mcp-creatio 0.3.10 → 0.4.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (225) hide show
  1. package/README.md +117 -108
  2. package/dist/cli.d.ts +5 -0
  3. package/dist/cli.d.ts.map +1 -1
  4. package/dist/cli.js +18 -11
  5. package/dist/cli.js.map +1 -1
  6. package/dist/creatio/auth/auth.d.ts +2 -0
  7. package/dist/creatio/auth/auth.d.ts.map +1 -1
  8. package/dist/creatio/auth/auth.js.map +1 -1
  9. package/dist/creatio/auth/providers/base-provider.d.ts +1 -0
  10. package/dist/creatio/auth/providers/base-provider.d.ts.map +1 -1
  11. package/dist/creatio/auth/providers/base-provider.js +3 -0
  12. package/dist/creatio/auth/providers/base-provider.js.map +1 -1
  13. package/dist/creatio/auth/providers/oauth2-code-provider.d.ts +3 -0
  14. package/dist/creatio/auth/providers/oauth2-code-provider.d.ts.map +1 -1
  15. package/dist/creatio/auth/providers/oauth2-code-provider.js +30 -24
  16. package/dist/creatio/auth/providers/oauth2-code-provider.js.map +1 -1
  17. package/dist/creatio/engines/admin-operation/admin-operation-engine.d.ts +13 -0
  18. package/dist/creatio/engines/admin-operation/admin-operation-engine.d.ts.map +1 -0
  19. package/dist/creatio/engines/admin-operation/admin-operation-engine.js +27 -0
  20. package/dist/creatio/engines/admin-operation/admin-operation-engine.js.map +1 -0
  21. package/dist/creatio/engines/configuration/configuration-engine.d.ts +10 -0
  22. package/dist/creatio/engines/configuration/configuration-engine.d.ts.map +1 -0
  23. package/dist/creatio/engines/configuration/configuration-engine.js +18 -0
  24. package/dist/creatio/engines/configuration/configuration-engine.js.map +1 -0
  25. package/dist/creatio/engines/engine-manager.d.ts +13 -1
  26. package/dist/creatio/engines/engine-manager.d.ts.map +1 -1
  27. package/dist/creatio/engines/engine-manager.js +17 -0
  28. package/dist/creatio/engines/engine-manager.js.map +1 -1
  29. package/dist/creatio/engines/engine-registry.d.ts +3 -0
  30. package/dist/creatio/engines/engine-registry.d.ts.map +1 -1
  31. package/dist/creatio/engines/engine-registry.js +3 -0
  32. package/dist/creatio/engines/engine-registry.js.map +1 -1
  33. package/dist/creatio/engines/feature/feature-engine.d.ts +10 -0
  34. package/dist/creatio/engines/feature/feature-engine.d.ts.map +1 -0
  35. package/dist/creatio/engines/feature/feature-engine.js +18 -0
  36. package/dist/creatio/engines/feature/feature-engine.js.map +1 -0
  37. package/dist/creatio/engines/index.d.ts +3 -0
  38. package/dist/creatio/engines/index.d.ts.map +1 -1
  39. package/dist/creatio/engines/index.js +3 -0
  40. package/dist/creatio/engines/index.js.map +1 -1
  41. package/dist/creatio/provider-context.d.ts +4 -1
  42. package/dist/creatio/provider-context.d.ts.map +1 -1
  43. package/dist/creatio/providers/admin-operation-provider.d.ts +27 -0
  44. package/dist/creatio/providers/admin-operation-provider.d.ts.map +1 -0
  45. package/dist/creatio/providers/admin-operation-provider.js +3 -0
  46. package/dist/creatio/providers/admin-operation-provider.js.map +1 -0
  47. package/dist/creatio/providers/configuration-provider.d.ts +19 -0
  48. package/dist/creatio/providers/configuration-provider.d.ts.map +1 -0
  49. package/dist/creatio/providers/configuration-provider.js +3 -0
  50. package/dist/creatio/providers/configuration-provider.js.map +1 -0
  51. package/dist/creatio/providers/feature-provider.d.ts +10 -0
  52. package/dist/creatio/providers/feature-provider.d.ts.map +1 -0
  53. package/dist/creatio/providers/feature-provider.js +3 -0
  54. package/dist/creatio/providers/feature-provider.js.map +1 -0
  55. package/dist/creatio/providers/index.d.ts +3 -0
  56. package/dist/creatio/providers/index.d.ts.map +1 -1
  57. package/dist/creatio/providers/index.js +3 -0
  58. package/dist/creatio/providers/index.js.map +1 -1
  59. package/dist/creatio/services/admin-operation-service-provider.d.ts +15 -0
  60. package/dist/creatio/services/admin-operation-service-provider.d.ts.map +1 -0
  61. package/dist/creatio/services/admin-operation-service-provider.js +69 -0
  62. package/dist/creatio/services/admin-operation-service-provider.js.map +1 -0
  63. package/dist/creatio/services/configuration-service-provider.d.ts +14 -0
  64. package/dist/creatio/services/configuration-service-provider.d.ts.map +1 -0
  65. package/dist/creatio/services/configuration-service-provider.js +90 -0
  66. package/dist/creatio/services/configuration-service-provider.js.map +1 -0
  67. package/dist/creatio/services/creatio-service-context.d.ts +4 -1
  68. package/dist/creatio/services/creatio-service-context.d.ts.map +1 -1
  69. package/dist/creatio/services/creatio-service-context.js +9 -0
  70. package/dist/creatio/services/creatio-service-context.js.map +1 -1
  71. package/dist/creatio/services/feature-service-provider.d.ts +10 -0
  72. package/dist/creatio/services/feature-service-provider.d.ts.map +1 -0
  73. package/dist/creatio/services/feature-service-provider.js +43 -0
  74. package/dist/creatio/services/feature-service-provider.js.map +1 -0
  75. package/dist/creatio/services/http-client.d.ts.map +1 -1
  76. package/dist/creatio/services/http-client.js +0 -1
  77. package/dist/creatio/services/http-client.js.map +1 -1
  78. package/dist/creatio/services/index.d.ts +3 -0
  79. package/dist/creatio/services/index.d.ts.map +1 -1
  80. package/dist/creatio/services/index.js +3 -0
  81. package/dist/creatio/services/index.js.map +1 -1
  82. package/dist/creatio/services/metadata-store.d.ts +5 -0
  83. package/dist/creatio/services/metadata-store.d.ts.map +1 -1
  84. package/dist/creatio/services/metadata-store.js +18 -6
  85. package/dist/creatio/services/metadata-store.js.map +1 -1
  86. package/dist/creatio/services/odata-crud-provider.d.ts +2 -0
  87. package/dist/creatio/services/odata-crud-provider.d.ts.map +1 -1
  88. package/dist/creatio/services/odata-crud-provider.js +10 -1
  89. package/dist/creatio/services/odata-crud-provider.js.map +1 -1
  90. package/dist/server/http/creatio-oauth-handlers.d.ts +0 -1
  91. package/dist/server/http/creatio-oauth-handlers.d.ts.map +1 -1
  92. package/dist/server/http/creatio-oauth-handlers.js +30 -23
  93. package/dist/server/http/creatio-oauth-handlers.js.map +1 -1
  94. package/dist/server/http/httpServer.d.ts +9 -0
  95. package/dist/server/http/httpServer.d.ts.map +1 -1
  96. package/dist/server/http/httpServer.js +34 -11
  97. package/dist/server/http/httpServer.js.map +1 -1
  98. package/dist/server/http/mcp-handlers.d.ts.map +1 -1
  99. package/dist/server/http/mcp-handlers.js +4 -1
  100. package/dist/server/http/mcp-handlers.js.map +1 -1
  101. package/dist/server/http/mcp-oauth-handlers.d.ts.map +1 -1
  102. package/dist/server/http/mcp-oauth-handlers.js +18 -6
  103. package/dist/server/http/mcp-oauth-handlers.js.map +1 -1
  104. package/dist/server/http/middleware.d.ts +7 -0
  105. package/dist/server/http/middleware.d.ts.map +1 -1
  106. package/dist/server/http/middleware.js +23 -0
  107. package/dist/server/http/middleware.js.map +1 -1
  108. package/dist/server/http/rate-limiter.d.ts +24 -0
  109. package/dist/server/http/rate-limiter.d.ts.map +1 -0
  110. package/dist/server/http/rate-limiter.js +42 -0
  111. package/dist/server/http/rate-limiter.js.map +1 -0
  112. package/dist/server/mcp/prompts-data.d.ts +58 -0
  113. package/dist/server/mcp/prompts-data.d.ts.map +1 -1
  114. package/dist/server/mcp/prompts-data.js +391 -1
  115. package/dist/server/mcp/prompts-data.js.map +1 -1
  116. package/dist/server/mcp/server.d.ts.map +1 -1
  117. package/dist/server/mcp/server.js +69 -0
  118. package/dist/server/mcp/server.js.map +1 -1
  119. package/dist/server/mcp/tools-data.d.ts +63 -0
  120. package/dist/server/mcp/tools-data.d.ts.map +1 -1
  121. package/dist/server/mcp/tools-data.js +110 -5
  122. package/dist/server/mcp/tools-data.js.map +1 -1
  123. package/dist/server/oauth/oauth-server.d.ts +0 -1
  124. package/dist/server/oauth/oauth-server.d.ts.map +1 -1
  125. package/dist/server/oauth/oauth-server.js +11 -21
  126. package/dist/server/oauth/oauth-server.js.map +1 -1
  127. package/dist/server/oauth/storage.d.ts +0 -2
  128. package/dist/server/oauth/storage.d.ts.map +1 -1
  129. package/dist/server/oauth/storage.js +0 -6
  130. package/dist/server/oauth/storage.js.map +1 -1
  131. package/dist/server/oauth/validators.d.ts +6 -0
  132. package/dist/server/oauth/validators.d.ts.map +1 -1
  133. package/dist/server/oauth/validators.js +28 -0
  134. package/dist/server/oauth/validators.js.map +1 -1
  135. package/dist/services/session-context.d.ts +8 -7
  136. package/dist/services/session-context.d.ts.map +1 -1
  137. package/dist/services/session-context.js +7 -27
  138. package/dist/services/session-context.js.map +1 -1
  139. package/package.json +19 -10
  140. package/.dockerignore +0 -12
  141. package/.editorconfig +0 -14
  142. package/.eslintrc.cjs +0 -18
  143. package/.gitattributes +0 -8
  144. package/.github/workflows/docker-publish.yml +0 -50
  145. package/.prettierignore +0 -3
  146. package/.prettierrc +0 -9
  147. package/.vscode/launch.json +0 -23
  148. package/.vscode/mcp.json +0 -13
  149. package/.vscode/settings.json +0 -16
  150. package/Agent.md +0 -187
  151. package/Debug.md +0 -32
  152. package/Dockerfile +0 -23
  153. package/docs/coding-style.md +0 -30
  154. package/eslint.config.cjs +0 -95
  155. package/src/cli.ts +0 -162
  156. package/src/config-builder.ts +0 -76
  157. package/src/consts.ts +0 -3
  158. package/src/creatio/auth/auth-manager.ts +0 -27
  159. package/src/creatio/auth/auth.ts +0 -31
  160. package/src/creatio/auth/index.ts +0 -3
  161. package/src/creatio/auth/providers/base-oauth2-provider.ts +0 -62
  162. package/src/creatio/auth/providers/base-provider.ts +0 -42
  163. package/src/creatio/auth/providers/index.ts +0 -4
  164. package/src/creatio/auth/providers/legacy-provider.ts +0 -70
  165. package/src/creatio/auth/providers/oauth2-code-provider.ts +0 -252
  166. package/src/creatio/auth/providers/oauth2-provider.ts +0 -91
  167. package/src/creatio/auth/providers/type.ts +0 -5
  168. package/src/creatio/client-config.ts +0 -34
  169. package/src/creatio/engines/crud/crud-engine.ts +0 -47
  170. package/src/creatio/engines/engine-manager.ts +0 -102
  171. package/src/creatio/engines/engine-registry.ts +0 -36
  172. package/src/creatio/engines/engine.ts +0 -3
  173. package/src/creatio/engines/index.ts +0 -7
  174. package/src/creatio/engines/process/process-engine.ts +0 -20
  175. package/src/creatio/engines/sys-settings/sys-settings-engine.ts +0 -41
  176. package/src/creatio/engines/user/user-engine.ts +0 -20
  177. package/src/creatio/index.ts +0 -6
  178. package/src/creatio/provider-context.ts +0 -10
  179. package/src/creatio/providers/crud-provider.ts +0 -45
  180. package/src/creatio/providers/index.ts +0 -4
  181. package/src/creatio/providers/process-provider.ts +0 -15
  182. package/src/creatio/providers/sys-settings-provider.ts +0 -63
  183. package/src/creatio/providers/user-provider.ts +0 -12
  184. package/src/creatio/services/creatio-service-context.ts +0 -38
  185. package/src/creatio/services/http-client.ts +0 -174
  186. package/src/creatio/services/index.ts +0 -7
  187. package/src/creatio/services/metadata-store.ts +0 -181
