@ariadng/sheets 0.1.0 → 0.2.0

package/bin/sheets.js

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+
+import('../dist/cli.js');

package/dist/api/index.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Google Sheets API Client
+ */
+import type { Spreadsheet, SheetProperties, ValueRange, GetValuesOptions, SheetsClientOptions, BatchGetValuesResponse } from '../types/index.js';
+export declare class SheetsClient {
+    private http;
+    constructor(options: SheetsClientOptions);
+    /**
+     * Get a spreadsheet by ID
+     */
+    getSpreadsheet(spreadsheetId: string): Promise<Spreadsheet>;
+    /**
+     * Get list of sheets in a spreadsheet
+     */
+    getSheets(spreadsheetId: string): Promise<SheetProperties[]>;
+    /**
+     * Read cell values from a range
+     */
+    getValues(spreadsheetId: string, range: string, options?: GetValuesOptions): Promise<ValueRange>;
+    /**
+     * Read cell formulas from a range
+     */
+    getFormulas(spreadsheetId: string, range: string): Promise<ValueRange>;
+    /**
+     * Read multiple ranges at once
+     */
+    batchGetValues(spreadsheetId: string, ranges: string[], options?: GetValuesOptions): Promise<BatchGetValuesResponse>;
+    private normalizeValueRange;
+}
+export declare function createClient(options: SheetsClientOptions): SheetsClient;
+//# sourceMappingURL=index.d.ts.map

package/dist/api/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EACR,WAAW,EACX,eAAe,EACf,UAAU,EACV,gBAAgB,EAChB,mBAAmB,EACnB,sBAAsB,EACzB,MAAM,mBAAmB,CAAC;AAe3B,qBAAa,YAAY;IACrB,OAAO,CAAC,IAAI,CAAa;gBAEb,OAAO,EAAE,mBAAmB;IAOxC;;OAEG;IACG,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAIjE;;OAEG;IACG,SAAS,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAKlE;;OAEG;IACG,SAAS,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;IAsBtG;;OAEG;IACG,WAAW,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAI5E;;OAEG;IACG,cAAc,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IA0B1H,OAAO,CAAC,mBAAmB;CAa9B;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,YAAY,CAEvE"}

package/dist/api/index.js

@@ -0,0 +1,87 @@
+/**
+ * Google Sheets API Client
+ */
+import { HttpClient } from '../http/index.js';
+import { createAuthProvider } from '../auth/index.js';
+export class SheetsClient {
+    http;
+    constructor(options) {
+        const authProvider = createAuthProvider(options.auth);
+        this.http = new HttpClient({
+            getAccessToken: () => authProvider.getAccessToken(),
+        });
+    }
+    /**
+     * Get a spreadsheet by ID
+     */
+    async getSpreadsheet(spreadsheetId) {
+        return this.http.request(`/spreadsheets/${spreadsheetId}`);
+    }
+    /**
+     * Get list of sheets in a spreadsheet
+     */
+    async getSheets(spreadsheetId) {
+        const spreadsheet = await this.getSpreadsheet(spreadsheetId);
+        return spreadsheet.sheets.map(sheet => sheet.properties);
+    }
+    /**
+     * Read cell values from a range
+     */
+    async getValues(spreadsheetId, range, options) {
+        const params = {};
+        if (options?.valueRenderOption) {
+            params.valueRenderOption = options.valueRenderOption;
+        }
+        if (options?.dateTimeRenderOption) {
+            params.dateTimeRenderOption = options.dateTimeRenderOption;
+        }
+        if (options?.majorDimension) {
+            params.majorDimension = options.majorDimension;
+        }
+        const encodedRange = encodeURIComponent(range);
+        const response = await this.http.request(`/spreadsheets/${spreadsheetId}/values/${encodedRange}`, { params });
+        return this.normalizeValueRange(response);
+    }
+    /**
+     * Read cell formulas from a range
+     */
+    async getFormulas(spreadsheetId, range) {
+        return this.getValues(spreadsheetId, range, { valueRenderOption: 'FORMULA' });
+    }
+    /**
+     * Read multiple ranges at once
+     */
+    async batchGetValues(spreadsheetId, ranges, options) {
+        const params = {
+            ranges: ranges.join(','),
+        };
+        if (options?.valueRenderOption) {
+            params.valueRenderOption = options.valueRenderOption;
+        }
+        if (options?.dateTimeRenderOption) {
+            params.dateTimeRenderOption = options.dateTimeRenderOption;
+        }
+        if (options?.majorDimension) {
+            params.majorDimension = options.majorDimension;
+        }
+        const response = await this.http.request(`/spreadsheets/${spreadsheetId}/values:batchGet`, { params });
+        return {
+            spreadsheetId: response.spreadsheetId,
+            valueRanges: (response.valueRanges || []).map(vr => this.normalizeValueRange(vr)),
+        };
+    }
+    normalizeValueRange(raw) {
+        const values = (raw.values || []).map(row => row.map(cell => ({
+            value: cell,
+        })));
+        return {
+            range: raw.range,
+            majorDimension: raw.majorDimension || 'ROWS',
+            values,
+        };
+    }
+}
+export function createClient(options) {
+    return new SheetsClient(options);
+}
+//# sourceMappingURL=index.js.map

