@digital-science-dsl/dimensions-analytics-mcp 0.5.3

package/dist/client/auth/index.d.ts

@@ -0,0 +1,7 @@
+export { fromEnv, fromObject, fromPath } from "./config-loaders.js";
+export { createAuthProvider } from "./factory.js";
+export { JwtAuthProvider } from "./providers/jwt-auth-provider.js";
+export { AuthResponseSchema, JwtAuthConfigSchema } from "./schemas.js";
+export type { AuthConfig, AuthProvider, JwtAuthConfig } from "./types.js";
+export { isJwtAuthConfig } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/client/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/client/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACvE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC"}

package/dist/client/auth/index.js

@@ -0,0 +1,6 @@
+export { fromEnv, fromObject, fromPath } from "./config-loaders.js";
+export { createAuthProvider } from "./factory.js";
+export { JwtAuthProvider } from "./providers/jwt-auth-provider.js";
+export { AuthResponseSchema, JwtAuthConfigSchema } from "./schemas.js";
+export { isJwtAuthConfig } from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/client/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/client/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEvE,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC"}

package/dist/client/auth/jwt-utils.d.ts

@@ -0,0 +1,17 @@
+/**
+ * JWT structure validation for Dimensions auth responses.
+ * @module client/auth/jwt-utils
+ */
+/**
+ * Validates a JWT has three base64url segments.
+ * @param token - Raw token from auth response
+ * @returns The token string
+ * @throws {AuthenticationError} When structure is invalid
+ */
+export declare function validateJwtStructure(token: unknown): string;
+/**
+ * Decodes the JWT payload (middle segment) without signature verification.
+ * Use only for tokens returned by a trusted auth.json endpoint.
+ */
+export declare function decodeJwtPayload(token: string): Record<string, unknown>;
+//# sourceMappingURL=jwt-utils.d.ts.map

package/dist/client/auth/jwt-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-utils.d.ts","sourceRoot":"","sources":["../../../src/client/auth/jwt-utils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAS3D;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAKvE"}

package/dist/client/auth/jwt-utils.js

@@ -0,0 +1,33 @@
+/**
+ * JWT structure validation for Dimensions auth responses.
+ * @module client/auth/jwt-utils
+ */
+import { AuthenticationError } from "../errors.js";
+const JWT_SEGMENT = /^[A-Za-z0-9_-]+$/;
+/**
+ * Validates a JWT has three base64url segments.
+ * @param token - Raw token from auth response
+ * @returns The token string
+ * @throws {AuthenticationError} When structure is invalid
+ */
+export function validateJwtStructure(token) {
+    if (typeof token !== "string") {
+        throw new AuthenticationError("Invalid token: expected string");
+    }
+    const parts = token.split(".");
+    if (parts.length !== 3 || parts.some((part) => !part || !JWT_SEGMENT.test(part))) {
+        throw new AuthenticationError("Invalid JWT structure");
+    }
+    return token;
+}
+/**
+ * Decodes the JWT payload (middle segment) without signature verification.
+ * Use only for tokens returned by a trusted auth.json endpoint.
+ */
+export function decodeJwtPayload(token) {
+    const validated = validateJwtStructure(token);
+    const payloadSegment = validated.split(".")[1];
+    const json = Buffer.from(payloadSegment, "base64url").toString("utf8");
+    return JSON.parse(json);
+}
+//# sourceMappingURL=jwt-utils.js.map

package/dist/client/auth/jwt-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-utils.js","sourceRoot":"","sources":["../../../src/client/auth/jwt-utils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,WAAW,GAAG,kBAAkB,CAAC;AAEvC;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,mBAAmB,CAAC,gCAAgC,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,mBAAmB,CAAC,uBAAuB,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,cAAc,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;AACrD,CAAC"}

package/dist/client/auth/node.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Node.js-only auth config loaders.
+ *
+ * These utilities read credentials from the filesystem and environment variables.
+ * They depend on `node:fs` and must not be imported in browser/edge contexts.
+ *
+ * @example
+ * ```typescript
+ * import { fromEnv, fromPath } from "./node.js";
+ * ```
+ *
+ * @module core/auth/node
+ */
+export type { FromEnvOptions } from "./config-loaders.js";
+export { fromEnv, fromObject, fromPath } from "./config-loaders.js";
+//# sourceMappingURL=node.d.ts.map

package/dist/client/auth/node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../../../src/client/auth/node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/client/auth/node.js

