@sashido/mcp-server 0.0.0-stage → 0.2.1

package/dist/client/sashido.js

@@ -0,0 +1,289 @@
+import axios from 'axios';
+import { appConfig } from '../config.js';
+import { auditHeaders } from '../audit.js';
+export class SashidoApiError extends Error {
+    statusCode;
+    code;
+    constructor(message, statusCode, code) {
+        super(message);
+        this.statusCode = statusCode;
+        this.code = code;
+        this.name = 'SashidoApiError';
+    }
+}
+/**
+ * The SashiDo API with a personal access token. The token's scopes decide
+ * what each call may do; app keys are never returned to it.
+ */
+export class SashidoClient {
+    client;
+    constructor(token, apiUrl = appConfig.sashido.apiUrl) {
+        this.client = axios.create({
+            baseURL: apiUrl,
+            headers: {
+                'Content-Type': 'application/json',
+                Authorization: `Bearer ${token}`,
+            },
+        });
+        // the tool call this request belongs to, for the API's audit log
+        this.client.interceptors.request.use((config) => {
+            for (const [name, value] of Object.entries(auditHeaders())) {
+                config.headers.set(name, value);
+            }
+            return config;
+        });
+        this.client.interceptors.response.use((response) => response, (error) => {
+            if (error.response) {
+                const { status, data } = error.response;
+                // the API answers {code, message}, a plain text message (errors
+                // thrown in controllers) or, for invalid input, the fields
+                const body = data;
+                let message = error.message;
+                if (typeof body === 'string' && body.trim()) {
+                    message = body.trim();
+                }
+                else if (data && typeof data.message === 'string') {
+                    message = data.message;
+                }
+                else if (body && typeof body === 'object') {
+                    message = `Invalid input: ${JSON.stringify(body)}`;
+                }
+                throw new SashidoApiError(message, status, data?.code);
+            }
+            throw new SashidoApiError(error.message, 500);
+        });
+    }
+    // SECURITY: Fields that are SAFE to expose (case-insensitive)
+    static ALLOWED_FIELDS = new Set([
+        'restapikey', 'restApiKey',
+        'serverurl', 'serverUrl',
+        'appid', 'appId',
+        'clientkey', 'clientKey',
+        'dotnetkey', 'dotNetKey',
+        'filekey', 'fileKey',
+        'javascriptkey', 'javascriptKey',
+        's3_base_url', 's3BaseUrl',
+    ].map(f => f.toLowerCase()));
+    // SECURITY: List of sensitive field names to ALWAYS remove (case-insensitive)
+    static SENSITIVE_FIELDS = new Set([
+        'masterkey', 'webhookkey', 'serverkey',
+        'databaseuri', 'mongodburl', 'database_uri', 'connectionstring',
+        'database', 'mongodb',
+        'bcdn_zone_id', 'bcdn_last_tracked_transfer',
+        'gcm', 'gcmsenderid', 'gcmapikey',
+        'firebase', 'firebaseconfig',
+        'oauthgoogleclientid', 'oauthgoogleclientsecret', 'oauth',
+        'privatekey', 'serviceaccount',
+        'env', 'customdeploymentenv',
+        'password', 'secret', 'credential',
+        'accesskey', 'secretkey', 'authkey', 'encryptionkey',
+        'limits', // deployment.limits
+    ]);
+    // SECURITY: Patterns that indicate sensitive data in field names
+    static SENSITIVE_PATTERNS = [
+        /^master/i, /secret/i, /password/i, /credential/i,
+        /mongodb/i, /database/i, /connection/i,
+        /firebase/i, /gcm/i, /oauth/i, /private/i, /encrypt/i,
+        /^bcdn_/i,
+    ];
+    // SECURITY: Check if a field name indicates sensitive data
+    isSensitiveField(fieldName) {
+        const lowerName = fieldName.toLowerCase();
+        // First check if it's explicitly allowed
+        if (SashidoClient.ALLOWED_FIELDS.has(lowerName)) {
+            return false;
+        }
+        // Check exact matches
+        if (SashidoClient.SENSITIVE_FIELDS.has(lowerName)) {
+            return true;
+        }
+        // Check patterns
+        return SashidoClient.SENSITIVE_PATTERNS.some(pattern => pattern.test(fieldName));
+    }
+    // SECURITY: Deep sanitize any object, removing sensitive fields recursively
+    deepSanitize(obj) {
+        if (obj === null || obj === undefined) {
+            return obj;
+        }
+        if (Array.isArray(obj)) {
+            return obj.map(item => this.deepSanitize(item));
+        }
+        if (typeof obj === 'object') {
+            const sanitized = {};
+            for (const [key, value] of Object.entries(obj)) {
+                // Skip sensitive fields entirely
+                if (this.isSensitiveField(key)) {
+                    continue;
+                }
+                // Recursively sanitize nested objects
+                sanitized[key] = this.deepSanitize(value);
+            }
+            return sanitized;
+        }
+        // For strings, check if it looks like a connection string
+        if (typeof obj === 'string') {
+            const str = obj;
+            // Redact MongoDB connection strings
+            if (str.startsWith('mongodb://') || str.startsWith('mongodb+srv://')) {
+                return '[REDACTED_CONNECTION_STRING]';
+            }
+        }
+        return obj;
+    }
+    // Apps - uses /users/info endpoint which returns apps under products.apps
