mcp-creatio 0.6.1 → 0.6.3

package/dist/utils/context.d.ts

@@ -1,10 +1,22 @@
 export type RequestContext = {
     userKey?: string | undefined;
     sessionId?: string | undefined;
+    /**
+     * The raw Bearer token from the incoming request, in the stateless per-request auth model
+     * (delegated/gateway). It is the Creatio access token the client/gateway obtained; the bearer
+     * auth provider passes it straight through to Creatio. Absent for legacy/client-credentials.
+     */
+    bearerToken?: string | undefined;
+    /** Optional per-request Creatio instance override (gateway multi-tenant), from X-Creatio-Base-Url. */
+    baseUrlOverride?: string | undefined;
 };
 export declare function runWithContext<T>(ctx: Partial<RequestContext>, fn: () => Promise<T>): Promise<T>;
 export declare function getRequestContext(): RequestContext | undefined;
 export declare function getUserKey(): string | undefined;
 export declare function getSessionId(): string | undefined;
+/** The raw per-request Bearer token (stateless delegated/gateway auth), if any. */
+export declare function getBearerToken(): string | undefined;
+/** The per-request Creatio base-URL override (gateway multi-tenant), if any. */
+export declare function getBaseUrlOverride(): string | undefined;
 export declare function getEffectiveUserKey(): string | undefined;
 //# sourceMappingURL=context.d.ts.map

package/dist/utils/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/utils/context.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,cAAc,GAAG;IAC5B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B,CAAC;AAMF,wBAAgB,cAAc,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAShG;AAED,wBAAgB,iBAAiB,IAAI,cAAc,GAAG,SAAS,CAE9D;AAED,wBAAgB,UAAU,IAAI,MAAM,GAAG,SAAS,CAE/C;AAED,wBAAgB,YAAY,IAAI,MAAM,GAAG,SAAS,CAEjD;AAED,wBAAgB,mBAAmB,IAAI,MAAM,GAAG,SAAS,CAYxD"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/utils/context.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,cAAc,GAAG;IAC5B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,sGAAsG;IACtG,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC,CAAC;AAMF,wBAAgB,cAAc,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAehG;AAED,wBAAgB,iBAAiB,IAAI,cAAc,GAAG,SAAS,CAE9D;AAED,wBAAgB,UAAU,IAAI,MAAM,GAAG,SAAS,CAE/C;AAED,wBAAgB,YAAY,IAAI,MAAM,GAAG,SAAS,CAEjD;AAED,mFAAmF;AACnF,wBAAgB,cAAc,IAAI,MAAM,GAAG,SAAS,CAEnD;AAED,gFAAgF;AAChF,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAEvD;AAED,wBAAgB,mBAAmB,IAAI,MAAM,GAAG,SAAS,CAYxD"}

package/dist/utils/context.js

@@ -4,6 +4,8 @@ exports.runWithContext = runWithContext;
 exports.getRequestContext = getRequestContext;
 exports.getUserKey = getUserKey;
 exports.getSessionId = getSessionId;
+exports.getBearerToken = getBearerToken;
+exports.getBaseUrlOverride = getBaseUrlOverride;
 exports.getEffectiveUserKey = getEffectiveUserKey;
 const node_async_hooks_1 = require("node:async_hooks");
 const sessions_1 = require("../sessions");
@@ -17,6 +19,12 @@ function runWithContext(ctx, fn) {
     if (typeof ctx.sessionId === 'string') {
         store.sessionId = ctx.sessionId;
     }
+    if (typeof ctx.bearerToken === 'string') {
+        store.bearerToken = ctx.bearerToken;
+    }
+    if (typeof ctx.baseUrlOverride === 'string') {
+        store.baseUrlOverride = ctx.baseUrlOverride;
+    }
     return als.run(store, fn);
 }
 function getRequestContext() {
@@ -28,6 +36,14 @@ function getUserKey() {
 function getSessionId() {
     return als.getStore()?.sessionId;
 }
+/** The raw per-request Bearer token (stateless delegated/gateway auth), if any. */
+function getBearerToken() {
+    return als.getStore()?.bearerToken;
+}
+/** The per-request Creatio base-URL override (gateway multi-tenant), if any. */
+function getBaseUrlOverride() {
+    return als.getStore()?.baseUrlOverride;
+}
 function getEffectiveUserKey() {
     const ctx = als.getStore();
     if (ctx?.userKey) {

