rivet-design 0.12.4 → 0.13.0

package/dist/mcp/auth/httpOAuthProvider.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"httpOAuthProvider.js","sourceRoot":"","sources":["../../../src/mcp/auth/httpOAuthProvider.ts"],"names":[],"mappings":";;;AAAA,mCAAiD;AAajD,+EAKyD;AACzD,0EAG2C;AAC3C,sDAAuD;AACvD,+CAAkD;AAElD,MAAM,GAAG,GAAG,IAAA,qBAAY,EAAC,gBAAgB,CAAC,CAAC;AAE3C,MAAM,gBAAgB,GAAG,EAAE,GAAG,MAAM,CAAC;AACrC,MAAM,mBAAmB,GAAG,EAAE,GAAG,MAAM,CAAC;AACxC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,yBAAyB,GAAG,IAAI,CAAC;AACvC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AACpC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AACpC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AACxC,MAAM,eAAe,GAAG,OAAO,CAAC;AAChC,MAAM,yBAAyB,GAAG,6CAA6C,CAAC;AACnE,QAAA,4BAA4B,GAAG,iBAAiB,CAAC;AAC9D,MAAM,gCAAgC,GAAG,SAAS,CAAC;AACnD,MAAM,4BAA4B,GAAG,sBAAsB,CAAC;AAC5D,MAAM,4BAA4B,GAAG,iBAAiB,CAAC;AACvD,MAAM,0BAA0B,GAAG,gBAAgB,CAAC;AACpD,MAAM,0BAA0B,GAAG,4BAA4B,CAAC;AAChE,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,WAAW;IACX,WAAW;IACX,KAAK;IACL,OAAO;CACR,CAAC,CAAC;AA8DH,2EAA2E;AAC3E,MAAM,oBAAoB;IAChB,OAAO,GAAG,IAAI,GAAG,EAAsC,CAAC;IAEhE,SAAS,CAAC,QAAgB;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED,cAAc,CACZ,MACgF;QAEhF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,sCAA0B,CAClC,8EAA8E,CAC/E,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAA+B;YAC7C,GAAG,MAAM;YACT,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAA,mBAAU,GAAE;YAC3C,mBAAmB,EACjB,MAAM,CAAC,mBAAmB,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;SAC9D,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QACnD,OAAO,UAAU,CAAC;IACpB,CAAC;CACF;AAED,MAAM,qBAAqB,GAAG,CAAC,WAAmB,EAAW,EAAE;IAC7D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,OAAO,CACL,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CACtE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,WAAmB,EAAW,EAAE;IAC5D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACb,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,qBAAqB,CAAC,WAAW,CAAC,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IACE,GAAG,CAAC,QAAQ,KAAK,gCAAgC;YACjD,GAAG,CAAC,QAAQ,KAAK,4BAA4B;YAC7C,GAAG,CAAC,QAAQ,KAAK,4BAA4B;YAC7C,CAAC,GAAG,CAAC,MAAM,EACX,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,CACL,GAAG,CAAC,QAAQ,KAAK,QAAQ;YACzB,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,0BAA0B;YACzD,GAAG,CAAC,QAAQ,KAAK,0BAA0B;YAC3C,CAAC,GAAG,CAAC,MAAM;YACX,CAAC,GAAG,CAAC,IAAI,CACV,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,KAAK,GAAG,CAAC,EAAU,EAAiB,EAAE,CAC1C,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAEpD,MAAM,UAAU,GAAG,CAAC,KAAa,EAAU,EAAE,CAC3C,KAAK;KACF,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;KACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;KACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;KACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;KACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAE5B,MAAM,8BAA8B,GAAG,qBAAqB,CAAC;AAC7D,MAAM,eAAe,GACnB,oEAAoE,CAAC;AAEvE,MAAM,yBAAyB,GAAG,CAAC,SAAiB,EAAE,KAAa,EAAU,EAAE,CAC7E,GAAG,SAAS,IAAI,KAAK,EAAE,CAAC;AAE1B;;;GAGG;AACH,MAAM,qBAAqB,GAAG,CAAC,KAI9B,EAAU,EAAE;IACX,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,oBAAoB,CAAC;IACpE,MAAM,cAAc,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,kBAAkB,GAAG,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACzD,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCAyL0B,8BAA8B;;;;;;;;;;wBAUzC,UAAU,CAAC,UAAU,CAAC;;;;wCAIN,kBAAkB;;;;;sBAKpC,cAAc;;;;;;uBAMb,eAAe;;;;;;;;;;QAU9B,CAAC;AACT,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAAU,EAAE;IACjD,MAAM,kBAAkB,GACtB,IAAA,6CAAwB,EAAC,KAAK,CAAC,IAAI,yBAAyB,CAAC;IAC/D,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAC7D,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAC3B,IAAiC,EACU,EAAE;IAC7C,IAAI,OAAO,IAAI,EAAE,EAAE,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACnE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;AAC5C,CAAC,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAa,wBAAwB;IAC1B,YAAY,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAElC,WAAW,CAAe;IAC1B,cAAc,CAAe;IAC7B,SAAS,CAAU;IACnB,aAAa,CAA0C;IACvD,qBAAqB,CAAqC;IAC1D,OAAO,CAAe;IACtB,cAAc,CAAS;IAEvB,qBAAqB,GAAG,IAAI,GAAG,EAG7C,CAAC;IACa,kBAAkB,GAAG,IAAI,GAAG,EAG1C,CAAC;IACa,kBAAkB,GAAG,IAAI,GAAG,EAA6B,CAAC;IAC1D,cAAc,GAAG,IAAI,GAAG,EAA0B,CAAC;IACnD,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,oBAAoB,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,mBAAmB,GAAG,IAAI,GAAG,EAG3C,CAAC;IAEJ,YAAY,OAAkC;QAC5C,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;QAC1C,IAAI,CAAC,WAAW;YACd,OAAO,QAAQ,KAAK,UAAU;gBAC5B,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;gBACrC,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,cAAc;YACjB,OAAO,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC;QACtE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC;QAC3D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;QAC1C,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,sBAAsB,CAAC;IACzE,CAAC;IAEO,oBAAoB,CAAC,SAAiB,EAAE,KAAa;QAC3D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG;YACjB,GAAG,oCAA4B,IAAI,kBAAkB,CAAC,yBAAyB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,EAAE;YACpG,QAAQ;YACR,UAAU;YACV,cAAc;YACd,WAAW,IAAI,CAAC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,EAAE;SACnD,CAAC;QACF,IAAI,WAAW,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACtC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,SAAS,CACb,MAAkC,EAClC,MAA2B,EAC3B,GAAa;QAEb,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,GAAG,IAAI,CAAC,WAAW,EAAE,wBAAwB,EAC7C;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE;gBACrC,eAAe,EAAE,yBAAyB;gBAC1C,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,IAAI,CAAC,SAAS;gBACtB,OAAO,EAAE,yBAAa;aACvB,CAAC;SACH,CACF,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAM/C,CAAC;QAET,IACE,CAAC,QAAQ,CAAC,EAAE;YACZ,CAAC,MAAM,EAAE,OAAO;YAChB,CAAC,MAAM,CAAC,OAAO;YACf,CAAC,MAAM,CAAC,SAAS;YACjB,CAAC,MAAM,CAAC,UAAU;YAClB,CAAC,MAAM,CAAC,gBAAgB,EACxB,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAClE,MAAM,IAAI,uBAAW,CAAC,+BAA+B,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAClC,MAAM,YAAY,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3D,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE;YAC/C,MAAM;YACN,MAAM;YACN,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,YAAY;YACZ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,mBAAmB;SAC5C,CAAC,CAAC;QAEH,GAAG,CAAC,SAAS,CACX,YAAY,EACZ,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,CAC1D,CAAC;QACF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAC/B,qBAAqB,CAAC;YACpB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,UAAU,EAAE,MAAM,CAAC,WAAW;YAC9B,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC,CACH,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,uBAAuB,CAAC,KAK7B;QACC,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,iBAAiB,EAAE,GAAG,KAAK,CAAC;QAC1E,IAAI,CAAC,SAAS,IAAI,CAAC,WAAW,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,IACE,iBAAiB;YACjB,yBAAyB,CAAC,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,EAC1D,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,OAAO,CACzC,GAAG,IAAI,CAAC,WAAW,EAAE,2BAA2B,EAChD;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,SAAS;gBACT,WAAW;gBACX,YAAY;gBACZ,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;aAC3C,CAAC;SACH,CACF,CAAC;QACF,MAAM,cAAc,GAAG,CAAC,MAAM,gBAAgB,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAG/D,CAAC;QACT,IAAI,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,cAAc,EAAE,KAAK,IAAI,iCAAiC,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5E,IAAI,CAAC;YACH,IAAI,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,uDAAuD,EAAE,KAAK,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,IAAI,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACnD,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAC/B,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE;YAChC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS;YAClC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa;YAC3C,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW;YACvC,WAAW,EAAE,MAAM,CAAC,KAAK;YACzB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB;SACzC,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACxD,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACzB,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,6BAA6B,CACjC,MAAkC,EAClC,iBAAyB;QAEzB,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;QAChE,OAAO,KAAK,CAAC,aAAa,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC7B,MAAkC,EAClC,iBAAyB,EACzB,aAAsB,EACtB,WAAoB;QAEpB,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;QAChE,IAAI,WAAW,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;YACrD,MAAM,IAAI,6BAAiB,CAAC,6BAA6B,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAClD,MAAM,YAAY,GAAG,IAAI,CAAC,yBAAyB,CAAC;YAClD,gBAAgB,EAAE,KAAK,CAAC,WAAW;YACnC,iBAAiB,EAAE,KAAK,CAAC,YAAY;YACrC,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,aAAa,CACvB,YAAY,CAAC,WAAW,EACxB,YAAY,CAAC,YAAY,EACzB,YAAY,CAAC,SAAS,CACvB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,OAAmC,EACnC,YAAoB;QAEpB,MAAM,kBAAkB,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACtE,IACE,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,YAAY,CAAC;YAC3C,CAAC,kBAAkB;YACnB,IAAI,CAAC,qBAAqB,EAAE,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,KAAK,KAAK,EAC5E,CAAC;YACD,MAAM,IAAI,6BAAiB,CAAC,2BAA2B,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAA,+CAA0B,EAAC;YACjD,YAAY,EAAE,kBAAkB,CAAC,iBAAiB;YAClD,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE;YAC5B,SAAS,EAAE,IAAI,CAAC,OAAO;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,6BAAiB,CAAC,4BAA4B,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,qBAAqB,GACzB,SAAS,CAAC,YAAY,IAAI,kBAAkB,CAAC,iBAAiB,CAAC;QACjE,IAAI,CAAC;YACH,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,YAAY,EAAE,qBAAqB;aACpC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,yBAAyB,CAAC;YAClD,gBAAgB,EAAE,SAAS,CAAC,KAAK;YACjC,iBAAiB,EAAE,qBAAqB;YACxC,IAAI,EAAE,kBAAkB,CAAC,IAAI;SAC9B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,aAAa,CACvB,YAAY,CAAC,WAAW,EACxB,YAAY,CAAC,YAAY,EACzB,YAAY,CAAC,SAAS,CACvB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CACf,OAAmC,EACnC,OAAoC;QAEpC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,gBAAgB,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,iBAAiB,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAE9D,IAAI,gBAAgB,EAAE,CAAC;YACrB,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvC,KAAK,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACjE,IAAI,WAAW,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;gBACvC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBAC1C,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBAC5C,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAa;QACnC,IAAI,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAClC,MAAM,IAAI,6BAAiB,CAAC,0BAA0B,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACvD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAClC,MAAM,IAAI,6BAAiB,CACzB,oDAAoD,CACrD,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,MAAM,IAAI,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC9C,OAAO,MAAM,CAAC,QAAQ,CAAC;QACzB,CAAC;QAED,IAAI,QAA6B,CAAC;QAClC,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,mBAAmB,EAAE;gBACtE,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,UAAU,WAAW,CAAC,gBAAgB,EAAE;iBACxD;gBACD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,wBAAwB,CAAC;aACtD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;YACtD,MAAM,IAAI,uBAAW,CAAC,uCAAuC,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAE/C,CAAC;QACT,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACrC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAClC,MAAM,IAAI,6BAAiB,CAAC,iCAAiC,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,IAAI,CAAC;QACpE,MAAM,kBAAkB,GACtB,IAAA,6CAAwB,EAAC,WAAW,CAAC,gBAAgB,CAAC;YACtD,yBAAyB,CAAC;QAC5B,MAAM,QAAQ,GAAa;YACzB,KAAK,EAAE,WAAW,CAAC,gBAAgB;YACnC,QAAQ,EAAE,WAAW;YACrB,MAAM,EAAE,CAAC,eAAe,CAAC;YACzB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC;YAC1E,KAAK,EAAE;gBACL,cAAc,EAAE,KAAK;gBACrB,GAAG,CAAC,WAAW,CAAC,iBAAiB;oBAC/B,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,CAAC,iBAAiB,EAAE;oBACjD,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxD;SACF,CAAC;QAEF,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE;YAC7B,QAAQ;YACR,WAAW,EACT,IAAI,CAAC,GAAG,EAAE;gBACV,IAAI,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;SAC9E,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;OAGG;IACH,iBAAiB,CAAC,KAAa;QAC7B,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACvD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,WAAW,EAAE,YAAY,EAAE,CAAC;YAC9B,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;YACxD,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAEO,yBAAyB,CAAC,MAIjC;QACC,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,gBAAgB,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5E,MAAM,YAAY,GAAG,MAAM,CAAC,iBAAiB;YAC3C,CAAC,CAAC,gBAAgB,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;YACzD,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAE5D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,EAAE;YACvC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,YAAY;YACZ,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS;SACV,CAAC,CAAC;QACH,IAAI,YAAY,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC7C,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,YAAY,EAAE;gBACzC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;gBAC3C,IAAI,EAAE,MAAM,CAAC,IAAI;aAClB,CAAC,CAAC;QACL,CAAC;QACD,OAAO;YACL,WAAW;YACX,YAAY;YACZ,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;SACpE,CAAC;IACJ,CAAC;IAEO,iBAAiB,CACvB,MAAkC,EAClC,iBAAyB;QAEzB,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC7D,IACE,CAAC,KAAK;YACN,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,SAAS;YACnC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAC5B,CAAC;YACD,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAClD,MAAM,IAAI,6BAAiB,CAAC,uCAAuC,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,aAAa,CACnB,WAAmB,EACnB,YAAqB,EACrB,YAAoB,yBAAyB;QAE7C,OAAO;YACL,YAAY,EAAE,WAAW;YACzB,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;YAClC,KAAK,EAAE,eAAe;YACtB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,SAAiB,EACjB,UAAkB;QAElB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,uBAAuB,EAAE,OAAO,EAAE,EAAE,CAAC;YACnE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,GAAG,IAAI,CAAC,WAAW,EAAE,wBAAwB,EAC7C;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;aACzD,CACF,CAAC;YACF,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAM/C,CAAC;YAET,IAAI,MAAM,EAAE,OAAO,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACpC,OAAO;oBACL,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,IAAI,EAAE,MAAM,CAAC,IAAI;iBAClB,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,EAAE,KAAK,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAChD,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;YACD,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IAEO,0BAA0B;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YACtD,IAAI,KAAK,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;gBAC1B,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;IAEO,uBAAuB;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACnD,IAAI,KAAK,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;gBAC1B,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IAEO,mBAAmB;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC/C,IAAI,KAAK,CAAC,WAAW,GAAG,GAAG,EAAE,CAAC;gBAC5B,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAEO,uBAAuB;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACnD,IAAI,KAAK,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;gBAC1B,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAxgBD,4DAwgBC"}

