@carlonicora/nestjs-neo4jsonapi 1.111.0 → 1.112.0

package/dist/config/interfaces/config.mcp.interface.d.ts

@@ -0,0 +1,34 @@
+/**
+ * MCP (Model Context Protocol) Server Configuration Interface
+ *
+ * Controls the MCP server exposed at POST /mcp, which lets external AI agents
+ * (claude.ai connectors, Claude Desktop, ChatGPT) interact with the application
+ * through OAuth-authenticated, RBAC-gated tools.
+ *
+ * @see https://modelcontextprotocol.io - Model Context Protocol specification
+ */
+export interface ConfigMcpInterface {
+    /**
+     * Master switch to enable/disable the MCP server.
+     * When false, the MCP endpoint is not served.
+     * @default false
+     */
+    enabled: boolean;
+    /**
+     * Server name advertised to MCP clients during initialization.
+     * @default "neural-erp"
+     */
+    serverName: string;
+    /**
+     * Optional instructions string advertised to MCP clients,
+     * describing how to best use this server's tools.
+     */
+    instructions?: string;
+    /**
+     * JSON:API types promoted to dedicated per-entity MCP tools,
+     * parsed from a comma-separated environment variable.
+     * @default []
+     */
+    promotedEntities: string[];
+}
+//# sourceMappingURL=config.mcp.interface.d.ts.map

package/dist/config/interfaces/config.mcp.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.mcp.interface.d.ts","sourceRoot":"","sources":["../../../src/config/interfaces/config.mcp.interface.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,OAAO,EAAE,OAAO,CAAC;IAEjB;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;;OAIG;IACH,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B"}

package/dist/config/interfaces/config.mcp.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=config.mcp.interface.js.map

package/dist/config/interfaces/config.mcp.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.mcp.interface.js","sourceRoot":"","sources":["../../../src/config/interfaces/config.mcp.interface.ts"],"names":[],"mappings":""}

package/dist/config/interfaces/index.d.ts

@@ -21,6 +21,7 @@ export * from "./config.interface";
 export * from "./config.job.names.interface";
 export * from "./config.jwt.interface";
 export * from "./config.logging.interface";
+export * from "./config.mcp.interface";
 export * from "./config.neo4j.interface";
 export * from "./config.oauth.interface";
 export * from "./config.operator.interface";

package/dist/config/interfaces/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/config/interfaces/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,iCAAiC,CAAC;AAChD,cAAc,kCAAkC,CAAC;AACjD,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sCAAsC,CAAC;AACrD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,oBAAoB,CAAC;AACnC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,0BAA0B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/config/interfaces/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,iCAAiC,CAAC;AAChD,cAAc,kCAAkC,CAAC;AACjD,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sCAAsC,CAAC;AACrD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,oBAAoB,CAAC;AACnC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,wBAAwB,CAAC;AACvC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,0BAA0B,CAAC"}

package/dist/config/interfaces/index.js

@@ -37,6 +37,7 @@ __exportStar(require("./config.interface"), exports);
 __exportStar(require("./config.job.names.interface"), exports);
 __exportStar(require("./config.jwt.interface"), exports);
 __exportStar(require("./config.logging.interface"), exports);
+__exportStar(require("./config.mcp.interface"), exports);
 __exportStar(require("./config.neo4j.interface"), exports);
 __exportStar(require("./config.oauth.interface"), exports);
 __exportStar(require("./config.operator.interface"), exports);

package/dist/config/interfaces/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/config/interfaces/index.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;AAEH,0DAAwC;AACxC,wDAAsC;AACtC,yDAAuC;AACvC,yDAAuC;AACvC,0DAAwC;AACxC,2DAAyC;AACzC,6DAA2C;AAC3C,kEAAgD;AAChD,mEAAiD;AACjD,0DAAwC;AACxC,6DAA2C;AAC3C,uEAAqD;AACrD,4DAA0C;AAC1C,2DAAyC;AACzC,gEAA8C;AAC9C,iEAA+C;AAC/C,qDAAmC;AACnC,+DAA6C;AAC7C,yDAAuC;AACvC,6DAA2C;AAC3C,2DAAyC;AACzC,2DAAyC;AACzC,8DAA4C;AAC5C,6DAA2C;AAC3C,+DAA6C;AAC7C,2DAAyC;AACzC,wDAAsC;AACtC,4DAA0C;AAC1C,2DAAyC;AACzC,gEAA8C;AAC9C,2DAAyC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/config/interfaces/index.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;AAEH,0DAAwC;AACxC,wDAAsC;AACtC,yDAAuC;AACvC,yDAAuC;AACvC,0DAAwC;AACxC,2DAAyC;AACzC,6DAA2C;AAC3C,kEAAgD;AAChD,mEAAiD;AACjD,0DAAwC;AACxC,6DAA2C;AAC3C,uEAAqD;AACrD,4DAA0C;AAC1C,2DAAyC;AACzC,gEAA8C;AAC9C,iEAA+C;AAC/C,qDAAmC;AACnC,+DAA6C;AAC7C,yDAAuC;AACvC,6DAA2C;AAC3C,yDAAuC;AACvC,2DAAyC;AACzC,2DAAyC;AACzC,8DAA4C;AAC5C,6DAA2C;AAC3C,+DAA6C;AAC7C,2DAAyC;AACzC,wDAAsC;AACtC,4DAA0C;AAC1C,2DAAyC;AACzC,gEAA8C;AAC9C,2DAAyC"}

package/dist/foundations/oauth/constants/oauth.scopes.d.ts

@@ -21,6 +21,8 @@ export declare const OAuth2Scopes: {
     readonly ROLLS_WRITE: "rolls:write";
     /** Access to user profile information (name, email) */
     readonly PROFILE: "profile";
+    /** Access to the MCP (Model Context Protocol) server */
+    readonly MCP: "mcp";
     /** Administrative access - restricted to platform admins */
     readonly ADMIN: "admin";
 };

