integrate-sdk 0.2.4 → 0.3.1

package/dist/adapters/nextjs.d.ts

@@ -0,0 +1,223 @@
+/**
+ * Next.js OAuth Route Adapter
+ * Provides OAuth route handlers for Next.js App Router
+ *
+ * Note: This file uses type imports only to avoid requiring Next.js at build time.
+ * The actual Next.js types are used at runtime when available.
+ */
+import { type OAuthHandlerConfig } from './base-handler.js';
+type NextRequest = any;
+type NextResponse = any;
+/**
+ * Create Next.js OAuth route handlers
+ *
+ * Use this to create secure OAuth API routes in your Next.js application
+ * that handle authorization with server-side secrets.
+ *
+ * @param config - OAuth handler configuration with provider credentials
+ * @returns Object with authorize, callback, and status route handlers, plus a unified handler
+ *
+ * @example
+ * **Simple Setup (Recommended)** - One route file handles everything:
+ *
+ * ```typescript
+ * // app/api/integrate/oauth/[action]/route.ts
+ * import { createNextOAuthHandler } from 'integrate-sdk';
+ *
+ * const handler = createNextOAuthHandler({
+ *   providers: {
+ *     github: {
+ *       clientId: process.env.GITHUB_CLIENT_ID!,
+ *       clientSecret: process.env.GITHUB_CLIENT_SECRET!,
+ *     },
+ *   },
+ * });
+ *
+ * export const { POST, GET } = handler.createRoutes();
+ * ```
+ *
+ * @example
+ * **Advanced Setup** - Separate routes for each action:
+ *
+ * ```typescript
+ * // app/api/integrate/oauth/authorize/route.ts
+ * export const POST = handler.authorize;
+ *
+ * // app/api/integrate/oauth/callback/route.ts
+ * export const POST = handler.callback;
+ *
+ * // app/api/integrate/oauth/status/route.ts
+ * export const GET = handler.status;
+ * ```
+ */
+export declare function createNextOAuthHandler(config: OAuthHandlerConfig): {
+    /**
+     * POST /api/integrate/oauth/authorize
+     *
+     * Request authorization URL from MCP server with server-side OAuth credentials
+     *
+     * Request body:
+     * ```json
+     * {
+     *   "provider": "github",
+     *   "scopes": ["repo", "user"],
+     *   "state": "random-state-string",
+     *   "codeChallenge": "pkce-code-challenge",
+     *   "codeChallengeMethod": "S256",
+     *   "redirectUri": "https://yourapp.com/oauth/callback"
+     * }
+     * ```
+     *
+     * Response:
+     * ```json
+     * {
+     *   "authorizationUrl": "https://github.com/login/oauth/authorize?..."
+     * }
+     * ```
+     *
+     * @example
+     * ```typescript
+     * // app/api/integrate/oauth/authorize/route.ts
+     * import { createNextOAuthHandler } from 'integrate-sdk';
+     *
+     * const handler = createNextOAuthHandler({
+     *        *   providers: {
+     *     github: {
+     *       clientId: process.env.GITHUB_CLIENT_ID!,
+     *       clientSecret: process.env.GITHUB_CLIENT_SECRET!,
+     *     },
+     *   },
+     * });
+     *
+     * export const POST = handler.authorize;
+     * ```
+     */
+    authorize(req: NextRequest): Promise<NextResponse>;
+    /**
+     * POST /api/integrate/oauth/callback
+     *
+     * Exchange authorization code for session token
+     *
+     * Request body:
+     * ```json
+     * {
+     *   "provider": "github",
+     *   "code": "authorization-code",
+     *   "codeVerifier": "pkce-code-verifier",
