@1mcp/agent 0.10.1 → 0.11.0

package/build/middleware/loggingMiddleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"loggingMiddleware.js","sourceRoot":"","sources":["../../src/middleware/loggingMiddleware.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAEpC,OAAO,MAAM,MAAM,qBAAqB,CAAC;AA2BzC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAsB,CAAC;AAErD;;GAEG;AACH,SAAS,UAAU,CAAC,SAAiB,EAAE,MAAc,EAAE,MAAe;IACpE,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE;QACzB,SAAS;QACT,MAAM;QACN,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;QAC9B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,SAAiB,EAAE,MAAe,EAAE,QAAgB;IACvE,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE;QAC1B,SAAS;QACT,QAAQ;QACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,QAAQ,CAAC,SAAiB,EAAE,KAAc,EAAE,QAAgB;IACnE,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE;QACxB,SAAS;QACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;QACrE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QACvD,QAAQ;QACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,MAAc,EAAE,MAAe;IACtD,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE;QAC9B,MAAM;QACN,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;QAC9B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CACzB,eAAkC,EAClC,MAAc;IAEd,OAAO,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC9B,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,wBAAwB;QACxB,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE;YAC5B,SAAS;YACT,MAAM;YACN,SAAS;SACV,CAAC,CAAC;QAEH,cAAc;QACd,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAE9C,IAAI,CAAC;YACH,0DAA0D;YAC1D,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE;gBAC5C,GAAG,KAAK;gBACR,gBAAgB,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;oBACvC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;oBACjE,OAAO,KAAK,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;gBAC9C,CAAC;gBACD,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE;oBACpD,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;oBACvD,OAAO,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;gBAC3D,CAAC;aACF,CAAC,CAAC;YAEH,eAAe;YACf,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACxC,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YAEzC,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY;YACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACxC,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YACrC,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,2BAA2B;YAC3B,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAC9B,eAAuC,EACvC,MAAc;IAEd,OAAO,KAAK,EAAE,YAAY,EAAE,EAAE;QAC5B,mBAAmB;QACnB,eAAe,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;QAE7C,2BAA2B;QAC3B,MAAM,eAAe,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAc;IACrD,yBAAyB;IACzB,MAAM,yBAAyB,GAAG,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxE,MAAM,8BAA8B,GAAG,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClF,MAAM,oBAAoB,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9D,wCAAwC;IACxC,MAAM,CAAC,iBAAiB,GAAG,CAA0B,MAAS,EAAE,OAA0B,EAAE,EAAE;QAC5F,OAAO,yBAAyB,CAAC,MAAM,EAAE,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/G,CAAC,CAAC;IAEF,6CAA6C;IAC7C,MAAM,CAAC,sBAAsB,GAAG,CAA+B,MAAS,EAAE,OAA+B,EAAE,EAAE;QAC3G,OAAO,8BAA8B,CACnC,MAAM,EACN,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CACxE,CAAC;IACJ,CAAC,CAAC;IAEF,gCAAgC;IAChC,MAAM,CAAC,YAAY,GAAG,CAAC,YAGtB,EAAE,EAAE;QACH,eAAe,CAAC,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1D,0CAA0C;QAC1C,MAAM,SAAS,GAAI,MAAc,CAAC,SAAS,CAAC;QAC5C,IAAI,SAAS,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,UAAU,IAAI,cAAc,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;YAChH,MAAM,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;YAC5E,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO,oBAAoB,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"loggingMiddleware.js","sourceRoot":"","sources":["../../src/middleware/loggingMiddleware.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAEpC,OAAO,MAAM,MAAM,qBAAqB,CAAC;AA2BzC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAsB,CAAC;AAErD;;GAEG;AACH,SAAS,UAAU,CAAC,SAAiB,EAAE,MAAc,EAAE,MAAe;IACpE,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE;QACzB,SAAS;QACT,MAAM;QACN,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;QAC9B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,SAAiB,EAAE,MAAe,EAAE,QAAgB;IACvE,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE;QAC1B,SAAS;QACT,QAAQ;QACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,QAAQ,CAAC,SAAiB,EAAE,KAAc,EAAE,QAAgB;IACnE,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE;QACxB,SAAS;QACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;QACrE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QACvD,QAAQ;QACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,MAAc,EAAE,MAAe;IACtD,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE;QAC9B,MAAM;QACN,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;QAC9B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CACzB,eAAkC,EAClC,MAAc;IAEd,OAAO,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC9B,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,wBAAwB;QACxB,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE;YAC5B,SAAS;YACT,MAAM;YACN,SAAS;SACV,CAAC,CAAC;QAEH,cAAc;QACd,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAE9C,IAAI,CAAC;YACH,0DAA0D;YAC1D,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE;gBAC5C,GAAG,KAAK;gBACR,gBAAgB,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;oBACvC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;oBACjE,OAAO,KAAK,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;gBAC9C,CAAC;gBACD,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE;oBACpD,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;oBACvD,OAAO,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;gBAC3D,CAAC;aACF,CAAC,CAAC;YAEH,eAAe;YACf,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACxC,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YAEzC,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY;YACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACxC,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YACrC,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,2BAA2B;YAC3B,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAC9B,eAAuC,EACvC,MAAc;IAEd,OAAO,KAAK,EAAE,YAAY,EAAE,EAAE;QAC5B,mBAAmB;QACnB,eAAe,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;QAE7C,2BAA2B;QAC3B,MAAM,eAAe,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAc;IACrD,yBAAyB;IACzB,MAAM,yBAAyB,GAAG,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxE,MAAM,8BAA8B,GAAG,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClF,MAAM,oBAAoB,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9D,wCAAwC;IACxC,MAAM,CAAC,iBAAiB,GAAG,CAA0B,MAAS,EAAE,OAA0B,EAAE,EAAE;QAC5F,OAAO,yBAAyB,CAAC,MAAM,EAAE,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/G,CAAC,CAAC;IAEF,6CAA6C;IAC7C,MAAM,CAAC,sBAAsB,GAAG,CAA+B,MAAS,EAAE,OAA+B,EAAE,EAAE;QAC3G,OAAO,8BAA8B,CACnC,MAAM,EACN,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CACxE,CAAC;IACJ,CAAC,CAAC;IAEF,gCAAgC;IAChC,MAAM,CAAC,YAAY,GAAG,CAAC,YAGtB,EAAE,EAAE;QACH,eAAe,CAAC,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;QAE1D,+DAA+D;QAC/D,IAAI,CAAC;YACH,OAAO,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;gBACtE,MAAM,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;gBACxE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;YAC3B,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/build/server/auth/authManager.d.ts

