cauthy-auth 0.12.0 → 0.14.0

package/dist/mcp.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/mcp.ts","../src/verify.ts"],"sourcesContent":["// An MCP server (or any API) that AI agents use as one of your people.\n//\n//   import { mcpAuth } from 'cauthy-auth/mcp'\n//   const auth = mcpAuth({ resource: 'https://mcp.example.com/mcp', scopes: ['books:read'] })\n//\n//   // Fetch-style (Hono, Next.js, Workers, Bun, Deno):\n//   export default { fetch: auth.protect((request, agent) => handleMcp(request, agent)) }\n//\n//   // Express or plain Node, with the MCP TypeScript SDK (its transport reads req.auth):\n//   app.use(auth.middleware())\n//\n// How an agent gets in, as the MCP specification lays it out: it calls the\n// server, which answers 401 and points at its protected resource metadata\n// (RFC 9728); that names Cauthy as the authorization server; the agent\n// registers itself there, sends the person to sign in and allow it, and comes\n// back with a token issued for this server alone (its `aud`). This module is\n// the server's half: the metadata, the 401 that points at it, and checking\n// the token. The resource must be registered in Cauthy's dashboard (AI\n// agents), with the same address, for the workspace whose people use it.\n\nimport { jwtVerify, type JWTVerifyGetKey } from 'jose'\nimport { keysOf } from './verify'\n\n/** The person an agent acts for, and what they allowed it. */\nexport interface AgentIdentity {\n  /** The person. */\n  userId: string\n  tenantId: string\n  email?: string\n  /** The person's roles in the workspace. */\n  roles: string[]\n  /** What the person allowed the agent to do here. */\n  scopes: string[]\n  /** The agent (its client_id at Cauthy). */\n  clientId: string\n  /** UTC, ISO 8601. */\n  expiresAt: string\n  /** The token as it arrived. */\n  token: string\n}\n\nexport interface McpAuthOptions {\n  /** This server's address, as registered in Cauthy. Default: `CAUTHY_MCP_RESOURCE`. */\n  resource?: string\n  /** Cauthy's address. Default: `CAUTHY_ISSUER`. */\n  issuer?: string\n  /** Scopes every call needs. Default: none. */\n  scopes?: string[]\n  /** The scopes this server understands, to tell agents (`scopes_supported`). Default: `scopes`. */\n  scopesSupported?: string[]\n  /** A name for the server, shown by some agents. */\n  resourceName?: string\n  /** Cauthy's keys. Default: fetched from the issuer and cached. */\n  jwks?: JWTVerifyGetKey\n  /** The moment to verify at. Default: now. */\n  now?: () => Date\n}\n\n/** A token refused: `status` is 401 (no token, or not a good one) or 403 (a scope missing). */\nexport class McpAuthError extends Error {\n  constructor(\n    readonly status: 401 | 403,\n    readonly code: 'invalid_request' | 'invalid_token' | 'insufficient_scope',\n    readonly description: string,\n  ) {\n    super(`cauthy-auth: ${description}`)\n    this.name = 'McpAuthError'\n  }\n}\n\n/** What the MCP TypeScript SDK reads from `req.auth` (its AuthInfo). */\nexport interface McpAuthInfo {\n  token: string\n  clientId: string\n  scopes: string[]\n  /** Seconds since the epoch. */\n  expiresAt: number\n  resource: URL\n  extra: { userId: string; tenantId: string; email?: string; roles: string[] }\n}\n\nexport interface McpAuth {\n  /** This server's address, in the form Cauthy compares it in. */\n  resource: string\n  /** Where the protected resource metadata is served. */\n  metadataUrl: string\n  /** The protected resource metadata (RFC 9728). */\n  metadata(): Record<string, unknown>\n  /** The metadata's paths: `/.well-known/oauth-protected-resource` plus this server's path. */\n  metadataPaths: string[]\n  /** Verifies the `Authorization: Bearer` of a request (or a token). Throws `McpAuthError`. */\n  verify(from: string | Request | Headers, needs?: string[]): Promise<AgentIdentity>\n  /** The answer to a refused token: 401 or 403, with the `WWW-Authenticate` that points an agent at Cauthy. */\n  challenge(error?: McpAuthError): Response\n  /** The metadata, when the request asks for it; `null` otherwise. */\n  handleMetadata(request: Request): Response | null\n  /** Wraps a fetch-style handler: serves the metadata, refuses what has no good token, passes the rest with who it is. */\n  protect(handler: (request: Request, agent: AgentIdentity) => Response | Promise<Response>, needs?: string[]): (request: Request) => Promise<Response>\n  /**\n   * Connect-style middleware (Express, Node's http): serves the metadata,\n   * refuses what has no good token, and sets `req.agent` and `req.auth` —\n   * what the MCP TypeScript SDK's transport hands its tools as `authInfo`.