;CAC7D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;CACtE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;IAC1C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;CAC5D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;IACxC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IACpE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;CACnE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;IACxC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IAC1D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC;CAC1G,CAAC,CAAC;AAEH,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IAClD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAC3F,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC;CACvG,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IACrF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;CAC3E,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;CAChE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;CAC3C,CAAC,CAAC;AAEH,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC;CAClE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;CACjE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IAC5D,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;CACzG,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;CAC9F,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IACpD,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC;CACjG,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC;CAC/E,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IACxE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC;CAC9E,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IACxE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;CACjF,CAAC,CAAC;AAEH,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC;IAClF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;CACvE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,gCAAgC,CAAC;CAC9F,CAAC,CAAC;AAEH,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IAC3D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IAC7D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC;CACjF,CAAC,CAAC;AAEH,gFAAgF;AAChF,uBAAuB;AACvB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;CAC3C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IACxD,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAClF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kKAAkK,CAAC;CACjM,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;CAC/D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;IACxC,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACtE,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,4EAA4E,CAAC;IAC/H,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QAC/C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+HAA+H,CAAC;KAC9J,CAAC,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC;CAC5C,CAAC,CAAC"}

package/dist/auth/AuthorizationServerDiscovery.d.ts

@@ -0,0 +1,44 @@
+/**
+ * mysql-mcp - Authorization Server Discovery
+ *
+ * RFC 8414 Authorization Server Metadata discovery.
+ */
+import type { AuthServerDiscoveryConfig, AuthorizationServerMetadata } from './types.js';
+/**
+ * Authorization Server Discovery (RFC 8414)
+ */
+export declare class AuthorizationServerDiscovery {
+    private readonly config;
+    private metadataCache;
+    private cacheTime;
+    constructor(config: AuthServerDiscoveryConfig);
+    /**
+     * Discover authorization server metadata
+     */
+    discover(): Promise<AuthorizationServerMetadata>;
+    /**
+     * Get JWKS URI from discovered metadata
+     */
+    getJwksUri(): Promise<string>;
+    /**
+     * Get token endpoint from discovered metadata
+     */
+    getTokenEndpoint(): Promise<string>;
+    /**
+     * Get registration endpoint (if available)
+     */
+    getRegistrationEndpoint(): Promise<string | undefined>;
+    /**
+     * Check if auth server supports a specific grant type
+     */
+    supportsGrantType(grantType: string): Promise<boolean>;
+    /**
+     * Invalidate cache
+     */
+    invalidateCache(): void;
+}
+/**
+ * Create an authorization server discovery instance
+ */
+export declare function createAuthServerDiscovery(config: AuthServerDiscoveryConfig): AuthorizationServerDiscovery;
+//# sourceMappingURL=AuthorizationServerDiscovery.d.ts.map

package/dist/auth/AuthorizationServerDiscovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthorizationServerDiscovery.d.ts","sourceRoot":"","sources":["../../src/auth/AuthorizationServerDiscovery.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AAIzF;;GAEG;AACH,qBAAa,4BAA4B;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4B;IACnD,OAAO,CAAC,aAAa,CAA4C;IACjE,OAAO,CAAC,SAAS,CAAK;gBAEV,MAAM,EAAE,yBAAyB;IAQ7C;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,2BAA2B,CAAC;IAsDtD;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC;IAQnC;;OAEG;IACG,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC;IAKzC;;OAEG;IACG,uBAAuB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAK5D;;OAEG;IACG,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAK5D;;OAEG;IACH,eAAe,IAAI,IAAI;CAI1B;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,yBAAyB,GAAG,4BAA4B,CAEzG"}

