@frontmcp/sdk 0.2.3 → 0.3.0

package/src/common/types/options/auth.options.d.ts

@@ -0,0 +1,513 @@
+import { z } from 'zod';
+import { JSONWebKeySet, JWK } from '../auth';
+export type RemoteAuthOptions = {
+    type: 'remote';
+    /**
+     * unique id for the provider
+     */
+    id?: string;
+    /**
+     * human-readable name for the provider
+     */
+    name: string;
+    /**
+     * base url of the provider
+     * if the provider does not support dcr it will be used with local auth provider proxy
+     * to register client dynamically you have to provide client id for the registration flow
+     * @example https://my-company.frontegg.com
+     */
+    baseUrl: string;
+    /**
+     * enable dynamic client registration (DCR) flow, if your provider does not support DCR
+     * you can set this to false and provide clientId for authorization flow, we will use local auth provider proxy
+     * to register a dynamic client with the provided clientId or by called clientId function with client info
+     * by default, the provider will use the registration endpoint to register the client dynamically
+     */
+    dcrEnabled?: boolean;
+    /**
+     * Only used if your auth provider does not support DCR.
+     * for Dcr auth provider the client id acquired by the registration flow
+     */
+    clientId?: string | ((clientInfo: {
+        clientId: string;
+    }) => string);
+    /**
+     * Set default gateway oauth server mode, this will be overridden by discovery flow.
+     * if set to transparent and the discovery flow detect orchestrated mode it will switch to orchestrated mode
+     * @default 'transparent'
+     */
+    mode?: 'orchestrated' | 'transparent';
+    /**
+     * allow anonymous access to the provider
+     * @default false - allowing anonymous access will make the provider to issue an orchestrated token
+     */
+    allowAnonymous?: boolean;
+    /**
+     * allow consent mode to select tools/resource/prompts after authorization
+     * for scoped based access token
+     * @default false - allowing anonymous access will make the provider to issue an orchestrated token
+     */
+    consent?: boolean;
+    /**
+     * scopes for the token endpoint
+     * @default undefined - all scopes supported by th provider
+     */
+    scopes?: string[];
+    /**
+     * authorization provider supported grant types, currently only authorization_code and refresh_token are supported
+     * @default undefined - default is what presented in the /.well-known/oauth-authorization-server
+     */
+    grantTypes?: ('authorization_code' | 'refresh_token')[];
+    /**
+     * authorization endpoint for the provider
+     * @default undefined - default is what presented in the /.well-known/oauth-authorization-server
+     */
+    authEndpoint?: string;
+    /**
+     * token endpoint for the provider
+     * @default undefined - default is what presented in the /.well-known/oauth-authorization-server
+     */
+    tokenEndpoint?: string;
+    /**
+     * registration endpoint for the provider (DCR)
+     * @default undefined - default is what presented in the /.well-known/oauth-authorization-server
+     */
+    registrationEndpoint?: string;
+    /**
+     * user info endpoint for the provider
+     * @default undefined - default is what presented in the /.well-known/oauth-authorization-server
+     */
+    userInfoEndpoint?: string;
+    /**
+     * Inline JWKS for the provider to verify tokens without automatic fetching
+     * @default undefined - default is what presented in the /.well-known/jwks.json
+     */
+    jwks?: JSONWebKeySet;
+    /**
+     * jwks uri for the provider
+     * @default undefined - default is what presented in the /.well-known/oauth-authorization-server
+     */
+    jwksUri?: string;
+};
+export declare const remoteAuthOptionsSchema: z.ZodObject<{
+    type: z.ZodLiteral<"remote">;
+    id: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+    baseUrl: z.ZodString;
+    dcrEnabled: z.ZodOptional<z.ZodBoolean>;
+    clientId: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodFunction<z.ZodTuple<[z.ZodObject<{
+        clientId: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        clientId: string;
+    }, {
+        clientId: string;
+    }>], z.ZodUnknown>, z.ZodString>]>>;
+    mode: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"orchestrated">, z.ZodLiteral<"transparent">]>>;
+    allowAnonymous: z.ZodOptional<z.ZodBoolean>;
+    consent: z.ZodOptional<z.ZodBoolean>;
+    jwks: z.ZodOptional<z.ZodObject<{
+        keys: z.ZodArray<z.ZodType<JWK, z.ZodTypeDef, JWK>, "many">;
+    }, "strip", z.ZodTypeAny, {
+        keys: JWK[];
+    }, {
+        keys: JWK[];
+    }>>;
