@1mcp/agent 0.12.0 → 0.13.1

package/build/auth/storage/clientDataRepository.js

@@ -0,0 +1,45 @@
+import logger from '../../logger/logger.js';
+import { AUTH_CONFIG } from '../../constants.js';
+/**
+ * Repository for OAuth client data operations
+ *
+ * Manages registered OAuth client information with automatic expiration.
+ * Client data is stored for a configurable period (default 30 days).
+ */
+export class ClientDataRepository {
+    storage;
+    constructor(storage) {
+        this.storage = storage;
+    }
+    /**
+     * Saves OAuth client data
+     */
+    save(clientId, data, ttlMs) {
+        const clientData = {
+            ...data,
+            expires: data.client_secret_expires_at ? data.client_secret_expires_at * 1000 : Date.now() + ttlMs,
+            createdAt: data.client_id_issued_at ? data.client_id_issued_at * 1000 : Date.now(),
+        };
+        this.storage.writeData(AUTH_CONFIG.SERVER.SESSION.FILE_PREFIX, clientId, clientData);
+        logger.info(`Saved client data: ${clientId}`);
+        return clientId;
+    }
+    /**
+     * Retrieves OAuth client data by client ID
+     */
+    get(clientId) {
+        const clientData = this.storage.readData(AUTH_CONFIG.SERVER.SESSION.FILE_PREFIX, clientId);
+        return clientData;
+    }
+    /**
+     * Deletes OAuth client data by client ID
+     */
+    delete(clientId) {
+        const result = this.storage.deleteData(AUTH_CONFIG.SERVER.SESSION.FILE_PREFIX, clientId);
+        if (result) {
+            logger.info(`Deleted client data: ${clientId}`);
+        }
+        return result;
+    }
+}
+//# sourceMappingURL=clientDataRepository.js.map

package/build/auth/storage/clientDataRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clientDataRepository.js","sourceRoot":"","sources":["../../../src/auth/storage/clientDataRepository.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,wBAAwB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAKjD;;;;;GAKG;AACH,MAAM,OAAO,oBAAoB;IACX;IAApB,YAAoB,OAA2B;QAA3B,YAAO,GAAP,OAAO,CAAoB;IAAG,CAAC;IAEnD;;OAEG;IACH,IAAI,CAAC,QAAgB,EAAE,IAAgC,EAAE,KAAa;QACpE,MAAM,UAAU,GAAe;YAC7B,GAAG,IAAI;YACP,OAAO,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAClG,SAAS,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;SACnF,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QACrF,MAAM,CAAC,IAAI,CAAC,sBAAsB,QAAQ,EAAE,CAAC,CAAC;QAC9C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,QAAgB;QAClB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAa,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACvG,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,QAAgB;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACzF,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,wBAAwB,QAAQ,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/build/auth/storage/clientSessionRepository.d.ts

@@ -0,0 +1,77 @@
+import { FileStorageService } from './fileStorageService.js';
+import { ClientSessionData } from '../sessionTypes.js';
+/**
+ * ClientSessionRepository handles OAuth 2.1 client session storage using the layered storage architecture.
+ *
+ * This repository manages client sessions for OAuth connections to downstream MCP servers.
+ * It follows the same patterns as other repositories (SessionRepository, AuthCodeRepository, etc.)
+ * and uses the FileStorageService for consistent data management.
+ *
+ * Features:
+ * - Repository pattern with FileStorageService backend
+ * - Server name sanitization for security
+ * - Automatic expiration handling
+ * - Consistent with other storage repositories
+ * - Type-safe client session data management
+ *
+ * @example
+ * ```typescript
+ * const storage = new FileStorageService('/path/to/sessions');
+ * const repository = new ClientSessionRepository(storage);
+ *
+ * const sessionData = {
+ *   serverName: 'test-server',
+ *   clientInfo: JSON.stringify(clientInfo),
+ *   tokens: JSON.stringify(tokens),
+ *   expires: Date.now() + 3600000,
+ *   createdAt: Date.now()
+ * };
+ *
+ * repository.save('test-server', sessionData, 3600000);
+ * const session = repository.get('test-server');
+ * ```
+ */
+export declare class ClientSessionRepository {
+    private storage;
+    constructor(storage: FileStorageService);
+    /**
+     * Saves or updates a client session.
+     *
+     * @param serverName - The server name for the client session
+     * @param clientSessionData - The client session data to store
+     * @param ttlMs - Time to live in milliseconds
+     * @returns The sanitized server name used as key
+     */
+    save(serverName: string, clientSessionData: ClientSessionData, ttlMs: number): string;
+    /**
+     * Retrieves client session data by server name.
+     *
+     * @param serverName - The server name to retrieve client session for
+     * @returns Client session data if exists and not expired, null otherwise
+     */
+    get(serverName: string): ClientSessionData | null;
+    /**
+     * Deletes a client session by server name.
+     *
+     * @param serverName - The server name to delete client session for
+     * @returns True if client session was deleted, false if it didn't exist
+     */
+    delete(serverName: string): boolean;
+    /**
+     * Lists all client session server names.
+     *
+     * This method scans the storage for client session files and extracts
+     * the server names from the file names.
+     *
+     * @returns Array of server names that have client sessions
+     */
+    list(): string[];
+    /**
+     * Creates a standardized session ID for the server name.
+     *
+     * @param sanitizedServerName - The sanitized server name
+     * @returns The session ID for storage
+     */
+    private getSessionId;
+}
+//# sourceMappingURL=clientSessionRepository.d.ts.map