+    // SECURITY: Filters out sensitive credentials before returning
+    async listApps() {
+        const response = await this.client.get('/users/info');
+        // Deep sanitize each app to remove ALL sensitive data
+        const apps = response.data.data.products.apps;
+        return apps.map(app => this.deepSanitize(app));
+    }
+    // Create App - POST /apps
+    async createApp(data) {
+        const response = await this.client.post('/apps', data);
+        return response.data;
+    }
+    /** The account's activity (audit log), newest first */
+    async listActivities(options = {}) {
+        const path = options.type ? `/activities/${encodeURIComponent(options.type)}` : '/activities';
+        const response = await this.client.get(path, {
+            params: { page: options.page || 1, pageSize: options.pageSize || 50 },
+        });
+        // of the app only its id and name, whatever the API includes
+        return response.data.data.map((a) => ({
+            ...a,
+            app: a.app ? { objectId: a.app.objectId, name: a.app.name } : undefined,
+        }));
+    }
+    /** The app's deployments, newest first */
+    async listDeployments(appObjectId, limit = 10) {
+        const response = await this.client.get(`/apps/${encodeURIComponent(appObjectId)}/deployments`, { params: { limit } });
+        return response.data.data;
+    }
+    /** Parse Server versions apps may be created on or switched to */
+    async listParseServerVersions() {
+        const response = await this.client.get('/products/parse-server-versions');
+        return response.data.data;
+    }
+    /** Switches the app's Parse Server version; the API redeploys it */
+    async changeParseServerVersion(appObjectId, imageTag) {
+        const response = await this.client.put(`/apps/${encodeURIComponent(appObjectId)}/version`, { imageTag });
+        return response.data.data;
+    }
+    // Deploy App - POST /apps/{appObjectId}/deploy
+    async deployApp(appObjectId, region) {
+        const params = region ? `?region=${encodeURIComponent(region)}` : '';
+        await this.client.post(`/apps/${encodeURIComponent(appObjectId)}/deploy${params}`);
+    }
+    // Cancel Deployment - POST /apps/{appObjectId}/deploy/cancel
+    async cancelDeployment(appObjectId, deploymentName, region) {
+        const params = region ? `?region=${encodeURIComponent(region)}` : '';
+        await this.client.post(`/apps/${encodeURIComponent(appObjectId)}/deploy/cancel${params}`, { name: deploymentName });
+    }
+    // Get Active Deployment - GET /processes/{appObjectId}/latest-deployment
+    // Returns the currently ACTIVE deployment (serving traffic)
+    async getActiveDeployment(appObjectId) {
+        const response = await this.client.get(`/processes/${encodeURIComponent(appObjectId)}/latest-deployment`);
+        const processes = response.data;
+        let deploymentName = null;
+        let deploymentNumber = null;
+        // Extract deployment name from first hostname key
+        // Hostname format: parse-server-deployment-24-pod123 -> deployment name: parse-server-deployment-24
+        const hostnames = Object.keys(processes);
+        if (hostnames.length > 0 && hostnames[0]) {
+            const hostname = hostnames[0];
+            // Remove last segment (pod ID) to get deployment name
+            const lastDash = hostname.lastIndexOf('-');
+            deploymentName = lastDash > 0 ? hostname.slice(0, lastDash) : hostname;
+            // Extract deployment number from deployment name
+            // parse-server-deployment-24 -> 24
+            const match = deploymentName.match(/-(\d+)$/);
+            if (match && match[1]) {
+                deploymentNumber = parseInt(match[1], 10);
+            }
+        }
+        return { deploymentName, deploymentNumber, processes };
+    }
+    // Get Running Deployment - the deployment currently being deployed (ACTIVE + 1)
+    async getRunningDeployment(appObjectId) {
+        const active = await this.getActiveDeployment(appObjectId);
+        let deploymentName = null;
+        let deploymentNumber = null;
+        if (active.deploymentNumber !== null) {
+            deploymentNumber = active.deploymentNumber + 1;
+            deploymentName = `parse-server-deployment-${deploymentNumber}`;
+        }
+        return {
+            deploymentName,
+            deploymentNumber,
+            activeDeploymentNumber: active.deploymentNumber,
+        };
+    }
+    // Builds - GET /apps/{appObjectId}/builds
+    async listBuilds(appObjectId, limit) {
+        const params = limit ? `?limit=${encodeURIComponent(String(limit))}` : '';
+        const response = await this.client.get(`/apps/${encodeURIComponent(appObjectId)}/builds${params}`);
+        return response.data.data;
+    }
+    // Trigger Build - POST /apps/{appObjectId}/build
+    async triggerBuild(appObjectId, region) {
+        const params = region ? `?region=${encodeURIComponent(region)}` : '';
+        await this.client.post(`/apps/${encodeURIComponent(appObjectId)}/build${params}`);
+    }
+    // Cancel Build - POST /apps/{appObjectId}/build/cancel
+    async cancelBuild(appObjectId, buildName, region) {
+        const params = region ? `?region=${encodeURIComponent(region)}` : '';
+        await this.client.post(`/apps/${encodeURIComponent(appObjectId)}/build/cancel${params}`, { name: buildName });
+    }
+    // Environment Variables - GET /apps/{appObjectId}/env
