@frontmcp/auth 0.12.2 → 1.0.0-beta.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (48) hide show
  1. package/cimd/cimd.cache.d.ts +0 -5
  2. package/cimd/cimd.cache.d.ts.map +1 -1
  3. package/cimd/index.d.ts +1 -2
  4. package/cimd/index.d.ts.map +1 -1
  5. package/consent/index.d.ts +2 -1
  6. package/consent/index.d.ts.map +1 -1
  7. package/detection/auth-provider-detection.d.ts +4 -2
  8. package/detection/auth-provider-detection.d.ts.map +1 -1
  9. package/esm/index.mjs +674 -768
  10. package/esm/package.json +4 -4
  11. package/index.d.ts +3 -3
  12. package/index.d.ts.map +1 -1
  13. package/index.js +746 -858
  14. package/jwks/index.d.ts +1 -12
  15. package/jwks/index.d.ts.map +1 -1
  16. package/jwks/jwks.service.d.ts +1 -6
  17. package/jwks/jwks.service.d.ts.map +1 -1
  18. package/jwks/jwks.types.d.ts +0 -7
  19. package/jwks/jwks.types.d.ts.map +1 -1
  20. package/machine-id/machine-id.d.ts.map +1 -1
  21. package/options/app-auth.schema.d.ts +29 -37
  22. package/options/app-auth.schema.d.ts.map +1 -1
  23. package/options/index.d.ts +6 -6
  24. package/options/index.d.ts.map +1 -1
  25. package/options/interfaces.d.ts +72 -32
  26. package/options/interfaces.d.ts.map +1 -1
  27. package/options/orchestrated.schema.d.ts +55 -56
  28. package/options/orchestrated.schema.d.ts.map +1 -1
  29. package/options/public.schema.d.ts +2 -1
  30. package/options/public.schema.d.ts.map +1 -1
  31. package/options/schema.d.ts +36 -39
  32. package/options/schema.d.ts.map +1 -1
  33. package/options/shared.schemas.d.ts +61 -9
  34. package/options/shared.schemas.d.ts.map +1 -1
  35. package/options/transparent.schema.d.ts +17 -16
  36. package/options/transparent.schema.d.ts.map +1 -1
  37. package/options/typecheck.d.ts.map +1 -1
  38. package/options/utils.d.ts +16 -7
  39. package/options/utils.d.ts.map +1 -1
  40. package/package.json +4 -4
  41. package/session/session-crypto.d.ts.map +1 -1
  42. package/session/session.transport.d.ts +3 -4
  43. package/session/session.transport.d.ts.map +1 -1
  44. package/session/transport-session.types.d.ts +3 -0
  45. package/session/transport-session.types.d.ts.map +1 -1
  46. package/session/utils/session-crypto.utils.d.ts.map +1 -1
  47. package/jwks/dev-key-persistence.d.ts +0 -70
  48. package/jwks/dev-key-persistence.d.ts.map +0 -1
package/options/orchestrated.schema.d.ts CHANGED
@@ -1,5 +1,6 @@
1
1
  import { z } from 'zod';
2
- export declare const orchestratedLocalSchema: z.ZodObject<{
2
+ import type { LocalAuthOptionsInterface, RemoteAuthOptionsInterface } from './interfaces';
3
+ export declare const localAuthSchema: z.ZodObject<{
3
4
  local: z.ZodOptional<z.ZodObject<{
4
5
  signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
5
6
  jwks: z.ZodOptional<z.ZodObject<{
@@ -7,11 +8,8 @@ export declare const orchestratedLocalSchema: z.ZodObject<{
7
8
  }, z.core.$strip>>;
8
9
  issuer: z.ZodOptional<z.ZodString>;
9
10
  }, z.core.$strip>>;
10
- tokenStorage: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
11
- type: z.ZodLiteral<"memory">;
12
- }, z.core.$strip>, z.ZodObject<{
13
- type: z.ZodLiteral<"redis">;
14
- config: z.ZodObject<{
11
+ tokenStorage: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"memory">, z.ZodObject<{
12
+ redis: z.ZodObject<{
15
13
  host: z.ZodString;
16
14
  port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
17
15
  password: z.ZodOptional<z.ZodString>;
@@ -20,7 +18,7 @@ export declare const orchestratedLocalSchema: z.ZodObject<{
20
18
  keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
21
19
  defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
22
20
  }, z.core.$strip>;
23
- }, z.core.$strip>], "type">>;
21
+ }, z.core.$strip>]>>;
24
22
  allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
25
23
  anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
26
24
  publicAccess: z.ZodOptional<z.ZodObject<{
@@ -97,10 +95,9 @@ export declare const orchestratedLocalSchema: z.ZodObject<{
97
95
  maxRedirects: z.ZodDefault<z.ZodNumber>;
98
96
  }, z.core.$strip>>;
99
97
  }, z.core.$strip>>;
100
- mode: z.ZodLiteral<"orchestrated">;
101
- type: z.ZodLiteral<"local">;
98
+ mode: z.ZodLiteral<"local">;
102
99
  }, z.core.$strip>;
103
- export declare const orchestratedRemoteSchema: z.ZodObject<{
100
+ export declare const remoteAuthSchema: z.ZodObject<{
104
101
  local: z.ZodOptional<z.ZodObject<{
105
102
  signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
106
103
  jwks: z.ZodOptional<z.ZodObject<{
@@ -108,11 +105,8 @@ export declare const orchestratedRemoteSchema: z.ZodObject<{
108
105
  }, z.core.$strip>>;
109
106
  issuer: z.ZodOptional<z.ZodString>;
110
107
  }, z.core.$strip>>;
111
- tokenStorage: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
112
- type: z.ZodLiteral<"memory">;
113
- }, z.core.$strip>, z.ZodObject<{
114
- type: z.ZodLiteral<"redis">;
115
- config: z.ZodObject<{
108