package/build/auth/storage/clientSessionRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clientSessionRepository.d.ts","sourceRoot":"","sources":["../../../src/auth/storage/clientSessionRepository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAKvD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,qBAAa,uBAAuB;IACtB,OAAO,CAAC,OAAO;gBAAP,OAAO,EAAE,kBAAkB;IAE/C;;;;;;;OAOG;IACH,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM;IAerF;;;;;OAKG;IACH,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI;IAOjD;;;;;OAKG;IACH,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAOnC;;;;;;;OAOG;IACH,IAAI,IAAI,MAAM,EAAE;IA0BhB;;;;;OAKG;IACH,OAAO,CAAC,YAAY;CAGrB"}

package/build/auth/storage/clientSessionRepository.js

@@ -0,0 +1,120 @@
+import { AUTH_CONFIG } from '../../constants.js';
+import { sanitizeServerName } from '../../utils/sanitization.js';
+import logger from '../../logger/logger.js';
+/**
+ * ClientSessionRepository handles OAuth 2.1 client session storage using the layered storage architecture.
+ *
+ * This repository manages client sessions for OAuth connections to downstream MCP servers.
+ * It follows the same patterns as other repositories (SessionRepository, AuthCodeRepository, etc.)
+ * and uses the FileStorageService for consistent data management.
+ *
+ * Features:
+ * - Repository pattern with FileStorageService backend
+ * - Server name sanitization for security
+ * - Automatic expiration handling
+ * - Consistent with other storage repositories
+ * - Type-safe client session data management
+ *
+ * @example
+ * ```typescript
+ * const storage = new FileStorageService('/path/to/sessions');
+ * const repository = new ClientSessionRepository(storage);
+ *
+ * const sessionData = {
+ *   serverName: 'test-server',
+ *   clientInfo: JSON.stringify(clientInfo),
+ *   tokens: JSON.stringify(tokens),
+ *   expires: Date.now() + 3600000,
+ *   createdAt: Date.now()
+ * };
+ *
+ * repository.save('test-server', sessionData, 3600000);
+ * const session = repository.get('test-server');
+ * ```
+ */
+export class ClientSessionRepository {
+    storage;
+    constructor(storage) {
+        this.storage = storage;
+    }
+    /**
+     * Saves or updates a client session.
+     *
+     * @param serverName - The server name for the client session
+     * @param clientSessionData - The client session data to store
+     * @param ttlMs - Time to live in milliseconds
+     * @returns The sanitized server name used as key
+     */
+    save(serverName, clientSessionData, ttlMs) {
+        const sanitizedServerName = sanitizeServerName(serverName);
+        const sessionId = this.getSessionId(sanitizedServerName);
+        const dataWithExpiry = {
+            ...clientSessionData,
+            expires: Date.now() + ttlMs,
+            createdAt: clientSessionData.createdAt || Date.now(),
+        };
+        this.storage.writeData(AUTH_CONFIG.CLIENT.SESSION.FILE_PREFIX, sessionId, dataWithExpiry);
+        logger.info(`Saved client session for server: ${serverName}`);
+        return sanitizedServerName;
+    }
+    /**
+     * Retrieves client session data by server name.
+     *
+     * @param serverName - The server name to retrieve client session for
+     * @returns Client session data if exists and not expired, null otherwise
+     */
+    get(serverName) {
+        const sanitizedServerName = sanitizeServerName(serverName);
+        const sessionId = this.getSessionId(sanitizedServerName);
+        return this.storage.readData(AUTH_CONFIG.CLIENT.SESSION.FILE_PREFIX, sessionId);
+    }
+    /**
+     * Deletes a client session by server name.
+     *
+     * @param serverName - The server name to delete client session for
+     * @returns True if client session was deleted, false if it didn't exist
+     */
+    delete(serverName) {
+        const sanitizedServerName = sanitizeServerName(serverName);
+        const sessionId = this.getSessionId(sanitizedServerName);
+        return this.storage.deleteData(AUTH_CONFIG.CLIENT.SESSION.FILE_PREFIX, sessionId);
+    }
+    /**
+     * Lists all client session server names.
+     *
+     * This method scans the storage for client session files and extracts
+     * the server names from the file names.
+     *
+     * @returns Array of server names that have client sessions
+     */
+    list() {
+        // Concatenate FILE_PREFIX and ID_PREFIX to get the full prefix pattern
+        const fullPrefix = AUTH_CONFIG.CLIENT.SESSION.FILE_PREFIX + AUTH_CONFIG.CLIENT.SESSION.ID_PREFIX;
+        // Get all files that match the full prefix pattern
+        const files = this.storage.listFiles(fullPrefix);
+        // Extract server names from file names
+        return files
+            .map((file) => {
+            // Remove full prefix and .json suffix to get the server name
+            let serverName = file;
+            if (serverName.startsWith(fullPrefix)) {
+                serverName = serverName.substring(fullPrefix.length);
+            }
+            if (serverName.endsWith('.json')) {
+                serverName = serverName.substring(0, serverName.length - 5);
+            }
+            return serverName;
+        })
+            .filter((serverName) => serverName.length > 0);
+    }
+    /**
+     * Creates a standardized session ID for the server name.
+     *
+     * @param sanitizedServerName - The sanitized server name
+     * @returns The session ID for storage
+     */
+    getSessionId(sanitizedServerName) {
+        return `${AUTH_CONFIG.CLIENT.SESSION.ID_PREFIX}${sanitizedServerName}`;
+    }
+}
+//# sourceMappingURL=clientSessionRepository.js.map

