toolcraft 0.0.92 → 0.0.93

package/node_modules/mcp-oauth/dist/client/loopback-authorization.js

@@ -1,207 +0,0 @@
-import http from "node:http";
-import { parseAuthorizationState } from "./authorization-state.js";
-export async function createLoopbackAuthorizationSession(options = {}) {
-    const callbackPath = options.callbackPath ?? "/callback";
-    const server = options.createServer ? options.createServer() : http.createServer();
-    const port = await startServer(server);
-    const redirectUri = `http://127.0.0.1:${port}${callbackPath}`;
-    return {
-        redirectUri,
-        async waitForCode(authorizationUrl) {
-            return waitForAuthorizationCode(server, authorizationUrl, options, callbackPath);
-        },
-        close() {
-            server.closeAllConnections?.();
-            server.close();
-        }
-    };
-}
-async function startServer(server) {
-    return new Promise((resolve, reject) => {
-        const handleError = (error) => {
-            server.off("error", handleError);
-            reject(error);
-        };
-        server.once("error", handleError);
-        server.listen(0, "127.0.0.1", () => {
-            server.off("error", handleError);
-            const address = server.address();
-            resolve(address.port);
-        });
-    });
-}
-function waitForAuthorizationCode(server, authorizationUrl, options, callbackPath) {
-    const expectedAuthorization = readExpectedAuthorizationCallback(authorizationUrl);
-    return new Promise((resolve, reject) => {
-        let settled = false;
-        const settle = (fn) => {
-            if (!settled) {
-                settled = true;
-                fn();
-            }
-        };
-        server.on("request", (req, res) => {
-            const url = new URL(req.url ?? "/", "http://127.0.0.1");
-            if (url.pathname !== callbackPath) {
-                res.writeHead(404);
-                res.end("Not found");
-                return;
-            }
-            const callbackParameters = {
-                code: url.searchParams.get("code"),
-                error: url.searchParams.get("error"),
-                errorDescription: url.searchParams.get("error_description"),
-                state: url.searchParams.get("state"),
-                iss: url.searchParams.get("iss")
-            };
-            try {
-                validateAuthorizationCallbackBinding(callbackParameters, expectedAuthorization);
-            }
-            catch (error) {
-                res.writeHead(400);
-                res.end(error instanceof Error ? error.message : "Invalid OAuth callback");
-                settle(() => reject(error instanceof Error ? error : new Error(String(error))));
-                return;
-            }
-            const authorizationError = callbackParameters.error;
-            if (authorizationError !== null) {
-                const description = callbackParameters.errorDescription ?? authorizationError;
-                res.writeHead(400);
-                res.end(`Authorization failed: ${description}`);
-                settle(() => reject(createAuthorizationError(authorizationError, description)));
-                return;
-            }
-            try {
-                const code = validateAuthorizationCallbackParameters(callbackParameters, expectedAuthorization);
-                res.writeHead(200, { "Content-Type": "text/html" });
-                res.end(buildSuccessPage(options.landingPage));
-                settle(() => resolve(code));
-            }
-            catch (error) {
-                res.writeHead(400);
-                res.end(error instanceof Error ? error.message : "Invalid OAuth callback");
-                settle(() => reject(error instanceof Error ? error : new Error(String(error))));
-            }
-        });
-        if (options.readLine !== undefined) {
-            options
-                .readLine()
-                .then((input) => {
-                const callbackParameters = extractCallbackParametersFromInput(input);
-                if (callbackParameters === null) {
-                    settle(() => reject(new Error("OAuth callback missing authorization code")));
-                    return;
-                }
-                try {
-                    validateAuthorizationCallbackBinding(callbackParameters, expectedAuthorization);
