rivet-design 0.10.8 → 0.11.0

package/dist/mcp/agent-variants/variantContext.js

@@ -0,0 +1,355 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.writeVariantContextBundle = exports.createVariantContextBundle = void 0;
+const crypto_1 = __importDefault(require("crypto"));
+const fs_1 = __importDefault(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+const errors_1 = require("./errors");
+const sourceContext_1 = require("./sourceContext");
+const USER_CONTEXT_DIRECTORY = 'user';
+const METADATA_DIRECTORY = 'metadata';
+const CONTEXT_FILE = 'context.json';
+const PROMPT_FILE = 'prompt.md';
+const MAX_FILE_CONTEXT_BYTES = 50 * 1024 * 1024;
+const UPLOAD_DATA_URL_PATTERN = /^data:([^;,]+);base64,(.*)$/s;
+const BASE64_PAYLOAD_PATTERN = /^[A-Za-z0-9+/=\s]+$/;
+const SUPPORTED_UPLOAD_IMAGE_EXTENSIONS = new Map([
+    ['image/png', 'png'],
+    ['image/jpeg', 'jpg'],
+    ['image/webp', 'webp'],
+    ['image/gif', 'gif'],
+    ['image/avif', 'avif'],
+]);
+const ensureDir = (dir) => {
+    fs_1.default.mkdirSync(dir, { recursive: true });
+};
+const writeTextFile = (filePath, content) => {
+    ensureDir(path_1.default.dirname(filePath));
+    fs_1.default.writeFileSync(filePath, content, 'utf8');
+};
+const sha256File = (filePath) => {
+    const hash = crypto_1.default.createHash('sha256');
+    hash.update(fs_1.default.readFileSync(filePath));
+    return hash.digest('hex');
+};
+const safeNamePart = (value, fallback) => {
+    const base = (value ?? fallback)
+        .replace(/[^a-zA-Z0-9._-]+/g, '-')
+        .replace(/^-+|-+$/g, '')
+        .slice(0, 80);
+    return base || fallback;
+};
+const realpathIfPresent = (candidate) => {
+    try {
+        return fs_1.default.realpathSync(candidate);
+    }
+    catch {
+        return null;
+    }
+};
+const isPathWithinRoot = (absolutePath, root) => {
+    const relative = path_1.default.relative(root, absolutePath);
+    return (relative === '' ||
+        (relative.length > 0 &&
+            !relative.startsWith('..') &&
+            !path_1.default.isAbsolute(relative)));
+};
+const isBroadAllowedRoot = (root) => {
+    const resolvedRoot = path_1.default.resolve(root);
+    const filesystemRoot = path_1.default.parse(resolvedRoot).root;
+    const homeRoot = realpathIfPresent(os_1.default.homedir()) ?? path_1.default.resolve(os_1.default.homedir());
+    const tempRoot = realpathIfPresent(os_1.default.tmpdir()) ?? path_1.default.resolve(os_1.default.tmpdir());
+    return (resolvedRoot === filesystemRoot ||
+        resolvedRoot === homeRoot ||
+        resolvedRoot === tempRoot);
+};
+const resolveAllowedRoots = (roots) => roots
+    .map((root) => realpathIfPresent(root))
+    .filter((root) => {
+    if (!root)
+        return false;
+    return !isBroadAllowedRoot(root);
+});
+const readStoredUserContext = (contextBundlePath) => {
+    const manifestPath = path_1.default.join(contextBundlePath, CONTEXT_FILE);
+    try {
+        const manifest = JSON.parse(fs_1.default.readFileSync(manifestPath, 'utf8'));
+        if (!Array.isArray(manifest.storedUserContext))
+            return undefined;
+        return manifest.storedUserContext;
+    }
+    catch {
+        return undefined;
+    }
+};
+const assertAllowedPath = (sourcePath, allowedRoots) => {
+    const resolvedPath = realpathIfPresent(sourcePath);
+    if (!resolvedPath) {
+        throw new errors_1.AgentVariantsError('SOURCE_CONTEXT_INVALID', `User context path is not readable: ${sourcePath}`);
+    }
+    const isAllowed = allowedRoots.some((root) => isPathWithinRoot(resolvedPath, root));
+    if (!isAllowed) {
+        throw new errors_1.AgentVariantsError('SOURCE_CONTEXT_INVALID', `User context path escapes the allowed roots: ${sourcePath}`);
+    }
+    return resolvedPath;
+};
+const copyFileSource = (args) => {
+    const sourcePath = assertAllowedPath(args.input.path, args.allowedRoots);
+    const stat = fs_1.default.statSync(sourcePath);
+    if (!stat.isFile()) {
+        throw new errors_1.AgentVariantsError('SOURCE_CONTEXT_INVALID', `User context file path is not a regular file: ${args.input.path}`);
+    }
+    if (stat.size > MAX_FILE_CONTEXT_BYTES) {
