@reftrixmcp/mcp-server 0.1.7

package/dist/middleware/auth.js

@@ -0,0 +1,430 @@
+"use strict";
+// SPDX-FileCopyrightText: 2026 TKMD and Reftrix Contributors
+// SPDX-License-Identifier: AGPL-3.0-only
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PUBLIC_TOOLS = exports.TOOL_PERMISSIONS = exports.ROLES = exports.PERMISSIONS = void 0;
+exports.validateApiKey = validateApiKey;
+exports.checkPermission = checkPermission;
+exports.createAuthMiddleware = createAuthMiddleware;
+/**
+ * MCP Server - 認証ミドルウェア
+ *
+ * SEC監査対応: CWE-306 (Missing Authentication for Critical Function)
+ * CVSS Score: 7.5 (High)
+ *
+ * このモジュールはMCPサーバーの認証・認可機能を提供します。
+ * Phase 1: APIキー認証
+ * Phase 2: JWT認証（将来実装）
+ *
+ * @module middleware/auth
+ */
+const crypto_1 = require("crypto");
+const logger_1 = require("../utils/logger");
+// ============================================================================
+// パーミッション定義
+// ============================================================================
+/**
+ * パーミッション定義（WebDesign専用）
+ * 全パーミッションの一覧
+ */
+exports.PERMISSIONS = {
+    // システム系
+    SYSTEM_READ: "system:read",
+    SYSTEM_HEALTH: "system:health",
+    SYSTEM_ADMIN: "system:admin",
+    // レイアウト系
+    LAYOUT_READ: "layout:read",
+    LAYOUT_WRITE: "layout:write",
+    LAYOUT_TRANSFORM: "layout:transform",
+    // モーション系
+    MOTION_READ: "motion:read",
+    MOTION_TRANSFORM: "motion:transform",
+    // 品質系
+    QUALITY_READ: "quality:read",
+    QUALITY_WRITE: "quality:write",
+    // プロジェクト系
+    PROJECT_READ: "project:read",
+    // デザイン系
+    DESIGN_REVIEW: "design:review",
+    DESIGN_WRITE: "design:write",
+    // スタイル系
+    STYLE_READ: "style:read",
+    // ナラティブ系
+    NARRATIVE_READ: "narrative:read",
+    // バックグラウンド系
+    BACKGROUND_READ: "background:read",
+    // レスポンシブ系
+    RESPONSIVE_READ: "responsive:read",
+    // 嗜好プロファイリング系
+    PREFERENCE_READ: "preference:read",
+    PREFERENCE_WRITE: "preference:write",
+};
+/**
+ * ロールごとのパーミッション（WebDesign専用）
+ */
+exports.ROLES = {
+    VIEWER: [
+        exports.PERMISSIONS.SYSTEM_READ,
+        exports.PERMISSIONS.SYSTEM_HEALTH,
+        exports.PERMISSIONS.LAYOUT_READ,
+        exports.PERMISSIONS.MOTION_READ,
+        exports.PERMISSIONS.QUALITY_READ,
+        exports.PERMISSIONS.PROJECT_READ,
+        exports.PERMISSIONS.STYLE_READ,
+        exports.PERMISSIONS.NARRATIVE_READ,
+        exports.PERMISSIONS.BACKGROUND_READ,
+        exports.PERMISSIONS.RESPONSIVE_READ,
+        exports.PERMISSIONS.PREFERENCE_READ,
+    ],
+    USER: [
+        exports.PERMISSIONS.SYSTEM_READ,
+        exports.PERMISSIONS.SYSTEM_HEALTH,
+        exports.PERMISSIONS.LAYOUT_READ,
+        exports.PERMISSIONS.LAYOUT_TRANSFORM,
+        exports.PERMISSIONS.MOTION_READ,
+        exports.PERMISSIONS.MOTION_TRANSFORM,
+        exports.PERMISSIONS.QUALITY_READ,
+        exports.PERMISSIONS.QUALITY_WRITE,
+        exports.PERMISSIONS.PROJECT_READ,
+        exports.PERMISSIONS.DESIGN_REVIEW,
+        exports.PERMISSIONS.STYLE_READ,
+        exports.PERMISSIONS.NARRATIVE_READ,
+        exports.PERMISSIONS.BACKGROUND_READ,
+        exports.PERMISSIONS.RESPONSIVE_READ,
+        exports.PERMISSIONS.PREFERENCE_READ,
+        exports.PERMISSIONS.PREFERENCE_WRITE,
+    ],
+    ADMIN: [
+        exports.PERMISSIONS.SYSTEM_READ,
+        exports.PERMISSIONS.SYSTEM_HEALTH,
+        exports.PERMISSIONS.SYSTEM_ADMIN,
+        exports.PERMISSIONS.LAYOUT_READ,
+        exports.PERMISSIONS.LAYOUT_WRITE,
+        exports.PERMISSIONS.LAYOUT_TRANSFORM,
+        exports.PERMISSIONS.MOTION_READ,
+        exports.PERMISSIONS.MOTION_TRANSFORM,
+        exports.PERMISSIONS.QUALITY_READ,
+        exports.PERMISSIONS.QUALITY_WRITE,
+        exports.PERMISSIONS.PROJECT_READ,
+        exports.PERMISSIONS.DESIGN_REVIEW,
+        exports.PERMISSIONS.DESIGN_WRITE,
+        exports.PERMISSIONS.STYLE_READ,
+        exports.PERMISSIONS.NARRATIVE_READ,