+    async listEnvVars(appObjectId) {
+        const response = await this.client.get(`/apps/${encodeURIComponent(appObjectId)}/env`);
+        return response.data.data;
+    }
+    // Update Environment Variables - PUT /apps/{appObjectId}/env
+    async updateEnvVars(appObjectId, env) {
+        await this.client.put(`/apps/${encodeURIComponent(appObjectId)}/env`, { env });
+    }
+    // Scale App - PUT /apps/{appObjectId}/scale
+    async setScale(appObjectId, scale, region) {
+        const params = region ? `?region=${encodeURIComponent(region)}` : '';
+        await this.client.put(`/apps/${encodeURIComponent(appObjectId)}/scale${params}`, scale);
+    }
+    // Update App Name - PUT /apps/{appObjectId}/name
+    async updateAppName(appObjectId, name) {
+        await this.client.put(`/apps/${encodeURIComponent(appObjectId)}/name`, { name });
+    }
+    // Set High Availability - PUT /apps/{appObjectId}/highAvailability
+    async setHighAvailability(appObjectId, enabled) {
+        await this.client.put(`/apps/${encodeURIComponent(appObjectId)}/highAvailability`, { enabled });
+    }
+    // List available Parse Server engines - GET /products/parse-server-engines
+    async listEngines() {
+        const response = await this.client.get('/products/parse-server-engines');
+        return response.data.data;
+    }
+    // Set engine for an app - PUT /apps/{appObjectId}/engine
+    async setEngine(appObjectId, engineName, billingPolicy, region) {
+        const params = region ? `?region=${encodeURIComponent(region)}` : '';
+        await this.client.put(`/apps/${encodeURIComponent(appObjectId)}/engine${params}`, {
+            name: engineName,
+            billingPolicy,
+        });
+    }
+    // The access token: scopes, apps, expiry and user - GET /tokens/current
+    async getTokenInfo() {
+        const response = await this.client.get('/tokens/current');
+        return response.data.data;
+    }
+    // The last lines of a build's log - GET /apps/{id}/builds/{buildId}/log
+    async getBuildLog(appObjectId, buildId, lines) {
+        const response = await this.client.get(`/apps/${encodeURIComponent(appObjectId)}/builds/${encodeURIComponent(buildId)}/log`, { params: lines ? { lines } : {} });
+        return response.data.data;
+    }
+    // Changes made through the API are recorded in the account's activity by
+    // the API itself (the Parse proxy logs every write), so nothing is sent.
+    async logActivity(activityType, _message) {
+        void activityType;
+    }
+}
+//# sourceMappingURL=sashido.js.map

package/dist/client/sashido.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sashido.js","sourceRoot":"","sources":["../../src/client/sashido.ts"],"names":[],"mappings":"AAAA,OAAO,KAAoC,MAAM,OAAO,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAqH3C,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAG/B;IACA;IAHT,YACE,OAAe,EACR,UAAkB,EAClB,IAAa;QAEpB,KAAK,CAAC,OAAO,CAAC,CAAC;QAHR,eAAU,GAAV,UAAU,CAAQ;QAClB,SAAI,GAAJ,IAAI,CAAS;QAGpB,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAqBD;;;GAGG;AACH,MAAM,OAAO,aAAa;IAChB,MAAM,CAAgB;IAE9B,YAAY,KAAa,EAAE,SAAiB,SAAS,CAAC,OAAO,CAAC,MAAM;QAClE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;YACzB,OAAO,EAAE,MAAM;YACf,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,KAAK,EAAE;aACjC;SACF,CAAC,CAAC;QAEH,iEAAiE;QACjE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAC9C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,EAAE,CAAC;gBAC3D,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAClC,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CACnC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,EACtB,CAAC,KAA2B,EAAE,EAAE;YAC9B,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC;gBACxC,gEAAgE;gBAChE,2DAA2D;gBAC3D,MAAM,IAAI,GAAG,IAAe,CAAC;gBAC7B,IAAI,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;gBAC5B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC5C,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBACxB,CAAC;qBAAM,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACpD,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;gBACzB,CAAC;qBAAM,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC5C,OAAO,GAAG,kBAAkB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrD,CAAC;gBACD,MAAM,IAAI,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACzD,CAAC;YACD,MAAM,IAAI,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC,CACF,CAAC;IACJ,CAAC;IAED,8DAA8D;IACtD,MAAM,CAAU,cAAc,GAAG,IAAI,GAAG,CAAC;QAC/C,YAAY,EAAE,YAAY;QAC1B,WAAW,EAAE,WAAW;QACxB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,WAAW;QACxB,SAAS,EAAE,SAAS;QACpB,eAAe,EAAE,eAAe;QAChC,aAAa,EAAE,WAAW;KAC3B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAE7B,8EAA8E;IACtE,MAAM,CAAU,gBAAgB,GAAG,IAAI,GAAG,CAAC;QACjD,WAAW,EAAE,YAAY,EAAE,WAAW;QACtC,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,kBAAkB;QAC/D,UAAU,EAAE,SAAS;QACrB,cAAc,EAAE,4BAA4B;QAC5C,KAAK,EAAE,aAAa,EAAE,WAAW;QACjC,UAAU,EAAE,gBAAgB;QAC5B,qBAAqB,EAAE,yBAAyB,EAAE,OAAO;QACzD,YAAY,EAAE,gBAAgB;QAC9B,KAAK,EAAE,qBAAqB;QAC5B,UAAU,EAAE,QAAQ,EAAE,YAAY;QAClC,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe;QACpD,QAAQ,EAAE,oBAAoB;KAC/B,CAAC,CAAC;IAEH,iEAAiE;IACzD,MAAM,CAAU,kBAAkB,GAAG;QAC3C,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa;QACjD,UAAU,EAAE,WAAW,EAAE,aAAa;QACtC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU;QACrD,SAAS;KACV,CAAC;IAEF,2DAA2D;IACnD,gBAAgB,CAAC,SAAiB;QACxC,