@reftrixmcp/mcp-server 0.1.8 → 0.2.0

package/dist/middleware/auth.js

@@ -1,430 +0,0 @@
-"use strict";
-// SPDX-FileCopyrightText: 2026 TKMD and Reftrix Contributors
-// SPDX-License-Identifier: AGPL-3.0-only
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PUBLIC_TOOLS = exports.TOOL_PERMISSIONS = exports.ROLES = exports.PERMISSIONS = void 0;
-exports.validateApiKey = validateApiKey;
-exports.checkPermission = checkPermission;
-exports.createAuthMiddleware = createAuthMiddleware;
-/**
- * MCP Server - 認証ミドルウェア
- *
- * SEC監査対応: CWE-306 (Missing Authentication for Critical Function)
- * CVSS Score: 7.5 (High)
- *
- * このモジュールはMCPサーバーの認証・認可機能を提供します。
- * Phase 1: APIキー認証
- * Phase 2: JWT認証（将来実装）
- *
- * @module middleware/auth
- */
-const crypto_1 = require("crypto");
-const logger_1 = require("../utils/logger");
-// ============================================================================
-// パーミッション定義
-// ============================================================================
-/**
- * パーミッション定義（WebDesign専用）
- * 全パーミッションの一覧
- */
-exports.PERMISSIONS = {
-    // システム系
-    SYSTEM_READ: "system:read",
-    SYSTEM_HEALTH: "system:health",
-    SYSTEM_ADMIN: "system:admin",
-    // レイアウト系
-    LAYOUT_READ: "layout:read",
-    LAYOUT_WRITE: "layout:write",
-    LAYOUT_TRANSFORM: "layout:transform",
-    // モーション系
-    MOTION_READ: "motion:read",
-    MOTION_TRANSFORM: "motion:transform",
-    // 品質系
-    QUALITY_READ: "quality:read",
-    QUALITY_WRITE: "quality:write",
-    // プロジェクト系
-    PROJECT_READ: "project:read",
-    // デザイン系
-    DESIGN_REVIEW: "design:review",
-    DESIGN_WRITE: "design:write",
-    // スタイル系
-    STYLE_READ: "style:read",
-    // ナラティブ系
-    NARRATIVE_READ: "narrative:read",
-    // バックグラウンド系
-    BACKGROUND_READ: "background:read",
-    // レスポンシブ系
-    RESPONSIVE_READ: "responsive:read",
-    // 嗜好プロファイリング系
-    PREFERENCE_READ: "preference:read",
-    PREFERENCE_WRITE: "preference:write",
-};
-/**
- * ロールごとのパーミッション（WebDesign専用）
- */
-exports.ROLES = {
-    VIEWER: [
-        exports.PERMISSIONS.SYSTEM_READ,
-        exports.PERMISSIONS.SYSTEM_HEALTH,
-        exports.PERMISSIONS.LAYOUT_READ,
-        exports.PERMISSIONS.MOTION_READ,
-        exports.PERMISSIONS.QUALITY_READ,
-        exports.PERMISSIONS.PROJECT_READ,
-        exports.PERMISSIONS.STYLE_READ,
-        exports.PERMISSIONS.NARRATIVE_READ,
-        exports.PERMISSIONS.BACKGROUND_READ,
-        exports.PERMISSIONS.RESPONSIVE_READ,
-        exports.PERMISSIONS.PREFERENCE_READ,
-    ],
-    USER: [
-        exports.PERMISSIONS.SYSTEM_READ,
-        exports.PERMISSIONS.SYSTEM_HEALTH,
-        exports.PERMISSIONS.LAYOUT_READ,
-        exports.PERMISSIONS.LAYOUT_TRANSFORM,
-        exports.PERMISSIONS.MOTION_READ,
-        exports.PERMISSIONS.MOTION_TRANSFORM,
-        exports.PERMISSIONS.QUALITY_READ,
-        exports.PERMISSIONS.QUALITY_WRITE,
-        exports.PERMISSIONS.PROJECT_READ,
-        exports.PERMISSIONS.DESIGN_REVIEW,
-        exports.PERMISSIONS.STYLE_READ,
-        exports.PERMISSIONS.NARRATIVE_READ,
-        exports.PERMISSIONS.BACKGROUND_READ,
-        exports.PERMISSIONS.RESPONSIVE_READ,
-        exports.PERMISSIONS.PREFERENCE_READ,
-        exports.PERMISSIONS.PREFERENCE_WRITE,
-    ],
-    ADMIN: [
-        exports.PERMISSIONS.SYSTEM_READ,
-        exports.PERMISSIONS.SYSTEM_HEALTH,
-        exports.PERMISSIONS.SYSTEM_ADMIN,
-        exports.PERMISSIONS.LAYOUT_READ,
-        exports.PERMISSIONS.LAYOUT_WRITE,
-        exports.PERMISSIONS.LAYOUT_TRANSFORM,
-        exports.PERMISSIONS.MOTION_READ,
-        exports.PERMISSIONS.MOTION_TRANSFORM,
-        exports.PERMISSIONS.QUALITY_READ,
-        exports.PERMISSIONS.QUALITY_WRITE,
-        exports.PERMISSIONS.PROJECT_READ,
-        exports.PERMISSIONS.DESIGN_REVIEW,
-        exports.PERMISSIONS.DESIGN_WRITE,
-        exports.PERMISSIONS.STYLE_READ,
