mindweave 2.4.4 → 2.4.6

package/dist/mcp/oauth/index.js

@@ -0,0 +1,243 @@
+/**
+ * index.ts — the one door the rest of Mindweave uses to authorize an MCP server.
+ *
+ * Everything under `oauth/` is a step; this is the sequence. Two entry points, and the
+ * split between them is the whole design:
+ *
+ *  - `authHeaders()` runs on EVERY request and must be silent, fast and never open a
+ *    browser. It hands back a token if one is stored, refreshes it first if it has
+ *    expired, and returns nothing at all if there is no credential — a request with no
+ *    Authorization header is how we learn a server wants one, so failing to produce a
+ *    token is a normal outcome rather than an error.
+ *  - `authenticate()` runs when a PERSON asked for it, and is the only thing allowed to
+ *    open a browser and hold a port. It never runs on its own: a connection that hits a
+ *    401 goes to `needs-auth` and STOPS. A background retry that pops a browser window
+ *    for a server the user forgot they configured is a worse outcome than a server that
+ *    plainly says it needs signing in.
+ *
+ * An expired refresh is treated as no credential rather than as a failure: refresh tokens
+ * are revoked from dashboards all the time, and the right response is to offer signing in
+ * again, not to report a broken connection.
+ */
+import { spawn } from "node:child_process";
+import { authorizeUrl, discover, exchangeCode, isTransientNetworkError, refreshTokens, registerClient, revokeToken, TokenRequestError } from "./flow.js";
+import { createPkce, randomState } from "./pkce.js";
+import { findAvailablePort, redirectUri, waitForCallback } from "./callback.js";
+import { clearAuth, isExpired, readAuth, serverKey, writeAuth } from "./tokenStore.js";
+import { clientSecretFor } from "../config.js";
+export { serverKey, clearAuth } from "./tokenStore.js";
+export { parseWwwAuthenticate } from "./metadata.js";
+/**
+ * The Authorization header for a server, or `{}` when there is nothing stored.
+ *
+ * Refreshes in place and persists the result, so a long session does not accumulate one
+ * expired token per hour. A refresh that fails is classified before anything is thrown
+ * away: only `invalid_grant` — the refresh token itself being dead — clears the
+ * credential. See the catch below for why both directions of that judgement are costly.
+ */
+export async function authHeaders(name, config, fetchImpl = fetch) {
+    const key = serverKey(name, config);
+    const stored = await readAuth(key);
+    if (!stored)
+        return {};
+    if (!isExpired(stored))
+        return { authorization: `Bearer ${stored.accessToken}` };
+    if (!stored.refreshToken) {
+        await clearAuth(key);
+        return {};
+    }
+    try {
+        const refreshed = await refreshTokens({
+            tokenEndpoint: stored.tokenEndpoint,
+            clientId: stored.clientId,
+            ...(stored.clientSecret ? { clientSecret: stored.clientSecret } : {}),
+            refreshToken: stored.refreshToken,
+            ...(stored.resource ? { resource: stored.resource } : {}),
+        }, fetchImpl);
+        const next = {
+            ...stored,
+            accessToken: refreshed.accessToken,
+            ...(refreshed.refreshToken ? { refreshToken: refreshed.refreshToken } : {}),
+            ...(refreshed.expiresAt ? { expiresAt: refreshed.expiresAt } : {}),
+            ...(refreshed.scope ? { scope: refreshed.scope } : {}),
+        };
+        await writeAuth(key, next);
+        return { authorization: `Bearer ${next.accessToken}` };
+    }
+    catch (error) {
+        // WHAT KIND of failure decides whether the credential survives, and getting this
+        // wrong in either direction is expensive: clear too eagerly and a dropped packet
+        // signs the user out, keep too stubbornly and a revoked token is re-sent forever
+        // while the sign-in that would fix it is never offered.
+        const kind = error instanceof TokenRequestError ? error.kind : isTransientNetworkError(error) ? "transient" : "other";
+        if (kind !== "invalid_grant") {
+            // Not the credential's fault. Send nothing this time — the request will 401 and the
+            // connection will say so — but keep what we have for the next attempt.
+            return {};
+        }
+        // `invalid_grant` usually means the refresh token is dead. It also means exactly this
+        // when ANOTHER Mindweave session refreshed a moment ago on a server that rotates
+        // refresh tokens: ours became invalid because theirs succeeded. Re-reading before
+        // clearing is what tells the two apart, and without it a second open session is a
+        // reliable way to sign yourself out of the first.
+        const current = await readAuth(key);
+        if (current && current.accessToken !== stored.accessToken && !isExpired(current)) {
+            return { authorization: `Bearer ${current.accessToken}` };
+        }
+        await clearAuth(key);
+        return {};
+    }
+}
+/** How long to let the browser get on with it before offering the raw URL. Long enough
+ *  that a working launch never shows it, short enough that someone staring at a terminal
+ *  which appears to have done nothing is not left guessing. */
+const URL_FALLBACK_DELAY_MS = 4_000;
+/**
+ * Sign in to one server, end to end, and persist what comes back.