package/dist/auth/AuthorizationServerDiscovery.js

@@ -0,0 +1,110 @@
+/**
+ * mysql-mcp - Authorization Server Discovery
+ *
+ * RFC 8414 Authorization Server Metadata discovery.
+ */
+import { AuthServerDiscoveryError } from './errors.js';
+import { logger } from '../utils/logger.js';
+/**
+ * Authorization Server Discovery (RFC 8414)
+ */
+export class AuthorizationServerDiscovery {
+    config;
+    metadataCache = null;
+    cacheTime = 0;
+    constructor(config) {
+        this.config = {
+            ...config,
+            cacheTtl: config.cacheTtl ?? 3600,
+            timeout: config.timeout ?? 5000
+        };
+    }
+    /**
+     * Discover authorization server metadata
+     */
+    async discover() {
+        const now = Date.now();
+        const cacheTtlMs = (this.config.cacheTtl ?? 3600) * 1000;
+        // Check cache
+        if (this.metadataCache && (now - this.cacheTime) < cacheTtlMs) {
+            return this.metadataCache;
+        }
+        try {
+            // RFC 8414: well-known endpoint
+            const wellKnownUrl = new URL('/.well-known/oauth-authorization-server', this.config.authServerUrl);
+            const controller = new AbortController();
+            const timeoutId = setTimeout(() => controller.abort(), this.config.timeout);
+            const response = await fetch(wellKnownUrl.toString(), {
+                method: 'GET',
+                headers: { 'Accept': 'application/json' },
+                signal: controller.signal
+            });
+            clearTimeout(timeoutId);
+            if (!response.ok) {
+                throw new Error(`HTTP ${response.status}: ${response.statusText}`);
+            }
+            const metadata = await response.json();
+            // Validate required fields
+            if (!metadata.issuer || !metadata.token_endpoint) {
+                throw new Error('Invalid metadata: missing required fields');
+            }
+            // Cache the metadata
+            this.metadataCache = metadata;
+            this.cacheTime = now;
+            logger.debug('Auth server metadata discovered', { issuer: metadata.issuer });
+            return metadata;
+        }
+        catch (error) {
+            logger.error('Auth server discovery failed', {
+                url: this.config.authServerUrl,
+                error: String(error)
+            });
+            throw new AuthServerDiscoveryError(`Failed to discover auth server at ${this.config.authServerUrl}: ${String(error)}`);
+        }
+    }
+    /**
+     * Get JWKS URI from discovered metadata
+     */
+    async getJwksUri() {
+        const metadata = await this.discover();
+        if (!metadata.jwks_uri) {
+            throw new AuthServerDiscoveryError('Auth server metadata does not include jwks_uri');
+        }
+        return metadata.jwks_uri;
+    }
+    /**
+     * Get token endpoint from discovered metadata
+     */
+    async getTokenEndpoint() {
+        const metadata = await this.discover();
+        return metadata.token_endpoint;
+    }
+    /**
+     * Get registration endpoint (if available)
+     */
+    async getRegistrationEndpoint() {
+        const metadata = await this.discover();
+        return metadata.registration_endpoint;
+    }
+    /**
+     * Check if auth server supports a specific grant type
+     */
+    async supportsGrantType(grantType) {
+        const metadata = await this.discover();
+        return metadata.grant_types_supported?.includes(grantType) ?? false;
+    }
+    /**
+     * Invalidate cache
+     */
+    invalidateCache() {
+        this.metadataCache = null;
+        this.cacheTime = 0;
+    }
+}
+/**
+ * Create an authorization server discovery instance
+ */
+export function createAuthServerDiscovery(config) {
+    return new AuthorizationServerDiscovery(config);
+}
+//# sourceMappingURL=AuthorizationServerDiscovery.js.map

