hoomanjs 1.29.2 → 1.30.0

package/dist/core/mcp/oauth/service.js

@@ -0,0 +1,139 @@
+import { auth, } from "@modelcontextprotocol/sdk/client/auth.js";
+import { openBrowser } from "../../utils/browser.js";
+import { startCallbackServer } from "./callback-server.js";
+import { HoomanMcpOAuthProvider } from "./provider.js";
+import { Store } from "./store.js";
+import { createRemoteTransportFingerprint } from "./identity.js";
+export class Service {
+    store;
+    clientLabel;
+    providers = new Map();
+    constructor(options = {}) {
+        this.store = options.store ?? new Store();
+        this.clientLabel = options.clientLabel;
+    }
+    getProvider(serverName, transport) {
+        const key = createRemoteTransportFingerprint(serverName, transport);
+        let provider = this.providers.get(key);
+        if (!provider) {
+            provider = new HoomanMcpOAuthProvider({
+                serverName,
+                transport,
+                store: this.store,
+                clientLabel: this.clientLabel,
+            });
+            this.providers.set(key, provider);
+        }
+        return provider;
+    }
+    async hasTokens(serverName, transport) {
+        return ((await this.getProvider(serverName, transport).tokens()) !== undefined);
+    }
+    async beginAuthorization(serverName, transport) {
+        const provider = this.getProvider(serverName, transport);
+        provider.resetFlow();
+        const callbackServer = await this.createCallbackServer(transport);
+        provider.setRedirectUrl(callbackServer.redirectUri);
+        let authorizationUrl;
+        try {
+            const result = await auth(provider, {
+                serverUrl: transport.url,
+            });
+            if (result !== "REDIRECT") {
+                await callbackServer.close();
+                throw new Error(`"${serverName}" is already authorized.`);
+            }
+            authorizationUrl = provider.takeAuthorizationUrl();
+            if (!authorizationUrl) {
+                throw new Error("OAuth provider did not produce an authorization URL.");
+            }
+        }
+        catch (error) {
+            await callbackServer.close().catch(() => undefined);
+            provider.resetFlow();
+            throw wrapAuthError(`Failed to start OAuth flow for "${serverName}"`, error);
+        }
+        let settled = false;
+        const cancel = async () => {
+            if (settled) {
+                return;
+            }
+            settled = true;
+            provider.resetFlow();
+            await callbackServer.close().catch(() => undefined);
+        };
+        return {
+            authorizationUrl,
+            complete: async ({ signal, timeoutMs } = {}) => {
+                if (settled) {
+                    throw new Error("OAuth flow already completed or cancelled.");
+                }
+                try {
+                    const { code, state } = await callbackServer.waitForCode({
+                        signal,
+                        timeoutMs,
+                    });
+                    const expectedState = provider.expectedState();
+                    if (expectedState && state !== expectedState) {
+                        throw new Error("OAuth state mismatch.");
+                    }
+                    const result = await auth(provider, {
+                        serverUrl: transport.url,
+                        authorizationCode: code,
+                    });
+                    if (result !== "AUTHORIZED") {
+                        throw new Error(`OAuth exchange returned "${result}".`);
+                    }
+                    settled = true;
+                    provider.resetFlow();
+                    await callbackServer.close();
+                }
+                catch (error) {
+                    await cancel();
+                    throw wrapAuthError(`OAuth flow for "${serverName}" failed`, error);
+                }
+            },
+            cancel,
+        };
+    }
+    async authenticate(serverName, transport) {
+        const flow = await this.beginAuthorization(serverName, transport);
+        await openBrowser(flow.authorizationUrl.toString());
+        await flow.complete();
+    }
+    async logout(serverName, transport, scope = "all") {
+        await this.getProvider(serverName, transport).invalidateCredentials(scope);
+    }
+    async status(serverName, transport) {
+        const tokens = await this.getProvider(serverName, transport).tokens();
+        if (!tokens) {
+            return "unauthenticated";
+        }
+        if (tokens.expires_in !== undefined && tokens.expires_in <= 0) {
+            return "expired";
+        }
+        return "authenticated";
+    }
+    async createCallbackServer(transport) {
+        const redirectUri = transport.oauth?.redirectUri;
+        if (redirectUri) {
+            const url = new URL(redirectUri);
+            return startCallbackServer({
+                port: url.port ? Number(url.port) : undefined,
+                path: url.pathname,
+            });
+        }
+        return startCallbackServer({
+            port: transport.oauth?.callbackPort,
+        });
+    }
+}
+function wrapAuthError(prefix, error) {
+    if (error instanceof Error) {
+        const wrapped = new Error(`${prefix}: ${error.message}`);
+        wrapped.cause = error;
+        return wrapped;
+    }
+    return new Error(`${prefix}: ${String(error)}`);
+}
+//# sourceMappingURL=service.js.map

