praxis-agent 0.1.0

package/dist/mcp/claude-mcp-management.js

@@ -0,0 +1,169 @@
+import { readFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { writeFileAtomically } from '../platform/atomic-write.js';
+import { loadClaudeSharedResources, resolveClaudeProjectIdentity, } from '../compatibility/claude/shared-resources.js';
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+async function readJson(path) {
+    let source;
+    try {
+        source = await readFile(path, 'utf8');
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return {};
+        throw error;
+    }
+    let value;
+    try {
+        value = JSON.parse(source);
+    }
+    catch (error) {
+        throw new Error(`Invalid MCP config JSON: ${path}`, { cause: error });
+    }
+    if (!isRecord(value))
+        throw new Error(`MCP config must be an object: ${path}`);
+    return value;
+}
+function serverMap(value, path) {
+    const servers = value.mcpServers;
+    if (servers === undefined)
+        return {};
+    if (!isRecord(servers))
+        throw new Error(`MCP config mcpServers must be an object: ${path}`);
+    const result = {};
+    for (const [name, config] of Object.entries(servers)) {
+        if (!isRecord(config))
+            throw new Error(`MCP server ${name} must be an object: ${path}`);
+        result[name] = config;
+    }
+    return result;
+}
+function setServerMap(value, servers) {
+    value.mcpServers = servers;
+}
+function scopedValue(root, target) {
+    if (!target.projectIdentity)
+        return root;
+    const projects = isRecord(root.projects) ? root.projects : {};
+    const project = projects[target.projectIdentity];
+    return isRecord(project) ? project : {};
+}
+function setScopedValue(root, target, value) {
+    if (!target.projectIdentity)
+        return;
+    const projects = isRecord(root.projects) ? root.projects : {};
+    projects[target.projectIdentity] = value;
+    root.projects = projects;
+}
+async function writeJson(path, value) {
+    const committed = await writeFileAtomically(path, `${JSON.stringify(value, null, 2)}\n`);
+    if (!committed)
+        throw new Error(`MCP config write was interrupted: ${path}`);
+}
+export class ClaudeMcpManagement {
+    configRoot;
+    cwd;
+    constructor(options) {
+        this.configRoot = resolve(options.configRoot ??
+            process.env.CLAUDE_CONFIG_DIR ??
+            join(homedir(), '.claude'));
+        this.cwd = resolve(options.cwd);
+    }
+    async list(scope) {
+        const resources = await loadClaudeSharedResources({
+            configRoot: this.configRoot,
+            cwd: this.cwd,
+            settingSources: ['user', 'project', 'local'],
+        });
+        const records = new Map();
+        for (const resource of resources.mcp) {
+            for (const [name, config] of Object.entries(serverMap(resource.value, resource.path))) {
+                records.set(name, {
+                    name,
+                    scope: resource.scope,
+                    path: resource.path,
+                    config,
+                });
+            }
+        }
+        return [...records.values()]
+            .filter((record) => scope === undefined || record.scope === scope)
+            .sort((left, right) => left.name.localeCompare(right.name));
+    }
+    async get(name, scope) {
+        const record = (await this.list(scope)).find((item) => item.name === name);
+        if (!record)
+            throw new Error(`MCP server not found: ${name}`);
+        return record;
+    }
+    async add(name, config, scope = 'local') {
+        this.validateName(name);
+        if (!isRecord(config))
+            throw new Error('MCP server config must be an object');
+        const target = await this.target(scope);
+        const root = await readJson(target.path);
+        const scoped = scopedValue(root, target);
+        const servers = serverMap(scoped, target.path);
+        servers[name] = config;
+        setServerMap(scoped, servers);
+        setScopedValue(root, target, scoped);
+        await writeJson(target.path, root);
+        return { name, scope, path: target.path, config };
+    }
+    async remove(name, scope) {
+        this.validateName(name);
+        const scopes = scope ? [scope] : ['local', 'project', 'user'];
+        for (const candidate of scopes) {
