@auth0/ai 1.0.2 → 2.0.1

package/dist/esm/stores/Store.d.ts

@@ -0,0 +1,40 @@
+/**
+ * A key-value store interface.
+ *
+ * Auth0AI uses this store in different stages:
+ *
+ * 1. to store the authorization request when an AI agent is interrupted  (CIBA, Device Flow)
+ * 2. user credentials associated to threads to avoid re-authentication (CIBA, Device Flow, Federated Connection)
+ *
+ */
+export interface Store<T = any> {
+    /**
+     *
+     * Get a value from the store.
+     *
+     * @param namespace - The namespace of the key
+     * @param key - The key
+     */
+    get(namespace: string[], key: string): Promise<T | undefined>;
+    /**
+     *
+     * Delete a value from the store.
+     * @param namespace - The namespace of the key
+     * @param key - The key
+     */
+    delete(namespace: string[], key: string): Promise<void>;
+    /**
+     *
+     * Put a value in the store.
+     *
+     * @param namespace - The namespace of the key
+     * @param key - The key
+     * @param value - The value to store
+     * @param [options] - The options to store the value
+     * @param [options.expiresIn] - The time in milliseconds to expire the value
+     */
+    put(namespace: string[], key: string, value: T, options?: {
+        expiresIn?: number;
+    }): Promise<void>;
+}
+//# sourceMappingURL=Store.d.ts.map

package/dist/esm/stores/Store.js

@@ -0,0 +1,11 @@
+/**
+ * A key-value store interface.
+ *
+ * Auth0AI uses this store in different stages:
+ *
+ * 1. to store the authorization request when an AI agent is interrupted  (CIBA, Device Flow)
+ * 2. user credentials associated to threads to avoid re-authentication (CIBA, Device Flow, Federated Connection)
+ *
+ */
+export {};
+//# sourceMappingURL=Store.js.map

package/dist/esm/stores/Store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Store.js","sourceRoot":"","sources":["../../../src/stores/Store.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG","sourcesContent":["/**\n * A key-value store interface.\n *\n * Auth0AI uses this store in different stages:\n *\n * 1. to store the authorization request when an AI agent is interrupted  (CIBA, Device Flow)\n * 2. user credentials associated to threads to avoid re-authentication (CIBA, Device Flow, Federated Connection)\n *\n */\n\nexport interface Store<T = any> {\n  /**\n   *\n   * Get a value from the store.\n   *\n   * @param namespace - The namespace of the key\n   * @param key - The key\n   */\n  get(namespace: string[], key: string): Promise<T | undefined>;\n\n  /**\n   *\n   * Delete a value from the store.\n   * @param namespace - The namespace of the key\n   * @param key - The key\n   */\n  delete(namespace: string[], key: string): Promise<void>;\n\n  /**\n   *\n   * Put a value in the store.\n   *\n   * @param namespace - The namespace of the key\n   * @param key - The key\n   * @param value - The value to store\n   * @param [options] - The options to store the value\n   * @param [options.expiresIn] - The time in milliseconds to expire the value\n   */\n  put(\n    namespace: string[],\n    key: string,\n    value: T,\n    options?: { expiresIn?: number }\n  ): Promise<void>;\n}\n"]}

package/dist/esm/stores/SubStore.d.ts

@@ -0,0 +1,31 @@
+import { Store } from "./Store";
+/**
+ * Parameters for configuring a SubStore.
+ * @template T The type of values to be stored in the SubStore.
+ * @property {string[]} [baseNamespace] - An optional base namespace for the SubStore, used to organize keys in a hierarchical structure.
+ * @property {(value: T) => number | undefined} [getTTL] - An optional function that returns the expiry time for a value in milliseconds since epoch, or undefined if the value doesn't expire.
+ */
+type SubStoreParams<T> = {
+    baseNamespace?: string[];
+    getTTL?: (value: T) => number | undefined;
+};
+/**
+ * A store implementation that delegates operations to a parent store with optional namespace prefixing.
+ *
+ * @template T - The type of values stored in this SubStore
+ * @implements {Store<T>}
+ */
+export declare class SubStore<T = any> implements Store<T> {
+    private readonly parent;
+    private readonly options;
+    constructor(parent: Store<any>, options?: SubStoreParams<T>);
+    private getFullNamespace;
+    get(namespace: string[], key: string): Promise<any>;
+    delete(namespace: string[], key: string): Promise<void>;
+    put(namespace: string[], key: string, value: T, options?: {
+        expiresIn?: number;
+    }): Promise<void>;
+    createSubStore<TNew>(options?: string | string[] | SubStoreParams<TNew>): SubStore<TNew>;
+}
+export {};
+//# sourceMappingURL=SubStore.d.ts.map

