npm - @naylence/runtime - Versions diffs - 0.3.5-test.909 → 0.3.5-test.911 - Mend

@naylence/runtime 0.3.5-test.909 → 0.3.5-test.911

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (2208) hide show

package/dist/types/naylence/fame/http/oauth2-token-router.d.ts CHANGED Viewed

@@ -1,8 +1,9 @@
 /**
- * OAuth2 client credentials grant flow router for Express
+ * OAuth2 client credentials and authorization code (PKCE) grant router for Express
  *
- * Provides /oauth/token endpoint for local development and testing
- * Implements OAuth2 client credentials grant with JWT token issuance
+ * Provides /oauth/token and /oauth/authorize endpoints for local development and testing.
+ * Implements OAuth2 client credentials grant with JWT token issuance and
+ * OAuth2 authorization code grant with PKCE verification.
  */
 import { type Router } from 'express';
 import type { CryptoProvider } from '../security/crypto/providers/crypto-provider.js';
@@ -44,12 +45,76 @@ export interface CreateOAuth2TokenRouterOptions {
      * Default: EdDSA
      */
     algorithm?: string;
+    /**
+     * Enable PKCE authorization code grant (default: true)
+     */
+    enablePkce?: boolean;
+    /**
+     * Allow public clients (no client_secret) for PKCE exchange (default: true)
+     */
+    allowPublicClients?: boolean;
+    /**
+     * Authorization code TTL in seconds (default: 300)
+     */
+    authorizationCodeTtlSec?: number;
+    /**
+     * Enable developer login experience for authorization flows (default: false)
+     */
+    enableDevLogin?: boolean;
+    /**
+     * Developer login username (required if enableDevLogin is true and not set via env)
+     */
+    devLoginUsername?: string;
+    /**
+     * Developer login password (required if enableDevLogin is true and not set via env)
+     */
+    devLoginPassword?: string;
+    /**
+     * Developer login session TTL in seconds (default: 3600)
+     */
+    devLoginSessionTtlSec?: number;
+    /**
+     * Cookie name for developer login session (default: naylence_dev_session)
+      if (devLoginEnabled) {
+        cleanupLoginSessions(loginSessions, Date.now());
+        const activeSession = getActiveSession(
+          req,
+          loginSessions,
+          devLoginCookieName,
+          devLoginSessionTtlMs
+        );
+        if (!activeSession) {
+          const returnTo = sanitizeReturnTo(
+            req.originalUrl,
+            sessionCookiePath,
+            authorizationRedirectPath
+          );
+          const loginLocation = `${prefix}/login?return_to=${encodeURIComponent(
+            returnTo
+          )}`;
+          setNoCacheHeaders(res);
+          res.redirect(302, loginLocation);
+          return;
+        }
+      }
+     */
+    devLoginCookieName?: string;
+    /**
+     * Whether to mark the developer login cookie as secure (default: false)
+     */
+    devLoginSecureCookie?: boolean;
+    /**
+     * Custom title for the developer login page (default: Developer Login)
+     */
+    devLoginTitle?: string;
 }
 /**
- * Create an Express router that implements OAuth2 client credentials grant
+ * Create an Express router that implements OAuth2 token and authorization endpoints
+ * with support for client credentials and authorization code (PKCE) grants.
  *
  * @param options - Router configuration options
- * @returns Express router with OAuth2 token endpoint
+ * @returns Express router with OAuth2 token and authorization endpoints
  *
  * Environment Variables:
  *   FAME_JWT_CLIENT_ID: OAuth2 client identifier
@@ -58,18 +123,8 @@ export interface CreateOAuth2TokenRouterOptions {
  *   FAME_JWT_AUDIENCE: JWT audience claim (optional)
  *   FAME_JWT_ALGORITHM: JWT signing algorithm (optional, default: EdDSA)
  *   FAME_JWT_ALLOWED_SCOPES: Allowed scopes (optional, default: node.connect)
- *
- * @example
- * ```typescript
- * import express from 'express';
- * import { createOAuth2TokenRouter } from '@naylence/runtime';
- *
- * const app = express();
- * app.use(express.urlencoded({ extended: true }));
