@vellumai/cli 0.12.5-dev.202609252215.b94bc6c → 0.12.5-dev.202609252314.2f8433a

package/node_modules/@vellumai/local-mode/node_modules/@vellumai/service-contracts/package.json

@@ -28,7 +28,8 @@
     "./guardian-requests": "./src/guardian-requests.ts",
     "./platform-credential": "./src/platform-credential.ts",
     "./plan-credit": "./src/plan-credit.ts",
-    "./integration-categories": "./src/integration-categories.ts"
+    "./integration-categories": "./src/integration-categories.ts",
+    "./mcp-oauth": "./src/mcp-oauth.ts"
   },
   "scripts": {
     "typecheck": "bunx tsc --noEmit",

package/node_modules/@vellumai/local-mode/node_modules/@vellumai/service-contracts/src/__tests__/mcp-oauth.test.ts

@@ -0,0 +1,53 @@
+import { describe, expect, test } from "bun:test";
+
+import {
+  buildMcpOAuthCallbackUrl,
+  buildMcpOAuthClientMetadata,
+  buildMcpOAuthClientMetadataUrl,
+} from "../mcp-oauth.js";
+
+describe("MCP OAuth client metadata", () => {
+  test("builds the public client document", () => {
+    expect(
+      buildMcpOAuthClientMetadata({
+        clientId:
+          "https://velay.example/assistant-123/oauth/client-metadata.json",
+        redirectUris: [
+          "https://velay.example/assistant-123/webhooks/oauth/callback",
+        ],
+      }),
+    ).toEqual({
+      client_id:
+        "https://velay.example/assistant-123/oauth/client-metadata.json",
+      redirect_uris: [
+        "https://velay.example/assistant-123/webhooks/oauth/callback",
+      ],
+      token_endpoint_auth_method: "none",
+      grant_types: ["authorization_code", "refresh_token"],
+      response_types: ["code"],
+      client_name: "Vellum Assistant",
+      logo_uri: "https://www.vellum.ai/favicon.svg",
+    });
+  });
+
+  test("builds callback and metadata URLs from one normalized base", () => {
+    const baseUrl = "https://velay.example/assistant-123///";
+    expect(buildMcpOAuthCallbackUrl(baseUrl)).toBe(
+      "https://velay.example/assistant-123/webhooks/oauth/callback",
+    );
+    expect(buildMcpOAuthClientMetadataUrl(baseUrl)).toBe(
+      "https://velay.example/assistant-123/oauth/client-metadata.json",
+    );
+  });
+
+  test("canonicalizes equivalent public base URL spellings", () => {
+    const baseUrl = " https://VELAY.EXAMPLE:443/a/../assistant-123/// ";
+
+    expect(buildMcpOAuthCallbackUrl(baseUrl)).toBe(
+      "https://velay.example/assistant-123/webhooks/oauth/callback",
+    );
+    expect(buildMcpOAuthClientMetadataUrl(baseUrl)).toBe(
+      "https://velay.example/assistant-123/oauth/client-metadata.json",
+    );
+  });
+});

package/node_modules/@vellumai/local-mode/node_modules/@vellumai/service-contracts/src/index.ts

@@ -30,6 +30,7 @@ export * from "./ingress.js";
 export * from "./no-response.js";
 export * from "./plan-credit.js";
 export * from "./integration-categories.js";
+export * from "./mcp-oauth.js";
 export * from "./platform-credential.js";
 export * from "./remote-web-pairing.js";
 export * from "./twilio-ingress.js";

package/node_modules/@vellumai/local-mode/node_modules/@vellumai/service-contracts/src/mcp-oauth.ts

