@auth0/ai 4.0.0 → 4.0.1

package/dist/cjs/authorizers/ciba/CIBAAuthorizerParams.js.map

@@ -1 +1 @@
-{"version":3,"file":"CIBAAuthorizerParams.js","sourceRoot":"","sources":["../../../../src/authorizers/ciba/CIBAAuthorizerParams.ts"],"names":[],"mappings":"","sourcesContent":["import { TokenSet } from \"../../credentials\";\nimport {\n  AuthorizationPendingInterrupt,\n  AuthorizationPollingInterrupt,\n  CIBAInterrupt,\n} from \"../../interrupts\";\nimport { AuthorizerToolParameter } from \"../../parameters\";\nimport { Store } from \"../../stores\";\nimport { AuthContext, ToolCallContext } from \"../context\";\nimport { OnAuthorizationRequest } from \"../types\";\nimport { CIBAAuthorizationRequest } from \"./CIBAAuthorizationRequest\";\n\nexport type CIBAAuthorizerParams<ToolExecuteArgs extends any[]> = {\n  /**\n   * The scope to request authorization for.\n   */\n  scopes: string[];\n\n  /**\n   * The user ID to request authorization for.\n   */\n  userID: AuthorizerToolParameter<ToolExecuteArgs>;\n\n  /**\n   * The binding message to send to the user.\n   */\n  bindingMessage: AuthorizerToolParameter<ToolExecuteArgs>;\n\n  /**\n   * The authorization parameters for RAR request.\n   */\n  authorizationDetails?: AuthorizerToolParameter<\n    ToolExecuteArgs,\n    Record<string, any>[]\n  >;\n\n  /**\n   * The audience to request authorization for.\n   */\n  audience?: string;\n\n  /**\n   * The time in seconds for the authorization request to expire.\n   *\n   * Defaults to 300 (5 minutes).\n   */\n  requestedExpiry?: number;\n\n  /**\n   * The behavior when the authorization request is made.\n   *\n   * - `block`: The tool execution is blocked until the user completes the authorization.\n   * - `interrupt`: The tool execution is interrupted until the user completes the authorization.\n   * - a callback: Same as \"block\" but give access to the auth request and executing logic.\n   *\n   * Defaults to `interrupt`.\n   * Note: The block mode is only useful for development purposes and should not be used in production.\n   */\n  onAuthorizationRequest?:\n    | OnAuthorizationRequest\n    | ((\n        authReq: CIBAAuthorizationRequest,\n        poll: Promise<TokenSet | undefined>\n      ) => Promise<void>);\n\n  /**\n   * AuthContext defines the scope of credential sharing:\n   * - \"tool-call\": Credentials are valid only for a single invocation of the tool.\n   * - \"tool\": Credentials are shared across multiple calls to the same tool within the same thread.\n   * - \"thread\": Credentials are shared across all tools using the same authorizer within the current thread.\n   * - \"agent\": Credentials are shared globally across all threads and tools in the agent.\n   *\n   * @default \"tool-call\"\n   */\n  credentialsContext?: AuthContext;\n\n  /**\n   *\n   * Optional callback to generate a tool result when the invocation is not authorized.\n   *\n   * By default it will return the instance of the Error.\n   *\n   * @param args - The tool execution arguments.\n   * @returns The response to return when the invocation is not authorized.\n   */\n  onUnauthorized?: (\n    err: Error | CIBAInterrupt,\n    ...args: ToolExecuteArgs\n  ) => any;\n\n  /**\n   * Callback called before the authorization interrupt is thrown.\n   * This callback is useful to setup CIBA pollers.\n   *\n   * @param interrupt - The interrupt that is about to be thrown.\n   * @param args - The tool execution arguments.\n   */\n  onAuthorizationInterrupt?: (\n    interrupt: AuthorizationPendingInterrupt | AuthorizationPollingInterrupt,\n    context: ToolCallContext\n  ) => void | Promise<void>;\n\n  /**\n   * An store used to temporarly store the authorization response data\n   * while the user is completing the authorization in another device.\n   */\n  store: Store;\n};\n"]}