+     *   "state": "state-from-authorize"
+     * }
+     * ```
+     *
+     * Response:
+     * ```json
+     * {
+     *   "sessionToken": "session-token-123",
+     *   "provider": "github",
+     *   "scopes": ["repo", "user"],
+     *   "expiresAt": 1234567890
+     * }
+     * ```
+     *
+     * @example
+     * ```typescript
+     * // app/api/integrate/oauth/callback/route.ts
+     * import { createNextOAuthHandler } from 'integrate-sdk';
+     *
+     * const handler = createNextOAuthHandler({
+     *        *   providers: {
+     *     github: {
+     *       clientId: process.env.GITHUB_CLIENT_ID!,
+     *       clientSecret: process.env.GITHUB_CLIENT_SECRET!,
+     *     },
+     *   },
+     * });
+     *
+     * export const POST = handler.callback;
+     * ```
+     */
+    callback(req: NextRequest): Promise<NextResponse>;
+    /**
+     * GET /api/integrate/oauth/status?provider=github
+     *
+     * Check if a provider is currently authorized
+     *
+     * Query parameters:
+     * - provider: Provider to check (e.g., "github")
+     *
+     * Headers:
+     * - X-Session-Token: Session token from previous authorization
+     *
+     * Response:
+     * ```json
+     * {
+     *   "authorized": true,
+     *   "provider": "github",
+     *   "scopes": ["repo", "user"],
+     *   "expiresAt": 1234567890
+     * }
+     * ```
+     *
+     * @example
+     * ```typescript
+     * // app/api/integrate/oauth/status/route.ts
+     * import { createNextOAuthHandler } from 'integrate-sdk';
+     *
+     * const handler = createNextOAuthHandler({
+     *        *   providers: {
+     *     github: {
+     *       clientId: process.env.GITHUB_CLIENT_ID!,
+     *       clientSecret: process.env.GITHUB_CLIENT_SECRET!,
+     *     },
+     *   },
+     * });
+     *
+     * export const GET = handler.status;
+     * ```
+     */
+    status(req: NextRequest): Promise<NextResponse>;
+    /**
+     * Create unified route handlers for catch-all route
+     *
+     * This is the simplest way to set up OAuth routes - create a single catch-all
+     * route file that handles all OAuth actions.
+     *
+     * @returns Object with POST and GET handlers for Next.js dynamic routes
+     *
+     * @example
+     * ```typescript
+     * // app/api/integrate/oauth/[action]/route.ts
+     * import { createNextOAuthHandler } from 'integrate-sdk';
+     *
+     * const handler = createNextOAuthHandler({
+     *   providers: {
+     *     github: {
+     *       clientId: process.env.GITHUB_CLIENT_ID!,
+     *       clientSecret: process.env.GITHUB_CLIENT_SECRET!,
+     *     },
+     *   },
+     * });
+     *
+     * export const { POST, GET } = handler.createRoutes();
+     * ```
+     */
+    createRoutes(): {
+        /**
+         * POST handler for authorize and callback actions
+         */
+        POST(req: NextRequest, context: {
+            params: {
+                action: string;
+            };
+        }): Promise<NextResponse>;
+        /**
+         * GET handler for status action
+         */
+        GET(req: NextRequest, context: {
+            params: {
+                action: string;
+            };
+        }): Promise<NextResponse>;
+    };
+};
+export {};
+//# sourceMappingURL=nextjs.d.ts.map