+ *
+ * The port is bound BEFORE the authorize URL is built, because the redirect URI is part
+ * of what gets signed into the request and part of what the client registers with, so it
+ * has to be the real one rather than a guess corrected later.
+ */
+export async function authenticate(options) {
+    const { name, config, challenge = {}, onUrl, signal, fetchImpl = fetch, openUrl = openInBrowser } = options;
+    if (config.type !== "http")
+        throw new Error("only http servers can be signed in to; a local command server has no authorization server");
+    const key = serverKey(name, config);
+    const overrides = config.oauth;
+    const { authServer, resource } = await discover(config.url, challenge, fetchImpl, overrides?.authServerMetadataUrl);
+    // A hand-registered client has an EXACT redirect URI recorded against it, so a
+    // configured client id and a configured port travel together — the random port the
+    // automatic flow picks would not match what was registered.
+    const port = overrides?.callbackPort ?? (await findAvailablePort());
+    const redirect = redirectUri(port);
+    // Three ways to have a client id, in order of how deliberate they are: named in the
+    // config by someone who registered it by hand, carried over from a previous sign-in, or
+    // registered now. Registering afresh on every attempt leaves a trail of one-shot clients
+    // on the authorization server, and several of them start refusing once that list gets long.
+    const configuredSecret = clientSecretFor(name);
+    const previous = await readAuth(key);
+    const registration = overrides?.clientId
+        ? { clientId: overrides.clientId, ...(configuredSecret ? { clientSecret: configuredSecret } : {}) }
+        : previous?.clientId && previous.tokenEndpoint === authServer.tokenEndpoint
+            ? { clientId: previous.clientId, ...(previous.clientSecret ?? configuredSecret ? { clientSecret: previous.clientSecret ?? configuredSecret } : {}) }
+            : await registerClient(authServer, redirect, fetchImpl);
+    const pkce = createPkce();
+    const state = randomState();
+    const scope = scopeFor(challenge, resource, authServer);
+    const url = authorizeUrl({
+        meta: authServer,
+        clientId: registration.clientId,
+        redirect,
+        pkce,
+        state,
+        ...(scope ? { scope } : {}),
+        ...(resource?.resource ? { resource: resource.resource } : {}),
+    });
+    // Start listening BEFORE the browser is told where to go. A fast redirect arriving at a
+    // port nobody is on yet is a flow that fails for no reason the user can see.
+    const waiting = waitForCallback({ port, state, ...(signal ? { signal } : {}) });
+    openUrl(url);
+    // THE URL IS A FALLBACK, NOT THE INSTRUCTION. It is 400 characters of query string, and
+    // printing it up front means every successful sign-in — the overwhelming majority —
+    // dumps a wall of unreadable text into the transcript to say something the browser
+    // window already said better. So it waits: if the browser opened, the callback lands
+    // first and the URL is never shown. If nothing opened, a few seconds of silence is
+    // exactly when someone starts wondering what to do, and that is when it appears.
+    const hint = setTimeout(() => onUrl?.(url), URL_FALLBACK_DELAY_MS);
+    hint.unref?.();
+    let code;
+    try {
+        ({ code } = await waiting);
+    }
+    finally {
+        clearTimeout(hint);
+    }
+    const tokens = await exchangeCode({
+        meta: authServer,
+        clientId: registration.clientId,
+        ...(registration.clientSecret ? { clientSecret: registration.clientSecret } : {}),
+        redirect,
+        code,
+        verifier: pkce.verifier,
+        ...(resource?.resource ? { resource: resource.resource } : {}),
+    }, fetchImpl);
+    await writeAuth(key, {
+        accessToken: tokens.accessToken,
+        ...(tokens.refreshToken ? { refreshToken: tokens.refreshToken } : {}),
+        ...(tokens.expiresAt ? { expiresAt: tokens.expiresAt } : {}),
+        ...(tokens.scope ? { scope: tokens.scope } : {}),
+        clientId: registration.clientId,
+        ...(registration.clientSecret ? { clientSecret: registration.clientSecret } : {}),
+        tokenEndpoint: authServer.tokenEndpoint,
+        // Kept so signing out can tell the server the token is finished with, rather than
+        // only forgetting it locally and leaving it valid until it expires on its own.
+        ...(authServer.revocationEndpoint ? { revocationEndpoint: authServer.revocationEndpoint } : {}),
+        ...(resource?.resource ? { resource: resource.resource } : {}),
+    });
+}
+/**
+ * Forget a server's credential, and tell the server so where it will listen.
+ *
+ * The local record goes FIRST and unconditionally. Revocation is a courtesy that makes
+ * the token stop working rather than merely stop being used, but a server that is down,
+ * or that never implemented RFC 7009, must not be able to keep someone signed in.
