@almadar/std 3.2.3 → 3.3.5

package/behaviors/exports/atoms/std-service-oauth.orb

@@ -0,0 +1,764 @@
+{
+  "name": "ServiceOauthOrbital",
+  "orbitals": [
+    {
+      "name": "ServiceOauthOrbital",
+      "entity": {
+        "name": "ServiceOauth",
+        "persistence": "runtime",
+        "fields": [
+          {
+            "name": "id",
+            "type": "string",
+            "required": true
+          },
+          {
+            "name": "provider",
+            "type": "string",
+            "default": "google"
+          },
+          {
+            "name": "authUrl",
+            "type": "string",
+            "default": ""
+          },
+          {
+            "name": "accessToken",
+            "type": "string",
+            "default": ""
+          },
+          {
+            "name": "refreshToken",
+            "type": "string",
+            "default": ""
+          },
+          {
+            "name": "authStatus",
+            "type": "string",
+            "default": "unauthenticated"
+          },
+          {
+            "name": "error",
+            "type": "string",
+            "default": ""
+          },
+          {
+            "name": "name",
+            "type": "string"
+          },
+          {
+            "name": "description",
+            "type": "string"
+          },
+          {
+            "name": "status",
+            "type": "string",
+            "default": "active",
+            "values": [
+              "active",
+              "inactive",
+              "pending"
+            ]
+          },
+          {
+            "name": "createdAt",
+            "type": "string"
+          }
+        ]
+      },
+      "traits": [
+        {
+          "name": "ServiceOauthOauth",
+          "linkedEntity": "ServiceOauth",
+          "category": "interaction",
+          "stateMachine": {
+            "states": [
+              {
+                "name": "unauthenticated",
+                "isInitial": true
+              },
+              {
+                "name": "authorizing"
+              },
+              {
+                "name": "authenticated"
+              },
+              {
+                "name": "refreshing"
+              },
+              {
+                "name": "error"
+              }
+            ],
+            "events": [
+              {
+                "key": "INIT",
+                "name": "Initialize"
+              },
+              {
+                "key": "LOGIN",
+                "name": "Login"
+              },
+              {
+                "key": "AUTH_URL_RECEIVED",
+                "name": "Auth URL Received",
+                "payload": [
+                  {
+                    "name": "authUrl",
+                    "type": "string",
+                    "required": true
+                  }
+                ]
+              },
+              {
+                "key": "CALLBACK",
+                "name": "Authorization Callback",
+                "payload": [
+                  {
+                    "name": "code",
+                    "type": "string",
+                    "required": true
+                  }
+                ]
+              },
+              {
+                "key": "TOKEN_RECEIVED",
+                "name": "Token Received",
+                "payload": [
+                  {
+                    "name": "accessToken",
+                    "type": "string",
+                    "required": true
+                  },
+                  {
+                    "name": "refreshToken",
+                    "type": "string",
+                    "required": true
+                  }
+                ]
+              },
+              {
+                "key": "REFRESH",
+                "name": "Refresh Token"
+              },
+              {
+                "key": "TOKEN_REFRESHED",
+                "name": "Token Refreshed",
+                "payload": [
+                  {
+                    "name": "accessToken",
+                    "type": "string",
+                    "required": true
+                  }
+                ]
+              },
+              {
+                "key": "LOGOUT",
+                "name": "Logout"
+              },
+              {
+                "key": "FAILED",
+                "name": "Failed",
+                "payload": [
+                  {
+                    "name": "error",
+                    "type": "string",
+                    "required": true
+                  }
+                ]
+              },
+              {
+                "key": "RETRY",
+                "name": "Retry"
+              }
+            ],
+            "transitions": [
+              {
+                "from": "unauthenticated",
+                "to": "unauthenticated",
+                "event": "INIT",
+                "effects": [
+                  [
+                    "fetch",
+                    "ServiceOauth"
+                  ],
+                  [
+                    "render-ui",
+                    "main",
+                    {
+                      "type": "stack",
+                      "direction": "vertical",
+                      "gap": "lg",
+                      "align": "center",
+                      "children": [
+                        {
+                          "type": "stack",
+                          "direction": "horizontal",
+                          "gap": "md",
+                          "align": "center",
+                          "children": [
+                            {
+                              "type": "icon",
+                              "name": "lock",
+                              "size": "lg"
+                            },
+                            {
+                              "type": "typography",
+                              "content": "Sign In",
+                              "variant": "h2"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "divider"
+                        },
+                        {
+                          "type": "select",
+                          "label": "Provider",
+                          "field": "provider",
+                          "bind": "@entity.provider",
+                          "options": [
+                            {
