mcp4openapi 0.3.1 → 0.3.3

package/dist/src/logger.js

@@ -1,177 +0,0 @@
-/**
- * Logger interfaces and implementations
- *
- * Why: Replaces console.error with structured, level-based logging.
- * Enables production-ready logging with context and proper error handling.
- *
- * Security: Profile-aware token redaction prevents sensitive data leakage.
- */
-import { redactHeader, redactQueryParam, redactParam } from './validation-utils.js';
-const WELL_KNOWN_SECRET_KEYS = new Set([
-    'access_token',
-    'refresh_token',
-    'id_token',
-    'client_secret',
-    'client_assertion',
-    'code',
-    'code_verifier',
-]);
-function deepRedactWellKnownSecrets(value, depth = 0, seen) {
-    if (depth > 20)
-        return value;
-    if (value === null || typeof value !== 'object')
-        return value;
-    if (!seen)
-        seen = new WeakSet();
-    if (seen.has(value))
-        return value;
-    seen.add(value);
-    if (Array.isArray(value)) {
-        return value.map(item => deepRedactWellKnownSecrets(item, depth + 1, seen));
-    }
-    const record = value;
-    const out = {};
-    for (const [key, val] of Object.entries(record)) {
-        if (WELL_KNOWN_SECRET_KEYS.has(key)) {
-            out[key] = '[REDACTED]';
-            continue;
-        }
-        out[key] = deepRedactWellKnownSecrets(val, depth + 1, seen);
-    }
-    return out;
-}
-function resolveLogLevel(explicitLevel) {
-    if (explicitLevel !== undefined)
-        return explicitLevel;
-    const envLevel = process.env.MCP4_LOG_LEVEL?.toUpperCase();
-    return envLevel && envLevel in LogLevel
-        ? LogLevel[envLevel]
-        : LogLevel.INFO;
-}
-/**
- * Sanitize log message to prevent log injection
- * Replaces newlines with escaped string representation
- */
-export function sanitizeLogMessage(message) {
-    return message.replace(/\n/g, '\\n').replace(/\r/g, '\\r');
-}
-function redactSensitiveContext(data, authConfig) {
-    const redacted = deepRedactWellKnownSecrets(data);
-    if (!authConfig)
-        return redacted;
-    switch (authConfig.type) {
-        case 'bearer':
-            redacted.headers = redactHeader(redacted.headers, 'authorization');
-            break;
-        case 'custom-header':
-            if (authConfig.header_name) {
-                redacted.headers = redactHeader(redacted.headers, authConfig.header_name.toLowerCase());
-            }
-            break;
-        case 'query':
-            if (authConfig.query_param) {
-                redacted.url = redactQueryParam(redacted.url, authConfig.query_param);
-                redacted.params = redactParam(redacted.params, authConfig.query_param);
-            }
-            break;
-    }
-    return redacted;
-}
-export var LogLevel;
-(function (LogLevel) {
-    LogLevel[LogLevel["DEBUG"] = 0] = "DEBUG";
-    LogLevel[LogLevel["INFO"] = 1] = "INFO";
-    LogLevel[LogLevel["WARN"] = 2] = "WARN";
-    LogLevel[LogLevel["ERROR"] = 3] = "ERROR";
-    LogLevel[LogLevel["SILENT"] = 4] = "SILENT";
-})(LogLevel || (LogLevel = {}));
-/**
- * Default logger - writes to stderr, respects MCP4_LOG_LEVEL env var
- *
- * Security: Redacts auth tokens based on profile configuration
- */
-export class ConsoleLogger {
-    constructor(level, authConfig) {
-        this.level = resolveLogLevel(level);
-        this.authConfig = authConfig;
-    }
-    debug(message, context) {
-        if (this.level <= LogLevel.DEBUG) {
-            this.write('DEBUG', message, context);
-        }
-    }
-    info(message, context) {
-        if (this.level <= LogLevel.INFO) {
-            this.write('INFO', message, context);
-        }
-    }
-    warn(message, context) {
-        if (this.level <= LogLevel.WARN) {
-            this.write('WARN', message, context);
-        }
-    }
-    error(message, error, context) {
-        if (this.level <= LogLevel.ERROR) {
-            const errorContext = error ? {
-                error: error.message,
-                stack: error.stack,
-                ...context,
-            } : context;
-            this.write('ERROR', message, errorContext);
-        }
-    }
-    write(level, message, context) {
-        const timestamp = new Date().toISOString();
-        const redacted = context ? redactSensitiveContext(context, this.authConfig) : undefined;
-        const ctx = redacted ? ` ${JSON.stringify(redacted)}` : '';
-        const safeMessage = sanitizeLogMessage(message);
-        console.error(`[${timestamp}] ${level}: ${safeMessage}${ctx}`);
-    }
-}
-/**
- * Structured JSON logger for production
- *
- * Why: Machine-readable logs for log aggregation systems (ELK, Splunk, etc.)
- * Security: Redacts auth tokens based on profile configuration
- */
-export class JsonLogger {
-    constructor(level, authConfig) {
-        this.level = resolveLogLevel(level);
-        this.authConfig = authConfig;
-    }
-    debug(message, context) {
-        if (this.level <= LogLevel.DEBUG) {
-            this.write('debug', message, context);
-        }
-    }
-    info(message, context) {
-        if (this.level <= LogLevel.INFO) {
-            this.write('info', message, context);
-        }
-    }
-    warn(message, context) {
-        if (this.level <= LogLevel.WARN) {
-            this.write('warn', message, context);
-        }
-    }
-    error(message, error, context) {
-        if (this.level <= LogLevel.ERROR) {
-            this.write('error', message, {
-                error: error?.message,
-                stack: error?.stack,
-                ...context,
-            });
-        }
-    }
-    write(level, message, context) {
-        const redacted = context ? redactSensitiveContext(context, this.authConfig) : undefined;
-        const log = {
-            timestamp: new Date().toISOString(),
-            level,
-            message,
-            ...redacted,
-        };
-        console.error(JSON.stringify(log));
-    }
-}
-//# sourceMappingURL=logger.js.map