package/dist/adapters/nextjs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nextjs.d.ts","sourceRoot":"","sources":["../../src/adapters/nextjs.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAgB,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAG1E,KAAK,WAAW,GAAG,GAAG,CAAC;AACvB,KAAK,YAAY,GAAG,GAAG,CAAC;AAExB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,kBAAkB;IAI7D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAwCG;mBACkB,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;IAcxD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAyCG;kBACiB,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;IAcvD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAqCG;gBACe,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;IA8BrD;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;;QAGC;;WAEG;kBAEI,WAAW,WACP;YAAE,MAAM,EAAE;gBAAE,MAAM,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,GACtC,OAAO,CAAC,YAAY,CAAC;QAiBxB;;WAEG;iBAEI,WAAW,WACP;YAAE,MAAM,EAAE;gBAAE,MAAM,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,GACtC,OAAO,CAAC,YAAY,CAAC;;EAiB/B"}

package/dist/adapters/tanstack-start.d.ts

@@ -0,0 +1,169 @@
+/**
+ * TanStack Start OAuth Route Adapter
+ * Provides OAuth route handlers for TanStack Start
+ */
+import { type OAuthHandlerConfig } from './base-handler.js';
+/**
+ * Create TanStack Start OAuth route handlers
+ *
+ * Use this to create secure OAuth API routes in your TanStack Start application
+ * that handle authorization with server-side secrets.
+ *
+ * @param config - OAuth handler configuration with MCP server URL and provider credentials
+ * @returns Object with authorize, callback, and status route handlers
+ *
+ * @example
+ * ```typescript
+ * // app/routes/api/integrate/oauth/authorize.ts
+ * import { createTanStackOAuthHandler } from 'integrate-sdk';
+ * import { json } from '@tanstack/start';
+ *
+ * const handler = createTanStackOAuthHandler({
+ *   providers: {
+ *     github: {
+ *       clientId: process.env.GITHUB_CLIENT_ID!,
+ *       clientSecret: process.env.GITHUB_CLIENT_SECRET!,
+ *     },
+ *     gmail: {
+ *       clientId: process.env.GMAIL_CLIENT_ID!,
+ *       clientSecret: process.env.GMAIL_CLIENT_SECRET!,
+ *     },
+ *   },
+ * });
+ *
+ * export const POST = handler.authorize;
+ * ```
+ */
+export declare function createTanStackOAuthHandler(config: OAuthHandlerConfig): {
+    /**
+     * POST /api/integrate/oauth/authorize
+     *
+     * Request authorization URL from MCP server with server-side OAuth credentials
+     *
+     * Request body:
+     * ```json
+     * {
+     *   "provider": "github",
+     *   "scopes": ["repo", "user"],
+     *   "state": "random-state-string",
+     *   "codeChallenge": "pkce-code-challenge",
+     *   "codeChallengeMethod": "S256",
+     *   "redirectUri": "https://yourapp.com/oauth/callback"
+     * }
+     * ```
+     *
+     * Response:
+     * ```json
+     * {
+     *   "authorizationUrl": "https://github.com/login/oauth/authorize?..."
+     * }
+     * ```
+     *
+     * @example
+     * ```typescript
+     * // app/routes/api/integrate/oauth/authorize.ts
+     * import { createTanStackOAuthHandler } from 'integrate-sdk';
+     *
+     * const handler = createTanStackOAuthHandler({
+     *        *   providers: {
+     *     github: {
+     *       clientId: process.env.GITHUB_CLIENT_ID!,
+     *       clientSecret: process.env.GITHUB_CLIENT_SECRET!,
+     *     },
+     *   },
+     * });
+     *
+     * export const POST = handler.authorize;
+     * ```
+     */
+    authorize({ request }: {
+        request: Request;
+    }): Promise<Response>;
+    /**
+     * POST /api/integrate/oauth/callback
+     *
+     * Exchange authorization code for session token
+     *
+     * Request body:
+     * ```json
+     * {
+     *   "provider": "github",
+     *   "code": "authorization-code",
+     *   "codeVerifier": "pkce-code-verifier",
+     *   "state": "state-from-authorize"
+     * }
+     * ```
+     *
+     * Response:
+     * ```json
+     * {
+     *   "sessionToken": "session-token-123",
+     *   "provider": "github",
+     *   "scopes": ["repo", "user"],
+     *   "expiresAt": 1234567890
+     * }
+     * ```
+     *
+     * @example
+     * ```typescript
+     * // app/routes/api/integrate/oauth/callback.ts
+     * import { createTanStackOAuthHandler } from 'integrate-sdk';
+     *
+     * const handler = createTanStackOAuthHandler({
+     *        *   providers: {
+     *     github: {
+     *       clientId: process.env.GITHUB_CLIENT_ID!,
+     *       clientSecret: process.env.GITHUB_CLIENT_SECRET!,
+     *     },
+     *   },
+     * });
+     *
+     * export const POST = handler.callback;
+     * ```
+     */
+    callback({ request }: {
+        request: Request;
+    }): Promise<Response>;
+    /**
+     * GET /api/integrate/oauth/status?provider=github
+     *
+     * Check if a provider is currently authorized
+     *
+     * Query parameters:
+     * - provider: Provider to check (e.g., "github")
+     *
+     * Headers:
+     * - X-Session-Token: Session token from previous authorization
+     *
+     * Response:
+     * ```json
+     * {
+     *   "authorized": true,
+     *   "provider": "github",
+     *   "scopes": ["repo", "user"],
+     *   "expiresAt": 1234567890
+     * }
+     * ```
+     *
+     * @example
+     * ```typescript
+     * // app/routes/api/integrate/oauth/status.ts
+     * import { createTanStackOAuthHandler } from 'integrate-sdk';
+     *
+     * const handler = createTanStackOAuthHandler({
+     *        *   providers: {
+     *     github: {
+     *       clientId: process.env.GITHUB_CLIENT_ID!,
+     *       clientSecret: process.env.GITHUB_CLIENT_SECRET!,
+     *     },
+     *   },
+     * });
+     *
+     * export const GET = handler.status;
+     * ```
+     */
+    status({ request }: {
+        request: Request;
+    }): Promise<Response>;
+};
+//# sourceMappingURL=tanstack-start.d.ts.map

