mcp-creatio 0.6.4 → 0.6.7

package/dist/server/mcp/tenant-tool-registry.js

@@ -0,0 +1,113 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TenantToolRegistry = exports.TenantToolState = exports.DEFAULT_TENANT_KEY = void 0;
+/**
+ * Tenant bucket for every single-tenant auth mode (legacy / client-credentials / delegated /
+ * broker) and any gateway request that does NOT override the base URL. In those modes there is
+ * exactly one Creatio instance, so one shared bucket is correct and the behaviour is identical to
+ * the pre-multitenant server. Only a gateway request carrying `X-Creatio-Base-Url` gets its own
+ * per-instance bucket — that is where cross-tenant isolation actually matters.
+ */
+exports.DEFAULT_TENANT_KEY = '__default__';
+/**
+ * Per-tenant capability + dynamic-tool state — one entry per effective Creatio base URL. Each
+ * tenant carries its OWN optional-capability probe verdicts, the tools those capabilities
+ * registered, and the live session servers to push late-discovered tools into. Keeping all of this
+ * per-tenant is what stops tenant A's capability verdict (DataForge on/off) or A's published tools
+ * from leaking to tenant B on a shared multi-tenant (gateway) deployment — the previous design
+ * probed once from the first caller and applied that verdict to everyone.
+ */
+class TenantToolState {
+    capabilities = new Map();
+    cooldownUntil = new Map();
+    dynamicTools = new Map();
+    sessionServers = new Set();
+    probeComplete = false;
+    probeInFlight = false;
+    lastAccessMs;
+    constructor(now) {
+        this.lastAccessMs = now;
+    }
+}
+exports.TenantToolState = TenantToolState;
+/**
+ * Holds {@link TenantToolState} per tenant with TTL + LRU eviction — the tool-surface analog of a
+ * tenant client pool. A tenant with live session servers is NEVER evicted (its dynamic tools back
+ * those live sessions); only idle, session-less tenants are pruned, so memory stays bounded as the
+ * number of distinct Creatio instances seen by a gateway deployment grows.
+ */
+class TenantToolRegistry {
+    _maxTenants;
+    _ttlMs;
+    _tenants = new Map();
+    get size() {
+        return this._tenants.size;
+    }
+    constructor(options = {}) {
+        this._maxTenants = options.maxTenants ?? 100;
+        this._ttlMs = options.ttlMs ?? 30 * 60_000;
+    }
+    /** Evict idle, session-less tenants past the TTL, then enforce the LRU cap (still only over
+     *  session-less tenants — an active tenant whose dynamic tools back a live session is kept). */
+    _prune(now) {
+        for (const [key, state] of this._tenants) {
+            if (state.sessionServers.size === 0 && now - state.lastAccessMs > this._ttlMs) {
+                this._tenants.delete(key);
+            }
+        }
+        if (this._tenants.size <= this._maxTenants) {
+            return;
+        }
+        const evictable = Array.from(this._tenants.entries())
+            .filter(([, state]) => state.sessionServers.size === 0)
+            .sort((a, b) => a[1].lastAccessMs - b[1].lastAccessMs);
+        let over = this._tenants.size - this._maxTenants;
+        for (const [key] of evictable) {
+            if (over <= 0) {
+                break;
+            }
+            this._tenants.delete(key);
+            over--;
+        }
+    }
+    /** The state for a tenant, creating it on first use. Touches recency, then prunes stale peers —
+     *  pruning AFTER the insert/touch so the cap is enforced on the resulting set (never left over
+     *  by one) and the just-accessed tenant is the most-recently-used, so never the one evicted. */
+    getState(tenantKey, now = Date.now()) {
+        const existing = this._tenants.get(tenantKey);
+        if (existing) {
+            existing.lastAccessMs = now;
+            this._prune(now);
+            return existing;
+        }
+        const state = new TenantToolState(now);
+        this._tenants.set(tenantKey, state);
+        this._prune(now);
+        return state;
+    }
+    /** The tenant state owning a given session server (to release it when its transport closes). */
+    findBySession(mcp) {
+        for (const state of this._tenants.values()) {
+            if (state.sessionServers.has(mcp)) {
+                return state;
+            }
+        }
+        return undefined;
+    }
+    /** Every live session server across all tenants (process shutdown). */
+    allSessionServers() {
+        const servers = [];
+        for (const state of this._tenants.values()) {
+            for (const mcp of state.sessionServers) {
+                servers.push(mcp);
+            }
+        }
+        return servers;
+    }
+    /** Drop all tenant state (process shutdown). */
+    clear() {
+        this._tenants.clear();
+    }
+}
+exports.TenantToolRegistry = TenantToolRegistry;
+//# sourceMappingURL=tenant-tool-registry.js.map