+{"version":3,"file":"CIBAAuthorizerParams.js","sourceRoot":"","sources":["../../../../src/authorizers/ciba/CIBAAuthorizerParams.ts"],"names":[],"mappings":"","sourcesContent":["import { AuthorizationDetails, TokenSet } from \"../../credentials\";\nimport {\n  AuthorizationPendingInterrupt,\n  AuthorizationPollingInterrupt,\n  CIBAInterrupt,\n} from \"../../interrupts\";\nimport { AuthorizerToolParameter } from \"../../parameters\";\nimport { Store } from \"../../stores\";\nimport { AuthContext, ToolCallContext } from \"../context\";\nimport { OnAuthorizationRequest } from \"../types\";\nimport { CIBAAuthorizationRequest } from \"./CIBAAuthorizationRequest\";\n\nexport type CIBAAuthorizerParams<ToolExecuteArgs extends any[]> = {\n  /**\n   * The scope to request authorization for.\n   */\n  scopes: string[];\n\n  /**\n   * The user ID to request authorization for.\n   */\n  userID: AuthorizerToolParameter<ToolExecuteArgs>;\n\n  /**\n   * The binding message to send to the user.\n   */\n  bindingMessage: AuthorizerToolParameter<ToolExecuteArgs>;\n\n  /**\n   * The authorization parameters for RAR request.\n   */\n  authorizationDetails?: AuthorizerToolParameter<\n    ToolExecuteArgs,\n    AuthorizationDetails[]\n  >;\n\n  /**\n   * The audience to request authorization for.\n   */\n  audience?: string;\n\n  /**\n   * The time in seconds for the authorization request to expire.\n   *\n   * Defaults to 300 (5 minutes).\n   */\n  requestedExpiry?: number;\n\n  /**\n   * The behavior when the authorization request is made.\n   *\n   * - `block`: The tool execution is blocked until the user completes the authorization.\n   * - `interrupt`: The tool execution is interrupted until the user completes the authorization.\n   * - a callback: Same as \"block\" but give access to the auth request and executing logic.\n   *\n   * Defaults to `interrupt`.\n   * Note: The block mode is only useful for development purposes and should not be used in production.\n   */\n  onAuthorizationRequest?:\n    | OnAuthorizationRequest\n    | ((\n        authReq: CIBAAuthorizationRequest,\n        poll: Promise<TokenSet | undefined>,\n      ) => Promise<void>);\n\n  /**\n   * AuthContext defines the scope of credential sharing:\n   * - \"tool-call\": Credentials are valid only for a single invocation of the tool.\n   * - \"tool\": Credentials are shared across multiple calls to the same tool within the same thread.\n   * - \"thread\": Credentials are shared across all tools using the same authorizer within the current thread.\n   * - \"agent\": Credentials are shared globally across all threads and tools in the agent.\n   *\n   * @default \"tool-call\"\n   */\n  credentialsContext?: AuthContext;\n\n  /**\n   *\n   * Optional callback to generate a tool result when the invocation is not authorized.\n   *\n   * By default it will return the instance of the Error.\n   *\n   * @param args - The tool execution arguments.\n   * @returns The response to return when the invocation is not authorized.\n   */\n  onUnauthorized?: (\n    err: Error | CIBAInterrupt,\n    ...args: ToolExecuteArgs\n  ) => any;\n\n  /**\n   * Callback called before the authorization interrupt is thrown.\n   * This callback is useful to setup CIBA pollers.\n   *\n   * @param interrupt - The interrupt that is about to be thrown.\n   * @param args - The tool execution arguments.\n   */\n  onAuthorizationInterrupt?: (\n    interrupt: AuthorizationPendingInterrupt | AuthorizationPollingInterrupt,\n    context: ToolCallContext,\n  ) => void | Promise<void>;\n\n  /**\n   * An store used to temporarly store the authorization response data\n   * while the user is completing the authorization in another device.\n   */\n  store: Store;\n};\n"]}