package/dist/utils/context.js.map

@@ -1 +1 @@
-{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/utils/context.ts"],"names":[],"mappings":";;AAaA,wCASC;AAED,8CAEC;AAED,gCAEC;AAED,oCAEC;AAED,kDAYC;AAhDD,uDAAqD;AAErD,0CAA6C;AAO7C,MAAM,GAAG,GAAG,IAAI,oCAAiB,EAAkB,CAAC;AAEpD,MAAM,cAAc,GAAG,yBAAc,CAAC,QAAQ,CAAC;AAE/C,SAAgB,cAAc,CAAI,GAA4B,EAAE,EAAoB;IACnF,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACrC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC7B,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACvC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;IACjC,CAAC;IACD,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED,SAAgB,iBAAiB;IAChC,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACvB,CAAC;AAED,SAAgB,UAAU;IACzB,OAAO,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC;AAChC,CAAC;AAED,SAAgB,YAAY;IAC3B,OAAO,GAAG,CAAC,QAAQ,EAAE,EAAE,SAAS,CAAC;AAClC,CAAC;AAED,SAAgB,mBAAmB;IAClC,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC3B,IAAI,GAAG,EAAE,OAAO,EAAE,CAAC;QAClB,OAAO,GAAG,CAAC,OAAO,CAAC;IACpB,CAAC;IACD,IAAI,GAAG,EAAE,SAAS,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;YACtB,OAAO,OAAO,CAAC,OAAO,CAAC;QACxB,CAAC;IACF,CAAC;IACD,OAAO,GAAG,EAAE,SAAS,CAAC;AACvB,CAAC"}
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/utils/context.ts"],"names":[],"mappings":";;AAqBA,wCAeC;AAED,8CAEC;AAED,gCAEC;AAED,oCAEC;AAGD,wCAEC;AAGD,gDAEC;AAED,kDAYC;AAxED,uDAAqD;AAErD,0CAA6C;AAe7C,MAAM,GAAG,GAAG,IAAI,oCAAiB,EAAkB,CAAC;AAEpD,MAAM,cAAc,GAAG,yBAAc,CAAC,QAAQ,CAAC;AAE/C,SAAgB,cAAc,CAAI,GAA4B,EAAE,EAAoB;IACnF,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACrC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC7B,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACvC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QACzC,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;IACrC,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;QAC7C,KAAK,CAAC,eAAe,GAAG,GAAG,CAAC,eAAe,CAAC;IAC7C,CAAC;IACD,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED,SAAgB,iBAAiB;IAChC,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACvB,CAAC;AAED,SAAgB,UAAU;IACzB,OAAO,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC;AAChC,CAAC;AAED,SAAgB,YAAY;IAC3B,OAAO,GAAG,CAAC,QAAQ,EAAE,EAAE,SAAS,CAAC;AAClC,CAAC;AAED,mFAAmF;AACnF,SAAgB,cAAc;IAC7B,OAAO,GAAG,CAAC,QAAQ,EAAE,EAAE,WAAW,CAAC;AACpC,CAAC;AAED,gFAAgF;AAChF,SAAgB,kBAAkB;IACjC,OAAO,GAAG,CAAC,QAAQ,EAAE,EAAE,eAAe,CAAC;AACxC,CAAC;AAED,SAAgB,mBAAmB;IAClC,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC3B,IAAI,GAAG,EAAE,OAAO,EAAE,CAAC;QAClB,OAAO,GAAG,CAAC,OAAO,CAAC;IACpB,CAAC;IACD,IAAI,GAAG,EAAE,SAAS,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;YACtB,OAAO,OAAO,CAAC,OAAO,CAAC;QACxB,CAAC;IACF,CAAC;IACD,OAAO,GAAG,EAAE,SAAS,CAAC;AACvB,CAAC"}

package/dist/utils/env-aliases.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Resolves a legacy value for a canonical variable when the canonical one is unset. Returns the
+ * first legacy alias that holds a value (notifying once per deprecated alias actually used), or
+ * `undefined` when the variable has no aliases / none are set.
+ *
+ * `read` is injected (DIP) so this stays decoupled from how a raw env value is fetched/normalized.
+ */
+export declare function resolveLegacyEnv(canonical: string, read: (name: string) => string | undefined): string | undefined;
+//# sourceMappingURL=env-aliases.d.ts.map

