@nitrostack/core 1.0.0

package/dist/core/jwt-module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-module.js","sourceRoot":"","sources":["../../src/core/jwt-module.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAsB1B;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,SAAS;IACZ,MAAM,CAAC,MAAM,GAAoB;QACvC,YAAY,EAAE,YAAY;QAC1B,SAAS,EAAE,KAAK;KACjB,CAAC;IAEF;;OAEG;IACH,MAAM,CAAC,OAAO,CAAC,MAAuB;QACpC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,SAAS;QACd,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,SAAS;QACd,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAC5B,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC7B,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC;QACvD,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC"}

package/dist/core/logger.d.ts

@@ -0,0 +1,18 @@
+import { Logger } from './types.js';
+/**
+ * Create a logger instance with custom configuration
+ *
+ * IMPORTANT: For MCP servers, console logging is DISABLED by default
+ * as it breaks the JSON-RPC protocol over stdio. All logs go to files.
+ */
+export declare function createLogger(options: {
+    level?: string;
+    file?: string;
+    serviceName?: string;
+    enableConsole?: boolean;
+}): Logger;
+/**
+ * Default logger instance
+ */
+export declare const defaultLogger: Logger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/core/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/core/logger.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAW,MAAM,YAAY,CAAC;AAG7C;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,GAAG,MAAM,CA6DT;AAED;;GAEG;AACH,eAAO,MAAM,aAAa,QAAkC,CAAC"}

package/dist/core/logger.js

@@ -0,0 +1,53 @@
+import winston from 'winston';
+import { EventEmitterTransport } from './events/log-emitter.js';
+/**
+ * Create a logger instance with custom configuration
+ *
+ * IMPORTANT: For MCP servers, console logging is DISABLED by default
+ * as it breaks the JSON-RPC protocol over stdio. All logs go to files.
+ */
+export function createLogger(options) {
+    const { level = 'info', file, serviceName = 'nitrostack', enableConsole = false } = options;
+    const transports = [new EventEmitterTransport()];
+    // CRITICAL: Console logging disabled by default for MCP compatibility
+    // MCP uses stdio for JSON-RPC communication, console output breaks it
+    if (enableConsole) {
+        transports.push(new winston.transports.Console({
+            format: winston.format.combine(winston.format.colorize(), winston.format.timestamp({ format: 'YYYY-MM-DD HH:mm:ss' }), winston.format.printf(({ timestamp, level, message, ...meta }) => {
+                const metaStr = Object.keys(meta).length > 0 ? `\n${JSON.stringify(meta, null, 2)}` : '';
+                return `${timestamp} [${serviceName}] ${level}: ${message}${metaStr}`;
+            })),
+        }));
+    }
+    // File logging - always recommended for MCP servers
+    if (file) {
+        transports.push(new winston.transports.File({
+            filename: file,
+            format: winston.format.combine(winston.format.timestamp(), winston.format.json()),
+        }));
+    }
+    // If no transports configured, use a null transport to avoid crashes
+    if (transports.length === 0) {
+        // Silent logger - logs nowhere (better than crashing)
+        transports.push(new winston.transports.File({
+            filename: '/dev/null', // Discard logs
+            silent: true,
+        }));
+    }
+    const winstonLogger = winston.createLogger({
+        level,
+        format: winston.format.combine(winston.format.timestamp(), winston.format.json()),
+        transports,
+    });
+    return {
+        debug: (message, meta) => winstonLogger.debug(message, meta),
+        info: (message, meta) => winstonLogger.info(message, meta),
+        warn: (message, meta) => winstonLogger.warn(message, meta),
+        error: (message, meta) => winstonLogger.error(message, meta),
+    };
+}
+/**
+ * Default logger instance
+ */
+export const defaultLogger = createLogger({ level: 'info' });
+//# sourceMappingURL=logger.js.map

