@mondaydotcomorg/atp-providers 0.17.16 → 0.18.4-rc.0

package/dist/cache/redis.d.ts

@@ -0,0 +1,28 @@
+import type { CacheProvider } from '@mondaydotcomorg/atp-protocol';
+import type Redis from 'ioredis';
+export interface RedisCacheOptions {
+    redis: Redis;
+    keyPrefix?: string;
+    defaultTTL?: number;
+}
+/**
+ * Redis-backed cache provider for distributed systems
+ * Enables cross-pod state sharing and resume capabilities
+ */
+export declare class RedisCache implements CacheProvider {
+    name: string;
+    private redis;
+    private keyPrefix;
+    private defaultTTL?;
+    constructor(options: RedisCacheOptions);
+    private getFullKey;
+    get<T>(key: string): Promise<T | null>;
+    set(key: string, value: unknown, ttl?: number): Promise<void>;
+    delete(key: string): Promise<void>;
+    has(key: string): Promise<boolean>;
+    clear(pattern?: string): Promise<void>;
+    mget(keys: string[]): Promise<Array<unknown | null>>;
+    mset(entries: Array<[string, unknown, number?]>): Promise<void>;
+    disconnect(): Promise<void>;
+}
+//# sourceMappingURL=redis.d.ts.map

package/dist/cache/redis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis.d.ts","sourceRoot":"","sources":["../../src/cache/redis.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AAEjC,MAAM,WAAW,iBAAiB;IACjC,KAAK,EAAE,KAAK,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,qBAAa,UAAW,YAAW,aAAa;IAC/C,IAAI,SAAW;IACf,OAAO,CAAC,KAAK,CAAQ;IACrB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,UAAU,CAAC,CAAS;gBAEhB,OAAO,EAAE,iBAAiB;IAMtC,OAAO,CAAC,UAAU;IAIZ,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAetC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAoB7D,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYlC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAclC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBtC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAcpD,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAuB/D,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CAUjC"}

package/dist/cache/redis.js

@@ -0,0 +1,124 @@
+/**
+ * Redis-backed cache provider for distributed systems
+ * Enables cross-pod state sharing and resume capabilities
+ */
+export class RedisCache {
+    name = 'redis';
+    redis;
+    keyPrefix;
+    defaultTTL;
+    constructor(options) {
+        this.redis = options.redis;
+        this.keyPrefix = options.keyPrefix || 'atp:cache:';
+        this.defaultTTL = options.defaultTTL;
+    }
+    getFullKey(key) {
+        return `${this.keyPrefix}${key}`;
+    }
+    async get(key) {
+        try {
+            const value = await this.redis.get(this.getFullKey(key));
+            if (!value)
+                return null;
+            return JSON.parse(value);
+        }
+        catch (error) {
+            console.error('[RedisCache] Failed to get key:', key, error instanceof Error ? error.message : error);
+            return null;
+        }
+    }
+    async set(key, value, ttl) {
+        try {
+            const serialized = JSON.stringify(value);
+            const fullKey = this.getFullKey(key);
+            const effectiveTTL = ttl ?? this.defaultTTL;
+            if (effectiveTTL) {
+                await this.redis.setex(fullKey, effectiveTTL, serialized);
+            }
+            else {
+                await this.redis.set(fullKey, serialized);
+            }
+        }
+        catch (error) {
+            console.error('[RedisCache] Failed to set key:', key, error instanceof Error ? error.message : error);
+        }
+    }
+    async delete(key) {
+        try {
+            await this.redis.del(this.getFullKey(key));
+        }
+        catch (error) {
+            console.error('[RedisCache] Failed to delete key:', key, error instanceof Error ? error.message : error);
+        }
+    }
+    async has(key) {
+        try {
+            const exists = await this.redis.exists(this.getFullKey(key));
+            return exists === 1;
+        }
+        catch (error) {
+            console.error('[RedisCache] Failed to check key:', key, error instanceof Error ? error.message : error);
+            return false;
+        }
+    }
+    async clear(pattern) {
+        try {
+            if (pattern) {
+                const fullPattern = this.getFullKey(pattern);
+                const keys = await this.redis.keys(fullPattern);
+                if (keys.length > 0) {
+                    await this.redis.del(...keys);
+                }
+            }
+            else {
+                const keys = await this.redis.keys(this.getFullKey('*'));
+                if (keys.length > 0) {
+                    await this.redis.del(...keys);
+                }
+            }
+        }
+        catch (error) {
+            console.error('[RedisCache] Failed to clear cache:', error instanceof Error ? error.message : error);
+        }
+    }
+    async mget(keys) {
+        try {
+            const fullKeys = keys.map((key) => this.getFullKey(key));
+            const values = await this.redis.mget(...fullKeys);
+            return values.map((value) => (value ? JSON.parse(value) : null));
+        }
+        catch (error) {
+            console.error('[RedisCache] Failed to mget keys:', error instanceof Error ? error.message : error);
+            return keys.map(() => null);
+        }
+    }
+    async mset(entries) {
+        try {
+            const pipeline = this.redis.pipeline();
+            for (const [key, value, ttl] of entries) {
+                const serialized = JSON.stringify(value);
+                const fullKey = this.getFullKey(key);
+                const effectiveTTL = ttl ?? this.defaultTTL;
+                if (effectiveTTL) {
+                    pipeline.setex(fullKey, effectiveTTL, serialized);
+                }
+                else {
+                    pipeline.set(fullKey, serialized);
+                }
+            }
+            await pipeline.exec();
+        }
+        catch (error) {
+            console.error('[RedisCache] Failed to mset entries:', error instanceof Error ? error.message : error);
+        }
+    }
+    async disconnect() {
+        try {
+            await this.redis.quit();
+        }
+        catch (error) {
+            console.error('[RedisCache] Failed to disconnect:', error instanceof Error ? error.message : error);
+        }
+    }
+}
+//# sourceMappingURL=redis.js.map