+            const target = await this.target(candidate);
+            const root = await readJson(target.path);
+            const scoped = scopedValue(root, target);
+            const servers = serverMap(scoped, target.path);
+            const config = servers[name];
+            if (!config)
+                continue;
+            delete servers[name];
+            setServerMap(scoped, servers);
+            setScopedValue(root, target, scoped);
+            await writeJson(target.path, root);
+            return { name, scope: candidate, path: target.path, config };
+        }
+        throw new Error(`MCP server not found: ${name}`);
+    }
+    async resetProjectChoices() {
+        const path = join(this.configRoot, '.claude.json');
+        const root = await readJson(path);
+        const identity = await resolveClaudeProjectIdentity({ cwd: this.cwd });
+        const projects = isRecord(root.projects) ? root.projects : {};
+        const project = isRecord(projects[identity]) ? projects[identity] : {};
+        project.enabledMcpjsonServers = [];
+        project.disabledMcpjsonServers = [];
+        projects[identity] = project;
+        root.projects = projects;
+        await writeJson(path, root);
+    }
+    async target(scope) {
+        if (scope === 'project')
+            return { path: join(this.cwd, '.mcp.json') };
+        const path = join(this.configRoot, '.claude.json');
+        if (scope === 'user')
+            return { path };
+        const projectIdentity = await resolveClaudeProjectIdentity({
+            cwd: this.cwd,
+        });
+        return { path, projectIdentity };
+    }
+    validateName(name) {
+        if (!name || name.trim() !== name)
+            throw new Error('MCP server name is required');
+    }
+}
+export function mcpScope(value) {
+    if (value !== 'local' && value !== 'project' && value !== 'user') {
+        throw new Error('--scope must be one of local, user, project');
+    }
+    return value;
+}
+//# sourceMappingURL=claude-mcp-management.js.map

package/dist/mcp/claude-mcp-management.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-mcp-management.js","sourceRoot":"","sources":["../../src/mcp/claude-mcp-management.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAA;AACjE,OAAO,EACL,yBAAyB,EACzB,4BAA4B,GAE7B,MAAM,6CAA6C,CAAA;AAsBpD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,IAAI,MAAc,CAAA;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAA;QACjE,MAAM,KAAK,CAAA;IACb,CAAC;IACD,IAAI,KAAc,CAAA;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IACvE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAA;IAC9E,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,SAAS,CAChB,KAA8B,EAC9B,IAAY;IAEZ,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAA;IAChC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IACpC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,EAAE,CAAC,CAAA;IACrE,MAAM,MAAM,GAAoC,EAAE,CAAA;IAClD,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,uBAAuB,IAAI,EAAE,CAAC,CAAA;QAClE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAA;IACvB,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,YAAY,CACnB,KAA8B,EAC9B,OAAwC;IAExC,KAAK,CAAC,UAAU,GAAG,OAAO,CAAA;AAC5B,CAAC;AAED,SAAS,WAAW,CAClB,IAA6B,EAC7B,MAAiB;IAEjB,IAAI,CAAC,MAAM,CAAC,eAAe;QAAE,OAAO,IAAI,CAAA;IACxC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA;IAC7D,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;IAChD,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,OAAmC,CAAC,CAAC,CAAC,EAAE,CAAA;AACtE,CAAC;AAED,SAAS,cAAc,CACrB,IAA6B,EAC7B,MAAiB,EACjB,KAA8B;IAE9B,IAAI,CAAC,MAAM,CAAC,eAAe;QAAE,OAAM;IACnC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA;IAC7D,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,KAAK,CAAA;IACxC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;AAC1B,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,IAAY,EACZ,KAA8B;IAE9B,MAAM,SAAS,GAAG,MAAM,mBAAmB,CACzC,IAAI,EACJ,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CACtC,CAAA;IACD,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,EAAE,CAAC,CAAA;AAC9E,CAAC;AAED,MAAM,OAAO,mBAAmB;IACb,UAAU,CAAQ;IAClB,GAAG,CAAQ;IAE5B,YAAY,OAA6B;QACvC,IAAI,CAAC,UAAU,GAAG,OAAO,CACvB,OAAO,CAAC,UAAU;YAChB,OAAO,CAAC,GAAG,CAAC,iBAAiB;YAC7B,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAC7B,CAAA;QACD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACjC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAgB;QACzB,MAAM,SAAS,GAAG,MAAM,yBAAyB,CAAC;YAChD,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,cAAc,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC;SAC7C,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAA;QAClD,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC;YACrC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CACzC,SAAS,CAAC,QAAQ,CAAC,KAAgC,EAAE,QAAQ,CAAC,IAAI,CAAC,CACpE,EAAE,CAAC;gBACF,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE;oBAChB,IAAI;oBACJ,KAAK,EAAE,QAAQ,CAAC,KAAK;oBACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,MAAM;iBACP,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;aACzB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC;aACjE,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IAC/D,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,KAAgB;QACtC,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;QAC1E,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAA;QAC7D,OAAO,MAAM,CAAA;IACf,CAAC;IAED,KAAK,CAAC,GAAG,CACP,IAAY,EACZ,MAAuB,EACvB,QAAkB,OAAO;QAEzB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;QACvB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;QACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACvC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACxC,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACxC,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAA;QAC9C,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAA;QACtB,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC7B,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;QACpC,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAClC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,CAAA;IACnD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,KAAgB;QACzC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;QACvB,MAAM,MAAM,GAAe,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;QACzE,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YAC3C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YACxC,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YACxC,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAA;YAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;YAC5B,IAAI,CAAC,MAAM;gBAAE,SAAQ;YACrB,OAAO,OAAO,CAAC,IAAI,CAAC,CAAA;YACpB,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;YAC7B,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;YACpC,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YAClC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,CAAA;QAC9D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAA;IAClD,CAAC;IAED,KAAK,CAAC,mBAAmB;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAA;QAClD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAA;QACjC,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;QACtE,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA;QAC7D,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QACtE,OAAO,CAAC,qBAAqB,GAAG,EAAE,CAAA;QAClC,OAAO,CAAC,sBAAsB,GAAG,EAAE,CAAA;QACnC,QAAQ,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAA;QAC5B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAC7B,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,KAAe;QAClC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAA;QACrE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAA;QAClD,IAAI,KAAK,KAAK,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,CAAA;QACrC,MAAM,eAAe,GAAG,MAAM,4BAA4B,CAAC;YACzD,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC,CAAA;QACF,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAA;IAClC,CAAC;IAEO,YAAY,CAAC,IAAY;QAC/B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI;YAC/B,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;IAClD,CAAC;CACF;AAED,MAAM,UAAU,QAAQ,CAAC,KAAa;IACpC,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;IAChE,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/mcp/claude-mcp-oauth.d.ts

@@ -0,0 +1,113 @@
+import { type OAuthClientProvider, type OAuthDiscoveryState } from '@modelcontextprotocol/sdk/client/auth.js';
+import type { OAuthClientInformationMixed, OAuthClientMetadata, OAuthTokens } from '@modelcontextprotocol/sdk/shared/auth.js';
+export interface McpOAuthServerIdentity {
+    name: string;
+    type: 'http' | 'sse';
+    url: string;
+    headers?: Record<string, string>;
+    clientId?: string;
+    callbackPort?: number;
+}
