@hibanacloud/core 0.3.15

package/dist/src/mcp/token-storage/keychain-token-storage.test.js

@@ -0,0 +1,254 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest';
+// Hoist the mock to be available in the vi.mock factory
+const mockKeytar = vi.hoisted(() => ({
+    getPassword: vi.fn(),
+    setPassword: vi.fn(),
+    deletePassword: vi.fn(),
+    findCredentials: vi.fn(),
+}));
+const mockServiceName = 'service-name';
+const mockCryptoRandomBytesString = 'random-string';
+// Mock the dynamic import of 'keytar'
+vi.mock('keytar', () => ({
+    default: mockKeytar,
+}));
+vi.mock('node:crypto', () => ({
+    randomBytes: vi.fn(() => ({
+        toString: vi.fn(() => mockCryptoRandomBytesString),
+    })),
+}));
+describe('KeychainTokenStorage', () => {
+    let storage;
+    beforeEach(async () => {
+        vi.resetAllMocks();
+        // Reset the internal state of the keychain-token-storage module
+        vi.resetModules();
+        const { KeychainTokenStorage } = await import('./keychain-token-storage.js');
+        storage = new KeychainTokenStorage(mockServiceName);
+    });
+    afterEach(() => {
+        vi.restoreAllMocks();
+        vi.useRealTimers();
+    });
+    const validCredentials = {
+        serverName: 'test-server',
+        token: {
+            accessToken: 'access-token',
+            tokenType: 'Bearer',
+            expiresAt: Date.now() + 3600000,
+        },
+        updatedAt: Date.now(),
+    };
+    describe('checkKeychainAvailability', () => {
+        it('should return true if keytar is available and functional', async () => {
+            mockKeytar.setPassword.mockResolvedValue(undefined);
+            mockKeytar.getPassword.mockResolvedValue('test');
+            mockKeytar.deletePassword.mockResolvedValue(true);
+            const isAvailable = await storage.checkKeychainAvailability();
+            expect(isAvailable).toBe(true);
+            expect(mockKeytar.setPassword).toHaveBeenCalledWith(mockServiceName, `__keychain_test__${mockCryptoRandomBytesString}`, 'test');
+            expect(mockKeytar.getPassword).toHaveBeenCalledWith(mockServiceName, `__keychain_test__${mockCryptoRandomBytesString}`);
+            expect(mockKeytar.deletePassword).toHaveBeenCalledWith(mockServiceName, `__keychain_test__${mockCryptoRandomBytesString}`);
+        });
+        it('should return false if keytar fails to set password', async () => {
+            mockKeytar.setPassword.mockRejectedValue(new Error('write error'));
+            const isAvailable = await storage.checkKeychainAvailability();
+            expect(isAvailable).toBe(false);
+        });
+        it('should return false if retrieved password does not match', async () => {
+            mockKeytar.setPassword.mockResolvedValue(undefined);
+            mockKeytar.getPassword.mockResolvedValue('wrong-password');
+            mockKeytar.deletePassword.mockResolvedValue(true);
+            const isAvailable = await storage.checkKeychainAvailability();
+            expect(isAvailable).toBe(false);
+        });
+        it('should cache the availability result', async () => {
+            mockKeytar.setPassword.mockResolvedValue(undefined);
+            mockKeytar.getPassword.mockResolvedValue('test');
+            mockKeytar.deletePassword.mockResolvedValue(true);
+            await storage.checkKeychainAvailability();
+            await storage.checkKeychainAvailability();
+            expect(mockKeytar.setPassword).toHaveBeenCalledTimes(1);
+        });
+    });
+    describe('with keychain unavailable', () => {
+        beforeEach(async () => {
+            // Force keychain to be unavailable
+            mockKeytar.setPassword.mockRejectedValue(new Error('keychain error'));
+            await storage.checkKeychainAvailability();
+        });
+        it('getCredentials should throw', async () => {
+            await expect(storage.getCredentials('server')).rejects.toThrow('Keychain is not available');
+        });
+        it('setCredentials should throw', async () => {
+            await expect(storage.setCredentials(validCredentials)).rejects.toThrow('Keychain is not available');
+        });
+        it('deleteCredentials should throw', async () => {
+            await expect(storage.deleteCredentials('server')).rejects.toThrow('Keychain is not available');
+        });
