@squadrules/mcp 4.8.6

package/dist/http/http-ui-static.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-ui-static.d.ts","sourceRoot":"","sources":["../../src/http/http-ui-static.ts"],"names":[],"mappings":"AAGA,OAAO,OAAO,MAAM,SAAS,CAAC;AA4C9B;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,GAAG,IAAI,CA+CxD"}

package/dist/http/http-ui-static.js

@@ -0,0 +1,88 @@
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import express from "express";
+import { HTTP_RATE_LIMIT_MAX, HTTP_RATE_LIMIT_WINDOW_MS } from "../config.js";
+import { structuredLogger } from "../utils/structured-logger.js";
+import { createRateLimiter } from "./http-server-config.js";
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const parentDirName = path.basename(path.resolve(__dirname, ".."));
+/** Default: dist/ui next to compiled `dist/http`, or two levels up from `src/http` when running from TypeScript sources. */
+function defaultUiDir() {
+    return parentDirName === "src"
+        ? path.resolve(__dirname, "..", "..", "dist", "ui")
+        : path.resolve(__dirname, "..", "ui");
+}
+/**
+ * Root directory of the Vite build (`vite build` → `dist/ui`).
+ * Set `KAIROS_UI_DIR` to an absolute path (or path relative to `process.cwd()`) when the server
+ * resolves the wrong tree (e.g. global install, symlinked package, or mismatched worktree).
+ */
+function resolveKairosUiDir() {
+    const override = process.env["KAIROS_UI_DIR"]?.trim();
+    if (!override)
+        return defaultUiDir();
+    return path.isAbsolute(override) ? override : path.resolve(process.cwd(), override);
+}
+/** True if the built Kairos page chunk includes browse-by-letter (post–letter-blocks UI). */
+function builtUiHasLetterBrowse(uiDir) {
+    const assetsDir = path.join(uiDir, "assets");
+    try {
+        if (!fs.existsSync(assetsDir))
+            return false;
+        for (const name of fs.readdirSync(assetsDir)) {
+            if (!name.startsWith("KairosPage-") || !name.endsWith(".js"))
+                continue;
+            const text = fs.readFileSync(path.join(assetsDir, name), "utf8");
+            return text.includes("browseByLetterHint") || text.includes("BROWSE_LETTERS");
+        }
+    }
+    catch {
+        return false;
+    }
+    return false;
+}
+const isProductionUiCache = process.env["NODE_ENV"] === "production";
+/**
+ * Serve the built SPA at URL /ui.
+ * - GET / -> redirect to /ui
+ * - Static files from dist/ui at /ui
+ * - SPA fallback: GET /ui/* that don't match a file -> index.html
+ */
+export function setupUiStatic(app) {
+    const UI_DIR = resolveKairosUiDir();
+    const indexPath = path.join(UI_DIR, "index.html");
+    const hasIndex = fs.existsSync(indexPath);
+    const letterBrowse = builtUiHasLetterBrowse(UI_DIR);
+    structuredLogger.info(`HTTP static UI: dir=${UI_DIR} index_html=${hasIndex} browse_by_letter_bundle=${letterBrowse}` +
+        (process.env["KAIROS_UI_DIR"]?.trim() ? " (KAIROS_UI_DIR override)" : ""));
+    if (hasIndex && !letterBrowse) {
+        structuredLogger.warn("Built UI under this path does not contain browse-by-letter code; run npm run ui:build in the same tree or set KAIROS_UI_DIR to that repo's dist/ui.");
+    }
+    const uiLimiter = createRateLimiter({
+        identifier: "ui-static",
+        windowMs: HTTP_RATE_LIMIT_WINDOW_MS,
+        limit: HTTP_RATE_LIMIT_MAX,
+        message: "Too many UI requests. Try again later."
+    });
+    app.get("/", uiLimiter, (_req, res) => {
+        res.redirect(302, "/ui");
+    });
+    app.use("/ui", uiLimiter, express.static(UI_DIR, {
+        etag: isProductionUiCache,
+        lastModified: isProductionUiCache,
+        maxAge: isProductionUiCache ? "1y" : 0,
+        setHeaders(res) {
+            if (!isProductionUiCache) {
+                res.setHeader("Cache-Control", "no-store, no-cache, must-revalidate");
+            }
+        },
+    }));
+    app.use("/ui", uiLimiter, (req, res) => {
+        if (!isProductionUiCache) {
+            res.setHeader("Cache-Control", "no-store, no-cache, must-revalidate");
+        }
+        res.sendFile("index.html", { root: UI_DIR });
+    });
+}
+//# sourceMappingURL=http-ui-static.js.map

package/dist/http/http-ui-static.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-ui-static.js","sourceRoot":"","sources":["../../src/http/http-ui-static.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;AAEnE,4HAA4H;AAC5H,SAAS,YAAY;IACnB,OAAO,aAAa,KAAK,KAAK;QAC5B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC;QACnD,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB;IACzB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC;IACtD,IAAI,CAAC,QAAQ;QAAE,OAAO,YAAY,EAAE,CAAC;IACrC,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC;AACtF,CAAC;AAED,6FAA6F;AAC7F,SAAS,sBAAsB,CAAC,KAAa;IAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5C,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YACvE,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;YACjE,OAAO,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,YAAY,CAAC;AAErE;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,GAAoB;IAChD,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IACpD,gBAAgB,CAAC,IAAI,CACnB,uBAAuB,MAAM,eAAe,QAAQ,4BAA4B,YAAY,EAAE;QAC5F,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,EAAE,CAAC,CAC5E,CAAC;IACF,IAAI,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;QAC9B,gBAAgB,CAAC,IAAI,CACnB,qJAAqJ,CACtJ,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,iBAAiB,CAAC;QAClC,UAAU,EAAE,WAAW;QACvB,QAAQ,EAAE,yBAAyB;QACnC,KAAK,EAAE,mBAAmB;QAC1B,OAAO,EAAE,wCAAwC;KAClD,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACpC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CACL,KAAK,EACL,SAAS,EACT,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;QACrB,IAAI,EAAE,mBAAmB;QACzB,YAAY,EAAE,mBAAmB;QACjC,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,UAAU,CAAC,GAAG;YACZ,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACzB,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,qCAAqC,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;KACF,CAAC,CACH,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACrC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,qCAAqC,CAAC,CAAC;QACxE,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/http/http-well-known.d.ts

