@frontmcp/sdk 0.6.1 → 0.6.3

package/src/auth/session/vercel-kv-session.store.js

@@ -1,216 +0,0 @@
-"use strict";
-/**
- * Vercel KV Session Store
- *
- * Session store implementation using Vercel KV (edge-compatible REST-based key-value store).
- * Uses dynamic import to avoid bundling @vercel/kv for non-Vercel deployments.
- *
- * @see https://vercel.com/docs/storage/vercel-kv
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.VercelKvSessionStore = void 0;
-const crypto_1 = require("crypto");
-const transport_session_types_1 = require("./transport-session.types");
-/**
- * Vercel KV-backed session store implementation
- *
- * Provides persistent session storage for edge deployments using Vercel KV.
- * Sessions are stored as JSON with optional TTL.
- */
-class VercelKvSessionStore {
-    kv = null;
-    connectPromise = null;
-    keyPrefix;
-    defaultTtlMs;
-    logger;
-    config;
-    constructor(config, logger) {
-        this.config = config;
-        this.keyPrefix = config.keyPrefix ?? 'mcp:session:';
-        this.defaultTtlMs = config.defaultTtlMs ?? 3600000;
-        this.logger = logger;
-    }
-    /**
-     * Connect to Vercel KV
-     * Uses dynamic import to avoid bundling @vercel/kv when not used.
-     * Thread-safe: concurrent calls will share the same connection promise.
-     */
-    async connect() {
-        if (this.kv)
-            return;
-        // Prevent concurrent connection attempts
-        if (this.connectPromise) {
-            return this.connectPromise;
-        }
-        this.connectPromise = this.doConnect();
-        try {
-            await this.connectPromise;
-        }
-        catch (error) {
-            // Reset promise on failure to allow retry
-            this.connectPromise = null;
-            throw error;
-        }
-    }
-    async doConnect() {
-        const { createClient } = await import('@vercel/kv');
-        const url = this.config.url || process.env['KV_REST_API_URL'];
-        const token = this.config.token || process.env['KV_REST_API_TOKEN'];
-        if (!url || !token) {
-            throw new Error('Vercel KV requires url and token. Set KV_REST_API_URL and KV_REST_API_TOKEN environment variables or provide them in config.');
-        }
-        // Cast to our interface to avoid type compatibility issues
-        this.kv = createClient({ url, token });
-    }
-    async ensureConnected() {
-        await this.connect();
-        if (!this.kv) {
-            throw new Error('[VercelKvSessionStore] Connection failed - client not initialized');
-        }
-        return this.kv;
-    }
-    /**
-     * Get the full key for a session ID
-     * @throws Error if sessionId is empty
-     */
-    key(sessionId) {
-        if (!sessionId || sessionId.trim() === '') {
-            throw new Error('[VercelKvSessionStore] sessionId cannot be empty');
-        }
-        return `${this.keyPrefix}${sessionId}`;
-    }
-    /**
-     * Get a stored session by ID
-     *
-     * Note: Vercel KV doesn't support GETEX, so we use GET + PEXPIRE separately.
-     * This is slightly less atomic than Redis GETEX but sufficient for most use cases.
-     */
-    async get(sessionId) {
-        const kv = await this.ensureConnected();
-        const key = this.key(sessionId);
-        // Get the session
-        const raw = await kv.get(key);
-        if (!raw)
-            return null;
-        // Extend TTL (fire-and-forget, similar to Redis GETEX behavior)
-        kv.pexpire(key, this.defaultTtlMs).catch(() => void 0);
-        try {
-            const parsed = typeof raw === 'string' ? JSON.parse(raw) : raw;
-            const result = transport_session_types_1.storedSessionSchema.safeParse(parsed);
-            if (!result.success) {
-                this.logger?.warn('[VercelKvSessionStore] Invalid session format', {
-                    sessionId: sessionId.slice(0, 20),
-                    errors: result.error.issues.slice(0, 3).map((i) => ({ path: i.path, message: i.message })),
-                });
-                // Delete invalid session data
-                this.delete(sessionId).catch(() => void 0);
-                return null;
-            }
-            const session = result.data;
-            // Check application-level expiration (separate from KV TTL)
-            if (session.session.expiresAt && session.session.expiresAt < Date.now()) {
-                // Session is logically expired - delete it
-                await this.delete(sessionId);
-                return null;
-            }
-            // Bound TTL by session.expiresAt to avoid keeping expired sessions
-            if (session.session.expiresAt) {
-                const ttlMs = Math.min(this.defaultTtlMs, session.session.expiresAt - Date.now());
-                if (ttlMs > 0 && ttlMs < this.defaultTtlMs) {
-                    // Fire-and-forget - we're only optimizing cache eviction timing
-                    kv.pexpire(key, ttlMs).catch(() => void 0);
-                }
-            }
-            // Update last accessed timestamp (in the returned object)
-            const updatedSession = {
-                ...session,
-                lastAccessedAt: Date.now(),
-            };
-            return updatedSession;
-        }
-        catch (error) {
-            this.logger?.warn('[VercelKvSessionStore] Failed to parse session', {
-                sessionId: sessionId.slice(0, 20),
-                error: error.message,
-            });
-            // Delete corrupted session payloads to prevent repeated failures
-            this.delete(sessionId).catch(() => void 0);
-            return null;
-        }
-    }
-    /**
-     * Store a session with optional TTL
-     */
-    async set(sessionId, session, ttlMs) {
-        const kv = await this.ensureConnected();
-        const key = this.key(sessionId);
-        const value = JSON.stringify(session);
-        if (ttlMs && ttlMs > 0) {
-            // Use px for millisecond precision
-            await kv.set(key, value, { px: ttlMs });
-        }
-        else if (session.session.expiresAt) {
-            // Use session's expiration if available
-            const ttl = session.session.expiresAt - Date.now();
-            if (ttl > 0) {
-                await kv.set(key, value, { px: ttl });
-            }
-            else {
-                // Already expired, but store anyway (will be cleaned up on next access)
-                await kv.set(key, value);
-            }
-        }
-        else {
-            // No TTL - session persists until explicitly deleted
-            await kv.set(key, value);
-        }
-    }
-    /**
-     * Delete a session
-     */
-    async delete(sessionId) {
-        const kv = await this.ensureConnected();
-        await kv.del(this.key(sessionId));
-    }
-    /**
-     * Check if a session exists
-     */
-    async exists(sessionId) {
-        const kv = await this.ensureConnected();
-        return (await kv.exists(this.key(sessionId))) === 1;
-    }
-    /**
-     * Allocate a new session ID
-     */
-    allocId() {
-        return (0, crypto_1.randomUUID)();
-    }
-    /**
-     * Disconnect from Vercel KV
-     * Vercel KV uses REST API, so there's no persistent connection to close
-     */
-    async disconnect() {
-        this.kv = null;
-        this.connectPromise = null;
-    }
-    /**
-     * Test Vercel KV connection by setting and getting a test key.
