@solvapay/server 1.0.8-preview.6 → 1.0.8-preview.8

package/dist/index.cjs

@@ -4321,6 +4321,10 @@ __export(index_exports, {
   createCheckoutSessionCore: () => createCheckoutSessionCore,
   createCustomerSessionCore: () => createCustomerSessionCore,
   createMcpOAuthBridge: () => createMcpOAuthBridge,
+  createOAuthAuthorizeHandler: () => createOAuthAuthorizeHandler,
+  createOAuthRegisterHandler: () => createOAuthRegisterHandler,
+  createOAuthRevokeHandler: () => createOAuthRevokeHandler,
+  createOAuthTokenHandler: () => createOAuthTokenHandler,
   createPaymentIntentCore: () => createPaymentIntentCore,
   createSolvaPay: () => createSolvaPay,
   createSolvaPayClient: () => createSolvaPayClient,
@@ -6175,15 +6179,31 @@ function buildAuthInfoFromBearer(authorization, options = {}) {
 }
 
 // src/mcp/oauth-bridge.ts
+var DEFAULT_OAUTH_PATHS = {
+  register: "/oauth/register",
+  authorize: "/oauth/authorize",
+  token: "/oauth/token",
+  revoke: "/oauth/revoke"
+};
+var NATIVE_CLIENT_ORIGIN_SCHEMES = ["cursor:", "vscode:", "vscode-webview:", "claude:"];
 function withoutTrailingSlash(value) {
   return value.replace(/\/$/, "");
 }
+function resolvePaths(paths = {}) {
+  return { ...DEFAULT_OAUTH_PATHS, ...paths };
+}
 function getRequestAuthHeader(req) {
   const header = req.headers?.authorization;
   if (typeof header === "string") return header;
   if (Array.isArray(header)) return header[0] || null;
   return null;
 }
+function getHeader(req, name) {
+  const header = req.headers?.[name.toLowerCase()];
+  if (typeof header === "string") return header;
+  if (Array.isArray(header)) return header[0] || null;
+  return null;
+}
 function getRequestJsonRpcId(body) {
   if (body && typeof body === "object" && "id" in body) {
     const id = body.id;
@@ -6207,6 +6227,100 @@ function setMcpChallengeHeader(res, publicBaseUrl, protectedResourcePath) {
     `Bearer resource_metadata="${withoutTrailingSlash(publicBaseUrl)}${protectedResourcePath}"`
   );
 }
+function getRequestQuery(req) {
+  const raw = req.url ?? req.path ?? "";
+  const qIndex = raw.indexOf("?");
+  return qIndex === -1 ? "" : raw.slice(qIndex);
+}
+function isNativeClientOrigin(origin) {
+  try {
+    const url = new URL(origin);
+    return NATIVE_CLIENT_ORIGIN_SCHEMES.includes(
+      url.protocol
+    );
+  } catch {
+    return false;
+  }
+}
+function applyCorsHeaders(req, res) {
+  const origin = getHeader(req, "origin");
+  if (!origin) return;
+  if (isNativeClientOrigin(origin)) {
+    res.setHeader("Access-Control-Allow-Origin", origin);
+    res.setHeader("Vary", "Origin");
+  }
+}
+function handlePreflight(req, res) {
+  applyCorsHeaders(req, res);
+  const requestedMethod = getHeader(req, "access-control-request-method") ?? "POST";
+  const requestedHeaders = getHeader(req, "access-control-request-headers") ?? "authorization, content-type";
+  res.setHeader("Access-Control-Allow-Methods", `${requestedMethod}, OPTIONS`);
+  res.setHeader("Access-Control-Allow-Headers", requestedHeaders);
+  res.setHeader("Access-Control-Max-Age", "600");
+  res.status(204);
+  if (typeof res.end === "function") {
+    res.end();
+  } else {
+    res.json({});
+  }
+}
+async function readJsonFromResponse(upstream) {
+  const text = await upstream.text();
+  if (!text) return { body: {}, text: "" };
+  try {
+    return { body: JSON.parse(text), text };
+  } catch {
+    return { body: text, text };
+  }
+}
+async function relayJsonResponse(upstream, res) {