+ tokenStorage: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"memory">, z.ZodObject<{
109
+ redis: z.ZodObject<{
116
110
  host: z.ZodString;
117
111
  port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
118
112
  password: z.ZodOptional<z.ZodString>;
@@ -121,7 +115,7 @@ export declare const orchestratedRemoteSchema: z.ZodObject<{
121
115
  keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
122
116
  defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
123
117
  }, z.core.$strip>;
124
- }, z.core.$strip>], "type">>;
118
+ }, z.core.$strip>]>>;
125
119
  allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
126
120
  anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
127
121
  publicAccess: z.ZodOptional<z.ZodObject<{
@@ -198,27 +192,33 @@ export declare const orchestratedRemoteSchema: z.ZodObject<{
198
192
  maxRedirects: z.ZodDefault<z.ZodNumber>;
199
193
  }, z.core.$strip>>;
200
194
  }, z.core.$strip>>;
201
- mode: z.ZodLiteral<"orchestrated">;
202
- type: z.ZodLiteral<"remote">;
203
- remote: z.ZodObject<{
204
- provider: z.ZodString;
195
+ provider: z.ZodString;
196
+ clientId: z.ZodOptional<z.ZodString>;
197
+ clientSecret: z.ZodOptional<z.ZodString>;
198
+ scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
199
+ providerConfig: z.ZodOptional<z.ZodObject<{
205
200
  name: z.ZodOptional<z.ZodString>;
206
201
  id: z.ZodOptional<z.ZodString>;
207
202
  jwks: z.ZodOptional<z.ZodObject<{
208
203
  keys: z.ZodArray<z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>>;
209
204
  }, z.core.$strip>>;
210
205
  jwksUri: z.ZodOptional<z.ZodString>;
211
- clientId: z.ZodOptional<z.ZodString>;
212
- clientSecret: z.ZodOptional<z.ZodString>;
213
- scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
214
206
  dcrEnabled: z.ZodDefault<z.ZodBoolean>;
215
207
  authEndpoint: z.ZodOptional<z.ZodString>;
216
208
  tokenEndpoint: z.ZodOptional<z.ZodString>;
217
209
  registrationEndpoint: z.ZodOptional<z.ZodString>;
218
210
  userInfoEndpoint: z.ZodOptional<z.ZodString>;
219
- }, z.core.$strip>;
211
+ }, z.core.$strip>>;
212
+ mode: z.ZodLiteral<"remote">;
220
213
  }, z.core.$strip>;
221
- export declare const orchestratedAuthOptionsSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
214
+ export type LocalAuthOptions = z.infer<typeof localAuthSchema>;
215
+ export type LocalAuthOptionsInput = LocalAuthOptionsInterface;
216
+ export type RemoteAuthOptions = z.infer<typeof remoteAuthSchema>;
217
+ export type RemoteAuthOptionsInput = RemoteAuthOptionsInterface;
218
+ export type LocalOrRemoteAuthOptions = LocalAuthOptions | RemoteAuthOptions;
219
+ export type LocalOrRemoteAuthOptionsInput = LocalAuthOptionsInput | RemoteAuthOptionsInput;
220
+ /** @deprecated Use localAuthSchema */
221
+ export declare const orchestratedLocalSchema: z.ZodObject<{
222
222
  local: z.ZodOptional<z.ZodObject<{
223
223
  signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
224
224
  jwks: z.ZodOptional<z.ZodObject<{
@@ -226,11 +226,8 @@ export declare const orchestratedAuthOptionsSchema: z.ZodDiscriminatedUnion<[z.Z
226
226
  }, z.core.$strip>>;
227
227
  issuer: z.ZodOptional<z.ZodString>;
228
228
  }, z.core.$strip>>;
229
- tokenStorage: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
230
- type: z.ZodLiteral<"memory">;
231
- }, z.core.$strip>, z.ZodObject<{
232
- type: z.ZodLiteral<"redis">;
233
- config: z.ZodObject<{
229
+ tokenStorage: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"memory">, z.ZodObject<{
230
+ redis: z.ZodObject<{
234
231
  host: z.ZodString;
235
232
  port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
236
233
  password: z.ZodOptional<z.ZodString>;
@@ -239,7 +236,7 @@ export declare const orchestratedAuthOptionsSchema: z.ZodDiscriminatedUnion<[z.Z
239
236
  keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
240
237
  defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
241
238
  }, z.core.$strip>;
242
- }, z.core.$strip>], "type">>;
239
+ }, z.core.$strip>]>>;
243
240
  allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
244
241
  anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
245
242
  publicAccess: z.ZodOptional<z.ZodObject<{
@@ -316,9 +313,10 @@ export declare const orchestratedAuthOptionsSchema: z.ZodDiscriminatedUnion<[z.Z
316
313
  maxRedirects: z.ZodDefault<z.ZodNumber>;
317
314
  }, z.core.$strip>>;
318
315
  }, z.core.$strip>>;
319
- mode: z.ZodLiteral<"orchestrated">;
320
- type: z.ZodLiteral<"local">;
321
- }, z.core.$strip>, z.ZodObject<{
316
+ mode: z.ZodLiteral<"local">;
317
+ }, z.core.$strip>;
318
+ /** @deprecated Use remoteAuthSchema */
319
+ export declare const orchestratedRemoteSchema: z.ZodObject<{
322
320
  local: z.ZodOptional<z.ZodObject<{
323
321
  signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
324
322
  jwks: z.ZodOptional<z.ZodObject<{
@@ -326,11 +324,8 @@ export declare const orchestratedAuthOptionsSchema: z.ZodDiscriminatedUnion<[z.Z