@@ -0,0 +1,23 @@
+/**
+ * OAuth 2.0 well-known metadata endpoints for MCP authorization discovery.
+ *
+ * Protected Resource Metadata (RFC 9728):
+ *   GET /.well-known/oauth-protected-resource       (root - fallback)
+ *   GET /.well-known/oauth-protected-resource/mcp   (path-specific - tried first by spec-compliant clients)
+ *
+ * Authorization Server Metadata (RFC 8414 proxy):
+ *   GET /.well-known/oauth-authorization-server
+ *
+ *   Proxies Keycloak's realm OpenID configuration. registration_endpoint is preserved so
+ *   MCP hosts that require Dynamic Client Registration (e.g. Cursor streamable HTTP) work.
+ *   Adds client_id_metadata_document_supported: true (MCP spec 2025-11-25) so clients that
+ *   support Client ID Metadata Documents can prefer them over DCR when applicable.
+ *   Operators should constrain DCR in Keycloak realm settings if client sprawl is a concern.
+ *
+ * See: https://modelcontextprotocol.io/specification/2025-11-25/basic/authorization
+ */
+import type { Express } from 'express';
+export declare function buildProtectedResourceMetadata(): Record<string, unknown>;
+export declare function setupWellKnown(app: Express): void;
+export declare function buildAuthorizationServerMetadata(upstream: Record<string, unknown>): Record<string, unknown>;
+//# sourceMappingURL=http-well-known.d.ts.map

package/dist/http/http-well-known.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-well-known.d.ts","sourceRoot":"","sources":["../../src/http/http-well-known.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,SAAS,CAAC;AAY1D,wBAAgB,8BAA8B,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA0BxE;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAoCjD;AA+ED,wBAAgB,gCAAgC,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAe3G"}