package/dist/cache/redis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis.js","sourceRoot":"","sources":["../../src/cache/redis.ts"],"names":[],"mappings":"AASA;;;GAGG;AACH,MAAM,OAAO,UAAU;IACtB,IAAI,GAAG,OAAO,CAAC;IACP,KAAK,CAAQ;IACb,SAAS,CAAS;IAClB,UAAU,CAAU;IAE5B,YAAY,OAA0B;QACrC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,YAAY,CAAC;QACnD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACtC,CAAC;IAEO,UAAU,CAAC,GAAW;QAC7B,OAAO,GAAG,IAAI,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,GAAG,CAAI,GAAW;QACvB,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YACzD,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YACxB,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAM,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CACZ,iCAAiC,EACjC,GAAG,EACH,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAC9C,CAAC;YACF,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAc,EAAE,GAAY;QAClD,IAAI,CAAC;YACJ,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACrC,MAAM,YAAY,GAAG,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC;YAE5C,IAAI,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;YAC3D,CAAC;iBAAM,CAAC;gBACP,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAC3C,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CACZ,iCAAiC,EACjC,GAAG,EACH,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAC9C,CAAC;QACH,CAAC;IACF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACvB,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CACZ,oCAAoC,EACpC,GAAG,EACH,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAC9C,CAAC;QACH,CAAC;IACF,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACpB,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7D,OAAO,MAAM,KAAK,CAAC,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CACZ,mCAAmC,EACnC,GAAG,EACH,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAC9C,CAAC;YACF,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAgB;QAC3B,IAAI,CAAC;YACJ,IAAI,OAAO,EAAE,CAAC;gBACb,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBAC7C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAChD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACrB,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC/B,CAAC;YACF,CAAC;iBAAM,CAAC;gBACP,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;gBACzD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACrB,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC/B,CAAC;YACF,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CACZ,qCAAqC,EACrC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAC9C,CAAC;QACH,CAAC;IACF,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAc;QACxB,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;YAClD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CACZ,mCAAmC,EACnC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAC9C,CAAC;YACF,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;IACF,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAA0C;QACpD,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;gBACzC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBACzC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBACrC,MAAM,YAAY,GAAG,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC;gBAE5C,IAAI,YAAY,EAAE,CAAC;oBAClB,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;gBACnD,CAAC;qBAAM,CAAC;oBACP,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;gBACnC,CAAC;YACF,CAAC;YACD,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CACZ,sCAAsC,EACtC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAC9C,CAAC;QACH,CAAC;IACF,CAAC;IAED,KAAK,CAAC,UAAU;QACf,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CACZ,oCAAoC,EACpC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAC9C,CAAC;QACH,CAAC;IACF,CAAC;CACD"}