- *
- * const cryptoProvider = new MyCryptoProvider();
- * app.use(createOAuth2TokenRouter({ cryptoProvider }));
- * ```
+ *   FAME_OAUTH_ENABLE_PKCE: Enable PKCE authorization endpoints (optional, default: true)
+ *   FAME_OAUTH_ALLOW_PUBLIC_CLIENTS: Allow PKCE exchanges without client_secret (optional, default: true)
+ *   FAME_OAUTH_CODE_TTL_SEC: Authorization code TTL in seconds (optional, default: 300)
  */
 export declare function createOAuth2TokenRouter(options: CreateOAuth2TokenRouterOptions): Router;
-//# sourceMappingURL=oauth2-token-router.d.ts.map

package/dist/types/naylence/fame/http/openid-configuration-router.d.ts CHANGED Viewed

@@ -63,4 +63,3 @@ export interface CreateOpenIDConfigurationRouterOptions {
  * ```
  */
 export declare function createOpenIDConfigurationRouter(options?: CreateOpenIDConfigurationRouterOptions): Router;
-//# sourceMappingURL=openid-configuration-router.d.ts.map

package/dist/types/naylence/fame/index.d.ts CHANGED Viewed

@@ -19,4 +19,3 @@ export type { NodePlacementStrategyFactory, NodePlacementConfig, } from './place
 export type { NodePlacementStrategy, PlacementDecision, } from './placement/node-placement-strategy.js';
 export { TRANSPORT_PROVISIONER_FACTORY_BASE_TYPE } from './transport/transport-provisioner.js';
 export type { TransportProvisionerFactory, TransportProvisioner, TransportProvisionerConfig, TransportProvisionResult, } from './transport/transport-provisioner.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/types/naylence/fame/node/admission/admission-client-factory.d.ts CHANGED Viewed

@@ -10,4 +10,3 @@ export declare abstract class AdmissionClientFactory<C extends AdmissionConfig =
     abstract create(config?: C | Record<string, unknown> | null, ...factoryArgs: unknown[]): Promise<AdmissionClient>;
     static createAdmissionClient<C extends AdmissionConfig = AdmissionConfig>(config?: C | Record<string, unknown> | null, options?: CreateResourceOptions): Promise<AdmissionClient>;
 }
-//# sourceMappingURL=admission-client-factory.d.ts.map

package/dist/types/naylence/fame/node/admission/admission-client.d.ts CHANGED Viewed

@@ -12,4 +12,3 @@ export interface AdmissionClient {
     hello(systemId: string, instanceId: string, requestedLogicals?: string[]): Promise<FameEnvelopeWith<NodeWelcomeFrame>>;
     close(): Promise<void>;
 }
-//# sourceMappingURL=admission-client.d.ts.map

package/dist/types/naylence/fame/node/admission/admission-profile-factory.d.ts CHANGED Viewed

@@ -13,4 +13,3 @@ export declare class AdmissionProfileFactory extends AdmissionClientFactory<Admi
     create(config?: AdmissionProfileConfig | Record<string, unknown> | null): Promise<AdmissionClient>;
 }
 export default AdmissionProfileFactory;
-//# sourceMappingURL=admission-profile-factory.d.ts.map

package/dist/types/naylence/fame/node/admission/default-node-attach-client.d.ts CHANGED Viewed

@@ -18,4 +18,3 @@ export declare class DefaultNodeAttachClient implements NodeAttachClient {
     attach(node: NodeLike, originType: DeliveryOriginType, connector: FameConnector, welcomeFrame: NodeWelcomeFrame, finalHandler: FameEnvelopeHandler, keys?: Array<Record<string, unknown>>, callbackGrants?: Array<Record<string, unknown>>): Promise<AttachInfo>;
     private awaitAck;
 }
-//# sourceMappingURL=default-node-attach-client.d.ts.map

package/dist/types/naylence/fame/node/admission/direct-admission-client-factory.d.ts CHANGED Viewed

@@ -14,4 +14,3 @@ export declare class DirectAdmissionClientFactory extends AdmissionClientFactory
     create(config?: DirectAdmissionClientConfig | Record<string, unknown> | null): Promise<AdmissionClient>;
 }
 export default DirectAdmissionClientFactory;
-//# sourceMappingURL=direct-admission-client-factory.d.ts.map

package/dist/types/naylence/fame/node/admission/direct-admission-client.d.ts CHANGED Viewed

@@ -15,4 +15,3 @@ export declare class DirectAdmissionClient implements AdmissionClient {
     close(): Promise<void>;
     private resolveTtlSeconds;
 }
-//# sourceMappingURL=direct-admission-client.d.ts.map

