@mcp-z/client 1.0.0

package/dist/cjs/dcr/dcr-authenticator.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/kevin/Dev/Projects/ai/mcp-z/libs/client/src/dcr/dcr-authenticator.ts"],"sourcesContent":["/**\n * DCR Authenticator\n * Consolidates DCR and OAuth flow logic for MCP HTTP servers\n */\n\nimport path from 'node:path';\nimport * as fs from 'fs';\nimport Keyv from 'keyv';\nimport { KeyvFile } from 'keyv-file';\nimport { InteractiveOAuthFlow } from '../auth/interactive-oauth-flow.ts';\nimport type { AuthCapabilities, TokenSet } from '../auth/types.ts';\nimport { logger as defaultLogger, type Logger } from '../utils/logger.ts';\nimport { DynamicClientRegistrar } from './dynamic-client-registrar.ts';\n\n/**\n * DcrAuthenticator configuration options\n */\nexport interface DcrAuthenticatorOptions {\n  /** Custom Keyv store (for testing) - if not provided, uses default ~/.mcpeasy/tokens.json */\n  tokenStore?: Keyv;\n  /** Headless mode (don't open browser) */\n  headless?: boolean;\n  /** Required redirect URI for OAuth callback */\n  redirectUri: string;\n  /** Optional logger for debug output (defaults to singleton logger) */\n  logger?: Logger;\n}\n\n/**\n * Buffer time before token expiry to trigger proactive refresh (5 minutes)\n */\nconst REFRESH_BUFFER_MS = 5 * 60 * 1000;\n\n/**\n * DcrAuthenticator manages authentication for MCP HTTP servers\n * Handles DCR registration, OAuth flows, and token management\n */\nexport class DcrAuthenticator {\n  private tokenStore: Keyv;\n  private dcrClient: DynamicClientRegistrar;\n  private oauthFlow: InteractiveOAuthFlow;\n  private headless: boolean;\n  private redirectUri: string;\n  private logger: Logger;\n\n  constructor(options: DcrAuthenticatorOptions) {\n    if (options.tokenStore) {\n      this.tokenStore = options.tokenStore;\n    } else {\n      // Default CLI store in .mcp-z directory (per-project)\n      const storePath = path.join(process.cwd(), '.mcp-z', 'tokens.json');\n\n      // Ensure directory exists before creating store\n      fs.mkdirSync(path.dirname(storePath), { recursive: true });\n\n      this.tokenStore = new Keyv({\n        store: new KeyvFile({ filename: storePath }),\n      });\n    }\n    this.dcrClient = new DynamicClientRegistrar();\n    this.oauthFlow = new InteractiveOAuthFlow();\n    this.headless = options.headless || false;\n    this.redirectUri = options.redirectUri;\n    this.logger = options.logger ?? defaultLogger;\n  }\n\n  /**\n   * Detect if server is self-hosted DCR (vs external OAuth provider)\n   * Self-hosted servers have their own OAuth endpoints and manage token storage\n   */\n  private async detectSelfHostedMode(baseUrl: string): Promise<boolean> {\n    try {\n      // Self-hosted DCR servers typically run their own OAuth server\n      // Check if this is a self-hosted instance by testing OAuth metadata\n      // For now, assume self-hosted if baseUrl matches common localhost patterns\n      // TODO: Implement proper self-hosted detection logic\n      return baseUrl.includes('localhost') || baseUrl.includes('127.0.0.1');\n    } catch (_error) {\n      return false; // Assume external mode if detection fails\n    }\n  }\n\n  /**\n   * Ensure server is authenticated, performing DCR and OAuth if needed\n   * Proactively refreshes tokens if they're within 5 minutes of expiry\n   *\n   * @param baseUrl - Base URL of the server (e.g., https://example.com)\n   * @param capabilities - Auth capabilities from .well-known endpoint\n   * @returns Valid token set ready to use\n   *\n   * @throws Error if authentication fails\n   *\n   * @example\n   * const authenticator = new DcrAuthenticator({ redirectUri: 'http://localhost:3000/callback' });\n   * const tokens = await authenticator.ensureAuthenticated(\n   *   'https://example.com',\n   *   capabilities\n   * );\n   */\n  async ensureAuthenticated(baseUrl: string, capabilities: AuthCapabilities): Promise<TokenSet> {\n    // Auto-detect server mode\n    const isSelfHosted = await this.detectSelfHostedMode(baseUrl);\n\n    if (isSelfHosted) {\n      return this.ensureAuthenticatedSelfHosted(baseUrl, capabilities);\n    }\n    return this.ensureAuthenticatedExternal(baseUrl, capabilities);\n  }\n\n  /**\n   * Handle authentication for self-hosted DCR servers\n   * Self-hosted servers manage their own token storage via /oauth/verify\n   */\n  private async ensureAuthenticatedSelfHosted(baseUrl: string, capabilities: AuthCapabilities): Promise<TokenSet> {\n    const dcrTokenKey = `dcr-tokens:${baseUrl}`;\n\n    // 1. Check for existing DCR tokens (different from external tokens)\n    let tokens = (await