package/dist/esm/stores/SubStore.js

@@ -0,0 +1,48 @@
+/**
+ * A store implementation that delegates operations to a parent store with optional namespace prefixing.
+ *
+ * @template T - The type of values stored in this SubStore
+ * @implements {Store<T>}
+ */
+export class SubStore {
+    constructor(parent, options = {}) {
+        this.parent = parent;
+        this.options = options;
+        if (typeof parent === "undefined") {
+            throw new Error("Parent store is required");
+        }
+    }
+    getFullNamespace(namespace) {
+        if (this.options.baseNamespace) {
+            return [...this.options.baseNamespace, ...namespace];
+        }
+        return namespace;
+    }
+    get(namespace, key) {
+        return this.parent.get(this.getFullNamespace(namespace), key);
+    }
+    delete(namespace, key) {
+        return this.parent.delete(this.getFullNamespace(namespace), key);
+    }
+    put(namespace, key, value, options) {
+        const expiresIn = (options === null || options === void 0 ? void 0 : options.expiresIn)
+            ? options.expiresIn
+            : this.options.getTTL
+                ? this.options.getTTL(value)
+                : undefined;
+        const fullNS = this.getFullNamespace(namespace);
+        return this.parent.put(fullNS, key, value, {
+            expiresIn,
+        });
+    }
+    createSubStore(options = {}) {
+        if (typeof options === "string") {
+            options = { baseNamespace: [options] };
+        }
+        else if (Array.isArray(options)) {
+            options = { baseNamespace: options };
+        }
+        return new SubStore(this, options);
+    }
+}
+//# sourceMappingURL=SubStore.js.map

package/dist/esm/stores/SubStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SubStore.js","sourceRoot":"","sources":["../../../src/stores/SubStore.ts"],"names":[],"mappings":"AAaA;;;;;GAKG;AACH,MAAM,OAAO,QAAQ;IACnB,YACmB,MAAkB,EAClB,UAA6B,EAAE;QAD/B,WAAM,GAAN,MAAM,CAAY;QAClB,YAAO,GAAP,OAAO,CAAwB;QAEhD,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,SAAmB;QAC1C,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,SAAS,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,GAAG,CAAC,SAAmB,EAAE,GAAW;QAClC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,CAAC,SAAmB,EAAE,GAAW;QACrC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;IACnE,CAAC;IAED,GAAG,CACD,SAAmB,EACnB,GAAW,EACX,KAAQ,EACR,OAAgC;QAEhC,MAAM,SAAS,GAAG,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,SAAS;YAClC,CAAC,CAAC,OAAO,CAAC,SAAS;YACnB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM;gBACnB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC5B,CAAC,CAAC,SAAS,CAAC;QAEhB,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAEhD,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE;YACzC,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAED,cAAc,CAAO,UAAoD,EAAE;QACzE,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,GAAG,EAAE,aAAa,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,OAAO,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;QACvC,CAAC;QACD,OAAO,IAAI,QAAQ,CAAO,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;CACF","sourcesContent":["import { Store } from \"./Store\";\n\n/**\n * Parameters for configuring a SubStore.\n * @template T The type of values to be stored in the SubStore.\n * @property {string[]} [baseNamespace] - An optional base namespace for the SubStore, used to organize keys in a hierarchical structure.\n * @property {(value: T) => number | undefined} [getTTL] - An optional function that returns the expiry time for a value in milliseconds since epoch, or undefined if the value doesn't expire.\n */\ntype SubStoreParams<T> = {\n  baseNamespace?: string[];\n  getTTL?: (value: T) => number | undefined;\n};\n\n/**\n * A store implementation that delegates operations to a parent store with optional namespace prefixing.\n *\n * @template T - The type of values stored in this SubStore\n * @implements {Store<T>}\n */\nexport class SubStore<T = any> implements Store<T> {\n  constructor(\n    private readonly parent: Store<any>,\n    private readonly options: SubStoreParams<T> = {}\n  ) {\n    if (typeof parent === \"undefined\") {\n      throw new Error(\"Parent store is required\");\n    }\n  }\n\n  private getFullNamespace(namespace: string[]) {\n    if (this.options.baseNamespace) {\n      return [...this.options.baseNamespace, ...namespace];\n    }\n    return namespace;\n  }\n\n  get(namespace: string[], key: string) {\n    return this.parent.get(this.getFullNamespace(namespace), key);\n  }\n\n  delete(namespace: string[], key: string) {\n    return this.parent.delete(this.getFullNamespace(namespace), key);\n  }\n\n  put(\n    namespace: string[],\n    key: string,\n    value: T,\n    options?: { expiresIn?: number }\n  ): Promise<void> {\n    const expiresIn = options?.expiresIn\n      ? options.expiresIn\n      : this.options.getTTL\n        ? this.options.getTTL(value)\n        : undefined;\n\n    const fullNS = this.getFullNamespace(namespace);\n\n    return this.parent.put(fullNS, key, value, {\n      expiresIn,\n    });\n  }\n\n  createSubStore<TNew>(options: string | string[] | SubStoreParams<TNew> = {}) {\n    if (typeof options === \"string\") {\n      options = { baseNamespace: [options] };\n    } else if (Array.isArray(options)) {\n      options = { baseNamespace: options };\n    }\n    return new SubStore<TNew>(this, options);\n  }\n}\n"]}