package/dist/server/mcp/tenant-tool-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-tool-registry.js","sourceRoot":"","sources":["../../../src/server/mcp/tenant-tool-registry.ts"],"names":[],"mappings":";;;AAIA;;;;;;GAMG;AACU,QAAA,kBAAkB,GAAG,aAAa,CAAC;AAQhD;;;;;;;GAOG;AACH,MAAa,eAAe;IACX,YAAY,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC1C,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,YAAY,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC9C,cAAc,GAAG,IAAI,GAAG,EAAa,CAAC;IAC/C,aAAa,GAAG,KAAK,CAAC;IACtB,aAAa,GAAG,KAAK,CAAC;IACtB,YAAY,CAAS;IAE5B,YAAY,GAAW;QACtB,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC;IACzB,CAAC;CACD;AAZD,0CAYC;AASD;;;;;GAKG;AACH,MAAa,kBAAkB;IACb,WAAW,CAAS;IACpB,MAAM,CAAS;IACf,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IAE/D,IAAW,IAAI;QACd,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,YAAY,UAAqC,EAAE;QAClD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,IAAI,GAAG,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,GAAG,MAAM,CAAC;IAC5C,CAAC;IAED;oGACgG;IACxF,MAAM,CAAC,GAAW;QACzB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1C,IAAI,KAAK,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,GAAG,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC/E,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;QACF,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5C,OAAO;QACR,CAAC;QACD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;aACnD,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,CAAC;aACtD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACxD,IAAI,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;QACjD,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,SAAS,EAAE,CAAC;YAC/B,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;gBACf,MAAM;YACP,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,EAAE,CAAC;QACR,CAAC;IACF,CAAC;IAED;;oGAEgG;IACzF,QAAQ,CAAC,SAAiB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,QAAQ,EAAE,CAAC;YACd,QAAQ,CAAC,YAAY,GAAG,GAAG,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjB,OAAO,QAAQ,CAAC;QACjB,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,KAAK,CAAC;IACd,CAAC;IAED,gGAAgG;IACzF,aAAa,CAAC,GAAc;QAClC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,IAAI,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnC,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,uEAAuE;IAChE,iBAAiB;QACvB,MAAM,OAAO,GAAgB,EAAE,CAAC;QAChC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;gBACxC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACF,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,gDAAgD;IACzC,KAAK;QACX,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;CACD;AA/ED,gDA+EC"}

