@synoikia/core 0.1.0

package/dist/http/mcp/endpoint.js

@@ -0,0 +1,293 @@
+import { randomUUID } from 'node:crypto';
+import { isIP } from 'node:net';
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { WebStandardStreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js';
+import { z } from 'zod';
+import { authenticateMcp, publicMcpBase } from '../../auth/mcp-auth.js';
+import { executeCode, searchCode } from '../../runtime/index.js';
+/**
+ * `/{slug}` Streamable HTTP endpoints (design §2.2): one McpServer + transport per MCP session,
+ * bound to its instance and authenticated principal, exposing exactly `search` and `execute`.
+ */
+const SESSION_IDLE_MS = 30 * 60_000;
+/** Open MCP sessions per authenticated principal; a new one past the cap closes that principal's oldest. */
+export const MAX_SESSIONS_PER_PRINCIPAL = 16;
+const SERVER_VERSION = '0.1.0';
+const jsonRpcError = (code, message) => ({
+    jsonrpc: '2.0',
+    id: null,
+    error: { code, message },
+});
+function toolText(result) {
+    if (!result.ok) {
+        return {
+            isError: true,
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({
+                        error: result.error.code,
+                        message: result.error.message,
+                        ...(result.logs.length ? { logs: result.logs } : {}),
+                    }, null, 2),
+                },
+            ],
+        };
+    }
+    const body = {
+        result: result.value,
+        ...(result.truncated ? { truncated: true } : {}),
+        ...(result.logs.length ? { logs: result.logs } : {}),
+    };
+    return { content: [{ type: 'text', text: JSON.stringify(body, null, 2) }] };
+}
+export function describeSearch(manifest) {
+    const ops = manifest.labels.operations.toLowerCase();
+    const apis = [
+        `catalog.find({ text?, group?, kind?, classification?: 'read'|'write'|'locked', includeDisabled?, limit? }) → ${ops} you can call (with includeDisabled, also the unavailable ones and why)`,
+        'catalog.get(key) → one entry with its parameter schema and docs',
+        'catalog.groups() → access groups with their level (none/read/ask/write) and counts',
+    ];
+    if (manifest.capabilities.registry)
+        apis.push('registry.find({ kind?, text?, parent?, domain?, limit? }) → matching upstream objects (areas, entities, …)');
+    if (manifest.capabilities.attestation) {
+        apis.push('guides.get(key) → best-practice guide; pass its best_practice_key in the params when calling that operation');
+    }
+    return [
+        `Search the ${manifest.name} ${ops} catalog. \`code\` is the body of an async JavaScript function; return a JSON-serializable value.`,
+        'Available:',
+        ...apis.map((a) => `- ${a}`),
+        'Use this before execute to find operation keys and parameters. It never contacts the upstream.',
+    ].join('\n');
+}
+export function describeExecute(manifest) {
+    const ns = manifest.binding.namespace;
+    const fns = manifest.binding.functions.map((f) => `${ns}.${f}(…)`).join(', ');
+    return [
+        `Run code against ${manifest.name}. \`code\` is the body of an async JavaScript function; \`await\` ${fns} and return a JSON-serializable result.`,
+        'Reads run immediately. Writes either run straight away or pause until a human approves them on an approval page the client is asked to open (see `approval` in catalog entries); denials and other refusals throw an Error with `err.code` (e.g. OPERATION_DISABLED, PERMISSION_DENIED, UPSTREAM_ERROR) that your code can catch.',
+        'Calls run one at a time. There is no network, filesystem or timer access. Secrets in results are redacted.',
+    ].join('\n');
+}
+/**
+ * DNS-rebinding defence (MCP transport spec): a browser page can make its own domain resolve to this
+ * server, but it can't change the Host it sends, nor the Origin. Host must be a name this server was
+ * configured for (PUBLIC_MCP_URL, MCP_ALLOWED_HOSTS) or something that can't be rebound (localhost, an
+ * IP literal); an Origin, when present, must be one of those too.
