@losthex/scribe 0.1.0

package/dist/pkce.js

@@ -0,0 +1,137 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuthError = exports.PROVIDER = exports.CLIENT_ID = void 0;
+exports.createVerifier = createVerifier;
+exports.challengeFor = challengeFor;
+exports.createState = createState;
+exports.authorizeUrl = authorizeUrl;
+exports.parseCallback = parseCallback;
+exports.exchangeCode = exchangeCode;
+exports.refreshTokens = refreshTokens;
+exports.readAccessToken = readAccessToken;
+exports.needsRefresh = needsRefresh;
+/**
+ * Authorization code + PKCE against the Scribe issuer (INFRA-ITD-004,
+ * SPEC-008 "Fallback & Testing") — the protocol half, with no IO except
+ * the two token calls, both of which take an injectable `fetch`.
+ *
+ * PKCE and not a client secret because this is a public client: the CLI
+ * ships on engineers' laptops, so anything embedded in it is public. The
+ * verifier never leaves the process, the challenge is what travels, and
+ * the loopback redirect (which the issuer's allowlist already permits, see
+ * packages/core/src/auth/redirect.ts) keeps the code off the network entirely.
+ */
+const node_crypto_1 = require("node:crypto");
+/** Identifies the CLI to the issuer; public by construction. */
+exports.CLIENT_ID = 'scribe-cli';
+/** The only provider the issuer has (INFRA-ITD-004). */
+exports.PROVIDER = 'google';
+const b64url = (buffer) => buffer.toString('base64url');
+/** 32 random bytes, base64url — RFC 7636 §4.1 length rules satisfied. */
+function createVerifier() {
+    return b64url((0, node_crypto_1.randomBytes)(32));
+}
+/** S256: the challenge is the SHA-256 of the verifier, base64url. */
+function challengeFor(verifier) {
+    return b64url((0, node_crypto_1.createHash)('sha256').update(verifier).digest());
+}
+function createState() {
+    return b64url((0, node_crypto_1.randomBytes)(16));
+}
+function authorizeUrl({ issuer, redirectUri, challenge, state, clientId = exports.CLIENT_ID, provider = exports.PROVIDER, }) {
+    const url = new URL(`${issuer.replace(/\/+$/, '')}/authorize`);
+    url.searchParams.set('client_id', clientId);
+    url.searchParams.set('redirect_uri', redirectUri);
+    url.searchParams.set('response_type', 'code');
+    url.searchParams.set('state', state);
+    url.searchParams.set('provider', provider);
+    url.searchParams.set('code_challenge', challenge);
+    url.searchParams.set('code_challenge_method', 'S256');
+    return url.toString();
+}
+/** Reads the query off the loopback request the browser lands on. */
+function parseCallback(requestUrl) {
+    const url = new URL(requestUrl, 'http://127.0.0.1');
+    const error = url.searchParams.get('error');
+    const description = url.searchParams.get('error_description');
+    return {
+        code: url.searchParams.get('code') ?? undefined,
+        state: url.searchParams.get('state') ?? undefined,
+        error: error ? (description ? `${error}: ${description}` : error) : undefined,
+    };
+}
+class OAuthError extends Error {
+    status;
+    constructor(message, status = 0) {
+        super(message);
+        this.name = 'OAuthError';
+        this.status = status;
+    }
+}
+exports.OAuthError = OAuthError;
+async function tokenCall(issuer, body, fetchImpl, now) {
+    const response = await fetchImpl(`${issuer.replace(/\/+$/, '')}/token`, {
+        method: 'POST',
+        headers: { 'content-type': 'application/x-www-form-urlencoded' },
+        body: new URLSearchParams(body).toString(),
+    });
+    const text = await response.text();
+    let payload = {};
+    try {
+        payload = JSON.parse(text);
+    }
+    catch {
+        // Leave payload empty; the status and raw text carry the message.
