@1mcp/agent 0.13.0 → 0.14.0

package/build/auth/storage/fileStorageService.js

@@ -0,0 +1,262 @@
+import fs from 'fs';
+import path from 'path';
+import logger from '../../logger/logger.js';
+import { AUTH_CONFIG, getGlobalConfigDir } from '../../constants.js';
+/**
+ * Generic file storage service with unified cleanup for all expirable data types.
+ *
+ * This service provides a common foundation for storing sessions, auth codes,
+ * auth requests, and client data with automatic cleanup of expired items.
+ *
+ * Features:
+ * - Generic CRUD operations for any expirable data type
+ * - Unified periodic cleanup every 5 minutes
+ * - Path traversal protection
+ * - Automatic directory creation
+ * - Corruption handling (removes corrupted files)
+ */
+export class FileStorageService {
+    storageDir;
+    cleanupInterval = null;
+    constructor(storageDir) {
+        this.storageDir = storageDir || path.join(getGlobalConfigDir(), AUTH_CONFIG.SERVER.STORAGE.DIR);
+        this.ensureDirectory();
+        this.startPeriodicCleanup();
+    }
+    /**
+     * Ensures the storage directory exists
+     */
+    ensureDirectory() {
+        try {
+            if (!fs.existsSync(this.storageDir)) {
+                fs.mkdirSync(this.storageDir, { recursive: true });
+                logger.info(`Created storage directory: ${this.storageDir}`);
+            }
+        }
+        catch (error) {
+            logger.error(`Failed to create storage directory: ${error}`);
+            throw error;
+        }
+    }
+    /**
+     * Gets the file path for a given prefix and ID
+     */
+    getFilePath(filePrefix, id) {
+        if (!this.isValidId(id)) {
+            throw new Error(`Invalid ID format: ${id}`);
+        }
+        const fileName = `${filePrefix}${id}${AUTH_CONFIG.SERVER.STORAGE.FILE_EXTENSION}`;
+        const filePath = path.resolve(this.storageDir, fileName);
+        // Security check: ensure resolved path is within storage directory
+        const normalizedStorageDir = path.resolve(this.storageDir);
+        const normalizedFilePath = path.resolve(filePath);
+        if (!normalizedFilePath.startsWith(normalizedStorageDir + path.sep)) {
+            throw new Error('Invalid file path: outside storage directory');
+        }
+        return filePath;
+    }
+    /**
+     * Validates ID format for security
+     */
+    isValidId(id) {
+        // Check minimum length (prefix + content)
+        if (!id || id.length < 8) {
+            return false;
+        }
+        // Check for valid server-side prefix
+        const hasServerPrefix = id.startsWith(AUTH_CONFIG.SERVER.SESSION.ID_PREFIX) ||
+            id.startsWith(AUTH_CONFIG.SERVER.AUTH_CODE.ID_PREFIX) ||
+            id.startsWith(AUTH_CONFIG.SERVER.AUTH_REQUEST.ID_PREFIX);
+        if (hasServerPrefix) {
+            // Validate the UUID portion (after prefix)
+            let uuidPart;
+            if (id.startsWith(AUTH_CONFIG.SERVER.SESSION.ID_PREFIX)) {
+                uuidPart = id.substring(AUTH_CONFIG.SERVER.SESSION.ID_PREFIX.length);
+            }
+            else if (id.startsWith(AUTH_CONFIG.SERVER.AUTH_CODE.ID_PREFIX)) {
+                uuidPart = id.substring(AUTH_CONFIG.SERVER.AUTH_CODE.ID_PREFIX.length);
+            }
+            else {
+                uuidPart = id.substring(AUTH_CONFIG.SERVER.AUTH_REQUEST.ID_PREFIX.length);
+            }
+            // UUID v4 format: 8-4-4-4-12 hexadecimal digits with hyphens
+            const uuidRegex = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+            return uuidRegex.test(uuidPart);
+        }
+        // Check for valid client-side OAuth prefix
+        const hasClientPrefix = id.startsWith(AUTH_CONFIG.CLIENT.PREFIXES.CLIENT) ||
+            id.startsWith(AUTH_CONFIG.CLIENT.PREFIXES.TOKENS) ||
+            id.startsWith(AUTH_CONFIG.CLIENT.PREFIXES.VERIFIER) ||
+            id.startsWith(AUTH_CONFIG.CLIENT.PREFIXES.STATE);
+        if (hasClientPrefix) {
+            const contentPart = id.substring(4); // All client prefixes are 4 characters
+            return contentPart.length > 0 && /^[a-zA-Z0-9_-]+$/.test(contentPart);
+        }
+        // Check for client session prefix
+        if (id.startsWith(AUTH_CONFIG.CLIENT.SESSION.ID_PREFIX)) {
+            const contentPart = id.substring(AUTH_CONFIG.CLIENT.SESSION.ID_PREFIX.length);
+            return contentPart.length > 0 && /^[a-zA-Z0-9_-]+$/.test(contentPart);
+        }
+        return false;
+    }
+    /**
+     * Writes data to a file with the specified prefix and ID
+     */
+    writeData(filePrefix, id, data) {
+        try {
+            const filePath = this.getFilePath(filePrefix, id);
+            fs.writeFileSync(filePath, JSON.stringify(data, null, 2));
+            logger.debug(`Wrote data to ${filePath}`);
+        }
+        catch (error) {
+            logger.error(`Failed to write data for ${id}: ${error}`);
+            throw error;
+        }
+    }
+    /**
+     * Reads data from a file with the specified prefix and ID