+ */
+export function hostAllowed(config, hostHeader) {
+    if (!hostHeader)
+        return false;
+    let host;
+    try {
+        host = new URL(`http://${hostHeader}`).hostname.toLowerCase();
+    }
+    catch {
+        return false;
+    }
+    if (host === 'localhost' || isIP(host.replace(/^\[|\]$/g, '')))
+        return true;
+    if (config.PUBLIC_MCP_URL && new URL(config.PUBLIC_MCP_URL).hostname.toLowerCase() === host)
+        return true;
+    return config.MCP_ALLOWED_HOSTS.includes(host);
+}
+export function originAllowed(config, origin) {
+    if (!origin)
+        return true; // not a browser request
+    try {
+        return hostAllowed(config, new URL(origin).host);
+    }
+    catch {
+        return false;
+    }
+}
+export class McpEndpoints {
+    ctx;
+    oauth;
+    sessions = new Map();
+    sweeper;
+    constructor(ctx, oauth) {
+        this.ctx = ctx;
+        this.oauth = oauth;
+        this.sweeper = setInterval(() => this.sweep(), 60_000);
+        this.sweeper.unref();
+    }
+    get sessionCount() {
+        return this.sessions.size;
+    }
+    sweep() {
+        const cutoff = Date.now() - SESSION_IDLE_MS;
+        for (const [id, s] of this.sessions)
+            if (s.lastSeen < cutoff)
+                void this.closeSession(id);
+    }
+    async closeSession(id) {
+        const s = this.sessions.get(id);
+        if (!s)
+            return;
+        this.sessions.delete(id);
+        s.closed.abort();
+        await s.transport.close().catch(() => undefined);
+        await s.server.close().catch(() => undefined);
+    }
+    async closeAll() {
+        clearInterval(this.sweeper);
+        await Promise.all([...this.sessions.keys()].map((id) => this.closeSession(id)));
+    }
+    buildServer(instanceId, identity, publicBase, closed) {
+        const rt = () => this.ctx.instances.runtime(instanceId);
+        const manifest = rt().manifest;
+        const server = new McpServer({ name: `synoikia/${rt().slug}`, version: SERVER_VERSION }, {
+            instructions: `${manifest.name} via Synoikia. Use search to discover operations, then execute to call them.`,
+        });
+        // Approval prompts (design §5.3): URL mode sends the human to our approval page; form mode is only
+        // used where the endpoint opted in. `elicitation: {}` from older clients means form support.
+        const prompts = () => {
+            const caps = server.server.getClientCapabilities()?.elicitation;
+            if (!caps)
+                return undefined;
+            const timeout = rt().settings.approvalTimeoutMs;
+            const out = {};
+            if (caps.url) {
+                out.url = async (req) => {
+                    const res = await server.server.elicitInput({ mode: 'url', elicitationId: req.approvalId, url: `${publicBase}${req.path}`, message: req.message }, { timeout });
+                    return { action: res.action };
+                };
+                out.urlComplete = (approvalId) => {
+                    void server.server
+                        .createElicitationCompletionNotifier(approvalId)()
+                        .catch(() => undefined);
+                };
+            }
+            if (caps.form || !caps.url) {
+                out.form = async (req) => {
+                    const res = await server.server.elicitInput({ mode: 'form', message: req.message, requestedSchema: req.requestedSchema }, { timeout });
+                    return { action: res.action, content: res.content };
+                };
+            }
+            return out;
+        };
+        const caller = (sessionId) => ({
+            client: { kind: 'mcp_client', id: identity.label, key: identity.principal },
+            mcpSessionId: sessionId,
+            principal: { ceiling: identity.access },
+            prompts: prompts(),
+        });
+        const run = async (fn, code, sessionId, request) => {
+            try {
+                await this.ctx.instances.ensureFresh(instanceId);
+            }
+            catch (err) {
+                return toolText({
+                    ok: false,
+                    error: { code: 'PLUGIN_UNAVAILABLE', message: err instanceof Error ? err.message : 'Endpoint unavailable' },
+                    logs: [],
+                });
+            }
+            // A cancelled request or a closed session ends the run: nothing it queued may run afterwards.
