@kaiord/garmin-connect 0.1.0

package/README.md

@@ -0,0 +1,114 @@
+# @kaiord/garmin-connect
+
+[![npm version](https://img.shields.io/npm/v/@kaiord/garmin-connect.svg)](https://www.npmjs.com/package/@kaiord/garmin-connect)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+
+Garmin Connect API client for the Kaiord health & fitness data framework. Provides authentication, workout listing, and workout pushing via the Garmin Connect API.
+
+## Installation
+
+```bash
+pnpm add @kaiord/garmin-connect
+```
+
+## Usage
+
+### Quick Start
+
+```typescript
+import { createGarminConnectClient } from "@kaiord/garmin-connect";
+import type { KRD } from "@kaiord/core";
+
+const { auth, service } = createGarminConnectClient();
+
+// Login
+await auth.login("email@example.com", "password");
+
+// List workouts
+const workouts = await service.list({ limit: 10 });
+
+// Push a KRD workout to Garmin Connect
+const result = await service.push(krd);
+console.log(`Pushed workout: ${result.name} (id: ${result.id})`);
+```
+
+### Token Persistence
+
+```typescript
+import {
+  createGarminConnectClient,
+  createFileTokenStore,
+} from "@kaiord/garmin-connect";
+
+const tokenStore = createFileTokenStore("./tokens.json");
+const { auth, service } = createGarminConnectClient({ tokenStore });
+
+// Login (tokens are saved automatically)
+await auth.login("email@example.com", "password");
+
+// On next run, tokens are restored automatically
+// No need to login again if tokens are still valid
+```
+
+### Custom Cookie-Aware Fetch
+
+```typescript
+import {
+  createGarminConnectClient,
+  createCookieFetch,
+} from "@kaiord/garmin-connect";
+
+const cookieFetch = createCookieFetch();
+const { auth, service } = createGarminConnectClient({ fetchFn: cookieFetch });
+```
+
+## API
+
+### `createGarminConnectClient(options?): { auth, service }`
+
+Creates a Garmin Connect client with authentication and workout service.
+
+**Options:**
+
+- `fetchFn` - Custom fetch function (defaults to cookie-aware fetch)
+- `tokenStore` - Token persistence store (defaults to in-memory)
+
+### `auth.login(email, password): Promise<void>`
+
+Authenticates with Garmin Connect via SSO.
+
+### `auth.is_authenticated(): boolean`
+
+Checks if the client has valid authentication tokens.
+
+### `auth.export_tokens(): Promise<TokenData>`
+
+Exports current tokens for external storage.
+
+### `auth.restore_tokens(tokens): Promise<void>`
+
+Restores previously exported tokens.
+
+### `service.list(options?): Promise<WorkoutSummary[]>`
+
+Lists workouts from Garmin Connect.
+
+### `service.push(krd): Promise<PushResult>`
+
+Pushes a KRD structured workout to Garmin Connect.
+
+### `createCookieFetch(): typeof fetch`
+
+Creates a cookie-aware fetch wrapper for SSO authentication flows.
+
+### `createFileTokenStore(path): TokenStore`
+
+Creates a file-based token store for persistent authentication.
+
+### `createMemoryTokenStore(): TokenStore`
+
+Creates an in-memory token store (tokens lost on process exit).
+
+## License
+
+MIT

package/dist/index.d.ts

@@ -0,0 +1,51 @@
+import * as _kaiord_core from '@kaiord/core';
+import { WorkoutService, Logger, TokenStore, AuthProvider } from '@kaiord/core';
+export { ListOptions, PushResult, TokenData, TokenStore, WorkoutSummary } from '@kaiord/core';
+
+type OAuth1Token = {
+    oauth_token: string;
+    oauth_token_secret: string;
+};
+type OAuth2Token = {
+    access_token: string;
+    refresh_token: string;
+    token_type: string;
+    expires_in: number;
+    refresh_token_expires_in: number;
+    expires_at: number;
+};
+type GarminHttpClient = {
+    get: <T>(url: string) => Promise<T>;
+    post: <T>(url: string, body: unknown) => Promise<T>;
+    del: <T>(url: string) => Promise<T>;
+    setTokens: (oauth1: OAuth1Token, oauth2: OAuth2Token) => void;
+    clearTokens: () => void;
+    getOAuth2Token: () => OAuth2Token | undefined;
+};
+
+type GarminWorkoutClient = Pick<WorkoutService, "push" | "list">;
+
+type GarminAuthProviderOptions = {
+    logger?: Logger;
+    tokenStore?: TokenStore;
+    fetchFn?: typeof globalThis.fetch;
+};
+type GarminAuthProviderResult = {
+    auth: AuthProvider;
+    httpClient: GarminHttpClient;
+};
+declare const createGarminAuthProvider: (options?: GarminAuthProviderOptions) => GarminAuthProviderResult;
+
+type GarminConnectClientOptions = GarminAuthProviderOptions;
+declare const createGarminConnectClient: (options?: GarminConnectClientOptions) => {
+    auth: _kaiord_core.AuthProvider;
+    service: GarminWorkoutClient;
+};
+
+declare const createCookieFetch: () => typeof globalThis.fetch;
+
+declare const createFileTokenStore: (filePath?: string) => TokenStore;
+
+declare const createMemoryTokenStore: () => TokenStore;
+
+export { type GarminWorkoutClient, createCookieFetch, createFileTokenStore, createGarminAuthProvider, createGarminConnectClient, createMemoryTokenStore };

package/dist/index.js

@@ -0,0 +1,530 @@
+import { createConsoleLogger, createServiceAuthError, createServiceApiError, toText } from '@kaiord/core';
+import { createHmac } from 'crypto';
+import OAuth from 'oauth-1.0a';
+import fetchCookie from 'fetch-cookie';
+import { z } from 'zod';
+import { createGarminWriter } from '@kaiord/garmin';
+import { unlink, readFile, mkdir, writeFile } from 'fs/promises';
+import { join, dirname } from 'path';
+import { homedir } from 'os';
+
+// src/adapters/auth/garmin-auth-provider.ts
+
+// src/adapters/http/urls.ts
+var GARMIN_SSO_ORIGIN = "https://sso.garmin.com";
+var GARMIN_SSO_EMBED = "https://sso.garmin.com/sso/embed";
+var SIGNIN_URL = "https://sso.garmin.com/sso/signin";
+var GC_MODERN = "https://connect.garmin.com/modern";
+var API_BASE = "https://connectapi.garmin.com";
+var OAUTH_URL = `${API_BASE}/oauth-service/oauth`;
+var WORKOUT_URL = `${API_BASE}/workout-service`;
+var OAUTH_CONSUMER_URL = "https://thegarth.s3.amazonaws.com/oauth_consumer.json";
+var USER_AGENT_MOBILE = "com.garmin.android.apps.connectmobile";
+var USER_AGENT_BROWSER = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36";
+
+// src/adapters/http/oauth-consumer.ts
+var fetchOAuthConsumer = async (fetchFn) => {
+  const res = await fetchFn(OAUTH_CONSUMER_URL);
+  if (!res.ok) {
+    throw createServiceAuthError(
+      `Failed to fetch OAuth consumer: ${res.status} ${res.statusText}`
+    );
+  }
+  const data = await res.json();
+  return { key: data.consumer_key, secret: data.consumer_secret };
+};
+var ACCOUNT_LOCKED_RE = /var status\s*=\s*"([^"]*)"/;
+var PAGE_TITLE_RE = /<title>([^<]*)<\/title>/;
+var checkAccountLocked = (html) => {
+  const match = ACCOUNT_LOCKED_RE.exec(html);
+  if (match && match[1] === "ACCOUNT_LOCKED") {
+    throw createServiceAuthError(
+      `Account locked: ${match[1]}. Unlock via Garmin Connect web.`
+    );
+  }
+};
+var checkPageTitle = (html, logger) => {
+  const match = PAGE_TITLE_RE.exec(html);
+  if (match?.[1]?.includes("Update Phone Number")) {
+    throw createServiceAuthError("Login failed: phone number update required.");
+  }
+  if (match) {
+    logger.debug("Login page title", { title: match[1] });
+  }
+};
+
+// src/adapters/http/sso-login.ts
+var CSRF_RE = /name="_csrf"\s+value="(.+?)"/;
+var TICKET_RE = /ticket=([^"]+)"/;
+var fetchCsrfToken = async (fetchFn) => {
+  const signinParams = new URLSearchParams({
+    id: "gauth-widget",
+    embedWidget: "true",
+    locale: "en",
+    gauthHost: GARMIN_SSO_EMBED
+  });
+  const csrfRes = await fetchFn(`${SIGNIN_URL}?${signinParams}`);
+  if (!csrfRes.ok) {
+    throw createServiceAuthError(
+      `SSO login page returned ${csrfRes.status}: ${csrfRes.statusText}`
+    );
+  }
+  const csrfHtml = await csrfRes.text();
+  const csrfMatch = CSRF_RE.exec(csrfHtml);
+  if (!csrfMatch) {
+    throw createServiceAuthError("CSRF token not found on login page");
+  }
+  return csrfMatch[1];
+};
+var submitLogin = async (username, password, csrf, fetchFn) => {
+  const loginParams = new URLSearchParams({
+    id: "gauth-widget",
+    embedWidget: "true",
+    clientId: "GarminConnect",
+    locale: "en",
+    gauthHost: GARMIN_SSO_EMBED,
+    service: GARMIN_SSO_EMBED,
+    source: GARMIN_SSO_EMBED,
+    redirectAfterAccountLoginUrl: GARMIN_SSO_EMBED,
+    redirectAfterAccountCreationUrl: GARMIN_SSO_EMBED
+  });
+  const body = new URLSearchParams({
+    username,
+    password,
+    embed: "true",
+    _csrf: csrf
+  });
+  const loginRes = await fetchFn(`${SIGNIN_URL}?${loginParams}`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/x-www-form-urlencoded",
+      Dnt: "1",
+      Origin: GARMIN_SSO_ORIGIN,
+      Referer: SIGNIN_URL,
+      "User-Agent": USER_AGENT_BROWSER
+    },
+    body: body.toString()
+  });
+  return loginRes.text();
+};
+var getLoginTicket = async (username, password, fetchFn, logger) => {
+  const embedParams = new URLSearchParams({
+    clientId: "GarminConnect",
+    locale: "en",
+    service: GC_MODERN
+  });
+  await fetchFn(`${GARMIN_SSO_EMBED}?${embedParams}`);
+  const csrf = await fetchCsrfToken(fetchFn);
+  const loginHtml = await submitLogin(username, password, csrf, fetchFn);
+  checkAccountLocked(loginHtml);
+  checkPageTitle(loginHtml, logger);
+  const ticketMatch = TICKET_RE.exec(loginHtml);
+  if (!ticketMatch) {
+    throw createServiceAuthError(
+      "Login failed: ticket not found. Check username and password."
