fastmcp 4.21.1 → 4.22.0

package/README.md

@@ -633,10 +633,12 @@ server.addTool({
 
 Works for `outputSchema` too. Note that FastMCP advertises input schemas with
 `additionalProperties: false`, whatever your schema said — the same treatment
-Zod and Valibot schemas get. The exception is a dictionary (an object with no
-`properties` and an `additionalProperties` schema, like `z.record()`), which
-keeps its value schema. Output schemas keep whatever additional-properties
-rule your schema declared.
+Zod and Valibot schemas get. The exception is an object made only of
+additional properties: a dictionary (no `properties` and an
+`additionalProperties` schema, like `z.record()`) keeps its value schema, and a
+free-form argument (`{ type: "object" }`, or `additionalProperties: true`)
+stays open. Output schemas keep whatever additional-properties rule your schema
+declared.
 
 Unlike the schema libraries above, a plain JSON Schema carries no TypeScript
 types, so `execute` receives `unknown` arguments. Cast or narrow them yourself.
@@ -750,6 +752,11 @@ server.addTool({
 });
 ```
 
+A server without an `authenticate` function has no auth to check, so every
+session sees every tool. With one, a session that still ends up without auth —
+on stdio, where the server carries on when `authenticate` throws or returns
+nothing — sees none of the tools that have `canAccess`.
+
 #### Returning a string
 
 `execute` can return a string:
@@ -1273,6 +1280,12 @@ The `log` object has the following methods:
 - `info(message: string, data?: SerializableValue)`
 - `warn(message: string, data?: SerializableValue)`
 
+A client can raise the minimum level it wants with the `logging/setLevel`
+request, and FastMCP then drops anything less severe instead of sending it — so
+after `logging/setLevel` with `error`, `log.debug` and `log.info` reach nobody.
+Until a client asks, every level is sent. The level in force is readable as
+[`session.loggingLevel`](#logginglevel).
+
 #### Errors
 
 The errors that are meant to be shown to the user should be thrown as `UserError` instances:
@@ -1610,7 +1623,9 @@ server.addResource({
 await server.sendResourceUpdated("file:///logs/app.log");
 ```
 
-`sendResourceUpdated` only notifies clients that have subscribed to the given URI, so it is safe to call whenever your data changes. FastMCP also advertises the `listChanged` capability for resources and prompts and emits `notifications/resources/list_changed` / `notifications/prompts/list_changed` automatically when you add or remove resources, resource templates, or prompts at runtime.
+`sendResourceUpdated` only notifies clients that have subscribed to the given URI, so it is safe to call whenever your data changes. FastMCP also advertises the `listChanged` capability for tools, resources and prompts and emits `notifications/tools/list_changed` / `notifications/resources/list_changed` / `notifications/prompts/list_changed` automatically when you add or remove tools, resources, resource templates, or prompts at runtime.
+
+One session cannot be shown a kind of primitive it never negotiated. MCP settles capabilities during `initialize` and they hold for the life of the session, so a client that connected while the server had no resources at all will not see resources added later — FastMCP logs a warning naming the capability and leaves that session alone. Register one of each kind you intend to add before `start()`, or have the client reconnect; sessions that connect afterwards see everything.
 
 ### Resource templates
 
@@ -2625,7 +2640,9 @@ session.clientCapabilities;
 
 ### `loggingLevel`
 
-The `loggingLevel` property describes the logging level as set by the client.
+The `loggingLevel` property describes the logging level as set by the client. It
+reads `info` until the client sends `logging/setLevel`; messages less severe than
+the level the client did set are dropped rather than sent.
