mcp4openapi 0.2.8 → 0.3.1

package/dist/src/core/index.js

@@ -0,0 +1,276 @@
+#!/usr/bin/env node
+/**
+ * CLI entry point
+ *
+ * Why: Reads env vars, initializes server, handles errors gracefully.
+ */
+import 'dotenv/config';
+import { MCPServer } from '../mcp/mcp-server.js';
+import { ConsoleLogger, JsonLogger } from './logger.js';
+import { OAUTH_PATHS } from './constants.js';
+import { applyCliEnvOverrides, parseCliArgs } from './cli-config.js';
+import { buildHttpTransportBaseConfig } from '../transport/http-transport-config.js';
+import { ProfileRegistry } from '../profile/profile-registry.js';
+import { MCPServerManager } from '../mcp/mcp-server-manager.js';
+import { getHttpProfileRoutingErrorMessage } from '../profile/startup-validation.js';
+import { listProfiles } from '../profile/profile-resolver.js';
+import { resolveStartupProfile } from '../profile/startup-profile.js';
+/**
+ * Fetch OAuth Authorization Server Metadata (RFC 8414)
+ * Returns authorization_endpoint and token_endpoint
+ */
+export async function fetchOAuthMetadata(issuerUrl) {
+    try {
+        // Use URL constructor to properly handle trailing slashes
+        const metadataUrl = new URL(OAUTH_PATHS.WELL_KNOWN_AUTHORIZATION_SERVER, issuerUrl).toString();
+        const response = await fetch(metadataUrl, {
+            headers: { 'Accept': 'application/json' },
+            signal: AbortSignal.timeout(5000), // 5 second timeout
+        });
+        if (!response.ok) {
+            return null;
+        }
+        const metadata = await response.json();
+        return {
+            authorization_endpoint: metadata.authorization_endpoint,
+            token_endpoint: metadata.token_endpoint,
+        };
+    }
+    catch (error) {
+        return null;
+    }
+}
+/**
+ * Derive OAuth issuer from API base URL
+ * Example: https://www.gitlab.com/api/v4 -> https://www.gitlab.com
+ */
+export function deriveIssuerFromBaseUrl(baseUrl) {
+    try {
+        const url = new URL(baseUrl);
+        return url.origin;
+    }
+    catch {
+        return null;
+    }
+}
+export function resolveHttpHostPort() {
+    const host = process.env.MCP4_HOST || '127.0.0.1';
+    const port = parseInt(process.env.MCP4_PORT || '3003', 10);
+    if (Number.isNaN(port)) {
+        throw new Error(`Invalid MCP4_PORT: ${process.env.MCP4_PORT}`);
+    }
+    return { host, port };
+}
+export async function main() {
+    const cliArgs = parseCliArgs(process.argv.slice(2));
+    applyCliEnvOverrides(cliArgs);
+    // Create logger early so startup/autodiscovery logs are structured and redacted consistently
+    const logFormat = process.env.MCP4_LOG_FORMAT || 'console';
+    const logger = logFormat === 'json' ? new JsonLogger() : new ConsoleLogger();
+    const profilesDir = process.env.MCP4_PROFILES_DIR;
+    if (cliArgs['list-profiles'] === 'true') {
+        const profiles = await listProfiles(profilesDir);
+        if (profiles.length === 0) {
+            console.log('No profiles found.');
+            return;
+        }
+        console.log('Available profiles:');
+        for (const profile of profiles) {
+            const details = [];
+            if (profile.profileName !== profile.profileId) {
+                details.push(`name: ${profile.profileName}`);
+            }
+            if (profile.profileAliases.length > 0) {
+                details.push(`aliases: ${profile.profileAliases.join(', ')}`);
+            }
+            const detailSuffix = details.length > 0 ? ` (${details.join(', ')})` : '';
+            console.log(`- ${profile.profileId}${detailSuffix}`);
+        }
+        return;
+    }
+    // OAuth Configuration Priority:
+    // 1. Explicit env vars (MCP4_OAUTH_AUTHORIZATION_URL, MCP4_OAUTH_TOKEN_URL)
+    // 2. Explicit issuer (MCP4_OAUTH_ISSUER)
+    // 3. Autodiscovery from MCP4_API_BASE_URL
+    const hasOAuthCredentials = process.env.MCP4_OAUTH_CLIENT_ID &&
+        process.env.MCP4_OAUTH_CLIENT_SECRET &&
+        process.env.MCP4_OAUTH_REDIRECT_URI;
+    const hasExplicitOAuthUrls = process.env.MCP4_OAUTH_AUTHORIZATION_URL &&
+        process.env.MCP4_OAUTH_TOKEN_URL;
+    if (hasOAuthCredentials && !hasExplicitOAuthUrls) {
+        // Try OAuth autodiscovery
+        let issuer = process.env.MCP4_OAUTH_ISSUER;
+        // If no explicit issuer, try to derive from API base URL
+        if (!issuer && process.env.MCP4_API_BASE_URL) {
+            const derivedIssuer = deriveIssuerFromBaseUrl(process.env.MCP4_API_BASE_URL);
+            if (derivedIssuer) {
+                issuer = derivedIssuer;
+                // Log origin only, not full URL to avoid logging sensitive paths