package/dist/http/http-well-known.js

@@ -0,0 +1,167 @@
+import { AUTH_CALLBACK_BASE_URL, KEYCLOAK_URL, KEYCLOAK_INTERNAL_URL, KEYCLOAK_REALM, KEYCLOAK_CLI_CLIENT_ID, OIDC_SCOPES_SUPPORTED } from '../config.js';
+import { structuredLogger } from '../utils/structured-logger.js';
+import { setupClientRegistrationProxy } from './http-client-registration-proxy.js';
+export function buildProtectedResourceMetadata() {
+    const base = AUTH_CALLBACK_BASE_URL.replace(/\/$/, '');
+    const resource = `${base}/mcp`;
+    const issuer = KEYCLOAK_URL
+        ? `${KEYCLOAK_URL.replace(/\/$/, '')}/realms/${KEYCLOAK_REALM}`
+        : '';
+    const metadata = {
+        resource,
+        authorization_servers: issuer ? [issuer] : [],
+        scopes_supported: OIDC_SCOPES_SUPPORTED,
+        bearer_methods_supported: ['header'],
+        resource_name: 'SquadRules MCP'
+    };
+    if (issuer) {
+        metadata['authorization_endpoint'] = `${issuer}/protocol/openid-connect/auth`;
+        metadata['token_endpoint'] = `${issuer}/protocol/openid-connect/token`;
+    }
+    metadata['authorization_request_parameters'] = { prompt: 'login' };
+    if (KEYCLOAK_CLI_CLIENT_ID) {
+        // Dual emission: retain the older field for existing clients, add new alias
+        // for SquadRules-aware clients. Both carry the same value.
+        metadata['kairos_cli_client_id'] = KEYCLOAK_CLI_CLIENT_ID;
+        metadata['squadrules_cli_client_id'] = KEYCLOAK_CLI_CLIENT_ID;
+    }
+    return metadata;
+}
+export function setupWellKnown(app) {
+    if (!AUTH_CALLBACK_BASE_URL) {
+        structuredLogger.warn('[well-known] AUTH_CALLBACK_BASE_URL is empty — Protected Resource Metadata will use relative URIs (non-compliant with RFC 9728). Set AUTH_CALLBACK_BASE_URL for production.');
+    }
+    const handler = (req, res) => {
+        const origin = req.headers.origin;
+        if (origin) {
+            res.setHeader('Access-Control-Allow-Origin', origin);
+            res.setHeader('Vary', 'Origin');
+        }
+        res.json(buildProtectedResourceMetadata());
+    };
+    const optionsHandler = (req, res) => {
+        const origin = req.headers.origin;
+        if (origin) {
+            res.setHeader('Access-Control-Allow-Origin', origin);
+            res.setHeader('Vary', 'Origin');
+        }
+        res.setHeader('Access-Control-Allow-Methods', 'GET, OPTIONS');
+        res.setHeader('Access-Control-Allow-Headers', 'Content-Type, Authorization, MCP-Protocol-Version');
+        res.setHeader('Access-Control-Max-Age', '86400');
+        res.status(204).end();
+    };
+    app.get('/.well-known/oauth-protected-resource', handler);
+    app.get('/.well-known/oauth-protected-resource/mcp', handler);
+    app.options('/.well-known/oauth-protected-resource', optionsHandler);
+    app.options('/.well-known/oauth-protected-resource/mcp', optionsHandler);
+    setupClientRegistrationProxy(app);
+    setupAuthorizationServerMetadata(app);
+}
+// ---------------------------------------------------------------------------
+// Authorization Server Metadata proxy (RFC 8414)
+// ---------------------------------------------------------------------------
+/** Cache upstream metadata to avoid per-request round-trips. */
+let authServerMetadataCache = null;
+const AUTH_SERVER_METADATA_CACHE_SEC = 300; // 5 min
+/**
+ * Resolve the Keycloak base URL for server-side fetches (Docker: use internal URL).
+ * Same logic as bearer-validate.ts resolveOidcIssuerBaseForServerFetch.
+ */
+function keycloakFetchBase() {
+    const external = KEYCLOAK_URL ? KEYCLOAK_URL.replace(/\/$/, '') : '';
+    if (KEYCLOAK_INTERNAL_URL && external) {
+        return KEYCLOAK_INTERNAL_URL.replace(/\/$/, '');
+    }
+    return external;
+}
+function rewriteInternalKeycloakUrls(value) {
+    const external = KEYCLOAK_URL ? KEYCLOAK_URL.replace(/\/$/, '') : '';
+    const internal = KEYCLOAK_INTERNAL_URL ? KEYCLOAK_INTERNAL_URL.replace(/\/$/, '') : '';
+    if (!external || !internal || external === internal) {
+        return value;
+    }
+    if (typeof value === 'string') {
+        if (value === internal || value.startsWith(`${internal}/`)) {
+            return `${external}${value.slice(internal.length)}`;
+        }
+        return value;
+    }
+    if (Array.isArray(value)) {
+        return value.map((entry) => rewriteInternalKeycloakUrls(entry));
+    }
+    if (value && typeof value === 'object') {
+        return Object.fromEntries(Object.entries(value).map(([key, entry]) => [key, rewriteInternalKeycloakUrls(entry)]));
+    }
+    return value;
+}
+async function fetchUpstreamAuthServerMetadata() {
+    const now = Date.now();
+    if (authServerMetadataCache && now < authServerMetadataCache.expiresAt) {
+        return authServerMetadataCache.data;
+    }
+    const base = keycloakFetchBase();
+    if (!base)
+        return null;
+    const url = `${base}/realms/${KEYCLOAK_REALM}/.well-known/openid-configuration`;
+    try {
+        const res = await fetch(url, {
+            headers: { Accept: 'application/json' },
+            signal: AbortSignal.timeout(5000),
+        });
+        if (!res.ok) {
+            structuredLogger.warn(`[well-known] upstream auth server metadata HTTP ${res.status} url=${url}`);
+            return null;
+        }
+        const data = (await res.json());
+        authServerMetadataCache = { data, expiresAt: now + AUTH_SERVER_METADATA_CACHE_SEC * 1000 };
+        return data;
+    }
+    catch (err) {
+        structuredLogger.warn(`[well-known] upstream auth server metadata fetch failed url=${url} err=${err instanceof Error ? err.message : String(err)}`);
+        return null;
+    }
+}
+export function buildAuthorizationServerMetadata(upstream) {
+    const metadata = rewriteInternalKeycloakUrls({ ...upstream });
+    // Preserve registration_endpoint from Keycloak — MCP hosts (e.g. Cursor streamable HTTP)
+    // require it for Dynamic Client Registration. Stripping it causes:
+    //   "Incompatible auth server: does not support dynamic client registration"
+    // Operators should constrain DCR in Keycloak realm settings if client sprawl is a concern.
+    metadata['client_id_metadata_document_supported'] = true;
+    const base = AUTH_CALLBACK_BASE_URL?.trim().replace(/\/$/, '');
+    metadata['registration_endpoint'] = base
+        ? `${base}/.well-known/clients-registrations/openid-connect`
+        : '/.well-known/clients-registrations/openid-connect';
+    return metadata;
+}
+function setupAuthorizationServerMetadata(app) {
+    const handler = async (req, res) => {
+        const origin = req.headers.origin;
+        if (origin) {
+            res.setHeader('Access-Control-Allow-Origin', origin);
+            res.setHeader('Vary', 'Origin');
+        }
+        const upstream = await fetchUpstreamAuthServerMetadata();
+        // When no upstream auth server is configured (e.g. SIMPLE mode without Keycloak),
+        // return a minimal static metadata document instead of 502 so that clients that
+        // probe /.well-known/openid-configuration for DCR support still receive a valid
+        // 200 response with the local registration_endpoint.
+        res.json(buildAuthorizationServerMetadata(upstream ?? {}));
+    };
+    const optionsHandler = (req, res) => {
+        const origin = req.headers.origin;
+        if (origin) {
+            res.setHeader('Access-Control-Allow-Origin', origin);
+            res.setHeader('Vary', 'Origin');
+        }
+        res.setHeader('Access-Control-Allow-Methods', 'GET, OPTIONS');
+        res.setHeader('Access-Control-Allow-Headers', 'Content-Type, Authorization, MCP-Protocol-Version');
+        res.setHeader('Access-Control-Max-Age', '86400');
+        res.status(204).end();
+    };
+    app.get('/.well-known/oauth-authorization-server', handler);
+    app.options('/.well-known/oauth-authorization-server', optionsHandler);
+    app.get('/.well-known/openid-configuration', handler);
+    app.options('/.well-known/openid-configuration', optionsHandler);
+}
+//# sourceMappingURL=http-well-known.js.map

