@atxp/common 0.2.5

package/dist/mcpJson.js

@@ -0,0 +1,127 @@
+import { PAYMENT_REQUIRED_ERROR_CODE, PAYMENT_REQUIRED_PREAMBLE } from './paymentRequiredError.js';
+import { isJSONRPCError, isJSONRPCResponse, JSONRPCMessageSchema } from '@modelcontextprotocol/sdk/types.js';
+import { ZodError } from 'zod';
+import { isSSEResponse, parseSSEMessages, extractJSONFromSSE } from './sseParser.js';
+export function parsePaymentRequests(message) {
+    const res = [];
+    // Handle MCP protocol-level errors. These have an explicit error code that we can check for
+    if (isJSONRPCError(message)) {
+        // Explicitly throw payment required errors that result in MCP protocol-level errors
+        const rpcError = message;
+        if (rpcError.error.code === PAYMENT_REQUIRED_ERROR_CODE) {
+            const paymentRequestUrl = rpcError.error.data?.paymentRequestUrl;
+            const dataPr = _parsePaymentRequestFromString(paymentRequestUrl);
+            if (dataPr) {
+                res.push(dataPr);
+            }
+            else {
+                const pr = _parsePaymentRequestFromString(rpcError.error.message);
+                if (pr) {
+                    res.push(pr);
+                }
+            }
+        }
+        // Elicitation - required errors
+        // Current draft of elicitation-required error code as per
+        // https://github.com/modelcontextprotocol/modelcontextprotocol/pull/887
+        if (rpcError.error.code === -32604) {
+            const elicitations = rpcError.error.data?.elicitations || [];
+            for (const elicitation of elicitations) {
+                if (elicitation?.mode === 'url') {
+                    const pr = _parsePaymentRequestFromString(elicitation?.url);
+                    if (pr) {
+                        res.push(pr);
+                    }
+                }
+            }
+        }
+    }
+    // TODO: Ensure that ATXP errors only come back as MCP protocol-level errors.
+    // Handle MCP tool application-level errors. For these, the error message is serialized into a normal 
+    // tool response with the isError flag set
+    if (isJSONRPCResponse(message)) {
+        const toolResult = message.result;
+        if (toolResult.isError) {
+            for (const content of toolResult.content) {
+                if (content.type === 'text') {
+                    const text = content.text;
+                    if (text.includes(PAYMENT_REQUIRED_PREAMBLE) && text.includes(PAYMENT_REQUIRED_ERROR_CODE.toString())) {
+                        const pr = _parsePaymentRequestFromString(text);
+                        if (pr) {
+                            res.push(pr);
+                        }
+                    }
+                }
+            }
+        }
+    }
+    return res;
+}
+function _parsePaymentRequestFromString(text) {
+    if (!text) {
+        return null;
+    }
+    const paymentRequestUrl = /(http[^ ]+)\/payment-request\/([^ ]+)/.exec(text);
+    if (paymentRequestUrl) {
+        const id = paymentRequestUrl[2];
+        const url = paymentRequestUrl[0];
+        return { url, id };
+    }
+    return null;
+}
+export async function parseMcpMessages(json, logger) {
+    let messages = [];
+    try {
+        // Check if the response is SSE formatted
+        if (typeof json === 'string' && isSSEResponse(json)) {
+            logger?.debug('Detected SSE-formatted response, parsing SSE messages');
+            const sseMessages = parseSSEMessages(json);
+            const jsonMessages = extractJSONFromSSE(sseMessages, logger);
+            // Process each JSON message from SSE
+            for (const jsonMsg of jsonMessages) {
+                try {
+                    if (Array.isArray(jsonMsg)) {
+                        // Handle batch messages from SSE
+                        const batchMessages = jsonMsg.map(msg => JSONRPCMessageSchema.parse(msg));
+                        messages.push(...batchMessages);
+                    }
+                    else {
+                        // Handle single message from SSE
+                        const message = JSONRPCMessageSchema.parse(jsonMsg);
+                        messages.push(message);
+                    }
+                }
+                catch (parseError) {
+                    if (parseError instanceof ZodError) {
+                        logger?.warn(`Invalid JSON-RPC message format in SSE data`);
+                        logger?.debug(parseError.message);
+                    }
+                    else {
+                        logger?.error(`Unexpected error parsing JSON-RPC message from SSE: ${parseError}`);
+                    }
+                }
+            }
+        }
+        else {
+            // Handle regular JSON responses
+            if (Array.isArray(json)) {
+                messages = json.map(msg => JSONRPCMessageSchema.parse(msg));
+            }
+            else {
+                messages = [JSONRPCMessageSchema.parse(json)];
+            }
+        }
+    }
+    catch (error) {
+        // If Zod validation fails, log the error and return empty array
+        if (error instanceof ZodError) {
+            logger?.warn(`Invalid JSON-RPC message format`);
+            logger?.debug(error.message);
+        }
+        else {
+            logger?.error(`Unexpected error parsing JSON-RPC messages: ${error}`);
+        }
+    }
+    return messages;
+}
+//# sourceMappingURL=mcpJson.js.map