+export interface ClaudeMcpOAuthRecord {
+    serverName: string;
+    serverUrl: string;
+    accessToken: string;
+    discoveryState?: {
+        authorizationServerUrl?: string;
+        oauthMetadataFound?: boolean;
+    };
+    clientId?: string;
+    clientSecret?: string;
+    redirectUri?: string;
+    refreshToken?: string;
+    expiresAt?: number;
+    scope?: string;
+}
+export interface PluginConfigFileCommit {
+    path: string;
+    beforeSource?: string;
+    afterSource: string;
+}
+export interface McpOAuthStoreOptions {
+    configRoot: string;
+    useKeychain?: boolean;
+}
+export interface McpOAuthLoginOptions {
+    configRoot: string;
+    server: McpOAuthServerIdentity;
+    clientId?: string;
+    clientSecret?: string;
+    callbackPort?: number;
+    noBrowser?: boolean;
+    write: (message: string) => void;
+    readRedirectUrl?: () => Promise<string>;
+    openBrowser?: (url: URL) => Promise<void>;
+}
+interface ConfiguredMcpOAuthClient {
+    clientId: string;
+    clientSecret?: string;
+}
+export declare function mcpOAuthRecordKey(server: McpOAuthServerIdentity): string;
+export declare function mcpOAuthCredentialService(configRoot: string): string;
+export declare class ClaudeMcpOAuthStore {
+    private readonly configRoot;
+    private readonly useKeychain;
+    private readonly service;
+    private readonly lease;
+    constructor(options: McpOAuthStoreOptions);
+    read(server: McpOAuthServerIdentity): Promise<ClaudeMcpOAuthRecord | undefined>;
+    mutate(server: McpOAuthServerIdentity, update: (current: ClaudeMcpOAuthRecord | undefined) => ClaudeMcpOAuthRecord | undefined): Promise<ClaudeMcpOAuthRecord | undefined>;
+    clear(server: McpOAuthServerIdentity): Promise<void>;
+    readClientSecret(server: McpOAuthServerIdentity): Promise<string | undefined>;
+    saveClientSecret(server: McpOAuthServerIdentity, clientSecret: string): Promise<void>;
+    readPluginSecrets(pluginId: string): Promise<Record<string, string>>;
+    updatePluginSecrets(pluginId: string, values: Readonly<Record<string, string>>, removeKeys?: readonly string[]): Promise<void>;
+    updatePluginSecretsTransaction(updates: readonly {
+        pluginId: string;
+        values: Readonly<Record<string, string>>;
+        removeKeys?: readonly string[];
+    }[], prepareCommit: () => Promise<PluginConfigFileCommit>): Promise<void>;
+    deletePluginSecrets(pluginId: string): Promise<void>;
+    private readEnvelope;
+    private pluginSecretTransactionPath;
+    private pluginSecretTransactionService;
+    private readPluginSecretTransactionJournal;
+    private writePluginSecretTransactionJournal;
+    private deletePluginSecretTransactionJournal;
+    private recoverPluginSecretTransaction;
+    private captureCredentialSnapshot;
+    private restoreCredentialSnapshot;
+    private writeEnvelope;
+    private withLock;
+}
+export declare function readMcpClientSecret(): Promise<string>;
+export declare class ClaudeMcpOAuthProvider implements OAuthClientProvider {
+    private readonly store;
+    private readonly server;
+    private readonly redirectUri;
+    private readonly onAuthorization;
+    private readonly configuredClient?;
+    private codeVerifierValue;
+    private stateValue;
+    private recordValue;
+    constructor(store: ClaudeMcpOAuthStore, server: McpOAuthServerIdentity, redirectUri: string, onAuthorization: (url: URL) => Promise<void>, record?: ClaudeMcpOAuthRecord, configuredClient?: ConfiguredMcpOAuthClient | undefined);
+    get redirectUrl(): string;
+    get clientMetadata(): OAuthClientMetadata;
+    state(): Promise<string>;
+    authorizationState(): string;
+    clientInformation(): OAuthClientInformationMixed | undefined;
+    saveClientInformation(information: OAuthClientInformationMixed): Promise<void>;
+    tokens(): Promise<OAuthTokens | undefined>;
+    saveTokens(tokens: OAuthTokens): Promise<void>;
+    redirectToAuthorization(url: URL): Promise<void>;
+    saveCodeVerifier(codeVerifier: string): void;
+    codeVerifier(): string;
+    saveDiscoveryState(state: OAuthDiscoveryState): Promise<void>;
+    discoveryState(): Promise<OAuthDiscoveryState | undefined>;
+    invalidateCredentials(scope: 'all' | 'client' | 'tokens' | 'verifier' | 'discovery'): Promise<void>;
+}
+export declare function mcpOAuthServerIdentity(name: string, config: Record<string, unknown>): McpOAuthServerIdentity;
