@ni-c/mcp-hub 0.9.2 → 0.10.0

package/dist/auth/cimd.js

@@ -0,0 +1,367 @@
+import { isPrivateAddress, resolvePublicAddress } from './address.js';
+import { guardedRequest } from './pinned-fetch.js';
+import { isSafeRedirectUri } from './redirect-uri.js';
+import { clampDisplayName, logSafe } from './text.js';
+// Lives in address.ts now — re-exported because it is part of this module's
+// established surface and the test suite reaches for it here.
+export { isPrivateAddress };
+/**
+ * OAuth Client ID Metadata Documents (CIMD,
+ * draft-ietf-oauth-client-id-metadata-document-00), the registration mechanism
+ * the MCP specification prefers over RFC 7591 dynamic registration.
+ *
+ * The client hosts its own metadata at a stable HTTPS URL and uses that URL as
+ * its client_id; the authorization server fetches and validates the document
+ * instead of handing out credentials. Nothing is persisted here — the document
+ * is the source of truth and is re-fetched when the cache entry expires, so a
+ * client that changes its redirect URIs does not need to re-register.
+ *
+ * Everything in this file runs against a URL an unauthenticated caller chose,
+ * so the fetch is treated as hostile: no redirects, no private addresses, the
+ * checked address pinned into the connection, a hard size cap and a short
+ * timeout.
+ */
+/** Draft §6.6 recommends 5 kB; anything larger is not a client metadata document. */
+const MAX_DOCUMENT_BYTES = 5 * 1024;
+/** A key set is legitimately larger than a metadata document, but not by much:
+ *  a handful of RSA keys is a couple of kilobytes. */
+const MAX_JWKS_BYTES = 64 * 1024;
+const FETCH_TIMEOUT_MS = 5_000;
+const MAX_CACHE_ENTRIES = 200;
+const MIN_TTL_MS = 60_000;
+const MAX_TTL_MS = 24 * 3600_000;
+const DEFAULT_TTL_MS = 3600_000;
+/** How long a rejected client_id is remembered, so a bad URL cannot be used to
+ *  make the hub hammer a third party once per authorization request. */
+const NEGATIVE_TTL_MS = 30_000;
+/**
+ * The per-URL negative cache alone does not bound how often one host can be
+ * fetched: the query string is part of the client_id, so `?n=1`, `?n=2` and so
+ * on are all distinct identifiers pointing at the same server. Failures are
+ * therefore also counted per origin.
+ */
+const MAX_ORIGIN_FAILURES = 10;
+const ORIGIN_FAILURE_WINDOW_MS = 30_000;
+const MAX_TRACKED_ORIGINS = 200;
+const ASSERTION_SAFE_METHODS = new Set(['none', 'private_key_jwt']);
+let fetchOverride;
+/**
+ * Tests serve their metadata documents from a stub here. Client IDs are https
+ * URLs by specification and stay that way — the stub is what lets the suite
+ * exercise the real fetch path without a certificate authority. Passing
+ * undefined restores the global fetch.
+ */
+export function setCimdFetch(fn) {
+    fetchOverride = fn;
+}
+/**
+ * Draft §4.1: the identifier must be an https URL with a path component, no
+ * fragment, no credentials and no dot-segments. A `client_id` that fails this
+ * is not a metadata document URL at all and is looked up as a locally
+ * registered client instead — which is what keeps DCR working beside CIMD.
+ */
+export function isClientIdMetadataUrl(clientId) {
+    let url;
+    try {
+        url = new URL(clientId);
+    }
+    catch {
+        return false;
+    }
+    if (url.protocol !== 'https:')
+        return false;
+    if (url.hash || url.username || url.password)
+        return false;
+    if (url.pathname === '' || url.pathname === '/')
+        return false;
+    // Dot segments are checked against the string the client sent, not the
+    // parsed URL: the URL parser resolves `/a/../b` away, and a percent-encoded
+    // `%2e%2e` survives parsing entirely while still traversing on the server
+    // that ultimately serves the document.
+    const rawPath = clientId.slice(url.origin.length).split(/[?#]/)[0];
+    return !rawPath.split('/').some(segment => /^(?:\.|%2e){1,2}$/i.test(segment));
+}
+export class CimdResolver {
+    options;
+    cache = new Map();
+    /** Collapses concurrent lookups of the same client_id into one fetch. */
+    inFlight = new Map();
+    /** Recent failures per origin, so distinct client_ids on one host cannot be
+     *  used to keep fetching it. */
+    originFailures = new Map();
+    allowedOrigins;
+    constructor(options = {}) {
+        this.options = options;
+        this.allowedOrigins = new Set(options.allowedOrigins ?? []);
+    }
+    /** Undefined for every rejection; the reason is logged, never returned to
+     *  the client, so an attacker cannot map out the admission policy. */
+    async resolve(clientId) {
+        const cached = this.cache.get(clientId);
+        if (cached && cached.expiresAt > Date.now()) {
+            // Refresh recency so the eviction below drops genuinely cold entries.
+            this.cache.delete(clientId);
+            this.cache.set(clientId, cached);
+            return cached.client;
+        }
+        const pending = this.inFlight.get(clientId);
+        if (pending)
+            return pending;
+        const promise = this.load(clientId).finally(() => this.inFlight.delete(clientId));
+        this.inFlight.set(clientId, promise);
+        return promise;
+    }
+    async load(clientId) {
+        try {
+            const url = new URL(clientId);
+            if (this.allowedOrigins.size > 0 && !this.allowedOrigins.has(url.origin)) {
+                return this.reject(clientId, `origin ${url.origin} is not in CIMD_ALLOWED_ORIGINS`);
+            }