  188. package/src/creatio/services/odata-crud-provider.ts +0 -210
  189. package/src/creatio/services/process-service-provider.ts +0 -76
  190. package/src/creatio/services/sys-settings-service-provider.ts +0 -192
  191. package/src/creatio/services/user-info-provider.ts +0 -41
  192. package/src/index.ts +0 -44
  193. package/src/log.ts +0 -183
  194. package/src/server/http/creatio-oauth-handlers.ts +0 -146
  195. package/src/server/http/httpServer.ts +0 -150
  196. package/src/server/http/index.ts +0 -5
  197. package/src/server/http/mcp-handlers.ts +0 -92
  198. package/src/server/http/mcp-oauth-handlers.ts +0 -108
  199. package/src/server/http/middleware.ts +0 -91
  200. package/src/server/index.ts +0 -2
  201. package/src/server/mcp/filters.ts +0 -97
  202. package/src/server/mcp/index.ts +0 -1
  203. package/src/server/mcp/prompts-data.ts +0 -896
  204. package/src/server/mcp/server.ts +0 -331
  205. package/src/server/mcp/tools-data.ts +0 -592
  206. package/src/server/oauth/client-manager.ts +0 -47
  207. package/src/server/oauth/index.ts +0 -6
  208. package/src/server/oauth/oauth-server.ts +0 -185
  209. package/src/server/oauth/storage.ts +0 -106
  210. package/src/server/oauth/token-manager.ts +0 -80
  211. package/src/server/oauth/types.ts +0 -55
  212. package/src/server/oauth/validators.ts +0 -56
  213. package/src/services/index.ts +0 -2
  214. package/src/services/session-context.ts +0 -232
  215. package/src/services/token-refresh-scheduler.ts +0 -68
  216. package/src/types/index.ts +0 -1
  217. package/src/types/network.ts +0 -7
  218. package/src/utils/context.ts +0 -49
  219. package/src/utils/env.ts +0 -12
  220. package/src/utils/index.ts +0 -5
  221. package/src/utils/mcp.ts +0 -8
  222. package/src/utils/network.ts +0 -65
  223. package/src/utils/pkce.ts +0 -39
  224. package/src/version.ts +0 -15
  225. package/tsconfig.json +0 -28
@@ -162,4 +162,67 @@ export declare const updateSysSettingDefinitionDescriptor: {
162
162
  description: string;
163
163
  inputSchema: Record<string, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
164
164
  };
165
+ export declare const refreshFeatureCacheInput: z.ZodObject<{
166
+ featureCode: z.ZodOptional<z.ZodString>;
167
+ }, z.core.$strip>;
168
+ export declare const refreshFeatureCacheDescriptor: {
169
+ title: string;
170
+ description: string;
171
+ inputSchema: Record<string, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
172
+ };
173
+ export declare const upsertAdminOperationInput: z.ZodObject<{
174
+ id: z.ZodOptional<z.ZodString>;
175
+ name: z.ZodString;
176
+ code: z.ZodString;
177
+ description: z.ZodOptional<z.ZodString>;
178
+ }, z.core.$strip>;
179
+ export declare const upsertAdminOperationDescriptor: {
180
+ title: string;
181
+ description: string;
182
+ inputSchema: Record<string, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
183
+ };
184
+ export declare const deleteAdminOperationInput: z.ZodObject<{
185
+ ids: z.ZodArray<z.ZodString>;
186
+ }, z.core.$strip>;
187
+ export declare const deleteAdminOperationDescriptor: {
188
+ title: string;
189
+ description: string;
190
+ inputSchema: Record<string, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
191
+ };
192
+ export declare const setAdminOperationGranteeInput: z.ZodObject<{
193
+ adminOperationId: z.ZodString;
194
+ adminUnitIds: z.ZodArray<z.ZodString>;
195
+ canExecute: z.ZodBoolean;
196
+ }, z.core.$strip>;
197
+ export declare const setAdminOperationGranteeDescriptor: {
198
+ title: string;
199
+ description: string;
200
+ inputSchema: Record<string, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
201
+ };
202
+ export declare const deleteAdminOperationGranteeInput: z.ZodObject<{
203
+ ids: z.ZodArray<z.ZodString>;
204
+ }, z.core.$strip>;
205
+ export declare const deleteAdminOperationGranteeDescriptor: {
206
+ title: string;
207
+ description: string;
208
+ inputSchema: Record<string, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
209
+ };
210
+ export declare const callConfigurationServiceInput: z.ZodObject<{
211
+ service: z.ZodString;
212
+ method: z.ZodString;
213
+ httpMethod: z.ZodDefault<z.ZodEnum<{
214
+ POST: "POST";
215
+ GET: "GET";
216
+ PATCH: "PATCH";
217
+ PUT: "PUT";
218
+ DELETE: "DELETE";
219
+ }>>;
220
+ body: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
221
+ query: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
222
+ }, z.core.$strip>;
223
+ export declare const callConfigurationServiceDescriptor: {
224
+ title: string;
225
+ description: string;
226
+ inputSchema: Record<string, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
227
+ };
165
228
  //# sourceMappingURL=tools-data.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"tools-data.d.ts","sourceRoot":"","sources":["../../../src/server/mcp/tools-data.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAsDxB,eAAO,MAAM,uBAAuB,gCAAyC,CAAC;AAE9E,eAAO,MAAM,4BAA4B;;;;CAuCvC,CAAC;AA+KH,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAA2B,CAAC;AAElD,eAAO,MAAM,cAAc;;;;CAUzB,CAAC;AAsBH,eAAO,MAAM,WAAW;;;iBAA6B,CAAC;AAEtD,eAAO,MAAM,gBAAgB;;;;CAY3B,CAAC;AA0BH,eAAO,MAAM,WAAW;;;;iBAA6B,CAAC;AAEtD,eAAO,MAAM,gBAAgB;;;;CAS3B,CAAC;AAWH,eAAO,MAAM,WAAW;;;iBAA6B,CAAC;AAEtD,eAAO,MAAM,gBAAgB;;;;CAY3B,CAAC;AAEH,eAAO,MAAM,iBAAiB,gCAAe,CAAC;AAE9C,eAAO,MAAM,sBAAsB;;;;CAKjC,CAAC;AAUH,eAAO,MAAM,mBAAmB;;iBAAqC,CAAC;AAEtE,eAAO,MAAM,wBAAwB;;;;CAKnC,CAAC;AA0BH,eAAO,MAAM,mBAAmB;;;iBAAqC,CAAC;AAEtE,eAAO,MAAM,wBAAwB;;;;CAuCnC,CAAC;AAWH,eAAO,MAAM,qBAAqB;;iBAAuC,CAAC;AAE1E,eAAO,MAAM,0BAA0B;;;;CAKrC,CAAC;AAiDH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;iBAAuC,CAAC;AAE1E,eAAO,MAAM,0BAA0B;;;;CAKrC,CAAC;AAcH,eAAO,MAAM,wBAAwB;;iBAA0C,CAAC;AAEhF,eAAO,MAAM,6BAA6B;;;;CAYxC,CAAC;AASH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;iBAAiD,CAAC;AAE9F,eAAO,MAAM,oCAAoC;;;;CAK/C,CAAC"}
1
+ {"version":3,"file":"tools-data.d.ts","sourceRoot":"","sources":["../../../src/server/mcp/tools-data.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA0DxB,eAAO,MAAM,uBAAuB,gCAAyC,CAAC;AAE9E,eAAO,MAAM,4BAA4B;;;;CAuCvC,CAAC;AA+KH,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAA2B,CAAC;AAElD,eAAO,MAAM,cAAc;;;;CAUzB,CAAC;AAsBH,eAAO,MAAM,WAAW;;;iBAA6B,CAAC;AAEtD,eAAO,MAAM,gBAAgB;;;;CAY3B,CAAC;AA0BH,eAAO,MAAM,WAAW;;;;iBAA6B,CAAC;AAEtD,eAAO,MAAM,gBAAgB;;;;CAS3B,CAAC;AAWH,eAAO,MAAM,WAAW;;;iBAA6B,CAAC;AAEtD,eAAO,MAAM,gBAAgB;;;;CAY3B,CAAC;AAEH,eAAO,MAAM,iBAAiB,gCAAe,CAAC;AAE9C,eAAO,MAAM,sBAAsB;;;;CAKjC,CAAC;AAUH,eAAO,MAAM,mBAAmB;;iBAAqC,CAAC;AAEtE,eAAO,MAAM,wBAAwB;;;;CAKnC,CAAC;AA0BH,eAAO,MAAM,mBAAmB;;;iBAAqC,CAAC;AAEtE,eAAO,MAAM,wBAAwB;;;;CAuCnC,CAAC;AAWH,eAAO,MAAM,qBAAqB;;iBAAuC,CAAC;AAE1E,eAAO,MAAM,0BAA0B;;;;CAKrC,CAAC;AA+CH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;iBAAuC,CAAC;AAE1E,eAAO,MAAM,0BAA0B;;;;CAKrC,CAAC;AAcH,eAAO,MAAM,wBAAwB;;iBAA0C,CAAC;AAEhF,eAAO,MAAM,6BAA6B;;;;CAYxC,CAAC;AASH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;iBAAiD,CAAC;AAE9F,eAAO,MAAM,oCAAoC;;;;CAK/C,CAAC;AAYH,eAAO,MAAM,wBAAwB;;iBAA0C,CAAC;AAEhF,eAAO,MAAM,6BAA6B;;;;CAKxC,CAAC;AA0BH,eAAO,MAAM,yBAAyB;;;;;iBAA2C,CAAC;AAElF,eAAO,MAAM,8BAA8B;;;;CAKzC,CAAC;AAWH,eAAO,MAAM,yBAAyB;;iBAA2C,CAAC;AAElF,eAAO,MAAM,8BAA8B;;;;CAKzC,CAAC;AAmBH,eAAO,MAAM,6BAA6B;;;;iBAA+C,CAAC;AAE1F,eAAO,MAAM,kCAAkC;;;;CAK7C,CAAC;AAWH,eAAO,MAAM,gCAAgC;;iBAAkD,CAAC;AAEhG,eAAO,MAAM,qCAAqC;;;;CAKhD,CAAC;AAiCH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;iBAA+C,CAAC;AAE1F,eAAO,MAAM,kCAAkC;;;;CAK7C,CAAC"}
@@ -1,6 +1,6 @@
1
1
  "use strict";
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.updateSysSettingDefinitionDescriptor = exports.updateSysSettingDefinitionInput = exports.setSysSettingsValueDescriptor = exports.setSysSettingsValueInput = exports.createSysSettingDescriptor = exports.createSysSettingInput = exports.querySysSettingsDescriptor = exports.querySysSettingsInput = exports.executeProcessDescriptor = exports.executeProcessInput = exports.describeEntityDescriptor = exports.describeEntityInput = exports.listEntitiesDescriptor = exports.listEntitiesInput = exports.deleteDescriptor = exports.deleteInput = exports.updateDescriptor = exports.updateInput = exports.createDescriptor = exports.createInput = exports.readDescriptor = exports.readInput = exports.getCurrentUserInfoDescriptor = exports.getCurrentUserInfoInput = void 0;
3
+ exports.callConfigurationServiceDescriptor = exports.callConfigurationServiceInput = exports.deleteAdminOperationGranteeDescriptor = exports.deleteAdminOperationGranteeInput = exports.setAdminOperationGranteeDescriptor = exports.setAdminOperationGranteeInput = exports.deleteAdminOperationDescriptor = exports.deleteAdminOperationInput = exports.upsertAdminOperationDescriptor = exports.upsertAdminOperationInput = exports.refreshFeatureCacheDescriptor = exports.refreshFeatureCacheInput = exports.updateSysSettingDefinitionDescriptor = exports.updateSysSettingDefinitionInput = exports.setSysSettingsValueDescriptor = exports.setSysSettingsValueInput = exports.createSysSettingDescriptor = exports.createSysSettingInput = exports.querySysSettingsDescriptor = exports.querySysSettingsInput = exports.executeProcessDescriptor = exports.executeProcessInput = exports.describeEntityDescriptor = exports.describeEntityInput = exports.listEntitiesDescriptor = exports.listEntitiesInput = exports.deleteDescriptor = exports.deleteInput = exports.updateDescriptor = exports.updateInput = exports.createDescriptor = exports.createInput = exports.readDescriptor = exports.readInput = exports.getCurrentUserInfoDescriptor = exports.getCurrentUserInfoInput = void 0;
4
4
  const zod_1 = require("zod");
5
5
  const CRITICAL_WARNINGS = {
6
6
  FILTER_SELECT_SYNC: '⚠️ CRITICAL: When using $filter with $select:\n' +
@@ -40,6 +40,8 @@ function makeToolDescriptor(opts) {
40
40
  inputSchema: opts.inputShape,
41
41
  };
42
42
  }
43
+ const CREATIO_GUID_REGEX = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
44
+ const creatioGuid = () => zod_1.z.string().regex(CREATIO_GUID_REGEX, 'Must be a 36-character hex GUID');
43
45
  const getCurrentUserInfoInputShape = {};
44
46
  exports.getCurrentUserInfoInput = zod_1.z.object(getCurrentUserInfoInputShape);
45
47
  exports.getCurrentUserInfoDescriptor = makeToolDescriptor({
@@ -407,9 +409,7 @@ const sysSettingDefinitionFieldShape = {
407
409
  };
408
410
  const sysSettingDefinitionSchema = zod_1.z.object(sysSettingDefinitionFieldShape);
409
411
  const createSysSettingDefinitionSchema = sysSettingDefinitionSchema.extend({
410
- id: zod_1.z
411
- .string()
412
- .uuid()
412
+ id: creatioGuid()
413
413
  .optional()
414
414
  .describe('Optional GUID for the sys setting record. Auto-generated when omitted.'),
415
415
  });
@@ -454,7 +454,7 @@ exports.setSysSettingsValueDescriptor = makeToolDescriptor({
454
454
  inputShape: setSysSettingsValueInputShape,
455
455
  });
456
456
  const updateSysSettingDefinitionInputShape = {
457
- id: zod_1.z.string().uuid().describe('Existing SysSetting Id (Guid) to update.'),
457
+ id: creatioGuid().describe('Existing SysSetting Id (Guid) to update.'),
458
458
  definition: updateSysSettingDefinitionSchema.describe('Creatio requires Code, Name, and valueTypeName on every UpdateSysSettingRequest. Always include those fields (existing values are OK) plus any other properties that need updating.'),
459
459
  };
460
460
  exports.updateSysSettingDefinitionInput = zod_1.z.object(updateSysSettingDefinitionInputShape);