+  const { body, text } = await readJsonFromResponse(upstream);
+  res.status(upstream.status);
+  const contentType = upstream.headers.get("content-type");
+  if (contentType) res.setHeader("Content-Type", contentType);
+  if (text === "" && upstream.status === 204) {
+    if (typeof res.end === "function") {
+      res.end();
+      return;
+    }
+  }
+  res.json(body);
+}
+function sendUpstreamError(res, _error) {
+  res.status(502);
+  res.setHeader("Content-Type", "application/json");
+  res.json({ error: "upstream_unreachable" });
+}
+function serializeRegisterBody(body) {
+  if (typeof body === "string") return body;
+  if (body instanceof Uint8Array) return Buffer.from(body).toString("utf8");
+  return JSON.stringify(body ?? {});
+}
+function serializeFormBody(body) {
+  if (typeof body === "string") return body;
+  if (body instanceof Uint8Array) return Buffer.from(body).toString("utf8");
+  if (body && typeof body === "object") {
+    const params = new URLSearchParams();
+    for (const [key, value] of Object.entries(body)) {
+      if (value === void 0 || value === null) continue;
+      if (Array.isArray(value)) {
+        for (const entry of value) params.append(key, String(entry));
+      } else {
+        params.append(key, String(value));
+      }
+    }
+    return params.toString();
+  }
+  return "";
+}
+function serializeRequestBody(contentType, body) {
+  if (contentType && contentType.includes("application/x-www-form-urlencoded")) {
+    return serializeFormBody(body);
+  }
+  if (typeof body === "string") return body;
+  if (body instanceof Uint8Array) return Buffer.from(body).toString("utf8");
+  return JSON.stringify(body ?? {});
+}
 function getOAuthProtectedResourceResponse(publicBaseUrl) {
   const resource = withoutTrailingSlash(publicBaseUrl);
   return {
@@ -6216,16 +6330,17 @@ function getOAuthProtectedResourceResponse(publicBaseUrl) {
   };
 }
 function getOAuthAuthorizationServerResponse({
-  apiBaseUrl,
-  productRef
+  publicBaseUrl,
+  paths
 }) {
-  const normalizedApiBaseUrl = withoutTrailingSlash(apiBaseUrl);
-  const registrationEndpoint = `${normalizedApiBaseUrl}/v1/customer/auth/register?product_ref=${encodeURIComponent(productRef)}`;
+  const base = withoutTrailingSlash(publicBaseUrl);
+  const p = resolvePaths(paths);
   return {
-    issuer: normalizedApiBaseUrl,
-    authorization_endpoint: `${normalizedApiBaseUrl}/v1/customer/auth/authorize`,
-    token_endpoint: `${normalizedApiBaseUrl}/v1/customer/auth/token`,
-    registration_endpoint: registrationEndpoint,
+    issuer: base,
+    authorization_endpoint: `${base}${p.authorize}`,
+    token_endpoint: `${base}${p.token}`,
+    registration_endpoint: `${base}${p.register}`,
+    revocation_endpoint: `${base}${p.revoke}`,
     token_endpoint_auth_methods_supported: ["client_secret_basic", "client_secret_post"],
     response_types_supported: ["code"],
     grant_types_supported: ["authorization_code", "refresh_token"],
@@ -6233,6 +6348,134 @@ function getOAuthAuthorizationServerResponse({
     code_challenge_methods_supported: ["S256"]
   };
 }
+function createOAuthRegisterHandler(options) {
+  const path = options.path ?? DEFAULT_OAUTH_PATHS.register;
+  const api = withoutTrailingSlash(options.apiBaseUrl);
+  const upstream = `${api}/v1/customer/auth/register?product_ref=${encodeURIComponent(options.productRef)}`;
+  return async (req, res, next) => {
+    if (req.path !== path) {
+      next();
+      return;
+    }
+    if (req.method === "OPTIONS") {
