@alwaysmeticulous/client 2.253.0 → 2.254.0

package/dist/api/oauth.api.d.ts

@@ -0,0 +1,12 @@
+import { MeticulousClient } from "../types/client.types";
+export interface WhoamiResponse {
+    email: string;
+    firstName: string;
+    lastName: string;
+    isAdmin?: boolean;
+    organizations: {
+        name: string;
+        id: string;
+    }[];
+}
+export declare const getWhoami: (client: MeticulousClient) => Promise<WhoamiResponse>;

package/dist/api/oauth.api.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getWhoami = void 0;
+const getWhoami = async (client) => {
+    const { data } = await client.get("oauth/whoami");
+    return data;
+};
+exports.getWhoami = getWhoami;
+//# sourceMappingURL=oauth.api.js.map

package/dist/api/oauth.api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.api.js","sourceRoot":"","sources":["../../src/api/oauth.api.ts"],"names":[],"mappings":";;;AAUO,MAAM,SAAS,GAAG,KAAK,EAC5B,MAAwB,EACC,EAAE;IAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,GAAG,CAAiB,cAAc,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AALW,QAAA,SAAS,aAKpB"}

package/dist/api-token.utils.d.ts

@@ -1 +1,21 @@
+/**
+ * Resolves the API token to use for authentication with the Meticulous API.
+ *
+ * The resolution order is as follows:
+ * 1. Explicit apiToken parameter (e.g. from CLI flag)
+ * 2. METICULOUS_API_TOKEN environment variable
+ * 3. Legacy ~/.meticulous/config.json file
+ *
+ * This function does NOT check for OAuth tokens. Use getAuthToken for that functionality.
+ */
 export declare const getApiToken: (apiToken: string | null | undefined) => string | null;
+/**
+ * Async version of getApiToken that also checks for OAuth tokens.
+ *
+ * Resolution order:
+ * 1. Explicit apiToken parameter (CLI flag)
+ * 2. METICULOUS_API_TOKEN env var
+ * 3. OAuth access token (with auto-refresh)
+ * 4. Legacy ~/.meticulous/config.json
+ */
+export declare const getAuthToken: (apiToken: string | null | undefined) => Promise<string | null>;

package/dist/api-token.utils.js

@@ -1,28 +1,65 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getApiToken = void 0;
+exports.getAuthToken = exports.getApiToken = void 0;
 const fs_1 = require("fs");
 const os_1 = require("os");
 const path_1 = require("path");
 const common_1 = require("@alwaysmeticulous/common");
+const oauth_refresh_1 = require("./oauth/oauth-refresh");
 const PERSONAL_CONFIG_FILE_PATH = ".meticulous/config.json";
-const getApiToken = (apiToken) => {
-    const logger = (0, common_1.initLogger)();
-    if (apiToken) {
-        return apiToken;
-    }
-    if (process.env["METICULOUS_API_TOKEN"]) {
-        return process.env["METICULOUS_API_TOKEN"];
-    }
+const getFileBasedToken = () => {
     const personalConfigFileAbsolutePath = (0, path_1.join)((0, os_1.homedir)(), PERSONAL_CONFIG_FILE_PATH);
     if ((0, fs_1.existsSync)(personalConfigFileAbsolutePath)) {
         const config = JSON.parse((0, fs_1.readFileSync)(personalConfigFileAbsolutePath).toString("utf-8"));
         if (config.apiToken) {
+            const logger = (0, common_1.initLogger)();
             logger.info(`Using apiToken from ${personalConfigFileAbsolutePath}`);
             return config.apiToken;
         }
     }
     return null;
 };
+/**
+ * Resolves the API token to use for authentication with the Meticulous API.
+ *
+ * The resolution order is as follows:
+ * 1. Explicit apiToken parameter (e.g. from CLI flag)
+ * 2. METICULOUS_API_TOKEN environment variable
+ * 3. Legacy ~/.meticulous/config.json file
+ *
+ * This function does NOT check for OAuth tokens. Use getAuthToken for that functionality.
+ */
+const getApiToken = (apiToken) => {
+    if (apiToken) {
+        return apiToken;
+    }
+    if (process.env["METICULOUS_API_TOKEN"]) {
+        return process.env["METICULOUS_API_TOKEN"];
+    }
+    return getFileBasedToken();
+};
 exports.getApiToken = getApiToken;
+/**
+ * Async version of getApiToken that also checks for OAuth tokens.
+ *
+ * Resolution order:
+ * 1. Explicit apiToken parameter (CLI flag)
+ * 2. METICULOUS_API_TOKEN env var
+ * 3. OAuth access token (with auto-refresh)
+ * 4. Legacy ~/.meticulous/config.json
+ */
+const getAuthToken = async (apiToken) => {
+    if (apiToken) {
+        return apiToken;
+    }
+    if (process.env["METICULOUS_API_TOKEN"]) {
+        return process.env["METICULOUS_API_TOKEN"];
+    }
+    const oauthToken = await (0, oauth_refresh_1.getValidAccessToken)();
+    if (oauthToken) {
+        return oauthToken;
+    }
+    return getFileBasedToken();
+};
+exports.getAuthToken = getAuthToken;
 //# sourceMappingURL=api-token.utils.js.map

package/dist/api-token.utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-token.utils.js","sourceRoot":"","sources":["../src/api-token.utils.ts"],"names":[],"mappings":";;;AAAA,2BAA8C;AAC9C,2BAA6B;AAC7B,+BAA4B;AAC5B,qDAAsD;AAEtD,MAAM,yBAAyB,GAAG,yBAAyB,CAAC;AAMrD,MAAM,WAAW,GAAG,CACzB,QAAmC,EACpB,EAAE;IACjB,MAAM,MAAM,GAAG,IAAA,mBAAU,GAAE,CAAC;IAE5B,IAAI,QAAQ,EAAE;QACZ,OAAO,QAAQ,CAAC;KACjB;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE;QACvC,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;KAC5C;IAED,MAAM,8BAA8B,GAAG,IAAA,WAAI,EACzC,IAAA,YAAO,GAAE,EACT,yBAAyB,CAC1B,CAAC;IACF,IAAI,IAAA,eAAU,EAAC,8BAA8B,CAAC,EAAE;QAC9C,MAAM,MAAM,GAAmB,IAAI,CAAC,KAAK,CACvC,IAAA,iBAAY,EAAC,8BAA8B,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC/D,CAAC;QACF,IAAI,MAAM,CAAC,QAAQ,EAAE;YACnB,MAAM,CAAC,IAAI,CAAC,uBAAuB,8BAA8B,EAAE,CAAC,CAAC;YACrE,OAAO,MAAM,CAAC,QAAQ,CAAC;SACxB;KACF;IAED,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AA3BW,QAAA,WAAW,eA2BtB"}
+{"version":3,"file":"api-token.utils.js","sourceRoot":"","sources":["../src/api-token.utils.ts"],"names":[],"mappings":";;;AAAA,2BAA8C;AAC9C,2BAA6B;AAC7B,+BAA4B;AAC5B,qDAAsD;AACtD,yDAA4D;AAE5D,MAAM,yBAAyB,GAAG,yBAAyB,CAAC;AAM5D,MAAM,iBAAiB,GAAG,GAAkB,EAAE;IAC5C,MAAM,8BAA8B,GAAG,IAAA,WAAI,EACzC,IAAA,YAAO,GAAE,EACT,yBAAyB,CAC1B,CAAC;IACF,IAAI,IAAA,eAAU,EAAC,8BAA8B,CAAC,EAAE;QAC9C,MAAM,MAAM,GAAmB,IAAI,CAAC,KAAK,CACvC,IAAA,iBAAY,EAAC,8BAA8B,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC/D,CAAC;QACF,IAAI,MAAM,CAAC,QAAQ,EAAE;YACnB,MAAM,MAAM,GAAG,IAAA,mBAAU,GAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,uBAAuB,8BAA8B,EAAE,CAAC,CAAC;YACrE,OAAO,MAAM,CAAC,QAAQ,CAAC;SACxB;KACF;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF;;;;;;;;;GASG;AACI,MAAM,WAAW,GAAG,CACzB,QAAmC,EACpB,EAAE;IACjB,IAAI,QAAQ,EAAE;QACZ,OAAO,QAAQ,CAAC;KACjB;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE;QACvC,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;KAC5C;IACD,OAAO,iBAAiB,EAAE,CAAC;AAC7B,CAAC,CAAC;AAVW,QAAA,WAAW,eAUtB;AAEF;;;;;;;;GAQG;AACI,MAAM,YAAY,GAAG,KAAK,EAC/B,QAAmC,EACX,EAAE;IAC1B,IAAI,QAAQ,EAAE;QACZ,OAAO,QAAQ,CAAC;KACjB;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE;QACvC,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;KAC5C;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,mCAAmB,GAAE,CAAC;IAC/C,IAAI,UAAU,EAAE;QACd,OAAO,UAAU,CAAC;KACnB;IAED,OAAO,iBAAiB,EAAE,CAAC;AAC7B,CAAC,CAAC;AAhBW,QAAA,YAAY,gBAgBvB"}