package/dist/mcp/auth/tools.d.ts

@@ -1,39 +0,0 @@
-import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-import { AuthService } from '../../services/AuthService';
-import type { TelemetryService } from '../../services/TelemetryService';
-export interface AuthToolDeps {
-    authService: AuthService;
-    telemetry?: TelemetryService;
-    /** The MCP client (`--editor`), recorded with the login for analytics. */
-    mcpEditor?: string;
-    /** Rejects an active HTTP OAuth bearer after logout clears local credentials. */
-    revokeBearerToken?: (token: string) => void;
-    mode?: 'local' | 'hosted';
-}
-type ToolResponse = {
-    content: Array<{
-        type: 'text';
-        text: string;
-    }>;
-    isError?: boolean;
-};
-/**
- * Build a reusable guard for tools that require authentication. Returns null
- * when the caller is genuinely logged in (server-validated, refreshing a stale
- * token if needed), otherwise a ready-to-return auth-required tool response.
- */
-export declare const createAuthGuard: (authService: AuthService) => (() => Promise<ToolResponse | null>);
-/**
- * Wrap an McpServer so EVERY tool registered through it is gated behind `guard`:
- * the guard runs before the tool's handler and, when it returns a response
- * (unauthenticated), that response is returned instead of running the tool.
- * Register login/logout/auth_status on the RAW server (not this wrapper) so
- * they stay reachable while logged out.
- *
- * Implemented as a Proxy over `.tool` so call sites don't change — the handler
- * is the last argument regardless of which SDK overload is used.
- */
-export declare const withAuthGuard: (mcp: McpServer, guard: () => Promise<ToolResponse | null>) => McpServer;
-export declare function registerAuthTools(mcp: McpServer, deps: AuthToolDeps): void;
-export {};
-//# sourceMappingURL=tools.d.ts.map

package/dist/mcp/auth/tools.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../src/mcp/auth/tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAIzE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAGzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAiBxE,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,WAAW,CAAC;IACzB,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5C,IAAI,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;CAC3B;AAED,KAAK,YAAY,GAAG;IAClB,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAiCF;;;;GAIG;AACH,eAAO,MAAM,eAAe,GAC1B,aAAa,WAAW,KACvB,CAAC,MAAM,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAWrC,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,aAAa,GACxB,KAAK,SAAS,EACd,OAAO,MAAM,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,KACxC,SAwBF,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,CAgO1E"}

