@sassoftware/sas-score-mcp-serverjs 1.0.1-8 → 1.1.1

package/src/openApi.yaml

@@ -1,121 +1,121 @@
-swagger: "2.0"
-info:
-  title: SAS Viya Sample MCP Server API
-  version: "1.0.0"
-  description: API for interacting with the SAS Viya Sample MCP Server.
-host: localhost:8080
-basePath: /
-schemes:
-  - http
-  - https
-consumes:
-  - application/json
-produces:
-  - application/json
-paths:
-  /health:
-    get:
-      summary: Health check
-      description: Returns health and version information.
-      responses:
-        200:
-          description: Health information
-          schema:
-            type: object
-            properties:
-              name:
-                type: string
-              version:
-                type: string
-              description:
-                type: string
-              endpoints:
-                type: object
-              usage:
-                type: string
-  /apiMeta:
-    get:
-      summary: API metadata
-      description: Returns the OpenAPI specification for this server.
-      responses:
-        200:
-          description: OpenAPI document
-          schema:
-            type: object
-  /mcp:
-    options:
-      summary: CORS preflight
-      description: CORS preflight endpoint.
-      responses:
-        204:
-          description: No Content
-    post:
-      summary: MCP request
-      description: Handles MCP JSON-RPC requests.
-      parameters:
-        - name: body
-          in: body
-          required: true
-          schema:
-            type: object
-        - name: Authorization
-          in: header
-          required: false
-          type: string
-          description: Bearer token for authentication
-        - name: X-VIYA-SERVER
-          in: header
-          required: false
-          type: string
-          description: Override VIYA server
-        - name: X-REFRESH-TOKEN
-          in: header
-          required: false
-          type: string
-          description: Refresh token for authentication
-        - name: mcp-session-id
-          in: header
-          required: false
-          type: string
-          description: Session ID
-      responses:
-        200:
-          description: MCP response
-          schema:
-            type: object
-        500:
-          description: Server error
-          schema:
-            type: object
-    get:
-      summary: Get MCP session
-      description: Retrieves information for an MCP session.
-      parameters:
-        - name: mcp-session-id
-          in: header
-          required: true
-          type: string
-          description: Session ID
-      responses:
-        200:
-          description: Session information
-          schema:
-            type: object
-        400:
-          description: Invalid or missing session ID
-    delete:
-      summary: Delete MCP session
-      description: Deletes an MCP session.
-      parameters:
-        - name: mcp-session-id
-          in: header
-          required: true
-          type: string
-          description: Session ID
-      responses:
-        200:
-          description: Session deleted
-          schema:
-            type: object
-        400:
-          description: Invalid or missing session ID
+swagger: "2.0"
+info:
+  title: SAS Viya Sample MCP Server API
+  version: "1.0.0"
+  description: API for interacting with the SAS Viya Sample MCP Server.
+host: localhost:8080
+basePath: /
+schemes:
+  - http
+  - https
+consumes:
+  - application/json
+produces:
+  - application/json
+paths:
+  /health:
+    get:
+      summary: Health check
+      description: Returns health and version information.
+      responses:
+        200:
+          description: Health information
+          schema:
+            type: object
+            properties:
+              name:
+                type: string
+              version:
+                type: string
+              description:
+                type: string
+              endpoints:
+                type: object
+              usage:
+                type: string
+  /apiMeta:
+    get:
+      summary: API metadata
+      description: Returns the OpenAPI specification for this server.
+      responses:
+        200:
+          description: OpenAPI document
+          schema:
+            type: object
+  /mcp:
+    options:
+      summary: CORS preflight
+      description: CORS preflight endpoint.
+      responses:
+        204:
+          description: No Content
+    post:
+      summary: MCP request
+      description: Handles MCP JSON-RPC requests.
+      parameters:
+        - name: body
+          in: body
+          required: true
+          schema:
+            type: object
+        - name: Authorization
+          in: header
+          required: false
+          type: string
+          description: Bearer token for authentication
+        - name: X-VIYA-SERVER
+          in: header
+          required: false
+          type: string
+          description: Override VIYA server
+        - name: X-REFRESH-TOKEN
+          in: header
+          required: false
+          type: string
+          description: Refresh token for authentication
+        - name: mcp-session-id
+          in: header
+          required: false
+          type: string
+          description: Session ID
+      responses:
+        200:
+          description: MCP response
+          schema:
+            type: object
+        500:
+          description: Server error
+          schema:
+            type: object
+    get:
+      summary: Get MCP session
+      description: Retrieves information for an MCP session.
+      parameters:
+        - name: mcp-session-id
+          in: header
+          required: true
+          type: string
+          description: Session ID
+      responses:
+        200:
+          description: Session information
+          schema:
+            type: object
+        400:
+          description: Invalid or missing session ID
+    delete:
+      summary: Delete MCP session
+      description: Deletes an MCP session.
+      parameters:
+        - name: mcp-session-id
+          in: header
+          required: true
+          type: string
+          description: Session ID
+      responses:
+        200:
+          description: Session deleted
+          schema:
+            type: object
+        400:
+          description: Invalid or missing session ID

