grafana-bridge 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 grafana-bridge contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,108 @@
+# grafana-bridge
+
+Local HTTP proxy that bridges CLI tools, scripts, and AI-powered dashboards to Grafana Cloud instances behind SSO (Okta, Google, Azure AD, etc.).
+
+## Install
+
+```bash
+npx grafana-bridge --grafana-url https://mycompany.grafana.net
+```
+
+Or install globally:
+
+```bash
+npm install -g grafana-bridge
+grafana-bridge -u https://mycompany.grafana.net
+```
+
+Requires Node.js >= 18. Playwright's Chromium is installed automatically via `postinstall`.
+
+## Usage
+
+```bash
+# Start the proxy
+grafana-bridge -u https://mycompany.grafana.net
+
+# With custom port
+grafana-bridge -u https://mycompany.grafana.net -p 8080
+
+# With verbose logging
+grafana-bridge -u https://mycompany.grafana.net --verbose
+
+# With config file
+grafana-bridge -c ./my-config.yaml
+```
+
+Once running, any HTTP client can query Grafana through the local proxy:
+
+```bash
+# List datasources
+curl http://localhost:4000/api/datasources
+
+# Query Loki
+curl -X POST http://localhost:4000/api/ds/query \
+  -H "Content-Type: application/json" \
+  -d '{"queries": [...]}'
+
+# Search dashboards
+curl http://localhost:4000/api/search
+
+# Health check
+curl http://localhost:4000/health
+
+# Trigger proactive authentication
+curl -X POST http://localhost:4000/auth
+```
+
+## Configuration
+
+### CLI flags
+
+```
+grafana-bridge [options]
+
+  -u, --grafana-url <url>     Grafana instance URL (required)
+  -p, --port <number>         Local proxy port (default: 4000)
+  -c, --config <path>         Path to config file
+  --login-timeout <ms>        SSO login timeout (default: 120000)
+  --session-file <path>       Session persistence file path
+  --verbose                   Enable debug logging
+  -v, --version
+  -h, --help
+```
+
+### Config file
+
+Place at `~/.config/grafana-bridge/config.yaml` or `./grafana-bridge.yaml`:
+
+```yaml
+grafanaUrl: 'https://mycompany.grafana.net'
+port: 4000
+loginTimeoutMs: 120000
+sessionFile: '~/.config/grafana-bridge/session.json'
+verbose: false
+```
+
+### Environment variables
+
+- `GRAFANA_BRIDGE_URL` — Grafana instance URL
+- `GRAFANA_BRIDGE_PORT` — Local proxy port
+
+### Precedence
+
+CLI flags > environment variables > config file > defaults
+
+## How it works
+
+1. All requests are forwarded to Grafana with session cookies injected (if a session exists)
+2. If Grafana returns 401, a Chromium browser opens for SSO login (lazy authentication)
+3. After successful login, `grafana_session` and `grafana_session_expiry` cookies are captured
+4. Session is cached in memory and persisted to `~/.config/grafana-bridge/session.json`
+5. Subsequent requests reuse the cached session — the browser only opens when Grafana rejects the session
+6. Re-authentication retries up to 3 times before returning 401 to the client
+7. Persistent browser context means SSO IdP cookies are remembered — subsequent re-auths only need Grafana consent, not full IdP login
+8. `POST /auth` can be used to proactively trigger authentication before any request
+
+## License
+
+MIT

package/dist/auth.d.ts

@@ -0,0 +1,9 @@
+import type { SessionData } from "./types.js";
+import type { Logger } from "./logger.js";
+export declare class Authenticator {
+    private grafanaUrl;
+    private loginTimeoutMs;
+    private logger;
+    constructor(grafanaUrl: string, loginTimeoutMs: number, logger: Logger);
+    authenticate(): Promise<SessionData>;
+}