package/dist/api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAUH,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAatD,MAAM,OAAO,YAAY;IACb,IAAI,CAAa;IAEzB,YAAY,OAA4B;QACpC,MAAM,YAAY,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,GAAG,IAAI,UAAU,CAAC;YACvB,cAAc,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE;SACtD,CAAC,CAAC;IACP,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,aAAqB;QACtC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAc,iBAAiB,aAAa,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,aAAqB;QACjC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;QAC7D,OAAO,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,aAAqB,EAAE,KAAa,EAAE,OAA0B;QAC5E,MAAM,MAAM,GAA2B,EAAE,CAAC;QAE1C,IAAI,OAAO,EAAE,iBAAiB,EAAE,CAAC;YAC7B,MAAM,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACzD,CAAC;QACD,IAAI,OAAO,EAAE,oBAAoB,EAAE,CAAC;YAChC,MAAM,CAAC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;QAC/D,CAAC;QACD,IAAI,OAAO,EAAE,cAAc,EAAE,CAAC;YAC1B,MAAM,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QACnD,CAAC;QAED,MAAM,YAAY,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CACpC,iBAAiB,aAAa,WAAW,YAAY,EAAE,EACvD,EAAE,MAAM,EAAE,CACb,CAAC;QAEF,OAAO,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,KAAa;QAClD,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,KAAK,EAAE,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC,CAAC;IAClF,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,aAAqB,EAAE,MAAgB,EAAE,OAA0B;QACpF,MAAM,MAAM,GAA2B;YACnC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SAC3B,CAAC;QAEF,IAAI,OAAO,EAAE,iBAAiB,EAAE,CAAC;YAC7B,MAAM,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACzD,CAAC;QACD,IAAI,OAAO,EAAE,oBAAoB,EAAE,CAAC;YAChC,MAAM,CAAC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;QAC/D,CAAC;QACD,IAAI,OAAO,EAAE,cAAc,EAAE,CAAC;YAC1B,MAAM,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QACnD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CACpC,iBAAiB,aAAa,kBAAkB,EAChD,EAAE,MAAM,EAAE,CACb,CAAC;QAEF,OAAO;YACH,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;SACpF,CAAC;IACN,CAAC;IAEO,mBAAmB,CAAC,GAAkB;QAC1C,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CACxC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACb,KAAK,EAAE,IAAI;SACd,CAAC,CAAC,CACN,CAAC;QAEF,OAAO;YACH,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,MAAM;YAC5C,MAAM;SACT,CAAC;IACN,CAAC;CACJ;AAED,MAAM,UAAU,YAAY,CAAC,OAA4B;IACrD,OAAO,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC"}

