@databasin/mcp-client 0.2.0 → 0.2.1

package/dist/auth0-store.js

@@ -0,0 +1,78 @@
+import { createHash } from 'node:crypto';
+import { mkdir } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { DataProtectionScope, PersistenceCreator } from '@azure/msal-node-extensions';
+import lockfile from 'proper-lockfile';
+import { z } from 'zod';
+export const Auth0SessionSchema = z.object({
+    accessToken: z.string().min(1).max(65536),
+    refreshToken: z.string().min(1).max(65536).optional(),
+    expiresAt: z.number().finite().positive()
+}).strict();
+/** Separate OS-protected records and cross-process locks for each provider/client/environment. */
+export async function createAuth0Store(environment, issuer, clientId, audience) {
+    const identity = createHash('sha256').update(JSON.stringify([issuer, clientId, audience])).digest('hex');
+    const authDirectory = join(homedir(), '.databasin', 'mcp', 'auth');
+    const directory = join(authDirectory, environment, `auth0-${identity}`);
+    await mkdir(directory, { recursive: true, mode: 0o700 });
+    // The library probes a fixed validation key, shared across profiles and processes.
+    // Serialize initialization separately from session transactions to avoid one
+    // starting host deleting another host's probe before it can be read.
+    let initializationCompromised = false;
+    const releaseInitialization = await lockfile.lock(authDirectory, {
+        stale: 120000, update: 10000,
+        retries: { retries: 20, minTimeout: 100, maxTimeout: 1000 },
+        onCompromised: () => { initializationCompromised = true; }
+    });
+    let persistence;
+    try {
+        persistence = await PersistenceCreator.createPersistence({
+            cachePath: join(directory, 'cache'),
+            dataProtectionScope: DataProtectionScope.CurrentUser,
+            serviceName: 'com.databasin.mcp.auth0',
+            accountName: `${environment}:${identity}`,
+            usePlaintextFileOnLinux: false
+        });
+        if (initializationCompromised)
+            throw new Error('Credential initialization lock was lost.');
+    }
+    finally {
+        await releaseInitialization();
+    }
+    return {
+        async transact(operation) {
+            // Keep refresh-token rotation atomic across Claude, Codex, and CLI processes.
+            let compromised = false;
+            const release = await lockfile.lock(directory, {
+                stale: 120000,
+                update: 10000,
+                retries: { retries: 20, minTimeout: 100, maxTimeout: 1000 },
+                onCompromised: () => { compromised = true; }
+            });
+            try {
+                let raw;
+                try {
+                    raw = await persistence.load();
+                }
+                catch (error) {
+                    if (error.code !== 'ENOENT')
+                        throw error;
+                    raw = null;
+                }
+                const decoded = raw ? JSON.parse(raw) : null;
+                const session = decoded === null ? null : Auth0SessionSchema.parse(decoded);
+                return await operation(session, async (next) => {
+                    if (compromised)
+                        throw new Error('Credential storage lock was lost.');
+                    // Keytar rejects empty passwords. Store an OS-protected JSON null tombstone.
+                    await persistence.save(JSON.stringify(next === null ? null : Auth0SessionSchema.parse(next)));
+                });
+            }
+            finally {
+                await release();
+            }
+        }
+    };
+}
+//# sourceMappingURL=auth0-store.js.map

package/dist/auth0-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth0-store.js","sourceRoot":"","sources":["../src/auth0-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtF,OAAO,QAAQ,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IACzC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IACrD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC,MAAM,EAAE,CAAC;AAMZ,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,WAAiC,EACjC,MAAc,EACd,QAAgB,EAChB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzG,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,EAAE,SAAS,QAAQ,EAAE,CAAC,CAAC;IACxE,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,mFAAmF;IACnF,6EAA6E;IAC7E,qEAAqE;IACrE,IAAI,yBAAyB,GAAG,KAAK,CAAC;IACtC,MAAM,qBAAqB,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE;QAC/D,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;QAC5B,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE;QAC3D,aAAa,EAAE,GAAG,EAAE,GAAG,yBAAyB,GAAG,IAAI,CAAC,CAAC,CAAC;KAC3D,CAAC,CAAC;IACH,IAAI,WAAW,CAAC;IAChB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,kBAAkB,CAAC,iBAAiB,CAAC;YACvD,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC;YACnC,mBAAmB,EAAE,mBAAmB,CAAC,WAAW;YACpD,WAAW,EAAE,yBAAyB;YACtC,WAAW,EAAE,GAAG,WAAW,IAAI,QAAQ,EAAE;YACzC,uBAAuB,EAAE,KAAK;SAC/B,CAAC,CAAC;QACH,IAAI,yBAAyB;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC7F,CAAC;YAAS,CAAC;QACT,MAAM,qBAAqB,EAAE,CAAC;IAChC,CAAC;IACD,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,SAAS;YACtB,8EAA8E;YAC9E,IAAI,WAAW,GAAG,KAAK,CAAC;YACxB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE;gBAC7C,KAAK,EAAE,MAAM;gBACb,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE;gBAC3D,aAAa,EAAE,GAAG,EAAE,GAAG,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC;aAC7C,CAAC,CAAC;YACH,IAAI,CAAC;gBACH,IAAI,GAAkB,CAAC;gBACvB,IAAI,CAAC;oBAAC,GAAG,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC;gBAAC,CAAC;gBACvC,OAAO,KAAK,EAAE,CAAC;oBACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;wBAAE,MAAM,KAAK,CAAC;oBACpE,GAAG,GAAG,IAAI,CAAC;gBACb,CAAC;gBACD,MAAM,OAAO,GAAY,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACtD,MAAM,OAAO,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC5E,OAAO,MAAM,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;oBAC7C,IAAI,WAAW;wBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;oBACtE,6EAA6E;oBAC7E,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAChG,CAAC,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,MAAM,OAAO,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/auth0-token.d.ts