package/dist/auth.js

@@ -0,0 +1,80 @@
+import path from "node:path";
+import os from "node:os";
+import { chromium } from "playwright";
+const BROWSER_DATA_DIR = path.join(os.homedir(), ".config", "grafana-bridge", "browser-data");
+export class Authenticator {
+    grafanaUrl;
+    loginTimeoutMs;
+    logger;
+    constructor(grafanaUrl, loginTimeoutMs, logger) {
+        this.grafanaUrl = grafanaUrl;
+        this.loginTimeoutMs = loginTimeoutMs;
+        this.logger = logger;
+    }
+    async authenticate() {
+        this.logger.info("Opening browser for SSO login...");
+        const context = await chromium.launchPersistentContext(BROWSER_DATA_DIR, {
+            headless: false,
+            viewport: { width: 480, height: 640 },
+        });
+        try {
+            const page = context.pages()[0] ?? (await context.newPage());
+            try {
+                await page.goto(this.grafanaUrl);
+            }
+            catch (err) {
+                throw new Error(`Browser closed before authentication completed`);
+            }
+            return await new Promise((resolve, reject) => {
+                const timeout = setTimeout(() => {
+                    cleanup();
+                    context.close().catch(() => { });
+                    reject(new Error(`SSO login timed out after ${this.loginTimeoutMs}ms`));
+                }, this.loginTimeoutMs);
+                context.on("close", () => {
+                    cleanup();
+                    clearTimeout(timeout);
+                    reject(new Error("Browser closed before authentication completed"));
+                });
+                const checkCookies = async () => {
+                    try {
+                        const cookies = await context.cookies(this.grafanaUrl);
+                        const session = cookies.find((c) => c.name === "grafana_session");
+                        const expiry = cookies.find((c) => c.name === "grafana_session_expiry");
+                        if (session?.value && expiry?.value) {
+                            const expiryNum = parseInt(expiry.value, 10);
+                            if (isNaN(expiryNum))
+                                return;
+                            if (expiryNum * 1000 > Date.now()) {
+                                cleanup();
+                                clearTimeout(timeout);
+                                const expiresAt = new Date(expiryNum * 1000).toISOString();
+                                this.logger.info("SSO login successful");
+                                this.logger.info(`Session expires at ${expiresAt}`);
+                                await page.close();
+                                await context.close();
+                                resolve({
+                                    grafanaSession: session.value,
+                                    grafanaSessionExpiry: expiryNum,
+                                });
+                            }
+                        }
+                    }
+                    catch {
+                        // Browser may be navigating, ignore transient errors
+                    }
+                };
+                const cleanup = () => {
+                    page.removeListener("framenavigated", checkCookies);
+                };
+                page.on("framenavigated", checkCookies);
+                checkCookies();
+            });
+        }
+        catch (err) {
+            await context.close().catch(() => { });
+            throw err;
+        }
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAItC,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAChC,EAAE,CAAC,OAAO,EAAE,EACZ,SAAS,EACT,gBAAgB,EAChB,cAAc,CACf,CAAC;AAEF,MAAM,OAAO,aAAa;IAChB,UAAU,CAAS;IACnB,cAAc,CAAS;IACvB,MAAM,CAAS;IAEvB,YAAY,UAAkB,EAAE,cAAsB,EAAE,MAAc;QACpE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAErD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,uBAAuB,CAAC,gBAAgB,EAAE;YACvE,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE;SACtC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAE7D,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACnC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACpE,CAAC;YAED,OAAO,MAAM,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACxD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC9B,OAAO,EAAE,CAAC;oBACV,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBAChC,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC;gBAC1E,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;gBAExB,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;oBACvB,OAAO,EAAE,CAAC;oBACV,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC,CAAC;gBACtE,CAAC,CAAC,CAAC;gBAEH,MAAM,YAAY,GAAG,KAAK,IAAmB,EAAE;oBAC7C,IAAI,CAAC;wBACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;wBACvD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC;wBAClE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CACzB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,wBAAwB,CAC3C,CAAC;wBAEF,IAAI,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,KAAK,EAAE,CAAC;4BACpC,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;4BAC7C,IAAI,KAAK,CAAC,SAAS,CAAC;gCAAE,OAAO;4BAC7B,IAAI,SAAS,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gCAClC,OAAO,EAAE,CAAC;gCACV,YAAY,CAAC,OAAO,CAAC,CAAC;gCAEtB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;gCAC3D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;gCACzC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,SAAS,EAAE,CAAC,CAAC;gCAEpD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;gCACnB,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;gCAEtB,OAAO,CAAC;oCACN,cAAc,EAAE,OAAO,CAAC,KAAK;oCAC7B,oBAAoB,EAAE,SAAS;iCAChC,CAAC,CAAC;4BACL,CAAC;wBACH,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,qDAAqD;oBACvD,CAAC;gBACH,CAAC,CAAC;gBAEF,MAAM,OAAO,GAAG,GAAG,EAAE;oBACnB,IAAI,CAAC,cAAc,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC;gBACtD,CAAC,CAAC;gBAEF,IAAI,CAAC,EAAE,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC;gBACxC,YAAY,EAAE,CAAC;YACjB,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACtC,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;CACF"}

package/dist/config.d.ts

@@ -0,0 +1,14 @@
+import type { Config } from "./types.js";
+export type CliFlags = Partial<{
+    instance: string;
+    grafanaUrl: string;
+    port: string;
+    config: string;
+    loginTimeout: string;
+    sessionFile: string;
+    verbose: boolean;
+    mcp: boolean;
+    contextFile: string;
+}>;
+export declare function resolveInstanceUrl(input: string): string;
+export declare function resolveConfig(cli: CliFlags): Config;