-        exports.PERMISSIONS.NARRATIVE_READ,
-        exports.PERMISSIONS.BACKGROUND_READ,
-        exports.PERMISSIONS.RESPONSIVE_READ,
-        exports.PERMISSIONS.PREFERENCE_READ,
-        exports.PERMISSIONS.PREFERENCE_WRITE,
-    ],
-};
-/**
- * ツールごとの必要パーミッション（WebDesign専用）
- */
-exports.TOOL_PERMISSIONS = {
-    // スタイル系
-    "style.get_palette": [exports.PERMISSIONS.STYLE_READ],
-    // レイアウト系
-    "layout.inspect": [exports.PERMISSIONS.LAYOUT_READ],
-    "layout.search": [exports.PERMISSIONS.LAYOUT_READ],
-    "layout.ingest": [exports.PERMISSIONS.LAYOUT_WRITE],
-    "layout.generate_code": [exports.PERMISSIONS.LAYOUT_TRANSFORM],
-    "layout.batch_ingest": [exports.PERMISSIONS.LAYOUT_WRITE],
-    // 品質系
-    "quality.evaluate": [exports.PERMISSIONS.QUALITY_READ],
-    "quality.batch_evaluate": [exports.PERMISSIONS.QUALITY_READ],
-    "quality.getJobStatus": [exports.PERMISSIONS.QUALITY_READ],
-    // モーション系
-    "motion.detect": [exports.PERMISSIONS.MOTION_READ],
-    "motion.search": [exports.PERMISSIONS.MOTION_READ],
-    // ナラティブ系（セマンティック検索）
-    "narrative.search": [exports.PERMISSIONS.NARRATIVE_READ],
-    // バックグラウンド系（セマンティック検索）
-    "background.search": [exports.PERMISSIONS.BACKGROUND_READ],
-    // レスポンシブ系（セマンティック検索）
-    "responsive.search": [exports.PERMISSIONS.RESPONSIVE_READ],
-    // 嗜好プロファイリング系
-    "preference.hear": [exports.PERMISSIONS.PREFERENCE_WRITE],
-    "preference.get": [exports.PERMISSIONS.PREFERENCE_READ],
-    "preference.reset": [exports.PERMISSIONS.PREFERENCE_WRITE],
-    // ブリーフ系（デザインレビュー）
-    "brief.validate": [exports.PERMISSIONS.DESIGN_REVIEW],
-    // プロジェクト系
-    "project.get": [exports.PERMISSIONS.PROJECT_READ],
-    "project.list": [exports.PERMISSIONS.PROJECT_READ],
-    // パーツ系（Part-Level Analysis）
-    "part.search": [exports.PERMISSIONS.LAYOUT_READ],
-    "part.inspect": [exports.PERMISSIONS.LAYOUT_READ],
-    "part.compare": [exports.PERMISSIONS.LAYOUT_READ],
-    // ページ系（統合Web分析）
-    "page.analyze": [exports.PERMISSIONS.LAYOUT_READ, exports.PERMISSIONS.MOTION_READ, exports.PERMISSIONS.QUALITY_READ],
-    "page.getJobStatus": [exports.PERMISSIONS.LAYOUT_READ],
-    // システム系（公開ツール）
-    "system.health": [exports.PERMISSIONS.SYSTEM_HEALTH],
-};
-/**
- * デフォルトの公開ツール（認証不要）
- * 注意: allToolDefinitions に登録されているツールのみを含めること
- */
-exports.PUBLIC_TOOLS = ["system.health"];
-// ============================================================================
-// テスト用APIキー定義（開発環境のみ）
-// ============================================================================
-/**
- * テスト用APIキーとロールのマッピング
- *
- * セキュリティ: 本番環境（NODE_ENV=production）ではテスト用キーは無効化されます。
- * 本番環境では必ず MCP_API_KEYS 環境変数で認証情報を設定してください。
- */
-const TEST_API_KEY_MAPPINGS = (0, logger_1.isDevelopment)()
-    ? {
-        reftrix_admin_test_key_12345678: {
-            role: "ADMIN",
-            userId: "admin-user-001",
-        },
-        reftrix_user_test_key_87654321: {
-            role: "USER",
-            userId: "standard-user-001",
-        },
-        reftrix_viewer_test_key_11111111: {
-            role: "VIEWER",
-            userId: "viewer-user-001",
-        },
-        reftrix_expired_test_key_99999999: {
-            role: "USER",
-            userId: "expired-user-001",
-            expired: true,
-        },
-    }
-    : {}; // 本番環境ではテスト用キーは空
-// ============================================================================
-// 認証関数
-// ============================================================================
-/**
- * 定数時間でAPIキーを比較する（タイミング攻撃対策）
- *
- * @param provided - 提供されたAPIキー
- * @param stored - 保存されているAPIキー
- * @returns 一致する場合はtrue
- */
-function safeCompareApiKey(provided, stored) {
-    // 異なる長さの場合でも定数時間で処理
-    const providedBuffer = Buffer.from(provided);
-    const storedBuffer = Buffer.from(stored);
-    // 長さが異なる場合は、同じ長さのダミー比較を行う
-    if (providedBuffer.length !== storedBuffer.length) {
-        // ダミー比較（タイミング攻撃対策）