+                const issuerOrigin = new URL(derivedIssuer).origin;
+                logger.info('OAuth autodiscovery: derived issuer from MCP4_API_BASE_URL', { issuerOrigin });
+            }
+        }
+        if (issuer) {
+            // Try to fetch OAuth metadata
+            // Log origin only, not full URL to avoid logging sensitive paths
+            const issuerOrigin = new URL(issuer).origin;
+            logger.info('OAuth autodiscovery: fetching metadata', { issuerOrigin });
+            const metadata = await fetchOAuthMetadata(issuer);
+            if (metadata) {
+                logger.info('OAuth autodiscovery: successfully discovered OAuth endpoints');
+                if (!process.env.MCP4_OAUTH_AUTHORIZATION_URL) {
+                    process.env.MCP4_OAUTH_AUTHORIZATION_URL = metadata.authorization_endpoint;
+                    let authorizationEndpointOrigin;
+                    try {
+                        authorizationEndpointOrigin = new URL(metadata.authorization_endpoint).origin;
+                    }
+                    catch {
+                        authorizationEndpointOrigin = undefined;
+                    }
+                    logger.info('OAuth autodiscovery: set authorization_endpoint', { authorizationEndpointOrigin });
+                }
+                if (!process.env.MCP4_OAUTH_TOKEN_URL) {
+                    process.env.MCP4_OAUTH_TOKEN_URL = metadata.token_endpoint;
+                    let tokenEndpointOrigin;
+                    try {
+                        tokenEndpointOrigin = new URL(metadata.token_endpoint).origin;
+                    }
+                    catch {
+                        tokenEndpointOrigin = undefined;
+                    }
+                    logger.info('OAuth autodiscovery: set token_endpoint', { tokenEndpointOrigin });
+                }
+            }
+            else {
+                // Fallback to standard OAuth paths
+                logger.warn('OAuth autodiscovery: metadata fetch failed, using standard OAuth paths', {
+                    issuerOrigin,
+                });
+                if (!process.env.MCP4_OAUTH_AUTHORIZATION_URL) {
+                    process.env.MCP4_OAUTH_AUTHORIZATION_URL = `${issuer}/oauth/authorize`;
+                }
+                if (!process.env.MCP4_OAUTH_TOKEN_URL) {
+                    process.env.MCP4_OAUTH_TOKEN_URL = `${issuer}/oauth/token`;
+                }
+            }
+        }
+    }
+    else if (process.env.MCP4_OAUTH_ISSUER && !hasExplicitOAuthUrls) {
+        // Legacy behavior: derive from explicit issuer
+        const issuer = process.env.MCP4_OAUTH_ISSUER;
+        if (!process.env.MCP4_OAUTH_AUTHORIZATION_URL) {
+            process.env.MCP4_OAUTH_AUTHORIZATION_URL = `${issuer}/oauth/authorize`;
+        }
+        if (!process.env.MCP4_OAUTH_TOKEN_URL) {
+            process.env.MCP4_OAUTH_TOKEN_URL = `${issuer}/oauth/token`;
+        }
+    }
+    const specPathOverride = process.env.MCP4_OPENAPI_SPEC_PATH;
+    const { specPath, profilePath, profileId, defaultProfile, hasExplicitSpecPath, } = await resolveStartupProfile({
+        specPathEnv: specPathOverride,
+        profilePath: process.env.MCP4_PROFILE_PATH,
+        profileId: process.env.MCP4_PROFILE,
+        profilesDir,
+    });
+    const transport = process.env.MCP4_TRANSPORT || 'stdio';
+    const httpProfileRoutingEnabled = process.env.MCP4_HTTP_PROFILE_ROUTING === 'true';
+    const hasDefaultProfile = !!defaultProfile;
+    const hasSpecPath = !!specPath;
+    const routingError = getHttpProfileRoutingErrorMessage({
+        transport,
+        profileRoutingEnabled: httpProfileRoutingEnabled,
+        hasDefaultProfile,
+        hasSpecPath,
+    });
+    if (routingError) {
+        logger.error(routingError);
+        process.exit(1);
+    }
+    const requiresSpecPath = transport !== 'http' || !httpProfileRoutingEnabled || hasDefaultProfile;
+    if (!specPath && requiresSpecPath) {
+        logger.error('MCP4_OPENAPI_SPEC_PATH is required. Provide --openapi-spec-path (or MCP4_OPENAPI_SPEC_PATH), or use --profile with openapi_spec_path in the profile.');
+        process.exit(1);
+    }
+    try {
+        if (transport === 'http' && httpProfileRoutingEnabled) {
+            const { host, port } = resolveHttpHostPort();
+            const baseConfig = buildHttpTransportBaseConfig(host, port);
+            const { HttpTransport } = await import('../transport/http-transport.js');
+            const httpTransport = new HttpTransport({
+                ...baseConfig,
+                profileRoutingEnabled: true,
+                defaultProfileId: defaultProfile?.profileId,
+            }, logger);