+        throw new errors_1.AgentVariantsError('SOURCE_CONTEXT_TOO_LARGE', `User context file exceeds size limit (${stat.size} > ${MAX_FILE_CONTEXT_BYTES})`);
+    }
+    const originalFilename = path_1.default.basename(sourcePath);
+    const filename = `${args.id}-${safeNamePart(originalFilename, 'file')}`;
+    const destination = path_1.default.join(args.userDir, filename);
+    fs_1.default.copyFileSync(sourcePath, destination);
+    return {
+        source: {
+            id: args.id,
+            transport: 'file',
+            path: destination,
+            ...(args.input.mimeType ? { mimeType: args.input.mimeType } : {}),
+            originalFilename,
+            ...(args.input.label ? { label: args.input.label } : {}),
+            ...(args.input.userIntent ? { userIntent: args.input.userIntent } : {}),
+        },
+        storage: {
+            sizeBytes: stat.size,
+            sha256: sha256File(destination),
+            originalFilename,
+        },
+    };
+};
+const decodeUploadDataUrl = (dataUrl) => {
+    const match = dataUrl.match(UPLOAD_DATA_URL_PATTERN);
+    if (!match) {
+        throw new errors_1.AgentVariantsError('SOURCE_CONTEXT_INVALID', 'Uploaded user context must be a base64 data URL.');
+    }
+    const mimeType = match[1].toLowerCase().trim();
+    const extension = SUPPORTED_UPLOAD_IMAGE_EXTENSIONS.get(mimeType);
+    if (!extension) {
+        throw new errors_1.AgentVariantsError('SOURCE_CONTEXT_INVALID', `Unsupported uploaded user context MIME type: ${mimeType}`);
+    }
+    const base64Data = match[2].replace(/\s+/g, '');
+    if (!base64Data || !BASE64_PAYLOAD_PATTERN.test(base64Data)) {
+        throw new errors_1.AgentVariantsError('SOURCE_CONTEXT_INVALID', 'Uploaded user context contains invalid base64 data.');
+    }
+    const buffer = Buffer.from(base64Data, 'base64');
+    if (buffer.length === 0) {
+        throw new errors_1.AgentVariantsError('SOURCE_CONTEXT_INVALID', 'Uploaded user context is empty.');
+    }
+    if (buffer.length > MAX_FILE_CONTEXT_BYTES) {
+        throw new errors_1.AgentVariantsError('SOURCE_CONTEXT_TOO_LARGE', `Uploaded user context exceeds size limit (${buffer.length} > ${MAX_FILE_CONTEXT_BYTES})`);
+    }
+    return { buffer, mimeType, extension };
+};
+const copyUploadSource = (args) => {
+    const upload = decodeUploadDataUrl(args.input.dataUrl);
+    const originalFilename = args.input.filename;
+    const nameSource = originalFilename
+        ? path_1.default.parse(originalFilename).name
+        : args.input.label;
+    const filename = `${args.id}-${safeNamePart(nameSource, 'upload')}.${upload.extension}`;
+    const destination = path_1.default.join(args.userDir, filename);
+    ensureDir(path_1.default.dirname(destination));
+    fs_1.default.writeFileSync(destination, upload.buffer);
+    return {
+        source: {
+            id: args.id,
+            transport: 'file',
+            path: destination,
+            mimeType: upload.mimeType,
+            ...(originalFilename ? { originalFilename } : {}),
+            ...(args.input.label ? { label: args.input.label } : {}),
+            ...(args.input.userIntent ? { userIntent: args.input.userIntent } : {}),
+        },
+        storage: {
+            sizeBytes: upload.buffer.length,
+            sha256: sha256File(destination),
+            ...(originalFilename ? { originalFilename } : {}),
+        },
+    };
+};
+const createTextSource = (args) => {
+    const filename = `${args.id}-${safeNamePart(args.label, args.fallbackName)}.md`;
+    const textPath = path_1.default.join(args.userDir, filename);
+    writeTextFile(textPath, `${args.content.trim()}\n`);
+    return {
+        source: {
+            id: args.id,
+            transport: 'text',
+            path: textPath,
+            ...(args.label ? { label: args.label } : {}),
+            ...(args.userIntent ? { userIntent: args.userIntent } : {}),
+        },
+        storage: {
+            sizeBytes: Buffer.byteLength(args.content, 'utf8'),
+            sha256: sha256File(textPath),
+        },
+    };
+};
+/**
+ * Copies optional user-provided URL details onto the canonical source record.