+        it('listServers should throw', async () => {
+            await expect(storage.listServers()).rejects.toThrow('Keychain is not available');
+        });
+        it('getAllCredentials should throw', async () => {
+            await expect(storage.getAllCredentials()).rejects.toThrow('Keychain is not available');
+        });
+    });
+    describe('with keychain available', () => {
+        beforeEach(async () => {
+            mockKeytar.setPassword.mockResolvedValue(undefined);
+            mockKeytar.getPassword.mockResolvedValue('test');
+            mockKeytar.deletePassword.mockResolvedValue(true);
+            await storage.checkKeychainAvailability();
+            // Reset mocks after availability check
+            vi.resetAllMocks();
+        });
+        describe('getCredentials', () => {
+            it('should return null if no credentials are found', async () => {
+                mockKeytar.getPassword.mockResolvedValue(null);
+                const result = await storage.getCredentials('test-server');
+                expect(result).toBeNull();
+                expect(mockKeytar.getPassword).toHaveBeenCalledWith(mockServiceName, 'test-server');
+            });
+            it('should return credentials if found and not expired', async () => {
+                mockKeytar.getPassword.mockResolvedValue(JSON.stringify(validCredentials));
+                const result = await storage.getCredentials('test-server');
+                expect(result).toEqual(validCredentials);
+            });
+            it('should return null if credentials have expired', async () => {
+                const expiredCreds = {
+                    ...validCredentials,
+                    token: { ...validCredentials.token, expiresAt: Date.now() - 1000 },
+                };
+                mockKeytar.getPassword.mockResolvedValue(JSON.stringify(expiredCreds));
+                const result = await storage.getCredentials('test-server');
+                expect(result).toBeNull();
+            });
+            it('should throw if stored data is corrupted JSON', async () => {
+                mockKeytar.getPassword.mockResolvedValue('not-json');
+                await expect(storage.getCredentials('test-server')).rejects.toThrow('Failed to parse stored credentials for test-server');
+            });
+        });
+        describe('setCredentials', () => {
+            it('should save credentials to keychain', async () => {
+                vi.useFakeTimers();
+                mockKeytar.setPassword.mockResolvedValue(undefined);
+                await storage.setCredentials(validCredentials);
+                expect(mockKeytar.setPassword).toHaveBeenCalledWith(mockServiceName, 'test-server', JSON.stringify({ ...validCredentials, updatedAt: Date.now() }));
+            });
+            it('should throw if saving to keychain fails', async () => {
+                mockKeytar.setPassword.mockRejectedValue(new Error('keychain write error'));
+                await expect(storage.setCredentials(validCredentials)).rejects.toThrow('keychain write error');
+            });
+        });
+        describe('deleteCredentials', () => {
+            it('should delete credentials from keychain', async () => {
+                mockKeytar.deletePassword.mockResolvedValue(true);
+                await storage.deleteCredentials('test-server');
+                expect(mockKeytar.deletePassword).toHaveBeenCalledWith(mockServiceName, 'test-server');
+            });
+            it('should throw if no credentials were found to delete', async () => {
+                mockKeytar.deletePassword.mockResolvedValue(false);
+                await expect(storage.deleteCredentials('test-server')).rejects.toThrow('No credentials found for test-server');
+            });
+            it('should throw if deleting from keychain fails', async () => {
+                mockKeytar.deletePassword.mockRejectedValue(new Error('keychain delete error'));
+                await expect(storage.deleteCredentials('test-server')).rejects.toThrow('keychain delete error');
+            });
+        });
+        describe('listServers', () => {
+            it('should return a list of server names', async () => {
+                mockKeytar.findCredentials.mockResolvedValue([
+                    { account: 'server1', password: '' },
