memory-journal-mcp 9.0.0 → 9.1.0

package/dist/audit/interceptor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interceptor.d.ts","sourceRoot":"","sources":["../../src/audit/interceptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAWpD,iEAAiE;AACjE,MAAM,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AAEpF;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC7B;;;;;;;OAOG;IACH,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;CAC/E;AAyCD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,WAAW,GAAG,gBAAgB,CAyGjF;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,CAAC,EAClC,WAAW,EAAE,WAAW,GAAG,IAAI,EAC/B,aAAa,EAAE,UAAU,GAAG,QAAQ,EACpC,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GACzB,OAAO,CAAC,CAAC,CAAC,CAmDZ"}
+{"version":3,"file":"interceptor.d.ts","sourceRoot":"","sources":["../../src/audit/interceptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAYpD,iEAAiE;AACjE,MAAM,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AAEpF;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC7B;;;;;;;OAOG;IACH,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;CAC/E;AAyCD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,WAAW,GAAG,gBAAgB,CAiGjF;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,CAAC,EAClC,WAAW,EAAE,WAAW,GAAG,IAAI,EAC/B,aAAa,EAAE,UAAU,GAAG,QAAQ,EACpC,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GACzB,OAAO,CAAC,CAAC,CAAC,CAmDZ"}

package/dist/auth/authorization-server-discovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-server-discovery.d.ts","sourceRoot":"","sources":["../../src/auth/authorization-server-discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,2BAA2B,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAA;AAUxF;;;;;GAKG;AACH,qBAAa,4BAA4B;IACrC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAQ;IACtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAEhC,OAAO,CAAC,cAAc,CAA2C;IACjE,OAAO,CAAC,WAAW,CAAI;gBAEX,MAAM,EAAE,yBAAyB;IAY7C;;;;;;;;OAQG;IACG,QAAQ,IAAI,OAAO,CAAC,2BAA2B,CAAC;IAsJtD;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAqBxB;;OAEG;IACH,WAAW,IAAI,2BAA2B;IAS1C;;;;OAIG;IACH,UAAU,IAAI,MAAM;IAUpB;;OAEG;IACH,gBAAgB,IAAI,MAAM;IAI1B;;OAEG;IACH,SAAS,IAAI,MAAM;IAInB;;;;OAIG;IACH,uBAAuB,IAAI,MAAM,GAAG,IAAI;IAIxC;;OAEG;IACH,0BAA0B,IAAI,OAAO;IAIrC;;OAEG;IACH,kBAAkB,IAAI,MAAM,EAAE;IAI9B;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAMxC;;OAEG;IACH,UAAU,IAAI,IAAI;IASlB;;OAEG;IACH,YAAY,IAAI,OAAO;IAIvB;;OAEG;IACH,gBAAgB,IAAI,MAAM;CAG7B;AAMD;;GAEG;AACH,wBAAgB,yBAAyB,CACrC,aAAa,EAAE,MAAM,EACrB,OAAO,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,yBAAyB,EAAE,eAAe,CAAC,CAAC,GACpE,4BAA4B,CAM9B"}
+{"version":3,"file":"authorization-server-discovery.d.ts","sourceRoot":"","sources":["../../src/auth/authorization-server-discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,2BAA2B,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAA;AAUxF;;;;;GAKG;AACH,qBAAa,4BAA4B;IACrC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAQ;IACtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAEhC,OAAO,CAAC,cAAc,CAA2C;IACjE,OAAO,CAAC,WAAW,CAAI;gBAEX,MAAM,EAAE,yBAAyB;IAY7C;;;;;;;;OAQG;IACG,QAAQ,IAAI,OAAO,CAAC,2BAA2B,CAAC;IAkKtD;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAqBxB;;OAEG;IACH,WAAW,IAAI,2BAA2B;IAS1C;;;;OAIG;IACH,UAAU,IAAI,MAAM;IAUpB;;OAEG;IACH,gBAAgB,IAAI,MAAM;IAI1B;;OAEG;IACH,SAAS,IAAI,MAAM;IAInB;;;;OAIG;IACH,uBAAuB,IAAI,MAAM,GAAG,IAAI;IAIxC;;OAEG;IACH,0BAA0B,IAAI,OAAO;IAIrC;;OAEG;IACH,kBAAkB,IAAI,MAAM,EAAE;IAI9B;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAMxC;;OAEG;IACH,UAAU,IAAI,IAAI;IASlB;;OAEG;IACH,YAAY,IAAI,OAAO;IAIvB;;OAEG;IACH,gBAAgB,IAAI,MAAM;CAG7B;AAMD;;GAEG;AACH,wBAAgB,yBAAyB,CACrC,aAAa,EAAE,MAAM,EACrB,OAAO,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,yBAAyB,EAAE,eAAe,CAAC,CAAC,GACpE,4BAA4B,CAM9B"}