package/dist/client.d.ts

@@ -13,3 +13,7 @@ export interface MakeRequestOptions {
 }
 export declare const makeRequest: <T>(requestOptions: MakeRequestOptions) => Promise<Response<T>>;
 export declare const createClient: (options: ClientOptions) => MeticulousClient;
+export declare const isInteractiveContext: () => boolean;
+export declare const createClientWithOAuth: (options: ClientOptions & {
+    enableOAuthLogin?: boolean;
+}) => Promise<MeticulousClient>;

package/dist/client.js

@@ -3,10 +3,11 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createClient = exports.makeRequest = void 0;
+exports.createClientWithOAuth = exports.isInteractiveContext = exports.createClient = exports.makeRequest = void 0;
 const common_1 = require("@alwaysmeticulous/common");
 const node_fetch_1 = __importDefault(require("node-fetch"));
 const api_token_utils_1 = require("./api-token.utils");
+const oauth_login_1 = require("./oauth/oauth-login");
 const get_proxy_agent_1 = require("./utils/get-proxy-agent");
 const DEFAULT_TIMEOUT = 60000;
 const BASE_API_URL = "https://app.meticulous.ai/api/";
@@ -84,16 +85,10 @@ const makeRequest = async (requestOptions) => {
     });
 };
 exports.makeRequest = makeRequest;
-const createClient = ({ apiToken: apiToken_, }) => {
-    const logger = (0, common_1.initLogger)();
-    const apiToken = (0, api_token_utils_1.getApiToken)(apiToken_);
-    if (!apiToken) {
-        logger.error("You must provide an API token by using the --apiToken parameter");
-        process.exit(1);
-    }
+const buildClient = (token, logger) => {
     const makeRequestWithToken = async (url, options = {}, config) => {
         const headers = {
-            authorization: apiToken,
+            authorization: token,
         };
         return (0, exports.makeRequest)({
             url,
@@ -125,7 +120,36 @@ const createClient = ({ apiToken: apiToken_, }) => {
         },
     };
 };
+const createClient = ({ apiToken: apiToken_, }) => {
+    const logger = (0, common_1.initLogger)();
+    const apiToken = (0, api_token_utils_1.getApiToken)(apiToken_);
+    if (!apiToken) {
+        logger.error("You must provide an API token by using the --apiToken parameter");
+        process.exit(1);
+    }
+    return buildClient(apiToken, logger);
+};
 exports.createClient = createClient;
+const isInteractiveContext = () => process.stdin.isTTY === true && !process.env["CI"];
+exports.isInteractiveContext = isInteractiveContext;
+const createClientWithOAuth = async (options) => {
+    const logger = (0, common_1.initLogger)();
+    let apiToken = await (0, api_token_utils_1.getAuthToken)(options.apiToken);
+    const isInteractive = options.enableOAuthLogin && (0, exports.isInteractiveContext)();
+    if (!apiToken && isInteractive) {
+        const tokens = await (0, oauth_login_1.performOAuthLogin)();
+        apiToken = tokens.accessToken;
+    }
+    if (!apiToken) {
+        const message = isInteractive
+            ? "No authentication found. Use --apiToken, set METICULOUS_API_TOKEN, or log in via browser."
+            : "No authentication found. Set METICULOUS_API_TOKEN or pass --apiToken.";
+        logger.error(message);
+        return process.exit(1);
+    }
+    return buildClient(apiToken, logger);
+};
+exports.createClientWithOAuth = createClientWithOAuth;
 const getApiUrl = () => {
     if (process.env["METICULOUS_API_URL"]) {
         return process.env["METICULOUS_API_URL"];

