@frontmcp/sdk 0.9.0 → 0.11.0

package/auth/vault/auth-providers.registry.d.ts

@@ -1,110 +0,0 @@
-/**
- * AuthProvidersRegistry - Registry for credential providers
- *
- * Manages registration and lookup of credential providers.
- * Providers are registered at scope initialization and
- * remain available for the lifetime of the scope.
- */
-import { Token } from '@frontmcp/di';
-import type { Credential, CredentialProviderConfig, CredentialScope, LoadingStrategy, AuthProvidersVaultOptions } from '@frontmcp/auth';
-/**
- * Normalized provider config with defaults applied
- */
-export interface NormalizedProviderConfig<T extends Credential = Credential> extends Required<Pick<CredentialProviderConfig<T>, 'name' | 'scope' | 'loading'>> {
-    description?: string;
-    cacheTtl: number;
-    factory: CredentialProviderConfig<T>['factory'];
-    refresh?: CredentialProviderConfig<T>['refresh'];
-    toHeaders?: CredentialProviderConfig<T>['toHeaders'];
-    metadata?: Record<string, unknown>;
-    required: boolean;
-}
-/**
- * AuthProvidersRegistry - Manages credential provider configurations
- */
-export declare class AuthProvidersRegistry {
-    private readonly providers;
-    private readonly defaultCacheTtl;
-    constructor(options?: AuthProvidersVaultOptions);
-    /**
-     * Register a credential provider
-     *
-     * @param config - Provider configuration
-     * @throws Error if provider with same name already registered
-     */
-    register<T extends Credential = Credential>(config: CredentialProviderConfig<T>): void;
-    /**
-     * Unregister a credential provider
-     *
-     * @param name - Provider name to unregister
-     * @returns true if provider was unregistered, false if not found
-     */
-    unregister(name: string): boolean;
-    /**
-     * Get a provider configuration by name
-     *
-     * @param name - Provider name
-     * @returns Provider config or undefined if not found
-     */
-    get<T extends Credential = Credential>(name: string): NormalizedProviderConfig<T> | undefined;
-    /**
-     * Check if a provider is registered
-     *
-     * @param name - Provider name
-     * @returns true if provider is registered
-     */
-    has(name: string): boolean;
-    /**
-     * Get all registered provider names
-     */
-    getNames(): string[];
-    /**
-     * Get all provider configurations
-     */
-    getAll(): NormalizedProviderConfig[];
-    /**
-     * Get providers by scope
-     *
-     * @param scope - Credential scope to filter by
-     */
-    getByScope(scope: CredentialScope): NormalizedProviderConfig[];
-    /**
-     * Get providers by loading strategy
-     *
-     * @param loading - Loading strategy to filter by
-     */
-    getByLoading(loading: LoadingStrategy): NormalizedProviderConfig[];
-    /**
-     * Get providers that are required
-     */
-    getRequired(): NormalizedProviderConfig[];
-    /**
-     * Get providers that should be eagerly loaded
-     */
-    getEager(): NormalizedProviderConfig[];
-    /**
-     * Get providers that should be lazily loaded
-     */
-    getLazy(): NormalizedProviderConfig[];
-    /**
-     * Get the number of registered providers
-     */
-    get size(): number;
-    /**
-     * Check if registry is empty
-     */
-    isEmpty(): boolean;
-    /**
-     * Clear all registered providers
-     */
-    clear(): void;
-    /**
-     * Normalize provider config with defaults
-     */
-    private normalize;
-}
-/**
- * DI Token for AuthProvidersRegistry
- */
-export declare const AUTH_PROVIDERS_REGISTRY: Token<AuthProvidersRegistry>;
-//# sourceMappingURL=auth-providers.registry.d.ts.map