package/dist/auth/middleware.d.ts

@@ -9,25 +9,21 @@ import type { TokenClaims } from './types.js';
 import type { AuthInfo } from '@modelcontextprotocol/server';
 import type { TokenValidator } from './token-validator.js';
 import type { OAuthResourceServer } from './oauth-resource-server.js';
+import { extractBearerToken } from './transport-agnostic.js';
+export { extractBearerToken };
 /**
  * Extended Express Request with auth context
- * Uses module augmentation to extend Express.Request interface
  */
-declare global {
-    namespace Express {
-        interface Request {
-            /** MCP standard auth info */
-            auth?: AuthInfo;
-            /** Original Token claims */
-            tokenClaims?: TokenClaims;
-            /** Raw access token */
-            accessToken?: string;
-            /** Request ID for tracing */
-            requestId?: string;
-        }
-    }
+export interface AuthRequest extends Request {
+    /** MCP standard auth info */
+    auth?: AuthInfo;
+    /** Original Token claims */
+    tokenClaims?: TokenClaims;
+    /** Raw access token */
+    accessToken?: string;
+    /** Request ID for tracing */
+    requestId?: string;
 }
-export type AuthRequest = Request;
 /**
  * Auth middleware configuration
  */
@@ -39,13 +35,6 @@ export interface AuthMiddlewareConfig {
     /** Paths that bypass authentication (e.g., '/.well-known/*', '/health') */
     publicPaths?: string[];
 }
-/**
- * Extract Bearer token from Authorization header
- *
- * @param authHeader - Authorization header value
- * @returns The token or null if not present/invalid
- */
-export declare function extractBearerToken(authHeader: string | undefined): string | null;
 /**
  * Create the main authentication middleware
  *

package/dist/auth/middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/auth/middleware.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAC9E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAA;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAUrE;;;GAGG;AACH,OAAO,CAAC,MAAM,CAAC;IAEX,UAAU,OAAO,CAAC;QACd,UAAU,OAAO;YACb,6BAA6B;YAC7B,IAAI,CAAC,EAAE,QAAQ,CAAA;YACf,4BAA4B;YAC5B,WAAW,CAAC,EAAE,WAAW,CAAA;YACzB,uBAAuB;YACvB,WAAW,CAAC,EAAE,MAAM,CAAA;YACpB,6BAA6B;YAC7B,SAAS,CAAC,EAAE,MAAM,CAAA;SACrB;KACJ;CACJ;AAED,MAAM,MAAM,WAAW,GAAG,OAAO,CAAA;AAMjC;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACjC,+BAA+B;IAC/B,cAAc,EAAE,cAAc,CAAA;IAE9B,6DAA6D;IAC7D,cAAc,EAAE,mBAAmB,CAAA;IAEnC,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;CACzB;AAMD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAmBhF;AA0CD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,GAAG,cAAc,CAsFjF;AAMD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,CAsC1D;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,cAAc,CAwChE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,CAoCjE;AAMD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC7B,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACnB,IAAI,CAiBN;AAMD,OAAO,EACH,0BAA0B,EAC1B,YAAY,EACZ,gBAAgB,EAChB,KAAK,oBAAoB,GAC5B,MAAM,yBAAyB,CAAA"}
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/auth/middleware.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAC9E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAA;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAKrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAE5D,OAAO,EAAE,kBAAkB,EAAE,CAAA;AAM7B;;GAEG;AACH,MAAM,WAAW,WAAY,SAAQ,OAAO;IACxC,6BAA6B;IAC7B,IAAI,CAAC,EAAE,QAAQ,CAAA;IACf,4BAA4B;IAC5B,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,uBAAuB;IACvB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAA;CACrB;AAMD;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACjC,+BAA+B;IAC/B,cAAc,EAAE,cAAc,CAAA;IAE9B,6DAA6D;IAC7D,cAAc,EAAE,mBAAmB,CAAA;IAEnC,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;CACzB;AA0CD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,GAAG,cAAc,CAsFjF;AAMD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,CAsC1D;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,cAAc,CAwChE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,CAoCjE;AAMD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC7B,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACnB,IAAI,CAiBN;AAMD,OAAO,EACH,0BAA0B,EAC1B,YAAY,EACZ,gBAAgB,EAChB,KAAK,oBAAoB,GAC5B,MAAM,yBAAyB,CAAA"}

