@mondaydotcomorg/atp-protocol 0.17.14

package/README.md

@@ -0,0 +1,241 @@
+# @mondaydotcomorg/atp-protocol
+
+Core protocol types, schemas, validation, and authentication for Agent Tool Protocol.
+
+## Overview
+
+This package provides the foundational types and interfaces used across ATP, including JSON-RPC schemas, OAuth providers, authentication, and validation utilities.
+
+## Installation
+
+```bash
+npm install @mondaydotcomorg/atp-protocol
+```
+
+## Architecture
+
+```mermaid
+graph TB
+    Types[types.ts] --> Schemas[schemas.ts]
+    Schemas --> Validation[validation.ts]
+    Types --> Auth[auth.ts]
+    Auth --> OAuth[oauth.ts]
+    Auth --> Providers[providers.ts]
+```
+
+## Core Components
+
+### Types
+
+Defines all core ATP types including:
+
+- **Protocol**: `AgentToolProtocolRequest`, `AgentToolProtocolResponse`, JSON-RPC messages
+- **Execution**: `ExecutionConfig`, `ExecutionResult`, `ExecutionStatus`
+- **Callbacks**: `CallbackType`, `ClientLLMHandler`, `ClientApprovalHandler`, `ClientEmbeddingHandler`
+- **Tools**: `ClientTool`, `ToolMetadata`, `CustomFunctionDef`
+- **Providers**: `CacheProvider`, `AuthProvider`, `AuditSink`
+
+```typescript
+import type {
+	AgentToolProtocolRequest,
+	ExecutionResult,
+	ExecutionConfig,
+	CallbackType,
+	ClientLLMHandler,
+} from '@mondaydotcomorg/atp-protocol';
+```
+
+### Schemas
+
+Zod schemas for runtime validation:
+
+```typescript
+import {
+	ExecutionConfigSchema,
+	ExecutionResultSchema,
+	SearchOptionsSchema,
+} from '@mondaydotcomorg/atp-protocol';
+
+// Validate execution config
+const config = ExecutionConfigSchema.parse(userInput);
+```
+
+### Validation
+
+Validation utilities:
+
+```typescript
+import { validateExecutionConfig, validateToolDefinition } from '@mondaydotcomorg/atp-protocol';
+
+const errors = validateExecutionConfig(config);
+if (errors.length > 0) {
+	console.error('Validation failed:', errors);
+}
+```
+
+### Authentication
+
+Base interfaces for authentication:
+
+```typescript
+import type { AuthProvider } from '@mondaydotcomorg/atp-protocol';
+
+class CustomAuthProvider implements AuthProvider {
+	name = 'custom';
+
+	async getCredentials(key: string) {
+		// Return credentials for the given key
+	}
+}
+```
+
+### OAuth
+
+OAuth provider interfaces and utilities:
+
+```typescript
+import type { OAuthProvider, OAuthScopeChecker } from '@mondaydotcomorg/atp-protocol';
+
+// Implement OAuth provider
+class GoogleOAuthProvider implements OAuthProvider {
+	name = 'google';
+
+	async generateAuthUrl(config) {
+		// Generate OAuth URL
+	}
+
+	async handleCallback(code, config) {
+		// Exchange code for tokens
+	}
+}
+```
+
+## Key Types
+
+### Execution
+
+```typescript
+interface ExecutionConfig {
+	code: string;
+	apiKey?: string;
+	timeout?: number;
+	pausable?: boolean;
+	resumeFromState?: ResumeState;
+	context?: Record<string, unknown>;
+}
+
+interface ExecutionResult {
+	status: ExecutionStatus;
+	result?: unknown;
+	error?: string;
+	pauseReason?: string;
+	executionId?: string;
+}
+
+enum ExecutionStatus {
+	SUCCESS = 'success',
+	ERROR = 'error',
+	PAUSED = 'paused',
+	TIMEOUT = 'timeout',
+}
+```
+
+### Callbacks
+
+```typescript
+enum CallbackType {
+	LLM = 'llm',
+	APPROVAL = 'approval',
+	EMBEDDING = 'embedding',
+	TOOL = 'tool',
+}
+
+interface ClientServices {
+	hasLLM: boolean;
+	hasApproval: boolean;
+	hasEmbedding: boolean;
+	hasTools: boolean;
+	toolNames?: string[];
+}
+```
+
+### Providers
+
+```typescript
+interface CacheProvider {
+	name: string;
+	get<T>(key: string): Promise<T | null>;
+	set(key: string, value: unknown, ttl?: number): Promise<void>;
+	delete(key: string): Promise<void>;
+	has(key: string): Promise<boolean>;
+}
+
+interface AuthProvider {
+	name: string;
+	getCredentials(key: string): Promise<UserCredentialData | null>;
+	setCredentials(key: string, credentials: UserCredentialData): Promise<void>;
+	deleteCredentials(key: string): Promise<void>;
+}
+
+interface AuditSink {
+	write(event: AuditEvent): Promise<void>;
+	flush?(): Promise<void>;
+}
+```
+
+## Exports
+
+```typescript
+// Types
+export * from './types';
+
+// Schemas (Zod)
+export * from './schemas';
+
+// Validation utilities
+export * from './validation';
+
+// Auth interfaces
+export * from './auth';
+
+// OAuth interfaces
+export * from './oauth';
+
+// Provider interfaces
+export * from './providers';
+```
+
+## Usage Example
+
+```typescript
+import {
+	type AgentToolProtocolRequest,