package/dist/config.js

@@ -0,0 +1,94 @@
+import fs from "node:fs";
+import path from "node:path";
+import os from "node:os";
+import { parse as parseYaml } from "yaml";
+const DEFAULT_PORT = 4000;
+const DEFAULT_LOGIN_TIMEOUT_MS = 120_000;
+const DEFAULT_CONFIG_PATHS = [
+    "./grafana-bridge.yaml",
+    path.join(os.homedir(), ".config", "grafana-bridge", "config.yaml"),
+];
+function defaultSessionFile() {
+    return path.join(os.homedir(), ".config", "grafana-bridge", "session.json");
+}
+function loadYaml(configPath) {
+    const paths = configPath ? [configPath] : DEFAULT_CONFIG_PATHS;
+    for (const p of paths) {
+        const resolved = p.startsWith("~")
+            ? path.join(os.homedir(), p.slice(1))
+            : path.resolve(p);
+        if (fs.existsSync(resolved)) {
+            const content = fs.readFileSync(resolved, "utf-8");
+            return parseYaml(content) ?? {};
+        }
+    }
+    return {};
+}
+function loadEnv() {
+    const raw = {};
+    if (process.env.GRAFANA_BRIDGE_URL) {
+        raw.grafanaUrl = process.env.GRAFANA_BRIDGE_URL;
+    }
+    if (process.env.GRAFANA_BRIDGE_PORT) {
+        raw.port = parseInt(process.env.GRAFANA_BRIDGE_PORT, 10);
+    }
+    if (process.env.GRAFANA_BRIDGE_CONTEXT_FILE) {
+        raw.contextFile = process.env.GRAFANA_BRIDGE_CONTEXT_FILE;
+    }
+    return raw;
+}
+export function resolveInstanceUrl(input) {
+    try {
+        const url = new URL(input);
+        if (url.protocol === "http:" || url.protocol === "https:") {
+            return input;
+        }
+    }
+    catch {
+        // not a valid URL, treat as slug
+    }
+    return `https://${input}.grafana.net`;
+}
+export function resolveConfig(cli) {
+    const yaml = loadYaml(cli.config);
+    const env = loadEnv();
+    const instanceUrl = cli.instance
+        ? resolveInstanceUrl(cli.instance)
+        : undefined;
+    const grafanaUrl = instanceUrl ?? cli.grafanaUrl ?? env.grafanaUrl ?? yaml.grafanaUrl ?? "";
+    const port = (cli.port ? parseInt(cli.port, 10) : undefined) ??
+        env.port ??
+        yaml.port ??
+        DEFAULT_PORT;
+    const loginTimeoutMs = (cli.loginTimeout ? parseInt(cli.loginTimeout, 10) : undefined) ??
+        yaml.loginTimeoutMs ??
+        DEFAULT_LOGIN_TIMEOUT_MS;
+    const sessionFile = cli.sessionFile ?? yaml.sessionFile ?? defaultSessionFile();
+    const verbose = cli.verbose ?? yaml.verbose ?? false;
+    const mcp = cli.mcp ?? yaml.mcp ?? false;
+    const contextFileRaw = cli.contextFile ?? env.contextFile ?? yaml.contextFile;
+    if (!mcp && !grafanaUrl) {
+        console.error("Error: instance argument or --grafana-url is required (or set grafanaUrl in config / GRAFANA_BRIDGE_URL env var)");
+        process.exit(1);
+    }
+    if (isNaN(port) || port < 1 || port > 65535) {
+        console.error(`Error: invalid port "${cli.port ?? yaml.port}"`);
+        process.exit(1);
+    }
+    return {
+        grafanaUrl: grafanaUrl ? grafanaUrl.replace(/\/+$/, "") : "",
+        port,
+        loginTimeoutMs,
+        sessionFile: sessionFile.startsWith("~")
+            ? path.join(os.homedir(), sessionFile.slice(1))
+            : path.resolve(sessionFile),
+        verbose,
+        mcp,
+        contextFile: contextFileRaw
+            ? contextFileRaw.startsWith("~")
+                ? path.join(os.homedir(), contextFileRaw.slice(1))
+                : path.resolve(contextFileRaw)
+            : undefined,
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAG1C,MAAM,YAAY,GAAG,IAAI,CAAC;AAC1B,MAAM,wBAAwB,GAAG,OAAO,CAAC;AACzC,MAAM,oBAAoB,GAAG;IAC3B,uBAAuB;IACvB,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,aAAa,CAAC;CACpE,CAAC;AAEF,SAAS,kBAAkB;IACzB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC;AAC9E,CAAC;AAYD,SAAS,QAAQ,CAAC,UAAmB;IACnC,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC;IAE/D,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAChC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACrC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAEpB,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnD,OAAQ,SAAS,CAAC,OAAO,CAAe,IAAI,EAAE,CAAC;QACjD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,OAAO;IACd,MAAM,GAAG,GAAc,EAAE,CAAC;IAE1B,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;QACnC,GAAG,CAAC,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAClD,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;QACpC,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,CAAC;QAC5C,GAAG,CAAC,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;IAC5D,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAcD,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1D,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iCAAiC;IACnC,CAAC;IACD,OAAO,WAAW,KAAK,cAAc,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAa;IACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IAEtB,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ;QAC9B,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClC,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,UAAU,GACd,WAAW,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;IAC3E,MAAM,IAAI,GACR,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/C,GAAG,CAAC,IAAI;QACR,IAAI,CAAC,IAAI;QACT,YAAY,CAAC;IACf,MAAM,cAAc,GAClB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,IAAI,CAAC,cAAc;QACnB,wBAAwB,CAAC;IAC3B,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,IAAI,kBAAkB,EAAE,CAAC;IAChF,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IACrD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC;IACzC,MAAM,cAAc,GAAG,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC;IAE9E,IAAI,CAAC,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,OAAO,CAAC,KAAK,CACX,kHAAkH,CACnH,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QAC5C,OAAO,CAAC,KAAK,CAAC,wBAAwB,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO;QACL,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;QAC5D,IAAI;QACJ,cAAc;QACd,WAAW,EAAE,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC;YACtC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC/C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;QAC7B,OAAO;QACP,GAAG;QACH,WAAW,EAAE,cAAc;YACzB,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC;gBAC9B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAClD,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;YAChC,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,62 @@
+#!/usr/bin/env node
+import fs from "node:fs";
+import { Command } from "commander";
+import { resolveConfig } from "./config.js";
+import { Logger } from "./logger.js";
+import { SessionManager } from "./session.js";
+import { Authenticator } from "./auth.js";
+import { createProxyServer } from "./proxy.js";
+import { startMcpServer } from "./mcp.js";
+const program = new Command();
+program
+    .name("grafana-bridge")
+    .description("Local HTTP proxy that bridges CLI tools to Grafana Cloud instances behind SSO")
+    .version("0.1.0")
+    .argument("[instance]", "Grafana Cloud slug (e.g. 'mycompany') or full URL")
+    .option("-u, --grafana-url <url>", "Grafana instance URL")
+    .option("-p, --port <number>", "Local proxy port")
+    .option("-c, --config <path>", "Path to config file")
+    .option("--login-timeout <ms>", "SSO login timeout in ms")
+    .option("--session-file <path>", "Session persistence file path")
+    .option("--verbose", "Enable debug logging")
+    .option("--mcp", "Run as MCP server over stdio (for Claude Desktop)")
+    .option("--context-file <path>", "Markdown file with instructions for the LLM (MCP mode only)")
+    .action(async (instance, opts) => {
+    const config = resolveConfig({ ...opts, instance });
+    const logger = new Logger(config.verbose, config.mcp);
+    if (config.mcp) {
+        let instructions;
+        if (config.contextFile) {
+            if (!fs.existsSync(config.contextFile)) {
+                console.error(`Error: context file not found: ${config.contextFile}`);
+                process.exit(1);
+            }
+            instructions = fs.readFileSync(config.contextFile, "utf-8");
+        }
+        await startMcpServer(config.port, logger, config.grafanaUrl || undefined, instructions);
+        return;
+    }
+    const sessionManager = new SessionManager(config.sessionFile, logger);
+    const authenticator = new Authenticator(config.grafanaUrl, config.loginTimeoutMs, logger);
+    const hasSession = sessionManager.loadFromDisk();
+    if (!hasSession) {
+        logger.info("No saved session found, will authenticate when Grafana requires it");
+    }
+    const server = createProxyServer(config, sessionManager, authenticator, logger);
+    server.listen(config.port, () => {
+        console.log();
+        console.log(`  grafana-bridge v0.1.0`);
+        console.log(`  Proxy ready → http://localhost:${config.port} → ${config.grafanaUrl}`);
+        console.log();
+    });
+    const shutdown = () => {
+        logger.info("Shutting down...");
+        sessionManager.saveToDisk();
+        server.close(() => process.exit(0));
+        setTimeout(() => process.exit(1), 5000);
+    };
+    process.on("SIGINT", shutdown);
+    process.on("SIGTERM", shutdown);
+});
+program.parse();
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE1C,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,gBAAgB,CAAC;KACtB,WAAW,CACV,+EAA+E,CAChF;KACA,OAAO,CAAC,OAAO,CAAC;KAChB,QAAQ,CAAC,YAAY,EAAE,mDAAmD,CAAC;KAC3E,MAAM,CAAC,yBAAyB,EAAE,sBAAsB,CAAC;KACzD,MAAM,CAAC,qBAAqB,EAAE,kBAAkB,CAAC;KACjD,MAAM,CAAC,qBAAqB,EAAE,qBAAqB,CAAC;KACpD,MAAM,CAAC,sBAAsB,EAAE,yBAAyB,CAAC;KACzD,MAAM,CAAC,uBAAuB,EAAE,+BAA+B,CAAC;KAChE,MAAM,CAAC,WAAW,EAAE,sBAAsB,CAAC;KAC3C,MAAM,CAAC,OAAO,EAAE,mDAAmD,CAAC;KACpE,MAAM,CAAC,uBAAuB,EAAE,6DAA6D,CAAC;KAC9F,MAAM,CAAC,KAAK,EAAE,QAA4B,EAAE,IAAI,EAAE,EAAE;IACnD,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IAEtD,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QACf,IAAI,YAAgC,CAAC;QACrC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;gBACvC,OAAO,CAAC,KAAK,CAAC,kCAAkC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;gBACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,IAAI,SAAS,EAAE,YAAY,CAAC,CAAC;QACxF,OAAO;IACT,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACtE,MAAM,aAAa,GAAG,IAAI,aAAa,CACrC,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,cAAc,EACrB,MAAM,CACP,CAAC;IAEF,MAAM,UAAU,GAAG,cAAc,CAAC,YAAY,EAAE,CAAC;IACjD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,MAAM,GAAG,iBAAiB,CAC9B,MAAM,EACN,cAAc,EACd,aAAa,EACb,MAAM,CACP,CAAC;IAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;QAC9B,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CACT,oCAAoC,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,UAAU,EAAE,CACzE,CAAC;QACF,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAChC,cAAc,CAAC,UAAU,EAAE,CAAC;QAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAClC,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/logger.d.ts