this.tokenStore.get(dcrTokenKey)) as TokenSet | undefined;\n\n    if (tokens) {\n      // 2. Verify token is still valid by calling /oauth/verify\n      try {\n        const verifyUrl = `${baseUrl}/oauth/verify`;\n        const verifyResponse = await fetch(verifyUrl, {\n          headers: { Authorization: `Bearer ${tokens.accessToken}`, Connection: 'close' },\n        });\n\n        if (verifyResponse.ok) {\n          const verifyData = (await verifyResponse.json()) as { token?: string };\n          if (verifyData.token === tokens.accessToken) {\n            // Token is still valid with the self-hosted server\n            return tokens;\n          }\n        }\n      } catch (_error) {\n        // Token verification failed - need to re-authenticate\n      }\n\n      // Token is expired or invalid\n      await this.tokenStore.delete(dcrTokenKey);\n      tokens = undefined;\n    }\n\n    // 3. No valid tokens - perform full DCR + OAuth flow\n    if (!capabilities.registrationEndpoint || !capabilities.authorizationEndpoint || !capabilities.tokenEndpoint) {\n      throw new Error('Server does not provide required OAuth endpoints');\n    }\n\n    this.logger.debug('🔐 No valid tokens found, starting self-hosted DCR authentication...');\n\n    // Extract port from pre-resolved redirectUri\n    const port = parseInt(new URL(this.redirectUri).port, 10) || (this.redirectUri.startsWith('https:') ? 443 : 80);\n\n    // Register OAuth client via DCR\n    this.logger.debug('📝 Registering OAuth client with self-hosted server...');\n    const client = await this.dcrClient.registerClient(capabilities.registrationEndpoint, {\n      redirectUri: this.redirectUri,\n    });\n\n    // Perform OAuth authorization flow with PKCE (RFC 7636)\n    const flowOptions: { port: number; headless: boolean; scopes?: string[]; redirectUri: string; pkce: boolean; logger: Logger } = {\n      port,\n      headless: this.headless,\n      redirectUri: this.redirectUri,\n      pkce: true,\n      logger: this.logger,\n    };\n    if (capabilities.scopes) {\n      flowOptions.scopes = capabilities.scopes;\n    }\n\n    tokens = await this.oauthFlow.performAuthFlow(capabilities.authorizationEndpoint, capabilities.tokenEndpoint, client.clientId, client.clientSecret, flowOptions);\n\n    // For self-hosted mode, verify the token works with /oauth/verify immediately\n    try {\n      const verifyUrl = `${baseUrl}/oauth/verify`;\n      const verifyResponse = await fetch(verifyUrl, {\n        headers: { Authorization: `Bearer ${tokens.accessToken}`, Connection: 'close' },\n      });\n\n      if (!verifyResponse.ok) {\n        throw new Error(`DCR token verification failed after authentication: ${verifyResponse.status}`);\n      }\n\n      const verifyData = (await verifyResponse.json()) as { token?: string };\n      if (verifyData.token !== tokens.accessToken) {\n        throw new Error('DCR server returned different token in verification');\n      }\n\n      this.logger.debug('✅ DCR token verified with self-hosted server');\n    } catch (error) {\n      this.logger.error('❌ DCR token verification failed:', error instanceof Error ? error.message : String(error));\n      throw new Error('Self-hosted DCR authentication completed but token verification failed');\n    }\n\n    // Save tokens for future use\n    await this.tokenStore.set(dcrTokenKey, tokens);\n    this.logger.debug('✅ Self-hosted DCR authentication successful, tokens saved');\n\n    return tokens;\n  }\n\n  /**\n   * Handle authentication for external OAuth providers (original implementation)\n   */\n  private async ensureAuthenticatedExternal(baseUrl: string, capabilities: AuthCapabilities): Promise<TokenSet> {\n    const tokenKey = `tokens:${baseUrl}`;\n\n    // 1. Check for existing tokens\n    let tokens = (await this.tokenStore.get(tokenKey)) as TokenSet | undefined;\n\n    if (tokens) {\n      // 2. Proactive refresh if token expires within 5 minutes\n      if (tokens.expiresAt < Date.now() + REFRESH_BUFFER_MS) {\n        this.logger.debug('🔄 Refreshing access token...');\n\n        try {\n          tokens = await this.refreshTokens(tokens, capabilities.tokenEndpoint);\n          await this.tokenStore.set(tokenKey, tokens);\n          this.logger.debug('✅ Token refreshed successfully');\n        } catch (_error) {\n          // Refresh failed - clear tokens and re-authenticate\n          this.logger.warn('⚠️  Token refresh failed, re-authenticating...');\n          await this.tokenStore.delete(tokenKey);\n          tokens = undefined;\n        }\n      }\n\n      if (tokens) {\n        return tokens;\n      }\n    }\n\n    // 3. No valid tokens - perform DCR + OAuth flow\n    if (!capabilities.registrationEndpoint || !capabilities.authorizationEndpoint || !capabilities.tokenEndpoint) {\n      throw new Error('Server does not provide required OAuth endpoints');\n    }\n\n    this.logger.debug('🔐 No valid tokens found, starting external OAuth authentication...');\n\n    // Extract port from pre-resolved redirectUri\n    const port = parseInt(new URL(this.redirectUri).port, 10) || (this.redirectUri.startsWith('https:') ? 