+      handlePreflight(req, res);
+      return;
+    }
+    if (req.method !== "POST") {
+      next();
+      return;
+    }
+    try {
+      const response = await fetch(upstream, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: serializeRegisterBody(req.body)
+      });
+      applyCorsHeaders(req, res);
+      await relayJsonResponse(response, res);
+    } catch (error) {
+      applyCorsHeaders(req, res);
+      sendUpstreamError(res, error);
+    }
+  };
+}
+function createOAuthAuthorizeHandler(options) {
+  const path = options.path ?? DEFAULT_OAUTH_PATHS.authorize;
+  const api = withoutTrailingSlash(options.apiBaseUrl);
+  return (req, res, next) => {
+    if (req.path !== path) {
+      next();
+      return;
+    }
+    if (req.method === "OPTIONS") {
+      handlePreflight(req, res);
+      return;
+    }
+    if (req.method !== "GET") {
+      next();
+      return;
+    }
+    const query = getRequestQuery(req);
+    const location = `${api}/v1/customer/auth/authorize${query}`;
+    res.setHeader("Location", location);
+    res.status(302);
+    if (typeof res.end === "function") {
+      res.end();
+      return;
+    }
+    res.json({});
+  };
+}
+function createOAuthTokenHandler(options) {
+  const path = options.path ?? DEFAULT_OAUTH_PATHS.token;
+  const api = withoutTrailingSlash(options.apiBaseUrl);
+  const upstream = `${api}/v1/customer/auth/token`;
+  return async (req, res, next) => {
+    if (req.path !== path) {
+      next();
+      return;
+    }
+    if (req.method === "OPTIONS") {
+      handlePreflight(req, res);
+      return;
+    }
+    if (req.method !== "POST") {
+      next();
+      return;
+    }
+    const contentType = getHeader(req, "content-type") ?? "application/x-www-form-urlencoded";
+    const authorization = getHeader(req, "authorization");
+    const headers = { "content-type": contentType };
+    if (authorization) headers["authorization"] = authorization;
+    try {
+      const response = await fetch(upstream, {
+        method: "POST",
+        headers,
+        body: serializeRequestBody(contentType, req.body)
+      });
+      applyCorsHeaders(req, res);
+      await relayJsonResponse(response, res);
+    } catch (error) {
+      applyCorsHeaders(req, res);
+      sendUpstreamError(res, error);
+    }
+  };
+}
+function createOAuthRevokeHandler(options) {
+  const path = options.path ?? DEFAULT_OAUTH_PATHS.revoke;
+  const api = withoutTrailingSlash(options.apiBaseUrl);
+  const upstream = `${api}/v1/customer/auth/revoke`;
+  return async (req, res, next) => {
+    if (req.path !== path) {
+      next();
+      return;
+    }
+    if (req.method === "OPTIONS") {
+      handlePreflight(req, res);
+      return;
+    }
+    if (req.method !== "POST") {
+      next();
+      return;
+    }
+    const contentType = getHeader(req, "content-type") ?? "application/x-www-form-urlencoded";
+    const authorization = getHeader(req, "authorization");
+    const headers = { "content-type": contentType };
+    if (authorization) headers["authorization"] = authorization;
+    try {
+      const response = await fetch(upstream, {
+        method: "POST",
+        headers,
+        body: serializeRequestBody(contentType, req.body)
+      });
+      applyCorsHeaders(req, res);
+      await relayJsonResponse(response, res);
+    } catch (error) {
+      applyCorsHeaders(req, res);
+      sendUpstreamError(res, error);
+    }
+  };
+}
 function createMcpOAuthBridge(options) {
   const {
     publicBaseUrl,