package/dist/utils/env-aliases.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-aliases.d.ts","sourceRoot":"","sources":["../../src/utils/env-aliases.ts"],"names":[],"mappings":"AAoDA;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC/B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GACxC,MAAM,GAAG,SAAS,CAgBpB"}

package/dist/utils/env-aliases.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveLegacyEnv = resolveLegacyEnv;
+/**
+ * Single source of truth for backward-compatible environment names: each CANONICAL variable maps to
+ * the legacy names it superseded. Centralizing it here means the rename never leaks ad-hoc fallbacks
+ * across the codebase — call sites read only canonical names and this layer resolves the rest.
+ *
+ * These legacy names are intentionally undocumented; they exist only so an early adopter who already
+ * set an old name keeps working (with a deprecation notice) until they migrate.
+ */
+const LEGACY_ALIASES = {
+    // Platform convention — kept indefinitely, no deprecation notice.
+    CREATIO_MCP_PORT: [{ name: 'PORT', deprecated: false }],
+    // Renamed under the unified scheme — supported transitionally with a deprecation notice.
+    CREATIO_MCP_LOG_LEVEL: [{ name: 'MCP_CREATIO_LOG_LEVEL', deprecated: true }],
+    CREATIO_MCP_READONLY: [{ name: 'READONLY_MODE', deprecated: true }],
+    CREATIO_MCP_CRUD_BACKEND: [{ name: 'CREATIO_CRUD_BACKEND', deprecated: true }],
+    CREATIO_MCP_DISABLE_DATAFORGE: [{ name: 'DISABLE_DATAFORGE', deprecated: true }],
+    CREATIO_MCP_DISABLE_GLOBAL_SEARCH: [{ name: 'DISABLE_GLOBAL_SEARCH', deprecated: true }],
+    CREATIO_MCP_ENABLE_PUBLISHED_TOOLS: [{ name: 'ENABLE_PUBLISHED_TOOLS', deprecated: true }],
+    CREATIO_MCP_TRANSPORT: [{ name: 'MCP_TRANSPORT', deprecated: true }],
+};
+const _warned = new Set();
+/**
+ * Emits the deprecation notice straight to stderr (not the structured logger) on purpose: the
+ * logging module resolves its own level through `env()`, so depending on it here would create an
+ * env ↔ log import cycle. A one-line stderr notice keeps this layer self-contained.
+ */
+function noticeOnce(alias, canonical) {
+    if (_warned.has(alias)) {
+        return;
+    }
+    _warned.add(alias);
+    process.stderr.write(`[mcp-creatio] Environment variable "${alias}" is deprecated; use "${canonical}" instead.\n`);
+}
+/**
+ * Resolves a legacy value for a canonical variable when the canonical one is unset. Returns the
+ * first legacy alias that holds a value (notifying once per deprecated alias actually used), or
+ * `undefined` when the variable has no aliases / none are set.
+ *
+ * `read` is injected (DIP) so this stays decoupled from how a raw env value is fetched/normalized.
+ */
+function resolveLegacyEnv(canonical, read) {
+    const aliases = LEGACY_ALIASES[canonical];
+    if (!aliases) {
+        return undefined;
+    }
+    for (const alias of aliases) {
+        const value = read(alias.name);
+        if (value === undefined) {
+            continue;
+        }
+        if (alias.deprecated) {
+            noticeOnce(alias.name, canonical);
+        }
+        return value;
+    }
+    return undefined;
+}
+//# sourceMappingURL=env-aliases.js.map

package/dist/utils/env-aliases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-aliases.js","sourceRoot":"","sources":["../../src/utils/env-aliases.ts"],"names":[],"mappings":";;AA2DA,4CAmBC;AAhED;;;;;;;GAOG;AACH,MAAM,cAAc,GAAqD;IACxE,kEAAkE;IAClE,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACvD,yFAAyF;IACzF,qBAAqB,EAAE,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC5E,oBAAoB,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACnE,wBAAwB,EAAE,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC9E,6BAA6B,EAAE,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAChF,iCAAiC,EAAE,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACxF,kCAAkC,EAAE,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC1F,qBAAqB,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;CACpE,CAAC;AAEF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;AAElC;;;;GAIG;AACH,SAAS,UAAU,CAAC,KAAa,EAAE,SAAiB;IACnD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO;IACR,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CACnB,uCAAuC,KAAK,yBAAyB,SAAS,cAAc,CAC5F,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAC/B,SAAiB,EACjB,IAA0C;IAE1C,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,SAAS;QACV,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACtB,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC"}