package/dist/esm/stores/impl/FSStore.d.ts

@@ -0,0 +1,19 @@
+import { TempBox } from "tempbox";
+import { TempBoxStore } from "./TempBoxStore";
+export declare class PersistentTempBox extends TempBox {
+    private filepath;
+    private _pendingWriteTimeout;
+    private _debounceMs;
+    constructor(filepath: string, debounceMs?: number);
+    private _load;
+    private _debouncedPersist;
+    private _persist;
+    private _ensureDirectory;
+}
+/**
+ * An unsafe filesystem store for dev/demo purposes.
+ */
+export declare class FSStore<T = any> extends TempBoxStore<T> {
+    constructor(filepath: string);
+}
+//# sourceMappingURL=FSStore.d.ts.map

package/dist/esm/stores/impl/FSStore.js

@@ -0,0 +1,72 @@
+import fs from "fs/promises";
+import path from "path";
+import { TempBox } from "tempbox";
+import { TempBoxStore } from "./TempBoxStore";
+export class PersistentTempBox extends TempBox {
+    constructor(filepath, debounceMs = 100) {
+        const absPath = path.resolve(filepath);
+        super({
+            onSet: () => this._debouncedPersist(),
+            onDelete: () => this._debouncedPersist(),
+            onClear: () => this._debouncedPersist(),
+            onExpire: () => this._debouncedPersist(),
+        });
+        this._pendingWriteTimeout = null;
+        this.filepath = absPath;
+        this._debounceMs = debounceMs;
+        this._load();
+    }
+    async _load() {
+        try {
+            const raw = await fs.readFile(this.filepath, "utf-8");
+            const parsed = JSON.parse(raw);
+            for (const [key, { value, expiresAt }] of Object.entries(parsed)) {
+                const ttl = expiresAt ? Math.max(0, expiresAt - Date.now()) : undefined;
+                if (ttl === undefined || ttl > 0) {
+                    this.set(key, value, ttl);
+                }
+            }
+        }
+        catch (err) {
+            if (err.code !== "ENOENT") {
+                console.error(`Failed to load persisted store:`, err);
+            }
+        }
+    }
+    _debouncedPersist() {
+        if (this._pendingWriteTimeout) {
+            clearTimeout(this._pendingWriteTimeout);
+        }
+        this._pendingWriteTimeout = setTimeout(() => {
+            this._persist();
+        }, this._debounceMs);
+    }
+    async _persist() {
+        const entries = {};
+        for (const [key, { value, expiresAt }] of this["data"].entries()) {
+            if (!expiresAt || expiresAt > Date.now()) {
+                entries[key] = { value, expiresAt };
+            }
+        }
+        try {
+            await this._ensureDirectory();
+            await fs.writeFile(this.filepath, JSON.stringify(entries, null, 2), "utf-8");
+        }
+        catch (err) {
+            console.error(`Failed to persist store to disk:`, err);
+        }
+    }
+    async _ensureDirectory() {
+        const dir = path.dirname(this.filepath);
+        await fs.mkdir(dir, { recursive: true });
+    }
+}
+/**
+ * An unsafe filesystem store for dev/demo purposes.
+ */
+export class FSStore extends TempBoxStore {
+    constructor(filepath) {
+        super(new PersistentTempBox(filepath));
+    }
+}
+//# sourceMappingURL=FSStore.js.map

package/dist/esm/stores/impl/FSStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FSStore.js","sourceRoot":"","sources":["../../../../src/stores/impl/FSStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,aAAa,CAAC;AAC7B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAO9C,MAAM,OAAO,iBAAkB,SAAQ,OAAO;IAK5C,YAAY,QAAgB,EAAE,UAAU,GAAG,GAAG;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvC,KAAK,CAAC;YACJ,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE;YACrC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE;YACxC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE;YACvC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE;SACzC,CAAC,CAAC;QAVG,yBAAoB,GAA0B,IAAI,CAAC;QAWzD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;QAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,KAAK;QACjB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACtD,MAAM,MAAM,GAAgC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAE5D,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjE,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACxE,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;oBACjC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrD,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;IACH,CAAC;IAEO,iBAAiB;QACvB,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC9B,YAAY,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,CAAC,oBAAoB,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,MAAM,OAAO,GAAgC,EAAE,CAAC;QAChD,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACjE,IAAI,CAAC,SAAS,IAAI,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBACzC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;YACtC,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC9B,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAChC,OAAO,CACR,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,OAAiB,SAAQ,YAAe;IACnD,YAAY,QAAgB;QAC1B,KAAK,CAAC,IAAI,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzC,CAAC;CACF","sourcesContent":["import fs from \"fs/promises\";\nimport path from \"path\";\nimport { TempBox } from \"tempbox\";\n\nimport { TempBoxStore } from \"./TempBoxStore\";\n\ntype StoredEntry = {\n  value: any;\n  expiresAt: number | null;\n};\n\nexport class PersistentTempBox extends TempBox {\n  private filepath: string;\n  private _pendingWriteTimeout: NodeJS.Timeout | null = null;\n  private _debounceMs: number;\n\n  constructor(filepath: string, debounceMs = 100) {\n    const absPath = path.resolve(filepath);\n    super({\n      onSet: () => this._debouncedPersist(),\n      onDelete: () => this._debouncedPersist(),\n      onClear: () => this._debouncedPersist(),\n      onExpire: () => this._debouncedPersist(),\n    });\n    this.filepath = absPath;\n    this._debounceMs = debounceMs;\n    this._load();\n  }\n\n  private async _load() {\n    try {\n      const raw = await fs.readFile(this.filepath, \"utf-8\");\n      const parsed: Record<string, StoredEntry> = JSON.parse(raw);\n\n      for (const [key, { value, expiresAt }] of Object.entries(parsed)) {\n        const ttl = expiresAt ? Math.max(0, expiresAt - Date.now()) : undefined;\n        if (ttl === undefined || ttl > 0) {\n          this.set(key, value, ttl);\n        }\n      }\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException).code !== \"ENOENT\") {\n        console.error(`Failed to load persisted store:`, err);\n      }\n    }\n  }\n\n  private _debouncedPersist() {\n    if (this._pendingWriteTimeout) {\n      clearTimeout(this._pendingWriteTimeout);\n    }\n\n    this._pendingWriteTimeout = setTimeout(() => {\n      this._persist();\n    }, this._debounceMs);\n  }\n\n  private async _persist() {\n    const entries: Record<string, StoredEntry> = {};\n    for (const [key, { value, expiresAt }] of this[\"data\"].entries()) {\n      if (!expiresAt || expiresAt > Date.now()) {\n        entries[key] = { value, expiresAt };\n      }\n    }\n\n    try {\n      await this._ensureDirectory();\n      await fs.writeFile(\n        this.filepath,\n        JSON.stringify(entries, null, 2),\n        \"utf-8\"\n      );\n    } catch (err) {\n      console.error(`Failed to persist store to disk:`, err);\n    }\n  }\n\n  private async _ensureDirectory() {\n    const dir = path.dirname(this.filepath);\n    await fs.mkdir(dir, { recursive: true });\n  }\n}\n\n/**\n * An unsafe filesystem store for dev/demo purposes.\n */\nexport class FSStore<T = any> extends TempBoxStore<T> {\n  constructor(filepath: string) {\n    super(new PersistentTempBox(filepath));\n  }\n}\n"]}