+	type ExecutionConfig,
+	ExecutionConfigSchema,
+	ExecutionStatus,
+	CallbackType,
+} from '@mondaydotcomorg/atp-protocol';
+
+// Create execution config with validation
+const config: ExecutionConfig = {
+	code: 'const result = await atp.llm.call({ prompt: "Hello" });',
+	timeout: 30000,
+	pausable: true,
+};
+
+// Validate
+const validated = ExecutionConfigSchema.parse(config);
+
+// Check status
+if (result.status === ExecutionStatus.PAUSED) {
+	console.log('Execution paused for callback');
+}
+```
+
+## TypeScript Support
+
+Full TypeScript definitions included with strict type checking.
+
+## License
+
+MIT

package/dist/auth.d.ts

@@ -0,0 +1,173 @@
+/**
+ * Authentication and credential management types for Agent Tool Protocol
+ */
+/**
+ * Supported authentication schemes
+ */
+export type AuthScheme = 'apiKey' | 'bearer' | 'basic' | 'oauth2' | 'custom' | 'composite';
+/**
+ * Base authentication configuration
+ */
+export interface BaseAuthConfig {
+    scheme: AuthScheme;
+    /** Environment variable name to read credentials from */
+    envVar?: string;
+    /** Direct credential value (not recommended for production) */
+    value?: string;
+    /**
+     * Credential source: 'server' for server-level env vars (default), 'user' for user-scoped OAuth
+     */
+    source?: 'server' | 'user';
+    /**
+     * OAuth provider name for user-scoped credentials (e.g., 'github', 'google')
+     * Required when source='user'. Used to look up user's OAuth token from AuthProvider.
+     * Note: This is different from the 'provider' field which is for runtime credential providers.
+     */
+    oauthProvider?: string;
+    /** Runtime credential provider function name */
+    provider?: string;
+}
+/**
+ * API Key authentication (in header or query param)
+ */
+export interface APIKeyAuthConfig extends BaseAuthConfig {
+    scheme: 'apiKey';
+    /** Where to send the API key */
+    in: 'header' | 'query';
+    /** Parameter/header name */
+    name: string;
+}
+/**
+ * Bearer token authentication
+ */
+export interface BearerAuthConfig extends BaseAuthConfig {
+    scheme: 'bearer';
+    /** Optional bearer format (e.g., 'JWT') */
+    bearerFormat?: string;
+}
+/**
+ * HTTP Basic authentication
+ */
+export interface BasicAuthConfig extends BaseAuthConfig {
+    scheme: 'basic';
+    /** Username (can use envVar for dynamic value) */
+    username?: string;
+    /** Username environment variable */
+    usernameEnvVar?: string;
+    /** Password environment variable */
+    passwordEnvVar?: string;
+}
+/**
+ * OAuth2 authentication with automatic token refresh
+ */
+export interface OAuth2AuthConfig extends BaseAuthConfig {
+    scheme: 'oauth2';
+    /** OAuth2 flow type */
+    flow: 'clientCredentials' | 'authorizationCode' | 'implicit' | 'password';
+    /** Token endpoint URL */
+    tokenUrl: string;
+    /** Authorization endpoint (for authorizationCode/implicit) */
+    authorizationUrl?: string;
+    /** Client ID */
+    clientId?: string;
+    /** Client ID environment variable */
+    clientIdEnvVar?: string;
+    /** Client secret environment variable */
+    clientSecretEnvVar?: string;
+    /** Scopes required */
+    scopes?: string[];
+    /** Refresh token environment variable (for token refresh) */
+    refreshTokenEnvVar?: string;
+}
+/**
+ * Custom authentication with arbitrary headers
+ */
+export interface CustomAuthConfig extends BaseAuthConfig {
+    scheme: 'custom';
+    /** Custom headers to inject */
+    headers: Record<string, string>;
+    /** Environment variables to use for header values */
+    headerEnvVars?: Record<string, string>;
+    /** Query parameters to inject */
+    queryParams?: Record<string, string>;
+    /** Environment variables to use for query parameter values */
+    queryParamEnvVars?: Record<string, string>;
+}
+/**
+ * Composite authentication - combines multiple auth mechanisms
+ * Useful for APIs that require multiple credentials (e.g., projectId + apiKey + secret)
+ */
+export interface CompositeAuthConfig extends BaseAuthConfig {
+    scheme: 'composite';
+    /**
+     * Multiple credentials to combine
+     * Example: { projectId: { envVar: 'PROJECT_ID' }, apiKey: { envVar: 'API_KEY' }, secret: { envVar: 'API_SECRET' } }
+     */
+    credentials: Record<string, CredentialConfig>;
+    /** How to inject credentials: 'header', 'query', or 'both' */
+    injectAs?: 'header' | 'query' | 'both';