+            const registry = new ProfileRegistry({
+                profilesDir,
+                defaultProfile,
+                specPathOverride: hasExplicitSpecPath ? specPathOverride : undefined,
+            });
+            const manager = new MCPServerManager(registry, logger, httpTransport);
+            httpTransport.setProfileContextProvider(async (id) => manager.getProfileContext(id));
+            httpTransport.setProfileIndexProvider(async () => registry.listProfilesForIndex());
+            httpTransport.setMessageHandler(async (message, sessionId, profileId) => {
+                if (!profileId) {
+                    throw new Error('Profile ID is required for HTTP routing.');
+                }
+                const server = await manager.getServer(profileId);
+                return server.handleHttpMessage(message, sessionId, profileId);
+            });
+            httpTransport.onSessionDestroyed(async (profileId, sessionId) => {
+                try {
+                    const server = await manager.getServer(profileId);
+                    server.handleSessionDestroyed(profileId, sessionId);
+                }
+                catch (error) {
+                    logger.error('Session cleanup failed', error, { profileId, sessionId });
+                }
+            });
+            await httpTransport.start();
+            logger.info('MCP server running on HTTP', { host, port });
+            const shutdown = async (signal) => {
+                logger.info(`Received ${signal}, shutting down gracefully...`);
+                try {
+                    await httpTransport.stop();
+                    logger.info('Server stopped successfully');
+                    process.exit(0);
+                }
+                catch (error) {
+                    logger.error('Error during shutdown', error);
+                    process.exit(1);
+                }
+            };
+            process.on('SIGTERM', () => shutdown('SIGTERM'));
+            process.on('SIGINT', () => shutdown('SIGINT'));
+            return;
+        }
+        const server = new MCPServer(logger);
+        await server.initialize(specPath, profilePath);
+        if (transport === 'http') {
+            const { host, port } = resolveHttpHostPort();
+            await server.runHttp(host, port);
+        }
+        else {
+            await server.runStdio();
+        }
+        // Graceful shutdown handlers
+        const shutdown = async (signal) => {
+            logger.info(`Received ${signal}, shutting down gracefully...`);
+            try {
+                await server.stop();
+                logger.info('Server stopped successfully');
+                process.exit(0);
+            }
+            catch (error) {
+                logger.error('Error during shutdown', error);
+                process.exit(1);
+            }
+        };
+        process.on('SIGTERM', () => shutdown('SIGTERM'));
+        process.on('SIGINT', () => shutdown('SIGINT'));
+    }
+    catch (error) {
+        logger.error('Fatal error', error);
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/src/core/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/index.ts"],"names":[],"mappings":";AAEA;;;;GAIG;AAEH,OAAO,eAAe,CAAC;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,iCAAiC,EAAE,MAAM,kCAAkC,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAEtE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IACxD,IAAI,CAAC;QACH,0DAA0D;QAC1D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,+BAA+B,EAAE,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/F,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE;YACxC,OAAO,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE;YACzC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,mBAAmB;SACvD,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAS,CAAC;QAC9C,OAAO;YACL,sBAAsB,EAAE,QAAQ,CAAC,sBAAsB;YACvD,cAAc,EAAE,QAAQ,CAAC,cAAc;SACxC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,WAAW,CAAC;IAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IAE3D,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,sBAAsB,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI;IACxB,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAE9B,6FAA6F;IAC7F,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,SAAS,CAAC;IAC3D,MAAM,MAAM,GAAG,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,aAAa,EAAE,CAAC;IAE7E,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAClD,IAAI,OAAO,CAAC,eAAe,CAAC,KAAK,MAAM,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;QACjD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACnC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