+                    { account: 'server2', password: '' },
+                ]);
+                const result = await storage.listServers();
+                expect(result).toEqual(['server1', 'server2']);
+            });
+            it('should not include internal test keys in the server list', async () => {
+                mockKeytar.findCredentials.mockResolvedValue([
+                    { account: 'server1', password: '' },
+                    {
+                        account: `__keychain_test__${mockCryptoRandomBytesString}`,
+                        password: '',
+                    },
+                    { account: 'server2', password: '' },
+                ]);
+                const result = await storage.listServers();
+                expect(result).toEqual(['server1', 'server2']);
+            });
+            it('should return an empty array on error', async () => {
+                mockKeytar.findCredentials.mockRejectedValue(new Error('find error'));
+                const result = await storage.listServers();
+                expect(result).toEqual([]);
+            });
+        });
+        describe('getAllCredentials', () => {
+            it('should return a map of all valid credentials', async () => {
+                const creds2 = {
+                    ...validCredentials,
+                    serverName: 'server2',
+                };
+                const expiredCreds = {
+                    ...validCredentials,
+                    serverName: 'expired-server',
+                    token: { ...validCredentials.token, expiresAt: Date.now() - 1000 },
+                };
+                const structurallyInvalidCreds = {
+                    serverName: 'invalid-server',
+                };
+                mockKeytar.findCredentials.mockResolvedValue([
+                    {
+                        account: 'test-server',
+                        password: JSON.stringify(validCredentials),
+                    },
+                    { account: 'server2', password: JSON.stringify(creds2) },
+                    {
+                        account: 'expired-server',
+                        password: JSON.stringify(expiredCreds),
+                    },
+                    { account: 'bad-server', password: 'not-json' },
+                    {
+                        account: 'invalid-server',
+                        password: JSON.stringify(structurallyInvalidCreds),
+                    },
+                ]);
+                const result = await storage.getAllCredentials();
+                expect(result.size).toBe(2);
+                expect(result.get('test-server')).toEqual(validCredentials);
+                expect(result.get('server2')).toEqual(creds2);
+                expect(result.has('expired-server')).toBe(false);
+                expect(result.has('bad-server')).toBe(false);
+                expect(result.has('invalid-server')).toBe(false);
+            });
+        });
+        describe('clearAll', () => {
+            it('should delete all credentials for the service', async () => {
+                mockKeytar.findCredentials.mockResolvedValue([
+                    { account: 'server1', password: '' },
+                    { account: 'server2', password: '' },
+                ]);
+                mockKeytar.deletePassword.mockResolvedValue(true);
+                await storage.clearAll();
+                expect(mockKeytar.deletePassword).toHaveBeenCalledTimes(2);
+                expect(mockKeytar.deletePassword).toHaveBeenCalledWith(mockServiceName, 'server1');
+                expect(mockKeytar.deletePassword).toHaveBeenCalledWith(mockServiceName, 'server2');
+            });
+            it('should throw an aggregated error if deletions fail', async () => {
+                mockKeytar.findCredentials.mockResolvedValue([
+                    { account: 'server1', password: '' },
+                    { account: 'server2', password: '' },
+                ]);
+                mockKeytar.deletePassword
+                    .mockResolvedValueOnce(true)
+                    .mockRejectedValueOnce(new Error('delete failed'));
+                await expect(storage.clearAll()).rejects.toThrow('Failed to clear some credentials: delete failed');
+            });
+        });
+    });
+});
+//# sourceMappingURL=keychain-token-storage.test.js.map