package/dist/src/logger.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAgB,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAElG,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,cAAc;IACd,eAAe;IACf,UAAU;IACV,eAAe;IACf,kBAAkB;IAClB,MAAM;IACN,eAAe;CAChB,CAAC,CAAC;AAEH,SAAS,0BAA0B,CAAC,KAAc,EAAE,QAAgB,CAAC,EAAE,IAAsB;IAC3F,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE9D,IAAI,CAAC,IAAI;QAAE,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;IAChC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC,CAAC;IAE1B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,0BAA0B,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,GAAG,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;YACxB,SAAS;QACX,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,0BAA0B,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,aAAwB;IAC/C,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IAEtD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,EAAE,CAAC;IAC3D,OAAO,QAAQ,IAAI,QAAQ,IAAI,QAAQ;QACrC,CAAC,CAAC,QAAQ,CAAC,QAAiC,CAAC;QAC7C,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,sBAAsB,CAC7B,IAA6B,EAC7B,UAA4B;IAE5B,MAAM,QAAQ,GAAG,0BAA0B,CAAC,IAAI,CAA4B,CAAC;IAC7E,IAAI,CAAC,UAAU;QAAE,OAAO,QAAQ,CAAC;IAEjC,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,QAAQ;YACX,QAAQ,CAAC,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YACnE,MAAM;QAER,KAAK,eAAe;YAClB,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;gBAC3B,QAAQ,CAAC,OAAO,GAAG,YAAY,CAC7B,QAAQ,CAAC,OAAO,EAChB,UAAU,CAAC,WAAW,CAAC,WAAW,EAAE,CACrC,CAAC;YACJ,CAAC;YACD,MAAM;QAER,KAAK,OAAO;YACV,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;gBAC3B,QAAQ,CAAC,GAAG,GAAG,gBAAgB,CAC7B,QAAQ,CAAC,GAAyB,EAClC,UAAU,CAAC,WAAW,CACvB,CAAC;gBACF,QAAQ,CAAC,MAAM,GAAG,WAAW,CAC3B,QAAQ,CAAC,MAAM,EACf,UAAU,CAAC,WAAW,CACvB,CAAC;YACJ,CAAC;YACD,MAAM;IACV,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAN,IAAY,QAMX;AAND,WAAY,QAAQ;IAClB,yCAAS,CAAA;IACT,uCAAQ,CAAA;IACR,uCAAQ,CAAA;IACR,yCAAS,CAAA;IACT,2CAAU,CAAA;AACZ,CAAC,EANW,QAAQ,KAAR,QAAQ,QAMnB;AASD;;;;GAIG;AACH,MAAM,OAAO,aAAa;IAIxB,YAAY,KAAgB,EAAE,UAA4B;QACxD,IAAI,CAAC,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,OAAiC;QACtD,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAiC;QACrD,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAiC;QACrD,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,KAAa,EAAE,OAAiC;QACrE,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjC,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC;gBAC3B,KAAK,EAAE,KAAK,CAAC,OAAO;gBACpB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,GAAG,OAAO;aACX,CAAC,CAAC,CAAC,OAAO,CAAC;YACZ,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAa,EAAE,OAAe,EAAE,OAAiC;QAC7E,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxF,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAChD,OAAO,CAAC,KAAK,CAAC,IAAI,SAAS,KAAK,KAAK,KAAK,WAAW,GAAG,GAAG,EAAE,CAAC,CAAC;IACjE,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,UAAU;IAIrB,YAAY,KAAgB,EAAE,UAA4B;QACxD,IAAI,CAAC,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,OAAiC;QACtD,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAiC;QACrD,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAiC;QACrD,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,KAAa,EAAE,OAAiC;QACrE,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE;gBAC3B,KAAK,EAAE,KAAK,EAAE,OAAO;gBACrB,KAAK,EAAE,KAAK,EAAE,KAAK;gBACnB,GAAG,OAAO;aACX,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAa,EAAE,OAAe,EAAE,OAAiC;QAC7E,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxF,MAAM,GAAG,GAAG;YACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK;YACL,OAAO;YACP,GAAG,QAAQ;SACZ,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,CAAC;CACF"}

