poe-code 4.0.21 → 4.0.23

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "poe-code",
-  "version": "4.0.21",
+  "version": "4.0.23",
   "description": "CLI tool to configure Poe API for developer workflows.",
   "license": "MIT",
   "type": "module",

package/packages/tiny-http-mcp-server/dist/express-middleware.js

@@ -40,7 +40,7 @@ export function createProtectedResourceMetadataRouter(options) {
         if (path === "/") {
             return [PROTECTED_RESOURCE_METADATA_PATH];
         }
-        return [`${PROTECTED_RESOURCE_METADATA_PATH}${path}`];
+        return [PROTECTED_RESOURCE_METADATA_PATH, `${PROTECTED_RESOURCE_METADATA_PATH}${path}`];
     })();
     return (req, res, next) => {
         if (req.method !== "GET" || !metadataPaths.includes(req.path)) {

package/packages/tiny-http-mcp-server/dist/http-server.d.ts

@@ -14,7 +14,9 @@ export interface TinyHttpMcpServerOAuthOptions extends ProtectedResourceMetadata
 }
 export type HttpTransportOptions = ServerOptions & StreamableHttpTransportOptions & {
     oauth?: TinyHttpMcpServerOAuthOptions;
+    requestHandler?: HttpAdditionalRequestHandler;
 };
+export type HttpAdditionalRequestHandler = (request: IncomingMessage, response: ServerResponse) => boolean | Promise<boolean>;
 export interface HttpListenOptions {
     port?: number;
     hostname?: string;

package/packages/tiny-http-mcp-server/dist/http-server.js

@@ -19,7 +19,7 @@ function getProtectedResourceMetadataPaths(path) {
     if (path === "/") {
         return [PROTECTED_RESOURCE_METADATA_PATH];
     }
-    return [`${PROTECTED_RESOURCE_METADATA_PATH}${path}`];
+    return [PROTECTED_RESOURCE_METADATA_PATH, `${PROTECTED_RESOURCE_METADATA_PATH}${path}`];
 }
 function formatHostnameForUrl(hostname) {
     if (hostname.includes(":") && !hostname.startsWith("[")) {
@@ -157,6 +157,9 @@ export function createHttpServer(options) {
         const nodeServer = http.createServer(async (req, res) => {
             const requestUrl = new URL(req.url ?? "/", "http://127.0.0.1");
             try {
+                if (options.requestHandler !== undefined && (await options.requestHandler(req, res))) {
+                    return;
+                }
                 if (protectedResourceMetadataBody !== undefined &&
                     req.method === "GET" &&
                     getProtectedResourceMetadataPaths(path).includes(requestUrl.pathname)) {
@@ -249,6 +252,9 @@ export function createHttpServer(options) {
         };
     };
     httpServer.handleRequest = async (req, res) => {
+        if (options.requestHandler !== undefined && (await options.requestHandler(req, res))) {
+            return;
+        }
         const { baseUrl } = req;
         const protectedResourcePath = typeof baseUrl === "string" && baseUrl.length > 0 ? baseUrl : "/mcp";
         if (!(await authorizeHttpRequest(req, res, protectedResourcePath))) {

package/packages/tiny-http-mcp-server/dist/index.d.ts

@@ -3,7 +3,7 @@ export type { Server, TypedSchema, ImageContent, AudioContent, EmbeddedResource,
 export { createExpressMiddleware, createExpressOAuthHandlers, createProtectedResourceMetadataRouter } from "./express-middleware.js";
 export type { CreateExpressOAuthHandlersOptions } from "./express-middleware.js";
 export { createHttpServer, createProtectedResourceMetadataDocument } from "./http-server.js";
-export type { HttpToolContext, HttpToolHandler, HttpListenOptions, HttpServer, HttpServerHandle, HttpTransportOptions, ProtectedResourceMetadataOptions, TinyHttpMcpServerOAuthOptions } from "./http-server.js";
+export type { HttpToolContext, HttpToolHandler, HttpAdditionalRequestHandler, HttpListenOptions, HttpServer, HttpServerHandle, HttpTransportOptions, ProtectedResourceMetadataOptions, TinyHttpMcpServerOAuthOptions } from "./http-server.js";
 export { TokenVerificationError } from "./auth.js";
 export type { RequestAuthInfo, TokenVerifier, VerifiedAccessToken } from "./auth.js";
 export { StreamableHttpTransport } from "./http-transport.js";