@@ -0,0 +1,109 @@
+import { SessionData } from './sessionManager.js';
+/**
+ * AuthManager handles OAuth 2.1 authentication flow and token validation.
+ *
+ * This class orchestrates the OAuth 2.1 authorization code grant flow,
+ * manages access token validation, and provides session information.
+ * It integrates with SessionManager for persistent storage and
+ * ServerConfigManager for configuration settings.
+ *
+ * Features:
+ * - OAuth 2.1 authorization code grant flow
+ * - Access token validation with prefix support
+ * - Session information retrieval
+ * - Configurable authentication settings
+ *
+ * @example
+ * ```typescript
+ * const authManager = new AuthManager('/custom/sessions');
+ * const token = authManager.exchangeCodeForToken('code-123', 'client-456');
+ * const session = authManager.validateAccessToken('tk-sess-789');
+ * ```
+ */
+export declare class AuthManager {
+    private sessionManager;
+    private configManager;
+    /**
+     * Creates a new AuthManager instance.
+     *
+     * Initializes the session manager with optional custom storage path
+     * and retrieves the server configuration manager instance.
+     *
+     * @param sessionStoragePath - Optional custom path for session storage
+     */
+    constructor(sessionStoragePath?: string);
+    /**
+     * Checks if authentication is currently enabled.
+     *
+     * @returns True if OAuth 2.1 authentication is enabled, false otherwise
+     */
+    isAuthEnabled(): boolean;
+    /**
+     * Validates an access token and returns session data.
+     *
+     * If authentication is disabled, returns null (always valid).
+     * For enabled authentication, strips the token prefix if present
+     * and validates the underlying session.
+     *
+     * @param token - The access token to validate (with or without prefix)
+     * @returns Session data if token is valid, null otherwise
+     */
+    validateAccessToken(token: string): SessionData | null;
+    /**
+     * Creates an authorization code for OAuth 2.1 flow.
+     *
+     * Delegates to the session manager to create a prefixed authorization
+     * code with the configured time-to-live.
+     *
+     * @param clientId - The client identifier
+     * @param redirectUri - The redirect URI for this code
+     * @param resource - The resource this code grants access to
+     * @returns The generated authorization code with prefix
+     */
+    createAuthCode(clientId: string, redirectUri: string, resource: string): string;
+    /**
+     * Exchanges an authorization code for an access token.
+     *
+     * Validates the authorization code, checks client ID and redirect URI
+     * matches, then creates a new access token with the configured TTL.
+     * The authorization code is deleted after successful exchange.
+     *
+     * @param code - The authorization code to exchange
+     * @param clientId - The client identifier
+     * @param redirectUri - Optional redirect URI for validation
+     * @param resource - Optional resource for validation
+     * @returns Access token with prefix if exchange successful, null otherwise
+     */
+    exchangeCodeForToken(code: string, clientId: string, redirectUri?: string, resource?: string): string | null;
+    /**
+     * Gets information about an access token.
+     *
+     * Retrieves session data for the token and returns formatted
+     * information including client ID, resource, and time until expiration.
+     *
+     * @param token - The access token to get information for
+     * @returns Token information if valid, null otherwise
+     */
+    getTokenInfo(token: string): {
+        clientId: string;
+        resource: string;
+        expiresIn: number;
+    } | null;
+    /**
+     * Revokes an access token.
+     *
+     * Removes the session associated with the token from storage.
+     *
+     * @param token - The access token to revoke
+     * @returns True if token was revoked, false if it didn't exist
+     */
+    revokeToken(token: string): boolean;
+    /**
+     * Performs graceful shutdown of the AuthManager.
+     *
+     * Delegates shutdown to the session manager to ensure proper
+     * cleanup of resources and timers.
+     */
+    shutdown(): void;
+}
+//# sourceMappingURL=authManager.d.ts.map