-        (0, crypto_1.timingSafeEqual)(providedBuffer, providedBuffer);
-        return false;
-    }
-    return (0, crypto_1.timingSafeEqual)(providedBuffer, storedBuffer);
-}
-/**
- * APIキーを検証してAuthContextを返す
- *
- * @param apiKey - 検証するAPIキー
- * @returns 認証成功時はAuthContext、失敗時はnull
- */
-async function validateApiKey(apiKey) {
-    // APIキーが提供されていない場合
-    if (!apiKey) {
-        if ((0, logger_1.isDevelopment)()) {
-            logger_1.logger.debug("[Auth] API key not provided");
-        }
-        return null;
-    }
-    // APIキー形式の検証（reftrix_ プレフィックスで始まること）
-    if (!apiKey.startsWith("reftrix_")) {
-        if ((0, logger_1.isDevelopment)()) {
-            logger_1.logger.debug("[Auth] Invalid API key format");
-        }
-        return null;
-    }
-    // テスト用APIキーのチェック（定数時間比較）
-    // 全てのテスト用キーと比較し、タイミング攻撃を防止
-    let matchedMapping = null;
-    for (const [storedKey, mapping] of Object.entries(TEST_API_KEY_MAPPINGS)) {
-        if (safeCompareApiKey(apiKey, storedKey)) {
-            matchedMapping = mapping;
-            break;
-        }
-    }
-    if (matchedMapping) {
-        // 期限切れチェック
-        if (matchedMapping.expired) {
-            if ((0, logger_1.isDevelopment)()) {
-                logger_1.logger.debug("[Auth] API key expired");
-            }
-            return null;
-        }
-        return {
-            userId: matchedMapping.userId,
-            role: matchedMapping.role,
-            permissions: exports.ROLES[matchedMapping.role],
-            authMethod: "api_key",
-            authenticatedAt: new Date(),
-        };
-    }
-    // 環境変数から追加のAPIキーをチェック（本番環境向け、定数時間比較）
-    const envApiKeys = process.env.MCP_API_KEYS;
-    if (envApiKeys) {
-        try {
-            const keys = JSON.parse(envApiKeys);
-            // 定数時間比較で全てのキーをチェック
-            const keyConfig = keys.find((k) => safeCompareApiKey(apiKey, k.key));
-            if (keyConfig) {
-                // 有効期限チェック
-                if (keyConfig.expiresAt) {
-                    const expiresAt = new Date(keyConfig.expiresAt);
-                    if (expiresAt < new Date()) {
-                        if ((0, logger_1.isDevelopment)()) {
-                            logger_1.logger.debug("[Auth] API key expired (from env)");
-                        }
-                        return null;
-                    }
-                }
-                return {
-                    userId: keyConfig.userId,
-                    role: keyConfig.role,
-                    permissions: exports.ROLES[keyConfig.role],
-                    authMethod: "api_key",
-                    authenticatedAt: new Date(),
-                };
-            }
-        }
-        catch {
-            logger_1.logger.warn("[Auth] Failed to parse MCP_API_KEYS environment variable. " +
-                'Expected JSON array: [{"key":"reftrix_...","role":"ADMIN","userId":"..."}]');
-            if ((0, logger_1.isDevelopment)()) {
-                logger_1.logger.error("[Auth] MCP_API_KEYS parse error. Current value: %s", envApiKeys.slice(0, 50) + (envApiKeys.length > 50 ? "..." : ""));
-            }
-        }
-    }
-    // 有効なキーが見つからない場合
-    if ((0, logger_1.isDevelopment)()) {
-        logger_1.logger.debug("[Auth] API key not found in valid keys");
-    }
-    return null;
-}
-/**
- * 認証コンテキストがツールに対する権限を持つかチェック
- *
- * deny-by-default ポリシー:
- * - TOOL_PERMISSIONS に定義されていないツールは拒否
- * - これにより未登録ツールへの不正アクセスを防止
- *
- * @param context - 認証コンテキスト
- * @param toolName - ツール名
- * @returns 権限がある場合はtrue
- */
-function checkPermission(context, toolName) {
-    // deny-by-default: TOOL_PERMISSIONS に未定義のツールは拒否
-    if (!(toolName in exports.TOOL_PERMISSIONS)) {
-        if ((0, logger_1.isDevelopment)()) {
-            logger_1.logger.warn("[Auth] Unknown tool rejected (deny-by-default)", { toolName });
-        }
-        return false;
-    }
