@lucern/sdk 1.0.11 → 1.0.12

package/dist/authDeviceClient.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/authDeviceClient.ts"],"names":[],"mappings":";AAsCO,IAAM,wBAAA,GAAN,cAAuC,KAAA,CAAM;AAAA,EACzC,KAAA;AAAA,EACA,QAAA;AAAA,EAET,YAAY,IAAA,EAIT;AACD,IAAA,KAAA,CAAM,IAAA,CAAK,WAAA,IAAe,IAAA,CAAK,KAAK,CAAA;AACpC,IAAA,IAAA,CAAK,IAAA,GAAO,0BAAA;AACZ,IAAA,IAAA,CAAK,QAAQ,IAAA,CAAK,KAAA;AAClB,IAAA,IAAA,CAAK,WAAW,IAAA,CAAK,QAAA;AAAA,EACvB;AACF;AAEA,SAAS,YAAY,MAAA,EAAqC;AACxD,EAAA,OAAO,MAAA,CAAO,OAAA,EAAS,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA,IAAK,EAAA;AAChD;AAEA,eAAe,SAAS,QAAA,EAAsD;AAC5E,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAW,MAAM,QAAA,CAAS,IAAA,EAAK;AACrC,IAAA,OAAO,QAAA,CAAS,OAAO,CAAA,GAAI,OAAA,GAAU,EAAC;AAAA,EACxC,SAAS,KAAA,EAAO;AACd,IAAA,OAAO,2BAAgC,CAAA;AAAA,EACzC;AACF;AAEA,SAAS,2BAA2B,MAAA,EAA0C;AAC5E,EAAA,OAAO,EAAC;AACV;AAEA,SAAS,SAAS,KAAA,EAAkD;AAClE,EAAA,OAAO,KAAA,KAAU,QAAQ,OAAO,KAAA,KAAU,YAAY,CAAC,KAAA,CAAM,QAAQ,KAAK,CAAA;AAC5E;AAEA,SAAS,WAAW,KAAA,EAAoC;AACtD,EAAA,MAAM,aAAa,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,CAAM,MAAK,GAAI,EAAA;AAC9D,EAAA,OAAO,UAAA,IAAc,MAAA;AACvB;AAEA,SAAS,yBAAyB,OAAA,EAAsD;AACtF,EAAA,MAAM,UAAA,GAAa,UAAA,CAAW,OAAA,CAAQ,WAAW,CAAA;AACjD,EAAA,MAAM,QAAA,GAAW,UAAA,CAAW,OAAA,CAAQ,SAAS,CAAA;AAC7C,EAAA,MAAM,eAAA,GAAkB,UAAA,CAAW,OAAA,CAAQ,gBAAgB,CAAA;AAC3D,EAAA,MAAM,uBAAA,GAA0B,UAAA,CAAW,OAAA,CAAQ,yBAAyB,CAAA;AAC5E,EAAA,MAAM,YAAY,OAAA,CAAQ,UAAA;AAC1B,EAAA,MAAM,WAAW,OAAA,CAAQ,QAAA;AACzB,EAAA,IACE,CAAC,UAAA,IACD,CAAC,QAAA,IACD,CAAC,eAAA,IACD,CAAC,uBAAA,IACD,OAAO,SAAA,KAAc,QAAA,IACrB,OAAO,aAAa,QAAA,EACpB;AACA,IAAA,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAAA,EACrE;AACA,EAAA,OAAO;AAAA,IACL,WAAA,EAAa,UAAA;AAAA,IACb,SAAA,EAAW,QAAA;AAAA,IACX,gBAAA,EAAkB,eAAA;AAAA,IAClB,yBAAA,EAA2B,uBAAA;AAAA,IAC3B,UAAA,EAAY,SAAA;AAAA,IACZ;AAAA,GACF;AACF;AAEA,SAAS,0BACP,OAAA,EACqB;AACrB,EAAA,MAAM,WAAA,GAAc,UAAA,CAAW,OAAA,CAAQ,YAAY,CAAA;AACnD,EAAA,MAAM,SAAA,GAAY,UAAA,CAAW,OAAA,CAAQ,UAAU,CAAA;AAC/C,EAAA,MAAM,KAAA,GAAQ,UAAA,CAAW,OAAA,CAAQ,KAAK,CAAA;AACtC,EAAA,MAAM,QAAA,GAAW,UAAA,CAAW,OAAA,CAAQ,SAAS,CAAA;AAC7C,EAAA,MAAM,WAAA,GAAc,UAAA,CAAW,OAAA,CAAQ,YAAY,CAAA;AACnD,EAAA,IACE,CAAC,WAAA,IACD,SAAA,KAAc,QAAA,IACd,OAAO,OAAA,CAAQ,UAAA,KAAe,QAAA,IAC9B,CAAC,KAAA,IACD,CAAC,QAAA,IACD,CAAC,WAAA,EACD;AACA,IAAA,MAAM,IAAI,MAAM,oDAAoD,CAAA;AAAA,EACtE;AACA,EAAA,OAAO;AAAA,IACL,YAAA,EAAc,WAAA;AAAA,IACd,UAAA,EAAY,QAAA;AAAA,IACZ,YAAY,OAAA,CAAQ,UAAA;AAAA,IACpB,KAAA;AAAA,IACA,SAAA,EAAW,QAAA;AAAA,IACX,YAAA,EAAc,UAAA,CAAW,OAAA,CAAQ,YAAY,CAAA;AAAA,IAC7C,YAAA,EAAc,WAAA;AAAA,IACd,IAAA,EACE,QAAA,CAAS,OAAA,CAAQ,IAAI,KACrB,OAAO,OAAA,CAAQ,IAAA,CAAK,EAAA,KAAO,QAAA,IAC3B,OAAO,OAAA,CAAQ,IAAA,CAAK,gBAAgB,QAAA,GAChC;AAAA,MACE,EAAA,EAAI,QAAQ,IAAA,CAAK,EAAA;AAAA,MACjB,WAAA,EAAa,QAAQ,IAAA,CAAK;AAAA,KAC5B,GACA;AAAA,GACR;AACF;AAEA,SAAS,sBAAsB,OAAA,EAAyC;AACtE,EAAA,MAAM,KAAA,GAAQ,UAAA,CAAW,OAAA,CAAQ,KAAK,CAAA;AACtC,EAAA,MAAM,IAAI,wBAAA,CAAyB;AAAA,IACjC,OAAO,KAAA,IAAS,iBAAA;AAAA,IAChB,WAAA,EAAa,UAAA,CAAW,OAAA,CAAQ,iBAAiB,CAAA;AAAA,IACjD,UACE,OAAO,OAAA,CAAQ,QAAA,KAAa,QAAA,GAAW,QAAQ,QAAA,GAAW;AAAA,GAC7D,CAAA;AACH;AAEO,SAAS,sBAAA,CAAuB,MAAA,GAA8B,EAAC,EAAG;AACvE,EAAA,MAAM,SAAA,GAAY,OAAO,SAAA,IAAa,KAAA;AACtC,EAAA,MAAM,OAAA,GAAU,YAAY,MAAM,CAAA;AAElC,EAAA,eAAe,IAAA,CAAK,MAAc,IAAA,EAA+B;AAC/D,IAAA,OAAO,SAAA,CAAU,CAAA,EAAG,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,MACpC,