@@ -0,0 +1,15 @@
+/**
+ * Node.js-only auth config loaders.
+ *
+ * These utilities read credentials from the filesystem and environment variables.
+ * They depend on `node:fs` and must not be imported in browser/edge contexts.
+ *
+ * @example
+ * ```typescript
+ * import { fromEnv, fromPath } from "./node.js";
+ * ```
+ *
+ * @module core/auth/node
+ */
+export { fromEnv, fromObject, fromPath } from "./config-loaders.js";
+//# sourceMappingURL=node.js.map

package/dist/client/auth/node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.js","sourceRoot":"","sources":["../../../src/client/auth/node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/client/auth/providers/index.d.ts

@@ -0,0 +1,2 @@
+export { JwtAuthProvider } from "./jwt-auth-provider.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/client/auth/providers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/client/auth/providers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/client/auth/providers/index.js

@@ -0,0 +1,2 @@
+export { JwtAuthProvider } from "./jwt-auth-provider.js";
+//# sourceMappingURL=index.js.map

package/dist/client/auth/providers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/client/auth/providers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/client/auth/providers/jwt-auth-provider.d.ts

@@ -0,0 +1,70 @@
+/**
+ * JWT authentication provider for Dimensions API.
+ * @module core/auth/providers/jwt-auth-provider
+ */
+import type { AuthProvider, JwtAuthConfig } from "../types.js";
+/**
+ * Authentication provider using JWT tokens from Dimensions API.
+ * Exchanges an API key for a short-lived JWT token.
+ *
+ * Note: This provider does NOT cache tokens internally. Use the withCaching()
+ * decorator if caching is needed.
+ *
+ * @example
+ * ```typescript
+ * import { JwtAuthProvider } from "../../index.js";
+ * import { withCaching } from "../../index.js";
+ *
+ * const provider = new JwtAuthProvider({
+ *   type: 'jwt',
+ *   apiKey: 'your-api-key'
+ * });
+ *
+ * // Wrap with caching for production use
+ * const cachedProvider = withCaching(provider, {
+ *   cacheDurationMs: 3600000 // 1 hour
+ * });
+ *
+ * const headers = await cachedProvider.getHeaders();
+ * // { Authorization: 'JWT eyJ...' }
+ * ```
+ */
+export declare class JwtAuthProvider implements AuthProvider {
+    readonly type: "jwt";
+    private readonly apiKey;
+    private readonly authUrl;
+    private readonly timeout;
+    private currentToken;
+    private initialized;
+    /**
+     * Creates a new JwtAuthProvider.
+     * @param config - JWT auth configuration
+     */
+    constructor(config: JwtAuthConfig);
+    /**
+     * Initialize the provider by fetching an initial token.
+     * Called automatically on first getHeaders() if not called explicitly.
+     */
+    initialize(): Promise<void>;
+    /**
+     * Get the Authorization header with JWT token.
+     * Fetches a new token if not initialized.
+     * @returns Headers object with Authorization header
+     */
+    getHeaders(): Promise<Record<string, string>>;
+    /**
+     * Force refresh of the JWT token by fetching a new one.
+     */
+    refresh(): Promise<void>;
+    /**
+     * Invalidate the current token, forcing a refresh on next getHeaders().
+     */
+    invalidate(): void;
+    /**
+     * Fetches a new JWT token from the auth endpoint.
+     * @throws {AuthenticationError} If authentication fails
+     * @throws {NetworkError} If a network error occurs
+     */
+    private fetchToken;
+}
+//# sourceMappingURL=jwt-auth-provider.d.ts.map

package/dist/client/auth/providers/jwt-auth-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-auth-provider.d.ts","sourceRoot":"","sources":["../../../../src/client/auth/providers/jwt-auth-provider.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAQ/D;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,qBAAa,eAAgB,YAAW,YAAY;IAClD,QAAQ,CAAC,IAAI,EAAG,KAAK,CAAU;IAE/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IAEjC,OAAO,CAAC,YAAY,CAAuB;IAC3C,OAAO,CAAC,WAAW,CAAS;IAE5B;;;OAGG;gBACS,MAAM,EAAE,aAAa;IAMjC;;;OAGG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAQjC;;;;OAIG;IACG,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IASnD;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAI9B;;OAEG;IACH,UAAU,IAAI,IAAI;IAKlB;;;;OAIG;YACW,UAAU;CA4CzB"}

