@alpaca-open-api/core 0.1.0-rc.0

package/dist/api-routing.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Single source of truth for per-API routing: which host backs each Alpaca API
+ * and how it authenticates. Pure data, consumed by the MCP server's mutator
+ * (`packages/mcp/src/mutator.ts`) to resolve host + auth per API.
+ */
+/** How an API authenticates requests. */
+export type AuthStrategy = 'apca' | 'basic' | 'form';
+/** Per-API metadata: auth strategy and the base URLs that back it. */
+export type ApiMeta = {
+    auth: AuthStrategy;
+    servers: Record<string, string>;
+};
+export declare const API_ROUTING: Record<string, ApiMeta>;

package/dist/generated/authx/client.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Generated by orval v8.18.0 🍺
+ * Do not edit manually.
+ * Authentication API
+ * OpenAPI spec version: 1.0.0
+ */
+import type { ErrorResponse, TokenRequest, TokenResponse } from './model/index.js';
+export type HTTPStatusCode1xx = 100 | 101 | 102 | 103;
+export type HTTPStatusCode2xx = 200 | 201 | 202 | 203 | 204 | 205 | 206 | 207;
+export type HTTPStatusCode3xx = 300 | 301 | 302 | 303 | 304 | 305 | 307 | 308;
+export type HTTPStatusCode4xx = 400 | 401 | 402 | 403 | 404 | 405 | 406 | 407 | 408 | 409 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 419 | 420 | 421 | 422 | 423 | 424 | 426 | 428 | 429 | 431 | 451;
+export type HTTPStatusCode5xx = 500 | 501 | 502 | 503 | 504 | 505 | 507 | 511;
+export type HTTPStatusCodes = HTTPStatusCode1xx | HTTPStatusCode2xx | HTTPStatusCode3xx | HTTPStatusCode4xx | HTTPStatusCode5xx;
+export type issueTokensResponse200 = {
+    data: TokenResponse;
+    status: 200;
+};
+export type issueTokensResponseDefault = {
+    data: ErrorResponse;
+    status: Exclude<HTTPStatusCodes, 200>;
+};
+export type issueTokensResponseSuccess = (issueTokensResponse200) & {
+    headers: Headers;
+};
+export type issueTokensResponseError = (issueTokensResponseDefault) & {
+    headers: Headers;
+};
+export type issueTokensResponse = (issueTokensResponseSuccess | issueTokensResponseError);
+export declare const getIssueTokensUrl: () => string;
+/**
+ * Issue access tokens using various grant types:
+ * - `client_credentials`: Exchange client credentials for an access token
+ * - `urn:ietf:params:oauth:grant-type:jwt-bearer`: Exchange JWT assertion (Keycloak for brokerdash or Google for admin)
+ * - `refresh_token`: Refresh an admin access token using a refresh token
+ * @summary Issue tokens
+ */
+export declare const issueTokens: (tokenRequest: TokenRequest, options?: RequestInit) => Promise<issueTokensResponse>;

package/dist/generated/authx/model/clientId.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Generated by orval v8.18.0 🍺
+ * Do not edit manually.
+ * Authentication API
+ * OpenAPI spec version: 1.0.0
+ */
+/**
+ * Client ID
+ * @minLength 20
+ * @maxLength 32
+ * @pattern ^[A-Z0-9]+$
+ */
+export type ClientId = string;

package/dist/generated/authx/model/errorCode.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Generated by orval v8.18.0 🍺
+ * Do not edit manually.
+ * Authentication API
+ * OpenAPI spec version: 1.0.0
+ */
+/**
+ * Error code
+ */
+export type ErrorCode = typeof ErrorCode[keyof typeof ErrorCode];
+export declare const ErrorCode: {
+    readonly unknown_error: "unknown_error";
+    readonly invalid_request_uri: "invalid_request_uri";
+    readonly invalid_request_object: "invalid_request_object";
+    readonly consent_required: "consent_required";
+    readonly interaction_required: "interaction_required";
+    readonly login_required: "login_required";
+    readonly request_unauthorized: "request_unauthorized";
+    readonly request_forbidden: "request_forbidden";
+    readonly invalid_request: "invalid_request";
+    readonly unauthorized_client: "unauthorized_client";
+    readonly access_denied: "access_denied";
+    readonly unsupported_response_type: "unsupported_response_type";
+    readonly unsupported_response_mode: "unsupported_response_mode";
+    readonly invalid_scope: "invalid_scope";
+    readonly server_error: "server_error";
+    readonly temporarily_unavailable: "temporarily_unavailable";
+    readonly unsupported_grant_type: "unsupported_grant_type";
+    readonly invalid_grant: "invalid_grant";
+    readonly invalid_client: "invalid_client";
+    readonly not_found: "not_found";
+    readonly invalid_state: "invalid_state";
+    readonly misconfiguration: "misconfiguration";
+    readonly insufficient_entropy: "insufficient_entropy";
+    readonly invalid_token: "invalid_token";
+    readonly token_signature_mismatch: "token_signature_mismatch";
+    readonly scope_not_granted: "scope_not_granted";
+    readonly token_claim: "token_claim";
+    readonly token_inactive: "token_inactive";
+    readonly request_not_supported: "request_not_supported";
+    readonly request_uri_not_supported: "request_uri_not_supported";
+    readonly jti_known: "jti_known";
+    readonly quota_exceeded: "quota_exceeded";
+    readonly conflict: "conflict";
+};