+            if (this.originIsExhausted(url.origin)) {
+                // Counting this one too would keep extending the window for as long as
+                // the flood lasts, so the block could never lift.
+                return this.reject(clientId, `origin ${url.origin} failed too often recently`, false);
+            }
+            const pinned = await this.assertPublicHost(url.hostname);
+            const { document, ttl } = await this.fetchDocument(url, pinned);
+            const client = validateDocument(document, clientId);
+            this.remember(clientId, client, ttl);
+            console.log(`mcp-hub: fetched client metadata document ${logSafe(clientId)} (${logSafe(client.client_name ?? 'unnamed')})`);
+            return client;
+        }
+        catch (error) {
+            return this.reject(clientId, error.message);
+        }
+    }
+    reject(clientId, reason, countAgainstOrigin = true) {
+        console.warn(`mcp-hub: refused client metadata document ${logSafe(clientId)}: ${logSafe(reason)}`);
+        this.remember(clientId, undefined, NEGATIVE_TTL_MS);
+        if (countAgainstOrigin)
+            this.recordOriginFailure(clientId);
+        return undefined;
+    }
+    /** True once one origin has failed often enough that further lookups are
+     *  refused without a request until the window passes. */
+    originIsExhausted(origin) {
+        const entry = this.originFailures.get(origin);
+        if (!entry || entry.resetAt <= Date.now())
+            return false;
+        return entry.count >= MAX_ORIGIN_FAILURES;
+    }
+    recordOriginFailure(clientId) {
+        let origin;
+        try {
+            origin = new URL(clientId).origin;
+        }
+        catch {
+            return; // not a URL, so there is no origin to hold responsible
+        }
+        const now = Date.now();
+        const entry = this.originFailures.get(origin);
+        if (!entry || entry.resetAt <= now) {
+            this.originFailures.set(origin, { count: 1, resetAt: now + ORIGIN_FAILURE_WINDOW_MS });
+        }
+        else {
+            entry.count++;
+        }
+        if (this.originFailures.size > MAX_TRACKED_ORIGINS) {
+            for (const [key, value] of this.originFailures) {
+                if (value.resetAt <= now)
+                    this.originFailures.delete(key);
+            }
+            while (this.originFailures.size > MAX_TRACKED_ORIGINS) {
+                const oldest = this.originFailures.keys().next();
+                if (oldest.done)
+                    break;
+                this.originFailures.delete(oldest.value);
+            }
+        }
+    }
+    remember(clientId, client, ttl) {
+        this.cache.delete(clientId);
+        this.cache.set(clientId, { client, expiresAt: Date.now() + ttl });
+        // Insertion order is recency order because a hit re-inserts; the oldest
+        // key is therefore the least recently used one.
+        while (this.cache.size > MAX_CACHE_ENTRIES) {
+            const oldest = this.cache.keys().next();
+            if (oldest.done)
+                break;
+            this.cache.delete(oldest.value);
+        }
+    }
+    /**
+     * Draft §6.5: refuse every private or loopback address, so a client_id cannot
+     * be aimed at the hub's own network or a cloud metadata endpoint. Returns the
+     * address the connection is then pinned to.
+     */
+    assertPublicHost(hostname) {
+        return resolvePublicAddress(hostname, this.options.allowPrivateAddresses);
+    }
+    /**
+     * The same guarded GET the metadata fetch uses, for the one other outbound
+     * request a client_id can trigger: the jwks_uri of a private_key_jwt client.
+     * Shaped for jose's customFetch hook, which reads only the status and the
+     * JSON body.
+     */
+    safeFetch = async (input, init) => {
+        const url = new URL(input instanceof Request ? input.url : String(input));
+        if (url.protocol !== 'https:' && !this.options.allowPrivateAddresses)
+            throw new Error(`${url.origin} is not https`);
+        const pinned = await this.assertPublicHost(url.hostname);
+        return this.fetchCapped(url, pinned, MAX_JWKS_BYTES, headersFrom(init));
+    };
+    /**
+     * One GET, with every guard applied and the body capped before anyone gets
+     * to look at it. The cap is what makes this safe to hand to jose, which
+     * would otherwise buffer a key set of any size the client cares to send.
+     */
+    async fetchCapped(url, pinned, maxBytes, headers) {
+        const override = this.options.fetchImpl ?? fetchOverride;
+        if (!override && pinned) {
+            return guardedRequest(url, { pinnedAddress: pinned, headers, timeoutMs: FETCH_TIMEOUT_MS, maxBytes });
+        }
+        const response = await (override ?? fetch)(url, {
+            method: 'GET',
+            headers,
+            redirect: 'error',
+            signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
+        });
+        return capResponse(response, maxBytes);
+    }
+    async fetchDocument(url, pinned) {
+        const response = await this.fetchCapped(url, pinned, MAX_DOCUMENT_BYTES, { Accept: 'application/json' });
+        if (!response.ok)
+            throw new Error(`HTTP ${response.status}`);
+        const contentType = response.headers.get('content-type')?.split(';')[0].trim().toLowerCase() ?? '';
+        if (contentType !== 'application/json' && !contentType.endsWith('+json')) {
+            throw new Error(`content type ${contentType || 'missing'} is not JSON`);