package/build/auth/storage/clientSessionRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clientSessionRepository.js","sourceRoot":"","sources":["../../../src/auth/storage/clientSessionRepository.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,MAAM,MAAM,wBAAwB,CAAC;AAE5C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,OAAO,uBAAuB;IACd;IAApB,YAAoB,OAA2B;QAA3B,YAAO,GAAP,OAAO,CAAoB;IAAG,CAAC;IAEnD;;;;;;;OAOG;IACH,IAAI,CAAC,UAAkB,EAAE,iBAAoC,EAAE,KAAa;QAC1E,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAC;QAEzD,MAAM,cAAc,GAAG;YACrB,GAAG,iBAAiB;YACpB,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC3B,SAAS,EAAE,iBAAiB,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;SACrD,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;QAC1F,MAAM,CAAC,IAAI,CAAC,oCAAoC,UAAU,EAAE,CAAC,CAAC;QAC9D,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED;;;;;OAKG;IACH,GAAG,CAAC,UAAkB;QACpB,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAC;QAEzD,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAoB,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACrG,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,UAAkB;QACvB,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAC;QAEzD,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACpF,CAAC;IAED;;;;;;;OAOG;IACH,IAAI;QACF,uEAAuE;QACvE,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;QAEjG,mDAAmD;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAEjD,uCAAuC;QACvC,OAAO,KAAK;aACT,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACZ,6DAA6D;YAC7D,IAAI,UAAU,GAAG,IAAI,CAAC;YAEtB,IAAI,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACtC,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACvD,CAAC;YAED,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjC,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAC9D,CAAC;YAED,OAAO,UAAU,CAAC;QACpB,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACnD,CAAC;IAED;;;;;OAKG;IACK,YAAY,CAAC,mBAA2B;QAC9C,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,GAAG,mBAAmB,EAAE,CAAC;IACzE,CAAC;CACF"}