 
 ```ts
 session.loggingLevel;

package/dist/FastMCP.cjs

@@ -11,7 +11,7 @@
 
 
 
-var _chunkIKH7YBYPcjs = require('./chunk-IKH7YBYP.cjs');
+var _chunkV4JBWBT4cjs = require('./chunk-V4JBWBT4.cjs');
 
 
 
@@ -24,7 +24,8 @@ var _chunkIKH7YBYPcjs = require('./chunk-IKH7YBYP.cjs');
 
 
 
-var _chunkGTPK7A57cjs = require('./chunk-GTPK7A57.cjs');
+var _chunkYOBCXNFPcjs = require('./chunk-YOBCXNFP.cjs');
+require('./chunk-O22SYZMC.cjs');
 
 
 
@@ -49,5 +50,5 @@ var _chunkGTPK7A57cjs = require('./chunk-GTPK7A57.cjs');
 
 
 
-exports.AuthProvider = _chunkGTPK7A57cjs.AuthProvider; exports.AzureProvider = _chunkGTPK7A57cjs.AzureProvider; exports.DiscoveryDocumentCache = _chunkIKH7YBYPcjs.DiscoveryDocumentCache; exports.FastMCP = _chunkIKH7YBYPcjs.FastMCP; exports.FastMCPError = _chunkIKH7YBYPcjs.FastMCPError; exports.FastMCPSession = _chunkIKH7YBYPcjs.FastMCPSession; exports.GitHubProvider = _chunkGTPK7A57cjs.GitHubProvider; exports.GoogleProvider = _chunkGTPK7A57cjs.GoogleProvider; exports.MEDIA_FETCH_TIMEOUT_MS = _chunkIKH7YBYPcjs.MEDIA_FETCH_TIMEOUT_MS; exports.OAuthProvider = _chunkGTPK7A57cjs.OAuthProvider; exports.ServerState = _chunkIKH7YBYPcjs.ServerState; exports.SessionError = _chunkIKH7YBYPcjs.SessionError; exports.UnexpectedStateError = _chunkIKH7YBYPcjs.UnexpectedStateError; exports.UserError = _chunkIKH7YBYPcjs.UserError; exports.audioContent = _chunkIKH7YBYPcjs.audioContent; exports.getAuthSession = _chunkGTPK7A57cjs.getAuthSession; exports.imageContent = _chunkIKH7YBYPcjs.imageContent; exports.jsonSchemaAdapter = _chunkIKH7YBYPcjs.jsonSchemaAdapter; exports.requireAll = _chunkGTPK7A57cjs.requireAll; exports.requireAny = _chunkGTPK7A57cjs.requireAny; exports.requireAuth = _chunkGTPK7A57cjs.requireAuth; exports.requireRole = _chunkGTPK7A57cjs.requireRole; exports.requireScopes = _chunkGTPK7A57cjs.requireScopes;
+exports.AuthProvider = _chunkYOBCXNFPcjs.AuthProvider; exports.AzureProvider = _chunkYOBCXNFPcjs.AzureProvider; exports.DiscoveryDocumentCache = _chunkV4JBWBT4cjs.DiscoveryDocumentCache; exports.FastMCP = _chunkV4JBWBT4cjs.FastMCP; exports.FastMCPError = _chunkV4JBWBT4cjs.FastMCPError; exports.FastMCPSession = _chunkV4JBWBT4cjs.FastMCPSession; exports.GitHubProvider = _chunkYOBCXNFPcjs.GitHubProvider; exports.GoogleProvider = _chunkYOBCXNFPcjs.GoogleProvider; exports.MEDIA_FETCH_TIMEOUT_MS = _chunkV4JBWBT4cjs.MEDIA_FETCH_TIMEOUT_MS; exports.OAuthProvider = _chunkYOBCXNFPcjs.OAuthProvider; exports.ServerState = _chunkV4JBWBT4cjs.ServerState; exports.SessionError = _chunkV4JBWBT4cjs.SessionError; exports.UnexpectedStateError = _chunkV4JBWBT4cjs.UnexpectedStateError; exports.UserError = _chunkV4JBWBT4cjs.UserError; exports.audioContent = _chunkV4JBWBT4cjs.audioContent; exports.getAuthSession = _chunkYOBCXNFPcjs.getAuthSession; exports.imageContent = _chunkV4JBWBT4cjs.imageContent; exports.jsonSchemaAdapter = _chunkV4JBWBT4cjs.jsonSchemaAdapter; exports.requireAll = _chunkYOBCXNFPcjs.requireAll; exports.requireAny = _chunkYOBCXNFPcjs.requireAny; exports.requireAuth = _chunkYOBCXNFPcjs.requireAuth; exports.requireRole = _chunkYOBCXNFPcjs.requireRole; exports.requireScopes = _chunkYOBCXNFPcjs.requireScopes;