@@ -0,0 +1,3 @@
+import { type JWTVerifyGetKey } from 'jose';
+export declare function createAuth0TokenVerifier(issuer: string, audience: string, clientId: string, now: () => number, keys?: JWTVerifyGetKey): (token: string) => Promise<number>;
+//# sourceMappingURL=auth0-token.d.ts.map

package/dist/auth0-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth0-token.d.ts","sourceRoot":"","sources":["../src/auth0-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiC,KAAK,eAAe,EAAE,MAAM,MAAM,CAAC;AAE3E,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,MAAM,EACrE,IAAI,GAAE,eAA0G,GAC/G,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CASpC"}

package/dist/auth0-token.js

@@ -0,0 +1,13 @@
+import { createRemoteJWKSet, jwtVerify } from 'jose';
+export function createAuth0TokenVerifier(issuer, audience, clientId, now, keys = createRemoteJWKSet(new URL('.well-known/jwks.json', issuer), { timeoutDuration: 10000 })) {
+    return async (token) => {
+        const { payload } = await jwtVerify(token, keys, {
+            algorithms: ['RS256'], issuer, audience,
+            requiredClaims: ['sub', 'exp', 'iat'], currentDate: new Date(now())
+        });
+        if (!payload.sub || payload.azp !== clientId || !payload.exp)
+            throw new Error('Invalid DataBasin token.');
+        return payload.exp * 1000;
+    };
+}
+//# sourceMappingURL=auth0-token.js.map

package/dist/auth0-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth0-token.js","sourceRoot":"","sources":["../src/auth0-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAwB,MAAM,MAAM,CAAC;AAE3E,MAAM,UAAU,wBAAwB,CACtC,MAAc,EAAE,QAAgB,EAAE,QAAgB,EAAE,GAAiB,EACrE,OAAwB,kBAAkB,CAAC,IAAI,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IAEhH,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE;YAC/C,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ;YACvC,cAAc,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;SACpE,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC1G,OAAO,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;IAC5B,CAAC,CAAC;AACJ,CAAC"}

package/dist/auth0.d.ts

@@ -0,0 +1,41 @@
+import type { AssistantAuthResult, AuthStatus } from './auth.js';
+import { type Auth0Store } from './auth0-store.js';
+import type { DataBasinProfile } from './config.js';
+export interface Auth0Configuration {
+    domain: string;
+    clientId: string;
+    audience: string;
+}
+export interface Auth0Options {
+    fetch?: typeof fetch;
+    now?: () => number;
+    wait?: (ms: number, signal: AbortSignal) => Promise<void>;
+    openBrowser?: (url: string) => Promise<void>;
+    createStore?: () => Promise<Auth0Store>;
+    verify?: (token: string) => Promise<number>;
+    writePrompt?: (message: string) => void;
+}
+/** Public native-client device authorization; never requests a client secret or user password. */
+export declare class Auth0Manager {
+    #private;
+    readonly profile: DataBasinProfile;
+    readonly configuration: Auth0Configuration;
+    private options;
+    readonly issuer: string;
+    constructor(profile: DataBasinProfile, configuration: Auth0Configuration, options?: Auth0Options);
+    getAccessToken(): Promise<string>;
+    status(): Promise<AuthStatus>;
+    getLoginStatus(): Promise<AssistantAuthResult>;
+    startLogin(): Promise<AssistantAuthResult>;
+    private begin;
+    login(): Promise<AuthStatus>;
+    cancelPendingLogin(): void;
+    logout(): Promise<number>;
+    private poll;
+    private session;
+    private verify;
+    private post;
+    private withStore;
+    private result;
+}
+//# sourceMappingURL=auth0.d.ts.map

package/dist/auth0.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth0.d.ts","sourceRoot":"","sources":["../src/auth0.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAuC,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAExF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAIpD,MAAM,WAAW,kBAAkB;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE;AAC1F,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACzC;AAeD,kGAAkG;AAClG,qBAAa,YAAY;;IAWX,QAAQ,CAAC,OAAO,EAAE,gBAAgB;IAAE,QAAQ,CAAC,aAAa,EAAE,kBAAkB;IAAE,OAAO,CAAC,OAAO;IAF3G,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEH,OAAO,EAAE,gBAAgB,EAAW,aAAa,EAAE,kBAAkB,EAAU,OAAO,GAAE,YAAiB;IAWxH,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;IAqBjC,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC;IAY7B,cAAc,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAM9C,UAAU,IAAI,OAAO,CAAC,mBAAmB,CAAC;YAKlC,KAAK;IA8Bb,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC;IAalC,kBAAkB,IAAI,IAAI;IAEpB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;YASjB,IAAI;YAsBJ,OAAO;YAUP,MAAM;YAIN,IAAI;YAiBJ,SAAS;IAYvB,OAAO,CAAC,MAAM;CAIf"}