-     * Useful for validating connection on startup.
-     *
-     * @returns true if connection is healthy, false otherwise
-     */
-    async ping() {
-        try {
-            const kv = await this.ensureConnected();
-            const testKey = `${this.keyPrefix}__ping__`;
-            await kv.set(testKey, 'pong', { ex: 1 });
-            const result = await kv.get(testKey);
-            return result === 'pong';
-        }
-        catch {
-            return false;
-        }
-    }
-}
-exports.VercelKvSessionStore = VercelKvSessionStore;
-//# sourceMappingURL=vercel-kv-session.store.js.map

package/src/auth/session/vercel-kv-session.store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"vercel-kv-session.store.js","sourceRoot":"","sources":["../../../../src/auth/session/vercel-kv-session.store.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAEH,mCAAoC;AACpC,uEAA6F;AAwC7F;;;;;GAKG;AACH,MAAa,oBAAoB;IACvB,EAAE,GAA0B,IAAI,CAAC;IACjC,cAAc,GAAyB,IAAI,CAAC;IACnC,SAAS,CAAS;IAClB,YAAY,CAAS;IACrB,MAAM,CAAkB;IACxB,MAAM,CAAwB;IAE/C,YAAY,MAAuD,EAAE,MAAuB;QAC1F,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,cAAc,CAAC;QACpD,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,OAAO,CAAC;QACnD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,EAAE;YAAE,OAAO;QAEpB,yCAAyC;QACzC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,cAAc,CAAC;QAC7B,CAAC;QAED,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,cAAc,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,0CAA0C;YAC1C,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;YAC3B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QAEpD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAEpE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,8HAA8H,CAC/H,CAAC;QACJ,CAAC;QAED,2DAA2D;QAC3D,IAAI,CAAC,EAAE,GAAG,YAAY,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAA8B,CAAC;IACtE,CAAC;IAEO,KAAK,CAAC,eAAe;QAC3B,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAED;;;OAGG;IACK,GAAG,CAAC,SAAiB;QAC3B,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,GAAG,IAAI,CAAC,SAAS,GAAG,SAAS,EAAE,CAAC;IACzC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,GAAG,CAAC,SAAiB;QACzB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAEhC,kBAAkB;QAClB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,GAAG,CAAS,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QAEtB,gEAAgE;QAChE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QAEvD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YAC/D,MAAM,MAAM,GAAG,6CAAmB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAErD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,+CAA+C,EAAE;oBACjE,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;oBACjC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;iBAC3F,CAAC,CAAC;gBACH,8BAA8B;gBAC9B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC3C,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;YAE5B,4DAA4D;YAC5D,IAAI,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBACxE,2CAA2C;gBAC3C,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC7B,OAAO,IAAI,CAAC;YACd,CAAC;YAED,mEAAmE;YACnE,IAAI,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBAClF,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;oBAC3C,gEAAgE;oBAChE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC;YAED,0DAA0D;YAC1D,MAAM,cAAc,GAAkB;gBACpC,GAAG,OAAO;gBACV,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE;aAC3B,CAAC;YAEF,OAAO,cAAc,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,gDAAgD,EAAE;gBAClE,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBACjC,KAAK,EAAG,KAAe,CAAC,OAAO;aAChC,CAAC,CAAC;YACH,iEAAiE;YACjE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,OAAsB,EAAE,KAAc;QACjE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAEtC,IAAI,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACvB,mCAAmC;YACnC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1C,CAAC;aAAM,IAAI,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACrC,wCAAwC;YACxC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACnD,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;gBACZ,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACN,wEAAwE;gBACxE,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,qDAAqD;YACrD,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC5B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QACxC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC5B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QACxC,OAAO,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,OAAO;QACL,OAAO,IAAA,mBAAU,GAAE,CAAC;IACtB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;QACf,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,UAAU,CAAC;YAC5C,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,CAAS,OAAO,CAAC,CAAC;YAC7C,OAAO,MAAM,KAAK,MAAM,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAvND,oDAuNC","sourcesContent":["/**\n * Vercel KV Session Store\n *\n * Session store implementation using Vercel KV (edge-compatible REST-based key-value store).\n * Uses dynamic import to avoid bundling @vercel/kv for non-Vercel deployments.\n *\n * @see https://vercel.com/docs/storage/vercel-kv\n */\n\nimport { randomUUID } from 'crypto';\nimport { SessionStore, StoredSession, storedSessionSchema } from './transport-session.types';\nimport { FrontMcpLogger } from '../../common/interfaces/logger.interface';\nimport type { VercelKvProviderOptions } from '../../common/types/options/redis.options';\n\n// Interface for the Vercel KV client (matches @vercel/kv API)\n// Using custom interface to avoid type compatibility issues with optional dependency\ninterface VercelKVClient {\n  get<T = unknown>(key: string): Promise<T | null>;\n  set(key: string, value: unknown, options?: { ex?: number; px?: number }): Promise<void>;\n  del(...keys: string[]): Promise<number>;\n  exists(...keys: string[]): Promise<number>;\n  pexpire(key: string, milliseconds: number): Promise<number>;\n}\n\nexport interface VercelKvSessionConfig {\n  /**\n   * KV REST API URL\n   * @default process.env.KV_REST_API_URL\n   */\n  url?: string;\n\n  /**\n   * KV REST API Token\n   * @default process.env.KV_REST_API_TOKEN\n   */\n  token?: string;\n\n  /**\n   * Key prefix for session keys\n   * @default 'mcp:session:'\n   */\n  keyPrefix?: string;\n\n  /**\n   * Default TTL in milliseconds for session extension on access\n   * @default 3600000 (1 hour)\n   */\n  defaultTtlMs?: number;\n}\n\n/**\n * Vercel KV-backed session store implementation\n *\n * Provides persistent session storage for edge deployments using Vercel KV.\n * Sessions are stored as JSON with optional TTL.\n */\nexport class VercelKvSessionStore implements SessionStore {\n  private kv: VercelKVClient | null = null;\n  private connectPromise: Promise<void> | null = null;\n  private readonly keyPrefix: string;\n  private readonly defaultTtlMs: number;\n  private readonly logger?: FrontMcpLogger;\n  private readonly config: VercelKvSessionConfig;\n\n  constructor(config: VercelKvSessionConfig | VercelKvProviderOptions, logger?: FrontMcpLogger) {\n    this.config = config;\n    this.keyPrefix = config.keyPrefix ?? 