@nimrobo/mcporter-remote 0.1.0

package/dist/oauth-persistence.js

@@ -0,0 +1,254 @@
+import fs from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { readJsonFile, writeJsonFile } from './fs-json.js';
+import { clearVaultEntry, loadVaultEntry, saveVaultEntry } from './oauth-vault.js';
+class DirectoryPersistence {
+    root;
+    logger;
+    tokenPath;
+    clientInfoPath;
+    codeVerifierPath;
+    statePath;
+    constructor(root, logger) {
+        this.root = root;
+        this.logger = logger;
+        this.tokenPath = path.join(root, 'tokens.json');
+        this.clientInfoPath = path.join(root, 'client.json');
+        this.codeVerifierPath = path.join(root, 'code_verifier.txt');
+        this.statePath = path.join(root, 'state.txt');
+    }
+    describe() {
+        return this.root;
+    }
+    async ensureDir() {
+        await fs.mkdir(this.root, { recursive: true });
+    }
+    async readTokens() {
+        return readJsonFile(this.tokenPath);
+    }
+    async saveTokens(tokens) {
+        await this.ensureDir();
+        await writeJsonFile(this.tokenPath, tokens);
+        this.logger?.debug?.(`Saved tokens to ${this.tokenPath}`);
+    }
+    async readClientInfo() {
+        return readJsonFile(this.clientInfoPath);
+    }
+    async saveClientInfo(info) {
+        await this.ensureDir();
+        await writeJsonFile(this.clientInfoPath, info);
+    }
+    async readCodeVerifier() {
+        try {
+            return (await fs.readFile(this.codeVerifierPath, 'utf8')).trim();
+        }
+        catch (error) {
+            if (error.code === 'ENOENT') {
+                return undefined;
+            }
+            throw error;
+        }
+    }
+    async saveCodeVerifier(value) {
+        await this.ensureDir();
+        await fs.writeFile(this.codeVerifierPath, value, 'utf8');
+    }
+    async readState() {
+        return readJsonFile(this.statePath);
+    }
+    async saveState(value) {
+        await this.ensureDir();
+        await writeJsonFile(this.statePath, value);
+    }
+    async clear(scope) {
+        const files = [];
+        if (scope === 'all' || scope === 'tokens') {
+            files.push(this.tokenPath);
+        }
+        if (scope === 'all' || scope === 'client') {
+            files.push(this.clientInfoPath);
+        }
+        if (scope === 'all' || scope === 'verifier') {
+            files.push(this.codeVerifierPath);
+        }
+        if (scope === 'all' || scope === 'state') {
+            files.push(this.statePath);
+        }
+        await Promise.all(files.map(async (file) => {
+            try {
+                await fs.unlink(file);
+            }
+            catch (error) {
+                if (error.code !== 'ENOENT') {
+                    throw error;
+                }
+            }
+        }));
+    }
+}
+class VaultPersistence {
+    definition;
+    constructor(definition) {
+        this.definition = definition;
+    }
+    describe() {
+        return '~/.mcporter/credentials.json (vault)';
+    }
+    async readTokens() {
+        return (await loadVaultEntry(this.definition))?.tokens;
+    }
+    async saveTokens(tokens) {
+        await saveVaultEntry(this.definition, { tokens });
+    }
+    async readClientInfo() {
+        return (await loadVaultEntry(this.definition))?.clientInfo;
+    }
+    async saveClientInfo(info) {
+        await saveVaultEntry(this.definition, { clientInfo: info });
+    }
+    async readCodeVerifier() {
+        return (await loadVaultEntry(this.definition))?.codeVerifier;
+    }
+    async saveCodeVerifier(value) {
+        await saveVaultEntry(this.definition, { codeVerifier: value });
+    }
+    async readState() {
+        return (await loadVaultEntry(this.definition))?.state;
+    }
+    async saveState(value) {
+        await saveVaultEntry(this.definition, { state: value });
+    }
+    async clear(scope) {
+        await clearVaultEntry(this.definition, scope);
+    }
+}
+class CompositePersistence {
+    stores;
+    constructor(stores) {
+        this.stores = stores;
+    }
+    describe() {
+        return this.stores.map((store) => store.describe()).join(' + ');
+    }
+    async readTokens() {
+        for (const store of this.stores) {
+            const result = await store.readTokens();
+            if (result) {
+                return result;
+            }
+        }
+        return undefined;
+    }
+    async saveTokens(tokens) {