 //# sourceMappingURL=FastMCP.cjs.map

package/dist/FastMCP.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["/home/runner/work/fastmcp/fastmcp/dist/FastMCP.cjs"],"names":[],"mappings":"AAAA;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,0yCAAC","file":"/home/runner/work/fastmcp/fastmcp/dist/FastMCP.cjs"}
+{"version":3,"sources":["/home/runner/work/fastmcp/fastmcp/dist/FastMCP.cjs"],"names":[],"mappings":"AAAA;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B,gCAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,0yCAAC","file":"/home/runner/work/fastmcp/fastmcp/dist/FastMCP.cjs"}

package/dist/FastMCP.d.cts

@@ -12,8 +12,8 @@ import { CorsOptions } from 'mcp-proxy';
 export { CorsOptions } from 'mcp-proxy';
 import { StrictEventEmitter } from 'strict-event-emitter-types';
 import { z } from 'zod';
-import { A as AuthProvider, O as OAuthSession, a as OAuthProxy } from './OAuthProvider-C4idKF29.cjs';
-export { j as AuthProviderConfig, b as AzureProvider, k as AzureProviderConfig, l as AzureSession, m as GenericOAuthProviderConfig, G as GitHubProvider, n as GitHubSession, c as GoogleProvider, o as GoogleSession, d as OAuthProvider, g as getAuthSession, r as requireAll, e as requireAny, f as requireAuth, h as requireRole, i as requireScopes } from './OAuthProvider-C4idKF29.cjs';
+import { A as AuthProvider, O as OAuthSession, a as OAuthProxy } from './OAuthProvider-BcDb5bOz.cjs';
+export { j as AuthProviderConfig, b as AzureProvider, k as AzureProviderConfig, l as AzureSession, m as GenericOAuthProviderConfig, G as GitHubProvider, n as GitHubSession, c as GoogleProvider, o as GoogleSession, d as OAuthProvider, g as getAuthSession, r as requireAll, e as requireAny, f as requireAuth, h as requireRole, i as requireScopes } from './OAuthProvider-BcDb5bOz.cjs';
 import 'node:http';
 
 declare class DiscoveryDocumentCache {
@@ -916,8 +916,14 @@ declare class FastMCPSession<T extends FastMCPSessionAuth = FastMCPSessionAuth>
      */
     get sessionId(): string | undefined;
     set sessionId(value: string | undefined);
-    constructor({ auth, hasTools, icons, instructions, logger, name, onToolCall, ping, prompts, resources, resourcesTemplates, roots, sessionId, stateless, streamKeepalive, title, tools, transportType, utils, version, websiteUrl, }: {
+    constructor({ auth, authRequired, hasTools, icons, instructions, logger, name, onToolCall, ping, prompts, resources, resourcesTemplates, roots, sessionId, stateless, streamKeepalive, title, tools, transportType, utils, version, websiteUrl, }: {
         auth?: T;
+        /**
+         * Whether the server authenticates its sessions (`authenticate` is
+         * configured). A session that has no auth even so sees none of the tools
+         * gated by `canAccess` (see `toolsVisibleTo`).
+         */
+        authRequired?: boolean;
         /**
          * Whether the server has any tools at all, including ones this session's
          * `canAccess` filtering removed from `tools`. Defaults to `tools.length > 0`.