+        }
+        let document;
+        try {
+            document = JSON.parse(await response.text());
+        }
+        catch {
+            throw new Error('body is not valid JSON');
+        }
+        return { document, ttl: cacheTtl(response.headers.get('cache-control')) };
+    }
+}
+/** Re-reads a response through the byte cap and hands back an equivalent one.
+ *  A failed status is passed straight through: nothing reads its body. */
+async function capResponse(response, limit) {
+    if (!response.ok)
+        return response;
+    const body = await readCapped(response, limit);
+    const headers = new Headers(response.headers);
+    // Both would now describe the original transfer rather than this body.
+    headers.delete('content-encoding');
+    headers.delete('content-length');
+    return new Response(body, { status: response.status, headers });
+}
+function headersFrom(init) {
+    const result = {};
+    const headers = init?.headers;
+    if (!headers)
+        return result;
+    if (headers instanceof Headers)
+        for (const [key, value] of headers)
+            result[key] = value;
+    else if (Array.isArray(headers))
+        for (const [key, value] of headers)
+            result[key] = value;
+    else
+        Object.assign(result, headers);
+    return result;
+}
+/** Reads at most `limit` bytes and refuses anything longer, without buffering
+ *  a response an attacker made arbitrarily large. */
+async function readCapped(response, limit) {
+    const declared = Number(response.headers.get('content-length'));
+    if (Number.isFinite(declared) && declared > limit)
+        throw new Error(`document exceeds ${limit} bytes`);
+    const reader = response.body?.getReader();
+    if (!reader)
+        throw new Error('response has no body');
+    const chunks = [];
+    let size = 0;
+    try {
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            size += value.byteLength;
+            if (size > limit)
+                throw new Error(`document exceeds ${limit} bytes`);
+            chunks.push(value);
+        }
+    }
+    finally {
+        await reader.cancel().catch(() => { });
+    }
+    return Buffer.concat(chunks).toString('utf8');
+}
+/** Draft §5: respect the client's cache headers, but never longer than a day
+ *  and never so short that every authorization request refetches. */
+function cacheTtl(cacheControl) {
+    if (cacheControl && /(^|,)\s*(no-store|no-cache)\s*(,|$)/i.test(cacheControl))
+        return MIN_TTL_MS;
+    const maxAge = cacheControl?.match(/(?:^|,)\s*max-age\s*=\s*(\d+)/i);
+    if (!maxAge)
+        return DEFAULT_TTL_MS;
+    return Math.min(MAX_TTL_MS, Math.max(MIN_TTL_MS, Number(maxAge[1]) * 1000));
+}
+/**
+ * Turns a fetched document into the client record the rest of the OAuth stack
+ * already understands. Throws with a reason for every rejection.
+ *
+ * No client_secret is ever produced: the SDK's client authentication middleware
+ * demands a secret exactly when the stored record has one, so a record without
+ * it is what makes a public client work — and the draft forbids symmetric
+ * secrets for CIMD clients outright.
+ */
+export function validateDocument(document, clientId) {
+    if (!document || typeof document !== 'object' || Array.isArray(document))
+        throw new Error('document is not a JSON object');
+    const metadata = document;
+    // Simple string comparison, per the draft: a document that could claim any
+    // identity would let one origin impersonate another.
+    if (metadata.client_id !== clientId)
+        throw new Error('client_id does not match the document URL');
+    // The name goes on the consent page, so it is held to what a name can be:
+    // one line, and short enough not to displace what sits below it.
+    const clientName = clampDisplayName(metadata.client_name);
+    if (clientName === undefined)
+        throw new Error('client_name is missing');
+    if ('client_secret' in metadata || 'client_secret_expires_at' in metadata) {
+        throw new Error('document carries a client_secret');
+    }
+    const authMethod = metadata.token_endpoint_auth_method;
+    if (authMethod !== undefined) {
+        if (typeof authMethod !== 'string' || !ASSERTION_SAFE_METHODS.has(authMethod)) {
+            throw new Error(`token_endpoint_auth_method ${String(authMethod)} needs a shared secret`);
+        }
+        if (authMethod === 'private_key_jwt' && !metadata.jwks_uri && !metadata.jwks) {
+            throw new Error('private_key_jwt without jwks or jwks_uri');
+        }
+    }
+    const redirectUris = metadata.redirect_uris;
+    if (!Array.isArray(redirectUris) || redirectUris.length === 0)
+        throw new Error('redirect_uris is missing or empty');
+    for (const uri of redirectUris) {
+        if (typeof uri !== 'string')
+            throw new Error('redirect_uris contains a non-string entry');
+        // Same rule the MCP specification states for every client: https, or a
+        // loopback address for native clients. A metadata document does not get
+        // the private-use schemes dynamic registration allows.
+        if (!isSafeRedirectUri(uri, { allowPrivateUseSchemes: false })) {
+            throw new Error(`redirect_uri ${uri} is neither https nor loopback`);
+        }
+    }
+    return {
+        ...metadata,
+        client_id: clientId,
+        client_name: clientName,
+        redirect_uris: redirectUris
+    };
+}
+//# sourceMappingURL=cimd.js.map