@@ -6242,8 +6485,23 @@ function createMcpOAuthBridge(options) {
     requireAuth = true,
     authInfo,
     protectedResourcePath = "/.well-known/oauth-protected-resource",
-    authorizationServerPath = "/.well-known/oauth-authorization-server"
+    authorizationServerPath = "/.well-known/oauth-authorization-server",
+    oauthPaths
   } = options;
+  const paths = resolvePaths(oauthPaths);
+  const openidDiscoveryMiddleware = (req, res, next) => {
+    if (req.method !== "GET" || req.path !== "/.well-known/openid-configuration") {
+      next();
+      return;
+    }
+    applyCorsHeaders(req, res);
+    res.status(404);
+    if (typeof res.end === "function") {
+      res.end();
+    } else {
+      res.json({ error: "not_found" });
+    }
+  };
   const protectedResourceMiddleware = (req, res, next) => {
     if (req.method !== "GET" || req.path !== protectedResourcePath) {
       next();
@@ -6262,16 +6520,38 @@ function createMcpOAuthBridge(options) {
     }
     res.json(
       getOAuthAuthorizationServerResponse({
-        apiBaseUrl,
-        productRef
+        publicBaseUrl,
+        paths
       })
     );
   };
+  const registerMiddleware = createOAuthRegisterHandler({
+    apiBaseUrl,
+    productRef,
+    path: paths.register
+  });
+  const authorizeMiddleware = createOAuthAuthorizeHandler({
+    apiBaseUrl,
+    path: paths.authorize
+  });
+  const tokenMiddleware = createOAuthTokenHandler({ apiBaseUrl, path: paths.token });
+  const revokeMiddleware = createOAuthRevokeHandler({ apiBaseUrl, path: paths.revoke });
   const mcpAuthMiddleware = (req, res, next) => {
     if (req.path !== mcpPath) {
       next();
       return;
     }
+    if (req.method && req.method !== "POST" && req.method !== "OPTIONS") {
+      applyCorsHeaders(req, res);
+      res.setHeader("Allow", "POST, OPTIONS");
+      res.status(405);
+      if (typeof res.end === "function") {
+        res.end();
+      } else {
+        res.json({ error: "method_not_allowed" });
+      }
+      return;
+    }
     const authHeader = getRequestAuthHeader(req);
     const id = getRequestJsonRpcId(req.body);
     if (!authHeader && !requireAuth) {
@@ -6286,6 +6566,8 @@ function createMcpOAuthBridge(options) {
       req.auth = auth;
       next();
     } catch {
+      applyCorsHeaders(req, res);
+      res.setHeader("Access-Control-Expose-Headers", "WWW-Authenticate");
       setMcpChallengeHeader(res, publicBaseUrl, protectedResourcePath);
       if (req.method === "POST") {
         res.status(401).json(makeUnauthorizedJsonRpc(id));
@@ -6294,7 +6576,16 @@ function createMcpOAuthBridge(options) {
       res.status(401).json({ error: "Unauthorized" });
     }
   };
-  return [protectedResourceMiddleware, authorizationServerMiddleware, mcpAuthMiddleware];
+  return [
+    openidDiscoveryMiddleware,
+    protectedResourceMiddleware,
+    authorizationServerMiddleware,
+    registerMiddleware,
+    authorizeMiddleware,
+    tokenMiddleware,
+    revokeMiddleware,
+    mcpAuthMiddleware
+  ];
 }
 
 // src/helpers/error.ts
@@ -6978,6 +7269,10 @@ function verifyWebhook({
   createCheckoutSessionCore,
   createCustomerSessionCore,
   createMcpOAuthBridge,
+  createOAuthAuthorizeHandler,
+  createOAuthRegisterHandler,
+  createOAuthRevokeHandler,
+  createOAuthTokenHandler,
   createPaymentIntentCore,
   createSolvaPay,
   createSolvaPayClient,

package/dist/index.d.cts

@@ -3675,6 +3675,7 @@ declare function buildAuthInfoFromBearer(authorization?: string | null, options?
