llng-mcp 0.1.0

package/src/resources/documentation.ts

@@ -0,0 +1,65 @@
+import { McpServer, ResourceTemplate } from "@modelcontextprotocol/sdk/server/mcp.js";
+
+/**
+ * Register LLNG documentation resource template
+ */
+export function registerDocumentationResource(server: McpServer): void {
+  const template = new ResourceTemplate("llng://documentation/{page}", {
+    list: undefined, // No dynamic listing of documentation pages
+  });
+
+  server.resource(
+    "llng-documentation",
+    template,
+    { description: "Fetch Lemonldap-NG documentation page" },
+    async (uri, variables) => {
+      const page = variables.page as string;
+      const url = `https://lemonldap-ng.org/documentation/latest/${page}`;
+
+      try {
+        const resp = await fetch(url);
+        if (!resp.ok) {
+          throw new Error(`HTTP ${resp.status}: ${resp.statusText}`);
+        }
+
+        const html = await resp.text();
+
+        // Strip HTML tags for simple text extraction
+        const text = html
+          .replace(/<head[^>]*>[\s\S]*?<\/head>/gi, "")
+          .replace(/<script[^>]*>[\s\S]*?<\/script>/gi, "")
+          .replace(/<style[^>]*>[\s\S]*?<\/style>/gi, "")
+          .replace(/<[^>]*>/g, " ")
+          .replace(/&amp;/g, "&")
+          .replace(/&lt;/g, "<")
+          .replace(/&gt;/g, ">")
+          .replace(/&quot;/g, '"')
+          .replace(/&#39;/g, "'")
+          .replace(/&nbsp;/g, " ")
+          .replace(/\s+/g, " ")
+          .trim();
+
+        return {
+          contents: [
+            {
+              uri: uri.href,
+              mimeType: "text/plain",
+              text,
+            },
+          ],
+        };
+      } catch (e: unknown) {
+        const errorMessage = e instanceof Error ? e.message : String(e);
+        return {
+          contents: [
+            {
+              uri: uri.href,
+              mimeType: "text/plain",
+              text: `Error fetching documentation: ${errorMessage}`,
+            },
+          ],
+        };
+      }
+    },
+  );
+}

package/src/tools/cli-utilities.ts

@@ -0,0 +1,207 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z } from "zod";
+import { TransportRegistry } from "../transport/registry.js";
+
+export function registerCliUtilityTools(server: McpServer, registry: TransportRegistry): void {
+  // llng_download_saml_metadata
+  server.tool(
+    "llng_download_saml_metadata",
+    "Download SAML metadata from a remote IdP",
+    {
+      url: z.string().describe("URL of the remote SAML metadata"),
+      outputFile: z.string().optional().describe("Output file path for downloaded metadata"),
+      noCheck: z.boolean().optional().describe("Disable SSL certificate verification"),
+      verbose: z.boolean().optional().describe("Enable verbose output"),
+      instance: z.string().optional().describe("LLNG instance name (uses default if omitted)"),
+    },
+    async (params) => {
+      try {
+        const transport = registry.getTransport(params.instance);
+        const args: string[] = ["--url", params.url];
+        if (params.outputFile) args.push("--output-file", params.outputFile);
+        if (params.noCheck) args.push("--no-check");
+        if (params.verbose) args.push("--verbose");
+        const result = await transport.execScript("downloadSamlMetadata", args);
+        return { content: [{ type: "text", text: result }] };
+      } catch (e: unknown) {
+        return {
+          content: [{ type: "text", text: `Error: ${e instanceof Error ? e.message : String(e)}` }],
+          isError: true,
+        };
+      }
+    },
+  );
+
+  // llng_import_metadata
+  server.tool(
+    "llng_import_metadata",
+    "Import a SAML federation into LLNG config",
+    {
+      url: z.string().describe("URL of the SAML federation metadata"),
+      spPrefix: z.string().optional().describe("Prefix for SP entity IDs"),
+      idpPrefix: z.string().optional().describe("Prefix for IdP entity IDs"),
+      ignoreSp: z.array(z.string()).optional().describe("SP entity IDs to ignore"),
+      ignoreIdp: z.array(z.string()).optional().describe("IdP entity IDs to ignore"),
+      remove: z.boolean().optional().describe("Remove entities not in metadata"),
+      noCheck: z.boolean().optional().describe("Disable SSL certificate verification"),
+      verbose: z.boolean().optional().describe("Enable verbose output"),
+      instance: z.string().optional().describe("LLNG instance name (uses default if omitted)"),
