cauthy-auth 0.14.0 → 0.16.0

package/README.md

@@ -101,7 +101,7 @@ import 'cauthy-auth/styles.css'
 
 Or draw them with your own `components` and `classNames`, and pass `unstyled`. The dashboard can start the look from your stylesheet (shadcn/ui and Tailwind, Stackmyth, or variables of your own); `npx cauthy-auth theme --css src/app/globals.css` reads it the same way from a terminal.
 
-Connect your application to Cauthy in one step, from Cauthy's dashboard ("Connect a System") or from a terminal. In the application's folder, `init` reads its framework (Next.js, TanStack Start, SvelteKit, Express, Hono, Fastify), makes the client, writes every variable to its env file, `CAUTHY_SECRET` included, and lays down the route and a sign-in page, never over a file that is there:
+Connect your application to Cauthy in one step, from Cauthy's dashboard ("Connect a System") or from a terminal. In the application's folder, `init` reads its framework (Next.js, TanStack Start, React Router or Remix, SvelteKit, Vite + React, Express, Hono, Fastify), makes the client, writes every variable to its env file, `CAUTHY_SECRET` included, and lays down the route and a sign-in page, never over a file that is there:
 
 ```bash
 npx cauthy-auth init
@@ -131,6 +131,13 @@ const auth = mcpAuth({ resource: 'https://mcp.example.com/mcp', scopes: ['books:
 app.use(auth.middleware())                    // or auth.protect(handler) for Request/Response
 ```
 
+When that server calls another of your servers for the person, it trades the agent's token for one for that server (token exchange, RFC 8693). Delegate the call and create the server's credentials in the dashboard first:
+
+```ts
+const auth = mcpAuth({ resource, clientId: process.env.CAUTHY_MCP_CLIENT_ID, clientSecret: process.env.CAUTHY_MCP_CLIENT_SECRET })
+const { accessToken } = await auth.exchange(req.agent, 'https://api.example.com', ['orders:read'])
+```
+
 The full guide is in Cauthy's documentation, under "Auth SDK".
 
 ## License

package/dist/cli.js

@@ -57,33 +57,41 @@ var import_node_path = require("path");
 var FRAMEWORK_NAMES = {
   next: "Next.js",
   "tanstack-start": "TanStack Start",
+  "react-router": "React Router",
   sveltekit: "SvelteKit",
   express: "Express",
   hono: "Hono",
-  fastify: "Fastify"
+  fastify: "Fastify",
+  "vite-react": "Vite + React"
 };
 function detect(pkg, has) {
   const deps = { ...pkg.devDependencies, ...pkg.dependencies };
-  const framework = deps.next ? "next" : deps["@tanstack/react-start"] ? "tanstack-start" : deps["@sveltejs/kit"] ? "sveltekit" : deps.hono ? "hono" : deps.fastify ? "fastify" : deps.express ? "express" : null;
-  const port = framework === "sveltekit" ? 5173 : 3e3;
+  const remix = Boolean(deps["@remix-run/react"] || deps["@remix-run/node"]);
+  const framework = deps.next ? "next" : deps["@tanstack/react-start"] ? "tanstack-start" : deps["@react-router/dev"] || remix ? "react-router" : deps["@sveltejs/kit"] ? "sveltekit" : deps.vite && deps.react && !deps.express && !deps.fastify ? "vite-react" : deps.hono ? "hono" : deps.fastify ? "fastify" : deps.express ? "express" : null;
+  const port = framework === "sveltekit" || framework === "vite-react" || framework === "react-router" && !(remix && !deps.vite) ? 5173 : 3e3;
   let root = has("src") ? "src" : "";
   let nextPagesOnly = false;
   if (framework === "next") {
     root = has("src/app") ? "src" : has("app") ? "" : has("src/pages") ? "src" : "";
     nextPagesOnly = !has("src/app") && !has("app");
   }
-  if (framework === "tanstack-start" || framework === "sveltekit") root = "src";
+  if (framework === "tanstack-start" || framework === "sveltekit" || framework === "vite-react") root = "src";
+  if (framework === "react-router") root = "app";
   const major = /(\d+)/.exec(deps.next ?? "");
+  const needs = ["cauthy-auth", ...framework === "vite-react" ? ["hono", "@hono/node-server"] : []];
   return {
     framework,
     ...nextPagesOnly ? { nextPagesOnly } : {},
     root,
+    ...framework === "react-router" && remix ? { remix } : {},
+    ...framework === "react-router" ? { fileRoutes: remix || Boolean(deps["@react-router/fs-routes"]) } : {},
     typescript: has("tsconfig.json") || Boolean(deps.typescript),
     esm: pkg.type === "module",
     ...framework === "next" && major ? { nextMajor: Number(major[1]) } : {},
     devUrl: `http://localhost:${port}`,
     system: systemName(pkg.name),
     installed: Boolean(deps["cauthy-auth"]),
+    toInstall: needs.filter((name) => !deps[name]),
     packageManager: has("pnpm-lock.yaml") ? "pnpm" : has("yarn.lock") ? "yarn" : has("bun.lockb") || has("bun.lock") ? "bun" : "npm"
   };
 }
@@ -100,9 +108,9 @@ function importPath(from, to) {
 function scaffold(d) {
   const ext = d.typescript ? "ts" : "js";
   const jsx = d.typescript ? "tsx" : "jsx";
-  const install = `${d.packageManager === "npm" ? "npm install" : `${d.packageManager} add`} cauthy-auth`;
+  const install = `${d.packageManager === "npm" ? "npm install" : `${d.packageManager} add`} ${d.toInstall.join(" ")}`;
   const dev = `${d.packageManager === "npm" ? "npm run" : d.packageManager} dev`;
-  const steps = d.installed ? [] : [`Install the package: ${install}`];
+  const steps = d.toInstall.length === 0 ? [] : [`Install the ${d.toInstall.length === 1 ? "package" : "packages"}: ${install}`];
   const files = [];
   const signIn = `${d.devUrl}/sign-in`;
   const hosted = `${d.devUrl}/api/auth/login`;
@@ -159,6 +167,49 @@ export const Route = createFileRoute('/sign-in')({ component: SignInPage })
       steps.push(`Start the application: ${dev}`, `Open ${signIn}`);
       return { files, steps, envFile: ".env", open: signIn };
     }
+    case "react-router": {
+      const authFile = join(d.root, `auth.server.${ext}`);
+      files.push({ path: authFile, content: PLAIN_AUTH });
+      const route = join(d.root, "routes", `api.auth.$.${ext}`);
+      const param = d.typescript ? "{ request }: { request: Request }" : "{ request }";
+      files.push({ path: route, content: `// Serves cauthy-auth: sign-in, return, session, sign-out.
+import { auth } from '${importPath(route, authFile)}'
+
+export const loader = (${param}) => auth.handler(request)
+export const action = (${param}) => auth.handler(request)
+` });
+      const page = join(d.root, "routes", `sign-in.${jsx}`);
+      files.push({ path: page, content: reactSignInPage("", "export default function SignInPage") });
+      if (!d.fileRoutes) {
+        const rel = (p) => import_node_path.posix.relative(d.root, p);
+        steps.push(`Add the two routes to ${join(d.root, `routes.${ext}`)}:
+
+  route('api/auth/*', '${rel(route)}'),
+  route('sign-in', '${rel(page)}'),`);
+      }
+      steps.push(`Start the application: ${dev}`, `Open ${signIn}`);
+      return { files, steps, envFile: ".env", open: signIn };
+    }
+    case "vite-react": {
+      const app = join("server", `app.${ext}`);
+      files.push({ path: join("server", `auth.${ext}`), content: PLAIN_AUTH });
+      files.push({ path: app, content: viteApp(d.typescript) });
+      files.push({ path: join("server", `index.${ext}`), content: VITE_SERVER });
+      files.push({ path: join("server", `vite.${ext}`), content: viteDev(d.typescript, `/${app}`) });
+      const page = join(d.root, `SignInPage.${jsx}`);
+      files.push({ path: page, content: reactSignInPage("", "export function SignInPage") });
+      const run = d.typescript ? "npx tsx server/index.ts" : "node server/index.js";
+      steps.push(
+        `Add the plugin that serves /api while developing to vite.config.${ext}:
+
+  import { cauthyDev } from './server/vite'
+  plugins: [react(), cauthyDev()]`,
+        `Start the application: ${dev}`,
+        `Open ${hosted}: Cauthy's sign-in page, and back. For a screen of your own, show <SignInPage /> from ${page} at /sign-in.`,
+        `In production, build the pages (vite build) and run ${run}: it serves them and /api.`
+      );
+      return { files, steps, envFile: ".env", open: hosted };
+    }
     case "sveltekit": {
       const authFile = join(d.root, "lib/server", `auth.${ext}`);
       files.push({ path: authFile, content: PLAIN_AUTH });
@@ -231,6 +282,62 @@ const { createCauthy } = require('cauthy-auth')
 
 exports.auth = createCauthy()
 `;
+function viteApp(ts) {
+  return `// The application's server side: cauthy-auth's routes under /api/auth, and
+// c.get('session') on every other /api request. While developing it runs
+// inside Vite (server/vite); in production server/index serves it with the
+// built pages.
+import { Hono } from 'hono'
+import { cauthyHono, requireSession${ts ? ", type CauthyVariables" : ""} } from 'cauthy-auth/hono'
+import { auth } from './auth.js'
+
+export const app = new Hono${ts ? "<{ Variables: CauthyVariables }>" : ""}()
+app.use('/api/*', cauthyHono(auth))
+
+// An API only a signed-in person may call: a 401 for anybody else.
+app.get('/api/me', requireSession, (c) => c.json(c.get('session')${ts ? "!" : ""}.user))
+`;
+}
+var VITE_SERVER = `// The application in production: the pages Vite built, and the API.
+import { serve } from '@hono/node-server'
+import { serveStatic } from '@hono/node-server/serve-static'
+import { app } from './app.js'
+
+app.use('/*', serveStatic({ root: './dist' }))
+// Any other path is a page of the single-page app.
+app.get('*', serveStatic({ path: './dist/index.html' }))
+
+const port = Number(process.env.PORT ?? 3000)
+serve({ fetch: app.fetch, port }, () => console.log(\`http://localhost:\${port}\`))
+`;
+function viteDev(ts, app) {
+  return `// While developing, Vite serves the pages and hands /api to the server's
+// app, on the same address: no proxy, and Cauthy sends people back to the
+// address the browser is on.
+//
+//   import { cauthyDev } from './server/vite'
+//   plugins: [react(), cauthyDev()]
+import { getRequestListener } from '@hono/node-server'
+import { loadEnv${ts ? ", type Plugin" : ""} } from 'vite'
+
+export function cauthyDev()${ts ? ": Plugin" : ""} {
+  return {
+    name: 'cauthy-dev',
+    configureServer(server) {
+      // The variables in the env file, which createCauthy() reads from the environment.
+      Object.assign(process.env, loadEnv(server.config.mode, server.config.envDir || server.config.root, 'CAUTHY_'))
+      server.middlewares.use((req, res, next) => {
+        if (!req.url?.startsWith('/api/')) return next()
+        // Loaded through Vite: a change to the server's files applies on the next request.
+        server.ssrLoadModule('${app}')
+          .then(({ app }) => getRequestListener(app.fetch)(req, res))
+          .catch(next)
+      })
+    },
+  }
+}
+`;
+}
 function reactSignInPage(head, declaration, tail = "") {
   return `${head}// The application's own sign-in page. <SignIn /> is the ready-made form: the
 // workspace's providers, passkeys, the second step and a sign-in link, drawn
@@ -912,9 +1019,10 @@ var INIT_HELP = `cauthy-auth init [options]
 
 Connects an application to Cauthy and leaves signing in working. Run it in
 the application's folder: it reads which framework the application is made
-with (Next.js, TanStack Start, SvelteKit, Express, Hono, Fastify), makes its
-client in Cauthy, writes the variables to its env file, and lays down the
-route and a sign-in page. A file that is already there is never written over.
+with (Next.js, TanStack Start, React Router or Remix, SvelteKit, Vite + React,
+Express, Hono, Fastify), makes its client in Cauthy, writes the variables to
+its env file, and lays down the route and a sign-in page. A file that is
+already there is never written over.
 
   --system <name>         The system's name: lowercase letters, digits, - or _.
                           Default: the package's name.
@@ -976,7 +1084,7 @@ ${INIT_HELP}`);
   const system = given["--system"] ?? found?.system;
   const appUrl = given["--app-url"] ?? found?.devUrl;
   if (!system || !appUrl) fail("no package.json here: give --system and --app-url\n\n" + INIT_HELP);
-  if (found?.framework) process.stdout.write(`Found ${FRAMEWORK_NAMES[found.framework]}.
+  if (found?.framework) process.stdout.write(`Found ${found.remix ? "Remix" : FRAMEWORK_NAMES[found.framework]}.
 `);
   const target = given["--write"] ?? plan?.envFile;
   let had = "";

package/dist/mcp.d.mts

@@ -16,6 +16,11 @@ interface AgentIdentity {
     expiresAt: string;
     /** The token as it arrived. */
     token: string;
+    /**
+     * Set when the token came by token exchange: the server that called this
+     * one for the person (the `act` claim's subject).
+     */
+    actor?: string;
 }
 interface McpAuthOptions {
     /** This server's address, as registered in Cauthy. Default: `CAUTHY_MCP_RESOURCE`. */
@@ -32,6 +37,40 @@ interface McpAuthOptions {
     jwks?: JWTVerifyGetKey;
     /** The moment to verify at. Default: now. */
     now?: () => Date;
+    /**
+     * Ask Cauthy, besides checking the token here, whether the person still
+     * allows the agent (RFC 7662). Then an agent is cut off the moment it is
+     * disconnected, not when its token runs out, at the price of a call to
+     * Cauthy per token every `cacheSeconds` (default 30). Default: off.
+     */
+    introspect?: boolean | {
+        cacheSeconds?: number;
+    };
+    /** The fetch to call Cauthy with. Default: the global one. */
+    fetch?: typeof fetch;
+    /**
+     * This server's client_id and secret at Cauthy, for token exchange (AI
+     * agents → the server → Server credentials). Defaults:
+     * `CAUTHY_MCP_CLIENT_ID`, `CAUTHY_MCP_CLIENT_SECRET`.
+     */
+    clientId?: string;
+    clientSecret?: string;
+}
+/** What a token exchange answers. */
+interface ExchangedToken {
+    /** The token for the other server, as the person. Send it as `Authorization: Bearer`. */
+    accessToken: string;
+    /** What it allows there. */
+    scopes: string[];
+    /** UTC, ISO 8601. Never later than the agent's own token. */
+    expiresAt: string;
+}
+/** A token exchange Cauthy refused, with the OAuth error it answered. */
+declare class CauthyExchangeError extends Error {
+    readonly status: number;
+    readonly code: string;
+    readonly description: string;
+    constructor(status: number, code: string, description: string);
 }
 /** A token refused: `status` is 401 (no token, or not a good one) or 403 (a scope missing). */
 declare class McpAuthError extends Error {
@@ -78,6 +117,13 @@ interface McpAuth {
      * what the MCP TypeScript SDK's transport hands its tools as `authInfo`.
      */
     middleware(needs?: string[]): (req: NodeRequest, res: NodeResponse, next: (err?: unknown) => void) => void;
+    /**
+     * Trades the agent's token this server received for one for another of the
+     * workspace's servers, to call it for the person (RFC 8693). Needs this
+     * server's `clientId` and `clientSecret`. Answers are kept until shortly
+     * before they expire. Throws `CauthyExchangeError` when Cauthy refuses.
+     */
+    exchange(from: string | AgentIdentity, target: string, scopes?: string[]): Promise<ExchangedToken>;
 }
 interface NodeRequest {
     method?: string;
@@ -100,4 +146,4 @@ declare function canonicalResource(raw: string): string;
 /** Protects an MCP server with Cauthy. */
 declare function mcpAuth(options?: McpAuthOptions): McpAuth;
 
-export { type AgentIdentity, type McpAuth, McpAuthError, type McpAuthInfo, type McpAuthOptions, canonicalResource, mcpAuth };
+export { type AgentIdentity, CauthyExchangeError, type ExchangedToken, type McpAuth, McpAuthError, type McpAuthInfo, type McpAuthOptions, canonicalResource, mcpAuth };

package/dist/mcp.d.ts

@@ -16,6 +16,11 @@ interface AgentIdentity {
     expiresAt: string;
     /** The token as it arrived. */
     token: string;
+    /**
+     * Set when the token came by token exchange: the server that called this
+     * one for the person (the `act` claim's subject).
+     */
+    actor?: string;
 }
 interface McpAuthOptions {
     /** This server's address, as registered in Cauthy. Default: `CAUTHY_MCP_RESOURCE`. */
@@ -32,6 +37,40 @@ interface McpAuthOptions {
     jwks?: JWTVerifyGetKey;
     /** The moment to verify at. Default: now. */
     now?: () => Date;
+    /**
+     * Ask Cauthy, besides checking the token here, whether the person still
+     * allows the agent (RFC 7662). Then an agent is cut off the moment it is
+     * disconnected, not when its token runs out, at the price of a call to
+     * Cauthy per token every `cacheSeconds` (default 30). Default: off.
+     */
+    introspect?: boolean | {
+        cacheSeconds?: number;
+    };
+    /** The fetch to call Cauthy with. Default: the global one. */
+    fetch?: typeof fetch;
+    /**
+     * This server's client_id and secret at Cauthy, for token exchange (AI
+     * agents → the server → Server credentials). Defaults:
+     * `CAUTHY_MCP_CLIENT_ID`, `CAUTHY_MCP_CLIENT_SECRET`.
+     */
+    clientId?: string;
+    clientSecret?: string;
+}
+/** What a token exchange answers. */
+interface ExchangedToken {
+    /** The token for the other server, as the person. Send it as `Authorization: Bearer`. */
+    accessToken: string;
+    /** What it allows there. */
+    scopes: string[];
+    /** UTC, ISO 8601. Never later than the agent's own token. */
+    expiresAt: string;
+}
+/** A token exchange Cauthy refused, with the OAuth error it answered. */
+declare class CauthyExchangeError extends Error {
+    readonly status: number;
+    readonly code: string;
+    readonly description: string;
+    constructor(status: number, code: string, description: string);
 }
 /** A token refused: `status` is 401 (no token, or not a good one) or 403 (a scope missing). */
 declare class McpAuthError extends Error {
@@ -78,6 +117,13 @@ interface McpAuth {
      * what the MCP TypeScript SDK's transport hands its tools as `authInfo`.
      */
     middleware(needs?: string[]): (req: NodeRequest, res: NodeResponse, next: (err?: unknown) => void) => void;
+    /**
+     * Trades the agent's token this server received for one for another of the
+     * workspace's servers, to call it for the person (RFC 8693). Needs this
+     * server's `clientId` and `clientSecret`. Answers are kept until shortly
+     * before they expire. Throws `CauthyExchangeError` when Cauthy refuses.
+     */
+    exchange(from: string | AgentIdentity, target: string, scopes?: string[]): Promise<ExchangedToken>;
 }
 interface NodeRequest {
     method?: string;
@@ -100,4 +146,4 @@ declare function canonicalResource(raw: string): string;
 /** Protects an MCP server with Cauthy. */
 declare function mcpAuth(options?: McpAuthOptions): McpAuth;
 
-export { type AgentIdentity, type McpAuth, McpAuthError, type McpAuthInfo, type McpAuthOptions, canonicalResource, mcpAuth };
+export { type AgentIdentity, CauthyExchangeError, type ExchangedToken, type McpAuth, McpAuthError, type McpAuthInfo, type McpAuthOptions, canonicalResource, mcpAuth };

package/dist/mcp.js

@@ -20,6 +20,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/mcp.ts
 var mcp_exports = {};
 __export(mcp_exports, {
+  CauthyExchangeError: () => CauthyExchangeError,
   McpAuthError: () => McpAuthError,
   canonicalResource: () => canonicalResource,
   mcpAuth: () => mcpAuth
@@ -40,6 +41,18 @@ function keysOf(issuer) {
 }
 
