take-blip-mcp 0.1.0

package/dist/blip-client.js

@@ -0,0 +1,187 @@
+/**
+ * Thin client over the Blip HTTP/Command API.
+ *
+ * Responsibilities:
+ *   - Build the command/message envelopes and the `Authorization: Key ...` header.
+ *   - Enforce a per-request timeout (AbortController).
+ *   - Retry with exponential backoff + jitter on 429 / 5xx / network errors.
+ *   - Turn `status: "failure"` command responses into a clear thrown error.
+ *
+ * It never logs the authorization header, and any text it surfaces from the
+ * wire is run through redactSecrets first.
+ */
+import { randomUUID } from "node:crypto";
+import { BlipCommandError, BlipHttpError, BlipTimeoutError, redactSecrets, } from "./errors.js";
+import { silentLogger } from "./logger.js";
+const MAX_BACKOFF_MS = 8_000;
+const MAX_RETRY_AFTER_MS = 30_000;
+export class BlipClient {
+    baseUrl;
+    authorization;
+    timeoutMs;
+    maxRetries;
+    fetchImpl;
+    sleep;
+    logger;
+    secrets;
+    constructor(options) {
+        const resolvedFetch = options.fetchImpl ?? globalThis.fetch;
+        if (typeof resolvedFetch !== "function") {
+            throw new Error("global fetch is not available. blip-mcp requires Node.js 18+ (or pass fetchImpl).");
+        }
+        this.baseUrl = options.baseUrl.replace(/\/+$/, "");
+        this.authorization = options.authorization;
+        this.timeoutMs = options.timeoutMs ?? 30_000;
+        this.maxRetries = options.maxRetries ?? 3;
+        this.fetchImpl = resolvedFetch;
+        this.sleep = options.sleepImpl ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+        this.logger = options.logger ?? silentLogger;
+        this.secrets = [this.authorization, this.authorization.replace(/^key\s+/i, "")].filter((value) => value.length >= 4);
+    }
+    /** Send a command to `/commands` and return the response envelope. */
+    async sendCommand(params) {
+        const envelope = {
+            id: randomUUID(),
+            method: params.method,
+            uri: params.uri,
+        };
+        if (params.to !== undefined)
+            envelope["to"] = params.to;
+        if (params.type !== undefined)
+            envelope["type"] = params.type;
+        if (params.resource !== undefined)
+            envelope["resource"] = params.resource;
+        const response = await this.post("/commands", envelope);
+        const body = (await this.readJson(response));
+        const result = body ?? {};
+        if (result.status === "failure") {
+            throw new BlipCommandError({
+                code: result.reason?.code,
+                description: result.reason?.description,
+                method: params.method,
+                uri: params.uri,
+            });
+        }
+        return result;
+    }
+    /** Send a message to `/messages`. Blip replies 2xx with no useful body. */
+    async sendMessage(params) {
+        const id = randomUUID();
+        const envelope = {
+            id,
+            to: params.to,
+            type: params.type ?? "text/plain",
+            content: params.content,
+        };
+        const response = await this.post("/messages", envelope);
+        await this.drain(response);
+        return { status: "accepted", id };
+    }
+    // --- internals -------------------------------------------------------------
+    async post(path, payload) {
+        const url = `${this.baseUrl}${path}`;
+        const init = {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                Accept: "application/json",
+                Authorization: this.authorization,
+            },
+            body: JSON.stringify(payload),
+        };
+        let attempt = 0;
+        for (;;) {
+            try {
+                const response = await this.fetchWithTimeout(url, init);
+                if (response.ok)
+                    return response;
+                if (this.isRetryableStatus(response.status) && attempt < this.maxRetries) {
+                    const delay = this.backoffDelay(attempt, response);
+                    await this.drain(response);
+                    this.logger.warn(`HTTP ${response.status} on ${path}; retry ${attempt + 1}/${this.maxRetries} in ${delay}ms`);
+                    attempt += 1;
+                    await this.sleep(delay);
+                    continue;
+                }
+                throw new BlipHttpError(response.status, await this.errorExcerpt(response));
+            }
+            catch (err) {
+                if (err instanceof BlipHttpError)
+                    throw err;
+                const retryable = err instanceof BlipTimeoutError || this.isNetworkError(err);
+                if (retryable && attempt < this.maxRetries) {
+                    const delay = this.backoffDelay(attempt);
+                    const label = err instanceof Error ? err.name : "network error";
+                    this.logger.warn(`${label} on ${path}; retry ${attempt + 1}/${this.maxRetries} in ${delay}ms`);
+                    attempt += 1;
+                    await this.sleep(delay);
+                    continue;
+                }
+                throw err;
+            }
+        }
+    }
+    async fetchWithTimeout(url, init) {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), this.timeoutMs);
+        try {
+            return await this.fetchImpl(url, { ...init, signal: controller.signal });
+        }
+        catch (err) {
+            if (controller.signal.aborted)
+                throw new BlipTimeoutError(this.timeoutMs);
+            throw err;
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    isRetryableStatus(status) {
+        return status === 429 || (status >= 500 && status <= 599);
+    }
+    isNetworkError(err) {
+        // The fetch standard throws a TypeError for network-level failures.
