@auth0/ai 1.0.1 → 2.0.0

package/dist/esm/authorizers/federated-connections/FederatedConnectionAuthorizerParams.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FederatedConnectionAuthorizerParams.js","sourceRoot":"","sources":["../../../../src/authorizers/federated-connections/FederatedConnectionAuthorizerParams.ts"],"names":[],"mappings":"","sourcesContent":["import { TokenResponse } from \"../../credentials\";\nimport { AuthorizerToolParameter } from \"../../parameters\";\nimport { Store } from \"../../stores\";\nimport { AuthContext } from \"../context\";\n\nexport type FederatedConnectionAuthorizerParams<ToolExecuteArgs extends any[]> =\n  {\n    /**\n     * The Auth0 refresh token to exchange for an Federated Connection access token.\n     */\n    refreshToken?: AuthorizerToolParameter<ToolExecuteArgs, string | undefined>;\n\n    /**\n     * The Federated connection access token if available in the tool context.\n     */\n    accessToken?: AuthorizerToolParameter<\n      ToolExecuteArgs,\n      TokenResponse | undefined\n    >;\n\n    /**\n     * The scopes required in the access token of the federated connection provider.\n     */\n    scopes: string[];\n\n    /**\n     * The connection name of the federated connection provider.\n     */\n    connection: string;\n\n    /**\n     * AuthContext defines the scope of credential sharing:\n     * - \"tool-call\": Credentials are valid only for a single invocation of the tool.\n     * - \"tool\": Credentials are shared across multiple calls to the same tool within the same thread.\n     * - \"thread\": Credentials are shared across all tools using the same authorizer within the current thread.\n     * - \"agent\": Credentials are shared globally across all threads and tools in the agent.\n     *\n     * @default \"thread\"\n     */\n    credentialsContext?: AuthContext;\n\n    /**\n     * An store used to store the authorization credentials according\n     * to the `credentialsContext` scope.\n     */\n    store: Store;\n  };\n"]}

package/dist/esm/authorizers/federated-connections/asyncLocalStorage.d.ts

@@ -1,13 +1,15 @@
 import { AsyncLocalStorage } from "node:async_hooks";
-export type AsyncStorageValue<TContext> = {
+import { TokenSet } from "../../credentials";
+import { ToolCallContext } from "../context";
+export type AsyncStorageValue = {
     /**
      * The Federated Connection access token.
      */
-    accessToken?: string;
+    credentials?: TokenSet;
     /**
      * The tool execution context.
      */
-    context: TContext;
+    context: ToolCallContext;
     /**
      * The federated connection name.
      */
@@ -21,6 +23,6 @@ export type AsyncStorageValue<TContext> = {
      */
     currentScopes?: string[];
 };
-export declare const asyncLocalStorage: AsyncLocalStorage<AsyncStorageValue<any>>;
-export declare const getAccessTokenForConnection: () => string | undefined;
+export declare const asyncLocalStorage: AsyncLocalStorage<AsyncStorageValue>;
+export declare const getCredentialsForConnection: () => TokenSet | undefined;
 //# sourceMappingURL=asyncLocalStorage.d.ts.map

package/dist/esm/authorizers/federated-connections/asyncLocalStorage.js

@@ -1,10 +1,10 @@
 import { AsyncLocalStorage } from "node:async_hooks";
 export const asyncLocalStorage = new AsyncLocalStorage();
-export const getAccessTokenForConnection = () => {
+export const getCredentialsForConnection = () => {
     const store = asyncLocalStorage.getStore();
     if (typeof store === "undefined") {
-        throw new Error("The tool must be wrapped with the withFederatedConnections function.");
+        throw new Error("The tool must be wrapped with the withTokenForConnections function.");
     }
-    return store === null || store === void 0 ? void 0 : store.accessToken;
+    return store === null || store === void 0 ? void 0 : store.credentials;
 };
 //# sourceMappingURL=asyncLocalStorage.js.map

package/dist/esm/authorizers/federated-connections/asyncLocalStorage.js.map

@@ -1 +1 @@
-{"version":3,"file":"asyncLocalStorage.js","sourceRoot":"","sources":["../../../../src/authorizers/federated-connections/asyncLocalStorage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AA6BrD,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,EAEnD,CAAC;AAEJ,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,EAAE;IAC9C,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,EAAE,CAAC;IAC3C,IAAI,OAAO,KAAK,KAAK,WAAW,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,sEAAsE,CACvE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,WAAW,CAAC;AAC5B,CAAC,CAAC","sourcesContent":["import { AsyncLocalStorage } from \"node:async_hooks\";\n\nexport type AsyncStorageValue<TContext> = {\n  /**\n   * The Federated Connection access token.\n   */\n  accessToken?: string;\n\n  /**\n   * The tool execution context.\n   */\n  context: TContext;\n\n  /**\n   * The federated connection name.\n   */\n  connection: string;\n\n  /**\n   * The scopes required to access the federated connection.\n   */\n  scopes: string[];\n\n  /**\n   * The scopes that the current access token has.\n   */\n  currentScopes?: string[];\n};\n\nexport const asyncLocalStorage = new AsyncLocalStorage<\n  AsyncStorageValue<any>\n>();\n\nexport const getAccessTokenForConnection = () => {\n  const store = asyncLocalStorage.getStore();\n  if (typeof store === \"undefined\") {\n    throw new Error(\n      \"The tool must be wrapped with the withFederatedConnections function.\"\n    );\n  }\n  return store?.accessToken;\n};\n"]}
+{"version":3,"file":"asyncLocalStorage.js","sourceRoot":"","sources":["../../../../src/authorizers/federated-connections/asyncLocalStorage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAgCrD,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,EAAqB,CAAC;AAE5E,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,EAAE;IAC9C,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,EAAE,CAAC;IAC3C,IAAI,OAAO,KAAK,KAAK,WAAW,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,WAAW,CAAC;AAC5B,CAAC,CAAC","sourcesContent":["import { AsyncLocalStorage } from \"node:async_hooks\";\n\nimport { TokenSet } from \"../../credentials\";\nimport { ToolCallContext } from \"../context\";\n\nexport type AsyncStorageValue = {\n  /**\n   * The Federated Connection access token.\n   */\n  credentials?: TokenSet;\n\n  /**\n   * The tool execution context.\n   */\n  context: ToolCallContext;\n\n  /**\n   * The federated connection name.\n   */\n  connection: string;\n\n  /**\n   * The scopes required to access the federated connection.\n   */\n  scopes: string[];\n\n  /**\n   * The scopes that the current access token has.\n   */\n  currentScopes?: string[];\n};\n\nexport const asyncLocalStorage = new AsyncLocalStorage<AsyncStorageValue>();\n\nexport const getCredentialsForConnection = () => {\n  const store = asyncLocalStorage.getStore();\n  if (typeof store === \"undefined\") {\n    throw new Error(\n      \"The tool must be wrapped with the withTokenForConnections function.\"\n    );\n  }\n  return store?.credentials;\n};\n"]}

