@xemahq/platform-common 0.1.3

package/dist/lib/mcp-bridge-token.js

@@ -0,0 +1,255 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpBridgeTokenError = exports.OPENCODE_MCP_BRIDGE_TOKEN_HEADER = exports.DEFAULT_BRIDGE_TOKEN_TTL_SECONDS = exports.McpBridgeTokenKind = void 0;
+exports.signMcpBridgeToken = signMcpBridgeToken;
+exports.verifyMcpBridgeToken = verifyMcpBridgeToken;
+const node_crypto_1 = require("node:crypto");
+var McpBridgeTokenKind;
+(function (McpBridgeTokenKind) {
+    McpBridgeTokenKind["Server"] = "mcp_server";
+    McpBridgeTokenKind["Catalog"] = "catalog";
+    McpBridgeTokenKind["BiomeWorkflowTools"] = "biome_workflow_tools";
+    McpBridgeTokenKind["BiomeCodeTools"] = "biome_code_tools";
+    McpBridgeTokenKind["OrgDatabaseExplorer"] = "org_database_explorer";
+    McpBridgeTokenKind["CapabilityRouter"] = "capability_router";
+})(McpBridgeTokenKind || (exports.McpBridgeTokenKind = McpBridgeTokenKind = {}));
+exports.DEFAULT_BRIDGE_TOKEN_TTL_SECONDS = 30 * 24 * 3600;
+exports.OPENCODE_MCP_BRIDGE_TOKEN_HEADER = 'X-Mcp-Bridge-Token';
+const HEADER_JSON = JSON.stringify({ alg: 'HS256', typ: 'JWT' });
+const HEADER_B64 = base64UrlEncode(Buffer.from(HEADER_JSON, 'utf8'));
+function signMcpBridgeToken(secret, claims, options) {
+    if (!secret) {
+        throw new Error('signMcpBridgeToken: secret is required');
+    }
+    const nowSeconds = Math.floor(Date.now() / 1000);
+    const ttl = options?.ttlSeconds ?? exports.DEFAULT_BRIDGE_TOKEN_TTL_SECONDS;
+    const payload = {
+        ...claims,
+        iat: nowSeconds,
+        exp: nowSeconds + ttl,
+    };
+    const payloadB64 = base64UrlEncode(Buffer.from(JSON.stringify(payload), 'utf8'));
+    const signingInput = `${HEADER_B64}.${payloadB64}`;
+    const sig = base64UrlEncode((0, node_crypto_1.createHmac)('sha256', secret).update(signingInput).digest());
+    return `${signingInput}.${sig}`;
+}
+class McpBridgeTokenError extends Error {
+    reason;
+    constructor(reason, message) {
+        super(message);
+        this.reason = reason;
+        this.name = 'McpBridgeTokenError';
+    }
+}
+exports.McpBridgeTokenError = McpBridgeTokenError;
+function verifyMcpBridgeToken(token, secret, options) {
+    if (!secret) {
+        throw new Error('verifyMcpBridgeToken: secret is required');
+    }
+    const payloadB64 = verifySignatureAndExtractPayload(token, secret);
+    const raw = decodePayloadJson(payloadB64);
+    const claims = parseClaims(raw);
+    assertNotExpired(claims, options?.clockSkewSeconds ?? 30);
+    assertScopeMatch(claims, options);
+    return claims;
+}
+function verifySignatureAndExtractPayload(token, secret) {
+    const parts = token.split('.');
+    if (parts.length !== 3) {
+        throw new McpBridgeTokenError('malformed', 'Token must have three segments');
+    }
+    const [headerB64, payloadB64, sigB64] = parts;
+    const signingInput = `${headerB64}.${payloadB64}`;
+    const expectedSig = (0, node_crypto_1.createHmac)('sha256', secret).update(signingInput).digest();
+    const providedSig = base64UrlDecode(sigB64);
+    if (providedSig.length !== expectedSig.length ||
+        !(0, node_crypto_1.timingSafeEqual)(providedSig, expectedSig)) {
+        throw new McpBridgeTokenError('bad_signature', 'Signature mismatch');
+    }
+    return payloadB64;
+}
+function decodePayloadJson(payloadB64) {
+    try {
+        return JSON.parse(base64UrlDecode(payloadB64).toString('utf8'));
+    }
+    catch {
+        throw new McpBridgeTokenError('malformed', 'Payload is not valid JSON');
+    }
+}
+function parseClaims(raw) {
+    if (typeof raw.sessionId !== 'string' ||
+        typeof raw.orgId !== 'string' ||
+        typeof raw.projectId !== 'string' ||
+        typeof raw.iat !== 'number' ||
+        typeof raw.exp !== 'number') {
+        throw new McpBridgeTokenError('malformed', 'Claims missing required fields');
+    }
+    if (!('actorSubject' in raw) ||
+        (raw.actorSubject !== null && typeof raw.actorSubject !== 'string')) {
+        throw new McpBridgeTokenError('malformed', 'Claims missing actorSubject (string | null) — required by unified resolver');
+    }
+    if (raw.installationId !== undefined && typeof raw.installationId !== 'string') {
+        throw new McpBridgeTokenError('malformed', 'installationId must be a string');
+    }
+    if (raw.allowedToolNames !== undefined &&
+        (!Array.isArray(raw.allowedToolNames) ||
+            raw.allowedToolNames.some((n) => typeof n !== 'string'))) {
+        throw new McpBridgeTokenError('malformed', 'allowedToolNames must be string[]');
+    }
+    if (raw.kind === McpBridgeTokenKind.Catalog) {
+        return parseCatalogClaims(raw);
+    }
+    if (raw.kind === McpBridgeTokenKind.Server) {
+        return parseServerClaims(raw);
+    }
+    if (raw.kind === McpBridgeTokenKind.BiomeWorkflowTools) {
+        return parseBiomeInstallationClaims(raw, McpBridgeTokenKind.BiomeWorkflowTools);
+    }
+    if (raw.kind === McpBridgeTokenKind.BiomeCodeTools) {
+        return parseBiomeInstallationClaims(raw, McpBridgeTokenKind.BiomeCodeTools);
+    }
+    if (raw.kind === McpBridgeTokenKind.OrgDatabaseExplorer) {
+        return parseOrgDbExplorerClaims(raw);
+    }
+    if (raw.kind === McpBridgeTokenKind.CapabilityRouter) {
+        return {
+            kind: McpBridgeTokenKind.CapabilityRouter,
+            ...baseClaimsFromRaw(raw),
+        };
+    }
+    throw new McpBridgeTokenError('malformed', `Unknown or missing token kind "${typeof raw.kind === 'string' ? raw.kind : '<missing>'}". Valid kinds: ${Object.values(McpBridgeTokenKind).join(', ')}. ` +
+        'Pre-discriminator tokens were intentionally invalidated; rotate the ' +
+        'signing key to flush remaining ones.');