+        await Promise.all(this.stores.map((store) => store.saveTokens(tokens)));
+    }
+    async readClientInfo() {
+        for (const store of this.stores) {
+            const result = await store.readClientInfo();
+            if (result) {
+                return result;
+            }
+        }
+        return undefined;
+    }
+    async saveClientInfo(info) {
+        await Promise.all(this.stores.map((store) => store.saveClientInfo(info)));
+    }
+    async readCodeVerifier() {
+        for (const store of this.stores) {
+            const result = await store.readCodeVerifier();
+            if (result) {
+                return result;
+            }
+        }
+        return undefined;
+    }
+    async saveCodeVerifier(value) {
+        await Promise.all(this.stores.map((store) => store.saveCodeVerifier(value)));
+    }
+    async readState() {
+        for (const store of this.stores) {
+            const result = await store.readState();
+            if (result) {
+                return result;
+            }
+        }
+        return undefined;
+    }
+    async saveState(value) {
+        await Promise.all(this.stores.map((store) => store.saveState(value)));
+    }
+    async clear(scope) {
+        await Promise.all(this.stores.map((store) => store.clear(scope)));
+    }
+}
+export async function buildOAuthPersistence(definition, logger) {
+    const vault = new VaultPersistence(definition);
+    const stores = [vault];
+    if (definition.tokenCacheDir) {
+        stores.unshift(new DirectoryPersistence(definition.tokenCacheDir, logger));
+    }
+    // Migrate legacy default per-server cache (~/.mcporter/<name>) into the vault if present.
+    const legacyDir = path.join(os.homedir(), '.mcporter', definition.name);
+    if (!definition.tokenCacheDir && legacyDir) {
+        const legacy = new DirectoryPersistence(legacyDir, logger);
+        const legacyTokens = await legacy.readTokens();
+        const legacyClient = await legacy.readClientInfo();
+        const legacyVerifier = await legacy.readCodeVerifier();
+        const legacyState = await legacy.readState();
+        if (legacyTokens || legacyClient || legacyVerifier || legacyState) {
+            if (legacyTokens) {
+                await vault.saveTokens(legacyTokens);
+            }
+            if (legacyClient) {
+                await vault.saveClientInfo(legacyClient);
+            }
+            if (legacyVerifier) {
+                await vault.saveCodeVerifier(legacyVerifier);
+            }
+            if (legacyState) {
+                await vault.saveState(legacyState);
+            }
+            logger?.info?.(`Migrated legacy OAuth cache for '${definition.name}' into vault.`);
+        }
+    }
+    return stores.length === 1 ? vault : new CompositePersistence(stores);
+}
+export async function clearOAuthCaches(definition, logger, scope = 'all') {
+    const persistence = await buildOAuthPersistence(definition, logger);
+    await persistence.clear(scope);
+    const legacyDir = path.join(os.homedir(), '.mcporter', definition.name);
+    if (legacyDir && (!definition.tokenCacheDir || legacyDir !== definition.tokenCacheDir)) {
+        const legacy = new DirectoryPersistence(legacyDir, logger);
+        await legacy.clear(scope);
+    }
+    if (definition.tokenCacheDir) {
+        await fs.rm(definition.tokenCacheDir, { recursive: true, force: true });
+    }
+    // Known provider-specific legacy paths (gmail server writes to ~/.gmail-mcp/credentials.json).
+    const legacyFiles = [];
+    if (definition.name.toLowerCase() === 'gmail') {
+        legacyFiles.push(path.join(os.homedir(), '.gmail-mcp', 'credentials.json'));
+    }
+    await Promise.all(legacyFiles.map(async (file) => {
+        try {
+            await fs.unlink(file);
+            logger?.info?.(`Cleared legacy OAuth cache file ${file}`);
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT') {
+                throw error;
+            }
+        }
+    }));
+}
+export async function readCachedAccessToken(definition, logger) {
+    const persistence = await buildOAuthPersistence(definition, logger);
+    const tokens = await persistence.readTokens();
+    if (tokens && typeof tokens.access_token === 'string' && tokens.access_token.trim().length > 0) {
+        return tokens.access_token;
+    }
+    return undefined;
+}
+//# sourceMappingURL=oauth-persistence.js.map

