mcp4openapi 0.3.0 → 0.3.1

package/dist/src/logger.js

@@ -0,0 +1,177 @@
+/**
+ * Logger interfaces and implementations
+ *
+ * Why: Replaces console.error with structured, level-based logging.
+ * Enables production-ready logging with context and proper error handling.
+ *
+ * Security: Profile-aware token redaction prevents sensitive data leakage.
+ */
+import { redactHeader, redactQueryParam, redactParam } from './validation-utils.js';
+const WELL_KNOWN_SECRET_KEYS = new Set([
+    'access_token',
+    'refresh_token',
+    'id_token',
+    'client_secret',
+    'client_assertion',
+    'code',
+    'code_verifier',
+]);
+function deepRedactWellKnownSecrets(value, depth = 0, seen) {
+    if (depth > 20)
+        return value;
+    if (value === null || typeof value !== 'object')
+        return value;
+    if (!seen)
+        seen = new WeakSet();
+    if (seen.has(value))
+        return value;
+    seen.add(value);
+    if (Array.isArray(value)) {
+        return value.map(item => deepRedactWellKnownSecrets(item, depth + 1, seen));
+    }
+    const record = value;
+    const out = {};
+    for (const [key, val] of Object.entries(record)) {
+        if (WELL_KNOWN_SECRET_KEYS.has(key)) {
+            out[key] = '[REDACTED]';
+            continue;
+        }
+        out[key] = deepRedactWellKnownSecrets(val, depth + 1, seen);
+    }
+    return out;
+}
+function resolveLogLevel(explicitLevel) {
+    if (explicitLevel !== undefined)
+        return explicitLevel;
+    const envLevel = process.env.MCP4_LOG_LEVEL?.toUpperCase();
+    return envLevel && envLevel in LogLevel
+        ? LogLevel[envLevel]
+        : LogLevel.INFO;
+}
+/**
+ * Sanitize log message to prevent log injection
+ * Replaces newlines with escaped string representation
+ */
+export function sanitizeLogMessage(message) {
+    return message.replace(/\n/g, '\\n').replace(/\r/g, '\\r');
+}
+function redactSensitiveContext(data, authConfig) {
+    const redacted = deepRedactWellKnownSecrets(data);
+    if (!authConfig)
+        return redacted;
+    switch (authConfig.type) {
+        case 'bearer':
+            redacted.headers = redactHeader(redacted.headers, 'authorization');
+            break;
+        case 'custom-header':
+            if (authConfig.header_name) {
+                redacted.headers = redactHeader(redacted.headers, authConfig.header_name.toLowerCase());
+            }
+            break;
+        case 'query':
+            if (authConfig.query_param) {
+                redacted.url = redactQueryParam(redacted.url, authConfig.query_param);
+                redacted.params = redactParam(redacted.params, authConfig.query_param);
+            }
+            break;
+    }
+    return redacted;
+}
+export var LogLevel;
+(function (LogLevel) {
+    LogLevel[LogLevel["DEBUG"] = 0] = "DEBUG";
+    LogLevel[LogLevel["INFO"] = 1] = "INFO";
+    LogLevel[LogLevel["WARN"] = 2] = "WARN";
+    LogLevel[LogLevel["ERROR"] = 3] = "ERROR";
+    LogLevel[LogLevel["SILENT"] = 4] = "SILENT";
+})(LogLevel || (LogLevel = {}));
+/**
+ * Default logger - writes to stderr, respects MCP4_LOG_LEVEL env var
+ *
+ * Security: Redacts auth tokens based on profile configuration
+ */
+export class ConsoleLogger {
+    constructor(level, authConfig) {
+        this.level = resolveLogLevel(level);
+        this.authConfig = authConfig;
+    }
+    debug(message, context) {
+        if (this.level <= LogLevel.DEBUG) {
+            this.write('DEBUG', message, context);
+        }
+    }
+    info(message, context) {
+        if (this.level <= LogLevel.INFO) {
+            this.write('INFO', message, context);
+        }
+    }
+    warn(message, context) {
+        if (this.level <= LogLevel.WARN) {
+            this.write('WARN', message, context);
+        }
+    }
+    error(message, error, context) {
+        if (this.level <= LogLevel.ERROR) {
+            const errorContext = error ? {
+                error: error.message,
+                stack: error.stack,
+                ...context,
+            } : context;
+            this.write('ERROR', message, errorContext);
+        }
+    }
+    write(level, message, context) {
+        const timestamp = new Date().toISOString();
+        const redacted = context ? redactSensitiveContext(context, this.authConfig) : undefined;
+        const ctx = redacted ? ` ${JSON.stringify(redacted)}` : '';
+        const safeMessage = sanitizeLogMessage(message);
+        console.error(`[${timestamp}] ${level}: ${safeMessage}${ctx}`);
+    }
+}
+/**
+ * Structured JSON logger for production
+ *
+ * Why: Machine-readable logs for log aggregation systems (ELK, Splunk, etc.)
+ * Security: Redacts auth tokens based on profile configuration
+ */
+export class JsonLogger {
+    constructor(level, authConfig) {
+        this.level = resolveLogLevel(level);
+        this.authConfig = authConfig;
+    }
+    debug(message, context) {
+        if (this.level <= LogLevel.DEBUG) {
+            this.write('debug', message, context);
+        }
+    }
+    info(message, context) {
+        if (this.level <= LogLevel.INFO) {
+            this.write('info', message, context);
+        }
+    }
+    warn(message, context) {
+        if (this.level <= LogLevel.WARN) {
+            this.write('warn', message, context);
+        }
+    }
+    error(message, error, context) {
+        if (this.level <= LogLevel.ERROR) {
+            this.write('error', message, {
+                error: error?.message,
+                stack: error?.stack,
+                ...context,
+            });
+        }
+    }
+    write(level, message, context) {
+        const redacted = context ? redactSensitiveContext(context, this.authConfig) : undefined;
+        const log = {
+            timestamp: new Date().toISOString(),
+            level,
+            message,
+            ...redacted,
+        };
+        console.error(JSON.stringify(log));
+    }
+}
+//# sourceMappingURL=logger.js.map