@@ -463,4 +463,109 @@ exports.updateSysSettingDefinitionDescriptor = makeToolDescriptor({
463
463
  description: 'Calls the UpdateSysSettingRequest endpoint to modify metadata such as name, description, valueTypeName, cache flags, personalization flags, and lookup reference schema. IMPORTANT: Creatio validates that Code, Name, and valueTypeName are present on every update, even if they are unchanged—copy the current values when needed. See the /sys-settings-guide prompt for allowed value types and lookup resolution tips.',
464
464
  inputShape: updateSysSettingDefinitionInputShape,
465
465
  });
466
+ const refreshFeatureCacheInputShape = {
467
+ featureCode: zod_1.z
468
+ .string()
469
+ .min(1)
470
+ .optional()
471
+ .describe('Optional feature code (e.g., "FreedomUIComposableApp"). When provided, only that feature\'s cache is invalidated for all users. Omit to clear the cache for every feature.'),
472
+ };
473
+ exports.refreshFeatureCacheInput = zod_1.z.object(refreshFeatureCacheInputShape);
474
+ exports.refreshFeatureCacheDescriptor = makeToolDescriptor({
475
+ title: 'Refresh Creatio feature toggle cache',
476
+ description: 'Invalidates the in-memory feature-toggle cache for all users. Call this after changing rows in `Feature` or `AdminUnitFeatureState` via the standard create/update/delete tools so the new state becomes visible. Pass `featureCode` to scope to a single feature; omit to refresh all. See /feature-toggle-guide for the full workflow.',
477
+ inputShape: refreshFeatureCacheInputShape,
478
+ });
479
+ const upsertAdminOperationInputShape = {
480
+ id: creatioGuid()
481
+ .optional()
482
+ .describe('Existing SysAdminOperation Id. Omit to create a new record (a new GUID is generated server-side and returned in the response).'),
483
+ name: zod_1.z
484
+ .string()
485
+ .min(1)
486
+ .describe('Display name of the system operation (e.g., "Can manage administration"). Required for both create and update.'),
487
+ code: zod_1.z
488
+ .string()
489
+ .min(1)
490
+ .describe('Code of the system operation (e.g., "CanManageAdministration"). Required and must be unique. Conventionally PascalCase with no spaces.'),
491
+ description: zod_1.z
492
+ .string()
493
+ .optional()
494
+ .describe('Optional human-readable description of what the operation gates.'),
495
+ };
496
+ exports.upsertAdminOperationInput = zod_1.z.object(upsertAdminOperationInputShape);
497
+ exports.upsertAdminOperationDescriptor = makeToolDescriptor({
498
+ title: 'Create or update Creatio system operation',
499
+ description: 'Create a new `SysAdminOperation` (omit `id`) or update an existing one (supply `id`). Use this instead of the generic create/update tools — OData modifications on `SysAdminOperation` are blocked at the platform level. Reads still go through the standard `read` tool. Response contains the operation Id. See /admin-operation-guide for the full workflow.',
500
+ inputShape: upsertAdminOperationInputShape,
501
+ });
502
+ const deleteAdminOperationInputShape = {
503
+ ids: zod_1.z
504
+ .array(creatioGuid())
505
+ .min(1)
506
+ .describe('List of SysAdminOperation Ids to delete (RightsService deletes them and their related grantee rows). Use the standard `read` tool on `SysAdminOperation` to look up Ids by Code first.'),
507
+ };
508
+ exports.deleteAdminOperationInput = zod_1.z.object(deleteAdminOperationInputShape);
509
+ exports.deleteAdminOperationDescriptor = makeToolDescriptor({
510
+ title: 'Delete Creatio system operations',
511
+ description: 'Delete one or more `SysAdminOperation` rows by Id. Related grantee rows are cleaned up automatically. Use this instead of the generic `delete` tool — OData modifications on `SysAdminOperation` are blocked at the platform level.',
512
+ inputShape: deleteAdminOperationInputShape,
513
+ });
514
+ const setAdminOperationGranteeInputShape = {
515
+ adminOperationId: creatioGuid().describe('Id of the SysAdminOperation being granted or revoked. Look up via `read` on `SysAdminOperation` filtered by Code.'),
516
+ adminUnitIds: zod_1.z
517
+ .array(creatioGuid())
518
+ .min(1)
519
+ .describe('SysAdminUnit Ids (users or roles) that should receive the same grant/revoke state. Resolve via `read` on `SysAdminUnit` filtered by Name. Use SysAdminUnit.Id (NOT ContactId).'),
520
+ canExecute: zod_1.z
521
+ .boolean()
522
+ .describe('`true` grants the operation (allow) to every listed admin unit; `false` revokes it (deny).'),
523
+ };
524
+ exports.setAdminOperationGranteeInput = zod_1.z.object(setAdminOperationGranteeInputShape);
525
+ exports.setAdminOperationGranteeDescriptor = makeToolDescriptor({
526
+ title: 'Grant or revoke a system operation for users/roles',
527
+ description: 'Grant (`canExecute=true`) or revoke (`canExecute=false`) a system operation for one or more `SysAdminUnit` ids (users or roles). Repeated calls for the same (operation, unit) pair update the existing grant row instead of duplicating. Use this instead of the generic create/update tools — OData modifications on `SysAdminOperationGrantee` are blocked.',
528
+ inputShape: setAdminOperationGranteeInputShape,
529
+ });
530
+ const deleteAdminOperationGranteeInputShape = {
531
+ ids: zod_1.z
532
+ .array(creatioGuid())
533
+ .min(1)
534
+ .describe('List of SysAdminOperationGrantee row Ids to delete. Look them up via `read` on `SysAdminOperationGrantee` filtered by `SysAdminOperationId` and/or `SysAdminUnitId`.'),
535
+ };
536
+ exports.deleteAdminOperationGranteeInput = zod_1.z.object(deleteAdminOperationGranteeInputShape);
537
+ exports.deleteAdminOperationGranteeDescriptor = makeToolDescriptor({
538
+ title: 'Remove specific system operation grant rows',
539
+ description: 'Delete individual grant rows by Id when you want to remove a grant entry entirely. To flip allow ↔ deny instead, prefer `set-admin-operation-grantee`.',
540
+ inputShape: deleteAdminOperationGranteeInputShape,
541
+ });
542
+ const SERVICE_NAME_PATTERN = /^[A-Za-z][A-Za-z0-9_-]*$/;
543
+ const callConfigurationServiceInputShape = {
544
+ service: zod_1.z
545
+ .string()
546
+ .regex(SERVICE_NAME_PATTERN, 'Service name must match ^[A-Za-z][A-Za-z0-9_-]*$')
547
+ .describe('Configuration service name as registered in Creatio (e.g., "RightsService"). The full URL is /0/rest/<service>/<method>.'),
548
+ method: zod_1.z
549
+ .string()
550
+ .regex(SERVICE_NAME_PATTERN, 'Method name must match ^[A-Za-z][A-Za-z0-9_-]*$')
551
+ .describe('Service method name (UriTemplate) to invoke (e.g., "UpsertAdminOperation").'),
552
+ httpMethod: zod_1.z
553
+ .enum(['GET', 'POST', 'PATCH', 'PUT', 'DELETE'])
554
+ .default('POST')
555
+ .describe('HTTP method. Most Creatio configuration services use POST.'),
556
+ body: zod_1.z
557
+ .record(zod_1.z.string(), zod_1.z.any())
558
+ .optional()
559
+ .describe('Request body sent as JSON for POST/PATCH/PUT. Ignored for GET/DELETE. Pass the service parameters as a flat object (e.g., {"recordId":"<guid>","name":"..."}). Creatio configuration services use [WebInvoke BodyStyle=Wrapped], so each parameter becomes a top-level key.'),
560
+ query: zod_1.z
561
+ .record(zod_1.z.string(), zod_1.z.union([zod_1.z.string(), zod_1.z.number(), zod_1.z.boolean()]))
562
+ .optional()
563
+ .describe('Optional query-string parameters appended to the URL.'),
564
+ };
565
+ exports.callConfigurationServiceInput = zod_1.z.object(callConfigurationServiceInputShape);
566
+ exports.callConfigurationServiceDescriptor = makeToolDescriptor({
567
+ title: 'Call a Creatio configuration REST service method',
568
+ description: 'Escape hatch for invoking any configuration-package REST service exposed at /0/rest/<service>/<method>. Use this when no dedicated MCP tool covers the operation. Always prefer the specific tools (`upsert-admin-operation`, `refresh-feature-cache`, sys-settings tools, etc.) when they exist — they validate inputs, handle wrapped responses, and document side effects. Returns `{status, contentType, body}`; JSON responses are auto-parsed.',
569
+ inputShape: callConfigurationServiceInputShape,
570
+ });
466
571
  //# sourceMappingURL=tools-data.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"tools-data.js","sourceRoot":"","sources":["../../../src/server/mcp/tools-data.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,MAAM,iBAAiB,GAAG;IACzB,kBAAkB,EACjB,iDAAiD;QACjD,qDAAqD;QACrD,kEAAkE;QAClE,2FAA2F;QAC3F,iEAAiE;IAClE,cAAc,EACb,6BAA6B;QAC7B,8EAA8E;QAC9E,kEAAkE;QAClE,2DAA2D;QAC3D,qEAAqE;QACrE,+EAA+E;IAChF,eAAe,EACd,0FAA0F;CAClF,CAAC;AAEX,MAAM,eAAe,GAAG;IACvB,KAAK,EACJ,eAAe;QACf,6CAA6C;QAC7C,0BAA0B;QAC1B,2BAA2B;QAC3B,mEAAmE;QACnE,iFAAiF;IAClF,OAAO,EACN,kBAAkB;QAClB,uEAAuE;QACvE,kDAAkD;QAClD,8DAA8D;IAC/D,KAAK,EACJ,mBAAmB;QACnB,uCAAuC;QACvC,yDAAyD;QACzD,oCAAoC;QACpC,2DAA2D;CACnD,CAAC;AAEX,SAAS,kBAAkB,CAAC,IAI3B;IACA,OAAO;QACN,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC;AACH,CAAC;AAED,MAAM,4BAA4B,GAAG,EAAE,CAAC;AAC3B,QAAA,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAEjE,QAAA,4BAA4B,GAAG,kBAAkB,CAAC;IAC9D,KAAK,EAAE,6CAA6C;IACpD,WAAW,EACV,wCAAwC;QACxC,kHAAkH;QAClH,mBAAmB;QACnB,kEAAkE;QAClE,yEAAyE;QACzE,wEAAwE;QACxE,+EAA+E;QAC/E,yBAAyB;QACzB,qEAAqE;QACrE,2CAA2C;QAC3C,2DAA2D;QAC3D,4EAA4E;QAC5E,YAAY;QACZ,KAAK;QACL,uDAAuD;QACvD,2EAA2E;QAC3E,iCAAiC;QACjC,4BAA4B;QAC5B,OAAO;QACP,6BAA6B;QAC7B,uEAAuE;QACvE,kEAAkE;QAClE,yCAAyC;QACzC,sDAAsD;QACtD,mDAAmD;QACnD,mBAAmB;QACnB,8DAA8D;QAC9D,iDAAiD;QACjD,yDAAyD;QACzD,sEAAsE;QACtE,kBAAkB;QAClB,yCAAyC;QACzC,sCAAsC;QACtC,kDAAkD;QAClD,wCAAwC;IACzC,UAAU,EAAE,4BAA4B;CACxC,CAAC,CAAC;AAEH,MAAM,EAAE,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;AAE9F,MAAM,KAAK,GAAG,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,EAAE,OAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAEvE,MAAM,aAAa,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9B,KAAK,EAAE,OAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACR,mGAAmG,CACnG;CACF,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,aAAa,CAAC,MAAM,CAAC;IAC7C,EAAE,EAAE,EAAE,CAAC,QAAQ,CACd,+EAA+E,CAC/E;IACD,KAAK,EAAE,KAAK,CAAC,QAAQ,CACpB,2EAA2E,CAC3E;CACD,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC;IACxC,EAAE,EAAE,OAAC;SACH,KAAK,CAAC,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;SACrD,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACR,0FAA0F,CAC1F;CACF,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,OAAC,CAAC,KAAK,CAAC,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAAC;AAE3D,MAAM,YAAY,GAAG,OAAC;KACpB,MAAM,CAAC;IACP,GAAG,EAAE,OAAC;SACJ,KAAK,CAAC,SAAS,CAAC;SAChB,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACR,8EAA8E,CAC9E;IACF,GAAG,EAAE,OAAC;SACJ,KAAK,CAAC,SAAS,CAAC;SAChB,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACR,kIAAkI,CAClI;CACF,CAAC;KACD,QAAQ,CACR,uGAAuG;IACtG,kGAAkG;IAClG,aAAa;IACb,gFAAgF;IAChF,0EAA0E;IAC1E,sHAAsH;IACtH,8HAA8H,CAC/H,CAAC;AAEH,MAAM,cAAc,GAAG;IACtB,MAAM,EAAE,OAAC;SACP,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACR,iKAAiK,CACjK;IACF,MAAM,EAAE,OAAC;SACP,UAAU,CACV,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EACjE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAC5B;SACA,QAAQ,CACR,oFAAoF;QACnF,sFAAsF;QACtF,iBAAiB,CAAC,cAAc;QAChC,MAAM;QACN,kDAAkD;QAClD,2DAA2D;QAC3D,qEAAqE;QACrE,gEAAgE;QAChE,aAAa;QACb,gEAAgE;QAChE,wCAAwC;QACxC,2DAA2D;QAC3D,8DAA8D;QAC9D,8GAA8G,CAC/G;IACF,OAAO,EAAE,YAAY;SACnB,QAAQ,EAAE;SACV,QAAQ,CACR,yHAAyH;QACxH,yEAAyE;QACzE,2DAA2D;QAC3D,oDAAoD;QACpD,sEAAsE;QACtE,aAAa;QACb,qGAAqG;QACrG,+FAA+F;QAC/F,sHAAsH;QACtH,yHAAyH;QACzH,8EAA8E,CAC/E;IACF,MAAM,EAAE,OAAC;SACP,UAAU,CACV,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAC3D,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAC9B;SACA,QAAQ,CACR,kFAAkF;QACjF,yEAAyE;QACzE,yDAAyD;QACzD,yEAAyE;QACzE,iBAAiB,CAAC,kBAAkB;QACpC,MAAM;QACN,+DAA+D;QAC/D,gEAAgE;QAChE,kDAAkD;QAClD,iDAAiD;QACjD,0DAA0D,CAC3D;IACF,MAAM,EAAE,OAAC;SACP,UAAU,CACV,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAC3D,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAC9B;SACA,QAAQ,CACR,6EAA6E;QAC5E,sEAAsE;QACtE,iEAAiE;QACjE,iBAAiB;QACjB,uEAAuE;QACvE,oEAAoE;QACpE,+CAA+C;QAC/C,eAAe;QACf,sDAAsD;QACtD,wDAAwD;QACxD,oDAAoD;QACpD,oEAAoE;QACpE,uBAAuB;QACvB,qBAAqB;QACrB,yBAAyB;QACzB,kDAAkD;QAClD,6EAA6E;QAC7E,iDAAiD;QACjD,8DAA8D;QAC9D,0DAA0D,CAC3D;IACF,OAAO,EAAE,OAAC;SACR,UAAU,CACV,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EACjE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CACrB;SACA,QAAQ,CACR,gDAAgD;QAC/C,+CAA+C;QAC/C,gDAAgD;QAChD,eAAe;QACf,kDAAkD;QAClD,8CAA8C;QAC9C,mDAAmD;QACnD,kEAAkE;QAClE,kEAAkE;QAClE,yFAAyF,CAC1F;IACF,GAAG,EAAE,OAAC,CAAC,MAAM;SACX,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,GAAG,CAAC,IAAI,CAAC;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,8DAA8D,CAAC;CACjE,CAAC;AACE,QAAA,SAAS,GAAG,OAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;AAErC,QAAA,cAAc,GAAG,kBAAkB,CAAC;IAChD,KAAK,EAAE,yBAAyB;IAChC,WAAW,EACV,kIAAkI;QAClI,oIAAoI;QACpI,kIAAkI;QAClI,gFAAgF;QAChF,+GAA+G;QAC/G,2LAA2L;IAC5L,UAAU,EAAE,cAAc;CAC1B,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG;IACxB,MAAM,EAAE,OAAC;SACP,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACR,0IAA0I,CAC1I;IACF,IAAI,EAAE,OAAC;SACL,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,GAAG,EAAE,CAAC;SAC3B,QAAQ,CACR,+BAA+B;QAC9B,eAAe,CAAC,KAAK;QACrB,MAAM;QACN,eAAe,CAAC,OAAO;QACvB,MAAM;QACN,eAAe,CAAC,KAAK;QACrB,MAAM;QACN,8EAA8E,CAC/E;CACO,CAAC;AACE,QAAA,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAEzC,QAAA,gBAAgB,GAAG,kBAAkB,CAAC;IAClD,KAAK,EAAE,0BAA0B;IACjC,WAAW,EACV,kGAAkG;QAClG,6DAA6D;QAC7D,8LAA8L;QAC9L,yRAAyR;QACzR,uTAAuT;QACvT,yeAAye;QACze,sCAAsC;QACtC,iIAAiI;IAClI,UAAU,EAAE,gBAAgB;CAC5B,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG;IACxB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,gDAAgD,CAAC;IACpF,EAAE,EAAE,OAAC;SACH,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACR,oIAAoI,CACpI;IACF,IAAI,EAAE,OAAC;SACL,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,GAAG,EAAE,CAAC;SAC3B,QAAQ,CACR,+EAA+E;QAC9E,eAAe,CAAC,KAAK;QACrB,uBAAuB;QACvB,eAAe,CAAC,KAAK;QACrB,MAAM;QACN,4BAA4B;QAC5B,iEAAiE;QACjE,+DAA+D;QAC/D,8EAA8E;QAC9E,gDAAgD;QAChD,uGAAuG,CACxG;CACO,CAAC;AACE,QAAA,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAEzC,QAAA,gBAAgB,GAAG,kBAAkB,CAAC;IAClD,KAAK,EAAE,0BAA0B;IACjC,WAAW,EACV,qGAAqG;QACrG,gGAAgG;QAChG,oMAAoM;QACpM,yMAAyM;QACzM,2IAA2I;IAC5I,UAAU,EAAE,gBAAgB;CAC5B,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG;IACxB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,qDAAqD,CAAC;IACzF,EAAE,EAAE,OAAC;SACH,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACR,gHAAgH,CAChH;CACO,CAAC;AACE,QAAA,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAEzC,QAAA,gBAAgB,GAAG,kBAAkB,CAAC;IAClD,KAAK,EAAE,0BAA0B;IACjC,WAAW,EACV,mCAAmC;QACnC,gDAAgD;QAChD,+DAA+D;QAC/D,0DAA0D;QAC1D,uCAAuC;QACvC,uCAAuC;QACvC,gFAAgF;QAChF,0DAA0D;IAC3D,UAAU,EAAE,gBAAgB;CAC5B,CAAC,CAAC;AAEU,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEjC,QAAA,sBAAsB,GAAG,kBAAkB,CAAC;IACxD,KAAK,EAAE,2BAA2B;IAClC,WAAW,EACV,2IAA2I;IAC5I,UAAU,EAAE,EAAE;CACd,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG;IAChC,SAAS,EAAE,OAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACR,mLAAmL,CACnL;CACO,CAAC;AACE,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAEzD,QAAA,wBAAwB,GAAG,kBAAkB,CAAC;IAC1D,KAAK,EAAE,qCAAqC;IAC5C,WAAW,EACV,yJAAyJ;IAC1J,UAAU,EAAE,wBAAwB;CACpC,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG;IAChC,WAAW,EAAE,OAAC;SACZ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACR,wFAAwF;QACvF,oFAAoF;QACpF,wKAAwK;QACxK,wDAAwD;QACxD,wCAAwC;QACxC,wDAAwD,CACzD;IACF,UAAU,EAAE,OAAC;SACX,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,GAAG,EAAE,CAAC;SAC3B,QAAQ,EAAE;SACV,QAAQ,CACR,mIAAmI;QAClI,qEAAqE;QACrE,mCAAmC;QACnC,sCAAsC;QACtC,sCAAsC;QACtC,2FAA2F,CAC5F;CACO,CAAC;AACE,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAEzD,QAAA,wBAAwB,GAAG,kBAAkB,CAAC;IAC1D,KAAK,EAAE,kCAAkC;IACzC,WAAW,EACV,yIAAyI;QACzI,qBAAqB;QACrB,kFAAkF;QAClF,qDAAqD;QACrD,uDAAuD;QACvD,oCAAoC;QACpC,4DAA4D;QAC5D,mFAAmF;QACnF,mDAAmD;QACnD,2BAA2B;QAC3B,uEAAuE;QACvE,+EAA+E;QAC/E,qFAAqF;QACrF,eAAe;QACf,2CAA2C;QAC3C,2DAA2D;QAC3D,kEAAkE;QAClE,8BAA8B;QAC9B,qEAAqE;QACrE,uCAAuC;QACvC,2DAA2D;QAC3D,6DAA6D;QAC7D,uDAAuD;QACvD,gQAAgQ;QAChQ,YAAY;QACZ,KAAK;QACL,+CAA+C;QAC/C,qBAAqB;QACrB,4DAA4D;QAC5D,wBAAwB;QACxB,4CAA4C;QAC5C,gCAAgC;QAChC,OAAO;QACP,OAAO;QACP,uEAAuE;IACxE,UAAU,EAAE,wBAAwB;CACpC,CAAC,CAAC;AAEH,MAAM,0BAA0B,GAAG;IAClC,eAAe,EAAE,OAAC;SAChB,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SACxB,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACR,kIAAkI,CAClI;CACO,CAAC;AAEE,QAAA,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;AAE7D,QAAA,0BAA0B,GAAG,kBAAkB,CAAC;IAC5D,KAAK,EAAE,kCAAkC;IACzC,WAAW,EACV,yNAAyN;IAC1N,UAAU,EAAE,0BAA0B;CACtC,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAChC,sLAAsL,CAAC;AAExL,MAAM,iCAAiC,GACtC,2LAA2L,CAAC;AAE7L,MAAM,8BAA8B,GAAG;IACtC,IAAI,EAAE,OAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACR,qFAAqF,CACrF;IACF,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,6DAA6D,CAAC;IAC/F,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IACtE,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACnC,UAAU,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,cAAc,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IACrF,aAAa,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;CAClD,CAAC;AAEX,MAAM,0BAA0B,GAAG,OAAC,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC;AAE5E,MAAM,gCAAgC,GAAG,0BAA0B,CAAC,MAAM,CAAC;IAC1E,EAAE,EAAE,OAAC;SACH,MAAM,EAAE;SACR,IAAI,EAAE;SACN,QAAQ,EAAE;SACV,QAAQ,CAAC,wEAAwE,CAAC;CACpF,CAAC,CAAC;AAEH,MAAM,gCAAgC,GAAG,0BAA0B,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC;IACpF,IAAI,EAAE,8BAA8B,CAAC,IAAI;IACzC,IAAI,EAAE,8BAA8B,CAAC,IAAI;IACzC,aAAa,EAAE,8BAA8B,CAAC,aAAa;CAC3D,CAAC,CAAC;AAEH,MAAM,0BAA0B,GAAG;IAClC,UAAU,EAAE,gCAAgC;IAC5C,YAAY,EAAE,OAAC;SACb,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CAAC,gFAAgF,CAAC;CACnF,CAAC;AAEE,QAAA,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;AAE7D,QAAA,0BAA0B,GAAG,kBAAkB,CAAC;IAC5D,KAAK,EAAE,wCAAwC;IAC/C,WAAW,EACV,iRAAiR;IAClR,UAAU,EAAE,0BAA0B;CACtC,CAAC,CAAC;AAEH,MAAM,6BAA6B,GAAG;IACrC,iBAAiB,EAAE,OAAC;SAClB,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,GAAG,EAAE,CAAC;SAC3B,QAAQ,CACR,kIAAkI;QACjI,aAAa;QACb,gDAAgD;QAChD,gGAAgG;QAChG,8EAA8E,CAC/E;CACO,CAAC;AAEE,QAAA,wBAAwB,GAAG,OAAC,CAAC,MAAM,CAAC,6BAA6B,CAAC,CAAC;AAEnE,QAAA,6BAA6B,GAAG,kBAAkB,CAAC;IAC/D,KAAK,EAAE,uCAAuC;IAC9C,WAAW,EACV,wEAAwE;QACxE,eAAe;QACf,iKAAiK;QACjK,UAAU;QACV,uDAAuD;QACvD,+GAA+G;QAC/G,uFAAuF;QACvF,8DAA8D;IAC/D,UAAU,EAAE,6BAA6B;CACzC,CAAC,CAAC;AAEH,MAAM,oCAAoC,GAAG;IAC5C,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IAC1E,UAAU,EAAE,gCAAgC,CAAC,QAAQ,CACpD,qLAAqL,CACrL;CACQ,CAAC;AAEE,QAAA,+BAA+B,GAAG,OAAC,CAAC,MAAM,CAAC,oCAAoC,CAAC,CAAC;AAEjF,QAAA,oCAAoC,GAAG,kBAAkB,CAAC;IACtE,KAAK,EAAE,2CAA2C;IAClD,WAAW,EACV,8ZAA8Z;IAC/Z,UAAU,EAAE,oCAAoC;CAChD,CAAC,CAAC"}
1
+ {"version":3,"file":"tools-data.js","sourceRoot":"","sources":["../../../src/server/mcp/tools-data.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,MAAM,iBAAiB,GAAG;IACzB,kBAAkB,EACjB,iDAAiD;QACjD,qDAAqD;QACrD,kEAAkE;QAClE,2FAA2F;QAC3F,iEAAiE;IAClE,cAAc,EACb,6BAA6B;QAC7B,8EAA8E;QAC9E,kEAAkE;QAClE,2DAA2D;QAC3D,qEAAqE;QACrE,+EAA+E;IAChF,eAAe,EACd,0FAA0F;CAClF,CAAC;AAEX,MAAM,eAAe,GAAG;IACvB,KAAK,EACJ,eAAe;QACf,6CAA6C;QAC7C,0BAA0B;QAC1B,2BAA2B;QAC3B,mEAAmE;QACnE,iFAAiF;IAClF,OAAO,EACN,kBAAkB;QAClB,uEAAuE;QACvE,kDAAkD;QAClD,8DAA8D;IAC/D,KAAK,EACJ,mBAAmB;QACnB,uCAAuC;QACvC,yDAAyD;QACzD,oCAAoC;QACpC,2DAA2D;CACnD,CAAC;AAEX,SAAS,kBAAkB,CAAC,IAI3B;IACA,OAAO;QACN,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC;AACH,CAAC;AAED,MAAM,kBAAkB,GAAG,+EAA+E,CAAC;AAC3G,MAAM,WAAW,GAAG,GAAG,EAAE,CACxB,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,EAAE,iCAAiC,CAAC,CAAC;AAEzE,MAAM,4BAA4B,GAAG,EAAE,CAAC;AAC3B,QAAA,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAEjE,QAAA,4BAA4B,GAAG,kBAAkB,CAAC;IAC9D,KAAK,EAAE,6CAA6C;IACpD,WAAW,EACV,wCAAwC;QACxC,kHAAkH;QAClH,mBAAmB;QACnB,kEAAkE;QAClE,yEAAyE;QACzE,wEAAwE;QACxE,+EAA+E;QAC/E,yBAAyB;QACzB,qEAAqE;QACrE,2CAA2C;QAC3C,2DAA2D;QAC3D,4EAA4E;QAC5E,YAAY;QACZ,KAAK;QACL,uDAAuD;QACvD,2EAA2E;QAC3E,iCAAiC;QACjC,4BAA4B;QAC5B,OAAO;QACP,6BAA6B;QAC7B,uEAAuE;QACvE,kEAAkE;QAClE,yCAAyC;QACzC,sDAAsD;QACtD,mDAAmD;QACnD,mBAAmB;QACnB,8DAA8D;QAC9D,iDAAiD;QACjD,yDAAyD;QACzD,sEAAsE;QACtE,kBAAkB;QAClB,yCAAyC;QACzC,sCAAsC;QACtC,kDAAkD;QAClD,wCAAwC;IACzC,UAAU,EAAE,4BAA4B;CACxC,CAAC,CAAC;AAEH,MAAM,EAAE,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;AAE9F,MAAM,KAAK,GAAG,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,EAAE,OAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAEvE,MAAM,aAAa,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9B,KAAK,EAAE,OAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACR,mGAAmG,CACnG;CACF,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,aAAa,CAAC,MAAM,CAAC;IAC7C,EAAE,EAAE,EAAE,CAAC,QAAQ,CACd,+EAA+E,CAC/E;IACD,KAAK,EAAE,KAAK,CAAC,QAAQ,CACpB,2EAA2E,CAC3E;CACD,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC;IACxC,EAAE,EAAE,OAAC;SACH,KAAK,CAAC,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;SACrD,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACR,0FAA0F,CAC1F;CACF,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,OAAC,CAAC,KAAK,CAAC,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAAC;AAE3D,MAAM,YAAY,GAAG,OAAC;KACpB,MAAM,CAAC;IACP,GAAG,EAAE,OAAC;SACJ,KAAK,CAAC,SAAS,CAAC;SAChB,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACR,8EAA8E,CAC9E;IACF,GAAG,EAAE,OAAC;SACJ,KAAK,CAAC,SAAS,CAAC;SAChB,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACR,kIAAkI,CAClI;CACF,CAAC;KACD,QAAQ,CACR,uGAAuG;IACtG,kGAAkG;IAClG,aAAa;IACb,gFAAgF;IAChF,0EAA0E;IAC1E,sHAAsH;IACtH,8HAA8H,CAC/H,CAAC;AAEH,MAAM,cAAc,GAAG;IACtB,MAAM,EAAE,OAAC;SACP,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACR,iKAAiK,CACjK;IACF,MAAM,EAAE,OAAC;SACP,UAAU,CACV,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EACjE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAC5B;SACA,QAAQ,CACR,oFAAoF;QACnF,sFAAsF;QACtF,iBAAiB,CAAC,cAAc;QAChC,MAAM;QACN,kDAAkD;QAClD,2DAA2D;QAC3D,qEAAqE;QACrE,gEAAgE;QAChE,aAAa;QACb,gEAAgE;QAChE,wCAAwC;QACxC,2DAA2D;QAC3D,8DAA8D;QAC9D,8GAA8G,CAC/G;IACF,OAAO,EAAE,YAAY;SACnB,QAAQ,EAAE;SACV,QAAQ,CACR,yHAAyH;QACxH,yEAAyE;QACzE,2DAA2D;QAC3D,oDAAoD;QACpD,sEAAsE;QACtE,aAAa;QACb,qGAAqG;QACrG,+FAA+F;QAC/F,sHAAsH;QACtH,yHAAyH;QACzH,8EAA8E,CAC/E;IACF,MAAM,EAAE,OAAC;SACP,UAAU,CACV,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAC3D,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAC9B;SACA,QAAQ,CACR,kFAAkF;QACjF,yEAAyE;QACzE,yDAAyD;QACzD,yEAAyE;QACzE,iBAAiB,CAAC,kBAAkB;QACpC,MAAM;QACN,+DAA+D;QAC/D,gEAAgE;QAChE,kDAAkD;QAClD,iDAAiD;QACjD,0DAA0D,CAC3D;IACF,MAAM,EAAE,OAAC;SACP,UAAU,CACV,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAC3D,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAC9B;SACA,QAAQ,CACR,6EAA6E;QAC5E,sEAAsE;QACtE,iEAAiE;QACjE,iBAAiB;QACjB,uEAAuE;QACvE,oEAAoE;QACpE,+CAA+C;QAC/C,eAAe;QACf,sDAAsD;QACtD,wDAAwD;QACxD,oDAAoD;QACpD,oEAAoE;QACpE,uBAAuB;QACvB,qBAAqB;QACrB,yBAAyB;QACzB,kDAAkD;QAClD,6EAA6E;QAC7E,iDAAiD;QACjD,8DAA8D;QAC9D,0DAA0D,CAC3D;IACF,OAAO,EAAE,OAAC;SACR,UAAU,CACV,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EACjE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CACrB;SACA,QAAQ,CACR,gDAAgD;QAC/C,+CAA+C;QAC/C,gDAAgD;QAChD,eAAe;QACf,kDAAkD;QAClD,8CAA8C;QAC9C,mDAAmD;QACnD,kEAAkE;QAClE,kEAAkE;QAClE,yFAAyF,CAC1F;IACF,GAAG,EAAE,OAAC,CAAC,MAAM;SACX,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,GAAG,CAAC,IAAI,CAAC;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,8DAA8D,CAAC;CACjE,CAAC;AACE,QAAA,SAAS,GAAG,OAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;AAErC,QAAA,cAAc,GAAG,kBAAkB,CAAC;IAChD,KAAK,EAAE,yBAAyB;IAChC,WAAW,EACV,kIAAkI;QAClI,oIAAoI;QACpI,kIAAkI;QAClI,gFAAgF;QAChF,+GAA+G;QAC/G,2LAA2L;IAC5L,UAAU,EAAE,cAAc;CAC1B,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG;IACxB,MAAM,EAAE,OAAC;SACP,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACR,0IAA0I,CAC1I;IACF,IAAI,EAAE,OAAC;SACL,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,GAAG,EAAE,CAAC;SAC3B,QAAQ,CACR,+BAA+B;QAC9B,eAAe,CAAC,KAAK;QACrB,MAAM;QACN,eAAe,CAAC,OAAO;QACvB,MAAM;QACN,eAAe,CAAC,KAAK;QACrB,MAAM;QACN,8EAA8E,CAC/E;CACO,CAAC;AACE,QAAA,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAEzC,QAAA,gBAAgB,GAAG,kBAAkB,CAAC;IAClD,KAAK,EAAE,0BAA0B;IACjC,WAAW,EACV,kGAAkG;QAClG,6DAA6D;QAC7D,8LAA8L;QAC9L,yRAAyR;QACzR,uTAAuT;QACvT,yeAAye;QACze,sCAAsC;QACtC,iIAAiI;IAClI,UAAU,EAAE,gBAAgB;CAC5B,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG;IACxB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,gDAAgD,CAAC;IACpF,EAAE,EAAE,OAAC;SACH,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACR,oIAAoI,CACpI;IACF,IAAI,EAAE,OAAC;SACL,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,GAAG,EAAE,CAAC;SAC3B,QAAQ,CACR,+EAA+E;QAC9E,eAAe,CAAC,KAAK;QACrB,uBAAuB;QACvB,eAAe,CAAC,KAAK;QACrB,MAAM;QACN,4BAA4B;QAC5B,iEAAiE;QACjE,+DAA+D;QAC/D,8EAA8E;QAC9E,gDAAgD;QAChD,uGAAuG,CACxG;CACO,CAAC;AACE,QAAA,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAEzC,QAAA,gBAAgB,GAAG,kBAAkB,CAAC;IAClD,KAAK,EAAE,0BAA0B;IACjC,WAAW,EACV,qGAAqG;QACrG,gGAAgG;QAChG,oMAAoM;QACpM,yMAAyM;QACzM,2IAA2I;IAC5I,UAAU,EAAE,gBAAgB;CAC5B,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG;IACxB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,qDAAqD,CAAC;IACzF,EAAE,EAAE,OAAC;SACH,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACR,gHAAgH,CAChH;CACO,CAAC;AACE,QAAA,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAEzC,QAAA,gBAAgB,GAAG,kBAAkB,CAAC;IAClD,KAAK,EAAE,0BAA0B;IACjC,WAAW,EACV,mCAAmC;QACnC,gDAAgD;QAChD,+DAA+D;QAC/D,0DAA0D;QAC1D,uCAAuC;QACvC,uCAAuC;QACvC,gFAAgF;QAChF,0DAA0D;IAC3D,UAAU,EAAE,gBAAgB;CAC5B,CAAC,CAAC;AAEU,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEjC,QAAA,sBAAsB,GAAG,kBAAkB,CAAC;IACxD,KAAK,EAAE,2BAA2B;IAClC,WAAW,EACV,2IAA2I;IAC5I,UAAU,EAAE,EAAE;CACd,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG;IAChC,SAAS,EAAE,OAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACR,mLAAmL,CACnL;CACO,CAAC;AACE,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAEzD,QAAA,wBAAwB,GAAG,kBAAkB,CAAC;IAC1D,KAAK,EAAE,qCAAqC;IAC5C,WAAW,EACV,yJAAyJ;IAC1J,UAAU,EAAE,wBAAwB;CACpC,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG;IAChC,WAAW,EAAE,OAAC;SACZ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACR,wFAAwF;QACvF,oFAAoF;QACpF,wKAAwK;QACxK,wDAAwD;QACxD,wCAAwC;QACxC,wDAAwD,CACzD;IACF,UAAU,EAAE,OAAC;SACX,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,GAAG,EAAE,CAAC;SAC3B,QAAQ,EAAE;SACV,QAAQ,CACR,mIAAmI;QAClI,qEAAqE;QACrE,mCAAmC;QACnC,sCAAsC;QACtC,sCAAsC;QACtC,2FAA2F,CAC5F;CACO,CAAC;AACE,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAEzD,QAAA,wBAAwB,GAAG,kBAAkB,CAAC;IAC1D,KAAK,EAAE,kCAAkC;IACzC,WAAW,EACV,yIAAyI;QACzI,qBAAqB;QACrB,kFAAkF;QAClF,qDAAqD;QACrD,uDAAuD;QACvD,oCAAoC;QACpC,4DAA4D;QAC5D,mFAAmF;QACnF,mDAAmD;QACnD,2BAA2B;QAC3B,uEAAuE;QACvE,+EAA+E;QAC/E,qFAAqF;QACrF,eAAe;QACf,2CAA2C;QAC3C,2DAA2D;QAC3D,kEAAkE;QAClE,8BAA8B;QAC9B,qEAAqE;QACrE,uCAAuC;QACvC,2DAA2D;QAC3D,6DAA6D;QAC7D,uDAAuD;QACvD,gQAAgQ;QAChQ,YAAY;QACZ,KAAK;QACL,+CAA+C;QAC/C,qBAAqB;QACrB,4DAA4D;QAC5D,wBAAwB;QACxB,4CAA4C;QAC5C,gCAAgC;QAChC,OAAO;QACP,OAAO;QACP,uEAAuE;IACxE,UAAU,EAAE,wBAAwB;CACpC,CAAC,CAAC;AAEH,MAAM,0BAA0B,GAAG;IAClC,eAAe,EAAE,OAAC;SAChB,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SACxB,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACR,kIAAkI,CAClI;CACO,CAAC;AAEE,QAAA,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;AAE7D,QAAA,0BAA0B,GAAG,kBAAkB,CAAC;IAC5D,KAAK,EAAE,kCAAkC;IACzC,WAAW,EACV,yNAAyN;IAC1N,UAAU,EAAE,0BAA0B;CACtC,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAChC,sLAAsL,CAAC;AAExL,MAAM,iCAAiC,GACtC,2LAA2L,CAAC;AAE7L,MAAM,8BAA8B,GAAG;IACtC,IAAI,EAAE,OAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACR,qFAAqF,CACrF;IACF,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,6DAA6D,CAAC;IAC/F,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IACtE,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACnC,UAAU,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,cAAc,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IACrF,aAAa,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;CAClD,CAAC;AAEX,MAAM,0BAA0B,GAAG,OAAC,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC;AAE5E,MAAM,gCAAgC,GAAG,0BAA0B,CAAC,MAAM,CAAC;IAC1E,EAAE,EAAE,WAAW,EAAE;SACf,QAAQ,EAAE;SACV,QAAQ,CAAC,wEAAwE,CAAC;CACpF,CAAC,CAAC;AAEH,MAAM,gCAAgC,GAAG,0BAA0B,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC;IACpF,IAAI,EAAE,8BAA8B,CAAC,IAAI;IACzC,IAAI,EAAE,8BAA8B,CAAC,IAAI;IACzC,aAAa,EAAE,8BAA8B,CAAC,aAAa;CAC3D,CAAC,CAAC;AAEH,MAAM,0BAA0B,GAAG;IAClC,UAAU,EAAE,gCAAgC;IAC5C,YAAY,EAAE,OAAC;SACb,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CAAC,gFAAgF,CAAC;CACnF,CAAC;AAEE,QAAA,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;AAE7D,QAAA,0BAA0B,GAAG,kBAAkB,CAAC;IAC5D,KAAK,EAAE,wCAAwC;IAC/C,WAAW,EACV,iRAAiR;IAClR,UAAU,EAAE,0BAA0B;CACtC,CAAC,CAAC;AAEH,MAAM,6BAA6B,GAAG;IACrC,iBAAiB,EAAE,OAAC;SAClB,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,GAAG,EAAE,CAAC;SAC3B,QAAQ,CACR,kIAAkI;QACjI,aAAa;QACb,gDAAgD;QAChD,gGAAgG;QAChG,8EAA8E,CAC/E;CACO,CAAC;AAEE,QAAA,wBAAwB,GAAG,OAAC,CAAC,MAAM,CAAC,6BAA6B,CAAC,CAAC;AAEnE,QAAA,6BAA6B,GAAG,kBAAkB,CAAC;IAC/D,KAAK,EAAE,uCAAuC;IAC9C,WAAW,EACV,wEAAwE;QACxE,eAAe;QACf,iKAAiK;QACjK,UAAU;QACV,uDAAuD;QACvD,+GAA+G;QAC/G,uFAAuF;QACvF,8DAA8D;IAC/D,UAAU,EAAE,6BAA6B;CACzC,CAAC,CAAC;AAEH,MAAM,oCAAoC,GAAG;IAC5C,EAAE,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACtE,UAAU,EAAE,gCAAgC,CAAC,QAAQ,CACpD,qLAAqL,CACrL;CACQ,CAAC;AAEE,QAAA,+BAA+B,GAAG,OAAC,CAAC,MAAM,CAAC,oCAAoC,CAAC,CAAC;AAEjF,QAAA,oCAAoC,GAAG,kBAAkB,CAAC;IACtE,KAAK,EAAE,2CAA2C;IAClD,WAAW,EACV,8ZAA8Z;IAC/Z,UAAU,EAAE,oCAAoC;CAChD,CAAC,CAAC;AAEH,MAAM,6BAA6B,GAAG;IACrC,WAAW,EAAE,OAAC;SACZ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACR,4KAA4K,CAC5K;CACO,CAAC;AAEE,QAAA,wBAAwB,GAAG,OAAC,CAAC,MAAM,CAAC,6BAA6B,CAAC,CAAC;AAEnE,QAAA,6BAA6B,GAAG,kBAAkB,CAAC;IAC/D,KAAK,EAAE,sCAAsC;IAC7C,WAAW,EACV,0UAA0U;IAC3U,UAAU,EAAE,6BAA6B;CACzC,CAAC,CAAC;AAEH,MAAM,8BAA8B,GAAG;IACtC,EAAE,EAAE,WAAW,EAAE;SACf,QAAQ,EAAE;SACV,QAAQ,CACR,gIAAgI,CAChI;IACF,IAAI,EAAE,OAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACR,gHAAgH,CAChH;IACF,IAAI,EAAE,OAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACR,wIAAwI,CACxI;IACF,WAAW,EAAE,OAAC;SACZ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,kEAAkE,CAAC;CACrE,CAAC;AAEE,QAAA,yBAAyB,GAAG,OAAC,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC;AAErE,QAAA,8BAA8B,GAAG,kBAAkB,CAAC;IAChE,KAAK,EAAE,2CAA2C;IAClD,WAAW,EACV,kWAAkW;IACnW,UAAU,EAAE,8BAA8B;CAC1C,CAAC,CAAC;AAEH,MAAM,8BAA8B,GAAG;IACtC,GAAG,EAAE,OAAC;SACJ,KAAK,CAAC,WAAW,EAAE,CAAC;SACpB,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACR,wLAAwL,CACxL;CACO,CAAC;AAEE,QAAA,yBAAyB,GAAG,OAAC,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC;AAErE,QAAA,8BAA8B,GAAG,kBAAkB,CAAC;IAChE,KAAK,EAAE,kCAAkC;IACzC,WAAW,EACV,qOAAqO;IACtO,UAAU,EAAE,8BAA8B;CAC1C,CAAC,CAAC;AAEH,MAAM,kCAAkC,GAAG;IAC1C,gBAAgB,EAAE,WAAW,EAAE,CAAC,QAAQ,CACvC,mHAAmH,CACnH;IACD,YAAY,EAAE,OAAC;SACb,KAAK,CAAC,WAAW,EAAE,CAAC;SACpB,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACR,gLAAgL,CAChL;IACF,UAAU,EAAE,OAAC;SACX,OAAO,EAAE;SACT,QAAQ,CACR,4FAA4F,CAC5F;CACO,CAAC;AAEE,QAAA,6BAA6B,GAAG,OAAC,CAAC,MAAM,CAAC,kCAAkC,CAAC,CAAC;AAE7E,QAAA,kCAAkC,GAAG,kBAAkB,CAAC;IACpE,KAAK,EAAE,oDAAoD;IAC3D,WAAW,EACV,gWAAgW;IACjW,UAAU,EAAE,kCAAkC;CAC9C,CAAC,CAAC;AAEH,MAAM,qCAAqC,GAAG;IAC7C,GAAG,EAAE,OAAC;SACJ,KAAK,CAAC,WAAW,EAAE,CAAC;SACpB,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACR,sKAAsK,CACtK;CACO,CAAC;AAEE,QAAA,gCAAgC,GAAG,OAAC,CAAC,MAAM,CAAC,qCAAqC,CAAC,CAAC;AAEnF,QAAA,qCAAqC,GAAG,kBAAkB,CAAC;IACvE,KAAK,EAAE,6CAA6C;IACpD,WAAW,EACV,wJAAwJ;IACzJ,UAAU,EAAE,qCAAqC;CACjD,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,0BAA0B,CAAC;AAExD,MAAM,kCAAkC,GAAG;IAC1C,OAAO,EAAE,OAAC;SACR,MAAM,EAAE;SACR,KAAK,CAAC,oBAAoB,EAAE,kDAAkD,CAAC;SAC/E,QAAQ,CACR,0HAA0H,CAC1H;IACF,MAAM,EAAE,OAAC;SACP,MAAM,EAAE;SACR,KAAK,CAAC,oBAAoB,EAAE,iDAAiD,CAAC;SAC9E,QAAQ,CACR,6EAA6E,CAC7E;IACF,UAAU,EAAE,OAAC;SACX,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;SAC/C,OAAO,CAAC,MAAM,CAAC;SACf,QAAQ,CAAC,4DAA4D,CAAC;IACxE,IAAI,EAAE,OAAC;SACL,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,GAAG,EAAE,CAAC;SAC3B,QAAQ,EAAE;SACV,QAAQ,CACR,6QAA6Q,CAC7Q;IACF,KAAK,EAAE,OAAC;SACN,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;SAClE,QAAQ,EAAE;SACV,QAAQ,CAAC,uDAAuD,CAAC;CAC1D,CAAC;AAEE,QAAA,6BAA6B,GAAG,OAAC,CAAC,MAAM,CAAC,kCAAkC,CAAC,CAAC;AAE7E,QAAA,kCAAkC,GAAG,kBAAkB,CAAC;IACpE,KAAK,EAAE,kDAAkD;IACzD,WAAW,EACV,sbAAsb;IACvb,UAAU,EAAE,kCAAkC;CAC9C,CAAC,CAAC"}
@@ -3,7 +3,6 @@ export declare class OAuthServer {
3
3
  private readonly _jwtSecret;
4
4
  private readonly _storage;
5
5
  private readonly _tokenManager;
6
- private readonly _accessTokens;
7
6
  private _baseUrl;
8
7
  constructor(baseUrl?: string);
9
8
  private _autoRegisterClientIfNeeded;
@@ -1 +1 @@
1
- {"version":3,"file":"oauth-server.d.ts","sourceRoot":"","sources":["../../../src/server/oauth/oauth-server.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EACX,gBAAgB,EAChB,yBAAyB,EACzB,gCAAgC,EAChC,WAAW,EACX,UAAU,EACV,iBAAiB,EACjB,MAAM,SAAS,CAAC;AAEjB,qBAAa,WAAW;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkD;IAC7E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsB;IAC/C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAoB;IAClD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAuC;IACrE,OAAO,CAAC,QAAQ,CAAS;gBAEb,OAAO,GAAE,MAAgC;IAKrD,OAAO,CAAC,2BAA2B;IAS5B,8BAA8B,IAAI,gCAAgC;IAclE,cAAc,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,WAAW;IAMpD,4BAA4B,CAAC,MAAM,EAAE,yBAAyB,GAAG,UAAU,GAAG,IAAI;IAclF,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAKlD,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO;IAgCxD,yBAAyB,CAC/B,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM,EACtB,qBAAqB,EAAE,MAAM,EAC7B,OAAO,EAAE,MAAM,GACb,MAAM;IAcI,oBAAoB,CAChC,MAAM,EAAE,iBAAiB,GACvB,OAAO,CAAC,gBAAgB,GAAG,UAAU,CAAC;IAyClC,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAIjD,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAIrD,OAAO,IAAI,IAAI;CAGtB"}