package/dist/auth0.js

@@ -0,0 +1,236 @@
+import { setTimeout as delay } from 'node:timers/promises';
+import { z } from 'zod';
+import { createAuth0Store } from './auth0-store.js';
+import { openSystemBrowser } from './browser.js';
+import { DataBasinError, LoginRequiredError } from './errors.js';
+import { createAuth0TokenVerifier } from './auth0-token.js';
+const deviceSchema = z.object({
+    device_code: z.string().min(1).max(8192),
+    user_code: z.string().regex(/^[A-Z0-9-]{4,32}$/iu),
+    verification_uri: z.string().max(4096),
+    expires_in: z.number().int().min(1).max(1800),
+    interval: z.number().int().min(1).max(60).default(5)
+});
+const tokenSchema = z.object({
+    access_token: z.string().min(1).max(65536),
+    refresh_token: z.string().min(1).max(65536).optional(),
+    token_type: z.literal('Bearer'),
+    expires_in: z.number().int().positive().max(2592000)
+});
+/** Public native-client device authorization; never requests a client secret or user password. */
+export class Auth0Manager {
+    profile;
+    configuration;
+    options;
+    #store;
+    #active;
+    #starting;
+    #failed = false;
+    #generation = 0;
+    #fetch;
+    #now;
+    #verify;
+    issuer;
+    constructor(profile, configuration, options = {}) {
+        this.profile = profile;
+        this.configuration = configuration;
+        this.options = options;
+        // Keep authentication requests pinned to the tenant, not arbitrary discovery URLs.
+        if (configuration.domain !== 'databasin.us.auth0.com' ||
+            !/^[a-zA-Z0-9_-]{16,128}$/u.test(configuration.clientId) ||
+            configuration.audience !== (profile.environment === 'prod' ? 'https://api.databasin.ai' : 'https://api.databasin-nonprod.ai'))
+            throw failure();
+        this.issuer = `https://${configuration.domain}/`;
+        this.#fetch = options.fetch ?? fetch;
+        this.#now = options.now ?? Date.now;
+        this.#verify = options.verify ?? createAuth0TokenVerifier(this.issuer, configuration.audience, configuration.clientId, this.#now);
+    }
+    async getAccessToken() {
+        return this.withStore(async (session, save) => {
+            if (!session)
+                throw new LoginRequiredError(this.profile.environment);
+            if (session.expiresAt > this.#now() + 60000) {
+                await this.verify(session.accessToken);
+                return session.accessToken;
+            }
+            if (!session.refreshToken)
+                throw new LoginRequiredError(this.profile.environment);
+            const response = await this.post('oauth/token', {
+                grant_type: 'refresh_token', refresh_token: session.refreshToken
+            });
+            if (!response.ok) {
+                if (response.body.error === 'invalid_grant')
+                    await save(null);
+                throw failure();
+            }
+            const next = await this.session(response.body, session.refreshToken);
+            await save(next);
+            return next.accessToken;
+        });
+    }
+    async status() {
+        try {
+            await this.getAccessToken();
+            return { authenticated: true, environment: this.profile.environment };
+        }
+        catch (error) {
+            if (error instanceof DataBasinError && error.code === 'UNAUTHENTICATED' && !error.message.includes('storage')) {
+                return { authenticated: false, environment: this.profile.environment };
+            }
+            throw error;
+        }
+    }
+    async getLoginStatus() {
+        if (this.#active)
+            return this.#active.result;
+        if ((await this.status()).authenticated)
+            return this.result('authenticated');
+        return this.result(this.#failed ? 'failed' : 'not_authenticated');
+    }
+    async startLogin() {
+        this.#starting ??= this.begin().finally(() => { this.#starting = undefined; });
+        return this.#starting;
+    }
+    async begin() {
+        const generation = this.#generation;
+        const existing = await this.getLoginStatus();
+        if (existing.status === 'pending' || existing.status === 'authenticated')
+            return existing;
+        this.#failed = false;
+        const response = await this.post('oauth/device/code', {
+            audience: this.configuration.audience, scope: 'openid profile email offline_access'
+        });
+        if (!response.ok || generation !== this.#generation)
+            throw failure();
+        const parsed = deviceSchema.safeParse(response.body);
+        if (!parsed.success)
+            throw failure();
+        const device = parsed.data;
+        const loginUrl = `${this.issuer}activate`;
+        if (device.verification_uri !== loginUrl)
+            throw failure();
+        const expiresAt = this.#now() + device.expires_in * 1000;
+        const result = {
+            status: 'pending', environment: this.profile.environment, loginUrl,
+            userCode: device.user_code, expiresAt: new Date(expiresAt).toISOString(),
+            message: 'Open the DataBasin sign-in page and enter the user code. Sign in there, never in chat.'
+        };
+        const abort = new AbortController();
+        const active = { result, abort, done: Promise.resolve({ authenticated: false, environment: this.profile.environment }) };
+        this.#active = active;