package/dist/mcp/auth/tools.js

@@ -1,304 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.withAuthGuard = exports.createAuthGuard = void 0;
-exports.registerAuthTools = registerAuthTools;
-const crypto_1 = require("crypto");
-const v3_1 = require("zod/v3");
-const ConfigManager_1 = require("../../services/ConfigManager");
-const RequestAuthContext_1 = require("../../services/RequestAuthContext");
-const MCPOnboardingTelemetry_1 = require("../../services/MCPOnboardingTelemetry");
-const telemetry_1 = require("../../config/telemetry");
-const logger_1 = require("../../utils/logger");
-const log = (0, logger_1.createLogger)('mcp-auth');
-/**
- * How long the sign-in server stays up waiting for the browser flow to finish.
- * Must comfortably exceed the in-browser OAuth window — the UI alone polls for
- * the token for ~2 min (60 × 2s) *after* the user clicks, on top of the time
- * they spend in Google's account/2FA screens — or the server could shut down
- * before `/api/auth/store` runs. 5 min covers click-through + polling; the tool
- * stays retryable for the rare case it still times out.
- */
-const MCP_SIGNIN_TIMEOUT_MS = 5 * 60 * 1000;
-function jsonResponse(payload) {
-    return {
-        content: [{ type: 'text', text: JSON.stringify(payload) }],
-    };
-}
-function errorResponse(message, code) {
-    return {
-        content: [{ type: 'text', text: JSON.stringify({ error: message, code }) }],
-        isError: true,
-    };
-}
-const registerTool = (mcp, name, description, shape, handler) => {
-    const tool = mcp.tool.bind(mcp);
-    tool(name, description, shape, handler);
-};
-/**
- * Build a reusable guard for tools that require authentication. Returns null
- * when the caller is genuinely logged in (server-validated, refreshing a stale
- * token if needed), otherwise a ready-to-return auth-required tool response.
- */
-const createAuthGuard = (authService) => {
-    return async () => {
-        const ok = await authService.ensureAuthenticated();
-        if (ok) {
-            return null;
-        }
-        return errorResponse('Authentication required. Call the `login` tool (it opens a browser to sign in with Google), then retry.', 'AUTH_REQUIRED');
-    };
-};
-exports.createAuthGuard = createAuthGuard;
-/**
- * Wrap an McpServer so EVERY tool registered through it is gated behind `guard`:
- * the guard runs before the tool's handler and, when it returns a response
- * (unauthenticated), that response is returned instead of running the tool.
- * Register login/logout/auth_status on the RAW server (not this wrapper) so
- * they stay reachable while logged out.
- *
- * Implemented as a Proxy over `.tool` so call sites don't change — the handler
- * is the last argument regardless of which SDK overload is used.
- */
-const withAuthGuard = (mcp, guard) => {
-    return new Proxy(mcp, {
-        get(target, prop, receiver) {
-            if (prop !== 'tool') {
-                return Reflect.get(target, prop, receiver);
-            }
-            const originalTool = target.tool.bind(target);
-            return (...args) => {
-                const lastIdx = args.length - 1;
-                const handler = args[lastIdx];
-                if (typeof handler === 'function') {
-                    const original = handler;
-                    args[lastIdx] = async (...callArgs) => {
-                        const denied = await guard();
-                        if (denied)
-                            return denied;
-                        return original(...callArgs);
-                    };
-                }
-                return originalTool(...args);
-            };
-        },
-    });
-};
-exports.withAuthGuard = withAuthGuard;
-function registerAuthTools(mcp, deps) {
-    const { authService, telemetry, mcpEditor, revokeBearerToken, mode = 'local', } = deps;
-    const isHosted = mode === 'hosted';
-    const loginHandler = async () => {
-        const onboardingAttemptId = (0, crypto_1.randomUUID)();
-        const authAttemptId = (0, crypto_1.randomUUID)();
-        telemetry?.trackMCPOnboardingStarted({
-            onboardingAttemptId,
-            mcpEditor,
-        });
-        try {
-            // Real validation — only short-circuit on a genuinely live session,
-            // never on a merely-present (possibly stale) token.
-            const existing = await authService.getValidatedProfile();
-            if (existing) {
-                telemetry?.trackMCPAuthFlowStarted({
-                    onboardingAttemptId,
-                    authAttemptId,
-                    method: 'existing_session',
-                });
-                telemetry?.trackMCPAuthFlowCompleted({
-                    onboardingAttemptId,
-                    authAttemptId,
-                    method: 'existing_session',
-                });
-                const requestContext = (0, RequestAuthContext_1.getRequestAuthContext)();
-                return jsonResponse({
-                    success: true,
-                    alreadyAuthenticated: true,
-                    email: requestContext?.email ?? (0, ConfigManager_1.getConfigManager)().getEmail(),
-                    userId: requestContext?.userId ?? (0, ConfigManager_1.getConfigManager)().getUserId(),
-                });
-            }
-            if (isHosted) {
-                telemetry?.trackMCPAuthFlowStarted({
-                    onboardingAttemptId,
-                    authAttemptId,
-                    method: 'hosted_oauth',
-                });
-                telemetry?.trackMCPAuthFlowFailed({
-                    onboardingAttemptId,
-                    authAttemptId,
-                    method: 'hosted_oauth',
-                    failureReason: 'auth_required',
-                });
-                return jsonResponse({
-                    success: false,
-                    error: 'OAuth required',
-                    message: 'Use your MCP client Connect/Login button to authenticate this hosted Rivet server.',
-                });
-            }
-            telemetry?.track('mcp_login_started', {
-                source: 'mcp',
-                editor: mcpEditor,
-                version: telemetry_1.RIVET_VERSION,
-            });
-            telemetry?.trackMCPAuthFlowStarted({
-                onboardingAttemptId,
-                authAttemptId,
-                method: 'google',