package/dist/adapters/tanstack-start.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tanstack-start.d.ts","sourceRoot":"","sources":["../../src/adapters/tanstack-start.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAgB,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE1E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,kBAAkB;IAIjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAwCG;2BAC0B;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;IAwBrE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAyCG;0BACyB;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;IAwBpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAqCG;wBACuB;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;EAmDrE"}

package/dist/config/types.d.ts

@@ -128,6 +128,26 @@ export interface MCPClientConfig<TPlugins extends readonly MCPPlugin[]> {
      * ```
      */
     sessionToken?: string;
+    /**
+     * Base URL for OAuth API routes
+     * These routes should be mounted in your application to handle OAuth securely
+     *
+     * The SDK will call:
+     * - POST {oauthApiBase}/authorize - Get authorization URL
+     * - POST {oauthApiBase}/callback - Exchange code for token
+     * - GET {oauthApiBase}/status - Check authorization status
+     *
+     * @default '/api/integrate/oauth'
+     *
+     * @example
+     * ```typescript
+     * const client = createMCPClient({
+     *   plugins: [githubPlugin({ ... })],
+     *   oauthApiBase: '/api/integrate/oauth'
+     * });
+     * ```
+     */
+    oauthApiBase?: string;
 }
 /**
  * Helper type to infer enabled tools from plugins

package/dist/config/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/config/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAExD;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,KAAK,EAAE,mBAAmB,CAAC;IAC3B,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;AAEnF;;GAEG;AACH,MAAM,WAAW,eAAe,CAAC,QAAQ,SAAS,SAAS,SAAS,EAAE;IACpE,iCAAiC;IACjC,OAAO,EAAE,QAAQ,CAAC;IAElB,mDAAmD;IACnD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEjC,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,yBAAyB;IACzB,UAAU,CAAC,EAAE;QACX,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IAEF;;;;;;;;;;;;;;;;;;;OAmBG;IACH,gBAAgB,CAAC,EAAE,aAAa,CAAC;IAEjC;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;IAE7C;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB;;;;;;;;;;;;;;OAcG;IACH,SAAS,CAAC,EAAE;QACV,+DAA+D;QAC/D,IAAI,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;QAC5B,oDAAoD;QACpD,YAAY,CAAC,EAAE;YACb,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,MAAM,CAAC,EAAE,MAAM,CAAC;SACjB,CAAC;QACF,sDAAsD;QACtD,cAAc,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KACnF,CAAC;IAEF;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,MAAM,iBAAiB,CAAC,QAAQ,SAAS,SAAS,SAAS,EAAE,IACjE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpC;;GAEG;AACH,MAAM,MAAM,gBAAgB,CAAC,QAAQ,SAAS,SAAS,SAAS,EAAE,IAAI;KACnE,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;CAC/C,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/config/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAExD;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,KAAK,EAAE,mBAAmB,CAAC;IAC3B,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;AAEnF;;GAEG;AACH,MAAM,WAAW,eAAe,CAAC,QAAQ,SAAS,SAAS,SAAS,EAAE;IACpE,iCAAiC;IACjC,OAAO,EAAE,QAAQ,CAAC;IAElB,mDAAmD;IACnD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEjC,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,yBAAyB;IACzB,UAAU,CAAC,EAAE;QACX,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IAEF;;;;;;;;;;;;;;;;;;;OAmBG;IACH,gBAAgB,CAAC,EAAE,aAAa,CAAC;IAEjC;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;IAE7C;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB;;;;;;;;;;;;;;OAcG;IACH,SAAS,CAAC,EAAE;QACV,+DAA+D;QAC/D,IAAI,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;QAC5B,oDAAoD;QACpD,YAAY,CAAC,EAAE;YACb,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,MAAM,CAAC,EAAE,MAAM,CAAC;SACjB,CAAC;QACF,sDAAsD;QACtD,cAAc,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KACnF,CAAC;IAEF;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;;;;;;;;;;;;;;;;OAkBG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,MAAM,iBAAiB,CAAC,QAAQ,SAAS,SAAS,SAAS,EAAE,IACjE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpC;;GAEG;AACH,MAAM,MAAM,gBAAgB,CAAC,QAAQ,SAAS,SAAS,SAAS,EAAE,IAAI;KACnE,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;CAC/C,CAAC"}

