@1mcp/agent 0.13.0 → 0.14.0

package/build/auth/storage/authCodeRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authCodeRepository.d.ts","sourceRoot":"","sources":["../../../src/auth/storage/authCodeRepository.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D;;;;;GAKG;AACH,qBAAa,kBAAkB;IACjB,OAAO,CAAC,OAAO;gBAAP,OAAO,EAAE,kBAAkB;IAE/C;;OAEG;IACH,MAAM,CACJ,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EAAE,EAChB,KAAK,EAAE,MAAM,EACb,aAAa,CAAC,EAAE,MAAM,GACrB,MAAM;IAiBT;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI;IAItC;;OAEG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;CAO9B"}

package/build/auth/storage/authCodeRepository.js

@@ -0,0 +1,50 @@
+import { randomUUID } from 'node:crypto';
+import logger from '../../logger/logger.js';
+import { AUTH_CONFIG } from '../../constants.js';
+/**
+ * Repository for authorization code operations
+ *
+ * Manages OAuth 2.1 authorization codes for token exchange.
+ * Authorization codes are short-lived (1 minute) and single-use.
+ */
+export class AuthCodeRepository {
+    storage;
+    constructor(storage) {
+        this.storage = storage;
+    }
+    /**
+     * Creates a new authorization code
+     */
+    create(clientId, redirectUri, resource, scopes, ttlMs, codeChallenge) {
+        const code = AUTH_CONFIG.SERVER.AUTH_CODE.ID_PREFIX + randomUUID();
+        const authCodeData = {
+            clientId,
+            redirectUri,
+            resource,
+            scopes,
+            codeChallenge,
+            expires: Date.now() + ttlMs,
+            createdAt: Date.now(),
+        };
+        this.storage.writeData(AUTH_CONFIG.SERVER.AUTH_CODE.FILE_PREFIX, code, authCodeData);
+        logger.info(`Created auth code: ${code} for client: ${clientId}`);
+        return code;
+    }
+    /**
+     * Retrieves authorization code data by code
+     */
+    get(code) {
+        return this.storage.readData(AUTH_CONFIG.SERVER.AUTH_CODE.FILE_PREFIX, code);
+    }
+    /**
+     * Deletes an authorization code by code
+     */
+    delete(code) {
+        const result = this.storage.deleteData(AUTH_CONFIG.SERVER.AUTH_CODE.FILE_PREFIX, code);
+        if (result) {
+            logger.info(`Deleted auth code: ${code}`);
+        }
+        return result;
+    }
+}
+//# sourceMappingURL=authCodeRepository.js.map

package/build/auth/storage/authCodeRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authCodeRepository.js","sourceRoot":"","sources":["../../../src/auth/storage/authCodeRepository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,MAAM,MAAM,wBAAwB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAIjD;;;;;GAKG;AACH,MAAM,OAAO,kBAAkB;IACT;IAApB,YAAoB,OAA2B;QAA3B,YAAO,GAAP,OAAO,CAAoB;IAAG,CAAC;IAEnD;;OAEG;IACH,MAAM,CACJ,QAAgB,EAChB,WAAmB,EACnB,QAAgB,EAChB,MAAgB,EAChB,KAAa,EACb,aAAsB;QAEtB,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,GAAG,UAAU,EAAE,CAAC;QACnE,MAAM,YAAY,GAAiB;YACjC,QAAQ;YACR,WAAW;YACX,QAAQ;YACR,MAAM;YACN,aAAa;YACb,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC3B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;QACrF,MAAM,CAAC,IAAI,CAAC,sBAAsB,IAAI,gBAAgB,QAAQ,EAAE,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAe,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC7F,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,IAAY;QACjB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACvF,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/build/auth/storage/authRequestRepository.d.ts

@@ -0,0 +1,25 @@
+import { AuthRequestData } from '../sessionTypes.js';
+import { FileStorageService } from './fileStorageService.js';
+/**
+ * Repository for authorization request operations
+ *
+ * Manages temporary authorization requests used in the consent flow.
+ * These store OAuth parameters securely server-side while user reviews consent.
+ */
+export declare class AuthRequestRepository {
+    private storage;
+    constructor(storage: FileStorageService);
+    /**
+     * Creates a new authorization request
+     */
+    create(clientId: string, redirectUri: string, codeChallenge?: string, state?: string, resource?: string, scopes?: string[]): string;
+    /**
+     * Retrieves authorization request data by ID
+     */
+    get(authRequestId: string): AuthRequestData | null;
+    /**
+     * Deletes an authorization request by ID
+     */
+    delete(authRequestId: string): boolean;
+}
+//# sourceMappingURL=authRequestRepository.d.ts.map