1
+ {"version":3,"file":"oauth-server.d.ts","sourceRoot":"","sources":["../../../src/server/oauth/oauth-server.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EACX,gBAAgB,EAChB,yBAAyB,EACzB,gCAAgC,EAChC,WAAW,EACX,UAAU,EACV,iBAAiB,EACjB,MAAM,SAAS,CAAC;AAEjB,qBAAa,WAAW;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkD;IAC7E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsB;IAC/C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAoB;IAClD,OAAO,CAAC,QAAQ,CAAS;gBAEb,OAAO,GAAE,MAAgC;IAKrD,OAAO,CAAC,2BAA2B;IAe5B,8BAA8B,IAAI,gCAAgC;IAclE,cAAc,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,WAAW;IAMpD,4BAA4B,CAAC,MAAM,EAAE,yBAAyB,GAAG,UAAU,GAAG,IAAI;IAclF,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAKlD,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO;IAuBxD,yBAAyB,CAC/B,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM,EACtB,qBAAqB,EAAE,MAAM,EAC7B,OAAO,EAAE,MAAM,GACb,MAAM;IAcI,oBAAoB,CAChC,MAAM,EAAE,iBAAiB,GACvB,OAAO,CAAC,gBAAgB,GAAG,UAAU,CAAC;IAmClC,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAIjD,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAIrD,OAAO,IAAI,IAAI;CAGtB"}
@@ -14,7 +14,6 @@ class OAuthServer {
14
14
  _jwtSecret = crypto_1.default.randomBytes(32).toString('hex');
15
15
  _storage = new storage_1.OAuthStorage();
16
16
  _tokenManager;
17
- _accessTokens = new Map();
18
17
  _baseUrl;
19
18
  constructor(baseUrl = 'http://localhost:3000') {
20
19
  this._baseUrl = baseUrl;
@@ -24,6 +23,12 @@ class OAuthServer {
24
23
  if (this._storage.hasClient(client_id)) {
25
24
  return false;
26
25
  }
26
+ // Never auto-register a client bound to a redirect target we would not allow,
27
+ // otherwise validateAuthorizationRequest would "pass" against an attacker URI (CWE-601).
28
+ if (!validators_1.OAuthValidators.isAllowedRedirectUri(redirect_uri)) {
29
+ log_1.default.warn('oauth.client.auto_register_rejected', { client_id });
30
+ return false;
31
+ }
27
32
  const client = client_manager_1.OAuthClientManager.autoRegisterClient(client_id, redirect_uri);
28
33
  this._storage.addClient(client);
29
34
  return true;
@@ -58,37 +63,28 @@ class OAuthServer {
58
63
  }
59
64
  storeState(state, client_id) {
60
65
  this._storage.storeState(state, client_id);
61
- log_1.default.info('oauth.state.stored', { state, client_id });
66
+ log_1.default.info('oauth.state.stored', { client_id });
62
67
  }
63
68
  validateState(state, client_id) {
64
- log_1.default.info('oauth.state.validate_attempt', {
65
- state,
66
- client_id,
67
- storedStates: this._storage.getAllStates(),
68
- });
69
69
  const stateData = this._storage.getState(state);
70
70
  if (!stateData) {
71
- log_1.default.warn('oauth.state.not_found', {
72
- state,
73
- storedStates: this._storage.getAllStates(),
74
- });
71
+ log_1.default.warn('oauth.state.not_found', { client_id });
75
72
  return false;
76
73
  }
77
74
  if (stateData.expires_at < Date.now()) {
78
75
  this._storage.deleteState(state);
79
- log_1.default.warn('oauth.state.expired', { state });
76
+ log_1.default.warn('oauth.state.expired', { client_id });
80
77
  return false;
81
78
  }
82
79
  if (stateData.client_id !== client_id) {
83
80
  log_1.default.warn('oauth.state.client_mismatch', {
84
- state,
85
81
  expected: stateData.client_id,
86
82
  actual: client_id,
87
83
  });
88
84
  return false;
89
85
  }
90
86
  this._storage.deleteState(state);
91
- log_1.default.info('oauth.state.validated_successfully', { state, client_id });
87
+ log_1.default.info('oauth.state.validated_successfully', { client_id });
92
88
  return true;
93
89
  }
94
90
  generateAuthorizationCode(client_id, redirect_uri, code_challenge, code_challenge_method, userKey) {
@@ -100,11 +96,9 @@ class OAuthServer {
100
96
  async exchangeCodeForToken(params) {
101
97
  log_1.default.info('oauth.token.exchange_start', {
102
98
  grant_type: params.grant_type,
103
- code: params.code ? '***' + params.code.slice(-4) : 'missing',
104
99
  client_id: params.client_id,
105
100
  redirect_uri: params.redirect_uri,
106
101
  has_code_verifier: !!params.code_verifier,
107
- stored_codes: this._storage.getAllStoredCodes().map((k) => '***' + k.slice(-4)),
108
102
  });
109
103
  const validationError = validators_1.OAuthValidators.validateTokenRequest(params);
110
104
  if (validationError) {
@@ -112,10 +106,7 @@ class OAuthServer {
112
106
  }
113
107
  const authCode = this._storage.getAuthorizationCode(params.code);
114
108
  if (!authCode) {
115
- log_1.default.error('oauth.token.code_not_found', {
116
- code: '***' + params.code.slice(-4),
117
- stored_codes: this._storage.getAllStoredCodes().map((k) => '***' + k.slice(-4)),
118
- });
109
+ log_1.default.error('oauth.token.code_not_found', { client_id: params.client_id });
119
110
  return { error: 'invalid_grant', error_description: 'Invalid authorization code' };
120
111
  }
121
112
  const codeValidationError = this._tokenManager.validateAuthCodeData(authCode, params);
@@ -127,7 +118,6 @@ class OAuthServer {
127
118
  return codeValidationError;
128
119
  }
129
120
  const tokenResponse = this._tokenManager.createTokenResponse(authCode.userKey, params.client_id);
130
- this._accessTokens.set(tokenResponse.access_token, tokenResponse);
131
121
  this._storage.deleteAuthorizationCode(params.code);
132
122
  log_1.default.info('oauth.token.issued', { client_id: params.client_id, userKey: authCode.userKey });
133
123
  return tokenResponse;
@@ -1 +1 @@
1
- {"version":3,"file":"oauth-server.js","sourceRoot":"","sources":["../../../src/server/oauth/oauth-server.ts"],"names":[],"mappings":";;;;;;AAAA,oDAA4B;AAE5B,oDAA4B;AAE5B,qDAAsD;AACtD,uCAAyC;AACzC,mDAAoD;AACpD,6CAA+C;AAW/C,MAAa,WAAW;IACN,UAAU,GAAW,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5D,QAAQ,GAAG,IAAI,sBAAY,EAAE,CAAC;IAC9B,aAAa,CAAoB;IACjC,aAAa,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC7D,QAAQ,CAAS;IAEzB,YAAY,UAAkB,uBAAuB;QACpD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,aAAa,GAAG,IAAI,iCAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7D,CAAC;IAEO,2BAA2B,CAAC,SAAiB,EAAE,YAAoB;QAC1E,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,mCAAkB,CAAC,kBAAkB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAC9E,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACb,CAAC;IAEM,8BAA8B;QACpC,OAAO;YACN,MAAM,EAAE,IAAI,CAAC,QAAQ;YACrB,sBAAsB,EAAE,GAAG,IAAI,CAAC,QAAQ,YAAY;YACpD,cAAc,EAAE,GAAG,IAAI,CAAC,QAAQ,QAAQ;YACxC,qBAAqB,EAAE,GAAG,IAAI,CAAC,QAAQ,WAAW;YAClD,wBAAwB,EAAE,CAAC,MAAM,CAAC;YAClC,qBAAqB,EAAE,CAAC,oBAAoB,CAAC;YAC7C,qCAAqC,EAAE,CAAC,MAAM,EAAE,oBAAoB,CAAC;YACrE,gCAAgC,EAAE,CAAC,MAAM,CAAC;YAC1C,gBAAgB,EAAE,CAAC,QAAQ,CAAC;SAC5B,CAAC;IACH,CAAC;IAEM,cAAc,CAAC,aAAuB;QAC5C,MAAM,MAAM,GAAG,mCAAkB,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAChC,OAAO,MAAM,CAAC;IACf,CAAC;IAEM,4BAA4B,CAAC,MAAiC;QACpE,IAAI,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,aAAa,GAAG,IAAI,CAAC,2BAA2B,CACrD,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,YAAY,CACnB,CAAC;YACF,IAAI,aAAa,EAAE,CAAC;gBACnB,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACpD,CAAC;QACF,CAAC;QACD,OAAO,4BAAe,CAAC,4BAA4B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC;IAEM,UAAU,CAAC,KAAa,EAAE,SAAiB;QACjD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC3C,aAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACtD,CAAC;IAEM,aAAa,CAAC,KAAa,EAAE,SAAiB;QACpD,aAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE;YACxC,KAAK;YACL,SAAS;YACT,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE;SAC1C,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,aAAG,CAAC,IAAI,CAAC,uBAAuB,EAAE;gBACjC,KAAK;gBACL,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE;aAC1C,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACd,CAAC;QACD,IAAI,SAAS,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACjC,aAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3C,OAAO,KAAK,CAAC;QACd,CAAC;QACD,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACvC,aAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE;gBACvC,KAAK;gBACL,QAAQ,EAAE,SAAS,CAAC,SAAS;gBAC7B,MAAM,EAAE,SAAS;aACjB,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACd,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACjC,aAAG,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC;IACb,CAAC;IAEM,yBAAyB,CAC/B,SAAiB,EACjB,YAAoB,EACpB,cAAsB,EACtB,qBAA6B,EAC7B,OAAe;QAEf,MAAM,IAAI,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CACnC,IAAI,EACJ,SAAS,EACT,YAAY,EACZ,cAAc,EACd,qBAAqB,EACrB,OAAO,CACP,CAAC;QACF,aAAG,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC;IACb,CAAC;IAEM,KAAK,CAAC,oBAAoB,CAChC,MAAyB;QAEzB,aAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE;YACtC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;YAC7D,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa;YACzC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;SAC/E,CAAC,CAAC;QACH,MAAM,eAAe,GAAG,4BAAe,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACrE,IAAI,eAAe,EAAE,CAAC;YACrB,OAAO,eAAe,CAAC;QACxB,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAK,CAAC,CAAC;QAClE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,aAAG,CAAC,KAAK,CAAC,4BAA4B,EAAE;gBACvC,IAAI,EAAE,KAAK,GAAG,MAAM,CAAC,IAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACpC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;aAC/E,CAAC,CAAC;YACH,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,CAAC;QACpF,CAAC;QACD,MAAM,mBAAmB,GAAG,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACtF,IAAI,mBAAmB,EAAE,CAAC;YACzB,IACC,mBAAmB,CAAC,KAAK,KAAK,eAAe;gBAC7C,mBAAmB,CAAC,iBAAiB,KAAK,4BAA4B,EACrE,CAAC;gBACF,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,MAAM,CAAC,IAAK,CAAC,CAAC;YACrD,CAAC;YACD,OAAO,mBAAmB,CAAC;QAC5B,CAAC;QACD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAC3D,QAAQ,CAAC,OAAO,EAChB,MAAM,CAAC,SAAS,CAChB,CAAC;QACF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QAClE,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,MAAM,CAAC,IAAK,CAAC,CAAC;QACpD,aAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3F,OAAO,aAAa,CAAC;IACtB,CAAC;IAEM,mBAAmB,CAAC,KAAa;QACvC,OAAO,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC;IAEM,SAAS,CAAC,SAAiB;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC;IAEM,OAAO;QACb,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;IACzB,CAAC;CACD;AAtKD,kCAsKC"}
1