package/dist/http/http-well-known.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-well-known.js","sourceRoot":"","sources":["../../src/http/http-well-known.ts"],"names":[],"mappings":"AAmBA,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,qBAAqB,EACrB,cAAc,EACd,sBAAsB,EACtB,qBAAqB,EACtB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,4BAA4B,EAAE,MAAM,qCAAqC,CAAC;AAEnF,MAAM,UAAU,8BAA8B;IAC5C,MAAM,IAAI,GAAG,sBAAsB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,GAAG,IAAI,MAAM,CAAC;IAC/B,MAAM,MAAM,GAAG,YAAY;QACzB,CAAC,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,cAAc,EAAE;QAC/D,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,QAAQ,GAA4B;QACxC,QAAQ;QACR,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;QAC7C,gBAAgB,EAAE,qBAAqB;QACvC,wBAAwB,EAAE,CAAC,QAAQ,CAAC;QACpC,aAAa,EAAE,gBAAgB;KAChC,CAAC;IACF,IAAI,MAAM,EAAE,CAAC;QACX,QAAQ,CAAC,wBAAwB,CAAC,GAAG,GAAG,MAAM,+BAA+B,CAAC;QAC9E,QAAQ,CAAC,gBAAgB,CAAC,GAAG,GAAG,MAAM,gCAAgC,CAAC;IACzE,CAAC;IACD,QAAQ,CAAC,kCAAkC,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACnE,IAAI,sBAAsB,EAAE,CAAC;QAC3B,4EAA4E;QAC5E,2DAA2D;QAC3D,QAAQ,CAAC,sBAAsB,CAAC,GAAG,sBAAsB,CAAC;QAC1D,QAAQ,CAAC,0BAA0B,CAAC,GAAG,sBAAsB,CAAC;IAChE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC5B,gBAAgB,CAAC,IAAI,CACnB,6KAA6K,CAC9K,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC9C,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,IAAI,MAAM,EAAE,CAAC;YACX,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;YACrD,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAClC,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACrD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,IAAI,MAAM,EAAE,CAAC;YACX,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;YACrD,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAClC,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;QAC9D,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,mDAAmD,CAAC,CAAC;QACnG,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC;QACjD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACxB,CAAC,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,uCAAuC,EAAE,OAAO,CAAC,CAAC;IAC1D,GAAG,CAAC,GAAG,CAAC,2CAA2C,EAAE,OAAO,CAAC,CAAC;IAC9D,GAAG,CAAC,OAAO,CAAC,uCAAuC,EAAE,cAAc,CAAC,CAAC;IACrE,GAAG,CAAC,OAAO,CAAC,2CAA2C,EAAE,cAAc,CAAC,CAAC;IAEzE,4BAA4B,CAAC,GAAG,CAAC,CAAC;IAElC,gCAAgC,CAAC,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,8EAA8E;AAC9E,iDAAiD;AACjD,8EAA8E;AAE9E,gEAAgE;AAChE,IAAI,uBAAuB,GAAgE,IAAI,CAAC;AAChG,MAAM,8BAA8B,GAAG,GAAG,CAAC,CAAC,QAAQ;AAEpD;;;GAGG;AACH,SAAS,iBAAiB;IACxB,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,IAAI,qBAAqB,IAAI,QAAQ,EAAE,CAAC;QACtC,OAAO,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,2BAA2B,CAAI,KAAQ;IAC9C,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvF,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,CAAC;YAC3D,OAAO,GAAG,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAO,CAAC;QAC3D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAM,CAAC;IACvE,CAAC;IAED,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC,CAClF,CAAC;IACT,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,+BAA+B;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,uBAAuB,IAAI,GAAG,GAAG,uBAAuB,CAAC,SAAS,EAAE,CAAC;QACvE,OAAO,uBAAuB,CAAC,IAAI,CAAC;IACtC,CAAC;IAED,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;IACjC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,MAAM,GAAG,GAAG,GAAG,IAAI,WAAW,cAAc,mCAAmC,CAAC;IAChF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;YACvC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,gBAAgB,CAAC,IAAI,CAAC,mDAAmD,GAAG,CAAC,MAAM,QAAQ,GAAG,EAAE,CAAC,CAAC;YAClG,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC3D,uBAAuB,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,GAAG,8BAA8B,GAAG,IAAI,EAAE,CAAC;QAC3F,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,gBAAgB,CAAC,IAAI,CACnB,+DAA+D,GAAG,QAAQ,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC7H,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,QAAiC;IAChF,MAAM,QAAQ,GAAG,2BAA2B,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;IAE9D,yFAAyF;IACzF,mEAAmE;IACnE,6EAA6E;IAC7E,2FAA2F;IAE3F,QAAQ,CAAC,uCAAuC,CAAC,GAAG,IAAI,CAAC;IACzD,MAAM,IAAI,GAAG,sBAAsB,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC/D,QAAQ,CAAC,uBAAuB,CAAC,GAAG,IAAI;QACtC,CAAC,CAAC,GAAG,IAAI,mDAAmD;QAC5D,CAAC,CAAC,mDAAmD,CAAC;IAExD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,gCAAgC,CAAC,GAAY;IACpD,MAAM,OAAO,GAAG,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACpD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,IAAI,MAAM,EAAE,CAAC;YACX,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;YACrD,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,+BAA+B,EAAE,CAAC;QACzD,kFAAkF;QAClF,gFAAgF;QAChF,gFAAgF;QAChF,qDAAqD;QACrD,GAAG,CAAC,IAAI,CAAC,gCAAgC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACrD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,IAAI,MAAM,EAAE,CAAC;YACX,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;YACrD,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAClC,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;QAC9D,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,mDAAmD,CAAC,CAAC;QACnG,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC;QACjD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACxB,CAAC,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,yCAAyC,EAAE,OAAO,CAAC,CAAC;IAC5D,GAAG,CAAC,OAAO,CAAC,yCAAyC,EAAE,cAAc,CAAC,CAAC;IAEvE,GAAG,CAAC,GAAG,CAAC,mCAAmC,EAAE,OAAO,CAAC,CAAC;IACtD,GAAG,CAAC,OAAO,CAAC,mCAAmC,EAAE,cAAc,CAAC,CAAC;AACnE,CAAC"}

