@w3kits-com/plugin-opendesign 0.1.8 → 0.1.10

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/mcp-oauth.js

@@ -0,0 +1,412 @@
+// Daemon-side OAuth 2.1 client for HTTP / SSE MCP servers.
+//
+// Replaces the per-agent `mcp-remote` subprocess that bound a transient
+// `localhost:<port>` listener — that pattern can never work for a cloud-
+// deployed daemon (the user's browser can't reach the listener) and it
+// also broke locally because the listener died with the agent turn.
+//
+// What this module owns:
+//   - Discovery of the auth server for a given MCP URL
+//     (RFC 9728 protected-resource → RFC 8414 authorization-server).
+//   - Dynamic Client Registration (RFC 7591) when the server supports it,
+//     cached per `(authServerUrl, redirectUri)` in `<dataDir>/mcp-oauth-clients.json`
+//     so we register once and reuse forever.
+//   - PKCE (RFC 7636) code-verifier / code-challenge generation.
+//   - Authorization-code → token exchange and refresh-token rotation.
+//   - In-memory state cache keyed by the `state` parameter, used to look
+//     up the originating server + verifier when the browser hits our
+//     callback endpoint.
+//
+// Token persistence lives in `mcp-tokens.ts`. This file is the protocol
+// layer; storage is somebody else's job.
+import { mkdir, readFile, rename, writeFile } from 'node:fs/promises';
+import { createHash, randomBytes } from 'node:crypto';
+import path from 'node:path';
+// ───────────────────────────────────────────────────────────────────────
+// PKCE + state helpers.
+// ───────────────────────────────────────────────────────────────────────
+const VERIFIER_LEN = 64; // RFC 7636 §4.1: 43–128 chars
+function base64url(buf) {
+    return buf
+        .toString('base64')
+        .replace(/\+/g, '-')
+        .replace(/\//g, '_')
+        .replace(/=+$/g, '');
+}
+export function generateCodeVerifier() {
+    return base64url(randomBytes(VERIFIER_LEN));
+}
+export function deriveCodeChallenge(verifier) {
+    return base64url(createHash('sha256').update(verifier).digest());
+}
+export function generateState() {
+    return base64url(randomBytes(32));
+}
+// ───────────────────────────────────────────────────────────────────────
+// Discovery.
+// ───────────────────────────────────────────────────────────────────────
+/**
+ * Try to fetch the protected-resource metadata for a given MCP URL.
+ *
+ * Per RFC 9728, the well-known is at the resource origin's
+ * `/.well-known/oauth-protected-resource[<path>]`. We try both the
+ * path-suffixed form and the bare `/.well-known/...` so servers that
+ * only publish at the root still work.
+ */
+export async function discoverProtectedResource(resourceUrl, fetchImpl = fetch) {
+    let parsed;
+    try {
+        parsed = new URL(resourceUrl);
+    }
+    catch {
+        return null;
+    }
+    const candidates = [
+        new URL(`/.well-known/oauth-protected-resource${parsed.pathname.replace(/\/+$/u, '')}`, `${parsed.protocol}//${parsed.host}`).toString(),
+        new URL('/.well-known/oauth-protected-resource', `${parsed.protocol}//${parsed.host}`).toString(),
+    ];
+    for (const url of candidates) {
+        const json = await fetchJson(url, fetchImpl);
+        if (json)
+            return json;
+    }
+    return null;
+}
+/**
+ * Fetch the authorization-server metadata for an issuer URL. Tries both
+ * the OAuth (RFC 8414) and OIDC layouts (`/.well-known/oauth-authorization-server`
+ * and `/.well-known/openid-configuration`); some providers only publish one.
+ */
+export async function discoverAuthServer(issuer, fetchImpl = fetch) {
+    let parsed;
+    try {
+        parsed = new URL(issuer);
+    }
+    catch {
+        return null;
+    }
+    const trimmed = parsed.pathname.replace(/\/+$/u, '');
+    const base = `${parsed.protocol}//${parsed.host}`;
+    const candidates = [
+        `${base}/.well-known/oauth-authorization-server${trimmed}`,
+        `${base}/.well-known/openid-configuration${trimmed}`,
+        `${base}/.well-known/oauth-authorization-server`,
+        `${base}/.well-known/openid-configuration`,
+    ];
+    for (const url of candidates) {
+        const json = await fetchJson(url, fetchImpl);
+        if (json && typeof json.authorization_endpoint === 'string' && typeof json.token_endpoint === 'string') {
+            // Spread first so the explicit issuer wins (otherwise duplicate-key
+            // assignments under exactOptionalPropertyTypes complain).