326
324
  }, z.core.$strip>>;
327
325
  issuer: z.ZodOptional<z.ZodString>;
328
326
  }, z.core.$strip>>;
329
- tokenStorage: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
330
- type: z.ZodLiteral<"memory">;
331
- }, z.core.$strip>, z.ZodObject<{
332
- type: z.ZodLiteral<"redis">;
333
- config: z.ZodObject<{
327
+ tokenStorage: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"memory">, z.ZodObject<{
328
+ redis: z.ZodObject<{
334
329
  host: z.ZodString;
335
330
  port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
336
331
  password: z.ZodOptional<z.ZodString>;
@@ -339,7 +334,7 @@ export declare const orchestratedAuthOptionsSchema: z.ZodDiscriminatedUnion<[z.Z
339
334
  keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
340
335
  defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
341
336
  }, z.core.$strip>;
342
- }, z.core.$strip>], "type">>;
337
+ }, z.core.$strip>]>>;
343
338
  allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
344
339
  anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
345
340
  publicAccess: z.ZodOptional<z.ZodObject<{
@@ -416,31 +411,35 @@ export declare const orchestratedAuthOptionsSchema: z.ZodDiscriminatedUnion<[z.Z
416
411
  maxRedirects: z.ZodDefault<z.ZodNumber>;
417
412
  }, z.core.$strip>>;
418
413
  }, z.core.$strip>>;
419
- mode: z.ZodLiteral<"orchestrated">;
420
- type: z.ZodLiteral<"remote">;
421
- remote: z.ZodObject<{
422
- provider: z.ZodString;
414
+ provider: z.ZodString;
415
+ clientId: z.ZodOptional<z.ZodString>;
416
+ clientSecret: z.ZodOptional<z.ZodString>;
417
+ scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
418
+ providerConfig: z.ZodOptional<z.ZodObject<{
423
419
  name: z.ZodOptional<z.ZodString>;
424
420
  id: z.ZodOptional<z.ZodString>;
425
421
  jwks: z.ZodOptional<z.ZodObject<{
426
422
  keys: z.ZodArray<z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>>;
427
423
  }, z.core.$strip>>;
428
424
  jwksUri: z.ZodOptional<z.ZodString>;
429
- clientId: z.ZodOptional<z.ZodString>;
430
- clientSecret: z.ZodOptional<z.ZodString>;
431
- scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
432
425
  dcrEnabled: z.ZodDefault<z.ZodBoolean>;
433
426
  authEndpoint: z.ZodOptional<z.ZodString>;
434
427
  tokenEndpoint: z.ZodOptional<z.ZodString>;
435
428
  registrationEndpoint: z.ZodOptional<z.ZodString>;
436
429
  userInfoEndpoint: z.ZodOptional<z.ZodString>;
437
- }, z.core.$strip>;
438
- }, z.core.$strip>], "type">;
439
- export type OrchestratedLocalOptions = z.infer<typeof orchestratedLocalSchema>;
440
- export type OrchestratedLocalOptionsInput = z.input<typeof orchestratedLocalSchema>;
441
- export type OrchestratedRemoteOptions = z.infer<typeof orchestratedRemoteSchema>;
442
- export type OrchestratedRemoteOptionsInput = z.input<typeof orchestratedRemoteSchema>;
443
- export type OrchestratedAuthOptions = z.infer<typeof orchestratedAuthOptionsSchema>;
444
- export type OrchestratedAuthOptionsInput = z.input<typeof orchestratedAuthOptionsSchema>;
445
- export type OrchestratedType = 'local' | 'remote';
430
+ }, z.core.$strip>>;
431
+ mode: z.ZodLiteral<"remote">;
432
+ }, z.core.$strip>;
433
+ /** @deprecated Use LocalAuthOptions */
434
+ export type OrchestratedLocalOptions = LocalAuthOptions;
435
+ /** @deprecated Use LocalAuthOptionsInput */
436
+ export type OrchestratedLocalOptionsInput = LocalAuthOptionsInput;
437
+ /** @deprecated Use RemoteAuthOptions */
438
+ export type OrchestratedRemoteOptions = RemoteAuthOptions;
439
+ /** @deprecated Use RemoteAuthOptionsInput */
440
+ export type OrchestratedRemoteOptionsInput = RemoteAuthOptionsInput;
441
+ /** @deprecated Use LocalOrRemoteAuthOptions */
442
+ export type OrchestratedAuthOptions = LocalOrRemoteAuthOptions;
443
+ /** @deprecated Use LocalOrRemoteAuthOptionsInput */
444
+ export type OrchestratedAuthOptionsInput = LocalOrRemoteAuthOptionsInput;
446
445
  //# sourceMappingURL=orchestrated.schema.d.ts.map
package/options/orchestrated.schema.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"orchestrated.schema.d.ts","sourceRoot":"","sources":["../../src/options/orchestrated.schema.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAoCxB,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAIlC,CAAC;AAMH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAKnC,CAAC;AAMH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAGxC,CAAC;AAMH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAC/E,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEpF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AACjF,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEtF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACpF,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEzF,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,QAAQ,CAAC"}
1