+            const signal = AbortSignal.any([request, closed]);
+            return toolText(await fn(this.ctx.gateDeps(), rt(), caller(sessionId), code, signal));
+        };
+        const input = {
+            code: z
+                .string()
+                .min(1)
+                .max(100_000)
+                .describe('Body of an async JavaScript function. Use `return` for the result.'),
+        };
+        server.registerTool('search', {
+            title: `Search ${manifest.name}`,
+            description: describeSearch(manifest),
+            inputSchema: input,
+            annotations: { readOnlyHint: true, openWorldHint: false },
+        }, ({ code }, extra) => run(searchCode, code, extra.sessionId, extra.signal));
+        server.registerTool('execute', {
+            title: `Execute on ${manifest.name}`,
+            description: describeExecute(manifest),
+            inputSchema: input,
+            // Hints for clients that confirm tool calls themselves; the gate never relies on them.
+            annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
+        }, ({ code }, extra) => run(executeCode, code, extra.sessionId, extra.signal));
+        return server;
+    }
+    /** The request carries a bearer or OAuth access token that is live somewhere on this server. */
+    holdsLiveCredential(c) {
+        const token = c.req.header('authorization')?.match(/^Bearer\s+(\S+)$/i)?.[1];
+        if (!token)
+            return false;
+        return !!this.ctx.tokens.verify(token) || !!this.oauth.verifyAccess(token, '');
+    }
+    async handle(c, slug) {
+        if (!hostAllowed(this.ctx.config, c.req.header('host')) ||
+            !originAllowed(this.ctx.config, c.req.header('origin'))) {
+            return c.json(jsonRpcError(-32003, 'Host or Origin not allowed; set PUBLIC_MCP_URL or MCP_ALLOWED_HOSTS'), 403);
+        }
+        // Before authentication, an unknown slug looks like any endpoint that needs credentials, and a
+        // disabled one answers like an enabled one: neither existence nor state is told to strangers.
+        const found = this.ctx.instances.bySlug(slug);
+        if (!found) {
+            if (this.holdsLiveCredential(c))
+                return c.json(jsonRpcError(-32001, 'Unknown MCP endpoint'), 404);
+            c.header('WWW-Authenticate', 'Bearer');
+            return c.json({ error: 'unauthorized', error_description: 'Authentication required' }, 401);
+        }
+        const { instance, plugin } = found;
+        const auth = await authenticateMcp(this.ctx, this.oauth, c, instance);
+        if (!auth.ok) {
+            if (auth.wwwAuthenticate)
+                c.header('WWW-Authenticate', auth.wwwAuthenticate);
+            return c.json({ error: auth.error, error_description: auth.message }, auth.status);
+        }
+        if (!this.ctx.instances.isServing(instance, plugin))
+            return c.json(jsonRpcError(-32002, 'This endpoint is disabled'), 503);
+        const sessionId = c.req.header('mcp-session-id');
+        if (sessionId) {
+            const s = this.sessions.get(sessionId);
+            // A session id is only valid for the endpoint and principal that created it.
+            if (!s || s.instanceId !== instance.id || s.principal !== auth.identity.principal) {
+                return c.json(jsonRpcError(-32001, 'Session not found'), 404);
+            }
+            s.lastSeen = Date.now();
+            return s.transport.handleRequest(c.req.raw);
+        }
+        if (c.req.method !== 'POST')
+            return c.json(jsonRpcError(-32000, 'Missing Mcp-Session-Id'), 400);
+        try {
+            await this.ctx.instances.ensureFresh(instance.id, { forceVersionCheck: true });
+        }
+        catch (err) {
+            return c.json(jsonRpcError(-32002, `Endpoint unavailable: ${err instanceof Error ? err.message : String(err)}`), 503);
+        }
+        // One principal can't pile up servers: past the cap, its least recently used session goes.