+        return err instanceof TypeError;
+    }
+    backoffDelay(attempt, response) {
+        if (response) {
+            const retryAfter = response.headers.get("retry-after");
+            if (retryAfter !== null) {
+                const seconds = Number(retryAfter);
+                if (Number.isFinite(seconds) && seconds >= 0) {
+                    return Math.min(seconds * 1000, MAX_RETRY_AFTER_MS);
+                }
+            }
+        }
+        const base = 500 * 2 ** attempt;
+        const jitter = Math.random() * base * 0.25;
+        return Math.min(Math.round(base + jitter), MAX_BACKOFF_MS);
+    }
+    async readJson(response) {
+        const text = await this.safeText(response);
+        if (!text)
+            return undefined;
+        try {
+            return JSON.parse(text);
+        }
+        catch {
+            return { raw: redactSecrets(text, this.secrets) };
+        }
+    }
+    async errorExcerpt(response) {
+        const text = await this.safeText(response);
+        return redactSecrets(text.slice(0, 500), this.secrets);
+    }
+    async safeText(response) {
+        try {
+            return await response.text();
+        }
+        catch {
+            return "";
+        }
+    }
+    async drain(response) {
+        await this.safeText(response);
+    }
+}
+//# sourceMappingURL=blip-client.js.map

package/dist/blip-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blip-client.js","sourceRoot":"","sources":["../src/blip-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,aAAa,GACd,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA4C3C,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,MAAM,OAAO,UAAU;IACJ,OAAO,CAAS;IAChB,aAAa,CAAS;IACtB,SAAS,CAAS;IAClB,UAAU,CAAS;IACnB,SAAS,CAAY;IACrB,KAAK,CAAgC;IACrC,MAAM,CAAS;IACf,OAAO,CAAW;IAEnC,YAAY,OAA0B;QACpC,MAAM,aAAa,GAAG,OAAO,CAAC,SAAS,IAAK,UAAU,CAAC,KAA+B,CAAC;QACvF,IAAI,OAAO,aAAa,KAAK,UAAU,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,mFAAmF,CACpF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,aAAa,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9F,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,YAAY,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CACpF,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAC7B,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,WAAW,CAAC,MAAyB;QACzC,MAAM,QAAQ,GAA4B;YACxC,EAAE,EAAE,UAAU,EAAE;YAChB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,GAAG,EAAE,MAAM,CAAC,GAAG;SAChB,CAAC;QACF,IAAI,MAAM,CAAC,EAAE,KAAK,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC;QACxD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;QAC9D,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;YAAE,QAAQ,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;QAE1E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAoC,CAAC;QAChF,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QAE1B,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,gBAAgB,CAAC;gBACzB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI;gBACzB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW;gBACvC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,GAAG,EAAE,MAAM,CAAC,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,WAAW,CAAC,MAAyB;QACzC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG;YACf,EAAE;YACF,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,YAAY;YACjC,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACxD,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC3B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACpC,CAAC;IAED,8EAA8E;IAEtE,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,OAAgB;QAC/C,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC;QACrC,MAAM,IAAI,GAAgB;YACxB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,kBAAkB;gBAC1B,aAAa,EAAE,IAAI,CAAC,aAAa;aAClC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CAAC;QAEF,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,SAAS,CAAC;YACR,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACxD,IAAI,QAAQ,CAAC,EAAE;oBAAE,OAAO,QAAQ,CAAC;gBAEjC,IAAI,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;oBACzE,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;oBACnD,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;oBAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,QAAQ,QAAQ,CAAC,MAAM,OAAO,IAAI,WAAW,OAAO,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,OAAO,KAAK,IAAI,CAC5F,CAAC;oBACF,OAAO,IAAI,CAAC,CAAC;oBACb,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACxB,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC9E,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,aAAa;oBAAE,MAAM,GAAG,CAAC;gBAC5C,MAAM,SAAS,GAAG,GAAG,YAAY,gBAAgB,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