+    scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    grantTypes: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodLiteral<"authorization_code">, z.ZodLiteral<"refresh_token">]>, "many">>;
+    authEndpoint: z.ZodOptional<z.ZodString>;
+    tokenEndpoint: z.ZodOptional<z.ZodString>;
+    registrationEndpoint: z.ZodOptional<z.ZodString>;
+    userInfoEndpoint: z.ZodOptional<z.ZodString>;
+    jwksUri: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    type: "remote";
+    name: string;
+    baseUrl: string;
+    id?: string | undefined;
+    dcrEnabled?: boolean | undefined;
+    clientId?: string | ((args_0: {
+        clientId: string;
+    }, ...args: unknown[]) => string) | undefined;
+    mode?: "orchestrated" | "transparent" | undefined;
+    allowAnonymous?: boolean | undefined;
+    consent?: boolean | undefined;
+    scopes?: string[] | undefined;
+    grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
+    authEndpoint?: string | undefined;
+    tokenEndpoint?: string | undefined;
+    registrationEndpoint?: string | undefined;
+    userInfoEndpoint?: string | undefined;
+    jwks?: {
+        keys: JWK[];
+    } | undefined;
+    jwksUri?: string | undefined;
+}, {
+    type: "remote";
+    name: string;
+    baseUrl: string;
+    id?: string | undefined;
+    dcrEnabled?: boolean | undefined;
+    clientId?: string | ((args_0: {
+        clientId: string;
+    }, ...args: unknown[]) => string) | undefined;
+    mode?: "orchestrated" | "transparent" | undefined;
+    allowAnonymous?: boolean | undefined;
+    consent?: boolean | undefined;
+    scopes?: string[] | undefined;
+    grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
+    authEndpoint?: string | undefined;
+    tokenEndpoint?: string | undefined;
+    registrationEndpoint?: string | undefined;
+    userInfoEndpoint?: string | undefined;
+    jwks?: {
+        keys: JWK[];
+    } | undefined;
+    jwksUri?: string | undefined;
+}>;
+export type LocalAuthOptions = {
+    type: 'local';
+    /**
+     * unique id for the provider
+     */
+    id: string;
+    /**
+     * human-readable name for the provider
+     */
+    name: string;
+    /**
+     * scopes for the token endpoint
+     * @default undefined - all scopes supported by th provider
+     */
+    scopes?: string[];
+    /**
+     * currently only authorization_code and refresh_token are supported
+     * @default ['authorization_code', 'refresh_token']
+     */
+    grantTypes?: ('authorization_code' | 'refresh_token')[];
+    /**
+     * allow anonymous access to the provider
+     * in this case the provider will act as an authorization server
+     * @default true
+     */
+    allowAnonymous?: boolean;
+    /**
+     * allow consent mode to select tools/resource/prompts after authorization
+     * for scoped based access token
+     * @default false - allowing anonymous access will make the provider to issue an orchestrated token
+     */
+    consent?: boolean;
+    /**
+     * Inline JWKS for the provider to verify tokens for local provider
+     * it will also used in /.well-known/jwks.json
+     * @default undefined - default is auto generated keys and saved in the temp folder
+     */
+    jwks?: JSONWebKeySet;
+    /**
+     * private key signing tokens for local provider
+     * @default undefined - default is auto generated keys and saved in the temp folder
+     */
+    signKey?: JWK | Uint8Array;
+};
+export declare const localAuthOptionsSchema: z.ZodObject<{
+    type: z.ZodLiteral<"local">;
+    id: z.ZodString;
+    name: z.ZodString;
+    scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    grantTypes: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodLiteral<"authorization_code">, z.ZodLiteral<"refresh_token">]>, "many">>;
+    allowAnonymous: z.ZodOptional<z.ZodBoolean>;
+    consent: z.ZodOptional<z.ZodBoolean>;
+    jwks: z.ZodOptional<z.ZodObject<{
+        keys: z.ZodArray<z.ZodType<JWK, z.ZodTypeDef, JWK>, "many">;
+    }, "strip", z.ZodTypeAny, {
+        keys: JWK[];
+    }, {
+        keys: JWK[];
+    }>>;
+    signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<JWK, z.ZodTypeDef, JWK>, z.ZodType<Uint8Array<ArrayBuffer>, z.ZodTypeDef, Uint8Array<ArrayBuffer>>]>>;
+}, "strip", z.ZodTypeAny, {
+    type: "local";
+    id: string;
+    name: string;
+    allowAnonymous?: boolean | undefined;
+    consent?: boolean | undefined;
+    scopes?: string[] | undefined;
+    grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
+    jwks?: {
+        keys: JWK[];
+    } | undefined;
+    signKey?: JWK | Uint8Array<ArrayBuffer> | undefined;
+}, {
+    type: "local";
+    id: string;
+    name: string;
+    allowAnonymous?: boolean | undefined;
+    consent?: boolean | undefined;