+    },
+    async (params) => {
+      try {
+        const transport = registry.getTransport(params.instance);
+        const args: string[] = ["--url", params.url];
+        if (params.spPrefix) args.push("--sp-prefix", params.spPrefix);
+        if (params.idpPrefix) args.push("--idp-prefix", params.idpPrefix);
+        if (params.ignoreSp) {
+          for (const sp of params.ignoreSp) {
+            args.push("--ignore-sp", sp);
+          }
+        }
+        if (params.ignoreIdp) {
+          for (const idp of params.ignoreIdp) {
+            args.push("--ignore-idp", idp);
+          }
+        }
+        if (params.remove) args.push("--remove");
+        if (params.noCheck) args.push("--no-check");
+        if (params.verbose) args.push("--verbose");
+        const result = await transport.execScript("importMetadata", args);
+        return { content: [{ type: "text", text: result }] };
+      } catch (e: unknown) {
+        return {
+          content: [{ type: "text", text: `Error: ${e instanceof Error ? e.message : String(e)}` }],
+          isError: true,
+        };
+      }
+    },
+  );
+
+  // llng_delete_session
+  server.tool(
+    "llng_delete_session",
+    "Delete user sessions by UID pattern",
+    {
+      uid: z.string().describe("UID pattern to match for session deletion"),
+      force: z.boolean().optional().describe("Force deletion without confirmation"),
+      debug: z.boolean().optional().describe("Enable debug output"),
+      instance: z.string().optional().describe("LLNG instance name (uses default if omitted)"),
+    },
+    async (params) => {
+      try {
+        const transport = registry.getTransport(params.instance);
+        const args: string[] = ["--uid", params.uid];
+        if (params.force) args.push("--force");
+        if (params.debug) args.push("--debug");
+        const result = await transport.execScript("llngDeleteSession", args);
+        return { content: [{ type: "text", text: result }] };
+      } catch (e: unknown) {
+        return {
+          content: [{ type: "text", text: `Error: ${e instanceof Error ? e.message : String(e)}` }],
+          isError: true,
+        };
+      }
+    },
+  );
+
+  // llng_user_attributes
+  server.tool(
+    "llng_user_attributes",
+    "Look up user attributes",
+    {
+      username: z.string().describe("Username to look up"),
+      field: z.string().optional().describe("Specific field to return"),
+      instance: z.string().optional().describe("LLNG instance name (uses default if omitted)"),
+    },
+    async (params) => {
+      try {
+        const transport = registry.getTransport(params.instance);
+        const args: string[] = ["--username", params.username];
+        if (params.field) args.push("--field", params.field);
+        const result = await transport.execScript("llngUserAttributes", args);
+        return { content: [{ type: "text", text: result }] };
+      } catch (e: unknown) {
+        return {
+          content: [{ type: "text", text: `Error: ${e instanceof Error ? e.message : String(e)}` }],
+          isError: true,
+        };
+      }
+    },
+  );
+
+  // llng_purge_central_cache
+  server.tool(
+    "llng_purge_central_cache",
+    "Purge expired sessions from central cache",
+    {
+      debug: z.boolean().optional().describe("Enable debug output"),
+      force: z.boolean().optional().describe("Force purge without confirmation"),
+      json: z.boolean().optional().describe("Output in JSON format"),
+      instance: z.string().optional().describe("LLNG instance name (uses default if omitted)"),
+    },
+    async (params) => {
+      try {
+        const transport = registry.getTransport(params.instance);
+        const args: string[] = [];
+        if (params.debug) args.push("--debug");
+        if (params.force) args.push("--force");
+        if (params.json) args.push("--json");
+        const result = await transport.execScript("purgeCentralCache", args);
+        return { content: [{ type: "text", text: result }] };
+      } catch (e: unknown) {
+        return {
+          content: [{ type: "text", text: `Error: ${e instanceof Error ? e.message : String(e)}` }],
+          isError: true,
+        };
+      }
+    },
+  );
+
+  // llng_purge_local_cache
+  server.tool(
+    "llng_purge_local_cache",
+    "Purge local handler cache",
+    {
+      debug: z.boolean().optional().describe("Enable debug output"),