package/build/auth/storage/fileStorageService.d.ts

@@ -0,0 +1,68 @@
+import { ExpirableData } from '../sessionTypes.js';
+/**
+ * Generic file storage service with unified cleanup for all expirable data types.
+ *
+ * This service provides a common foundation for storing sessions, auth codes,
+ * auth requests, and client data with automatic cleanup of expired items.
+ *
+ * Features:
+ * - Generic CRUD operations for any expirable data type
+ * - Unified periodic cleanup every 5 minutes
+ * - Path traversal protection
+ * - Automatic directory creation
+ * - Corruption handling (removes corrupted files)
+ */
+export declare class FileStorageService {
+    private storageDir;
+    private cleanupInterval;
+    constructor(storageDir?: string);
+    /**
+     * Ensures the storage directory exists
+     */
+    private ensureDirectory;
+    /**
+     * Gets the file path for a given prefix and ID
+     */
+    getFilePath(filePrefix: string, id: string): string;
+    /**
+     * Validates ID format for security
+     */
+    private isValidId;
+    /**
+     * Writes data to a file with the specified prefix and ID
+     */
+    writeData<T extends ExpirableData>(filePrefix: string, id: string, data: T): void;
+    /**
+     * Reads data from a file with the specified prefix and ID
+     * Returns null if file doesn't exist or data is expired
+     */
+    readData<T extends ExpirableData>(filePrefix: string, id: string): T | null;
+    /**
+     * Deletes data file with the specified prefix and ID
+     */
+    deleteData(filePrefix: string, id: string): boolean;
+    /**
+     * Starts periodic cleanup of expired data files
+     */
+    private startPeriodicCleanup;
+    /**
+     * Unified cleanup for all expired data types
+     */
+    cleanupExpiredData(): number;
+    /**
+     * Lists all files in the storage directory that match a given prefix.
+     *
+     * @param filePrefix - The file prefix to filter by (optional)
+     * @returns Array of file names (without directory path)
+     */
+    listFiles(filePrefix?: string): string[];
+    /**
+     * Gets the storage directory path
+     */
+    getStorageDir(): string;
+    /**
+     * Graceful shutdown - stops cleanup interval
+     */
+    shutdown(): void;
+}
+//# sourceMappingURL=fileStorageService.d.ts.map

package/build/auth/storage/fileStorageService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileStorageService.d.ts","sourceRoot":"","sources":["../../../src/auth/storage/fileStorageService.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD;;;;;;;;;;;;GAYG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,eAAe,CAA+C;gBAE1D,UAAU,CAAC,EAAE,MAAM;IAM/B;;OAEG;IACH,OAAO,CAAC,eAAe;IAYvB;;OAEG;IACI,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM;IAmB1D;;OAEG;IACH,OAAO,CAAC,SAAS;IAiDjB;;OAEG;IACH,SAAS,CAAC,CAAC,SAAS,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI;IAWjF;;;OAGG;IACH,QAAQ,CAAC,CAAC,SAAS,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,CAAC,GAAG,IAAI;IA4B3E;;OAEG;IACH,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO;IAoBnD;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAU5B;;OAEG;IACI,kBAAkB,IAAI,MAAM;IAyCnC;;;;;OAKG;IACH,SAAS,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE;IAwBxC;;OAEG;IACH,aAAa,IAAI,MAAM;IAIvB;;OAEG;IACH,QAAQ,IAAI,IAAI;CAOjB"}

