@scupit/mcp-ecosystem 0.1.0

package/dist/commands/generate-artifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate-artifacts.js","sourceRoot":"","sources":["../../src/commands/generate-artifacts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EACL,0BAA0B,EAC1B,cAAc,EACd,iBAAiB,EACjB,kCAAkC,EAClC,aAAa,GACd,MAAM,oBAAoB,CAAC;AAM5B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAmB;IAEnB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IACxC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACnC,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,qBAAqB;IAErB,MAAM,QAAQ,GAAa;QACzB,+CAA+C;QAC/C,GAAG,SAAS,CAAC,KAAK,CAAC,wBAAwB,eAAe;QAC1D,GAAG,SAAS,CAAC,KAAK,CAAC,4BAA4B,eAAe;QAC9D,uBAAuB,SAAS,CAAC,KAAK,CAAC,aAAa,EAAE;QACtD,EAAE;KACH,CAAC;IAEF,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,SAAS,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QAClE,QAAQ,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;QAClD,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,sCAAsC,CAAC,CAAC;QAElE,MAAM,QAAQ,GACZ,MAAM,CAAC,OAAO,KAAK,oBAAoB;YACvC,MAAM,CAAC,OAAO,KAAK,iBAAiB,CAAC;QAEvC,IAAI,MAAM,CAAC,WAAW,EAAE,iBAAiB,EAAE,CAAC;YAC1C,QAAQ,CAAC,IAAI,CACX,GAAG,MAAM,CAAC,WAAW,CAAC,iBAAiB,kBAAkB,CAC1D,CAAC;QACJ,CAAC;aAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrB,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,8BAA8B,CAAC,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,KAAK,SAAS,yCAAyC,CAAC,CAAC;QACzE,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QAClD,MAAM,UAAU,GAAG,0BAA0B,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,SAAS,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC;QACvE,QAAQ,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1C,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,aAAa,UAAU,EAAE,CAAC,CAAC;QACrD,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,SAAS,CAAC,cAAc,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7B,MAAM,CAAC,OAAO,CAAC,cAAc,cAAc,EAAE,CAAC,CAAC;IACjD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,6BAA6B,cAAc,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,kCAAkC;IAElC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QAClD,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACjD,MAAM,WAAW,GAAG,0BAA0B,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAChE,MAAM,WAAW,GAAG,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACvD,MAAM,WAAW,GAAG,kCAAkC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAEhD,MAAM,aAAa,GAAG;YACpB,MAAM,EAAE;gBACN,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,QAAQ;gBACR,YAAY,EAAE,WAAW;gBACzB,YAAY,EAAE,WAAW;aAC1B;YACD,IAAI,EAAE;gBACJ,MAAM,EAAE,WAAW,SAAS,CAAC,KAAK,CAAC,aAAa,GAAG;gBACnD,QAAQ,EAAE,WAAW;gBACrB,QAAQ,EAAE,WAAW,SAAS,CAAC,KAAK,CAAC,aAAa,wBAAwB;gBAC1E,+BAA+B,EAAE,WAAW;aAC7C;YACD,MAAM;SACP,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9C,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAC;QAE3E,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,SAAS,CACb,iBAAiB,EACjB,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAC7C,OAAO,CACR,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAChC,MAAM,CAAC,OAAO,CAAC,cAAc,iBAAiB,EAAE,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,6BAA6B,iBAAiB,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC"}

package/dist/commands/grant-client.d.ts

@@ -0,0 +1,12 @@
+import type { CommandContext } from "../utils/index.js";
+export interface GrantClientResult {
+    serverSlug: string;
+    clientKey: string;
+    clientId: string;
+    audience: string;
+    action: "created" | "updated" | "unchanged" | "dry_run";
+    scopes: string[];
+    subjectType: string;
+}
+export declare function grantClient(ctx: CommandContext, serverSlug: string, clientKey: string, scopes?: string[]): Promise<GrantClientResult>;
+//# sourceMappingURL=grant-client.d.ts.map

package/dist/commands/grant-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant-client.d.ts","sourceRoot":"","sources":["../../src/commands/grant-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAKxD,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;IACxD,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,wBAAsB,WAAW,CAC/B,GAAG,EAAE,cAAc,EACnB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,EAAE,GAChB,OAAO,CAAC,iBAAiB,CAAC,CAwI5B"}