package/build/auth/storage/authRequestRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authRequestRepository.d.ts","sourceRoot":"","sources":["../../../src/auth/storage/authRequestRepository.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D;;;;;GAKG;AACH,qBAAa,qBAAqB;IACpB,OAAO,CAAC,OAAO;gBAAP,OAAO,EAAE,kBAAkB;IAE/C;;OAEG;IACH,MAAM,CACJ,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,aAAa,CAAC,EAAE,MAAM,EACtB,KAAK,CAAC,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,EAAE,GAChB,MAAM;IAkBT;;OAEG;IACH,GAAG,CAAC,aAAa,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI;IAIlD;;OAEG;IACH,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO;CAOvC"}

package/build/auth/storage/authRequestRepository.js

@@ -0,0 +1,51 @@
+import { randomUUID } from 'node:crypto';
+import logger from '../../logger/logger.js';
+import { AUTH_CONFIG } from '../../constants.js';
+/**
+ * Repository for authorization request operations
+ *
+ * Manages temporary authorization requests used in the consent flow.
+ * These store OAuth parameters securely server-side while user reviews consent.
+ */
+export class AuthRequestRepository {
+    storage;
+    constructor(storage) {
+        this.storage = storage;
+    }
+    /**
+     * Creates a new authorization request
+     */
+    create(clientId, redirectUri, codeChallenge, state, resource, scopes) {
+        const authRequestId = AUTH_CONFIG.SERVER.AUTH_REQUEST.ID_PREFIX + randomUUID();
+        const authRequestData = {
+            clientId,
+            redirectUri,
+            codeChallenge,
+            state,
+            resource,
+            scopes,
+            expires: Date.now() + AUTH_CONFIG.SERVER.AUTH_REQUEST.TTL_MS,
+            createdAt: Date.now(),
+        };
+        this.storage.writeData(AUTH_CONFIG.SERVER.AUTH_REQUEST.FILE_PREFIX, authRequestId, authRequestData);
+        logger.info(`Created auth request: ${authRequestId} for client: ${clientId}`);
+        return authRequestId;
+    }
+    /**
+     * Retrieves authorization request data by ID
+     */
+    get(authRequestId) {
+        return this.storage.readData(AUTH_CONFIG.SERVER.AUTH_REQUEST.FILE_PREFIX, authRequestId);
+    }
+    /**
+     * Deletes an authorization request by ID
+     */
+    delete(authRequestId) {
+        const result = this.storage.deleteData(AUTH_CONFIG.SERVER.AUTH_REQUEST.FILE_PREFIX, authRequestId);
+        if (result) {
+            logger.info(`Deleted auth request: ${authRequestId}`);
+        }
+        return result;
+    }
+}
+//# sourceMappingURL=authRequestRepository.js.map

package/build/auth/storage/authRequestRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authRequestRepository.js","sourceRoot":"","sources":["../../../src/auth/storage/authRequestRepository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,MAAM,MAAM,wBAAwB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAIjD;;;;;GAKG;AACH,MAAM,OAAO,qBAAqB;IACZ;IAApB,YAAoB,OAA2B;QAA3B,YAAO,GAAP,OAAO,CAAoB;IAAG,CAAC;IAEnD;;OAEG;IACH,MAAM,CACJ,QAAgB,EAChB,WAAmB,EACnB,aAAsB,EACtB,KAAc,EACd,QAAiB,EACjB,MAAiB;QAEjB,MAAM,aAAa,GAAG,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,GAAG,UAAU,EAAE,CAAC;QAC/E,MAAM,eAAe,GAAoB;YACvC,QAAQ;YACR,WAAW;YACX,aAAa;YACb,KAAK;YACL,QAAQ;YACR,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM;YAC5D,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;QACpG,MAAM,CAAC,IAAI,CAAC,yBAAyB,aAAa,gBAAgB,QAAQ,EAAE,CAAC,CAAC;QAC9E,OAAO,aAAa,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,aAAqB;QACvB,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAkB,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC5G,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,aAAqB;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACnG,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,yBAAyB,aAAa,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/build/auth/storage/clientDataRepository.d.ts