package/auth/vault/auth-providers.registry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-providers.registry.d.ts","sourceRoot":"","sources":["../../../src/auth/vault/auth-providers.registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AACrC,OAAO,KAAK,EACV,UAAU,EACV,wBAAwB,EACxB,eAAe,EACf,eAAe,EACf,yBAAyB,EAC1B,MAAM,gBAAgB,CAAC;AAExB;;GAEG;AACH,MAAM,WAAW,wBAAwB,CAAC,CAAC,SAAS,UAAU,GAAG,UAAU,CACzE,SAAQ,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;IACjF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,wBAAwB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAChD,OAAO,CAAC,EAAE,wBAAwB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACjD,SAAS,CAAC,EAAE,wBAAwB,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;GAEG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA+C;IACzE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;gBAE7B,OAAO,CAAC,EAAE,yBAAyB;IAU/C;;;;;OAKG;IACH,QAAQ,CAAC,CAAC,SAAS,UAAU,GAAG,UAAU,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC,CAAC,GAAG,IAAI;IAUtF;;;;;OAKG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAIjC;;;;;OAKG;IACH,GAAG,CAAC,CAAC,SAAS,UAAU,GAAG,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,wBAAwB,CAAC,CAAC,CAAC,GAAG,SAAS;IAI7F;;;;;OAKG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI1B;;OAEG;IACH,QAAQ,IAAI,MAAM,EAAE;IAIpB;;OAEG;IACH,MAAM,IAAI,wBAAwB,EAAE;IAIpC;;;;OAIG;IACH,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,wBAAwB,EAAE;IAI9D;;;;OAIG;IACH,YAAY,CAAC,OAAO,EAAE,eAAe,GAAG,wBAAwB,EAAE;IAIlE;;OAEG;IACH,WAAW,IAAI,wBAAwB,EAAE;IAIzC;;OAEG;IACH,QAAQ,IAAI,wBAAwB,EAAE;IAItC;;OAEG;IACH,OAAO,IAAI,wBAAwB,EAAE;IAIrC;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED;;OAEG;IACH,OAAO,IAAI,OAAO;IAIlB;;OAEG;IACH,KAAK,IAAI,IAAI;IAIb;;OAEG;IACH,OAAO,CAAC,SAAS;CAclB;AAED;;GAEG;AACH,eAAO,MAAM,uBAAuB,EAAqD,KAAK,CAAC,qBAAqB,CAAC,CAAC"}

package/auth/vault/auth-providers.vault.d.ts

@@ -1,93 +0,0 @@
-/**
- * AuthProvidersVault - Dedicated storage namespace for auth provider credentials
- *
- * Uses the same underlying storage (Redis/Vercel KV) as AuthorizationVault
- * but with a separate namespace to avoid conflicts.
- */
-import { Token } from '@frontmcp/di';
-import type { Credential, AuthorizationVault, AppCredential, CredentialScope } from '@frontmcp/auth';
-import { FrontMcpLogger } from '../../common';
-/**
- * AuthProvidersVault - Storage layer for auth provider credentials
- */
-export declare class AuthProvidersVault {
-    private readonly baseVault;
-    private readonly namespace;
-    private readonly logger?;
-    constructor(baseVault: AuthorizationVault, namespace?: string, logger?: FrontMcpLogger);
-    /**
-     * Store a credential in the vault
-     *
-     * @param sessionId - Current session ID
-     * @param providerId - Provider name
-     * @param credential - Credential to store
-     * @param scope - Credential scope
-     * @param userId - User ID (required for user scope)
-     */
-    storeCredential<T extends Credential>(sessionId: string, providerId: string, credential: T, scope: CredentialScope, userId?: string): Promise<void>;
-    /**
-     * Get a credential from the vault
-     *
-     * @param sessionId - Current session ID
-     * @param providerId - Provider name
-     * @param scope - Credential scope
-     * @param userId - User ID (required for user scope)
-     * @returns Credential or null if not found
-     */
-    getCredential<T extends Credential>(sessionId: string, providerId: string, scope: CredentialScope, userId?: string): Promise<T | null>;
-    /**
-     * Remove a credential from the vault
-     *
-     * @param sessionId - Current session ID
-     * @param providerId - Provider name
-     * @param scope - Credential scope
-     * @param userId - User ID (required for user scope)
-     */
-    removeCredential(sessionId: string, providerId: string, scope: CredentialScope, userId?: string): Promise<void>;
-    /**
-     * Invalidate a credential (mark as invalid without removing)
-     *
-     * @param sessionId - Current session ID
-     * @param providerId - Provider name
-     * @param scope - Credential scope
-     * @param reason - Reason for invalidation
-     * @param userId - User ID (required for user scope)
-     */
-    invalidateCredential(sessionId: string, providerId: string, scope: CredentialScope, reason: string, userId?: string): Promise<void>;
-    /**
-     * Update OAuth credential tokens (for refresh)
-     *
-     * @param sessionId - Current session ID
-     * @param providerId - Provider name
-     * @param scope - Credential scope
-     * @param tokens - New tokens
-     * @param userId - User ID (required for user scope)
-     */
-    refreshOAuthCredential(sessionId: string, providerId: string, scope: CredentialScope, tokens: {
-        accessToken: string;
-        refreshToken?: string;
-        expiresAt?: number;
-    }, userId?: string): Promise<void>;
-    /**
-     * Get all credentials for a session
-     *
-     * @param sessionId - Current session ID
-     * @param scope - Optional scope filter
-     * @param userId - User ID (required for user scope)
-     */
-    getAllCredentials(sessionId: string, scope?: CredentialScope, userId?: string): Promise<AppCredential[]>;
-    /**
-     * Build vault key based on scope
-     *
-     * Key patterns:
-     * - global: `authproviders:global`
-     * - user: `authproviders:user:{userId}`
-     * - session: `authproviders:session:{sessionId}`
-     */
-    private buildVaultKey;
-}
-/**
- * DI Token for AuthProvidersVault
- */
-export declare const AUTH_PROVIDERS_VAULT: Token<AuthProvidersVault>;
-//# sourceMappingURL=auth-providers.vault.d.ts.map