-                    if (callbackParameters.error !== null) {
-                        const description = callbackParameters.errorDescription ?? callbackParameters.error;
-                        throw createAuthorizationError(callbackParameters.error, description);
-                    }
-                    const code = validateAuthorizationCallbackParameters(callbackParameters, expectedAuthorization);
-                    settle(() => resolve(code));
-                }
-                catch (error) {
-                    settle(() => reject(error instanceof Error ? error : new Error(String(error))));
-                }
-            })
-                .catch((error) => {
-                settle(() => reject(error instanceof Error ? error : new Error(String(error))));
-            });
-        }
-        if (options.openBrowser !== undefined) {
-            options.openBrowser(authorizationUrl).catch((error) => {
-                settle(() => reject(error));
-            });
-        }
-    });
-}
-export function extractCodeFromInput(input) {
-    return extractCallbackParametersFromInput(input)?.code ?? null;
-}
-function extractCallbackParametersFromInput(input) {
-    const trimmed = input.replaceAll("\r", "").replaceAll("\n", "").trim();
-    if (trimmed.length === 0) {
-        return null;
-    }
-    try {
-        const url = new URL(trimmed);
-        return {
-            code: url.searchParams.get("code"),
-            error: url.searchParams.get("error"),
-            errorDescription: url.searchParams.get("error_description"),
-            state: url.searchParams.get("state"),
-            iss: url.searchParams.get("iss")
-        };
-    }
-    catch {
-        return {
-            code: trimmed,
-            error: null,
-            errorDescription: null,
-            state: null,
-            iss: null
-        };
-    }
-}
-function readExpectedAuthorizationCallback(authorizationUrl) {
-    const url = new URL(authorizationUrl);
-    const state = url.searchParams.get("state");
-    const parsedState = parseAuthorizationState(state);
-    return {
-        state,
-        issuer: parsedState?.issuer ?? null,
-        requireIssuer: parsedState?.requireIssuer ?? false
-    };
-}
-function validateAuthorizationCallbackParameters(callback, expected) {
-    validateAuthorizationCallbackBinding(callback, expected);
-    if (callback.code === null || callback.code.length === 0) {
-        throw new Error("OAuth callback missing authorization code");
-    }
-    return callback.code;
-}
-function validateAuthorizationCallbackBinding(callback, expected) {
-    if (expected.state !== null) {
-        if (callback.state === null || callback.state.length === 0) {
-            throw new Error("OAuth callback missing state");
-        }
-        if (callback.state !== expected.state) {
-            throw new Error("OAuth callback state mismatch");
-        }
-    }
-    if (expected.requireIssuer) {
-        if (callback.iss === null || callback.iss.length === 0) {
-            throw new Error("OAuth callback missing issuer");
-        }
-    }
-    if (callback.iss !== null &&
-        callback.iss.length > 0 &&
-        expected.issuer !== null &&
-        callback.iss !== expected.issuer) {
-        throw new Error("OAuth callback issuer mismatch");
-    }
-}
-function createAuthorizationError(error, description) {
-    return new Error(`OAuth authorization failed: ${error} — ${description}`);
-}
-function escapeHtml(text) {
-    return text
-        .replaceAll("&", "&")
-        .replaceAll("<", "&lt;")
-        .replaceAll(">", "&gt;")
-        .replaceAll('"', "&quot;");
-}
-export function buildSuccessPage(landingPage) {
-    const title = landingPage?.title ?? "Connected";
-    const body = landingPage?.body ?? "You can close this tab and return to your terminal.";
-    return [
-        "<!DOCTYPE html>",
-        `<html><head><meta charset=utf-8><title>${escapeHtml(title)}</title></head>`,
-        '<body style="font-family:system-ui,sans-serif;display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0">',
-        '<div style="text-align:center">',
-        `<h1>${escapeHtml(title)}</h1>`,
-        `<p style="color:#666">${escapeHtml(body)}</p>`,
-        "</div></body></html>"
-    ].join("");
-}

