@stackwright-pro/mcp 0.2.0-alpha.72 → 0.2.0-alpha.77

package/dist/server.mjs

@@ -3036,6 +3036,9 @@ var PHASE_ARTIFACT_SCHEMA = {
           reason: "AsyncAPI spec \u2014 WebSocket/event integration required (no REST endpoints)"
         }
       ],
+      warnings: [
+        "Spec contains external $ref URLs \u2014 recommend bundle: true in stackwright.yml integration config"
+      ],
       auth: { type: "bearer", header: "Authorization", envVar: "API_TOKEN" },
       baseUrl: "https://api.example.mil/v2",
       specPath: "./specs/api.yaml"
@@ -3907,6 +3910,19 @@ function routesToYaml(routes, defaultRole, indent) {
   return routes.map((r) => `${indent}- pattern: ${r}
 ${indent}  requiredRole: ${defaultRole}`).join("\n");
 }
+function detectNextMajorVersion(cwd) {
+  try {
+    const pkgPath = join6(cwd, "package.json");
+    if (!existsSync7(pkgPath)) return null;
+    const pkg = JSON.parse(readFileSync6(pkgPath, "utf8"));
+    const nextVersion = pkg.dependencies?.next ?? pkg.devDependencies?.next;
+    if (!nextVersion) return null;
+    const match = nextVersion.match(/(\d+)/);
+    return match ? parseInt(match[1], 10) : null;
+  } catch {
+    return null;
+  }
+}
 function upsertAuthBlock(existing, authYaml) {
   const lines = existing.split("\n");
   let authStart = -1;
@@ -3949,7 +3965,7 @@ function generateMiddlewareContent(method, params, roles, defaultRole, hierarchy
 // \u26A0\uFE0F  SECURITY REVIEW REQUIRED \u2014 CAC/PKI certificate validation
 // DoD security officer review required before production deployment.
 // Verify: CA bundle completeness, EDIPI lookup endpoint, OCSP accessibility.
-import { createProMiddleware } from '@stackwright-pro/auth-nextjs';
+import { createProMiddleware } from '@stackwright-pro/auth-nextjs/edge';
 
 export const middleware = createProMiddleware({
   method: 'cac',
@@ -3971,7 +3987,7 @@ ${configBlock}
     const scopes2 = params.oidcScopes ?? "openid profile email";
     const roleClaim = params.oidcRoleClaim ?? "roles";
     return `// middleware.ts \u2014 generated by @stackwright-pro/auth-nextjs
-import { createProMiddleware } from '@stackwright-pro/auth-nextjs';
+import { createProMiddleware } from '@stackwright-pro/auth-nextjs/edge';
 
 export const middleware = createProMiddleware({
   method: 'oidc',
@@ -3992,7 +4008,7 @@ ${configBlock}
   }
   const scopes = params.oauth2Scopes ?? "read write";
   return `// middleware.ts \u2014 generated by @stackwright-pro/auth-nextjs
-import { createProMiddleware } from '@stackwright-pro/auth-nextjs';
+import { createProMiddleware } from '@stackwright-pro/auth-nextjs/edge';
 
 export const middleware = createProMiddleware({
   method: 'oauth2',
@@ -4034,9 +4050,9 @@ function generateProxyContent(method, params, roles, defaultRole, hierarchy, aud
 //   SECURITY REVIEW REQUIRED \u2014 CAC/PKI certificate validation
 // DoD security officer review required before production deployment.
 // Verify: CA bundle completeness, EDIPI lookup endpoint, OCSP accessibility.
-import { createAuthProxy } from '@stackwright-pro/auth-nextjs';
+import { createProProxy } from '@stackwright-pro/auth-nextjs/edge';
 
-export const proxy = createAuthProxy({
+export const proxy = createProProxy({
   method: 'cac',
   cac: {
     caBundle: process.env.CAC_CA_BUNDLE ?? '${caBundle}',
@@ -4056,9 +4072,9 @@ ${configBlock}
     const scopes2 = params.oidcScopes ?? "openid profile email";
     const roleClaim = params.oidcRoleClaim ?? "roles";
     return `// proxy.ts \u2014 generated by @stackwright-pro/auth (Next.js >=16)
-import { createAuthProxy } from '@stackwright-pro/auth-nextjs';
+import { createProProxy } from '@stackwright-pro/auth-nextjs/edge';
 
-export const proxy = createAuthProxy({
+export const proxy = createProProxy({
   method: 'oidc',
   oidc: {
     discoveryUrl: process.env.OIDC_DISCOVERY_URL!,
@@ -4077,9 +4093,9 @@ ${configBlock}
   }
   const scopes = params.oauth2Scopes ?? "read write";
   return `// proxy.ts \u2014 generated by @stackwright-pro/auth (Next.js >=16)
-import { createAuthProxy } from '@stackwright-pro/auth-nextjs';
+import { createProProxy } from '@stackwright-pro/auth-nextjs/edge';
 