443 : 80);\n\n    // Register OAuth client via DCR\n    this.logger.debug('📝 Registering OAuth client...');\n    const client = await this.dcrClient.registerClient(capabilities.registrationEndpoint, {\n      redirectUri: this.redirectUri,\n    });\n\n    // Perform OAuth authorization flow with PKCE (RFC 7636)\n    const flowOptions: { port: number; headless: boolean; scopes?: string[]; redirectUri: string; pkce: boolean; logger: Logger } = {\n      port,\n      headless: this.headless,\n      redirectUri: this.redirectUri,\n      pkce: true,\n      logger: this.logger,\n    };\n    if (capabilities.scopes) {\n      flowOptions.scopes = capabilities.scopes;\n    }\n\n    tokens = await this.oauthFlow.performAuthFlow(capabilities.authorizationEndpoint, capabilities.tokenEndpoint, client.clientId, client.clientSecret, flowOptions);\n\n    // Save tokens for future use\n    await this.tokenStore.set(tokenKey, tokens);\n    this.logger.debug('✅ Authentication successful, tokens saved');\n\n    return tokens;\n  }\n\n  /**\n   * Refresh access token using refresh token\n   */\n  private async refreshTokens(tokens: TokenSet, tokenEndpoint?: string): Promise<TokenSet> {\n    if (!tokenEndpoint) {\n      throw new Error('Token endpoint not available for refresh');\n    }\n\n    if (!tokens.refreshToken) {\n      throw new Error('No refresh token available');\n    }\n\n    if (!tokens.clientId || !tokens.clientSecret) {\n      throw new Error('Client credentials not available for refresh');\n    }\n\n    return await this.oauthFlow.refreshTokens(tokenEndpoint, tokens.refreshToken, tokens.clientId, tokens.clientSecret);\n  }\n\n  /**\n   * Delete stored tokens for a server\n   */\n  async deleteTokens(baseUrl: string): Promise<void> {\n    const tokenKey = `tokens:${baseUrl}`;\n    await this.tokenStore.delete(tokenKey);\n    this.logger.debug(`🗑️  Deleted tokens for ${baseUrl}`);\n  }\n}\n"],"names":["DcrAuthenticator","REFRESH_BUFFER_MS","options","tokenStore","storePath","path","join","process","cwd","fs","mkdirSync","dirname","recursive","Keyv","store","KeyvFile","filename","dcrClient","DynamicClientRegistrar","oauthFlow","InteractiveOAuthFlow","headless","redirectUri","logger","defaultLogger","detectSelfHostedMode","baseUrl","includes","_error","ensureAuthenticated","capabilities","isSelfHosted","ensureAuthenticatedSelfHosted","ensureAuthenticatedExternal","dcrTokenKey","tokens","verifyUrl","verifyResponse","verifyData","port","client","flowOptions","error","get","fetch","headers","Authorization","accessToken","Connection","ok","json","token","delete","undefined","registrationEndpoint","authorizationEndpoint","tokenEndpoint","Error","debug","parseInt","URL","startsWith","registerClient","pkce","scopes","performAuthFlow","clientId","clientSecret","status","message","String","set","tokenKey","expiresAt","Date","now","refreshTokens","warn","refreshToken","deleteTokens"],"mappings":"AAAA;;;CAGC;;;;+BAkCYA;;;eAAAA;;;+DAhCI;0DACG;2DACH;wBACQ;sCACY;wBAEgB;wCACd;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBvC;;CAEC,GACD,IAAMC,oBAAoB,IAAI,KAAK;AAM5B,IAAA,AAAMD,iCAAN;;aAAMA,iBAQCE,OAAgC;gCARjCF;YA0BKE;QAjBd,IAAIA,QAAQC,UAAU,EAAE;YACtB,IAAI,CAACA,UAAU,GAAGD,QAAQC,UAAU;QACtC,OAAO;YACL,sDAAsD;YACtD,IAAMC,YAAYC,iBAAI,CAACC,IAAI,CAACC,QAAQC,GAAG,IAAI,UAAU;YAErD,gDAAgD;YAChDC,IAAGC,SAAS,CAACL,iBAAI,CAACM,OAAO,CAACP,YAAY;gBAAEQ,WAAW;YAAK;YAExD,IAAI,CAACT,UAAU,GAAG,IAAIU,aAAI,CAAC;gBACzBC,OAAO,IAAIC,kBAAQ,CAAC;oBAAEC,UAAUZ;gBAAU;YAC5C;QACF;QACA,IAAI,CAACa,SAAS,GAAG,IAAIC,gDAAsB;QAC3C,IAAI,CAACC,SAAS,GAAG,IAAIC,4CAAoB;QACzC,IAAI,CAACC,QAAQ,GAAGnB,QAAQmB,QAAQ,IAAI;QACpC,IAAI,CAACC,WAAW,GAAGpB,QAAQoB,WAAW;QACtC,IAAI,CAACC,MAAM,IAAGrB,kBAAAA,QAAQqB,MAAM,cAAdrB,6BAAAA,kBAAkBsB,gBAAa;;iBA1BpCxB;IA6BX;;;GAGC,GACD,OAAcyB,oBAUb,GAVD,SAAcA,qBAAqBC,OAAe;;;gBAChD,IAAI;oBACF,+DAA+D;oBAC/D,oEAAoE;oBACpE,2EAA2E;oBAC3E,qDAAqD;oBACrD;;wBAAOA,QAAQC,QAAQ,CAAC,gBAAgBD,QAAQC,QAAQ,CAAC;;gBAC3D,EAAE,OAAOC,QAAQ;oBACf;;wBAAO;uBAAO,0CAA0C;gBAC1D;;;;;QACF;;IAEA;;;;;;;;;;;;;;;;GAgBC,GACD,OAAMC,mBAQL,GARD,SAAMA,oBAAoBH,OAAe,EAAEI,YAA8B;;gBAEjEC;;;;wBAAe;;4BAAM,IAAI,CAACN,oBAAoB,CAACC;;;wBAA/CK,eAAe;wBAErB,IAAIA,cAAc;4BAChB;;gCAAO,IAAI,CAACC,6BAA6B,CAACN,SAASI;;wBACrD;wBACA;;4BAAO,IAAI,CAACG,2BAA2B,CAACP,SAASI;;;;QACnD;;IAEA;;;GAGC,GACD,OAAcE,6BAuFb,GAvFD,SAAcA,8BAA8BN,OAAe,EAAEI,YAA8B;;gBACnFI,aAGFC,QAKMC,WACAC,gBAKEC,YAMDV,QAiBLW,MAIAC,QAKAC,aAeEL,YACAC,iBAQAC,aAMCI;;;;wBA5EHR,cAAc,AAAC,cAAqB,OAARR;wBAGpB;;4BAAM,IAAI,CAACvB,UAAU,CAACwC,GAAG,CAACT;;;wBAApCC,SAAU;6BAEVA,QAAAA;;;;;;;;;;;;wBAGMC,YAAY,AAAC,GAAU,OAARV,SAAQ;wBACN;;4BAAMkB,MAAMR,WAAW;gCAC5CS,SAAS;oCAAEC,eAAe,AAAC,UAA4B,OAAnBX,OAAOY,WAAW;oCAAIC,YAAY;gCAAQ;4BAChF;;;wBAFMX,iBAAiB;6BAInBA,eAAeY,EAAE,EAAjBZ;;;;wBACkB;;4BAAMA,eAAea,IAAI;;;wBAAvCZ,aAAc;wBACpB,IAAIA,WAAWa,KAAK,KAAKhB,OAAOY,WAAW,EAAE;4BAC3C,mDAAmD;4BACnD;;gCAAOZ;;wBACT;;;;;;;;wBAEKP;;;;;;wBAIT,8BAA8B;wBAC9B;;4BAAM,IAAI,CAACzB,UAAU,CAACiD,MAAM,CAAClB;;;wBAA7B;wBACAC,SAASkB;;;wBAGX,qDAAqD;wBACrD,IAAI,CAACvB,aAAawB,oBAAoB,IAAI,CAACxB,aAAayB,qBAAqB,IAAI,CAACzB,aAAa0B,aAAa,EAAE;4BAC5G,MAAM,IAAIC,MAAM;wBAClB;wBAEA,IAAI,CAAClC,MAAM,CAACmC,KAAK,CAAC;wBAElB,6CAA6C;wBACvCnB,OAAOoB,SAAS,IAAIC,IAAI,IAAI,CAACtC,WAAW,EAAEiB,IAAI,EAAE,OAAQ,CAAA,IAAI,CAACjB,WAAW,CAACuC,UAAU,CAAC,YAAY,MAAM,EAAC;wBAE7G,gCAAgC;wBAChC,IAAI,CAACtC,MAAM,CAACmC,KAAK,CAAC;wBACH;;4BAAM,IAAI,CAACzC,SAAS,CAAC6C,cAAc,CAAChC,aAAawB,oBAAoB,EAAE;gCACpFhC,aAAa,IAAI,CAACA,WAAW;4BAC/B;;;wBAFMkB,SAAS;wBAIf,wDAAwD;wBAClDC,cAA0H;4BAC9HF,MAAAA;4BACAlB,UAAU,IAAI,CAACA,QAAQ;4BACvBC,aAAa,IAAI,CAACA,WAAW;4BAC7ByC,MAAM;4BACNxC,QAAQ,IAAI,CAACA,MAAM;wBACrB;wBACA,IAAIO,aAAakC,MAAM,EAAE;4BACvBvB,YAAYuB,MAAM,GAAGlC,aAAakC,MAAM;wBAC1C;wBAES;;4BAAM,IAAI,CAAC7C,SAAS,CAAC8C,eAAe,CAACnC,aAAayB,qBAAqB,EAAEzB,aAAa0B,aAAa,EAAEhB,OAAO0B,QAAQ,EAAE1B,OAAO2B,YAAY,EAAE1B;;;wBAApJN,SAAS;;;;;;;;;wBAIDC,aAAY,AAAC,GAAU,OAARV,SAAQ;wBACN;;4BAAMkB,MAAMR,YAAW;gCAC5CS,SAAS;oCAAEC,eAAe,AAAC,UAA4B,OAAnBX,OAAOY,WAAW;oCAAIC,YAAY;gCAAQ;4BAChF;;;wBAFMX,kBAAiB;wBAIvB,IAAI,CAACA,gBAAeY,EAAE,EAAE;4BACtB,MAAM,IAAIQ,MAAM,AAAC,uDAA4E,OAAtBpB,gBAAe+B,MAAM;wBAC9F;wBAEoB;;4BAAM/B,gBAAea,IAAI;;;wBAAvCZ,cAAc;wBACpB,IAAIA,YAAWa,KAAK,KAAKhB,OAAOY,WAAW,EAAE;4BAC3C,MAAM,IAAIU,MAAM;wBAClB;wBAEA,IAAI,CAAClC,MAAM,CAACmC,KAAK,CAAC;;;;;;wBACXhB;wBACP,IAAI,CAACnB,MAAM,CAACmB,KAAK,CAAC,oCAAoCA,AAAK,YAALA,OAAiBe,SAAQf,MAAM2B,OAAO,GAAGC,OAAO5B;wBACtG,MAAM,IAAIe,MAAM;;wBAGlB,6BAA6B;wBAC7B;;4BAAM,IAAI,CAACtD,UAAU,CAACoE,GAAG,CAACrC,aAAaC;;;wBAAvC;wBACA,IAAI,CAACZ,MAAM,CAACmC,KAAK,CAAC;wBAElB;;4BAAOvB;;;;QACT;;IAEA;;GAEC,GACD,OAAcF,2BA+Db,GA/DD,SAAcA,4BAA4BP,OAAe,EAAEI,YAA8B;;gBACjF0C,UAGFrC,QAWSP,QAqBPW,MAIAC,QAKAC;;;;wBA5CA+B,WAAW,AAAC,UAAiB,OAAR9C;wBAGb;;4BAAM,IAAI,CAACvB,UAAU,CAACwC,GAAG,CAAC6B;;;wBAApCrC,SAAU;6BAEVA,QAAAA;;;;6BAEEA,CAAAA,OAAOsC,SAAS,GAAGC,KAAKC,GAAG,KAAK1E,iBAAgB,GAAhDkC;;;;wBACF,IAAI,CAACZ,MAAM,CAACmC,KAAK,CAAC;;;;;;;;;wBAGP;;4BAAM,IAAI,CAACkB,aAAa,CAACzC,QAAQL,aAAa0B,aAAa;;;wBAApErB,SAAS;wBACT;;4BAAM,IAAI,CAAChC,UAAU,CAACoE,GAAG,CAACC,UAAUrC;;;wBAApC;wBACA,IAAI,CAACZ,MAAM,CAACmC,KAAK,CAAC;;;;;;wBACX9B;wBACP,oDAAoD;wBACpD,IAAI,CAACL,MAAM,CAACsD,IAAI,CAAC;wBACjB;;4BAAM,IAAI,CAAC1E,UAAU,CAACiD,MAAM,CAACoB;;;wBAA7B;wBACArC,SAASkB;;;;;;wBAIb,IAAIlB,QAAQ;4BACV;;gCAAOA;;wBACT;;;wBAGF,gDAAgD;wBAChD,IAAI,CAACL,aAAawB,oBAAoB,IAAI,CAACxB,aAAayB,qBAAqB,IAAI,CAACzB,aAAa0B,aAAa,EAAE;4BAC5G,MAAM,IAAIC,MAAM;wBAClB;wBAEA,IAAI,CAAClC,MAAM,CAACmC,KAAK,CAAC;wBAElB,6CAA6C;wBACvCnB,OAAOoB,SAAS,IAAIC,IAAI,IAAI,CAACtC,WAAW,EAAEiB,IAAI,EAAE,OAAQ,CAAA,IAAI,CAACjB,WAAW,CAACuC,UAAU,CAAC,YAAY,MAAM,EAAC;wBAE7G,gCAAgC;wBAChC,IAAI,CAACtC,MAAM,CAACmC,KAAK,CAAC;wBACH;;4BAAM,IAAI,CAACzC,SAAS,CAAC6C,cAAc,CAAChC,aAAawB,oBAAoB,EAAE;gCACpFhC,aAAa,IAAI,CAACA,WAAW;4BAC/B;;;wBAFMkB,SAAS;wBAIf,wDAAwD;wBAClDC,cAA0H;4BAC9HF,MAAAA;4BACAlB,UAAU,IAAI,CAACA,QAAQ;4BACvBC,aAAa,IAAI,CAACA,WAAW;4BAC7ByC,MAAM;4BACNxC,QAAQ,IAAI,CAACA,MAAM;wBACrB;wBACA,IAAIO,aAAakC,MAAM,EAAE;4BACvBvB,YAAYuB,MAAM,GAAGlC,aAAakC,MAAM;wBAC1C;wBAES;;4BAAM,IAAI,CAAC7C,SAAS,CAAC8C,eAAe,CAACnC,aAAayB,qBAAqB,EAAEzB,aAAa0B,aAAa,EAAEhB,OAAO0B,QAAQ,EAAE1B,OAAO2B,YAAY,EAAE1B;;;wBAApJN,SAAS;wBAET,6BAA6B;wBAC7B;;4BAAM,IAAI,CAAChC,UAAU,CAACoE,GAAG,CAACC,UAAUrC;;;wBAApC;wBACA,IAAI,CAACZ,MAAM,CAACmC,KAAK,CAAC;wBAElB;;4BAAOvB;;;;QACT;;IAEA;;GAEC,GACD,OAAcyC,aAcb,GAdD,SAAcA,cAAczC,MAAgB,EAAEqB,aAAsB;;;;;wBAClE,IAAI,CAACA,eAAe;4BAClB,MAAM,IAAIC,MAAM;wBAClB;wBAEA,IAAI,CAACtB,OAAO2C,YAAY,EAAE;4BACxB,MAAM,IAAIrB,MAAM;wBAClB;wBAEA,IAAI,CAACtB,OAAO+B,QAAQ,IAAI,CAAC/B,OAAOgC,YAAY,EAAE;4BAC5C,MAAM,IAAIV,MAAM;wBAClB;wBAEO;;4BAAM,IAAI,CAACtC,SAAS,CAACyD,aAAa,CAACpB,eAAerB,OAAO2C,YAAY,EAAE3C,OAAO+B,QAAQ,EAAE/B,OAAOgC,YAAY;;;wBAAlH;;4BAAO;;;;QACT;;IAEA;;GAEC,GACD,OAAMY,YAIL,GAJD,SAAMA,aAAarD,OAAe;;gBAC1B8C;;;;wBAAAA,WAAW,AAAC,UAAiB,OAAR9C;wBAC3B;;4BAAM,IAAI,CAACvB,UAAU,CAACiD,MAAM,CAACoB;;;wBAA7B;wBACA,IAAI,CAACjD,MAAM,CAACmC,KAAK,CAAC,AAAC,qCAAkC,OAARhC;;;;;;QAC/C;;WAnQW1B"}