@@ -0,0 +1,11 @@
+export type LogLevel = "debug" | "info" | "warn" | "error";
+export declare class Logger {
+    private stderrOnly;
+    private minLevel;
+    constructor(verbose: boolean, stderrOnly?: boolean);
+    debug(message: string): void;
+    info(message: string): void;
+    warn(message: string): void;
+    error(message: string): void;
+    private log;
+}

package/dist/logger.js

@@ -0,0 +1,40 @@
+const LEVEL_PRIORITY = {
+    debug: 0,
+    info: 1,
+    warn: 2,
+    error: 3,
+};
+export class Logger {
+    stderrOnly;
+    minLevel;
+    constructor(verbose, stderrOnly = false) {
+        this.stderrOnly = stderrOnly;
+        this.minLevel = verbose ? "debug" : "info";
+    }
+    debug(message) {
+        this.log("debug", message);
+    }
+    info(message) {
+        this.log("info", message);
+    }
+    warn(message) {
+        this.log("warn", message);
+    }
+    error(message) {
+        this.log("error", message);
+    }
+    log(level, message) {
+        if (LEVEL_PRIORITY[level] < LEVEL_PRIORITY[this.minLevel])
+            return;
+        const timestamp = new Date().toISOString();
+        const label = level.toUpperCase().padEnd(5);
+        const output = `[${timestamp}] ${label} ${message}`;
+        if (this.stderrOnly || level === "error" || level === "warn") {
+            console.error(output);
+        }
+        else {
+            console.log(output);
+        }
+    }
+}
+//# sourceMappingURL=logger.js.map

package/dist/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAEA,MAAM,cAAc,GAA6B;IAC/C,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;CACT,CAAC;AAEF,MAAM,OAAO,MAAM;IAGqB;IAF9B,QAAQ,CAAW;IAE3B,YAAY,OAAgB,EAAU,aAAa,KAAK;QAAlB,eAAU,GAAV,UAAU,CAAQ;QACtD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,OAAe;QACnB,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,CAAC,OAAe;QAClB,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED,IAAI,CAAC,OAAe;QAClB,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,OAAe;QACnB,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7B,CAAC;IAEO,GAAG,CAAC,KAAe,EAAE,OAAe;QAC1C,IAAI,cAAc,CAAC,KAAK,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO;QAElE,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,SAAS,KAAK,KAAK,IAAI,OAAO,EAAE,CAAC;QAEpD,IAAI,IAAI,CAAC,UAAU,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YAC7D,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;CACF"}

package/dist/mcp.d.ts

@@ -0,0 +1,17 @@
+import { z } from "zod";
+import type { Logger } from "./logger.js";
+type ProxyResponse = {
+    status: number;
+    body: string;
+};
+export declare function proxyFetch(port: number, method: string, path: string, body?: string): Promise<ProxyResponse>;
+declare const QueryInput: z.ZodObject<{
+    datasourceUid: z.ZodString;
+    query: z.ZodString;
+    from: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    to: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+}, z.core.$strip>;
+export declare function handleListDatasources(port: number, logger: Logger): Promise<string>;
+export declare function handleQuery(port: number, logger: Logger, input: z.infer<typeof QueryInput>): Promise<string>;
+export declare function startMcpServer(port: number, logger: Logger, grafanaUrl?: string, instructions?: string): Promise<void>;
+export {};