package/build/auth/storage/fileStorageService.js

@@ -0,0 +1,262 @@
+import fs from 'fs';
+import path from 'path';
+import logger from '../../logger/logger.js';
+import { AUTH_CONFIG, getGlobalConfigDir } from '../../constants.js';
+/**
+ * Generic file storage service with unified cleanup for all expirable data types.
+ *
+ * This service provides a common foundation for storing sessions, auth codes,
+ * auth requests, and client data with automatic cleanup of expired items.
+ *
+ * Features:
+ * - Generic CRUD operations for any expirable data type
+ * - Unified periodic cleanup every 5 minutes
+ * - Path traversal protection
+ * - Automatic directory creation
+ * - Corruption handling (removes corrupted files)
+ */
+export class FileStorageService {
+    storageDir;
+    cleanupInterval = null;
+    constructor(storageDir) {
+        this.storageDir = storageDir || path.join(getGlobalConfigDir(), AUTH_CONFIG.SERVER.STORAGE.DIR);
+        this.ensureDirectory();
+        this.startPeriodicCleanup();
+    }
+    /**
+     * Ensures the storage directory exists
+     */
+    ensureDirectory() {
+        try {
+            if (!fs.existsSync(this.storageDir)) {
+                fs.mkdirSync(this.storageDir, { recursive: true });
+                logger.info(`Created storage directory: ${this.storageDir}`);
+            }
+        }
+        catch (error) {
+            logger.error(`Failed to create storage directory: ${error}`);
+            throw error;
+        }
+    }
+    /**
+     * Gets the file path for a given prefix and ID
+     */
+    getFilePath(filePrefix, id) {
+        if (!this.isValidId(id)) {
+            throw new Error(`Invalid ID format: ${id}`);
+        }
+        const fileName = `${filePrefix}${id}${AUTH_CONFIG.SERVER.STORAGE.FILE_EXTENSION}`;
+        const filePath = path.resolve(this.storageDir, fileName);
+        // Security check: ensure resolved path is within storage directory
+        const normalizedStorageDir = path.resolve(this.storageDir);
+        const normalizedFilePath = path.resolve(filePath);
+        if (!normalizedFilePath.startsWith(normalizedStorageDir + path.sep)) {
+            throw new Error('Invalid file path: outside storage directory');
+        }
+        return filePath;
+    }
+    /**
+     * Validates ID format for security
+     */
+    isValidId(id) {
+        // Check minimum length (prefix + content)
+        if (!id || id.length < 8) {
+            return false;
+        }
+        // Check for valid server-side prefix
+        const hasServerPrefix = id.startsWith(AUTH_CONFIG.SERVER.SESSION.ID_PREFIX) ||
+            id.startsWith(AUTH_CONFIG.SERVER.AUTH_CODE.ID_PREFIX) ||
+            id.startsWith(AUTH_CONFIG.SERVER.AUTH_REQUEST.ID_PREFIX);
+        if (hasServerPrefix) {
+            // Validate the UUID portion (after prefix)
+            let uuidPart;
+            if (id.startsWith(AUTH_CONFIG.SERVER.SESSION.ID_PREFIX)) {
+                uuidPart = id.substring(AUTH_CONFIG.SERVER.SESSION.ID_PREFIX.length);
+            }
+            else if (id.startsWith(AUTH_CONFIG.SERVER.AUTH_CODE.ID_PREFIX)) {
+                uuidPart = id.substring(AUTH_CONFIG.SERVER.AUTH_CODE.ID_PREFIX.length);
+            }
+            else {
+                uuidPart = id.substring(AUTH_CONFIG.SERVER.AUTH_REQUEST.ID_PREFIX.length);
+            }
+            // UUID v4 format: 8-4-4-4-12 hexadecimal digits with hyphens
+            const uuidRegex = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+            return uuidRegex.test(uuidPart);
+        }
+        // Check for valid client-side OAuth prefix
+        const hasClientPrefix = id.startsWith(AUTH_CONFIG.CLIENT.PREFIXES.CLIENT) ||
+            id.startsWith(AUTH_CONFIG.CLIENT.PREFIXES.TOKENS) ||
+            id.startsWith(AUTH_CONFIG.CLIENT.PREFIXES.VERIFIER) ||
+            id.startsWith(AUTH_CONFIG.CLIENT.PREFIXES.STATE);
+        if (hasClientPrefix) {
+            const contentPart = id.substring(4); // All client prefixes are 4 characters
+            return contentPart.length > 0 && /^[a-zA-Z0-9_-]+$/.test(contentPart);
+        }
+        // Check for client session prefix
+        if (id.startsWith(AUTH_CONFIG.CLIENT.SESSION.ID_PREFIX)) {
+            const contentPart = id.substring(AUTH_CONFIG.CLIENT.SESSION.ID_PREFIX.length);
+            return contentPart.length > 0 && /^[a-zA-Z0-9_-]+$/.test(contentPart);
+        }
+        return false;
+    }
+    /**
+     * Writes data to a file with the specified prefix and ID
+     */
+    writeData(filePrefix, id, data) {
+        try {
+            const filePath = this.getFilePath(filePrefix, id);
+            fs.writeFileSync(filePath, JSON.stringify(data, null, 2));
+            logger.debug(`Wrote data to ${filePath}`);
+        }
+        catch (error) {
+            logger.error(`Failed to write data for ${id}: ${error}`);
+            throw error;
+        }
+    }
+    /**
+     * Reads data from a file with the specified prefix and ID
+     * Returns null if file doesn't exist or data is expired