+}
+/**
+ * Individual credential configuration for composite auth
+ */
+export interface CredentialConfig {
+    /** Environment variable to read from */
+    envVar?: string;
+    /** Direct value (not recommended) */
+    value?: string;
+    /** Header name if injecting as header */
+    headerName?: string;
+    /** Query param name if injecting as query */
+    queryParamName?: string;
+    /** Whether this credential is required */
+    required?: boolean;
+}
+/**
+ * Union type of all auth configurations
+ */
+export type AuthConfig = APIKeyAuthConfig | BearerAuthConfig | BasicAuthConfig | OAuth2AuthConfig | CustomAuthConfig | CompositeAuthConfig;
+/**
+ * Runtime credential provider
+ * Allows dynamic credential resolution at runtime
+ */
+export interface CredentialProvider {
+    name: string;
+    /** Resolves credentials dynamically */
+    resolve: () => Promise<Credentials> | Credentials;
+}
+/**
+ * Resolved credentials ready to be injected into requests
+ */
+export interface Credentials {
+    headers?: Record<string, string>;
+    queryParams?: Record<string, string>;
+}
+/**
+ * Credential resolver - resolves auth config to actual credentials
+ */
+export declare class CredentialResolver {
+    private providers;
+    /**
+     * Registers a runtime credential provider
+     */
+    registerProvider(provider: CredentialProvider): void;
+    /**
+     * Resolves auth configuration to credentials
+     */
+    resolve(authConfig: AuthConfig): Promise<Credentials>;
+    private resolveAPIKey;
+    private resolveBearer;
+    private resolveBasic;
+    private resolveOAuth2;
+    private resolveCustom;
+    private resolveComposite;
+    /**
+     * Gets credential value from config (env var or direct value)
+     */
+    private getValue;
+    /**
+     * Fetches OAuth2 token using client credentials flow
+     */
+    private fetchOAuth2Token;
+}
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,cAAc;IAC9B,MAAM,EAAE,UAAU,CAAC;IACnB,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,MAAM,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC3B;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gDAAgD;IAChD,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAiB,SAAQ,cAAc;IACvD,MAAM,EAAE,QAAQ,CAAC;IACjB,gCAAgC;IAChC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC;IACvB,4BAA4B;IAC5B,IAAI,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,gBAAiB,SAAQ,cAAc;IACvD,MAAM,EAAE,QAAQ,CAAC;IACjB,2CAA2C;IAC3C,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,eAAgB,SAAQ,cAAc;IACtD,MAAM,EAAE,OAAO,CAAC;IAChB,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oCAAoC;IACpC,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAiB,SAAQ,cAAc;IACvD,MAAM,EAAE,QAAQ,CAAC;IACjB,uBAAuB;IACvB,IAAI,EAAE,mBAAmB,GAAG,mBAAmB,GAAG,UAAU,GAAG,UAAU,CAAC;IAC1E,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qCAAqC;IACrC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yCAAyC;IACzC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,sBAAsB;IACtB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,6DAA6D;IAC7D,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,gBAAiB,SAAQ,cAAc;IACvD,MAAM,EAAE,QAAQ,CAAC;IACjB,+BAA+B;IAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,qDAAqD;IACrD,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,iCAAiC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,8DAA8D;IAC9D,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3C;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAoB,SAAQ,cAAc;IAC1D,MAAM,EAAE,WAAW,CAAC;IACpB;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC9C,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAChC,wCAAwC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,0CAA0C;IAC1C,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,MAAM,UAAU,GACnB,gBAAgB,GAChB,gBAAgB,GAChB,eAAe,GACf,gBAAgB,GAChB,gBAAgB,GAChB,mBAAmB,CAAC;AAEvB;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,uCAAuC;IACvC,OAAO,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,GAAG,WAAW,CAAC;CAClD;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED;;GAEG;AACH,qBAAa,kBAAkB;IAC9B,OAAO,CAAC,SAAS,CAA8C;IAE/D;;OAEG;IACH,gBAAgB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI;IAIpD;;OAEG;IACG,OAAO,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;IA2B3D,OAAO,CAAC,aAAa;IAarB,OAAO,CAAC,aAAa;IAarB,OAAO,CAAC,YAAY;YAkBN,aAAa;IAoC3B,OAAO,CAAC,aAAa;IAkCrB,OAAO,CAAC,gBAAgB;IAuCxB;;OAEG;IACH,OAAO,CAAC,QAAQ;IAOhB;;OAEG;YACW,gBAAgB;CA+B9B"}