package/dist/utils/context.d.ts

@@ -1,12 +1,27 @@
+/**
+ * A Creatio credential supplied per-request by an external party in the stateless passthrough modes
+ * (delegated / gateway): the MCP stores nothing and just forwards it, letting Creatio validate.
+ * `bearer` is an OAuth access token; `cookie` is a Forms-auth session (the raw Cookie header) plus
+ * its BPMCSRF anti-forgery token. The union is open to more shapes (e.g. basic) without touching
+ * the callers that only branch on `kind`.
+ */
+export type InjectedCredential = {
+    kind: 'bearer';
+    token: string;
+} | {
+    kind: 'cookie';
+    cookie: string;
+    bpmcsrf?: string | undefined;
+};
 export type RequestContext = {
     userKey?: string | undefined;
     sessionId?: string | undefined;
     /**
-     * The raw Bearer token from the incoming request, in the stateless per-request auth model
-     * (delegated/gateway). It is the Creatio access token the client/gateway obtained; the bearer
-     * auth provider passes it straight through to Creatio. Absent for legacy/client-credentials.
+     * The credential the client (delegated) or gateway supplied for this request; the bearer auth
+     * provider forwards it straight to Creatio. Absent for legacy / client-credentials (those
+     * self-authenticate with one configured identity) and for broker (the MCP owns the token).
      */
-    bearerToken?: string | undefined;
+    credential?: InjectedCredential | undefined;
     /** Optional per-request Creatio instance override (gateway multi-tenant), from X-Creatio-Base-Url. */
     baseUrlOverride?: string | undefined;
 };
@@ -14,8 +29,8 @@ export declare function runWithContext<T>(ctx: Partial<RequestContext>, fn: () =
 export declare function getRequestContext(): RequestContext | undefined;
 export declare function getUserKey(): string | undefined;
 export declare function getSessionId(): string | undefined;
-/** The raw per-request Bearer token (stateless delegated/gateway auth), if any. */
-export declare function getBearerToken(): string | undefined;
+/** The per-request injected Creatio credential (stateless delegated/gateway passthrough), if any. */
+export declare function getInjectedCredential(): InjectedCredential | undefined;
 /** The per-request Creatio base-URL override (gateway multi-tenant), if any. */
 export declare function getBaseUrlOverride(): string | undefined;
 export declare function getEffectiveUserKey(): string | undefined;

package/dist/utils/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/utils/context.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,cAAc,GAAG;IAC5B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,sGAAsG;IACtG,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC,CAAC;AAMF,wBAAgB,cAAc,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAehG;AAED,wBAAgB,iBAAiB,IAAI,cAAc,GAAG,SAAS,CAE9D;AAED,wBAAgB,UAAU,IAAI,MAAM,GAAG,SAAS,CAE/C;AAED,wBAAgB,YAAY,IAAI,MAAM,GAAG,SAAS,CAEjD;AAED,mFAAmF;AACnF,wBAAgB,cAAc,IAAI,MAAM,GAAG,SAAS,CAEnD;AAED,gFAAgF;AAChF,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAEvD;AAED,wBAAgB,mBAAmB,IAAI,MAAM,GAAG,SAAS,CAYxD"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/utils/context.ts"],"names":[],"mappings":"AAIA;;;;;;GAMG;AACH,MAAM,MAAM,kBAAkB,GAC3B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAEpE,MAAM,MAAM,cAAc,GAAG;IAC5B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;;;;OAIG;IACH,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC5C,sGAAsG;IACtG,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC,CAAC;AAMF,wBAAgB,cAAc,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAehG;AAED,wBAAgB,iBAAiB,IAAI,cAAc,GAAG,SAAS,CAE9D;AAED,wBAAgB,UAAU,IAAI,MAAM,GAAG,SAAS,CAE/C;AAED,wBAAgB,YAAY,IAAI,MAAM,GAAG,SAAS,CAEjD;AAED,qGAAqG;AACrG,wBAAgB,qBAAqB,IAAI,kBAAkB,GAAG,SAAS,CAEtE;AAED,gFAAgF;AAChF,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAEvD;AAED,wBAAgB,mBAAmB,IAAI,MAAM,GAAG,SAAS,CAYxD"}

