mcp-creatio 0.3.6

package/dist/services/session-context.js

@@ -0,0 +1,182 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SessionContext = void 0;
+const log_1 = __importDefault(require("../log"));
+class SessionContext {
+    static _instance;
+    _sessions = new Map();
+    _userTokens = new Map();
+    _oauthStates = new Map();
+    _deletingSessions = new Set();
+    static get instance() {
+        if (!SessionContext._instance) {
+            SessionContext._instance = new SessionContext();
+        }
+        return SessionContext._instance;
+    }
+    _generateState() {
+        return (Math.random().toString(36).substring(2, 15) +
+            Math.random().toString(36).substring(2, 15));
+    }
+    createSession(sessionId, userKey, remoteIp) {
+        const session = {
+            id: sessionId,
+            isLogged: false,
+            createdAt: new Date(),
+        };
+        if (userKey !== undefined) {
+            session.userKey = userKey;
+        }
+        if (remoteIp !== undefined) {
+            session.remoteIp = remoteIp;
+        }
+        this._sessions.set(sessionId, session);
+        return session;
+    }
+    getSession(sessionId) {
+        return this._sessions.get(sessionId);
+    }
+    hasSession(sessionId) {
+        return this._sessions.has(sessionId);
+    }
+    markSessionAsLogged(sessionId) {
+        const session = this._sessions.get(sessionId);
+        if (session) {
+            session.isLogged = true;
+            return true;
+        }
+        return false;
+    }
+    setSessionTransport(sessionId, transport) {
+        const session = this._sessions.get(sessionId);
+        if (session) {
+            session.transport = transport;
+        }
+    }
+    mapSessionToUser(sessionId, userKey) {
+        const session = this._sessions.get(sessionId);
+        if (session) {
+            session.userKey = userKey;
+            log_1.default.info('session_mapping.set', { sessionId, userKey });
+        }
+    }
+    deleteSession(sessionId) {
+        if (this._deletingSessions.has(sessionId)) {
+            return;
+        }
+        this._deletingSessions.add(sessionId);
+        const session = this._sessions.get(sessionId);
+        this._sessions.delete(sessionId);
+        if (session?.transport) {
+            try {
+                session.transport.close();
+            }
+            catch (err) {
+                log_1.default.warn('transport.close.failed', { sessionId, error: String(err) });
+            }
+        }
+        this._deletingSessions.delete(sessionId);
+    }
+    getAllSessions() {
+        return Array.from(this._sessions.values());
+    }
+    getSessionsForUser(userKey) {
+        return Array.from(this._sessions.values()).filter((s) => s.userKey === userKey);
+    }
+    async getTokensForSession(sessionId) {
+        const session = this._sessions.get(sessionId);
+        if (!session?.userKey) {
+            return null;
+        }
+        return this.getTokensForUser(session.userKey);
+    }
+    async getTokensForUser(userKey) {
+        return this._userTokens.get(userKey) || null;
+    }
+    async setTokensForUser(userKey, tokens) {
+        this._userTokens.set(userKey, tokens);
+    }
+    async deleteTokensForUser(userKey) {
+        this._userTokens.delete(userKey);
+    }
+    createOAuthState(userKey) {
+        const state = this._generateState();
+        const stateInfo = {
+            userKey,
+            createdAt: Date.now(),
+            expiresAt: Date.now() + 10 * 60 * 1000,
+        };
+        this._oauthStates.set(state, stateInfo);
+        return state;
+    }
+    validateOAuthState(state) {
+        const stateInfo = this._oauthStates.get(state);
+        if (!stateInfo) {
+            return null;
+        }
+        if (Date.now() > stateInfo.expiresAt) {
+            this._oauthStates.delete(state);
+            return null;
+        }
+        this._oauthStates.delete(state);
+        return { userKey: stateInfo.userKey };
+    }
+    validateAndConsumeOAuthState(state) {
+        const result = this.validateOAuthState(state);
+        return result?.userKey;
+    }
+    setSessionUserKey(sessionId, userKey) {
+        const session = this._sessions.get(sessionId);
+        if (session) {
+            session.userKey = userKey;
+            log_1.default.info('session_mapping.set', { sessionId, userKey });
+        }
+    }
+    cleanupExpiredOAuthStates() {
+        const now = Date.now();
+        for (const [state, stateInfo] of this._oauthStates.entries()) {
+            if (now > stateInfo.expiresAt) {
+                this._oauthStates.delete(state);
+            }
+        }
+    }
+    async getEffectiveTokens(sessionId, userKey) {
+        if (userKey) {
+            return this.getTokensForUser(userKey);
+        }
+        if (sessionId) {
+            return this.getTokensForSession(sessionId);
+        }
+        return null;
+    }
+    async createSessionWithUser(sessionId, userKey, remoteIp) {
+        const session = this.createSession(sessionId, userKey, remoteIp);
+        return session;
+    }
+    mapAllSessionsToUser(userKey) {
+        const sessionIds = [];
+        for (const [sessionId, session] of this._sessions.entries()) {
+            if (session.transport) {
+                session.userKey = userKey;
+                sessionIds.push(sessionId);
+            }
+        }
+        log_1.default.info('mapping_all_sessions', {
+            userKey,
+            sessionCount: sessionIds.length,
+            sessionIds,
+        });
+    }
+    getStats() {
+        return {
+            sessionsCount: this._sessions.size,
+            tokensCount: this._userTokens.size,
+            oauthStatesCount: this._oauthStates.size,
+        };
+    }
+}
+exports.SessionContext = SessionContext;
+//# sourceMappingURL=session-context.js.map