+        exports.PERMISSIONS.BACKGROUND_READ,
+        exports.PERMISSIONS.RESPONSIVE_READ,
+        exports.PERMISSIONS.PREFERENCE_READ,
+        exports.PERMISSIONS.PREFERENCE_WRITE,
+    ],
+};
+/**
+ * ツールごとの必要パーミッション（WebDesign専用）
+ */
+exports.TOOL_PERMISSIONS = {
+    // スタイル系
+    "style.get_palette": [exports.PERMISSIONS.STYLE_READ],
+    // レイアウト系
+    "layout.inspect": [exports.PERMISSIONS.LAYOUT_READ],
+    "layout.search": [exports.PERMISSIONS.LAYOUT_READ],
+    "layout.ingest": [exports.PERMISSIONS.LAYOUT_WRITE],
+    "layout.generate_code": [exports.PERMISSIONS.LAYOUT_TRANSFORM],
+    "layout.batch_ingest": [exports.PERMISSIONS.LAYOUT_WRITE],
+    // 品質系
+    "quality.evaluate": [exports.PERMISSIONS.QUALITY_READ],
+    "quality.batch_evaluate": [exports.PERMISSIONS.QUALITY_READ],
+    "quality.getJobStatus": [exports.PERMISSIONS.QUALITY_READ],
+    // モーション系
+    "motion.detect": [exports.PERMISSIONS.MOTION_READ],
+    "motion.search": [exports.PERMISSIONS.MOTION_READ],
+    // ナラティブ系（セマンティック検索）
+    "narrative.search": [exports.PERMISSIONS.NARRATIVE_READ],
+    // バックグラウンド系（セマンティック検索）
+    "background.search": [exports.PERMISSIONS.BACKGROUND_READ],
+    // レスポンシブ系（セマンティック検索）
+    "responsive.search": [exports.PERMISSIONS.RESPONSIVE_READ],
+    // 嗜好プロファイリング系
+    "preference.hear": [exports.PERMISSIONS.PREFERENCE_WRITE],
+    "preference.get": [exports.PERMISSIONS.PREFERENCE_READ],
+    "preference.reset": [exports.PERMISSIONS.PREFERENCE_WRITE],
+    // ブリーフ系（デザインレビュー）
+    "brief.validate": [exports.PERMISSIONS.DESIGN_REVIEW],
+    // プロジェクト系
+    "project.get": [exports.PERMISSIONS.PROJECT_READ],
+    "project.list": [exports.PERMISSIONS.PROJECT_READ],
+    // パーツ系（Part-Level Analysis）
+    "part.search": [exports.PERMISSIONS.LAYOUT_READ],
+    "part.inspect": [exports.PERMISSIONS.LAYOUT_READ],
+    "part.compare": [exports.PERMISSIONS.LAYOUT_READ],
+    // ページ系（統合Web分析）
+    "page.analyze": [exports.PERMISSIONS.LAYOUT_READ, exports.PERMISSIONS.MOTION_READ, exports.PERMISSIONS.QUALITY_READ],
+    "page.getJobStatus": [exports.PERMISSIONS.LAYOUT_READ],
+    // システム系（公開ツール）
+    "system.health": [exports.PERMISSIONS.SYSTEM_HEALTH],
+};
+/**
+ * デフォルトの公開ツール（認証不要）
+ * 注意: allToolDefinitions に登録されているツールのみを含めること
+ */
+exports.PUBLIC_TOOLS = ["system.health"];
+// ============================================================================
+// テスト用APIキー定義（開発環境のみ）
+// ============================================================================
+/**
+ * テスト用APIキーとロールのマッピング
+ *
+ * セキュリティ: 本番環境（NODE_ENV=production）ではテスト用キーは無効化されます。
+ * 本番環境では必ず MCP_API_KEYS 環境変数で認証情報を設定してください。
+ */
+const TEST_API_KEY_MAPPINGS = (0, logger_1.isDevelopment)()
+    ? {
+        reftrix_admin_test_key_12345678: {
+            role: "ADMIN",
+            userId: "admin-user-001",
+        },
+        reftrix_user_test_key_87654321: {
+            role: "USER",
+            userId: "standard-user-001",
+        },
+        reftrix_viewer_test_key_11111111: {
+            role: "VIEWER",
+            userId: "viewer-user-001",
+        },
+        reftrix_expired_test_key_99999999: {
+            role: "USER",
+            userId: "expired-user-001",
+            expired: true,
+        },
+    }
+    : {}; // 本番環境ではテスト用キーは空
+// ============================================================================
+// 認証関数
+// ============================================================================
+/**
+ * 定数時間でAPIキーを比較する（タイミング攻撃対策）
+ *
+ * @param provided - 提供されたAPIキー
+ * @param stored - 保存されているAPIキー
+ * @returns 一致する場合はtrue
+ */
+function safeCompareApiKey(provided, stored) {
+    // 異なる長さの場合でも定数時間で処理
+    const providedBuffer = Buffer.from(provided);
+    const storedBuffer = Buffer.from(stored);
+    // 長さが異なる場合は、同じ長さのダミー比較を行う
+    if (providedBuffer.length !== storedBuffer.length) {
+        // ダミー比較（タイミング攻撃対策）