package/dist/esm/authorizers/federated-connections/index.d.ts

@@ -1,38 +1,5 @@
-import { Auth0Interrupt } from "../../interrupts";
-import { AuthorizerToolParameter } from "../../parameters";
-import { TokenResponse } from "../../TokenResponse";
 export type { AsyncStorageValue } from "./asyncLocalStorage";
-export { asyncLocalStorage, getAccessTokenForConnection, } from "./asyncLocalStorage";
-export type FederatedConnectionAuthorizerParams<ToolExecuteArgs extends any[]> = {
-    refreshToken?: AuthorizerToolParameter<ToolExecuteArgs, string | undefined>;
-    accessToken?: AuthorizerToolParameter<ToolExecuteArgs, TokenResponse | undefined>;
-    scopes: AuthorizerToolParameter<ToolExecuteArgs, string[]>;
-    connection: AuthorizerToolParameter<ToolExecuteArgs, string>;
-};
-/**
- * Requests authorization to a third party service via Federated Connection.
- */
-export declare class FederatedConnectionAuthorizerBase<ToolExecuteArgs extends any[]> {
-    private readonly auth0;
-    private params;
-    constructor(auth0: {
-        domain: string;
-        clientId: string;
-        clientSecret: string | undefined;
-    }, params: FederatedConnectionAuthorizerParams<ToolExecuteArgs>);
-    protected handleAuthorizationInterrupts(err: Auth0Interrupt): void;
-    protected validateToken(tokenResponse?: TokenResponse): void;
-    private getAccessTokenImpl;
-    protected getAccessToken(...toolContext: ToolExecuteArgs): Promise<TokenResponse | undefined>;
-    protected getRefreshToken(...toolContext: ToolExecuteArgs): Promise<string | undefined>;
-    /**
-     *
-     * Wraps the execute method of an AI tool to handle Federated Connections authorization.
-     *
-     * @param getContext - A function that returns the context of the tool execution.
-     * @param execute - The tool execute method.
-     * @returns The wrapped execute method.
-     */
-    protect(getContext: (...args: ToolExecuteArgs) => any, execute: (...args: ToolExecuteArgs) => any): (...args: ToolExecuteArgs) => any;
-}
+export { asyncLocalStorage, getCredentialsForConnection as getAccessTokenForConnection, } from "./asyncLocalStorage";
+export { FederatedConnectionAuthorizerBase } from "./FederatedConnectionAuthorizerBase";
+export type { FederatedConnectionAuthorizerParams } from "./FederatedConnectionAuthorizerParams";
 //# sourceMappingURL=index.d.ts.map

package/dist/esm/authorizers/federated-connections/index.js

@@ -1,123 +1,3 @@
-import { Auth0Interrupt, FederatedConnectionError, FederatedConnectionInterrupt, } from "../../interrupts";
-import { resolveParameter } from "../../parameters";
-import { asyncLocalStorage } from "./asyncLocalStorage";
-export { asyncLocalStorage, getAccessTokenForConnection, } from "./asyncLocalStorage";
-/**
- * Requests authorization to a third party service via Federated Connection.
- */
-export class FederatedConnectionAuthorizerBase {
-    constructor(auth0, params) {
-        this.auth0 = auth0;
-        this.params = params;
-        if (typeof params.refreshToken === "undefined" &&
-            typeof params.accessToken === "undefined") {
-            throw new Error("Either refreshToken or accessToken must be provided to initialize the Authorizer.");
-        }
-        if (typeof params.accessToken !== "undefined" &&
-            typeof params.refreshToken !== "undefined") {
-            throw new Error("Only one of refreshToken or accessToken can be provided to initialize the Authorizer.");
-        }
-    }
-    handleAuthorizationInterrupts(err) {
-        throw err;
-    }
-    validateToken(tokenResponse) {
-        var _a;
-        const store = asyncLocalStorage.getStore();
-        if (!store) {
-            throw new Error("The tool must be wrapped with the FederationConnectionAuthorizer.");
-        }
-        const { scopes, connection } = store;
-        if (!tokenResponse) {
-            throw new FederatedConnectionInterrupt(`Authorization required to access the Federated Connection: ${this.params.connection}`, connection, scopes, scopes);
-        }
-        const currentScopes = ((_a = tokenResponse.scope) !== null && _a !== void 0 ? _a : "").split(" ");
-        const missingScopes = scopes.filter((s) => !currentScopes.includes(s));
-        store.currentScopes = currentScopes;
-        if (missingScopes.length > 0) {
-            throw new FederatedConnectionInterrupt(`Authorization required to access the Federated Connection: ${this.params.connection}. Missing scopes: ${missingScopes.join(", ")}`, connection, scopes, [...currentScopes, ...scopes]);
-        }
-    }
-    async getAccessTokenImpl(...toolContext) {
-        const store = asyncLocalStorage.getStore();
-        if (!store) {
-            throw new Error("The tool must be wrapped with the FederationConnectionAuthorizer.");
-        }
-        const { connection } = store;
-        const subjectToken = await this.getRefreshToken(...toolContext);
-        if (!subjectToken) {
-            return;
-        }
-        const exchangeParams = {
-            grant_type: "urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token",
-            client_id: this.auth0.clientId,
-            client_secret: this.auth0.clientSecret,
-            subject_token_type: "urn:ietf:params:oauth:token-type:refresh_token",
-            subject_token: subjectToken,
-            connection: connection,
-            requested_token_type: "http://auth0.com/oauth/token-type/federated-connection-access-token",
-        };
-        const res = await fetch(`https://${this.auth0.domain}/oauth/token`, {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body: JSON.stringify(exchangeParams),
-        });
-        if (!res.ok) {
-            return;
-        }
-        const tokenResponse = await res.json();
-        return tokenResponse;
-    }
-    async getAccessToken(...toolContext) {
-        let tokenResponse;
-        if (typeof this.params.refreshToken === "function") {
-            tokenResponse = await this.getAccessTokenImpl(...toolContext);
-        }
-        else {
-            tokenResponse = await resolveParameter(this.params.accessToken, toolContext);
-        }
-        this.validateToken(tokenResponse);
-        return tokenResponse;
-    }
-    async getRefreshToken(...toolContext) {
-        return await resolveParameter(this.params.refreshToken, toolContext);
-    }
-    /**
-     *
-     * Wraps the execute method of an AI tool to handle Federated Connections authorization.
-     *
-     * @param getContext - A function that returns the context of the tool execution.
-     * @param execute - The tool execute method.
-     * @returns The wrapped execute method.
-     */
-    protect(getContext, execute) {
-        return async (...args) => {
-            const asyncStore = {
-                context: await getContext(...args),
-                scopes: await resolveParameter(this.params.scopes, args),
-                connection: await resolveParameter(this.params.connection, args),
-            };
-            if (asyncLocalStorage.getStore()) {
-                throw new Error("Cannot nest tool calls that require federated connection authorization.");
-            }
-            return asyncLocalStorage.run(asyncStore, async () => {
-                try {
-                    const tokenResponse = await this.getAccessToken(...args);
-                    asyncStore.accessToken = tokenResponse.access_token;
-                    return await execute(...args);
-                }
-                catch (err) {
-                    if (err instanceof FederatedConnectionError) {
-                        const interrupt = new FederatedConnectionInterrupt(err.message, asyncStore.connection, asyncStore.scopes, asyncStore.scopes);
-                        return this.handleAuthorizationInterrupts(interrupt);
-                    }
-                    if (err instanceof Auth0Interrupt) {
-                        return this.handleAuthorizationInterrupts(err);
-                    }
-                    throw err;
-                }
-            });
-        };
-    }
-}
+export { asyncLocalStorage, getCredentialsForConnection as getAccessTokenForConnection, } from "./asyncLocalStorage";
+export { FederatedConnectionAuthorizerBase } from "./FederatedConnectionAuthorizerBase";
 //# sourceMappingURL=index.js.map