package/dist/utils/env.d.ts

@@ -1,3 +1,8 @@
+/**
+ * Reads an environment variable by its CANONICAL name, transparently falling back to any legacy
+ * alias (see {@link resolveLegacyEnv}) for backward compatibility. Returns `undefined` for unset or
+ * blank values.
+ */
 export declare function env(name: string): string | undefined;
 export declare function envBool(name: string, def: boolean): boolean;
 //# sourceMappingURL=env.d.ts.map

package/dist/utils/env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/utils/env.ts"],"names":[],"mappings":"AAAA,wBAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGpD;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAM3D"}
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/utils/env.ts"],"names":[],"mappings":"AAOA;;;;GAIG;AACH,wBAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEpD;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAM3D"}

package/dist/utils/env.js

@@ -2,10 +2,19 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.env = env;
 exports.envBool = envBool;
-function env(name) {
+const env_aliases_1 = require("./env-aliases");
+function readRaw(name) {
     const v = process.env[name];
     return (v && v.trim()) || undefined;
 }
+/**
+ * Reads an environment variable by its CANONICAL name, transparently falling back to any legacy
+ * alias (see {@link resolveLegacyEnv}) for backward compatibility. Returns `undefined` for unset or
+ * blank values.
+ */
+function env(name) {
+    return readRaw(name) ?? (0, env_aliases_1.resolveLegacyEnv)(name, readRaw);
+}
 function envBool(name, def) {
     const v = env(name);
     if (v == null) {

package/dist/utils/env.js.map

@@ -1 +1 @@
-{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/utils/env.ts"],"names":[],"mappings":";;AAAA,kBAGC;AAED,0BAMC;AAXD,SAAgB,GAAG,CAAC,IAAY;IAC/B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,SAAS,CAAC;AACrC,CAAC;AAED,SAAgB,OAAO,CAAC,IAAY,EAAE,GAAY;IACjD,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QACf,OAAO,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,IAAI,CAAC,KAAK,GAAG,CAAC;AAChD,CAAC"}
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/utils/env.ts"],"names":[],"mappings":";;AAYA,kBAEC;AAED,0BAMC;AAtBD,+CAAiD;AAEjD,SAAS,OAAO,CAAC,IAAY;IAC5B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,SAAS,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,SAAgB,GAAG,CAAC,IAAY;IAC/B,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,IAAA,8BAAgB,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACzD,CAAC;AAED,SAAgB,OAAO,CAAC,IAAY,EAAE,GAAY;IACjD,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QACf,OAAO,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,IAAI,CAAC,KAAK,GAAG,CAAC;AAChD,CAAC"}