package/dist/core/mcp/oauth/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../../src/core/mcp/oauth/service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,IAAI,GAEL,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD,OAAO,EAAE,mBAAmB,EAAuB,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,gCAAgC,EAAE,MAAM,eAAe,CAAC;AAkBjE,MAAM,OAAO,OAAO;IACD,KAAK,CAAQ;IACb,WAAW,CAAU;IACrB,SAAS,GAAG,IAAI,GAAG,EAAkC,CAAC;IAEvE,YAAmB,UAA0B,EAAE;QAC7C,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IACzC,CAAC;IAEM,WAAW,CAChB,UAAkB,EAClB,SAA+B;QAE/B,MAAM,GAAG,GAAG,gCAAgC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACpE,IAAI,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,GAAG,IAAI,sBAAsB,CAAC;gBACpC,UAAU;gBACV,SAAS;gBACT,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEM,KAAK,CAAC,SAAS,CACpB,UAAkB,EAClB,SAA+B;QAE/B,OAAO,CACL,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,SAAS,CACvE,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,kBAAkB,CAC7B,UAAkB,EAClB,SAA+B;QAE/B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACzD,QAAQ,CAAC,SAAS,EAAE,CAAC;QAErB,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAClE,QAAQ,CAAC,cAAc,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QAEpD,IAAI,gBAAiC,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAA+B,EAAE;gBACzD,SAAS,EAAE,SAAS,CAAC,GAAG;aACzB,CAAC,CAAC;YACH,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;gBAC1B,MAAM,cAAc,CAAC,KAAK,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,IAAI,UAAU,0BAA0B,CAAC,CAAC;YAC5D,CAAC;YACD,gBAAgB,GAAG,QAAQ,CAAC,oBAAoB,EAAE,CAAC;YACnD,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,cAAc,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACpD,QAAQ,CAAC,SAAS,EAAE,CAAC;YACrB,MAAM,aAAa,CACjB,mCAAmC,UAAU,GAAG,EAChD,KAAK,CACN,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,KAAK,IAAmB,EAAE;YACvC,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,QAAQ,CAAC,SAAS,EAAE,CAAC;YACrB,MAAM,cAAc,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACtD,CAAC,CAAC;QAEF,OAAO;YACL,gBAAgB;YAChB,QAAQ,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE;gBAC7C,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;gBAChE,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC;wBACvD,MAAM;wBACN,SAAS;qBACV,CAAC,CAAC;oBACH,MAAM,aAAa,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAC;oBAC/C,IAAI,aAAa,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;wBAC7C,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;oBAC3C,CAAC;oBACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAA+B,EAAE;wBACzD,SAAS,EAAE,SAAS,CAAC,GAAG;wBACxB,iBAAiB,EAAE,IAAI;qBACxB,CAAC,CAAC;oBACH,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;wBAC5B,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,IAAI,CAAC,CAAC;oBAC1D,CAAC;oBACD,OAAO,GAAG,IAAI,CAAC;oBACf,QAAQ,CAAC,SAAS,EAAE,CAAC;oBACrB,MAAM,cAAc,CAAC,KAAK,EAAE,CAAC;gBAC/B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,MAAM,EAAE,CAAC;oBACf,MAAM,aAAa,CAAC,mBAAmB,UAAU,UAAU,EAAE,KAAK,CAAC,CAAC;gBACtE,CAAC;YACH,CAAC;YACD,MAAM;SACP,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,YAAY,CACvB,UAAkB,EAClB,SAA+B;QAE/B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAClE,MAAM,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAC;QACpD,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAEM,KAAK,CAAC,MAAM,CACjB,UAAkB,EAClB,SAA+B,EAC/B,QAAmD,KAAK;QAExD,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC7E,CAAC;IAEM,KAAK,CAAC,MAAM,CACjB,UAAkB,EAClB,SAA+B;QAE/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;QACtE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,iBAAiB,CAAC;QAC3B,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,IAAI,CAAC,EAAE,CAAC;YAC9D,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,eAAe,CAAC;IACzB,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,SAA+B;QAE/B,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC;QACjD,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;YACjC,OAAO,mBAAmB,CAAC;gBACzB,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC7C,IAAI,EAAE,GAAG,CAAC,QAAQ;aACnB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,mBAAmB,CAAC;YACzB,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,YAAY;SACpC,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,KAAc;IACnD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,IAAI,KAAK,CAAC,GAAG,MAAM,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;QACtB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,GAAG,MAAM,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAClD,CAAC"}