;gBAC9E,IAAI,SAAS,IAAI,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;oBAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;oBACzC,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC;oBAChE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,OAAO,IAAI,WAAW,OAAO,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,OAAO,KAAK,IAAI,CAAC,CAAC;oBAC/F,OAAO,IAAI,CAAC,CAAC;oBACb,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACxB,SAAS;gBACX,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,GAAW,EAAE,IAAiB;QAC3D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnE,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1E,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,MAAc;QACtC,OAAO,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG,CAAC,CAAC;IAC5D,CAAC;IAEO,cAAc,CAAC,GAAY;QACjC,oEAAoE;QACpE,OAAO,GAAG,YAAY,SAAS,CAAC;IAClC,CAAC;IAEO,YAAY,CAAC,OAAe,EAAE,QAAmB;QACvD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACvD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACxB,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;gBACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;oBAC7C,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,EAAE,kBAAkB,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,IAAI,OAAO,CAAC;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;QAC3C,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,EAAE,cAAc,CAAC,CAAC;IAC7D,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,QAAkB;QACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,GAAG,EAAE,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,QAAkB;QAC3C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC3C,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,QAAkB;QACvC,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,QAAkB;QACpC,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;CACF"}

package/dist/config.d.ts

@@ -0,0 +1,37 @@
+import type { LogLevel } from "./logger.js";
+export type CredentialMode = "authorization" | "identifier+key";
+/** A single named flow (Blip bot) with its own host + credentials. */
+export interface FlowCredential {
+    name: string;
+    baseUrl: string;
+    authorization: string;
+    credentialMode: CredentialMode;
+    contractId: string | undefined;
+}
+export interface BlipConfig {
+    /** Default flow host (mirror of flows[0]). */
+    baseUrl: string;
+    /** Default flow authorization (mirror of flows[0]). */
+    authorization: string;
+    credentialMode: CredentialMode;
+    contractId: string | undefined;
+    /** All configured flows; flows[0] is the default. */
+    flows: FlowCredential[];
+    defaultFlowName: string;
+    /** Base dir for everything blip-mcp discovers/writes (default .mcp-blip). */
+    dataDir: string;
+    /** Where blip_map_flow writes componentized docs (default <dataDir>/flows). */
+    flowsDir: string;
+    allowWrites: boolean;
+    timeoutMs: number;
+    maxRetries: number;
+    logLevel: LogLevel;
+}
+export declare function authToken(authorization: string): string;
+export declare function maskAuthorization(authorization: string): string;
+export declare function configSecrets(config: BlipConfig): string[];
+/** Resolve a flow by name (case-insensitive); falls back to the default flow. */
+export declare function resolveFlow(config: BlipConfig, name?: string): FlowCredential;
+export declare function loadConfig(env?: NodeJS.ProcessEnv): BlipConfig;
+export declare function describeConfig(config: BlipConfig): string;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,MAAM,cAAc,GAAG,eAAe,GAAG,gBAAgB,CAAC;AAEhE,sEAAsE;AACtE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,cAAc,CAAC;IAC/B,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED,MAAM,WAAW,UAAU;IACzB,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,cAAc,CAAC;IAC/B,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,qDAAqD;IACrD,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,OAAO,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,QAAQ,CAAC;CACpB;AA0CD,wBAAgB,SAAS,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,EAAE,CAO1D;AAED,iFAAiF;AACjF,wBAAgB,WAAW,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,cAAc,CAQ7E;AA8DD,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,UAAU,CA8D3E;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAiBzD"}

package/dist/config.js

@@ -0,0 +1,197 @@
+/**
+ * Environment-driven configuration for blip-mcp (multi-flow aware).
+ *
+ * Credentials come ONLY from environment variables. You can configure several
+ * "flows" (Blip bots): a default flow from the classic vars, plus numbered
+ * extra flows via BLIP_FLOW_<n>_NAME / _AUTHORIZATION / _CONTRACT_ID, etc.
