mcp-creatio 0.6.2 → 0.6.4

package/dist/server/http/broker-handlers.js

@@ -0,0 +1,224 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BrokerHandlers = void 0;
+const log_1 = __importDefault(require("../../log"));
+const utils_1 = require("../../utils");
+const bearer_1 = require("../bearer");
+const oauth_1 = require("../oauth");
+const public_origin_1 = require("./public-origin");
+const PROTECTED_RESOURCE_METADATA_PATH = '/.well-known/oauth-protected-resource';
+/** The public origin this AS advertises (honors CREATIO_MCP_PUBLIC_URL behind a proxy). */
+function origin(req) {
+    return (0, public_origin_1.resolvePublicOrigin)(req);
+}
+/** RFC 8414 Authorization Server Metadata, built from the request origin (proxy-aware). */
+function authServerMetadata(req) {
+    const base = origin(req);
+    return {
+        issuer: base,
+        authorization_endpoint: `${base}/authorize`,
+        token_endpoint: `${base}/token`,
+        registration_endpoint: `${base}/register`,
+        revocation_endpoint: `${base}/revoke`,
+        response_types_supported: ['code'],
+        grant_types_supported: ['authorization_code', 'refresh_token'],
+        token_endpoint_auth_methods_supported: ['none', 'client_secret_post'],
+        code_challenge_methods_supported: ['S256'],
+        scopes_supported: ['offline_access'],
+    };
+}
+/** The `iss`/`aud` the tokens this server issues are bound to: its own origin and `/mcp` resource.
+ *  Derived from the (proxy-aware) request so issue and validate always agree for this deployment. */
+function tokenAudience(req) {
+    const base = origin(req);
+    return { issuer: base, audience: `${base}/mcp` };
+}
+/**
+ * Broker mode HTTP handlers: the MCP is its own OAuth 2.1 authorization server for clients and
+ * brokers the user login to Creatio (authorization_code + PKCE). The MCP-client PKCE and our own
+ * Creatio-leg PKCE are kept in separate fields (server-side {@link OAuthServer.createPendingAuthorization})
+ * — nothing is embedded in the Creatio `state`, so the two never collide.
+ */
+class BrokerHandlers {
+    _oauth;
+    _creatio;
+    _session;
+    _callbackPath = '/oauth/callback';
+    constructor(_oauth, _creatio, _session) {
+        this._oauth = _oauth;
+        this._creatio = _creatio;
+        this._session = _session;
+    }
+    _callbackUrl(req) {
+        return `${origin(req)}${this._callbackPath}`;
+    }
+    /** RFC 6750 `401` challenge pointing at our protected-resource metadata. `invalid_token` tells a
+     *  client holding a now-unusable token to re-authenticate (vs. a plain "no credentials" prompt). */
+    _challenge(req, res, description, error = 'unauthorized') {
+        const resourceMetadata = `${origin(req)}${PROTECTED_RESOURCE_METADATA_PATH}`;
+        const params = [`Bearer resource_metadata="${resourceMetadata}"`];
+        if (error === 'invalid_token') {
+            params.push(`error="invalid_token"`, `error_description="${description}"`);
+        }
+        res.setHeader('WWW-Authenticate', params.join(', '));
+        res.status(401).json({ error, error_description: description });
+    }
+    _redirectError(res, redirectUri, error, state) {
+        const url = new URL(redirectUri);
+        url.searchParams.set('error', error.error);
+        if (error.error_description) {
+            url.searchParams.set('error_description', error.error_description);
+        }
+        if (state) {
+            url.searchParams.set('state', state);
+        }
+        res.redirect(302, url.toString());
+    }
+    handleMetadata(req, res) {
+        res.json(authServerMetadata(req));
+    }
+    /** RFC 9728: in broker mode WE are the authorization server, so it points back at this origin. */
+    handleProtectedResourceMetadata(req, res) {
+        const base = origin(req);
+        res.json((0, bearer_1.buildProtectedResourceMetadata)(`${base}/mcp`, base));
+    }
+    /**
+     * Guards `/mcp`: validates the token THIS server issued, confirms we still hold the user's
+     * brokered Creatio tokens, and exposes the `userKey`. The Creatio tokens are kept in memory and
+     * are therefore lost on restart, while the token we issued (a stateless JWT) survives — so a
+     * reconnecting client looks authenticated but every Creatio call would fail. When the tokens are
+     * gone we answer `401` with `error="invalid_token"` so the client transparently re-runs OAuth.
+     */
+    mcpAuth() {
+        return async (req, res, next) => {
+            const header = req.headers.authorization;
+            const userKey = header?.startsWith('Bearer ')
+                ? this._oauth.validateAccessToken(header.slice(7), tokenAudience(req))
+                : null;
+            if (!userKey) {
+                this._challenge(req, res, 'Authorization required. Complete the OAuth flow to obtain a token.');
+                return;
+            }
+            if (!(await this._session.getTokensForUser(userKey))) {
+                this._challenge(req, res, 'Session expired; the server no longer holds your Creatio tokens. Re-authorize to continue.', 'invalid_token');
+                return;
+            }
+            req.userKey = userKey;
+            next();
+        };
+    }
+    handleRegister(req, res) {