package/auth/vault/auth-providers.vault.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-providers.vault.d.ts","sourceRoot":"","sources":["../../../src/auth/vault/auth-providers.vault.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AACrC,OAAO,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAErG,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAG9C;;GAEG;AACH,qBAAa,kBAAkB;IAI3B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAJ5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAiB;gBAGtB,SAAS,EAAE,kBAAkB,EAC7B,SAAS,SAAmB,EAC7C,MAAM,CAAC,EAAE,cAAc;IAKzB;;;;;;;;OAQG;IACG,eAAe,CAAC,CAAC,SAAS,UAAU,EACxC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,CAAC,EACb,KAAK,EAAE,eAAe,EACtB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC;IAqBhB;;;;;;;;OAQG;IACG,aAAa,CAAC,CAAC,SAAS,UAAU,EACtC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,eAAe,EACtB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAmCpB;;;;;;;OAOG;IACG,gBAAgB,CACpB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,eAAe,EACtB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC;IAWhB;;;;;;;;OAQG;IACG,oBAAoB,CACxB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,eAAe,EACtB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC;IAWhB;;;;;;;;OAQG;IACG,sBAAsB,CAC1B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,eAAe,EACtB,MAAM,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,EAC1E,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC;IAYhB;;;;;;OAMG;IACG,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAoD9G;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa;CAkBtB;AAED;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAkD,KAAK,CAAC,kBAAkB,CAAC,CAAC"}

package/auth/vault/credential-loaders/eager-loader.d.ts

@@ -1,46 +0,0 @@
-/**
- * EagerCredentialLoader - Loads credentials at session initialization
- *
- * Used for providers configured with `loading: 'eager'`.
- * Credentials are loaded in parallel at session start.
- */
-import type { CredentialCache, CredentialFactoryContext, ResolvedCredential } from '@frontmcp/auth';
-import type { AuthProvidersRegistry } from '../auth-providers.registry';
-import { FrontMcpLogger } from '../../../common';
-/**
- * Result of eager loading
- */
-export interface EagerLoadResult {
-    /** Successfully loaded credentials */
-    loaded: Map<string, ResolvedCredential>;
-    /** Failed provider names with errors */
-    failed: Map<string, Error>;
-    /** Total loading time in ms */
-    duration: number;
-}
-/**
- * EagerCredentialLoader - Loads credentials at session initialization
- */
-export declare class EagerCredentialLoader {
-    private readonly registry;
-    private readonly cache;
-    private readonly logger?;
-    constructor(registry: AuthProvidersRegistry, cache: CredentialCache, logger?: FrontMcpLogger);
-    /**
-     * Load all eager credentials for a session.
-     * Called during session initialization.
-     *
-     * @param context - Factory context with session/user info
-     * @returns Map of provider name to resolved credential
-     */
-    loadForSession(context: CredentialFactoryContext): Promise<EagerLoadResult>;
-    /**
-     * Load a single credential
-     */
-    private loadOne;
-    /**
-     * Wrap credential with resolved metadata
-     */
-    private wrapCredential;
-}
-//# sourceMappingURL=eager-loader.d.ts.map