package/node_modules/mcp-oauth/dist/client/pkce.d.ts

@@ -1,2 +0,0 @@
-export declare function generateCodeVerifier(): string;
-export declare function generateCodeChallenge(verifier: string): string;

package/node_modules/mcp-oauth/dist/client/pkce.js

@@ -1,7 +0,0 @@
-import crypto from "node:crypto";
-export function generateCodeVerifier() {
-    return crypto.randomBytes(32).toString("base64url");
-}
-export function generateCodeChallenge(verifier) {
-    return crypto.createHash("sha256").update(verifier).digest("base64url");
-}

package/node_modules/mcp-oauth/dist/client/token-endpoint.d.ts

@@ -1,40 +0,0 @@
-import type { OAuthMetadataFetch, StoredOAuthTokens } from "./types.js";
-interface OAuthErrorShape {
-    error: string;
-    error_description?: string;
-    error_uri?: string;
-}
-export declare class OAuthError extends Error {
-    readonly error: string;
-    readonly errorDescription: string | undefined;
-    readonly errorUri: string | undefined;
-    readonly error_description: string | undefined;
-    readonly error_uri: string | undefined;
-    readonly status: number;
-    readonly retryable: boolean;
-    readonly terminal: boolean;
-    constructor(shape: OAuthErrorShape, status: number);
-}
-export declare function isRetryableOAuthError(error: unknown): error is OAuthError;
-export declare function exchangeAuthorizationCode(input: {
-    tokenEndpoint: string;
-    clientId: string;
-    clientSecret?: string;
-    code: string;
-    codeVerifier: string;
-    redirectUri: string;
-    resource: string;
-    fetch: OAuthMetadataFetch;
-    now: () => number;
-}): Promise<StoredOAuthTokens>;
-export declare function refreshAccessToken(input: {
-    tokenEndpoint: string;
-    clientId: string;
-    clientSecret?: string;
-    refreshToken: string;
-    resource: string;
-    fetch: OAuthMetadataFetch;
-    now: () => number;
-}): Promise<StoredOAuthTokens>;
-export declare function readOAuthJsonObjectResponse(response: Response): Promise<Record<string, unknown>>;
-export {};

