@deploily/deploily-cli 0.1.0

package/dist/auth/index.js

@@ -0,0 +1,173 @@
+import axios from "axios";
+import { generateCodeVerifier, generateCodeChallenge, generateState, } from "../utils/pkce.js";
+import { AUTH_CONFIG } from "../config/constants.js";
+import { credentialStorage } from "../storage/credentials.js";
+class AuthenticationService {
+    constructor() {
+        this.client = axios.create({
+            timeout: 10000,
+        });
+    }
+    buildClientAuthHeaders() {
+        const clientSecret = process.env.KEYCLOAK_CLIENT_SECRET;
+        if (!clientSecret) {
+            return {};
+        }
+        const clientId = process.env.KEYCLOAK_CLIENT_ID;
+        const basicAuth = Buffer.from(`${clientId}:${clientSecret}`).toString("base64");
+        return {
+            Authorization: `Basic ${basicAuth}`,
+        };
+    }
+    // Generate authorization URL for user login
+    generateAuthorizationUrl() {
+        const state = generateState();
+        const codeVerifier = generateCodeVerifier();
+        const codeChallenge = generateCodeChallenge(codeVerifier);
+        const params = new URLSearchParams({
+            client_id: AUTH_CONFIG.CLIENT_ID,
+            response_type: AUTH_CONFIG.RESPONSE_TYPE,
+            redirect_uri: AUTH_CONFIG.REDIRECT_URI,
+            scope: AUTH_CONFIG.SCOPE,
+            code_challenge: codeChallenge,
+            code_challenge_method: AUTH_CONFIG.CODE_CHALLENGE_METHOD,
+            state,
+        });
+        const url = `${AUTH_CONFIG.KEYCLOAK_AUTH_ENDPOINT}?${params.toString()}`;
+        return {
+            url,
+            context: { state, codeVerifier, codeChallenge },
+        };
+    }
+    // Exchange authorization code for tokens
+    async exchangeCodeForToken(code, codeVerifier) {
+        try {
+            const body = new URLSearchParams({
+                grant_type: "authorization_code",
+                code,
+                client_id: process.env.KEYCLOAK_CLIENT_ID,
+                redirect_uri: process.env.KEYCLOAK_REDIRECT_URI,
+                code_verifier: codeVerifier,
+            });
+            const response = await this.client.post(process.env.KEYCLOAK_TOKEN_ENDPOINT, body, {
+                headers: {
+                    "Content-Type": "application/x-www-form-urlencoded",
+                    ...this.buildClientAuthHeaders(),
+                },
+            });
+            return response.data;
+        }
+        catch (error) {
+            if (axios.isAxiosError(error)) {
+                const responseData = typeof error.response?.data === "string"
+                    ? error.response.data
+                    : JSON.stringify(error.response?.data ?? {});
+                const authHint = error.response?.status === 401 &&
+                    responseData.includes("unauthorized_client")
+                    ? " This usually means the Keycloak client is confidential and KEYCLOAK_CLIENT_SECRET is missing or invalid."
+                    : "";
+                throw new Error(`Failed to exchange code for token: ${error.message}${responseData ? ` (${responseData})` : ""}${authHint}`);
+            }
+            throw new Error(`Failed to exchange code for token: ${error instanceof Error ? error.message : "Unknown error"}`);
+        }
+    }
+    // Refresh access token using refresh token
+    async refreshAccessToken(refreshToken) {
+        try {
+            const body = new URLSearchParams({
+                grant_type: "refresh_token",
+                refresh_token: refreshToken,
+                client_id: process.env.KEYCLOAK_CLIENT_ID,
+            });
+            const response = await this.client.post(process.env.KEYCLOAK_TOKEN_ENDPOINT, body, {
+                headers: {
+                    "Content-Type": "application/x-www-form-urlencoded",
+                    ...this.buildClientAuthHeaders(),
+                },
+            });
+            return response.data;
+        }
+        catch (error) {
+            throw new Error(`Failed to refresh token: ${error instanceof Error ? error.message : "Unknown error"}`);
+        }
+    }