package/dist/core/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/core/logger.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAEhE;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,OAK5B;IACC,MAAM,EAAE,KAAK,GAAG,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,YAAY,EAAE,aAAa,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAE5F,MAAM,UAAU,GAAwB,CAAC,IAAI,qBAAqB,EAAE,CAAC,CAAC;IAEtE,sEAAsE;IACtE,sEAAsE;IACtE,IAAI,aAAa,EAAE,CAAC;QAClB,UAAU,CAAC,IAAI,CACb,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAC5B,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,EACzB,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,EAC3D,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE;gBAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzF,OAAO,GAAG,SAAS,KAAK,WAAW,KAAK,KAAK,KAAK,OAAO,GAAG,OAAO,EAAE,CAAC;YACxE,CAAC,CAAC,CACH;SACF,CAAC,CACH,CAAC;IACJ,CAAC;IAED,oDAAoD;IACpD,IAAI,IAAI,EAAE,CAAC;QACT,UAAU,CAAC,IAAI,CACb,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;YAC1B,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAC5B,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,EAC1B,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CACtB;SACF,CAAC,CACH,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,sDAAsD;QACtD,UAAU,CAAC,IAAI,CACb,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;YAC1B,QAAQ,EAAE,WAAW,EAAE,eAAe;YACtC,MAAM,EAAE,IAAI;SACb,CAAC,CACH,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;QACzC,KAAK;QACL,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAC5B,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,EAC1B,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CACtB;QACD,UAAU;KACX,CAAC,CAAC;IAEH,OAAO;QACL,KAAK,EAAE,CAAC,OAAe,EAAE,IAAc,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;QAC9E,IAAI,EAAE,CAAC,OAAe,EAAE,IAAc,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC;QAC5E,IAAI,EAAE,CAAC,OAAe,EAAE,IAAc,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC;QAC5E,KAAK,EAAE,CAAC,OAAe,EAAE,IAAc,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;KAC/E,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC"}

package/dist/core/middleware/middleware.decorator.d.ts

@@ -0,0 +1,39 @@
+import 'reflect-metadata';
+import { MiddlewareConstructor } from './middleware.interface.js';
+/**
+ * Marks a class as a middleware
+ *
+ * @example
+ * ```typescript
+ * @Middleware()
+ * export class LoggingMiddleware implements MiddlewareInterface {
+ *   async use(context: ExecutionContext, next: () => Promise<unknown>) {
+ *     console.log('Before');
+ *     const result = await next();
+ *     console.log('After');
+ *     return result;
+ *   }
+ * }
+ * ```
+ */
+export declare function Middleware(): ClassDecorator;
+/**
+ * Apply middleware to a tool method
+ *
+ * @example
+ * ```typescript
+ * @Tool({ name: 'my_tool', ... })
+ * @UseMiddleware(LoggingMiddleware, AuthMiddleware)
+ * async myTool(input: Record<string, unknown>, context: ExecutionContext) { }
+ * ```
+ */
+export declare function UseMiddleware(...middlewares: MiddlewareConstructor[]): MethodDecorator;
+/**
+ * Get middlewares for a method
+ */
+export declare function getMiddlewareMetadata(target: object, propertyKey: string | symbol): MiddlewareConstructor[];
+/**
+ * Check if a class is marked as middleware
+ */
+export declare function isMiddleware(target: object): boolean;
+//# sourceMappingURL=middleware.decorator.d.ts.map

package/dist/core/middleware/middleware.decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.decorator.d.ts","sourceRoot":"","sources":["../../../src/core/middleware/middleware.decorator.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAKlE;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,UAAU,IAAI,cAAc,CAI3C;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,GAAG,WAAW,EAAE,qBAAqB,EAAE,GAAG,eAAe,CAUtF;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,qBAAqB,EAAE,CAE3G;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEpD"}

package/dist/core/middleware/middleware.decorator.js

@@ -0,0 +1,53 @@
+import 'reflect-metadata';
+const MIDDLEWARE_KEY = 'nitrostack:middleware';
+const IS_MIDDLEWARE_KEY = 'nitrostack:is_middleware';
+/**
+ * Marks a class as a middleware
+ *
+ * @example
+ * ```typescript
+ * @Middleware()
+ * export class LoggingMiddleware implements MiddlewareInterface {
+ *   async use(context: ExecutionContext, next: () => Promise<unknown>) {
+ *     console.log('Before');
+ *     const result = await next();
+ *     console.log('After');
+ *     return result;
+ *   }
+ * }
+ * ```
+ */
+export function Middleware() {
+    return (target) => {
+        Reflect.defineMetadata(IS_MIDDLEWARE_KEY, true, target);
+    };
+}
+/**
+ * Apply middleware to a tool method
+ *
+ * @example
+ * ```typescript
+ * @Tool({ name: 'my_tool', ... })
+ * @UseMiddleware(LoggingMiddleware, AuthMiddleware)
+ * async myTool(input: Record<string, unknown>, context: ExecutionContext) { }
+ * ```
+ */
+export function UseMiddleware(...middlewares) {
+    return (target, propertyKey, descriptor) => {
+        const existingMiddlewares = Reflect.getMetadata(MIDDLEWARE_KEY, target, propertyKey) || [];
+        Reflect.defineMetadata(MIDDLEWARE_KEY, [...existingMiddlewares, ...middlewares], target, propertyKey);
+    };
+}
+/**
+ * Get middlewares for a method
+ */
+export function getMiddlewareMetadata(target, propertyKey) {
+    return Reflect.getMetadata(MIDDLEWARE_KEY, target, propertyKey) || [];
+}
+/**
+ * Check if a class is marked as middleware
+ */
+export function isMiddleware(target) {
+    return Reflect.getMetadata(IS_MIDDLEWARE_KEY, target) === true;
+}
+//# sourceMappingURL=middleware.decorator.js.map

