@shin1ohno/sage 0.2.4 → 0.5.3

package/dist/oauth/types.d.ts

@@ -0,0 +1,264 @@
+/**
+ * OAuth 2.1 Type Definitions
+ * Requirements: 21.1-21.6, 22.1-22.5, 23.1-23.9, 24.1-24.8, 25.1-25.10, 26.1-26.9
+ *
+ * Type definitions for OAuth 2.1 implementation based on:
+ * - OAuth 2.1 (draft-ietf-oauth-v2-1-13)
+ * - RFC 8414 (Authorization Server Metadata)
+ * - RFC 7591 (Dynamic Client Registration)
+ * - RFC 9728 (Protected Resource Metadata)
+ * - RFC 8707 (Resource Indicators)
+ * - RFC 7636 (PKCE)
+ */
+/**
+ * Supported OAuth scopes
+ * Requirement 22.2
+ */
+export type OAuthScope = 'mcp:read' | 'mcp:write' | 'mcp:admin';
+/**
+ * Supported response types
+ * Requirement 23.6
+ */
+export type ResponseType = 'code';
+/**
+ * Supported grant types
+ * Requirement 23.7
+ */
+export type GrantType = 'authorization_code' | 'refresh_token';
+/**
+ * Supported code challenge methods
+ * Requirement 21.2, 23.8
+ */
+export type CodeChallengeMethod = 'S256';
+/**
+ * Supported token endpoint auth methods
+ * Requirement 23.9
+ */
+export type TokenEndpointAuthMethod = 'none' | 'client_secret_post';
+/**
+ * OAuth Client Registration Request (RFC 7591)
+ * Requirement 24.1-24.7
+ */
+export interface ClientRegistrationRequest {
+    client_name: string;
+    redirect_uris: string[];
+    response_types?: ResponseType[];
+    grant_types?: GrantType[];
+    token_endpoint_auth_method?: TokenEndpointAuthMethod;
+    scope?: string;
+    contacts?: string[];
+    logo_uri?: string;
+    client_uri?: string;
+    policy_uri?: string;
+    tos_uri?: string;
+}
+/**
+ * OAuth Client Metadata (RFC 7591)
+ * Requirement 24.6
+ */
+export interface OAuthClient {
+    client_id: string;
+    client_name: string;
+    redirect_uris: string[];
+    response_types: ResponseType[];
+    grant_types: GrantType[];
+    token_endpoint_auth_method: TokenEndpointAuthMethod;
+    client_id_issued_at: number;
+    client_secret?: string;
+    client_secret_expires_at?: number;
+    scope?: string;
+}
+/**
+ * Authorization Request Parameters
+ * Requirement 25.1-25.10
+ */
+export interface AuthorizationRequest {
+    response_type: ResponseType;
+    client_id: string;
+    redirect_uri: string;
+    scope?: string;
+    state: string;
+    code_challenge: string;
+    code_challenge_method: CodeChallengeMethod;
+    resource?: string;
+}
+/**
+ * Authorization Code Data (internal)
+ * Requirement 25.9, 25.10
+ */
+export interface AuthorizationCode {
+    code: string;
+    client_id: string;
+    redirect_uri: string;
+    scope: string;
+    code_challenge: string;
+    code_challenge_method: CodeChallengeMethod;
+    resource?: string;
+    user_id: string;
+    created_at: number;
+    expires_at: number;
+    used: boolean;
+}
+/**
+ * Token Request for authorization_code grant
+ * Requirement 26.1-26.5
+ */
+export interface TokenRequestAuthorizationCode {
+    grant_type: 'authorization_code';
+    code: string;
+    client_id: string;
+    redirect_uri: string;
+    code_verifier: string;
+    resource?: string;
+}
+/**
+ * Token Request for refresh_token grant
+ * Requirement 26.3
+ */
+export interface TokenRequestRefreshToken {
+    grant_type: 'refresh_token';
+    refresh_token: string;
+    client_id: string;
+    scope?: string;
+}
+/**
+ * Token Request (union type)
+ */
+export type TokenRequest = TokenRequestAuthorizationCode | TokenRequestRefreshToken;
+/**
+ * Token Response
+ * Requirement 26.7
+ */
+export interface TokenResponse {
+    access_token: string;
+    token_type: 'Bearer';
+    expires_in: number;
+    refresh_token?: string;
+    scope?: string;
+}
+/**
+ * Access Token Claims (JWT payload)
+ * Requirement 26.6, 27.4
+ */
+export interface AccessTokenClaims {
+    iss: string;
+    sub: string;
+    aud: string;
+    exp: number;
+    iat: number;
+    jti: string;
+    client_id: string;
+    scope: string;
+}
+/**
+ * Refresh Token Data (internal)
+ * Requirement 21.6, 26.8
+ */
+export interface RefreshToken {
+    token: string;
+    client_id: string;
+    user_id: string;
+    scope: string;
+    created_at: number;
+    expires_at: number;
+    rotated: boolean;
+}
+/**
+ * Protected Resource Metadata (RFC 9728)
+ * Requirement 22.1-22.3
+ */
+export interface ProtectedResourceMetadata {
+    resource: string;
+    authorization_servers: string[];
+    scopes_supported?: string[];
+    bearer_methods_supported?: string[];
+}
+/**
