boondmanager-mcp-server 2.15.2 → 2.17.0

package/dist/tools/validations.js

@@ -1,7 +1,34 @@
-import { IdSchema, ValidationSearchSchema } from "../schemas/index.js";
+import { z } from "zod";
+import { IdSchema, ValidationDecisionSchema, ValidationSearchSchema } from "../schemas/index.js";
+import { readString } from "../config/env.js";
+import { isFeatureDisabled } from "../config/env-flags.js";
+import { buildJsonApiBody, confirmChoice } from "./crud-factory.js";
+import { composeDescription } from "./description-builders.js";
 import { apiRequest, apiSearch, buildSearchQuery, formatListResponse, formatDetailResponse, } from "../services/boond-client.js";
 import { progressReporterFrom } from "../services/progress.js";
 import { defaultGetDescription } from "./description-builders.js";
+const DECISION_STATE = { validate: "validated", reject: "rejected" };
+export const ValidationDecisionOutputSchema = z.object({
+    id: z.string(),
+    decided: z.boolean().describe("false quand l'utilisateur a refusé la confirmation (aucun appel API)"),
+    state: z.string().optional().describe("État demandé (`validated` / `rejected`)"),
+    documentType: z
+        .string()
+        .optional()
+        .describe("Type du document validé (timesreport / absencesreport / expensesreport)"),
+    documentId: z.string().optional(),
+    reason: z.string().optional(),
+});
+/** `BOOND_MCP_CONFIRM_REJECT=0|false|no|off` opts out of the confirmation prompt on a rejection. */
+function rejectConfirmationDisabled() {
+    return isFeatureDisabled(readString("BOOND_MCP_CONFIRM_REJECT"));
+}
+function documentRef(response) {
+    const entity = Array.isArray(response.data) ? response.data[0] : response.data;
+    const rel = entity?.relationships?.dependsOn?.data;
+    const ref = Array.isArray(rel) ? rel[0] : rel;
+    return ref ? { documentType: ref.type, documentId: ref.id } : {};
+}
 export function registerValidationTools(server) {
     server.registerTool("boond_validations_search", {
         title: "Rechercher des validations",
@@ -9,14 +36,6 @@ export function registerValidationTools(server) {
 
 ⚠️ \`startMonth\` et \`endMonth\` (YYYY-MM) sont requis par l'API.
 