package/dist/esm/stores/impl/MemoryStore.d.ts

@@ -0,0 +1,8 @@
+import { TempBoxStore } from "./TempBoxStore";
+/**
+ * An in-memory store for dev/demo purposes.
+ */
+export declare class MemoryStore<T = any> extends TempBoxStore<T> {
+    constructor();
+}
+//# sourceMappingURL=MemoryStore.d.ts.map

package/dist/esm/stores/impl/MemoryStore.js

@@ -0,0 +1,11 @@
+import { TempBox } from "tempbox";
+import { TempBoxStore } from "./TempBoxStore";
+/**
+ * An in-memory store for dev/demo purposes.
+ */
+export class MemoryStore extends TempBoxStore {
+    constructor() {
+        super(new TempBox());
+    }
+}
+//# sourceMappingURL=MemoryStore.js.map

package/dist/esm/stores/impl/MemoryStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MemoryStore.js","sourceRoot":"","sources":["../../../../src/stores/impl/MemoryStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C;;GAEG;AACH,MAAM,OAAO,WAAqB,SAAQ,YAAe;IACvD;QACE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC;IACvB,CAAC;CACF","sourcesContent":["import { TempBox } from \"tempbox\";\n\nimport { TempBoxStore } from \"./TempBoxStore\";\n\n/**\n * An in-memory store for dev/demo purposes.\n */\nexport class MemoryStore<T = any> extends TempBoxStore<T> {\n  constructor() {\n    super(new TempBox());\n  }\n}\n"]}

package/dist/esm/stores/impl/TempBoxStore.d.ts

@@ -0,0 +1,13 @@
+import { TempBox } from "tempbox";
+import { Store } from "../Store";
+export declare class TempBoxStore<T = any> implements Store<T> {
+    private readonly store;
+    protected constructor(store: TempBox);
+    private getKey;
+    get(namespace: string[], key: string): Promise<any>;
+    delete(namespace: string[], key: string): Promise<void>;
+    put(namespace: string[], key: string, value: T, options?: {
+        expiresIn?: number;
+    }): Promise<void>;
+}
+//# sourceMappingURL=TempBoxStore.d.ts.map

package/dist/esm/stores/impl/TempBoxStore.js

@@ -0,0 +1,18 @@
+export class TempBoxStore {
+    constructor(store) {
+        this.store = store;
+    }
+    getKey(namespace, key) {
+        return namespace.join("/") + "/" + key;
+    }
+    async get(namespace, key) {
+        return this.store.get(this.getKey(namespace, key));
+    }
+    async delete(namespace, key) {
+        this.store.delete(this.getKey(namespace, key));
+    }
+    async put(namespace, key, value, options) {
+        this.store.set(this.getKey(namespace, key), value, options === null || options === void 0 ? void 0 : options.expiresIn);
+    }
+}
+//# sourceMappingURL=TempBoxStore.js.map