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;QAE1C,yCAAyC;QACzC,IAAI,aAAa,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAChD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,sBAAsB;QACtB,IAAI,aAAa,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,iBAAiB;QACjB,OAAO,aAAa,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACnF,CAAC;IAED,4EAA4E;IACpE,YAAY,CAAC,GAAY;QAC/B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,GAAG,CAAC;QACb,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,SAAS,GAA4B,EAAE,CAAC;YAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,iCAAiC;gBACjC,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC/B,SAAS;gBACX,CAAC;gBACD,sCAAsC;gBACtC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,0DAA0D;QAC1D,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,GAAa,CAAC;YAC1B,oCAAoC;YACpC,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACrE,OAAO,8BAA8B,CAAC;YACxC,CAAC;QACH,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,0EAA0E;IAC1E,+DAA+D;IAC/D,KAAK,CAAC,QAAQ;QACZ,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAOnC,aAAa,CAAC,CAAC;QAElB,sDAAsD;QACtD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC9C,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAQ,CAAC,CAAC;IACxD,CAAC;IAED,0BAA0B;IAC1B,KAAK,CAAC,SAAS,CAAC,IAIf;QACC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAM,OAAO,EAAE,IAAI,CAAC,CAAC;QAC5D,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,uDAAuD;IACvD,KAAK,CAAC,cAAc,CAAC,UAA+D,EAAE;QACpF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;QAC9F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAuB,IAAI,EAAE;YACjE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE;SACtE,CAAC,CAAC;QACH,6DAA6D;QAC7D,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpC,GAAG,CAAC;YACJ,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAG,CAAC,CAAC,GAAyB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;SAC/F,CAAC,CAAC,CAAC;IACN,CAAC;IAED,0CAA0C;IAC1C,KAAK,CAAC,eAAe,CAAC,WAAmB,EAAE,KAAK,GAAG,EAAE;QACnD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CACpC,SAAS,kBAAkB,CAAC,WAAW,CAAC,cAAc,EACtD,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,CACtB,CAAC;QACF,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED,kEAAkE;IAClE,KAAK,CAAC,uBAAuB;QAC3B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CACpC,iCAAiC,CAClC,CAAC;QACF,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED,oEAAoE;IACpE,KAAK,CAAC,wBAAwB,CAAC,WAAmB,EAAE,QAAgB;QAClE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CACpC,SAAS,kBAAkB,CAAC,WAAW,CAAC,UAAU,EAClD,EAAE,QAAQ,EAAE,CACb,CAAC;QACF,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,SAAS,CAAC,WAAmB,EAAE,MAAe;QAClD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,kBAAkB,CAAC,WAAW,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,gBAAgB,CAAC,WAAmB,EAAE,cAAsB,EAAE,MAAe;QACjF,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,kBAAkB,CAAC,WAAW,CAAC,iBAAiB,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;IACtH,CAAC;IAED,yEAAyE;IACzE,4DAA4D;IAC5D,KAAK,CAAC,mBAAmB,CAAC,WAAmB;QAK3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAA4B,cAAc,kBAAkB,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC;QACrI,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC;QAEhC,IAAI,cAAc,GAAkB,IAAI,CAAC;QACzC,IAAI,gBAAgB,GAAkB,IAAI,CAAC;QAE3C,kDAAkD;QAClD,oGAAoG;QACpG,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAEzC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YAC9B,sDAAsD;YACtD,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAC3C,cAAc,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YAEvE,iDAAiD;YACjD,mCAAmC;YACnC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC9C,IAAI,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtB,gBAAgB,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QAED,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC;IACzD,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,oBAAoB,CAAC,WAAmB;QAK5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAE3D,IAAI,cAAc,GAAkB,IAAI,CAAC;QACzC,IAAI,gBAAgB,GAAkB,IAAI,CAAC;QAE3C,IAAI,MAAM,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;YACrC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,GAAG,CAAC,CAAC;YAC/C,cAAc,GAAG,2BAA2B,gBAAgB,EAAE,CAAC;QACjE,CAAC;QAED,OAAO;YACL,cAAc;YACd,gBAAgB;YAChB,sBAAsB,EAAE,MAAM,CAAC,gBAAgB;SAChD,CAAC;IACJ,CAAC;IAED,0CAA0C;IAC1C,KAAK,CAAC,UAAU,CAAC,WAAmB,EAAE,KAAc;QAClD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAoB,SAAS,kBAAkB,CAAC,WAAW,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC;QACtH,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,YAAY,CAAC,WAAmB,EAAE,MAAe;QACrD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,kBAAkB,CAAC,WAAW,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,uDAAuD;IACvD,KAAK,CAAC,WAAW,CAAC,WAAmB,EAAE,SAAiB,EAAE,MAAe;QACvE,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,kBAAkB,CAAC,WAAW,CAAC,gBAAgB,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAChH,CAAC;IAED,sDAAsD;IACtD,KAAK,CAAC,WAAW,CAAC,WAAmB;QACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAA0B,SAAS,kBAAkB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAChH,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,aAAa,CAAC,WAAmB,EAAE,GAAkB;QACzD,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,kBAAkB,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,4CAA4C;IAC5C,KAAK,CAAC,QAAQ,CAAC,WAAmB,EAAE,KAAkB,EAAE,MAAe;QACrE,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,kBAAkB,CAAC,WAAW,CAAC,SAAS,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;IAC1F,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,aAAa,CAAC,WAAmB,EAAE,IAAY;QACnD,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,kBAAkB,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,mEAAmE;IACnE,KAAK,CAAC,mBAAmB,CAAC,WAAmB,EAAE,OAAgB;QAC7D,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,kBAAkB,CAAC,WAAW,CAAC,mBAAmB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAClG,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,WAAW;QACf,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAgC,gCAAgC,CAAC,CAAC;QACxG,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED,yDAAyD;IACzD,KAAK,CAAC,SAAS,CACb,WAAmB,EACnB,UAAkB,EAClB,aAAmC,EACnC,MAAe;QAEf,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,kBAAkB,CAAC,WAAW,CAAC,UAAU,MAAM,EAAE,EAAE;YAChF,IAAI,EAAE,UAAU;YAChB,aAAa;SACd,CAAC,CAAC;IACL,CAAC;IAED,wEAAwE;IACxE,KAAK,CAAC,YAAY;QAChB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAsB,iBAAiB,CAAC,CAAC;QAC/E,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED,wEAAwE;IACxE,KAAK,CAAC,WAAW,CAAC,WAAmB,EAAE,OAAe,EAAE,KAAc;QACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CACpC,SAAS,kBAAkB,CAAC,WAAW,CAAC,WAAW,kBAAkB,CAAC,OAAO,CAAC,MAAM,EACpF,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACnC,CAAC;QACF,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED,yEAAyE;IACzE,yEAAyE;IACzE,KAAK,CAAC,WAAW,CACf,YAS4B,EAC5B,QAAgB;QAEhB,KAAK,YAAY,CAAC;IACpB,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,27 @@
+export declare const appConfig: {
+    readonly sashido: {
+        readonly apiUrl: string;
+    };
+    readonly stdio: {
+        readonly accessToken: string | undefined;
+        readonly readOnly: string | undefined;
+        readonly apps: string | undefined;
+        readonly features: string | undefined;
+    };
+    readonly server: {
+        readonly host: string;
+        readonly port: number;
+        readonly allowedOrigins: string[];
+        readonly trustProxy: boolean;
+        readonly rateLimitPerMinute: number;
+    };
+    readonly redis: {
+        readonly url: string | undefined;
+        readonly password: string | undefined;
+        readonly db: number;
+        readonly sessionTtlSeconds: number;
+    };
+    readonly logLevel: "debug" | "info" | "warn" | "error";
+};
+export type AppConfig = typeof appConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAqDA,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;CAyBZ,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC"}

package/dist/config.js

@@ -0,0 +1,70 @@
+import { config } from "dotenv";
+import { z } from "zod";
+config();
+const list = (value) => (value || "")
+    .split(",")
+    .map((v) => v.trim())
+    .filter(Boolean);
+const envSchema = z.object({
+    SASHIDO_API_URL: z.string().url().default("https://api.sashido.io"),
+    // stdio only: the personal access token of the local user. Over HTTP
+    // every request brings its own token and nothing else is used.
+    SASHIDO_ACCESS_TOKEN: z.string().optional(),
+    // stdio only: narrow what the token allows, like the URL options over HTTP
+    SASHIDO_READ_ONLY: z.string().optional(),
+    SASHIDO_APPS: z.string().optional(),
+    SASHIDO_FEATURES: z.string().optional(),
+    // HTTP: listen on localhost unless a deployment says otherwise
+    HOST: z.string().default("127.0.0.1"),
+    // PORT is the standard env var for container platforms (S2I, Heroku, etc.)
+    PORT: z.coerce.number().optional(),
+    MCP_SERVER_PORT: z.coerce.number().default(3100),
+    // browser origins allowed to call the server (CORS and the DNS rebinding
+    // check); clients that aren't browsers send no Origin
+    ALLOWED_ORIGINS: z.string().optional(),
+    // behind a load balancer: trust X-Forwarded-For for the client IP
+    TRUST_PROXY: z.string().optional(),
+    // requests per minute per client IP
+    RATE_LIMIT_PER_MINUTE: z.coerce.number().default(300),
+    LOG_LEVEL: z.enum(["debug", "info", "warn", "error"]).default("info"),
+    // Redis lets SSE connections on one instance receive the messages posted
+    // to another (optional - falls back to in-memory for a single instance)
+    REDIS_URL: z.string().url().optional(),
+    REDIS_PASSWORD: z.string().optional(),
+    REDIS_DB: z.coerce.number().min(0).max(15).default(0),
+    SESSION_TTL_SECONDS: z.coerce.number().default(3600),
+});
+const parseResult = envSchema.safeParse(process.env);
+if (!parseResult.success) {
+    console.error("Invalid environment configuration:");
+    console.error(parseResult.error.format());
+    process.exit(1);
+}
+const env = parseResult.data;
+export const appConfig = {
+    sashido: {
+        apiUrl: env.SASHIDO_API_URL,
+    },
+    stdio: {
+        accessToken: env.SASHIDO_ACCESS_TOKEN,
+        readOnly: env.SASHIDO_READ_ONLY,
+        apps: env.SASHIDO_APPS,
+        features: env.SASHIDO_FEATURES,
+    },
+    server: {
+        host: env.HOST,
+        // PORT takes precedence (standard for S2I/containers), fallback to MCP_SERVER_PORT
+        port: env.PORT ?? env.MCP_SERVER_PORT,
+        allowedOrigins: list(env.ALLOWED_ORIGINS),
+        trustProxy: env.TRUST_PROXY === "true" || env.TRUST_PROXY === "1",
+        rateLimitPerMinute: env.RATE_LIMIT_PER_MINUTE,
+    },
+    redis: {
+        url: env.REDIS_URL,
+        password: env.REDIS_PASSWORD,
+        db: env.REDIS_DB,
+        sessionTtlSeconds: env.SESSION_TTL_SECONDS,