package/dist/index.d.ts

@@ -0,0 +1,10 @@
+export { MemoryCache } from './cache/memory.js';
+export { RedisCache } from './cache/redis.js';
+export { FileCache } from './cache/file.js';
+export { EnvAuthProvider } from './auth/env.js';
+export * from './oauth/index.js';
+export { JSONLAuditSink } from './audit/jsonl.js';
+export { OpenTelemetryAuditSink } from './audit/opentelemetry.js';
+export { OTelCounter, OTelHistogram, OTelSpan, OTelAttribute, METRIC_CONFIGS, OTEL_SERVICE_NAME, OTEL_TRACER_NAME, OTEL_METER_NAME, ATTRIBUTE_PREFIX_TOOL, ATTRIBUTE_PREFIX_METADATA, } from './audit/otel-metrics.js';
+export type { CacheProvider, AuthProvider, AuditSink, AuditEvent, AuditFilter, UserCredentialData, } from '@mondaydotcomorg/atp-protocol';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,cAAc,kBAAkB,CAAC;AAEjC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAElE,OAAO,EACN,WAAW,EACX,aAAa,EACb,QAAQ,EACR,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,qBAAqB,EACrB,yBAAyB,GACzB,MAAM,yBAAyB,CAAC;AAEjC,YAAY,EACX,aAAa,EACb,YAAY,EACZ,SAAS,EACT,UAAU,EACV,WAAW,EACX,kBAAkB,GAClB,MAAM,+BAA+B,CAAC"}

package/dist/index.js

@@ -0,0 +1,9 @@
+export { MemoryCache } from './cache/memory.js';
+export { RedisCache } from './cache/redis.js';
+export { FileCache } from './cache/file.js';
+export { EnvAuthProvider } from './auth/env.js';
+export * from './oauth/index.js';
+export { JSONLAuditSink } from './audit/jsonl.js';
+export { OpenTelemetryAuditSink } from './audit/opentelemetry.js';
+export { OTelCounter, OTelHistogram, OTelSpan, OTelAttribute, METRIC_CONFIGS, OTEL_SERVICE_NAME, OTEL_TRACER_NAME, OTEL_METER_NAME, ATTRIBUTE_PREFIX_TOOL, ATTRIBUTE_PREFIX_METADATA, } from './audit/otel-metrics.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,cAAc,kBAAkB,CAAC;AAEjC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAElE,OAAO,EACN,WAAW,EACX,aAAa,EACb,QAAQ,EACR,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,qBAAqB,EACrB,yBAAyB,GACzB,MAAM,yBAAyB,CAAC"}

package/dist/oauth/index.d.ts

@@ -0,0 +1,2 @@
+export { ScopeCheckerRegistry } from './scope-checkers.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/oauth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/oauth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/oauth/index.js

@@ -0,0 +1,2 @@
+export { ScopeCheckerRegistry } from './scope-checkers.js';
+//# sourceMappingURL=index.js.map

package/dist/oauth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/oauth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/oauth/scope-checkers.d.ts