+        (0, crypto_1.timingSafeEqual)(providedBuffer, providedBuffer);
+        return false;
+    }
+    return (0, crypto_1.timingSafeEqual)(providedBuffer, storedBuffer);
+}
+/**
+ * APIキーを検証してAuthContextを返す
+ *
+ * @param apiKey - 検証するAPIキー
+ * @returns 認証成功時はAuthContext、失敗時はnull
+ */
+async function validateApiKey(apiKey) {
+    // APIキーが提供されていない場合
+    if (!apiKey) {
+        if ((0, logger_1.isDevelopment)()) {
+            logger_1.logger.debug("[Auth] API key not provided");
+        }
+        return null;
+    }
+    // APIキー形式の検証（reftrix_ プレフィックスで始まること）
+    if (!apiKey.startsWith("reftrix_")) {
+        if ((0, logger_1.isDevelopment)()) {
+            logger_1.logger.debug("[Auth] Invalid API key format");
+        }
+        return null;
+    }
+    // テスト用APIキーのチェック（定数時間比較）
+    // 全てのテスト用キーと比較し、タイミング攻撃を防止
+    let matchedMapping = null;
+    for (const [storedKey, mapping] of Object.entries(TEST_API_KEY_MAPPINGS)) {
+        if (safeCompareApiKey(apiKey, storedKey)) {
+            matchedMapping = mapping;
+            break;
+        }
+    }
+    if (matchedMapping) {
+        // 期限切れチェック
+        if (matchedMapping.expired) {
+            if ((0, logger_1.isDevelopment)()) {
+                logger_1.logger.debug("[Auth] API key expired");
+            }
+            return null;
+        }
+        return {
+            userId: matchedMapping.userId,
+            role: matchedMapping.role,
+            permissions: exports.ROLES[matchedMapping.role],
+            authMethod: "api_key",
+            authenticatedAt: new Date(),
+        };
+    }
+    // 環境変数から追加のAPIキーをチェック（本番環境向け、定数時間比較）
+    const envApiKeys = process.env.MCP_API_KEYS;
+    if (envApiKeys) {
+        try {
+            const keys = JSON.parse(envApiKeys);
+            // 定数時間比較で全てのキーをチェック
+            const keyConfig = keys.find((k) => safeCompareApiKey(apiKey, k.key));
+            if (keyConfig) {
+                // 有効期限チェック
+                if (keyConfig.expiresAt) {
+                    const expiresAt = new Date(keyConfig.expiresAt);
+                    if (expiresAt < new Date()) {
+                        if ((0, logger_1.isDevelopment)()) {
+                            logger_1.logger.debug("[Auth] API key expired (from env)");
+                        }
+                        return null;
+                    }
+                }
+                return {
+                    userId: keyConfig.userId,
+                    role: keyConfig.role,
+                    permissions: exports.ROLES[keyConfig.role],
+                    authMethod: "api_key",
+                    authenticatedAt: new Date(),
+                };
+            }
+        }
+        catch {
+            logger_1.logger.warn("[Auth] Failed to parse MCP_API_KEYS environment variable. " +
+                'Expected JSON array: [{"key":"reftrix_...","role":"ADMIN","userId":"..."}]');
+            if ((0, logger_1.isDevelopment)()) {
+                logger_1.logger.error("[Auth] MCP_API_KEYS parse error. Current value: %s", envApiKeys.slice(0, 50) + (envApiKeys.length > 50 ? "..." : ""));
+            }
+        }
+    }
+    // 有効なキーが見つからない場合
+    if ((0, logger_1.isDevelopment)()) {
+        logger_1.logger.debug("[Auth] API key not found in valid keys");
+    }
+    return null;
+}
+/**
+ * 認証コンテキストがツールに対する権限を持つかチェック
+ *
+ * deny-by-default ポリシー:
+ * - TOOL_PERMISSIONS に定義されていないツールは拒否
+ * - これにより未登録ツールへの不正アクセスを防止
+ *
+ * @param context - 認証コンテキスト
+ * @param toolName - ツール名
+ * @returns 権限がある場合はtrue
+ */
+function checkPermission(context, toolName) {
+    // deny-by-default: TOOL_PERMISSIONS に未定義のツールは拒否
+    if (!(toolName in exports.TOOL_PERMISSIONS)) {
+        if ((0, logger_1.isDevelopment)()) {
+            logger_1.logger.warn("[Auth] Unknown tool rejected (deny-by-default)", { toolName });
+        }
+        return false;
+    }