package/dist/esm/stores/impl/TempBoxStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TempBoxStore.js","sourceRoot":"","sources":["../../../../src/stores/impl/TempBoxStore.ts"],"names":[],"mappings":"AAIA,MAAM,OAAO,YAAY;IACvB,YAAuC,KAAc;QAAd,UAAK,GAAL,KAAK,CAAS;IAAG,CAAC;IAEjD,MAAM,CAAC,SAAmB,EAAE,GAAW;QAC7C,OAAO,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAmB,EAAE,GAAW;QACxC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAmB,EAAE,GAAW;QAC3C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,GAAG,CACP,SAAmB,EACnB,GAAW,EACX,KAAQ,EACR,OAAgC;QAEhC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,SAAS,CAAC,CAAC;IACzE,CAAC;CACF","sourcesContent":["import { TempBox } from \"tempbox\";\n\nimport { Store } from \"../Store\";\n\nexport class TempBoxStore<T = any> implements Store<T> {\n  protected constructor(private readonly store: TempBox) {}\n\n  private getKey(namespace: string[], key: string) {\n    return namespace.join(\"/\") + \"/\" + key;\n  }\n\n  async get(namespace: string[], key: string) {\n    return this.store.get(this.getKey(namespace, key));\n  }\n\n  async delete(namespace: string[], key: string) {\n    this.store.delete(this.getKey(namespace, key));\n  }\n\n  async put(\n    namespace: string[],\n    key: string,\n    value: T,\n    options?: { expiresIn?: number }\n  ) {\n    this.store.set(this.getKey(namespace, key), value, options?.expiresIn);\n  }\n}\n"]}

package/dist/esm/stores/index.d.ts

@@ -0,0 +1,5 @@
+export type { Store } from "./Store";
+export { SubStore } from "./SubStore";
+export { MemoryStore } from "./impl/MemoryStore";
+export { FSStore } from "./impl/FSStore";
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/stores/index.js

@@ -0,0 +1,4 @@
+export { SubStore } from "./SubStore";
+export { MemoryStore } from "./impl/MemoryStore";
+export { FSStore } from "./impl/FSStore";
+//# sourceMappingURL=index.js.map

package/dist/esm/stores/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/stores/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC","sourcesContent":["export type { Store } from \"./Store\";\nexport { SubStore } from \"./SubStore\";\nexport { MemoryStore } from \"./impl/MemoryStore\";\nexport { FSStore } from \"./impl/FSStore\";\n"]}

package/dist/esm/util/index.d.ts

@@ -0,0 +1,3 @@
+export declare const omit: <T extends object, K extends keyof T>(obj: T, keys: K[]) => Omit<T, K>;
+export type RequireFields<T, K extends keyof T> = Required<Pick<T, K>> & Omit<T, K>;
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/util/index.js

@@ -0,0 +1,8 @@
+export const omit = function omit(obj, keys) {
+    const result = { ...obj };
+    for (const key of keys) {
+        delete result[key];
+    }
+    return result;
+};
+//# sourceMappingURL=index.js.map

package/dist/esm/util/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/util/index.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,IAAI,GAAG,SAAS,IAAI,CAC/B,GAAM,EACN,IAAS;IAET,MAAM,MAAM,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAoB,CAAC;AAC9B,CAAC,CAAC","sourcesContent":["export const omit = function omit<T extends object, K extends keyof T>(\n  obj: T,\n  keys: K[]\n): Omit<T, K> {\n  const result = { ...obj };\n  for (const key of keys) {\n    delete result[key];\n  }\n  return result as Omit<T, K>;\n};\n\nexport type RequireFields<T, K extends keyof T> = Required<Pick<T, K>> &\n  Omit<T, K>;\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@auth0/ai",
-  "version": "1.0.2",
+  "version": "2.0.1",
   "description": "Auth0AI SDK for JavaScript",
   "types": "dist/esm/index.d.ts",
   "main": "dist/cjs/index.js",
@@ -35,11 +35,26 @@
       "import": "./dist/esm/interrupts/index.js",
       "require": "./dist/cjs/interrupts/index.js"
     },
+    "./stores": {
+      "types": "./dist/esm/stores/index.d.ts",
+      "import": "./dist/esm/stores/index.js",
+      "require": "./dist/cjs/stores/index.js"
+    },
+    "./authorizers": {
+      "types": "./dist/esm/authorizers/index.d.ts",
+      "import": "./dist/esm/authorizers/index.js",
+      "require": "./dist/cjs/authorizers/index.js"
+    },
     "./FederatedConnections": {
       "types": "./dist/esm/authorizers/federated-connections/index.d.ts",
       "import": "./dist/esm/authorizers/federated-connections/index.js",
       "require": "./dist/cjs/authorizers/federated-connections/index.js"
     },
+    "./Device": {
+      "types": "./dist/esm/authorizers/device-authorizer/index.d.ts",
+      "import": "./dist/esm/authorizers/device-authorizer/index.js",
+      "require": "./dist/cjs/authorizers/device-authorizer/index.js"
+    },
     "./CIBA": {
       "types": "./dist/esm/authorizers/ciba/index.d.ts",
       "import": "./dist/esm/authorizers/ciba/index.js",
@@ -65,10 +80,11 @@
   "dependencies": {
     "@openfga/sdk": "^0.8.0",
     "auth0": "^4.18.0",
-    "enquirer": "^2.4.1",
     "jose": "^5.9.6",
-    "open": "^10.1.0",
-    "openid-client": "^6.1.7"
+    "openid-client": "^6.1.7",
+    "stable-hash": "^0.0.5",
+    "tempbox": "^1.1.1",
+    "zod": "^3.24.2"
   },
   "publishConfig": {
     "access": "public"