package/dist/src/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAgB,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAElG,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,cAAc;IACd,eAAe;IACf,UAAU;IACV,eAAe;IACf,kBAAkB;IAClB,MAAM;IACN,eAAe;CAChB,CAAC,CAAC;AAEH,SAAS,0BAA0B,CAAC,KAAc,EAAE,QAAgB,CAAC,EAAE,IAAsB;IAC3F,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE9D,IAAI,CAAC,IAAI;QAAE,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;IAChC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC,CAAC;IAE1B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,0BAA0B,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,GAAG,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;YACxB,SAAS;QACX,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,0BAA0B,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,aAAwB;IAC/C,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IAEtD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,EAAE,CAAC;IAC3D,OAAO,QAAQ,IAAI,QAAQ,IAAI,QAAQ;QACrC,CAAC,CAAC,QAAQ,CAAC,QAAiC,CAAC;QAC7C,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,sBAAsB,CAC7B,IAA6B,EAC7B,UAA4B;IAE5B,MAAM,QAAQ,GAAG,0BAA0B,CAAC,IAAI,CAA4B,CAAC;IAC7E,IAAI,CAAC,UAAU;QAAE,OAAO,QAAQ,CAAC;IAEjC,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,QAAQ;YACX,QAAQ,CAAC,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YACnE,MAAM;QAER,KAAK,eAAe;YAClB,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;gBAC3B,QAAQ,CAAC,OAAO,GAAG,YAAY,CAC7B,QAAQ,CAAC,OAAO,EAChB,UAAU,CAAC,WAAW,CAAC,WAAW,EAAE,CACrC,CAAC;YACJ,CAAC;YACD,MAAM;QAER,KAAK,OAAO;YACV,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;gBAC3B,QAAQ,CAAC,GAAG,GAAG,gBAAgB,CAC7B,QAAQ,CAAC,GAAyB,EAClC,UAAU,CAAC,WAAW,CACvB,CAAC;gBACF,QAAQ,CAAC,MAAM,GAAG,WAAW,CAC3B,QAAQ,CAAC,MAAM,EACf,UAAU,CAAC,WAAW,CACvB,CAAC;YACJ,CAAC;YACD,MAAM;IACV,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAN,IAAY,QAMX;AAND,WAAY,QAAQ;IAClB,yCAAS,CAAA;IACT,uCAAQ,CAAA;IACR,uCAAQ,CAAA;IACR,yCAAS,CAAA;IACT,2CAAU,CAAA;AACZ,CAAC,EANW,QAAQ,KAAR,QAAQ,QAMnB;AASD;;;;GAIG;AACH,MAAM,OAAO,aAAa;IAIxB,YAAY,KAAgB,EAAE,UAA4B;QACxD,IAAI,CAAC,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,OAAiC;QACtD,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAiC;QACrD,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAiC;QACrD,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,KAAa,EAAE,OAAiC;QACrE,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjC,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC;gBAC3B,KAAK,EAAE,KAAK,CAAC,OAAO;gBACpB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,GAAG,OAAO;aACX,CAAC,CAAC,CAAC,OAAO,CAAC;YACZ,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAa,EAAE,OAAe,EAAE,OAAiC;QAC7E,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxF,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAChD,OAAO,CAAC,KAAK,CAAC,IAAI,SAAS,KAAK,KAAK,KAAK,WAAW,GAAG,GAAG,EAAE,CAAC,CAAC;IACjE,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,UAAU;IAIrB,YAAY,KAAgB,EAAE,UAA4B;QACxD,IAAI,CAAC,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,OAAiC;QACtD,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAiC;QACrD,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAiC;QACrD,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,KAAa,EAAE,OAAiC;QACrE,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE;gBAC3B,KAAK,EAAE,KAAK,EAAE,OAAO;gBACrB,KAAK,EAAE,KAAK,EAAE,KAAK;gBACnB,GAAG,OAAO;aACX,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAa,EAAE,OAAe,EAAE,OAAiC;QAC7E,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxF,MAAM,GAAG,GAAG;YACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK;YACL,OAAO;YACP,GAAG,QAAQ;SACZ,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,CAAC;CACF"}