package/dist/index.d.ts

@@ -8,6 +8,10 @@ export { OAuthManager } from "./oauth/manager.js";
 export { OAuthWindowManager, sendCallbackToOpener } from "./oauth/window-manager.js";
 export { generateCodeVerifier, generateCodeChallenge, generateState } from "./oauth/pkce.js";
 export type { OAuthFlowConfig, PopupOptions, AuthStatus, PendingAuth, AuthorizationUrlResponse, OAuthCallbackResponse, OAuthCallbackParams, } from "./oauth/types.js";
+export { OAuthHandler } from "./adapters/base-handler.js";
+export type { OAuthHandlerConfig, AuthorizeRequest, AuthorizeResponse, CallbackRequest, CallbackResponse, StatusResponse, } from "./adapters/base-handler.js";
+export { createNextOAuthHandler } from "./adapters/nextjs.js";
+export { createTanStackOAuthHandler } from "./adapters/tanstack-start.js";
 export type { MCPClientConfig, ReauthContext, ReauthHandler } from "./config/types.js";
 export { IntegrateSDKError, AuthenticationError, AuthorizationError, TokenExpiredError, ConnectionError, ToolCallError, isAuthError, isTokenExpiredError, isAuthorizationError, parseServerError, } from "./errors.js";
 export type { MCPPlugin, OAuthConfig, ExtractPluginIds, ExtractPluginTools, } from "./plugins/types.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC3E,YAAY,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAGzD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC7F,YAAY,EACV,eAAe,EACf,YAAY,EACZ,UAAU,EACV,WAAW,EACX,wBAAwB,EACxB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGvF,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,WAAW,EACX,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAGrB,YAAY,EACV,SAAS,EACT,WAAW,EACX,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,YAAY,EAAE,kBAAkB,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE/F,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAG3F,YAAY,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAErE,OAAO,EACL,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAGrE,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,gBAAgB,GACjB,MAAM,6BAA6B,CAAC;AACrC,YAAY,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAGhE,YAAY,EACV,cAAc,EACd,eAAe,EACf,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,OAAO,EACP,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAGnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,YAAY,EACV,cAAc,EACd,2BAA2B,GAC5B,MAAM,6BAA6B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC3E,YAAY,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAGzD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC7F,YAAY,EACV,eAAe,EACf,YAAY,EACZ,UAAU,EACV,WAAW,EACX,wBAAwB,EACxB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,YAAY,EACV,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,cAAc,GACf,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAG1E,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGvF,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,WAAW,EACX,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAGrB,YAAY,EACV,SAAS,EACT,WAAW,EACX,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,YAAY,EAAE,kBAAkB,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE/F,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAG3F,YAAY,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAErE,OAAO,EACL,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAGrE,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,gBAAgB,GACjB,MAAM,6BAA6B,CAAC;AACrC,YAAY,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAGhE,YAAY,EACV,cAAc,EACd,eAAe,EACf,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,OAAO,EACP,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAGnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,YAAY,EACV,cAAc,EACd,2BAA2B,GAC5B,MAAM,6BAA6B,CAAC"}

package/dist/oauth/manager.d.ts

@@ -13,8 +13,8 @@ export declare class OAuthManager {
     private sessionToken?;
     private windowManager;
     private flowConfig;
-    private serverUrl;
-    constructor(serverUrl: string, flowConfig?: Partial<OAuthFlowConfig>);
+    private oauthApiBase;
+    constructor(oauthApiBase: string, flowConfig?: Partial<OAuthFlowConfig>);
     /**
      * Initiate OAuth authorization flow
      *
@@ -76,11 +76,13 @@ export declare class OAuthManager {
      */
     clearSessionToken(): void;
     /**
-     * Request authorization URL from MCP server
+     * Request authorization URL from user's API route
+     * The API route will add OAuth secrets and forward to MCP server
      */
     private getAuthorizationUrl;
     /**
-     * Exchange authorization code for session token
+     * Exchange authorization code for session token via user's API route
+     * The API route will forward to MCP server
      */
     private exchangeCodeForToken;
     /**

