@olane/o-mcp 0.7.1 → 0.7.2

package/dist/src/mcp.tool.d.ts

@@ -3,7 +3,7 @@ import { Client } from '@modelcontextprotocol/sdk/client/index.js';
 import { oLaneTool } from '@olane/o-lane';
 import { oNodeToolConfig } from '@olane/o-node';
 export declare class McpTool extends oLaneTool {
-    private mcpClient;
+    protected mcpClient: Client;
     constructor(config: oNodeToolConfig & {
         address: oAddress;
         mcpClient: Client;

package/dist/src/mcp.tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.tool.d.ts","sourceRoot":"","sources":["../../src/mcp.tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAiC,MAAM,eAAe,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAEnE,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,qBAAa,OAAQ,SAAQ,SAAS;IACpC,OAAO,CAAC,SAAS,CAAS;gBAGxB,MAAM,EAAE,eAAe,GAAG;QAAE,OAAO,EAAE,QAAQ,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE;IAa9D,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAgC3B,OAAO;IAQP,KAAK;;;;;;;IAuBL,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC;CAoB7B"}
+{"version":3,"file":"mcp.tool.d.ts","sourceRoot":"","sources":["../../src/mcp.tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAiC,MAAM,eAAe,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAEnE,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,qBAAa,OAAQ,SAAQ,SAAS;IACpC,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC;gBAG1B,MAAM,EAAE,eAAe,GAAG;QAAE,OAAO,EAAE,QAAQ,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE;IAa9D,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAgC3B,OAAO;IAQP,KAAK;;;;;;;IAuBL,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC;CAoB7B"}

package/dist/src/methods/mcp-bridge.methods.js

@@ -78,7 +78,7 @@ export const MCP_BRIDGE_METHODS = {
     },
     add_local_server: {
         name: 'add_local_server',
-        description: 'Add a local MCP server to the bridge using command and arguments',
+        description: 'Add a local MCP server to the bridge using command and arguments. If a command line argument is provided, use this method.',
         dependencies: [],
         parameters: [
             {

package/dist/src/oauth/index.d.ts

@@ -0,0 +1,8 @@
+export * from './interfaces/index.js';
+export * from './mcp-oauth-storage.js';
+export * from './mcp-oauth-callback-server.js';
+export * from './mcp-dynamic-registration.js';
+export * from './oauth-aware-transport.js';
+export * from './mcp-oauth-manager.js';
+export * from './methods/mcp-oauth.methods.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/oauth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/oauth/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,wBAAwB,CAAC;AACvC,cAAc,gCAAgC,CAAC"}

package/dist/src/oauth/index.js

@@ -0,0 +1,7 @@
+export * from './interfaces/index.js';
+export * from './mcp-oauth-storage.js';
+export * from './mcp-oauth-callback-server.js';
+export * from './mcp-dynamic-registration.js';
+export * from './oauth-aware-transport.js';
+export * from './mcp-oauth-manager.js';
+export * from './methods/mcp-oauth.methods.js';

package/dist/src/oauth/interfaces/client-metadata.interface.d.ts

@@ -0,0 +1,17 @@
+export interface ClientMetadata {
+    client_name: string;
+    redirect_uris: string[];
+    grant_types?: string[];
+    response_types?: string[];
+    scope?: string;
+    token_endpoint_auth_method?: string;
+    application_type?: string;
+}
+export interface StaticOAuthClientInfo {
+    client_id: string;
+    client_secret?: string;
+    authorization_endpoint?: string;
+    token_endpoint?: string;
+    scope?: string;
+}
+//# sourceMappingURL=client-metadata.interface.d.ts.map

package/dist/src/oauth/interfaces/client-metadata.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-metadata.interface.d.ts","sourceRoot":"","sources":["../../../../src/oauth/interfaces/client-metadata.interface.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}

package/dist/src/oauth/interfaces/client-metadata.interface.js

@@ -0,0 +1 @@
+export {};

