@fragno-dev/project-connector-fragment 0.0.0-stage → 0.0.1

package/dist/cli/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","names":[],"sources":["../../src/routes.ts"],"sourcesContent":["import { decodeCursor, type Cursor } from \"@fragno-dev/db/cursor\";\nimport { z } from \"zod\";\n\nimport { defineRoutes } from \"@fragno-dev/core\";\n\nimport { projectConnectorFragmentDefinition } from \"./definition\";\nimport {\n  confirmProjectConnectorRequest,\n  ProjectConnectorClientError,\n} from \"./project-connector-client\";\nimport {\n  projectConnectorAccountsSchema,\n  projectConnectorNamedConnectionSchema,\n  projectConnectorNamedRequestSchema,\n  projectConnectorNamedAccountSchema,\n  projectConnectorStatusSchema,\n  projectConnectorProviderConfigsSchema,\n  projectConnectorProviderActionsSchema,\n  projectConnectorConnectInputSchema,\n  projectConnectorConnectionSchema,\n  projectConnectorProfileSchema,\n  projectConnectorExecutionSchema,\n  type ProjectConnectorConnectionState,\n} from \"./project-connector-contracts\";\nimport { projectConnectorSchema } from \"./schema\";\n\nfunction serializeProjectConnectorRequest(\n  saved: Omit<z.output<typeof projectConnectorConnectionSchema>, \"id\"> & {\n    id: { toString(): string };\n  },\n): z.output<typeof projectConnectorConnectionSchema> {\n  return {\n    id: saved.id.toString(),\n    projectId: saved.projectId,\n    providerConfigId: saved.providerConfigId,\n    externalUserId: saved.externalUserId,\n    service: saved.service,\n    connectionName: saved.connectionName,\n    authorizationUrl: saved.authorizationUrl,\n    expiresAt: saved.expiresAt,\n    state: saved.state,\n  };\n}\n\n/** Authenticated routes never accept a product user ID or account binding from the browser. */\nexport const projectConnectorRoutes = defineRoutes(projectConnectorFragmentDefinition).create(\n  ({ config, deps, defineRoute }) => [\n    defineRoute({\n      method: \"GET\",\n      path: \"/provider-configs\",\n      outputSchema: projectConnectorProviderConfigsSchema,\n      errorCodes: [\"UNAUTHENTICATED\", \"PROJECT_CONNECTOR_ERROR\"],\n      handler: async function ({ headers }, { json, error }) {\n        if (!(await config.getExternalUserId(headers))) {\n          return error({ code: \"UNAUTHENTICATED\", message: \"Authentication required\" }, 401);\n        }\n        try {\n          return json(await deps.projectConnector.listProviderConfigs());\n        } catch (cause) {\n          if (!(cause instanceof ProjectConnectorClientError)) {\n            throw cause;\n          }\n          return error({ code: \"PROJECT_CONNECTOR_ERROR\", message: cause.message }, 502);\n        }\n      },\n    }),\n    defineRoute({\n      method: \"GET\",\n      path: \"/provider-configs/:providerConfigId/actions\",\n      outputSchema: projectConnectorProviderActionsSchema,\n      errorCodes: [\"UNAUTHENTICATED\", \"PROVIDER_CONFIG_NOT_FOUND\", \"PROJECT_CONNECTOR_ERROR\"],\n      handler: async function ({ headers, pathParams }, { json, error }) {\n        if (!(await config.getExternalUserId(headers))) {\n          return error({ code: \"UNAUTHENTICATED\", message: \"Authentication required\" }, 401);\n        }\n        try {\n          const actions = await deps.projectConnector.listProviderActions(\n            pathParams.providerConfigId,\n          );\n          if (!actions) {\n            return error(\n              {\n                code: \"PROVIDER_CONFIG_NOT_FOUND\",\n                message: \"Provider configuration not found\",\n              },\n              404,\n            );\n          }\n          return json(actions);\n        } catch (cause) {\n          if (!(cause instanceof ProjectConnectorClientError)) {\n            throw cause;\n          }\n          return error({ code: \"PROJECT_CONNECTOR_ERROR\", message: cause.message }, 502);\n        }\n      },\n    }),\n    defineRoute({\n      method: \"GET\",\n      path: \"/status\",\n      outputSchema: projectConnectorStatusSchema,\n      errorCodes: [\"UNAUTHENTICATED\", \"PROJECT_CONNECTOR_ERROR\"],\n      handler: async function ({ headers }, { json, error }) {\n        if (!(await config.getExternalUserId(headers))) {\n          return error({ code: \"UNAUTHENTICATED\", message: \"Authentication required\" }, 401);\n        }\n        try {\n          return json(await deps.projectConnector.check());\n        } catch (cause) {\n          if (!(cause instanceof ProjectConnectorClientError)) {\n            throw cause;\n          }\n          return error({ code: \"PROJECT_CONNECTOR_ERROR\", message: cause.message }, 502);\n        }\n      },\n    }),\n    defineRoute({\n      method: \"POST\",\n      path: \"/connection-requests\",\n      inputSchema: projectConnectorConnectInputSchema,\n      outputSchema: projectConnectorConnectionSchema,\n      errorCodes: [\"UNAUTHENTICATED\", \"RETURN_URI_NOT_ALLOWED\", \"PROJECT_CONNECTOR_ERROR\"],\n      handler: async function ({ headers, input }, { json, error }) {\n        const externalUserId = await config.getExternalUserId(headers);\n        if (!externalUserId) {\n          return error({ code: \"UNAUTHENTICATED\", message: \"Authentication required\" }, 401);\n        }\n        const body = await input.valid();\n        if (!config.allowedReturnUrls(new URL(body.returnUri))) {\n          return error(\n            { code: \"RETURN_URI_NOT_ALLOWED\", message: \"OAuth return URL is not allowed\" },\n            400,\n          );\n        }\n        try {\n          const remote = await deps.projectConnector.connect(externalUserId, body);\n          if (\n            remote.externalUserId !== externalUserId ||\n            remote.connectionName !== body.connectionName ||\n            (\"providerConfigId\" in body\n              ? remote.providerConfigId !== body.providerConfigId\n              : remote.service !