-    const requiredPermissions = exports.TOOL_PERMISSIONS[toolName];
-    // ツールが定義されていない場合はfalse（deny-by-default）
-    if (!requiredPermissions) {
-        if (process.env.NODE_ENV === "development") {
-            logger_1.logger.warn("[Auth] Tool not found in TOOL_PERMISSIONS", { toolName });
-        }
-        return false;
-    }
-    // 必要なパーミッションが空の場合（公開ツール相当）は許可
-    if (requiredPermissions.length === 0) {
-        return true;
-    }
-    // ADMINは全権限を持つ
-    if (context.role === "ADMIN") {
-        return true;
-    }
-    // 必要なパーミッションのいずれかを持っているか確認
-    return requiredPermissions.some((perm) => context.permissions.includes(perm));
-}
-// ============================================================================
-// ミドルウェアファクトリ
-// ============================================================================
-/**
- * 認証ミドルウェアを作成
- *
- * @param options - オプション設定
- * @returns 認証ミドルウェアインスタンス
- */
-function createAuthMiddleware(options) {
-    const resolvedOptions = {
-        enabled: options?.enabled ?? false,
-        publicTools: options?.publicTools ?? exports.PUBLIC_TOOLS,
-    };
-    /**
-     * 認証チェック関数
-     */
-    const checkAuth = async (toolName, apiKey) => {
-        // 認証無効時はスキップ
-        if (!resolvedOptions.enabled) {
-            if ((0, logger_1.isDevelopment)()) {
-                logger_1.logger.debug("[Auth] Authentication disabled, skipping check");
-            }
-            return { success: true };
-        }
-        // 公開ツールは認証不要
-        if (resolvedOptions.publicTools.includes(toolName)) {
-            if ((0, logger_1.isDevelopment)()) {
-                logger_1.logger.debug(`[Auth] Public tool: ${toolName}, skipping authentication`);
-            }
-            return { success: true };
-        }
-        // APIキー検証
-        const context = await validateApiKey(apiKey);
-        if (!context) {
-            if ((0, logger_1.isDevelopment)()) {
-                logger_1.logger.warn("[Auth] Authentication failed", {
-                    tool: toolName,
-                    reason: "INVALID_OR_MISSING_KEY",
-                });
-            }
-            return {
-                success: false,
-                error: {
-                    code: "UNAUTHORIZED",
-                    message: "Authentication required",
-                },
-            };
-        }
-        // 権限チェック
-        if (!checkPermission(context, toolName)) {
-            if ((0, logger_1.isDevelopment)()) {
-                logger_1.logger.warn("[Auth] Authorization denied", {
-                    tool: toolName,
-                    role: context.role,
-                    requiredPermissions: exports.TOOL_PERMISSIONS[toolName],
-                    userPermissions: context.permissions,
-                });
-            }
-            return {
-                success: false,
-                error: {
-                    code: "FORBIDDEN",
-                    message: "Insufficient permissions",
-                },
-            };
-        }
-        // 認証成功
-        if ((0, logger_1.isDevelopment)()) {
-            logger_1.logger.info("[Auth] Authentication successful", {
-                tool: toolName,
-                userId: context.userId,
-                role: context.role,
-            });
-        }
-        return {
-            success: true,
-            context,
-        };
-    };
-    return {
-        checkAuth,
-        options: resolvedOptions,
-    };
-}
-//# sourceMappingURL=auth.js.map

