@auth0/ai 1.0.0

package/LICENSE

@@ -0,0 +1,176 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+1.  Definitions.
+
+    "License" shall mean the terms and conditions for use, reproduction,
+    and distribution as defined by Sections 1 through 9 of this document.
+
+    "Licensor" shall mean the copyright owner or entity authorized by
+    the copyright owner that is granting the License.
+
+    "Legal Entity" shall mean the union of the acting entity and all
+    other entities that control, are controlled by, or are under common
+    control with that entity. For the purposes of this definition,
+    "control" means (i) the power, direct or indirect, to cause the
+    direction or management of such entity, whether by contract or
+    otherwise, or (ii) ownership of fifty percent (50%) or more of the
+    outstanding shares, or (iii) beneficial ownership of such entity.
+
+    "You" (or "Your") shall mean an individual or Legal Entity
+    exercising permissions granted by this License.
+
+    "Source" form shall mean the preferred form for making modifications,
+    including but not limited to software source code, documentation
+    source, and configuration files.
+
+    "Object" form shall mean any form resulting from mechanical
+    transformation or translation of a Source form, including but
+    not limited to compiled object code, generated documentation,
+    and conversions to other media types.
+
+    "Work" shall mean the work of authorship, whether in Source or
+    Object form, made available under the License, as indicated by a
+    copyright notice that is included in or attached to the work
+    (an example is provided in the Appendix below).
+
+    "Derivative Works" shall mean any work, whether in Source or Object
+    form, that is based on (or derived from) the Work and for which the
+    editorial revisions, annotations, elaborations, or other modifications
+    represent, as a whole, an original work of authorship. For the purposes
+    of this License, Derivative Works shall not include works that remain
+    separable from, or merely link (or bind by name) to the interfaces of,
+    the Work and Derivative Works thereof.
+
+    "Contribution" shall mean any work of authorship, including
+    the original version of the Work and any modifications or additions
+    to that Work or Derivative Works thereof, that is intentionally
+    submitted to Licensor for inclusion in the Work by the copyright owner
+    or by an individual or Legal Entity authorized to submit on behalf of
+    the copyright owner. For the purposes of this definition, "submitted"
+    means any form of electronic, verbal, or written communication sent
+    to the Licensor or its representatives, including but not limited to
+    communication on electronic mailing lists, source code control systems,
+    and issue tracking systems that are managed by, or on behalf of, the
+    Licensor for the purpose of discussing and improving the Work, but
+    excluding communication that is conspicuously marked or otherwise
+    designated in writing by the copyright owner as "Not a Contribution."
+
+    "Contributor" shall mean Licensor and any individual or Legal Entity
+    on behalf of whom a Contribution has been received by Licensor and
+    subsequently incorporated within the Work.
+
+2.  Grant of Copyright License. Subject to the terms and conditions of
+    this License, each Contributor hereby grants to You a perpetual,
+    worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+    copyright license to reproduce, prepare Derivative Works of,
+    publicly display, publicly perform, sublicense, and distribute the
+    Work and such Derivative Works in Source or Object form.
+
+3.  Grant of Patent License. Subject to the terms and conditions of
+    this License, each Contributor hereby grants to You a perpetual,
+    worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+    (except as stated in this section) patent license to make, have made,
+    use, offer to sell, sell, import, and otherwise transfer the Work,
+    where such license applies only to those patent claims licensable
+    by such Contributor that are necessarily infringed by their
+    Contribution(s) alone or by combination of their Contribution(s)
+    with the Work to which such Contribution(s) was submitted. If You
+    institute patent litigation against any entity (including a
+    cross-claim or counterclaim in a lawsuit) alleging that the Work
+    or a Contribution incorporated within the Work constitutes direct
+    or contributory patent infringement, then any patent licenses
+    granted to You under this License for that Work shall terminate
+    as of the date such litigation is filed.
+
+4.  Redistribution. You may reproduce and distribute copies of the
+    Work or Derivative Works thereof in any medium, with or without
+    modifications, and in Source or Object form, provided that You
+    meet the following conditions:
+
+    (a) You must give any other recipients of the Work or
+    Derivative Works a copy of this License; and
+
+    (b) You must cause any modified files to carry prominent notices
+    stating that You changed the files; and
+
+    (c) You must retain, in the Source form of any Derivative Works
+    that You distribute, all copyright, patent, trademark, and
+    attribution notices from the Source form of the Work,
+    excluding those notices that do not pertain to any part of
+    the Derivative Works; and
+
+    (d) If the Work includes a "NOTICE" text file as part of its
+    distribution, then any Derivative Works that You distribute must
+    include a readable copy of the attribution notices contained
+    within such NOTICE file, excluding those notices that do not
+    pertain to any part of the Derivative Works, in at least one
+    of the following places: within a NOTICE text file distributed
+    as part of the Derivative Works; within the Source form or
+    documentation, if provided along with the Derivative Works; or,
+    within a display generated by the Derivative Works, if and
+    wherever such third-party notices normally appear. The contents
+    of the NOTICE file are for informational purposes only and
+    do not modify the License. You may add Your own attribution
+    notices within Derivative Works that You distribute, alongside
+    or as an addendum to the NOTICE text from the Work, provided
+    that such additional attribution notices cannot be construed
+    as modifying the License.
+
+    You may add Your own copyright statement to Your modifications and
+    may provide additional or different license terms and conditions
+    for use, reproduction, or distribution of Your modifications, or
+    for any such Derivative Works as a whole, provided Your use,
+    reproduction, and distribution of the Work otherwise complies with
+    the conditions stated in this License.
+
+5.  Submission of Contributions. Unless You explicitly state otherwise,
+    any Contribution intentionally submitted for inclusion in the Work
+    by You to the Licensor shall be under the terms and conditions of
+    this License, without any additional terms or conditions.
+    Notwithstanding the above, nothing herein shall supersede or modify
+    the terms of any separate license agreement you may have executed
+    with Licensor regarding such Contributions.
+
+6.  Trademarks. This License does not grant permission to use the trade
+    names, trademarks, service marks, or product names of the Licensor,
+    except as required for reasonable and customary use in describing the
+    origin of the Work and reproducing the content of the NOTICE file.
+
+7.  Disclaimer of Warranty. Unless required by applicable law or
+    agreed to in writing, Licensor provides the Work (and each
+    Contributor provides its Contributions) on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+    implied, including, without limitation, any warranties or conditions
+    of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+    PARTICULAR PURPOSE. You are solely responsible for determining the
+    appropriateness of using or redistributing the Work and assume any
+    risks associated with Your exercise of permissions under this License.
+
+8.  Limitation of Liability. In no event and under no legal theory,
+    whether in tort (including negligence), contract, or otherwise,
+    unless required by applicable law (such as deliberate and grossly
+    negligent acts) or agreed to in writing, shall any Contributor be
+    liable to You for damages, including any direct, indirect, special,
+    incidental, or consequential damages of any character arising as a
+    result of this License or out of the use or inability to use the
+    Work (including but not limited to damages for loss of goodwill,
+    work stoppage, computer failure or malfunction, or any and all
+    other commercial damages or losses), even if such Contributor
+    has been advised of the possibility of such damages.
+
+9.  Accepting Warranty or Additional Liability. While redistributing
+    the Work or Derivative Works thereof, You may choose to offer,
+    and charge a fee for, acceptance of support, warranty, indemnity,
+    or other liability obligations and/or rights consistent with this
+    License. However, in accepting such obligations, You may act only
+    on Your own behalf and on Your sole responsibility, not on behalf
+    of any other Contributor, and only if You agree to indemnify,
+    defend, and hold each Contributor harmless for any liability
+    incurred by, or claims asserted against, such Contributor by reason
+    of your accepting any such warranty or additional liability.
+
+END OF TERMS AND CONDITIONS

