kavachos 0.0.3 → 0.0.5

package/dist/mcp/index.d.ts

@@ -1,5 +1,5 @@
-import { M as McpAuthContext, R as Result, a as McpAuthorizeResult, A as ApproveConsentParams, b as McpServerMetadata, c as McpProtectedResourceMetadata, d as McpClientRegistrationResponse, e as McpSession, f as McpConfig, g as McpAuthModule, h as McpTokenResponse } from '../types-mwupB57A.js';
-export { K as KavachError, i as McpAccessToken, j as McpAuthorizationCode, k as McpAuthorizeRequest, l as McpAuthorizeRequestSchema, m as McpClient, n as McpClientRegistrationRequest, o as McpClientRegistrationSchema, p as McpTokenPayload, q as McpTokenRequest, r as McpTokenRequestParsed, s as McpTokenRequestSchema } from '../types-mwupB57A.js';
+import { M as McpAuthContext, R as Result, a as McpAuthorizeResult, A as ApproveConsentParams, b as McpServerMetadata, c as McpProtectedResourceMetadata, d as McpClientRegistrationResponse, e as McpSession, f as McpConfig, g as McpAuthModule, h as McpTokenResponse } from '../types-BuHrZcjE.js';
+export { K as KavachError, i as McpAccessToken, j as McpAuthorizationCode, k as McpAuthorizeRequest, l as McpAuthorizeRequestSchema, m as McpClient, n as McpClientRegistrationRequest, o as McpClientRegistrationSchema, p as McpTokenPayload, q as McpTokenRequest, r as McpTokenRequestParsed, s as McpTokenRequestSchema } from '../types-BuHrZcjE.js';
 import 'zod';
 
 /**

package/dist/mcp/index.js

@@ -1,6 +1,6 @@
+import { randomBytes, toBase64Url, generateId } from '../chunk-3AZDFCQF.js';
 import '../chunk-PZ5AY32C.js';
 import { z } from 'zod';
-import { getRandomValues, randomUUID } from 'crypto';
 import { jwtVerify, SignJWT } from 'jose';
 
 var McpClientRegistrationSchema = z.object({
@@ -47,19 +47,20 @@ var McpTokenRequestSchema = z.discriminatedUnion("grant_type", [
     resource: z.string().url().optional()
   })
 ]);
+
+// src/mcp/utils.ts
 function generateSecureToken(byteLength) {
-  const bytes = new Uint8Array(byteLength);
-  getRandomValues(bytes);
-  return uint8ArrayToBase64Url(bytes);
+  const bytes = randomBytes(byteLength);
+  return toBase64Url(bytes);
 }
 function generateAuthorizationCode() {
-  return randomUUID();
+  return generateId();
 }
 async function computeS256Challenge(codeVerifier) {
   const encoder = new TextEncoder();
   const data = encoder.encode(codeVerifier);
   const digest = await globalThis.crypto.subtle.digest("SHA-256", data);
-  return uint8ArrayToBase64Url(new Uint8Array(digest));
+  return toBase64Url(new Uint8Array(digest));
 }
 async function verifyS256(codeVerifier, codeChallenge) {
   const computed = await computeS256Challenge(codeVerifier);
@@ -78,13 +79,6 @@ function timingSafeEqual(a, b) {
   }
   return diff === 0;
 }
-function uint8ArrayToBase64Url(bytes) {
-  let binary = "";
-  for (let i = 0; i < bytes.length; i++) {
-    binary += String.fromCharCode(bytes[i]);
-  }
-  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-}
 async function parseRequestBody(request) {
   const contentType = request.headers.get("content-type") ?? "";
   if (contentType.includes("application/x-www-form-urlencoded")) {
@@ -414,6 +408,8 @@ function getProtectedResourceMetadata(ctx) {
     resource_signing_alg_values_supported: ["HS256"]
   };
 }
+
+// src/mcp/registration.ts
 async function resolveClientIdMetadataDocument(clientId) {
   try {
     const url = new URL(clientId);
@@ -502,7 +498,7 @@ async function registerClient(ctx, body) {
       };
     }
   }
-  const clientId = randomUUID();
+  const clientId = generateId();
   const isPublic = authMethod === "none";
   const clientSecret = isPublic ? null : generateSecureToken(48);
   if (data.client_uri) {
@@ -787,7 +783,7 @@ async function issueAccessTokenJwt(ctx, userId, clientId, scopes, resource) {
     throw new Error("MCP signingSecret is required to issue tokens");
   }
   const key = await getSigningKey(secret);
-  const jti = randomUUID();
+  const jti = generateId();
   const now = Math.floor(Date.now() / 1e3);
   const exp = now + ctx.config.accessTokenTtl;
   const expiresAt = new Date(exp * 1e3);