package/dist/src/mcp-server-manager.d.ts

@@ -0,0 +1,20 @@
+/**
+ * MCP server manager for multi-profile HTTP routing.
+ */
+import type { Logger } from './logger.js';
+import { MCPServer } from './mcp-server.js';
+import type { HttpProfileContext } from './types/http-transport.js';
+import type { HttpTransport } from './http-transport.js';
+import { ProfileRegistry } from './profile-registry.js';
+export declare class MCPServerManager {
+    private registry;
+    private logger;
+    private httpTransport?;
+    private servers;
+    constructor(registry: ProfileRegistry, logger: Logger, httpTransport?: HttpTransport);
+    getDefaultProfileId(): string | undefined;
+    getProfileContext(profileId: string): Promise<HttpProfileContext | null>;
+    getServer(profileId: string): Promise<MCPServer>;
+    private createServer;
+}
+//# sourceMappingURL=mcp-server-manager.d.ts.map

package/dist/src/mcp-server-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server-manager.d.ts","sourceRoot":"","sources":["../../src/mcp-server-manager.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAkB;IAClC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,aAAa,CAAC,CAAgB;IACtC,OAAO,CAAC,OAAO,CAAyC;gBAE5C,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,aAAa;IAMpF,mBAAmB,IAAI,MAAM,GAAG,SAAS;IAInC,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAKxE,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;YAWxC,YAAY;CAS3B"}