package/dist/auth/scope-map.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scope-map.d.ts","sourceRoot":"","sources":["../../src/auth/scope-map.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AA0BhD,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,CA2BhE;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,CAEpE"}
+{"version":3,"file":"scope-map.d.ts","sourceRoot":"","sources":["../../src/auth/scope-map.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAyChD,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,CAiChE;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,CAEpE"}

package/dist/auth/scopes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scopes.d.ts","sourceRoot":"","sources":["../../src/auth/scopes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAOlD;;GAEG;AACH,eAAO,MAAM,MAAM;IACf,uBAAuB;;IAEvB,4BAA4B;;IAE5B,4BAA4B;;IAE5B,4CAA4C;;IAE5C,6BAA6B;;IAE7B,uBAAuB;;CAEjB,CAAA;AAEV,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,MAAM,CAAC,CAAC,MAAM,OAAO,MAAM,CAAC,CAAA;AAEhE;;GAEG;AACH,eAAO,MAAM,WAAW,8DAA+D,CAAA;AAEvF;;GAEG;AACH,eAAO,MAAM,gBAAgB,8DAA+D,CAAA;AAM5F;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,SAAS,EAAE,aAAa,CAe9D,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAqD9D,CAAA;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS,GAAG,aAAa,CAEpE;AAkBD;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,EAAgC,CAAA;AAEzE;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,EAAiC,CAAA;AAE3E;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,EAAiC,CAAA;AAM3E;;GAEG;AACH,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAKzD;AAMD;;GAEG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CA+BhF;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,OAAO,CAEtF;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,OAAO,CAEvF;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAEvD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAEvD;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAEtD;AAMD;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAEjE;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,CAWrE;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAU7D;AAMD;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAiBzD"}
+{"version":3,"file":"scopes.d.ts","sourceRoot":"","sources":["../../src/auth/scopes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAOlD;;GAEG;AACH,eAAO,MAAM,MAAM;IACf,uBAAuB;;IAEvB,4BAA4B;;IAE5B,4BAA4B;;IAE5B,4CAA4C;;IAE5C,6BAA6B;;IAE7B,uBAAuB;;CAEjB,CAAA;AAEV,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,MAAM,CAAC,CAAC,MAAM,OAAO,MAAM,CAAC,CAAA;AAEhE;;GAEG;AACH,eAAO,MAAM,WAAW,8DAA+D,CAAA;AAEvF;;GAEG;AACH,eAAO,MAAM,gBAAgB,8DAA+D,CAAA;AAM5F;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,SAAS,EAAE,aAAa,CAe9D,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAuD9D,CAAA;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS,GAAG,aAAa,CAEpE;AAkBD;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,EAAgC,CAAA;AAEzE;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,EAAiC,CAAA;AAE3E;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,EAAiC,CAAA;AAM3E;;GAEG;AACH,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAKzD;AAMD;;GAEG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CA+BhF;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,OAAO,CAEtF;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,OAAO,CAEvF;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAEvD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAEvD;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAEtD;AAMD;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAEjE;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,CAWrE;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAU7D;AAMD;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAiBzD"}