+    scopes?: string[] | undefined;
+    grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
+    jwks?: {
+        keys: JWK[];
+    } | undefined;
+    signKey?: JWK | Uint8Array<ArrayBuffer> | undefined;
+}>;
+export declare const authOptionsSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+    type: z.ZodLiteral<"remote">;
+    id: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+    baseUrl: z.ZodString;
+    dcrEnabled: z.ZodOptional<z.ZodBoolean>;
+    clientId: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodFunction<z.ZodTuple<[z.ZodObject<{
+        clientId: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        clientId: string;
+    }, {
+        clientId: string;
+    }>], z.ZodUnknown>, z.ZodString>]>>;
+    mode: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"orchestrated">, z.ZodLiteral<"transparent">]>>;
+    allowAnonymous: z.ZodOptional<z.ZodBoolean>;
+    consent: z.ZodOptional<z.ZodBoolean>;
+    jwks: z.ZodOptional<z.ZodObject<{
+        keys: z.ZodArray<z.ZodType<JWK, z.ZodTypeDef, JWK>, "many">;
+    }, "strip", z.ZodTypeAny, {
+        keys: JWK[];
+    }, {
+        keys: JWK[];
+    }>>;
+    scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    grantTypes: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodLiteral<"authorization_code">, z.ZodLiteral<"refresh_token">]>, "many">>;
+    authEndpoint: z.ZodOptional<z.ZodString>;
+    tokenEndpoint: z.ZodOptional<z.ZodString>;
+    registrationEndpoint: z.ZodOptional<z.ZodString>;
+    userInfoEndpoint: z.ZodOptional<z.ZodString>;
+    jwksUri: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    type: "remote";
+    name: string;
+    baseUrl: string;
+    id?: string | undefined;
+    dcrEnabled?: boolean | undefined;
+    clientId?: string | ((args_0: {
+        clientId: string;
+    }, ...args: unknown[]) => string) | undefined;
+    mode?: "orchestrated" | "transparent" | undefined;
+    allowAnonymous?: boolean | undefined;
+    consent?: boolean | undefined;
+    scopes?: string[] | undefined;
+    grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
+    authEndpoint?: string | undefined;
+    tokenEndpoint?: string | undefined;
+    registrationEndpoint?: string | undefined;
+    userInfoEndpoint?: string | undefined;
+    jwks?: {
+        keys: JWK[];
+    } | undefined;
+    jwksUri?: string | undefined;
+}, {
+    type: "remote";
+    name: string;
+    baseUrl: string;
+    id?: string | undefined;
+    dcrEnabled?: boolean | undefined;
+    clientId?: string | ((args_0: {
+        clientId: string;
+    }, ...args: unknown[]) => string) | undefined;
+    mode?: "orchestrated" | "transparent" | undefined;
+    allowAnonymous?: boolean | undefined;
+    consent?: boolean | undefined;
+    scopes?: string[] | undefined;
+    grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
+    authEndpoint?: string | undefined;
+    tokenEndpoint?: string | undefined;
+    registrationEndpoint?: string | undefined;
+    userInfoEndpoint?: string | undefined;
+    jwks?: {
+        keys: JWK[];
+    } | undefined;
+    jwksUri?: string | undefined;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"local">;
+    id: z.ZodString;
+    name: z.ZodString;
+    scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    grantTypes: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodLiteral<"authorization_code">, z.ZodLiteral<"refresh_token">]>, "many">>;
+    allowAnonymous: z.ZodOptional<z.ZodBoolean>;
+    consent: z.ZodOptional<z.ZodBoolean>;
+    jwks: z.ZodOptional<z.ZodObject<{
+        keys: z.ZodArray<z.ZodType<JWK, z.ZodTypeDef, JWK>, "many">;
+    }, "strip", z.ZodTypeAny, {
+        keys: JWK[];
+    }, {
+        keys: JWK[];
+    }>>;
+    signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<JWK, z.ZodTypeDef, JWK>, z.ZodType<Uint8Array<ArrayBuffer>, z.ZodTypeDef, Uint8Array<ArrayBuffer>>]>>;
+}, "strip", z.ZodTypeAny, {
+    type: "local";
+    id: string;
+    name: string;
+    allowAnonymous?: boolean | undefined;
+    consent?: boolean | undefined;
+    scopes?: string[] | undefined;
+    grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
+    jwks?: {
+        keys: JWK[];
+    } | undefined;
+    signKey?: JWK | Uint8Array<ArrayBuffer> | undefined;
+}, {
+    type: "local";
+    id: string;
+    name: string;
+    allowAnonymous?: boolean | undefined;
+    consent?: boolean | undefined;
+    scopes?: string[] | undefined;
+    grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
+    jwks?: {
+        keys: JWK[];
+    } | undefined;
+    signKey?: JWK | Uint8Array<ArrayBuffer> | undefined;
+}>]>;
+export type AuthOptions = RemoteAuthOptions | LocalAuthOptions;
+type StandaloneOption = {
+    /**