package/dist/core/middleware/middleware.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.decorator.js","sourceRoot":"","sources":["../../../src/core/middleware/middleware.decorator.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAG1B,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAC/C,MAAM,iBAAiB,GAAG,0BAA0B,CAAC;AAErD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,UAAU;IACxB,OAAO,CAAC,MAAc,EAAE,EAAE;QACxB,OAAO,CAAC,cAAc,CAAC,iBAAiB,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAC,GAAG,WAAoC;IACnE,OAAO,CAAC,MAAc,EAAE,WAA4B,EAAE,UAA8B,EAAE,EAAE;QACtF,MAAM,mBAAmB,GAAG,OAAO,CAAC,WAAW,CAAC,cAAc,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC;QAC3F,OAAO,CAAC,cAAc,CACpB,cAAc,EACd,CAAC,GAAG,mBAAmB,EAAE,GAAG,WAAW,CAAC,EACxC,MAAM,EACN,WAAW,CACZ,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAc,EAAE,WAA4B;IAChF,OAAO,OAAO,CAAC,WAAW,CAAC,cAAc,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC;AACxE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAO,OAAO,CAAC,WAAW,CAAC,iBAAiB,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC;AACjE,CAAC"}

package/dist/core/middleware/middleware.interface.d.ts

@@ -0,0 +1,29 @@
+import 'reflect-metadata';
+import { ExecutionContext } from '../types.js';
+/**
+ * Middleware Interface
+ *
+ * Middleware can intercept tool execution for cross-cutting concerns
+ * like logging, authentication, validation, etc.
+ *
+ * @example
+ * ```typescript
+ * @Middleware()
+ * export class LoggingMiddleware implements MiddlewareInterface {
+ *   async use(context: ExecutionContext, next: () => Promise<unknown>) {
+ *     console.log('Before:', context.toolName);
+ *     const result = await next();
+ *     console.log('After:', context.toolName);
+ *     return result;
+ *   }
+ * }
+ * ```
+ */
+export interface MiddlewareInterface {
+    use(context: ExecutionContext, next: () => Promise<unknown>): Promise<unknown>;
+}
+/**
+ * Middleware constructor type
+ */
+export type MiddlewareConstructor = new (...args: unknown[]) => MiddlewareInterface;
+//# sourceMappingURL=middleware.interface.d.ts.map

package/dist/core/middleware/middleware.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.interface.d.ts","sourceRoot":"","sources":["../../../src/core/middleware/middleware.interface.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,mBAAmB;IAClC,GAAG,CAAC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAChF;AAED;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG,KAAK,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,mBAAmB,CAAC"}

package/dist/core/middleware/middleware.interface.js

@@ -0,0 +1,2 @@
+import 'reflect-metadata';
+//# sourceMappingURL=middleware.interface.js.map

package/dist/core/middleware/middleware.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.interface.js","sourceRoot":"","sources":["../../../src/core/middleware/middleware.interface.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC"}