package/dist/services/session-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-context.js","sourceRoot":"","sources":["../../src/services/session-context.ts"],"names":[],"mappings":";;;;;;AAEA,iDAAyB;AAuBzB,MAAa,cAAc;IAClB,MAAM,CAAC,SAAS,CAA6B;IACpC,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC3C,WAAW,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC5C,YAAY,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC7C,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAEhD,MAAM,KAAK,QAAQ;QACzB,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC;YAC/B,cAAc,CAAC,SAAS,GAAG,IAAI,cAAc,EAAE,CAAC;QACjD,CAAC;QACD,OAAO,cAAc,CAAC,SAAS,CAAC;IACjC,CAAC;IAEO,cAAc;QACrB,OAAO,CACN,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;YAC3C,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAC3C,CAAC;IACH,CAAC;IAEM,aAAa,CAAC,SAAiB,EAAE,OAAgB,EAAE,QAAiB;QAC1E,MAAM,OAAO,GAAgB;YAC5B,EAAE,EAAE,SAAS;YACb,QAAQ,EAAE,KAAK;YACf,SAAS,EAAE,IAAI,IAAI,EAAE;SACrB,CAAC;QACF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;QAC3B,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACvC,OAAO,OAAO,CAAC;IAChB,CAAC;IAEM,UAAU,CAAC,SAAiB;QAClC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAEM,UAAU,CAAC,SAAiB;QAClC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAEM,mBAAmB,CAAC,SAAiB;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;YACxB,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAEM,mBAAmB,CAAC,SAAiB,EAAE,SAAwC;QACrF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;QAC/B,CAAC;IACF,CAAC;IAEM,gBAAgB,CAAC,SAAiB,EAAE,OAAe;QACzD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;YAC1B,aAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC;IACF,CAAC;IAEM,aAAa,CAAC,SAAiB;QACrC,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3C,OAAO;QACR,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;YACxB,IAAI,CAAC;gBACJ,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YAC3B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,aAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACvE,CAAC;QACF,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC1C,CAAC;IAEM,cAAc;QACpB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;IAEM,kBAAkB,CAAC,OAAe;QACxC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;IACjF,CAAC;IAEM,KAAK,CAAC,mBAAmB,CAAC,SAAiB;QACjD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAEM,KAAK,CAAC,gBAAgB,CAAC,OAAe;QAC5C,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;IAC9C,CAAC;IAEM,KAAK,CAAC,gBAAgB,CAAC,OAAe,EAAE,MAAkB;QAChE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAEM,KAAK,CAAC,mBAAmB,CAAC,OAAe;QAC/C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAEM,gBAAgB,CAAC,OAAe;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACpC,MAAM,SAAS,GAAe;YAC7B,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;SACtC,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACxC,OAAO,KAAK,CAAC;IACd,CAAC;IAEM,kBAAkB,CAAC,KAAa;QAGtC,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC;QACb,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChC,OAAO,IAAI,CAAC;QACb,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;IACvC,CAAC;IAEM,4BAA4B,CAAC,KAAa;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC9C,OAAO,MAAM,EAAE,OAAO,CAAC;IACxB,CAAC;IAEM,iBAAiB,CAAC,SAAiB,EAAE,OAAe;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;YAC1B,aAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC;IACF,CAAC;IAEM,yBAAyB;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;YAC9D,IAAI,GAAG,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;gBAC/B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;QACF,CAAC;IACF,CAAC;IAEM,KAAK,CAAC,kBAAkB,CAC9B,SAAkB,EAClB,OAAgB;QAEhB,IAAI,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,SAAS,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;IAEM,KAAK,CAAC,qBAAqB,CACjC,SAAiB,EACjB,OAAe,EACf,QAAiB;QAEjB,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACjE,OAAO,OAAO,CAAC;IAChB,CAAC;IAEM,oBAAoB,CAAC,OAAe;QAC1C,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;YAC7D,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACvB,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;gBAC1B,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC5B,CAAC;QACF,CAAC;QACD,aAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE;YAChC,OAAO;YACP,YAAY,EAAE,UAAU,CAAC,MAAM;YAC/B,UAAU;SACV,CAAC,CAAC;IACJ,CAAC;IAEM,QAAQ;QACd,OAAO;YACN,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI;YAClC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI;YAClC,gBAAgB,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI;SACxC,CAAC;IACH,CAAC;CACD;AA9MD,wCA8MC"}

