@portel/photon 1.4.1 → 1.5.1

package/dist/serv/index.d.ts

@@ -0,0 +1,114 @@
+/**
+ * SERV - Hosted Photon MCP Platform
+ *
+ * Multi-tenant MCP server hosting with OAuth 2.1 support
+ */
+export * from './types/index.js';
+export { type SessionStore, type SessionConfig, MemorySessionStore, RedisSessionStore, createSessionStore, } from './session/store.js';
+export { KVSessionStore, type KVNamespace } from './session/kv-store.js';
+export { D1Client, SCHEMA as D1_SCHEMA, type D1Database } from './db/d1-client.js';
+export { D1TenantStore, D1UserStore, D1MembershipStore, D1GrantStore, D1ElicitationStore, } from './db/d1-stores.js';
+export { LocalServ, LocalUserStore, LocalMembershipStore, createLocalServ, getTestToken, type LocalServConfig, } from './local.js';
+export { JwtService, initJwtService, getJwtService, generateCodeVerifier, generateCodeChallenge, verifyCodeChallenge, encodeOAuthState, decodeOAuthState, } from './auth/jwt.js';
+export { OAuthProviderRegistry, OAuthFlowHandler, MemoryElicitationStore, MemoryGrantStore, type ElicitationStore, type GrantStore, } from './auth/oauth.js';
+export { type TokenVault, LocalTokenVault, KmsTokenVault, createTokenVault, initTokenVault, getTokenVault, } from './vault/token-vault.js';
+export { TenantResolver, MemoryTenantStore, RequestContextBuilder, extractTenantSlug, buildTenantUrl, buildResourceUri, type TenantStore, } from './middleware/tenant.js';
+export { AuthMiddleware, hasPermission, parseMcpSessionId, generateClientFingerprint, type UserStore, type MembershipStore, } from './middleware/auth.js';
+export { generateProtectedResourceMetadata, generateAuthServerMetadata, handleProtectedResourceRequest, handleAuthServerRequest, generateWwwAuthenticate, fetchClientMetadata, type WellKnownConfig, type ClientMetadataDocument, } from './auth/well-known.js';
+export { OAuthContext, OAuthElicitationRequired, createOAuthInputProvider, PhotonExecutor, isOAuthElicitationError, formatElicitationToolResponse, type OAuthAsk, type OAuthResponse, type OAuthContextConfig, type OAuthInputProvider, type ExecutorConfig, type ExecutionContext, type ExecutionResult, } from './runtime/index.js';
+import type { Tenant, Session, SessionCreateOptions } from './types/index.js';
+import { type SessionStore } from './session/store.js';
+import { JwtService } from './auth/jwt.js';
+import { type TokenVault } from './vault/token-vault.js';
+import { TenantResolver, type TenantStore } from './middleware/tenant.js';
+import { AuthMiddleware, type UserStore, type MembershipStore } from './middleware/auth.js';
+import { OAuthProviderRegistry, OAuthFlowHandler } from './auth/oauth.js';
+import type { WellKnownConfig } from './auth/well-known.js';
+import { PhotonExecutor, type ExecutionContext } from './runtime/index.js';
+export interface ServConfig {
+    /** Base URL (e.g., 'https://serv.example.com') */
+    baseUrl: string;
+    /** Base domain for subdomain routing (e.g., 'serv.example.com') */
+    baseDomain: string;
+    /** JWT signing secret (min 32 chars) */
+    jwtSecret: string;
+    /** Token encryption master key (min 32 chars) */
+    encryptionKey: string;
+    /** OAuth state encryption secret */
+    stateSecret: string;
+    /** Session store (optional, defaults to memory) */
+    sessionStore?: SessionStore;
+    /** Tenant store (optional, defaults to memory) */
+    tenantStore?: TenantStore;
+    /** User store (optional) */
+    userStore?: UserStore;
+    /** Membership store (optional) */
+    membershipStore?: MembershipStore;
+    /** Token vault (optional, defaults to local) */
+    tokenVault?: TokenVault;
+}
+export declare class Serv {
+    readonly config: ServConfig;
+    readonly sessionStore: SessionStore;
+    readonly tenantStore: TenantStore;
+    readonly tokenVault: TokenVault;
+    readonly jwtService: JwtService;
+    readonly tenantResolver: TenantResolver;
+    readonly authMiddleware: AuthMiddleware;
+    readonly oauthProviders: OAuthProviderRegistry;
+    readonly oauthFlow: OAuthFlowHandler;
+    readonly wellKnownConfig: WellKnownConfig;