package/dist/mcpJson.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpJson.js","sourceRoot":"","sources":["../src/mcpJson.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAEnG,OAAO,EAAkB,cAAc,EAAE,iBAAiB,EAAgC,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAE3J,OAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAErF,MAAM,UAAU,oBAAoB,CAAC,OAAuB;IAC1D,MAAM,GAAG,GAAG,EAAE,CAAC;IACf,4FAA4F;IAC5F,IAAI,cAAc,CAAC,OAAO,CAAC,EAAC,CAAC;QAC3B,oFAAoF;QACpF,MAAM,QAAQ,GAAG,OAAuB,CAAC;QACzC,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,2BAA2B,EAAE,CAAC;YACxD,MAAM,iBAAiB,GAAI,QAAQ,CAAC,KAAK,CAAC,IAAoC,EAAE,iBAAiB,CAAC;YAClG,MAAM,MAAM,GAAG,8BAA8B,CAAC,iBAAiB,CAAC,CAAC;YACjE,IAAG,MAAM,EAAE,CAAC;gBACV,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACN,MAAM,EAAE,GAAG,8BAA8B,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAClE,IAAG,EAAE,EAAE,CAAC;oBACN,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACf,CAAC;YACH,CAAC;QACH,CAAC;QACD,gCAAgC;QAChC,0DAA0D;QAC1D,wEAAwE;QACxE,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACnC,MAAM,YAAY,GAAI,QAAQ,CAAC,KAAK,CAAC,IAAgE,EAAE,YAAY,IAAI,EAAE,CAAC;YAC1H,KAAI,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;gBACtC,IAAG,WAAW,EAAE,IAAI,KAAK,KAAK,EAAE,CAAC;oBAC/B,MAAM,EAAE,GAAG,8BAA8B,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;oBAC5D,IAAG,EAAE,EAAE,CAAC;wBACN,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBACf,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,sGAAsG;IACtG,0CAA0C;IAC1C,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAC,CAAC;QAC9B,MAAM,UAAU,GAAG,OAAO,CAAC,MAAwB,CAAC;QACpD,IAAG,UAAU,CAAC,OAAO,EAAE,CAAC;YACtB,KAAI,MAAM,OAAO,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACxC,IAAG,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oBAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;oBAC1B,IAAG,IAAI,CAAC,QAAQ,CAAC,yBAAyB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,2BAA2B,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;wBACrG,MAAM,EAAE,GAAG,8BAA8B,CAAC,IAAI,CAAC,CAAC;wBAChD,IAAG,EAAE,EAAE,CAAC;4BACN,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;wBACf,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,8BAA8B,CAAC,IAAmB;IACzD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,iBAAiB,GAAG,uCAAuC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7E,IAAI,iBAAiB,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,iBAAiB,CAAC,CAAC,CAA2B,CAAC;QAC3D,OAAO,EAAC,GAAG,EAAE,EAAE,EAAC,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAa,EAAE,MAAe;IACnE,IAAI,QAAQ,GAAqB,EAAE,CAAC;IAEpC,IAAI,CAAC;QACH,yCAAyC;QACzC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,MAAM,EAAE,KAAK,CAAC,uDAAuD,CAAC,CAAC;YACvE,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,YAAY,GAAG,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAE7D,qCAAqC;YACrC,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;gBACnC,IAAI,CAAC;oBACH,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC3B,iCAAiC;wBACjC,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;wBAC1E,QAAQ,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;oBAClC,CAAC;yBAAM,CAAC;wBACN,iCAAiC;wBACjC,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;wBACpD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACzB,CAAC;gBACH,CAAC;gBAAC,OAAO,UAAU,EAAE,CAAC;oBACpB,IAAI,UAAU,YAAY,QAAQ,EAAE,CAAC;wBACnC,MAAM,EAAE,IAAI,CAAC,6CAA6C,CAAC,CAAC;wBAC5D,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;oBACpC,CAAC;yBAAM,CAAC;wBACN,MAAM,EAAE,KAAK,CAAC,uDAAuD,UAAU,EAAE,CAAC,CAAC;oBACrF,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,gCAAgC;YAChC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,gEAAgE;QAChE,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;YAC9B,MAAM,EAAE,IAAI,CAAC,iCAAiC,CAAC,CAAC;YAChD,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,KAAK,CAAC,+CAA+C,KAAK,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/memoryOAuthDb.d.ts

@@ -0,0 +1,25 @@
+import { OAuthDb, ClientCredentials, PKCEValues, AccessToken, Logger } from './types.js';
+export interface MemoryOAuthDbConfig {
+    logger?: Logger;
+}
+export declare class MemoryOAuthDb implements OAuthDb {
+    private clientCredentials;
+    private pkceValues;
+    private accessTokens;
+    private logger;
+    constructor(config?: MemoryOAuthDbConfig);
+    getClientCredentials(serverUrl: string): Promise<ClientCredentials | null>;
+    saveClientCredentials(serverUrl: string, credentials: ClientCredentials): Promise<void>;
+    getPKCEValues(userId: string, state: string): Promise<PKCEValues | null>;
+    savePKCEValues(userId: string, state: string, values: PKCEValues): Promise<void>;
+    getAccessToken(userId: string, url: string): Promise<AccessToken | null>;
+    saveAccessToken(userId: string, url: string, token: AccessToken): Promise<void>;
+    close(): Promise<void>;
+    getStats(): {
+        clientCredentials: number;
+        pkceValues: number;
+        accessTokens: number;
+    };
+    cleanupExpiredTokens(): number;
+}
+//# sourceMappingURL=memoryOAuthDb.d.ts.map