package/dist/services/token-refresh-scheduler.d.ts

@@ -0,0 +1,16 @@
+export type TokenRefreshCallback = (userKey: string) => Promise<void>;
+export declare class TokenRefreshScheduler {
+    private readonly _refreshIntervals;
+    private readonly _sessionContext;
+    private _refreshCallback?;
+    private _refreshUserTokens;
+    setRefreshCallback(callback: TokenRefreshCallback): void;
+    scheduleRefresh(userKey: string): void;
+    cancelRefresh(userKey: string): void;
+    cancelAllRefresh(): void;
+    getStats(): {
+        activeRefreshCount: number;
+        userKeys: string[];
+    };
+}
+//# sourceMappingURL=token-refresh-scheduler.d.ts.map

package/dist/services/token-refresh-scheduler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-refresh-scheduler.d.ts","sourceRoot":"","sources":["../../src/services/token-refresh-scheduler.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAEtE,qBAAa,qBAAqB;IACjC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAqC;IACvE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA2B;IAC3D,OAAO,CAAC,gBAAgB,CAAC,CAAuB;YAElC,kBAAkB;IAgBzB,kBAAkB,CAAC,QAAQ,EAAE,oBAAoB,GAAG,IAAI;IAIxD,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAiBtC,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IASpC,gBAAgB,IAAI,IAAI;IAMxB,QAAQ,IAAI;QAAE,kBAAkB,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE;CAMrE"}