+    }
+    if (!response.ok) {
+        const detail = typeof payload.error === 'string' ? payload.error : text.slice(0, 200);
+        throw new OAuthError(`issuer rejected the token request (${response.status}): ${detail}`, response.status);
+    }
+    const access = payload.access_token;
+    const refresh = payload.refresh_token;
+    if (typeof access !== 'string' || typeof refresh !== 'string') {
+        throw new OAuthError('issuer returned no access/refresh token pair');
+    }
+    const expiresIn = typeof payload.expires_in === 'number' ? payload.expires_in : null;
+    return {
+        access,
+        refresh,
+        expiresAt: expiresIn === null ? null : now() + expiresIn * 1000,
+    };
+}
+function exchangeCode({ issuer, code, redirectUri, verifier, clientId = exports.CLIENT_ID, fetchImpl = fetch, now = Date.now, }) {
+    return tokenCall(issuer, {
+        grant_type: 'authorization_code',
+        code,
+        redirect_uri: redirectUri,
+        client_id: clientId,
+        code_verifier: verifier,
+    }, fetchImpl, now);
+}
+function refreshTokens({ issuer, refresh, clientId = exports.CLIENT_ID, fetchImpl = fetch, now = Date.now, }) {
+    return tokenCall(issuer, { grant_type: 'refresh_token', refresh_token: refresh, client_id: clientId }, fetchImpl, now);
+}
+function readAccessToken(token) {
+    const parts = token.split('.');
+    if (parts.length !== 3)
+        return { email: null, expiresAt: null };
+    try {
+        const payload = JSON.parse(Buffer.from(parts[1], 'base64url').toString('utf8'));
+        const email = payload.properties?.email;
+        return {
+            email: typeof email === 'string' ? email : null,
+            expiresAt: typeof payload.exp === 'number' ? payload.exp * 1000 : null,
+        };
+    }
+    catch {
+        return { email: null, expiresAt: null };
+    }
+}
+/** True when the access token is gone, expired, or about to be. */
+function needsRefresh(tokens, nowMs, skewSeconds = 60) {
+    const expiresAt = tokens.expiresAt ?? readAccessToken(tokens.access).expiresAt;
+    if (expiresAt === null)
+        return false;
+    return expiresAt - skewSeconds * 1000 <= nowMs;
+}
+//# sourceMappingURL=pkce.js.map

package/dist/pkce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.js","sourceRoot":"","sources":["../src/pkce.ts"],"names":[],"mappings":";;;AAsBA,wCAEC;AAGD,oCAEC;AAED,kCAEC;AAWD,oCAiBC;AASD,sCASC;AAsED,oCAqBC;AAUD,sCAaC;AAYD,0CAgBC;AAGD,oCAIC;AApOD;;;;;;;;;;GAUG;AACH,6CAAsD;AAEtD,gEAAgE;AACnD,QAAA,SAAS,GAAG,YAAY,CAAC;AAEtC,wDAAwD;AAC3C,QAAA,QAAQ,GAAG,QAAQ,CAAC;AAEjC,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAEhE,yEAAyE;AACzE,SAAgB,cAAc;IAC5B,OAAO,MAAM,CAAC,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,qEAAqE;AACrE,SAAgB,YAAY,CAAC,QAAgB;IAC3C,OAAO,MAAM,CAAC,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,SAAgB,WAAW;IACzB,OAAO,MAAM,CAAC,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,CAAC;AACjC,CAAC;AAWD,SAAgB,YAAY,CAAC,EAC3B,MAAM,EACN,WAAW,EACX,SAAS,EACT,KAAK,EACL,QAAQ,GAAG,iBAAS,EACpB,QAAQ,GAAG,gBAAQ,GACD;IAClB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC;IAC/D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC5C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC3C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;IAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;IACtD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAQD,qEAAqE;AACrE,SAAgB,aAAa,CAAC,UAAkB;IAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC9D,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS;QAC/C,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS;QACjD,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;KAC9E,CAAC;AACJ,CAAC;AAYD,MAAa,UAAW,SAAQ,KAAK;IAC1B,MAAM,CAAS;IAExB,YAAY,OAAe,EAAE,MAAM,GAAG,CAAC;QACrC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AARD,gCAQC;AAED,KAAK,UAAU,SAAS,CACtB,MAAc,EACd,IAA4B,EAC5B,SAAgB,EAChB,GAAiB;IAEjB,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,EAAE;QACtE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;KAC3C,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,OAAO,GAA4B,EAAE,CAAC;IAC1C,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;IACpE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACtF,MAAM,IAAI,UAAU,CAClB,sCAAsC,QAAQ,CAAC,MAAM,MAAM,MAAM,EAAE,EACnE,QAAQ,CAAC,MAAM,CAChB,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IACpC,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC;IACtC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC9D,MAAM,IAAI,UAAU,CAAC,8CAA8C,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IACrF,OAAO;QACL,