package/dist/core/mcp/oauth/store.d.ts

@@ -0,0 +1,14 @@
+import { type StoredMcpOAuthEntry, type StoredMcpOAuthFile } from "./types.js";
+export declare class Store {
+    private readonly path;
+    constructor(path?: string);
+    get filePath(): string;
+    read(): Promise<StoredMcpOAuthFile>;
+    list(): Promise<Record<string, StoredMcpOAuthEntry>>;
+    get(key: string): Promise<StoredMcpOAuthEntry | undefined>;
+    set(key: string, entry: StoredMcpOAuthEntry): Promise<void>;
+    update(key: string, updater: (current: StoredMcpOAuthEntry | undefined) => StoredMcpOAuthEntry | undefined): Promise<void>;
+    delete(key: string): Promise<void>;
+    clear(): Promise<void>;
+    private write;
+}

package/dist/core/mcp/oauth/store.js

@@ -0,0 +1,86 @@
+import { mkdir, readFile, unlink, writeFile } from "node:fs/promises";
+import { dirname } from "node:path";
+import { mcpOauthJsonPath } from "../../utils/paths.js";
+import { StoredMcpOAuthFileSchema, } from "./types.js";
+export class Store {
+    path;
+    constructor(path = mcpOauthJsonPath()) {
+        this.path = path;
+    }
+    get filePath() {
+        return this.path;
+    }
+    async read() {
+        try {
+            const raw = await readFile(this.path, "utf8");
+            return StoredMcpOAuthFileSchema.parse(JSON.parse(raw));
+        }
+        catch (error) {
+            if (isMissingFile(error)) {
+                return { entries: {} };
+            }
+            throw error;
+        }
+    }
+    async list() {
+        const data = await this.read();
+        return { ...data.entries };
+    }
+    async get(key) {
+        const data = await this.read();
+        return data.entries[key];
+    }
+    async set(key, entry) {
+        const data = await this.read();
+        data.entries[key] = entry;
+        await this.write(data);
+    }
+    async update(key, updater) {
+        const data = await this.read();
+        const next = updater(data.entries[key]);
+        if (next) {
+            data.entries[key] = next;
+        }
+        else {
+            delete data.entries[key];
+        }
+        await this.write(data);
+    }
+    async delete(key) {
+        const data = await this.read();
+        if (!data.entries[key]) {
+            return;
+        }
+        delete data.entries[key];
+        await this.write(data);
+    }
+    async clear() {
+        try {
+            await unlink(this.path);
+        }
+        catch (error) {
+            if (!isMissingFile(error)) {
+                throw error;
+            }
+        }
+    }
+    async write(data) {
+        const parsed = StoredMcpOAuthFileSchema.parse(data);
+        if (Object.keys(parsed.entries).length === 0) {
+            await this.clear();
+            return;
+        }
+        await mkdir(dirname(this.path), { recursive: true });
+        await writeFile(this.path, JSON.stringify(parsed, null, 2), {
+            encoding: "utf8",
+            mode: 0o600,
+        });
+    }
+}
+function isMissingFile(error) {
+    return (typeof error === "object" &&
+        error !== null &&
+        "code" in error &&
+        error.code === "ENOENT");
+}
+//# sourceMappingURL=store.js.map