package/dist/types/naylence/fame/node/admission/index.d.ts CHANGED Viewed

@@ -2,4 +2,3 @@ export * from './admission-client.js';
 export * from './node-attach-client.js';
 export { ADMISSION_CLIENT_FACTORY_BASE_TYPE } from './admission-client-factory.js';
 export type * from './admission-client-factory.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/types/naylence/fame/node/admission/node-attach-client.d.ts CHANGED Viewed

@@ -14,4 +14,3 @@ export interface AttachInfo {
 export interface NodeAttachClient {
     attach(node: NodeLike, originType: DeliveryOriginType, connector: FameConnector, welcomeFrame: NodeWelcomeFrame, finalHandler: FameEnvelopeHandler, keys?: Array<Record<string, unknown>>, callbackGrants?: Array<Record<string, unknown>>): Promise<AttachInfo>;
 }
-//# sourceMappingURL=node-attach-client.d.ts.map

package/dist/types/naylence/fame/node/admission/noop-admission-client-factory.d.ts CHANGED Viewed

@@ -16,4 +16,3 @@ export declare class NoopAdmissionClientFactory extends AdmissionClientFactory<N
     create(config?: NoopAdmissionClientConfig | Record<string, unknown> | null, ...factoryArgs: unknown[]): Promise<AdmissionClient>;
 }
 export default NoopAdmissionClientFactory;
-//# sourceMappingURL=noop-admission-client-factory.d.ts.map

package/dist/types/naylence/fame/node/admission/noop-admission-client.d.ts CHANGED Viewed

@@ -14,4 +14,3 @@ export declare class NoopAdmissionClient implements AdmissionClient {
     hello(systemId: string, instanceId: string, requestedLogicals?: string[]): Promise<FameEnvelopeWith<NodeWelcomeFrame>>;
     close(): Promise<void>;
 }
-//# sourceMappingURL=noop-admission-client.d.ts.map

package/dist/types/naylence/fame/node/admission/welcome-service-client-factory.d.ts CHANGED Viewed

@@ -20,4 +20,3 @@ export declare class WelcomeServiceClientFactory extends AdmissionClientFactory<
     create(config?: WelcomeServiceClientConfig | Record<string, unknown> | null): Promise<AdmissionClient>;
 }
 export default WelcomeServiceClientFactory;
-//# sourceMappingURL=welcome-service-client-factory.d.ts.map

package/dist/types/naylence/fame/node/admission/welcome-service-client.d.ts CHANGED Viewed

@@ -25,4 +25,3 @@ export declare class WelcomeServiceClient implements AdmissionClient {
     private resolveFetch;
 }
 export {};
-//# sourceMappingURL=welcome-service-client.d.ts.map

package/dist/types/naylence/fame/node/binding-manager.d.ts CHANGED Viewed

@@ -87,4 +87,3 @@ export declare class BindingManager {
     private defaultBindingFactory;
 }
 export {};
-//# sourceMappingURL=binding-manager.d.ts.map

package/dist/types/naylence/fame/node/channel-polling-manager.d.ts CHANGED Viewed

@@ -20,4 +20,3 @@ export declare class ChannelPollingManager {
     private isStopRequested;
 }
 export {};
-//# sourceMappingURL=channel-polling-manager.d.ts.map

package/dist/types/naylence/fame/node/envelope-listener-manager.d.ts CHANGED Viewed

@@ -65,4 +65,3 @@ export declare class EnvelopeListenerManager extends TaskSpawner {
     private getServiceRecoveryLock;
 }
 export {};
-//# sourceMappingURL=envelope-listener-manager.d.ts.map

package/dist/types/naylence/fame/node/envelope-security-handler.d.ts CHANGED Viewed

@@ -36,4 +36,3 @@ export declare class EnvelopeSecurityHandler {
     private handleFailedChannelEnvelopeCleanup;
     private isSigned;
 }
-//# sourceMappingURL=envelope-security-handler.d.ts.map

package/dist/types/naylence/fame/node/factory-commons.d.ts CHANGED Viewed

@@ -40,4 +40,3 @@ export interface CommonNodeComponents {
     traceEmitter: TraceEmitter | null;
 }
 export declare function makeCommonOptions(config: FameNodeConfig, rawConfig?: Record<string, unknown> | null): Promise<CommonNodeComponents>;
-//# sourceMappingURL=factory-commons.d.ts.map

package/dist/types/naylence/fame/node/fame-environment-context.d.ts CHANGED Viewed

@@ -6,4 +6,3 @@
  */
 export declare class FameEnvironmentContext {
 }
-//# sourceMappingURL=fame-environment-context.d.ts.map

package/dist/types/naylence/fame/node/index.d.ts CHANGED Viewed