+}
+function baseClaimsFromRaw(raw) {
+    const base = {
+        sessionId: raw.sessionId,
+        orgId: raw.orgId,
+        projectId: raw.projectId,
+        actorSubject: raw.actorSubject,
+        iat: raw.iat,
+        exp: raw.exp,
+    };
+    if (typeof raw.installationId === 'string') {
+        base.installationId = raw.installationId;
+    }
+    if (Array.isArray(raw.allowedToolNames)) {
+        base.allowedToolNames = raw.allowedToolNames;
+    }
+    return base;
+}
+function parseCatalogClaims(raw) {
+    if (typeof raw.catalogId !== 'string') {
+        throw new McpBridgeTokenError('malformed', 'Catalog-kind token must carry catalogId');
+    }
+    return {
+        kind: McpBridgeTokenKind.Catalog,
+        ...baseClaimsFromRaw(raw),
+        catalogId: raw.catalogId,
+    };
+}
+function parseServerClaims(raw) {
+    if (typeof raw.mcpServerId !== 'string' || typeof raw.serviceKey !== 'string') {
+        throw new McpBridgeTokenError('malformed', 'Server-kind token must carry mcpServerId + serviceKey');
+    }
+    return {
+        kind: McpBridgeTokenKind.Server,
+        ...baseClaimsFromRaw(raw),
+        mcpServerId: raw.mcpServerId,
+        serviceKey: raw.serviceKey,
+    };
+}
+function parseOrgDbExplorerClaims(raw) {
+    if (typeof raw.databaseId !== 'string') {
+        throw new McpBridgeTokenError('malformed', 'OrgDatabaseExplorer-kind token must carry databaseId');
+    }
+    return {
+        kind: McpBridgeTokenKind.OrgDatabaseExplorer,
+        ...baseClaimsFromRaw(raw),
+        databaseId: raw.databaseId,
+    };
+}
+function parseBiomeInstallationClaims(raw, kind) {
+    if (typeof raw.biomeInstallationId !== 'string') {
+        throw new McpBridgeTokenError('malformed', `${kind}-kind token must carry biomeInstallationId`);
+    }
+    return {
+        kind,
+        ...baseClaimsFromRaw(raw),
+        biomeInstallationId: raw.biomeInstallationId,
+    };
+}
+function assertNotExpired(claims, skewSeconds) {
+    const nowSeconds = Math.floor(Date.now() / 1000);
+    if (claims.exp + skewSeconds < nowSeconds) {
+        throw new McpBridgeTokenError('expired', `Token expired at ${claims.exp}`);
+    }
+    if (claims.iat - skewSeconds > nowSeconds) {
+        throw new McpBridgeTokenError('not_yet_valid', 'Token iat is in the future');
+    }
+}
+function assertScopeMatch(claims, options) {
+    if (!options) {
+        return;
+    }
+    if (options.expectedKind && claims.kind !== options.expectedKind) {
+        throw new McpBridgeTokenError('wrong_kind', `Token kind=${claims.kind}, request requires kind=${options.expectedKind}`);
+    }
+    if (options.expectedMcpServerId) {
+        assertServerBinding(claims, options.expectedMcpServerId);
+    }
+    if (options.expectedCatalogId) {
+        assertCatalogBinding(claims, options.expectedCatalogId);
+    }
+    if (options.expectedBiomeInstallationId) {
+        assertBiomeInstallationBinding(claims, options.expectedBiomeInstallationId);
+    }
+    if (options.expectedDatabaseId) {
+        assertOrgDbExplorerBinding(claims, options.expectedDatabaseId);
+    }
+    if (options.expectedOrgId && claims.orgId !== options.expectedOrgId) {
+        throw new McpBridgeTokenError('wrong_org', `Token bound to orgId=${claims.orgId}, request carried ${options.expectedOrgId}`);
+    }
+}
+function assertServerBinding(claims, expectedMcpServerId) {
+    if (claims.kind !== McpBridgeTokenKind.Server) {
+        throw new McpBridgeTokenError('wrong_kind', `Token is ${claims.kind}-kind but server scope was expected`);
+    }
+    if (claims.mcpServerId !== expectedMcpServerId) {
+        throw new McpBridgeTokenError('wrong_server', `Token bound to mcpServerId=${claims.mcpServerId}, request is for ${expectedMcpServerId}`);
+    }
+}
+function assertCatalogBinding(claims, expectedCatalogId) {
+    if (claims.kind !== McpBridgeTokenKind.Catalog) {
+        throw new McpBridgeTokenError('wrong_kind', `Token is ${claims.kind}-kind but catalog scope was expected`);
+    }
+    if (claims.catalogId !== expectedCatalogId) {
+        throw new McpBridgeTokenError('wrong_catalog', `Token bound to catalogId=${claims.catalogId}, request is for ${expectedCatalogId}`);
+    }
+}
+function assertBiomeInstallationBinding(claims, expectedBiomeInstallationId) {
+    if (claims.kind !== McpBridgeTokenKind.BiomeWorkflowTools &&
+        claims.kind !== McpBridgeTokenKind.BiomeCodeTools) {
+        throw new McpBridgeTokenError('wrong_kind', `Token is ${claims.kind}-kind but biome-installation scope was expected`);
+    }
+    if (claims.biomeInstallationId !== expectedBiomeInstallationId) {
+        throw new McpBridgeTokenError('wrong_installation', `Token bound to biomeInstallationId=${claims.biomeInstallationId}, request is for ${expectedBiomeInstallationId}`);
+    }
+}
+function assertOrgDbExplorerBinding(claims, expectedDatabaseId) {
+    if (claims.kind !== McpBridgeTokenKind.OrgDatabaseExplorer) {
+        throw new McpBridgeTokenError('wrong_kind', `Token is ${claims.kind}-kind but org-database-explorer scope was expected`);
+    }
+    if (claims.databaseId !== expectedDatabaseId) {
+        throw new McpBridgeTokenError('wrong_server', `Token bound to databaseId=${claims.databaseId}, request is for ${expectedDatabaseId}`);
+    }
+}
+function base64UrlEncode(buf) {
+    return buf.toString('base64').replaceAll('+', '-').replaceAll('/', '_').replaceAll(/=+$/g, '');
+}
+function base64UrlDecode(input) {
+    const padded = input.replaceAll('-', '+').replaceAll('_', '/');
+    const padLen = (4 - (padded.length % 4)) % 4;
+    return Buffer.from(padded + '='.repeat(padLen), 'base64');
+}
+//# sourceMappingURL=mcp-bridge-token.js.map

