@workglow/util 0.0.109 → 0.0.111

package/dist/common.d.ts

@@ -27,4 +27,6 @@ export * from "./worker/WorkerManager";
 export * from "./worker/WorkerServer";
 export * from "./credentials";
 export * from "./crypto/WebCrypto";
+export * from "./mcp/McpAuthTypes";
+export * from "./mcp/McpAuthProvider";
 //# sourceMappingURL=common.d.ts.map

package/dist/common.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../src/common.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,iBAAiB,CAAC;AAChC,cAAc,MAAM,CAAC;AACrB,cAAc,uBAAuB,CAAC;AACtC,cAAc,WAAW,CAAC;AAC1B,cAAc,SAAS,CAAC;AACxB,cAAc,8BAA8B,CAAC;AAC7C,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,4CAA4C,CAAC;AAC3D,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC"}
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../src/common.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,iBAAiB,CAAC;AAChC,cAAc,MAAM,CAAC;AACrB,cAAc,uBAAuB,CAAC;AACtC,cAAc,WAAW,CAAC;AAC1B,cAAc,SAAS,CAAC;AACxB,cAAc,8BAA8B,CAAC;AAC7C,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,4CAA4C,CAAC;AAC3D,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC"}

package/dist/logging/LoggerRegistry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"LoggerRegistry.d.ts","sourceRoot":"","sources":["../../src/logging/LoggerRegistry.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGzC;;GAEG;AACH,eAAO,MAAM,MAAM,uCAAwC,CAAC;AAqC5D;;GAEG;AACH,wBAAgB,SAAS,IAAI,OAAO,CAEnC;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAE/C"}
+{"version":3,"file":"LoggerRegistry.d.ts","sourceRoot":"","sources":["../../src/logging/LoggerRegistry.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGzC;;GAEG;AACH,eAAO,MAAM,MAAM,uCAAwC,CAAC;AA2C5D;;GAEG;AACH,wBAAgB,SAAS,IAAI,OAAO,CAEnC;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAE/C"}

package/dist/mcp/McpAuthProvider.d.ts

@@ -0,0 +1,68 @@
+/**
+ * @license
+ * Copyright 2025 Steven Roussey <sroussey@gmail.com>
+ * SPDX-License-Identifier: Apache-2.0
+ *
+ * MCP OAuth provider adapter backed by ICredentialStore, and factory function.
+ */
+import type { OAuthClientProvider, OAuthDiscoveryState } from "@modelcontextprotocol/sdk/client/auth.js";
+import type { OAuthClientMetadata, OAuthClientInformationMixed, OAuthTokens } from "@modelcontextprotocol/sdk/shared/auth.js";
+import type { AddClientAuthentication } from "@modelcontextprotocol/sdk/client/auth.js";
+import type { ICredentialStore } from "../credentials/ICredentialStore";
+import type { McpAuthConfig } from "./McpAuthTypes";
+/**
+ * OAuthClientProvider backed by ICredentialStore.
+ *
+ * Stores tokens, client info, code verifiers, and discovery state as JSON
+ * strings under namespaced keys. Enables token persistence across
+ * short-lived MCP connections that share the same server URL.
+ */
+export declare class CredentialStoreOAuthProvider implements OAuthClientProvider {
+    private readonly store;
+    private readonly serverUrl;
+    private readonly _clientMetadata;
+    private readonly _redirectUrl;
+    private readonly _initialClientInfo;
+    /** Optional override for grant-specific token request preparation. */
+    prepareTokenRequest?: (scope?: string) => URLSearchParams | Promise<URLSearchParams | undefined> | undefined;
+    /** Optional override for custom client authentication on token requests. */
+    addClientAuthentication?: AddClientAuthentication;
+    constructor(options: {
+        store: ICredentialStore;
+        serverUrl: string;
+        clientMetadata: OAuthClientMetadata;
+        redirectUrl?: string | URL;
+        initialClientInfo?: OAuthClientInformationMixed;
+        prepareTokenRequest?: OAuthClientProvider["prepareTokenRequest"];
+        addClientAuthentication?: AddClientAuthentication;
+    });
+    get redirectUrl(): string | URL | undefined;
+    get clientMetadata(): OAuthClientMetadata;
+    clientInformation(): Promise<OAuthClientInformationMixed | undefined>;
+    saveClientInformation(info: OAuthClientInformationMixed): Promise<void>;
+    tokens(): Promise<OAuthTokens | undefined>;
+    saveTokens(tokens: OAuthTokens): Promise<void>;
+    redirectToAuthorization(authorizationUrl: URL): Promise<void>;
+    saveCodeVerifier(codeVerifier: string): Promise<void>;
+    codeVerifier(): Promise<string>;
+    saveDiscoveryState(state: OAuthDiscoveryState): Promise<void>;
+    discoveryState(): Promise<OAuthDiscoveryState | undefined>;
+    invalidateCredentials(scope: "all" | "client" | "tokens" | "verifier" | "discovery"): Promise<void>;
+}
+/**
+ * Creates an OAuthClientProvider for the given auth config, or returns
+ * `undefined` when no provider is needed (none / bearer).
+ *
+ * Bearer auth is handled at the transport level via request headers,
+ * so this function returns `undefined` for it.
+ */
+export declare function createAuthProvider(auth: McpAuthConfig, serverUrl: string, credentialStore?: ICredentialStore): OAuthClientProvider | undefined;
+/**
+ * Resolves credential-store keys in auth config to actual secret values.
+ *
+ * This is needed for the standalone MCP task path where config properties
+ * are NOT auto-resolved by `resolveSchemaInputs`. For the AgentTask path,
+ * credential resolution happens automatically via `format: "credential"`.
+ */
+export declare function resolveAuthSecrets(auth: McpAuthConfig, credentialStore?: ICredentialStore): Promise<McpAuthConfig>;
+//# sourceMappingURL=McpAuthProvider.d.ts.map