package/dist/core/mcp/oauth/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../../src/core/mcp/oauth/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EACL,wBAAwB,GAGzB,MAAM,YAAY,CAAC;AAEpB,MAAM,OAAO,KAAK;IACoB;IAApC,YAAoC,OAAe,gBAAgB,EAAE;QAAjC,SAAI,GAAJ,IAAI,CAA6B;IAAG,CAAC;IAEzE,IAAW,QAAQ;QACjB,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAEM,KAAK,CAAC,IAAI;QACf,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC9C,OAAO,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;YACzB,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,IAAI;QACf,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;IAEM,KAAK,CAAC,GAAG,CAAC,GAAW;QAC1B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAEM,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAA0B;QACtD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC1B,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAEM,KAAK,CAAC,MAAM,CACjB,GAAW,EACX,OAEoC;QAEpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,GAAW;QAC7B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,IAAwB;QAC1C,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;YAC1D,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACd,KAA4B,CAAC,IAAI,KAAK,QAAQ,CAChD,CAAC;AACJ,CAAC"}

package/dist/core/mcp/oauth/types.d.ts

@@ -0,0 +1,87 @@
+import { z } from "zod";
+export declare const McpOAuthConfigSchema: z.ZodObject<{
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    clientId: z.ZodOptional<z.ZodString>;
+    clientSecret: z.ZodOptional<z.ZodString>;
+    authorizationUrl: z.ZodOptional<z.ZodURL>;
+    tokenUrl: z.ZodOptional<z.ZodURL>;
+    issuer: z.ZodOptional<z.ZodURL>;
+    registrationUrl: z.ZodOptional<z.ZodURL>;
+    scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    audiences: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    redirectUri: z.ZodOptional<z.ZodURL>;
+    callbackPort: z.ZodOptional<z.ZodInt>;
+    tokenParamName: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const StoredMcpOAuthTokensSchema: z.ZodObject<{
+    accessToken: z.ZodString;
+    refreshToken: z.ZodOptional<z.ZodString>;
+    expiresAt: z.ZodOptional<z.ZodNumber>;
+    scope: z.ZodOptional<z.ZodString>;
+    tokenType: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const StoredMcpOAuthClientSchema: z.ZodObject<{
+    clientId: z.ZodString;
+    clientSecret: z.ZodOptional<z.ZodString>;
+    clientIdIssuedAt: z.ZodOptional<z.ZodNumber>;
+    clientSecretExpiresAt: z.ZodOptional<z.ZodNumber>;
+    redirectUris: z.ZodOptional<z.ZodArray<z.ZodURL>>;
+}, z.core.$strip>;
+export declare const StoredMcpOAuthDiscoverySchema: z.ZodObject<{
+    authorizationServerUrl: z.ZodOptional<z.ZodString>;
+    resourceMetadataUrl: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const StoredMcpOAuthEntrySchema: z.ZodObject<{
+    serverName: z.ZodString;
+    serverUrl: z.ZodString;
+    tokens: z.ZodOptional<z.ZodObject<{
+        accessToken: z.ZodString;
+        refreshToken: z.ZodOptional<z.ZodString>;
+        expiresAt: z.ZodOptional<z.ZodNumber>;
+        scope: z.ZodOptional<z.ZodString>;
+        tokenType: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    client: z.ZodOptional<z.ZodObject<{
+        clientId: z.ZodString;
+        clientSecret: z.ZodOptional<z.ZodString>;
+        clientIdIssuedAt: z.ZodOptional<z.ZodNumber>;
+        clientSecretExpiresAt: z.ZodOptional<z.ZodNumber>;
+        redirectUris: z.ZodOptional<z.ZodArray<z.ZodURL>>;
+    }, z.core.$strip>>;
+    discovery: z.ZodOptional<z.ZodObject<{
+        authorizationServerUrl: z.ZodOptional<z.ZodString>;