,IAAI,OAAO,CAAC,WAAW,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;gBAC9C,OAAO,CAAC,IAAI,CAAC,SAAS,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YAC/C,CAAC;YACD,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,OAAO,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,SAAS,GAAG,YAAY,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,OAAO;IACT,CAAC;IAED,gCAAgC;IAChC,4EAA4E;IAC5E,yCAAyC;IACzC,0CAA0C;IAE1C,MAAM,mBAAmB,GACvB,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAChC,OAAO,CAAC,GAAG,CAAC,wBAAwB;QACpC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IAEtC,MAAM,oBAAoB,GACxB,OAAO,CAAC,GAAG,CAAC,4BAA4B;QACxC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAEnC,IAAI,mBAAmB,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACjD,0BAA0B;QAC1B,IAAI,MAAM,GAAuB,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAE/D,yDAAyD;QACzD,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;YAC7C,MAAM,aAAa,GAAG,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YAC7E,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,GAAG,aAAa,CAAC;gBACvB,iEAAiE;gBACjE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;gBACnD,MAAM,CAAC,IAAI,CAAC,4DAA4D,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,8BAA8B;YAC9B,iEAAiE;YACjE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;YACxE,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAElD,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;gBAC5E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,CAAC;oBAC9C,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,QAAQ,CAAC,sBAAsB,CAAC;oBAC3E,IAAI,2BAA+C,CAAC;oBACpD,IAAI,CAAC;wBACH,2BAA2B,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,MAAM,CAAC;oBAChF,CAAC;oBAAC,MAAM,CAAC;wBACP,2BAA2B,GAAG,SAAS,CAAC;oBAC1C,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,iDAAiD,EAAE,EAAE,2BAA2B,EAAE,CAAC,CAAC;gBAClG,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC;oBACtC,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,QAAQ,CAAC,cAAc,CAAC;oBAC3D,IAAI,mBAAuC,CAAC;oBAC5C,IAAI,CAAC;wBACH,mBAAmB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC;oBAChE,CAAC;oBAAC,MAAM,CAAC;wBACP,mBAAmB,GAAG,SAAS,CAAC;oBAClC,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,yCAAyC,EAAE,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAClF,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,mCAAmC;gBACnC,MAAM,CAAC,IAAI,CAAC,wEAAwE,EAAE;oBACpF,YAAY;iBACb,CAAC,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,CAAC;oBAC9C,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,GAAG,MAAM,kBAAkB,CAAC;gBACzE,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC;oBACtC,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,GAAG,MAAM,cAAc,CAAC;gBAC7D,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAClE,+CAA+C;QAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,GAAG,MAAM,kBAAkB,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,GAAG,MAAM,cAAc,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IAC5D,MAAM,EACJ,QAAQ,EACR,WAAW,EACX,SAAS,EACT,cAAc,EACd,mBAAmB,GACpB,GAAG,MAAM,qBAAqB,CAAC;QAC9B,WAAW,EAAE,gBAAgB;QAC7B,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAC1C,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;QACnC,WAAW;KACZ,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC;IACxD,MAAM,yBAAyB,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,MAAM,CAAC;IACnF,MAAM,iBAAiB,GAAG,CAAC,CAAC,cAAc,CAAC;IAC3C,MAAM,WAAW,GAAG,CAAC,CAAC,QAAQ,CAAC;IAE/B,MAAM,YAAY,GAAG,iCAAiC,CAAC;QACrD,SAAS;QACT,qBAAqB,EAAE,yBAAyB;QAChD,iBAAiB;QACjB,WAAW;KACZ,CAAC,CAAC;IACH,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,gBAAgB,GAAG,SAAS,KAAK,MAAM,IAAI,CAAC,yBAAyB,IAAI,iBAAiB,CAAC;IACjG,IAAI,CAAC,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,sJAAsJ,CAAC,CAAC;QACrK,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC;QACH,IAAI,SAAS,KAAK,MAAM,IAAI,yBAAyB,EAAE,CAAC;YACtD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,mBAAmB,EAAE,CAAC;YAE7C,MAAM,UAAU,GAAG,4BAA4B,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC5D,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;YACzE,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC;gBACtC,GAAG,UAAU;gBACb,qBAAqB,EAAE,IAAI;gBAC3B,gBAAgB,EAAE,cAAc,EAAE,SAAS;aAC5C,EAAE,MAAM,CAAC,CAAC;YAEX,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC;gBACnC,WAAW;gBACX,cAAc;gBACd,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS;aACrE,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;YAEtE,aAAa,CAAC,yBAAyB,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC;YACrF,aAAa,CAAC,uBAAuB,CAAC,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC,CAAC;YAEnF,aAAa,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE;gBACtE,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;gBAC9D,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBAClD,OAAO,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YACjE,CAAC,CAAC,CAAC;YAEH,aAAa,CAAC,kBAAkB,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE;gBAC9D,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;oBAClD,MAAM,CAAC,sBAAsB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;gBACtD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAc,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;gBACnF,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAE1D,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;gBACxC,MAAM,CAAC,IAAI,CAAC,YAAY,MAAM,+BAA+B,CAAC,CAAC;gBAC/D,IAAI,CAAC;oBACH,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;oBAC3B,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;oBAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,KAAc,CAAC,CAAC;oBACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC,CAAC;YAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;YACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,MAAM,CAAC,UAAU,CAAC,QAAS,EAAE,WAAW,CAAC,CAAC;QAEhD,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;YACzB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,mBAAmB,EAAE,CAAC;YAE7C,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC1B,CAAC;QAED,6BAA6B;QAC7B,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;YACxC,MAAM,CAAC,IAAI,CAAC,YAAY,MAAM,+BAA+B,CAAC,CAAC;YAC/D,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,KAAc,CAAC,CAAC;gBACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC,CAAC;QAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,KAAc,CAAC,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/src/core/lib.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Library exports for programmatic usage
+ */
+export { MCPServer } from '../mcp/mcp-server.js';
+export { HttpTransport } from '../transport/http-transport.js';
+export { ConsoleLogger, JsonLogger } from './logger.js';
+export type { Profile, ToolDefinition, InterceptorConfig } from '../types/profile.js';
+//# sourceMappingURL=lib.d.ts.map

package/dist/src/core/lib.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lib.d.ts","sourceRoot":"","sources":["../../../src/core/lib.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACxD,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/src/core/lib.js

@@ -0,0 +1,7 @@
+/**
+ * Library exports for programmatic usage
+ */
+export { MCPServer } from '../mcp/mcp-server.js';
+export { HttpTransport } from '../transport/http-transport.js';
+export { ConsoleLogger, JsonLogger } from './logger.js';
+//# sourceMappingURL=lib.js.map

package/dist/src/core/lib.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lib.js","sourceRoot":"","sources":["../../../src/core/lib.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC"}

package/dist/src/core/logger.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Logger interfaces and implementations
+ *
+ * Why: Replaces console.error with structured, level-based logging.
+ * Enables production-ready logging with context and proper error handling.
+ *
+ * Security: Profile-aware token redaction prevents sensitive data leakage.
+ */
+import type { AuthInterceptor } from '../types/profile.js';
+/**
+ * Sanitize log message to prevent log injection
+ * Strips ANSI codes and escapes control characters
+ */
+export declare function sanitizeLogMessage(message: string): string;
+export declare enum LogLevel {
+    DEBUG = 0,
+    INFO = 1,
+    WARN = 2,
+    ERROR = 3,
+    SILENT = 4
+}
+export interface Logger {
+    debug(message: string, context?: Record<string, unknown>): void;
+    info(message: string, context?: Record<string, unknown>): void;
+    warn(message: string, context?: Record<string, unknown>): void;
+    error(message: string, error?: Error, context?: Record<string, unknown>): void;
+}
+/**
+ * Default logger - writes to stderr, respects MCP4_LOG_LEVEL env var
+ *
+ * Security: Redacts auth tokens based on profile configuration
+ */
+export declare class ConsoleLogger implements Logger {
+    private level;
+    private authConfig?;
+    constructor(level?: LogLevel, authConfig?: AuthInterceptor);
+    debug(message: string, context?: Record<string, unknown>): void;
+    info(message: string, context?: Record<string, unknown>): void;
+    warn(message: string, context?: Record<string, unknown>): void;
+    error(message: string, error?: Error, context?: Record<string, unknown>): void;
+    private write;
+}
+/**
+ * Structured JSON logger for production
+ *
+ * Why: Machine-readable logs for log aggregation systems (ELK, Splunk, etc.)