package/dist/mcp/McpAuthProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"McpAuthProvider.d.ts","sourceRoot":"","sources":["../../src/mcp/McpAuthProvider.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AACzG,OAAO,KAAK,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,WAAW,EAAE,MAAM,0CAA0C,CAAC;AAC9H,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AAOxF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAExE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAoBpD;;;;;;GAMG;AACH,qBAAa,4BAA6B,YAAW,mBAAmB;IACtE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAmB;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAsB;IACtD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA2B;IACxD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA0C;IAE7E,sEAAsE;IACtE,mBAAmB,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,eAAe,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC;IAE7G,4EAA4E;IAC5E,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;gBAEtC,OAAO,EAAE;QACnB,KAAK,EAAE,gBAAgB,CAAC;QACxB,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,mBAAmB,CAAC;QACpC,WAAW,CAAC,EAAE,MAAM,GAAG,GAAG,CAAC;QAC3B,iBAAiB,CAAC,EAAE,2BAA2B,CAAC;QAChD,mBAAmB,CAAC,EAAE,mBAAmB,CAAC,qBAAqB,CAAC,CAAC;QACjE,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;KACnD;IAgBD,IAAI,WAAW,IAAI,MAAM,GAAG,GAAG,GAAG,SAAS,CAE1C;IAED,IAAI,cAAc,IAAI,mBAAmB,CAExC;IAIK,iBAAiB,IAAI,OAAO,CAAC,2BAA2B,GAAG,SAAS,CAAC;IAMrE,qBAAqB,CAAC,IAAI,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC;IAMvE,MAAM,IAAI,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAM1C,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAY9C,uBAAuB,CAAC,gBAAgB,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAW7D,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrD,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAQ/B,kBAAkB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAO7D,cAAc,IAAI,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC;IAQ1D,qBAAqB,CACzB,KAAK,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,WAAW,GAC5D,OAAO,CAAC,IAAI,CAAC;CA0BjB;AAID;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,aAAa,EACnB,SAAS,EAAE,MAAM,EACjB,eAAe,CAAC,EAAE,gBAAgB,GACjC,mBAAmB,GAAG,SAAS,CAoJjC;AAID;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,aAAa,EACnB,eAAe,CAAC,EAAE,gBAAgB,GACjC,OAAO,CAAC,aAAa,CAAC,CA6CxB"}