+        resourceMetadataUrl: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    updatedAt: z.ZodNumber;
+}, z.core.$strip>;
+export declare const StoredMcpOAuthFileSchema: z.ZodObject<{
+    entries: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        serverName: z.ZodString;
+        serverUrl: z.ZodString;
+        tokens: z.ZodOptional<z.ZodObject<{
+            accessToken: z.ZodString;
+            refreshToken: z.ZodOptional<z.ZodString>;
+            expiresAt: z.ZodOptional<z.ZodNumber>;
+            scope: z.ZodOptional<z.ZodString>;
+            tokenType: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        client: z.ZodOptional<z.ZodObject<{
+            clientId: z.ZodString;
+            clientSecret: z.ZodOptional<z.ZodString>;
+            clientIdIssuedAt: z.ZodOptional<z.ZodNumber>;
+            clientSecretExpiresAt: z.ZodOptional<z.ZodNumber>;
+            redirectUris: z.ZodOptional<z.ZodArray<z.ZodURL>>;
+        }, z.core.$strip>>;
+        discovery: z.ZodOptional<z.ZodObject<{
+            authorizationServerUrl: z.ZodOptional<z.ZodString>;
+            resourceMetadataUrl: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type McpOAuthConfig = z.infer<typeof McpOAuthConfigSchema>;
+export type StoredMcpOAuthTokens = z.infer<typeof StoredMcpOAuthTokensSchema>;
+export type StoredMcpOAuthClient = z.infer<typeof StoredMcpOAuthClientSchema>;
+export type StoredMcpOAuthDiscovery = z.infer<typeof StoredMcpOAuthDiscoverySchema>;
+export type StoredMcpOAuthEntry = z.infer<typeof StoredMcpOAuthEntrySchema>;
+export type StoredMcpOAuthFile = z.infer<typeof StoredMcpOAuthFileSchema>;

package/dist/core/mcp/oauth/types.js

@@ -0,0 +1,45 @@
+import { z } from "zod";
+export const McpOAuthConfigSchema = z.object({
+    enabled: z.boolean().optional(),
+    clientId: z.string().min(1).optional(),
+    clientSecret: z.string().min(1).optional(),
+    authorizationUrl: z.url().optional(),
+    tokenUrl: z.url().optional(),
+    issuer: z.url().optional(),
+    registrationUrl: z.url().optional(),
+    scopes: z.array(z.string().min(1)).optional(),
+    audiences: z.array(z.string().min(1)).optional(),
+    redirectUri: z.url().optional(),
+    callbackPort: z.int().min(1).max(65535).optional(),
+    tokenParamName: z.string().min(1).optional(),
+});
+export const StoredMcpOAuthTokensSchema = z.object({
+    accessToken: z.string().min(1),
+    refreshToken: z.string().min(1).optional(),
+    expiresAt: z.number().finite().optional(),
+    scope: z.string().min(1).optional(),
+    tokenType: z.string().min(1).optional(),
+});
+export const StoredMcpOAuthClientSchema = z.object({
+    clientId: z.string().min(1),
+    clientSecret: z.string().min(1).optional(),
+    clientIdIssuedAt: z.number().finite().optional(),
+    clientSecretExpiresAt: z.number().finite().optional(),
+    redirectUris: z.array(z.url()).optional(),
+});
+export const StoredMcpOAuthDiscoverySchema = z.object({
+    authorizationServerUrl: z.string().min(1).optional(),
+    resourceMetadataUrl: z.string().min(1).optional(),
+});
+export const StoredMcpOAuthEntrySchema = z.object({
+    serverName: z.string().min(1),
+    serverUrl: z.string().min(1),
+    tokens: StoredMcpOAuthTokensSchema.optional(),
+    client: StoredMcpOAuthClientSchema.optional(),
+    discovery: StoredMcpOAuthDiscoverySchema.optional(),
+    updatedAt: z.number().finite(),
+});
+export const StoredMcpOAuthFileSchema = z.object({
+    entries: z.record(z.string().min(1), StoredMcpOAuthEntrySchema).default({}),
+});
+//# sourceMappingURL=types.js.map