package/dist/auth/AuthorizationServerDiscovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthorizationServerDiscovery.js","sourceRoot":"","sources":["../../src/auth/AuthorizationServerDiscovery.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C;;GAEG;AACH,MAAM,OAAO,4BAA4B;IACpB,MAAM,CAA4B;IAC3C,aAAa,GAAuC,IAAI,CAAC;IACzD,SAAS,GAAG,CAAC,CAAC;IAEtB,YAAY,MAAiC;QACzC,IAAI,CAAC,MAAM,GAAG;YACV,GAAG,MAAM;YACT,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;YACjC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;SAClC,CAAC;IACN,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ;QACV,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC;QAEzD,cAAc;QACd,IAAI,IAAI,CAAC,aAAa,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,UAAU,EAAE,CAAC;YAC5D,OAAO,IAAI,CAAC,aAAa,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC;YACD,gCAAgC;YAChC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,yCAAyC,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAEnG,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAE5E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE;gBAClD,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE;gBACzC,MAAM,EAAE,UAAU,CAAC,MAAM;aAC5B,CAAC,CAAC;YAEH,YAAY,CAAC,SAAS,CAAC,CAAC;YAExB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YACvE,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAiC,CAAC;YAEtE,2BAA2B;YAC3B,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;gBAC/C,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YACjE,CAAC;YAED,qBAAqB;YACrB,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC;YAC9B,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;YAErB,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAE7E,OAAO,QAAQ,CAAC;QAEpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBACzC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;gBAC9B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;aACvB,CAAC,CAAC;YACH,MAAM,IAAI,wBAAwB,CAC9B,qCAAqC,IAAI,CAAC,MAAM,CAAC,aAAa,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CACrF,CAAC;QACN,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU;QACZ,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,IAAI,wBAAwB,CAAC,gDAAgD,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,QAAQ,CAAC,QAAQ,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB;QAClB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvC,OAAO,QAAQ,CAAC,cAAc,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,uBAAuB;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvC,OAAO,QAAQ,CAAC,qBAAqB,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,SAAiB;QACrC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvC,OAAO,QAAQ,CAAC,qBAAqB,EAAE,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC;IACxE,CAAC;IAED;;OAEG;IACH,eAAe;QACX,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;IACvB,CAAC;CACJ;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAiC;IACvE,OAAO,IAAI,4BAA4B,CAAC,MAAM,CAAC,CAAC;AACpD,CAAC"}

package/dist/auth/OAuthResourceServer.d.ts

@@ -0,0 +1,42 @@
+/**
+ * mysql-mcp - OAuth Resource Server
+ *
+ * RFC 9728 Protected Resource Metadata implementation.
+ */
+import type { ResourceServerConfig, ProtectedResourceMetadata } from './types.js';
+/**
+ * OAuth 2.0 Resource Server (RFC 9728)
+ */
+export declare class OAuthResourceServer {
+    private readonly config;
+    constructor(config: ResourceServerConfig);
+    /**
+     * Get protected resource metadata (RFC 9728)
+     */
+    getMetadata(): ProtectedResourceMetadata;
+    /**
+     * Get the well-known endpoint path for protected resource metadata
+     */
+    getWellKnownPath(): string;
+    /**
+     * Verify that a scope is supported by this resource
+     */
+    isScopeSupported(scope: string): boolean;
+    /**
+     * Get the resource identifier
+     */
+    getResourceId(): string;
+    /**
+     * Get all supported scopes
+     */
+    getSupportedScopes(): string[];
+    /**
+     * Get authorization servers
+     */
+    getAuthorizationServers(): string[];
+}
+/**
+ * Create an OAuth resource server instance
+ */
+export declare function createOAuthResourceServer(config: ResourceServerConfig): OAuthResourceServer;
+//# sourceMappingURL=OAuthResourceServer.d.ts.map

package/dist/auth/OAuthResourceServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OAuthResourceServer.d.ts","sourceRoot":"","sources":["../../src/auth/OAuthResourceServer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAElF;;GAEG;AACH,qBAAa,mBAAmB;IAC5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;gBAElC,MAAM,EAAE,oBAAoB;IAOxC;;OAEG;IACH,WAAW,IAAI,yBAAyB;IAWxC;;OAEG;IACH,gBAAgB,IAAI,MAAM;IAI1B;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAcxC;;OAEG;IACH,aAAa,IAAI,MAAM;IAIvB;;OAEG;IACH,kBAAkB,IAAI,MAAM,EAAE;IAI9B;;OAEG;IACH,uBAAuB,IAAI,MAAM,EAAE;CAGtC;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,oBAAoB,GAAG,mBAAmB,CAE3F"}

