@glubean/oauth-code 0.1.0

package/README.md

@@ -0,0 +1,152 @@
+# @glubean/oauth-code
+
+OAuth Authorization Code flow plugin for [Glubean](https://glubean.dev) — interactive token acquisition for explore mode.
+
+On first HTTP request, opens the system browser for OAuth login, starts a local callback server on `127.0.0.1`, exchanges the authorization code for tokens, and caches them to disk. Subsequent requests use the cached token, refreshing automatically when expired.
+
+## Install
+
+```bash
+npm install @glubean/oauth-code
+```
+
+## Quick Start
+
+```ts
+import { test, configure } from "@glubean/sdk";
+import { oauthCode } from "@glubean/oauth-code";
+
+const { http } = configure({
+  http: oauthCode({
+    prefixUrl: "https://api.github.com",
+    authorizeUrl: "https://github.com/login/oauth/authorize",
+    tokenUrl: "https://github.com/login/oauth/access_token",
+    clientId: "{{GITHUB_CLIENT_ID}}",
+    clientSecret: "{{GITHUB_CLIENT_SECRET}}",
+    scopes: ["repo", "read:user"],
+  }),
+});
+
+export const me = test("github-me", async (ctx) => {
+  const res = await http.get("user").json<{ login: string }>();
+  ctx.assert(res.login, "got user login");
+});
+```
+
+First run opens the browser for login. Subsequent runs use the cached token.
+
+## How It Works
+
+```
+1. Test calls http.get("/some-endpoint")
+2. beforeRequest hook checks for cached token
+   ├─ Memory cache valid?     → use it
+   ├─ Disk cache valid?       → use it
+   ├─ Has refresh_token?      → refresh automatically
+   └─ Nothing cached?         → start browser flow:
+      a. Start local HTTP server on 127.0.0.1 (random port)
+      b. Open system browser with authorize URL
+      c. User logs in and authorizes
+      d. Provider redirects to 127.0.0.1/callback?code=xxx
+      e. Exchange code for access_token + refresh_token
+      f. Cache to .glubean/tokens/, close server
+3. Set Authorization: Bearer <token> header
+4. Request proceeds
+```
+
+## API
+
+### `oauthCode(options)` — ConfigureHttpOptions factory
+
+Returns `ConfigureHttpOptions` for use with `configure({ http })`. All string options support `{{template}}` placeholders resolved from Glubean vars and secrets.
+
+| Option | Type | Default | Description |
+|--------|------|---------|-------------|
+| `prefixUrl` | `string` | — | Base URL for API requests |
+| `authorizeUrl` | `string` | — | OAuth authorization endpoint |
+| `tokenUrl` | `string` | — | OAuth token endpoint |
+| `clientId` | `string` | — | Client ID |
+| `clientSecret` | `string?` | — | Client secret (optional for public clients with PKCE) |
+| `scopes` | `string[]?` | — | OAuth scopes |
+| `pkce` | `boolean` | `true` | Enable PKCE with S256 challenge |
+| `cacheDir` | `string` | `".glubean/tokens"` | Token cache directory |
+| `redirectUri` | `string?` | — | Override redirect URI (for tunnel setups, see below) |
+| `port` | `number?` | random | Fixed port for callback server (required with `redirectUri`) |
+| `authorizeParams` | `Record<string, string>?` | — | Extra query parameters for authorize URL |
+| `openBrowser` | `(url: string) => void` | system default | Custom browser opener |
+
+## Token Caching
+
+Tokens are cached to `{cacheDir}/{hash}.json` (default: `.glubean/tokens/`). The hash is derived from `clientId + authorizeUrl + scopes` to avoid collisions between providers or different scope sets.
+
+Cache files are written with `0600` permissions (owner read/write only).
+
+Add `.glubean/tokens/` to your `.gitignore`.
+
+## PKCE
+
+PKCE (S256) is enabled by default. This is required by some providers (e.g., Twitter/X) and recommended by RFC 7636 for all public clients. Set `pkce: false` to disable for providers that don't support it.
