@peoplethread/saas-mcp 0.0.0-stage → 0.3.1

package/dist/react/McpDeveloperTokens.d.ts

@@ -0,0 +1,27 @@
+import type { McpManagementClient } from "../client/management.ts";
+import type { McpDeveloperTokenSummary, McpScopeDefinition, McpScopeValue } from "../core/types.ts";
+/** Props for the developer-tokens section. */
+export interface McpDeveloperTokensProps<S extends McpScopeValue = McpScopeValue> {
+    /** Product name used in placeholder copy. */
+    productName: string;
+    /** Workspace whose developer tokens are managed. */
+    workspace: {
+        id: string;
+        displayName?: string;
+    };
+    /** Current signed-in user creating and revoking tokens. */
+    user: {
+        id: string;
+    };
+    /** Product-supported MCP scopes offered during token creation. */
+    scopes: McpScopeDefinition<S>[];
+    /** Server-provided initial developer tokens for the workspace. */
+    initialDeveloperTokens: McpDeveloperTokenSummary<S>[];
+    /** Optional management client; defaults to `createMcpManagementClient`. */
+    managementClient?: McpManagementClient<S>;
+}
+/**
+ * Developer tokens: manually copied MCP bearer tokens for local agents,
+ * scripts, and debugging — create form, one-time secret reveal, list, revoke.
+ */
+export declare function McpDeveloperTokens<S extends McpScopeValue = McpScopeValue>({ productName, workspace, user, scopes, initialDeveloperTokens, managementClient, }: McpDeveloperTokensProps<S>): import("react/jsx-runtime").JSX.Element;