MAAM;QACN,OAAO;QACP,SAAS,EAAE,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI;KAChE,CAAC;AACJ,CAAC;AAYD,SAAgB,YAAY,CAAC,EAC3B,MAAM,EACN,IAAI,EACJ,WAAW,EACX,QAAQ,EACR,QAAQ,GAAG,iBAAS,EACpB,SAAS,GAAG,KAAK,EACjB,GAAG,GAAG,IAAI,CAAC,GAAG,GACA;IACd,OAAO,SAAS,CACd,MAAM,EACN;QACE,UAAU,EAAE,oBAAoB;QAChC,IAAI;QACJ,YAAY,EAAE,WAAW;QACzB,SAAS,EAAE,QAAQ;QACnB,aAAa,EAAE,QAAQ;KACxB,EACD,SAAS,EACT,GAAG,CACJ,CAAC;AACJ,CAAC;AAUD,SAAgB,aAAa,CAAC,EAC5B,MAAM,EACN,OAAO,EACP,QAAQ,GAAG,iBAAS,EACpB,SAAS,GAAG,KAAK,EACjB,GAAG,GAAG,IAAI,CAAC,GAAG,GACD;IACb,OAAO,SAAS,CACd,MAAM,EACN,EAAE,UAAU,EAAE,eAAe,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAC5E,SAAS,EACT,GAAG,CACJ,CAAC;AACJ,CAAC;AAYD,SAAgB,eAAe,CAAC,KAAa;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAG7E,CAAC;QACF,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC;QACxC,OAAO;YACL,KAAK,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;YAC/C,SAAS,EAAE,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI;SACvE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,SAAgB,YAAY,CAAC,MAAc,EAAE,KAAa,EAAE,WAAW,GAAG,EAAE;IAC1E,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC;IAC/E,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,SAAS,GAAG,WAAW,GAAG,IAAI,IAAI,KAAK,CAAC;AACjD,CAAC"}

package/dist/queue.js

@@ -0,0 +1,223 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NETWORK_VERDICT = exports.MAX_COMMITS_PER_BATCH = exports.MAX_ENTRY_AGE_DAYS = exports.BACKOFF_MS = void 0;
+exports.dayOf = dayOf;
+exports.newEntry = newEntry;
+exports.backoffMs = backoffMs;
+exports.isExpired = isExpired;
+exports.isDue = isDue;
+exports.batches = batches;
+exports.classifyStatus = classifyStatus;
+exports.applyFailure = applyFailure;
+exports.mergeQueue = mergeQueue;
+exports.readQueue = readQueue;
+exports.appendEntry = appendEntry;
+exports.writeQueue = writeQueue;
+exports.appendOutcome = appendOutcome;
+exports.readOutcomes = readOutcomes;
+/**
+ * The offline queue: one JSONL file of captured commits, and the retry
+ * rules that get them to `/amend` eventually.
+ *
+ * Capture stays local and offline-safe (SPEC-002): a commit on a plane
+ * appends a line and returns, and an unsent queue simply carries over to
+ * the next flush. Only flushing touches the network. The file is JSONL
+ * rather than JSON because appending one line is atomic enough for two
+ * commits landing in the same second, while rewriting a whole array is not.
+ *
+ * Everything that decides *when* and *what* to send is a pure function
+ * here; the IO is the four thin readers/writers at the bottom.
+ */
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const node_crypto_1 = require("node:crypto");
+/**
+ * The report day is the *local* date of the commit: `git log %aI` carries
+ * the author's own offset, so the first ten characters are already the day
+ * the engineer would say they did the work.
+ */
+function dayOf(isoWithOffset) {
+    const match = isoWithOffset.match(/^(\d{4}-\d{2}-\d{2})/);
+    if (match)
+        return match[1];
+    return new Date(isoWithOffset).toISOString().slice(0, 10);
+}
+function newEntry(input) {
+    const now = input.now ?? new Date();
+    return {
+        id: (0, node_crypto_1.randomUUID)(),
+        day: dayOf(input.commit.at),
+        project: input.project,
+        commit: input.commit,
+        queuedAt: now.toISOString(),
+        attempts: 0,
+        nextAttemptAt: null,
+    };
+}
+/** Backoff schedule: minutes at first, a day at worst. */
+exports.BACKOFF_MS = [
+    60_000, // 1 minute
+    5 * 60_000,
+    15 * 60_000,
+    60 * 60_000,
+    6 * 60 * 60_000,
+    24 * 60 * 60_000,
+];
+function backoffMs(attempts) {
+    if (attempts <= 0)
+        return 0;
+    return exports.BACKOFF_MS[Math.min(attempts, exports.BACKOFF_MS.length) - 1];
+}
+/**
+ * How old an entry may get before sending it is hopeless — the endpoint
+ * refuses a date past its backfill window, so retrying forever would only
+ * hide the queue behind permanent 400s.
+ */
+exports.MAX_ENTRY_AGE_DAYS = 30;
+function isExpired(entry, now) {
+    const day = new Date(`${entry.day}T00:00:00Z`).getTime();
+    return (now.getTime() - day) / 86_400_000 > exports.MAX_ENTRY_AGE_DAYS;
+}
+function isDue(entry, now) {
+    return entry.nextAttemptAt === null || entry.nextAttemptAt <= now.getTime();
+}
+/** How many commits ride in one POST — the endpoint's own cap. */
+exports.MAX_COMMITS_PER_BATCH = 100;
+/**
+ * Groups due entries into one POST per (day, project): the endpoint writes
+ * one amendment row per call, and one row per engagement-day is what the
+ * evening draft wants to merge.