package/dist/esm/authorizers/federated-connections/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/authorizers/federated-connections/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAA2B,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAE7E,OAAO,EAAE,iBAAiB,EAAqB,MAAM,qBAAqB,CAAC;AAI3E,OAAO,EACL,iBAAiB,EACjB,2BAA2B,GAC5B,MAAM,qBAAqB,CAAC;AAa7B;;GAEG;AACH,MAAM,OAAO,iCAAiC;IAC5C,YACmB,KAIhB,EACO,MAA4D;QALnD,UAAK,GAAL,KAAK,CAIrB;QACO,WAAM,GAAN,MAAM,CAAsD;QAEpE,IACE,OAAO,MAAM,CAAC,YAAY,KAAK,WAAW;YAC1C,OAAO,MAAM,CAAC,WAAW,KAAK,WAAW,EACzC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,mFAAmF,CACpF,CAAC;QACJ,CAAC;QAED,IACE,OAAO,MAAM,CAAC,WAAW,KAAK,WAAW;YACzC,OAAO,MAAM,CAAC,YAAY,KAAK,WAAW,EAC1C,CAAC;YACD,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAC;QACJ,CAAC;IACH,CAAC;IAES,6BAA6B,CAAC,GAAmB;QACzD,MAAM,GAAG,CAAC;IACZ,CAAC;IAES,aAAa,CAAC,aAA6B;;QACnD,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;QAErC,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,4BAA4B,CACpC,8DAA8D,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,EACtF,UAAU,EACV,MAAM,EACN,MAAM,CACP,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,CAAC,MAAA,aAAa,CAAC,KAAK,mCAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,KAAK,CAAC,aAAa,GAAG,aAAa,CAAC;QAEpC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,4BAA4B,CACpC,8DACE,IAAI,CAAC,MAAM,CAAC,UACd,qBAAqB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC/C,UAAU,EACV,MAAM,EACN,CAAC,GAAG,aAAa,EAAE,GAAG,MAAM,CAAC,CAC9B,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,GAAG,WAA4B;QAE/B,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;QAE7B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,WAAW,CAAC,CAAC;QAEhE,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO;QACT,CAAC;QAED,MAAM,cAAc,GAAG;YACrB,UAAU,EACR,oFAAoF;YACtF,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ;YAC9B,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY;YACtC,kBAAkB,EAAE,gDAAgD;YACpE,aAAa,EAAE,YAAY;YAC3B,UAAU,EAAE,UAAU;YACtB,oBAAoB,EAClB,qEAAqE;SACxE,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,MAAM,cAAc,EAAE;YAClE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;SACrC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QAED,MAAM,aAAa,GAAkB,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACtD,OAAO,aAAa,CAAC;IACvB,CAAC;IAES,KAAK,CAAC,cAAc,CAC5B,GAAG,WAA4B;QAE/B,IAAI,aAAwC,CAAC;QAC7C,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;YACnD,aAAa,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,WAAW,CAAC,CAAC;QAChE,CAAC;aAAM,CAAC;YACN,aAAa,GAAG,MAAM,gBAAgB,CACpC,IAAI,CAAC,MAAM,CAAC,WAAY,EACxB,WAAW,CACZ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;QAClC,OAAO,aAAa,CAAC;IACvB,CAAC;IAES,KAAK,CAAC,eAAe,CAAC,GAAG,WAA4B;QAC7D,OAAO,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IACvE,CAAC;IAED;;;;;;;OAOG;IACH,OAAO,CACL,UAA6C,EAC7C,OAA0C;QAE1C,OAAO,KAAK,EAAE,GAAG,IAAqB,EAAE,EAAE;YACxC,MAAM,UAAU,GAA2B;gBACzC,OAAO,EAAE,MAAM,UAAU,CAAC,GAAG,IAAI,CAAC;gBAClC,MAAM,EAAE,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;gBACxD,UAAU,EAAE,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC;aACjE,CAAC;YAEF,IAAI,iBAAiB,CAAC,QAAQ,EAAE,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;YACJ,CAAC;YAED,OAAO,iBAAiB,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE;gBAClD,IAAI,CAAC;oBACH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC;oBACzD,UAAU,CAAC,WAAW,GAAG,aAAc,CAAC,YAAY,CAAC;oBACrD,OAAO,MAAM,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;gBAChC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,GAAG,YAAY,wBAAwB,EAAE,CAAC;wBAC5C,MAAM,SAAS,GAAG,IAAI,4BAA4B,CAChD,GAAG,CAAC,OAAO,EACX,UAAU,CAAC,UAAU,EACrB,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,MAAM,CAClB,CAAC;wBACF,OAAO,IAAI,CAAC,6BAA6B,CAAC,SAAS,CAAC,CAAC;oBACvD,CAAC;oBACD,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;wBAClC,OAAO,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC;oBACjD,CAAC;oBACD,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC;CACF","sourcesContent":["import {\n  Auth0Interrupt,\n  FederatedConnectionError,\n  FederatedConnectionInterrupt,\n} from \"../../interrupts\";\nimport { AuthorizerToolParameter, resolveParameter } from \"../../parameters\";\nimport { TokenResponse } from \"../../TokenResponse\";\nimport { asyncLocalStorage, AsyncStorageValue } from \"./asyncLocalStorage\";\n\nexport type { AsyncStorageValue } from \"./asyncLocalStorage\";\n\nexport {\n  asyncLocalStorage,\n  getAccessTokenForConnection,\n} from \"./asyncLocalStorage\";\n\nexport type FederatedConnectionAuthorizerParams<ToolExecuteArgs extends any[]> =\n  {\n    refreshToken?: AuthorizerToolParameter<ToolExecuteArgs, string | undefined>;\n    accessToken?: AuthorizerToolParameter<\n      ToolExecuteArgs,\n      TokenResponse | undefined\n    >;\n    scopes: AuthorizerToolParameter<ToolExecuteArgs, string[]>;\n    connection: AuthorizerToolParameter<ToolExecuteArgs, string>;\n  };\n\n/**\n * Requests authorization to a third party service via Federated Connection.\n */\nexport class FederatedConnectionAuthorizerBase<ToolExecuteArgs extends any[]> {\n  constructor(\n    private readonly auth0: {\n      domain: string;\n      clientId: string;\n      clientSecret: string | undefined;\n    },\n    private params: FederatedConnectionAuthorizerParams<ToolExecuteArgs>\n  ) {\n    if (\n      typeof params.refreshToken === \"undefined\" &&\n      typeof params.accessToken === \"undefined\"\n    ) {\n      throw new Error(\n        \"Either refreshToken or accessToken must be provided to initialize the Authorizer.\"\n      );\n    }\n\n    if (\n      typeof params.accessToken !== \"undefined\" &&\n      typeof params.refreshToken !== \"undefined\"\n    ) {\n      throw new Error(\n        \"Only one of refreshToken or accessToken can be provided to initialize the Authorizer.\"\n      );\n    }\n  }\n\n  protected handleAuthorizationInterrupts(err: Auth0Interrupt) {\n    throw err;\n  }\n\n  protected validateToken(tokenResponse?: TokenResponse) {\n    const store = asyncLocalStorage.getStore();\n    if (!store) {\n      throw new Error(\n        \"The tool must be wrapped with the FederationConnectionAuthorizer.\"\n      );\n    }\n\n    const { scopes, connection } = store;\n\n    if (!tokenResponse) {\n      throw new FederatedConnectionInterrupt(\n        `Authorization required to access the Federated Connection: ${this.params.connection}`,\n        connection,\n        scopes,\n        scopes\n      );\n    }\n\n    const currentScopes = (tokenResponse.scope ?? \"\").split(\" \");\n    const missingScopes = scopes.filter((s) => !currentScopes.includes(s));\n    store.currentScopes = currentScopes;\n\n    if (missingScopes.length > 0) {\n      throw new FederatedConnectionInterrupt(\n        `Authorization required to access the Federated Connection: ${\n          this.params.connection\n        }. Missing scopes: ${missingScopes.join(\", \")}`,\n        connection,\n        scopes,\n        [...currentScopes, ...scopes]\n      );\n    }\n  }\n\n  private async getAccessTokenImpl(\n    ...toolContext: ToolExecuteArgs\n  ): Promise<TokenResponse | undefined> {\n    const store = asyncLocalStorage.getStore();\n    if (!store) {\n      throw new Error(\n        \"The tool must be wrapped with the FederationConnectionAuthorizer.\"\n      );\n    }\n\n    const { connection } = store;\n\n    const subjectToken = await this.getRefreshToken(...toolContext);\n\n    if (!subjectToken) {\n      return;\n    }\n\n    const exchangeParams = {\n      grant_type:\n        \"urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token\",\n      client_id: this.auth0.clientId,\n      client_secret: this.auth0.clientSecret,\n      subject_token_type: \"urn:ietf:params:oauth:token-type:refresh_token\",\n      subject_token: subjectToken,\n      connection: connection,\n      requested_token_type:\n        \"http://auth0.com/oauth/token-type/federated-connection-access-token\",\n    };\n\n    const res = await fetch(`https://${this.auth0.domain}/oauth/token`, {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/json\" },\n      body: JSON.stringify(exchangeParams),\n    });\n\n    if (!res.ok) {\n      return;\n    }\n\n    const tokenResponse: TokenResponse = await res.json();\n    return tokenResponse;\n  }\n\n  protected async getAccessToken(\n    ...toolContext: ToolExecuteArgs\n  ): Promise<TokenResponse | undefined> {\n    let tokenResponse: TokenResponse | undefined;\n    if (typeof this.params.refreshToken === \"function\") {\n      tokenResponse = await this.getAccessTokenImpl(...toolContext);\n    } else {\n      tokenResponse = await resolveParameter(\n        this.params.accessToken!,\n        toolContext\n      );\n    }\n    this.validateToken(tokenResponse);\n    return tokenResponse;\n  }\n\n  protected async getRefreshToken(...toolContext: ToolExecuteArgs) {\n    return await resolveParameter(this.params.refreshToken, toolContext);\n  }\n\n  /**\n   *\n   * Wraps the execute method of an AI tool to handle Federated Connections authorization.\n   *\n   * @param getContext - A function that returns the context of the tool execution.\n   * @param execute - The tool execute method.\n   * @returns The wrapped execute method.\n   */\n  protect(\n    getContext: (...args: ToolExecuteArgs) => any,\n    execute: (...args: ToolExecuteArgs) => any\n  ): (...args: ToolExecuteArgs) => any {\n    return async (...args: ToolExecuteArgs) => {\n      const asyncStore: AsyncStorageValue<any> = {\n        context: await getContext(...args),\n        scopes: await resolveParameter(this.params.scopes, args),\n        connection: await resolveParameter(this.params.connection, args),\n      };\n\n      if (asyncLocalStorage.getStore()) {\n        throw new Error(\n          \"Cannot nest tool calls that require federated connection authorization.\"\n        );\n      }\n\n      return asyncLocalStorage.run(asyncStore, async () => {\n        try {\n          const tokenResponse = await this.getAccessToken(...args);\n          asyncStore.accessToken = tokenResponse!.access_token;\n          return await execute(...args);\n        } catch (err) {\n          if (err instanceof FederatedConnectionError) {\n            const interrupt = new FederatedConnectionInterrupt(\n              err.message,\n              asyncStore.connection,\n              asyncStore.scopes,\n              asyncStore.scopes\n            );\n            return this.handleAuthorizationInterrupts(interrupt);\n          }\n          if (err instanceof Auth0Interrupt) {\n            return this.handleAuthorizationInterrupts(err);\n          }\n          throw err;\n        }\n      });\n    };\n  }\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/authorizers/federated-connections/index.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,iBAAiB,EACjB,2BAA2B,IAAI,2BAA2B,GAC3D,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,iCAAiC,EAAE,MAAM,qCAAqC,CAAC","sourcesContent":["export type { AsyncStorageValue } from \"./asyncLocalStorage\";\n\nexport {\n  asyncLocalStorage,\n  getCredentialsForConnection as getAccessTokenForConnection,\n} from \"./asyncLocalStorage\";\n\nexport { FederatedConnectionAuthorizerBase } from \"./FederatedConnectionAuthorizerBase\";\n\nexport type { FederatedConnectionAuthorizerParams } from \"./FederatedConnectionAuthorizerParams\";\n"]}