@@ -0,0 +1,61 @@
+import type { ScopeChecker, TokenInfo } from '@mondaydotcomorg/atp-protocol';
+/**
+ * Scope checker registry
+ * Manages scope checkers for different OAuth providers
+ */
+export declare class ScopeCheckerRegistry {
+    private checkers;
+    private scopeCache;
+    private cleanupInterval?;
+    private maxCacheSize;
+    private pendingChecks;
+    constructor();
+    /**
+     * Start periodic cache cleanup
+     */
+    private startCleanup;
+    /**
+     * Stop periodic cache cleanup (for testing or shutdown)
+     */
+    stopCleanup(): void;
+    /**
+     * Remove expired entries from cache
+     */
+    private cleanupExpiredCache;
+    /**
+     * Register a custom scope checker
+     */
+    register(checker: ScopeChecker): void;
+    /**
+     * Check if a scope checker is available for a provider
+     */
+    hasChecker(provider: string): boolean;
+    /**
+     * Get scope checker for a provider
+     */
+    getChecker(provider: string): ScopeChecker | undefined;
+    /**
+     * Check what scopes a token has (with caching and deduplication)
+     * @param provider - Provider name
+     * @param token - Access token
+     * @param cacheTTL - Cache TTL in seconds (default: 3600 = 1 hour)
+     */
+    checkScopes(provider: string, token: string, cacheTTL?: number): Promise<string[]>;
+    /**
+     * Validate if a token is still valid
+     */
+    validateToken(provider: string, token: string): Promise<boolean>;
+    /**
+     * Get complete token information
+     */
+    getTokenInfo(provider: string, token: string): Promise<TokenInfo>;
+    /**
+     * Clear cached scopes
+     */
+    clearCache(provider?: string): void;
+    /**
+     * Hash token for cache key (SHA-256, first 16 chars)
+     */
+    private hashToken;
+}
+//# sourceMappingURL=scope-checkers.d.ts.map

package/dist/oauth/scope-checkers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-checkers.d.ts","sourceRoot":"","sources":["../../src/oauth/scope-checkers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAG7E;;;GAGG;AACH,qBAAa,oBAAoB;IAChC,OAAO,CAAC,QAAQ,CAAmC;IACnD,OAAO,CAAC,UAAU,CAA8D;IAChF,OAAO,CAAC,eAAe,CAAC,CAAiB;IACzC,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,aAAa,CAAwC;;IAM7D;;OAEG;IACH,OAAO,CAAC,YAAY;IAapB;;OAEG;IACH,WAAW,IAAI,IAAI;IAOnB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA+B3B;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI;IAIrC;;OAEG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIrC;;OAEG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS;IAItD;;;;;OAKG;IACG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,SAAO,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAqCtF;;OAEG;IACG,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAStE;;OAEG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAiBvE;;OAEG;IACH,UAAU,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI;IAYnC;;OAEG;IACH,OAAO,CAAC,SAAS;CAGjB"}