package/dist/src/mcp-server-manager.d.ts

@@ -1,20 +0,0 @@
-/**
- * MCP server manager for multi-profile HTTP routing.
- */
-import type { Logger } from './logger.js';
-import { MCPServer } from './mcp-server.js';
-import type { HttpProfileContext } from './types/http-transport.js';
-import type { HttpTransport } from './http-transport.js';
-import { ProfileRegistry } from './profile-registry.js';
-export declare class MCPServerManager {
-    private registry;
-    private logger;
-    private httpTransport?;
-    private servers;
-    constructor(registry: ProfileRegistry, logger: Logger, httpTransport?: HttpTransport);
-    getDefaultProfileId(): string | undefined;
-    getProfileContext(profileId: string): Promise<HttpProfileContext | null>;
-    getServer(profileId: string): Promise<MCPServer>;
-    private createServer;
-}
-//# sourceMappingURL=mcp-server-manager.d.ts.map

package/dist/src/mcp-server-manager.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-server-manager.d.ts","sourceRoot":"","sources":["../../src/mcp-server-manager.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAkB;IAClC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,aAAa,CAAC,CAAgB;IACtC,OAAO,CAAC,OAAO,CAAyC;gBAE5C,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,aAAa;IAMpF,mBAAmB,IAAI,MAAM,GAAG,SAAS;IAInC,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAKxE,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;YAWxC,YAAY;CAS3B"}