-            });
-            telemetry?.trackMCPOAuthRedirectStarted({
-                onboardingAttemptId,
-                authAttemptId,
-                oauthProvider: 'google',
-                handoffPathCategory: 'local_rivet',
-            });
-            // Open Rivet's own sign-in page (served by a short-lived local server)
-            // rather than shelling straight to Google. Its "Sign in with Google"
-            // button runs the OAuth flow and stores the token in the local config —
-            // the same config the short-circuit at the top of this handler reads.
-            const { runSignIn } = await Promise.resolve().then(() => __importStar(require('../../onboarding/signin')));
-            const signIn = await runSignIn({
-                timeoutMs: MCP_SIGNIN_TIMEOUT_MS,
-                telemetry,
-                onboardingAttemptId,
-                authAttemptId,
-                mcpEditor,
-            });
-            if (!signIn.ok) {
-                const failureReason = signIn.timedOut
-                    ? 'timeout'
-                    : (0, MCPOnboardingTelemetry_1.normalizeMCPFailureReason)(signIn.error ?? 'unknown');
-                telemetry?.trackMCPAuthFlowFailed({
-                    onboardingAttemptId,
-                    authAttemptId,
-                    method: 'google',
-                    failureReason,
-                });
-                telemetry?.track('mcp_login_failed', {
-                    source: 'mcp',
-                    error_type: signIn.timedOut ? 'Timeout' : 'unknown',
-                });
-                return jsonResponse({
-                    success: false,
-                    error: signIn.timedOut ? 'Timeout' : 'Login failed',
-                    message: signIn.timedOut
-                        ? 'Login timed out. Call the login tool again to keep waiting for the browser sign-in.'
-                        : 'Could not open the Rivet sign-in page. Call the login tool again to retry.',
-                });
-            }
-            // Token is now in the local config; sync PostHog identity.
-            telemetry?.identifyUser();
-            telemetry?.track('mcp_login_completed', { source: 'mcp' });
-            telemetry?.trackMCPAuthFlowCompleted({
-                onboardingAttemptId,
-                authAttemptId,
-                method: 'google',
-            });
-            const requestContext = (0, RequestAuthContext_1.getRequestAuthContext)();
-            return jsonResponse({
-                success: true,
-                email: signIn.email ??
-                    requestContext?.email ??
-                    (0, ConfigManager_1.getConfigManager)().getEmail(),
-                userId: requestContext?.userId ?? (0, ConfigManager_1.getConfigManager)().getUserId(),
-            });
-        }
-        catch (err) {
-            log.warn('login tool error:', err);
-            telemetry?.trackMCPAuthFlowFailed({
-                onboardingAttemptId,
-                authAttemptId,
-                method: 'google',
-                failureReason: (0, MCPOnboardingTelemetry_1.normalizeMCPFailureReason)(err),
-            });
-            return errorResponse(err instanceof Error ? err.message : 'Login failed', 'LOGIN_FAILED');
-        }
-    };
-    registerTool(mcp, 'login', "Authenticate this machine (and this MCP server) with Rivet via Google so the user can access all of Rivet's tools. Opens the user's browser to Rivet's sign-in page, then blocks (up to ~5 minutes) until they finish. If already signed in with a valid session, returns immediately. When any Rivet tool reports AUTH_REQUIRED, call this tool, then retry. On timeout, returns success:false with a retryable message — call login again to keep waiting.", {}, loginHandler);
-    registerTool(mcp, 'logout', 'Sign this machine out of Rivet and clear the stored credentials.', {}, async () => {
-        try {
-            const configManager = (0, ConfigManager_1.getConfigManager)();
-            const requestContext = (0, RequestAuthContext_1.getRequestAuthContext)();
-            const email = requestContext?.email ?? configManager.getEmail();
-            const bearerToken = requestContext?.token ?? configManager.getAuthToken();
-            const tokenToRevoke = requestContext?.mcpAccessToken ?? bearerToken;
-            if (tokenToRevoke) {
-                revokeBearerToken?.(tokenToRevoke);
-            }
-            if (isHosted) {
-                await authService.logout({
-                    token: bearerToken,
-                    shouldClearLocalAuth: false,
-                });
-            }
-            else {
-                await authService.logout();
-            }
-            telemetry?.track('mcp_logout', { source: 'mcp' });
-            return jsonResponse({ loggedOut: true, email });
-        }
-        catch (err) {
-            log.warn('logout tool error:', err);
-            return errorResponse(err instanceof Error ? err.message : 'Logout failed', 'LOGOUT_FAILED');
-        }
-    });
-    registerTool(mcp, 'auth_status', 'Report whether this machine is signed in to Rivet (server-validated, refreshing a stale token if possible). Returns { authenticated, email, userId }.', {
-        // Accept (and ignore) an optional probe flag so clients that always send
-        // an argument object don't trip schema validation.
-        detailed: v3_1.z
-            .boolean()
-            .optional()
-            .describe('Reserved; auth_status always returns full status.'),
-    }, async () => {
-        try {
-            const profile = await authService.getValidatedProfile();
-            const cm = (0, ConfigManager_1.getConfigManager)();
-            const requestContext = (0, RequestAuthContext_1.getRequestAuthContext)();
-            if (!profile) {
-                return jsonResponse({ authenticated: false });
-            }
-            return jsonResponse({
-                authenticated: true,
-                email: requestContext?.email ?? cm.getEmail(),
-                userId: requestContext?.userId ?? cm.getUserId(),
-            });
-        }
-        catch (err) {
-            log.warn('auth_status tool error:', err);
-            return errorResponse(err instanceof Error ? err.message : 'Status check failed', 'STATUS_FAILED');
-        }
-    });
-}
-//# sourceMappingURL=tools.js.map