@@ -19,4 +19,3 @@ export * from './fame-environment-context.js';
 export * from './session-manager.js';
 export * from './upstream-session-manager.js';
 export * from './root-session-manager.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/types/naylence/fame/node/node-config.d.ts CHANGED Viewed

@@ -29,4 +29,3 @@ export type FameNodeConfig = NodeLikeConfig & {
     requestedCapabilities?: string[];
 };
 export declare function normalizeFameNodeConfig(input?: Partial<FameNodeConfig> | Record<string, unknown> | null): FameNodeConfig;
-//# sourceMappingURL=node-config.d.ts.map

package/dist/types/naylence/fame/node/node-context.d.ts CHANGED Viewed

@@ -9,4 +9,3 @@ export interface CreateNodeDeliveryContextOptions extends Omit<z.input<typeof Fa
     authorization?: z.input<typeof FameNodeAuthorizationContextSchema> | null;
 }
 export declare function createNodeDeliveryContext(options?: CreateNodeDeliveryContextOptions): FameAuthorizedDeliveryContext;
-//# sourceMappingURL=node-context.d.ts.map

package/dist/types/naylence/fame/node/node-envelope-factory.d.ts CHANGED Viewed

@@ -18,4 +18,3 @@ export declare class NodeEnvelopeFactory implements EnvelopeFactory {
         responseType?: FameResponseType | null;
     }): FameEnvelope;
 }
-//# sourceMappingURL=node-envelope-factory.d.ts.map

package/dist/types/naylence/fame/node/node-event-listener.d.ts CHANGED Viewed

@@ -346,4 +346,3 @@ export declare abstract class BaseNodeEventListener implements NodeEventListener
     onNodePreparingToStop?(_node: NodeLike): Promise<void>;
     onNodeStopped?(_node: NodeLike): Promise<void>;
 }
-//# sourceMappingURL=node-event-listener.d.ts.map

package/dist/types/naylence/fame/node/node-factory.d.ts CHANGED Viewed

@@ -12,4 +12,3 @@ export declare class NodeFactory extends NodeLikeFactory<FameNodeConfig> {
     create(config?: FameNodeConfig | Record<string, unknown> | null): Promise<FameNode>;
 }
 export default NodeFactory;
-//# sourceMappingURL=node-factory.d.ts.map

package/dist/types/naylence/fame/node/node-like-factory.d.ts CHANGED Viewed

@@ -10,4 +10,3 @@ export declare abstract class NodeLikeFactory<C extends NodeLikeConfig = NodeLik
     abstract create(config?: C | Record<string, unknown> | null, ...factoryArgs: unknown[]): Promise<NodeLike>;
     static createNode(config?: NodeLikeConfig | Record<string, unknown> | null, options?: CreateResourceOptions): Promise<NodeLike>;
 }
-//# sourceMappingURL=node-like-factory.d.ts.map

package/dist/types/naylence/fame/node/node-like.d.ts CHANGED Viewed

@@ -210,4 +210,3 @@ export interface NodeLike {
  * @returns True if the object implements NodeLike
  */
 export declare function isNodeLike(obj: any): obj is NodeLike;
-//# sourceMappingURL=node-like.d.ts.map

package/dist/types/naylence/fame/node/node-meta.d.ts CHANGED Viewed

@@ -6,4 +6,3 @@ export declare class NodeMetaRecord implements NodeMeta {
     id: string;
     constructor(id: string);
 }
-//# sourceMappingURL=node-meta.d.ts.map

package/dist/types/naylence/fame/node/node.d.ts CHANGED Viewed

@@ -130,4 +130,3 @@ export declare class FameNode extends TaskSpawner implements NodeLike {
     private persistNodeMeta;
 }
 export {};
-//# sourceMappingURL=node.d.ts.map

package/dist/types/naylence/fame/node/response-context-manager.d.ts CHANGED Viewed

@@ -7,4 +7,3 @@ export declare class ResponseContextManager {
     ensureResponseMetadata(responseEnvelope: FameEnvelope, requestEnvelope: FameEnvelope, responseContext?: OptionalContext): void;
 }
 export {};
-//# sourceMappingURL=response-context-manager.d.ts.map

package/dist/types/naylence/fame/node/root-session-manager.d.ts CHANGED Viewed

@@ -67,4 +67,3 @@ export declare class RootSessionManager extends TaskSpawner implements SessionMa
     private waitWithTimeout;
 }
 export {};
-//# sourceMappingURL=root-session-manager.d.ts.map

package/dist/types/naylence/fame/node/routing-node-like.d.ts CHANGED Viewed

@@ -20,4 +20,3 @@ export interface RoutingNodeLike extends NodeLike {