package/dist/http/http-www-authenticate.d.ts

@@ -0,0 +1,11 @@
+import type { Response } from 'express';
+/** Build WWW-Authenticate value. Use error=invalid_token so MCP clients clear stored token and restart OAuth (e.g. after Keycloak session cleanup). */
+export declare function buildWwwAuthenticate(opts?: {
+    error?: 'invalid_token';
+    error_description?: string;
+}): string;
+export declare function setWwwAuthenticate(res: Response, opts?: {
+    error?: 'invalid_token';
+    error_description?: string;
+}): void;
+//# sourceMappingURL=http-www-authenticate.d.ts.map

package/dist/http/http-www-authenticate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-www-authenticate.d.ts","sourceRoot":"","sources":["../../src/http/http-www-authenticate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAgBxC,uJAAuJ;AACvJ,wBAAgB,oBAAoB,CAAC,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,eAAe,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAwB3G;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,eAAe,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAGtH"}

package/dist/http/http-www-authenticate.js

@@ -0,0 +1,42 @@
+import { AUTH_CALLBACK_BASE_URL, OIDC_SCOPES_SUPPORTED, KEYCLOAK_URL, KEYCLOAK_REALM } from '../config.js';
+/** Escape RFC 7230 quoted-string content for WWW-Authenticate (backslashes and DQUOTE). */
+function escapeWwwAuthenticateQuotedValue(value) {
+    return String(value)
+        .replace(/\\/g, '\\\\')
+        .replace(/"/g, '\\"')
+        .replace(/[\r\n\x00]/g, ' ');
+}
+/** Build WWW-Authenticate value. Use error=invalid_token so MCP clients clear stored token and restart OAuth (e.g. after Keycloak session cleanup). */
+export function buildWwwAuthenticate(opts) {
+    if (!AUTH_CALLBACK_BASE_URL)
+        return '';
+    const base = AUTH_CALLBACK_BASE_URL.replace(/\/$/, '');
+    const resourceMetadataUrl = `${base}/.well-known/oauth-protected-resource`;
+    const keycloakBase = KEYCLOAK_URL ? KEYCLOAK_URL.replace(/\/$/, '') : '';
+    const authorizationServerMetadataUrl = keycloakBase
+        ? `${keycloakBase}/realms/${KEYCLOAK_REALM}/.well-known/openid-configuration`
+        : '';
+    const scopeValue = (OIDC_SCOPES_SUPPORTED || []).join(' ').trim();
+    const parts = [
+        `Bearer realm="mcp"`,
+        `resource_metadata="${resourceMetadataUrl}"`
+    ];
+    if (authorizationServerMetadataUrl) {
+        parts.push(`authorization_uri="${authorizationServerMetadataUrl}"`);
+    }
+    if (scopeValue)
+        parts.push(`scope="${escapeWwwAuthenticateQuotedValue(scopeValue)}"`);
+    if (opts?.error) {
+        parts.push(`error="${opts.error}"`);
+        if (opts.error_description) {
+            parts.push(`error_description="${escapeWwwAuthenticateQuotedValue(opts.error_description)}"`);
+        }
+    }
+    return parts.join(', ');
+}
+export function setWwwAuthenticate(res, opts) {
+    const value = buildWwwAuthenticate(opts);
+    if (value)
+        res.setHeader('WWW-Authenticate', value);
+}
+//# sourceMappingURL=http-www-authenticate.js.map

package/dist/http/http-www-authenticate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-www-authenticate.js","sourceRoot":"","sources":["../../src/http/http-www-authenticate.ts"],"names":[],"mappings":"AACA,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,YAAY,EACZ,cAAc,EACf,MAAM,cAAc,CAAC;AAEtB,2FAA2F;AAC3F,SAAS,gCAAgC,CAAC,KAAa;IACrD,OAAO,MAAM,CAAC,KAAK,CAAC;SACjB,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,uJAAuJ;AACvJ,MAAM,UAAU,oBAAoB,CAAC,IAA8D;IACjG,IAAI,CAAC,sBAAsB;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,sBAAsB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvD,MAAM,mBAAmB,GAAG,GAAG,IAAI,uCAAuC,CAAC;IAC3E,MAAM,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,MAAM,8BAA8B,GAAG,YAAY;QACjD,CAAC,CAAC,GAAG,YAAY,WAAW,cAAc,mCAAmC;QAC7E,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,UAAU,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAClE,MAAM,KAAK,GAAG;QACZ,oBAAoB;QACpB,sBAAsB,mBAAmB,GAAG;KAC7C,CAAC;IACF,IAAI,8BAA8B,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,sBAAsB,8BAA8B,GAAG,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,gCAAgC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACtF,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,sBAAsB,gCAAgC,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAa,EAAE,IAA8D;IAC9G,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,KAAK;QAAE,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;AACtD,CAAC"}

package/dist/http/mcp-audit-emit.d.ts

@@ -0,0 +1,30 @@
+/**
+ * MCP audit event emission.
+ *
+ * Isolated from http-mcp-handler.ts to keep that file under the max-lines lint
+ * limit. Called from the MCP HTTP handler after tool execution completes.
+ */
+import { AUDIT_LOG_LEVEL } from '../config.js';
+import type { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+export { AUDIT_LOG_LEVEL };
+/**
+ * Capture JSON-RPC response for audit level 3.
+ *
+ * The MCP SDK's StreamableHTTPServerTransport sends responses via transport.send(),
+ * NOT through Express res.json()/res.end(). We intercept at the transport level.
+ */
+export declare function installResponseCapture(transport: StreamableHTTPServerTransport): {
+    getResponse: () => unknown;
+};
+/** Generate a correlation ID for grouping related MCP requests. */
+export declare function generateCorrelationId(): string;
+/** Emit mcp_request_start audit event (before space context, tenant_id unknown). */
+export declare function emitRequestStart(correlationId: string, requestId: string, method: string, toolName: string): void;
+/** Emit mcp_request_end audit event (in response finish handler). */
+export declare function emitRequestEnd(correlationId: string, requestId: string, toolName: string, durationMs: number): void;
+/**
+ * Emit mcp_tool_call audit event.
+ * Called from the response finish handler with pre-captured tenantId.
+ */
+export declare function emitToolCallAudit(correlationId: string, requestId: string, toolName: string, requestStart: number, capturedResponse: unknown, requestArgs: unknown, tenantId: string): void;
+//# sourceMappingURL=mcp-audit-emit.d.ts.map