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";;;;;;AAAA,qDAIkC;AAElC,4DAAgD;AAEhD,uDAAgD;AAMhD,6DAAwD;AAExD,MAAM,eAAe,GAAG,KAAM,CAAC;AAC/B,MAAM,YAAY,GAAG,gCAAgC,CAAC;AActD,MAAM,iBAAiB,GAAG,KAAK,EAC7B,GAAW,EACX,OAAoB,EACpB,OAAgB,EACM,EAAE;IACxB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;QAChC,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC,EAAE,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,eAAe,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,MAAM,IAAA,oBAAK,EAAC,GAAG,EAAE;QAChC,GAAG,OAAO;QACV,MAAM,EAAE,UAAU,CAAC,MAAqB;KACzC,CAAC,CAAC;IACH,YAAY,CAAC,SAAS,CAAC,CAAC;IAExB,MAAM,eAAe,GAA2B,EAAE,CAAC;IACnD,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAa,EAAE,GAAW,EAAE,EAAE;QACtD,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,IAAI,IAAO,CAAC;IACZ,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACzD,IAAI,WAAW,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE;QAC3D,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;KACrC;SAAM;QACL,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;KACrC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;QAChB,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1E,KAAa,CAAC,QAAQ,GAAG;YACxB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,IAAI;YACJ,OAAO,EAAE,eAAe;SACzB,CAAC;QACD,KAAa,CAAC,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QAC5C,MAAM,KAAK,CAAC;KACb;IAED,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,OAAO,EAAE,eAAe;KACzB,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,IAAY,EAAU,EAAE;IAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACpE,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,OAAO,GAAG,IAAI,IAAI,YAAY,EAAE,CAAC;AACnC,CAAC,CAAC;AAEK,MAAM,WAAW,GAAG,KAAK,EAC9B,cAAkC,EACZ,EAAE;IACxB,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,cAAc,CAAC;IACtE,IAAI,QAAQ,GAAG,WAAW,CAAC,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;IAE7C,MAAM,YAAY,GAAG;QACnB,cAAc,EAAE,kBAAkB;QAClC,GAAG,OAAO;QACV,GAAG,MAAM,CAAC,OAAO;QACjB,GAAG,OAAO,CAAC,OAAO;KACnB,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,EAAE;QACjB,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;YACrD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE;gBACzC,aAAa,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;aACvD;QACH,CAAC,CAAC,CAAC;QACH,QAAQ,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC;KACrC;IAED,MAAM,WAAW,GAAgB;QAC/B,GAAG,OAAO;QACV,OAAO,EAAE,YAAY;QACrB,KAAK,EAAE,IAAA,+BAAa,GAAE;KACvB,CAAC;IAEF,OAAO,MAAM,IAAA,yBAAgB,EAC3B,GAAG,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,EAC9D;QACE,WAAW,EAAE,2BAAkB;QAC/B,MAAM;KACP,CACF,CAAC;AACJ,CAAC,CAAC;AApCW,QAAA,WAAW,eAoCtB;AAEK,MAAM,YAAY,GAAiD,CAAC,EACzE,QAAQ,EAAE,SAAS,GACpB,EAAE,EAAE;IACH,MAAM,MAAM,GAAG,IAAA,mBAAU,GAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,IAAA,6BAAW,EAAC,SAAS,CAAC,CAAC;IACxC,IAAI,CAAC,QAAQ,EAAE;QACb,MAAM,CAAC,KAAK,CACV,iEAAiE,CAClE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACjB;IAED,MAAM,oBAAoB,GAAG,KAAK,EAChC,GAAW,EACX,UAAuB,EAAE,EACzB,MAA2B,EACL,EAAE;QACxB,MAAM,OAAO,GAAG;YACd,aAAa,EAAE,QAAQ;SACxB,CAAC;QAEF,OAAO,IAAA,mBAAW,EAAI;YACpB,GAAG;YACH,OAAO;YACP,OAAO;YACP,MAAM,EAAE,MAAM,IAAI,EAAE;YACpB,MAAM;SACP,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO;QACL,GAAG,EAAE,CACH,GAAW,EACX,MAA2B,EACf,EAAE;YACd,OAAO,oBAAoB,CACzB,GAAG,EACH,EAAE,MAAM,EAAE,KAAK,EAAE,EACjB,MAAM,CACO,CAAC;QAClB,CAAC;QAED,IAAI,EAAE,CACJ,GAAW,EACX,IAAQ,EACR,MAA2B,EACf,EAAE;YACd,MAAM,IAAI,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnE,MAAM,cAAc,GAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YACvD,IAAI,IAAI,KAAK,SAAS,EAAE;gBACtB,cAAc,CAAC,IAAI,GAAG,IAAI,CAAC;aAC5B;YACD,OAAO,oBAAoB,CAAI,GAAG,EAAE,cAAc,EAAE,MAAM,CAAe,CAAC;QAC5E,CAAC;QAED,GAAG,EAAE,CACH,GAAW,EACX,IAAQ,EACR,MAA2B,EACf,EAAE;YACd,MAAM,IAAI,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnE,MAAM,cAAc,GAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YACtD,IAAI,IAAI,KAAK,SAAS,EAAE;gBACtB,cAAc,CAAC,IAAI,GAAG,IAAI,CAAC;aAC5B;YACD,OAAO,oBAAoB,CAAI,GAAG,EAAE,cAAc,EAAE,MAAM,CAAe,CAAC;QAC5E,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AApEW,QAAA,YAAY,gBAoEvB;AAEF,MAAM,SAAS,GAAG,GAAG,EAAE;IACrB,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE;QACrC,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;KAC1C;IACD,OAAO,YAAY,CAAC;AACtB,CAAC,CAAC"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";;;;;;AAAA,qDAIkC;AAElC,4DAAgD;AAEhD,uDAA8D;AAC9D,qDAAwD;AAMxD,6DAAwD;AAExD,MAAM,eAAe,GAAG,KAAM,CAAC;AAC/B,MAAM,YAAY,GAAG,gCAAgC,CAAC;AActD,MAAM,iBAAiB,GAAG,KAAK,EAC7B,GAAW,EACX,OAAoB,EACpB,OAAgB,EACM,EAAE;IACxB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;QAChC,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC,EAAE,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,eAAe,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,MAAM,IAAA,oBAAK,EAAC,GAAG,EAAE;QAChC,GAAG,OAAO;QACV,MAAM,EAAE,UAAU,CAAC,MAAqB;KACzC,CAAC,CAAC;IACH,YAAY,CAAC,SAAS,CAAC,CAAC;IAExB,MAAM,eAAe,GAA2B,EAAE,CAAC;IACnD,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAa,EAAE,GAAW,EAAE,EAAE;QACtD,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,IAAI,IAAO,CAAC;IACZ,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACzD,IAAI,WAAW,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE;QAC3D,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;KACrC;SAAM;QACL,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;KACrC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;QAChB,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1E,KAAa,CAAC,QAAQ,GAAG;YACxB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,IAAI;YACJ,OAAO,EAAE,eAAe;SACzB,CAAC;QACD,KAAa,CAAC,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QAC5C,MAAM,KAAK,CAAC;KACb;IAED,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,OAAO,EAAE,eAAe;KACzB,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,IAAY,EAAU,EAAE;IAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACpE,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,OAAO,GAAG,IAAI,IAAI,YAAY,EAAE,CAAC;AACnC,CAAC,CAAC;AAEK,MAAM,WAAW,GAAG,KAAK,EAC9B,cAAkC,EACZ,EAAE;IACxB,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,cAAc,CAAC;IACtE,IAAI,QAAQ,GAAG,WAAW,CAAC,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;IAE7C,MAAM,YAAY,GAAG;QACnB,cAAc,EAAE,kBAAkB;QAClC,GAAG,OAAO;QACV,GAAG,MAAM,CAAC,OAAO;QACjB,GAAG,OAAO,CAAC,OAAO;KACnB,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,EAAE;QACjB,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;YACrD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE;gBACzC,aAAa,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;aACvD;QACH,CAAC,CAAC,CAAC;QACH,QAAQ,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC;KACrC;IAED,MAAM,WAAW,GAAgB;QAC/B,GAAG,OAAO;QACV,OAAO,EAAE,YAAY;QACrB,KAAK,EAAE,IAAA,+BAAa,GAAE;KACvB,CAAC;IAEF,OAAO,MAAM,IAAA,yBAAgB,EAC3B,GAAG,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,EAC9D;QACE,WAAW,EAAE,2BAAkB;QAC/B,MAAM;KACP,CACF,CAAC;AACJ,CAAC,CAAC;AApCW,QAAA,WAAW,eAoCtB;AAEF,MAAM,WAAW,GAAG,CAAC,KAAa,EAAE,MAAkB,EAAoB,EAAE;IAC1E,MAAM,oBAAoB,GAAG,KAAK,EAChC,GAAW,EACX,UAAuB,EAAE,EACzB,MAA2B,EACL,EAAE;QACxB,MAAM,OAAO,GAAG;YACd,aAAa,EAAE,KAAK;SACrB,CAAC;QAEF,OAAO,IAAA,mBAAW,EAAI;YACpB,GAAG;YACH,OAAO;YACP,OAAO;YACP,MAAM,EAAE,MAAM,IAAI,EAAE;YACpB,MAAM;SACP,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO;QACL,GAAG,EAAE,CACH,GAAW,EACX,MAA2B,EACf,EAAE;YACd,OAAO,oBAAoB,CACzB,GAAG,EACH,EAAE,MAAM,EAAE,KAAK,EAAE,EACjB,MAAM,CACO,CAAC;QAClB,CAAC;QAED,IAAI,EAAE,CACJ,GAAW,EACX,IAAQ,EACR,MAA2B,EACf,EAAE;YACd,MAAM,IAAI,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnE,MAAM,cAAc,GAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YACvD,IAAI,IAAI,KAAK,SAAS,EAAE;gBACtB,cAAc,CAAC,IAAI,GAAG,IAAI,CAAC;aAC5B;YACD,OAAO,oBAAoB,CAAI,GAAG,EAAE,cAAc,EAAE,MAAM,CAAe,CAAC;QAC5E,CAAC;QAED,GAAG,EAAE,CACH,GAAW,EACX,IAAQ,EACR,MAA2B,EACf,EAAE;YACd,MAAM,IAAI,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnE,MAAM,cAAc,GAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YACtD,IAAI,IAAI,KAAK,SAAS,EAAE;gBACtB,cAAc,CAAC,IAAI,GAAG,IAAI,CAAC;aAC5B;YACD,OAAO,oBAAoB,CAAI,GAAG,EAAE,cAAc,EAAE,MAAM,CAAe,CAAC;QAC5E,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,YAAY,GAAiD,CAAC,EACzE,QAAQ,EAAE,SAAS,GACpB,EAAE,EAAE;IACH,MAAM,MAAM,GAAG,IAAA,mBAAU,GAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,IAAA,6BAAW,EAAC,SAAS,CAAC,CAAC;IACxC,IAAI,CAAC,QAAQ,EAAE;QACb,MAAM,CAAC,KAAK,CACV,iEAAiE,CAClE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACjB;IAED,OAAO,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AACvC,CAAC,CAAC;AAbW,QAAA,YAAY,gBAavB;AAEK,MAAM,oBAAoB,GAAG,GAAY,EAAE,CAChD,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AADxC,QAAA,oBAAoB,wBACoB;AAE9C,MAAM,qBAAqB,GAAG,KAAK,EACxC,OAAuD,EAC5B,EAAE;IAC7B,MAAM,MAAM,GAAG,IAAA,mBAAU,GAAE,CAAC;IAE5B,IAAI,QAAQ,GAAG,MAAM,IAAA,8BAAY,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEpD,MAAM,aAAa,GACjB,OAAO,CAAC,gBAAgB,IAAI,IAAA,4BAAoB,GAAE,CAAC;IAErD,IAAI,CAAC,QAAQ,IAAI,aAAa,EAAE;QAC9B,MAAM,MAAM,GAAG,MAAM,IAAA,+BAAiB,GAAE,CAAC;QACzC,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC;KAC/B;IAED,IAAI,CAAC,QAAQ,EAAE;QACb,MAAM,OAAO,GAAG,aAAa;YAC3B,CAAC,CAAC,2FAA2F;YAC7F,CAAC,CAAC,uEAAuE,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACxB;IAED,OAAO,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AACvC,CAAC,CAAC;AAxBW,QAAA,qBAAqB,yBAwBhC;AAEF,MAAM,SAAS,GAAG,GAAG,EAAE;IACrB,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE;QACrC,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;KAC1C;IACD,OAAO,YAAY,CAAC;AACtB,CAAC,CAAC"}