     removeDownstreamRoute?(segment: string, options?: RouteRemovalOptions): Promise<void> | void;
     removePeerRoute?(segment: string, options?: RouteRemovalOptions): Promise<void> | void;
 }
-//# sourceMappingURL=routing-node-like.d.ts.map

package/dist/types/naylence/fame/node/rpc-client-manager.d.ts CHANGED Viewed

@@ -48,4 +48,3 @@ export declare class RPCClientManager {
     private isDataFrame;
 }
 export {};
-//# sourceMappingURL=rpc-client-manager.d.ts.map

package/dist/types/naylence/fame/node/rpc-server-handler.d.ts CHANGED Viewed

@@ -12,4 +12,3 @@ export declare class RPCServerHandler {
     private isDataFrame;
     private toJsonRpcError;
 }
-//# sourceMappingURL=rpc-server-handler.d.ts.map

package/dist/types/naylence/fame/node/secure-channel-frame-handler.d.ts CHANGED Viewed

@@ -30,4 +30,3 @@ export declare class SecureChannelFrameHandler {
     handleSecureClose(envelope: FameEnvelope, _context?: FameDeliveryContext | null): Promise<void>;
 }
 export {};
-//# sourceMappingURL=secure-channel-frame-handler.d.ts.map

package/dist/types/naylence/fame/node/session-manager.d.ts CHANGED Viewed

@@ -4,4 +4,3 @@ export interface SessionManager {
     }): Promise<void>;
     stop(): Promise<void>;
 }
-//# sourceMappingURL=session-manager.d.ts.map

package/dist/types/naylence/fame/node/streaming-response-handler.d.ts CHANGED Viewed

@@ -26,4 +26,3 @@ export declare class StreamingResponseHandler {
     private deliver;
 }
 export {};
-//# sourceMappingURL=streaming-response-handler.d.ts.map

package/dist/types/naylence/fame/node/upstream-session-manager.d.ts CHANGED Viewed

@@ -96,4 +96,3 @@ export declare class UpstreamSessionManager extends TaskSpawner implements Sessi
     private makeHeartbeatEnabledHandler;
 }
 export {};
-//# sourceMappingURL=upstream-session-manager.d.ts.map

package/dist/types/naylence/fame/placement/node-placement-strategy-factory.d.ts CHANGED Viewed

@@ -16,4 +16,3 @@ export declare function registerNodePlacementStrategyFactory(type: string, facto
     description?: string;
     [key: string]: unknown;
 }): void;
-//# sourceMappingURL=node-placement-strategy-factory.d.ts.map

package/dist/types/naylence/fame/placement/node-placement-strategy.d.ts CHANGED Viewed

@@ -14,4 +14,3 @@ export interface PlacementDecision {
 export interface NodePlacementStrategy {
     place(helloFrame: NodeHelloFrame): Promise<PlacementDecision>;
 }
-//# sourceMappingURL=node-placement-strategy.d.ts.map

package/dist/types/naylence/fame/placement/static-node-placement-strategy-factory.d.ts CHANGED Viewed

@@ -17,4 +17,3 @@ export declare const FACTORY_META: {
     readonly key: "StaticNodePlacementStrategy";
 };
 export default StaticNodePlacementStrategyFactory;
-//# sourceMappingURL=static-node-placement-strategy-factory.d.ts.map

package/dist/types/naylence/fame/placement/static-node-placement-strategy.d.ts CHANGED Viewed

@@ -12,4 +12,3 @@ export declare class StaticNodePlacementStrategy implements NodePlacementStrateg
     constructor(options: StaticNodePlacementStrategyOptions);
     place(helloFrame: NodeHelloFrame): Promise<PlacementDecision>;
 }
-//# sourceMappingURL=static-node-placement-strategy.d.ts.map

package/dist/types/naylence/fame/security/auth/auth-injection-strategy-factory.d.ts CHANGED Viewed

@@ -10,4 +10,3 @@ export declare abstract class AuthInjectionStrategyFactory<C extends AuthInjecti
     abstract create(config?: C | Record<string, unknown> | null, ...factoryArgs: unknown[]): Promise<AuthInjectionStrategy>;
     static createAuthInjectionStrategy<C extends AuthInjectionStrategyConfig = AuthInjectionStrategyConfig>(config?: C | Record<string, unknown> | null, options?: CreateResourceOptions): Promise<AuthInjectionStrategy>;
 }
-//# sourceMappingURL=auth-injection-strategy-factory.d.ts.map

package/dist/types/naylence/fame/security/auth/auth-injection-strategy.d.ts CHANGED Viewed

@@ -3,4 +3,3 @@ export interface AuthInjectionStrategy {
     cleanup(): Promise<void>;
 }
 export declare function isAuthInjectionStrategy(candidate: unknown): candidate is AuthInjectionStrategy;