+ {"version":3,"file":"orchestrated.schema.d.ts","sourceRoot":"","sources":["../../src/options/orchestrated.schema.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAaxB,OAAO,KAAK,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAyB1F,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAGuB,CAAC;AAMpD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAIuB,CAAC;AAMrD,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAC/D,MAAM,MAAM,qBAAqB,GAAG,yBAAyB,CAAC;AAE9D,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AACjE,MAAM,MAAM,sBAAsB,GAAG,0BAA0B,CAAC;AAGhE,MAAM,MAAM,wBAAwB,GAAG,gBAAgB,GAAG,iBAAiB,CAAC;AAC5E,MAAM,MAAM,6BAA6B,GAAG,qBAAqB,GAAG,sBAAsB,CAAC;AAO3F,sCAAsC;AACtC,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAkB,CAAC;AACvD,uCAAuC;AACvC,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAmB,CAAC;AAEzD,uCAAuC;AACvC,MAAM,MAAM,wBAAwB,GAAG,gBAAgB,CAAC;AACxD,4CAA4C;AAC5C,MAAM,MAAM,6BAA6B,GAAG,qBAAqB,CAAC;AAElE,wCAAwC;AACxC,MAAM,MAAM,yBAAyB,GAAG,iBAAiB,CAAC;AAC1D,6CAA6C;AAC7C,MAAM,MAAM,8BAA8B,GAAG,sBAAsB,CAAC;AAEpE,+CAA+C;AAC/C,MAAM,MAAM,uBAAuB,GAAG,wBAAwB,CAAC;AAC/D,oDAAoD;AACpD,MAAM,MAAM,4BAA4B,GAAG,6BAA6B,CAAC"}
package/options/public.schema.d.ts CHANGED
@@ -1,4 +1,5 @@
1
1
  import { z } from 'zod';
2
+ import type { PublicAuthOptionsInterface } from './interfaces';
2
3
  export declare const publicAuthOptionsSchema: z.ZodObject<{
3
4
  mode: z.ZodLiteral<"public">;
4
5
  issuer: z.ZodOptional<z.ZodString>;
@@ -15,5 +16,5 @@ export declare const publicAuthOptionsSchema: z.ZodObject<{
15
16
  signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("../common/jwt.types").JWK, unknown, z.core.$ZodTypeInternals<import("../common/jwt.types").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
16
17
  }, z.core.$strip>;
17
18
  export type PublicAuthOptions = z.infer<typeof publicAuthOptionsSchema>;
18
- export type PublicAuthOptionsInput = z.input<typeof publicAuthOptionsSchema>;
19
+ export type PublicAuthOptionsInput = PublicAuthOptionsInterface;
19
20
  //# sourceMappingURL=public.schema.d.ts.map
package/options/public.schema.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"public.schema.d.ts","sourceRoot":"","sources":["../../src/options/public.schema.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;iBAqClC,CAAC;AAMH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC"}
1
+ {"version":3,"file":"public.schema.d.ts","sourceRoot":"","sources":["../../src/options/public.schema.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAO/D,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;iBAqCgB,CAAC;AAMrD,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,sBAAsB,GAAG,0BAA0B,CAAC"}
package/options/schema.d.ts CHANGED
@@ -1,4 +1,5 @@
1
1
  import { z } from 'zod';
2
+ import type { AuthOptionsInterface } from './interfaces';
2
3
  export declare const authOptionsSchema: z.ZodUnion<readonly [z.ZodObject<{
3
4
  mode: z.ZodLiteral<"public">;
4
5
  issuer: z.ZodOptional<z.ZodString>;
@@ -14,33 +15,33 @@ export declare const authOptionsSchema: z.ZodUnion<readonly [z.ZodObject<{
14
15
  }, z.core.$strip>>;
15
16
  signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
16
17
  }, z.core.$strip>, z.ZodObject<{
17
- mode: z.ZodLiteral<"transparent">;
18
- remote: z.ZodObject<{
19
- provider: z.ZodString;
18
+ expectedAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
19
+ requiredScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
20
+ allowAnonymous: z.ZodDefault<z.ZodBoolean>;
21
+ anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
22
+ publicAccess: z.ZodOptional<z.ZodObject<{
23
+ tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
24
+ prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
25
+ rateLimit: z.ZodDefault<z.ZodNumber>;
26
+ }, z.core.$strip>>;
27
+ provider: z.ZodString;
28
+ clientId: z.ZodOptional<z.ZodString>;
29
+ clientSecret: z.ZodOptional<z.ZodString>;
30
+ scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
31
+ providerConfig: z.ZodOptional<z.ZodObject<{
20
32
  name: z.ZodOptional<z.ZodString>;
21
33
  id: z.ZodOptional<z.ZodString>;
22
34
  jwks: z.ZodOptional<z.ZodObject<{
23
35
  keys: z.ZodArray<z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>>;
24
36
  }, z.core.$strip>>;
25
37
  jwksUri: z.ZodOptional<z.ZodString>;
26
- clientId: z.ZodOptional<z.ZodString>;
27
- clientSecret: z.ZodOptional<z.ZodString>;
28
- scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
29
38
  dcrEnabled: z.ZodDefault<z.ZodBoolean>;
30
39
  authEndpoint: z.ZodOptional<z.ZodString>;
31
40
  tokenEndpoint: z.ZodOptional<z.ZodString>;
32
41
  registrationEndpoint: z.ZodOptional<z.ZodString>;
33
42
  userInfoEndpoint: z.ZodOptional<z.ZodString>;
34
- }, z.core.$strip>;
35
- expectedAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
36
- requiredScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
37
- allowAnonymous: z.ZodDefault<z.ZodBoolean>;
38
- anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
39