package/dist/mcp/auth/tools.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../src/mcp/auth/tools.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiIA,8CAgOC;AA/VD,mCAAoC;AACpC,+BAA2B;AAE3B,gEAAgE;AAChE,0EAA0E;AAE1E,kFAAkF;AAClF,sDAAuD;AACvD,+CAAkD;AAElD,MAAM,GAAG,GAAG,IAAA,qBAAY,EAAC,UAAU,CAAC,CAAC;AAErC;;;;;;;GAOG;AACH,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAiB5C,SAAS,YAAY,CAAI,OAAU;IACjC,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,OAAe,EAAE,IAAY;IAClD,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAID,MAAM,YAAY,GAAG,CACnB,GAAc,EACd,IAAY,EACZ,WAAmB,EACnB,KAA8B,EAC9B,OAAoB,EACd,EAAE;IACR,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAKrB,CAAC;IACV,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,KAA0B,EAAE,OAAO,CAAC,CAAC;AAC/D,CAAC,CAAC;AAEF;;;;GAIG;AACI,MAAM,eAAe,GAAG,CAC7B,WAAwB,EACc,EAAE;IACxC,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,mBAAmB,EAAE,CAAC;QACnD,IAAI,EAAE,EAAE,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,aAAa,CAClB,yGAAyG,EACzG,eAAe,CAChB,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC,CAAC;AAbW,QAAA,eAAe,mBAa1B;AAEF;;;;;;;;;GASG;AACI,MAAM,aAAa,GAAG,CAC3B,GAAc,EACd,KAAyC,EAC9B,EAAE;IACb,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE;QACpB,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ;YACxB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC7C,CAAC;YACD,MAAM,YAAY,GAAI,MAAM,CAAC,IAAqC,CAAC,IAAI,CACrE,MAAM,CACP,CAAC;YACF,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE;gBAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;gBAChC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC9B,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;oBAClC,MAAM,QAAQ,GAAG,OAAuC,CAAC;oBACzD,IAAI,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,GAAG,QAAmB,EAAE,EAAE;wBAC/C,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC;wBAC7B,IAAI,MAAM;4BAAE,OAAO,MAAM,CAAC;wBAC1B,OAAO,QAAQ,CAAC,GAAG,QAAQ,CAAC,CAAC;oBAC/B,CAAC,CAAC;gBACJ,CAAC;gBACD,OAAO,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC;YAC/B,CAAC,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC,CAAC;AA3BW,QAAA,aAAa,iBA2BxB;AAEF,SAAgB,iBAAiB,CAAC,GAAc,EAAE,IAAkB;IAClE,MAAM,EACJ,WAAW,EACX,SAAS,EACT,SAAS,EACT,iBAAiB,EACjB,IAAI,GAAG,OAAO,GACf,GAAG,IAAI,CAAC;IACT,MAAM,QAAQ,GAAG,IAAI,KAAK,QAAQ,CAAC;IACnC,MAAM,YAAY,GAAG,KAAK,IAA2B,EAAE;QACrD,MAAM,mBAAmB,GAAG,IAAA,mBAAU,GAAE,CAAC;QACzC,MAAM,aAAa,GAAG,IAAA,mBAAU,GAAE,CAAC;QACnC,SAAS,EAAE,yBAAyB,CAAC;YACnC,mBAAmB;YACnB,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC;YACH,oEAAoE;YACpE,oDAAoD;YACpD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,mBAAmB,EAAE,CAAC;YACzD,IAAI,QAAQ,EAAE,CAAC;gBACb,SAAS,EAAE,uBAAuB,CAAC;oBACjC,mBAAmB;oBACnB,aAAa;oBACb,MAAM,EAAE,kBAAkB;iBAC3B,CAAC,CAAC;gBACH,SAAS,EAAE,yBAAyB,CAAC;oBACnC,mBAAmB;oBACnB,aAAa;oBACb,MAAM,EAAE,kBAAkB;iBAC3B,CAAC,CAAC;gBACH,MAAM,cAAc,GAAG,IAAA,0CAAqB,GAAE,CAAC;gBAC/C,OAAO,YAAY,CAAC;oBAClB,OAAO,EAAE,IAAI;oBACb,oBAAoB,EAAE,IAAI;oBAC1B,KAAK,EAAE,cAAc,EAAE,KAAK,IAAI,IAAA,gCAAgB,GAAE,CAAC,QAAQ,EAAE;oBAC7D,MAAM,EAAE,cAAc,EAAE,MAAM,IAAI,IAAA,gCAAgB,GAAE,CAAC,SAAS,EAAE;iBACjE,CAAC,CAAC;YACL,CAAC;YAED,IAAI,QAAQ,EAAE,CAAC;gBACb,SAAS,EAAE,uBAAuB,CAAC;oBACjC,mBAAmB;oBACnB,aAAa;oBACb,MAAM,EAAE,cAAc;iBACvB,CAAC,CAAC;gBACH,SAAS,EAAE,sBAAsB,CAAC;oBAChC,mBAAmB;oBACnB,aAAa;oBACb,MAAM,EAAE,cAAc;oBACtB,aAAa,EAAE,eAAe;iBAC/B,CAAC,CAAC;gBACH,OAAO,YAAY,CAAC;oBAClB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,gBAAgB;oBACvB,OAAO,EACL,oFAAoF;iBACvF,CAAC,CAAC;YACL,CAAC;YAED,SAAS,EAAE,KAAK,CAAC,mBAAmB,EAAE;gBACpC,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,yBAAa;aACvB,CAAC,CAAC;YACH,SAAS,EAAE,uBAAuB,CAAC;gBACjC,mBAAmB;gBACnB,aAAa;gBACb,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAC;YACH,SAAS,EAAE,4BAA4B,CAAC;gBACtC,mBAAmB;gBACnB,aAAa;gBACb,aAAa,EAAE,QAAQ;gBACvB,mBAAmB,EAAE,aAAa;aACnC,CAAC,CAAC;YAEH,uEAAuE;YACvE,qEAAqE;YACrE,wEAAwE;YACxE,sEAAsE;YACtE,MAAM,EAAE,SAAS,EAAE,GAAG,wDAAa,yBAAyB,GAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC;gBAC7B,SAAS,EAAE,qBAAqB;gBAChC,SAAS;gBACT,mBAAmB;gBACnB,aAAa;gBACb,SAAS;aACV,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ;oBACnC,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,IAAA,kDAAyB,EAAC,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC;gBACzD,SAAS,EAAE,sBAAsB,CAAC;oBAChC,mBAAmB;oBACnB,aAAa;oBACb,MAAM,EAAE,QAAQ;oBAChB,aAAa;iBACd,CAAC,CAAC;gBACH,SAAS,EAAE,KAAK,CAAC,kBAAkB,EAAE;oBACnC,MAAM,EAAE,KAAK;oBACb,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;iBACpD,CAAC,CAAC;gBACH,OAAO,YAAY,CAAC;oBAClB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc;oBACnD,OAAO,EAAE,MAAM,CAAC,QAAQ;wBACtB,CAAC,CAAC,qFAAqF;wBACvF,CAAC,CAAC,4EAA4E;iBACjF,CAAC,CAAC;YACL,CAAC;YAED,2DAA2D;YAC3D,SAAS,EAAE,YAAY,EAAE,CAAC;YAC1B,SAAS,EAAE,KAAK,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3D,SAAS,EAAE,yBAAyB,CAAC;gBACnC,mBAAmB;gBACnB,aAAa;gBACb,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAC;YAEH,MAAM,cAAc,GAAG,IAAA,0CAAqB,GAAE,CAAC;YAC/C,OAAO,YAAY,CAAC;gBAClB,OAAO,EAAE,IAAI;gBACb,KAAK,EACH,MAAM,CAAC,KAAK;oBACZ,cAAc,EAAE,KAAK;oBACrB,IAAA,gCAAgB,GAAE,CAAC,QAAQ,EAAE;gBAC/B,MAAM,EAAE,cAAc,EAAE,MAAM,IAAI,IAAA,gCAAgB,GAAE,CAAC,SAAS,EAAE;aACjE,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;YACnC,SAAS,EAAE,sBAAsB,CAAC;gBAChC,mBAAmB;gBACnB,aAAa;gBACb,MAAM,EAAE,QAAQ;gBAChB,aAAa,EAAE,IAAA,kDAAyB,EAAC,GAAG,CAAC;aAC9C,CAAC,CAAC;YACH,OAAO,aAAa,CAClB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,EACnD,cAAc,CACf,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,YAAY,CACV,GAAG,EACH,OAAO,EACP,8bAA8b,EAC9b,EAAE,EACF,YAAY,CACb,CAAC;IAEF,YAAY,CACV,GAAG,EACH,QAAQ,EACR,kEAAkE,EAClE,EAAE,EACF,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,IAAA,gCAAgB,GAAE,CAAC;YACzC,MAAM,cAAc,GAAG,IAAA,0CAAqB,GAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,cAAc,EAAE,KAAK,IAAI,aAAa,CAAC,QAAQ,EAAE,CAAC;YAChE,MAAM,WAAW,GACf,cAAc,EAAE,KAAK,IAAI,aAAa,CAAC,YAAY,EAAE,CAAC;YACxD,MAAM,aAAa,GAAG,cAAc,EAAE,cAAc,IAAI,WAAW,CAAC;YACpE,IAAI,aAAa,EAAE,CAAC;gBAClB,iBAAiB,EAAE,CAAC,aAAa,CAAC,CAAC;YACrC,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,WAAW,CAAC,MAAM,CAAC;oBACvB,KAAK,EAAE,WAAW;oBAClB,oBAAoB,EAAE,KAAK;iBAC5B,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,WAAW,CAAC,MAAM,EAAE,CAAC;YAC7B,CAAC;YACD,SAAS,EAAE,KAAK,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAClD,OAAO,YAAY,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;YACpC,OAAO,aAAa,CAClB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EACpD,eAAe,CAChB,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,YAAY,CACV,GAAG,EACH,aAAa,EACb,uJAAuJ,EACvJ;QACE,yEAAyE;QACzE,mDAAmD;QACnD,QAAQ,EAAE,MAAC;aACR,OAAO,EAAE;aACT,QAAQ,EAAE;aACV,QAAQ,CAAC,mDAAmD,CAAC;KACjE,EACD,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,mBAAmB,EAAE,CAAC;YACxD,MAAM,EAAE,GAAG,IAAA,gCAAgB,GAAE,CAAC;YAC9B,MAAM,cAAc,GAAG,IAAA,0CAAqB,GAAE,CAAC;YAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,YAAY,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;YAChD,CAAC;YACD,OAAO,YAAY,CAAC;gBAClB,aAAa,EAAE,IAAI;gBACnB,KAAK,EAAE,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,EAAE;gBAC7C,MAAM,EAAE,cAAc,EAAE,MAAM,IAAI,EAAE,CAAC,SAAS,EAAE;aACjD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;YACzC,OAAO,aAAa,CAClB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,EAC1D,eAAe,CAChB,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/mcp/branding.d.ts