@@ -0,0 +1,25 @@
+import { FileStorageService } from './fileStorageService.js';
+import { OAuthClientInformationFull } from '@modelcontextprotocol/sdk/shared/auth.js';
+/**
+ * Repository for OAuth client data operations
+ *
+ * Manages registered OAuth client information with automatic expiration.
+ * Client data is stored for a configurable period (default 30 days).
+ */
+export declare class ClientDataRepository {
+    private storage;
+    constructor(storage: FileStorageService);
+    /**
+     * Saves OAuth client data
+     */
+    save(clientId: string, data: OAuthClientInformationFull, ttlMs: number): string;
+    /**
+     * Retrieves OAuth client data by client ID
+     */
+    get(clientId: string): OAuthClientInformationFull | null;
+    /**
+     * Deletes OAuth client data by client ID
+     */
+    delete(clientId: string): boolean;
+}
+//# sourceMappingURL=clientDataRepository.d.ts.map

package/build/auth/storage/clientDataRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clientDataRepository.d.ts","sourceRoot":"","sources":["../../../src/auth/storage/clientDataRepository.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,0BAA0B,EAAE,MAAM,0CAA0C,CAAC;AAEtF;;;;;GAKG;AACH,qBAAa,oBAAoB;IACnB,OAAO,CAAC,OAAO;gBAAP,OAAO,EAAE,kBAAkB;IAE/C;;OAEG;IACH,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM;IAY/E;;OAEG;IACH,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,0BAA0B,GAAG,IAAI;IAKxD;;OAEG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;CAOlC"}

package/build/auth/storage/clientDataRepository.js

@@ -0,0 +1,45 @@
+import logger from '../../logger/logger.js';
+import { AUTH_CONFIG } from '../../constants.js';
+/**
+ * Repository for OAuth client data operations
+ *
+ * Manages registered OAuth client information with automatic expiration.
+ * Client data is stored for a configurable period (default 30 days).
+ */
+export class ClientDataRepository {
+    storage;
+    constructor(storage) {
+        this.storage = storage;
+    }
+    /**
+     * Saves OAuth client data
+     */
+    save(clientId, data, ttlMs) {
+        const clientData = {
+            ...data,
+            expires: data.client_secret_expires_at ? data.client_secret_expires_at * 1000 : Date.now() + ttlMs,
+            createdAt: data.client_id_issued_at ? data.client_id_issued_at * 1000 : Date.now(),
+        };
+        this.storage.writeData(AUTH_CONFIG.SERVER.SESSION.FILE_PREFIX, clientId, clientData);
+        logger.info(`Saved client data: ${clientId}`);
+        return clientId;
+    }
+    /**
+     * Retrieves OAuth client data by client ID
+     */
+    get(clientId) {
+        const clientData = this.storage.readData(AUTH_CONFIG.SERVER.SESSION.FILE_PREFIX, clientId);
+        return clientData;
+    }
+    /**
+     * Deletes OAuth client data by client ID
+     */
+    delete(clientId) {
+        const result = this.storage.deleteData(AUTH_CONFIG.SERVER.SESSION.FILE_PREFIX, clientId);
+        if (result) {
+            logger.info(`Deleted client data: ${clientId}`);
+        }
+        return result;
+    }
+}
+//# sourceMappingURL=clientDataRepository.js.map

package/build/auth/storage/clientDataRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clientDataRepository.js","sourceRoot":"","sources":["../../../src/auth/storage/clientDataRepository.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,wBAAwB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAKjD;;;;;GAKG;AACH,MAAM,OAAO,oBAAoB;IACX;IAApB,YAAoB,OAA2B;QAA3B,YAAO,GAAP,OAAO,CAAoB;IAAG,CAAC;IAEnD;;OAEG;IACH,IAAI,CAAC,QAAgB,EAAE,IAAgC,EAAE,KAAa;QACpE,MAAM,UAAU,GAAe;YAC7B,GAAG,IAAI;YACP,OAAO,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAClG,SAAS,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;SACnF,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QACrF,MAAM,CAAC,IAAI,CAAC,sBAAsB,QAAQ,EAAE,CAAC,CAAC;QAC9C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,QAAgB;QAClB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAa,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACvG,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,QAAgB;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACzF,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,wBAAwB,QAAQ,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/build/auth/storage/clientSessionRepository.d.ts