+ */
+import { z } from "zod";
+import { BlipConfigError } from "./errors.js";
+const TRUTHY = new Set(["1", "true", "yes", "y", "on"]);
+const FALSY = new Set(["0", "false", "no", "n", "off", ""]);
+function parseBool(raw, fallback) {
+    if (raw === undefined)
+        return fallback;
+    const value = raw.trim().toLowerCase();
+    if (TRUTHY.has(value))
+        return true;
+    if (FALSY.has(value))
+        return false;
+    throw new BlipConfigError(`Invalid boolean for BLIP_ALLOW_WRITES: "${raw}". Use true/false.`);
+}
+/** Keep only env keys that have a non-empty, trimmed value. */
+function compact(env) {
+    const out = {};
+    for (const [key, value] of Object.entries(env)) {
+        if (typeof value === "string" && value.trim() !== "")
+            out[key] = value.trim();
+    }
+    return out;
+}
+const TuningSchema = z.object({
+    BLIP_BASE_URL: z.string().url().optional(),
+    BLIP_ALLOW_WRITES: z.string().optional(),
+    BLIP_REQUEST_TIMEOUT_MS: z.coerce.number().int().positive().max(600_000).optional(),
+    BLIP_MAX_RETRIES: z.coerce.number().int().min(0).max(10).optional(),
+    BLIP_LOG_LEVEL: z.enum(["error", "warn", "info", "debug"]).optional(),
+    BLIP_FLOWS_DIR: z.string().optional(),
+});
+function normalizeAuthorization(raw) {
+    const trimmed = raw.trim();
+    if (/^key\s+/i.test(trimmed))
+        return `Key ${trimmed.replace(/^key\s+/i, "")}`;
+    return `Key ${trimmed}`;
+}
+function computeAuthorization(identifier, accessKey) {
+    const token = Buffer.from(`${identifier}:${accessKey}`, "utf8").toString("base64");
+    return `Key ${token}`;
+}
+export function authToken(authorization) {
+    return authorization.replace(/^key\s+/i, "").trim();
+}
+export function maskAuthorization(authorization) {
+    return authorization.replace(/^key\s+/i, "") ? "Key ****" : "(empty)";
+}
+export function configSecrets(config) {
+    const out = new Set();
+    for (const flow of config.flows) {
+        out.add(flow.authorization);
+        out.add(authToken(flow.authorization));
+    }
+    return [...out].filter((value) => value.length >= 4);
+}
+/** Resolve a flow by name (case-insensitive); falls back to the default flow. */
+export function resolveFlow(config, name) {
+    if (!name)
+        return config.flows[0];
+    const match = config.flows.find((f) => f.name.toLowerCase() === name.toLowerCase());
+    if (!match) {
+        const names = config.flows.map((f) => f.name).join(", ");
+        throw new BlipConfigError(`Unknown flow "${name}". Configured flows: ${names}.`);
+    }
+    return match;
+}
+function buildFlow(inputs, fallbackBaseUrl) {
+    let authorization;
+    let credentialMode;
+    if (inputs.authorization) {
+        authorization = normalizeAuthorization(inputs.authorization);
+        credentialMode = "authorization";
+    }
+    else if (inputs.botIdentifier && inputs.accessKey) {
+        authorization = computeAuthorization(inputs.botIdentifier, inputs.accessKey);
+        credentialMode = "identifier+key";
+    }
+    else {
+        throw new BlipConfigError(`Flow "${inputs.name}": missing credentials. Provide an Authorization header or identifier+access key.`);
+    }
+    let baseUrl;
+    if (inputs.baseUrl)
+        baseUrl = inputs.baseUrl;
+    else if (inputs.contractId)
+        baseUrl = `https://${inputs.contractId}.http.msging.net`;
+    else if (fallbackBaseUrl)
+        baseUrl = fallbackBaseUrl;
+    else
+        baseUrl = "https://http.msging.net";
+    baseUrl = baseUrl.replace(/\/+$/, "");
+    return { name: inputs.name, baseUrl, authorization, credentialMode, contractId: inputs.contractId };
+}
+/** Discover extra flows declared as BLIP_FLOW_<n>_*. */
+function parseExtraFlows(raw, fallbackBaseUrl) {
+    const indices = new Set();
+    for (const key of Object.keys(raw)) {
+        const m = /^BLIP_FLOW_(\d+)_[A-Z_]+$/.exec(key);
+        if (m)
+            indices.add(Number(m[1]));
+    }
+    const flows = [];