package/dist/cjs/dcr/dynamic-client-registrar.d.cts

@@ -0,0 +1,28 @@
+/**
+ * Dynamic Client Registration (DCR) Client
+ * Implements RFC 7591 for OAuth client registration
+ */
+import type { ClientCredentials, DcrRegistrationOptions } from '../auth/types.js';
+/**
+ * DynamicClientRegistrar handles Dynamic Client Registration with OAuth servers
+ */
+export declare class DynamicClientRegistrar {
+    /**
+     * Register a new OAuth client with the authorization server
+     *
+     * @param registrationEndpoint - DCR registration endpoint URL
+     * @param options - Registration options (client name, redirect URI)
+     * @returns Client credentials (client ID and secret)
+     *
+     * @throws Error if registration fails or server returns error
+     *
+     * @example
+     * const registrar = new DynamicClientRegistrar();
+     * const creds = await registrar.registerClient(
+     *   'https://example.com/oauth/register',
+     *   { clientName: '@mcp-z/client', redirectUri: 'http://localhost:3000/callback' }
+     * );
+     * console.log('Client ID:', creds.clientId);
+     */
+    registerClient(registrationEndpoint: string, options?: DcrRegistrationOptions): Promise<ClientCredentials>;
+}

package/dist/cjs/dcr/dynamic-client-registrar.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Dynamic Client Registration (DCR) Client
+ * Implements RFC 7591 for OAuth client registration
+ */
+import type { ClientCredentials, DcrRegistrationOptions } from '../auth/types.js';
+/**
+ * DynamicClientRegistrar handles Dynamic Client Registration with OAuth servers
+ */
+export declare class DynamicClientRegistrar {
+    /**
+     * Register a new OAuth client with the authorization server
+     *
+     * @param registrationEndpoint - DCR registration endpoint URL
+     * @param options - Registration options (client name, redirect URI)
+     * @returns Client credentials (client ID and secret)
+     *
+     * @throws Error if registration fails or server returns error
+     *
+     * @example
+     * const registrar = new DynamicClientRegistrar();
+     * const creds = await registrar.registerClient(
+     *   'https://example.com/oauth/register',
+     *   { clientName: '@mcp-z/client', redirectUri: 'http://localhost:3000/callback' }
+     * );
+     * console.log('Client ID:', creds.clientId);
+     */
+    registerClient(registrationEndpoint: string, options?: DcrRegistrationOptions): Promise<ClientCredentials>;
+}

package/dist/cjs/dcr/dynamic-client-registrar.js

@@ -0,0 +1,245 @@
+/**
+ * Dynamic Client Registration (DCR) Client
+ * Implements RFC 7591 for OAuth client registration
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "DynamicClientRegistrar", {
+    enumerable: true,
+    get: function() {
+        return DynamicClientRegistrar;
+    }
+});
+function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
+    } else {
+        Promise.resolve(value).then(_next, _throw);
+    }
+}
+function _async_to_generator(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _class_call_check(instance, Constructor) {
+    if (!(instance instanceof Constructor)) {
+        throw new TypeError("Cannot call a class as a function");
+    }
+}
+function _ts_generator(thisArg, body) {
+    var f, y, t, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    }, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype), d = Object.defineProperty;
+    return d(g, "next", {
+        value: verb(0)
+    }), d(g, "throw", {
+        value: verb(1)
+    }), d(g, "return", {
+        value: verb(2)
+    }), typeof Symbol === "function" && d(g, Symbol.iterator, {
+        value: function() {
+            return this;
+        }
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(g && (g = 0, op[0] && (_ = 0)), _)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+var DynamicClientRegistrar = /*#__PURE__*/ function() {
+    "use strict";
+    function DynamicClientRegistrar() {
+        _class_call_check(this, DynamicClientRegistrar);
+    }
+    var _proto = DynamicClientRegistrar.prototype;
+    /**
+   * Register a new OAuth client with the authorization server
+   *
+   * @param registrationEndpoint - DCR registration endpoint URL
+   * @param options - Registration options (client name, redirect URI)
+   * @returns Client credentials (client ID and secret)
+   *
+   * @throws Error if registration fails or server returns error
+   *
+   * @example
+   * const registrar = new DynamicClientRegistrar();
+   * const creds = await registrar.registerClient(
+   *   'https://example.com/oauth/register',
+   *   { clientName: '@mcp-z/client', redirectUri: 'http://localhost:3000/callback' }
+   * );
+   * console.log('Client ID:', creds.clientId);
+   */ _proto.registerClient = function registerClient(_0) {
+        return _async_to_generator(function(registrationEndpoint) {
+            var options, requestBody, response, errorText, data, credentials;
+            var _arguments = arguments;
+            return _ts_generator(this, function(_state) {
+                switch(_state.label){
+                    case 0:
+                        options = _arguments.length > 1 && _arguments[1] !== void 0 ? _arguments[1] : {};
+                        requestBody = {
+                            client_name: options.clientName || '@mcp-z/client',
+                            redirect_uris: options.redirectUri ? [
+                                options.redirectUri
+                            ] : [
+                                'http://localhost:3000/callback'
+                            ],
+                            grant_types: [
+                                'authorization_code',
+                                'refresh_token'
+                            ],
+                            response_types: [
+                                'code'
+                            ],
+                            token_endpoint_auth_method: 'client_secret_basic'
+                        };
+                        return [
+                            4,
+                            fetch(registrationEndpoint, {
+                                method: 'POST',
+                                headers: {
+                                    'Content-Type': 'application/json',
+                                    Accept: 'application/json',
+                                    Connection: 'close'
+                                },
+                                body: JSON.stringify(requestBody)
+                            })
+                        ];
+                    case 1:
+                        response = _state.sent();
+                        if (!!response.ok) return [
+                            3,
+                            3
+                        ];
+                        return [
+                            4,
+                            response.text()
+                        ];
+                    case 2:
+                        errorText = _state.sent();
+                        throw new Error("DCR registration failed (".concat(response.status, "): ").concat(errorText));
+                    case 3:
+                        return [
+                            4,
+                            response.json()
+                        ];
+                    case 4:
+                        data = _state.sent();
+                        if (!data.client_id) {
+                            throw new Error('DCR registration response missing client_id');
+                        }
+                        credentials = {
+                            clientId: data.client_id,
+                            clientSecret: data.client_secret || ''
+                        };
+                        if (data.client_id_issued_at) {
+                            credentials.issuedAt = data.client_id_issued_at;
+                        }
+                        return [
+                            2,
+                            credentials
+                        ];
+                }
+            });
+        }).apply(this, arguments);
+    };
+    return DynamicClientRegistrar;
+}();
+/* CJS INTEROP */ if (exports.__esModule && exports.default) { try { Object.defineProperty(exports.default, '__esModule', { value: true }); for (var key in exports) { exports.default[key] = exports[key]; } } catch (_) {}; module.exports = exports.default; }