package/dist/react/McpDeveloperTokens.js

@@ -0,0 +1,46 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { KeyRound, Trash2 } from "lucide-react";
+import * as React from "react";
+import { Button, CopyField, SettingsSection } from "@peoplethread/saas-ui";
+import { cx, formatDate, ScopePills, statusLabel, useMcpManagementClient } from "./mcp-settings-shared.js";
+/**
+ * Developer tokens: manually copied MCP bearer tokens for local agents,
+ * scripts, and debugging — create form, one-time secret reveal, list, revoke.
+ */
+export function McpDeveloperTokens({ productName, workspace, user, scopes, initialDeveloperTokens, managementClient, }) {
+    const client = useMcpManagementClient(workspace.id, managementClient);
+    const [developerTokens, setDeveloperTokens] = React.useState(initialDeveloperTokens);
+    const [createdSecret, setCreatedSecret] = React.useState(null);
+    const [pendingId, setPendingId] = React.useState(null);
+    async function revokeDeveloperToken(tokenId) {
+        setPendingId(tokenId);
+        try {
+            const response = await client.revokeDeveloperToken(tokenId, { userId: user.id });
+            setDeveloperTokens((current) => current.map((token) => (token.tokenId === tokenId ? response.token : token)));
+        }
+        finally {
+            setPendingId(null);
+        }
+    }
+    async function createDeveloperToken(event) {
+        event.preventDefault();
+        const formElement = event.currentTarget;
+        const form = new FormData(formElement);
+        const selectedScopes = form.getAll("scopes").map(String);
+        const response = await client.createDeveloperToken({
+            userId: user.id,
+            name: String(form.get("name") ?? ""),
+            scopes: selectedScopes,
+            expiresInDays: Number(form.get("expiresInDays") ?? 30),
+        });
+        setDeveloperTokens((current) => [response.token, ...current.filter((token) => token.tokenId !== response.token.tokenId)]);
+        setCreatedSecret({ tokenId: response.token.tokenId, rawToken: response.rawToken });
+        formElement.reset();
+    }
+    const inputClass = "h-10 w-full rounded-[var(--ssui-radius)] border border-[color:var(--ssui-border)] bg-[color:var(--ssui-surface)] px-3 text-sm text-[color:var(--ssui-text)]";
+    return (_jsxs(SettingsSection, { description: "Manually copied bearer tokens for local agents, scripts, and debugging.", icon: _jsx(KeyRound, {}), title: "Access tokens", children: [_jsxs("form", { className: "grid gap-3 border-b border-[color:var(--ssui-border)] pb-4 md:grid-cols-[minmax(0,1fr)_auto_auto]", onSubmit: createDeveloperToken, children: [_jsxs("label", { className: "block", children: [_jsx("span", { className: "mb-1.5 block text-xs font-medium text-[color:var(--ssui-text-muted)]", children: "Token name" }), _jsx("input", { className: inputClass, name: "name", placeholder: `Local ${productName} token`, required: true })] }), _jsxs("label", { className: "block", children: [_jsx("span", { className: "mb-1.5 block text-xs font-medium text-[color:var(--ssui-text-muted)]", children: "Expiration" }), _jsxs("select", { className: cx(inputClass, "min-w-32"), defaultValue: "30", name: "expiresInDays", children: [_jsx("option", { value: "7", children: "7 days" }), _jsx("option", { value: "30", children: "30 days" }), _jsx("option", { value: "90", children: "90 days" })] })] }), _jsxs("div", { children: [_jsx("span", { className: "mb-1.5 block text-xs font-medium text-[color:var(--ssui-text-muted)]", children: "Scopes" }), _jsx("div", { className: "flex min-h-10 flex-wrap items-center gap-2", children: scopes.map((scope, index) => (_jsxs("label", { className: "flex items-center gap-1.5 text-xs text-[color:var(--ssui-text-muted)]", children: [_jsx("input", { defaultChecked: index === 0, name: "scopes", type: "checkbox", value: scope.scope }), scope.title] }, scope.scope))) })] }), _jsx("div", { className: "md:col-span-3", children: _jsxs(Button, { type: "submit", children: [_jsx(KeyRound, { className: "h-4 w-4" }), "Create token"] }) })] }), createdSecret && (_jsxs("div", { className: "mt-4 space-y-2 rounded-[var(--ssui-radius)] border border-[color:var(--ssui-border)] bg-[color:var(--ssui-surface-muted)] p-3", children: [_jsxs("div", { children: [_jsx("div", { className: "text-sm font-medium", children: "New token secret" }), _jsx("div", { className: "mt-1 text-xs text-[color:var(--ssui-text-muted)]", children: "This secret is shown only now." })] }), _jsx(CopyField, { label: "Access token", value: createdSecret.rawToken })] })), _jsxs("div", { className: "mt-4 divide-y divide-[color:var(--ssui-border)] rounded-[var(--ssui-radius)] border border-[color:var(--ssui-border)]", children: [developerTokens.length === 0 && (_jsx("div", { className: "px-3 py-6 text-center text-sm text-[color:var(--ssui-text-muted)]", children: "No access tokens have been created." })), developerTokens.map((token) => {
+                        const status = statusLabel(token);
+                        return (_jsxs("div", { className: "grid gap-3 px-3 py-3 md:grid-cols-[minmax(0,1fr)_auto]", children: [_jsxs("div", { className: "min-w-0", children: [_jsxs("div", { className: "flex flex-wrap items-center gap-2", children: [_jsx("span", { className: "font-medium", children: token.name }), _jsxs("span", { className: cx("inline-flex items-center gap-1 rounded-md px-1.5 py-0.5 text-xs", status.className), children: [_jsx(status.Icon, { className: "h-3 w-3" }), status.label] })] }), _jsx("div", { className: "mt-2", children: _jsx(ScopePills, { scopes: token.scopes }) }), _jsxs("div", { className: "mt-2 grid gap-1 text-xs text-[color:var(--ssui-text-muted)] md:grid-cols-3", children: [_jsxs("div", { children: ["Created: ", formatDate(token.createdAt)] }), _jsxs("div", { children: ["Expires: ", formatDate(token.expiresAt)] }), _jsxs("div", { children: ["Last used: ", formatDate(token.lastUsedAt)] })] })] }), _jsxs(Button, { disabled: Boolean(token.revokedAt) || pendingId === token.tokenId, onClick: () => void revokeDeveloperToken(token.tokenId), title: "Revoke access token", type: "button", variant: "ghost", children: [_jsx(Trash2, { className: "h-4 w-4" }), "Revoke"] })] }, token.tokenId));
+                    })] })] }));
+}