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,MAC9C,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI;AAAA,KAC1B,CAAA;AAAA,EACH;AAEA,EAAA,OAAO;AAAA,IACL,MAAM,gBAAA,CAAiB,KAAA,GAAyB,EAAC,EAAG;AAClD,MAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,mCAAA,EAAqC;AAAA,QAC/D,SAAA,EAAW,MAAM,QAAA,IAAY,YAAA;AAAA,QAC7B,KAAA,EAAO,MAAM,KAAA,IAAS;AAAA,OACvB,CAAA;AACD,MAAA,MAAM,OAAA,GAAU,MAAM,QAAA,CAAS,QAAQ,CAAA;AACvC,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,qBAAA,CAAsB,OAAO,CAAA;AAAA,MAC/B;AACA,MAAA,OAAO,yBAAyB,OAAO,CAAA;AAAA,IACzC,CAAA;AAAA,IACA,MAAM,gBAAgB,UAAA,EAAoB;AACxC,MAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,oCAAA,EAAsC;AAAA,QAChE,UAAA,EAAY,8CAAA;AAAA,QACZ,WAAA,EAAa;AAAA,OACd,CAAA;AACD,MAAA,MAAM,OAAA,GAAU,MAAM,QAAA,CAAS,QAAQ,CAAA;AACvC,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,qBAAA,CAAsB,OAAO,CAAA;AAAA,MAC/B;AACA,MAAA,OAAO,0BAA0B,OAAO,CAAA;AAAA,IAC1C;AAAA,GACF;AACF","file":"authDeviceClient.js","sourcesContent":["import type { GatewayClientConfig } from \"./coreClient\";\n\nexport type DeviceCodeInput = {\n  clientId?: string;\n  scope?: string;\n};\n\nexport type DeviceCodeResponse = {\n  device_code: string;\n  user_code: string;\n  verification_uri: string;\n  verification_uri_complete: string;\n  expires_in: number;\n  interval: number;\n};\n\nexport type DeviceTokenResponse = {\n  access_token: string;\n  token_type: \"Bearer\";\n  expires_in: number;\n  scope: string;\n  tenant_id: string;\n  workspace_id?: string;\n  principal_id: string;\n  user?: {\n    id: string;\n    principalId: string;\n  };\n};\n\nexport type DeviceTokenErrorCode =\n  | \"authorization_pending\"\n  | \"slow_down\"\n  | \"access_denied\"\n  | \"expired_token\"\n  | \"invalid_grant\"\n  | \"invalid_request\";\n\nexport class DeviceAuthorizationError extends Error {\n  readonly error: DeviceTokenErrorCode;\n  readonly interval?: number;\n\n  constructor(args: {\n    error: DeviceTokenErrorCode;\n    description?: string;\n    interval?: number;\n  }) {\n    super(args.description ?? args.error);\n    this.name = \"DeviceAuthorizationError\";\n    this.error = args.error;\n    this.interval = args.interval;\n  }\n}\n\nfunction authBaseUrl(config: GatewayClientConfig): string {\n  return config.baseUrl?.replace(/\\/+$/, \"\") ?? \"\";\n}\n\nasync function readJson(response: Response): Promise<Record<string, unknown>> {\n  try {\n    const payload = (await response.json()) as unknown;\n    return isRecord(payload) ? payload : {};\n  } catch (error) {\n    return unreadableJsonBodyFallback(error);\n  }\n}\n\nfunction unreadableJsonBodyFallback(_error: unknown): Record<string, unknown> {\n  return {};\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === \"object\" && !Array.isArray(value);\n}\n\nfunction readString(value: unknown): string | undefined {\n  const normalized = typeof value === \"string\" ? value.trim() : \"\";\n  return normalized || undefined;\n}\n\nfunction assertDeviceCodeResponse(payload: Record<string, unknown>): DeviceCodeResponse {\n  const deviceCode = readString(payload.device_code);\n  const userCode = readString(payload.user_code);\n  const verificationUri = readString(payload.verification_uri);\n  const verificationUriComplete = readString(payload.verification_uri_complete);\n  const expiresIn = payload.expires_in;\n  const interval = payload.interval;\n  if (\n    !deviceCode ||\n    !userCode ||\n    !verificationUri ||\n    !verificationUriComplete ||\n    typeof expiresIn !