package/dist/auth/constants.d.ts

@@ -0,0 +1,13 @@
+/**
+ * OAuth Client Constants
+ * Replace with your Google Cloud OAuth client credentials
+ */
+export declare const OAUTH_CLIENT_ID = "344941894490-jmdvo5ghomqi7vuisfrf80hfassk1ma5.apps.googleusercontent.com";
+export declare const OAUTH_CLIENT_SECRET = "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";
+export declare const OAUTH_REDIRECT_URI = "http://localhost:8085/callback";
+export declare const OAUTH_CALLBACK_PORT = 8085;
+export declare const OAUTH_AUTH_URL = "https://accounts.google.com/o/oauth2/v2/auth";
+export declare const OAUTH_TOKEN_URL = "https://oauth2.googleapis.com/token";
+export declare const OAUTH_USERINFO_URL = "https://www.googleapis.com/oauth2/v2/userinfo";
+export declare const OAUTH_SCOPES: string[];
+//# sourceMappingURL=constants.d.ts.map

package/dist/auth/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/auth/constants.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,eAAO,MAAM,eAAe,6EAA6E,CAAC;AAC1G,eAAO,MAAM,mBAAmB,wCAAwC,CAAC;AAGzE,eAAO,MAAM,kBAAkB,mCAAmC,CAAC;AACnE,eAAO,MAAM,mBAAmB,OAAO,CAAC;AAGxC,eAAO,MAAM,cAAc,iDAAiD,CAAC;AAC7E,eAAO,MAAM,eAAe,wCAAwC,CAAC;AACrE,eAAO,MAAM,kBAAkB,kDAAkD,CAAC;AAGlF,eAAO,MAAM,YAAY,UAGxB,CAAC"}

package/dist/auth/constants.js

@@ -0,0 +1,21 @@
+/**
+ * OAuth Client Constants
+ * Replace with your Google Cloud OAuth client credentials
+ */
+// Built-in OAuth client (Desktop app type)
+// Project: ariadng-sheets
+export const OAUTH_CLIENT_ID = '344941894490-jmdvo5ghomqi7vuisfrf80hfassk1ma5.apps.googleusercontent.com';
+export const OAUTH_CLIENT_SECRET = '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';
+// Redirect URI for local callback server
+export const OAUTH_REDIRECT_URI = 'http://localhost:8085/callback';
+export const OAUTH_CALLBACK_PORT = 8085;
+// OAuth endpoints
+export const OAUTH_AUTH_URL = 'https://accounts.google.com/o/oauth2/v2/auth';
+export const OAUTH_TOKEN_URL = 'https://oauth2.googleapis.com/token';
+export const OAUTH_USERINFO_URL = 'https://www.googleapis.com/oauth2/v2/userinfo';
+// Scopes
+export const OAUTH_SCOPES = [
+    'https://www.googleapis.com/auth/spreadsheets.readonly',
+    'https://www.googleapis.com/auth/userinfo.email',
+];
+//# sourceMappingURL=constants.js.map

package/dist/auth/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/auth/constants.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,2CAA2C;AAC3C,0BAA0B;AAC1B,MAAM,CAAC,MAAM,eAAe,GAAG,0EAA0E,CAAC;AAC1G,MAAM,CAAC,MAAM,mBAAmB,GAAG,qCAAqC,CAAC;AAEzE,yCAAyC;AACzC,MAAM,CAAC,MAAM,kBAAkB,GAAG,gCAAgC,CAAC;AACnE,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAExC,kBAAkB;AAClB,MAAM,CAAC,MAAM,cAAc,GAAG,8CAA8C,CAAC;AAC7E,MAAM,CAAC,MAAM,eAAe,GAAG,qCAAqC,CAAC;AACrE,MAAM,CAAC,MAAM,kBAAkB,GAAG,+CAA+C,CAAC;AAElF,SAAS;AACT,MAAM,CAAC,MAAM,YAAY,GAAG;IACxB,uDAAuD;IACvD,gDAAgD;CACnD,CAAC"}