+    private elicitationStore;
+    private grantStore;
+    constructor(config: ServConfig);
+    /**
+     * Register an OAuth provider
+     */
+    registerOAuthProvider(providerId: string, clientId: string, clientSecret: string): void;
+    /**
+     * Add a tenant (for development/testing)
+     */
+    addTenant(tenant: Tenant): void;
+    /**
+     * Create a session for a tenant
+     */
+    createSession(options: SessionCreateOptions): Promise<Session>;
+    /**
+     * Generate a session token
+     */
+    generateToken(session: Session, tenant: Tenant): string;
+    /**
+     * Start an OAuth elicitation flow
+     */
+    startElicitation(session: Session, photonId: string, provider: string, scopes: string[]): Promise<{
+        url: string;
+        elicitationId: string;
+    }>;
+    /**
+     * Check if a grant exists for a photon
+     */
+    checkGrant(tenantId: string, photonId: string, provider: string, requiredScopes: string[], userId?: string): Promise<{
+        valid: boolean;
+        token?: string;
+    }>;
+    /**
+     * Create a PhotonExecutor for running photons with OAuth support
+     */
+    createExecutor(): PhotonExecutor;
+    /**
+     * Create an execution context for a photon
+     */
+    createExecutionContext(session: Session, tenant: Tenant, photonId: string): ExecutionContext;
+    /**
+     * Shutdown the service
+     */
+    shutdown(): Promise<void>;
+}
+/**
+ * Create a SERV instance for development
+ */
+export declare function createDevServ(options?: {
+    baseUrl?: string;
+    baseDomain?: string;
+}): Serv;
+//# sourceMappingURL=index.d.ts.map

package/dist/serv/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/serv/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,cAAc,kBAAkB,CAAC;AAGjC,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,cAAc,EAAE,KAAK,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAGzE,OAAO,EAAE,QAAQ,EAAE,MAAM,IAAI,SAAS,EAAE,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACnF,OAAO,EACL,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,YAAY,EACZ,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,SAAS,EACT,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,YAAY,EACZ,KAAK,eAAe,GACrB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,UAAU,EACV,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,sBAAsB,EACtB,gBAAgB,EAChB,KAAK,gBAAgB,EACrB,KAAK,UAAU,GAChB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,KAAK,UAAU,EACf,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,aAAa,GACd,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,KAAK,WAAW,GACjB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,yBAAyB,EACzB,KAAK,SAAS,EACd,KAAK,eAAe,GACrB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,iCAAiC,EACjC,0BAA0B,EAC1B,8BAA8B,EAC9B,uBAAuB,EACvB,uBAAuB,EACvB,mBAAmB,EACnB,KAAK,eAAe,EACpB,KAAK,sBAAsB,GAC5B,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,YAAY,EACZ,wBAAwB,EACxB,wBAAwB,EACxB,cAAc,EACd,uBAAuB,EACvB,6BAA6B,EAC7B,KAAK,QAAQ,EACb,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,oBAAoB,CAAC;AAM5B,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAmB,KAAK,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAqB,KAAK,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,KAAK,SAAS,EAAE,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5F,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAGjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,KAAK,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3E,MAAM,WAAW,UAAU;IACzB,kDAAkD;IAClD,OAAO,EAAE,MAAM,CAAC;IAChB,mEAAmE;IACnE,UAAU,EAAE,MAAM,CAAC;IACnB,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,aAAa,EAAE,MAAM,CAAC;IACtB,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,mDAAmD;IACnD,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,kDAAkD;IAClD,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,4BAA4B;IAC5B,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,kCAAkC;IAClC,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,gDAAgD;IAChD,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED,qBAAa,IAAI;IACf,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,cAAc,EAAE,qBAAqB,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAE1C,OAAO,CAAC,gBAAgB,CAAgC;IACxD,OAAO,CAAC,UAAU,CAA0B;gBAEhC,MAAM,EAAE,UAAU;IAiD9B;;OAEG;IACH,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI;IAIvF;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAQ/B;;OAEG;IACG,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC;IAIpE;;OAEG;IACH,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM;IAIvD;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EAAE,GACf,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IAIlD;;OAEG;IACG,UAAU,CACd,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,EAAE,EACxB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAI9C;;OAEG;IACH,cAAc,IAAI,cAAc;IAOhC;;OAEG;IACH,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,gBAAgB;IAI5F;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAGhC;AAMD;;GAEG;AACH,wBAAgB,aAAa,CAAC,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAWvF"}

package/dist/serv/index.js

@@ -0,0 +1,172 @@
+/**
+ * SERV - Hosted Photon MCP Platform
+ *
+ * Multi-tenant MCP server hosting with OAuth 2.1 support
+ */
+// Types
+export * from './types/index.js';
+// Session Management
+export { MemorySessionStore, RedisSessionStore, createSessionStore, } from './session/store.js';
+// Cloudflare KV Session Store
+export { KVSessionStore } from './session/kv-store.js';
+// Cloudflare D1 Database
+export { D1Client, SCHEMA as D1_SCHEMA } from './db/d1-client.js';
+export { D1TenantStore, D1UserStore, D1MembershipStore, D1GrantStore, D1ElicitationStore, } from './db/d1-stores.js';
+// Local Development (zero dependencies)
+export { LocalServ, LocalUserStore, LocalMembershipStore, createLocalServ, getTestToken, } from './local.js';
+// JWT & Auth
+export { JwtService, initJwtService, getJwtService, generateCodeVerifier, generateCodeChallenge, verifyCodeChallenge, encodeOAuthState, decodeOAuthState, } from './auth/jwt.js';
+// OAuth
+export { OAuthProviderRegistry, OAuthFlowHandler, MemoryElicitationStore, MemoryGrantStore, } from './auth/oauth.js';
+// Token Vault
+export { LocalTokenVault, KmsTokenVault, createTokenVault, initTokenVault, getTokenVault, } from './vault/token-vault.js';
+// Middleware
+export { TenantResolver, MemoryTenantStore, RequestContextBuilder, extractTenantSlug, buildTenantUrl, buildResourceUri, } from './middleware/tenant.js';
+export { AuthMiddleware, hasPermission, parseMcpSessionId, generateClientFingerprint, } from './middleware/auth.js';
+// Well-Known Endpoints
+export { generateProtectedResourceMetadata, generateAuthServerMetadata, handleProtectedResourceRequest, handleAuthServerRequest, generateWwwAuthenticate, fetchClientMetadata, } from './auth/well-known.js';
+// Runtime (OAuth-aware execution)
+export { OAuthContext, OAuthElicitationRequired, createOAuthInputProvider, PhotonExecutor, isOAuthElicitationError, formatElicitationToolResponse, } from './runtime/index.js';
+import { MemorySessionStore } from './session/store.js';
+import { JwtService } from './auth/jwt.js';
+import { LocalTokenVault } from './vault/token-vault.js';
+import { TenantResolver, MemoryTenantStore } from './middleware/tenant.js';
+import { AuthMiddleware } from './middleware/auth.js';
+import { OAuthProviderRegistry, OAuthFlowHandler, MemoryElicitationStore, MemoryGrantStore, } from './auth/oauth.js';
+import { PhotonExecutor } from './runtime/index.js';
+export class Serv {
+    config;
+    sessionStore;
+    tenantStore;
+    tokenVault;
+    jwtService;
+    tenantResolver;
+    authMiddleware;
+    oauthProviders;
+    oauthFlow;
+    wellKnownConfig;
+    elicitationStore = new MemoryElicitationStore();
+    grantStore = new MemoryGrantStore();
+    constructor(config) {
+        this.config = config;
+        // Initialize stores
+        this.sessionStore = config.sessionStore ?? new MemorySessionStore();
+        this.tenantStore = config.tenantStore ?? new MemoryTenantStore();
+        this.tokenVault =
+            config.tokenVault ??