package/dist/oauth/scope-checkers.js

@@ -0,0 +1,166 @@
+import { createHash } from 'node:crypto';
+/**
+ * Scope checker registry
+ * Manages scope checkers for different OAuth providers
+ */
+export class ScopeCheckerRegistry {
+    checkers = new Map();
+    scopeCache = new Map();
+    cleanupInterval;
+    maxCacheSize = 10000;
+    pendingChecks = new Map();
+    constructor() {
+        this.startCleanup();
+    }
+    /**
+     * Start periodic cache cleanup
+     */
+    startCleanup() {
+        this.cleanupInterval = setInterval(() => {
+            this.cleanupExpiredCache();
+        }, 5 * 60 * 1000);
+        if (this.cleanupInterval.unref) {
+            this.cleanupInterval.unref();
+        }
+    }
+    /**
+     * Stop periodic cache cleanup (for testing or shutdown)
+     */
+    stopCleanup() {
+        if (this.cleanupInterval) {
+            clearInterval(this.cleanupInterval);
+            this.cleanupInterval = undefined;
+        }
+    }
+    /**
+     * Remove expired entries from cache
+     */
+    cleanupExpiredCache() {
+        const now = Date.now();
+        let cleaned = 0;
+        for (const [key, value] of this.scopeCache.entries()) {
+            if (value.expiresAt <= now) {
+                this.scopeCache.delete(key);
+                cleaned++;
+            }
+        }
+        if (this.scopeCache.size > this.maxCacheSize) {
+            const entriesToRemove = this.scopeCache.size - this.maxCacheSize;
+            const entries = Array.from(this.scopeCache.entries());
+            entries.sort((a, b) => a[1].expiresAt - b[1].expiresAt);
+            for (let i = 0; i < entriesToRemove; i++) {
+                const entry = entries[i];
+                if (entry) {
+                    this.scopeCache.delete(entry[0]);
+                    cleaned++;
+                }
+            }
+        }
+        if (cleaned > 0) {
+            console.debug(`Cleaned ${cleaned} expired/old scope cache entries`);
+        }
+    }
+    /**
+     * Register a custom scope checker
+     */
+    register(checker) {
+        this.checkers.set(checker.provider, checker);
+    }
+    /**
+     * Check if a scope checker is available for a provider
+     */
+    hasChecker(provider) {
+        return this.checkers.has(provider);
+    }
+    /**
+     * Get scope checker for a provider
+     */
+    getChecker(provider) {
+        return this.checkers.get(provider);
+    }
+    /**
+     * Check what scopes a token has (with caching and deduplication)
+     * @param provider - Provider name
+     * @param token - Access token
+     * @param cacheTTL - Cache TTL in seconds (default: 3600 = 1 hour)
+     */
+    async checkScopes(provider, token, cacheTTL = 3600) {
+        const cacheKey = `${provider}:${this.hashToken(token)}`;
+        const cached = this.scopeCache.get(cacheKey);
+        if (cached && cached.expiresAt > Date.now()) {
+            return cached.scopes;
+        }
+        const pending = this.pendingChecks.get(cacheKey);
+        if (pending) {
+            return pending;
+        }
+        const checker = this.checkers.get(provider);
+        if (!checker) {
+            throw new Error(`No scope checker registered for provider: ${provider}`);
+        }
+        const checkPromise = (async () => {
+            try {
+                const scopes = await checker.check(token);
+                this.scopeCache.set(cacheKey, {
+                    scopes,
+                    expiresAt: Date.now() + cacheTTL * 1000,
+                });
+                return scopes;
+            }
+            finally {
+                this.pendingChecks.delete(cacheKey);
+            }
+        })();
+        this.pendingChecks.set(cacheKey, checkPromise);
+        return checkPromise;
+    }
+    /**
+     * Validate if a token is still valid
+     */
+    async validateToken(provider, token) {
+        const checker = this.checkers.get(provider);
+        if (!checker || !checker.validate) {
+            return true;
+        }
+        return await checker.validate(token);
+    }
+    /**
+     * Get complete token information
+     */
+    async getTokenInfo(provider, token) {
+        const checker = this.checkers.get(provider);
+        if (!checker) {
+            throw new Error(`No scope checker registered for provider: ${provider}`);
+        }
+        const [scopes, valid] = await Promise.all([
+            checker.check(token),
+            checker.validate ? checker.validate(token) : Promise.resolve(true),
+        ]);
+        return {
+            valid,
+            scopes,
+        };
+    }
+    /**
+     * Clear cached scopes
+     */
+    clearCache(provider) {
+        if (provider) {
+            for (const key of this.scopeCache.keys()) {
+                if (key.startsWith(`${provider}:`)) {
+                    this.scopeCache.delete(key);
+                }
+            }
+        }
+        else {
+            this.scopeCache.clear();
+        }
+    }
+    /**
+     * Hash token for cache key (SHA-256, first 16 chars)
+     */
+    hashToken(token) {
+        return createHash('sha256').update(token).digest('hex').substring(0, 16);
+    }
+}
+//# sourceMappingURL=scope-checkers.js.map