package/dist/mcp/McpAuthTypes.d.ts

@@ -0,0 +1,126 @@
+/**
+ * @license
+ * Copyright 2025 Steven Roussey <sroussey@gmail.com>
+ * SPDX-License-Identifier: Apache-2.0
+ *
+ * Shared MCP authentication type definitions and JSON Schema.
+ */
+/**
+ * Supported MCP authentication types.
+ */
+export declare const mcpAuthTypes: readonly ["none", "bearer", "client_credentials", "private_key_jwt", "static_private_key_jwt", "authorization_code"];
+export type McpAuthType = (typeof mcpAuthTypes)[number];
+export interface McpAuthNone {
+    readonly type: "none";
+}
+export interface McpAuthBearer {
+    readonly type: "bearer";
+    /** Static token or credential-store key (format: "credential"). */
+    readonly token: string;
+}
+export interface McpAuthClientCredentials {
+    readonly type: "client_credentials";
+    readonly client_id: string;
+    /** Client secret or credential-store key (format: "credential"). */
+    readonly client_secret: string;
+    readonly client_name?: string;
+    readonly scope?: string;
+}
+export interface McpAuthPrivateKeyJwt {
+    readonly type: "private_key_jwt";
+    readonly client_id: string;
+    /** PEM / JWK private key or credential-store key (format: "credential"). */
+    readonly private_key: string;
+    readonly algorithm: string;
+    readonly client_name?: string;
+    readonly jwt_lifetime_seconds?: number;
+    readonly scope?: string;
+}
+export interface McpAuthStaticPrivateKeyJwt {
+    readonly type: "static_private_key_jwt";
+    readonly client_id: string;
+    /** Pre-built JWT assertion or credential-store key (format: "credential"). */
+    readonly jwt_bearer_assertion: string;
+    readonly client_name?: string;
+    readonly scope?: string;
+}
+export interface McpAuthAuthorizationCode {
+    readonly type: "authorization_code";
+    readonly client_id: string;
+    readonly client_secret?: string;
+    readonly redirect_url: string;
+    readonly scope?: string;
+}
+export type McpAuthConfig = McpAuthNone | McpAuthBearer | McpAuthClientCredentials | McpAuthPrivateKeyJwt | McpAuthStaticPrivateKeyJwt | McpAuthAuthorizationCode;
+export declare const mcpAuthConfigSchema: {
+    readonly auth_type: {
+        readonly type: "string";
+        readonly enum: readonly ["none", "bearer", "client_credentials", "private_key_jwt", "static_private_key_jwt", "authorization_code"];
+        readonly title: "Auth Type";
+        readonly description: "Authentication method for connecting to the MCP server";
+        readonly default: "none";
+    };
+    readonly auth_token: {
+        readonly type: "string";
+        readonly format: "credential";
+        readonly title: "Bearer Token";
+        readonly description: "Static bearer token or API key (for bearer auth)";
+    };
+    readonly auth_client_id: {
+        readonly type: "string";
+        readonly title: "Client ID";
+        readonly description: "OAuth client ID (for OAuth auth types)";
+    };
+    readonly auth_client_secret: {
+        readonly type: "string";
+        readonly format: "credential";
+        readonly title: "Client Secret";
+        readonly description: "OAuth client secret (for client_credentials auth)";
+    };
+    readonly auth_private_key: {
+        readonly type: "string";
+        readonly format: "credential";
+        readonly title: "Private Key";
+        readonly description: "PEM or JWK private key (for private_key_jwt auth)";
+    };
+    readonly auth_algorithm: {
+        readonly type: "string";
+        readonly title: "Algorithm";
+        readonly description: "JWT signing algorithm, e.g. RS256, ES256 (for private_key_jwt auth)";
+    };
+    readonly auth_jwt_bearer_assertion: {
+        readonly type: "string";
+        readonly format: "credential";
+        readonly title: "JWT Assertion";
+        readonly description: "Pre-built JWT assertion (for static_private_key_jwt auth)";
+    };
+    readonly auth_redirect_url: {
+        readonly type: "string";
+        readonly format: "uri";
+        readonly title: "Redirect URL";
+        readonly description: "OAuth redirect URL (for authorization_code auth)";
+    };
+    readonly auth_scope: {
+        readonly type: "string";
+        readonly title: "Scope";
+        readonly description: "OAuth scope (space-separated)";
+    };
+    readonly auth_client_name: {
+        readonly type: "string";
+        readonly title: "Client Name";
+        readonly description: "Optional OAuth client display name";
+    };
+    readonly auth_jwt_lifetime_seconds: {
+        readonly type: "number";
+        readonly title: "JWT Lifetime";
+        readonly description: "JWT lifetime in seconds (default: 300)";
+        readonly minimum: 1;
+    };
+};
+/**
+ * Constructs a typed McpAuthConfig from flat schema properties.
+ * Used by `createMcpClient()` to normalize the config.
+ * Returns `undefined` if required fields for the selected auth type are missing.
+ */
+export declare function buildAuthConfig(flat: Record<string, unknown>): McpAuthConfig | undefined;
+//# sourceMappingURL=McpAuthTypes.d.ts.map