+                new LocalTokenVault({
+                    masterKey: config.encryptionKey,
+                });
+        // Initialize JWT service
+        this.jwtService = new JwtService({
+            secret: config.jwtSecret,
+            issuer: config.baseUrl,
+        });
+        // Initialize tenant resolver
+        this.tenantResolver = new TenantResolver({
+            baseDomain: config.baseDomain,
+            store: this.tenantStore,
+        });
+        // Initialize auth middleware
+        this.authMiddleware = new AuthMiddleware({
+            jwtService: this.jwtService,
+            sessionStore: this.sessionStore,
+            userStore: config.userStore,
+            membershipStore: config.membershipStore,
+        });
+        // Initialize OAuth
+        this.oauthProviders = new OAuthProviderRegistry();
+        this.oauthFlow = new OAuthFlowHandler({
+            baseUrl: config.baseUrl,
+            stateSecret: config.stateSecret,
+            providers: this.oauthProviders,
+            elicitationStore: this.elicitationStore,
+            grantStore: this.grantStore,
+            tokenVault: this.tokenVault,
+        });
+        // Well-known config
+        this.wellKnownConfig = {
+            baseUrl: config.baseUrl,
+        };
+    }
+    /**
+     * Register an OAuth provider
+     */
+    registerOAuthProvider(providerId, clientId, clientSecret) {
+        this.oauthProviders.register(providerId, clientId, clientSecret);
+    }
+    /**
+     * Add a tenant (for development/testing)
+     */
+    addTenant(tenant) {
+        if (this.tenantStore instanceof MemoryTenantStore) {
+            this.tenantStore.add(tenant);
+        }
+        else {
+            throw new Error('Cannot add tenant to non-memory store');
+        }
+    }
+    /**
+     * Create a session for a tenant
+     */
+    async createSession(options) {
+        return this.sessionStore.create(options);
+    }
+    /**
+     * Generate a session token
+     */
+    generateToken(session, tenant) {
+        return this.jwtService.generateSessionToken(session, tenant);
+    }
+    /**
+     * Start an OAuth elicitation flow
+     */
+    async startElicitation(session, photonId, provider, scopes) {
+        return this.oauthFlow.startElicitation(session, photonId, provider, scopes);
+    }
+    /**
+     * Check if a grant exists for a photon
+     */
+    async checkGrant(tenantId, photonId, provider, requiredScopes, userId) {
+        return this.oauthFlow.checkGrant(tenantId, photonId, provider, requiredScopes, userId);
+    }
+    /**
+     * Create a PhotonExecutor for running photons with OAuth support
+     */
+    createExecutor() {
+        return new PhotonExecutor({
+            oauthFlow: this.oauthFlow,
+            tokenVault: this.tokenVault,
+        });
+    }
+    /**
+     * Create an execution context for a photon
+     */
+    createExecutionContext(session, tenant, photonId) {
+        return { session, tenant, photonId };
+    }
+    /**
+     * Shutdown the service
+     */
+    async shutdown() {
+        await this.sessionStore.close();
+    }
+}
+// ============================================================================
+// Quick Start Helper
+// ============================================================================
+/**
+ * Create a SERV instance for development
+ */
+export function createDevServ(options) {
+    const baseUrl = options?.baseUrl ?? 'http://localhost:3000'; // dev-only default
+    const baseDomain = options?.baseDomain ?? 'localhost';
+    return new Serv({
+        baseUrl,
+        baseDomain,
+        jwtSecret: 'dev-jwt-secret-min-32-characters-long',