package/README.md

@@ -0,0 +1,44 @@
+# Auth0 AI SDK
+
+`@auth0/ai` is an SDK for building secure AI-powered applications using [Auth0](https://www.auth0.ai/).
+
+This SDK provides base abstractions for authentication and authorization in AI applications including a set of tools for implementing [asynchronous user authentication](https://demo.auth0.ai/docs/async-user-confirmation) using the [Client Initiated Backchannel Authentication (CIBA)](https://openid.net/specs/openid-client-initiated-backchannel-authentication-core-1_0.html) protocol.
+
+## Install
+
+> [!WARNING]
+> `@auth0/ai` is currently under development and it is not intended to be used in production, and therefore has no official support.
+
+```
+$ npm install @auth0/ai
+```
+
+## Feedback
+
+### Contributing
+
+We appreciate feedback and contribution to this repo! Before you get started, please see the following:
+
+- [Auth0's general contribution guidelines](https://github.com/auth0/open-source-template/blob/master/GENERAL-CONTRIBUTING.md)
+- [Auth0's code of conduct guidelines](https://github.com/auth0/open-source-template/blob/master/CODE-OF-CONDUCT.md)
+
+### Raise an issue
+
+To provide feedback or report a bug, please [raise an issue on our issue tracker](https://github.com/auth0-lab/auth0-ai-js/issues).
+
+### Vulnerability Reporting
+
+Please do not report security vulnerabilities on the public GitHub issue tracker. The [Responsible Disclosure Program](https://auth0.com/responsible-disclosure-policy) details the procedure for disclosing security issues.
+
+---
+
+<p align="center">
+  <picture>
+    <source media="(prefers-color-scheme: light)" srcset="https://cdn.auth0.com/website/sdks/logos/auth0_light_mode.png"   width="150">
+    <source media="(prefers-color-scheme: dark)" srcset="https://cdn.auth0.com/website/sdks/logos/auth0_dark_mode.png" width="150">
+    <img alt="Auth0 Logo" src="https://cdn.auth0.com/website/sdks/logos/auth0_light_mode.png" width="150">
+  </picture>
+</p>
+<p align="center">Auth0 is an easy to implement, adaptable authentication and authorization platform. To learn more checkout <a href="https://auth0.com/why-auth0">Why Auth0?</a></p>
+<p align="center">
+This project is licensed under the Apache 2.0 license. See the <a href="/LICENSE"> LICENSE</a> file for more info.</p>

package/dist/cjs/TokenResponse.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=TokenResponse.js.map

package/dist/cjs/TokenResponse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenResponse.js","sourceRoot":"","sources":["../../src/TokenResponse.ts"],"names":[],"mappings":"","sourcesContent":["export type TokenResponse = {\n  /** Bearer token for API authorization */\n  access_token: string;\n  /** Refresh token (requires `offline_access` scope) */\n  refresh_token?: string;\n  /** JWT containing user identity claims */\n  id_token: string;\n  /** Typically \"Bearer\" */\n  token_type?: string;\n  /** Token validity in seconds (default: 86400) */\n  expires_in: number;\n  /** Granted permissions space */\n  scope: string;\n};\n"]}

package/dist/cjs/authorizers/ciba/CIBAAuthorizationRequest.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=CIBAAuthorizationRequest.js.map