package/src/processHeaders.js

@@ -1,5 +1,3 @@
-import { start } from "node:repl";
-
 /*
  * Copyright © 2026, SAS Institute Inc., Cary, NC, USA.  All Rights Reserved.
  * SPDX-License-Identifier: Apache-2.0
@@ -32,20 +30,25 @@ function processHeaders(req, res, next, cache, appContext) {
   const hdr = req.header("Authorization");
   //for now, ignore Authorization if authflow is not bearer
   let token = (hdr != null) ? hdr.slice(7) : null;
-  //console.error("[Note] Authorization token", token);
   debugger;
-  console.error('>>>',appContext.AUTHFLOW);
+  console.error('[Note} AUTHFLOW=',   appContext.AUTHFLOW);
+  console.error("[Note] External authorization :", appContext.AUTHEXTERNAL);
   if (appContext.AUTHFLOW === 'bearer') {
     debugger;
     let startAuth = false;
-    console.error("[Note] appContext.AUTHEXTERNAL:", appContext.AUTHEXTERNAL);
+    
     if (appContext.AUTHEXTERNAL === true) {
       console.error("[Note] Expecting external authorization"); 
       if (token != null) {
         console.error("[Note] Using user supplied token for authorization");
         headerCache.bearerToken = token;
       } else {
-        startAuth = true;
+        console.error("[Note] No Authorization token provided in header for external authorization.");
+        console.error("[Note] Returning 404 since we are configured for external token and no token provided in header.");
+        return res.status(404).json({
+          error: "unauthorized",
+          error_description: "[Error] Missing token for external authorization."
+        });
       }
     } else  if (token == null) {
       console.error("[Note] No Authorization token provided in header.");
@@ -55,7 +58,7 @@ function processHeaders(req, res, next, cache, appContext) {
       let tokenlist = cache.get("tokenlist");
       let tokenData = tokenlist[token];
       if (tokenData == null) {
-        return res.status(403).json({
+        return res.status(401).json({
           error: "unauthorized",
           error_description: "[Error] Expired token. Clear token and try again."
         });

package/src/setupSkills.js

@@ -19,7 +19,7 @@ function setupSkills(clientName,agentFolder) {
     if (agentFolder) {
         destination = path.join(destination, agentFolder);
     }
-    const source = path.join(__dirname, `../.skills` + '_' + clientName.toLowerCase());
+    const source = path.join(__dirname, `../.skills`);
     console.error("==================================================================");
     console.error(`           Copying ${source} to ${destination}...`);
 
@@ -28,22 +28,19 @@ function setupSkills(clientName,agentFolder) {
         if (!fs.existsSync(to)) fs.mkdirSync(to, { recursive: true });;
         fs.readdirSync(from).forEach(element => {
             const fromPath = path.join(from, element);
-            const toPath = path.join(to, element);
+            let  toPath = path.join(to, element);
+            if (clientName === 'claude' && element === 'copilot-instructions.md') {
+                toPath = path.join(to, 'CLAUDE.md');
+            }
             if (fs.lstatSync(fromPath).isFile()) {
                 console.error(`       📄 Copying file: ${element}`);
                 fs.copyFileSync(fromPath, toPath);
             } else if (fs.lstatSync(fromPath).isDirectory()) {
                 console.error(`📂 Copying folder: ${element}`);
-                copyFolderSync(fromPath, toPath) ;
+                copyFolderSync(fromPath, toPath);
             }
         });
     }
-
-    // now  copy the skills folder to the destination
-    let toPath = path.join(destination, '.skills');
-    let fromPath = path.join(__dirname, `../.skills`);
-    copyFolderSync(fromPath, toPath);
-    
     function listExpandedFolder(dir, indent = "") {
         const entries = fs.readdirSync(dir, { withFileTypes: true });
 