package/dist/foundations/oauth/constants/oauth.scopes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.scopes.d.ts","sourceRoot":"","sources":["../../../../src/foundations/oauth/constants/oauth.scopes.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY;IACvB,uCAAuC;;IAGvC,wCAAwC;;IAGxC,iCAAiC;;IAGjC,oCAAoC;;IAGpC,kCAAkC;;IAGlC,qCAAqC;;IAGrC,uDAAuD;;IAGvD,4DAA4D;;CAEpD,CAAC;AAEX,wCAAwC;AACxC,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAE9E,uCAAuC;AACvC,eAAO,MAAM,kBAAkB,EAAE,MAAM,EAAgC,CAAC;AAExE;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAS1D,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CASjE,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAGjE;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAEzD;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,cAAc,GAAG,OAAO,CAEjF"}
+{"version":3,"file":"oauth.scopes.d.ts","sourceRoot":"","sources":["../../../../src/foundations/oauth/constants/oauth.scopes.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY;IACvB,uCAAuC;;IAGvC,wCAAwC;;IAGxC,iCAAiC;;IAGjC,oCAAoC;;IAGpC,kCAAkC;;IAGlC,qCAAqC;;IAGrC,uDAAuD;;IAGvD,wDAAwD;;IAGxD,4DAA4D;;CAEpD,CAAC;AAEX,wCAAwC;AACxC,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAE9E,uCAAuC;AACvC,eAAO,MAAM,kBAAkB,EAAE,MAAM,EAAgC,CAAC;AAExE;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAU1D,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAUjE,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAGjE;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAEzD;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,cAAc,GAAG,OAAO,CAEjF"}

package/dist/foundations/oauth/constants/oauth.scopes.js

@@ -27,6 +27,8 @@ exports.OAuth2Scopes = {
     ROLLS_WRITE: "rolls:write",
     /** Access to user profile information (name, email) */
     PROFILE: "profile",
+    /** Access to the MCP (Model Context Protocol) server */
+    MCP: "mcp",
     /** Administrative access - restricted to platform admins */
     ADMIN: "admin",
 };
@@ -44,6 +46,7 @@ exports.OAuthScopeNames = {
     [exports.OAuth2Scopes.ROLLS_READ]: "View Rolls",
     [exports.OAuth2Scopes.ROLLS_WRITE]: "Manage Rolls",
     [exports.OAuth2Scopes.PROFILE]: "View Profile",
+    [exports.OAuth2Scopes.MCP]: "MCP Server Access",
     [exports.OAuth2Scopes.ADMIN]: "Administrative Access",
 };
 /**
@@ -58,6 +61,7 @@ exports.OAuthScopeDescriptions = {
     [exports.OAuth2Scopes.ROLLS_READ]: "View your rolls and albums",
     [exports.OAuth2Scopes.ROLLS_WRITE]: "Create and modify rolls and albums",
     [exports.OAuth2Scopes.PROFILE]: "View your profile information (name, email)",
+    [exports.OAuth2Scopes.MCP]: "Let an AI assistant read and act on your data through the MCP server",
     [exports.OAuth2Scopes.ADMIN]: "Administrative access to the platform",
 };
 /**