package/dist/memoryOAuthDb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memoryOAuthDb.d.ts","sourceRoot":"","sources":["../src/memoryOAuthDb.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAY,MAAM,YAAY,CAAC;AAGnG,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,aAAc,YAAW,OAAO;IAC3C,OAAO,CAAC,iBAAiB,CAAwC;IACjE,OAAO,CAAC,UAAU,CAAiC;IACnD,OAAO,CAAC,YAAY,CAAkC;IACtD,OAAO,CAAC,MAAM,CAAS;gBAEX,MAAM,GAAE,mBAAwB;IAMtC,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAW1E,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAOvF,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAMxE,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAMhF,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAqBxE,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAW/E,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ5B,QAAQ;;;;;IASR,oBAAoB,IAAI,MAAM;CAiB/B"}

package/dist/memoryOAuthDb.js

@@ -0,0 +1,97 @@
+import { LogLevel } from './types.js';
+import { ConsoleLogger } from './logger.js';
+export class MemoryOAuthDb {
+    constructor(config = {}) {
+        this.clientCredentials = new Map();
+        this.pkceValues = new Map(); // key: `${userId}:${state}`
+        this.accessTokens = new Map(); // key: `${userId}:${url}`
+        this.logger = config.logger || new ConsoleLogger({ prefix: '[memory-oauth-db]', level: LogLevel.INFO });
+        this.logger.info(`Initialized in-memory OAuth database (instance: ${Math.random().toString(36).substr(2, 9)})`);
+    }
+    // OAuthResourceDb methods
+    async getClientCredentials(serverUrl) {
+        const credentials = this.clientCredentials.get(serverUrl) || null;
+        if (credentials) {
+            this.logger.debug(`Getting client credentials for server: ${serverUrl} (cached)`);
+        }
+        else {
+            this.logger.info(`Getting client credentials for server: ${serverUrl} (not cached)`);
+            this.logger.debug(`Available keys in cache: ${Array.from(this.clientCredentials.keys()).join(', ')}`);
+        }
+        return credentials;
+    }
+    async saveClientCredentials(serverUrl, credentials) {
+        this.logger.info(`Saving client credentials for server: ${serverUrl}`);
+        this.logger.debug(`Client credentials: clientId=${credentials.clientId}`);
+        this.clientCredentials.set(serverUrl, credentials);
+    }
+    // OAuthDb methods
+    async getPKCEValues(userId, state) {
+        const key = `${userId}:${state}`;
+        this.logger.info(`Getting PKCE values for user: ${userId}, state: ${state}`);
+        return this.pkceValues.get(key) || null;
+    }
+    async savePKCEValues(userId, state, values) {
+        const key = `${userId}:${state}`;
+        this.logger.info(`Saving PKCE values for user: ${userId}, state: ${state}`);
+        this.pkceValues.set(key, values);
+    }
+    async getAccessToken(userId, url) {
+        const key = `${userId}:${url}`;
+        this.logger.info(`Getting access token for user: ${userId}, url: ${url}`);
+        const token = this.accessTokens.get(key);
+        if (!token) {
+            this.logger.debug(`No cached token found for key: ${key}`);
+            return null;
+        }
+        // Check if token has expired
+        if (token.expiresAt && token.expiresAt < Date.now()) {
+            this.logger.info(`Access token expired for user: ${userId}, url: ${url}`);
+            this.accessTokens.delete(key);
+            return null;
+        }
+        this.logger.debug(`Found valid cached token for user: ${userId}, url: ${url}`);
+        return token;
+    }
+    async saveAccessToken(userId, url, token) {
+        const key = `${userId}:${url}`;
+        const existingToken = this.accessTokens.get(key);
+        if (existingToken) {
+            this.logger.debug(`Updating access token for user: ${userId}, url: ${url}`);
+        }
+        else {
+            this.logger.info(`Saving new access token for user: ${userId}, url: ${url}`);
+        }
+        this.accessTokens.set(key, token);
+    }
+    async close() {
+        this.logger.info('Closing in-memory OAuth database');
+        this.clientCredentials.clear();
+        this.pkceValues.clear();
+        this.accessTokens.clear();
+    }
+    // Utility methods for debugging/monitoring
+    getStats() {
+        return {
+            clientCredentials: this.clientCredentials.size,
+            pkceValues: this.pkceValues.size,
+            accessTokens: this.accessTokens.size
+        };
+    }
+    // Clean up expired tokens periodically
+    cleanupExpiredTokens() {
+        const now = Date.now();
+        let cleaned = 0;
+        for (const [key, token] of this.accessTokens.entries()) {
+            if (token.expiresAt && token.expiresAt < now) {
+                this.accessTokens.delete(key);
+                cleaned++;
+            }
+        }
+        if (cleaned > 0) {
+            this.logger.info(`Cleaned up ${cleaned} expired access tokens`);
+        }
+        return cleaned;
+    }
+}
+//# sourceMappingURL=memoryOAuthDb.js.map

