harper-knowledge 0.1.1 → 0.1.2

package/dist/oauth/authorize.d.ts

@@ -1,7 +1,7 @@
 /**
  * OAuth Authorization Endpoint
  *
- * GET /oauth/authorize — MCP OAuth 2.1 authorization endpoint.
+ * GET /mcp-auth/authorize — MCP OAuth 2.1 authorization endpoint.
  *
  * Shows a login page with GitHub as the primary auth method and a
  * subtle link to fall back to Harper credentials. If the user has an
@@ -13,7 +13,7 @@
  */
 import type { HarperRequest } from "../types.ts";
 /**
- * Handle GET /oauth/authorize
+ * Handle GET /mcp-auth/authorize
  *
  * Three modes:
  * 1. Returning from GitHub login (`pending` param) — complete authorization.
@@ -22,6 +22,6 @@ import type { HarperRequest } from "../types.ts";
  */
 export declare function handleAuthorizeGet(request: HarperRequest): Promise<Response>;
 /**
- * Handle POST /oauth/authorize — Harper credential login.
+ * Handle POST /mcp-auth/authorize — Harper credential login.
  */
 export declare function handleAuthorizePost(request: HarperRequest): Promise<Response>;

package/dist/oauth/authorize.js

@@ -1,7 +1,7 @@
 /**
  * OAuth Authorization Endpoint
  *
- * GET /oauth/authorize — MCP OAuth 2.1 authorization endpoint.
+ * GET /mcp-auth/authorize — MCP OAuth 2.1 authorization endpoint.
  *
  * Shows a login page with GitHub as the primary auth method and a
  * subtle link to fall back to Harper credentials. If the user has an
@@ -15,7 +15,7 @@ import crypto from "node:crypto";
 import { readBody, parseFormBody } from "../http-utils.js";
 import { checkOrgMembership } from "./github.js";
 /**
- * Handle GET /oauth/authorize
+ * Handle GET /mcp-auth/authorize
  *
  * Three modes:
  * 1. Returning from GitHub login (`pending` param) — complete authorization.
@@ -44,7 +44,7 @@ export async function handleAuthorizeGet(request) {
     return loginPage(params);
 }
 /**
- * Handle POST /oauth/authorize — Harper credential login.
+ * Handle POST /mcp-auth/authorize — Harper credential login.
  */
 export async function handleAuthorizePost(request) {
     let form;
@@ -266,7 +266,7 @@ async function buildGitHubLoginUrl(params) {
         redirectUri: params.redirect_uri,
         type: "pending",
     });
-    const returnPath = `/oauth/authorize?pending=${pendingId}`;
+    const returnPath = `/mcp-auth/authorize?pending=${pendingId}`;
     return `/oauth/github/login?redirect=${encodeURIComponent(returnPath)}`;
 }
 /**
@@ -361,7 +361,7 @@ async function loginPage(params, errorMsg) {
   <button type="button" class="cred-toggle" onclick="document.querySelector('.cred-form').classList.toggle('visible');this.style.display='none'">
     Sign in with Harper credentials
   </button>
-  <form method="POST" action="/oauth/authorize" class="cred-form${errorMsg ? " visible" : ""}">
+  <form method="POST" action="/mcp-auth/authorize" class="cred-form${errorMsg ? " visible" : ""}">
     <input type="hidden" name="client_id" value="${escapeAttr(params.client_id)}">
     <input type="hidden" name="redirect_uri" value="${escapeAttr(params.redirect_uri)}">
     <input type="hidden" name="response_type" value="${escapeAttr(params.response_type)}">

package/dist/oauth/metadata.js

@@ -32,10 +32,10 @@ export function handleAuthServerMetadata(request) {
     const baseUrl = getBaseUrl(request);
     return jsonResponse(200, {
         issuer: baseUrl,
-        authorization_endpoint: `${baseUrl}/oauth/authorize`,
-        token_endpoint: `${baseUrl}/oauth/token`,
-        registration_endpoint: `${baseUrl}/oauth/register`,
-        jwks_uri: `${baseUrl}/oauth/jwks`,
+        authorization_endpoint: `${baseUrl}/mcp-auth/authorize`,
+        token_endpoint: `${baseUrl}/mcp-auth/token`,
+        registration_endpoint: `${baseUrl}/mcp-auth/register`,
+        jwks_uri: `${baseUrl}/mcp-auth/jwks`,
         scopes_supported: SCOPES,
         response_types_supported: ["code"],
         grant_types_supported: ["authorization_code", "refresh_token"],