package/dist/src/mcp/token-storage/keychain-token-storage.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain-token-storage.test.js","sourceRoot":"","sources":["../../../../src/mcp/token-storage/keychain-token-storage.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAIzE,wDAAwD;AACxD,MAAM,UAAU,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACnC,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;IACpB,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;IACpB,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;IACvB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE;CACzB,CAAC,CAAC,CAAC;AAEJ,MAAM,eAAe,GAAG,cAAc,CAAC;AACvC,MAAM,2BAA2B,GAAG,eAAe,CAAC;AAEpD,sCAAsC;AACtC,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IACvB,OAAO,EAAE,UAAU;CACpB,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5B,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QACxB,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC;KACnD,CAAC,CAAC;CACJ,CAAC,CAAC,CAAC;AAEJ,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,IAAI,OAA6B,CAAC;IAElC,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,gEAAgE;QAChE,EAAE,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAC3C,6BAA6B,CAC9B,CAAC;QACF,OAAO,GAAG,IAAI,oBAAoB,CAAC,eAAe,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;QACrB,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,MAAM,gBAAgB,GAAG;QACvB,UAAU,EAAE,aAAa;QACzB,KAAK,EAAE;YACL,WAAW,EAAE,cAAc;YAC3B,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;SAChC;QACD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACF,CAAC;IAEtB,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACzC,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;YACxE,UAAU,CAAC,WAAW,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YACpD,UAAU,CAAC,WAAW,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACjD,UAAU,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAElD,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,yBAAyB,EAAE,CAAC;YAC9D,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,oBAAoB,CACjD,eAAe,EACf,oBAAoB,2BAA2B,EAAE,EACjD,MAAM,CACP,CAAC;YACF,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,oBAAoB,CACjD,eAAe,EACf,oBAAoB,2BAA2B,EAAE,CAClD,CAAC;YACF,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,oBAAoB,CACpD,eAAe,EACf,oBAAoB,2BAA2B,EAAE,CAClD,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,UAAU,CAAC,WAAW,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;YACnE,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,yBAAyB,EAAE,CAAC;YAC9D,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;YACxE,UAAU,CAAC,WAAW,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YACpD,UAAU,CAAC,WAAW,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;YAC3D,UAAU,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAClD,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,yBAAyB,EAAE,CAAC;YAC9D,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;YACpD,UAAU,CAAC,WAAW,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YACpD,UAAU,CAAC,WAAW,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACjD,UAAU,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAElD,MAAM,OAAO,CAAC,yBAAyB,EAAE,CAAC;YAC1C,MAAM,OAAO,CAAC,yBAAyB,EAAE,CAAC;YAE1C,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACzC,UAAU,CAAC,KAAK,IAAI,EAAE;YACpB,mCAAmC;YACnC,UAAU,CAAC,WAAW,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;YACtE,MAAM,OAAO,CAAC,yBAAyB,EAAE,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;YAC3C,MAAM,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC5D,2BAA2B,CAC5B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;YAC3C,MAAM,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACpE,2BAA2B,CAC5B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YAC9C,MAAM,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC/D,2BAA2B,CAC5B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;YACxC,MAAM,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CACjD,2BAA2B,CAC5B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YAC9C,MAAM,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CACvD,2BAA2B,CAC5B,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACvC,UAAU,CAAC,KAAK,IAAI,EAAE;YACpB,UAAU,CAAC,WAAW,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YACpD,UAAU,CAAC,WAAW,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACjD,UAAU,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAClD,MAAM,OAAO,CAAC,yBAAyB,EAAE,CAAC;YAC1C,uCAAuC;YACvC,EAAE,CAAC,aAAa,EAAE,CAAC;QACrB,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;YAC9B,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;gBAC9D,UAAU,CAAC,WAAW,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;gBAC/C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;gBAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC1B,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,oBAAoB,CACjD,eAAe,EACf,aAAa,CACd,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;gBAClE,UAAU,CAAC,WAAW,CAAC,iBAAiB,CACtC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,CACjC,CAAC;gBACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;gBAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAC3C,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;gBAC9D,MAAM,YAAY,GAAG;oBACnB,GAAG,gBAAgB;oBACnB,KAAK,EAAE,EAAE,GAAG,gBAAgB,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE;iBACnE,CAAC;gBACF,UAAU,CAAC,WAAW,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC;gBACvE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;gBAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;gBAC7D,UAAU,CAAC,WAAW,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;gBACrD,MAAM,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACjE,oDAAoD,CACrD,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;YAC9B,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;gBACnD,EAAE,CAAC,aAAa,EAAE,CAAC;gBACnB,UAAU,CAAC,WAAW,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;gBACpD,MAAM,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;gBAC/C,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,oBAAoB,CACjD,eAAe,EACf,aAAa,EACb,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,gBAAgB,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAC/D,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;gBACxD,UAAU,CAAC,WAAW,CAAC,iBAAiB,CACtC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAClC,CAAC;gBACF,MAAM,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACpE,sBAAsB,CACvB,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;YACjC,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;gBACvD,UAAU,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;gBAClD,MAAM,OAAO,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;gBAC/C,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,oBAAoB,CACpD,eAAe,EACf,aAAa,CACd,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;gBACnE,UAAU,CAAC,cAAc,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;gBACnD,MAAM,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACpE,sCAAsC,CACvC,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;gBAC5D,UAAU,CAAC,cAAc,CAAC,iBAAiB,CACzC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CACnC,CAAC;gBACF,MAAM,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACpE,uBAAuB,CACxB,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;YAC3B,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;gBACpD,UAAU,CAAC,eAAe,CAAC,iBAAiB,CAAC;oBAC3C,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE;oBACpC,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE;iBACrC,CAAC,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;gBAC3C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;gBACxE,UAAU,CAAC,eAAe,CAAC,iBAAiB,CAAC;oBAC3C,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE;oBACpC;wBACE,OAAO,EAAE,oBAAoB,2BAA2B,EAAE;wBAC1D,QAAQ,EAAE,EAAE;qBACb;oBACD,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE;iBACrC,CAAC,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;gBAC3C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;gBACrD,UAAU,CAAC,eAAe,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;gBACtE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;gBAC3C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC7B,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;YACjC,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;gBAC5D,MAAM,MAAM,GAAG;oBACb,GAAG,gBAAgB;oBACnB,UAAU,EAAE,SAAS;iBACtB,CAAC;gBACF,MAAM,YAAY,GAAG;oBACnB,GAAG,gBAAgB;oBACnB,UAAU,EAAE,gBAAgB;oBAC5B,KAAK,EAAE,EAAE,GAAG,gBAAgB,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE;iBACnE,CAAC;gBACF,MAAM,wBAAwB,GAAG;oBAC/B,UAAU,EAAE,gBAAgB;iBAC7B,CAAC;gBAEF,UAAU,CAAC,eAAe,CAAC,iBAAiB,CAAC;oBAC3C;wBACE,OAAO,EAAE,aAAa;wBACtB,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC;qBAC3C;oBACD,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;oBACxD;wBACE,OAAO,EAAE,gBAAgB;wBACzB,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;qBACvC;oBACD,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE;oBAC/C;wBACE,OAAO,EAAE,gBAAgB;wBACzB,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAAC;qBACnD;iBACF,CAAC,CAAC;gBAEH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAC;gBACjD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC5B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBAC5D,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC9C,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACjD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC7C,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;YACxB,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;gBAC7D,UAAU,CAAC,eAAe,CAAC,iBAAiB,CAAC;oBAC3C,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE;oBACpC,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE;iBACrC,CAAC,CAAC;gBACH,UAAU,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;gBAElD,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAEzB,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;gBAC3D,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,oBAAoB,CACpD,eAAe,EACf,SAAS,CACV,CAAC;gBACF,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,oBAAoB,CACpD,eAAe,EACf,SAAS,CACV,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;gBAClE,UAAU,CAAC,eAAe,CAAC,iBAAiB,CAAC;oBAC3C,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE;oBACpC,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE;iBACrC,CAAC,CAAC;gBACH,UAAU,CAAC,cAAc;qBACtB,qBAAqB,CAAC,IAAI,CAAC;qBAC3B,qBAAqB,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;gBAErD,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAC9C,iDAAiD,CAClD,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/mcp/token-storage/types.d.ts