 // src/mcp.ts
+var CauthyExchangeError = class extends Error {
+  constructor(status, code, description) {
+    super(`cauthy-auth: token exchange refused (${code}): ${description}`);
+    this.status = status;
+    this.code = code;
+    this.description = description;
+    this.name = "CauthyExchangeError";
+  }
+  status;
+  code;
+  description;
+};
 var McpAuthError = class extends Error {
   constructor(status, code, description) {
     super(`cauthy-auth: ${description}`);
@@ -74,6 +87,9 @@ function bearer(from) {
   const header = (from instanceof Headers ? from : from.headers).get("authorization") ?? "";
   return /^Bearer\s+/i.test(header) ? header.replace(/^Bearer\s+/i, "").trim() : "";
 }
+function isActor(v) {
+  return typeof v === "object" && v !== null && typeof v.sub === "string";
+}
 function quoted(v) {
   return `"${v.replace(/["\\]/g, "")}"`;
 }
@@ -95,6 +111,29 @@ function mcpAuth(options = {}) {
     scopes_supported: options.scopesSupported ?? required,
     ...options.resourceName ? { resource_name: options.resourceName } : {}
   });
+  const introspect = options.introspect ? { cacheMs: ((typeof options.introspect === "object" ? options.introspect.cacheSeconds : void 0) ?? 30) * 1e3 } : null;
+  const answers = /* @__PURE__ */ new Map();
+  const stillAllowed = async (token, cacheMs) => {
+    const now = Date.now();
+    const kept = answers.get(token);
+    if (kept && kept.until > now) return kept.active;
+    let active = false;
+    try {
+      const res = await (options.fetch ?? fetch)(`${issuer}/v1/oauth/introspect`, {
+        method: "POST",
+        headers: { "content-type": "application/x-www-form-urlencoded", accept: "application/json" },
+        body: new URLSearchParams({ token })
+      });
+      if (!res.ok) throw new Error(`introspection answered ${res.status}`);
+      active = (await res.json()).active === true;
+    } catch (err) {
+      if (kept) return kept.active;
+      throw new McpAuthError(401, "invalid_token", `could not check the token with Cauthy: ${err instanceof Error ? err.message : "unreachable"}`);
+    }
+    if (answers.size > 1e4) answers.clear();
+    answers.set(token, { active, until: now + cacheMs });
+    return active;
+  };
   const verify = async (from, needs = []) => {
     const token = bearer(from);
     if (token === "") throw new McpAuthError(401, "invalid_request", "no access token");
@@ -111,9 +150,10 @@ function mcpAuth(options = {}) {
     } catch (err) {
       throw new McpAuthError(401, "invalid_token", err instanceof Error ? err.message : "the token is not valid");
     }
-    const clientId = typeof claims.client_id === "string" ? claims.client_id : "";
-    if (clientId === "") throw new McpAuthError(401, "invalid_token", "not a token issued to an agent");
+    const clientId2 = typeof claims.client_id === "string" ? claims.client_id : "";
+    if (clientId2 === "") throw new McpAuthError(401, "invalid_token", "not a token issued to an agent");
     const scopes = typeof claims.scope === "string" ? claims.scope.split(" ").filter(Boolean) : [];
+    if (introspect && !await stillAllowed(token, introspect.cacheMs)) throw new McpAuthError(401, "invalid_token", "the token is no longer allowed: the agent was disconnected, or its access withdrawn");
     const missing = [...required, ...needs].filter((s) => !scopes.includes(s));
     if (missing.length > 0) throw new McpAuthError(403, "insufficient_scope", `this needs ${missing.join(" ")}`);
     return {
@@ -122,10 +162,58 @@ function mcpAuth(options = {}) {
       ...typeof claims.email === "string" && claims.email !== "" ? { email: claims.email } : {},
       roles: Array.isArray(claims.roles) ? claims.roles.filter((r) => typeof r === "string") : [],
       scopes,
-      clientId,
+      clientId: clientId2,
       expiresAt: new Date(claims.exp * 1e3).toISOString(),
-      token
+      token,
+      ...isActor(claims.act) ? { actor: claims.act.sub } : {}
+    };
+  };
+  const clientId = options.clientId ?? env("CAUTHY_MCP_CLIENT_ID") ?? "";
+  const clientSecret = options.clientSecret ?? env("CAUTHY_MCP_CLIENT_SECRET") ?? "";
+  const exchanged = /* @__PURE__ */ new Map();
+  const exchange = async (from, target, scopes = []) => {
+    if (clientId === "" || clientSecret === "") {
+      throw new Error("cauthy-auth: token exchange needs clientId and clientSecret (CAUTHY_MCP_CLIENT_ID, CAUTHY_MCP_CLIENT_SECRET)");
+    }
+    const subject = typeof from === "string" ? bearer(from) : from.token;
+    const to = canonicalResource(target);
+    const key = `${subject}
+${to}
+${scopes.join(" ")}`;
+    const kept = exchanged.get(key);
+    if (kept && kept.until > Date.now()) return { accessToken: kept.accessToken, scopes: kept.scopes, expiresAt: kept.expiresAt };
+    const res = await (options.fetch ?? fetch)(`${issuer}/v1/oauth/token`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/x-www-form-urlencoded",
+        accept: "application/json",
+        authorization: `Basic ${btoa(`${encodeURIComponent(clientId)}:${encodeURIComponent(clientSecret)}`)}`
+      },
+      body: new URLSearchParams({
+        grant_type: "urn:ietf:params:oauth:grant-type:token-exchange",
+        subject_token: subject,
+        subject_token_type: "urn:ietf:params:oauth:token-type:access_token",
+        resource: to,
+        ...scopes.length > 0 ? { scope: scopes.join(" ") } : {}
+      })
+    });
+    const body = await res.json().catch(() => ({}));
+    if (!res.ok || typeof body.access_token !== "string") {
+      throw new CauthyExchangeError(
+        res.status,
+        typeof body.error === "string" ? body.error : "server_error",
+        typeof body.error_description === "string" ? body.error_description : `Cauthy answered ${res.status}`
+      );
+    }
+    const expiresIn = typeof body.expires_in === "number" ? body.expires_in : 0;
+    const out = {
+      accessToken: body.access_token,
+      scopes: typeof body.scope === "string" ? body.scope.split(" ").filter(Boolean) : [],
+      expiresAt: new Date(Date.now() + expiresIn * 1e3).toISOString()
     };
+    if (exchanged.size > 1e4) exchanged.clear();
+    exchanged.set(key, { ...out, until: Date.now() + Math.max(0, expiresIn - 30) * 1e3 });
+    return out;
   };
   const authenticate = (error) => {
     const parts = [`resource_metadata=${quoted(metadataUrl)}`];
@@ -178,6 +266,7 @@ function mcpAuth(options = {}) {
         return handler(request, agent);
       };
     },
+    exchange,
     middleware(needs) {
       return (req, res, next) => {
         const pathname = (req.originalUrl ?? req.url ?? "/").split("?")[0] ?? "/";
@@ -211,6 +300,7 @@ function mcpAuth(options = {}) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  CauthyExchangeError,
   McpAuthError,
   canonicalResource,
   mcpAuth