+     * Returns null if file doesn't exist or data is expired
+     */
+    readData(filePrefix, id) {
+        if (!this.isValidId(id)) {
+            logger.warn(`Rejected readData with invalid ID: ${id}`);
+            return null;
+        }
+        try {
+            const filePath = this.getFilePath(filePrefix, id);
+            if (!fs.existsSync(filePath)) {
+                return null;
+            }
+            const data = fs.readFileSync(filePath, 'utf8');
+            const parsedData = JSON.parse(data);
+            // Check if data is expired
+            if (parsedData.expires < Date.now()) {
+                this.deleteData(filePrefix, id);
+                return null;
+            }
+            return parsedData;
+        }
+        catch (error) {
+            logger.error(`Failed to read data for ${id}: ${error}`);
+            return null;
+        }
+    }
+    /**
+     * Deletes data file with the specified prefix and ID
+     */
+    deleteData(filePrefix, id) {
+        if (!this.isValidId(id)) {
+            logger.warn(`Rejected deleteData with invalid ID: ${id}`);
+            return false;
+        }
+        try {
+            const filePath = this.getFilePath(filePrefix, id);
+            if (fs.existsSync(filePath)) {
+                fs.unlinkSync(filePath);
+                logger.debug(`Deleted data file: ${filePath}`);
+                return true;
+            }
+            return false;
+        }
+        catch (error) {
+            logger.error(`Failed to delete data for ${id}: ${error}`);
+            return false;
+        }
+    }
+    /**
+     * Starts periodic cleanup of expired data files
+     */
+    startPeriodicCleanup() {
+        // Clean up expired data every 5 minutes
+        this.cleanupInterval = setInterval(() => {
+            this.cleanupExpiredData();
+        }, 5 * 60 * 1000);
+    }
+    /**
+     * Unified cleanup for all expired data types
+     */
+    cleanupExpiredData() {
+        try {
+            const files = fs.readdirSync(this.storageDir);
+            let cleanedCount = 0;
+            for (const file of files) {
+                if (file.endsWith(AUTH_CONFIG.SERVER.STORAGE.FILE_EXTENSION)) {
+                    const filePath = path.join(this.storageDir, file);
+                    try {
+                        const data = fs.readFileSync(filePath, 'utf8');
+                        const parsedData = JSON.parse(data);
+                        // Check if expired (all our data types have expires field)
+                        if (parsedData.expires && parsedData.expires < Date.now()) {
+                            fs.unlinkSync(filePath);
+                            cleanedCount++;
+                            logger.debug(`Cleaned up expired file: ${file}`);
+                        }
+                    }
+                    catch (error) {
+                        // Remove corrupted files
+                        logger.warn(`Removing corrupted file ${file}: ${error}`);
+                        try {
+                            fs.unlinkSync(filePath);
+                            cleanedCount++;
+                        }
+                        catch (unlinkError) {
+                            logger.error(`Failed to remove corrupted file ${file}: ${unlinkError}`);
+                        }
+                    }
+                }
+            }
+            if (cleanedCount > 0) {
+                logger.info(`Cleaned up ${cleanedCount} expired/corrupted files`);
+            }
+            return cleanedCount;
+        }
+        catch (error) {
+            logger.error(`Failed to cleanup expired data: ${error}`);
+            return 0;
+        }
+    }
+    /**
+     * Lists all files in the storage directory that match a given prefix.
+     *
+     * @param filePrefix - The file prefix to filter by (optional)
+     * @returns Array of file names (without directory path)
+     */
+    listFiles(filePrefix) {
+        try {
+            if (!fs.existsSync(this.storageDir)) {
+                return [];
+            }
+            const files = fs.readdirSync(this.storageDir);
+            return files.filter((file) => {
+                if (!file.endsWith('.json')) {
+                    return false;
+                }
+                if (filePrefix) {
+                    return file.startsWith(filePrefix);
+                }
+                return true;
+            });
+        }
+        catch (error) {
+            logger.error(`Failed to list files: ${error}`);
+            return [];
+        }
+    }
+    /**
+     * Gets the storage directory path
+     */
+    getStorageDir() {
+        return this.storageDir;
+    }
+    /**
+     * Graceful shutdown - stops cleanup interval
+     */
+    shutdown() {
+        if (this.cleanupInterval) {
+            clearInterval(this.cleanupInterval);
+            this.cleanupInterval = null;
+            logger.info('FileStorageService cleanup interval stopped');
+        }
+    }
+}
+//# sourceMappingURL=fileStorageService.js.map