package/dist/src/oauth/interfaces/index.d.ts

@@ -0,0 +1,4 @@
+export * from './oauth-tokens.interface.js';
+export * from './oauth-client-info.interface.js';
+export * from './client-metadata.interface.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/oauth/interfaces/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/oauth/interfaces/index.ts"],"names":[],"mappings":"AAAA,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC"}

package/dist/src/oauth/interfaces/index.js

@@ -0,0 +1,3 @@
+export * from './oauth-tokens.interface.js';
+export * from './oauth-client-info.interface.js';
+export * from './client-metadata.interface.js';

package/dist/src/oauth/interfaces/oauth-client-info.interface.d.ts

@@ -0,0 +1,12 @@
+export interface OAuthClientInfo {
+    client_id: string;
+    client_secret?: string;
+    authorization_endpoint: string;
+    token_endpoint: string;
+    registration_endpoint?: string;
+    scope?: string;
+    redirect_uris?: string[];
+    grant_types?: string[];
+    response_types?: string[];
+}
+//# sourceMappingURL=oauth-client-info.interface.d.ts.map

package/dist/src/oauth/interfaces/oauth-client-info.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-client-info.interface.d.ts","sourceRoot":"","sources":["../../../../src/oauth/interfaces/oauth-client-info.interface.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B"}

package/dist/src/oauth/interfaces/oauth-client-info.interface.js

@@ -0,0 +1 @@
+export {};

package/dist/src/oauth/interfaces/oauth-tokens.interface.d.ts

@@ -0,0 +1,10 @@
+export interface OAuthTokens {
+    access_token: string;
+    refresh_token?: string;
+    token_type: string;
+    expires_in?: number;
+    expires_at?: number;
+    scope?: string;
+    code_verifier?: string;
+}
+//# sourceMappingURL=oauth-tokens.interface.d.ts.map

package/dist/src/oauth/interfaces/oauth-tokens.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-tokens.interface.d.ts","sourceRoot":"","sources":["../../../../src/oauth/interfaces/oauth-tokens.interface.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB"}

package/dist/src/oauth/interfaces/oauth-tokens.interface.js

@@ -0,0 +1 @@
+export {};

package/dist/src/oauth/mcp-dynamic-registration.d.ts

@@ -0,0 +1,33 @@
+import { OAuthClientInfo } from './interfaces/oauth-client-info.interface.js';
+import { ClientMetadata } from './interfaces/client-metadata.interface.js';
+/**
+ * Implements RFC 7591 Dynamic Client Registration for OAuth 2.0
+ *
+ * This class handles automatic registration of OAuth clients with remote servers
+ * that support dynamic client registration.
+ */
+export declare class McpDynamicRegistration {
+    /**
+     * Register a new OAuth client dynamically
+     */
+    registerClient(registrationEndpoint: string, clientMetadata: ClientMetadata): Promise<OAuthClientInfo>;
+    /**
+     * Discover OAuth endpoints from a server URL
+     * Tries to find .well-known/oauth-authorization-server or OpenID Connect discovery
+     */
+    discoverEndpoints(serverUrl: string): Promise<{
+        authorization_endpoint?: string;
+        token_endpoint?: string;
+        registration_endpoint?: string;
+    }>;
+    /**
+     * Create client metadata for registration
+     */
+    createClientMetadata(clientName: string, redirectUri: string, scope?: string): ClientMetadata;
+    /**
+     * Get or register an OAuth client
+     * Returns cached client info if available, otherwise performs registration
+     */
+    getOrRegisterClient(serverUrl: string, clientName: string, redirectUri: string, existingClientInfo?: OAuthClientInfo | null, scope?: string): Promise<OAuthClientInfo>;
+}
+//# sourceMappingURL=mcp-dynamic-registration.d.ts.map