+
+## Provider Compatibility
+
+| Provider | Localhost redirect | Tunnel needed | Notes |
+|----------|-------------------|---------------|-------|
+| GitHub | `127.0.0.1` ✅ | No | Port-flexible |
+| Google | `127.0.0.1` ✅ | No | Port > 1024 |
+| Microsoft | `127.0.0.1` ✅ | No | Port ignored in matching |
+| Spotify | `127.0.0.1` ✅ | No | Port-flexible |
+| Twitter/X | ❌ | Yes | No loopback redirect support |
+| Slack | ❌ | Yes | Requires HTTPS for all redirect URIs |
+
+### Providers that require a tunnel (Twitter/X, Slack)
+
+These providers reject `http://127.0.0.1` as a redirect URI. Use an HTTPS tunnel like [ngrok](https://ngrok.com) to forward traffic to the local callback server:
+
+```bash
+# 1. Start a tunnel on a fixed port
+ngrok http 9876
+# → https://abc123.ngrok-free.app
+```
+
+```ts
+// 2. Register the ngrok URL as a redirect URI with the provider, then:
+const { http } = configure({
+  http: oauthCode({
+    prefixUrl: "https://api.x.com/2",
+    authorizeUrl: "https://twitter.com/i/oauth2/authorize",
+    tokenUrl: "https://api.x.com/2/oauth2/token",
+    clientId: "{{TWITTER_CLIENT_ID}}",
+    scopes: ["tweet.read", "users.read"],
+    redirectUri: "https://abc123.ngrok-free.app/callback",
+    port: 9876,
+  }),
+});
+```
+
+The local server still listens on `127.0.0.1:9876`; ngrok tunnels the HTTPS callback back to it.
+
+> **Note:** Postman solves this differently — it hosts its own cloud relay at `oauth.pstmn.io/callback` so users never need a tunnel. A similar Glubean Cloud relay might be added in the future, though this introduces a security trade-off: the relay becomes a credential intermediary that handles authorization codes on behalf of users, significantly expanding the trust boundary.
+
+## Promoting to CI
+
+This plugin is designed for **explore mode** (interactive local development). When promoting tests to CI:
+
+1. Replace `oauthCode()` with a non-interactive auth method from `@glubean/auth`:
+   - `oauth2.clientCredentials()` — if the provider supports it
+   - `oauth2.refreshToken()` — with a pre-provisioned refresh token
+   - `bearer()` — with a pre-provisioned access token
+2. Test logic stays the same — only the `configure({ http })` line changes.
+
+## Scope
+
+This is a v1 focused on the authorization code flow for explore mode. Not included:
+
+- Device code flow (RFC 8628)
+- Implicit grant (deprecated)
+- Token revocation
+- Multi-account support
+- Custom TLS / proxy configuration
+
+## License
+
+MIT

package/dist/index.d.ts

@@ -0,0 +1,71 @@
+import type { ConfigureHttpOptions } from "@glubean/sdk";
+export interface OAuthCodeOptions {
+    /** Base URL for API requests — var key or literal */
+    prefixUrl: string;
+    /** OAuth authorization endpoint URL */
+    authorizeUrl: string;
+    /** OAuth token endpoint URL */
+    tokenUrl: string;
+    /** Client ID — literal or `{{SECRET}}` reference */
+    clientId: string;
+    /** Client secret — literal or `{{SECRET}}` reference (optional for public clients with PKCE) */
+    clientSecret?: string;
+    /** OAuth scopes */
+    scopes?: string[];
+    /** Enable PKCE with S256 (default: true) */
+    pkce?: boolean;
+    /** Token cache directory (default: ".glubean/tokens") */
+    cacheDir?: string;
+    /**
+     * Override the redirect URI sent to the provider.
+     * Use with `port` for providers that reject `http://127.0.0.1` (e.g., Slack, Twitter/X).
+     * The local callback server still listens on 127.0.0.1; set this to the external URL
+     * that tunnels traffic back (e.g., an ngrok HTTPS URL).
+     *
+     * @example ngrok tunnel
+     * ```ts
+     * // 1. Run: ngrok http 9876
+     * // 2. Register https://abc123.ngrok.io/callback with the provider
+     * oauthCode({
+     *   redirectUri: "https://abc123.ngrok.io/callback",
+     *   port: 9876,
+     *   ...