package/dist/mcp.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/mcp.ts","../src/verify.ts"],"sourcesContent":["// An MCP server (or any API) that AI agents use as one of your people.\n//\n//   import { mcpAuth } from 'cauthy-auth/mcp'\n//   const auth = mcpAuth({ resource: 'https://mcp.example.com/mcp', scopes: ['books:read'] })\n//\n//   // Fetch-style (Hono, Next.js, Workers, Bun, Deno):\n//   export default { fetch: auth.protect((request, agent) => handleMcp(request, agent)) }\n//\n//   // Express or plain Node, with the MCP TypeScript SDK (its transport reads req.auth):\n//   app.use(auth.middleware())\n//\n// How an agent gets in, as the MCP specification lays it out: it calls the\n// server, which answers 401 and points at its protected resource metadata\n// (RFC 9728); that names Cauthy as the authorization server; the agent\n// registers itself there, sends the person to sign in and allow it, and comes\n// back with a token issued for this server alone (its `aud`). This module is\n// the server's half: the metadata, the 401 that points at it, and checking\n// the token. The resource must be registered in Cauthy's dashboard (AI\n// agents), with the same address, for the workspace whose people use it.\n\nimport { jwtVerify, type JWTVerifyGetKey } from 'jose'\nimport { keysOf } from './verify'\n\n/** The person an agent acts for, and what they allowed it. */\nexport interface AgentIdentity {\n  /** The person. */\n  userId: string\n  tenantId: string\n  email?: string\n  /** The person's roles in the workspace. */\n  roles: string[]\n  /** What the person allowed the agent to do here. */\n  scopes: string[]\n  /** The agent (its client_id at Cauthy). */\n  clientId: string\n  /** UTC, ISO 8601. */\n  expiresAt: string\n  /** The token as it arrived. */\n  token: string\n}\n\nexport interface McpAuthOptions {\n  /** This server's address, as registered in Cauthy. Default: `CAUTHY_MCP_RESOURCE`. */\n  resource?: string\n  /** Cauthy's address. Default: `CAUTHY_ISSUER`. */\n  issuer?: string\n  /** Scopes every call needs. Default: none. */\n  scopes?: string[]\n  /** The scopes this server understands, to tell agents (`scopes_supported`). Default: `scopes`. */\n  scopesSupported?: string[]\n  /** A name for the server, shown by some agents. */\n  resourceName?: string\n  /** Cauthy's keys. Default: fetched from the issuer and cached. */\n  jwks?: JWTVerifyGetKey\n  /** The moment to verify at. Default: now. */\n  now?: () => Date\n}\n\n/** A token refused: `status` is 401 (no token, or not a good one) or 403 (a scope missing). */\nexport class McpAuthError extends Error {\n  constructor(\n    readonly status: 401 | 403,\n    readonly code: 'invalid_request' | 'invalid_token' | 'insufficient_scope',\n    readonly description: string,\n  ) {\n    super(`cauthy-auth: ${description}`)\n    this.name = 'McpAuthError'\n  }\n}\n\n/** What the MCP TypeScript SDK reads from `req.auth` (its AuthInfo). */\nexport interface McpAuthInfo {\n  token: string\n  clientId: string\n  scopes: string[]\n  /** Seconds since the epoch. */\n  expiresAt: number\n  resource: URL\n  extra: { userId: string; tenantId: string; email?: string; roles: string[] }\n}\n\nexport interface McpAuth {\n  /** This server's address, in the form Cauthy compares it in. */\n  resource: string\n  /** Where the protected resource metadata is served. */\n  metadataUrl: string\n  /** The protected resource metadata (RFC 9728). */\n  metadata(): Record<string, unknown>\n  /** The metadata's paths: `/.well-known/oauth-protected-resource` plus this server's path. */\n  metadataPaths: string[]\n  /** Verifies the `Authorization: Bearer` of a request (or a token). Throws `McpAuthError`. */\n  verify(from: string | Request | Headers, needs?: string[]): Promise<AgentIdentity>\n  /** The answer to a refused token: 401 or 403, with the `WWW-Authenticate` that points an agent at Cauthy. */\n  challenge(error?: McpAuthError): Response\n  /** The metadata, when the request asks for it; `null` otherwise. */\n  handleMetadata(request: Request): Response | null\n  /** Wraps a fetch-style handler: serves the metadata, refuses what has no good token, passes the rest with who it is. */\n  protect(handler: (request: Request, agent: AgentIdentity) => Response | Promise<Response>, needs?: string[]): (request: Request) => Promise<Response>\n  /**\n   * Connect-style middleware (Express, Node's http): serves the metadata,\n   * refuses what has no good token, and sets `req.agent` and `req.auth` —\n   * what the MCP TypeScript SDK's transport hands its tools as `authInfo`.\n   */\n  middleware(needs?: string[]): (req: NodeRequest, res: NodeResponse, next: (err?: unknown) => void) => void\n}\n\n// The slice of Node's (and Express's) request and response this needs.\ninterface NodeRequest {\n  method?: string\n  url?: string\n  originalUrl?: string\n  headers: Record<string, string | string[] | undefined>\n  auth?: McpAuthInfo\n  agent?: AgentIdentity\n}\ninterface NodeResponse {\n  statusCode: number\n  setHeader(name: string, value: string): unknown\n  end(body?: string): unknown\n}\n\nfunction env(name: string): string | undefined {\n  return typeof process !== 'undefined' ? process.env?.[name] : undefined\n}\n\n/**\n * The address in the one form Cauthy keeps it: scheme and host in lower case,\n * no default port, no trailing slash, no query, no fragment.\n */\nexport function canonicalResource(raw: string): string {\n  let u: URL\n  try {\n    u = new URL(raw.trim())\n  } catch {\n    throw new Error(`cauthy-auth: resource ${JSON.stringify(raw)} is not an absolute address`)\n  }\n  const local = u.hostname === 'localhost' || u.hostname === '127.0.0.1' || u.hostname === '[::1]'\n  if (u.protocol !== 'https:' && !(u.protocol === 'http:' && local)) {\n    throw new Error('cauthy-auth: resource must be an https address')\n  }\n  if (u.search !== '' || u.hash !== '') throw new Error('cauthy-auth: resource may not have a query or a fragment')\n  return `${u.protocol}//${u.host}${u.pathname.replace(/\\/+$/, '')}`\n}\n\nfunction bearer(from: string | Request | Headers): string {\n  if (typeof from === 'string') return from.replace(/^Bearer\\s+/i, '').trim()\n  const header = (from instanceof Headers ? from : from.headers).get('authorization') ?? ''\n  return /^Bearer\\s+/i.test(header) ? header.replace(/^Bearer\\s+/i, '').trim() : ''\n}\n\nfunction quoted(v: string): string {\n  return `\"${v.replace(/[\"\\\\]/g, '')}\"`\n}\n\n/** Protects an MCP server with Cauthy. */\nexport function mcpAuth(options: McpAuthOptions = {}): McpAuth {\n  const rawResource = options.resource ?? env('CAUTHY_MCP_RESOURCE') ?? ''\n  if (rawResource === '') throw new Error('cauthy-auth: resource (CAUTHY_MCP_RESOURCE) is not set')\n  const resource = canonicalResource(rawResource)\n  const issuer = (options.issuer ?? env('CAUTHY_ISSUER') ?? '').replace(/\\/+$/, '')\n  if (issuer === '') throw new Error('cauthy-auth: issuer (CAUTHY_ISSUER) is not set')\n  const required = options.scopes ?? []\n  const url = new URL(resource)\n  const path = url.pathname === '/' ? '' : url.pathname\n  const metadataPaths = [...new Set([`/.well-known/oauth-protected-resource${path}`, '/.well-known/oauth-protected-resource'])]\n  const metadataUrl = `${url.origin}${metadataPaths[0]}`\n\n  const metadata = () => ({\n    resource,\n    authorization_servers: [issuer],\n    bearer_methods_supported: ['header'],\n    scopes_supported: options.scopesSupported ?? required,\n    ...(options.resourceName ? { resource_name: options.resourceName } : {}),\n  })\n\n  const verify = async (from: string | Request | Headers, needs: string[] = []): Promise<AgentIdentity> => {\n    const token = bearer(from)\n    if (token === '') throw new McpAuthError(401, 'invalid_request', 'no access token')\n    let claims: Record<string, unknown>\n    try {\n      const verified = await jwtVerify(token, options.jwks ?? keysOf(issuer), {\n        algorithms: ['RS256'],\n        issuer,\n        audience: resource,\n        requiredClaims: ['exp', 'sub'],\n        currentDate: options.now?.(),\n      })\n      claims = verified.payload as Record<string, unknown>\n    } catch (err) {\n      throw new McpAuthError(401, 'invalid_token', err instanceof Error ? err.message : 'the token is not valid')\n    }\n    const clientId = typeof claims.client_id === 'string' ? claims.client_id : ''\n    if (clientId === '') throw new McpAuthError(401, 'invalid_token', 'not a token issued to an agent')\n    const scopes = typeof claims.scope === 'string' ? claims.scope.split(' ').filter(Boolean) : []\n    const missing = [...required, ...needs].filter((s) => !scopes.includes(s))\n    if (missing.length > 0) throw new McpAuthError(403, 'insufficient_scope', `this needs ${missing.join(' ')}`)\n    return {\n      userId: String(claims.sub),\n      tenantId: typeof claims.tid === 'string' ? claims.tid : '',\n      ...(typeof claims.email === 'string' && claims.email !== '' ? { email: claims.email } : {}),\n      roles: Array.isArray(claims.roles) ? claims.roles.filter((r): r is string => typeof r === 'string') : [],\n      scopes,\n      clientId,\n      expiresAt: new Date((claims.exp as number) * 1000).toISOString(),\n      token,\n    }\n  }\n\n  const authenticate = (error?: McpAuthError): string => {\n    const parts = [`resource_metadata=${quoted(metadataUrl)}`]\n    if (error && error.code !== 'invalid_request') {\n      parts.push(`error=${quoted(error.code)}`, `error_description=${quoted(error.description)}`)\n    }\n    // What to ask the person for: said when there is no token or it falls short.\n    const scope = error?.code === 'invalid_token' ? [] : required\n    if (scope.length > 0) parts.push(`scope=${quoted(scope.join(' '))}`)\n    return `Bearer ${parts.join(', ')}`\n  }\n\n  const challenge = (error?: McpAuthError): Response => {\n    const status = error?.status ?? 401\n    return new Response(JSON.stringify({ error: error?.code ?? 'invalid_request', error_description: error?.description ?? 'an access token is required' }), {\n      status,\n      headers: { 'content-type': 'application/json', 'www-authenticate': authenticate(error) },\n    })\n  }\n\n  const metadataResponse = () =>\n    new Response(JSON.stringify(metadata()), {\n      headers: { 'content-type': 'application/json', 'cache-control': 'public, max-age=3600', 'access-control-allow-origin': '*' },\n    })\n\n  const isMetadata = (pathname: string, method = 'GET') => method === 'GET' && metadataPaths.includes(pathname.replace(/\\/+$/, '') || '/')\n\n  const handleMetadata = (request: Request): Response | null =>\n    isMetadata(new URL(request.url).pathname, request.method) ? metadataResponse() : null\n\n  const toAuthInfo = (a: AgentIdentity): McpAuthInfo => ({\n    token: a.token,\n    clientId: a.clientId,\n    scopes: a.scopes,\n    expiresAt: Math.floor(new Date(a.expiresAt).getTime() / 1000),\n    resource: new URL(resource),\n    extra: { userId: a.userId, tenantId: a.tenantId, ...(a.email ? { email: a.email } : {}), roles: a.roles },\n  })\n\n  return {\n    resource,\n    metadataUrl,\n    metadataPaths,\n    metadata,\n    verify,\n    challenge,\n    handleMetadata,\n    protect(handler, needs) {\n      return async (request) => {\n        const meta = handleMetadata(request)\n        if (meta) return meta\n        let agent: AgentIdentity\n        try {\n          agent = await verify(request, needs)\n        } catch (err) {\n          if (err instanceof McpAuthError) return challenge(err)\n          throw err\n        }\n        return handler(request, agent)\n      }\n    },\n    middleware(needs) {\n      return (req, res, next) => {\n        const pathname = (req.originalUrl ?? req.url ?? '/').split('?')[0] ?? '/'\n        if (isMetadata(pathname, req.method)) {\n          res.statusCode = 200\n          res.setHeader('content-type', 'application/json')\n          res.setHeader('cache-control', 'public, max-age=3600')\n          res.setHeader('access-control-allow-origin', '*')\n          res.end(JSON.stringify(metadata()))\n          return\n        }\n        const raw = req.headers.authorization\n        const header = Array.isArray(raw) ? (raw[0] ?? '') : (raw ?? '')\n        verify(/^Bearer\\s+/i.test(header) ? header : '', needs).then(\n          (agent) => {\n            req.agent = agent\n            req.auth = toAuthInfo(agent)\n            next()\n          },\n          (err: unknown) => {\n            if (!(err instanceof McpAuthError)) return next(err)\n            res.statusCode = err.status\n            res.setHeader('content-type', 'application/json')\n            res.setHeader('www-authenticate', authenticate(err))\n            res.end(JSON.stringify({ error: err.code, error_description: err.description }))\n          },\n        )\n      }\n    },\n  }\n}\n","// A backend that is handed a Cauthy access token: is it real, and whose is it?\n//\n//   const who = await verifyToken(request)        // or the token itself\n//   who.userId, who.tenantId, who.roles\n//\n// Cauthy signs its tokens with a key it publishes (/.well-known/jwks.json), so\n// checking one needs no secret and no call to Cauthy per request: the keys are\n// fetched once and cached. Throws `CauthyTokenError` for anything else: answer\n// it 401.\n\nimport { createRemoteJWKSet, jwtVerify, type JWTVerifyGetKey } from 'jose'\n\n/** Who a verified access token belongs to. */\nexport interface TokenIdentity {\n  /** The person. For a system's own token, the client it identifies as. */\n  userId: string\n  tenantId: string\n  email?: string\n  roles: string[]\n  /** Set when the token is a system's own and not a person's. */\n  system?: string\n  /** UTC, ISO 8601. */\n  expiresAt: string\n  /** The token as it arrived, to pass on. */\n  token: string\n}\n\nexport class CauthyTokenError extends Error {\n  constructor(readonly reason: string) {\n    super(`cauthy-auth: token refused: ${reason}`)\n    this.name = 'CauthyTokenError'\n  }\n}\n\nexport interface VerifyTokenOptions {\n  /** Cauthy's address. Default: `CAUTHY_ISSUER`. */\n  issuer?: string\n  /** The audience the tokens must carry. Default: `CAUTHY_AUDIENCE`; unchecked when neither is set. */\n  audience?: string\n  /** Refuse a token of any other workspace. Default: `CAUTHY_TENANT_ID`; unchecked when neither is set. */\n  tenantId?: string\n  /** Cauthy's keys. Default: fetched from the issuer and cached. */\n  jwks?: JWTVerifyGetKey\n  /** The moment to verify at. Default: now. */\n  now?: Date\n}\n\nconst keys = new Map<string, JWTVerifyGetKey>()\n\n/** Cauthy's published keys, fetched once per issuer and cached. */\nexport function keysOf(issuer: string): JWTVerifyGetKey {\n  let set = keys.get(issuer)\n  if (set === undefined) {\n    set = createRemoteJWKSet(new URL(`${issuer}/.well-known/jwks.json`), { cooldownDuration: 30_000 })\n    keys.set(issuer, set)\n  }\n  return set\n}\n\nfunction env(name: string): string | undefined {\n  return typeof process !== 'undefined' ? process.env?.[name] : undefined\n}\n\nfunction bearer(from: string | Request | Headers): string {\n  if (typeof from === 'string') return from.replace(/^Bearer\\s+/i, '').trim()\n  const header = (from instanceof Headers ? from : from.headers).get('authorization') ?? ''\n  return /^Bearer\\s+/i.test(header) ? header.replace(/^Bearer\\s+/i, '').trim() : ''\n}\n\n/**\n * Verifies an access token (or the `Authorization: Bearer` of a request) and\n * answers who it belongs to. Checked: the signature, against Cauthy's\n * published keys; that Cauthy issued it; that it has not expired; and the\n * audience and the workspace, when given.\n */\nexport async function verifyToken(from: string | Request | Headers, options: VerifyTokenOptions = {}): Promise<TokenIdentity> {\n  const issuer = (options.issuer ?? env('CAUTHY_ISSUER') ?? '').replace(/\\/+$/, '')\n  if (issuer === '') throw new CauthyTokenError('issuer (CAUTHY_ISSUER) is not set')\n  const token = bearer(from)\n  if (token === '') throw new CauthyTokenError('no token')\n\n  let claims: Record<string, unknown>\n  try {\n    const verified = await jwtVerify(token, options.jwks ?? keysOf(issuer), {\n      algorithms: ['RS256'],\n      issuer,\n      audience: options.audience ?? env('CAUTHY_AUDIENCE'),\n      requiredClaims: ['exp', 'sub'],\n      currentDate: options.now,\n    })\n    claims = verified.payload as Record<string, unknown>\n  } catch (err) {\n    throw new CauthyTokenError(err instanceof Error ? err.message : 'bad signature')\n  }\n\n  const tenantId = typeof claims.tid === 'string' ? claims.tid : ''\n  const wanted = options.tenantId ?? env('CAUTHY_TENANT_ID')\n  if (wanted && tenantId !== wanted) throw new CauthyTokenError('issued for another workspace')\n\n  return {\n    userId: String(claims.sub),\n    tenantId,\n    ...(typeof claims.email === 'string' && claims.email !== '' ? { email: claims.email } : {}),\n    roles: Array.isArray(claims.roles) ? claims.roles.filter((r): r is string => typeof r === 'string') : [],\n    ...(typeof claims.sys === 'string' && claims.sys !== '' ? { system: claims.sys } : {}),\n    expiresAt: new Date((claims.exp as number) * 1000).toISOString(),\n    token,\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAoBA,IAAAA,eAAgD;;;ACVhD,kBAAoE;AAqCpE,IAAM,OAAO,oBAAI,IAA6B;AAGvC,SAAS,OAAO,QAAiC;AACtD,MAAI,MAAM,KAAK,IAAI,MAAM;AACzB,MAAI,QAAQ,QAAW;AACrB,cAAM,gCAAmB,IAAI,IAAI,GAAG,MAAM,wBAAwB,GAAG,EAAE,kBAAkB,IAAO,CAAC;AACjG,SAAK,IAAI,QAAQ,GAAG;AAAA,EACtB;AACA,SAAO;AACT;;;ADEO,IAAM,eAAN,cAA2B,MAAM;AAAA,EACtC,YACW,QACA,MACA,aACT;AACA,UAAM,gBAAgB,WAAW,EAAE;AAJ1B;AACA;AACA;AAGT,SAAK,OAAO;AAAA,EACd;AAAA,EANW;AAAA,EACA;AAAA,EACA;AAKb;AAqDA,SAAS,IAAI,MAAkC;AAC7C,SAAO,OAAO,YAAY,cAAc,QAAQ,MAAM,IAAI,IAAI;AAChE;AAMO,SAAS,kBAAkB,KAAqB;AACrD,MAAI;AACJ,MAAI;AACF,QAAI,IAAI,IAAI,IAAI,KAAK,CAAC;AAAA,EACxB,QAAQ;AACN,UAAM,IAAI,MAAM,yBAAyB,KAAK,UAAU,GAAG,CAAC,6BAA6B;AAAA,EAC3F;AACA,QAAM,QAAQ,EAAE,aAAa,eAAe,EAAE,aAAa,eAAe,EAAE,aAAa;AACzF,MAAI,EAAE,aAAa,YAAY,EAAE,EAAE,aAAa,WAAW,QAAQ;AACjE,UAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AACA,MAAI,EAAE,WAAW,MAAM,EAAE,SAAS,GAAI,OAAM,IAAI,MAAM,0DAA0D;AAChH,SAAO,GAAG,EAAE,QAAQ,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS,QAAQ,QAAQ,EAAE,CAAC;AAClE;AAEA,SAAS,OAAO,MAA0C;AACxD,MAAI,OAAO,SAAS,SAAU,QAAO,KAAK,QAAQ,eAAe,EAAE,EAAE,KAAK;AAC1E,QAAM,UAAU,gBAAgB,UAAU,OAAO,KAAK,SAAS,IAAI,eAAe,KAAK;AACvF,SAAO,cAAc,KAAK,MAAM,IAAI,OAAO,QAAQ,eAAe,EAAE,EAAE,KAAK,IAAI;AACjF;AAEA,SAAS,OAAO,GAAmB;AACjC,SAAO,IAAI,EAAE,QAAQ,UAAU,EAAE,CAAC;AACpC;AAGO,SAAS,QAAQ,UAA0B,CAAC,GAAY;AAC7D,QAAM,cAAc,QAAQ,YAAY,IAAI,qBAAqB,KAAK;AACtE,MAAI,gBAAgB,GAAI,OAAM,IAAI,MAAM,wDAAwD;AAChG,QAAM,WAAW,kBAAkB,WAAW;AAC9C,QAAM,UAAU,QAAQ,UAAU,IAAI,eAAe,KAAK,IAAI,QAAQ,QAAQ,EAAE;AAChF,MAAI,WAAW,GAAI,OAAM,IAAI,MAAM,gDAAgD;AACnF,QAAM,WAAW,QAAQ,UAAU,CAAC;AACpC,QAAM,MAAM,IAAI,IAAI,QAAQ;AAC5B,QAAM,OAAO,IAAI,aAAa,MAAM,KAAK,IAAI;AAC7C,QAAM,gBAAgB,CAAC,GAAG,oBAAI,IAAI,CAAC,wCAAwC,IAAI,IAAI,uCAAuC,CAAC,CAAC;AAC5H,QAAM,cAAc,GAAG,IAAI,MAAM,GAAG,cAAc,CAAC,CAAC;AAEpD,QAAM,WAAW,OAAO;AAAA,IACtB;AAAA,IACA,uBAAuB,CAAC,MAAM;AAAA,IAC9B,0BAA0B,CAAC,QAAQ;AAAA,IACnC,kBAAkB,QAAQ,mBAAmB;AAAA,IAC7C,GAAI,QAAQ,eAAe,EAAE,eAAe,QAAQ,aAAa,IAAI,CAAC;AAAA,EACxE;AAEA,QAAM,SAAS,OAAO,MAAkC,QAAkB,CAAC,MAA8B;AACvG,UAAM,QAAQ,OAAO,IAAI;AACzB,QAAI,UAAU,GAAI,OAAM,IAAI,aAAa,KAAK,mBAAmB,iBAAiB;AAClF,QAAI;AACJ,QAAI;AACF,YAAM,WAAW,UAAM,wBAAU,OAAO,QAAQ,QAAQ,OAAO,MAAM,GAAG;AAAA,QACtE,YAAY,CAAC,OAAO;AAAA,QACpB;AAAA,QACA,UAAU;AAAA,QACV,gBAAgB,CAAC,OAAO,KAAK;AAAA,QAC7B,aAAa,QAAQ,MAAM;AAAA,MAC7B,CAAC;AACD,eAAS,SAAS;AAAA,IACpB,SAAS,KAAK;AACZ,YAAM,IAAI,aAAa,KAAK,iBAAiB,eAAe,QAAQ,IAAI,UAAU,wBAAwB;AAAA,IAC5G;AACA,UAAM,WAAW,OAAO,OAAO,cAAc,WAAW,OAAO,YAAY;AAC3E,QAAI,aAAa,GAAI,OAAM,IAAI,aAAa,KAAK,iBAAiB,gCAAgC;AAClG,UAAM,SAAS,OAAO,OAAO,UAAU,WAAW,OAAO,MAAM,MAAM,GAAG,EAAE,OAAO,OAAO,IAAI,CAAC;AAC7F,UAAM,UAAU,CAAC,GAAG,UAAU,GAAG,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,SAAS,CAAC,CAAC;AACzE,QAAI,QAAQ,SAAS,EAAG,OAAM,IAAI,aAAa,KAAK,sBAAsB,cAAc,QAAQ,KAAK,GAAG,CAAC,EAAE;AAC3G,WAAO;AAAA,MACL,QAAQ,OAAO,OAAO,GAAG;AAAA,MACzB,UAAU,OAAO,OAAO,QAAQ,WAAW,OAAO,MAAM;AAAA,MACxD,GAAI,OAAO,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;AAAA,MACzF,OAAO,MAAM,QAAQ,OAAO,KAAK,IAAI,OAAO,MAAM,OAAO,CAAC,MAAmB,OAAO,MAAM,QAAQ,IAAI,CAAC;AAAA,MACvG;AAAA,MACA;AAAA,MACA,WAAW,IAAI,KAAM,OAAO,MAAiB,GAAI,EAAE,YAAY;AAAA,MAC/D;AAAA,IACF;AAAA,EACF;AAEA,QAAM,eAAe,CAAC,UAAiC;AACrD,UAAM,QAAQ,CAAC,qBAAqB,OAAO,WAAW,CAAC,EAAE;AACzD,QAAI,SAAS,MAAM,SAAS,mBAAmB;AAC7C,YAAM,KAAK,SAAS,OAAO,MAAM,IAAI,CAAC,IAAI,qBAAqB,OAAO,MAAM,WAAW,CAAC,EAAE;AAAA,IAC5F;AAEA,UAAM,QAAQ,OAAO,SAAS,kBAAkB,CAAC,IAAI;AACrD,QAAI,MAAM,SAAS,EAAG,OAAM,KAAK,SAAS,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE;AACnE,WAAO,UAAU,MAAM,KAAK,IAAI,CAAC;AAAA,EACnC;AAEA,QAAM,YAAY,CAAC,UAAmC;AACpD,UAAM,SAAS,OAAO,UAAU;AAChC,WAAO,IAAI,SAAS,KAAK,UAAU,EAAE,OAAO,OAAO,QAAQ,mBAAmB,mBAAmB,OAAO,eAAe,8BAA8B,CAAC,GAAG;AAAA,MACvJ;AAAA,MACA,SAAS,EAAE,gBAAgB,oBAAoB,oBAAoB,aAAa,KAAK,EAAE;AAAA,IACzF,CAAC;AAAA,EACH;AAEA,QAAM,mBAAmB,MACvB,IAAI,SAAS,KAAK,UAAU,SAAS,CAAC,GAAG;AAAA,IACvC,SAAS,EAAE,gBAAgB,oBAAoB,iBAAiB,wBAAwB,+BAA+B,IAAI;AAAA,EAC7H,CAAC;AAEH,QAAM,aAAa,CAAC,UAAkB,SAAS,UAAU,WAAW,SAAS,cAAc,SAAS,SAAS,QAAQ,QAAQ,EAAE,KAAK,GAAG;AAEvI,QAAM,iBAAiB,CAAC,YACtB,WAAW,IAAI,IAAI,QAAQ,GAAG,EAAE,UAAU,QAAQ,MAAM,IAAI,iBAAiB,IAAI;AAEnF,QAAM,aAAa,CAAC,OAAmC;AAAA,IACrD,OAAO,EAAE;AAAA,IACT,UAAU,EAAE;AAAA,IACZ,QAAQ,EAAE;AAAA,IACV,WAAW,KAAK,MAAM,IAAI,KAAK,EAAE,SAAS,EAAE,QAAQ,IAAI,GAAI;AAAA,IAC5D,UAAU,IAAI,IAAI,QAAQ;AAAA,IAC1B,OAAO,EAAE,QAAQ,EAAE,QAAQ,UAAU,EAAE,UAAU,GAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,GAAI,OAAO,EAAE,MAAM;AAAA,EAC1G;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,SAAS,OAAO;AACtB,aAAO,OAAO,YAAY;AACxB,cAAM,OAAO,eAAe,OAAO;AACnC,YAAI,KAAM,QAAO;AACjB,YAAI;AACJ,YAAI;AACF,kBAAQ,MAAM,OAAO,SAAS,KAAK;AAAA,QACrC,SAAS,KAAK;AACZ,cAAI,eAAe,aAAc,QAAO,UAAU,GAAG;AACrD,gBAAM;AAAA,QACR;AACA,eAAO,QAAQ,SAAS,KAAK;AAAA,MAC/B;AAAA,IACF;AAAA,IACA,WAAW,OAAO;AAChB,aAAO,CAAC,KAAK,KAAK,SAAS;AACzB,cAAM,YAAY,IAAI,eAAe,IAAI,OAAO,KAAK,MAAM,GAAG,EAAE,CAAC,KAAK;AACtE,YAAI,WAAW,UAAU,IAAI,MAAM,GAAG;AACpC,cAAI,aAAa;AACjB,cAAI,UAAU,gBAAgB,kBAAkB;AAChD,cAAI,UAAU,iBAAiB,sBAAsB;AACrD,cAAI,UAAU,+BAA+B,GAAG;AAChD,cAAI,IAAI,KAAK,UAAU,SAAS,CAAC,CAAC;AAClC;AAAA,QACF;AACA,cAAM,MAAM,IAAI,QAAQ;AACxB,cAAM,SAAS,MAAM,QAAQ,GAAG,IAAK,IAAI,CAAC,KAAK,KAAO,OAAO;AAC7D,eAAO,cAAc,KAAK,MAAM,IAAI,SAAS,IAAI,KAAK,EAAE;AAAA,UACtD,CAAC,UAAU;AACT,gBAAI,QAAQ;AACZ,gBAAI,OAAO,WAAW,KAAK;AAC3B,iBAAK;AAAA,UACP;AAAA,UACA,CAAC,QAAiB;AAChB,gBAAI,EAAE,eAAe,cAAe,QAAO,KAAK,GAAG;AACnD,gBAAI,aAAa,IAAI;AACrB,gBAAI,UAAU,gBAAgB,kBAAkB;AAChD,gBAAI,UAAU,oBAAoB,aAAa,GAAG,CAAC;AACnD,gBAAI,IAAI,KAAK,UAAU,EAAE,OAAO,IAAI,MAAM,mBAAmB,IAAI,YAAY,CAAC,CAAC;AAAA,UACjF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;","names":["import_jose"]}
+{"version":3,"sources":["../src/mcp.ts","../src/verify.ts"],"sourcesContent":["// An MCP server (or any API) that AI agents use as one of your people.\n//\n//   import { mcpAuth } from 'cauthy-auth/mcp'\n//   const auth = mcpAuth({ resource: 'https://mcp.example.com/mcp', scopes: ['books:read'] })\n//\n//   // Fetch-style (Hono, Next.js, Workers, Bun, Deno):\n//   export default { fetch: auth.protect((request, agent) => handleMcp(request, agent)) }\n//\n//   // Express or plain Node, with the MCP TypeScript SDK (its transport reads req.auth):\n//   app.use(auth.middleware())\n//\n// How an agent gets in, as the MCP specification lays it out: it calls the\n// server, which answers 401 and points at its protected resource metadata\n// (RFC 9728); that names Cauthy as the authorization server; the agent\n// registers itself there, sends the person to sign in and allow it, and comes\n// back with a token issued for this server alone (its `aud`). This module is\n// the server's half: the metadata, the 401 that points at it, and checking\n// the token. The resource must be registered in Cauthy's dashboard (AI\n// agents), with the same address, for the workspace whose people use it.\n//\n// A server that calls another of the workspace's servers for the person\n// trades the agent's token for one for that server (token exchange, RFC 8693):\n//\n//   const auth = mcpAuth({ resource, clientId, clientSecret })   // from the dashboard\n//   const { accessToken } = await auth.exchange(agent, 'https://api.example.com', ['orders:read'])\n//\n// The workspace's admins must have delegated that call in the dashboard, and\n// the person allowed it when they connected the agent.\n\nimport { jwtVerify, type JWTVerifyGetKey } from 'jose'\nimport { keysOf } from './verify'\n\n/** The person an agent acts for, and what they allowed it. */\nexport interface AgentIdentity {\n  /** The person. */\n  userId: string\n  tenantId: string\n  email?: string\n  /** The person's roles in the workspace. */\n  roles: string[]\n  /** What the person allowed the agent to do here. */\n  scopes: string[]\n  /** The agent (its client_id at Cauthy). */\n  clientId: string\n  /** UTC, ISO 8601. */\n  expiresAt: string\n  /** The token as it arrived. */\n  token: string\n  /**\n   * Set when the token came by token exchange: the server that called this\n   * one for the person (the `act` claim's subject).\n   */\n  actor?: string\n}\n\nexport interface McpAuthOptions {\n  /** This server's address, as registered in Cauthy. Default: `CAUTHY_MCP_RESOURCE`. */\n  resource?: string\n  /** Cauthy's address. Default: `CAUTHY_ISSUER`. */\n  issuer?: string\n  /** Scopes every call needs. Default: none. */\n  scopes?: string[]\n  /** The scopes this server understands, to tell agents (`scopes_supported`). Default: `scopes`. */\n  scopesSupported?: string[]\n  /** A name for the server, shown by some agents. */\n  resourceName?: string\n  /** Cauthy's keys. Default: fetched from the issuer and cached. */\n  jwks?: JWTVerifyGetKey\n  /** The moment to verify at. Default: now. */\n  now?: () => Date\n  /**\n   * Ask Cauthy, besides checking the token here, whether the person still\n   * allows the agent (RFC 7662). Then an agent is cut off the moment it is\n   * disconnected, not when its token runs out, at the price of a call to\n   * Cauthy per token every `cacheSeconds` (default 30). Default: off.\n   */\n  introspect?: boolean | { cacheSeconds?: number }\n  /** The fetch to call Cauthy with. Default: the global one. */\n  fetch?: typeof fetch\n  /**\n   * This server's client_id and secret at Cauthy, for token exchange (AI\n   * agents → the server → Server credentials). Defaults:\n   * `CAUTHY_MCP_CLIENT_ID`, `CAUTHY_MCP_CLIENT_SECRET`.