+    },
+    logLevel: env.LOG_LEVEL,
+};
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,EAAE,CAAC;AAET,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAC9B,CAAC,KAAK,IAAI,EAAE,CAAC;KACV,KAAK,CAAC,GAAG,CAAC;KACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;KACpB,MAAM,CAAC,OAAO,CAAC,CAAC;AAErB,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IACzB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC;IACnE,qEAAqE;IACrE,+DAA+D;IAC/D,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3C,2EAA2E;IAC3E,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEvC,+DAA+D;IAC/D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IACrC,2EAA2E;IAC3E,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAChD,yEAAyE;IACzE,sDAAsD;IACtD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,kEAAkE;IAClE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,oCAAoC;IACpC,qBAAqB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IAErD,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACrE,yEAAyE;IACzE,wEAAwE;IACxE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACtC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,mBAAmB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACrD,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAErD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;IACzB,OAAO,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACpD,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC;AAE7B,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,OAAO,EAAE;QACP,MAAM,EAAE,GAAG,CAAC,eAAe;KAC5B;IACD,KAAK,EAAE;QACL,WAAW,EAAE,GAAG,CAAC,oBAAoB;QACrC,QAAQ,EAAE,GAAG,CAAC,iBAAiB;QAC/B,IAAI,EAAE,GAAG,CAAC,YAAY;QACtB,QAAQ,EAAE,GAAG,CAAC,gBAAgB;KAC/B;IACD,MAAM,EAAE;QACN,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,mFAAmF;QACnF,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,eAAe;QACrC,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC;QACzC,UAAU,EAAE,GAAG,CAAC,WAAW,KAAK,MAAM,IAAI,GAAG,CAAC,WAAW,KAAK,GAAG;QACjE,kBAAkB,EAAE,GAAG,CAAC,qBAAqB;KAC9C;IACD,KAAK,EAAE;QACL,GAAG,EAAE,GAAG,CAAC,SAAS;QAClB,QAAQ,EAAE,GAAG,CAAC,cAAc;QAC5B,EAAE,EAAE,GAAG,CAAC,QAAQ;QAChB,iBAAiB,EAAE,GAAG,CAAC,mBAAmB;KAC3C;IACD,QAAQ,EAAE,GAAG,CAAC,SAAS;CACf,CAAC"}

package/dist/context.d.ts

@@ -0,0 +1,33 @@
+import { McpServer, ToolCallback } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { ZodRawShapeCompat } from "@modelcontextprotocol/sdk/server/zod-compat.js";
+import { Access } from "./access.js";
+import { ParseClient } from "./client/parse.js";
+import { SashidoClient } from "./client/sashido.js";
+/**
+ * What the tools of one MCP server instance work with: the access token of
+ * the request (HTTP) or of the local user (stdio), and what it may do.
+ */
+export interface ToolContext {
+    token: string;
+    access: Access;
+    /** The SashiDo API with the token */
+    sashido(): SashidoClient;
+    /** An app's Parse Server, through the API's proxy */
+    parse(appObjectId: string): ParseClient;
+    /** The app's name, for messages */
+    appName(appObjectId: string): Promise<string>;
+    /** An app's objectId from its objectId or its name */
+    resolveApp(value: string): Promise<string>;
+}
+export declare function createToolContext(token: string, access: Access, apiUrl?: string): ToolContext;
+/** server.tool(name, description, schema, handler), as the SDK types it */
+export interface ToolServer {
+    tool<Args extends ZodRawShapeCompat>(name: string, description: string, schema: Args, handler: ToolCallback<Args>): void;
+}
+/**
+ * Registers a group's tools on the MCP server, but only those the access
+ * allows (see access.ts), each with annotations so clients can ask before
+ * changes and deletions. Tools taking appObjectId accept an app's name too.
+ */
+export declare function toolServer(server: McpServer, group: string, access: Access, registered?: string[], ctx?: ToolContext): ToolServer;
+//# sourceMappingURL=context.d.ts.map

package/dist/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gDAAgD,CAAC;AAExF,OAAO,EAAE,MAAM,EAAiC,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAO,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAmBzD;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,qCAAqC;IACrC,OAAO,IAAI,aAAa,CAAC;IACzB,qDAAqD;IACrD,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,WAAW,CAAC;IACxC,mCAAmC;IACnC,OAAO,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,sDAAsD;IACtD,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC5C;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,MAAM,GAAE,MAAiC,GACxC,WAAW,CAsDb;AAED,2EAA2E;AAC3E,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,IAAI,SAAS,iBAAiB,EACjC,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,IAAI,EACZ,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,GAC1B,IAAI,CAAC;CACT;AAkBD;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,UAAU,GAAE,MAAM,EAAO,EACzB,GAAG,CAAC,EAAE,WAAW,GAChB,UAAU,CA4CZ"}

package/dist/context.js

@@ -0,0 +1,132 @@
+import { z } from "zod";
+import { annotationsFor, isToolAllowed } from "./access.js";
+import { ParseClient } from "./client/parse.js";
+import { SashidoClient } from "./client/sashido.js";
+import { appConfig } from "./config.js";
+import { logToolCall, newRequestId, runToolCall } from "./audit.js";
+/**
+ * The AI client calling, e.g. "claude-code/2.1.0": from the MCP initialize
+ * (stdio, SSE), or the HTTP request's User-Agent (stateless HTTP, where
+ * each request has its own server).