+     * })
+     * ```
+     */
+    redirectUri?: string;
+    /** Fixed port for the local callback server (default: random). Required when using `redirectUri` with a tunnel. */
+    port?: number;
+    /** Extra query parameters for the authorize URL */
+    authorizeParams?: Record<string, string>;
+    /** Custom function to open a URL in the browser (default: system browser via `open`/`xdg-open`) */
+    openBrowser?: (url: string) => void;
+}
+export declare function generateCodeVerifier(): string;
+export declare function generateCodeChallenge(verifier: string): string;
+/**
+ * OAuth Authorization Code flow for Glubean explore mode.
+ *
+ * On first HTTP request, opens the system browser for OAuth login,
+ * starts a local server to receive the callback, exchanges the code
+ * for tokens, and caches them to disk. Subsequent requests use the
+ * cached token, refreshing automatically when expired.
+ *
+ * @example
+ * ```ts
+ * import { oauthCode } from "@glubean/oauth-code";
+ *
+ * const { http } = configure({
+ *   http: oauthCode({
+ *     prefixUrl: "https://api.github.com",
+ *     authorizeUrl: "https://github.com/login/oauth/authorize",
+ *     tokenUrl: "https://github.com/login/oauth/access_token",
+ *     clientId: "{{GITHUB_CLIENT_ID}}",
+ *     clientSecret: "{{GITHUB_CLIENT_SECRET}}",
+ *     scopes: ["repo", "read:user"],
+ *   }),
+ * });
+ * ```
+ */
+export declare function oauthCode(opts: OAuthCodeOptions): ConfigureHttpOptions;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAsB,MAAM,cAAc,CAAC;AAS7E,MAAM,WAAW,gBAAgB;IAC/B,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,uCAAuC;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB,gGAAgG;IAChG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB;IACnB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,4CAA4C;IAC5C,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;;;;;;;;OAgBG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mHAAmH;IACnH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,mGAAmG;IACnG,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CACrC;AAmBD,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE9D;AA2ND;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,gBAAgB,GAAG,oBAAoB,CA0MtE"}

package/dist/index.js

@@ -0,0 +1,373 @@
+import { createHash, randomBytes } from "node:crypto";
+import { createServer } from "node:http";
+import { exec } from "node:child_process";
+import { readFile, writeFile, mkdir } from "node:fs/promises";
+import { join } from "node:path";
+// ── Marker Headers ───────────────────────────────────────────────────────────
+const AUTH_URL_H = "X-Glubean-OAuthCode-AuthUrl";
+const TOKEN_URL_H = "X-Glubean-OAuthCode-TokenUrl";
+const CLIENT_ID_H = "X-Glubean-OAuthCode-ClientId";
+const CLIENT_SECRET_H = "X-Glubean-OAuthCode-ClientSecret";
+const ALL_MARKERS = [AUTH_URL_H, TOKEN_URL_H, CLIENT_ID_H, CLIENT_SECRET_H];
+function cleanMarkers(request) {
+    const h = new Headers(request.headers);
+    for (const m of ALL_MARKERS)
+        h.delete(m);
+    return h;
+}
+// ── PKCE ─────────────────────────────────────────────────────────────────────
+export function generateCodeVerifier() {
+    return randomBytes(32).toString("base64url");
+}
+export function generateCodeChallenge(verifier) {
+    return createHash("sha256").update(verifier).digest("base64url");
+}
+// ── Request Rebuild ──────────────────────────────────────────────────────────
+async function rebuildRequest(request, headers) {
+    const bodyBuffer = request.body
+        ? await request.clone().arrayBuffer()
+        : null;
+    return new Request(request.url, {
+        method: request.method,
+        headers,
+        body: bodyBuffer,
+        redirect: request.redirect,
+        signal: request.signal,
+        ...(bodyBuffer ? { duplex: "half" } : {}),
+    });
+}
+function cacheKey(clientId, authorizeUrl, scopes, authorizeParams) {
+    const paramsStr = authorizeParams
+        ? Object.keys(authorizeParams).sort().map((k) => `${k}=${authorizeParams[k]}`).join("&")
+        : "";
+    return createHash("sha256")
+        .update(`${clientId}:${authorizeUrl}:${scopes ?? ""}:${paramsStr}`)
+        .digest("hex")
+        .slice(0, 12);
+}
+async function readCache(dir, key) {
+    try {
+        const data = await readFile(join(dir, `${key}.json`), "utf-8");
+        return JSON.parse(data);
+    }
+    catch {
+        return null;
+    }
+}
+async function writeCache(dir, key, token) {
+    await mkdir(dir, { recursive: true });
+    await writeFile(join(dir, `${key}.json`), JSON.stringify(token, null, 2), { mode: 0o600 });
+}
+function startCallbackServer(port) {
+    return new Promise((resolveServer) => {
+        let resolveCode;
+        let rejectCode;