+    );
+  }
+  return ticketMatch[1];
+};
+var createOAuthSigner = (consumer) => {
+  const oauth = new OAuth({
+    consumer,
+    signature_method: "HMAC-SHA1",
+    hash_function(baseString, key) {
+      return createHmac("sha1", key).update(baseString).digest("base64");
+    }
+  });
+  return {
+    toHeader: (request, token) => {
+      const authorized = token ? oauth.authorize(request, token) : oauth.authorize(request);
+      const header = oauth.toHeader(authorized);
+      return Object.fromEntries(Object.entries(header));
+    }
+  };
+};
+
+// src/adapters/http/sso-oauth.ts
+var getOAuth1Token = async (ticket, consumer, fetchFn) => {
+  const signer = createOAuthSigner(consumer);
+  const params = new URLSearchParams({
+    ticket,
+    "login-url": GARMIN_SSO_EMBED,
+    "accepts-mfa-tokens": "true"
+  });
+  const url = `${OAUTH_URL}/preauthorized?${params}`;
+  const headers = signer.toHeader({ url, method: "GET" });
+  const res = await fetchFn(url, {
+    headers: { ...headers, "User-Agent": USER_AGENT_MOBILE }
+  });
+  if (!res.ok) {
+    throw createServiceAuthError(
+      `OAuth1 token request failed: ${res.status} ${res.statusText}`
+    );
+  }
+  const text = await res.text();
+  const parsed = new URLSearchParams(text);
+  const oauthToken = parsed.get("oauth_token");
+  const oauthTokenSecret = parsed.get("oauth_token_secret");
+  if (!oauthToken || !oauthTokenSecret) {
+    throw createServiceAuthError("OAuth1 token exchange failed");
+  }
+  return { oauth_token: oauthToken, oauth_token_secret: oauthTokenSecret };
+};
+var exchangeOAuth2 = async (oauth1, consumer, fetchFn) => {
+  const signer = createOAuthSigner(consumer);
+  const baseUrl = `${OAUTH_URL}/exchange/user/2.0`;
+  const token = {
+    key: oauth1.oauth_token,
+    secret: oauth1.oauth_token_secret
+  };
+  const authHeader = signer.toHeader({ url: baseUrl, method: "POST" }, token);
+  const res = await fetchFn(baseUrl, {
+    method: "POST",
+    headers: {
+      ...authHeader,
+      "User-Agent": USER_AGENT_MOBILE,
+      "Content-Type": "application/x-www-form-urlencoded"
+    }
+  });
+  if (!res.ok) {
+    throw createServiceAuthError(
+      `OAuth2 exchange failed: ${res.status} ${res.statusText}`
+    );
+  }
+  const data = await res.json();
+  return {
+    ...data,
+    expires_at: Math.floor(Date.now() / 1e3) + data.expires_in
+  };
+};
+
+// src/adapters/http/garmin-sso.ts
+var garminSso = async (username, password, logger, fetchFn) => {
+  logger.info("Starting Garmin Connect SSO login");
+  const consumer = await fetchOAuthConsumer(fetchFn);
+  const ticket = await getLoginTicket(username, password, fetchFn, logger);
+  logger.debug("SSO ticket obtained");
+  const oauth1 = await getOAuth1Token(ticket, consumer, fetchFn);
+  logger.debug("OAuth1 token obtained");
+  const oauth2 = await exchangeOAuth2(oauth1, consumer, fetchFn);
+  logger.info("Garmin Connect SSO login successful");
+  return { oauth1, oauth2 };
+};
+
+// src/adapters/http/token-refresh.ts
+var createTokenRefreshManager = (fetchFn, logger) => {
+  const state = {
+    oauth1Token: void 0,
+    oauth2Token: void 0,
+    consumer: void 0
+  };
+  let isRefreshing = false;
+  let subscribers = [];
+  const getConsumer = async () => {
+    if (state.consumer) return state.consumer;
+    state.consumer = await fetchOAuthConsumer(fetchFn);
+    return state.consumer;
+  };
+  const refreshToken = async () => {
+    if (!state.oauth1Token || !state.oauth2Token) {
+      throw createServiceApiError("No tokens available for refresh", 401);
+    }
+    const cons = await getConsumer();
+    state.oauth2Token = await exchangeOAuth2(state.oauth1Token, cons, fetchFn);
+    logger.info("OAuth2 token refreshed");
+  };
+  const waitForRefresh = () => new Promise((resolve, reject) => {
+    subscribers.push({ resolve, reject });
+  });
+  const notifySubscribers = () => {
+    if (!state.oauth2Token) return;
+    const token = state.oauth2Token.access_token;
+    subscribers.forEach((s) => {
+      s.resolve(token);
+    });
+    subscribers = [];
+  };
+  const rejectSubscribers = (error) => {
+    subscribers.forEach((s) => {
+      s.reject(error);
+    });
+    subscribers = [];
+  };
+  return {
+    state,
+    ensureFreshToken: async () => {
+      if (isRefreshing) {
+        await waitForRefresh();
+        return;
+      }
+      isRefreshing = true;
+      try {
+        await refreshToken();
+        notifySubscribers();
+      } catch (error) {
+        rejectSubscribers(error);
+        throw error;
+      } finally {
+        isRefreshing = false;
+      }
+    }
+  };
+};
+
+// src/adapters/http/garmin-http-client.ts
+var createGarminHttpClient = (logger, fetchFn = globalThis.fetch) => {
+  const refresh = createTokenRefreshManager(fetchFn, logger);
+  const makeRequest = (url, init) => {
+    if (!refresh.state.oauth2Token) {
+      throw createServiceApiError("Token unavailable after refresh", 401);
+    }
+    return fetchFn(url, {
+      ...init,
+      headers: {
+        ...init?.headers,
+        Authorization: `Bearer ${refresh.state.oauth2Token.access_token}`
+      }
+    });
+  };
+  const authFetch = async (url, init) => {
+    if (!refresh.state.oauth2Token) {
+      throw createServiceApiError("Not authenticated", 401);
+    }
+    if (refresh.state.oauth2Token.expires_at < Math.floor(Date.now() / 1e3)) {
+      await refresh.ensureFreshToken();
+    }
+    const res = await makeRequest(url, init);
+    if (res.status === 401) {
+      await refresh.ensureFreshToken();
+      const retry = await makeRequest(url, init);
+      if (!retry.ok) {
+        throw createServiceApiError(
+          `API request failed after token refresh: ${retry.statusText}`,
+          retry.status
+        );
+      }
+      return retry;
+    }
+    if (!res.ok) {
+      throw createServiceApiError(
+        `API request failed: ${res.statusText}`,
+        res.status
+      );
+    }
+    return res;
+  };
+  return {
+    get: async (url) => {
+      const res = await authFetch(url);
+      return await res.json();
+    },
+    post: async (url, body) => {
+      const res = await authFetch(url, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: body !== null ? JSON.stringify(body) : void 0
+      });
+      return await res.json();
+    },
+    del: async (url) => {
+      const res = await authFetch(url, {
+        method: "POST",
+        headers: { "X-Http-Method-Override": "DELETE" }
+      });
+      const text = await res.text();
+      return text ? JSON.parse(text) : void 0;
+    },
+    setTokens: (o1, o2) => {
+      refresh.state.oauth1Token = o1;
+      refresh.state.oauth2Token = o2;
+    },
+    clearTokens: () => {
+      refresh.state.oauth1Token = void 0;
+      refresh.state.oauth2Token = void 0;
+      refresh.state.consumer = void 0;
+    },
+    getOAuth2Token: () => refresh.state.oauth2Token
+  };
+};
+var createCookieFetch = () => fetchCookie(globalThis.fetch);
+var oauth1TokenSchema = z.object({
+  oauth_token: z.string(),
+  oauth_token_secret: z.string()
+});
+var oauth2TokenSchema = z.object({
+  access_token: z.string(),
+  refresh_token: z.string(),
+  token_type: z.string(),
+  expires_in: z.number(),
+  refresh_token_expires_in: z.number(),
+  expires_at: z.number()
+});
+var garminTokensSchema = z.object({
+  oauth1: oauth1TokenSchema,
+  oauth2: oauth2TokenSchema
+});
+
+// src/adapters/auth/garmin-auth-provider.ts
+var createGarminAuthProvider = (options) => {
+  const logger = options?.logger ?? createConsoleLogger();
+  const tokenStore = options?.tokenStore;
+  const fetchFn = options?.fetchFn ?? createCookieFetch();
+  const httpClient = createGarminHttpClient(logger, fetchFn);
+  let currentOAuth1;
+  const auth = {
+    login: async (username, password) => {
+      const result = await garminSso(username, password, logger, fetchFn);
+      currentOAuth1 = result.oauth1;
+      httpClient.setTokens(result.oauth1, result.oauth2);
+      if (tokenStore) {
+        await tokenStore.save({
+          oauth1: result.oauth1,
+          oauth2: result.oauth2