+ */
+const applyUrlSourceDetails = (record, details) => {
+    if (record.source.transport !== 'url')
+        return;
+    if (details.label && !record.source.label) {
+        record.source.label = details.label;
+    }
+    if (details.userIntent && !record.source.userIntent) {
+        record.source.userIntent = details.userIntent;
+    }
+};
+/**
+ * Creates the read-only user context bundle for a variants session.
+ */
+const createVariantContextBundle = (args) => {
+    const contextBundlePath = path_1.default.join(args.workspaceRoot, '.rivet', 'variant-context', args.sessionId);
+    const userDir = path_1.default.join(contextBundlePath, USER_CONTEXT_DIRECTORY);
+    ensureDir(userDir);
+    ensureDir(path_1.default.join(contextBundlePath, METADATA_DIRECTORY));
+    const allowedRoots = resolveAllowedRoots([...(args.allowedRoots ?? [])]);
+    const storedUserContext = [];
+    const promptPath = path_1.default.join(userDir, PROMPT_FILE);
+    writeTextFile(promptPath, `${args.prompt.trim()}\n`);
+    storedUserContext.push({
+        source: {
+            id: 'uc_prompt_1',
+            transport: 'prompt',
+            path: promptPath,
+        },
+        storage: {
+            sizeBytes: Buffer.byteLength(args.prompt, 'utf8'),
+            sha256: sha256File(promptPath),
+        },
+    });
+    const urlRecordsByUrl = new Map();
+    const addUrlSource = (args) => {
+        const normalized = (0, sourceContext_1.normalizeUrl)(args.url);
+        if (!normalized) {
+            if (args.isRequired) {
+                throw new errors_1.AgentVariantsError('SOURCE_CONTEXT_INVALID', `Invalid user context URL: ${args.url}`);
+            }
+            return false;
+        }
+        const existingRecord = urlRecordsByUrl.get(normalized);
+        if (existingRecord) {
+            applyUrlSourceDetails(existingRecord, {
+                label: args.label,
+                userIntent: args.userIntent,
+            });
+            return true;
+        }
+        const record = {
+            source: {
+                id: args.id,
+                transport: 'url',
+                url: normalized,
+                ...(args.label ? { label: args.label } : {}),
+                ...(args.userIntent ? { userIntent: args.userIntent } : {}),
+            },
+        };
+        urlRecordsByUrl.set(normalized, record);
+        storedUserContext.push(record);
+        return true;
+    };
+    let urlIndex = 0;
+    for (const url of args.sourceUrls ?? []) {
+        const isUrlSourceAccepted = addUrlSource({
+            id: `uc_url_${urlIndex + 1}`,
+            url,
+        });
+        if (isUrlSourceAccepted) {
+            urlIndex += 1;
+        }
+    }
+    let extraIndex = 0;
+    for (const input of args.userContextInputs ?? []) {
+        extraIndex += 1;
+        if (input.transport === 'url') {
+            addUrlSource({
+                id: `uc_input_${extraIndex}`,
+                url: input.url,
+                label: input.label,
+                userIntent: input.userIntent,
+                isRequired: true,
+            });
+        }
+        else if (input.transport === 'text') {
+            storedUserContext.push(createTextSource({
+                id: `uc_input_${extraIndex}`,
+                userDir,
+                label: input.label,
+                userIntent: input.userIntent,
+                content: input.content,
+                fallbackName: `input-${extraIndex}`,
+            }));
+        }
+        else if (input.transport === 'file_path') {
+            storedUserContext.push(copyFileSource({
+                input,
+                id: `uc_input_${extraIndex}`,
+                userDir,
+                allowedRoots,
+            }));
+        }
+        else if (input.transport === 'upload') {
+            storedUserContext.push(copyUploadSource({
+                input,
+                id: `uc_input_${extraIndex}`,
+                userDir,
+            }));
+        }
+        else {
+            const sourcePath = assertAllowedPath(input.path, allowedRoots);
+            if (!fs_1.default.statSync(sourcePath).isDirectory()) {
+                throw new errors_1.AgentVariantsError('SOURCE_CONTEXT_INVALID', `User context directory path is not a directory: ${input.path}`);
+            }
+            storedUserContext.push({
+                source: {
+                    id: `uc_input_${extraIndex}`,
+                    transport: 'directory',
+                    path: sourcePath,
+                    ...(input.label ? { label: input.label } : {}),
+                    ...(input.userIntent ? { userIntent: input.userIntent } : {}),
+                },
+            });
+        }
+    }
+    const bundle = {
+        version: 1,
+        sessionId: args.sessionId,
+        contextBundlePath,
+        userContext: storedUserContext.map((entry) => entry.source),
+        rivetActions: [],
+        rivetMetadata: [],
+    };
+    (0, exports.writeVariantContextBundle)(bundle, storedUserContext);
+    return bundle;
+};
+exports.createVariantContextBundle = createVariantContextBundle;
+/**
+ * Persists the durable context bundle manifest after planning metadata changes.