package/dist/FastMCP.d.ts

@@ -12,8 +12,8 @@ import { CorsOptions } from 'mcp-proxy';
 export { CorsOptions } from 'mcp-proxy';
 import { StrictEventEmitter } from 'strict-event-emitter-types';
 import { z } from 'zod';
-import { A as AuthProvider, O as OAuthSession, a as OAuthProxy } from './OAuthProvider-C4idKF29.js';
-export { j as AuthProviderConfig, b as AzureProvider, k as AzureProviderConfig, l as AzureSession, m as GenericOAuthProviderConfig, G as GitHubProvider, n as GitHubSession, c as GoogleProvider, o as GoogleSession, d as OAuthProvider, g as getAuthSession, r as requireAll, e as requireAny, f as requireAuth, h as requireRole, i as requireScopes } from './OAuthProvider-C4idKF29.js';
+import { A as AuthProvider, O as OAuthSession, a as OAuthProxy } from './OAuthProvider-BcDb5bOz.js';
+export { j as AuthProviderConfig, b as AzureProvider, k as AzureProviderConfig, l as AzureSession, m as GenericOAuthProviderConfig, G as GitHubProvider, n as GitHubSession, c as GoogleProvider, o as GoogleSession, d as OAuthProvider, g as getAuthSession, r as requireAll, e as requireAny, f as requireAuth, h as requireRole, i as requireScopes } from './OAuthProvider-BcDb5bOz.js';
 import 'node:http';
 
 declare class DiscoveryDocumentCache {
@@ -916,8 +916,14 @@ declare class FastMCPSession<T extends FastMCPSessionAuth = FastMCPSessionAuth>
      */
     get sessionId(): string | undefined;
     set sessionId(value: string | undefined);
-    constructor({ auth, hasTools, icons, instructions, logger, name, onToolCall, ping, prompts, resources, resourcesTemplates, roots, sessionId, stateless, streamKeepalive, title, tools, transportType, utils, version, websiteUrl, }: {
+    constructor({ auth, authRequired, hasTools, icons, instructions, logger, name, onToolCall, ping, prompts, resources, resourcesTemplates, roots, sessionId, stateless, streamKeepalive, title, tools, transportType, utils, version, websiteUrl, }: {
         auth?: T;
+        /**
+         * Whether the server authenticates its sessions (`authenticate` is
+         * configured). A session that has no auth even so sees none of the tools
+         * gated by `canAccess` (see `toolsVisibleTo`).
+         */
+        authRequired?: boolean;
         /**
          * Whether the server has any tools at all, including ones this session's
          * `canAccess` filtering removed from `tools`. Defaults to `tools.length > 0`.

package/dist/FastMCP.js

@@ -11,7 +11,7 @@ import {
   audioContent,
   imageContent,
   jsonSchemaAdapter
-} from "./chunk-JNP6BG5L.js";
+} from "./chunk-43N2Q6ZI.js";
 import {
   AuthProvider,
   AzureProvider,
@@ -24,7 +24,8 @@ import {
   requireAuth,
   requireRole,
   requireScopes
-} from "./chunk-AR3LVWUF.js";
+} from "./chunk-XPKMA7DH.js";
+import "./chunk-UMDUIBFW.js";
 export {
   AuthProvider,
   AzureProvider,

package/dist/{OAuthProvider-C4idKF29.d.cts → OAuthProvider-BcDb5bOz.d.cts}

@@ -746,7 +746,7 @@ declare class OAuthProxyError extends Error {
 /**
  * Configuration common to all OAuth providers.
  */
-interface AuthProviderConfig {
+interface AuthProviderConfig extends ForwardedProxyOptions {
     /**
      * Allow-list of redirect URI patterns accepted by Dynamic Client
      * Registration. Required for any deployment that exposes /oauth/register
@@ -805,6 +805,8 @@ interface OAuthSession {
     /** Scopes granted by the OAuth provider */
     scopes?: string[];
 }
+/** OAuthProxy options that providers pass through unchanged. */
+type ForwardedProxyOptions = Pick<OAuthProxyConfig, "allowPlainPkce" | "authorizationResponseIss" | "enableCimd">;
 /**
  * Abstract base class for OAuth providers.
  * Encapsulates OAuthProxy creation, authenticate function, and oauth config.
@@ -813,6 +815,11 @@ interface OAuthSession {
  */
 declare abstract class AuthProvider<TSession extends OAuthSession = OAuthSession> {
     protected config: AuthProviderConfig;
+    /**
+     * The forwarded proxy options that are set. Unset ones are left out so the
+     * proxy's own defaults apply.
+     */
+    protected get forwardedProxyOptions(): ForwardedProxyOptions;
     /**
      * Get the proxy, creating it lazily if needed.
      */

package/dist/{OAuthProvider-C4idKF29.d.ts → OAuthProvider-BcDb5bOz.d.ts}

@@ -746,7 +746,7 @@ declare class OAuthProxyError extends Error {
 /**
  * Configuration common to all OAuth providers.