package/dist/commands/grant-client.js

@@ -0,0 +1,111 @@
+import { logger } from "../utils/index.js";
+import { deriveCanonicalResourceUri, resolveScopes } from "../config/index.js";
+import { reconcileClient } from "./reconcile-client.js";
+export async function grantClient(ctx, serverSlug, clientKey, scopes) {
+    const { config, auth0, dryRun } = ctx;
+    const serverConfig = config.serverConfigs.get(serverSlug);
+    if (!serverConfig) {
+        throw new Error(`Unknown server slug: "${serverSlug}"`);
+    }
+    const clientConfig = config.clientConfigs.get(clientKey);
+    if (!clientConfig) {
+        throw new Error(`Unknown client key: "${clientKey}"`);
+    }
+    const audience = deriveCanonicalResourceUri(config.ecosystem, serverConfig.slug);
+    const grantScopes = scopes && scopes.length > 0
+        ? scopes
+        : resolveScopes(config.ecosystem, serverConfig);
+    const profileDef = config.ecosystem.defaults.client_profiles?.[clientConfig.profile];
+    const subjectType = profileDef?.access_mode === "machine" ? "client" : "user";
+    let clientId = clientConfig.auth0.existing_client_id;
+    if (!clientId) {
+        logger.info(`Ensuring client "${clientKey}" exists...`);
+        const result = await reconcileClient(ctx, clientKey);
+        clientId = result.clientId;
+    }
+    if (!clientId || clientId === "__DRY_RUN__") {
+        return {
+            serverSlug,
+            clientKey,
+            clientId: clientId ?? "__DRY_RUN__",
+            audience,
+            action: "dry_run",
+            scopes: grantScopes,
+            subjectType,
+        };
+    }
+    logger.info(`Reconciling grant: ${clientKey} -> ${serverSlug} (${subjectType})`);
+    logger.debug(`  Audience: ${audience}`);
+    logger.debug(`  Scopes: ${grantScopes.join(", ")}`);
+    const existing = await auth0.findClientGrant(clientId, audience, subjectType);
+    if (existing) {
+        const existingSet = new Set(existing.scope);
+        const desiredSet = new Set(grantScopes);
+        const equal = existingSet.size === desiredSet.size &&
+            [...desiredSet].every((s) => existingSet.has(s));
+        if (equal) {
+            logger.info("Grant exists and is up to date.");
+            return {
+                serverSlug,
+                clientKey,
+                clientId,
+                audience,
+                action: "unchanged",
+                scopes: grantScopes,
+                subjectType,
+            };
+        }
+        if (dryRun) {
+            logger.info("[DRY RUN] Would update grant.");
+            return {
+                serverSlug,
+                clientKey,
+                clientId,
+                audience,
+                action: "dry_run",
+                scopes: grantScopes,
+                subjectType,
+            };
+        }
+        await auth0.updateClientGrant(existing.id, { scope: grantScopes });
+        logger.success("Grant updated.");
+        return {
+            serverSlug,
+            clientKey,
+            clientId,
+            audience,
+            action: "updated",
+            scopes: grantScopes,
+            subjectType,
+        };
+    }
+    if (dryRun) {
+        logger.info("[DRY RUN] Would create grant.");
+        return {
+            serverSlug,
+            clientKey,
+            clientId,
+            audience,
+            action: "dry_run",
+            scopes: grantScopes,
+            subjectType,
+        };
+    }
+    await auth0.createClientGrant({
+        client_id: clientId,
+        audience,
+        scope: grantScopes,
+        subject_type: subjectType,
+    });
+    logger.success("Grant created.");
+    return {
+        serverSlug,
+        clientKey,
+        clientId,
+        audience,
+        action: "created",
+        scopes: grantScopes,
+        subjectType,
+    };
+}
+//# sourceMappingURL=grant-client.js.map

package/dist/commands/grant-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant-client.js","sourceRoot":"","sources":["../../src/commands/grant-client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,0BAA0B,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAYxD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAmB,EACnB,UAAkB,EAClB,SAAiB,EACjB,MAAiB;IAEjB,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IAEtC,MAAM,YAAY,GAAG,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC1D,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,yBAAyB,UAAU,GAAG,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,wBAAwB,SAAS,GAAG,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,QAAQ,GAAG,0BAA0B,CACzC,MAAM,CAAC,SAAS,EAChB,YAAY,CAAC,IAAI,CAClB,CAAC;IAEF,MAAM,WAAW,GACf,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QACzB,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAEpD,MAAM,UAAU,GACd,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACpE,MAAM,WAAW,GACf,UAAU,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;IAE5D,IAAI,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,kBAAkB,CAAC;IAErD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,CAAC,IAAI,CAAC,oBAAoB,SAAS,aAAa,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACrD,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC7B,CAAC;IAED,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC5C,OAAO;YACL,UAAU;YACV,SAAS;YACT,QAAQ,EAAE,QAAQ,IAAI,aAAa;YACnC,QAAQ;YACR,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,WAAW;YACnB,WAAW;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,IAAI,CACT,sBAAsB,SAAS,OAAO,UAAU,KAAK,WAAW,GAAG,CACpE,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,eAAe,QAAQ,EAAE,CAAC,CAAC;IACxC,MAAM,CAAC,KAAK,CAAC,aAAa,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEpD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,eAAe,CAC1C,QAAQ,EACR,QAAQ,EACR,WAAW,CACZ,CAAC;IAEF,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACxC,MAAM,KAAK,GACT,WAAW,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI;YACpC,CAAC,GAAG,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAEnD,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;YAC/C,OAAO;gBACL,UAAU;gBACV,SAAS;gBACT,QAAQ;gBACR,QAAQ;gBACR,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,WAAW;gBACnB,WAAW;aACZ,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC7C,OAAO;gBACL,UAAU;gBACV,SAAS;gBACT,QAAQ;gBACR,QAAQ;gBACR,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,WAAW;gBACnB,WAAW;aACZ,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACjC,OAAO;YACL,UAAU;YACV,SAAS;YACT,QAAQ;YACR,QAAQ;YACR,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,WAAW;YACnB,WAAW;SACZ,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC7C,OAAO;YACL,UAAU;YACV,SAAS;YACT,QAAQ;YACR,QAAQ;YACR,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,WAAW;YACnB,WAAW;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,CAAC,iBAAiB,CAAC;QAC5B,SAAS,EAAE,QAAQ;QACnB,QAAQ;QACR,KAAK,EAAE,WAAW;QAClB,YAAY,EAAE,WAAW;KAC1B,CAAC,CAAC;IACH,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAEjC,OAAO;QACL,UAAU;QACV,SAAS;QACT,QAAQ;QACR,QAAQ;QACR,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,WAAW;QACnB,WAAW;KACZ,CAAC;AACJ,CAAC"}