+    // Get user information from access token
+    async getUserInfo(accessToken) {
+        try {
+            const response = await this.client.get(process.env.KEYCLOAK_USERINFO_ENDPOINT, {
+                headers: {
+                    Authorization: `Bearer ${accessToken}`,
+                },
+            });
+            return response.data;
+        }
+        catch (error) {
+            throw new Error(`Failed to fetch user info: ${error instanceof Error ? error.message : "Unknown error"}`);
+        }
+    }
+    // Store tokens after successful authentication
+    async storeTokens(token, userEmail) {
+        const expiresAt = Math.floor(Date.now() / 1000) + token.expires_in;
+        const credentials = {
+            access_token: token.access_token,
+            refresh_token: token.refresh_token,
+            expires_at: expiresAt,
+            user_email: userEmail,
+        };
+        await credentialStorage.save(credentials);
+    }
+    // Get valid access token
+    async getValidAccessToken() {
+        const credentials = await credentialStorage.load();
+        if (!credentials) {
+            return null;
+        }
+        // Check if token is expired
+        if (credentials.expires_at < Date.now() / 1000) {
+            try {
+                const newToken = await this.refreshAccessToken(credentials.refresh_token);
+                await this.storeTokens(newToken, credentials.user_email);
+                return newToken.access_token;
+            }
+            catch (error) {
+                // Token refresh failed, need to re-authenticate
+                await credentialStorage.clear();
+                return null;
+            }
+        }
+        return credentials.access_token;
+    }
+    // Logout and clear stored tokens
+    async logout() {
+        const credentials = await credentialStorage.load();
+        if (credentials) {
+            try {
+                const body = new URLSearchParams({
+                    client_id: process.env.KEYCLOAK_CLIENT_ID,
+                    refresh_token: credentials.refresh_token,
+                });
+                // Optionally call Keycloak logout endpoint
+                await this.client.post(process.env.KEYCLOAK_LOGOUT_ENDPOINT, body, {
+                    headers: {
+                        "Content-Type": "application/x-www-form-urlencoded",
+                        ...this.buildClientAuthHeaders(),
+                    },
+                });
+            }
+            catch (error) {
+                // Continue with local logout even if server call fails
+            }
+        }
+        // Clear local credentials
+        await credentialStorage.clear();
+    }
+    /**
+     * Check if user is authenticated
+     */
+    async isAuthenticated() {
+        const credentials = await credentialStorage.load();
+        return credentials !== null;
+    }
+}
+export const authService = new AuthenticationService();
+//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAwB,MAAM,OAAO,CAAA;AAC5C,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,aAAa,GACd,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAQ7D,MAAM,qBAAqB;IAGzB;QACE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;YACzB,OAAO,EAAE,KAAK;SACf,CAAC,CAAA;IACJ,CAAC;IAEO,sBAAsB;QAC5B,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAA;QAEvD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,CAAA;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAmB,CAAA;QAChD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,YAAY,EAAE,CAAC,CAAC,QAAQ,CACnE,QAAQ,CACT,CAAA;QAED,OAAO;YACL,aAAa,EAAE,SAAS,SAAS,EAAE;SACpC,CAAA;IACH,CAAC;IAED,4CAA4C;IAC5C,wBAAwB;QACtB,MAAM,KAAK,GAAG,aAAa,EAAE,CAAA;QAC7B,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAA;QAC3C,MAAM,aAAa,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAA;QAEzD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,aAAa,EAAE,WAAW,CAAC,aAAa;YACxC,YAAY,EAAE,WAAW,CAAC,YAAY;YACtC,KAAK,EAAE,WAAW,CAAC,KAAK;YACxB,cAAc,EAAE,aAAa;YAC7B,qBAAqB,EAAE,WAAW,CAAC,qBAAqB;YACxD,KAAK;SACN,CAAC,CAAA;QAEF,MAAM,GAAG,GAAG,GAAG,WAAW,CAAC,sBAAsB,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAA;QAExE,OAAO;YACL,GAAG;YACH,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE;SAChD,CAAA;IACH,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,oBAAoB,CACxB,IAAY,EACZ,YAAoB;QAEpB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;gBAC/B,UAAU,EAAE,oBAAoB;gBAChC,IAAI;gBACJ,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAmB;gBAC1C,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAsB;gBAChD,aAAa,EAAE,YAAY;aAC5B,CAAC,CAAA;YAEF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACrC,OAAO,CAAC,GAAG,CAAC,uBAAwB,EACpC,IAAI,EACJ;gBACE,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;oBACnD,GAAG,IAAI,CAAC,sBAAsB,EAAE;iBACjC;aACF,CACF,CAAA;YAED,OAAO,QAAQ,CAAC,IAAI,CAAA;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,MAAM,YAAY,GAChB,OAAO,KAAK,CAAC,QAAQ,EAAE,IAAI,KAAK,QAAQ;oBACtC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI;oBACrB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,CAAA;gBAChD,MAAM,QAAQ,GACZ,KAAK,CAAC,QAAQ,EAAE,MAAM,KAAK,GAAG;oBAC9B,YAAY,CAAC,QAAQ,CAAC,qBAAqB,CAAC;oBAC1C,CAAC,CAAC,2GAA2G;oBAC7G,CAAC,CAAC,EAAE,CAAA;gBAER,MAAM,IAAI,KAAK,CACb,sCAAsC,KAAK,CAAC,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAC5G,CAAA;YACH,CAAC;YAED,MAAM,IAAI,KAAK,CACb,sCAAsC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CACjG,CAAA;QACH,CAAC;IACH,CAAC;IAED,2CAA2C;IAC3C,KAAK,CAAC,kBAAkB,CAAC,YAAoB;QAC3C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;gBAC/B,UAAU,EAAE,eAAe;gBAC3B,aAAa,EAAE,YAAY;gBAC3B,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAmB;aAC3C,CAAC,CAAA;YAEF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACrC,OAAO,CAAC,GAAG,CAAC,uBAAwB,EACpC,IAAI,EACJ;gBACE,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;oBACnD,GAAG,IAAI,CAAC,sBAAsB,EAAE;iBACjC;aACF,CACF,CAAA;YAED,OAAO,QAAQ,CAAC,IAAI,CAAA;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,4BAA4B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CACvF,CAAA;QACH,CAAC;IACH,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,WAAW,CAAC,WAAmB;QACnC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CACpC,OAAO,CAAC,GAAG,CAAC,0BAA2B,EACvC;gBACE,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,WAAW,EAAE;iBACvC;aACF,CACF,CAAA;YAED,OAAO,QAAQ,CAAC,IAAI,CAAA;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,8BAA8B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CACzF,CAAA;QACH,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,WAAW,CAAC,KAAoB,EAAE,SAAkB;QACxD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,UAAU,CAAA;QAElE,MAAM,WAAW,GAAsB;YACrC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;SACtB,CAAA;QAED,MAAM,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC3C,CAAC;IAED,yBAAyB;IACzB,KAAK,CAAC,mBAAmB;QACvB,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,CAAA;QAClD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,IAAI,CAAA;QACb,CAAC;QAED,4BAA4B;QAC5B,IAAI,WAAW,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAC5C,WAAW,CAAC,aAAa,CAC1B,CAAA;gBACD,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,UAAU,CAAC,CAAA;gBACxD,OAAO,QAAQ,CAAC,YAAY,CAAA;YAC9B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gDAAgD;gBAChD,MAAM,iBAAiB,CAAC,KAAK,EAAE,CAAA;gBAC/B,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC;QAED,OAAO,WAAW,CAAC,YAAY,CAAA;IACjC,CAAC;IAED,iCAAiC;IACjC,KAAK,CAAC,MAAM;QACV,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,CAAA;QAElD,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;oBAC/B,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAmB;oBAC1C,aAAa,EAAE,WAAW,CAAC,aAAa;iBACzC,CAAC,CAAA;gBAEF,2CAA2C;gBAC3C,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAyB,EAAE,IAAI,EAAE;oBAClE,OAAO,EAAE;wBACP,cAAc,EAAE,mCAAmC;wBACnD,GAAG,IAAI,CAAC,sBAAsB,EAAE;qBACjC;iBACF,CAAC,CAAA;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,uDAAuD;YACzD,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,MAAM,iBAAiB,CAAC,KAAK,EAAE,CAAA;IACjC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe;QACnB,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,CAAA;QAClD,OAAO,WAAW,KAAK,IAAI,CAAA;IAC7B,CAAC;CACF;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,qBAAqB,EAAE,CAAA"}

