@deploily/deploily-cli 0.1.0

package/.devcontainer/devcontainer.json

@@ -0,0 +1,25 @@
+// For format details, see https://aka.ms/devcontainer.json. For config options, see the
+// README at: https://github.com/devcontainers/templates/tree/main/src/typescript-node
+{
+	"name": "Node.js & TypeScript",
+	// Use Docker Compose so we can bring up the Keycloak service alongside the dev container.
+	"dockerComposeFile": ["docker-compose.yml"],
+	// The service in the compose files that VS Code should open a shell in.
+	"service": "workspace",
+	// Folder inside the container that will be used as the workspace.
+	"workspaceFolder": "/workspace",
+	// Ensure the external Keycloak service is started when the devcontainer is created.
+	// "runServices": ["keycloak"],
+
+	// Features to add to the dev container. More info: https://containers.dev/features.
+	// "features": {},
+
+	// Use 'postCreateCommand' to run commands after the container is created.
+	// "postCreateCommand": "yarn install",
+
+	// Configure tool-specific properties.
+	// "customizations": {},
+
+	// Uncomment to connect as root instead. More info: https://aka.ms/dev-containers-non-root.
+	// "remoteUser": "root"
+}

package/.devcontainer/docker-compose.yml

@@ -0,0 +1,18 @@
+version: '3.8'
+services:
+  workspace:
+    image: mcr.microsoft.com/devcontainers/typescript-node:5-24-trixie
+    # Mount the repository root into the container's workspace folder
+    volumes:
+      - ..:/workspace:cached
+    # Keep the container running; VS Code will attach a shell/session.
+    command: tail -f /dev/null
+    tty: true
+  keycloak:
+    image: quay.io/keycloak/keycloak:26.6.3
+    environment:
+      - KC_BOOTSTRAP_ADMIN_USERNAME=admin
+      - KC_BOOTSTRAP_ADMIN_PASSWORD=admin
+    command: start-dev
+    ports:
+      - "8080:8080"

package/.env.example

@@ -0,0 +1,8 @@
+KEYCLOAK_REALM_URL="http://localhost:8080/realms/deploily"
+KEYCLOAK_CLIENT_ID="deploily"
+KEYCLOAK_CLIENT_SECRET="your-client-secret"
+KEYCLOAK_REDIRECT_URI="http://localhost:8976/callback"
+KEYCLOAK_TOKEN_ENDPOINT="http://localhost:8080/realms/deploily/protocol/openid-connect/token"
+KEYCLOAK_AUTH_ENDPOINT="http://localhost:8080/realms/deploily/protocol/openid-connect/auth"
+KEYCLOAK_LOGOUT_ENDPOINT="http://localhost:8080/realms/deploily/protocol/openid-connect/logout"
+KEYCLOAK_USERINFO_ENDPOINT="http://localhost:8080/realms/deploily/protocol/openid-connect/userinfo"

package/.github/dependabot.yml

@@ -0,0 +1,12 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for more information:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+# https://containers.dev/guide/dependabot
+
+version: 2
+updates:
+ - package-ecosystem: "devcontainers"
+   directory: "/"
+   schedule:
+     interval: weekly

package/.github/workflows/publish.yml

@@ -0,0 +1,39 @@
+name: Publish to npm
+
+on:
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    if: github.repository_owner == 'deploily'
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 18
+          registry-url: "https://registry.npmjs.org/"
+
+      - name: Install dependencies
+        run: npm i
+
+      - name: Authenticate with npm
+        run: |
+          echo "//registry.npmjs.org/:_authToken=${NPM_SECRET_TOKEN}"
+        env:
+          NPM_SECRET_TOKEN: ${{ secrets.NPM_SECRET_TOKEN }}
+
+      - name: Check npm authentication
+        run: npm whoami
+        env:
+          NPM_SECRET_TOKEN: ${{ secrets.NPM_SECRET_TOKEN }}
+
+      - name: Publish package
+        run: npm publish --access public