package/dist/oauth/manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/oauth/manager.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EACV,eAAe,EAEf,UAAU,EAGX,MAAM,YAAY,CAAC;AAIpB;;;GAGG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,YAAY,CAAuC;IAC3D,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,aAAa,CAAqB;IAC1C,OAAO,CAAC,UAAU,CAAkB;IACpC,OAAO,CAAC,SAAS,CAAS;gBAGxB,SAAS,EAAE,MAAM,EACjB,UAAU,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;IAWvC;;;;;;;;;;;;;;;;OAgBG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAwCxE;;;;;;;;;;;;;OAaG;IACG,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA8ClE;;;;;;;;;;;;;OAaG;IACG,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAqC5D;;OAEG;IACH,eAAe,IAAI,MAAM,GAAG,SAAS;IAIrC;;OAEG;IACH,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAIpC;;OAEG;IACH,iBAAiB,IAAI,IAAI;IAIzB;;OAEG;YACW,mBAAmB;IA+BjC;;OAEG;YACW,oBAAoB;IA8BlC;;OAEG;IACH,KAAK,IAAI,IAAI;CAGd"}
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/oauth/manager.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EACV,eAAe,EAEf,UAAU,EAGX,MAAM,YAAY,CAAC;AAIpB;;;GAGG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,YAAY,CAAuC;IAC3D,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,aAAa,CAAqB;IAC1C,OAAO,CAAC,UAAU,CAAkB;IACpC,OAAO,CAAC,YAAY,CAAS;gBAG3B,YAAY,EAAE,MAAM,EACpB,UAAU,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;IAWvC;;;;;;;;;;;;;;;;OAgBG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAwCxE;;;;;;;;;;;;;OAaG;IACG,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA8ClE;;;;;;;;;;;;;OAaG;IACG,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAoC5D;;OAEG;IACH,eAAe,IAAI,MAAM,GAAG,SAAS;IAIrC;;OAEG;IACH,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAIpC;;OAEG;IACH,iBAAiB,IAAI,IAAI;IAIzB;;;OAGG;YACW,mBAAmB;IAiCjC;;;OAGG;YACW,oBAAoB;IA8BlC;;OAEG;IACH,KAAK,IAAI,IAAI;CAGd"}