package/dist/commands/auth.d.ts

@@ -0,0 +1,4 @@
+export declare function handleLogin(): Promise<void>;
+export declare function handleLogout(): Promise<void>;
+export declare function handleWhoami(): Promise<void>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/commands/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAMA,wBAAsB,WAAW,kBAyChC;AAED,wBAAsB,YAAY,kBAejC;AAED,wBAAsB,YAAY,kBA+CjC"}

package/dist/commands/auth.js

@@ -0,0 +1,90 @@
+import open from "open";
+import { authService } from "../auth/index.js";
+import { startCallbackServer } from "../auth/callback.js";
+import { credentialStorage } from "../storage/credentials.js";
+import chalk from "chalk";
+export async function handleLogin() {
+    try {
+        // 1. Check if logged in
+        const isAuth = await authService.isAuthenticated();
+        if (isAuth) {
+            console.log("Already logged in. Use 'deploily logout' to log out first.");
+            return;
+        }
+        console.log("Opening browser for authentication...");
+        // 2. Generate authorization URL
+        const { url, context } = authService.generateAuthorizationUrl();
+        // 3. Start callback server
+        const callbackPromise = startCallbackServer(context.state);
+        // 4. Open browser
+        await open(url);
+        console.log("Waiting for authentication...");
+        // 5. Wait for callback
+        const callback = await callbackPromise;
+        // 6. Exchange code for token
+        const tokens = await authService.exchangeCodeForToken(callback.code, context.codeVerifier);
+        // 7. Get user info
+        const userInfo = await authService.getUserInfo(tokens.access_token);
+        // 8. Store tokens
+        await authService.storeTokens(tokens, userInfo.email);
+        console.log("Successfully authenticated");
+        console.log(`Welcome, ${userInfo.email}!`);
+    }
+    catch (error) {
+        console.error("Error occurred while logging in:", error);
+        process.exit(1);
+    }
+}
+export async function handleLogout() {
+    try {
+        const isAuth = await authService.isAuthenticated();
+        if (!isAuth) {
+            console.log("You are not logged in.");
+            return;
+        }
+        await authService.logout();
+        console.log("Successfully logged out");
+    }
+    catch (error) {
+        console.error("Error occurred while logging in:", error);
+        process.exit(1);
+    }
+}
+export async function handleWhoami() {
+    try {
+        const isAuth = await authService.isAuthenticated();
+        if (!isAuth) {
+            console.log("You are not logged in. Use `deploily login` to authenticate.");
+            process.exit(1);
+        }
+        // Get stored credentials
+        const credentials = await credentialStorage.load();
+        if (!credentials) {
+            console.log("You are not logged in. Use `deploily login` to authenticate.");
+            process.exit(1);
+        }
+        // Get user info from API
+        const userInfo = await authService.getUserInfo(credentials.access_token);
+        console.log("Current User:");
+        console.log(`├─ Email: ${userInfo.email}`);
+        console.log(`├─ Name: ${userInfo.name}`);
+        console.log(`├─ Username: ${userInfo.preferred_username}`);
+        // Calculate token expiry
+        const expiresAt = new Date(credentials.expires_at * 1000);
+        const now = new Date();
+        const timeRemaining = Math.floor((credentials.expires_at * 1000 - now.getTime()) / 1000);
+        if (timeRemaining > 0) {
+            const hours = Math.floor(timeRemaining / 3600);
+            const minutes = Math.floor((timeRemaining % 3600) / 60);
+            console.log(chalk.gray(`└─ Token expires in: ${hours}h ${minutes}m`));
+        }
+        else {
+            console.log(chalk.gray(`└─ Token expires in: Soon (will auto-refresh)`));
+        }
+    }
+    catch (error) {
+        console.error("Error occurred while logging in:", error);
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/commands/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAA;AACvB,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,KAAK,MAAM,OAAO,CAAA;AAEzB,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,IAAI,CAAC;QACH,wBAAwB;QACxB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,eAAe,EAAE,CAAA;QAClD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAA;YACzE,OAAM;QACR,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAA;QAEpD,gCAAgC;QAChC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,wBAAwB,EAAE,CAAA;QAE/D,2BAA2B;QAC3B,MAAM,eAAe,GAAG,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAE1D,kBAAkB;QAClB,MAAM,IAAI,CAAC,GAAG,CAAC,CAAA;QAEf,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAA;QAE5C,uBAAuB;QACvB,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAA;QAEtC,6BAA6B;QAC7B,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,oBAAoB,CACnD,QAAQ,CAAC,IAAI,EACb,OAAO,CAAC,YAAY,CACrB,CAAA;QAED,mBAAmB;QACnB,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;QAEnE,kBAAkB;QAClB,MAAM,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;QACrD,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAA;QACzC,OAAO,CAAC,GAAG,CAAC,YAAY,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAA;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAA;QACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,eAAe,EAAE,CAAA;QAElD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAA;YACrC,OAAM;QACR,CAAC;QAED,MAAM,WAAW,CAAC,MAAM,EAAE,CAAA;QAC1B,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAA;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAA;QACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,eAAe,EAAE,CAAA;QAElD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CACT,8DAA8D,CAC/D,CAAA;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;QAED,yBAAyB;QACzB,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,CAAA;QAElD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CACT,8DAA8D,CAC/D,CAAA;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;QAED,yBAAyB;QACzB,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,WAAW,CAAC,YAAY,CAAC,CAAA;QAExE,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;QAC5B,OAAO,CAAC,GAAG,CAAC,aAAa,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;QAC1C,OAAO,CAAC,GAAG,CAAC,YAAY,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;QACxC,OAAO,CAAC,GAAG,CAAC,gBAAgB,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAA;QAE1D,yBAAyB;QACzB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;QACzD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;QACtB,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAC9B,CAAC,WAAW,CAAC,UAAU,GAAG,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CACvD,CAAA;QAED,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,CAAA;YAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;YACvD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB,KAAK,KAAK,OAAO,GAAG,CAAC,CAAC,CAAA;QACvE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC,CAAA;QAC1E,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAA;QACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC"}