+     * if the provider is standalone or not, if standalone it will register an oauth service provider
+     * on app's entry path, if not standalone it will be registered as a child provider
+     * under the root provider
+     * @default false
+     */
+    standalone?: boolean;
+    /**
+     * if the provider should be excluded from the parent provider's discovery
+     * this used for standalone providers
+     * @default false
+     */
+    excludeFromParent?: boolean;
+};
+export declare const appAuthOptionsSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+    type: z.ZodLiteral<"remote">;
+    id: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+    baseUrl: z.ZodString;
+    dcrEnabled: z.ZodOptional<z.ZodBoolean>;
+    clientId: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodFunction<z.ZodTuple<[z.ZodObject<{
+        clientId: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        clientId: string;
+    }, {
+        clientId: string;
+    }>], z.ZodUnknown>, z.ZodString>]>>;
+    mode: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"orchestrated">, z.ZodLiteral<"transparent">]>>;
+    allowAnonymous: z.ZodOptional<z.ZodBoolean>;
+    consent: z.ZodOptional<z.ZodBoolean>;
+    jwks: z.ZodOptional<z.ZodObject<{
+        keys: z.ZodArray<z.ZodType<JWK, z.ZodTypeDef, JWK>, "many">;
+    }, "strip", z.ZodTypeAny, {
+        keys: JWK[];
+    }, {
+        keys: JWK[];
+    }>>;
+    scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    grantTypes: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodLiteral<"authorization_code">, z.ZodLiteral<"refresh_token">]>, "many">>;
+    authEndpoint: z.ZodOptional<z.ZodString>;
+    tokenEndpoint: z.ZodOptional<z.ZodString>;
+    registrationEndpoint: z.ZodOptional<z.ZodString>;
+    userInfoEndpoint: z.ZodOptional<z.ZodString>;
+    jwksUri: z.ZodOptional<z.ZodString>;
+} & {
+    standalone: z.ZodOptional<z.ZodBoolean>;
+    excludeFromParent: z.ZodOptional<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    type: "remote";
+    name: string;
+    baseUrl: string;
+    id?: string | undefined;
+    standalone?: boolean | undefined;
+    dcrEnabled?: boolean | undefined;
+    clientId?: string | ((args_0: {
+        clientId: string;
+    }, ...args: unknown[]) => string) | undefined;
+    mode?: "orchestrated" | "transparent" | undefined;
+    allowAnonymous?: boolean | undefined;
+    consent?: boolean | undefined;
+    scopes?: string[] | undefined;
+    grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
+    authEndpoint?: string | undefined;
+    tokenEndpoint?: string | undefined;
+    registrationEndpoint?: string | undefined;
+    userInfoEndpoint?: string | undefined;
+    jwks?: {
+        keys: JWK[];
+    } | undefined;
+    jwksUri?: string | undefined;
+    excludeFromParent?: boolean | undefined;
+}, {
+    type: "remote";
+    name: string;
+    baseUrl: string;
+    id?: string | undefined;
+    standalone?: boolean | undefined;
+    dcrEnabled?: boolean | undefined;
+    clientId?: string | ((args_0: {
+        clientId: string;
+    }, ...args: unknown[]) => string) | undefined;
+    mode?: "orchestrated" | "transparent" | undefined;
+    allowAnonymous?: boolean | undefined;
+    consent?: boolean | undefined;
+    scopes?: string[] | undefined;
+    grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
+    authEndpoint?: string | undefined;
+    tokenEndpoint?: string | undefined;
+    registrationEndpoint?: string | undefined;
+    userInfoEndpoint?: string | undefined;
+    jwks?: {
+        keys: JWK[];
+    } | undefined;
+    jwksUri?: string | undefined;
+    excludeFromParent?: boolean | undefined;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"local">;
+    id: z.ZodString;
+    name: z.ZodString;
+    scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    grantTypes: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodLiteral<"authorization_code">, z.ZodLiteral<"refresh_token">]>, "many">>;
+    allowAnonymous: z.ZodOptional<z.ZodBoolean>;
+    consent: z.ZodOptional<z.ZodBoolean>;
+    jwks: z.ZodOptional<z.ZodObject<{
+        keys: z.ZodArray<z.ZodType<JWK, z.ZodTypeDef, JWK>, "many">;
+    }, "strip", z.ZodTypeAny, {
+        keys: JWK[];
+    }, {
+        keys: JWK[];
+    }>>;
+    signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<JWK, z.ZodTypeDef, JWK>, z.ZodType<Uint8Array<ArrayBuffer>, z.ZodTypeDef, Uint8Array<ArrayBuffer>>]>>;
+} & {
+    standalone: z.ZodOptional<z.ZodBoolean>;
+    excludeFromParent: z.ZodOptional<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    type: "local";
+    id: string;
+    name: string;
+    standalone?: boolean | undefined;
+    allowAnonymous?: boolean | undefined;