+ */
+function clientOf(server, extra) {
+    const info = server.server.getClientVersion();
+    if (info && info.name) {
+        return `${info.name}/${info.version || "?"}`.slice(0, 100);
+    }
+    const headers = (extra || {}).requestInfo?.headers;
+    const agent = headers && headers["user-agent"];
+    return typeof agent === "string" ? agent.slice(0, 100) : undefined;
+}
+export function createToolContext(token, access, apiUrl = appConfig.sashido.apiUrl) {
+    const assertApp = (appObjectId) => {
+        if (access.appIds && access.appIds.indexOf(appObjectId) === -1) {
+            // the API refuses it too; this says why up front
+            throw new Error(`This connection is limited to other apps (${access.appIds.join(", ")}).`);
+        }
+    };
+    // one server instance serves one request (HTTP) or one user (stdio)
+    let apps = null;
+    const listApps = () => {
+        if (!apps) {
+            apps =
+                access.scopes.indexOf("account:read") === -1
+                    ? Promise.resolve(null)
+                    : new SashidoClient(token, apiUrl).listApps().catch(() => null);
+        }
+        return apps;
+    };
+    return {
+        token,
+        access,
+        sashido: () => new SashidoClient(token, apiUrl),
+        parse: (appObjectId) => {
+            assertApp(appObjectId);
+            return new ParseClient(token, appObjectId, apiUrl);
+        },
+        appName: async (appObjectId) => {
+            const app = ((await listApps()) || []).find((a) => a.objectId === appObjectId);
+            return app ? app.name : appObjectId;
+        },
+        resolveApp: async (value) => {
+            const known = await listApps();
+            // without account:read the apps can't be listed: take it as an id
+            if (!known || known.some((a) => a.objectId === value)) {
+                return value;
+            }
+            const named = known.filter((a) => a.name.toLowerCase() === value.trim().toLowerCase());
+            if (named.length === 1) {
+                return named[0].objectId;
+            }
+            if (named.length > 1) {
+                throw new Error(`Several apps are named "${value}": ${named.map((a) => a.objectId).join(", ")}. Use the objectId.`);
+            }
+            throw new Error(`No app "${value}". Your apps: ${known.map((a) => `${a.name} (${a.objectId})`).join(", ") || "none"}.`);
+        },
+    };
+}
+/**
+ * Many tools catch their errors and answer "❌ ..." or "Error ...": mark
+ * those as errors, so clients and models know the call failed (thrown
+ * errors the SDK marks itself).
+ */
+function markErrors(result) {
+    const r = result;
+    const first = r && r.content && r.content[0];
+    if (first && first.type === "text" && /^\s*(❌|Error\b)/.test(first.text || "") && r.isError === undefined) {
+        return { ...r, isError: true };
+    }
+    return result;
+}
+const APP_FIELD = z.string().describe("The app: its name or objectId (see list_apps)");
+/**
+ * Registers a group's tools on the MCP server, but only those the access
+ * allows (see access.ts), each with annotations so clients can ask before
+ * changes and deletions. Tools taking appObjectId accept an app's name too.
+ */
+export function toolServer(server, group, access, registered = [], ctx) {
+    return {
+        tool(name, description, schema, handler) {
+            if (!isToolAllowed(name, group, access)) {
+                return;
+            }
+            registered.push(name);
+            let finalSchema = schema;
+            let call = handler;
+            if (ctx && "appObjectId" in schema) {
+                finalSchema = { ...schema, appObjectId: APP_FIELD };
+                const inner = call;
+                call = async (args, extra) => {
+                    const input = args;
+                    const appObjectId = await ctx.resolveApp(input.appObjectId);
+                    return inner({ ...input, appObjectId }, extra);
+                };
+            }
+            const finalHandler = async (args, extra) => {
+                const toolCall = {
+                    tool: name,
+                    mcpClient: clientOf(server, extra),
+                    requestId: newRequestId(),
+                };
+                const started = Date.now();
+                let result;
+                try {
+                    result = markErrors(await runToolCall(toolCall, async () => call(args, extra)));
+                    return result;
+                }
+                finally {
+                    const input = args;
+                    logToolCall({
+                        ...toolCall,
+                        token: ctx ? ctx.token : "",
+                        app: typeof input.appObjectId === "string" ? input.appObjectId : undefined,
+                        ok: !!result && !result.isError,
+                        durationMs: Date.now() - started,
+                    });
+                }
+            };
+            server.tool(name, description, finalSchema, annotationsFor(name), finalHandler);
+        },
+    };
+}
+//# sourceMappingURL=context.js.map