+        active.done = this.poll(device.device_code, device.interval, expiresAt, abort.signal)
+            .catch(() => { this.#failed = true; throw failure(); })
+            .finally(() => { if (this.#active === active)
+            this.#active = undefined; });
+        void active.done.catch(() => undefined);
+        return result;
+    }
+    async login() {
+        const result = await this.startLogin();
+        if (result.status === 'authenticated')
+            return this.status();
+        const active = this.#active;
+        if (result.status !== 'pending' || !result.loginUrl || !active)
+            throw failure();
+        (this.options.writePrompt ?? ((message) => process.stderr.write(message)))(`Open ${result.loginUrl} and enter code ${result.userCode}.\n`);
+        // A missing desktop opener does not invalidate the cross-device login instructions.
+        await (this.options.openBrowser ?? openSystemBrowser)(result.loginUrl).catch(() => undefined);
+        return active.done;
+    }
+    cancelPendingLogin() { this.#generation += 1; this.#active?.abort.abort(); }
+    async logout() {
+        const pending = this.#active;
+        this.cancelPendingLogin();
+        await this.#starting?.catch(() => undefined);
+        await pending?.done.catch(() => undefined);
+        this.#failed = false;
+        return this.withStore(async (session, save) => { await save(null); return session ? 1 : 0; });
+    }
+    async poll(deviceCode, interval, expiresAt, signal) {
+        while (!signal.aborted && this.#now() < expiresAt) {
+            await (this.options.wait ?? ((ms, abort) => delay(ms, undefined, { signal: abort })))(interval * 1000, signal);
+            if (signal.aborted || this.#now() >= expiresAt)
+                throw failure();
+            const response = await this.post('oauth/token', {
+                grant_type: 'urn:ietf:params:oauth:grant-type:device_code', device_code: deviceCode
+            }, signal);
+            if (response.ok) {
+                const session = await this.session(response.body);
+                if (signal.aborted || this.#now() >= expiresAt)
+                    throw failure();
+                await this.withStore(async (_previous, save) => {
+                    if (signal.aborted)
+                        throw failure();
+                    await save(session);
+                });
+                return { authenticated: true, environment: this.profile.environment };
+            }
+            if (response.body.error === 'slow_down') {
+                interval += 5;
+                continue;
+            }
+            if (response.body.error !== 'authorization_pending')
+                throw failure();
+        }
+        throw failure();
+    }
+    async session(body, previousRefreshToken) {
+        const parsed = tokenSchema.safeParse(body);
+        if (!parsed.success)
+            throw failure();
+        const token = parsed.data;
+        const expiresAt = Math.min(await this.verify(token.access_token), this.#now() + token.expires_in * 1000);
+        if (expiresAt <= this.#now())
+            throw failure();
+        const refreshToken = token.refresh_token ?? previousRefreshToken;
+        return { accessToken: token.access_token, expiresAt, ...(refreshToken ? { refreshToken } : {}) };
+    }
+    async verify(token) {
+        try {
+            return await this.#verify(token);
+        }
+        catch {
+            throw failure();
+        }
+    }
+    async post(path, fields, signal) {
+        try {
+            const timeout = AbortSignal.timeout(15000);
+            const response = await this.#fetch(new URL(path, this.issuer), {
+                method: 'POST', redirect: 'error',
+                headers: { 'content-type': 'application/x-www-form-urlencoded' },
+                body: new URLSearchParams({ client_id: this.configuration.clientId, ...fields }),
+                signal: signal ? AbortSignal.any([signal, timeout]) : timeout
+            });
+            const text = await response.text();
+            if (text.length > 196608)
+                throw failure();
+            const body = JSON.parse(text);
+            if (!body || typeof body !== 'object' || Array.isArray(body))
+                throw failure();
+            return { ok: response.ok, body: body };
+        }
+        catch {
+            throw failure();
+        }
+    }
+    async withStore(operation) {
+        try {
+            this.#store ??= (this.options.createStore?.() ?? createAuth0Store(this.profile.environment, this.issuer, this.configuration.clientId, this.configuration.audience)).catch((error) => { this.#store = undefined; throw error; });
+            return await (await this.#store).transact(operation);
+        }
+        catch (error) {
+            if (error instanceof DataBasinError)
+                throw error;
+            throw new DataBasinError('UNAUTHENTICATED', 'Secure DataBasin credential storage is unavailable. Unlock the system keyring and try again.');
+        }
+    }
+    result(status) {
+        return { status, environment: this.profile.environment, loginUrl: null,
+            message: status === 'authenticated' ? 'DataBasin sign-in is complete.' : 'Call databasin_login to sign in to DataBasin.' };
+    }
+}
+function failure() {
+    return new DataBasinError('UNAUTHENTICATED', 'DataBasin Auth0 sign-in did not complete. Sign in again.');
+}
+//# sourceMappingURL=auth0.js.map