package/dist/react/McpToolReference.d.ts

@@ -0,0 +1,17 @@
+import type { McpPromptDescriptor, McpResourceDescriptor, McpScopeDefinition, McpScopeValue, McpToolDescriptor } from "../core/types.ts";
+/** Props for the full tools & capabilities reference. */
+export interface McpToolReferenceProps<S extends McpScopeValue = McpScopeValue> {
+    /** Product-supported MCP scopes with descriptions. */
+    scopes: McpScopeDefinition<S>[];
+    /** Product-owned MCP tool descriptors; grouped by read/write, with anything else under "Other". */
+    tools: McpToolDescriptor<S>[];
+    /** MCP resources exposed by the product. */
+    resources?: McpResourceDescriptor<S>[];
+    /** MCP prompts exposed by the product. */
+    prompts?: McpPromptDescriptor<S>[];
+}
+/**
+ * Full reference for the MCP surface: scopes, tools grouped by read/write, and
+ * any resources and prompts. Presentational — reflects the current registry.
+ */
+export declare function McpToolReference<S extends McpScopeValue = McpScopeValue>({ scopes, tools, resources, prompts, }: McpToolReferenceProps<S>): import("react/jsx-runtime").JSX.Element;

package/dist/react/McpToolReference.js

@@ -0,0 +1,19 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import * as React from "react";
+import { SettingsSection } from "@peoplethread/saas-ui";
+/**
+ * Full reference for the MCP surface: scopes, tools grouped by read/write, and
+ * any resources and prompts. Presentational — reflects the current registry.
+ */
+export function McpToolReference({ scopes, tools, resources = [], prompts = [], }) {
+    // Every tool must land in exactly one group so nothing is silently dropped:
+    // tools without a read/write activity kind (e.g. `management` or unset) fall
+    // into "Other", which only renders when it has members.
+    const otherTools = tools.filter((tool) => tool.activityKind !== "read" && tool.activityKind !== "write");
+    const toolGroups = [
+        { label: "Read", group: tools.filter((tool) => tool.activityKind === "read") },
+        { label: "Write", group: tools.filter((tool) => tool.activityKind === "write") },
+        ...(otherTools.length > 0 ? [{ label: "Other", group: otherTools }] : []),
+    ];
+    return (_jsxs("div", { className: "space-y-5", children: [_jsx(SettingsSection, { description: "Permissions an AI client requests and you approve during connection.", title: "Scopes", children: _jsx("div", { className: "space-y-2", children: scopes.map((scope) => (_jsxs("div", { className: "rounded-[var(--ssui-radius)] border border-[color:var(--ssui-border)] p-3", children: [_jsx("div", { className: "text-sm font-medium", children: scope.title }), _jsx("div", { className: "mt-1 text-xs text-[color:var(--ssui-text-muted)]", children: scope.description }), _jsx("div", { className: "mt-2 font-mono text-xs text-[color:var(--ssui-text-subtle)]", children: scope.scope })] }, scope.scope))) }) }), _jsx(SettingsSection, { description: "Every tool an AI client can call, grouped by read and write behavior (other tools listed under Other).", title: "Tools", children: _jsx("div", { className: "grid gap-2", children: toolGroups.map(({ label, group }) => (_jsxs("div", { className: "rounded-[var(--ssui-radius)] border border-[color:var(--ssui-border)]", children: [_jsx("div", { className: "border-b border-[color:var(--ssui-border)] px-3 py-2 text-xs font-medium uppercase text-[color:var(--ssui-text-muted)]", children: label }), _jsx("div", { className: "divide-y divide-[color:var(--ssui-border)]", children: group.length === 0 ? (_jsxs("div", { className: "px-3 py-2 text-xs text-[color:var(--ssui-text-muted)]", children: ["No ", label.toLowerCase(), " tools."] })) : (group.map((tool) => (_jsxs("div", { className: "px-3 py-2", children: [_jsx("div", { className: "text-sm font-medium", children: tool.title }), _jsx("div", { className: "mt-1 text-xs text-[color:var(--ssui-text-muted)]", children: tool.description }), _jsx("div", { className: "mt-1 font-mono text-xs text-[color:var(--ssui-text-subtle)]", children: tool.name })] }, tool.name)))) })] }, label))) }) }), (resources.length > 0 || prompts.length > 0) && (_jsxs("div", { className: "grid gap-5 md:grid-cols-2", children: [resources.length > 0 && (_jsx(SettingsSection, { description: "Cacheable context an AI client can read.", title: "Resources", children: _jsx("div", { className: "divide-y divide-[color:var(--ssui-border)] rounded-[var(--ssui-radius)] border border-[color:var(--ssui-border)]", children: resources.map((resource) => (_jsxs("div", { className: "px-3 py-2", children: [_jsx("div", { className: "text-sm font-medium", children: resource.title }), _jsx("div", { className: "mt-1 text-xs text-[color:var(--ssui-text-muted)]", children: resource.description }), _jsx("div", { className: "mt-1 font-mono text-xs text-[color:var(--ssui-text-subtle)]", children: resource.uri })] }, resource.uri))) }) })), prompts.length > 0 && (_jsx(SettingsSection, { description: "Guided workflows an AI client can invoke.", title: "Prompts", children: _jsx("div", { className: "divide-y divide-[color:var(--ssui-border)] rounded-[var(--ssui-radius)] border border-[color:var(--ssui-border)]", children: prompts.map((prompt) => (_jsxs("div", { className: "px-3 py-2", children: [_jsx("div", { className: "text-sm font-medium", children: prompt.title }), _jsx("div", { className: "mt-1 text-xs text-[color:var(--ssui-text-muted)]", children: prompt.description }), _jsx("div", { className: "mt-1 font-mono text-xs text-[color:var(--ssui-text-subtle)]", children: prompt.name })] }, prompt.name))) }) }))] }))] }));
+}