package/dist/cjs/authorizers/ciba/CIBAAuthorizationRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CIBAAuthorizationRequest.js","sourceRoot":"","sources":["../../../../src/authorizers/ciba/CIBAAuthorizationRequest.ts"],"names":[],"mappings":"","sourcesContent":["export type CIBAAuthorizationRequest = {\n  /**\n   * The authorization request ID.\n   * Use this ID to check the status of the authorization request.\n   */\n  id: string;\n\n  /**\n   * The time the authorization request was made.\n   */\n  requestedAt: number;\n\n  /**\n   * The time in seconds for the authorization request to expire.\n   */\n  expiresIn: number;\n\n  /**\n   * The interval to use when polling the status.\n   */\n  interval: number;\n};\n"]}

package/dist/cjs/authorizers/ciba/CIBAAuthorizerBase.js

@@ -0,0 +1,201 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CIBAAuthorizerBase = void 0;
+const auth0_1 = require("auth0");
+const interrupts_1 = require("../../interrupts");
+const parameters_1 = require("../../parameters");
+const asyncLocalStorage_1 = require("./asyncLocalStorage");
+const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+function ensureOpenIdScope(scopes) {
+    return scopes.includes("openid") ? scopes : ["openid", ...scopes];
+}
+/**
+ * Requests authorization by prompting the user via an out-of-band channel from
+ * the backend.
+ */
+class CIBAAuthorizerBase {
+    constructor(auth0, params) {
+        this.params = params;
+        this.auth0 = new auth0_1.AuthenticationClient({
+            domain: (auth0 === null || auth0 === void 0 ? void 0 : auth0.domain) || process.env.AUTH0_DOMAIN,
+            clientId: (auth0 === null || auth0 === void 0 ? void 0 : auth0.clientId) || process.env.AUTH0_CLIENT_ID,
+            clientSecret: (auth0 === null || auth0 === void 0 ? void 0 : auth0.clientSecret) || process.env.AUTH0_CLIENT_SECRET,
+            clientAssertionSigningAlg: auth0 === null || auth0 === void 0 ? void 0 : auth0.clientAssertionSigningAlg,
+            clientAssertionSigningKey: auth0 === null || auth0 === void 0 ? void 0 : auth0.clientAssertionSigningKey,
+            idTokenSigningAlg: auth0 === null || auth0 === void 0 ? void 0 : auth0.idTokenSigningAlg,
+            clockTolerance: auth0 === null || auth0 === void 0 ? void 0 : auth0.clockTolerance,
+            useMTLS: auth0 === null || auth0 === void 0 ? void 0 : auth0.useMTLS,
+        });
+    }
+    async start(toolContext) {
+        var _a;
+        const requestedAt = Date.now() / 1000;
+        const authorizeParams = {
+            scope: ensureOpenIdScope(this.params.scopes).join(" "),
+            binding_message: "",
+            userId: "",
+            audience: this.params.audience || "",
+            request_expiry: (_a = this.params.requestExpiry) === null || _a === void 0 ? void 0 : _a.toString(),
+        };
+        authorizeParams.binding_message = await (0, parameters_1.resolveParameter)(this.params.bindingMessage, toolContext);
+        authorizeParams.userId = await (0, parameters_1.resolveParameter)(this.params.userID, toolContext);
+        try {
+            const response = await this.auth0.backchannel.authorize(authorizeParams);
+            return {
+                id: response.auth_req_id,
+                requestedAt: requestedAt,
+                expiresIn: response.expires_in,
+                interval: response.interval,
+            };
+        }
+        catch (err) {
+            if (err.error == "invalid_request") {
+                throw new interrupts_1.UserDoesNotHavePushNotificationsInterrupt(err.error_description);
+            }
+            throw err;
+        }
+    }
+    async getCredentialsInternal(authRequest) {
+        try {
+            const elapsedSeconds = Date.now() / 1000 - authRequest.requestedAt;
+            if (elapsedSeconds >= authRequest.expiresIn) {
+                throw new interrupts_1.AuthorizationRequestExpiredInterrupt("The authorization request has expired.", authRequest);
+            }
+            const response = await this.auth0.backchannel.backchannelGrant({
+                auth_req_id: authRequest.id,
+            });
+            const credentials = {
+                accessToken: {
+                    type: response.token_type || "bearer",
+                    value: response.access_token,
+                },
+                refreshToken: response.refresh_token
+                    ? {
+                        type: response.token_type || "bearer",
+                        value: response.refresh_token,
+                    }
+                    : undefined,
+                idToken: response.id_token
+                    ? {
+                        type: response.token_type || "bearer",
+                        value: response.id_token,
+                    }
+                    : undefined,
+            };
+            return credentials;
+        }
+        catch (e) {
+            if (e.error === "authorization_pending") {
+                throw new interrupts_1.AuthorizationPendingInterrupt(e.error_description, authRequest);
+            }
+            if (e.error === "slow_down") {
+                throw new interrupts_1.AuthorizationPollingInterrupt(e.error_description, authRequest);
+            }
+            if (e.error == "invalid_grant") {
+                throw new interrupts_1.InvalidGrantInterrupt(e.error_description, authRequest);
+            }
+            if (e.error == "invalid_request") {
+                throw new interrupts_1.UserDoesNotHavePushNotificationsInterrupt(e.error_description);
+            }
+            if (e.error == "access_denied") {
+                throw new interrupts_1.AccessDeniedInterrupt(e.error_description, authRequest);
+            }
+            throw e;
+        }
+    }
+    async getCredentials(authRequest) {
+        return this.getCredentialsInternal(authRequest);
+    }
+    async getCredentialsPolling(authRequest) {
+        let credentials = undefined;
+        do {
+            try {
+                credentials = await this.getCredentialsInternal(authRequest);
+            }
+            catch (err) {
+                if (err instanceof interrupts_1.AuthorizationPendingInterrupt ||
+                    err instanceof interrupts_1.AuthorizationPollingInterrupt) {
+                    await sleep(err.request.interval * 1000);
+                }
+                else {
+                    throw err;
+                }
+            }
+        } while (!credentials);
+        return credentials;
+    }
+    deleteAuthRequest() {
+        const store = asyncLocalStorage_1.asyncLocalStorage.getStore();
+        if (!store) {
+            throw new Error("This method should be called from within a tool.");
+        }
+        if (!this.params.onAuthorizationRequest ||
+            this.params.onAuthorizationRequest === "interrupt") {
+            return this.params.storeAuthorizationResponse(undefined, ...store.args);
+        }
+    }
+    /**
+     *
+     * Wraps the execute method of a AI tool to handle CIBA authorization.
+     *
+     * @param getContext - A function that returns the context of the tool execution.
+     * @param execute - The tool execute method.
+     * @returns The wrapped execute method.
+     */
+    protect(getContext, execute) {
+        return async (...args) => {
+            let authRequest;
+            if (asyncLocalStorage_1.asyncLocalStorage.getStore()) {
+                throw new Error("Cannot nest tool calls that require CIBA authorization.");
+            }
+            const storeValue = {
+                args,
+                context: getContext(...args),
+            };
+            return asyncLocalStorage_1.asyncLocalStorage.run(storeValue, async () => {
+                let credentials;
+                const interruptMode = typeof this.params.onAuthorizationRequest === "undefined" ||
+                    this.params.onAuthorizationRequest === "interrupt";
+                try {
+                    if (interruptMode) {
+                        authRequest = await (0, parameters_1.resolveParameter)(this.params.getAuthorizationResponse, args);
+                        if (!authRequest) {
+                            //Initial request
+                            authRequest = await this.start(args);
+                            await this.params.storeAuthorizationResponse(authRequest, ...args);
+                        }
+                        credentials = await this.getCredentials(authRequest);
+                    }
+                    else {
+                        authRequest = await this.start(args);
+                        credentials = await this.getCredentialsPolling(authRequest);
+                    }
+                }
+                catch (err) {
+                    const shouldInterrupt = err instanceof interrupts_1.AuthorizationPendingInterrupt ||
+                        err instanceof interrupts_1.AuthorizationPollingInterrupt;
+                    if (shouldInterrupt) {
+                        return this.handleAuthorizationInterrupts(err);
+                    }
+                    else {
+                        await this.deleteAuthRequest();
+                        if (typeof this.params.onUnauthorized === "function") {
+                            return this.params.onUnauthorized(err, ...args);
+                        }
+                        else {
+                            return err;
+                        }
+                    }
+                }
+                await this.deleteAuthRequest();
+                storeValue.credentials = credentials;
+                return execute(...args);
+            });
+        };
+    }
+    handleAuthorizationInterrupts(err) {
+        throw err;
+    }
+}
+exports.CIBAAuthorizerBase = CIBAAuthorizerBase;
+//# sourceMappingURL=CIBAAuthorizerBase.js.map