+ */
+const writeVariantContextBundle = (bundle, storedUserContext) => {
+    ensureDir(bundle.contextBundlePath);
+    const manifest = {
+        ...bundle,
+        storedUserContext: storedUserContext ??
+            readStoredUserContext(bundle.contextBundlePath) ??
+            bundle.userContext.map((source) => ({
+                source,
+            })),
+    };
+    fs_1.default.writeFileSync(path_1.default.join(bundle.contextBundlePath, CONTEXT_FILE), `${JSON.stringify(manifest, null, 2)}\n`, 'utf8');
+};
+exports.writeVariantContextBundle = writeVariantContextBundle;
+//# sourceMappingURL=variantContext.js.map

package/dist/mcp/agent-variants/variantContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"variantContext.js","sourceRoot":"","sources":["../../../src/mcp/agent-variants/variantContext.ts"],"names":[],"mappings":";;;;;;AAAA,oDAA4B;AAC5B,4CAAoB;AACpB,4CAAoB;AACpB,gDAAwB;AAMxB,qCAA8C;AAC9C,mDAA+C;AAE/C,MAAM,sBAAsB,GAAG,MAAM,CAAC;AACtC,MAAM,kBAAkB,GAAG,UAAU,CAAC;AACtC,MAAM,YAAY,GAAG,cAAc,CAAC;AACpC,MAAM,WAAW,GAAG,WAAW,CAAC;AAChC,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAChD,MAAM,uBAAuB,GAAG,8BAA8B,CAAC;AAC/D,MAAM,sBAAsB,GAAG,qBAAqB,CAAC;AACrD,MAAM,iCAAiC,GAAG,IAAI,GAAG,CAAC;IAChD,CAAC,WAAW,EAAE,KAAK,CAAC;IACpB,CAAC,YAAY,EAAE,KAAK,CAAC;IACrB,CAAC,YAAY,EAAE,MAAM,CAAC;IACtB,CAAC,WAAW,EAAE,KAAK,CAAC;IACpB,CAAC,YAAY,EAAE,MAAM,CAAC;CACvB,CAAC,CAAC;AAeH,MAAM,SAAS,GAAG,CAAC,GAAW,EAAQ,EAAE;IACtC,YAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACzC,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,QAAgB,EAAE,OAAe,EAAQ,EAAE;IAChE,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClC,YAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAC9C,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,QAAgB,EAAU,EAAE;IAC9C,MAAM,IAAI,GAAG,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,YAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvC,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,KAAyB,EAAE,QAAgB,EAAU,EAAE;IAC3E,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,QAAQ,CAAC;SAC7B,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC;SACjC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,OAAO,IAAI,IAAI,QAAQ,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,SAAiB,EAAiB,EAAE;IAC7D,IAAI,CAAC;QACH,OAAO,YAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,YAAoB,EAAE,IAAY,EAAW,EAAE;IACvE,MAAM,QAAQ,GAAG,cAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACnD,OAAO,CACL,QAAQ,KAAK,EAAE;QACf,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YAClB,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;YAC1B,CAAC,cAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAC9B,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,IAAY,EAAW,EAAE;IACnD,MAAM,YAAY,GAAG,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,cAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC;IACrD,MAAM,QAAQ,GACZ,iBAAiB,CAAC,YAAE,CAAC,OAAO,EAAE,CAAC,IAAI,cAAI,CAAC,OAAO,CAAC,YAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,YAAE,CAAC,MAAM,EAAE,CAAC,IAAI,cAAI,CAAC,OAAO,CAAC,YAAE,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,OAAO,CACL,YAAY,KAAK,cAAc;QAC/B,YAAY,KAAK,QAAQ;QACzB,YAAY,KAAK,QAAQ,CAC1B,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,KAAe,EAAY,EAAE,CACxD,KAAK;KACF,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;KACtC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE;IAC/B,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC,CAAC,CAAC;AAEP,MAAM,qBAAqB,GAAG,CAC5B,iBAAyB,EACoB,EAAE;IAC/C,MAAM,YAAY,GAAG,cAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAEhE,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YAAE,OAAO,SAAS,CAAC;QACjE,OAAO,QAAQ,CAAC,iBAAiB,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CACxB,UAAkB,EAClB,YAAsB,EACd,EAAE;IACV,MAAM,YAAY,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACnD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,2BAAkB,CAC1B,wBAAwB,EACxB,sCAAsC,UAAU,EAAE,CACnD,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAC3C,gBAAgB,CAAC,YAAY,EAAE,IAAI,CAAC,CACrC,CAAC;IACF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,2BAAkB,CAC1B,wBAAwB,EACxB,gDAAgD,UAAU,EAAE,CAC7D,CAAC;IACJ,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,IAKvB,EAAiC,EAAE;IAClC,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,YAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,2BAAkB,CAC1B,wBAAwB,EACxB,iDAAiD,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CACnE,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,GAAG,sBAAsB,EAAE,CAAC;QACvC,MAAM,IAAI,2BAAkB,CAC1B,0BAA0B,EAC1B,yCAAyC,IAAI,CAAC,IAAI,MAAM,sBAAsB,GAAG,CAClF,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,cAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,EAAE,IAAI,YAAY,CAAC,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAC;IACxE,MAAM,WAAW,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACtD,YAAE,CAAC,YAAY,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAEzC,OAAO;QACL,MAAM,EAAE;YACN,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,SAAS,EAAE,MAAM;YACjB,IAAI,EAAE,WAAW;YACjB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,gBAAgB;YAChB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE;QACD,OAAO,EAAE;YACP,SAAS,EAAE,IAAI,CAAC,IAAI;YACpB,MAAM,EAAE,UAAU,CAAC,WAAW,CAAC;YAC/B,gBAAgB;SACjB;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,OAAe,EAI1C,EAAE;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,2BAAkB,CAC1B,wBAAwB,EACxB,kDAAkD,CACnD,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IAC/C,MAAM,SAAS,GAAG,iCAAiC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,2BAAkB,CAC1B,wBAAwB,EACxB,gDAAgD,QAAQ,EAAE,CAC3D,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,2BAAkB,CAC1B,wBAAwB,EACxB,qDAAqD,CACtD,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,2BAAkB,CAC1B,wBAAwB,EACxB,iCAAiC,CAClC,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;QAC3C,MAAM,IAAI,2BAAkB,CAC1B,0BAA0B,EAC1B,6CAA6C,MAAM,CAAC,MAAM,MAAM,sBAAsB,GAAG,CAC1F,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACzC,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,IAIzB,EAAiC,EAAE;IAClC,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;IAC7C,MAAM,UAAU,GAAG,gBAAgB;QACjC,CAAC,CAAC,cAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,IAAI;QACnC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;IACrB,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,EAAE,IAAI,YAAY,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;IACxF,MAAM,WAAW,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACtD,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;IACrC,YAAE,CAAC,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAE7C,OAAO;QACL,MAAM,EAAE;YACN,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,SAAS,EAAE,MAAM;YACjB,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE;QACD,OAAO,EAAE;YACP,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;YAC/B,MAAM,EAAE,UAAU,CAAC,WAAW,CAAC;YAC/B,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,IAOzB,EAAiC,EAAE;IAClC,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,EAAE,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;IAChF,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnD,aAAa,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpD,OAAO;QACL,MAAM,EAAE;YACN,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,SAAS,EAAE,MAAM;YACjB,IAAI,EAAE,QAAQ;YACd,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D;QACD,OAAO,EAAE;YACP,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;YAClD,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC;SAC7B;KACF,CAAC;AACJ,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,qBAAqB,GAAG,CAC5B,MAAqC,EACrC,OAAgD,EAC1C,EAAE;IACR,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,KAAK,KAAK;QAAE,OAAO;IAC9C,IAAI,OAAO,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IACtC,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IAChD,CAAC;AACH,CAAC,CAAC;AAEF;;GAEG;AACI,MAAM,0BAA0B,GAAG,CACxC,IAAoC,EACd,EAAE;IACxB,MAAM,iBAAiB,GAAG,cAAI,CAAC,IAAI,CACjC,IAAI,CAAC,aAAa,EAClB,QAAQ,EACR,iBAAiB,EACjB,IAAI,CAAC,SAAS,CACf,CAAC;IACF,MAAM,OAAO,GAAG,cAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,sBAAsB,CAAC,CAAC;IACrE,SAAS,CAAC,OAAO,CAAC,CAAC;IACnB,SAAS,CAAC,cAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAE5D,MAAM,YAAY,GAAG,mBAAmB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACzE,MAAM,iBAAiB,GAAoC,EAAE,CAAC;IAC9D,MAAM,UAAU,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACnD,aAAa,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrD,iBAAiB,CAAC,IAAI,CAAC;QACrB,MAAM,EAAE;YACN,EAAE,EAAE,aAAa;YACjB,SAAS,EAAE,QAAQ;YACnB,IAAI,EAAE,UAAU;SACjB;QACD,OAAO,EAAE;YACP,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;YACjD,MAAM,EAAE,UAAU,CAAC,UAAU,CAAC;SAC/B;KACF,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,IAAI,GAAG,EAAyC,CAAC;IACzE,MAAM,YAAY,GAAG,CAAC,IAMrB,EAAW,EAAE;QACZ,MAAM,UAAU,GAAG,IAAA,4BAAY,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,MAAM,IAAI,2BAAkB,CAC1B,wBAAwB,EACxB,6BAA6B,IAAI,CAAC,GAAG,EAAE,CACxC,CAAC;YACJ,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,cAAc,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACvD,IAAI,cAAc,EAAE,CAAC;YACnB,qBAAqB,CAAC,cAAc,EAAE;gBACpC,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAkC;YAC5C,MAAM,EAAE;gBACN,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,SAAS,EAAE,KAAK;gBAChB,GAAG,EAAE,UAAU;gBACf,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5D;SACF,CAAC;QACF,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACxC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;QACxC,MAAM,mBAAmB,GAAG,YAAY,CAAC;YACvC,EAAE,EAAE,UAAU,QAAQ,GAAG,CAAC,EAAE;YAC5B,GAAG;SACJ,CAAC,CAAC;QACH,IAAI,mBAAmB,EAAE,CAAC;YACxB,QAAQ,IAAI,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IAED,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,iBAAiB,IAAI,EAAE,EAAE,CAAC;QACjD,UAAU,IAAI,CAAC,CAAC;QAChB,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;YAC9B,YAAY,CAAC;gBACX,EAAE,EAAE,YAAY,UAAU,EAAE;gBAC5B,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,UAAU,EAAE,IAAI;aACjB,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;YACtC,iBAAiB,CAAC,IAAI,CACpB,gBAAgB,CAAC;gBACf,EAAE,EAAE,YAAY,UAAU,EAAE;gBAC5B,OAAO;gBACP,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,YAAY,EAAE,SAAS,UAAU,EAAE;aACpC,CAAC,CACH,CAAC;QACJ,CAAC;aAAM,IAAI,KAAK,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;YAC3C,iBAAiB,CAAC,IAAI,CACpB,cAAc,CAAC;gBACb,KAAK;gBACL,EAAE,EAAE,YAAY,UAAU,EAAE;gBAC5B,OAAO;gBACP,YAAY;aACb,CAAC,CACH,CAAC;QACJ,CAAC;aAAM,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACxC,iBAAiB,CAAC,IAAI,CACpB,gBAAgB,CAAC;gBACf,KAAK;gBACL,EAAE,EAAE,YAAY,UAAU,EAAE;gBAC5B,OAAO;aACR,CAAC,CACH,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YAC/D,IAAI,CAAC,YAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC3C,MAAM,IAAI,2BAAkB,CAC1B,wBAAwB,EACxB,mDAAmD,KAAK,CAAC,IAAI,EAAE,CAChE,CAAC;YACJ,CAAC;YACD,iBAAiB,CAAC,IAAI,CAAC;gBACrB,MAAM,EAAE;oBACN,EAAE,EAAE,YAAY,UAAU,EAAE;oBAC5B,SAAS,EAAE,WAAW;oBACtB,IAAI,EAAE,UAAU;oBAChB,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9C,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9D;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAyB;QACnC,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,iBAAiB;QACjB,WAAW,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;QAC3D,YAAY,EAAE,EAAE;QAChB,aAAa,EAAE,EAAE;KAClB,CAAC;IACF,IAAA,iCAAyB,EAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAvJW,QAAA,0BAA0B,8BAuJrC;AAEF;;GAEG;AACI,MAAM,yBAAyB,GAAG,CACvC,MAA4B,EAC5B,iBAAmD,EAC7C,EAAE;IACR,SAAS,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACpC,MAAM,QAAQ,GAA2B;QACvC,GAAG,MAAM;QACT,iBAAiB,EACf,iBAAiB;YACjB,qBAAqB,CAAC,MAAM,CAAC,iBAAiB,CAAC;YAC/C,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAClC,MAAM;aACP,CAAC,CAAC;KACN,CAAC;IACF,YAAE,CAAC,aAAa,CACd,cAAI,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,YAAY,CAAC,EACjD,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACxC,MAAM,CACP,CAAC;AACJ,CAAC,CAAC;AAnBW,QAAA,yBAAyB,6BAmBpC"}