package/dist/utils/context.js

@@ -4,7 +4,7 @@ exports.runWithContext = runWithContext;
 exports.getRequestContext = getRequestContext;
 exports.getUserKey = getUserKey;
 exports.getSessionId = getSessionId;
-exports.getBearerToken = getBearerToken;
+exports.getInjectedCredential = getInjectedCredential;
 exports.getBaseUrlOverride = getBaseUrlOverride;
 exports.getEffectiveUserKey = getEffectiveUserKey;
 const node_async_hooks_1 = require("node:async_hooks");
@@ -19,8 +19,8 @@ function runWithContext(ctx, fn) {
     if (typeof ctx.sessionId === 'string') {
         store.sessionId = ctx.sessionId;
     }
-    if (typeof ctx.bearerToken === 'string') {
-        store.bearerToken = ctx.bearerToken;
+    if (ctx.credential) {
+        store.credential = ctx.credential;
     }
     if (typeof ctx.baseUrlOverride === 'string') {
         store.baseUrlOverride = ctx.baseUrlOverride;
@@ -36,9 +36,9 @@ function getUserKey() {
 function getSessionId() {
     return als.getStore()?.sessionId;
 }
-/** The raw per-request Bearer token (stateless delegated/gateway auth), if any. */
-function getBearerToken() {
-    return als.getStore()?.bearerToken;
+/** The per-request injected Creatio credential (stateless delegated/gateway passthrough), if any. */
+function getInjectedCredential() {
+    return als.getStore()?.credential;
 }
 /** The per-request Creatio base-URL override (gateway multi-tenant), if any. */
 function getBaseUrlOverride() {

package/dist/utils/context.js.map

@@ -1 +1 @@
-{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/utils/context.ts"],"names":[],"mappings":";;AAqBA,wCAeC;AAED,8CAEC;AAED,gCAEC;AAED,oCAEC;AAGD,wCAEC;AAGD,gDAEC;AAED,kDAYC;AAxED,uDAAqD;AAErD,0CAA6C;AAe7C,MAAM,GAAG,GAAG,IAAI,oCAAiB,EAAkB,CAAC;AAEpD,MAAM,cAAc,GAAG,yBAAc,CAAC,QAAQ,CAAC;AAE/C,SAAgB,cAAc,CAAI,GAA4B,EAAE,EAAoB;IACnF,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACrC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC7B,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACvC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QACzC,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;IACrC,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;QAC7C,KAAK,CAAC,eAAe,GAAG,GAAG,CAAC,eAAe,CAAC;IAC7C,CAAC;IACD,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED,SAAgB,iBAAiB;IAChC,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACvB,CAAC;AAED,SAAgB,UAAU;IACzB,OAAO,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC;AAChC,CAAC;AAED,SAAgB,YAAY;IAC3B,OAAO,GAAG,CAAC,QAAQ,EAAE,EAAE,SAAS,CAAC;AAClC,CAAC;AAED,mFAAmF;AACnF,SAAgB,cAAc;IAC7B,OAAO,GAAG,CAAC,QAAQ,EAAE,EAAE,WAAW,CAAC;AACpC,CAAC;AAED,gFAAgF;AAChF,SAAgB,kBAAkB;IACjC,OAAO,GAAG,CAAC,QAAQ,EAAE,EAAE,eAAe,CAAC;AACxC,CAAC;AAED,SAAgB,mBAAmB;IAClC,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC3B,IAAI,GAAG,EAAE,OAAO,EAAE,CAAC;QAClB,OAAO,GAAG,CAAC,OAAO,CAAC;IACpB,CAAC;IACD,IAAI,GAAG,EAAE,SAAS,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;YACtB,OAAO,OAAO,CAAC,OAAO,CAAC;QACxB,CAAC;IACF,CAAC;IACD,OAAO,GAAG,EAAE,SAAS,CAAC;AACvB,CAAC"}
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/utils/context.ts"],"names":[],"mappings":";;AAgCA,wCAeC;AAED,8CAEC;AAED,gCAEC;AAED,oCAEC;AAGD,sDAEC;AAGD,gDAEC;AAED,kDAYC;AAnFD,uDAAqD;AAErD,0CAA6C;AA0B7C,MAAM,GAAG,GAAG,IAAI,oCAAiB,EAAkB,CAAC;AAEpD,MAAM,cAAc,GAAG,yBAAc,CAAC,QAAQ,CAAC;AAE/C,SAAgB,cAAc,CAAI,GAA4B,EAAE,EAAoB;IACnF,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACrC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC7B,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACvC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;IACjC,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACpB,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;IACnC,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;QAC7C,KAAK,CAAC,eAAe,GAAG,GAAG,CAAC,eAAe,CAAC;IAC7C,CAAC;IACD,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED,SAAgB,iBAAiB;IAChC,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACvB,CAAC;AAED,SAAgB,UAAU;IACzB,OAAO,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC;AAChC,CAAC;AAED,SAAgB,YAAY;IAC3B,OAAO,GAAG,CAAC,QAAQ,EAAE,EAAE,SAAS,CAAC;AAClC,CAAC;AAED,qGAAqG;AACrG,SAAgB,qBAAqB;IACpC,OAAO,GAAG,CAAC,QAAQ,EAAE,EAAE,UAAU,CAAC;AACnC,CAAC;AAED,gFAAgF;AAChF,SAAgB,kBAAkB;IACjC,OAAO,GAAG,CAAC,QAAQ,EAAE,EAAE,eAAe,CAAC;AACxC,CAAC;AAED,SAAgB,mBAAmB;IAClC,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC3B,IAAI,GAAG,EAAE,OAAO,EAAE,CAAC;QAClB,OAAO,GAAG,CAAC,OAAO,CAAC;IACpB,CAAC;IACD,IAAI,GAAG,EAAE,SAAS,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;YACtB,OAAO,OAAO,CAAC,OAAO,CAAC;QACxB,CAAC;IACF,CAAC;IACD,OAAO,GAAG,EAAE,SAAS,CAAC;AACvB,CAAC"}