package/dist/cjs/authorizers/ciba/CIBAAuthorizerBase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CIBAAuthorizerBase.js","sourceRoot":"","sources":["../../../../src/authorizers/ciba/CIBAAuthorizerBase.ts"],"names":[],"mappings":";;;AAAA,iCAA6C;AAI7C,iDAO0B;AAC1B,iDAAoD;AACpD,2DAA2E;AAI3E,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAChF,SAAS,iBAAiB,CAAC,MAAgB;IACzC,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,CAAC;AACpE,CAAC;AACD;;;GAGG;AACH,MAAa,kBAAkB;IAG7B,YACE,KAAuB,EACN,MAA6C;QAA7C,WAAM,GAAN,MAAM,CAAuC;QAE9D,IAAI,CAAC,KAAK,GAAG,IAAI,4BAAoB,CAAC;YACpC,MAAM,EAAE,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,MAAM,KAAI,OAAO,CAAC,GAAG,CAAC,YAAa;YAClD,QAAQ,EAAE,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,QAAQ,KAAI,OAAO,CAAC,GAAG,CAAC,eAAgB;YACzD,YAAY,EAAE,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,YAAY,KAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB;YACpE,yBAAyB,EAAE,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,yBAAyB;YAC3D,yBAAyB,EAAE,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,yBAAyB;YAC3D,iBAAiB,EAAE,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,iBAAiB;YAC3C,cAAc,EAAE,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,cAAc;YACrC,OAAO,EAAE,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,OAAO;SACxB,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,KAAK,CACjB,WAA4B;;QAE5B,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QACtC,MAAM,eAAe,GAAG;YACtB,KAAK,EAAE,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YACtD,eAAe,EAAE,EAAE;YACnB,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE;YACpC,cAAc,EAAE,MAAA,IAAI,CAAC,MAAM,CAAC,aAAa,0CAAE,QAAQ,EAAE;SACtD,CAAC;QAEF,eAAe,CAAC,eAAe,GAAG,MAAM,IAAA,6BAAgB,EACtD,IAAI,CAAC,MAAM,CAAC,cAAc,EAC1B,WAAW,CACZ,CAAC;QAEF,eAAe,CAAC,MAAM,GAAG,MAAM,IAAA,6BAAgB,EAC7C,IAAI,CAAC,MAAM,CAAC,MAAM,EAClB,WAAW,CACZ,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;YAEzE,OAAO;gBACL,EAAE,EAAE,QAAQ,CAAC,WAAW;gBACxB,WAAW,EAAE,WAAW;gBACxB,SAAS,EAAE,QAAQ,CAAC,UAAU;gBAC9B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC5B,CAAC;QACJ,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,CAAC,KAAK,IAAI,iBAAiB,EAAE,CAAC;gBACnC,MAAM,IAAI,sDAAyC,CACjD,GAAG,CAAC,iBAAiB,CACtB,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAClC,WAAqC;QAErC,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,WAAW,CAAC,WAAW,CAAC;YAEnE,IAAI,cAAc,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;gBAC5C,MAAM,IAAI,iDAAoC,CAC5C,wCAAwC,EACxC,WAAW,CACZ,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,gBAAgB,CAAC;gBAC7D,WAAW,EAAE,WAAW,CAAC,EAAE;aAC5B,CAAC,CAAC;YAEH,MAAM,WAAW,GAAG;gBAClB,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ,CAAC,UAAU,IAAI,QAAQ;oBACrC,KAAK,EAAE,QAAQ,CAAC,YAAY;iBAC7B;gBACD,YAAY,EAAE,QAAQ,CAAC,aAAa;oBAClC,CAAC,CAAC;wBACE,IAAI,EAAE,QAAQ,CAAC,UAAU,IAAI,QAAQ;wBACrC,KAAK,EAAE,QAAQ,CAAC,aAAa;qBAC9B;oBACH,CAAC,CAAC,SAAS;gBACb,OAAO,EAAE,QAAQ,CAAC,QAAQ;oBACxB,CAAC,CAAC;wBACE,IAAI,EAAE,QAAQ,CAAC,UAAU,IAAI,QAAQ;wBACrC,KAAK,EAAE,QAAQ,CAAC,QAAQ;qBACzB;oBACH,CAAC,CAAC,SAAS;aACd,CAAC;YAEF,OAAO,WAAW,CAAC;QACrB,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,IAAI,CAAC,CAAC,KAAK,KAAK,uBAAuB,EAAE,CAAC;gBACxC,MAAM,IAAI,0CAA6B,CACrC,CAAC,CAAC,iBAAiB,EACnB,WAAW,CACZ,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;gBAC5B,MAAM,IAAI,0CAA6B,CACrC,CAAC,CAAC,iBAAiB,EACnB,WAAW,CACZ,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC;gBAC/B,MAAM,IAAI,kCAAqB,CAAC,CAAC,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;YACpE,CAAC;YAED,IAAI,CAAC,CAAC,KAAK,IAAI,iBAAiB,EAAE,CAAC;gBACjC,MAAM,IAAI,sDAAyC,CACjD,CAAC,CAAC,iBAAiB,CACpB,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC;gBAC/B,MAAM,IAAI,kCAAqB,CAAC,CAAC,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;YACpE,CAAC;YAED,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IAES,KAAK,CAAC,cAAc,CAAC,WAAqC;QAClE,OAAO,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAClD,CAAC;IAES,KAAK,CAAC,qBAAqB,CACnC,WAAqC;QAErC,IAAI,WAAW,GAA4B,SAAS,CAAC;QAErD,GAAG,CAAC;YACF,IAAI,CAAC;gBACH,WAAW,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;YAC/D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IACE,GAAG,YAAY,0CAA6B;oBAC5C,GAAG,YAAY,0CAA6B,EAC5C,CAAC;oBACD,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;gBAC3C,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC,QAAQ,CAAC,WAAW,EAAE;QAEvB,OAAO,WAAW,CAAC;IACrB,CAAC;IAES,iBAAiB;QACzB,MAAM,KAAK,GAAG,qCAAiB,CAAC,QAAQ,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,IACE,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB;YACnC,IAAI,CAAC,MAAM,CAAC,sBAAsB,KAAK,WAAW,EAClD,CAAC;YACD,OAAO,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAC3C,SAAS,EACT,GAAI,KAAK,CAAC,IAAwB,CACnC,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,OAAO,CACL,UAA6C,EAC7C,OAA0C;QAE1C,OAAO,KAAK,EAAE,GAAG,IAAqB,EAAE,EAAE;YACxC,IAAI,WAAiD,CAAC;YACtD,IAAI,qCAAiB,CAAC,QAAQ,EAAE,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;YACJ,CAAC;YAED,MAAM,UAAU,GAA2B;gBACzC,IAAI;gBACJ,OAAO,EAAE,UAAU,CAAC,GAAG,IAAI,CAAC;aAC7B,CAAC;YAEF,OAAO,qCAAiB,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE;gBAClD,IAAI,WAAoC,CAAC;gBAEzC,MAAM,aAAa,GACjB,OAAO,IAAI,CAAC,MAAM,CAAC,sBAAsB,KAAK,WAAW;oBACzD,IAAI,CAAC,MAAM,CAAC,sBAAsB,KAAK,WAAW,CAAC;gBAErD,IAAI,CAAC;oBACH,IAAI,aAAa,EAAE,CAAC;wBAClB,WAAW,GAAG,MAAM,IAAA,6BAAgB,EAClC,IAAI,CAAC,MAAM,CAAC,wBAAwB,EACpC,IAAI,CACL,CAAC;wBACF,IAAI,CAAC,WAAW,EAAE,CAAC;4BACjB,iBAAiB;4BACjB,WAAW,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;4BACrC,MAAM,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAC1C,WAAW,EACX,GAAG,IAAI,CACR,CAAC;wBACJ,CAAC;wBACD,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;oBACvD,CAAC;yBAAM,CAAC;wBACN,WAAW,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBACrC,WAAW,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC;oBAC9D,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,eAAe,GACnB,GAAG,YAAY,0CAA6B;wBAC5C,GAAG,YAAY,0CAA6B,CAAC;oBAC/C,IAAI,eAAe,EAAE,CAAC;wBACpB,OAAO,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC;oBACjD,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;wBAC/B,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;4BACrD,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,GAAY,EAAE,GAAG,IAAI,CAAC,CAAC;wBAC3D,CAAC;6BAAM,CAAC;4BACN,OAAO,GAAG,CAAC;wBACb,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBAC/B,UAAU,CAAC,WAAW,GAAG,WAAW,CAAC;gBACrC,OAAO,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;YAC1B,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC;IAES,6BAA6B,CACrC,GAAkE;QAElE,MAAM,GAAG,CAAC;IACZ,CAAC;CACF;AA3PD,gDA2PC","sourcesContent":["import { AuthenticationClient } from \"auth0\";\n\nimport { AuthorizerParams } from \"../\";\nimport { Credentials } from \"../../credentials\";\nimport {\n  AccessDeniedInterrupt,\n  AuthorizationPendingInterrupt,\n  AuthorizationPollingInterrupt,\n  AuthorizationRequestExpiredInterrupt,\n  InvalidGrantInterrupt,\n  UserDoesNotHavePushNotificationsInterrupt,\n} from \"../../interrupts\";\nimport { resolveParameter } from \"../../parameters\";\nimport { asyncLocalStorage, AsyncStorageValue } from \"./asyncLocalStorage\";\nimport { CIBAAuthorizationRequest } from \"./CIBAAuthorizationRequest\";\nimport { CIBAAuthorizerParams } from \"./CIBAAuthorizerParams\";\n\nconst sleep = (ms: number) => new Promise((resolve) => setTimeout(resolve, ms));\nfunction ensureOpenIdScope(scopes: string[]): string[] {\n  return scopes.includes(\"openid\") ? scopes : [\"openid\", ...scopes];\n}\n/**\n * Requests authorization by prompting the user via an out-of-band channel from\n * the backend.\n */\nexport class CIBAAuthorizerBase<ToolExecuteArgs extends any[]> {\n  auth0: AuthenticationClient;\n\n  constructor(\n    auth0: AuthorizerParams,\n    private readonly params: CIBAAuthorizerParams<ToolExecuteArgs>\n  ) {\n    this.auth0 = new AuthenticationClient({\n      domain: auth0?.domain || process.env.AUTH0_DOMAIN!,\n      clientId: auth0?.clientId || process.env.AUTH0_CLIENT_ID!,\n      clientSecret: auth0?.clientSecret || process.env.AUTH0_CLIENT_SECRET,\n      clientAssertionSigningAlg: auth0?.clientAssertionSigningAlg,\n      clientAssertionSigningKey: auth0?.clientAssertionSigningKey,\n      idTokenSigningAlg: auth0?.idTokenSigningAlg,\n      clockTolerance: auth0?.clockTolerance,\n      useMTLS: auth0?.useMTLS,\n    });\n  }\n\n  private async start(\n    toolContext: ToolExecuteArgs\n  ): Promise<CIBAAuthorizationRequest> {\n    const requestedAt = Date.now() / 1000;\n    const authorizeParams = {\n      scope: ensureOpenIdScope(this.params.scopes).join(\" \"),\n      binding_message: \"\",\n      userId: \"\",\n      audience: this.params.audience || \"\",\n      request_expiry: this.params.requestExpiry?.toString(),\n    };\n\n    authorizeParams.binding_message = await resolveParameter(\n      this.params.bindingMessage,\n      toolContext\n    );\n\n    authorizeParams.userId = await resolveParameter(\n      this.params.userID,\n      toolContext\n    );\n\n    try {\n      const response = await this.auth0.backchannel.authorize(authorizeParams);\n\n      return {\n        id: response.auth_req_id,\n        requestedAt: requestedAt,\n        expiresIn: response.expires_in,\n        interval: response.interval,\n      };\n    } catch (err: any) {\n      if (err.error == \"invalid_request\") {\n        throw new UserDoesNotHavePushNotificationsInterrupt(\n          err.error_description\n        );\n      }\n      throw err;\n    }\n  }\n\n  private async getCredentialsInternal(\n    authRequest: CIBAAuthorizationRequest\n  ): Promise<Credentials | undefined> {\n    try {\n      const elapsedSeconds = Date.now() / 1000 - authRequest.requestedAt;\n\n      if (elapsedSeconds >= authRequest.expiresIn) {\n        throw new AuthorizationRequestExpiredInterrupt(\n          \"The authorization request has expired.