+        encryptionKey: 'dev-encryption-key-min-32-chars!',
+        stateSecret: 'dev-state-secret-for-oauth-flows',
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/serv/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/serv/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,QAAQ;AACR,cAAc,kBAAkB,CAAC;AAEjC,qBAAqB;AACrB,OAAO,EAGL,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAE5B,8BAA8B;AAC9B,OAAO,EAAE,cAAc,EAAoB,MAAM,uBAAuB,CAAC;AAEzE,yBAAyB;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,IAAI,SAAS,EAAmB,MAAM,mBAAmB,CAAC;AACnF,OAAO,EACL,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,YAAY,EACZ,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAE3B,wCAAwC;AACxC,OAAO,EACL,SAAS,EACT,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,YAAY,GAEb,MAAM,YAAY,CAAC;AAEpB,aAAa;AACb,OAAO,EACL,UAAU,EACV,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AAEvB,QAAQ;AACR,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,sBAAsB,EACtB,gBAAgB,GAGjB,MAAM,iBAAiB,CAAC;AAEzB,cAAc;AACd,OAAO,EAEL,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,aAAa,GACd,MAAM,wBAAwB,CAAC;AAEhC,aAAa;AACb,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,GAEjB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,yBAAyB,GAG1B,MAAM,sBAAsB,CAAC;AAE9B,uBAAuB;AACvB,OAAO,EACL,iCAAiC,EACjC,0BAA0B,EAC1B,8BAA8B,EAC9B,uBAAuB,EACvB,uBAAuB,EACvB,mBAAmB,GAGpB,MAAM,sBAAsB,CAAC;AAE9B,kCAAkC;AAClC,OAAO,EACL,YAAY,EACZ,wBAAwB,EACxB,wBAAwB,EACxB,cAAc,EACd,uBAAuB,EACvB,6BAA6B,GAQ9B,MAAM,oBAAoB,CAAC;AAO5B,OAAO,EAAE,kBAAkB,EAAqB,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAmB,MAAM,wBAAwB,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAoB,MAAM,wBAAwB,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAwC,MAAM,sBAAsB,CAAC;AAC5F,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,sBAAsB,EACtB,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,cAAc,EAAyB,MAAM,oBAAoB,CAAC;AAyB3E,MAAM,OAAO,IAAI;IACN,MAAM,CAAa;IACnB,YAAY,CAAe;IAC3B,WAAW,CAAc;IACzB,UAAU,CAAa;IACvB,UAAU,CAAa;IACvB,cAAc,CAAiB;IAC/B,cAAc,CAAiB;IAC/B,cAAc,CAAwB;IACtC,SAAS,CAAmB;IAC5B,eAAe,CAAkB;IAElC,gBAAgB,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAChD,UAAU,GAAG,IAAI,gBAAgB,EAAE,CAAC;IAE5C,YAAY,MAAkB;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAErB,oBAAoB;QACpB,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,IAAI,kBAAkB,EAAE,CAAC;QACpE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACjE,IAAI,CAAC,UAAU;YACb,MAAM,CAAC,UAAU;gBACjB,IAAI,eAAe,CAAC;oBAClB,SAAS,EAAE,MAAM,CAAC,aAAa;iBAChC,CAAC,CAAC;QAEL,yBAAyB;QACzB,IAAI,CAAC,UAAU,GAAG,IAAI,UAAU,CAAC;YAC/B,MAAM,EAAE,MAAM,CAAC,SAAS;YACxB,MAAM,EAAE,MAAM,CAAC,OAAO;SACvB,CAAC,CAAC;QAEH,6BAA6B;QAC7B,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,CAAC;YACvC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,KAAK,EAAE,IAAI,CAAC,WAAW;SACxB,CAAC,CAAC;QAEH,6BAA6B;QAC7B,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,CAAC;YACvC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,eAAe,EAAE,MAAM,CAAC,eAAe;SACxC,CAAC,CAAC;QAEH,mBAAmB;QACnB,IAAI,CAAC,cAAc,GAAG,IAAI,qBAAqB,EAAE,CAAC;QAClD,IAAI,CAAC,SAAS,GAAG,IAAI,gBAAgB,CAAC;YACpC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,IAAI,CAAC,cAAc;YAC9B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QAEH,oBAAoB;QACpB,IAAI,CAAC,eAAe,GAAG;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,UAAkB,EAAE,QAAgB,EAAE,YAAoB;QAC9E,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,MAAc;QACtB,IAAI,IAAI,CAAC,WAAW,YAAY,iBAAiB,EAAE,CAAC;YAClD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,OAA6B;QAC/C,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,OAAgB,EAAE,MAAc;QAC5C,OAAO,