== body.service)\n          ) {\n            throw new ProjectConnectorClientError(\"connection_identity_mismatch\", 502);\n          }\n          const connection = {\n            id: remote.id,\n            projectId: remote.projectId,\n            providerConfigId: remote.providerConfigId,\n            externalUserId,\n            service: remote.service,\n            connectionName: remote.connectionName,\n            authorizationUrl: remote.authorizationUrl,\n            expiresAt: remote.expiresAt,\n            state: { status: \"initiated\" as const },\n          };\n          const named = {\n            projectId: remote.projectId,\n            providerConfigId: remote.providerConfigId,\n            connectionName: body.connectionName,\n          };\n          await this.handlerTx()\n            .retrieve(({ forSchema }) =>\n              forSchema(projectConnectorSchema).findFirst(\"connectedAccount\", (b) =>\n                b.whereIndex(\"idx_account_named_connection\", (eb) =>\n                  eb.and(\n                    eb(\"externalUserId\", \"=\", externalUserId),\n                    eb(\"projectId\", \"=\", named.projectId),\n                    eb(\"providerConfigId\", \"=\", named.providerConfigId),\n                    eb(\"connectionName\", \"=\", named.connectionName),\n                  ),\n                ),\n              ),\n            )\n            .mutate(({ forSchema, retrieveResult: [account] }) => {\n              const uow = forSchema(projectConnectorSchema);\n              uow.create(\"connectionRequest\", connection);\n              // Another attempt leaves a name that already has a confirmed account ready.\n              if (!account) {\n                uow.triggerHook(\"onConnectionReadinessChanged\", {\n                  externalUserId,\n                  service: remote.service,\n                  connection: named,\n                  ready: false,\n                });\n              }\n            })\n            .execute();\n          return json(connection);\n        } catch (cause) {\n          if (!(cause instanceof ProjectConnectorClientError)) {\n            throw cause;\n          }\n          return error({ code: \"PROJECT_CONNECTOR_ERROR\", message: cause.message }, 502);\n        }\n      },\n    }),\n    defineRoute({\n      method: \"GET\",\n      path: \"/connection-requests/by-name\",\n      queryParameters: [\"projectId\", \"providerConfigId\", \"connectionName\"],\n      outputSchema: projectConnectorNamedRequestSchema,\n      errorCodes: [\"UNAUTHENTICATED\", \"INVALID_SELECTOR\", \"CONNECTION_AMBIGUOUS\"],\n      handler: async function ({ headers, query }, { json, error }) {\n        const externalUserId = await config.getExternalUserId(headers);\n        if (!externalUserId) {\n          return error({ code: \"UNAUTHENTICATED\", message: \"Authentication required\" }, 401);\n        }\n        const selector = projectConnectorNamedConnectionSchema.safeParse({\n          projectId: query.get(\"projectId\"),\n          providerConfigId: query.get(\"providerConfigId\"),\n          connectionName: query.get(\"connectionName\"),\n        });\n        if (!selector.success) {\n          return error(\n            { code: \"INVALID_SELECTOR\", message: \"Invalid named connection selector\" },\n            400,\n          );\n        }\n        const [page] = await this.handlerTx()\n          .retrieve(({ forSchema }) =>\n            forSchema(projectConnectorSchema).findWithCursor(\"connectionRequest\", (b) =>\n              b\n                .whereIndex(\"idx_request_named_connection\", (eb) =>\n                  eb.and(\n                    eb(\"externalUserId\", \"=\", externalUserId),\n                    eb(\"projectId\", \"=\", selector.data.projectId),\n                    eb(\"providerConfigId\", \"=\", selector.data.providerConfigId),\n                    eb(\"connectionName\", \"=\", selector.data.connectionName),\n                  ),\n                )\n                .orderByIndex(\"idx_request_named_connection\", \"asc\")\n                .pageSize(2),\n            ),\n          )\n          .execute();\n        if (page.items.length > 1) {\n          return error(\n            {\n              code: \"CONNECTION_AMBIGUOUS\",\n              message: \"Project Connector named connection matches multiple OAuth requests.\",\n            },\n            409,\n          );\n        }\n        const [saved] = page.items;\n        return json({ request: saved ? serializeProjectConnectorRequest(saved) : null });\n      },\n    }),\n    defineRoute({\n      method: \"POST\",\n      path: \"/connection-requests/:requestId/refresh\",\n      outputSchema: projectConnectorConnectionSchema,\n      errorCodes: [\"UNAUTHENTICATED\", \"REQUEST_NOT_FOUND\", \"PROJECT_CONNECTOR_ERROR\"],\n      handler: async function ({ headers, pathParams }, { json, error }) {\n        const externalUserId = await config.getExternalUserId(headers);\n        if (!externalUserId) {\n          return error({ code: \"UNAUTHENTICATED\", message: \"Authentication required\" }, 401);\n        }\n        let confirmed: ProjectConnectorConnectionState | null = null;\n        try {\n          const result = await this.handlerTx()\n            .retrieve(({ forSchema }) =>\n              forSchema(projectConnectorSchema)\n                .findFirst(\"connectionRequest\", (b) =>\n                  b.whereIndex(\"primary\", (eb) => eb(\"id\", \"=\", pathParams.requestId)),\n                )\n                // Confirmation supplies the account ID later; acquire owned IDs in the single read phase.\n                .find(\"connectedAccount\", (b) =>\n                  b\n                    .whereIndex(\"idx_account_external_user_id\", (eb) =>\n                      eb(\"externalUserId\", \"=\", externalUserId),\n                    )\n                    .select([\"id\", \"projectId\", \"providerConfigId\", \"service\", \"connectionName\"]),\n                ),\n            )\n            .afterRetrieve(async (_uow, [saved]) => {\n              // OCC retries must not reuse a confirmation prepared for an older snapshot.\n              confirmed = null;\n              if (\n                !saved ||\n                saved.externalUserId !== externalUserId ||\n                saved.state.status !== \"initiated\"\n              ) {\n                return;\n              }\n              const remote = await deps.projectConnector.getConnectionRequest(saved.id.toString());\n              confirmed = confirmProjectConnectorRequest(\n                { ...saved, id: saved.id.toString() },\n                remote,\n              );\n            })\n            .mutate(({ forSchema, retrieveResult: [saved, accounts] }) => {\n              if (!saved || saved.externalUserId !== externalUserId) {\n                return null;\n              }\n              const state = confirmed ?? saved.state;\n              const uow = forSchema(projectConnectorSchema);\n              if (saved.state.status === \"initiated\" && state.status !== \"initiated\") {\n                uow.update(\"connectionRequest\", saved.id, (b) => b.set({ state }).check());\n                if (state.status === \"connected\") {\n                  const existing = accounts.find(\n                    (account) => account.id.toString() === state.connectedAccountId,\n                  );\n                  // Reauthorization replaces only the same owned account ID, not other accounts sharing its name.