package/dist/foundations/oauth/constants/oauth.scopes.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.scopes.js","sourceRoot":"","sources":["../../../../src/foundations/oauth/constants/oauth.scopes.ts"],"names":[],"mappings":";;;AA2EA,wCAGC;AAOD,kCAEC;AAQD,4BAEC;AAjGD;;;;;;;GAOG;AACU,QAAA,YAAY,GAAG;IAC1B,uCAAuC;IACvC,IAAI,EAAE,MAAM;IAEZ,wCAAwC;IACxC,KAAK,EAAE,OAAO;IAEd,iCAAiC;IACjC,gBAAgB,EAAE,kBAAkB;IAEpC,oCAAoC;IACpC,iBAAiB,EAAE,mBAAmB;IAEtC,kCAAkC;IAClC,UAAU,EAAE,YAAY;IAExB,qCAAqC;IACrC,WAAW,EAAE,aAAa;IAE1B,uDAAuD;IACvD,OAAO,EAAE,SAAS;IAElB,4DAA4D;IAC5D,KAAK,EAAE,OAAO;CACN,CAAC;AAKX,uCAAuC;AAC1B,QAAA,kBAAkB,GAAa,MAAM,CAAC,MAAM,CAAC,oBAAY,CAAC,CAAC;AAExE;;;GAGG;AACU,QAAA,eAAe,GAAmC;IAC7D,CAAC,oBAAY,CAAC,IAAI,CAAC,EAAE,aAAa;IAClC,CAAC,oBAAY,CAAC,KAAK,CAAC,EAAE,cAAc;IACpC,CAAC,oBAAY,CAAC,gBAAgB,CAAC,EAAE,kBAAkB;IACnD,CAAC,oBAAY,CAAC,iBAAiB,CAAC,EAAE,oBAAoB;IACtD,CAAC,oBAAY,CAAC,UAAU,CAAC,EAAE,YAAY;IACvC,CAAC,oBAAY,CAAC,WAAW,CAAC,EAAE,cAAc;IAC1C,CAAC,oBAAY,CAAC,OAAO,CAAC,EAAE,cAAc;IACtC,CAAC,oBAAY,CAAC,KAAK,CAAC,EAAE,uBAAuB;CAC9C,CAAC;AAEF;;;GAGG;AACU,QAAA,sBAAsB,GAAmC;IACpE,CAAC,oBAAY,CAAC,IAAI,CAAC,EAAE,0BAA0B;IAC/C,CAAC,oBAAY,CAAC,KAAK,CAAC,EAAE,2BAA2B;IACjD,CAAC,oBAAY,CAAC,gBAAgB,CAAC,EAAE,uBAAuB;IACxD,CAAC,oBAAY,CAAC,iBAAiB,CAAC,EAAE,oCAAoC;IACtE,CAAC,oBAAY,CAAC,UAAU,CAAC,EAAE,4BAA4B;IACvD,CAAC,oBAAY,CAAC,WAAW,CAAC,EAAE,oCAAoC;IAChE,CAAC,oBAAY,CAAC,OAAO,CAAC,EAAE,6CAA6C;IACrE,CAAC,oBAAY,CAAC,KAAK,CAAC,EAAE,uCAAuC;CAC9D,CAAC;AAEF;;;;GAIG;AACH,SAAgB,cAAc,CAAC,MAAyB;IACtD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtF,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,0BAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,SAAgB,WAAW,CAAC,WAAmB;IAC7C,OAAO,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,SAAgB,QAAQ,CAAC,MAAgB,EAAE,aAA6B;IACtE,OAAO,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;AACxC,CAAC"}
+{"version":3,"file":"oauth.scopes.js","sourceRoot":"","sources":["../../../../src/foundations/oauth/constants/oauth.scopes.ts"],"names":[],"mappings":";;;AAgFA,wCAGC;AAOD,kCAEC;AAQD,4BAEC;AAtGD;;;;;;;GAOG;AACU,QAAA,YAAY,GAAG;IAC1B,uCAAuC;IACvC,IAAI,EAAE,MAAM;IAEZ,wCAAwC;IACxC,KAAK,EAAE,OAAO;IAEd,iCAAiC;IACjC,gBAAgB,EAAE,kBAAkB;IAEpC,oCAAoC;IACpC,iBAAiB,EAAE,mBAAmB;IAEtC,kCAAkC;IAClC,UAAU,EAAE,YAAY;IAExB,qCAAqC;IACrC,WAAW,EAAE,aAAa;IAE1B,uDAAuD;IACvD,OAAO,EAAE,SAAS;IAElB,wDAAwD;IACxD,GAAG,EAAE,KAAK;IAEV,4DAA4D;IAC5D,KAAK,EAAE,OAAO;CACN,CAAC;AAKX,uCAAuC;AAC1B,QAAA,kBAAkB,GAAa,MAAM,CAAC,MAAM,CAAC,oBAAY,CAAC,CAAC;AAExE;;;GAGG;AACU,QAAA,eAAe,GAAmC;IAC7D,CAAC,oBAAY,CAAC,IAAI,CAAC,EAAE,aAAa;IAClC,CAAC,oBAAY,CAAC,KAAK,CAAC,EAAE,cAAc;IACpC,CAAC,oBAAY,CAAC,gBAAgB,CAAC,EAAE,kBAAkB;IACnD,CAAC,oBAAY,CAAC,iBAAiB,CAAC,EAAE,oBAAoB;IACtD,CAAC,oBAAY,CAAC,UAAU,CAAC,EAAE,YAAY;IACvC,CAAC,oBAAY,CAAC,WAAW,CAAC,EAAE,cAAc;IAC1C,CAAC,oBAAY,CAAC,OAAO,CAAC,EAAE,cAAc;IACtC,CAAC,oBAAY,CAAC,GAAG,CAAC,EAAE,mBAAmB;IACvC,CAAC,oBAAY,CAAC,KAAK,CAAC,EAAE,uBAAuB;CAC9C,CAAC;AAEF;;;GAGG;AACU,QAAA,sBAAsB,GAAmC;IACpE,CAAC,oBAAY,CAAC,IAAI,CAAC,EAAE,0BAA0B;IAC/C,CAAC,oBAAY,CAAC,KAAK,CAAC,EAAE,2BAA2B;IACjD,CAAC,oBAAY,CAAC,gBAAgB,CAAC,EAAE,uBAAuB;IACxD,CAAC,oBAAY,CAAC,iBAAiB,CAAC,EAAE,oCAAoC;IACtE,CAAC,oBAAY,CAAC,UAAU,CAAC,EAAE,4BAA4B;IACvD,CAAC,oBAAY,CAAC,WAAW,CAAC,EAAE,oCAAoC;IAChE,CAAC,oBAAY,CAAC,OAAO,CAAC,EAAE,6CAA6C;IACrE,CAAC,oBAAY,CAAC,GAAG,CAAC,EAAE,sEAAsE;IAC1F,CAAC,oBAAY,CAAC,KAAK,CAAC,EAAE,uCAAuC;CAC9D,CAAC;AAEF;;;;GAIG;AACH,SAAgB,cAAc,CAAC,MAAyB;IACtD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtF,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,0BAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,SAAgB,WAAW,CAAC,WAAmB;IAC7C,OAAO,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,SAAgB,QAAQ,CAAC,MAAgB,EAAE,aAA6B;IACtE,OAAO,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;AACxC,CAAC"}

package/dist/foundations/oauth/controllers/index.d.ts

@@ -1,4 +1,6 @@
 export * from "./oauth.authorize.controller";
 export * from "./oauth.token.controller";
 export * from "./oauth.management.controller";
+export * from "./oauth.registration.controller";
+export * from "./oauth.discovery.controller";
 //# sourceMappingURL=index.d.ts.map

package/dist/foundations/oauth/controllers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/foundations/oauth/controllers/index.ts"],"names":[],"mappings":"AAAA,cAAc,8BAA8B,CAAC;AAC7C,cAAc,0BAA0B,CAAC;AACzC,cAAc,+BAA+B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/foundations/oauth/controllers/index.ts"],"names":[],"mappings":"AAAA,cAAc,8BAA8B,CAAC;AAC7C,cAAc,0BAA0B,CAAC;AACzC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,8BAA8B,CAAC"}

package/dist/foundations/oauth/controllers/index.js

@@ -17,4 +17,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./oauth.authorize.controller"), exports);
 __exportStar(require("./oauth.token.controller"), exports);
 __exportStar(require("./oauth.management.controller"), exports);
+__exportStar(require("./oauth.registration.controller"), exports);
+__exportStar(require("./oauth.discovery.controller"), exports);
 //# sourceMappingURL=index.js.map

package/dist/foundations/oauth/controllers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/foundations/oauth/controllers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+DAA6C;AAC7C,2DAAyC;AACzC,gEAA8C"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/foundations/oauth/controllers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+DAA6C;AAC7C,2DAAyC;AACzC,gEAA8C;AAC9C,kEAAgD;AAChD,+DAA6C"}