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,105 @@
+# deploily-cli
+
+Deploily CLI is a native Node.js command-line tool for authenticating with a Keycloak-backed Deploily environment.
+
+## Features
+
+- OAuth2 login flow with PKCE
+- Local callback server for browser-based authentication
+- Secure credential storage via `keytar` with file fallback
+- `login`, `logout`, and `whoami` commands
+- TypeScript + native ESM project setup
+
+## Requirements
+
+- Node.js 20+ recommended
+- pnpm
+- A running Keycloak instance
+
+## Quick Start
+
+1. Install dependencies:
+
+   ```bash
+   pnpm install
+   ```
+
+2. Start Keycloak with Docker Compose:
+
+   ```bash
+   docker compose up -d
+   ```
+
+3. Navigate to `http://localhost:8080` and log in with the default admin credentials (`admin` / `admin`)
+   - Create a new realm
+   - Create a new client and add `http://localhost:8976/callback` as a valid redirect URI
+   - Create a new user and assign them to the realm
+
+4. Configure your `.env` file with the Keycloak endpoints and client details
+
+5. Build and run the CLI:
+
+   ```bash
+   pnpm build
+   node dist/index.js --help
+   ```
+
+   To invoke it as a shell command named `deploily`, link the current package globally and ensure pnpm's global bin directory is on your `PATH`:
+
+   ```bash
+   export PATH="$HOME/.local/share/pnpm/bin:$PATH"
+   pnpm setup
+   pnpm link --global .
+   deploily --help
+   ```
+
+   If the `deploily` command still is not found, open a new shell session after adding the PATH export or run the CLI directly with:
+
+   ```bash
+   node dist/index.js --help
+   ```
+
+## Docker Compose
+
+The repository includes a simple local Keycloak setup in [docker-compose.yml](docker-compose.yml). This starts Keycloak with the default admin credentials `admin` / `admin` on port `8080`.
+
+## Commands
+
+```bash
+deploily login
+deploily logout
+deploily whoami
+deploily --help
+deploily --version
+```
+
+### `login`
+
+Opens your browser, starts the local callback server, and completes the OAuth2 PKCE flow against Keycloak.
+
+### `logout`
+
+Clears locally stored credentials and attempts to log out from Keycloak.
+
+### `whoami`
+
+Shows the current authenticated user when credentials are available.
+
+## Authentication Flow
+
+1. The CLI generates a PKCE code verifier, code challenge, and state value.
+2. It opens the Keycloak authorization URL in your browser.
+3. Keycloak redirects back to the local callback server on port `8976`.
+4. The CLI exchanges the authorization code for tokens.
+5. User info is fetched from the Keycloak userinfo endpoint.
+6. Credentials are stored with `keytar`, or in `~/.config/deploily/config.json` if `keytar` is unavailable.
+
+## Project Structure
+
+- `src/index.ts` - CLI entry point and command routing
+- `src/commands/` - CLI command handlers
+- `src/auth/` - authentication service and callback server
+- `src/config/` - configuration constants
+- `src/storage/` - credential persistence
+- `src/utils/` - PKCE helpers
+- `src/types/` - shared TypeScript types

package/dist/auth/callback.d.ts

@@ -0,0 +1,3 @@
+import { CallbackResult } from "../types/index.js";
+export declare function startCallbackServer(expectedState: string): Promise<CallbackResult>;
+//# sourceMappingURL=callback.d.ts.map

package/dist/auth/callback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"callback.d.ts","sourceRoot":"","sources":["../../src/auth/callback.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAGlD,wBAAsB,mBAAmB,CACvC,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,cAAc,CAAC,CA2IzB"}