'mcp:session:';\n    this.defaultTtlMs = config.defaultTtlMs ?? 3600000;\n    this.logger = logger;\n  }\n\n  /**\n   * Connect to Vercel KV\n   * Uses dynamic import to avoid bundling @vercel/kv when not used.\n   * Thread-safe: concurrent calls will share the same connection promise.\n   */\n  async connect(): Promise<void> {\n    if (this.kv) return;\n\n    // Prevent concurrent connection attempts\n    if (this.connectPromise) {\n      return this.connectPromise;\n    }\n\n    this.connectPromise = this.doConnect();\n    try {\n      await this.connectPromise;\n    } catch (error) {\n      // Reset promise on failure to allow retry\n      this.connectPromise = null;\n      throw error;\n    }\n  }\n\n  private async doConnect(): Promise<void> {\n    const { createClient } = await import('@vercel/kv');\n\n    const url = this.config.url || process.env['KV_REST_API_URL'];\n    const token = this.config.token || process.env['KV_REST_API_TOKEN'];\n\n    if (!url || !token) {\n      throw new Error(\n        'Vercel KV requires url and token. Set KV_REST_API_URL and KV_REST_API_TOKEN environment variables or provide them in config.',\n      );\n    }\n\n    // Cast to our interface to avoid type compatibility issues\n    this.kv = createClient({ url, token }) as unknown as VercelKVClient;\n  }\n\n  private async ensureConnected(): Promise<VercelKVClient> {\n    await this.connect();\n    if (!this.kv) {\n      throw new Error('[VercelKvSessionStore] Connection failed - client not initialized');\n    }\n    return this.kv;\n  }\n\n  /**\n   * Get the full key for a session ID\n   * @throws Error if sessionId is empty\n   */\n  private key(sessionId: string): string {\n    if (!sessionId || sessionId.trim() === '') {\n      throw new Error('[VercelKvSessionStore] sessionId cannot be empty');\n    }\n    return `${this.keyPrefix}${sessionId}`;\n  }\n\n  /**\n   * Get a stored session by ID\n   *\n   * Note: Vercel KV doesn't support GETEX, so we use GET + PEXPIRE separately.\n   * This is slightly less atomic than Redis GETEX but sufficient for most use cases.\n   */\n  async get(sessionId: string): Promise<StoredSession | null> {\n    const kv = await this.ensureConnected();\n    const key = this.key(sessionId);\n\n    // Get the session\n    const raw = await kv.get<string>(key);\n    if (!raw) return null;\n\n    // Extend TTL (fire-and-forget, similar to Redis GETEX behavior)\n    kv.pexpire(key, this.defaultTtlMs).catch(() => void 0);\n\n    try {\n      const parsed = typeof raw === 'string' ? JSON.parse(raw) : raw;\n      const result = storedSessionSchema.safeParse(parsed);\n\n      if (!result.success) {\n        this.logger?.warn('[VercelKvSessionStore] Invalid session format', {\n          sessionId: sessionId.slice(0, 20),\n          errors: result.error.issues.slice(0, 3).map((i) => ({ path: i.path, message: i.message })),\n        });\n        // Delete invalid session data\n        this.delete(sessionId).catch(() => void 0);\n        return null;\n      }\n\n      const session = result.data;\n\n      // Check application-level expiration (separate from KV TTL)\n      if (session.session.expiresAt && session.session.expiresAt < Date.now()) {\n        // Session is logically expired - delete it\n        await this.delete(sessionId);\n        return null;\n      }\n\n      // Bound TTL by session.expiresAt to avoid keeping expired sessions\n      if (session.session.expiresAt) {\n        const ttlMs = Math.min(this.defaultTtlMs, session.session.expiresAt - Date.now());\n        if (ttlMs > 0 && ttlMs < this.defaultTtlMs) {\n          // Fire-and-forget - we're only optimizing cache eviction timing\n          kv.pexpire(key, ttlMs).catch(() => void 0);\n        }\n      }\n\n      // Update last accessed timestamp (in the returned object)\n      const updatedSession: StoredSession = {\n        ...session,\n        lastAccessedAt: Date.now(),\n      };\n\n      return updatedSession;\n    } catch (error) {\n      this.logger?.warn('[VercelKvSessionStore] Failed to parse session', {\n        sessionId: sessionId.slice(0, 20),\n        error: (error as Error).message,\n      });\n      // Delete corrupted session payloads to prevent repeated failures\n      this.delete(sessionId).catch(() => void 0);\n      return null;\n    }\n  }\n\n  /**\n   * Store a session with optional TTL\n   */\n  async set(sessionId: string, session: StoredSession, ttlMs?: number): Promise<void> {\n    const kv = await this.ensureConnected();\n    const key = this.key(sessionId);\n    const value = JSON.stringify(session);\n\n    if (ttlMs && ttlMs > 0) {\n      // Use px for millisecond precision\n      await kv.set(key, value, { px: ttlMs });\n    } else if (session.session.expiresAt) {\n      // Use session's expiration if available\n      const ttl = session.session.expiresAt - Date.now();\n      if (ttl > 0) {\n        await kv.set(key, value, { px: ttl });\n      } else {\n        // Already expired, but store anyway (will be cleaned up on next access)\n        await kv.set(key, value);\n      }\n    } else {\n      // No TTL - session persists until explicitly deleted\n      await kv.set(key, value);\n    }\n  }\n\n  /**\n   * Delete a session\n   */\n  async delete(sessionId: string): Promise<void> {\n    const kv = await this.ensureConnected();\n    await kv.del(this.key(sessionId));\n  }\n\n  /**\n   * Check if a session exists\n   */\n  async exists(sessionId: string): Promise<boolean> {\n    const kv = await this.ensureConnected();\n    return (await kv.exists(this.key(sessionId))) === 1;\n  }\n\n  /**\n   * Allocate a new session ID\n   */\n  allocId(): string {\n    return randomUUID();\n  }\n\n  /**\n   * Disconnect from Vercel KV\n   * Vercel KV uses REST API, so there's no persistent connection to close\n   */\n  async disconnect(): Promise<void> {\n    this.kv = null;\n    this.connectPromise = null;\n  }\n\n  /**\n   * Test Vercel KV connection by setting and getting a test key.\n   * Useful for validating connection on startup.\n   *\n   * @returns true if connection is healthy, false otherwise\n   */\n  async ping(): Promise<boolean> {\n    try {\n      const kv = await this.ensureConnected();\n      const testKey = `${this.keyPrefix}__ping__`;\n      await kv.set(testKey, 'pong', { ex: 1 });\n      const result = await kv.get<string>(testKey);\n      return result === 'pong';\n    } catch {\n      return false;\n    }\n  }\n}\n"]}

package/src/auth/ui/base-layout.js

@@ -1,279 +0,0 @@
-"use strict";
-/**
- * Base Layout for Server-Rendered Pages
- *
- * Provides a consistent HTML shell with all CDN resources pre-configured:
- * - Tailwind CSS v4 (Browser CDN) - Utility-first CSS framework with @theme support
- * - Google Fonts (Inter) - Modern UI typography
- *
- * No build step required - all resources loaded from CDN at runtime.