package/dist/foundations/oauth/controllers/oauth.discovery.controller.d.ts

@@ -0,0 +1,46 @@
+import { ConfigService } from "@nestjs/config";
+/**
+ * OAuth Discovery Controller
+ *
+ * Serves the well-known metadata documents MCP clients use to
+ * discover the authorization server and protected resource:
+ * - RFC 8414 Authorization Server Metadata
+ * - RFC 9728 Protected Resource Metadata
+ *
+ * Both endpoints are public (no guard) per their RFCs and return
+ * plain JSON (not JSON:API) — the RFCs mandate their own wire format.
+ */
+export declare class OAuthDiscoveryController {
+    private readonly configService;
+    constructor(configService: ConfigService);
+    /**
+     * Authorization Server Metadata (RFC 8414)
+     *
+     * GET /.well-known/oauth-authorization-server
+     *
+     * Endpoint paths mirror the actual routes registered by
+     * OAuthTokenController and OAuthRegistrationController.
+     *
+     * `authorization_endpoint` deliberately points at the WEB app's consent
+     * page (app.url), not the API's Bearer-guarded /oauth/authorize route: a
+     * browser navigation carries no Authorization header, so the API route can
+     * never authenticate it. The web page handles login, then calls the API's
+     * authorize/approve endpoint with the user's JWT and redirects back to the
+     * client with the authorization code.
+     */
+    authorizationServer(): Record<string, unknown>;
+    /**
+     * Protected Resource Metadata (RFC 9728)
+     *
+     * GET /.well-known/oauth-protected-resource
+     *
+     * Consumed by MCP clients to locate the authorization server
+     * protecting the /mcp resource.
+     */
+    protectedResource(): Record<string, unknown>;
+    /** API base URL without trailing slash (api.url is normalized to end with one). */
+    private baseUrl;
+    /** Web-app base URL without trailing slash — hosts the browser-facing consent page. */
+    private appBaseUrl;
+}
+//# sourceMappingURL=oauth.discovery.controller.d.ts.map

package/dist/foundations/oauth/controllers/oauth.discovery.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.discovery.controller.d.ts","sourceRoot":"","sources":["../../../../src/foundations/oauth/controllers/oauth.discovery.controller.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C;;;;;;;;;;GAUG;AACH,qBACa,wBAAwB;IACvB,OAAO,CAAC,QAAQ,CAAC,aAAa;gBAAb,aAAa,EAAE,aAAa;IAEzD;;;;;;;;;;;;;;OAcG;IAEH,mBAAmB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAiB9C;;;;;;;OAOG;IAEH,iBAAiB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAQ5C,mFAAmF;IACnF,OAAO,CAAC,OAAO;IAIf,uFAAuF;IACvF,OAAO,CAAC,UAAU;CAGnB"}

package/dist/foundations/oauth/controllers/oauth.discovery.controller.js

@@ -0,0 +1,102 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuthDiscoveryController = void 0;
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+/**
+ * OAuth Discovery Controller
+ *
+ * Serves the well-known metadata documents MCP clients use to
+ * discover the authorization server and protected resource:
+ * - RFC 8414 Authorization Server Metadata
+ * - RFC 9728 Protected Resource Metadata
+ *
+ * Both endpoints are public (no guard) per their RFCs and return
+ * plain JSON (not JSON:API) — the RFCs mandate their own wire format.
+ */
+let OAuthDiscoveryController = class OAuthDiscoveryController {
+    constructor(configService) {
+        this.configService = configService;
+    }
+    /**
+     * Authorization Server Metadata (RFC 8414)
+     *
+     * GET /.well-known/oauth-authorization-server
+     *
+     * Endpoint paths mirror the actual routes registered by
+     * OAuthTokenController and OAuthRegistrationController.
+     *
+     * `authorization_endpoint` deliberately points at the WEB app's consent
+     * page (app.url), not the API's Bearer-guarded /oauth/authorize route: a
+     * browser navigation carries no Authorization header, so the API route can
+     * never authenticate it. The web page handles login, then calls the API's
+     * authorize/approve endpoint with the user's JWT and redirects back to the
+     * client with the authorization code.
+     */
+    authorizationServer() {
+        const base = this.baseUrl();
+        return {
+            issuer: base,
+            authorization_endpoint: `${this.appBaseUrl()}/oauth/authorize`,
+            token_endpoint: `${base}/oauth/token`,
+            registration_endpoint: `${base}/oauth/register`,
+            revocation_endpoint: `${base}/oauth/revoke`,
+            introspection_endpoint: `${base}/oauth/introspect`,
+            response_types_supported: ["code"],
+            grant_types_supported: ["authorization_code", "refresh_token"],
+            code_challenge_methods_supported: ["S256"],
+            token_endpoint_auth_methods_supported: ["none", "client_secret_basic", "client_secret_post"],
+            scopes_supported: ["mcp"],
+        };
+    }
+    /**
+     * Protected Resource Metadata (RFC 9728)
+     *
+     * GET /.well-known/oauth-protected-resource
+     *
+     * Consumed by MCP clients to locate the authorization server
+     * protecting the /mcp resource.
+     */
+    protectedResource() {
+        const base = this.baseUrl();
+        return {
+            resource: `${base}/mcp`,
+            authorization_servers: [base],
+        };
+    }
+    /** API base URL without trailing slash (api.url is normalized to end with one). */
+    baseUrl() {
+        return this.configService.get("api").url.replace(/\/$/, "");
+    }
+    /** Web-app base URL without trailing slash — hosts the browser-facing consent page. */
+    appBaseUrl() {
+        return this.configService.get("app").url.replace(/\/$/, "");
+    }
+};
+exports.OAuthDiscoveryController = OAuthDiscoveryController;
+__decorate([
+    (0, common_1.Get)("oauth-authorization-server"),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Object)
+], OAuthDiscoveryController.prototype, "authorizationServer", null);
+__decorate([
+    (0, common_1.Get)("oauth-protected-resource"),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Object)
+], OAuthDiscoveryController.prototype, "protectedResource", null);
+exports.OAuthDiscoveryController = OAuthDiscoveryController = __decorate([
+    (0, common_1.Controller)(".well-known"),
+    __metadata("design:paramtypes", [config_1.ConfigService])
+], OAuthDiscoveryController);
+//# sourceMappingURL=oauth.discovery.controller.js.map

