@m5kdev/backend 0.8.7 → 0.8.9

package/dist/src/modules/connect/connect.repository.d.cts

@@ -0,0 +1,419 @@
+import { ServerResult } from "../base/base.dto.cjs";
+import { BaseTableRepository } from "../base/base.repository.cjs";
+import { ConnectListInputSchema } from "./connect.dto.cjs";
+import * as _$drizzle_orm_sqlite_core0 from "drizzle-orm/sqlite-core";
+import { LibSQLDatabase } from "drizzle-orm/libsql";
+import { InferInsertModel, InferSelectModel } from "drizzle-orm";
+
+//#region src/modules/connect/connect.repository.d.ts
+declare const schema: {
+  connect: _$drizzle_orm_sqlite_core0.SQLiteTableWithColumns<{
+    name: "connect";
+    schema: undefined;
+    columns: {
+      id: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "id";
+        tableName: "connect";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: true;
+        isAutoincrement: false;
+        hasRuntimeDefault: true;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {
+        length: number | undefined;
+      }>;
+      userId: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "user_id";
+        tableName: "connect";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {
+        length: number | undefined;
+      }>;
+      provider: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "provider";
+        tableName: "connect";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {
+        length: number | undefined;
+      }>;
+      accountType: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "account_type";
+        tableName: "connect";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {
+        length: number | undefined;
+      }>;
+      providerAccountId: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "provider_account_id";
+        tableName: "connect";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {
+        length: number | undefined;
+      }>;
+      handle: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "handle";
+        tableName: "connect";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {
+        length: number | undefined;
+      }>;
+      displayName: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "display_name";
+        tableName: "connect";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {
+        length: number | undefined;
+      }>;
+      avatarUrl: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "avatar_url";
+        tableName: "connect";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {
+        length: number | undefined;
+      }>;
+      accessToken: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "access_token";
+        tableName: "connect";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {
+        length: number | undefined;
+      }>;
+      refreshToken: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "refresh_token";
+        tableName: "connect";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {
+        length: number | undefined;
+      }>;
+      tokenType: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "token_type";
+        tableName: "connect";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {
+        length: number | undefined;
+      }>;
+      scope: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "scope";
+        tableName: "connect";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {
+        length: number | undefined;
+      }>;
+      expiresAt: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "expires_at";
+        tableName: "connect";
+        dataType: "date";