+    const requiredPermissions = exports.TOOL_PERMISSIONS[toolName];
+    // ツールが定義されていない場合はfalse（deny-by-default）
+    if (!requiredPermissions) {
+        if (process.env.NODE_ENV === "development") {
+            logger_1.logger.warn("[Auth] Tool not found in TOOL_PERMISSIONS", { toolName });
+        }
+        return false;
+    }
+    // 必要なパーミッションが空の場合（公開ツール相当）は許可
+    if (requiredPermissions.length === 0) {
+        return true;
+    }
+    // ADMINは全権限を持つ
+    if (context.role === "ADMIN") {
+        return true;
+    }
+    // 必要なパーミッションのいずれかを持っているか確認
+    return requiredPermissions.some((perm) => context.permissions.includes(perm));
+}
+// ============================================================================
+// ミドルウェアファクトリ
+// ============================================================================
+/**
+ * 認証ミドルウェアを作成
+ *
+ * @param options - オプション設定
+ * @returns 認証ミドルウェアインスタンス
+ */
+function createAuthMiddleware(options) {
+    const resolvedOptions = {
+        enabled: options?.enabled ?? false,
+        publicTools: options?.publicTools ?? exports.PUBLIC_TOOLS,
+    };
+    /**
+     * 認証チェック関数
+     */
+    const checkAuth = async (toolName, apiKey) => {
+        // 認証無効時はスキップ
+        if (!resolvedOptions.enabled) {
+            if ((0, logger_1.isDevelopment)()) {
+                logger_1.logger.debug("[Auth] Authentication disabled, skipping check");
+            }
+            return { success: true };
+        }
+        // 公開ツールは認証不要
+        if (resolvedOptions.publicTools.includes(toolName)) {
+            if ((0, logger_1.isDevelopment)()) {
+                logger_1.logger.debug(`[Auth] Public tool: ${toolName}, skipping authentication`);
+            }
+            return { success: true };
+        }
+        // APIキー検証
+        const context = await validateApiKey(apiKey);
+        if (!context) {
+            if ((0, logger_1.isDevelopment)()) {
+                logger_1.logger.warn("[Auth] Authentication failed", {
+                    tool: toolName,
+                    reason: "INVALID_OR_MISSING_KEY",
+                });
+            }
+            return {
+                success: false,
+                error: {
+                    code: "UNAUTHORIZED",
+                    message: "Authentication required",
+                },
+            };
+        }
+        // 権限チェック
+        if (!checkPermission(context, toolName)) {
+            if ((0, logger_1.isDevelopment)()) {
+                logger_1.logger.warn("[Auth] Authorization denied", {
+                    tool: toolName,
+                    role: context.role,
+                    requiredPermissions: exports.TOOL_PERMISSIONS[toolName],
+                    userPermissions: context.permissions,
+                });
+            }
+            return {
+                success: false,
+                error: {
+                    code: "FORBIDDEN",
+                    message: "Insufficient permissions",
+                },
+            };
+        }
+        // 認証成功
+        if ((0, logger_1.isDevelopment)()) {
+            logger_1.logger.info("[Auth] Authentication successful", {
+                tool: toolName,
+                userId: context.userId,
+                role: context.role,
+            });
+        }
+        return {
+            success: true,
+            context,
+        };
+    };
+    return {
+        checkAuth,
+        options: resolvedOptions,
+    };
+}
+//# sourceMappingURL=auth.js.map