package/dist/auth/cimd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cimd.js","sourceRoot":"","sources":["../../src/auth/cimd.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEtD,4EAA4E;AAC5E,8DAA8D;AAC9D,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAE5B;;;;;;;;;;;;;;;GAeG;AAEH,qFAAqF;AACrF,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,CAAC;AACpC;sDACsD;AACtD,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,CAAC;AACjC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,UAAU,GAAG,MAAM,CAAC;AAC1B,MAAM,UAAU,GAAG,EAAE,GAAG,QAAQ,CAAC;AACjC,MAAM,cAAc,GAAG,QAAQ,CAAC;AAChC;wEACwE;AACxE,MAAM,eAAe,GAAG,MAAM,CAAC;AAC/B;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,wBAAwB,GAAG,MAAM,CAAC;AACxC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAgBpE,IAAI,aAAuC,CAAC;AAE5C;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,EAA4B;IACvD,aAAa,GAAG,EAAE,CAAC;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC3D,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAC9D,uEAAuE;IACvE,4EAA4E;IAC5E,0EAA0E;IAC1E,uCAAuC;IACvC,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,OAAO,YAAY;IASM,OAAO;IARnB,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IACvD,yEAAyE;IACxD,QAAQ,GAAG,IAAI,GAAG,EAA2D,CAAC;IAC/F;oCACgC;IACf,cAAc,GAAG,IAAI,GAAG,EAA8C,CAAC;IACvE,cAAc,CAAc;IAE7C,YAA6B,OAAO,GAAgB,EAAE;uBAAzB,OAAO;QAClC,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED;0EACsE;IACtE,KAAK,CAAC,OAAO,CAAC,QAAgB;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC5C,sEAAsE;YACtE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACjC,OAAO,MAAM,CAAC,MAAM,CAAC;QACvB,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACrC,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,QAAgB;QACjC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9B,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzE,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,GAAG,CAAC,MAAM,iCAAiC,CAAC,CAAC;YACtF,CAAC;YACD,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvC,uEAAuE;gBACvE,kDAAkD;gBAClD,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,GAAG,CAAC,MAAM,4BAA4B,EAAE,KAAK,CAAC,CAAC;YACxF,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACzD,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAChE,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACpD,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,6CAA6C,OAAO,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,WAAW,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC;YAC5H,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,QAAgB,EAAE,MAAc,EAAE,kBAAkB,GAAG,IAAI;QACxE,OAAO,CAAC,IAAI,CAAC,6CAA6C,OAAO,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;QACpD,IAAI,kBAAkB;YAAE,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC3D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;6DACyD;IACjD,iBAAiB,CAAC,MAAc;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,KAAK,CAAC;QACxD,OAAO,KAAK,CAAC,KAAK,IAAI,mBAAmB,CAAC;IAC5C,CAAC;IAEO,mBAAmB,CAAC,QAAgB;QAC1C,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,uDAAuD;QACjE,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC;YACnC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,wBAAwB,EAAE,CAAC,CAAC;QACzF,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,GAAG,mBAAmB,EAAE,CAAC;YACnD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC/C,IAAI,KAAK,CAAC,OAAO,IAAI,GAAG;oBAAE,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5D,CAAC;YACD,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,GAAG,mBAAmB,EAAE,CAAC;gBACtD,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;gBACjD,IAAI,MAAM,CAAC,IAAI;oBAAE,MAAM;gBACvB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,QAAgB,EAAE,MAA8C,EAAE,GAAW;QAC5F,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;QAClE,wEAAwE;QACxE,gDAAgD;QAChD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,iBAAiB,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;YACxC,IAAI,MAAM,CAAC,IAAI;gBAAE,MAAM;YACvB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,gBAAgB,CAAC,QAAgB;QACvC,OAAO,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC5E,CAAC;IAID;;;;;OAKG;IACM,SAAS,GAAiB,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACvD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1E,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,eAAe,CAAC,CAAC;QACpH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,cAAc,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,CAAC,CAAC;IAEF;;;;OAIG;IACK,KAAK,CAAC,WAAW,CACvB,GAAQ,EACR,MAA0B,EAC1B,QAAgB,EAChB,OAA+B;QAE/B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,aAAa,CAAC;QACzD,IAAI,CAAC,QAAQ,IAAI,MAAM,EAAE,CAAC;YACxB,OAAO,cAAc,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxG,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC,GAAG,EAAE;YAC9C,MAAM,EAAE,KAAK;YACb,OAAO;YACP,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC;SAC9C,CAAC,CAAC;QACH,OAAO,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,GAAQ,EAAE,MAA0B;QAC9D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACzG,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7D,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;QACnG,IAAI,WAAW,KAAK,kBAAkB,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,gBAAgB,WAAW,IAAI,SAAS,cAAc,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,QAAiB,CAAC;QACtB,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;IAC5E,CAAC;CACF;AAED;0EAC0E;AAC1E,KAAK,UAAU,WAAW,CAAC,QAAkB,EAAE,KAAa;IAC1D,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAClC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9C,uEAAuE;IACvE,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACnC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACjC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,WAAW,CAAC,IAA6B;IAChD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,CAAC;IAC9B,IAAI,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC;IAC5B,IAAI,OAAO,YAAY,OAAO;QAAE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;SACnF,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;;QACpF,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;qDACqD;AACrD,KAAK,UAAU,UAAU,CAAC,QAAkB,EAAE,KAAa;IACzD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,QAAQ,CAAC,CAAC;IACtG,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;IAC1C,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACrD,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;YACzB,IAAI,IAAI,GAAG,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,QAAQ,CAAC,CAAC;YACrE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED;qEACqE;AACrE,SAAS,QAAQ,CAAC,YAA2B;IAC3C,IAAI,YAAY,IAAI,sCAAsC,CAAC,IAAI,CAAC,YAAY,CAAC;QAAE,OAAO,UAAU,CAAC;IACjG,MAAM,MAAM,GAAG,YAAY,EAAE,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACrE,IAAI,CAAC,MAAM;QAAE,OAAO,cAAc,CAAC;IACnC,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAiB,EAAE,QAAgB;IAClE,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC3H,MAAM,QAAQ,GAAG,QAAmC,CAAC;IACrD,2EAA2E;IAC3E,qDAAqD;IACrD,IAAI,QAAQ,CAAC,SAAS,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAClG,0EAA0E;IAC1E,iEAAiE;IACjE,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1D,IAAI,UAAU,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACxE,IAAI,eAAe,IAAI,QAAQ,IAAI,0BAA0B,IAAI,QAAQ,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,CAAC,0BAA0B,CAAC;IACvD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,UAAU,KAAK,iBAAiB,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC7E,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IACD,MAAM,YAAY,GAAG,QAAQ,CAAC,aAAa,CAAC;IAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACpH,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC1F,uEAAuE;QACvE,wEAAwE;QACxE,uDAAuD;QACvD,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,EAAE,sBAAsB,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,gCAAgC,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IACD,OAAO;QACL,GAAI,QAAoC;QACxC,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,UAAU;QACvB,aAAa,EAAE,YAAwB;KACV,CAAC;AAClC,CAAC"}