+        const { redirect_uris } = req.body ?? {};
+        const error = oauth_1.OAuthValidators.validateClientRegistration(redirect_uris);
+        if (error) {
+            res.status(400).json({ error: 'invalid_request', error_description: error });
+            return;
+        }
+        res.status(201).json(this._oauth.registerClient(redirect_uris));
+    }
+    async handleAuthorize(req, res) {
+        const q = req.query;
+        const redirectUri = q.redirect_uri ?? '';
+        if (!redirectUri || !oauth_1.OAuthValidators.isAllowedRedirectUri(redirectUri)) {
+            res.status(400).json({
+                error: 'invalid_request',
+                error_description: 'Missing or disallowed redirect_uri',
+            });
+            return;
+        }
+        const params = {
+            client_id: q.client_id ?? '',
+            redirect_uri: redirectUri,
+            response_type: q.response_type ?? '',
+            code_challenge: q.code_challenge ?? '',
+            code_challenge_method: q.code_challenge_method ?? '',
+            ...(q.state !== undefined ? { state: q.state } : {}),
+            ...(q.scope !== undefined ? { scope: q.scope } : {}),
+        };
+        const validationError = this._oauth.validateAuthorizationRequest(params);
+        if (validationError) {
+            return this._redirectError(res, redirectUri, validationError, q.state);
+        }
+        // Our own Creatio-leg PKCE, kept server-side (never mixed into the Creatio state).
+        const { verifier, challenge } = await (0, utils_1.generatePkcePair)();
+        const brokerState = this._oauth.createPendingAuthorization({
+            client_id: params.client_id,
+            redirect_uri: redirectUri,
+            code_challenge: params.code_challenge,
+            code_challenge_method: params.code_challenge_method,
+            client_state: q.state,
+            creatio_verifier: verifier,
+        });
+        const creatioUrl = this._creatio.buildAuthorizeUrl(this._callbackUrl(req), brokerState, challenge);
+        res.redirect(302, creatioUrl);
+    }
+    async handleCallback(req, res) {
+        const code = String(req.query.code ?? '');
+        const brokerState = String(req.query.state ?? '');
+        if (!code || !brokerState) {
+            res.status(400).send('Missing code or state');
+            return;
+        }
+        const pending = this._oauth.takePendingAuthorization(brokerState);
+        if (!pending) {
+            res.status(400).send('Unknown or expired authorization state');
+            return;
+        }
+        try {
+            const tokens = await this._creatio.exchangeCode(code, this._callbackUrl(req), pending.creatio_verifier);
+            const userKey = (0, bearer_1.inspectBearer)(tokens.accessToken).userKey;
+            await this._session.setTokensForUser(userKey, tokens);
+            const mcpCode = this._oauth.generateAuthorizationCode(pending.client_id, pending.redirect_uri, pending.code_challenge, pending.code_challenge_method, userKey);
+            const target = new URL(pending.redirect_uri);
+            target.searchParams.set('code', mcpCode);
+            if (pending.client_state) {
+                target.searchParams.set('state', pending.client_state);
+            }
+            res.redirect(302, target.toString());
+        }
+        catch (err) {
+            log_1.default.error('broker.callback.error', { error: String(err?.message ?? err) });
+            res.status(502).send('Failed to complete authorization with Creatio');
+        }
+    }
+    async handleToken(req, res) {
+        const body = req.body ?? {};
+        const aud = tokenAudience(req);
+        const sessionStillHeld = (userKey) => this._session.getTokensForUser(userKey).then(Boolean);
+        const result = body.grant_type === 'refresh_token'
+            ? await this._oauth.exchangeRefreshToken(body, aud, sessionStillHeld)
+            : await this._oauth.exchangeCodeForToken(body, aud);
+        if ('error' in result) {
+            res.status(400).json(result);
+            return;
+        }
+        res.json(result);
+    }
+    /**
+     * RFC 7009 token revocation / logout: invalidate the user's brokered session. Resolve the user
+     * from the presented token, revoke their Creatio token upstream (best-effort), and purge the
+     * server-side Creatio tokens + our issued refresh tokens. Always answers 200 — even for an
+     * unknown token — so it is not a token-validity oracle.
+     */
+    async handleRevoke(req, res) {
+        const token = String((req.body ?? {}).token ?? '');
+        if (token) {
+            const userKey = this._oauth.resolveUserFromToken(token, tokenAudience(req));
+            if (userKey) {
+                const stored = await this._session.getTokensForUser(userKey);
+                if (stored?.refreshToken) {
+                    await this._creatio.revoke(stored.refreshToken);
+                }
+                await this._session.deleteTokensForUser(userKey);
+                this._oauth.purgeRefreshTokensForUser(userKey);
+                log_1.default.info('broker.revoke', { userKey });
+            }
+        }
+        res.status(200).json({});
+    }
+}
+exports.BrokerHandlers = BrokerHandlers;
+//# sourceMappingURL=broker-handlers.js.map