+            return { ...json, issuer: json.issuer ?? issuer };
+        }
+    }
+    return null;
+}
+async function fetchJson(url, fetchImpl) {
+    try {
+        const res = await fetchImpl(url, {
+            headers: { accept: 'application/json' },
+        });
+        if (!res.ok)
+            return null;
+        return (await res.json());
+    }
+    catch {
+        return null;
+    }
+}
+function clientsFile(dataDir) {
+    return path.join(dataDir, 'mcp-oauth-clients.json');
+}
+async function readClientCache(dataDir) {
+    try {
+        const raw = await readFile(clientsFile(dataDir), 'utf8');
+        const parsed = JSON.parse(raw);
+        if (!parsed || !Array.isArray(parsed.clients))
+            return { clients: [] };
+        return { clients: parsed.clients.filter(isRegisteredClient) };
+    }
+    catch (err) {
+        const e = err;
+        if (e.code === 'ENOENT')
+            return { clients: [] };
+        throw err;
+    }
+}
+function isRegisteredClient(v) {
+    if (!v || typeof v !== 'object')
+        return false;
+    const r = v;
+    return (typeof r.authServerIssuer === 'string' &&
+        typeof r.redirectUri === 'string' &&
+        typeof r.clientId === 'string');
+}
+async function writeClientCache(dataDir, next) {
+    const file = clientsFile(dataDir);
+    await mkdir(path.dirname(file), { recursive: true });
+    const tmp = file + '.' + randomBytes(4).toString('hex') + '.tmp';
+    await writeFile(tmp, JSON.stringify(next, null, 2), 'utf8');
+    await rename(tmp, file);
+}
+/**
+ * POST to the auth server's `registration_endpoint` per RFC 7591. Returns
+ * a freshly issued client_id (and optional client_secret). Caller is
+ * responsible for caching the result.
+ */
+export async function registerClient(registrationEndpoint, redirectUri, fetchImpl = fetch) {
+    const body = {
+        redirect_uris: [redirectUri],
+        token_endpoint_auth_method: 'none',
+        grant_types: ['authorization_code', 'refresh_token'],
+        response_types: ['code'],
+        client_name: 'Open Design',
+        application_type: 'web',
+    };
+    const res = await fetchImpl(registrationEndpoint, {
+        method: 'POST',
+        headers: {
+            'content-type': 'application/json',
+            accept: 'application/json',
+        },
+        body: JSON.stringify(body),
+    });
+    if (!res.ok) {
+        const txt = await safeText(res);
+        throw new Error(`dynamic client registration failed: HTTP ${res.status} ${res.statusText} ${txt}`);
+    }
+    const json = (await res.json());
+    if (!json.client_id) {
+        throw new Error('dynamic client registration response missing client_id');
+    }
+    const out = { clientId: json.client_id };
+    if (json.client_secret)
+        out.clientSecret = json.client_secret;
+    return out;
+}
+/**
+ * Cached version of `registerClient`. Looks up `(authServerIssuer, redirectUri)`
+ * in the cache file and re-uses the existing client; falls back to a fresh
+ * DCR call when nothing is cached.
+ */
+export async function getOrRegisterClient(dataDir, authServer, redirectUri, fetchImpl = fetch) {
+    const cache = await readClientCache(dataDir);
+    const cached = cache.clients.find((c) => c.authServerIssuer === authServer.issuer && c.redirectUri === redirectUri);
+    if (cached)
+        return cached;
+    if (!authServer.registration_endpoint) {
+        throw new Error(`auth server ${authServer.issuer} does not advertise a registration_endpoint and no client is pre-registered`);
+    }
+    const reg = await registerClient(authServer.registration_endpoint, redirectUri, fetchImpl);
+    const next = {
+        authServerIssuer: authServer.issuer,
+        redirectUri,
+        clientId: reg.clientId,
+        registeredAt: Date.now(),
+    };
+    if (reg.clientSecret)
+        next.clientSecret = reg.clientSecret;
+    cache.clients.push(next);
+    await writeClientCache(dataDir, cache);
+    return next;
+}
+export function buildAuthorizeUrl(input) {
+    const u = new URL(input.authServer.authorization_endpoint);
+    u.searchParams.set('response_type', 'code');
+    u.searchParams.set('client_id', input.clientId);
+    u.searchParams.set('redirect_uri', input.redirectUri);
+    u.searchParams.set('state', input.state);
+    u.searchParams.set('code_challenge', input.codeChallenge);
+    u.searchParams.set('code_challenge_method', 'S256');
+    if (input.scope)
+        u.searchParams.set('scope', input.scope);
+    // RFC 8707 resource indicator — narrows the issued token to the MCP
+    // resource we actually care about. Most authoritative MCP servers
+    // require it; harmless when ignored.
