Remove auth from tool listing (#23)

Author: SketchingDev

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@makingchatbots/genesys-cloud-mcp-server",
-  "version": "0.0.11",
+  "version": "0.0.12",
   "description": "A Model Context Protocol (MCP) server exposing Genesys Cloud tools for LLMs, including sentiment analysis, conversation search, topic detection and more.",
   "bin": "./dist/cli.js",
   "type": "module",
@@ -36,11 +36,11 @@
     "test:pack": "npm run build && npm pack --pack-destination ./dist"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.12.1",
+    "@modelcontextprotocol/sdk": "^1.13.0",
     "date-fns": "^4.1.0",
-    "purecloud-platform-client-v2": "^223.0.0",
+    "purecloud-platform-client-v2": "^224.0.0",
     "table": "^6.9.0",
-    "zod": "^3.25.56"
+    "zod": "^3.25.67"
   },
   "devDependencies": {
     "@eslint/eslintrc": "^3.3.1",

package.json

@@ -0,0 +1,63 @@
+import { type ApiClientClass } from "purecloud-platform-client-v2";
+import { type ToolCall } from "../tools/utils/createTool.js";
+import { ConfigRetriever } from "../createConfigRetriever.js";
+import { errorResult } from "../tools/utils/errorResult.js";
+import { z } from "zod";
+
+let isAuthenticated = false;
+
+type AuthResult =
+  | { authenticated: true }
+  | { authenticated: false; reason: string };
+
+async function authenticate(
+  apiClient: ApiClientClass,
+  configRetriever: ConfigRetriever,
+): Promise<AuthResult> {
+  const config = configRetriever.getGenesysCloudConfig();
+  if (!config.success) {
+    return { authenticated: false, reason: config.reason };
+  }
+  const authConfig = config.value;
+
+  try {
+    apiClient.setEnvironment(authConfig.region);
+    await apiClient.loginClientCredentialsGrant(
+      authConfig.oAuthClientId,
+      authConfig.oAuthClientSecret,
+    );
+  } catch (e: unknown) {
+    return {
+      authenticated: false,
+      reason: e instanceof Error ? e.message : String(e),
+    };
+  }
+
+  return {
+    authenticated: true,
+  };
+}
+
+export const OAuthClientCredentialsWrapper = (
+  configRetriever: ConfigRetriever,
+  apiClient: ApiClientClass,
+) => {
+  return function <Schema extends z.Schema = z.Schema>(
+    call: ToolCall<Schema>,
+  ): ToolCall<Schema> {
+    return async (input: Schema) => {
+      if (!isAuthenticated) {
+        const authResult = await authenticate(apiClient, configRetriever);
+        if (authResult.authenticated) {
+          isAuthenticated = true;
+        } else {
+          return errorResult(
+            `Failed to authenticate with Genesys Cloud. Reason:\n${authResult.reason}`,
+          );
+        }
+      }
+
+      return call(input);
+    };
+  };
+};

src/auth/OAuthClientCredentialsWrapper.ts

@@ -0,0 +1,65 @@
+import { z } from "zod";
+
+export interface GenesysCloudConfig {
+  readonly region: string;
+  readonly oAuthClientId: string;
+  readonly oAuthClientSecret: string;
+}
+
+export interface ConfigRetriever {
+  readonly getGenesysCloudConfig: () => Result<GenesysCloudConfig>;
+}
+
+export interface SuccessResult<T> {
+  success: true;
+  value: T;
+}
+
+export interface ErrorResult {
+  success: false;
+  reason: string;
+}
+
+export type Result<T> = SuccessResult<T> | ErrorResult;
+
+const genesysAuthConfigSchema = z.object({
+  GENESYSCLOUD_REGION: z.string({
+    required_error: "Missing environment variable: GENESYSCLOUD_REGION",
+  }),
+  GENESYSCLOUD_OAUTHCLIENT_ID: z.string({
+    required_error: "Missing environment variable: GENESYSCLOUD_OAUTHCLIENT_ID",
+  }),
+  GENESYSCLOUD_OAUTHCLIENT_SECRET: z.string({
+    required_error:
+      "Missing environment variable: GENESYSCLOUD_OAUTHCLIENT_SECRET",
+  }),
+});
+
+export function createConfigRetriever(env: NodeJS.ProcessEnv): ConfigRetriever {
+  return {
+    getGenesysCloudConfig: () => {
+      const genesysAuthConfig = genesysAuthConfigSchema.safeParse(env);
+      if (!genesysAuthConfig.success) {
+        const failureReason = [
+          "Failed to parse environment variables",
+          ...genesysAuthConfig.error.issues.map((i) => i.message),
+        ].join("\n");
+
+        return {
+          success: false,
+          reason: failureReason,
+        };
+      }
+
+      return {
+        success: true,
+        value: {
+          region: genesysAuthConfig.data.GENESYSCLOUD_REGION,
+          oAuthClientId: genesysAuthConfig.data.GENESYSCLOUD_OAUTHCLIENT_ID,
+          oAuthClientSecret:
+            genesysAuthConfig.data.GENESYSCLOUD_OAUTHCLIENT_SECRET,
+        },
+      };
+    },
+  };
+}