package/dist/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAU,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAO,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEpE;;;;GAIG;AACH,SAAS,QAAQ,CAAC,MAAiB,EAAE,KAAc;IACjD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;IAC9C,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,OAAO,GAAG,CAAE,KAAiE,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC;IAChH,MAAM,KAAK,GAAG,OAAO,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;IAC/C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACrE,CAAC;AAmBD,MAAM,UAAU,iBAAiB,CAC/B,KAAa,EACb,MAAc,EACd,SAAiB,SAAS,CAAC,OAAO,CAAC,MAAM;IAEzC,MAAM,SAAS,GAAG,CAAC,WAAmB,EAAE,EAAE;QACxC,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC/D,iDAAiD;YACjD,MAAM,IAAI,KAAK,CACb,6CAA6C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAC1E,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,oEAAoE;IACpE,IAAI,IAAI,GAAiC,IAAI,CAAC;IAC9C,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI;gBACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;oBAC1C,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;oBACvB,CAAC,CAAC,IAAI,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,OAAO;QACL,KAAK;QACL,MAAM;QACN,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC;QAC/C,KAAK,EAAE,CAAC,WAAmB,EAAE,EAAE;YAC7B,SAAS,CAAC,WAAW,CAAC,CAAC;YACvB,OAAO,IAAI,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,WAAmB,EAAE,EAAE;YACrC,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC;YAC/E,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;QACtC,CAAC;QACD,UAAU,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;YAClC,MAAM,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAC;YAC/B,kEAAkE;YAClE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,EAAE,CAAC;gBACtD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YACvF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,KAAK,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC;YAC5B,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,2BAA2B,KAAK,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CACnG,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,KAAK,CACb,WAAW,KAAK,iBAAiB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG,CACvG,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAYD;;;;GAIG;AACH,SAAS,UAAU,CAAC,MAAe;IACjC,MAAM,CAAC,GAAG,MAAiF,CAAC;IAC5F,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC7C,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1G,OAAO,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,SAAS,GAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC,CAAC;AAEtF;;;;GAIG;AACH,MAAM,UAAU,UAAU,CACxB,MAAiB,EACjB,KAAa,EACb,MAAc,EACd,aAAuB,EAAE,EACzB,GAAiB;IAEjB,OAAO;QACL,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO;YACrC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;gBACxC,OAAO;YACT,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEtB,IAAI,WAAW,GAAsB,MAAM,CAAC;YAC5C,IAAI,IAAI,GAAG,OAAqD,CAAC;YACjE,IAAI,GAAG,IAAI,aAAa,IAAI,MAAM,EAAE,CAAC;gBACnC,WAAW,GAAG,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;gBACpD,MAAM,KAAK,GAAG,IAAI,CAAC;gBACnB,IAAI,GAAG,KAAK,EAAE,IAAa,EAAE,KAAc,EAAE,EAAE;oBAC7C,MAAM,KAAK,GAAG,IAA+B,CAAC;oBAC9C,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;oBAC5D,OAAO,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC;gBACjD,CAAC,CAAC;YACJ,CAAC;YACD,MAAM,YAAY,GAAG,KAAK,EAAE,IAAa,EAAE,KAAc,EAAE,EAAE;gBAC3D,MAAM,QAAQ,GAAG;oBACf,IAAI,EAAE,IAAI;oBACV,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;oBAClC,SAAS,EAAE,YAAY,EAAE;iBAC1B,CAAC;gBACF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC3B,IAAI,MAAe,CAAC;gBACpB,IAAI,CAAC;oBACH,MAAM,GAAG,UAAU,CAAC,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;oBAChF,OAAO,MAAM,CAAC;gBAChB,CAAC;wBAAS,CAAC;oBACT,MAAM,KAAK,GAAG,IAAiC,CAAC;oBAChD,WAAW,CAAC;wBACV,GAAG,QAAQ;wBACX,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;wBAC3B,GAAG,EAAE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;wBAC1E,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAE,MAAgC,CAAC,OAAO;wBAC1D,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;qBACjC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,CAAC,IAAI,CAAC,EAAE,YAAgD,CAAC,CAAC;QACtH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,10 @@
+export { createServer, McpServer, SERVER_NAME, SERVER_VERSION } from './server.js';
+export { appConfig } from './config.js';
+export { AuthError, bearerToken, getTokenInfo, isAccessToken } from './auth.js';
+export { TOOL_POLICY, isToolAllowed, narrowAccess } from './access.js';
+export type { Access, Scope, ToolPolicy } from './access.js';
+export { createToolContext } from './context.js';
+export type { ToolContext } from './context.js';
+export { SashidoClient } from './client/sashido.js';
+export { ParseClient } from './client/parse.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACnF,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACvE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/index.js

@@ -0,0 +1,8 @@
+export { createServer, McpServer, SERVER_NAME, SERVER_VERSION } from './server.js';
+export { appConfig } from './config.js';
+export { AuthError, bearerToken, getTokenInfo, isAccessToken } from './auth.js';
+export { TOOL_POLICY, isToolAllowed, narrowAccess } from './access.js';
+export { createToolContext } from './context.js';
+export { SashidoClient } from './client/sashido.js';
+export { ParseClient } from './client/parse.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACnF,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,13 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { ToolContext, ToolServer } from './context.js';
+import { SERVER_NAME, SERVER_VERSION } from './version.js';
+export { SERVER_NAME, SERVER_VERSION };
+/** Tool groups (the `features` option), each the folder under src/tools */
+export declare const TOOL_GROUPS: Record<string, (server: ToolServer, ctx: ToolContext) => void>;
+/**
+ * An MCP server for one access token: only the tools its scopes, read-only
+ * mode, app limit and feature groups allow are registered.
+ */
+export declare function createServer(ctx: ToolContext, registered?: string[]): McpServer;
+export { McpServer };
+//# sourceMappingURL=server.d.ts.map