package/dist/lib/mcp-bridge-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-bridge-token.js","sourceRoot":"","sources":["../../src/lib/mcp-bridge-token.ts"],"names":[],"mappings":";;;AA4KA,gDA2BC;AA0CD,oDAcC;AA5OD,6CAA0D;AAa1D,IAAY,kBAmBX;AAnBD,WAAY,kBAAkB;IAE5B,2CAAqB,CAAA;IAErB,yCAAmB,CAAA;IAEnB,iEAA2C,CAAA;IAE3C,yDAAmC,CAAA;IAEnC,mEAA6C,CAAA;IAQ7C,4DAAsC,CAAA;AACxC,CAAC,EAnBW,kBAAkB,kCAAlB,kBAAkB,QAmB7B;AAqGY,QAAA,gCAAgC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAQlD,QAAA,gCAAgC,GAAG,oBAAoB,CAAC;AAErE,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;AACjE,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;AASrE,SAAgB,kBAAkB,CAChC,MAAc,EACd,MAM4D,EAC5D,OAAiC;IAEjC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,OAAO,EAAE,UAAU,IAAI,wCAAgC,CAAC;IACpE,MAAM,OAAO,GAAyB;QACpC,GAAG,MAAM;QACT,GAAG,EAAE,UAAU;QACf,GAAG,EAAE,UAAU,GAAG,GAAG;KACE,CAAC;IAC1B,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACjF,MAAM,YAAY,GAAG,GAAG,UAAU,IAAI,UAAU,EAAE,CAAC;IACnD,MAAM,GAAG,GAAG,eAAe,CACzB,IAAA,wBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAC3D,CAAC;IACF,OAAO,GAAG,YAAY,IAAI,GAAG,EAAE,CAAC;AAClC,CAAC;AAmBD,MAAa,mBAAoB,SAAQ,KAAK;IAE1B;IADlB,YACkB,MASD,EACf,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAZC,WAAM,GAAN,MAAM,CASP;QAIf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAjBD,kDAiBC;AAMD,SAAgB,oBAAoB,CAClC,KAAa,EACb,MAAc,EACd,OAAqC;IAErC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,UAAU,GAAG,gCAAgC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC;IAC1D,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gCAAgC,CAAC,KAAa,EAAE,MAAc;IACrE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,gCAAgC,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,KAAiC,CAAC;IAC1E,MAAM,YAAY,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;IAClD,MAAM,WAAW,GAAG,IAAA,wBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/E,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC5C,IACE,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;QACzC,CAAC,IAAA,6BAAe,EAAC,WAAW,EAAE,WAAW,CAAC,EAC1C,CAAC;QACD,MAAM,IAAI,mBAAmB,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAkB;IAC3C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CACf,eAAe,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,2BAA2B,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAA4B;IAC/C,IACE,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;QACjC,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;QAC7B,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;QACjC,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ;QAC3B,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,EAC3B,CAAC;QACD,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,gCAAgC,CAAC,CAAC;IAC/E,CAAC;IAID,IACE,CAAC,CAAC,cAAc,IAAI,GAAG,CAAC;QACxB,CAAC,GAAG,CAAC,YAAY,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,CAAC,EACnE,CAAC;QACD,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;QAC/E,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,iCAAiC,CAAC,CAAC;IAChF,CAAC;IACD,IACE,GAAG,CAAC,gBAAgB,KAAK,SAAS;QAClC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACnC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,EAC1D,CAAC;QACD,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,mCAAmC,CACpC,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB,CAAC,OAAO,EAAE,CAAC;QAC5C,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB,CAAC,MAAM,EAAE,CAAC;QAC3C,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB,CAAC,kBAAkB,EAAE,CAAC;QACvD,OAAO,4BAA4B,CAAC,GAAG,EAAE,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB,CAAC,cAAc,EAAE,CAAC;QACnD,OAAO,4BAA4B,CAAC,GAAG,EAAE,kBAAkB,CAAC,cAAc,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB,CAAC,mBAAmB,EAAE,CAAC;QACxD,OAAO,wBAAwB,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB,CAAC,gBAAgB,EAAE,CAAC;QACrD,OAAO;YACL,IAAI,EAAE,kBAAkB,CAAC,gBAAgB;YACzC,GAAG,iBAAiB,CAAC,GAAG,CAAC;SAC1B,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,kCACE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAC5C,mBAAmB,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QACjE,sEAAsE;QACtE,sCAAsC,CACzC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAA4B;IACrD,MAAM,IAAI,GAA6B;QACrC,SAAS,EAAE,GAAG,CAAC,SAAmB;QAClC,KAAK,EAAE,GAAG,CAAC,KAAe;QAC1B,SAAS,EAAE,GAAG,CAAC,SAAmB;QAClC,YAAY,EAAE,GAAG,CAAC,YAA6B;QAC/C,GAAG,EAAE,GAAG,CAAC,GAAa;QACtB,GAAG,EAAE,GAAG,CAAC,GAAa;KACvB,CAAC;IACF,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;QAC3C,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,CAAC;IAC3C,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC,gBAAqC,CAAC;IACpE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,GAA4B;IACtD,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,kBAAkB,CAAC,OAAO;QAChC,GAAG,iBAAiB,CAAC,GAAG,CAAC;QACzB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAA4B;IACrD,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC9E,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,uDAAuD,CACxD,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,kBAAkB,CAAC,MAAM;QAC/B,GAAG,iBAAiB,CAAC,GAAG,CAAC;QACzB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,UAAU,EAAE,GAAG,CAAC,UAAU;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,GAA4B;IAE5B,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,kBAAkB,CAAC,mBAAmB;QAC5C,GAAG,iBAAiB,CAAC,GAAG,CAAC;QACzB,UAAU,EAAE,GAAG,CAAC,UAAU;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CACnC,GAA4B,EAC5B,IAA+E;IAE/E,IAAI,OAAO,GAAG,CAAC,mBAAmB,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,GAAG,IAAI,4CAA4C,CACpD,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI;QACJ,GAAG,iBAAiB,CAAC,GAAG,CAAC;QACzB,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;KACgC,CAAC;AACjF,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA4B,EAAE,WAAmB;IACzE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,GAAG,GAAG,WAAW,GAAG,UAAU,EAAE,CAAC;QAC1C,MAAM,IAAI,mBAAmB,CAAC,SAAS,EAAE,oBAAoB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,GAAG,WAAW,GAAG,UAAU,EAAE,CAAC;QAC1C,MAAM,IAAI,mBAAmB,CAAC,eAAe,EAAE,4BAA4B,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,MAA4B,EAC5B,OAAgD;IAEhD,IAAI,CAAC,OAAO,EAAE,CAAC;QAAA,OAAO;IAAA,CAAC;IACvB,IAAI,OAAO,CAAC,YAAY,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,YAAY,EAAE,CAAC;QACjE,MAAM,IAAI,mBAAmB,CAC3B,YAAY,EACZ,cAAc,MAAM,CAAC,IAAI,2BAA2B,OAAO,CAAC,YAAY,EAAE,CAC3E,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAChC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC9B,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,OAAO,CAAC,2BAA2B,EAAE,CAAC;QACxC,8BAA8B,CAAC,MAAM,EAAE,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAC/B,0BAA0B,CAAC,MAAM,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;QACpE,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,wBAAwB,MAAM,CAAC,KAAK,qBAAqB,OAAO,CAAC,aAAa,EAAE,CACjF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,MAA4B,EAC5B,mBAA2B;IAE3B,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,CAAC,MAAM,EAAE,CAAC;QAC9C,MAAM,IAAI,mBAAmB,CAC3B,YAAY,EACZ,YAAY,MAAM,CAAC,IAAI,qCAAqC,CAC7D,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,mBAAmB,EAAE,CAAC;QAC/C,MAAM,IAAI,mBAAmB,CAC3B,cAAc,EACd,8BAA8B,MAAM,CAAC,WAAW,oBAAoB,mBAAmB,EAAE,CAC1F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAA4B,EAC5B,iBAAyB;IAEzB,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,CAAC,OAAO,EAAE,CAAC;QAC/C,MAAM,IAAI,mBAAmB,CAC3B,YAAY,EACZ,YAAY,MAAM,CAAC,IAAI,sCAAsC,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,KAAK,iBAAiB,EAAE,CAAC;QAC3C,MAAM,IAAI,mBAAmB,CAC3B,eAAe,EACf,4BAA4B,MAAM,CAAC,SAAS,oBAAoB,iBAAiB,EAAE,CACpF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,8BAA8B,CACrC,MAA4B,EAC5B,2BAAmC;IAEnC,IACE,MAAM,CAAC,IAAI,KAAK,kBAAkB,CAAC,kBAAkB;QACrD,MAAM,CAAC,IAAI,KAAK,kBAAkB,CAAC,cAAc,EACjD,CAAC;QACD,MAAM,IAAI,mBAAmB,CAC3B,YAAY,EACZ,YAAY,MAAM,CAAC,IAAI,iDAAiD,CACzE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,mBAAmB,KAAK,2BAA2B,EAAE,CAAC;QAC/D,MAAM,IAAI,mBAAmB,CAC3B,oBAAoB,EACpB,sCAAsC,MAAM,CAAC,mBAAmB,oBAAoB,2BAA2B,EAAE,CAClH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CACjC,MAA4B,EAC5B,kBAA0B;IAE1B,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,CAAC,mBAAmB,EAAE,CAAC;QAC3D,MAAM,IAAI,mBAAmB,CAC3B,YAAY,EACZ,YAAY,MAAM,CAAC,IAAI,oDAAoD,CAC5E,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,kBAAkB,EAAE,CAAC;QAC7C,MAAM,IAAI,mBAAmB,CAC3B,cAAc,EACd,6BAA6B,MAAM,CAAC,UAAU,oBAAoB,kBAAkB,EAAE,CACvF,CAAC;IACJ,CAAC;AACH,CAAC;AAID,SAAS,eAAe,CAAC,GAAW;IAClC,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC5D,CAAC"}