package/dist/mcp/auth/httpOAuthProvider.d.ts

@@ -0,0 +1,103 @@
+import type { Response } from 'express';
+import type { OAuthServerProvider, AuthorizationParams } from '@modelcontextprotocol/sdk/server/auth/provider.js';
+import type { OAuthRegisteredClientsStore } from '@modelcontextprotocol/sdk/server/auth/clients.js';
+import type { OAuthClientInformationFull, OAuthTokens } from '@modelcontextprotocol/sdk/shared/auth.js';
+import type { AuthInfo } from '@modelcontextprotocol/sdk/server/auth/types.js';
+/** Rivet credentials issued by the proxy after a completed browser login. */
+export type PersistedRivetTokens = {
+    token: string;
+    refreshToken?: string;
+    user?: {
+        id: string;
+        email: string;
+    };
+};
+export type RivetOAuthProviderOptions = {
+    /** Base URL of the Rivet proxy (auth backend), e.g. https://rivet-proxy.onrender.com */
+    proxyUrl: string;
+    /**
+     * Public URL of the local OAuth browser callback page. Must be a bare
+     * localhost origin (no path) — the proxy rejects custom redirect paths.
+     */
+    callbackUrl: string;
+    /** The MCP client (`--editor`), recorded with the login for analytics. */
+    mcpEditor?: string;
+    /** Persists tokens locally after login (e.g. ConfigManager.setAuth). */
+    persistTokens?: (tokens: PersistedRivetTokens) => void;
+    /** Confirms a refresh token is still accepted by durable local auth state. */
+    isRefreshTokenCurrent?: (refreshToken: string) => boolean;
+    fetchImpl?: typeof fetch;
+    /** Test override for the proxy token polling interval. */
+    pollIntervalMs?: number;
+};
+/** In-memory dynamic client registration store (clients are ephemeral). */
+declare class InMemoryClientsStore implements OAuthRegisteredClientsStore {
+    private clients;
+    getClient(clientId: string): OAuthClientInformationFull | undefined;
+    registerClient(client: Omit<OAuthClientInformationFull, 'client_id' | 'client_id_issued_at'> & Partial<Pick<OAuthClientInformationFull, 'client_id' | 'client_id_issued_at'>>): OAuthClientInformationFull;
+}
+/**
+ * OAuth authorization server provider that bridges the MCP OAuth spec
+ * (authorization code + PKCE, dynamic client registration) onto the existing
+ * Rivet proxy Google login flow:
+ *
+ * 1. `authorize` starts a proxy Google login with this server's local
+ *    callback page as the redirect origin and sends the browser to Google.
+ * 2. The browser returns to the local callback page, which forwards the
+ *    Supabase hash tokens to `completeBrowserCallback`. That completes the
+ *    proxy login, obtains the Rivet access token, and mints a single-use
+ *    authorization code bound to the client's PKCE challenge.
+ * 3. `exchangeAuthorizationCode` returns the Rivet access token as the OAuth
+ *    access token; `verifyAccessToken` validates bearer tokens against the
+ *    proxy profile endpoint.
+ */
+export declare class RivetOAuthServerProvider implements OAuthServerProvider {
+    readonly clientsStore: InMemoryClientsStore;
+    private readonly proxyUrl;
+    private readonly callbackUrl;
+    private readonly mcpEditor?;
+    private readonly persistTokens?;
+    private readonly isRefreshTokenCurrent?;
+    private readonly fetchFn;
+    private readonly pollIntervalMs;
+    private readonly pendingAuthorizations;
+    private readonly authorizationCodes;
+    private readonly issuedBearerTokens;
+    private readonly verifiedTokens;
+    private readonly revokedAccessTokens;
+    private readonly revokedRefreshTokens;
+    private readonly activeRefreshTokens;
+    constructor(options: RivetOAuthProviderOptions);
+    authorize(client: OAuthClientInformationFull, params: AuthorizationParams, res: Response): Promise<void>;
+    /**
+     * Completes a browser login forwarded by the local OAuth callback page:
+     * finishes the proxy login session, obtains Rivet credentials, mints a
+     * single-use authorization code, and returns the MCP client redirect URL.