package/build/auth/storage/fileStorageService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileStorageService.js","sourceRoot":"","sources":["../../../src/auth/storage/fileStorageService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,MAAM,MAAM,wBAAwB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAGrE;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,kBAAkB;IACrB,UAAU,CAAS;IACnB,eAAe,GAA0C,IAAI,CAAC;IAEtE,YAAY,UAAmB;QAC7B,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChG,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,CAAC,oBAAoB,EAAE,CAAC;IAC9B,CAAC;IAED;;OAEG;IACK,eAAe;QACrB,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnD,MAAM,CAAC,IAAI,CAAC,8BAA8B,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,uCAAuC,KAAK,EAAE,CAAC,CAAC;YAC7D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACI,WAAW,CAAC,UAAkB,EAAE,EAAU;QAC/C,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,UAAU,GAAG,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAEzD,mEAAmE;QACnE,MAAM,oBAAoB,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3D,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAElD,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,oBAAoB,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,EAAU;QAC1B,0CAA0C;QAC1C,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,qCAAqC;QACrC,MAAM,eAAe,GACnB,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;YACnD,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;YACrD,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAE3D,IAAI,eAAe,EAAE,CAAC;YACpB,2CAA2C;YAC3C,IAAI,QAAgB,CAAC;YACrB,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxD,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACvE,CAAC;iBAAM,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;gBACjE,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACzE,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC5E,CAAC;YAED,6DAA6D;YAC7D,MAAM,SAAS,GAAG,wEAAwE,CAAC;YAC3F,OAAO,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;QAED,2CAA2C;QAC3C,MAAM,eAAe,GACnB,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YACjD,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YACjD,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACnD,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEnD,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,WAAW,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,uCAAuC;YAC5E,OAAO,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxE,CAAC;QAED,kCAAkC;QAClC,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACxD,MAAM,WAAW,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC9E,OAAO,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,SAAS,CAA0B,UAAkB,EAAE,EAAU,EAAE,IAAO;QACxE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAClD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1D,MAAM,CAAC,KAAK,CAAC,iBAAiB,QAAQ,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,KAAK,EAAE,CAAC,CAAC;YACzD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,QAAQ,CAA0B,UAAkB,EAAE,EAAU;QAC9D,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE,EAAE,CAAC,CAAC;YACxD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAClD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC/C,MAAM,UAAU,GAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAEvC,2BAA2B;YAC3B,IAAI,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBACpC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBAChC,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,KAAK,KAAK,EAAE,CAAC,CAAC;YACxD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,UAAkB,EAAE,EAAU;QACvC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE,EAAE,CAAC,CAAC;YAC1D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAClD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACxB,MAAM,CAAC,KAAK,CAAC,sBAAsB,QAAQ,EAAE,CAAC,CAAC;gBAC/C,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,KAAK,EAAE,CAAC,CAAC;YAC1D,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACK,oBAAoB;QAC1B,wCAAwC;QACxC,IAAI,CAAC,eAAe,GAAG,WAAW,CAChC,GAAG,EAAE;YACH,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC5B,CAAC,EACD,CAAC,GAAG,EAAE,GAAG,IAAI,CACd,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,kBAAkB;QACvB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC9C,IAAI,YAAY,GAAG,CAAC,CAAC;YAErB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;oBAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;oBAClD,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;wBAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAEpC,2DAA2D;wBAC3D,IAAI,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;4BAC1D,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;4BACxB,YAAY,EAAE,CAAC;4BACf,MAAM,CAAC,KAAK,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;wBACnD,CAAC;oBACH,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,yBAAyB;wBACzB,MAAM,CAAC,IAAI,CAAC,2BAA2B,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;wBACzD,IAAI,CAAC;4BACH,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;4BACxB,YAAY,EAAE,CAAC;wBACjB,CAAC;wBAAC,OAAO,WAAW,EAAE,CAAC;4BACrB,MAAM,CAAC,KAAK,CAAC,mCAAmC,IAAI,KAAK,WAAW,EAAE,CAAC,CAAC;wBAC1E,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,cAAc,YAAY,0BAA0B,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,YAAY,CAAC;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,mCAAmC,KAAK,EAAE,CAAC,CAAC;YACzD,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,SAAS,CAAC,UAAmB;QAC3B,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpC,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC9C,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC3B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC5B,OAAO,KAAK,CAAC;gBACf,CAAC;gBAED,IAAI,UAAU,EAAE,CAAC;oBACf,OAAO,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;gBACrC,CAAC;gBAED,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,yBAAyB,KAAK,EAAE,CAAC,CAAC;YAC/C,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACpC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;CACF"}