package/dist/lib/mcp-response-projection.d.ts

@@ -0,0 +1,9 @@
+export interface McpProjectionOptions {
+    maxItems?: number;
+    maxChars?: number;
+    excludeFields?: string[];
+    maxDepth?: number;
+    maxStringLength?: number;
+}
+export declare function projectMcpResponse(data: unknown, options?: McpProjectionOptions): string;
+//# sourceMappingURL=mcp-response-projection.d.ts.map

package/dist/lib/mcp-response-projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-response-projection.d.ts","sourceRoot":"","sources":["../../src/lib/mcp-response-projection.ts"],"names":[],"mappings":"AAiBA,MAAM,WAAW,oBAAoB;IAEnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAGlB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAGlB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IAGzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAGlB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAoBD,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,OAAO,EACb,OAAO,CAAC,EAAE,oBAAoB,GAC7B,MAAM,CAgBR"}

package/dist/lib/mcp-response-projection.js

@@ -0,0 +1,57 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.projectMcpResponse = projectMcpResponse;
+const DEFAULT_OPTIONS = {
+    maxItems: 50,
+    maxChars: 16_000,
+    maxDepth: 3,
+    maxStringLength: 500,
+    excludeFields: [],
+};
+function projectMcpResponse(data, options) {
+    const opts = { ...DEFAULT_OPTIONS, ...options };
+    const projected = projectValue(data, opts, 0);
+    const json = JSON.stringify(projected, null, 2);
+    if (json.length <= opts.maxChars) {
+        return json;
+    }
+    const truncated = json.slice(0, opts.maxChars);
+    const lastNewline = truncated.lastIndexOf('\n');
+    return ((lastNewline > 0 ? truncated.slice(0, lastNewline) : truncated) +
+        '\n... [response truncated]');
+}
+function projectValue(value, opts, depth) {
+    if (value === null || value === undefined)
+        return value;
+    if (typeof value === 'string') {
+        if (value.length > opts.maxStringLength) {
+            return value.slice(0, opts.maxStringLength) + '...';
+        }
+        return value;
+    }
+    if (typeof value === 'number' || typeof value === 'boolean')
+        return value;
+    if (Array.isArray(value)) {
+        const items = value.slice(0, opts.maxItems);
+        const projected = items.map((item) => projectValue(item, opts, depth + 1));
+        if (value.length > opts.maxItems) {
+            projected.push(`... and ${value.length - opts.maxItems} more items`);
+        }
+        return projected;
+    }
+    if (typeof value === 'object') {
+        if (depth >= opts.maxDepth) {
+            return '[nested object]';
+        }
+        const result = {};
+        const excludeSet = new Set(opts.excludeFields);
+        for (const [key, val] of Object.entries(value)) {
+            if (excludeSet.has(key))
+                continue;
+            result[key] = projectValue(val, opts, depth + 1);
+        }
+        return result;
+    }
+    return String(value);
+}
+//# sourceMappingURL=mcp-response-projection.js.map

package/dist/lib/mcp-response-projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-response-projection.js","sourceRoot":"","sources":["../../src/lib/mcp-response-projection.ts"],"names":[],"mappings":";;AAoDA,gDAmBC;AArCD,MAAM,eAAe,GAAmC;IACtD,QAAQ,EAAE,EAAE;IACZ,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,CAAC;IACX,eAAe,EAAE,GAAG;IACpB,aAAa,EAAE,EAAE;CAClB,CAAC;AAYF,SAAgB,kBAAkB,CAChC,IAAa,EACb,OAA8B;IAE9B,MAAM,IAAI,GAAG,EAAE,GAAG,eAAe,EAAE,GAAG,OAAO,EAAE,CAAC;IAChD,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAEhD,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAGD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO,CACL,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,4BAA4B,CAC7B,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,KAAc,EACd,IAAoC,EACpC,KAAa;IAEb,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAExD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC;QACtD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAE1E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QAE3E,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjC,SAAS,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,aAAa,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,OAAO,iBAAiB,CAAC;QAC3B,CAAC;QAED,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAE/C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YAC1E,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAClC,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC"}

package/dist/lib/omit-undefined.d.ts

@@ -0,0 +1,2 @@
+export declare const omitUndefined: <T extends object>(value: T) => { [K in keyof T]?: Exclude<T[K], undefined>; };
+//# sourceMappingURL=omit-undefined.d.ts.map

package/dist/lib/omit-undefined.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"omit-undefined.d.ts","sourceRoot":"","sources":["../../src/lib/omit-undefined.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,aAAa,GAAI,CAAC,SAAS,MAAM,EAC5C,OAAO,CAAC,KACP,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,GAI7C,CAAC"}

package/dist/lib/omit-undefined.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.omitUndefined = void 0;
+const omitUndefined = (value) => {
+    const entries = Object.entries(value).filter(([, entryValue]) => entryValue !== undefined);
+    return Object.fromEntries(entries);
+};
+exports.omitUndefined = omitUndefined;
+//# sourceMappingURL=omit-undefined.js.map

package/dist/lib/omit-undefined.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"omit-undefined.js","sourceRoot":"","sources":["../../src/lib/omit-undefined.ts"],"names":[],"mappings":";;;AAOO,MAAM,aAAa,GAAG,CAC3B,KAAQ,EACuC,EAAE;IACjD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC;IAE3F,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAkD,CAAC;AACtF,CAAC,CAAC;AANW,QAAA,aAAa,iBAMxB"}

