@nubisco/openbridge 1.4.1 → 1.5.1

package/dist/mcp/oauth.js

@@ -0,0 +1,319 @@
+/**
+ * The OAuth surface for MCP connectors, after Tally's (tally/apps/api/src/routes/oauth.ts):
+ * discovery, registration, consent and token. Plus the dashboard's own routes
+ * for managing tokens and connections.
+ *
+ * The consent screen is a page of the dashboard (OAuthConsentView.vue), built
+ * from the design system. Every decision stays here: /oauth/context says
+ * whether a request is well formed and who would approve it, and the approval
+ * posts back to POST /oauth/authorize, which revalidates from scratch.
+ *
+ * Who may approve: the signed-in person when dashboard sign-in is on. When it
+ * is off, the dashboard is open to the network and so is this screen, exactly
+ * as anyone who can open the dashboard can already create a token in Settings.
+ * Either way the approval must come from the dashboard itself (see
+ * sameOrigin), so a web page elsewhere cannot approve on someone's behalf.
+ */
+import { SCOPES } from '../access.js';
+import { readSession } from '../auth.js';
+import { publicOrigin } from './index.js';
+const AUTHORIZE_FIELDS = [
+    'client_id',
+    'redirect_uri',
+    'response_type',
+    'scope',
+    'state',
+    'code_challenge',
+    'code_challenge_method',
+];
+/** Reads a field from a query string or a parsed form, as a string. */
+function getter(source) {
+    const record = (source ?? {});
+    return (k) => {
+        const v = record[k];
+        return typeof v === 'string' ? v : '';
+    };
+}
+/**
+ * Whether a state-changing request came from this bridge's own pages.
+ *
+ * With sign-in off the dashboard has no cookie to protect it, and CORS here
+ * reflects any origin, so without this check any web page a person on the
+ * home network opens could mint a token and read it back. Browsers send
+ * Sec-Fetch-Site and Origin on every POST; a request with neither is not from
+ * a browser, and a non-browser caller cannot ride on anyone's visit.
+ */
+export function sameOrigin(req) {
+    const site = req.headers['sec-fetch-site'];
+    if (typeof site === 'string' && site !== 'same-origin' && site !== 'none')
+        return false;
+    const origin = req.headers.origin;
+    if (typeof origin === 'string' && origin !== '') {
+        let host;
+        try {
+            host = new URL(origin).host;
+        }
+        catch {
+            return false;
+        }
+        const allowed = new Set([req.host]);
+        try {
+            allowed.add(new URL(publicOrigin(req)).host);
+        }
+        catch {
+            // A malformed OPENBRIDGE_PUBLIC_URL only narrows what is accepted.
+        }
+        if (!allowed.has(host))
+            return false;
+    }
+    return true;
+}
+function validateAuthorize(store, get) {
+    const redirectUri = get('redirect_uri');
+    const client = store.client(get('client_id'), redirectUri);
+    if (!client)
+        return { ok: false, kind: 'refuse', message: 'Unknown client, or a redirect_uri it did not register' };
+    const fail = (error) => {
+        const to = new URL(redirectUri);
+        to.searchParams.set('error', error);
+        if (get('state'))
+            to.searchParams.set('state', get('state'));
+        return { ok: false, kind: 'redirect', to: to.href };
+    };
+    if (get('response_type') !== 'code')
+        return fail('unsupported_response_type');
+    if (!get('code_challenge') || get('code_challenge_method') !== 'S256')
+        return fail('invalid_request');
+    return {
+        ok: true,
+        p: {
+            clientId: client.id,
+            clientName: client.name,
+            redirectUri,
+            state: get('state'),
+            codeChallenge: get('code_challenge'),
+        },
+    };
+}
+/** Registration is unauthenticated by design (RFC 7591), so it is limited per address. */
+const REGISTER_WINDOW_MS = 60 * 60 * 1000;
+const REGISTER_LIMIT = 20;
+const registrations = new Map();
+function registrationAllowed(ip, now = Date.now()) {
+    const recent = (registrations.get(ip) ?? []).filter((t) => now - t < REGISTER_WINDOW_MS);
+    if (recent.length >= REGISTER_LIMIT) {
+        registrations.set(ip, recent);
+        return false;
+    }
+    recent.push(now);
+    registrations.set(ip, recent);
+    return true;
+}
+const LOCAL_OWNER = { id: 'local', email: null };
+export async function registerOauthRoutes(app, deps) {
+    const { store, authConfig } = deps;
+    const signInOn = authConfig.enabled && !!authConfig.issuer;
+    /** The person acting, or null when sign-in is on and nobody is signed in. */
+    function ownerOf(req) {
+        if (!signInOn)
+            return LOCAL_OWNER;
+        const session = readSession(authConfig, req);
+        return session ? { id: session.userId, email: session.email } : null;
+    }
+    // Encapsulated so the form parser below applies to these routes only.