+                              "label": "Google",
+                              "value": "google"
+                            },
+                            {
+                              "label": "GitHub",
+                              "value": "github"
+                            },
+                            {
+                              "label": "Microsoft",
+                              "value": "microsoft"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "button",
+                          "label": "Login",
+                          "event": "LOGIN",
+                          "variant": "primary",
+                          "icon": "log-in"
+                        }
+                      ]
+                    }
+                  ]
+                ]
+              },
+              {
+                "from": "unauthenticated",
+                "to": "authorizing",
+                "event": "LOGIN",
+                "effects": [
+                  [
+                    "render-ui",
+                    "main",
+                    {
+                      "type": "loading-state",
+                      "title": "Authorizing...",
+                      "message": "Redirecting to provider for authorization."
+                    }
+                  ],
+                  [
+                    "call-service",
+                    "oauth",
+                    "authorize",
+                    {
+                      "provider": "@entity.provider",
+                      "scopes": [
+                        "openid",
+                        "email"
+                      ]
+                    }
+                  ]
+                ]
+              },
+              {
+                "from": "authorizing",
+                "to": "authorizing",
+                "event": "AUTH_URL_RECEIVED",
+                "effects": [
+                  [
+                    "set",
+                    "@entity.authUrl",
+                    "@payload.authUrl"
+                  ],
+                  [
+                    "render-ui",
+                    "main",
+                    {
+                      "type": "stack",
+                      "direction": "vertical",
+                      "gap": "lg",
+                      "align": "center",
+                      "children": [
+                        {
+                          "type": "icon",
+                          "name": "external-link",
+                          "size": "lg"
+                        },
+                        {
+                          "type": "typography",
+                          "content": "Authorization Required",
+                          "variant": "h2"
+                        },
+                        {
+                          "type": "typography",
+                          "content": "@entity.authUrl",
+                          "variant": "body",
+                          "color": "muted"
+                        },
+                        {
+                          "type": "input",
+                          "label": "Authorization Code",
+                          "field": "code",
+                          "placeholder": "Paste authorization code here"
+                        },
+                        {
+                          "type": "button",
+                          "label": "Submit",
+                          "event": "CALLBACK",
+                          "variant": "primary",
+                          "icon": "check"
+                        }
+                      ]
+                    }
+                  ]
+                ]
+              },
+              {
+                "from": "authorizing",
+                "to": "authenticated",
+                "event": "CALLBACK",
+                "effects": [
+                  [
+                    "call-service",
+                    "oauth",
+                    "token",
+                    {
+                      "code": "@payload.code"
+                    }
+                  ],
+                  [
+                    "render-ui",
+                    "main",
+                    {
+                      "type": "stack",
+                      "direction": "vertical",
+                      "gap": "lg",
+                      "align": "center",
+                      "children": [
+                        {
+                          "type": "icon",
+                          "name": "check-circle",
+                          "size": "lg"
+                        },
+                        {
+                          "type": "alert",
+                          "variant": "success",
+                          "message": "Authenticated successfully"
+                        },
+                        {
+                          "type": "stack",
+                          "direction": "horizontal",
+                          "gap": "sm",
+                          "justify": "center",
+                          "children": [
+                            {
+                              "type": "button",
+                              "label": "Refresh Token",
+                              "event": "REFRESH",
+                              "variant": "outline",
+                              "icon": "refresh-cw"
+                            },
+                            {
+                              "type": "button",
+                              "label": "Logout",
+                              "event": "LOGOUT",
+                              "variant": "ghost",
+                              "icon": "log-out"
+                            }
+                          ]
+                        }
+                      ]
+                    }
+                  ]
+                ]
+              },
+              {
+                "from": "authenticated",
+                "to": "authenticated",
+                "event": "TOKEN_RECEIVED",
+                "effects": [
+                  [
+                    "set",
+                    "@entity.accessToken",
+                    "@payload.accessToken"
+                  ],
+                  [
+                    "set",
+                    "@entity.refreshToken",
+                    "@payload.refreshToken"