package/dist/lib/orval-client-config.d.ts

@@ -0,0 +1,29 @@
+export interface OrvalClientConfig {
+    baseUrl?: string;
+    baseUrlResolver?: () => string | Promise<string>;
+    getAuthToken?: () => Promise<string>;
+    getHeaders?: () => Record<string, string> | Promise<Record<string, string>>;
+}
+interface ConfigureOrvalClientRequiredOptions {
+    configureClient: (config: OrvalClientConfig) => void;
+    baseUrl: string;
+    getAuthToken?: () => Promise<string>;
+    getHeaders?: () => Record<string, string> | Promise<Record<string, string>>;
+}
+interface ConfigureOrvalClientOptionalOptions {
+    configureClient: (config: OrvalClientConfig) => void;
+    baseUrl: string | undefined;
+    getAuthToken?: () => Promise<string>;
+    getHeaders?: () => Record<string, string> | Promise<Record<string, string>>;
+}
+interface ConfigureOrvalClientResolvedOptions {
+    configureClient: (config: OrvalClientConfig) => void;
+    resolveBaseUrl: () => string | Promise<string>;
+    getAuthToken?: () => Promise<string>;
+    getHeaders?: () => Record<string, string> | Promise<Record<string, string>>;
+}
+export declare function configureOrvalClientRequired({ configureClient, baseUrl, getAuthToken, getHeaders, }: ConfigureOrvalClientRequiredOptions): void;
+export declare function configureOrvalClientOptional({ configureClient, baseUrl, getAuthToken, getHeaders, }: ConfigureOrvalClientOptionalOptions): void;
+export declare function configureOrvalClientResolved({ configureClient, resolveBaseUrl, getAuthToken, getHeaders, }: ConfigureOrvalClientResolvedOptions): void;
+export {};
+//# sourceMappingURL=orval-client-config.d.ts.map

package/dist/lib/orval-client-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orval-client-config.d.ts","sourceRoot":"","sources":["../../src/lib/orval-client-config.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAOhC,OAAO,CAAC,EAAE,MAAM,CAAC;IAOjB,eAAe,CAAC,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACjD,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAKrC,UAAU,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC7E;AAED,UAAU,mCAAmC;IAC3C,eAAe,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,CAAC;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,UAAU,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC7E;AAED,UAAU,mCAAmC;IAC3C,eAAe,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,CAAC;IACrD,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,UAAU,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC7E;AAED,UAAU,mCAAmC;IAC3C,eAAe,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAOrD,cAAc,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,UAAU,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC7E;AAED,wBAAgB,4BAA4B,CAAC,EAC3C,eAAe,EACf,OAAO,EACP,YAAY,EACZ,UAAU,GACX,EAAE,mCAAmC,GAAG,IAAI,CAM5C;AAED,wBAAgB,4BAA4B,CAAC,EAC3C,eAAe,EACf,OAAO,EACP,YAAY,EACZ,UAAU,GACX,EAAE,mCAAmC,GAAG,IAAI,CAU5C;AAUD,wBAAgB,4BAA4B,CAAC,EAC3C,eAAe,EACf,cAAc,EACd,YAAY,EACZ,UAAU,GACX,EAAE,mCAAmC,GAAG,IAAI,CAM5C"}

package/dist/lib/orval-client-config.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.configureOrvalClientRequired = configureOrvalClientRequired;
+exports.configureOrvalClientOptional = configureOrvalClientOptional;
+exports.configureOrvalClientResolved = configureOrvalClientResolved;
+function configureOrvalClientRequired({ configureClient, baseUrl, getAuthToken, getHeaders, }) {
+    configureClient({
+        baseUrl,
+        getAuthToken,
+        getHeaders,
+    });
+}
+function configureOrvalClientOptional({ configureClient, baseUrl, getAuthToken, getHeaders, }) {
+    if (!baseUrl) {
+        return;
+    }
+    configureClient({
+        baseUrl,
+        getAuthToken,
+        getHeaders,
+    });
+}
+function configureOrvalClientResolved({ configureClient, resolveBaseUrl, getAuthToken, getHeaders, }) {
+    configureClient({
+        baseUrlResolver: resolveBaseUrl,
+        getAuthToken,
+        getHeaders,
+    });
+}
+//# sourceMappingURL=orval-client-config.js.map

package/dist/lib/orval-client-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orval-client-config.js","sourceRoot":"","sources":["../../src/lib/orval-client-config.ts"],"names":[],"mappings":";;AAkDA,oEAWC;AAED,oEAeC;AAUD,oEAWC;AAjDD,SAAgB,4BAA4B,CAAC,EAC3C,eAAe,EACf,OAAO,EACP,YAAY,EACZ,UAAU,GAC0B;IACpC,eAAe,CAAC;QACd,OAAO;QACP,YAAY;QACZ,UAAU;KACX,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,4BAA4B,CAAC,EAC3C,eAAe,EACf,OAAO,EACP,YAAY,EACZ,UAAU,GAC0B;IACpC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;IACT,CAAC;IAED,eAAe,CAAC;QACd,OAAO;QACP,YAAY;QACZ,UAAU;KACX,CAAC,CAAC;AACL,CAAC;AAUD,SAAgB,4BAA4B,CAAC,EAC3C,eAAe,EACf,cAAc,EACd,YAAY,EACZ,UAAU,GAC0B;IACpC,eAAe,CAAC;QACd,eAAe,EAAE,cAAc;QAC/B,YAAY;QACZ,UAAU;KACX,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/preview-token.d.ts