+ */
+function batches(entries, maxPerBatch = exports.MAX_COMMITS_PER_BATCH) {
+    const groups = new Map();
+    for (const entry of entries) {
+        const key = `${entry.day}\u0000${entry.project}`;
+        const group = groups.get(key);
+        if (group)
+            group.push(entry);
+        else
+            groups.set(key, [entry]);
+    }
+    return [...groups.values()].flatMap((group) => {
+        const chunks = [];
+        for (let i = 0; i < group.length; i += maxPerBatch) {
+            chunks.push(group.slice(i, i + maxPerBatch));
+        }
+        return chunks;
+    });
+}
+/**
+ * What an HTTP status means for the queue. 401 is its own verdict because
+ * it is the one failure a refresh can fix without the engineer; 4xx
+ * otherwise means the payload will never be accepted, and keeping it in the
+ * queue would only bury the working entries behind it.
+ */
+function classifyStatus(status) {
+    if (status >= 200 && status < 300)
+        return 'sent';
+    if (status === 401)
+        return 'reauth';
+    if (status === 408 || status === 429)
+        return 'retry';
+    if (status >= 400 && status < 500)
+        return 'rejected';
+    return 'retry';
+}
+/** A network error (no status at all) is always worth another try. */
+exports.NETWORK_VERDICT = 'retry';
+function applyFailure(entries, verdict, error, now) {
+    if (verdict === 'rejected')
+        return { keep: [], drop: entries.map((e) => ({ ...e, lastError: error })) };
+    const keep = entries.map((entry) => {
+        const attempts = entry.attempts + 1;
+        return {
+            ...entry,
+            attempts,
+            // A re-auth failure waits on the engineer, not on a timer, but it
+            // still backs off so a broken refresh cannot spin on every commit.
+            nextAttemptAt: now.getTime() + backoffMs(attempts),
+            lastError: error,
+        };
+    });
+    return { keep, drop: [] };
+}
+/** Replaces `original` entries with `replacement` (or removes them). */
+function mergeQueue(queue, original, replacement = []) {
+    const removed = new Set(original.map((entry) => entry.id));
+    const kept = queue.filter((entry) => !removed.has(entry.id));
+    return [...kept, ...replacement];
+}
+// ---------------------------------------------------------------------------
+// Files
+// ---------------------------------------------------------------------------
+function readJsonl(path) {
+    let raw;
+    try {
+        raw = (0, node_fs_1.readFileSync)(path, 'utf8');
+    }
+    catch {
+        return [];
+    }
+    return raw
+        .split('\n')
+        .filter((line) => line.trim().length > 0)
+        .flatMap((line) => {
+        try {
+            return [JSON.parse(line)];
+        }
+        catch {
+            // A torn line (power loss mid-append) is one lost commit, not a
+            // broken queue.
+            return [];
+        }
+    });
+}
+function readQueue(path) {
+    return readJsonl(path);
+}
+/**
+ * True when the file's last byte is a newline — false for a file whose last
+ * append was cut short, which is the one case where appending blindly would
+ * corrupt a *second* line instead of just the torn one.
+ */
+function endsWithNewline(path) {
+    let handle;
+    try {
+        const size = (0, node_fs_1.statSync)(path).size;
+        if (size === 0)
+            return true;
+        handle = (0, node_fs_1.openSync)(path, 'r');
+        const last = Buffer.alloc(1);
+        (0, node_fs_1.readSync)(handle, last, 0, 1, size - 1);
+        return last[0] === 0x0a;
+    }
+    catch {
+        return true;
+    }
+    finally {
+        if (handle !== undefined)
+            (0, node_fs_1.closeSync)(handle);
+    }
+}
+function appendEntry(path, entry) {
+    (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(path), { recursive: true });
+    const prefix = endsWithNewline(path) ? '' : '\n';
+    (0, node_fs_1.appendFileSync)(path, `${prefix}${JSON.stringify(entry)}\n`, { mode: 0o600 });
+}
+/** Rewrites the queue atomically — a crash leaves the old file intact. */
+function writeQueue(path, entries) {
+    (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(path), { recursive: true });
+    const temp = `${path}.${process.pid}.tmp`;
+    (0, node_fs_1.writeFileSync)(temp, entries.map((entry) => `${JSON.stringify(entry)}\n`).join(''), {
+        mode: 0o600,
+    });
+    (0, node_fs_1.renameSync)(temp, path);
+}
+function appendOutcome(path, outcome) {
+    (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(path), { recursive: true });
+    (0, node_fs_1.appendFileSync)(path, `${JSON.stringify(outcome)}\n`, { mode: 0o600 });
+}
+function readOutcomes(path) {
+    return readJsonl(path);
+}
+//# sourceMappingURL=queue.js.map