package/dist/http/mcp-audit-emit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-audit-emit.d.ts","sourceRoot":"","sources":["../../src/http/mcp-audit-emit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAG/C,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAGxG,OAAO,EAAE,eAAe,EAAE,CAAC;AAE3B;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,6BAA6B,GAAG;IAAE,WAAW,EAAE,MAAM,OAAO,CAAA;CAAE,CAa/G;AAED,mEAAmE;AACnE,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,oFAAoF;AACpF,wBAAgB,gBAAgB,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAYjH;AAED,qEAAqE;AACrE,wBAAgB,cAAc,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAanH;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,gBAAgB,EAAE,OAAO,EACzB,WAAW,EAAE,OAAO,EACpB,QAAQ,EAAE,MAAM,GACf,IAAI,CA8BN"}

package/dist/http/mcp-audit-emit.js

@@ -0,0 +1,98 @@
+/**
+ * MCP audit event emission.
+ *
+ * Isolated from http-mcp-handler.ts to keep that file under the max-lines lint
+ * limit. Called from the MCP HTTP handler after tool execution completes.
+ */
+import { randomUUID } from 'node:crypto';
+import { writeAuditLine } from '../utils/structured-logger.js';
+import { AUDIT_LOG_LEVEL } from '../config.js';
+import { getBuildVersion } from '../utils/build-version.js';
+import { summarizeRequestArgs, summarizeResponse, extractErrorCode } from '../utils/audit-mcp-summary.js';
+export { AUDIT_LOG_LEVEL };
+/**
+ * Capture JSON-RPC response for audit level 3.
+ *
+ * The MCP SDK's StreamableHTTPServerTransport sends responses via transport.send(),
+ * NOT through Express res.json()/res.end(). We intercept at the transport level.
+ */
+export function installResponseCapture(transport) {
+    let captured = null;
+    const originalSend = transport.send.bind(transport);
+    transport.send = async function (message, options) {
+        // Capture JSON-RPC responses (have 'result' or 'error' and an 'id')
+        if (message && typeof message === 'object' && ('result' in message || 'error' in message)) {
+            captured = message;
+        }
+        return originalSend(message, options);
+    };
+    return { getResponse: () => captured };
+}
+/** Generate a correlation ID for grouping related MCP requests. */
+export function generateCorrelationId() {
+    return `corr-${Date.now()}-${randomUUID().slice(0, 8)}`;
+}
+/** Emit mcp_request_start audit event (before space context, tenant_id unknown). */
+export function emitRequestStart(correlationId, requestId, method, toolName) {
+    if (AUDIT_LOG_LEVEL <= 0)
+        return;
+    writeAuditLine('info', {
+        category: 'audit.mcp',
+        event: 'mcp_request_start',
+        correlation_id: correlationId,
+        tenant_id: 'unknown',
+        request_id: requestId,
+        mcp_method: method,
+        tool_name: toolName,
+        server_version: getBuildVersion()
+    });
+}
+/** Emit mcp_request_end audit event (in response finish handler). */
+export function emitRequestEnd(correlationId, requestId, toolName, durationMs) {
+    if (AUDIT_LOG_LEVEL <= 0)
+        return;
+    writeAuditLine('info', {
+        category: 'audit.mcp',
+        event: 'mcp_request_end',
+        correlation_id: correlationId,
+        tenant_id: 'unknown',
+        request_id: requestId,
+        tool_name: toolName,
+        tool_count: 1,
+        duration_ms: durationMs,
+        server_version: getBuildVersion()
+    });
+}
+/**
+ * Emit mcp_tool_call audit event.
+ * Called from the response finish handler with pre-captured tenantId.
+ */
+export function emitToolCallAudit(correlationId, requestId, toolName, requestStart, capturedResponse, requestArgs, tenantId) {
+    if (AUDIT_LOG_LEVEL <= 0)
+        return;
+    const durationMs = Date.now() - requestStart;
+    const isError = capturedResponse !== null &&
+        typeof capturedResponse === 'object' &&
+        'error' in capturedResponse;
+    const auditBindings = {
+        category: 'audit.mcp',
+        event: 'mcp_tool_call',
+        stage: 'response',
+        correlation_id: correlationId,
+        tenant_id: tenantId,
+        request_id: requestId,
+        tool_name: toolName,
+        status: isError ? 'error' : 'success',
+        duration_ms: durationMs,
+        error_code: isError ? extractErrorCode(capturedResponse) : undefined
+    };
+    if (AUDIT_LOG_LEVEL >= 2) {
+        auditBindings['request'] = summarizeRequestArgs(toolName, requestArgs);
+    }
+    if (AUDIT_LOG_LEVEL >= 3 && capturedResponse) {
+        const rpcResult = capturedResponse;
+        auditBindings['response'] = summarizeResponse(toolName, rpcResult['result'] ?? rpcResult['error']);
+    }
+    writeAuditLine('info', auditBindings);
+}
+//# sourceMappingURL=mcp-audit-emit.js.map