+        });
+      }
+    },
+    is_authenticated: () => {
+      const token = httpClient.getOAuth2Token();
+      if (!token) return false;
+      return token.expires_at > Math.floor(Date.now() / 1e3);
+    },
+    export_tokens: async () => {
+      const token = httpClient.getOAuth2Token();
+      if (!token || !currentOAuth1) {
+        throw createServiceAuthError("No tokens to export");
+      }
+      return { oauth1: currentOAuth1, oauth2: token };
+    },
+    restore_tokens: async (data) => {
+      const parsed = garminTokensSchema.parse(data);
+      currentOAuth1 = parsed.oauth1;
+      httpClient.setTokens(parsed.oauth1, parsed.oauth2);
+      logger.info("Tokens restored from stored session");
+    },
+    logout: async () => {
+      currentOAuth1 = void 0;
+      httpClient.clearTokens();
+      if (tokenStore) {
+        await tokenStore.clear();
+      }
+      logger.info("Logged out from Garmin Connect");
+    }
+  };
+  return { auth, httpClient };
+};
+
+// src/adapters/mappers/workout-summary.mapper.ts
+var mapToWorkoutSummary = (garminWorkout) => ({
+  id: String(garminWorkout.workoutId ?? ""),
+  name: garminWorkout.workoutName ?? "Unnamed",
+  sport: garminWorkout.sportType?.sportTypeKey ?? "unknown",
+  created_at: garminWorkout.createdDate ? new Date(garminWorkout.createdDate).toISOString() : "",
+  updated_at: garminWorkout.updatedDate ? new Date(garminWorkout.updatedDate).toISOString() : ""
+});
+var garminWorkoutSummarySchema = z.object({
+  workoutId: z.number().or(z.string()),
+  workoutName: z.string().optional(),
+  sportType: z.object({ sportTypeKey: z.string().optional() }).optional(),
+  createdDate: z.number().or(z.string()).optional(),
+  updatedDate: z.number().or(z.string()).optional()
+});
+var garminPushResponseSchema = z.object({
+  workoutId: z.number().or(z.string()),
+  workoutName: z.string().optional()
+});
+
+// src/adapters/client/garmin-workout-service.ts
+var pushWorkout = async (krd, httpClient, garminWriter, log) => {
+  try {
+    log.info("Pushing workout to Garmin Connect");
+    const gcnJson = await toText(krd, garminWriter, log);
+    const payload = JSON.parse(gcnJson);
+    const raw = await httpClient.post(
+      `${WORKOUT_URL}/workout`,
+      payload
+    );
+    const result = garminPushResponseSchema.parse(raw);
+    return {
+      id: String(result.workoutId),
+      name: result.workoutName ?? "Workout",
+      url: `https://connect.garmin.com/modern/workout/${result.workoutId}`
+    };
+  } catch (error) {
+    throw createServiceApiError("Failed to push workout", void 0, error);
+  }
+};
+var listWorkouts = async (httpClient, log, options) => {
+  try {
+    log.info("Listing workouts from Garmin Connect");
+    const start = options?.offset ?? 0;
+    const limit = options?.limit ?? 20;
+    const params = new URLSearchParams({
+      start: String(start),
+      limit: String(limit)
+    });
+    const raw = await httpClient.get(
+      `${WORKOUT_URL}/workouts?${params}`
+    );
+    const workouts = garminWorkoutSummarySchema.array().parse(raw);
+    return workouts.map(mapToWorkoutSummary);
+  } catch (error) {
+    throw createServiceApiError("Failed to list workouts", void 0, error);
+  }
+};
+var createGarminWorkoutService = (httpClient, logger) => {
+  const log = logger ?? createConsoleLogger();
+  const garminWriter = createGarminWriter(log);
+  return {
+    push: (krd) => pushWorkout(krd, httpClient, garminWriter, log),
+    list: (opts) => listWorkouts(httpClient, log, opts)
+  };
+};
+
+// src/adapters/client/garmin-connect-client.ts
+var createGarminConnectClient = (options) => {
+  const { auth, httpClient } = createGarminAuthProvider(options);
+  const service = createGarminWorkoutService(httpClient, options?.logger);
+  return { auth, service };
+};
+var DEFAULT_PATH = join(homedir(), ".kaiord", "garmin-tokens.json");
+var createFileTokenStore = (filePath = DEFAULT_PATH) => ({
+  save: async (tokens) => {
+    await mkdir(dirname(filePath), { recursive: true });
+    await writeFile(filePath, JSON.stringify(tokens, null, 2), {
+      encoding: "utf-8",
+      mode: 384
+    });
+  },
+  load: async () => {
+    try {
+      const content = await readFile(filePath, "utf-8");
+      return JSON.parse(content);
+    } catch {
+      return null;
+    }
+  },
+  clear: async () => {
+    try {
+      await unlink(filePath);
+    } catch {
+    }
+  }
+});
+
+// src/adapters/token-store/memory-token-store.ts
+var createMemoryTokenStore = () => {
+  let stored = null;
+  return {
+    save: async (tokens) => {
+      stored = tokens;
+    },
+    load: async () => stored,
+    clear: async () => {
+      stored = null;
+    }
+  };
+};
+
+export { createCookieFetch, createFileTokenStore, createGarminAuthProvider, createGarminConnectClient, createMemoryTokenStore };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/adapters/http/urls.ts","../src/adapters/http/oauth-consumer.ts","../src/adapters/http/sso-validators.ts","../src/adapters/http/sso-login.ts","../src/adapters/http/oauth-signer.ts","../src/adapters/http/sso-oauth.ts","../src/adapters/http/garmin-sso.ts","../src/adapters/http/token-refresh.ts","../src/adapters/http/garmin-http-client.ts","../src/adapters/http/cookie-fetch.ts","../src/adapters/schemas/garmin-token.schema.ts","../src/adapters/auth/garmin-auth-provider.ts","../src/adapters/mappers/workout-summary.mapper.ts","../src/adapters/schemas/workout-response.schema.ts","../src/adapters/client/garmin-workout-service.ts","../src/adapters/client/garmin-connect-client.ts","../src/adapters/token-store/file-token-store.ts","../src/adapters/token-store/memory-token-store.ts"],"names":["createServiceAuthError","createServiceApiError","z","createConsoleLogger"],"mappings":";;;;;;;;;;;;;AAAO,IAAM,iBAAA,GAAoB,wBAAA;AAC1B,IAAM,gBAAA,GAAmB,kCAAA;AACzB,IAAM,UAAA,GAAa,mCAAA;AACnB,IAAM,SAAA,GAAY,mCAAA;AAClB,IAAM,QAAA,GAAW,+BAAA;AACjB,IAAM,SAAA,GAAY,GAAG,QAAQ,CAAA,oBAAA,CAAA;AAC7B,IAAM,WAAA,GAAc,GAAG,QAAQ,CAAA,gBAAA,CAAA;AAE/B,IAAM,kBAAA,GACX,uDAAA;AAEK,IAAM,iBAAA,GAAoB,uCAAA;AAC1B,IAAM,kBAAA,GACX,iHAAA;;;ACTK,IAAM,kBAAA,GAAqB,OAChC,OAAA,KAC2B;AAC3B,EAAA,MAAM,GAAA,GAAM,MAAM,OAAA,CAAQ,kBAAkB,CAAA;AAC5C,EAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,IAAA,MAAM,sBAAA;AAAA,MACJ,CAAA,gCAAA,EAAmC,GAAA,CAAI,MAAM,CAAA,CAAA,EAAI,IAAI,UAAU,CAAA;AAAA,KACjE;AAAA,EACF;AACA,EAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAI7B,EAAA,OAAO,EAAE,GAAA,EAAK,IAAA,CAAK,YAAA,EAAc,MAAA,EAAQ,KAAK,eAAA,EAAgB;AAChE,CAAA;ACfA,IAAM,iBAAA,GAAoB,4BAAA;AAC1B,IAAM,aAAA,GAAgB,yBAAA;AAEf,IAAM,kBAAA,GAAqB,CAAC,IAAA,KAAuB;AACxD,EAAA,MAAM,KAAA,GAAQ,iBAAA,CAAkB,IAAA,CAAK,IAAI,CAAA;AACzC,EAAA,IAAI,KAAA,IAAS,KAAA,CAAM,CAAC,CAAA,KAAM,gBAAA,EAAkB;AAC1C,IAAA,MAAMA,sBAAAA;AAAA,MACJ,CAAA,gBAAA,EAAmB,KAAA,CAAM,CAAC,CAAC,CAAA,gCAAA;AAAA,KAC7B;AAAA,EACF;AACF,CAAA;AAEO,IAAM,cAAA,GAAiB,CAAC,IAAA,EAAc,MAAA,KAAyB;AACpE,EAAA,MAAM,KAAA,GAAQ,aAAA,CAAc,IAAA,CAAK,IAAI,CAAA;AACrC,EAAA,IAAI,KAAA,GAAQ,CAAC,CAAA,EAAG,QAAA,CAAS,qBAAqB,CAAA,EAAG;AAC/C,IAAA,MAAMA,uBAAuB,6CAA6C,CAAA;AAAA,EAC5E;AACA,EAAA,IAAI,KAAA,EAAO;AACT,IAAA,MAAA,CAAO,MAAM,kBAAA,EAAoB,EAAE,OAAO,KAAA,CAAM,CAAC,GAAG,CAAA;AAAA,EACtD;AACF,CAAA;;;ACXA,IAAM,OAAA,GAAU,8BAAA;AAChB,IAAM,SAAA,GAAY,iBAAA;AAElB,IAAM,cAAA,GAAiB,OAAO,OAAA,KAAsC;AAClE,EAAA,MAAM,YAAA,GAAe,IAAI,eAAA,CAAgB;AAAA,IACvC,EAAA,EAAI,cAAA;AAAA,IACJ,WAAA,EAAa,MAAA;AAAA,IACb,MAAA,EAAQ,IAAA;AAAA,IACR,SAAA,EAAW;AAAA,GACZ,CAAA;AACD,EAAA,MAAM,UAAU,MAAM,OAAA,CAAQ,GAAG,UAAU,CAAA,CAAA,EAAI,YAAY,CAAA,CAAE,CAAA;AAC7D,EAAA,IAAI,CAAC,QAAQ,EAAA,EAAI;AACf,IAAA,MAAMA,sBAAAA;AAAA,MACJ,CAAA,wBAAA,EAA2B,OAAA,CAAQ,MAAM,CAAA,EAAA,EAAK,QAAQ,UAAU,CAAA;AAAA,KAClE;AAAA,EACF;AACA,EAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,IAAA,EAAK;AACpC,EAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA;AACvC,EAAA,IAAI,CAAC,SAAA,EAAW;AACd,IAAA,MAAMA,uBAAuB,oCAAoC,CAAA;AAAA,EACnE;AACA,EAAA,OAAO,UAAU,CAAC,CAAA;AACpB,CAAA;AAEA,IAAM,WAAA,GAAc,OAClB,QAAA,EACA,QAAA,EACA,MACA,OAAA,KACoB;AACpB,EAAA,MAAM,WAAA,GAAc,IAAI,eAAA,CAAgB;AAAA,IACtC,EAAA,EAAI,cAAA;AAAA,IACJ,WAAA,EAAa,MAAA;AAAA,IACb,QAAA,EAAU,eAAA;AAAA,IACV,MAAA,EAAQ,IAAA;AAAA