+ * Security: Redacts auth tokens based on profile configuration
+ */
+export declare class JsonLogger implements Logger {
+    private level;
+    private authConfig?;
+    constructor(level?: LogLevel, authConfig?: AuthInterceptor);
+    debug(message: string, context?: Record<string, unknown>): void;
+    info(message: string, context?: Record<string, unknown>): void;
+    warn(message: string, context?: Record<string, unknown>): void;
+    error(message: string, error?: Error, context?: Record<string, unknown>): void;
+    private write;
+}
+//# sourceMappingURL=logger.d.ts.map

package/dist/src/core/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../../src/core/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AA8C3D;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAuB1D;AAwCD,oBAAY,QAAQ;IAClB,KAAK,IAAI;IACT,IAAI,IAAI;IACR,IAAI,IAAI;IACR,KAAK,IAAI;IACT,MAAM,IAAI;CACX;AAED,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAChE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAChF;AAED;;;;GAIG;AACH,qBAAa,aAAc,YAAW,MAAM;IAC1C,OAAO,CAAC,KAAK,CAAW;IACxB,OAAO,CAAC,UAAU,CAAC,CAAkB;gBAEzB,KAAK,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,eAAe;IAK1D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAM/D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAM9D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAM9D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAW9E,OAAO,CAAC,KAAK;CAOd;AAED;;;;;GAKG;AACH,qBAAa,UAAW,YAAW,MAAM;IACvC,OAAO,CAAC,KAAK,CAAW;IACxB,OAAO,CAAC,UAAU,CAAC,CAAkB;gBAEzB,KAAK,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,eAAe;IAK1D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAM/D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAM9D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAM9D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAU9E,OAAO,CAAC,KAAK;CAUd"}

package/dist/src/core/logger.js

@@ -0,0 +1,197 @@
+/**
+ * Logger interfaces and implementations
+ *
+ * Why: Replaces console.error with structured, level-based logging.
+ * Enables production-ready logging with context and proper error handling.
+ *
+ * Security: Profile-aware token redaction prevents sensitive data leakage.
+ */
+import { stripVTControlCharacters } from 'node:util';
+import { redactHeader, redactQueryParam, redactParam } from '../validation/validation-utils.js';
+const WELL_KNOWN_SECRET_KEYS = new Set([
+    'access_token',
+    'refresh_token',
+    'id_token',
+    'client_secret',
+    'client_assertion',
+    'code',
+    'code_verifier',
+]);
+function deepRedactWellKnownSecrets(value, depth = 0, seen) {
+    if (depth > 20)
+        return value;
+    if (value === null || typeof value !== 'object')
+        return value;
+    if (!seen)
+        seen = new WeakSet();
+    if (seen.has(value))
+        return value;
+    seen.add(value);
+    if (Array.isArray(value)) {
+        return value.map(item => deepRedactWellKnownSecrets(item, depth + 1, seen));
+    }
+    const record = value;
+    const out = {};
+    for (const [key, val] of Object.entries(record)) {
+        if (WELL_KNOWN_SECRET_KEYS.has(key)) {
+            out[key] = '[REDACTED]';
+            continue;
+        }
+        out[key] = deepRedactWellKnownSecrets(val, depth + 1, seen);
+    }
+    return out;
+}
+function resolveLogLevel(explicitLevel) {
+    if (explicitLevel !== undefined)
+        return explicitLevel;
+    const envLevel = process.env.MCP4_LOG_LEVEL?.toUpperCase();
+    return envLevel && envLevel in LogLevel
+        ? LogLevel[envLevel]
+        : LogLevel.INFO;
+}
+/**
+ * Sanitize log message to prevent log injection
+ * Strips ANSI codes and escapes control characters
+ */
+export function sanitizeLogMessage(message) {
+    // 1. Strip ANSI escape codes
+    let safe = stripVTControlCharacters(message);
+    // 2. Escape control characters (0x00-0x1F, 0x7F)
+    // We use a replacement function to handle various control characters
+    safe = safe.replace(/[\x00-\x1F\x7F]/g, (char) => {
+        switch (char) {
+            case '\n': return '\\n';
+            case '\r': return '\\r';
+            case '\t': return '\\t';
+            case '\b': return '\\b';
+            case '\f': return '\\f';
+            case '\v': return '\\v';
+            case '\0': return '\\0';
+            default:
+                // Hex escape for other control chars (e.g. \x07)
