agentic-qe 3.3.4 → 3.4.0

package/v3/dist/adapters/a2a/auth/token-store.d.ts

@@ -0,0 +1,278 @@
+/**
+ * A2A Token Store
+ *
+ * In-memory token storage with TTL support for OAuth 2.0 tokens.
+ * Provides storage for access tokens, refresh tokens, and authorization codes.
+ *
+ * @module adapters/a2a/auth/token-store
+ */
+/**
+ * Base claims shared by all token types
+ */
+export interface BaseTokenClaims {
+    /** Client ID */
+    readonly clientId: string;
+    /** Granted scopes */
+    readonly scopes: string[];
+    /** When the token was issued (Unix timestamp) */
+    readonly issuedAt: number;
+    /** When the token expires (Unix timestamp) */
+    readonly expiresAt: number;
+}
+/**
+ * Access token claims
+ */
+export interface AccessTokenClaims extends BaseTokenClaims {
+    /** Token type */
+    readonly tokenType: 'access';
+    /** JWT ID (jti claim) */
+    readonly jti: string;
+    /** Audience (if specified) */
+    readonly audience?: string;
+}
+/**
+ * Refresh token claims
+ */
+export interface RefreshTokenClaims extends BaseTokenClaims {
+    /** Token type */
+    readonly tokenType: 'refresh';
+    /** Token ID */
+    readonly tokenId: string;
+    /** Associated access token JTI */
+    readonly accessTokenJti?: string;
+    /** Number of times this refresh token has been used */
+    readonly useCount: number;
+}
+/**
+ * Authorization code claims
+ */
+export interface AuthorizationCodeClaims {
+    /** Client ID */
+    readonly clientId: string;
+    /** Requested scopes */
+    readonly scopes: string[];
+    /** Redirect URI (must match on exchange) */
+    readonly redirectUri: string;
+    /** State parameter (if provided) */
+    readonly state?: string;
+    /** Code challenge for PKCE */
+    readonly codeChallenge?: string;
+    /** Code challenge method for PKCE */
+    readonly codeChallengeMethod?: 'S256' | 'plain';
+    /** When the code was issued (Unix timestamp) */
+    readonly issuedAt: number;
+    /** When the code expires (Unix timestamp) */
+    readonly expiresAt: number;
+    /** Whether the code has been used */
+    used: boolean;
+}
+/**
+ * Union of all token claims types
+ */
+export type TokenClaims = AccessTokenClaims | RefreshTokenClaims;
+/**
+ * Token store configuration
+ */
+export interface TokenStoreConfig {
+    /** Cleanup interval in milliseconds (default: 60000 = 1 minute) */
+    readonly cleanupInterval?: number;
+    /** Maximum tokens to store (0 = unlimited) */
+    readonly maxTokens?: number;
+    /** Whether to enable automatic cleanup (default: true) */
+    readonly enableAutoCleanup?: boolean;
+}
+/**
+ * Default token store configuration
+ */
+export declare const DEFAULT_TOKEN_STORE_CONFIG: Required<TokenStoreConfig>;
+/**
+ * Token store statistics
+ */
+export interface TokenStoreStats {
+    /** Number of access tokens */
+    readonly accessTokenCount: number;
+    /** Number of refresh tokens */
+    readonly refreshTokenCount: number;
+    /** Number of authorization codes */
+    readonly authCodeCount: number;
+    /** Number of revoked tokens */
+    readonly revokedTokenCount: number;
+    /** Last cleanup timestamp */
+    readonly lastCleanup: number | null;
+    /** Total tokens expired and cleaned up */
+    readonly totalExpiredCleaned: number;
+}
+/**
+ * In-memory token store with TTL support
+ *
+ * Provides storage for OAuth 2.0 tokens with automatic cleanup
+ * of expired tokens.