package/dist/mcp/McpAuthTypes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"McpAuthTypes.d.ts","sourceRoot":"","sources":["../../src/mcp/McpAuthTypes.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH;;GAEG;AACH,eAAO,MAAM,YAAY,sHAOf,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAIxD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,mEAAmE;IACnE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,oEAAoE;IACpE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,4EAA4E;IAC5E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,8EAA8E;IAC9E,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,aAAa,GACrB,WAAW,GACX,aAAa,GACb,wBAAwB,GACxB,oBAAoB,GACpB,0BAA0B,GAC1B,wBAAwB,CAAC;AAI7B,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgEuB,CAAC;AAqBxD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,aAAa,GAAG,SAAS,CAqExF"}

package/dist/mcp/McpClientUtil.browser.d.ts

@@ -8,8 +8,72 @@
  */
 import { Client } from "@modelcontextprotocol/sdk/client";
 import type { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
+import type { McpAuthConfig } from "./McpAuthTypes";
 export declare const mcpTransportTypes: readonly ["streamable-http", "sse"];
 export declare const mcpServerConfigSchema: {
+    readonly auth_type: {
+        readonly type: "string";
+        readonly enum: readonly ["none", "bearer", "client_credentials", "private_key_jwt", "static_private_key_jwt", "authorization_code"];
+        readonly title: "Auth Type";
+        readonly description: "Authentication method for connecting to the MCP server";
+        readonly default: "none";
+    };
+    readonly auth_token: {
+        readonly type: "string";
+        readonly format: "credential";
+        readonly title: "Bearer Token";
+        readonly description: "Static bearer token or API key (for bearer auth)";
+    };
+    readonly auth_client_id: {
+        readonly type: "string";
+        readonly title: "Client ID";
+        readonly description: "OAuth client ID (for OAuth auth types)";
+    };
+    readonly auth_client_secret: {
+        readonly type: "string";
+        readonly format: "credential";
+        readonly title: "Client Secret";
+        readonly description: "OAuth client secret (for client_credentials auth)";
+    };
+    readonly auth_private_key: {
+        readonly type: "string";
+        readonly format: "credential";
+        readonly title: "Private Key";
+        readonly description: "PEM or JWK private key (for private_key_jwt auth)";
+    };
+    readonly auth_algorithm: {
+        readonly type: "string";
+        readonly title: "Algorithm";
+        readonly description: "JWT signing algorithm, e.g. RS256, ES256 (for private_key_jwt auth)";
+    };
+    readonly auth_jwt_bearer_assertion: {
+        readonly type: "string";
+        readonly format: "credential";
+        readonly title: "JWT Assertion";
+        readonly description: "Pre-built JWT assertion (for static_private_key_jwt auth)";
+    };
+    readonly auth_redirect_url: {
+        readonly type: "string";
+        readonly format: "uri";
+        readonly title: "Redirect URL";
+        readonly description: "OAuth redirect URL (for authorization_code auth)";
+    };
+    readonly auth_scope: {
+        readonly type: "string";
+        readonly title: "Scope";
+        readonly description: "OAuth scope (space-separated)";
+    };
+    readonly auth_client_name: {
+        readonly type: "string";
+        readonly title: "Client Name";
+        readonly description: "Optional OAuth client display name";
+    };
+    readonly auth_jwt_lifetime_seconds: {
+        readonly type: "number";
+        readonly title: "JWT Lifetime";
+        readonly description: "JWT lifetime in seconds (default: 300)";
+        readonly minimum: 1;
+    };
     readonly transport: {
         readonly type: "string";
         readonly enum: readonly ["streamable-http", "sse"];
@@ -27,6 +91,8 @@ export type McpTransportType = (typeof mcpTransportTypes)[number];
 export interface McpServerConfig {
     transport: McpTransportType;
     server_url?: string;
+    auth?: McpAuthConfig;
+    auth_type?: string;
 }
 export declare function createMcpClient(config: McpServerConfig, signal?: AbortSignal): Promise<{
     client: Client;

package/dist/mcp/McpClientUtil.browser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"McpClientUtil.browser.d.ts","sourceRoot":"","sources":["../../src/mcp/McpClientUtil.browser.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAG1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAC;AAM/E,eAAO,MAAM,iBAAiB,qCAAsC,CAAC;AAErE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;CAaqB,CAAC;AAExD,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,eAAe,EACvB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,CAAC,CA0EnD;AAED,eAAO,MAAM,gBAAgB;;CAE5B,CAAC"}
+{"version":3,"file":"McpClientUtil.browser.d.ts","sourceRoot":"","sources":["../../src/mcp/McpClientUtil.browser.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAG1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAC;AAI/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAGpD,eAAO,MAAM,iBAAiB,qCAAsC,CAAC;AAErE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAcqB,CAAC;AAExD,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,aAAa,CAAC;IAErB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,eAAe,EACvB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,CAAC,CA2FnD;AAED,eAAO,MAAM,gBAAgB;;CAE5B,CAAC"}