package/dist/mcp.js

@@ -0,0 +1,174 @@
+import http from "node:http";
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { ListToolsRequestSchema, CallToolRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
+import { z } from "zod";
+export function proxyFetch(port, method, path, body) {
+    return new Promise((resolve, reject) => {
+        const req = http.request({ hostname: "127.0.0.1", port, path, method, headers: body ? { "content-type": "application/json" } : {} }, (res) => {
+            const chunks = [];
+            res.on("data", (chunk) => chunks.push(chunk));
+            res.on("end", () => resolve({ status: res.statusCode, body: Buffer.concat(chunks).toString() }));
+        });
+        req.on("error", (err) => reject(err));
+        if (body)
+            req.write(body);
+        req.end();
+    });
+}
+function buildTools(grafanaUrl) {
+    const target = grafanaUrl ? ` on ${grafanaUrl}` : "";
+    return [
+        {
+            name: "list_datasources",
+            description: `List all configured Grafana datasources${target} with their name, UID, and type`,
+            inputSchema: {
+                type: "object",
+                properties: {},
+                required: [],
+            },
+        },
+        {
+            name: "query",
+            description: `Execute a query against a Grafana datasource${target}. Supports PostgreSQL (SQL), Prometheus (PromQL), and Loki (LogQL). ` +
+                "Automatically detects the datasource type from its UID and builds the correct query payload.",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    datasourceUid: {
+                        type: "string",
+                        description: "The UID of the datasource to query (from list_datasources)",
+                    },
+                    query: {
+                        type: "string",
+                        description: "The query string (SQL for PostgreSQL, PromQL for Prometheus, LogQL for Loki)",
+                    },
+                    from: {
+                        type: "string",
+                        description: "Start time (default: 'now-1h'). Accepts relative (now-1h) or absolute (ISO 8601) formats",
+                    },
+                    to: {
+                        type: "string",
+                        description: "End time (default: 'now'). Accepts relative (now) or absolute (ISO 8601) formats",
+                    },
+                },
+                required: ["datasourceUid", "query"],
+            },
+        },
+    ];
+}
+const QueryInput = z.object({
+    datasourceUid: z.string(),
+    query: z.string(),
+    from: z.string().optional().default("now-1h"),
+    to: z.string().optional().default("now"),
+});
+function detectDatasourceType(typeName) {
+    const lower = typeName.toLowerCase();
+    if (lower.includes("postgres"))
+        return "postgres";
+    if (lower.includes("prometheus") || lower.includes("mimir"))
+        return "prometheus";
+    if (lower.includes("loki"))
+        return "loki";
+    return null;
+}
+function buildQueryPayload(datasourceUid, dsType, query, from, to) {
+    const base = { from, to, queries: [] };
+    const queries = base.queries;
+    switch (dsType) {
+        case "postgres":
+            queries.push({
+                refId: "A",
+                datasource: { uid: datasourceUid },
+                rawSql: query,
+                format: "table",
+            });
+            break;
+        case "prometheus":
+            queries.push({
+                refId: "A",
+                datasource: { uid: datasourceUid },
+                expr: query,
+                range: true,
+                instant: false,
+            });
+            break;
+        case "loki":
+            queries.push({
+                refId: "A",
+                datasource: { uid: datasourceUid },
+                expr: query,
+                queryType: "range",
+            });
+            break;
+    }
+    return base;
+}
+export async function handleListDatasources(port, logger) {
+    const res = await proxyFetch(port, "GET", "/api/datasources");
+    if (res.status !== 200) {
+        throw new Error(`Proxy returned status ${res.status}: ${res.body}`);
+    }
+    const datasources = JSON.parse(res.body);
+    return JSON.stringify(datasources.map((ds) => ({ name: ds.name, uid: ds.uid, type: ds.type })), null, 2);
+}
+export async function handleQuery(port, logger, input) {
+    const dsRes = await proxyFetch(port, "GET", `/api/datasources/uid/${input.datasourceUid}`);
+    if (dsRes.status !== 200) {
+        throw new Error(`Failed to fetch datasource ${input.datasourceUid}: status ${dsRes.status}`);
+    }
+    const dsData = JSON.parse(dsRes.body);
+    const dsType = detectDatasourceType(dsData.type);
+    if (!dsType) {
+        throw new Error(`Unsupported datasource type "${dsData.type}" for datasource "${dsData.name}". ` +
+            `Supported types: PostgreSQL, Prometheus, Loki`);
+    }
+    logger.debug(`Querying datasource "${dsData.name}" (type: ${dsData.type}, mapped: ${dsType})`);
+    const payload = buildQueryPayload(input.datasourceUid, dsType, input.query, input.from, input.to);
+    const queryRes = await proxyFetch(port, "POST", "/api/ds/query", JSON.stringify(payload));
+    if (queryRes.status !== 200) {
+        throw new Error(`Query failed with status ${queryRes.status}: ${queryRes.body}`);
+    }
+    return queryRes.body;
+}
+export async function startMcpServer(port, logger, grafanaUrl, instructions) {
+    const tools = buildTools(grafanaUrl);
+    const server = new Server({ name: "grafana-bridge", version: "0.1.0" }, { capabilities: { tools: {} }, instructions });
+    server.setRequestHandler(ListToolsRequestSchema, async () => ({
+        tools,
+    }));
+    server.setRequestHandler(CallToolRequestSchema, async (request) => {
+        const { name, arguments: args } = request.params;
+        try {
+            switch (name) {
+                case "list_datasources": {
+                    const result = await handleListDatasources(port, logger);
+                    return { content: [{ type: "text", text: result }] };
+                }
+                case "query": {
+                    const input = QueryInput.parse(args);
+                    const result = await handleQuery(port, logger, input);
+                    return { content: [{ type: "text", text: result }] };
+                }
+                default:
+                    return {
+                        content: [{ type: "text", text: `Unknown tool: ${name}` }],
+                        isError: true,
+                    };
+            }
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            logger.error(`Tool "${name}" failed: ${message}`);
+            return {
+                content: [{ type: "text", text: `Error: ${message}` }],
+                isError: true,
+            };
+        }
+    });
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    logger.info(`MCP server started (proxy: http://127.0.0.1:${port})`);
+}
+//# sourceMappingURL=mcp.js.map