package/dist/auth/token-validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"token-validator.d.ts","sourceRoot":"","sources":["../../src/auth/token-validator.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,qBAAqB,EAAe,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAC1F,OAAO,EACH,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,EAGxB,MAAM,aAAa,CAAA;AAQpB;;;;GAIG;AACH,qBAAa,cAAc;IACvB,uDAAuD;IACvD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAQ;IACvC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAQ;IAErC,OAAO,CAAC,IAAI,CAAoC;IAChD,OAAO,CAAC,UAAU,CAAI;gBAEV,MAAM,EAAE,oBAAoB;IAsCxC;;;;;OAKG;IACG,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAiC7D;;OAEG;IACH,OAAO,CAAC,OAAO;IA+Cf;;OAEG;IACH,OAAO,CAAC,aAAa;IAuCrB;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAqE7B;;OAEG;IACH,WAAW,IAAI,IAAI;IAOnB;;OAEG;IACH,UAAU,IAAI,IAAI;IAMlB;;OAEG;IACH,MAAM,CAAC,YAAY,CACf,MAAM,EAAE,qBAAqB,GAC9B,iBAAiB,GAAG,iBAAiB,GAAG,qBAAqB;IAYhE;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAiCjC;AAMD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,GAAG,cAAc,CAEjF"}
+{"version":3,"file":"token-validator.d.ts","sourceRoot":"","sources":["../../src/auth/token-validator.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,qBAAqB,EAAe,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAC1F,OAAO,EACH,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,EAGxB,MAAM,aAAa,CAAA;AAQpB;;;;GAIG;AACH,qBAAa,cAAc;IACvB,uDAAuD;IACvD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAQ;IACvC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAQ;IAErC,OAAO,CAAC,IAAI,CAAoC;IAChD,OAAO,CAAC,UAAU,CAAI;gBAEV,MAAM,EAAE,oBAAoB;IAsCxC;;;;;OAKG;IACG,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAkC7D;;OAEG;IACH,OAAO,CAAC,OAAO;IA+Cf;;OAEG;IACH,OAAO,CAAC,aAAa;IAuCrB;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAqE7B;;OAEG;IACH,WAAW,IAAI,IAAI;IAOnB;;OAEG;IACH,UAAU,IAAI,IAAI;IAMlB;;OAEG;IACH,MAAM,CAAC,YAAY,CACf,MAAM,EAAE,qBAAqB,GAC9B,iBAAiB,GAAG,iBAAiB,GAAG,qBAAqB;IAYhE;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAiCjC;AAMD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,GAAG,cAAc,CAEjF"}

package/dist/auth/transport-agnostic.d.ts

@@ -7,6 +7,10 @@
  */
 import type { TokenClaims } from './types.js';
 import type { TokenValidator } from './token-validator.js';
+/**
+ * Extract a Bearer token from an Authorization header.
+ */
+export declare function extractBearerToken(authHeader: string | undefined): string | null;
 /**
  * Transport-agnostic authenticated request context.
  * Usable by Express middleware, Streamable HTTP, or any future transport.

package/dist/auth/transport-agnostic.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transport-agnostic.d.ts","sourceRoot":"","sources":["../../src/auth/transport-agnostic.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAuB1D;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACjC,uCAAuC;IACvC,aAAa,EAAE,OAAO,CAAA;IAEtB,sCAAsC;IACtC,MAAM,CAAC,EAAE,WAAW,CAAA;IAEpB,iCAAiC;IACjC,MAAM,EAAE,MAAM,EAAE,CAAA;CACnB;AAED;;;GAGG;AACH,wBAAsB,0BAA0B,CAC5C,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,cAAc,EAAE,cAAc,GAC/B,OAAO,CAAC,oBAAoB,CAAC,CAkB/B;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAC9B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,cAAc,EAAE,cAAc,EAC9B,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;CAAO,GAChE,OAAO,CAAC,oBAAoB,CAAC,CA+B/B;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG;IAC9C,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;CACf,CAyCA"}
+{"version":3,"file":"transport-agnostic.d.ts","sourceRoot":"","sources":["../../src/auth/transport-agnostic.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAI1D;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAShF;AAMD;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACjC,uCAAuC;IACvC,aAAa,EAAE,OAAO,CAAA;IAEtB,sCAAsC;IACtC,MAAM,CAAC,EAAE,WAAW,CAAA;IAEpB,iCAAiC;IACjC,MAAM,EAAE,MAAM,EAAE,CAAA;CACnB;AAED;;;GAGG;AACH,wBAAsB,0BAA0B,CAC5C,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,cAAc,EAAE,cAAc,GAC/B,OAAO,CAAC,oBAAoB,CAAC,CAkB/B;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAC9B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,cAAc,EAAE,cAAc,EAC9B,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;CAAO,GAChE,OAAO,CAAC,oBAAoB,CAAC,CA+B/B;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG;IAC9C,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;CACf,CAyCA"}