package/dist/auth/consent-page.js

@@ -1,18 +1,15 @@
-import { escapeHtml, renderPage } from './page.js';
+import { escapeHtml, renderPage, renderIdentity } from './page.js';
 /**
  * Shown when a signed-in user is asked to authorize a client they have not
  * confirmed before. This is the only thing standing between a live session
  * cookie and a code, so it must never be submitted on the user's behalf:
  * the CSRF token ties the form to their session.
  */
-export function renderConsentPage(requestToken, csrfToken, redirectUri, clientName, resource) {
+export function renderConsentPage(requestToken, csrfToken, redirectUri, identity = {}) {
     return renderPage('mcp-hub authorization', `<form method="post" action="consent">
   <h1>Authorize access?</h1>
-  <p>${clientName ? `<strong>${escapeHtml(clientName)}</strong> is asking` : 'An application is asking'} for access.</p>
-  <p class="label">Requested access</p>
-  <code class="target">${escapeHtml(resource ?? 'Every server on this hub')}</code>
-  <p class="label">Codes will be sent to</p>
-  <code class="target">${escapeHtml(redirectUri)}</code>
+  <p>${identity.clientName ? `<strong>${escapeHtml(identity.clientName)}</strong> is asking` : 'An application is asking'} for access.</p>
+${renderIdentity(redirectUri, identity)}
   <p>Only continue if you started this yourself. The name above is chosen by the application; the address is not.</p>
   <input type="hidden" name="request" value="${escapeHtml(requestToken)}">
   <input type="hidden" name="csrf" value="${escapeHtml(csrfToken)}">