package/build/server/auth/authManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authManager.d.ts","sourceRoot":"","sources":["../../../src/server/auth/authManager.ts"],"names":[],"mappings":"AACA,OAAO,EAAkB,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAKlE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,aAAa,CAAsB;IAE3C;;;;;;;OAOG;gBACS,kBAAkB,CAAC,EAAE,MAAM;IAKvC;;;;OAIG;IACI,aAAa,IAAI,OAAO;IAI/B;;;;;;;;;OASG;IACI,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IAmB7D;;;;;;;;;;OAUG;IACI,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM;IAKtF;;;;;;;;;;;;OAYG;IACI,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAoCnH;;;;;;;;OAQG;IACI,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAapG;;;;;;;OAOG;IACI,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAI1C;;;;;OAKG;IACI,QAAQ,IAAI,IAAI;CAGxB"}

package/build/server/auth/authManager.js

@@ -0,0 +1,173 @@
+import logger from '../../logger/logger.js';
+import { SessionManager } from './sessionManager.js';
+import { ServerConfigManager } from '../config/serverConfig.js';
+import { AUTH_CONFIG } from '../../constants.js';
+import { v4 as uuidv4 } from 'uuid';
+/**
+ * AuthManager handles OAuth 2.1 authentication flow and token validation.
+ *
+ * This class orchestrates the OAuth 2.1 authorization code grant flow,
+ * manages access token validation, and provides session information.
+ * It integrates with SessionManager for persistent storage and
+ * ServerConfigManager for configuration settings.
+ *
+ * Features:
+ * - OAuth 2.1 authorization code grant flow
+ * - Access token validation with prefix support
+ * - Session information retrieval
+ * - Configurable authentication settings
+ *
+ * @example
+ * ```typescript
+ * const authManager = new AuthManager('/custom/sessions');
+ * const token = authManager.exchangeCodeForToken('code-123', 'client-456');
+ * const session = authManager.validateAccessToken('tk-sess-789');
+ * ```
+ */
+export class AuthManager {
+    sessionManager;
+    configManager;
+    /**
+     * Creates a new AuthManager instance.
+     *
+     * Initializes the session manager with optional custom storage path
+     * and retrieves the server configuration manager instance.
+     *
+     * @param sessionStoragePath - Optional custom path for session storage
+     */
+    constructor(sessionStoragePath) {
+        this.sessionManager = new SessionManager(sessionStoragePath);
+        this.configManager = ServerConfigManager.getInstance();
+    }
+    /**
+     * Checks if authentication is currently enabled.
+     *
+     * @returns True if OAuth 2.1 authentication is enabled, false otherwise
+     */
+    isAuthEnabled() {
+        return this.configManager.isAuthEnabled();
+    }
+    /**
+     * Validates an access token and returns session data.
+     *
+     * If authentication is disabled, returns null (always valid).
+     * For enabled authentication, strips the token prefix if present
+     * and validates the underlying session.
+     *
+     * @param token - The access token to validate (with or without prefix)
+     * @returns Session data if token is valid, null otherwise
+     */
+    validateAccessToken(token) {
+        if (!this.isAuthEnabled()) {
+            return null; // Auth disabled, always valid
+        }
+        if (!token) {
+            return null;
+        }
+        // Strip token prefix if present
+        const tokenId = token.startsWith(AUTH_CONFIG.PREFIXES.ACCESS_TOKEN)
+            ? token.slice(AUTH_CONFIG.PREFIXES.ACCESS_TOKEN.length)
+            : token;
+        // Session is stored with 'sess-' + tokenId
+        const sessionId = AUTH_CONFIG.PREFIXES.SESSION_ID + tokenId;
+        return this.sessionManager.getSession(sessionId);
+    }
+    /**
+     * Creates an authorization code for OAuth 2.1 flow.
+     *
+     * Delegates to the session manager to create a prefixed authorization
+     * code with the configured time-to-live.
+     *