+      instance: z.string().optional().describe("LLNG instance name (uses default if omitted)"),
+    },
+    async (params) => {
+      try {
+        const transport = registry.getTransport(params.instance);
+        const args: string[] = [];
+        if (params.debug) args.push("--debug");
+        const result = await transport.execScript("purgeLocalCache", args);
+        return { content: [{ type: "text", text: result }] };
+      } catch (e: unknown) {
+        return {
+          content: [{ type: "text", text: `Error: ${e instanceof Error ? e.message : String(e)}` }],
+          isError: true,
+        };
+      }
+    },
+  );
+
+  // llng_rotate_oidc_keys
+  server.tool(
+    "llng_rotate_oidc_keys",
+    "Rotate OIDC signing keys",
+    {
+      debug: z.boolean().optional().describe("Enable debug output"),
+      instance: z.string().optional().describe("LLNG instance name (uses default if omitted)"),
+    },
+    async (params) => {
+      try {
+        const transport = registry.getTransport(params.instance);
+        const args: string[] = [];
+        if (params.debug) args.push("--debug");
+        const result = await transport.execScript("rotateOidcKeys", args);
+        return { content: [{ type: "text", text: result }] };
+      } catch (e: unknown) {
+        return {
+          content: [{ type: "text", text: `Error: ${e instanceof Error ? e.message : String(e)}` }],
+          isError: true,
+        };
+      }
+    },
+  );
+}

package/src/tools/config.ts

@@ -0,0 +1,382 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z } from "zod";
+import { TransportRegistry } from "../transport/registry.js";
+
+/**
+ * Register LLNG configuration management tools
+ */
+export function registerConfigTools(server: McpServer, registry: TransportRegistry): void {
+  // 1. llng_config_info - Get current LLNG config metadata
+  server.tool(
+    "llng_config_info",
+    "Get current LLNG config metadata (number, author, date)",
+    {
+      instance: z.string().optional().describe("LLNG instance name (uses default if omitted)"),
+    },
+    async (args) => {
+      try {
+        const transport = registry.getTransport(args.instance, "manager");
+        const result = await transport.configInfo();
+        return {
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(result, null, 2),
+            },
+          ],
+        };
+      } catch (error) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Error: ${error instanceof Error ? error.message : String(error)}`,
+            },
+          ],
+          isError: true,
+        };
+      }
+    },
+  );
+
+  // 2. llng_config_get - Get LLNG config value(s) by key
+  server.tool(
+    "llng_config_get",
+    "Get LLNG config value(s) by key",
+    {
+      keys: z.array(z.string()).describe("Array of config keys to retrieve"),
+      instance: z.string().optional().describe("LLNG instance name (uses default if omitted)"),
+    },
+    async (args) => {
+      try {
+        const transport = registry.getTransport(args.instance, "manager");
+        const result = await transport.configGet(args.keys);
+        return {
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(result, null, 2),
+            },
+          ],
+        };
+      } catch (error) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Error: ${error instanceof Error ? error.message : String(error)}`,
+            },
+          ],
+          isError: true,
+        };
+      }
+    },
+  );
+
+  // 3. llng_config_set - Set LLNG config value(s)
+  server.tool(
+    "llng_config_set",
+    "Set LLNG config value(s)",
+    {
+      keys: z.record(z.string(), z.any()).describe("Key-value pairs to set in config"),
+      log: z.string().optional().describe("Optional log message for this change"),
+      instance: z.string().optional().describe("LLNG instance name (uses default if omitted)"),
+    },
+    async (args) => {
+      try {
+        const transport = registry.getTransport(args.instance, "manager");
+        await transport.configSet(args.keys, args.log);
+        return {
+          content: [
+            {
+              type: "text",
+              text: "Config values updated successfully",
+            },
+          ],
+        };
+      } catch (error) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Error: ${error instanceof Error ? error.message : String(error)}`,
+            },
+          ],
+          isError: true,
+        };
+      }
+    },
+  );
+