package/dist/middleware/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":";AAAA,6DAA6D;AAC7D,yCAAyC;;;AAiUzC,wCAiGC;AAaD,0CA+BC;AAYD,oDAkFC;AA1iBD;;;;;;;;;;;GAWG;AAEH,mCAAyC;AACzC,4CAAwD;AA4ExD,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E;;;GAGG;AACU,QAAA,WAAW,GAAG;IACzB,QAAQ;IACR,WAAW,EAAE,aAAa;IAC1B,aAAa,EAAE,eAAe;IAC9B,YAAY,EAAE,cAAc;IAC5B,SAAS;IACT,WAAW,EAAE,aAAa;IAC1B,YAAY,EAAE,cAAc;IAC5B,gBAAgB,EAAE,kBAAkB;IACpC,SAAS;IACT,WAAW,EAAE,aAAa;IAC1B,gBAAgB,EAAE,kBAAkB;IACpC,MAAM;IACN,YAAY,EAAE,cAAc;IAC5B,aAAa,EAAE,eAAe;IAC9B,UAAU;IACV,YAAY,EAAE,cAAc;IAC5B,QAAQ;IACR,aAAa,EAAE,eAAe;IAC9B,YAAY,EAAE,cAAc;IAC5B,QAAQ;IACR,UAAU,EAAE,YAAY;IACxB,SAAS;IACT,cAAc,EAAE,gBAAgB;IAChC,YAAY;IACZ,eAAe,EAAE,iBAAiB;IAClC,UAAU;IACV,eAAe,EAAE,iBAAiB;IAClC,cAAc;IACd,eAAe,EAAE,iBAAiB;IAClC,gBAAgB,EAAE,kBAAkB;CAC5B,CAAC;AAIX;;GAEG;AACU,QAAA,KAAK,GAA2B;IAC3C,MAAM,EAAE;QACN,mBAAW,CAAC,WAAW;QACvB,mBAAW,CAAC,aAAa;QACzB,mBAAW,CAAC,WAAW;QACvB,mBAAW,CAAC,WAAW;QACvB,mBAAW,CAAC,YAAY;QACxB,mBAAW,CAAC,YAAY;QACxB,mBAAW,CAAC,UAAU;QACtB,mBAAW,CAAC,cAAc;QAC1B,mBAAW,CAAC,eAAe;QAC3B,mBAAW,CAAC,eAAe;QAC3B,mBAAW,CAAC,eAAe;KAC5B;IACD,IAAI,EAAE;QACJ,mBAAW,CAAC,WAAW;QACvB,mBAAW,CAAC,aAAa;QACzB,mBAAW,CAAC,WAAW;QACvB,mBAAW,CAAC,gBAAgB;QAC5B,mBAAW,CAAC,WAAW;QACvB,mBAAW,CAAC,gBAAgB;QAC5B,mBAAW,CAAC,YAAY;QACxB,mBAAW,CAAC,aAAa;QACzB,mBAAW,CAAC,YAAY;QACxB,mBAAW,CAAC,aAAa;QACzB,mBAAW,CAAC,UAAU;QACtB,mBAAW,CAAC,cAAc;QAC1B,mBAAW,CAAC,eAAe;QAC3B,mBAAW,CAAC,eAAe;QAC3B,mBAAW,CAAC,eAAe;QAC3B,mBAAW,CAAC,gBAAgB;KAC7B;IACD,KAAK,EAAE;QACL,mBAAW,CAAC,WAAW;QACvB,mBAAW,CAAC,aAAa;QACzB,mBAAW,CAAC,YAAY;QACxB,mBAAW,CAAC,WAAW;QACvB,mBAAW,CAAC,YAAY;QACxB,mBAAW,CAAC,gBAAgB;QAC5B,mBAAW,CAAC,WAAW;QACvB,mBAAW,CAAC,gBAAgB;QAC5B,mBAAW,CAAC,YAAY;QACxB,mBAAW,CAAC,aAAa;QACzB,mBAAW,CAAC,YAAY;QACxB,mBAAW,CAAC,aAAa;QACzB,mBAAW,CAAC,YAAY;QACxB,mBAAW,CAAC,UAAU;QACtB,mBAAW,CAAC,cAAc;QAC1B,mBAAW,CAAC,eAAe;QAC3B,mBAAW,CAAC,eAAe;QAC3B,mBAAW,CAAC,eAAe;QAC3B,mBAAW,CAAC,gBAAgB;KAC7B;CACF,CAAC;AAEF;;GAEG;AACU,QAAA,gBAAgB,GAA6B;IACxD,QAAQ;IACR,mBAAmB,EAAE,CAAC,mBAAW,CAAC,UAAU,CAAC;IAE7C,SAAS;IACT,gBAAgB,EAAE,CAAC,mBAAW,CAAC,WAAW,CAAC;IAC3C,eAAe,EAAE,CAAC,mBAAW,CAAC,WAAW,CAAC;IAC1C,eAAe,EAAE,CAAC,mBAAW,CAAC,YAAY,CAAC;IAC3C,sBAAsB,EAAE,CAAC,mBAAW,CAAC,gBAAgB,CAAC;IACtD,qBAAqB,EAAE,CAAC,mBAAW,CAAC,YAAY,CAAC;IAEjD,MAAM;IACN,kBAAkB,EAAE,CAAC,mBAAW,CAAC,YAAY,CAAC;IAC9C,wBAAwB,EAAE,CAAC,mBAAW,CAAC,YAAY,CAAC;IACpD,sBAAsB,EAAE,CAAC,mBAAW,CAAC,YAAY,CAAC;IAElD,SAAS;IACT,eAAe,EAAE,CAAC,mBAAW,CAAC,WAAW,CAAC;IAC1C,eAAe,EAAE,CAAC,mBAAW,CAAC,WAAW,CAAC;IAE1C,oBAAoB;IACpB,kBAAkB,EAAE,CAAC,mBAAW,CAAC,cAAc,CAAC;IAEhD,uBAAuB;IACvB,mBAAmB,EAAE,CAAC,mBAAW,CAAC,eAAe,CAAC;IAElD,qBAAqB;IACrB,mBAAmB,EAAE,CAAC,mBAAW,CAAC,eAAe,CAAC;IAElD,cAAc;IACd,iBAAiB,EAAE,CAAC,mBAAW,CAAC,gBAAgB,CAAC;IACjD,gBAAgB,EAAE,CAAC,mBAAW,CAAC,eAAe,CAAC;IAC/C,kBAAkB,EAAE,CAAC,mBAAW,CAAC,gBAAgB,CAAC;IAElD,kBAAkB;IAClB,gBAAgB,EAAE,CAAC,mBAAW,CAAC,aAAa,CAAC;IAE7C,UAAU;IACV,aAAa,EAAE,CAAC,mBAAW,CAAC,YAAY,CAAC;IACzC,cAAc,EAAE,CAAC,mBAAW,CAAC,YAAY,CAAC;IAE1C,4BAA4B;IAC5B,aAAa,EAAE,CAAC,mBAAW,CAAC,WAAW,CAAC;IACxC,cAAc,EAAE,CAAC,mBAAW,CAAC,WAAW,CAAC;IACzC,cAAc,EAAE,CAAC,mBAAW,CAAC,WAAW,CAAC;IAEzC,gBAAgB;IAChB,cAAc,EAAE,CAAC,mBAAW,CAAC,WAAW,EAAE,mBAAW,CAAC,WAAW,EAAE,mBAAW,CAAC,YAAY,CAAC;IAC5F,mBAAmB,EAAE,CAAC,mBAAW,CAAC,WAAW,CAAC;IAE9C,eAAe;IACf,eAAe,EAAE,CAAC,mBAAW,CAAC,aAAa,CAAC;CAC7C,CAAC;AAEF;;;GAGG;AACU,QAAA,YAAY,GAAG,CAAC,eAAe,CAAC,CAAC;AAE9C,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,qBAAqB,GACzB,IAAA,sBAAa,GAAE;IACb,CAAC,CAAC;QACE,+BAA+B,EAAE;YAC/B,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,gBAAgB;SACzB;QACD,8BAA8B,EAAE;YAC9B,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,mBAAmB;SAC5B;QACD,gCAAgC,EAAE;YAChC,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,iBAAiB;SAC1B;QACD,iCAAiC,EAAE;YACjC,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,kBAAkB;YAC1B,OAAO,EAAE,IAAI;SACd;KACF;IACH,CAAC,CAAC,EAAE,CAAC,CAAC,iBAAiB;AAE3B,+EAA+E;AAC/E,OAAO;AACP,+EAA+E;AAE/E;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,QAAgB,EAAE,MAAc;IACzD,oBAAoB;IACpB,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEzC,0BAA0B;IAC1B,IAAI,cAAc,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM,EAAE,CAAC;QAClD,mBAAmB;QACnB,IAAA,wBAAe,EAAC,cAAc,EAAE,cAAc,CAAC,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAA,wBAAe,EAAC,cAAc,EAAE,YAAY,CAAC,CAAC;AACvD,