,IACR,SAAA,EAAW,gBAAA;AAAA,IACX,OAAA,EAAS,gBAAA;AAAA,IACT,MAAA,EAAQ,gBAAA;AAAA,IACR,4BAAA,EAA8B,gBAAA;AAAA,IAC9B,+BAAA,EAAiC;AAAA,GAClC,CAAA;AACD,EAAA,MAAM,IAAA,GAAO,IAAI,eAAA,CAAgB;AAAA,IAC/B,QAAA;AAAA,IACA,QAAA;AAAA,IACA,KAAA,EAAO,MAAA;AAAA,IACP,KAAA,EAAO;AAAA,GACR,CAAA;AACD,EAAA,MAAM,WAAW,MAAM,OAAA,CAAQ,GAAG,UAAU,CAAA,CAAA,EAAI,WAAW,CAAA,CAAA,EAAI;AAAA,IAC7D,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS;AAAA,MACP,cAAA,EAAgB,mCAAA;AAAA,MAChB,GAAA,EAAK,GAAA;AAAA,MACL,MAAA,EAAQ,iBAAA;AAAA,MACR,OAAA,EAAS,UAAA;AAAA,MACT,YAAA,EAAc;AAAA,KAChB;AAAA,IACA,IAAA,EAAM,KAAK,QAAA;AAAS,GACrB,CAAA;AACD,EAAA,OAAO,SAAS,IAAA,EAAK;AACvB,CAAA;AAEO,IAAM,cAAA,GAAiB,OAC5B,QAAA,EACA,QAAA,EACA,SACA,MAAA,KACoB;AACpB,EAAA,MAAM,WAAA,GAAc,IAAI,eAAA,CAAgB;AAAA,IACtC,QAAA,EAAU,eAAA;AAAA,IACV,MAAA,EAAQ,IAAA;AAAA,IACR,OAAA,EAAS;AAAA,GACV,CAAA;AACD,EAAA,MAAM,OAAA,CAAQ,CAAA,EAAG,gBAAgB,CAAA,CAAA,EAAI,WAAW,CAAA,CAAE,CAAA;AAElD,EAAA,MAAM,IAAA,GAAO,MAAM,cAAA,CAAe,OAAO,CAAA;AACzC,EAAA,MAAM,YAAY,MAAM,WAAA,CAAY,QAAA,EAAU,QAAA,EAAU,MAAM,OAAO,CAAA;AAErE,EAAA,kBAAA,CAAmB,SAAS,CAAA;AAC5B,EAAA,cAAA,CAAe,WAAW,MAAM,CAAA;AAEhC,EAAA,MAAM,WAAA,GAAc,SAAA,CAAU,IAAA,CAAK,SAAS,CAAA;AAC5C,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,MAAMA,sBAAAA;AAAA,MACJ;AAAA,KACF;AAAA,EACF;AACA,EAAA,OAAO,YAAY,CAAC,CAAA;AACtB,CAAA;ACrFO,IAAM,iBAAA,GAAoB,CAAC,QAAA,KAAyC;AACzE,EAAA,MAAM,KAAA,GAAQ,IAAI,KAAA,CAAM;AAAA,IACtB,QAAA;AAAA,IACA,gBAAA,EAAkB,WAAA;AAAA,IAClB,aAAA,CAAc,YAAoB,GAAA,EAAa;AAC7C,MAAA,OAAO,UAAA,CAAW,QAAQ,GAAG,CAAA,CAAE,OAAO,UAAU,CAAA,CAAE,OAAO,QAAQ,CAAA;AAAA,IACnE;AAAA,GACD,CAAA;AAED,EAAA,OAAO;AAAA,IACL,QAAA,EAAU,CAAC,OAAA,EAAS,KAAA,KAAU;AAC5B,MAAA,MAAM,UAAA,GAAa,QACf,KAAA,CAAM,SAAA,CAAU,SAAS,KAAK,CAAA,GAC9B,KAAA,CAAM,SAAA,CAAU,OAAO,CAAA;AAC3B,MAAA,MAAM,MAAA,GAAS,KAAA,CAAM,QAAA,CAAS,UAAU,CAAA;AACxC,MAAA,OAAO,MAAA,CAAO,WAAA,CAAY,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAC,CAAA;AAAA,IAClD;AAAA,GACF;AACF,CAAA;;;AC1BO,IAAM,cAAA,GAAiB,OAC5B,MAAA,EACA,QAAA,EACA,OAAA,KACyB;AACzB,EAAA,MAAM,MAAA,GAAS,kBAAkB,QAAQ,CAAA;AACzC,EAAA,MAAM,MAAA,GAAS,IAAI,eAAA,CAAgB;AAAA,IACjC,MAAA;AAAA,IACA,WAAA,EAAa,gBAAA;AAAA,IACb,oBAAA,EAAsB;AAAA,GACvB,CAAA;AACD,EAAA,MAAM,GAAA,GAAM,CAAA,EAAG,SAAS,CAAA,eAAA,EAAkB,MAAM,CAAA,CAAA;AAChD,EAAA,MAAM,UAAU,MAAA,CAAO,QAAA,CAAS,EAAE,GAAA,EAAK,MAAA,EAAQ,OAAO,CAAA;AAEtD,EAAA,MAAM,GAAA,GAAM,MAAM,OAAA,CAAQ,GAAA,EAAK;AAAA,IAC7B,OAAA,EAAS,EAAE,GAAG,OAAA,EAAS,cAAc,iBAAA;AAAkB,GACxD,CAAA;AACD,EAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,IAAA,MAAMA,sBAAAA;AAAA,MACJ,CAAA,6BAAA,EAAgC,GAAA,CAAI,MAAM,CAAA,CAAA,EAAI,IAAI,UAAU,CAAA;AAAA,KAC9D;AAAA,EACF;AACA,EAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,EAAA,MAAM,MAAA,GAAS,IAAI,eAAA,CAAgB,IAAI,CAAA;AAEvC,EAAA,MAAM,UAAA,GAAa,MAAA,CAAO,GAAA,CAAI,aAAa,CAAA;AAC3C,EAAA,MAAM,gBAAA,GAAmB,MAAA,CAAO,GAAA,CAAI,oBAAoB,CAAA;AACxD,EAAA,IAAI,CAAC,UAAA,IAAc,CAAC,gBAAA,EAAkB;AACpC,IAAA,MAAMA,uBAAuB,8BAA8B,CAAA;AAAA,EAC7D;AAEA,EAAA,OAAO,EAAE,WAAA,EAAa,UAAA,EAAY,kBAAA,EAAoB,gBAAA,EAAiB;AACzE,CAAA;AAEO,IAAM,cAAA,GAAiB,OAC5B,MAAA,EACA,QAAA,EACA,OAAA,KACyB;AACzB,EAAA,MAAM,MAAA,GAAS,kBAAkB,QAAQ,CAAA;AACzC,EAAA,MAAM,OAAA,GAAU,GAAG,SAAS,CAAA,kBAAA,CAAA;AAC5B,EAAA,MAAM,KAAA,GAAQ;AAAA,IACZ,KAAK,MAAA,CAAO,WAAA;AAAA,IACZ,QAAQ,MAAA,CAAO;AAAA,GACjB;AACA,EAAA,MAAM,UAAA,GAAa,OAAO,QAAA,CAAS,EAAE,KAAK,OAAA,EAAS,MAAA,EAAQ,MAAA,EAAO,EAAG,KAAK,CAAA;AAE1E,EAAA,MAAM,GAAA,GAAM,MAAM,OAAA,CAAQ,OAAA,EAAS;AAAA,IACjC,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS;AAAA,MACP,GAAG,UAAA;AAAA,MACH,YAAA,EAAc,iBAAA;AAAA,MACd,cAAA,EAAgB;AAAA;AAClB,GACD,CAAA;AACD,EAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,IAAA,MAAMA,sBAAAA;AAAA,MACJ,CAAA,wBAAA,EAA2B,GAAA,CAAI,MAAM,CAAA,CAAA,EAAI,IAAI,UAAU,CAAA;AAAA,KACzD;AAAA,EACF;AACA,EAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAE7B,EAAA,OAAO;AAAA,IACL,GAAG,IAAA;AAAA,IACH,UAAA,EAAY,KAAK,KAAA,CAAM,IAAA,CAAK,KAAI,GAAI,GAAI,IAAI,IAAA,CAAK;AAAA,GACnD;AACF,CAAA;;;AC1DO,IAAM,SAAA,GAAY,OACvB,QAAA,EACA,QAAA,EACA,QACA,OAAA,KACuB;AACvB,EAAA,MAAA,CAAO,KAAK,mCAAmC,CAAA;AAE/C,EAAA,MAAM,QAAA,GAAW,MAAM,kBAAA,CAAmB,OAAO,CAAA;AACjD,EAAA,MAAM,SAAS,MAAM,cAAA,CAAe,QAAA,EAAU,QAAA,EAAU,SAAS,MAAM,CAAA;AACvE,EAAA,MAAA,CAAO,MAAM,qBAAqB,CAAA;AAElC,EAAA,MAAM,MAAA,GAAS,MAAM,cAAA,CAAe,MAAA,EAAQ,UAAU,OAAO,CAAA;AAC7D,EAAA,MAAA,CAAO,MAAM,uBAAuB,CAAA;AAEpC,EAAA,MAAM,MAAA,GAAS,MAAM,cAAA,CAAS,MAAA,EAAQ,UAAU,OAAO,CAAA;AACvD,EAAA,MAAA,CAAO,KAAK,qCAAqC,CAAA;AAEjD,EAAA,OAAO,EAAE,QAAQ,MAAA,EAAO;AAC1B,CAAA;;;ACXO,IAAM,yBAAA,GAA4B,CACvC,OAAA,EACA,MAAA,KACwB;AACxB,EAAA,MAAM,KAAA,GAAoB;AAAA,IACxB,WAAA,EAAa,MAAA;AAAA,IACb,WAAA,EAAa,MAAA;AAAA,IACb,QAAA,EAAU;AAAA,GACZ;AACA,EAAA,IAAI,YAAA,GAAe,KAAA;AACnB,EAAA,IAAI,cAAmC,EAAC;AAExC,EAAA,MAAM,cAAc,YAAoC;AACtD,IAAA,IAAI,KAAA,CAAM,QAAA,EAAU,OAAO,KAAA,CAAM,QAAA;AACjC,IAAA,KAAA,CAAM,QAAA,GAAW,MAAM,kBAAA,CAAmB,OAAO,CAAA;AACjD,IAAA,OAAO,KAAA,CAAM,QAAA;AAAA,EACf,CAAA;AAEA,EAAA,MAAM,eAAe,YAA2B;AAC9C,IAAA,IAAI,CAAC,KAAA,CAAM,WAAA,IAAe,CAAC,MAAM,WAAA,EAAa;AAC5C,MAAA,MAAM,qBAAA,CAAsB,mCAAmC,GAAG,CAAA;AAAA,IACpE;AACA,IAAA,MAAM,IAAA,GAAO,MAAM,WAAA,EAAY;AAC/B,IAAA,KAAA,CAAM,cAAc,MAAM,cAAA,CAAe,KAAA,CAAM,WAAA,EAAa,MAAM,OAAO,CAAA;AACzE,IAAA,MAAA,CAAO,KAAK,wBAAwB,CAAA;AAAA,EACtC,CAAA;AAEA,EAAA,MAAM,iBAAiB,MACrB,IAAI,OAAA,CAAQ,CAAC,SAAS,MAAA,KAAW;AAC/B,IAAA,WAAA,CAAY,IAAA,CAAK,EAAE,OAAA,EAAS,MAAA,EAAQ,CAAA;AAAA,EACtC,CAAC,CAAA;AAEH,EAAA,MAAM,oBAAoB,MAAY;AACpC,IAAA,IAAI,CAAC,MAAM,WAAA,EAAa;AACxB,IAAA,MAAM,KAAA,GAAQ,MAAM,WAAA,CAAY,YAAA;AAChC,IAAA,WAAA,CAAY,OAAA,CAAQ,CAAC,CAAA,KAAM;AACzB,MAAA,CAAA,CAAE,QAAQ,KAAK,CAAA;AAAA,IACjB,CAAC,CAAA;AACD,IAAA,WAAA,GAAc,EAAC;AAAA,EACjB,CAAA;AAEA,EAAA,MAAM,iBAAA,GAAoB,CAAC,KAAA,KAAyB;AAClD,IAAA,WAAA,CAAY,OAAA,CAAQ,CAAC,CAAA,KAAM;AACzB,MAAA,CAAA,CAAE,OAAO,KAAK,CAAA;AAAA,IAChB,CAAC,CAAA;AACD,IAAA,WAAA,GAAc,EAAC;AAAA,EACjB,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,kBAAkB,YAA2B;AAC3C,MAAA,IAAI,YAAA,EAAc;AAChB,QAAA,MAAM,cAAA,EAAe;AACrB,QAAA;AAAA,MACF;AACA,MAAA,YAAA,GAAe,IAAA;AACf,MAAA,IAAI;AACF,QAAA,MAAM,YAAA,EAAa;AACnB,QAAA,iBAAA,EAAkB;AAAA,MACpB,SAAS,KAAA,EAAO;AACd,QAAA,iBAAA,CAAkB,KAAK,CAAA;AACvB,QAAA,MAAM,KAAA;AAAA,MACR,CAAA,SAAE;AACA,QAAA,YAAA,GAAe,KAAA;AAAA,MACjB;AAAA,IACF;AAAA,GACF;AACF,CAAA;;;AC7EO,IAAM,sBAAA,GAAyB,CACpC,MAAA,EACA,OAAA,GAAmB,WAAW,KAAA,KACT;AACrB,EAAA,MAAM,OAAA,GAAU,yBAAA,CAA0B,OAAA,EAAS,MAAM,CAAA;AAEzD,EAAA,MAAM,WAAA,GAAc,CAAC,GAAA,EAAa,IAAA,KAA0C;AAC1E,IAAA,IAAI,CAAC,OAAA,CAAQ,KAAA,CAAM,WAAA,EAAa;AAC9B,MAAA,MAAMC,qBAAAA,CAAsB,mCAAmC,GAAG,CAAA;AAAA,IACpE;AACA,IAAA,OAAO,QAAQ,GAAA,EAAK;AAAA,MAClB,GAAG,IAAA;AAAA,MACH,OAAA,EAAS;AAAA,QACP,GAAG,IAAA,EAAM,OAAA;AAAA,QACT,aAAA,EAAe,CAAA,OAAA,EAAU,OAAA,CAAQ,KAAA,CAAM,YAAY,YAAY,CAAA;AAAA;AACjE,KACD,CAAA;AAAA,EACH,CAAA;AAEA,EAAA,MAAM,SAAA,GAAY,OAChB,GAAA,EACA,IAAA,KACsB;AACtB,IAAA,IAAI,CAAC,OAAA,CAAQ,KAAA,CAAM,WAAA,EAAa;AAC9B,MAAA,MAAMA,qBAAAA,CAAsB,qBAAqB,GAAG,CAAA;AAAA,IACtD;AACA,IAAA,IAAI,OAAA,CAAQ,KAAA,CAAM,WAAA,CAAY,UAAA,GAAa,IAAA,CAAK,MAAM,IAAA,CAAK,GAAA,EAAI,GAAI,GAAI,CAAA,EAAG;AACxE,MAAA,MAAM,QAAQ,gBAAA,EAAiB;AAAA,IACjC;AAEA,IAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAAY,GAAA,EAAK,IAAI,CAAA;AAEvC,IAAA,IAAI,GAAA,CAAI,WAAW,GAAA,EAAK;AACtB,MAAA,MAAM,QAAQ,gBAAA,EAAiB;AAC/B,MAAA,MAAM,KAAA,GAAQ,MAAM,WAAA,CAAY,GAAA,EAAK,IAAI,CAAA;AACzC,MAAA,IAAI,CAAC,MAAM,EAAA,EAAI;AACb,QAAA,MAAMA,qBAAAA;AAAA,UACJ,CAAA,wCAAA,EAA2C,MAAM,UAAU,CAAA,CAAA;AAAA,UAC3D,KAAA,CAAM;AAAA,SACR;AAAA,MACF;AACA,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAMA,qBAAAA;AAAA,QACJ,CAAA,oBAAA,EAAuB,IAAI,UAAU,CAAA,CAAA;AAAA,QACrC,GAAA,CAAI;AAAA,OACN;AAAA,IACF;AACA,IAAA,OAAO,GAAA;AAAA,EACT,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,OAAU,GAAA,KAA4B;AACzC,MAAA,MAAM,GAAA,GAAM,MAAM,SAAA,CAAU,GAAG,CAAA;AAC/B,MAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,IACzB,CAAA;AAAA,IACA,IAAA,EAAM,OAAU,GAAA,EAAa,IAAA,KAA8B;AACzD,MAAA,MAAM,GAAA,GAAM,MAAM,SAAA,CAAU,GAAA,EAAK;AAAA,QAC/B,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,QAC9C,MAAM,IAAA,KAAS,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI;AAAA,OAC9C,CAAA;AACD,MAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,IACzB,CAAA;AAAA,IACA,GAAA,EAAK,OAAU,GAAA,KAA4B;AACzC,MAAA,MAAM,GAAA,GAAM,MAAM,SAAA,CAAU,GAAA,EAAK;AAAA,QAC/B,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS,EAAE,wBAAA,EAA0B,QAAA;AAAS,OAC/C,CAAA;AACD,MAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,MAAA,OAAQ,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA,GAAI,MAAA;AAAA,IACpC,CAAA;AAAA,IACA,SAAA,EAAW,CAAC,EAAA,EAAiB,EAAA,KAA0B;AACrD,MAAA,OAAA,CAAQ,MAAM,WAAA,GAAc,EAAA;AAC5B,MAAA,OAAA,CAAQ,MAAM,WAAA,GAAc,EAAA;AAAA,IAC9B,CAAA;AAAA,IACA,aAAa,MAAY;AACvB,MAAA,OAAA,CAAQ,MAAM,WAAA,GAAc,MAAA;AAC5B,MAAA,OAAA,CAAQ,MAAM,WAAA,GAAc,MAAA;AAC5B,MAAA,OAAA,CAAQ,MAAM,QAAA,GAAW,MAAA;AAAA,IAC3B,CAAA;AAAA,IACA,cAAA,EAAgB,MAAM,OAAA,CAAQ,KAAA,CAAM;AAAA,GACtC;AACF,CAAA;AC9FO,IAAM,iBAAA,GAAoB,MAC/B,WAAA,CAAY,UAAA,CAAW,KAAK;ACDvB,IAAM,iBAAA,GAAoB,EAAE,MAAA,CAAO;AAAA,EACxC,WAAA,EAAa,EAAE,MAAA,EAAO;AAAA,EACtB,kBAAA,EAAoB,EAAE,MAAA;AACxB,CAAC,CAAA;AAEM,IAAM,iBAAA,GAAoB,EAAE,MAAA,CAAO;AAAA,EACxC,YAAA,EAAc,EAAE,MAAA,EAAO;AAAA,EACvB,aAAA,EAAe,EAAE,MAAA,EAAO;AAAA,EACxB,UAAA,EAAY,EAAE,MAAA,EAAO;AAAA,EACrB,UAAA,EAAY,EAAE,MAAA,EAAO;AAAA,EACrB,wBAAA,EAA0B,EAAE,MAAA,EAAO;AAAA,EACnC,UAAA,EAAY,EAAE,MAAA;AAChB,CAAC,CAAA;AAEM,IAAM,kBAAA,GAAqB,EAAE,MAAA,CAAO;AAAA,EACzC,MAAA,EAAQ,iBAAA;AAAA,EACR,MAAA,EAAQ;AACV,CAAC,CAAA;;;ACAM,IAAM,wBAAA,GAA2B,CACtC,OAAA,KAC6B;AAC7B,EAAA,MAAM,MAAA,GAAS,OAAA,EAAS,MAAA,IAAU,mBAAA,EAAoB;AACtD,EAAA,MAAM,aAAa,OAAA,EAAS,UAAA;AAC5B,EAAA,MAAM,OAAA,GAAU,OAAA,EAAS,OAAA,IAAW,iBAAA,EAAkB;AACtD,EAAA,MAAM,UAAA,GAAa,sBAAA,CAAuB,MAAA,EAAQ,OAAO,CAAA;AACzD,EAAA,IAAI,aAAA;AAIJ,EAAA,MAAM,IAAA,GAAqB;AAAA,IACzB,KAAA,EAAO,OAAO,QAAA,EAAU,QAAA,KAAa;AACnC,MAAA,MAAM,SAAS,MAAM,SAAA,CAAU,QAAA,EAAU,QAAA,EAAU,QAAQ,OAAO,CAAA;AAClE,MAAA,aAAA,GAAgB,MAAA,CAAO,MAAA;AACvB,MAAA,UAAA,CAAW,SAAA,CAAU,MAAA,CAAO,MAAA,EAAQ,MAAA,CAAO,MAAM,CAAA;AACjD,MAAA,IAAI,UAAA,EAAY;AACd,QAAA,MAAM,WAAW,IAAA,CAAK;AAAA,UACpB,QAAQ,MAAA,CAAO,MAAA;AAAA,UACf,QAAQ,MAAA,CAAO;AAAA,SAChB,CAAA;AAAA,MACH;AAAA,IACF,CAAA;AAAA,IAEA,kBAAkB,MAAM;AACtB,MAAA,MAAM,KAAA,GAAQ,WAAW,cAAA,EAAe;AACxC,MAAA,IAAI,CAAC,OAAO,OAAO,KAAA;AACnB,MAAA,OAAO,MAAM,UAAA,GAAa,IAAA,CAAK,MAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAAA,IACxD,CAAA;AAAA,IAEA,eAAe,YAAY;AACzB,MAAA,MAAM,KAAA,GAAQ,WAAW,cAAA,EAAe;AACxC,MAAA,IAAI,CAAC,KAAA,IAAS,CAAC,aAAA,EAAe;AAC5B,QAAA,MAAMD,uBAAuB,qBAAqB,CAAA;AAAA,MACpD;AACA,MAAA,OAAO,EAAE,MAAA,EAAQ,aAAA,EAAe,MAAA,EAAQ,KAAA,EAAM;AAAA,IAChD,CAAA;AAAA,IAEA,cAAA,EAAgB,OAAO,IAAA,KAAS;AAC9B,MAAA,MAAM,MAAA,GAAS,kBAAA,CAAmB,KAAA,CAAM,IAAI,CAAA;AAC5C,MAAA,aAAA,GAAgB,MAAA,CAAO,MAAA;AACvB,MAAA,UAAA,CAAW,SAAA,CAAU,MAAA,CAAO,MAAA,EAAQ,MAAA,CAAO,MAAM,CAAA;AACjD,MAAA,MAAA,CAAO,KAAK,qCAAqC,CAAA;AAAA,IACnD,CAAA;AAAA,IAEA,QAAQ,YAAY;AAClB,MAAA,aAAA,GAAgB,MAAA;AAChB,MAAA,UAAA,CAAW,WAAA,EAAY;AACvB,MAAA,IAAI,UAAA,EAAY;AACd,QAAA,MAAM,WAAW,KAAA,EAAM;AAAA,MACzB;AACA,MAAA,MAAA,CAAO,KAAK,gCAAgC,CAAA;AAAA,IAC9C;AAAA,GACF;AAEA,EAAA,OAAO,EAAE,MAAM,UAAA,EAAW;AAC5B;;;ACzEO,IAAM,mBAAA,GAAsB,CAAC,aAAA,MAMb;AAAA,EACrB,EAAA,EAAI,MAAA,CAAO,aAAA,CAAc,SAAA,IAAa,EAAE,CAAA;AAAA,EACxC,IAAA,EAAM,cAAc,WAAA,IAAe,SAAA;AAAA,EACnC,KAAA,EAAO,aAAA,CAAc,SAAA,EAAW,YAAA,IAAgB,SAAA;AAAA,EAChD,UAAA,EAAY,cAAc,WAAA,GACtB,IAAI,KAAK,aAAA,CAAc,WAAW,CAAA,CAAE,WAAA,EAAY,GAChD,EAAA;AAAA,EACJ,UAAA,EAAY,cAAc,WAAA,GACtB,IAAI,KAAK,aAAA,CAAc,WAAW,CAAA,CAAE,WAAA,EAAY,GAChD;AACN,CAAA,CAAA;ACfO,IAAM,0BAAA,GAA6BE,EAAE,MAAA,CAAO;AAAA,EACjD,WAAWA,CAAAA,CAAE,MAAA,GAAS,EAAA,CAAGA,CAAAA,CAAE,QAAQ,CAAA;AAAA,EACnC,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACjC,SAAA,EAAWA,CAAAA,CAAE,MAAA,CAAO,EAAE,YAAA,EAAcA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS,EAAG,CAAA,CAAE,QAAA,EAAS;AAAA,EACtE,WAAA,EAAaA,EAAE,MAAA,EAAO,CAAE,GAAGA,CAAAA,CAAE,MAAA,EAAQ,CAAA,CAAE,QAAA,EAAS;AAAA,EAChD,WAAA,EAAaA,EAAE,MAAA,EAAO,CAAE,GAAGA,CAAAA,CAAE,MAAA,EAAQ,CAAA,CAAE,QAAA;AACzC,CAAC,CAAA;AAGM,IAAM,wBAAA,GAA2BA,EAAE,MAAA,CAAO;AAAA,EAC/C,WAAWA,CAAAA,CAAE,MAAA,GAAS,EAAA,CAAGA,CAAAA,CAAE,QAAQ,CAAA;AAAA,EACnC,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AAC1B,CAAC,CAAA;;;ACSD,IAAM,WAAA,GAAc,OAClB,GAAA,EACA,UAAA,EACA,cACA,GAAA,KACwB;AACxB,EAAA,IAAI;AACF,IAAA,GAAA,CAAI,KAAK,mCAAmC,CAAA;AAC5C,IAAA,MAAM,OAAA,GAAU,MAAM,MAAA,CAAO,GAAA,EAAK,cAAc,GAAG,CAAA;AACnD,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AAElC,IAAA,MAAM,GAAA,GAAM,MAAM,UAAA,CAAW,IAAA;AAAA,MAC3B,GAAG,WAAW,CAAA,QAAA,CAAA;AAAA,MACd;AAAA,KACF;AACA,IAAA,MAAM,MAAA,GAAS,wBAAA,CAAyB,KAAA,CAAM,GAAG,CAAA;AAEjD,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,MAAA,CAAO,MAAA,CAAO,SAAS,CAAA;AAAA,MAC3B,IAAA,EAAM,OAAO,WAAA,IAAe,SAAA;AAAA,MAC5B,GAAA,EAAK,CAAA,0CAAA,EAA6C,MAAA,CAAO,SAAS,CAAA;AAAA,KACpE;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,MAAMD,qBAAAA,CAAsB,wBAAA,EAA0B,MAAA,EAAW,KAAK,CAAA;AAAA,EACxE;AACF,CAAA;AAEA,IAAM,YAAA,GAAe,OACnB,UAAA,EACA,GAAA,EACA,OAAA,KAC8B;AAC9B,EAAA,IAAI;AACF,IAAA,GAAA,CAAI,KAAK,sCAAsC,CAAA;AAC/C,IAAA,MAAM,KAAA,GAAQ,SAAS,MAAA,IAAU,CAAA;AACjC,IAAA,MAAM,KAAA,GAAQ,SAAS,KAAA,IAAS,EAAA;AAChC,IAAA,MAAM,MAAA,GAAS,IAAI,eAAA,CAAgB;AAAA,MACjC,KAAA,EAAO,OAAO,KAAK,CAAA;AAAA,MACnB,KAAA,EAAO,OAAO,KAAK;AAAA,KACpB,CAAA;AAED,IAAA,MAAM,GAAA,GAAM,MAAM,UAAA,CAAW,GAAA;AAAA,MAC3B,CAAA,EAAG,WAAW,CAAA,UAAA,EAAa,MAAM,CAAA;AAAA,KACnC;AACA,IAAA,MAAM,QAAA,GAAW,0BAAA,CAA2B,KAAA,EAAM,CAAE,MAAM,GAAG,CAAA;AAC7D,IAAA,OAAO,QAAA,CAAS,IAAI,mBAAmB,CAAA;AAAA,EACzC,SAAS,KAAA,EAAO;AACd,IAAA,MAAMA,qBAAAA,CAAsB,yBAAA,EAA2B,MAAA,EAAW,KAAK,CAAA;AAAA,EACzE;AACF,CAAA;AAEO,IAAM,0BAAA,GAA6B,CACxC,UAAA,EACA,MAAA,KACwB;AACxB,EAAA,MAAM,GAAA,GAAM,UAAUE,mBAAAA,EAAoB;AAC1C,EAAA,MAAM,YAAA,GAAe,mBAAmB,GAAG,CAAA;AAE3C,EAAA,OAAO;AAAA,IACL,MAAM,CAAC,GAAA,KAAQ,YAAY,GAAA,EAAK,UAAA,EAAY,cAAc,GAAG,CAAA;AAAA,IAC7D,MAAM,CAAC,IAAA,KAAS,YAAA,CAAa,UAAA,EAAY,KAAK,IAAI;AAAA,GACpD;AACF,CAAA;;;AChFO,IAAM,yBAAA,GAA4B,CACvC,OAAA,KACG;AACH,EAAA,MAAM,EAAE,IAAA,EAAM,UAAA,EAAW,GAAI,yBAAyB,OAAO,CAAA;AAC7D,EAAA,MAAM,OAAA,GAAU,0BAAA,CAA2B,UAAA,EAAY,OAAA,EAAS,MAAM,CAAA;AACtE,EAAA,OAAO,EAAE,MAAM,OAAA,EAAQ;AACzB;ACPA,IAAM,YAAA,GAAe,IAAA,CAAK,OAAA,EAAQ,EAAG,WAAW,oBAAoB,CAAA;AAE7D,IAAM,oBAAA,GAAuB,CAClC,QAAA,GAAmB,YAAA,MACH;AAAA,EAChB,IAAA,EAAM,OAAO,MAAA,KAAsB;AACjC,IAAA,MAAM,MAAM,OAAA,CAAQ,QAAQ,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAClD,IAAA,MAAM,UAAU,QAAA,EAAU,IAAA,CAAK,UAAU,MAAA,EAAQ,IAAA,EAAM,CAAC,CAAA,EAAG;AAAA,MACzD,QAAA,EAAU,OAAA;AAAA,MACV,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH,CAAA;AAAA,EAEA,MAAM,YAAuC;AAC3C,IAAA,IAAI;AACF,MAAA,MAAM,OAAA,GAAU,MAAM,QAAA,CAAS,QAAA,EAAU,OAAO,CAAA;AAChD,MAAA,OAAO,IAAA,CAAK,MAAM,OAAO,CAAA;AAAA,IAC3B,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF,CAAA;AAAA,EAEA,OAAO,YAAY;AACjB,IAAA,IAAI;AACF,MAAA,MAAM,OAAO,QAAQ,CAAA;AAAA,IACvB,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AACF,CAAA;;;AChCO,IAAM,yBAAyB,MAAkB;AACtD,EAAA,IAAI,MAAA,GAA2B,IAAA;AAE/B,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,OAAO,MAAA,KAAsB;AACjC,MAAA,MAAA,GAAS,MAAA;AAAA,IACX,CAAA;AAAA,IACA,MAAM,YAAY,MAAA;AAAA,IAClB,OAAO,YAAY;AACjB,MAAA,MAAA,GAAS,IAAA;AAAA,IACX;AAAA,GACF;AACF","file":"index.js","sourcesContent":["export const GARMIN_SSO_ORIGIN = \"https://sso.garmin.com\";\nexport const GARMIN_SSO_EMBED = \"https://sso.garmin.com/sso/embed\";\nexport const SIGNIN_URL = \"https://sso.garmin.com/sso/signin\";\nexport const GC_MODERN = \"https://connect.garmin.com/modern\";\nexport const API_BASE = \"https://connectapi.garmin.com\";\nexport const OAUTH_URL = `${API_BASE}/oauth-service/oauth`;\nexport const WORKOUT_URL = `${API_BASE}/workout-service`;\n/** OAuth consumer credentials hosted by the garth project (third-party). */\nexport const OAUTH_CONSUMER_URL =\n  \"https://thegarth.s3.amazonaws.com/oauth_consumer.json\";\n\nexport const USER_AGENT_MOBILE = \"com.garmin.android.apps.connectmobile\";\nexport const USER_AGENT_BROWSER =\n  \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36\";\n","import type { FetchFn, OAuthConsumer } from \"./types\";\nimport { createServiceAuthError } from \"@kaiord/core\";\nimport { OAUTH_CONSUMER_URL } from \"./urls\";\n\nexport const fetchOAuthConsumer = async (\n  fetchFn: FetchFn\n): Promise<OAuthConsumer> => {\n  const res = await fetchFn(OAUTH_CONSUMER_URL);\n  if (!res.ok) {\n    throw createServiceAuthError(\n      `Failed to fetch OAuth consumer: ${res.status} ${res.statusText}`\n    );\n  }\n  const data = (await res.json()) as {\n    consumer_key: string;\n    consumer_secret: string;\n  };\n  return { key: data.consumer_key, secret: data.consumer_secret };\n};\n","import type { Logger } from \"@kaiord/core\";\nimport { createServiceAuthError } from \"@kaiord/core\";\n\nconst ACCOUNT_LOCKED_RE = /var status\\s*=\\s*\"([^\"]*)\"/;\nconst PAGE_TITLE_RE = /<title>([^<]*)<\\/title>/;\n\nexport const checkAccountLocked = (html: string): void => {\n  const match = ACCOUNT_LOCKED_RE.exec(html);\n  if (match && match[1] === \"ACCOUNT_LOCKED\") {\n    throw createServiceAuthError(\n      `Account locked: ${match[1]}. Unlock via Garmin Connect web.