+  // 4. llng_config_addKey - Add subkey to a composite LLNG config parameter
+  server.tool(
+    "llng_config_addKey",
+    "Add subkey to a composite LLNG config parameter",
+    {
+      key: z.string().describe("The composite config key"),
+      subkey: z.string().describe("The subkey to add"),
+      value: z.string().describe("The value for the subkey"),
+      instance: z.string().optional().describe("LLNG instance name (uses default if omitted)"),
+    },
+    async (args) => {
+      try {
+        const transport = registry.getTransport(args.instance, "manager");
+        await transport.configAddKey(args.key, args.subkey, args.value);
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Subkey '${args.subkey}' added to '${args.key}' successfully`,
+            },
+          ],
+        };
+      } catch (error) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Error: ${error instanceof Error ? error.message : String(error)}`,
+            },
+          ],
+          isError: true,
+        };
+      }
+    },
+  );
+
+  // 5. llng_config_delKey - Delete subkey from a composite LLNG config parameter
+  server.tool(
+    "llng_config_delKey",
+    "Delete subkey from a composite LLNG config parameter",
+    {
+      key: z.string().describe("The composite config key"),
+      subkey: z.string().describe("The subkey to delete"),
+      instance: z.string().optional().describe("LLNG instance name (uses default if omitted)"),
+    },
+    async (args) => {
+      try {
+        const transport = registry.getTransport(args.instance, "manager");
+        await transport.configDelKey(args.key, args.subkey);
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Subkey '${args.subkey}' deleted from '${args.key}' successfully`,
+            },
+          ],
+        };
+      } catch (error) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Error: ${error instanceof Error ? error.message : String(error)}`,
+            },
+          ],
+          isError: true,
+        };
+      }
+    },
+  );
+
+  // 6. llng_config_export - Export full LLNG config as JSON
+  server.tool(
+    "llng_config_export",
+    "Export full LLNG config as JSON",
+    {
+      instance: z.string().optional().describe("LLNG instance name (uses default if omitted)"),
+    },
+    async (args) => {
+      try {
+        const transport = registry.getTransport(args.instance, "manager");
+        const result = await transport.configSave();
+        return {
+          content: [
+            {
+              type: "text",
+              text: result,
+            },
+          ],
+        };
+      } catch (error) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Error: ${error instanceof Error ? error.message : String(error)}`,
+            },
+          ],
+          isError: true,
+        };
+      }
+    },
+  );
+
+  // 7. llng_config_import - Import LLNG config from JSON
+  server.tool(
+    "llng_config_import",
+    "Import LLNG config from JSON",
+    {
+      json: z.string().describe("JSON string of the config to import"),
+      instance: z.string().optional().describe("LLNG instance name (uses default if omitted)"),
+    },
+    async (args) => {
+      try {
+        const transport = registry.getTransport(args.instance, "manager");
+        await transport.configRestore(args.json);
+        return {
+          content: [
+            {
+              type: "text",
+              text: "Config imported successfully",
+            },
+          ],
+        };
+      } catch (error) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Error: ${error instanceof Error ? error.message : String(error)}`,
+            },
+          ],
+          isError: true,
+        };
+      }
+    },
+  );
+
+  // 8. llng_config_merge - Merge JSON snippet into LLNG config
+  server.tool(
+    "llng_config_merge",
+    "Merge JSON snippet into LLNG config",
+    {
+      json: z.string().describe("JSON string to merge into config"),
+      instance: z.string().optional().describe("LLNG instance name (uses default if omitted)"),
+    },
+    async (args) => {
+      try {
+        const transport = registry.getTransport(args.instance, "manager");
+        await transport.configMerge(args.json);
+        return {
+          content: [
+            {
+              type: "text",
+              text: "Config merged successfully",
+            },
+          ],
+        };
+      } catch (error) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Error: ${error instanceof Error ? error.message : String(error)}`,