+ */
+export async function signOut(name, config, fetchImpl = fetch) {
+    const key = serverKey(name, config);
+    const stored = await readAuth(key);
+    await clearAuth(key);
+    if (!stored?.revocationEndpoint)
+        return;
+    const base = {
+        revocationEndpoint: stored.revocationEndpoint,
+        clientId: stored.clientId,
+        ...(stored.clientSecret ? { clientSecret: stored.clientSecret } : {}),
+    };
+    // The refresh token first: it is the one that would otherwise keep minting new access
+    // tokens long after this.
+    if (stored.refreshToken)
+        await revokeToken({ ...base, token: stored.refreshToken, hint: "refresh_token", accessToken: stored.accessToken }, fetchImpl);
+    await revokeToken({ ...base, token: stored.accessToken, hint: "access_token" }, fetchImpl);
+}
+/** Whether we hold anything for this server, without producing it. Drives whether the
+ *  manage screen offers "Sign in" or "Sign out". */
+export async function hasCredential(name, config) {
+    return (await readAuth(serverKey(name, config))) !== undefined;
+}
+/** The 401's scope, then the resource's, then the authorization server's own advertised
+ *  list. The last one is a guess and is used only because some servers reject an
+ *  authorize request carrying no scope at all. */
+function scopeFor(challenge, resource, authServer) {
+    if (challenge.scope?.trim())
+        return challenge.scope.trim();
+    if (resource?.scopesSupported?.length)
+        return resource.scopesSupported.join(" ");
+    if (authServer.scopesSupported?.length)
+        return authServer.scopesSupported.join(" ");
+    return undefined;
+}
+/**
+ * Hand a URL to whatever the user's machine calls a browser.
+ *
+ * Detached and with its streams discarded, because this must not become a child whose
+ * exit we wait on or whose output lands in the middle of the UI. A failure here is
+ * swallowed on purpose: the URL was already reported through `onUrl`, so a machine with
+ * no default browser leaves the user able to copy it rather than staring at an error
+ * about a program they did not ask us to run.
+ */
+function openInBrowser(url) {
+    try {
+        const child = process.platform === "win32"
+            ? spawn("cmd", ["/c", "start", "", url], { detached: true, stdio: "ignore", windowsHide: true })
+            : process.platform === "darwin"
+                ? spawn("open", [url], { detached: true, stdio: "ignore" })
+                : spawn("xdg-open", [url], { detached: true, stdio: "ignore" });
+        child.on("error", () => { });
+        child.unref();
+    }
+    catch {
+        // Reported through onUrl already.
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/mcp/oauth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/mcp/oauth/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,uBAAuB,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,EAAkB,MAAM,WAAW,CAAC;AACzK,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChF,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAmB,MAAM,iBAAiB,CAAC;AAExG,OAAO,EAAE,eAAe,EAAwB,MAAM,cAAc,CAAC;AAErE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAsB,MAAM,eAAe,CAAC;AAEzE;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,MAAuB,EAAE,YAAuB,KAAK;IACnG,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;IAEjF,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;QACrB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,aAAa,CACnC;YACE,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,EACD,SAAS,CACV,CAAC;QACF,MAAM,IAAI,GAAe;YACvB,GAAG,MAAM;YACT,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD,CAAC;QACF,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3B,OAAO,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,iFAAiF;QACjF,iFAAiF;QACjF,iFAAiF;QACjF,wDAAwD;QACxD,MAAM,IAAI,GAAG,KAAK,YAAY,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC;QACtH,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;YAC7B,oFAAoF;YACpF,uEAAuE;YACvE,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,sFAAsF;QACtF,iFAAiF;QACjF,kFAAkF;QAClF,kFAAkF;QAClF,kDAAkD;QAClD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,OAAO,IAAI,OAAO,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YACjF,OAAO,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5D,CAAC;QACD,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;QACrB,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;+DAE+D;AAC/D,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAgBpC;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAA4B;IAC7D,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,GAAG,KAAK,EAAE,OAAO,GAAG,aAAa,EAAE,GAAG,OAAO,CAAC;IAC5G,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,2FAA2F,CAAC,CAAC;IAEzI,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;IAC/B,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;IAEpH,+EAA+E;IAC/E,mFAAmF;IACnF,4DAA4D;IAC5D,MAAM,IAAI,GAAG,SAAS,EAAE,YAAY,IAAI,CAAC,MAAM,iBAAiB,EAAE,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAEnC,oFAAoF;IACpF,wFAAwF;IACxF,yFAAyF;IACzF,4FAA4F;IAC5F,MAAM,gBAAgB,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,SAAS,EAAE,QAAQ;QACtC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QACnG,CAAC,CAAC,QAAQ,EAAE,QAAQ,IAAI,QAAQ,CAAC,aAAa,KAAK,UAAU,CAAC,aAAa;YACzE,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,YAAY,IAAI,gBAAgB,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YACpJ,CAAC,CAAC,MAAM,cAAc,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAE5D,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,YAAY,CAAC;QACvB,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,YAAY,CAAC,QAAQ;QAC/B,QAAQ;QACR,IAAI;QACJ,KAAK;QACL,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC,CAAC;IAEH,wFAAwF;IACxF,6EAA6E;IAC7E,MAAM,OAAO,GAAG,eAAe,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,CAAC;IAEb,wFAAwF;IACxF,oFAAoF;IACpF,mFAAmF;IACnF,qFAAqF;IACrF,mFAAmF;IACnF,iFAAiF;IACjF,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,qBAAqB,CAAC,CAAC;IACnE,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;IAEf,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,CAAC,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC;IAC7B,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,YAAY,CAC/B;QACE,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,YAAY,CAAC,QAAQ;QAC/B,GAAG,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,QAAQ;QACR,IAAI;QACJ,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,EACD,SAAS,CACV,CAAC;IAEF,MAAM,SAAS,CAAC,GAAG,EAAE;QACnB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,QAAQ,EAAE,YAAY,CAAC,QAAQ;QAC/B,GAAG,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,kFAAkF;QAClF,+EAA+E;QAC/E,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,UAAU,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,MAAuB,EAAE,YAAuB,KAAK;IAC/F,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;IACrB,IAAI,CAAC,MAAM,EAAE,kBAAkB;QAAE,OAAO;IAExC,MAAM,IAAI,GAAG;QACX,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtE,CAAC;IACF,sFAAsF;IACtF,0BAA0B;IAC1B,IAAI,MAAM,CAAC,YAAY;QAAE,MAAM,WAAW,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,CAAC,CAAC;IACvJ,MAAM,WAAW,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,SAAS,CAAC,CAAC;AAC7F,CAAC;AAED;oDACoD;AACpD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,MAAuB;IACvE,OAAO,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;AACjE,CAAC;AAED;;kDAEkD;AAClD,SAAS,QAAQ,CAAC,SAAwB,EAAE,QAAsB,EAAE,UAA0C;IAC5G,IAAI,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3D,IAAI,QAAQ,EAAE,eAAe,EAAE,MAAM;QAAE,OAAO,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjF,IAAI,UAAU,CAAC,eAAe,EAAE,MAAM;QAAE,OAAO,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpF,OAAO,SAAS,CAAC;AACnB,CAAC;AAID;;;;;;;;GAQG;AACH,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC;QACH,MAAM,KAAK,GACT,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC1B,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YAChG,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ;gBAC7B,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;gBAC3D,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC5B,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,kCAAkC;IACpC,CAAC;AACH,CAAC"}

package/dist/mcp/oauth/metadata.js

@@ -0,0 +1,192 @@
+/**
+ * metadata.ts — finding out WHO can issue a token for a server, from the server itself.
+ *
+ * A remote MCP server that wants authorization answers an unauthenticated call with 401
+ * and a `WWW-Authenticate` header, and that header is the whole entry point: it names the
+ * URL of the server's Protected Resource Metadata (RFC 9728), which in turn names the
+ * authorization servers that can issue tokens for it, and each of those publishes its own
+ * metadata (RFC 8414) saying where to send someone to approve access and where to redeem
+ * the code afterwards. Three documents, fetched in that order, and none of them is
+ * configured by hand: the point of the chain is that adding a server is a URL and nothing
+ * else.
+ *
+ * Everything here is PURE — parsing and URL construction only. The fetching lives in
+ * `flow.ts`, so the part with all the branching is the part a test can drive directly
+ * with a string, and the part doing network I/O stays small enough to read in one go.
+ *
+ * THE FALLBACKS ARE NOT OPTIONAL. RFC 9728 arrived long after the servers that are
+ * deployed today, and a large share of them either omit the header, omit the metadata
+ * document, or publish it at the pre-RFC location. Every lookup here therefore produces a
+ * LIST of candidate URLs in descending order of correctness, and the caller tries them in
+ * turn. The alternative is refusing to connect to most of the ecosystem on a technicality.
+ */
+/**
+ * Parse a `WWW-Authenticate` header (pure).
+ *
+ * The grammar is `Scheme param=value, param="value"` and the values that matter here are
+ * routinely quoted and routinely contain `=` and `,` of their own (a metadata URL has a
+ * query string), so this walks the string rather than splitting it. A header we cannot
+ * make sense of yields an empty challenge rather than throwing: it costs us the shortcut,
+ * not the connection, because every field is a shortcut past a fallback.
+ */
+export function parseWwwAuthenticate(header) {
+    if (!header)
+        return {};
+    const challenge = {};
+    // Skip the scheme token ("Bearer"), then read `key=value` pairs. A quoted value runs to
+    // its closing quote and may hold anything; a bare value runs to the next comma.