 type RequestLike = {
     method?: string;
     path?: string;
+    url?: string;
     headers?: Record<string, string | string[] | undefined>;
     body?: unknown;
     auth?: unknown;
@@ -3683,12 +3684,37 @@ type ResponseLike = {
     status: (code: number) => ResponseLike;
     json: (payload: unknown) => void;
     setHeader: (name: string, value: string) => void;
+    end?: (body?: string) => void;
+    send?: (body?: string | Buffer) => void;
 };
 type NextLike = () => void;
-type Middleware = (req: RequestLike, res: ResponseLike, next: NextLike) => void;
+type Middleware = (req: RequestLike, res: ResponseLike, next: NextLike) => void | Promise<void>;
+interface OAuthBridgePaths {
+    register?: string;
+    authorize?: string;
+    token?: string;
+    revoke?: string;
+}
 interface OAuthAuthorizationServerOptions {
+    publicBaseUrl: string;
+    paths?: OAuthBridgePaths;
+}
+interface OAuthRegisterHandlerOptions {
     apiBaseUrl: string;
     productRef: string;
+    path?: string;
+}
+interface OAuthAuthorizeHandlerOptions {
+    apiBaseUrl: string;
+    path?: string;
+}
+interface OAuthTokenHandlerOptions {
+    apiBaseUrl: string;
+    path?: string;
+}
+interface OAuthRevokeHandlerOptions {
+    apiBaseUrl: string;
+    path?: string;
 }
 interface McpOAuthBridgeOptions {
     publicBaseUrl: string;
@@ -3699,23 +3725,29 @@ interface McpOAuthBridgeOptions {
     authInfo?: BuildAuthInfoFromBearerOptions;
     protectedResourcePath?: string;
     authorizationServerPath?: string;
+    oauthPaths?: OAuthBridgePaths;
 }
 declare function getOAuthProtectedResourceResponse(publicBaseUrl: string): {
     resource: string;
     authorization_servers: string[];
     scopes_supported: string[];
 };
-declare function getOAuthAuthorizationServerResponse({ apiBaseUrl, productRef, }: OAuthAuthorizationServerOptions): {
+declare function getOAuthAuthorizationServerResponse({ publicBaseUrl, paths, }: OAuthAuthorizationServerOptions): {
     issuer: string;
     authorization_endpoint: string;
     token_endpoint: string;
     registration_endpoint: string;
+    revocation_endpoint: string;
     token_endpoint_auth_methods_supported: string[];
     response_types_supported: string[];
     grant_types_supported: string[];
     scopes_supported: string[];
     code_challenge_methods_supported: string[];
 };
+declare function createOAuthRegisterHandler(options: OAuthRegisterHandlerOptions): Middleware;
+declare function createOAuthAuthorizeHandler(options: OAuthAuthorizeHandlerOptions): Middleware;
+declare function createOAuthTokenHandler(options: OAuthTokenHandlerOptions): Middleware;
+declare function createOAuthRevokeHandler(options: OAuthRevokeHandlerOptions): Middleware;
 declare function createMcpOAuthBridge(options: McpOAuthBridgeOptions): Middleware[];
 
 /**
@@ -4277,4 +4309,4 @@ declare function verifyWebhook({ body, signature, secret, }: {
     secret: string;
 }): WebhookEvent;
 
-export { type ActivatePlanResult, type AuthenticatedUser, type ConfigureMcpPlansRequest, type ConfigureMcpPlansResponse, type CreateSolvaPayConfig, type CustomerBalanceResult, type CustomerResponseMapped, type CustomerWebhookObject, type ErrorResult, type HttpAdapterOptions, type LimitActivationBalance, type LimitActivationProduct, type LimitPlanSummary, type McpAdapterOptions, McpBearerAuthError, type McpBootstrapPlanInput, type McpBootstrapRequest, type McpBootstrapResponse, type McpServerLike, type McpToolExtra, type McpToolPlanMappingInput, type NextAdapterOptions, type OneTimePurchaseInfo, type PayableFunction, type