+     */
+    readData(filePrefix, id) {
+        if (!this.isValidId(id)) {
+            logger.warn(`Rejected readData with invalid ID: ${id}`);
+            return null;
+        }
+        try {
+            const filePath = this.getFilePath(filePrefix, id);
+            if (!fs.existsSync(filePath)) {
+                return null;
+            }
+            const data = fs.readFileSync(filePath, 'utf8');
+            const parsedData = JSON.parse(data);
+            // Check if data is expired
+            if (parsedData.expires < Date.now()) {
+                this.deleteData(filePrefix, id);
+                return null;
+            }
+            return parsedData;
+        }
+        catch (error) {
+            logger.error(`Failed to read data for ${id}: ${error}`);
+            return null;
+        }
+    }
+    /**
+     * Deletes data file with the specified prefix and ID
+     */
+    deleteData(filePrefix, id) {
+        if (!this.isValidId(id)) {
+            logger.warn(`Rejected deleteData with invalid ID: ${id}`);
+            return false;
+        }
+        try {
+            const filePath = this.getFilePath(filePrefix, id);
+            if (fs.existsSync(filePath)) {
+                fs.unlinkSync(filePath);
+                logger.debug(`Deleted data file: ${filePath}`);
+                return true;
+            }
+            return false;
+        }
+        catch (error) {
+            logger.error(`Failed to delete data for ${id}: ${error}`);
+            return false;
+        }
+    }
+    /**
+     * Starts periodic cleanup of expired data files
+     */
+    startPeriodicCleanup() {
+        // Clean up expired data every 5 minutes
+        this.cleanupInterval = setInterval(() => {
+            this.cleanupExpiredData();
+        }, 5 * 60 * 1000);
+    }
+    /**
+     * Unified cleanup for all expired data types
+     */
+    cleanupExpiredData() {
+        try {
+            const files = fs.readdirSync(this.storageDir);
+            let cleanedCount = 0;
+            for (const file of files) {
+                if (file.endsWith(AUTH_CONFIG.SERVER.STORAGE.FILE_EXTENSION)) {
+                    const filePath = path.join(this.storageDir, file);
+                    try {
+                        const data = fs.readFileSync(filePath, 'utf8');
+                        const parsedData = JSON.parse(data);
+                        // Check if expired (all our data types have expires field)
+                        if (parsedData.expires && parsedData.expires < Date.now()) {
+                            fs.unlinkSync(filePath);
+                            cleanedCount++;
+                            logger.debug(`Cleaned up expired file: ${file}`);
+                        }
+                    }
+                    catch (error) {
+                        // Remove corrupted files
+                        logger.warn(`Removing corrupted file ${file}: ${error}`);
+                        try {
+                            fs.unlinkSync(filePath);
+                            cleanedCount++;
+                        }
+                        catch (unlinkError) {
+                            logger.error(`Failed to remove corrupted file ${file}: ${unlinkError}`);
+                        }
+                    }
+                }
+            }
+            if (cleanedCount > 0) {
+                logger.info(`Cleaned up ${cleanedCount} expired/corrupted files`);
+            }
+            return cleanedCount;
+        }
+        catch (error) {
+            logger.error(`Failed to cleanup expired data: ${error}`);
+            return 0;
+        }
+    }
+    /**
+     * Lists all files in the storage directory that match a given prefix.
+     *
+     * @param filePrefix - The file prefix to filter by (optional)
+     * @returns Array of file names (without directory path)
+     */
+    listFiles(filePrefix) {
+        try {
+            if (!fs.existsSync(this.storageDir)) {
+                return [];
+            }
+            const files = fs.readdirSync(this.storageDir);
+            return files.filter((file) => {
+                if (!file.endsWith('.json')) {
+                    return false;
+                }
+                if (filePrefix) {
+                    return file.startsWith(filePrefix);
+                }
+                return true;
+            });
+        }
+        catch (error) {
+            logger.error(`Failed to list files: ${error}`);
+            return [];
+        }
+    }
+    /**
+     * Gets the storage directory path
+     */
+    getStorageDir() {
+        return this.storageDir;
+    }
+    /**
+     * Graceful shutdown - stops cleanup interval
+     */
+    shutdown() {
+        if (this.cleanupInterval) {
+            clearInterval(this.cleanupInterval);
+            this.cleanupInterval = null;
+            logger.info('FileStorageService cleanup interval stopped');
+        }
+    }
+}
+//# sourceMappingURL=fileStorageService.js.map