package/dist/auth/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Authentication Module Exports
+ */
+import type { AuthConfig } from '../types/index.js';
+export { OAuthAuth } from './oauth.js';
+export { ServiceAccountAuth } from './service-account.js';
+export { UserAuth, login, loadStoredTokens, deleteTokens } from './user-auth.js';
+export type { OAuthClientCredentials } from './user-auth.js';
+export interface AuthProvider {
+    getAccessToken(): Promise<string>;
+}
+export declare function createAuthProvider(config: AuthConfig): AuthProvider;
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAKpD,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACjF,YAAY,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAE7D,MAAM,WAAW,YAAY;IACzB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CACrC;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,UAAU,GAAG,YAAY,CAWnE"}

package/dist/auth/index.js

@@ -0,0 +1,22 @@
+/**
+ * Authentication Module Exports
+ */
+import { OAuthAuth } from './oauth.js';
+import { ServiceAccountAuth } from './service-account.js';
+import { UserAuth } from './user-auth.js';
+export { OAuthAuth } from './oauth.js';
+export { ServiceAccountAuth } from './service-account.js';
+export { UserAuth, login, loadStoredTokens, deleteTokens } from './user-auth.js';
+export function createAuthProvider(config) {
+    switch (config.type) {
+        case 'oauth':
+            return new OAuthAuth(config);
+        case 'service-account':
+            return new ServiceAccountAuth(config);
+        case 'user':
+            return new UserAuth();
+        default:
+            throw new Error(`Unknown auth type: ${config.type}`);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAOjF,MAAM,UAAU,kBAAkB,CAAC,MAAkB;IACjD,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,OAAO;YACR,OAAO,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,iBAAiB;YAClB,OAAO,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC1C,KAAK,MAAM;YACP,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC1B;YACI,MAAM,IAAI,KAAK,CAAC,sBAAuB,MAA2B,CAAC,IAAI,EAAE,CAAC,CAAC;IACnF,CAAC;AACL,CAAC"}

package/dist/auth/oauth.d.ts

@@ -0,0 +1,11 @@
+/**
+ * OAuth 2.0 Authentication
+ * Simple token-based auth (accepts pre-obtained access token)
+ */
+import type { OAuthConfig } from '../types/index.js';
+export declare class OAuthAuth {
+    private config;
+    constructor(config: OAuthConfig);
+    getAccessToken(): Promise<string>;
+}
+//# sourceMappingURL=oauth.d.ts.map

package/dist/auth/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/auth/oauth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,qBAAa,SAAS;IAClB,OAAO,CAAC,MAAM,CAAc;gBAEhB,MAAM,EAAE,WAAW;IAIzB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;CAG1C"}

package/dist/auth/oauth.js

@@ -0,0 +1,14 @@
+/**
+ * OAuth 2.0 Authentication
+ * Simple token-based auth (accepts pre-obtained access token)
+ */
+export class OAuthAuth {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    async getAccessToken() {
+        return this.config.accessToken;
+    }
+}
+//# sourceMappingURL=oauth.js.map

package/dist/auth/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../src/auth/oauth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,OAAO,SAAS;IACV,MAAM,CAAc;IAE5B,YAAY,MAAmB;QAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,cAAc;QAChB,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;IACnC,CAAC;CACJ"}

package/dist/auth/service-account.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Service Account JWT Authentication
+ * Uses RS256 signing to exchange JWT for access token
+ */
+import type { ServiceAccountConfig } from '../types/index.js';
+export declare class ServiceAccountAuth {
+    private config;
+    private credentials;
+    private cachedToken;
+    private tokenExpiresAt;
+    constructor(config: ServiceAccountConfig);
+    getAccessToken(): Promise<string>;
+    private loadCredentials;
+    private createJwt;
+    private base64UrlEncode;
+    private exchangeJwtForToken;
+}
+//# sourceMappingURL=service-account.d.ts.map

package/dist/auth/service-account.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-account.d.ts","sourceRoot":"","sources":["../../src/auth/service-account.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,oBAAoB,EAA6B,MAAM,mBAAmB,CAAC;AAYzF,qBAAa,kBAAkB;IAC3B,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,WAAW,CAA0C;IAC7D,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,cAAc,CAAa;gBAEvB,MAAM,EAAE,oBAAoB;IAIlC,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;YAezB,eAAe;IAgB7B,OAAO,CAAC,SAAS;IAgCjB,OAAO,CAAC,eAAe;YAQT,mBAAmB;CAmBpC"}