+    if (input.resource)
+        u.searchParams.set('resource', input.resource);
+    return u.toString();
+}
+export async function exchangeCodeForToken(input, fetchImpl = fetch) {
+    const form = new URLSearchParams();
+    form.set('grant_type', 'authorization_code');
+    form.set('code', input.code);
+    form.set('redirect_uri', input.redirectUri);
+    form.set('client_id', input.clientId);
+    form.set('code_verifier', input.codeVerifier);
+    if (input.resource)
+        form.set('resource', input.resource);
+    return tokenRequest(input.tokenEndpoint, form, input.clientSecret, fetchImpl);
+}
+export async function refreshAccessToken(input, fetchImpl = fetch) {
+    const form = new URLSearchParams();
+    form.set('grant_type', 'refresh_token');
+    form.set('refresh_token', input.refreshToken);
+    form.set('client_id', input.clientId);
+    if (input.scope)
+        form.set('scope', input.scope);
+    if (input.resource)
+        form.set('resource', input.resource);
+    return tokenRequest(input.tokenEndpoint, form, input.clientSecret, fetchImpl);
+}
+async function tokenRequest(tokenEndpoint, form, clientSecret, fetchImpl) {
+    const headers = {
+        'content-type': 'application/x-www-form-urlencoded',
+        accept: 'application/json',
+    };
+    if (clientSecret) {
+        // RFC 6749 §2.3.1 — confidential clients use HTTP Basic with the
+        // client_id we already put in the form. Public clients (PKCE-only)
+        // skip this branch.
+        const basic = Buffer.from(`${form.get('client_id')}:${clientSecret}`).toString('base64');
+        headers['authorization'] = `Basic ${basic}`;
+    }
+    const res = await fetchImpl(tokenEndpoint, {
+        method: 'POST',
+        headers,
+        body: form.toString(),
+    });
+    if (!res.ok) {
+        const txt = await safeText(res);
+        throw new Error(`token endpoint rejected request: HTTP ${res.status} ${res.statusText} ${txt}`);
+    }
+    const json = (await res.json());
+    if (!json.access_token) {
+        throw new Error('token endpoint response missing access_token');
+    }
+    return json;
+}
+async function safeText(res) {
+    try {
+        const t = await res.text();
+        return t.slice(0, 500);
+    }
+    catch {
+        return '';
+    }
+}
+// ───────────────────────────────────────────────────────────────────────
+// In-memory pending-state cache.
+// ───────────────────────────────────────────────────────────────────────
+/**
+ * The OAuth dance is split across two HTTP requests on our side:
+ *   1. POST /api/mcp/oauth/start          — we mint state + verifier
+ *   2. GET  /api/mcp/oauth/callback       — browser returns code + state
+ * State has to survive between (1) and (2) on the daemon. We keep it in a
+ * Map with a TTL sweeper; persistence isn't needed because the user has
+ * to complete auth in the same daemon process anyway (state is single-use).