package/node_modules/mcp-oauth/dist/client/token-endpoint.js

@@ -1,164 +0,0 @@
-import { canonicalizeResourceIndicator } from "../resource-indicator.js";
-const MAX_JS_DATE_MS = 8_640_000_000_000_000;
-export class OAuthError extends Error {
-    error;
-    errorDescription;
-    errorUri;
-    error_description;
-    error_uri;
-    status;
-    retryable;
-    terminal;
-    constructor(shape, status) {
-        super(shape.error_description ?? shape.error);
-        this.name = "OAuthError";
-        this.error = shape.error;
-        this.errorDescription = shape.error_description;
-        this.errorUri = shape.error_uri;
-        this.error_description = shape.error_description;
-        this.error_uri = shape.error_uri;
-        this.status = status;
-        this.retryable = isRetryableOAuthError(this);
-        this.terminal = !this.retryable;
-    }
-}
-export function isRetryableOAuthError(error) {
-    return (error instanceof OAuthError &&
-        (error.status >= 500 ||
-            error.error === "server_error" ||
-            error.error === "temporarily_unavailable"));
-}
-export async function exchangeAuthorizationCode(input) {
-    const resource = canonicalizeResourceIndicator(input.resource);
-    return requestTokens({
-        tokenEndpoint: input.tokenEndpoint,
-        clientId: input.clientId,
-        clientSecret: input.clientSecret,
-        params: {
-            grant_type: "authorization_code",
-            code: input.code,
-            code_verifier: input.codeVerifier,
-            redirect_uri: input.redirectUri,
-            resource
-        },
-        fetch: input.fetch,
-        now: input.now
-    });
-}
-export async function refreshAccessToken(input) {
-    const resource = canonicalizeResourceIndicator(input.resource);
-    return requestTokens({
-        tokenEndpoint: input.tokenEndpoint,
-        clientId: input.clientId,
-        clientSecret: input.clientSecret,
-        params: {
-            grant_type: "refresh_token",
-            refresh_token: input.refreshToken,
-            resource
-        },
-        fetch: input.fetch,
-        now: input.now
-    });
-}
-async function requestTokens(input) {
-    const body = new URLSearchParams({
-        client_id: input.clientId,
-        ...input.params
-    });
-    if (input.clientSecret !== undefined) {
-        body.set("client_secret", input.clientSecret);
-    }
-    const response = await input.fetch(input.tokenEndpoint, {
-        method: "POST",
-        headers: {
-            "Content-Type": "application/x-www-form-urlencoded"
-        },
-        body: body.toString()
-    });
-    const payload = await readOAuthJsonObjectResponse(response);
-    const accessToken = getOwnEntry(payload, "access_token");
-    if (typeof accessToken !== "string" || accessToken.trim().length === 0) {
-        throw new Error("OAuth token response missing access_token");
-    }
-    const normalizedAccessToken = accessToken.trim();
-    const tokenType = normalizeBearerTokenType(getOwnEntry(payload, "token_type"));
-    if (tokenType === null) {
-        throw new Error("OAuth token response missing token_type=Bearer");
-    }
-    const expiresIn = getOwnEntry(payload, "expires_in");
-    let expiresAt = null;
-    if (expiresIn !== undefined) {
-        if (typeof expiresIn !== "number" ||
-            !Number.isFinite(expiresIn) ||
-            !Number.isInteger(expiresIn) ||
-            expiresIn < 0) {
-            throw new Error("OAuth token response has invalid expires_in");
-        }
-        expiresAt = input.now() + expiresIn * 1000;
-        if (!Number.isSafeInteger(expiresAt) ||
-            expiresAt > MAX_JS_DATE_MS ||
-            !Number.isFinite(new Date(expiresAt).getTime())) {
-            throw new Error("OAuth token response has invalid expires_in");
-        }
-    }
-    const refreshToken = getOwnEntry(payload, "refresh_token");
-    const scope = getOwnEntry(payload, "scope");
-    const normalizedRefreshToken = typeof refreshToken === "string" && refreshToken.trim().length > 0
-        ? refreshToken.trim()
-        : undefined;
-    const normalizedScope = typeof scope === "string" && scope.trim().length > 0 ? scope.trim() : undefined;
-    return {
-        accessToken: normalizedAccessToken,
-        refreshToken: normalizedRefreshToken === undefined ? undefined : normalizedRefreshToken,
-        tokenType,
-        expiresAt,
-        scope: normalizedScope === undefined ? undefined : normalizedScope
-    };
-}
-export async function readOAuthJsonObjectResponse(response) {
-    const fallbackError = createFallbackOAuthError(response.status);
-    let payload;
-    try {
-        payload = await response.json();
-    }
-    catch {
-        if (!response.ok) {
-            throw fallbackError;
-        }
-        throw new Error("OAuth response must be a JSON object");
-    }
-    if (typeof payload !== "object" || payload === null || Array.isArray(payload)) {
-        if (!response.ok) {
-            throw fallbackError;
-        }
-        throw new Error("OAuth response must be a JSON object");
-    }
-    const record = payload;
-    if (!response.ok) {
-        throw new OAuthError(readOAuthError(record, fallbackError.error), response.status);
-    }
-    return record;
-}
-function readOAuthError(payload, fallbackError = "server_error") {
-    const error = getOwnEntry(payload, "error");
-    const errorDescription = getOwnEntry(payload, "error_description");
-    const errorUri = getOwnEntry(payload, "error_uri");
-    return {
-        error: typeof error === "string" ? error : fallbackError,
-        error_description: typeof errorDescription === "string" ? errorDescription : undefined,
-        error_uri: typeof errorUri === "string" ? errorUri : undefined
-    };
-}
-function getOwnEntry(record, key) {
-    return Object.prototype.hasOwnProperty.call(record, key) ? record[key] : undefined;
-}
-function createFallbackOAuthError(status) {
-    const error = status === 503 ? "temporarily_unavailable" : "server_error";
-    return new OAuthError({ error }, status);
-}
-function normalizeBearerTokenType(value) {
-    if (typeof value !== "string") {
-        return null;
-    }
-    return value.toLowerCase() === "bearer" ? "Bearer" : null;
-}