package/dist/config/constants.d.ts

@@ -0,0 +1,22 @@
+import "dotenv/config";
+export declare const AUTH_CONFIG: {
+    KEYCLOAK_REALM_URL: string;
+    KEYCLOAK_TOKEN_ENDPOINT: string;
+    KEYCLOAK_AUTH_ENDPOINT: string;
+    KEYCLOAK_LOGOUT_ENDPOINT: string;
+    KEYCLOAK_USERINFO_ENDPOINT: string;
+    CLIENT_ID: string;
+    CLIENT_SECRET: string;
+    REDIRECT_URI: string;
+    CALLBACK_PORT: number;
+    SCOPE: string;
+    RESPONSE_TYPE: string;
+    CODE_CHALLENGE_METHOD: string;
+    TOKEN_EXPIRY_BUFFER: number;
+};
+export declare const STORAGE_CONFIG: {
+    SERVICE_NAME: string;
+    CONFIG_DIR: string;
+    CONFIG_FILE: string;
+};
+//# sourceMappingURL=constants.d.ts.map

package/dist/config/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/config/constants.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAA;AAEtB,eAAO,MAAM,WAAW;;;;;;;;;;;;;;CAmBvB,CAAA;AAED,eAAO,MAAM,cAAc;;;;CAI1B,CAAA"}

package/dist/config/constants.js

@@ -0,0 +1,25 @@
+import "dotenv/config";
+export const AUTH_CONFIG = {
+    // Keycloak Configuration
+    KEYCLOAK_REALM_URL: process.env.KEYCLOAK_REALM_URL,
+    KEYCLOAK_TOKEN_ENDPOINT: process.env.KEYCLOAK_TOKEN_ENDPOINT,
+    KEYCLOAK_AUTH_ENDPOINT: process.env.KEYCLOAK_AUTH_ENDPOINT,
+    KEYCLOAK_LOGOUT_ENDPOINT: process.env.KEYCLOAK_LOGOUT_ENDPOINT,
+    KEYCLOAK_USERINFO_ENDPOINT: process.env.KEYCLOAK_USERINFO_ENDPOINT,
+    // CLI Configuration
+    CLIENT_ID: process.env.KEYCLOAK_CLIENT_ID,
+    CLIENT_SECRET: process.env.KEYCLOAK_CLIENT_SECRET,
+    REDIRECT_URI: process.env.KEYCLOAK_REDIRECT_URI,
+    CALLBACK_PORT: 8976,
+    SCOPE: "openid profile email",
+    RESPONSE_TYPE: "code",
+    CODE_CHALLENGE_METHOD: "S256",
+    // Token Configuration
+    TOKEN_EXPIRY_BUFFER: 60,
+};
+export const STORAGE_CONFIG = {
+    SERVICE_NAME: "deploily-cli",
+    CONFIG_DIR: "~/.config/deploily",
+    CONFIG_FILE: "config.json",
+};
+//# sourceMappingURL=constants.js.map

