@stage-labs/metro 0.1.0-beta.20 → 0.1.0-beta.201

package/runtime/node_modules/@metro-labs/mcp/src/daemon/connector-verify.ts

@@ -1,333 +0,0 @@
-import { errMsg, log } from './log.js';
-import {
-  ConnectorNotMcp,
-  ConnectorUnauthorized,
-  refused,
-  safeIconSrc,
-} from './connector-url.js';
-import { toToolList, type ToolInfo } from './connector-tools.js';
-
-export {
-  ConnectorUnauthorized,
-  ConnectorVerifyError,
-  connectorUrlText,
-  parseConnectorUrl,
-} from './connector-url.js';
-
-export interface OAuthTokens {
-  accessToken: string;
-  refreshToken?: string;
-  expiresAt?: number;
-}
-
-export interface OAuthAuth extends OAuthTokens {
-  kind: 'oauth';
-  issuer: string;
-  tokenEndpoint: string;
-  clientId: string;
-  clientSecret?: string;
-}
-
-export type ConnectorAuth =
-  | { kind: 'none' }
-  | { kind: 'header'; name: string; value: string }
-  | OAuthAuth;
-
-export interface VerifiedServer {
-  server: string;
-  version: string;
-  protocol: string;
-  icon: string;
-  tools: number;
-  catalog: ToolInfo[];
-}
-
-export interface VerifiedRecord extends VerifiedServer {
-  at: string;
-}
-
-const PROTOCOL_VERSIONS = ['2025-11-25', '2025-06-18'] as const;
-const MAX_TOOL_PAGES = 10;
-
-function notMcp(url: URL): ConnectorNotMcp {
-  return new ConnectorNotMcp(
-    `${url.hostname} answered, but it does not speak MCP.`,
-    400,
-  );
-}
-const PROBE_TIMEOUT_MS = 10_000;
-const ACCEPT = 'application/json, text/event-stream';
-
-function isRecord(value: unknown): value is Record<string, unknown> {
-  return typeof value === 'object' && value !== null && !Array.isArray(value);
-}
-
-async function discard(res: Response): Promise<void> {
-  await res.body?.cancel().catch((err: unknown) => {
-    log.debug(
-      { err: errMsg(err) },
-      'connector-verify: could not discard a response body',
-    );
-  });
-}
-
-function authHeaders(auth: ConnectorAuth): Record<string, string> {
-  if (auth.kind === 'header') return { [auth.name]: auth.value };
-  if (auth.kind === 'oauth')
-    return { authorization: `Bearer ${auth.accessToken}` };
-  return {};
-}
-
-async function frame(
-  url: URL,
-  auth: ConnectorAuth,
-  extra: Record<string, string>,
-  body: unknown,
-  signal: AbortSignal,
-): Promise<Response> {
-  let res: Response;
-  try {
-    res = await fetch(url, {
-      method: 'POST',
-      redirect: 'manual',
-      signal,
-      headers: {
-        'content-type': 'application/json',
-        accept: ACCEPT,
-        ...authHeaders(auth),
-        ...extra,
-      },
-      body: JSON.stringify(body),
-    });
-  } catch {
-    throw refused(`Metro could not reach ${url.hostname}.`);
-  }
-  if (res.status >= 300 && res.status < 400) {
-    await discard(res);
-    throw refused('that url redirects — use the url it redirects to');
-  }
-  return res;
-}
-
-function sseData(body: string): string {
-  for (const line of body.replace(/\r\n/g, '\n').split('\n'))
-    if (line.startsWith('data:')) return line.slice(5).trim();
-  return '';
-}
-
-async function payloadOf(res: Response): Promise<string> {
-  const contentType = res.headers.get('content-type') ?? '';
-  const text = await res.text().catch(() => '');
-  return contentType.includes('text/event-stream') ? sseData(text) : text;
-}
-
-async function resultOrNull(
-  res: Response,
-): Promise<Record<string, unknown> | null> {
-  const payload = await payloadOf(res);
-  let parsed: unknown;
-  try {