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 export * from "./api/github-cloud-replay.api";
+export { WhoamiResponse, getWhoami } from "./api/oauth.api";
 export { getProject, getRepoUrl } from "./api/project.api";
 /**
  * @deprecated Use TestRunDataLocations from `@alwaysmeticulous/api` instead.
@@ -9,8 +10,11 @@ export { getRecordedSession, getRecordedSessionData, getRecordingCommandId, post
 export { ExecuteSecureTunnelTestRunOptions, executeSecureTunnelTestRun, getTestRun, getTestRunData, GetLatestTestRunOptions, getLatestTestRunResults, TestRun, emitTelemetry, } from "./api/test-run.api";
 export { GetIsLockedOptions, getIsLocked } from "./api/deployment-lock.api";
 export { IN_PROGRESS_TEST_RUN_STATUS } from "./api/test-run.constants";
-export { getApiToken } from "./api-token.utils";
-export { ClientOptions, createClient, makeRequest } from "./client";
+export { getApiToken, getAuthToken } from "./api-token.utils";
+export { ClientOptions, createClient, createClientWithOAuth, isInteractiveContext, makeRequest } from "./client";
+export { performOAuthLogin } from "./oauth/oauth-login";
+export { getValidAccessToken } from "./oauth/oauth-refresh";
+export { clearOAuthTokens } from "./oauth/oauth-token-store";
 export type { MeticulousClient } from "./types/client.types";
 export { getProxyAgent } from "./utils/get-proxy-agent";
 export { RequestAssetUploadParams, RequestAssetUploadResponse, requestAssetUpload, requestMultipartAssetUpload, RequestMultipartAssetUploadResponse, RequestUploadPartParams, RequestUploadPartResponse, requestUploadPart, CompleteAssetUploadParams, CompleteAssetUploadResponse, completeAssetUpload, CompleteContainerUploadParams, CompleteContainerUploadResponse, completeContainerUpload, MultiPartUploadInfo, DownloadDeploymentResponse, downloadProjectDeployment, GetContainerDeploymentResponse, getContainerDeployment, ContainerEnvVariable, } from "./api/project-deployments.api";

package/dist/index.js

@@ -14,8 +14,10 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.isFetchError = exports.getRegistryAuth = exports.getContainerDeployment = exports.downloadProjectDeployment = exports.completeContainerUpload = exports.completeAssetUpload = exports.requestUploadPart = exports.requestMultipartAssetUpload = exports.requestAssetUpload = exports.getProxyAgent = exports.makeRequest = exports.createClient = exports.getApiToken = exports.IN_PROGRESS_TEST_RUN_STATUS = exports.getIsLocked = exports.emitTelemetry = exports.getLatestTestRunResults = exports.getTestRunData = exports.getTestRun = exports.executeSecureTunnelTestRun = exports.postSessionIdNotification = exports.getRecordingCommandId = exports.getRecordedSessionData = exports.getRecordedSession = exports.getReplayV3DownloadUrls = exports.getReplayDownloadUrl = exports.getReplay = exports.getRepoUrl = exports.getProject = void 0;
+exports.isFetchError = exports.getRegistryAuth = exports.getContainerDeployment = exports.downloadProjectDeployment = exports.completeContainerUpload = exports.completeAssetUpload = exports.requestUploadPart = exports.requestMultipartAssetUpload = exports.requestAssetUpload = exports.getProxyAgent = exports.clearOAuthTokens = exports.getValidAccessToken = exports.performOAuthLogin = exports.makeRequest = exports.isInteractiveContext = exports.createClientWithOAuth = exports.createClient = exports.getAuthToken = exports.getApiToken = exports.IN_PROGRESS_TEST_RUN_STATUS = exports.getIsLocked = exports.emitTelemetry = exports.getLatestTestRunResults = exports.getTestRunData = exports.getTestRun = exports.executeSecureTunnelTestRun = exports.postSessionIdNotification = exports.getRecordingCommandId = exports.getRecordedSessionData = exports.getRecordedSession = exports.getReplayV3DownloadUrls = exports.getReplayDownloadUrl = exports.getReplay = exports.getRepoUrl = exports.getProject = exports.getWhoami = void 0;
 __exportStar(require("./api/github-cloud-replay.api"), exports);
+var oauth_api_1 = require("./api/oauth.api");
+Object.defineProperty(exports, "getWhoami", { enumerable: true, get: function () { return oauth_api_1.getWhoami; } });
 var project_api_1 = require("./api/project.api");
 Object.defineProperty(exports, "getProject", { enumerable: true, get: function () { return project_api_1.getProject; } });
 Object.defineProperty(exports, "getRepoUrl", { enumerable: true, get: function () { return project_api_1.getRepoUrl; } });
@@ -40,9 +42,18 @@ var test_run_constants_1 = require("./api/test-run.constants");
 Object.defineProperty(exports, "IN_PROGRESS_TEST_RUN_STATUS", { enumerable: true, get: function () { return test_run_constants_1.IN_PROGRESS_TEST_RUN_STATUS; } });
 var api_token_utils_1 = require("./api-token.utils");
 Object.defineProperty(exports, "getApiToken", { enumerable: true, get: function () { return api_token_utils_1.getApiToken; } });
+Object.defineProperty(exports, "getAuthToken", { enumerable: true, get: function () { return api_token_utils_1.getAuthToken; } });
 var client_1 = require("./client");
 Object.defineProperty(exports, "createClient", { enumerable: true, get: function () { return client_1.createClient; } });
+Object.defineProperty(exports, "createClientWithOAuth", { enumerable: true, get: function () { return client_1.createClientWithOAuth; } });
+Object.defineProperty(exports, "isInteractiveContext", { enumerable: true, get: function () { return client_1.isInteractiveContext; } });
 Object.defineProperty(exports, "makeRequest", { enumerable: true, get: function () { return client_1.makeRequest; } });
+var oauth_login_1 = require("./oauth/oauth-login");
+Object.defineProperty(exports, "performOAuthLogin", { enumerable: true, get: function () { return oauth_login_1.performOAuthLogin; } });
+var oauth_refresh_1 = require("./oauth/oauth-refresh");
+Object.defineProperty(exports, "getValidAccessToken", { enumerable: true, get: function () { return oauth_refresh_1.getValidAccessToken; } });
+var oauth_token_store_1 = require("./oauth/oauth-token-store");
+Object.defineProperty(exports, "clearOAuthTokens", { enumerable: true, get: function () { return oauth_token_store_1.clearOAuthTokens; } });
 var get_proxy_agent_1 = require("./utils/get-proxy-agent");
 Object.defineProperty(exports, "getProxyAgent", { enumerable: true, get: function () { return get_proxy_agent_1.getProxyAgent; } });
 var project_deployments_api_1 = require("./api/project-deployments.api");