package/dist/auth0.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth0.js","sourceRoot":"","sources":["../src/auth0.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAsC,MAAM,kBAAkB,CAAC;AACxF,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAY5D,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC;IAClD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IAC7C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;CACrD,CAAC,CAAC;AACH,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAC1C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IACtD,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;CACrD,CAAC,CAAC;AAEH,kGAAkG;AAClG,MAAM,OAAO,YAAY;IAWF;IAAoC;IAA2C;IAVpG,MAAM,CAAkC;IACxC,OAAO,CAAiG;IACxG,SAAS,CAA2C;IACpD,OAAO,GAAG,KAAK,CAAC;IAChB,WAAW,GAAG,CAAC,CAAC;IAChB,MAAM,CAAe;IACrB,IAAI,CAAe;IACnB,OAAO,CAAqC;IACnC,MAAM,CAAS;IAExB,YAAqB,OAAyB,EAAW,aAAiC,EAAU,UAAwB,EAAE;QAAzG,YAAO,GAAP,OAAO,CAAkB;QAAW,kBAAa,GAAb,aAAa,CAAoB;QAAU,YAAO,GAAP,OAAO,CAAmB;QAC5H,mFAAmF;QACnF,IAAI,aAAa,CAAC,MAAM,KAAK,wBAAwB;YACnD,CAAC,0BAA0B,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;YACxD,aAAa,CAAC,QAAQ,KAAK,CAAC,OAAO,CAAC,WAAW,KAAK,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,kCAAkC,CAAC;YAAE,MAAM,OAAO,EAAE,CAAC;QACjJ,IAAI,CAAC,MAAM,GAAG,WAAW,aAAa,CAAC,MAAM,GAAG,CAAC;QACjD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACpC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACpI,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YAC5C,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACrE,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC;gBAC5C,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;gBACvC,OAAO,OAAO,CAAC,WAAW,CAAC;YAC7B,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,YAAY;gBAAE,MAAM,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAClF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE;gBAC9C,UAAU,EAAE,eAAe,EAAE,aAAa,EAAE,OAAO,CAAC,YAAY;aACjE,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,eAAe;oBAAE,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC9D,MAAM,OAAO,EAAE,CAAC;YAClB,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;YACrE,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,OAAO,IAAI,CAAC,WAAW,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5B,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACxE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC9G,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACzE,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAC7C,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,KAAK;QACjB,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC7C,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,eAAe;YAAE,OAAO,QAAQ,CAAC;QAC1F,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE;YACpD,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,EAAE,qCAAqC;SACpF,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,UAAU,KAAK,IAAI,CAAC,WAAW;YAAE,MAAM,OAAO,EAAE,CAAC;QACrE,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,OAAO,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC;QAC3B,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,MAAM,UAAU,CAAC;QAC1C,IAAI,MAAM,CAAC,gBAAgB,KAAK,QAAQ;YAAE,MAAM,OAAO,EAAE,CAAC;QAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;QACzD,MAAM,MAAM,GAAwB;YAClC,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ;YAClE,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YACxE,OAAO,EAAE,wFAAwF;SAClG,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QACzH,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC;aAClF,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;aACtD,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM;YAAE,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7E,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACxC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACvC,IAAI,MAAM,CAAC,MAAM,KAAK,eAAe;YAAE,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM;YAAE,MAAM,OAAO,EAAE,CAAC;QAChF,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CACxE,QAAQ,MAAM,CAAC,QAAQ,mBAAmB,MAAM,CAAC,QAAQ,KAAK,CAC/D,CAAC;QACF,oFAAoF;QACpF,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,iBAAiB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9F,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,kBAAkB,KAAW,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAElF,KAAK,CAAC,MAAM;QACV,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1B,MAAM,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChG,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,UAAkB,EAAE,QAAgB,EAAE,SAAiB,EAAE,MAAmB;QAC7F,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC;YAClD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;YAC/G,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,SAAS;gBAAE,MAAM,OAAO,EAAE,CAAC;YAChE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE;gBAC9C,UAAU,EAAE,8CAA8C,EAAE,WAAW,EAAE,UAAU;aACpF,EAAE,MAAM,CAAC,CAAC;YACX,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAClD,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,SAAS;oBAAE,MAAM,OAAO,EAAE,CAAC;gBAChE,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;oBAC7C,IAAI,MAAM,CAAC,OAAO;wBAAE,MAAM,OAAO,EAAE,CAAC;oBACpC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtB,CAAC,CAAC,CAAC;gBACH,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACxE,CAAC;YACD,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;gBAAC,QAAQ,IAAI,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YACrE,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,uBAAuB;gBAAE,MAAM,OAAO,EAAE,CAAC;QACvE,CAAC;QACD,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,IAAa,EAAE,oBAA6B;QAChE,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,OAAO,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;QACzG,IAAI,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE;YAAE,MAAM,OAAO,EAAE,CAAC;QAC9C,MAAM,YAAY,GAAG,KAAK,CAAC,aAAa,IAAI,oBAAoB,CAAC;QACjE,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,YAAY,EAAE,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACnG,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,KAAa;QAChC,IAAI,CAAC;YAAC,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,OAAO,EAAE,CAAC;QAAC,CAAC;IACtE,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,MAA8B,EAAE,MAAoB;QACnF,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC7D,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO;gBACjC,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI,EAAE,IAAI,eAAe,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;gBAChF,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO;aAC9D,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM;gBAAE,MAAM,OAAO,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,MAAM,OAAO,EAAE,CAAC;YAC9E,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAA+B,EAAE,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,OAAO,EAAE,CAAC;QAAC,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,SAAS,CAAI,SAA2G;QACpI,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,IAAI,gBAAgB,CAC/D,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAChG,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACxE,OAAO,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,cAAc;gBAAE,MAAM,KAAK,CAAC;YACjD,MAAM,IAAI,cAAc,CAAC,iBAAiB,EAAE,8FAA8F,CAAC,CAAC;QAC9I,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,MAAwD;QACrE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI;YACpE,OAAO,EAAE,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,+CAA+C,EAAE,CAAC;IAC/H,CAAC;CACF;AAED,SAAS,OAAO;IACd,OAAO,IAAI,cAAc,CAAC,iBAAiB,EAAE,0DAA0D,CAAC,CAAC;AAC3G,CAAC"}