+    for (const n of [...indices].sort((a, b) => a - b)) {
+        const p = `BLIP_FLOW_${n}_`;
+        const name = raw[`${p}NAME`] ?? `flow${n}`;
+        flows.push(buildFlow({
+            name,
+            authorization: raw[`${p}AUTHORIZATION`],
+            botIdentifier: raw[`${p}BOT_IDENTIFIER`],
+            accessKey: raw[`${p}ACCESS_KEY`],
+            contractId: raw[`${p}CONTRACT_ID`] ?? raw[`${p}SHORTNAME`],
+            baseUrl: raw[`${p}BASE_URL`],
+        }, fallbackBaseUrl));
+    }
+    return flows;
+}
+export function loadConfig(env = process.env) {
+    const raw = compact(env);
+    let tuning;
+    try {
+        tuning = TuningSchema.parse(raw);
+    }
+    catch (err) {
+        if (err instanceof z.ZodError) {
+            const issues = err.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
+            throw new BlipConfigError(`Invalid environment configuration: ${issues}`);
+        }
+        throw err;
+    }
+    const hasDefaultCreds = Boolean(raw["BLIP_AUTHORIZATION"]) ||
+        Boolean(raw["BLIP_BOT_IDENTIFIER"] && raw["BLIP_ACCESS_KEY"]);
+    if (!hasDefaultCreds) {
+        throw new BlipConfigError([
+            "Missing Blip credentials. Provide ONE of:",
+            '  • BLIP_AUTHORIZATION="Key <token>"  (copy from the Blip portal), or',
+            "  • BLIP_BOT_IDENTIFIER + BLIP_ACCESS_KEY.",
+            "See the README for where to find these in the portal.",
+        ].join("\n"));
+    }
+    const defaultFlow = buildFlow({
+        name: raw["BLIP_FLOW_NAME"] ?? "default",
+        authorization: raw["BLIP_AUTHORIZATION"],
+        botIdentifier: raw["BLIP_BOT_IDENTIFIER"],
+        accessKey: raw["BLIP_ACCESS_KEY"],
+        contractId: raw["BLIP_CONTRACT_ID"] ?? raw["BLIP_SHORTNAME"],
+        baseUrl: tuning.BLIP_BASE_URL,
+    });
+    const extraFlows = parseExtraFlows(raw, defaultFlow.baseUrl);
+    const flows = [defaultFlow, ...extraFlows];
+    const seen = new Set();
+    for (const f of flows) {
+        const key = f.name.toLowerCase();
+        if (seen.has(key))
+            throw new BlipConfigError(`Duplicate flow name "${f.name}".`);
+        seen.add(key);
+    }
+    const dataDir = raw["BLIP_DATA_DIR"] ?? ".mcp-blip";
+    return {
+        baseUrl: defaultFlow.baseUrl,
+        authorization: defaultFlow.authorization,
+        credentialMode: defaultFlow.credentialMode,
+        contractId: defaultFlow.contractId,
+        flows,
+        defaultFlowName: defaultFlow.name,
+        dataDir,
+        flowsDir: raw["BLIP_FLOWS_DIR"] ?? `${dataDir}/flows`,
+        allowWrites: parseBool(raw["BLIP_ALLOW_WRITES"], false),
+        timeoutMs: tuning.BLIP_REQUEST_TIMEOUT_MS ?? 30_000,
+        maxRetries: tuning.BLIP_MAX_RETRIES ?? 3,
+        logLevel: tuning.BLIP_LOG_LEVEL ?? "info",
+    };
+}
+export function describeConfig(config) {
+    const flowList = config.flows
+        .map((f, i) => `      ${i === 0 ? "*" : "-"} ${f.name}  (${maskAuthorization(f.authorization)}, ${f.baseUrl})`)
+        .join("\n");
+    return [
+        `  default flow    : ${config.defaultFlowName}`,
+        `  base URL        : ${config.baseUrl}`,
+        `  authorization   : ${maskAuthorization(config.authorization)}  (mode: ${config.credentialMode})`,
+        `  flows (${config.flows.length}):`,
+        flowList,
+        `  data dir        : ${config.dataDir}`,
+        `  flows dir       : ${config.flowsDir}`,
+        `  writes          : ${config.allowWrites ? "ENABLED — side effects allowed" : "read-only (default)"}`,
+        `  request timeout : ${config.timeoutMs} ms`,
+        `  max retries     : ${config.maxRetries}`,
+        `  log level       : ${config.logLevel}`,
+    ].join("\n");