package/dist/oauth-persistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-persistence.js","sourceRoot":"","sources":["../src/oauth-persistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE3D,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAiBnF,MAAM,oBAAoB;IAOL;IACA;IAPF,SAAS,CAAS;IAClB,cAAc,CAAS;IACvB,gBAAgB,CAAS;IACzB,SAAS,CAAS;IAEnC,YACmB,IAAY,EACZ,MAAe;QADf,SAAI,GAAJ,IAAI,CAAQ;QACZ,WAAM,GAAN,MAAM,CAAS;QAEhC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAChD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACrD,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAChD,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,UAAU;QACd,OAAO,YAAY,CAAc,IAAI,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAmB;QAClC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,mBAAmB,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,OAAO,YAAY,CAA8B,IAAI,CAAC,cAAc,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAiC;QACpD,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,aAAa,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAAa;QAClC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,SAAS;QACb,OAAO,YAAY,CAAS,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAa;QAC3B,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAsB;QAChC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YAC5C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YACvB,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACvD,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;CACF;AAED,MAAM,gBAAgB;IACS;IAA7B,YAA6B,UAA4B;QAA5B,eAAU,GAAV,UAAU,CAAkB;IAAG,CAAC;IAE7D,QAAQ;QACN,OAAO,sCAAsC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,UAAU;QACd,OAAO,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAmB;QAClC,MAAM,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,OAAO,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAiC;QACpD,MAAM,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,OAAO,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,YAAY,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAAa;QAClC,MAAM,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,SAAS;QACb,OAAO,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAa;QAC3B,MAAM,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAsB;QAChC,MAAM,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAChD,CAAC;CACF;AAED,MAAM,oBAAoB;IACK;IAA7B,YAA6B,MAA0B;QAA1B,WAAM,GAAN,MAAM,CAAoB;IAAG,CAAC;IAE3D,QAAQ;QACN,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,UAAU;QACd,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;YACxC,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAmB;QAClC,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE,CAAC;YAC5C,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAiC;QACpD,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,gBAAgB,EAAE,CAAC;YAC9C,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAAa;QAClC,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,SAAS;QACb,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;YACvC,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAa;QAC3B,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAsB;QAChC,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,UAA4B,EAAE,MAAe;IACvF,MAAM,KAAK,GAAG,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAuB,CAAC,KAAK,CAAC,CAAC;IAE3C,IAAI,UAAU,CAAC,aAAa,EAAE,CAAC;QAC7B,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,CAAC,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,0FAA0F;IAC1F,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IACxE,IAAI,CAAC,UAAU,CAAC,aAAa,IAAI,SAAS,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;QAC/C,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC;QACnD,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,gBAAgB,EAAE,CAAC;QACvD,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;QAC7C,IAAI,YAAY,IAAI,YAAY,IAAI,cAAc,IAAI,WAAW,EAAE,CAAC;YAClE,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YACvC,CAAC;YACD,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,KAAK,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;YAC3C,CAAC;YACD,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,KAAK,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;YAC/C,CAAC;YACD,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YACrC,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,CAAC,oCAAoC,UAAU,CAAC,IAAI,eAAe,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAA4B,EAC5B,MAAe,EACf,QAAyB,KAAK;IAE9B,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACpE,MAAM,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAE/B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IACxE,IAAI,SAAS,IAAI,CAAC,CAAC,UAAU,CAAC,aAAa,IAAI,SAAS,KAAK,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACvF,MAAM,MAAM,GAAG,IAAI,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3D,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED,IAAI,UAAU,CAAC,aAAa,EAAE,CAAC;QAC7B,MAAM,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,+FAA+F;IAC/F,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,OAAO,EAAE,CAAC;QAC9C,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,OAAO,CAAC,GAAG,CACf,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QAC7B,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACtB,MAAM,EAAE,IAAI,EAAE,CAAC,mCAAmC,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAA4B,EAC5B,MAAe;IAEf,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,UAAU,EAAE,CAAC;IAC9C,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/F,OAAO,MAAM,CAAC,YAAY,CAAC;IAC7B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/oauth-vault.d.ts