\n   */\n  clientId?: string\n  clientSecret?: string\n}\n\n/** What a token exchange answers. */\nexport interface ExchangedToken {\n  /** The token for the other server, as the person. Send it as `Authorization: Bearer`. */\n  accessToken: string\n  /** What it allows there. */\n  scopes: string[]\n  /** UTC, ISO 8601. Never later than the agent's own token. */\n  expiresAt: string\n}\n\n/** A token exchange Cauthy refused, with the OAuth error it answered. */\nexport class CauthyExchangeError extends Error {\n  constructor(\n    readonly status: number,\n    readonly code: string,\n    readonly description: string,\n  ) {\n    super(`cauthy-auth: token exchange refused (${code}): ${description}`)\n    this.name = 'CauthyExchangeError'\n  }\n}\n\n/** A token refused: `status` is 401 (no token, or not a good one) or 403 (a scope missing). */\nexport class McpAuthError extends Error {\n  constructor(\n    readonly status: 401 | 403,\n    readonly code: 'invalid_request' | 'invalid_token' | 'insufficient_scope',\n    readonly description: string,\n  ) {\n    super(`cauthy-auth: ${description}`)\n    this.name = 'McpAuthError'\n  }\n}\n\n/** What the MCP TypeScript SDK reads from `req.auth` (its AuthInfo). */\nexport interface McpAuthInfo {\n  token: string\n  clientId: string\n  scopes: string[]\n  /** Seconds since the epoch. */\n  expiresAt: number\n  resource: URL\n  extra: { userId: string; tenantId: string; email?: string; roles: string[] }\n}\n\nexport interface McpAuth {\n  /** This server's address, in the form Cauthy compares it in. */\n  resource: string\n  /** Where the protected resource metadata is served. */\n  metadataUrl: string\n  /** The protected resource metadata (RFC 9728). */\n  metadata(): Record<string, unknown>\n  /** The metadata's paths: `/.well-known/oauth-protected-resource` plus this server's path. */\n  metadataPaths: string[]\n  /** Verifies the `Authorization: Bearer` of a request (or a token). Throws `McpAuthError`. */\n  verify(from: string | Request | Headers, needs?: string[]): Promise<AgentIdentity>\n  /** The answer to a refused token: 401 or 403, with the `WWW-Authenticate` that points an agent at Cauthy. */\n  challenge(error?: McpAuthError): Response\n  /** The metadata, when the request asks for it; `null` otherwise. */\n  handleMetadata(request: Request): Response | null\n  /** Wraps a fetch-style handler: serves the metadata, refuses what has no good token, passes the rest with who it is. */\n  protect(handler: (request: Request, agent: AgentIdentity) => Response | Promise<Response>, needs?: string[]): (request: Request) => Promise<Response>\n  /**\n   * Connect-style middleware (Express, Node's http): serves the metadata,\n   * refuses what has no good token, and sets `req.agent` and `req.auth` —\n   * what the MCP TypeScript SDK's transport hands its tools as `authInfo`.\n   */\n  middleware(needs?: string[]): (req: NodeRequest, res: NodeResponse, next: (err?: unknown) => void) => void\n  /**\n   * Trades the agent's token this server received for one for another of the\n   * workspace's servers, to call it for the person (RFC 8693). Needs this\n   * server's `clientId` and `clientSecret`. Answers are kept until shortly\n   * before they expire. Throws `CauthyExchangeError` when Cauthy refuses.\n   */\n  exchange(from: string | AgentIdentity, target: string, scopes?: string[]): Promise<ExchangedToken>\n}\n\n// The slice of Node's (and Express's) request and response this needs.\ninterface NodeRequest {\n  method?: string\n  url?: string\n  originalUrl?: string\n  headers: Record<string, string | string[] | undefined>\n  auth?: McpAuthInfo\n  agent?: AgentIdentity\n}\ninterface NodeResponse {\n  statusCode: number\n  setHeader(name: string, value: string): unknown\n  end(body?: string): unknown\n}\n\nfunction env(name: string): string | undefined {\n  return typeof process !== 'undefined' ? process.env?.[name] : undefined\n}\n\n/**\n * The address in the one form Cauthy keeps it: scheme and host in lower case,\n * no default port, no trailing slash, no query, no fragment.\n */\nexport function canonicalResource(raw: string): string {\n  let u: URL\n  try {\n    u = new URL(raw.trim())\n  } catch {\n    throw new Error(`cauthy-auth: resource ${JSON.stringify(raw)} is not an absolute address`)\n  }\n  const local = u.hostname === 'localhost' || u.hostname === '127.0.0.1' || u.hostname === '[::1]'\n  if (u.protocol !== 'https:' && !(u.protocol === 'http:' && local)) {\n    throw new Error('cauthy-auth: resource must be an https address')\n  }\n  if (u.search !== '' || u.hash !== '') throw new Error('cauthy-auth: resource may not have a query or a fragment')\n  return `${u.protocol}//${u.host}${u.pathname.replace(/\\/+$/, '')}`\n}\n\nfunction bearer(from: string | Request | Headers): string {\n  if (typeof from === 'string') return from.replace(/^Bearer\\s+/i, '').trim()\n  const header = (from instanceof Headers ? from : from.headers).get('authorization') ?? ''\n  return /^Bearer\\s+/i.test(header) ? header.replace(/^Bearer\\s+/i, '').trim() : ''\n}\n\nfunction isActor(v: unknown): v is { sub: string } {\n  return typeof v === 'object' && v !== null && typeof (v as { sub?: unknown }).sub === 'string'\n}\n\nfunction quoted(v: string): string {\n  return `\"${v.replace(/[\"\\\\]/g, '')}\"`\n}\n\n/** Protects an MCP server with Cauthy. */\nexport function mcpAuth(options: McpAuthOptions = {}): McpAuth {\n  const rawResource = options.resource ?? env('CAUTHY_MCP_RESOURCE') ?? ''\n  if (rawResource === '') throw new Error('cauthy-auth: resource (CAUTHY_MCP_RESOURCE) is not set')\n  const resource = canonicalResource(rawResource)\n  const issuer = (options.issuer ?? env('CAUTHY_ISSUER') ?? '').replace(/\\/+$/, '')\n  if (issuer === '') throw new Error('cauthy-auth: issuer (CAUTHY_ISSUER) is not set')\n  const required = options.scopes ?? []\n  const url = new URL(resource)\n  const path = url.pathname === '/' ? '' : url.pathname\n  const metadataPaths = [...new Set([`/.well-known/oauth-protected-resource${path}`, '/.well-known/oauth-protected-resource'])]\n  const metadataUrl = `${url.origin}${metadataPaths[0]}`\n\n  const metadata = () => ({\n    resource,\n    authorization_servers: [issuer],\n    bearer_methods_supported: ['header'],\n    scopes_supported: options.scopesSupported ?? required,\n    ...(options.resourceName ? { resource_name: options.resourceName } : {}),\n  })\n\n  const introspect = options.introspect ? { cacheMs: ((typeof options.introspect === 'object' ? options.introspect.cacheSeconds : undefined) ?? 30) * 1000 } : null\n  const answers = new Map<string, { active: boolean; until: number }>()\n  const stillAllowed = async (token: string, cacheMs: number): Promise<boolean> => {\n    const now = Date.now()\n    const kept = answers.get(token)\n    if (kept && kept.until > now) return kept.active\n    let active = false\n    try {\n      const res = await (options.fetch ?? fetch)(`${issuer}/v1/oauth/introspect`, {\n        method: 'POST',\n        headers: { 'content-type': 'application/x-www-form-urlencoded', accept: 'application/json' },\n        body: new URLSearchParams({ token }),\n      })\n      if (!res.ok) throw new Error(`introspection answered ${res.status}`)\n      active = ((await res.json()) as { active?: unknown }).active === true\n    } catch (err) {\n      // Cauthy could not be asked: what it last said holds.\n      if (kept) return kept.active\n      throw new McpAuthError(401, 'invalid_token', `could not check the token with Cauthy: ${err instanceof Error ? err.message : 'unreachable'}`)\n    }\n    if (answers.size > 10_000) answers.clear()\n    answers.set(token, { active, until: now + cacheMs })\n    return active\n  }\n\n  const verify = async (from: string | Request | Headers, needs: string[] = []): Promise<AgentIdentity> => {\n    const token = bearer(from)\n    if (token === '') throw new McpAuthError(401, 'invalid_request', 'no access token')\n    let claims: Record<string, unknown>\n    try {\n      const verified = await jwtVerify(token, options.jwks ?? keysOf(issuer), {\n        algorithms: ['RS256'],\n        issuer,\n        audience: resource,\n        requiredClaims: ['exp', 'sub'],\n        currentDate: options.now?.(),\n      })\n      claims = verified.payload as Record<string, unknown>\n    } catch (err) {\n      throw new McpAuthError(401, 'invalid_token', err instanceof Error ? err.message : 'the token is not valid')\n    }\n    const clientId = typeof claims.client_id === 'string' ? claims.client_id : ''\n    if (clientId === '') throw new McpAuthError(401, 'invalid_token', 'not a token issued to an agent')\n    const scopes = typeof claims.scope === 'string' ? claims.scope.split(' ').filter(Boolean) : []\n    if (introspect && !(await stillAllowed(token, introspect.cacheMs))) throw new McpAuthError(401, 'invalid_token', 'the token is no longer allowed: the agent was disconnected, or its access withdrawn')\n    const missing = [...required, ...needs].filter((s) => !scopes.includes(s))\n    if (missing.length > 0) throw new McpAuthError(403, 'insufficient_scope', `this needs ${missing.join(' ')}`)\n    return {\n      userId: String(claims.sub),\n      tenantId: typeof claims.tid === 'string' ? claims.tid : '',\n      ...(typeof claims.email === 'string' && claims.email !== '' ? { email: claims.email } : {}),\n      roles: Array.isArray(claims.roles) ? claims.roles.filter((r): r is string => typeof r === 'string') : [],\n      scopes,\n      clientId,\n      expiresAt: new Date((claims.exp as number) * 1000).toISOString(),\n      token,\n      ...(isActor(claims.act) ? { actor: claims.act.sub } : {}),\n    }\n  }\n\n  const clientId = options.clientId ?? env('CAUTHY_MCP_CLIENT_ID') ?? ''\n  const clientSecret = options.clientSecret ?? env('CAUTHY_MCP_CLIENT_SECRET') ?? ''\n  const exchanged = new Map<string, ExchangedToken & { until: number }>()\n  const exchange = async (from: string | AgentIdentity, target: string, scopes: string[] = []): Promise<ExchangedToken> => {\n    if (clientId === '' || clientSecret === '') {\n      throw new Error('cauthy-auth: token exchange needs clientId and clientSecret (CAUTHY_MCP_CLIENT_ID, CAUTHY_MCP_CLIENT_SECRET)')\n    }\n    const subject = typeof from === 'string' ? bearer(from) : from.token\n    const to = canonicalResource(target)\n    const key = `${subject}\\n${to}\\n${scopes.join(' ')}`\n    const kept = exchanged.get(key)\n    if (kept && kept.until > Date.now()) return { accessToken: kept.accessToken, scopes: kept.scopes, expiresAt: kept.expiresAt }\n    const res = await (options.fetch ?? fetch)(`${issuer}/v1/oauth/token`, {\n      method: 'POST',\n      headers: {\n        'content-type': 'application/x-www-form-urlencoded',\n        accept: 'application/json',\n        authorization: `Basic ${btoa(`${encodeURIComponent(clientId)}:${encodeURIComponent(clientSecret)}`)}`,\n      },\n      body: new URLSearchParams({\n        grant_type: 'urn:ietf:params:oauth:grant-type:token-exchange',\n        subject_token: subject,\n        subject_token_type: 'urn:ietf:params:oauth:token-type:access_token',\n        resource: to,\n        ...(scopes.length > 0 ? { scope: scopes.join(' ') } : {}),\n      }),\n    })\n    const body = (await res.json().catch(() => ({}))) as Record<string, unknown>\n    if (!res.ok || typeof body.access_token !== 'string') {\n      throw new CauthyExchangeError(res.status, typeof body.error === 'string' ? body.error : 'server_error',\n        typeof body.error_description === 'string' ? body.error_description : `Cauthy answered ${res.status}`)\n    }\n    const expiresIn = typeof body.expires_in === 'number' ? body.expires_in : 0\n    const out: ExchangedToken = {\n      accessToken: body.access_token,\n      scopes: typeof body.scope === 'string' ? body.scope.split(' ').filter(Boolean) : [],\n      expiresAt: new Date(Date.now() + expiresIn * 1000).toISOString(),\n    }\n    if (exchanged.size > 10_000) exchanged.clear()\n    // Kept until 30 seconds before it runs out, so it is never sent stale.\n    exchanged.set(key, { ...out, until: Date.now() + Math.max(0, expiresIn - 30) * 1000 })\n    return out\n  }\n\n  const authenticate = (error?: McpAuthError): string => {\n    const parts = [`resource_metadata=${quoted(metadataUrl)}`]\n    if (error && error.code !== 'invalid_request') {\n      parts.push(`error=${quoted(error.code)}`, `error_description=${quoted(error.description)}`)\n    }\n    // What to ask the person for: said when there is no token or it falls short.\n    const scope = error?.code === 'invalid_token' ? [] : required\n    if (scope.length > 0) parts.push(`scope=${quoted(scope.join(' '))}`)\n    return `Bearer ${parts.join(', ')}`\n  }\n\n  const challenge = (error?: McpAuthError): Response => {\n    const status = error?.status ?? 401\n    return new Response(JSON.stringify({ error: error?.code ?? 'invalid_request', error_description: error?.description ?? 'an access token is required' }), {\n      status,\n      headers: { 'content-type': 'application/json', 'www-authenticate': authenticate(error) },\n    })\n  }\n\n  const metadataResponse = () =>\n    new Response(JSON.stringify(metadata()), {\n      headers: { 'content-type': 'application/json', 'cache-control': 'public, max-age=3600', 'access-control-allow-origin': '*' },\n    })\n\n  const isMetadata = (pathname: string, method = 'GET') => method === 'GET' && metadataPaths.includes(pathname.replace(/\\/+$/, '') || '/')\n\n  const handleMetadata = (request: Request): Response | null =>\n    isMetadata(new URL(request.url).pathname, request.method) ? metadataResponse() : null\n\n  const toAuthInfo = (a: AgentIdentity): McpAuthInfo => ({\n    token: a.token,\n    clientId: a.clientId,\n    scopes: a.scopes,\n    expiresAt: Math.floor(new Date(a.expiresAt).getTime() / 1000),\n    resource: new URL(resource),\n    extra: { userId: a.userId, tenantId: a.tenantId, ...(a.email ? { email: a.email } : {}), roles: a.roles },\n  })\n\n  return {\n    resource,\n    metadataUrl,\n    metadataPaths,\n    metadata,\n    verify,\n    challenge,\n    handleMetadata,\n    protect(handler, needs) {\n      return async (request) => {\n        const meta = handleMetadata(request)\n        if (meta) return meta\n        let agent: AgentIdentity\n        try {\n          agent = await verify(request, needs)\n        } catch (err) {\n          if (err instanceof McpAuthError) return challenge(err)\n          throw err\n        }\n        return handler(request, agent)\n      }\n    },\n    exchange,\n    middleware(needs) {\n      return (req, res, next) => {\n        const pathname = (req.originalUrl ?? req.url ?? '/').split('?')[0] ?? '/'\n        if (isMetadata(pathname, req.method)) {\n          res.statusCode = 200\n          res.setHeader('content-type', 'application/json')\n          res.setHeader('cache-control', 'public, max-age=3600')\n          res.setHeader('access-control-allow-origin', '*')\n          res.end(JSON.stringify(metadata()))\n          return\n        }\n        const raw = req.headers.authorization\n        const header = Array.isArray(raw) ? (raw[0] ?? '') : (raw ?? '')\n        verify(/^Bearer\\s+/i.test(header) ? header : '', needs).then(\n          (agent) => {\n            req.agent = agent\n            req.auth = toAuthInfo(agent)\n            next()\n          },\n          (err: unknown) => {\n            if (!(err instanceof McpAuthError)) return next(err)\n            res.statusCode = err.status\n            res.setHeader('content-type', 'application/json')\n            res.setHeader('www-authenticate', authenticate(err))\n            res.end(JSON.stringify({ error: err.code, error_description: err.description }))\n          },\n        )\n      }\n    },\n  }\n}\n","// A backend that is handed a Cauthy access token: is it real, and whose is it?\n//\n//   const who = await verifyToken(request)        // or the token itself\n//   who.userId, who.tenantId, who.roles\n//\n// Cauthy signs its tokens with a key it publishes (/.well-known/jwks.json), so\n// checking one needs no secret and no call to Cauthy per request: the keys are\n// fetched once and cached. Throws `CauthyTokenError` for anything else: answer\n// it 401.\n\nimport { createRemoteJWKSet, jwtVerify, type JWTVerifyGetKey } from 'jose'\n\n/** Who a verified access token belongs to. */\nexport interface TokenIdentity {\n  /** The person. For a system's own token, the client it identifies as. */\n  userId: string\n  tenantId: string\n  email?: string\n  roles: string[]\n  /** Set when the token is a system's own and not a person's. */\n  system?: string\n  /** UTC, ISO 8601. */\n  expiresAt: string\n  /** The token as it arrived, to pass on. */\n  token: string\n}\n\nexport class CauthyTokenError extends Error {\n  constructor(readonly reason: string) {\n    super(`cauthy-auth: token refused: ${reason}`)\n    this.name = 'CauthyTokenError'\n  }\n}\n\nexport interface VerifyTokenOptions {\n  /** Cauthy's address. Default: `CAUTHY_ISSUER`. */\n  issuer?: string\n  /** The audience the tokens must carry. Default: `CAUTHY_AUDIENCE`; unchecked when neither is set. */\n  audience?: string\n  /** Refuse a token of any other workspace. Default: `CAUTHY_TENANT_ID`; unchecked when neither is set. */\n  tenantId?: string\n  /** Cauthy's keys. Default: fetched from the issuer and cached. */\n  jwks?: JWTVerifyGetKey\n  /** The moment to verify at. Default: now. */\n  now?: Date\n}\n\nconst keys = new Map<string, JWTVerifyGetKey>()\n\n/** Cauthy's published keys, fetched once per issuer and cached. */\nexport function keysOf(issuer: string): JWTVerifyGetKey {\n  let set = keys.get(issuer)\n  if (set === undefined) {\n    set = createRemoteJWKSet(new URL(`${issuer}/.well-known/jwks.json`), { cooldownDuration: 30_000 })\n    keys.set(issuer, set)\n  }\n  return set\n}\n\nfunction env(name: string): string | undefined {\n  return typeof process !== 'undefined' ? process.env?.[name] : undefined\n}\n\nfunction bearer(from: string | Request | Headers): string {\n  if (typeof from === 'string') return from.replace(/^Bearer\\s+/i, '').trim()\n  const header = (from instanceof Headers ? from : from.headers).get('authorization') ?? ''\n  return /^Bearer\\s+/i.test(header) ? header.replace(/^Bearer\\s+/i, '').trim() : ''\n}\n\n/**\n * Verifies an access token (or the `Authorization: Bearer` of a request) and\n * answers who it belongs to. Checked: the signature, against Cauthy's\n * published keys; that Cauthy issued it; that it has not expired; and the\n * audience and the workspace, when given.\n */\nexport async function verifyToken(from: string | Request | Headers, options: VerifyTokenOptions = {}): Promise<TokenIdentity> {\n  const issuer = (options.issuer ?? env('CAUTHY_ISSUER') ?? '').replace(/\\/+$/, '')\n  if (issuer === '') throw new CauthyTokenError('issuer (CAUTHY_ISSUER) is not set')\n  const token = bearer(from)\n  if (token === '') throw new CauthyTokenError('no token')\n\n  let claims: Record<string, unknown>\n  try {\n    const verified = await jwtVerify(token, options.jwks ?? keysOf(issuer), {\n      algorithms: ['RS256'],\n      issuer,\n      audience: options.audience ?? env('CAUTHY_AUDIENCE'),\n      requiredClaims: ['exp', 'sub'],\n      currentDate: options.now,\n    })\n    claims = verified.payload as Record<string, unknown>\n  } catch (err) {\n    throw new CauthyTokenError(err instanceof Error ? err.message : 'bad signature')\n  }\n\n  const tenantId = typeof claims.tid === 'string' ? claims.tid : ''\n  const wanted = options.tenantId ?? env('CAUTHY_TENANT_ID')\n  if (wanted && tenantId !== wanted) throw new CauthyTokenError('issued for another workspace')\n\n  return {\n    userId: String(claims.sub),\n    tenantId,\n    ...(typeof claims.email === 'string' && claims.email !== '' ? { email: claims.email } : {}),\n    roles: Array.isArray(claims.roles) ? claims.roles.filter((r): r is string => typeof r === 'string') : [],\n    ...(typeof claims.sys === 'string' && claims.sys !== '' ? { system: claims.sys } : {}),\n    expiresAt: new Date((claims.exp as number) * 1000).toISOString(),\n    token,\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA6BA,IAAAA,eAAgD;;;ACnBhD,kBAAoE;AAqCpE,IAAM,OAAO,oBAAI,IAA6B;AAGvC,SAAS,OAAO,QAAiC;AACtD,MAAI,MAAM,KAAK,IAAI,MAAM;AACzB,MAAI,QAAQ,QAAW;AACrB,cAAM,gCAAmB,IAAI,IAAI,GAAG,MAAM,wBAAwB,GAAG,EAAE,kBAAkB,IAAO,CAAC;AACjG,SAAK,IAAI,QAAQ,GAAG;AAAA,EACtB;AACA,SAAO;AACT;;;AD0CO,IAAM,sBAAN,cAAkC,MAAM;AAAA,EAC7C,YACW,QACA,MACA,aACT;AACA,UAAM,wCAAwC,IAAI,MAAM,WAAW,EAAE;AAJ5D;AACA;AACA;AAGT,SAAK,OAAO;AAAA,EACd;AAAA,EANW;AAAA,EACA;AAAA,EACA;AAKb;AAGO,IAAM,eAAN,cAA2B,MAAM;AAAA,EACtC,YACW,QACA,MACA,aACT;AACA,UAAM,gBAAgB,WAAW,EAAE;AAJ1B;AACA;AACA;AAGT,SAAK,OAAO;AAAA,EACd;AAAA,EANW;AAAA,EACA;AAAA,EACA;AAKb;AA4DA,SAAS,IAAI,MAAkC;AAC7C,SAAO,OAAO,YAAY,cAAc,QAAQ,MAAM,IAAI,IAAI;AAChE;AAMO,SAAS,kBAAkB,KAAqB;AACrD,MAAI;AACJ,MAAI;AACF,QAAI,IAAI,IAAI,IAAI,KAAK,CAAC;AAAA,EACxB,QAAQ;AACN,UAAM,IAAI,MAAM,yBAAyB,KAAK,UAAU,GAAG,CAAC,6BAA6B;AAAA,EAC3F;AACA,QAAM,QAAQ,EAAE,aAAa,eAAe,EAAE,aAAa,eAAe,EAAE,aAAa;AACzF,MAAI,EAAE,aAAa,YAAY,EAAE,EAAE,aAAa,WAAW,QAAQ;AACjE,UAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AACA,MAAI,EAAE,WAAW,MAAM,EAAE,SAAS,GAAI,OAAM,IAAI,MAAM,0DAA0D;AAChH,SAAO,GAAG,EAAE,QAAQ,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS,QAAQ,QAAQ,EAAE,CAAC;AAClE;AAEA,SAAS,OAAO,MAA0C;AACxD,MAAI,OAAO,SAAS,SAAU,QAAO,KAAK,QAAQ,eAAe,EAAE,EAAE,KAAK;AAC1E,QAAM,UAAU,gBAAgB,UAAU,OAAO,KAAK,SAAS,IAAI,eAAe,KAAK;AACvF,SAAO,cAAc,KAAK,MAAM,IAAI,OAAO,QAAQ,eAAe,EAAE,EAAE,KAAK,IAAI;AACjF;AAEA,SAAS,QAAQ,GAAkC;AACjD,SAAO,OAAO,MAAM,YAAY,MAAM,QAAQ,OAAQ,EAAwB,QAAQ;AACxF;AAEA,SAAS,OAAO,GAAmB;AACjC,SAAO,IAAI,EAAE,QAAQ,UAAU,EAAE,CAAC;AACpC;AAGO,SAAS,QAAQ,UAA0B,CAAC,GAAY;AAC7D,QAAM,cAAc,QAAQ,YAAY,IAAI,qBAAqB,KAAK;AACtE,MAAI,gBAAgB,GAAI,OAAM,IAAI,MAAM,wDAAwD;AAChG,QAAM,WAAW,kBAAkB,WAAW;AAC9C,QAAM,UAAU,QAAQ,UAAU,IAAI,eAAe,KAAK,IAAI,QAAQ,QAAQ,EAAE;AAChF,MAAI,WAAW,GAAI,OAAM,IAAI,MAAM,gDAAgD;AACnF,QAAM,WAAW,QAAQ,UAAU,CAAC;AACpC,QAAM,MAAM,IAAI,IAAI,QAAQ;AAC5B,QAAM,OAAO,IAAI,aAAa,MAAM,KAAK,IAAI;AAC7C,QAAM,gBAAgB,CAAC,GAAG,oBAAI,IAAI,CAAC,wCAAwC,IAAI,IAAI,uCAAuC,CAAC,CAAC;AAC5H,QAAM,cAAc,GAAG,IAAI,MAAM,GAAG,cAAc,CAAC,CAAC;AAEpD,QAAM,WAAW,OAAO;AAAA,IACtB;AAAA,IACA,uBAAuB,CAAC,MAAM;AAAA,IAC9B,0BAA0B,CAAC,QAAQ;AAAA,IACnC,kBAAkB,QAAQ,mBAAmB;AAAA,IAC7C,GAAI,QAAQ,eAAe,EAAE,eAAe,QAAQ,aAAa,IAAI,CAAC;AAAA,EACxE;AAEA,QAAM,aAAa,QAAQ,aAAa,EAAE,WAAW,OAAO,QAAQ,eAAe,WAAW,QAAQ,WAAW,eAAe,WAAc,MAAM,IAAK,IAAI;AAC7J,QAAM,UAAU,oBAAI,IAAgD;AACpE,QAAM,eAAe,OAAO,OAAe,YAAsC;AAC/E,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,OAAO,QAAQ,IAAI,KAAK;AAC9B,QAAI,QAAQ,KAAK,QAAQ,IAAK,QAAO,KAAK;AAC1C,QAAI,SAAS;AACb,QAAI;AACF,YAAM,MAAM,OAAO,QAAQ,SAAS,OAAO,GAAG,MAAM,wBAAwB;AAAA,QAC1E,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,qCAAqC,QAAQ,mBAAmB;AAAA,QAC3F,MAAM,IAAI,gBAAgB,EAAE,MAAM,CAAC;AAAA,MACrC,CAAC;AACD,UAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,0BAA0B,IAAI,MAAM,EAAE;AACnE,gBAAW,MAAM,IAAI,KAAK,GAA4B,WAAW;AAAA,IACnE,SAAS,KAAK;AAEZ,UAAI,KAAM,QAAO,KAAK;AACtB,YAAM,IAAI,aAAa,KAAK,iBAAiB,0CAA0C,eAAe,QAAQ,IAAI,UAAU,aAAa,EAAE;AAAA,IAC7I;AACA,QAAI,QAAQ,OAAO,IAAQ,SAAQ,MAAM;AACzC,YAAQ,IAAI,OAAO,EAAE,QAAQ,OAAO,MAAM,QAAQ,CAAC;AACnD,WAAO;AAAA,EACT;AAEA,QAAM,SAAS,OAAO,MAAkC,QAAkB,CAAC,MAA8B;AACvG,UAAM,QAAQ,OAAO,IAAI;AACzB,QAAI,UAAU,GAAI,OAAM,IAAI,aAAa,KAAK,mBAAmB,iBAAiB;AAClF,QAAI;AACJ,QAAI;AACF,YAAM,WAAW,UAAM,wBAAU,OAAO,QAAQ,QAAQ,OAAO,MAAM,GAAG;AAAA,QACtE,YAAY,CAAC,OAAO;AAAA,QACpB;AAAA,QACA,UAAU;AAAA,QACV,gBAAgB,CAAC,OAAO,KAAK;AAAA,QAC7B,aAAa,QAAQ,MAAM;AAAA,MAC7B,CAAC;AACD,eAAS,SAAS;AAAA,IACpB,SAAS,KAAK;AACZ,YAAM,IAAI,aAAa,KAAK,iBAAiB,eAAe,QAAQ,IAAI,UAAU,wBAAwB;AAAA,IAC5G;AACA,UAAMC,YAAW,OAAO,OAAO,cAAc,WAAW,OAAO,YAAY;AAC3E,QAAIA,cAAa,GAAI,OAAM,IAAI,aAAa,KAAK,iBAAiB,gCAAgC;AAClG,UAAM,SAAS,OAAO,OAAO,UAAU,WAAW,OAAO,MAAM,MAAM,GAAG,EAAE,OAAO,OAAO,IAAI,CAAC;AAC7F,QAAI,cAAc,CAAE,MAAM,aAAa,OAAO,WAAW,OAAO,EAAI,OAAM,IAAI,aAAa,KAAK,iBAAiB,qFAAqF;AACtM,UAAM,UAAU,CAAC,GAAG,UAAU,GAAG,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,SAAS,CAAC,CAAC;AACzE,QAAI,QAAQ,SAAS,EAAG,OAAM,IAAI,aAAa,KAAK,sBAAsB,cAAc,QAAQ,KAAK,GAAG,CAAC,EAAE;AAC3G,WAAO;AAAA,MACL,QAAQ,OAAO,OAAO,GAAG;AAAA,MACzB,UAAU,OAAO,OAAO,QAAQ,WAAW,OAAO,MAAM;AAAA,MACxD,GAAI,OAAO,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;AAAA,MACzF,OAAO,MAAM,QAAQ,OAAO,KAAK,IAAI,OAAO,MAAM,OAAO,CAAC,MAAmB,OAAO,MAAM,QAAQ,IAAI,CAAC;AAAA,MACvG;AAAA,MACA,UAAAA;AAAA,MACA,WAAW,IAAI,KAAM,OAAO,MAAiB,GAAI,EAAE,YAAY;AAAA,MAC/D;AAAA,MACA,GAAI,QAAQ,OAAO,GAAG,IAAI,EAAE,OAAO,OAAO,IAAI,IAAI,IAAI,CAAC;AAAA,IACzD;AAAA,EACF;AAEA,QAAM,WAAW,QAAQ,YAAY,IAAI,sBAAsB,KAAK;AACpE,QAAM,eAAe,QAAQ,gBAAgB,IAAI,0BAA0B,KAAK;AAChF,QAAM,YAAY,oBAAI,IAAgD;AACtE,QAAM,WAAW,OAAO,MAA8B,QAAgB,SAAmB,CAAC,MAA+B;AACvH,QAAI,aAAa,MAAM,iBAAiB,IAAI;AAC1C,YAAM,IAAI,MAAM,8GAA8G;AAAA,IAChI;AACA,UAAM,UAAU,OAAO,SAAS,WAAW,OAAO,IAAI,IAAI,KAAK;AAC/D,UAAM,KAAK,kBAAkB,MAAM;AACnC,UAAM,MAAM,GAAG,OAAO;AAAA,EAAK,EAAE;AAAA,EAAK,OAAO,KAAK,GAAG,CAAC;AAClD,UAAM,OAAO,UAAU,IAAI,GAAG;AAC9B,QAAI,QAAQ,KAAK,QAAQ,KAAK,IAAI,EAAG,QAAO,EAAE,aAAa,KAAK,aAAa,QAAQ,KAAK,QAAQ,WAAW,KAAK,UAAU;AAC5H,UAAM,MAAM,OAAO,QAAQ,SAAS,OAAO,GAAG,MAAM,mBAAmB;AAAA,MACrE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,QAAQ;AAAA,QACR,eAAe,SAAS,KAAK,GAAG,mBAAmB,QAAQ,CAAC,IAAI,mBAAmB,YAAY,CAAC,EAAE,CAAC;AAAA,MACrG;AAAA,MACA,MAAM,IAAI,gBAAgB;AAAA,QACxB,YAAY;AAAA,QACZ,eAAe;AAAA,QACf,oBAAoB;AAAA,QACpB,UAAU;AAAA,QACV,GAAI,OAAO,SAAS,IAAI,EAAE,OAAO,OAAO,KAAK,GAAG,EAAE,IAAI,CAAC;AAAA,MACzD,CAAC;AAAA,IACH,CAAC;AACD,UAAM,OAAQ,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC/C,QAAI,CAAC,IAAI,MAAM,OAAO,KAAK,iBAAiB,UAAU;AACpD,YAAM,IAAI;AAAA,QAAoB,IAAI;AAAA,QAAQ,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ;AAAA,QACtF,OAAO,KAAK,sBAAsB,WAAW,KAAK,oBAAoB,mBAAmB,IAAI,MAAM;AAAA,MAAE;AAAA,IACzG;AACA,UAAM,YAAY,OAAO,KAAK,eAAe,WAAW,KAAK,aAAa;AAC1E,UAAM,MAAsB;AAAA,MAC1B,aAAa,KAAK;AAAA,MAClB,QAAQ,OAAO,KAAK,UAAU,WAAW,KAAK,MAAM,MAAM,GAAG,EAAE,OAAO,OAAO,IAAI,CAAC;AAAA,MAClF,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,YAAY,GAAI,EAAE,YAAY;AAAA,IACjE;AACA,QAAI,UAAU,OAAO,IAAQ,WAAU,MAAM;AAE7C,cAAU,IAAI,KAAK,EAAE,GAAG,KAAK,OAAO,KAAK,IAAI,IAAI,KAAK,IAAI,GAAG,YAAY,EAAE,IAAI,IAAK,CAAC;AACrF,WAAO;AAAA,EACT;AAEA,QAAM,eAAe,CAAC,UAAiC;AACrD,UAAM,QAAQ,CAAC,qBAAqB,OAAO,WAAW,CAAC,EAAE;AACzD,QAAI,SAAS,MAAM,SAAS,mBAAmB;AAC7C,YAAM,KAAK,SAAS,OAAO,MAAM,IAAI,CAAC,IAAI,qBAAqB,OAAO,MAAM,WAAW,CAAC,EAAE;AAAA,IAC5F;AAEA,UAAM,QAAQ,OAAO,SAAS,kBAAkB,CAAC,IAAI;AACrD,QAAI,MAAM,SAAS,EAAG,OAAM,KAAK,SAAS,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE;AACnE,WAAO,UAAU,MAAM,KAAK,IAAI,CAAC;AAAA,EACnC;AAEA,QAAM,YAAY,CAAC,UAAmC;AACpD,UAAM,SAAS,OAAO,UAAU;AAChC,WAAO,IAAI,SAAS,KAAK,UAAU,EAAE,OAAO,OAAO,QAAQ,mBAAmB,mBAAmB,OAAO,eAAe,8BAA8B,CAAC,GAAG;AAAA,MACvJ;AAAA,MACA,SAAS,EAAE,gBAAgB,oBAAoB,oBAAoB,aAAa,KAAK,EAAE;AAAA,IACzF,CAAC;AAAA,EACH;AAEA,QAAM,mBAAmB,MACvB,IAAI,SAAS,KAAK,UAAU,SAAS,CAAC,GAAG;AAAA,IACvC,SAAS,EAAE,gBAAgB,oBAAoB,iBAAiB,wBAAwB,+BAA+B,IAAI;AAAA,EAC7H,CAAC;AAEH,QAAM,aAAa,CAAC,UAAkB,SAAS,UAAU,WAAW,SAAS,cAAc,SAAS,SAAS,QAAQ,QAAQ,EAAE,KAAK,GAAG;AAEvI,QAAM,iBAAiB,CAAC,YACtB,WAAW,IAAI,IAAI,QAAQ,GAAG,EAAE,UAAU,QAAQ,MAAM,IAAI,iBAAiB,IAAI;AAEnF,QAAM,aAAa,CAAC,OAAmC;AAAA,IACrD,OAAO,EAAE;AAAA,IACT,UAAU,EAAE;AAAA,IACZ,QAAQ,EAAE;AAAA,IACV,WAAW,KAAK,MAAM,IAAI,KAAK,EAAE,SAAS,EAAE,QAAQ,IAAI,GAAI;AAAA,IAC5D,UAAU,IAAI,IAAI,QAAQ;AAAA,IAC1B,OAAO,EAAE,QAAQ,EAAE,QAAQ,UAAU,EAAE,UAAU,GAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,GAAI,OAAO,EAAE,MAAM;AAAA,EAC1G;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,SAAS,OAAO;AACtB,aAAO,OAAO,YAAY;AACxB,cAAM,OAAO,eAAe,OAAO;AACnC,YAAI,KAAM,QAAO;AACjB,YAAI;AACJ,YAAI;AACF,kBAAQ,MAAM,OAAO,SAAS,KAAK;AAAA,QACrC,SAAS,KAAK;AACZ,cAAI,eAAe,aAAc,QAAO,UAAU,GAAG;AACrD,gBAAM;AAAA,QACR;AACA,eAAO,QAAQ,SAAS,KAAK;AAAA,MAC/B;AAAA,IACF;AAAA,IACA;AAAA,IACA,WAAW,OAAO;AAChB,aAAO,CAAC,KAAK,KAAK,SAAS;AACzB,cAAM,YAAY,IAAI,eAAe,IAAI,OAAO,KAAK,MAAM,GAAG,EAAE,CAAC,KAAK;AACtE,YAAI,WAAW,UAAU,IAAI,MAAM,GAAG;AACpC,cAAI,aAAa;AACjB,cAAI,UAAU,gBAAgB,kBAAkB;AAChD,cAAI,UAAU,iBAAiB,sBAAsB;AACrD,cAAI,UAAU,+BAA+B,GAAG;AAChD,cAAI,IAAI,KAAK,UAAU,SAAS,CAAC,CAAC;AAClC;AAAA,QACF;AACA,cAAM,MAAM,IAAI,QAAQ;AACxB,cAAM,SAAS,MAAM,QAAQ,GAAG,IAAK,IAAI,CAAC,KAAK,KAAO,OAAO;AAC7D,eAAO,cAAc,KAAK,MAAM,IAAI,SAAS,IAAI,KAAK,EAAE;AAAA,UACtD,CAAC,UAAU;AACT,gBAAI,QAAQ;AACZ,gBAAI,OAAO,WAAW,KAAK;AAC3B,iBAAK;AAAA,UACP;AAAA,UACA,CAAC,QAAiB;AAChB,gBAAI,EAAE,eAAe,cAAe,QAAO,KAAK,GAAG;AACnD,gBAAI,aAAa,IAAI;AACrB,gBAAI,UAAU,gBAAgB,kBAAkB;AAChD,gBAAI,UAAU,oBAAoB,aAAa,GAAG,CAAC;AACnD,gBAAI,IAAI,KAAK,UAAU,EAAE,OAAO,IAAI,MAAM,mBAAmB,IAAI,YAAY,CAAC,CAAC;AAAA,UACjF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;","names":["import_jose","clientId"]}