package/dist/commands/index.d.ts

@@ -0,0 +1,15 @@
+export { verifyTenant } from "./verify-tenant.js";
+export type { VerifyTenantResult } from "./verify-tenant.js";
+export { reconcileClient } from "./reconcile-client.js";
+export type { ReconcileClientResult } from "./reconcile-client.js";
+export { reconcileServer } from "./reconcile-server.js";
+export type { ReconcileServerResult, GrantResult } from "./reconcile-server.js";
+export { reconcileAll } from "./reconcile-all.js";
+export type { ReconcileAllResult } from "./reconcile-all.js";
+export { addScope } from "./add-scope.js";
+export type { AddScopeResult } from "./add-scope.js";
+export { grantClient } from "./grant-client.js";
+export type { GrantClientResult } from "./grant-client.js";
+export { generateArtifacts } from "./generate-artifacts.js";
+export type { GenerateArtifactsResult } from "./generate-artifacts.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/commands/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,YAAY,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,YAAY,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAEnE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEhF,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,YAAY,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,YAAY,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/commands/index.js

@@ -0,0 +1,8 @@
+export { verifyTenant } from "./verify-tenant.js";
+export { reconcileClient } from "./reconcile-client.js";
+export { reconcileServer } from "./reconcile-server.js";
+export { reconcileAll } from "./reconcile-all.js";
+export { addScope } from "./add-scope.js";
+export { grantClient } from "./grant-client.js";
+export { generateArtifacts } from "./generate-artifacts.js";
+//# sourceMappingURL=index.js.map

package/dist/commands/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGlD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGlD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG1C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/commands/reconcile-all.d.ts

@@ -0,0 +1,10 @@
+import type { CommandContext } from "../utils/index.js";
+import { type ReconcileClientResult } from "./reconcile-client.js";
+import { type ReconcileServerResult } from "./reconcile-server.js";
+export interface ReconcileAllResult {
+    tenantOk: boolean;
+    clients: ReconcileClientResult[];
+    servers: ReconcileServerResult[];
+}
+export declare function reconcileAll(ctx: CommandContext): Promise<ReconcileAllResult>;
+//# sourceMappingURL=reconcile-all.d.ts.map

package/dist/commands/reconcile-all.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile-all.d.ts","sourceRoot":"","sources":["../../src/commands/reconcile-all.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAGxD,OAAO,EAAmB,KAAK,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACpF,OAAO,EAAmB,KAAK,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAEpF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,qBAAqB,EAAE,CAAC;IACjC,OAAO,EAAE,qBAAqB,EAAE,CAAC;CAClC;AAED,wBAAsB,YAAY,CAChC,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,kBAAkB,CAAC,CAsE7B"}

package/dist/commands/reconcile-all.js

@@ -0,0 +1,58 @@
+import { logger } from "../utils/index.js";
+import { verifyTenant } from "./verify-tenant.js";
+import { reconcileClient } from "./reconcile-client.js";
+import { reconcileServer } from "./reconcile-server.js";
+export async function reconcileAll(ctx) {
+    const { config } = ctx;
+    logger.info("=== Full Ecosystem Reconciliation ===");
+    logger.blank();
+    // Phase 1: Verify tenant
+    const tenantResult = await verifyTenant(ctx);
+    if (tenantResult.manualActionRequired) {
+        logger.error("Tenant verification failed. Aborting reconciliation.");
+        return { tenantOk: false, clients: [], servers: [] };
+    }
+    logger.blank();
+    logger.info("=== Phase 2: Reconcile OAuth Clients ===");
+    logger.blank();
+    const clientResults = [];
+    for (const clientKey of config.clientConfigs.keys()) {
+        try {
+            const result = await reconcileClient(ctx, clientKey);
+            clientResults.push(result);
+        }
+        catch (err) {
+            logger.error(`Failed to reconcile client "${clientKey}": ${err instanceof Error ? err.message : String(err)}`);
+        }
+        logger.blank();
+    }
+    logger.info("=== Phase 3: Reconcile MCP Servers ===");
+    logger.blank();
+    const serverResults = [];
+    for (const slug of config.serverConfigs.keys()) {
+        try {
+            const result = await reconcileServer(ctx, slug);
+            serverResults.push(result);
+        }
+        catch (err) {
+            logger.error(`Failed to reconcile server "${slug}": ${err instanceof Error ? err.message : String(err)}`);
+        }
+        logger.blank();
+    }
+    // Summary
+    logger.info("=== Reconciliation Summary ===");
+    logger.blank();
+    for (const cr of clientResults) {
+        logger.info(`  Client "${cr.clientKey}": ${cr.action} (${cr.clientId})`);
+    }
+    for (const sr of serverResults) {
+        logger.info(`  Server "${sr.slug}": API ${sr.action} (${sr.apiIdentifier})`);
+        for (const gr of sr.grantResults) {
+            logger.info(`    Grant ${gr.clientKey}: ${gr.action} [${gr.scopes.join(", ")}]`);
+        }
+    }
+    logger.blank();
+    logger.success("Full reconciliation complete.");
+    return { tenantOk: true, clients: clientResults, servers: serverResults };
+}
+//# sourceMappingURL=reconcile-all.js.map