package/dist/browser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AAIA,UAAU,YAAY;IACpB,IAAI,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,YAAY,CAAC;IACnE,KAAK,IAAI,IAAI,CAAC;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE;QACxD,QAAQ,EAAE,IAAI,CAAC;QACf,KAAK,EAAE,QAAQ,CAAC;QAChB,WAAW,EAAE,IAAI,CAAC;QAClB,KAAK,EAAE,KAAK,CAAC;KACd,GAAG,YAAY,CAAC;IACjB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,YAAY,GAAE,mBAA0C,GACvD,OAAO,CAAC,IAAI,CAAC,CAmBf;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAM7G"}
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AAIA,UAAU,YAAY;IACpB,IAAI,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,YAAY,CAAC;IACnE,KAAK,IAAI,IAAI,CAAC;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE;QACxD,QAAQ,EAAE,IAAI,CAAC;QACf,KAAK,EAAE,QAAQ,CAAC;QAChB,WAAW,EAAE,IAAI,CAAC;QAClB,KAAK,EAAE,KAAK,CAAC;KACd,GAAG,YAAY,CAAC;IACjB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,YAAY,GAAE,mBAA0C,GACvD,OAAO,CAAC,IAAI,CAAC,CAoBf;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAM7G"}

package/dist/browser.js

@@ -1,7 +1,8 @@
 import { spawn } from 'node:child_process';
-import { validateInteractiveLoginUrl } from './login-url.js';
+import { validateInteractiveLoginUrl, validateAuth0LoginUrl } from './login-url.js';
 export async function openSystemBrowser(rawUrl, dependencies = DEFAULT_DEPENDENCIES) {
-    const safeUrl = validateInteractiveLoginUrl(rawUrl);
+    const safeUrl = rawUrl === 'https://databasin.us.auth0.com/activate'
+        ? validateAuth0LoginUrl(rawUrl) : validateInteractiveLoginUrl(rawUrl);
     const command = browserCommand(safeUrl, dependencies.platform);
     await new Promise((resolve) => {
         const child = dependencies.spawnProcess(command.executable, command.args, {

package/dist/browser.js.map

@@ -1 +1 @@
-{"version":3,"file":"browser.js","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAkB7D,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,eAAoC,oBAAoB;IAExD,MAAM,OAAO,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC/D,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE;YACxE,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,QAAQ;YACf,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,YAAY,CAAC,UAAU,CAAC,2CAA2C,OAAO,IAAI,CAAC,CAAC;YAChF,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,QAAyB;IACnE,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IACtE,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,6BAA6B,EAAE,GAAG,CAAC,EAAE,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,oBAAoB,GAAwB,MAAM,CAAC,MAAM,CAAC;IAC9D,QAAQ,EAAE,OAAO,CAAC,QAAQ;IAC1B,YAAY,EAAE,CACZ,UAAkB,EAClB,IAAc,EACd,OAA6E,EAC7E,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC;IACrC,UAAU,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;CAC/D,CAAC,CAAC"}
+{"version":3,"file":"browser.js","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAkBpF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,eAAoC,oBAAoB;IAExD,MAAM,OAAO,GAAG,MAAM,KAAK,yCAAyC;QAClE,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC/D,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE;YACxE,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,QAAQ;YACf,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,YAAY,CAAC,UAAU,CAAC,2CAA2C,OAAO,IAAI,CAAC,CAAC;YAChF,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,QAAyB;IACnE,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IACtE,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,6BAA6B,EAAE,GAAG,CAAC,EAAE,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,oBAAoB,GAAwB,MAAM,CAAC,MAAM,CAAC;IAC9D,QAAQ,EAAE,OAAO,CAAC,QAAQ;IAC1B,YAAY,EAAE,CACZ,UAAkB,EAClB,IAAc,EACd,OAA6E,EAC7E,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC;IACrC,UAAU,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;CAC/D,CAAC,CAAC"}

package/dist/cli.js

@@ -161,7 +161,7 @@ Usage:
 
 Commands:
   serve       Start the stdio MCP server (default)
-  login       Open Microsoft sign-in in the system browser
+  login       Open DataBasin sign-in in the system browser
   logout      Remove the locally cached DataBasin session
   status      Show whether a session is available
   doctor      Check this host without printing account identity or credentials

package/dist/config.d.ts

@@ -6,6 +6,11 @@ export interface DataBasinProfile {
     tenantId: string;
     clientId: string;
     scopes: readonly string[];
+    auth0?: {
+        readonly domain: string;
+        readonly clientId: string;
+        readonly audience: string;
+    };
 }
 export declare function resolveEnvironment(value: string | undefined): DataBasinEnvironment;
 export declare function getProfile(environment?: DataBasinEnvironment): DataBasinProfile;

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,IAAI,CAAC;AAEjD,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,oBAAoB,CAAC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3B;AAiCD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,oBAAoB,CAOlF;AAED,wBAAgB,UAAU,CAAC,WAAW,GAAE,oBAA6B,GAAG,gBAAgB,CAEvF;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAE9D;AAED,eAAO,MAAM,sBAAsB,yBAAyC,CAAC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,IAAI,CAAC;AAEjD,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,oBAAoB,CAAC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3F;AA2CD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,oBAAoB,CAOlF;AAED,wBAAgB,UAAU,CAAC,WAAW,GAAE,oBAA6B,GAAG,gBAAgB,CAEvF;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAE9D;AAED,eAAO,MAAM,sBAAsB,yBAAyC,CAAC"}