package/dist/core/mcp/oauth/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/core/mcp/oauth/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,gBAAgB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACpC,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC1B,eAAe,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACnC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChD,WAAW,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC/B,YAAY,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IAClD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChD,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrD,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpD,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,MAAM,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IAC7C,MAAM,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IAC7C,SAAS,EAAE,6BAA6B,CAAC,QAAQ,EAAE;IACnD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE;CAC/B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,yBAAyB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC5E,CAAC,CAAC"}

package/dist/core/mcp/types.d.ts

@@ -12,12 +12,40 @@ export declare const StreamableHttpSchema: z.ZodObject<{
     type: z.ZodLiteral<"streamable-http">;
     url: z.ZodURL;
     headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    oauth: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        clientId: z.ZodOptional<z.ZodString>;
+        clientSecret: z.ZodOptional<z.ZodString>;
+        authorizationUrl: z.ZodOptional<z.ZodURL>;
+        tokenUrl: z.ZodOptional<z.ZodURL>;
+        issuer: z.ZodOptional<z.ZodURL>;
+        registrationUrl: z.ZodOptional<z.ZodURL>;
+        scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        audiences: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        redirectUri: z.ZodOptional<z.ZodURL>;
+        callbackPort: z.ZodOptional<z.ZodInt>;
+        tokenParamName: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 /** MCP remote server over SSE + POST messages (legacy transport). */
 export declare const SseSchema: z.ZodObject<{
     type: z.ZodLiteral<"sse">;
     url: z.ZodURL;
     headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    oauth: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        clientId: z.ZodOptional<z.ZodString>;
+        clientSecret: z.ZodOptional<z.ZodString>;
+        authorizationUrl: z.ZodOptional<z.ZodURL>;
+        tokenUrl: z.ZodOptional<z.ZodURL>;
+        issuer: z.ZodOptional<z.ZodURL>;
+        registrationUrl: z.ZodOptional<z.ZodURL>;
+        scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        audiences: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        redirectUri: z.ZodOptional<z.ZodURL>;
+        callbackPort: z.ZodOptional<z.ZodInt>;
+        tokenParamName: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 export declare const McpTransportSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     type: z.ZodLiteral<"stdio">;
@@ -29,10 +57,38 @@ export declare const McpTransportSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     type: z.ZodLiteral<"streamable-http">;
     url: z.ZodURL;
     headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    oauth: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        clientId: z.ZodOptional<z.ZodString>;
+        clientSecret: z.ZodOptional<z.ZodString>;
+        authorizationUrl: z.ZodOptional<z.ZodURL>;
+        tokenUrl: z.ZodOptional<z.ZodURL>;
+        issuer: z.ZodOptional<z.ZodURL>;
+        registrationUrl: z.ZodOptional<z.ZodURL>;
+        scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        audiences: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        redirectUri: z.ZodOptional<z.ZodURL>;
+        callbackPort: z.ZodOptional<z.ZodInt>;
+        tokenParamName: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"sse">;
     url: z.ZodURL;
     headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    oauth: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        clientId: z.ZodOptional<z.ZodString>;
+        clientSecret: z.ZodOptional<z.ZodString>;
+        authorizationUrl: z.ZodOptional<z.ZodURL>;
+        tokenUrl: z.ZodOptional<z.ZodURL>;
+        issuer: z.ZodOptional<z.ZodURL>;
+        registrationUrl: z.ZodOptional<z.ZodURL>;
+        scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        audiences: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        redirectUri: z.ZodOptional<z.ZodURL>;
+        callbackPort: z.ZodOptional<z.ZodInt>;
+        tokenParamName: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
 }, z.core.$strip>], "type">;
 export type Stdio = z.infer<typeof StdioSchema>;
 export type StreamableHttp = z.infer<typeof StreamableHttpSchema>;