+ */
+export class PendingAuthCache {
+    ttlMs;
+    store = new Map();
+    timer = null;
+    constructor(ttlMs = 10 * 60 * 1000) {
+        this.ttlMs = ttlMs;
+    }
+    put(state, value) {
+        this.store.set(state, value);
+        this.startSweeper();
+    }
+    /** One-shot consume — any successful callback removes the state so a
+     * replay can't reuse it. */
+    consume(state) {
+        const v = this.store.get(state);
+        if (!v)
+            return null;
+        this.store.delete(state);
+        if (Date.now() - v.createdAt > this.ttlMs)
+            return null;
+        return v;
+    }
+    size() {
+        return this.store.size;
+    }
+    /** Stop the background sweeper. Used by tests; production lets the
+     * timer ride on the daemon process lifetime. */
+    stop() {
+        if (this.timer) {
+            clearInterval(this.timer);
+            this.timer = null;
+        }
+    }
+    startSweeper() {
+        if (this.timer)
+            return;
+        this.timer = setInterval(() => this.sweep(), Math.min(this.ttlMs, 60_000));
+        // unref so the cache doesn't keep the event loop alive in tests
+        if (typeof this.timer === 'object' && this.timer && typeof this.timer.unref === 'function') {
+            this.timer.unref();
+        }
+    }
+    sweep() {
+        const now = Date.now();
+        for (const [k, v] of this.store) {
+            if (now - v.createdAt > this.ttlMs)
+                this.store.delete(k);
+        }
+        if (this.store.size === 0 && this.timer) {
+            clearInterval(this.timer);
+            this.timer = null;
+        }
+    }
+}
+/**
+ * Run the entire pre-redirect half of the OAuth dance:
+ *   discovery → DCR (cached) → PKCE → authorize URL.
+ *
+ * Returns everything the caller needs to (a) push the user's browser at the
+ * correct authorize URL, and (b) finish the flow when the callback hits.
+ */
+export async function beginAuth(input) {
+    const fetchImpl = input.fetchImpl ?? fetch;
+    // Step 1: ask the MCP server who its auth server is. If the server
+    // doesn't publish protected-resource metadata, fall back to assuming
+    // the resource origin IS the auth server — most "stand-alone" MCP
+    // providers (Higgsfield etc.) host both at the same host.
+    const prm = await discoverProtectedResource(input.serverUrl, fetchImpl);
+    const issuerHint = prm?.authorization_servers?.[0];
+    const issuer = issuerHint ?? new URL(input.serverUrl).origin;
+    // Step 2: discovery on the auth server.
+    const authServer = await discoverAuthServer(issuer, fetchImpl);
+    if (!authServer) {
+        throw new Error(`could not discover OAuth metadata for ${issuer}`);
+    }
+    // Step 3: ensure we have a registered client_id (DCR if missing).
+    const client = await getOrRegisterClient(input.dataDir, authServer, input.redirectUri, fetchImpl);
+    // Step 4: PKCE + state.
+    const codeVerifier = generateCodeVerifier();
+    const codeChallenge = deriveCodeChallenge(codeVerifier);
+    const state = generateState();
+    const scope = input.scope ??
+        (Array.isArray(prm?.scopes_supported) && prm.scopes_supported.length > 0
+            ? prm.scopes_supported.join(' ')
+            : authServer.scopes_supported?.join(' '));
+    const resource = prm?.resource ?? input.serverUrl;
+    const authUrlInput = {
+        authServer,
+        clientId: client.clientId,
+        redirectUri: input.redirectUri,
+        state,
+        codeChallenge,
+        resource,
+    };
+    if (scope)
+        authUrlInput.scope = scope;
+    const authorizeUrl = buildAuthorizeUrl(authUrlInput);
+    const pending = {
+        serverId: input.serverId,
+        authServerIssuer: authServer.issuer,
+        tokenEndpoint: authServer.token_endpoint,
+        clientId: client.clientId,
+        redirectUri: input.redirectUri,
+        codeVerifier,
+        resourceUrl: resource,
+        createdAt: Date.now(),
+    };
+    if (client.clientSecret)
+        pending.clientSecret = client.clientSecret;
+    if (scope)
+        pending.scope = scope;
+    return { authorizeUrl, state, pending };
+}
+//# sourceMappingURL=mcp-oauth.js.map