package/dist/client/auth/providers/jwt-auth-provider.js

@@ -0,0 +1,134 @@
+/**
+ * JWT authentication provider for Dimensions API.
+ * @module core/auth/providers/jwt-auth-provider
+ */
+import { AuthenticationError, NetworkError, sanitizeErrorMessage } from "../../errors.js";
+import { validateJwtStructure } from "../jwt-utils.js";
+import { AuthResponseSchema } from "../schemas.js";
+/** Default auth endpoint URL */
+const DEFAULT_AUTH_URL = "https://app.dimensions.ai/api/auth.json";
+/** Default request timeout in milliseconds */
+const DEFAULT_TIMEOUT = 30000;
+/**
+ * Authentication provider using JWT tokens from Dimensions API.
+ * Exchanges an API key for a short-lived JWT token.
+ *
+ * Note: This provider does NOT cache tokens internally. Use the withCaching()
+ * decorator if caching is needed.
+ *
+ * @example
+ * ```typescript
+ * import { JwtAuthProvider } from "../../index.js";
+ * import { withCaching } from "../../index.js";
+ *
+ * const provider = new JwtAuthProvider({
+ *   type: 'jwt',
+ *   apiKey: 'your-api-key'
+ * });
+ *
+ * // Wrap with caching for production use
+ * const cachedProvider = withCaching(provider, {
+ *   cacheDurationMs: 3600000 // 1 hour
+ * });
+ *
+ * const headers = await cachedProvider.getHeaders();
+ * // { Authorization: 'JWT eyJ...' }
+ * ```
+ */
+export class JwtAuthProvider {
+    type = "jwt";
+    apiKey;
+    authUrl;
+    timeout;
+    currentToken = null;
+    initialized = false;
+    /**
+     * Creates a new JwtAuthProvider.
+     * @param config - JWT auth configuration
+     */
+    constructor(config) {
+        this.apiKey = config.apiKey;
+        this.authUrl = config.authUrl ?? DEFAULT_AUTH_URL;
+        this.timeout = config.timeout ?? DEFAULT_TIMEOUT;
+    }
+    /**
+     * Initialize the provider by fetching an initial token.
+     * Called automatically on first getHeaders() if not called explicitly.
+     */
+    async initialize() {
+        if (this.initialized) {
+            return;
+        }
+        await this.fetchToken();
+        this.initialized = true;
+    }
+    /**
+     * Get the Authorization header with JWT token.
+     * Fetches a new token if not initialized.
+     * @returns Headers object with Authorization header
+     */
+    async getHeaders() {
+        if (!this.currentToken) {
+            await this.fetchToken();
+        }
+        return {
+            Authorization: `JWT ${this.currentToken}`,
+        };
+    }
+    /**
+     * Force refresh of the JWT token by fetching a new one.
+     */
+    async refresh() {
+        await this.fetchToken();
+    }
+    /**
+     * Invalidate the current token, forcing a refresh on next getHeaders().
+     */
+    invalidate() {
+        this.currentToken = null;
+        this.initialized = false;
+    }
+    /**
+     * Fetches a new JWT token from the auth endpoint.
+     * @throws {AuthenticationError} If authentication fails
+     * @throws {NetworkError} If a network error occurs
+     */
+    async fetchToken() {
+        const controller = new AbortController();
+        const timeoutId = setTimeout(() => controller.abort(), this.timeout);
+        try {
+            const response = await fetch(this.authUrl, {
+                method: "POST",
+                headers: {
+                    "Content-Type": "application/json",
+                },
+                body: JSON.stringify({ key: this.apiKey }),
+                signal: controller.signal,
+            });
+            if (!response.ok) {
+                throw new AuthenticationError(`Authentication failed: ${response.status} ${response.statusText}`);
+            }
+            const rawData = await response.json();
+            const parseResult = AuthResponseSchema.safeParse(rawData);
+            if (!parseResult.success) {
+                throw new AuthenticationError(`Invalid authentication response: ${parseResult.error.message}`);
+            }
+            // Schema guarantees at least one non-empty token field
+            const rawToken = parseResult.data.token || parseResult.data.access_token;
+            this.currentToken = validateJwtStructure(rawToken);
+        }
+        catch (error) {
+            if (error instanceof AuthenticationError) {
+                throw error;
+            }
+            if (error instanceof Error && error.name === "AbortError") {
+                throw new NetworkError("Authentication request timeout");
+            }
+            throw new NetworkError(`Authentication failed: ${sanitizeErrorMessage(error)}`);
+        }
+        finally {
+            clearTimeout(timeoutId);
+        }
+    }
+}
+//# sourceMappingURL=jwt-auth-provider.js.map