package/dist/commands/reconcile-all.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile-all.js","sourceRoot":"","sources":["../../src/commands/reconcile-all.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,eAAe,EAA8B,MAAM,uBAAuB,CAAC;AACpF,OAAO,EAAE,eAAe,EAA8B,MAAM,uBAAuB,CAAC;AAQpF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAmB;IAEnB,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IAEvB,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,EAAE,CAAC;IAEf,yBAAyB;IACzB,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,YAAY,CAAC,oBAAoB,EAAE,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;QACrE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACvD,CAAC;IAED,MAAM,CAAC,KAAK,EAAE,CAAC;IACf,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IACxD,MAAM,CAAC,KAAK,EAAE,CAAC;IAEf,MAAM,aAAa,GAA4B,EAAE,CAAC;IAClD,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACrD,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CACV,+BAA+B,SAAS,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACjG,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,EAAE,CAAC;IAEf,MAAM,aAAa,GAA4B,EAAE,CAAC;IAClD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAChD,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CACV,+BAA+B,IAAI,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC5F,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;IAED,UAAU;IACV,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAC9C,MAAM,CAAC,KAAK,EAAE,CAAC;IAEf,KAAK,MAAM,EAAE,IAAI,aAAa,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CACT,aAAa,EAAE,CAAC,SAAS,MAAM,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,QAAQ,GAAG,CAC5D,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,aAAa,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CACT,aAAa,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,aAAa,GAAG,CAChE,CAAC;QACF,KAAK,MAAM,EAAE,IAAI,EAAE,CAAC,YAAY,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CACT,aAAa,EAAE,CAAC,SAAS,KAAK,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACpE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,CAAC,KAAK,EAAE,CAAC;IACf,MAAM,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAEhD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;AAC5E,CAAC"}

package/dist/commands/reconcile-client.d.ts

@@ -0,0 +1,11 @@
+import type { CommandContext } from "../utils/index.js";
+export interface ReconcileClientResult {
+    clientKey: string;
+    clientId: string;
+    action: "created" | "reused" | "patched" | "dry_run";
+    applicationType: string;
+    tokenEndpointAuthMethod: string;
+    secretPlaceholderRequired: boolean;
+}
+export declare function reconcileClient(ctx: CommandContext, clientKey: string): Promise<ReconcileClientResult>;
+//# sourceMappingURL=reconcile-client.d.ts.map

package/dist/commands/reconcile-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile-client.d.ts","sourceRoot":"","sources":["../../src/commands/reconcile-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAWxD,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;IACrD,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,CAAC;IAChC,yBAAyB,EAAE,OAAO,CAAC;CACpC;AAcD,wBAAsB,eAAe,CACnC,GAAG,EAAE,cAAc,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,qBAAqB,CAAC,CA6KhC"}