-Args:
-  - startMonth (string, requis): YYYY-MM (ex: '2025-01')
-  - endMonth (string, requis): YYYY-MM
-  - documentTypes (string[], optional): 'absencesReport' | 'timesReport' | 'expensesReport'
-  - validationStates (string[], optional): 'waitingForValidation' | 'validated' | 'rejected'
-  - resourceTypes (number[], optional)
-  - keywords (string, optional): préfixes 'TPS', 'EXP', 'ABS', 'COMP'
-
 Returns: Liste des validations correspondantes.`,
         inputSchema: ValidationSearchSchema,
         annotations: {
@@ -51,5 +70,63 @@ Returns: Liste des validations correspondantes.`,
             content: [{ type: "text", text: formatDetailResponse(response) }],
         };
     });
+    // Issue #251: approve / reject a CRA, an expense report or an absence request.
+    server.registerTool("boond_validations_update", {
+        title: "Valider ou refuser un CRA / une note de frais / une absence",
+        description: composeDescription({
+            purpose: "Approuve (`validate`) ou refuse (`reject`) une validation en attente : CRA, note de frais ou demande d'absence.",
+            when: 'après `boond_validations_search` (`validationStates: ["waitingForValidation"]`) et l\'examen du document (`boond_timesheets_get`, `boond_expenses_get`, `boond_absences_get`).',
+            instead: "`boond_validations_get` pour relire la validation avant de décider ; il n'existe pas d'autre chemin d'écriture sur le workflow de validation (`state` n'est pas un champ des CRA / notes / absences).",
+            behaviour: [
+                "`PUT /validations/{id}` avec `state: validated | rejected` (le vocabulaire de `validationStates`) et `reason`. Route déduite du modèle `validation` et non éprouvée sur un tenant de test : un 404 / 405 doit être remonté tel quel.",
+                "Un **refus** demande une confirmation à l'utilisateur final si le client MCP déclare la capacité `elicitation` (désactivable par `BOOND_MCP_CONFIRM_REJECT=0`) ; un refus de confirmer renvoie `decided: false` sans appel API.",
+                "Idempotent : rejouer la même décision renvoie le même état.",
+            ],
+            returns: "`{ id, decided, state, documentType, documentId, reason? }` et la fiche de la validation mise à jour.",
+        }),
+        inputSchema: ValidationDecisionSchema,
+        outputSchema: ValidationDecisionOutputSchema,
+        annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: false },
+    }, async (params) => {
+        const { id, decision, reason } = params;
+        const state = DECISION_STATE[decision];
+        if (decision === "reject") {
+            const confirmation = await confirmChoice(server, {
+                disabled: rejectConfirmationDisabled(),
+                message: `Refuser la validation #${id} dans BoondManager${reason ? ` (motif : ${reason})` : ""} ? Le demandeur sera notifié par le workflow.`,
+                title: `Refus de la validation #${id}`,
+                description: "Choisir « Refuser » pour confirmer, sinon rien ne sera modifié.",
+                confirmTitle: "Refuser",
+            });
+            if (!confirmation.confirmed) {
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: `⛔ Refus de la validation #${id} annulé (${confirmation.reason ?? "non confirmé"}).`,
+                        },
+                    ],
+                    structuredContent: { id, decided: false, ...(confirmation.reason ? { reason: confirmation.reason } : {}) },
+                };
+            }
+        }
+        const body = buildJsonApiBody("validation", { state, ...(reason !== undefined ? { reason } : {}) }, id);
+        const response = await apiRequest(`/validations/${id}`, "PUT", body);
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `✅ Validation #${id} → ${state}.\n\n${formatDetailResponse(response)}`,
+                },
+            ],
+            structuredContent: {
+                id,
+                decided: true,
+                state,
+                ...documentRef(response),
+                ...(reason !== undefined ? { reason } : {}),
+            },
+        };
+    });
 }
 //# sourceMappingURL=validations.js.map