package/dist/auth/service-account.js

@@ -0,0 +1,92 @@
+/**
+ * Service Account JWT Authentication
+ * Uses RS256 signing to exchange JWT for access token
+ */
+import * as crypto from 'crypto';
+import * as fs from 'fs/promises';
+const TOKEN_URI = 'https://oauth2.googleapis.com/token';
+const SCOPE = 'https://www.googleapis.com/auth/spreadsheets.readonly';
+const TOKEN_LIFETIME_SECONDS = 3600;
+export class ServiceAccountAuth {
+    config;
+    credentials = null;
+    cachedToken = null;
+    tokenExpiresAt = 0;
+    constructor(config) {
+        this.config = config;
+    }
+    async getAccessToken() {
+        if (this.cachedToken && Date.now() < this.tokenExpiresAt - 60000) {
+            return this.cachedToken;
+        }
+        await this.loadCredentials();
+        const jwt = this.createJwt();
+        const token = await this.exchangeJwtForToken(jwt);
+        this.cachedToken = token.access_token;
+        this.tokenExpiresAt = Date.now() + (token.expires_in * 1000);
+        return this.cachedToken;
+    }
+    async loadCredentials() {
+        if (this.credentials)
+            return;
+        if (this.config.credentials) {
+            this.credentials = this.config.credentials;
+            return;
+        }
+        if (!this.config.credentialsPath) {
+            throw new Error('Service account requires credentialsPath or credentials');
+        }
+        const content = await fs.readFile(this.config.credentialsPath, 'utf-8');
+        this.credentials = JSON.parse(content);
+    }
+    createJwt() {
+        if (!this.credentials) {
+            throw new Error('Credentials not loaded');
+        }
+        const now = Math.floor(Date.now() / 1000);
+        const header = {
+            alg: 'RS256',
+            typ: 'JWT',
+        };
+        const payload = {
+            iss: this.credentials.client_email,
+            scope: SCOPE,
+            aud: TOKEN_URI,
+            iat: now,
+            exp: now + TOKEN_LIFETIME_SECONDS,
+        };
+        const encodedHeader = this.base64UrlEncode(JSON.stringify(header));
+        const encodedPayload = this.base64UrlEncode(JSON.stringify(payload));
+        const signatureInput = `${encodedHeader}.${encodedPayload}`;
+        const sign = crypto.createSign('RSA-SHA256');
+        sign.update(signatureInput);
+        const signature = sign.sign(this.credentials.private_key);
+        const encodedSignature = this.base64UrlEncode(signature);
+        return `${signatureInput}.${encodedSignature}`;
+    }
+    base64UrlEncode(input) {
+        const buffer = typeof input === 'string' ? Buffer.from(input) : input;
+        return buffer.toString('base64')
+            .replace(/\+/g, '-')
+            .replace(/\//g, '_')
+            .replace(/=+$/, '');
+    }
+    async exchangeJwtForToken(jwt) {
+        const response = await fetch(TOKEN_URI, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+            },
+            body: new URLSearchParams({
+                grant_type: 'urn:ietf:params:oauth:grant-type:jwt-bearer',
+                assertion: jwt,
+            }),
+        });
+        if (!response.ok) {
+            const error = await response.text();
+            throw new Error(`Token exchange failed: ${error}`);
+        }
+        return await response.json();
+    }
+}
+//# sourceMappingURL=service-account.js.map