package/dist/cjs/TokenResponse.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"TokenResponse.js","sourceRoot":"","sources":["../../src/TokenResponse.ts"],"names":[],"mappings":"","sourcesContent":["export type TokenResponse = {\n  /** Bearer token for API authorization */\n  access_token: string;\n  /** Refresh token (requires `offline_access` scope) */\n  refresh_token?: string;\n  /** JWT containing user identity claims */\n  id_token: string;\n  /** Typically \"Bearer\" */\n  token_type?: string;\n  /** Token validity in seconds (default: 86400) */\n  expires_in: number;\n  /** Granted permissions space */\n  scope: string;\n};\n"]}

package/dist/cjs/authorizers/device-authorizer.js

@@ -1,130 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DeviceAuthorizer = void 0;
-const enquirer_1 = __importDefault(require("enquirer"));
-const jose = __importStar(require("jose"));
-const open_1 = __importDefault(require("open"));
-const openid_client_1 = require("openid-client");
-const errors_1 = require("../errors");
-class DeviceAuthorizer {
-    constructor(params) {
-        this.domain = (params === null || params === void 0 ? void 0 : params.domain) || process.env.AUTH0_DOMAIN;
-        this.clientId = (params === null || params === void 0 ? void 0 : params.clientId) || process.env.AUTH0_CLIENT_ID;
-    }
-    async _authorize(params) {
-        const config = await (0, openid_client_1.discovery)(new URL(`https://${this.domain}`), this.clientId);
-        const handle = await (0, openid_client_1.initiateDeviceAuthorization)(config, {
-            ...params,
-        });
-        const { verification_uri_complete, user_code, expires_in } = handle;
-        const enquirer = new enquirer_1.default();
-        await enquirer.prompt({
-            type: "input",
-            name: "confirmation",
-            message: `Press Enter to open the browser to log in or press Ctrl+C to abort. You should see the following code: ${user_code}. It expires in ${expires_in % 60 === 0
-                ? `${expires_in / 60} minutes`
-                : `${expires_in} seconds`}.`,
-        });
-        await (0, open_1.default)(verification_uri_complete);
-        let tokens = null;
-        try {
-            tokens = await (0, openid_client_1.pollDeviceAuthorizationGrant)(config, handle);
-        }
-        catch (err) {
-            switch (err.error) {
-                case "access_denied":
-                    throw new errors_1.AccessDeniedError(err.error_description);
-                case "expired_token":
-                    throw new errors_1.AuthorizationRequestExpiredError("Authorization request has expired");
-                default:
-                    throw new Error(`Error: ${err.error}; Description: ${err.error_description}`);
-            }
-        }
-        if (!tokens) {
-            throw new Error("Failed to obtain tokens");
-        }
-        const credentials = {
-            accessToken: {
-                type: tokens.token_type || "bearer",
-                value: tokens.access_token,
-            },
-        };
-        if (tokens.id_token) {
-            credentials.idToken = {
-                type: tokens.token_type || "bearer",
-                value: tokens.id_token,
-            };
-        }
-        return credentials;
-    }
-    static async authorize(options, params) {
-        const authorizer = new DeviceAuthorizer(params);
-        const credentials = await authorizer._authorize(options);
-        let claims = {};
-        if (credentials.idToken) {
-            claims = jose.decodeJwt(credentials.idToken.value);
-        }
-        return { accessToken: credentials.accessToken.value, claims };
-    }
-    static create(params) {
-        const authorizer = new DeviceAuthorizer(params);
-        return (options) => {
-            return function deviceFlow(handler, onError) {
-                return async (input, config) => {
-                    try {
-                        const credentials = await authorizer._authorize(options);
-                        let claims = {};
-                        if (credentials.idToken) {
-                            claims = jose.decodeJwt(credentials.idToken.value);
-                        }
-                        return handler({ accessToken: credentials.accessToken.value, claims }, input, config);
-                    }
-                    catch (e) {
-                        if (typeof onError === "function") {
-                            return onError(e);
-                        }
-                        return "Access denied.";
-                    }
-                };
-            };
-        };
-    }
-}
-exports.DeviceAuthorizer = DeviceAuthorizer;
-//# sourceMappingURL=device-authorizer.js.map