package/dist/services/token-refresh-scheduler.js

@@ -0,0 +1,66 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenRefreshScheduler = void 0;
+const log_1 = __importDefault(require("../log"));
+const services_1 = require("../services");
+class TokenRefreshScheduler {
+    _refreshIntervals = new Map();
+    _sessionContext = services_1.SessionContext.instance;
+    _refreshCallback;
+    async _refreshUserTokens(userKey) {
+        if (!this._refreshCallback) {
+            throw new Error('no_refresh_callback');
+        }
+        const tokens = await this._sessionContext.getTokensForUser(userKey);
+        if (!tokens?.refreshToken) {
+            throw new Error('no_refresh_token');
+        }
+        const sessions = this._sessionContext.getSessionsForUser(userKey);
+        if (sessions.length === 0) {
+            throw new Error('no_active_sessions');
+        }
+        await this._refreshCallback(userKey);
+        log_1.default.info('background_token_refresh_success', { userKey, sessionsCount: sessions.length });
+    }
+    setRefreshCallback(callback) {
+        this._refreshCallback = callback;
+    }
+    scheduleRefresh(userKey) {
+        this.cancelRefresh(userKey);
+        const refreshInterval = setInterval(async () => {
+            try {
+                await this._refreshUserTokens(userKey);
+            }
+            catch (err) {
+                log_1.default.warn('background_token_refresh_failed', { userKey, error: String(err) });
+                this.cancelRefresh(userKey);
+            }
+        }, 15 * 60 * 1000);
+        this._refreshIntervals.set(userKey, refreshInterval);
+        log_1.default.info('token_refresh_scheduled', { userKey });
+    }
+    cancelRefresh(userKey) {
+        const interval = this._refreshIntervals.get(userKey);
+        if (interval) {
+            clearInterval(interval);
+            this._refreshIntervals.delete(userKey);
+            log_1.default.info('token_refresh_cancelled', { userKey });
+        }
+    }
+    cancelAllRefresh() {
+        for (const userKey of this._refreshIntervals.keys()) {
+            this.cancelRefresh(userKey);
+        }
+    }
+    getStats() {
+        return {
+            activeRefreshCount: this._refreshIntervals.size,
+            userKeys: Array.from(this._refreshIntervals.keys()),
+        };
+    }
+}
+exports.TokenRefreshScheduler = TokenRefreshScheduler;
+//# sourceMappingURL=token-refresh-scheduler.js.map

package/dist/services/token-refresh-scheduler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-refresh-scheduler.js","sourceRoot":"","sources":["../../src/services/token-refresh-scheduler.ts"],"names":[],"mappings":";;;;;;AAAA,iDAAyB;AACzB,0CAA6C;AAG7C,MAAa,qBAAqB;IAChB,iBAAiB,GAAG,IAAI,GAAG,EAA0B,CAAC;IACtD,eAAe,GAAG,yBAAc,CAAC,QAAQ,CAAC;IACnD,gBAAgB,CAAwB;IAExC,KAAK,CAAC,kBAAkB,CAAC,OAAe;QAC/C,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAClE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACrC,aAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3F,CAAC;IAEM,kBAAkB,CAAC,QAA8B;QACvD,IAAI,CAAC,gBAAgB,GAAG,QAAQ,CAAC;IAClC,CAAC;IAEM,eAAe,CAAC,OAAe;QACrC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,eAAe,GAAG,WAAW,CAClC,KAAK,IAAI,EAAE;YACV,IAAI,CAAC;gBACJ,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACxC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,aAAG,CAAC,IAAI,CAAC,iCAAiC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC7E,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAC7B,CAAC;QACF,CAAC,EACD,EAAE,GAAG,EAAE,GAAG,IAAI,CACd,CAAC;QACF,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QACrD,aAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAClD,CAAC;IAEM,aAAa,CAAC,OAAe;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,QAAQ,EAAE,CAAC;YACd,aAAa,CAAC,QAAQ,CAAC,CAAC;YACxB,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACvC,aAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAClD,CAAC;IACF,CAAC;IAEM,gBAAgB;QACtB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,CAAC;YACrD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;IACF,CAAC;IAEM,QAAQ;QACd,OAAO;YACN,kBAAkB,EAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI;YAC/C,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;SACnD,CAAC;IACH,CAAC;CACD;AA/DD,sDA+DC"}

package/dist/types/index.d.ts

@@ -0,0 +1,2 @@
+export * from './network';
+//# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC"}

package/dist/types/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./network"), exports);
+//# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4CAA0B"}

package/dist/types/network.d.ts

@@ -0,0 +1,7 @@
+export type CookieKV = {
+    name: string;
+    value: string;
+};
+export declare const JSON_ACCEPT = "application/json";
+export declare const XML_ACCEPT = "application/xml";
+//# sourceMappingURL=network.d.ts.map