+    const params = /([A-Za-z_-]+)\s*=\s*(?:"((?:[^"\\]|\\.)*)"|([^,\s]*))/g;
+    for (const match of header.matchAll(params)) {
+        const key = match[1].toLowerCase();
+        const value = (match[2] ?? match[3] ?? "").replace(/\\(.)/g, "$1");
+        if (!value)
+            continue;
+        if (key === "resource_metadata")
+            challenge.resourceMetadata = value;
+        else if (key === "scope")
+            challenge.scope = value;
+        else if (key === "error")
+            challenge.error = value;
+    }
+    return challenge;
+}
+/**
+ * Where a server's Protected Resource Metadata might live, best first (pure).
+ *
+ * RFC 9728 inserts the well-known segment BEFORE the resource's own path
+ * (`/.well-known/oauth-protected-resource/mcp`), which is the opposite of the OpenID
+ * convention and the single most common thing to get wrong, so the path-aware form leads
+ * and the root form follows for servers that publish one document for the whole host.
+ */
+export function protectedResourceUrls(serverUrl) {
+    const url = safeUrl(serverUrl);
+    if (!url)
+        return [];
+    const path = trimSlashes(url.pathname);
+    const out = [];
+    if (path)
+        out.push(`${url.origin}/.well-known/oauth-protected-resource/${path}`);
+    out.push(`${url.origin}/.well-known/oauth-protected-resource`);
+    return out;
+}
+/**
+ * Where an authorization server's metadata might live, best first (pure).
+ *
+ * Four shapes, because two specifications disagree about where the segment goes and both
+ * are deployed: RFC 8414 puts `.well-known` before the issuer's path, OpenID Connect
+ * Discovery appends it. An issuer with no path collapses to two.
+ */
+export function authServerUrls(issuer) {
+    const url = safeUrl(issuer);
+    if (!url)
+        return [];
+    const path = trimSlashes(url.pathname);
+    const out = [];
+    if (path) {
+        out.push(`${url.origin}/.well-known/oauth-authorization-server/${path}`);
+        out.push(`${url.origin}/${path}/.well-known/oauth-authorization-server`);
+        out.push(`${url.origin}/.well-known/openid-configuration/${path}`);
+        out.push(`${url.origin}/${path}/.well-known/openid-configuration`);
+        return out;
+    }
+    out.push(`${url.origin}/.well-known/oauth-authorization-server`);
+    out.push(`${url.origin}/.well-known/openid-configuration`);
+    return out;
+}
+/** Read RFC 9728 metadata, or null if it is not that (pure). */
+export function readResourceMetadata(json) {
+    const o = asObject(json);
+    if (!o)
+        return null;
+    const servers = stringArray(o.authorization_servers);
+    if (servers.length === 0)
+        return null;
+    const out = { authorizationServers: servers };
+    const resource = asString(o.resource);
+    if (resource)
+        out.resource = resource;
+    const scopes = stringArray(o.scopes_supported);
+    if (scopes.length > 0)
+        out.scopesSupported = scopes;
+    return out;
+}
+/** Read RFC 8414 / OIDC discovery metadata, or null if the required endpoints are absent
+ *  (pure). Both endpoints are load bearing, so a document missing either is not usable
+ *  even though it parsed. */
+export function readAuthServerMetadata(json) {
+    const o = asObject(json);
+    if (!o)
+        return null;
+    const authorizationEndpoint = asString(o.authorization_endpoint);
+    const tokenEndpoint = asString(o.token_endpoint);
+    if (!authorizationEndpoint || !tokenEndpoint)
+        return null;
+    const out = {
+        issuer: asString(o.issuer) ?? "",
+        authorizationEndpoint,
+        tokenEndpoint,
+    };
+    const registration = asString(o.registration_endpoint);
+    if (registration)
+        out.registrationEndpoint = registration;
+    const revocation = asString(o.revocation_endpoint);
+    if (revocation)
+        out.revocationEndpoint = revocation;
+    const scopes = stringArray(o.scopes_supported);
+    if (scopes.length > 0)
+        out.scopesSupported = scopes;
+    const methods = stringArray(o.code_challenge_methods_supported);
+    if (methods.length > 0)
+        out.codeChallengeMethodsSupported = methods;
+    return out;
+}
+/**
+ * Does this authorization server support the only PKCE method we will use (pure)?
+ *
+ * A server that ADVERTISES its methods and does not list S256 is refused rather than
+ * downgraded. `plain` sends the verifier itself as the challenge, which protects against
+ * nothing, and quietly falling back to it would turn a loud incompatibility into a silent
+ * loss of the protection PKCE exists for. A server that advertises nothing is assumed to
+ * support S256, which is what the OAuth 2.1 draft requires of it anyway.
+ */
+export function supportsS256(meta) {
+    return meta.codeChallengeMethodsSupported === undefined || meta.codeChallengeMethodsSupported.includes("S256");
+}
+/**
+ * The scope string to ask for, or undefined to let the server decide (pure).