package/dist/auth.js

@@ -0,0 +1,202 @@
+/**
+ * Authentication and credential management types for Agent Tool Protocol
+ */
+/**
+ * Credential resolver - resolves auth config to actual credentials
+ */
+export class CredentialResolver {
+    providers = new Map();
+    /**
+     * Registers a runtime credential provider
+     */
+    registerProvider(provider) {
+        this.providers.set(provider.name, provider);
+    }
+    /**
+     * Resolves auth configuration to credentials
+     */
+    async resolve(authConfig) {
+        if (authConfig.provider) {
+            const provider = this.providers.get(authConfig.provider);
+            if (!provider) {
+                throw new Error(`Credential provider '${authConfig.provider}' not found`);
+            }
+            return await provider.resolve();
+        }
+        switch (authConfig.scheme) {
+            case 'apiKey':
+                return this.resolveAPIKey(authConfig);
+            case 'bearer':
+                return this.resolveBearer(authConfig);
+            case 'basic':
+                return this.resolveBasic(authConfig);
+            case 'oauth2':
+                return this.resolveOAuth2(authConfig);
+            case 'custom':
+                return this.resolveCustom(authConfig);
+            case 'composite':
+                return this.resolveComposite(authConfig);
+            default:
+                throw new Error(`Unsupported auth scheme: ${authConfig.scheme}`);
+        }
+    }
+    resolveAPIKey(config) {
+        const value = this.getValue(config);
+        if (!value) {
+            throw new Error(`API key not provided for '${config.name}'`);
+        }
+        if (config.in === 'header') {
+            return { headers: { [config.name]: value } };
+        }
+        else {
+            return { queryParams: { [config.name]: value } };
+        }
+    }
+    resolveBearer(config) {
+        const token = this.getValue(config);
+        if (!token) {
+            throw new Error('Bearer token not provided');
+        }
+        return {
+            headers: {
+                Authorization: `Bearer ${token}`,
+            },
+        };
+    }
+    resolveBasic(config) {
+        const username = config.usernameEnvVar ? process.env[config.usernameEnvVar] : config.username;
+        const password = config.passwordEnvVar
+            ? process.env[config.passwordEnvVar]
+            : this.getValue(config);
+        if (!username || !password) {
+            throw new Error('Basic auth username and password not provided');
+        }
+        const credentials = Buffer.from(`${username}:${password}`).toString('base64');
+        return {
+            headers: {
+                Authorization: `Basic ${credentials}`,
+            },
+        };
+    }
+    async resolveOAuth2(config) {
+        const clientId = config.clientIdEnvVar ? process.env[config.clientIdEnvVar] : config.clientId;
+        const clientSecret = config.clientSecretEnvVar
+            ? process.env[config.clientSecretEnvVar]
+            : undefined;
+        if (!clientId || !clientSecret) {
+            throw new Error('OAuth2 client credentials not provided');
+        }
+        if (config.flow === 'clientCredentials') {
+            const token = await this.fetchOAuth2Token(config.tokenUrl, clientId, clientSecret, config.scopes);
+            return {
+                headers: {
+                    Authorization: `Bearer ${token}`,
+                },
+            };
+        }
+        const token = this.getValue(config);
+        if (token) {
+            return {
+                headers: {
+                    Authorization: `Bearer ${token}`,
+                },
+            };
+        }
+        throw new Error(`OAuth2 flow '${config.flow}' requires manual token setup`);
+    }
+    resolveCustom(config) {
+        const headers = {};
+        const queryParams = {};
+        Object.assign(headers, config.headers);
+        if (config.headerEnvVars) {
+            for (const [headerName, envVar] of Object.entries(config.headerEnvVars)) {
+                const value = process.env[envVar];
+                if (value) {
+                    headers[headerName] = value;
+                }
+            }
+        }
+        if (config.queryParams) {
+            Object.assign(queryParams, config.queryParams);
+        }
+        if (config.queryParamEnvVars) {