package/dist/esm/authorizers/index.d.ts

@@ -1,13 +1,2 @@
-import { AuthenticationClientOptions } from "auth0";
-import * as jose from "jose";
-export type AuthParams = {
-    allowed?: boolean;
-    accessToken?: string;
-    claims?: jose.JWTPayload;
-};
-export type ToolWithAuthHandler<I, O, C> = (authParams: AuthParams, input: I, config?: C) => Promise<O>;
-export type AuthorizerParams = Omit<AuthenticationClientOptions, "domain" | "clientId"> & {
-    domain?: string;
-    clientId?: string;
-};
+export type { ContextGetter } from "./context";
 //# sourceMappingURL=index.d.ts.map

package/dist/esm/authorizers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/authorizers/index.ts"],"names":[],"mappings":"","sourcesContent":["import { AuthenticationClientOptions } from \"auth0\";\nimport * as jose from \"jose\";\n\nexport type AuthParams = {\n  allowed?: boolean;\n  accessToken?: string;\n  claims?: jose.JWTPayload;\n};\n\nexport type ToolWithAuthHandler<I, O, C> = (\n  authParams: AuthParams,\n  input: I,\n  config?: C\n) => Promise<O>;\n\nexport type AuthorizerParams = Omit<\n  AuthenticationClientOptions,\n  \"domain\" | \"clientId\"\n> & {\n  domain?: string;\n  clientId?: string;\n};\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/authorizers/index.ts"],"names":[],"mappings":"","sourcesContent":["export type { ContextGetter } from \"./context\";\n"]}

package/dist/esm/authorizers/types.d.ts

@@ -0,0 +1,37 @@
+import { AuthenticationClientOptions } from "auth0";
+import * as jose from "jose";
+import { z } from "zod";
+export type AuthParams = {
+    allowed?: boolean;
+    accessToken?: string;
+    claims?: jose.JWTPayload;
+};
+export type ToolWithAuthHandler<I, O, C> = (authParams: AuthParams, input: I, config?: C) => Promise<O>;
+export declare const Auth0ClientSchema: z.ZodObject<{
+    domain: z.ZodDefault<z.ZodString>;
+    clientId: z.ZodDefault<z.ZodString>;
+    clientSecret: z.ZodDefault<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    domain: string;
+    clientId: string;
+    clientSecret: string;
+}, {
+    domain?: string | undefined;
+    clientId?: string | undefined;
+    clientSecret?: string | undefined;
+}>;
+export declare const Auth0PublicClientSchema: z.ZodObject<{
+    domain: z.ZodDefault<z.ZodString>;
+    clientId: z.ZodDefault<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    domain: string;
+    clientId: string;
+}, {
+    domain?: string | undefined;
+    clientId?: string | undefined;
+}>;
+export type Auth0ClientParams = z.infer<typeof Auth0ClientSchema>;
+export type Auth0PublicClientParams = z.infer<typeof Auth0PublicClientSchema>;
+export type AuthorizerParams = Pick<AuthenticationClientOptions, "domain" | "clientId" | "clientSecret">;
+export type OnAuthorizationRequest = "block" | "interrupt";
+//# sourceMappingURL=types.d.ts.map