+            },
+          ],
+          isError: true,
+        };
+      }
+    },
+  );
+
+  // 9. llng_config_rollback - Rollback LLNG config to previous version
+  server.tool(
+    "llng_config_rollback",
+    "Rollback LLNG config to previous version",
+    {
+      instance: z.string().optional().describe("LLNG instance name (uses default if omitted)"),
+    },
+    async (args) => {
+      try {
+        const transport = registry.getTransport(args.instance, "manager");
+        await transport.configRollback();
+        return {
+          content: [
+            {
+              type: "text",
+              text: "Config rolled back successfully",
+            },
+          ],
+        };
+      } catch (error) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Error: ${error instanceof Error ? error.message : String(error)}`,
+            },
+          ],
+          isError: true,
+        };
+      }
+    },
+  );
+
+  // 10. llng_config_update_cache - Force LLNG config cache update
+  server.tool(
+    "llng_config_update_cache",
+    "Force LLNG config cache update",
+    {
+      instance: z.string().optional().describe("LLNG instance name (uses default if omitted)"),
+    },
+    async (args) => {
+      try {
+        const transport = registry.getTransport(args.instance, "manager");
+        await transport.configUpdateCache();
+        return {
+          content: [
+            {
+              type: "text",
+              text: "Config cache updated successfully",
+            },
+          ],
+        };
+      } catch (error) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Error: ${error instanceof Error ? error.message : String(error)}`,
+            },
+          ],
+          isError: true,
+        };
+      }
+    },
+  );
+
+  // 11. llng_config_test_email - Send a test email to verify SMTP settings
+  server.tool(
+    "llng_config_test_email",
+    "Send a test email to verify SMTP settings",
+    {
+      destination: z.string().describe("Email address to send the test email to"),
+      instance: z.string().optional().describe("LLNG instance name (uses default if omitted)"),
+    },
+    async (args) => {
+      try {
+        const transport = registry.getTransport(args.instance, "manager");
+        await transport.configTestEmail(args.destination);
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Test email sent successfully to ${args.destination}`,
+            },
+          ],
+        };
+      } catch (error) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Error: ${error instanceof Error ? error.message : String(error)}`,
+            },
+          ],
+          isError: true,
+        };
+      }
+    },
+  );
+}

package/src/tools/consents.ts

@@ -0,0 +1,50 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z } from "zod";
+import { TransportRegistry } from "../transport/registry.js";
+
+export function registerConsentTools(server: McpServer, registry: TransportRegistry): void {
+  server.tool(
+    "llng_consent_list",
+    "List user's OIDC consents",
+    {
+      user: z.string(),
+      instance: z.string().optional().describe("LLNG instance name (uses default if omitted)"),
+    },
+    async (params) => {
+      try {
+        const transport = registry.getTransport(params.instance);
+        const result = await transport.consentsGet(params.user);
+        return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+      } catch (e: unknown) {
+        return {
+          content: [{ type: "text", text: `Error: ${e instanceof Error ? e.message : String(e)}` }],
+          isError: true,
+        };
+      }
+    },
+  );
+
+  server.tool(
+    "llng_consent_delete",
+    "Delete user's OIDC consent(s)",
+    {
+      user: z.string(),
+      ids: z.array(z.string()),
+      instance: z.string().optional().describe("LLNG instance name (uses default if omitted)"),
+    },
+    async (params) => {
+      try {
+        const transport = registry.getTransport(params.instance);
+        await transport.consentsDelete(params.user, params.ids);
+        return {
+          content: [{ type: "text", text: `Successfully deleted ${params.ids.length} consent(s)` }],
+        };
+      } catch (e: unknown) {
+        return {
+          content: [{ type: "text", text: `Error: ${e instanceof Error ? e.message : String(e)}` }],
+          isError: true,
+        };
+      }
+    },
+  );
+}