+     * @param clientId - The client identifier
+     * @param redirectUri - The redirect URI for this code
+     * @param resource - The resource this code grants access to
+     * @returns The generated authorization code with prefix
+     */
+    createAuthCode(clientId, redirectUri, resource) {
+        const ttlMs = this.configManager.getOAuthCodeTtlMs();
+        return this.sessionManager.createAuthCode(clientId, redirectUri, resource, ttlMs);
+    }
+    /**
+     * Exchanges an authorization code for an access token.
+     *
+     * Validates the authorization code, checks client ID and redirect URI
+     * matches, then creates a new access token with the configured TTL.
+     * The authorization code is deleted after successful exchange.
+     *
+     * @param code - The authorization code to exchange
+     * @param clientId - The client identifier
+     * @param redirectUri - Optional redirect URI for validation
+     * @param resource - Optional resource for validation
+     * @returns Access token with prefix if exchange successful, null otherwise
+     */
+    exchangeCodeForToken(code, clientId, redirectUri, resource) {
+        const codeData = this.sessionManager.getAuthCode(code);
+        if (!codeData) {
+            logger.warn(`Invalid or expired auth code: ${code}`);
+            return null;
+        }
+        if (codeData.clientId !== clientId) {
+            logger.warn(`Client ID mismatch for code ${code}: expected ${codeData.clientId}, got ${clientId}`);
+            return null;
+        }
+        if (redirectUri && codeData.redirectUri !== redirectUri) {
+            logger.warn(`Redirect URI mismatch for code ${code}: expected ${codeData.redirectUri}, got ${redirectUri}`);
+            return null;
+        }
+        if (resource && codeData.resource && codeData.resource !== resource) {
+            logger.warn(`Resource mismatch for code ${code}: expected ${codeData.resource}, got ${resource}`);
+            return null;
+        }
+        // Delete the auth code after successful exchange
+        this.sessionManager.deleteAuthCode(code);
+        // Create access token with prefix and a new UUID
+        const rawTokenId = uuidv4();
+        const accessToken = AUTH_CONFIG.PREFIXES.ACCESS_TOKEN + rawTokenId;
+        const ttlMs = this.configManager.getOAuthTokenTtlMs();
+        // Store the session using the rawTokenId (not prefixed)
+        this.sessionManager.createSessionWithId(rawTokenId, clientId, codeData.resource, ttlMs);
+        logger.info(`Exchanged code ${code} for token ${accessToken} for client ${clientId}`);
+        return accessToken;
+    }
+    /**
+     * Gets information about an access token.
+     *
+     * Retrieves session data for the token and returns formatted
+     * information including client ID, resource, and time until expiration.
+     *
+     * @param token - The access token to get information for
+     * @returns Token information if valid, null otherwise
+     */
+    getTokenInfo(token) {
+        const session = this.sessionManager.getSession(token);
+        if (!session) {
+            return null;
+        }
+        return {
+            clientId: session.clientId,
+            resource: session.resource,
+            expiresIn: Math.max(0, Math.floor((session.expires - Date.now()) / 1000)),
+        };
+    }
+    /**
+     * Revokes an access token.
+     *
+     * Removes the session associated with the token from storage.
+     *
+     * @param token - The access token to revoke
+     * @returns True if token was revoked, false if it didn't exist
+     */
+    revokeToken(token) {
+        return this.sessionManager.deleteSession(token);
+    }
+    /**
+     * Performs graceful shutdown of the AuthManager.
+     *
+     * Delegates shutdown to the session manager to ensure proper
+     * cleanup of resources and timers.
+     */
+    shutdown() {
+        this.sessionManager.shutdown();
+    }
+}
+//# sourceMappingURL=authManager.js.map