+        columnType: "SQLiteTimestamp";
+        data: Date;
+        driverParam: number;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {}>;
+      parentId: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "parent_id";
+        tableName: "connect";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {
+        length: number | undefined;
+      }>;
+      metadataJson: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "metadata_json";
+        tableName: "connect";
+        dataType: "json";
+        columnType: "SQLiteTextJson";
+        data: unknown;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {}>;
+      revokedAt: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "revoked_at";
+        tableName: "connect";
+        dataType: "date";
+        columnType: "SQLiteTimestamp";
+        data: Date;
+        driverParam: number;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {}>;
+      lastRefreshedAt: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "last_refreshed_at";
+        tableName: "connect";
+        dataType: "date";
+        columnType: "SQLiteTimestamp";
+        data: Date;
+        driverParam: number;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {}>;
+      createdAt: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "created_at";
+        tableName: "connect";
+        dataType: "date";
+        columnType: "SQLiteTimestamp";
+        data: Date;
+        driverParam: number;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: true;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {}>;
+      updatedAt: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "updated_at";
+        tableName: "connect";
+        dataType: "date";
+        columnType: "SQLiteTimestamp";
+        data: Date;
+        driverParam: number;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {}>;
+    };
+    dialect: "sqlite";
+  }>;
+};
+type Schema = typeof schema;
+type Orm = LibSQLDatabase<Schema>;
+type ConnectRow = InferSelectModel<Schema["connect"]>;
+type ConnectInsert = InferInsertModel<Schema["connect"]>;
+declare class ConnectRepository extends BaseTableRepository<Orm, Schema, Record<string, never>, Schema["connect"]> {
+  list(data: ConnectListInputSchema & {
+    userId: string;
+  }, tx?: Orm): Promise<ServerResult<{
+    id: string;
+    userId: string;
+    provider: string;
+    accountType: string;
+    providerAccountId: string;
+    handle: string | null;
+    displayName: string | null;
+    avatarUrl: string | null;
+    accessToken: string;
+    refreshToken: string | null;
+    tokenType: string | null;
+    scope: string | null;
+    expiresAt: Date | null;
+    parentId: string | null;
+    metadataJson: unknown;
+    revokedAt: Date | null;
+    lastRefreshedAt: Date | null;
+    createdAt: Date;
+    updatedAt: Date | null;
+  }[]>>;
+  upsert(data: ConnectInsert, tx?: Orm): Promise<ServerResult<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date | null;
+    expiresAt: Date | null;
+    userId: string;
+    accessToken: string;
+    refreshToken: string | null;
+    scope: string | null;
+    provider: string;
+    parentId: string | null;
+    accountType: string;
+    providerAccountId: string;
+    handle: string | null;
+    displayName: string | null;
+    avatarUrl: string | null;
+    tokenType: string | null;
+    metadataJson: unknown;
+    revokedAt: Date | null;
+    lastRefreshedAt: Date | null;
+  }>>;
+}
+//#endregion
+export { ConnectInsert, ConnectRepository, ConnectRow };
+//# sourceMappingURL=connect.repository.d.cts.map