package/dist/src/mcp-server-manager.js

@@ -1,38 +0,0 @@
-/**
- * MCP server manager for multi-profile HTTP routing.
- */
-import { MCPServer } from './mcp-server.js';
-export class MCPServerManager {
-    constructor(registry, logger, httpTransport) {
-        this.servers = new Map();
-        this.registry = registry;
-        this.logger = logger;
-        this.httpTransport = httpTransport;
-    }
-    getDefaultProfileId() {
-        return this.registry.getDefaultProfile()?.profileId;
-    }
-    async getProfileContext(profileId) {
-        const server = await this.getServer(profileId);
-        return server.getHttpProfileContext();
-    }
-    async getServer(profileId) {
-        const existing = this.servers.get(profileId);
-        if (existing) {
-            return existing;
-        }
-        const createPromise = this.createServer(profileId);
-        this.servers.set(profileId, createPromise);
-        return createPromise;
-    }
-    async createServer(profileId) {
-        const resolved = await this.registry.resolveProfile(profileId);
-        const server = new MCPServer(this.logger);
-        await server.initialize(resolved.specPath, resolved.profilePath);
-        if (this.httpTransport) {
-            server.attachHttpTransport(this.httpTransport);
-        }
-        return server;
-    }
-}
-//# sourceMappingURL=mcp-server-manager.js.map

package/dist/src/mcp-server-manager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-server-manager.js","sourceRoot":"","sources":["../../src/mcp-server-manager.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAK5C,MAAM,OAAO,gBAAgB;IAM3B,YAAY,QAAyB,EAAE,MAAc,EAAE,aAA6B;QAF5E,YAAO,GAAG,IAAI,GAAG,EAA8B,CAAC;QAGtD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAED,mBAAmB;QACjB,OAAO,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAE,SAAS,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,SAAiB;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC,qBAAqB,EAAE,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,SAAiB;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAC3C,OAAO,aAAa,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,SAAiB;QAC1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;QACjE,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/src/mcp-server.d.ts