package/dist/oauth/scope-checkers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-checkers.js","sourceRoot":"","sources":["../../src/oauth/scope-checkers.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC;;;GAGG;AACH,MAAM,OAAO,oBAAoB;IACxB,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC3C,UAAU,GAAG,IAAI,GAAG,EAAmD,CAAC;IACxE,eAAe,CAAkB;IACjC,YAAY,GAAG,KAAK,CAAC;IACrB,aAAa,GAAG,IAAI,GAAG,EAA6B,CAAC;IAE7D;QACC,IAAI,CAAC,YAAY,EAAE,CAAC;IACrB,CAAC;IAED;;OAEG;IACK,YAAY;QACnB,IAAI,CAAC,eAAe,GAAG,WAAW,CACjC,GAAG,EAAE;YACJ,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC5B,CAAC,EACD,CAAC,GAAG,EAAE,GAAG,IAAI,CACb,CAAC;QAEF,IAAI,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC9B,CAAC;IACF,CAAC;IAED;;OAEG;IACH,WAAW;QACV,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YAC1B,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACpC,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;QAClC,CAAC;IACF,CAAC;IAED;;OAEG;IACK,mBAAmB;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;YACtD,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;gBAC5B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC5B,OAAO,EAAE,CAAC;YACX,CAAC;QACF,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YAC9C,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC;YACjE,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;YAEtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAExD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,eAAe,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBACzB,IAAI,KAAK,EAAE,CAAC;oBACX,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;oBACjC,OAAO,EAAE,CAAC;gBACX,CAAC;YACF,CAAC;QACF,CAAC;QAED,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YACjB,OAAO,CAAC,KAAK,CAAC,WAAW,OAAO,kCAAkC,CAAC,CAAC;QACrE,CAAC;IACF,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,OAAqB;QAC7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,QAAgB;QAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,QAAgB;QAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CAAC,QAAgB,EAAE,KAAa,EAAE,QAAQ,GAAG,IAAI;QACjE,MAAM,QAAQ,GAAG,GAAG,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QAExD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC7C,OAAO,MAAM,CAAC,MAAM,CAAC;QACtB,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,OAAO,EAAE,CAAC;YACb,OAAO,OAAO,CAAC;QAChB,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,6CAA6C,QAAQ,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;YAChC,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAE1C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE;oBAC7B,MAAM;oBACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,IAAI;iBACvC,CAAC,CAAC;gBAEH,OAAO,MAAM,CAAC;YACf,CAAC;oBAAS,CAAC;gBACV,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACrC,CAAC;QACF,CAAC,CAAC,EAAE,CAAC;QAEL,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC/C,OAAO,YAAY,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,QAAgB,EAAE,KAAa;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACb,CAAC;QAED,OAAO,MAAM,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,QAAgB,EAAE,KAAa;QACjD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,6CAA6C,QAAQ,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACzC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;YACpB,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;SAClE,CAAC,CAAC;QAEH,OAAO;YACN,KAAK;YACL,MAAM;SACN,CAAC;IACH,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,QAAiB;QAC3B,IAAI,QAAQ,EAAE,CAAC;YACd,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC1C,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,CAAC;oBACpC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7B,CAAC;YACF,CAAC;QACF,CAAC;aAAM,CAAC;YACP,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACzB,CAAC;IACF,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,KAAa;QAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1E,CAAC;CACD"}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@mondaydotcomorg/atp-providers",
-	"version": "0.17.16",
+	"version": "0.18.4-rc.0",
 	"description": "Built-in providers for Agent Tool Protocol (cache, auth, audit)",
 	"type": "module",
 	"main": "./dist/index.js",
@@ -25,8 +25,14 @@
 	"publishConfig": {
 		"access": "public"
 	},
+	"keywords": [
+		"providers",
+		"atp",
+		"api",
+		"agent"
+	],
 	"dependencies": {
-		"@mondaydotcomorg/atp-protocol": "0.17.16",
+		"@mondaydotcomorg/atp-protocol": "0.18.4-rc.0",
 		"@opentelemetry/api": "^1.9.0"
 	},
 	"devDependencies": {

package/project.json

@@ -25,7 +25,5 @@
 			}
 		}
 	},
-	"tags": [
-		"atp-core"
-	]
+	"tags": ["atp-core"]
 }