package/dist/commands/reconcile-client.js

@@ -0,0 +1,295 @@
+import { logger } from "../utils/index.js";
+export async function reconcileClient(ctx, clientKey) {
+    const { config, auth0, dryRun } = ctx;
+    const clientConfig = config.clientConfigs.get(clientKey);
+    if (!clientConfig) {
+        throw new Error(`Unknown client key: "${clientKey}"`);
+    }
+    const descriptor = clientConfig.descriptor
+        ? config.clientDescriptors.get(clientConfig.descriptor)
+        : undefined;
+    const settings = resolveSettings(config.ecosystem, clientConfig, descriptor);
+    logger.info(`Reconciling client: ${clientConfig.display_name} (${clientKey})`);
+    logger.debug(`  Profile: ${clientConfig.profile}`);
+    logger.debug(`  App type: ${settings.appType}`);
+    logger.debug(`  Auth method: ${settings.tokenEndpointAuthMethod}`);
+    if (clientConfig.auth0.existing_client_id) {
+        logger.info(`  Using existing client_id: ${clientConfig.auth0.existing_client_id}`);
+        const existing = await auth0.getApplication(clientConfig.auth0.existing_client_id);
+        const reuse = checkCompatibility(existing, settings);
+        if (!reuse.compatible) {
+            logger.warn(`  Existing application is NOT fully compatible: ${reuse.reason}`);
+            const policy = descriptor?.reuse_policy ?? "share_if_exact_match";
+            if (policy === "patch_if_safe" && !dryRun) {
+                logger.info("  Attempting safe patch...");
+                await patchApplication(auth0, existing, settings, config.ecosystem, clientConfig);
+                logger.success("  Application patched.");
+                return {
+                    clientKey,
+                    clientId: existing.client_id,
+                    action: "patched",
+                    applicationType: settings.appType,
+                    tokenEndpointAuthMethod: settings.tokenEndpointAuthMethod,
+                    secretPlaceholderRequired: isConfidential(settings),
+                };
+            }
+            logger.warn("  Reusing as-is (policy does not allow patching).");
+        }
+        return {
+            clientKey,
+            clientId: existing.client_id,
+            action: "reused",
+            applicationType: settings.appType,
+            tokenEndpointAuthMethod: settings.tokenEndpointAuthMethod,
+            secretPlaceholderRequired: isConfidential(settings),
+        };
+    }
+    logger.info("  Searching for existing Auth0 application by metadata...");
+    const existingApp = await auth0.findApplicationByMetadata("client_key", clientKey);
+    if (existingApp) {
+        logger.info(`  Found existing application: ${existingApp.name} (${existingApp.client_id})`);
+        const reuse = checkCompatibility(existingApp, settings);
+        if (reuse.compatible) {
+            logger.success("  Application is compatible. Reusing.");
+            return {
+                clientKey,
+                clientId: existingApp.client_id,
+                action: "reused",
+                applicationType: settings.appType,
+                tokenEndpointAuthMethod: settings.tokenEndpointAuthMethod,
+                secretPlaceholderRequired: isConfidential(settings),
+            };
+        }
+        logger.warn(`  Existing application is not compatible: ${reuse.reason}`);
+        const policy = resolveReusePolicy(clientConfig, descriptor);
+        if (policy === "patch_if_safe") {
+            if (dryRun) {
+                logger.info("  [DRY RUN] Would patch existing application.");
+                return {
+                    clientKey,
+                    clientId: existingApp.client_id,
+                    action: "dry_run",
+                    applicationType: settings.appType,
+                    tokenEndpointAuthMethod: settings.tokenEndpointAuthMethod,
+                    secretPlaceholderRequired: isConfidential(settings),
+                };
+            }
+            logger.info("  Patching existing application...");
+            await patchApplication(auth0, existingApp, settings, config.ecosystem, clientConfig);
+            logger.success("  Application patched.");
+            return {
+                clientKey,
+                clientId: existingApp.client_id,
+                action: "patched",
+                applicationType: settings.appType,
+                tokenEndpointAuthMethod: settings.tokenEndpointAuthMethod,
+                secretPlaceholderRequired: isConfidential(settings),
+            };
+        }
+        if (policy === "share_if_exact_match") {
+            logger.warn("  Exact match required but not met. Creating a new application.");
+        }
+    }
+    else {
+        logger.info("  No existing application found.");
+    }
+    if (!clientConfig.auth0.create_if_missing) {
+        throw new Error(`No compatible Auth0 Application found for "${clientKey}" and create_if_missing is false.`);
+    }
+    if (dryRun) {
+        logger.info("  [DRY RUN] Would create a new Auth0 Application.");
+        return {
+            clientKey,
+            clientId: "__DRY_RUN__",
+            action: "dry_run",
+            applicationType: settings.appType,
+            tokenEndpointAuthMethod: settings.tokenEndpointAuthMethod,
+            secretPlaceholderRequired: isConfidential(settings),
+        };
+    }
+    logger.info("  Creating new Auth0 Application...");
+    const newApp = await auth0.createApplication({
+        name: clientConfig.display_name,
+        app_type: settings.appType,
+        token_endpoint_auth_method: settings.tokenEndpointAuthMethod,
+        grant_types: settings.grantTypes,
+        callbacks: settings.callbackUrls.length > 0 ? settings.callbackUrls : undefined,
+        allowed_logout_urls: settings.logoutUrls.length > 0 ? settings.logoutUrls : undefined,
+        web_origins: settings.webOrigins.length > 0 ? settings.webOrigins : undefined,
+        client_metadata: {
+            ecosystem: config.ecosystem.ecosystem_name,
+            client_key: clientKey,
+            descriptor: clientConfig.descriptor ?? "",
+            profile: clientConfig.profile,
+            managed_by: "@scupit/mcp-ecosystem",
+        },
+        ...(settings.useRefreshTokens && {
+            refresh_token: {