+ *
+ * The 401's own `scope` wins: it is the server saying what the call that just failed
+ * needed, which is more precise than anything advertised. Otherwise everything the
+ * resource says it supports, and failing that nothing at all — an empty `scope` parameter
+ * is meaningfully different from an absent one at several providers, so it is omitted
+ * rather than sent blank.
+ */
+export function scopeToRequest(challenge, resource) {
+    if (challenge.scope?.trim())
+        return challenge.scope.trim();
+    if (resource?.scopesSupported && resource.scopesSupported.length > 0)
+        return resource.scopesSupported.join(" ");
+    return undefined;
+}
+function safeUrl(raw) {
+    try {
+        const url = new URL(raw);
+        return url.protocol === "https:" || url.protocol === "http:" ? url : null;
+    }
+    catch {
+        return null;
+    }
+}
+function trimSlashes(path) {
+    return path.replace(/^\/+|\/+$/g, "");
+}
+function asObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
+}
+function asString(value) {
+    return typeof value === "string" && value.trim() ? value.trim() : undefined;
+}
+function stringArray(value) {
+    return Array.isArray(value) ? value.filter((v) => typeof v === "string" && v.trim().length > 0) : [];
+}
+//# sourceMappingURL=metadata.js.map

package/dist/mcp/oauth/metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata.js","sourceRoot":"","sources":["../../../src/mcp/oauth/metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAgBH;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAiC;IACpE,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,SAAS,GAAkB,EAAE,CAAC;IACpC,wFAAwF;IACxF,gFAAgF;IAChF,MAAM,MAAM,GAAG,wDAAwD,CAAC;IACxE,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACnE,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,IAAI,GAAG,KAAK,mBAAmB;YAAE,SAAS,CAAC,gBAAgB,GAAG,KAAK,CAAC;aAC/D,IAAI,GAAG,KAAK,OAAO;YAAE,SAAS,CAAC,KAAK,GAAG,KAAK,CAAC;aAC7C,IAAI,GAAG,KAAK,OAAO;YAAE,SAAS,CAAC,KAAK,GAAG,KAAK,CAAC;IACpD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/B,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,yCAAyC,IAAI,EAAE,CAAC,CAAC;IACjF,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,uCAAuC,CAAC,CAAC;IAC/D,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,IAAI,EAAE,CAAC;QACT,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,2CAA2C,IAAI,EAAE,CAAC,CAAC;QACzE,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,IAAI,yCAAyC,CAAC,CAAC;QACzE,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,qCAAqC,IAAI,EAAE,CAAC,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,IAAI,mCAAmC,CAAC,CAAC;QACnE,OAAO,GAAG,CAAC;IACb,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,yCAAyC,CAAC,CAAC;IACjE,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,mCAAmC,CAAC,CAAC;IAC3D,OAAO,GAAG,CAAC;AACb,CAAC;AAaD,gEAAgE;AAChE,MAAM,UAAU,oBAAoB,CAAC,IAAa;IAChD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzB,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;IACrD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,GAAG,GAAqB,EAAE,oBAAoB,EAAE,OAAO,EAAE,CAAC;IAChE,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,QAAQ;QAAE,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACtC,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,CAAC,eAAe,GAAG,MAAM,CAAC;IACpD,OAAO,GAAG,CAAC;AACb,CAAC;AAgBD;;6BAE6B;AAC7B,MAAM,UAAU,sBAAsB,CAAC,IAAa;IAClD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzB,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,qBAAqB,GAAG,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;IACjE,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;IACjD,IAAI,CAAC,qBAAqB,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,GAAG,GAAuB;QAC9B,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;QAChC,qBAAqB;QACrB,aAAa;KACd,CAAC;IACF,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;IACvD,IAAI,YAAY;QAAE,GAAG,CAAC,oBAAoB,GAAG,YAAY,CAAC;IAC1D,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;IACnD,IAAI,UAAU;QAAE,GAAG,CAAC,kBAAkB,GAAG,UAAU,CAAC;IACpD,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,CAAC,eAAe,GAAG,MAAM,CAAC;IACpD,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC;IAChE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,CAAC,6BAA6B,GAAG,OAAO,CAAC;IACpE,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,IAAwB;IACnD,OAAO,IAAI,CAAC,6BAA6B,KAAK,SAAS,IAAI,IAAI,CAAC,6BAA6B,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACjH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,SAAwB,EAAE,QAAiC;IACxF,IAAI,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3D,IAAI,QAAQ,EAAE,eAAe,IAAI,QAAQ,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChH,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1H,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACpH,CAAC"}

package/dist/mcp/oauth/pkce.js

@@ -0,0 +1,56 @@
+/**
+ * pkce.ts — the proof that the code being redeemed is being redeemed by whoever asked.