package/dist/auth/service-account.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-account.js","sourceRoot":"","sources":["../../src/auth/service-account.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,KAAK,EAAE,MAAM,aAAa,CAAC;AAGlC,MAAM,SAAS,GAAG,qCAAqC,CAAC;AACxD,MAAM,KAAK,GAAG,uDAAuD,CAAC;AACtE,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAQpC,MAAM,OAAO,kBAAkB;IACnB,MAAM,CAAuB;IAC7B,WAAW,GAAqC,IAAI,CAAC;IACrD,WAAW,GAAkB,IAAI,CAAC;IAClC,cAAc,GAAW,CAAC,CAAC;IAEnC,YAAY,MAA4B;QACpC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,cAAc;QAChB,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,cAAc,GAAG,KAAK,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC,WAAW,CAAC;QAC5B,CAAC;QAED,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAElD,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;QAE7D,OAAO,IAAI,CAAC,WAAW,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,eAAe;QACzB,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAE7B,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC1B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YAC3C,OAAO;QACX,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QACxE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA8B,CAAC;IACxE,CAAC;IAEO,SAAS;QACb,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAE1C,MAAM,MAAM,GAAG;YACX,GAAG,EAAE,OAAO;YACZ,GAAG,EAAE,KAAK;SACb,CAAC;QAEF,MAAM,OAAO,GAAG;YACZ,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,YAAY;YAClC,KAAK,EAAE,KAAK;YACZ,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,GAAG,GAAG,sBAAsB;SACpC,CAAC;QAEF,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACnE,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,MAAM,cAAc,GAAG,GAAG,aAAa,IAAI,cAAc,EAAE,CAAC;QAE5D,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAC1D,MAAM,gBAAgB,GAAG,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAEzD,OAAO,GAAG,cAAc,IAAI,gBAAgB,EAAE,CAAC;IACnD,CAAC;IAEO,eAAe,CAAC,KAAsB;QAC1C,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACtE,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;aAC3B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,GAAW;QACzC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;YACpC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACL,cAAc,EAAE,mCAAmC;aACtD;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACtB,UAAU,EAAE,6CAA6C;gBACzD,SAAS,EAAE,GAAG;aACjB,CAAC;SACL,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,EAAE,CAAC,CAAC;QACvD,CAAC;QAED,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAmB,CAAC;IAClD,CAAC;CACJ"}

package/dist/auth/user-auth.d.ts

@@ -0,0 +1,24 @@
+/**
+ * User OAuth Authentication
+ * OAuth 2.0 Authorization Code flow with PKCE for personal Google accounts
+ */
+import type { StoredTokens } from '../types/index.js';
+export interface OAuthClientCredentials {
+    clientId: string;
+    clientSecret: string;
+}
+interface PKCEPair {
+    codeVerifier: string;
+    codeChallenge: string;
+}
+export declare function generatePKCE(): PKCEPair;
+export declare function getAuthorizationUrl(codeChallenge: string, clientId?: string): string;
+export declare function loadStoredTokens(): Promise<StoredTokens | null>;
+export declare function deleteTokens(): Promise<void>;
+export declare function login(credentials?: OAuthClientCredentials): Promise<StoredTokens>;
+export declare class UserAuth {
+    private tokens;
+    getAccessToken(): Promise<string>;
+}
+export {};
+//# sourceMappingURL=user-auth.d.ts.map

package/dist/auth/user-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-auth.d.ts","sourceRoot":"","sources":["../../src/auth/user-auth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAYtD,MAAM,WAAW,sBAAsB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACxB;AAOD,UAAU,QAAQ;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,YAAY,IAAI,QAAQ,CAOvC;AAqFD,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAapF;AAkFD,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAOrE;AAOD,wBAAsB,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAMlD;AAID,wBAAsB,KAAK,CAAC,WAAW,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,YAAY,CAAC,CA2BvF;AAID,qBAAa,QAAQ;IACjB,OAAO,CAAC,MAAM,CAA6B;IAErC,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;CA4B1C"}