package/dist/foundations/oauth/controllers/oauth.discovery.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.discovery.controller.js","sourceRoot":"","sources":["../../../../src/foundations/oauth/controllers/oauth.discovery.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAiD;AACjD,2CAA+C;AAE/C;;;;;;;;;;GAUG;AAEI,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACnC,YAA6B,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;IAAG,CAAC;IAE7D;;;;;;;;;;;;;;OAcG;IAEH,mBAAmB;QACjB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5B,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,sBAAsB,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,kBAAkB;YAC9D,cAAc,EAAE,GAAG,IAAI,cAAc;YACrC,qBAAqB,EAAE,GAAG,IAAI,iBAAiB;YAC/C,mBAAmB,EAAE,GAAG,IAAI,eAAe;YAC3C,sBAAsB,EAAE,GAAG,IAAI,mBAAmB;YAClD,wBAAwB,EAAE,CAAC,MAAM,CAAC;YAClC,qBAAqB,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;YAC9D,gCAAgC,EAAE,CAAC,MAAM,CAAC;YAC1C,qCAAqC,EAAE,CAAC,MAAM,EAAE,qBAAqB,EAAE,oBAAoB,CAAC;YAC5F,gBAAgB,EAAE,CAAC,KAAK,CAAC;SAC1B,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IAEH,iBAAiB;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5B,OAAO;YACL,QAAQ,EAAE,GAAG,IAAI,MAAM;YACvB,qBAAqB,EAAE,CAAC,IAAI,CAAC;SAC9B,CAAC;IACJ,CAAC;IAED,mFAAmF;IAC3E,OAAO;QACb,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAkB,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,uFAAuF;IAC/E,UAAU;QAChB,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAkB,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC/E,CAAC;CACF,CAAA;AA9DY,4DAAwB;AAmBnC;IADC,IAAA,YAAG,EAAC,4BAA4B,CAAC;;;;mEAgBjC;AAWD;IADC,IAAA,YAAG,EAAC,0BAA0B,CAAC;;;;iEAO/B;mCAnDU,wBAAwB;IADpC,IAAA,mBAAU,EAAC,aAAa,CAAC;qCAEoB,sBAAa;GAD9C,wBAAwB,CA8DpC"}

package/dist/foundations/oauth/controllers/oauth.registration.controller.d.ts

@@ -0,0 +1,36 @@
+import { ConfigService } from "@nestjs/config";
+import { OAuthRegisterDto } from "../dtos/oauth.register.dto";
+import { OAuthClientService } from "../services/oauth.client.service";
+/**
+ * OAuth Dynamic Client Registration Controller
+ *
+ * Implements RFC 7591 Dynamic Client Registration.
+ * Allows MCP clients (claude.ai connectors, Claude Desktop, ChatGPT)
+ * to self-register before starting the authorization code flow.
+ *
+ * The response is the RFC 7591 client information wire format
+ * (plain JSON, not JSON:API) — same convention as /oauth/token.
+ */
+export declare class OAuthRegistrationController {
+    private readonly clientService;
+    private readonly configService;
+    constructor(clientService: OAuthClientService, configService: ConfigService);
+    /**
+     * Client Registration Endpoint (RFC 7591 Section 3)
+     *
+     * POST /oauth/register
+     *
+     * Public endpoint (no guard) — required by MCP clients, which
+     * register before any user credentials exist.
+     */
+    register(dto: OAuthRegisterDto): Promise<{
+        client_id: string;
+        client_secret?: string;
+        client_id_issued_at: number;
+        redirect_uris: string[];
+        grant_types: string[];
+        token_endpoint_auth_method: string;
+        client_name: string;
+    }>;
+}
+//# sourceMappingURL=oauth.registration.controller.d.ts.map

package/dist/foundations/oauth/controllers/oauth.registration.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.registration.controller.d.ts","sourceRoot":"","sources":["../../../../src/foundations/oauth/controllers/oauth.registration.controller.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAEtE;;;;;;;;;GASG;AACH,qBACa,2BAA2B;IAEpC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,aAAa;gBADb,aAAa,EAAE,kBAAkB,EACjC,aAAa,EAAE,aAAa;IAG/C;;;;;;;OAOG;IAGG,QAAQ,CAAS,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC;QACrD,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,aAAa,EAAE,MAAM,EAAE,CAAC;QACxB,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,0BAA0B,EAAE,MAAM,CAAC;QACnC,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CA0BH"}

package/dist/foundations/oauth/controllers/oauth.registration.controller.js

@@ -0,0 +1,81 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuthRegistrationController = void 0;
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+const oauth_register_dto_1 = require("../dtos/oauth.register.dto");
+const oauth_client_service_1 = require("../services/oauth.client.service");
+/**
+ * OAuth Dynamic Client Registration Controller
+ *
+ * Implements RFC 7591 Dynamic Client Registration.
+ * Allows MCP clients (claude.ai connectors, Claude Desktop, ChatGPT)
+ * to self-register before starting the authorization code flow.
+ *
+ * The response is the RFC 7591 client information wire format
+ * (plain JSON, not JSON:API) — same convention as /oauth/token.
+ */
+let OAuthRegistrationController = class OAuthRegistrationController {
+    constructor(clientService, configService) {
+        this.clientService = clientService;
+        this.configService = configService;
+    }
+    /**
+     * Client Registration Endpoint (RFC 7591 Section 3)
+     *
+     * POST /oauth/register
+     *
+     * Public endpoint (no guard) — required by MCP clients, which
+     * register before any user credentials exist.
+     */
+    async register(dto) {
+        const oauth = this.configService.get("oauth");
+        if (!oauth?.enabled) {
+            throw new common_1.HttpException("OAuth is not enabled", 404);
+        }
+        const isConfidential = dto.token_endpoint_auth_method !== undefined && dto.token_endpoint_auth_method !== "none";
+        const { client, clientSecret } = await this.clientService.createClient({
+            name: dto.client_name ?? "Dynamically registered client",
+            redirectUris: dto.redirect_uris,
+            allowedScopes: dto.scope ? dto.scope.split(" ").filter(Boolean) : ["mcp"],
+            allowedGrantTypes: dto.grant_types ?? ["authorization_code", "refresh_token"],
+            isConfidential,
+        });
+        return {
+            client_id: client.clientId,
+            ...(clientSecret ? { client_secret: clientSecret } : {}),
+            client_id_issued_at: Math.floor(Date.now() / 1000),
+            redirect_uris: client.redirectUris,
+            grant_types: client.allowedGrantTypes,
+            token_endpoint_auth_method: isConfidential ? dto.token_endpoint_auth_method : "none",
+            client_name: client.name,
+        };
+    }
+};
+exports.OAuthRegistrationController = OAuthRegistrationController;
+__decorate([
+    (0, common_1.Post)("register"),
+    (0, common_1.HttpCode)(201),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [oauth_register_dto_1.OAuthRegisterDto]),
+    __metadata("design:returntype", Promise)
+], OAuthRegistrationController.prototype, "register", null);
+exports.OAuthRegistrationController = OAuthRegistrationController = __decorate([
+    (0, common_1.Controller)("oauth"),
+    __metadata("design:paramtypes", [oauth_client_service_1.OAuthClientService,
+        config_1.ConfigService])
+], OAuthRegistrationController);
+//# sourceMappingURL=oauth.registration.controller.js.map