- *
- * @example
- * ```typescript
- * // Basic usage
- * const html = baseLayout('<div>content</div>', { title: 'Page' });
- *
- * // With custom theme
- * const html = baseLayout('<div>content</div>', {
- *   title: 'Page',
- *   theme: {
- *     colors: {
- *       primary: '#3b82f6',
- *       'primary-dark': '#2563eb',
- *     },
- *   },
- * });
- * ```
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.authLayout = exports.DEFAULT_THEME = exports.CDN = void 0;
-exports.escapeHtml = escapeHtml;
-exports.baseLayout = baseLayout;
-exports.createLayout = createLayout;
-exports.centeredCardLayout = centeredCardLayout;
-exports.wideLayout = wideLayout;
-exports.extraWideLayout = extraWideLayout;
-// ============================================
-// CDN Configuration
-// ============================================
-/**
- * CDN URLs and versions - centralized for easy updates
- */
-exports.CDN = {
-    /** Tailwind CSS v4 Browser CDN - generates styles on-the-fly with @theme support */
-    tailwind: 'https://cdn.jsdelivr.net/npm/@tailwindcss/browser@4',
-    /** Google Fonts - Inter for modern UI */
-    fonts: {
-        preconnect: ['https://fonts.googleapis.com', 'https://fonts.gstatic.com'],
-        stylesheet: 'https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap',
-    },
-};
-/**
- * Default theme with FrontMCP branding
- */
-exports.DEFAULT_THEME = {
-    colors: {
-        primary: '#3b82f6', // blue-500
-        'primary-dark': '#2563eb', // blue-600
-        secondary: '#8b5cf6', // violet-500
-        accent: '#06b6d4', // cyan-500
-        success: '#22c55e', // green-500
-        warning: '#f59e0b', // amber-500
-        danger: '#ef4444', // red-500
-    },
-    fonts: {
-        sans: 'Inter, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif',
-    },
-};
-// ============================================
-// Utility Functions
-// ============================================
-/**
- * Escape HTML special characters to prevent XSS
- * Per OWASP guidelines, escapes: & < > " ' /
- *
- * @param str - The string to escape
- * @returns The escaped string safe for HTML content and attributes
- *
- * @example
- * escapeHtml('<script>alert("xss")</script>')
- * // => '&lt;script&gt;alert(&quot;xss&quot;)&lt;&#x2F;script&gt;'
- */
-function escapeHtml(str) {
-    return str
-        .replace(/&/g, '&amp;')
-        .replace(/</g, '&lt;')
-        .replace(/>/g, '&gt;')
-        .replace(/"/g, '&quot;')
-        .replace(/'/g, '&#39;')
-        .replace(/\//g, '&#x2F;');
-}
-/**
- * Build the @theme CSS block from theme configuration
- */
-function buildThemeCss(theme) {
-    const lines = [];
-    // Add color variables
-    if (theme.colors) {
-        for (const [key, value] of Object.entries(theme.colors)) {
-            if (value) {
-                lines.push(`--color-${key}: ${value};`);
-            }
-        }
-    }
-    // Add font variables
-    if (theme.fonts) {
-        for (const [key, value] of Object.entries(theme.fonts)) {
-            if (value) {
-                lines.push(`--font-${key}: ${value};`);
-            }
-        }
-    }
-    // Add custom variables
-    if (theme.customVars) {
-        lines.push(theme.customVars);
-    }
-    return lines.join('\n        ');
-}
-// ============================================
-// Layout Builder
-// ============================================
-/**
- * Build the complete HTML document with CDN resources
- *
- * @param content - The page content (HTML string)
- * @param options - Layout configuration options
- * @returns Complete HTML document string
- *
- * @example
- * ```typescript
- * const html = baseLayout('<div>My content</div>', {
- *   title: 'Sign In',
- *   description: 'Sign in to your account',
- *   theme: {
- *     colors: {
- *       primary: '#ff6b6b',
- *     },
- *   },
- * });
- * ```
- */
-function baseLayout(content, options) {
-    const { title, description, includeTailwind = true, includeFonts = true, headExtra = '', bodyClass = 'bg-gray-50 min-h-screen font-sans antialiased', theme, } = options;
-    // Merge theme with defaults
-    const mergedTheme = {
-        colors: { ...exports.DEFAULT_THEME.colors, ...theme?.colors },
-        fonts: { ...exports.DEFAULT_THEME.fonts, ...theme?.fonts },
-        customVars: theme?.customVars,
-        customCss: theme?.customCss,
-    };
-    // Build font preconnect links
-    const fontPreconnect = includeFonts
-        ? exports.CDN.fonts.preconnect
-            .map((url, i) => `<link rel="preconnect" href="${url}"${i > 0 ? ' crossorigin' : ''}>`)
-            .join('\n  ')
-        : '';
-    // Build font stylesheet
-    const fontStylesheet = includeFonts ? `<link href="${exports.CDN.fonts.stylesheet}" rel="stylesheet">` : '';
-    // Build Tailwind v4 script and theme styles
-    const themeCss = buildThemeCss(mergedTheme);
-    const customCss = mergedTheme.customCss || '';
-    const tailwindBlock = includeTailwind
-        ? `<script src="${exports.CDN.tailwind}"></script>
-  <style type="text/tailwindcss">
-    @theme {
-      ${themeCss}
-    }
-    ${customCss}
-  </style>`
-        : '';
-    // Build meta description
-    const metaDescription = description ? `<meta name="description" content="${escapeHtml(description)}">` : '';
-    return `<!DOCTYPE html>
-<html lang="en">
-<head>
-  <meta charset="UTF-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <title>${escapeHtml(title)} - FrontMCP</title>
-  ${metaDescription}
-
-  <!-- Google Fonts CDN - Inter (modern UI font) -->
-  ${fontPreconnect}
-  ${fontStylesheet}
-
-  <!-- Tailwind CSS v4 Browser CDN with @theme support -->
-  ${tailwindBlock}
-  ${headExtra}
-</head>
-<body class="${escapeHtml(bodyClass)}">
-  ${content}
-</body>
-</html>`;
-}
-/**
- * Create a layout wrapper function with preset options
- *
- * @param defaultOptions - Default options to apply to all pages