package/dist/generated/authx/model/errorResponse.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Generated by orval v8.18.0 🍺
+ * Do not edit manually.
+ * Authentication API
+ * OpenAPI spec version: 1.0.0
+ */
+import type { ErrorCode } from './errorCode.js';
+import type { ErrorResponseField } from './errorResponseField.js';
+export interface ErrorResponse {
+    error: ErrorCode;
+    /** List of invalid request fields, if any */
+    fields?: ErrorResponseField[];
+}

package/dist/generated/authx/model/errorResponseField.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Generated by orval v8.18.0 🍺
+ * Do not edit manually.
+ * Authentication API
+ * OpenAPI spec version: 1.0.0
+ */
+export interface ErrorResponseField {
+    /** Name of the request field */
+    name: string;
+}

package/dist/generated/authx/model/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Generated by orval v8.18.0 🍺
+ * Do not edit manually.
+ * Authentication API
+ * OpenAPI spec version: 1.0.0
+ */
+export * from './clientId.js';
+export * from './errorCode.js';
+export * from './errorResponse.js';
+export * from './errorResponseField.js';
+export * from './tokenRequest.js';
+export * from './tokenRequestClientAssertionType.js';
+export * from './tokenRequestGrantType.js';
+export * from './tokenResponse.js';
+export * from './tokenResponseTokenType.js';

package/dist/generated/authx/model/tokenRequest.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Generated by orval v8.18.0 🍺
+ * Do not edit manually.
+ * Authentication API
+ * OpenAPI spec version: 1.0.0
+ */
+import type { ClientId } from './clientId.js';
+import type { TokenRequestClientAssertionType } from './tokenRequestClientAssertionType.js';
+import type { TokenRequestGrantType } from './tokenRequestGrantType.js';
+export interface TokenRequest {
+    /**
+       * Client assertion JWT (if using private_key_jwt)
+       * @maxLength 16384
+       */
+    client_assertion?: string;
+    /** Client assertion type (if using private_key_jwt) */
+    client_assertion_type?: TokenRequestClientAssertionType;
+    client_id?: ClientId;
+    /**
+       * Client secret (if using client_secret)
+       * @maxLength 128
+       */
+    client_secret?: string;
+    /** Grant type */
+    grant_type: TokenRequestGrantType;
+}

package/dist/generated/authx/model/tokenRequestClientAssertionType.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Generated by orval v8.18.0 🍺
+ * Do not edit manually.
+ * Authentication API
+ * OpenAPI spec version: 1.0.0
+ */
+/**
+ * Client assertion type (if using private_key_jwt)
+ */
+export type TokenRequestClientAssertionType = typeof TokenRequestClientAssertionType[keyof typeof TokenRequestClientAssertionType];
+export declare const TokenRequestClientAssertionType: {
+    readonly 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer': "urn:ietf:params:oauth:client-assertion-type:jwt-bearer";
+};

package/dist/generated/authx/model/tokenRequestGrantType.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Generated by orval v8.18.0 🍺
+ * Do not edit manually.
+ * Authentication API
+ * OpenAPI spec version: 1.0.0
+ */
+/**
+ * Grant type
+ */
+export type TokenRequestGrantType = typeof TokenRequestGrantType[keyof typeof TokenRequestGrantType];
+export declare const TokenRequestGrantType: {
+    readonly client_credentials: "client_credentials";
+    readonly 'urn:ietf:params:oauth:grant-type:jwt-bearer': "urn:ietf:params:oauth:grant-type:jwt-bearer";
+    readonly refresh_token: "refresh_token";
+};

package/dist/generated/authx/model/tokenResponse.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Generated by orval v8.18.0 🍺
+ * Do not edit manually.
+ * Authentication API
+ * OpenAPI spec version: 1.0.0
+ */
+import type { TokenResponseTokenType } from './tokenResponseTokenType.js';
+export interface TokenResponse {
+    /** Access token */
+    access_token: string;
+    /** Time in seconds until the token expires */
+    expires_in: number;
+    /** Refresh token */
+    refresh_token?: string;
+    /** Type of the token (e.g., Bearer) */
+    token_type: TokenResponseTokenType;
+}

package/dist/generated/authx/model/tokenResponseTokenType.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Generated by orval v8.18.0 🍺
+ * Do not edit manually.
+ * Authentication API
+ * OpenAPI spec version: 1.0.0
+ */
+/**
+ * Type of the token (e.g., Bearer)
+ */
+export type TokenResponseTokenType = typeof TokenResponseTokenType[keyof typeof TokenResponseTokenType];
+export declare const TokenResponseTokenType: {
+    readonly Bearer: "Bearer";
+};