package/dist/queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.js","sourceRoot":"","sources":["../src/queue.ts"],"names":[],"mappings":";;;AAkEA,sBAIC;AAED,4BAWC;AAYD,8BAGC;AASD,8BAGC;AAED,sBAEC;AAUD,0BAkBC;AAUD,wCAMC;AAYD,oCAoBC;AAGD,gCAQC;AA2BD,8BAEC;AAuBD,kCAIC;AAGD,gCAOC;AAED,sCAGC;AAED,oCAEC;AApRD;;;;;;;;;;;;GAYG;AACH,qCAUiB;AACjB,yCAAoC;AACpC,6CAAyC;AAoCzC;;;;GAIG;AACH,SAAgB,KAAK,CAAC,aAAqB;IACzC,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1D,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,OAAO,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,SAAgB,QAAQ,CAAC,KAA4D;IACnF,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACpC,OAAO;QACL,EAAE,EAAE,IAAA,wBAAU,GAAE;QAChB,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,GAAG,CAAC,WAAW,EAAE;QAC3B,QAAQ,EAAE,CAAC;QACX,aAAa,EAAE,IAAI;KACpB,CAAC;AACJ,CAAC;AAED,0DAA0D;AAC7C,QAAA,UAAU,GAAG;IACxB,MAAM,EAAE,WAAW;IACnB,CAAC,GAAG,MAAM;IACV,EAAE,GAAG,MAAM;IACX,EAAE,GAAG,MAAM;IACX,CAAC,GAAG,EAAE,GAAG,MAAM;IACf,EAAE,GAAG,EAAE,GAAG,MAAM;CACR,CAAC;AAEX,SAAgB,SAAS,CAAC,QAAgB;IACxC,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IAC5B,OAAO,kBAAU,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,kBAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED;;;;GAIG;AACU,QAAA,kBAAkB,GAAG,EAAE,CAAC;AAErC,SAAgB,SAAS,CAAC,KAAiB,EAAE,GAAS;IACpD,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,GAAG,UAAU,GAAG,0BAAkB,CAAC;AACjE,CAAC;AAED,SAAgB,KAAK,CAAC,KAAiB,EAAE,GAAS;IAChD,OAAO,KAAK,CAAC,aAAa,KAAK,IAAI,IAAI,KAAK,CAAC,aAAa,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;AAC9E,CAAC;AAED,kEAAkE;AACrD,QAAA,qBAAqB,GAAG,GAAG,CAAC;AAEzC;;;;GAIG;AACH,SAAgB,OAAO,CACrB,OAAqB,EACrB,WAAW,GAAG,6BAAqB;IAEnC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC/C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,GAAG,SAAS,KAAK,CAAC,OAAO,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;YACxB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QAC5C,MAAM,MAAM,GAAmB,EAAE,CAAC;QAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAID;;;;;GAKG;AACH,SAAgB,cAAc,CAAC,MAAc;IAC3C,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,MAAM,CAAC;IACjD,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,QAAQ,CAAC;IACpC,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,OAAO,CAAC;IACrD,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,UAAU,CAAC;IACrD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,sEAAsE;AACzD,QAAA,eAAe,GAAgB,OAAO,CAAC;AASpD,SAAgB,YAAY,CAC1B,OAAqB,EACrB,OAAqC,EACrC,KAAa,EACb,GAAS;IAET,IAAI,OAAO,KAAK,UAAU;QACxB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;IAC9E,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACjC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC;QACpC,OAAO;YACL,GAAG,KAAK;YACR,QAAQ;YACR,kEAAkE;YAClE,mEAAmE;YACnE,aAAa,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC;YAClD,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AAC5B,CAAC;AAED,wEAAwE;AACxE,SAAgB,UAAU,CACxB,KAAmB,EACnB,QAAsB,EACtB,cAA4B,EAAE;IAE9B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,IAAI,EAAE,GAAG,WAAW,CAAC,CAAC;AACnC,CAAC;AAED,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,SAAS,SAAS,CAAI,IAAY;IAChC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,GAAG;SACP,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;SACxC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QAChB,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,gEAAgE;YAChE,gBAAgB;YAChB,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAgB,SAAS,CAAC,IAAY;IACpC,OAAO,SAAS,CAAa,IAAI,CAAC,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,MAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAA,kBAAQ,EAAC,IAAI,CAAC,CAAC,IAAI,CAAC;QACjC,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5B,MAAM,GAAG,IAAA,kBAAQ,EAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAA,kBAAQ,EAAC,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,MAAM,KAAK,SAAS;YAAE,IAAA,mBAAS,EAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,SAAgB,WAAW,CAAC,IAAY,EAAE,KAAiB;IACzD,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACjD,IAAA,wBAAc,EAAC,IAAI,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,0EAA0E;AAC1E,SAAgB,UAAU,CAAC,IAAY,EAAE,OAAqB;IAC5D,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IAC1C,IAAA,uBAAa,EAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;QACjF,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,IAAA,oBAAU,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,SAAgB,aAAa,CAAC,IAAY,EAAE,OAAqB;IAC/D,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,IAAA,wBAAc,EAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,SAAgB,YAAY,CAAC,IAAY;IACvC,OAAO,SAAS,CAAe,IAAI,CAAC,CAAC;AACvC,CAAC"}

package/dist/send.js

@@ -0,0 +1,151 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.payloadForBatch = payloadForBatch;
+exports.payloadForNote = payloadForNote;
+exports.postAmendment = postAmendment;
+exports.flush = flush;
+const queue_1 = require("./queue");
+/** One batch of queued commits as one `/amend` request body. */
+function payloadForBatch(entries) {
+    return {
+        date: entries[0].day,
+        source: 'cli',
+        project: entries[0].project,
+        commits: entries.map((entry) => entry.commit),
+    };
+}
+function payloadForNote(note, day, project) {
+    return {
+        date: day,
+        source: 'manual',
+        ...(project && { project }),
+        bullets: [note],
+    };
+}
+/** One POST. Network failures come back as status 0, not as throws. */
+async function postAmendment(amendUrl, payload, accessToken, fetchImpl = fetch) {
+    let response;
+    try {
+        response = await fetchImpl(amendUrl, {
+            method: 'POST',
+            headers: {
+                authorization: `Bearer ${accessToken}`,
+                'content-type': 'application/json',
+            },
+            body: JSON.stringify(payload),
+        });
+    }
+    catch (err) {
+        return { status: 0, error: err instanceof Error ? err.message : String(err) };
+    }
+    const text = await response.text();
+    let body = {};
+    try {
+        body = JSON.parse(text);
+    }
+    catch {
+        // Non-JSON error bodies (a proxy, a 502 page) still carry a status.