+    await app.register(async (scope) => {
+        // The token endpoint and the consent form both post
+        // application/x-www-form-urlencoded, which Fastify does not parse by default.
+        scope.addContentTypeParser('application/x-www-form-urlencoded', { parseAs: 'string' }, (_req, body, done) => {
+            done(null, Object.fromEntries(new URLSearchParams(body)));
+        });
+        // ── Discovery ──
+        //
+        // Both the plain and the path-inserted spellings: RFC 8414 inserts
+        // .well-known between host and path, so a client discovering /mcp asks for
+        // /.well-known/oauth-authorization-server/mcp too, and tries the OpenID
+        // spelling of both. Answering only the bare path broke claude.ai on Acta.
+        const asMeta = async (req) => {
+            const origin = publicOrigin(req);
+            return {
+                issuer: origin,
+                authorization_endpoint: `${origin}/oauth/authorize`,
+                token_endpoint: `${origin}/oauth/token`,
+                registration_endpoint: `${origin}/oauth/register`,
+                response_types_supported: ['code'],
+                grant_types_supported: ['authorization_code', 'refresh_token'],
+                code_challenge_methods_supported: ['S256'],
+                token_endpoint_auth_methods_supported: ['none'],
+                scopes_supported: [...SCOPES],
+            };
+        };
+        const prMeta = async (req) => {
+            const origin = publicOrigin(req);
+            return {
+                resource: `${origin}/mcp`,
+                authorization_servers: [origin],
+                bearer_methods_supported: ['header'],
+                scopes_supported: [...SCOPES],
+            };
+        };
+        for (const path of [
+            '/.well-known/oauth-authorization-server',
+            '/.well-known/oauth-authorization-server/*',
+            '/.well-known/openid-configuration',
+            '/.well-known/openid-configuration/*',
+            '/mcp/.well-known/oauth-authorization-server',
+        ]) {
+            scope.get(path, asMeta);
+        }
+        for (const path of [
+            '/.well-known/oauth-protected-resource',
+            '/.well-known/oauth-protected-resource/*',
+            '/mcp/.well-known/oauth-protected-resource',
+        ]) {
+            scope.get(path, prMeta);
+        }
+        // ── Registration ──
+        scope.post('/oauth/register', async (req, reply) => {
+            if (!registrationAllowed(req.ip)) {
+                return reply.status(429).send({ error: 'slow_down', error_description: 'Too many registrations. Try later.' });
+            }
+            const body = req.body;
+            if (typeof body !== 'object' || body === null || Array.isArray(body)) {
+                return reply.status(400).send({ error: 'invalid_client_metadata', error_description: 'Body must be JSON' });
+            }
+            const out = store.registerClient(body);
+            if (!out.ok) {
+                return reply
+                    .status(out.error === 'temporarily_unavailable' ? 503 : 400)
+                    .send({ error: out.error, error_description: out.description });
+            }
+            return reply.status(201).send({
+                client_id: out.id,
+                client_name: out.name,
+                redirect_uris: out.uris,
+                token_endpoint_auth_method: 'none',
+                grant_types: ['authorization_code', 'refresh_token'],
+                response_types: ['code'],
+            });
+        });
+        // ── Consent ──
+        /** Hands the request to the dashboard's consent screen, or reports a malformed one to the client. */
+        scope.get('/oauth/authorize', async (req, reply) => {
+            const get = getter(req.query);