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAkC9C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;AACxD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;AAE5D,SAAS,SAAS,CAAC,GAAuB,EAAE,QAAiB;IAC3D,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACvC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,IAAI,eAAe,CAAC,2CAA2C,GAAG,oBAAoB,CAAC,CAAC;AAChG,CAAC;AAED,+DAA+D;AAC/D,SAAS,OAAO,CAAC,GAAsB;IACrC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC1C,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,uBAAuB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE;IACnF,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnE,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH,SAAS,sBAAsB,CAAC,GAAW;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC;IAC9E,OAAO,OAAO,OAAO,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,oBAAoB,CAAC,UAAkB,EAAE,SAAiB;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,IAAI,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnF,OAAO,OAAO,KAAK,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,aAAqB;IAC7C,OAAO,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,aAAqB;IACrD,OAAO,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAkB;IAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC5B,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,WAAW,CAAC,MAAkB,EAAE,IAAa;IAC3D,IAAI,CAAC,IAAI;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACpF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,IAAI,eAAe,CAAC,iBAAiB,IAAI,wBAAwB,KAAK,GAAG,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAWD,SAAS,SAAS,CAAC,MAAkB,EAAE,eAAwB;IAC7D,IAAI,aAAqB,CAAC;IAC1B,IAAI,cAA8B,CAAC;IACnC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,aAAa,GAAG,sBAAsB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC7D,cAAc,GAAG,eAAe,CAAC;IACnC,CAAC;SAAM,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACpD,aAAa,GAAG,oBAAoB,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7E,cAAc,GAAG,gBAAgB,CAAC;IACpC,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,eAAe,CACvB,SAAS,MAAM,CAAC,IAAI,mFAAmF,CACxG,CAAC;IACJ,CAAC;IACD,IAAI,OAAe,CAAC;IACpB,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;SACxC,IAAI,MAAM,CAAC,UAAU;QAAE,OAAO,GAAG,WAAW,MAAM,CAAC,UAAU,kBAAkB,CAAC;SAChF,IAAI,eAAe;QAAE,OAAO,GAAG,eAAe,CAAC;;QAC/C,OAAO,GAAG,yBAAyB,CAAC;IACzC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;AACtG,CAAC;AAED,wDAAwD;AACxD,SAAS,eAAe,CAAC,GAA2B,EAAE,eAAuB;IAC3E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACnD,MAAM,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC;QAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,EAAE,CAAC;QAC3C,KAAK,CAAC,IAAI,CACR,SAAS,CACP;YACE,IAAI;YACJ,aAAa,EAAE,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC;YACvC,aAAa,EAAE,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACxC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC;YAChC,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC;YAC1D,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC;SAC7B,EACD,eAAe,CAChB,CACF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,MAAoC,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrF,MAAM,IAAI,eAAe,CAAC,sCAAsC,MAAM,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,eAAe,GACnB,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,eAAe,CACvB;YACE,2CAA2C;YAC3C,uEAAuE;YACvE,4CAA4C;YAC5C,uDAAuD;SACxD,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,SAAS,CAAC;QAC5B,IAAI,EAAE,GAAG,CAAC,gBAAgB,CAAC,IAAI,SAAS;QACxC,aAAa,EAAE,GAAG,CAAC,oBAAoB,CAAC;QACxC,aAAa,EAAE,GAAG,CAAC,qBAAqB,CAAC;QACzC,SAAS,EAAE,GAAG,CAAC,iBAAiB,CAAC;QACjC,UAAU,EAAE,GAAG,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,gBAAgB,CAAC;QAC5D,OAAO,EAAE,MAAM,CAAC,aAAa;KAC9B,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,CAAC,WAAW,EAAE,GAAG,UAAU,CAAC,CAAC;IAE3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,wBAAwB,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACjF,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,eAAe,CAAC,IAAI,WAAW,CAAC;IAEpD,OAAO;QACL,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,aAAa,EAAE,WAAW,CAAC,aAAa;QACxC,cAAc,EAAE,WAAW,CAAC,cAAc;QAC1C,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,KAAK;QACL,eAAe,EAAE,WAAW,