\n   */\n  middleware(needs?: string[]): (req: NodeRequest, res: NodeResponse, next: (err?: unknown) => void) => void\n}\n\n// The slice of Node's (and Express's) request and response this needs.\ninterface NodeRequest {\n  method?: string\n  url?: string\n  originalUrl?: string\n  headers: Record<string, string | string[] | undefined>\n  auth?: McpAuthInfo\n  agent?: AgentIdentity\n}\ninterface NodeResponse {\n  statusCode: number\n  setHeader(name: string, value: string): unknown\n  end(body?: string): unknown\n}\n\nfunction env(name: string): string | undefined {\n  return typeof process !== 'undefined' ? process.env?.[name] : undefined\n}\n\n/**\n * The address in the one form Cauthy keeps it: scheme and host in lower case,\n * no default port, no trailing slash, no query, no fragment.\n */\nexport function canonicalResource(raw: string): string {\n  let u: URL\n  try {\n    u = new URL(raw.trim())\n  } catch {\n    throw new Error(`cauthy-auth: resource ${JSON.stringify(raw)} is not an absolute address`)\n  }\n  const local = u.hostname === 'localhost' || u.hostname === '127.0.0.1' || u.hostname === '[::1]'\n  if (u.protocol !== 'https:' && !(u.protocol === 'http:' && local)) {\n    throw new Error('cauthy-auth: resource must be an https address')\n  }\n  if (u.search !== '' || u.hash !== '') throw new Error('cauthy-auth: resource may not have a query or a fragment')\n  return `${u.protocol}//${u.host}${u.pathname.replace(/\\/+$/, '')}`\n}\n\nfunction bearer(from: string | Request | Headers): string {\n  if (typeof from === 'string') return from.replace(/^Bearer\\s+/i, '').trim()\n  const header = (from instanceof Headers ? from : from.headers).get('authorization') ?? ''\n  return /^Bearer\\s+/i.test(header) ? header.replace(/^Bearer\\s+/i, '').trim() : ''\n}\n\nfunction quoted(v: string): string {\n  return `\"${v.replace(/[\"\\\\]/g, '')}\"`\n}\n\n/** Protects an MCP server with Cauthy. */\nexport function mcpAuth(options: McpAuthOptions = {}): McpAuth {\n  const rawResource = options.resource ?? env('CAUTHY_MCP_RESOURCE') ?? ''\n  if (rawResource === '') throw new Error('cauthy-auth: resource (CAUTHY_MCP_RESOURCE) is not set')\n  const resource = canonicalResource(rawResource)\n  const issuer = (options.issuer ?? env('CAUTHY_ISSUER') ?? '').replace(/\\/+$/, '')\n  if (issuer === '') throw new Error('cauthy-auth: issuer (CAUTHY_ISSUER) is not set')\n  const required = options.scopes ?? []\n  const url = new URL(resource)\n  const path = url.pathname === '/' ? '' : url.pathname\n  const metadataPaths = [...new Set([`/.well-known/oauth-protected-resource${path}`, '/.well-known/oauth-protected-resource'])]\n  const metadataUrl = `${url.origin}${metadataPaths[0]}`\n\n  const metadata = () => ({\n    resource,\n    authorization_servers: [issuer],\n    bearer_methods_supported: ['header'],\n    scopes_supported: options.scopesSupported ?? required,\n    ...(options.resourceName ? { resource_name: options.resourceName } : {}),\n  })\n\n  const verify = async (from: string | Request | Headers, needs: string[] = []): Promise<AgentIdentity> => {\n    const token = bearer(from)\n    if (token === '') throw new McpAuthError(401, 'invalid_request', 'no access token')\n    let claims: Record<string, unknown>\n    try {\n      const verified = await jwtVerify(token, options.jwks ?? keysOf(issuer), {\n        algorithms: ['RS256'],\n        issuer,\n        audience: resource,\n        requiredClaims: ['exp', 'sub'],\n        currentDate: options.now?.(),\n      })\n      claims = verified.payload as Record<string, unknown>\n    } catch (err) {\n      throw new McpAuthError(401, 'invalid_token', err instanceof Error ? err.message : 'the token is not valid')\n    }\n    const clientId = typeof claims.client_id === 'string' ? claims.client_id : ''\n    if (clientId === '') throw new McpAuthError(401, 'invalid_token', 'not a token issued to an agent')\n    const scopes = typeof claims.scope === 'string' ? claims.scope.split(' ').filter(Boolean) : []\n    const missing = [...required, ...needs].filter((s) => !scopes.includes(s))\n    if (missing.length > 0) throw new McpAuthError(403, 'insufficient_scope', `this needs ${missing.join(' ')}`)\n    return {\n      userId: String(claims.sub),\n      tenantId: typeof claims.tid === 'string' ? claims.tid : '',\n      ...(typeof claims.email === 'string' && claims.email !