package/dist/memoryOAuthDb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memoryOAuthDb.js","sourceRoot":"","sources":["../src/memoryOAuthDb.ts"],"names":[],"mappings":"AAAA,OAAO,EAA+D,QAAQ,EAAE,MAAM,YAAY,CAAC;AACnG,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAM5C,MAAM,OAAO,aAAa;IAMxB,YAAY,SAA8B,EAAE;QALpC,sBAAiB,GAAG,IAAI,GAAG,EAA6B,CAAC;QACzD,eAAU,GAAG,IAAI,GAAG,EAAsB,CAAC,CAAC,4BAA4B;QACxE,iBAAY,GAAG,IAAI,GAAG,EAAuB,CAAC,CAAC,0BAA0B;QAI/E,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,aAAa,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QACxG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mDAAmD,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;IAClH,CAAC;IAED,0BAA0B;IAC1B,KAAK,CAAC,oBAAoB,CAAC,SAAiB;QAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;QAClE,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,SAAS,WAAW,CAAC,CAAC;QACpF,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,SAAS,eAAe,CAAC,CAAC;YACrF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxG,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,SAAiB,EAAE,WAA8B;QAC3E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yCAAyC,SAAS,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACrD,CAAC;IAED,kBAAkB;IAClB,KAAK,CAAC,aAAa,CAAC,MAAc,EAAE,KAAa;QAC/C,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iCAAiC,MAAM,YAAY,KAAK,EAAE,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,KAAa,EAAE,MAAkB;QACpE,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,MAAM,YAAY,KAAK,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,GAAW;QAC9C,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,MAAM,UAAU,GAAG,EAAE,CAAC,CAAC;QAE1E,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,6BAA6B;QAC7B,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACpD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,MAAM,UAAU,GAAG,EAAE,CAAC,CAAC;YAC1E,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,MAAM,UAAU,GAAG,EAAE,CAAC,CAAC;QAC/E,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,GAAW,EAAE,KAAkB;QACnE,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC;QAC/B,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,MAAM,UAAU,GAAG,EAAE,CAAC,CAAC;QAC9E,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,MAAM,UAAU,GAAG,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QACrD,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,2CAA2C;IAC3C,QAAQ;QACN,OAAO;YACL,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI;YAC9C,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI;SACrC,CAAC;IACJ,CAAC;IAED,uCAAuC;IACvC,oBAAoB;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;YACvD,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;gBAC7C,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QAED,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,OAAO,wBAAwB,CAAC,CAAC;QAClE,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/oAuthDb.d.ts

@@ -0,0 +1,26 @@
+import { SQLiteDatabase } from './platform/index.js';
+import type { AccessToken, ClientCredentials, Logger, OAuthDb, PKCEValues } from './types.js';
+export interface OAuthDbConfig {
+    db?: string | SQLiteDatabase;
+    encrypt?: (data: string) => string;
+    decrypt?: (data: string) => string;
+    logger?: Logger;
+}
+export declare class SqliteOAuthDb implements OAuthDb {
+    private db;
+    private initialized;
+    private encrypt;
+    private decrypt;
+    private logger;
+    static getDefaultDbPath(): string;
+    constructor({ db, encrypt, decrypt, logger }?: OAuthDbConfig);
+    ensureInitialized: () => Promise<void>;
+    getClientCredentials: (resourceUrl: string) => Promise<ClientCredentials | null>;
+    saveClientCredentials: (resourceUrl: string, credentials: ClientCredentials) => Promise<void>;
+    getPKCEValues: (userId: string, state: string) => Promise<PKCEValues | null>;
+    savePKCEValues: (userId: string, state: string, values: PKCEValues) => Promise<void>;
+    getAccessToken: (userId: string, url: string) => Promise<AccessToken | null>;
+    saveAccessToken: (userId: string, url: string, token: AccessToken) => Promise<void>;
+    close: () => Promise<void>;
+}
+//# sourceMappingURL=oAuthDb.d.ts.map

package/dist/oAuthDb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oAuthDb.d.ts","sourceRoot":"","sources":["../src/oAuthDb.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE7D,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE9F,MAAM,WAAW,aAAa;IAC5B,EAAE,CAAC,EAAE,MAAM,GAAG,cAAc,CAAC;IAC7B,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IACnC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,aAAc,YAAW,OAAO;IAC3C,OAAO,CAAC,EAAE,CAAiB;IAC3B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,OAAO,CAA2B;IAC1C,OAAO,CAAC,OAAO,CAA2B;IAC1C,OAAO,CAAC,MAAM,CAAS;IAEvB,MAAM,CAAC,gBAAgB,IAAI,MAAM;gBAIrB,EACV,EAAqC,EACrC,OAAgC,EAChC,OAAgC,EAChC,MAA4B,EAC7B,GAAE,aAAkB;IAOrB,iBAAiB,QAAa,OAAO,CAAC,IAAI,CAAC,CAkC1C;IAED,oBAAoB,GAAU,aAAa,MAAM,KAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAgBpF;IAED,qBAAqB,GACnB,aAAa,MAAM,EACnB,aAAa,iBAAiB,KAC7B,OAAO,CAAC,IAAI,CAAC,CAef;IAED,aAAa,GAAU,QAAQ,MAAM,EAAE,OAAO,MAAM,KAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAkBhF;IAED,cAAc,GACZ,QAAQ,MAAM,EACd,OAAO,MAAM,EACb,QAAQ,UAAU,KACjB,OAAO,CAAC,IAAI,CAAC,CAiBf;IAED,cAAc,GAAU,QAAQ,MAAM,EAAE,KAAK,MAAM,KAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAoBhF;IAED,eAAe,GACb,QAAQ,MAAM,EACd,KAAK,MAAM,EACX,OAAO,WAAW,KACjB,OAAO,CAAC,IAAI,CAAC,CAiBf;IAED,KAAK,QAAa,OAAO,CAAC,IAAI,CAAC,CAW9B;CACF"}