package/dist/cjs/credentials.js

@@ -10,6 +10,9 @@ const tokenSetFromTokenResponse = (tr) => {
         refreshToken: tr.refresh_token,
         expiresIn: tr.expires_in,
         scopes: tr.scope ? tr.scope.split(" ") : undefined,
+        ...(tr.authorization_details
+            ? { authorizationDetails: tr.authorization_details }
+            : {}),
     };
 };
 exports.tokenSetFromTokenResponse = tokenSetFromTokenResponse;

package/dist/cjs/credentials.js.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/credentials.ts"],"names":[],"mappings":";;;AAoCO,MAAM,yBAAyB,GAAG,CAAC,EAAiB,EAAY,EAAE;;IACvE,OAAO;QACL,SAAS,EAAE,MAAA,EAAE,CAAC,UAAU,mCAAI,QAAQ;QACpC,WAAW,EAAE,EAAE,CAAC,YAAY;QAC5B,OAAO,EAAE,EAAE,CAAC,QAAQ;QACpB,YAAY,EAAE,EAAE,CAAC,aAAa;QAC9B,SAAS,EAAE,EAAE,CAAC,UAAU;QACxB,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;KACnD,CAAC;AACJ,CAAC,CAAC;AATW,QAAA,yBAAyB,6BASpC","sourcesContent":["export type TokenResponse = {\n  /** Bearer token for API authorization */\n  access_token: string;\n  /** Refresh token (requires `offline_access` scope) */\n  refresh_token?: string;\n  /** JWT containing user identity claims */\n  id_token: string;\n  /** Typically \"Bearer\" */\n  token_type?: string;\n  /** Token validity in seconds (default: 86400) */\n  expires_in: number;\n  /** Granted permissions space */\n  scope: string;\n};\n\n/**\n * Represents a set of authentication tokens returned after a successful authentication flow.\n *\n * @interface TokenSet\n * @property {string[]} [scopes] - Optional array of permission scopes granted for the token.\n * @property {string} [idToken] - Optional JWT ID token containing user claims.\n * @property {string} [refreshToken] - Optional token used to obtain new access tokens without re-authentication.\n * @property {number} [expiresIn] - Optional time in seconds until the access token expires.\n * @property {string} accessToken - The access token string used for API requests.\n * @property {string} tokenType - The type of the token, typically \"Bearer\".\n */\nexport interface TokenSet {\n  scopes?: string[];\n  idToken?: string;\n  refreshToken?: string;\n\n  expiresIn?: number;\n  accessToken: string;\n  tokenType: string;\n}\n\nexport const tokenSetFromTokenResponse = (tr: TokenResponse): TokenSet => {\n  return {\n    tokenType: tr.token_type ?? \"Bearer\",\n    accessToken: tr.access_token,\n    idToken: tr.id_token,\n    refreshToken: tr.refresh_token,\n    expiresIn: tr.expires_in,\n    scopes: tr.scope ? tr.scope.split(\" \") : undefined,\n  };\n};\n"]}
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/credentials.ts"],"names":[],"mappings":";;;AA8CO,MAAM,yBAAyB,GAAG,CAAC,EAAiB,EAAY,EAAE;;IACvE,OAAO;QACL,SAAS,EAAE,MAAA,EAAE,CAAC,UAAU,mCAAI,QAAQ;QACpC,WAAW,EAAE,EAAE,CAAC,YAAY;QAC5B,OAAO,EAAE,EAAE,CAAC,QAAQ;QACpB,YAAY,EAAE,EAAE,CAAC,aAAa;QAC9B,SAAS,EAAE,EAAE,CAAC,UAAU;QACxB,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;QAClD,GAAG,CAAC,EAAE,CAAC,qBAAqB;YAC1B,CAAC,CAAC,EAAE,oBAAoB,EAAE,EAAE,CAAC,qBAAqB,EAAE;YACpD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC,CAAC;AAZW,QAAA,yBAAyB,6BAYpC","sourcesContent":["export interface AuthorizationDetails {\n  readonly type: string;\n  readonly [parameter: string]: unknown;\n}\n\nexport type TokenResponse = {\n  /** Bearer token for API authorization */\n  access_token: string;\n  /** Refresh token (requires `offline_access` scope) */\n  refresh_token?: string;\n  /** JWT containing user identity claims */\n  id_token: string;\n  /** Typically \"Bearer\" */\n  token_type?: string;\n  /** Token validity in seconds (default: 86400) */\n  expires_in: number;\n  /** Granted permissions space */\n  scope: string;\n  /** Granted authorization details */\n  authorization_details?: AuthorizationDetails[];\n};\n\n/**\n * Represents a set of authentication tokens returned after a successful authentication flow.\n *\n * @interface TokenSet\n * @property {string[]} [scopes] - Optional array of permission scopes granted for the token.\n * @property {string} [idToken] - Optional JWT ID token containing user claims.\n * @property {string} [refreshToken] - Optional token used to obtain new access tokens without re-authentication.\n * @property {number} [expiresIn] - Optional time in seconds until the access token expires.\n * @property {string} accessToken - The access token string used for API requests.\n * @property {string} tokenType - The type of the token, typically \"Bearer\".\n * @property {AuthorizationDetails[]} [authorizationDetails] - Optional array of authorization details granted for the token.\n */\nexport interface TokenSet {\n  scopes?: string[];\n  idToken?: string;\n  refreshToken?: string;\n\n  expiresIn?: number;\n  accessToken: string;\n  tokenType: string;\n\n  authorizationDetails?: AuthorizationDetails[];\n}\n\nexport const tokenSetFromTokenResponse = (tr: TokenResponse): TokenSet => {\n  return {\n    tokenType: tr.token_type ?? \"Bearer\",\n    accessToken: tr.access_token,\n    idToken: tr.id_token,\n    refreshToken: tr.refresh_token,\n    expiresIn: tr.expires_in,\n    scopes: tr.scope ? tr.scope.split(\" \") : undefined,\n    ...(tr.authorization_details\n      ? { authorizationDetails: tr.authorization_details }\n      : {}),\n  };\n};\n"]}