+    consent?: boolean | undefined;
+    scopes?: string[] | undefined;
+    grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
+    jwks?: {
+        keys: JWK[];
+    } | undefined;
+    signKey?: JWK | Uint8Array<ArrayBuffer> | undefined;
+    excludeFromParent?: boolean | undefined;
+}, {
+    type: "local";
+    id: string;
+    name: string;
+    standalone?: boolean | undefined;
+    allowAnonymous?: boolean | undefined;
+    consent?: boolean | undefined;
+    scopes?: string[] | undefined;
+    grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
+    jwks?: {
+        keys: JWK[];
+    } | undefined;
+    signKey?: JWK | Uint8Array<ArrayBuffer> | undefined;
+    excludeFromParent?: boolean | undefined;
+}>]>;
+export type AppAuthOptions = (RemoteAuthOptions | LocalAuthOptions) & StandaloneOption;
+export {};

package/src/common/types/options/auth.options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.options.js","sourceRoot":"","sources":["../../../../../src/common/types/options/auth.options.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,kCAA6E;AAsGhE,QAAA,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;IACnB,UAAU,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,QAAQ,EAAE,OAAC;SACR,KAAK,CAAC;QACL,OAAC,CAAC,MAAM,EAAE;QACV,OAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;KAAC,CAAC;SAC5E,QAAQ,EAAE;IACb,IAAI,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,OAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/E,cAAc,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,IAAI,EAAE,0BAAmB,CAAC,QAAQ,EAAE;IACpC,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,OAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtG,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,oBAAoB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3C,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACU,CAAC,CAAC;AAwD/B,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,OAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtG,cAAc,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,IAAI,EAAE,0BAAmB,CAAC,QAAQ,EAAE;IACpC,OAAO,EAAE,gBAAS,CAAC,EAAE,CAAC,OAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;CACnB,CAAC,CAAC;AAG9B,QAAA,iBAAiB,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC5D,+BAAuB;IACvB,8BAAsB;CACvB,CAAC,CAAC;AAsBH,MAAM,sBAAsB,GAAG;IAC7B,UAAU,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,iBAAiB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACF,CAAC;AAE7B,QAAA,oBAAoB,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC/D,+BAAuB,CAAC,MAAM,CAAC,sBAAsB,CAAC;IACtD,8BAAsB,CAAC,MAAM,CAAC,sBAAsB,CAAC;CACtD,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\nimport { JSONWebKeySet, jsonWebKeySetSchema, JWK, jwkSchema } from '../auth';\nimport { RawZodShape } from '../common.types';\n\nexport type RemoteAuthOptions = {\n  type: 'remote';\n\n  /**\n   * unique id for the provider\n   */\n  id?: string;\n  /**\n   * human-readable name for the provider\n   */\n  name: string;\n  /**\n   * base url of the provider\n   * if the provider does not support dcr it will be used with local auth provider proxy\n   * to register client dynamically you have to provide client id for the registration flow\n   * @example https://my-company.frontegg.com\n   */\n  baseUrl: string;\n\n  /**\n   * enable dynamic client registration (DCR) flow, if your provider does not support DCR\n   * you can set this to false and provide clientId for authorization flow, we will use local auth provider proxy\n   * to register a dynamic client with the provided clientId or by called clientId function with client info\n   * by default, the provider will use the registration endpoint to register the client dynamically\n   */\n  dcrEnabled?: boolean;\n\n  /**\n   * Only used if your auth provider does not support DCR.\n   * for Dcr auth provider the client id acquired by the registration flow\n   */\n  clientId?: string | ((clientInfo: { clientId: string }) => string);\n\n  /**\n   * Set default gateway oauth server mode, this will be overridden by discovery flow.