package/dist/cjs/authorizers/device-authorizer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"device-authorizer.js","sourceRoot":"","sources":["../../../src/authorizers/device-authorizer.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,wDAAgC;AAChC,2CAA6B;AAC7B,gDAAwB;AACxB,iDAMuB;AAGvB,sCAAgF;AAQhF,MAAa,gBAAgB;IAI3B,YAAoB,MAAyB;QAC3C,IAAI,CAAC,MAAM,GAAG,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,MAAM,KAAI,OAAO,CAAC,GAAG,CAAC,YAAa,CAAC;QAC1D,IAAI,CAAC,QAAQ,GAAG,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,QAAQ,KAAI,OAAO,CAAC,GAAG,CAAC,eAAgB,CAAC;IACnE,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,MAA+B;QAE/B,MAAM,MAAM,GAAG,MAAM,IAAA,yBAAS,EAC5B,IAAI,GAAG,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC,EACjC,IAAI,CAAC,QAAQ,CACd,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAA,2CAA2B,EAAC,MAAM,EAAE;YACvD,GAAG,MAAM;SACV,CAAC,CAAC;QAEH,MAAM,EAAE,yBAAyB,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;QAEpE,MAAM,QAAQ,GAAG,IAAI,kBAAQ,EAAE,CAAC;QAChC,MAAM,QAAQ,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,0GAA0G,SAAS,mBAC1H,UAAU,GAAG,EAAE,KAAK,CAAC;gBACnB,CAAC,CAAC,GAAG,UAAU,GAAG,EAAE,UAAU;gBAC9B,CAAC,CAAC,GAAG,UAAU,UACnB,GAAG;SACJ,CAAC,CAAC;QAEH,MAAM,IAAA,cAAI,EAAC,yBAA0B,CAAC,CAAC;QAEvC,IAAI,MAAM,GACR,IAAI,CAAC;QAEP,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAA,4CAA4B,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,QAAQ,GAAG,CAAC,KAAK,EAAE,CAAC;gBAClB,KAAK,eAAe;oBAClB,MAAM,IAAI,0BAAiB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;gBACrD,KAAK,eAAe;oBAClB,MAAM,IAAI,yCAAgC,CACxC,mCAAmC,CACpC,CAAC;gBACJ;oBACE,MAAM,IAAI,KAAK,CACb,UAAU,GAAG,CAAC,KAAK,kBAAkB,GAAG,CAAC,iBAAiB,EAAE,CAC7D,CAAC;YACN,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,WAAW,GAAgB;YAC/B,WAAW,EAAE;gBACX,IAAI,EAAE,MAAM,CAAC,UAAU,IAAI,QAAQ;gBACnC,KAAK,EAAE,MAAM,CAAC,YAAY;aAC3B;SACF,CAAC;QAEF,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,WAAW,CAAC,OAAO,GAAG;gBACpB,IAAI,EAAE,MAAM,CAAC,UAAU,IAAI,QAAQ;gBACnC,KAAK,EAAE,MAAM,CAAC,QAAQ;aACvB,CAAC;QACJ,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,SAAS,CACpB,OAAgC,EAChC,MAAyB;QAEzB,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAEzD,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,OAAQ,CAAC,KAAK,CAAC,CAAC;QACtD,CAAC;QAED,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,EAAgB,CAAC;IAC9E,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,MAAyB;QACrC,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAEhD,OAAO,CAAC,OAAgC,EAAE,EAAE;YAC1C,OAAO,SAAS,UAAU,CACxB,OAAqC,EACrC,OAAsC;gBAEtC,OAAO,KAAK,EAAE,KAAQ,EAAE,MAAU,EAAc,EAAE;oBAChD,IAAI,CAAC;wBACH,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;wBACzD,IAAI,MAAM,GAAG,EAAE,CAAC;wBAEhB,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;4BACxB,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,OAAQ,CAAC,KAAK,CAAC,CAAC;wBACtD,CAAC;wBAED,OAAO,OAAO,CACZ,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,EACtD,KAAK,EACL,MAAM,CACP,CAAC;oBACJ,CAAC;oBAAC,OAAO,CAAM,EAAE,CAAC;wBAChB,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;4BAClC,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;wBACpB,CAAC;wBAED,OAAO,gBAAqB,CAAC;oBAC/B,CAAC;gBACH,CAAC,CAAC;YACJ,CAAC,CAAC;QACJ,CAAC,CAAC;IACJ,CAAC;CACF;AA9HD,4CA8HC","sourcesContent":["import Enquirer from \"enquirer\";\nimport * as jose from \"jose\";\nimport open from \"open\";\nimport {\n  discovery,\n  initiateDeviceAuthorization,\n  pollDeviceAuthorizationGrant,\n  TokenEndpointResponse,\n  TokenEndpointResponseHelpers,\n} from \"openid-client\";\n\nimport { Credentials } from \"../credentials\";\nimport { AccessDeniedError, AuthorizationRequestExpiredError } from \"../errors\";\nimport { AuthorizerParams, AuthParams, ToolWithAuthHandler } from \"./\";\n\nexport type DeviceAuthorizerOptions = {\n  scope: string;\n  audience?: string;\n};\n\nexport class DeviceAuthorizer {\n  domain: string;\n  clientId: string;\n\n  private constructor(params?: AuthorizerParams) {\n    this.domain = params?.domain || process.env.AUTH0_DOMAIN!;\n    this.clientId = params?.clientId || process.env.AUTH0_CLIENT_ID!;\n  }\n\n  private async _authorize(\n    params: DeviceAuthorizerOptions\n  ): Promise<Credentials> {\n    const config = await discovery(\n      new URL(`https://${this.domain}`),\n      this.clientId\n    );\n\n    const handle = await initiateDeviceAuthorization(config, {\n      ...params,\n    });\n\n    const { verification_uri_complete, user_code, expires_in } = handle;\n\n    const enquirer = new Enquirer();\n    await enquirer.prompt({\n      type: \"input\",\n      name: \"confirmation\",\n      message: `Press Enter to open the browser to log in or press Ctrl+C to abort. You should see the following code: ${user_code}. It expires in ${\n        expires_in % 60 === 0\n          ? `${expires_in / 60} minutes`\n          : `${expires_in} seconds`\n      }.`,\n    });\n\n    await open(verification_uri_complete!);\n\n    let tokens: (TokenEndpointResponse & TokenEndpointResponseHelpers) | null =\n      null;\n\n    try {\n      tokens = await pollDeviceAuthorizationGrant(config, handle);\n    } catch (err: any) {\n      switch (err.error) {\n        case \"access_denied\":\n          throw new AccessDeniedError(err.error_description);\n        case \"expired_token\":\n          throw new AuthorizationRequestExpiredError(\n            \"Authorization request has expired\"\n          );\n        default:\n          throw new Error(\n            `Error: ${err.error}; Description: ${err.error_description}`\n          );\n      }\n    }\n\n    if (!tokens) {\n      throw new Error(\"Failed to obtain tokens\");\n    }\n\n    const credentials: Credentials = {\n      accessToken: {\n        type: tokens.token_type || \"bearer\",\n        value: tokens.access_token,\n      },\n    };\n\n    if (tokens.id_token) {\n      credentials.idToken = {\n        type: tokens.token_type || \"bearer\",\n        value: tokens.id_token,\n      };\n    }\n\n    return credentials;\n  }\n\n  static async authorize(\n    options: DeviceAuthorizerOptions,\n    params?: AuthorizerParams\n  ) {\n    const authorizer = new DeviceAuthorizer(params);\n    const credentials = await authorizer._authorize(options);\n\n    let claims = {};\n\n    if (credentials.idToken) {\n      claims = jose.decodeJwt(credentials.idToken!.value);\n    }\n\n    return { accessToken: credentials.accessToken.value, claims } as AuthParams;\n  }\n\n  static create(params?: AuthorizerParams): DeviceFlowInstance {\n    const authorizer = new DeviceAuthorizer(params);\n\n    return (options: DeviceAuthorizerOptions) => {\n      return function deviceFlow<I, O, C>(\n        handler: ToolWithAuthHandler<I, O, C>,\n        onError?: (error: Error) => Promise<O>\n      ) {\n        return async (input: I, config?: C): Promise<O> => {\n          try {\n            const credentials = await authorizer._authorize(options);\n            let claims = {};\n\n            if (credentials.idToken) {\n              claims = jose.decodeJwt(credentials.idToken!.value);\n            }\n\n            return handler(\n              { accessToken: credentials.accessToken.value, claims },\n              input,\n              config\n            );\n          } catch (e: any) {\n            if (typeof onError === \"function\") {\n              return onError(e);\n            }\n\n            return \"Access denied.\" as O;\n          }\n        };\n      };\n    };\n  }\n}\n\nexport type DeviceFlowInstance = (\n  options: DeviceAuthorizerOptions\n) => <I, O, C>(\n  handler: ToolWithAuthHandler<I, O, C>,\n  onError?: (error: Error) => Promise<O>\n) => (input: I, config?: C) => Promise<O>;\n"]}