`\n    );\n  }\n};\n\nexport const checkPageTitle = (html: string, logger: Logger): void => {\n  const match = PAGE_TITLE_RE.exec(html);\n  if (match?.[1]?.includes(\"Update Phone Number\")) {\n    throw createServiceAuthError(\"Login failed: phone number update required.\");\n  }\n  if (match) {\n    logger.debug(\"Login page title\", { title: match[1] });\n  }\n};\n","import type { Logger } from \"@kaiord/core\";\nimport { createServiceAuthError } from \"@kaiord/core\";\nimport type { FetchFn } from \"./types\";\nimport {\n  GARMIN_SSO_EMBED,\n  GC_MODERN,\n  GARMIN_SSO_ORIGIN,\n  SIGNIN_URL,\n  USER_AGENT_BROWSER,\n} from \"./urls\";\nimport { checkAccountLocked, checkPageTitle } from \"./sso-validators\";\n\nconst CSRF_RE = /name=\"_csrf\"\\s+value=\"(.+?)\"/;\nconst TICKET_RE = /ticket=([^\"]+)\"/;\n\nconst fetchCsrfToken = async (fetchFn: FetchFn): Promise<string> => {\n  const signinParams = new URLSearchParams({\n    id: \"gauth-widget\",\n    embedWidget: \"true\",\n    locale: \"en\",\n    gauthHost: GARMIN_SSO_EMBED,\n  });\n  const csrfRes = await fetchFn(`${SIGNIN_URL}?${signinParams}`);\n  if (!csrfRes.ok) {\n    throw createServiceAuthError(\n      `SSO login page returned ${csrfRes.status}: ${csrfRes.statusText}`\n    );\n  }\n  const csrfHtml = await csrfRes.text();\n  const csrfMatch = CSRF_RE.exec(csrfHtml);\n  if (!csrfMatch) {\n    throw createServiceAuthError(\"CSRF token not found on login page\");\n  }\n  return csrfMatch[1];\n};\n\nconst submitLogin = async (\n  username: string,\n  password: string,\n  csrf: string,\n  fetchFn: FetchFn\n): Promise<string> => {\n  const loginParams = new URLSearchParams({\n    id: \"gauth-widget\",\n    embedWidget: \"true\",\n    clientId: \"GarminConnect\",\n    locale: \"en\",\n    gauthHost: GARMIN_SSO_EMBED,\n    service: GARMIN_SSO_EMBED,\n    source: GARMIN_SSO_EMBED,\n    redirectAfterAccountLoginUrl: GARMIN_SSO_EMBED,\n    redirectAfterAccountCreationUrl: GARMIN_SSO_EMBED,\n  });\n  const body = new URLSearchParams({\n    username,\n    password,\n    embed: \"true\",\n    _csrf: csrf,\n  });\n  const loginRes = await fetchFn(`${SIGNIN_URL}?${loginParams}`, {\n    method: \"POST\",\n    headers: {\n      \"Content-Type\": \"application/x-www-form-urlencoded\",\n      Dnt: \"1\",\n      Origin: GARMIN_SSO_ORIGIN,\n      Referer: SIGNIN_URL,\n      \"User-Agent\": USER_AGENT_BROWSER,\n    },\n    body: body.toString(),\n  });\n  return loginRes.text();\n};\n\nexport const getLoginTicket = async (\n  username: string,\n  password: string,\n  fetchFn: FetchFn,\n  logger: Logger\n): Promise<string> => {\n  const embedParams = new URLSearchParams({\n    clientId: \"GarminConnect\",\n    locale: \"en\",\n    service: GC_MODERN,\n  });\n  await fetchFn(`${GARMIN_SSO_EMBED}?${embedParams}`);\n\n  const csrf = await fetchCsrfToken(fetchFn);\n  const loginHtml = await submitLogin(username, password, csrf, fetchFn);\n\n  checkAccountLocked(loginHtml);\n  checkPageTitle(loginHtml, logger);\n\n  const ticketMatch = TICKET_RE.exec(loginHtml);\n  if (!ticketMatch) {\n    throw createServiceAuthError(\n      \"Login failed: ticket not found. Check username and password.\"\n    );\n  }\n  return ticketMatch[1];\n};\n","import { createHmac } from \"node:crypto\";\nimport OAuth from \"oauth-1.0a\";\nimport type { OAuthConsumer } from \"./types\";\n\nexport type { OAuthConsumer } from \"./types\";\nexport type OAuthToken = { key: string; secret: string };\n\nexport type OAuthSigner = {\n  toHeader: (\n    request: { url: string; method: string },\n    token?: OAuthToken\n  ) => Record<string, string>;\n};\n\nexport const createOAuthSigner = (consumer: OAuthConsumer): OAuthSigner => {\n  const oauth = new OAuth({\n    consumer,\n    signature_method: \"HMAC-SHA1\",\n    hash_function(baseString: string, key: string) {\n      return createHmac(\"sha1\", key).update(baseString).digest(\"base64\");\n    },\n  });\n\n  return {\n    toHeader: (request, token) => {\n      const authorized = token\n        ? oauth.authorize(request, token)\n        : oauth.authorize(request);\n      const header = oauth.toHeader(authorized);\n      return Object.fromEntries(Object.entries(header));\n    },\n  };\n};\n","import { createServiceAuthError } from \"@kaiord/core\";\nimport type { FetchFn, OAuthConsumer } from \"./types\";\nimport { createOAuthSigner } from \"./oauth-signer\";\nimport { GARMIN_SSO_EMBED, OAUTH_URL, USER_AGENT_MOBILE } from \"./urls\";\nimport type { OAuth1Token, OAuth2Token } from \"./types\";\n\nexport const getOAuth1Token = async (\n  ticket: string,\n  consumer: OAuthConsumer,\n  fetchFn: FetchFn\n): Promise<OAuth1Token> => {\n  const signer = createOAuthSigner(consumer);\n  const params = new URLSearchParams({\n    ticket,\n    \"login-url\": GARMIN_SSO_EMBED,\n    \"accepts-mfa-tokens\": \"true\",\n  });\n  const url = `${OAUTH_URL}/preauthorized?${params}`;\n  const headers = signer.toHeader({ url, method: \"GET\" });\n\n  const res = await fetchFn(url, {\n    headers: { ...headers, \"User-Agent\": USER_AGENT_MOBILE },\n  });\n  if (!res.ok) {\n    throw createServiceAuthError(\n      `OAuth1 token request failed: ${res.status} ${res.statusText}`\n    );\n  }\n  const text = await res.text();\n  const parsed = new URLSearchParams(text);\n\n  const oauthToken = parsed.get(\"oauth_token\");\n  const oauthTokenSecret = parsed.get(\"oauth_token_secret\");\n  if (!oauthToken || !oauthTokenSecret) {\n    throw createServiceAuthError(\"OAuth1 token exchange failed\");\n  }\n\n  return { oauth_token: oauthToken, oauth_token_secret: oauthTokenSecret };\n};\n\nexport const exchangeOAuth2 = async (\n  oauth1: OAuth1Token,\n  consumer: OAuthConsumer,\n  fetchFn: FetchFn\n): Promise<OAuth2Token> => {\n  const signer = createOAuthSigner(consumer);\n  const baseUrl = `${OAUTH_URL}/exchange/user/2.0`;\n  const token = {\n    key: oauth1.oauth_token,\n    secret: oauth1.oauth_token_secret,\n  };\n  const authHeader = signer.toHeader({ url: baseUrl, method: \"POST\" }, token);\n\n  const res = await fetchFn(baseUrl, {\n    method: \"POST\",\n    headers: {\n      ...authHeader,\n      \"User-Agent\": USER_AGENT_MOBILE,\n      \"Content-Type\": \"application/x-www-form-urlencoded\",\n    },\n  });\n  if (!res.ok) {\n    throw createServiceAuthError(\n      `OAuth2 exchange failed: ${res.status} ${res.statusText}`\n    );\n  }\n  const data = (await res.json()) as OAuth2Token;\n\n  return {\n    ...data,\n    expires_at: Math.floor(Date.now() / 1000) + data.expires_in,\n  };\n};\n","import type { Logger } from \"@kaiord/core\";\nimport type { FetchFn, OAuth1Token, OAuth2Token } from \"./types\";\nimport { fetchOAuthConsumer } from \"./oauth-consumer\";\nimport { getLoginTicket } from \"./sso-login\";\nimport { getOAuth1Token, exchangeOAuth2 as exchange } from \"./sso-oauth\";\n\nexport type { OAuth1Token, OAuth2Token } from \"./types\";\nexport type SsoResult = { oauth1: OAuth1Token; oauth2: OAuth2Token };\n\n/**\n * Garmin Connect SSO login flow.\n * The fetchFn must be cookie-aware (persist cookies across requests).\n * Use fetch-cookie or similar wrapper for Node.js environments.