+                const hex = char.charCodeAt(0).toString(16).padStart(2, '0');
+                return `\\x${hex}`;
+        }
+    });
+    return safe;
+}
+function redactSensitiveContext(data, authConfig) {
+    const redacted = deepRedactWellKnownSecrets(data);
+    if (!authConfig)
+        return redacted;
+    switch (authConfig.type) {
+        case 'bearer':
+            redacted.headers = redactHeader(redacted.headers, 'authorization');
+            break;
+        case 'custom-header':
+            if (authConfig.header_name) {
+                redacted.headers = redactHeader(redacted.headers, authConfig.header_name.toLowerCase());
+            }
+            break;
+        case 'query':
+            if (authConfig.query_param) {
+                redacted.url = redactQueryParam(redacted.url, authConfig.query_param);
+                redacted.params = redactParam(redacted.params, authConfig.query_param);
+            }
+            break;
+    }
+    return redacted;
+}
+export var LogLevel;
+(function (LogLevel) {
+    LogLevel[LogLevel["DEBUG"] = 0] = "DEBUG";
+    LogLevel[LogLevel["INFO"] = 1] = "INFO";
+    LogLevel[LogLevel["WARN"] = 2] = "WARN";
+    LogLevel[LogLevel["ERROR"] = 3] = "ERROR";
+    LogLevel[LogLevel["SILENT"] = 4] = "SILENT";
+})(LogLevel || (LogLevel = {}));
+/**
+ * Default logger - writes to stderr, respects MCP4_LOG_LEVEL env var
+ *
+ * Security: Redacts auth tokens based on profile configuration
+ */
+export class ConsoleLogger {
+    constructor(level, authConfig) {
+        this.level = resolveLogLevel(level);
+        this.authConfig = authConfig;
+    }
+    debug(message, context) {
+        if (this.level <= LogLevel.DEBUG) {
+            this.write('DEBUG', message, context);
+        }
+    }
+    info(message, context) {
+        if (this.level <= LogLevel.INFO) {
+            this.write('INFO', message, context);
+        }
+    }
+    warn(message, context) {
+        if (this.level <= LogLevel.WARN) {
+            this.write('WARN', message, context);
+        }
+    }
+    error(message, error, context) {
+        if (this.level <= LogLevel.ERROR) {
+            const errorContext = error ? {
+                error: error.message,
+                stack: error.stack,
+                ...context,
+            } : context;
+            this.write('ERROR', message, errorContext);
+        }
+    }
+    write(level, message, context) {
+        const timestamp = new Date().toISOString();
+        const redacted = context ? redactSensitiveContext(context, this.authConfig) : undefined;
+        const ctx = redacted ? ` ${JSON.stringify(redacted)}` : '';
+        const safeMessage = sanitizeLogMessage(message);
+        console.error(`[${timestamp}] ${level}: ${safeMessage}${ctx}`);
+    }
+}
+/**
+ * Structured JSON logger for production
+ *
+ * Why: Machine-readable logs for log aggregation systems (ELK, Splunk, etc.)
+ * Security: Redacts auth tokens based on profile configuration
+ */
+export class JsonLogger {
+    constructor(level, authConfig) {
+        this.level = resolveLogLevel(level);
+        this.authConfig = authConfig;
+    }
+    debug(message, context) {
+        if (this.level <= LogLevel.DEBUG) {
+            this.write('debug', message, context);
+        }
+    }
+    info(message, context) {
+        if (this.level <= LogLevel.INFO) {
+            this.write('info', message, context);
+        }
+    }
+    warn(message, context) {
+        if (this.level <= LogLevel.WARN) {
+            this.write('warn', message, context);
+        }
+    }
+    error(message, error, context) {
+        if (this.level <= LogLevel.ERROR) {
+            this.write('error', message, {
+                error: error?.message,
+                stack: error?.stack,
+                ...context,
+            });
+        }
+    }
+    write(level, message, context) {
+        const redacted = context ? redactSensitiveContext(context, this.authConfig) : undefined;
+        const log = {
+            timestamp: new Date().toISOString(),
+            level,
+            message,
+            ...redacted,
+        };
+        console.error(JSON.stringify(log));
+    }
+}
+//# sourceMappingURL=logger.js.map