== '' ? { email: claims.email } : {}),\n      roles: Array.isArray(claims.roles) ? claims.roles.filter((r): r is string => typeof r === 'string') : [],\n      scopes,\n      clientId,\n      expiresAt: new Date((claims.exp as number) * 1000).toISOString(),\n      token,\n    }\n  }\n\n  const authenticate = (error?: McpAuthError): string => {\n    const parts = [`resource_metadata=${quoted(metadataUrl)}`]\n    if (error && error.code !== 'invalid_request') {\n      parts.push(`error=${quoted(error.code)}`, `error_description=${quoted(error.description)}`)\n    }\n    // What to ask the person for: said when there is no token or it falls short.\n    const scope = error?.code === 'invalid_token' ? [] : required\n    if (scope.length > 0) parts.push(`scope=${quoted(scope.join(' '))}`)\n    return `Bearer ${parts.join(', ')}`\n  }\n\n  const challenge = (error?: McpAuthError): Response => {\n    const status = error?.status ?? 401\n    return new Response(JSON.stringify({ error: error?.code ?? 'invalid_request', error_description: error?.description ?? 'an access token is required' }), {\n      status,\n      headers: { 'content-type': 'application/json', 'www-authenticate': authenticate(error) },\n    })\n  }\n\n  const metadataResponse = () =>\n    new Response(JSON.stringify(metadata()), {\n      headers: { 'content-type': 'application/json', 'cache-control': 'public, max-age=3600', 'access-control-allow-origin': '*' },\n    })\n\n  const isMetadata = (pathname: string, method = 'GET') => method === 'GET' && metadataPaths.includes(pathname.replace(/\\/+$/, '') || '/')\n\n  const handleMetadata = (request: Request): Response | null =>\n    isMetadata(new URL(request.url).pathname, request.method) ? metadataResponse() : null\n\n  const toAuthInfo = (a: AgentIdentity): McpAuthInfo => ({\n    token: a.token,\n    clientId: a.clientId,\n    scopes: a.scopes,\n    expiresAt: Math.floor(new Date(a.expiresAt).getTime() / 1000),\n    resource: new URL(resource),\n    extra: { userId: a.userId, tenantId: a.tenantId, ...(a.email ? { email: a.email } : {}), roles: a.roles },\n  })\n\n  return {\n    resource,\n    metadataUrl,\n    metadataPaths,\n    metadata,\n    verify,\n    challenge,\n    handleMetadata,\n    protect(handler, needs) {\n      return async (request) => {\n        const meta = handleMetadata(request)\n        if (meta) return meta\n        let agent: AgentIdentity\n        try {\n          agent = await verify(request, needs)\n        } catch (err) {\n          if (err instanceof McpAuthError) return challenge(err)\n          throw err\n        }\n        return handler(request, agent)\n      }\n    },\n    middleware(needs) {\n      return (req, res, next) => {\n        const pathname = (req.originalUrl ?? req.url ?? '/').split('?')[0] ?? '/'\n        if (isMetadata(pathname, req.method)) {\n          res.statusCode = 200\n          res.setHeader('content-type', 'application/json')\n          res.setHeader('cache-control', 'public, max-age=3600')\n          res.setHeader('access-control-allow-origin', '*')\n          res.end(JSON.stringify(metadata()))\n          return\n        }\n        const raw = req.headers.authorization\n        const header = Array.isArray(raw) ? (raw[0] ?? '') : (raw ?? '')\n        verify(/^Bearer\\s+/i.test(header) ? header : '', needs).then(\n          (agent) => {\n            req.agent = agent\n            req.auth = toAuthInfo(agent)\n            next()\n          },\n          (err: unknown) => {\n            if (!(err instanceof McpAuthError)) return next(err)\n            res.statusCode = err.status\n            res.setHeader('content-type', 'application/json')\n            res.setHeader('www-authenticate', authenticate(err))\n            res.end(JSON.stringify({ error: err.code, error_description: err.description }))\n          },\n        )\n      }\n    },\n  }\n}\n","// A backend that is handed a Cauthy access token: is it real, and whose is it?\n//\n//   const who = await verifyToken(request)        // or the token itself\n//   who.userId, who.tenantId, who.roles\n//\n// Cauthy signs its tokens with a key it publishes (/.well-known/jwks.json), so\n// checking one needs no secret and no call to Cauthy per request: the keys are\n// fetched once and cached. Throws `CauthyTokenError` for anything else: answer\n// it 401.