package/dist/auth/consent-page.js.map

@@ -1 +1 @@
-{"version":3,"file":"consent-page.js","sourceRoot":"","sources":["../../src/auth/consent-page.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,YAAoB,EAAE,SAAiB,EAAE,WAAmB,EAAE,UAAmB,EAAE,QAAiB;IACpI,OAAO,UAAU,CACf,uBAAuB,EACvB;;OAEG,UAAU,CAAC,CAAC,CAAC,WAAW,UAAU,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC,CAAC,0BAA0B;;yBAE9E,UAAU,CAAC,QAAQ,IAAI,0BAA0B,CAAC;;yBAElD,UAAU,CAAC,WAAW,CAAC;;+CAED,UAAU,CAAC,YAAY,CAAC;4CAC3B,UAAU,CAAC,SAAS,CAAC;;;QAGzD,CACL,CAAC;AACJ,CAAC"}
+{"version":3,"file":"consent-page.js","sourceRoot":"","sources":["../../src/auth/consent-page.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAGnE;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,YAAoB,EAAE,SAAiB,EAAE,WAAmB,EAAE,QAAQ,GAAmB,EAAE;IAC3H,OAAO,UAAU,CACf,uBAAuB,EACvB;;OAEG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC,CAAC,0BAA0B;EACvH,cAAc,CAAC,WAAW,EAAE,QAAQ,CAAC;;+CAEQ,UAAU,CAAC,YAAY,CAAC;4CAC3B,UAAU,CAAC,SAAS,CAAC;;;QAGzD,CACL,CAAC;AACJ,CAAC"}

package/dist/auth/login-page.js

@@ -1,17 +1,14 @@
-import { escapeHtml, renderPage } from './page.js';
+import { escapeHtml, renderPage, renderIdentity } from './page.js';
 /**
  * Entering the password here is what approves the client, so the page names
  * both the client and where its codes would be sent — the client name is
  * self-declared at registration and anyone can register, the URL cannot lie.
  */
-export function renderLoginPage(requestToken, redirectUri, clientName, errorMessage, resource) {
+export function renderLoginPage(requestToken, redirectUri, identity = {}, errorMessage) {
     return renderPage('mcp-hub login', `<form method="post" action="login">
   <h1>mcp-hub</h1>
-  <p>${clientName ? `Authorize <strong>${escapeHtml(clientName)}</strong>` : 'Authorization required'}</p>
-  <p class="label">Requested access</p>
-  <code class="target">${escapeHtml(resource ?? 'Every server on this hub')}</code>
-  <p class="label">Codes will be sent to</p>
-  <code class="target">${escapeHtml(redirectUri)}</code>
+  <p>${identity.clientName ? `Authorize <strong>${escapeHtml(identity.clientName)}</strong>` : 'Authorization required'}</p>
+${renderIdentity(redirectUri, identity)}
   <input type="password" name="password" placeholder="Password" autofocus required autocomplete="current-password">
   <input type="hidden" name="request" value="${escapeHtml(requestToken)}">
   ${errorMessage ? `<p class="error">${escapeHtml(errorMessage)}</p>` : ''}

package/dist/auth/login-page.js.map

@@ -1 +1 @@
-{"version":3,"file":"login-page.js","sourceRoot":"","sources":["../../src/auth/login-page.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEnD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,YAAoB,EAAE,WAAmB,EAAE,UAAmB,EAAE,YAAqB,EAAE,QAAiB;IACtI,OAAO,UAAU,CACf,eAAe,EACf;;OAEG,UAAU,CAAC,CAAC,CAAC,qBAAqB,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,wBAAwB;;yBAE5E,UAAU,CAAC,QAAQ,IAAI,0BAA0B,CAAC;;yBAElD,UAAU,CAAC,WAAW,CAAC;;+CAED,UAAU,CAAC,YAAY,CAAC;IACnE,YAAY,CAAC,CAAC,CAAC,oBAAoB,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;;QAElE,CACL,CAAC;AACJ,CAAC"}
+{"version":3,"file":"login-page.js","sourceRoot":"","sources":["../../src/auth/login-page.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAGnE;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,YAAoB,EAAE,WAAmB,EAAE,QAAQ,GAAmB,EAAE,EAAE,YAAqB;IAC7H,OAAO,UAAU,CACf,eAAe,EACf;;OAEG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,qBAAqB,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,wBAAwB;EACrH,cAAc,CAAC,WAAW,EAAE,QAAQ,CAAC;;+CAEQ,UAAU,CAAC,YAAY,CAAC;IACnE,YAAY,CAAC,CAAC,CAAC,oBAAoB,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;;QAElE,CACL,CAAC;AACJ,CAAC"}

package/dist/auth/page.js

@@ -1,6 +1,28 @@
 export function escapeHtml(value) {
     return value.replace(/[&<>"']/g, c => `&#${c.charCodeAt(0)};`);
 }
+/**
+ * The block both pages share: what access is requested, where codes would go
+ * and — for a Client ID Metadata Document client — the URL that vouches for
+ * the name above it. The document URL is the one part of a CIMD client's
+ * identity that cannot be invented, which is why the specification asks for it
+ * to be shown; a client whose redirect URIs are all local cannot be attributed
+ * to anything at all, so that gets said outright.
+ */
+export function renderIdentity(redirectUri, identity) {
+    const lines = [
+        '  <p class="label">Requested access</p>',
+        `  <code class="target">${escapeHtml(identity.resource ?? 'Every server on this hub')}</code>`
+    ];
+    if (identity.clientId) {
+        lines.push('  <p class="label">Identified by</p>', `  <code class="target">${escapeHtml(identity.clientId)}</code>`);
+    }
+    lines.push('  <p class="label">Codes will be sent to</p>', `  <code class="target">${escapeHtml(redirectUri)}</code>`);
+    if (identity.loopbackOnly) {
+        lines.push('  <p class="error">This client only accepts codes on this machine, so any program running here could be the one asking.</p>');
+    }
+    return lines.join('\n');
+}
 /** Shared chrome for the two interactive pages, login and consent. */
 export function renderPage(title, body) {
     return `<!doctype html>