package/dist/oAuthDb.js

@@ -0,0 +1,145 @@
+import { sqlite } from './platform/index.js';
+import { ConsoleLogger } from './logger.js';
+export class SqliteOAuthDb {
+    static getDefaultDbPath() {
+        return 'oauthClient.db';
+    }
+    constructor({ db = SqliteOAuthDb.getDefaultDbPath(), encrypt = (data) => data, decrypt = (data) => data, logger = new ConsoleLogger() } = {}) {
+        this.initialized = false;
+        this.ensureInitialized = async () => {
+            if (this.initialized)
+                return;
+            // Create tables
+            await this.db.execAsync(`
+      CREATE TABLE IF NOT EXISTS oauth_client_credentials (
+        resource_url TEXT PRIMARY KEY,
+        encrypted_client_id TEXT NOT NULL,
+        encrypted_client_secret TEXT NOT NULL,
+        redirect_uri TEXT NOT NULL
+      );
+
+      CREATE TABLE IF NOT EXISTS oauth_pkce_values (
+        user_id TEXT NOT NULL,
+        state TEXT NOT NULL,
+        encrypted_code_verifier TEXT NOT NULL,
+        encrypted_code_challenge TEXT NOT NULL,
+        resource_url TEXT NOT NULL,
+        url TEXT NOT NULL,
+        PRIMARY KEY (user_id, state)
+      );
+
+      CREATE TABLE IF NOT EXISTS oauth_access_tokens (
+        user_id TEXT NOT NULL,
+        url TEXT NOT NULL,
+        resource_url TEXT NOT NULL,
+        encrypted_access_token TEXT NOT NULL,
+        encrypted_refresh_token TEXT,
+        expires_at TEXT,
+        PRIMARY KEY (user_id, url)
+      );
+    `);
+            this.initialized = true;
+        };
+        this.getClientCredentials = async (resourceUrl) => {
+            await this.ensureInitialized();
+            const preparedRow = await this.db.prepareAsync('SELECT encrypted_client_id, encrypted_client_secret, redirect_uri FROM oauth_client_credentials WHERE resource_url = ?');
+            try {
+                const rowIterator = await preparedRow.executeAsync(resourceUrl);
+                const row = await rowIterator.getFirstAsync();
+                return row ? {
+                    clientId: this.decrypt(row.encrypted_client_id),
+                    clientSecret: this.decrypt(row.encrypted_client_secret),
+                    redirectUri: row.redirect_uri
+                } : null;
+            }
+            finally {
+                await preparedRow.finalizeAsync();
+            }
+        };
+        this.saveClientCredentials = async (resourceUrl, credentials) => {
+            await this.ensureInitialized();
+            const statement = await this.db.prepareAsync('INSERT OR REPLACE INTO oauth_client_credentials (resource_url, encrypted_client_id, encrypted_client_secret, redirect_uri) VALUES (?, ?, ?, ?)');
+            try {
+                await statement.executeAsync(resourceUrl, this.encrypt(credentials.clientId), this.encrypt(credentials.clientSecret), credentials.redirectUri);
+            }
+            finally {
+                await statement.finalizeAsync();
+            }
+        };
+        this.getPKCEValues = async (userId, state) => {
+            await this.ensureInitialized();
+            const statement = await this.db.prepareAsync('SELECT encrypted_code_verifier, encrypted_code_challenge, resource_url, url FROM oauth_pkce_values WHERE user_id = ? AND state = ?');
+            try {
+                const result = await statement.executeAsync(userId, state);
+                const row = await result.getFirstAsync();
+                return row ? {
+                    codeVerifier: this.decrypt(row.encrypted_code_verifier),
+                    codeChallenge: this.decrypt(row.encrypted_code_challenge),
+                    resourceUrl: row.resource_url,
+                    url: row.url
+                } : null;
+            }
+            finally {
+                await statement.finalizeAsync();
+            }
+        };
+        this.savePKCEValues = async (userId, state, values) => {
+            await this.ensureInitialized();
+            const statement = await this.db.prepareAsync('INSERT INTO oauth_pkce_values (user_id, state, encrypted_code_verifier, encrypted_code_challenge, resource_url, url) VALUES (?, ?, ?, ?, ?, ?)');
+            try {
+                await statement.executeAsync(userId, state, this.encrypt(values.codeVerifier), this.encrypt(values.codeChallenge), values.resourceUrl, values.url);
+            }
+            finally {
+                await statement.finalizeAsync();
+            }
+        };
+        this.getAccessToken = async (userId, url) => {
+            await this.ensureInitialized();
+            const statement = await this.db.prepareAsync('SELECT resource_url, encrypted_access_token, encrypted_refresh_token, expires_at FROM oauth_access_tokens WHERE user_id = ? AND url = ?');
+            try {
+                const result = await statement.executeAsync(userId, url);
+                const row = await result.getFirstAsync();
+                if (!row)
+                    return null;
+                return {
+                    accessToken: this.decrypt(row.encrypted_access_token),
+                    refreshToken: row.encrypted_refresh_token ? this.decrypt(row.encrypted_refresh_token) : undefined,
+                    expiresAt: row.expires_at ? parseInt(row.expires_at) : undefined,
+                    resourceUrl: row.resource_url
+                };
+            }
+            finally {
+                await statement.finalizeAsync();
+            }
+        };
+        this.saveAccessToken = async (userId, url, token) => {
+            await this.ensureInitialized();
+            const statement = await this.db.prepareAsync('INSERT OR REPLACE INTO oauth_access_tokens (user_id, url, resource_url, encrypted_access_token, encrypted_refresh_token, expires_at) VALUES (?, ?, ?, ?, ?, ?)');
+            try {
+                await statement.executeAsync(userId, url, token.resourceUrl, this.encrypt(token.accessToken), token.refreshToken ? this.encrypt(token.refreshToken) : null, token.expiresAt?.toString() ?? null);
+            }
+            finally {
+                await statement.finalizeAsync();
+            }
+        };
+        this.close = async () => {
+            try {
+                await this.db.closeAsync();
+            }
+            catch (error) {
+                // If database is already closed, just log and continue
+                if (error && typeof error === 'object' && 'code' in error && error.code === 'SQLITE_MISUSE') {
+                    this.logger.warn('Database already closed');
+                }
+                else {
+                    throw error;
+                }
+            }
+        };
+        this.db = typeof db === 'string' ? sqlite.openDatabase(db) : db;
+        this.encrypt = encrypt;
+        this.decrypt = decrypt;
+        this.logger = logger;
+    }
+}
+//# sourceMappingURL=oAuthDb.js.map