+            const check = validateAuthorize(store, get);
+            if (!check.ok && check.kind === 'redirect')
+                return reply.redirect(check.to, 302);
+            const qs = new URLSearchParams();
+            for (const k of AUTHORIZE_FIELDS)
+                if (get(k))
+                    qs.set(k, get(k));
+            return reply.redirect(`/oauth/consent?${qs.toString()}`, 302);
+        });
+        /** What the consent screen needs to render honestly. */
+        scope.get('/oauth/context', async (req) => {
+            const check = validateAuthorize(store, getter(req.query));
+            if (!check.ok) {
+                return { ok: false, reason: check.kind === 'refuse' ? check.message : 'That request cannot be approved' };
+            }
+            const owner = ownerOf(req);
+            return {
+                ok: true,
+                clientName: check.p.clientName,
+                redirectHost: new URL(check.p.redirectUri).host,
+                signInRequired: signInOn,
+                email: owner?.email ?? null,
+                signedIn: owner !== null,
+            };
+        });
+        /** The decision, a real form post so the browser follows the redirect back to the client. */
+        scope.post('/oauth/authorize', async (req, reply) => {
+            if (!sameOrigin(req))
+                return reply.status(403).type('text/plain').send('Approve from the OpenBridge dashboard');
+            const get = getter(req.body);
+            const check = validateAuthorize(store, get);
+            if (!check.ok) {
+                if (check.kind === 'redirect')
+                    return reply.redirect(check.to, 302);
+                return reply.status(400).type('text/plain').send(check.message);
+            }
+            const owner = ownerOf(req);
+            if (!owner) {
+                const qs = new URLSearchParams();
+                for (const k of AUTHORIZE_FIELDS)
+                    if (get(k))
+                        qs.set(k, get(k));
+                return reply.redirect(`/oauth/consent?${qs.toString()}`, 302);
+            }
+            if (get('decision') !== 'approve') {
+                const to = new URL(check.p.redirectUri);
+                if (check.p.state)
+                    to.searchParams.set('state', check.p.state);
+                to.searchParams.set('error', 'access_denied');
+                return reply.redirect(to.href, 302);
+            }
+            const access = get('access') === 'control' ? 'control' : 'read';
+            const code = store.issueCode({ ...check.p, access }, owner);
+            const to = new URL(check.p.redirectUri);
+            if (check.p.state)
+                to.searchParams.set('state', check.p.state);
+            to.searchParams.set('code', code);
+            return reply.redirect(to.href, 302);
+        });
+        // ── Token ──
+        scope.post('/oauth/token', async (req, reply) => {
+            const get = getter(req.body);
+            const grant = get('grant_type');
+            const out = grant === 'authorization_code'
+                ? store.exchangeCode(get)
+                : grant === 'refresh_token'
+                    ? store.refresh(get)
+                    : { ok: false, error: 'unsupported_grant_type' };
+            reply.header('Cache-Control', 'no-store');
+            if (!out.ok)
+                return reply.status(400).send({ error: out.error });
+            return out.pair;
+        });
+    });
+    // ── Dashboard: tokens and connections ──
+    //
+    // Under /api, so the session gate in auth.ts covers them when sign-in is on.
+    // Never reachable with a token: a bearer opens /mcp and nothing else, so a
+    // leaked token cannot mint another one or revoke the person's own.