+                rotation_type: settings.refreshTokenRotation
+                    ? "rotating"
+                    : "non-rotating",
+                expiration_type: "expiring",
+            },
+        }),
+    });
+    logger.success(`  Application created: ${newApp.name} (${newApp.client_id})`);
+    return {
+        clientKey,
+        clientId: newApp.client_id,
+        action: "created",
+        applicationType: settings.appType,
+        tokenEndpointAuthMethod: settings.tokenEndpointAuthMethod,
+        secretPlaceholderRequired: isConfidential(settings),
+    };
+}
+function resolveSettings(ecosystem, client, descriptor) {
+    const profileDef = ecosystem.defaults.client_profiles?.[client.profile];
+    const appType = mapProfileToAppType(client.profile);
+    const grantTypes = resolveGrantTypes(client.profile, descriptor);
+    const tokenEndpointAuthMethod = client.application_settings?.token_endpoint_auth_method ??
+        profileDef?.token_endpoint_auth_method ??
+        (isPublicProfile(client.profile) ? "none" : "client_secret_post");
+    const callbackUrls = client.application_settings?.callback_urls ??
+        descriptor?.callback_urls ??
+        [];
+    const logoutUrls = client.application_settings?.logout_urls ??
+        descriptor?.logout_urls ??
+        [];
+    const webOrigins = client.application_settings?.web_origins ??
+        descriptor?.web_origins ??
+        [];
+    const useRefreshTokens = client.token_settings?.use_refresh_tokens ??
+        descriptor?.requires_refresh_tokens ??
+        profileDef?.use_refresh_tokens ??
+        false;
+    const refreshTokenRotation = client.token_settings?.refresh_token_rotation ??
+        descriptor?.requires_refresh_token_rotation ??
+        profileDef?.refresh_token_rotation ??
+        false;
+    const accessMode = profileDef?.access_mode ?? descriptor?.access_mode ?? "user";
+    return {
+        appType,
+        grantTypes,
+        tokenEndpointAuthMethod,
+        callbackUrls,
+        logoutUrls,
+        webOrigins,
+        useRefreshTokens,
+        refreshTokenRotation,
+        accessMode,
+    };
+}
+function mapProfileToAppType(profile) {
+    const map = {
+        native_interactive: "native",
+        spa_interactive: "spa",
+        regular_web_interactive: "regular_web",
+        service_m2m: "non_interactive",
+    };
+    return map[profile];
+}
+function resolveGrantTypes(profile, descriptor) {
+    const grants = [];
+    switch (profile) {
+        case "native_interactive":
+            grants.push("authorization_code", "refresh_token");
+            if (descriptor?.supports_device_flow)
+                grants.push("urn:ietf:params:oauth:grant-type:device_code");
+            break;
+        case "spa_interactive":
+            grants.push("authorization_code", "refresh_token");
+            break;
+        case "regular_web_interactive":
+            grants.push("authorization_code", "refresh_token");
+            break;
+        case "service_m2m":
+            grants.push("client_credentials");
+            break;
+    }
+    return grants;
+}
+function isPublicProfile(profile) {
+    return profile === "native_interactive" || profile === "spa_interactive";
+}
+function isConfidential(settings) {
+    return settings.tokenEndpointAuthMethod !== "none";
+}
+function checkCompatibility(existing, desired) {
+    if (existing.app_type !== desired.appType) {
+        return {
+            compatible: false,
+            reason: `App type mismatch: existing="${existing.app_type}", desired="${desired.appType}"`,
+        };
+    }
+    if (existing.token_endpoint_auth_method !== desired.tokenEndpointAuthMethod) {
+        return {
+            compatible: false,
+            reason: `Token endpoint auth method mismatch: existing="${existing.token_endpoint_auth_method}", desired="${desired.tokenEndpointAuthMethod}"`,
+        };
+    }
+    for (const url of desired.callbackUrls) {
+        if (!existing.callbacks?.includes(url)) {
+            return {
+                compatible: false,
+                reason: `Missing callback URL: ${url}`,
+            };
+        }
+    }
+    for (const url of desired.logoutUrls) {
+        if (!existing.allowed_logout_urls?.includes(url)) {
+            return {
+                compatible: false,
+                reason: `Missing logout URL: ${url}`,
+            };
+        }
+    }
+    for (const url of desired.webOrigins) {
+        if (!existing.web_origins?.includes(url)) {
+            return {
+                compatible: false,
+                reason: `Missing web origin: ${url}`,
+            };
+        }
+    }
+    return { compatible: true };
+}
+function resolveReusePolicy(client, descriptor) {
+    if (descriptor?.reuse_policy)
+        return descriptor.reuse_policy;
+    if (client.profile === "service_m2m")
+        return "never_share";
+    return "share_if_exact_match";
+}
+async function patchApplication(auth0, existing, settings, ecosystem, clientConfig) {
+    const patch = {};
+    const mergedCallbacks = mergeArrays(existing.callbacks ?? [], settings.callbackUrls);
+    if (mergedCallbacks.length > (existing.callbacks?.length ?? 0)) {
+        patch.callbacks = mergedCallbacks;
+    }
+    const mergedLogout = mergeArrays(existing.allowed_logout_urls ?? [], settings.logoutUrls);
+    if (mergedLogout.length > (existing.allowed_logout_urls?.length ?? 0)) {
+        patch.allowed_logout_urls = mergedLogout;
+    }
+    const mergedOrigins = mergeArrays(existing.web_origins ?? [], settings.webOrigins);
+    if (mergedOrigins.length > (existing.web_origins?.length ?? 0)) {
+        patch.web_origins = mergedOrigins;
+    }
+    patch.client_metadata = {
+        ...existing.client_metadata,
+        ecosystem: ecosystem.ecosystem_name,
+        client_key: clientConfig.client_key,
+        descriptor: clientConfig.descriptor ?? "",
+        profile: clientConfig.profile,
+        managed_by: "mcp-ecosystem-script",
+    };
+    if (Object.keys(patch).length > 0) {
+        await auth0.updateApplication(existing.client_id, patch);
+    }
+}
+function mergeArrays(existing, desired) {
+    const set = new Set(existing);
+    for (const item of desired)
+        set.add(item);
+    return [...set];
+}
+//# sourceMappingURL=reconcile-client.js.map