package/dist/mcp.mjs

@@ -14,6 +14,18 @@ function keysOf(issuer) {
 }
 
 // src/mcp.ts
+var CauthyExchangeError = class extends Error {
+  constructor(status, code, description) {
+    super(`cauthy-auth: token exchange refused (${code}): ${description}`);
+    this.status = status;
+    this.code = code;
+    this.description = description;
+    this.name = "CauthyExchangeError";
+  }
+  status;
+  code;
+  description;
+};
 var McpAuthError = class extends Error {
   constructor(status, code, description) {
     super(`cauthy-auth: ${description}`);
@@ -48,6 +60,9 @@ function bearer(from) {
   const header = (from instanceof Headers ? from : from.headers).get("authorization") ?? "";
   return /^Bearer\s+/i.test(header) ? header.replace(/^Bearer\s+/i, "").trim() : "";
 }
+function isActor(v) {
+  return typeof v === "object" && v !== null && typeof v.sub === "string";
+}
 function quoted(v) {
   return `"${v.replace(/["\\]/g, "")}"`;
 }
@@ -69,6 +84,29 @@ function mcpAuth(options = {}) {
     scopes_supported: options.scopesSupported ?? required,
     ...options.resourceName ? { resource_name: options.resourceName } : {}
   });
+  const introspect = options.introspect ? { cacheMs: ((typeof options.introspect === "object" ? options.introspect.cacheSeconds : void 0) ?? 30) * 1e3 } : null;
+  const answers = /* @__PURE__ */ new Map();
+  const stillAllowed = async (token, cacheMs) => {
+    const now = Date.now();
+    const kept = answers.get(token);
+    if (kept && kept.until > now) return kept.active;
+    let active = false;
+    try {
+      const res = await (options.fetch ?? fetch)(`${issuer}/v1/oauth/introspect`, {
+        method: "POST",
+        headers: { "content-type": "application/x-www-form-urlencoded", accept: "application/json" },
+        body: new URLSearchParams({ token })
+      });
+      if (!res.ok) throw new Error(`introspection answered ${res.status}`);
+      active = (await res.json()).active === true;
+    } catch (err) {
+      if (kept) return kept.active;
+      throw new McpAuthError(401, "invalid_token", `could not check the token with Cauthy: ${err instanceof Error ? err.message : "unreachable"}`);
+    }
+    if (answers.size > 1e4) answers.clear();
+    answers.set(token, { active, until: now + cacheMs });
+    return active;
+  };
   const verify = async (from, needs = []) => {
     const token = bearer(from);
     if (token === "") throw new McpAuthError(401, "invalid_request", "no access token");
@@ -85,9 +123,10 @@ function mcpAuth(options = {}) {
     } catch (err) {
       throw new McpAuthError(401, "invalid_token", err instanceof Error ? err.message : "the token is not valid");
     }
-    const clientId = typeof claims.client_id === "string" ? claims.client_id : "";
-    if (clientId === "") throw new McpAuthError(401, "invalid_token", "not a token issued to an agent");
+    const clientId2 = typeof claims.client_id === "string" ? claims.client_id : "";
+    if (clientId2 === "") throw new McpAuthError(401, "invalid_token", "not a token issued to an agent");
     const scopes = typeof claims.scope === "string" ? claims.scope.split(" ").filter(Boolean) : [];
+    if (introspect && !await stillAllowed(token, introspect.cacheMs)) throw new McpAuthError(401, "invalid_token", "the token is no longer allowed: the agent was disconnected, or its access withdrawn");
     const missing = [...required, ...needs].filter((s) => !scopes.includes(s));
     if (missing.length > 0) throw new McpAuthError(403, "insufficient_scope", `this needs ${missing.join(" ")}`);
     return {
@@ -96,10 +135,58 @@ function mcpAuth(options = {}) {
       ...typeof claims.email === "string" && claims.email !== "" ? { email: claims.email } : {},
       roles: Array.isArray(claims.roles) ? claims.roles.filter((r) => typeof r === "string") : [],
       scopes,
-      clientId,
+      clientId: clientId2,
       expiresAt: new Date(claims.exp * 1e3).toISOString(),
-      token
+      token,
+      ...isActor(claims.act) ? { actor: claims.act.sub } : {}
+    };
+  };
+  const clientId = options.clientId ?? env("CAUTHY_MCP_CLIENT_ID") ?? "";
+  const clientSecret = options.clientSecret ?? env("CAUTHY_MCP_CLIENT_SECRET") ?? "";
+  const exchanged = /* @__PURE__ */ new Map();
+  const exchange = async (from, target, scopes = []) => {
+    if (clientId === "" || clientSecret === "") {
+      throw new Error("cauthy-auth: token exchange needs clientId and clientSecret (CAUTHY_MCP_CLIENT_ID, CAUTHY_MCP_CLIENT_SECRET)");
+    }
+    const subject = typeof from === "string" ? bearer(from) : from.token;
+    const to = canonicalResource(target);
+    const key = `${subject}
+${to}
+${scopes.join(" ")}`;
+    const kept = exchanged.get(key);
+    if (kept && kept.until > Date.now()) return { accessToken: kept.accessToken, scopes: kept.scopes, expiresAt: kept.expiresAt };
+    const res = await (options.fetch ?? fetch)(`${issuer}/v1/oauth/token`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/x-www-form-urlencoded",
+        accept: "application/json",
+        authorization: `Basic ${btoa(`${encodeURIComponent(clientId)}:${encodeURIComponent(clientSecret)}`)}`
+      },
+      body: new URLSearchParams({
+        grant_type: "urn:ietf:params:oauth:grant-type:token-exchange",
+        subject_token: subject,
+        subject_token_type: "urn:ietf:params:oauth:token-type:access_token",
+        resource: to,
+        ...scopes.length > 0 ? { scope: scopes.join(" ") } : {}
+      })
+    });
+    const body = await res.json().catch(() => ({}));
+    if (!res.ok || typeof body.access_token !== "string") {
+      throw new CauthyExchangeError(
+        res.status,
+        typeof body.error === "string" ? body.error : "server_error",
+        typeof body.error_description === "string" ? body.error_description : `Cauthy answered ${res.status}`
+      );
+    }
+    const expiresIn = typeof body.expires_in === "number" ? body.expires_in : 0;
+    const out = {
+      accessToken: body.access_token,
+      scopes: typeof body.scope === "string" ? body.scope.split(" ").filter(Boolean) : [],
+      expiresAt: new Date(Date.now() + expiresIn * 1e3).toISOString()
     };
+    if (exchanged.size > 1e4) exchanged.clear();
+    exchanged.set(key, { ...out, until: Date.now() + Math.max(0, expiresIn - 30) * 1e3 });
+    return out;
   };
   const authenticate = (error) => {
     const parts = [`resource_metadata=${quoted(metadataUrl)}`];
@@ -152,6 +239,7 @@ function mcpAuth(options = {}) {
         return handler(request, agent);
       };
     },
+    exchange,
     middleware(needs) {
       return (req, res, next) => {
         const pathname = (req.originalUrl ?? req.url ?? "/").split("?")[0] ?? "/";
@@ -184,6 +272,7 @@ function mcpAuth(options = {}) {
   };
 }
 export {
+  CauthyExchangeError,
   McpAuthError,
   canonicalResource,
   mcpAuth