\n\nimport { createRemoteJWKSet, jwtVerify, type JWTVerifyGetKey } from 'jose'\n\n/** Who a verified access token belongs to. */\nexport interface TokenIdentity {\n  /** The person. For a system's own token, the client it identifies as. */\n  userId: string\n  tenantId: string\n  email?: string\n  roles: string[]\n  /** Set when the token is a system's own and not a person's. */\n  system?: string\n  /** UTC, ISO 8601. */\n  expiresAt: string\n  /** The token as it arrived, to pass on. */\n  token: string\n}\n\nexport class CauthyTokenError extends Error {\n  constructor(readonly reason: string) {\n    super(`cauthy-auth: token refused: ${reason}`)\n    this.name = 'CauthyTokenError'\n  }\n}\n\nexport interface VerifyTokenOptions {\n  /** Cauthy's address. Default: `CAUTHY_ISSUER`. */\n  issuer?: string\n  /** The audience the tokens must carry. Default: `CAUTHY_AUDIENCE`; unchecked when neither is set. */\n  audience?: string\n  /** Refuse a token of any other workspace. Default: `CAUTHY_TENANT_ID`; unchecked when neither is set. */\n  tenantId?: string\n  /** Cauthy's keys. Default: fetched from the issuer and cached. */\n  jwks?: JWTVerifyGetKey\n  /** The moment to verify at. Default: now. */\n  now?: Date\n}\n\nconst keys = new Map<string, JWTVerifyGetKey>()\n\n/** Cauthy's published keys, fetched once per issuer and cached. */\nexport function keysOf(issuer: string): JWTVerifyGetKey {\n  let set = keys.get(issuer)\n  if (set === undefined) {\n    set = createRemoteJWKSet(new URL(`${issuer}/.well-known/jwks.json`), { cooldownDuration: 30_000 })\n    keys.set(issuer, set)\n  }\n  return set\n}\n\nfunction env(name: string): string | undefined {\n  return typeof process !== 'undefined' ? process.env?.[name] : undefined\n}\n\nfunction bearer(from: string | Request | Headers): string {\n  if (typeof from === 'string') return from.replace(/^Bearer\\s+/i, '').trim()\n  const header = (from instanceof Headers ? from : from.headers).get('authorization') ?? ''\n  return /^Bearer\\s+/i.test(header) ? header.replace(/^Bearer\\s+/i, '').trim() : ''\n}\n\n/**\n * Verifies an access token (or the `Authorization: Bearer` of a request) and\n * answers who it belongs to. Checked: the signature, against Cauthy's\n * published keys; that Cauthy issued it; that it has not expired; and the\n * audience and the workspace, when given.\n */\nexport async function verifyToken(from: string | Request | Headers, options: VerifyTokenOptions = {}): Promise<TokenIdentity> {\n  const issuer = (options.issuer ?? env('CAUTHY_ISSUER') ?? '').replace(/\\/+$/, '')\n  if (issuer === '') throw new CauthyTokenError('issuer (CAUTHY_ISSUER) is not set')\n  const token = bearer(from)\n  if (token === '') throw new CauthyTokenError('no token')\n\n  let claims: Record<string, unknown>\n  try {\n    const verified = await jwtVerify(token, options.jwks ?? keysOf(issuer), {\n      algorithms: ['RS256'],\n      issuer,\n      audience: options.audience ?? env('CAUTHY_AUDIENCE'),\n      requiredClaims: ['exp', 'sub'],\n      currentDate: options.now,\n    })\n    claims = verified.payload as Record<string, unknown>\n  } catch (err) {\n    throw new CauthyTokenError(err instanceof Error ? err.message : 'bad signature')\n  }\n\n  const tenantId = typeof claims.tid === 'string' ? claims.tid : ''\n  const wanted = options.tenantId ?? env('CAUTHY_TENANT_ID')\n  if (wanted && tenantId !== wanted) throw new CauthyTokenError('issued for another workspace')\n\n  return {\n    userId: String(claims.sub),\n    tenantId,\n    ...(typeof claims.email === 'string' && claims.email !== '' ? { email: claims.email } : {}),\n    roles: Array.isArray(claims.roles) ? claims.roles.filter((r): r is string => typeof r === 'string') : [],\n    ...(typeof claims.sys === 'string' && claims.sys !== '' ? { system: claims.sys } : {}),\n    expiresAt: new Date((claims.exp as number) * 1000).toISOString(),\n    token,\n  }\n}\n"],"mappings":";AAoBA,SAAS,aAAAA,kBAAuC;;;ACVhD,SAAS,oBAAoB,iBAAuC;AAqCpE,IAAM,OAAO,oBAAI,IAA6B;AAGvC,SAAS,OAAO,QAAiC;AACtD,MAAI,MAAM,KAAK,IAAI,MAAM;AACzB,MAAI,QAAQ,QAAW;AACrB,UAAM,mBAAmB,IAAI,IAAI,GAAG,MAAM,wBAAwB,GAAG,EAAE,kBAAkB,IAAO,CAAC;AACjG,SAAK,IAAI,QAAQ,GAAG;AAAA,EACtB;AACA,SAAO;AACT;;;ADEO,IAAM,eAAN,cAA2B,MAAM;AAAA,EACtC,YACW,QACA,MACA,aACT;AACA,UAAM,gBAAgB,WAAW,EAAE;AAJ1B;AACA;AACA;AAGT,SAAK,OAAO;AAAA,EACd;AAAA,EANW;AAAA,EACA;AAAA,EACA;AAKb;AAqDA,SAAS,IAAI,MAAkC;AAC7C,SAAO,OAAO,YAAY,cAAc,QAAQ,MAAM,IAAI,IAAI;AAChE;AAMO,SAAS,kBAAkB,KAAqB;AACrD,MAAI;AACJ,MAAI;AACF,QAAI,IAAI,IAAI,IAAI,KAAK,CAAC;AAAA,EACxB,QAAQ;AACN,UAAM,IAAI,MAAM,yBAAyB,KAAK,UAAU,GAAG,CAAC,6BAA6B;AAAA,EAC3F;AACA,QAAM,QAAQ,EAAE,aAAa,eAAe,EAAE,aAAa,eAAe,EAAE,aAAa;AACzF,MAAI,EAAE,aAAa,YAAY,EAAE,EAAE,aAAa,WAAW,QAAQ;AACjE,UAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AACA,MAAI,EAAE,WAAW,MAAM,EAAE,SAAS,GAAI,OAAM,IAAI,MAAM,0DAA0D;AAChH,SAAO,GAAG,EAAE,QAAQ,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS,QAAQ,QAAQ,EAAE,CAAC;AAClE;AAEA,SAAS,OAAO,MAA0C;AACxD,MAAI,OAAO,SAAS,SAAU,QAAO,KAAK,QAAQ,eAAe,EAAE,EAAE,KAAK;AAC