package/src/toolHelpers/_casScore.js

@@ -0,0 +1,32 @@
+/*
+ * Copyright © 2025, SAS Institute Inc., Cary, NC, USA.  All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+import restaflib from '@sassoftware/restaflib';
+import restaf from '@sassoftware/restaf';
+async function _casScore(params) {
+  let { model, name, scenario, _appContext } = params;
+  let { casSetup, caslScore } = restaflib;
+
+  let store = restaf.initStore(_appContext.storeConfig);
+  let { session } = await casSetup(store, _appContext.logonPayload, null, _appContext.cas);
+  if (session == null) {
+    return { content: [{ type: 'text', text: 'Could not create a cas session' }] };
+  }
+
+  try {
+    let args = {
+      name: name,
+      modelName: model,
+      scenario: scenario
+    }
+    let output = await caslScore(store, session, args);
+    let results = output.casResults;
+    return { content: [{ type: 'text', text: JSON.stringify(results) }], structuredContent: results };
+  } catch (err) {
+    console.log(err);
+    return { isError: true, content: [{ type: 'text', text: JSON.stringify(err) }] };
+  }
+}
+export default _casScore;

package/src/toolHelpers/_desc.js

@@ -0,0 +1,14 @@
+/*
+ * Copyright © 2025, SAS Institute Inc., Cary, NC, USA.  All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+/**
+ * Return lean description in agent mode, full description in standalone mode.
+ * @param {object} appContext  - the _appContext passed to every tool factory
+ * @param {string} lean        - short description for agent mode (~3-6 lines)
+ * @param {string} full        - full description for standalone mode
+ */
+export function desc(appContext, lean, full) {
+  return (appContext && appContext.agent) ? lean : full;
+}

package/src/toolHelpers/_findJob.js

@@ -0,0 +1,12 @@
+/*
+ * Copyright © 2025, SAS Institute Inc., Cary, NC, USA.  All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+import _listJobs from './_listJobs.js';  
+async function _findJob(params) {
+    let r = await _listJobs(params);
+    console.error ("findJob result:" , r);
+    return r;
+}
+export default _findJob;

package/src/toolHelpers/_findJobdef.js

@@ -0,0 +1,10 @@
+/*
+ * Copyright © 2025, SAS Institute Inc., Cary, NC, USA.  All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+import _listJobdefs from './_listJobdefs.js';  
+async function _findJobdef(params) {
+    return  await _listJobdefs(params);
+}
+export default _findJobdef;

package/src/toolHelpers/_findLibrary.js

@@ -0,0 +1,11 @@
+/*
+ * Copyright © 2025, SAS Institute Inc., Cary, NC, USA.  All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+import _listLibrary from './_listLibrary.js';  
+async function _findLibrary(params) {
+    params.tool = 'find';
+    return  await _listLibrary(params);
+}
+export default _findLibrary;

package/src/toolHelpers/_findMas.js

@@ -0,0 +1,13 @@
+/*
+ * Copyright © 2025, SAS Institute Inc., Cary, NC, USA.  All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+import _listMas from './_listMas.js';  
+async function _findMas(params) {
+    params.tool = 'find';
+    let r = await _listMas(params);
+    console.log ("findMas result:" , r);
+    return r;
+}
+export default _findMas;

package/src/toolHelpers/_findScr.js

@@ -0,0 +1,36 @@
+/**
+ * Copyright © 2025, SAS Institute Inc., Cary, NC, USA.  All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+import axios from 'axios';
+
+async function _findScr(params) {
+  let {name} = params;
+  let config = {
+    method: 'HEAD',
+    name: name + '/apiMeta/api',
+    headers: {
+      'Accept': 'application/json'
+    }
+  }
+  try {
+    console.error('[Note] Config:', config);
+    let response = await axios(config);
+    console.error('[Note] Response status:', response.status);
+    if (response.status !== 200) {
+      
+      return {isError: true, content: [{ type: 'text', text: `SCR model ${name} not found` }]};
+    } else if (response.status === 200) {
+      let r = { scr: [name] };
+      return { content: [{ type: 'text', text: JSON.stringify(r) }],
+        structuredOutput: r
+
+      };
+    }
+  }
+  catch (error) {
+    return {isError: true,content: [{ type: 'text', text: JSON.stringify(error) }]};  
+  }
+}
+export default _findScr;

package/src/toolHelpers/_findTable.js

@@ -0,0 +1,11 @@
+/*
+ * Copyright © 2025, SAS Institute Inc., Cary, NC, USA.  All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+import _listTables from './_listTables.js';
+async function _findTable(params) {
+  params.tool = 'find';
+  return await _listTables(params);
+}
+export default _findTable;

package/src/toolHelpers/_listJobdefs.js

@@ -6,7 +6,7 @@ import restaf from '@sassoftware/restaf';
 
 
 async function _listJobdefs(params) {
-  let { limit, start, name, _appContext } = params;
+  let { limit, start, name, tool, _appContext } = params;
   
   let store = restaf.initStore(_appContext.storeConfig);
   let msg = await store.logon(_appContext.logonPayload);
@@ -41,7 +41,17 @@ async function _listJobdefs(params) {
 