\n */\nexport const garminSso = async (\n  username: string,\n  password: string,\n  logger: Logger,\n  fetchFn: FetchFn\n): Promise<SsoResult> => {\n  logger.info(\"Starting Garmin Connect SSO login\");\n\n  const consumer = await fetchOAuthConsumer(fetchFn);\n  const ticket = await getLoginTicket(username, password, fetchFn, logger);\n  logger.debug(\"SSO ticket obtained\");\n\n  const oauth1 = await getOAuth1Token(ticket, consumer, fetchFn);\n  logger.debug(\"OAuth1 token obtained\");\n\n  const oauth2 = await exchange(oauth1, consumer, fetchFn);\n  logger.info(\"Garmin Connect SSO login successful\");\n\n  return { oauth1, oauth2 };\n};\n\nexport { exchangeOAuth2 } from \"./sso-oauth\";\n","import type { Logger } from \"@kaiord/core\";\nimport { createServiceApiError } from \"@kaiord/core\";\nimport type { FetchFn, OAuthConsumer, OAuth1Token, OAuth2Token } from \"./types\";\nimport { exchangeOAuth2 } from \"./garmin-sso\";\nimport { fetchOAuthConsumer } from \"./oauth-consumer\";\n\ntype RefreshSubscriber = {\n  resolve: (token: string) => void;\n  reject: (error: unknown) => void;\n};\n\nexport type TokenState = {\n  oauth1Token: OAuth1Token | undefined;\n  oauth2Token: OAuth2Token | undefined;\n  consumer: OAuthConsumer | undefined;\n};\n\nexport type TokenRefreshManager = {\n  ensureFreshToken: () => Promise<void>;\n  state: TokenState;\n};\n\nexport const createTokenRefreshManager = (\n  fetchFn: FetchFn,\n  logger: Logger\n): TokenRefreshManager => {\n  const state: TokenState = {\n    oauth1Token: undefined,\n    oauth2Token: undefined,\n    consumer: undefined,\n  };\n  let isRefreshing = false;\n  let subscribers: RefreshSubscriber[] = [];\n\n  const getConsumer = async (): Promise<OAuthConsumer> => {\n    if (state.consumer) return state.consumer;\n    state.consumer = await fetchOAuthConsumer(fetchFn);\n    return state.consumer;\n  };\n\n  const refreshToken = async (): Promise<void> => {\n    if (!state.oauth1Token || !state.oauth2Token) {\n      throw createServiceApiError(\"No tokens available for refresh\", 401);\n    }\n    const cons = await getConsumer();\n    state.oauth2Token = await exchangeOAuth2(state.oauth1Token, cons, fetchFn);\n    logger.info(\"OAuth2 token refreshed\");\n  };\n\n  const waitForRefresh = (): Promise<string> =>\n    new Promise((resolve, reject) => {\n      subscribers.push({ resolve, reject });\n    });\n\n  const notifySubscribers = (): void => {\n    if (!state.oauth2Token) return;\n    const token = state.oauth2Token.access_token;\n    subscribers.forEach((s) => {\n      s.resolve(token);\n    });\n    subscribers = [];\n  };\n\n  const rejectSubscribers = (error: unknown): void => {\n    subscribers.forEach((s) => {\n      s.reject(error);\n    });\n    subscribers = [];\n  };\n\n  return {\n    state,\n    ensureFreshToken: async (): Promise<void> => {\n      if (isRefreshing) {\n        await waitForRefresh();\n        return;\n      }\n      isRefreshing = true;\n      try {\n        await refreshToken();\n        notifySubscribers();\n      } catch (error) {\n        rejectSubscribers(error);\n        throw error;\n      } finally {\n        isRefreshing = false;\n      }\n    },\n  };\n};\n","import type { Logger } from \"@kaiord/core\";\nimport { createServiceApiError } from \"@kaiord/core\";\nimport type {\n  FetchFn,\n  GarminHttpClient,\n  OAuth1Token,\n  OAuth2Token,\n} from \"./types\";\nimport { createTokenRefreshManager } from \"./token-refresh\";\n\nexport type { GarminHttpClient } from \"./types\";\n\nexport const createGarminHttpClient = (\n  logger: Logger,\n  fetchFn: FetchFn = globalThis.fetch\n): GarminHttpClient => {\n  const refresh = createTokenRefreshManager(fetchFn, logger);\n\n  const makeRequest = (url: string, init?: RequestInit): Promise<Response> => {\n    if (!refresh.state.oauth2Token) {\n      throw createServiceApiError(\"Token unavailable after refresh\", 401);\n    }\n    return fetchFn(url, {\n      ...init,\n      headers: {\n        ...init?.headers,\n        Authorization: `Bearer ${refresh.state.oauth2Token.access_token}`,\n      },\n    });\n  };\n\n  const authFetch = async (\n    url: string,\n    init?: RequestInit\n  ): Promise<Response> => {\n    if (!refresh.state.oauth2Token) {\n      throw createServiceApiError(\"Not authenticated\", 401);\n    }\n    if (refresh.state.oauth2Token.expires_at < Math.floor(Date.now() / 1000)) {\n      await refresh.ensureFreshToken();\n    }\n\n    const res = await makeRequest(url, init);\n\n    if (res.status === 401) {\n      await refresh.ensureFreshToken();\n      const retry = await makeRequest(url, init);\n      if (!retry.ok) {\n        throw createServiceApiError(\n          `API request failed after token refresh: ${retry.statusText}`,\n          retry.status\n        );\n      }\n      return retry;\n    }\n    if (!res.ok) {\n      throw createServiceApiError(\n        `API request failed: ${res.statusText}`,\n        res.status\n      );\n    }\n    return res;\n  };\n\n  return {\n    get: async <T>(url: string): Promise<T> => {\n      const res = await authFetch(url);\n      return (await res.json()) as T;\n    },\n    post: async <T>(url: string, body: unknown): Promise<T> => {\n      const res = await authFetch(url, {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application/json\" },\n        body: body !== null ? JSON.stringify(body) : undefined,\n      });\n      return (await res.json()) as T;\n    },\n    del: async <T>(url: string): Promise<T> => {\n      const res = await authFetch(url, {\n        method: \"POST\",\n        headers: { \"X-Http-Method-Override\": \"DELETE\" },\n      });\n      const text = await res.text();\n      return (text ? JSON.parse(text) : undefined) as T;\n    },\n    setTokens: (o1: OAuth1Token, o2: OAuth2Token): void => {\n      refresh.state.oauth1Token = o1;\n      refresh.state.oauth2Token = o2;\n    },\n    clearTokens: (): void => {\n      refresh.state.oauth1Token = undefined;\n      refresh.state.oauth2Token = undefined;\n      refresh.state.consumer = undefined;\n    },\n    getOAuth2Token: () => refresh.state.oauth2Token,\n  };\n};\n","import fetchCookie from \"fetch-cookie\";\n\nexport const createCookieFetch = (): typeof globalThis.fetch =>\n  fetchCookie(globalThis.fetch) as typeof globalThis.fetch;\n","import { z } from \"zod\";\n\nexport const oauth1TokenSchema = z.object({\n  oauth_token: z.string(),\n  oauth_token_secret: z.string(),\n});\n\nexport const oauth2TokenSchema = z.object({\n  access_token: z.string(),\n  refresh_token: z.string(),\n  token_type: z.string(),\n  expires_in: z.number(),\n  refresh_token_expires_in: z.number(),\n  expires_at: z.number(),\n});\n\nexport const garminTokensSchema = z.object({\n  oauth1: oauth1TokenSchema,\n  oauth2: oauth2TokenSchema,\n});\n","import type { AuthProvider, Logger, TokenStore } from \"@kaiord/core\";\nimport { createConsoleLogger, createServiceAuthError } from \"@kaiord/core\";\nimport type { GarminHttpClient } from \"../http/garmin-http-client\";\nimport { createGarminHttpClient } from \"../http/garmin-http-client\";\nimport { createCookieFetch } from \"../http/cookie-fetch\";\nimport { garminSso } from \"../http/garmin-sso\";\nimport { garminTokensSchema } from \"../schemas/garmin-token.schema\";\n\nexport type GarminAuthProviderOptions = {\n  logger?: Logger;\n  tokenStore?: TokenStore;\n  fetchFn?: typeof globalThis.fetch;\n};\n\nexport type GarminAuthProviderResult = {\n  auth: AuthProvider;\n  httpClient: GarminHttpClient;\n};\n\nexport const createGarminAuthProvider = (\n  options?: GarminAuthProviderOptions\n): GarminAuthProviderResult => {\n  const logger = options?.logger ?? createConsoleLogger();\n  const tokenStore = options?.tokenStore;\n  const fetchFn = options?.fetchFn ?? createCookieFetch();\n  const httpClient = createGarminHttpClient(logger, fetchFn);\n  let currentOAuth1:\n    | { oauth_token: string; oauth_token_secret: string }\n    | undefined;\n\n  const auth: AuthProvider = {\n    login: async (username, password) => {\n      const result = await garminSso(username, password, logger, fetchFn);\n      currentOAuth1 = result.oauth1;\n      httpClient.setTokens(result.oauth1, result.oauth2);\n      if (tokenStore) {\n        await tokenStore.save({\n          oauth1: result.oauth1,\n          oauth2: result.oauth2,\n        });\n      }\n    },\n\n    is_authenticated: () => {\n      const token = httpClient.getOAuth2Token();\n      if (!token) return false;\n      return token.expires_at > Math.floor(Date.now() / 