/**
 * @sh-mcp/shared — public API
 *
 * Every package that defines tools imports ONLY from this barrel.
 * Do NOT import from sub-paths like '@sh-mcp/shared/src/auth'.
 */

// Types
export type { Scope, AuthContext, ToolDef, JSONSchema } from './types.js';

// Registry
export { defineTool, ToolRegistry } from './registry.js';

// Auth interface and scope guard
export { requireScope, ScopeError } from './auth.js';
export type { AuthProvider } from './auth.js';

// Concrete Cognito auth provider (the 0a-unblocked implementation)
export {
  CognitoAuthProvider,
  AuthError,
  cognitoIssuer,
  cognitoJwks,
  extractScopes,
  extractBearerToken,
} from './cognito-auth.js';
export type { AuthErrorCode, CognitoAuthConfig, DenyListChecker } from './cognito-auth.js';

// Redaction
export { redact, maskValue, REDACTED } from './redact.js';

// OpenAPI generation
export { generateOpenAPIPaths } from './openapi.js';
export type {
  OASPathsResult,
  OASPathItem,
  OASOperation,
  OASRequestBody,
  OASResponse,
  OASMediaType,
} from './openapi.js';