     let response = {jobDefinitions: Object.keys(names)};
     if (name != null) {
-      response = { name: name, parameters: names[name].parameters };
+      if (tool === 'find') {
+        response = { job: [name] };
+      } else if (tool === 'describe') {
+        let p = [];
+        names[name].parameters.map((v, k) => {
+          if (v.name.startsWith('_') === false) {
+            p.push(v);
+          }
+        });
+        response = { describe: p };
+      };
     }
 
     return {

package/src/toolHelpers/_listJobs.js

@@ -6,7 +6,7 @@
 import restaf from '@sassoftware/restaf';
 
 async function _listJobs(params) {
-  let { limit, start, name, _appContext } = params;
+  let { limit, start, name, tool, _appContext } = params;
 
   let store = restaf.initStore(_appContext.storeConfig);
   let msg = await store.logon(_appContext.logonPayload);
@@ -33,21 +33,32 @@ async function _listJobs(params) {
     }
 
     let names = {};
-    
+
     jobList.itemsList().map((id, n) => {
       let jname = jobList.items(id, 'data', 'jobRequest', 'name');
-      
+
       if (names[jname] == null) {
         let value = jobList.items(id, 'data', 'jobRequest', 'jobDefinition', 'parameters');
-        names[jname] = {parameters: (value == null) ? {} : value.toJS() };
+        names[jname] = { parameters: (value == null) ? {} : value.toJS() };
       }
     });
-
-    let response  = {jobs: Object.keys(names)};
+    console.error('parameters', JSON.stringify(names, null, 2));
+    let response = { jobs: Object.keys(names) };
+    console.error('response', JSON.stringify(response, null, 2));
 
     if (name != null) {
-      response = { name: name, parameters: names[name].parameters };
-    };
+      if (tool === 'find') {
+        response = { job: [name] };
+      } else if (tool === 'describe') {
+        let p = [];
+        names[name].parameters.map((v, k) => {
+          if (v.name.startsWith('_') === false) {
+            p.push(v);
+          }
+        });
+        response = { describe: p };
+      };
+    }
     return {
       content: [{ type: 'text', text: JSON.stringify(response) }],
       structuredContent: response,

package/src/toolHelpers/{_listModels.js → _listMas.js}

@@ -5,7 +5,7 @@
 
 import restaf from '@sassoftware/restaf';
 
-async function _listModels(params) {
+async function _listMas(params) {
   let { limit, start , name, _appContext} = params;;
   // setup
 
@@ -27,9 +27,9 @@ async function _listModels(params) {
     }
     let result = await store.apiCall(microanalyticScore.links('modules'), payload);
     if (result.itemsList().size === 0) {
-      return { content: [{ type: 'text', text: `No models exist in MAS server` }]};
+      return { content: [{ type: 'text', text: `No MAS exist in MAS server` }]};
     }
-    let list = {models: result.itemsList().toJS()};
+    let list = {mas: result.itemsList().toJS()};
     return { content: [{ type: 'text', text: JSON.stringify(list) }],
       structuredContent: list
     };
@@ -38,4 +38,4 @@ async function _listModels(params) {
   }
 }
 
-export default _listModels;
+export default _listMas;

package/src/toolHelpers/_listScr.js

@@ -0,0 +1,13 @@
+/*
+ * Copyright © 2025, SAS Institute Inc., Cary, NC, USA.  All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+async function _listScr(params) {
+  let response = { scr: [] };
+  return {
+    content: [{ type: 'text', text: JSON.stringify(response) }],
+    structuredContent: response
+  }
+}
+export default _listScr;

package/src/toolHelpers/{_scrInfo.js → _scrDescribe.js}

@@ -5,11 +5,11 @@
 
 import axios from 'axios';
 
-async function _scrInfo(params) {
-  let {url} = params;
+async function _scrDescribe(params) {
+  let {name} = params;
   let config = {
     method: 'GET',
-    url: url + '/apiMeta/api',
+    name: name + '/apiMeta/api',
     headers: {
       'Accept': 'application/json'
     }
@@ -29,4 +29,4 @@ async function _scrInfo(params) {
     return {isError: true,content: [{ type: 'text', text: JSON.stringify(error) }]};  
   }
 }
-export default _scrInfo;
+export default _scrDescribe;

package/src/toolHelpers/_scrScore.js

@@ -7,7 +7,7 @@ import axios from 'axios';
 
 
 async function _scrScore(params) {
-  let { url, scenario} = params;
+  let { name, scenario} = params;
  
 
   let data = scenario.split(',').reduce((acc, pair) => {
@@ -18,7 +18,7 @@ async function _scrScore(params) {
 
   let config = {
     method: 'POST',
-    url: url,
+    name: name,
     headers: {
       'Content-Type': 'application/json',
       'Accept': 'application/json'