package/package.json

@@ -1,76 +1,80 @@
 {
-  "name": "mcp-creatio",
-  "version": "0.6.1",
-  "main": "dist/index.js",
-  "bin": {
-    "mcp-creatio": "dist/cli.js"
-  },
-  "files": [
-    "dist"
-  ],
-  "scripts": {
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "test:coverage": "vitest run --coverage",
-    "clean": "rimraf ./dist",
-    "prebuild": "npm run clean",
-    "build": "tsc",
-    "start": "ts-node src/index.ts",
-    "start:cli": "ts-node src/cli.ts",
-    "start:stdio": "ts-node src/cli.ts",
-    "prepack": "npm run build",
-    "lint": "eslint --ext .ts src",
-    "lint:fix": "eslint --ext .ts src --fix",
-    "format": "prettier --write \"src/**/*.{ts,js,json,md}\"",
-    "format:check": "prettier --check \"src/**/*.{ts,js,json,md}\""
-  },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/CRACKISH/mcp-creatio.git"
-  },
-  "keywords": [
-    "mcp",
-    "model-context-protocol",
-    "creatio",
-    "creatio-crm",
-    "crm",
-    "odata",
-    "mcp-server",
-    "chatgpt",
-    "claude",
-    "github-copilot",
-    "typescript",
-    "ai-tools"
-  ],
-  "author": "",
-  "license": "MIT",
-  "bugs": {
-    "url": "https://github.com/CRACKISH/mcp-creatio/issues"
-  },
-  "homepage": "https://github.com/CRACKISH/mcp-creatio#readme",
-  "description": "MCP server for Creatio CRM. Connect Claude Desktop, ChatGPT, and GitHub Copilot to Creatio via Model Context Protocol and OData v4.",
-  "devDependencies": {
-    "@types/express": "5.0.6",
-    "@types/node": "^26.0.1",
-    "@types/supertest": "^7.2.0",
-    "@typescript-eslint/eslint-plugin": "^8.62.0",
-    "@typescript-eslint/parser": "^8.62.0",
-    "@vitest/coverage-v8": "^4.1.9",
-    "eslint": "^9.39.4",
-    "eslint-config-prettier": "^10.1.8",
-    "eslint-plugin-import": "^2.32.0",
-    "eslint-plugin-prettier": "^5.5.6",
-    "prettier": "^3.8.4",
-    "rimraf": "^6.1.3",
-    "supertest": "^7.2.2",
-    "ts-node": "^10.9.2",
-    "typescript": "^6.0.3",
-    "vitest": "^4.1.9"
-  },
-  "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.29.0",
-    "@types/jsonwebtoken": "^9.0.10",
-    "fast-xml-parser": "^5.9.3",
-    "jsonwebtoken": "^9.0.3"
-  }
+	"name": "mcp-creatio",
+	"version": "0.6.3",
+	"main": "dist/index.js",
+	"bin": {
+		"mcp-creatio": "dist/cli.js"
+	},
+	"files": [
+		"dist"
+	],
+	"scripts": {
+		"test": "vitest run",
+		"test:watch": "vitest",
+		"test:coverage": "vitest run --coverage",
+		"clean": "rimraf ./dist",
+		"prebuild": "npm run clean",
+		"build": "tsc",
+		"start": "ts-node src/index.ts",
+		"start:cli": "ts-node src/cli.ts",
+		"start:stdio": "ts-node src/cli.ts",
+		"prepack": "npm run build",
+		"lint": "eslint --ext .ts src",
+		"lint:fix": "eslint --ext .ts src --fix",
+		"format": "prettier --write \"src/**/*.{ts,js,json}\" \"test/**/*.ts\" \"*.md\"",
+		"format:check": "prettier --check \"src/**/*.{ts,js,json}\" \"test/**/*.ts\" \"*.md\""
+	},
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/CRACKISH/mcp-creatio.git"
+	},
+	"keywords": [
+		"mcp",
+		"model-context-protocol",
+		"creatio",
+		"creatio-crm",
+		"crm",
+		"odata",
+		"mcp-server",
+		"chatgpt",
+		"claude",
+		"github-copilot",
+		"typescript",
+		"ai-tools"
+	],
+	"author": "",
+	"license": "MIT",
+	"bugs": {
+		"url": "https://github.com/CRACKISH/mcp-creatio/issues"
+	},
+	"homepage": "https://github.com/CRACKISH/mcp-creatio#readme",
+	"description": "MCP server for Creatio CRM. Connect Claude Desktop, ChatGPT, and GitHub Copilot to Creatio via Model Context Protocol and OData v4.",
+	"devDependencies": {
+		"@types/express": "5.0.6",
+		"@types/node": "^26.0.1",
+		"@types/supertest": "^7.2.0",
+		"@typescript-eslint/eslint-plugin": "^8.62.0",
+		"@typescript-eslint/parser": "^8.62.0",
+		"@vitest/coverage-v8": "^4.1.9",
+		"eslint": "^9.39.4",
+		"eslint-config-prettier": "^10.1.8",
+		"eslint-plugin-import": "^2.32.0",
+		"eslint-plugin-prettier": "^5.5.6",
+		"prettier": "^3.8.4",
+		"rimraf": "^6.1.3",
+		"supertest": "^7.2.2",
+		"ts-node": "^10.9.2",
+		"typescript": "^6.0.3",
+		"vitest": "^4.1.9"
+	},
+	"dependencies": {
+		"@modelcontextprotocol/sdk": "^1.29.0",
+		"@types/jsonwebtoken": "^9.0.10",
+		"express": "^5.2.1",
+		"fast-xml-parser": "^5.9.3",
+		"jsonwebtoken": "^9.0.3",
+		"redis": "^4.7.1",
+		"undici": "^6.27.0",
+		"zod": "^4.4.3"
+	}
 }