package/dist/client/auth/providers/jwt-auth-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-auth-provider.js","sourceRoot":"","sources":["../../../../src/client/auth/providers/jwt-auth-provider.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAGnD,gCAAgC;AAChC,MAAM,gBAAgB,GAAG,yCAAyC,CAAC;AAEnE,8CAA8C;AAC9C,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,OAAO,eAAe;IACjB,IAAI,GAAG,KAAc,CAAC;IAEd,MAAM,CAAS;IACf,OAAO,CAAS;IAChB,OAAO,CAAS;IAEzB,YAAY,GAAkB,IAAI,CAAC;IACnC,WAAW,GAAG,KAAK,CAAC;IAE5B;;;OAGG;IACH,YAAY,MAAqB;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,gBAAgB,CAAC;QAClD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,eAAe,CAAC;IACnD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO;YACL,aAAa,EAAE,OAAO,IAAI,CAAC,YAAY,EAAE;SAC1C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,UAAU;QACR,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,UAAU;QACtB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAErE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE;gBACzC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC1C,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,mBAAmB,CAC3B,0BAA0B,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CACnE,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC/C,MAAM,WAAW,GAAG,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAE1D,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;gBACzB,MAAM,IAAI,mBAAmB,CAC3B,oCAAoC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,CAChE,CAAC;YACJ,CAAC;YAED,uDAAuD;YACvD,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,IAAI,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC;YACzE,IAAI,CAAC,YAAY,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;gBACzC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1D,MAAM,IAAI,YAAY,CAAC,gCAAgC,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,IAAI,YAAY,CAAC,0BAA0B,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;CACF"}

package/dist/client/auth/schemas.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Zod schemas for JWT authentication configuration.
+ * @module client/auth/schemas
+ */
+import { z } from "zod";
+/** Zod schema for JWT auth configuration. */
+export declare const JwtAuthConfigSchema: z.ZodObject<{
+    type: z.ZodLiteral<"jwt">;
+    apiKey: z.ZodString;
+    authUrl: z.ZodOptional<z.ZodString>;
+    tokenCacheDuration: z.ZodOptional<z.ZodNumber>;
+    timeout: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+/** Zod schema for authentication API response. */
+export declare const AuthResponseSchema: z.ZodObject<{
+    token: z.ZodOptional<z.ZodString>;
+    access_token: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+//# sourceMappingURL=schemas.d.ts.map

package/dist/client/auth/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../../src/client/auth/schemas.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,6CAA6C;AAC7C,eAAO,MAAM,mBAAmB;;;;;;iBAM9B,CAAC;AAEH,kDAAkD;AAClD,eAAO,MAAM,kBAAkB;;;iBAO3B,CAAC"}

package/dist/client/auth/schemas.js

@@ -0,0 +1,23 @@
+/**
+ * Zod schemas for JWT authentication configuration.
+ * @module client/auth/schemas
+ */
+import { z } from "zod";
+/** Zod schema for JWT auth configuration. */
+export const JwtAuthConfigSchema = z.object({
+    type: z.literal("jwt"),
+    apiKey: z.string().min(1, "API key is required"),
+    authUrl: z.string().url().optional(),
+    tokenCacheDuration: z.number().positive().optional(),
+    timeout: z.number().positive().optional(),
+});
+/** Zod schema for authentication API response. */
+export const AuthResponseSchema = z
+    .object({
+    token: z.string().min(1, "token must be a non-empty string").optional(),
+    access_token: z.string().min(1, "access_token must be a non-empty string").optional(),
+})
+    .refine((data) => data.token || data.access_token, {
+    message: "Either 'token' or 'access_token' field is required with a non-empty value",
+});
+//# sourceMappingURL=schemas.js.map