package/dist/mcp.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/mcp.ts","../src/verify.ts"],"sourcesContent":["// An MCP server (or any API) that AI agents use as one of your people.\n//\n//   import { mcpAuth } from 'cauthy-auth/mcp'\n//   const auth = mcpAuth({ resource: 'https://mcp.example.com/mcp', scopes: ['books:read'] })\n//\n//   // Fetch-style (Hono, Next.js, Workers, Bun, Deno):\n//   export default { fetch: auth.protect((request, agent) => handleMcp(request, agent)) }\n//\n//   // Express or plain Node, with the MCP TypeScript SDK (its transport reads req.auth):\n//   app.use(auth.middleware())\n//\n// How an agent gets in, as the MCP specification lays it out: it calls the\n// server, which answers 401 and points at its protected resource metadata\n// (RFC 9728); that names Cauthy as the authorization server; the agent\n// registers itself there, sends the person to sign in and allow it, and comes\n// back with a token issued for this server alone (its `aud`). This module is\n// the server's half: the metadata, the 401 that points at it, and checking\n// the token. The resource must be registered in Cauthy's dashboard (AI\n// agents), with the same address, for the workspace whose people use it.\n\nimport { jwtVerify, type JWTVerifyGetKey } from 'jose'\nimport { keysOf } from './verify'\n\n/** The person an agent acts for, and what they allowed it. */\nexport interface AgentIdentity {\n  /** The person. */\n  userId: string\n  tenantId: string\n  email?: string\n  /** The person's roles in the workspace. */\n  roles: string[]\n  /** What the person allowed the agent to do here. */\n  scopes: string[]\n  /** The agent (its client_id at Cauthy). */\n  clientId: string\n  /** UTC, ISO 8601. */\n  expiresAt: string\n  /** The token as it arrived. */\n  token: string\n}\n\nexport interface McpAuthOptions {\n  /** This server's address, as registered in Cauthy. Default: `CAUTHY_MCP_RESOURCE`. */\n  resource?: string\n  /** Cauthy's address. Default: `CAUTHY_ISSUER`. */\n  issuer?: string\n  /** Scopes every call needs. Default: none. */\n  scopes?: string[]\n  /** The scopes this server understands, to tell agents (`scopes_supported`). Default: `scopes`. */\n  scopesSupported?: string[]\n  /** A name for the server, shown by some agents. */\n  resourceName?: string\n  /** Cauthy's keys. Default: fetched from the issuer and cached. */\n  jwks?: JWTVerifyGetKey\n  /** The moment to verify at. Default: now. */\n  now?: () => Date\n}\n\n/** A token refused: `status` is 401 (no token, or not a good one) or 403 (a scope missing). */\nexport class McpAuthError extends Error {\n  constructor(\n    readonly status: 401 | 403,\n    readonly code: 'invalid_request' | 'invalid_token' | 'insufficient_scope',\n    readonly description: string,\n  ) {\n    super(`cauthy-auth: ${description}`)\n    this.name = 'McpAuthError'\n  }\n}\n\n/** What the MCP TypeScript SDK reads from `req.auth` (its AuthInfo). */\nexport interface McpAuthInfo {\n  token: string\n  clientId: string\n  scopes: string[]\n  /** Seconds since the epoch. */\n  expiresAt: number\n  resource: URL\n  extra: { userId: string; tenantId: string; email?: string; roles: string[] }\n}\n\nexport interface McpAuth {\n  /** This server's address, in the form Cauthy compares it in. */\n  resource: string\n  /** Where the protected resource metadata is served. */\n  metadataUrl: string\n  /** The protected resource metadata (RFC 9728). */\n  metadata(): Record<string, unknown>\n  /** The metadata's paths: `/.well-known/oauth-protected-resource` plus this server's path. */\n  metadataPaths: string[]\n  /** Verifies the `Authorization: Bearer` of a request (or a token). Throws `McpAuthError`. */\n  verify(from: string | Request | Headers, needs?: string[]): Promise<AgentIdentity>\n  /** The answer to a refused token: 401 or 403, with the `WWW-Authenticate` that points an agent at Cauthy. */\n  challenge(error?: McpAuthError): Response\n  /** The metadata, when the request asks for it; `null` otherwise. */\n  handleMetadata(request: Request): Response | null\n  /** Wraps a fetch-style handler: serves the metadata, refuses what has no good token, passes the rest with who it is. */\n  protect(handler: (request: Request, agent: AgentIdentity) => Response | Promise<Response>, needs?: string[]): (request: Request) => Promise<Response>\n  /**\n   * Connect-style middleware (Express, Node's http): serves the metadata,\n   * refuses what has no good token, and sets `req.agent` and `req.auth` —\n   * what the MCP TypeScript SDK's transport hands its tools as `authInfo`.\n   */\n  middleware(needs?: string[]): (req: NodeRequest, res: NodeResponse, next: (err?: unknown) => void) => void\n}\n\n// The slice of Node's (and Express's) request and response this needs.\ninterface NodeRequest {\n  method?: string\n  url?: string\n  originalUrl?: string\n  headers: Record<string, string | string[] | undefined>\n  auth?: McpAuthInfo\n  agent?: AgentIdentity\n}\ninterface NodeResponse {\n  statusCode: number\n  setHeader(name: string, value: string): unknown\n  end(body?: string): unknown\n}\n\nfunction env(name: string): string | undefined {\n  return typeof process !== 'undefined' ? process.env?.[name] : undefined\n}\n\n/**\n * The address in the one form Cauthy keeps it: scheme and host in lower case,\n * no default port, no trailing slash, no query, no fragment.\n */\nexport function canonicalResource(raw: string): string {\n  let u: URL\n  try {\n    u = new URL(raw.trim())\n  } catch {\n    throw new Error(`cauthy-auth: resource ${JSON.stringify(raw)} is not an absolute address`)\n  }\n  const local = u.hostname === 'localhost' || u.hostname === '127.0.0.1' || u.hostname === '[::1]'\n  if (u.protocol !== 'https:' && !(u.protocol === 'http:' && local)) {\n    throw new Error('cauthy-auth: resource must be an https address')\n  }\n  if (u.search !== '' || u.hash !== '') throw new Error('cauthy-auth: resource may not have a query or a fragment')\n  return `${u.protocol}//${u.host}${u.pathname.replace(/\\/+$/, '')}`\n}\n\nfunction bearer(from: string | Request | Headers): string {\n  if (typeof from === 'string') return from.replace(/^Bearer\\s+/i, '').trim()\n  const header = (from instanceof Headers ? from : from.headers).get('authorization') ?? ''\n  return /^Bearer\\s+/i.test(header) ? header.replace(/^Bearer\\s+/i, '').trim() : ''\n}\n\nfunction quoted(v: string): string {\n  return `\"${v.replace(/[\"\\\\]/g, '')}\"`\n}\n\n/** Protects an MCP server with Cauthy. */\nexport function mcpAuth(options: McpAuthOptions = {}): McpAuth {\n  const rawResource = options.resource ?? env('CAUTHY_MCP_RESOURCE') ?? ''\n  if (rawResource === '') throw new Error('cauthy-auth: resource (CAUTHY_MCP_RESOURCE) is not set')\n  const resource = canonicalResource(rawResource)\n  const issuer = (options.issuer ?? env('CAUTHY_ISSUER') ?? '').replace(/\\/+$/, '')\n  if (issuer === '') throw new Error('cauthy-auth: issuer (CAUTHY_ISSUER) is not set')\n  const required = options.scopes ?? []\n  const url = new URL(resource)\n  const path = url.pathname === '/' ? '' : url.pathname\n  const metadataPaths = [...new Set([`/.well-known/oauth-protected-resource${path}`, '/.well-known/oauth-protected-resource'])]\n  const metadataUrl = `${url.origin}${metadataPaths[0]}`\n\n  const metadata = () => ({\n    resource,\n    authorization_servers: [issuer],\n    bearer_methods_supported: ['header'],\n    scopes_supported: options.scopesSupported ?? required,\n    ...(options.resourceName ? { resource_name: options.resourceName } : {}),\n  })\n\n  const verify = async (from: string | Request | Headers, needs: string[] = []): Promise<AgentIdentity> => {\n    const token = bearer(from)\n    if (token === '') throw new McpAuthError(401, 'invalid_request', 'no access token')\n    let claims: Record<string, unknown>\n    try {\n      const verified = await jwtVerify(token, options.jwks ?? keysOf(issuer), {\n        algorithms: ['RS256'],\n        issuer,\n        audience: resource,\n        requiredClaims: ['exp', 'sub'],\n        currentDate: options.now?.(),\n      })\n      claims = verified.payload as Record<string, unknown>\n    } catch (err) {\n      throw new McpAuthError(401, 'invalid_token', err instanceof Error ? err.message : 'the token is not valid')\n    }\n    const clientId = typeof claims.client_id === 'string' ? claims.client_id : ''\n    if (clientId === '') throw new McpAuthError(401, 'invalid_token', 'not a token issued to an agent')\n    const scopes = typeof claims.scope === 'string' ? claims.scope.split(' ').filter(Boolean) : []\n    const missing = [...required, ...needs].filter((s) => !scopes.includes(s))\n    if (missing.length > 0) throw new McpAuthError(403, 'insufficient_scope', `this needs ${missing.join(' ')}`)\n    return {\n      userId: String(claims.sub),\n      tenantId: typeof claims.tid === 'string' ? claims.tid : '',\n      ...(typeof claims.email === 'string' && claims.email !== '' ? { email: claims.email } : {}),\n      roles: Array.isArray(claims.roles) ? claims.roles.filter((r): r is string => typeof r === 'string') : [],\n      scopes,\n      clientId,\n      expiresAt: new Date((claims.exp as number) * 1000).toISOString(),\n      token,\n    }\n  }\n\n  const authenticate = (error?: McpAuthError): string => {\n    const parts = [`resource_metadata=${quoted(metadataUrl)}`]\n    if (error && error.code !== 'invalid_request') {\n      parts.push(`error=${quoted(error.code)}`, `error_description=${quoted(error.description)}`)\n    }\n    // What to ask the person for: said when there is no token or it falls short.\n    const scope = error?.code === 'invalid_token' ? [] : required\n    if (scope.length > 0) parts.push(`scope=${quoted(scope.join(' '))}`)\n    return `Bearer ${parts.join(', ')}`\n  }\n\n  const challenge = (error?: McpAuthError): Response => {\n    const status = error?.status ?? 401\n    return new Response(JSON.stringify({ error: error?.code ?? 'invalid_request', error_description: error?.description ?? 'an access token is required' }), {\n      status,\n      headers: { 'content-type': 'application/json', 'www-authenticate': authenticate(error) },\n    })\n  }\n\n  const metadataResponse = () =>\n    new Response(JSON.stringify(metadata()), {\n      headers: { 'content-type': 'application/json', 'cache-control': 'public, max-age=3600', 'access-control-allow-origin': '*' },\n    })\n\n  const isMetadata = (pathname: string, method = 'GET') => method === 'GET' && metadataPaths.includes(pathname.replace(/\\/+$/, '') || '/')\n\n  const handleMetadata = (request: Request): Response | null =>\n    isMetadata(new URL(request.url).pathname, request.method) ? metadataResponse() : null\n\n  const toAuthInfo = (a: AgentIdentity): McpAuthInfo => ({\n    token: a.token,\n    clientId: a.clientId,\n    scopes: a.scopes,\n    expiresAt: Math.floor(new Date(a.expiresAt).getTime() / 1000),\n    resource: new URL(resource),\n    extra: { userId: a.userId, tenantId: a.tenantId, ...(a.email ? { email: a.email } : {}), roles: a.roles },\n  })\n\n  return {\n    resource,\n    metadataUrl,\n    metadataPaths,\n    metadata,\n    verify,\n    challenge,\n    handleMetadata,\n    protect(handler, needs) {\n      return async (request) => {\n        const meta = handleMetadata(request)\n        if (meta) return meta\n        let agent: AgentIdentity\n        try {\n          agent = await verify(request, needs)\n        } catch (err) {\n          if (err instanceof McpAuthError) return challenge(err)\n          throw err\n        }\n        return handler(request, agent)\n      }\n    },\n    middleware(needs) {\n      return (req, res, next) => {\n        const pathname = (req.originalUrl ?? req.url ?? '/').split('?')[0] ?? '/'\n        if (isMetadata(pathname, req.method)) {\n          res.statusCode = 200\n          res.setHeader('content-type', 'application/json')\n          res.setHeader('cache-control', 'public, max-age=3600')\n          res.setHeader('access-control-allow-origin', '*')\n          res.end(JSON.stringify(metadata()))\n          return\n        }\n        const raw = req.headers.authorization\n        const header = Array.isArray(raw) ? (raw[0] ?? '') : (raw ?? '')\n        verify(/^Bearer\\s+/i.test(header) ? header : '', needs).then(\n          (agent) => {\n            req.agent = agent\n            req.auth = toAuthInfo(agent)\n            next()\n          },\n          (err: unknown) => {\n            if (!(err instanceof McpAuthError)) return next(err)\n            res.statusCode = err.status\n            res.setHeader('content-type', 'application/json')\n            res.setHeader('www-authenticate', authenticate(err))\n            res.end(JSON.stringify({ error: err.code, error_description: err.description }))\n          },\n        )\n      }\n    },\n  }\n}\n","// A backend that is handed a Cauthy access token: is it real, and whose is it?\n//\n//   const who = await verifyToken(request)        // or the token itself\n//   who.userId, who.tenantId, who.roles\n//\n// Cauthy signs its tokens with a key it publishes (/.well-known/jwks.json), so\n// checking one needs no secret and no call to Cauthy per request: the keys are\n// fetched once and cached. Throws `CauthyTokenError` for anything else: answer\n// it 401.\n\nimport { createRemoteJWKSet, jwtVerify, type JWTVerifyGetKey } from 'jose'\n\n/** Who a verified access token belongs to. */\nexport interface TokenIdentity {\n  /** The person. For a system's own token, the client it identifies as. */\n  userId: string\n  tenantId: string\n  email?: string\n  roles: string[]\n  /** Set when the token is a system's own and not a person's. */\n  system?: string\n  /** UTC, ISO 8601. */\n  expiresAt: string\n  /** The token as it arrived, to pass on. */\n  token: string\n}\n\nexport class CauthyTokenError extends Error {\n  constructor(readonly reason: string) {\n    super(`cauthy-auth: token refused: ${reason}`)\n    this.name = 'CauthyTokenError'\n  }\n}\n\nexport interface VerifyTokenOptions {\n  /** Cauthy's address. Default: `CAUTHY_ISSUER`. */\n  issuer?: string\n  /** The audience the tokens must carry. Default: `CAUTHY_AUDIENCE`; unchecked when neither is set. */\n  audience?: string\n  /** Refuse a token of any other workspace. Default: `CAUTHY_TENANT_ID`; unchecked when neither is set. */\n  tenantId?: string\n  /** Cauthy's keys. Default: fetched from the issuer and cached. */\n  jwks?: JWTVerifyGetKey\n  /** The moment to verify at. Default: now. */\n  now?: Date\n}\n\nconst keys = new Map<string, JWTVerifyGetKey>()\n\n/** Cauthy's published keys, fetched once per issuer and cached. */\nexport function keysOf(issuer: string): JWTVerifyGetKey {\n  let set = keys.get(issuer)\n  if (set === undefined) {\n    set = createRemoteJWKSet(new URL(`${issuer}/.well-known/jwks.json`), { cooldownDuration: 30_000 })\n    keys.set(issuer, set)\n  }\n  return set\n}\n\nfunction env(name: string): string | undefined {\n  return typeof process !== 'undefined' ? process.env?.[name] : undefined\n}\n\nfunction bearer(from: string | Request | Headers): string {\n  if (typeof from === 'string') return from.replace(/^Bearer\\s+/i, '').trim()\n  const header = (from instanceof Headers ? from : from.headers).get('authorization') ?? ''\n  return /^Bearer\\s+/i.test(header) ? header.replace(/^Bearer\\s+/i, '').trim() : ''\n}\n\n/**\n * Verifies an access token (or the `Authorization: Bearer` of a request) and\n * answers who it belongs to. Checked: the signature, against Cauthy's\n * published keys; that Cauthy issued it; that it has not expired; and the\n * audience and the workspace, when given.\n */\nexport async function verifyToken(from: string | Request | Headers, options: VerifyTokenOptions = {}): Promise<TokenIdentity> {\n  const issuer = (options.issuer ?? env('CAUTHY_ISSUER') ?? '').replace(/\\/+$/, '')\n  if (issuer === '') throw new CauthyTokenError('issuer (CAUTHY_ISSUER) is not set')\n  const token = bearer(from)\n  if (token === '') throw new CauthyTokenError('no token')\n\n  let claims: Record<string, unknown>\n  try {\n    const verified = await jwtVerify(token, options.jwks ?? keysOf(issuer), {\n      algorithms: ['RS256'],\n      issuer,\n      audience: options.audience ?? env('CAUTHY_AUDIENCE'),\n      requiredClaims: ['exp', 'sub'],\n      currentDate: options.now,\n    })\n    claims = verified.payload as Record<string, unknown>\n  } catch (err) {\n    throw new CauthyTokenError(err instanceof Error ? err.message : 'bad signature')\n  }\n\n  const tenantId = typeof claims.tid === 'string' ? claims.tid : ''\n  const wanted = options.tenantId ?? env('CAUTHY_TENANT_ID')\n  if (wanted && tenantId !== wanted) throw new CauthyTokenError('issued for another workspace')\n\n  return {\n    userId: String(claims.sub),\n    tenantId,\n    ...(typeof claims.email === 'string' && claims.email !== '' ? { email: claims.email } : {}),\n    roles: Array.isArray(claims.roles) ? claims.roles.filter((r): r is string => typeof r === 'string') : [],\n    ...(typeof claims.sys === 'string' && claims.sys !