  */
-interface AuthProviderConfig {
+interface AuthProviderConfig extends ForwardedProxyOptions {
     /**
      * Allow-list of redirect URI patterns accepted by Dynamic Client
      * Registration. Required for any deployment that exposes /oauth/register
@@ -805,6 +805,8 @@ interface OAuthSession {
     /** Scopes granted by the OAuth provider */
     scopes?: string[];
 }
+/** OAuthProxy options that providers pass through unchanged. */
+type ForwardedProxyOptions = Pick<OAuthProxyConfig, "allowPlainPkce" | "authorizationResponseIss" | "enableCimd">;
 /**
  * Abstract base class for OAuth providers.
  * Encapsulates OAuthProxy creation, authenticate function, and oauth config.
@@ -813,6 +815,11 @@ interface OAuthSession {
  */
 declare abstract class AuthProvider<TSession extends OAuthSession = OAuthSession> {
     protected config: AuthProviderConfig;
+    /**
+     * The forwarded proxy options that are set. Unset ones are left out so the
+     * proxy's own defaults apply.
+     */
+    protected get forwardedProxyOptions(): ForwardedProxyOptions;
     /**
      * Get the proxy, creating it lazily if needed.
      */

package/dist/auth/index.cjs

@@ -24,7 +24,7 @@
 
 
 
-var _chunkGTPK7A57cjs = require('../chunk-GTPK7A57.cjs');
+var _chunkYOBCXNFPcjs = require('../chunk-YOBCXNFP.cjs');
 
 
 
@@ -51,5 +51,5 @@ var _chunkGTPK7A57cjs = require('../chunk-GTPK7A57.cjs');
 
 
 
-exports.AuthProvider = _chunkGTPK7A57cjs.AuthProvider; exports.AzureProvider = _chunkGTPK7A57cjs.AzureProvider; exports.ConsentManager = _chunkGTPK7A57cjs.ConsentManager; exports.DEFAULT_ACCESS_TOKEN_TTL = _chunkGTPK7A57cjs.DEFAULT_ACCESS_TOKEN_TTL; exports.DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH = _chunkGTPK7A57cjs.DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH; exports.DEFAULT_AUTHORIZATION_CODE_TTL = _chunkGTPK7A57cjs.DEFAULT_AUTHORIZATION_CODE_TTL; exports.DEFAULT_REFRESH_TOKEN_TTL = _chunkGTPK7A57cjs.DEFAULT_REFRESH_TOKEN_TTL; exports.DEFAULT_TRANSACTION_TTL = _chunkGTPK7A57cjs.DEFAULT_TRANSACTION_TTL; exports.DiskStore = _chunkGTPK7A57cjs.DiskStore; exports.EncryptedTokenStorage = _chunkGTPK7A57cjs.EncryptedTokenStorage; exports.GitHubProvider = _chunkGTPK7A57cjs.GitHubProvider; exports.GoogleProvider = _chunkGTPK7A57cjs.GoogleProvider; exports.JWKSVerifier = _chunkGTPK7A57cjs.JWKSVerifier; exports.JWTIssuer = _chunkGTPK7A57cjs.JWTIssuer; exports.MemoryTokenStorage = _chunkGTPK7A57cjs.MemoryTokenStorage; exports.OAuthProvider = _chunkGTPK7A57cjs.OAuthProvider; exports.OAuthProxy = _chunkGTPK7A57cjs.OAuthProxy; exports.OAuthProxyError = _chunkGTPK7A57cjs.OAuthProxyError; exports.PKCEUtils = _chunkGTPK7A57cjs.PKCEUtils; exports.getAuthSession = _chunkGTPK7A57cjs.getAuthSession; exports.requireAll = _chunkGTPK7A57cjs.requireAll; exports.requireAny = _chunkGTPK7A57cjs.requireAny; exports.requireAuth = _chunkGTPK7A57cjs.requireAuth; exports.requireRole = _chunkGTPK7A57cjs.requireRole; exports.requireScopes = _chunkGTPK7A57cjs.requireScopes;