package/dist/auth/OAuthResourceServer.js

@@ -0,0 +1,75 @@
+/**
+ * mysql-mcp - OAuth Resource Server
+ *
+ * RFC 9728 Protected Resource Metadata implementation.
+ */
+/**
+ * OAuth 2.0 Resource Server (RFC 9728)
+ */
+export class OAuthResourceServer {
+    config;
+    constructor(config) {
+        this.config = {
+            ...config,
+            bearerMethodsSupported: config.bearerMethodsSupported ?? ['header']
+        };
+    }
+    /**
+     * Get protected resource metadata (RFC 9728)
+     */
+    getMetadata() {
+        return {
+            resource: this.config.resource,
+            authorization_servers: this.config.authorizationServers,
+            scopes_supported: this.config.scopesSupported,
+            bearer_methods_supported: this.config.bearerMethodsSupported,
+            resource_documentation: `${this.config.resource}/docs`,
+            resource_signing_alg_values_supported: ['RS256', 'ES256']
+        };
+    }
+    /**
+     * Get the well-known endpoint path for protected resource metadata
+     */
+    getWellKnownPath() {
+        return '/.well-known/oauth-protected-resource';
+    }
+    /**
+     * Verify that a scope is supported by this resource
+     */
+    isScopeSupported(scope) {
+        // Check if in explicit list
+        if (this.config.scopesSupported.includes(scope)) {
+            return true;
+        }
+        // Check for database-specific scope patterns
+        if (scope.startsWith('db:') || scope.startsWith('table:')) {
+            return true;
+        }
+        return false;
+    }
+    /**
+     * Get the resource identifier
+     */
+    getResourceId() {
+        return this.config.resource;
+    }
+    /**
+     * Get all supported scopes
+     */
+    getSupportedScopes() {
+        return [...this.config.scopesSupported];
+    }
+    /**
+     * Get authorization servers
+     */
+    getAuthorizationServers() {
+        return [...this.config.authorizationServers];
+    }
+}
+/**
+ * Create an OAuth resource server instance
+ */
+export function createOAuthResourceServer(config) {
+    return new OAuthResourceServer(config);
+}
+//# sourceMappingURL=OAuthResourceServer.js.map

package/dist/auth/OAuthResourceServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OAuthResourceServer.js","sourceRoot":"","sources":["../../src/auth/OAuthResourceServer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH;;GAEG;AACH,MAAM,OAAO,mBAAmB;IACX,MAAM,CAAuB;IAE9C,YAAY,MAA4B;QACpC,IAAI,CAAC,MAAM,GAAG;YACV,GAAG,MAAM;YACT,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,CAAC,QAAQ,CAAC;SACtE,CAAC;IACN,CAAC;IAED;;OAEG;IACH,WAAW;QACP,OAAO;YACH,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,qBAAqB,EAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB;YACvD,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;YAC7C,wBAAwB,EAAE,IAAI,CAAC,MAAM,CAAC,sBAAsB;YAC5D,sBAAsB,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,OAAO;YACtD,qCAAqC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;SAC5D,CAAC;IACN,CAAC;IAED;;OAEG;IACH,gBAAgB;QACZ,OAAO,uCAAuC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,KAAa;QAC1B,4BAA4B;QAC5B,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9C,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,6CAA6C;QAC7C,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxD,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,aAAa;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,kBAAkB;QACd,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,uBAAuB;QACnB,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACjD,CAAC;CACJ;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAA4B;IAClE,OAAO,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC"}