package/auth/vault/credential-loaders/eager-loader.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"eager-loader.d.ts","sourceRoot":"","sources":["../../../../src/auth/vault/credential-loaders/eager-loader.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAc,eAAe,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEhH,OAAO,KAAK,EAAE,qBAAqB,EAA4B,MAAM,4BAA4B,CAAC;AAClG,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,sCAAsC;IACtC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACxC,wCAAwC;IACxC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3B,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,qBAAa,qBAAqB;IAI9B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAJxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAiB;gBAGtB,QAAQ,EAAE,qBAAqB,EAC/B,KAAK,EAAE,eAAe,EACvC,MAAM,CAAC,EAAE,cAAc;IAKzB;;;;;;OAMG;IACG,cAAc,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,eAAe,CAAC;IAoDjF;;OAEG;YACW,OAAO;IAgBrB;;OAEG;IACH,OAAO,CAAC,cAAc;CAcvB"}

package/auth/vault/credential-loaders/index.d.ts

@@ -1,7 +0,0 @@
-/**
- * Credential Loaders - Eager and Lazy credential loading strategies
- */
-export { EagerCredentialLoader, type EagerLoadResult } from './eager-loader';
-export { LazyCredentialLoader } from './lazy-loader';
-export { extractCredentialExpiry } from '@frontmcp/auth';
-//# sourceMappingURL=index.d.ts.map

package/auth/vault/credential-loaders/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/auth/vault/credential-loaders/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,qBAAqB,EAAE,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAGrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC"}

package/auth/vault/credential-loaders/lazy-loader.d.ts

@@ -1,53 +0,0 @@
-/**
- * LazyCredentialLoader - Loads credentials on first access
- *
- * Used for providers configured with `loading: 'lazy'` (default).
- * Prevents concurrent loads for the same provider (deduplication).
- */
-import type { Credential, CredentialFactoryContext, ResolvedCredential } from '@frontmcp/auth';
-import type { NormalizedProviderConfig } from '../auth-providers.registry';
-import { FrontMcpLogger } from '../../../common';
-/**
- * LazyCredentialLoader - Loads credentials on first access
- */
-export declare class LazyCredentialLoader {
-    /** In-flight loading promises for deduplication */
-    private readonly loading;
-    private readonly logger?;
-    constructor(logger?: FrontMcpLogger);
-    /**
-     * Load a credential lazily.
-     * If already loading, returns the in-flight promise (deduplication).
-     *
-     * @param config - Provider configuration
-     * @param context - Factory context
-     * @returns Resolved credential or null
-     */
-    load<T extends Credential>(config: NormalizedProviderConfig<T>, context: CredentialFactoryContext): Promise<ResolvedCredential<T> | null>;
-    /**
-     * Perform the actual credential loading
-     */
-    private doLoad;
-    /**
-     * Refresh a credential using the provider's refresh function or factory
-     *
-     * @param config - Provider configuration
-     * @param context - Factory context with existing credential
-     * @returns Refreshed credential or null
-     */
-    refresh<T extends Credential>(config: NormalizedProviderConfig<T>, context: CredentialFactoryContext & {
-        existingCredential: T;
-    }): Promise<ResolvedCredential<T> | null>;
-    /**
-     * Check if a credential is currently being loaded
-     *
-     * @param name - Provider name
-     * @returns true if loading is in progress
-     */
-    isLoading(name: string): boolean;
-    /**
-     * Cancel all in-flight loads (for cleanup)
-     */
-    cancelAll(): void;
-}
-//# sourceMappingURL=lazy-loader.d.ts.map

package/auth/vault/credential-loaders/lazy-loader.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"lazy-loader.d.ts","sourceRoot":"","sources":["../../../../src/auth/vault/credential-loaders/lazy-loader.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAE/F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD;;GAEG;AACH,qBAAa,oBAAoB;IAC/B,mDAAmD;IACnD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyD;IACjF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAiB;gBAE7B,MAAM,CAAC,EAAE,cAAc;IAInC;;;;;;;OAOG;IACG,IAAI,CAAC,CAAC,SAAS,UAAU,EAC7B,MAAM,EAAE,wBAAwB,CAAC,CAAC,CAAC,EACnC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAmBxC;;OAEG;YACW,MAAM;IAsCpB;;;;;;OAMG;IACG,OAAO,CAAC,CAAC,SAAS,UAAU,EAChC,MAAM,EAAE,wBAAwB,CAAC,CAAC,CAAC,EACnC,OAAO,EAAE,wBAAwB,GAAG;QAAE,kBAAkB,EAAE,CAAC,CAAA;KAAE,GAC5D,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAwCxC;;;;;OAKG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAIhC;;OAEG;IACH,SAAS,IAAI,IAAI;CAGlB"}