package/dist/tools/validations.js.map

@@ -1 +1 @@
-{"version":3,"file":"validations.js","sourceRoot":"","sources":["../../src/tools/validations.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EACL,UAAU,EACV,SAAS,EACT,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAElE,MAAM,UAAU,uBAAuB,CAAC,MAAiB;IACvD,MAAM,CAAC,YAAY,CACjB,0BAA0B,EAC1B;QACE,KAAK,EAAE,4BAA4B;QACnC,WAAW,EAAE;;;;;;;;;;;;gDAY6B;QAC1C,WAAW,EAAE,sBAAsB;QACnC,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;SACpB;KACF,EACD,KAAK,EAAE,MAAM,EAAE,KAAc,EAAE,EAAE;QAC/B,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,cAAc,EAAE,KAAK,EAAE,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;QACrF,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,kBAAkB,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;SACtG,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,uBAAuB,EACvB;QACE,KAAK,EAAE,0BAA0B;QACjC,WAAW,EAAE,qBAAqB,CAAC;YACjC,GAAG,EAAE,UAAU,EAAE,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,EAAE,mBAAmB,EAAE;YAC7F,OAAO,EAAE,KAAK;SACf,CAAC;QACF,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACrB;KACF,EACD,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,gBAAgB,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/D,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,oBAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC;SAC3E,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"validations.js","sourceRoot":"","sources":["../../src/tools/validations.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AACjG,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EACL,UAAU,EACV,SAAS,EACT,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAElE,MAAM,cAAc,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAW,CAAC;AAE9E,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,sEAAsE,CAAC;IACrG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAChF,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,yEAAyE,CAAC;IACtF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAEH,oGAAoG;AACpG,SAAS,0BAA0B;IACjC,OAAO,iBAAiB,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,WAAW,CAAC,QAAyB;IAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC/E,MAAM,GAAG,GAAG,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,CAAC;IACnD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC9C,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAiB;IACvD,MAAM,CAAC,YAAY,CACjB,0BAA0B,EAC1B;QACE,KAAK,EAAE,4BAA4B;QACnC,WAAW,EAAE;;;;gDAI6B;QAC1C,WAAW,EAAE,sBAAsB;QACnC,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;SACpB;KACF,EACD,KAAK,EAAE,MAAM,EAAE,KAAc,EAAE,EAAE;QAC/B,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,cAAc,EAAE,KAAK,EAAE,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;QACrF,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,kBAAkB,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;SACtG,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,uBAAuB,EACvB;QACE,KAAK,EAAE,0BAA0B;QACjC,WAAW,EAAE,qBAAqB,CAAC;YACjC,GAAG,EAAE,UAAU,EAAE,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,EAAE,mBAAmB,EAAE;YAC7F,OAAO,EAAE,KAAK;SACf,CAAC;QACF,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACrB;KACF,EACD,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,gBAAgB,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/D,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,oBAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC;SAC3E,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,+EAA+E;IAC/E,MAAM,CAAC,YAAY,CACjB,0BAA0B,EAC1B;QACE,KAAK,EAAE,6DAA6D;QACpE,WAAW,EAAE,kBAAkB,CAAC;YAC9B,OAAO,EACL,iHAAiH;YACnH,IAAI,EAAE,gLAAgL;YACtL,OAAO,EACL,uMAAuM;YACzM,SAAS,EAAE;gBACT,sOAAsO;gBACtO,iOAAiO;gBACjO,6DAA6D;aAC9D;YACD,OAAO,EACL,uGAAuG;SAC1G,CAAC;QACF,WAAW,EAAE,wBAAwB;QACrC,YAAY,EAAE,8BAA8B;QAC5C,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE;KACzG,EACD,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;QACxC,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE;gBAC/C,QAAQ,EAAE,0BAA0B,EAAE;gBACtC,OAAO,EAAE,0BAA0B,EAAE,qBAAqB,MAAM,CAAC,CAAC,CAAC,aAAa,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,+CAA+C;gBAC7I,KAAK,EAAE,2BAA2B,EAAE,EAAE;gBACtC,WAAW,EAAE,iEAAiE;gBAC9E,YAAY,EAAE,SAAS;aACxB,CAAC,CAAC;YACH,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;gBAC5B,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,6BAA6B,EAAE,YAAY,YAAY,CAAC,MAAM,IAAI,cAAc,IAAI;yBAC3F;qBACF;oBACD,iBAAiB,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;iBAC3G,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACxG,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,gBAAgB,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACrE,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,iBAAiB,EAAE,MAAM,KAAK,QAAQ,oBAAoB,CAAC,QAAQ,CAAC,EAAE;iBAC7E;aACF;YACD,iBAAiB,EAAE;gBACjB,EAAE;gBACF,OAAO,EAAE,IAAI;gBACb,KAAK;gBACL,GAAG,WAAW,CAAC,QAAQ,CAAC;gBACxB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5C;SACF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/workflows.js

@@ -47,7 +47,7 @@ export function registerWorkflowTools(server, policy) {
                 idempotentHint: true,
                 openWorldHint: false,
             },
-        }, async (params) => {
+        }, (params) => {
             const text = p.build((params ?? {}));
             return {
                 content: [{ type: "text", text }],