+exports.AuthProvider = _chunkYOBCXNFPcjs.AuthProvider; exports.AzureProvider = _chunkYOBCXNFPcjs.AzureProvider; exports.ConsentManager = _chunkYOBCXNFPcjs.ConsentManager; exports.DEFAULT_ACCESS_TOKEN_TTL = _chunkYOBCXNFPcjs.DEFAULT_ACCESS_TOKEN_TTL; exports.DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH = _chunkYOBCXNFPcjs.DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH; exports.DEFAULT_AUTHORIZATION_CODE_TTL = _chunkYOBCXNFPcjs.DEFAULT_AUTHORIZATION_CODE_TTL; exports.DEFAULT_REFRESH_TOKEN_TTL = _chunkYOBCXNFPcjs.DEFAULT_REFRESH_TOKEN_TTL; exports.DEFAULT_TRANSACTION_TTL = _chunkYOBCXNFPcjs.DEFAULT_TRANSACTION_TTL; exports.DiskStore = _chunkYOBCXNFPcjs.DiskStore; exports.EncryptedTokenStorage = _chunkYOBCXNFPcjs.EncryptedTokenStorage; exports.GitHubProvider = _chunkYOBCXNFPcjs.GitHubProvider; exports.GoogleProvider = _chunkYOBCXNFPcjs.GoogleProvider; exports.JWKSVerifier = _chunkYOBCXNFPcjs.JWKSVerifier; exports.JWTIssuer = _chunkYOBCXNFPcjs.JWTIssuer; exports.MemoryTokenStorage = _chunkYOBCXNFPcjs.MemoryTokenStorage; exports.OAuthProvider = _chunkYOBCXNFPcjs.OAuthProvider; exports.OAuthProxy = _chunkYOBCXNFPcjs.OAuthProxy; exports.OAuthProxyError = _chunkYOBCXNFPcjs.OAuthProxyError; exports.PKCEUtils = _chunkYOBCXNFPcjs.PKCEUtils; exports.getAuthSession = _chunkYOBCXNFPcjs.getAuthSession; exports.requireAll = _chunkYOBCXNFPcjs.requireAll; exports.requireAny = _chunkYOBCXNFPcjs.requireAny; exports.requireAuth = _chunkYOBCXNFPcjs.requireAuth; exports.requireRole = _chunkYOBCXNFPcjs.requireRole; exports.requireScopes = _chunkYOBCXNFPcjs.requireScopes;
 //# sourceMappingURL=index.cjs.map

package/dist/auth/index.d.cts

@@ -1,5 +1,5 @@
-import { p as OAuthTransaction, C as ConsentData, T as TokenStorage, q as TokenVerifier, s as TokenVerificationResult, P as PKCEPair } from '../OAuthProvider-C4idKF29.cjs';
-export { A as AuthProvider, j as AuthProviderConfig, y as AuthorizationParams, b as AzureProvider, k as AzureProviderConfig, l as AzureSession, z as ClientCode, B as DCRClientMetadata, E as DCRRequest, F as DCRResponse, D as DEFAULT_ACCESS_TOKEN_TTL, u as DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH, v as DEFAULT_AUTHORIZATION_CODE_TTL, w as DEFAULT_REFRESH_TOKEN_TTL, x as DEFAULT_TRANSACTION_TTL, m as GenericOAuthProviderConfig, G as GitHubProvider, n as GitHubSession, c as GoogleProvider, o as GoogleSession, H as OAuthError, d as OAuthProvider, I as OAuthProviderConfig, a as OAuthProxy, J as OAuthProxyConfig, t as OAuthProxyError, O as OAuthSession, K as ProxyDCRClient, R as RefreshRequest, L as TokenMapping, M as TokenRequest, N as TokenResponse, U as UpstreamTokenSet, g as getAuthSession, r as requireAll, e as requireAny, f as requireAuth, h as requireRole, i as requireScopes } from '../OAuthProvider-C4idKF29.cjs';
+import { p as OAuthTransaction, C as ConsentData, T as TokenStorage, q as TokenVerifier, s as TokenVerificationResult, P as PKCEPair } from '../OAuthProvider-BcDb5bOz.cjs';