package/dist/core/module.d.ts

@@ -0,0 +1,93 @@
+import 'reflect-metadata';
+import type { ClassConstructor } from './types.js';
+/**
+ * Module metadata key
+ */
+export declare const MODULE_METADATA: unique symbol;
+/**
+ * Provider definition for dependency injection
+ */
+export interface Provider {
+    provide: string | symbol | ClassConstructor;
+    useValue?: unknown;
+    useClass?: ClassConstructor;
+    useFactory?: (...args: unknown[]) => unknown;
+}
+/**
+ * Dynamic module definition (for configurable modules)
+ */
+export interface DynamicModule {
+    module?: ClassConstructor;
+    providers?: (ClassConstructor | Provider)[];
+    exports?: (ClassConstructor | string | symbol)[];
+    controllers?: ClassConstructor[];
+    imports?: ModuleImport[];
+}
+/**
+ * Type for module imports - can be a class or a dynamic module configuration
+ */
+export type ModuleImport = ClassConstructor | DynamicModule;
+/**
+ * Module metadata interface
+ */
+export interface ModuleMetadata {
+    /** Module name */
+    name: string;
+    /** Module description */
+    description?: string;
+    /** Controllers (classes with @Tool, @Resource, @Prompt decorators) */
+    controllers?: ClassConstructor[];
+    /** Services (dependency injection) */
+    providers?: (ClassConstructor | Provider)[];
+    /** Other modules to import */
+    imports?: ModuleImport[];
+    /** Items to export to other modules */
+    exports?: (ClassConstructor | string | symbol)[];
+}
+/**
+ * Module class (internal)
+ */
+declare class ModuleClass {
+    metadata: ModuleMetadata;
+    constructor(metadata: ModuleMetadata);
+    /**
+     * Get all controllers from this module
+     */
+    getControllers(): ClassConstructor[];
+    /**
+     * Get module name
+     */
+    getName(): string;
+    /**
+     * Get module description
+     */
+    getDescription(): string | undefined;
+}
+/**
+ * Module decorator - Defines a module with controllers, providers, imports
+ *
+ * @example
+ * ```typescript
+ * @Module({
+ *   name: 'auth',
+ *   description: 'Authentication module',
+ *   controllers: [AuthController],
+ * })
+ * export class AuthModule {}
+ * ```
+ */
+export declare function ModuleDecorator(metadata: ModuleMetadata): <T extends new (...args: any[]) => object>(constructor: T) => T;
+export { ModuleDecorator as Module };
+/**
+ * Create a module instance from a class
+ */
+export declare function createModule(moduleClass: ClassConstructor): ModuleClass;
+/**
+ * Check if a class is a module
+ */
+export declare function isModule(target: ClassConstructor): boolean;
+/**
+ * Get module metadata from a class
+ */
+export declare function getModuleMetadata(target: ClassConstructor): ModuleMetadata | undefined;
+//# sourceMappingURL=module.d.ts.map

package/dist/core/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../src/core/module.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD;;GAEG;AACH,eAAO,MAAM,eAAe,eAA4B,CAAC;AAEzD;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,UAAU,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,SAAS,CAAC,EAAE,CAAC,gBAAgB,GAAG,QAAQ,CAAC,EAAE,CAAC;IAC5C,OAAO,CAAC,EAAE,CAAC,gBAAgB,GAAG,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IACjD,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACjC,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,gBAAgB,GAAG,aAAa,CAAC;AAE5D;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IAEb,yBAAyB;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,sEAAsE;IACtE,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAEjC,sCAAsC;IACtC,SAAS,CAAC,EAAE,CAAC,gBAAgB,GAAG,QAAQ,CAAC,EAAE,CAAC;IAE5C,8BAA8B;IAC9B,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IAEzB,uCAAuC;IACvC,OAAO,CAAC,EAAE,CAAC,gBAAgB,GAAG,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;CAClD;AAED;;GAEG;AACH,cAAM,WAAW;IACI,QAAQ,EAAE,cAAc;gBAAxB,QAAQ,EAAE,cAAc;IAE3C;;OAEG;IACH,cAAc,IAAI,gBAAgB,EAAE;IAIpC;;OAEG;IACH,OAAO,IAAI,MAAM;IAIjB;;OAEG;IACH,cAAc,IAAI,MAAM,GAAG,SAAS;CAGrC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,cAAc,IAErC,CAAC,SAAS,KAAK,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,MAAM,EAAE,aAAa,CAAC,KAAG,CAAC,CAmB9E;AAGD,OAAO,EAAE,eAAe,IAAI,MAAM,EAAE,CAAC;AAErC;;GAEG;AACH,wBAAgB,YAAY,CAAC,WAAW,EAAE,gBAAgB,GAAG,WAAW,CAMvE;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAE1D;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,GAAG,cAAc,GAAG,SAAS,CAEtF"}