package/dist/auth/page.js.map

@@ -1 +1 @@
-{"version":3,"file":"page.js","sourceRoot":"","sources":["../../src/auth/page.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACjE,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,UAAU,CAAC,KAAa,EAAE,IAAY;IACpD,OAAO;;;;;;SAMA,UAAU,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;EAexB,IAAI;;QAEE,CAAC;AACT,CAAC"}
+{"version":3,"file":"page.js","sourceRoot":"","sources":["../../src/auth/page.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACjE,CAAC;AAaD;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,WAAmB,EAAE,QAAwB;IAC1E,MAAM,KAAK,GAAG;QACZ,yCAAyC;QACzC,0BAA0B,UAAU,CAAC,QAAQ,CAAC,QAAQ,IAAI,0BAA0B,CAAC,SAAS;KAC/F,CAAC;IACF,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,sCAAsC,EAAE,0BAA0B,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACvH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,8CAA8C,EAAE,0BAA0B,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IACvH,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,6HAA6H,CAAC,CAAC;IAC5I,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,UAAU,CAAC,KAAa,EAAE,IAAY;IACpD,OAAO;;;;;;SAMA,UAAU,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;EAexB,IAAI;;QAEE,CAAC;AACT,CAAC"}

package/dist/auth/pinned-fetch.js

@@ -0,0 +1,129 @@
+import http from 'node:http';
+import https from 'node:https';
+import net from 'node:net';
+/**
+ * An HTTPS request that connects to an address someone already vetted.
+ *
+ * Checking a hostname and then handing it to `fetch` leaves a gap: the check
+ * resolves the name once, `fetch` resolves it again, and a DNS zone the caller
+ * controls can answer differently the second time. A short TTL alternating
+ * between a public address and `169.254.169.254` wins that race reliably. The
+ * only way to close it is to stop resolving twice — so the vetted address is
+ * pinned into the connection here, while the hostname is still what TLS
+ * validates the certificate against.
+ *
+ * Deliberately `node:https` rather than a custom `fetch` dispatcher: undici is
+ * not a dependency of this project, and its `Agent` would be the only reason
+ * to add one.
+ */
+/** Answers every lookup with the one address that was already checked. */
+export function pinnedLookup(address) {
+    const family = net.isIP(address);
+    return ((hostname, options, callback) => {
+        const done = (typeof options === 'function' ? options : callback);
+        const wantsAll = typeof options === 'object' && options !== null && options.all === true;
+        if (wantsAll)
+            done(null, [{ address, family }]);
+        else
+            done(null, address, family);
+    });
+}
+export async function guardedRequest(url, options) {
+    // Only https reaches this in production — the caller rejects anything else
+    // before resolving. Plain http is here so the transport can be exercised
+    // without a certificate authority, and for the local-development escape hatch.
+    const transport = url.protocol === 'http:' ? http : https;
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        // Declared up here because finish() may run before the timer below is
+        // assigned — an immediate connection error would otherwise hit the
+        // temporal dead zone instead of rejecting.
+        let deadline;
+        const finish = (error, response) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(deadline);
+            if (error)
+                reject(error);
+            else
+                resolve(response);
+        };
+        const request = transport.request({
+            hostname: url.hostname.replace(/^\[|\]$/g, ''),
+            port: url.port || (url.protocol === 'http:' ? 80 : 443),
+            path: `${url.pathname}${url.search}`,
+            method: options.method ?? 'GET',
+            // No compression: this path decodes nothing, and a compressed body
+            // would make the byte cap below measure the wrong thing.
+            headers: {
+                ...options.headers,
+                host: url.host,
+                'accept-encoding': 'identity',
+                ...(options.body !== undefined ? { 'content-length': String(Buffer.byteLength(options.body)) } : {})
+            },
+            lookup: pinnedLookup(options.pinnedAddress)
+        }, response => {
+            const status = response.statusCode ?? 0;
+            // The caller asked for no redirects; a hop would be resolved and
+            // connected without going through the address check again.
+            if (status >= 300 && status < 400) {
+                response.destroy();
+                request.destroy();
+                finish(new Error(`refused to follow a redirect (HTTP ${status})`));
+                return;
+            }
+            const declared = Number(response.headers['content-length']);
+            if (Number.isFinite(declared) && declared > options.maxBytes) {
+                response.destroy();
+                request.destroy();
+                finish(new Error(`response exceeds ${options.maxBytes} bytes`));
+                return;
+            }
+            const chunks = [];
+            let size = 0;
+            response.on('data', (chunk) => {
+                size += chunk.byteLength;
+                if (size > options.maxBytes) {
+                    response.destroy();
+                    request.destroy();
+                    finish(new Error(`response exceeds ${options.maxBytes} bytes`));
+                    return;
+                }
+                chunks.push(chunk);
+            });
+            response.on('error', error => finish(error));
+            response.on('end', () => {
+                if (settled)
+                    return;
+                const headers = new Headers();
+                for (const [key, value] of Object.entries(response.headers)) {
+                    if (value === undefined)
+                        continue;
+                    try {
+                        if (Array.isArray(value))
+                            for (const entry of value)
+                                headers.append(key, entry);
+                        else
+                            headers.set(key, value);
+                    }
+                    catch {
+                        // A header the Fetch API will not represent is not one this
+                        // caller reads; dropping it beats failing the whole request.
+                    }
+                }
+                // A zero-length body has to be null: Response refuses an empty
+                // buffer for the statuses that may not carry one.
+                finish(undefined, new Response(chunks.length > 0 ? Buffer.concat(chunks) : null, { status, headers }));
+            });
+        });
+        // Bounds the whole exchange, not just socket inactivity — a body trickled
+        // a byte at a time would otherwise keep the request alive indefinitely.
+        deadline = setTimeout(() => {
+            request.destroy(new Error(`timed out after ${options.timeoutMs}ms`));
+        }, options.timeoutMs);
+        request.on('error', error => finish(error));
+        request.end(options.body);
+    });
+}
+//# sourceMappingURL=pinned-fetch.js.map