package/dist/oAuthDb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oAuthDb.js","sourceRoot":"","sources":["../src/oAuthDb.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAkB,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAU5C,MAAM,OAAO,aAAa;IAOxB,MAAM,CAAC,gBAAgB;QACrB,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,YAAY,EACV,EAAE,GAAG,aAAa,CAAC,gBAAgB,EAAE,EACrC,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,EAChC,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,EAChC,MAAM,GAAG,IAAI,aAAa,EAAE,KACX,EAAE;QAdb,gBAAW,GAAG,KAAK,CAAC;QAqB5B,sBAAiB,GAAG,KAAK,IAAmB,EAAE;YAC5C,IAAI,IAAI,CAAC,WAAW;gBAAE,OAAO;YAE7B,gBAAgB;YAChB,MAAM,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;KA2BvB,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC,CAAA;QAED,yBAAoB,GAAG,KAAK,EAAE,WAAmB,EAAqC,EAAE;YACtF,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC/B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,YAAY,CAC5C,wHAAwH,CACzH,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,YAAY,CAAyF,WAAW,CAAC,CAAC;gBACxJ,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,aAAa,EAAE,CAAC;gBAC9C,OAAO,GAAG,CAAC,CAAC,CAAC;oBACX,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;oBAC/C,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;oBACvD,WAAW,EAAE,GAAG,CAAC,YAAY;iBAC9B,CAAC,CAAC,CAAC,IAAI,CAAC;YACX,CAAC;oBAAS,CAAC;gBACT,MAAM,WAAW,CAAC,aAAa,EAAE,CAAC;YACpC,CAAC;QACH,CAAC,CAAA;QAED,0BAAqB,GAAG,KAAK,EAC3B,WAAmB,EACnB,WAA8B,EACf,EAAE;YACjB,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,YAAY,CAC1C,gJAAgJ,CACjJ,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,YAAY,CAC1B,WAAW,EACX,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,EAClC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,EACtC,WAAW,CAAC,WAAW,CACxB,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,MAAM,SAAS,CAAC,aAAa,EAAE,CAAC;YAClC,CAAC;QACH,CAAC,CAAA;QAED,kBAAa,GAAG,KAAK,EAAE,MAAc,EAAE,KAAa,EAA8B,EAAE;YAClF,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,YAAY,CAC1C,oIAAoI,CACrI,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,YAAY,CAA2G,MAAM,EAAE,KAAK,CAAC,CAAC;gBACrK,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,aAAa,EAAE,CAAC;gBAEzC,OAAO,GAAG,CAAC,CAAC,CAAC;oBACX,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;oBACvD,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;oBACzD,WAAW,EAAE,GAAG,CAAC,YAAY;oBAC7B,GAAG,EAAE,GAAG,CAAC,GAAG;iBACb,CAAC,CAAC,CAAC,IAAI,CAAC;YACX,CAAC;oBAAS,CAAC;gBACT,MAAM,SAAS,CAAC,aAAa,EAAE,CAAC;YAClC,CAAC;QACH,CAAC,CAAA;QAED,mBAAc,GAAG,KAAK,EACpB,MAAc,EACd,KAAa,EACb,MAAkB,EACH,EAAE;YACjB,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,YAAY,CAC1C,gJAAgJ,CACjJ,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,YAAY,CAC1B,MAAM,EACN,KAAK,EACL,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EACjC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,EAClC,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,GAAG,CACX,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,MAAM,SAAS,CAAC,aAAa,EAAE,CAAC;YAClC,CAAC;QACH,CAAC,CAAA;QAED,mBAAc,GAAG,KAAK,EAAE,MAAc,EAAE,GAAW,EAA+B,EAAE;YAClF,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,YAAY,CAC1C,yIAAyI,CAC1I,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,YAAY,CAA8H,MAAM,EAAE,GAAG,CAAC,CAAC;gBACtL,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,aAAa,EAAE,CAAC;gBAEzC,IAAI,CAAC,GAAG;oBAAE,OAAO,IAAI,CAAC;gBAEtB,OAAO;oBACL,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;oBACrD,YAAY,EAAE,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,SAAS;oBACjG,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;oBAChE,WAAW,EAAE,GAAG,CAAC,YAAY;iBAC9B,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,MAAM,SAAS,CAAC,aAAa,EAAE,CAAC;YAClC,CAAC;QACH,CAAC,CAAA;QAED,oBAAe,GAAG,KAAK,EACrB,MAAc,EACd,GAAW,EACX,KAAkB,EACH,EAAE;YACjB,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,YAAY,CAC1C,gKAAgK,CACjK,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,YAAY,CAC1B,MAAM,EACN,GAAG,EACH,KAAK,CAAC,WAAW,EACjB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,EAC/B,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAC5D,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,IAAI,CACpC,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,MAAM,SAAS,CAAC,aAAa,EAAE,CAAC;YAClC,CAAC;QACH,CAAC,CAAA;QAED,UAAK,GAAG,KAAK,IAAmB,EAAE;YAChC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC;YAC7B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,uDAAuD;gBACvD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;oBAC5F,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;gBAC9C,CAAC;qBAAM,CAAC;oBACN,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC,CAAA;QAnLC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CAgLF"}