package/dist/react/index.d.ts

@@ -0,0 +1,6 @@
+export * from "./McpConsentPanel.tsx";
+export * from "./McpConnectorOverview.tsx";
+export * from "./McpConnectedClients.tsx";
+export * from "./McpDeveloperTokens.tsx";
+export * from "./McpToolReference.tsx";
+export * from "./McpActivity.tsx";

package/dist/react/index.js

@@ -0,0 +1,6 @@
+export * from "./McpConsentPanel.js";
+export * from "./McpConnectorOverview.js";
+export * from "./McpConnectedClients.js";
+export * from "./McpDeveloperTokens.js";
+export * from "./McpToolReference.js";
+export * from "./McpActivity.js";

package/dist/react/mcp-settings-shared.d.ts

@@ -0,0 +1,29 @@
+import { Check } from "lucide-react";
+import { type McpManagementClient } from "../client/management.ts";
+import type { McpScopeValue } from "../core/types.ts";
+/** Join truthy class fragments. */
+export declare function cx(...values: Array<string | false | null | undefined>): string;
+/** Format an ISO timestamp for settings tables, or "Never" when absent. */
+export declare function formatDate(value: string | null | undefined): string;
+/** Derive a status pill (label, classes, icon) for a token or connection. */
+export declare function statusLabel(item: {
+    revokedAt: string | null;
+    expired?: boolean;
+}): {
+    label: string;
+    className: string;
+    Icon: typeof Check;
+};
+/** Compact list of scope strings rendered as monospace pills. */
+export declare function ScopePills<S extends McpScopeValue>({ scopes }: {
+    scopes: readonly S[];
+}): import("react/jsx-runtime").JSX.Element;
+/** Pretty-printed JSON block used for audit metadata. */
+export declare function JsonBlock({ value }: {
+    value: unknown;
+}): import("react/jsx-runtime").JSX.Element;
+/**
+ * Resolve the management client for a section: prefer an explicitly provided
+ * client, otherwise create one bound to the workspace's default routes.
+ */
+export declare function useMcpManagementClient<S extends McpScopeValue = McpScopeValue>(workspaceId: string, managementClient?: McpManagementClient<S>): McpManagementClient<S>;