-    parsed = JSON.parse(payload);
-  } catch {
-    return null;
-  }
-  if (!isRecord(parsed) || !isRecord(parsed.result)) return null;
-  return parsed.result;
-}
-
-function initializeBody(version: string): unknown {
-  return {
-    jsonrpc: '2.0',
-    id: 1,
-    method: 'initialize',
-    params: {
-      protocolVersion: version,
-      capabilities: {},
-      clientInfo: { name: 'metro', version: '0.1.0' },
-    },
-  };
-}
-
-function iconOf(info: Record<string, unknown>): string {
-  const icons = info.icons;
-  if (!Array.isArray(icons)) return '';
-  for (const entry of icons) {
-    if (!isRecord(entry)) continue;
-    const src = safeIconSrc(entry.src);
-    if (src !== '') return src;
-  }
-  return '';
-}
-
-function serverFrom(url: URL, result: Record<string, unknown>): VerifiedServer {
-  const protocol = result.protocolVersion;
-  if (typeof protocol !== 'string') throw notMcp(url);
-  const info = isRecord(result.serverInfo) ? result.serverInfo : {};
-  const title = typeof info.title === 'string' ? info.title : '';
-  return {
-    server:
-      title !== ''
-        ? title
-        : typeof info.name === 'string'
-          ? info.name
-          : url.hostname,
-    version: typeof info.version === 'string' ? info.version : '',
-    protocol,
-    icon: iconOf(info),
-    tools: 0,
-    catalog: [],
-  };
-}
-
-async function initialize(
-  url: URL,
-  auth: ConnectorAuth,
-  signal: AbortSignal,
-  version: string,
-): Promise<{ session: string | null; server: VerifiedServer }> {
-  const res = await frame(url, auth, {}, initializeBody(version), signal);
-  if (res.status === 401 || res.status === 403) {
-    await discard(res);
-    throw new ConnectorUnauthorized(
-      auth.kind === 'none'
-        ? `${url.hostname} requires authorization.`
-        : `${url.hostname} rejected that credential.`,
-      400,
-    );
-  }
-  if (res.status === 404 || res.status === 405) {
-    await discard(res);
-    throw refused(
-      `${url.hostname} did not accept an MCP initialize over HTTP POST. ` +
-        'If it is a legacy SSE server, Metro cannot verify it yet.',
-    );
-  }
-  if (!res.ok) {
-    await discard(res);
-    throw notMcp(url);
-  }
-  const result = await resultOrNull(res);
-  if (result === null) throw notMcp(url);
-  return {
-    session: res.headers.get('mcp-session-id'),
-    server: serverFrom(url, result),
-  };
-}
-
-function sessionHeaders(
-  session: string | null,
-  version: string,
-): Record<string, string> {
-  const headers: Record<string, string> = {
-    'mcp-protocol-version': version,
-  };
-  if (session !== null && session !== '') headers['mcp-session-id'] = session;
-  return headers;
-}
-
-async function announce(
-  url: URL,
-  auth: ConnectorAuth,
-  headers: Record<string, string>,
-  signal: AbortSignal,
-): Promise<void> {
-  const res = await frame(
-    url,
-    auth,
-    headers,
-    { jsonrpc: '2.0', method: 'notifications/initialized' },
-    signal,
-  );
-  await discard(res);
-}
-
-async function toolPage(
-  url: URL,
-  auth: ConnectorAuth,
-  headers: Record<string, string>,
-  signal: AbortSignal,
-  cursor: string,
-): Promise<Record<string, unknown> | null> {
-  const params = cursor === '' ? {} : { cursor };
-  const res = await frame(
-    url,
-    auth,
-    headers,
-    { jsonrpc: '2.0', id: 2, method: 'tools/list', params },
-    signal,
-  );
-  if (!res.ok) {
-    await discard(res);
-    return null;