package/dist/auth/TokenValidator.d.ts

@@ -0,0 +1,36 @@
+/**
+ * mysql-mcp - Token Validator
+ *
+ * JWT token validation with JWKS support.
+ */
+import type { TokenValidatorConfig, TokenValidationResult } from './types.js';
+/**
+ * JWT Token Validator with JWKS support
+ */
+export declare class TokenValidator {
+    private readonly config;
+    private jwksCache;
+    private jwksCacheTime;
+    constructor(config: TokenValidatorConfig);
+    /**
+     * Validate a JWT token
+     */
+    validate(token: string): Promise<TokenValidationResult>;
+    /**
+     * Get or refresh JWKS cache
+     */
+    private getJWKS;
+    /**
+     * Handle validation errors
+     */
+    private handleValidationError;
+    /**
+     * Invalidate JWKS cache (for testing or forced refresh)
+     */
+    invalidateCache(): void;
+}
+/**
+ * Create a token validator instance
+ */
+export declare function createTokenValidator(config: TokenValidatorConfig): TokenValidator;
+//# sourceMappingURL=TokenValidator.d.ts.map

package/dist/auth/TokenValidator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenValidator.d.ts","sourceRoot":"","sources":["../../src/auth/TokenValidator.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,oBAAoB,EAAE,qBAAqB,EAAe,MAAM,YAAY,CAAC;AAK3F;;GAEG;AACH,qBAAa,cAAc;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAC9C,OAAO,CAAC,SAAS,CAAqC;IACtD,OAAO,CAAC,aAAa,CAAK;gBAEd,MAAM,EAAE,oBAAoB;IASxC;;OAEG;IACG,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAkC7D;;OAEG;IACH,OAAO,CAAC,OAAO;IAuBf;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAiC7B;;OAEG;IACH,eAAe,IAAI,IAAI;CAI1B;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,GAAG,cAAc,CAEjF"}