+    }
+    return {
+        status: response.status,
+        amendmentId: typeof body.id === 'string' ? body.id : undefined,
+        error: response.ok
+            ? undefined
+            : typeof body.error === 'string'
+                ? body.error
+                : text.slice(0, 200) || `HTTP ${response.status}`,
+    };
+}
+/**
+ * Attempts every due batch once (twice for a 401), persisting the queue
+ * after each one so a crash mid-flush cannot resend or lose a batch.
+ */
+async function flush({ paths, amendUrl, session, fetchImpl = fetch, now = () => new Date(), log = () => { }, }) {
+    const report = {
+        sent: 0,
+        commitsSent: 0,
+        deferred: 0,
+        rejected: 0,
+        expired: 0,
+        needsLogin: false,
+        errors: [],
+    };
+    let queue = (0, queue_1.readQueue)(paths.queue);
+    if (queue.length === 0)
+        return report;
+    const stale = queue.filter((entry) => (0, queue_1.isExpired)(entry, now()));
+    if (stale.length > 0) {
+        queue = (0, queue_1.mergeQueue)(queue, stale);
+        (0, queue_1.writeQueue)(paths.queue, queue);
+        (0, queue_1.appendOutcome)(paths.dead, {
+            entries: stale,
+            at: now().toISOString(),
+            status: 0,
+            error: `older than the endpoint's ${queue_1.MAX_ENTRY_AGE_DAYS}-day window — never sent`,
+        });
+        report.expired = stale.length;
+    }
+    if (!session.isLoggedIn) {
+        report.needsLogin = true;
+        report.deferred = (0, queue_1.batches)(queue.filter((entry) => (0, queue_1.isDue)(entry, now()))).length;
+        return report;
+    }
+    for (const batch of (0, queue_1.batches)(queue.filter((entry) => (0, queue_1.isDue)(entry, now())))) {
+        const payload = payloadForBatch(batch);
+        let token;
+        try {
+            token = await session.accessToken();
+        }
+        catch {
+            report.needsLogin = true;
+            report.deferred += 1;
+            break;
+        }
+        let result = await postAmendment(amendUrl, payload, token, fetchImpl);
+        let verdict = result.status === 0 ? 'retry' : (0, queue_1.classifyStatus)(result.status);
+        if (verdict === 'reauth') {
+            // The one failure the CLI can fix by itself — once per batch.