-  }
-  return resultOrNull(res);
-}
-
-async function listTools(
-  url: URL,
-  auth: ConnectorAuth,
-  headers: Record<string, string>,
-  signal: AbortSignal,
-): Promise<ToolInfo[]> {
-  const tools: ToolInfo[] = [];
-  let cursor = '';
-  for (let page = 0; page < MAX_TOOL_PAGES; page += 1) {
-    const result = await toolPage(url, auth, headers, signal, cursor);
-    if (result === null) break;
-    tools.push(...toToolList(result.tools));
-    const next = result.nextCursor;
-    if (typeof next !== 'string' || next === '' || next === cursor) break;
-    cursor = next;
-  }
-  return tools;
-}
-
-async function terminate(
-  url: URL,
-  auth: ConnectorAuth,
-  headers: Record<string, string>,
-  signal: AbortSignal,
-): Promise<void> {
-  const res = await fetch(url, {
-    method: 'DELETE',
-    redirect: 'manual',
-    signal,
-    headers: { ...authHeaders(auth), ...headers },
-  });
-  await discard(res);
-}
-
-async function probeWith(
-  url: URL,
-  auth: ConnectorAuth,
-  version: string,
-): Promise<VerifiedServer> {
-  const signal = AbortSignal.timeout(PROBE_TIMEOUT_MS);
-  const { session, server } = await initialize(url, auth, signal, version);
-  const headers = sessionHeaders(session, server.protocol);
-  await announce(url, auth, headers, signal);
-  const catalog = await listTools(url, auth, headers, signal);
-  await terminate(url, auth, headers, signal).catch((err: unknown) => {
-    log.debug(
-      { host: url.hostname, err: errMsg(err) },
-      'connector-verify: the remote declined to end the session',
-    );
-  });
-  return { ...server, tools: catalog.length, catalog };
-}
-
-export async function verifyRemoteMcp(
-  url: URL,
-  auth: ConnectorAuth,
-): Promise<VerifiedServer> {
-  let last: unknown;
-  for (const version of PROTOCOL_VERSIONS) {
-    try {
-      return await probeWith(url, auth, version);
-    } catch (err) {
-      if (!(err instanceof ConnectorNotMcp)) throw err;
-      last = err;
-    }
-  }
-  throw last;
-}

package/runtime/node_modules/@metro-labs/mcp/src/daemon/google-auth.ts

@@ -1,164 +0,0 @@
-import {
-  createPublicKey,
-  verify as cryptoVerify,
-  type JsonWebKey as CryptoJsonWebKey,
-} from 'node:crypto';
-
-export class GoogleAuthError extends Error {}
-
-interface GoogleClaims {
-  email: string;
-  emailVerified: boolean;
-  aud: string;
-  iss: string;
-  exp: number;
-}
-
-interface Jwk {
-  kid: string;
-  kty: string;
-  alg?: string;
-  n: string;
-  e: string;
-}
-
-interface VerifyOptions {
-  clientId: string;
-  now?: number;
-  fetchCerts?: () => Promise<Jwk[]>;
-  clockToleranceSec?: number;
-  expectedNonce?: string;
-}
-
-const DEFAULT_CERTS_URL = 'https://www.googleapis.com/oauth2/v3/certs';
-const certsUrl = (): string => {
-  const v = process.env.GOOGLE_OAUTH_JWKS_URL?.trim();
-  return v !== undefined && v !== '' ? v : DEFAULT_CERTS_URL;
-};
-const GOOGLE_ISSUERS = new Set([
-  'https://accounts.google.com',
-  'accounts.google.com',
-]);
-
-const decodeSegment = (seg: string): Buffer =>
-  Buffer.from(seg.replace(/-/g, '+').replace(/_/g, '/'), 'base64');
-
-const decodeJson = (seg: string): unknown => {
-  try {
-    return JSON.parse(decodeSegment(seg).toString('utf8'));
-  } catch {
-    throw new GoogleAuthError('malformed token segment');
-  }
-};
-
-let certCache: { keys: Jwk[]; expiresAt: number } | null = null;
-
-async function fetchGoogleCerts(): Promise<Jwk[]> {
-  const res = await fetch(certsUrl());