-//# sourceMappingURL=auth-injection-strategy.d.ts.map

package/dist/types/naylence/fame/security/auth/authorizer-factory.d.ts CHANGED Viewed

@@ -10,4 +10,3 @@ export declare abstract class AuthorizerFactory<C extends AuthorizerConfig = Aut
     abstract create(config?: C | Record<string, unknown> | null, ...factoryArgs: unknown[]): Promise<Authorizer>;
     static createAuthorizer<C extends AuthorizerConfig = AuthorizerConfig>(config?: C | Record<string, unknown> | null, options?: CreateResourceOptions): Promise<Authorizer | undefined>;
 }
-//# sourceMappingURL=authorizer-factory.d.ts.map

package/dist/types/naylence/fame/security/auth/authorizer.d.ts CHANGED Viewed

@@ -5,4 +5,3 @@ export interface Authorizer {
     authorize(node: NodeLike, envelope: FameEnvelope, context?: FameDeliveryContext): Promise<AuthorizationContext | undefined>;
     createReverseAuthorizationConfig?(node: NodeLike): Promise<Record<string, unknown> | undefined> | Record<string, unknown> | undefined;
 }
-//# sourceMappingURL=authorizer.d.ts.map

package/dist/types/naylence/fame/security/auth/bearer-token-header-auth-injection-strategy-factory.d.ts CHANGED Viewed

@@ -18,4 +18,3 @@ export declare class BearerTokenHeaderAuthInjectionStrategyFactory extends AuthI
     create(config?: BearerTokenHeaderAuthInjectionStrategyConfig | Record<string, unknown> | null): Promise<AuthInjectionStrategy>;
 }
 export default BearerTokenHeaderAuthInjectionStrategyFactory;
-//# sourceMappingURL=bearer-token-header-auth-injection-strategy-factory.d.ts.map

package/dist/types/naylence/fame/security/auth/bearer-token-header-auth-injection-strategy.d.ts CHANGED Viewed

@@ -24,4 +24,3 @@ export declare class BearerTokenHeaderAuthInjectionStrategy implements AuthInjec
     private computeDelayMs;
     cleanup(): Promise<void>;
 }
-//# sourceMappingURL=bearer-token-header-auth-injection-strategy.d.ts.map

package/dist/types/naylence/fame/security/auth/default-authorizer-factory.d.ts CHANGED Viewed

@@ -15,4 +15,3 @@ export declare class DefaultAuthorizerFactory extends AuthorizerFactory<DefaultA
     create(config?: DefaultAuthorizerConfig | Record<string, unknown> | null, ...factoryArgs: unknown[]): Promise<Authorizer>;
 }
 export default DefaultAuthorizerFactory;
-//# sourceMappingURL=default-authorizer-factory.d.ts.map

package/dist/types/naylence/fame/security/auth/default-authorizer.d.ts CHANGED Viewed

@@ -21,4 +21,3 @@ export declare class DefaultAuthorizer implements Authorizer, TokenVerifierProvi
     validateNodeAttachRequest(node: NodeLike, frame: NodeAttachFrame, authContext?: AuthorizationContext): Promise<AuthorizationContext | undefined>;
     private validateNodeAttach;
 }
-//# sourceMappingURL=default-authorizer.d.ts.map

package/dist/types/naylence/fame/security/auth/jose-loader.d.ts CHANGED Viewed

@@ -1,4 +1,3 @@
 export type JoseModule = typeof import('jose');
 export declare function requireJose(): Promise<JoseModule>;
 export type { JWTVerifyOptions } from 'jose';
-//# sourceMappingURL=jose-loader.d.ts.map

package/dist/types/naylence/fame/security/auth/jwks-jwt-token-verifier-factory.d.ts CHANGED Viewed

@@ -18,4 +18,3 @@ export declare class JWKSTokenVerifierFactory extends TokenVerifierFactory<JWKSJ
     create(config?: JWKSJWTTokenVerifierConfig | Record<string, unknown> | null): Promise<TokenVerifier>;
 }
 export default JWKSTokenVerifierFactory;
-//# sourceMappingURL=jwks-jwt-token-verifier-factory.d.ts.map

package/dist/types/naylence/fame/security/auth/jwks-jwt-token-verifier.d.ts CHANGED Viewed

@@ -22,4 +22,3 @@ export declare class JWKSJWTTokenVerifier implements TokenVerifier {
     private normalizeJoseError;
     private withCause;
 }
-//# sourceMappingURL=jwks-jwt-token-verifier.d.ts.map

package/dist/types/naylence/fame/security/auth/jwt-authorization-utils.d.ts CHANGED Viewed

@@ -2,4 +2,3 @@ import type { JWTPayload } from 'jose';
 import type { AuthorizationContext } from '@naylence/core';
 export declare function extractScopesFromPayload(payload: JWTPayload): Set<string>;