package/dist/cjs/dcr/dynamic-client-registrar.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/kevin/Dev/Projects/ai/mcp-z/libs/client/src/dcr/dynamic-client-registrar.ts"],"sourcesContent":["/**\n * Dynamic Client Registration (DCR) Client\n * Implements RFC 7591 for OAuth client registration\n */\n\nimport type { ClientCredentials, DcrRegistrationOptions } from '../auth/types.ts';\n\n/**\n * DCR Registration Request (RFC 7591)\n */\ninterface DcrRegistrationRequest {\n  client_name?: string;\n  redirect_uris?: string[];\n  grant_types?: string[];\n  response_types?: string[];\n  token_endpoint_auth_method?: string;\n}\n\n/**\n * DCR Registration Response (RFC 7591)\n */\ninterface DcrRegistrationResponse {\n  client_id: string;\n  client_secret?: string;\n  client_id_issued_at?: number;\n  client_secret_expires_at?: number;\n}\n\n/**\n * DynamicClientRegistrar handles Dynamic Client Registration with OAuth servers\n */\nexport class DynamicClientRegistrar {\n  /**\n   * Register a new OAuth client with the authorization server\n   *\n   * @param registrationEndpoint - DCR registration endpoint URL\n   * @param options - Registration options (client name, redirect URI)\n   * @returns Client credentials (client ID and secret)\n   *\n   * @throws Error if registration fails or server returns error\n   *\n   * @example\n   * const registrar = new DynamicClientRegistrar();\n   * const creds = await registrar.registerClient(\n   *   'https://example.com/oauth/register',\n   *   { clientName: '@mcp-z/client', redirectUri: 'http://localhost:3000/callback' }\n   * );\n   * console.log('Client ID:', creds.clientId);\n   */\n  async registerClient(registrationEndpoint: string, options: DcrRegistrationOptions = {}): Promise<ClientCredentials> {\n    const requestBody: DcrRegistrationRequest = {\n      client_name: options.clientName || '@mcp-z/client',\n      redirect_uris: options.redirectUri ? [options.redirectUri] : ['http://localhost:3000/callback'],\n      grant_types: ['authorization_code', 'refresh_token'],\n      response_types: ['code'],\n      token_endpoint_auth_method: 'client_secret_basic',\n    };\n\n    const response = await fetch(registrationEndpoint, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        Accept: 'application/json',\n        Connection: 'close',\n      },\n      body: JSON.stringify(requestBody),\n    });\n\n    if (!response.ok) {\n      const errorText = await response.text();\n      throw new Error(`DCR registration failed (${response.status}): ${errorText}`);\n    }\n\n    const data = (await response.json()) as DcrRegistrationResponse;\n\n    if (!data.client_id) {\n      throw new Error('DCR registration response missing client_id');\n    }\n\n    const credentials: ClientCredentials = {\n      clientId: data.client_id,\n      clientSecret: data.client_secret || '',\n    };\n\n    if (data.client_id_issued_at) {\n      credentials.issuedAt = data.client_id_issued_at;\n    }\n\n    return credentials;\n  }\n}\n"],"names":["DynamicClientRegistrar","registerClient","registrationEndpoint","options","requestBody","response","errorText","data","credentials","client_name","clientName","redirect_uris","redirectUri","grant_types","response_types","token_endpoint_auth_method","fetch","method","headers","Accept","Connection","body","JSON","stringify","ok","text","Error","status","json","client_id","clientId","clientSecret","client_secret","client_id_issued_at","issuedAt"],"mappings":"AAAA;;;CAGC;;;;+BA4BYA;;;eAAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAN,IAAA,AAAMA,uCAAN;;aAAMA;gCAAAA;;iBAAAA;IACX;;;;;;;;;;;;;;;;GAgBC,GACD,OAAMC,cAwCL,GAxCD,SAAMA;4CAAeC,oBAA4B;gBAAEC,SAC3CC,aAQAC,UAWEC,WAIFC,MAMAC;;;;;wBA9B2CL,UAAAA,oEAAkC,CAAC;wBAC9EC,cAAsC;4BAC1CK,aAAaN,QAAQO,UAAU,IAAI;4BACnCC,eAAeR,QAAQS,WAAW;gCAAIT,QAAQS,WAAW;;gCAAK;;4BAC9DC,WAAW;gCAAG;gCAAsB;;4BACpCC,cAAc;gCAAG;;4BACjBC,4BAA4B;wBAC9B;wBAEiB;;4BAAMC,MAAMd,sBAAsB;gCACjDe,QAAQ;gCACRC,SAAS;oCACP,gBAAgB;oCAChBC,QAAQ;oCACRC,YAAY;gCACd;gCACAC,MAAMC,KAAKC,SAAS,CAACnB;4BACvB;;;wBARMC,WAAW;6BAUb,CAACA,SAASmB,EAAE,EAAZ;;;;wBACgB;;4BAAMnB,SAASoB,IAAI;;;wBAA/BnB,YAAY;wBAClB,MAAM,IAAIoB,MAAM,AAAC,4BAAgDpB,OAArBD,SAASsB,MAAM,EAAC,OAAe,OAAVrB;;wBAGrD;;4BAAMD,SAASuB,IAAI;;;wBAA3BrB,OAAQ;wBAEd,IAAI,CAACA,KAAKsB,SAAS,EAAE;4BACnB,MAAM,IAAIH,MAAM;wBAClB;wBAEMlB,cAAiC;4BACrCsB,UAAUvB,KAAKsB,SAAS;4BACxBE,cAAcxB,KAAKyB,aAAa,IAAI;wBACtC;wBAEA,IAAIzB,KAAK0B,mBAAmB,EAAE;4BAC5BzB,YAAY0B,QAAQ,GAAG3B,KAAK0B,mBAAmB;wBACjD;wBAEA;;4BAAOzB;;;;QACT;;WA1DWR"}

package/dist/cjs/dcr/index.d.cts

@@ -0,0 +1,8 @@
+/**
+ * DCR (Dynamic Client Registration) Module
+ * Exports public API for DCR authentication
+ */
+export type { ClientCredentials, DcrRegistrationOptions } from '../auth/types.js';
+export type { DcrAuthenticatorOptions } from './dcr-authenticator.js';
+export { DcrAuthenticator } from './dcr-authenticator.js';
+export { DynamicClientRegistrar } from './dynamic-client-registrar.js';

package/dist/cjs/dcr/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * DCR (Dynamic Client Registration) Module
+ * Exports public API for DCR authentication
+ */
+export type { ClientCredentials, DcrRegistrationOptions } from '../auth/types.js';
+export type { DcrAuthenticatorOptions } from './dcr-authenticator.js';
+export { DcrAuthenticator } from './dcr-authenticator.js';
+export { DynamicClientRegistrar } from './dynamic-client-registrar.js';

package/dist/cjs/dcr/index.js

@@ -0,0 +1,24 @@
+/**
+ * DCR (Dynamic Client Registration) Module
+ * Exports public API for DCR authentication
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: Object.getOwnPropertyDescriptor(all, name).get
+    });
+}
+_export(exports, {
+    get DcrAuthenticator () {
+        return _dcrauthenticatorts.DcrAuthenticator;
+    },
+    get DynamicClientRegistrar () {
+        return _dynamicclientregistrarts.DynamicClientRegistrar;
+    }
+});
+var _dcrauthenticatorts = require("./dcr-authenticator.js");
+var _dynamicclientregistrarts = require("./dynamic-client-registrar.js");
+/* CJS INTEROP */ if (exports.__esModule && exports.default) { try { Object.defineProperty(exports.default, '__esModule', { value: true }); for (var key in exports) { exports.default[key] = exports[key]; } } catch (_) {}; module.exports = exports.default; }