+        const mine = [...this.sessions].filter(([, s]) => s.principal === auth.identity.principal);
+        if (mine.length >= MAX_SESSIONS_PER_PRINCIPAL) {
+            const [oldest] = mine.sort(([, a], [, b]) => a.lastSeen - b.lastSeen)[0];
+            await this.closeSession(oldest);
+        }
+        const closed = new AbortController();
+        const server = this.buildServer(instance.id, auth.identity, publicMcpBase(this.ctx, c), closed.signal);
+        const transport = new WebStandardStreamableHTTPServerTransport({
+            sessionIdGenerator: () => randomUUID(),
+            onsessioninitialized: (id) => {
+                this.sessions.set(id, {
+                    transport,
+                    server,
+                    closed,
+                    instanceId: instance.id,
+                    principal: auth.identity.principal,
+                    lastSeen: Date.now(),
+                });
+            },
+            onsessionclosed: (id) => void this.closeSession(id),
+        });
+        await server.connect(transport);
+        const response = await transport.handleRequest(c.req.raw);
+        if (!transport.sessionId) {
+            // Not a valid initialize request: nothing to keep.
+            await transport.close().catch(() => undefined);
+            await server.close().catch(() => undefined);
+        }
+        return response;
+    }
+}
+//# sourceMappingURL=endpoint.js.map

package/dist/http/mcp/endpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint.js","sourceRoot":"","sources":["../../../src/http/mcp/endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAEhC,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,wCAAwC,EAAE,MAAM,+DAA+D,CAAC;AAEzH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAIxE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAGjE;;;GAGG;AAEH,MAAM,eAAe,GAAG,EAAE,GAAG,MAAM,CAAC;AACpC,4GAA4G;AAC5G,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAC7C,MAAM,cAAc,GAAG,OAAO,CAAC;AAY/B,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,EAAE,CAAC,CAAC;IACvD,OAAO,EAAE,KAAc;IACvB,EAAE,EAAE,IAAI;IACR,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;CACzB,CAAC,CAAC;AAEH,SAAS,QAAQ,CAAC,MAAqB;IACrC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;wBACE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;wBACxB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;wBAC7B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACrD,EACD,IAAI,EACJ,CAAC,CACF;iBACF;aACF;SACF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG;QACX,MAAM,EAAE,MAAM,CAAC,KAAK;QACpB,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAkB;IAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;IACrD,MAAM,IAAI,GAAG;QACX,gHAAgH,GAAG,yEAAyE;QAC5L,iEAAiE;QACjE,oFAAoF;KACrF,CAAC;IACF,IAAI,QAAQ,CAAC,YAAY,CAAC,QAAQ;QAChC,IAAI,CAAC,IAAI,CACP,4GAA4G,CAC7G,CAAC;IACJ,IAAI,QAAQ,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,CACP,6GAA6G,CAC9G,CAAC;IACJ,CAAC;IACD,OAAO;QACL,cAAc,QAAQ,CAAC,IAAI,IAAI,GAAG,mGAAmG;QACrI,YAAY;QACZ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,gGAAgG;KACjG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAkB;IAChD,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;IACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9E,OAAO;QACL,oBAAoB,QAAQ,CAAC,IAAI,qEAAqE,GAAG,yCAAyC;QAClJ,mUAAmU;QACnU,4GAA4G;KAC7G,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,UAA8B;IACxE,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5E,IAAI,MAAM,CAAC,cAAc,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACzG,OAAO,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,MAA0B;IACtE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC,CAAC,wBAAwB;IAClD,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,OAAO,YAAY;IAKJ;IACA;IALF,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IACtC,OAAO,CAAiB;IAEzC,YACmB,GAAe,EACf,KAAmB;QADnB,QAAG,GAAH,GAAG,CAAY;QACf,UAAK,GAAL,KAAK,CAAc;QAEpC,