+                  ],
+                  [
+                    "set",
+                    "@entity.authStatus",
+                    "authenticated"
+                  ],
+                  [
+                    "render-ui",
+                    "main",
+                    {
+                      "type": "stack",
+                      "direction": "vertical",
+                      "gap": "lg",
+                      "align": "center",
+                      "children": [
+                        {
+                          "type": "icon",
+                          "name": "check-circle",
+                          "size": "lg"
+                        },
+                        {
+                          "type": "alert",
+                          "variant": "success",
+                          "message": "Authenticated successfully"
+                        },
+                        {
+                          "type": "stack",
+                          "direction": "horizontal",
+                          "gap": "sm",
+                          "justify": "center",
+                          "children": [
+                            {
+                              "type": "button",
+                              "label": "Refresh Token",
+                              "event": "REFRESH",
+                              "variant": "outline",
+                              "icon": "refresh-cw"
+                            },
+                            {
+                              "type": "button",
+                              "label": "Logout",
+                              "event": "LOGOUT",
+                              "variant": "ghost",
+                              "icon": "log-out"
+                            }
+                          ]
+                        }
+                      ]
+                    }
+                  ]
+                ]
+              },
+              {
+                "from": "authenticated",
+                "to": "refreshing",
+                "event": "REFRESH",
+                "effects": [
+                  [
+                    "render-ui",
+                    "main",
+                    {
+                      "type": "loading-state",
+                      "title": "Refreshing token...",
+                      "message": "Obtaining a new access token."
+                    }
+                  ],
+                  [
+                    "call-service",
+                    "oauth",
+                    "refresh",
+                    {
+                      "refreshToken": "@entity.refreshToken"
+                    }
+                  ]
+                ]
+              },
+              {
+                "from": "refreshing",
+                "to": "authenticated",
+                "event": "TOKEN_REFRESHED",
+                "effects": [
+                  [
+                    "set",
+                    "@entity.accessToken",
+                    "@payload.accessToken"
+                  ],
+                  [
+                    "render-ui",
+                    "main",
+                    {
+                      "type": "stack",
+                      "direction": "vertical",
+                      "gap": "lg",
+                      "align": "center",
+                      "children": [
+                        {
+                          "type": "icon",
+                          "name": "check-circle",
+                          "size": "lg"
+                        },
+                        {
+                          "type": "alert",
+                          "variant": "success",
+                          "message": "Authenticated successfully"
+                        },
+                        {
+                          "type": "stack",
+                          "direction": "horizontal",
+                          "gap": "sm",
+                          "justify": "center",
+                          "children": [
+                            {
+                              "type": "button",
+                              "label": "Refresh Token",
+                              "event": "REFRESH",
+                              "variant": "outline",
+                              "icon": "refresh-cw"
+                            },
+                            {
+                              "type": "button",
+                              "label": "Logout",
+                              "event": "LOGOUT",
+                              "variant": "ghost",
+                              "icon": "log-out"
+                            }
+                          ]
+                        }
+                      ]
+                    }
+                  ]
+                ]
+              },
+              {
+                "from": "authenticated",
+                "to": "unauthenticated",
+                "event": "LOGOUT",
+                "effects": [
+                  [
+                    "set",
+                    "@entity.authStatus",
+                    "unauthenticated"
+                  ],
+                  [
+                    "render-ui",
+                    "main",
+                    {
+                      "type": "stack",
+                      "direction": "vertical",
+                      "gap": "lg",
+                      "align": "center",
+                      "children": [
+                        {
+                          "type": "stack",
+                          "direction": "horizontal",
+                          "gap": "md",
+                          "align": "center",
+                          "children": [
+                            {
+                              "type": "icon",
+                              "name": "lock",
+                              "size": "lg"
+                            },
+                            {
+                              "type": "typography",
+                              "content": "Sign In",
+                              "variant": "h2"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "divider"
+                        },
+                        {
+                          "type": "select",
+                          "label": "Provider",