package/dist/auth/pinned-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pinned-fetch.js","sourceRoot":"","sources":["../../src/auth/pinned-fetch.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,GAAG,MAAM,UAAU,CAAC;AAG3B;;;;;;;;;;;;;;GAcG;AAEH,0EAA0E;AAC1E,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,OAAO,CAAC,CAAC,QAAgB,EAAE,OAAgB,EAAE,QAAiB,EAAE,EAAE;QAChE,MAAM,IAAI,GAAG,CAAC,OAAO,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAIvD,CAAC;QACV,MAAM,QAAQ,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAK,OAA6B,CAAC,GAAG,KAAK,IAAI,CAAC;QAChH,IAAI,QAAQ;YAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;;YAC3C,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC,CAA8B,CAAC;AAClC,CAAC;AAaD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAQ,EAAE,OAA8B;IAC3E,2EAA2E;IAC3E,yEAAyE;IACzE,+EAA+E;IAC/E,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1D,OAAO,IAAI,OAAO,CAAW,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC/C,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,sEAAsE;QACtE,mEAAmE;QACnE,2CAA2C;QAC3C,IAAI,QAAmD,CAAC;QACxD,MAAM,MAAM,GAAG,CAAC,KAAwB,EAAE,QAAmB,EAAQ,EAAE;YACrE,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,QAAQ,CAAC,CAAC;YACvB,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;gBACpB,OAAO,CAAC,QAAS,CAAC,CAAC;QAC1B,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAC/B;YACE,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;YAC9C,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;YACvD,IAAI,EAAE,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE;YACpC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;YAC/B,mEAAmE;YACnE,yDAAyD;YACzD,OAAO,EAAE;gBACP,GAAG,OAAO,CAAC,OAAO;gBAClB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,iBAAiB,EAAE,UAAU;gBAC7B,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrG;YACD,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC;SAC5C,EACD,QAAQ,CAAC,EAAE;YACT,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC;YACxC,iEAAiE;YACjE,2DAA2D;YAC3D,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;gBAClC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACnB,OAAO,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,CAAC,IAAI,KAAK,CAAC,sCAAsC,MAAM,GAAG,CAAC,CAAC,CAAC;gBACnE,OAAO;YACT,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAC5D,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAC7D,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACnB,OAAO,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,OAAO,CAAC,QAAQ,QAAQ,CAAC,CAAC,CAAC;gBAChE,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACpC,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;gBACzB,IAAI,IAAI,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;oBAC5B,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACnB,OAAO,CAAC,OAAO,EAAE,CAAC;oBAClB,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,OAAO,CAAC,QAAQ,QAAQ,CAAC,CAAC,CAAC;oBAChE,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7C,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACtB,IAAI,OAAO;oBAAE,OAAO;gBACpB,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC5D,IAAI,KAAK,KAAK,SAAS;wBAAE,SAAS;oBAClC,IAAI,CAAC;wBACH,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;4BAAE,KAAK,MAAM,KAAK,IAAI,KAAK;gCAAE,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;;4BAC3E,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;oBAC/B,CAAC;oBAAC,MAAM,CAAC;wBACP,4DAA4D;wBAC5D,6DAA6D;oBAC/D,CAAC;gBACH,CAAC;gBACD,+DAA+D;gBAC/D,kDAAkD;gBAClD,MAAM,CAAC,SAAS,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YACzG,CAAC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QAEF,0EAA0E;QAC1E,wEAAwE;QACxE,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;YACzB,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,mBAAmB,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;QACvE,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAEtB,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC"}