package/build/server/auth/authManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authManager.js","sourceRoot":"","sources":["../../../src/server/auth/authManager.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,wBAAwB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAe,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAEpC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,WAAW;IACd,cAAc,CAAiB;IAC/B,aAAa,CAAsB;IAE3C;;;;;;;OAOG;IACH,YAAY,kBAA2B;QACrC,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,CAAC,kBAAkB,CAAC,CAAC;QAC7D,IAAI,CAAC,aAAa,GAAG,mBAAmB,CAAC,WAAW,EAAE,CAAC;IACzD,CAAC;IAED;;;;OAIG;IACI,aAAa;QAClB,OAAO,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,CAAC;IAC5C,CAAC;IAED;;;;;;;;;OASG;IACI,mBAAmB,CAAC,KAAa;QACtC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,CAAC,8BAA8B;QAC7C,CAAC;QAED,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QAED,gCAAgC;QAChC,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC;YACjE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC;YACvD,CAAC,CAAC,KAAK,CAAC;QAEV,2CAA2C;QAC3C,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,CAAC,UAAU,GAAG,OAAO,CAAC;QAC5D,OAAO,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;IAED;;;;;;;;;;OAUG;IACI,cAAc,CAAC,QAAgB,EAAE,WAAmB,EAAE,QAAgB;QAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,iBAAiB,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACpF,CAAC;IAED;;;;;;;;;;;;OAYG;IACI,oBAAoB,CAAC,IAAY,EAAE,QAAgB,EAAE,WAAoB,EAAE,QAAiB;QACjG,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,+BAA+B,IAAI,cAAc,QAAQ,CAAC,QAAQ,SAAS,QAAQ,EAAE,CAAC,CAAC;YACnG,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,WAAW,IAAI,QAAQ,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;YACxD,MAAM,CAAC,IAAI,CAAC,kCAAkC,IAAI,cAAc,QAAQ,CAAC,WAAW,SAAS,WAAW,EAAE,CAAC,CAAC;YAC5G,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACpE,MAAM,CAAC,IAAI,CAAC,8BAA8B,IAAI,cAAc,QAAQ,CAAC,QAAQ,SAAS,QAAQ,EAAE,CAAC,CAAC;YAClG,OAAO,IAAI,CAAC;QACd,CAAC;QAED,iDAAiD;QACjD,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAEzC,iDAAiD;QACjD,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC;QAC5B,MAAM,WAAW,GAAG,WAAW,CAAC,QAAQ,CAAC,YAAY,GAAG,UAAU,CAAC;QACnE,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,kBAAkB,EAAE,CAAC;QACtD,wDAAwD;QACxD,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAExF,MAAM,CAAC,IAAI,CAAC,kBAAkB,IAAI,cAAc,WAAW,eAAe,QAAQ,EAAE,CAAC,CAAC;QACtF,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;;;;;;;OAQG;IACI,YAAY,CAAC,KAAa;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;SAC1E,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACI,WAAW,CAAC,KAAa;QAC9B,OAAO,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC;IAED;;;;;OAKG;IACI,QAAQ;QACb,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;IACjC,CAAC;CACF"}