+ * Authorization Server Metadata (RFC 8414)
+ * Requirement 23.1-23.9
+ */
+export interface AuthorizationServerMetadata {
+    issuer: string;
+    authorization_endpoint: string;
+    token_endpoint: string;
+    registration_endpoint?: string;
+    scopes_supported?: string[];
+    response_types_supported: ResponseType[];
+    response_modes_supported?: string[];
+    grant_types_supported: GrantType[];
+    token_endpoint_auth_methods_supported: TokenEndpointAuthMethod[];
+    code_challenge_methods_supported: CodeChallengeMethod[];
+    service_documentation?: string;
+}
+/**
+ * OAuth Error Response
+ */
+export interface OAuthError {
+    error: string;
+    error_description?: string;
+    error_uri?: string;
+    state?: string;
+}
+/**
+ * OAuth Error Codes
+ */
+export type OAuthErrorCode = 'invalid_request' | 'unauthorized_client' | 'access_denied' | 'unsupported_response_type' | 'invalid_scope' | 'server_error' | 'temporarily_unavailable' | 'invalid_client' | 'invalid_grant' | 'unsupported_grant_type' | 'invalid_token' | 'insufficient_scope';
+/**
+ * User for authentication
+ * Requirement 29.1-29.4
+ */
+export interface OAuthUser {
+    id: string;
+    username: string;
+    passwordHash: string;
+    createdAt: number;
+}
+/**
+ * User Session
+ */
+export interface UserSession {
+    sessionId: string;
+    userId: string;
+    createdAt: number;
+    expiresAt: number;
+}
+/**
+ * OAuth Configuration
+ */
+export interface OAuthConfig {
+    issuer: string;
+    accessTokenExpiry: string;
+    refreshTokenExpiry: string;
+    authorizationCodeExpiry: string;
+    allowedRedirectUris: string[];
+    scopes: Record<OAuthScope, string>;
+    users: OAuthUser[];
+    privateKey?: string;
+    publicKey?: string;
+}
+/**
+ * Scope definitions with descriptions
+ */
+export declare const SCOPE_DEFINITIONS: Record<OAuthScope, string>;
+/**
+ * Claude official callback URLs
+ * Requirement 24.4, 24.5, 31.1, 31.2
+ */
+export declare const CLAUDE_CALLBACK_URLS: string[];
+/**
+ * Default token expiry durations
+ */
+export declare const DEFAULT_TOKEN_EXPIRY: {
+    accessToken: string;
+    refreshToken: string;
+    authorizationCode: string;
+};
+/**
+ * Verify Token Result
+ */
+export interface VerifyTokenResult {
+    valid: boolean;
+    claims?: AccessTokenClaims;
+    error?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/oauth/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/oauth/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG,WAAW,CAAC;AAEhE;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC;AAElC;;;GAGG;AACH,MAAM,MAAM,SAAS,GAAG,oBAAoB,GAAG,eAAe,CAAC;AAE/D;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEzC;;;GAGG;AACH,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG,oBAAoB,CAAC;AAEpE;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,CAAC,EAAE,YAAY,EAAE,CAAC;IAChC,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC;IAC1B,0BAA0B,CAAC,EAAE,uBAAuB,CAAC;IACrD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,EAAE,YAAY,EAAE,CAAC;IAC/B,WAAW,EAAE,SAAS,EAAE,CAAC;IACzB,0BAA0B,EAAE,uBAAuB,CAAC;IACpD,mBAAmB,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,YAAY,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,oBAAoB,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,eAAe,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,6BAA6B,GAAG,wBAAwB,CAAC;AAEpF;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,QAAQ,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;CACrC;AAED;;;GAGG;AACH,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,sBAAsB,EAAE,MAAM,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,wBAAwB,EAAE,YAAY,EAAE,CAAC;IACzC,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;IACpC,qBAAqB,EAAE,SAAS,EAAE,CAAC;IACnC,qCAAqC,EAAE,uBAAuB,EAAE,CAAC;IACjE,gCAAgC,EAAE,mBAAmB,EAAE,CAAC;IACxD,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,MAAM,cAAc,GACtB,iBAAiB,GACjB,qBAAqB,GACrB,eAAe,GACf,2BAA2B,GAC3B,eAAe,GACf,cAAc,GACd,yBAAyB,GACzB,gBAAgB,GAChB,eAAe,GACf,wBAAwB,GACxB,eAAe,GACf,oBAAoB,CAAC;AAEzB;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,uBAAuB,EAAE,MAAM,CAAC;IAChC,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACnC,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAIxD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,oBAAoB,UAGhC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;CAIhC,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}