package/dist/auth/TokenValidator.js

@@ -0,0 +1,125 @@
+/**
+ * mysql-mcp - Token Validator
+ *
+ * JWT token validation with JWKS support.
+ */
+import * as jose from 'jose';
+import { JwksFetchError } from './errors.js';
+import { parseScopes } from './scopes.js';
+import { logger } from '../utils/logger.js';
+/**
+ * JWT Token Validator with JWKS support
+ */
+export class TokenValidator {
+    config;
+    jwksCache = null;
+    jwksCacheTime = 0;
+    constructor(config) {
+        this.config = {
+            ...config,
+            clockTolerance: config.clockTolerance ?? 60,
+            jwksCacheTtl: config.jwksCacheTtl ?? 3600,
+            algorithms: config.algorithms ?? ['RS256', 'RS384', 'RS512', 'ES256', 'ES384', 'ES512']
+        };
+    }
+    /**
+     * Validate a JWT token
+     */
+    async validate(token) {
+        try {
+            // Get or refresh JWKS
+            const jwks = this.getJWKS();
+            // Verify the token
+            const { payload } = await jose.jwtVerify(token, jwks, {
+                issuer: this.config.issuer,
+                audience: this.config.audience,
+                clockTolerance: this.config.clockTolerance
+            });
+            // Extract claims
+            const claims = {
+                sub: payload.sub ?? '',
+                scopes: parseScopes(payload['scope']),
+                exp: payload.exp ?? 0,
+                iat: payload.iat ?? 0,
+                iss: payload.iss,
+                aud: payload.aud,
+                nbf: payload.nbf,
+                jti: payload.jti,
+                client_id: payload['client_id']
+            };
+            logger.debug('Token validated successfully', { sub: claims.sub });
+            return { valid: true, claims };
+        }
+        catch (error) {
+            return this.handleValidationError(error);
+        }
+    }
+    /**
+     * Get or refresh JWKS cache
+     */
+    getJWKS() {
+        const now = Date.now();
+        const cacheTtlMs = (this.config.jwksCacheTtl ?? 3600) * 1000;
+        // Check if cache is still valid
+        if (this.jwksCache && (now - this.jwksCacheTime) < cacheTtlMs) {
+            return this.jwksCache;
+        }
+        try {
+            // Create new JWKS remote key set
+            this.jwksCache = jose.createRemoteJWKSet(new URL(this.config.jwksUri));
+            this.jwksCacheTime = now;
+            logger.debug('JWKS cache refreshed', { uri: this.config.jwksUri });
+            return this.jwksCache;
+        }
+        catch (error) {
+            logger.error('Failed to fetch JWKS', { uri: this.config.jwksUri, error: String(error) });
+            throw new JwksFetchError(`Failed to fetch JWKS from ${this.config.jwksUri}`);
+        }
+    }
+    /**
+     * Handle validation errors
+     */
+    handleValidationError(error) {
+        if (error instanceof jose.errors.JWTExpired) {
+            return {
+                valid: false,
+                error: 'Token has expired',
+                errorCode: 'TOKEN_EXPIRED'
+            };
+        }
+        if (error instanceof jose.errors.JWSSignatureVerificationFailed) {
+            return {
+                valid: false,
+                error: 'Invalid token signature',
+                errorCode: 'INVALID_SIGNATURE'
+            };
+        }
+        if (error instanceof jose.errors.JWTClaimValidationFailed) {
+            return {
+                valid: false,
+                error: `Claim validation failed: ${error.message}`,
+                errorCode: 'INVALID_CLAIMS'
+            };
+        }
+        // Generic error
+        return {
+            valid: false,
+            error: error instanceof Error ? error.message : 'Token validation failed',
+            errorCode: 'INVALID_TOKEN'
+        };
+    }
+    /**
+     * Invalidate JWKS cache (for testing or forced refresh)
+     */
+    invalidateCache() {
+        this.jwksCache = null;
+        this.jwksCacheTime = 0;
+    }
+}
+/**
+ * Create a token validator instance
+ */
+export function createTokenValidator(config) {
+    return new TokenValidator(config);
+}
+//# sourceMappingURL=TokenValidator.js.map

package/dist/auth/TokenValidator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenValidator.js","sourceRoot":"","sources":["../../src/auth/TokenValidator.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C;;GAEG;AACH,MAAM,OAAO,cAAc;IACN,MAAM,CAAuB;IACtC,SAAS,GAAgC,IAAI,CAAC;IAC9C,aAAa,GAAG,CAAC,CAAC;IAE1B,YAAY,MAA4B;QACpC,IAAI,CAAC,MAAM,GAAG;YACV,GAAG,MAAM;YACT,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,EAAE;YAC3C,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;YACzC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC;SAC1F,CAAC;IACN,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,KAAa;QACxB,IAAI,CAAC;YACD,sBAAsB;YACtB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAE5B,mBAAmB;YACnB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE;gBAClD,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;gBAC1B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC9B,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc;aAC7C,CAAC,CAAC;YAEH,iBAAiB;YACjB,MAAM,MAAM,GAAgB;gBACxB,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,EAAE;gBACtB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAuB,CAAC;gBAC3D,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;gBACrB,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;gBACrB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,SAAS,EAAE,OAAO,CAAC,WAAW,CAAuB;aACxD,CAAC;YAEF,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;YAElE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAEnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;IACL,CAAC;IAED;;OAEG;IACK,OAAO;QACX,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC;QAE7D,gCAAgC;QAChC,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,UAAU,EAAE,CAAC;YAC5D,OAAO,IAAI,CAAC,SAAS,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC;YACD,iCAAiC;YACjC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YACvE,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC;YAEzB,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YAEnE,OAAO,IAAI,CAAC,SAAS,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACzF,MAAM,IAAI,cAAc,CAAC,6BAA6B,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACjF,CAAC;IACL,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,KAAc;QACxC,IAAI,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAC1C,OAAO;gBACH,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,mBAAmB;gBAC1B,SAAS,EAAE,eAAe;aAC7B,CAAC;QACN,CAAC;QAED,IAAI,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,8BAA8B,EAAE,CAAC;YAC9D,OAAO;gBACH,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,yBAAyB;gBAChC,SAAS,EAAE,mBAAmB;aACjC,CAAC;QACN,CAAC;QAED,IAAI,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,wBAAwB,EAAE,CAAC;YACxD,OAAO;gBACH,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,4BAA4B,KAAK,CAAC,OAAO,EAAE;gBAClD,SAAS,EAAE,gBAAgB;aAC9B,CAAC;QACN,CAAC;QAED,gBAAgB;QAChB,OAAO;YACH,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB;YACzE,SAAS,EAAE,eAAe;SAC7B,CAAC;IACN,CAAC;IAED;;OAEG;IACH,eAAe;QACX,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;IAC3B,CAAC;CACJ;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAA4B;IAC7D,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;AACtC,CAAC"}