\",\n          authRequest\n        );\n      }\n\n      const response = await this.auth0.backchannel.backchannelGrant({\n        auth_req_id: authRequest.id,\n      });\n\n      const credentials = {\n        accessToken: {\n          type: response.token_type || \"bearer\",\n          value: response.access_token,\n        },\n        refreshToken: response.refresh_token\n          ? {\n              type: response.token_type || \"bearer\",\n              value: response.refresh_token,\n            }\n          : undefined,\n        idToken: response.id_token\n          ? {\n              type: response.token_type || \"bearer\",\n              value: response.id_token,\n            }\n          : undefined,\n      };\n\n      return credentials;\n    } catch (e: any) {\n      if (e.error === \"authorization_pending\") {\n        throw new AuthorizationPendingInterrupt(\n          e.error_description,\n          authRequest\n        );\n      }\n\n      if (e.error === \"slow_down\") {\n        throw new AuthorizationPollingInterrupt(\n          e.error_description,\n          authRequest\n        );\n      }\n\n      if (e.error == \"invalid_grant\") {\n        throw new InvalidGrantInterrupt(e.error_description, authRequest);\n      }\n\n      if (e.error == \"invalid_request\") {\n        throw new UserDoesNotHavePushNotificationsInterrupt(\n          e.error_description\n        );\n      }\n\n      if (e.error == \"access_denied\") {\n        throw new AccessDeniedInterrupt(e.error_description, authRequest);\n      }\n\n      throw e;\n    }\n  }\n\n  protected async getCredentials(authRequest: CIBAAuthorizationRequest) {\n    return this.getCredentialsInternal(authRequest);\n  }\n\n  protected async getCredentialsPolling(\n    authRequest: CIBAAuthorizationRequest\n  ): Promise<Credentials | undefined> {\n    let credentials: Credentials | undefined = undefined;\n\n    do {\n      try {\n        credentials = await this.getCredentialsInternal(authRequest);\n      } catch (err) {\n        if (\n          err instanceof AuthorizationPendingInterrupt ||\n          err instanceof AuthorizationPollingInterrupt\n        ) {\n          await sleep(err.request.interval * 1000);\n        } else {\n          throw err;\n        }\n      }\n    } while (!credentials);\n\n    return credentials;\n  }\n\n  protected deleteAuthRequest() {\n    const store = asyncLocalStorage.getStore();\n    if (!store) {\n      throw new Error(\"This method should be called from within a tool.\");\n    }\n    if (\n      !this.params.onAuthorizationRequest ||\n      this.params.onAuthorizationRequest === \"interrupt\"\n    ) {\n      return this.params.storeAuthorizationResponse(\n        undefined,\n        ...(store.args as ToolExecuteArgs)\n      );\n    }\n  }\n\n  /**\n   *\n   * Wraps the execute method of a AI tool to handle CIBA authorization.\n   *\n   * @param getContext - A function that returns the context of the tool execution.\n   * @param execute - The tool execute method.\n   * @returns The wrapped execute method.\n   */\n  protect(\n    getContext: (...args: ToolExecuteArgs) => any,\n    execute: (...args: ToolExecuteArgs) => any\n  ): (...args: ToolExecuteArgs) => any {\n    return async (...args: ToolExecuteArgs) => {\n      let authRequest: CIBAAuthorizationRequest | undefined;\n      if (asyncLocalStorage.getStore()) {\n        throw new Error(\n          \"Cannot nest tool calls that require CIBA authorization.\"\n        );\n      }\n\n      const storeValue: AsyncStorageValue<any> = {\n        args,\n        context: getContext(...args),\n      };\n\n      return asyncLocalStorage.run(storeValue, async () => {\n        let credentials: Credentials | undefined;\n\n        const interruptMode =\n          typeof this.params.onAuthorizationRequest === \"undefined\" ||\n          this.params.onAuthorizationRequest === \"interrupt\";\n\n        try {\n          if (interruptMode) {\n            authRequest = await resolveParameter(\n              this.params.getAuthorizationResponse,\n              args\n            );\n            if (!authRequest) {\n              //Initial request\n              authRequest = await this.start(args);\n              await this.params.storeAuthorizationResponse(\n                authRequest,\n                ...args\n              );\n            }\n            credentials = await this.getCredentials(authRequest);\n          } else {\n            authRequest = await this.start(args);\n            credentials = await this.getCredentialsPolling(authRequest);\n          }\n        } catch (err) {\n          const shouldInterrupt =\n            err instanceof AuthorizationPendingInterrupt ||\n            err instanceof AuthorizationPollingInterrupt;\n          if (shouldInterrupt) {\n            return this.handleAuthorizationInterrupts(err);\n          } else {\n            await this.deleteAuthRequest();\n            if (typeof this.params.onUnauthorized === \"function\") {\n              return this.params.onUnauthorized(err as Error, ...args);\n            } else {\n              return err;\n            }\n          }\n        }\n        await this.deleteAuthRequest();\n        storeValue.credentials = credentials;\n        return execute(...args);\n      });\n    };\n  }\n\n  protected handleAuthorizationInterrupts(\n    err: AuthorizationPendingInterrupt | AuthorizationPollingInterrupt\n  ) {\n    throw err;\n  }\n}\n"]}