package/dist/oauth/types.js

@@ -0,0 +1,37 @@
+/**
+ * OAuth 2.1 Type Definitions
+ * Requirements: 21.1-21.6, 22.1-22.5, 23.1-23.9, 24.1-24.8, 25.1-25.10, 26.1-26.9
+ *
+ * Type definitions for OAuth 2.1 implementation based on:
+ * - OAuth 2.1 (draft-ietf-oauth-v2-1-13)
+ * - RFC 8414 (Authorization Server Metadata)
+ * - RFC 7591 (Dynamic Client Registration)
+ * - RFC 9728 (Protected Resource Metadata)
+ * - RFC 8707 (Resource Indicators)
+ * - RFC 7636 (PKCE)
+ */
+/**
+ * Scope definitions with descriptions
+ */
+export const SCOPE_DEFINITIONS = {
+    'mcp:read': '読み取り専用アクセス',
+    'mcp:write': '読み書きアクセス',
+    'mcp:admin': '管理者アクセス',
+};
+/**
+ * Claude official callback URLs
+ * Requirement 24.4, 24.5, 31.1, 31.2
+ */
+export const CLAUDE_CALLBACK_URLS = [
+    'https://claude.ai/api/mcp/auth_callback',
+    'https://claude.com/api/mcp/auth_callback',
+];
+/**
+ * Default token expiry durations
+ */
+export const DEFAULT_TOKEN_EXPIRY = {
+    accessToken: '1h',
+    refreshToken: '30d',
+    authorizationCode: '10m',
+};
+//# sourceMappingURL=types.js.map

package/dist/oauth/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/oauth/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAsQH;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA+B;IAC3D,UAAU,EAAE,YAAY;IACxB,WAAW,EAAE,UAAU;IACvB,WAAW,EAAE,SAAS;CACvB,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,yCAAyC;IACzC,0CAA0C;CAC3C,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,WAAW,EAAE,IAAI;IACjB,YAAY,EAAE,KAAK;IACnB,iBAAiB,EAAE,KAAK;CACzB,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Version information for sage
+ *
+ * Single source of truth for version number.
+ * Import this instead of hardcoding version strings.
+ */
+export declare const VERSION = "0.5.3";
+export declare const SERVER_NAME = "sage";
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,eAAO,MAAM,OAAO,UAAU,CAAC;AAC/B,eAAO,MAAM,WAAW,SAAS,CAAC"}

package/dist/version.js

@@ -0,0 +1,11 @@
+/**
+ * Version information for sage
+ *
+ * Single source of truth for version number.
+ * Import this instead of hardcoding version strings.
+ */
+// Version is updated by npm version command and build process
+// Keep in sync with package.json
+export const VERSION = '0.5.3';
+export const SERVER_NAME = 'sage';
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,8DAA8D;AAC9D,iCAAiC;AACjC,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC;AAC/B,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC"}

package/manifest.json

@@ -1,26 +1,22 @@
 {
   "manifest_version": "0.2",
-  "id": "@shin1ohno/sage",
-  "name": "sage - AI Task Manager",
+  "name": "sage",
+  "display_name": "sage - AI Task Manager",
+  "version": "0.3.0",
   "description": "AI Task Management Assistant for Claude. Analyze tasks, set priorities, manage reminders, and integrate with Apple Reminders, Notion, and Calendar.",
-  "version": "0.2.4",
   "author": {
-    "name": "shin1ohno"
+    "name": "shin1ohno",
+    "url": "https://github.com/shin1ohno"
   },
-  "website": "https://github.com/shin1ohno/sage",
   "server": {
     "type": "node",
-    "entry_point": "dist/index.js"
-  },
-  "compatibility": {
-    "os": ["darwin"],
-    "arch": ["x64", "arm64"],
-    "min_claude": "1.0.0"
+    "entry_point": "dist/index.js",
+    "mcp_config": {
+      "command": "node",
+      "args": ["${__dirname}/dist/index.js"],
+      "env": {}
+    }
   },
-  "permissions": [
-    "filesystem.read",
-    "filesystem.write"
-  ],
   "tools": [
     {
       "name": "check_setup_status",
@@ -66,9 +62,5 @@
       "name": "update_task_status",
       "description": "Update the status of a task and optionally sync across sources."
     }
-  ],
-  "update": {
-    "type": "github_release",
-    "repo": "shin1ohno/sage"
-  }
+  ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shin1ohno/sage",
-  "version": "0.2.4",
+  "version": "0.5.3",
   "description": "AI Task Management Assistant MCP Server for Claude Desktop and Claude Code",
   "main": "dist/index.js",
   "bin": {