package/dist/cjs/dcr/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/kevin/Dev/Projects/ai/mcp-z/libs/client/src/dcr/index.ts"],"sourcesContent":["/**\n * DCR (Dynamic Client Registration) Module\n * Exports public API for DCR authentication\n */\n\nexport type { ClientCredentials, DcrRegistrationOptions } from '../auth/types.ts';\nexport type { DcrAuthenticatorOptions } from './dcr-authenticator.ts';\nexport { DcrAuthenticator } from './dcr-authenticator.ts';\nexport { DynamicClientRegistrar } from './dynamic-client-registrar.ts';\n"],"names":["DcrAuthenticator","DynamicClientRegistrar"],"mappings":"AAAA;;;CAGC;;;;;;;;;;;QAIQA;eAAAA,oCAAgB;;QAChBC;eAAAA,gDAAsB;;;kCADE;wCACM"}

package/dist/cjs/index.d.cts

@@ -0,0 +1,21 @@
+/**
+ * @mcp-z/client - MCP Client Library
+ */
+export type { McpServerEntry, StartConfig } from '../schemas/servers.d.js';
+export { probeAuthCapabilities } from './auth/capability-discovery.js';
+export type { AuthCapabilities, CallbackResult, OAuthCallbackListenerOptions, OAuthFlowOptions, TokenSet } from './auth/index.js';
+export { InteractiveOAuthFlow } from './auth/interactive-oauth-flow.js';
+export { OAuthCallbackListener } from './auth/oauth-callback-listener.js';
+export { decorateClient, type ManagedClient, type PromptArguments, type WrappedCallToolReturn, type WrappedGetPromptReturn, type WrappedReadResourceReturn } from './client-helpers.js';
+export { type ValidationResult, validateServers } from './config/validate-config.js';
+export type { JsonValue, PromptArgument, ToolArguments } from './connection/types.js';
+export { DcrAuthenticator } from './dcr/dcr-authenticator.js';
+export { DynamicClientRegistrar } from './dcr/dynamic-client-registrar.js';
+export type { ClientCredentials, DcrAuthenticatorOptions, DcrRegistrationOptions } from './dcr/index.js';
+export { type JsonValidator, type NativeCallToolResponse, type NativeGetPromptResponse, type NativeReadResourceResponse, PromptResponseError, PromptResponseWrapper, ResourceResponseError, ResourceResponseWrapper, ToolResponseError, ToolResponseWrapper, } from './response-wrappers.js';
+export type { CapabilityClient, CapabilityIndex, CapabilityType, IndexedCapability, IndexedPrompt, IndexedResource, IndexedTool, SearchField, SearchOptions, SearchResponse, SearchResult } from './search/index.js';
+export { buildCapabilityIndex, search, searchCapabilities } from './search/index.js';
+export { type CloseResult, type CreateServerRegistryOptions, createServerRegistry, type Dialect, type ServerRegistry, type ServersConfig } from './spawn/spawn-servers.js';
+export type { TransportType } from './types.js';
+export { getLogLevel, type Logger, type LogLevel, logger, setLogLevel } from './utils/logger.js';
+export { resolveArgsPaths, resolvePath } from './utils/path-utils.js';

package/dist/cjs/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * @mcp-z/client - MCP Client Library
+ */
+export type { McpServerEntry, StartConfig } from '../schemas/servers.d.js';
+export { probeAuthCapabilities } from './auth/capability-discovery.js';
+export type { AuthCapabilities, CallbackResult, OAuthCallbackListenerOptions, OAuthFlowOptions, TokenSet } from './auth/index.js';
+export { InteractiveOAuthFlow } from './auth/interactive-oauth-flow.js';
+export { OAuthCallbackListener } from './auth/oauth-callback-listener.js';
+export { decorateClient, type ManagedClient, type PromptArguments, type WrappedCallToolReturn, type WrappedGetPromptReturn, type WrappedReadResourceReturn } from './client-helpers.js';
+export { type ValidationResult, validateServers } from './config/validate-config.js';
+export type { JsonValue, PromptArgument, ToolArguments } from './connection/types.js';
+export { DcrAuthenticator } from './dcr/dcr-authenticator.js';
+export { DynamicClientRegistrar } from './dcr/dynamic-client-registrar.js';
+export type { ClientCredentials, DcrAuthenticatorOptions, DcrRegistrationOptions } from './dcr/index.js';
+export { type JsonValidator, type NativeCallToolResponse, type NativeGetPromptResponse, type NativeReadResourceResponse, PromptResponseError, PromptResponseWrapper, ResourceResponseError, ResourceResponseWrapper, ToolResponseError, ToolResponseWrapper, } from './response-wrappers.js';
+export type { CapabilityClient, CapabilityIndex, CapabilityType, IndexedCapability, IndexedPrompt, IndexedResource, IndexedTool, SearchField, SearchOptions, SearchResponse, SearchResult } from './search/index.js';
+export { buildCapabilityIndex, search, searchCapabilities } from './search/index.js';
+export { type CloseResult, type CreateServerRegistryOptions, createServerRegistry, type Dialect, type ServerRegistry, type ServersConfig } from './spawn/spawn-servers.js';
+export type { TransportType } from './types.js';
+export { getLogLevel, type Logger, type LogLevel, logger, setLogLevel } from './utils/logger.js';
+export { resolveArgsPaths, resolvePath } from './utils/path-utils.js';