package/dist/creatio/auth/providers/oauth2-code-provider.d.ts

@@ -1,21 +0,0 @@
-import { CreatioClientConfig, OAuth2CodeAuthConfig } from '../../client-config';
-import { BaseOAuth2Provider } from './base-oauth2-provider';
-export declare class OAuth2CodeProvider extends BaseOAuth2Provider<OAuth2CodeAuthConfig> {
-    private readonly _sessionContext;
-    private readonly _tokenRefreshScheduler;
-    private readonly _inflightRefresh;
-    protected readonly authErrorCode = "oauth2_code_need_consent";
-    private get _scope();
-    constructor(config: CreatioClientConfig);
-    private _exchangeCodeForTokens;
-    private _refreshTokens;
-    protected throwNoTokenError(): void;
-    private _refreshTokensDeduped;
-    protected ensureAccessToken(force?: boolean): Promise<string | undefined>;
-    finishAuthorization(code: string): Promise<void>;
-    getAuthorizeUrl(state: string): Promise<string>;
-    revoke(): Promise<void>;
-    refreshUserTokens(userKey: string): Promise<void>;
-    cancelAllRefresh(): void;
-}
-//# sourceMappingURL=oauth2-code-provider.d.ts.map

package/dist/creatio/auth/providers/oauth2-code-provider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth2-code-provider.d.ts","sourceRoot":"","sources":["../../../../src/creatio/auth/providers/oauth2-code-provider.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAGhF,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAE5D,qBAAa,kBAAmB,SAAQ,kBAAkB,CAAC,oBAAoB,CAAC;IAC/E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA2B;IAC3D,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAA+B;IAGtE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA0C;IAE3E,SAAS,CAAC,QAAQ,CAAC,aAAa,8BAA8B;IAE9D,OAAO,KAAK,MAAM,GAEjB;gBAEW,MAAM,EAAE,mBAAmB;YAKzB,sBAAsB;YA2CtB,cAAc;IAuD5B,SAAS,CAAC,iBAAiB,IAAI,IAAI;IAQnC,OAAO,CAAC,qBAAqB;cAcb,iBAAiB,CAAC,KAAK,UAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IA+BhE,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYhD,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAa/C,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAwCvB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWvD,gBAAgB,IAAI,IAAI;CAG/B"}