+                          "field": "provider",
+                          "bind": "@entity.provider",
+                          "options": [
+                            {
+                              "label": "Google",
+                              "value": "google"
+                            },
+                            {
+                              "label": "GitHub",
+                              "value": "github"
+                            },
+                            {
+                              "label": "Microsoft",
+                              "value": "microsoft"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "button",
+                          "label": "Login",
+                          "event": "LOGIN",
+                          "variant": "primary",
+                          "icon": "log-in"
+                        }
+                      ]
+                    }
+                  ]
+                ]
+              },
+              {
+                "from": "authorizing",
+                "to": "error",
+                "event": "FAILED",
+                "effects": [
+                  [
+                    "set",
+                    "@entity.error",
+                    "@payload.error"
+                  ],
+                  [
+                    "render-ui",
+                    "main",
+                    {
+                      "type": "stack",
+                      "direction": "vertical",
+                      "gap": "lg",
+                      "align": "center",
+                      "children": [
+                        {
+                          "type": "error-state",
+                          "title": "Authentication Failed",
+                          "message": "@entity.error",
+                          "onRetry": "RETRY"
+                        },
+                        {
+                          "type": "button",
+                          "label": "Try Again",
+                          "event": "RETRY",
+                          "variant": "primary",
+                          "icon": "rotate-ccw"
+                        }
+                      ]
+                    }
+                  ]
+                ]
+              },
+              {
+                "from": "refreshing",
+                "to": "error",
+                "event": "FAILED",
+                "effects": [
+                  [
+                    "set",
+                    "@entity.error",
+                    "@payload.error"
+                  ],
+                  [
+                    "render-ui",
+                    "main",
+                    {
+                      "type": "stack",
+                      "direction": "vertical",
+                      "gap": "lg",
+                      "align": "center",
+                      "children": [
+                        {
+                          "type": "error-state",
+                          "title": "Authentication Failed",
+                          "message": "@entity.error",
+                          "onRetry": "RETRY"
+                        },
+                        {
+                          "type": "button",
+                          "label": "Try Again",
+                          "event": "RETRY",
+                          "variant": "primary",
+                          "icon": "rotate-ccw"
+                        }
+                      ]
+                    }
+                  ]
+                ]
+              },
+              {
+                "from": "error",
+                "to": "unauthenticated",
+                "event": "RETRY",
+                "effects": [
+                  [
+                    "render-ui",
+                    "main",
+                    {
+                      "type": "stack",
+                      "direction": "vertical",
+                      "gap": "lg",
+                      "align": "center",
+                      "children": [
+                        {
+                          "type": "stack",
+                          "direction": "horizontal",
+                          "gap": "md",
+                          "align": "center",
+                          "children": [
+                            {
+                              "type": "icon",
+                              "name": "lock",
+                              "size": "lg"
+                            },
+                            {
+                              "type": "typography",
+                              "content": "Sign In",
+                              "variant": "h2"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "divider"
+                        },
+                        {
+                          "type": "select",
+                          "label": "Provider",
+                          "field": "provider",
+                          "bind": "@entity.provider",
+                          "options": [
+                            {
+                              "label": "Google",
+                              "value": "google"
+                            },
+                            {
+                              "label": "GitHub",
+                              "value": "github"
+                            },
+                            {
+                              "label": "Microsoft",
+                              "value": "microsoft"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "button",
+                          "label": "Login",
+                          "event": "LOGIN",
+                          "variant": "primary",
+                          "icon": "log-in"
+                        }
+                      ]
+                    }
+                  ]
+                ]
+              }
+            ]
+          }
+        }
+      ],
+      "pages": [
+        {
+          "name": "ServiceOauthPage",
+          "path": "/serviceoauths",
+          "traits": [
+            {
+              "ref": "ServiceOauthOauth"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "description": "OAuth service integration behavior: authorize, token exchange, refresh. Wraps the `oauth` integration with a multi-step authorization flow. Pure function: params in, OrbitalDefinition out."
+}