+export declare function authenticateMcpServer(options: McpOAuthLoginOptions): Promise<'AUTHORIZED'>;
+export declare function loadMcpOAuthProvider(configRoot: string, server: McpOAuthServerIdentity): Promise<ClaudeMcpOAuthProvider | undefined>;
+export {};
+//# sourceMappingURL=claude-mcp-oauth.d.ts.map

package/dist/mcp/claude-mcp-oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-mcp-oauth.d.ts","sourceRoot":"","sources":["../../src/mcp/claude-mcp-oauth.ts"],"names":[],"mappings":"AAQA,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACzB,MAAM,0CAA0C,CAAA;AACjD,OAAO,KAAK,EACV,2BAA2B,EAC3B,mBAAmB,EACnB,WAAW,EACZ,MAAM,0CAA0C,CAAA;AAWjD,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,GAAG,KAAK,CAAA;IACpB,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,cAAc,CAAC,EAAE;QACf,sBAAsB,CAAC,EAAE,MAAM,CAAA;QAC/B,kBAAkB,CAAC,EAAE,OAAO,CAAA;KAC7B,CAAA;IACD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAeD,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAA;IACZ,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,CAAA;CACpB;AAWD,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,OAAO,CAAA;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,sBAAsB,CAAA;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IAChC,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;IACvC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAC1C;AAED,UAAU,wBAAwB;IAChC,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAgED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,sBAAsB,GAAG,MAAM,CAMxE;AAED,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CASpE;AA0LD,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAoB;gBAE9B,OAAO,EAAE,oBAAoB;IAYnC,IAAI,CACR,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;IAOtC,MAAM,CACV,MAAM,EAAE,sBAAsB,EAC9B,MAAM,EAAE,CACN,OAAO,EAAE,oBAAoB,GAAG,SAAS,KACtC,oBAAoB,GAAG,SAAS,GACpC,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;IAkBtC,KAAK,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpD,gBAAgB,CACpB,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAUxB,gBAAgB,CACpB,MAAM,EAAE,sBAAsB,EAC9B,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAiBV,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAapE,mBAAmB,CACvB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EACxC,UAAU,GAAE,SAAS,MAAM,EAAO,GACjC,OAAO,CAAC,IAAI,CAAC;IA6BV,8BAA8B,CAClC,OAAO,EAAE,SAAS;QAChB,QAAQ,EAAE,MAAM,CAAA;QAChB,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;QACxC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAC/B,EAAE,EACH,aAAa,EAAE,MAAM,OAAO,CAAC,sBAAsB,CAAC,GACnD,OAAO,CAAC,IAAI,CAAC;IAsEV,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YA0B5C,YAAY;IAQ1B,OAAO,CAAC,2BAA2B;IAInC,OAAO,CAAC,8BAA8B;YAIxB,kCAAkC;YA2BlC,mCAAmC;YA2BnC,oCAAoC;YAuBpC,8BAA8B;YA2B9B,yBAAyB;YAoBzB,yBAAyB;YAgCzB,aAAa;YAiBb,QAAQ;CAiBvB;AAeD,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,MAAM,CAAC,CA+B3D;AAED,qBAAa,sBAAuB,YAAW,mBAAmB;IAM9D,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAEhC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAVpC,OAAO,CAAC,iBAAiB,CAAoB;IAC7C,OAAO,CAAC,UAAU,CAAoB;IACtC,OAAO,CAAC,WAAW,CAAkC;gBAGlC,KAAK,EAAE,mBAAmB,EAC1B,MAAM,EAAE,sBAAsB,EAC9B,WAAW,EAAE,MAAM,EACnB,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,EAC7D,MAAM,CAAC,EAAE,oBAAoB,EACZ,gBAAgB,CAAC,EAAE,wBAAwB,YAAA;IAK9D,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,IAAI,cAAc,IAAI,mBAAmB,CAExC;IAEK,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAK9B,kBAAkB,IAAI,MAAM;IAM5B,iBAAiB,IAAI,2BAA2B,GAAG,SAAS;IAyBtD,qBAAqB,CACzB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,IAAI,CAAC;IAwBV,MAAM,IAAI,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAiB1C,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IA+B9C,uBAAuB,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAItD,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAI5C,YAAY,IAAI,MAAM;IAMhB,kBAAkB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAwB7D,cAAc,IAAI,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC;IAM1D,qBAAqB,CACzB,KAAK,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,WAAW,GAC5D,OAAO,CAAC,IAAI,CAAC;CA8BjB;AAED,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,sBAAsB,CA4BxB;AAwHD,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,YAAY,CAAC,CA2EvB;AAED,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAyB7C"}