package/dist/src/oauth/mcp-dynamic-registration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-dynamic-registration.d.ts","sourceRoot":"","sources":["../../../src/oauth/mcp-dynamic-registration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAE3E;;;;;GAKG;AACH,qBAAa,sBAAsB;IACjC;;OAEG;IACG,cAAc,CAClB,oBAAoB,EAAE,MAAM,EAC5B,cAAc,EAAE,cAAc,GAC7B,OAAO,CAAC,eAAe,CAAC;IAmC3B;;;OAGG;IACG,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAClD,sBAAsB,CAAC,EAAE,MAAM,CAAC;QAChC,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,qBAAqB,CAAC,EAAE,MAAM,CAAC;KAChC,CAAC;IA0BF;;OAEG;IACH,oBAAoB,CAClB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,MAAM,GACb,cAAc;IAYjB;;;OAGG;IACG,mBAAmB,CACvB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,kBAAkB,CAAC,EAAE,eAAe,GAAG,IAAI,EAC3C,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,eAAe,CAAC;CAyC5B"}

package/dist/src/oauth/mcp-dynamic-registration.js

@@ -0,0 +1,107 @@
+/**
+ * Implements RFC 7591 Dynamic Client Registration for OAuth 2.0
+ *
+ * This class handles automatic registration of OAuth clients with remote servers
+ * that support dynamic client registration.
+ */
+export class McpDynamicRegistration {
+    /**
+     * Register a new OAuth client dynamically
+     */
+    async registerClient(registrationEndpoint, clientMetadata) {
+        const response = await fetch(registrationEndpoint, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                Accept: 'application/json',
+            },
+            body: JSON.stringify(clientMetadata),
+        });
+        if (!response.ok) {
+            const errorText = await response.text();
+            throw new Error(`Dynamic client registration failed: ${response.status} ${errorText}`);
+        }
+        const registrationResponse = await response.json();
+        return {
+            client_id: registrationResponse.client_id,
+            client_secret: registrationResponse.client_secret,
+            authorization_endpoint: registrationResponse.authorization_endpoint ||
+                registrationResponse.authorization_url,
+            token_endpoint: registrationResponse.token_endpoint || registrationResponse.token_url,
+            registration_endpoint: registrationEndpoint,
+            scope: clientMetadata.scope,
+            redirect_uris: registrationResponse.redirect_uris,
+            grant_types: registrationResponse.grant_types,
+            response_types: registrationResponse.response_types,
+        };
+    }
+    /**
+     * Discover OAuth endpoints from a server URL
+     * Tries to find .well-known/oauth-authorization-server or OpenID Connect discovery
+     */
+    async discoverEndpoints(serverUrl) {
+        const wellKnownUrls = [
+            `${serverUrl}/.well-known/oauth-authorization-server`,
+            `${serverUrl}/.well-known/openid-configuration`,
+        ];
+        for (const wellKnownUrl of wellKnownUrls) {
+            try {
+                const response = await fetch(wellKnownUrl);
+                if (response.ok) {
+                    const discovery = await response.json();
+                    return {
+                        authorization_endpoint: discovery.authorization_endpoint,
+                        token_endpoint: discovery.token_endpoint,
+                        registration_endpoint: discovery.registration_endpoint,
+                    };
+                }
+            }
+            catch (error) {
+                // Try next well-known URL
+                continue;
+            }
+        }
+        return {};
+    }
+    /**
+     * Create client metadata for registration
+     */
+    createClientMetadata(clientName, redirectUri, scope) {
+        return {
+            client_name: clientName,
+            redirect_uris: [redirectUri],
+            grant_types: ['authorization_code', 'refresh_token'],
+            response_types: ['code'],
+            token_endpoint_auth_method: 'client_secret_basic',
+            application_type: 'native',
+            scope: scope || 'openid profile email',
+        };
+    }
+    /**
+     * Get or register an OAuth client
+     * Returns cached client info if available, otherwise performs registration
+     */
+    async getOrRegisterClient(serverUrl, clientName, redirectUri, existingClientInfo, scope) {
+        // Return existing client info if valid
+        if (existingClientInfo?.client_id) {
+            return existingClientInfo;
+        }
+        // Discover endpoints
+        const endpoints = await this.discoverEndpoints(serverUrl);
+        if (!endpoints.registration_endpoint) {
+            throw new Error(`No registration endpoint found for server: ${serverUrl}. ` +
+                `Please provide static OAuth client credentials instead.`);
+        }
+        if (!endpoints.authorization_endpoint || !endpoints.token_endpoint) {
+            throw new Error(`Could not discover OAuth endpoints for server: ${serverUrl}`);
+        }
+        // Create client metadata
+        const clientMetadata = this.createClientMetadata(clientName, redirectUri, scope);
+        // Register the client
+        const clientInfo = await this.registerClient(endpoints.registration_endpoint, clientMetadata);
+        // Add discovered endpoints
+        clientInfo.authorization_endpoint = endpoints.authorization_endpoint;
+        clientInfo.token_endpoint = endpoints.token_endpoint;
+        return clientInfo;
+    }
+}