+            const refreshed = await session.refresh();
+            if (refreshed) {
+                result = await postAmendment(amendUrl, payload, refreshed, fetchImpl);
+                verdict = result.status === 0 ? 'retry' : (0, queue_1.classifyStatus)(result.status);
+            }
+            if (verdict === 'reauth')
+                report.needsLogin = true;
+        }
+        if (verdict === 'sent') {
+            queue = (0, queue_1.mergeQueue)(queue, batch);
+            (0, queue_1.writeQueue)(paths.queue, queue);
+            (0, queue_1.appendOutcome)(paths.sent, {
+                entries: batch,
+                at: now().toISOString(),
+                status: result.status,
+                amendmentId: result.amendmentId,
+            });
+            report.sent += 1;
+            report.commitsSent += batch.length;
+            log(`sent ${batch.length} commit(s) for ${payload.date} (${payload.project})`);
+            continue;
+        }
+        const error = result.error ?? `HTTP ${result.status}`;
+        const { keep, drop } = (0, queue_1.applyFailure)(batch, verdict, error, now());
+        queue = (0, queue_1.mergeQueue)(queue, batch, keep);
+        (0, queue_1.writeQueue)(paths.queue, queue);
+        if (drop.length > 0) {
+            (0, queue_1.appendOutcome)(paths.dead, {
+                entries: drop,
+                at: now().toISOString(),
+                status: result.status,
+                error,
+            });
+            report.rejected += drop.length;
+        }
+        else {
+            report.deferred += 1;
+        }
+        report.errors.push(error);
+        log(`deferred ${batch.length} commit(s) for ${payload.date}: ${error}`);
+    }
+    return report;
+}
+//# sourceMappingURL=send.js.map

package/dist/send.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"send.js","sourceRoot":"","sources":["../src/send.ts"],"names":[],"mappings":";;AAmDA,0CAOC;AAED,wCAOC;AASD,sCAmCC;AA8BD,sBAmGC;AA9ND,mCAYiB;AAoBjB,gEAAgE;AAChE,SAAgB,eAAe,CAAC,OAAqB;IACnD,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG;QACpB,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO;QAC3B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,SAAgB,cAAc,CAAC,IAAY,EAAE,GAAW,EAAE,OAAgB;IACxE,OAAO;QACL,IAAI,EAAE,GAAG;QACT,MAAM,EAAE,QAAQ;QAChB,GAAG,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC,IAAI,CAAC;KAChB,CAAC;AACJ,CAAC;AAQD,uEAAuE;AAChE,KAAK,UAAU,aAAa,CACjC,QAAgB,EAChB,OAAqB,EACrB,WAAmB,EACnB,YAAmB,KAAK;IAExB,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE;YACnC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,WAAW,EAAE;gBACtC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAChF,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,IAAI,GAA4B,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;IACtE,CAAC;IACD,OAAO;QACL,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,WAAW,EAAE,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;QAC9D,KAAK,EAAE,QAAQ,CAAC,EAAE;YAChB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;gBAC9B,CAAC,CAAC,IAAI,CAAC,KAAK;gBACZ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,QAAQ,QAAQ,CAAC,MAAM,EAAE;KACtD,CAAC;AACJ,CAAC;AA0BD;;;GAGG;AACI,KAAK,UAAU,KAAK,CAAC,EAC1B,KAAK,EACL,QAAQ,EACR,OAAO,EACP,SAAS,GAAG,KAAK,EACjB,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EACtB,GAAG,GAAG,GAAG,EAAE,GAAE,CAAC,GACD;IACb,MAAM,MAAM,GAAgB;QAC1B,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC;QACd,QAAQ,EAAE,CAAC;QACX,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;QACV,UAAU,EAAE,KAAK;QACjB,MAAM,EAAE,EAAE;KACX,CAAC;IAEF,IAAI,KAAK,GAAG,IAAA,iBAAS,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAEtC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,iBAAS,EAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,KAAK,GAAG,IAAA,kBAAU,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACjC,IAAA,kBAAU,EAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC/B,IAAA,qBAAa,EAAC,KAAK,CAAC,IAAI,EAAE;YACxB,OAAO,EAAE,KAAK;YACd,EAAE,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;YACvB,MAAM,EAAE,CAAC;YACT,KAAK,EAAE,6BAA6B,0BAAkB,0BAA0B;SACjF,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC;IAChC,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACxB,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,MAAM,CAAC,QAAQ,GAAG,IAAA,eAAO,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,aAAK,EAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/E,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,IAAA,eAAO,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,aAAK,EAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;YACzB,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;YACrB,MAAM;QACR,CAAC;QAED,IAAI,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QACtE,IAAI,OAAO,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAE,OAAiB,CAAC,CAAC,CAAC,IAAA,sBAAc,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEvF,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACzB,8DAA8D;YAC9D,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YAC1C,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;gBACtE,OAAO,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAA,sBAAc,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1E,CAAC;YACD,IAAI,OAAO,KAAK,QAAQ;gBAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;QACrD,CAAC;QAED,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACvB,KAAK,GAAG,IAAA,kBAAU,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACjC,IAAA,kBAAU,EAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC/B,IAAA,qBAAa,EAAC,KAAK,CAAC,IAAI,EAAE;gBACxB,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;gBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;YACjB,MAAM,CAAC,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC;YACnC,GAAG,CAAC,QAAQ,KAAK,CAAC,MAAM,kBAAkB,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC;YAC/E,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;QACtD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAA,oBAAY,EAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAClE,KAAK,GAAG,IAAA,kBAAU,EAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACvC,IAAA,kBAAU,EAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,IAAA,qBAAa,EAAC,KAAK,CAAC,IAAI,EAAE;gBACxB,OAAO,EAAE,IAAI;gBACb,EAAE,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;gBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK;aACN,CAAC,CAAC;YACH,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;QACvB,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,GAAG,CAAC,YAAY,KAAK,CAAC,MAAM,kBAAkB,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/tokens.js

@@ -0,0 +1,106 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Session = exports.NotLoggedInError = void 0;
+exports.storedFrom = storedFrom;
+/**
+ * The access token every send needs, refreshed when it has aged out.