package/dist/http/mcp-audit-emit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-audit-emit.js","sourceRoot":"","sources":["../../src/http/mcp-audit-emit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAI1G,OAAO,EAAE,eAAe,EAAE,CAAC;AAE3B;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAAwC;IAC7E,IAAI,QAAQ,GAAY,IAAI,CAAC;IAC7B,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEpD,SAAS,CAAC,IAAI,GAAG,KAAK,WAAW,OAAuB,EAAE,OAA4C;QACpG,oEAAoE;QACpE,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,QAAQ,IAAI,OAAO,IAAI,OAAO,IAAI,OAAO,CAAC,EAAE,CAAC;YAC1F,QAAQ,GAAG,OAAO,CAAC;QACrB,CAAC;QACD,OAAO,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC,CAAC;IAEF,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;AACzC,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,qBAAqB;IACnC,OAAO,QAAQ,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,gBAAgB,CAAC,aAAqB,EAAE,SAAiB,EAAE,MAAc,EAAE,QAAgB;IACzG,IAAI,eAAe,IAAI,CAAC;QAAE,OAAO;IACjC,cAAc,CAAC,MAAM,EAAE;QACrB,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,mBAAmB;QAC1B,cAAc,EAAE,aAAa;QAC7B,SAAS,EAAE,SAAS;QACpB,UAAU,EAAE,SAAS;QACrB,UAAU,EAAE,MAAM;QAClB,SAAS,EAAE,QAAQ;QACnB,cAAc,EAAE,eAAe,EAAE;KAClC,CAAC,CAAC;AACL,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,cAAc,CAAC,aAAqB,EAAE,SAAiB,EAAE,QAAgB,EAAE,UAAkB;IAC3G,IAAI,eAAe,IAAI,CAAC;QAAE,OAAO;IACjC,cAAc,CAAC,MAAM,EAAE;QACrB,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,iBAAiB;QACxB,cAAc,EAAE,aAAa;QAC7B,SAAS,EAAE,SAAS;QACpB,UAAU,EAAE,SAAS;QACrB,SAAS,EAAE,QAAQ;QACnB,UAAU,EAAE,CAAC;QACb,WAAW,EAAE,UAAU;QACvB,cAAc,EAAE,eAAe,EAAE;KAClC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,aAAqB,EACrB,SAAiB,EACjB,QAAgB,EAChB,YAAoB,EACpB,gBAAyB,EACzB,WAAoB,EACpB,QAAgB;IAEhB,IAAI,eAAe,IAAI,CAAC;QAAE,OAAO;IAEjC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC;IAC7C,MAAM,OAAO,GAAG,gBAAgB,KAAK,IAAI;QACvC,OAAO,gBAAgB,KAAK,QAAQ;QACpC,OAAO,IAAK,gBAA4C,CAAC;IAE3D,MAAM,aAAa,GAA4B;QAC7C,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,eAAe;QACtB,KAAK,EAAE,UAAU;QACjB,cAAc,EAAE,aAAa;QAC7B,SAAS,EAAE,QAAQ;QACnB,UAAU,EAAE,SAAS;QACrB,SAAS,EAAE,QAAQ;QACnB,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QACrC,WAAW,EAAE,UAAU;QACvB,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS;KACrE,CAAC;IAEF,IAAI,eAAe,IAAI,CAAC,EAAE,CAAC;QACzB,aAAa,CAAC,SAAS,CAAC,GAAG,oBAAoB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,eAAe,IAAI,CAAC,IAAI,gBAAgB,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,gBAA2C,CAAC;QAC9D,aAAa,CAAC,UAAU,CAAC,GAAG,iBAAiB,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACrG,CAAC;IAED,cAAc,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;AACxC,CAAC"}

package/dist/http/mcp-ui-offerings-auth-jsonrpc.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Implementation-defined JSON-RPC error code for authentication-required responses.
+ * Range -32000 to -32099 is reserved for implementation-defined server errors per JSON-RPC 2.0 spec.
+ */
+export declare const JSONRPC_ERR_AUTH_REQUIRED = -32001;
+/** Build a JSON-RPC 2.0 error envelope for unauthenticated requests to /mcp. */
+export declare function buildJsonRpcAuthError(id: unknown, message: string, loginUrl: string | undefined): Record<string, unknown>;
+/** JSON-RPC body for `listOfferingsForUI` when auth is required (machine-actionable remediation). */
+export declare function buildListOfferingsUnauthorizedJsonRpc(id: unknown): Record<string, unknown>;
+//# sourceMappingURL=mcp-ui-offerings-auth-jsonrpc.d.ts.map

package/dist/http/mcp-ui-offerings-auth-jsonrpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-ui-offerings-auth-jsonrpc.d.ts","sourceRoot":"","sources":["../../src/http/mcp-ui-offerings-auth-jsonrpc.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,eAAO,MAAM,yBAAyB,SAAS,CAAC;AAEhD,gFAAgF;AAChF,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,OAAO,EACX,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAczB;AAED,qGAAqG;AACrG,wBAAgB,qCAAqC,CAAC,EAAE,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAG1F"}

package/dist/http/mcp-ui-offerings-auth-jsonrpc.js

@@ -0,0 +1,28 @@
+import { safeCreateOidcLoginUrlForApiResponse } from './http-auth-oidc-redirect.js';
+/**
+ * Implementation-defined JSON-RPC error code for authentication-required responses.
+ * Range -32000 to -32099 is reserved for implementation-defined server errors per JSON-RPC 2.0 spec.
+ */
+export const JSONRPC_ERR_AUTH_REQUIRED = -32001;
+/** Build a JSON-RPC 2.0 error envelope for unauthenticated requests to /mcp. */
+export function buildJsonRpcAuthError(id, message, loginUrl) {
+    return {
+        jsonrpc: '2.0',
+        error: {
+            code: JSONRPC_ERR_AUTH_REQUIRED,
+            message,
+            data: {
+                error: 'unauthorized',
+                reauth_required: true,
+                ...(loginUrl ? { login_url: loginUrl } : {})
+            }
+        },
+        id: id ?? null
+    };
+}
+/** JSON-RPC body for `listOfferingsForUI` when auth is required (machine-actionable remediation). */
+export function buildListOfferingsUnauthorizedJsonRpc(id) {
+    const loginUrl = safeCreateOidcLoginUrlForApiResponse();
+    return buildJsonRpcAuthError(id, 'Authentication required for UI offerings', loginUrl ?? undefined);
+}
+//# sourceMappingURL=mcp-ui-offerings-auth-jsonrpc.js.map