package/dist/tools/workflows.js.map

@@ -1 +1 @@
-{"version":3,"file":"workflows.js","sourceRoot":"","sources":["../../src/tools/workflows.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAqB,MAAM,4BAA4B,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAiB,EAAE,MAAqB;IAC5E,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,sEAAsE;QACtE,mEAAmE;QACnE,yDAAyD;QACzD,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAAE,SAAS;QAC5E,MAAM,CAAC,YAAY,CACjB,kBAAkB,CAAC,CAAC,IAAI,EAAE,EAC1B;YACE,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,WAAW,EAAE,kBAAkB,CAAC;gBAC9B,OAAO,EAAE,CAAC,CAAC,WAAW;gBACtB,IAAI,EAAE,kIAAkI;gBACxI,OAAO,EACL,mBAAmB,CAAC,CAAC,IAAI,gDAAgD;oBACzE,8EAA8E;oBAC9E,mDAAmD;gBACrD,SAAS,EAAE;oBACT,sGAAsG;iBACvG;gBACD,OAAO,EACL,iGAAiG;oBACjG,0EAA0E;aAC7E,CAAC;YACF,WAAW,EAAE,CAAC,CAAC,UAAU;YACzB,WAAW,EAAE;gBACX,YAAY,EAAE,IAAI;gBAClB,eAAe,EAAE,KAAK;gBACtB,cAAc,EAAE,IAAI;gBACpB,aAAa,EAAE,KAAK;aACrB;SACF,EACD,KAAK,EAAE,MAAM,EAAE,EAAE;YACf,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,EAAE,CAAuC,CAAC,CAAC;YAC3E,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC;aAC3C,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"workflows.js","sourceRoot":"","sources":["../../src/tools/workflows.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAqB,MAAM,4BAA4B,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAiB,EAAE,MAAqB;IAC5E,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,sEAAsE;QACtE,mEAAmE;QACnE,yDAAyD;QACzD,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAAE,SAAS;QAC5E,MAAM,CAAC,YAAY,CACjB,kBAAkB,CAAC,CAAC,IAAI,EAAE,EAC1B;YACE,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,WAAW,EAAE,kBAAkB,CAAC;gBAC9B,OAAO,EAAE,CAAC,CAAC,WAAW;gBACtB,IAAI,EAAE,kIAAkI;gBACxI,OAAO,EACL,mBAAmB,CAAC,CAAC,IAAI,gDAAgD;oBACzE,8EAA8E;oBAC9E,mDAAmD;gBACrD,SAAS,EAAE;oBACT,sGAAsG;iBACvG;gBACD,OAAO,EACL,iGAAiG;oBACjG,0EAA0E;aAC7E,CAAC;YACF,WAAW,EAAE,CAAC,CAAC,UAAU;YACzB,WAAW,EAAE;gBACX,YAAY,EAAE,IAAI;gBAClB,eAAe,EAAE,KAAK;gBACtB,cAAc,EAAE,IAAI;gBACpB,aAAa,EAAE,KAAK;aACrB;SACF,EACD,CAAC,MAAM,EAAE,EAAE;YACT,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,EAAE,CAAuC,CAAC,CAAC;YAC3E,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC;aAC3C,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/transports/http.d.ts