package/dist/middleware/auth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":";AAAA,6DAA6D;AAC7D,yCAAyC;;;AAiUzC,wCAiGC;AAaD,0CA+BC;AAYD,oDAkFC;AA1iBD;;;;;;;;;;;GAWG;AAEH,mCAAyC;AACzC,4CAAwD;AA4ExD,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E;;;GAGG;AACU,QAAA,WAAW,GAAG;IACzB,QAAQ;IACR,WAAW,EAAE,aAAa;IAC1B,aAAa,EAAE,eAAe;IAC9B,YAAY,EAAE,cAAc;IAC5B,SAAS;IACT,WAAW,EAAE,aAAa;IAC1B,YAAY,EAAE,cAAc;IAC5B,gBAAgB,EAAE,kBAAkB;IACpC,SAAS;IACT,WAAW,EAAE,aAAa;IAC1B,gBAAgB,EAAE,kBAAkB;IACpC,MAAM;IACN,YAAY,EAAE,cAAc;IAC5B,aAAa,EAAE,eAAe;IAC9B,UAAU;IACV,YAAY,EAAE,cAAc;IAC5B,QAAQ;IACR,aAAa,EAAE,eAAe;IAC9B,YAAY,EAAE,cAAc;IAC5B,QAAQ;IACR,UAAU,EAAE,YAAY;IACxB,SAAS;IACT,cAAc,EAAE,gBAAgB;IAChC,YAAY;IACZ,eAAe,EAAE,iBAAiB;IAClC,UAAU;IACV,eAAe,EAAE,iBAAiB;IAClC,cAAc;IACd,eAAe,EAAE,iBAAiB;IAClC,gBAAgB,EAAE,kBAAkB;CAC5B,CAAC;AAIX;;GAEG;AACU,QAAA,KAAK,GAA2B;IAC3C,MAAM,EAAE;QACN,mBAAW,CAAC,WAAW;QACvB,mBAAW,CAAC,aAAa;QACzB,mBAAW,CAAC,WAAW;QACvB,mBAAW,CAAC,WAAW;QACvB,mBAAW,CAAC,YAAY;QACxB,mBAAW,CAAC,YAAY;QACxB,mBAAW,CAAC,UAAU;QACtB,mBAAW,CAAC,cAAc;QAC1B,mBAAW,CAAC,eAAe;QAC3B,mBAAW,CAAC,eAAe;QAC3B,mBAAW,CAAC,eAAe;KAC5B;IACD,IAAI,EAAE;QACJ,mBAAW,CAAC,WAAW;QACvB,mBAAW,CAAC,aAAa;QACzB,mBAAW,CAAC,WAAW;QACvB,mBAAW,CAAC,gBAAgB;QAC5B,mBAAW,CAAC,WAAW;QACvB,mBAAW,CAAC,gBAAgB;QAC5B,mBAAW,CAAC,YAAY;QACxB,mBAAW,CAAC,aAAa;QACzB,mBAAW,CAAC,YAAY;QACxB,mBAAW,CAAC,aAAa;QACzB,mBAAW,CAAC,UAAU;QACtB,mBAAW,CAAC,cAAc;QAC1B,mBAAW,CAAC,eAAe;QAC3B,mBAAW,CAAC,eAAe;QAC3B,mBAAW,CAAC,eAAe;QAC3B,mBAAW,CAAC,gBAAgB;KAC7B;IACD,KAAK,EAAE;QACL,mBAAW,CAAC,WAAW;QACvB,mBAAW,CAAC,aAAa;QACzB,mBAAW,CAAC,YAAY;QACxB,mBAAW,CAAC,WAAW;QACvB,mBAAW,CAAC,YAAY;QACxB,mBAAW,CAAC,gBAAgB;QAC5B,mBAAW,CAAC,WAAW;QACvB,mBAAW,CAAC,gBAAgB;QAC5B,mBAAW,CAAC,YAAY;QACxB,mBAAW,CAAC,aAAa;QACzB,mBAAW,CAAC,YAAY;QACxB,mBAAW,CAAC,aAAa;QACzB,mBAAW,CAAC,YAAY;QACxB,mBAAW,CAAC,UAAU;QACtB,mBAAW,CAAC,cAAc;QAC1B,mBAAW,CAAC,eAAe;QAC3B,mBAAW,CAAC,eAAe;QAC3B,mBAAW,CAAC,eAAe;QAC3B,mBAAW,CAAC,gBAAgB;KAC7B;CACF,CAAC;AAEF;;GAEG;AACU,QAAA,gBAAgB,GAA6B;IACxD,QAAQ;IACR,mBAAmB,EAAE,CAAC,mBAAW,CAAC,UAAU,CAAC;IAE7C,SAAS;IACT,gBAAgB,EAAE,CAAC,mBAAW,CAAC,WAAW,CAAC;IAC3C,eAAe,EAAE,CAAC,mBAAW,CAAC,WAAW,CAAC;IAC1C,eAAe,EAAE,CAAC,mBAAW,CAAC,YAAY,CAAC;IAC3C,sBAAsB,EAAE,CAAC,mBAAW,CAAC,gBAAgB,CAAC;IACtD,qBAAqB,EAAE,CAAC,mBAAW,CAAC,YAAY,CAAC;IAEjD,MAAM;IACN,kBAAkB,EAAE,CAAC,mBAAW,CAAC,YAAY,CAAC;IAC9C,wBAAwB,EAAE,CAAC,mBAAW,CAAC,YAAY,CAAC;IACpD,sBAAsB,EAAE,CAAC,mBAAW,CAAC,YAAY,CAAC;IAElD,SAAS;IACT,eAAe,EAAE,CAAC,mBAAW,CAAC,WAAW,CAAC;IAC1C,eAAe,EAAE,CAAC,mBAAW,CAAC,WAAW,CAAC;IAE1C,oBAAoB;IACpB,kBAAkB,EAAE,CAAC,mBAAW,CAAC,cAAc,CAAC;IAEhD,uBAAuB;IACvB,mBAAmB,EAAE,CAAC,mBAAW,CAAC,eAAe,CAAC;IAElD,qBAAqB;IACrB,mBAAmB,EAAE,CAAC,mBAAW,CAAC,eAAe,CAAC;IAElD,cAAc;IACd,iBAAiB,EAAE,CAAC,mBAAW,CAAC,gBAAgB,CAAC;IACjD,gBAAgB,EAAE,CAAC,mBAAW,CAAC,eAAe,CAAC;IAC/C,kBAAkB,EAAE,CAAC,mBAAW,CAAC,gBAAgB,CAAC;IAElD,kBAAkB;IAClB,gBAAgB,EAAE,CAAC,mBAAW,CAAC,aAAa,CAAC;IAE7C,UAAU;IACV,aAAa,EAAE,CAAC,mBAAW,CAAC,YAAY,CAAC;IACzC,cAAc,EAAE,CAAC,mBAAW,CAAC,YAAY,CAAC;IAE1C,4BAA4B;IAC5B,aAAa,EAAE,CAAC,mBAAW,CAAC,WAAW,CAAC;IACxC,cAAc,EAAE,CAAC,mBAAW,CAAC,WAAW,CAAC;IACzC,cAAc,EAAE,CAAC,mBAAW,CAAC,WAAW,CAAC;IAEzC,gBAAgB;IAChB,cAAc,EAAE,CAAC,mBAAW,CAAC,WAAW,EAAE,mBAAW,CAAC,WAAW,EAAE,mBAAW,CAAC,YAAY,CAAC;IAC5F,mBAAmB,EAAE,CAAC,mBAAW,CAAC,WAAW,CAAC;IAE9C,eAAe;IACf,eAAe,EAAE,CAAC,mBAAW,CAAC,aAAa,CAAC;CAC7C,CAAC;AAEF;;;GAGG;AACU,QAAA,YAAY,GAAG,CAAC,eAAe,CAAC,CAAC;AAE9C,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,qBAAqB,GACzB,IAAA,sBAAa,GAAE;IACb,CAAC,CAAC;QACE,+BAA+B,EAAE;YAC/B,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,gBAAgB;SACzB;QACD,8BAA8B,EAAE;YAC9B,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,mBAAmB;SAC5B;QACD,gCAAgC,EAAE;YAChC,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,iBAAiB;SAC1B;QACD,iCAAiC,EAAE;YACjC,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,kBAAkB;YAC1B,OAAO,EAAE,IAAI;SACd;KACF;IACH,CAAC,CAAC,EAAE,CAAC,CAAC,iBAAiB;AAE3B,+EAA+E;AAC/E,OAAO;AACP,+EAA+E;AAE/E;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,QAAgB,EAAE,MAAc;IACzD,oBAAoB;IACpB,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEzC,0BAA0B;IAC1B,IAAI,cAAc,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM,EAAE,CAAC;QAClD,mBAAmB;QACnB,IAAA,wBAAe,EAAC,cAAc,EAAE,cAAc,CAAC,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAA,wBAAe,EAAC,cAAc,EAAE,YAAY,CAAC,CAAC;