@ractive-ch/tab-mcp 0.5.1 → 0.6.1

package/tokens.d.ts

@@ -15,6 +15,8 @@ export interface GrantInput {
     grantCreatedAt?: number;
     /** The hashed identity of an identity-bound grant (DEC-077). */
     subject?: string;
+    /** Refreshes need a client assertion (DEC-106). */
+    clientAuth?: "private_key_jwt";
 }
 /**
  * Issue an access token for a grant and store its hash, without OAuth. An
@@ -33,9 +35,10 @@ export declare function issueAccessToken(store: TokenStore, grant: GrantInput, o
  * beyond `grantEndsAt` (DEC-062). Returns `undefined` if the store refuses
  * them because the grant was revoked meanwhile (its tombstone, DEC-063).
  */
-export declare function issueTokenPair(store: TokenStore, grant: Required<Omit<GrantInput, "scopes" | "subject">> & {
+export declare function issueTokenPair(store: TokenStore, grant: Required<Omit<GrantInput, "scopes" | "subject" | "clientAuth">> & {
     scopes: string[];
     subject?: string;
+    clientAuth?: "private_key_jwt";
 }, options: {
     accessTtlMs: number;
     refreshTtlMs: number;