package/dist/auth/validation.d.ts

@@ -10,5 +10,6 @@ import type { AuditLogger } from '../audit/index.js';
 export declare function enforceAccessBoundary(targetName: string, targetType: 'resource' | 'tool' | 'prompt', capabilities?: {
     requiresTeamScope?: boolean;
     requiresAdminScope?: boolean;
+    requiresAuditScope?: boolean;
 }, auditLogger?: AuditLogger | null): void;
 //# sourceMappingURL=validation.d.ts.map

package/dist/auth/validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/auth/validation.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAGpD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACjC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,EAC1C,YAAY,CAAC,EAAE;IAAE,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAAC,kBAAkB,CAAC,EAAE,OAAO,CAAA;CAAE,EAC5E,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI,GACjC,IAAI,CAqEN"}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/auth/validation.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAGpD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACjC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,EAC1C,YAAY,CAAC,EAAE;IACX,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,kBAAkB,CAAC,EAAE,OAAO,CAAA;CAC/B,EACD,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI,GACjC,IAAI,CA6EN"}

package/dist/{chunk-6RCZ4IYV.js → chunk-4FZCHFB5.js}

@@ -37,6 +37,9 @@ var ALLOWED_DATE_FORMATS = {
   month: "%Y-%m"
 };
 function validateDateFormatPattern(groupBy) {
+  if (!Object.hasOwn(ALLOWED_DATE_FORMATS, groupBy)) {
+    throw new InvalidDateFormatError(groupBy);
+  }
   const format = ALLOWED_DATE_FORMATS[groupBy];
   if (!format) {
     throw new InvalidDateFormatError(groupBy);
@@ -52,7 +55,18 @@ function assertNoPathTraversal(filename) {
   }
 }
 function assertSafeDirectoryPath(dirPath, providedRoots) {
-  const decodedDir = decodeURIComponent(dirPath);
+  if (/%2f|%5c|%2e|%00/i.test(dirPath) || dirPath.includes("\0")) {
+    throw new PathTraversalError(dirPath);
+  }
+  let decodedDir;
+  try {
+    decodedDir = decodeURIComponent(dirPath);
+  } catch {
+    throw new PathTraversalError(dirPath);
+  }
+  if (decodedDir.includes("\0")) {
+    throw new PathTraversalError(decodedDir);
+  }
   const normalized = decodedDir.replace(/\\/g, "/");
   const segments = normalized.split("/");
   if (segments.some((s) => s === "..")) {
@@ -144,8 +158,11 @@ function markUntrustedContent(content) {
   if (!content) return "";
   let trimmed = content.trim();
   if (!trimmed) return "";
-  trimmed = trimmed.replace(/<\/?untrusted_remote_content[^>]*>/gi, "");
-  trimmed = trimmed.replace(/</g, "&lt;").replace(/>/g, "&gt;");
+  trimmed = trimmed.replace(
+    /&lt;\/?untrusted_remote_content[^&]*&gt;|<\/?untrusted_remote_content[^>]*>/gi,
+    ""
+  );
+  trimmed = trimmed.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
   return `<untrusted_remote_content>
 ${trimmed}
 </untrusted_remote_content>`;
@@ -153,8 +170,11 @@ ${trimmed}
 function markUntrustedContentInline(content) {
   if (!content) return "";
   let cleaned = content;
-  cleaned = cleaned.replace(/<\/?untrusted_remote_content[^>]*>/gi, "");
-  cleaned = cleaned.replace(/</g, "&lt;").replace(/>/g, "&gt;");
+  cleaned = cleaned.replace(
+    /&lt;\/?untrusted_remote_content[^&]*&gt;|<\/?untrusted_remote_content[^>]*>/gi,
+    ""
+  );
+  cleaned = cleaned.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
   return `<untrusted_remote_content>${cleaned}</untrusted_remote_content>`;
 }
 function sanitizeAuthor(raw) {
@@ -183,6 +203,9 @@ function resolveAuthor() {
   if (authCtx?.claims?.sub) {
     return sanitizeAuthor(authCtx.claims.sub);
   }
+  if (authCtx?.authenticated) {
+    return "unknown";
+  }
   const localUser = process.env["USERNAME"] || process.env["USER"];
   if (localUser) {
     return sanitizeAuthor(localUser.toLowerCase());