package/dist/src/modules/connect/connect.repository.d.mts

@@ -402,13 +402,13 @@ declare class ConnectRepository extends BaseTableRepository<Orm, Schema, Record<
     refreshToken: string | null;
     scope: string | null;
     provider: string;
+    parentId: string | null;
     accountType: string;
     providerAccountId: string;
     handle: string | null;
     displayName: string | null;
     avatarUrl: string | null;
     tokenType: string | null;
-    parentId: string | null;
     metadataJson: unknown;
     revokedAt: Date | null;
     lastRefreshedAt: Date | null;

package/dist/src/modules/connect/connect.router.cjs

@@ -0,0 +1,48 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+require("../../../_virtual/_rolldown/runtime.cjs");
+let express = require("express");
+//#region src/modules/connect/connect.router.ts
+function createConnectRouter(authMiddleware, connectService) {
+	const connectRouter = (0, express.Router)();
+	connectRouter.get("/:provider/start", authMiddleware, async (req, res) => {
+		const user = req.user;
+		const session = req.session;
+		if (!user || !session) return res.status(401).json({ message: "Unauthorized" });
+		const { provider } = req.params;
+		const { redirect } = req.query;
+		const result = await connectService.startAuth(user, session.id, provider);
+		if (result.isErr()) {
+			const errorUrl = redirect ? `${redirect}?error=${encodeURIComponent(result.error.message)}` : `${process.env.VITE_APP_URL || process.env.VITE_SERVER_URL || "/"}?connect_error=${encodeURIComponent(result.error.message)}`;
+			return res.redirect(errorUrl);
+		}
+		return res.redirect(result.value.url);
+	});
+	connectRouter.get("/:provider/callback", authMiddleware, async (req, res) => {
+		const user = req.user;
+		const session = req.session;
+		if (!user || !session) return res.status(401).json({ message: "Unauthorized" });
+		const { provider } = req.params;
+		const { code, state, error, error_description } = req.query;
+		const { redirect } = req.query;
+		const successUrl = redirect && typeof redirect === "string" ? redirect : `${process.env.VITE_APP_URL || process.env.VITE_SERVER_URL || "/"}?connect_success=true`;
+		if (error) {
+			const errorUrl = `${successUrl}&error=${encodeURIComponent(String(error_description || error || "OAuth error"))}`;
+			return res.redirect(errorUrl);
+		}
+		if (!code || !state) {
+			const errorUrl = `${successUrl}&error=${encodeURIComponent("Missing code or state")}`;
+			return res.redirect(errorUrl);
+		}
+		const result = await connectService.handleCallback(user, session.id, provider, String(code), String(state));
+		if (result.isErr()) {
+			const errorUrl = `${successUrl}&error=${encodeURIComponent(result.error.message)}`;
+			return res.redirect(errorUrl);
+		}
+		return res.redirect(`${successUrl}&provider=${provider}`);
+	});
+	return connectRouter;
+}
+//#endregion
+exports.createConnectRouter = createConnectRouter;
+
+//# sourceMappingURL=connect.router.cjs.map

package/dist/src/modules/connect/connect.router.