+    app.get('/api/access', async (req) => ({
+        enabled: true,
+        endpoint: `${publicOrigin(req)}/mcp`,
+        tokens: store.listTokens(),
+        connections: store.listConnections(),
+    }));
+    app.post('/api/access/tokens', async (req, reply) => {
+        if (!sameOrigin(req))
+            return reply.status(403).send({ error: 'Create tokens from the OpenBridge dashboard' });
+        const owner = ownerOf(req);
+        if (!owner)
+            return reply.status(401).send({ error: 'unauthenticated' });
+        const { name, access } = (req.body ?? {});
+        if (typeof name !== 'string' || !name.trim())
+            return reply.status(400).send({ error: 'name is required' });
+        if (access !== 'read' && access !== 'control') {
+            return reply.status(400).send({ error: "access must be 'read' or 'control'" });
+        }
+        return store.createToken(name, access, owner);
+    });
+    app.delete('/api/access/tokens/:id', async (req, reply) => {
+        if (!sameOrigin(req))
+            return reply.status(403).send({ error: 'Revoke tokens from the OpenBridge dashboard' });
+        const { id } = req.params;
+        if (!store.revokeToken(id))
+            return reply.status(404).send({ error: 'token not found' });
+        return { ok: true };
+    });
+    app.delete('/api/access/connections/:clientId', async (req, reply) => {
+        if (!sameOrigin(req))
+            return reply.status(403).send({ error: 'Disconnect from the OpenBridge dashboard' });
+        const { clientId } = req.params;
+        if (!store.revokeConnection(clientId))
+            return reply.status(404).send({ error: 'connection not found' });
+        return { ok: true };
+    });
+}
+//# sourceMappingURL=oauth.js.map

package/dist/mcp/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../src/mcp/oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,MAAM,EAA6C,MAAM,cAAc,CAAA;AAChF,OAAO,EAAE,WAAW,EAAoB,MAAM,YAAY,CAAA;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAEzC,MAAM,gBAAgB,GAAG;IACvB,WAAW;IACX,cAAc;IACd,eAAe;IACf,OAAO;IACP,OAAO;IACP,gBAAgB;IAChB,uBAAuB;CACf,CAAA;AAEV,uEAAuE;AACvE,SAAS,MAAM,CAAC,MAAe;IAC7B,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAA;IACxD,OAAO,CAAC,CAAC,EAAE,EAAE;QACX,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;QACnB,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACvC,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU,CAAC,GAAmB;IAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,KAAK,CAAA;IACvF,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAA;IACjC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAChD,IAAI,IAAY,CAAA;QAChB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAA;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;QACnC,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;QACrE,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAA;IACtC,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAiBD,SAAS,iBAAiB,CAAC,KAAkB,EAAE,GAA0B;IACvE,MAAM,WAAW,GAAG,GAAG,CAAC,cAAc,CAAC,CAAA;IACvC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,CAAA;IAC1D,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,uDAAuD,EAAE,CAAA;IACnH,MAAM,IAAI,GAAG,CAAC,KAAa,EAAkB,EAAE;QAC7C,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAA;QAC/B,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QACnC,IAAI,GAAG,CAAC,OAAO,CAAC;YAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;QAC5D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,CAAA;IACrD,CAAC,CAAA;IACD,IAAI,GAAG,CAAC,eAAe,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,2BAA2B,CAAC,CAAA;IAC7E,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,uBAAuB,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAA;IACrG,OAAO;QACL,EAAE,EAAE,IAAI;QACR,CAAC,EAAE;YACD,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,WAAW;YACX,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC;YACnB,aAAa,EAAE,GAAG,CAAC,gBAAgB,CAAC;SACrC;KACF,CAAA;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AACzC,MAAM,cAAc,GAAG,EAAE,CAAA;AACzB,MAAM,aAAa,GAAG,IAAI,GAAG,EAAoB,CAAA;AAEjD,SAAS,mBAAmB,CAAC,EAAU,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACvD,MAAM,MAAM,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,kBAAkB,CAAC,CAAA;IACxF,IAAI,MAAM,CAAC,MAAM,IAAI,cAAc,EAAE,CAAC;QACpC,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QAC7B,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAChB,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;IAC7B,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,WAAW,GAAU,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;AAOvD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAoB,EAAE,IAAe;IAC7E,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,IAAI,CAAA;IAClC,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAA;IAE1D,6EAA6E;IAC7E,SAAS,OAAO,CAAC,GAAmB;QAClC,IAAI,CAAC,QAAQ;YAAE,OAAO,WAAW,CAAA;QACjC,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;QAC5C,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IACtE,CAAC;IAED,sEAAsE;IACtE,MAAM