@lanonasis/oauth-client 1.2.1 → 1.2.3

package/dist/index.d.cts

@@ -1,47 +1,5 @@
-interface TokenResponse {
-    access_token: string;
-    refresh_token?: string;
-    expires_in: number;
-    token_type: string;
-    scope?: string;
-    issued_at?: number;
-}
-interface DeviceCodeResponse {
-    device_code: string;
-    user_code: string;
-    verification_uri: string;
-    verification_uri_complete?: string;
-    expires_in: number;
-    interval: number;
-}
-interface OAuthConfig {
-    clientId: string;
-    authBaseUrl?: string;
-    redirectUri?: string;
-    scope?: string;
-}
-interface AuthError {
-    error: string;
-    error_description?: string;
-}
-type GrantType = 'authorization_code' | 'urn:ietf:params:oauth:grant-type:device_code' | 'refresh_token';
-interface PKCEChallenge {
-    codeVerifier: string;
-    codeChallenge: string;
-}
-
-declare abstract class BaseOAuthFlow {
-    protected readonly clientId: string;
-    protected readonly authBaseUrl: string;
-    protected readonly scope: string;
-    constructor(config: OAuthConfig);
-    abstract authenticate(): Promise<TokenResponse>;
-    protected makeTokenRequest(body: Record<string, string>): Promise<TokenResponse>;
-    protected generateState(): string;
-    protected base64URLEncode(buffer: ArrayBuffer | Uint8Array): string;
-    refreshToken(refreshToken: string): Promise<TokenResponse>;
-    revokeToken(token: string, tokenType?: 'access_token' | 'refresh_token'): Promise<void>;
-}
+import { B as BaseOAuthFlow, O as OAuthConfig, b as TokenResponse, T as TokenStorageAdapter } from './api-key-storage-web-DannE11B.cjs';
+export { f as ApiKeyData, g as ApiKeyStorage, A as ApiKeyStorageWeb, d as AuthError, D as DesktopOAuthFlow, c as DeviceCodeResponse, G as GrantType, P as PKCEChallenge, e as TokenStorage, a as TokenStorageWeb } from './api-key-storage-web-DannE11B.cjs';
 
 declare class TerminalOAuthFlow extends BaseOAuthFlow {
     private pollInterval;
@@ -55,128 +13,17 @@ declare class TerminalOAuthFlow extends BaseOAuthFlow {
     private checkDeviceCode;
 }
 
-declare class DesktopOAuthFlow extends BaseOAuthFlow {
-    private readonly redirectUri;
-    private authWindow;
-    constructor(config: OAuthConfig);
-    authenticate(): Promise<TokenResponse>;
-    private generatePKCEChallenge;
-    private generateCodeVerifier;
-    private generateCodeChallenge;
-    private buildAuthorizationUrl;
-    private openAuthWindow;
-    private openBrowserWindow;
-    private openElectronWindow;
-    private exchangeCodeForToken;
-}
-
-declare class TokenStorage {
-    private readonly storageKey;
-    private readonly webEncryptionKeyStorage;
-    private keytar;
-    constructor();
-    store(tokens: TokenResponse): Promise<void>;
-    retrieve(): Promise<TokenResponse | null>;
-    clear(): Promise<void>;
-    isTokenExpired(tokens: TokenResponse & {
-        issued_at?: number;
-    }): boolean;
-    private storeToFile;
-    private retrieveFromFile;
-    private deleteFile;
-    private getFileEncryptionKey;
-    private encrypt;
-    private decrypt;
-    private isNode;
-    private isElectron;
-    private isMobile;
-    private getWebEncryptionKey;
-}
-
-/**
- * API Key Storage Service
- * Secure multi-platform API key storage with encryption
- * Supports Node.js, Electron, Web, and Mobile environments
- */
-interface ApiKeyData {
-    apiKey: string;
-    organizationId?: string;
-    userId?: string;
-    environment?: 'development' | 'staging' | 'production';
-    createdAt?: string;
-    expiresAt?: string;
-    metadata?: Record<string, unknown>;
-}
-declare class ApiKeyStorage {
-    private readonly storageKey;
-    private readonly legacyConfigKey;
-    private readonly webEncryptionKeyStorage;
-    private keytar;
-    private migrationCompleted;
-    constructor();
-    /**
-     * Initialize and migrate from legacy storage if needed
-     */
-    initialize(): Promise<void>;
-    /**
-     * Store API key securely
-     */
-    store(data: ApiKeyData): Promise<void>;
-    /**
-     * Retrieve API key from secure storage
-     */
-    retrieve(): Promise<ApiKeyData | null>;
-    /**
-     * Get just the API key string (convenience method)
-     */
-    getApiKey(): Promise<string | null>;
-    /**
-     * Check if API key exists
-     */
-    hasApiKey(): Promise<boolean>;
-    /**
-     * Clear API key from storage
-     */
-    clear(): Promise<void>;
-    /**
-     * Check if API key is expired
-     */
-    isExpired(data: ApiKeyData): boolean;
-    /**
-     * Update API key metadata without changing the key itself
-     */
-    updateMetadata(metadata: Record<string, unknown>): Promise<void>;
-    /**
-     * Migrate from legacy configuration storage
-     */
-    private migrateFromLegacyIfNeeded;
-    private storeToFile;
-    private retrieveFromFile;
-    private deleteFile;
-    private retrieveLegacyFromFile;
-    private deleteLegacyFile;
-    private getFileEncryptionKey;
-    private encrypt;
-    private decrypt;
-    private getWebEncryptionKey;
-    private isNode;
-    private isElectron;
-    private isMobile;
-    /**
-     * Normalize API keys to a SHA-256 hex digest.
-     * Accepts pre-hashed input and lowercases it to prevent double hashing.
-     */
-    private normalizeApiKey;
-}
-
 interface MCPClientConfig extends Partial<OAuthConfig> {
     mcpEndpoint?: string;
     autoRefresh?: boolean;
+    apiKey?: string;
+    tokenStorage?: TokenStorageAdapter;
 }
 declare class MCPClient {
     private tokenStorage;
     private authFlow;
     private config;
+    private authMode;
     private ws;
     private eventSource;
     private accessToken;
@@ -204,4 +51,4 @@ declare class MCPClient {
     deleteMemory(id: string): Promise<void>;
 }
 