package/dist/cjs/index.js

@@ -0,0 +1,94 @@
+/**
+ * @mcp-z/client - MCP Client Library
+ */ // Config types (from schema)
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: Object.getOwnPropertyDescriptor(all, name).get
+    });
+}
+_export(exports, {
+    get DcrAuthenticator () {
+        return _dcrauthenticatorts.DcrAuthenticator;
+    },
+    get DynamicClientRegistrar () {
+        return _dynamicclientregistrarts.DynamicClientRegistrar;
+    },
+    get InteractiveOAuthFlow () {
+        return _interactiveoauthflowts.InteractiveOAuthFlow;
+    },
+    get OAuthCallbackListener () {
+        return _oauthcallbacklistenerts.OAuthCallbackListener;
+    },
+    get PromptResponseError () {
+        return _responsewrappersts.PromptResponseError;
+    },
+    get PromptResponseWrapper () {
+        return _responsewrappersts.PromptResponseWrapper;
+    },
+    get ResourceResponseError () {
+        return _responsewrappersts.ResourceResponseError;
+    },
+    get ResourceResponseWrapper () {
+        return _responsewrappersts.ResourceResponseWrapper;
+    },
+    get ToolResponseError () {
+        return _responsewrappersts.ToolResponseError;
+    },
+    get ToolResponseWrapper () {
+        return _responsewrappersts.ToolResponseWrapper;
+    },
+    get buildCapabilityIndex () {
+        return _indexts.buildCapabilityIndex;
+    },
+    get createServerRegistry () {
+        return _spawnserversts.createServerRegistry;
+    },
+    get decorateClient () {
+        return _clienthelpersts.decorateClient;
+    },
+    get getLogLevel () {
+        return _loggerts.getLogLevel;
+    },
+    get logger () {
+        return _loggerts.logger;
+    },
+    get probeAuthCapabilities () {
+        return _capabilitydiscoveryts.probeAuthCapabilities;
+    },
+    get resolveArgsPaths () {
+        return _pathutilsts.resolveArgsPaths;
+    },
+    get resolvePath () {
+        return _pathutilsts.resolvePath;
+    },
+    get search () {
+        return _indexts.search;
+    },
+    get searchCapabilities () {
+        return _indexts.searchCapabilities;
+    },
+    get setLogLevel () {
+        return _loggerts.setLogLevel;
+    },
+    get validateServers () {
+        return _validateconfigts.validateServers;
+    }
+});
+var _capabilitydiscoveryts = require("./auth/capability-discovery.js");
+var _interactiveoauthflowts = require("./auth/interactive-oauth-flow.js");
+var _oauthcallbacklistenerts = require("./auth/oauth-callback-listener.js");
+var _clienthelpersts = require("./client-helpers.js");
+var _validateconfigts = require("./config/validate-config.js");
+var _dcrauthenticatorts = require("./dcr/dcr-authenticator.js");
+var _dynamicclientregistrarts = require("./dcr/dynamic-client-registrar.js");
+var _responsewrappersts = require("./response-wrappers.js");
+var _indexts = require("./search/index.js");
+var _spawnserversts = require("./spawn/spawn-servers.js");
+var _loggerts = require("./utils/logger.js");
+var _pathutilsts = require("./utils/path-utils.js");
+/* CJS INTEROP */ if (exports.__esModule && exports.default) { try { Object.defineProperty(exports.default, '__esModule', { value: true }); for (var key in exports) { exports.default[key] = exports[key]; } } catch (_) {}; module.exports = exports.default; }

package/dist/cjs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/kevin/Dev/Projects/ai/mcp-z/libs/client/src/index.ts"],"sourcesContent":["/**\n * @mcp-z/client - MCP Client Library\n */\n\n// Config types (from schema)\nexport type { McpServerEntry, StartConfig } from '../schemas/servers.d.ts';\n// Auth - OAuth utilities\nexport { probeAuthCapabilities } from './auth/capability-discovery.ts';\nexport type { AuthCapabilities, CallbackResult, OAuthCallbackListenerOptions, OAuthFlowOptions, TokenSet } from './auth/index.ts';\nexport { InteractiveOAuthFlow } from './auth/interactive-oauth-flow.ts';\nexport { OAuthCallbackListener } from './auth/oauth-callback-listener.ts';\n// Client helpers and lightweight overloads\nexport { decorateClient, type ManagedClient, type PromptArguments, type WrappedCallToolReturn, type WrappedGetPromptReturn, type WrappedReadResourceReturn } from './client-helpers.ts';\n// Config - Configuration validation\nexport { type ValidationResult, validateServers } from './config/validate-config.ts';\n// Connection - MCP client connection utilities (internal helpers exposed for advanced use)\nexport type { JsonValue, PromptArgument, ToolArguments } from './connection/types.ts';\n// DCR - Dynamic Client Registration utilities\nexport { DcrAuthenticator } from './dcr/dcr-authenticator.ts';\nexport { DynamicClientRegistrar } from './dcr/dynamic-client-registrar.ts';\nexport type { ClientCredentials, DcrAuthenticatorOptions, DcrRegistrationOptions } from './dcr/index.ts';\nexport {\n  type JsonValidator,\n  type NativeCallToolResponse,\n  type NativeGetPromptResponse,\n  type NativeReadResourceResponse,\n  PromptResponseError,\n  PromptResponseWrapper,\n  ResourceResponseError,\n  ResourceResponseWrapper,\n  ToolResponseError,\n  ToolResponseWrapper,\n} from './response-wrappers.ts';\nexport type { CapabilityClient, CapabilityIndex, CapabilityType, IndexedCapability, IndexedPrompt, IndexedResource, IndexedTool, SearchField, SearchOptions, SearchResponse, SearchResult } from './search/index.ts';\n// Search - Capability discovery\nexport { buildCapabilityIndex, search, searchCapabilities } from './search/index.ts';\n// Spawn - Server registry (v3 API)\nexport { type CloseResult, type CreateServerRegistryOptions, createServerRegistry, type Dialect, type ServerRegistry, type ServersConfig } from './spawn/spawn-servers.ts';\nexport type { TransportType } from './types.ts';\n// Utils - Shared utilities\nexport { getLogLevel, type Logger, type LogLevel, logger, setLogLevel } from './utils/logger.ts';\nexport { resolveArgsPaths, resolvePath } from './utils/path-utils.ts';\n"],"names":["DcrAuthenticator","DynamicClientRegistrar","InteractiveOAuthFlow","OAuthCallbackListener","PromptResponseError","PromptResponseWrapper","ResourceResponseError","ResourceResponseWrapper","ToolResponseError","ToolResponseWrapper","buildCapabilityIndex","createServerRegistry","decorateClient","getLogLevel","logger","probeAuthCapabilities","resolveArgsPaths","resolvePath","search","searchCapabilities","setLogLevel","validateServers"],"mappings":"AAAA;;CAEC,GAED,6BAA6B;;;;;;;;;;;;QAcpBA;eAAAA,oCAAgB;;QAChBC;eAAAA,gDAAsB;;QAVtBC;eAAAA,4CAAoB;;QACpBC;eAAAA,8CAAqB;;QAgB5BC;eAAAA,uCAAmB;;QACnBC;eAAAA,yCAAqB;;QACrBC;eAAAA,yCAAqB;;QACrBC;eAAAA,2CAAuB;;QACvBC;eAAAA,qCAAiB;;QACjBC;eAAAA,uCAAmB;;QAIZC;eAAAA,6BAAoB;;QAEgCC;eAAAA,oCAAoB;;QAzBxEC;eAAAA,+BAAc;;QA4BdC;eAAAA,qBAAW;;QAA8BC;eAAAA,gBAAM;;QAjC/CC;eAAAA,4CAAqB;;QAkCrBC;eAAAA,6BAAgB;;QAAEC;eAAAA,wBAAW;;QANPC;eAAAA,eAAM;;QAAEC;eAAAA,2BAAkB;;QAKCC;eAAAA,qBAAW;;QA1BrCC;eAAAA,iCAAe;;;qCAPT;sCAED;uCACC;+BAE4H;gCAE3G;kCAItB;wCACM;kCAahC;uBAG0D;8BAE+E;wBAGnE;2BAC/B"}

package/dist/cjs/monkey-patches.d.cts

@@ -0,0 +1,6 @@
+/**
+ * Monkey patches for MCP SDK bugs
+ *
+ * These patches fix bugs in dependencies that haven't been fixed upstream yet.
+ */
+export {};

package/dist/cjs/monkey-patches.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Monkey patches for MCP SDK bugs
+ *
+ * These patches fix bugs in dependencies that haven't been fixed upstream yet.
+ */
+export {};