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,gEAA8C;AAC9C,iDAA2D;AAAlD,yGAAA,UAAU,OAAA;AAAE,yGAAA,UAAU,OAAA;AAK/B,+CAK0B;AAHxB,uGAAA,SAAS,OAAA;AACT,kHAAA,oBAAoB,OAAA;AACpB,qHAAA,uBAAuB,OAAA;AAEzB,iDAK2B;AAJzB,iHAAA,kBAAkB,OAAA;AAClB,qHAAA,sBAAsB,OAAA;AACtB,oHAAA,qBAAqB,OAAA;AACrB,wHAAA,yBAAyB,OAAA;AAE3B,mDAS4B;AAP1B,0HAAA,0BAA0B,OAAA;AAC1B,0GAAA,UAAU,OAAA;AACV,8GAAA,cAAc,OAAA;AAEd,uHAAA,uBAAuB,OAAA;AAEvB,6GAAA,aAAa,OAAA;AAEf,iEAA4E;AAA/C,kHAAA,WAAW,OAAA;AACxC,+DAAuE;AAA9D,iIAAA,2BAA2B,OAAA;AACpC,qDAAgD;AAAvC,8GAAA,WAAW,OAAA;AACpB,mCAAoE;AAA5C,sGAAA,YAAY,OAAA;AAAE,qGAAA,WAAW,OAAA;AAEjD,2DAAwD;AAA/C,gHAAA,aAAa,OAAA;AACtB,yEAqBuC;AAlBrC,6HAAA,kBAAkB,OAAA;AAClB,sIAAA,2BAA2B,OAAA;AAI3B,4HAAA,iBAAiB,OAAA;AAGjB,8HAAA,mBAAmB,OAAA;AAGnB,kIAAA,uBAAuB,OAAA;AAGvB,oIAAA,yBAAyB,OAAA;AAEzB,iIAAA,sBAAsB,OAAA;AAGxB,mDAA8E;AAA5C,+GAAA,eAAe,OAAA;AACjD,mCAAwC;AAA/B,sGAAA,YAAY,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,gEAA8C;AAC9C,6CAA4D;AAAnC,sGAAA,SAAS,OAAA;AAClC,iDAA2D;AAAlD,yGAAA,UAAU,OAAA;AAAE,yGAAA,UAAU,OAAA;AAK/B,+CAK0B;AAHxB,uGAAA,SAAS,OAAA;AACT,kHAAA,oBAAoB,OAAA;AACpB,qHAAA,uBAAuB,OAAA;AAEzB,iDAK2B;AAJzB,iHAAA,kBAAkB,OAAA;AAClB,qHAAA,sBAAsB,OAAA;AACtB,oHAAA,qBAAqB,OAAA;AACrB,wHAAA,yBAAyB,OAAA;AAE3B,mDAS4B;AAP1B,0HAAA,0BAA0B,OAAA;AAC1B,0GAAA,UAAU,OAAA;AACV,8GAAA,cAAc,OAAA;AAEd,uHAAA,uBAAuB,OAAA;AAEvB,6GAAA,aAAa,OAAA;AAEf,iEAA4E;AAA/C,kHAAA,WAAW,OAAA;AACxC,+DAAuE;AAA9D,iIAAA,2BAA2B,OAAA;AACpC,qDAA8D;AAArD,8GAAA,WAAW,OAAA;AAAE,+GAAA,YAAY,OAAA;AAClC,mCAAiH;AAAzF,sGAAA,YAAY,OAAA;AAAE,+GAAA,qBAAqB,OAAA;AAAE,8GAAA,oBAAoB,OAAA;AAAE,qGAAA,WAAW,OAAA;AAC9F,mDAAwD;AAA/C,gHAAA,iBAAiB,OAAA;AAC1B,uDAA4D;AAAnD,oHAAA,mBAAmB,OAAA;AAC5B,+DAA6D;AAApD,qHAAA,gBAAgB,OAAA;AAEzB,2DAAwD;AAA/C,gHAAA,aAAa,OAAA;AACtB,yEAqBuC;AAlBrC,6HAAA,kBAAkB,OAAA;AAClB,sIAAA,2BAA2B,OAAA;AAI3B,4HAAA,iBAAiB,OAAA;AAGjB,8HAAA,mBAAmB,OAAA;AAGnB,kIAAA,uBAAuB,OAAA;AAGvB,oIAAA,yBAAyB,OAAA;AAEzB,iIAAA,sBAAsB,OAAA;AAGxB,mDAA8E;AAA5C,+GAAA,eAAe,OAAA;AACjD,mCAAwC;AAA/B,sGAAA,YAAY,OAAA"}

package/dist/oauth/oauth-callback-server.d.ts

@@ -0,0 +1,9 @@
+export interface CallbackResult {
+    code: string;
+    state: string;
+}
+export interface CallbackServer {
+    port: number;
+    waitForCallback: () => Promise<CallbackResult>;
+}
+export declare const startCallbackServer: () => Promise<CallbackServer>;

package/dist/oauth/oauth-callback-server.js

@@ -0,0 +1,86 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.startCallbackServer = void 0;
+const http_1 = require("http");
+const CALLBACK_TIMEOUT_MS = 120000;
+const SUCCESS_HTML = `<!DOCTYPE html>
+<html>
+<head>
+  <title>Meticulous CLI</title>
+  <meta charset="utf-8">
+</head>
+<body style="font-family: system-ui, -apple-system, sans-serif; display: flex; justify-content: center; align-items: center; height: 100vh; margin: 0; background: #171719; color: #fff;">
+  <div style="text-align: center; display: flex; flex-direction: column; align-items: center; gap: 24px;">
+    <img src="https://app.meticulous.ai/meticulous_logo.svg" alt="Meticulous" width="48" height="51" />
+    <svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">
+      <circle cx="24" cy="24" r="24" fill="#1AC590"/>
+      <path d="M14 24.5L21 31.5L34 18.5" stroke="white" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"/>
+    </svg>
+    <h2 style="margin: 0; font-size: 24px; font-weight: 600;">Authentication successful</h2>
+    <p style="margin: 0; font-size: 16px; color: #a1a1aa;">You can close this tab and return to the terminal.</p>
+  </div>
+</body>
+</html>`;
+const startCallbackServer = () => {
+    return new Promise((resolveServer, rejectServer) => {
+        let callbackResolve;
+        let callbackReject;
+        const callbackPromise = new Promise((resolve, reject) => {
+            callbackResolve = resolve;
+            callbackReject = reject;
+        });
+        const server = (0, http_1.createServer)((req, res) => {
+            var _a;
+            if (!((_a = req.url) === null || _a === void 0 ? void 0 : _a.startsWith("/callback"))) {
+                res.writeHead(404);
+                res.end("Not found");
+                return;
+            }
+            const url = new URL(req.url, `http://127.0.0.1`);
+            const code = url.searchParams.get("code");
+            const state = url.searchParams.get("state");
+            const error = url.searchParams.get("error");
+            res.writeHead(200, { "Content-Type": "text/html" });
+            res.end(SUCCESS_HTML);
+            if (error) {
+                const errorDescription = url.searchParams.get("error_description") || error;
+                callbackReject(new Error(`OAuth error: ${errorDescription}`));
+            }
+            else if (code && state) {
+                callbackResolve({ code, state });
+            }
+            else {
+                callbackReject(new Error("Missing code or state in OAuth callback"));
+            }
+            server.close();
+        });
+        const timeout = setTimeout(() => {
+            server.close();
+            callbackReject(new Error(`OAuth login timed out after ${CALLBACK_TIMEOUT_MS / 1000} seconds. Please try again.`));
+        }, CALLBACK_TIMEOUT_MS);
+        server.listen(0, "127.0.0.1", () => {
+            const address = server.address();
+            if (!address || typeof address === "string") {
+                rejectServer(new Error("Failed to start callback server"));
+                return;
+            }
+            resolveServer({
+                port: address.port,
+                waitForCallback: async () => {
+                    try {
+                        return await callbackPromise;
+                    }
+                    finally {
+                        clearTimeout(timeout);
+                    }
+                },
+            });
+        });
+        server.on("error", (err) => {
+            clearTimeout(timeout);
+            rejectServer(err);
+        });
+    });
+};
+exports.startCallbackServer = startCallbackServer;
+//# sourceMappingURL=oauth-callback-server.js.map