\n   * if set to transparent and the discovery flow detect orchestrated mode it will switch to orchestrated mode\n   * @default 'transparent'\n   */\n  mode?: 'orchestrated' | 'transparent';\n\n  /**\n   * allow anonymous access to the provider\n   * @default false - allowing anonymous access will make the provider to issue an orchestrated token\n   */\n  allowAnonymous?: boolean;\n\n  /**\n   * allow consent mode to select tools/resource/prompts after authorization\n   * for scoped based access token\n   * @default false - allowing anonymous access will make the provider to issue an orchestrated token\n   */\n  consent?: boolean;\n\n\n  /**\n   * scopes for the token endpoint\n   * @default undefined - all scopes supported by th provider\n   */\n  scopes?: string[];\n  /**\n   * authorization provider supported grant types, currently only authorization_code and refresh_token are supported\n   * @default undefined - default is what presented in the /.well-known/oauth-authorization-server\n   */\n  grantTypes?: ('authorization_code' | 'refresh_token')[];\n\n  /**\n   * authorization endpoint for the provider\n   * @default undefined - default is what presented in the /.well-known/oauth-authorization-server\n   */\n  authEndpoint?: string;\n  /**\n   * token endpoint for the provider\n   * @default undefined - default is what presented in the /.well-known/oauth-authorization-server\n   */\n  tokenEndpoint?: string;\n  /**\n   * registration endpoint for the provider (DCR)\n   * @default undefined - default is what presented in the /.well-known/oauth-authorization-server\n   */\n  registrationEndpoint?: string;\n  /**\n   * user info endpoint for the provider\n   * @default undefined - default is what presented in the /.well-known/oauth-authorization-server\n   */\n  userInfoEndpoint?: string;\n\n  /**\n   * Inline JWKS for the provider to verify tokens without automatic fetching\n   * @default undefined - default is what presented in the /.well-known/jwks.json\n   */\n  jwks?: JSONWebKeySet;\n\n  /**\n   * jwks uri for the provider\n   * @default undefined - default is what presented in the /.well-known/oauth-authorization-server\n   */\n  jwksUri?: string;\n};\n\nexport const remoteAuthOptionsSchema = z.object({\n  type: z.literal('remote'),\n  id: z.string().optional(),\n  name: z.string(),\n  baseUrl: z.string(),\n  dcrEnabled: z.boolean().optional(),\n  clientId: z\n    .union([\n      z.string(),\n      z.function().args(z.object({ clientId: z.string() })).returns(z.string())])\n    .optional(),\n  mode: z.union([z.literal('orchestrated'), z.literal('transparent')]).optional(),\n  allowAnonymous: z.boolean().optional(),\n  consent: z.boolean().optional(),\n  jwks: jsonWebKeySetSchema.optional(),\n  scopes: z.array(z.string()).optional(),\n  grantTypes: z.array(z.union([z.literal('authorization_code'), z.literal('refresh_token')])).optional(),\n  authEndpoint: z.string().optional(),\n  tokenEndpoint: z.string().optional(),\n  registrationEndpoint: z.string().optional(),\n  userInfoEndpoint: z.string().optional(),\n  jwksUri: z.string().optional(),\n} satisfies RawZodShape<RemoteAuthOptions>);\n\nexport type LocalAuthOptions = {\n  type: 'local';\n\n  /**\n   * unique id for the provider\n   */\n  id: string;\n\n  /**\n   * human-readable name for the provider\n   */\n  name: string;\n\n  /**\n   * scopes for the token endpoint\n   * @default undefined - all scopes supported by th provider\n   */\n  scopes?: string[];\n  /**\n   * currently only authorization_code and refresh_token are supported\n   * @default ['authorization_code', 'refresh_token']\n   */\n  grantTypes?: ('authorization_code' | 'refresh_token')[];\n\n  /**\n   * allow anonymous access to the provider\n   * in this case the provider will act as an authorization server\n   * @default true\n   */\n  allowAnonymous?: boolean;\n\n  /**\n   * allow consent mode to select tools/resource/prompts after authorization\n   * for scoped based access token\n   * @default false - allowing anonymous access will make the provider to issue an orchestrated token\n   */\n  consent?: boolean;\n\n  /**\n   * Inline JWKS for the provider to verify tokens for local provider\n   * it will also used in /.well-known/jwks.json\n   * @default undefined - default is auto generated keys and saved in the temp folder\n   */\n  jwks?: JSONWebKeySet;\n\n  /**\n   * private key signing tokens for local provider\n   * @default undefined - default is auto generated keys and saved in the temp folder\n   */\n  signKey?: JWK | Uint8Array;\n\n};\n\n\nexport const localAuthOptionsSchema = z.object({\n  type: z.literal('local'),\n  id: z.string(),\n  name: z.string(),\n  scopes: z.array(z.string()).optional(),\n  grantTypes: z.array(z.union([z.literal('authorization_code'), z.literal('refresh_token')])).optional(),\n  allowAnonymous: z.boolean().optional(),\n  consent: z.boolean().optional(),\n  jwks: jsonWebKeySetSchema.optional(),\n  signKey: jwkSchema.or(z.instanceof(Uint8Array)).optional(),\n} satisfies RawZodShape<LocalAuthOptions>);\n\n\nexport const authOptionsSchema = z.discriminatedUnion('type', [\n  remoteAuthOptionsSchema,\n  localAuthOptionsSchema,\n]);\n\nexport type AuthOptions = RemoteAuthOptions | LocalAuthOptions;\n\n\ntype StandaloneOption = {\n  /**\n   * if the provider is standalone or not, if standalone it will register an oauth service provider\n   * on app's entry path, if not standalone