package/dist/server/http/broker-handlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"broker-handlers.js","sourceRoot":"","sources":["../../../src/server/http/broker-handlers.ts"],"names":[],"mappings":";;;;;;AACA,oDAA4B;AAE5B,uCAA+C;AAC/C,sCAA0E;AAC1E,oCAAwD;AAExD,mDAAsD;AAItD,MAAM,gCAAgC,GAAG,uCAAuC,CAAC;AAEjF,2FAA2F;AAC3F,SAAS,MAAM,CAAC,GAAY;IAC3B,OAAO,IAAA,mCAAmB,EAAC,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,2FAA2F;AAC3F,SAAS,kBAAkB,CAAC,GAAY;IACvC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO;QACN,MAAM,EAAE,IAAI;QACZ,sBAAsB,EAAE,GAAG,IAAI,YAAY;QAC3C,cAAc,EAAE,GAAG,IAAI,QAAQ;QAC/B,qBAAqB,EAAE,GAAG,IAAI,WAAW;QACzC,mBAAmB,EAAE,GAAG,IAAI,SAAS;QACrC,wBAAwB,EAAE,CAAC,MAAM,CAAC;QAClC,qBAAqB,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;QAC9D,qCAAqC,EAAE,CAAC,MAAM,EAAE,oBAAoB,CAAC;QACrE,gCAAgC,EAAE,CAAC,MAAM,CAAC;QAC1C,gBAAgB,EAAE,CAAC,gBAAgB,CAAC;KACpC,CAAC;AACH,CAAC;AAED;qGACqG;AACrG,SAAS,aAAa,CAAC,GAAY;IAClC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,MAAM,EAAE,CAAC;AAClD,CAAC;AAED;;;;;GAKG;AACH,MAAa,cAAc;IAIR;IACA;IACA;IALD,aAAa,GAAG,iBAAiB,CAAC;IAEnD,YACkB,MAAmB,EACnB,QAA4B,EAC5B,QAAwB;QAFxB,WAAM,GAAN,MAAM,CAAa;QACnB,aAAQ,GAAR,QAAQ,CAAoB;QAC5B,aAAQ,GAAR,QAAQ,CAAgB;IACvC,CAAC;IAEI,YAAY,CAAC,GAAY;QAChC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;IAC9C,CAAC;IAED;wGACoG;IAC5F,UAAU,CACjB,GAAY,EACZ,GAAa,EACb,WAAmB,EACnB,QAA0C,cAAc;QAExD,MAAM,gBAAgB,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,gCAAgC,EAAE,CAAC;QAC7E,MAAM,MAAM,GAAG,CAAC,6BAA6B,gBAAgB,GAAG,CAAC,CAAC;QAClE,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,sBAAsB,WAAW,GAAG,CAAC,CAAC;QAC5E,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,CAAC,CAAC;IACjE,CAAC;IAEO,cAAc,CACrB,GAAa,EACb,WAAmB,EACnB,KAAoD,EACpD,KAAyB;QAEzB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC7B,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,KAAK,EAAE,CAAC;YACX,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnC,CAAC;IAEM,cAAc,CAAC,GAAY,EAAE,GAAa;QAChD,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,CAAC;IAED,kGAAkG;IAC3F,+BAA+B,CAAC,GAAY,EAAE,GAAa;QACjE,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,IAAA,uCAA8B,EAAC,GAAG,IAAI,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED;;;;;;OAMG;IACI,OAAO;QACb,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAiB,EAAE;YAC/E,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;YACzC,MAAM,OAAO,GAAG,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC;gBAC5C,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;gBACtE,CAAC,CAAC,IAAI,CAAC;YACR,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,IAAI,CAAC,UAAU,CACd,GAAG,EACH,GAAG,EACH,oEAAoE,CACpE,CAAC;gBACF,OAAO;YACR,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBACtD,IAAI,CAAC,UAAU,CACd,GAAG,EACH,GAAG,EACH,4FAA4F,EAC5F,eAAe,CACf,CAAC;gBACF,OAAO;YACR,CAAC;YACA,GAAsC,CAAC,OAAO,GAAG,OAAO,CAAC;YAC1D,IAAI,EAAE,CAAC;QACR,CAAC,CAAC;IACH,CAAC;IAEM,cAAc,CAAC,GAAY,EAAE,GAAa;QAChD,MAAM,EAAE,aAAa,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,uBAAe,CAAC,0BAA0B,CAAC,aAAa,CAAC,CAAC;QACxE,IAAI,KAAK,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7E,OAAO;QACR,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC;IACjE,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,GAAY,EAAE,GAAa;QACvD,MAAM,CAAC,GAAG,GAAG,CAAC,KAA2C,CAAC;QAC1D,MAAM,WAAW,GAAG,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC,WAAW,IAAI,CAAC,uBAAe,CAAC,oBAAoB,CAAC,WAAW,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,iBAAiB;gBACxB,iBAAiB,EAAE,oCAAoC;aACvD,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QACD,MAAM,MAAM,GAAG;YACd,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,EAAE;YAC5B,YAAY,EAAE,WAAW;YACzB,aAAa,EAAE,CAAC,CAAC,aAAa,IAAI,EAAE;YACpC,cAAc,EAAE,CAAC,CAAC,cAAc,IAAI,EAAE;YACtC,qBAAqB,EAAE,CAAC,CAAC,qBAAqB,IAAI,EAAE;YACpD,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpD,CAAC;QACF,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAAC;QACzE,IAAI,eAAe,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACxE,CAAC;QACD,mFAAmF;QACnF,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,MAAM,IAAA,wBAAgB,GAAE,CAAC;QACzD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC;YAC1D,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,YAAY,EAAE,WAAW;YACzB,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;YACnD,YAAY,EAAE,CAAC,CAAC,KAAK;YACrB,gBAAgB,EAAE,QAAQ;SAC1B,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CACjD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EACtB,WAAW,EACX,SAAS,CACT,CAAC;QACF,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC/B,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,GAAY,EAAE,GAAa;QACtD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC3B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YAC9C,OAAO;QACR,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;YAC/D,OAAO;QACR,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAC9C,IAAI,EACJ,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EACtB,OAAO,CAAC,gBAAgB,CACxB,CAAC;YACF,MAAM,OAAO,GAAG,IAAA,sBAAa,EAAC,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC;YAC1D,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,yBAAyB,CACpD,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,qBAAqB,EAC7B,OAAO,CACP,CAAC;YACF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC7C,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACzC,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;gBAC1B,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;YACxD,CAAC;YACD,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACvB,aAAG,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;YACtF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;QACvE,CAAC;IACF,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,GAAY,EAAE,GAAa;QACnD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,gBAAgB,GAAG,CAAC,OAAe,EAAoB,EAAE,CAC9D,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,MAAM,GACX,IAAI,CAAC,UAAU,KAAK,eAAe;YAClC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,EAAE,GAAG,EAAE,gBAAgB,CAAC;YACrE,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACtD,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;YACvB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7B,OAAO;QACR,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,YAAY,CAAC,GAAY,EAAE,GAAa;QACpD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,KAAK,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,KAAK,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5E,IAAI,OAAO,EAAE,CAAC;gBACb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBAC7D,IAAI,MAAM,EAAE,YAAY,EAAE,CAAC;oBAC1B,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;gBACjD,CAAC;gBACD,MAAM,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;gBACjD,IAAI,CAAC,MAAM,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;gBAC/C,aAAG,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YACxC,CAAC;QACF,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;CACD;AA5ND,wCA4NC"}