package/dist/types/network.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.d.ts","sourceRoot":"","sources":["../../src/types/network.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAAG;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,eAAO,MAAM,WAAW,qBAAqB,CAAC;AAC9C,eAAO,MAAM,UAAU,oBAAoB,CAAC"}

package/dist/types/network.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.XML_ACCEPT = exports.JSON_ACCEPT = void 0;
+exports.JSON_ACCEPT = 'application/json';
+exports.XML_ACCEPT = 'application/xml';
+//# sourceMappingURL=network.js.map

package/dist/types/network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.js","sourceRoot":"","sources":["../../src/types/network.ts"],"names":[],"mappings":";;;AAKa,QAAA,WAAW,GAAG,kBAAkB,CAAC;AACjC,QAAA,UAAU,GAAG,iBAAiB,CAAC"}

package/dist/utils/context.d.ts

@@ -0,0 +1,10 @@
+export type RequestContext = {
+    userKey?: string | undefined;
+    sessionId?: string | undefined;
+};
+export declare function runWithContext<T>(ctx: Partial<RequestContext>, fn: () => Promise<T>): Promise<T>;
+export declare function getRequestContext(): RequestContext | undefined;
+export declare function getUserKey(): string | undefined;
+export declare function getSessionId(): string | undefined;
+export declare function getEffectiveUserKey(): string | undefined;
+//# sourceMappingURL=context.d.ts.map

package/dist/utils/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/utils/context.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,cAAc,GAAG;IAC5B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B,CAAC;AAMF,wBAAgB,cAAc,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAShG;AAED,wBAAgB,iBAAiB,IAAI,cAAc,GAAG,SAAS,CAE9D;AAED,wBAAgB,UAAU,IAAI,MAAM,GAAG,SAAS,CAE/C;AAED,wBAAgB,YAAY,IAAI,MAAM,GAAG,SAAS,CAEjD;AAED,wBAAgB,mBAAmB,IAAI,MAAM,GAAG,SAAS,CAYxD"}

package/dist/utils/context.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runWithContext = runWithContext;
+exports.getRequestContext = getRequestContext;
+exports.getUserKey = getUserKey;
+exports.getSessionId = getSessionId;
+exports.getEffectiveUserKey = getEffectiveUserKey;
+const node_async_hooks_1 = require("node:async_hooks");
+const services_1 = require("../services");
+const als = new node_async_hooks_1.AsyncLocalStorage();
+const sessionContext = services_1.SessionContext.instance;
+function runWithContext(ctx, fn) {
+    const store = {};
+    if (typeof ctx.userKey === 'string') {
+        store.userKey = ctx.userKey;
+    }
+    if (typeof ctx.sessionId === 'string') {
+        store.sessionId = ctx.sessionId;
+    }
+    return als.run(store, fn);
+}
+function getRequestContext() {
+    return als.getStore();
+}
+function getUserKey() {
+    return als.getStore()?.userKey;
+}
+function getSessionId() {
+    return als.getStore()?.sessionId;
+}
+function getEffectiveUserKey() {
+    const ctx = als.getStore();
+    if (ctx?.userKey) {
+        return ctx.userKey;
+    }
+    if (ctx?.sessionId) {
+        const session = sessionContext.getSession(ctx.sessionId);
+        if (session?.userKey) {
+            return session.userKey;
+        }
+    }
+    return ctx?.sessionId;
+}
+//# sourceMappingURL=context.js.map

package/dist/utils/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/utils/context.ts"],"names":[],"mappings":";;AAaA,wCASC;AAED,8CAEC;AAED,gCAEC;AAED,oCAEC;AAED,kDAYC;AAhDD,uDAAqD;AAErD,0CAA6C;AAO7C,MAAM,GAAG,GAAG,IAAI,oCAAiB,EAAkB,CAAC;AAEpD,MAAM,cAAc,GAAG,yBAAc,CAAC,QAAQ,CAAC;AAE/C,SAAgB,cAAc,CAAI,GAA4B,EAAE,EAAoB;IACnF,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACrC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC7B,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACvC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;IACjC,CAAC;IACD,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED,SAAgB,iBAAiB;IAChC,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACvB,CAAC;AAED,SAAgB,UAAU;IACzB,OAAO,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC;AAChC,CAAC;AAED,SAAgB,YAAY;IAC3B,OAAO,GAAG,CAAC,QAAQ,EAAE,EAAE,SAAS,CAAC;AAClC,CAAC;AAED,SAAgB,mBAAmB;IAClC,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC3B,IAAI,GAAG,EAAE,OAAO,EAAE,CAAC;QAClB,OAAO,GAAG,CAAC,OAAO,CAAC;IACpB,CAAC;IACD,IAAI,GAAG,EAAE,SAAS,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;YACtB,OAAO,OAAO,CAAC,OAAO,CAAC;QACxB,CAAC;IACF,CAAC;IACD,OAAO,GAAG,EAAE,SAAS,CAAC;AACvB,CAAC"}