package/dist/foundations/oauth/controllers/oauth.registration.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.registration.controller.js","sourceRoot":"","sources":["../../../../src/foundations/oauth/controllers/oauth.registration.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAiF;AACjF,2CAA+C;AAE/C,mEAA8D;AAC9D,2EAAsE;AAEtE;;;;;;;;;GASG;AAEI,IAAM,2BAA2B,GAAjC,MAAM,2BAA2B;IACtC,YACmB,aAAiC,EACjC,aAA4B;QAD5B,kBAAa,GAAb,aAAa,CAAoB;QACjC,kBAAa,GAAb,aAAa,CAAe;IAC5C,CAAC;IAEJ;;;;;;;OAOG;IAGG,AAAN,KAAK,CAAC,QAAQ,CAAS,GAAqB;QAS1C,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAuB,OAAO,CAAC,CAAC;QACpE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,sBAAa,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,cAAc,GAAG,GAAG,CAAC,0BAA0B,KAAK,SAAS,IAAI,GAAG,CAAC,0BAA0B,KAAK,MAAM,CAAC;QAEjH,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC;YACrE,IAAI,EAAE,GAAG,CAAC,WAAW,IAAI,+BAA+B;YACxD,YAAY,EAAE,GAAG,CAAC,aAAa;YAC/B,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACzE,iBAAiB,EAAE,GAAG,CAAC,WAAW,IAAI,CAAC,oBAAoB,EAAE,eAAe,CAAC;YAC7E,cAAc;SACf,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,mBAAmB,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAClD,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,WAAW,EAAE,MAAM,CAAC,iBAAiB;YACrC,0BAA0B,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,0BAA2B,CAAC,CAAC,CAAC,MAAM;YACrF,WAAW,EAAE,MAAM,CAAC,IAAI;SACzB,CAAC;IACJ,CAAC;CACF,CAAA;AAlDY,kEAA2B;AAgBhC;IAFL,IAAA,aAAI,EAAC,UAAU,CAAC;IAChB,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACE,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,qCAAgB;;2DAiC3C;sCAjDU,2BAA2B;IADvC,IAAA,mBAAU,EAAC,OAAO,CAAC;qCAGgB,yCAAkB;QAClB,sBAAa;GAHpC,2BAA2B,CAkDvC"}

package/dist/foundations/oauth/dtos/index.d.ts

@@ -1,6 +1,7 @@
 export * from "./oauth.authorize.dto";
 export * from "./oauth.client.dto";
 export * from "./oauth.introspect.dto";
+export * from "./oauth.register.dto";
 export * from "./oauth.revoke.dto";
 export * from "./oauth.token.dto";
 //# sourceMappingURL=index.d.ts.map

package/dist/foundations/oauth/dtos/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/foundations/oauth/dtos/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/foundations/oauth/dtos/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC"}

package/dist/foundations/oauth/dtos/index.js

@@ -17,6 +17,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./oauth.authorize.dto"), exports);
 __exportStar(require("./oauth.client.dto"), exports);
 __exportStar(require("./oauth.introspect.dto"), exports);
+__exportStar(require("./oauth.register.dto"), exports);
 __exportStar(require("./oauth.revoke.dto"), exports);
 __exportStar(require("./oauth.token.dto"), exports);
 //# sourceMappingURL=index.js.map

package/dist/foundations/oauth/dtos/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/foundations/oauth/dtos/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAAsC;AACtC,qDAAmC;AACnC,yDAAuC;AACvC,qDAAmC;AACnC,oDAAkC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/foundations/oauth/dtos/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAAsC;AACtC,qDAAmC;AACnC,yDAAuC;AACvC,uDAAqC;AACrC,qDAAmC;AACnC,oDAAkC"}

package/dist/foundations/oauth/dtos/oauth.register.dto.d.ts

@@ -0,0 +1,14 @@
+/**
+ * OAuth Dynamic Client Registration Request (RFC 7591 Section 2)
+ *
+ * Used for POST /oauth/register. Field names follow the RFC 7591
+ * client metadata wire format (snake_case).
+ */
+export declare class OAuthRegisterDto {
+    redirect_uris: string[];
+    client_name?: string;
+    grant_types?: string[];
+    token_endpoint_auth_method?: string;
+    scope?: string;
+}
+//# sourceMappingURL=oauth.register.dto.d.ts.map

package/dist/foundations/oauth/dtos/oauth.register.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.register.dto.d.ts","sourceRoot":"","sources":["../../../../src/foundations/oauth/dtos/oauth.register.dto.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,qBAAa,gBAAgB;IAG3B,aAAa,EAAE,MAAM,EAAE,CAAC;IAIxB,WAAW,CAAC,EAAE,MAAM,CAAC;IAKrB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IAIvB,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAIpC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}

package/dist/foundations/oauth/dtos/oauth.register.dto.js

@@ -0,0 +1,49 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuthRegisterDto = void 0;
+const class_validator_1 = require("class-validator");
+/**
+ * OAuth Dynamic Client Registration Request (RFC 7591 Section 2)
+ *
+ * Used for POST /oauth/register. Field names follow the RFC 7591
+ * client metadata wire format (snake_case).
+ */
+class OAuthRegisterDto {
+}
+exports.OAuthRegisterDto = OAuthRegisterDto;
+__decorate([
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.IsUrl)({ require_tld: false }, { each: true }),
+    __metadata("design:type", Array)
+], OAuthRegisterDto.prototype, "redirect_uris", void 0);
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", String)
+], OAuthRegisterDto.prototype, "client_name", void 0);
+__decorate([
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsIn)(["authorization_code", "refresh_token"], { each: true }),
+    __metadata("design:type", Array)
+], OAuthRegisterDto.prototype, "grant_types", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsIn)(["none", "client_secret_basic", "client_secret_post"]),
+    __metadata("design:type", String)
+], OAuthRegisterDto.prototype, "token_endpoint_auth_method", void 0);
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", String)
+], OAuthRegisterDto.prototype, "scope", void 0);
+//# sourceMappingURL=oauth.register.dto.js.map