-export { type ApiKeyData, ApiKeyStorage, type AuthError, BaseOAuthFlow, DesktopOAuthFlow, type DeviceCodeResponse, type GrantType, MCPClient, type MCPClientConfig, type OAuthConfig, type PKCEChallenge, TerminalOAuthFlow, type TokenResponse, TokenStorage };
+export { BaseOAuthFlow, MCPClient, type MCPClientConfig, OAuthConfig, TerminalOAuthFlow, TokenResponse, TokenStorageAdapter };

package/dist/index.d.ts

@@ -1,47 +1,5 @@
-interface TokenResponse {
-    access_token: string;
-    refresh_token?: string;
-    expires_in: number;
-    token_type: string;
-    scope?: string;
-    issued_at?: number;
-}
-interface DeviceCodeResponse {
-    device_code: string;
-    user_code: string;
-    verification_uri: string;
-    verification_uri_complete?: string;
-    expires_in: number;
-    interval: number;
-}
-interface OAuthConfig {
-    clientId: string;
-    authBaseUrl?: string;
-    redirectUri?: string;
-    scope?: string;
-}
-interface AuthError {
-    error: string;
-    error_description?: string;
-}
-type GrantType = 'authorization_code' | 'urn:ietf:params:oauth:grant-type:device_code' | 'refresh_token';
-interface PKCEChallenge {
-    codeVerifier: string;
-    codeChallenge: string;
-}
-
-declare abstract class BaseOAuthFlow {
-    protected readonly clientId: string;
-    protected readonly authBaseUrl: string;
-    protected readonly scope: string;
-    constructor(config: OAuthConfig);
-    abstract authenticate(): Promise<TokenResponse>;
-    protected makeTokenRequest(body: Record<string, string>): Promise<TokenResponse>;
-    protected generateState(): string;
-    protected base64URLEncode(buffer: ArrayBuffer | Uint8Array): string;
-    refreshToken(refreshToken: string): Promise<TokenResponse>;
-    revokeToken(token: string, tokenType?: 'access_token' | 'refresh_token'): Promise<void>;
-}
+import { B as BaseOAuthFlow, O as OAuthConfig, b as TokenResponse, T as TokenStorageAdapter } from './api-key-storage-web-DannE11B.js';
+export { f as ApiKeyData, g as ApiKeyStorage, A as ApiKeyStorageWeb, d as AuthError, D as DesktopOAuthFlow, c as DeviceCodeResponse, G as GrantType, P as PKCEChallenge, e as TokenStorage, a as TokenStorageWeb } from './api-key-storage-web-DannE11B.js';
 
 declare class TerminalOAuthFlow extends BaseOAuthFlow {
     private pollInterval;
@@ -55,128 +13,17 @@ declare class TerminalOAuthFlow extends BaseOAuthFlow {
     private checkDeviceCode;
 }
 