package/dist/auth/user-auth.js

@@ -0,0 +1,230 @@
+/**
+ * User OAuth Authentication
+ * OAuth 2.0 Authorization Code flow with PKCE for personal Google accounts
+ */
+import * as crypto from 'crypto';
+import * as fs from 'fs/promises';
+import * as http from 'http';
+import * as os from 'os';
+import * as path from 'path';
+import { exec } from 'child_process';
+import { OAUTH_CLIENT_ID, OAUTH_CLIENT_SECRET, OAUTH_REDIRECT_URI, OAUTH_CALLBACK_PORT, OAUTH_AUTH_URL, OAUTH_TOKEN_URL, OAUTH_USERINFO_URL, OAUTH_SCOPES, } from './constants.js';
+const CONFIG_DIR = path.join(os.homedir(), '.sheets');
+const TOKENS_FILE = path.join(CONFIG_DIR, 'tokens.json');
+export function generatePKCE() {
+    const codeVerifier = crypto.randomBytes(32).toString('base64url');
+    const codeChallenge = crypto
+        .createHash('sha256')
+        .update(codeVerifier)
+        .digest('base64url');
+    return { codeVerifier, codeChallenge };
+}
+// === Browser ===
+function openBrowser(url) {
+    return new Promise((resolve, reject) => {
+        const platform = process.platform;
+        let command;
+        if (platform === 'darwin') {
+            command = `open "${url}"`;
+        }
+        else if (platform === 'win32') {
+            command = `start "" "${url}"`;
+        }
+        else {
+            command = `xdg-open "${url}"`;
+        }
+        exec(command, (error) => {
+            if (error) {
+                reject(new Error(`Failed to open browser: ${error.message}`));
+            }
+            else {
+                resolve();
+            }
+        });
+    });
+}
+// === Callback Server ===
+function startCallbackServer() {
+    return new Promise((resolve, reject) => {
+        let timeoutId;
+        const server = http.createServer((req, res) => {
+            const url = new URL(req.url || '', `http://localhost:${OAUTH_CALLBACK_PORT}`);
+            if (url.pathname === '/callback') {
+                const code = url.searchParams.get('code');
+                const error = url.searchParams.get('error');
+                if (error) {
+                    res.writeHead(400, { 'Content-Type': 'text/html' });
+                    res.end('<html><body><h1>Authorization Failed</h1><p>You can close this window.</p></body></html>');
+                    clearTimeout(timeoutId);
+                    server.close();
+                    reject(new Error(`Authorization error: ${error}`));
+                    return;
+                }
+                if (code) {
+                    res.writeHead(200, { 'Content-Type': 'text/html' });
+                    res.end('<html><body><h1>Authorization Successful</h1><p>You can close this window.</p></body></html>');
+                    clearTimeout(timeoutId);
+                    server.close();
+                    resolve(code);
+                    return;
+                }
+                res.writeHead(400, { 'Content-Type': 'text/html' });
+                res.end('<html><body><h1>Missing Code</h1></body></html>');
+            }
+            else {
+                res.writeHead(404);
+                res.end();
+            }
+        });
+        server.on('error', (err) => {
+            clearTimeout(timeoutId);
+            reject(new Error(`Callback server error: ${err.message}`));
+        });
+        server.listen(OAUTH_CALLBACK_PORT, () => {
+            // Server started, waiting for callback
+        });
+        // Timeout after 5 minutes
+        timeoutId = setTimeout(() => {
+            server.close();
+            reject(new Error('Authorization timeout'));
+        }, 5 * 60 * 1000);
+    });
+}
+// === Authorization URL ===
+export function getAuthorizationUrl(codeChallenge, clientId) {
+    const params = new URLSearchParams({
+        client_id: clientId || OAUTH_CLIENT_ID,
+        redirect_uri: OAUTH_REDIRECT_URI,
+        response_type: 'code',
+        scope: OAUTH_SCOPES.join(' '),
+        code_challenge: codeChallenge,
+        code_challenge_method: 'S256',
+        access_type: 'offline',
+        prompt: 'consent',
+    });
+    return `${OAUTH_AUTH_URL}?${params.toString()}`;
+}
+async function exchangeCodeForTokens(code, codeVerifier, credentials) {