@@ -0,0 +1,16 @@
+export declare const PREVIEW_DNS_LABEL_MAX = 63;
+export declare const PREVIEW_DNS_HOSTNAME_MAX = 253;
+export declare const PREVIEW_HANDLE_LENGTH = 22;
+export declare function generatePreviewHandle(length?: number): string;
+export declare function hashPreviewHandle(handle: string): string;
+export declare function verifyPreviewHandle(handle: string, expectedHash: string): boolean;
+export interface PreviewUrlDiagnostics {
+    ok: boolean;
+    hostname: string;
+    longestLabel: string;
+    longestLabelLength: number;
+    hostnameLength: number;
+    warnings: string[];
+}
+export declare function evaluatePreviewUrl(url: string): PreviewUrlDiagnostics;
+//# sourceMappingURL=preview-token.d.ts.map

package/dist/lib/preview-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-token.d.ts","sourceRoot":"","sources":["../../src/lib/preview-token.ts"],"names":[],"mappings":"AAqBA,eAAO,MAAM,qBAAqB,KAAK,CAAC;AACxC,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAU5C,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAExC,wBAAgB,qBAAqB,CAAC,MAAM,GAAE,MAA8B,GAAG,MAAM,CAqBpF;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAExD;AASD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAYjF;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,qBAAqB,CA2BrE"}

package/dist/lib/preview-token.js

@@ -0,0 +1,71 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PREVIEW_HANDLE_LENGTH = exports.PREVIEW_DNS_HOSTNAME_MAX = exports.PREVIEW_DNS_LABEL_MAX = void 0;
+exports.generatePreviewHandle = generatePreviewHandle;
+exports.hashPreviewHandle = hashPreviewHandle;
+exports.verifyPreviewHandle = verifyPreviewHandle;
+exports.evaluatePreviewUrl = evaluatePreviewUrl;
+const node_crypto_1 = require("node:crypto");
+exports.PREVIEW_DNS_LABEL_MAX = 63;
+exports.PREVIEW_DNS_HOSTNAME_MAX = 253;
+const PREVIEW_HANDLE_ALPHABET = '0123456789abcdefghijklmnopqrstuvwxyz';
+exports.PREVIEW_HANDLE_LENGTH = 22;
+function generatePreviewHandle(length = exports.PREVIEW_HANDLE_LENGTH) {
+    if (length <= 0) {
+        throw new Error(`generatePreviewHandle: length must be positive, got ${length}`);
+    }
+    const cutoff = 256 - (256 % PREVIEW_HANDLE_ALPHABET.length);
+    let out = '';
+    while (out.length < length) {
+        const buf = (0, node_crypto_1.randomBytes)(length - out.length);
+        for (const b of buf) {
+            if (b >= cutoff) {
+                continue;
+            }
+            out += PREVIEW_HANDLE_ALPHABET[b % PREVIEW_HANDLE_ALPHABET.length];
+            if (out.length === length) {
+                break;
+            }
+        }
+    }
+    return out;
+}
+function hashPreviewHandle(handle) {
+    return (0, node_crypto_1.createHash)('sha256').update(handle).digest('hex');
+}
+function verifyPreviewHandle(handle, expectedHash) {
+    const actual = Buffer.from(hashPreviewHandle(handle), 'hex');
+    let expected;
+    try {
+        expected = Buffer.from(expectedHash, 'hex');
+    }
+    catch {
+        return false;
+    }
+    if (actual.length !== expected.length) {
+        return false;
+    }
+    return (0, node_crypto_1.timingSafeEqual)(actual, expected);
+}
+function evaluatePreviewUrl(url) {
+    const parsed = new URL(url);
+    const hostname = parsed.hostname;
+    const labels = hostname.split('.');
+    const longestLabel = labels.reduce((acc, label) => (label.length > acc.length ? label : acc), '');
+    const warnings = [];
+    if (longestLabel.length > exports.PREVIEW_DNS_LABEL_MAX) {
+        warnings.push(`longest DNS label is ${longestLabel.length} chars, exceeds DNS label max ${exports.PREVIEW_DNS_LABEL_MAX}`);
+    }
+    if (hostname.length > exports.PREVIEW_DNS_HOSTNAME_MAX) {
+        warnings.push(`hostname is ${hostname.length} chars, exceeds DNS hostname max ${exports.PREVIEW_DNS_HOSTNAME_MAX}`);
+    }
+    return {
+        ok: warnings.length === 0,
+        hostname,
+        longestLabel,
+        longestLabelLength: longestLabel.length,
+        hostnameLength: hostname.length,
+        warnings,
+    };
+}
+//# sourceMappingURL=preview-token.js.map

package/dist/lib/preview-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-token.js","sourceRoot":"","sources":["../../src/lib/preview-token.ts"],"names":[],"mappings":";;;AAkCA,sDAqBC;AAED,8CAEC;AASD,kDAYC;AAWD,gDA2BC;AApGD,6CAAuE;AAG1D,QAAA,qBAAqB,GAAG,EAAE,CAAC;AAC3B,QAAA,wBAAwB,GAAG,GAAG,CAAC;AAS5C,MAAM,uBAAuB,GAAG,sCAAsC,CAAC;AAC1D,QAAA,qBAAqB,GAAG,EAAE,CAAC;AAExC,SAAgB,qBAAqB,CAAC,SAAiB,6BAAqB;IAC1E,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,uDAAuD,MAAM,EAAE,CAAC,CAAC;IACnF,CAAC;IAGD,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC5D,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,OAAO,GAAG,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAA,yBAAW,EAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7C,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;YACpB,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;gBAChB,SAAS;YACX,CAAC;YACD,GAAG,IAAI,uBAAuB,CAAC,CAAC,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;YACnE,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC1B,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,iBAAiB,CAAC,MAAc;IAC9C,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3D,CAAC;AASD,SAAgB,mBAAmB,CAAC,MAAc,EAAE,YAAoB;IACtE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7D,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAA,6BAAe,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAWD,SAAgB,kBAAkB,CAAC,GAAW;IAC5C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAChC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,EACzD,EAAE,CACH,CAAC;IACF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,YAAY,CAAC,MAAM,GAAG,6BAAqB,EAAE,CAAC;QAChD,QAAQ,CAAC,IAAI,CACX,wBAAwB,YAAY,CAAC,MAAM,iCAAiC,6BAAqB,EAAE,CACpG,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,gCAAwB,EAAE,CAAC;QAC/C,QAAQ,CAAC,IAAI,CACX,eAAe,QAAQ,CAAC,MAAM,oCAAoC,gCAAwB,EAAE,CAC7F,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;QACzB,QAAQ;QACR,YAAY;QACZ,kBAAkB,EAAE,YAAY,CAAC,MAAM;QACvC,cAAc,EAAE,QAAQ,CAAC,MAAM;QAC/B,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/lib/redaction/default-rules.d.ts