package/node_modules/mcp-oauth/dist/client/types.d.ts

@@ -1,113 +0,0 @@
-import type http from "node:http";
-import type { CreateSecretStoreInput } from "auth-store";
-export type OAuthMetadataFetch = (input: string | URL, init?: RequestInit) => Promise<Response>;
-export interface OAuthProtectedResourceMetadata extends Record<string, unknown> {
-    resource: string;
-    authorization_servers: string[];
-}
-export interface OAuthAuthorizationServerMetadata extends Record<string, unknown> {
-    issuer: string;
-    authorization_endpoint: string;
-    token_endpoint: string;
-    registration_endpoint?: string;
-    response_types_supported: string[];
-    code_challenge_methods_supported: string[];
-    authorization_response_iss_parameter_supported?: boolean;
-}
-export interface OAuthDiscoveryResult {
-    resource: string;
-    resourceMetadataUrl: string;
-    resourceMetadata: OAuthProtectedResourceMetadata;
-    authorizationServer: string;
-    authorizationServerMetadataUrl: string;
-    authorizationServerMetadata: OAuthAuthorizationServerMetadata;
-}
-export interface OAuthUnauthorizedChallenge {
-    scheme: "Bearer";
-    params: Record<string, string>;
-    raw: string;
-}
-export interface OAuthClientProvider {
-    authorizeRequest?(input: {
-        requestUrl: URL;
-        headers: Headers;
-        fetch: OAuthMetadataFetch;
-    }): Promise<void> | void;
-    handleUnauthorized(input: {
-        requestUrl: URL;
-        response: Response;
-        challenge: OAuthUnauthorizedChallenge | null;
-        discovery: OAuthDiscoveryResult;
-        fetch: OAuthMetadataFetch;
-    }): Promise<{
-        action: "retry";
-    } | {
-        action: "fail";
-        error?: Error;
-    }> | {
-        action: "retry";
-    } | {
-        action: "fail";
-        error?: Error;
-    };
-}
-export interface OAuthClientMetadata {
-    clientName?: string;
-    scope?: string;
-    softwareId?: string;
-    softwareVersion?: string;
-}
-export interface StoredOAuthTokens {
-    accessToken: string;
-    refreshToken?: string;
-    tokenType: "Bearer";
-    expiresAt: number | null;
-    scope?: string;
-}
-export interface StoredOAuthSession {
-    resource: string;
-    authorizationServer: string;
-    client: {
-        clientId: string;
-        clientSecret?: string;
-    };
-    tokens?: StoredOAuthTokens;
-    discovery: {
-        resourceMetadataUrl: string;
-        resourceMetadata: Record<string, unknown>;
-        authorizationServerMetadata: Record<string, unknown>;
-    };
-}
-export interface OAuthSessionStore {
-    load(resource: string): Promise<StoredOAuthSession | null>;
-    save(resource: string, session: StoredOAuthSession): Promise<void>;
-    clear(resource: string): Promise<void>;
-}
-export interface DefaultOAuthClientProviderOptions {
-    client: {
-        mode: "dynamic";
-        clientId?: string;
-        clientSecret?: string;
-        metadata?: OAuthClientMetadata;
-    } | {
-        mode: "static";
-        clientId: string;
-        clientSecret?: string;
-        metadata?: OAuthClientMetadata;
-    };
-    browser: {
-        openBrowser(url: string): Promise<void>;
-        readLine?: () => Promise<string>;
-        createServer?: () => http.Server;
-        landingPage?: {
-            title: string;
-            body: string;
-        };
-    };
-    sessionStore?: OAuthSessionStore;
-    authStore?: CreateSecretStoreInput;
-    now?: () => number;
-}
-export type OAuthClientProviderOptions = {
-    provider: OAuthClientProvider;
-} | DefaultOAuthClientProviderOptions;

package/node_modules/mcp-oauth/dist/client/types.js

@@ -1 +0,0 @@
-export {};