+            for (const [paramName, envVar] of Object.entries(config.queryParamEnvVars)) {
+                const value = process.env[envVar];
+                if (value) {
+                    queryParams[paramName] = value;
+                }
+            }
+        }
+        return {
+            headers: Object.keys(headers).length > 0 ? headers : undefined,
+            queryParams: Object.keys(queryParams).length > 0 ? queryParams : undefined,
+        };
+    }
+    resolveComposite(config) {
+        const headers = {};
+        const queryParams = {};
+        for (const [credName, credConfig] of Object.entries(config.credentials)) {
+            const value = credConfig.envVar ? process.env[credConfig.envVar] : credConfig.value;
+            if (!value) {
+                if (credConfig.required !== false) {
+                    throw new Error(`Required credential '${credName}' not provided`);
+                }
+                continue;
+            }
+            const injectAs = config.injectAs || 'header';
+            if ((injectAs === 'header' || injectAs === 'both') && credConfig.headerName) {
+                headers[credConfig.headerName] = value;
+            }
+            if ((injectAs === 'query' || injectAs === 'both') && credConfig.queryParamName) {
+                queryParams[credConfig.queryParamName] = value;
+            }
+            if (!credConfig.headerName && !credConfig.queryParamName) {
+                if (injectAs === 'query' || injectAs === 'both') {
+                    queryParams[credName] = value;
+                }
+                else {
+                    headers[`X-${credName}`] = value;
+                }
+            }
+        }
+        return {
+            headers: Object.keys(headers).length > 0 ? headers : undefined,
+            queryParams: Object.keys(queryParams).length > 0 ? queryParams : undefined,
+        };
+    }
+    /**
+     * Gets credential value from config (env var or direct value)
+     */
+    getValue(config) {
+        if (config.envVar) {
+            return process.env[config.envVar];
+        }
+        return config.value;
+    }
+    /**
+     * Fetches OAuth2 token using client credentials flow
+     */
+    async fetchOAuth2Token(tokenUrl, clientId, clientSecret, scopes) {
+        const params = new URLSearchParams({
+            grant_type: 'client_credentials',
+            client_id: clientId,
+            client_secret: clientSecret,
+        });
+        if (scopes && scopes.length > 0) {
+            params.append('scope', scopes.join(' '));
+        }
+        const response = await fetch(tokenUrl, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+            },
+            body: params.toString(),
+        });
+        if (!response.ok) {
+            throw new Error(`OAuth2 token fetch failed: ${response.statusText}`);
+        }
+        const data = (await response.json());
+        return data.access_token;
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAiKH;;GAEG;AACH,MAAM,OAAO,kBAAkB;IACtB,SAAS,GAAoC,IAAI,GAAG,EAAE,CAAC;IAE/D;;OAEG;IACH,gBAAgB,CAAC,QAA4B;QAC5C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,UAAsB;QACnC,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,wBAAwB,UAAU,CAAC,QAAQ,aAAa,CAAC,CAAC;YAC3E,CAAC;YACD,OAAO,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;QACjC,CAAC;QAED,QAAQ,UAAU,CAAC,MAAM,EAAE,CAAC;YAC3B,KAAK,QAAQ;gBACZ,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;YACvC,KAAK,QAAQ;gBACZ,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;YACvC,KAAK,OAAO;gBACX,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;YACtC,KAAK,QAAQ;gBACZ,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;YACvC,KAAK,QAAQ;gBACZ,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;YACvC,KAAK,WAAW;gBACf,OAAO,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;YAC1C;gBACC,MAAM,IAAI,KAAK,CAAC,4BAA6B,UAAkB,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5E,CAAC;IACF,CAAC;IAEO,aAAa,CAAC,MAAwB;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,MAAM,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAC9C,CAAC;aAAM,CAAC;YACP,OAAO,EAAE,WAAW,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,CAAC;IACF,CAAC;IAEO,aAAa,CAAC,MAAwB;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO;YACN,OAAO,EAAE;gBACR,aAAa,EAAE,UAAU,KAAK,EAAE;aAChC;SACD,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,MAAuB;QAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC9F,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc;YACrC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC;YACpC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAEzB,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9E,OAAO;YACN,OAAO,EAAE;gBACR,aAAa,EAAE,SAAS,WAAW,EAAE;aACrC;SACD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,MAAwB;QACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC9F,MAAM,YAAY,GAAG,MAAM,CAAC,kBAAkB;YAC7C,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC;YACxC,CAAC,CAAC,SAAS,CAAC;QAEb,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,CACxC,MAAM,CAAC,QAAQ,EACf,QAAQ,EACR,YAAY,EACZ,MAAM,CAAC,MAAM,CACb,CAAC;YACF,OAAO;gBACN,OAAO,EAAE;oBACR,aAAa,EAAE,UAAU,KAAK,EAAE;iBAChC;aACD,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,KAAK,EAAE,CAAC;YACX,OAAO;gBACN,OAAO,EAAE;oBACR,aAAa,EAAE,UAAU,KAAK,EAAE;iBAChC;aACD,CAAC;QACH,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,CAAC,IAAI,+BAA+B,CAAC,CAAC;IAC7E,CAAC;IAEO,aAAa,CAAC,MAAwB;QAC7C,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,MAAM,WAAW,GAA2B,EAAE,CAAC;QAE/C,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAEvC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YAC1B,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;gBACzE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAClC,IAAI,KAAK,EAAE,CAAC;oBACX,OAAO,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;gBAC7B,CAAC;YACF,CAAC;QACF,CAAC;QAED,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC9B,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAC5E,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAClC,IAAI,KAAK,EAAE,CAAC;oBACX,WAAW,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;gBAChC,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO;YACN,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YAC9D,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;SAC1E,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,MAA2B;QACnD,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,MAAM,WAAW,GAA2B,EAAE,CAAC;QAE/C,KAAK,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YACzE,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;YAEpF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACZ,IAAI,UAAU,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;oBACnC,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,gBAAgB,CAAC,CAAC;gBACnE,CAAC;gBACD,SAAS;YACV,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC;YAE7C,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;gBAC7E,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;YACxC,CAAC;YAED,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,cAAc,EAAE,CAAC;gBAChF,WAAW,CAAC,UAAU,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC;YAChD,CAAC;YAED,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;gBAC1D,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;oBACjD,WAAW,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC;gBAC/B,CAAC;qBAAM,CAAC;oBACP,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC;gBAClC,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO;YACN,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YAC9D,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;SAC1E,CAAC;IACH,CAAC;IAED;;OAEG;IACK,QAAQ,CAAC,MAAsB;QACtC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,MAAM,CAAC,KAAK,CAAC;IACrB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,gBAAgB,CAC7B,QAAgB,EAChB,QAAgB,EAChB,YAAoB,EACpB,MAAiB;QAEjB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YAClC,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,QAAQ;YACnB,aAAa,EAAE,YAAY;SAC3B,CAAC,CAAC;QAEH,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;YACtC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACR,cAAc,EAAE,mCAAmC;aACnD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACvB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA6B,CAAC;QACjE,OAAO,IAAI,CAAC,YAAY,CAAC;IAC1B,CAAC;CACD"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export * from './types.js';
+export * from './schemas.js';
+export * from './validation.js';
+export * from './auth.js';
+export * from './providers.js';
+export * from './oauth.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,7 @@
+export * from './types.js';
+export * from './schemas.js';
+export * from './validation.js';
+export * from './auth.js';
+export * from './providers.js';
+export * from './oauth.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC"}