package/dist/oauth/oauth-callback-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-callback-server.js","sourceRoot":"","sources":["../../src/oauth/oauth-callback-server.ts"],"names":[],"mappings":";;;AAAA,+BAA6E;AAE7E,MAAM,mBAAmB,GAAG,MAAO,CAAC;AAEpC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;QAiBb,CAAC;AAYF,MAAM,mBAAmB,GAAG,GAA4B,EAAE;IAC/D,OAAO,IAAI,OAAO,CAAiB,CAAC,aAAa,EAAE,YAAY,EAAE,EAAE;QACjE,IAAI,eAAiD,CAAC;QACtD,IAAI,cAAsC,CAAC;QAE3C,MAAM,eAAe,GAAG,IAAI,OAAO,CAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACtE,eAAe,GAAG,OAAO,CAAC;YAC1B,cAAc,GAAG,MAAM,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAW,IAAA,mBAAY,EACjC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;;YAC5C,IAAI,CAAC,CAAA,MAAA,GAAG,CAAC,GAAG,0CAAE,UAAU,CAAC,WAAW,CAAC,CAAA,EAAE;gBACrC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACrB,OAAO;aACR;YAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAE5C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;YACpD,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAEtB,IAAI,KAAK,EAAE;gBACT,MAAM,gBAAgB,GACpB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,KAAK,CAAC;gBACrD,cAAc,CAAC,IAAI,KAAK,CAAC,gBAAgB,gBAAgB,EAAE,CAAC,CAAC,CAAC;aAC/D;iBAAM,IAAI,IAAI,IAAI,KAAK,EAAE;gBACxB,eAAe,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;aAClC;iBAAM;gBACL,cAAc,CAAC,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC,CAAC;aACtE;YAED,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC,CACF,CAAC;QAEF,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,cAAc,CACZ,IAAI,KAAK,CACP,+BAA+B,mBAAmB,GAAG,IAAI,6BAA6B,CACvF,CACF,CAAC;QACJ,CAAC,EAAE,mBAAmB,CAAC,CAAC;QAExB,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE;gBAC3C,YAAY,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;gBAC3D,OAAO;aACR;YAED,aAAa,CAAC;gBACZ,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,eAAe,EAAE,KAAK,IAAI,EAAE;oBAC1B,IAAI;wBACF,OAAO,MAAM,eAAe,CAAC;qBAC9B;4BAAS;wBACR,YAAY,CAAC,OAAO,CAAC,CAAC;qBACvB;gBACH,CAAC;aACF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,YAAY,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAzEW,QAAA,mBAAmB,uBAyE9B"}

package/dist/oauth/oauth-constants.d.ts

@@ -0,0 +1,5 @@
+export declare const KEYCLOAK_ISSUER_URL: string;
+export declare const CLI_CLIENT_ID = "meticulous-cli";
+export declare const OAUTH_SCOPES = "openid email profile";
+export declare const getTokenEndpoint: () => Promise<string>;
+export declare const getWebappBaseUrl: () => string;

package/dist/oauth/oauth-constants.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getWebappBaseUrl = exports.getTokenEndpoint = exports.OAUTH_SCOPES = exports.CLI_CLIENT_ID = exports.KEYCLOAK_ISSUER_URL = void 0;
+exports.KEYCLOAK_ISSUER_URL = process.env["METICULOUS_OAUTH_ISSUER_URL"] ||
+    "https://app.meticulous.ai/auth/realms/meticulous";
+exports.CLI_CLIENT_ID = "meticulous-cli";
+exports.OAUTH_SCOPES = "openid email profile";
+const WELL_KNOWN_PATH = "/.well-known/openid-configuration";
+let cachedTokenEndpoint = null;
+const getTokenEndpoint = async () => {
+    if (cachedTokenEndpoint) {
+        return cachedTokenEndpoint;
+    }
+    const response = await fetch(`${exports.KEYCLOAK_ISSUER_URL}${WELL_KNOWN_PATH}`);
+    if (!response.ok) {
+        throw new Error(`Failed to fetch OpenID configuration: ${response.status} ${response.statusText}`);
+    }
+    const config = (await response.json());
+    if (!config.token_endpoint) {
+        throw new Error("OpenID configuration missing token_endpoint");
+    }
+    cachedTokenEndpoint = config.token_endpoint;
+    return cachedTokenEndpoint;
+};
+exports.getTokenEndpoint = getTokenEndpoint;
+const DEFAULT_WEBAPP_BASE_URL = "https://app.meticulous.ai";
+const getWebappBaseUrl = () => {
+    const apiUrlFromEnv = process.env["METICULOUS_API_URL"];
+    if (apiUrlFromEnv && apiUrlFromEnv.includes("localhost")) {
+        return apiUrlFromEnv.replace(/\/api\/?$/, "").replace(":3000", ":3001");
+    }
+    return DEFAULT_WEBAPP_BASE_URL;
+};
+exports.getWebappBaseUrl = getWebappBaseUrl;
+//# sourceMappingURL=oauth-constants.js.map

package/dist/oauth/oauth-constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-constants.js","sourceRoot":"","sources":["../../src/oauth/oauth-constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,mBAAmB,GAC9B,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;IAC1C,kDAAkD,CAAC;AAExC,QAAA,aAAa,GAAG,gBAAgB,CAAC;AAEjC,QAAA,YAAY,GAAG,sBAAsB,CAAC;AAEnD,MAAM,eAAe,GAAG,mCAAmC,CAAC;AAE5D,IAAI,mBAAmB,GAAkB,IAAI,CAAC;AAEvC,MAAM,gBAAgB,GAAG,KAAK,IAAqB,EAAE;IAC1D,IAAI,mBAAmB,EAAE;QACvB,OAAO,mBAAmB,CAAC;KAC5B;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,2BAAmB,GAAG,eAAe,EAAE,CAAC,CAAC;IACzE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;QAChB,MAAM,IAAI,KAAK,CACb,yCAAyC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAClF,CAAC;KACH;IAED,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA+B,CAAC;IACrE,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE;QAC1B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;KAChE;IAED,mBAAmB,GAAG,MAAM,CAAC,cAAc,CAAC;IAC5C,OAAO,mBAAmB,CAAC;AAC7B,CAAC,CAAC;AAnBW,QAAA,gBAAgB,oBAmB3B;AAEF,MAAM,uBAAuB,GAAG,2BAA2B,CAAC;AAErD,MAAM,gBAAgB,GAAG,GAAW,EAAE;IAC3C,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAExD,IAAI,aAAa,IAAI,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;QACxD,OAAO,aAAa,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;KACzE;IAED,OAAO,uBAAuB,CAAC;AACjC,CAAC,CAAC;AARW,QAAA,gBAAgB,oBAQ3B"}

package/dist/oauth/oauth-login.d.ts

@@ -0,0 +1,2 @@
+import { StoredOAuthTokens } from "./oauth-token-store";
+export declare const performOAuthLogin: () => Promise<StoredOAuthTokens>;