1000);\n    },\n\n    export_tokens: async () => {\n      const token = httpClient.getOAuth2Token();\n      if (!token || !currentOAuth1) {\n        throw createServiceAuthError(\"No tokens to export\");\n      }\n      return { oauth1: currentOAuth1, oauth2: token };\n    },\n\n    restore_tokens: async (data) => {\n      const parsed = garminTokensSchema.parse(data);\n      currentOAuth1 = parsed.oauth1;\n      httpClient.setTokens(parsed.oauth1, parsed.oauth2);\n      logger.info(\"Tokens restored from stored session\");\n    },\n\n    logout: async () => {\n      currentOAuth1 = undefined;\n      httpClient.clearTokens();\n      if (tokenStore) {\n        await tokenStore.clear();\n      }\n      logger.info(\"Logged out from Garmin Connect\");\n    },\n  };\n\n  return { auth, httpClient };\n};\n","import type { WorkoutSummary } from \"@kaiord/core\";\n\nexport const mapToWorkoutSummary = (garminWorkout: {\n  workoutId?: number | string;\n  workoutName?: string;\n  sportType?: { sportTypeKey?: string };\n  createdDate?: number | string;\n  updatedDate?: number | string;\n}): WorkoutSummary => ({\n  id: String(garminWorkout.workoutId ?? \"\"),\n  name: garminWorkout.workoutName ?? \"Unnamed\",\n  sport: garminWorkout.sportType?.sportTypeKey ?? \"unknown\",\n  created_at: garminWorkout.createdDate\n    ? new Date(garminWorkout.createdDate).toISOString()\n    : \"\",\n  updated_at: garminWorkout.updatedDate\n    ? new Date(garminWorkout.updatedDate).toISOString()\n    : \"\",\n});\n","import { z } from \"zod\";\n\n/** GET /workout-service/workouts?start=N&limit=N - List workout summaries */\nexport const garminWorkoutSummarySchema = z.object({\n  workoutId: z.number().or(z.string()),\n  workoutName: z.string().optional(),\n  sportType: z.object({ sportTypeKey: z.string().optional() }).optional(),\n  createdDate: z.number().or(z.string()).optional(),\n  updatedDate: z.number().or(z.string()).optional(),\n});\n\n/** POST /workout-service/workout - Push a workout (returns created workout) */\nexport const garminPushResponseSchema = z.object({\n  workoutId: z.number().or(z.string()),\n  workoutName: z.string().optional(),\n});\n","import type {\n  KRD,\n  ListOptions,\n  Logger,\n  PushResult,\n  WorkoutService,\n  WorkoutSummary,\n} from \"@kaiord/core\";\nimport {\n  createConsoleLogger,\n  toText,\n  createServiceApiError,\n} from \"@kaiord/core\";\nimport { createGarminWriter } from \"@kaiord/garmin\";\nimport type { GarminHttpClient } from \"../http/garmin-http-client\";\nimport { mapToWorkoutSummary } from \"../mappers/workout-summary.mapper\";\nimport {\n  garminPushResponseSchema,\n  garminWorkoutSummarySchema,\n} from \"../schemas/workout-response.schema\";\nimport { WORKOUT_URL } from \"../http/urls\";\n\nexport type GarminWorkoutClient = Pick<WorkoutService, \"push\" | \"list\">;\n\nconst pushWorkout = async (\n  krd: KRD,\n  httpClient: GarminHttpClient,\n  garminWriter: ReturnType<typeof createGarminWriter>,\n  log: Logger\n): Promise<PushResult> => {\n  try {\n    log.info(\"Pushing workout to Garmin Connect\");\n    const gcnJson = await toText(krd, garminWriter, log);\n    const payload = JSON.parse(gcnJson) as Record<string, unknown>;\n\n    const raw = await httpClient.post<unknown>(\n      `${WORKOUT_URL}/workout`,\n      payload\n    );\n    const result = garminPushResponseSchema.parse(raw);\n\n    return {\n      id: String(result.workoutId),\n      name: result.workoutName ?? \"Workout\",\n      url: `https://connect.garmin.com/modern/workout/${result.workoutId}`,\n    };\n  } catch (error) {\n    throw createServiceApiError(\"Failed to push workout\", undefined, error);\n  }\n};\n\nconst listWorkouts = async (\n  httpClient: GarminHttpClient,\n  log: Logger,\n  options?: ListOptions\n): Promise<WorkoutSummary[]> => {\n  try {\n    log.info(\"Listing workouts from Garmin Connect\");\n    const start = options?.offset ?? 0;\n    const limit = options?.limit ?? 20;\n    const params = new URLSearchParams({\n      start: String(start),\n      limit: String(limit),\n    });\n\n    const raw = await httpClient.get<unknown>(\n      `${WORKOUT_URL}/workouts?${params}`\n    );\n    const workouts = garminWorkoutSummarySchema.array().parse(raw);\n    return workouts.map(mapToWorkoutSummary);\n  } catch (error) {\n    throw createServiceApiError(\"Failed to list workouts\", undefined, error);\n  }\n};\n\nexport const createGarminWorkoutService = (\n  httpClient: GarminHttpClient,\n  logger?: Logger\n): GarminWorkoutClient => {\n  const log = logger ?? createConsoleLogger();\n  const garminWriter = createGarminWriter(log);\n\n  return {\n    push: (krd) => pushWorkout(krd, httpClient, garminWriter, log),\n    list: (opts) => listWorkouts(httpClient, log, opts),\n  };\n};\n","import type { GarminAuthProviderOptions } from \"../auth/garmin-auth-provider\";\nimport { createGarminAuthProvider } from \"../auth/garmin-auth-provider\";\nimport { createGarminWorkoutService } from \"./garmin-workout-service\";\n\nexport type GarminConnectClientOptions = GarminAuthProviderOptions;\n\nexport const createGarminConnectClient = (\n  options?: GarminConnectClientOptions\n) => {\n  const { auth, httpClient } = createGarminAuthProvider(options);\n  const service = createGarminWorkoutService(httpClient, options?.logger);\n  return { auth, service };\n};\n","import { readFile, writeFile, mkdir, unlink } from \"node:fs/promises\";\nimport { dirname, join } from \"node:path\";\nimport { homedir } from \"node:os\";\nimport type { TokenData, TokenStore } from \"@kaiord/core\";\n\nconst DEFAULT_PATH = join(homedir(), \".kaiord\", \"garmin-tokens.json\");\n\nexport const createFileTokenStore = (\n  filePath: string = DEFAULT_PATH\n): TokenStore => ({\n  save: async (tokens: TokenData) => {\n    await mkdir(dirname(filePath), { recursive: true });\n    await writeFile(filePath, JSON.stringify(tokens, null, 2), {\n      encoding: \"utf-8\",\n      mode: 0o600,\n    });\n  },\n\n  load: async (): Promise<TokenData | null> => {\n    try {\n      const content = await readFile(filePath, \"utf-8\");\n      return JSON.parse(content) as TokenData;\n    } catch {\n      return null;\n    }\n  },\n\n  clear: async () => {\n    try {\n      await unlink(filePath);\n    } catch {\n      // File may not exist\n    }\n  },\n});\n","import type { TokenData, TokenStore } from \"@kaiord/core\";\n\nexport const createMemoryTokenStore = (): TokenStore => {\n  let stored: TokenData | null = null;\n\n  return {\n    save: async (tokens: TokenData) => {\n      stored = tokens;\n    },\n    load: async () => stored,\n    clear: async () => {\n      stored = null;\n    },\n  };\n};\n"]}

package/package.json

@@ -0,0 +1,65 @@
+{
+  "name": "@kaiord/garmin-connect",
+  "version": "0.1.0",
+  "description": "Garmin Connect API client for the Kaiord health & fitness data framework",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest --run",
+    "test:coverage": "vitest --run --coverage",
+    "test:integration": "vitest --run --config vitest.integration.config.ts",
+    "test:watch": "vitest",
+    "lint": "tsc --noEmit && eslint . && prettier --check src",
+    "lint:fix": "eslint . --fix && prettier --write src",
+    "clean": "rm -rf dist"
+  },
+  "dependencies": {
+    "@kaiord/core": "workspace:^",
+    "@kaiord/garmin": "workspace:^",
+    "fetch-cookie": "^3.2.0",
+    "oauth-1.0a": "^2.2.6",
+    "zod": "^4.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^24.0.0",
+    "@vitest/coverage-v8": "^4.0.18",
+    "tsup": "^8.5.1",
+    "tsx": "^4.7.0",
+    "typescript": "^5.3.3",
+    "vitest": "^4.0.18"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/pablo-albaladejo/kaiord.git",
+    "directory": "packages/garmin-connect"
+  },
+  "homepage": "https://www.npmjs.com/package/@kaiord/garmin-connect",
+  "bugs": {
+    "url": "https://github.com/pablo-albaladejo/kaiord/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "kaiord",
+    "garmin",
+    "garmin-connect",
+    "workout",
+    "api-client",
+    "fitness"
+  ],
+  "author": "Kaiord Contributors",
+  "license": "MIT"
+}