@@ -0,0 +1,60 @@
+import { normalizeHttpPublicBaseUrlWithoutTrailingSlash } from "./ingress.js";
+
+export const MCP_OAUTH_CALLBACK_PATH = "/webhooks/oauth/callback";
+export const MCP_OAUTH_CLIENT_METADATA_PATH = "/oauth/client-metadata.json";
+export const MCP_OAUTH_CLIENT_LOGO_URI = "https://www.vellum.ai/favicon.svg";
+
+export interface McpOAuthClientMetadata {
+  client_id?: string;
+  redirect_uris: string[];
+  token_endpoint_auth_method: "none";
+  grant_types: ["authorization_code", "refresh_token"];
+  response_types: ["code"];
+  client_name: string;
+  logo_uri: string;
+  software_id?: string;
+  software_version?: string;
+}
+
+export interface BuildMcpOAuthClientMetadataOptions {
+  clientId?: string;
+  redirectUris: string[];
+  clientName?: string;
+  softwareId?: string;
+  softwareVersion?: string;
+}
+
+export function buildMcpOAuthClientMetadata(
+  options: BuildMcpOAuthClientMetadataOptions,
+): McpOAuthClientMetadata {
+  return {
+    ...(options.clientId && { client_id: options.clientId }),
+    redirect_uris: options.redirectUris,
+    token_endpoint_auth_method: "none",
+    grant_types: ["authorization_code", "refresh_token"],
+    response_types: ["code"],
+    client_name: options.clientName ?? "Vellum Assistant",
+    logo_uri: MCP_OAUTH_CLIENT_LOGO_URI,
+    ...(options.softwareId && { software_id: options.softwareId }),
+    ...(options.softwareVersion && {
+      software_version: options.softwareVersion,
+    }),
+  };
+}
+
+export function buildMcpOAuthCallbackUrl(publicBaseUrl: string): string {
+  return `${normalizeBaseUrl(publicBaseUrl)}${MCP_OAUTH_CALLBACK_PATH}`;
+}
+
+export function buildMcpOAuthClientMetadataUrl(publicBaseUrl: string): string {
+  return `${normalizeBaseUrl(publicBaseUrl)}${MCP_OAUTH_CLIENT_METADATA_PATH}`;
+}
+
+function normalizeBaseUrl(publicBaseUrl: string): string {
+  const normalized =
+    normalizeHttpPublicBaseUrlWithoutTrailingSlash(publicBaseUrl);
+  if (!normalized) {
+    throw new Error("MCP OAuth public base URL must be an absolute HTTP URL");
+  }
+  return normalized;
+}

package/node_modules/@vellumai/service-contracts/package.json

@@ -28,7 +28,8 @@
     "./guardian-requests": "./src/guardian-requests.ts",
     "./platform-credential": "./src/platform-credential.ts",
     "./plan-credit": "./src/plan-credit.ts",
-    "./integration-categories": "./src/integration-categories.ts"
+    "./integration-categories": "./src/integration-categories.ts",
+    "./mcp-oauth": "./src/mcp-oauth.ts"
   },
   "scripts": {
     "typecheck": "bunx tsc --noEmit",

package/node_modules/@vellumai/service-contracts/src/__tests__/mcp-oauth.test.ts

@@ -0,0 +1,53 @@
+import { describe, expect, test } from "bun:test";
+
+import {
+  buildMcpOAuthCallbackUrl,
+  buildMcpOAuthClientMetadata,
+  buildMcpOAuthClientMetadataUrl,
+} from "../mcp-oauth.js";
+
+describe("MCP OAuth client metadata", () => {
+  test("builds the public client document", () => {
+    expect(
+      buildMcpOAuthClientMetadata({
+        clientId:
+          "https://velay.example/assistant-123/oauth/client-metadata.json",
+        redirectUris: [
+          "https://velay.example/assistant-123/webhooks/oauth/callback",
+        ],
+      }),
+    ).toEqual({
+      client_id:
+        "https://velay.example/assistant-123/oauth/client-metadata.json",
+      redirect_uris: [
+        "https://velay.example/assistant-123/webhooks/oauth/callback",
+      ],
+      token_endpoint_auth_method: "none",
+      grant_types: ["authorization_code", "refresh_token"],
+      response_types: ["code"],
+      client_name: "Vellum Assistant",
+      logo_uri: "https://www.vellum.ai/favicon.svg",
+    });
+  });
+
+  test("builds callback and metadata URLs from one normalized base", () => {
+    const baseUrl = "https://velay.example/assistant-123///";
+    expect(buildMcpOAuthCallbackUrl(baseUrl)).toBe(
+      "https://velay.example/assistant-123/webhooks/oauth/callback",
+    );
+    expect(buildMcpOAuthClientMetadataUrl(baseUrl)).toBe(
+      "https://velay.example/assistant-123/oauth/client-metadata.json",
+    );
+  });
+
+  test("canonicalizes equivalent public base URL spellings", () => {
+    const baseUrl = " https://VELAY.EXAMPLE:443/a/../assistant-123/// ";
+
+    expect(buildMcpOAuthCallbackUrl(baseUrl)).toBe(
+      "https://velay.example/assistant-123/webhooks/oauth/callback",
+    );
+    expect(buildMcpOAuthClientMetadataUrl(baseUrl)).toBe(
+      "https://velay.example/assistant-123/oauth/client-metadata.json",
+    );
+  });
+});