== \"number\" ||\n    typeof interval !== \"number\"\n  ) {\n    throw new Error(\"Gateway returned an invalid device-code response.\");\n  }\n  return {\n    device_code: deviceCode,\n    user_code: userCode,\n    verification_uri: verificationUri,\n    verification_uri_complete: verificationUriComplete,\n    expires_in: expiresIn,\n    interval,\n  };\n}\n\nfunction assertDeviceTokenResponse(\n  payload: Record<string, unknown>\n): DeviceTokenResponse {\n  const accessToken = readString(payload.access_token);\n  const tokenType = readString(payload.token_type);\n  const scope = readString(payload.scope);\n  const tenantId = readString(payload.tenant_id);\n  const principalId = readString(payload.principal_id);\n  if (\n    !accessToken ||\n    tokenType !== \"Bearer\" ||\n    typeof payload.expires_in !== \"number\" ||\n    !scope ||\n    !tenantId ||\n    !principalId\n  ) {\n    throw new Error(\"Gateway returned an invalid device token response.\");\n  }\n  return {\n    access_token: accessToken,\n    token_type: \"Bearer\",\n    expires_in: payload.expires_in,\n    scope,\n    tenant_id: tenantId,\n    workspace_id: readString(payload.workspace_id),\n    principal_id: principalId,\n    user:\n      isRecord(payload.user) &&\n      typeof payload.user.id === \"string\" &&\n      typeof payload.user.principalId === \"string\"\n        ? {\n            id: payload.user.id,\n            principalId: payload.user.principalId,\n          }\n        : undefined,\n  };\n}\n\nfunction maybeThrowDeviceError(payload: Record<string, unknown>): never {\n  const error = readString(payload.error) as DeviceTokenErrorCode | undefined;\n  throw new DeviceAuthorizationError({\n    error: error ?? \"invalid_request\",\n    description: readString(payload.error_description),\n    interval:\n      typeof payload.interval === \"number\" ? payload.interval : undefined,\n  });\n}\n\nexport function createAuthDeviceClient(config: GatewayClientConfig = {}) {\n  const fetchImpl = config.fetchImpl ?? fetch;\n  const baseUrl = authBaseUrl(config);\n\n  async function post(path: string, body: Record<string, unknown>) {\n    return fetchImpl(`${baseUrl}${path}`, {\n      method: \"POST\",\n      headers: { \"content-type\": \"application/json\" },\n      body: JSON.stringify(body),\n    });\n  }\n\n  return {\n    async createDeviceCode(input: DeviceCodeInput = {}) {\n      const response = await post(\"/api/platform/v1/auth/device/code\", {\n        client_id: input.clientId ?? \"lucern-cli\",\n        scope: input.scope ?? \"graph.read graph.write\",\n      });\n      const payload = await readJson(response);\n      if (!response.ok) {\n        maybeThrowDeviceError(payload);\n      }\n      return assertDeviceCodeResponse(payload);\n    },\n    async pollDeviceToken(deviceCode: string) {\n      const response = await post(\"/api/platform/v1/auth/device/token\", {\n        grant_type: \"urn:ietf:params:oauth:grant-type:device_code\",\n        device_code: deviceCode,\n      });\n      const payload = await readJson(response);\n      if (!response.ok) {\n        maybeThrowDeviceError(payload);\n      }\n      return assertDeviceTokenResponse(payload);\n    },\n  };\n}\n"]}