package/build/auth/storage/oauthStorageService.d.ts

@@ -0,0 +1,57 @@
+import { SessionRepository } from './sessionRepository.js';
+import { AuthCodeRepository } from './authCodeRepository.js';
+import { AuthRequestRepository } from './authRequestRepository.js';
+import { ClientDataRepository } from './clientDataRepository.js';
+/**
+ * High-level OAuth storage service providing business operations
+ *
+ * This service orchestrates the lower-level repositories to provide
+ * high-level business operations for OAuth flows. It encapsulates
+ * the complexity of coordinating multiple data types and provides
+ * clean APIs for route handlers.
+ */
+export declare class OAuthStorageService {
+    private storage;
+    private sessions;
+    private authCodes;
+    private authRequests;
+    private clientData;
+    constructor(storageDir?: string);
+    /**
+     * Processes user consent approval
+     *
+     * Creates an authorization code with the selected scopes and builds
+     * the redirect URL for the client. Cleans up the temporary auth request.
+     */
+    processConsentApproval(authRequestId: string, selectedScopes: string[]): Promise<{
+        authCode: string;
+        redirectUrl: URL;
+    }>;
+    /**
+     * Processes user consent denial
+     *
+     * Builds an error redirect URL and cleans up the temporary auth request.
+     */
+    processConsentDenial(authRequestId: string): Promise<URL>;
+    /**
+     * Creates a temporary authorization request for the consent flow
+     */
+    createAuthorizationRequest(clientId: string, redirectUri: string, codeChallenge?: string, state?: string, resource?: string, scopes?: string[]): string;
+    /**
+     * Retrieves an authorization request
+     */
+    getAuthorizationRequest(authRequestId: string): import("../sessionTypes.js").AuthRequestData | null;
+    get sessionRepository(): SessionRepository;
+    get authCodeRepository(): AuthCodeRepository;
+    get authRequestRepository(): AuthRequestRepository;
+    get clientDataRepository(): ClientDataRepository;
+    /**
+     * Gets the storage directory path
+     */
+    getStorageDir(): string;
+    /**
+     * Graceful shutdown
+     */
+    shutdown(): void;
+}
+//# sourceMappingURL=oauthStorageService.d.ts.map

package/build/auth/storage/oauthStorageService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthStorageService.d.ts","sourceRoot":"","sources":["../../../src/auth/storage/oauthStorageService.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAGjE;;;;;;;GAOG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,OAAO,CAAqB;IACpC,OAAO,CAAC,QAAQ,CAAoB;IACpC,OAAO,CAAC,SAAS,CAAqB;IACtC,OAAO,CAAC,YAAY,CAAwB;IAC5C,OAAO,CAAC,UAAU,CAAuB;gBAE7B,UAAU,CAAC,EAAE,MAAM;IAQ/B;;;;;OAKG;IACG,sBAAsB,CAC1B,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,EAAE,GACvB,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,GAAG,CAAA;KAAE,CAAC;IA2ClD;;;;OAIG;IACG,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IA6B/D;;OAEG;IACH,0BAA0B,CACxB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,aAAa,CAAC,EAAE,MAAM,EACtB,KAAK,CAAC,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,EAAE,GAChB,MAAM;IAIT;;OAEG;IACH,uBAAuB,CAAC,aAAa,EAAE,MAAM;IAK7C,IAAI,iBAAiB,IAAI,iBAAiB,CAEzC;IAED,IAAI,kBAAkB,IAAI,kBAAkB,CAE3C;IAED,IAAI,qBAAqB,IAAI,qBAAqB,CAEjD;IAED,IAAI,oBAAoB,IAAI,oBAAoB,CAE/C;IAED;;OAEG;IACH,aAAa,IAAI,MAAM;IAIvB;;OAEG;IACH,QAAQ,IAAI,IAAI;CAGjB"}