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.router.cjs","names":[],"sources":["../../../../src/modules/connect/connect.router.ts"],"sourcesContent":["import { Router } from \"express\";\r\nimport type { AuthMiddleware, AuthRequest } from \"../auth/auth.middleware\";\r\nimport type { ConnectService } from \"./connect.service\";\r\n\r\nexport function createConnectRouter(\r\n  authMiddleware: AuthMiddleware,\r\n  connectService: ConnectService\r\n): Router {\r\n  const connectRouter = Router();\r\n\r\n  connectRouter.get(\"/:provider/start\", authMiddleware, async (req: AuthRequest, res) => {\r\n    const user = req.user;\r\n    const session = req.session;\r\n    if (!user || !session) {\r\n      return res.status(401).json({ message: \"Unauthorized\" });\r\n    }\r\n    const { provider } = req.params;\r\n    const { redirect } = req.query;\r\n\r\n    const result = await connectService.startAuth(user, session.id, provider);\r\n\r\n    if (result.isErr()) {\r\n      const errorUrl = redirect\r\n        ? `${redirect}?error=${encodeURIComponent(result.error.message)}`\r\n        : `${process.env.VITE_APP_URL || process.env.VITE_SERVER_URL || \"/\"}?connect_error=${encodeURIComponent(result.error.message)}`;\r\n      return res.redirect(errorUrl);\r\n    }\r\n\r\n    return res.redirect(result.value.url);\r\n  });\r\n\r\n  connectRouter.get(\"/:provider/callback\", authMiddleware, async (req: AuthRequest, res) => {\r\n    const user = req.user;\r\n    const session = req.session;\r\n    if (!user || !session) {\r\n      return res.status(401).json({ message: \"Unauthorized\" });\r\n    }\r\n    const { provider } = req.params;\r\n    const { code, state, error, error_description } = req.query;\r\n    const { redirect } = req.query;\r\n\r\n    const successUrl =\r\n      redirect && typeof redirect === \"string\"\r\n        ? redirect\r\n        : `${process.env.VITE_APP_URL || process.env.VITE_SERVER_URL || \"/\"}?connect_success=true`;\r\n\r\n    // Handle OAuth errors from provider\r\n    if (error) {\r\n      const errorMessage = error_description || error || \"OAuth error\";\r\n      const errorUrl = `${successUrl}&error=${encodeURIComponent(String(errorMessage))}`;\r\n      return res.redirect(errorUrl);\r\n    }\r\n\r\n    if (!code || !state) {\r\n      const errorUrl = `${successUrl}&error=${encodeURIComponent(\"Missing code or state\")}`;\r\n      return res.redirect(errorUrl);\r\n    }\r\n\r\n    const result = await connectService.handleCallback(\r\n      user,\r\n      session.id,\r\n      provider,\r\n      String(code),\r\n      String(state)\r\n    );\r\n\r\n    if (result.isErr()) {\r\n      const errorUrl = `${successUrl}&error=${encodeURIComponent(result.error.message)}`;\r\n      return res.redirect(errorUrl);\r\n    }\r\n\r\n    return res.redirect(`${successUrl}&provider=${provider}`);\r\n  });\r\n\r\n  return connectRouter;\r\n}\r\n"],"mappings":";;;;AAIA,SAAgB,oBACd,gBACA,gBACQ;CACR,MAAM,iBAAA,GAAA,QAAA,SAAwB;AAE9B,eAAc,IAAI,oBAAoB,gBAAgB,OAAO,KAAkB,QAAQ;EACrF,MAAM,OAAO,IAAI;EACjB,MAAM,UAAU,IAAI;AACpB,MAAI,CAAC,QAAQ,CAAC,QACZ,QAAO,IAAI,OAAO,IAAI,CAAC,KAAK,EAAE,SAAS,gBAAgB,CAAC;EAE1D,MAAM,EAAE,aAAa,IAAI;EACzB,MAAM,EAAE,aAAa,IAAI;EAEzB,MAAM,SAAS,MAAM,eAAe,UAAU,MAAM,QAAQ,IAAI,SAAS;AAEzE,MAAI,OAAO,OAAO,EAAE;GAClB,MAAM,WAAW,WACb,GAAG,SAAS,SAAS,mBAAmB,OAAO,MAAM,QAAQ,KAC7D,GAAG,QAAQ,IAAI,gBAAgB,QAAQ,IAAI,mBAAmB,IAAI,iBAAiB,mBAAmB,OAAO,MAAM,QAAQ;AAC/H,UAAO,IAAI,SAAS,SAAS;;AAG/B,SAAO,IAAI,SAAS,OAAO,MAAM,IAAI;GACrC;AAEF,eAAc,IAAI,uBAAuB,gBAAgB,OAAO,KAAkB,QAAQ;EACxF,MAAM,OAAO,IAAI;EACjB,MAAM,UAAU,IAAI;AACpB,MAAI,CAAC,QAAQ,CAAC,QACZ,QAAO,IAAI,OAAO,IAAI,CAAC,KAAK,EAAE,SAAS,gBAAgB,CAAC;EAE1D,MAAM,EAAE,aAAa,IAAI;EACzB,MAAM,EAAE,MAAM,OAAO,OAAO,sBAAsB,IAAI;EACtD,MAAM,EAAE,aAAa,IAAI;EAEzB,MAAM,aACJ,YAAY,OAAO,aAAa,WAC5B,WACA,GAAG,QAAQ,IAAI,gBAAgB,QAAQ,IAAI,mBAAmB,IAAI;AAGxE,MAAI,OAAO;GAET,MAAM,WAAW,GAAG,WAAW,SAAS,mBAAmB,OADtC,qBAAqB,SAAS,cAC4B,CAAC;AAChF,UAAO,IAAI,SAAS,SAAS;;AAG/B,MAAI,CAAC,QAAQ,CAAC,OAAO;GACnB,MAAM,WAAW,GAAG,WAAW,SAAS,mBAAmB,wBAAwB;AACnF,UAAO,IAAI,SAAS,SAAS;;EAG/B,MAAM,SAAS,MAAM,eAAe,eAClC,MACA,QAAQ,IACR,UACA,OAAO,KAAK,EACZ,OAAO,MAAM,CACd;AAED,MAAI,OAAO,OAAO,EAAE;GAClB,MAAM,WAAW,GAAG,WAAW,SAAS,mBAAmB,OAAO,MAAM,QAAQ;AAChF,UAAO,IAAI,SAAS,SAAS;;AAG/B,SAAO,IAAI,SAAS,GAAG,WAAW,YAAY,WAAW;GACzD;AAEF,QAAO"}