package/dist/src/core/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../../src/core/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AAErD,OAAO,EAAgB,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAE9G,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,cAAc;IACd,eAAe;IACf,UAAU;IACV,eAAe;IACf,kBAAkB;IAClB,MAAM;IACN,eAAe;CAChB,CAAC,CAAC;AAEH,SAAS,0BAA0B,CAAC,KAAc,EAAE,QAAgB,CAAC,EAAE,IAAsB;IAC3F,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE9D,IAAI,CAAC,IAAI;QAAE,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;IAChC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC,CAAC;IAE1B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,0BAA0B,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,GAAG,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;YACxB,SAAS;QACX,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,0BAA0B,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,aAAwB;IAC/C,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IAEtD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,EAAE,CAAC;IAC3D,OAAO,QAAQ,IAAI,QAAQ,IAAI,QAAQ;QACrC,CAAC,CAAC,QAAQ,CAAC,QAAiC,CAAC;QAC7C,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,6BAA6B;IAC7B,IAAI,IAAI,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAE7C,iDAAiD;IACjD,qEAAqE;IACrE,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,IAAI,EAAE,EAAE;QAC/C,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC;YACxB,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC;YACxB,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC;YACxB,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC;YACxB,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC;YACxB,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC;YACxB,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC;YACxB;gBACE,iDAAiD;gBACjD,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC7D,OAAO,MAAM,GAAG,EAAE,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,sBAAsB,CAC7B,IAA6B,EAC7B,UAA4B;IAE5B,MAAM,QAAQ,GAAG,0BAA0B,CAAC,IAAI,CAA4B,CAAC;IAC7E,IAAI,CAAC,UAAU;QAAE,OAAO,QAAQ,CAAC;IAEjC,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,QAAQ;YACX,QAAQ,CAAC,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YACnE,MAAM;QAER,KAAK,eAAe;YAClB,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;gBAC3B,QAAQ,CAAC,OAAO,GAAG,YAAY,CAC7B,QAAQ,CAAC,OAAO,EAChB,UAAU,CAAC,WAAW,CAAC,WAAW,EAAE,CACrC,CAAC;YACJ,CAAC;YACD,MAAM;QAER,KAAK,OAAO;YACV,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;gBAC3B,QAAQ,CAAC,GAAG,GAAG,gBAAgB,CAC7B,QAAQ,CAAC,GAAyB,EAClC,UAAU,CAAC,WAAW,CACvB,CAAC;gBACF,QAAQ,CAAC,MAAM,GAAG,WAAW,CAC3B,QAAQ,CAAC,MAAM,EACf,UAAU,CAAC,WAAW,CACvB,CAAC;YACJ,CAAC;YACD,MAAM;IACV,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAN,IAAY,QAMX;AAND,WAAY,QAAQ;IAClB,yCAAS,CAAA;IACT,uCAAQ,CAAA;IACR,uCAAQ,CAAA;IACR,yCAAS,CAAA;IACT,2CAAU,CAAA;AACZ,CAAC,EANW,QAAQ,KAAR,QAAQ,QAMnB;AASD;;;;GAIG;AACH,MAAM,OAAO,aAAa;IAIxB,YAAY,KAAgB,EAAE,UAA4B;QACxD,IAAI,CAAC,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,OAAiC;QACtD,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAiC;QACrD,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAiC;QACrD,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,KAAa,EAAE,OAAiC;QACrE,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjC,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC;gBAC3B,KAAK,EAAE,KAAK,CAAC,OAAO;gBACpB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,GAAG,OAAO;aACX,CAAC,CAAC,CAAC,OAAO,CAAC;YACZ,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAa,EAAE,OAAe,EAAE,OAAiC;QAC7E,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxF,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAChD,OAAO,CAAC,KAAK,CAAC,IAAI,SAAS,KAAK,KAAK,KAAK,WAAW,GAAG,GAAG,EAAE,CAAC,CAAC;IACjE,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,UAAU;IAIrB,YAAY,KAAgB,EAAE,UAA4B;QACxD,IAAI,CAAC,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,OAAiC;QACtD,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAiC;QACrD,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAiC;QACrD,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,KAAa,EAAE,OAAiC;QACrE,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE;gBAC3B,KAAK,EAAE,KAAK,EAAE,OAAO;gBACrB,KAAK,EAAE,KAAK,EAAE,KAAK;gBACnB,GAAG,OAAO;aACX,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAa,EAAE,OAAe,EAAE,OAAiC;QAC7E,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxF,MAAM,GAAG,GAAG;YACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK;YACL,OAAO;YACP,GAAG,QAAQ;SACZ,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,CAAC;CACF"}