package/dist/mcp/McpClientUtil.node.d.ts

@@ -8,8 +8,72 @@
  */
 import { Client } from "@modelcontextprotocol/sdk/client";
 import type { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
+import type { McpAuthConfig } from "./McpAuthTypes";
 export declare const mcpTransportTypes: readonly ["stdio", "sse", "streamable-http"];
 export declare const mcpServerConfigSchema: {
+    readonly auth_type: {
+        readonly type: "string";
+        readonly enum: readonly ["none", "bearer", "client_credentials", "private_key_jwt", "static_private_key_jwt", "authorization_code"];
+        readonly title: "Auth Type";
+        readonly description: "Authentication method for connecting to the MCP server";
+        readonly default: "none";
+    };
+    readonly auth_token: {
+        readonly type: "string";
+        readonly format: "credential";
+        readonly title: "Bearer Token";
+        readonly description: "Static bearer token or API key (for bearer auth)";
+    };
+    readonly auth_client_id: {
+        readonly type: "string";
+        readonly title: "Client ID";
+        readonly description: "OAuth client ID (for OAuth auth types)";
+    };
+    readonly auth_client_secret: {
+        readonly type: "string";
+        readonly format: "credential";
+        readonly title: "Client Secret";
+        readonly description: "OAuth client secret (for client_credentials auth)";
+    };
+    readonly auth_private_key: {
+        readonly type: "string";
+        readonly format: "credential";
+        readonly title: "Private Key";
+        readonly description: "PEM or JWK private key (for private_key_jwt auth)";
+    };
+    readonly auth_algorithm: {
+        readonly type: "string";
+        readonly title: "Algorithm";
+        readonly description: "JWT signing algorithm, e.g. RS256, ES256 (for private_key_jwt auth)";
+    };
+    readonly auth_jwt_bearer_assertion: {
+        readonly type: "string";
+        readonly format: "credential";
+        readonly title: "JWT Assertion";
+        readonly description: "Pre-built JWT assertion (for static_private_key_jwt auth)";
+    };
+    readonly auth_redirect_url: {
+        readonly type: "string";
+        readonly format: "uri";
+        readonly title: "Redirect URL";
+        readonly description: "OAuth redirect URL (for authorization_code auth)";
+    };
+    readonly auth_scope: {
+        readonly type: "string";
+        readonly title: "Scope";
+        readonly description: "OAuth scope (space-separated)";
+    };
+    readonly auth_client_name: {
+        readonly type: "string";
+        readonly title: "Client Name";
+        readonly description: "Optional OAuth client display name";
+    };
+    readonly auth_jwt_lifetime_seconds: {
+        readonly type: "number";
+        readonly title: "JWT Lifetime";
+        readonly description: "JWT lifetime in seconds (default: 300)";
+        readonly minimum: 1;
+    };
     readonly transport: {
         readonly type: "string";
         readonly enum: readonly ["stdio", "sse", "streamable-http"];
@@ -51,6 +115,8 @@ export interface McpServerConfig {
     command?: string;
     args?: string[];
     env?: Record<string, string>;
+    auth?: McpAuthConfig;
+    auth_type?: string;
 }
 export declare function createMcpClient(config: McpServerConfig, signal?: AbortSignal): Promise<{
     client: Client;

package/dist/mcp/McpClientUtil.node.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"McpClientUtil.node.d.ts","sourceRoot":"","sources":["../../src/mcp/McpClientUtil.node.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAK1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAC;AAG/E,eAAO,MAAM,iBAAiB,8CAA+C,CAAC;AAE9E,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8BqB,CAAC;AAExD,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,eAAe,EACvB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,CAAC,CAwEnD;AAED,eAAO,MAAM,gBAAgB;;CAE5B,CAAC"}
+{"version":3,"file":"McpClientUtil.node.d.ts","sourceRoot":"","sources":["../../src/mcp/McpClientUtil.node.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAK1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAC;AAI/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAIpD,eAAO,MAAM,iBAAiB,8CAA+C,CAAC;AAE9E,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+BqB,CAAC;AAExD,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,IAAI,CAAC,EAAE,aAAa,CAAC;IAErB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,eAAe,EACvB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,CAAC,CAwGnD;AAED,eAAO,MAAM,gBAAgB;;CAE5B,CAAC"}