package/dist/esm/authorizers/ciba/CIBAAuthorizerParams.d.ts

@@ -1,4 +1,4 @@
-import { TokenSet } from "../../credentials";
+import { AuthorizationDetails, TokenSet } from "../../credentials";
 import { AuthorizationPendingInterrupt, AuthorizationPollingInterrupt, CIBAInterrupt } from "../../interrupts";
 import { AuthorizerToolParameter } from "../../parameters";
 import { Store } from "../../stores";
@@ -21,7 +21,7 @@ export type CIBAAuthorizerParams<ToolExecuteArgs extends any[]> = {
     /**
      * The authorization parameters for RAR request.
      */
-    authorizationDetails?: AuthorizerToolParameter<ToolExecuteArgs, Record<string, any>[]>;
+    authorizationDetails?: AuthorizerToolParameter<ToolExecuteArgs, AuthorizationDetails[]>;
     /**
      * The audience to request authorization for.
      */

package/dist/esm/authorizers/ciba/CIBAAuthorizerParams.js.map

@@ -1 +1 @@
-{"version":3,"file":"CIBAAuthorizerParams.js","sourceRoot":"","sources":["../../../../src/authorizers/ciba/CIBAAuthorizerParams.ts"],"names":[],"mappings":"","sourcesContent":["import { TokenSet } from \"../../credentials\";\nimport {\n  AuthorizationPendingInterrupt,\n  AuthorizationPollingInterrupt,\n  CIBAInterrupt,\n} from \"../../interrupts\";\nimport { AuthorizerToolParameter } from \"../../parameters\";\nimport { Store } from \"../../stores\";\nimport { AuthContext, ToolCallContext } from \"../context\";\nimport { OnAuthorizationRequest } from \"../types\";\nimport { CIBAAuthorizationRequest } from \"./CIBAAuthorizationRequest\";\n\nexport type CIBAAuthorizerParams<ToolExecuteArgs extends any[]> = {\n  /**\n   * The scope to request authorization for.\n   */\n  scopes: string[];\n\n  /**\n   * The user ID to request authorization for.\n   */\n  userID: AuthorizerToolParameter<ToolExecuteArgs>;\n\n  /**\n   * The binding message to send to the user.\n   */\n  bindingMessage: AuthorizerToolParameter<ToolExecuteArgs>;\n\n  /**\n   * The authorization parameters for RAR request.\n   */\n  authorizationDetails?: AuthorizerToolParameter<\n    ToolExecuteArgs,\n    Record<string, any>[]\n  >;\n\n  /**\n   * The audience to request authorization for.\n   */\n  audience?: string;\n\n  /**\n   * The time in seconds for the authorization request to expire.\n   *\n   * Defaults to 300 (5 minutes).\n   */\n  requestedExpiry?: number;\n\n  /**\n   * The behavior when the authorization request is made.\n   *\n   * - `block`: The tool execution is blocked until the user completes the authorization.\n   * - `interrupt`: The tool execution is interrupted until the user completes the authorization.\n   * - a callback: Same as \"block\" but give access to the auth request and executing logic.\n   *\n   * Defaults to `interrupt`.\n   * Note: The block mode is only useful for development purposes and should not be used in production.\n   */\n  onAuthorizationRequest?:\n    | OnAuthorizationRequest\n    | ((\n        authReq: CIBAAuthorizationRequest,\n        poll: Promise<TokenSet | undefined>\n      ) => Promise<void>);\n\n  /**\n   * AuthContext defines the scope of credential sharing:\n   * - \"tool-call\": Credentials are valid only for a single invocation of the tool.\n   * - \"tool\": Credentials are shared across multiple calls to the same tool within the same thread.\n   * - \"thread\": Credentials are shared across all tools using the same authorizer within the current thread.\n   * - \"agent\": Credentials are shared globally across all threads and tools in the agent.\n   *\n   * @default \"tool-call\"\n   */\n  credentialsContext?: AuthContext;\n\n  /**\n   *\n   * Optional callback to generate a tool result when the invocation is not authorized.\n   *\n   * By default it will return the instance of the Error.\n   *\n   * @param args - The tool execution arguments.\n   * @returns The response to return when the invocation is not authorized.\n   */\n  onUnauthorized?: (\n    err: Error | CIBAInterrupt,\n    ...args: ToolExecuteArgs\n  ) => any;\n\n  /**\n   * Callback called before the authorization interrupt is thrown.\n   * This callback is useful to setup CIBA pollers.\n   *\n   * @param interrupt - The interrupt that is about to be thrown.\n   * @param args - The tool execution arguments.\n   */\n  onAuthorizationInterrupt?: (\n    interrupt: AuthorizationPendingInterrupt | AuthorizationPollingInterrupt,\n    context: ToolCallContext\n  ) => void | Promise<void>;\n\n  /**\n   * An store used to temporarly store the authorization response data\n   * while the user is completing the authorization in another device.\n   */\n  store: Store;\n};\n"]}