package/dist/oAuthDbFactory.d.ts

@@ -0,0 +1,30 @@
+import { OAuthDb, Logger } from './types.js';
+import { SqliteOAuthDb, OAuthDbConfig } from './oAuthDb.js';
+import { MemoryOAuthDb, MemoryOAuthDbConfig } from './memoryOAuthDb.js';
+import { RedisOAuthDb, RedisOAuthDbConfig } from './redisOAuthDb.js';
+export interface OAuthDbFactoryConfig {
+    db?: string;
+    encrypt?: (data: string) => string;
+    decrypt?: (data: string) => string;
+    logger?: Logger;
+}
+/**
+ * Factory function that creates the appropriate OAuthDb implementation.
+ * Uses RedisOAuthDb when Redis client or URL is provided.
+ * Uses MemoryOAuthDb for ':memory:' databases to avoid SQLite dependency.
+ * Uses SqliteOAuthDb for persistent storage.
+ */
+export declare function createOAuthDb(config?: OAuthDbFactoryConfig): OAuthDb;
+/**
+ * Convenience function for creating an in-memory OAuth database
+ */
+export declare function createMemoryOAuthDb(config?: MemoryOAuthDbConfig): MemoryOAuthDb;
+/**
+ * Convenience function for creating a SQLite OAuth database
+ */
+export declare function createSqliteOAuthDb(config?: OAuthDbConfig): SqliteOAuthDb;
+/**
+ * Convenience function for creating a Redis OAuth database
+ */
+export declare function createRedisOAuthDb(config: RedisOAuthDbConfig): RedisOAuthDb;
+//# sourceMappingURL=oAuthDbFactory.d.ts.map

package/dist/oAuthDbFactory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oAuthDbFactory.d.ts","sourceRoot":"","sources":["../src/oAuthDbFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAErE,MAAM,WAAW,oBAAoB;IACnC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IACnC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,MAAM,GAAE,oBAAyB,GAAG,OAAO,CAUxE;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,GAAE,mBAAwB,GAAG,aAAa,CAEnF;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,GAAE,aAAkB,GAAG,aAAa,CAE7E;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,GAAG,YAAY,CAE3E"}

package/dist/oAuthDbFactory.js

@@ -0,0 +1,37 @@
+import { SqliteOAuthDb } from './oAuthDb.js';
+import { MemoryOAuthDb } from './memoryOAuthDb.js';
+import { RedisOAuthDb } from './redisOAuthDb.js';
+/**
+ * Factory function that creates the appropriate OAuthDb implementation.
+ * Uses RedisOAuthDb when Redis client or URL is provided.
+ * Uses MemoryOAuthDb for ':memory:' databases to avoid SQLite dependency.
+ * Uses SqliteOAuthDb for persistent storage.
+ */
+export function createOAuthDb(config = {}) {
+    const { db = SqliteOAuthDb.getDefaultDbPath(), ...otherConfig } = config;
+    // Use in-memory implementation for ':memory:' databases
+    if (db === ':memory:') {
+        return new MemoryOAuthDb({ logger: otherConfig.logger });
+    }
+    // Use SQLite implementation for persistent storage
+    return new SqliteOAuthDb({ db, ...otherConfig });
+}
+/**
+ * Convenience function for creating an in-memory OAuth database
+ */
+export function createMemoryOAuthDb(config = {}) {
+    return new MemoryOAuthDb(config);
+}
+/**
+ * Convenience function for creating a SQLite OAuth database
+ */
+export function createSqliteOAuthDb(config = {}) {
+    return new SqliteOAuthDb(config);
+}
+/**
+ * Convenience function for creating a Redis OAuth database
+ */
+export function createRedisOAuthDb(config) {
+    return new RedisOAuthDb(config);
+}
+//# sourceMappingURL=oAuthDbFactory.js.map