package/dist/esm/authorizers/types.js

@@ -0,0 +1,11 @@
+import { z } from "zod";
+export const Auth0ClientSchema = z.object({
+    domain: z.string().default(() => process.env.AUTH0_DOMAIN),
+    clientId: z.string().default(() => process.env.AUTH0_CLIENT_ID),
+    clientSecret: z.string().default(() => process.env.AUTH0_CLIENT_SECRET),
+});
+export const Auth0PublicClientSchema = z.object({
+    domain: z.string().default(() => process.env.AUTH0_DOMAIN),
+    clientId: z.string().default(() => process.env.AUTH0_CLIENT_ID),
+});
+//# sourceMappingURL=types.js.map

package/dist/esm/authorizers/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/authorizers/types.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAcxB,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,YAAa,CAAC;IAC3D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,eAAgB,CAAC;IAChE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAoB,CAAC;CACzE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,YAAa,CAAC;IAC3D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,eAAgB,CAAC;CACjE,CAAC,CAAC","sourcesContent":["import { AuthenticationClientOptions } from \"auth0\";\nimport * as jose from \"jose\";\nimport { z } from \"zod\";\n\nexport type AuthParams = {\n  allowed?: boolean;\n  accessToken?: string;\n  claims?: jose.JWTPayload;\n};\n\nexport type ToolWithAuthHandler<I, O, C> = (\n  authParams: AuthParams,\n  input: I,\n  config?: C\n) => Promise<O>;\n\nexport const Auth0ClientSchema = z.object({\n  domain: z.string().default(() => process.env.AUTH0_DOMAIN!),\n  clientId: z.string().default(() => process.env.AUTH0_CLIENT_ID!),\n  clientSecret: z.string().default(() => process.env.AUTH0_CLIENT_SECRET!),\n});\n\nexport const Auth0PublicClientSchema = z.object({\n  domain: z.string().default(() => process.env.AUTH0_DOMAIN!),\n  clientId: z.string().default(() => process.env.AUTH0_CLIENT_ID!),\n});\n\nexport type Auth0ClientParams = z.infer<typeof Auth0ClientSchema>;\nexport type Auth0PublicClientParams = z.infer<typeof Auth0PublicClientSchema>;\n\nexport type AuthorizerParams = Pick<\n  AuthenticationClientOptions,\n  \"domain\" | \"clientId\" | \"clientSecret\"\n>;\n\nexport type OnAuthorizationRequest = \"block\" | \"interrupt\";\n"]}

package/dist/esm/credentials.d.ts

@@ -1,10 +1,35 @@
-export interface Credential {
-    type: string;
-    value: string;
-}
-export interface Credentials {
-    idToken?: Credential;
-    accessToken: Credential;
-    refreshToken?: Credential;
+export type TokenResponse = {
+    /** Bearer token for API authorization */
+    access_token: string;
+    /** Refresh token (requires `offline_access` scope) */
+    refresh_token?: string;
+    /** JWT containing user identity claims */
+    id_token: string;
+    /** Typically "Bearer" */
+    token_type?: string;
+    /** Token validity in seconds (default: 86400) */
+    expires_in: number;
+    /** Granted permissions space */
+    scope: string;
+};
+/**
+ * Represents a set of authentication tokens returned after a successful authentication flow.
+ *
+ * @interface TokenSet
+ * @property {string[]} [scopes] - Optional array of permission scopes granted for the token.
+ * @property {string} [idToken] - Optional JWT ID token containing user claims.
+ * @property {string} [refreshToken] - Optional token used to obtain new access tokens without re-authentication.
+ * @property {number} [expiresIn] - Optional time in seconds until the access token expires.
+ * @property {string} accessToken - The access token string used for API requests.
+ * @property {string} tokenType - The type of the token, typically "Bearer".
+ */
+export interface TokenSet {
+    scopes?: string[];
+    idToken?: string;
+    refreshToken?: string;
+    expiresIn?: number;
+    accessToken: string;
+    tokenType: string;
 }
+export declare const tokenSetFromTokenResponse: (tr: TokenResponse) => TokenSet;
 //# sourceMappingURL=credentials.d.ts.map

package/dist/esm/credentials.js

@@ -1,2 +1,12 @@
-export {};
+export const tokenSetFromTokenResponse = (tr) => {
+    var _a;
+    return {
+        tokenType: (_a = tr.token_type) !== null && _a !== void 0 ? _a : "Bearer",
+        accessToken: tr.access_token,
+        idToken: tr.id_token,
+        refreshToken: tr.refresh_token,
+        expiresIn: tr.expires_in,
+        scopes: tr.scope ? tr.scope.split(" ") : undefined,
+    };
+};
 //# sourceMappingURL=credentials.js.map

package/dist/esm/credentials.js.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/credentials.ts"],"names":[],"mappings":"","sourcesContent":["export interface Credential {\n  type: string;\n  value: string;\n}\n\nexport interface Credentials {\n  idToken?: Credential;\n  accessToken: Credential;\n  refreshToken?: Credential;\n}\n"]}
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/credentials.ts"],"names":[],"mappings":"AAoCA,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,EAAiB,EAAY,EAAE;;IACvE,OAAO;QACL,SAAS,EAAE,MAAA,EAAE,CAAC,UAAU,mCAAI,QAAQ;QACpC,WAAW,EAAE,EAAE,CAAC,YAAY;QAC5B,OAAO,EAAE,EAAE,CAAC,QAAQ;QACpB,YAAY,EAAE,EAAE,CAAC,aAAa;QAC9B,SAAS,EAAE,EAAE,CAAC,UAAU;QACxB,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;KACnD,CAAC;AACJ,CAAC,CAAC","sourcesContent":["export type TokenResponse = {\n  /** Bearer token for API authorization */\n  access_token: string;\n  /** Refresh token (requires `offline_access` scope) */\n  refresh_token?: string;\n  /** JWT containing user identity claims */\n  id_token: string;\n  /** Typically \"Bearer\" */\n  token_type?: string;\n  /** Token validity in seconds (default: 86400) */\n  expires_in: number;\n  /** Granted permissions space */\n  scope: string;\n};\n\n/**\n * Represents a set of authentication tokens returned after a successful authentication flow.\n *\n * @interface TokenSet\n * @property {string[]} [scopes] - Optional array of permission scopes granted for the token.\n * @property {string} [idToken] - Optional JWT ID token containing user claims.\n * @property {string} [refreshToken] - Optional token used to obtain new access tokens without re-authentication.\n * @property {number} [expiresIn] - Optional time in seconds until the access token expires.\n * @property {string} accessToken - The access token string used for API requests.\n * @property {string} tokenType - The type of the token, typically \"Bearer\".\n */\nexport interface TokenSet {\n  scopes?: string[];\n  idToken?: string;\n  refreshToken?: string;\n\n  expiresIn?: number;\n  accessToken: string;\n  tokenType: string;\n}\n\nexport const tokenSetFromTokenResponse = (tr: TokenResponse): TokenSet => {\n  return {\n    tokenType: tr.token_type ?? \"Bearer\",\n    accessToken: tr.access_token,\n    idToken: tr.id_token,\n    refreshToken: tr.refresh_token,\n    expiresIn: tr.expires_in,\n    scopes: tr.scope ? tr.scope.split(\" \") : undefined,\n  };\n};\n"]}

package/dist/esm/index.d.ts

@@ -1,8 +1,6 @@
-export type { AuthParams, AuthorizerParams } from "./authorizers";
+export type { AuthParams, AuthorizerParams } from "./authorizers/types";
 export type * from "./credentials";
-export * from "./authorizers/device-authorizer";
 export * from "./errors";
-export type { TokenResponse } from "./TokenResponse";
 export * from "./authorizers/fga/fga-filter";
 export * from "./authorizers/fga/fga-client";
 export * from "./parameters";