PayableOptions, type PaywallArgs, PaywallError, type PaywallMetadata, type PaywallStructuredContent, type PaywallToolResult, type ProcessPaymentResult, type PurchaseCheckResult, type RegisterVirtualToolsMcpOptions, type RetryOptions, type SdkMerchantResponse, type SdkProductResponse, type ServerClientOptions, type SolvaPay, type SolvaPayClient, type ToolPlanMappingInput, VIRTUAL_TOOL_DEFINITIONS, type VirtualToolDefinition, type VirtualToolsOptions, type WebhookEvent, type WebhookEventForType, type WebhookEventObjectMap, type WebhookEventType, type WebhookProduct, activatePlanCore, buildAuthInfoFromBearer, cancelPurchaseCore, checkPurchaseCore, type components, createCheckoutSessionCore, createCustomerSessionCore, createMcpOAuthBridge, createPaymentIntentCore, createSolvaPay, createSolvaPayClient, createTopupPaymentIntentCore, createVirtualTools, decodeJwtPayload, extractBearerToken, getAuthenticatedUserCore, getCustomerBalanceCore, getCustomerRefFromBearerAuthHeader, getCustomerRefFromJwtPayload, getMerchantCore, getOAuthAuthorizationServerResponse, getOAuthProtectedResourceResponse, getProductCore, handleRouteError, isErrorResult, jsonSchemaToZodRawShape, listPlansCore, paywallErrorToClientPayload, processPaymentIntentCore, reactivatePurchaseCore, registerVirtualToolsMcpImpl, syncCustomerCore, trackUsageCore, verifyWebhook, withRetry };
+export { type ActivatePlanResult, type AuthenticatedUser, type ConfigureMcpPlansRequest, type ConfigureMcpPlansResponse, type CreateSolvaPayConfig, type CustomerBalanceResult, type CustomerResponseMapped, type CustomerWebhookObject, type ErrorResult, type HttpAdapterOptions, type LimitActivationBalance, type LimitActivationProduct, type LimitPlanSummary, type McpAdapterOptions, McpBearerAuthError, type McpBootstrapPlanInput, type McpBootstrapRequest, type McpBootstrapResponse, type McpServerLike, type McpToolExtra, type McpToolPlanMappingInput, type NextAdapterOptions, type OneTimePurchaseInfo, type PayableFunction, type PayableOptions, type PaywallArgs, PaywallError, type PaywallMetadata, type PaywallStructuredContent, type PaywallToolResult, type ProcessPaymentResult, type PurchaseCheckResult, type RegisterVirtualToolsMcpOptions, type RetryOptions, type SdkMerchantResponse, type SdkProductResponse, type ServerClientOptions, type SolvaPay, type SolvaPayClient, type ToolPlanMappingInput, VIRTUAL_TOOL_DEFINITIONS, type VirtualToolDefinition, type VirtualToolsOptions, type WebhookEvent, type WebhookEventForType, type WebhookEventObjectMap, type WebhookEventType, type WebhookProduct, activatePlanCore, buildAuthInfoFromBearer, cancelPurchaseCore, checkPurchaseCore, type components, createCheckoutSessionCore, createCustomerSessionCore, createMcpOAuthBridge, createOAuthAuthorizeHandler, createOAuthRegisterHandler, createOAuthRevokeHandler, createOAuthTokenHandler, createPaymentIntentCore, createSolvaPay, createSolvaPayClient, createTopupPaymentIntentCore, createVirtualTools, decodeJwtPayload, extractBearerToken, getAuthenticatedUserCore, getCustomerBalanceCore, getCustomerRefFromBearerAuthHeader, getCustomerRefFromJwtPayload, getMerchantCore, getOAuthAuthorizationServerResponse, getOAuthProtectedResourceResponse, getProductCore, handleRouteError, isErrorResult, jsonSchemaToZodRawShape, listPlansCore, paywallErrorToClientPayload, processPaymentIntentCore, reactivatePurchaseCore, registerVirtualToolsMcpImpl, syncCustomerCore, trackUsageCore, verifyWebhook, withRetry };

package/dist/index.d.ts

@@ -3675,6 +3675,7 @@ declare function buildAuthInfoFromBearer(authorization?: string | null, options?