package/dist/utils/env.d.ts

@@ -0,0 +1,3 @@
+export declare function env(name: string): string | undefined;
+export declare function envBool(name: string, def: boolean): boolean;
+//# sourceMappingURL=env.d.ts.map

package/dist/utils/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/utils/env.ts"],"names":[],"mappings":"AAAA,wBAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGpD;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAM3D"}

package/dist/utils/env.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.env = env;
+exports.envBool = envBool;
+function env(name) {
+    const v = process.env[name];
+    return (v && v.trim()) || undefined;
+}
+function envBool(name, def) {
+    const v = env(name);
+    if (v == null) {
+        return def;
+    }
+    return v.toLowerCase() === 'true' || v === '1';
+}
+//# sourceMappingURL=env.js.map

package/dist/utils/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/utils/env.ts"],"names":[],"mappings":";;AAAA,kBAGC;AAED,0BAMC;AAXD,SAAgB,GAAG,CAAC,IAAY;IAC/B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,SAAS,CAAC;AACrC,CAAC;AAED,SAAgB,OAAO,CAAC,IAAY,EAAE,GAAY;IACjD,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QACf,OAAO,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,IAAI,CAAC,KAAK,GAAG,CAAC;AAChD,CAAC"}

package/dist/utils/index.d.ts

@@ -0,0 +1,6 @@
+export * from './env';
+export * from './mcp';
+export * from './network';
+export * from './pkce';
+export * from './context';
+//# sourceMappingURL=index.d.ts.map

package/dist/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,OAAO,CAAC;AACtB,cAAc,OAAO,CAAC;AACtB,cAAc,WAAW,CAAC;AAC1B,cAAc,QAAQ,CAAC;AACvB,cAAc,WAAW,CAAC"}

package/dist/utils/index.js

@@ -0,0 +1,22 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./env"), exports);
+__exportStar(require("./mcp"), exports);
+__exportStar(require("./network"), exports);
+__exportStar(require("./pkce"), exports);
+__exportStar(require("./context"), exports);
+//# sourceMappingURL=index.js.map

package/dist/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wCAAsB;AACtB,wCAAsB;AACtB,4CAA0B;AAC1B,yCAAuB;AACvB,4CAA0B"}

package/dist/utils/mcp.d.ts

@@ -0,0 +1,3 @@
+import { z } from 'zod';
+export declare function withValidation<T extends z.ZodTypeAny>(schema: T, handler: (args: z.infer<T>) => Promise<any>): (payload: unknown) => Promise<any>;
+//# sourceMappingURL=mcp.d.ts.map

package/dist/utils/mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/utils/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,wBAAgB,cAAc,CAAC,CAAC,SAAS,CAAC,CAAC,UAAU,EACpD,MAAM,EAAE,CAAC,EACT,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC,IAE7B,SAAS,OAAO,kBAC9B"}

package/dist/utils/mcp.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.withValidation = withValidation;
+function withValidation(schema, handler) {
+    return async (payload) => handler(schema.parse(payload));
+}
+//# sourceMappingURL=mcp.js.map

package/dist/utils/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/utils/mcp.ts"],"names":[],"mappings":";;AAEA,wCAKC;AALD,SAAgB,cAAc,CAC7B,MAAS,EACT,OAA2C;IAE3C,OAAO,KAAK,EAAE,OAAgB,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;AACnE,CAAC"}