package/dist/config.js

@@ -6,7 +6,12 @@ const PROFILES = Object.freeze({
         apiBaseUrl: 'https://databasin.cloud',
         tenantId: TENANT_ID,
         clientId: '74125794-c409-483c-97e9-13194e58abb3',
-        scopes: Object.freeze(['api://2170da8e-41ff-422f-a759-2718336f40d7/Databasin.API'])
+        scopes: Object.freeze(['api://2170da8e-41ff-422f-a759-2718336f40d7/Databasin.API']),
+        auth0: Object.freeze({
+            domain: 'databasin.us.auth0.com',
+            clientId: '3qLF66u5JlDlSmCjHEsqJqVewbhtCayT',
+            audience: 'https://api.databasin.ai'
+        })
     }),
     np: Object.freeze({
         environment: 'np',
@@ -14,7 +19,12 @@ const PROFILES = Object.freeze({
         apiBaseUrl: 'https://databasin-ui-np.grayriver-813df174.centralus.azurecontainerapps.io',
         tenantId: TENANT_ID,
         clientId: '68f0487f-d03d-41dd-96df-3c3fbaf1f112',
-        scopes: Object.freeze(['api://16b4e522-d051-4838-a0d7-75d246b8090c/Databasin.API'])
+        scopes: Object.freeze(['api://16b4e522-d051-4838-a0d7-75d246b8090c/Databasin.API']),
+        auth0: Object.freeze({
+            domain: 'databasin.us.auth0.com',
+            clientId: '3qLF66u5JlDlSmCjHEsqJqVewbhtCayT',
+            audience: 'https://api.databasin-nonprod.ai'
+        })
     })
 });
 const ENVIRONMENT_ALIASES = Object.freeze({

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAWA,MAAM,SAAS,GAAG,sCAAsC,CAAC;AAEzD,MAAM,QAAQ,GAA6D,MAAM,CAAC,MAAM,CAAC;IACvF,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM;QACnB,KAAK,EAAE,YAAY;QACnB,UAAU,EAAE,yBAAyB;QACrC,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,sCAAsC;QAChD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,0DAA0D,CAAC,CAAC;KACpF,CAAC;IACF,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC;QAChB,WAAW,EAAE,IAAI;QACjB,KAAK,EAAE,gBAAgB;QACvB,UAAU,EAAE,4EAA4E;QACxF,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,sCAAsC;QAChD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,0DAA0D,CAAC,CAAC;KACpF,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAmD,MAAM,CAAC,MAAM,CAAC;IACxF,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,MAAM;IAClB,EAAE,EAAE,IAAI;IACR,OAAO,EAAE,IAAI;IACb,gBAAgB,EAAE,IAAI;IACtB,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,IAAI;CACd,CAAC,CAAC;AAEH,MAAM,UAAU,kBAAkB,CAAC,KAAyB;IAC1D,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,WAAW,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACpE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,oBAAoB,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,cAAoC,MAAM;IACnE,OAAO,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAyB;IACpD,OAAO,qCAAqC,OAAO,CAAC,QAAQ,EAAE,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,IAAI,CAAU,CAAC,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAYA,MAAM,SAAS,GAAG,sCAAsC,CAAC;AAEzD,MAAM,QAAQ,GAA6D,MAAM,CAAC,MAAM,CAAC;IACvF,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM;QACnB,KAAK,EAAE,YAAY;QACnB,UAAU,EAAE,yBAAyB;QACrC,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,sCAAsC;QAChD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,0DAA0D,CAAC,CAAC;QACnF,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,wBAAwB;YAChC,QAAQ,EAAE,kCAAkC;YAC5C,QAAQ,EAAE,0BAA0B;SACrC,CAAC;KACH,CAAC;IACF,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC;QAChB,WAAW,EAAE,IAAI;QACjB,KAAK,EAAE,gBAAgB;QACvB,UAAU,EAAE,4EAA4E;QACxF,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,sCAAsC;QAChD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,0DAA0D,CAAC,CAAC;QACnF,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,wBAAwB;YAChC,QAAQ,EAAE,kCAAkC;YAC5C,QAAQ,EAAE,kCAAkC;SAC7C,CAAC;KACH,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAmD,MAAM,CAAC,MAAM,CAAC;IACxF,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,MAAM;IAClB,EAAE,EAAE,IAAI;IACR,OAAO,EAAE,IAAI;IACb,gBAAgB,EAAE,IAAI;IACtB,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,IAAI;CACd,CAAC,CAAC;AAEH,MAAM,UAAU,kBAAkB,CAAC,KAAyB;IAC1D,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,WAAW,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACpE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,oBAAoB,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,cAAoC,MAAM;IACnE,OAAO,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAyB;IACpD,OAAO,qCAAqC,OAAO,CAAC,QAAQ,EAAE,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,IAAI,CAAU,CAAC,CAAC"}