-declare class DesktopOAuthFlow extends BaseOAuthFlow {
-    private readonly redirectUri;
-    private authWindow;
-    constructor(config: OAuthConfig);
-    authenticate(): Promise<TokenResponse>;
-    private generatePKCEChallenge;
-    private generateCodeVerifier;
-    private generateCodeChallenge;
-    private buildAuthorizationUrl;
-    private openAuthWindow;
-    private openBrowserWindow;
-    private openElectronWindow;
-    private exchangeCodeForToken;
-}
-
-declare class TokenStorage {
-    private readonly storageKey;
-    private readonly webEncryptionKeyStorage;
-    private keytar;
-    constructor();
-    store(tokens: TokenResponse): Promise<void>;
-    retrieve(): Promise<TokenResponse | null>;
-    clear(): Promise<void>;
-    isTokenExpired(tokens: TokenResponse & {
-        issued_at?: number;
-    }): boolean;
-    private storeToFile;
-    private retrieveFromFile;
-    private deleteFile;
-    private getFileEncryptionKey;
-    private encrypt;
-    private decrypt;
-    private isNode;
-    private isElectron;
-    private isMobile;
-    private getWebEncryptionKey;
-}
-
-/**
- * API Key Storage Service
- * Secure multi-platform API key storage with encryption
- * Supports Node.js, Electron, Web, and Mobile environments
- */
-interface ApiKeyData {
-    apiKey: string;
-    organizationId?: string;
-    userId?: string;
-    environment?: 'development' | 'staging' | 'production';
-    createdAt?: string;
-    expiresAt?: string;
-    metadata?: Record<string, unknown>;
-}
-declare class ApiKeyStorage {
-    private readonly storageKey;
-    private readonly legacyConfigKey;
-    private readonly webEncryptionKeyStorage;
-    private keytar;
-    private migrationCompleted;
-    constructor();
-    /**
-     * Initialize and migrate from legacy storage if needed
-     */
-    initialize(): Promise<void>;
-    /**
-     * Store API key securely
-     */
-    store(data: ApiKeyData): Promise<void>;
-    /**
-     * Retrieve API key from secure storage
-     */
-    retrieve(): Promise<ApiKeyData | null>;
-    /**
-     * Get just the API key string (convenience method)
-     */
-    getApiKey(): Promise<string | null>;
-    /**
-     * Check if API key exists
-     */
-    hasApiKey(): Promise<boolean>;
-    /**
-     * Clear API key from storage
-     */
-    clear(): Promise<void>;
-    /**
-     * Check if API key is expired
-     */
-    isExpired(data: ApiKeyData): boolean;
-    /**
-     * Update API key metadata without changing the key itself
-     */
-    updateMetadata(metadata: Record<string, unknown>): Promise<void>;
-    /**
-     * Migrate from legacy configuration storage
-     */
-    private migrateFromLegacyIfNeeded;
-    private storeToFile;
-    private retrieveFromFile;
-    private deleteFile;
-    private retrieveLegacyFromFile;
-    private deleteLegacyFile;
-    private getFileEncryptionKey;
-    private encrypt;
-    private decrypt;
-    private getWebEncryptionKey;
-    private isNode;
-    private isElectron;
-    private isMobile;
-    /**
-     * Normalize API keys to a SHA-256 hex digest.
-     * Accepts pre-hashed input and lowercases it to prevent double hashing.
-     */
-    private normalizeApiKey;
-}
-
 interface MCPClientConfig extends Partial<OAuthConfig> {
     mcpEndpoint?: string;
     autoRefresh?: boolean;
+    apiKey?: string;
+    tokenStorage?: TokenStorageAdapter;
 }
 declare class MCPClient {
     private tokenStorage;
     private authFlow;
     private config;
+    private authMode;
     private ws;
     private eventSource;
     private accessToken;
@@ -204,4 +51,4 @@ declare class MCPClient {
     deleteMemory(id: string): Promise<void>;
 }
 
-export { type ApiKeyData, ApiKeyStorage, type AuthError, BaseOAuthFlow, DesktopOAuthFlow, type DeviceCodeResponse, type GrantType, MCPClient, type MCPClientConfig, type OAuthConfig, type PKCEChallenge, TerminalOAuthFlow, type TokenResponse, TokenStorage };
+export { BaseOAuthFlow, MCPClient, type MCPClientConfig, OAuthConfig, TerminalOAuthFlow, TokenResponse, TokenStorageAdapter };