package/dist/auth/errors.d.ts

@@ -0,0 +1,63 @@
+/**
+ * mysql-mcp - OAuth Errors
+ *
+ * Error classes for OAuth 2.0 authentication and authorization.
+ */
+/**
+ * Base OAuth error class
+ */
+export declare class OAuthError extends Error {
+    readonly code: string;
+    readonly httpStatus: number;
+    constructor(message: string, code: string, httpStatus?: number);
+}
+/**
+ * Token missing from request
+ */
+export declare class TokenMissingError extends OAuthError {
+    constructor(message?: string);
+}
+/**
+ * Token is invalid (malformed, wrong signature, etc.)
+ */
+export declare class InvalidTokenError extends OAuthError {
+    constructor(message?: string);
+}
+/**
+ * Token has expired
+ */
+export declare class TokenExpiredError extends OAuthError {
+    constructor(message?: string);
+}
+/**
+ * Token signature is invalid
+ */
+export declare class InvalidSignatureError extends OAuthError {
+    constructor(message?: string);
+}
+/**
+ * Token lacks required scope
+ */
+export declare class InsufficientScopeError extends OAuthError {
+    readonly requiredScopes: string[];
+    constructor(requiredScopes: string[], message?: string);
+}
+/**
+ * Authorization server discovery failed
+ */
+export declare class AuthServerDiscoveryError extends OAuthError {
+    constructor(message?: string);
+}
+/**
+ * JWKS fetch failed
+ */
+export declare class JwksFetchError extends OAuthError {
+    constructor(message?: string);
+}
+/**
+ * Client registration failed
+ */
+export declare class ClientRegistrationError extends OAuthError {
+    constructor(message?: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/auth/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/auth/errors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,qBAAa,UAAW,SAAQ,KAAK;IACjC,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,UAAU,EAAE,MAAM,CAAC;gBAEvB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,SAAM;CAO9D;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,UAAU;gBACjC,OAAO,SAA6B;CAKnD;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,UAAU;gBACjC,OAAO,SAAyB;CAK/C;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,UAAU;gBACjC,OAAO,SAA6B;CAKnD;AAED;;GAEG;AACH,qBAAa,qBAAsB,SAAQ,UAAU;gBACrC,OAAO,SAA4B;CAKlD;AAED;;GAEG;AACH,qBAAa,sBAAuB,SAAQ,UAAU;IAClD,SAAgB,cAAc,EAAE,MAAM,EAAE,CAAC;gBAE7B,cAAc,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,MAAM;CAUzD;AAED;;GAEG;AACH,qBAAa,wBAAyB,SAAQ,UAAU;gBACxC,OAAO,SAAqD;CAK3E;AAED;;GAEG;AACH,qBAAa,cAAe,SAAQ,UAAU;gBAC9B,OAAO,SAAyB;CAK/C;AAED;;GAEG;AACH,qBAAa,uBAAwB,SAAQ,UAAU;gBACvC,OAAO,SAA+B;CAKrD"}