@@ -0,0 +1,38 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Interface for OAuth tokens.
+ */
+export interface OAuthToken {
+    accessToken: string;
+    refreshToken?: string;
+    expiresAt?: number;
+    tokenType: string;
+    scope?: string;
+}
+/**
+ * Interface for stored OAuth credentials.
+ */
+export interface OAuthCredentials {
+    serverName: string;
+    token: OAuthToken;
+    clientId?: string;
+    tokenUrl?: string;
+    mcpServerUrl?: string;
+    updatedAt: number;
+}
+export interface TokenStorage {
+    getCredentials(serverName: string): Promise<OAuthCredentials | null>;
+    setCredentials(credentials: OAuthCredentials): Promise<void>;
+    deleteCredentials(serverName: string): Promise<void>;
+    listServers(): Promise<string[]>;
+    getAllCredentials(): Promise<Map<string, OAuthCredentials>>;
+    clearAll(): Promise<void>;
+}
+export declare enum TokenStorageType {
+    KEYCHAIN = "keychain",
+    ENCRYPTED_FILE = "encrypted_file"
+}

package/dist/src/mcp/token-storage/types.js

@@ -0,0 +1,11 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export var TokenStorageType;
+(function (TokenStorageType) {
+    TokenStorageType["KEYCHAIN"] = "keychain";
+    TokenStorageType["ENCRYPTED_FILE"] = "encrypted_file";
+})(TokenStorageType || (TokenStorageType = {}));
+//# sourceMappingURL=types.js.map

package/dist/src/mcp/token-storage/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/mcp/token-storage/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAkCH,MAAM,CAAN,IAAY,gBAGX;AAHD,WAAY,gBAAgB;IAC1B,yCAAqB,CAAA;IACrB,qDAAiC,CAAA;AACnC,CAAC,EAHW,gBAAgB,KAAhB,gBAAgB,QAG3B"}

package/dist/src/mocks/msw.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export declare const server: import("msw/node").SetupServerApi;

package/dist/src/mocks/msw.js

@@ -0,0 +1,8 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { setupServer } from 'msw/node';
+export const server = setupServer();
+//# sourceMappingURL=msw.js.map

package/dist/src/mocks/msw.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"msw.js","sourceRoot":"","sources":["../../../src/mocks/msw.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC,MAAM,CAAC,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC"}

package/dist/src/oauth/callbackServer.d.ts

@@ -0,0 +1,15 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export interface CallbackResult {
+    code?: string;
+    state?: string;
+    error?: string;
+    errorDescription?: string;
+}
+/**
+ * Start local HTTP server to receive OAuth callback
+ */
+export declare function startCallbackServer(port: number, timeoutMs?: number): Promise<CallbackResult>;

package/dist/src/oauth/callbackServer.js

@@ -0,0 +1,89 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import http from 'http';
+import { URL } from 'url';
+/**
+ * Start local HTTP server to receive OAuth callback
+ */
+export async function startCallbackServer(port, timeoutMs = 120000) {
+    return new Promise((resolve, reject) => {
+        const server = http.createServer((req, res) => {
+            // Parse callback URL
+            const url = new URL(req.url, `http://localhost:${port}`);
+            // Success response HTML
+            const successHtml = `
+        <!DOCTYPE html>
+        <html>
+          <head><title>Authorization Successful</title></head>
+          <body style="font-family: system-ui; text-align: center; padding: 50px;">
+            <h1 style="color: #10b981;">Authorization Successful</h1>
+            <p>You can close this window and return to the terminal.</p>
+          </body>
+        </html>
+      `;
+            // Error response HTML
+            const errorHtml = (error) => `
+        <!DOCTYPE html>
+        <html>
+          <head><title>Authorization Failed</title></head>
+          <body style="font-family: system-ui; text-align: center; padding: 50px;">
+            <h1 style="color: #ef4444;">Authorization Failed</h1>
+            <p>${error}</p>
+            <p>Please return to the terminal.</p>
+          </body>
+        </html>
+      `;
+            if (url.pathname === '/oauth/callback') {
+                const code = url.searchParams.get('code');
+                const state = url.searchParams.get('state');
+                const error = url.searchParams.get('error');
+                const errorDescription = url.searchParams.get('error_description');
+                // Send response to browser
+                res.writeHead(200, { 'Content-Type': 'text/html' });
+                if (error) {
+                    res.end(errorHtml(errorDescription || error));
+                    resolve({ error, errorDescription: errorDescription || undefined });
+                }
+                else if (code && state) {
+                    res.end(successHtml);
+                    resolve({ code, state });
+                }
+                else {
+                    res.end(errorHtml('Missing code or state parameter'));
+                    resolve({
+                        error: 'invalid_request',
+                        errorDescription: 'Missing parameters',
+                    });
+                }
+                // Close server after response
+                server.close();
+            }
+            else {
+                res.writeHead(404);
+                res.end('Not Found');
+            }
+        });
+        // Timeout handler
+        const timeout = setTimeout(() => {
+            server.close();
+            reject(new Error('OAuth callback timed out'));
+        }, timeoutMs);
+        // Start server
+        server.listen(port, 'localhost', () => {
+            console.log(`Waiting for OAuth callback on http://localhost:${port}/oauth/callback`);
+        });
+        // Cleanup on close
+        server.on('close', () => {
+            clearTimeout(timeout);
+        });
+        // Error handler
+        server.on('error', (err) => {
+            clearTimeout(timeout);
+            reject(err);
+        });
+    });
+}
+//# sourceMappingURL=callbackServer.js.map