+ *
+ * A CLI cannot keep a client secret: anything shipped in the binary or written to a
+ * config file is readable by anything else on the machine, so OAuth for native apps
+ * treats us as a PUBLIC client and closes the resulting hole with PKCE instead. We invent
+ * a random `verifier`, send only its SHA-256 (the `challenge`) when we send the user off
+ * to approve, and send the verifier itself when we redeem the code. Anything that
+ * intercepts the redirect gets a code it cannot spend, because it never saw the verifier.
+ *
+ * `state` is the other half and guards the other direction: it proves a callback arriving
+ * on our loopback port belongs to the flow WE started, rather than to something else on
+ * the machine firing a request at the port we just opened.
+ *
+ * All of it is one small pure-ish module on node:crypto so the encodings — which are the
+ * part that silently breaks, since base64url is not base64 and a single `+` will fail an
+ * exchange with a message that names none of this — live in exactly one place.
+ */
+import { createHash, randomBytes } from "node:crypto";
+/** RFC 7636 puts the verifier between 43 and 128 characters; 32 random bytes encode to
+ *  43, which is the shortest legal value and therefore the one with nothing to spare in
+ *  it. Entropy is the point, not length, and 256 bits is not the weak link. */
+const VERIFIER_BYTES = 32;
+/** base64url: base64 with the two URL-hostile characters swapped and the padding dropped.
+ *  Everything here goes into a query string or a form body, so the plain alphabet would
+ *  need escaping at every call site and would be forgotten at one of them. */
+function base64Url(buffer) {
+    return buffer.toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+/** A fresh verifier and its challenge. One per authorization attempt, never reused: a
+ *  verifier that outlives its code is a secret with no expiry. */
+export function createPkce() {
+    const verifier = base64Url(randomBytes(VERIFIER_BYTES));
+    const challenge = base64Url(createHash("sha256").update(verifier).digest());
+    return { verifier, challenge, method: "S256" };
+}
+/** An opaque value tying a callback to the request that caused it. */
+export function randomState() {
+    return base64Url(randomBytes(VERIFIER_BYTES));
+}
+/**
+ * Compare two `state` values without leaking where they first differ (pure).
+ *
+ * `===` on strings short-circuits at the first mismatched character, and the callback URL
+ * is attacker-supplied, so the comparison time is a signal about our secret. The amount
+ * of signal is small and the fix is three lines, which is the wrong trade to skip.
+ */
+export function stateMatches(expected, received) {
+    if (typeof received !== "string" || received.length !== expected.length)
+        return false;
+    let diff = 0;
+    for (let i = 0; i < expected.length; i++)
+        diff |= expected.charCodeAt(i) ^ received.charCodeAt(i);
+    return diff === 0;
+}
+//# sourceMappingURL=pkce.js.map

package/dist/mcp/oauth/pkce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.js","sourceRoot":"","sources":["../../../src/mcp/oauth/pkce.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEtD;;+EAE+E;AAC/E,MAAM,cAAc,GAAG,EAAE,CAAC;AAW1B;;8EAE8E;AAC9E,SAAS,SAAS,CAAC,MAAc;IAC/B,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC9F,CAAC;AAED;kEACkE;AAClE,MAAM,UAAU,UAAU;IACxB,MAAM,QAAQ,GAAG,SAAS,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5E,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACjD,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,WAAW;IACzB,OAAO,SAAS,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,QAAmC;IAChF,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACtF,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClG,OAAO,IAAI,KAAK,CAAC,CAAC;AACpB,CAAC"}

package/dist/mcp/oauth/tokenStore.js

@@ -0,0 +1,103 @@
+/**
+ * tokenStore.ts — where a server's tokens live between runs.
+ *
+ * NOT the `.env` file the API keys use, and that is deliberate. A provider key is typed
+ * once by a person and belongs in a file a person can open; an OAuth token is issued by a
+ * machine, expires in an hour, is replaced silently by a refresh, and is meaningless to
+ * read. Putting the two in one file would mean a rewrite of the user's own config every
+ * time a token rotated, with their comments and ordering at risk each time.
+ *
+ * So: one JSON file of our own under the state directory, written whole, `0600`.
+ *
+ * KEYED BY NAME **AND** CONFIG, via `serverKey`. Keying by name alone would hand the
+ * token issued for one URL to whatever is configured under that name later — rename a
+ * server, point it at a different host, and the old credential follows it. Names are
+ * chosen by the user and reused freely; the URL is what the token was actually minted
+ * for, so both go into the key and changing either is a different server.
+ */
+import { promises as fs } from "node:fs";
+import { createHash } from "node:crypto";
+import { dirname, join } from "node:path";
+import { stateRoot } from "../../memory/store.js";
+/** Read on every call rather than cached at import, matching `stateRoot` itself, so a
+ *  test can point this somewhere disposable before anything touches it. */
+export function authFilePath() {
+    return join(stateRoot(), "mcp-auth.json");
+}
+/**
+ * The identity a credential is filed under (pure).