@@ -1,3 +1,4 @@
+import { type Server } from "node:http";
 import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 export interface HttpTransportOptions {
     host: string;
@@ -43,21 +44,94 @@ export interface HttpTransportOptions {
      * or BOOND_API_TOKEN, or BasicAuth). Intended for single-tenant / self-hosted
      * deployments where the operator owns both the server and the credentials.
      * Set `BOOND_HTTP_STATIC_AUTH=true` to enable via `resolveHttpOptions()`.
+     *
+     * In this mode **nothing** authenticates the MCP client: whoever reaches the
+     * port acts with the operator's BoondManager rights. `apiKey` is what closes
+     * that (issue #230), and `assertStaticAuthPolicy` refuses to start without
+     * one on a non-loopback bind.
      */
     staticAuth?: boolean;
+    /**
+     * Shared secret the MCP client must present in static-auth mode, as
+     * `Authorization: Bearer <key>` or `X-Api-Key: <key>`. Compared in constant
+     * time. Set via `MCP_HTTP_API_KEY`. Ignored (with a warning) in OAuth mode,
+     * where the Bearer is the BoondManager access token.
+     */
+    apiKey?: string;
+    /**
+     * Explicit opt-out of the "static auth off loopback requires an API key"
+     * start-up refusal — for a deployment whose network is the boundary (a
+     * private gateway). Set via `MCP_HTTP_INSECURE_STATIC_AUTH=1`.
+     */
+    insecureStaticAuth?: boolean;
+    /**
+     * Node `server.keepAliveTimeout`: how long an idle keep-alive connection is
+     * kept open. Must exceed the idle timeout of any load balancer in front
+     * (60 s AWS ALB, 75 s nginx by default) — Node's 5 s default is below both,
+     * which is how a LB reuses a connection Node just closed and answers `502`
+     * (issue #237). Default 65 s; env `MCP_HTTP_KEEP_ALIVE_TIMEOUT_MS`.
+     */
+    keepAliveTimeoutMs?: number;
+    /**
+     * Node `server.headersTimeout`: budget to receive a request's headers. Node
+     * requires it above `keepAliveTimeout`; a lower value is bumped to
+     * `keepAliveTimeoutMs + 1000` with a warning. Default 66 s; env
+     * `MCP_HTTP_HEADERS_TIMEOUT_MS`.
+     */
+    headersTimeoutMs?: number;
+    /**
+     * Node `server.requestTimeout`: budget to receive a whole request (headers +
+     * body). Generous because it also bounds slow clients on long tool calls.
+     * Default 5 min; env `MCP_HTTP_REQUEST_TIMEOUT_MS`.
+     */
+    requestTimeoutMs?: number;
+    /**
+     * OAuth mode only (issue #234): validate each Bearer against BoondManager
+     * (`GET /application/current-user`, cached per token for
+     * `tokenValidationTtlMs`) **before** dispatching, so an expired or revoked
+     * token is answered with HTTP `401` + `WWW-Authenticate: … error="invalid_token"`
+     * (RFC 6750 §3.1) — the signal a spec-compliant MCP client turns into a new
+     * authorization flow. Without it the 401 only surfaces inside a `tools/call`
+     * result, which no client re-authorizes from. Off by default because it
+     * costs one BoondManager call per token per TTL; env `MCP_HTTP_VALIDATE_TOKEN`.
+     */
+    validateToken?: boolean;
+    /** Positive/negative cache lifetime of a token validation, in ms. Default 60 s; env `MCP_HTTP_TOKEN_VALIDATION_TTL_MS`. */
+    tokenValidationTtlMs?: number;
+    /**
+     * Grace period `close()` gives in-flight connections (an open SSE stream, a
+     * request mid-body) before destroying them with `closeAllConnections()`.
+     * Idle keep-alive connections are closed immediately. Default 10 s; env
+     * `MCP_HTTP_SHUTDOWN_TIMEOUT_MS`.
+     */
+    shutdownTimeoutMs?: number;
 }
 export interface HttpServerHandle {
+    /**
+     * Stop accepting connections, close idle ones now and in-flight ones after
+     * `shutdownTimeoutMs`, then resolve. Idempotent: a second call (a second
+     * SIGTERM) returns the same promise instead of failing on an already-closed
+     * server (issue #237).
+     */
     close: () => Promise<void>;
     address: {
         host: string;
         port: number;
         path: string;
     };
+    /** The underlying Node server — for observability (applied timeouts) and tests. */
+    server: Server;
     /** Current count of live stateful sessions (always 0 in stateless mode). */
     sessionCount: () => number;
     /** Manually trigger an idle sweep; returns the number of sessions reaped. */
     sweepIdleSessions: () => Promise<number>;
 }
+export declare const DEFAULT_KEEP_ALIVE_TIMEOUT_MS = 65000;
+export declare const DEFAULT_HEADERS_TIMEOUT_MS = 66000;
+export declare const DEFAULT_REQUEST_TIMEOUT_MS = 300000;
+export declare const DEFAULT_SHUTDOWN_TIMEOUT_MS = 10000;
+export declare const DEFAULT_TOKEN_VALIDATION_TTL_MS = 60000;
+export declare const MAX_TOKEN_VALIDATION_ENTRIES = 500;
 /**
  * Resolves the effective Host header allow-list given user options and the
  * bound listen interface. Returns an empty array when validation is disabled
@@ -109,5 +183,47 @@ export declare function isOriginAllowed(policy: OriginPolicy, origin: string): b
  */
 export declare function isDiscoveryPath(reqUrl: string | undefined, mcpPath: string): boolean;
 export declare function resolveHttpOptions(): HttpTransportOptions;
+/**
+ * The socket timeouts applied to the Node server, with the one invariant Node
+ * itself enforces made explicit: `headersTimeout` must be strictly greater
+ * than `keepAliveTimeout`, otherwise a kept-alive connection can be timed out
+ * while waiting for its next request's headers. A configuration that breaks it
+ * is repaired (headers = keep-alive + 1 s) and logged rather than refused.
+ */
+export declare function resolveServerTimeouts(options: Pick<HttpTransportOptions, "keepAliveTimeoutMs" | "headersTimeoutMs" | "requestTimeoutMs">): {
+    keepAliveTimeout: number;
+    headersTimeout: number;
+    requestTimeout: number;
+    coerced: boolean;
+};
+/**
+ * Refuses a static-auth deployment that would expose the operator's
+ * BoondManager credentials to anyone who can reach the port (issue #230).
+ *
+ * Static auth skips the Bearer check entirely, and off loopback the `Host` /
+ * `Origin` validations are disabled too — the Docker image binds `0.0.0.0` by
+ * default — so with no `apiKey` the endpoint is an anonymous proxy carrying
+ * the operator's read *and* write rights. Loopback is exempt (only local
+ * processes can connect), and `insecureStaticAuth` is the explicit,
+ * named opt-out for a deployment whose network is the boundary. Throwing here
+ * rather than warning is deliberate: a warning on stderr is exactly what an
+ * operator running `docker run -e BOOND_HTTP_STATIC_AUTH=true` does not read.
+ */
+export declare function assertStaticAuthPolicy(options: HttpTransportOptions): void;
+/**
+ * Constant-time comparison of a presented API key against the configured one.
+ *
+ * `timingSafeEqual` throws on buffers of different lengths, so a length
+ * mismatch is answered by comparing the expected key against itself first —
+ * the call still costs one full comparison — and then returning `false`. The
+ * key's *length* is therefore observable, which is acceptable: it is not
+ * secret for a random key (the README generates 32 random bytes), and the
+ * alternative — hashing both sides to equalise lengths — reads to static
+ * analysers as a password stored under a fast hash, which it is not.
+ */
+export declare function isApiKeyMatch(presented: string | null | undefined, expected: string): boolean;
+/** Max accepted request body size (1 MiB). MCP initialize payloads are tiny;
+ *  this caps the memory a single authenticated request can force us to buffer. */
+export declare const MAX_BODY_BYTES: number;
 export declare function startHttpTransport(createServerFactory: () => McpServer, options: HttpTransportOptions): Promise<HttpServerHandle>;
 //# sourceMappingURL=http.d.ts.map