package/dist/entra-auth.d.ts

@@ -0,0 +1,84 @@
+import { type AccountInfo, type AuthenticationResult } from '@azure/msal-node';
+import { type DataBasinEnvironment, type DataBasinProfile } from './config.js';
+import { type RawDeviceCodeResponse } from './login-url.js';
+export interface AuthStatus {
+    authenticated: boolean;
+    environment: DataBasinEnvironment;
+    username?: string;
+}
+export type AssistantAuthState = 'authenticated' | 'pending' | 'not_authenticated' | 'failed';
+interface AssistantAuthResultBase {
+    environment: DataBasinEnvironment;
+    message: string;
+}
+interface PendingAssistantAuthResult extends AssistantAuthResultBase {
+    status: 'pending';
+    loginUrl: string | null;
+    userCode?: string;
+    expiresAt?: string;
+}
+interface SettledAssistantAuthResult extends AssistantAuthResultBase {
+    status: Exclude<AssistantAuthState, 'pending'>;
+    loginUrl: null;
+    userCode?: never;
+    expiresAt?: never;
+}
+export type AssistantAuthResult = PendingAssistantAuthResult | SettledAssistantAuthResult;
+export interface PublicClientLike {
+    getAllAccounts(): Promise<AccountInfo[]>;
+    acquireTokenSilent(request: {
+        account: AccountInfo;
+        scopes: string[];
+    }): Promise<AuthenticationResult>;
+    acquireTokenInteractive(request: {
+        scopes: string[];
+        openBrowser: (url: string) => Promise<void>;
+        prompt?: string;
+        successTemplate?: string;
+        errorTemplate?: string;
+    }): Promise<AuthenticationResult>;
+    acquireTokenByDeviceCode(request: {
+        scopes: string[];
+        timeout?: number;
+        cancel?: boolean;
+        deviceCodeCallback: (response: RawDeviceCodeResponse) => void;
+    }): Promise<AuthenticationResult | null>;
+    signOut(request: {
+        account: AccountInfo;
+    }): Promise<void>;
+}
+export interface AuthManagerOptions {
+    createClient?: () => Promise<PublicClientLike>;
+    openBrowser?: (url: string) => Promise<void>;
+    now?: () => number;
+}
+export declare class EntraAuthManager {
+    readonly profile: DataBasinProfile;
+    private clientPromise;
+    private tokenPromise;
+    private activeLogin;
+    private lastLoginFailed;
+    private readonly createClient;
+    private readonly openBrowser;
+    private readonly now;
+    constructor(profile: DataBasinProfile, options?: AuthManagerOptions);
+    getAccessToken(): Promise<string>;
+    login(): Promise<AuthStatus>;
+    startLogin(): Promise<AssistantAuthResult>;
+    cancelPendingLogin(): void;
+    getLoginStatus(): Promise<AssistantAuthResult>;
+    private pendingAssistantResult;
+    private cachedAssistantResult;
+    private failedAssistantResult;
+    private beginDeviceLogin;
+    private performDeviceLogin;
+    private performInteractiveLogin;
+    private completeLogin;
+    private assistantResult;
+    logout(): Promise<number>;
+    status(): Promise<AuthStatus>;
+    private acquireSilent;
+    private client;
+}
+export { createSecurePublicClient } from './credential-store.js';
+//# sourceMappingURL=entra-auth.d.ts.map

package/dist/entra-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entra-auth.d.ts","sourceRoot":"","sources":["../src/entra-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,oBAAoB,EAC1B,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,KAAK,oBAAoB,EAAE,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAG/E,OAAO,EAGL,KAAK,qBAAqB,EAE3B,MAAM,gBAAgB,CAAC;AAGxB,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,OAAO,CAAC;IACvB,WAAW,EAAE,oBAAoB,CAAC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,kBAAkB,GAAG,eAAe,GAAG,SAAS,GAAG,mBAAmB,GAAG,QAAQ,CAAC;AAE9F,UAAU,uBAAuB;IAC/B,WAAW,EAAE,oBAAoB,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;CACjB;AACD,UAAU,0BAA2B,SAAQ,uBAAuB;IAClE,MAAM,EAAE,SAAS,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AACD,UAAU,0BAA2B,SAAQ,uBAAuB;IAClE,MAAM,EAAE,OAAO,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;IAC/C,QAAQ,EAAE,IAAI,CAAC;IACf,QAAQ,CAAC,EAAE,KAAK,CAAC;IACjB,SAAS,CAAC,EAAE,KAAK,CAAC;CACnB;AAED,MAAM,MAAM,mBAAmB,GAAG,0BAA0B,GAAG,0BAA0B,CAAC;AAE1F,MAAM,WAAW,gBAAgB;IAC/B,cAAc,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACzC,kBAAkB,CAAC,OAAO,EAAE;QAC1B,OAAO,EAAE,WAAW,CAAC;QACrB,MAAM,EAAE,MAAM,EAAE,CAAC;KAClB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAClC,uBAAuB,CAAC,OAAO,EAAE;QAC/B,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAClC,wBAAwB,CAAC,OAAO,EAAE;QAChC,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,kBAAkB,EAAE,CAAC,QAAQ,EAAE,qBAAqB,KAAK,IAAI,CAAC;KAC/D,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IACzC,OAAO,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/C,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAUD,qBAAa,gBAAgB;IAUzB,QAAQ,CAAC,OAAO,EAAE,gBAAgB;IATpC,OAAO,CAAC,aAAa,CAAwC;IAC7D,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,WAAW,CAA0B;IAC7C,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAkC;IAC/D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiC;IAC7D,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;gBAGxB,OAAO,EAAE,gBAAgB,EAClC,OAAO,GAAE,kBAAuB;IAO5B,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;IAOjC,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC;IAI5B,UAAU,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAoChD,kBAAkB,IAAI,IAAI;IAIpB,cAAc,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAYpD,OAAO,CAAC,sBAAsB;YAahB,qBAAqB;IAgBnC,OAAO,CAAC,qBAAqB;IAQ7B,OAAO,CAAC,gBAAgB;YAsCV,kBAAkB;YAqBlB,uBAAuB;YAiBvB,aAAa;IAoB3B,OAAO,CAAC,eAAe;IAoBjB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAOzB,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC;YAQrB,aAAa;IAe3B,OAAO,CAAC,MAAM;CAUf;AAcD,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC"}