- * @returns A function that wraps content with the layout
- *
- * @example
- * ```typescript
- * const brandedLayout = createLayout({
- *   theme: {
- *     colors: {
- *       primary: '#ff6b6b',
- *       'primary-dark': '#ee5a5a',
- *     },
- *   },
- * });
- *
- * const html = brandedLayout('<div>Content</div>', { title: 'Page' });
- * ```
- */
-function createLayout(defaultOptions) {
-    return (content, options) => {
-        // Deep merge themes
-        const mergedTheme = defaultOptions.theme || options.theme
-            ? {
-                colors: { ...defaultOptions.theme?.colors, ...options.theme?.colors },
-                fonts: { ...defaultOptions.theme?.fonts, ...options.theme?.fonts },
-                customVars: options.theme?.customVars ?? defaultOptions.theme?.customVars,
-                customCss: options.theme?.customCss ?? defaultOptions.theme?.customCss,
-            }
-            : undefined;
-        return baseLayout(content, {
-            ...defaultOptions,
-            ...options,
-            theme: mergedTheme,
-        });
-    };
-}
-// ============================================
-// Pre-configured Layouts
-// ============================================
-/**
- * Default auth layout with standard styling
- */
-exports.authLayout = createLayout({
-    bodyClass: 'bg-gray-50 min-h-screen font-sans antialiased',
-});
-/**
- * Centered card layout for login/auth pages
- */
-function centeredCardLayout(content, options) {
-    const wrappedContent = `
-  <div class="min-h-screen flex items-center justify-center p-4">
-    <div class="w-full max-w-md">
-      ${content}
-    </div>
-  </div>`;
-    return baseLayout(wrappedContent, {
-        ...options,
-        bodyClass: 'bg-gradient-to-br from-primary to-secondary min-h-screen font-sans antialiased',
-    });
-}
-/**
- * Wide layout for consent/selection pages
- */
-function wideLayout(content, options) {
-    const wrappedContent = `
-  <div class="min-h-screen py-8 px-4">
-    <div class="max-w-2xl mx-auto">
-      ${content}
-    </div>
-  </div>`;
-    return baseLayout(wrappedContent, options);
-}
-/**
- * Extra wide layout for tool selection pages
- */
-function extraWideLayout(content, options) {
-    const wrappedContent = `
-  <div class="min-h-screen py-8 px-4">
-    <div class="max-w-3xl mx-auto">
-      ${content}
-    </div>
-  </div>`;
-    return baseLayout(wrappedContent, options);
-}
-//# sourceMappingURL=base-layout.js.map

package/src/auth/ui/base-layout.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"base-layout.js","sourceRoot":"","sources":["../../../../src/auth/ui/base-layout.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;;;AA2IH,gCAQC;AA0DD,gCAkEC;AAsBD,oCAqBC;AAgBD,gDAYC;AAKD,gCASC;AAKD,0CASC;AAhXD,+CAA+C;AAC/C,oBAAoB;AACpB,+CAA+C;AAE/C;;GAEG;AACU,QAAA,GAAG,GAAG;IACjB,oFAAoF;IACpF,QAAQ,EAAE,qDAAqD;IAE/D,yCAAyC;IACzC,KAAK,EAAE;QACL,UAAU,EAAE,CAAC,8BAA8B,EAAE,2BAA2B,CAAC;QACzE,UAAU,EAAE,kFAAkF;KAC/F;CACO,CAAC;AA0DX;;GAEG;AACU,QAAA,aAAa,GAAgB;IACxC,MAAM,EAAE;QACN,OAAO,EAAE,SAAS,EAAE,WAAW;QAC/B,cAAc,EAAE,SAAS,EAAE,WAAW;QACtC,SAAS,EAAE,SAAS,EAAE,aAAa;QACnC,MAAM,EAAE,SAAS,EAAE,WAAW;QAC9B,OAAO,EAAE,SAAS,EAAE,YAAY;QAChC,OAAO,EAAE,SAAS,EAAE,YAAY;QAChC,MAAM,EAAE,SAAS,EAAE,UAAU;KAC9B;IACD,KAAK,EAAE;QACL,IAAI,EAAE,qFAAqF;KAC5F;CACF,CAAC;AAgCF,+CAA+C;AAC/C,oBAAoB;AACpB,+CAA+C;AAE/C;;;;;;;;;;GAUG;AACH,SAAgB,UAAU,CAAC,GAAW;IACpC,OAAO,GAAG;SACP,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,KAAkB;IACvC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,sBAAsB;IACtB,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACxD,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,CAAC,IAAI,CAAC,WAAW,GAAG,KAAK,KAAK,GAAG,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACvD,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,KAAK,KAAK,GAAG,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AAClC,CAAC;AAED,+CAA+C;AAC/C,iBAAiB;AACjB,+CAA+C;AAE/C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAgB,UAAU,CAAC,OAAe,EAAE,OAA0B;IACpE,MAAM,EACJ,KAAK,EACL,WAAW,EACX,eAAe,GAAG,IAAI,EACtB,YAAY,GAAG,IAAI,EACnB,SAAS,GAAG,EAAE,EACd,SAAS,GAAG,+CAA+C,EAC3D,KAAK,GACN,GAAG,OAAO,CAAC;IAEZ,4BAA4B;IAC5B,MAAM,WAAW,GAAgB;QAC/B,MAAM,EAAE,EAAE,GAAG,qBAAa,CAAC,MAAM,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE;QACrD,KAAK,EAAE,EAAE,GAAG,qBAAa,CAAC,KAAK,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE;QAClD,UAAU,EAAE,KAAK,EAAE,UAAU;QAC7B,SAAS,EAAE,KAAK,EAAE,SAAS;KAC5B,CAAC;IAEF,8BAA8B;IAC9B,MAAM,cAAc,GAAG,YAAY;QACjC,CAAC,CAAC,WAAG,CAAC,KAAK,CAAC,UAAU;aACjB,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,gCAAgC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;aACtF,IAAI,CAAC,MAAM,CAAC;QACjB,CAAC,CAAC,EAAE,CAAC;IAEP,wBAAwB;IACxB,MAAM,cAAc,GAAG,YAAY,CAAC,CAAC,CAAC,eAAe,WAAG,CAAC,KAAK,CAAC,UAAU,qBAAqB,CAAC,CAAC,CAAC,EAAE,CAAC;IAEpG,4CAA4C;IAC5C,MAAM,QAAQ,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,WAAW,CAAC,SAAS,IAAI,EAAE,CAAC;IAE9C,MAAM,aAAa,GAAG,eAAe;QACnC,CAAC,CAAC,gBAAgB,WAAG,CAAC,QAAQ;;;QAG1B,QAAQ;;MAEV,SAAS;WACJ;QACP,CAAC,CAAC,EAAE,CAAC;IAEP,yBAAyB;IACzB,MAAM,eAAe,GAAG,WAAW,CAAC,CAAC,CAAC,qCAAqC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAE5G,OAAO;;;;;WAKE,UAAU,CAAC,KAAK,CAAC;IACxB,eAAe;;;IAGf,cAAc;IACd,cAAc;;;IAGd,aAAa;IACb,SAAS;;eAEE,UAAU,CAAC,SAAS,CAAC;IAChC,OAAO;;QAEH,CAAC;AACT,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAgB,YAAY,CAC1B,cAA0C;IAE1C,OAAO,CAAC,OAAe,EAAE,OAA0B,EAAE,EAAE;QACrD,oBAAoB;QACpB,MAAM,WAAW,GACf,cAAc,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK;YACnC,CAAC,CAAC;gBACE,MAAM,EAAE,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE;gBACrE,KAAK,EAAE,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE;gBAClE,UAAU,EAAE,OAAO,CAAC,KAAK,EAAE,UAAU,IAAI,cAAc,CAAC,KAAK,EAAE,UAAU;gBACzE,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,IAAI,cAAc,CAAC,KAAK,EAAE,SAAS;aACvE;YACH,CAAC,CAAC,SAAS,CAAC;QAEhB,OAAO,UAAU,CAAC,OAAO,EAAE;YACzB,GAAG,cAAc;YACjB,GAAG,OAAO;YACV,KAAK,EAAE,WAAW;SACnB,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,+CAA+C;AAC/C,yBAAyB;AACzB,+CAA+C;AAE/C;;GAEG;AACU,QAAA,UAAU,GAAG,YAAY,CAAC;IACrC,SAAS,EAAE,+CAA+C;CAC3D,CAAC,CAAC;AAEH;;GAEG;AACH,SAAgB,kBAAkB,CAAC,OAAe,EAAE,OAA0B;IAC5E,MAAM,cAAc,GAAG;;;QAGjB,OAAO;;SAEN,CAAC;IAER,OAAO,UAAU,CAAC,cAAc,EAAE;QAChC,GAAG,OAAO;QACV,SAAS,EAAE,gFAAgF;KAC5F,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAgB,UAAU,CAAC,OAAe,EAAE,OAA0B;IACpE,MAAM,cAAc,GAAG;;;QAGjB,OAAO;;SAEN,CAAC;IAER,OAAO,UAAU,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,SAAgB,eAAe,CAAC,OAAe,EAAE,OAA0B;IACzE,MAAM,cAAc,GAAG;;;QAGjB,OAAO;;SAEN,CAAC;IAER,OAAO,UAAU,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;AAC7C,CAAC","sourcesContent":["/**\n * Base Layout for Server-Rendered Pages\n *\n * Provides a consistent HTML shell with all CDN resources pre-configured:\n * - Tailwind CSS v4 (Browser CDN) - Utility-first CSS framework with @theme support\n * - Google Fonts (Inter) - Modern UI typography\n *\n * No build step required - all resources loaded from CDN at runtime.\n *\n * @example\n * ```typescript\n * // Basic usage\n * const html = baseLayout('<div>content</div>', { title: 'Page' });\n *\n * // With custom theme\n * const html = baseLayout('<div>content</div>', {\n *   title: 'Page',\n *   theme: {\n *     colors: {\n *       primary: '#3b82f6',\n *       'primary-dark': '#2563eb',\n *     },\n *   },\n * });\n * ```\n */\n\n// ============================================\n// CDN Configuration\n// ============================================\n\n/**\n * CDN URLs and versions - centralized for easy updates\n */\nexport const CDN = {\n  /** Tailwind CSS v4 Browser CDN - generates styles on-the-fly with @theme support */\n  tailwind: 'https://cdn.jsdelivr.net/npm/@tailwindcss/browser@4',\n\n  /** Google Fonts - Inter for modern UI */\n  fonts: {\n    preconnect: ['https://fonts.googleapis.com', 'https://fonts.gstatic.com'],\n    stylesheet: 'https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap',\n  },\n} as const;\n\n// ============================================\n// Theme Configuration\n// ============================================\n\n/**\n * Theme color configuration\n * Keys become CSS custom properties: --color-{key}\n */\nexport interface ThemeColors {\n  /** Primary brand color */\n  primary?: string;\n  /** Darker primary for hover states */\n  'primary-dark'?: string;\n  /** Secondary brand color */\n  secondary?: string;\n  /** Accent color for highlights */\n  accent?: string;\n  /** Success state color */\n  success?: string;\n  /** Warning state color */\n  warning?: string;\n  /** Error/danger state color */\n  danger?: string;\n  /** Custom colors (any additional colors) */\n  [key: string]: string | undefined;\n}\n\n/**\n * Theme font configuration\n * Keys become CSS custom properties: --font-{key}\n */\nexport interface ThemeFonts {\n  /** Sans-serif font family */\n  sans?: string;\n  /** Serif font family */\n  serif?: string;\n  /** Monospace font family */\n  mono?: string;\n  /** Custom fonts */\n  [key: string]: string | undefined;\n}\n\n/**\n * Complete theme configuration for FrontMCP UI\n */\nexport interface ThemeConfig {\n  /** Custom colors */\n  colors?: ThemeColors;\n  /** Custom fonts */\n  fonts?: ThemeFonts;\n  /** Additional custom CSS variables (raw @theme content) */\n  customVars?: string;\n  /** Additional custom CSS (outside @theme) */\n  customCss?: string;\n}\n\n/**\n * Default theme with FrontMCP branding\n */\nexport const DEFAULT_THEME: ThemeConfig = {\n  colors: {\n    primary: '#3b82f6', // blue-500\n    'primary-dark': '#2563eb', // blue-600\n    secondary: '#8b5cf6', // violet-500\n    accent: '#06b6d4', // cyan-500\n    success: '#22c55e', // green-500\n    warning: '#f59e0b', // amber-500\n    danger: '#ef4444', // red-500\n  },\n  fonts: {\n    sans: 'Inter, system-ui, -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, sans-serif',\n  },\n};\n\n// ============================================\n// Layout Options\n// ============================================\n\n/**\n * Options for the base layout\n */\nexport interface BaseLayoutOptions {\n  /** Page title (will be suffixed with \" - FrontMCP\") */\n  title: string;\n\n  /** Optional description for meta tag */\n  description?: string;\n\n  /** Include Tailwind CSS (default: true) */\n  includeTailwind?: boolean;\n\n  /** Include Google Fonts (default: true) */\n  includeFonts?: boolean;\n\n  /** Additional head content (scripts, styles, meta tags) */\n  headExtra?: string;\n\n  /** Body classes (default: 'bg-gray-50 min-h-screen font-sans antialiased') */\n  bodyClass?: string;\n\n  /** Theme configuration - colors, fonts, and custom CSS */\n  theme?: ThemeConfig;\n}\n\n// ============================================\n// Utility Functions\n// ============================================\n\n/**\n * Escape HTML special characters to prevent XSS\n * Per OWASP guidelines, escapes: & < > \" ' /\n *\n * @param str - The string to escape\n * @returns The escaped string safe for HTML content and attributes\n *\n * @example\n * escapeHtml('<script>alert(\"xss\")</script>')\n * // => '&lt;script&gt;alert(&quot;xss&quot;)&lt;&#x2F;script&gt;'\n */\nexport function escapeHtml(str: string): string {\n  return str\n    .replace(/&/g, '&amp;')\n    .replace(/</g, '&lt;')\n    .replace(/>/g, '&gt;')\n    .replace(/\"/g, '&quot;')\n    .replace(/'/g, '&#39;')\n    .replace(/\\//g, '&#x2F;');\n}\n\n/**\n * Build the @theme CSS block from theme configuration\n */\nfunction buildThemeCss(theme: ThemeConfig): string {\n  const lines: string[] = [];\n\n  // Add color variables\n  if (theme.colors) {\n    for (const [key, value] of Object.entries(theme.colors)) {\n      if (value) {\n        lines.push(`--color-${key}: ${value};`);\n      }\n    }\n  }\n\n  // Add font variables\n  if (theme.fonts) {\n    for (const [key, value] of Object.entries(theme.fonts)) {\n      if (value) {\n        lines.push(`--font-${key}: ${value};`);\n      }\n    }\n  }\n\n  // Add custom variables\n  if (theme.customVars) {\n    lines.push(theme.customVars);\n  }\n\n  return lines.join('\\n        ');\n}\n\n// ============================================\n// Layout Builder\n// ============================================\n\n/**\n * Build the complete HTML document with CDN resources\n *\n * @param content - The page content (HTML string)\n * @param options - Layout configuration options\n * @returns Complete HTML document string\n *\n * @example\n * ```typescript\n * const html = baseLayout('<div>My content</div>', {\n *   title: 'Sign In',\n *   description: 'Sign in to your account',\n *   theme: {\n *     colors: {\n *       primary: '#ff6b6b',\n *     },\n *   },\n * });\n * ```\n */\nexport function baseLayout(content: string, options: BaseLayoutOptions): string {\n  const {\n    title,\n    description,\n    includeTailwind = true,\n    includeFonts = true,\n    headExtra = '',\n    bodyClass = 'bg-gray-50 min-h-screen font-sans antialiased',\n    theme,\n  } = options;\n\n  // Merge theme with defaults\n  const mergedTheme: ThemeConfig = {\n    colors: { ...DEFAULT_THEME.colors, ...theme?.colors },\n    fonts: { ...DEFAULT_THEME.fonts, ...theme?.fonts },\n    customVars: theme?.customVars,\n    customCss: theme?.customCss,\n  };\n\n  // Build font preconnect links\n  const fontPreconnect = includeFonts\n    ? CDN.fonts.preconnect\n        .map((url, i) => `<link rel=\"preconnect\" href=\"${url}\"${i > 0 ? ' crossorigin' : ''}>`)\n        .join('\\n  ')\n    : '';\n\n  // Build font stylesheet\n  const fontStylesheet = includeFonts ? `<link href=\"${CDN.fonts.stylesheet}\" rel=\"stylesheet\">` : '';\n\n  // Build Tailwind v4 script and theme styles\n  const themeCss = buildThemeCss(mergedTheme);\n  const customCss = mergedTheme.customCss || '';\n\n  const tailwindBlock = includeTailwind\n    ? `<script src=\"${CDN.tailwind}\"></script>\n  <style type=\"text/tailwindcss\">\n    @theme {\n      ${themeCss}\n    }\n    ${customCss}\n  </style>`\n    : '';\n\n  // Build meta description\n  const metaDescription = description ? `<meta name=\"description\" content=\"${escapeHtml(description)}\">` : '';\n\n  return `<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n  <meta charset=\"UTF-8\">\n  <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n  <title>${escapeHtml(title)} - FrontMCP</title>\n  ${metaDescription}\n\n  <!-- Google Fonts CDN - Inter (modern UI font) -->\n  ${fontPreconnect}\n  ${fontStylesheet}\n\n  <!-- Tailwind CSS v4 Browser CDN with @theme support -->\n  ${tailwindBlock}\n  ${headExtra}\n</head>\n<body class=\"${escapeHtml(bodyClass)}\">\n  ${content}\n</body>\n</html>`;\n}\n\n/**\n * Create a layout wrapper function with preset options\n *\n * @param defaultOptions - Default options to apply to all pages\n * @returns A function that wraps content with the layout\n *\n * @example\n * ```typescript\n * const brandedLayout = createLayout({\n *   theme: {\n *     colors: {\n *       primary: '#ff6b6b',\n *       'primary-dark': '#ee5a5a',\n *     },\n *   },\n * });\n *\n * const html = brandedLayout('<div>Content</div>', { title: 'Page' });\n * ```\n */\nexport function createLayout(\n  defaultOptions: Partial<BaseLayoutOptions>,\n): (content: string, options: BaseLayoutOptions) => string {\n  return (content: string, options: BaseLayoutOptions) => {\n    // Deep merge themes\n    const mergedTheme: ThemeConfig | undefined =\n      defaultOptions.theme || options.theme\n        ? {\n            colors: { ...defaultOptions.theme?.colors, ...options.theme?.colors },\n            fonts: { ...defaultOptions.theme?.fonts, ...options.theme?.fonts },\n            customVars: options.theme?.customVars ?? defaultOptions.theme?.customVars,\n            customCss: options.theme?.customCss ?? defaultOptions.theme?.customCss,\n          }\n        : undefined;\n\n    return baseLayout(content, {\n      ...defaultOptions,\n      ...options,\n      theme: mergedTheme,\n    });\n  };\n}\n\n// ============================================\n// Pre-configured Layouts\n// ============================================\n\n/**\n * Default auth layout with standard styling\n */\nexport const authLayout = createLayout({\n  bodyClass: 'bg-gray-50 min-h-screen font-sans antialiased',\n});\n\n/**\n * Centered card layout for login/auth pages\n */\nexport function centeredCardLayout(content: string, options: BaseLayoutOptions): string {\n  const wrappedContent = `\n  <div class=\"min-h-screen flex items-center justify-center p-4\">\n    <div class=\"w-full max-w-md\">\n      ${content}\n    </div>\n  </div>`;\n\n  return baseLayout(wrappedContent, {\n    ...options,\n    bodyClass: 'bg-gradient-to-br from-primary to-secondary min-h-screen font-sans antialiased',\n  });\n}\n\n/**\n * Wide layout for consent/selection pages\n */\nexport function wideLayout(content: string, options: BaseLayoutOptions): string {\n  const wrappedContent = `\n  <div class=\"min-h-screen py-8 px-4\">\n    <div class=\"max-w-2xl mx-auto\">\n      ${content}\n    </div>\n  </div>`;\n\n  return baseLayout(wrappedContent, options);\n}\n\n/**\n * Extra wide layout for tool selection pages\n */\nexport function extraWideLayout(content: string, options: BaseLayoutOptions): string {\n  const wrappedContent = `\n  <div class=\"min-h-screen py-8 px-4\">\n    <div class=\"max-w-3xl mx-auto\">\n      ${content}\n    </div>\n  </div>`;\n\n  return baseLayout(wrappedContent, options);\n}\n"]}

package/src/auth/ui/index.js

@@ -1,34 +0,0 @@
-"use strict";
-/**
- * Auth UI Module
- *
- * Server-rendered UI templates for OAuth flows with Tailwind CSS (CDN)
- * and Google Fonts.