package/dist/server/http/{httpServer.d.ts → http-server.d.ts}

@@ -1,32 +1,24 @@
 import express from 'express';
+import type { CreatioClientConfig } from '../../creatio/';
 import type { Server } from '../mcp';
 export declare class HttpServer {
-    private static readonly CLEANUP_INTERVAL_MS;
     private static readonly BODY_LIMIT;
-    private static readonly RATE_LIMIT_AUTH_FLOW;
-    private static readonly RATE_LIMIT_TOKEN;
-    private static readonly RATE_LIMIT_REGISTER;
-    private static readonly RATE_LIMIT_REVOKE;
+    private static readonly CLEANUP_INTERVAL_MS;
     private readonly _server;
     private readonly _app;
     private readonly _connections;
     private _srv;
     private _cleanupTimer;
     private readonly _sessionContext;
-    private readonly _oauthServer;
     private readonly _middleware;
     private readonly _mcpHandlers;
-    private readonly _creatioOauthHandlers;
-    private readonly _mcpOauthHandlers;
+    private readonly _authEdge;
     get app(): express.Express;
-    constructor(server: Server);
+    constructor(server: Server, config?: CreatioClientConfig);
     private _setupMiddleware;
     private _setupRoutes;
     private _setupMCPEndpoints;
-    private _isNeedMCPOAuth;
-    private _setupCreatioOAuthEndpoints;
-    private _setupMCPOAuthEndpoints;
     start(port: number): Promise<void>;
     stop(): Promise<void>;
 }
-//# sourceMappingURL=httpServer.d.ts.map
+//# sourceMappingURL=http-server.d.ts.map

package/dist/server/http/http-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-server.d.ts","sourceRoot":"","sources":["../../../src/server/http/http-server.ts"],"names":[],"mappings":"AAGA,OAAO,OAAO,MAAM,SAAS,CAAC;AAS9B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAErC,qBAAa,UAAU;IACtB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAU;IAC5C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAiB;IAC5D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAa;IAClC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAClD,OAAO,CAAC,IAAI,CAAe;IAC3B,OAAO,CAAC,aAAa,CAA6B;IAClD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA2B;IAC3D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwB;IACpD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAc;IAC3C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuB;IAEjD,IAAW,GAAG,IAAI,OAAO,CAAC,OAAO,CAEhC;gBAEW,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,mBAAmB;IAQxD,OAAO,CAAC,gBAAgB;IAaxB,OAAO,CAAC,YAAY;IAKpB,OAAO,CAAC,kBAAkB;IAMnB,KAAK,CAAC,IAAI,EAAE,MAAM;IA4BZ,IAAI;CAoCjB"}