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,cAAc,CAAC,MAA0B;IAC7D,mBAAmB;IACnB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;YACpB,eAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qCAAqC;IACrC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;YACpB,eAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yBAAyB;IACzB,2BAA2B;IAC3B,IAAI,cAAc,GAA6D,IAAI,CAAC;IACpF,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACzE,IAAI,iBAAiB,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;YACzC,cAAc,GAAG,OAAO,CAAC;YACzB,MAAM;QACR,CAAC;IACH,CAAC;IAED,IAAI,cAAc,EAAE,CAAC;QACnB,WAAW;QACX,IAAI,cAAc,CAAC,OAAO,EAAE,CAAC;YAC3B,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;gBACpB,eAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACzC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO;YACL,MAAM,EAAE,cAAc,CAAC,MAAM;YAC7B,IAAI,EAAE,cAAc,CAAC,IAAI;YACzB,WAAW,EAAE,aAAK,CAAC,cAAc,CAAC,IAAI,CAAC;YACvC,UAAU,EAAE,SAAS;YACrB,eAAe,EAAE,IAAI,IAAI,EAAE;SAC5B,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IAC5C,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAKhC,CAAC;YAEH,oBAAoB;YACpB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACrE,IAAI,SAAS,EAAE,CAAC;gBACd,WAAW;gBACX,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;oBACxB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;oBAChD,IAAI,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;wBAC3B,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;4BACpB,eAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;wBACpD,CAAC;wBACD,OAAO,IAAI,CAAC;oBACd,CAAC;gBACH,CAAC;gBAED,OAAO;oBACL,MAAM,EAAE,SAAS,CAAC,MAAM;oBACxB,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,WAAW,EAAE,aAAK,CAAC,SAAS,CAAC,IAAI,CAAC;oBAClC,UAAU,EAAE,SAAS;oBACrB,eAAe,EAAE,IAAI,IAAI,EAAE;iBAC5B,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,eAAM,CAAC,IAAI,CACT,4DAA4D;gBAC1D,4EAA4E,CAC/E,CAAC;YACF,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;gBACpB,eAAM,CAAC,KAAK,CACV,oDAAoD,EACpD,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAChE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;QACpB,eAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,eAAe,CAAC,OAAoB,EAAE,QAAgB;IACpE,gDAAgD;IAChD,IAAI,CAAC,CAAC,QAAQ,IAAI,wBAAgB,CAAC,EAAE,CAAC;QACpC,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;YACpB,eAAM,CAAC,IAAI,CAAC,gDAAgD,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,mBAAmB,GAAG,wBAAgB,CAAC,QAAQ,CAAC,CAAC;IAEvD,wCAAwC;IACxC,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;YAC3C,eAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,8BAA8B;IAC9B,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,eAAe;IACf,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2BAA2B;IAC3B,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,+EAA+E;AAC/E,cAAc;AACd,+EAA+E;AAE/E;;;;;GAKG;AACH,SAAgB,oBAAoB,CAAC,OAA+B;IAClE,MAAM,eAAe,GAAoC;QACvD,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,KAAK;QAClC,WAAW,EAAE,OAAO,EAAE,WAAW,IAAI,oBAAY;KAClD,CAAC;IAEF;;OAEG;IACH,MAAM,SAAS,GAAG,KAAK,EAAE,QAAgB,EAAE,MAA0B,EAAuB,EAAE;QAC5F,aAAa;QACb,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;YAC7B,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;gBACpB,eAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACjE,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,aAAa;QACb,IAAI,eAAe,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnD,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;gBACpB,eAAM,CAAC,KAAK,CAAC,uBAAuB,QAAQ,2BAA2B,CAAC,CAAC;YAC3E,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,UAAU;QACV,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;gBACpB,eAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;oBAC1C,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,wBAAwB;iBACjC,CAAC,CAAC;YACL,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,yBAAyB;iBACnC;aACF,CAAC;QACJ,CAAC;QAED,SAAS;QACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