package/dist/core/module.js

@@ -0,0 +1,87 @@
+import 'reflect-metadata';
+/**
+ * Module metadata key
+ */
+export const MODULE_METADATA = Symbol('module:metadata');
+/**
+ * Module class (internal)
+ */
+class ModuleClass {
+    metadata;
+    constructor(metadata) {
+        this.metadata = metadata;
+    }
+    /**
+     * Get all controllers from this module
+     */
+    getControllers() {
+        return this.metadata.controllers || [];
+    }
+    /**
+     * Get module name
+     */
+    getName() {
+        return this.metadata.name;
+    }
+    /**
+     * Get module description
+     */
+    getDescription() {
+        return this.metadata.description;
+    }
+}
+/**
+ * Module decorator - Defines a module with controllers, providers, imports
+ *
+ * @example
+ * ```typescript
+ * @Module({
+ *   name: 'auth',
+ *   description: 'Authentication module',
+ *   controllers: [AuthController],
+ * })
+ * export class AuthModule {}
+ * ```
+ */
+export function ModuleDecorator(metadata) {
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    return function (constructor) {
+        // Store metadata on the class
+        Reflect.defineMetadata(MODULE_METADATA, metadata, constructor);
+        // Return the constructor with static method
+        const enhanced = constructor;
+        // Add static method
+        Object.defineProperty(enhanced, 'getMetadata', {
+            value: () => Reflect.getMetadata(MODULE_METADATA, constructor) || metadata,
+            writable: false,
+            enumerable: false,
+            configurable: false,
+        });
+        return enhanced;
+    };
+}
+// Export as "Module" for decorator usage
+export { ModuleDecorator as Module };
+/**
+ * Create a module instance from a class
+ */
+export function createModule(moduleClass) {
+    const metadata = Reflect.getMetadata(MODULE_METADATA, moduleClass);
+    if (!metadata) {
+        throw new Error(`Class ${moduleClass.name} is not decorated with @Module`);
+    }
+    return new ModuleClass(metadata);
+}
+/**
+ * Check if a class is a module
+ */
+export function isModule(target) {
+    return Reflect.hasMetadata(MODULE_METADATA, target);
+}
+/**
+ * Get module metadata from a class
+ */
+export function getModuleMetadata(target) {
+    return Reflect.getMetadata(MODULE_METADATA, target);
+}
+//# sourceMappingURL=module.js.map

package/dist/core/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../src/core/module.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAG1B;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC;AAmDzD;;GAEG;AACH,MAAM,WAAW;IACI;IAAnB,YAAmB,QAAwB;QAAxB,aAAQ,GAAR,QAAQ,CAAgB;IAAG,CAAC;IAE/C;;OAEG;IACH,cAAc;QACZ,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,OAAO;QACL,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;IACnC,CAAC;CACF;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,QAAwB;IACtD,8DAA8D;IAC9D,OAAO,UAAoD,WAAc;QACvE,8BAA8B;QAC9B,OAAO,CAAC,cAAc,CAAC,eAAe,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QAE/D,4CAA4C;QAC5C,MAAM,QAAQ,GAAG,WAEhB,CAAC;QAEF,oBAAoB;QACpB,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,aAAa,EAAE;YAC7C,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,eAAe,EAAE,WAAW,CAAC,IAAI,QAAQ;YAC1E,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,KAAK;YACjB,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC;AAED,yCAAyC;AACzC,OAAO,EAAE,eAAe,IAAI,MAAM,EAAE,CAAC;AAErC;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,WAA6B;IACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,eAAe,EAAE,WAAW,CAA+B,CAAC;IACjG,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,SAAS,WAAW,CAAC,IAAI,gCAAgC,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,QAAQ,CAAC,MAAwB;IAC/C,OAAO,OAAO,CAAC,WAAW,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAwB;IACxD,OAAO,OAAO,CAAC,WAAW,CAAC,eAAe,EAAE,MAAM,CAA+B,CAAC;AACpF,CAAC"}