package/dist/core/mcp/types.js

@@ -1,4 +1,5 @@
 import { z } from "zod";
+import { McpOAuthConfigSchema } from "./oauth/types.js";
 const headersOrEnvVarsSchema = z.record(z.string(), z.string()).optional();
 /** MCP stdio server: subprocess with JSON-RPC over stdin/stdout. */
 export const StdioSchema = z.object({
@@ -13,12 +14,14 @@ export const StreamableHttpSchema = z.object({
     type: z.literal("streamable-http"),
     url: z.url(),
     headers: headersOrEnvVarsSchema,
+    oauth: McpOAuthConfigSchema.optional(),
 });
 /** MCP remote server over SSE + POST messages (legacy transport). */
 export const SseSchema = z.object({
     type: z.literal("sse"),
     url: z.url(),
     headers: headersOrEnvVarsSchema,
+    oauth: McpOAuthConfigSchema.optional(),
 });
 export const McpTransportSchema = z.discriminatedUnion("type", [
     StdioSchema,

package/dist/core/mcp/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/core/mcp/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AAE3E,oEAAoE;AACpE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpC,GAAG,EAAE,sBAAsB;IAC3B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC,CAAC;AAEH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAClC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE;IACZ,OAAO,EAAE,sBAAsB;CAChC,CAAC,CAAC;AAEH,qEAAqE;AACrE,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACtB,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE;IACZ,OAAO,EAAE,sBAAsB;CAChC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC7D,WAAW;IACX,oBAAoB;IACpB,SAAS;CACV,CAAC,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/core/mcp/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AAE3E,oEAAoE;AACpE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpC,GAAG,EAAE,sBAAsB;IAC3B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC,CAAC;AAEH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAClC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE;IACZ,OAAO,EAAE,sBAAsB;IAC/B,KAAK,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAEH,qEAAqE;AACrE,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACtB,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE;IACZ,OAAO,EAAE,sBAAsB;IAC/B,KAAK,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC7D,WAAW;IACX,oBAAoB;IACpB,SAAS;CACV,CAAC,CAAC"}

package/dist/core/memory/file-store.d.ts

@@ -0,0 +1,24 @@
+import type { JSONValue, MemoryEntry, MemoryStore, SearchOptions } from "@strands-agents/sdk";
+type FileMemoryStoreConfig = {
+    baseDir: string;
+    name: string;
+    description?: string;
+    maxSearchResults?: number;
+    writable?: boolean;
+    extraction?: MemoryStore["extraction"];
+};
+export declare class FileMemoryStore implements MemoryStore {
+    readonly name: string;
+    readonly description?: string;
+    readonly maxSearchResults?: number;
+    readonly writable: boolean;
+    readonly extraction?: MemoryStore["extraction"];
+    private readonly baseDir;
+    constructor(config: FileMemoryStoreConfig);
+    search(query: string, options?: SearchOptions): Promise<MemoryEntry[]>;
+    add(content: string, metadata?: Record<string, JSONValue>): Promise<void>;
+    private readEntries;
+    private appendEntry;
+    private scopeFilePath;
+}
+export {};