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;IAEO,KAAK;QACX,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,CAAC;QAC5C,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,CAAC,QAAQ,GAAG,MAAM;gBAAE,KAAK,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC3F,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,EAAU;QACnC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,CAAC;YAAE,OAAO;QACf,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClF,CAAC;IAEO,WAAW,CAAC,UAAkB,EAAE,QAAqB,EAAE,UAAkB,EAAE,MAAmB;QACpG,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,EAC1D;YACE,YAAY,EAAE,GAAG,QAAQ,CAAC,IAAI,8EAA8E;SAC7G,CACF,CAAC;QAEF,mGAAmG;QACnG,6FAA6F;QAC7F,MAAM,OAAO,GAAG,GAA8B,EAAE;YAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,EAAE,WAAW,CAAC;YAChE,IAAI,CAAC,IAAI;gBAAE,OAAO,SAAS,CAAC;YAC5B,MAAM,OAAO,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YAChD,MAAM,GAAG,GAAkB,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,GAAG,GAAG,KAAK,EAAE,GAAG,EAAE,EAAE;oBACtB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CACzC,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EACrG,EAAE,OAAO,EAAE,CACZ,CAAC;oBACF,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;gBAChC,CAAC,CAAC;gBACF,GAAG,CAAC,WAAW,GAAG,CAAC,UAAU,EAAE,EAAE;oBAC/B,KAAK,MAAM,CAAC,MAAM;yBACf,mCAAmC,CAAC,UAAU,CAAC,EAAE;yBACjD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC5B,CAAC,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC3B,GAAG,CAAC,IAAI,GAAG,KAAK,EAAE,GAAG,EAAE,EAAE;oBACvB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CACzC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,EAC5E,EAAE,OAAO,EAAE,CACZ,CAAC;oBACF,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAA4C,EAAE,CAAC;gBAC3F,CAAC,CAAC;YACJ,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,SAA6B,EAAiB,EAAE,CAAC,CAAC;YAChE,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,SAAS,EAAE;YAC3E,YAAY,EAAE,SAAS;YACvB,SAAS,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;YACvC,OAAO,EAAE,OAAO,EAAE;SACnB,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,KAAK,EAAE,EAAqB,EAAE,IAAY,EAAE,SAA6B,EAAE,OAAoB,EAAE,EAAE;YAC7G,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YACnD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,QAAQ,CAAC;oBACd,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,EAAE;oBAC3G,IAAI,EAAE,EAAE;iBACT,CAAC,CAAC;YACL,CAAC;YACD,8FAA8F;YAC9F,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;YAClD,OAAO,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACxF,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG;YACZ,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,GAAG,CAAC,OAAO,CAAC;iBACZ,QAAQ,CAAC,oEAAoE,CAAC;SAClF,CAAC;QACF,MAAM,CAAC,YAAY,CACjB,QAAQ,EACR;YACE,KAAK,EAAE,UAAU,QAAQ,CAAC,IAAI,EAAE;YAChC,WAAW,EAAE,cAAc,CAAC,QAAQ,CAAC;YACrC,WAAW,EAAE,KAAK;YAClB,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE;SAC1D,EACD,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAC1E,CAAC;QACF,MAAM,CAAC,YAAY,CACjB,SAAS,EACT;YACE,KAAK,EAAE,cAAc,QAAQ,CAAC,IAAI,EAAE;YACpC,WAAW,EAAE,eAAe,CAAC,QAAQ,CAAC;YACtC,WAAW,EAAE,KAAK;YAClB,uFAAuF;YACvF,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;SACjF,EACD,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAC3E,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,gGAAgG;IACxF,mBAAmB,CAAC,CAAU;QACpC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7E,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,CAAU,EAAE,IAAY;QACnC,IACE,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACnD,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EACvD,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,qEAAqE,CAAC,EAAE,GAAG,CAAC,CAAC;QAClH,CAAC;QACD,+FAA+F;QAC/F,8FAA8F;QAC9F,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,sBAAsB,CAAC,EAAE,GAAG,CAAC,CAAC;YAClG,CAAC,CAAC,MAAM,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;YACvC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QAEnC,