CAAC,IAAI;QACjC,OAAO;QACP,QAAQ,EAAE,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,OAAO,QAAQ;QACrD,WAAW,EAAE,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,KAAK,CAAC;QACvD,SAAS,EAAE,MAAM,CAAC,uBAAuB,IAAI,MAAM;QACnD,UAAU,EAAE,MAAM,CAAC,gBAAgB,IAAI,CAAC;QACxC,QAAQ,EAAE,MAAM,CAAC,cAAc,IAAI,MAAM;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK;SAC1B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,MAAM,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,CAAC;SAC9G,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO;QACL,uBAAuB,MAAM,CAAC,eAAe,EAAE;QAC/C,uBAAuB,MAAM,CAAC,OAAO,EAAE;QACvC,uBAAuB,iBAAiB,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,MAAM,CAAC,cAAc,GAAG;QAClG,YAAY,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI;QACnC,QAAQ;QACR,uBAAuB,MAAM,CAAC,OAAO,EAAE;QACvC,uBAAuB,MAAM,CAAC,QAAQ,EAAE;QACxC,uBAAuB,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,qBAAqB,EAAE;QACtG,uBAAuB,MAAM,CAAC,SAAS,KAAK;QAC5C,uBAAuB,MAAM,CAAC,UAAU,EAAE;QAC1C,uBAAuB,MAAM,CAAC,QAAQ,EAAE;KACzC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/env-file.d.ts

@@ -0,0 +1,16 @@
+/** Parse `KEY=value` lines, honoring quotes and stripping inline comments. */
+export declare function parseEnvFile(content: string): Record<string, string>;
+/**
+ * Apply an env file into `target` (default process.env). Existing keys are kept
+ * unless `override` is true. Returns the list of keys that were applied.
+ */
+export declare function loadEnvFile(filePath: string, target?: NodeJS.ProcessEnv, options?: {
+    override?: boolean;
+}): string[];
+/**
+ * Decide which env file to auto-load:
+ *   - BLIP_ENV_FILE if set (even to a path that doesn't exist → no load), else
+ *   - ./blip.env if it exists.
+ */
+export declare function resolveEnvFile(env?: NodeJS.ProcessEnv): string | undefined;
+//# sourceMappingURL=env-file.d.ts.map

package/dist/env-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-file.d.ts","sourceRoot":"","sources":["../src/env-file.ts"],"names":[],"mappings":"AAaA,8EAA8E;AAC9E,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAqBpE;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACzB,QAAQ,EAAE,MAAM,EAChB,MAAM,GAAE,MAAM,CAAC,UAAwB,EACvC,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAO,GACnC,MAAM,EAAE,CAWV;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,SAAS,CAMvF"}

package/dist/env-file.js

@@ -0,0 +1,70 @@
+/**
+ * Optional `.env`-style file loader.
+ *
+ * blip-mcp is configured from environment variables. For convenience — and
+ * especially for multi-flow setups with many variables — it can also load a
+ * `blip.env` file from the working directory (or BLIP_ENV_FILE). Real
+ * environment variables always win (the file never overrides them).
+ *
+ * This keeps all your credentials in ONE gitignored file inside your project,
+ * instead of a long `env` block in `.mcp.json`.
+ */
+import { existsSync, readFileSync } from "node:fs";
+/** Parse `KEY=value` lines, honoring quotes and stripping inline comments. */
+export function parseEnvFile(content) {
+    const out = {};
+    for (const raw of content.split(/\r?\n/)) {
+        const line = raw.trim();
+        if (!line || line.startsWith("#"))
+            continue;
+        const eq = line.indexOf("=");
+        if (eq === -1)
+            continue;
+        const key = line.slice(0, eq).trim();
+        if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key))
+            continue;
+        let value = line.slice(eq + 1).trim();
+        if ((value.startsWith('"') && value.endsWith('"')) ||
+            (value.startsWith("'") && value.endsWith("'"))) {
+            value = value.slice(1, -1);
+        }
+        else {
+            value = value.replace(/\s+#.*$/, "").trim();
+        }
+        out[key] = value;
+    }
+    return out;
+}
+/**
+ * Apply an env file into `target` (default process.env). Existing keys are kept
+ * unless `override` is true. Returns the list of keys that were applied.