package/dist/commands/reconcile-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile-client.js","sourceRoot":"","sources":["../../src/commands/reconcile-client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AA+B3C,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAmB,EACnB,SAAiB;IAEjB,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IACtC,MAAM,YAAY,GAAG,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,wBAAwB,SAAS,GAAG,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU;QACxC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC;QACvD,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;IAE7E,MAAM,CAAC,IAAI,CAAC,uBAAuB,YAAY,CAAC,YAAY,KAAK,SAAS,GAAG,CAAC,CAAC;IAC/E,MAAM,CAAC,KAAK,CAAC,cAAc,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;IACnD,MAAM,CAAC,KAAK,CAAC,eAAe,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IAChD,MAAM,CAAC,KAAK,CAAC,kBAAkB,QAAQ,CAAC,uBAAuB,EAAE,CAAC,CAAC;IAEnE,IAAI,YAAY,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CACT,+BAA+B,YAAY,CAAC,KAAK,CAAC,kBAAkB,EAAE,CACvE,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,cAAc,CACzC,YAAY,CAAC,KAAK,CAAC,kBAAkB,CACtC,CAAC;QACF,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CACT,mDAAmD,KAAK,CAAC,MAAM,EAAE,CAClE,CAAC;YACF,MAAM,MAAM,GAAG,UAAU,EAAE,YAAY,IAAI,sBAAsB,CAAC;YAClE,IAAI,MAAM,KAAK,eAAe,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC1C,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;gBAC1C,MAAM,gBAAgB,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;gBAClF,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;gBACzC,OAAO;oBACL,SAAS;oBACT,QAAQ,EAAE,QAAQ,CAAC,SAAS;oBAC5B,MAAM,EAAE,SAAS;oBACjB,eAAe,EAAE,QAAQ,CAAC,OAAO;oBACjC,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB;oBACzD,yBAAyB,EAAE,cAAc,CAAC,QAAQ,CAAC;iBACpD,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QACnE,CAAC;QACD,OAAO;YACL,SAAS;YACT,QAAQ,EAAE,QAAQ,CAAC,SAAS;YAC5B,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,QAAQ,CAAC,OAAO;YACjC,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB;YACzD,yBAAyB,EAAE,cAAc,CAAC,QAAQ,CAAC;SACpD,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,yBAAyB,CACvD,YAAY,EACZ,SAAS,CACV,CAAC;IAEF,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CACT,iCAAiC,WAAW,CAAC,IAAI,KAAK,WAAW,CAAC,SAAS,GAAG,CAC/E,CAAC;QACF,MAAM,KAAK,GAAG,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAC;YACxD,OAAO;gBACL,SAAS;gBACT,QAAQ,EAAE,WAAW,CAAC,SAAS;gBAC/B,MAAM,EAAE,QAAQ;gBAChB,eAAe,EAAE,QAAQ,CAAC,OAAO;gBACjC,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB;gBACzD,yBAAyB,EAAE,cAAc,CAAC,QAAQ,CAAC;aACpD,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,6CAA6C,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,kBAAkB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAC5D,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;YAC/B,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;gBAC7D,OAAO;oBACL,SAAS;oBACT,QAAQ,EAAE,WAAW,CAAC,SAAS;oBAC/B,MAAM,EAAE,SAAS;oBACjB,eAAe,EAAE,QAAQ,CAAC,OAAO;oBACjC,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB;oBACzD,yBAAyB,EAAE,cAAc,CAAC,QAAQ,CAAC;iBACpD,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;YAClD,MAAM,gBAAgB,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YACrF,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;YACzC,OAAO;gBACL,SAAS;gBACT,QAAQ,EAAE,WAAW,CAAC,SAAS;gBAC/B,MAAM,EAAE,SAAS;gBACjB,eAAe,EAAE,QAAQ,CAAC,OAAO;gBACjC,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB;gBACzD,yBAAyB,EAAE,cAAc,CAAC,QAAQ,CAAC;aACpD,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,sBAAsB,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CACT,iEAAiE,CAClE,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,8CAA8C,SAAS,mCAAmC,CAC3F,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QACjE,OAAO;YACL,SAAS;YACT,QAAQ,EAAE,aAAa;YACvB,MAAM,EAAE,SAAS;YACjB,eAAe,EAAE,QAAQ,CAAC,OAAO;YACjC,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB;YACzD,yBAAyB,EAAE,cAAc,CAAC,QAAQ,CAAC;SACpD,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC;QAC3C,IAAI,EAAE,YAAY,CAAC,YAAY;QAC/B,QAAQ,EAAE,QAAQ,CAAC,OAAO;QAC1B,0BAA0B,EAAE,QAAQ,CAAC,uBAAuB;QAC5D,WAAW,EAAE,QAAQ,CAAC,UAAU;QAChC,SAAS,EAAE,QAAQ,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;QAC/E,mBAAmB,EACjB,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QAClE,WAAW,EACT,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QAClE,eAAe,EAAE;YACf,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,cAAc;YAC1C,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,YAAY,CAAC,UAAU,IAAI,EAAE;YACzC,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,UAAU,EAAE,uBAAuB;SACpC;QACD,GAAG,CAAC,QAAQ,CAAC,gBAAgB,IAAI;YAC/B,aAAa,EAAE;gBACb,aAAa,EAAE,QAAQ,CAAC,oBAAoB;oBAC1C,CAAC,CAAC,UAAU;oBACZ,CAAC,CAAC,cAAc;gBAClB,eAAe,EAAE,UAAU;aAC5B;SACF,CAAC;KACH,CAAC,CAAC;IAEH,MAAM,CAAC,OAAO,CACZ,0BAA0B,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,SAAS,GAAG,CAC9D,CAAC;IAEF,OAAO;QACL,SAAS;QACT,QAAQ,EAAE,MAAM,CAAC,SAAS;QAC1B,MAAM,EAAE,SAAS;QACjB,eAAe,EAAE,QAAQ,CAAC,OAAO;QACjC,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB;QACzD,yBAAyB,EAAE,cAAc,CAAC,QAAQ,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,SAA0B,EAC1B,MAAoB,EACpB,UAA6B;IAE7B,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAExE,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACjE,MAAM,uBAAuB,GAC3B,MAAM,CAAC,