package/dist/server/http/{httpServer.js → http-server.js}

@@ -5,46 +5,30 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.HttpServer = void 0;
 const express_1 = __importDefault(require("express"));
-const creatio_1 = require("../../creatio/");
 const log_1 = __importDefault(require("../../log"));
 const sessions_1 = require("../../sessions");
-const utils_1 = require("../../utils");
-const oauth_1 = require("../oauth");
-const creatio_oauth_handlers_1 = require("./creatio-oauth-handlers");
+const auth_edge_1 = require("./auth-edge");
 const mcp_handlers_1 = require("./mcp-handlers");
-const mcp_oauth_handlers_1 = require("./mcp-oauth-handlers");
 const middleware_1 = require("./middleware");
 class HttpServer {
+    static BODY_LIMIT = '10mb';
     static CLEANUP_INTERVAL_MS = 5 * 60 * 1000;
-    // Generous, configurable cap so large CRM payloads/filters are not truncated.
-    // DoS on the OAuth surface is handled by the rate limiter (frequency), not body size.
-    static BODY_LIMIT = (0, utils_1.env)('MCP_MAX_BODY_SIZE') || '10mb';
-    // Per-route fixed-window limits (per client IP) for the unauthenticated OAuth surface.
-    static RATE_LIMIT_AUTH_FLOW = { windowMs: 60_000, max: 60 };
-    static RATE_LIMIT_TOKEN = { windowMs: 60_000, max: 30 };
-    static RATE_LIMIT_REGISTER = { windowMs: 60_000, max: 10 };
-    static RATE_LIMIT_REVOKE = { windowMs: 60_000, max: 20 };
     _server;
     _app = (0, express_1.default)();
     _connections = new Set();
     _srv;
     _cleanupTimer;
     _sessionContext = sessions_1.SessionContext.instance;
-    _oauthServer;
-    _middleware;
+    _middleware = new middleware_1.HttpMiddleware();
     _mcpHandlers;
-    _creatioOauthHandlers;
-    _mcpOauthHandlers;
+    _authEdge;
     get app() {
         return this._app;
     }
-    constructor(server) {
+    constructor(server, config) {
         this._server = server;
-        this._oauthServer = new oauth_1.OAuthServer();
-        this._middleware = new middleware_1.HttpMiddleware(this._oauthServer);
         this._mcpHandlers = new mcp_handlers_1.McpHandlers(this._server);
-        this._creatioOauthHandlers = new creatio_oauth_handlers_1.CreatioOAuthHandlers(this._server, this._oauthServer);
-        this._mcpOauthHandlers = new mcp_oauth_handlers_1.MCPOAuthHandlers(this._oauthServer);
+        this._authEdge = (0, auth_edge_1.createAuthEdge)(config, this._sessionContext);
         this._setupMiddleware();
         this._setupRoutes();
     }
@@ -53,37 +37,22 @@ class HttpServer {
         this._app.use(this._middleware.requestLogging());
         this._app.use(express_1.default.json({ limit: HttpServer.BODY_LIMIT }));
         this._app.use(express_1.default.urlencoded({ extended: true, limit: HttpServer.BODY_LIMIT }));
-        if (this._isNeedMCPOAuth()) {
-            this._app.use('/mcp', this._middleware.bearerAuth());
+        // Guard /mcp with the configured auth strategy (delegated/gateway bearer, or the broker's
+        // own issued token); no edge means a single-identity config with nothing to authenticate.
+        if (this._authEdge) {
+            this._app.use('/mcp', this._authEdge.mcpAuth());
         }
         this._app.use(this._middleware.errorHandler());
     }
     _setupRoutes() {
         this._setupMCPEndpoints();
-        if (this._isNeedMCPOAuth()) {
-            this._setupCreatioOAuthEndpoints();
-            this._setupMCPOAuthEndpoints();
-        }
+        this._authEdge?.registerRoutes(this._app, (o) => this._middleware.rateLimit(o));
     }
     _setupMCPEndpoints() {
         this._app.post('/mcp', (req, res) => this._mcpHandlers.handleMcpPost(req, res));
         this._app.get('/mcp', (req, res) => this._mcpHandlers.handleSessionRequest(req, res));
         this._app.delete('/mcp', (req, res) => this._mcpHandlers.handleSessionRequest(req, res));
     }
-    _isNeedMCPOAuth() {
-        return this._server.authProvider.type === creatio_1.AuthProviderType.OAuth2Code;
-    }
-    _setupCreatioOAuthEndpoints() {
-        this._app.get('/oauth/start', this._middleware.rateLimit(HttpServer.RATE_LIMIT_AUTH_FLOW), (req, res) => this._creatioOauthHandlers.handleOAuthStart(req, res));
-        this._app.get('/oauth/callback', this._middleware.rateLimit(HttpServer.RATE_LIMIT_AUTH_FLOW), (req, res) => this._creatioOauthHandlers.handleOAuthCallback(req, res));
-        this._app.post('/oauth/revoke', this._middleware.rateLimit(HttpServer.RATE_LIMIT_REVOKE), this._middleware.bearerAuth(), (req, res) => this._creatioOauthHandlers.handleOAuthRevoke(req, res));
-    }
-    _setupMCPOAuthEndpoints() {
-        this._app.get('/.well-known/oauth-authorization-server', (req, res) => this._mcpOauthHandlers.handleMetadata(req, res));
-        this._app.post('/register', this._middleware.rateLimit(HttpServer.RATE_LIMIT_REGISTER), (req, res) => this._mcpOauthHandlers.handleClientRegistration(req, res));
-        this._app.get('/authorize', this._middleware.rateLimit(HttpServer.RATE_LIMIT_AUTH_FLOW), (req, res) => this._mcpOauthHandlers.handleAuthorization(req, res));
-        this._app.post('/token', this._middleware.rateLimit(HttpServer.RATE_LIMIT_TOKEN), (req, res) => this._mcpOauthHandlers.handleTokenExchange(req, res));
-    }
     start(port) {
         return new Promise((resolve, reject) => {
             this._srv = this._app.listen(port, () => {
@@ -100,15 +69,12 @@ class HttpServer {
                 this._connections.add(socket);
                 socket.once('close', () => this._connections.delete(socket));
             });
-            // Periodically evict expired OAuth codes/states and unreachable user tokens so
-            // these maps stay bounded over a long-running process. Unref'd so it never holds
-            // the event loop open.
-            this._cleanupTimer = setInterval(() => {
-                this._oauthServer.cleanup();
-                this._sessionContext.cleanupExpiredOAuthStates();
-                this._sessionContext.evictStaleTokens();
-            }, HttpServer.CLEANUP_INTERVAL_MS);
-            this._cleanupTimer.unref();
+            // Some edges (broker) keep transient state to evict periodically so the maps stay
+            // bounded. Unref'd so it never holds the loop open.
+            if (this._authEdge?.cleanup) {
+                this._cleanupTimer = setInterval(() => this._authEdge.cleanup(), HttpServer.CLEANUP_INTERVAL_MS);
+                this._cleanupTimer.unref();
+            }
         });
     }
     async stop() {
@@ -124,7 +90,7 @@ class HttpServer {
         }
         if (this._srv) {
             try {
-                await this._server.stopMcp();
+                await this._server.stopAll();
                 await new Promise((resolve) => {
                     this._srv.close(() => resolve());
                 });
@@ -153,4 +119,4 @@ class HttpServer {
     }
 }
 exports.HttpServer = HttpServer;
-//# sourceMappingURL=httpServer.js.map
+//# sourceMappingURL=http-server.js.map