== '' ? { system: claims.sys } : {}),\n    expiresAt: new Date((claims.exp as number) * 1000).toISOString(),\n    token,\n  }\n}\n"],"mappings":";AAoBA,SAAS,aAAAA,kBAAuC;;;ACVhD,SAAS,oBAAoB,iBAAuC;AAqCpE,IAAM,OAAO,oBAAI,IAA6B;AAGvC,SAAS,OAAO,QAAiC;AACtD,MAAI,MAAM,KAAK,IAAI,MAAM;AACzB,MAAI,QAAQ,QAAW;AACrB,UAAM,mBAAmB,IAAI,IAAI,GAAG,MAAM,wBAAwB,GAAG,EAAE,kBAAkB,IAAO,CAAC;AACjG,SAAK,IAAI,QAAQ,GAAG;AAAA,EACtB;AACA,SAAO;AACT;;;ADEO,IAAM,eAAN,cAA2B,MAAM;AAAA,EACtC,YACW,QACA,MACA,aACT;AACA,UAAM,gBAAgB,WAAW,EAAE;AAJ1B;AACA;AACA;AAGT,SAAK,OAAO;AAAA,EACd;AAAA,EANW;AAAA,EACA;AAAA,EACA;AAKb;AAqDA,SAAS,IAAI,MAAkC;AAC7C,SAAO,OAAO,YAAY,cAAc,QAAQ,MAAM,IAAI,IAAI;AAChE;AAMO,SAAS,kBAAkB,KAAqB;AACrD,MAAI;AACJ,MAAI;AACF,QAAI,IAAI,IAAI,IAAI,KAAK,CAAC;AAAA,EACxB,QAAQ;AACN,UAAM,IAAI,MAAM,yBAAyB,KAAK,UAAU,GAAG,CAAC,6BAA6B;AAAA,EAC3F;AACA,QAAM,QAAQ,EAAE,aAAa,eAAe,EAAE,aAAa,eAAe,EAAE,aAAa;AACzF,MAAI,EAAE,aAAa,YAAY,EAAE,EAAE,aAAa,WAAW,QAAQ;AACjE,UAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AACA,MAAI,EAAE,WAAW,MAAM,EAAE,SAAS,GAAI,OAAM,IAAI,MAAM,0DAA0D;AAChH,SAAO,GAAG,EAAE,QAAQ,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS,QAAQ,QAAQ,EAAE,CAAC;AAClE;AAEA,SAAS,OAAO,MAA0C;AACxD,MAAI,OAAO,SAAS,SAAU,QAAO,KAAK,QAAQ,eAAe,EAAE,EAAE,KAAK;AAC1E,QAAM,UAAU,gBAAgB,UAAU,OAAO,KAAK,SAAS,IAAI,eAAe,KAAK;AACvF,SAAO,cAAc,KAAK,MAAM,IAAI,OAAO,QAAQ,eAAe,EAAE,EAAE,KAAK,IAAI;AACjF;AAEA,SAAS,OAAO,GAAmB;AACjC,SAAO,IAAI,EAAE,QAAQ,UAAU,EAAE,CAAC;AACpC;AAGO,SAAS,QAAQ,UAA0B,CAAC,GAAY;AAC7D,QAAM,cAAc,QAAQ,YAAY,IAAI,qBAAqB,KAAK;AACtE,MAAI,gBAAgB,GAAI,OAAM,IAAI,MAAM,wDAAwD;AAChG,QAAM,WAAW,kBAAkB,WAAW;AAC9C,QAAM,UAAU,QAAQ,UAAU,IAAI,eAAe,KAAK,IAAI,QAAQ,QAAQ,EAAE;AAChF,MAAI,WAAW,GAAI,OAAM,IAAI,MAAM,gDAAgD;AACnF,QAAM,WAAW,QAAQ,UAAU,CAAC;AACpC,QAAM,MAAM,IAAI,IAAI,QAAQ;AAC5B,QAAM,OAAO,IAAI,aAAa,MAAM,KAAK,IAAI;AAC7C,QAAM,gBAAgB,CAAC,GAAG,oBAAI,IAAI,CAAC,wCAAwC,IAAI,IAAI,uCAAuC,CAAC,CAAC;AAC5H,QAAM,cAAc,GAAG,IAAI,MAAM,GAAG,cAAc,CAAC,CAAC;AAEpD,QAAM,WAAW,OAAO;AAAA,IACtB;AAAA,IACA,uBAAuB,CAAC,MAAM;AAAA,IAC9B,0BAA0B,CAAC,QAAQ;AAAA,IACnC,kBAAkB,QAAQ,mBAAmB;AAAA,IAC7C,GAAI,QAAQ,eAAe,EAAE,eAAe,QAAQ,aAAa,IAAI,CAAC;AAAA,EACxE;AAEA,QAAM,SAAS,OAAO,MAAkC,QAAkB,CAAC,MAA8B;AACvG,UAAM,QAAQ,OAAO,IAAI;AACzB,QAAI,UAAU,GAAI,OAAM,IAAI,aAAa,KAAK,mBAAmB,iBAAiB;AAClF,QAAI;AACJ,QAAI;AACF,YAAM,WAAW,MAAMC,WAAU,OAAO,QAAQ,QAAQ,OAAO,MAAM,GAAG;AAAA,QACtE,YAAY,CAAC,OAAO;AAAA,QACpB;AAAA,QACA,UAAU;AAAA,QACV,gBAAgB,CAAC,OAAO,KAAK;AAAA,QAC7B,aAAa,QAAQ,MAAM;AAAA,MAC7B,CAAC;AACD,eAAS,SAAS;AAAA,IACpB,SAAS,KAAK;AACZ,YAAM,IAAI,aAAa,KAAK,iBAAiB,eAAe,QAAQ,IAAI,UAAU,wBAAwB;AAAA,IAC5G;AACA,UAAM,WAAW,OAAO,OAAO,cAAc,WAAW,OAAO,YAAY;AAC3E,QAAI,aAAa,GAAI,OAAM,IAAI,aAAa,KAAK,iBAAiB,gCAAgC;AAClG,UAAM,SAAS,OAAO,OAAO,UAAU,WAAW,OAAO,MAAM,MAAM,GAAG,EAAE,OAAO,OAAO,IAAI,CAAC;AAC7F,UAAM,UAAU,CAAC,GAAG,UAAU,GAAG,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,SAAS,CAAC,CAAC;AACzE,QAAI,QAAQ,SAAS,EAAG,OAAM,IAAI,aAAa,KAAK,sBAAsB,cAAc,QAAQ,KAAK,GAAG,CAAC,EAAE;AAC3G,WAAO;AAAA,MACL,QAAQ,OAAO,OAAO,GAAG;AAAA,MACzB,UAAU,OAAO,OAAO,QAAQ,WAAW,OAAO,MAAM;AAAA,MACxD,GAAI,OAAO,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;AAAA,MACzF,OAAO,MAAM,QAAQ,OAAO,KAAK,IAAI,OAAO,MAAM,OAAO,CAAC,MAAmB,OAAO,MAAM,QAAQ,IAAI,CAAC;AAAA,MACvG;AAAA,MACA;AAAA,MACA,WAAW,IAAI,KAAM,OAAO,MAAiB,GAAI,EAAE,YAAY;AAAA,MAC/D;AAAA,IACF;AAAA,EACF;AAEA,QAAM,eAAe,CAAC,UAAiC;AACrD,UAAM,QAAQ,CAAC,qBAAqB,OAAO,WAAW,CAAC,EAAE;AACzD,QAAI,SAAS,MAAM,SAAS,mBAAmB;AAC7C,YAAM,KAAK,SAAS,OAAO,MAAM,IAAI,CAAC,IAAI,qBAAqB,OAAO,MAAM,WAAW,CAAC,EAAE;AAAA,IAC5F;AAEA,UAAM,QAAQ,OAAO,SAAS,kBAAkB,CAAC,IAAI;AACrD,QAAI,MAAM,SAAS,EAAG,OAAM,KAAK,SAAS,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE;AACnE,WAAO,UAAU,MAAM,KAAK,IAAI,CAAC;AAAA,EACnC;AAEA,QAAM,YAAY,CAAC,UAAmC;AACpD,UAAM,SAAS,OAAO,UAAU;AAChC,WAAO,IAAI,SAAS,KAAK,UAAU,EAAE,OAAO,OAAO,QAAQ,mBAAmB,mBAAmB,OAAO,eAAe,8BAA8B,CAAC,GAAG;AAAA,MACvJ;AAAA,MACA,SAAS,EAAE,gBAAgB,oBAAoB,oBAAoB,aAAa,KAAK,EAAE;AAAA,IACzF,CAAC;AAAA,EACH;AAEA,QAAM,mBAAmB,MACvB,IAAI,SAAS,KAAK,UAAU,SAAS,CAAC,GAAG;AAAA,IACvC,SAAS,EAAE,gBAAgB,oBAAoB,iBAAiB,wBAAwB,+BAA+B,IAAI;AAAA,EAC7H,CAAC;AAEH,QAAM,aAAa,CAAC,UAAkB,SAAS,UAAU,WAAW,SAAS,cAAc,SAAS,SAAS,QAAQ,QAAQ,EAAE,KAAK,GAAG;AAEvI,QAAM,iBAAiB,CAAC,YACtB,WAAW,IAAI,IAAI,QAAQ,GAAG,EAAE,UAAU,QAAQ,MAAM,IAAI,iBAAiB,IAAI;AAEnF,QAAM,aAAa,CAAC,OAAmC;AAAA,IACrD,OAAO,EAAE;AAAA,IACT,UAAU,EAAE;AAAA,IACZ,QAAQ,EAAE;AAAA,IACV,WAAW,KAAK,MAAM,IAAI,KAAK,EAAE,SAAS,EAAE,QAAQ,IAAI,GAAI;AAAA,IAC5D,UAAU,IAAI,IAAI,QAAQ;AAAA,IAC1B,OAAO,EAAE,QAAQ,EAAE,QAAQ,UAAU,EAAE,UAAU,GAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,GAAI,OAAO,EAAE,MAAM;AAAA,EAC1G;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,SAAS,OAAO;AACtB,aAAO,OAAO,YAAY;AACxB,cAAM,OAAO,eAAe,OAAO;AACnC,YAAI,KAAM,QAAO;AACjB,YAAI;AACJ,YAAI;AACF,kBAAQ,MAAM,OAAO,SAAS,KAAK;AAAA,QACrC,SAAS,KAAK;AACZ,cAAI,eAAe,aAAc,QAAO,UAAU,GAAG;AACrD,gBAAM;AAAA,QACR;AACA,eAAO,QAAQ,SAAS,KAAK;AAAA,MAC/B;AAAA,IACF;AAAA,IACA,WAAW,OAAO;AAChB,aAAO,CAAC,KAAK,KAAK,SAAS;AACzB,cAAM,YAAY,IAAI,eAAe,IAAI,OAAO,KAAK,MAAM,GAAG,EAAE,CAAC,KAAK;AACtE,YAAI,WAAW,UAAU,IAAI,MAAM,GAAG;AACpC,cAAI,aAAa;AACjB,cAAI,UAAU,gBAAgB,kBAAkB;AAChD,cAAI,UAAU,iBAAiB,sBAAsB;AACrD,cAAI,UAAU,+BAA+B,GAAG;AAChD,cAAI,IAAI,KAAK,UAAU,SAAS,CAAC,CAAC;AAClC;AAAA,QACF;AACA,cAAM,MAAM,IAAI,QAAQ;AACxB,cAAM,SAAS,MAAM,QAAQ,GAAG,IAAK,IAAI,CAAC,KAAK,KAAO,OAAO;AAC7D,eAAO,cAAc,KAAK,MAAM,IAAI,SAAS,IAAI,KAAK,EAAE;AAAA,UACtD,CAAC,UAAU;AACT,gBAAI,QAAQ;AACZ,gBAAI,OAAO,WAAW,KAAK;AAC3B,iBAAK;AAAA,UACP;AAAA,UACA,CAAC,QAAiB;AAChB,gBAAI,EAAE,eAAe,cAAe,QAAO,KAAK,GAAG;AACnD,gBAAI,aAAa,IAAI;AACrB,gBAAI,UAAU,gBAAgB,kBAAkB;AAChD,gBAAI,UAAU,oBAAoB,aAAa,GAAG,CAAC;AACnD,gBAAI,IAAI,KAAK,UAAU,EAAE,OAAO,IAAI,MAAM,mBAAmB,IAAI,YAAY,CAAC,CAAC;AAAA,UACjF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;","names":["jwtVerify","jwtVerify"]}
+{"version":3,"sources":["../src/mcp.ts","../src/verify.ts"],"sourcesContent":["// An MCP server (or any API) that AI agents use as one of your people.\n//\n//   import { mcpAuth } from 'cauthy-auth/mcp'\n//   const auth = mcpAuth({ resource: 'https://mcp.example.com/mcp', scopes: ['books:read'] })\n//\n//   // Fetch-style (Hono, Next.js, Workers, Bun, Deno):\n//   export default { fetch: auth.protect((request, agent) => handleMcp(request, agent)) }\n//\n//   // Express or plain Node, with the MCP TypeScript SDK (its transport reads req.auth):\n//   app.use(auth.middleware())\n//\n// How an agent gets in, as the MCP specification lays it out: it calls the\n// server, which answers 401 and points at its protected resource metadata\n// (RFC 9728); that names Cauthy as the authorization server; the agent\n// registers itself there, sends the person to sign in and allow it, and comes\n// back with a token issued for this server alone (its `aud`). This module is\n// the server's half: the metadata, the 401 that points at it, and checking\n// the token. The resource must be registered in Cauthy's dashboard (AI\n// agents), with the same address, for the workspace whose people use it.\n//\n// A server that calls another of the workspace's servers for the person\n// trades the agent's token for one for that server (token exchange, RFC 8693):\n//\n//   const auth = mcpAuth({ resource, clientId, clientSecret })   // from the dashboard\n//   const { accessToken } = await auth.exchange(agent, 'https://api.example.com', ['orders:read'])\n//\n// The workspace's admins must have delegated that call in the dashboard, and\n// the person allowed it when they connected the agent.\n\nimport { jwtVerify, type JWTVerifyGetKey } from 'jose'\nimport { keysOf } from './verify'\n\n/** The person an agent acts for, and what they allowed it. */\nexport interface AgentIdentity {\n  /** The person. */\n  userId: string\n  tenantId: string\n  email?: string\n  /** The person's roles in the workspace. */\n  roles: string[]\n  /** What the person allowed the agent to do here. */\n  scopes: string[]\n  /** The agent (its client_id at Cauthy). */\n  clientId: string\n  /** UTC, ISO 8601. */\n  expiresAt: string\n  /** The token as it arrived. */\n  token: string\n  /**\n   * Set when the token came by token exchange: the server that called this\n   * one for the person (the `act` claim's subject).\n   */\n  actor?: string\n}\n\nexport interface McpAuthOptions {\n  /** This server's address, as registered in Cauthy. Default: `CAUTHY_MCP_RESOURCE`. */\n  resource?: string\n  /** Cauthy's address. Default: `CAUTHY_ISSUER`. */\n  issuer?: string\n  /** Scopes every call needs. Default: none. */\n  scopes?: string[]\n  /** The scopes this server understands, to tell agents (`scopes_supported`). Default: `scopes`. */\n  scopesSupported?: string[]\n  /** A name for the server, shown by some agents. */\n  resourceName?: string\n  /** Cauthy's keys. Default: fetched from the issuer and cached. */\n  jwks?: JWTVerifyGetKey\n  /** The moment to verify at. Default: now. */\n  now?: () => Date\n  /**\n   * Ask Cauthy, besides checking the token here, whether the person still\n   * allows the agent (RFC 7662). Then an agent is cut off the moment it is\n   * disconnected, not when its token runs out, at the price of a call to\n   * Cauthy per token every `cacheSeconds` (default 30). Default: off.\n   */\n  introspect?: boolean | { cacheSeconds?: number }\n  /** The fetch to call Cauthy with. Default: the global one. */\n  fetch?: typeof fetch\n  /**\n   * This server's client_id and secret at Cauthy, for token exchange (AI\n   * agents → the server → Server credentials). Defaults:\n   * `CAUTHY_MCP_CLIENT_ID`, `CAUTHY_MCP_CLIENT_SECRET`.\n   */\n  clientId?: string\n  clientSecret?: string\n}\n\n/** What a token exchange answers. */\nexport interface ExchangedToken {\n  /** The token for the other server, as the person. Send it as `Authorization: Bearer`. */\n  accessToken: string\n  /** What it allows there. */\n  scopes: string[]\n  /** UTC, ISO 8601. Never later than the agent's own token. */\n  expiresAt: string\n}\n\n/** A token exchange Cauthy refused, with the OAuth error it answered. */\nexport class CauthyExchangeError extends Error {\n  constructor(\n    readonly status: number,\n    readonly code: string,\n    readonly description: string,\n  ) {\n    super(`cauthy-auth: token exchange refused (${code}): ${description}`)\n    this.name = 'CauthyExchangeError'\n  }\n}\n\n/** A token refused: `status` is 401 (no token, or not a good one) or 403 (a scope missing). */\nexport class McpAuthError extends Error {\n  constructor(\n    readonly status: 401 | 403,\n    readonly code: 'invalid_request' | 'invalid_token' | 'insufficient_scope',\n    readonly description: string,\n  ) {\n    super(`cauthy-auth: ${description}`)\n    this.name = 'McpAuthError'\n  }\n}\n\n/** What the MCP TypeScript SDK reads from `req.auth` (its AuthInfo). */\nexport interface McpAuthInfo {\n  token: string\n  clientId: string\n  scopes: string[]\n  /** Seconds since the epoch. */\n  expiresAt: number\n  resource: URL\n  extra: { userId: string; tenantId: string; email?: string; roles: string[] }\n}\n\nexport interface McpAuth {\n  /** This server's address, in the form Cauthy compares it in. */\n  resource: string\n  /** Where the protected resource metadata is served. */\n  metadataUrl: string\n  /** The protected resource metadata (RFC 9728). */\n  metadata(): Record<string, unknown>\n  /** The metadata's paths: `/.well-known/oauth-protected-resource` plus this server's path. */\n  metadataPaths: string[]\n  /** Verifies the `Authorization: Bearer` of a request (or a token). Throws `McpAuthError`. */\n  verify(from: string | Request | Headers, needs?: string[]): Promise<AgentIdentity>\n  /** The answer to a refused token: 401 or 403, with the `WWW-Authenticate` that points an agent at Cauthy. */\n  challenge(error?: McpAuthError): Response\n  /** The metadata, when the request asks for it; `null` otherwise. */\n  handleMetadata(request: Request): Response | null\n  /** Wraps a fetch-style handler: serves the metadata, refuses what has no good token, passes the rest with who it is. */\n  protect(handler: (request: Request, agent: AgentIdentity) => Response | Promise<Response>, needs?: string[]): (request: Request) => Promise<Response>\n  /**\n   * Connect-style middleware (Express, Node's http): serves the metadata,\n   * refuses what has no good token, and sets `req.agent` and `req.auth` —\n   * what the MCP TypeScript SDK's transport hands its tools as `authInfo`.\n   */\n  middleware(needs?: string[]): (req: NodeRequest, res: NodeResponse, next: (err?: unknown) => void) => void\n  /**\n   * Trades the agent's token this server received for one for another of the\n   * workspace's servers, to call it for the person (RFC 8693). Needs this\n   * server's `clientId` and `clientSecret`. Answers are kept until shortly\n   * before they expire. Throws `CauthyExchangeError` when Cauthy refuses.\n   */\n  exchange(from: string | AgentIdentity, target: string, scopes?: string[]): Promise<ExchangedToken>\n}\n\n// The slice of Node's (and Express's) request and response this needs.\ninterface NodeRequest {\n  method?: string\n  url?: string\n  originalUrl?: string\n  headers: Record<string, string | string[] | undefined>\n  auth?: McpAuthInfo\n  agent?: AgentIdentity\n}\ninterface NodeResponse {\n  statusCode: number\n  setHeader(name: string, value: string): unknown\n  end(body?: string): unknown\n}\n\nfunction env(name: string): string | undefined {\n  return typeof process !== 'undefined' ? process.env?.[name] : undefined\n}\n\n/**\n * The address in the one form Cauthy keeps it: scheme and host in lower case,\n * no default port, no trailing slash, no query, no fragment.\n */\nexport function canonicalResource(raw: string): string {\n  let u: URL\n  try {\n    u = new URL(raw.trim())\n  } catch {\n    throw new Error(`cauthy-auth: resource ${JSON.stringify(raw)} is not an absolute address`)\n  }\n  const local = u.hostname === 'localhost' || u.hostname === '127.0.0.1' || u.hostname === '[::1]'\n  if (u.protocol !== 'https:' && !(u.protocol === 'http:' && local)) {\n    throw new Error('cauthy-auth: resource must be an https address')\n  }\n  if (u.search !== '' || u.hash !== '') throw new Error('cauthy-auth: resource may not have a query or a fragment')\n  return `${u.protocol}//${u.host}${u.pathname.replace(/\\/+$/, '')}`\n}\n\nfunction bearer(from: string | Request | Headers): string {\n  if (typeof from === 'string') return from.replace(/^Bearer\\s+/i, '').trim()\n  const header = (from instanceof Headers ? from : from.headers).get('authorization') ?? ''\n  return /^Bearer\\s+/i.test(header) ? header.replace(/^Bearer\\s+/i, '').trim() : ''\n}\n\nfunction isActor(v: unknown): v is { sub: string } {\n  return typeof v === 'object' && v !== null && typeof (v as { sub?: unknown }).sub === 'string'\n}\n\nfunction quoted(v: string): string {\n  return `\"${v.replace(/[\"\\\\]/g, '')}\"`\n}\n\n/** Protects an MCP server with Cauthy. */\nexport function mcpAuth(options: McpAuthOptions = {}): McpAuth {\n  const rawResource = options.resource ?? env('CAUTHY_MCP_RESOURCE') ?? ''\n  if (rawResource === '') throw new Error('cauthy-auth: resource (CAUTHY_MCP_RESOURCE) is not set')\n  const resource = canonicalResource(rawResource)\n  const issuer = (options.issuer ?? env('CAUTHY_ISSUER') ?? '').replace(/\\/+$/, '')\n  if (issuer === '') throw new Error('cauthy-auth: issuer (CAUTHY_ISSUER) is not set')\n  const required = options.scopes ?? []\n  const url = new URL(resource)\n  const path = url.pathname === '/' ? '' : url.pathname\n  const metadataPaths = [...new Set([`/.well-known/oauth-protected-resource${path}`, '/.well-known/oauth-protected-resource'])]\n  const metadataUrl = `${url.origin}${metadataPaths[0]}`\n\n  const metadata = () => ({\n    resource,\n    authorization_servers: [issuer],\n    bearer_methods_supported: ['header'],\n    scopes_supported: options.scopesSupported ?? required,\n    ...(options.resourceName ? { resource_name: options.resourceName } : {}),\n  })\n\n  const introspect = options.introspect ? { cacheMs: ((typeof options.introspect === 'object' ? options.introspect.cacheSeconds : undefined) ?? 30) * 1000 } : null\n  const answers = new Map<string, { active: boolean; until: number }>()\n  const stillAllowed = async (token: string, cacheMs: number): Promise<boolean> => {\n    const now = Date.now()\n    const kept = answers.get(token)\n    if (kept && kept.until > now) return kept.active\n    let active = false\n    try {\n      const res = await (options.fetch ?? fetch)(`${issuer}/v1/oauth/introspect`, {\n        method: 'POST',\n        headers: { 'content-type': 'application/x-www-form-urlencoded', accept: 'application/json' },\n        body: new URLSearchParams({ token }),\n      })\n      if (!res.ok) throw new Error(`introspection answered ${res.status}`)\n      active = ((await res.json()) as { active?: unknown }).active === true\n    } catch (err) {\n      // Cauthy could not be asked: what it last said holds.\n      if (kept) return kept.active\n      throw new McpAuthError(401, 'invalid_token', `could not check the token with Cauthy: ${err instanceof Error ? err.message : 'unreachable'}`)\n    }\n    if (answers.size > 10_000) answers.clear()\n    answers.set(token, { active, until: now + cacheMs })\n    return active\n  }\n\n  const verify = async (from: string | Request | Headers, needs: string[] = []): Promise<AgentIdentity> => {\n    const token = bearer(from)\n    if (token === '') throw new McpAuthError(401, 'invalid_request', 'no access token')\n    let claims: Record<string, unknown>\n    try {\n      const verified = await jwtVerify(token, options.jwks ?? keysOf(issuer), {\n        algorithms: ['RS256'],\n        issuer,\n        audience: resource,\n        requiredClaims: ['exp', 'sub'],\n        currentDate: options.now?.(),\n      })\n      claims = verified.payload as Record<string, unknown>\n    } catch (err) {\n      throw new McpAuthError(401, 'invalid_token', err instanceof Error ? err.message : 'the token is not valid')\n    }\n    const clientId = typeof claims.client_id === 'string' ? claims.client_id : ''\n    if (clientId === '') throw new McpAuthError(401, 'invalid_token', 'not a token issued to an agent')\n    const scopes = typeof claims.scope === 'string' ? claims.scope.split(' ').filter(Boolean) : []\n    if (introspect && !(await stillAllowed(token, introspect.cacheMs))) throw new McpAuthError(401, 'invalid_token', 'the token is no longer allowed: the agent was disconnected, or its access withdrawn')\n    const missing = [...required, ...needs].filter((s) => !scopes.includes(s))\n    if (missing.length > 0) throw new McpAuthError(403, 'insufficient_scope', `this needs ${missing.join(' ')}`)\n    return {\n      userId: String(claims.sub),\n      tenantId: typeof claims.tid === 'string' ? claims.tid : '',\n      ...(typeof claims.email === 'string' && claims.email !== '' ? { email: claims.email } : {}),\n      roles: Array.isArray(claims.roles) ? claims.roles.filter((r): r is string => typeof r === 'string') : [],\n      scopes,\n      clientId,\n      expiresAt: new Date((claims.exp as number) * 1000).toISOString(),\n      token,\n      ...(isActor(claims.act) ? { actor: claims.act.sub } : {}),\n    }\n  }\n\n  const clientId = options.clientId ?? env('CAUTHY_MCP_CLIENT_ID') ?? ''\n  const clientSecret = options.clientSecret ?? env('CAUTHY_MCP_CLIENT_SECRET') ?? ''\n  const exchanged = new Map<string, ExchangedToken & { until: number }>()\n  const exchange = async (from: string | AgentIdentity, target: string, scopes: string[] = []): Promise<ExchangedToken> => {\n    if (clientId === '' || clientSecret === '') {\n      throw new Error('cauthy-auth: token exchange needs clientId and clientSecret (CAUTHY_MCP_CLIENT_ID, CAUTHY_MCP_CLIENT_SECRET)')\n    }\n    const subject = typeof from === 'string' ? bearer(from) : from.token\n    const to = canonicalResource(target)\n    const key = `${subject}\\n${to}\\n${scopes.join(' ')}`\n    const kept = exchanged.get(key)\n    if (kept && kept.until > Date.now()) return { accessToken: kept.accessToken, scopes: kept.scopes, expiresAt: kept.expiresAt }\n    const res = await (options.fetch ?? fetch)(`${issuer}/v1/oauth/token`, {\n      method: 'POST',\n      headers: {\n        'content-type': 'application/x-www-form-urlencoded',\n        accept: 'application/json',\n        authorization: `Basic ${btoa(`${encodeURIComponent(clientId)}:${encodeURIComponent(clientSecret)}`)}`,\n      },\n      body: new URLSearchParams({\n        grant_type: 'urn:ietf:params:oauth:grant-type:token-exchange',\n        subject_token: subject,\n        subject_token_type: 'urn:ietf:params:oauth:token-type:access_token',\n        resource: to,\n        ...