@@ -0,0 +1,77 @@
+import { FileStorageService } from './fileStorageService.js';
+import { ClientSessionData } from '../sessionTypes.js';
+/**
+ * ClientSessionRepository handles OAuth 2.1 client session storage using the layered storage architecture.
+ *
+ * This repository manages client sessions for OAuth connections to downstream MCP servers.
+ * It follows the same patterns as other repositories (SessionRepository, AuthCodeRepository, etc.)
+ * and uses the FileStorageService for consistent data management.
+ *
+ * Features:
+ * - Repository pattern with FileStorageService backend
+ * - Server name sanitization for security
+ * - Automatic expiration handling
+ * - Consistent with other storage repositories
+ * - Type-safe client session data management
+ *
+ * @example
+ * ```typescript
+ * const storage = new FileStorageService('/path/to/sessions');
+ * const repository = new ClientSessionRepository(storage);
+ *
+ * const sessionData = {
+ *   serverName: 'test-server',
+ *   clientInfo: JSON.stringify(clientInfo),
+ *   tokens: JSON.stringify(tokens),
+ *   expires: Date.now() + 3600000,
+ *   createdAt: Date.now()
+ * };
+ *
+ * repository.save('test-server', sessionData, 3600000);
+ * const session = repository.get('test-server');
+ * ```
+ */
+export declare class ClientSessionRepository {
+    private storage;
+    constructor(storage: FileStorageService);
+    /**
+     * Saves or updates a client session.
+     *
+     * @param serverName - The server name for the client session
+     * @param clientSessionData - The client session data to store
+     * @param ttlMs - Time to live in milliseconds
+     * @returns The sanitized server name used as key
+     */
+    save(serverName: string, clientSessionData: ClientSessionData, ttlMs: number): string;
+    /**
+     * Retrieves client session data by server name.
+     *
+     * @param serverName - The server name to retrieve client session for
+     * @returns Client session data if exists and not expired, null otherwise
+     */
+    get(serverName: string): ClientSessionData | null;
+    /**
+     * Deletes a client session by server name.
+     *
+     * @param serverName - The server name to delete client session for
+     * @returns True if client session was deleted, false if it didn't exist
+     */
+    delete(serverName: string): boolean;
+    /**
+     * Lists all client session server names.
+     *
+     * This method scans the storage for client session files and extracts
+     * the server names from the file names.
+     *
+     * @returns Array of server names that have client sessions
+     */
+    list(): string[];
+    /**
+     * Creates a standardized session ID for the server name.
+     *
+     * @param sanitizedServerName - The sanitized server name
+     * @returns The session ID for storage
+     */
+    private getSessionId;
+}
+//# sourceMappingURL=clientSessionRepository.d.ts.map

package/build/auth/storage/clientSessionRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clientSessionRepository.d.ts","sourceRoot":"","sources":["../../../src/auth/storage/clientSessionRepository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAKvD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,qBAAa,uBAAuB;IACtB,OAAO,CAAC,OAAO;gBAAP,OAAO,EAAE,kBAAkB;IAE/C;;;;;;;OAOG;IACH,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM;IAerF;;;;;OAKG;IACH,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI;IAOjD;;;;;OAKG;IACH,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAOnC;;;;;;;OAOG;IACH,IAAI,IAAI,MAAM,EAAE;IA0BhB;;;;;OAKG;IACH,OAAO,CAAC,YAAY;CAGrB"}