package/dist/oauth/oauth-login.js

@@ -0,0 +1,91 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.performOAuthLogin = void 0;
+const child_process_1 = require("child_process");
+const common_1 = require("@alwaysmeticulous/common");
+const oauth_callback_server_1 = require("./oauth-callback-server");
+const oauth_constants_1 = require("./oauth-constants");
+const oauth_pkce_1 = require("./oauth-pkce");
+const oauth_token_store_1 = require("./oauth-token-store");
+const performOAuthLogin = async () => {
+    const logger = (0, common_1.initLogger)();
+    const codeVerifier = (0, oauth_pkce_1.generateCodeVerifier)();
+    const codeChallenge = (0, oauth_pkce_1.generateCodeChallenge)(codeVerifier);
+    const state = (0, oauth_pkce_1.generateState)();
+    const callbackServer = await (0, oauth_callback_server_1.startCallbackServer)();
+    const redirectUri = `http://127.0.0.1:${callbackServer.port}/callback`;
+    const authUrl = buildAuthorizationUrl({
+        codeChallenge,
+        state,
+        redirectUri,
+    });
+    logger.info("Opening browser for authentication...");
+    logger.info(`If the browser does not open, visit: ${authUrl}`);
+    openBrowser(authUrl);
+    const { code, state: returnedState } = await callbackServer.waitForCallback();
+    if (returnedState !== state) {
+        throw new Error("OAuth state mismatch. This could indicate a CSRF attack. Please try again.");
+    }
+    const tokens = await exchangeCodeForTokens({
+        code,
+        codeVerifier,
+        redirectUri,
+    });
+    (0, oauth_token_store_1.storeOAuthTokens)(tokens);
+    logger.info("Authentication successful.");
+    return tokens;
+};
+exports.performOAuthLogin = performOAuthLogin;
+const buildAuthorizationUrl = ({ codeChallenge, state, redirectUri, }) => {
+    const params = new URLSearchParams({
+        client_id: oauth_constants_1.CLI_CLIENT_ID,
+        response_type: "code",
+        scope: oauth_constants_1.OAUTH_SCOPES,
+        redirect_uri: redirectUri,
+        code_challenge: codeChallenge,
+        code_challenge_method: "S256",
+        state,
+        issuer: oauth_constants_1.KEYCLOAK_ISSUER_URL,
+    });
+    const webappBaseUrl = (0, oauth_constants_1.getWebappBaseUrl)();
+    return `${webappBaseUrl}/cli-login?${params.toString()}`;
+};
+const exchangeCodeForTokens = async ({ code, codeVerifier, redirectUri, }) => {
+    const body = new URLSearchParams({
+        grant_type: "authorization_code",
+        client_id: oauth_constants_1.CLI_CLIENT_ID,
+        code,
+        redirect_uri: redirectUri,
+        code_verifier: codeVerifier,
+    });
+    const tokenEndpoint = await (0, oauth_constants_1.getTokenEndpoint)();
+    const response = await fetch(tokenEndpoint, {
+        method: "POST",
+        headers: { "Content-Type": "application/x-www-form-urlencoded" },
+        body: body.toString(),
+    });
+    if (!response.ok) {
+        const errorText = await response.text();
+        throw new Error(`Token exchange failed: ${response.status} ${errorText}`);
+    }
+    const data = (await response.json());
+    return {
+        accessToken: data.access_token,
+        refreshToken: data.refresh_token,
+        expiresAt: Math.floor(Date.now() / 1000) + data.expires_in,
+        idToken: data.id_token,
+    };
+};
+const openBrowser = (url) => {
+    const command = process.platform === "darwin"
+        ? `open "${url}"`
+        : process.platform === "win32"
+            ? `start "" "${url}"`
+            : `xdg-open "${url}"`;
+    (0, child_process_1.exec)(command, (error) => {
+        if (error) {
+            // Browser open failure is non-fatal — the URL is logged as a fallback
+        }
+    });
+};
+//# sourceMappingURL=oauth-login.js.map

package/dist/oauth/oauth-login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-login.js","sourceRoot":"","sources":["../../src/oauth/oauth-login.ts"],"names":[],"mappings":";;;AAAA,iDAAqC;AACrC,qDAAsD;AACtD,mEAA8D;AAC9D,uDAM2B;AAC3B,6CAIsB;AACtB,2DAA0E;AAEnE,MAAM,iBAAiB,GAAG,KAAK,IAAgC,EAAE;IACtE,MAAM,MAAM,GAAG,IAAA,mBAAU,GAAE,CAAC;IAE5B,MAAM,YAAY,GAAG,IAAA,iCAAoB,GAAE,CAAC;IAC5C,MAAM,aAAa,GAAG,IAAA,kCAAqB,EAAC,YAAY,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,IAAA,0BAAa,GAAE,CAAC;IAE9B,MAAM,cAAc,GAAG,MAAM,IAAA,2CAAmB,GAAE,CAAC;IACnD,MAAM,WAAW,GAAG,oBAAoB,cAAc,CAAC,IAAI,WAAW,CAAC;IAEvE,MAAM,OAAO,GAAG,qBAAqB,CAAC;QACpC,aAAa;QACb,KAAK;QACL,WAAW;KACZ,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACrD,MAAM,CAAC,IAAI,CAAC,wCAAwC,OAAO,EAAE,CAAC,CAAC;IAC/D,WAAW,CAAC,OAAO,CAAC,CAAC;IAErB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,cAAc,CAAC,eAAe,EAAE,CAAC;IAE9E,IAAI,aAAa,KAAK,KAAK,EAAE;QAC3B,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;KACH;IAED,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC;QACzC,IAAI;QACJ,YAAY;QACZ,WAAW;KACZ,CAAC,CAAC;IAEH,IAAA,oCAAgB,EAAC,MAAM,CAAC,CAAC;IACzB,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAE1C,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAtCW,QAAA,iBAAiB,qBAsC5B;AAEF,MAAM,qBAAqB,GAAG,CAAC,EAC7B,aAAa,EACb,KAAK,EACL,WAAW,GAKZ,EAAU,EAAE;IACX,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,SAAS,EAAE,+BAAa;QACxB,aAAa,EAAE,MAAM;QACrB,KAAK,EAAE,8BAAY;QACnB,YAAY,EAAE,WAAW;QACzB,cAAc,EAAE,aAAa;QAC7B,qBAAqB,EAAE,MAAM;QAC7B,KAAK;QACL,MAAM,EAAE,qCAAmB;KAC5B,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,IAAA,kCAAgB,GAAE,CAAC;IACzC,OAAO,GAAG,aAAa,cAAc,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC3D,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,KAAK,EAAE,EACnC,IAAI,EACJ,YAAY,EACZ,WAAW,GAKZ,EAA8B,EAAE;IAC/B,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,UAAU,EAAE,oBAAoB;QAChC,SAAS,EAAE,+BAAa;QACxB,IAAI;QACJ,YAAY,EAAE,WAAW;QACzB,aAAa,EAAE,YAAY;KAC5B,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,MAAM,IAAA,kCAAgB,GAAE,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE;QAC1C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;KACtB,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;QAChB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;KAC3E;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAKlC,CAAC;IAEF,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;QAChC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,UAAU;QAC1D,OAAO,EAAE,IAAI,CAAC,QAAQ;KACvB,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,GAAW,EAAQ,EAAE;IACxC,MAAM,OAAO,GACX,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAC3B,CAAC,CAAC,SAAS,GAAG,GAAG;QACjB,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC5B,CAAC,CAAC,aAAa,GAAG,GAAG;YACrB,CAAC,CAAC,aAAa,GAAG,GAAG,CAAC;IAE5B,IAAA,oBAAI,EAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACtB,IAAI,KAAK,EAAE;YACT,sEAAsE;SACvE;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/oauth/oauth-pkce.d.ts

@@ -0,0 +1,3 @@
+export declare const generateCodeVerifier: () => string;
+export declare const generateCodeChallenge: (verifier: string) => string;
+export declare const generateState: () => string;

package/dist/oauth/oauth-pkce.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateState = exports.generateCodeChallenge = exports.generateCodeVerifier = void 0;
+const crypto_1 = require("crypto");
+const generateCodeVerifier = () => {
+    return (0, crypto_1.randomBytes)(32).toString("base64url");
+};
+exports.generateCodeVerifier = generateCodeVerifier;
+const generateCodeChallenge = (verifier) => {
+    return (0, crypto_1.createHash)("sha256").update(verifier).digest("base64url");
+};
+exports.generateCodeChallenge = generateCodeChallenge;
+const generateState = () => {
+    return (0, crypto_1.randomBytes)(16).toString("base64url");
+};
+exports.generateState = generateState;
+//# sourceMappingURL=oauth-pkce.js.map

package/dist/oauth/oauth-pkce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-pkce.js","sourceRoot":"","sources":["../../src/oauth/oauth-pkce.ts"],"names":[],"mappings":";;;AAAA,mCAAiD;AAE1C,MAAM,oBAAoB,GAAG,GAAW,EAAE;IAC/C,OAAO,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC,CAAC;AAFW,QAAA,oBAAoB,wBAE/B;AAEK,MAAM,qBAAqB,GAAG,CAAC,QAAgB,EAAU,EAAE;IAChE,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACnE,CAAC,CAAC;AAFW,QAAA,qBAAqB,yBAEhC;AAEK,MAAM,aAAa,GAAG,GAAW,EAAE;IACxC,OAAO,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC,CAAC;AAFW,QAAA,aAAa,iBAExB"}

package/dist/oauth/oauth-refresh.d.ts

@@ -0,0 +1 @@
+export declare const getValidAccessToken: () => Promise<string | null>;