package/dist/cjs/authorizers/ciba/CIBAAuthorizerParams.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=CIBAAuthorizerParams.js.map

package/dist/cjs/authorizers/ciba/CIBAAuthorizerParams.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CIBAAuthorizerParams.js","sourceRoot":"","sources":["../../../../src/authorizers/ciba/CIBAAuthorizerParams.ts"],"names":[],"mappings":"","sourcesContent":["import { CIBAInterrupt } from \"../../interrupts\";\nimport { AuthorizerToolParameter } from \"../../parameters\";\nimport { CIBAAuthorizationRequest } from \"./CIBAAuthorizationRequest\";\n\nexport type OnAuthorizationRequest = \"block\" | \"interrupt\";\n\nexport type CIBAAuthorizerParams<ToolExecuteArgs extends any[]> = {\n  /**\n   * The user ID to request authorization for.\n   */\n  userID: AuthorizerToolParameter<ToolExecuteArgs>;\n\n  /**\n   * The binding message to send to the user.\n   */\n  bindingMessage: AuthorizerToolParameter<ToolExecuteArgs>;\n\n  /**\n   * The scope to request authorization for.\n   */\n  scopes: string[];\n\n  /**\n   * The audience to request authorization for.\n   */\n  audience?: string;\n\n  /**\n   * The time in seconds for the authorization request to expire.\n   */\n  requestExpiry?: number;\n\n  /**\n   * The behavior when the authorization request is made.\n   *\n   * - `block`: The tool execution is blocked until the user completes the authorization.\n   * - `interrupt`: The tool execution is interrupted until the user completes the authorization.\n   *\n   * Defaults to `interrupt`.\n   * Note: The block mode is only useful for development purposes and should not be used in production.\n   */\n  onAuthorizationRequest?: OnAuthorizationRequest;\n\n  /**\n   *\n   * Optional callback to generate a tool result when the invocation is not authorized.\n   *\n   * By default it will return the instance of the Error.\n   *\n   * @param args - The tool execution arguments.\n   * @returns The response to return when the invocation is not authorized.\n   */\n  onUnauthorized?: (\n    err: Error | CIBAInterrupt,\n    ...args: ToolExecuteArgs\n  ) => any;\n} & (\n  | {\n      onAuthorizationRequest: \"block\";\n    }\n  | {\n      onAuthorizationRequest?: \"interrupt\";\n\n      /**\n       * Retrieves the authorization response data.\n       * @param args - The tool execution arguments.\n       * @returns The authorization response data.\n       * @remarks The data should be stored in a way that it can be retrieved later by the `storeAuthorizationResponse` parameter.\n       */\n      getAuthorizationResponse: AuthorizerToolParameter<\n        ToolExecuteArgs,\n        CIBAAuthorizationRequest | undefined\n      >;\n\n      /**\n       * Stores the authorization response data.\n       * @param request - The authorization response data.\n       * @param args - The tool execution arguments.\n       * @returns A promise that resolves when the data is stored.\n       * @remarks The data should be stored in a way that it can be retrieved later by the `getAuthorizationResponse` parameter.\n       **/\n      storeAuthorizationResponse: (\n        request: CIBAAuthorizationRequest | undefined,\n        ...args: ToolExecuteArgs\n      ) => Promise<void>;\n    }\n);\n"]}