\n                  if (existing) {\n                    uow.delete(\"connectedAccount\", existing.id, (b) => b.check());\n                  }\n                  // An incoming ID belonging to another user must fail the create, never replace their binding.\n                  uow.create(\"connectedAccount\", {\n                    id: state.connectedAccountId,\n                    projectId: saved.projectId,\n                    providerConfigId: saved.providerConfigId,\n                    externalUserId: saved.externalUserId,\n                    service: saved.service,\n                    connectionName: saved.connectionName,\n                  });\n                  const sameName =\n                    (named: (typeof accounts)[number] | typeof saved) =>\n                    (account: (typeof accounts)[number]) =>\n                      account.projectId === named.projectId &&\n                      account.providerConfigId === named.providerConfigId &&\n                      account.connectionName === named.connectionName;\n                  // Reauthorization can move the account to this name, leaving its old name without one.\n                  if (\n                    existing &&\n                    !sameName(saved)(existing) &&\n                    !accounts.some((account) => account !== existing && sameName(existing)(account))\n                  ) {\n                    uow.triggerHook(\"onConnectionReadinessChanged\", {\n                      externalUserId,\n                      service: existing.service,\n                      connection: {\n                        projectId: existing.projectId,\n                        providerConfigId: existing.providerConfigId,\n                        connectionName: existing.connectionName,\n                      },\n                      ready: false,\n                    });\n                  }\n                  const wasReady = accounts.some(sameName(saved));\n                  if (!wasReady) {\n                    uow.triggerHook(\"onConnectionReadinessChanged\", {\n                      externalUserId,\n                      service: saved.service,\n                      connection: {\n                        projectId: saved.projectId,\n                        providerConfigId: saved.providerConfigId,\n                        connectionName: saved.connectionName,\n                      },\n                      ready: true,\n                    });\n                  }\n                }\n              }\n              return serializeProjectConnectorRequest({ ...saved, state });\n            })\n            .execute();\n          if (!result) {\n            return error(\n              { code: \"REQUEST_NOT_FOUND\", message: \"Connection request not found\" },\n              404,\n            );\n          }\n          return json(result);\n        } catch (cause) {\n          if (!(cause instanceof ProjectConnectorClientError)) {\n            throw cause;\n          }\n          return error({ code: \"PROJECT_CONNECTOR_ERROR\", message: cause.message }, 502);\n        }\n      },\n    }),\n    defineRoute({\n      method: \"GET\",\n      path: \"/accounts\",\n      queryParameters: [\"cursor\"],\n      outputSchema: projectConnectorAccountsSchema,\n      errorCodes: [\"UNAUTHENTICATED\", \"INVALID_CURSOR\"],\n      handler: async function ({ headers, query }, { json, error }) {\n        const externalUserId = await config.getExternalUserId(headers);\n        if (!externalUserId) {\n          return error({ code: \"UNAUTHENTICATED\", message: \"Authentication required\" }, 401);\n        }\n        let cursor: Cursor | null = null;\n        const rawCursor = query.get(\"cursor\");\n        if (rawCursor) {\n          try {\n            cursor = decodeCursor(rawCursor);\n            const accountId = cursor.indexValues[\"id\"];\n            if (\n              cursor.indexName !== \"idx_account_external_user_id\" ||\n              cursor.orderDirection !== \"asc\" ||\n              cursor.pageSize !== 25 ||\n              cursor.indexValues[\"externalUserId\"] !== externalUserId ||\n              typeof accountId !== \"string\" ||\n              accountId.length === 0\n            ) {\n              throw new Error(\"Account cursor does not match this user or query\");\n            }\n          } catch {\n            return error({ code: \"INVALID_CURSOR\", message: \"Invalid account cursor\" }, 400);\n          }\n        }\n        const [page] = await this.handlerTx()\n          .retrieve(({ forSchema }) =>\n            forSchema(projectConnectorSchema).findWithCursor(\"connectedAccount\", (b) => {\n              const ordered = b\n                .whereIndex(\"idx_account_external_user_id\", (eb) =>\n                  eb(\"externalUserId\", \"=\", externalUserId),\n                )\n                .orderByIndex(\"idx_account_external_user_id\", \"asc\")\n                .pageSize(25);\n              return cursor ? ordered.after(cursor) : ordered;\n            }),\n          )\n          .execute();\n        return json({\n          accounts: page.items.map((account) => ({\n            id: account.id.toString(),\n            projectId: account.projectId,\n            providerConfigId: account.providerConfigId,\n            externalUserId: account.externalUserId,\n            service: account.service,\n            connectionName: account.connectionName,\n          })),\n          cursor: page.cursor?.encode() ?? null,\n          hasNextPage: page.hasNextPage,\n        });\n      },\n    }),\n    defineRoute({\n      method: \"GET\",\n      path: \"/accounts/by-name\",\n      queryParameters: [\"projectId\", \"providerConfigId\", \"connectionName\"],\n      outputSchema: projectConnectorNamedAccountSchema,\n      errorCodes: [\"UNAUTHENTICATED\", \"INVALID_SELECTOR\", \"CONNECTION_AMBIGUOUS\"],\n      handler: async function ({ headers, query }, { json, error }) {\n        const externalUserId = await config.getExternalUserId(headers);\n        if (!externalUserId) {\n          return error({ code: \"UNAUTHENTICATED\", message: \"Authentication required\" }, 401);\n        }\n        const selector = projectConnectorNamedConnectionSchema.safeParse({\n          projectId: query.get(\"projectId\"),\n          providerConfigId: query.get(\"providerConfigId\"),\n          connectionName: query.get(\"connectionName\"),\n        });\n        if (!selector.success) {\n          return error(\n            { code: \"INVALID_SELECTOR\", message: \"Invalid named connection selector\" },\n            400,\n          );\n        }\n        const [page] = await this.handlerTx()\n          .retrieve(({ forSchema }) =>\n            forSchema(projectConnectorSchema).findWithCursor(\"connectedAccount\", (b) =>\n              b\n                .whereIndex(\"idx_account_named_connection\", (eb) =>\n                  eb.and(\n                    eb(\"externalUserId\", \"=\", externalUserId),\n                    eb(\"projectId\", \"=\", selector.data.projectId),\n                    eb(\"providerConfigId\", \"=\", selector.data.providerConfigId),\n                    eb(\"connectionName\", \"=\", selector.data.connectionName),\n                  ),\n                )\n                .orderByIndex(\"idx_account_named_connection\", \"asc\")\n                .pageSize(2),\n            ),\n          )\n          .execute();\n        if (page.items.length > 1) {\n          return error(\n            {\n              code: \"CONNECTION_AMBIGUOUS\",\n              message: \"Project Connector named connection matches multiple confirmed accounts.