oBAAoB,EAAE,0BAA0B;QACvD,UAAU,EAAE,0BAA0B;QACtC,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAEpE,MAAM,YAAY,GAChB,MAAM,CAAC,oBAAoB,EAAE,aAAa;QAC1C,UAAU,EAAE,aAAa;QACzB,EAAE,CAAC;IACL,MAAM,UAAU,GACd,MAAM,CAAC,oBAAoB,EAAE,WAAW;QACxC,UAAU,EAAE,WAAW;QACvB,EAAE,CAAC;IACL,MAAM,UAAU,GACd,MAAM,CAAC,oBAAoB,EAAE,WAAW;QACxC,UAAU,EAAE,WAAW;QACvB,EAAE,CAAC;IAEL,MAAM,gBAAgB,GACpB,MAAM,CAAC,cAAc,EAAE,kBAAkB;QACzC,UAAU,EAAE,uBAAuB;QACnC,UAAU,EAAE,kBAAkB;QAC9B,KAAK,CAAC;IAER,MAAM,oBAAoB,GACxB,MAAM,CAAC,cAAc,EAAE,sBAAsB;QAC7C,UAAU,EAAE,+BAA+B;QAC3C,UAAU,EAAE,sBAAsB;QAClC,KAAK,CAAC;IAER,MAAM,UAAU,GAAG,UAAU,EAAE,WAAW,IAAI,UAAU,EAAE,WAAW,IAAI,MAAM,CAAC;IAEhF,OAAO;QACL,OAAO;QACP,UAAU;QACV,uBAAuB;QACvB,YAAY;QACZ,UAAU;QACV,UAAU;QACV,gBAAgB;QAChB,oBAAoB;QACpB,UAAU;KACX,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAsB;IACjD,MAAM,GAAG,GAAkC;QACzC,kBAAkB,EAAE,QAAQ;QAC5B,eAAe,EAAE,KAAK;QACtB,uBAAuB,EAAE,aAAa;QACtC,WAAW,EAAE,iBAAiB;KAC/B,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,iBAAiB,CACxB,OAAsB,EACtB,UAA6B;IAE7B,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,oBAAoB;YACvB,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,eAAe,CAAC,CAAC;YACnD,IAAI,UAAU,EAAE,oBAAoB;gBAAE,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;YAClG,MAAM;QACR,KAAK,iBAAiB;YACpB,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,eAAe,CAAC,CAAC;YACnD,MAAM;QACR,KAAK,yBAAyB;YAC5B,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,eAAe,CAAC,CAAC;YACnD,MAAM;QACR,KAAK,aAAa;YAChB,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YAClC,MAAM;IACV,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,OAAsB;IAC7C,OAAO,OAAO,KAAK,oBAAoB,IAAI,OAAO,KAAK,iBAAiB,CAAC;AAC3E,CAAC;AAED,SAAS,cAAc,CAAC,QAAgC;IACtD,OAAO,QAAQ,CAAC,uBAAuB,KAAK,MAAM,CAAC;AACrD,CAAC;AAOD,SAAS,kBAAkB,CACzB,QAA0B,EAC1B,OAA+B;IAE/B,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;QAC1C,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,gCAAgC,QAAQ,CAAC,QAAQ,eAAe,OAAO,CAAC,OAAO,GAAG;SAC3F,CAAC;IACJ,CAAC;IAED,IACE,QAAQ,CAAC,0BAA0B,KAAK,OAAO,CAAC,uBAAuB,EACvE,CAAC;QACD,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,kDAAkD,QAAQ,CAAC,0BAA0B,eAAe,OAAO,CAAC,uBAAuB,GAAG;SAC/I,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvC,OAAO;gBACL,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,yBAAyB,GAAG,EAAE;aACvC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACjD,OAAO;gBACL,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,uBAAuB,GAAG,EAAE;aACrC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,OAAO;gBACL,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,uBAAuB,GAAG,EAAE;aACrC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,kBAAkB,CACzB,MAAoB,EACpB,UAA6B;IAE7B,IAAI,UAAU,EAAE,YAAY;QAAE,OAAO,UAAU,CAAC,YAAY,CAAC;IAC7D,IAAI,MAAM,CAAC,OAAO,KAAK,aAAa;QAAE,OAAO,aAAa,CAAC;IAC3D,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,KAA2G,EAC3G,QAA0B,EAC1B,QAAgC,EAChC,SAA0B,EAC1B,YAA0B;IAE1B,MAAM,KAAK,GAA8B,EAAE,CAAC;IAE5C,MAAM,eAAe,GAAG,WAAW,CACjC,QAAQ,CAAC,SAAS,IAAI,EAAE,EACxB,QAAQ,CAAC,YAAY,CACtB,CAAC;IACF,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC;QAC/D,KAAK,CAAC,SAAS,GAAG,eAAe,CAAC;IACpC,CAAC;IAED,MAAM,YAAY,GAAG,WAAW,CAC9B,QAAQ,CAAC,mBAAmB,IAAI,EAAE,EAClC,QAAQ,CAAC,UAAU,CACpB,CAAC;IACF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC;QACtE,KAAK,CAAC,mBAAmB,GAAG,YAAY,CAAC;IAC3C,CAAC;IAED,MAAM,aAAa,GAAG,WAAW,CAC/B,QAAQ,CAAC,WAAW,IAAI,EAAE,EAC1B,QAAQ,CAAC,UAAU,CACpB,CAAC;IACF,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC;QAC/D,KAAK,CAAC,WAAW,GAAG,aAAa,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,eAAe,GAAG;QACtB,GAAG,QAAQ,CAAC,eAAe;QAC3B,SAAS,EAAE,SAAS,CAAC,cAAc;QACnC,UAAU,EAAE,YAAY,CAAC,UAAU;QACnC,UAAU,EAAE,YAAY,CAAC,UAAU,IAAI,EAAE;QACzC,OAAO,EAAE,YAAY,CAAC,OAAO;QAC7B,UAAU,EAAE,sBAAsB;KACnC,CAAC;IAEF,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,KAAK,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,QAAkB,EAAE,OAAiB;IACxD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,OAAO;QAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC"}

package/dist/commands/reconcile-server.d.ts

@@ -0,0 +1,18 @@
+import type { CommandContext } from "../utils/index.js";
+export interface ReconcileServerResult {
+    slug: string;
+    apiIdentifier: string;
+    auth0ApiId: string;
+    action: "created" | "updated" | "unchanged" | "dry_run";
+    scopes: string[];
+    grantResults: GrantResult[];
+}
+export interface GrantResult {
+    clientKey: string;
+    clientId: string;
+    action: "created" | "updated" | "unchanged" | "dry_run";
+    scopes: string[];
+    subjectType: string;
+}
+export declare function reconcileServer(ctx: CommandContext, serverSlug: string): Promise<ReconcileServerResult>;
+//# sourceMappingURL=reconcile-server.d.ts.map

package/dist/commands/reconcile-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile-server.d.ts","sourceRoot":"","sources":["../../src/commands/reconcile-server.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAkBxD,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;IACxD,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,EAAE,WAAW,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;IACxD,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,wBAAsB,eAAe,CACnC,GAAG,EAAE,cAAc,EACnB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,qBAAqB,CAAC,CAmGhC"}