@@ -0,0 +1,19 @@
+import type { OAuthClientInformationMixed, OAuthTokens } from '@modelcontextprotocol/sdk/shared/auth.js';
+import type { ServerDefinition } from './config.js';
+type VaultKey = string;
+export interface VaultEntry {
+    serverName: string;
+    serverUrl?: string;
+    tokens?: OAuthTokens;
+    clientInfo?: OAuthClientInformationMixed;
+    codeVerifier?: string;
+    state?: string;
+    updatedAt: string;
+}
+export declare function vaultKeyForDefinition(definition: ServerDefinition): VaultKey;
+export declare function loadVaultEntry(definition: ServerDefinition): Promise<VaultEntry | undefined>;
+export declare function saveVaultEntry(definition: ServerDefinition, patch: Partial<VaultEntry>): Promise<void>;
+export declare function findServerNameByState(state: string): Promise<VaultEntry | undefined>;
+export declare function clearVaultEntry(definition: ServerDefinition, scope: 'all' | 'tokens' | 'client' | 'verifier' | 'state'): Promise<void>;
+export {};
+//# sourceMappingURL=oauth-vault.d.ts.map

package/dist/oauth-vault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-vault.d.ts","sourceRoot":"","sources":["../src/oauth-vault.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,2BAA2B,EAAE,WAAW,EAAE,MAAM,0CAA0C,CAAC;AACzG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAKpD,KAAK,QAAQ,GAAG,MAAM,CAAC;AAEvB,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,UAAU,CAAC,EAAE,2BAA2B,CAAC;IACzC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAiCD,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,gBAAgB,GAAG,QAAQ,CAW5E;AAED,wBAAsB,cAAc,CAAC,UAAU,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAGlG;AAED,wBAAsB,cAAc,CAAC,UAAU,EAAE,gBAAgB,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAc5G;AAED,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAQ1F;AAED,wBAAsB,eAAe,CACnC,UAAU,EAAE,gBAAgB,EAC5B,KAAK,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,GACxD,OAAO,CAAC,IAAI,CAAC,CA2Bf"}

package/dist/oauth-vault.js

@@ -0,0 +1,100 @@
+import crypto from 'node:crypto';
+import fs from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { readJsonFile, writeJsonFile } from './fs-json.js';
+const VAULT_PATH = path.join(os.homedir(), '.mcporter', 'credentials.json');
+async function readVault() {
+    let shouldRewrite = false;
+    try {
+        const existing = await readJsonFile(VAULT_PATH);
+        if (existing && existing.version === 1 && existing.entries && typeof existing.entries === 'object') {
+            return existing;
+        }
+        // Unexpected shape; rewrite.
+        shouldRewrite = true;
+    }
+    catch {
+        // Corrupt or unreadable vault; reset to empty.
+        shouldRewrite = true;
+    }
+    const empty = { version: 1, entries: {} };
+    if (shouldRewrite) {
+        await writeVault(empty);
+    }
+    return empty;
+}
+async function writeVault(contents) {
+    const dir = path.dirname(VAULT_PATH);
+    await fs.mkdir(dir, { recursive: true });
+    await writeJsonFile(VAULT_PATH, contents);
+}
+export function vaultKeyForDefinition(definition) {
+    const descriptor = {
+        name: definition.name,
+        url: definition.command.kind === 'http' ? definition.command.url.toString() : null,
+        command: definition.command.kind === 'stdio'
+            ? { command: definition.command.command, args: definition.command.args ?? [] }
+            : null,
+    };
+    const hash = crypto.createHash('sha256').update(JSON.stringify(descriptor)).digest('hex').slice(0, 16);
+    return `${definition.name}|${hash}`;
+}
+export async function loadVaultEntry(definition) {
+    const vault = await readVault();
+    return vault.entries[vaultKeyForDefinition(definition)];
+}
+export async function saveVaultEntry(definition, patch) {
+    const vault = await readVault();
+    const key = vaultKeyForDefinition(definition);
+    const current = vault.entries[key] ?? {
+        serverName: definition.name,
+        serverUrl: definition.command.kind === 'http' ? definition.command.url.toString() : undefined,
+        updatedAt: new Date().toISOString(),
+    };
+    vault.entries[key] = {
+        ...current,
+        ...patch,
+        updatedAt: new Date().toISOString(),
+    };
+    await writeVault(vault);
+}
+export async function findServerNameByState(state) {
+    const vault = await readVault();
+    for (const entry of Object.values(vault.entries)) {
+        if (entry.state === state) {
+            return entry;
+        }
+    }
+    return undefined;
+}
+export async function clearVaultEntry(definition, scope) {
+    const vault = await readVault();
+    const key = vaultKeyForDefinition(definition);
+    const existing = vault.entries[key];
+    if (!existing) {
+        return;
+    }
+    if (scope === 'all') {
+        delete vault.entries[key];
+    }
+    else {
+        const updated = { ...existing };
+        if (scope === 'tokens') {
+            delete updated.tokens;
+        }
+        if (scope === 'client') {
+            delete updated.clientInfo;
+        }
+        if (scope === 'verifier') {
+            delete updated.codeVerifier;
+        }
+        if (scope === 'state') {
+            delete updated.state;
+        }
+        updated.updatedAt = new Date().toISOString();
+        vault.entries[key] = updated;
+    }
+    await writeVault(vault);
+}
+//# sourceMappingURL=oauth-vault.js.map