package/dist/esm/index.js

@@ -1,4 +1,3 @@
-export * from "./authorizers/device-authorizer";
 export * from "./errors";
 export * from "./authorizers/fga/fga-filter";
 export * from "./authorizers/fga/fga-client";

package/dist/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,iCAAiC,CAAC;AAChD,cAAc,UAAU,CAAC;AAEzB,cAAc,8BAA8B,CAAC;AAC7C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,cAAc,CAAC","sourcesContent":["export type { AuthParams, AuthorizerParams } from \"./authorizers\";\nexport type * from \"./credentials\";\nexport * from \"./authorizers/device-authorizer\";\nexport * from \"./errors\";\nexport type { TokenResponse } from \"./TokenResponse\";\nexport * from \"./authorizers/fga/fga-filter\";\nexport * from \"./authorizers/fga/fga-client\";\nexport * from \"./parameters\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,UAAU,CAAC;AACzB,cAAc,8BAA8B,CAAC;AAC7C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,cAAc,CAAC","sourcesContent":["export type { AuthParams, AuthorizerParams } from \"./authorizers/types\";\nexport type * from \"./credentials\";\nexport * from \"./errors\";\nexport * from \"./authorizers/fga/fga-filter\";\nexport * from \"./authorizers/fga/fga-client\";\nexport * from \"./parameters\";\n"]}

package/dist/esm/interrupts/Auth0Interrupt.js

@@ -35,7 +35,8 @@ export class Auth0Interrupt extends Error {
      * @returns - True if the interrupt is of the specified type.
      */
     static isInterrupt(interrupt) {
-        return (interrupt.name === "AUTH0_AI_INTERRUPT" &&
+        return (interrupt &&
+            interrupt.name === "AUTH0_AI_INTERRUPT" &&
             (typeof this.code === "undefined" || interrupt.code === this.code));
     }
 }

package/dist/esm/interrupts/Auth0Interrupt.js.map

@@ -1 +1 @@
-{"version":3,"file":"Auth0Interrupt.js","sourceRoot":"","sources":["../../../src/interrupts/Auth0Interrupt.ts"],"names":[],"mappings":"AAMA,MAAM,CAAC,MAAM,aAAa,GAAG,oBAA6B,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,OAAO,cAAe,SAAQ,KAAK;IAIvC,YAAY,OAAe,EAAE,IAAY;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QAJjB,SAAI,GAAG,aAAa,CAAC;QAKnB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACH,MAAM;QACJ,OAAO;YACL,GAAG,MAAM,CAAC,WAAW,CACnB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CACzB,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,QAAQ,CAC/C,CACF;YACD,OAAO,EAAE,IAAI,CAAC,OAAO;SACM,CAAC;IAChC,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CAAC,WAAW,CAEhB,SAAc;QAEd,OAAO,CACL,SAAS,CAAC,IAAI,KAAK,oBAAoB;YACvC,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CACnE,CAAC;IACJ,CAAC;CACF","sourcesContent":["// Define a type alias for the generalized type\nexport type Auth0InterruptData<T extends Auth0Interrupt> = Omit<\n  Omit<T, keyof Error>,\n  \"toJSON\"\n> & { message: string };\n\nexport const InterruptName = \"AUTH0_AI_INTERRUPT\" as const;\n\n/**\n * Auth0Interrupt is the base class for all interruptions\n * in the Auth0 AI sdk.\n *\n * It is serializable to a JSON object.\n */\nexport class Auth0Interrupt extends Error {\n  name = InterruptName;\n  code: string;\n\n  constructor(message: string, code: string) {\n    super(message);\n    this.code = code;\n  }\n\n  /**\n   *\n   * Serialize the interrupt to a JSON object.\n   *\n   * @returns - The JSON object representation of the interrupt.\n   */\n  toJSON(): Auth0InterruptData<this> {\n    return {\n      ...Object.fromEntries(\n        Object.entries(this).filter(\n          ([key]) => key !== \"stack\" && key !== \"toJSON\"\n        )\n      ),\n      message: this.message,\n    } as Auth0InterruptData<this>;\n  }\n\n  /**\n   *\n   * Checks if an interrupt is of a specific type asserting its data component.\n   *\n   * This method assert the data part of the interrupt.\n   *\n   * @param clazz - The class of the interrupt to check.\n   * @param interrupt - The interrupt to check.\n   *\n   * @returns - True if the interrupt is of the specified type.\n   */\n  static isInterrupt<T extends abstract new (...args: any) => any>(\n    this: T & { code?: string },\n    interrupt: any\n  ): interrupt is Auth0InterruptData<InstanceType<T>> {\n    return (\n      interrupt.name === \"AUTH0_AI_INTERRUPT\" &&\n      (typeof this.code === \"undefined\" || interrupt.code === this.code)\n    );\n  }\n}\n"]}
+{"version":3,"file":"Auth0Interrupt.js","sourceRoot":"","sources":["../../../src/interrupts/Auth0Interrupt.ts"],"names":[],"mappings":"AAMA,MAAM,CAAC,MAAM,aAAa,GAAG,oBAA6B,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,OAAO,cAAe,SAAQ,KAAK;IAIvC,YAAY,OAAe,EAAE,IAAY;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QAJjB,SAAI,GAAG,aAAa,CAAC;QAKnB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACH,MAAM;QACJ,OAAO;YACL,GAAG,MAAM,CAAC,WAAW,CACnB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CACzB,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,QAAQ,CAC/C,CACF;YACD,OAAO,EAAE,IAAI,CAAC,OAAO;SACM,CAAC;IAChC,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CAAC,WAAW,CAEhB,SAAc;QAEd,OAAO,CACL,SAAS;YACT,SAAS,CAAC,IAAI,KAAK,oBAAoB;YACvC,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CACnE,CAAC;IACJ,CAAC;CACF","sourcesContent":["// Define a type alias for the generalized type\nexport type Auth0InterruptData<T extends Auth0Interrupt> = Omit<\n  Omit<T, keyof Error>,\n  \"toJSON\"\n> & { message: string };\n\nexport const InterruptName = \"AUTH0_AI_INTERRUPT\" as const;\n\n/**\n * Auth0Interrupt is the base class for all interruptions\n * in the Auth0 AI sdk.\n *\n * It is serializable to a JSON object.\n */\nexport class Auth0Interrupt extends Error {\n  name = InterruptName;\n  code: string;\n\n  constructor(message: string, code: string) {\n    super(message);\n    this.code = code;\n  }\n\n  /**\n   *\n   * Serialize the interrupt to a JSON object.\n   *\n   * @returns - The JSON object representation of the interrupt.\n   */\n  toJSON(): Auth0InterruptData<this> {\n    return {\n      ...Object.fromEntries(\n        Object.entries(this).filter(\n          ([key]) => key !== \"stack\" && key !== \"toJSON\"\n        )\n      ),\n      message: this.message,\n    } as Auth0InterruptData<this>;\n  }\n\n  /**\n   *\n   * Checks if an interrupt is of a specific type asserting its data component.\n   *\n   * This method assert the data part of the interrupt.\n   *\n   * @param clazz - The class of the interrupt to check.\n   * @param interrupt - The interrupt to check.\n   *\n   * @returns - True if the interrupt is of the specified type.\n   */\n  static isInterrupt<T extends abstract new (...args: any) => any>(\n    this: T & { code?: string },\n    interrupt: any\n  ): interrupt is Auth0InterruptData<InstanceType<T>> {\n    return (\n      interrupt &&\n      interrupt.name === \"AUTH0_AI_INTERRUPT\" &&\n      (typeof this.code === \"undefined\" || interrupt.code === this.code)\n    );\n  }\n}\n"]}