package/dist/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EACL,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,MAAM,UAAU,UAAU,CACxB,IAAY,EACZ,MAAc,EACd,IAAY,EACZ,IAAa;IAEb,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CACtB,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAC1G,CAAC,GAAG,EAAE,EAAE;YACN,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CACjB,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,UAAW,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAC7E,CAAC;QACJ,CAAC,CACF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACtC,IAAI,IAAI;YAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,UAAmB;IACrC,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,OAAO,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAErD,OAAO;QACL;YACE,IAAI,EAAE,kBAAkB;YACxB,WAAW,EACT,0CAA0C,MAAM,iCAAiC;YACnF,WAAW,EAAE;gBACX,IAAI,EAAE,QAAiB;gBACvB,UAAU,EAAE,EAAE;gBACd,QAAQ,EAAE,EAAE;aACb;SACF;QACD;YACE,IAAI,EAAE,OAAO;YACb,WAAW,EACT,+CAA+C,MAAM,sEAAsE;gBAC3H,8FAA8F;YAChG,WAAW,EAAE;gBACX,IAAI,EAAE,QAAiB;gBACvB,UAAU,EAAE;oBACV,aAAa,EAAE;wBACb,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,4DAA4D;qBAC/D;oBACD,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,8EAA8E;qBACjF;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,0FAA0F;qBAC7F;oBACD,EAAE,EAAE;wBACF,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,kFAAkF;qBACrF;iBACF;gBACD,QAAQ,EAAE,CAAC,eAAe,EAAE,OAAO,CAAC;aACrC;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC7C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACzC,CAAC,CAAC;AAIH,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IAClD,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,YAAY,CAAC;IACjF,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC1C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CACxB,aAAqB,EACrB,MAAsB,EACtB,KAAa,EACb,IAAY,EACZ,EAAU;IAEV,MAAM,IAAI,GAA4B,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAA+B,EAAE,CAAC;IAC7F,MAAM,OAAO,GAAG,IAAI,CAAC,OAAoC,CAAC;IAE1D,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,UAAU;YACb,OAAO,CAAC,IAAI,CAAC;gBACX,KAAK,EAAE,GAAG;gBACV,UAAU,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE;gBAClC,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,OAAO;aAChB,CAAC,CAAC;YACH,MAAM;QACR,KAAK,YAAY;YACf,OAAO,CAAC,IAAI,CAAC;gBACX,KAAK,EAAE,GAAG;gBACV,UAAU,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE;gBAClC,IAAI,EAAE,KAAK;gBACX,KAAK,EAAE,IAAI;gBACX,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;YACH,MAAM;QACR,KAAK,MAAM;YACT,OAAO,CAAC,IAAI,CAAC;gBACX,KAAK,EAAE,GAAG;gBACV,UAAU,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE;gBAClC,IAAI,EAAE,KAAK;gBACX,SAAS,EAAE,OAAO;aACnB,CAAC,CAAC;YACH,MAAM;IACV,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAY,EACZ,MAAc;IAEd,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAE9D,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAIrC,CAAC;IAEH,OAAO,IAAI,CAAC,SAAS,CACnB,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,EACxE,IAAI,EACJ,CAAC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAY,EACZ,MAAc,EACd,KAAiC;IAEjC,MAAM,KAAK,GAAG,MAAM,UAAU,CAC5B,IAAI,EACJ,KAAK,EACL,wBAAwB,KAAK,CAAC,aAAa,EAAE,CAC9C,CAAC;IAEF,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,8BAA8B,KAAK,CAAC,aAAa,YAAY,KAAK,CAAC,MAAM,EAAE,CAC5E,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAmC,CAAC;IACxE,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAEjD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,gCAAgC,MAAM,CAAC,IAAI,qBAAqB,MAAM,CAAC,IAAI,KAAK;YAC9E,+CAA+C,CAClD,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,KAAK,CACV,wBAAwB,MAAM,CAAC,IAAI,YAAY,MAAM,CAAC,IAAI,aAAa,MAAM,GAAG,CACjF,CAAC;IAEF,MAAM,OAAO,GAAG,iBAAiB,CAC/B,KAAK,CAAC,aAAa,EACnB,MAAM,EACN,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,EAAE,CACT,CAAC;IAEF,MAAM,QAAQ,GAAG,MAAM,UAAU,CAC/B,IAAI,EACJ,MAAM,EACN,eAAe,EACf,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CACxB,CAAC;IAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,4BAA4B,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,EAAE,CAChE,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAY,EACZ,MAAc,EACd,UAAmB,EACnB,YAAqB;IAErB,MAAM,KAAK,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IAErC,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,EAC5C,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,CAC9C,CAAC;IAEF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC5D,KAAK;KACN,CAAC,CAAC,CAAC;IAEJ,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QAEjD,IAAI,CAAC;YACH,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,kBAAkB,CAAC,CAAC,CAAC;oBACxB,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;oBACzD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;gBAChE,CAAC;gBACD,KAAK,OAAO,CAAC,CAAC,CAAC;oBACb,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACrC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;oBACtD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;gBAChE,CAAC;gBACD;oBACE,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAC;wBACnE,OAAO,EAAE,IAAI;qBACd,CAAC;YACN,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,aAAa,OAAO,EAAE,CAAC,CAAC;YAClD,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,CAAC,IAAI,CAAC,+CAA+C,IAAI,GAAG,CAAC,CAAC;AACtE,CAAC"}

package/dist/proxy.d.ts

@@ -0,0 +1,6 @@
+import http from "node:http";
+import type { Config } from "./types.js";
+import type { SessionManager } from "./session.js";
+import type { Authenticator } from "./auth.js";
+import type { Logger } from "./logger.js";
+export declare function createProxyServer(config: Config, sessionManager: SessionManager, authenticator: Authenticator, logger: Logger): http.Server;