package/packages/tiny-http-mcp-server/dist/server.d.ts

@@ -1,5 +1,5 @@
 export { createHttpServer, createProtectedResourceMetadataDocument } from "./http-server.js";
-export type { HttpToolContext, HttpToolHandler, HttpListenOptions, HttpServer, HttpServerHandle, HttpTransportOptions, ProtectedResourceMetadataOptions, TinyHttpMcpServerOAuthOptions } from "./http-server.js";
+export type { HttpToolContext, HttpToolHandler, HttpAdditionalRequestHandler, HttpListenOptions, HttpServer, HttpServerHandle, HttpTransportOptions, ProtectedResourceMetadataOptions, TinyHttpMcpServerOAuthOptions } from "./http-server.js";
 export { TokenVerificationError } from "./auth.js";
 export type { RequestAuthInfo, TokenVerifier, VerifiedAccessToken } from "./auth.js";
 export { StreamableHttpTransport } from "./http-transport.js";

package/packages/toolcraft/dist/http-hosted-oauth.compile-check.d.ts

@@ -0,0 +1 @@
+export {};

package/packages/toolcraft/dist/http-hosted-oauth.compile-check.js

@@ -0,0 +1,54 @@
+import { hostedOAuth } from "./http-hosted-oauth.js";
+const ignoredHostedOAuth = hostedOAuth({
+    publicUrl: "https://calendar.example/mcp",
+    storage: ignoredStorage,
+    provider: {
+        name: "Skylight",
+        login: { fields: ["email", "password"] },
+        async connect({ email, password, signal }) {
+            const ignoredEmail = email;
+            const ignoredPassword = password;
+            const ignoredSignal = signal;
+            return {
+                accountId: ignoredEmail,
+                credential: `${ignoredPassword}:${ignoredSignal.aborted}`
+            };
+        },
+        services({ credentials, identity }) {
+            const ignoredSubject = identity.subject;
+            const ignoredClientId = identity.clientId;
+            const ignoredScopes = identity.scopes;
+            const ignoredResource = identity.resource;
+            const ignoredIssuer = identity.issuer;
+            void ignoredSubject;
+            void ignoredClientId;
+            void ignoredScopes;
+            void ignoredResource;
+            void ignoredIssuer;
+            return { skylight: { credential: () => credentials.read() } };
+        }
+    }
+});
+void ignoredHostedOAuth;
+const ignoredRedirectHostedOAuth = hostedOAuth({
+    publicUrl: "https://calendar.example/mcp",
+    storage: ignoredStorage,
+    provider: {
+        name: "Skylight",
+        services: ({ credentials }) => ({
+            skylight: { credential: () => credentials.read() }
+        })
+    },
+    advanced: {
+        interaction: {
+            paths: ["/oauth/skylight/callback"],
+            start: () => Response.redirect("https://login.example/authorize"),
+            handle: async ({ complete }) => complete({
+                transactionId: "transaction-id",
+                accountId: "account-id",
+                credential: "provider-session"
+            })
+        }
+    }
+});
+void ignoredRedirectHostedOAuth;