+ {"version":3,"file":"oauth-server.js","sourceRoot":"","sources":["../../../src/server/oauth/oauth-server.ts"],"names":[],"mappings":";;;;;;AAAA,oDAA4B;AAE5B,oDAA4B;AAE5B,qDAAsD;AACtD,uCAAyC;AACzC,mDAAoD;AACpD,6CAA+C;AAW/C,MAAa,WAAW;IACN,UAAU,GAAW,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5D,QAAQ,GAAG,IAAI,sBAAY,EAAE,CAAC;IAC9B,aAAa,CAAoB;IAC1C,QAAQ,CAAS;IAEzB,YAAY,UAAkB,uBAAuB;QACpD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,aAAa,GAAG,IAAI,iCAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7D,CAAC;IAEO,2BAA2B,CAAC,SAAiB,EAAE,YAAoB;QAC1E,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC;QACd,CAAC;QACD,8EAA8E;QAC9E,yFAAyF;QACzF,IAAI,CAAC,4BAAe,CAAC,oBAAoB,CAAC,YAAY,CAAC,EAAE,CAAC;YACzD,aAAG,CAAC,IAAI,CAAC,qCAAqC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YAC/D,OAAO,KAAK,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,mCAAkB,CAAC,kBAAkB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAC9E,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACb,CAAC;IAEM,8BAA8B;QACpC,OAAO;YACN,MAAM,EAAE,IAAI,CAAC,QAAQ;YACrB,sBAAsB,EAAE,GAAG,IAAI,CAAC,QAAQ,YAAY;YACpD,cAAc,EAAE,GAAG,IAAI,CAAC,QAAQ,QAAQ;YACxC,qBAAqB,EAAE,GAAG,IAAI,CAAC,QAAQ,WAAW;YAClD,wBAAwB,EAAE,CAAC,MAAM,CAAC;YAClC,qBAAqB,EAAE,CAAC,oBAAoB,CAAC;YAC7C,qCAAqC,EAAE,CAAC,MAAM,EAAE,oBAAoB,CAAC;YACrE,gCAAgC,EAAE,CAAC,MAAM,CAAC;YAC1C,gBAAgB,EAAE,CAAC,QAAQ,CAAC;SAC5B,CAAC;IACH,CAAC;IAEM,cAAc,CAAC,aAAuB;QAC5C,MAAM,MAAM,GAAG,mCAAkB,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAChC,OAAO,MAAM,CAAC;IACf,CAAC;IAEM,4BAA4B,CAAC,MAAiC;QACpE,IAAI,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,aAAa,GAAG,IAAI,CAAC,2BAA2B,CACrD,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,YAAY,CACnB,CAAC;YACF,IAAI,aAAa,EAAE,CAAC;gBACnB,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACpD,CAAC;QACF,CAAC;QACD,OAAO,4BAAe,CAAC,4BAA4B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC;IAEM,UAAU,CAAC,KAAa,EAAE,SAAiB;QACjD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC3C,aAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAC/C,CAAC;IAEM,aAAa,CAAC,KAAa,EAAE,SAAiB;QACpD,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,aAAG,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YACjD,OAAO,KAAK,CAAC;QACd,CAAC;QACD,IAAI,SAAS,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACjC,aAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YAC/C,OAAO,KAAK,CAAC;QACd,CAAC;QACD,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACvC,aAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE;gBACvC,QAAQ,EAAE,SAAS,CAAC,SAAS;gBAC7B,MAAM,EAAE,SAAS;aACjB,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACd,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACjC,aAAG,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACb,CAAC;IAEM,yBAAyB,CAC/B,SAAiB,EACjB,YAAoB,EACpB,cAAsB,EACtB,qBAA6B,EAC7B,OAAe;QAEf,MAAM,IAAI,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CACnC,IAAI,EACJ,SAAS,EACT,YAAY,EACZ,cAAc,EACd,qBAAqB,EACrB,OAAO,CACP,CAAC;QACF,aAAG,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC;IACb,CAAC;IAEM,KAAK,CAAC,oBAAoB,CAChC,MAAyB;QAEzB,aAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE;YACtC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa;SACzC,CAAC,CAAC;QACH,MAAM,eAAe,GAAG,4BAAe,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACrE,IAAI,eAAe,EAAE,CAAC;YACrB,OAAO,eAAe,CAAC;QACxB,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAK,CAAC,CAAC;QAClE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,aAAG,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;YACzE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,CAAC;QACpF,CAAC;QACD,MAAM,mBAAmB,GAAG,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACtF,IAAI,mBAAmB,EAAE,CAAC;YACzB,IACC,mBAAmB,CAAC,KAAK,KAAK,eAAe;gBAC7C,mBAAmB,CAAC,iBAAiB,KAAK,4BAA4B,EACrE,CAAC;gBACF,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,MAAM,CAAC,IAAK,CAAC,CAAC;YACrD,CAAC;YACD,OAAO,mBAAmB,CAAC;QAC5B,CAAC;QACD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAC3D,QAAQ,CAAC,OAAO,EAChB,MAAM,CAAC,SAAS,CAChB,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,MAAM,CAAC,IAAK,CAAC,CAAC;QACpD,aAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3F,OAAO,aAAa,CAAC;IACtB,CAAC;IAEM,mBAAmB,CAAC,KAAa;QACvC,OAAO,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC;IAEM,SAAS,CAAC,SAAiB;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC;IAEM,OAAO;QACb,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;IACzB,CAAC;CACD;AA5JD,kCA4JC"}
@@ -24,8 +24,6 @@ export declare class OAuthStorage {
24
24
  storeState(state: string, client_id: string, expiresInMs?: number): void;
25
25
  getState(state: string): StateData | undefined;
26
26
  deleteState(state: string): void;
27
- getAllStates(): string[];
28
- getAllStoredCodes(): string[];
29
27
  cleanup(): void;
30
28
  }
31
29
  //# sourceMappingURL=storage.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../src/server/oauth/storage.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,MAAM,WAAW,qBAAqB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,SAAS;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,YAAY;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkC;IAC3D,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA4C;IAChF,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAgC;IAE9D,SAAS,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI;IAIpC,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAIrD,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAIrC,sBAAsB,CAC5B,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM,EACtB,qBAAqB,EAAE,MAAM,EAC7B,OAAO,EAAE,MAAM,EACf,WAAW,GAAE,MAAuB,GAClC,IAAI;IAYA,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS;IAIrE,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAI3C,UAAU,CAChB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,WAAW,GAAE,MAAuB,GAClC,IAAI;IAKA,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS;IAI9C,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAIhC,YAAY,IAAI,MAAM,EAAE;IAIxB,iBAAiB,IAAI,MAAM,EAAE;IAI7B,OAAO,IAAI,IAAI;CAiBtB"}
1
+ {"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../src/server/oauth/storage.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,MAAM,WAAW,qBAAqB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,SAAS;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,YAAY;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkC;IAC3D,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA4C;IAChF,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAgC;IAE9D,SAAS,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI;IAIpC,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAIrD,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAIrC,sBAAsB,CAC5B,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM,EACtB,qBAAqB,EAAE,MAAM,EAC7B,OAAO,EAAE,MAAM,EACf,WAAW,GAAE,MAAuB,GAClC,IAAI;IAYA,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS;IAIrE,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAI3C,UAAU,CAChB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,WAAW,GAAE,MAAuB,GAClC,IAAI;IAKA,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS;IAI9C,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAIhC,OAAO,IAAI,IAAI;CAiBtB"}
@@ -45,12 +45,6 @@ class OAuthStorage {
45
45
  deleteState(state) {
46
46
  this._authorizationStates.delete(state);
47
47
  }
48
- getAllStates() {
49
- return Array.from(this._authorizationStates.keys());
50
- }
51
- getAllStoredCodes() {
52
- return Array.from(this._authorizationCodes.keys());
53
- }
54
48
  cleanup() {
55
49
  const now = Date.now();
56
50
  for (const [code, data] of this._authorizationCodes.entries()) {
@@ -1 +1 @@
1
- {"version":3,"file":"storage.js","sourceRoot":"","sources":["../../../src/server/oauth/storage.ts"],"names":[],"mappings":";;;;;;AAAA,oDAA4B;AAkB5B,MAAa,YAAY;IACP,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC1C,mBAAmB,GAAG,IAAI,GAAG,EAAiC,CAAC;IAC/D,oBAAoB,GAAG,IAAI,GAAG,EAAqB,CAAC;IAE9D,SAAS,CAAC,MAAmB;QACnC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAEM,SAAS,CAAC,SAAiB;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAEM,SAAS,CAAC,SAAiB;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAEM,sBAAsB,CAC5B,IAAY,EACZ,SAAiB,EACjB,YAAoB,EACpB,cAAsB,EACtB,qBAA6B,EAC7B,OAAe,EACf,cAAsB,EAAE,GAAG,EAAE,GAAG,IAAI;QAEpC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;QAC5C,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,EAAE;YAClC,SAAS;YACT,YAAY;YACZ,cAAc;YACd,qBAAqB;YACrB,OAAO;YACP,UAAU;SACV,CAAC,CAAC;IACJ,CAAC;IAEM,oBAAoB,CAAC,IAAY;QACvC,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAEM,uBAAuB,CAAC,IAAY;QAC1C,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAEM,UAAU,CAChB,KAAa,EACb,SAAiB,EACjB,cAAsB,EAAE,GAAG,EAAE,GAAG,IAAI;QAEpC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;QAC5C,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;IACjE,CAAC;IAEM,QAAQ,CAAC,KAAa;QAC5B,OAAO,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IAEM,WAAW,CAAC,KAAa;QAC/B,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAEM,YAAY;QAClB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IAEM,iBAAiB;QACvB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IAEM,OAAO;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,EAAE,CAAC;YAC/D,IAAI,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC3B,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACvC,CAAC;QACF,CAAC;QACD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,EAAE,CAAC;YACjE,IAAI,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC3B,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACzC,CAAC;QACF,CAAC;QACD,aAAG,CAAC,IAAI,CAAC,iCAAiC,EAAE;YAC3C,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC,IAAI;YAC9C,gBAAgB,EAAE,IAAI,CAAC,oBAAoB,CAAC,IAAI;SAChD,CAAC,CAAC;IACJ,CAAC;CACD;AAvFD,oCAuFC"}
1
+ {"version":3,"file":"storage.js","sourceRoot":"","sources":["../../../src/server/oauth/storage.ts"],"names":[],"mappings":";;;;;;AAAA,oDAA4B;AAkB5B,MAAa,YAAY;IACP,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC1C,mBAAmB,GAAG,IAAI,GAAG,EAAiC,CAAC;IAC/D,oBAAoB,GAAG,IAAI,GAAG,EAAqB,CAAC;IAE9D,SAAS,CAAC,MAAmB;QACnC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAEM,SAAS,CAAC,SAAiB;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAEM,SAAS,CAAC,SAAiB;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAEM,sBAAsB,CAC5B,IAAY,EACZ,SAAiB,EACjB,YAAoB,EACpB,cAAsB,EACtB,qBAA6B,EAC7B,OAAe,EACf,cAAsB,EAAE,GAAG,EAAE,GAAG,IAAI;QAEpC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;QAC5C,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,EAAE;YAClC,SAAS;YACT,YAAY;YACZ,cAAc;YACd,qBAAqB;YACrB,OAAO;YACP,UAAU;SACV,CAAC,CAAC;IACJ,CAAC;IAEM,oBAAoB,CAAC,IAAY;QACvC,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAEM,uBAAuB,CAAC,IAAY;QAC1C,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAEM,UAAU,CAChB,KAAa,EACb,SAAiB,EACjB,cAAsB,EAAE,GAAG,EAAE,GAAG,IAAI;QAEpC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;QAC5C,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;IACjE,CAAC;IAEM,QAAQ,CAAC,KAAa;QAC5B,OAAO,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IAEM,WAAW,CAAC,KAAa;QAC/B,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAEM,OAAO;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,EAAE,CAAC;YAC/D,IAAI,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC3B,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACvC,CAAC;QACF,CAAC;QACD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,EAAE,CAAC;YACjE,IAAI,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC3B,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACzC,CAAC;QACF,CAAC;QACD,aAAG,CAAC,IAAI,CAAC,iCAAiC,EAAE;YAC3C,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC,IAAI;YAC9C,gBAAgB,EAAE,IAAI,CAAC,oBAAoB,CAAC,IAAI;SAChD,CAAC,CAAC;IACJ,CAAC;CACD;AA/ED,oCA+EC"}
@@ -1,5 +1,11 @@
1
1
  import type { OAuthAuthorizationRequest, OAuthClient, OAuthError, OAuthTokenRequest } from './types';
2
2
  export declare class OAuthValidators {
3
+ /**
4
+ * Restricts OAuth redirect targets to loopback web addresses (native-app local
5
+ * listeners) and custom app-scheme deep links, blocking redirects to arbitrary
6
+ * remote origins and script-bearing schemes (open redirect / code interception, CWE-601).