+ */
+export function loadEnvFile(filePath, target = process.env, options = {}) {
+    if (!existsSync(filePath))
+        return [];
+    const parsed = parseEnvFile(readFileSync(filePath, "utf8"));
+    const applied = [];
+    for (const [key, value] of Object.entries(parsed)) {
+        if (value === "")
+            continue;
+        if (!options.override && target[key] !== undefined)
+            continue;
+        target[key] = value;
+        applied.push(key);
+    }
+    return applied;
+}
+/**
+ * Decide which env file to auto-load:
+ *   - BLIP_ENV_FILE if set (even to a path that doesn't exist → no load), else
+ *   - ./blip.env if it exists.
+ */
+export function resolveEnvFile(env = process.env) {
+    if (typeof env["BLIP_ENV_FILE"] === "string" && env["BLIP_ENV_FILE"] !== "") {
+        return env["BLIP_ENV_FILE"];
+    }
+    if (existsSync("blip.env"))
+        return "blip.env";
+    return undefined;
+}
+//# sourceMappingURL=env-file.js.map

package/dist/env-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-file.js","sourceRoot":"","sources":["../src/env-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEnD,8EAA8E;AAC9E,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5C,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,SAAS;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QACpD,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,QAAgB,EAChB,SAA4B,OAAO,CAAC,GAAG,EACvC,UAAkC,EAAE;IAEpC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,KAAK,KAAK,EAAE;YAAE,SAAS;QAC3B,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,SAAS;QAC7D,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAyB,OAAO,CAAC,GAAG;IACjE,IAAI,OAAO,GAAG,CAAC,eAAe,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC;QAC5E,OAAO,GAAG,CAAC,eAAe,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IAC9C,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Error types and secret redaction for blip-mcp.
+ *
+ * Redaction is defensive: even if a token somehow lands in an error message or
+ * a response body, {@link redactSecrets} scrubs it before it can reach a log
+ * line or a tool result.
+ */
+/**
+ * Remove known secrets and any `Key <token>` authorization header from a string.
+ * Safe to call on arbitrary text (log lines, HTTP bodies, error messages).
+ */
+export declare function redactSecrets(text: string, secrets?: ReadonlyArray<string>): string;
+/** Base class for every error this package throws on purpose. */
+export declare class BlipError extends Error {
+    constructor(message: string, options?: {
+        cause?: unknown;
+    });
+}
+/** Configuration / environment problem (missing credentials, bad host, etc.). */
+export declare class BlipConfigError extends BlipError {
+}
+/** A request exceeded the configured timeout. */
+export declare class BlipTimeoutError extends BlipError {
+    readonly timeoutMs: number;
+    constructor(timeoutMs: number);
+}
+/** A non-2xx HTTP response from the Blip API (e.g. 401 auth, 500 server). */
+export declare class BlipHttpError extends BlipError {
+    readonly status: number;
+    readonly bodyExcerpt: string;
+    constructor(status: number, bodyExcerpt?: string);
+}
+/**
+ * A command was delivered but Blip answered with `status: "failure"`.
+ * Carries the structured `reason` so callers get a clear message.
+ */
+export declare class BlipCommandError extends BlipError {
+    readonly code: number | undefined;
+    readonly description: string | undefined;
+    readonly method: string;
+    readonly uri: string;
+    constructor(params: {
+        code?: number | undefined;
+        description?: string | undefined;
+        method: string;
+        uri: string;
+    });
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,aAAa,CAAC,MAAM,CAAM,GAAG,MAAM,CAUvF;AAED,iEAAiE;AACjE,qBAAa,SAAU,SAAQ,KAAK;gBACtB,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI3D;AAED,iFAAiF;AACjF,qBAAa,eAAgB,SAAQ,SAAS;CAAG;AAEjD,iDAAiD;AACjD,qBAAa,gBAAiB,SAAQ,SAAS;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBACf,SAAS,EAAE,MAAM;CAI9B;AAED,6EAA6E;AAC7E,qBAAa,aAAc,SAAQ,SAAS;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;gBACjB,MAAM,EAAE,MAAM,EAAE,WAAW,SAAK;CAK7C;AAED;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,SAAS;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;gBACT,MAAM,EAAE;QAClB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACjC,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,CAAC;KACb;CAeF"}