- publicAccess: z.ZodOptional<z.ZodObject<{
40
- tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
41
- prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
42
- rateLimit: z.ZodDefault<z.ZodNumber>;
43
43
  }, z.core.$strip>>;
44
+ mode: z.ZodLiteral<"transparent">;
44
45
  }, z.core.$strip>, z.ZodObject<{
45
46
  local: z.ZodOptional<z.ZodObject<{
46
47
  signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
@@ -49,11 +50,8 @@ export declare const authOptionsSchema: z.ZodUnion<readonly [z.ZodObject<{
49
50
  }, z.core.$strip>>;
50
51
  issuer: z.ZodOptional<z.ZodString>;
51
52
  }, z.core.$strip>>;
52
- tokenStorage: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
53
- type: z.ZodLiteral<"memory">;
54
- }, z.core.$strip>, z.ZodObject<{
55
- type: z.ZodLiteral<"redis">;
56
- config: z.ZodObject<{
53
+ tokenStorage: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"memory">, z.ZodObject<{
54
+ redis: z.ZodObject<{
57
55
  host: z.ZodString;
58
56
  port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
59
57
  password: z.ZodOptional<z.ZodString>;
@@ -62,7 +60,7 @@ export declare const authOptionsSchema: z.ZodUnion<readonly [z.ZodObject<{
62
60
  keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
63
61
  defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
64
62
  }, z.core.$strip>;
65
- }, z.core.$strip>], "type">>;
63
+ }, z.core.$strip>]>>;
66
64
  allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
67
65
  anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
68
66
  publicAccess: z.ZodOptional<z.ZodObject<{
@@ -139,8 +137,7 @@ export declare const authOptionsSchema: z.ZodUnion<readonly [z.ZodObject<{
139
137
  maxRedirects: z.ZodDefault<z.ZodNumber>;
140
138
  }, z.core.$strip>>;
141
139
  }, z.core.$strip>>;
142
- mode: z.ZodLiteral<"orchestrated">;
143
- type: z.ZodLiteral<"local">;
140
+ mode: z.ZodLiteral<"local">;
144
141
  }, z.core.$strip>, z.ZodObject<{
145
142
  local: z.ZodOptional<z.ZodObject<{
146
143
  signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
@@ -149,11 +146,8 @@ export declare const authOptionsSchema: z.ZodUnion<readonly [z.ZodObject<{
149
146
  }, z.core.$strip>>;
150
147
  issuer: z.ZodOptional<z.ZodString>;
151
148
  }, z.core.$strip>>;
152
- tokenStorage: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
153
- type: z.ZodLiteral<"memory">;
154
- }, z.core.$strip>, z.ZodObject<{
155
- type: z.ZodLiteral<"redis">;
156
- config: z.ZodObject<{
149
+ tokenStorage: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"memory">, z.ZodObject<{
150
+ redis: z.ZodObject<{
157
151
  host: z.ZodString;
158
152
  port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
159
153
  password: z.ZodOptional<z.ZodString>;
@@ -162,7 +156,7 @@ export declare const authOptionsSchema: z.ZodUnion<readonly [z.ZodObject<{
162
156
  keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
163
157
  defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
164
158
  }, z.core.$strip>;
165
- }, z.core.$strip>], "type">>;
159
+ }, z.core.$strip>]>>;
166
160
  allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
167
161
  anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
168
162
  publicAccess: z.ZodOptional<z.ZodObject<{
@@ -239,27 +233,30 @@ export declare const authOptionsSchema: z.ZodUnion<readonly [z.ZodObject<{
239
233
  maxRedirects: z.ZodDefault<z.ZodNumber>;
240
234
  }, z.core.$strip>>;
241
235
  }, z.core.$strip>>;
242
- mode: z.ZodLiteral<"orchestrated">;
243
- type: z.ZodLiteral<"remote">;
244
- remote: z.ZodObject<{
245
- provider: z.ZodString;
236
+ provider: z.ZodString;
237
+ clientId: z.ZodOptional<z.ZodString>;
238
+ clientSecret: z.ZodOptional<z.ZodString>;
239
+ scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
240
+ providerConfig: z.ZodOptional<z.ZodObject<{
246
241
  name: z.ZodOptional<z.ZodString>;
247
242
  id: z.ZodOptional<z.ZodString>;
248
243
  jwks: z.ZodOptional<z.ZodObject<{
249
244
  keys: z.ZodArray<z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>>;
250
245
  }, z.core.$strip>>;
251
246
  jwksUri: z.ZodOptional<z.ZodString>;
252
- clientId: z.ZodOptional<z.ZodString>;
253
- clientSecret: z.ZodOptional<z.ZodString>;
254
- scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
255
247
  dcrEnabled: z.ZodDefault<z.ZodBoolean>;
256
248
  authEndpoint: z.ZodOptional<z.ZodString>;
257
249
  tokenEndpoint: z.ZodOptional<z.ZodString>;
258
250
  registrationEndpoint: z.ZodOptional<z.ZodString>;
259
251
  userInfoEndpoint: z.ZodOptional<z.ZodString>;
260
- }, z.core.$strip>;
252
+ }, z.core.$strip>>;
253
+ mode: z.ZodLiteral<"remote">;
261
254
  }, z.core.$strip>]>;
262
255
  export type AuthOptions = z.infer<typeof authOptionsSchema>;
263
- export type AuthOptionsInput = z.input<typeof authOptionsSchema>;
264
- export type AuthMode = 'public' | 'transparent' | 'orchestrated';
256
+ /**
257
+ * Auth options input type (for user configuration).