AACvD,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,cAAc,CAAC,MAA0B;IAC7D,mBAAmB;IACnB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;YACpB,eAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qCAAqC;IACrC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;YACpB,eAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yBAAyB;IACzB,2BAA2B;IAC3B,IAAI,cAAc,GAA6D,IAAI,CAAC;IACpF,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACzE,IAAI,iBAAiB,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;YACzC,cAAc,GAAG,OAAO,CAAC;YACzB,MAAM;QACR,CAAC;IACH,CAAC;IAED,IAAI,cAAc,EAAE,CAAC;QACnB,WAAW;QACX,IAAI,cAAc,CAAC,OAAO,EAAE,CAAC;YAC3B,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;gBACpB,eAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACzC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO;YACL,MAAM,EAAE,cAAc,CAAC,MAAM;YAC7B,IAAI,EAAE,cAAc,CAAC,IAAI;YACzB,WAAW,EAAE,aAAK,CAAC,cAAc,CAAC,IAAI,CAAC;YACvC,UAAU,EAAE,SAAS;YACrB,eAAe,EAAE,IAAI,IAAI,EAAE;SAC5B,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IAC5C,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAKhC,CAAC;YAEH,oBAAoB;YACpB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACrE,IAAI,SAAS,EAAE,CAAC;gBACd,WAAW;gBACX,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;oBACxB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;oBAChD,IAAI,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;wBAC3B,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;4BACpB,eAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;wBACpD,CAAC;wBACD,OAAO,IAAI,CAAC;oBACd,CAAC;gBACH,CAAC;gBAED,OAAO;oBACL,MAAM,EAAE,SAAS,CAAC,MAAM;oBACxB,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,WAAW,EAAE,aAAK,CAAC,SAAS,CAAC,IAAI,CAAC;oBAClC,UAAU,EAAE,SAAS;oBACrB,eAAe,EAAE,IAAI,IAAI,EAAE;iBAC5B,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,eAAM,CAAC,IAAI,CACT,4DAA4D;gBAC1D,4EAA4E,CAC/E,CAAC;YACF,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;gBACpB,eAAM,CAAC,KAAK,CACV,oDAAoD,EACpD,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAChE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;QACpB,eAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,eAAe,CAAC,OAAoB,EAAE,QAAgB;IACpE,gDAAgD;IAChD,IAAI,CAAC,CAAC,QAAQ,IAAI,wBAAgB,CAAC,EAAE,CAAC;QACpC,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;YACpB,eAAM,CAAC,IAAI,CAAC,gDAAgD,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,mBAAmB,GAAG,wBAAgB,CAAC,QAAQ,CAAC,CAAC;IAEvD,wCAAwC;IACxC,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;YAC3C,eAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,8BAA8B;IAC9B,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,eAAe;IACf,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2BAA2B;IAC3B,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,+EAA+E;AAC/E,cAAc;AACd,+EAA+E;AAE/E;;;;;GAKG;AACH,SAAgB,oBAAoB,CAAC,OAA+B;IAClE,MAAM,eAAe,GAAoC;QACvD,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,KAAK;QAClC,WAAW,EAAE,OAAO,EAAE,WAAW,IAAI,oBAAY;KAClD,CAAC;IAEF;;OAEG;IACH,MAAM,SAAS,GAAG,KAAK,EAAE,QAAgB,EAAE,MAA0B,EAAuB,EAAE;QAC5F,aAAa;QACb,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;YAC7B,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;gBACpB,eAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACjE,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,aAAa;QACb,IAAI,eAAe,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnD,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;gBACpB,eAAM,CAAC,KAAK,CAAC,uBAAuB,QAAQ,2BAA2B,CAAC,CAAC;YAC3E,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,UAAU;QACV,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;gBACpB,eAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;oBAC1C,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,wBAAwB;iBACjC,CAAC,CAAC;YACL,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,yBAAyB;iBACnC;aACF,CAAC;QACJ,CAAC;QAED,SAAS;QACT,