package/dist/creatio/auth/providers/oauth2-code-provider.js

@@ -1,251 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OAuth2CodeProvider = void 0;
-const consts_1 = require("../../../consts");
-const log_1 = __importDefault(require("../../../log"));
-const sessions_1 = require("../../../sessions");
-const utils_1 = require("../../../utils");
-const auth_1 = require("../auth");
-const base_oauth2_provider_1 = require("./base-oauth2-provider");
-class OAuth2CodeProvider extends base_oauth2_provider_1.BaseOAuth2Provider {
-    _sessionContext = sessions_1.SessionContext.instance;
-    _tokenRefreshScheduler = new sessions_1.TokenRefreshScheduler();
-    // Deduplicates concurrent refreshes per user so K simultaneous requests trigger
-    // one refresh call, not K (avoids the thundering herd + rotating-refresh-token races).
-    _inflightRefresh = new Map();
-    authErrorCode = 'oauth2_code_need_consent';
-    get _scope() {
-        return this.authConfig.scope || 'offline_access';
-    }
-    constructor(config) {
-        super(config);
-        this._tokenRefreshScheduler.setRefreshCallback(this.refreshUserTokens.bind(this));
-    }
-    async _exchangeCodeForTokens(code) {
-        const idBase = this.getIdentityBase();
-        const url = idBase + auth_1.TOKEN_ENDPOINT;
-        const body = new URLSearchParams();
-        body.set('grant_type', 'authorization_code');
-        body.set('client_id', this.authConfig.clientId);
-        if (this.authConfig.clientSecret) {
-            body.set('client_secret', this.authConfig.clientSecret);
-        }
-        body.set('code', code);
-        body.set('redirect_uri', this.authConfig.redirectUri);
-        body.set('scope', this._scope);
-        log_1.default.creatioAuthStart(this.config.baseUrl, 'oauth2_code');
-        const res = await fetch(url, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-            body: body.toString(),
-        });
-        const txt = await res.text().catch(() => '');
-        if (!res.ok || !txt) {
-            log_1.default.creatioAuthFailed(this.config.baseUrl, `token:${res.status} ${txt}`, 'oauth2_code');
-            throw new Error(`oauth2_code_token_error:${res.status}`);
-        }
-        let j;
-        try {
-            j = JSON.parse(txt);
-        }
-        catch {
-            log_1.default.creatioAuthFailed(this.config.baseUrl, 'token_parse_failed', 'oauth2_code');
-            throw new Error('oauth2_code_token_parse_failed');
-        }
-        if (!j.access_token) {
-            throw new Error('oauth2_code_no_access_token');
-        }
-        const expiresIn = Number(j.expires_in) || 180;
-        const accessTokenExpiryMs = this.computeExpiryMs(expiresIn, 1);
-        log_1.default.creatioAuthOk(this.config.baseUrl, 'oauth2_code');
-        return {
-            accessToken: String(j.access_token),
-            accessTokenExpiryMs,
-            refreshToken: j.refresh_token ? String(j.refresh_token) : undefined,
-        };
-    }
-    async _refreshTokens(refreshToken) {
-        const idBase = this.getIdentityBase();
-        const url = idBase + auth_1.TOKEN_ENDPOINT;
-        log_1.default.info('oauth2_code.refresh_attempt', { url, refreshTokenLength: refreshToken.length });
-        const body = new URLSearchParams();
-        body.set('grant_type', 'refresh_token');
-        body.set('client_id', this.authConfig.clientId);
-        if (this.authConfig.clientSecret) {
-            body.set('client_secret', this.authConfig.clientSecret);
-        }
-        body.set('refresh_token', refreshToken);
-        body.set('redirect_uri', this.authConfig.redirectUri);
-        body.set('scope', this._scope);
-        const res = await fetch(url, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-            body: body.toString(),
-        });
-        const txt = await res.text().catch(() => '');
-        log_1.default.info('oauth2_code.refresh_response', {
-            status: res.status,
-            hasBody: !!txt,
-            bodyLength: txt.length,
-        });
-        if (!res.ok || !txt) {
-            log_1.default.error('oauth2_code.refresh_failed', {
-                status: res.status,
-                body: txt.substring(0, 200),
-            });
-            throw new Error(`oauth2_code_refresh_error:${res.status}`);
-        }
-        let j;
-        try {
-            j = JSON.parse(txt);
-        }
-        catch {
-            throw new Error('oauth2_code_refresh_parse_failed');
-        }
-        if (!j.access_token) {
-            throw new Error('oauth2_code_refresh_no_access_token');
-        }
-        const expiresIn = Number(j.expires_in) || 180;
-        const accessTokenExpiryMs = this.computeExpiryMs(expiresIn, 1);
-        const newTokens = {
-            accessToken: String(j.access_token),
-            accessTokenExpiryMs,
-            refreshToken: j.refresh_token ? String(j.refresh_token) : refreshToken,
-        };
-        log_1.default.info('oauth2_code.refresh_success', {
-            hasNewRefreshToken: !!j.refresh_token,
-            expiresIn,
-            accessTokenLength: newTokens.accessToken.length,
-        });
-        return newTokens;
-    }
-    throwNoTokenError() {
-        const userKey = (0, utils_1.getEffectiveUserKey)();
-        const errorMessage = userKey
-            ? `${this.authErrorCode}:http://localhost:${consts_1.HTTP_MCP_PORT}/oauth/start?userKey=${encodeURIComponent(userKey)}`