+{"version":3,"file":"CIBAAuthorizerParams.js","sourceRoot":"","sources":["../../../../src/authorizers/ciba/CIBAAuthorizerParams.ts"],"names":[],"mappings":"","sourcesContent":["import { AuthorizationDetails, TokenSet } from \"../../credentials\";\nimport {\n  AuthorizationPendingInterrupt,\n  AuthorizationPollingInterrupt,\n  CIBAInterrupt,\n} from \"../../interrupts\";\nimport { AuthorizerToolParameter } from \"../../parameters\";\nimport { Store } from \"../../stores\";\nimport { AuthContext, ToolCallContext } from \"../context\";\nimport { OnAuthorizationRequest } from \"../types\";\nimport { CIBAAuthorizationRequest } from \"./CIBAAuthorizationRequest\";\n\nexport type CIBAAuthorizerParams<ToolExecuteArgs extends any[]> = {\n  /**\n   * The scope to request authorization for.\n   */\n  scopes: string[];\n\n  /**\n   * The user ID to request authorization for.\n   */\n  userID: AuthorizerToolParameter<ToolExecuteArgs>;\n\n  /**\n   * The binding message to send to the user.\n   */\n  bindingMessage: AuthorizerToolParameter<ToolExecuteArgs>;\n\n  /**\n   * The authorization parameters for RAR request.\n   */\n  authorizationDetails?: AuthorizerToolParameter<\n    ToolExecuteArgs,\n    AuthorizationDetails[]\n  >;\n\n  /**\n   * The audience to request authorization for.\n   */\n  audience?: string;\n\n  /**\n   * The time in seconds for the authorization request to expire.\n   *\n   * Defaults to 300 (5 minutes).\n   */\n  requestedExpiry?: number;\n\n  /**\n   * The behavior when the authorization request is made.\n   *\n   * - `block`: The tool execution is blocked until the user completes the authorization.\n   * - `interrupt`: The tool execution is interrupted until the user completes the authorization.\n   * - a callback: Same as \"block\" but give access to the auth request and executing logic.\n   *\n   * Defaults to `interrupt`.\n   * Note: The block mode is only useful for development purposes and should not be used in production.\n   */\n  onAuthorizationRequest?:\n    | OnAuthorizationRequest\n    | ((\n        authReq: CIBAAuthorizationRequest,\n        poll: Promise<TokenSet | undefined>,\n      ) => Promise<void>);\n\n  /**\n   * AuthContext defines the scope of credential sharing:\n   * - \"tool-call\": Credentials are valid only for a single invocation of the tool.\n   * - \"tool\": Credentials are shared across multiple calls to the same tool within the same thread.\n   * - \"thread\": Credentials are shared across all tools using the same authorizer within the current thread.\n   * - \"agent\": Credentials are shared globally across all threads and tools in the agent.\n   *\n   * @default \"tool-call\"\n   */\n  credentialsContext?: AuthContext;\n\n  /**\n   *\n   * Optional callback to generate a tool result when the invocation is not authorized.\n   *\n   * By default it will return the instance of the Error.\n   *\n   * @param args - The tool execution arguments.\n   * @returns The response to return when the invocation is not authorized.\n   */\n  onUnauthorized?: (\n    err: Error | CIBAInterrupt,\n    ...args: ToolExecuteArgs\n  ) => any;\n\n  /**\n   * Callback called before the authorization interrupt is thrown.\n   * This callback is useful to setup CIBA pollers.\n   *\n   * @param interrupt - The interrupt that is about to be thrown.\n   * @param args - The tool execution arguments.\n   */\n  onAuthorizationInterrupt?: (\n    interrupt: AuthorizationPendingInterrupt | AuthorizationPollingInterrupt,\n    context: ToolCallContext,\n  ) => void | Promise<void>;\n\n  /**\n   * An store used to temporarly store the authorization response data\n   * while the user is completing the authorization in another device.\n   */\n  store: Store;\n};\n"]}