package/dist/oAuthDbFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oAuthDbFactory.js","sourceRoot":"","sources":["../src/oAuthDbFactory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAiB,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAuB,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,YAAY,EAAsB,MAAM,mBAAmB,CAAC;AASrE;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,SAA+B,EAAE;IAC7D,MAAM,EAAE,EAAE,GAAG,aAAa,CAAC,gBAAgB,EAAE,EAAE,GAAG,WAAW,EAAE,GAAG,MAAM,CAAC;IAEzE,wDAAwD;IACxD,IAAI,EAAE,KAAK,UAAU,EAAE,CAAC;QACtB,OAAO,IAAI,aAAa,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,mDAAmD;IACnD,OAAO,IAAI,aAAa,CAAC,EAAE,EAAE,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAA8B,EAAE;IAClE,OAAO,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAwB,EAAE;IAC5D,OAAO,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAA0B;IAC3D,OAAO,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC"}

package/dist/oAuthResource.d.ts

@@ -0,0 +1,35 @@
+import * as oauth from 'oauth4webapi';
+import { ClientCredentials, FetchLike, OAuthResourceDb, OAuthDb, TokenData, Logger } from './types.js';
+export interface OAuthResourceClientConfig {
+    db: OAuthDb;
+    callbackUrl?: string;
+    isPublic?: boolean;
+    sideChannelFetch?: FetchLike;
+    strict?: boolean;
+    allowInsecureRequests?: boolean;
+    clientName?: string;
+    logger?: Logger;
+}
+export declare class OAuthResourceClient {
+    protected db: OAuthResourceDb;
+    protected allowInsecureRequests: boolean;
+    protected callbackUrl: string;
+    protected sideChannelFetch: FetchLike;
+    protected strict: boolean;
+    protected clientName: string;
+    protected isPublic: boolean;
+    protected logger: Logger;
+    private registrationLocks;
+    constructor({ db, callbackUrl, isPublic, sideChannelFetch, strict, allowInsecureRequests, clientName, logger }: OAuthResourceClientConfig);
+    static trimToPath: (url: string) => string;
+    static getParentPath: (url: string) => string | null;
+    introspectToken: (authorizationServerUrl: string, token: string, additionalParameters?: Record<string, string>) => Promise<TokenData>;
+    getAuthorizationServer: (resourceServerUrl: string) => Promise<oauth.AuthorizationServer>;
+    authorizationServerFromUrl: (authServerUrl: URL) => Promise<oauth.AuthorizationServer>;
+    protected normalizeResourceServerUrl: (resourceServerUrl: string) => string;
+    protected getRegistrationMetadata: () => Promise<Partial<oauth.OmitSymbolProperties<oauth.Client>>>;
+    protected registerClient: (authorizationServer: oauth.AuthorizationServer) => Promise<ClientCredentials>;
+    protected getClientCredentials: (authorizationServer: oauth.AuthorizationServer) => Promise<ClientCredentials>;
+    protected makeOAuthClientAndAuth: (credentials: ClientCredentials) => [oauth.Client, oauth.ClientAuth];
+}
+//# sourceMappingURL=oAuthResource.d.ts.map

package/dist/oAuthResource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oAuthResource.d.ts","sourceRoot":"","sources":["../src/oAuthResource.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAGvG,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,OAAO,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,gBAAgB,CAAC,EAAE,SAAS,CAAC;IAC7B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,mBAAmB;IAK9B,SAAS,CAAC,EAAE,EAAE,eAAe,CAAC;IAC9B,SAAS,CAAC,qBAAqB,EAAE,OAAO,CAAC;IACzC,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,gBAAgB,EAAE,SAAS,CAAC;IACtC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC;IAC1B,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC;IAG7B,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC5B,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC;IAEzB,OAAO,CAAC,iBAAiB,CAAiD;gBAE9D,EACV,EAAE,EACF,WAAkE,EAClE,QAAgB,EAChB,gBAAwB,EACxB,MAAc,EACd,qBAA8D,EAC9D,UAAyC,EACzC,MAA4B,EAC7B,EAAE,yBAAyB;IAa5B,MAAM,CAAC,UAAU,GAAI,KAAK,MAAM,KAAG,MAAM,CAWxC;IAED,MAAM,CAAC,aAAa,GAAI,KAAK,MAAM,KAAG,MAAM,GAAG,IAAI,CAKlD;IAED,eAAe,GAAU,wBAAwB,MAAM,EAAE,OAAO,MAAM,EAAE,uBAAuB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAG,OAAO,CAAC,SAAS,CAAC,CAkEzI;IAED,sBAAsB,GAAU,mBAAmB,MAAM,KAAG,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,CA8C7F;IAED,0BAA0B,GAAU,eAAe,GAAG,KAAG,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAmB1F;IAED,SAAS,CAAC,0BAA0B,GAAI,mBAAmB,MAAM,KAAG,MAAM,CAQzE;IAED,SAAS,CAAC,uBAAuB,QAAa,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAYvG;IAED,SAAS,CAAC,cAAc,GAAU,qBAAqB,KAAK,CAAC,mBAAmB,KAAG,OAAO,CAAC,iBAAiB,CAAC,CAyC5G;IAED,SAAS,CAAC,oBAAoB,GAAU,qBAAqB,KAAK,CAAC,mBAAmB,KAAG,OAAO,CAAC,iBAAiB,CAAC,CAyBlH;IAED,SAAS,CAAC,sBAAsB,GAC9B,aAAa,iBAAiB,KAC7B,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAkBlC;CACF"}