package/dist/oauth/middleware.d.ts

@@ -4,14 +4,14 @@
  * Route dispatcher for all OAuth endpoints. Registered via
  * scope.server.http() before the MCP and webhook middlewares.
  *
- * Routes:
+ * Routes (MCP OAuth 2.1 — separate from @harperfast/oauth's /oauth/* Resource):
  *   GET  /.well-known/oauth-protected-resource   → metadata
  *   GET  /.well-known/oauth-authorization-server  → metadata
- *   POST /oauth/register                          → DCR
- *   GET  /oauth/authorize                         → login page
- *   POST /oauth/authorize                         → credential validation + redirect
- *   POST /oauth/token                             → code exchange / refresh
- *   GET  /oauth/jwks                              → public key set
+ *   POST /mcp-auth/register                       → DCR
+ *   GET  /mcp-auth/authorize                      → login page
+ *   POST /mcp-auth/authorize                      → credential validation + redirect
+ *   POST /mcp-auth/token                          → code exchange / refresh
+ *   GET  /mcp-auth/jwks                           → public key set
  */
 import type { HarperRequest } from "../types.ts";
 type MiddlewareFn = (request: HarperRequest, next: (req: HarperRequest) => Promise<unknown>) => Promise<unknown>;

package/dist/oauth/middleware.js

@@ -4,14 +4,14 @@
  * Route dispatcher for all OAuth endpoints. Registered via
  * scope.server.http() before the MCP and webhook middlewares.
  *
- * Routes:
+ * Routes (MCP OAuth 2.1 — separate from @harperfast/oauth's /oauth/* Resource):
  *   GET  /.well-known/oauth-protected-resource   → metadata
  *   GET  /.well-known/oauth-authorization-server  → metadata
- *   POST /oauth/register                          → DCR
- *   GET  /oauth/authorize                         → login page
- *   POST /oauth/authorize                         → credential validation + redirect
- *   POST /oauth/token                             → code exchange / refresh
- *   GET  /oauth/jwks                              → public key set
+ *   POST /mcp-auth/register                       → DCR
+ *   GET  /mcp-auth/authorize                      → login page
+ *   POST /mcp-auth/authorize                      → credential validation + redirect
+ *   POST /mcp-auth/token                          → code exchange / refresh
+ *   GET  /mcp-auth/jwks                           → public key set
  */
 import { handleProtectedResourceMetadata, handleAuthServerMetadata, } from "./metadata.js";
 import { handleRegister } from "./register.js";
@@ -34,11 +34,12 @@ export function createOAuthMiddleware() {
             method === "GET") {
             return handleAuthServerMetadata(request);
         }
-        // OAuth endpoints
-        if (pathname === "/oauth/register" && method === "POST") {
+        // MCP OAuth endpoints (under /mcp-auth/ to avoid conflict with
+        // @harperfast/oauth's OAuthResource which owns the /oauth/* path)
+        if (pathname === "/mcp-auth/register" && method === "POST") {
             return handleRegister(request);
         }
-        if (pathname === "/oauth/authorize") {
+        if (pathname === "/mcp-auth/authorize") {
             if (method === "GET") {
                 return handleAuthorizeGet(request);
             }
@@ -46,10 +47,10 @@ export function createOAuthMiddleware() {
                 return handleAuthorizePost(request);
             }
         }
-        if (pathname === "/oauth/token" && method === "POST") {
+        if (pathname === "/mcp-auth/token" && method === "POST") {
             return handleToken(request);
         }
-        if (pathname === "/oauth/jwks" && method === "GET") {
+        if (pathname === "/mcp-auth/jwks" && method === "GET") {
             return new Response(JSON.stringify(await getJwks()), {
                 status: 200,
                 headers: {
@@ -58,7 +59,7 @@ export function createOAuthMiddleware() {
                 },
             });
         }
-        // Not an OAuth route — pass through
+        // Not a handled route — pass through
         return next(request);
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "harper-knowledge",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Knowledge base plugin for Harper with MCP server integration",
   "type": "module",
   "main": "dist/index.js",