package/dist/server/http/http-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-server.js","sourceRoot":"","sources":["../../../src/server/http/http-server.ts"],"names":[],"mappings":";;;;;;AAGA,sDAA8B;AAE9B,oDAA4B;AAC5B,6CAAgD;AAEhD,2CAAuD;AACvD,iDAA6C;AAC7C,6CAA8C;AAK9C,MAAa,UAAU;IACd,MAAM,CAAU,UAAU,GAAG,MAAM,CAAC;IACpC,MAAM,CAAU,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAC3C,OAAO,CAAS;IAChB,IAAI,GAAG,IAAA,iBAAO,GAAE,CAAC;IACjB,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,IAAI,CAAe;IACnB,aAAa,CAA6B;IACjC,eAAe,GAAG,yBAAc,CAAC,QAAQ,CAAC;IAC1C,WAAW,GAAG,IAAI,2BAAc,EAAE,CAAC;IACnC,YAAY,CAAc;IAC1B,SAAS,CAAuB;IAEjD,IAAW,GAAG;QACb,OAAO,IAAI,CAAC,IAAI,CAAC;IAClB,CAAC;IAED,YAAY,MAAc,EAAE,MAA4B;QACvD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,YAAY,GAAG,IAAI,0BAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC,SAAS,GAAG,IAAA,0BAAc,EAAC,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAC9D,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,CAAC,YAAY,EAAE,CAAC;IACrB,CAAC;IAEO,gBAAgB;QACvB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACpF,0FAA0F;QAC1F,0FAA0F;QAC1F,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC,CAAC;IAChD,CAAC;IAEO,YAAY;QACnB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1B,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,CAAC;IAEO,kBAAkB;QACzB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1F,CAAC;IAEM,KAAK,CAAC,IAAY;QACxB,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC5C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;gBACvC,aAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBACpB,OAAO,EAAE,CAAC;YACX,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC;YAC7E,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC7B,aAAG,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5D,MAAM,CAAC,GAAG,CAAC,CAAC;YACb,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,MAAc,EAAE,EAAE;gBAC7C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAC9D,CAAC,CAAC,CAAC;YACH,kFAAkF;YAClF,oDAAoD;YACpD,IAAI,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;gBAC7B,IAAI,CAAC,aAAa,GAAG,WAAW,CAC/B,GAAG,EAAE,CAAC,IAAI,CAAC,SAAU,CAAC,OAAQ,EAAE,EAChC,UAAU,CAAC,mBAAmB,CAC9B,CAAC;gBACF,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;YAC5B,CAAC;QACF,CAAC,CAAC,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,IAAI;QAChB,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAClC,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QAChC,CAAC;QACD,IAAI,CAAC;YACJ,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,aAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,IAAI,CAAC;gBACJ,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBAC7B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;oBACnC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;gBAClC,CAAC,CAAC,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,aAAG,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACtD,CAAC;QACF,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC;gBACJ,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACX,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,cAAc,EAAE,CAAC;QACvD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAChC,IAAI,CAAC;gBACJ,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC;YAC5B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,aAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAChD,CAAC;IACF,CAAC;;AAhHF,gCAiHC"}

package/dist/server/http/index.d.ts

@@ -1,6 +1,4 @@
-export * from './httpServer';
+export * from './http-server';
 export * from './mcp-handlers';
 export * from './middleware';
-export * from './creatio-oauth-handlers';
-export * from './mcp-oauth-handlers';
 //# sourceMappingURL=index.d.ts.map

package/dist/server/http/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/http/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/http/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC"}

package/dist/server/http/index.js

@@ -14,9 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./httpServer"), exports);
+__exportStar(require("./http-server"), exports);
 __exportStar(require("./mcp-handlers"), exports);
 __exportStar(require("./middleware"), exports);
-__exportStar(require("./creatio-oauth-handlers"), exports);
-__exportStar(require("./mcp-oauth-handlers"), exports);
 //# sourceMappingURL=index.js.map

package/dist/server/http/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/http/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAA6B;AAC7B,iDAA+B;AAC/B,+CAA6B;AAC7B,2DAAyC;AACzC,uDAAqC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/http/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,gDAA8B;AAC9B,iDAA+B;AAC/B,+CAA6B"}

package/dist/server/http/mcp-handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-handlers.d.ts","sourceRoot":"","sources":["../../../src/server/http/mcp-handlers.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEjD,qBAAa,WAAW;IACvB,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA2B;IAC3D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,MAAM,EAAE,MAAM;IAIb,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAmDzD,oBAAoB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;CAmB7E"}
+{"version":3,"file":"mcp-handlers.d.ts","sourceRoot":"","sources":["../../../src/server/http/mcp-handlers.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEjD,qBAAa,WAAW;IACvB,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA2B;IAC3D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,MAAM,EAAE,MAAM;IAIb,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IA4DzD,oBAAoB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;CAuB7E"}