 export declare function buildAuthorizationContext(payload: JWTPayload, kid?: string, overrides?: Partial<AuthorizationContext>): AuthorizationContext;
-//# sourceMappingURL=jwt-authorization-utils.d.ts.map

package/dist/types/naylence/fame/security/auth/jwt-token-issuer-factory.d.ts CHANGED Viewed

@@ -50,4 +50,3 @@ export declare class JWTTokenIssuerFactory extends TokenIssuerFactory<JWTTokenIs
     create(config?: JWTTokenIssuerConfig | Record<string, unknown> | null, ...factoryArgs: unknown[]): Promise<TokenIssuer>;
 }
 export default JWTTokenIssuerFactory;
-//# sourceMappingURL=jwt-token-issuer-factory.d.ts.map

package/dist/types/naylence/fame/security/auth/jwt-token-issuer.d.ts CHANGED Viewed

@@ -24,4 +24,3 @@ export declare class JWTTokenIssuer implements TokenIssuer {
     private loadSigningKey;
     private buildTokenClaims;
 }
-//# sourceMappingURL=jwt-token-issuer.d.ts.map

package/dist/types/naylence/fame/security/auth/jwt-token-verifier-factory.d.ts CHANGED Viewed

@@ -53,4 +53,3 @@ export declare class JWTTokenVerifierFactory extends TokenVerifierFactory<JWTTok
     create(config?: JWTTokenVerifierConfig | Record<string, unknown> | null, cryptoProvider?: CryptoProvider): Promise<TokenVerifier>;
 }
 export default JWTTokenVerifierFactory;
-//# sourceMappingURL=jwt-token-verifier-factory.d.ts.map

package/dist/types/naylence/fame/security/auth/jwt-token-verifier.d.ts CHANGED Viewed

@@ -36,4 +36,3 @@ export declare class JWTTokenVerifier implements TokenVerifier {
     private normalizeJoseError;
     private withCause;
 }
-//# sourceMappingURL=jwt-token-verifier.d.ts.map

package/dist/types/naylence/fame/security/auth/no-auth-injection-strategy-factory.d.ts CHANGED Viewed

@@ -12,4 +12,3 @@ export declare class NoAuthInjectionStrategyFactory extends AuthInjectionStrateg
     create(config?: NoAuthInjectionStrategyConfig | Record<string, unknown> | null): Promise<AuthInjectionStrategy>;
 }
 export default NoAuthInjectionStrategyFactory;
-//# sourceMappingURL=no-auth-injection-strategy-factory.d.ts.map

package/dist/types/naylence/fame/security/auth/no-auth-injection-strategy.d.ts CHANGED Viewed

@@ -5,4 +5,3 @@ export declare class NoAuthInjectionStrategy implements AuthInjectionStrategy {
     apply(_connector: unknown): Promise<void>;
     cleanup(): Promise<void>;
 }
-//# sourceMappingURL=no-auth-injection-strategy.d.ts.map

package/dist/types/naylence/fame/security/auth/none-token-provider-factory.d.ts CHANGED Viewed

@@ -13,4 +13,3 @@ export declare class NoneTokenProviderFactory extends TokenProviderFactory<NoneT
     create(): Promise<TokenProvider>;
 }
 export default NoneTokenProviderFactory;
-//# sourceMappingURL=none-token-provider-factory.d.ts.map

package/dist/types/naylence/fame/security/auth/none-token-provider.d.ts CHANGED Viewed

@@ -3,4 +3,3 @@ import type { TokenProvider } from './token-provider.js';
 export declare class NoneTokenProvider implements TokenProvider {
     getToken(): Promise<Token>;
 }
-//# sourceMappingURL=none-token-provider.d.ts.map

package/dist/types/naylence/fame/security/auth/noop-authorizer-factory.d.ts CHANGED Viewed

@@ -12,4 +12,3 @@ export declare class NoopAuthorizerFactory extends AuthorizerFactory<NoopAuthori
     create(_config?: NoopAuthorizerConfig | Record<string, unknown> | null): Promise<Authorizer>;
 }
 export default NoopAuthorizerFactory;
-//# sourceMappingURL=noop-authorizer-factory.d.ts.map

package/dist/types/naylence/fame/security/auth/noop-authorizer.d.ts CHANGED Viewed

@@ -6,4 +6,3 @@ export declare class NoopAuthorizer implements Authorizer {
     authorize(_node: NodeLike, _envelope: FameEnvelope, context?: FameDeliveryContext | AuthorizationContext): Promise<AuthorizationContext>;
     validateNodeAttachRequest(_node: NodeLike, frame: NodeAttachFrame, authContext?: AuthorizationContext): Promise<AuthorizationContext>;
 }
-//# sourceMappingURL=noop-authorizer.d.ts.map

package/dist/types/naylence/fame/security/auth/noop-token-issuer-factory.d.ts CHANGED Viewed