package/dist/foundations/oauth/dtos/oauth.register.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.register.dto.js","sourceRoot":"","sources":["../../../../src/foundations/oauth/dtos/oauth.register.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAA6E;AAE7E;;;;;GAKG;AACH,MAAa,gBAAgB;CAqB5B;AArBD,4CAqBC;AAlBC;IAFC,IAAA,yBAAO,GAAE;IACT,IAAA,uBAAK,EAAC,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;uDACtB;AAIxB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;qDACQ;AAKrB;IAHC,IAAA,yBAAO,GAAE;IACT,IAAA,4BAAU,GAAE;IACZ,IAAA,sBAAI,EAAC,CAAC,oBAAoB,EAAE,eAAe,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;qDACvC;AAIvB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,sBAAI,EAAC,CAAC,MAAM,EAAE,qBAAqB,EAAE,oBAAoB,CAAC,CAAC;;oEACxB;AAIpC;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;+CACE"}

package/dist/foundations/oauth/index.d.ts

@@ -28,6 +28,7 @@ export { OAuthTokenRequestDto, OAuthTokenResponseDto } from "./dtos/oauth.token.
 export { OAuthRevokeRequestDto } from "./dtos/oauth.revoke.dto";
 export { OAuthIntrospectRequestDto, OAuthIntrospectResponseDto } from "./dtos/oauth.introspect.dto";
 export { OAuthClientCreateDto, OAuthClientUpdateDto } from "./dtos/oauth.client.dto";
+export { OAuthRegisterDto } from "./dtos/oauth.register.dto";
 export { OAuthClientSerialiser } from "./serialisers/oauth.client.serialiser";
 export { OAuthTokenSerialiser } from "./serialisers/oauth.token.serialiser";
 export type { CreateClientParams, UpdateClientParams } from "./services/oauth.client.service";

package/dist/foundations/oauth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/foundations/oauth/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAG7C,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAGjE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAG7D,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC5E,YAAY,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC7E,YAAY,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG/D,YAAY,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,YAAY,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,YAAY,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAG9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAG9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACpG,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAGrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAG5E,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAC9F,YAAY,EACV,yBAAyB,EACzB,0BAA0B,EAC1B,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,gCAAgC,CAAC;AACxC,YAAY,EACV,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,kBAAkB,EAClB,aAAa,EACb,YAAY,EACZ,gBAAgB,GACjB,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/foundations/oauth/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAG7C,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAGjE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAG7D,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC5E,YAAY,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC7E,YAAY,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG/D,YAAY,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,YAAY,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,YAAY,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAG9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAG9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACpG,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAG7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAG5E,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAC9F,YAAY,EACV,yBAAyB,EACzB,0BAA0B,EAC1B,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,gCAAgC,CAAC;AACxC,YAAY,EACV,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,kBAAkB,EAClB,aAAa,EACb,YAAY,EACZ,gBAAgB,GACjB,MAAM,0BAA0B,CAAC"}

package/dist/foundations/oauth/index.js

@@ -6,7 +6,7 @@
  * for OAuth2 functionality.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.OAuthTokenSerialiser = exports.OAuthClientSerialiser = exports.OAuthClientUpdateDto = exports.OAuthClientCreateDto = exports.OAuthIntrospectResponseDto = exports.OAuthIntrospectRequestDto = exports.OAuthRevokeRequestDto = exports.OAuthTokenResponseDto = exports.OAuthTokenRequestDto = exports.OAuthAuthorizeQueryDto = exports.OAuthRefreshTokenModel = exports.OAuthAccessTokenModel = exports.OAuthClientModel = exports.oauthRefreshTokenMeta = exports.oauthAccessTokenMeta = exports.oauthClientMeta = exports.createOAuthError = exports.OAuthErrorCodes = exports.VALID_OAUTH_SCOPES = exports.OAuth2Scopes = exports.OAuthTokenGuard = exports.OAuthPkceService = exports.OAuthTokenService = exports.OAuthClientService = exports.OAuthService = exports.OAuthModule = void 0;
+exports.OAuthTokenSerialiser = exports.OAuthClientSerialiser = exports.OAuthRegisterDto = exports.OAuthClientUpdateDto = exports.OAuthClientCreateDto = exports.OAuthIntrospectResponseDto = exports.OAuthIntrospectRequestDto = exports.OAuthRevokeRequestDto = exports.OAuthTokenResponseDto = exports.OAuthTokenRequestDto = exports.OAuthAuthorizeQueryDto = exports.OAuthRefreshTokenModel = exports.OAuthAccessTokenModel = exports.OAuthClientModel = exports.oauthRefreshTokenMeta = exports.oauthAccessTokenMeta = exports.oauthClientMeta = exports.createOAuthError = exports.OAuthErrorCodes = exports.VALID_OAUTH_SCOPES = exports.OAuth2Scopes = exports.OAuthTokenGuard = exports.OAuthPkceService = exports.OAuthTokenService = exports.OAuthClientService = exports.OAuthService = exports.OAuthModule = void 0;
 // Module
 var oauth_module_1 = require("./oauth.module");
 Object.defineProperty(exports, "OAuthModule", { enumerable: true, get: function () { return oauth_module_1.OAuthModule; } });
@@ -56,6 +56,8 @@ Object.defineProperty(exports, "OAuthIntrospectResponseDto", { enumerable: true,
 var oauth_client_dto_1 = require("./dtos/oauth.client.dto");
 Object.defineProperty(exports, "OAuthClientCreateDto", { enumerable: true, get: function () { return oauth_client_dto_1.OAuthClientCreateDto; } });
 Object.defineProperty(exports, "OAuthClientUpdateDto", { enumerable: true, get: function () { return oauth_client_dto_1.OAuthClientUpdateDto; } });
+var oauth_register_dto_1 = require("./dtos/oauth.register.dto");
+Object.defineProperty(exports, "OAuthRegisterDto", { enumerable: true, get: function () { return oauth_register_dto_1.OAuthRegisterDto; } });
 // Serializers
 var oauth_client_serialiser_1 = require("./serialisers/oauth.client.serialiser");
 Object.defineProperty(exports, "OAuthClientSerialiser", { enumerable: true, get: function () { return oauth_client_serialiser_1.OAuthClientSerialiser; } });