package/dist/client/auth/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../../src/client/auth/schemas.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,6CAA6C;AAC7C,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACtB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,qBAAqB,CAAC;IAChD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACpC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAEH,kDAAkD;AAClD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,kCAAkC,CAAC,CAAC,QAAQ,EAAE;IACvE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,yCAAyC,CAAC,CAAC,QAAQ,EAAE;CACtF,CAAC;KACD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY,EAAE;IACjD,OAAO,EAAE,2EAA2E;CACrF,CAAC,CAAC"}

package/dist/client/auth/types.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Authentication provider types for Dimensions API key → JWT exchange.
+ * @module client/auth/types
+ */
+/** Base interface for authentication providers. */
+export interface AuthProvider {
+    readonly type: AuthConfig["type"];
+    initialize(): Promise<void>;
+    getHeaders(): Promise<Record<string, string>>;
+    refresh(): Promise<void>;
+    invalidate(): void;
+}
+/** JWT auth configuration (Dimensions API key). */
+export type AuthConfig = JwtAuthConfig;
+/** Configuration for JWT-based authentication with Dimensions API. */
+export interface JwtAuthConfig {
+    readonly type: "jwt";
+    readonly apiKey: string;
+    readonly authUrl?: string;
+    readonly tokenCacheDuration?: number;
+    readonly timeout?: number;
+}
+/** Type guard for JWT auth configuration. */
+export declare function isJwtAuthConfig(config: AuthConfig): config is JwtAuthConfig;
+//# sourceMappingURL=types.d.ts.map

package/dist/client/auth/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/client/auth/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,mDAAmD;AACnD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAClC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,UAAU,IAAI,IAAI,CAAC;CACpB;AAED,mDAAmD;AACnD,MAAM,MAAM,UAAU,GAAG,aAAa,CAAC;AAEvC,sEAAsE;AACtE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,6CAA6C;AAC7C,wBAAgB,eAAe,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,IAAI,aAAa,CAE3E"}

package/dist/client/auth/types.js

@@ -0,0 +1,9 @@
+/**
+ * Authentication provider types for Dimensions API key → JWT exchange.
+ * @module client/auth/types
+ */
+/** Type guard for JWT auth configuration. */
+export function isJwtAuthConfig(config) {
+    return config.type === "jwt";
+}
+//# sourceMappingURL=types.js.map

package/dist/client/auth/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/client/auth/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAuBH,6CAA6C;AAC7C,MAAM,UAAU,eAAe,CAAC,MAAkB;IAChD,OAAO,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC;AAC/B,CAAC"}

package/dist/client/command.d.ts

@@ -0,0 +1,44 @@
+import type { z } from "zod";
+/**
+ * Base class for all Dimensions API commands.
+ *
+ * Commands are self-contained units with:
+ * - Input schema (Zod) for validation
+ * - Typed input and output
+ * - Execution handled by DimensionsClient.send()
+ */
+export declare abstract class Command<TInput, TOutput> {
+    /**
+     * Zod schema for input validation.
+     * Must be defined on subclass.
+     */
+    static readonly inputSchema: z.ZodType<unknown>;
+    /**
+     * Validated input parameters.
+     */
+    abstract readonly input: TInput;
+    /**
+     * Resolves the DSL query for this command.
+     * Override in subclasses that use DSL queries.
+     */
+    resolveQuery?(): string;
+    /**
+     * Resolves the API endpoint for this command.
+     * Default is DSL endpoint; override for special endpoints.
+     */
+    resolveEndpoint(): string;
+    /**
+     * Transforms raw API response to typed output.
+     * Override in subclasses.
+     */
+    transformResponse?(response: unknown): TOutput;
+}
+/**
+ * Type helper to extract input type from a Command class.
+ */
+export type CommandInput<T extends Command<unknown, unknown>> = T extends Command<infer I, unknown> ? I : never;
+/**
+ * Type helper to extract output type from a Command class.
+ */
+export type CommandOutput<T extends Command<unknown, unknown>> = T extends Command<unknown, infer O> ? O : never;
+//# sourceMappingURL=command.d.ts.map

package/dist/client/command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../src/client/command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B;;;;;;;GAOG;AACH,8BAAsB,OAAO,CAAC,MAAM,EAAE,OAAO;IAC3C;;;OAGG;IACH,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAEhD;;OAEG;IACH,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEhC;;;OAGG;IACH,YAAY,CAAC,IAAI,MAAM;IAEvB;;;OAGG;IACH,eAAe,IAAI,MAAM;IAIzB;;;OAGG;IACH,iBAAiB,CAAC,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO;CAC/C;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAC1D,CAAC,SAAS,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;AAElD;;GAEG;AACH,MAAM,MAAM,aAAa,CAAC,CAAC,SAAS,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAC3D,CAAC,SAAS,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC"}