-            : this.authErrorCode;
-        throw new Error(errorMessage);
-    }
-    _refreshTokensDeduped(userKey, refreshToken) {
-        const existing = this._inflightRefresh.get(userKey);
-        if (existing) {
-            return existing;
-        }
-        const promise = (async () => {
-            const updated = await this._refreshTokens(refreshToken);
-            await this._sessionContext.setTokensForUser(userKey, updated);
-            return updated;
-        })().finally(() => this._inflightRefresh.delete(userKey));
-        this._inflightRefresh.set(userKey, promise);
-        return promise;
-    }
-    async ensureAccessToken(force = false) {
-        // This provider is a process-wide singleton serving many concurrent users, so the
-        // per-user tokens in SessionContext are the only cache — never instance fields,
-        // which a second user would overwrite (token thrash + cross-user bleed).
-        const userKey = (0, utils_1.getEffectiveUserKey)();
-        if (!userKey) {
-            log_1.default.warn('oauth2_code.no_user_key');
-            return undefined;
-        }
-        const saved = await this._sessionContext.getTokensForUser(userKey);
-        if (!saved) {
-            log_1.default.warn('oauth2_code.no_saved_tokens', { userKey });
-            return undefined;
-        }
-        const now = Date.now();
-        if (!force &&
-            saved.accessToken &&
-            saved.accessTokenExpiryMs &&
-            now < saved.accessTokenExpiryMs) {
-            return saved.accessToken;
-        }
-        if (saved.refreshToken) {
-            const updated = await this._refreshTokensDeduped(userKey, saved.refreshToken);
-            return updated.accessToken;
-        }
-        await this._sessionContext.deleteTokensForUser(userKey);
-        return undefined;
-    }
-    async finishAuthorization(code) {
-        const userKey = (0, utils_1.getEffectiveUserKey)();
-        log_1.default.info('oauth2_code.finish_authorization', { userKey, hasCode: !!code });
-        if (!userKey) {
-            throw new Error('oauth2_code_missing_user');
-        }
-        const tokens = await this._exchangeCodeForTokens(code);
-        await this._sessionContext.setTokensForUser(userKey, tokens);
-        this._tokenRefreshScheduler.scheduleRefresh(userKey);
-        log_1.default.info('oauth2_code.authorization_complete', { userKey });
-    }
-    async getAuthorizeUrl(state) {
-        const idBase = this.getIdentityBase();
-        const u = new URL(idBase + auth_1.AUTHORIZE_ENDPOINT);
-        u.searchParams.set('client_id', this.authConfig.clientId);
-        u.searchParams.set('redirect_uri', this.authConfig.redirectUri);
-        u.searchParams.set('response_type', 'code');
-        u.searchParams.set('state', state);
-        const scopeParam = encodeURIComponent(this._scope);
-        u.search += '&scope=' + scopeParam;
-        log_1.default.info('oauth2_code.authorize_url', { idBase });
-        return u.toString();
-    }
-    async revoke() {
-        try {
-            const userKey = (0, utils_1.getUserKey)();
-            if (!userKey) {
-                return;
-            }
-            const saved = await this._sessionContext.getTokensForUser(userKey);
-            if (!saved?.refreshToken) {
-                await this._sessionContext.deleteTokensForUser(userKey);
-                return;
-            }
-            const idBase = this.getIdentityBase();
-            const url = idBase + auth_1.REVOCATION_ENDPOINT;
-            const body = new URLSearchParams();
-            body.set('client_id', this.authConfig.clientId);
-            if (this.authConfig.clientSecret) {
-                body.set('client_secret', this.authConfig.clientSecret);
-            }
-            body.set('token', saved.refreshToken);
-            body.set('token_type_hint', 'refresh_token');
-            const res = await fetch(url, {
-                method: 'POST',
-                headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-                body: body.toString(),
-            });
-            if (!res.ok) {
-                const t = await res.text().catch(() => '');
-                log_1.default.error('oauth2_code.revoke_failed', { status: res.status, t });
-            }
-        }
-        finally {
-            const userKey = (0, utils_1.getUserKey)();
-            if (userKey) {
-                await this._sessionContext.deleteTokensForUser(userKey);
-                this._tokenRefreshScheduler.cancelRefresh(userKey);
-            }
-            this.accessToken = undefined;
-            this.accessTokenExpiryMs = undefined;
-        }
-    }
-    async refreshUserTokens(userKey) {
-        const saved = await this._sessionContext.getTokensForUser(userKey);
-        if (!saved?.refreshToken) {
-            throw new Error('oauth2_no_refresh_token');
-        }
-        // Share the same in-flight refresh as on-demand callers to avoid colliding
-        // refresh calls that would invalidate each other's rotating refresh token.
-        await this._refreshTokensDeduped(userKey, saved.refreshToken);
-        log_1.default.info('oauth2_code.background_refresh_success', { userKey });
-    }
-    cancelAllRefresh() {
-        this._tokenRefreshScheduler.cancelAllRefresh();
-    }
-}
-exports.OAuth2CodeProvider = OAuth2CodeProvider;
-//# sourceMappingURL=oauth2-code-provider.js.map