-export const proxy = createAuthProxy({
+export const proxy = createProProxy({
   method: 'oauth2',
   oauth2: {
     authorizationUrl: process.env.OAUTH2_AUTH_URL!,
@@ -4209,7 +4225,7 @@ function generateDevOnlyMiddlewareContent(method, params, roles, defaultRole, hi
     "// middleware.ts \u2014 generated by @stackwright-pro/auth-nextjs (dev-only mock)",
     "//   DEV ONLY \u2014 uses mock authentication from lib/mock-auth.ts",
     "// Do NOT deploy to production.",
-    "import { createProMiddleware } from '@stackwright-pro/auth-nextjs';",
+    "import { createProMiddleware } from '@stackwright-pro/auth-nextjs/edge';",
     "import { mockAuthProvider } from './lib/mock-auth';"
   ].join("\n");
   if (method === "cac") {
@@ -4298,7 +4314,7 @@ function generateDevOnlyProxyContent(method, params, roles, defaultRole, hierarc
     "// proxy.ts -- generated by @stackwright-pro/auth (Next.js >=16, dev-only mock)",
     "//   DEV ONLY -- uses mock authentication from lib/mock-auth.ts",
     "// Do NOT deploy to production.",
-    "import { createAuthProxy } from '@stackwright-pro/auth-nextjs';",
+    "import { createProProxy } from '@stackwright-pro/auth-nextjs/edge';",
     "import { mockAuthProvider } from './lib/mock-auth';"
   ].join("\n");
   if (method === "cac") {
@@ -4308,7 +4324,7 @@ function generateDevOnlyProxyContent(method, params, roles, defaultRole, hierarc
     const certHeader = params.cacCertHeader ?? "X-SSL-Client-Cert";
     return `${devHeader}
 
-export const proxy = createAuthProxy({
+export const proxy = createProProxy({
   method: 'cac',
   cac: {
     caBundle: '${caBundle}',
@@ -4330,7 +4346,7 @@ ${configBlock}
     const roleClaim = params.oidcRoleClaim ?? "roles";
     return `${devHeader}
 
-export const proxy = createAuthProxy({
+export const proxy = createProProxy({
   method: 'oidc',
   oidc: {
     discoveryUrl: 'https://dev-mock-oidc/.well-known/openid-configuration',
@@ -4351,7 +4367,7 @@ ${configBlock}
   const scopes = params.oauth2Scopes ?? "read write";
   return `${devHeader}
 
-export const proxy = createAuthProxy({
+export const proxy = createProProxy({
   method: 'oauth2',
   oauth2: {
     authorizationUrl: 'https://dev-mock-oauth2/authorize',
@@ -4514,7 +4530,8 @@ async function configureAuthHandler(params, cwd) {
   const roles = rbacRoles;
   const defaultRole = params.rbacDefaultRole ?? roles[roles.length - 1];
   const hierarchy = buildHierarchy(roles);
-  const useProxy = (params.nextMajorVersion ?? 0) >= 16;
+  const detectedVersion = params.nextMajorVersion ?? detectNextMajorVersion(cwd);
+  const useProxy = (detectedVersion ?? 0) >= 16;
   const conventionFile = useProxy ? "proxy.ts" : "middleware.ts";
   if (method === "none") {
     return {
@@ -4790,11 +4807,11 @@ import { join as join7, basename } from "path";
 var _checksums = /* @__PURE__ */ new Map([
   [
     "stackwright-pro-api-otter.json",
-    "c21f127b9bed477b1d7b66949926e00e1b93de081e792293ebfffc88b70d9424"
+    "1b9fea59a3e5b1e1015229a4e8d1231b6b87e1d12f23a81ecbbd79fe8657a2e0"
   ],
   [
     "stackwright-pro-auth-otter.json",
-    "6d4d4d50f52be84a796c2a43ed997f00b41b42ed8c5f046e1defb2e423933588"
+    "f91f82468da9c273fbe6481a3a40957d4c7aa3fa72528c492b6ac5d8e06a563a"
   ],
   [
     "stackwright-pro-dashboard-otter.json",
@@ -4802,7 +4819,7 @@ var _checksums = /* @__PURE__ */ new Map([
   ],
   [
     "stackwright-pro-data-otter.json",
-    "4d9369277685a4acc484116920c9622ad8a1838012a493fcfe42a6ae5abe53cf"
+    "f39061981caf0bd14e4eb83e74ac200450425536d14b8c00d60be94759a1ca9d"
   ],
   [
     "stackwright-pro-designer-otter.json",
@@ -4814,7 +4831,7 @@ var _checksums = /* @__PURE__ */ new Map([
   ],
   [
     "stackwright-pro-foreman-otter.json",
-    "e563a99d647fcf95401508f15f10e032fb14e826577bc6bcff5960bf2981d58d"
+    "4948b8189223e4ced81b632cca7d14b79fde85f204483ab8e847182692c4ee57"
   ],
   [
     "stackwright-pro-geo-otter.json",
@@ -4834,7 +4851,7 @@ var _checksums = /* @__PURE__ */ new Map([
   ],
   [
     "stackwright-pro-workflow-otter.json",
-    "e02c1a5f492dd6b11f68e293d92f5f661dbb22e57570dcf133a9d0ffc7a8be7d"
+    "40fc897c01aadc688159e1837c7e34d6cfae1f0be55a5bc8d36d540475c9ded0"
   ],
   [
     "stackwright-services-otter.json",
@@ -5995,7 +6012,7 @@ var package_default = {
     "test:coverage": "vitest run --coverage"
   },
   name: "@stackwright-pro/mcp",
-  version: "0.2.0-alpha.71",
+  version: "0.2.0-alpha.77",
   description: "MCP tools for Stackwright Pro - Data Explorer, Security, ISR, and Dashboard generation",
   license: "SEE LICENSE IN LICENSE",
   main: "./dist/server.js",