@@ -1,4 +0,0 @@
-export declare const RIVET_WEBSITE_URL = "https://rivet.design/";
-export declare const RIVET_ICON_PATH = "/dashboard/assets/favicon.png";
-export declare const getRivetIconUrl: (baseUrl: string | URL) => string;
-//# sourceMappingURL=branding.d.ts.map

package/dist/mcp/branding.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"branding.d.ts","sourceRoot":"","sources":["../../src/mcp/branding.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,iBAAiB,0BAA0B,CAAC;AACzD,eAAO,MAAM,eAAe,kCAAkC,CAAC;AAE/D,eAAO,MAAM,eAAe,GAAI,SAAS,MAAM,GAAG,GAAG,KAAG,MAChB,CAAC"}

package/dist/mcp/branding.js

@@ -1,8 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getRivetIconUrl = exports.RIVET_ICON_PATH = exports.RIVET_WEBSITE_URL = void 0;
-exports.RIVET_WEBSITE_URL = 'https://rivet.design/';
-exports.RIVET_ICON_PATH = '/dashboard/assets/favicon.png';
-const getRivetIconUrl = (baseUrl) => new URL(exports.RIVET_ICON_PATH, baseUrl).href;
-exports.getRivetIconUrl = getRivetIconUrl;
-//# sourceMappingURL=branding.js.map

package/dist/mcp/branding.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"branding.js","sourceRoot":"","sources":["../../src/mcp/branding.ts"],"names":[],"mappings":";;;AAAa,QAAA,iBAAiB,GAAG,uBAAuB,CAAC;AAC5C,QAAA,eAAe,GAAG,+BAA+B,CAAC;AAExD,MAAM,eAAe,GAAG,CAAC,OAAqB,EAAU,EAAE,CAC/D,IAAI,GAAG,CAAC,uBAAe,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;AAD5B,QAAA,eAAe,mBACa"}

package/dist/mcp/hostedServer.d.ts

@@ -1,27 +0,0 @@
-import { TelemetryService } from '../services/TelemetryService';
-import type { RivetMcpHandle } from './types';
-export type HostedRivetMcpOptions = {
-    proxyUrl: string;
-    /**
-     * Public origin clients reach this server on. Used for client-facing assets
-     * like the favicon so they match the OAuth `logo_uri`, which is also built
-     * from the public request origin. Defaults to `proxyUrl` when the public
-     * origin and the API proxy origin are the same.
-     */
-    publicBaseUrl?: string | URL;
-    mcpEditor?: string;
-    revokeBearerToken?: (token: string) => void;
-    /**
-     * Telemetry shared across stateless per-request handles. When provided, this
-     * handle reuses it and does NOT shut it down (the caller owns its lifecycle);
-     * otherwise the handle creates and owns its own instance.
-     */
-    telemetry?: TelemetryService;
-};
-/**
- * Builds the hosted MCP surface. Hosted proxy processes do not have the user's
- * filesystem or dev server, so this intentionally registers only identity and
- * cloud-safe integration tools.
- */
-export declare const createHostedRivetMcp: (options: HostedRivetMcpOptions) => RivetMcpHandle;
-//# sourceMappingURL=hostedServer.d.ts.map

package/dist/mcp/hostedServer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"hostedServer.d.ts","sourceRoot":"","sources":["../../src/mcp/hostedServer.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAShE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE9C,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,GAAG,GAAG,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5C;;;;OAIG;IACH,SAAS,CAAC,EAAE,gBAAgB,CAAC;CAC9B,CAAC;AAkBF;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,GAC/B,SAAS,qBAAqB,KAC7B,cA6CF,CAAC"}

package/dist/mcp/hostedServer.js

@@ -1,71 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createHostedRivetMcp = void 0;
-const mcp_js_1 = require("@modelcontextprotocol/sdk/server/mcp.js");
-const AuthService_1 = require("../services/AuthService");
-const IntegrationsClient_1 = require("../services/IntegrationsClient");
-const TelemetryService_1 = require("../services/TelemetryService");
-const tools_1 = require("./auth/tools");
-const branding_1 = require("./branding");
-const instructions_1 = require("./instructions");
-const tools_2 = require("./integrations/tools");
-/** Builds the MCP implementation metadata shown by clients during setup. */
-const buildHostedRivetMcpServerInfo = (iconBaseUrl) => ({
-    name: 'rivet',
-    title: 'Rivet',
-    version: '0.1.0',
-    websiteUrl: branding_1.RIVET_WEBSITE_URL,
-    icons: [
-        {
-            src: (0, branding_1.getRivetIconUrl)(iconBaseUrl),
-            mimeType: 'image/png',
-        },
-    ],
-});
-/**
- * Builds the hosted MCP surface. Hosted proxy processes do not have the user's
- * filesystem or dev server, so this intentionally registers only identity and
- * cloud-safe integration tools.
- */
-const createHostedRivetMcp = (options) => {
-    const authService = new AuthService_1.AuthService(options.proxyUrl);
-    const integrationsClient = new IntegrationsClient_1.IntegrationsClient({
-        proxyUrl: options.proxyUrl,
-        authService,
-    });
-    const ownsTelemetry = !options.telemetry;
-    const telemetry = options.telemetry ??
-        new TelemetryService_1.TelemetryService({
-            enabled: true,
-            source: 'mcp',
-            editor: options.mcpEditor,
-        });
-    const requireAuth = (0, tools_1.createAuthGuard)(authService);
-    const mcp = new mcp_js_1.McpServer(buildHostedRivetMcpServerInfo(options.publicBaseUrl ?? options.proxyUrl), {
-        capabilities: { tools: {} },
-        // Hosted handles are stateless per request and OAuth is proxy-delegated,
-        // so we can't read the user's auth state at build time — tell the agent
-        // to check `auth_status` before acting.
-        instructions: (0, instructions_1.buildRivetMcpInstructions)('unknown'),
-    });
-    const guardedMcp = (0, tools_1.withAuthGuard)(mcp, requireAuth);
-    (0, tools_1.registerAuthTools)(mcp, {
-        authService,
-        telemetry,
-        mcpEditor: options.mcpEditor,
-        revokeBearerToken: options.revokeBearerToken,
-        mode: 'hosted',
-    });
-    (0, tools_2.registerIntegrationsTools)(guardedMcp, { integrationsClient });
-    return {
-        mcp,
-        closeActiveSession: async () => undefined,
-        shutdown: async () => {
-            if (ownsTelemetry) {
-                await telemetry.shutdown();
-            }
-        },
-    };
-};
-exports.createHostedRivetMcp = createHostedRivetMcp;
-//# sourceMappingURL=hostedServer.js.map