7
+ */
8
+ static isAllowedRedirectUri(uri: string): boolean;
3
9
  static validateAuthorizationRequest(params: OAuthAuthorizationRequest, client: OAuthClient | undefined): OAuthError | null;
4
10
  static validateTokenRequest(params: OAuthTokenRequest): OAuthError | null;
5
11
  static validateClientRegistration(redirect_uris: unknown): string | null;
@@ -1 +1 @@
1
- {"version":3,"file":"validators.d.ts","sourceRoot":"","sources":["../../../src/server/oauth/validators.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,yBAAyB,EACzB,WAAW,EACX,UAAU,EACV,iBAAiB,EACjB,MAAM,SAAS,CAAC;AACjB,qBAAa,eAAe;WACb,4BAA4B,CACzC,MAAM,EAAE,yBAAyB,EACjC,MAAM,EAAE,WAAW,GAAG,SAAS,GAC7B,UAAU,GAAG,IAAI;WAgBN,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,GAAG,UAAU,GAAG,IAAI;WAUlE,0BAA0B,CAAC,aAAa,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI;CAmB/E"}
1
+ {"version":3,"file":"validators.d.ts","sourceRoot":"","sources":["../../../src/server/oauth/validators.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,yBAAyB,EACzB,WAAW,EACX,UAAU,EACV,iBAAiB,EACjB,MAAM,SAAS,CAAC;AAIjB,qBAAa,eAAe;IAC3B;;;;OAIG;WACW,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;WAkB1C,4BAA4B,CACzC,MAAM,EAAE,yBAAyB,EACjC,MAAM,EAAE,WAAW,GAAG,SAAS,GAC7B,UAAU,GAAG,IAAI;WAgBN,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,GAAG,UAAU,GAAG,IAAI;WAUlE,0BAA0B,CAAC,aAAa,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI;CAsB/E"}
@@ -1,7 +1,32 @@
1
1
  "use strict";
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
3
  exports.OAuthValidators = void 0;
4
+ const DANGEROUS_SCHEMES = new Set(['javascript:', 'data:', 'file:', 'vbscript:', 'blob:']);
5
+ const LOOPBACK_HOSTS = new Set(['localhost', '127.0.0.1', '::1', '[::1]']);
4
6
  class OAuthValidators {
7
+ /**
8
+ * Restricts OAuth redirect targets to loopback web addresses (native-app local
9
+ * listeners) and custom app-scheme deep links, blocking redirects to arbitrary
10
+ * remote origins and script-bearing schemes (open redirect / code interception, CWE-601).
11
+ */
12
+ static isAllowedRedirectUri(uri) {
13
+ let parsed;
14
+ try {
15
+ parsed = new URL(uri);
16
+ }
17
+ catch {
18
+ return false;
19
+ }
20
+ const proto = parsed.protocol.toLowerCase();
21
+ if (DANGEROUS_SCHEMES.has(proto)) {
22
+ return false;
23
+ }
24
+ if (proto === 'http:' || proto === 'https:') {
25
+ return LOOPBACK_HOSTS.has(parsed.hostname.toLowerCase());
26
+ }
27
+ // Any other custom scheme (e.g. vscode:, cursor:, com.example.app:) is an app deep link.
28
+ return true;
29
+ }
5
30
  static validateAuthorizationRequest(params, client) {
6
31
  if (!client) {
7
32
  return { error: 'invalid_client', error_description: 'Client not found' };
@@ -43,6 +68,9 @@ class OAuthValidators {
43
68
  catch {
44
69
  return `Invalid redirect_uri: ${uri}`;
45
70
  }
71
+ if (!OAuthValidators.isAllowedRedirectUri(uri)) {
72
+ return `Disallowed redirect_uri (must be loopback or an app scheme): ${uri}`;
73
+ }
46
74
  }
47
75
  return null;
48
76
  }
@@ -1 +1 @@
1
- {"version":3,"file":"validators.js","sourceRoot":"","sources":["../../../src/server/oauth/validators.ts"],"names":[],"mappings":";;;AAMA,MAAa,eAAe;IACpB,MAAM,CAAC,4BAA4B,CACzC,MAAiC,EACjC,MAA+B;QAE/B,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YACzD,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,CAAC;QAChF,CAAC;QACD,IAAI,MAAM,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;YACrC,OAAO,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;QAC/C,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,qBAAqB,KAAK,MAAM,EAAE,CAAC;YACvE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC;QACzE,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;IAEM,MAAM,CAAC,oBAAoB,CAAC,MAAyB;QAC3D,IAAI,MAAM,CAAC,UAAU,KAAK,oBAAoB,EAAE,CAAC;YAChD,OAAO,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC3C,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,+BAA+B,EAAE,CAAC;QACzF,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;IAEM,MAAM,CAAC,0BAA0B,CAAC,aAAsB;QAC9D,IAAI,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YACrD,OAAO,gDAAgD,CAAC;QACzD,CAAC;QACD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,6CAA6C,CAAC;QACtD,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;YACjC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC7B,OAAO,mCAAmC,CAAC;YAC5C,CAAC;YACD,IAAI,CAAC;gBACJ,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,yBAAyB,GAAG,EAAE,CAAC;YACvC,CAAC;QACF,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;CACD;AAjDD,0CAiDC"}
1
+ {"version":3,"file":"validators.js","sourceRoot":"","sources":["../../../src/server/oauth/validators.ts"],"names":[],"mappings":";;;AAMA,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AAC3F,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAE3E,MAAa,eAAe;IAC3B;;;;OAIG;IACI,MAAM,CAAC,oBAAoB,CAAC,GAAW;QAC7C,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACJ,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,KAAK,CAAC;QACd,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC5C,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO,KAAK,CAAC;QACd,CAAC;QACD,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC7C,OAAO,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,yFAAyF;QACzF,OAAO,IAAI,CAAC;IACb,CAAC;IAEM,MAAM,CAAC,4BAA4B,CACzC,MAAiC,EACjC,MAA+B;QAE/B,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YACzD,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,CAAC;QAChF,CAAC;QACD,IAAI,MAAM,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;YACrC,OAAO,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;QAC/C,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,qBAAqB,KAAK,MAAM,EAAE,CAAC;YACvE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC;QACzE,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;IAEM,MAAM,CAAC,oBAAoB,CAAC,MAAyB;QAC3D,IAAI,MAAM,CAAC,UAAU,KAAK,oBAAoB,EAAE,CAAC;YAChD,OAAO,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC3C,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,+BAA+B,EAAE,CAAC;QACzF,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;IAEM,MAAM,CAAC,0BAA0B,CAAC,aAAsB;QAC9D,IAAI,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YACrD,OAAO,gDAAgD,CAAC;QACzD,CAAC;QACD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,6CAA6C,CAAC;QACtD,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;YACjC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC7B,OAAO,mCAAmC,CAAC;YAC5C,CAAC;YACD,IAAI,CAAC;gBACJ,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,yBAAyB,GAAG,EAAE,CAAC;YACvC,CAAC;YACD,IAAI,CAAC,eAAe,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChD,OAAO,gEAAgE,GAAG,EAAE,CAAC;YAC9E,CAAC;QACF,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;CACD;AA3ED,0CA2EC"}
@@ -14,9 +14,14 @@ export interface UserTokens {
14
14
  }
15
15
  export interface OAuthState {
16
16
  userKey: string;
17
+ sessionId?: string | undefined;
17
18
  createdAt: number;
18
19
  expiresAt: number;
19
20
  }
21
+ export interface OAuthStateResult {
22
+ userKey: string;
23
+ sessionId?: string | undefined;
24
+ }
20
25
  export declare class SessionContext {
21
26
  private static _instance;
22
27
  private readonly _sessions;
@@ -38,16 +43,12 @@ export declare class SessionContext {
38
43
  getTokensForUser(userKey: string): Promise<UserTokens | null>;
39
44
  setTokensForUser(userKey: string, tokens: UserTokens): Promise<void>;
40
45
  deleteTokensForUser(userKey: string): Promise<void>;
41
- createOAuthState(userKey: string): string;
42
- validateOAuthState(state: string): {
43
- userKey: string;
44
- } | null;
45
- validateAndConsumeOAuthState(state: string): string | undefined;
46
- setSessionUserKey(sessionId: string, userKey: string): void;
46
+ createOAuthState(userKey: string, sessionId?: string): string;
47
+ validateOAuthState(state: string): OAuthStateResult | null;
48
+ validateAndConsumeOAuthState(state: string): OAuthStateResult | undefined;
47
49
  cleanupExpiredOAuthStates(): void;
48
50
  getEffectiveTokens(sessionId?: string, userKey?: string): Promise<UserTokens | null>;
49
51
  createSessionWithUser(sessionId: string, userKey: string, remoteIp?: string): Promise<SessionInfo>;
50
- mapAllSessionsToUser(userKey: string): void;
51
52
  getStats(): {
52
53
  sessionsCount: number;
53
54
  tokensCount: number;
@@ -1 +1 @@
1
- {"version":3,"file":"session-context.d.ts","sourceRoot":"","sources":["../../src/services/session-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAInG,MAAM,WAAW,WAAW;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,SAAS,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;IACtD,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B;AAED,MAAM,WAAW,UAAU;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,WAAW,UAAU;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,cAAc;IAC1B,OAAO,CAAC,MAAM,CAAC,SAAS,CAA6B;IACrD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkC;IAC5D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiC;IAC7D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAiC;IAC9D,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAqB;IAEvD,WAAkB,QAAQ,IAAI,cAAc,CAK3C;IAED,OAAO,CAAC,cAAc;IAOf,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,WAAW;IAgBlF,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAItD,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAItC,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAS/C,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,6BAA6B,GAAG,IAAI;IAOtF,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAQ1D,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAiBtC,cAAc,IAAI,WAAW,EAAE;IAI/B,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,EAAE;IAI5C,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAQlE,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAI7D,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpE,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzD,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;IAWzC,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG;QACzC,OAAO,EAAE,MAAM,CAAC;KAChB,GAAG,IAAI;IAaD,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAK/D,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAQ3D,yBAAyB,IAAI,IAAI;IAS3B,kBAAkB,CAC9B,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAUhB,qBAAqB,CACjC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,WAAW,CAAC;IAKhB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAe3C,QAAQ,IAAI;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE;CAO3F"}
1
+ {"version":3,"file":"session-context.d.ts","sourceRoot":"","sources":["../../src/services/session-context.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAInG,MAAM,WAAW,WAAW;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,SAAS,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;IACtD,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B;AAED,MAAM,WAAW,UAAU;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,WAAW,UAAU;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B;AAED,qBAAa,cAAc;IAC1B,OAAO,CAAC,MAAM,CAAC,SAAS,CAA6B;IACrD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkC;IAC5D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiC;IAC7D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAiC;IAC9D,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAqB;IAEvD,WAAkB,QAAQ,IAAI,cAAc,CAK3C;IAED,OAAO,CAAC,cAAc;IAKf,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,WAAW;IAgBlF,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAItD,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAItC,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAS/C,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,6BAA6B,GAAG,IAAI;IAOtF,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAQ1D,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAiBtC,cAAc,IAAI,WAAW,EAAE;IAI/B,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,EAAE;IAI5C,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAQlE,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAI7D,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpE,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzD,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM;IAY7D,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI;IAa1D,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAIzE,yBAAyB,IAAI,IAAI;IAS3B,kBAAkB,CAC9B,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAUhB,qBAAqB,CACjC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,WAAW,CAAC;IAKhB,QAAQ,IAAI;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE;CAO3F"}