package/build/server/auth/authMiddleware.d.ts

@@ -0,0 +1,16 @@
+import express from 'express';
+import { AuthManager } from './authManager.js';
+export declare function createAuthMiddleware(authManager: AuthManager): (req: express.Request, res: express.Response, next: express.NextFunction) => void;
+declare global {
+    namespace Express {
+        interface Request {
+            sessionData?: {
+                clientId: string;
+                resource: string;
+                expires: number;
+                createdAt: number;
+            };
+        }
+    }
+}
+//# sourceMappingURL=authMiddleware.d.ts.map

package/build/server/auth/authMiddleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authMiddleware.d.ts","sourceRoot":"","sources":["../../../src/server/auth/authMiddleware.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,WAAW,IACnD,KAAK,OAAO,CAAC,OAAO,EAAE,KAAK,OAAO,CAAC,QAAQ,EAAE,MAAM,OAAO,CAAC,YAAY,UA8ChF;AAGD,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,OAAO,CAAC;QAChB,UAAU,OAAO;YACf,WAAW,CAAC,EAAE;gBACZ,QAAQ,EAAE,MAAM,CAAC;gBACjB,QAAQ,EAAE,MAAM,CAAC;gBACjB,OAAO,EAAE,MAAM,CAAC;gBAChB,SAAS,EAAE,MAAM,CAAC;aACnB,CAAC;SACH;KACF;CACF"}

package/build/server/auth/authMiddleware.js

@@ -0,0 +1,45 @@
+import logger from '../../logger/logger.js';
+export function createAuthMiddleware(authManager) {
+    return (req, res, next) => {
+        // Skip auth if disabled
+        if (!authManager.isAuthEnabled()) {
+            return next();
+        }
+        const auth = req.headers['authorization'];
+        if (!auth || !auth.startsWith('Bearer ')) {
+            logger.warn('Missing Bearer token in request', {
+                url: req.url,
+                method: req.method,
+                headers: req.headers,
+            });
+            res.status(401).json({
+                error: 'invalid_token',
+                error_description: 'Missing Bearer token',
+            });
+            return;
+        }
+        const token = auth.slice('Bearer '.length);
+        const sessionData = authManager.validateAccessToken(token);
+        if (!sessionData) {
+            logger.warn('Invalid or expired token', {
+                url: req.url,
+                method: req.method,
+                token: token.substring(0, 8) + '...',
+            });
+            res.status(401).json({
+                error: 'invalid_token',
+                error_description: 'Invalid or expired token',
+            });
+            return;
+        }
+        // Add session data to request for downstream use
+        req.sessionData = sessionData;
+        logger.debug('Valid token for request', {
+            url: req.url,
+            method: req.method,
+            clientId: sessionData.clientId,
+        });
+        next();
+    };
+}
+//# sourceMappingURL=authMiddleware.js.map

package/build/server/auth/authMiddleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authMiddleware.js","sourceRoot":"","sources":["../../../src/server/auth/authMiddleware.ts"],"names":[],"mappings":"AACA,OAAO,MAAM,MAAM,wBAAwB,CAAC;AAG5C,MAAM,UAAU,oBAAoB,CAAC,WAAwB;IAC3D,OAAO,CAAC,GAAoB,EAAE,GAAqB,EAAE,IAA0B,EAAE,EAAE;QACjF,wBAAwB;QACxB,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,EAAE,CAAC;YACjC,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE;gBAC7C,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,OAAO,EAAE,GAAG,CAAC,OAAO;aACrB,CAAC,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,eAAe;gBACtB,iBAAiB,EAAE,sBAAsB;aAC1C,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,WAAW,GAAG,WAAW,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAE3D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;gBACtC,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK;aACrC,CAAC,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,eAAe;gBACtB,iBAAiB,EAAE,0BAA0B;aAC9C,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,iDAAiD;QACjD,GAAG,CAAC,WAAW,GAAG,WAAW,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;YACtC,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,QAAQ,EAAE,WAAW,CAAC,QAAQ;SAC/B,CAAC,CAAC;QAEH,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC"}