\",\n            },\n            409,\n          );\n        }\n        const [account] = page.items;\n        return json({\n          account: account\n            ? {\n                id: account.id.toString(),\n                projectId: account.projectId,\n                providerConfigId: account.providerConfigId,\n                externalUserId: account.externalUserId,\n                service: account.service,\n                connectionName: account.connectionName,\n              }\n            : null,\n        });\n      },\n    }),\n    defineRoute({\n      method: \"GET\",\n      path: \"/accounts/:accountId/profile\",\n      outputSchema: projectConnectorProfileSchema,\n      errorCodes: [\"UNAUTHENTICATED\", \"ACCOUNT_NOT_FOUND\", \"PROJECT_CONNECTOR_ERROR\"],\n      handler: async function ({ headers, pathParams }, { json, error }) {\n        const externalUserId = await config.getExternalUserId(headers);\n        if (!externalUserId) {\n          return error({ code: \"UNAUTHENTICATED\", message: \"Authentication required\" }, 401);\n        }\n        const [account] = await this.handlerTx()\n          .retrieve(({ forSchema }) =>\n            forSchema(projectConnectorSchema).findFirst(\"connectedAccount\", (b) =>\n              b.whereIndex(\"primary\", (eb) => eb(\"id\", \"=\", pathParams.accountId)),\n            ),\n          )\n          .execute();\n        if (!account || account.externalUserId !== externalUserId) {\n          return error({ code: \"ACCOUNT_NOT_FOUND\", message: \"Connected account not found\" }, 404);\n        }\n        try {\n          const profile = await deps.projectConnector.getProfile(account.id.toString());\n          if (\n            profile.connectedAccountId !== account.id.toString() ||\n            profile.externalUserId !== externalUserId ||\n            profile.service !== account.service\n          ) {\n            throw new ProjectConnectorClientError(\"account_identity_mismatch\", 502);\n          }\n          return json(profile);\n        } catch (cause) {\n          if (!(cause instanceof ProjectConnectorClientError)) {\n            throw cause;\n          }\n          return error({ code: \"PROJECT_CONNECTOR_ERROR\", message: cause.message }, 502);\n        }\n      },\n    }),\n    defineRoute({\n      method: \"POST\",\n      path: \"/accounts/:accountId/actions/:actionId\",\n      inputSchema: z.strictObject({ input: z.record(z.string(), z.unknown()) }),\n      outputSchema: projectConnectorExecutionSchema,\n      errorCodes: [\n        \"UNAUTHENTICATED\",\n        \"ACCOUNT_NOT_FOUND\",\n        \"ACTION_SERVICE_MISMATCH\",\n        \"PROJECT_CONNECTOR_ERROR\",\n      ],\n      handler: async function ({ headers, pathParams, input }, { json, error }) {\n        const externalUserId = await config.getExternalUserId(headers);\n        if (!externalUserId) {\n          return error({ code: \"UNAUTHENTICATED\", message: \"Authentication required\" }, 401);\n        }\n        const body = await input.valid();\n        const [account] = await this.handlerTx()\n          .retrieve(({ forSchema }) =>\n            forSchema(projectConnectorSchema).findFirst(\"connectedAccount\", (b) =>\n              b.whereIndex(\"primary\", (eb) => eb(\"id\", \"=\", pathParams.accountId)),\n            ),\n          )\n          .execute();\n        if (!account || account.externalUserId !== externalUserId) {\n          return error({ code: \"ACCOUNT_NOT_FOUND\", message: \"Connected account not found\" }, 404);\n        }\n        if (\n          !pathParams.actionId.startsWith(`${account.service}.`) ||\n          !/^[a-z0-9_-]+\\.[a-z0-9_-]+$/.test(pathParams.actionId)\n        ) {\n          return error(\n            {\n              code: \"ACTION_SERVICE_MISMATCH\",\n              message: \"Action must belong to the connected account service\",\n            },\n            400,\n          );\n        }\n        try {\n          return json(\n            await deps.projectConnector.execute(\n              { ...account, id: account.id.toString() },\n              pathParams.actionId,\n              body.input,\n            ),\n          );\n        } catch (cause) {\n          if (!(cause instanceof ProjectConnectorClientError)) {\n            throw cause;\n          }\n          return error({ code: \"PROJECT_CONNECTOR_ERROR\", message: cause.message }, 502);\n        }\n      },\n    }),\n  ],\n);\n"],"mappings":";;;;;;;;AA0BA,SAAS,iCACP,OAGmD;CACnD,OAAO;EACL,IAAI,MAAM,GAAG,SAAS;EACtB,WAAW,MAAM;EACjB,kBAAkB,MAAM;EACxB,gBAAgB,MAAM;EACtB,SAAS,MAAM;EACf,gBAAgB,MAAM;EACtB,kBAAkB,MAAM;EACxB,WAAW,MAAM;EACjB,OAAO,MAAM;CACf;AACF;;AAGA,MAAa,yBAAyB,aAAa,kCAAkC,CAAC,CAAC,QACpF,EAAE,QAAQ,MAAM,kBAAkB;CACjC,YAAY;EACV,QAAQ;EACR,MAAM;EACN,cAAc;EACd,YAAY,CAAC,mBAAmB,yBAAyB;EACzD,SAAS,eAAgB,EAAE,WAAW,EAAE,MAAM,SAAS;GACrD,IAAI,CAAE,MAAM,OAAO,kBAAkB,OAAO,GAC1C,OAAO,MAAM;IAAE,MAAM;IAAmB,SAAS;GAA0B,GAAG,GAAG;GAEnF,IAAI;IACF,OAAO,KAAK,MAAM,KAAK,iBAAiB,oBAAoB,CAAC;GAC/D,SAAS,OAAO;IACd,IAAI,EAAE,iBAAiB,8BACrB,MAAM;IAER,OAAO,MAAM;KAAE,MAAM;KAA2B,SAAS,MAAM;IAAQ,GAAG,GAAG;GAC/E;EACF;CACF,CAAC;CACD,YAAY;EACV,QAAQ;EACR,MAAM;EACN,cAAc;EACd,YAAY;GAAC;GAAmB;GAA6B;EAAyB;EACtF,SAAS,eAAgB,EAAE,SAAS,cAAc,EAAE,MAAM,SAAS;GACjE,IAAI,CAAE,MAAM,OAAO,kBAAkB,OAAO,GAC1C,OAAO,MAAM;IAAE,MAAM;IAAmB,SAAS;GAA0B,GAAG,GAAG;GAEnF,IAAI;IACF,MAAM,UAAU,MAAM,KAAK,iBAAiB,oBAC1C,WAAW,gBACb;IACA,IAAI,CAAC,SACH,OAAO,MACL;KACE,MAAM;KACN,SAAS;IACX,GACA,GACF;IAEF,OAAO,KAAK,OAAO;GACrB,SAAS,OAAO;IACd,IAAI,EAAE,iBAAiB,8BACrB,MAAM;IAER,OAAO,MAAM;KAAE,MAAM;KAA2B,SAAS,MAAM;IAAQ,GAAG,GAAG;GAC/E;EACF;CACF,CAAC;CACD,YAAY;EACV,QAAQ;EACR,MAAM;EACN,cAAc;EACd,YAAY,CAAC,mBAAmB,yBAAyB;EACzD,SAAS,eAAgB,EAAE,WAAW,EAAE,MAAM,SAAS;GACrD,IAAI,CAAE,MAAM,OAAO,kBAAkB,OAAO,GAC1C,OAAO,