package/dist/config/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/config/constants.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAA;AAEtB,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,yBAAyB;IACzB,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAmB;IACnD,uBAAuB,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAwB;IAC7D,sBAAsB,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAuB;IAC3D,wBAAwB,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAyB;IAC/D,0BAA0B,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA2B;IAEnE,oBAAoB;IACpB,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAmB;IAC1C,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAuB;IAClD,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAsB;IAChD,aAAa,EAAE,IAAI;IACnB,KAAK,EAAE,sBAAsB;IAC7B,aAAa,EAAE,MAAM;IACrB,qBAAqB,EAAE,MAAM;IAE7B,sBAAsB;IACtB,mBAAmB,EAAE,EAAE;CACxB,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,YAAY,EAAE,cAAc;IAC5B,UAAU,EAAE,oBAAoB;IAChC,WAAW,EAAE,aAAa;CAC3B,CAAA"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,61 @@
+#!/usr/bin/env node
+import { handleLogin, handleLogout, handleWhoami } from "./commands/auth.js";
+const VERSION = "1.0.0"; // TODO: read from package.json
+async function main() {
+    const args = process.argv.slice(2);
+    const command = args[0];
+    if (!command || command === "--help" || command === "-h") {
+        showHelp();
+        return;
+    }
+    if (command === "--version" || command === "-v") {
+        console.log(`deploily version ${VERSION}`);
+        return;
+    }
+    try {
+        switch (command) {
+            case "login":
+                await handleLogin();
+                break;
+            case "logout":
+                await handleLogout();
+                break;
+            case "whoami":
+                await handleWhoami();
+                break;
+            default:
+                console.error(`Unknown command: ${command}`);
+                showHelp();
+                process.exit(1);
+        }
+    }
+    catch (err) {
+        console.error(`Error executing command '${command}':`, err);
+        process.exit(1);
+    }
+}
+function showHelp() {
+    console.log(`
+Usage:
+  deploily [command]
+
+Commands:
+  login        Authenticate with Keycloak
+  logout       Clear authentication tokens
+  whoami       Show current user information
+
+Options:
+  --help, -h   Show this help message
+  --version    Show version number
+
+Examples:
+  deploily login
+  deploily logout
+  deploily whoami
+`);
+}
+main().catch((err) => {
+    console.error(err);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAE5E,MAAM,OAAO,GAAG,OAAO,CAAA,CAAC,+BAA+B;AAEvD,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;IAEvB,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACzD,QAAQ,EAAE,CAAA;QACV,OAAM;IACR,CAAC;IAED,IAAI,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAA;QAC1C,OAAM;IACR,CAAC;IAED,IAAI,CAAC;QACH,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,OAAO;gBACV,MAAM,WAAW,EAAE,CAAA;gBACnB,MAAK;YAEP,KAAK,QAAQ;gBACX,MAAM,YAAY,EAAE,CAAA;gBACpB,MAAK;YAEP,KAAK,QAAQ;gBACX,MAAM,YAAY,EAAE,CAAA;gBACpB,MAAK;YAEP;gBACE,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAA;gBAC5C,QAAQ,EAAE,CAAA;gBACV,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,4BAA4B,OAAO,IAAI,EAAE,GAAG,CAAC,CAAA;QAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;CAiBb,CAAC,CAAA;AACF,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}

package/dist/storage/credentials.d.ts

@@ -0,0 +1,47 @@
+import { StoredCredentials } from "../types/index.js";
+declare class CredentialStorage {
+    private serviceName;
+    private accountName;
+    private configDir;
+    private configFilePath;
+    constructor();
+    /**
+     * Expand ~ to home directory
+     */
+    private expandPath;
+    /**
+     * Save credentials using keytar (primary) or fallback to config file
+     */
+    save(credentials: StoredCredentials): Promise<void>;
+    /**
+     * Load credentials using keytar (primary) or fallback to config file
+     */
+    load(): Promise<StoredCredentials | null>;
+    /**
+     * Clear credentials from keytar (primary) and config file
+     */
+    clear(): Promise<void>;
+    /**
+     * Save to config file (fallback method)
+     */
+    private saveToConfigFile;
+    /**
+     * Load from config file (fallback method)
+     */
+    private loadFromConfigFile;
+    /**
+     * Clear config file
+     */
+    private clearConfigFile;
+    /**
+     * Check if credentials exist
+     */
+    exists(): Promise<boolean>;
+    /**
+     * Check if credentials are expired
+     */
+    isExpired(): Promise<boolean>;
+}
+export declare const credentialStorage: CredentialStorage;
+export {};
+//# sourceMappingURL=credentials.d.ts.map

package/dist/storage/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/storage/credentials.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAoBrD,cAAM,iBAAiB;IACrB,OAAO,CAAC,WAAW,CAA8B;IACjD,OAAO,CAAC,WAAW,CAAkB;IACrC,OAAO,CAAC,SAAS,CAAQ;IACzB,OAAO,CAAC,cAAc,CAAQ;;IAO9B;;OAEG;IACH,OAAO,CAAC,UAAU;IAOlB;;OAEG;IACG,IAAI,CAAC,WAAW,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBzD;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAsB/C;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAgB5B;;OAEG;YACW,gBAAgB;IAmB9B;;OAEG;YACW,kBAAkB;IAahC;;OAEG;YACW,eAAe;IAU7B;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC;IAKhC;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;CAUpC;AAED,eAAO,MAAM,iBAAiB,mBAA0B,CAAA"}