package/dist/{chunk-AIWHVEOW.js → chunk-D2FY6XS5.js}

@@ -1,6 +1,7 @@
 import * as os from 'os';
 import * as path from 'path';
 import * as fs from 'fs';
+import { z } from 'zod';
 
 // src/utils/workspace-resolver.ts
 function getConfigPath() {
@@ -70,14 +71,15 @@ function findCanonicalRegistryKey(aliasOrKey, registry) {
 }
 function resolveProjectContext(input, config) {
   const registry = config?.projectRegistry ?? loadProjectRegistryFromConfig();
-  if (input.workspace_id !== void 0 && input.workspace_id !== null && input.workspace_id !== "default") {
-    let wsId = input.workspace_id;
+  const sanitizedWorkspaceId = input.workspace_id === "*" ? void 0 : input.workspace_id;
+  if (sanitizedWorkspaceId !== void 0 && sanitizedWorkspaceId !== null && sanitizedWorkspaceId !== "default") {
+    let wsId = sanitizedWorkspaceId;
     const canonicalKey = findCanonicalRegistryKey(wsId, registry);
     if (canonicalKey) {
       wsId = canonicalKey;
     }
     let projNum = input.project_number ?? (canonicalKey ? registry?.[canonicalKey]?.project_number : registry?.[wsId]?.project_number);
-    projNum ??= resolveProjectNumberFromPath(process.cwd());
+    projNum ??= resolveProjectNumberFromPath(process.cwd()) ?? config?.defaultProjectNumber;
     return {
       workspaceId: wsId,
       projectNumber: projNum
@@ -147,7 +149,7 @@ function resolveProjectContext(input, config) {
     }
   }
   if (input.project_number !== void 0 && input.project_number !== null) {
-    let wsId = input.workspace_id;
+    let wsId = sanitizedWorkspaceId;
     if ((!wsId || wsId === "default") && registry) {
       for (const [key, entry] of Object.entries(registry)) {
         if (entry.project_number === input.project_number) {
@@ -161,8 +163,8 @@ function resolveProjectContext(input, config) {
       projectNumber: input.project_number
     };
   }
-  const cwdProjNum = resolveProjectNumberFromPath(process.cwd());
-  let resolvedWsId = input.workspace_id;
+  const cwdProjNum = resolveProjectNumberFromPath(process.cwd()) ?? config?.defaultProjectNumber;
+  let resolvedWsId = sanitizedWorkspaceId;
   if ((!resolvedWsId || resolvedWsId === "default") && cwdProjNum !== void 0 && registry) {
     for (const [key, entry] of Object.entries(registry)) {
       if (entry.project_number === cwdProjNum) {
@@ -177,6 +179,9 @@ function resolveProjectContext(input, config) {
   };
 }
 function resolveWorkspaceId(explicitWorkspaceId, projectNumber, config, content, tags) {
+  if (explicitWorkspaceId === "*") {
+    return "*";
+  }
   const res = resolveProjectContext(
     {
       workspace_id: explicitWorkspaceId,
@@ -217,5 +222,92 @@ function resolveProjectNumberFromPath(cwd) {
     return void 0;
   }
 }
+var ENTRY_TYPES = [
+  "personal_reflection",
+  "project_decision",
+  "technical_achievement",
+  "bug_fix",
+  "feature_implementation",
+  "code_review",
+  "meeting_notes",
+  "learning",
+  "research",
+  "planning",
+  "retrospective",
+  "standup",
+  "technical_note",
+  "development_note",
+  "enhancement",
+  "milestone",
+  "system_integration_test",