package/dist/oauth-vault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-vault.js","sourceRoot":"","sources":["../src/oauth-vault.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE3D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC;AAmB5E,KAAK,UAAU,SAAS;IACtB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAY,UAAU,CAAC,CAAC;QAC3D,IAAI,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,CAAC,IAAI,QAAQ,CAAC,OAAO,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACnG,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,6BAA6B;QAC7B,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;QAC/C,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC;IACD,MAAM,KAAK,GAAc,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrD,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,QAAmB;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,aAAa,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,UAA4B;IAChE,MAAM,UAAU,GAAG;QACjB,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI;QAClF,OAAO,EACL,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO;YACjC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE;YAC9E,CAAC,CAAC,IAAI;KACX,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvG,OAAO,GAAG,UAAU,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,UAA4B;IAC/D,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,UAA4B,EAAE,KAA0B;IAC3F,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI;QACpC,UAAU,EAAE,UAAU,CAAC,IAAI;QAC3B,SAAS,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;QAC7F,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG;QACnB,GAAG,OAAO;QACV,GAAG,KAAK;QACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAa;IACvD,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,UAA4B,EAC5B,KAAyD;IAEzD,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;IACT,CAAC;IACD,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAe,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC5C,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvB,OAAO,OAAO,CAAC,MAAM,CAAC;QACxB,CAAC;QACD,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvB,OAAO,OAAO,CAAC,UAAU,CAAC;QAC5B,CAAC;QACD,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YACzB,OAAO,OAAO,CAAC,YAAY,CAAC;QAC9B,CAAC;QACD,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YACtB,OAAO,OAAO,CAAC,KAAK,CAAC;QACvB,CAAC;QACD,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7C,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;IAC/B,CAAC;IACD,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC"}

package/dist/oauth.d.ts

@@ -0,0 +1,31 @@
+import { spawn } from 'node:child_process';
+import { URL } from 'node:url';
+import type { OAuthClientProvider } from '@modelcontextprotocol/sdk/client/auth.js';
+import type { ServerDefinition } from './config.js';
+declare function openExternal(url: string, platform?: NodeJS.Platform, launch?: typeof spawn): void;
+export interface OAuthSession {
+    provider: OAuthClientProvider & {
+        waitForAuthorizationCode: () => Promise<string>;
+    };
+    waitForAuthorizationCode: () => Promise<string>;
+    close: () => Promise<void>;
+}
+export declare function createOAuthSession(definition: ServerDefinition, logger: OAuthLogger): Promise<OAuthSession>;
+export interface OAuthLogger {
+    info(message: string): void;
+    warn(message: string): void;
+    error(message: string, error?: unknown): void;
+}
+export declare const __oauthInternals: {
+    openExternal: typeof openExternal;
+};
+export declare class ManualFlowInitiatedError extends Error {
+    constructor();
+}
+export declare function createManualOAuthSession(definition: ServerDefinition, logger: OAuthLogger): Promise<{
+    provider: OAuthClientProvider;
+    close: () => Promise<void>;
+}>;
+export declare function createCodeExchangeProvider(definition: ServerDefinition, redirectUrl: URL, logger: OAuthLogger): Promise<OAuthClientProvider>;
+export {};
+//# sourceMappingURL=oauth.d.ts.map

package/dist/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../src/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAG3C,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAMpF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAyBpD,iBAAS,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAAE,MAAM,GAAE,OAAO,KAAa,QAwB5G;AAkUD,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,mBAAmB,GAAG;QAC9B,wBAAwB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;KACjD,CAAC;IACF,wBAAwB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAChD,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAGD,wBAAsB,kBAAkB,CAAC,UAAU,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAQjH;AACD,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CAC/C;AAcD,eAAO,MAAM,gBAAgB;;CAE5B,CAAC;AAIF,qBAAa,wBAAyB,SAAQ,KAAK;;CAKlD;AAKD,wBAAsB,wBAAwB,CAC5C,UAAU,EAAE,gBAAgB,EAC5B,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC;IAAE,QAAQ,EAAE,mBAAmB,CAAC;IAAC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CAExE;AAID,wBAAsB,0BAA0B,CAC9C,UAAU,EAAE,gBAAgB,EAC5B,WAAW,EAAE,GAAG,EAChB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,mBAAmB,CAAC,CA+C9B"}