@@ -0,0 +1,3 @@
+import type { RedactionRule } from './redaction-rule';
+export declare const DEFAULT_REDACTION_RULES: readonly RedactionRule[];
+//# sourceMappingURL=default-rules.d.ts.map

package/dist/lib/redaction/default-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-rules.d.ts","sourceRoot":"","sources":["../../../src/lib/redaction/default-rules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAYtD,eAAO,MAAM,uBAAuB,EAAE,SAAS,aAAa,EA6D3D,CAAC"}

package/dist/lib/redaction/default-rules.js

@@ -0,0 +1,66 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_REDACTION_RULES = void 0;
+exports.DEFAULT_REDACTION_RULES = [
+    {
+        name: 'bearer-token',
+        description: 'HTTP Authorization: Bearer <token> in any string value.',
+        stringPattern: /(\bBearer\s+)([A-Za-z0-9\-_=.+/]{8,})/gi,
+        replacement: '$1[redacted]',
+    },
+    {
+        name: 'jwt',
+        description: 'JWT-shaped triple-segment base64url tokens.',
+        stringPattern: /eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g,
+        replacement: '[redacted-jwt]',
+    },
+    {
+        name: 'github-token',
+        description: 'GitHub personal access tokens / app tokens.',
+        stringPattern: /(ghp_|gho_|ghu_|ghs_|ghr_|github_pat_)[A-Za-z0-9_]+/g,
+        replacement: '[redacted-github]',
+    },
+    {
+        name: 'aws-access-key',
+        description: 'AWS access-key id (AKIA-prefixed).',
+        stringPattern: /AKIA[A-Z0-9]{16}/g,
+        replacement: '[redacted-aws]',
+    },
+    {
+        name: 'slack-token',
+        description: 'Slack bot/user/app tokens.',
+        stringPattern: /xox[baprs]-[A-Za-z0-9-]+/g,
+        replacement: '[redacted-slack]',
+    },
+    {
+        name: 'field:password',
+        description: 'Object key matching password|passphrase.',
+        fieldName: /^(password|passphrase)$/i,
+        replacement: '[redacted]',
+    },
+    {
+        name: 'field:secret',
+        description: 'Object key containing the substring `secret`.',
+        fieldName: /secret/i,
+        replacement: '[redacted]',
+    },
+    {
+        name: 'field:credential',
+        description: 'Object key containing the substring `credential`.',
+        fieldName: /credential/i,
+        replacement: '[redacted]',
+    },
+    {
+        name: 'field:auth',
+        description: 'Common auth field names (api_key, access_token, refresh_token, auth_token, bearer).',
+        fieldName: /^(api[-_]?key|access[-_]?token|refresh[-_]?token|auth[-_]?token|bearer)$/i,
+        replacement: '[redacted]',
+    },
+    {
+        name: 'field:private-key',
+        description: 'Object key matching private_key / private-key.',
+        fieldName: /^private[-_]?key$/i,
+        replacement: '[redacted]',
+    },
+];
+//# sourceMappingURL=default-rules.js.map

package/dist/lib/redaction/default-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-rules.js","sourceRoot":"","sources":["../../../src/lib/redaction/default-rules.ts"],"names":[],"mappings":";;;AAYa,QAAA,uBAAuB,GAA6B;IAC/D;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,yDAAyD;QACtE,aAAa,EAAE,yCAAyC;QACxD,WAAW,EAAE,cAAc;KAC5B;IACD;QACE,IAAI,EAAE,KAAK;QACX,WAAW,EAAE,6CAA6C;QAC1D,aAAa,EAAE,gEAAgE;QAC/E,WAAW,EAAE,gBAAgB;KAC9B;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,6CAA6C;QAC1D,aAAa,EAAE,sDAAsD;QACrE,WAAW,EAAE,mBAAmB;KACjC;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,oCAAoC;QACjD,aAAa,EAAE,mBAAmB;QAClC,WAAW,EAAE,gBAAgB;KAC9B;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,4BAA4B;QACzC,aAAa,EAAE,2BAA2B;QAC1C,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,0CAA0C;QACvD,SAAS,EAAE,0BAA0B;QACrC,WAAW,EAAE,YAAY;KAC1B;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,+CAA+C;QAC5D,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,YAAY;KAC1B;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,mDAAmD;QAChE,SAAS,EAAE,aAAa;QACxB,WAAW,EAAE,YAAY;KAC1B;IACD;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,qFAAqF;QAClG,SAAS,EAAE,2EAA2E;QACtF,WAAW,EAAE,YAAY;KAC1B;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,gDAAgD;QAC7D,SAAS,EAAE,oBAAoB;QAC/B,WAAW,EAAE,YAAY;KAC1B;CACF,CAAC"}

package/dist/lib/redaction/index.d.ts

@@ -0,0 +1,5 @@
+export { RedactionService } from './redaction.service';
+export { RedactionInterceptor, RedactResponse, REDACT_RESPONSE_KEY, } from './redaction.interceptor';
+export { DEFAULT_REDACTION_RULES } from './default-rules';
+export type { RedactionRule } from './redaction-rule';
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/redaction/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/redaction/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,mBAAmB,GACpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC"}