-  if (!res.ok)
-    throw new GoogleAuthError(`google certs fetch failed: ${res.status}`);
-  const body = (await res.json()) as { keys?: Jwk[] };
-  const maxAge = /max-age=(\d+)/.exec(res.headers.get('cache-control') ?? '');
-  const ttlMs = maxAge ? Number(maxAge[1]) * 1000 : 3600_000;
-  const keys = body.keys ?? [];
-  certCache = { keys, expiresAt: Date.now() + ttlMs };
-  return keys;
-}
-
-async function loadCerts(
-  fetcher: () => Promise<Jwk[]>,
-): Promise<Jwk[]> {
-  if (certCache && certCache.expiresAt > Date.now()) return certCache.keys;
-  return fetcher();
-}
-
-function jwkPublicKey(jwk: Jwk): ReturnType<typeof createPublicKey> {
-  return createPublicKey({
-    key: jwk as unknown as CryptoJsonWebKey,
-    format: 'jwk',
-  });
-}
-
-function verifySignature(token: string, jwk: Jwk): boolean {
-  const parts = token.split('.');
-  const signingInput = `${parts[0]}.${parts[1]}`;
-  const signature = decodeSegment(parts[2] ?? '');
-  return cryptoVerify(
-    'RSA-SHA256',
-    Buffer.from(signingInput),
-    jwkPublicKey(jwk),
-    signature,
-  );
-}
-
-interface Header {
-  alg?: string;
-  kid?: string;
-}
-
-interface Payload {
-  iss?: string;
-  aud?: string;
-  exp?: number;
-  email?: string;
-  email_verified?: boolean | string;
-  nonce?: string;
-}
-
-function assertHeader(header: Header): asserts header is Header & { kid: string } {
-  if (header.alg !== 'RS256')
-    throw new GoogleAuthError(`unsupported alg ${String(header.alg)}`);
-  if (!header.kid) throw new GoogleAuthError('missing kid');
-}
-
-function assertNotExpired(payload: Payload, opts: VerifyOptions): number {
-  const now = Math.floor((opts.now ?? Date.now()) / 1000);
-  const skew = opts.clockToleranceSec ?? 60;
-  if (typeof payload.exp !== 'number' || payload.exp + skew < now)
-    throw new GoogleAuthError('token expired');
-  return payload.exp;
-}
-
-function verifiedEmail(payload: Payload): string {
-  const verified =
-    payload.email_verified === true || payload.email_verified === 'true';
-  if (!payload.email || !verified)
-    throw new GoogleAuthError('email not verified');
-  return payload.email.toLowerCase();
-}
-
-function validateClaims(payload: Payload, opts: VerifyOptions): GoogleClaims {
-  if (!payload.iss || !GOOGLE_ISSUERS.has(payload.iss))
-    throw new GoogleAuthError(`unexpected issuer ${String(payload.iss)}`);
-  if (payload.aud !== opts.clientId)
-    throw new GoogleAuthError('audience mismatch');
-  if (opts.expectedNonce !== undefined && payload.nonce !== opts.expectedNonce)
-    throw new GoogleAuthError('nonce mismatch');
-  const exp = assertNotExpired(payload, opts);
-  return {
-    email: verifiedEmail(payload),
-    emailVerified: true,
-    aud: payload.aud,
-    iss: payload.iss,
-    exp,
-  };
-}
-
-export async function verifyGoogleIdToken(
-  token: string,
-  opts: VerifyOptions,
-): Promise<GoogleClaims> {
-  const parts = token.split('.');
-  if (parts.length !== 3) throw new GoogleAuthError('not a JWT');
-  const header = decodeJson(parts[0] ?? '') as Header;
-  const payload = decodeJson(parts[1] ?? '') as Payload;
-  assertHeader(header);
-
-  const keys = await loadCerts(opts.fetchCerts ?? fetchGoogleCerts);
-  const jwk = keys.find((k) => k.kid === header.kid);
-  if (!jwk) throw new GoogleAuthError('signing key not found');
-  if (!verifySignature(token, jwk))
-    throw new GoogleAuthError('invalid signature');
-
-  return validateClaims(payload, opts);