package/dist/mcp/hostedServer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hostedServer.js","sourceRoot":"","sources":["../../src/mcp/hostedServer.ts"],"names":[],"mappings":";;;AAAA,oEAAoE;AAEpE,yDAAsD;AACtD,uEAAoE;AACpE,mEAAgE;AAChE,wCAIsB;AACtB,yCAAgE;AAChE,iDAA2D;AAC3D,gDAAiE;AAsBjE,4EAA4E;AAC5E,MAAM,6BAA6B,GAAG,CACpC,WAAyB,EACT,EAAE,CAAC,CAAC;IACpB,IAAI,EAAE,OAAO;IACb,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,OAAO;IAChB,UAAU,EAAE,4BAAiB;IAC7B,KAAK,EAAE;QACL;YACE,GAAG,EAAE,IAAA,0BAAe,EAAC,WAAW,CAAC;YACjC,QAAQ,EAAE,WAAW;SACtB;KACF;CACF,CAAC,CAAC;AAEH;;;;GAIG;AACI,MAAM,oBAAoB,GAAG,CAClC,OAA8B,EACd,EAAE;IAClB,MAAM,WAAW,GAAG,IAAI,yBAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,kBAAkB,GAAG,IAAI,uCAAkB,CAAC;QAChD,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,WAAW;KACZ,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;IACzC,MAAM,SAAS,GACb,OAAO,CAAC,SAAS;QACjB,IAAI,mCAAgB,CAAC;YACnB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,OAAO,CAAC,SAAS;SAC1B,CAAC,CAAC;IACL,MAAM,WAAW,GAAG,IAAA,uBAAe,EAAC,WAAW,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,kBAAS,CACvB,6BAA6B,CAAC,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,QAAQ,CAAC,EACxE;QACE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAC3B,yEAAyE;QACzE,wEAAwE;QACxE,wCAAwC;QACxC,YAAY,EAAE,IAAA,wCAAyB,EAAC,SAAS,CAAC;KACnD,CACF,CAAC;IACF,MAAM,UAAU,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAEnD,IAAA,yBAAiB,EAAC,GAAG,EAAE;QACrB,WAAW;QACX,SAAS;QACT,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,IAAI,EAAE,QAAQ;KACf,CAAC,CAAC;IACH,IAAA,iCAAyB,EAAC,UAAU,EAAE,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAE9D,OAAO;QACL,GAAG;QACH,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;QACzC,QAAQ,EAAE,KAAK,IAAI,EAAE;YACnB,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,SAAS,CAAC,QAAQ,EAAE,CAAC;YAC7B,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AA/CW,QAAA,oBAAoB,wBA+C/B"}

package/dist/mcp/httpServer.d.ts

@@ -1,63 +0,0 @@
-import type { Server } from 'http';
-import express, { type Request } from 'express';
-import { RivetOAuthServerProvider } from './auth/httpOAuthProvider';
-import type { RivetMcpHandle } from './types';
-export declare const DEFAULT_MCP_HTTP_PORT = 5891;
-export declare const MCP_HTTP_PATH = "/mcp";
-export declare const OAUTH_CALLBACK_PATH = "/mcp/oauth/callback";
-export declare const OAUTH_CALLBACK_COMPLETE_PATH = "/oauth/callback/complete";
-export type McpHttpAppOptions = {
-    /** Public base URL of this server (issuer), e.g. http://127.0.0.1:5891 */
-    baseUrl: URL;
-    /** Resolves the public base URL for hosted deployments behind a proxy. */
-    resolveBaseUrl?: (req: Request) => URL | null;
-    provider: RivetOAuthServerProvider;
-    /** Builds the MCP server lazily on the first initialize request. */
-    createMcp: () => RivetMcpHandle;
-    /** Test hook for exercising idle client cleanup without waiting minutes. */
-    clientIdleTimeoutMs?: number;
-    /** Secret-bearing localhost bridge URL for optional hosted-to-stdio sync. */
-    localAuthBridgeUrl?: string;
-    /**
-     * Runs each `/mcp` request through its own session-less StreamableHTTP
-     * transport instead of the in-memory session map. Required for hosted
-     * deployments on ephemeral/restartable infrastructure; the local stdio-bridge
-     * server leaves this off to keep its stateful per-session behavior.
-     */
-    stateless?: boolean;
-};
-type McpHttpProcess = {
-    on: (event: 'SIGTERM' | 'SIGINT' | 'beforeExit', listener: () => void | Promise<void>) => unknown;
-    exit: (code?: number) => void;
-};
-/** Returns the public MCP base URL for the active HTTP request. */
-export declare const getCurrentMcpHttpBaseUrl: () => URL | undefined;
-/** Registers local HTTP MCP process cleanup around all active per-user handles. */
-export declare const registerMcpHttpProcessHandlers: (params: {
-    server: Server;
-    shutdownMcpClients: () => Promise<void>;
-    processLike?: McpHttpProcess;
-}) => void;
-/**
- * Creates the Express app exposing the Rivet MCP server over streamable HTTP
- * with native MCP OAuth support:
- * - `/.well-known/oauth-protected-resource/mcp` + `/.well-known/oauth-authorization-server`
- * - `/authorize`, `/token`, `/register` (dynamic client registration)
- * - `/` and `/mcp/oauth/callback` browser landing pages for the proxy Google flow
- * - `/mcp` streamable HTTP endpoint guarded by bearer auth (401 +
- *   WWW-Authenticate with resource metadata when unauthenticated)
- */
-export declare const createMcpHttpApp: (options: McpHttpAppOptions) => express.Express;
-export type StartMCPServerHttpOptions = {
-    port?: number;
-    mcpEditor?: string;
-};
-/**
- * Starts the Rivet MCP server over streamable HTTP on localhost so MCP
- * clients that implement the MCP OAuth authorization spec (Cursor, Claude,
- * Codex) can offer their native "Connect" sign-in flow. Completed logins
- * persist credentials via ConfigManager, the same store the stdio mode uses.
- */
-export declare const startMCPServerHttp: (options?: StartMCPServerHttpOptions) => Promise<Server>;
-export {};
-//# sourceMappingURL=httpServer.d.ts.map

package/dist/mcp/httpServer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"httpServer.d.ts","sourceRoot":"","sources":["../../src/mcp/httpServer.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AACnC,OAAO,OAAO,EAAE,EAAE,KAAK,OAAO,EAAiB,MAAM,SAAS,CAAC;AAQ/D,OAAO,EAEL,wBAAwB,EACzB,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAW9C,eAAO,MAAM,qBAAqB,OAAO,CAAC;AAC1C,eAAO,MAAM,aAAa,SAAS,CAAC;AACpC,eAAO,MAAM,mBAAmB,wBAAwB,CAAC;AACzD,eAAO,MAAM,4BAA4B,6BAA6B,CAAC;AA+GvE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,0EAA0E;IAC1E,OAAO,EAAE,GAAG,CAAC;IACb,0EAA0E;IAC1E,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,GAAG,GAAG,IAAI,CAAC;IAC9C,QAAQ,EAAE,wBAAwB,CAAC;IACnC,oEAAoE;IACpE,SAAS,EAAE,MAAM,cAAc,CAAC;IAChC,4EAA4E;IAC5E,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,6EAA6E;IAC7E,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAWF,KAAK,cAAc,GAAG;IACpB,EAAE,EAAE,CACF,KAAK,EAAE,SAAS,GAAG,QAAQ,GAAG,YAAY,EAC1C,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KACjC,OAAO,CAAC;IACb,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CAC/B,CAAC;AASF,mEAAmE;AACnE,eAAO,MAAM,wBAAwB,QAAO,GAAG,GAAG,SAChB,CAAC;AAwFnC,mFAAmF;AACnF,eAAO,MAAM,8BAA8B,GAAI,QAAQ;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,WAAW,CAAC,EAAE,cAAc,CAAC;CAC9B,KAAG,IA2BH,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,GAAI,SAAS,iBAAiB,KAAG,OAAO,CAAC,OAoXrE,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,GAC7B,UAAS,yBAA8B,KACtC,OAAO,CAAC,MAAM,CAkDhB,CAAC"}