package/build/auth/storage/fileStorageService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileStorageService.js","sourceRoot":"","sources":["../../../src/auth/storage/fileStorageService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,MAAM,MAAM,wBAAwB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAGrE;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,kBAAkB;IACrB,UAAU,CAAS;IACnB,eAAe,GAA0C,IAAI,CAAC;IAEtE,YAAY,UAAmB;QAC7B,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChG,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,CAAC,oBAAoB,EAAE,CAAC;IAC9B,CAAC;IAED;;OAEG;IACK,eAAe;QACrB,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnD,MAAM,CAAC,IAAI,CAAC,8BAA8B,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,uCAAuC,KAAK,EAAE,CAAC,CAAC;YAC7D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACI,WAAW,CAAC,UAAkB,EAAE,EAAU;QAC/C,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,UAAU,GAAG,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAEzD,mEAAmE;QACnE,MAAM,oBAAoB,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3D,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAElD,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,oBAAoB,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,EAAU;QAC1B,0CAA0C;QAC1C,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,qCAAqC;QACrC,MAAM,eAAe,GACnB,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;YACnD,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;YACrD,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAE3D,IAAI,eAAe,EAAE,CAAC;YACpB,2CAA2C;YAC3C,IAAI,QAAgB,CAAC;YACrB,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxD,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACvE,CAAC;iBAAM,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;gBACjE,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACzE,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC5E,CAAC;YAED,6DAA6D;YAC7D,MAAM,SAAS,GAAG,wEAAwE,CAAC;YAC3F,OAAO,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;QAED,2CAA2C;QAC3C,MAAM,eAAe,GACnB,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YACjD,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YACjD,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACnD,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEnD,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,WAAW,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,uCAAuC;YAC5E,OAAO,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxE,CAAC;QAED,kCAAkC;QAClC,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACxD,MAAM,WAAW,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC9E,OAAO,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,SAAS,CAA0B,UAAkB,EAAE,EAAU,EAAE,IAAO;QACxE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAClD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1D,MAAM,CAAC,KAAK,CAAC,iBAAiB,QAAQ,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,KAAK,EAAE,CAAC,CAAC;YACzD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,QAAQ,CAA0B,UAAkB,EAAE,EAAU;QAC9D,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE,EAAE,CAAC,CAAC;YACxD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAClD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC/C,MAAM,UAAU,GAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAEvC,2BAA2B;YAC3B,IAAI,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBACpC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBAChC,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,KAAK,KAAK,EAAE,CAAC,CAAC;YACxD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,UAAkB,EAAE,EAAU;QACvC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE,EAAE,CAAC,CAAC;YAC1D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAClD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACxB,MAAM,CAAC,KAAK,CAAC,sBAAsB,QAAQ,EAAE,CAAC,CAAC;gBAC/C,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,KAAK,EAAE,CAAC,CAAC;YAC1D,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACK,oBAAoB;QAC1B,wCAAwC;QACxC,IAAI,CAAC,eAAe,GAAG,WAAW,CAChC,GAAG,EAAE;YACH,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC5B,CAAC,EACD,CAAC,GAAG,EAAE,GAAG,IAAI,CACd,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,kBAAkB;QACvB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC9C,IAAI,YAAY,GAAG,CAAC,CAAC;YAErB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;oBAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;oBAClD,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;wBAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAEpC,2DAA2D;wBAC3D,IAAI,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;4BAC1D,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;4BACxB,YAAY,EAAE,CAAC;4BACf,MAAM,CAAC,KAAK,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;wBACnD,CAAC;oBACH,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,yBAAyB;wBACzB,MAAM,CAAC,IAAI,CAAC,2BAA2B,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;wBACzD,IAAI,CAAC;4BACH,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;4BACxB,YAAY,EAAE,CAAC;wBACjB,CAAC;wBAAC,OAAO,WAAW,EAAE,CAAC;4BACrB,MAAM,CAAC,KAAK,CAAC,mCAAmC,IAAI,KAAK,WAAW,EAAE,CAAC,CAAC;wBAC1E,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,cAAc,YAAY,0BAA0B,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,YAAY,CAAC;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,mCAAmC,KAAK,EAAE,CAAC,CAAC;YACzD,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,SAAS,CAAC,UAAmB;QAC3B,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpC,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC9C,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC3B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC5B,OAAO,KAAK,CAAC;gBACf,CAAC;gBAED,IAAI,UAAU,EAAE,CAAC;oBACf,OAAO,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;gBACrC,CAAC;gBAED,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,yBAAyB,KAAK,EAAE,CAAC,CAAC;YAC/C,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACpC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;CACF"}