@@ -12,4 +12,3 @@ export declare class NoopTokenIssuerFactory extends TokenIssuerFactory<NoopToken
     create(_config?: NoopTokenIssuerConfig | Record<string, unknown> | null): Promise<TokenIssuer>;
 }
 export default NoopTokenIssuerFactory;
-//# sourceMappingURL=noop-token-issuer-factory.d.ts.map

package/dist/types/naylence/fame/security/auth/noop-token-issuer.d.ts CHANGED Viewed

@@ -3,4 +3,3 @@ export declare class NoopTokenIssuer implements TokenIssuer {
     readonly issuer = "";
     issue(_claims: Record<string, unknown>): Promise<string>;
 }
-//# sourceMappingURL=noop-token-issuer.d.ts.map

package/dist/types/naylence/fame/security/auth/noop-token-verifier-factory.d.ts CHANGED Viewed

@@ -12,4 +12,3 @@ export declare class NoopTokenVerifierFactory extends TokenVerifierFactory<NoopT
     create(_config?: NoopTokenVerifierConfig | Record<string, unknown> | null): Promise<TokenVerifier>;
 }
 export default NoopTokenVerifierFactory;
-//# sourceMappingURL=noop-token-verifier-factory.d.ts.map

package/dist/types/naylence/fame/security/auth/noop-token-verifier.d.ts CHANGED Viewed

@@ -9,4 +9,3 @@ export declare class NoopTokenVerifier implements TokenVerifier {
         expectedAudience?: string;
     }): Promise<AuthorizationContext>;
 }
-//# sourceMappingURL=noop-token-verifier.d.ts.map

package/dist/types/naylence/fame/security/auth/oauth2-authorizer-factory.d.ts CHANGED Viewed

@@ -33,4 +33,3 @@ export declare class OAuth2AuthorizerFactory extends AuthorizerFactory<OAuth2Aut
     create(config?: OAuth2AuthorizerConfig | Record<string, unknown> | null): Promise<Authorizer>;
 }
 export default OAuth2AuthorizerFactory;
-//# sourceMappingURL=oauth2-authorizer-factory.d.ts.map

package/dist/types/naylence/fame/security/auth/oauth2-authorizer.d.ts CHANGED Viewed

@@ -36,4 +36,3 @@ export declare class OAuth2Authorizer implements Authorizer, TokenVerifierProvid
     private mergeScopes;
     private hasRequiredScope;
 }
-//# sourceMappingURL=oauth2-authorizer.d.ts.map

package/dist/types/naylence/fame/security/auth/oauth2-client-credentials-token-provider-factory.d.ts CHANGED Viewed

@@ -18,4 +18,3 @@ export declare class OAuth2ClientCredentialsTokenProviderFactory extends TokenPr
     create(config?: OAuth2ClientCredentialsTokenProviderConfig | Record<string, unknown> | null): Promise<TokenProvider>;
 }
 export default OAuth2ClientCredentialsTokenProviderFactory;
-//# sourceMappingURL=oauth2-client-credentials-token-provider-factory.d.ts.map

package/dist/types/naylence/fame/security/auth/oauth2-client-credentials-token-provider.d.ts CHANGED Viewed

@@ -24,4 +24,3 @@ export declare class OAuth2ClientCredentialsTokenProvider implements TokenProvid
     private resolveExpiresIn;
 }
 export {};
-//# sourceMappingURL=oauth2-client-credentials-token-provider.d.ts.map

package/dist/types/naylence/fame/security/auth/oauth2-pkce-token-provider-factory.d.ts ADDED Viewed

@@ -0,0 +1,27 @@
+import { type SecretSourceType } from '../credential/secret-source.js';
+import type { TokenProvider } from './token-provider.js';
+import { TokenProviderFactory, type TokenProviderConfig } from './token-provider-factory.js';
+export interface OAuth2PkceTokenProviderConfig extends TokenProviderConfig {
+    type: 'OAuth2PkceTokenProvider';
+    authorizeUrl: string;
+    tokenUrl: string;
+    redirectUri: string;
+    clientId: string;
+    username?: SecretSourceType;
+    clientSecret?: SecretSourceType;
+    scopes?: string[];
+    audience?: string;
+    codeChallengeMethod?: string;
+    codeVerifierLength?: number;
+    clockSkewSeconds?: number;
+    loginHintParam?: string;
+}
+export declare const FACTORY_META: {
+    readonly base: "TokenProviderFactory";
+    readonly key: "OAuth2PkceTokenProvider";
+};
+export declare class OAuth2PkceTokenProviderFactory extends TokenProviderFactory<OAuth2PkceTokenProviderConfig> {
+    readonly type = "OAuth2PkceTokenProvider";
+    create(config?: OAuth2PkceTokenProviderConfig | Record<string, unknown> | null): Promise<TokenProvider>;
+}
+export default OAuth2PkceTokenProviderFactory;