package/dist/auth/callback.js

@@ -0,0 +1,143 @@
+import http from "http";
+import { URL } from "url";
+import { AUTH_CONFIG } from "../config/constants.js";
+// Start local HTTP server to listen for OAuth callback
+export async function startCallbackServer(expectedState) {
+    return new Promise((resolve, reject) => {
+        const server = http.createServer((req, res) => {
+            if (!req.url) {
+                res.writeHead(400);
+                res.end("Bad request");
+                return;
+            }
+            const url = new URL(req.url, `http://localhost:${AUTH_CONFIG.CALLBACK_PORT}`);
+            const code = url.searchParams.get("code");
+            const state = url.searchParams.get("state");
+            const error = url.searchParams.get("error");
+            const errorDescription = url.searchParams.get("error_description");
+            // Handle errors from Keycloak
+            if (error) {
+                const errorMsg = errorDescription || error;
+                res.writeHead(400, { "Content-Type": "text/html" });
+                res.end(`
+          <!DOCTYPE html>
+          <html>
+          <head>
+            <title>Authentication Failed</title>
+            <style>
+              body {
+                font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
+                display: flex;
+                justify-content: center;
+                align-items: center;
+                height: 100vh;
+                margin: 0;
+                background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
+              }
+              .container {
+                background: white;
+                padding: 40px;
+                border-radius: 8px;
+                box-shadow: 0 10px 25px rgba(0, 0, 0, 0.2);
+                max-width: 500px;
+                text-align: center;
+              }
+              h1 { color: #e74c3c; margin-top: 0; }
+              p { color: #555; line-height: 1.6; }
+              code { background: #f5f5f5; padding: 2px 6px; border-radius: 3px; }
+            </style>
+          </head>
+          <body>
+            <div class="container">
+              <h1>Authentication Failed</h1>
+              <p>Error: <code>${escapeHtml(errorMsg)}</code></p>
+              <p>Please try again with: <code>deploily login</code></p>
+            </div>
+          </body>
+          </html>
+        `);
+                server.close();
+                reject(new Error(`Authentication failed: ${errorMsg}`));
+                return;
+            }
+            // Validate callback
+            if (!code || !state) {
+                res.writeHead(400);
+                res.end("Missing code or state parameter");
+                server.close();
+                reject(new Error("Missing code or state parameter"));
+                return;
+            }
+            // Validate state parameter (CSRF protection)
+            if (state !== expectedState) {
+                res.writeHead(403);
+                res.end("Invalid state parameter");
+                server.close();
+                reject(new Error("State parameter mismatch"));
+                return;
+            }
+            // Success response
+            res.writeHead(200, { "Content-Type": "text/html" });
+            res.end(`
+        <!DOCTYPE html>
+        <html>
+        <head>
+          <title>Authentication Successful</title>
+          <style>
+            body {
+              font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
+              display: flex;
+              justify-content: center;
+              align-items: center;
+              height: 100vh;
+              margin: 0;
+              background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
+            }
+            .container {
+              background: white;
+              padding: 40px;
+              border-radius: 8px;
+              box-shadow: 0 10px 25px rgba(0, 0, 0, 0.2);
+              max-width: 500px;
+              text-align: center;
+            }
+            h1 { color: #27ae60; margin-top: 0; }
+            p { color: #555; line-height: 1.6; }
+          </style>
+        </head>
+        <body>
+          <div class="container">
+            <h1>Authentication Successful</h1>
+            <p>You have successfully authenticated with Deploily.</p>
+            <p>You can close this window and return to your terminal.</p>
+          </div>
+        </body>
+        </html>
+      `);
+            server.close();
+            resolve({ code, state });
+        });
+        server.listen(AUTH_CONFIG.CALLBACK_PORT, "localhost", () => {
+            // Server is listening
+        });
+        // Set a timeout for the callback
+        const timeout = setTimeout(() => {
+            server.close();
+            reject(new Error("Callback timeout: No response from Keycloak"));
+        }, 300000); // 5 minutes
+        server.on("close", () => {
+            clearTimeout(timeout);
+        });
+    });
+}
+function escapeHtml(text) {
+    const map = {
+        "&": "&amp;",
+        "<": "&lt;",
+        ">": "&gt;",
+        '"': "&quot;",
+        "'": "&#039;",
+    };
+    return text.replace(/[&<>"']/g, (m) => map[m]);
+}
+//# sourceMappingURL=callback.js.map