package/build/auth/storage/oauthStorageService.js

@@ -0,0 +1,131 @@
+import logger from '../../logger/logger.js';
+import { AUTH_CONFIG } from '../../constants.js';
+import { FileStorageService } from './fileStorageService.js';
+import { SessionRepository } from './sessionRepository.js';
+import { AuthCodeRepository } from './authCodeRepository.js';
+import { AuthRequestRepository } from './authRequestRepository.js';
+import { ClientDataRepository } from './clientDataRepository.js';
+import { auditScopeOperation } from '../../utils/scopeValidation.js';
+/**
+ * High-level OAuth storage service providing business operations
+ *
+ * This service orchestrates the lower-level repositories to provide
+ * high-level business operations for OAuth flows. It encapsulates
+ * the complexity of coordinating multiple data types and provides
+ * clean APIs for route handlers.
+ */
+export class OAuthStorageService {
+    storage;
+    sessions;
+    authCodes;
+    authRequests;
+    clientData;
+    constructor(storageDir) {
+        this.storage = new FileStorageService(storageDir);
+        this.sessions = new SessionRepository(this.storage);
+        this.authCodes = new AuthCodeRepository(this.storage);
+        this.authRequests = new AuthRequestRepository(this.storage);
+        this.clientData = new ClientDataRepository(this.storage);
+    }
+    /**
+     * Processes user consent approval
+     *
+     * Creates an authorization code with the selected scopes and builds
+     * the redirect URL for the client. Cleans up the temporary auth request.
+     */
+    async processConsentApproval(authRequestId, selectedScopes) {
+        const authRequest = this.authRequests.get(authRequestId);
+        if (!authRequest) {
+            throw new Error('Invalid or expired authorization request');
+        }
+        // Create authorization code with selected scopes
+        const authCode = this.authCodes.create(authRequest.clientId, authRequest.redirectUri, authRequest.resource || '', selectedScopes, AUTH_CONFIG.SERVER.AUTH_CODE.TTL_MS, authRequest.codeChallenge);
+        // Clean up the temporary auth request
+        this.authRequests.delete(authRequestId);
+        // Build redirect URL
+        const redirectUrl = new URL(authRequest.redirectUri);
+        redirectUrl.searchParams.set('code', authCode);
+        if (authRequest.state) {
+            redirectUrl.searchParams.set('state', authRequest.state);
+        }
+        // Audit the operation
+        auditScopeOperation('authorization_granted', {
+            clientId: authRequest.clientId,
+            requestedScopes: authRequest.scopes || [],
+            grantedScopes: selectedScopes,
+            success: true,
+        });
+        logger.info(`OAuth authorization granted for client ${authRequest.clientId}`, {
+            clientId: authRequest.clientId,
+            redirectUri: authRequest.redirectUri,
+            grantedScopes: selectedScopes,
+        });
+        return { authCode, redirectUrl };
+    }
+    /**
+     * Processes user consent denial
+     *
+     * Builds an error redirect URL and cleans up the temporary auth request.
+     */
+    async processConsentDenial(authRequestId) {
+        const authRequest = this.authRequests.get(authRequestId);
+        if (!authRequest) {
+            throw new Error('Invalid or expired authorization request');
+        }
+        // Clean up the auth request
+        this.authRequests.delete(authRequestId);
+        // Build error redirect URL
+        const redirectUrl = new URL(authRequest.redirectUri);
+        redirectUrl.searchParams.set('error', 'access_denied');
+        redirectUrl.searchParams.set('error_description', 'User denied the request');
+        if (authRequest.state) {
+            redirectUrl.searchParams.set('state', authRequest.state);
+        }
+        // Audit the operation
+        auditScopeOperation('authorization_denied', {
+            clientId: authRequest.clientId,
+            success: false,
+            error: 'User denied authorization',
+        });
+        logger.info(`OAuth authorization denied by user for client ${authRequest.clientId}`);
+        return redirectUrl;
+    }
+    /**
+     * Creates a temporary authorization request for the consent flow
+     */
+    createAuthorizationRequest(clientId, redirectUri, codeChallenge, state, resource, scopes) {
+        return this.authRequests.create(clientId, redirectUri, codeChallenge, state, resource, scopes);
+    }
+    /**
+     * Retrieves an authorization request
+     */
+    getAuthorizationRequest(authRequestId) {
+        return this.authRequests.get(authRequestId);
+    }
+    // Expose repositories for direct access when needed (with getters for encapsulation)
+    get sessionRepository() {
+        return this.sessions;
+    }
+    get authCodeRepository() {
+        return this.authCodes;
+    }
+    get authRequestRepository() {
+        return this.authRequests;
+    }
+    get clientDataRepository() {
+        return this.clientData;
+    }
+    /**
+     * Gets the storage directory path
+     */
+    getStorageDir() {
+        return this.storage.getStorageDir();
+    }
+    /**
+     * Graceful shutdown
+     */
+    shutdown() {
+        this.storage.shutdown();
+    }
+}
+//# sourceMappingURL=oauthStorageService.js.map