it will be registered as a child provider\n   * under the root provider\n   * @default false\n   */\n  standalone?: boolean;\n\n  /**\n   * if the provider should be excluded from the parent provider's discovery\n   * this used for standalone providers\n   * @default false\n   */\n  excludeFromParent?: boolean;\n};\n\nconst standaloneOptionSchema = {\n  standalone: z.boolean().optional(),\n  excludeFromParent: z.boolean().optional(),\n} satisfies RawZodShape<StandaloneOption>;\n\nexport const appAuthOptionsSchema = z.discriminatedUnion('type', [\n  remoteAuthOptionsSchema.extend(standaloneOptionSchema),\n  localAuthOptionsSchema.extend(standaloneOptionSchema),\n]);\n\n\nexport type AppAuthOptions = (RemoteAuthOptions | LocalAuthOptions) & StandaloneOption;"]}

package/src/common/types/options/http.options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.options.js","sourceRoot":"","sources":["../../../../../src/common/types/options/http.options.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAYX,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACzC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACjC,WAAW,EAAE,OAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\nimport { FrontMcpServer, ServerResponse } from '../../interfaces';\n\nexport type HttpOptions = {\n  port?: number;\n  /** MCP JSON-RPC entry ('' or '/mcp'); MUST match PRM resourcePath returned in well-known */\n  entryPath?: string;\n\n  hostFactory?: FrontMcpServer | ((config: HttpOptions) => FrontMcpServer);\n};\n\n\nexport const httpOptionsSchema = z.object({\n  port: z.number().optional().default(3001),\n  entryPath: z.string().default(''),\n  hostFactory: z.any().optional(),\n});\n\n\n\nexport type HttpConfig = z.infer<typeof httpOptionsSchema>;"]}

package/src/common/types/options/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/common/types/options/index.ts"],"names":[],"mappings":";;;AAAA,gEAAsC;AACtC,4DAAkC;AAClC,yDAA+B;AAC/B,yDAA+B;AAC/B,4DAAkC","sourcesContent":["export * from './server-info.options';\nexport * from './session.options';\nexport * from './http.options';\nexport * from './auth.options';\nexport * from './logging.options';\n\n\n\n\n\n"]}

package/src/common/types/options/logging.options.d.ts

@@ -0,0 +1,39 @@
+import { z } from 'zod';
+import { LogTransportType } from "../../interfaces";
+export declare enum LogLevel {
+    Debug = 0,
+    VERBOSE = 1,
+    Info = 2,
+    Warn = 3,
+    Error = 4,
+    Off = 100
+}
+export declare const LogLevelName: Record<LogLevel, string>;
+export declare const LogLevelValue: Record<string, LogLevel>;
+export type LoggingOptions = {
+    level?: LogLevel;
+    enableConsole?: boolean;
+    prefix?: string;
+    /**
+     * Additional custom LogTransport types to register.
+     * @default []
+     */
+    transports?: LogTransportType[];
+};
+export declare const loggingOptionsSchema: z.ZodObject<{
+    level: z.ZodDefault<z.ZodOptional<z.ZodNativeEnum<typeof LogLevel>>>;
+    prefix: z.ZodOptional<z.ZodString>;
+    enableConsole: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    transports: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodType<import("../../interfaces").Type<unknown>, z.ZodTypeDef, import("../../interfaces").Type<unknown>>, "many">>>;
+}, "strip", z.ZodTypeAny, {
+    level: LogLevel;
+    enableConsole: boolean;
+    transports: import("../../interfaces").Type<unknown>[];
+    prefix?: string | undefined;
+}, {
+    level?: LogLevel | undefined;
+    enableConsole?: boolean | undefined;
+    prefix?: string | undefined;
+    transports?: import("../../interfaces").Type<unknown>[] | undefined;
+}>;
+export type LoggingConfigType = Omit<z.infer<typeof loggingOptionsSchema>, 'transports'>;

package/src/common/types/options/logging.options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.options.js","sourceRoot":"","sources":["../../../../../src/common/types/options/logging.options.ts"],"names":[],"mappings":";;;AAAA,6BAAsB;AACtB,2CAA4D;AAI5D,IAAY,QAOX;AAPD,WAAY,QAAQ;IAClB,yCAAS,CAAA;IACT,6CAAW,CAAA;IACX,uCAAQ,CAAA;IACR,uCAAQ,CAAA;IACR,yCAAS,CAAA;IACT,uCAAS,CAAA;AACX,CAAC,EAPW,QAAQ,wBAAR,QAAQ,QAOnB;AAEY,QAAA,YAAY,GAA6B;IACpD,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO;IACzB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS;IAC7B,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;IACvB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;IACvB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO;IACzB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK;CACtB,CAAC;AAEW,QAAA,aAAa,GAA6B;IACrD,OAAO,EAAE,QAAQ,CAAC,KAAK;IACvB,SAAS,EAAE,QAAQ,CAAC,OAAO;IAC3B,MAAM,EAAE,QAAQ,CAAC,IAAI;IACrB,MAAM,EAAE,QAAQ,CAAC,IAAI;IACrB,OAAO,EAAE,QAAQ,CAAC,KAAK;IACvB,KAAK,EAAE,QAAQ,CAAC,GAAG;CACpB,CAAC;AAcW,QAAA,oBAAoB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,OAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC/D,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,aAAa,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACnD,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,uCAA6B,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CACpC,CAAC,CAAC","sourcesContent":["import {z} from 'zod';\nimport {annotatedFrontMcpLoggerSchema} from '../../schemas';\nimport {LogTransportType} from \"../../interfaces\";\nimport {RawZodShape} from \"../common.types\";\n\nexport enum LogLevel {\n  Debug = 0,\n  VERBOSE = 1,\n  Info = 2,\n  Warn = 3,\n  Error = 4,\n  Off = 100, // never log\n}\n\nexport const LogLevelName: Record<LogLevel, string> = {\n  [LogLevel.Debug]: 'debug',\n  [LogLevel.VERBOSE]: 'verbose',\n  [LogLevel.Info]: 'info',\n  [LogLevel.Warn]: 'warn',\n  [LogLevel.Error]: 'error',\n  [LogLevel.Off]: 'off',\n};\n\nexport const LogLevelValue: Record<string, LogLevel> = {\n  'debug': LogLevel.Debug,\n  'verbose': LogLevel.VERBOSE,\n  'info': LogLevel.Info,\n  'warn': LogLevel.Warn,\n  'error': LogLevel.Error,\n  'off': LogLevel.Off,\n};\n\n\nexport type LoggingOptions = {\n  level?: LogLevel; // default to 'info'\n  enableConsole?: boolean;\n  prefix?: string;\n  /**\n   * Additional custom LogTransport types to register.\n   * @default []\n   */\n  transports?: LogTransportType[]\n};\n\nexport const loggingOptionsSchema = z.object({\n  level: z.nativeEnum(LogLevel).optional().default(LogLevel.Info),\n  prefix: z.string().optional(),\n  enableConsole: z.boolean().optional().default(true),\n  transports: z.array(annotatedFrontMcpLoggerSchema).optional().default([]),\n} satisfies RawZodShape<LoggingOptions>);\n\n\nexport type LoggingConfigType = Omit<z.infer<typeof loggingOptionsSchema>, 'transports'>;"]}

package/src/common/types/options/server-info.options.d.ts

@@ -0,0 +1,48 @@
+import { Icon } from '@modelcontextprotocol/sdk/types.js';
+import { z } from 'zod';
+export type ServerInfoOptions = {
+    name: string;
+    title?: string;
+    version: string;
+    websiteUrl?: string;
+    icons?: Icon[];
+};
+export declare const serverInfoOptionsSchema: z.ZodObject<{
+    name: z.ZodString;
+    title: z.ZodOptional<z.ZodString>;
+    version: z.ZodString;
+    websiteUrl: z.ZodOptional<z.ZodString>;
+    icons: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        src: z.ZodString;
+        mimeType: z.ZodOptional<z.ZodString>;
+        sizes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        src: z.ZodString;
+        mimeType: z.ZodOptional<z.ZodString>;
+        sizes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        src: z.ZodString;
+        mimeType: z.ZodOptional<z.ZodString>;
+        sizes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, z.ZodTypeAny, "passthrough">>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    version: string;
+    title?: string | undefined;
+    icons?: z.objectOutputType<{
+        src: z.ZodString;
+        mimeType: z.ZodOptional<z.ZodString>;
+        sizes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, z.ZodTypeAny, "passthrough">[] | undefined;
+    websiteUrl?: string | undefined;
+}, {
+    name: string;
+    version: string;
+    title?: string | undefined;
+    icons?: z.objectInputType<{
+        src: z.ZodString;
+        mimeType: z.ZodOptional<z.ZodString>;
+        sizes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, z.ZodTypeAny, "passthrough">[] | undefined;
+    websiteUrl?: string | undefined;
+}>;

package/src/common/types/options/server-info.options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-info.options.js","sourceRoot":"","sources":["../../../../../src/common/types/options/server-info.options.ts"],"names":[],"mappings":";;;AAAA,iEAAsE;AACtE,6BAAwB;AAgBX,QAAA,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;IACnB,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,qBAAU,CAAC,CAAC,QAAQ,EAAE;CACG,CAAC,CAAC","sourcesContent":["import { Icon, IconSchema } from '@modelcontextprotocol/sdk/types.js';\nimport { z } from 'zod';\nimport { RawZodShape } from '../common.types';\n\nexport type ServerInfoOptions = {\n  /* The name of the server */\n  name: string;\n  /* The name of the server */\n  title?: string;\n  /* The version of the server */\n  version: string;\n  /* The description of the server*/\n  websiteUrl?: string;\n  icons?: Icon[];\n}\n\n\nexport const serverInfoOptionsSchema = z.object({\n  name: z.string(),\n  title: z.string().optional(),\n  version: z.string(),\n  websiteUrl: z.string().optional(),\n  icons: z.array(IconSchema).optional(),\n} satisfies RawZodShape<ServerInfoOptions>);"]}