package/dist/utils/network.d.ts

@@ -0,0 +1,7 @@
+import { CookieKV } from '../types';
+import type express from 'express';
+export declare function getClientIp(req: express.Request): string | undefined;
+export declare function parseSetCookie(setCookie: string[]): CookieKV[];
+export declare function getUserKeyFromRequest(req: express.Request): string | undefined;
+export declare function getSessionIdFromRequest(req: any): any;
+//# sourceMappingURL=network.d.ts.map

package/dist/utils/network.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.d.ts","sourceRoot":"","sources":["../../src/utils/network.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEpC,OAAO,KAAK,OAAO,MAAM,SAAS,CAAC;AAEnC,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,GAAG,MAAM,GAAG,SAAS,CAkBpE;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,CAa9D;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,GAAG,MAAM,GAAG,SAAS,CAc9E;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,GAAG,OAS/C"}

package/dist/utils/network.js

@@ -0,0 +1,63 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getClientIp = getClientIp;
+exports.parseSetCookie = parseSetCookie;
+exports.getUserKeyFromRequest = getUserKeyFromRequest;
+exports.getSessionIdFromRequest = getSessionIdFromRequest;
+function getClientIp(req) {
+    const forwarded = req.headers['x-forwarded-for'];
+    if (forwarded) {
+        if (Array.isArray(forwarded)) {
+            return forwarded[0];
+        }
+        const parts = forwarded.split(',').map((s) => s.trim());
+        if (parts.length) {
+            return parts[0];
+        }
+    }
+    if (req.ip) {
+        return req.ip;
+    }
+    if (req.socket && req.socket.remoteAddress) {
+        return req.socket.remoteAddress;
+    }
+    return undefined;
+}
+function parseSetCookie(setCookie) {
+    const out = [];
+    for (const raw of setCookie || []) {
+        const first = raw.split(';')[0]?.trim();
+        if (!first) {
+            continue;
+        }
+        const idx = first.indexOf('=');
+        if (idx > 0) {
+            out.push({ name: first.slice(0, idx), value: first.slice(idx + 1) });
+        }
+    }
+    return out;
+}
+function getUserKeyFromRequest(req) {
+    const fromHeader = req.headers['x-user-key'];
+    if (typeof fromHeader === 'string' && fromHeader) {
+        return fromHeader;
+    }
+    const fromQuery = req.query?.userKey;
+    if (typeof fromQuery === 'string' && fromQuery) {
+        return fromQuery;
+    }
+    const sessionId = getSessionIdFromRequest(req);
+    if (sessionId) {
+        return `user_${sessionId}`;
+    }
+    return undefined;
+}
+function getSessionIdFromRequest(req) {
+    return (req.headers['mcp-session-id'] ||
+        req.query?.session_id ||
+        req.headers['x-session-id'] ||
+        req.body?.params?.session_id ||
+        req.body?.session_id ||
+        null);
+}
+//# sourceMappingURL=network.js.map

package/dist/utils/network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.js","sourceRoot":"","sources":["../../src/utils/network.ts"],"names":[],"mappings":";;AAIA,kCAkBC;AAED,wCAaC;AAED,sDAcC;AAED,0DASC;AA5DD,SAAgB,WAAW,CAAC,GAAoB;IAC/C,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAkC,CAAC;IAClF,IAAI,SAAS,EAAE,CAAC;QACf,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;IACF,CAAC;IACD,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,GAAG,CAAC,EAAE,CAAC;IACf,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC5C,OAAO,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;IACjC,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAgB,cAAc,CAAC,SAAmB;IACjD,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,SAAS,IAAI,EAAE,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,SAAS;QACV,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,SAAgB,qBAAqB,CAAC,GAAoB;IACzD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC7C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClD,OAAO,UAAU,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GAAI,GAAG,CAAC,KAAa,EAAE,OAAO,CAAC;IAC9C,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,EAAE,CAAC;QAChD,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,SAAS,GAAG,uBAAuB,CAAC,GAAU,CAAC,CAAC;IACtD,IAAI,SAAS,EAAE,CAAC;QACf,OAAO,QAAQ,SAAS,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAgB,uBAAuB,CAAC,GAAQ;IAC/C,OAAO,CACN,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAC7B,GAAG,CAAC,KAAK,EAAE,UAAU;QACrB,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC;QAC3B,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU;QAC5B,GAAG,CAAC,IAAI,EAAE,UAAU;QACpB,IAAI,CACJ,CAAC;AACH,CAAC"}