package/build/auth/storage/clientSessionRepository.js

@@ -0,0 +1,120 @@
+import { AUTH_CONFIG } from '../../constants.js';
+import { sanitizeServerName } from '../../utils/sanitization.js';
+import logger from '../../logger/logger.js';
+/**
+ * ClientSessionRepository handles OAuth 2.1 client session storage using the layered storage architecture.
+ *
+ * This repository manages client sessions for OAuth connections to downstream MCP servers.
+ * It follows the same patterns as other repositories (SessionRepository, AuthCodeRepository, etc.)
+ * and uses the FileStorageService for consistent data management.
+ *
+ * Features:
+ * - Repository pattern with FileStorageService backend
+ * - Server name sanitization for security
+ * - Automatic expiration handling
+ * - Consistent with other storage repositories
+ * - Type-safe client session data management
+ *
+ * @example
+ * ```typescript
+ * const storage = new FileStorageService('/path/to/sessions');
+ * const repository = new ClientSessionRepository(storage);
+ *
+ * const sessionData = {
+ *   serverName: 'test-server',
+ *   clientInfo: JSON.stringify(clientInfo),
+ *   tokens: JSON.stringify(tokens),
+ *   expires: Date.now() + 3600000,
+ *   createdAt: Date.now()
+ * };
+ *
+ * repository.save('test-server', sessionData, 3600000);
+ * const session = repository.get('test-server');
+ * ```
+ */
+export class ClientSessionRepository {
+    storage;
+    constructor(storage) {
+        this.storage = storage;
+    }
+    /**
+     * Saves or updates a client session.
+     *
+     * @param serverName - The server name for the client session
+     * @param clientSessionData - The client session data to store
+     * @param ttlMs - Time to live in milliseconds
+     * @returns The sanitized server name used as key
+     */
+    save(serverName, clientSessionData, ttlMs) {
+        const sanitizedServerName = sanitizeServerName(serverName);
+        const sessionId = this.getSessionId(sanitizedServerName);
+        const dataWithExpiry = {
+            ...clientSessionData,
+            expires: Date.now() + ttlMs,
+            createdAt: clientSessionData.createdAt || Date.now(),
+        };
+        this.storage.writeData(AUTH_CONFIG.CLIENT.SESSION.FILE_PREFIX, sessionId, dataWithExpiry);
+        logger.info(`Saved client session for server: ${serverName}`);
+        return sanitizedServerName;
+    }
+    /**
+     * Retrieves client session data by server name.
+     *
+     * @param serverName - The server name to retrieve client session for
+     * @returns Client session data if exists and not expired, null otherwise
+     */
+    get(serverName) {
+        const sanitizedServerName = sanitizeServerName(serverName);
+        const sessionId = this.getSessionId(sanitizedServerName);
+        return this.storage.readData(AUTH_CONFIG.CLIENT.SESSION.FILE_PREFIX, sessionId);
+    }
+    /**
+     * Deletes a client session by server name.
+     *
+     * @param serverName - The server name to delete client session for
+     * @returns True if client session was deleted, false if it didn't exist
+     */
+    delete(serverName) {
+        const sanitizedServerName = sanitizeServerName(serverName);
+        const sessionId = this.getSessionId(sanitizedServerName);
+        return this.storage.deleteData(AUTH_CONFIG.CLIENT.SESSION.FILE_PREFIX, sessionId);
+    }
+    /**
+     * Lists all client session server names.
+     *
+     * This method scans the storage for client session files and extracts
+     * the server names from the file names.
+     *
+     * @returns Array of server names that have client sessions
+     */
+    list() {
+        // Concatenate FILE_PREFIX and ID_PREFIX to get the full prefix pattern
+        const fullPrefix = AUTH_CONFIG.CLIENT.SESSION.FILE_PREFIX + AUTH_CONFIG.CLIENT.SESSION.ID_PREFIX;
+        // Get all files that match the full prefix pattern
+        const files = this.storage.listFiles(fullPrefix);
+        // Extract server names from file names
+        return files
+            .map((file) => {
+            // Remove full prefix and .json suffix to get the server name
+            let serverName = file;
+            if (serverName.startsWith(fullPrefix)) {
+                serverName = serverName.substring(fullPrefix.length);
+            }
+            if (serverName.endsWith('.json')) {
+                serverName = serverName.substring(0, serverName.length - 5);
+            }
+            return serverName;
+        })
+            .filter((serverName) => serverName.length > 0);
+    }
+    /**
+     * Creates a standardized session ID for the server name.
+     *
+     * @param sanitizedServerName - The sanitized server name
+     * @returns The session ID for storage
+     */
+    getSessionId(sanitizedServerName) {
+        return `${AUTH_CONFIG.CLIENT.SESSION.ID_PREFIX}${sanitizedServerName}`;
+    }
+}
+//# sourceMappingURL=clientSessionRepository.js.map