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,eAAe;gBAAE,CAAC,CAAC,MAAM,CAAC,kBAAkB,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;YAC7E,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC;YACjD,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,2BAA2B,CAAC,EAAE,GAAG,CAAC,CAAC;QAExE,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACjD,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACvC,6EAA6E;YAC7E,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;gBAClF,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,mBAAmB,CAAC,EAAE,GAAG,CAAC,CAAC;YAChE,CAAC;YACD,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACxB,OAAO,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,wBAAwB,CAAC,EAAE,GAAG,CAAC,CAAC;QAChG,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QACjF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CACX,YAAY,CAAC,CAAC,KAAK,EAAE,yBAAyB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EACjG,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,2FAA2F;QAC3F,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC3F,IAAI,IAAI,CAAC,MAAM,IAAI,0BAA0B,EAAE,CAAC;YAC9C,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,CAAC;YAC1E,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACvG,MAAM,SAAS,GAAG,IAAI,wCAAwC,CAAC;YAC7D,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;YACtC,oBAAoB,EAAE,CAAC,EAAE,EAAE,EAAE;gBAC3B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE;oBACpB,SAAS;oBACT,MAAM;oBACN,MAAM;oBACN,UAAU,EAAE,QAAQ,CAAC,EAAE;oBACvB,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;oBAClC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;YACD,eAAe,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;SACpD,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1D,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;YACzB,mDAAmD;YACnD,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/http/mcp/oauth-routes.d.ts

@@ -0,0 +1,29 @@
+import type { Context, Hono } from 'hono';
+import type { AppContext } from '../../app.js';
+import type { OAuthService } from '../../auth/oauth.js';
+import type { SessionLimits, ValidSession } from '../../auth/sessions.js';
+/**
+ * OAuth 2.1 authorization server endpoints and the MCP-port sign-in (design §6.2). The sign-in here
+ * reuses portal accounts, TOTP and OIDC, but issues a separate short-lived `oauth_ui` session that
+ * only works for consent and approval pages — never for the Admin API.
+ */
+/**
+ * MCP-port sign-ins are kept apart by purpose (design §2.1): a session made to consent to a client
+ * can't decide approvals, and one made to decide an approval can't authorize clients. Each has its
+ * own cookie, scoped to the pages it serves.
+ */
+export type UiPurpose = 'oauth' | 'approval';
+/** Which kind of session a sign-in continuing to `continueTo` creates. */
+export declare const purposeOf: (continueTo: string) => UiPurpose;
+export declare const UI_LIMITS: SessionLimits;
+/** Where a sign-in may continue to: only our own consent and approval pages. */
+export declare const safeContinue: (v: unknown) => string;
+export declare function uiSession(ctx: AppContext, c: Context, purpose: UiPurpose): ValidSession | null;
+/** Double-submit CSRF for the MCP-port forms (SameSite=Strict cookie + hidden field). */
+export declare function uiCsrf(ctx: AppContext, c: Context): string;
+export declare const checkUiCsrf: (c: Context, submitted: unknown) => boolean;
+export declare function recordTotpProof(ctx: AppContext, idHash: string): void;
+/** Milliseconds since this session last proved TOTP, or Infinity if it never did. */
+export declare function sinceTotpProof(ctx: AppContext, session: ValidSession): number;
+export declare function renderLogin(ctx: AppContext, c: Context, continueTo: string, purpose: string, error?: string, status?: 200 | 401 | 403 | 429): Response | Promise<Response>;
+export declare function registerOAuthRoutes(app: Hono, ctx: AppContext, oauth: OAuthService): void;