package/dist/http/mcp-ui-offerings-auth-jsonrpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-ui-offerings-auth-jsonrpc.js","sourceRoot":"","sources":["../../src/http/mcp-ui-offerings-auth-jsonrpc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oCAAoC,EAAE,MAAM,8BAA8B,CAAC;AAEpF;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,KAAK,CAAC;AAEhD,gFAAgF;AAChF,MAAM,UAAU,qBAAqB,CACnC,EAAW,EACX,OAAe,EACf,QAA4B;IAE5B,OAAO;QACL,OAAO,EAAE,KAAK;QACd,KAAK,EAAE;YACL,IAAI,EAAE,yBAAyB;YAC/B,OAAO;YACP,IAAI,EAAE;gBACJ,KAAK,EAAE,cAAc;gBACrB,eAAe,EAAE,IAAI;gBACrB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7C;SACF;QACD,EAAE,EAAE,EAAE,IAAI,IAAI;KACf,CAAC;AACJ,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,qCAAqC,CAAC,EAAW;IAC/D,MAAM,QAAQ,GAAG,oCAAoC,EAAE,CAAC;IACxD,OAAO,qBAAqB,CAAC,EAAE,EAAE,0CAA0C,EAAE,QAAQ,IAAI,SAAS,CAAC,CAAC;AACtG,CAAC"}

package/dist/http/oidc-profile-claims.d.ts

@@ -0,0 +1,77 @@
+export type AccountKind = "local" | "sso";
+export interface WhitelistedProfileFields {
+    preferred_username?: string;
+    name?: string;
+    given_name?: string;
+    family_name?: string;
+    email?: string;
+    email_verified?: boolean;
+    identity_provider?: string;
+}
+export interface AccountLabels {
+    account_kind: AccountKind;
+    account_label: string;
+}
+export interface MergedCallbackClaims {
+    sub: string;
+    groups: string[];
+    /** Raw token issuer used for deterministic space-id derivation. */
+    iss: string;
+    realm: string;
+    preferred_username?: string;
+    name?: string;
+    given_name?: string;
+    family_name?: string;
+    email?: string;
+    email_verified?: boolean;
+    identity_provider?: string;
+    account_kind: AccountKind;
+    account_label: string;
+}
+/** Decode JWT payload object from compact serialization (same pattern as auth callback; not a signature verify). */
+export declare function decodeJwtPayloadSegment(jwt: string): Record<string, unknown> | null;
+/** Extract realm segment from issuer URL (e.g. …/realms/kairos-dev → kairos-dev). */
+export declare function realmFromIssuer(iss: string): string;
+/**
+ * Normalize Keycloak / OIDC `groups` into string paths. Handles array, single path string,
+ * or JSON array string (some gateways serialize oddly).
+ */
+export declare function extractGroupsFromPayload(payload: Record<string, unknown>): string[];
+/**
+ * Keep only token groups that match an allowlist entry:
+ * - **Exact:** plain name or path (`kairos-auditor`, `/kairos-auditor`) — slash optional on either side.
+ * - **Prefix:** entry ends with `/` (e.g. `/kairos-shares/`) — keep any JWT group whose path form starts with that prefix (after normalizing a leading slash on the entry).
+ * - **Default (no filter):** empty allowlist keeps **all** JWT groups (same membership the IdP issued).
+ *   Set a non-empty allowlist to restrict which paths become KAIROS spaces.
+ * Keycloak's Group Membership mapper lists every group the user belongs to; use this on KAIROS
+ * to restrict which entries become session/API groups when you configure an allowlist.
+ */
+export declare function applyOidcGroupsAllowlist(groups: string[], allowlist: readonly string[]): string[];
+/**
+ * Whitelisted profile-style claims from a single verified (or callback-trusted) payload.
+ */
+export declare function extractWhitelistedProfileFromPayload(payload: Record<string, unknown>): WhitelistedProfileFields;
+export declare function deriveAccountKindAndLabel(identityProvider: string | undefined): AccountLabels;
+/**
+ * Merge id_token and access_token payloads after login:
+ * — sub from id token when present; otherwise access. If both subs exist and differ, fail.
+ * — groups prefer access token; fallback to id.
+ * — iss from id token when present; otherwise access; fallback to synthetic realm issuer.
+ * — realm from id token iss, else access iss, else fallbackRealm.
+ * — profile / email claims prefer id token; if id absent, fall back to access for CLI-style flows.
+ */
+export declare function mergeCallbackTokenPayloads(input: {
+    idPayload: Record<string, unknown> | null;
+    accessPayload: Record<string, unknown> | null;
+    fallbackRealm: string;
+}): {
+    ok: true;
+    merged: MergedCallbackClaims;
+} | {
+    ok: false;
+    error: string;
+};
+export type AuthProfileEnrichment = Pick<MergedCallbackClaims, "preferred_username" | "name" | "given_name" | "family_name" | "email" | "email_verified" | "identity_provider" | "account_kind" | "account_label">;
+/** Attach profile + account labels to auth after Bearer verify (single token payload). */
+export declare function enrichAuthPayloadFromVerifiedJwt(payload: Record<string, unknown>): AuthProfileEnrichment;
+//# sourceMappingURL=oidc-profile-claims.d.ts.map