package/build/auth/storage/clientSessionRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clientSessionRepository.js","sourceRoot":"","sources":["../../../src/auth/storage/clientSessionRepository.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,MAAM,MAAM,wBAAwB,CAAC;AAE5C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,OAAO,uBAAuB;IACd;IAApB,YAAoB,OAA2B;QAA3B,YAAO,GAAP,OAAO,CAAoB;IAAG,CAAC;IAEnD;;;;;;;OAOG;IACH,IAAI,CAAC,UAAkB,EAAE,iBAAoC,EAAE,KAAa;QAC1E,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAC;QAEzD,MAAM,cAAc,GAAG;YACrB,GAAG,iBAAiB;YACpB,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC3B,SAAS,EAAE,iBAAiB,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;SACrD,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;QAC1F,MAAM,CAAC,IAAI,CAAC,oCAAoC,UAAU,EAAE,CAAC,CAAC;QAC9D,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED;;;;;OAKG;IACH,GAAG,CAAC,UAAkB;QACpB,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAC;QAEzD,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAoB,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACrG,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,UAAkB;QACvB,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAC;QAEzD,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACpF,CAAC;IAED;;;;;;;OAOG;IACH,IAAI;QACF,uEAAuE;QACvE,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;QAEjG,mDAAmD;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAEjD,uCAAuC;QACvC,OAAO,KAAK;aACT,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACZ,6DAA6D;YAC7D,IAAI,UAAU,GAAG,IAAI,CAAC;YAEtB,IAAI,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACtC,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACvD,CAAC;YAED,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjC,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAC9D,CAAC;YAED,OAAO,UAAU,CAAC;QACpB,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACnD,CAAC;IAED;;;;;OAKG;IACK,YAAY,CAAC,mBAA2B;QAC9C,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,GAAG,mBAAmB,EAAE,CAAC;IACzE,CAAC;CACF"}

package/build/auth/storage/fileStorageService.d.ts

@@ -0,0 +1,68 @@
+import { ExpirableData } from '../sessionTypes.js';
+/**
+ * Generic file storage service with unified cleanup for all expirable data types.
+ *
+ * This service provides a common foundation for storing sessions, auth codes,
+ * auth requests, and client data with automatic cleanup of expired items.
+ *
+ * Features:
+ * - Generic CRUD operations for any expirable data type
+ * - Unified periodic cleanup every 5 minutes
+ * - Path traversal protection
+ * - Automatic directory creation
+ * - Corruption handling (removes corrupted files)
+ */
+export declare class FileStorageService {
+    private storageDir;
+    private cleanupInterval;
+    constructor(storageDir?: string);
+    /**
+     * Ensures the storage directory exists
+     */
+    private ensureDirectory;
+    /**
+     * Gets the file path for a given prefix and ID
+     */
+    getFilePath(filePrefix: string, id: string): string;
+    /**
+     * Validates ID format for security
+     */
+    private isValidId;
+    /**
+     * Writes data to a file with the specified prefix and ID
+     */
+    writeData<T extends ExpirableData>(filePrefix: string, id: string, data: T): void;
+    /**
+     * Reads data from a file with the specified prefix and ID
+     * Returns null if file doesn't exist or data is expired
+     */
+    readData<T extends ExpirableData>(filePrefix: string, id: string): T | null;
+    /**
+     * Deletes data file with the specified prefix and ID
+     */
+    deleteData(filePrefix: string, id: string): boolean;
+    /**
+     * Starts periodic cleanup of expired data files
+     */
+    private startPeriodicCleanup;
+    /**
+     * Unified cleanup for all expired data types
+     */
+    cleanupExpiredData(): number;
+    /**
+     * Lists all files in the storage directory that match a given prefix.
+     *
+     * @param filePrefix - The file prefix to filter by (optional)
+     * @returns Array of file names (without directory path)
+     */
+    listFiles(filePrefix?: string): string[];
+    /**
+     * Gets the storage directory path
+     */
+    getStorageDir(): string;
+    /**
+     * Graceful shutdown - stops cleanup interval
+     */
+    shutdown(): void;
+}
+//# sourceMappingURL=fileStorageService.d.ts.map

package/build/auth/storage/fileStorageService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileStorageService.d.ts","sourceRoot":"","sources":["../../../src/auth/storage/fileStorageService.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD;;;;;;;;;;;;GAYG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,eAAe,CAA+C;gBAE1D,UAAU,CAAC,EAAE,MAAM;IAM/B;;OAEG;IACH,OAAO,CAAC,eAAe;IAYvB;;OAEG;IACI,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM;IAmB1D;;OAEG;IACH,OAAO,CAAC,SAAS;IAiDjB;;OAEG;IACH,SAAS,CAAC,CAAC,SAAS,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI;IAWjF;;;OAGG;IACH,QAAQ,CAAC,CAAC,SAAS,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,CAAC,GAAG,IAAI;IA4B3E;;OAEG;IACH,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO;IAoBnD;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAU5B;;OAEG;IACI,kBAAkB,IAAI,MAAM;IAyCnC;;;;;OAKG;IACH,SAAS,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE;IAwBxC;;OAEG;IACH,aAAa,IAAI,MAAM;IAIvB;;OAEG;IACH,QAAQ,IAAI,IAAI;CAOjB"}