package/dist/src/oauth/callbackServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"callbackServer.js","sourceRoot":"","sources":["../../../src/oauth/callbackServer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC;AAS1B;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAY,EACZ,YAAoB,MAAM;IAE1B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC5C,qBAAqB;YACrB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAI,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;YAE1D,wBAAwB;YACxB,MAAM,WAAW,GAAG;;;;;;;;;OASnB,CAAC;YAEF,sBAAsB;YACtB,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC;;;;;;iBAM1B,KAAK;;;;OAIf,CAAC;YAEF,IAAI,GAAG,CAAC,QAAQ,KAAK,iBAAiB,EAAE,CAAC;gBACvC,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC5C,MAAM,gBAAgB,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBAEnE,2BAA2B;gBAC3B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,IAAI,KAAK,EAAE,CAAC;oBACV,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,IAAI,KAAK,CAAC,CAAC,CAAC;oBAC9C,OAAO,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,IAAI,SAAS,EAAE,CAAC,CAAC;gBACtE,CAAC;qBAAM,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;oBACrB,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC3B,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC,CAAC;oBACtD,OAAO,CAAC;wBACN,KAAK,EAAE,iBAAiB;wBACxB,gBAAgB,EAAE,oBAAoB;qBACvC,CAAC,CAAC;gBACL,CAAC;gBAED,8BAA8B;gBAC9B,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,kBAAkB;QAClB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAChD,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,eAAe;QACf,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;YACpC,OAAO,CAAC,GAAG,CACT,kDAAkD,IAAI,iBAAiB,CACxE,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,mBAAmB;QACnB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,gBAAgB;QAChB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/oauth/oauthClient.d.ts

@@ -0,0 +1,57 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export interface OAuthClientConfig {
+    oauthBaseUrl: string;
+    apiBaseUrl: string;
+    frontendBaseUrl: string;
+    clientName: string;
+    redirectPort: number;
+}
+export interface OAuthTokens {
+    accessToken: string;
+    refreshToken: string;
+    expiresIn: number;
+    tokenType: string;
+    scope: string;
+    apiKey?: string;
+}
+export declare class HibanaOAuthClient {
+    private config;
+    private oauthBaseUrl;
+    private frontendBaseUrl;
+    private clientId;
+    private pkce;
+    private state;
+    constructor(config: OAuthClientConfig);
+    /**
+     * Helper method to make HTTP/HTTPS requests with proper SSL handling
+     */
+    private makeRequest;
+    /**
+     * Step 1: Register OAuth client with backend
+     */
+    registerClient(): Promise<string>;
+    /**
+     * Step 2: Build authorization URL for user
+     */
+    buildAuthorizationUrl(): string;
+    /**
+     * Step 3: Exchange authorization code for tokens
+     */
+    exchangeCodeForTokens(code: string, receivedState: string): Promise<OAuthTokens>;
+    /**
+     * Step 4: Refresh access token using refresh token
+     */
+    refreshAccessToken(refreshToken: string): Promise<OAuthTokens>;
+    /**
+     * Get client ID
+     */
+    getClientId(): string | null;
+    /**
+     * Set client ID (for loading from storage)
+     */
+    setClientId(clientId: string): void;
+}