package/build/auth/storage/oauthStorageService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthStorageService.js","sourceRoot":"","sources":["../../../src/auth/storage/oauthStorageService.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,wBAAwB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAErE;;;;;;;GAOG;AACH,MAAM,OAAO,mBAAmB;IACtB,OAAO,CAAqB;IAC5B,QAAQ,CAAoB;IAC5B,SAAS,CAAqB;IAC9B,YAAY,CAAwB;IACpC,UAAU,CAAuB;IAEzC,YAAY,UAAmB;QAC7B,IAAI,CAAC,OAAO,GAAG,IAAI,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,SAAS,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,CAAC,YAAY,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,UAAU,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,sBAAsB,CAC1B,aAAqB,EACrB,cAAwB;QAExB,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACzD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,iDAAiD;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CACpC,WAAW,CAAC,QAAQ,EACpB,WAAW,CAAC,WAAW,EACvB,WAAW,CAAC,QAAQ,IAAI,EAAE,EAC1B,cAAc,EACd,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EACnC,WAAW,CAAC,aAAa,CAC1B,CAAC;QAEF,sCAAsC;QACtC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAExC,qBAAqB;QACrB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QACrD,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;YACtB,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC;QAC3D,CAAC;QAED,sBAAsB;QACtB,mBAAmB,CAAC,uBAAuB,EAAE;YAC3C,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,eAAe,EAAE,WAAW,CAAC,MAAM,IAAI,EAAE;YACzC,aAAa,EAAE,cAAc;YAC7B,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,0CAA0C,WAAW,CAAC,QAAQ,EAAE,EAAE;YAC5E,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,aAAa,EAAE,cAAc;SAC9B,CAAC,CAAC;QAEH,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;IACnC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,oBAAoB,CAAC,aAAqB;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACzD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,4BAA4B;QAC5B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAExC,2BAA2B;QAC3B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QACrD,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QACvD,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,EAAE,yBAAyB,CAAC,CAAC;QAC7E,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;YACtB,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC;QAC3D,CAAC;QAED,sBAAsB;QACtB,mBAAmB,CAAC,sBAAsB,EAAE;YAC1C,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,2BAA2B;SACnC,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,iDAAiD,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;QAErF,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,0BAA0B,CACxB,QAAgB,EAChB,WAAmB,EACnB,aAAsB,EACtB,KAAc,EACd,QAAiB,EACjB,MAAiB;QAEjB,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjG,CAAC;IAED;;OAEG;IACH,uBAAuB,CAAC,aAAqB;QAC3C,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC9C,CAAC;IAED,qFAAqF;IACrF,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,IAAI,qBAAqB;QACvB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,IAAI,oBAAoB;QACtB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;IAC1B,CAAC;CACF"}

package/build/auth/storage/sessionRepository.d.ts

@@ -0,0 +1,29 @@
+import { SessionData } from '../sessionTypes.js';
+import { FileStorageService } from './fileStorageService.js';
+/**
+ * Repository for session operations
+ *
+ * Manages OAuth 2.1 sessions with automatic expiration and cleanup.
+ * Sessions store user authorization state and granted scopes.
+ */
+export declare class SessionRepository {
+    private storage;
+    constructor(storage: FileStorageService);
+    /**
+     * Creates a new session
+     */
+    create(clientId: string, resource: string, scopes: string[], ttlMs: number): string;
+    /**
+     * Creates a session with a specific token ID (for access tokens)
+     */
+    createWithId(tokenId: string, clientId: string, resource: string, scopes: string[], ttlMs: number): string;
+    /**
+     * Retrieves a session by ID
+     */
+    get(sessionId: string): SessionData | null;
+    /**
+     * Deletes a session by ID
+     */
+    delete(sessionId: string): boolean;
+}
+//# sourceMappingURL=sessionRepository.d.ts.map