package/dist/utils/pkce.d.ts

@@ -0,0 +1,7 @@
+export declare function generateCodeVerifier(length?: number): string;
+export declare function challengeS256(verifier: string): Promise<string>;
+export declare function generatePkcePair(): Promise<{
+    readonly verifier: string;
+    readonly challenge: string;
+}>;
+//# sourceMappingURL=pkce.d.ts.map

package/dist/utils/pkce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.d.ts","sourceRoot":"","sources":["../../src/utils/pkce.ts"],"names":[],"mappings":"AASA,wBAAgB,oBAAoB,CAAC,MAAM,GAAE,MAAW,GAAG,MAAM,CAYhE;AAED,wBAAsB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CASrE;AAED,wBAAsB,gBAAgB;;;GAIrC"}

package/dist/utils/pkce.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateCodeVerifier = generateCodeVerifier;
+exports.challengeS256 = challengeS256;
+exports.generatePkcePair = generatePkcePair;
+function base64UrlEncode(bytes) {
+    let bin = '';
+    for (let i = 0; i < bytes.length; i++) {
+        bin += String.fromCharCode(bytes[i]);
+    }
+    const b64 = Buffer.from(bin, 'binary').toString('base64');
+    return b64.replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/g, '');
+}
+function generateCodeVerifier(length = 32) {
+    const arr = new Uint8Array(length);
+    if (typeof crypto !== 'undefined' && typeof crypto.getRandomValues === 'function') {
+        crypto.getRandomValues(arr);
+    }
+    else {
+        const { randomBytes } = require('node:crypto');
+        const rb = randomBytes(length);
+        for (let i = 0; i < length; i++) {
+            arr[i] = rb[i];
+        }
+    }
+    return base64UrlEncode(arr);
+}
+async function challengeS256(verifier) {
+    const data = new TextEncoder().encode(verifier);
+    if (typeof crypto !== 'undefined' && crypto.subtle?.digest) {
+        const hash = await crypto.subtle.digest('SHA-256', data);
+        return base64UrlEncode(new Uint8Array(hash));
+    }
+    const { createHash } = require('node:crypto');
+    const hash = createHash('sha256').update(Buffer.from(data)).digest();
+    return base64UrlEncode(new Uint8Array(hash));
+}
+async function generatePkcePair() {
+    const verifier = generateCodeVerifier();
+    const challenge = await challengeS256(verifier);
+    return { verifier, challenge };
+}
+//# sourceMappingURL=pkce.js.map

package/dist/utils/pkce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.js","sourceRoot":"","sources":["../../src/utils/pkce.ts"],"names":[],"mappings":";;AASA,oDAYC;AAED,sCASC;AAED,4CAIC;AAtCD,SAAS,eAAe,CAAC,KAAiB;IACzC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1D,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,SAAgB,oBAAoB,CAAC,SAAiB,EAAE;IACvD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,OAAQ,MAAc,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;QAC3F,MAAc,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;SAAM,CAAC;QACP,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;QAC/C,MAAM,EAAE,GAAW,WAAW,CAAC,MAAM,CAAC,CAAC;QACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACjC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAE,CAAC;QACjB,CAAC;IACF,CAAC;IACD,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAEM,KAAK,UAAU,aAAa,CAAC,QAAgB;IACnD,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,OAAO,MAAM,KAAK,WAAW,IAAK,MAAc,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QACrE,MAAM,IAAI,GAAG,MAAO,MAAc,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAClE,OAAO,eAAe,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACrE,OAAO,eAAe,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9C,CAAC;AAEM,KAAK,UAAU,gBAAgB;IACrC,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;IACxC,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;IAChD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAW,CAAC;AACzC,CAAC"}