package/build/server/auth/sessionManager.d.ts

@@ -0,0 +1,196 @@
+/**
+ * Represents session data stored for access tokens.
+ *
+ * Contains all necessary information to validate and manage user sessions
+ * including client identification, resource access, and expiration details.
+ */
+export interface SessionData {
+    /** The client ID that owns this session */
+    clientId: string;
+    /** The resource this session has access to */
+    resource: string;
+    /** Unix timestamp when this session expires */
+    expires: number;
+    /** Unix timestamp when this session was created */
+    createdAt: number;
+}
+/**
+ * Represents authorization code data for OAuth 2.1 flow.
+ *
+ * Contains information about authorization codes used in the OAuth
+ * authorization code grant flow, including client and redirect details.
+ */
+export interface AuthCodeData {
+    /** The client ID that requested this authorization code */
+    clientId: string;
+    /** The redirect URI where the code should be used */
+    redirectUri: string;
+    /** The resource this code grants access to */
+    resource: string;
+    /** Unix timestamp when this code expires */
+    expires: number;
+    /** Unix timestamp when this code was created */
+    createdAt: number;
+}
+/**
+ * SessionManager handles file-based session storage with automatic cleanup.
+ *
+ * This class manages OAuth 2.1 sessions and authorization codes using
+ * the local filesystem. It provides automatic cleanup of expired sessions
+ * and supports configurable storage locations.
+ *
+ * Features:
+ * - File-based session storage with JSON format
+ * - Automatic cleanup of expired sessions every 5 minutes
+ * - Prefixed identifiers for easy debugging
+ * - Configurable storage directory
+ *
+ * @example
+ * ```typescript
+ * const sessionManager = new SessionManager('/custom/path');
+ * const sessionId = sessionManager.createSession('client-123', 'resource', 3600000);
+ * const session = sessionManager.getSession(sessionId);
+ * ```
+ */
+export declare class SessionManager {
+    private sessionStoragePath;
+    private cleanupInterval;
+    /**
+     * Creates a new SessionManager instance.
+     *
+     * Initializes the session storage directory and starts the automatic
+     * cleanup process for expired sessions.
+     *
+     * @param sessionStoragePath - Optional custom path for session storage
+     */
+    constructor(sessionStoragePath?: string);
+    /**
+     * Ensures the session storage directory exists.
+     *
+     * Creates the directory structure if it doesn't exist, including
+     * parent directories as needed.
+     *
+     * @throws Error if directory creation fails
+     */
+    private ensureSessionDirectory;
+    /**
+     * Gets the file path for a session ID.
+     *
+     * @param sessionId - The session identifier
+     * @returns Full file path for the session file
+     */
+    private getSessionFilePath;
+    /**
+     * Gets the file path for an authorization code.
+     *
+     * @param code - The authorization code
+     * @returns Full file path for the auth code file
+     */
+    private getAuthCodeFilePath;
+    /**
+     * Utility to validate session IDs and auth codes for safe characters (alphanumeric and dashes only).
+     * @param id - The session ID or auth code to validate
+     * @returns true if valid, false otherwise
+     */
+    private isValidId;
+    /**
+     * Creates a new session with the specified parameters.
+     *
+     * Generates a unique session ID with prefix, stores the session data
+     * as a JSON file, and returns the session identifier.
+     *
+     * @param clientId - The client identifier
+     * @param resource - The resource this session can access
+     * @param ttlMs - Time-to-live in milliseconds
+     * @returns The generated session ID with prefix
+     * @throws Error if session creation fails
+     */
+    createSession(clientId: string, resource: string, ttlMs: number): string;
+    /**
+     * Retrieves session data by session ID.
+     *
+     * Reads the session file and validates expiration. If the session
+     * is expired, it's automatically deleted and null is returned.
+     *
+     * @param sessionId - The session identifier to retrieve
+     * @returns Session data if valid and not expired, null otherwise
+     */
+    getSession(sessionId: string): SessionData | null;
+    /**
+     * Deletes a session by session ID.
+     *
+     * Removes the session file from the filesystem if it exists.
+     *
+     * @param sessionId - The session identifier to delete
+     * @returns True if session was deleted, false if it didn't exist
+     */
+    deleteSession(sessionId: string): boolean;
+    /**
+     * Creates a new authorization code for OAuth 2.1 flow.
+     *
+     * Generates a unique authorization code with prefix, stores the code data
+     * as a JSON file, and returns the code identifier.
+     *
+     * @param clientId - The client identifier
+     * @param redirectUri - The redirect URI for this code
+     * @param resource - The resource this code grants access to
+     * @param ttlMs - Time-to-live in milliseconds
+     * @returns The generated authorization code with prefix
+     * @throws Error if code creation fails
+     */
+    createAuthCode(clientId: string, redirectUri: string, resource: string, ttlMs: number): string;
+    /**
+     * Retrieves authorization code data by code.
+     *
+     * Reads the auth code file and validates expiration. If the code
+     * is expired, it's automatically deleted and null is returned.
+     *
+     * @param code - The authorization code to retrieve
+     * @returns Auth code data if valid and not expired, null otherwise
+     */
+    getAuthCode(code: string): AuthCodeData | null;
+    /**
+     * Deletes an authorization code by code.
+     *
+     * Removes the auth code file from the filesystem if it exists.
+     *
+     * @param code - The authorization code to delete
+     * @returns True if code was deleted, false if it didn't exist
+     */
+    deleteAuthCode(code: string): boolean;
+    /**
+     * Starts the automatic cleanup interval for expired sessions.
+     *
+     * Runs cleanup every 5 minutes to remove expired sessions and
+     * authorization codes from the filesystem.
+     */
+    private startCleanupInterval;
+    /**
+     * Cleans up expired sessions and authorization codes.
+     *
+     * Scans the session storage directory and removes all expired
+     * session and auth code files. Also handles corrupted files
+     * by removing them to prevent future errors.
+     */
+    private cleanupExpiredSessions;
+    /**
+     * Performs graceful shutdown of the SessionManager.
+     *
+     * Stops the cleanup interval to prevent memory leaks and
+     * ensures proper resource cleanup.
+     */
+    shutdown(): void;
+    /**
+     * Creates a new session with a custom ID (no prefix).
+     * Used for access tokens where the token ID is generated separately.
+     *
+     * @param tokenId - The raw UUID to use for the session (no prefix)
+     * @param clientId - The client identifier
+     * @param resource - The resource this session can access
+     * @param ttlMs - Time-to-live in milliseconds
+     * @returns The generated session ID with prefix
+     * @throws Error if session creation fails
+     */
+    createSessionWithId(tokenId: string, clientId: string, resource: string, ttlMs: number): string;
+}
+//# sourceMappingURL=sessionManager.d.ts.map