+ */
+export declare class TokenStore {
+    private readonly config;
+    private readonly accessTokens;
+    private readonly refreshTokens;
+    private readonly authorizationCodes;
+    private readonly revokedTokens;
+    private cleanupTimer?;
+    private lastCleanup;
+    private totalExpiredCleaned;
+    constructor(config?: TokenStoreConfig);
+    /**
+     * Store an access token
+     *
+     * @param token - The token string (JWT)
+     * @param claims - The token claims
+     */
+    storeAccessToken(token: string, claims: Omit<AccessTokenClaims, 'tokenType'>): void;
+    /**
+     * Get access token claims
+     *
+     * @param token - The token string
+     * @returns The token claims or null if not found/expired/revoked
+     */
+    getAccessTokenClaims(token: string): AccessTokenClaims | null;
+    /**
+     * Check if an access token is valid
+     *
+     * @param token - The token string
+     * @returns True if the token is valid
+     */
+    isAccessTokenValid(token: string): boolean;
+    /**
+     * Store a refresh token
+     *
+     * @param token - The token string
+     * @param claims - The token claims
+     */
+    storeRefreshToken(token: string, claims: Omit<RefreshTokenClaims, 'tokenType'>): void;
+    /**
+     * Get refresh token claims
+     *
+     * @param token - The token string
+     * @returns The token claims or null if not found/expired/revoked
+     */
+    getRefreshTokenClaims(token: string): RefreshTokenClaims | null;
+    /**
+     * Increment the use count for a refresh token
+     *
+     * @param token - The refresh token
+     * @returns The updated claims or null if not found
+     */
+    incrementRefreshTokenUseCount(token: string): RefreshTokenClaims | null;
+    /**
+     * Store an authorization code
+     *
+     * @param code - The authorization code
+     * @param claims - The code claims
+     */
+    storeAuthorizationCode(code: string, claims: Omit<AuthorizationCodeClaims, 'used'>): void;
+    /**
+     * Get authorization code claims
+     *
+     * @param code - The authorization code
+     * @returns The code claims or null if not found/expired/used
+     */
+    getAuthorizationCodeClaims(code: string): AuthorizationCodeClaims | null;
+    /**
+     * Mark an authorization code as used
+     *
+     * @param code - The authorization code
+     * @returns True if the code was marked as used
+     */
+    markAuthorizationCodeUsed(code: string): boolean;
+    /**
+     * Consume an authorization code (get and mark as used)
+     *
+     * @param code - The authorization code
+     * @returns The code claims or null if not valid
+     */
+    consumeAuthorizationCode(code: string): AuthorizationCodeClaims | null;
+    /**
+     * Revoke a token
+     *
+     * @param token - The token string
+     * @returns True if the token was revoked
+     */
+    revokeToken(token: string): boolean;
+    /**
+     * Revoke all tokens for a client
+     *
+     * @param clientId - The client ID
+     * @returns Number of tokens revoked
+     */
+    revokeTokensByClient(clientId: string): number;
+    /**
+     * Check if a token is revoked
+     *
+     * @param token - The token string
+     * @returns True if the token is revoked
+     */
+    isRevoked(token: string): boolean;
+    /**
+     * Get claims for any token type
+     *
+     * @param token - The token string
+     * @returns The token claims or null
+     */
+    getTokenClaims(token: string): TokenClaims | null;
+    /**
+     * Check if a token exists and is valid
+     *
+     * @param token - The token string
+     * @returns True if the token is valid
+     */
+    isTokenValid(token: string): boolean;
+    /**
+     * Clean up expired tokens
+     *
+     * @returns Number of tokens cleaned up
+     */
+    cleanup(): number;
+    /**
+     * Start the automatic cleanup timer
+     */
+    private startCleanupTimer;
+    /**
+     * Stop the automatic cleanup timer
+     */
+    stopCleanupTimer(): void;
+    /**
+     * Check capacity and evict if necessary
+     */
+    private checkCapacity;
+    /**
+     * Evict the oldest tokens
+     *
+     * @param count - Number of tokens to evict
+     */
+    private evictOldestTokens;
+    /**
+     * Check if a timestamp has expired
+     */
+    private isExpired;
+    /**
+     * Get store statistics
+     */
+    getStats(): TokenStoreStats;
+    /**
+     * Clear all tokens
+     */
+    clear(): void;
+    /**
+     * Destroy the store
+     */
+    destroy(): void;
+    /**
+     * Get the total number of tokens
+     */
+    get size(): number;
+}
+/**
+ * Create a new TokenStore instance
+ *
+ * @param config - Store configuration