+export { A as AuthProvider, j as AuthProviderConfig, y as AuthorizationParams, b as AzureProvider, k as AzureProviderConfig, l as AzureSession, z as ClientCode, B as DCRClientMetadata, E as DCRRequest, F as DCRResponse, D as DEFAULT_ACCESS_TOKEN_TTL, u as DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH, v as DEFAULT_AUTHORIZATION_CODE_TTL, w as DEFAULT_REFRESH_TOKEN_TTL, x as DEFAULT_TRANSACTION_TTL, m as GenericOAuthProviderConfig, G as GitHubProvider, n as GitHubSession, c as GoogleProvider, o as GoogleSession, H as OAuthError, d as OAuthProvider, I as OAuthProviderConfig, a as OAuthProxy, J as OAuthProxyConfig, t as OAuthProxyError, O as OAuthSession, K as ProxyDCRClient, R as RefreshRequest, L as TokenMapping, M as TokenRequest, N as TokenResponse, U as UpstreamTokenSet, g as getAuthSession, r as requireAll, e as requireAny, f as requireAuth, h as requireRole, i as requireScopes } from '../OAuthProvider-BcDb5bOz.cjs';
 import 'node:http';
 
 /**

package/dist/auth/index.d.ts

@@ -1,5 +1,5 @@
-import { p as OAuthTransaction, C as ConsentData, T as TokenStorage, q as TokenVerifier, s as TokenVerificationResult, P as PKCEPair } from '../OAuthProvider-C4idKF29.js';
-export { A as AuthProvider, j as AuthProviderConfig, y as AuthorizationParams, b as AzureProvider, k as AzureProviderConfig, l as AzureSession, z as ClientCode, B as DCRClientMetadata, E as DCRRequest, F as DCRResponse, D as DEFAULT_ACCESS_TOKEN_TTL, u as DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH, v as DEFAULT_AUTHORIZATION_CODE_TTL, w as DEFAULT_REFRESH_TOKEN_TTL, x as DEFAULT_TRANSACTION_TTL, m as GenericOAuthProviderConfig, G as GitHubProvider, n as GitHubSession, c as GoogleProvider, o as GoogleSession, H as OAuthError, d as OAuthProvider, I as OAuthProviderConfig, a as OAuthProxy, J as OAuthProxyConfig, t as OAuthProxyError, O as OAuthSession, K as ProxyDCRClient, R as RefreshRequest, L as TokenMapping, M as TokenRequest, N as TokenResponse, U as UpstreamTokenSet, g as getAuthSession, r as requireAll, e as requireAny, f as requireAuth, h as requireRole, i as requireScopes } from '../OAuthProvider-C4idKF29.js';
+import { p as OAuthTransaction, C as ConsentData, T as TokenStorage, q as TokenVerifier, s as TokenVerificationResult, P as PKCEPair } from '../OAuthProvider-BcDb5bOz.js';
+export { A as AuthProvider, j as AuthProviderConfig, y as AuthorizationParams, b as AzureProvider, k as AzureProviderConfig, l as AzureSession, z as ClientCode, B as DCRClientMetadata, E as DCRRequest, F as DCRResponse, D as DEFAULT_ACCESS_TOKEN_TTL, u as DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH, v as DEFAULT_AUTHORIZATION_CODE_TTL, w as DEFAULT_REFRESH_TOKEN_TTL, x as DEFAULT_TRANSACTION_TTL, m as GenericOAuthProviderConfig, G as GitHubProvider, n as GitHubSession, c as GoogleProvider, o as GoogleSession, H as OAuthError, d as OAuthProvider, I as OAuthProviderConfig, a as OAuthProxy, J as OAuthProxyConfig, t as OAuthProxyError, O as OAuthSession, K as ProxyDCRClient, R as RefreshRequest, L as TokenMapping, M as TokenRequest, N as TokenResponse, U as UpstreamTokenSet, g as getAuthSession, r as requireAll, e as requireAny, f as requireAuth, h as requireRole, i as requireScopes } from '../OAuthProvider-BcDb5bOz.js';
 import 'node:http';
 
 /**

package/dist/auth/index.js

@@ -24,7 +24,7 @@ import {
   requireAuth,
   requireRole,
   requireScopes
-} from "../chunk-AR3LVWUF.js";
+} from "../chunk-XPKMA7DH.js";
 export {
   AuthProvider,
   AzureProvider,