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/mcp-oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-oauth.js","sourceRoot":"","sources":["../src/mcp-oauth.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,EAAE;AACF,wEAAwE;AACxE,yEAAyE;AACzE,uEAAuE;AACvE,oEAAoE;AACpE,EAAE;AACF,yBAAyB;AACzB,uDAAuD;AACvD,qEAAqE;AACrE,0EAA0E;AAC1E,sFAAsF;AACtF,6CAA6C;AAC7C,iEAAiE;AACjE,sEAAsE;AACtE,yEAAyE;AACzE,qEAAqE;AACrE,yBAAyB;AACzB,EAAE;AACF,wEAAwE;AACxE,yCAAyC;AAEzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,IAAI,MAAM,WAAW,CAAC;AA2D7B,0EAA0E;AAC1E,wBAAwB;AACxB,0EAA0E;AAE1E,MAAM,YAAY,GAAG,EAAE,CAAC,CAAC,8BAA8B;AAEvD,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG;SACP,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,SAAS,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,OAAO,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,0EAA0E;AAC1E,aAAa;AACb,0EAA0E;AAE1E;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,WAAmB,EACnB,YAA0B,KAAK;IAE/B,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,UAAU,GAAG;QACjB,IAAI,GAAG,CACL,wCAAwC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,EAC9E,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,EAAE,CACrC,CAAC,QAAQ,EAAE;QACZ,IAAI,GAAG,CAAC,uCAAuC,EAAE,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;KAClG,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,SAAS,CAA4B,GAAG,EAAE,SAAS,CAAC,CAAC;QACxE,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAc,EACd,YAA0B,KAAK;IAE/B,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;IAClD,MAAM,UAAU,GAAG;QACjB,GAAG,IAAI,0CAA0C,OAAO,EAAE;QAC1D,GAAG,IAAI,oCAAoC,OAAO,EAAE;QACpD,GAAG,IAAI,yCAAyC;QAChD,GAAG,IAAI,mCAAmC;KAC3C,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,SAAS,CAA8B,GAAG,EAAE,SAAS,CAAC,CAAC;QAC1E,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,sBAAsB,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;YACvG,oEAAoE;YACpE,0DAA0D;YAC1D,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,GAAW,EACX,SAAuB;IAEvB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;YAC/B,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACxC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAUD,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;AACtD,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,OAAe;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACtE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;IAChE,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,GAAwB,CAAC;QACnC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAChD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAU;IACpC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,CACL,OAAO,CAAC,CAAC,gBAAgB,KAAK,QAAQ;QACtC,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ;QACjC,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAC/B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,OAAe,EACf,IAAqB;IAErB,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,GAAG,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;IACjE,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5D,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,oBAA4B,EAC5B,WAAmB,EACnB,YAA0B,KAAK;IAE/B,MAAM,IAAI,GAAG;QACX,aAAa,EAAE,CAAC,WAAW,CAAC;QAC5B,0BAA0B,EAAE,MAAM;QAClC,WAAW,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;QACpD,cAAc,EAAE,CAAC,MAAM,CAAC;QACxB,WAAW,EAAE,aAAa;QAC1B,gBAAgB,EAAE,KAAK;KACxB,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,oBAAoB,EAAE;QAChD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,kBAAkB;SAC3B;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,4CAA4C,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,EAAE,CAClF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAmD,CAAC;IAClF,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,GAAG,GAAgD,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IACtF,IAAI,IAAI,CAAC,aAAa;QAAE,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC;IAC9D,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAe,EACf,UAAuC,EACvC,WAAmB,EACnB,YAA0B,KAAK;IAE/B,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,KAAK,UAAU,CAAC,MAAM,IAAI,CAAC,CAAC,WAAW,KAAK,WAAW,CACjF,CAAC;IACF,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,qBAAqB,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,eAAe,UAAU,CAAC,MAAM,6EAA6E,CAC9G,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,cAAc,CAC9B,UAAU,CAAC,qBAAqB,EAChC,WAAW,EACX,SAAS,CACV,CAAC;IACF,MAAM,IAAI,GAAqB;QAC7B,gBAAgB,EAAE,UAAU,CAAC,MAAM;QACnC,WAAW;QACX,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;KACzB,CAAC;IACF,IAAI,GAAG,CAAC,YAAY;QAAE,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;IAC3D,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACvC,OAAO,IAAI,CAAC;AACd,CAAC;AAgBD,MAAM,UAAU,iBAAiB,CAAC,KAAwB;IACxD,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;IAC3D,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IACtD,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAC1D,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;IACpD,IAAI,KAAK,CAAC,KAAK;QAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1D,oEAAoE;IACpE,kEAAkE;IAClE,qCAAqC;IACrC,IAAI,KAAK,CAAC,QAAQ;QAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAgBD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAwB,EACxB,YAA0B,KAAK;IAE/B,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;IAC7C,