-}

package/runtime/node_modules/@metro-labs/mcp/src/daemon/google-oauth.ts

@@ -1,208 +0,0 @@
-import type { IncomingMessage, ServerResponse } from 'node:http';
-import { errMsg, log } from './log.js';
-import { verifyGoogleIdToken } from './google-auth.js';
-import { newNonce, signSession, signState, verifyState } from './session.js';
-import { ensureUserWithProject } from '../db/projects.js';
-
-export interface OAuthConfig {
-  clientId: string;
-  clientSecret: string;
-  redirectUri: string;
-  authUrl: string;
-  tokenUrl: string;
-  sessionSecret: string;
-  sessionTtlSec: number;
-}
-
-const DEFAULT_REDIRECT_URI = 'https://mcp.metro.box/auth/google/callback';
-const DEFAULT_AUTH_URL = 'https://accounts.google.com/o/oauth2/v2/auth';
-const DEFAULT_TOKEN_URL = 'https://oauth2.googleapis.com/token';
-const PREVIEW = /^([a-z0-9-]+--)?metro-ui\.netlify\.app$/;
-
-const DEFAULT_SESSION_TTL_SEC = 30 * 24 * 3600;
-
-const envOr = (name: string, def: string): string => {
-  const v = process.env[name]?.trim();
-  return v !== undefined && v !== '' ? v : def;
-};
-
-export function sessionTtlFromEnv(): number {
-  const ttl = Number(process.env.METRO_SESSION_TTL_SEC);
-  return Number.isFinite(ttl) && ttl > 0 ? ttl : DEFAULT_SESSION_TTL_SEC;
-}
-
-function oauthConfigFromEnv(): OAuthConfig | null {
-  const clientId = process.env.GOOGLE_OAUTH_CLIENT_ID?.trim() ?? '';
-  const clientSecret = process.env.GOOGLE_OAUTH_CLIENT_SECRET?.trim() ?? '';
-  const sessionSecret = process.env.METRO_SESSION_SECRET?.trim() ?? '';
-  if (clientId === '' || clientSecret === '' || sessionSecret === '') return null;
-  return {
-    clientId,
-    clientSecret,
-    sessionSecret,
-    redirectUri: envOr('GOOGLE_OAUTH_REDIRECT_URI', DEFAULT_REDIRECT_URI),
-    authUrl: envOr('GOOGLE_OAUTH_AUTH_URL', DEFAULT_AUTH_URL),
-    tokenUrl: envOr('GOOGLE_OAUTH_TOKEN_URL', DEFAULT_TOKEN_URL),
-    sessionTtlSec: sessionTtlFromEnv(),
-  };
-}
-
-export function validateReturnTo(returnTo: string): boolean {
-  let url: URL;
-  try {
-    url = new URL(returnTo);
-  } catch {
-    return false;
-  }
-  const host = url.hostname;
-  if (url.protocol === 'http:' && (host === 'localhost' || host === '127.0.0.1'))
-    return true;
-  if (url.protocol !== 'https:') return false;
-  if (host === 'metro.box' || host === 'localhost') return true;
-  return PREVIEW.test(host);
-}
-
-export function buildStartRedirect(
-  cfg: OAuthConfig,
-  returnTo: string,
-  now?: number,
-): string {
-  if (!validateReturnTo(returnTo)) throw new Error('invalid return_to');
-  const nonce = newNonce();
-  const state = signState(
-    { return_to: returnTo, nonce },
-    cfg.sessionSecret,
-    { now },
-  );
-  const u = new URL(cfg.authUrl);
-  u.searchParams.set('client_id', cfg.clientId);
-  u.searchParams.set('redirect_uri', cfg.redirectUri);
-  u.searchParams.set('response_type', 'code');
-  u.searchParams.set('scope', 'openid email');
-  u.searchParams.set('state', state);
-  u.searchParams.set('nonce', nonce);
-  u.searchParams.set('prompt', 'select_account');
-  return u.toString();
-}
-
-function withFragment(returnTo: string, frag: string): string {
-  return `${returnTo.split('#')[0]}#${frag}`;
-}
-
-export interface CallbackDeps {
-  exchangeCode: (code: string) => Promise<{ id_token?: string }>;
-  verifyIdToken: (idToken: string, nonce: string) => Promise<{ email: string }>;
-  ensureUser: (email: string) => Promise<string>;