package/dist/react/mcp-settings-shared.js

@@ -0,0 +1,37 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { Check, XCircle } from "lucide-react";
+import * as React from "react";
+import { createMcpManagementClient } from "../client/management.js";
+/** Join truthy class fragments. */
+export function cx(...values) {
+    return values.filter(Boolean).join(" ");
+}
+/** Format an ISO timestamp for settings tables, or "Never" when absent. */
+export function formatDate(value) {
+    if (!value)
+        return "Never";
+    return new Intl.DateTimeFormat(undefined, { dateStyle: "medium", timeStyle: "short" }).format(new Date(value));
+}
+/** Derive a status pill (label, classes, icon) for a token or connection. */
+export function statusLabel(item) {
+    if (item.revokedAt)
+        return { label: "Revoked", className: "bg-red-100 text-red-700", Icon: XCircle };
+    if (item.expired)
+        return { label: "Expired", className: "bg-zinc-100 text-zinc-600", Icon: XCircle };
+    return { label: "Active", className: "bg-emerald-100 text-emerald-700", Icon: Check };
+}
+/** Compact list of scope strings rendered as monospace pills. */
+export function ScopePills({ scopes }) {
+    return (_jsx("div", { className: "flex flex-wrap gap-1", children: scopes.map((scope) => (_jsx("span", { className: "rounded border border-[color:var(--ssui-border)] bg-[color:var(--ssui-surface-muted)] px-1.5 py-0.5 font-mono text-xs text-[color:var(--ssui-text-muted)]", children: scope }, scope))) }));
+}
+/** Pretty-printed JSON block used for audit metadata. */
+export function JsonBlock({ value }) {
+    return (_jsx("pre", { className: "max-h-56 overflow-auto rounded-[var(--ssui-radius)] border border-[color:var(--ssui-border)] bg-[color:var(--ssui-surface-muted)] p-3 font-mono text-xs text-[color:var(--ssui-text-muted)]", children: JSON.stringify(value, null, 2) }));
+}
+/**
+ * Resolve the management client for a section: prefer an explicitly provided
+ * client, otherwise create one bound to the workspace's default routes.
+ */
+export function useMcpManagementClient(workspaceId, managementClient) {
+    return React.useMemo(() => managementClient ?? createMcpManagementClient({ workspaceId }), [managementClient, workspaceId]);
+}

package/package.json

@@ -1,6 +1,101 @@
 {
   "name": "@peoplethread/saas-mcp",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.3.1",
+  "description": "Shared MCP contracts, OAuth helpers, Hono route plumbing, management client, and React UI for ForwardReach SaaS applications.",
+  "type": "module",
+  "private": false,
+  "license": "UNLICENSED",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/peoplethread/peoplethread.git",
+    "directory": "packages/saas-mcp"
+  },
+  "homepage": "https://github.com/peoplethread/peoplethread/tree/main/packages/saas-mcp#readme",
+  "bugs": {
+    "url": "https://github.com/peoplethread/peoplethread/issues"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./core": {
+      "types": "./dist/core/index.d.ts",
+      "import": "./dist/core/index.js"
+    },
+    "./client": {
+      "types": "./dist/client/index.d.ts",
+      "import": "./dist/client/index.js"
+    },
+    "./react": {
+      "types": "./dist/react/index.d.ts",
+      "import": "./dist/react/index.js"
+    },
+    "./node": {
+      "types": "./dist/node/index.d.ts",
+      "import": "./dist/node/index.js"
+    },
+    "./hono": {
+      "types": "./dist/hono/index.d.ts",
+      "import": "./dist/hono/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "peerDependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "@peoplethread/saas-ui": ">=0.4.0 <1",
+    "better-auth": "^1.6.10",
+    "hono": "^4.10.3",
+    "react": "^19.0.0",
+    "react-dom": "^19.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@modelcontextprotocol/sdk": {
+      "optional": true
+    },
+    "better-auth": {
+      "optional": true
+    },
+    "hono": {
+      "optional": true
+    }
+  },
+  "dependencies": {
+    "lucide-react": "^0.468.0",
+    "zod": "^4.4.3"
+  },
+  "devDependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "@testing-library/react": "^16.3.0",
+    "@types/node": "^24.9.2",
+    "@types/react": "^19.2.2",
+    "@types/react-dom": "^19.2.2",
+    "better-auth": "^1.6.10",
+    "hono": "^4.12.29",
+    "jsdom": "^26.1.0",
+    "rimraf": "^6.0.1",
+    "typescript": "^5.9.3",
+    "vitest": "^3.2.4",
+    "@peoplethread/saas-ui": "0.14.1"
+  },
+  "gitHead": "138aadb33172fa065e8db02c19e0754b1d64abbf",
+  "packedFromDirtyTree": true,
+  "packedAt": "2026-10-15T05:08:06.264Z",
+  "scripts": {
+    "build": "pnpm clean && tsc -p tsconfig.build.json",
+    "dev": "tsc -p tsconfig.build.json --watch",
+    "clean": "rimraf dist coverage dist-pack *.tgz",
+    "pack:local": "pnpm build && mkdir -p dist-pack && pnpm pack --out dist-pack/peoplethread-saas-mcp-local.tgz",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit"
+  }
 }