+        let codePromise = null;
+        let expectedState = null;
+        const server = createServer((req, res) => {
+            const url = new URL(req.url ?? "/", "http://127.0.0.1");
+            if (url.pathname !== "/callback") {
+                res.writeHead(404);
+                res.end();
+                return;
+            }
+            const error = url.searchParams.get("error");
+            if (error) {
+                const desc = url.searchParams.get("error_description") ?? error;
+                res.writeHead(400, { "Content-Type": "text/html; charset=utf-8" });
+                res.end(html("Authorization Failed", `Error: ${desc}. You can close this window.`));
+                rejectCode(new Error(`OAuth authorization failed: ${desc}`));
+                return;
+            }
+            const code = url.searchParams.get("code");
+            const state = url.searchParams.get("state");
+            if (!code) {
+                res.writeHead(400, { "Content-Type": "text/html; charset=utf-8" });
+                res.end(html("Missing Code", "No authorization code received."));
+                rejectCode(new Error("OAuth callback missing code parameter"));
+                return;
+            }
+            if (expectedState && state !== expectedState) {
+                res.writeHead(400, { "Content-Type": "text/html; charset=utf-8" });
+                res.end(html("Invalid State", "State mismatch — possible CSRF attack."));
+                rejectCode(new Error("OAuth state mismatch"));
+                return;
+            }
+            res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
+            res.end(html("Authorization Successful", "You can close this window."));
+            resolveCode(code);
+        });
+        server.listen(port ?? 0, "127.0.0.1", () => {
+            const addr = server.address();
+            resolveServer({
+                port: addr.port,
+                waitForCode(state) {
+                    if (!codePromise) {
+                        expectedState = state;
+                        codePromise = new Promise((res, rej) => {
+                            resolveCode = res;
+                            rejectCode = rej;
+                        });
+                    }
+                    return codePromise;
+                },
+                close: () => server.close(),
+            });
+        });
+    });
+}
+function html(title, message) {
+    return `<!DOCTYPE html><html><head><title>${title}</title></head><body><h2>${title}</h2><p>${message}</p></body></html>`;
+}
+// ── Browser Open ─────────────────────────────────────────────────────────────
+function openBrowser(url) {
+    const cmd = process.platform === "darwin" ? "open" :
+        process.platform === "win32" ? "start" :
+            "xdg-open";
+    exec(`${cmd} ${JSON.stringify(url)}`);
+}
+async function exchangeCode(params) {
+    const body = new URLSearchParams({
+        grant_type: "authorization_code",
+        code: params.code,
+        redirect_uri: params.redirectUri,
+        client_id: params.clientId,
+    });
+    if (params.clientSecret)
+        body.set("client_secret", params.clientSecret);
+    if (params.codeVerifier)
+        body.set("code_verifier", params.codeVerifier);
+    const res = await fetch(params.tokenUrl, {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/x-www-form-urlencoded",
+            Accept: "application/json",
+        },
+        body,
+    });
+    if (!res.ok) {
+        throw new Error(`OAuth token exchange failed (${res.status}): ${await res.text()}`);
+    }
+    return (await res.json());
+}
+async function refreshAccessToken(params) {
+    const body = new URLSearchParams({
+        grant_type: "refresh_token",
+        refresh_token: params.refreshToken,
+        client_id: params.clientId,
+    });
+    if (params.clientSecret)
+        body.set("client_secret", params.clientSecret);
+    const res = await fetch(params.tokenUrl, {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/x-www-form-urlencoded",
+            Accept: "application/json",
+        },
+        body,
+    });
+    if (!res.ok) {
+        throw new Error(`OAuth token refresh failed (${res.status}): ${await res.text()}`);
+    }
+    return (await res.json());
+}
+// ── Main ─────────────────────────────────────────────────────────────────────
+/**
+ * OAuth Authorization Code flow for Glubean explore mode.
+ *
+ * On first HTTP request, opens the system browser for OAuth login,
+ * starts a local server to receive the callback, exchanges the code
+ * for tokens, and caches them to disk. Subsequent requests use the
+ * cached token, refreshing automatically when expired.