package/dist/src/modules/connect/connect.router.d.cts

@@ -0,0 +1,9 @@
+import { AuthMiddleware } from "../auth/auth.middleware.cjs";
+import { ConnectService } from "./connect.service.cjs";
+import { Router } from "express";
+
+//#region src/modules/connect/connect.router.d.ts
+declare function createConnectRouter(authMiddleware: AuthMiddleware, connectService: ConnectService): Router;
+//#endregion
+export { createConnectRouter };
+//# sourceMappingURL=connect.router.d.cts.map

package/dist/src/modules/connect/connect.service.cjs

@@ -0,0 +1,90 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+require("../../../_virtual/_rolldown/runtime.cjs");
+const require_src_modules_base_base_service = require("../base/base.service.cjs");
+const require_src_modules_connect_connect_oauth = require("./connect.oauth.cjs");
+let neverthrow = require("neverthrow");
+//#region src/modules/connect/connect.service.ts
+var ConnectService = class extends require_src_modules_base_base_service.BaseService {
+	providers = /* @__PURE__ */ new Map();
+	constructor(repositories, providers) {
+		super(repositories);
+		this.providers = new Map(providers.map((provider) => [provider.id, provider]));
+	}
+	getProvider(id) {
+		return this.providers.get(id) || null;
+	}
+	async startAuth(_user, sessionId, providerId) {
+		return this.throwableAsync(async () => {
+			const provider = this.getProvider(providerId);
+			if (!provider) return this.error("BAD_REQUEST", `Unknown provider: ${providerId}`);
+			return (0, neverthrow.ok)({ url: await require_src_modules_connect_connect_oauth.buildAuthorizationUrl(provider, await require_src_modules_connect_connect_oauth.generateOAuthState(sessionId, providerId)) });
+		});
+	}
+	async handleCallback(user, sessionId, providerId, code, state) {
+		return this.throwableAsync(async () => {
+			const provider = this.getProvider(providerId);
+			if (!provider) return this.error("BAD_REQUEST", `Unknown provider: ${providerId}`);
+			const oauthState = require_src_modules_connect_connect_oauth.getOAuthState(sessionId, providerId, state);
+			if (!oauthState) return this.error("BAD_REQUEST", "Invalid or expired state");
+			const tokens = await require_src_modules_connect_connect_oauth.exchangeCodeForTokens(provider, code, oauthState.codeVerifier, provider.redirectUri, state);
+			const profile = await provider.mapProfile(tokens.accessToken);
+			const connection = await this.repository.connect.upsert({
+				userId: user.id,
+				provider: providerId,
+				accountType: profile.accountType,
+				providerAccountId: profile.providerAccountId,
+				handle: profile.handle,
+				displayName: profile.displayName,
+				avatarUrl: profile.avatarUrl,
+				accessToken: tokens.accessToken,
+				refreshToken: tokens.refreshToken,
+				tokenType: tokens.tokenType || "bearer",
+				scope: tokens.scope,
+				expiresAt: tokens.expiresAt,
+				parentId: profile.parentId,
+				metadataJson: profile.metadata ? JSON.stringify(profile.metadata) : null
+			});
+			if (connection.isErr()) return this.error("INTERNAL_SERVER_ERROR", "Failed to save connection", { cause: connection.error });
+			return (0, neverthrow.ok)(connection.value);
+		});
+	}
+	async refreshToken(connectionId) {
+		return this.throwableAsync(async () => {
+			const connection = await this.repository.connect.findById(connectionId);