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAgB,EAChB,QAAgB,EAChB,QAAgB,EAChB,MAAgB;QAEhB,OAAO,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CACd,QAAgB,EAChB,QAAgB,EAChB,QAAgB,EAChB,cAAwB,EACxB,MAAe;QAEf,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;IACzF,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,IAAI,cAAc,CAAC;YACxB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,sBAAsB,CAAC,OAAgB,EAAE,MAAc,EAAE,QAAgB;QACvE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC;CACF;AAED,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAAmD;IAC/E,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,uBAAuB,CAAC,CAAC,mBAAmB;IAChF,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,WAAW,CAAC;IAEtD,OAAO,IAAI,IAAI,CAAC;QACd,OAAO;QACP,UAAU;QACV,SAAS,EAAE,uCAAuC;QAClD,aAAa,EAAE,kCAAkC;QACjD,WAAW,EAAE,kCAAkC;KAChD,CAAC,CAAC;AACL,CAAC"}

package/dist/serv/local.d.ts

@@ -0,0 +1,118 @@
+/**
+ * SERV Local Development Mode
+ *
+ * Zero external dependencies - everything runs in-memory.
+ * Perfect for local testing before deploying to Cloudflare.
+ */
+import type { Tenant, User, Membership, Session } from './types/index.js';
+import { MemorySessionStore } from './session/store.js';
+import { MemoryTenantStore } from './middleware/tenant.js';
+import { MemoryElicitationStore, MemoryGrantStore, OAuthProviderRegistry, OAuthFlowHandler } from './auth/oauth.js';
+import { LocalTokenVault } from './vault/token-vault.js';
+import { JwtService } from './auth/jwt.js';
+import { TenantResolver } from './middleware/tenant.js';
+import { AuthMiddleware } from './middleware/auth.js';
+export declare class LocalUserStore {
+    private users;
+    private emailIndex;
+    findById(id: string): Promise<User | null>;
+    findByEmail(email: string): Promise<User | null>;
+    create(data: Omit<User, 'id' | 'createdAt'>): Promise<User>;
+    add(user: User): void;
+}
+export declare class LocalMembershipStore {
+    private memberships;
+    private key;
+    find(tenantId: string, userId: string): Promise<Membership | null>;
+    findByUser(userId: string): Promise<Membership[]>;
+    create(data: Omit<Membership, 'joinedAt'>): Promise<Membership>;
+    add(membership: Membership): void;
+}
+export interface LocalServConfig {
+    /** Port to run on (default: 3000) */
+    port?: number;
+    /** Base URL for local development */
+    baseUrl?: string;
+    /** Enable debug logging */
+    debug?: boolean;
+}
+export declare class LocalServ {
+    readonly port: number;
+    readonly baseUrl: string;
+    readonly debug: boolean;
+    readonly sessions: MemorySessionStore;
+    readonly tenants: MemoryTenantStore;
+    readonly users: LocalUserStore;
+    readonly memberships: LocalMembershipStore;
+    readonly elicitations: MemoryElicitationStore;
+    readonly grants: MemoryGrantStore;
+    readonly vault: LocalTokenVault;
+    readonly jwt: JwtService;
+    readonly tenantResolver: TenantResolver;
+    readonly auth: AuthMiddleware;
+    readonly oauthProviders: OAuthProviderRegistry;
+    readonly oauthFlow: OAuthFlowHandler;
+    private readonly secrets;
+    constructor(config?: LocalServConfig);
+    /**
+     * Create a tenant for local testing
+     */
+    createTenant(options: {
+        name: string;
+        slug: string;
+        plan?: 'free' | 'pro' | 'enterprise';
+    }): Tenant;
+    /**
+     * Create a user for local testing
+     */
+    createUser(options: {
+        email: string;
+        verified?: boolean;
+    }): User;
+    /**
+     * Add a user to a tenant
+     */
+    addMembership(options: {
+        tenant: Tenant;
+        user: User;
+        role?: 'owner' | 'admin' | 'member' | 'viewer';