 type RequestLike = {
     method?: string;
     path?: string;
+    url?: string;
     headers?: Record<string, string | string[] | undefined>;
     body?: unknown;
     auth?: unknown;
@@ -3683,12 +3684,37 @@ type ResponseLike = {
     status: (code: number) => ResponseLike;
     json: (payload: unknown) => void;
     setHeader: (name: string, value: string) => void;
+    end?: (body?: string) => void;
+    send?: (body?: string | Buffer) => void;
 };
 type NextLike = () => void;
-type Middleware = (req: RequestLike, res: ResponseLike, next: NextLike) => void;
+type Middleware = (req: RequestLike, res: ResponseLike, next: NextLike) => void | Promise<void>;
+interface OAuthBridgePaths {
+    register?: string;
+    authorize?: string;
+    token?: string;
+    revoke?: string;
+}
 interface OAuthAuthorizationServerOptions {
+    publicBaseUrl: string;
+    paths?: OAuthBridgePaths;
+}
+interface OAuthRegisterHandlerOptions {
     apiBaseUrl: string;
     productRef: string;
+    path?: string;
+}
+interface OAuthAuthorizeHandlerOptions {
+    apiBaseUrl: string;
+    path?: string;
+}
+interface OAuthTokenHandlerOptions {
+    apiBaseUrl: string;
+    path?: string;
+}
+interface OAuthRevokeHandlerOptions {
+    apiBaseUrl: string;
+    path?: string;
 }
 interface McpOAuthBridgeOptions {
     publicBaseUrl: string;
@@ -3699,23 +3725,29 @@ interface McpOAuthBridgeOptions {
     authInfo?: BuildAuthInfoFromBearerOptions;
     protectedResourcePath?: string;
     authorizationServerPath?: string;
+    oauthPaths?: OAuthBridgePaths;
 }
 declare function getOAuthProtectedResourceResponse(publicBaseUrl: string): {
     resource: string;
     authorization_servers: string[];
     scopes_supported: string[];
 };
-declare function getOAuthAuthorizationServerResponse({ apiBaseUrl, productRef, }: OAuthAuthorizationServerOptions): {
+declare function getOAuthAuthorizationServerResponse({ publicBaseUrl, paths, }: OAuthAuthorizationServerOptions): {
     issuer: string;
     authorization_endpoint: string;
     token_endpoint: string;
     registration_endpoint: string;
+    revocation_endpoint: string;
     token_endpoint_auth_methods_supported: string[];
     response_types_supported: string[];
     grant_types_supported: string[];
     scopes_supported: string[];
     code_challenge_methods_supported: string[];
 };
+declare function createOAuthRegisterHandler(options: OAuthRegisterHandlerOptions): Middleware;
+declare function createOAuthAuthorizeHandler(options: OAuthAuthorizeHandlerOptions): Middleware;
+declare function createOAuthTokenHandler(options: OAuthTokenHandlerOptions): Middleware;
+declare function createOAuthRevokeHandler(options: OAuthRevokeHandlerOptions): Middleware;
 declare function createMcpOAuthBridge(options: McpOAuthBridgeOptions): Middleware[];
 
 /**
@@ -4277,4 +4309,4 @@ declare function verifyWebhook({ body, signature, secret, }: {
     secret: string;
 }): WebhookEvent;
 
-export { type ActivatePlanResult, type AuthenticatedUser, type ConfigureMcpPlansRequest, type ConfigureMcpPlansResponse, type CreateSolvaPayConfig, type CustomerBalanceResult, type CustomerResponseMapped, type CustomerWebhookObject, type ErrorResult, type HttpAdapterOptions, type LimitActivationBalance, type LimitActivationProduct, type LimitPlanSummary, type McpAdapterOptions, McpBearerAuthError, type McpBootstrapPlanInput, type McpBootstrapRequest, type McpBootstrapResponse, type McpServerLike, type McpToolExtra, type McpToolPlanMappingInput, type NextAdapterOptions, type