package/dist/src/oauth/mcp-oauth-callback-server.d.ts

@@ -0,0 +1,51 @@
+interface CallbackResult {
+    code: string;
+    state?: string;
+    error?: string;
+    error_description?: string;
+}
+/**
+ * HTTP server for handling OAuth callbacks
+ *
+ * This server runs locally to receive the OAuth redirect after user authorization.
+ * It automatically shuts down after receiving the callback.
+ */
+export declare class McpOAuthCallbackServer {
+    private app;
+    private server;
+    private port;
+    private events;
+    private callbackResult;
+    constructor(port?: number);
+    /**
+     * Setup Express routes
+     */
+    private setupRoutes;
+    /**
+     * Start the callback server
+     */
+    start(port?: number): Promise<void>;
+    /**
+     * Stop the callback server
+     */
+    stop(): Promise<void>;
+    /**
+     * Wait for OAuth callback
+     * @param timeout Timeout in milliseconds (default: 5 minutes)
+     */
+    waitForCallback(timeout?: number): Promise<CallbackResult>;
+    /**
+     * Get the callback URL
+     */
+    getCallbackUrl(): string;
+    /**
+     * Get the current port
+     */
+    getPort(): number;
+    /**
+     * Check if server is running
+     */
+    isRunning(): boolean;
+}
+export {};
+//# sourceMappingURL=mcp-oauth-callback-server.d.ts.map

package/dist/src/oauth/mcp-oauth-callback-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-oauth-callback-server.d.ts","sourceRoot":"","sources":["../../../src/oauth/mcp-oauth-callback-server.ts"],"names":[],"mappings":"AAIA,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;GAKG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,GAAG,CAAU;IACrB,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,IAAI,CAAgB;IAC5B,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,cAAc,CAA+B;gBAEzC,IAAI,CAAC,EAAE,MAAM;IASzB;;OAEG;IACH,OAAO,CAAC,WAAW;IAoEnB;;OAEG;IACG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmCzC;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAkB3B;;;OAGG;IACG,eAAe,CAAC,OAAO,GAAE,MAAe,GAAG,OAAO,CAAC,cAAc,CAAC;IA2BxE;;OAEG;IACH,cAAc,IAAI,MAAM;IAIxB;;OAEG;IACH,OAAO,IAAI,MAAM;IAIjB;;OAEG;IACH,SAAS,IAAI,OAAO;CAGrB"}