MAAM;IAAE,MAAM;IAAmB,SAAS;GAA0B,GAAG,GAAG;GAEnF,IAAI;IACF,OAAO,KAAK,MAAM,KAAK,iBAAiB,MAAM,CAAC;GACjD,SAAS,OAAO;IACd,IAAI,EAAE,iBAAiB,8BACrB,MAAM;IAER,OAAO,MAAM;KAAE,MAAM;KAA2B,SAAS,MAAM;IAAQ,GAAG,GAAG;GAC/E;EACF;CACF,CAAC;CACD,YAAY;EACV,QAAQ;EACR,MAAM;EACN,aAAa;EACb,cAAc;EACd,YAAY;GAAC;GAAmB;GAA0B;EAAyB;EACnF,SAAS,eAAgB,EAAE,SAAS,SAAS,EAAE,MAAM,SAAS;GAC5D,MAAM,iBAAiB,MAAM,OAAO,kBAAkB,OAAO;GAC7D,IAAI,CAAC,gBACH,OAAO,MAAM;IAAE,MAAM;IAAmB,SAAS;GAA0B,GAAG,GAAG;GAEnF,MAAM,OAAO,MAAM,MAAM,MAAM;GAC/B,IAAI,CAAC,OAAO,kBAAkB,IAAI,IAAI,KAAK,SAAS,CAAC,GACnD,OAAO,MACL;IAAE,MAAM;IAA0B,SAAS;GAAkC,GAC7E,GACF;GAEF,IAAI;IACF,MAAM,SAAS,MAAM,KAAK,iBAAiB,QAAQ,gBAAgB,IAAI;IACvE,IACE,OAAO,mBAAmB,kBAC1B,OAAO,mBAAmB,KAAK,mBAC9B,sBAAsB,OACnB,OAAO,qBAAqB,KAAK,mBACjC,OAAO,YAAY,KAAK,UAE5B,MAAM,IAAI,4BAA4B,gCAAgC,GAAG;IAE3E,MAAM,aAAa;KACjB,IAAI,OAAO;KACX,WAAW,OAAO;KAClB,kBAAkB,OAAO;KACzB;KACA,SAAS,OAAO;KAChB,gBAAgB,OAAO;KACvB,kBAAkB,OAAO;KACzB,WAAW,OAAO;KAClB,OAAO,EAAE,QAAQ,YAAqB;IACxC;IACA,MAAM,QAAQ;KACZ,WAAW,OAAO;KAClB,kBAAkB,OAAO;KACzB,gBAAgB,KAAK;IACvB;IACA,MAAM,KAAK,UAAU,CAAC,CACnB,UAAU,EAAE,gBACX,UAAU,sBAAsB,CAAC,CAAC,UAAU,qBAAqB,MAC/D,EAAE,WAAW,iCAAiC,OAC5C,GAAG,IACD,GAAG,kBAAkB,KAAK,cAAc,GACxC,GAAG,aAAa,KAAK,MAAM,SAAS,GACpC,GAAG,oBAAoB,KAAK,MAAM,gBAAgB,GAClD,GAAG,kBAAkB,KAAK,MAAM,cAAc,CAChD,CACF,CACF,CACF,CAAC,CACA,QAAQ,EAAE,WAAW,gBAAgB,CAAC,eAAe;KACpD,MAAM,MAAM,UAAU,sBAAsB;KAC5C,IAAI,OAAO,qBAAqB,UAAU;KAE1C,IAAI,CAAC,SACH,IAAI,YAAY,gCAAgC;MAC9C;MACA,SAAS,OAAO;MAChB,YAAY;MACZ,OAAO;KACT,CAAC;IAEL,CAAC,CAAC,CACD,QAAQ;IACX,OAAO,KAAK,UAAU;GACxB,SAAS,OAAO;IACd,IAAI,EAAE,iBAAiB,8BACrB,MAAM;IAER,OAAO,MAAM;KAAE,MAAM;KAA2B,SAAS,MAAM;IAAQ,GAAG,GAAG;GAC/E;EACF;CACF,CAAC;CACD,YAAY;EACV,QAAQ;EACR,MAAM;EACN,iBAAiB;GAAC;GAAa;GAAoB;EAAgB;EACnE,cAAc;EACd,YAAY;GAAC;GAAmB;GAAoB;EAAsB;EAC1E,SAAS,eAAgB,EAAE,SAAS,SAAS,EAAE,MAAM,SAAS;GAC5D,MAAM,iBAAiB,MAAM,OAAO,kBAAkB,OAAO;GAC7D,IAAI,CAAC,gBACH,OAAO,MAAM;IAAE,MAAM;IAAmB,SAAS;GAA0B,GAAG,GAAG;GAEnF,MAAM,WAAW,sCAAsC,UAAU;IAC/D,WAAW,MAAM,IAAI,WAAW;IAChC,kBAAkB,MAAM,IAAI,kBAAkB;IAC9C,gBAAgB,MAAM,IAAI,gBAAgB;GAC5C,CAAC;GACD,IAAI,CAAC,SAAS,SACZ,OAAO,MACL;IAAE,MAAM;IAAoB,SAAS;GAAoC,GACzE,GACF;GAEF,MAAM,CAAC,QAAQ,MAAM,KAAK,UAAU,CAAC,CAClC,UAAU,EAAE,gBACX,UAAU,sBAAsB,CAAC,CAAC,eAAe,sBAAsB,MACrE,EACG,WAAW,iCAAiC,OAC3C,GAAG,IACD,GAAG,kBAAkB,KAAK,cAAc,GACxC,GAAG,aAAa,KAAK,SAAS,KAAK,SAAS,GAC5C,GAAG,oBAAoB,KAAK,SAAS,KAAK,gBAAgB,GAC1D,GAAG,kBAAkB,KAAK,SAAS,KAAK,cAAc,CACxD,CACF,CAAC,CACA,aAAa,gCAAgC,KAAK,CAAC,CACnD,SAAS,CAAC,CACf,CACF,CAAC,CACA,QAAQ;GACX,IAAI,KAAK,MAAM,SAAS,GACtB,OAAO,MACL;IACE,MAAM;IACN,SAAS;GACX,GACA,GACF;GAEF,MAAM,CAAC,SAAS,KAAK;GACrB,OAAO,KAAK,EAAE,SAAS,QAAQ,iCAAiC,KAAK,IAAI,KAAK,CAAC;EACjF;CACF,CAAC;CACD,YAAY;EACV,QAAQ;EACR,MAAM;EACN,cAAc;EACd,YAAY;GAAC;GAAmB;GAAqB;EAAyB;EAC9E,SAAS,eAAgB,EAAE,SAAS,cAAc,EAAE,MAAM,SAAS;GACjE,MAAM,iBAAiB,MAAM,OAAO,kBAAkB,OAAO;GAC7D,IAAI,CAAC,gBACH,OAAO,MAAM;IAAE,MAAM;IAAmB,SAAS;GAA0B,GAAG,GAAG;GAEnF,IAAI,YAAoD;GACxD,IAAI;IACF,MAAM,SAAS,MAAM,KAAK,UAAU,CAAC,CAClC,UAAU,EAAE,gBACX,UAAU,sBAAsB,CAAC,CAC9B,UAAU,sBAAsB,MAC/B,EAAE,WAAW,YAAY,OAAO,GAAG,MAAM,KAAK,WAAW,SAAS,CAAC,CACrE,CAAC,CAEA,KAAK,qBAAqB,MACzB,EACG,WAAW,iCAAiC,OAC3C,GAAG,kBAAkB,KAAK,cAAc,CAC1C,CAAC,CACA,OAAO;KAAC;KAAM;KAAa;KAAoB;KAAW;IAAgB,CAAC,CAChF,CACJ,CAAC,CACA,cAAc,OAAO,MAAM,CAAC,WAAW;KAEtC,YAAY;KACZ,IACE,CAAC,SACD,MAAM,mBAAmB,kBACzB,MAAM,MAAM,WAAW,aAEvB;KAEF,MAAM,SAAS,MAAM,KAAK,iBAAiB,qBAAqB,MAAM,GAAG,SAAS,CAAC;KACnF,YAAY,+BACV;MAAE,GAAG;MAAO,IAAI,MAAM,GAAG,SAAS;KAAE,GACpC,MACF;IACF,CAAC,CAAC,CACD,QAAQ,EAAE,WAAW,gBAAgB,CAAC,OAAO,gBAAgB;KAC5D,IAAI,CAAC,SAAS,MAAM,mBAAmB,gBACrC,OAAO;KAET,MAAM,QAAQ,aAAa,MAAM;KACjC,MAAM,MAAM,UAAU,sBAAsB;KAC5C,IAAI,MAAM,MAAM,WAAW,eAAe,MAAM,WAAW,aAAa;MACtE,IAAI,OAAO,qBAAqB,MAAM,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;MACzE,IAAI,MAAM,WAAW,aAAa;OAChC,MAAM,WAAW,SAAS,MACvB,YAAY,QAAQ,GAAG,SAAS,MAAM,MAAM,kBAC/C;OAEA,IAAI,UACF,IAAI,OAAO,oBAAoB,SAAS,KAAK,MAAM,EAAE,MAAM,CAAC;OAG9D,IAAI,OAAO,oBAAoB;QAC7B,IAAI,MAAM;QACV,WAAW,MAAM;QACjB,kBAAkB,MAAM;QACxB,gBAAgB,MAAM;QACtB,SAAS,MAAM;QACf,gBAAgB,MAAM;OACxB,CAAC;OACD,MAAM,YACH,WACA,YACC,QAAQ,cAAc,MAAM,aAC5B,QAAQ,qBAAqB,MAAM,oBACnC,QAAQ,mBAAmB,MAAM;OAErC,IACE,YACA,CAAC,SAAS,KAAK,CAAC,CAAC,QAAQ,KACzB,CAAC,SAAS,MAAM,YAAY,YAAY,YAAY,SAAS,QAAQ,CAAC,CAAC,OAAO,CAAC,GAE/E,IAAI,YAAY,gCAAgC;QAC9C;QACA,SAAS,SAAS;QAClB,YAAY;SACV,WAAW,SAAS;SACpB,kBAAkB,SAAS;SAC3B,gBAAgB,SAAS;QAC3B;QACA,OAAO;OACT,CAAC;OAGH,IAAI,CADa,SAAS,KAAK,SAAS,KAAK,CACjC,GACV,IAAI,YAAY,gCAAgC;QAC9C;QACA,SAAS,MAAM;QACf,YAAY;SACV,WAAW,MAAM;SACjB,kBAAkB,MAAM;SACxB,gBAAgB,MAAM;QACxB;QACA,OAAO;OACT,CAAC;MAEL;KACF;KACA,OAAO,iCAAiC;MAAE,GAAG;MAAO;KAAM,CAAC;IAC7D,CAAC,CAAC,CACD,QAAQ;IACX,IAAI,CAAC,QACH,OAAO,MACL;KAAE,MAAM;KAAqB,SAAS;IAA+B,GACrE,GACF;IAEF,OAAO,KAAK,MAAM;GACpB,SAAS,OAAO;IACd,IAAI,EAAE,iBAAiB,8BACrB,MAAM;IAER,OAAO,MAAM;KAAE,MAAM;KAA2B,SAAS,MAAM;IAAQ,GAAG,GAAG;GAC/E;EACF;CACF,CAAC;CACD,YAAY;EACV,QAAQ;EACR,MAAM;EACN,iBAAiB,CAAC,QAAQ;EAC1B,cAAc;EACd,YAAY,CAAC,mBAAmB,gBAAgB;EAChD,SAAS,eAAgB,EAAE,SAAS,SAAS,EAAE,MAAM,SAAS;GAC5D,MAAM,iBAAiB,MAAM,OAAO,kBAAkB,OAAO;GAC7D,IAAI,CAAC,gBACH,OAAO,MAAM;IAAE,MAAM;IAAmB,SAAS;GAA0B,GAAG,GAAG;GAEnF,IAAI,SAAwB;GAC5B,MAAM,YAAY,MAAM,IAAI,QAAQ;GACpC,IAAI,WACF,IAAI;IACF,SAAS,aAAa,SAAS;IAC/B,MAAM,YAAY,OAAO,YAAY;IACrC,IACE,OAAO,cAAc,kCACrB,OAAO,mBAAmB,SAC1B,OAAO,aAAa,MACpB,OAAO,YAAY,sBAAsB,kBACzC,OAAO,cAAc,YACrB,UAAU,WAAW,GAErB,MAAM,IAAI,MAAM,kDAAkD;GAEtE,QAAQ;IACN,OAAO,MAAM;KAAE,MAAM;KAAkB,SAAS;IAAyB,GAAG,GAAG;GACjF;GAEF,MAAM,CAAC,QAAQ,MAAM,KAAK,UAAU,CAAC,CAClC,UAAU,EAAE,gBACX,UAAU,sBAAsB,CAAC,CAAC,eAAe,qBAAqB,MAAM;IAC1E,MAAM,UAAU,EACb,WAAW,iCAAiC,OAC3C,GAAG,kBAAkB,KAAK,cAAc,CAC1C,CAAC,CACA,aAAa,gCAAgC,KAAK,CAAC,CACnD,SAAS,EAAE;IACd,OAAO,SAAS,QAAQ,MAAM,MAAM,IAAI;GAC1C,CAAC,CACH,CAAC,CACA,QAAQ;GACX,OAAO,KAAK;IACV,UAAU,KAAK,MAAM,KAAK,aAAa;KACrC,IAAI,QAAQ,GAAG,SAAS;KACxB,WAAW,QAAQ;KACnB,kBAAkB,QAAQ;KAC1B,gBAAgB,QAAQ;KACxB,SAAS,QAAQ;KACjB,gBAAgB,QAAQ;IAC1B,EAAE;IACF,QAAQ,KAAK,QAAQ,OAAO,KAAK;IACjC,aAAa,KAAK;GACpB,CAAC;EACH;CACF,CAAC;CACD,YAAY;EACV,QAAQ;EACR,MAAM;EACN,iBAAiB;GAAC;GAAa;GAAoB;EAAgB;EACnE,cAAc;EACd,YAAY;GAAC;GAAmB;GAAoB;EAAsB;EAC1E,SAAS,eAAgB,EAAE,SAAS,SAAS,EAAE,MAAM,SAAS;GAC5D,MAAM,iBAAiB,MAAM,OAAO,kBAAkB,OAAO;GAC7D,IAAI,CAAC,gBACH,OAAO,MAAM;IAAE,MAAM;IAAmB,SAAS;GAA0B,GAAG,GAAG;GAEnF,MAAM,WAAW,sCAAsC,UAAU;IAC/D,WAAW,MAAM,IAAI,WAAW;IAChC,kBAAkB,MAAM,IAAI,kBAAkB;IAC9C,gBAAgB,MAAM,IAAI,gBAAgB;GAC5C,CAAC;GACD,IAAI,CAAC,SAAS,SACZ,OAAO,MACL;IAAE,MAAM;IAAoB,SAAS;GAAoC,GACzE,GACF;GAEF,MAAM,CAAC,QAAQ,MAAM,KAAK,UAAU,CAAC,CAClC,UAAU,EAAE,gBACX,UAAU,sBAAsB,CAAC,CAAC,eAAe,qBAAqB,MACpE,EACG,WAAW,iCAAiC,OAC3C,GAAG,IACD,GAAG,kBAAkB,KAAK,cAAc,GACxC,GAAG,aAAa,KAAK,SAAS,KAAK,SAAS,GAC5C,GAAG,oBAAoB,KAAK,SAAS,KAAK,gBAAgB,GAC1D,GAAG,kBAAkB,KAAK,SAAS,KAAK,cAAc,CACxD,CACF,CAAC,CACA,aAAa,gCAAgC,KAAK,CAAC,CACnD,SAAS,CAAC,CACf,CACF,CAAC,CACA,QAAQ;GACX,IAAI,KAAK,MAAM,SAAS,GACtB,OAAO,MACL;IACE,MAAM;IACN,SAAS;GACX,GACA,GACF;GAEF,MAAM,CAAC,WAAW,KAAK;GACvB,OAAO,KAAK,EACV,SAAS,UACL;IACE,IAAI,QAAQ,GAAG,SAAS;IACxB,WAAW,QAAQ;IACnB,kBAAkB,QAAQ;IAC1B,gBAAgB,QAAQ;IACxB,SAAS,QAAQ;IACjB,gBAAgB,QAAQ;GAC1B,IACA,KACN,CAAC;EACH;CACF,CAAC;CACD,YAAY;EACV,QAAQ;EACR,MAAM;EACN,cAAc;EACd,YAAY;GAAC;GAAmB;GAAqB;EAAyB;EAC9E,SAAS,eAAgB,EAAE,SAAS,cAAc,EAAE,MAAM,SAAS;GACjE,MAAM,iBAAiB,MAAM,OAAO,kBAAkB,OAAO;GAC7D,IAAI,CAAC,gBACH,OAAO,MAAM;IAAE,MAAM;IAAmB,SAAS;GAA0B,GAAG,GAAG;GAEnF,MAAM,CAAC,WAAW,MAAM,KAAK,UAAU,CAAC,CACrC,UAAU,EAAE,gBACX,UAAU,sBAAsB,CAAC,CAAC,UAAU,qBAAqB,MAC/D,EAAE,WAAW,YAAY,OAAO,GAAG,MAAM,KAAK,WAAW,SAAS,CAAC,CACrE,CACF,CAAC,CACA,QAAQ;GACX,IAAI,CAAC,WAAW,QAAQ,mBAAmB,gBACzC,OAAO,MAAM;IAAE,MAAM;IAAqB,SAAS;GAA8B,GAAG,GAAG;GAEzF,IAAI;IACF,MAAM,UAAU,MAAM,KAAK,iBAAiB,WAAW,QAAQ,GAAG,SAAS,CAAC;IAC5E,IACE,QAAQ,uBAAuB,QAAQ,GAAG,SAAS,KACnD,QAAQ,mBAAmB,kBAC3B,QAAQ,YAAY,QAAQ,SAE5B,MAAM,IAAI,4BAA4B,6BAA6B,GAAG;IAExE,OAAO,KAAK,OAAO;GACrB,SAAS,OAAO;IACd,IAAI,EAAE,iBAAiB,8BACrB,MAAM;IAER,OAAO,MAAM;KAAE,MAAM;KAA2B,SAAS,MAAM;IAAQ,GAAG,GAAG;GAC/E;EACF;CACF,CAAC;CACD,YAAY;EACV,QAAQ;EACR,MAAM;EACN,aAAa,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;EACxE,cAAc;EACd,YAAY;GACV;GACA;GACA;GACA;EACF;EACA,SAAS,eAAgB,EAAE,SAAS,YAAY,SAAS,EAAE,MAAM,SAAS;GACxE,MAAM,iBAAiB,MAAM,OAAO,kBAAkB,OAAO;GAC7D,IAAI,CAAC,gBACH,OAAO,MAAM;IAAE,MAAM;IAAmB,SAAS;GAA0B,GAAG,GAAG;GAEnF,MAAM,OAAO,MAAM,MAAM,MAAM;GAC/B,MAAM,CAAC,WAAW,MAAM,KAAK,UAAU,CAAC,CACrC,UAAU,EAAE,gBACX,UAAU,sBAAsB,CAAC,CAAC,UAAU,qBAAqB,MAC/D,EAAE,WAAW,YAAY,OAAO,GAAG,MAAM,KAAK,WAAW,SAAS,CAAC,CACrE,CACF,CAAC,CACA,QAAQ;GACX,IAAI,CAAC,WAAW,QAAQ,mBAAmB,gBACzC,OAAO,MAAM;IAAE,MAAM;IAAqB,SAAS;GAA8B,GAAG,GAAG;GAEzF,IACE,CAAC,WAAW,SAAS,WAAW,GAAG,QAAQ,QAAQ,EAAE,KACrD,CAAC,6BAA6B,KAAK,WAAW,QAAQ,GAEtD,OAAO,MACL;IACE,MAAM;IACN,SAAS;GACX,GACA,GACF;GAEF,IAAI;IACF,OAAO,KACL,MAAM,KAAK,iBAAiB,QAC1B;KAAE,GAAG;KAAS,IAAI,QAAQ,GAAG,SAAS;IAAE,GACxC,WAAW,UACX,KAAK,KACP,CACF;GACF,SAAS,OAAO;IACd,IAAI,EAAE,iBAAiB,8BACrB,MAAM;IAER,OAAO,MAAM;KAAE,MAAM;KAA2B,SAAS,MAAM;IAAQ,GAAG,GAAG;GAC/E;EACF;CACF,CAAC;AACH,CACF"}

package/dist/cli/schema.js

@@ -0,0 +1,18 @@
+import { column, idColumn, schema } from "@fragno-dev/db/schema";
+//#region src/schema.ts
+/** Product-user bindings and OAuth requests; upstream credentials stay in ProjectConnector. */
+const projectConnectorSchema = schema("project-connector-fragment", (s) => s.addTable("connectionRequest", (t) => t.addColumn("id", idColumn()).addColumn("projectId", column("string")).addColumn("providerConfigId", column("string")).addColumn("externalUserId", column("string")).addColumn("service", column("string")).addColumn("connectionName", column("string").nullable()).addColumn("authorizationUrl", column("text")).addColumn("expiresAt", column("string")).addColumn("state", column("json"))).addTable("connectedAccount", (t) => t.addColumn("id", idColumn()).addColumn("projectId", column("string")).addColumn("providerConfigId", column("string")).addColumn("externalUserId", column("string")).addColumn("service", column("string")).addColumn("connectionName", column("string").nullable()).createIndex("idx_account_external_user_id", ["externalUserId", "id"])).alterTable("connectionRequest", (t) => t.createIndex("idx_request_named_connection", [
+	"externalUserId",
+	"projectId",
+	"providerConfigId",
+	"connectionName"
+])).alterTable("connectedAccount", (t) => t.createIndex("idx_account_named_connection", [
+	"externalUserId",
+	"projectId",
+	"providerConfigId",
+	"connectionName"
+])).alterTable("connectionRequest", (t) => t.alterColumn("connectionName").nullable(false)).alterTable("connectedAccount", (t) => t.alterColumn("connectionName").nullable(false)));
+//#endregion
+export { projectConnectorSchema };
+
+//# sourceMappingURL=schema.js.map

package/dist/cli/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","names":[],"sources":["../../src/schema.ts"],"sourcesContent":["import { column, idColumn, schema, type Column } from \"@fragno-dev/db/schema\";\n\nimport type { ProjectConnectorConnectionState } from \"./project-connector-contracts\";\n\n/** Product-user bindings and OAuth requests; upstream credentials stay in ProjectConnector. */\nexport const projectConnectorSchema = schema(\"project-connector-fragment\", (s) =>\n  s\n    .addTable(\"connectionRequest\", (t) =>\n      t\n        .addColumn(\"id\", idColumn())\n        .addColumn(\"projectId\", column(\"string\"))\n        .addColumn(\"providerConfigId\", column(\"string\"))\n        .addColumn(\"externalUserId\", column(\"string\"))\n        .addColumn(\"service\", column(\"string\"))\n        .addColumn(\"connectionName\", column(\"string\").nullable())\n        .addColumn(\"authorizationUrl\", column(\"text\"))\n        .addColumn(\"expiresAt\", column(\"string\"))\n        .addColumn(\n          \"state\",\n          column(\"json\") as Column<\n            \"json\",\n            ProjectConnectorConnectionState,\n            ProjectConnectorConnectionState\n          >,\n        ),\n    )\n    .addTable(\"connectedAccount\", (t) =>\n      t\n        .addColumn(\"id\", idColumn())\n        .addColumn(\"projectId\", column(\"string\"))\n        .addColumn(\"providerConfigId\", column(\"string\"))\n        .addColumn(\"externalUserId\", column(\"string\"))\n        .addColumn(\"service\", column(\"string\"))\n        .addColumn(\"connectionName\", column(\"string\").nullable())\n        .createIndex(\"idx_account_external_user_id\", [\"externalUserId\", \"id\"]),\n    )\n    .alterTable(\"connectionRequest\", (t) =>\n      t.createIndex(\"idx_request_named_connection\", [\n        \"externalUserId\",\n        \"projectId\",\n        \"providerConfigId\",\n        \"connectionName\",\n      ]),\n    )\n    .alterTable(\"connectedAccount\", (t) =>\n      t.createIndex(\"idx_account_named_connection\", [\n        \"externalUserId\",\n        \"projectId\",\n        \"providerConfigId\",\n        \"connectionName\",\n      ]),\n    )\n    // Every start has required a name, so no stored row is expected to hold null.\n    .alterTable(\"connectionRequest\", (t) => t.alterColumn(\"connectionName\").nullable(false))\n    .alterTable(\"connectedAccount\", (t) => t.alterColumn(\"connectionName\").nullable(false)),\n);\n"],"mappings":";;;AAKA,MAAa,yBAAyB,OAAO,+BAA+B,MAC1E,EACG,SAAS,sBAAsB,MAC9B,EACG,UAAU,MAAM,SAAS,CAAC,CAAC,CAC3B,UAAU,aAAa,OAAO,QAAQ,CAAC,CAAC,CACxC,UAAU,oBAAoB,OAAO,QAAQ,CAAC,CAAC,CAC/C,UAAU,kBAAkB,OAAO,QAAQ,CAAC,CAAC,CAC7C,UAAU,WAAW,OAAO,QAAQ,CAAC,CAAC,CACtC,UAAU,kBAAkB,OAAO,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC,CACxD,UAAU,oBAAoB,OAAO,MAAM,CAAC,CAAC,CAC7C,UAAU,aAAa,OAAO,QAAQ,CAAC,CAAC,CACxC,UACC,SACA,OAAO,MAAM,CAKf,CACJ,CAAC,CACA,SAAS,qBAAqB,MAC7B,EACG,UAAU,MAAM,SAAS,CAAC,CAAC,CAC3B,UAAU,aAAa,OAAO,QAAQ,CAAC,CAAC,CACxC,UAAU,oBAAoB,OAAO,QAAQ,CAAC,CAAC,CAC/C,UAAU,kBAAkB,OAAO,QAAQ,CAAC,CAAC,CAC7C,UAAU,WAAW,OAAO,QAAQ,CAAC,CAAC,CACtC,UAAU,kBAAkB,OAAO,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC,CACxD,YAAY,gCAAgC,CAAC,kBAAkB,IAAI,CAAC,CACzE,CAAC,CACA,WAAW,sBAAsB,MAChC,EAAE,YAAY,gCAAgC;CAC5C;CACA;CACA;CACA;AACF,CAAC,CACH,CAAC,CACA,WAAW,qBAAqB,MAC/B,EAAE,YAAY,gCAAgC;CAC5C;CACA;CACA;CACA;AACF,CAAC,CACH,CAAC,CAEA,WAAW,sBAAsB,MAAM,EAAE,YAAY,gBAAgB,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,CACvF,WAAW,qBAAqB,MAAM,EAAE,YAAY,gBAAgB,CAAC,CAAC,SAAS,KAAK,CAAC,CAC1F"}