package/dist/server/http/mcp-handlers.js

@@ -41,13 +41,17 @@ class McpHandlers {
                     }
                 },
             });
+            // Each session gets its own McpServer (a single McpServer connects to one transport
+            // only). Release it when the transport closes so we don't leak servers or register
+            // late-probed tools into dead sessions.
+            const mcp = this._server.createSessionServer();
             transport.onclose = () => {
+                this._server.releaseSessionServer(mcp);
                 if (transport?.sessionId) {
                     log_1.default.sessionDisconnect(transport.sessionId, String(remoteIp));
                     this._sessionContext.deleteSession(transport.sessionId);
                 }
             };
-            const mcp = await this._server.startMcp();
             await mcp.connect(transport);
         }
         else {
@@ -60,7 +64,14 @@ class McpHandlers {
         }
         const session = this._sessionContext.getSession(sessionId);
         const userKey = bearerUserKey || session?.userKey;
-        await (0, utils_1.runWithContext)({ userKey, sessionId }, async () => transport.handleRequest(req, res, req.body));
+        const bearerToken = req.bearerToken;
+        const baseUrlOverride = req.baseUrlOverride;
+        await (0, utils_1.runWithContext)({ userKey, sessionId, bearerToken, baseUrlOverride }, async () => {
+            // Kick the one-time capability probe from inside the request context so its Creatio
+            // calls carry this caller's identity (broker mode has no user otherwise). Non-blocking.
+            this._server.ensureCapabilitiesProbed();
+            return transport.handleRequest(req, res, req.body);
+        });
     }
     async handleSessionRequest(req, res) {
         const sessionId = req.headers['mcp-session-id'];
@@ -78,7 +89,9 @@ class McpHandlers {
         // caller-supplied ?userKey=/x-user-key, which must not override an authenticated
         // identity (CWE-639).
         const userKey = req.userKey || session?.userKey || (0, utils_1.getUserKeyFromRequest)(req);
-        await (0, utils_1.runWithContext)({ userKey, sessionId }, async () => transport.handleRequest(req, res));
+        const bearerToken = req.bearerToken;
+        const baseUrlOverride = req.baseUrlOverride;
+        await (0, utils_1.runWithContext)({ userKey, sessionId, bearerToken, baseUrlOverride }, async () => transport.handleRequest(req, res));
     }
 }
 exports.McpHandlers = McpHandlers;

package/dist/server/http/mcp-handlers.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-handlers.js","sourceRoot":"","sources":["../../../src/server/http/mcp-handlers.ts"],"names":[],"mappings":";;;;;;AAAA,6CAAyC;AAEzC,0FAAmG;AACnG,iEAAyE;AAEzE,oDAA4B;AAC5B,6CAAgD;AAChD,uCAKqB;AAKrB,MAAa,WAAW;IACN,eAAe,GAAG,yBAAc,CAAC,QAAQ,CAAC;IAC1C,OAAO,CAAS;IAEjC,YAAY,MAAc;QACzB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IACvB,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,GAAY,EAAE,GAAa;QACrD,MAAM,SAAS,GAAG,IAAA,+BAAuB,EAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,aAAa,GAAI,GAAW,CAAC,OAAO,CAAC;QAC3C,IAAI,SAAoD,CAAC;QACzD,MAAM,QAAQ,GAAG,IAAA,mBAAW,EAAC,GAAG,CAAC,CAAC;QAClC,IAAI,SAAS,IAAI,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAC3D,SAAS,GAAG,OAAO,EAAE,SAAS,CAAC;YAC/B,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAClC,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;gBACpD,aAAG,CAAC,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YACjD,CAAC;QACF,CAAC;aAAM,IAAI,CAAC,SAAS,IAAI,IAAA,8BAAmB,EAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACxD,SAAS,GAAG,IAAI,iDAA6B,CAAC;gBAC7C,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAA,wBAAU,GAAE;gBACtC,oBAAoB,EAAE,CAAC,GAAG,EAAE,EAAE;oBAC7B,IAAI,SAAS,EAAE,CAAC;wBACf,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,aAAa,CACjD,GAAG,EACH,aAAa,EACb,QAAQ,CACR,CAAC;wBACF,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;wBACzD,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;wBAC9C,aAAG,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;oBAC3C,CAAC;gBACF,CAAC;aACD,CAAC,CAAC;YACH,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;gBACxB,IAAI,SAAS,EAAE,SAAS,EAAE,CAAC;oBAC1B,aAAG,CAAC,iBAAiB,CAAC,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;oBAC7D,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBACzD,CAAC;YACF,CAAC,CAAC;YACF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC1C,MAAM,GAAG,CAAC,OAAO,CAAC,SAAgB,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACpB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,2CAA2C,EAAE;gBAC7E,EAAE,EAAE,IAAI;aACR,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,aAAa,IAAI,OAAO,EAAE,OAAO,CAAC;QAClD,MAAM,IAAA,sBAAc,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,KAAK,IAAI,EAAE,CACvD,SAAU,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAC5C,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,oBAAoB,CAAC,GAAY,EAAE,GAAa;QAC5D,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;QACtE,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YACtD,OAAO;QACR,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,CAAC;QACrC,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YACjD,OAAO;QACR,CAAC;QACD,8EAA8E;QAC9E,iFAAiF;QACjF,sBAAsB;QACtB,MAAM,OAAO,GACX,GAAW,CAAC,OAAO,IAAI,OAAO,EAAE,OAAO,IAAI,IAAA,6BAAqB,EAAC,GAAU,CAAC,CAAC;QAC/E,MAAM,IAAA,sBAAc,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7F,CAAC;CACD;AA9ED,kCA8EC"}
+{"version":3,"file":"mcp-handlers.js","sourceRoot":"","sources":["../../../src/server/http/mcp-handlers.ts"],"names":[],"mappings":";;;;;;AAAA,6CAAyC;AAEzC,0FAAmG;AACnG,iEAAyE;AAEzE,oDAA4B;AAC5B,6CAAgD;AAChD,uCAKqB;AAKrB,MAAa,WAAW;IACN,eAAe,GAAG,yBAAc,CAAC,QAAQ,CAAC;IAC1C,OAAO,CAAS;IAEjC,YAAY,MAAc;QACzB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IACvB,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,GAAY,EAAE,GAAa;QACrD,MAAM,SAAS,GAAG,IAAA,+BAAuB,EAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,aAAa,GAAI,GAAW,CAAC,OAAO,CAAC;QAC3C,IAAI,SAAoD,CAAC;QACzD,MAAM,QAAQ,GAAG,IAAA,mBAAW,EAAC,GAAG,CAAC,CAAC;QAClC,IAAI,SAAS,IAAI,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAC3D,SAAS,GAAG,OAAO,EAAE,SAAS,CAAC;YAC/B,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAClC,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;gBACpD,aAAG,CAAC,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YACjD,CAAC;QACF,CAAC;aAAM,IAAI,CAAC,SAAS,IAAI,IAAA,8BAAmB,EAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACxD,SAAS,GAAG,IAAI,iDAA6B,CAAC;gBAC7C,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAA,wBAAU,GAAE;gBACtC,oBAAoB,EAAE,CAAC,GAAG,EAAE,EAAE;oBAC7B,IAAI,SAAS,EAAE,CAAC;wBACf,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,aAAa,CACjD,GAAG,EACH,aAAa,EACb,QAAQ,CACR,CAAC;wBACF,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;wBACzD,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;wBAC9C,aAAG,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;oBAC3C,CAAC;gBACF,CAAC;aACD,CAAC,CAAC;YACH,oFAAoF;YACpF,mFAAmF;YACnF,wCAAwC;YACxC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;YAC/C,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;gBACxB,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;gBACvC,IAAI,SAAS,EAAE,SAAS,EAAE,CAAC;oBAC1B,aAAG,CAAC,iBAAiB,CAAC,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;oBAC7D,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBACzD,CAAC;YACF,CAAC,CAAC;YACF,MAAM,GAAG,CAAC,OAAO,CAAC,SAAgB,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACpB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,2CAA2C,EAAE;gBAC7E,EAAE,EAAE,IAAI;aACR,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,aAAa,IAAI,OAAO,EAAE,OAAO,CAAC;QAClD,MAAM,WAAW,GAAI,GAAW,CAAC,WAAiC,CAAC;QACnE,MAAM,eAAe,GAAI,GAAW,CAAC,eAAqC,CAAC;QAC3E,MAAM,IAAA,sBAAc,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,EAAE,KAAK,IAAI,EAAE;YACrF,oFAAoF;YACpF,wFAAwF;YACxF,IAAI,CAAC,OAAO,CAAC,wBAAwB,EAAE,CAAC;YACxC,OAAO,SAAU,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,oBAAoB,CAAC,GAAY,EAAE,GAAa;QAC5D,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;QACtE,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YACtD,OAAO;QACR,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,CAAC;QACrC,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YACjD,OAAO;QACR,CAAC;QACD,8EAA8E;QAC9E,iFAAiF;QACjF,sBAAsB;QACtB,MAAM,OAAO,GACX,GAAW,CAAC,OAAO,IAAI,OAAO,EAAE,OAAO,IAAI,IAAA,6BAAqB,EAAC,GAAU,CAAC,CAAC;QAC/E,MAAM,WAAW,GAAI,GAAW,CAAC,WAAiC,CAAC;QACnE,MAAM,eAAe,GAAI,GAAW,CAAC,eAAqC,CAAC;QAC3E,MAAM,IAAA,sBAAc,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,EAAE,KAAK,IAAI,EAAE,CACrF,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CACjC,CAAC;IACH,CAAC;CACD;AA3FD,kCA2FC"}