package/build/auth/storage/sessionRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionRepository.d.ts","sourceRoot":"","sources":["../../../src/auth/storage/sessionRepository.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D;;;;;GAKG;AACH,qBAAa,iBAAiB;IAChB,OAAO,CAAC,OAAO;gBAAP,OAAO,EAAE,kBAAkB;IAE/C;;OAEG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM;IAenF;;OAEG;IACH,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM;IAe1G;;OAEG;IACH,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IAI1C;;OAEG;IACH,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;CAOnC"}

package/build/auth/storage/sessionRepository.js

@@ -0,0 +1,64 @@
+import { randomUUID } from 'node:crypto';
+import logger from '../../logger/logger.js';
+import { AUTH_CONFIG } from '../../constants.js';
+/**
+ * Repository for session operations
+ *
+ * Manages OAuth 2.1 sessions with automatic expiration and cleanup.
+ * Sessions store user authorization state and granted scopes.
+ */
+export class SessionRepository {
+    storage;
+    constructor(storage) {
+        this.storage = storage;
+    }
+    /**
+     * Creates a new session
+     */
+    create(clientId, resource, scopes, ttlMs) {
+        const sessionId = AUTH_CONFIG.SERVER.SESSION.ID_PREFIX + randomUUID();
+        const sessionData = {
+            clientId,
+            resource,
+            scopes,
+            expires: Date.now() + ttlMs,
+            createdAt: Date.now(),
+        };
+        this.storage.writeData(AUTH_CONFIG.SERVER.SESSION.FILE_PREFIX, sessionId, sessionData);
+        logger.info(`Created session: ${sessionId} for client: ${clientId}`);
+        return sessionId;
+    }
+    /**
+     * Creates a session with a specific token ID (for access tokens)
+     */
+    createWithId(tokenId, clientId, resource, scopes, ttlMs) {
+        const sessionId = AUTH_CONFIG.SERVER.SESSION.ID_PREFIX + tokenId;
+        const sessionData = {
+            clientId,
+            resource,
+            scopes,
+            expires: Date.now() + ttlMs,
+            createdAt: Date.now(),
+        };
+        this.storage.writeData(AUTH_CONFIG.SERVER.SESSION.FILE_PREFIX, sessionId, sessionData);
+        logger.info(`Created session with ID: ${sessionId} for client: ${clientId}`);
+        return sessionId;
+    }
+    /**
+     * Retrieves a session by ID
+     */
+    get(sessionId) {
+        return this.storage.readData(AUTH_CONFIG.SERVER.SESSION.FILE_PREFIX, sessionId);
+    }
+    /**
+     * Deletes a session by ID
+     */
+    delete(sessionId) {
+        const result = this.storage.deleteData(AUTH_CONFIG.SERVER.SESSION.FILE_PREFIX, sessionId);
+        if (result) {
+            logger.info(`Deleted session: ${sessionId}`);
+        }
+        return result;
+    }
+}
+//# sourceMappingURL=sessionRepository.js.map

package/build/auth/storage/sessionRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionRepository.js","sourceRoot":"","sources":["../../../src/auth/storage/sessionRepository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,MAAM,MAAM,wBAAwB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAIjD;;;;;GAKG;AACH,MAAM,OAAO,iBAAiB;IACR;IAApB,YAAoB,OAA2B;QAA3B,YAAO,GAAP,OAAO,CAAoB;IAAG,CAAC;IAEnD;;OAEG;IACH,MAAM,CAAC,QAAgB,EAAE,QAAgB,EAAE,MAAgB,EAAE,KAAa;QACxE,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,GAAG,UAAU,EAAE,CAAC;QACtE,MAAM,WAAW,GAAgB;YAC/B,QAAQ;YACR,QAAQ;YACR,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC3B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QACvF,MAAM,CAAC,IAAI,CAAC,oBAAoB,SAAS,gBAAgB,QAAQ,EAAE,CAAC,CAAC;QACrE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,OAAe,EAAE,QAAgB,EAAE,QAAgB,EAAE,MAAgB,EAAE,KAAa;QAC/F,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC;QACjE,MAAM,WAAW,GAAgB;YAC/B,QAAQ;YACR,QAAQ;YACR,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC3B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QACvF,MAAM,CAAC,IAAI,CAAC,4BAA4B,SAAS,gBAAgB,QAAQ,EAAE,CAAC,CAAC;QAC7E,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,SAAiB;QACnB,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAc,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC/F,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,SAAiB;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAC1F,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,oBAAoB,SAAS,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/build/constants.d.ts