package/dist/auth/errors.js

@@ -0,0 +1,102 @@
+/**
+ * mysql-mcp - OAuth Errors
+ *
+ * Error classes for OAuth 2.0 authentication and authorization.
+ */
+/**
+ * Base OAuth error class
+ */
+export class OAuthError extends Error {
+    code;
+    httpStatus;
+    constructor(message, code, httpStatus = 401) {
+        super(message);
+        this.name = 'OAuthError';
+        this.code = code;
+        this.httpStatus = httpStatus;
+        Object.setPrototypeOf(this, OAuthError.prototype);
+    }
+}
+/**
+ * Token missing from request
+ */
+export class TokenMissingError extends OAuthError {
+    constructor(message = 'No bearer token provided') {
+        super(message, 'TOKEN_MISSING', 401);
+        this.name = 'TokenMissingError';
+        Object.setPrototypeOf(this, TokenMissingError.prototype);
+    }
+}
+/**
+ * Token is invalid (malformed, wrong signature, etc.)
+ */
+export class InvalidTokenError extends OAuthError {
+    constructor(message = 'Invalid access token') {
+        super(message, 'INVALID_TOKEN', 401);
+        this.name = 'InvalidTokenError';
+        Object.setPrototypeOf(this, InvalidTokenError.prototype);
+    }
+}
+/**
+ * Token has expired
+ */
+export class TokenExpiredError extends OAuthError {
+    constructor(message = 'Access token has expired') {
+        super(message, 'TOKEN_EXPIRED', 401);
+        this.name = 'TokenExpiredError';
+        Object.setPrototypeOf(this, TokenExpiredError.prototype);
+    }
+}
+/**
+ * Token signature is invalid
+ */
+export class InvalidSignatureError extends OAuthError {
+    constructor(message = 'Invalid token signature') {
+        super(message, 'INVALID_SIGNATURE', 401);
+        this.name = 'InvalidSignatureError';
+        Object.setPrototypeOf(this, InvalidSignatureError.prototype);
+    }
+}
+/**
+ * Token lacks required scope
+ */
+export class InsufficientScopeError extends OAuthError {
+    requiredScopes;
+    constructor(requiredScopes, message) {
+        super(message ?? `Insufficient scope. Required: ${requiredScopes.join(', ')}`, 'INSUFFICIENT_SCOPE', 403);
+        this.name = 'InsufficientScopeError';
+        this.requiredScopes = requiredScopes;
+        Object.setPrototypeOf(this, InsufficientScopeError.prototype);
+    }
+}
+/**
+ * Authorization server discovery failed
+ */
+export class AuthServerDiscoveryError extends OAuthError {
+    constructor(message = 'Failed to discover authorization server metadata') {
+        super(message, 'DISCOVERY_FAILED', 500);
+        this.name = 'AuthServerDiscoveryError';
+        Object.setPrototypeOf(this, AuthServerDiscoveryError.prototype);
+    }
+}
+/**
+ * JWKS fetch failed
+ */
+export class JwksFetchError extends OAuthError {
+    constructor(message = 'Failed to fetch JWKS') {
+        super(message, 'JWKS_FETCH_FAILED', 500);
+        this.name = 'JwksFetchError';
+        Object.setPrototypeOf(this, JwksFetchError.prototype);
+    }
+}
+/**
+ * Client registration failed
+ */
+export class ClientRegistrationError extends OAuthError {
+    constructor(message = 'Client registration failed') {
+        super(message, 'REGISTRATION_FAILED', 400);
+        this.name = 'ClientRegistrationError';
+        Object.setPrototypeOf(this, ClientRegistrationError.prototype);
+    }
+}
+//# sourceMappingURL=errors.js.map