package/dist/esm/credentials.d.ts

@@ -1,3 +1,7 @@
+export interface AuthorizationDetails {
+    readonly type: string;
+    readonly [parameter: string]: unknown;
+}
 export type TokenResponse = {
     /** Bearer token for API authorization */
     access_token: string;
@@ -11,6 +15,8 @@ export type TokenResponse = {
     expires_in: number;
     /** Granted permissions space */
     scope: string;
+    /** Granted authorization details */
+    authorization_details?: AuthorizationDetails[];
 };
 /**
  * Represents a set of authentication tokens returned after a successful authentication flow.
@@ -22,6 +28,7 @@ export type TokenResponse = {
  * @property {number} [expiresIn] - Optional time in seconds until the access token expires.
  * @property {string} accessToken - The access token string used for API requests.
  * @property {string} tokenType - The type of the token, typically "Bearer".
+ * @property {AuthorizationDetails[]} [authorizationDetails] - Optional array of authorization details granted for the token.
  */
 export interface TokenSet {
     scopes?: string[];
@@ -30,6 +37,7 @@ export interface TokenSet {
     expiresIn?: number;
     accessToken: string;
     tokenType: string;
+    authorizationDetails?: AuthorizationDetails[];
 }
 export declare const tokenSetFromTokenResponse: (tr: TokenResponse) => TokenSet;
 //# sourceMappingURL=credentials.d.ts.map

package/dist/esm/credentials.js

@@ -7,6 +7,9 @@ export const tokenSetFromTokenResponse = (tr) => {
         refreshToken: tr.refresh_token,
         expiresIn: tr.expires_in,
         scopes: tr.scope ? tr.scope.split(" ") : undefined,
+        ...(tr.authorization_details
+            ? { authorizationDetails: tr.authorization_details }
+            : {}),
     };
 };
 //# sourceMappingURL=credentials.js.map