+  "test_entry",
+  "plan_draft",
+  "adversarial_review",
+  "plan_refinement",
+  "plan_finalized",
+  "copilot_validation",
+  "maintenance",
+  "other"
+];
+var SOURCE_FORMATS = ["notion", "obsidian", "logseq"];
+var SIGNIFICANCE_TYPES = [
+  "milestone",
+  "breakthrough",
+  "decision",
+  "architecture",
+  "lesson_learned",
+  "blocker_resolved",
+  "release",
+  "security"
+];
+function coerceSignificanceAlias(params) {
+  if (params !== null && params !== void 0 && typeof params === "object") {
+    const obj = params;
+    if (typeof obj["significance_type"] === "string") {
+      const lower = obj["significance_type"].toLowerCase();
+      if (lower === "important") obj["significance_type"] = "milestone";
+      else if (lower === "major") obj["significance_type"] = "breakthrough";
+      else if (lower === "critical") obj["significance_type"] = "security";
+      else if (lower === "learning") obj["significance_type"] = "lesson_learned";
+      else if (lower === "key_decision") obj["significance_type"] = "decision";
+      else if (lower === "resolved") obj["significance_type"] = "blocker_resolved";
+      else if (lower === "maintenance" || lower === "minor") delete obj["significance_type"];
+    }
+  }
+}
+function safeString(val) {
+  if (typeof val === "string") return val;
+  if (typeof val === "number" || typeof val === "boolean" || typeof val === "bigint")
+    return String(val);
+  if (typeof val === "object" && val !== null) {
+    try {
+      return JSON.stringify(val);
+    } catch {
+      return "";
+    }
+  }
+  return "";
+}
+var MAX_CONTENT_LENGTH = 5e4;
+var MAX_QUERY_LIMIT = 500;
+var MAX_BATCH_SIZE = 50;
+var DATE_MIN_SENTINEL = "1970-01-01";
+var DATE_MAX_SENTINEL = "2999-12-31";
+var DATE_FORMAT_REGEX = /^\d{4}-\d{2}-\d{2}$/;
+var DATE_FORMAT_MESSAGE = "Date must be YYYY-MM-DD format";
+var relaxedNumber = () => z.union([z.number(), z.string()]);
+var StrictProjectNumberSchema = z.number({
+  message: "Missing project_number. You MUST provide a valid project_number (e.g., 1) to associate this action with a specific project context."
+}).optional();
+function preprocessRelationshipItem(item) {
+  if (item !== null && typeof item === "object") {
+    const relObj = item;
+    return {
+      targetId: relObj["targetId"] ?? relObj["target_id"] ?? relObj["to_entry_id"] ?? relObj["toEntryId"] ?? relObj["id"],
+      relationType: relObj["relationType"] ?? relObj["relation_type"] ?? relObj["relationship_type"] ?? relObj["relationshipType"] ?? relObj["type"] ?? "references"
+    };
+  }
+  return item;
+}
 
-export { resolveProjectContext, resolveProjectNumberFromPath, resolveWorkspaceId };
+export { DATE_FORMAT_MESSAGE, DATE_FORMAT_REGEX, DATE_MAX_SENTINEL, DATE_MIN_SENTINEL, ENTRY_TYPES, MAX_BATCH_SIZE, MAX_CONTENT_LENGTH, MAX_QUERY_LIMIT, SIGNIFICANCE_TYPES, SOURCE_FORMATS, StrictProjectNumberSchema, coerceSignificanceAlias, loadProjectRegistryFromConfig, preprocessRelationshipItem, relaxedNumber, resolveProjectContext, resolveProjectNumberFromPath, resolveWorkspaceId, safeString };