package/dist/oauth/oauth-refresh.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getValidAccessToken = void 0;
+const oauth_constants_1 = require("./oauth-constants");
+const oauth_token_store_1 = require("./oauth-token-store");
+const TOKEN_EXPIRY_BUFFER_SECONDS = 30;
+const getValidAccessToken = async () => {
+    const tokens = (0, oauth_token_store_1.getStoredOAuthTokens)();
+    if (!tokens) {
+        return null;
+    }
+    const now = Math.floor(Date.now() / 1000);
+    if (tokens.expiresAt > now + TOKEN_EXPIRY_BUFFER_SECONDS) {
+        return tokens.accessToken;
+    }
+    if (!tokens.refreshToken) {
+        (0, oauth_token_store_1.clearOAuthTokens)();
+        return null;
+    }
+    try {
+        const body = new URLSearchParams({
+            grant_type: "refresh_token",
+            client_id: oauth_constants_1.CLI_CLIENT_ID,
+            refresh_token: tokens.refreshToken,
+        });
+        const tokenEndpoint = await (0, oauth_constants_1.getTokenEndpoint)();
+        const response = await fetch(tokenEndpoint, {
+            method: "POST",
+            headers: { "Content-Type": "application/x-www-form-urlencoded" },
+            body: body.toString(),
+        });
+        if (!response.ok) {
+            (0, oauth_token_store_1.clearOAuthTokens)();
+            return null;
+        }
+        const data = (await response.json());
+        const updatedTokens = {
+            accessToken: data.access_token,
+            refreshToken: data.refresh_token,
+            expiresAt: Math.floor(Date.now() / 1000) + data.expires_in,
+            idToken: data.id_token,
+        };
+        (0, oauth_token_store_1.storeOAuthTokens)(updatedTokens);
+        return updatedTokens.accessToken;
+    }
+    catch {
+        (0, oauth_token_store_1.clearOAuthTokens)();
+        return null;
+    }
+};
+exports.getValidAccessToken = getValidAccessToken;
+//# sourceMappingURL=oauth-refresh.js.map

package/dist/oauth/oauth-refresh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-refresh.js","sourceRoot":"","sources":["../../src/oauth/oauth-refresh.ts"],"names":[],"mappings":";;;AAAA,uDAAoE;AACpE,2DAI6B;AAE7B,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAEhC,MAAM,mBAAmB,GAAG,KAAK,IAA4B,EAAE;IACpE,MAAM,MAAM,GAAG,IAAA,wCAAoB,GAAE,CAAC;IACtC,IAAI,CAAC,MAAM,EAAE;QACX,OAAO,IAAI,CAAC;KACb;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,GAAG,2BAA2B,EAAE;QACxD,OAAO,MAAM,CAAC,WAAW,CAAC;KAC3B;IAED,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE;QACxB,IAAA,oCAAgB,GAAE,CAAC;QACnB,OAAO,IAAI,CAAC;KACb;IAED,IAAI;QACF,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,UAAU,EAAE,eAAe;YAC3B,SAAS,EAAE,+BAAa;YACxB,aAAa,EAAE,MAAM,CAAC,YAAY;SACnC,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,MAAM,IAAA,kCAAgB,GAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE;YAC1C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;SACtB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;YAChB,IAAA,oCAAgB,GAAE,CAAC;YACnB,OAAO,IAAI,CAAC;SACb;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAKlC,CAAC;QAEF,MAAM,aAAa,GAAG;YACpB,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;YAChC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,UAAU;YAC1D,OAAO,EAAE,IAAI,CAAC,QAAQ;SACvB,CAAC;QAEF,IAAA,oCAAgB,EAAC,aAAa,CAAC,CAAC;QAChC,OAAO,aAAa,CAAC,WAAW,CAAC;KAClC;IAAC,MAAM;QACN,IAAA,oCAAgB,GAAE,CAAC;QACnB,OAAO,IAAI,CAAC;KACb;AACH,CAAC,CAAC;AAvDW,QAAA,mBAAmB,uBAuD9B"}

package/dist/oauth/oauth-token-store.d.ts

@@ -0,0 +1,9 @@
+export interface StoredOAuthTokens {
+    accessToken: string;
+    refreshToken: string;
+    expiresAt: number;
+    idToken?: string | undefined;
+}
+export declare const getStoredOAuthTokens: () => StoredOAuthTokens | null;
+export declare const storeOAuthTokens: (tokens: StoredOAuthTokens) => void;
+export declare const clearOAuthTokens: () => void;

package/dist/oauth/oauth-token-store.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.clearOAuthTokens = exports.storeOAuthTokens = exports.getStoredOAuthTokens = void 0;
+const fs_1 = require("fs");
+const os_1 = require("os");
+const path_1 = require("path");
+const METICULOUS_DIR = (0, path_1.join)((0, os_1.homedir)(), ".meticulous");
+const TOKEN_FILE_PATH = (0, path_1.join)(METICULOUS_DIR, "oauth-tokens.json");
+const getStoredOAuthTokens = () => {
+    try {
+        if (!(0, fs_1.existsSync)(TOKEN_FILE_PATH)) {
+            return null;
+        }
+        const data = (0, fs_1.readFileSync)(TOKEN_FILE_PATH, "utf-8");
+        return JSON.parse(data);
+    }
+    catch {
+        return null;
+    }
+};
+exports.getStoredOAuthTokens = getStoredOAuthTokens;
+const storeOAuthTokens = (tokens) => {
+    if (!(0, fs_1.existsSync)(METICULOUS_DIR)) {
+        (0, fs_1.mkdirSync)(METICULOUS_DIR, { recursive: true });
+    }
+    (0, fs_1.writeFileSync)(TOKEN_FILE_PATH, JSON.stringify(tokens, null, 2), {
+        mode: 0o600,
+    });
+};
+exports.storeOAuthTokens = storeOAuthTokens;
+const clearOAuthTokens = () => {
+    try {
+        if ((0, fs_1.existsSync)(TOKEN_FILE_PATH)) {
+            (0, fs_1.unlinkSync)(TOKEN_FILE_PATH);
+        }
+    }
+    catch {
+        // Ignore errors during cleanup
+    }
+};
+exports.clearOAuthTokens = clearOAuthTokens;
+//# sourceMappingURL=oauth-token-store.js.map

package/dist/oauth/oauth-token-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-token-store.js","sourceRoot":"","sources":["../../src/oauth/oauth-token-store.ts"],"names":[],"mappings":";;;AAAA,2BAMY;AACZ,2BAA6B;AAC7B,+BAA4B;AAS5B,MAAM,cAAc,GAAG,IAAA,WAAI,EAAC,IAAA,YAAO,GAAE,EAAE,aAAa,CAAC,CAAC;AACtD,MAAM,eAAe,GAAG,IAAA,WAAI,EAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;AAE3D,MAAM,oBAAoB,GAAG,GAA6B,EAAE;IACjE,IAAI;QACF,IAAI,CAAC,IAAA,eAAU,EAAC,eAAe,CAAC,EAAE;YAChC,OAAO,IAAI,CAAC;SACb;QACD,MAAM,IAAI,GAAG,IAAA,iBAAY,EAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAsB,CAAC;KAC9C;IAAC,MAAM;QACN,OAAO,IAAI,CAAC;KACb;AACH,CAAC,CAAC;AAVW,QAAA,oBAAoB,wBAU/B;AAEK,MAAM,gBAAgB,GAAG,CAAC,MAAyB,EAAQ,EAAE;IAClE,IAAI,CAAC,IAAA,eAAU,EAAC,cAAc,CAAC,EAAE;QAC/B,IAAA,cAAS,EAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;KAChD;IACD,IAAA,kBAAa,EAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;QAC9D,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;AACL,CAAC,CAAC;AAPW,QAAA,gBAAgB,oBAO3B;AAEK,MAAM,gBAAgB,GAAG,GAAS,EAAE;IACzC,IAAI;QACF,IAAI,IAAA,eAAU,EAAC,eAAe,CAAC,EAAE;YAC/B,IAAA,eAAU,EAAC,eAAe,CAAC,CAAC;SAC7B;KACF;IAAC,MAAM;QACN,+BAA+B;KAChC;AACH,CAAC,CAAC;AARW,QAAA,gBAAgB,oBAQ3B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alwaysmeticulous/client",
-  "version": "2.253.0",
+  "version": "2.254.0",
   "description": "Helper methods for using the Meticulous backend API",
   "license": "ISC",
   "main": "dist/index.js",
@@ -45,5 +45,5 @@
   "devDependencies": {
     "@types/node-fetch": "^2.6.13"
   },
-  "gitHead": "662d6b2fe7852366cce91ce93a3d2801cbb59c78"
+  "gitHead": "35ec0177b88e0ba98cc559590576f1265a0f7375"
 }