;YACxC,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;gBACpB,eAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;oBACzC,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,mBAAmB,EAAE,wBAAgB,CAAC,QAAQ,CAAC;oBAC/C,eAAe,EAAE,OAAO,CAAC,WAAW;iBACrC,CAAC,CAAC;YACL,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,WAAW;oBACjB,OAAO,EAAE,0BAA0B;iBACpC;aACF,CAAC;QACJ,CAAC;QAED,OAAO;QACP,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;YACpB,eAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;gBAC9C,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO;SACR,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO;QACL,SAAS;QACT,OAAO,EAAE,eAAe;KACzB,CAAC;AACJ,CAAC"}

package/dist/middleware/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * ミドルウェアモジュールのエクスポート
+ *
+ * @module middleware
+ */
+export { ResponseSizeWarning, responseSizeWarning, calculateResponseSize, formatSize, DEFAULT_WARNING_THRESHOLD_KB, DEFAULT_CRITICAL_THRESHOLD_KB, type ResponseSizeWarningOptions, type ResponseSizeResult, } from "./response-size-warning";
+export { createAuthMiddleware, validateApiKey, checkPermission, PERMISSIONS, ROLES, TOOL_PERMISSIONS, PUBLIC_TOOLS, type Role, type AuthContext, type AuthMiddlewareOptions, type AuthMiddlewareInstance, type AuthResult, type AuthErrorCode, type Permission, } from "./auth";
+export { LightResponseController, lightResponseController, applyLightResponse, extractLightResponseOptions, DEFAULT_LIGHT_RESPONSE_CONFIG, TOOL_FIELD_CONFIGS, type LightResponseOptions, type LightResponseControllerOptions, type ToolFieldConfig, } from "./light-response-controller";
+export { coerceArgs, buildCoercionMap, getCoercionMap, clearCoercionMapCache, type CoercionMap, } from "./args-type-coercion";
+//# sourceMappingURL=index.d.ts.map

package/dist/middleware/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AAEH,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,UAAU,EACV,4BAA4B,EAC5B,6BAA6B,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,GACxB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,eAAe,EACf,WAAW,EACX,KAAK,EACL,gBAAgB,EAChB,YAAY,EACZ,KAAK,IAAI,EACT,KAAK,WAAW,EAChB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,UAAU,GAChB,MAAM,QAAQ,CAAC;AAEhB,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,kBAAkB,EAClB,2BAA2B,EAC3B,6BAA6B,EAC7B,kBAAkB,EAClB,KAAK,oBAAoB,EACzB,KAAK,8BAA8B,EACnC,KAAK,eAAe,GACrB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,qBAAqB,EACrB,KAAK,WAAW,GACjB,MAAM,sBAAsB,CAAC"}

package/dist/middleware/index.js

@@ -0,0 +1,38 @@
+"use strict";
+// SPDX-FileCopyrightText: 2026 TKMD and Reftrix Contributors
+// SPDX-License-Identifier: AGPL-3.0-only
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.clearCoercionMapCache = exports.getCoercionMap = exports.buildCoercionMap = exports.coerceArgs = exports.TOOL_FIELD_CONFIGS = exports.DEFAULT_LIGHT_RESPONSE_CONFIG = exports.extractLightResponseOptions = exports.applyLightResponse = exports.lightResponseController = exports.LightResponseController = exports.PUBLIC_TOOLS = exports.TOOL_PERMISSIONS = exports.ROLES = exports.PERMISSIONS = exports.checkPermission = exports.validateApiKey = exports.createAuthMiddleware = exports.DEFAULT_CRITICAL_THRESHOLD_KB = exports.DEFAULT_WARNING_THRESHOLD_KB = exports.formatSize = exports.calculateResponseSize = exports.responseSizeWarning = exports.ResponseSizeWarning = void 0;
+/**
+ * ミドルウェアモジュールのエクスポート
+ *
+ * @module middleware
+ */
+var response_size_warning_1 = require("./response-size-warning");
+Object.defineProperty(exports, "ResponseSizeWarning", { enumerable: true, get: function () { return response_size_warning_1.ResponseSizeWarning; } });
+Object.defineProperty(exports, "responseSizeWarning", { enumerable: true, get: function () { return response_size_warning_1.responseSizeWarning; } });