package/node_modules/@vellumai/service-contracts/src/index.ts

@@ -30,6 +30,7 @@ export * from "./ingress.js";
 export * from "./no-response.js";
 export * from "./plan-credit.js";
 export * from "./integration-categories.js";
+export * from "./mcp-oauth.js";
 export * from "./platform-credential.js";
 export * from "./remote-web-pairing.js";
 export * from "./twilio-ingress.js";

package/node_modules/@vellumai/service-contracts/src/mcp-oauth.ts

@@ -0,0 +1,60 @@
+import { normalizeHttpPublicBaseUrlWithoutTrailingSlash } from "./ingress.js";
+
+export const MCP_OAUTH_CALLBACK_PATH = "/webhooks/oauth/callback";
+export const MCP_OAUTH_CLIENT_METADATA_PATH = "/oauth/client-metadata.json";
+export const MCP_OAUTH_CLIENT_LOGO_URI = "https://www.vellum.ai/favicon.svg";
+
+export interface McpOAuthClientMetadata {
+  client_id?: string;
+  redirect_uris: string[];
+  token_endpoint_auth_method: "none";
+  grant_types: ["authorization_code", "refresh_token"];
+  response_types: ["code"];
+  client_name: string;
+  logo_uri: string;
+  software_id?: string;
+  software_version?: string;
+}
+
+export interface BuildMcpOAuthClientMetadataOptions {
+  clientId?: string;
+  redirectUris: string[];
+  clientName?: string;
+  softwareId?: string;
+  softwareVersion?: string;
+}
+
+export function buildMcpOAuthClientMetadata(
+  options: BuildMcpOAuthClientMetadataOptions,
+): McpOAuthClientMetadata {
+  return {
+    ...(options.clientId && { client_id: options.clientId }),
+    redirect_uris: options.redirectUris,
+    token_endpoint_auth_method: "none",
+    grant_types: ["authorization_code", "refresh_token"],
+    response_types: ["code"],
+    client_name: options.clientName ?? "Vellum Assistant",
+    logo_uri: MCP_OAUTH_CLIENT_LOGO_URI,
+    ...(options.softwareId && { software_id: options.softwareId }),
+    ...(options.softwareVersion && {
+      software_version: options.softwareVersion,
+    }),
+  };
+}
+
+export function buildMcpOAuthCallbackUrl(publicBaseUrl: string): string {
+  return `${normalizeBaseUrl(publicBaseUrl)}${MCP_OAUTH_CALLBACK_PATH}`;
+}
+
+export function buildMcpOAuthClientMetadataUrl(publicBaseUrl: string): string {
+  return `${normalizeBaseUrl(publicBaseUrl)}${MCP_OAUTH_CLIENT_METADATA_PATH}`;
+}
+
+function normalizeBaseUrl(publicBaseUrl: string): string {
+  const normalized =
+    normalizeHttpPublicBaseUrlWithoutTrailingSlash(publicBaseUrl);
+  if (!normalized) {
+    throw new Error("MCP OAuth public base URL must be an absolute HTTP URL");
+  }
+  return normalized;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vellumai/cli",
-  "version": "0.12.5-dev.202609252215.b94bc6c",
+  "version": "0.12.5-dev.202609252314.2f8433a",
   "description": "CLI tools for vellum-assistant",
   "type": "module",
   "exports": {