package/dist/src/oauth/mcp-oauth-callback-server.js

@@ -0,0 +1,179 @@
+import express from 'express';
+import { EventEmitter } from 'events';
+/**
+ * HTTP server for handling OAuth callbacks
+ *
+ * This server runs locally to receive the OAuth redirect after user authorization.
+ * It automatically shuts down after receiving the callback.
+ */
+export class McpOAuthCallbackServer {
+    constructor(port) {
+        this.server = null;
+        this.port = 3334;
+        this.callbackResult = null;
+        if (port) {
+            this.port = port;
+        }
+        this.app = express();
+        this.events = new EventEmitter();
+        this.setupRoutes();
+    }
+    /**
+     * Setup Express routes
+     */
+    setupRoutes() {
+        // OAuth callback endpoint
+        this.app.get('/oauth/callback', (req, res) => {
+            const { code, state, error, error_description } = req.query;
+            if (error) {
+                this.callbackResult = {
+                    code: '',
+                    error: error,
+                    error_description: error_description,
+                };
+                res.send(`
+          <html>
+            <head><title>OAuth Error</title></head>
+            <body style="font-family: Arial, sans-serif; padding: 40px; text-align: center;">
+              <h1 style="color: #d32f2f;">Authentication Failed</h1>
+              <p style="color: #666;">Error: ${error}</p>
+              <p style="color: #666;">${error_description || ''}</p>
+              <p style="margin-top: 40px; color: #999;">You can close this window.</p>
+            </body>
+          </html>
+        `);
+            }
+            else if (code) {
+                this.callbackResult = {
+                    code: code,
+                    state: state,
+                };
+                res.send(`
+          <html>
+            <head><title>OAuth Success</title></head>
+            <body style="font-family: Arial, sans-serif; padding: 40px; text-align: center;">
+              <h1 style="color: #4caf50;">✓ Authentication Successful</h1>
+              <p style="color: #666;">You have successfully authenticated with the MCP server.</p>
+              <p style="margin-top: 40px; color: #999;">You can close this window.</p>
+              <script>
+                setTimeout(() => window.close(), 3000);
+              </script>
+            </body>
+          </html>
+        `);
+            }
+            else {
+                this.callbackResult = {
+                    code: '',
+                    error: 'invalid_request',
+                    error_description: 'No code or error in callback',
+                };
+                res.status(400).send(`
+          <html>
+            <head><title>OAuth Error</title></head>
+            <body style="font-family: Arial, sans-serif; padding: 40px; text-align: center;">
+              <h1 style="color: #d32f2f;">Invalid Callback</h1>
+              <p style="color: #666;">The OAuth callback was missing required parameters.</p>
+              <p style="margin-top: 40px; color: #999;">You can close this window.</p>
+            </body>
+          </html>
+        `);
+            }
+            // Emit callback event
+            this.events.emit('callback', this.callbackResult);
+        });
+        // Health check endpoint
+        this.app.get('/health', (req, res) => {
+            res.json({ status: 'ok', port: this.port });
+        });
+    }
+    /**
+     * Start the callback server
+     */
+    async start(port) {
+        if (port) {
+            this.port = port;
+        }
+        if (this.server) {
+            throw new Error('Callback server is already running');
+        }
+        return new Promise((resolve, reject) => {
+            try {
+                this.server = this.app.listen(this.port, () => {
+                    console.log(`OAuth callback server listening on http://localhost:${this.port}`);
+                    resolve();
+                });
+                this.server.on('error', (error) => {
+                    if (error.code === 'EADDRINUSE') {
+                        reject(new Error(`Port ${this.port} is already in use. Please close other OAuth flows or choose a different port.`));
+                    }
+                    else {
+                        reject(error);
+                    }
+                });
+            }
+            catch (error) {
+                reject(error);
+            }
+        });
+    }
+    /**
+     * Stop the callback server
+     */
+    async stop() {
+        if (!this.server) {
+            return;
+        }
+        return new Promise((resolve, reject) => {
+            this.server.close((error) => {
+                if (error) {
+                    reject(error);
+                }
+                else {
+                    this.server = null;
+                    this.callbackResult = null;
+                    resolve();
+                }
+            });
+        });
+    }
+    /**
+     * Wait for OAuth callback
+     * @param timeout Timeout in milliseconds (default: 5 minutes)
+     */
+    async waitForCallback(timeout = 300000) {
+        return new Promise((resolve, reject) => {
+            const timeoutId = setTimeout(() => {
+                this.events.removeAllListeners('callback');
+                reject(new Error('OAuth callback timeout. User did not complete authentication.'));
+            }, timeout);
+            this.events.once('callback', (result) => {
+                clearTimeout(timeoutId);
+                if (result.error) {
+                    reject(new Error(`OAuth error: ${result.error}. ${result.error_description || ''}`));
+                }
+                else {
+                    resolve(result);
+                }
+            });
+        });
+    }
+    /**
+     * Get the callback URL
+     */
+    getCallbackUrl() {
+        return `http://localhost:${this.port}/oauth/callback`;
+    }
+    /**
+     * Get the current port
+     */
+    getPort() {
+        return this.port;
+    }
+    /**
+     * Check if server is running
+     */
+    isRunning() {
+        return this.server !== null;
+    }
+}