package/dist/core/oauth-module.d.ts

@@ -0,0 +1,123 @@
+import 'reflect-metadata';
+/**
+ * OAuth 2.1 Module Configuration
+ *
+ * Compliant with:
+ * - OAuth 2.1 (draft-ietf-oauth-v2-1-13)
+ * - RFC 9728 - Protected Resource Metadata
+ * - RFC 8414 - Authorization Server Metadata
+ * - RFC 7591 - Dynamic Client Registration
+ * - RFC 8707 - Resource Indicators (Token Audience Binding)
+ * - RFC 7636 - PKCE
+ * - RFC 7662 - Token Introspection
+ */
+export interface OAuthModuleConfig {
+    /**
+     * Resource URI - The MCP server's public URL
+     * Used for token audience validation (RFC 8707)
+     */
+    resourceUri: string;
+    /**
+     * Authorization Server(s)
+     * The OAuth 2.1 authorization server URLs
+     */
+    authorizationServers: string[];
+    /**
+     * Supported scopes for this MCP server
+     * Example: ['mcp:read', 'mcp:write', 'tools:execute']
+     */
+    scopesSupported?: string[];
+    /**
+     * HTTP server configuration
+     * OAuth requires HTTP transport - port will be extracted from resourceUri or use this
+     */
+    http?: {
+        port?: number;
+        host?: string;
+        basePath?: string;
+    };
+    /**
+     * Token Introspection Endpoint (RFC 7662)
+     * Required for validating opaque tokens
+     */
+    tokenIntrospectionEndpoint?: string;
+    /**
+     * Client ID for token introspection
+     */
+    tokenIntrospectionClientId?: string;
+    /**
+     * Client Secret for token introspection
+     * Should be stored in environment variable
+     */
+    tokenIntrospectionClientSecret?: string;
+    /**
+     * Expected audience for tokens (RFC 8707)
+     * If not provided, defaults to resourceUri
+     */
+    audience?: string;
+    /**
+     * Issuer validation
+     * If provided, tokens must be from this issuer
+     */
+    issuer?: string;
+    /**
+     * Custom token validation
+     * Additional validation logic beyond spec requirements
+     */
+    customValidation?: (token: unknown) => Promise<boolean> | boolean;
+}
+import { NitroStackServer } from './server.js';
+import { Logger } from './types.js';
+export declare class OAuthModule {
+    private config;
+    private server;
+    private logger;
+    private static config;
+    private discoveryServer;
+    private wellKnownHandler;
+    private resourceMetadataHandler;
+    constructor(config: OAuthModuleConfig, server: NitroStackServer, logger: Logger);
+    onModuleInit(): void;
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    private registerDiscoveryHandlers;
+    /**
+     * Configure OAuth module for the application
+     */
+    static forRoot(config: OAuthModuleConfig): {
+        module: typeof OAuthModule;
+        providers: {
+            provide: string;
+            useValue: OAuthModuleConfig;
+        }[];
+    };
+    /**
+     * Get current OAuth configuration
+     */
+    static getConfig(): OAuthModuleConfig | null;
+    /**
+     * Validate an access token
+     *
+     * Performs:
+     * 1. Token introspection (if endpoint configured)
+     * 2. Audience validation (RFC 8807)
+     * 3. Issuer validation (if configured)
+     * 4. Custom validation (if configured)
+     */
+    static validateToken(token: string): Promise<{
+        valid: boolean;
+        payload?: Record<string, unknown>;
+        error?: string;
+    }>;
+    /**
+     * Introspect token using RFC 7662
+     * @private
+     */
+    private static introspectToken;
+    /**
+     * Decode JWT token (without validation)
+     * @private
+     */
+    private static decodeToken;
+}
+//# sourceMappingURL=oauth-module.d.ts.map

package/dist/core/oauth-module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-module.d.ts","sourceRoot":"","sources":["../../src/core/oauth-module.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAE1B;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;;OAGG;IACH,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAE/B;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAE3B;;;OAGG;IACH,IAAI,CAAC,EAAE;QACL,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IAEF;;;OAGG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAEpC;;OAEG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAEpC;;;OAGG;IACH,8BAA8B,CAAC,EAAE,MAAM,CAAC;IAExC;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CACnE;AA2CD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAGpC,qBACa,WAAW;IA8BI,OAAO,CAAC,MAAM;IACtC,OAAO,CAAC,MAAM;IACI,OAAO,CAAC,MAAM;IA/BlC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAkC;IACvD,OAAO,CAAC,eAAe,CAAoC;IAE3D,OAAO,CAAC,gBAAgB,CAOtB;IAEF,OAAO,CAAC,uBAAuB,CAc7B;gBAGgC,MAAM,EAAE,iBAAiB,EACjD,MAAM,EAAE,gBAAgB,EACN,MAAM,EAAE,MAAM;IAKnC,YAAY;IAKN,KAAK;IAmCL,IAAI;IAOjB,OAAO,CAAC,yBAAyB;IAKjC;;OAEG;IACH,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,iBAAiB,GAAG;QAAE,MAAM,EAAE,OAAO,WAAW,CAAC;QAAC,SAAS,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,iBAAiB,CAAA;SAAE,EAAE,CAAA;KAAE;IAyBxI;;OAEG;IACH,MAAM,CAAC,SAAS,IAAI,iBAAiB,GAAG,IAAI;IAI5C;;;;;;;;OAQG;WACU,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QACjD,KAAK,EAAE,OAAO,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IA2EF;;;OAGG;mBACkB,eAAe;IAyDpC;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,WAAW;CAyB3B"}