+     */
+    completeBrowserCallback(input: {
+        sessionId?: string;
+        accessToken?: string;
+        refreshToken?: string;
+    }): Promise<{
+        redirectUrl: string;
+    }>;
+    challengeForAuthorizationCode(client: OAuthClientInformationFull, authorizationCode: string): Promise<string>;
+    exchangeAuthorizationCode(client: OAuthClientInformationFull, authorizationCode: string, _codeVerifier?: string, redirectUri?: string): Promise<OAuthTokens>;
+    exchangeRefreshToken(_client: OAuthClientInformationFull, refreshToken: string): Promise<OAuthTokens>;
+    verifyAccessToken(token: string): Promise<AuthInfo>;
+    /**
+     * Invalidates a bearer token issued by this OAuth provider and its paired
+     * refresh token, if the provider knows one.
+     */
+    revokeAccessToken(token: string): void;
+    private rememberIssuedBearerToken;
+    private getValidCodeEntry;
+    private toOAuthTokens;
+    private pollForRivetTokens;
+    private prunePendingAuthorizations;
+    private pruneAuthorizationCodes;
+    private pruneVerifiedTokens;
+    private pruneIssuedBearerTokens;
+}
+export {};
+//# sourceMappingURL=httpOAuthProvider.d.ts.map

package/dist/mcp/auth/httpOAuthProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"httpOAuthProvider.d.ts","sourceRoot":"","sources":["../../../src/mcp/auth/httpOAuthProvider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,KAAK,EACV,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,kDAAkD,CAAC;AACpG,OAAO,KAAK,EACV,0BAA0B,EAC1B,WAAW,EACZ,MAAM,0CAA0C,CAAC;AAClD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gDAAgD,CAAC;AAgC/E,6EAA6E;AAC7E,MAAM,MAAM,oBAAoB,GAAG;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,wFAAwF;IACxF,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,oBAAoB,KAAK,IAAI,CAAC;IACvD,8EAA8E;IAC9E,qBAAqB,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC;IAC1D,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,0DAA0D;IAC1D,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAoCF,2EAA2E;AAC3E,cAAM,oBAAqB,YAAW,2BAA2B;IAC/D,OAAO,CAAC,OAAO,CAAiD;IAEhE,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,0BAA0B,GAAG,SAAS;IAInE,cAAc,CACZ,MAAM,EAAE,IAAI,CAAC,0BAA0B,EAAE,WAAW,GAAG,qBAAqB,CAAC,GAC3E,OAAO,CAAC,IAAI,CAAC,0BAA0B,EAAE,WAAW,GAAG,qBAAqB,CAAC,CAAC,GAC/E,0BAA0B;CAgB9B;AAgGD;;;;;;;;;;;;;;GAcG;AACH,qBAAa,wBAAyB,YAAW,mBAAmB;IAClE,QAAQ,CAAC,YAAY,uBAA8B;IAEnD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAyC;IACxE,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAoC;IAC3E,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAe;IACvC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IAExC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAGlC;IACJ,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAG/B;IACJ,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAwC;IAC3E,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqC;IACpE,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAqB;IACzD,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAqB;IAC1D,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAqB;gBAE7C,OAAO,EAAE,yBAAyB;IAUxC,SAAS,CACb,MAAM,EAAE,0BAA0B,EAClC,MAAM,EAAE,mBAAmB,EAC3B,GAAG,EAAE,QAAQ,GACZ,OAAO,CAAC,IAAI,CAAC;IAqDhB;;;;OAIG;IACG,uBAAuB,CAAC,KAAK,EAAE;QACnC,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IA4D9B,6BAA6B,CACjC,MAAM,EAAE,0BAA0B,EAClC,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAAC,MAAM,CAAC;IAKZ,yBAAyB,CAC7B,MAAM,EAAE,0BAA0B,EAClC,iBAAiB,EAAE,MAAM,EACzB,aAAa,CAAC,EAAE,MAAM,EACtB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,WAAW,CAAC;IAcjB,oBAAoB,CACxB,OAAO,EAAE,0BAA0B,EACnC,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,WAAW,CAAC;IAkCjB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IA8DzD;;;OAGG;IACH,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAWtC,OAAO,CAAC,yBAAyB;IAYjC,OAAO,CAAC,iBAAiB;IAgBzB,OAAO,CAAC,aAAa;YAYP,kBAAkB;IAoChC,OAAO,CAAC,0BAA0B;IASlC,OAAO,CAAC,uBAAuB;IAS/B,OAAO,CAAC,mBAAmB;IAS3B,OAAO,CAAC,uBAAuB;CAQhC"}