package/dist/esm/TokenResponse.d.ts

@@ -1,15 +0,0 @@
-export type TokenResponse = {
-    /** Bearer token for API authorization */
-    access_token: string;
-    /** Refresh token (requires `offline_access` scope) */
-    refresh_token?: string;
-    /** JWT containing user identity claims */
-    id_token: string;
-    /** Typically "Bearer" */
-    token_type?: string;
-    /** Token validity in seconds (default: 86400) */
-    expires_in: number;
-    /** Granted permissions space */
-    scope: string;
-};
-//# sourceMappingURL=TokenResponse.d.ts.map

package/dist/esm/TokenResponse.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=TokenResponse.js.map

package/dist/esm/TokenResponse.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"TokenResponse.js","sourceRoot":"","sources":["../../src/TokenResponse.ts"],"names":[],"mappings":"","sourcesContent":["export type TokenResponse = {\n  /** Bearer token for API authorization */\n  access_token: string;\n  /** Refresh token (requires `offline_access` scope) */\n  refresh_token?: string;\n  /** JWT containing user identity claims */\n  id_token: string;\n  /** Typically \"Bearer\" */\n  token_type?: string;\n  /** Token validity in seconds (default: 86400) */\n  expires_in: number;\n  /** Granted permissions space */\n  scope: string;\n};\n"]}

package/dist/esm/authorizers/device-authorizer.d.ts

@@ -1,15 +0,0 @@
-import { AuthorizerParams, AuthParams, ToolWithAuthHandler } from "./";
-export type DeviceAuthorizerOptions = {
-    scope: string;
-    audience?: string;
-};
-export declare class DeviceAuthorizer {
-    domain: string;
-    clientId: string;
-    private constructor();
-    private _authorize;
-    static authorize(options: DeviceAuthorizerOptions, params?: AuthorizerParams): Promise<AuthParams>;
-    static create(params?: AuthorizerParams): DeviceFlowInstance;
-}
-export type DeviceFlowInstance = (options: DeviceAuthorizerOptions) => <I, O, C>(handler: ToolWithAuthHandler<I, O, C>, onError?: (error: Error) => Promise<O>) => (input: I, config?: C) => Promise<O>;
-//# sourceMappingURL=device-authorizer.d.ts.map