package/dist/utils/network.d.ts

@@ -2,6 +2,8 @@ import { CookieKV } from '../types';
 import type express from 'express';
 export declare function getClientIp(req: express.Request): string | undefined;
 export declare function parseSetCookie(setCookie: string[]): CookieKV[];
+/** Extract the BPMCSRF anti-forgery token from a raw `Cookie` header value (Creatio Forms auth). */
+export declare function extractBpmcsrf(cookieHeader: string): string | undefined;
 export declare function getUserKeyFromRequest(req: express.Request): string | undefined;
 export declare function getSessionIdFromRequest(req: any): any;
 //# sourceMappingURL=network.d.ts.map

package/dist/utils/network.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"network.d.ts","sourceRoot":"","sources":["../../src/utils/network.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEpC,OAAO,KAAK,OAAO,MAAM,SAAS,CAAC;AAEnC,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,GAAG,MAAM,GAAG,SAAS,CAkBpE;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,CAa9D;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,GAAG,MAAM,GAAG,SAAS,CAc9E;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,GAAG,OAS/C"}
+{"version":3,"file":"network.d.ts","sourceRoot":"","sources":["../../src/utils/network.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEpC,OAAO,KAAK,OAAO,MAAM,SAAS,CAAC;AAEnC,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,GAAG,MAAM,GAAG,SAAS,CAkBpE;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,CAa9D;AAED,oGAAoG;AACpG,wBAAgB,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAQvE;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,GAAG,MAAM,GAAG,SAAS,CAc9E;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,GAAG,OAS/C"}

package/dist/utils/network.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getClientIp = getClientIp;
 exports.parseSetCookie = parseSetCookie;
+exports.extractBpmcsrf = extractBpmcsrf;
 exports.getUserKeyFromRequest = getUserKeyFromRequest;
 exports.getSessionIdFromRequest = getSessionIdFromRequest;
 function getClientIp(req) {
@@ -37,6 +38,16 @@ function parseSetCookie(setCookie) {
     }
     return out;
 }
+/** Extract the BPMCSRF anti-forgery token from a raw `Cookie` header value (Creatio Forms auth). */
+function extractBpmcsrf(cookieHeader) {
+    for (const part of cookieHeader.split(';')) {
+        const trimmed = part.trim();
+        if (trimmed.startsWith('BPMCSRF=')) {
+            return trimmed.slice('BPMCSRF='.length);
+        }
+    }
+    return undefined;
+}
 function getUserKeyFromRequest(req) {
     const fromHeader = req.headers['x-user-key'];
     if (typeof fromHeader === 'string' && fromHeader) {