+			if (connection.isErr() || !connection.value) return this.error("NOT_FOUND", "Connection not found");
+			const conn = connection.value;
+			if (!conn.refreshToken) return this.error("BAD_REQUEST", "No refresh token available");
+			const provider = this.getProvider(conn.provider);
+			if (!provider) return this.error("BAD_REQUEST", `Unknown provider: ${conn.provider}`);
+			const tokens = await require_src_modules_connect_connect_oauth.refreshAccessToken(provider, conn.refreshToken);
+			const updateData = {
+				id: conn.id,
+				accessToken: tokens.accessToken,
+				refreshToken: tokens.refreshToken || null,
+				tokenType: tokens.tokenType || conn.tokenType || null,
+				scope: tokens.scope || conn.scope || null,
+				expiresAt: tokens.expiresAt || null,
+				lastRefreshedAt: /* @__PURE__ */ new Date()
+			};
+			const updated = await this.repository.connect.update(updateData);
+			if (updated.isErr()) return this.error("INTERNAL_SERVER_ERROR", "Failed to update tokens", { cause: updated.error });
+			return (0, neverthrow.ok)(updated.value);
+		});
+	}
+	list = this.procedure("connectList").requireAuth().handle(({ input, ctx }) => this.repository.connect.list({
+		userId: ctx.actor.userId,
+		...input
+	}));
+	delete = this.procedure("connectDelete").requireAuth().handle(async ({ input, ctx }) => {
+		const connection = await this.repository.connect.findById(input.id);
+		if (connection.isOk()) {
+			if (connection.value?.userId !== ctx.actor.userId) return this.error("FORBIDDEN", "Not your connection");
+			return this.repository.connect.deleteById(input.id);
+		}
+		return (0, neverthrow.err)(connection.error);
+	});
+};
+//#endregion
+exports.ConnectService = ConnectService;
+
+//# sourceMappingURL=connect.service.cjs.map

package/dist/src/modules/connect/connect.service.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.service.cjs","names":["BaseService","buildAuthorizationUrl","generateOAuthState","getOAuthState","exchangeCodeForTokens","refreshAccessToken"],"sources":["../../../../src/modules/connect/connect.service.ts"],"sourcesContent":["import { err, ok } from \"neverthrow\";\r\nimport type { User } from \"../auth/auth.lib\";\r\nimport type { ServerResultAsync } from \"../base/base.dto\";\r\nimport { BaseService } from \"../base/base.service\";\r\nimport type { ConnectDeleteInputSchema, ConnectListInputSchema } from \"./connect.dto\";\r\nimport {\r\n  buildAuthorizationUrl,\r\n  exchangeCodeForTokens,\r\n  generateOAuthState,\r\n  getOAuthState,\r\n  refreshAccessToken,\r\n} from \"./connect.oauth\";\r\nimport type { ConnectRepository } from \"./connect.repository\";\r\nimport type { ConnectProvider } from \"./connect.types\";\r\n\r\nexport class ConnectService extends BaseService<{ connect: ConnectRepository }, never> {\r\n  private providers = new Map<string, ConnectProvider>();\r\n\r\n  constructor(repositories: { connect: ConnectRepository }, providers: ConnectProvider[]) {\r\n    super(repositories);\r\n    this.providers = new Map(providers.map((provider) => [provider.id, provider]));\r\n  }\r\n\r\n  getProvider(id: string): ConnectProvider | null {\r\n    return this.providers.get(id) || null;\r\n  }\r\n\r\n  async startAuth(\r\n    _user: User,\r\n    sessionId: string,\r\n    providerId: string\r\n  ): ServerResultAsync<{ url: string }> {\r\n    return this.throwableAsync(async () => {\r\n      const provider = this.getProvider(providerId);\r\n      if (!provider) {\r\n        return this.error(\"BAD_REQUEST\", `Unknown provider: ${providerId}`);\r\n      }\r\n\r\n      const state = await generateOAuthState(sessionId, providerId);\r\n      const url = await buildAuthorizationUrl(provider, state);\r\n\r\n      return ok({ url });\r\n    });\r\n  }\r\n\r\n  async handleCallback(\r\n    user: User,\r\n    sessionId: string,\r\n    providerId: string,\r\n    code: string,\r\n    state: string\r\n  ) {\r\n    return this.throwableAsync(async () => {\r\n      const provider = this.getProvider(providerId);\r\n      if (!provider) {\r\n        return this.error(\"BAD_REQUEST\", `Unknown provider: ${providerId}`);\r\n      }\r\n\r\n      const oauthState = getOAuthState(sessionId, providerId, state);\r\n      if (!oauthState) {\r\n        return this.error(\"BAD_REQUEST\", \"Invalid or expired state\");\r\n      }\r\n\r\n      // Exchange code for tokens\r\n      // Note: redirectUri must match exactly what was used in authorization request\r\n      const tokens = await exchangeCodeForTokens(\r\n        provider,\r\n        code,\r\n        oauthState.codeVerifier,\r\n        provider.redirectUri,\r\n        state\r\n      );\r\n\r\n      // Fetch profile\r\n      const profile = await provider.mapProfile(tokens.accessToken);\r\n\r\n      // Upsert connection\r\n      const connection = await this.repository.connect.upsert({\r\n        userId: user.id,\r\n        provider: providerId,\r\n        accountType: profile.accountType,\r\n        providerAccountId: profile.providerAccountId,\r\n        handle: profile.handle,\r\n        displayName: profile.displayName,\r\n        avatarUrl: profile.avatarUrl,\r\n        accessToken: tokens.accessToken,\r\n        refreshToken: tokens.refreshToken,\r\n        tokenType: tokens.tokenType || \"bearer\",\r\n        scope: tokens.scope,\r\n        expiresAt: tokens.expiresAt,\r\n        parentId: profile.parentId,\r\n        metadataJson: profile.metadata ? JSON.stringify(profile.metadata) : null,\r\n      });\r\n\r\n      if (connection.isErr()) {\r\n        return this.error(\"INTERNAL_SERVER_ERROR\", \"Failed to save connection\", {\r\n          cause: connection.error,\r\n        });\r\n      }\r\n\r\n      return ok(connection.value);\r\n    });\r\n  }\r\n\r\n  async refreshToken(connectionId: string) {\r\n    return this.throwableAsync(async () => {\r\n      const connection = await this.repository.connect.findById(connectionId);\r\n      if (connection.isErr() || !connection.value) {\r\n        return this.error(\"NOT_FOUND\", \"Connection not found\");\r\n      }\r\n\r\n      const conn = connection.value;\r\n      if (!conn.refreshToken) {\r\n        return this.error(\"BAD_REQUEST\", \"No refresh token available\");\r\n      }\r\n\r\n      const provider = this.getProvider(conn.provider);\r\n      if (!provider) {\r\n        return this.error(\"BAD_REQUEST\", `Unknown provider: ${conn.provider}`);\r\n      }\r\n\r\n      const tokens = await refreshAccessToken(provider, conn.refreshToken);\r\n\r\n      const updateData: {\r\n        id: string;\r\n        accessToken: string;\r\n        refreshToken?: string | null;\r\n        tokenType?: string | null;\r\n        scope?: string | null;\r\n        expiresAt?: Date | null;\r\n        lastRefreshedAt: Date;\r\n      } = {\r\n        id: conn.id,\r\n        accessToken: tokens.accessToken,\r\n        refreshToken: tokens.refreshToken || null,\r\n        tokenType: tokens.tokenType || conn.tokenType || null,\r\n        scope: tokens.scope || conn.scope || null,\r\n        expiresAt: tokens.expiresAt || null,\r\n        lastRefreshedAt: new