package/dist/esm/credentials.js.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/credentials.ts"],"names":[],"mappings":"AAoCA,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,EAAiB,EAAY,EAAE;;IACvE,OAAO;QACL,SAAS,EAAE,MAAA,EAAE,CAAC,UAAU,mCAAI,QAAQ;QACpC,WAAW,EAAE,EAAE,CAAC,YAAY;QAC5B,OAAO,EAAE,EAAE,CAAC,QAAQ;QACpB,YAAY,EAAE,EAAE,CAAC,aAAa;QAC9B,SAAS,EAAE,EAAE,CAAC,UAAU;QACxB,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;KACnD,CAAC;AACJ,CAAC,CAAC","sourcesContent":["export type TokenResponse = {\n  /** Bearer token for API authorization */\n  access_token: string;\n  /** Refresh token (requires `offline_access` scope) */\n  refresh_token?: string;\n  /** JWT containing user identity claims */\n  id_token: string;\n  /** Typically \"Bearer\" */\n  token_type?: string;\n  /** Token validity in seconds (default: 86400) */\n  expires_in: number;\n  /** Granted permissions space */\n  scope: string;\n};\n\n/**\n * Represents a set of authentication tokens returned after a successful authentication flow.\n *\n * @interface TokenSet\n * @property {string[]} [scopes] - Optional array of permission scopes granted for the token.\n * @property {string} [idToken] - Optional JWT ID token containing user claims.\n * @property {string} [refreshToken] - Optional token used to obtain new access tokens without re-authentication.\n * @property {number} [expiresIn] - Optional time in seconds until the access token expires.\n * @property {string} accessToken - The access token string used for API requests.\n * @property {string} tokenType - The type of the token, typically \"Bearer\".\n */\nexport interface TokenSet {\n  scopes?: string[];\n  idToken?: string;\n  refreshToken?: string;\n\n  expiresIn?: number;\n  accessToken: string;\n  tokenType: string;\n}\n\nexport const tokenSetFromTokenResponse = (tr: TokenResponse): TokenSet => {\n  return {\n    tokenType: tr.token_type ?? \"Bearer\",\n    accessToken: tr.access_token,\n    idToken: tr.id_token,\n    refreshToken: tr.refresh_token,\n    expiresIn: tr.expires_in,\n    scopes: tr.scope ? tr.scope.split(\" \") : undefined,\n  };\n};\n"]}
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/credentials.ts"],"names":[],"mappings":"AA8CA,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,EAAiB,EAAY,EAAE;;IACvE,OAAO;QACL,SAAS,EAAE,MAAA,EAAE,CAAC,UAAU,mCAAI,QAAQ;QACpC,WAAW,EAAE,EAAE,CAAC,YAAY;QAC5B,OAAO,EAAE,EAAE,CAAC,QAAQ;QACpB,YAAY,EAAE,EAAE,CAAC,aAAa;QAC9B,SAAS,EAAE,EAAE,CAAC,UAAU;QACxB,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;QAClD,GAAG,CAAC,EAAE,CAAC,qBAAqB;YAC1B,CAAC,CAAC,EAAE,oBAAoB,EAAE,EAAE,CAAC,qBAAqB,EAAE;YACpD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC,CAAC","sourcesContent":["export interface AuthorizationDetails {\n  readonly type: string;\n  readonly [parameter: string]: unknown;\n}\n\nexport type TokenResponse = {\n  /** Bearer token for API authorization */\n  access_token: string;\n  /** Refresh token (requires `offline_access` scope) */\n  refresh_token?: string;\n  /** JWT containing user identity claims */\n  id_token: string;\n  /** Typically \"Bearer\" */\n  token_type?: string;\n  /** Token validity in seconds (default: 86400) */\n  expires_in: number;\n  /** Granted permissions space */\n  scope: string;\n  /** Granted authorization details */\n  authorization_details?: AuthorizationDetails[];\n};\n\n/**\n * Represents a set of authentication tokens returned after a successful authentication flow.\n *\n * @interface TokenSet\n * @property {string[]} [scopes] - Optional array of permission scopes granted for the token.\n * @property {string} [idToken] - Optional JWT ID token containing user claims.\n * @property {string} [refreshToken] - Optional token used to obtain new access tokens without re-authentication.\n * @property {number} [expiresIn] - Optional time in seconds until the access token expires.\n * @property {string} accessToken - The access token string used for API requests.\n * @property {string} tokenType - The type of the token, typically \"Bearer\".\n * @property {AuthorizationDetails[]} [authorizationDetails] - Optional array of authorization details granted for the token.\n */\nexport interface TokenSet {\n  scopes?: string[];\n  idToken?: string;\n  refreshToken?: string;\n\n  expiresIn?: number;\n  accessToken: string;\n  tokenType: string;\n\n  authorizationDetails?: AuthorizationDetails[];\n}\n\nexport const tokenSetFromTokenResponse = (tr: TokenResponse): TokenSet => {\n  return {\n    tokenType: tr.token_type ?? \"Bearer\",\n    accessToken: tr.access_token,\n    idToken: tr.id_token,\n    refreshToken: tr.refresh_token,\n    expiresIn: tr.expires_in,\n    scopes: tr.scope ? tr.scope.split(\" \") : undefined,\n    ...(tr.authorization_details\n      ? { authorizationDetails: tr.authorization_details }\n      : {}),\n  };\n};\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@auth0/ai",
-  "version": "4.0.0",
+  "version": "4.0.1",
   "description": "Auth0AI SDK for JavaScript",
   "types": "dist/esm/index.d.ts",
   "main": "dist/cjs/index.js",