package/dist/src/mcp-server-manager.js

@@ -0,0 +1,38 @@
+/**
+ * MCP server manager for multi-profile HTTP routing.
+ */
+import { MCPServer } from './mcp-server.js';
+export class MCPServerManager {
+    constructor(registry, logger, httpTransport) {
+        this.servers = new Map();
+        this.registry = registry;
+        this.logger = logger;
+        this.httpTransport = httpTransport;
+    }
+    getDefaultProfileId() {
+        return this.registry.getDefaultProfile()?.profileId;
+    }
+    async getProfileContext(profileId) {
+        const server = await this.getServer(profileId);
+        return server.getHttpProfileContext();
+    }
+    async getServer(profileId) {
+        const existing = this.servers.get(profileId);
+        if (existing) {
+            return existing;
+        }
+        const createPromise = this.createServer(profileId);
+        this.servers.set(profileId, createPromise);
+        return createPromise;
+    }
+    async createServer(profileId) {
+        const resolved = await this.registry.resolveProfile(profileId);
+        const server = new MCPServer(this.logger);
+        await server.initialize(resolved.specPath, resolved.profilePath);
+        if (this.httpTransport) {
+            server.attachHttpTransport(this.httpTransport);
+        }
+        return server;
+    }
+}
+//# sourceMappingURL=mcp-server-manager.js.map

package/dist/src/mcp-server-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server-manager.js","sourceRoot":"","sources":["../../src/mcp-server-manager.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAK5C,MAAM,OAAO,gBAAgB;IAM3B,YAAY,QAAyB,EAAE,MAAc,EAAE,aAA6B;QAF5E,YAAO,GAAG,IAAI,GAAG,EAA8B,CAAC;QAGtD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAED,mBAAmB;QACjB,OAAO,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAE,SAAS,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,SAAiB;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC,qBAAqB,EAAE,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,SAAiB;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAC3C,OAAO,aAAa,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,SAAiB;QAC1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;QACjE,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/src/mcp-server.d.ts