package/dist/storage/credentials.js

@@ -0,0 +1,160 @@
+import fs from "fs";
+import path from "path";
+import os from "os";
+import { STORAGE_CONFIG } from "../config/constants.js";
+// Lazy load keytar - it's optional and may not be available
+let keytar = null;
+let keytarLoaded = false;
+async function getKeytar() {
+    if (keytarLoaded) {
+        return keytar;
+    }
+    keytarLoaded = true;
+    try {
+        keytar = await import("keytar");
+    }
+    catch (error) {
+        // keytar not available, will use fallback
+        keytar = null;
+    }
+    return keytar;
+}
+class CredentialStorage {
+    constructor() {
+        this.serviceName = STORAGE_CONFIG.SERVICE_NAME;
+        this.accountName = "deploily-auth";
+        this.configDir = this.expandPath(STORAGE_CONFIG.CONFIG_DIR);
+        this.configFilePath = path.join(this.configDir, STORAGE_CONFIG.CONFIG_FILE);
+    }
+    /**
+     * Expand ~ to home directory
+     */
+    expandPath(filepath) {
+        if (filepath.startsWith("~")) {
+            return path.join(os.homedir(), filepath.slice(1));
+        }
+        return filepath;
+    }
+    /**
+     * Save credentials using keytar (primary) or fallback to config file
+     */
+    async save(credentials) {
+        const kt = await getKeytar();
+        try {
+            // Try keytar first
+            if (kt) {
+                await kt.setPassword(this.serviceName, this.accountName, JSON.stringify(credentials));
+                return;
+            }
+        }
+        catch (error) {
+            // Fallback to config file
+        }
+        // Fallback to config file
+        console.warn("Keytar unavailable, using config file for token storage");
+        await this.saveToConfigFile(credentials);
+    }
+    /**
+     * Load credentials using keytar (primary) or fallback to config file
+     */
+    async load() {
+        const kt = await getKeytar();
+        try {
+            // Try keytar first
+            if (kt) {
+                const password = await kt.getPassword(this.serviceName, this.accountName);
+                if (password) {
+                    return JSON.parse(password);
+                }
+            }
+        }
+        catch (error) {
+            // Fallback to config file
+            console.warn("Keytar unavailable, checking config file");
+        }
+        // Try loading from config file
+        return await this.loadFromConfigFile();
+    }
+    /**
+     * Clear credentials from keytar (primary) and config file
+     */
+    async clear() {
+        const kt = await getKeytar();
+        try {
+            // Clear from keytar
+            if (kt) {
+                await kt.deletePassword(this.serviceName, this.accountName);
+            }
+        }
+        catch (error) {
+            // Fallback to config file
+            console.warn("Could not clear keytar credentials");
+        }
+        // Clear from config file
+        await this.clearConfigFile();
+    }
+    /**
+     * Save to config file (fallback method)
+     */
+    async saveToConfigFile(credentials) {
+        try {
+            // Ensure config directory exists
+            if (!fs.existsSync(this.configDir)) {
+                fs.mkdirSync(this.configDir, { recursive: true });
+            }
+            fs.writeFileSync(this.configFilePath, JSON.stringify(credentials, null, 2), { mode: 0o600 });
+        }
+        catch (error) {
+            throw new Error(`Failed to save credentials: ${error}`);
+        }
+    }
+    /**
+     * Load from config file (fallback method)
+     */
+    async loadFromConfigFile() {
+        try {
+            if (!fs.existsSync(this.configFilePath)) {
+                return null;
+            }
+            const content = fs.readFileSync(this.configFilePath, "utf-8");
+            return JSON.parse(content);
+        }
+        catch (error) {
+            return null;
+        }
+    }
+    /**
+     * Clear config file
+     */
+    async clearConfigFile() {
+        try {
+            if (fs.existsSync(this.configFilePath)) {
+                fs.unlinkSync(this.configFilePath);
+            }
+        }
+        catch (error) {
+            // Silently fail if file doesn't exist
+        }
+    }
+    /**
+     * Check if credentials exist
+     */
+    async exists() {
+        const credentials = await this.load();
+        return credentials !== null;
+    }
+    /**
+     * Check if credentials are expired
+     */
+    async isExpired() {
+        const credentials = await this.load();
+        if (!credentials) {
+            return true;
+        }
+        // Check if token expires in less than 5 minutes
+        const bufferSeconds = 300;
+        return credentials.expires_at < Date.now() / 1000 + bufferSeconds;
+    }
+}
+export const credentialStorage = new CredentialStorage();
+//# sourceMappingURL=credentials.js.map