+Object.defineProperty(exports, "calculateResponseSize", { enumerable: true, get: function () { return response_size_warning_1.calculateResponseSize; } });
+Object.defineProperty(exports, "formatSize", { enumerable: true, get: function () { return response_size_warning_1.formatSize; } });
+Object.defineProperty(exports, "DEFAULT_WARNING_THRESHOLD_KB", { enumerable: true, get: function () { return response_size_warning_1.DEFAULT_WARNING_THRESHOLD_KB; } });
+Object.defineProperty(exports, "DEFAULT_CRITICAL_THRESHOLD_KB", { enumerable: true, get: function () { return response_size_warning_1.DEFAULT_CRITICAL_THRESHOLD_KB; } });
+var auth_1 = require("./auth");
+Object.defineProperty(exports, "createAuthMiddleware", { enumerable: true, get: function () { return auth_1.createAuthMiddleware; } });
+Object.defineProperty(exports, "validateApiKey", { enumerable: true, get: function () { return auth_1.validateApiKey; } });
+Object.defineProperty(exports, "checkPermission", { enumerable: true, get: function () { return auth_1.checkPermission; } });
+Object.defineProperty(exports, "PERMISSIONS", { enumerable: true, get: function () { return auth_1.PERMISSIONS; } });
+Object.defineProperty(exports, "ROLES", { enumerable: true, get: function () { return auth_1.ROLES; } });
+Object.defineProperty(exports, "TOOL_PERMISSIONS", { enumerable: true, get: function () { return auth_1.TOOL_PERMISSIONS; } });
+Object.defineProperty(exports, "PUBLIC_TOOLS", { enumerable: true, get: function () { return auth_1.PUBLIC_TOOLS; } });
+var light_response_controller_1 = require("./light-response-controller");
+Object.defineProperty(exports, "LightResponseController", { enumerable: true, get: function () { return light_response_controller_1.LightResponseController; } });
+Object.defineProperty(exports, "lightResponseController", { enumerable: true, get: function () { return light_response_controller_1.lightResponseController; } });
+Object.defineProperty(exports, "applyLightResponse", { enumerable: true, get: function () { return light_response_controller_1.applyLightResponse; } });
+Object.defineProperty(exports, "extractLightResponseOptions", { enumerable: true, get: function () { return light_response_controller_1.extractLightResponseOptions; } });
+Object.defineProperty(exports, "DEFAULT_LIGHT_RESPONSE_CONFIG", { enumerable: true, get: function () { return light_response_controller_1.DEFAULT_LIGHT_RESPONSE_CONFIG; } });
+Object.defineProperty(exports, "TOOL_FIELD_CONFIGS", { enumerable: true, get: function () { return light_response_controller_1.TOOL_FIELD_CONFIGS; } });
+var args_type_coercion_1 = require("./args-type-coercion");
+Object.defineProperty(exports, "coerceArgs", { enumerable: true, get: function () { return args_type_coercion_1.coerceArgs; } });
+Object.defineProperty(exports, "buildCoercionMap", { enumerable: true, get: function () { return args_type_coercion_1.buildCoercionMap; } });
+Object.defineProperty(exports, "getCoercionMap", { enumerable: true, get: function () { return args_type_coercion_1.getCoercionMap; } });
+Object.defineProperty(exports, "clearCoercionMapCache", { enumerable: true, get: function () { return args_type_coercion_1.clearCoercionMapCache; } });
+//# sourceMappingURL=index.js.map

package/dist/middleware/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":";AAAA,6DAA6D;AAC7D,yCAAyC;;;AAEzC;;;;GAIG;AAEH,iEASiC;AAR/B,4HAAA,mBAAmB,OAAA;AACnB,4HAAA,mBAAmB,OAAA;AACnB,8HAAA,qBAAqB,OAAA;AACrB,mHAAA,UAAU,OAAA;AACV,qIAAA,4BAA4B,OAAA;AAC5B,sIAAA,6BAA6B,OAAA;AAK/B,+BAegB;AAdd,4GAAA,oBAAoB,OAAA;AACpB,sGAAA,cAAc,OAAA;AACd,uGAAA,eAAe,OAAA;AACf,mGAAA,WAAW,OAAA;AACX,6FAAA,KAAK,OAAA;AACL,wGAAA,gBAAgB,OAAA;AAChB,oGAAA,YAAY,OAAA;AAUd,yEAUqC;AATnC,oIAAA,uBAAuB,OAAA;AACvB,oIAAA,uBAAuB,OAAA;AACvB,+HAAA,kBAAkB,OAAA;AAClB,wIAAA,2BAA2B,OAAA;AAC3B,0IAAA,6BAA6B,OAAA;AAC7B,+HAAA,kBAAkB,OAAA;AAMpB,2DAM8B;AAL5B,gHAAA,UAAU,OAAA;AACV,sHAAA,gBAAgB,OAAA;AAChB,oHAAA,cAAc,OAAA;AACd,2HAAA,qBAAqB,OAAA"}