package/dist/oauth.js

@@ -0,0 +1,194 @@
+var __defProp = Object.defineProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, {
+      get: all[name],
+      enumerable: true,
+      configurable: true,
+      set: (newValue) => all[name] = () => newValue
+    });
+};
+var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+
+// src/adapters/base-handler.ts
+var MCP_SERVER_URL = "https://mcp.integrate.dev/api/v1/mcp";
+
+class OAuthHandler {
+  config;
+  serverUrl = MCP_SERVER_URL;
+  constructor(config) {
+    this.config = config;
+  }
+  async handleAuthorize(request) {
+    const providerConfig = this.config.providers[request.provider];
+    if (!providerConfig) {
+      throw new Error(`Provider ${request.provider} not configured. Add OAuth credentials to your API route configuration.`);
+    }
+    if (!providerConfig.clientId || !providerConfig.clientSecret) {
+      throw new Error(`Missing OAuth credentials for ${request.provider}. Check your environment variables.`);
+    }
+    const url = new URL("/oauth/authorize", this.serverUrl);
+    url.searchParams.set("provider", request.provider);
+    url.searchParams.set("client_id", providerConfig.clientId);
+    url.searchParams.set("client_secret", providerConfig.clientSecret);
+    url.searchParams.set("scope", request.scopes.join(","));
+    url.searchParams.set("state", request.state);
+    url.searchParams.set("code_challenge", request.codeChallenge);
+    url.searchParams.set("code_challenge_method", request.codeChallengeMethod);
+    const redirectUri = request.redirectUri || providerConfig.redirectUri;
+    if (redirectUri) {
+      url.searchParams.set("redirect_uri", redirectUri);
+    }
+    const response = await fetch(url.toString(), {
+      method: "GET"
+    });
+    if (!response.ok) {
+      const error = await response.text();
+      throw new Error(`MCP server failed to generate authorization URL: ${error}`);
+    }
+    const data = await response.json();
+    return data;
+  }
+  async handleCallback(request) {
+    const url = new URL("/oauth/callback", this.serverUrl);
+    const response = await fetch(url.toString(), {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({
+        provider: request.provider,
+        code: request.code,
+        code_verifier: request.codeVerifier,
+        state: request.state
+      })
+    });
+    if (!response.ok) {
+      const error = await response.text();
+      throw new Error(`MCP server failed to exchange authorization code: ${error}`);
+    }
+    const data = await response.json();
+    return data;
+  }
+  async handleStatus(provider, sessionToken) {
+    const url = new URL("/oauth/status", this.serverUrl);
+    url.searchParams.set("provider", provider);
+    const response = await fetch(url.toString(), {
+      method: "GET",
+      headers: {
+        "X-Session-Token": sessionToken
+      }
+    });
+    if (!response.ok) {
+      if (response.status === 401) {
+        return {
+          authorized: false,
+          provider
+        };
+      }
+      const error = await response.text();
+      throw new Error(`MCP server failed to check authorization status: ${error}`);
+    }
+    const data = await response.json();
+    return data;
+  }
+}
+
+// src/adapters/auto-routes.ts
+var globalOAuthConfig = null;
+function setGlobalOAuthConfig(config) {
+  globalOAuthConfig = config;
+}
+async function POST(req, context) {
+  if (!globalOAuthConfig) {
+    throw new Error("OAuth configuration not found. Did you configure oauthProviders in createMCPClient?");
+  }
+  const handler = new OAuthHandler(globalOAuthConfig);
+  const action = context?.params?.action;
+  if (!action) {
+    return createErrorResponse("Missing action parameter", 400);
+  }
+  try {
+    if (action === "authorize") {
+      const body = await parseRequestBody(req);
+      const result = await handler.handleAuthorize(body);
+      return createSuccessResponse(result);
+    }
+    if (action === "callback") {
+      const body = await parseRequestBody(req);
+      const result = await handler.handleCallback(body);
+      return createSuccessResponse(result);
+    }
+    return createErrorResponse(`Unknown action: ${action}`, 404);
+  } catch (error) {
+    console.error(`[OAuth ${action}] Error:`, error);
+    return createErrorResponse(error.message, 500);
+  }
+}
+async function GET(req, context) {
+  if (!globalOAuthConfig) {
+    throw new Error("OAuth configuration not found. Did you configure oauthProviders in createMCPClient?");
+  }
+  const handler = new OAuthHandler(globalOAuthConfig);
+  const action = context?.params?.action;
+  if (!action) {
+    return createErrorResponse("Missing action parameter", 400);
+  }
+  try {
+    if (action === "status") {
+      const { provider, sessionToken } = parseQueryParams(req);
+      if (!provider || !sessionToken) {
+        return createErrorResponse("Missing provider or session token", 400);
+      }
+      const result = await handler.handleStatus(provider, sessionToken);
+      return createSuccessResponse(result);
+    }
+    return createErrorResponse(`Unknown action: ${action}`, 404);
+  } catch (error) {
+    console.error(`[OAuth ${action}] Error:`, error);
+    return createErrorResponse(error.message, 500);
+  }
+}
+async function parseRequestBody(req) {
+  if (typeof req.json === "function") {
+    return await req.json();
+  }
+  throw new Error("Unable to parse request body");
+}
+function parseQueryParams(req) {
+  let url;
+  if (req.nextUrl) {
+    url = new URL(req.nextUrl);
+  } else if (req.url) {
+    url = new URL(req.url);
+  } else {
+    return {};
+  }
+  const provider = url.searchParams.get("provider") || undefined;
+  const sessionToken = req.headers?.get?.("x-session-token") || undefined;
+  return { provider, sessionToken };
+}
+function createSuccessResponse(data) {
+  if (typeof globalThis.NextResponse !== "undefined") {
+    const NextResponse = globalThis.NextResponse;
+    return NextResponse.json(data);
+  }
+  return new Response(JSON.stringify(data), {
+    status: 200,
+    headers: { "Content-Type": "application/json" }
+  });
+}
+function createErrorResponse(message, status) {
+  if (typeof globalThis.NextResponse !== "undefined") {
+    const NextResponse = globalThis.NextResponse;
+    return NextResponse.json({ error: message }, { status });
+  }
+  return new Response(JSON.stringify({ error: message }), {
+    status,
+    headers: { "Content-Type": "application/json" }
+  });
+}
+export {
+  POST,
+  GET
+};