+    }): Membership;
+    /**
+     * Register an OAuth provider for testing
+     */
+    registerOAuthProvider(providerId: string, clientId: string, clientSecret: string): void;
+    /**
+     * Create a session for a user in a tenant
+     */
+    createSession(tenant: Tenant, user?: User): Promise<{
+        session: Session;
+        token: string;
+    }>;
+    /**
+     * Handle an HTTP request (for use with Node.js http server)
+     */
+    handleRequest(method: string, url: string, headers: Record<string, string>, body?: string): Promise<{
+        status: number;
+        headers: Record<string, string>;
+        body: string;
+    }>;
+    private resolveTenant;
+    private notFound;
+    private badRequest;
+    private log;
+    shutdown(): Promise<void>;
+}
+/**
+ * Create a LocalServ instance with a default tenant and user
+ */
+export declare function createLocalServ(config?: LocalServConfig): {
+    serv: LocalServ;
+    tenant: Tenant;
+    user: User;
+    membership: Membership;
+};
+/**
+ * Quick session token for testing
+ */
+export declare function getTestToken(serv: LocalServ, tenant: Tenant, user?: User): Promise<string>;
+//# sourceMappingURL=local.d.ts.map

package/dist/serv/local.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../src/serv/local.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAWtD,qBAAa,cAAc;IACzB,OAAO,CAAC,KAAK,CAAgC;IAC7C,OAAO,CAAC,UAAU,CAAkC;IAE9C,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAI1C,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAKhD,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAWjE,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI;CAItB;AAMD,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,WAAW,CAAsC;IAEzD,OAAO,CAAC,GAAG;IAIL,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAIlE,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAIjD,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;IASrE,GAAG,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI;CAGlC;AAMD,MAAM,WAAW,eAAe;IAC9B,qCAAqC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qCAAqC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAMD,qBAAa,SAAS;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IAGxB,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;IAC3C,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAGhC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,qBAAqB,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IAGrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAItB;gBAEU,MAAM,GAAE,eAAoB;IA2DxC;;OAEG;IACH,YAAY,CAAC,OAAO,EAAE;QACpB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,YAAY,CAAC;KACtC,GAAG,MAAM;IAmBV;;OAEG;IACH,UAAU,CAAC,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI;IAYhE;;OAEG;IACH,aAAa,CAAC,OAAO,EAAE;QACrB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,IAAI,CAAC;QACX,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;KAChD,GAAG,UAAU;IAiBd;;OAEG;IACH,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI;IASvF;;OAEG;IACG,aAAa,CACjB,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,IAAI,GACV,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IA2BF;;OAEG;IACG,aAAa,CACjB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC;QACT,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;YAoGY,aAAa;IAa3B,OAAO,CAAC,QAAQ;IAQhB,OAAO,CAAC,UAAU;IAQlB,OAAO,CAAC,GAAG;IAUL,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAIhC;AAMD;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,CAAC,EAAE,eAAe,GAAG;IACzD,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,IAAI,CAAC;IACX,UAAU,EAAE,UAAU,CAAC;CACxB,CAuBA;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAGhG"}