package/packages/toolcraft/dist/http-hosted-oauth.d.ts

@@ -0,0 +1,121 @@
+import { type JWK } from "jose";
+import { type AuthorizationServerStore, type AuthorizationTransactionRecord, type OAuthAuthorizationServerSigningKey } from "../../mcp-oauth-server/dist/index.js";
+import type { HttpAdditionalRequestHandler, TinyHttpMcpServerOAuthOptions } from "../../tiny-http-mcp-server/dist/server.js";
+export type HostedOAuthLoginFieldName = "email" | "password" | "apiKey" | (string & {});
+export interface HostedOAuthLoginField {
+    name: HostedOAuthLoginFieldName;
+    label?: string;
+    type?: "text" | "email" | "password";
+}
+export interface HostedOAuthCredentialStore<TCredential = unknown> {
+    get(subject: string): Promise<TCredential | undefined>;
+    set(subject: string, credential: TCredential): Promise<void>;
+    delete(subject: string): Promise<void>;
+    update(subject: string, update: (credential: TCredential) => Promise<TCredential> | TCredential): Promise<TCredential>;
+}
+export interface HostedOAuthStorageCapabilities {
+    durable: boolean;
+    encryptedCredentials: boolean;
+    stableKeys: boolean;
+    shared: boolean;
+}
+export interface HostedOAuthInteractionStore {
+    set(transaction: AuthorizationTransactionRecord): Promise<void>;
+    get(transactionId: string): Promise<AuthorizationTransactionRecord | undefined>;
+    delete(transactionId: string): Promise<void>;
+}
+export interface HostedOAuthStorage<TCredential = unknown> {
+    authorizationServer: AuthorizationServerStore;
+    interactions: HostedOAuthInteractionStore;
+    credentials: HostedOAuthCredentialStore<TCredential>;
+    capabilities: HostedOAuthStorageCapabilities;
+    signingKey(): Promise<OAuthAuthorizationServerSigningKey>;
+    resolveSubject(providerName: string, accountId: string): Promise<string>;
+    cleanup?(now?: number): Promise<void>;
+}
+export interface HostedOAuthCredentialAccess<TCredential = unknown> {
+    read(): Promise<TCredential>;
+    update(update: (credential: TCredential) => Promise<TCredential> | TCredential): Promise<TCredential>;
+    delete(): Promise<void>;
+}
+export interface HostedOAuthIdentity {
+    issuer: string;
+    subject: string;
+    clientId: string;
+    scopes: readonly string[];
+    resource: string;
+}
+export interface HostedOAuthProvider<TCredential = unknown, TServices extends object = object> {
+    name: string;
+    login?: {
+        fields: readonly (HostedOAuthLoginFieldName | HostedOAuthLoginField)[];
+    };
+    connect?(fields: Readonly<Record<string, string>> & {
+        signal: AbortSignal;
+    }): Promise<{
+        accountId: string;
+        credential: TCredential;
+    }>;
+    services(input: {
+        credentials: HostedOAuthCredentialAccess<TCredential>;
+        identity: HostedOAuthIdentity;
+    }): Promise<Partial<TServices>> | Partial<TServices>;
+}
+export interface HostedOAuthInteractionAdapter<TCredential = unknown> {
+    paths: readonly string[];
+    start(context: {
+        request: Request;
+        transaction: AuthorizationTransactionRecord;
+    }): Promise<Response> | Response;
+    handle(context: {
+        request: Request;
+        complete(input: {
+            transactionId: string;
+            accountId: string;
+            credential: TCredential;
+        }): Promise<Response>;
+    }): Promise<Response> | Response;
+}
+export interface HostedOAuthAdvancedOptions<TCredential = unknown> {
+    scopes?: readonly string[];
+    branding?: {
+        title?: string;
+    };
+    accessTokenTtlSeconds?: number;
+    authorizationCodeTtlSeconds?: number;
+    authorizationTransactionTtlSeconds?: number;
+    refreshTokenTtlSeconds?: number;
+    additionalPublicJwks?: readonly JWK[];
+    interaction?: HostedOAuthInteractionAdapter<TCredential>;
+}
+export interface HostedOAuthOptions<TCredential = unknown, TServices extends object = object> {
+    publicUrl: string;
+    storage: HostedOAuthStorage<TCredential>;
+    provider: HostedOAuthProvider<TCredential, TServices>;
+    advanced?: HostedOAuthAdvancedOptions<TCredential>;
+}
+export interface PreparedHostedOAuth {
+    publicUrl: URL;
+    issuer: URL;
+    scopes: readonly string[];
+}
+export interface HostedOAuthConfiguration<TCredential = unknown, TServices extends object = object> extends HostedOAuthOptions<TCredential, TServices> {
+    readonly kind: "hosted";
+    prepare(options?: {
+        production?: boolean;
+    }): Promise<PreparedHostedOAuth>;
+}
+export declare function isHostedOAuthConfiguration(value: unknown): value is HostedOAuthConfiguration<unknown, object>;
+export declare function hostedOAuth<TCredential = unknown, TServices extends object = object>(options: HostedOAuthOptions<TCredential, TServices>): HostedOAuthConfiguration<TCredential, TServices>;
+export declare class HostedOAuthLoginError extends Error {
+    constructor(message: string);
+}
+export interface HostedOAuthRuntime<TServices extends object = object> {
+    mcpPath: string;
+    oauth: TinyHttpMcpServerOAuthOptions;
+    requestHandler: HttpAdditionalRequestHandler;
+    requestServices(identity: HostedOAuthIdentity): Promise<Partial<TServices>>;
+}
+export declare function createInMemoryHostedOAuthStorage<TCredential = unknown>(options: {
+    development: true;
+}): HostedOAuthStorage<TCredential>;