258
+ * Uses explicit interface for better IDE autocomplete.
259
+ */
260
+ export type AuthOptionsInput = AuthOptionsInterface;
261
+ export type AuthMode = 'public' | 'transparent' | 'local' | 'remote';
265
262
  //# sourceMappingURL=schema.d.ts.map
package/options/schema.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/options/schema.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAK5B,CAAC;AAMH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AACjE,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,aAAa,GAAG,cAAc,CAAC"}
1
+ {"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/options/schema.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAMzD,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAK5B,CAAC;AAMH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AACpD,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,aAAa,GAAG,OAAO,GAAG,QAAQ,CAAC"}
package/options/shared.schemas.d.ts CHANGED
@@ -11,7 +11,7 @@ export declare const publicAccessConfigSchema: z.ZodObject<{
11
11
  export type PublicAccessConfig = z.infer<typeof publicAccessConfigSchema>;
12
12
  export type PublicAccessConfigInput = z.input<typeof publicAccessConfigSchema>;
13
13
  /**
14
- * Local signing configuration (for orchestrated local type)
14
+ * Local signing configuration (for local auth mode)
15
15
  */
16
16
  export declare const localSigningConfigSchema: z.ZodObject<{
17
17
  signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("../common/jwt.types").JWK, unknown, z.core.$ZodTypeInternals<import("../common/jwt.types").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
@@ -23,7 +23,27 @@ export declare const localSigningConfigSchema: z.ZodObject<{
23
23
  export type LocalSigningConfig = z.infer<typeof localSigningConfigSchema>;
24
24
  export type LocalSigningConfigInput = z.input<typeof localSigningConfigSchema>;
25
25
  /**
26
- * Remote OAuth provider configuration (for orchestrated remote and transparent)
26
+ * Advanced provider configuration options.
27
+ * These are less commonly used and are grouped into an optional sub-object.
28
+ */
29
+ export declare const providerConfigSchema: z.ZodObject<{
30
+ name: z.ZodOptional<z.ZodString>;
31
+ id: z.ZodOptional<z.ZodString>;
32
+ jwks: z.ZodOptional<z.ZodObject<{
33
+ keys: z.ZodArray<z.ZodType<import("../common/jwt.types").JWK, unknown, z.core.$ZodTypeInternals<import("../common/jwt.types").JWK, unknown>>>;
34
+ }, z.core.$strip>>;
35
+ jwksUri: z.ZodOptional<z.ZodString>;
36
+ dcrEnabled: z.ZodDefault<z.ZodBoolean>;
37
+ authEndpoint: z.ZodOptional<z.ZodString>;
38
+ tokenEndpoint: z.ZodOptional<z.ZodString>;
39
+ registrationEndpoint: z.ZodOptional<z.ZodString>;
40
+ userInfoEndpoint: z.ZodOptional<z.ZodString>;
41
+ }, z.core.$strip>;
42
+ export type ProviderConfig = z.infer<typeof providerConfigSchema>;
43
+ export type ProviderConfigInput = z.input<typeof providerConfigSchema>;
44
+ /**
45
+ * Remote OAuth provider configuration (internal, full flat shape)
46
+ * Used internally after flattening for compatibility.
27
47
  */
28
48
  export declare const remoteProviderConfigSchema: z.ZodObject<{
29
49
  provider: z.ZodString;
@@ -45,13 +65,45 @@ export declare const remoteProviderConfigSchema: z.ZodObject<{
45
65
  export type RemoteProviderConfig = z.infer<typeof remoteProviderConfigSchema>;
46
66
  export type RemoteProviderConfigInput = z.input<typeof remoteProviderConfigSchema>;
47
67
  /**
48
- * Token storage configuration for orchestrated mode
68
+ * Flattened remote provider fields for top-level use in auth schemas.
69
+ * Basic fields (provider, clientId, clientSecret, scopes) are at top level.
70
+ * Advanced fields are in the optional providerConfig sub-object.