@@ -1,203 +0,0 @@
-/**
- * Main MCP server implementation
- *
- * Why: Coordinates OpenAPI parser, profile loader, tool generator, and request execution.
- * Single entry point for tool registration and invocation.
- */
-import type { Logger } from './logger.js';
-import type { HttpProfileContext } from './types/http-transport.js';
-import type { HttpTransport } from './http-transport.js';
-export declare class MCPServer {
-    private server;
-    private parser;
-    private profile?;
-    private toolGenerator;
-    private httpClientFactory;
-    private compositeExecutor?;
-    private schemaValidator;
-    private logger;
-    private httpTransport;
-    private stdioFiltering?;
-    private toolFilterService?;
-    private globalToolFilterSummary?;
-    /**
-     * Execute a tools/call request via the JSON-RPC handler.
-     * Intended for internal use and tests to avoid accessing private methods.
-     */
-    callToolRpc(name: string, args: Record<string, unknown>, sessionId?: string, requestId?: string | number): Promise<unknown>;
-    /**
-     * Filter response payload to include only specified fields.
-     *
-     * Supports YouTrack-style field selectors like:
-     * - "author(id,login)"
-     * - "comments(id,text,author(id,login))"
-     *
-     * Recurses into nested objects and arrays when subfields are specified.
-     */
-    private filterFields;
-    private parseFieldSelection;
-    private mergeFieldSelector;
-    private mergeSelectionTrees;
-    private splitTopLevel;
-    private applyFieldSelection;
-    /**
-     * Format error message for client with correlation ID
-     *
-     * Why: Categorize errors as "safe" (4xx client errors) vs "unsafe" (5xx server errors)
-     * Safe errors show API message to help user fix the issue
-     * Unsafe errors show generic message to avoid leaking sensitive info
-     */
-    private formatErrorForClient;
-    constructor(logger?: Logger);
-    initialize(specPath: string, profilePath?: string): Promise<void>;
-    /**
-     * Create logger with auth configuration for token redaction
-     *
-     * Why: Prevents sensitive tokens from appearing in logs
-     */
-    private createLoggerWithAuth;
-    /**
-     * Check tool name lengths and warn if needed
-     */
-    private checkToolNameLengths;
-    /**
-     * Get base URL from profile config or OpenAPI spec
-     */
-    private getBaseUrl;
-    /**
-     * Get auth configurations as array (supports single or multiple auth methods)
-     * Returns array sorted by priority (lower = higher priority)
-     */
-    private getAuthConfigs;
-    /**
-     * Get primary (highest priority) auth configuration
-     */
-    private getPrimaryAuthConfig;
-    /**
-     * Get highest priority auth configuration that reads token from environment
-     */
-    private getEnvBackedAuthConfig;
-    /**
-     * Get OAuth configuration from auth configs (if any)
-     */
-    private getOAuthConfig;
-    private buildOAuthConfigWithAllowedRedirectHosts;
-    private getProfileIdValue;
-    private getOAuthRateLimitConfig;
-    getHttpProfileContext(): HttpProfileContext;
-    /**
-     * Extract hostnames from origin patterns for OAuth redirect validation
-     * e.g., "http://localhost:*,https://app.example.com" -> ["localhost", "app.example.com"]
-     *
-     * Filters out CIDR blocks (e.g., "127.0.0.1/8") which are valid for origin validation
-     * but not for OAuth redirect URI validation
-     */
-    private extractHostsFromOrigins;
-    /**
-     * Get or create HTTP client for session
-     */
-    private getHttpClientForSession;
-    /**
-     * Get auth token from HTTP transport session
-     * Ensures token is valid (refreshes if expired) before returning
-     */
-    private getAuthTokenFromSession;
-    /**
-     * Cleanup HTTP client for destroyed session
-     *
-     * Why: Prevent memory leak - sessions expire but cached clients stay forever
-     */
-    private cleanupSessionClient;
-    /**
-     * Setup MCP request handlers
-     */
-    private setupHandlers;
-    /**
-     * Execute simple (non-composite) tool
-     *
-     * Why separate: Simple tools map directly to single OpenAPI operation.
-     * No result aggregation needed.
-     */
-    private executeSimpleTool;
-    /**
-     * Execute proxy download operation
-     *
-     * Why: Some APIs return authenticated URLs that LLMs cannot fetch directly.
-     * This proxies the download through the MCP server.
-     */
-    private executeProxyDownload;
-    /**
-     * Encode path segment if it contains special characters (like slashes)
-     *
-     * Why: GitLab and other APIs require path parameters (like project paths)
-     * to be URL-encoded when used in URL path.
-     */
-    private encodePathSegment;
-    /**
-     * Resolve path parameters using profile aliases
-     *
-     * Why aliases: Different tools may use different parameter names for same path param.
-     * Example: GitLab uses "resource_id", "project_id", "group_id" all mapping to "{id}"
-     */
-    private resolvePath;
-    /**
-     * Extract query parameters from args
-     *
-     * Why: Separate query params from body params. Array handling is done by HttpClient
-     * based on profile's array_format setting.
-     */
-    private extractQueryParams;
-    /**
-     * Extract request body from args
-     *
-     * Why: For create/update operations, collect non-metadata fields into body.
-     * Metadata (action, resource_type, etc.) are not sent to API.
-     * Path/query parameters are excluded from body UNLESS they're also in request body schema.
-     *
-     * Uses metadata_params from tool definition, defaults to ['action', 'resource_type']
-     */
-    private extractBody;
-    /**
-     * Start server with stdio transport
-     */
-    runStdio(): Promise<void>;
-    /**
-     * Start server with HTTP transport
-     *
-     * Implements MCP Specification 2025-03-26 Streamable HTTP transport
-     *
-     * Why: Enables remote MCP server access with SSE streaming, session management,
-     * and resumability for reliable communication over HTTP.
-     */
-    runHttp(host: string, port: number): Promise<void>;
-    attachHttpTransport(transport: HttpTransport): void;
-    handleSessionDestroyed(profileId: string, sessionId: string): void;
-    /**
-     * Handle JSON-RPC message from HTTP transport
-     *
-     * Why: Unified message handling for both stdio and HTTP transports
-     */
-    private handleJsonRpcMessage;
-    handleHttpMessage(message: unknown, sessionId?: string, profileId?: string): Promise<unknown>;
-    private handleInitialize;
-    private handleToolCall;
-    private getFilteringForSession;
-    private getToolFilterForSession;
-    private getFilteringOperationInfo;
-    private handleOtherRequest;
-    private applyGlobalToolFiltering;
-    private applySessionToolFiltering;
-    private buildToolFilterResolver;
-    private validateCompositeToolsAgainstFilteredOperations;
-    private getToolFilterWarnThresholdPct;
-    private recordGlobalToolFilterMetrics;
-    private recordSessionToolFilterMetrics;
-    private recordToolFilterRejection;
-    /**
-     * Stop the MCP server gracefully
-     *
-     * Why: Cleanup resources, close connections, allow graceful shutdown
-     */
-    stop(): Promise<void>;
-}
-//# sourceMappingURL=mcp-server.d.ts.map