package/dist/proxy.js

@@ -0,0 +1,124 @@
+import http from "node:http";
+import https from "node:https";
+const MAX_RETRIES = 3;
+function buildCookieHeader(existing, session) {
+    const filtered = existing
+        ? existing
+            .split(";")
+            .map((c) => c.trim())
+            .filter((c) => !c.startsWith("grafana_session=") &&
+            !c.startsWith("grafana_session_expiry="))
+        : [];
+    filtered.push(`grafana_session=${session.grafanaSession}`);
+    filtered.push(`grafana_session_expiry=${session.grafanaSessionExpiry}`);
+    return filtered.join("; ");
+}
+function bufferBody(req) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        req.on("data", (chunk) => chunks.push(chunk));
+        req.on("end", () => resolve(Buffer.concat(chunks)));
+        req.on("error", reject);
+    });
+}
+async function forwardWithAuth(req, res, body, config, sessionManager, authenticator, logger, retryCount = 0) {
+    if (retryCount >= MAX_RETRIES) {
+        logger.error(`Auth failed after ${MAX_RETRIES} retries for ${req.method} ${req.url}`);
+        res.writeHead(401, { "Content-Type": "application/json" });
+        res.end(JSON.stringify({ error: "Authentication failed after retries" }));
+        return;
+    }
+    const session = sessionManager.getSession();
+    const targetUrl = new URL(req.url, config.grafanaUrl);
+    const isHttps = targetUrl.protocol === "https:";
+    const requester = isHttps ? https : http;
+    const headers = { ...req.headers, host: targetUrl.host };
+    delete headers["connection"];
+    if (session) {
+        headers.cookie = buildCookieHeader(headers.cookie, session);
+    }
+    else {
+        logger.debug("No session available, forwarding without auth cookies");
+    }
+    return new Promise((resolve) => {
+        const upstream = requester.request({
+            hostname: targetUrl.hostname,
+            port: targetUrl.port || (isHttps ? 443 : 80),
+            path: targetUrl.pathname + targetUrl.search,
+            method: req.method,
+            headers,
+        }, async (upstreamRes) => {
+            if (upstreamRes.statusCode === 401) {
+                upstreamRes.resume();
+                logger.warn(`Got 401 for ${req.method} ${req.url}, re-authenticating (retry ${retryCount + 1}/${MAX_RETRIES})`);
+                await sessionManager.clearSession();
+                try {
+                    await sessionManager.ensureValidSession(() => authenticator.authenticate());
+                    await forwardWithAuth(req, res, body, config, sessionManager, authenticator, logger, retryCount + 1);
+                }
+                catch (err) {
+                    logger.error(`Re-authentication failed: ${err}`);
+                    if (!res.headersSent) {
+                        res.writeHead(401, { "Content-Type": "application/json" });
+                        res.end(JSON.stringify({ error: "Authentication failed" }));
+                    }
+                }
+                resolve();
+                return;
+            }
+            const responseHeaders = { ...upstreamRes.headers };
+            delete responseHeaders["transfer-encoding"];
+            logger.debug(`${req.method} ${req.url} -> ${upstreamRes.statusCode}`);
+            res.writeHead(upstreamRes.statusCode, responseHeaders);
+            upstreamRes.pipe(res);
+            upstreamRes.on("end", resolve);
+            upstreamRes.on("error", resolve);
+        });
+        upstream.on("error", (err) => {
+            logger.error(`Upstream request failed: ${err.message}`);
+            if (!res.headersSent) {
+                res.writeHead(502, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({ error: "Failed to reach Grafana", details: err.message }));
+            }
+            resolve();
+        });
+        upstream.end(body);
+    });
+}
+export function createProxyServer(config, sessionManager, authenticator, logger) {
+    const server = http.createServer(async (req, res) => {
+        if (req.url === "/health") {
+            res.writeHead(200, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ status: "ok", target: config.grafanaUrl }));
+            return;
+        }
+        if (req.url === "/auth" && req.method === "POST") {
+            try {
+                const session = await sessionManager.ensureValidSession(() => authenticator.authenticate());
+                res.writeHead(200, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({
+                    status: "authenticated",
+                    expiresAt: new Date(session.grafanaSessionExpiry * 1000).toISOString(),
+                }));
+            }
+            catch (err) {
+                res.writeHead(500, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({ error: "Authentication failed", details: String(err) }));
+            }
+            return;
+        }
+        try {
+            const body = await bufferBody(req);
+            await forwardWithAuth(req, res, body, config, sessionManager, authenticator, logger);
+        }
+        catch (err) {
+            logger.error(`Unhandled error: ${err}`);
+            if (!res.headersSent) {
+                res.writeHead(500, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({ error: "Internal proxy error" }));
+            }
+        }
+    });
+    return server;
+}
+//# sourceMappingURL=proxy.js.map

package/dist/proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,MAAM,YAAY,CAAC;AAM/B,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB,SAAS,iBAAiB,CACxB,QAA4B,EAC5B,OAAoB;IAEpB,MAAM,QAAQ,GAAG,QAAQ;QACvB,CAAC,CAAC,QAAQ;aACL,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC;YACjC,CAAC,CAAC,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAC3C;QACL,CAAC,CAAC,EAAE,CAAC;IACP,QAAQ,CAAC,IAAI,CAAC,mBAAmB,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC3D,QAAQ,CAAC,IAAI,CAAC,0BAA0B,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IACxE,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,UAAU,CAAC,GAAyB;IAC3C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,GAAyB,EACzB,GAAwB,EACxB,IAAY,EACZ,MAAc,EACd,cAA8B,EAC9B,aAA4B,EAC5B,MAAc,EACd,UAAU,GAAG,CAAC;IAEd,IAAI,UAAU,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,qBAAqB,WAAW,gBAAgB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QACtF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC,CAAC,CAAC;QAC1E,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,EAAE,CAAC;IAE5C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAI,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC;IAChD,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAEzC,MAAM,OAAO,GAA6B,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC;IACnF,OAAO,OAAO,CAAC,YAAY,CAAC,CAAC;IAE7B,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,MAA4B,EAAE,OAAO,CAAC,CAAC;IACpF,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACnC,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAChC;YACE,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,MAAM;YAC3C,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO;SACR,EACD,KAAK,EAAE,WAAW,EAAE,EAAE;YACpB,IAAI,WAAW,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;gBACnC,WAAW,CAAC,MAAM,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,CACT,eAAe,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,8BAA8B,UAAU,GAAG,CAAC,IAAI,WAAW,GAAG,CACnG,CAAC;gBACF,MAAM,cAAc,CAAC,YAAY,EAAE,CAAC;gBACpC,IAAI,CAAC;oBACH,MAAM,cAAc,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAC3C,aAAa,CAAC,YAAY,EAAE,CAC7B,CAAC;oBACF,MAAM,eAAe,CACnB,GAAG,EACH,GAAG,EACH,IAAI,EACJ,MAAM,EACN,cAAc,EACd,aAAa,EACb,MAAM,EACN,UAAU,GAAG,CAAC,CACf,CAAC;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,KAAK,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAC;oBACjD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;wBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;wBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;oBAC9D,CAAC;gBACH,CAAC;gBACD,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YAED,MAAM,eAAe,GAAG,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC;YACnD,OAAO,eAAe,CAAC,mBAAmB,CAAC,CAAC;YAE5C,MAAM,CAAC,KAAK,CACV,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,WAAW,CAAC,UAAU,EAAE,CACxD,CAAC;YAEF,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,UAAW,EAAE,eAAe,CAAC,CAAC;YACxD,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtB,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC/B,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnC,CAAC,CACF,CAAC;QAEF,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAC3B,MAAM,CAAC,KAAK,CAAC,4BAA4B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACxD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACtF,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,cAA8B,EAC9B,aAA4B,EAC5B,MAAc;IAEd,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAClD,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC1B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACjD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAC3D,aAAa,CAAC,YAAY,EAAE,CAC7B,CAAC;gBACF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,MAAM,EAAE,eAAe;oBACvB,SAAS,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;iBACvE,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACpF,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;YACnC,MAAM,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;QACvF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,oBAAoB,GAAG,EAAE,CAAC,CAAC;YACxC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/session.d.ts