+ *
+ * @example
+ * ```ts
+ * import { oauthCode } from "@glubean/oauth-code";
+ *
+ * const { http } = configure({
+ *   http: oauthCode({
+ *     prefixUrl: "https://api.github.com",
+ *     authorizeUrl: "https://github.com/login/oauth/authorize",
+ *     tokenUrl: "https://github.com/login/oauth/access_token",
+ *     clientId: "{{GITHUB_CLIENT_ID}}",
+ *     clientSecret: "{{GITHUB_CLIENT_SECRET}}",
+ *     scopes: ["repo", "read:user"],
+ *   }),
+ * });
+ * ```
+ */
+export function oauthCode(opts) {
+    const usePkce = opts.pkce !== false;
+    const cacheDir = opts.cacheDir ?? ".glubean/tokens";
+    const scopes = opts.scopes?.join(" ");
+    const open = opts.openBrowser ?? openBrowser;
+    let cached = null;
+    let diskChecked = false;
+    let inflight = null;
+    const headers = {
+        [AUTH_URL_H]: opts.authorizeUrl,
+        [TOKEN_URL_H]: opts.tokenUrl,
+        [CLIENT_ID_H]: opts.clientId,
+    };
+    if (opts.clientSecret)
+        headers[CLIENT_SECRET_H] = opts.clientSecret;
+    /** Read resolved marker values from the request (template-resolved by SDK). */
+    function readMarkers(request) {
+        return {
+            authorizeUrl: request.headers.get(AUTH_URL_H) ?? opts.authorizeUrl,
+            tokenUrl: request.headers.get(TOKEN_URL_H) ?? opts.tokenUrl,
+            clientId: request.headers.get(CLIENT_ID_H) ?? opts.clientId,
+            clientSecret: request.headers.get(CLIENT_SECRET_H) ?? undefined,
+        };
+    }
+    function toCache(data, prev) {
+        return {
+            accessToken: data.access_token,
+            refreshToken: data.refresh_token ?? prev?.refreshToken,
+            expiresAt: Date.now() + (data.expires_in ?? 3600) * 1000,
+        };
+    }
+    async function tryRefresh(tokenUrl, refreshToken, clientId, clientSecret) {
+        try {
+            const data = await refreshAccessToken({ tokenUrl, refreshToken, clientId, clientSecret });
+            return toCache(data, cached ?? undefined);
+        }
+        catch {
+            return null;
+        }
+    }
+    async function acquireToken(request) {
+        const m = readMarkers(request);
+        const key = cacheKey(m.clientId, m.authorizeUrl, scopes, opts.authorizeParams);
+        // 1. Memory cache — still valid
+        if (cached && cached.expiresAt > Date.now() + 30_000) {
+            return cached;
+        }
+        // 2. Disk cache
+        if (!diskChecked) {
+            diskChecked = true;
+            const disk = await readCache(cacheDir, key);
+            if (disk) {
+                if (disk.expiresAt > Date.now() + 30_000) {
+                    cached = disk;
+                    return cached;
+                }
+                // Expired but has refresh token
+                if (disk.refreshToken) {
+                    const refreshed = await tryRefresh(m.tokenUrl, disk.refreshToken, m.clientId, m.clientSecret);
+                    if (refreshed) {
+                        cached = refreshed;
+                        await writeCache(cacheDir, key, cached);
+                        return cached;
+                    }
+                }
+            }
+        }
+        // 3. Memory cache has refresh token
+        if (cached?.refreshToken) {
+            const refreshed = await tryRefresh(m.tokenUrl, cached.refreshToken, m.clientId, m.clientSecret);
+            if (refreshed) {
+                cached = refreshed;
+                await writeCache(cacheDir, key, cached);
+                return cached;
+            }
+        }
+        // 4. Browser flow
+        const server = await startCallbackServer(opts.port);
+        const redirectUri = opts.redirectUri ?? `http://127.0.0.1:${server.port}/callback`;
+        const state = randomBytes(16).toString("hex");
+        const authUrl = new URL(m.authorizeUrl);
+        authUrl.searchParams.set("response_type", "code");
+        authUrl.searchParams.set("client_id", m.clientId);
+        authUrl.searchParams.set("redirect_uri", redirectUri);
+        authUrl.searchParams.set("state", state);
+        if (scopes)
+            authUrl.searchParams.set("scope", scopes);
+        // Extra authorize params
+        if (opts.authorizeParams) {
+            for (const [k, v] of Object.entries(opts.authorizeParams)) {
+                authUrl.searchParams.set(k, v);
+            }
+        }
+        let codeVerifier;
+        if (usePkce) {
+            codeVerifier = generateCodeVerifier();
+            authUrl.searchParams.set("code_challenge", generateCodeChallenge(codeVerifier));
+            authUrl.searchParams.set("code_challenge_method", "S256");
+        }