package/build/server/auth/sessionManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionManager.d.ts","sourceRoot":"","sources":["../../../src/server/auth/sessionManager.ts"],"names":[],"mappings":"AAMA;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,8CAA8C;IAC9C,QAAQ,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,2DAA2D;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,WAAW,EAAE,MAAM,CAAC;IACpB,8CAA8C;IAC9C,QAAQ,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,kBAAkB,CAAS;IACnC,OAAO,CAAC,eAAe,CAA+C;IAEtE;;;;;;;OAOG;gBACS,kBAAkB,CAAC,EAAE,MAAM;IAMvC;;;;;;;OAOG;IACH,OAAO,CAAC,sBAAsB;IAY9B;;;;;OAKG;IACH,OAAO,CAAC,kBAAkB;IAW1B;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB;IAQ3B;;;;OAIG;IACH,OAAO,CAAC,SAAS;IAIjB;;;;;;;;;;;OAWG;IACI,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM;IAoB/E;;;;;;;;OAQG;IACI,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IA0BxD;;;;;;;OAOG;IACI,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAmBhD;;;;;;;;;;;;OAYG;IACI,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM;IAqBrG;;;;;;;;OAQG;IACI,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI;IA0BrD;;;;;;;OAOG;IACI,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAmB5C;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;IAU5B;;;;;;OAMG;IACH,OAAO,CAAC,sBAAsB;IAqC9B;;;;;OAKG;IACI,QAAQ,IAAI,IAAI;IAOvB;;;;;;;;;;OAUG;IACI,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM;CAmBvG"}