+ *
+ * A short hash of the URL rather than the URL itself: this string ends up as a JSON key
+ * in a file people will open when something is wrong, and a full URL with its query
+ * string makes that file unreadable. The name is kept in front of it so the entry is
+ * still recognisable at a glance.
+ */
+export function serverKey(name, config) {
+    // The HEADERS are part of the identity too, not just the URL. A configured header is
+    // frequently the thing that selects an account or a tenant at the other end, so a token
+    // minted while one was set has no business being sent after it changed — that is a
+    // credential for a context that no longer exists.
+    const identity = config.type === "http"
+        ? JSON.stringify({ type: "http", url: config.url, headers: config.headers ?? {} })
+        : JSON.stringify({ type: "stdio", command: config.command, args: config.args });
+    const digest = createHash("sha256").update(identity).digest("hex").slice(0, 16);
+    return `${name}:${digest}`;
+}
+async function readFile() {
+    try {
+        const raw = await fs.readFile(authFilePath(), "utf8");
+        const parsed = JSON.parse(raw);
+        const servers = typeof parsed === "object" && parsed !== null ? parsed.servers : undefined;
+        return { servers: typeof servers === "object" && servers !== null ? servers : {} };
+    }
+    catch {
+        // Missing is the normal case on a first run, and unreadable is not worth failing a
+        // connection over: both mean "no credential", and the flow that follows will mint one.
+        return { servers: {} };
+    }
+}
+/**
+ * Replace the whole file, owner-readable only.
+ *
+ * Written to a temporary name and renamed, because a token file truncated by a crash
+ * mid-write is not a token file with one bad entry — it is a file that fails to parse and
+ * silently signs the user out of every server at once. The mode is set on the temporary
+ * file BEFORE the rename, so there is no window in which the real path exists readable.
+ */
+async function writeFile(file) {
+    const target = authFilePath();
+    await fs.mkdir(dirname(target), { recursive: true });
+    const temp = `${target}.${process.pid}.tmp`;
+    await fs.writeFile(temp, `${JSON.stringify(file, null, 2)}\n`, { encoding: "utf8", mode: 0o600 });
+    await fs.rename(temp, target);
+}
+export async function readAuth(key) {
+    return (await readFile()).servers[key];
+}
+export async function writeAuth(key, auth) {
+    // Re-read immediately before writing rather than holding the file in memory: two
+    // servers can finish a refresh at the same moment, and the loser of a last-write-wins
+    // race would otherwise drop the winner's brand new token.
+    const file = await readFile();
+    file.servers[key] = auth;
+    await writeFile(file);
+}
+export async function clearAuth(key) {
+    const file = await readFile();
+    if (!(key in file.servers))
+        return;
+    delete file.servers[key];
+    await writeFile(file);
+}
+/**
+ * Is this token worth sending (pure)?
+ *
+ * A minute of headroom, because the token has to survive the round trip it is about to be
+ * spent on, and a clock that is thirty seconds fast would otherwise send something the
+ * server has already retired and turn a refresh into a 401.
+ */
+const EXPIRY_SKEW_MS = 60_000;
+export function isExpired(auth, now = Date.now()) {
+    return auth.expiresAt !== undefined && auth.expiresAt - EXPIRY_SKEW_MS <= now;
+}
+//# sourceMappingURL=tokenStore.js.map

package/dist/mcp/oauth/tokenStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenStore.js","sourceRoot":"","sources":["../../../src/mcp/oauth/tokenStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAgClD;2EAC2E;AAC3E,MAAM,UAAU,YAAY;IAC1B,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,eAAe,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,MAAuB;IAC7D,qFAAqF;IACrF,wFAAwF;IACxF,mFAAmF;IACnF,kDAAkD;IAClD,MAAM,QAAQ,GACZ,MAAM,CAAC,IAAI,KAAK,MAAM;QACpB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QAClF,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChF,OAAO,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,QAAQ;IACrB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,MAAM,CAAC,CAAC;QACtD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAE,MAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QACzG,OAAO,EAAE,OAAO,EAAE,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACP,mFAAmF;QACnF,uFAAuF;QACvF,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACzB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,SAAS,CAAC,IAAc;IACrC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IAC5C,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClG,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAW;IACxC,OAAO,CAAC,MAAM,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,IAAgB;IAC3D,iFAAiF;IACjF,sFAAsF;IACtF,0DAA0D;IAC1D,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACzB,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAW;IACzC,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;IAC9B,IAAI,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO;IACnC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,cAAc,GAAG,MAAM,CAAC;AAE9B,MAAM,UAAU,SAAS,CAAC,IAAgB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAC1D,OAAO,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,GAAG,cAAc,IAAI,GAAG,CAAC;AAChF,CAAC"}