71
+ */
72
+ export declare const flatRemoteProviderFields: {
73
+ /**
74
+ * OAuth provider base URL (required)
75
+ * @example 'https://auth.example.com'
76
+ */
77
+ provider: z.ZodString;
78
+ /** Client ID for this MCP server */
79
+ clientId: z.ZodOptional<z.ZodString>;
80
+ /** Client secret (for confidential clients) */
81
+ clientSecret: z.ZodOptional<z.ZodString>;
82
+ /** Scopes to request from the upstream provider */
83
+ scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
84
+ /** Advanced provider configuration */
85
+ providerConfig: z.ZodOptional<z.ZodObject<{
86
+ name: z.ZodOptional<z.ZodString>;
87
+ id: z.ZodOptional<z.ZodString>;
88
+ jwks: z.ZodOptional<z.ZodObject<{
89
+ keys: z.ZodArray<z.ZodType<import("../common/jwt.types").JWK, unknown, z.core.$ZodTypeInternals<import("../common/jwt.types").JWK, unknown>>>;
90
+ }, z.core.$strip>>;
91
+ jwksUri: z.ZodOptional<z.ZodString>;
92
+ dcrEnabled: z.ZodDefault<z.ZodBoolean>;
93
+ authEndpoint: z.ZodOptional<z.ZodString>;
94
+ tokenEndpoint: z.ZodOptional<z.ZodString>;
95
+ registrationEndpoint: z.ZodOptional<z.ZodString>;
96
+ userInfoEndpoint: z.ZodOptional<z.ZodString>;
97
+ }, z.core.$strip>>;
98
+ };
99
+ /**
100
+ * Token storage configuration for local/remote modes.
101
+ *
102
+ * Simple string 'memory' for in-memory storage,
103
+ * or an object with redis config for Redis storage.
49
104
  */
50
- export declare const tokenStorageConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
51
- type: z.ZodLiteral<"memory">;
52
- }, z.core.$strip>, z.ZodObject<{
53
- type: z.ZodLiteral<"redis">;
54
- config: z.ZodObject<{
105
+ export declare const tokenStorageConfigSchema: z.ZodUnion<readonly [z.ZodLiteral<"memory">, z.ZodObject<{
106
+ redis: z.ZodObject<{
55
107
  host: z.ZodString;
56
108
  port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
57
109
  password: z.ZodOptional<z.ZodString>;
@@ -60,7 +112,7 @@ export declare const tokenStorageConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObj
60
112
  keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
61
113
  defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
62
114
  }, z.core.$strip>;
63
- }, z.core.$strip>], "type">;
115
+ }, z.core.$strip>]>;
64
116
  export type TokenStorageConfig = z.infer<typeof tokenStorageConfigSchema>;
65
117
  export type TokenStorageConfigInput = z.input<typeof tokenStorageConfigSchema>;
66
118
  /**
package/options/shared.schemas.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"shared.schemas.d.ts","sourceRoot":"","sources":["../../src/options/shared.schemas.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAqB,MAAM,oCAAoC,CAAC;AAMpF;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;iBAkBnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAM/E;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;;;iBAkBnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAM/E;;GAEG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;iBAqErC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAMnF;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;2BAGnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAM/E;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;iBAYnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAM/E;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;EAAwC,CAAC;AAE9E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAM1E;;;GAGG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;iBAqD9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAMrE;;GAEG;AACH,eAAO,MAAM,yBAAyB;;;;;iBAQpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAMjF;;;GAGG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;iBA4BtC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAMrF,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,gBAAgB,EAChB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,KAAK,eAAe,GACrB,MAAM,SAAS,CAAC;AAGjB,YAAY,EAAE,WAAW,EAAE,CAAC"}
1
+ {"version":3,"file":"shared.schemas.d.ts","sourceRoot":"","sources":["../../src/options/shared.schemas.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAqB,MAAM,oCAAoC,CAAC;AAMpF;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;iBAkBnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAM/E;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;;;iBAkBnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAM/E;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;iBAoC/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAMvE;;;GAGG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;iBAqErC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAOnF;;;;GAIG;AACH,eAAO,MAAM,wBAAwB;IACnC;;;OAGG;;IAGH,oCAAoC;;IAGpC,+CAA+C;;IAG/C,mDAAmD;;IAGnD,sCAAsC;;;;;;;;;;;;;;CAEvC,CAAC;AAMF;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;mBAAyE,CAAC;AAE/G,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAM/E;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;iBAYnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAM/E;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;EAAwC,CAAC;AAE9E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAM1E;;;GAGG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;iBAqD9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAMrE;;GAEG;AACH,eAAO,MAAM,yBAAyB;;;;;iBAQpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAMjF;;;GAGG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;iBA4BtC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAMrF,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,gBAAgB,EAChB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,KAAK,eAAe,GACrB,MAAM,SAAS,CAAC;AAGjB,YAAY,EAAE,WAAW,EAAE,CAAC"}
package/options/transparent.schema.d.ts CHANGED
@@ -1,33 +1,34 @@
1
1
  import { z } from 'zod';
2
+ import type { TransparentAuthOptionsInterface } from './interfaces';
2
3
  export declare const transparentAuthOptionsSchema: z.ZodObject<{