package/dist/storage/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/storage/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAA;AACnB,OAAO,IAAI,MAAM,MAAM,CAAA;AACvB,OAAO,EAAE,MAAM,IAAI,CAAA;AACnB,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAGvD,4DAA4D;AAC5D,IAAI,MAAM,GAAQ,IAAI,CAAA;AACtB,IAAI,YAAY,GAAG,KAAK,CAAA;AAExB,KAAK,UAAU,SAAS;IACtB,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,MAAM,CAAA;IACf,CAAC;IACD,YAAY,GAAG,IAAI,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAA;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0CAA0C;QAC1C,MAAM,GAAG,IAAI,CAAA;IACf,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,iBAAiB;IAMrB;QALQ,gBAAW,GAAG,cAAc,CAAC,YAAY,CAAA;QACzC,gBAAW,GAAG,eAAe,CAAA;QAKnC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,UAAU,CAAC,CAAA;QAC3D,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,WAAW,CAAC,CAAA;IAC7E,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,QAAgB;QACjC,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QACnD,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,WAA8B;QACvC,MAAM,EAAE,GAAG,MAAM,SAAS,EAAE,CAAA;QAC5B,IAAI,CAAC;YACH,mBAAmB;YACnB,IAAI,EAAE,EAAE,CAAC;gBACP,MAAM,EAAE,CAAC,WAAW,CAClB,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAC5B,CAAA;gBACD,OAAM;YACR,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,0BAA0B;QAC5B,CAAC;QAED,0BAA0B;QAC1B,OAAO,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAA;QACvE,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAA;IAC1C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,EAAE,GAAG,MAAM,SAAS,EAAE,CAAA;QAC5B,IAAI,CAAC;YACH,mBAAmB;YACnB,IAAI,EAAE,EAAE,CAAC;gBACP,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,WAAW,CACnC,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,WAAW,CACjB,CAAA;gBACD,IAAI,QAAQ,EAAE,CAAC;oBACb,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;gBAC7B,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,0BAA0B;YAC1B,OAAO,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAA;QAC1D,CAAC;QAED,+BAA+B;QAC/B,OAAO,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAA;IACxC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,MAAM,EAAE,GAAG,MAAM,SAAS,EAAE,CAAA;QAC5B,IAAI,CAAC;YACH,oBAAoB;YACpB,IAAI,EAAE,EAAE,CAAC;gBACP,MAAM,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,CAAA;YAC7D,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,0BAA0B;YAC1B,OAAO,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAA;QACpD,CAAC;QAED,yBAAyB;QACzB,MAAM,IAAI,CAAC,eAAe,EAAE,CAAA;IAC9B,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,gBAAgB,CAC5B,WAA8B;QAE9B,IAAI,CAAC;YACH,iCAAiC;YACjC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACnC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACnD,CAAC;YAED,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,EACpC,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,EAAE,CAAC,CAAA;QACzD,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,kBAAkB;QAC9B,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;gBACxC,OAAO,IAAI,CAAA;YACb,CAAC;YAED,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;YAC7D,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,eAAe;QAC3B,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;gBACvC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;YACpC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,sCAAsC;QACxC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QACrC,OAAO,WAAW,KAAK,IAAI,CAAA;IAC7B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS;QACb,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QACrC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,IAAI,CAAA;QACb,CAAC;QAED,gDAAgD;QAChD,MAAM,aAAa,GAAG,GAAG,CAAA;QACzB,OAAO,WAAW,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,aAAa,CAAA;IACnE,CAAC;CACF;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,EAAE,CAAA"}

package/dist/utils/pkce.d.ts

@@ -0,0 +1,5 @@
+export declare function generateRandomString(length?: number): string;
+export declare function generateCodeVerifier(): string;
+export declare function generateCodeChallenge(codeVerifier: string): string;
+export declare function generateState(): string;
+//# sourceMappingURL=pkce.d.ts.map

package/dist/utils/pkce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.d.ts","sourceRoot":"","sources":["../../src/utils/pkce.ts"],"names":[],"mappings":"AAGA,wBAAgB,oBAAoB,CAAC,MAAM,GAAE,MAAW,GAAG,MAAM,CAEhE;AAGD,wBAAgB,oBAAoB,IAAI,MAAM,CAY7C;AAGD,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAOlE;AAGD,wBAAgB,aAAa,IAAI,MAAM,CAEtC"}