package/dist/client/command.js

@@ -0,0 +1,23 @@
+/**
+ * Base class for all Dimensions API commands.
+ *
+ * Commands are self-contained units with:
+ * - Input schema (Zod) for validation
+ * - Typed input and output
+ * - Execution handled by DimensionsClient.send()
+ */
+export class Command {
+    /**
+     * Zod schema for input validation.
+     * Must be defined on subclass.
+     */
+    static inputSchema;
+    /**
+     * Resolves the API endpoint for this command.
+     * Default is DSL endpoint; override for special endpoints.
+     */
+    resolveEndpoint() {
+        return "/api/dsl/v2";
+    }
+}
+//# sourceMappingURL=command.js.map

package/dist/client/command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.js","sourceRoot":"","sources":["../../src/client/command.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,OAAgB,OAAO;IAC3B;;;OAGG;IACH,MAAM,CAAU,WAAW,CAAqB;IAahD;;;OAGG;IACH,eAAe;QACb,OAAO,aAAa,CAAC;IACvB,CAAC;CAOF"}

package/dist/client/config/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Configuration schemas and loaders.
+ * @module core/config
+ */
+export { loadConfig, loadConfigFile } from "./loader.js";
+export type { DslConfig } from "./schemas.js";
+export { DslConfigSchema, RawConfigFileSchema } from "./schemas.js";
+export type { ConfigLoaderOptions, ConfigResult, RawConfigFile } from "./types.js";
+export type { DimensionsConfigFile, LoadDimensionsConfigOptions } from "./unified-loader.js";
+export { DimensionsConfigFileSchema, loadDimensionsConfig, loadServiceConfig, } from "./unified-loader.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/client/config/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/client/config/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACzD,YAAY,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACpE,YAAY,EAAE,mBAAmB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACnF,YAAY,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAC7F,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,qBAAqB,CAAC"}

package/dist/client/config/index.js

@@ -0,0 +1,8 @@
+/**
+ * Configuration schemas and loaders.
+ * @module core/config
+ */
+export { loadConfig, loadConfigFile } from "./loader.js";
+export { DslConfigSchema, RawConfigFileSchema } from "./schemas.js";
+export { DimensionsConfigFileSchema, loadDimensionsConfig, loadServiceConfig, } from "./unified-loader.js";
+//# sourceMappingURL=index.js.map

package/dist/client/config/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/client/config/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAGpE,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,qBAAqB,CAAC"}

package/dist/client/config/loader.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Configuration file loader with environment variable support.
+ * @module core/config/loader
+ */
+import type { z } from "zod";
+import type { ConfigLoaderOptions, ConfigResult, RawConfigFile } from "./types.js";
+/**
+ * Loads and parses a JSON config file.
+ * @param filePath - Path to the config file
+ * @returns Parsed config object, or undefined if file not found
+ * @throws Error if file exists but cannot be parsed
+ */
+export declare function loadConfigFile(filePath: string): Promise<RawConfigFile | undefined>;
+/**
+ * Loads configuration with priority:
+ * 1. Explicit configPath
+ * 2. Environment variables (DIMENSIONS_{SERVICE}_{KEY})
+ * 3. .dimensions.config.json in cwd
+ * 4. .dimensions.config.json in home directory
+ *
+ * @param options - Loader options (service is required to extract config from file)
+ * @param schema - Zod schema for validation
+ * @returns Config result with source, or undefined if not found or service not specified
+ * @throws ValidationError if config fails schema validation
+ */
+export declare function loadConfig<T>(options: ConfigLoaderOptions, schema: z.ZodSchema<T>): Promise<ConfigResult<T> | undefined>;
+//# sourceMappingURL=loader.d.ts.map

package/dist/client/config/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../../src/client/config/loader.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAG7B,OAAO,KAAK,EAAE,mBAAmB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAcnF;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAezF;AA2BD;;;;;;;;;;;GAWG;AACH,wBAAsB,UAAU,CAAC,CAAC,EAChC,OAAO,EAAE,mBAAmB,EAC5B,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GACrB,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CA2CtC"}