-}
-
-export async function completeCallback(
-  cfg: OAuthConfig,
-  params: { code?: string; state?: string },
-  deps: CallbackDeps,
-  now?: number,
-): Promise<string> {
-  if (!params.state) throw new Error('missing state');
-  const { return_to, nonce } = verifyState(params.state, cfg.sessionSecret, now);
-  if (!validateReturnTo(return_to)) throw new Error('invalid return_to');
-  if (!params.code) return withFragment(return_to, 'error=exchange');
-
-  const tokens = await deps.exchangeCode(params.code);
-  if (!tokens.id_token) return withFragment(return_to, 'error=exchange');
-
-  let email: string;
-  try {
-    ({ email } = await deps.verifyIdToken(tokens.id_token, nonce));
-  } catch {
-    return withFragment(return_to, 'error=verify');
-  }
-
-  const userId = await deps.ensureUser(email);
-  const agentIds: string[] = [];
-  log.info({ userId }, 'google auth: session issued');
-
-  const session = signSession({ email, agentIds }, cfg.sessionSecret, {
-    ttlSec: cfg.sessionTtlSec,
-    now,
-  });
-  return withFragment(return_to, `session=${encodeURIComponent(session)}`);
-}
-
-async function exchangeCode(
-  cfg: OAuthConfig,
-  code: string,
-): Promise<{ id_token?: string }> {
-  const res = await fetch(cfg.tokenUrl, {
-    method: 'POST',
-    headers: { 'content-type': 'application/x-www-form-urlencoded' },
-    body: new URLSearchParams({
-      code,
-      client_id: cfg.clientId,
-      client_secret: cfg.clientSecret,
-      redirect_uri: cfg.redirectUri,
-      grant_type: 'authorization_code',
-    }),
-  });
-  if (!res.ok) throw new Error(`token exchange failed: ${res.status}`);
-  return (await res.json()) as { id_token?: string };
-}
-
-function defaultDeps(cfg: OAuthConfig): CallbackDeps {
-  return {
-    exchangeCode: (code) => exchangeCode(cfg, code),
-    verifyIdToken: (idToken, nonce) =>
-      verifyGoogleIdToken(idToken, {
-        clientId: cfg.clientId,
-        expectedNonce: nonce,
-      }).then((c) => ({ email: c.email })),
-    ensureUser: ensureUserWithProject,
-    
-  };
-}
-
-function serveStart(cfg: OAuthConfig, url: URL, res: ServerResponse): void {
-  const redirect = buildStartRedirect(cfg, url.searchParams.get('return_to') ?? '');
-  res.writeHead(302, { location: redirect }).end();
-}
-
-async function serveCallback(
-  cfg: OAuthConfig,
-  url: URL,
-  res: ServerResponse,
-): Promise<void> {
-  const redirect = await completeCallback(
-    cfg,
-    {
-      code: url.searchParams.get('code') ?? undefined,
-      state: url.searchParams.get('state') ?? undefined,
-    },
-    defaultDeps(cfg),
-  );
-  res.writeHead(302, { location: redirect }).end();
-}
-
-export async function handleGoogleAuthRequest(
-  req: IncomingMessage,
-  res: ServerResponse,
-): Promise<boolean> {
-  const url = new URL(req.url ?? '/', 'http://localhost');
-  const path = url.pathname;
-  if (path !== '/auth/google/start' && path !== '/auth/google/callback')
-    return false;
-  if (req.method !== 'GET') {
-    res.writeHead(405).end();
-    return true;
-  }
-  const cfg = oauthConfigFromEnv();
-  if (!cfg) {
-    res.writeHead(503).end('google login not configured');
-    return true;
-  }
-  try {
-    if (path === '/auth/google/start') serveStart(cfg, url, res);
-    else await serveCallback(cfg, url, res);
-  } catch (e) {
-    log.warn({ err: errMsg(e) }, 'google auth request failed');
-    res.writeHead(400).end('bad request');
-  }
-  return true;
-}