All of the mid-session and step-up auth work

core/auth/index.ts

@@ -24,6 +24,12 @@ export type { BuildOAuthConnectionStateParams } from "./connection-state.js";
 
 export { ensureCimdClientRegistration } from "./cimd.js";
 
+export { mcpAuth, type McpAuthOptions, type McpAuthResult } from "./mcpAuth.js";
+export {
+  computeScopeUnion,
+  isStrictScopeSuperset,
+} from "./scopes.js";
+
 // Storage
 export type { OAuthStorage, IdpSessionState, SaveClientInformationOptions } from "./storage.js";
 export { getServerSpecificKey, OAUTH_STORAGE_KEYS } from "./storage.js";
@@ -49,9 +55,50 @@ export {
   generateOAuthState,
   parseOAuthState,
   generateOAuthErrorDescription,
+  formatOAuthFailureDetail,
   isUnauthorizedError,
 } from "./utils.js";
 
+export type {
+  AuthChallenge,
+  AuthChallengeReason,
+  AuthChallengeOutcome,
+  HandleAuthChallengeOptions,
+  ParseAuthChallengeContext,
+  WwwAuthenticateBearerParams,
+} from "./challenge.js";
+export {
+  AuthChallengeError,
+  AuthRecoveryRequiredError,
+  parseAuthChallengeFromError,
+  parseAuthChallengeFromResponse,
+  parseScopeString,
+  parseWwwAuthenticateBearer,
+  unionAuthorizationScopes,
+  isAuthChallengeError,
+  isConnectAuthRecoveryError,
+  EMA_STEP_UP_PENDING_URL,
+} from "./challenge.js";
+
+export {
+  isStandardOAuthStepUp,
+  isEmaStepUp,
+  isStepUpConfirmation,
+  stepUpConfirmMessage,
+  stepUpFollowUpMessage,
+  stepUpModalTitle,
+  stepUpAuthorizeActionLabel,
+  emaStepUpInProgressMessage,
+  emaStepUpSuccessMessage,
+  emaStepUpFailureMessage,
+  stepUpAdditionalScopes,
+  stepUpInsufficientScopeMessage,
+  oauthPreRedirectToastCopy,
+  isReAuthBannerReason,
+  reAuthBannerMessage,
+  type OAuthInteractiveAuthKind,
+} from "./oauthUx.js";
+
 // Discovery
 export { discoverScopes } from "./discovery.js";