package/dist/auth/callback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"callback.js","sourceRoot":"","sources":["../../src/auth/callback.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAA;AACvB,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,CAAA;AACzB,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AAGpD,uDAAuD;AACvD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,aAAqB;IAErB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC5C,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;gBAClB,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;gBACtB,OAAM;YACR,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,GAAG,CAAC,GAAG,EACP,oBAAoB,WAAW,CAAC,aAAa,EAAE,CAChD,CAAA;YACD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YACzC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YAC3C,MAAM,gBAAgB,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;YAElE,8BAA8B;YAC9B,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,QAAQ,GAAG,gBAAgB,IAAI,KAAK,CAAA;gBAC1C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAA;gBACnD,GAAG,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCA+BgB,UAAU,CAAC,QAAQ,CAAC;;;;;SAK3C,CAAC,CAAA;gBACF,MAAM,CAAC,KAAK,EAAE,CAAA;gBACd,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,QAAQ,EAAE,CAAC,CAAC,CAAA;gBACvD,OAAM;YACR,CAAC;YAED,oBAAoB;YACpB,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACpB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;gBAClB,GAAG,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAA;gBAC1C,MAAM,CAAC,KAAK,EAAE,CAAA;gBACd,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAA;gBACpD,OAAM;YACR,CAAC;YAED,6CAA6C;YAC7C,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;gBAC5B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;gBAClB,GAAG,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAA;gBAClC,MAAM,CAAC,KAAK,EAAE,CAAA;gBACd,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAA;gBAC7C,OAAM;YACR,CAAC;YAED,mBAAmB;YACnB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAA;YACnD,GAAG,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCP,CAAC,CAAA;YAEF,MAAM,CAAC,KAAK,EAAE,CAAA;YACd,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAC1B,CAAC,CAAC,CAAA;QAEF,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,WAAW,EAAE,GAAG,EAAE;YACzD,sBAAsB;QACxB,CAAC,CAAC,CAAA;QAEF,iCAAiC;QACjC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,MAAM,CAAC,KAAK,EAAE,CAAA;YACd,MAAM,CAAC,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC,CAAA;QAClE,CAAC,EAAE,MAAM,CAAC,CAAA,CAAC,YAAY;QAEvB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,YAAY,CAAC,OAAO,CAAC,CAAA;QACvB,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,GAAG,GAA2B;QAClC,GAAG,EAAE,OAAO;QACZ,GAAG,EAAE,MAAM;QACX,GAAG,EAAE,MAAM;QACX,GAAG,EAAE,QAAQ;QACb,GAAG,EAAE,QAAQ;KACd,CAAA;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;AAChD,CAAC"}

package/dist/auth/index.d.ts

@@ -0,0 +1,23 @@
+import { AuthContext, TokenResponse, UserInfo } from "../types/index.js";
+declare class AuthenticationService {
+    private client;
+    constructor();
+    private buildClientAuthHeaders;
+    generateAuthorizationUrl(): {
+        url: string;
+        context: AuthContext;
+    };
+    exchangeCodeForToken(code: string, codeVerifier: string): Promise<TokenResponse>;
+    refreshAccessToken(refreshToken: string): Promise<TokenResponse>;
+    getUserInfo(accessToken: string): Promise<UserInfo>;
+    storeTokens(token: TokenResponse, userEmail?: string): Promise<void>;
+    getValidAccessToken(): Promise<string | null>;
+    logout(): Promise<void>;
+    /**
+     * Check if user is authenticated
+     */
+    isAuthenticated(): Promise<boolean>;
+}
+export declare const authService: AuthenticationService;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,WAAW,EAEX,aAAa,EACb,QAAQ,EACT,MAAM,mBAAmB,CAAA;AAE1B,cAAM,qBAAqB;IACzB,OAAO,CAAC,MAAM,CAAe;;IAQ7B,OAAO,CAAC,sBAAsB;IAkB9B,wBAAwB,IAAI;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,WAAW,CAAA;KAAE;IAwB3D,oBAAoB,CACxB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,aAAa,CAAC;IA8CnB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IA4BhE,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAoBnD,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAcpE,mBAAmB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAyB7C,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IA0B7B;;OAEG;IACG,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC;CAI1C;AAED,eAAO,MAAM,WAAW,uBAA8B,CAAA"}