package/node_modules/mcp-oauth/dist/index.d.ts

@@ -1,10 +0,0 @@
-export { createAuthStoreSessionStore, } from "./client/auth-store-session-store.js";
-export { createDefaultOAuthClientProvider, createOAuthClientProvider, } from "./client/default-oauth-client-provider.js";
-export { buildSuccessPage, createLoopbackAuthorizationSession, extractCodeFromInput, } from "./client/loopback-authorization.js";
-export { generateCodeChallenge, generateCodeVerifier, } from "./client/pkce.js";
-export { OAuthError, } from "./client/token-endpoint.js";
-export { canonicalizeResourceIndicator, } from "./resource-indicator.js";
-export { createJwksTokenVerifier, } from "./server/jwks-token-verifier.js";
-export type { DefaultOAuthClientProviderOptions, OAuthAuthorizationServerMetadata, OAuthClientMetadata, OAuthClientProvider, OAuthClientProviderOptions, OAuthDiscoveryResult, OAuthMetadataFetch, OAuthProtectedResourceMetadata, OAuthSessionStore, OAuthUnauthorizedChallenge, StoredOAuthSession, StoredOAuthTokens, } from "./client/types.js";
-export type { JwksTokenVerifier, JwksTokenVerifierOptions, JwksVerifiedAccessToken, } from "./server/jwks-token-verifier.js";
-export type { LoopbackAuthorizationOptions, LoopbackAuthorizationSession, OAuthLandingPage, } from "./client/loopback-authorization.js";

package/node_modules/mcp-oauth/dist/index.js

@@ -1,7 +0,0 @@
-export { createAuthStoreSessionStore, } from "./client/auth-store-session-store.js";
-export { createDefaultOAuthClientProvider, createOAuthClientProvider, } from "./client/default-oauth-client-provider.js";
-export { buildSuccessPage, createLoopbackAuthorizationSession, extractCodeFromInput, } from "./client/loopback-authorization.js";
-export { generateCodeChallenge, generateCodeVerifier, } from "./client/pkce.js";
-export { OAuthError, } from "./client/token-endpoint.js";
-export { canonicalizeResourceIndicator, } from "./resource-indicator.js";
-export { createJwksTokenVerifier, } from "./server/jwks-token-verifier.js";

package/node_modules/mcp-oauth/dist/resource-indicator.d.ts

@@ -1 +0,0 @@
-export declare function canonicalizeResourceIndicator(value: string | URL): string;

package/node_modules/mcp-oauth/dist/resource-indicator.js

@@ -1,11 +0,0 @@
-export function canonicalizeResourceIndicator(value) {
-    let url;
-    try {
-        url = value instanceof URL ? new URL(value.toString()) : new URL(value);
-    }
-    catch {
-        throw new Error("Resource indicator must be an absolute URL");
-    }
-    url.hash = "";
-    return url.toString();
-}

package/node_modules/mcp-oauth/dist/server/jwks-token-verifier.d.ts

@@ -1,28 +0,0 @@
-type FetchLike = typeof fetch;
-export interface JwksTokenVerifierOptions {
-    jwksUrl: string | URL;
-    clockSkewSeconds?: number;
-    allowedAlgorithms?: readonly string[];
-    jwksCacheTtlMs?: number;
-    fetch?: FetchLike;
-}
-export interface JwksVerifiedAccessToken {
-    token: string;
-    issuer: string;
-    audience: string[];
-    scopes: string[];
-    expiresAt: number;
-    claims: Record<string, unknown>;
-    subject?: string;
-    clientId?: string;
-}
-export interface JwksTokenVerifier {
-    verify(input: {
-        token: string;
-        resource: string;
-        authorizationServers: readonly string[];
-        requiredScopes: readonly string[];
-    }): Promise<JwksVerifiedAccessToken>;
-}
-export declare function createJwksTokenVerifier(options: JwksTokenVerifierOptions): JwksTokenVerifier;
-export {};