+        process.stderr.write(`\n  OAuth login required. Opening browser...\n  ${authUrl.toString()}\n\n`);
+        open(authUrl.toString());
+        try {
+            const code = await server.waitForCode(state);
+            const data = await exchangeCode({
+                tokenUrl: m.tokenUrl,
+                code,
+                redirectUri,
+                clientId: m.clientId,
+                clientSecret: m.clientSecret,
+                codeVerifier,
+            });
+            cached = toCache(data);
+            await writeCache(cacheDir, key, cached);
+            return cached;
+        }
+        finally {
+            server.close();
+        }
+    }
+    /** Serialize token acquisition — concurrent callers share the same promise. */
+    function ensureToken(request) {
+        // Fast path: valid memory cache, no serialization needed
+        if (cached && cached.expiresAt > Date.now() + 30_000) {
+            return Promise.resolve(cached);
+        }
+        // Slow path: serialize so only one browser flow / refresh runs at a time
+        if (inflight)
+            return inflight;
+        inflight = acquireToken(request).finally(() => { inflight = null; });
+        return inflight;
+    }
+    return {
+        prefixUrl: opts.prefixUrl,
+        headers,
+        hooks: {
+            beforeRequest: [
+                async (request) => {
+                    const token = await ensureToken(request);
+                    const h = cleanMarkers(request);
+                    h.set("Authorization", `Bearer ${token.accessToken}`);
+                    return rebuildRequest(request, h);
+                },
+            ],
+            afterResponse: [
+                async (request, _options, response) => {
+                    if (response.status !== 401 || !cached?.refreshToken)
+                        return;
+                    const m = readMarkers(request);
+                    const refreshed = await tryRefresh(m.tokenUrl, cached.refreshToken, m.clientId, m.clientSecret);
+                    if (!refreshed)
+                        return;
+                    cached = refreshed;
+                    const key = cacheKey(m.clientId, m.authorizeUrl, scopes, opts.authorizeParams);
+                    await writeCache(cacheDir, key, cached);
+                    // Retry the original request with new token
+                    const h = cleanMarkers(request);
+                    h.set("Authorization", `Bearer ${refreshed.accessToken}`);
+                    const rebuilt = await rebuildRequest(request, h);
+                    const bodyBuffer = request.body
+                        ? await request.clone().arrayBuffer()
+                        : null;
+                    return fetch(rebuilt.url, {
+                        method: rebuilt.method,
+                        headers: h,
+                        body: bodyBuffer,
+                        redirect: rebuilt.redirect,
+                        signal: rebuilt.signal,
+                        ...(bodyBuffer ? { duplex: "half" } : {}),
+                    });
+                },
+            ],
+        },
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,YAAY,EAAe,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA+CjC,gFAAgF;AAEhF,MAAM,UAAU,GAAG,6BAA6B,CAAC;AACjD,MAAM,WAAW,GAAG,8BAA8B,CAAC;AACnD,MAAM,WAAW,GAAG,8BAA8B,CAAC;AACnD,MAAM,eAAe,GAAG,kCAAkC,CAAC;AAE3D,MAAM,WAAW,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;AAE5E,SAAS,YAAY,CAAC,OAAgB;IACpC,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,WAAW;QAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACzC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,oBAAoB;IAClC,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACnE,CAAC;AAED,gFAAgF;AAEhF,KAAK,UAAU,cAAc,CAC3B,OAAgB,EAChB,OAAgB;IAEhB,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI;QAC7B,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE;QACrC,CAAC,CAAC,IAAI,CAAC;IAET,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE;QAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO;QACP,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpC,CAAC,CAAC;AACpB,CAAC;AAUD,SAAS,QAAQ,CACf,QAAgB,EAChB,YAAoB,EACpB,MAAe,EACf,eAAwC;IAExC,MAAM,SAAS,GAAG,eAAe;QAC/B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QACxF,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,GAAG,QAAQ,IAAI,YAAY,IAAI,MAAM,IAAI,EAAE,IAAI,SAAS,EAAE,CAAC;SAClE,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,GAAW;IAC/C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,GAAW,EAAE,KAAkB;IACpE,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC7F,CAAC;AAUD,SAAS,mBAAmB,CAAC,IAAa;IACxC,OAAO,IAAI,OAAO,CAAC,CAAC,aAAa,EAAE,EAAE;QACnC,IAAI,WAAoC,CAAC;QACzC,IAAI,UAAiC,CAAC;QACtC,IAAI,WAAW,GAA2B,IAAI,CAAC;QAC/C,IAAI,aAAa,GAAkB,IAAI,CAAC;QAExC,MAAM,MAAM,GAAW,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;YAExD,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACjC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC5C,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,KAAK,CAAC;gBAChE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,UAAU,IAAI,8BAA8B,CAAC,CAAC,CAAC;gBACpF,UAAU,CAAC,IAAI,KAAK,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC7D,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAE5C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAC,CAAC;gBACjE,UAAU,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAC;gBAC/D,OAAO;YACT,CAAC;YAED,IAAI,aAAa,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;gBAC7C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,wCAAwC,CAAC,CAAC,CAAC;gBACzE,UAAU,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;YACnE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,4BAA4B,CAAC,CAAC,CAAC;YACxE,WAAW,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACzC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAsB,CAAC;YAClD,aAAa,CAAC;gBACZ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,CAAC,KAAa;oBACvB,IAAI,CAAC,WAAW,EAAE,CAAC;wBACjB,aAAa,GAAG,KAAK,CAAC;wBACtB,WAAW,GAAG,IAAI,OAAO,CAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;4BAC7C,WAAW,GAAG,GAAG,CAAC;4BAClB,UAAU,GAAG,GAAG,CAAC;wBACnB,CAAC,CAAC,CAAC;oBACL,CAAC;oBACD,OAAO,WAAW,CAAC;gBACrB,CAAC;gBACD,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;aAC5B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,IAAI,CAAC,KAAa,EAAE,OAAe;IAC1C,OAAO,qCAAqC,KAAK,4BAA4B,KAAK,WAAW,OAAO,oBAAoB,CAAC;AAC3H,CAAC;AAED,gFAAgF;AAEhF,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,GAAG,GACP,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACxC,UAAU,CAAC;IACb,IAAI,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACxC,CAAC;AAWD,KAAK,UAAU,YAAY,CAAC,MAO3B;IACC,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,UAAU,EAAE,oBAAoB;QAChC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,SAAS,EAAE,MAAM,CAAC,QAAQ;KAC3B,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,YAAY;QAAE,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,YAAY;QAAE,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IAExE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;QACvC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;YACnD,MAAM,EAAE,kBAAkB;SAC3B;QACD,IAAI;KACL,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,CAAC,MAAM,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAkB,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,MAKjC;IACC,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,UAAU,EAAE,eAAe;QAC3B,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,SAAS,EAAE,MAAM,CAAC,QAAQ;KAC3B,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,YAAY;QAAE,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IAExE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;QACvC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;YACnD,MAAM,EAAE,kBAAkB;SAC3B;QACD,IAAI;KACL,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,CAAC,MAAM,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAkB,CAAC;AAC7C,CAAC;AAED,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,SAAS,CAAC,IAAsB;IAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC;IAE7C,IAAI,MAAM,GAAuB,IAAI,CAAC;IACtC,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,QAAQ,GAAgC,IAAI,CAAC;IAEjD,MAAM,OAAO,GAA2B;QACtC,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,YAAY;QAC/B,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,QAAQ;QAC5B,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,QAAQ;KAC7B,CAAC;IACF,IAAI,IAAI,CAAC,YAAY;QAAE,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;IAEpE,+EAA+E;IAC/E,SAAS,WAAW,CAAC,OAAgB;QACnC,OAAO;YACL,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,YAAY;YAClE,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ;YAC3D,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ;YAC3D,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,SAAS;SAChE,CAAC;IACJ,CAAC;IAED,SAAS,OAAO,CAAC,IAAmB,EAAE,IAAkB;QACtD,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,YAAY,EAAE,IAAI,CAAC,aAAa,IAAI,IAAI,EAAE,YAAY;YACtD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,IAAI;SACzD,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,UAAU,CACvB,QAAgB,EAChB,YAAoB,EACpB,QAAgB,EAChB,YAAqB;QAErB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;YAC1F,OAAO,OAAO,CAAC,IAAI,EAAE,MAAM,IAAI,SAAS,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,UAAU,YAAY,CAAC,OAAgB;QAC1C,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAE/E,gCAAgC;QAChC,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;YACrD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,gBAAgB;QAChB,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,WAAW,GAAG,IAAI,CAAC;YACnB,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC5C,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;oBACzC,MAAM,GAAG,IAAI,CAAC;oBACd,OAAO,MAAM,CAAC;gBAChB,CAAC;gBACD,gCAAgC;gBAChC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;oBACtB,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;oBAC9F,IAAI,SAAS,EAAE,CAAC;wBACd,MAAM,GAAG,SAAS,CAAC;wBACnB,MAAM,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;wBACxC,OAAO,MAAM,CAAC;oBAChB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,oCAAoC;QACpC,IAAI,MAAM,EAAE,YAAY,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;YAChG,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,GAAG,SAAS,CAAC;gBACnB,MAAM,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;gBACxC,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,kBAAkB;QAClB,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,oBAAoB,MAAM,CAAC,IAAI,WAAW,CAAC;QACnF,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAE9C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACxC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAClD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;QAClD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACtD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACzC,IAAI,MAAM;YAAE,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAEtD,yBAAyB;QACzB,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC1D,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QAED,IAAI,YAAgC,CAAC;QACrC,IAAI,OAAO,EAAE,CAAC;YACZ,YAAY,GAAG,oBAAoB,EAAE,CAAC;YACtC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,qBAAqB,CAAC,YAAY,CAAC,CAAC,CAAC;YAChF,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;QAC5D,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mDAAmD,OAAO,CAAC,QAAQ,EAAE,MAAM,CAC5E,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEzB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAC7C,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC;gBAC9B,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,IAAI;gBACJ,WAAW;gBACX,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,YAAY;aACb,CAAC,CAAC;YACH,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YACvB,MAAM,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YACxC,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,SAAS,WAAW,CAAC,OAAgB;QACnC,yDAAyD;QACzD,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;YACrD,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QACD,yEAAyE;QACzE,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,OAAO;QACP,KAAK,EAAE;YACL,aAAa,EAAE;gBACb,KAAK,EAAE,OAAgB,EAAoB,EAAE;oBAC3C,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;oBACzC,MAAM,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;oBAChC,CAAC,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;oBACtD,OAAO,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBACpC,CAAC;aACF;YACD,aAAa,EAAE;gBACb,KAAK,EACH,OAAgB,EAChB,QAA4B,EAC5B,QAAkB,EACQ,EAAE;oBAC5B,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,YAAY;wBAAE,OAAO;oBAE7D,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;oBAC/B,MAAM,SAAS,GAAG,MAAM,UAAU,CAChC,CAAC,CAAC,QAAQ,EACV,MAAM,CAAC,YAAa,EACpB,CAAC,CAAC,QAAQ,EACV,CAAC,CAAC,YAAY,CACf,CAAC;oBACF,IAAI,CAAC,SAAS;wBAAE,OAAO;oBAEvB,MAAM,GAAG,SAAS,CAAC;oBACnB,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;oBAC/E,MAAM,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;oBAExC,4CAA4C;oBAC5C,MAAM,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;oBAChC,CAAC,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;oBAC1D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;oBACjD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI;wBAC7B,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE;wBACrC,CAAC,CAAC,IAAI,CAAC;oBACT,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE;wBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,OAAO,EAAE,CAAC;wBACV,IAAI,EAAE,UAAU;wBAChB,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACpC,CAAC,CAAC;gBACpB,CAAC;aACF;SACF;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,35 @@
+{
+  "name": "@glubean/oauth-code",
+  "version": "0.1.0",
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@glubean/sdk": "0.1.25"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "vitest": "^3.2.1",
+    "typescript": "^5.8.3"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/glubean/glubean.git",
+    "directory": "packages/oauth-code"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "test": "vitest run"
+  }
+}