package/dist/server/http/middleware.d.ts

@@ -1,16 +1,15 @@
 import type { RateLimitOptions } from './rate-limiter';
-import type { OAuthServer } from '../oauth';
 import type { NextFunction, Request, Response } from 'express';
+/** Redact sensitive query-string values from a URL before it is logged, preserving the path + the
+ *  non-sensitive params (which are useful for debugging). Robust to relative URLs. */
+export declare function redactUrl(url: string): string;
 export declare class HttpMiddleware {
-    private readonly _oauthServer;
-    constructor(oauthServer: OAuthServer);
     /**
      * Per-route fixed-window rate limit, keyed by the real connection IP (req.ip /
      * socket address) rather than the spoofable X-Forwarded-For header, so an
      * attacker cannot bypass the limit by rotating that header.
      */
     rateLimit(options: RateLimitOptions): (req: Request, res: Response, next: NextFunction) => void;
-    bearerAuth(): (req: Request, res: Response, next: NextFunction) => void;
     errorHandler(): (error: Error, req: Request, res: Response, next: NextFunction) => void;
     correlationId(): (req: Request, res: Response, next: NextFunction) => void;
     requestLogging(): (req: Request, res: Response, next: NextFunction) => void;

package/dist/server/http/middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../src/server/http/middleware.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE/D,qBAAa,cAAc;IAC1B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAc;gBAE/B,WAAW,EAAE,WAAW;IAIpC;;;;OAIG;IACI,SAAS,CAAC,OAAO,EAAE,gBAAgB,IAEjC,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY;IAgBjD,UAAU,KACR,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY;IAkBjD,YAAY,KACV,OAAO,KAAK,EAAE,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY;IAiB/D,aAAa,KACX,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY;IAYjD,cAAc,KACZ,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY;CAwBxD"}
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../src/server/http/middleware.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAe/D;sFACsF;AACtF,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAc7C;AAED,qBAAa,cAAc;IAC1B;;;;OAIG;IACI,SAAS,CAAC,OAAO,EAAE,gBAAgB,IAEjC,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY;IAgBjD,YAAY,KACV,OAAO,KAAK,EAAE,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY;IAiB/D,aAAa,KACX,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY;IAYjD,cAAc,KACZ,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY;CAyBxD"}