3
- mode: z.ZodLiteral<"transparent">;
4
- remote: z.ZodObject<{
5
- provider: z.ZodString;
4
+ expectedAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
5
+ requiredScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
6
+ allowAnonymous: z.ZodDefault<z.ZodBoolean>;
7
+ anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
8
+ publicAccess: z.ZodOptional<z.ZodObject<{
9
+ tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
10
+ prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
11
+ rateLimit: z.ZodDefault<z.ZodNumber>;
12
+ }, z.core.$strip>>;
13
+ provider: z.ZodString;
14
+ clientId: z.ZodOptional<z.ZodString>;
15
+ clientSecret: z.ZodOptional<z.ZodString>;
16
+ scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
17
+ providerConfig: z.ZodOptional<z.ZodObject<{
6
18
  name: z.ZodOptional<z.ZodString>;
7
19
  id: z.ZodOptional<z.ZodString>;
8
20
  jwks: z.ZodOptional<z.ZodObject<{
9
21
  keys: z.ZodArray<z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>>;
10
22
  }, z.core.$strip>>;
11
23
  jwksUri: z.ZodOptional<z.ZodString>;
12
- clientId: z.ZodOptional<z.ZodString>;
13
- clientSecret: z.ZodOptional<z.ZodString>;
14
- scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
15
24
  dcrEnabled: z.ZodDefault<z.ZodBoolean>;
16
25
  authEndpoint: z.ZodOptional<z.ZodString>;
17
26
  tokenEndpoint: z.ZodOptional<z.ZodString>;
18
27
  registrationEndpoint: z.ZodOptional<z.ZodString>;
19
28
  userInfoEndpoint: z.ZodOptional<z.ZodString>;
20
- }, z.core.$strip>;
21
- expectedAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
22
- requiredScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
23
- allowAnonymous: z.ZodDefault<z.ZodBoolean>;
24
- anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
25
- publicAccess: z.ZodOptional<z.ZodObject<{
26
- tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
27
- prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
28
- rateLimit: z.ZodDefault<z.ZodNumber>;
29
29
  }, z.core.$strip>>;
30
+ mode: z.ZodLiteral<"transparent">;
30
31
  }, z.core.$strip>;
31
32
  export type TransparentAuthOptions = z.infer<typeof transparentAuthOptionsSchema>;
32
- export type TransparentAuthOptionsInput = z.input<typeof transparentAuthOptionsSchema>;
33
+ export type TransparentAuthOptionsInput = TransparentAuthOptionsInterface;
33
34
  //# sourceMappingURL=transparent.schema.d.ts.map
package/options/transparent.schema.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"transparent.schema.d.ts","sourceRoot":"","sources":["../../src/options/transparent.schema.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAqCvC,CAAC;AAMH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}
1
+ {"version":3,"file":"transparent.schema.d.ts","sourceRoot":"","sources":["../../src/options/transparent.schema.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,cAAc,CAAC;AAOpE,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAqCgB,CAAC;AAM1D,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,2BAA2B,GAAG,+BAA+B,CAAC"}
package/options/typecheck.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"typecheck.d.ts","sourceRoot":"","sources":["../../src/options/typecheck.ts"],"names":[],"mappings":"AA2EA,OAAO,EAAE,CAAC"}
1
+ {"version":3,"file":"typecheck.d.ts","sourceRoot":"","sources":["../../src/options/typecheck.ts"],"names":[],"mappings":"AAgEA,OAAO,EAAE,CAAC"}
package/options/utils.d.ts CHANGED
@@ -1,7 +1,7 @@
1
1
  import { AuthOptions, AuthOptionsInput } from './schema';
2
2
  import { PublicAuthOptions } from './public.schema';
3
3
  import { TransparentAuthOptions } from './transparent.schema';
4
- import { OrchestratedAuthOptions, OrchestratedLocalOptions, OrchestratedRemoteOptions } from './orchestrated.schema';
4
+ import { LocalAuthOptions, RemoteAuthOptions, LocalOrRemoteAuthOptions } from './orchestrated.schema';
5
5
  /**
6
6
  * Parse and validate auth options with defaults
7
7
  */
@@ -15,17 +15,26 @@ export declare function isPublicMode(options: AuthOptions | AuthOptionsInput): o
15
15
  */
16
16
  export declare function isTransparentMode(options: AuthOptions | AuthOptionsInput): options is TransparentAuthOptions;
17
17
  /**
18
- * Check if options are orchestrated mode
18
+ * Check if options are local mode (formerly orchestrated local)
19
19
  */
20
- export declare function isOrchestratedMode(options: AuthOptions | AuthOptionsInput): options is OrchestratedAuthOptions;
20
+ export declare function isLocalMode(options: AuthOptions | AuthOptionsInput): options is LocalAuthOptions;
21
21
  /**
22
- * Check if orchestrated options are local type
22
+ * Check if options are remote mode (formerly orchestrated remote)
23
23
  */
24
- export declare function isOrchestratedLocal(options: OrchestratedAuthOptions): options is OrchestratedLocalOptions;
24
+ export declare function isRemoteMode(options: AuthOptions | AuthOptionsInput): options is RemoteAuthOptions;
25
25
  /**
26
- * Check if orchestrated options are remote type
26
+ * Check if options are orchestrated mode (local or remote).
27
+ * This replaces the old isOrchestratedMode check.
27
28
  */
28
- export declare function isOrchestratedRemote(options: OrchestratedAuthOptions): options is OrchestratedRemoteOptions;
29
+ export declare function isOrchestratedMode(options: AuthOptions | AuthOptionsInput): options is LocalOrRemoteAuthOptions;
30
+ /**
31
+ * Check if local-or-remote options are local type
32
+ */
33
+ export declare function isOrchestratedLocal(options: LocalOrRemoteAuthOptions): options is LocalAuthOptions;
34
+ /**
35
+ * Check if local-or-remote options are remote type
36
+ */
37
+ export declare function isOrchestratedRemote(options: LocalOrRemoteAuthOptions): options is RemoteAuthOptions;
29
38
  /**
30
39
  * Check if options allow public/anonymous access
31
40
  */