,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACjC,oDAAoD;QACpD,8EAA8E;QAC9E,KAAK,CAAC,oBAAoB,CAAC,mCAAmC,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC1G,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,eAAe,CAAC,IAAc,CAAC,CAAC,CAAC,CAAA;QACrE,CAAC,CAAC,CAAA;QAEF,kBAAkB;QAClB,EAAE;QACF,mEAAmE;QACnE,2EAA2E;QAC3E,wEAAwE;QACxE,0EAA0E;QAC1E,MAAM,MAAM,GAAG,KAAK,EAAE,GAAmB,EAAE,EAAE;YAC3C,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;YAChC,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,sBAAsB,EAAE,GAAG,MAAM,kBAAkB;gBACnD,cAAc,EAAE,GAAG,MAAM,cAAc;gBACvC,qBAAqB,EAAE,GAAG,MAAM,iBAAiB;gBACjD,wBAAwB,EAAE,CAAC,MAAM,CAAC;gBAClC,qBAAqB,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;gBAC9D,gCAAgC,EAAE,CAAC,MAAM,CAAC;gBAC1C,qCAAqC,EAAE,CAAC,MAAM,CAAC;gBAC/C,gBAAgB,EAAE,CAAC,GAAG,MAAM,CAAC;aAC9B,CAAA;QACH,CAAC,CAAA;QACD,MAAM,MAAM,GAAG,KAAK,EAAE,GAAmB,EAAE,EAAE;YAC3C,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;YAChC,OAAO;gBACL,QAAQ,EAAE,GAAG,MAAM,MAAM;gBACzB,qBAAqB,EAAE,CAAC,MAAM,CAAC;gBAC/B,wBAAwB,EAAE,CAAC,QAAQ,CAAC;gBACpC,gBAAgB,EAAE,CAAC,GAAG,MAAM,CAAC;aAC9B,CAAA;QACH,CAAC,CAAA;QACD,KAAK,MAAM,IAAI,IAAI;YACjB,yCAAyC;YACzC,2CAA2C;YAC3C,mCAAmC;YACnC,qCAAqC;YACrC,6CAA6C;SAC9C,EAAE,CAAC;YACF,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACzB,CAAC;QACD,KAAK,MAAM,IAAI,IAAI;YACjB,uCAAuC;YACvC,yCAAyC;YACzC,2CAA2C;SAC5C,EAAE,CAAC;YACF,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACzB,CAAC;QAED,qBAAqB;QACrB,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YACjD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACjC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,oCAAoC,EAAE,CAAC,CAAA;YAChH,CAAC;YACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAA;YACrB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,CAAC,CAAA;YAC7G,CAAC;YACD,MAAM,GAAG,GAAG,KAAK,CAAC,cAAc,CAAC,IAA+B,CAAC,CAAA;YACjE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,OAAO,KAAK;qBACT,MAAM,CAAC,GAAG,CAAC,KAAK,KAAK,yBAAyB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;qBAC3D,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAA;YACnE,CAAC;YACD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC5B,SAAS,EAAE,GAAG,CAAC,EAAE;gBACjB,WAAW,EAAE,GAAG,CAAC,IAAI;gBACrB,aAAa,EAAE,GAAG,CAAC,IAAI;gBACvB,0BAA0B,EAAE,MAAM;gBAClC,WAAW,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;gBACpD,cAAc,EAAE,CAAC,MAAM,CAAC;aACzB,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,gBAAgB;QAEhB,qGAAqG;QACrG,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YACjD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YAC7B,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;YAC3C,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;gBAAE,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;YAChF,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAA;YAChC,KAAK,MAAM,CAAC,IAAI,gBAAgB;gBAAE,IAAI,GAAG,CAAC,CAAC,CAAC;oBAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;YAC/D,OAAO,KAAK,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAC/D,CAAC,CAAC,CAAA;QAEF,wDAAwD;QACxD,KAAK,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACxC,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA;YACzD,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iCAAiC,EAAE,CAAA;YAC3G,CAAC;YACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;YAC1B,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU;gBAC9B,YAAY,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI;gBAC/C,cAAc,EAAE,QAAQ;gBACxB,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI;gBAC3B,QAAQ,EAAE,KAAK,KAAK,IAAI;aACzB,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,6FAA6F;QAC7F,KAAK,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAmB,EAAE,EAAE;YAChE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAA;YAC/G,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAC5B,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;YAC3C,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBACd,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;oBAAE,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;gBACnE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACjE,CAAC;YAED,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;YAC1B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAA;gBAChC,KAAK,MAAM,CAAC,IAAI,gBAAgB;oBAAE,IAAI,GAAG,CAAC,CAAC,CAAC;wBAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;gBAC/D,OAAO,KAAK,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;YAC/D,CAAC;YAED,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,SAAS,EAAE,CAAC;gBAClC,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAA;gBACvC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK;oBAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;gBAC9D,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAA;gBAC7C,OAAO,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;YACrC,CAAC;YAED,MAAM,MAAM,GAAW,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAA;YACvE,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,CAAA;YAC3D,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAA;YACvC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK;gBAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;YAC9D,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YACjC,OAAO,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QACrC,CAAC,CAAC,CAAA;QAEF,cAAc;QACd,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAC5B,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,CAAA;YAC/B,MAAM,GAAG,GACP,KAAK,KAAK,oBAAoB;gBAC5B,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC;gBACzB,CAAC,CAAC,KAAK,KAAK,eAAe;oBACzB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;oBACpB,CAAC,CAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAY,CAAA;YACjE,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAA;YACzC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAA;YAChE,OAAO,GAAG,CAAC,IAAI,CAAA;QACjB,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,0CAA0C;IAC1C,EAAE;IACF,6EAA6E;IAC7E,2EAA2E;IAC3E,mEAAmE;IAEnE,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACrC,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM;QACpC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE;QAC1B,WAAW,EAAE,KAAK,CAAC,eAAe,EAAE;KACrC,CAAC,CAAC,CAAA;IAEH,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAClD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC,CAAA;QAC7G,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QAC1B,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAA;QACvE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAyC,CAAA;QACjF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAA;QAC1G,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAA;QAChF,CAAC;QACD,OAAO,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,MAAM,CAAC,wBAAwB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACxD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC,CAAA;QAC7G,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAwB,CAAA;QAC3C,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAA;QACvF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IACrB,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,MAAM,CAAC,mCAAmC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC,CAAA;QAC1G,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAA8B,CAAA;QACvD,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAA;QACvG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IACrB,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/mcp/tools.d.ts

@@ -0,0 +1,39 @@
+/**
+ * The MCP tools. Each one is a record: name, description, zod schema, the
+ * scope it needs, and a handler that calls the same service functions as the
+ * REST routes (services/bridge.ts). The JSON Schema in tools/list is generated
+ * from the zod schema, never written by hand.
+ *
+ * Designed for an agent's context window, not as a mirror of the REST API:
+ * `overview` orients in one call, reads are compact unless asked for more, and
+ * history comes back with its summary already computed, so the model reports
+ * numbers the code worked out rather than doing arithmetic over raw points.
+ */
+import { z } from 'zod';
+import { type BridgeContext } from '../services/bridge.js';
+import { type Credential, type Scope } from '../access.js';
+export interface McpContext {
+    bridge: BridgeContext;
+    credential: Credential;
+    /** Public origin of this bridge, for url_templates and icons. */
+    origin: string;
+    /** Bridge name from config, for the overview. */
+    bridgeName: () => string | null;
+}
+export interface McpTool {
+    name: string;
+    description: string;
+    schema: z.ZodType;
+    scope: Scope;
+    write: boolean;
+    handler: (args: never, ctx: McpContext) => unknown | Promise<unknown>;
+}
+/** A refusal the model must read: becomes `isError: true`, not a protocol error. */
+export declare class Refusal extends Error {
+}
+export declare function isRefusal(err: unknown): err is Error;
+export declare function toolInputSchema(tool: McpTool): unknown;
+/** For tests: forget every remembered op. */
+export declare function clearReplays(): void;
+export declare const MCP_TOOLS: McpTool[];
+//# sourceMappingURL=tools.d.ts.map

package/dist/mcp/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/mcp/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,OAAO,EAYL,KAAK,aAAa,EAEnB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAA6B,KAAK,UAAU,EAAE,KAAK,KAAK,EAAE,MAAM,cAAc,CAAA;AAIrF,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,aAAa,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,iEAAiE;IACjE,MAAM,EAAE,MAAM,CAAA;IACd,iDAAiD;IACjD,UAAU,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;CAChC;AAED,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAA;IACjB,KAAK,EAAE,KAAK,CAAA;IACZ,KAAK,EAAE,OAAO,CAAA;IACd,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACtE;AAED,oFAAoF;AACpF,qBAAa,OAAQ,SAAQ,KAAK;CAAG;AAErC,wBAAgB,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,KAAK,CAEpD;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAItD;AA+HD,6CAA6C;AAC7C,wBAAgB,YAAY,IAAI,IAAI,CAEnC;AAwFD,eAAO,MAAM,SAAS,EAAE,OAAO,EAuM9B,CAAA"}