package/dist/node/definition.d.ts

@@ -0,0 +1,170 @@
+import { projectConnectorConnectInputSchema, projectConnectorNamedConnectionSchema } from "./project-connector-contracts.js";
+import { ProjectConnectorClientConfig } from "./project-connector-client.js";
+import { HookContext, HookFn } from "@fragno-dev/db";
+import { z } from "zod";
+//#region src/definition.d.ts
+interface ProjectConnectorConnectionReadinessChangedPayload {
+  externalUserId: string;
+  /** Provider service of the named connection's configuration, e.g. gmail. */
+  service: string;
+  connection: z.output<typeof projectConnectorNamedConnectionSchema>;
+  /** Whether a confirmed account exists under this name. */
+  ready: boolean;
+}
+/** Integrators own authentication and restrict OAuth return URLs; project keys remain server-only. */
+type ProjectConnectorFragmentConfig = ProjectConnectorClientConfig & {
+  getExternalUserId: (headers: Headers) => string | null | Promise<string | null>;
+  allowedReturnUrls: (url: URL) => boolean;
+  /**
+   * Fires when a write changes whether a named connection has a confirmed account: not ready when
+   * the first request for the name starts, ready when a refresh confirms its first account, and not
+   * ready for a name left without an account when a refresh moves its account ID to another name.
+   * The gateway does not report consent or revocation, so both are noticed only through refresh.
+   */
+  onConnectionReadinessChanged?: (payload: ProjectConnectorConnectionReadinessChangedPayload, context: HookContext) => Promise<void> | void;
+};
+type ProjectConnectorHooksMap = {
+  onConnectionReadinessChanged: HookFn<ProjectConnectorConnectionReadinessChangedPayload>;
+};
+/** OOMOL Project Connector dependencies and scoped account persistence. */
+declare const projectConnectorFragmentDefinition: import("@fragno-dev/core").FragmentDefinition<ProjectConnectorFragmentConfig, import("@fragno-dev/db").FragnoPublicConfigWithDatabase, {
+  projectConnector: {
+    listProviderConfigs(): Promise<{
+      projectId: string;
+      providerConfigs: {
+        id: string;
+        service: string;
+        displayName: string;
+        callbackUrl: string;
+        effectiveScopes: string[];
+        proxyAvailable: boolean;
+      }[];
+    }>;
+    listProviderActions(providerConfigId: string): Promise<{
+      projectId: string;
+      providerConfigId: string;
+      actions: {
+        id: string;
+        service: string;
+        name: string;
+        description: string | null;
+        inputSchema: Record<string, unknown>;
+        outputSchema: Record<string, unknown>;
+      }[];
+    } | null>;
+    check(): Promise<{
+      authenticated: true;
+    }>;
+    connect(externalUserId: string, input: z.infer<typeof projectConnectorConnectInputSchema>): Promise<{
+      id: string;
+      projectId: string;
+      providerConfigId: string;
+      externalUserId: string;
+      service: string;
+      connectionName: string | null;
+      authorizationUrl: string;
+      expiresAt: string;
+    } & ({
+      status: "initiated";
+    } | {
+      status: "connected";
+      connectedAccountId: string;
+    } | {
+      status: "failed";
+      errorCode: string | null;
+      errorMessage: string | null;
+    } | {
+      status: "expired";
+    })>;
+    getConnectionRequest(requestId: string): Promise<{
+      id: string;
+      projectId: string;
+      providerConfigId: string;
+      externalUserId: string;
+      service: string;
+      connectionName: string | null;
+      authorizationUrl: string;
+      expiresAt: string;
+    } & ({
+      status: "initiated";
+    } | {
+      status: "connected";
+      connectedAccountId: string;
+    } | {
+      status: "failed";
+      errorCode: string | null;
+      errorMessage: string | null;
+    } | {
+      status: "expired";
+    })>;
+    getProfile(accountId: string): Promise<{
+      connectedAccountId: string;
+      externalUserId: string;
+      service: string;
+      profile: {
+        id: string;
+        kind: string;
+        username: string | null;
+        displayName: string | null;
+        avatarUrl: string | null;
+        email: string | null;
+        metadata: Record<string, unknown>;
+      };
+      fetchedAt: number;
+    }>;
+    execute(account: {
+      externalUserId: string;
+      providerConfigId: string;
+      id: string;
+    }, actionId: string, input: Record<string, unknown>): Promise<{
+      executionId: string;
+      actionId: string;
+      output: {} | null;
+    }>;
+  };
+} & import("@fragno-dev/db").ImplicitDatabaseDependencies<import("@fragno-dev/db/schema").Schema<{
+  connectionRequest: import("@fragno-dev/db/schema").Table<{
+    id: import("@fragno-dev/db/schema").IdColumn<"varchar(128)", string | import("@fragno-dev/db/schema").FragnoId | null, import("@fragno-dev/db/schema").FragnoId>;
+    projectId: import("@fragno-dev/db/schema").Column<"string", string, string>;
+    providerConfigId: import("@fragno-dev/db/schema").Column<"string", string, string>;
+    externalUserId: import("@fragno-dev/db/schema").Column<"string", string, string>;
+    service: import("@fragno-dev/db/schema").Column<"string", string, string>;
+    authorizationUrl: import("@fragno-dev/db/schema").Column<"text", string, string>;
+    expiresAt: import("@fragno-dev/db/schema").Column<"string", string, string>;
+    state: import("@fragno-dev/db/schema").Column<"json", {
+      status: "initiated";
+    } | {
+      status: "connected";
+      connectedAccountId: string;
+    } | {
+      status: "failed";
+      errorCode: string | null;
+      errorMessage: string | null;
+    } | {
+      status: "expired";
+    }, {
+      status: "initiated";
+    } | {
+      status: "connected";
+      connectedAccountId: string;
+    } | {
+      status: "failed";
+      errorCode: string | null;
+      errorMessage: string | null;
+    } | {
+      status: "expired";
+    }>;