1E,QAAM,UAAU,gBAAgB,UAAU,OAAO,KAAK,SAAS,IAAI,eAAe,KAAK;AACvF,SAAO,cAAc,KAAK,MAAM,IAAI,OAAO,QAAQ,eAAe,EAAE,EAAE,KAAK,IAAI;AACjF;AAEA,SAAS,OAAO,GAAmB;AACjC,SAAO,IAAI,EAAE,QAAQ,UAAU,EAAE,CAAC;AACpC;AAGO,SAAS,QAAQ,UAA0B,CAAC,GAAY;AAC7D,QAAM,cAAc,QAAQ,YAAY,IAAI,qBAAqB,KAAK;AACtE,MAAI,gBAAgB,GAAI,OAAM,IAAI,MAAM,wDAAwD;AAChG,QAAM,WAAW,kBAAkB,WAAW;AAC9C,QAAM,UAAU,QAAQ,UAAU,IAAI,eAAe,KAAK,IAAI,QAAQ,QAAQ,EAAE;AAChF,MAAI,WAAW,GAAI,OAAM,IAAI,MAAM,gDAAgD;AACnF,QAAM,WAAW,QAAQ,UAAU,CAAC;AACpC,QAAM,MAAM,IAAI,IAAI,QAAQ;AAC5B,QAAM,OAAO,IAAI,aAAa,MAAM,KAAK,IAAI;AAC7C,QAAM,gBAAgB,CAAC,GAAG,oBAAI,IAAI,CAAC,wCAAwC,IAAI,IAAI,uCAAuC,CAAC,CAAC;AAC5H,QAAM,cAAc,GAAG,IAAI,MAAM,GAAG,cAAc,CAAC,CAAC;AAEpD,QAAM,WAAW,OAAO;AAAA,IACtB;AAAA,IACA,uBAAuB,CAAC,MAAM;AAAA,IAC9B,0BAA0B,CAAC,QAAQ;AAAA,IACnC,kBAAkB,QAAQ,mBAAmB;AAAA,IAC7C,GAAI,QAAQ,eAAe,EAAE,eAAe,QAAQ,aAAa,IAAI,CAAC;AAAA,EACxE;AAEA,QAAM,SAAS,OAAO,MAAkC,QAAkB,CAAC,MAA8B;AACvG,UAAM,QAAQ,OAAO,IAAI;AACzB,QAAI,UAAU,GAAI,OAAM,IAAI,aAAa,KAAK,mBAAmB,iBAAiB;AAClF,QAAI;AACJ,QAAI;AACF,YAAM,WAAW,MAAMC,WAAU,OAAO,QAAQ,QAAQ,OAAO,MAAM,GAAG;AAAA,QACtE,YAAY,CAAC,OAAO;AAAA,QACpB;AAAA,QACA,UAAU;AAAA,QACV,gBAAgB,CAAC,OAAO,KAAK;AAAA,QAC7B,aAAa,QAAQ,MAAM;AAAA,MAC7B,CAAC;AACD,eAAS,SAAS;AAAA,IACpB,SAAS,KAAK;AACZ,YAAM,IAAI,aAAa,KAAK,iBAAiB,eAAe,QAAQ,IAAI,UAAU,wBAAwB;AAAA,IAC5G;AACA,UAAM,WAAW,OAAO,OAAO,cAAc,WAAW,OAAO,YAAY;AAC3E,QAAI,aAAa,GAAI,OAAM,IAAI,aAAa,KAAK,iBAAiB,gCAAgC;AAClG,UAAM,SAAS,OAAO,OAAO,UAAU,WAAW,OAAO,MAAM,MAAM,GAAG,EAAE,OAAO,OAAO,IAAI,CAAC;AAC7F,UAAM,UAAU,CAAC,GAAG,UAAU,GAAG,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,SAAS,CAAC,CAAC;AACzE,QAAI,QAAQ,SAAS,EAAG,OAAM,IAAI,aAAa,KAAK,sBAAsB,cAAc,QAAQ,KAAK,GAAG,CAAC,EAAE;AAC3G,WAAO;AAAA,MACL,QAAQ,OAAO,OAAO,GAAG;AAAA,MACzB,UAAU,OAAO,OAAO,QAAQ,WAAW,OAAO,MAAM;AAAA,MACxD,GAAI,OAAO,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;AAAA,MACzF,OAAO,MAAM,QAAQ,OAAO,KAAK,IAAI,OAAO,MAAM,OAAO,CAAC,MAAmB,OAAO,MAAM,QAAQ,IAAI,CAAC;AAAA,MACvG;AAAA,MACA;AAAA,MACA,WAAW,IAAI,KAAM,OAAO,MAAiB,GAAI,EAAE,YAAY;AAAA,MAC/D;AAAA,IACF;AAAA,EACF;AAEA,QAAM,eAAe,CAAC,UAAiC;AACrD,UAAM,QAAQ,CAAC,qBAAqB,OAAO,WAAW,CAAC,EAAE;AACzD,QAAI,SAAS,MAAM,SAAS,mBAAmB;AAC7C,YAAM,KAAK,SAAS,OAAO,MAAM,IAAI,CAAC,IAAI,qBAAqB,OAAO,MAAM,WAAW,CAAC,EAAE;AAAA,IAC5F;AAEA,UAAM,QAAQ,OAAO,SAAS,kBAAkB,CAAC,IAAI;AACrD,QAAI,MAAM,SAAS,EAAG,OAAM,KAAK,SAAS,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE;AACnE,WAAO,UAAU,MAAM,KAAK,IAAI,CAAC;AAAA,EACnC;AAEA,QAAM,YAAY,CAAC,UAAmC;AACpD,UAAM,SAAS,OAAO,UAAU;AAChC,WAAO,IAAI,SAAS,KAAK,UAAU,EAAE,OAAO,OAAO,QAAQ,mBAAmB,mBAAmB,OAAO,eAAe,8BAA8B,CAAC,GAAG;AAAA,MACvJ;AAAA,MACA,SAAS,EAAE,gBAAgB,oBAAoB,oBAAoB,aAAa,KAAK,EAAE;AAAA,IACzF,CAAC;AAAA,EACH;AAEA,QAAM,mBAAmB,MACvB,IAAI,SAAS,KAAK,UAAU,SAAS,CAAC,GAAG;AAAA,IACvC,SAAS,EAAE,gBAAgB,oBAAoB,iBAAiB,wBAAwB,+BAA+B,IAAI;AAAA,EAC7H,CAAC;AAEH,QAAM,aAAa,CAAC,UAAkB,SAAS,UAAU,WAAW,SAAS,cAAc,SAAS,SAAS,QAAQ,QAAQ,EAAE,KAAK,GAAG;AAEvI,QAAM,iBAAiB,CAAC,YACtB,WAAW,IAAI,IAAI,QAAQ,GAAG,EAAE,UAAU,QAAQ,MAAM,IAAI,iBAAiB,IAAI;AAEnF,QAAM,aAAa,CAAC,OAAmC;AAAA,IACrD,OAAO,EAAE;AAAA,IACT,UAAU,EAAE;AAAA,IACZ,QAAQ,EAAE;AAAA,IACV,WAAW,KAAK,MAAM,IAAI,KAAK,EAAE,SAAS,EAAE,QAAQ,IAAI,GAAI;AAAA,IAC5D,UAAU,IAAI,IAAI,QAAQ;AAAA,IAC1B,OAAO,EAAE,QAAQ,EAAE,QAAQ,UAAU,EAAE,UAAU,GAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,GAAI,OAAO,EAAE,MAAM;AAAA,EAC1G;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,SAAS,OAAO;AACtB,aAAO,OAAO,YAAY;AACxB,cAAM,OAAO,eAAe,OAAO;AACnC,YAAI,KAAM,QAAO;AACjB,YAAI;AACJ,YAAI;AACF,kBAAQ,MAAM,OAAO,SAAS,KAAK;AAAA,QACrC,SAAS,KAAK;AACZ,cAAI,eAAe,aAAc,QAAO,UAAU,GAAG;AACrD,gBAAM;AAAA,QACR;AACA,eAAO,QAAQ,SAAS,KAAK;AAAA,MAC/B;AAAA,IACF;AAAA,IACA,WAAW,OAAO;AAChB,aAAO,CAAC,KAAK,KAAK,SAAS;AACzB,cAAM,YAAY,IAAI,eAAe,IAAI,OAAO,KAAK,MAAM,GAAG,EAAE,CAAC,KAAK;AACtE,YAAI,WAAW,UAAU,IAAI,MAAM,GAAG;AACpC,cAAI,aAAa;AACjB,cAAI,UAAU,gBAAgB,kBAAkB;AAChD,cAAI,UAAU,iBAAiB,sBAAsB;AACrD,cAAI,UAAU,+BAA+B,GAAG;AAChD,cAAI,IAAI,KAAK,UAAU,SAAS,CAAC,CAAC;AAClC;AAAA,QACF;AACA,cAAM,MAAM,IAAI,QAAQ;AACxB,cAAM,SAAS,MAAM,QAAQ,GAAG,IAAK,IAAI,CAAC,KAAK,KAAO,OAAO;AAC7D,eAAO,cAAc,KAAK,MAAM,IAAI,SAAS,IAAI,KAAK,EAAE;AAAA,UACtD,CAAC,UAAU;AACT,gBAAI,QAAQ;AACZ,gBAAI,OAAO,WAAW,KAAK;AAC3B,iBAAK;AAAA,UACP;AAAA,UACA,CAAC,QAAiB;AAChB,gBAAI,EAAE,eAAe,cAAe,QAAO,KAAK,GAAG;AACnD,gBAAI,aAAa,IAAI;AACrB,gBAAI,UAAU,gBAAgB,kBAAkB;AAChD,gBAAI,UAAU,oBAAoB,aAAa,GAAG,CAAC;AACnD,gBAAI,IAAI,KAAK,UAAU,EAAE,OAAO,IAAI,MAAM,mBAAmB,IAAI,YAAY,CAAC,CAAC;AAAA,UACjF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;","names":["jwtVerify","jwtVerify"]}

package/dist/react.d.mts

@@ -258,6 +258,13 @@ interface AuthMethods {
      * page that cannot, or a browser that refuses to here, sends the person.