(scopes.length > 0 ? { scope: scopes.join(' ') } : {}),\n      }),\n    })\n    const body = (await res.json().catch(() => ({}))) as Record<string, unknown>\n    if (!res.ok || typeof body.access_token !== 'string') {\n      throw new CauthyExchangeError(res.status, typeof body.error === 'string' ? body.error : 'server_error',\n        typeof body.error_description === 'string' ? body.error_description : `Cauthy answered ${res.status}`)\n    }\n    const expiresIn = typeof body.expires_in === 'number' ? body.expires_in : 0\n    const out: ExchangedToken = {\n      accessToken: body.access_token,\n      scopes: typeof body.scope === 'string' ? body.scope.split(' ').filter(Boolean) : [],\n      expiresAt: new Date(Date.now() + expiresIn * 1000).toISOString(),\n    }\n    if (exchanged.size > 10_000) exchanged.clear()\n    // Kept until 30 seconds before it runs out, so it is never sent stale.\n    exchanged.set(key, { ...out, until: Date.now() + Math.max(0, expiresIn - 30) * 1000 })\n    return out\n  }\n\n  const authenticate = (error?: McpAuthError): string => {\n    const parts = [`resource_metadata=${quoted(metadataUrl)}`]\n    if (error && error.code !== 'invalid_request') {\n      parts.push(`error=${quoted(error.code)}`, `error_description=${quoted(error.description)}`)\n    }\n    // What to ask the person for: said when there is no token or it falls short.\n    const scope = error?.code === 'invalid_token' ? [] : required\n    if (scope.length > 0) parts.push(`scope=${quoted(scope.join(' '))}`)\n    return `Bearer ${parts.join(', ')}`\n  }\n\n  const challenge = (error?: McpAuthError): Response => {\n    const status = error?.status ?? 401\n    return new Response(JSON.stringify({ error: error?.code ?? 'invalid_request', error_description: error?.description ?? 'an access token is required' }), {\n      status,\n      headers: { 'content-type': 'application/json', 'www-authenticate': authenticate(error) },\n    })\n  }\n\n  const metadataResponse = () =>\n    new Response(JSON.stringify(metadata()), {\n      headers: { 'content-type': 'application/json', 'cache-control': 'public, max-age=3600', 'access-control-allow-origin': '*' },\n    })\n\n  const isMetadata = (pathname: string, method = 'GET') => method === 'GET' && metadataPaths.includes(pathname.replace(/\\/+$/, '') || '/')\n\n  const handleMetadata = (request: Request): Response | null =>\n    isMetadata(new URL(request.url).pathname, request.method) ? metadataResponse() : null\n\n  const toAuthInfo = (a: AgentIdentity): McpAuthInfo => ({\n    token: a.token,\n    clientId: a.clientId,\n    scopes: a.scopes,\n    expiresAt: Math.floor(new Date(a.expiresAt).getTime() / 1000),\n    resource: new URL(resource),\n    extra: { userId: a.userId, tenantId: a.tenantId, ...(a.email ? { email: a.email } : {}), roles: a.roles },\n  })\n\n  return {\n    resource,\n    metadataUrl,\n    metadataPaths,\n    metadata,\n    verify,\n    challenge,\n    handleMetadata,\n    protect(handler, needs) {\n      return async (request) => {\n        const meta = handleMetadata(request)\n        if (meta) return meta\n        let agent: AgentIdentity\n        try {\n          agent = await verify(request, needs)\n        } catch (err) {\n          if (err instanceof McpAuthError) return challenge(err)\n          throw err\n        }\n        return handler(request, agent)\n      }\n    },\n    exchange,\n    middleware(needs) {\n      return (req, res, next) => {\n        const pathname = (req.originalUrl ?? req.url ?? '/').split('?')[0] ?? '/'\n        if (isMetadata(pathname, req.method)) {\n          res.statusCode = 200\n          res.setHeader('content-type', 'application/json')\n          res.setHeader('cache-control', 'public, max-age=3600')\n          res.setHeader('access-control-allow-origin', '*')\n          res.end(JSON.stringify(metadata()))\n          return\n        }\n        const raw = req.headers.authorization\n        const header = Array.isArray(raw) ? (raw[0] ?? '') : (raw ?? '')\n        verify(/^Bearer\\s+/i.test(header) ? header : '', needs).then(\n          (agent) => {\n            req.agent = agent\n            req.auth = toAuthInfo(agent)\n            next()\n          },\n          (err: unknown) => {\n            if (!(err instanceof McpAuthError)) return next(err)\n            res.statusCode = err.status\n            res.setHeader('content-type', 'application/json')\n            res.setHeader('www-authenticate', authenticate(err))\n            res.end(JSON.stringify({ error: err.code, error_description: err.description }))\n          },\n        )\n      }\n    },\n  }\n}\n","// A backend that is handed a Cauthy access token: is it real, and whose is it?\n//\n//   const who = await verifyToken(request)        // or the token itself\n//   who.userId, who.tenantId, who.roles\n//\n// Cauthy signs its tokens with a key it publishes (/.well-known/jwks.json), so\n// checking one needs no secret and no call to Cauthy per request: the keys are\n// fetched once and cached. Throws `CauthyTokenError` for anything else: answer\n// it 401.\n\nimport { createRemoteJWKSet, jwtVerify, type JWTVerifyGetKey } from 'jose'\n\n/** Who a verified access token belongs to. */\nexport interface TokenIdentity {\n  /** The person. For a system's own token, the client it identifies as. */\n  userId: string\n  tenantId: string\n  email?: string\n  roles: string[]\n  /** Set when the token is a system's own and not a person's. */\n  system?: string\n  /** UTC, ISO 8601. */\n  expiresAt: string\n  /** The token as it arrived, to pass on. */\n  token: string\n}\n\nexport class CauthyTokenError extends Error {\n  constructor(readonly reason: string) {\n    super(`cauthy-auth: token refused: ${reason}`)\n    this.name = 'CauthyTokenError'\n  }\n}\n\nexport interface VerifyTokenOptions {\n  /** Cauthy's address. Default: `CAUTHY_ISSUER`. */\n  issuer?: string\n  /** The audience the tokens must carry. Default: `CAUTHY_AUDIENCE`; unchecked when neither is set. */\n  audience?: string\n  /** Refuse a token of any other workspace. Default: `CAUTHY_TENANT_ID`; unchecked when neither is set. */\n  tenantId?: string\n  /** Cauthy's keys. Default: fetched from the issuer and cached. */\n  jwks?: JWTVerifyGetKey\n  /** The moment to verify at. Default: now. */\n  now?: Date\n}\n\nconst keys = new Map<string, JWTVerifyGetKey>()\n\n/** Cauthy's published keys, fetched once per issuer and cached. */\nexport function keysOf(issuer: string): JWTVerifyGetKey {\n  let set = keys.get(issuer)\n  if (set === undefined) {\n    set = createRemoteJWKSet(new URL(`${issuer}/.well-known/jwks.json`), { cooldownDuration: 30_000 })\n    keys.set(issuer, set)\n  }\n  return set\n}\n\nfunction env(name: string): string | undefined {\n  return typeof process !== 'undefined' ? process.env?.[name] : undefined\n}\n\nfunction bearer(from: string | Request | Headers): string {\n  if (typeof from === 'string') return from.replace(/^Bearer\\s+/i, '').trim()\n  const header = (from instanceof Headers ? from : from.headers).get('authorization') ?? ''\n  return /^Bearer\\s+/i.test(header) ? header.replace(/^Bearer\\s+/i, '').trim() : ''\n}\n\n/**\n * Verifies an access token (or the `Authorization: Bearer` of a request) and\n * answers who it belongs to. Checked: the signature, against Cauthy's\n * published keys; that Cauthy issued it; that it has not expired; and the\n * audience and the workspace, when given.\n */\nexport async function verifyToken(from: string | Request | Headers, options: VerifyTokenOptions = {}): Promise<TokenIdentity> {\n  const issuer = (options.issuer ?? env('CAUTHY_ISSUER') ?? '').replace(/\\/+$/, '')\n  if (issuer === '') throw new CauthyTokenError('issuer (CAUTHY_ISSUER) is not set')\n  const token = bearer(from)\n  if (token === '') throw new CauthyTokenError('no token')\n\n  let claims: Record<string, unknown>\n  try {\n    const verified = await jwtVerify(token, options.jwks ?? keysOf(issuer), {\n      algorithms: ['RS256'],\n      issuer,\n      audience: options.audience ?? env('CAUTHY_AUDIENCE'),\n      requiredClaims: ['exp', 'sub'],\n      currentDate: options.now,\n    })\n    claims = verified.payload as Record<string, unknown>\n  } catch (err) {\n    throw new CauthyTokenError(err instanceof Error ? err.message : 'bad signature')\n  }\n\n  const tenantId = typeof claims.tid === 'string' ? claims.tid : ''\n  const wanted = options.tenantId ?? env('CAUTHY_TENANT_ID')\n  if (wanted && tenantId !== wanted) throw new CauthyTokenError('issued for another workspace')\n\n  return {\n    userId: String(claims.sub),\n    tenantId,\n    ...(typeof claims.email === 'string' && claims.email !== '' ? { email: claims.email } : {}),\n    roles: Array.isArray(claims.roles) ? claims.roles.filter((r): r is string => typeof r === 'string') : [],\n    ...(typeof claims.sys === 'string' && claims.sys !== '' ? { system: claims.sys } : {}),\n    expiresAt: new Date((claims.exp as number) * 1000).toISOString(),\n    token,\n  }\n}\n"],"mappings":";AA6BA,SAAS,aAAAA,kBAAuC;;;ACnBhD,SAAS,oBAAoB,iBAAuC;AAqCpE,IAAM,OAAO,oBAAI,IAA6B;AAGvC,SAAS,OAAO,QAAiC;AACtD,MAAI,MAAM,KAAK,IAAI,MAAM;AACzB,MAAI,QAAQ,QAAW;AACrB,UAAM,mBAAmB,IAAI,IAAI,GAAG,MAAM,wBAAwB,GAAG,EAAE,kBAAkB,IAAO,CAAC;AACjG,SAAK,IAAI,QAAQ,GAAG;AAAA,EACtB;AACA,SAAO;AACT;;;AD0CO,IAAM,sBAAN,cAAkC,MAAM;AAAA,EAC7C,YACW,QACA,MACA,aACT;AACA,UAAM,wCAAwC,IAAI,MAAM,WAAW,EAAE;AAJ5D;AACA;AACA;AAGT,SAAK,OAAO;AAAA,EACd;AAAA,EANW;AAAA,EACA;AAAA,EACA;AAKb;AAGO,IAAM,eAAN,cAA2B,MAAM;AAAA,EACtC,YACW,QACA,MACA,aACT;AACA,UAAM,gBAAgB,WAAW,EAAE;AAJ1B;AACA;AACA;AAGT,SAAK,OAAO;AAAA,EACd;AAAA,EANW;AAAA,EACA;AAAA,EACA;AAKb;AA4DA,SAAS,IAAI,MAAkC;AAC7C,SAAO,OAAO,YAAY,cAAc,QAAQ,MAAM,IAAI,IAAI;AAChE;AAMO,SAAS,kBAAkB,KAAqB;AACrD,MAAI;AACJ,MAAI;AACF,QAAI,IAAI,IAAI,IAAI,KAAK,CAAC;AAAA,EACxB,QAAQ;AACN,UAAM,IAAI,MAAM,yBAAyB,KAAK,UAAU,GAAG,CAAC,6BAA6B;AAAA,EAC3F;AACA,QAAM,QAAQ,EAAE,aAAa,eAAe,EAAE,aAAa,eAAe,EAAE,aAAa;AACzF,MAAI,EAAE,aAAa,YAAY,EAAE,EAAE,aAAa,WAAW,QAAQ;AACjE,UAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AACA,MAAI,EAAE,WAAW,MAAM,EAAE,SAAS,GAAI,OAAM,IAAI,MAAM,0DAA0D;AAChH,SAAO,GAAG,EAAE,QAAQ,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS,QAAQ,QAAQ,EAAE,CAAC;AAClE;AAEA,SAAS,OAAO,MAA0C;AACxD,MAAI,OAAO,SAAS,SAAU,QAAO,KAAK,QAAQ,eAAe,EAAE,EAAE,KAAK;AAC1E,QAAM,UAAU,gBAAgB,UAAU,OAAO,KAAK,SAAS,IAAI,eAAe,KAAK;AACvF,SAAO,cAAc,KAAK,MAAM,IAAI,OAAO,QAAQ,eAAe,EAAE,EAAE,KAAK,IAAI;AACjF;AAEA,SAAS,QAAQ,GAAkC;AACjD,SAAO,OAAO,MAAM,YAAY,MAAM,QAAQ,OAAQ,EAAwB,QAAQ;AACxF;AAEA,SAAS,OAAO,GAAmB;AACjC,SAAO,IAAI,EAAE,QAAQ,UAAU,EAAE,CAAC;AACpC;AAGO,SAAS,QAAQ,UAA0B,CAAC,GAAY;AAC7D,QAAM,cAAc,QAAQ,YAAY,IAAI,qBAAqB,KAAK;AACtE,MAAI,gBAAgB,GAAI,OAAM,IAAI,MAAM,wDAAwD;AAChG,QAAM,WAAW,kBAAkB,WAAW;AAC9C,QAAM,UAAU,QAAQ,UAAU,IAAI,eAAe,KAAK,IAAI,QAAQ,QAAQ,EAAE;AAChF,MAAI,WAAW,GAAI,OAAM,IAAI,MAAM,gDAAgD;AACnF,QAAM,WAAW,QAAQ,UAAU,CAAC;AACpC,QAAM,MAAM,IAAI,IAAI,QAAQ;AAC5B,QAAM,OAAO,IAAI,aAAa,MAAM,KAAK,IAAI;AAC7C,QAAM,gBAAgB,CAAC,GAAG,oBAAI,IAAI,CAAC,wCAAwC,IAAI,IAAI,uCAAuC,CAAC,CAAC;AAC5H,QAAM,cAAc,GAAG,IAAI,MAAM,GAAG,cAAc,CAAC,CAAC;AAEpD,QAAM,WAAW,OAAO;AAAA,IACtB;AAAA,IACA,uBAAuB,CAAC,MAAM;AAAA,IAC9B,0BAA0B,CAAC,QAAQ;AAAA,IACnC,kBAAkB,QAAQ,mBAAmB;AAAA,IAC7C,GAAI,QAAQ,eAAe,EAAE,eAAe,QAAQ,aAAa,IAAI,CAAC;AAAA,EACxE;AAEA,QAAM,aAAa,QAAQ,aAAa,EAAE,WAAW,OAAO,QAAQ,eAAe,WAAW,QAAQ,WAAW,eAAe,WAAc,MAAM,IAAK,IAAI;AAC7J,QAAM,UAAU,oBAAI,IAAgD;AACpE,QAAM,eAAe,OAAO,OAAe,YAAsC;AAC/E,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,OAAO,QAAQ,IAAI,KAAK;AAC9B,QAAI,QAAQ,KAAK,QAAQ,IAAK,QAAO,KAAK;AAC1C,QAAI,SAAS;AACb,QAAI;AACF,YAAM,MAAM,OAAO,QAAQ,SAAS,OAAO,GAAG,MAAM,wBAAwB;AAAA,QAC1E,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,qCAAqC,QAAQ,mBAAmB;AAAA,QAC3F,MAAM,IAAI,gBAAgB,EAAE,MAAM,CAAC;AAAA,MACrC,CAAC;AACD,UAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,0BAA0B,IAAI,MAAM,EAAE;AACnE,gBAAW,MAAM,IAAI,KAAK,GAA4B,WAAW;AAAA,IACnE,SAAS,KAAK;AAEZ,UAAI,KAAM,QAAO,KAAK;AACtB,YAAM,IAAI,aAAa,KAAK,iBAAiB,0CAA0C,eAAe,QAAQ,IAAI,UAAU,aAAa,EAAE;AAAA,IAC7I;AACA,QAAI,QAAQ,OAAO,IAAQ,SAAQ,MAAM;AACzC,YAAQ,IAAI,OAAO,EAAE,QAAQ,OAAO,MAAM,QAAQ,CAAC;AACnD,WAAO;AAAA,EACT;AAEA,QAAM,SAAS,OAAO,MAAkC,QAAkB,CAAC,MAA8B;AACvG,UAAM,QAAQ,OAAO,IAAI;AACzB,QAAI,UAAU,GAAI,OAAM,IAAI,aAAa,KAAK,mBAAmB,iBAAiB;AAClF,QAAI;AACJ,QAAI;AACF,YAAM,WAAW,MAAMC,WAAU,OAAO,QAAQ,QAAQ,OAAO,MAAM,GAAG;AAAA,QACtE,YAAY,CAAC,OAAO;AAAA,QACpB;AAAA,QACA,UAAU;AAAA,QACV,gBAAgB,CAAC,OAAO,KAAK;AAAA,QAC7B,aAAa,QAAQ,MAAM;AAAA,MAC7B,CAAC;AACD,eAAS,SAAS;AAAA,IACpB,SAAS,KAAK;AACZ,YAAM,IAAI,aAAa,KAAK,iBAAiB,eAAe,QAAQ,IAAI,UAAU,wBAAwB;AAAA,IAC5G;AACA,UAAMC,YAAW,OAAO,OAAO,cAAc,WAAW,OAAO,YAAY;AAC3E,QAAIA,cAAa,GAAI,OAAM,IAAI,aAAa,KAAK,iBAAiB,gCAAgC;AAClG,UAAM,SAAS,OAAO,OAAO,UAAU,WAAW,OAAO,MAAM,MAAM,GAAG,EAAE,OAAO,OAAO,IAAI,CAAC;AAC7F,QAAI,cAAc,CAAE,MAAM,aAAa,OAAO,WAAW,OAAO,EAAI,OAAM,IAAI,aAAa,KAAK,iBAAiB,qFAAqF;AACtM,UAAM,UAAU,CAAC,GAAG,UAAU,GAAG,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,SAAS,CAAC,CAAC;AACzE,QAAI,QAAQ,SAAS,EAAG,OAAM,IAAI,aAAa,KAAK,sBAAsB,cAAc,QAAQ,KAAK,GAAG,CAAC,EAAE;AAC3G,WAAO;AAAA,MACL,QAAQ,OAAO,OAAO,GAAG;AAAA,MACzB,UAAU,OAAO,OAAO,QAAQ,WAAW,OAAO,MAAM;AAAA,MACxD,GAAI,OAAO,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;AAAA,MACzF,OAAO,MAAM,QAAQ,OAAO,KAAK,IAAI,OAAO,MAAM,OAAO,CAAC,MAAmB,OAAO,MAAM,QAAQ,IAAI,CAAC;AAAA,MACvG;AAAA,MACA,UAAAA;AAAA,MACA,WAAW,IAAI,KAAM,OAAO,MAAiB,GAAI,EAAE,YAAY;AAAA,MAC/D;AAAA,MACA,GAAI,QAAQ,OAAO,GAAG,IAAI,EAAE,OAAO,OAAO,IAAI,IAAI,IAAI,CAAC;AAAA,IACzD;AAAA,EACF;AAEA,QAAM,WAAW,QAAQ,YAAY,IAAI,sBAAsB,KAAK;AACpE,QAAM,eAAe,QAAQ,gBAAgB,IAAI,0BAA0B,KAAK;AAChF,QAAM,YAAY,oBAAI,IAAgD;AACtE,QAAM,WAAW,OAAO,MAA8B,QAAgB,SAAmB,CAAC,MAA+B;AACvH,QAAI,aAAa,MAAM,iBAAiB,IAAI;AAC1C,YAAM,IAAI,MAAM,8GAA8G;AAAA,IAChI;AACA,UAAM,UAAU,OAAO,SAAS,WAAW,OAAO,IAAI,IAAI,KAAK;AAC/D,UAAM,KAAK,kBAAkB,MAAM;AACnC,UAAM,MAAM,GAAG,OAAO;AAAA,EAAK,EAAE;AAAA,EAAK,OAAO,KAAK,GAAG,CAAC;AAClD,UAAM,OAAO,UAAU,IAAI,GAAG;AAC9B,QAAI,QAAQ,KAAK,QAAQ,KAAK,IAAI,EAAG,QAAO,EAAE,aAAa,KAAK,aAAa,QAAQ,KAAK,QAAQ,WAAW,KAAK,UAAU;AAC5H,UAAM,MAAM,OAAO,QAAQ,SAAS,OAAO,GAAG,MAAM,mBAAmB;AAAA,MACrE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,QAAQ;AAAA,QACR,eAAe,SAAS,KAAK,GAAG,mBAAmB,QAAQ,CAAC,IAAI,mBAAmB,YAAY,CAAC,EAAE,CAAC;AAAA,MACrG;AAAA,MACA,MAAM,IAAI,gBAAgB;AAAA,QACxB,YAAY;AAAA,QACZ,eAAe;AAAA,QACf,oBAAoB;AAAA,QACpB,UAAU;AAAA,QACV,GAAI,OAAO,SAAS,IAAI,EAAE,OAAO,OAAO,KAAK,GAAG,EAAE,IAAI,CAAC;AAAA,MACzD,CAAC;AAAA,IACH,CAAC;AACD,UAAM,OAAQ,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC/C,QAAI,CAAC,IAAI,MAAM,OAAO,KAAK,iBAAiB,UAAU;AACpD,YAAM,IAAI;AAAA,QAAoB,IAAI;AAAA,QAAQ,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ;AAAA,QACtF,OAAO,KAAK,sBAAsB,WAAW,KAAK,oBAAoB,mBAAmB,IAAI,MAAM;AAAA,MAAE;AAAA,IACzG;AACA,UAAM,YAAY,OAAO,KAAK,eAAe,WAAW,KAAK,aAAa;AAC1E,UAAM,MAAsB;AAAA,MAC1B,aAAa,KAAK;AAAA,MAClB,QAAQ,OAAO,KAAK,UAAU,WAAW,KAAK,MAAM,MAAM,GAAG,EAAE,OAAO,OAAO,IAAI,CAAC;AAAA,MAClF,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,YAAY,GAAI,EAAE,YAAY;AAAA,IACjE;AACA,QAAI,UAAU,OAAO,IAAQ,WAAU,MAAM;AAE7C,cAAU,IAAI,KAAK,EAAE,GAAG,KAAK,OAAO,KAAK,IAAI,IAAI,KAAK,IAAI,GAAG,YAAY,EAAE,IAAI,IAAK,CAAC;AACrF,WAAO;AAAA,EACT;AAEA,QAAM,eAAe,CAAC,UAAiC;AACrD,UAAM,QAAQ,CAAC,qBAAqB,OAAO,WAAW,CAAC,EAAE;AACzD,QAAI,SAAS,MAAM,SAAS,mBAAmB;AAC7C,YAAM,KAAK,SAAS,OAAO,MAAM,IAAI,CAAC,IAAI,qBAAqB,OAAO,MAAM,WAAW,CAAC,EAAE;AAAA,IAC5F;AAEA,UAAM,QAAQ,OAAO,SAAS,kBAAkB,CAAC,IAAI;AACrD,QAAI,MAAM,SAAS,EAAG,OAAM,KAAK,SAAS,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE;AACnE,WAAO,UAAU,MAAM,KAAK,IAAI,CAAC;AAAA,EACnC;AAEA,QAAM,YAAY,CAAC,UAAmC;AACpD,UAAM,SAAS,OAAO,UAAU;AAChC,WAAO,IAAI,SAAS,KAAK,UAAU,EAAE,OAAO,OAAO,QAAQ,mBAAmB,mBAAmB,OAAO,eAAe,8BAA8B,CAAC,GAAG;AAAA,MACvJ;AAAA,MACA,SAAS,EAAE,gBAAgB,oBAAoB,oBAAoB,aAAa,KAAK,EAAE;AAAA,IACzF,CAAC;AAAA,EACH;AAEA,QAAM,mBAAmB,MACvB,IAAI,SAAS,KAAK,UAAU,SAAS,CAAC,GAAG;AAAA,IACvC,SAAS,EAAE,gBAAgB,oBAAoB,iBAAiB,wBAAwB,+BAA+B,IAAI;AAAA,EAC7H,CAAC;AAEH,QAAM,aAAa,CAAC,UAAkB,SAAS,UAAU,WAAW,SAAS,cAAc,SAAS,SAAS,QAAQ,QAAQ,EAAE,KAAK,GAAG;AAEvI,QAAM,iBAAiB,CAAC,YACtB,WAAW,IAAI,IAAI,QAAQ,GAAG,EAAE,UAAU,QAAQ,MAAM,IAAI,iBAAiB,IAAI;AAEnF,QAAM,aAAa,CAAC,OAAmC;AAAA,IACrD,OAAO,EAAE;AAAA,IACT,UAAU,EAAE;AAAA,IACZ,QAAQ,EAAE;AAAA,IACV,WAAW,KAAK,MAAM,IAAI,KAAK,EAAE,SAAS,EAAE,QAAQ,IAAI,GAAI;AAAA,IAC5D,UAAU,IAAI,IAAI,QAAQ;AAAA,IAC1B,OAAO,EAAE,QAAQ,EAAE,QAAQ,UAAU,EAAE,UAAU,GAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,GAAI,OAAO,EAAE,MAAM;AAAA,EAC1G;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,SAAS,OAAO;AACtB,aAAO,OAAO,YAAY;AACxB,cAAM,OAAO,eAAe,OAAO;AACnC,YAAI,KAAM,QAAO;AACjB,YAAI;AACJ,YAAI;AACF,kBAAQ,MAAM,OAAO,SAAS,KAAK;AAAA,QACrC,SAAS,KAAK;AACZ,cAAI,eAAe,aAAc,QAAO,UAAU,GAAG;AACrD,gBAAM;AAAA,QACR;AACA,eAAO,QAAQ,SAAS,KAAK;AAAA,MAC/B;AAAA,IACF;AAAA,IACA;AAAA,IACA,WAAW,OAAO;AAChB,aAAO,CAAC,KAAK,KAAK,SAAS;AACzB,cAAM,YAAY,IAAI,eAAe,IAAI,OAAO,KAAK,MAAM,GAAG,EAAE,CAAC,KAAK;AACtE,YAAI,WAAW,UAAU,IAAI,MAAM,GAAG;AACpC,cAAI,aAAa;AACjB,cAAI,UAAU,gBAAgB,kBAAkB;AAChD,cAAI,UAAU,iBAAiB,sBAAsB;AACrD,cAAI,UAAU,+BAA+B,GAAG;AAChD,cAAI,IAAI,KAAK,UAAU,SAAS,CAAC,CAAC;AAClC;AAAA,QACF;AACA,cAAM,MAAM,IAAI,QAAQ;AACxB,cAAM,SAAS,MAAM,QAAQ,GAAG,IAAK,IAAI,CAAC,KAAK,KAAO,OAAO;AAC7D,eAAO,cAAc,KAAK,MAAM,IAAI,SAAS,IAAI,KAAK,EAAE;AAAA,UACtD,CAAC,UAAU;AACT,gBAAI,QAAQ;AACZ,gBAAI,OAAO,WAAW,KAAK;AAC3B,iBAAK;AAAA,UACP;AAAA,UACA,CAAC,QAAiB;AAChB,gBAAI,EAAE,eAAe,cAAe,QAAO,KAAK,GAAG;AACnD,gBAAI,aAAa,IAAI;AACrB,gBAAI,UAAU,gBAAgB,kBAAkB;AAChD,gBAAI,UAAU,oBAAoB,aAAa,GAAG,CAAC;AACnD,gBAAI,IAAI,KAAK,UAAU,EAAE,OAAO,IAAI,MAAM,mBAAmB,IAAI,YAAY,CAAC,CAAC;AAAA,UACjF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;","names":["jwtVerify","jwtVerify","clientId"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cauthy-auth",
-  "version": "0.14.0",
+  "version": "0.16.0",
   "description": "Sign in with Cauthy: one route to mount, getSession on the server, useSession in the browser. No database, no screens to build.",
   "license": "Apache-2.0",
   "main": "dist/index.js",