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;YACxC,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;gBACpB,eAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;oBACzC,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,mBAAmB,EAAE,wBAAgB,CAAC,QAAQ,CAAC;oBAC/C,eAAe,EAAE,OAAO,CAAC,WAAW;iBACrC,CAAC,CAAC;YACL,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,WAAW;oBACjB,OAAO,EAAE,0BAA0B;iBACpC;aACF,CAAC;QACJ,CAAC;QAED,OAAO;QACP,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;YACpB,eAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;gBAC9C,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO;SACR,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO;QACL,SAAS;QACT,OAAO,EAAE,eAAe;KACzB,CAAC;AACJ,CAAC"}

package/dist/middleware/index.d.ts

@@ -1,10 +0,0 @@
-/**
- * ミドルウェアモジュールのエクスポート
- *
- * @module middleware
- */
-export { ResponseSizeWarning, responseSizeWarning, calculateResponseSize, formatSize, DEFAULT_WARNING_THRESHOLD_KB, DEFAULT_CRITICAL_THRESHOLD_KB, type ResponseSizeWarningOptions, type ResponseSizeResult, } from "./response-size-warning";
-export { createAuthMiddleware, validateApiKey, checkPermission, PERMISSIONS, ROLES, TOOL_PERMISSIONS, PUBLIC_TOOLS, type Role, type AuthContext, type AuthMiddlewareOptions, type AuthMiddlewareInstance, type AuthResult, type AuthErrorCode, type Permission, } from "./auth";
-export { LightResponseController, lightResponseController, applyLightResponse, extractLightResponseOptions, DEFAULT_LIGHT_RESPONSE_CONFIG, TOOL_FIELD_CONFIGS, type LightResponseOptions, type LightResponseControllerOptions, type ToolFieldConfig, } from "./light-response-controller";
-export { coerceArgs, buildCoercionMap, getCoercionMap, clearCoercionMapCache, type CoercionMap, } from "./args-type-coercion";
-//# sourceMappingURL=index.d.ts.map

package/dist/middleware/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AAEH,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,UAAU,EACV,4BAA4B,EAC5B,6BAA6B,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,GACxB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,eAAe,EACf,WAAW,EACX,KAAK,EACL,gBAAgB,EAChB,YAAY,EACZ,KAAK,IAAI,EACT,KAAK,WAAW,EAChB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,UAAU,GAChB,MAAM,QAAQ,CAAC;AAEhB,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,kBAAkB,EAClB,2BAA2B,EAC3B,6BAA6B,EAC7B,kBAAkB,EAClB,KAAK,oBAAoB,EACzB,KAAK,8BAA8B,EACnC,KAAK,eAAe,GACrB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,qBAAqB,EACrB,KAAK,WAAW,GACjB,MAAM,sBAAsB,CAAC"}

package/dist/middleware/index.js

@@ -1,38 +0,0 @@
-"use strict";
-// SPDX-FileCopyrightText: 2026 TKMD and Reftrix Contributors
-// SPDX-License-Identifier: AGPL-3.0-only
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.clearCoercionMapCache = exports.getCoercionMap = exports.buildCoercionMap = exports.coerceArgs = exports.TOOL_FIELD_CONFIGS = exports.DEFAULT_LIGHT_RESPONSE_CONFIG = exports.extractLightResponseOptions = exports.applyLightResponse = exports.lightResponseController = exports.LightResponseController = exports.PUBLIC_TOOLS = exports.TOOL_PERMISSIONS = exports.ROLES = exports.PERMISSIONS = exports.checkPermission = exports.validateApiKey = exports.createAuthMiddleware = exports.DEFAULT_CRITICAL_THRESHOLD_KB = exports.DEFAULT_WARNING_THRESHOLD_KB = exports.formatSize = exports.calculateResponseSize = exports.responseSizeWarning = exports.ResponseSizeWarning = void 0;
-/**
- * ミドルウェアモジュールのエクスポート
- *
- * @module middleware
- */
-var response_size_warning_1 = require("./response-size-warning");
-Object.defineProperty(exports, "ResponseSizeWarning", { enumerable: true, get: function () { return response_size_warning_1.ResponseSizeWarning; } });
-Object.defineProperty(exports, "responseSizeWarning", { enumerable: true, get: function () { return response_size_warning_1.responseSizeWarning; } });