Date(),\r\n      };\r\n\r\n      const updated = await this.repository.connect.update(updateData);\r\n\r\n      if (updated.isErr()) {\r\n        return this.error(\"INTERNAL_SERVER_ERROR\", \"Failed to update tokens\", {\r\n          cause: updated.error,\r\n        });\r\n      }\r\n\r\n      return ok(updated.value);\r\n    });\r\n  }\r\n\r\n  readonly list = this.procedure<ConnectListInputSchema>(\"connectList\")\r\n    .requireAuth()\r\n    .handle(({ input, ctx }) =>\r\n      this.repository.connect.list({ userId: ctx.actor.userId, ...input })\r\n    );\r\n\r\n  readonly delete = this.procedure<ConnectDeleteInputSchema>(\"connectDelete\")\r\n    .requireAuth()\r\n    .handle(async ({ input, ctx }) => {\r\n      const connection = await this.repository.connect.findById(input.id);\r\n      if (connection.isOk()) {\r\n        if (connection.value?.userId !== ctx.actor.userId) {\r\n          return this.error(\"FORBIDDEN\", \"Not your connection\");\r\n        }\r\n        return this.repository.connect.deleteById(input.id);\r\n      }\r\n      return err(connection.error);\r\n    });\r\n}\r\n"],"mappings":";;;;;;AAeA,IAAa,iBAAb,cAAoCA,sCAAAA,YAAmD;CACrF,4BAAoB,IAAI,KAA8B;CAEtD,YAAY,cAA8C,WAA8B;AACtF,QAAM,aAAa;AACnB,OAAK,YAAY,IAAI,IAAI,UAAU,KAAK,aAAa,CAAC,SAAS,IAAI,SAAS,CAAC,CAAC;;CAGhF,YAAY,IAAoC;AAC9C,SAAO,KAAK,UAAU,IAAI,GAAG,IAAI;;CAGnC,MAAM,UACJ,OACA,WACA,YACoC;AACpC,SAAO,KAAK,eAAe,YAAY;GACrC,MAAM,WAAW,KAAK,YAAY,WAAW;AAC7C,OAAI,CAAC,SACH,QAAO,KAAK,MAAM,eAAe,qBAAqB,aAAa;AAMrE,WAAA,GAAA,WAAA,IAAU,EAAE,KAFA,MAAMC,0CAAAA,sBAAsB,UAD1B,MAAMC,0CAAAA,mBAAmB,WAAW,WAAW,CACL,EAEvC,CAAC;IAClB;;CAGJ,MAAM,eACJ,MACA,WACA,YACA,MACA,OACA;AACA,SAAO,KAAK,eAAe,YAAY;GACrC,MAAM,WAAW,KAAK,YAAY,WAAW;AAC7C,OAAI,CAAC,SACH,QAAO,KAAK,MAAM,eAAe,qBAAqB,aAAa;GAGrE,MAAM,aAAaC,0CAAAA,cAAc,WAAW,YAAY,MAAM;AAC9D,OAAI,CAAC,WACH,QAAO,KAAK,MAAM,eAAe,2BAA2B;GAK9D,MAAM,SAAS,MAAMC,0CAAAA,sBACnB,UACA,MACA,WAAW,cACX,SAAS,aACT,MACD;GAGD,MAAM,UAAU,MAAM,SAAS,WAAW,OAAO,YAAY;GAG7D,MAAM,aAAa,MAAM,KAAK,WAAW,QAAQ,OAAO;IACtD,QAAQ,KAAK;IACb,UAAU;IACV,aAAa,QAAQ;IACrB,mBAAmB,QAAQ;IAC3B,QAAQ,QAAQ;IAChB,aAAa,QAAQ;IACrB,WAAW,QAAQ;IACnB,aAAa,OAAO;IACpB,cAAc,OAAO;IACrB,WAAW,OAAO,aAAa;IAC/B,OAAO,OAAO;IACd,WAAW,OAAO;IAClB,UAAU,QAAQ;IAClB,cAAc,QAAQ,WAAW,KAAK,UAAU,QAAQ,SAAS,GAAG;IACrE,CAAC;AAEF,OAAI,WAAW,OAAO,CACpB,QAAO,KAAK,MAAM,yBAAyB,6BAA6B,EACtE,OAAO,WAAW,OACnB,CAAC;AAGJ,WAAA,GAAA,WAAA,IAAU,WAAW,MAAM;IAC3B;;CAGJ,MAAM,aAAa,cAAsB;AACvC,SAAO,KAAK,eAAe,YAAY;GACrC,MAAM,aAAa,MAAM,KAAK,WAAW,QAAQ,SAAS,aAAa;AACvE,OAAI,WAAW,OAAO,IAAI,CAAC,WAAW,MACpC,QAAO,KAAK,MAAM,aAAa,uBAAuB;GAGxD,MAAM,OAAO,WAAW;AACxB,OAAI,CAAC,KAAK,aACR,QAAO,KAAK,MAAM,eAAe,6BAA6B;GAGhE,MAAM,WAAW,KAAK,YAAY,KAAK,SAAS;AAChD,OAAI,CAAC,SACH,QAAO,KAAK,MAAM,eAAe,qBAAqB,KAAK,WAAW;GAGxE,MAAM,SAAS,MAAMC,0CAAAA,mBAAmB,UAAU,KAAK,aAAa;GAEpE,MAAM,aAQF;IACF,IAAI,KAAK;IACT,aAAa,OAAO;IACpB,cAAc,OAAO,gBAAgB;IACrC,WAAW,OAAO,aAAa,KAAK,aAAa;IACjD,OAAO,OAAO,SAAS,KAAK,SAAS;IACrC,WAAW,OAAO,aAAa;IAC/B,iCAAiB,IAAI,MAAM;IAC5B;GAED,MAAM,UAAU,MAAM,KAAK,WAAW,QAAQ,OAAO,WAAW;AAEhE,OAAI,QAAQ,OAAO,CACjB,QAAO,KAAK,MAAM,yBAAyB,2BAA2B,EACpE,OAAO,QAAQ,OAChB,CAAC;AAGJ,WAAA,GAAA,WAAA,IAAU,QAAQ,MAAM;IACxB;;CAGJ,OAAgB,KAAK,UAAkC,cAAc,CAClE,aAAa,CACb,QAAQ,EAAE,OAAO,UAChB,KAAK,WAAW,QAAQ,KAAK;EAAE,QAAQ,IAAI,MAAM;EAAQ,GAAG;EAAO,CAAC,CACrE;CAEH,SAAkB,KAAK,UAAoC,gBAAgB,CACxE,aAAa,CACb,OAAO,OAAO,EAAE,OAAO,UAAU;EAChC,MAAM,aAAa,MAAM,KAAK,WAAW,QAAQ,SAAS,MAAM,GAAG;AACnE,MAAI,WAAW,MAAM,EAAE;AACrB,OAAI,WAAW,OAAO,WAAW,IAAI,MAAM,OACzC,QAAO,KAAK,MAAM,aAAa,sBAAsB;AAEvD,UAAO,KAAK,WAAW,QAAQ,WAAW,MAAM,GAAG;;AAErD,UAAA,GAAA,WAAA,KAAW,WAAW,MAAM;GAC5B"}