package/build/auth/storage/oauthStorageService.d.ts

@@ -0,0 +1,57 @@
+import { SessionRepository } from './sessionRepository.js';
+import { AuthCodeRepository } from './authCodeRepository.js';
+import { AuthRequestRepository } from './authRequestRepository.js';
+import { ClientDataRepository } from './clientDataRepository.js';
+/**
+ * High-level OAuth storage service providing business operations
+ *
+ * This service orchestrates the lower-level repositories to provide
+ * high-level business operations for OAuth flows. It encapsulates
+ * the complexity of coordinating multiple data types and provides
+ * clean APIs for route handlers.
+ */
+export declare class OAuthStorageService {
+    private storage;
+    private sessions;
+    private authCodes;
+    private authRequests;
+    private clientData;
+    constructor(storageDir?: string);
+    /**
+     * Processes user consent approval
+     *
+     * Creates an authorization code with the selected scopes and builds
+     * the redirect URL for the client. Cleans up the temporary auth request.
+     */
+    processConsentApproval(authRequestId: string, selectedScopes: string[]): Promise<{
+        authCode: string;
+        redirectUrl: URL;
+    }>;
+    /**
+     * Processes user consent denial
+     *
+     * Builds an error redirect URL and cleans up the temporary auth request.
+     */
+    processConsentDenial(authRequestId: string): Promise<URL>;
+    /**
+     * Creates a temporary authorization request for the consent flow
+     */
+    createAuthorizationRequest(clientId: string, redirectUri: string, codeChallenge?: string, state?: string, resource?: string, scopes?: string[]): string;
+    /**
+     * Retrieves an authorization request
+     */
+    getAuthorizationRequest(authRequestId: string): import("../sessionTypes.js").AuthRequestData | null;
+    get sessionRepository(): SessionRepository;
+    get authCodeRepository(): AuthCodeRepository;
+    get authRequestRepository(): AuthRequestRepository;
+    get clientDataRepository(): ClientDataRepository;
+    /**
+     * Gets the storage directory path
+     */
+    getStorageDir(): string;
+    /**
+     * Graceful shutdown
+     */
+    shutdown(): void;
+}
+//# sourceMappingURL=oauthStorageService.d.ts.map

package/build/auth/storage/oauthStorageService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthStorageService.d.ts","sourceRoot":"","sources":["../../../src/auth/storage/oauthStorageService.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAGjE;;;;;;;GAOG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,OAAO,CAAqB;IACpC,OAAO,CAAC,QAAQ,CAAoB;IACpC,OAAO,CAAC,SAAS,CAAqB;IACtC,OAAO,CAAC,YAAY,CAAwB;IAC5C,OAAO,CAAC,UAAU,CAAuB;gBAE7B,UAAU,CAAC,EAAE,MAAM;IAQ/B;;;;;OAKG;IACG,sBAAsB,CAC1B,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,EAAE,GACvB,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,GAAG,CAAA;KAAE,CAAC;IA2ClD;;;;OAIG;IACG,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IA6B/D;;OAEG;IACH,0BAA0B,CACxB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,aAAa,CAAC,EAAE,MAAM,EACtB,KAAK,CAAC,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,EAAE,GAChB,MAAM;IAIT;;OAEG;IACH,uBAAuB,CAAC,aAAa,EAAE,MAAM;IAK7C,IAAI,iBAAiB,IAAI,iBAAiB,CAEzC;IAED,IAAI,kBAAkB,IAAI,kBAAkB,CAE3C;IAED,IAAI,qBAAqB,IAAI,qBAAqB,CAEjD;IAED,IAAI,oBAAoB,IAAI,oBAAoB,CAE/C;IAED;;OAEG;IACH,aAAa,IAAI,MAAM;IAIvB;;OAEG;IACH,QAAQ,IAAI,IAAI;CAGjB"}