      */
     passkeyOnCauthy: boolean;
+    /**
+     * The workspace's Cloudflare Turnstile site key, when it asks for the
+     * challenge: signing in, creating an account, and asking for a sign-in link
+     * or a new password then take its answer (`captchaToken`). The ready-made
+     * forms show it themselves.
+     */
+    captchaSiteKey?: string;
 }
 /** A passkey of the signed-in account. Moments are UTC. */
 interface Passkey {
@@ -279,6 +286,26 @@ interface Account$1 {
     mfaEnabled: boolean;
 }
 /** Somewhere the person is signed in. Moments are UTC. */
+/** An AI agent the person allowed to act for them on one of the workspace's servers. */
+interface ConnectedAgent {
+    id: string;
+    /** The name the agent gave itself (Claude, Cursor…): not checked by anyone. */
+    name: string;
+    /** Where the agent receives its access: the one thing about it that is sure. */
+    redirectHost: string;
+    resource: {
+        name: string;
+        uri: string;
+    };
+    /** What the person allowed it, in their words. */
+    scopes: {
+        name: string;
+        description: string;
+    }[];
+    /** UTC, ISO 8601. */
+    connectedAt: string;
+    lastUsedAt: string;
+}
 interface AccountSession {
     /** "Mac · Chrome", or "" when the browser did not say. */
     device: string;
@@ -299,6 +326,17 @@ interface LinkedIdentity {
     /** When it was linked, in UTC (ISO 8601). */
     linkedAt: string;
 }
+/** How an account takes its second step. */
+interface SecondStep {
+    totp: boolean;
+    /** The phone codes are sent to, masked (`+57 ••• ••• 4567`). */
+    phone: {
+        number: string;
+        channel: string;
+    } | null;
+    /** The ways the workspace sends codes to phones. */
+    phoneChannels: string[];
+}
 interface AccountClient {
     /** The account, or null when nobody is signed in. */
     get(): Promise<Account$1 | null>;
@@ -337,6 +375,30 @@ interface AccountClient {
         }): Promise<AuthResult<'renewed', {
             recoveryCodes: string[];
         }>>;
+        /**
+         * How the account takes its second step: an authenticator app, a phone
+         * (masked), and the ways the workspace sends codes to phones (`sms`,
+         * `whatsapp`; none when it has no Twilio account for it).
+         */
+        factors(): Promise<SecondStep | null>;
+        /** Adds a phone as the second step: a code is sent to it, for `verifyPhone`. */
+        addPhone(form: {
+            phone: string;
+            channel: 'sms' | 'whatsapp';
+            password: string;
+        }): Promise<AuthResult<'sent', {
+            sentTo: string;
+            channel: string;
+        }>>;
+        /** Proves the phone with the code it received. `recoveryCodes` come with a first second step, shown this once. */
+        verifyPhone(form: {
+            code: string;
+        }): Promise<AuthResult<'enabled', {
+            recoveryCodes: string[];
+        }>>;
+        removePhone(form: {
+            password: string;
+        }): Promise<AuthResult<'removed'>>;
     };
     /**
      * Asks to sign in with another address. Nothing changes yet: the new address
@@ -370,6 +432,12 @@ interface AccountClient {
     sessions(): Promise<AccountSession[]>;
     /** Signs the account out everywhere, here too. */
     signOutEverywhere(): Promise<AuthResult<'signed_out'>>;
+    /** The AI agents the person connected. */
+    agents(): Promise<ConnectedAgent[]>;
+    /** Disconnects an agent: it loses its access within minutes. */
+    disconnectAgent(id: string): Promise<AuthResult<'disconnected', {
+        id: string;
+    }>>;
     /** The account's passkeys. */
     passkeys(): Promise<Passkey[]>;
     /**
@@ -393,6 +461,7 @@ interface AuthClient {
         email(form: {
             email: string;
             password: string;
+            captchaToken?: string;
         }): Promise<AuthResult<'signed_in', {
             session: PublicSession;
         }> | AuthResult<'mfa_required'>>;
@@ -402,9 +471,23 @@ interface AuthClient {
         }): Promise<AuthResult<'signed_in', {
             session: PublicSession;
         }>>;
+        /** While the second step is asked for: whether the account has an authenticator app, and the phone (masked) a code can be sent to. */
+        mfaMethods(): Promise<AuthResult<'ok', {
+            totp: boolean;
+            phone: {
+                number: string;
+                channel: string;
+            } | null;
+        }>>;
+        /** Sends a code to the account's phone, by SMS or WhatsApp; `mfa` takes it. A few per sign-in. */
+        mfaSendCode(): Promise<AuthResult<'sent', {
+            sentTo: string;
+            channel: string;
+        }>>;
         /** Mails a link that signs the person in. The answer is the same whether or not the address has an account. */
         magicLink(form: {
             email: string;
+            captchaToken?: string;
         }): Promise<AuthResult<'sent'>>;
         /** Signs in with the token the mailed link opened the page with (`ml_token`). */
         magicLinkVerify(form: {
@@ -480,6 +563,7 @@ interface AuthClient {
             email: string;
             password: string;
             name?: string;
+            captchaToken?: string;
         }): Promise<AuthResult<'signed_in', {