package/dist/transports/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/transports/http.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAWzE,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACtD,4EAA4E;IAC5E,YAAY,EAAE,MAAM,MAAM,CAAC;IAC3B,6EAA6E;IAC7E,iBAAiB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CAC1C;AA8CD;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAmB5F;AAwCD,uEAAuE;AACvE,MAAM,WAAW,YAAY;IAC3B,iEAAiE;IACjE,OAAO,EAAE,OAAO,CAAC;IACjB,kEAAkE;IAClE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB;;;;OAIG;IACH,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAID;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,YAAY,CAkBpH;AAkBD,8DAA8D;AAC9D,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAK7E;AAKD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAGpF;AAiBD,wBAAgB,kBAAkB,IAAI,oBAAoB,CA2BzD;AAkFD,wBAAsB,kBAAkB,CACtC,mBAAmB,EAAE,MAAM,SAAS,EACpC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,gBAAgB,CAAC,CAmT3B"}
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/transports/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiD,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AAKvF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAezE,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;;;;OAWG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,2HAA2H;IAC3H,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B;;;;;OAKG;IACH,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACtD,mFAAmF;IACnF,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,YAAY,EAAE,MAAM,MAAM,CAAC;IAC3B,6EAA6E;IAC7E,iBAAiB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CAC1C;AAcD,eAAO,MAAM,6BAA6B,QAAS,CAAC;AACpD,eAAO,MAAM,0BAA0B,QAAS,CAAC;AACjD,eAAO,MAAM,0BAA0B,SAAU,CAAC;AAClD,eAAO,MAAM,2BAA2B,QAAS,CAAC;AAKlD,eAAO,MAAM,+BAA+B,QAAS,CAAC;AACtD,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAchD;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAmB5F;AAwCD,uEAAuE;AACvE,MAAM,WAAW,YAAY;IAC3B,iEAAiE;IACjE,OAAO,EAAE,OAAO,CAAC;IACjB,kEAAkE;IAClE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB;;;;OAIG;IACH,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAID;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,YAAY,CAkBpH;AAkBD,8DAA8D;AAC9D,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAK7E;AAKD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAGpF;AAiCD,wBAAgB,kBAAkB,IAAI,oBAAoB,CAqCzD;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,oBAAoB,GAAG,kBAAkB,GAAG,kBAAkB,CAAC,GAClG;IAAE,gBAAgB,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAOhG;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAU1E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAS7F;AAwBD;kFACkF;AAClF,eAAO,MAAM,cAAc,QAAc,CAAC;AAsH1C,wBAAsB,kBAAkB,CACtC,mBAAmB,EAAE,MAAM,SAAS,EACpC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,gBAAgB,CAAC,CA8gB3B"}