+    connectionName: import("@fragno-dev/db/schema").Column<"string", string, string>;
+  }, Record<"idx_request_named_connection", import("@fragno-dev/db/schema").Index<readonly [import("@fragno-dev/db/schema").Column<"string", string, string>, import("@fragno-dev/db/schema").Column<"string", string, string>, import("@fragno-dev/db/schema").Column<"string", string, string>, import("@fragno-dev/db/schema").Column<"string", string | null, string | null>] & import("@fragno-dev/db/schema").AnyColumn[], readonly ["externalUserId", "projectId", "providerConfigId", "connectionName"]>>>;
+  connectedAccount: import("@fragno-dev/db/schema").Table<{
+    id: import("@fragno-dev/db/schema").IdColumn<"varchar(128)", string | import("@fragno-dev/db/schema").FragnoId | null, import("@fragno-dev/db/schema").FragnoId>;
+    projectId: import("@fragno-dev/db/schema").Column<"string", string, string>;
+    providerConfigId: import("@fragno-dev/db/schema").Column<"string", string, string>;
+    externalUserId: import("@fragno-dev/db/schema").Column<"string", string, string>;
+    service: import("@fragno-dev/db/schema").Column<"string", string, string>;
+    connectionName: import("@fragno-dev/db/schema").Column<"string", string, string>;
+  }, Record<"idx_account_external_user_id", import("@fragno-dev/db/schema").Index<readonly [import("@fragno-dev/db/schema").Column<"string", string, string>, import("@fragno-dev/db/schema").IdColumn<"varchar(128)", string | import("@fragno-dev/db/schema").FragnoId | null, import("@fragno-dev/db/schema").FragnoId>] & import("@fragno-dev/db/schema").AnyColumn[], readonly ["externalUserId", "id"]>> & Record<"idx_account_named_connection", import("@fragno-dev/db/schema").Index<readonly [import("@fragno-dev/db/schema").Column<"string", string, string>, import("@fragno-dev/db/schema").Column<"string", string, string>, import("@fragno-dev/db/schema").Column<"string", string, string>, import("@fragno-dev/db/schema").Column<"string", string | null, string | null>] & import("@fragno-dev/db/schema").AnyColumn[], readonly ["externalUserId", "projectId", "providerConfigId", "connectionName"]>>>;
+}>>, {}, {}, {}, {}, import("@fragno-dev/db").DatabaseServiceContext<ProjectConnectorHooksMap>, import("@fragno-dev/db").DatabaseRequestContext<ProjectConnectorHooksMap>, import("@fragno-dev/db/fragment-definition-builder").DatabaseRequestStorage, []>;
+//#endregion
+export { ProjectConnectorConnectionReadinessChangedPayload, ProjectConnectorFragmentConfig, projectConnectorFragmentDefinition };
+//# sourceMappingURL=definition.d.ts.map

package/dist/node/definition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"definition.d.ts","names":[],"sources":["../../src/definition.ts"],"mappings":";;;;;UAYiB;EACf;;EAEA;EACA,YAAY,EAAE,cAAc;;EAE5B;;;KAIU,iCAAiC;EAC3C,oBAAoB,SAAS,4BAA4B;EACzD,oBAAoB,KAAK;;;;;;;EAOzB,gCACE,SAAS,mDACT,SAAS,gBACN;;KAGF;EACH,8BAA8B,OAAO;;;cAI1B,+DAAkC,mBAAA,yDAAA"}

package/dist/node/definition.js

@@ -0,0 +1,13 @@
+import { createProjectConnectorClient } from "./project-connector-client.js";
+import { projectConnectorSchema } from "./schema.js";
+import { defineFragment } from "@fragno-dev/core";
+import { withDatabase } from "@fragno-dev/db";
+//#region src/definition.ts
+/** OOMOL Project Connector dependencies and scoped account persistence. */
+const projectConnectorFragmentDefinition = defineFragment("project-connector-fragment").extend(withDatabase(projectConnectorSchema)).withDependencies(({ config }) => ({ projectConnector: createProjectConnectorClient(config) })).provideHooks(({ defineHook, config }) => ({ onConnectionReadinessChanged: defineHook(async function(payload) {
+	await config.onConnectionReadinessChanged?.(payload, this);
+}) })).build();
+//#endregion
+export { projectConnectorFragmentDefinition };
+
+//# sourceMappingURL=definition.js.map

package/dist/node/definition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"definition.js","names":[],"sources":["../../src/definition.ts"],"sourcesContent":["import type { z } from \"zod\";\n\nimport { defineFragment } from \"@fragno-dev/core\";\nimport { withDatabase, type HookContext, type HookFn } from \"@fragno-dev/db\";\n\nimport {\n  createProjectConnectorClient,\n  type ProjectConnectorClientConfig,\n} from \"./project-connector-client\";\nimport type { projectConnectorNamedConnectionSchema } from \"./project-connector-contracts\";\nimport { projectConnectorSchema } from \"./schema\";\n\nexport interface ProjectConnectorConnectionReadinessChangedPayload {\n  externalUserId: string;\n  /** Provider service of the named connection's configuration, e.g. gmail. */\n  service: string;\n  connection: z.output<typeof projectConnectorNamedConnectionSchema>;\n  /** Whether a confirmed account exists under this name. */\n  ready: boolean;\n}\n\n/** Integrators own authentication and restrict OAuth return URLs; project keys remain server-only. */\nexport type ProjectConnectorFragmentConfig = ProjectConnectorClientConfig & {\n  getExternalUserId: (headers: Headers) => string | null | Promise<string | null>;\n  allowedReturnUrls: (url: URL) => boolean;\n  /**\n   * Fires when a write changes whether a named connection has a confirmed account: not ready when\n   * the first request for the name starts, ready when a refresh confirms its first account, and not\n   * ready for a name left without an account when a refresh moves its account ID to another name.\n   * The gateway does not report consent or revocation, so both are noticed only through refresh.\n   */\n  onConnectionReadinessChanged?: (\n    payload: ProjectConnectorConnectionReadinessChangedPayload,\n    context: HookContext,\n  ) => Promise<void> | void;\n};\n\ntype ProjectConnectorHooksMap = {\n  onConnectionReadinessChanged: HookFn<ProjectConnectorConnectionReadinessChangedPayload>;\n};\n\n/** OOMOL Project Connector dependencies and scoped account persistence. */\nexport const projectConnectorFragmentDefinition = defineFragment<ProjectConnectorFragmentConfig>(\n  \"project-connector-fragment\",\n)\n  .extend(withDatabase(projectConnectorSchema))\n  .withDependencies(({ config }) => ({\n    projectConnector: createProjectConnectorClient(config),\n  }))\n  .provideHooks<ProjectConnectorHooksMap>(({ defineHook, config }) => ({\n    onConnectionReadinessChanged: defineHook(async function (payload) {\n      await config.onConnectionReadinessChanged?.(payload, this);\n    }),\n  }))\n  .build();\n"],"mappings":";;;;;;AA0CA,MAAa,qCAAqC,eAChD,4BACF,CAAC,CACE,OAAO,aAAa,sBAAsB,CAAC,CAAC,CAC5C,kBAAkB,EAAE,cAAc,EACjC,kBAAkB,6BAA6B,MAAM,EACvD,EAAE,CAAC,CACF,cAAwC,EAAE,YAAY,cAAc,EACnE,8BAA8B,WAAW,eAAgB,SAAS;CAChE,MAAM,OAAO,+BAA+B,SAAS,IAAI;AAC3D,CAAC,EACH,EAAE,CAAC,CACF,MAAM"}