@@ -9,7 +9,7 @@ export declare const MESSAGES_ENDPOINT = "/messages";
 export declare const STREAMABLE_HTTP_ENDPOINT = "/mcp";
 export declare const MCP_CONFIG_FILE = "mcp.json";
 export declare const MCP_SERVER_NAME = "1mcp";
-export declare const MCP_SERVER_VERSION = "0.13.0";
+export declare const MCP_SERVER_VERSION = "0.14.0";
 export declare const MCP_URI_SEPARATOR = "_1mcp_";
 export declare const CONFIG_DIR_NAME = "1mcp";
 export declare const DEFAULT_CONFIG: {
@@ -30,21 +30,31 @@ export declare const CONNECTION_RETRY: {
 export declare const AUTH_CONFIG: {
     SERVER: {
         DEFAULT_ENABLED: boolean;
+        STORAGE: {
+            DIR: string;
+            FILE_EXTENSION: string;
+        };
         SESSION: {
             TTL_MINUTES: number;
-            STORAGE_DIR: string;
+            ID_PREFIX: string;
             FILE_PREFIX: string;
-            FILE_EXTENSION: string;
         };
-        OAUTH: {
-            CODE_TTL_MS: number;
-            TOKEN_TTL_MS: number;
+        AUTH_CODE: {
+            TTL_MS: number;
+            ID_PREFIX: string;
+            FILE_PREFIX: string;
         };
-        PREFIXES: {
-            SESSION_ID: string;
-            ACCESS_TOKEN: string;
-            AUTH_CODE: string;
-            CLIENT_ID: string;
+        AUTH_REQUEST: {
+            TTL_MS: number;
+            ID_PREFIX: string;
+            FILE_PREFIX: string;
+        };
+        TOKEN: {
+            TTL_MS: number;
+            ID_PREFIX: string;
+        };
+        CLIENT: {
+            ID_PREFIX: string;
         };
     };
     CLIENT: {
@@ -56,6 +66,11 @@ export declare const AUTH_CONFIG: {
             DEFAULT_CALLBACK_PATH: string;
             DEFAULT_SCOPES: never[];
         };
+        SESSION: {
+            TTL_MS: number;
+            ID_PREFIX: string;
+            FILE_PREFIX: string;
+        };
         PREFIXES: {
             CLIENT: string;
             TOKENS: string;

package/build/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAG5F,eAAO,MAAM,IAAI,OAAO,CAAC;AACzB,eAAO,MAAM,IAAI,cAAc,CAAC;AAGhC,eAAO,MAAM,YAAY,SAAS,CAAC;AACnC,eAAO,MAAM,iBAAiB,cAAc,CAAC;AAC7C,eAAO,MAAM,wBAAwB,SAAS,CAAC;AAG/C,eAAO,MAAM,eAAe,aAAa,CAAC;AAC1C,eAAO,MAAM,eAAe,SAAS,CAAC;AACtC,eAAO,MAAM,kBAAkB,WAAW,CAAC;AAE3C,eAAO,MAAM,iBAAiB,WAAW,CAAC;AAG1C,eAAO,MAAM,eAAe,SAAS,CAAC;AACtC,eAAO,MAAM,cAAc;;CAE1B,CAAC;AAEF;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAY3C;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAGD,eAAO,MAAM,gBAAgB;;;CAG5B,CAAC;AAGF,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuCvB,CAAC;AAGF,eAAO,MAAM,iBAAiB;;;;;;;;CAM7B,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,kBAYrC,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,kBAUrC,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAG5F,eAAO,MAAM,IAAI,OAAO,CAAC;AACzB,eAAO,MAAM,IAAI,cAAc,CAAC;AAGhC,eAAO,MAAM,YAAY,SAAS,CAAC;AACnC,eAAO,MAAM,iBAAiB,cAAc,CAAC;AAC7C,eAAO,MAAM,wBAAwB,SAAS,CAAC;AAG/C,eAAO,MAAM,eAAe,aAAa,CAAC;AAC1C,eAAO,MAAM,eAAe,SAAS,CAAC;AACtC,eAAO,MAAM,kBAAkB,WAAW,CAAC;AAE3C,eAAO,MAAM,iBAAiB,WAAW,CAAC;AAG1C,eAAO,MAAM,eAAe,SAAS,CAAC;AACtC,eAAO,MAAM,cAAc;;CAE1B,CAAC;AAEF;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAY3C;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAGD,eAAO,MAAM,gBAAgB;;;CAG5B,CAAC;AAGF,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkEvB,CAAC;AAGF,eAAO,MAAM,iBAAiB;;;;;;;;CAM7B,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,kBAYrC,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,kBAUrC,CAAC"}