@@ -0,0 +1,14 @@
+import type { SessionData } from "./types.js";
+import type { Logger } from "./logger.js";
+export declare class SessionManager {
+    private session;
+    private mutex;
+    private sessionFile;
+    private logger;
+    constructor(sessionFile: string, logger: Logger);
+    getSession(): SessionData | null;
+    loadFromDisk(): boolean;
+    ensureValidSession(authenticate: () => Promise<SessionData>): Promise<SessionData>;
+    clearSession(): Promise<void>;
+    saveToDisk(): void;
+}

package/dist/session.js

@@ -0,0 +1,66 @@
+import fs from "node:fs";
+import path from "node:path";
+import { Mutex } from "async-mutex";
+export class SessionManager {
+    session = null;
+    mutex = new Mutex();
+    sessionFile;
+    logger;
+    constructor(sessionFile, logger) {
+        this.sessionFile = sessionFile;
+        this.logger = logger;
+    }
+    getSession() {
+        return this.session;
+    }
+    loadFromDisk() {
+        try {
+            if (!fs.existsSync(this.sessionFile))
+                return false;
+            const raw = JSON.parse(fs.readFileSync(this.sessionFile, "utf-8"));
+            if (raw.grafanaSession && raw.grafanaSessionExpiry) {
+                this.session = {
+                    grafanaSession: raw.grafanaSession,
+                    grafanaSessionExpiry: raw.grafanaSessionExpiry,
+                };
+                const expiresAt = new Date(this.session.grafanaSessionExpiry * 1000).toISOString();
+                this.logger.info(`Loaded session from disk (expiry metadata: ${expiresAt})`);
+                return true;
+            }
+        }
+        catch {
+            this.logger.warn("Failed to load session from disk");
+        }
+        return false;
+    }
+    async ensureValidSession(authenticate) {
+        return this.mutex.runExclusive(async () => {
+            if (this.session) {
+                return this.session;
+            }
+            this.session = await authenticate();
+            this.saveToDisk();
+            return this.session;
+        });
+    }
+    async clearSession() {
+        return this.mutex.runExclusive(async () => {
+            this.session = null;
+            this.logger.warn("Session cleared");
+        });
+    }
+    saveToDisk() {
+        if (!this.session)
+            return;
+        try {
+            const dir = path.dirname(this.sessionFile);
+            fs.mkdirSync(dir, { recursive: true });
+            fs.writeFileSync(this.sessionFile, JSON.stringify(this.session, null, 2), { mode: 0o600 });
+            this.logger.debug(`Session saved to ${this.sessionFile}`);
+        }
+        catch (err) {
+            this.logger.error(`Failed to save session: ${err}`);
+        }
+    }
+}
+//# sourceMappingURL=session.js.map

package/dist/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAIpC,MAAM,OAAO,cAAc;IACjB,OAAO,GAAuB,IAAI,CAAC;IACnC,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC;IACpB,WAAW,CAAS;IACpB,MAAM,CAAS;IAEvB,YAAY,WAAmB,EAAE,MAAc;QAC7C,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,YAAY;QACV,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;gBAAE,OAAO,KAAK,CAAC;YAEnD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;YACnE,IAAI,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,oBAAoB,EAAE,CAAC;gBACnD,IAAI,CAAC,OAAO,GAAG;oBACb,cAAc,EAAE,GAAG,CAAC,cAAc;oBAClC,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;iBAC/C,CAAC;gBAEF,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;gBACnF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8CAA8C,SAAS,GAAG,CAAC,CAAC;gBAC7E,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,YAAwC;QAExC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,IAAI,EAAE;YACxC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO,IAAI,CAAC,OAAO,CAAC;YACtB,CAAC;YAED,IAAI,CAAC,OAAO,GAAG,MAAM,YAAY,EAAE,CAAC;YACpC,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,OAAO,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,IAAI,EAAE;YACxC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,UAAU;QACR,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE1B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC3C,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EACrC,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;CACF"}

package/dist/types.d.ts

@@ -0,0 +1,13 @@
+export type Config = {
+    grafanaUrl: string;
+    port: number;
+    loginTimeoutMs: number;
+    sessionFile: string;
+    verbose: boolean;
+    mcp: boolean;
+    contextFile?: string;
+};
+export type SessionData = {
+    grafanaSession: string;
+    grafanaSessionExpiry: number;
+};

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,50 @@
+{
+  "name": "grafana-bridge",
+  "version": "0.1.0",
+  "description": "Local HTTP proxy that bridges CLI tools to Grafana Cloud instances behind SSO",
+  "type": "module",
+  "bin": {
+    "grafana-bridge": "./dist/index.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx src/index.ts",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "prepublishOnly": "npm run build",
+    "postinstall": "npx playwright install chromium"
+  },
+  "keywords": [
+    "grafana",
+    "proxy",
+    "sso",
+    "authentication",
+    "cli"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/molaga/grafana-bridge.git"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.26.0",
+    "async-mutex": "^0.5.0",
+    "commander": "^12.1.0",
+    "playwright": "^1.49.0",
+    "yaml": "^2.6.0",
+    "zod": "^4.3.6"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "prettier": "^3.4.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.7.0",
+    "vitest": "^2.1.0"
+  }
+}