OneTimePurchaseInfo, type PayableFunction, type PayableOptions, type PaywallArgs, PaywallError, type PaywallMetadata, type PaywallStructuredContent, type PaywallToolResult, type ProcessPaymentResult, type PurchaseCheckResult, type RegisterVirtualToolsMcpOptions, type RetryOptions, type SdkMerchantResponse, type SdkProductResponse, type ServerClientOptions, type SolvaPay, type SolvaPayClient, type ToolPlanMappingInput, VIRTUAL_TOOL_DEFINITIONS, type VirtualToolDefinition, type VirtualToolsOptions, type WebhookEvent, type WebhookEventForType, type WebhookEventObjectMap, type WebhookEventType, type WebhookProduct, activatePlanCore, buildAuthInfoFromBearer, cancelPurchaseCore, checkPurchaseCore, type components, createCheckoutSessionCore, createCustomerSessionCore, createMcpOAuthBridge, createPaymentIntentCore, createSolvaPay, createSolvaPayClient, createTopupPaymentIntentCore, createVirtualTools, decodeJwtPayload, extractBearerToken, getAuthenticatedUserCore, getCustomerBalanceCore, getCustomerRefFromBearerAuthHeader, getCustomerRefFromJwtPayload, getMerchantCore, getOAuthAuthorizationServerResponse, getOAuthProtectedResourceResponse, getProductCore, handleRouteError, isErrorResult, jsonSchemaToZodRawShape, listPlansCore, paywallErrorToClientPayload, processPaymentIntentCore, reactivatePurchaseCore, registerVirtualToolsMcpImpl, syncCustomerCore, trackUsageCore, verifyWebhook, withRetry };
+export { type ActivatePlanResult, type AuthenticatedUser, type ConfigureMcpPlansRequest, type ConfigureMcpPlansResponse, type CreateSolvaPayConfig, type CustomerBalanceResult, type CustomerResponseMapped, type CustomerWebhookObject, type ErrorResult, type HttpAdapterOptions, type LimitActivationBalance, type LimitActivationProduct, type LimitPlanSummary, type McpAdapterOptions, McpBearerAuthError, type McpBootstrapPlanInput, type McpBootstrapRequest, type McpBootstrapResponse, type McpServerLike, type McpToolExtra, type McpToolPlanMappingInput, type NextAdapterOptions, type OneTimePurchaseInfo, type PayableFunction, type PayableOptions, type PaywallArgs, PaywallError, type PaywallMetadata, type PaywallStructuredContent, type PaywallToolResult, type ProcessPaymentResult, type PurchaseCheckResult, type RegisterVirtualToolsMcpOptions, type RetryOptions, type SdkMerchantResponse, type SdkProductResponse, type ServerClientOptions, type SolvaPay, type SolvaPayClient, type ToolPlanMappingInput, VIRTUAL_TOOL_DEFINITIONS, type VirtualToolDefinition, type VirtualToolsOptions, type WebhookEvent, type WebhookEventForType, type WebhookEventObjectMap, type WebhookEventType, type WebhookProduct, activatePlanCore, buildAuthInfoFromBearer, cancelPurchaseCore, checkPurchaseCore, type components, createCheckoutSessionCore, createCustomerSessionCore, createMcpOAuthBridge, createOAuthAuthorizeHandler, createOAuthRegisterHandler, createOAuthRevokeHandler, createOAuthTokenHandler, createPaymentIntentCore, createSolvaPay, createSolvaPayClient, createTopupPaymentIntentCore, createVirtualTools, decodeJwtPayload, extractBearerToken, getAuthenticatedUserCore, getCustomerBalanceCore, getCustomerRefFromBearerAuthHeader, getCustomerRefFromJwtPayload, getMerchantCore, getOAuthAuthorizationServerResponse, getOAuthProtectedResourceResponse, getProductCore, handleRouteError, isErrorResult, jsonSchemaToZodRawShape, listPlansCore, paywallErrorToClientPayload, processPaymentIntentCore, reactivatePurchaseCore, registerVirtualToolsMcpImpl, syncCustomerCore, trackUsageCore, verifyWebhook, withRetry };