package/dist/esm/interrupts/DeviceInterrupts.d.ts

@@ -0,0 +1,55 @@
+import { DeviceAuthorizationResponse } from "../authorizers/device-authorizer/DeviceAuthResponse";
+import { Auth0Interrupt, Auth0InterruptData } from "./Auth0Interrupt";
+export interface WithDeviceAuthResponseData {
+    response: DeviceAuthorizationResponse;
+}
+/**
+ * Base class for Device interrupts.
+ */
+export declare class DeviceInterrupt extends Auth0Interrupt {
+    constructor(message: string, code: string);
+    static isInterrupt<T extends abstract new (...args: any) => any>(this: T, interrupt: any): interrupt is Auth0InterruptData<InstanceType<T>>;
+    static hasRequestData(interrupt: any): interrupt is WithDeviceAuthResponseData;
+}
+/**
+ * An interrupt that is thrown when the user denies the authorization request.
+ */
+export declare class AccessDeniedInterrupt extends DeviceInterrupt implements WithDeviceAuthResponseData {
+    readonly response: DeviceAuthorizationResponse;
+    static code: string;
+    constructor(message: string, response: DeviceAuthorizationResponse);
+}
+/**
+ * An interrupt that is thrown when the authorization request has expired.
+ */
+export declare class AuthorizationRequestExpiredInterrupt extends DeviceInterrupt implements WithDeviceAuthResponseData {
+    readonly response: DeviceAuthorizationResponse;
+    static code: string;
+    constructor(message: string, response: DeviceAuthorizationResponse);
+}
+/**
+ * An interrupt that is thrown when the authorization is still pending
+ * and the Authorizer is in `mode: interrupt`.
+ */
+export declare class AuthorizationPendingInterrupt extends DeviceInterrupt implements WithDeviceAuthResponseData {
+    readonly response: DeviceAuthorizationResponse;
+    static code: string;
+    constructor(message: string, response: DeviceAuthorizationResponse);
+}
+/**
+ * An interrupt that is thrown when the authorization polling fails.
+ */
+export declare class AuthorizationPollingInterrupt extends Auth0Interrupt implements WithDeviceAuthResponseData {
+    readonly response: DeviceAuthorizationResponse;
+    static code: string;
+    constructor(message: string, response: DeviceAuthorizationResponse);
+}
+/**
+ * An interrupt that is thrown when the grant is invalid.
+ */
+export declare class InvalidGrantInterrupt extends Auth0Interrupt implements WithDeviceAuthResponseData {
+    readonly response: DeviceAuthorizationResponse;
+    static code: string;
+    constructor(message: string, response: DeviceAuthorizationResponse);
+}
+//# sourceMappingURL=DeviceInterrupts.d.ts.map

package/dist/esm/interrupts/DeviceInterrupts.js

@@ -0,0 +1,70 @@
+import { Auth0Interrupt } from "./Auth0Interrupt";
+/**
+ * Base class for Device interrupts.
+ */
+export class DeviceInterrupt extends Auth0Interrupt {
+    constructor(message, code) {
+        super(message, code);
+    }
+    static isInterrupt(interrupt) {
+        return (interrupt &&
+            Auth0Interrupt.isInterrupt(interrupt) &&
+            typeof interrupt.code === "string" &&
+            interrupt.code.startsWith("DEVICE_"));
+    }
+    static hasRequestData(interrupt) {
+        return DeviceInterrupt.isInterrupt(interrupt) && "response" in interrupt;
+    }
+}
+/**
+ * An interrupt that is thrown when the user denies the authorization request.
+ */
+export class AccessDeniedInterrupt extends DeviceInterrupt {
+    constructor(message, response) {
+        super(message, AccessDeniedInterrupt.code);
+        this.response = response;
+    }
+}
+AccessDeniedInterrupt.code = "DEVICE_ACCESS_DENIED";
+/**
+ * An interrupt that is thrown when the authorization request has expired.
+ */
+export class AuthorizationRequestExpiredInterrupt extends DeviceInterrupt {
+    constructor(message, response) {
+        super(message, AuthorizationRequestExpiredInterrupt.code);
+        this.response = response;
+    }
+}
+AuthorizationRequestExpiredInterrupt.code = "DEVICE_AUTHORIZATION_REQUEST_EXPIRED";
+/**
+ * An interrupt that is thrown when the authorization is still pending
+ * and the Authorizer is in `mode: interrupt`.
+ */
+export class AuthorizationPendingInterrupt extends DeviceInterrupt {
+    constructor(message, response) {
+        super(message, AuthorizationPendingInterrupt.code);
+        this.response = response;
+    }
+}
+AuthorizationPendingInterrupt.code = "DEVICE_AUTHORIZATION_PENDING";
+/**
+ * An interrupt that is thrown when the authorization polling fails.
+ */
+export class AuthorizationPollingInterrupt extends Auth0Interrupt {
+    constructor(message, response) {
+        super(message, AuthorizationPollingInterrupt.code);
+        this.response = response;
+    }
+}
+AuthorizationPollingInterrupt.code = "DEVICE_AUTHORIZATION_POLLING_ERROR";
+/**
+ * An interrupt that is thrown when the grant is invalid.
+ */
+export class InvalidGrantInterrupt extends Auth0Interrupt {
+    constructor(message, response) {
+        super(message, AuthorizationPollingInterrupt.code);
+        this.response = response;
+    }
+}
+InvalidGrantInterrupt.code = "DEVICE_INVALID_GRANT";
+//# sourceMappingURL=DeviceInterrupts.js.map