package/dist/foundations/oauth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/foundations/oauth/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,SAAS;AACT,+CAA6C;AAApC,2GAAA,WAAW,OAAA;AAEpB,WAAW;AACX,0DAAwD;AAA/C,6GAAA,YAAY,OAAA;AACrB,wEAAqE;AAA5D,0HAAA,kBAAkB,OAAA;AAC3B,sEAAmE;AAA1D,wHAAA,iBAAiB,OAAA;AAC1B,oEAAiE;AAAxD,sHAAA,gBAAgB,OAAA;AAEzB,SAAS;AACT,gEAA6D;AAApD,oHAAA,eAAe,OAAA;AAExB,YAAY;AACZ,yDAA4E;AAAnE,4GAAA,YAAY,OAAA;AAAE,kHAAA,kBAAkB,OAAA;AAEzC,yDAA6E;AAApE,+GAAA,eAAe,OAAA;AAAE,gHAAA,gBAAgB,OAAA;AAK1C,kEAA+D;AAAtD,oHAAA,eAAe,OAAA;AAExB,kFAA4E;AAAnE,iIAAA,oBAAoB,OAAA;AAE7B,oFAA8E;AAArE,mIAAA,qBAAqB,OAAA;AAE9B,SAAS;AACT,oEAAiE;AAAxD,sHAAA,gBAAgB,OAAA;AACzB,gFAA4E;AAAnE,iIAAA,qBAAqB,OAAA;AAC9B,kFAA8E;AAArE,mIAAA,sBAAsB,OAAA;AAE/B,OAAO;AACP,kEAAoE;AAA3D,6HAAA,sBAAsB,OAAA;AAC/B,0DAAqF;AAA5E,uHAAA,oBAAoB,OAAA;AAAE,wHAAA,qBAAqB,OAAA;AACpD,4DAAgE;AAAvD,yHAAA,qBAAqB,OAAA;AAC9B,oEAAoG;AAA3F,iIAAA,yBAAyB,OAAA;AAAE,kIAAA,0BAA0B,OAAA;AAC9D,4DAAqF;AAA5E,wHAAA,oBAAoB,OAAA;AAAE,wHAAA,oBAAoB,OAAA;AAEnD,cAAc;AACd,iFAA8E;AAArE,gIAAA,qBAAqB,OAAA;AAC9B,+EAA4E;AAAnE,8HAAA,oBAAoB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/foundations/oauth/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,SAAS;AACT,+CAA6C;AAApC,2GAAA,WAAW,OAAA;AAEpB,WAAW;AACX,0DAAwD;AAA/C,6GAAA,YAAY,OAAA;AACrB,wEAAqE;AAA5D,0HAAA,kBAAkB,OAAA;AAC3B,sEAAmE;AAA1D,wHAAA,iBAAiB,OAAA;AAC1B,oEAAiE;AAAxD,sHAAA,gBAAgB,OAAA;AAEzB,SAAS;AACT,gEAA6D;AAApD,oHAAA,eAAe,OAAA;AAExB,YAAY;AACZ,yDAA4E;AAAnE,4GAAA,YAAY,OAAA;AAAE,kHAAA,kBAAkB,OAAA;AAEzC,yDAA6E;AAApE,+GAAA,eAAe,OAAA;AAAE,gHAAA,gBAAgB,OAAA;AAK1C,kEAA+D;AAAtD,oHAAA,eAAe,OAAA;AAExB,kFAA4E;AAAnE,iIAAA,oBAAoB,OAAA;AAE7B,oFAA8E;AAArE,mIAAA,qBAAqB,OAAA;AAE9B,SAAS;AACT,oEAAiE;AAAxD,sHAAA,gBAAgB,OAAA;AACzB,gFAA4E;AAAnE,iIAAA,qBAAqB,OAAA;AAC9B,kFAA8E;AAArE,mIAAA,sBAAsB,OAAA;AAE/B,OAAO;AACP,kEAAoE;AAA3D,6HAAA,sBAAsB,OAAA;AAC/B,0DAAqF;AAA5E,uHAAA,oBAAoB,OAAA;AAAE,wHAAA,qBAAqB,OAAA;AACpD,4DAAgE;AAAvD,yHAAA,qBAAqB,OAAA;AAC9B,oEAAoG;AAA3F,iIAAA,yBAAyB,OAAA;AAAE,kIAAA,0BAA0B,OAAA;AAC9D,4DAAqF;AAA5E,wHAAA,oBAAoB,OAAA;AAAE,wHAAA,oBAAoB,OAAA;AACnD,gEAA6D;AAApD,sHAAA,gBAAgB,OAAA;AAEzB,cAAc;AACd,iFAA8E;AAArE,gIAAA,qBAAqB,OAAA;AAC9B,+EAA4E;AAAnE,8HAAA,oBAAoB,OAAA"}

package/dist/foundations/oauth/oauth.module.d.ts

@@ -4,7 +4,9 @@ import { OnModuleInit } from "@nestjs/common";
  *
  * Provides OAuth2 Authorization Server functionality.
  * Implements RFC 6749 (OAuth 2.0), RFC 7636 (PKCE),
- * RFC 7009 (Token Revocation), and RFC 7662 (Token Introspection).
+ * RFC 7009 (Token Revocation), RFC 7662 (Token Introspection),
+ * RFC 7591 (Dynamic Client Registration), RFC 8414 (Authorization
+ * Server Metadata), and RFC 9728 (Protected Resource Metadata).
  *
  * @example
  * // In your app module

package/dist/foundations/oauth/oauth.module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.module.d.ts","sourceRoot":"","sources":["../../../src/foundations/oauth/oauth.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,YAAY,EAAE,MAAM,gBAAgB,CAAC;AA8BtD;;;;;;;;;;;;;;;GAeG;AACH,qBA6Ba,WAAY,YAAW,YAAY;IAC9C;;;OAGG;IACH,YAAY;CAKb"}
+{"version":3,"file":"oauth.module.d.ts","sourceRoot":"","sources":["../../../src/foundations/oauth/oauth.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAgCtD;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAmCa,WAAY,YAAW,YAAY;IAC9C;;;OAGG;IACH,YAAY;CAKb"}