package/dist/src/oauth/mcp-oauth-manager.d.ts

@@ -0,0 +1,61 @@
+import { oRequest } from '@olane/o-core';
+import { oLaneTool } from '@olane/o-lane';
+import { oNodeToolConfig } from '@olane/o-node';
+import { ToolResult } from '@olane/o-tool';
+/**
+ * MCP OAuth Manager Tool
+ *
+ * Coordinates OAuth authentication flows for MCP servers:
+ * - Dynamic client registration (RFC 7591)
+ * - PKCE authorization flow
+ * - Token storage and refresh
+ * - Callback server management
+ */
+export declare class McpOAuthManager extends oLaneTool {
+    private storage;
+    private callbackServer;
+    private dynamicRegistration;
+    private oauthToolAddress;
+    constructor(config: oNodeToolConfig);
+    /**
+     * Authenticate with an OAuth-protected MCP server
+     */
+    _tool_authenticate_server(request: oRequest): Promise<ToolResult>;
+    /**
+     * Refresh OAuth tokens for an MCP server
+     */
+    _tool_refresh_tokens(request: oRequest): Promise<ToolResult>;
+    /**
+     * Check OAuth token status for an MCP server
+     */
+    _tool_check_tokens(request: oRequest): Promise<ToolResult>;
+    /**
+     * Clear OAuth tokens and client info for an MCP server
+     */
+    _tool_clear_tokens(request: oRequest): Promise<ToolResult>;
+    /**
+     * List all authenticated MCP servers
+     */
+    _tool_list_authenticated_servers(request: oRequest): Promise<ToolResult>;
+    /**
+     * Public method for refreshing tokens (used by transport)
+     */
+    refreshTokens(serverUrl: string): Promise<void>;
+    /**
+     * Get service name for OAuth tool
+     */
+    private getServiceName;
+    /**
+     * Hash server URL for service name
+     */
+    private hashServerUrl;
+    /**
+     * Launch browser for OAuth authorization
+     */
+    private launchBrowser;
+    /**
+     * Cleanup on shutdown
+     */
+    stop(): Promise<void>;
+}
+//# sourceMappingURL=mcp-oauth-manager.d.ts.map

package/dist/src/oauth/mcp-oauth-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-oauth-manager.d.ts","sourceRoot":"","sources":["../../../src/oauth/mcp-oauth-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,QAAQ,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAO3C;;;;;;;;GAQG;AACH,qBAAa,eAAgB,SAAQ,SAAS;IAC5C,OAAO,CAAC,OAAO,CAAkB;IACjC,OAAO,CAAC,cAAc,CAAuC;IAC7D,OAAO,CAAC,mBAAmB,CAAyB;IACpD,OAAO,CAAC,gBAAgB,CAAW;gBAEvB,MAAM,EAAE,eAAe;IAkBnC;;OAEG;IACG,yBAAyB,CAAC,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;IAyLvE;;OAEG;IACG,oBAAoB,CAAC,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;IAwClE;;OAEG;IACG,kBAAkB,CAAC,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;IAehE;;OAEG;IACG,kBAAkB,CAAC,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;IAahE;;OAEG;IACG,gCAAgC,CACpC,OAAO,EAAE,QAAQ,GAChB,OAAO,CAAC,UAAU,CAAC;IAWtB;;OAEG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAarD;;OAEG;IACH,OAAO,CAAC,cAAc;IAItB;;OAEG;IACH,OAAO,CAAC,aAAa;IAOrB;;OAEG;YACW,aAAa;IAY3B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAO5B"}