@@ -0,0 +1,203 @@
+/**
+ * Main MCP server implementation
+ *
+ * Why: Coordinates OpenAPI parser, profile loader, tool generator, and request execution.
+ * Single entry point for tool registration and invocation.
+ */
+import type { Logger } from './logger.js';
+import type { HttpProfileContext } from './types/http-transport.js';
+import type { HttpTransport } from './http-transport.js';
+export declare class MCPServer {
+    private server;
+    private parser;
+    private profile?;
+    private toolGenerator;
+    private httpClientFactory;
+    private compositeExecutor?;
+    private schemaValidator;
+    private logger;
+    private httpTransport;
+    private stdioFiltering?;
+    private toolFilterService?;
+    private globalToolFilterSummary?;
+    /**
+     * Execute a tools/call request via the JSON-RPC handler.
+     * Intended for internal use and tests to avoid accessing private methods.
+     */
+    callToolRpc(name: string, args: Record<string, unknown>, sessionId?: string, requestId?: string | number): Promise<unknown>;
+    /**
+     * Filter response payload to include only specified fields.
+     *
+     * Supports YouTrack-style field selectors like:
+     * - "author(id,login)"
+     * - "comments(id,text,author(id,login))"
+     *
+     * Recurses into nested objects and arrays when subfields are specified.
+     */
+    private filterFields;
+    private parseFieldSelection;
+    private mergeFieldSelector;
+    private mergeSelectionTrees;
+    private splitTopLevel;
+    private applyFieldSelection;
+    /**
+     * Format error message for client with correlation ID
+     *
+     * Why: Categorize errors as "safe" (4xx client errors) vs "unsafe" (5xx server errors)
+     * Safe errors show API message to help user fix the issue
+     * Unsafe errors show generic message to avoid leaking sensitive info
+     */
+    private formatErrorForClient;
+    constructor(logger?: Logger);
+    initialize(specPath: string, profilePath?: string): Promise<void>;
+    /**
+     * Create logger with auth configuration for token redaction
+     *
+     * Why: Prevents sensitive tokens from appearing in logs
+     */
+    private createLoggerWithAuth;
+    /**
+     * Check tool name lengths and warn if needed
+     */
+    private checkToolNameLengths;
+    /**
+     * Get base URL from profile config or OpenAPI spec
+     */
+    private getBaseUrl;
+    /**
+     * Get auth configurations as array (supports single or multiple auth methods)
+     * Returns array sorted by priority (lower = higher priority)
+     */
+    private getAuthConfigs;
+    /**
+     * Get primary (highest priority) auth configuration
+     */
+    private getPrimaryAuthConfig;
+    /**
+     * Get highest priority auth configuration that reads token from environment
+     */
+    private getEnvBackedAuthConfig;
+    /**
+     * Get OAuth configuration from auth configs (if any)
+     */
+    private getOAuthConfig;
+    private buildOAuthConfigWithAllowedRedirectHosts;
+    private getProfileIdValue;
+    private getOAuthRateLimitConfig;
+    getHttpProfileContext(): HttpProfileContext;
+    /**
+     * Extract hostnames from origin patterns for OAuth redirect validation
+     * e.g., "http://localhost:*,https://app.example.com" -> ["localhost", "app.example.com"]
+     *
+     * Filters out CIDR blocks (e.g., "127.0.0.1/8") which are valid for origin validation
+     * but not for OAuth redirect URI validation
+     */
+    private extractHostsFromOrigins;
+    /**
+     * Get or create HTTP client for session
+     */
+    private getHttpClientForSession;
+    /**
+     * Get auth token from HTTP transport session
+     * Ensures token is valid (refreshes if expired) before returning
+     */
+    private getAuthTokenFromSession;
+    /**
+     * Cleanup HTTP client for destroyed session
+     *
+     * Why: Prevent memory leak - sessions expire but cached clients stay forever
+     */
+    private cleanupSessionClient;
+    /**
+     * Setup MCP request handlers
+     */
+    private setupHandlers;
+    /**
+     * Execute simple (non-composite) tool
+     *
+     * Why separate: Simple tools map directly to single OpenAPI operation.
+     * No result aggregation needed.
+     */
+    private executeSimpleTool;
+    /**
+     * Execute proxy download operation
+     *
+     * Why: Some APIs return authenticated URLs that LLMs cannot fetch directly.
+     * This proxies the download through the MCP server.
+     */
+    private executeProxyDownload;
+    /**
+     * Encode path segment if it contains special characters (like slashes)
+     *
+     * Why: GitLab and other APIs require path parameters (like project paths)
+     * to be URL-encoded when used in URL path.
+     */
+    private encodePathSegment;
+    /**
+     * Resolve path parameters using profile aliases
+     *
+     * Why aliases: Different tools may use different parameter names for same path param.
+     * Example: GitLab uses "resource_id", "project_id", "group_id" all mapping to "{id}"
+     */
+    private resolvePath;
+    /**
+     * Extract query parameters from args
+     *
+     * Why: Separate query params from body params. Array handling is done by HttpClient
+     * based on profile's array_format setting.
+     */
+    private extractQueryParams;
+    /**
+     * Extract request body from args
+     *
+     * Why: For create/update operations, collect non-metadata fields into body.
+     * Metadata (action, resource_type, etc.) are not sent to API.
+     * Path/query parameters are excluded from body UNLESS they're also in request body schema.
+     *
+     * Uses metadata_params from tool definition, defaults to ['action', 'resource_type']
+     */
+    private extractBody;
+    /**
+     * Start server with stdio transport
+     */
+    runStdio(): Promise<void>;
+    /**
+     * Start server with HTTP transport
+     *
+     * Implements MCP Specification 2025-03-26 Streamable HTTP transport
+     *
+     * Why: Enables remote MCP server access with SSE streaming, session management,
+     * and resumability for reliable communication over HTTP.
+     */
+    runHttp(host: string, port: number): Promise<void>;
+    attachHttpTransport(transport: HttpTransport): void;
+    handleSessionDestroyed(profileId: string, sessionId: string): void;
+    /**
+     * Handle JSON-RPC message from HTTP transport
+     *
+     * Why: Unified message handling for both stdio and HTTP transports
+     */
+    private handleJsonRpcMessage;
+    handleHttpMessage(message: unknown, sessionId?: string, profileId?: string): Promise<unknown>;
+    private handleInitialize;
+    private handleToolCall;
+    private getFilteringForSession;
+    private getToolFilterForSession;
+    private getFilteringOperationInfo;
+    private handleOtherRequest;
+    private applyGlobalToolFiltering;
+    private applySessionToolFiltering;
+    private buildToolFilterResolver;
+    private validateCompositeToolsAgainstFilteredOperations;
+    private getToolFilterWarnThresholdPct;
+    private recordGlobalToolFilterMetrics;
+    private recordSessionToolFilterMetrics;
+    private recordToolFilterRejection;
+    /**
+     * Stop the MCP server gracefully
+     *
+     * Why: Cleanup resources, close connections, allow graceful shutdown
+     */
+    stop(): Promise<void>;
+}
+//# sourceMappingURL=mcp-server.d.ts.map

package/dist/src/mcp-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server.d.ts","sourceRoot":"","sources":["../../src/mcp-server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAiCH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAqB1C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGzD,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,OAAO,CAAC,CAAU;IAC1B,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,iBAAiB,CAA2B;IACpD,OAAO,CAAC,iBAAiB,CAAC,CAAoB;IAC9C,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,aAAa,CAAa;IAClC,OAAO,CAAC,cAAc,CAAC,CAAiB;IACxC,OAAO,CAAC,iBAAiB,CAAC,CAAoB;IAC9C,OAAO,CAAC,uBAAuB,CAAC,CAK9B;IAEF;;;OAGG;IACG,WAAW,CACf,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,GAAE,MAAM,GAAG,MAAU,GAC7B,OAAO,CAAC,OAAO,CAAC;IAcnB;;;;;;;;OAQG;IACH,OAAO,CAAC,YAAY;IAKpB,OAAO,CAAC,mBAAmB;IAY3B,OAAO,CAAC,kBAAkB;IAqC1B,OAAO,CAAC,mBAAmB;IAsB3B,OAAO,CAAC,aAAa;IAwBrB,OAAO,CAAC,mBAAmB;IA6B3B;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;gBAkDhB,MAAM,CAAC,EAAE,MAAM;IAqBrB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA8DvE;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IAW5B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IA8B5B;;OAEG;IACH,OAAO,CAAC,UAAU;IAYlB;;;OAGG;IACH,OAAO,CAAC,cAAc;IAUtB;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAK5B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAK9B;;OAEG;IACH,OAAO,CAAC,cAAc;IAMtB,OAAO,CAAC,wCAAwC;IAchD,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,uBAAuB;IAaxB,qBAAqB,IAAI,kBAAkB;IAwBlD;;;;;;OAMG;IACH,OAAO,CAAC,uBAAuB;IA6B/B;;OAEG;YACW,uBAAuB;IAuCrC;;;OAGG;YACW,uBAAuB;IAuBrC;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IAO5B;;OAEG;IACH,OAAO,CAAC,aAAa;IAuFrB;;;;;OAKG;YACW,iBAAiB;IAmG/B;;;;;OAKG;YACW,oBAAoB;IAwDlC;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAKzB;;;;;OAKG;IACH,OAAO,CAAC,WAAW;IAyBnB;;;;;OAKG;IACH,OAAO,CAAC,kBAAkB;IAoC1B;;;;;;;;OAQG;IACH,OAAO,CAAC,WAAW;IAkDnB;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAM/B;;;;;;;OAOG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmDjD,mBAAmB,CAAC,SAAS,EAAE,aAAa,GAAG,IAAI;IAInD,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAIzE;;;;OAIG;YACW,oBAAoB;IAgBrB,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAK1G,OAAO,CAAC,gBAAgB;YA0CV,cAAc;IAsI5B,OAAO,CAAC,sBAAsB;IAQ9B,OAAO,CAAC,uBAAuB;IAQ/B,OAAO,CAAC,yBAAyB;YAcnB,kBAAkB;IAsDhC,OAAO,CAAC,wBAAwB;IAyFhC,OAAO,CAAC,yBAAyB;IA4CjC,OAAO,CAAC,uBAAuB;IAc/B,OAAO,CAAC,+CAA+C;IA2DvD,OAAO,CAAC,6BAA6B;IAcrC,OAAO,CAAC,6BAA6B;IAUrC,OAAO,CAAC,8BAA8B;IActC,OAAO,CAAC,yBAAyB;IAUjC;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAK5B"}