package/dist/cjs/authorizers/ciba/asyncLocalStorage.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getCIBACredentials = exports.asyncLocalStorage = void 0;
+const async_hooks_1 = require("async_hooks");
+exports.asyncLocalStorage = new async_hooks_1.AsyncLocalStorage();
+const getCIBACredentials = () => {
+    const t = exports.asyncLocalStorage.getStore();
+    if (typeof t === "undefined") {
+        throw new Error("The tool must be wrapped with the withCIBA function.");
+    }
+    return t.credentials;
+};
+exports.getCIBACredentials = getCIBACredentials;
+//# sourceMappingURL=asyncLocalStorage.js.map

package/dist/cjs/authorizers/ciba/asyncLocalStorage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"asyncLocalStorage.js","sourceRoot":"","sources":["../../../../src/authorizers/ciba/asyncLocalStorage.ts"],"names":[],"mappings":";;;AAAA,6CAAgD;AAkBnC,QAAA,iBAAiB,GAAG,IAAI,+BAAiB,EAEnD,CAAC;AAEG,MAAM,kBAAkB,GAAG,GAAG,EAAE;IACrC,MAAM,CAAC,GAAG,yBAAiB,CAAC,QAAQ,EAAE,CAAC;IACvC,IAAI,OAAO,CAAC,KAAK,WAAW,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,CAAC,CAAC,WAAW,CAAC;AACvB,CAAC,CAAC;AANW,QAAA,kBAAkB,sBAM7B","sourcesContent":["import { AsyncLocalStorage } from \"async_hooks\";\n\nimport { Credentials } from \"../../credentials\";\n\nexport type AsyncStorageValue<TContext> = {\n  credentials?: Credentials;\n\n  /**\n   * The tool execution context.\n   */\n  context: TContext;\n\n  /**\n   * The tool execution arguments.\n   */\n  args: any[];\n};\n\nexport const asyncLocalStorage = new AsyncLocalStorage<\n  AsyncStorageValue<any>\n>();\n\nexport const getCIBACredentials = () => {\n  const t = asyncLocalStorage.getStore();\n  if (typeof t === \"undefined\") {\n    throw new Error(\"The tool must be wrapped with the withCIBA function.\");\n  }\n  return t.credentials;\n};\n"]}

package/dist/cjs/authorizers/ciba/index.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CIBAAuthorizerBase = exports.getCIBACredentials = exports.asyncLocalStorage = void 0;
+var asyncLocalStorage_1 = require("./asyncLocalStorage");
+Object.defineProperty(exports, "asyncLocalStorage", { enumerable: true, get: function () { return asyncLocalStorage_1.asyncLocalStorage; } });
+Object.defineProperty(exports, "getCIBACredentials", { enumerable: true, get: function () { return asyncLocalStorage_1.getCIBACredentials; } });
+var CIBAAuthorizerBase_1 = require("./CIBAAuthorizerBase");
+Object.defineProperty(exports, "CIBAAuthorizerBase", { enumerable: true, get: function () { return CIBAAuthorizerBase_1.CIBAAuthorizerBase; } });
+//# sourceMappingURL=index.js.map

package/dist/cjs/authorizers/ciba/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/authorizers/ciba/index.ts"],"names":[],"mappings":";;;AAAA,yDAA4E;AAAnE,sHAAA,iBAAiB,OAAA;AAAE,uHAAA,kBAAkB,OAAA;AAI9C,2DAA0D;AAAjD,wHAAA,kBAAkB,OAAA","sourcesContent":["export { asyncLocalStorage, getCIBACredentials } from \"./asyncLocalStorage\";\n\nexport type { CIBAAuthorizationRequest } from \"./CIBAAuthorizationRequest\";\n\nexport { CIBAAuthorizerBase } from \"./CIBAAuthorizerBase\";\n"]}