             session: PublicSession;
         }> | AuthResult<'verification_required', {
@@ -489,6 +573,7 @@ interface AuthClient {
     /** Mails a link to choose a new password. The answer is the same whether or not the address has an account. */
     forgotPassword(form: {
         email: string;
+        captchaToken?: string;
     }): Promise<AuthResult<'sent'>>;
     /** Sets the new password, with the token the mailed link opened the page with (`token`). */
     resetPassword(form: {
@@ -542,6 +627,20 @@ interface AuthTexts {
     sendLink: string;
     linkSent: string;
     codeHelp: string;
+    /** The second step when it is a phone only. */
+    codeHelpPhone: string;
+    /** "{to}" is the phone, masked. */
+    sendCodeSms: string;
+    sendCodeWhatsapp: string;
+    codeSent: string;
+    phone: string;
+    phoneHelp: string;
+    phoneOn: string;
+    phoneOff: string;
+    addPhone: string;
+    removePhone: string;
+    bySms: string;
+    byWhatsapp: string;
     verify: string;
     checkEmail: string;
     backToSignIn: string;
@@ -581,6 +680,10 @@ interface AuthTexts {
     passkeyUnnamed: string;
     sessions: string;
     signOutEverywhere: string;
+    agents: string;
+    agentsHelp: string;
+    disconnect: string;
+    anAgent: string;
     unknownDevice: string;
     emailAddress: string;
     newEmail: string;
@@ -734,4 +837,4 @@ declare function useSession(): SessionContext;
  */
 declare function useAuth(): AuthClient & Pick<SessionContext, 'session' | 'status' | 'refresh'>;
 
-export { Account, type AccountClient, type Account$1 as AccountDetails, type AccountProps, type AccountSession, type AuthClient, type AuthError, type AuthFormProps, type AuthMethods, type AuthResult, type AuthTexts, CauthyProvider, type CauthyProviderProps, ForgotPassword, GoogleOneTap, type GoogleOneTapProps, type JsonValue, type LinkedIdentity, type Passkey, type PermissionOf, type Policy, type PublicSession, ResetPassword, type RoleOf, type SessionContext, type SessionOrganization, type SessionUser, SignIn, SignUp, VerifyEmail, can, canAutofillPasskeys, canUsePasskeys, createAuthClient, definePolicy, useAuth, useSession };
+export { Account, type AccountClient, type Account$1 as AccountDetails, type AccountProps, type AccountSession, type AuthClient, type AuthError, type AuthFormProps, type AuthMethods, type AuthResult, type AuthTexts, CauthyProvider, type CauthyProviderProps, type ConnectedAgent, ForgotPassword, GoogleOneTap, type GoogleOneTapProps, type JsonValue, type LinkedIdentity, type Passkey, type PermissionOf, type Policy, type PublicSession, ResetPassword, type RoleOf, type SecondStep, type SessionContext, type SessionOrganization, type SessionUser, SignIn, SignUp, VerifyEmail, can, canAutofillPasskeys, canUsePasskeys, createAuthClient, definePolicy, useAuth, useSession };

package/dist/react.d.ts

@@ -258,6 +258,13 @@ interface AuthMethods {
      * page that cannot, or a browser that refuses to here, sends the person.
      */
     passkeyOnCauthy: boolean;
+    /**
+     * The workspace's Cloudflare Turnstile site key, when it asks for the
+     * challenge: signing in, creating an account, and asking for a sign-in link
+     * or a new password then take its answer (`captchaToken`). The ready-made
+     * forms show it themselves.
+     */
+    captchaSiteKey?: string;
 }
 /** A passkey of the signed-in account. Moments are UTC. */
 interface Passkey {
@@ -279,6 +286,26 @@ interface Account$1 {
     mfaEnabled: boolean;
 }
 /** Somewhere the person is signed in. Moments are UTC. */
+/** An AI agent the person allowed to act for them on one of the workspace's servers. */
+interface ConnectedAgent {
+    id: string;
+    /** The name the agent gave itself (Claude, Cursor…): not checked by anyone. */
+    name: string;
+    /** Where the agent receives its access: the one thing about it that is sure. */
+    redirectHost: string;
+    resource: {
+        name: string;
+        uri: string;
+    };
+    /** What the person allowed it, in their words. */
+    scopes: {
+        name: string;
+        description: string;
+    }[];
+    /** UTC, ISO 8601. */
+    connectedAt: string;
+    lastUsedAt: string;
+}
 interface AccountSession {
     /** "Mac · Chrome", or "" when the browser did not say. */
     device: string;
@@ -299,6 +326,17 @@ interface LinkedIdentity {
     /** When it was linked, in UTC (ISO 8601). */
     linkedAt: string;
 }
+/** How an account takes its second step. */
+interface SecondStep {
+    totp: boolean;
+    /** The phone codes are sent to, masked (`+57 ••• ••• 4567`). */
+    phone: {
+        number: string;
+        channel: string;
+    } | null;
+    /** The ways the workspace sends codes to phones. */
+    phoneChannels: string[];
+}
 interface AccountClient {
     /** The account, or null when nobody is signed in. */
     get(): Promise<Account$1 | null>;
@@ -337,6 +375,30 @@ interface AccountClient {
         }): Promise<AuthResult<'renewed', {
             recoveryCodes: string[];
         }>>;
+        /**
+         * How the account takes its second step: an authenticator app, a phone
+         * (masked), and the ways the workspace sends codes to phones (`sms`,
+         * `whatsapp`; none when it has no Twilio account for it).