package/dist/esm/interrupts/DeviceInterrupts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeviceInterrupts.js","sourceRoot":"","sources":["../../../src/interrupts/DeviceInterrupts.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAsB,MAAM,kBAAkB,CAAC;AAMtE;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,cAAc;IACjD,YAAY,OAAe,EAAE,IAAY;QACvC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,WAAW,CAEhB,SAAc;QAEd,OAAO,CACL,SAAS;YACT,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC;YACrC,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;YAClC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CACrC,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,cAAc,CACnB,SAAc;QAEd,OAAO,eAAe,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,UAAU,IAAI,SAAS,CAAC;IAC3E,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,qBACX,SAAQ,eAAe;IAIvB,YACE,OAAe,EACC,QAAqC;QAErD,KAAK,CAAC,OAAO,EAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAF3B,aAAQ,GAAR,QAAQ,CAA6B;IAGvD,CAAC;;AANa,0BAAI,GAAW,sBAA+B,CAAC;AAS/D;;GAEG;AACH,MAAM,OAAO,oCACX,SAAQ,eAAe;IAIvB,YACE,OAAe,EACC,QAAqC;QAErD,KAAK,CAAC,OAAO,EAAE,oCAAoC,CAAC,IAAI,CAAC,CAAC;QAF1C,aAAQ,GAAR,QAAQ,CAA6B;IAGvD,CAAC;;AANa,yCAAI,GAAW,sCAA+C,CAAC;AAS/E;;;GAGG;AACH,MAAM,OAAO,6BACX,SAAQ,eAAe;IAIvB,YACE,OAAe,EACC,QAAqC;QAErD,KAAK,CAAC,OAAO,EAAE,6BAA6B,CAAC,IAAI,CAAC,CAAC;QAFnC,aAAQ,GAAR,QAAQ,CAA6B;IAGvD,CAAC;;AANa,kCAAI,GAAW,8BAAuC,CAAC;AASvE;;GAEG;AACH,MAAM,OAAO,6BACX,SAAQ,cAAc;IAItB,YACE,OAAe,EACC,QAAqC;QAErD,KAAK,CAAC,OAAO,EAAE,6BAA6B,CAAC,IAAI,CAAC,CAAC;QAFnC,aAAQ,GAAR,QAAQ,CAA6B;IAGvD,CAAC;;AANa,kCAAI,GAAW,oCAA6C,CAAC;AAS7E;;GAEG;AACH,MAAM,OAAO,qBACX,SAAQ,cAAc;IAItB,YACE,OAAe,EACC,QAAqC;QAErD,KAAK,CAAC,OAAO,EAAE,6BAA6B,CAAC,IAAI,CAAC,CAAC;QAFnC,aAAQ,GAAR,QAAQ,CAA6B;IAGvD,CAAC;;AANa,0BAAI,GAAW,sBAA+B,CAAC","sourcesContent":["import { DeviceAuthorizationResponse } from \"../authorizers/device-authorizer/DeviceAuthResponse\";\nimport { Auth0Interrupt, Auth0InterruptData } from \"./Auth0Interrupt\";\n\nexport interface WithDeviceAuthResponseData {\n  response: DeviceAuthorizationResponse;\n}\n\n/**\n * Base class for Device interrupts.\n */\nexport class DeviceInterrupt extends Auth0Interrupt {\n  constructor(message: string, code: string) {\n    super(message, code);\n  }\n\n  static isInterrupt<T extends abstract new (...args: any) => any>(\n    this: T,\n    interrupt: any\n  ): interrupt is Auth0InterruptData<InstanceType<T>> {\n    return (\n      interrupt &&\n      Auth0Interrupt.isInterrupt(interrupt) &&\n      typeof interrupt.code === \"string\" &&\n      interrupt.code.startsWith(\"DEVICE_\")\n    );\n  }\n\n  static hasRequestData(\n    interrupt: any\n  ): interrupt is WithDeviceAuthResponseData {\n    return DeviceInterrupt.isInterrupt(interrupt) && \"response\" in interrupt;\n  }\n}\n\n/**\n * An interrupt that is thrown when the user denies the authorization request.\n */\nexport class AccessDeniedInterrupt\n  extends DeviceInterrupt\n  implements WithDeviceAuthResponseData\n{\n  public static code: string = \"DEVICE_ACCESS_DENIED\" as const;\n  constructor(\n    message: string,\n    public readonly response: DeviceAuthorizationResponse\n  ) {\n    super(message, AccessDeniedInterrupt.code);\n  }\n}\n\n/**\n * An interrupt that is thrown when the authorization request has expired.\n */\nexport class AuthorizationRequestExpiredInterrupt\n  extends DeviceInterrupt\n  implements WithDeviceAuthResponseData\n{\n  public static code: string = \"DEVICE_AUTHORIZATION_REQUEST_EXPIRED\" as const;\n  constructor(\n    message: string,\n    public readonly response: DeviceAuthorizationResponse\n  ) {\n    super(message, AuthorizationRequestExpiredInterrupt.code);\n  }\n}\n\n/**\n * An interrupt that is thrown when the authorization is still pending\n * and the Authorizer is in `mode: interrupt`.\n */\nexport class AuthorizationPendingInterrupt\n  extends DeviceInterrupt\n  implements WithDeviceAuthResponseData\n{\n  public static code: string = \"DEVICE_AUTHORIZATION_PENDING\" as const;\n  constructor(\n    message: string,\n    public readonly response: DeviceAuthorizationResponse\n  ) {\n    super(message, AuthorizationPendingInterrupt.code);\n  }\n}\n\n/**\n * An interrupt that is thrown when the authorization polling fails.\n */\nexport class AuthorizationPollingInterrupt\n  extends Auth0Interrupt\n  implements WithDeviceAuthResponseData\n{\n  public static code: string = \"DEVICE_AUTHORIZATION_POLLING_ERROR\" as const;\n  constructor(\n    message: string,\n    public readonly response: DeviceAuthorizationResponse\n  ) {\n    super(message, AuthorizationPollingInterrupt.code);\n  }\n}\n\n/**\n * An interrupt that is thrown when the grant is invalid.\n */\nexport class InvalidGrantInterrupt\n  extends Auth0Interrupt\n  implements WithDeviceAuthResponseData\n{\n  public static code: string = \"DEVICE_INVALID_GRANT\" as const;\n  constructor(\n    message: string,\n    public readonly response: DeviceAuthorizationResponse\n  ) {\n    super(message, AuthorizationPollingInterrupt.code);\n  }\n}\n"]}

package/dist/esm/interrupts/index.d.ts

@@ -1,4 +1,6 @@
 export { Auth0Interrupt } from "./Auth0Interrupt";
 export { FederatedConnectionInterrupt, FederatedConnectionError, } from "./FederatedConnectionInterrupt";
 export { CIBAInterrupt, AccessDeniedInterrupt, UserDoesNotHavePushNotificationsInterrupt, AuthorizationRequestExpiredInterrupt, AuthorizationPendingInterrupt, AuthorizationPollingInterrupt, InvalidGrantInterrupt, } from "./CIBAInterrupts";
+export * as DeviceInterrupts from "./DeviceInterrupts";
+export { DeviceInterrupt } from "./DeviceInterrupts";
 //# sourceMappingURL=index.d.ts.map

package/dist/esm/interrupts/index.js

@@ -1,4 +1,6 @@
 export { Auth0Interrupt } from "./Auth0Interrupt";
 export { FederatedConnectionInterrupt, FederatedConnectionError, } from "./FederatedConnectionInterrupt";
 export { CIBAInterrupt, AccessDeniedInterrupt, UserDoesNotHavePushNotificationsInterrupt, AuthorizationRequestExpiredInterrupt, AuthorizationPendingInterrupt, AuthorizationPollingInterrupt, InvalidGrantInterrupt, } from "./CIBAInterrupts";
+export * as DeviceInterrupts from "./DeviceInterrupts";
+export { DeviceInterrupt } from "./DeviceInterrupts";
 //# sourceMappingURL=index.js.map

package/dist/esm/interrupts/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/interrupts/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,GACzB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,yCAAyC,EACzC,oCAAoC,EACpC,6BAA6B,EAC7B,6BAA6B,EAC7B,qBAAqB,GACtB,MAAM,kBAAkB,CAAC","sourcesContent":["export { Auth0Interrupt } from \"./Auth0Interrupt\";\n\nexport {\n  FederatedConnectionInterrupt,\n  FederatedConnectionError,\n} from \"./FederatedConnectionInterrupt\";\n\nexport {\n  CIBAInterrupt,\n  AccessDeniedInterrupt,\n  UserDoesNotHavePushNotificationsInterrupt,\n  AuthorizationRequestExpiredInterrupt,\n  AuthorizationPendingInterrupt,\n  AuthorizationPollingInterrupt,\n  InvalidGrantInterrupt,\n} from \"./CIBAInterrupts\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/interrupts/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,GACzB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,yCAAyC,EACzC,oCAAoC,EACpC,6BAA6B,EAC7B,6BAA6B,EAC7B,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,gBAAgB,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC","sourcesContent":["export { Auth0Interrupt } from \"./Auth0Interrupt\";\n\nexport {\n  FederatedConnectionInterrupt,\n  FederatedConnectionError,\n} from \"./FederatedConnectionInterrupt\";\n\nexport {\n  CIBAInterrupt,\n  AccessDeniedInterrupt,\n  UserDoesNotHavePushNotificationsInterrupt,\n  AuthorizationRequestExpiredInterrupt,\n  AuthorizationPendingInterrupt,\n  AuthorizationPollingInterrupt,\n  InvalidGrantInterrupt,\n} from \"./CIBAInterrupts\";\n\nexport * as DeviceInterrupts from \"./DeviceInterrupts\";\nexport { DeviceInterrupt } from \"./DeviceInterrupts\";\n"]}