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAC5C,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,QAAQ;QAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzD,OAAO,YAAY,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;AAChF,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAwB,EACxB,YAA0B,KAAK;IAE/B,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IACxC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,KAAK;QAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,QAAQ;QAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzD,OAAO,YAAY,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;AAChF,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,aAAqB,EACrB,IAAqB,EACrB,YAAgC,EAChC,SAAuB;IAEvB,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,mCAAmC;QACnD,MAAM,EAAE,kBAAkB;KAC3B,CAAC;IACF,IAAI,YAAY,EAAE,CAAC;QACjB,iEAAiE;QACjE,mEAAmE;QACnE,oBAAoB;QACpB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzF,OAAO,CAAC,eAAe,CAAC,GAAG,SAAS,KAAK,EAAE,CAAC;IAC9C,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,aAAa,EAAE;QACzC,MAAM,EAAE,MAAM;QACd,OAAO;QACP,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;KACtB,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,yCAAyC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,EAAE,CAC/E,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAuB,CAAC;IACtD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAa;IACnC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,iCAAiC;AACjC,0EAA0E;AAE1E;;;;;;;GAOG;AACH,MAAM,OAAO,gBAAgB;IAIE;IAHrB,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC5C,KAAK,GAA0C,IAAI,CAAC;IAE5D,YAA6B,QAAgB,EAAE,GAAG,EAAE,GAAG,IAAI;QAA9B,UAAK,GAAL,KAAK,CAAyB;IAAG,CAAC;IAE/D,GAAG,CAAC,KAAa,EAAE,KAAuB;QACxC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAED;gCAC4B;IAC5B,OAAO,CAAC,KAAa;QACnB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACvD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IAED;oDACgD;IAChD,IAAI;QACF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAEO,YAAY;QAClB,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3E,gEAAgE;QAChE,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,IAAI,OAAQ,IAAI,CAAC,KAAgC,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YACtH,IAAI,CAAC,KAA+B,CAAC,KAAK,EAAE,CAAC;QAChD,CAAC;IACH,CAAC;IAEO,KAAK;QACX,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,GAAG,GAAG,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACxC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;CACF;AAqBD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,KAAqB;IAErB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC;IAE3C,mEAAmE;IACnE,qEAAqE;IACrE,kEAAkE;IAClE,0DAA0D;IAC1D,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,GAAG,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,UAAU,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;IAE7D,wCAAwC;IACxC,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC/D,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,yCAAyC,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,kEAAkE;IAClE,MAAM,MAAM,GAAG,MAAM,mBAAmB,CACtC,KAAK,CAAC,OAAO,EACb,UAAU,EACV,KAAK,CAAC,WAAW,EACjB,SAAS,CACV,CAAC;IAEF,wBAAwB;IACxB,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;IAC5C,MAAM,aAAa,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAE9B,MAAM,KAAK,GACT,KAAK,CAAC,KAAK;QACX,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC,IAAI,GAAI,CAAC,gBAAiB,CAAC,MAAM,GAAG,CAAC;YACxE,CAAC,CAAC,GAAI,CAAC,gBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC;YAClC,CAAC,CAAC,UAAU,CAAC,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE9C,MAAM,QAAQ,GAAG,GAAG,EAAE,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC;IAClD,MAAM,YAAY,GAAsB;QACtC,UAAU;QACV,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,KAAK;QACL,aAAa;QACb,QAAQ;KACT,CAAC;IACF,IAAI,KAAK;QAAE,YAAY,CAAC,KAAK,GAAG,KAAK,CAAC;IACtC,MAAM,YAAY,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAErD,MAAM,OAAO,GAAqB;QAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,gBAAgB,EAAE,UAAU,CAAC,MAAM;QACnC,aAAa,EAAE,UAAU,CAAC,cAAc;QACxC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,YAAY;QACZ,WAAW,EAAE,QAAQ;QACrB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;IACF,IAAI,MAAM,CAAC,YAAY;QAAE,OAAO,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IACpE,IAAI,KAAK;QAAE,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;IAEjC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC1C,CAAC"}

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/mcp-routes.d.ts

@@ -0,0 +1,5 @@
+import type { Express } from 'express';
+import type { RouteDeps } from './server-context.js';
+export interface RegisterMcpRoutesDeps extends RouteDeps<'http' | 'paths' | 'mcp'> {
+}
+export declare function registerMcpRoutes(app: Express, ctx: RegisterMcpRoutesDeps): void;