- *
- * No build step required - all rendering is done at runtime.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.renderToHtml = exports.buildErrorPage = exports.buildLoginPage = exports.buildToolConsentPage = exports.buildFederatedLoginPage = exports.buildIncrementalAuthPage = exports.buildConsentPage = exports.escapeHtml = exports.extraWideLayout = exports.wideLayout = exports.centeredCardLayout = exports.authLayout = exports.createLayout = exports.baseLayout = exports.DEFAULT_THEME = exports.CDN = void 0;
-// Base layout exports
-var base_layout_1 = require("./base-layout");
-Object.defineProperty(exports, "CDN", { enumerable: true, get: function () { return base_layout_1.CDN; } });
-Object.defineProperty(exports, "DEFAULT_THEME", { enumerable: true, get: function () { return base_layout_1.DEFAULT_THEME; } });
-Object.defineProperty(exports, "baseLayout", { enumerable: true, get: function () { return base_layout_1.baseLayout; } });
-Object.defineProperty(exports, "createLayout", { enumerable: true, get: function () { return base_layout_1.createLayout; } });
-Object.defineProperty(exports, "authLayout", { enumerable: true, get: function () { return base_layout_1.authLayout; } });
-Object.defineProperty(exports, "centeredCardLayout", { enumerable: true, get: function () { return base_layout_1.centeredCardLayout; } });
-Object.defineProperty(exports, "wideLayout", { enumerable: true, get: function () { return base_layout_1.wideLayout; } });
-Object.defineProperty(exports, "extraWideLayout", { enumerable: true, get: function () { return base_layout_1.extraWideLayout; } });
-Object.defineProperty(exports, "escapeHtml", { enumerable: true, get: function () { return base_layout_1.escapeHtml; } });
-// Template builder exports
-var templates_1 = require("./templates");
-// Template builders
-Object.defineProperty(exports, "buildConsentPage", { enumerable: true, get: function () { return templates_1.buildConsentPage; } });
-Object.defineProperty(exports, "buildIncrementalAuthPage", { enumerable: true, get: function () { return templates_1.buildIncrementalAuthPage; } });
-Object.defineProperty(exports, "buildFederatedLoginPage", { enumerable: true, get: function () { return templates_1.buildFederatedLoginPage; } });
-Object.defineProperty(exports, "buildToolConsentPage", { enumerable: true, get: function () { return templates_1.buildToolConsentPage; } });
-Object.defineProperty(exports, "buildLoginPage", { enumerable: true, get: function () { return templates_1.buildLoginPage; } });
-Object.defineProperty(exports, "buildErrorPage", { enumerable: true, get: function () { return templates_1.buildErrorPage; } });
-// Utility functions
-Object.defineProperty(exports, "renderToHtml", { enumerable: true, get: function () { return templates_1.renderToHtml; } });
-//# sourceMappingURL=index.js.map

package/src/auth/ui/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/auth/ui/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAEH,sBAAsB;AACtB,6CAcuB;AAbrB,kGAAA,GAAG,OAAA;AACH,4GAAA,aAAa,OAAA;AAKb,yGAAA,UAAU,OAAA;AACV,2GAAA,YAAY,OAAA;AACZ,yGAAA,UAAU,OAAA;AACV,iHAAA,kBAAkB,OAAA;AAClB,yGAAA,UAAU,OAAA;AACV,8GAAA,eAAe,OAAA;AACf,yGAAA,UAAU,OAAA;AAGZ,2BAA2B;AAC3B,yCAcqB;AATnB,oBAAoB;AACpB,6GAAA,gBAAgB,OAAA;AAChB,qHAAA,wBAAwB,OAAA;AACxB,oHAAA,uBAAuB,OAAA;AACvB,iHAAA,oBAAoB,OAAA;AACpB,2GAAA,cAAc,OAAA;AACd,2GAAA,cAAc,OAAA;AACd,oBAAoB;AACpB,yGAAA,YAAY,OAAA","sourcesContent":["/**\n * Auth UI Module\n *\n * Server-rendered UI templates for OAuth flows with Tailwind CSS (CDN)\n * and Google Fonts.\n *\n * No build step required - all rendering is done at runtime.\n */\n\n// Base layout exports\nexport {\n  CDN,\n  DEFAULT_THEME,\n  type ThemeColors,\n  type ThemeFonts,\n  type ThemeConfig,\n  type BaseLayoutOptions,\n  baseLayout,\n  createLayout,\n  authLayout,\n  centeredCardLayout,\n  wideLayout,\n  extraWideLayout,\n  escapeHtml,\n} from './base-layout';\n\n// Template builder exports\nexport {\n  // Types\n  type AppAuthCard,\n  type ProviderCard,\n  type ToolCard,\n  // Template builders\n  buildConsentPage,\n  buildIncrementalAuthPage,\n  buildFederatedLoginPage,\n  buildToolConsentPage,\n  buildLoginPage,\n  buildErrorPage,\n  // Utility functions\n  renderToHtml,\n} from './templates';\n"]}