+    const response = await fetch(OAUTH_TOKEN_URL, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+        body: new URLSearchParams({
+            client_id: credentials?.clientId || OAUTH_CLIENT_ID,
+            client_secret: credentials?.clientSecret || OAUTH_CLIENT_SECRET,
+            code,
+            code_verifier: codeVerifier,
+            grant_type: 'authorization_code',
+            redirect_uri: OAUTH_REDIRECT_URI,
+        }),
+    });
+    if (!response.ok) {
+        const error = await response.text();
+        throw new Error(`Token exchange failed: ${error}`);
+    }
+    return await response.json();
+}
+async function refreshAccessToken(refreshToken) {
+    const response = await fetch(OAUTH_TOKEN_URL, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+        body: new URLSearchParams({
+            client_id: OAUTH_CLIENT_ID,
+            client_secret: OAUTH_CLIENT_SECRET,
+            refresh_token: refreshToken,
+            grant_type: 'refresh_token',
+        }),
+    });
+    if (!response.ok) {
+        const error = await response.text();
+        throw new Error(`Token refresh failed: ${error}`);
+    }
+    return await response.json();
+}
+async function getUserInfo(accessToken) {
+    const response = await fetch(OAUTH_USERINFO_URL, {
+        headers: { Authorization: `Bearer ${accessToken}` },
+    });
+    if (!response.ok) {
+        throw new Error('Failed to get user info');
+    }
+    return await response.json();
+}
+// === Token Storage ===
+async function ensureConfigDir() {
+    try {
+        await fs.mkdir(CONFIG_DIR, { recursive: true });
+    }
+    catch {
+        // Directory already exists
+    }
+}
+export async function loadStoredTokens() {
+    try {
+        const content = await fs.readFile(TOKENS_FILE, 'utf-8');
+        return JSON.parse(content);
+    }
+    catch {
+        return null;
+    }
+}
+async function saveTokens(tokens) {
+    await ensureConfigDir();
+    await fs.writeFile(TOKENS_FILE, JSON.stringify(tokens, null, 2));
+}
+export async function deleteTokens() {
+    try {
+        await fs.unlink(TOKENS_FILE);
+    }
+    catch {
+        // File doesn't exist
+    }
+}
+// === Login Flow ===
+export async function login(credentials) {
+    const { codeVerifier, codeChallenge } = generatePKCE();
+    const authUrl = getAuthorizationUrl(codeChallenge, credentials?.clientId);
+    console.log('Opening browser for Google login...');
+    // Start server first, then open browser
+    const codePromise = startCallbackServer();
+    await openBrowser(authUrl);
+    console.log('Waiting for authorization...');
+    const code = await codePromise;
+    console.log('Exchanging code for tokens...');
+    const tokenResponse = await exchangeCodeForTokens(code, codeVerifier, credentials);
+    const userInfo = await getUserInfo(tokenResponse.access_token);
+    const tokens = {
+        accessToken: tokenResponse.access_token,
+        refreshToken: tokenResponse.refresh_token || '',
+        expiresAt: Date.now() + (tokenResponse.expires_in * 1000),
+        email: userInfo.email,
+    };
+    await saveTokens(tokens);
+    return tokens;
+}
+// === Auth Provider ===
+export class UserAuth {
+    tokens = null;
+    async getAccessToken() {
+        if (!this.tokens) {
+            this.tokens = await loadStoredTokens();
+        }
+        if (!this.tokens) {
+            throw new Error('Not logged in. Run "sheets login" first.');
+        }
+        // Refresh if expired (with 1 minute buffer)
+        if (Date.now() >= this.tokens.expiresAt - 60000) {
+            if (!this.tokens.refreshToken) {
+                throw new Error('Token expired and no refresh token. Run "sheets login" again.');
+            }
+            const tokenResponse = await refreshAccessToken(this.tokens.refreshToken);
+            this.tokens.accessToken = tokenResponse.access_token;
+            this.tokens.expiresAt = Date.now() + (tokenResponse.expires_in * 1000);
+            if (tokenResponse.refresh_token) {
+                this.tokens.refreshToken = tokenResponse.refresh_token;
+            }
+            await saveTokens(this.tokens);
+        }
+        return this.tokens.accessToken;
+    }
+}
+//# sourceMappingURL=user-auth.js.map