+         */
+        factors(): Promise<SecondStep | null>;
+        /** Adds a phone as the second step: a code is sent to it, for `verifyPhone`. */
+        addPhone(form: {
+            phone: string;
+            channel: 'sms' | 'whatsapp';
+            password: string;
+        }): Promise<AuthResult<'sent', {
+            sentTo: string;
+            channel: string;
+        }>>;
+        /** Proves the phone with the code it received. `recoveryCodes` come with a first second step, shown this once. */
+        verifyPhone(form: {
+            code: string;
+        }): Promise<AuthResult<'enabled', {
+            recoveryCodes: string[];
+        }>>;
+        removePhone(form: {
+            password: string;
+        }): Promise<AuthResult<'removed'>>;
     };
     /**
      * Asks to sign in with another address. Nothing changes yet: the new address
@@ -370,6 +432,12 @@ interface AccountClient {
     sessions(): Promise<AccountSession[]>;
     /** Signs the account out everywhere, here too. */
     signOutEverywhere(): Promise<AuthResult<'signed_out'>>;
+    /** The AI agents the person connected. */
+    agents(): Promise<ConnectedAgent[]>;
+    /** Disconnects an agent: it loses its access within minutes. */
+    disconnectAgent(id: string): Promise<AuthResult<'disconnected', {
+        id: string;
+    }>>;
     /** The account's passkeys. */
     passkeys(): Promise<Passkey[]>;
     /**
@@ -393,6 +461,7 @@ interface AuthClient {
         email(form: {
             email: string;
             password: string;
+            captchaToken?: string;
         }): Promise<AuthResult<'signed_in', {
             session: PublicSession;
         }> | AuthResult<'mfa_required'>>;
@@ -402,9 +471,23 @@ interface AuthClient {
         }): Promise<AuthResult<'signed_in', {
             session: PublicSession;
         }>>;
+        /** While the second step is asked for: whether the account has an authenticator app, and the phone (masked) a code can be sent to. */
+        mfaMethods(): Promise<AuthResult<'ok', {
+            totp: boolean;
+            phone: {
+                number: string;
+                channel: string;
+            } | null;
+        }>>;
+        /** Sends a code to the account's phone, by SMS or WhatsApp; `mfa` takes it. A few per sign-in. */
+        mfaSendCode(): Promise<AuthResult<'sent', {
+            sentTo: string;
+            channel: string;
+        }>>;
         /** Mails a link that signs the person in. The answer is the same whether or not the address has an account. */
         magicLink(form: {
             email: string;
+            captchaToken?: string;
         }): Promise<AuthResult<'sent'>>;
         /** Signs in with the token the mailed link opened the page with (`ml_token`). */
         magicLinkVerify(form: {
@@ -480,6 +563,7 @@ interface AuthClient {
             email: string;
             password: string;
             name?: string;
+            captchaToken?: string;
         }): Promise<AuthResult<'signed_in', {
             session: PublicSession;
         }> | AuthResult<'verification_required', {
@@ -489,6 +573,7 @@ interface AuthClient {
     /** Mails a link to choose a new password. The answer is the same whether or not the address has an account. */
     forgotPassword(form: {
         email: string;
+        captchaToken?: string;
     }): Promise<AuthResult<'sent'>>;
     /** Sets the new password, with the token the mailed link opened the page with (`token`). */
     resetPassword(form: {
@@ -542,6 +627,20 @@ interface AuthTexts {
     sendLink: string;
     linkSent: string;
     codeHelp: string;
+    /** The second step when it is a phone only. */
+    codeHelpPhone: string;
+    /** "{to}" is the phone, masked. */
+    sendCodeSms: string;
+    sendCodeWhatsapp: string;
+    codeSent: string;
+    phone: string;
+    phoneHelp: string;
+    phoneOn: string;
+    phoneOff: string;
+    addPhone: string;
+    removePhone: string;
+    bySms: string;
+    byWhatsapp: string;
     verify: string;
     checkEmail: string;
     backToSignIn: string;
@@ -581,6 +680,10 @@ interface AuthTexts {
     passkeyUnnamed: string;
     sessions: string;
     signOutEverywhere: string;
+    agents: string;
+    agentsHelp: string;
+    disconnect: string;
+    anAgent: string;
     unknownDevice: string;
     emailAddress: string;
     newEmail: string;
@@ -734,4 +837,4 @@ declare function useSession(): SessionContext;
  */
 declare function useAuth(): AuthClient & Pick<SessionContext, 'session' | 'status' | 'refresh'>;
 
-export { Account, type AccountClient, type Account$1 as AccountDetails, type AccountProps, type AccountSession, type AuthClient, type AuthError, type AuthFormProps, type AuthMethods, type AuthResult, type AuthTexts, CauthyProvider, type CauthyProviderProps, ForgotPassword, GoogleOneTap, type GoogleOneTapProps, type JsonValue, type LinkedIdentity, type Passkey, type PermissionOf, type Policy, type PublicSession, ResetPassword, type RoleOf, type SessionContext, type SessionOrganization, type SessionUser, SignIn, SignUp, VerifyEmail, can, canAutofillPasskeys, canUsePasskeys, createAuthClient, definePolicy, useAuth, useSession };
+export { Account, type AccountClient, type Account$1 as AccountDetails, type AccountProps, type AccountSession, type AuthClient, type AuthError, type AuthFormProps, type AuthMethods, type AuthResult, type AuthTexts, CauthyProvider, type CauthyProviderProps, type ConnectedAgent, ForgotPassword, GoogleOneTap, type GoogleOneTapProps, type JsonValue, type LinkedIdentity, type Passkey, type PermissionOf, type Policy, type PublicSession, ResetPassword, type RoleOf, type SecondStep, type SessionContext, type SessionOrganization, type SessionUser, SignIn, SignUp, VerifyEmail, can, canAutofillPasskeys, canUsePasskeys, createAuthClient, definePolicy, useAuth, useSession };