package/dist/utils/network.js.map

@@ -1 +1 @@
-{"version":3,"file":"network.js","sourceRoot":"","sources":["../../src/utils/network.ts"],"names":[],"mappings":";;AAIA,kCAkBC;AAED,wCAaC;AAED,sDAcC;AAED,0DASC;AA5DD,SAAgB,WAAW,CAAC,GAAoB;IAC/C,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAkC,CAAC;IAClF,IAAI,SAAS,EAAE,CAAC;QACf,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;IACF,CAAC;IACD,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,GAAG,CAAC,EAAE,CAAC;IACf,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC5C,OAAO,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;IACjC,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAgB,cAAc,CAAC,SAAmB;IACjD,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,SAAS,IAAI,EAAE,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,SAAS;QACV,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,SAAgB,qBAAqB,CAAC,GAAoB;IACzD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC7C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClD,OAAO,UAAU,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GAAI,GAAG,CAAC,KAAa,EAAE,OAAO,CAAC;IAC9C,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,EAAE,CAAC;QAChD,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,SAAS,GAAG,uBAAuB,CAAC,GAAU,CAAC,CAAC;IACtD,IAAI,SAAS,EAAE,CAAC;QACf,OAAO,QAAQ,SAAS,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAgB,uBAAuB,CAAC,GAAQ;IAC/C,OAAO,CACN,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAC7B,GAAG,CAAC,KAAK,EAAE,UAAU;QACrB,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC;QAC3B,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU;QAC5B,GAAG,CAAC,IAAI,EAAE,UAAU;QACpB,IAAI,CACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"network.js","sourceRoot":"","sources":["../../src/utils/network.ts"],"names":[],"mappings":";;AAIA,kCAkBC;AAED,wCAaC;AAGD,wCAQC;AAED,sDAcC;AAED,0DASC;AAvED,SAAgB,WAAW,CAAC,GAAoB;IAC/C,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAkC,CAAC;IAClF,IAAI,SAAS,EAAE,CAAC;QACf,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;IACF,CAAC;IACD,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,GAAG,CAAC,EAAE,CAAC;IACf,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC5C,OAAO,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;IACjC,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAgB,cAAc,CAAC,SAAmB;IACjD,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,SAAS,IAAI,EAAE,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,SAAS;QACV,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,oGAAoG;AACpG,SAAgB,cAAc,CAAC,YAAoB;IAClD,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,OAAO,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAgB,qBAAqB,CAAC,GAAoB;IACzD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC7C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClD,OAAO,UAAU,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GAAI,GAAG,CAAC,KAAa,EAAE,OAAO,CAAC;IAC9C,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,EAAE,CAAC;QAChD,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,SAAS,GAAG,uBAAuB,CAAC,GAAU,CAAC,CAAC;IACtD,IAAI,SAAS,EAAE,CAAC;QACf,OAAO,QAAQ,SAAS,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAgB,uBAAuB,CAAC,GAAQ;IAC/C,OAAO,CACN,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAC7B,GAAG,CAAC,KAAK,EAAE,UAAU;QACrB,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC;QAC3B,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU;QAC5B,GAAG,CAAC,IAAI,EAAE,UAAU;QACpB,IAAI,CACJ,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "mcp-creatio",
-	"version": "0.6.4",
+	"version": "0.6.7",
 	"main": "dist/index.js",
 	"bin": {
 		"mcp-creatio": "dist/cli.js"