+ * @returns A new TokenStore
+ */
+export declare function createTokenStore(config?: TokenStoreConfig): TokenStore;
+//# sourceMappingURL=token-store.d.ts.map

package/v3/dist/adapters/a2a/auth/token-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-store.d.ts","sourceRoot":"","sources":["../../../../src/adapters/a2a/auth/token-store.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,gBAAgB;IAChB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,qBAAqB;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAE1B,iDAAiD;IACjD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,8CAA8C;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,iBAAkB,SAAQ,eAAe;IACxD,iBAAiB;IACjB,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;IAE7B,yBAAyB;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAErB,8BAA8B;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAmB,SAAQ,eAAe;IACzD,iBAAiB;IACjB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAE9B,eAAe;IACf,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,kCAAkC;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAEjC,uDAAuD;IACvD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,gBAAgB;IAChB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,uBAAuB;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAE1B,4CAA4C;IAC5C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,oCAAoC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAExB,8BAA8B;IAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEhC,qCAAqC;IACrC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAEhD,gDAAgD;IAChD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,6CAA6C;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,qCAAqC;IACrC,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,iBAAiB,GAAG,kBAAkB,CAAC;AAMjE;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,mEAAmE;IACnE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAElC,8CAA8C;IAC9C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B,0DAA0D;IAC1D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CACtC;AAED;;GAEG;AACH,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,gBAAgB,CAIjE,CAAC;AAMF;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,8BAA8B;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAElC,+BAA+B;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IAEnC,oCAAoC;IACpC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAE/B,+BAA+B;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IAEnC,6BAA6B;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAEpC,0CAA0C;IAC1C,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC;AAMD;;;;;GAKG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;IACpD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6C;IAC1E,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA8C;IAC5E,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAmD;IACtF,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA0B;IACxD,OAAO,CAAC,YAAY,CAAC,CAAiC;IACtD,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,mBAAmB,CAAK;gBAEpB,MAAM,GAAE,gBAAqB;IAYzC;;;;;OAKG;IACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,GAAG,IAAI;IAWnF;;;;;OAKG;IACH,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI;IAoB7D;;;;;OAKG;IACH,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAQ1C;;;;;OAKG;IACH,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,CAAC,GAAG,IAAI;IAWrF;;;;;OAKG;IACH,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI;IAkB/D;;;;;OAKG;IACH,6BAA6B,CAAC,KAAK,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI;IAmBvE;;;;;OAKG;IACH,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,uBAAuB,EAAE,MAAM,CAAC,GAAG,IAAI;IAOzF;;;;;OAKG;IACH,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,uBAAuB,GAAG,IAAI;IAoBxE;;;;;OAKG;IACH,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAUhD;;;;;OAKG;IACH,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,uBAAuB,GAAG,IAAI;IActE;;;;;OAKG;IACH,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAWnC;;;;;OAKG;IACH,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAsB9C;;;;;OAKG;IACH,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAQjC;;;;;OAKG;IACH,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IASjD;;;;;OAKG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAQpC;;;;OAIG;IACH,OAAO,IAAI,MAAM;IA6CjB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAWzB;;OAEG;IACH,gBAAgB,IAAI,IAAI;IAOxB;;OAEG;IACH,OAAO,CAAC,aAAa;IAkBrB;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAyBzB;;OAEG;IACH,OAAO,CAAC,SAAS;IASjB;;OAEG;IACH,QAAQ,IAAI,eAAe;IAW3B;;OAEG;IACH,KAAK,IAAI,IAAI;IAOb;;OAEG;IACH,OAAO,IAAI,IAAI;IAKf;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF;AAMD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,GAAE,gBAAqB,GAAG,UAAU,CAE1E"}