-Object.defineProperty(exports, "calculateResponseSize", { enumerable: true, get: function () { return response_size_warning_1.calculateResponseSize; } });
-Object.defineProperty(exports, "formatSize", { enumerable: true, get: function () { return response_size_warning_1.formatSize; } });
-Object.defineProperty(exports, "DEFAULT_WARNING_THRESHOLD_KB", { enumerable: true, get: function () { return response_size_warning_1.DEFAULT_WARNING_THRESHOLD_KB; } });
-Object.defineProperty(exports, "DEFAULT_CRITICAL_THRESHOLD_KB", { enumerable: true, get: function () { return response_size_warning_1.DEFAULT_CRITICAL_THRESHOLD_KB; } });
-var auth_1 = require("./auth");
-Object.defineProperty(exports, "createAuthMiddleware", { enumerable: true, get: function () { return auth_1.createAuthMiddleware; } });
-Object.defineProperty(exports, "validateApiKey", { enumerable: true, get: function () { return auth_1.validateApiKey; } });
-Object.defineProperty(exports, "checkPermission", { enumerable: true, get: function () { return auth_1.checkPermission; } });
-Object.defineProperty(exports, "PERMISSIONS", { enumerable: true, get: function () { return auth_1.PERMISSIONS; } });
-Object.defineProperty(exports, "ROLES", { enumerable: true, get: function () { return auth_1.ROLES; } });
-Object.defineProperty(exports, "TOOL_PERMISSIONS", { enumerable: true, get: function () { return auth_1.TOOL_PERMISSIONS; } });
-Object.defineProperty(exports, "PUBLIC_TOOLS", { enumerable: true, get: function () { return auth_1.PUBLIC_TOOLS; } });
-var light_response_controller_1 = require("./light-response-controller");
-Object.defineProperty(exports, "LightResponseController", { enumerable: true, get: function () { return light_response_controller_1.LightResponseController; } });
-Object.defineProperty(exports, "lightResponseController", { enumerable: true, get: function () { return light_response_controller_1.lightResponseController; } });
-Object.defineProperty(exports, "applyLightResponse", { enumerable: true, get: function () { return light_response_controller_1.applyLightResponse; } });
-Object.defineProperty(exports, "extractLightResponseOptions", { enumerable: true, get: function () { return light_response_controller_1.extractLightResponseOptions; } });
-Object.defineProperty(exports, "DEFAULT_LIGHT_RESPONSE_CONFIG", { enumerable: true, get: function () { return light_response_controller_1.DEFAULT_LIGHT_RESPONSE_CONFIG; } });
-Object.defineProperty(exports, "TOOL_FIELD_CONFIGS", { enumerable: true, get: function () { return light_response_controller_1.TOOL_FIELD_CONFIGS; } });
-var args_type_coercion_1 = require("./args-type-coercion");
-Object.defineProperty(exports, "coerceArgs", { enumerable: true, get: function () { return args_type_coercion_1.coerceArgs; } });
-Object.defineProperty(exports, "buildCoercionMap", { enumerable: true, get: function () { return args_type_coercion_1.buildCoercionMap; } });
-Object.defineProperty(exports, "getCoercionMap", { enumerable: true, get: function () { return args_type_coercion_1.getCoercionMap; } });
-Object.defineProperty(exports, "clearCoercionMapCache", { enumerable: true, get: function () { return args_type_coercion_1.clearCoercionMapCache; } });
-//# sourceMappingURL=index.js.map

package/dist/middleware/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":";AAAA,6DAA6D;AAC7D,yCAAyC;;;AAEzC;;;;GAIG;AAEH,iEASiC;AAR/B,4HAAA,mBAAmB,OAAA;AACnB,4HAAA,mBAAmB,OAAA;AACnB,8HAAA,qBAAqB,OAAA;AACrB,mHAAA,UAAU,OAAA;AACV,qIAAA,4BAA4B,OAAA;AAC5B,sIAAA,6BAA6B,OAAA;AAK/B,+BAegB;AAdd,4GAAA,oBAAoB,OAAA;AACpB,sGAAA,cAAc,OAAA;AACd,uGAAA,eAAe,OAAA;AACf,mGAAA,WAAW,OAAA;AACX,6FAAA,KAAK,OAAA;AACL,wGAAA,gBAAgB,OAAA;AAChB,oGAAA,YAAY,OAAA;AAUd,yEAUqC;AATnC,oIAAA,uBAAuB,OAAA;AACvB,oIAAA,uBAAuB,OAAA;AACvB,+HAAA,kBAAkB,OAAA;AAClB,wIAAA,2BAA2B,OAAA;AAC3B,0IAAA,6BAA6B,OAAA;AAC7B,+HAAA,kBAAkB,OAAA;AAMpB,2DAM8B;AAL5B,gHAAA,UAAU,OAAA;AACV,sHAAA,gBAAgB,OAAA;AAChB,oHAAA,cAAc,OAAA;AACd,2HAAA,qBAAqB,OAAA"}