package/dist/src/mcp-server.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-server.d.ts","sourceRoot":"","sources":["../../src/mcp-server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAiCH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAqB1C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGzD,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,OAAO,CAAC,CAAU;IAC1B,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,iBAAiB,CAA2B;IACpD,OAAO,CAAC,iBAAiB,CAAC,CAAoB;IAC9C,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,aAAa,CAAa;IAClC,OAAO,CAAC,cAAc,CAAC,CAAiB;IACxC,OAAO,CAAC,iBAAiB,CAAC,CAAoB;IAC9C,OAAO,CAAC,uBAAuB,CAAC,CAK9B;IAEF;;;OAGG;IACG,WAAW,CACf,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,GAAE,MAAM,GAAG,MAAU,GAC7B,OAAO,CAAC,OAAO,CAAC;IAcnB;;;;;;;;OAQG;IACH,OAAO,CAAC,YAAY;IAKpB,OAAO,CAAC,mBAAmB;IAY3B,OAAO,CAAC,kBAAkB;IAqC1B,OAAO,CAAC,mBAAmB;IAsB3B,OAAO,CAAC,aAAa;IAwBrB,OAAO,CAAC,mBAAmB;IA6B3B;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;gBAkDhB,MAAM,CAAC,EAAE,MAAM;IAqBrB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA8DvE;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IAW5B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IA8B5B;;OAEG;IACH,OAAO,CAAC,UAAU;IAYlB;;;OAGG;IACH,OAAO,CAAC,cAAc;IAUtB;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAK5B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAK9B;;OAEG;IACH,OAAO,CAAC,cAAc;IAMtB,OAAO,CAAC,wCAAwC;IAchD,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,uBAAuB;IAaxB,qBAAqB,IAAI,kBAAkB;IAwBlD;;;;;;OAMG;IACH,OAAO,CAAC,uBAAuB;IA6B/B;;OAEG;YACW,uBAAuB;IAuCrC;;;OAGG;YACW,uBAAuB;IAuBrC;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IAO5B;;OAEG;IACH,OAAO,CAAC,aAAa;IAuFrB;;;;;OAKG;YACW,iBAAiB;IAmG/B;;;;;OAKG;YACW,oBAAoB;IAwDlC;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAKzB;;;;;OAKG;IACH,OAAO,CAAC,WAAW;IAyBnB;;;;;OAKG;IACH,OAAO,CAAC,kBAAkB;IAoC1B;;;;;;;;OAQG;IACH,OAAO,CAAC,WAAW;IAkDnB;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAM/B;;;;;;;OAOG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmDjD,mBAAmB,CAAC,SAAS,EAAE,aAAa,GAAG,IAAI;IAInD,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAIzE;;;;OAIG;YACW,oBAAoB;IAgBrB,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAK1G,OAAO,CAAC,gBAAgB;YA0CV,cAAc;IAsI5B,OAAO,CAAC,sBAAsB;IAQ9B,OAAO,CAAC,uBAAuB;IAQ/B,OAAO,CAAC,yBAAyB;YAcnB,kBAAkB;IAsDhC,OAAO,CAAC,wBAAwB;IAyFhC,OAAO,CAAC,yBAAyB;IA4CjC,OAAO,CAAC,uBAAuB;IAc/B,OAAO,CAAC,+CAA+C;IA2DvD,OAAO,CAAC,6BAA6B;IAcrC,OAAO,CAAC,6BAA6B;IAUrC,OAAO,CAAC,8BAA8B;IActC,OAAO,CAAC,yBAAyB;IAUjC;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAK5B"}