+ *
+ * Refresh happens in two places on purpose: proactively when the stored
+ * expiry has passed (cheap, one round trip), and reactively when the
+ * endpoint answers 401 anyway — because the CLI's clock, the stored
+ * `expires_in` and the issuer's opinion can disagree, and a queue that
+ * silently stops sending is exactly the failure mode DATA-ITD-005 is
+ * trying to avoid.
+ *
+ * A refresh that succeeds writes the rotated pair straight back to the
+ * keychain: OpenAuth issues a new refresh token on every exchange, so
+ * losing the rotated one means the engineer has to sign in again.
+ */
+const pkce_1 = require("./pkce");
+class NotLoggedInError extends Error {
+    constructor(message = 'not signed in — run `scribe login`') {
+        super(message);
+        this.name = 'NotLoggedInError';
+    }
+}
+exports.NotLoggedInError = NotLoggedInError;
+function storedFrom(tokens, issuer, now) {
+    return {
+        ...tokens,
+        issuer,
+        email: (0, pkce_1.readAccessToken)(tokens.access).email,
+        savedAt: new Date(now()).toISOString(),
+    };
+}
+/**
+ * Holds the credentials for one process run: reads them once, refreshes at
+ * most once per reason, and persists whatever it rotates.
+ */
+class Session {
+    issuer;
+    store;
+    fetchImpl;
+    now;
+    current;
+    constructor({ issuer, store, fetchImpl = fetch, now = Date.now }) {
+        this.issuer = issuer;
+        this.store = store;
+        this.fetchImpl = fetchImpl;
+        this.now = now;
+        this.current = store.read();
+        // Tokens from another stage's issuer are not credentials here.
+        if (this.current && this.current.issuer !== issuer)
+            this.current = null;
+    }
+    get email() {
+        return this.current?.email ?? null;
+    }
+    get isLoggedIn() {
+        return this.current !== null;
+    }
+    get expiresAt() {
+        return this.current?.expiresAt ?? null;
+    }
+    /** The token to send, refreshing first if it has expired. */
+    async accessToken() {
+        if (!this.current)
+            throw new NotLoggedInError();
+        if ((0, pkce_1.needsRefresh)(this.current, this.now())) {
+            const refreshed = await this.refresh();
+            if (refreshed)
+                return refreshed;
+        }
+        return this.current.access;
+    }
+    /**
+     * Forces a refresh — what a 401 means — and returns the new access token.
+     * Null means the refresh token itself is gone or rejected, the only state
+     * that needs the engineer back at a browser.
+     */
+    async refresh() {
+        if (!this.current)
+            return null;
+        try {
+            const rotated = await (0, pkce_1.refreshTokens)({
+                issuer: this.issuer,
+                refresh: this.current.refresh,
+                fetchImpl: this.fetchImpl,
+                now: this.now,
+            });
+            this.current = storedFrom(rotated, this.issuer, this.now);
+            this.store.write(this.current);
+            return this.current.access;
+        }
+        catch {
+            return null;
+        }
+    }
+    /** Records a fresh login. */
+    save(tokens) {
+        this.current = storedFrom(tokens, this.issuer, this.now);
+        this.store.write(this.current);
+        return this.current;
+    }
+}
+exports.Session = Session;
+//# sourceMappingURL=tokens.js.map

package/dist/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../src/tokens.ts"],"names":[],"mappings":";;;AA+BA,gCAOC;AAtCD;;;;;;;;;;;;;GAaG;AACH,iCAA+F;AAG/F,MAAa,gBAAiB,SAAQ,KAAK;IACzC,YAAY,OAAO,GAAG,oCAAoC;QACxD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AALD,4CAKC;AASD,SAAgB,UAAU,CAAC,MAAc,EAAE,MAAc,EAAE,GAAiB;IAC1E,OAAO;QACL,GAAG,MAAM;QACT,MAAM;QACN,KAAK,EAAE,IAAA,sBAAe,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK;QAC3C,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;KACvC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAa,OAAO;IACD,MAAM,CAAS;IACf,KAAK,CAAa;IAClB,SAAS,CAAQ;IACjB,GAAG,CAAe;IAC3B,OAAO,CAAsB;IAErC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,KAAK,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAkB;QAC9E,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC5B,+DAA+D;QAC/D,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM;YAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IAC1E,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,IAAI,CAAC;IACrC,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC;IAC/B,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC;IACzC,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,WAAW;QACf,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,gBAAgB,EAAE,CAAC;QAChD,IAAI,IAAA,mBAAY,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YAC3C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACvC,IAAI,SAAS;gBAAE,OAAO,SAAS,CAAC;QAClC,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAA,oBAAa,EAAC;gBAClC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;gBAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,GAAG,EAAE,IAAI,CAAC,GAAG;aACd,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1D,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,6BAA6B;IAC7B,IAAI,CAAC,MAAc;QACjB,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF;AAnED,0BAmEC"}