npm - @marcfargas/go-easy - Versions diffs - 0.0.1 → 0.3.0 - Mend

@marcfargas/go-easy 0.0.1 → 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (113) hide show

package/CHANGELOG.md +90 -0
package/LICENSE +21 -0
package/README.md +224 -0
package/dist/auth-flow.d.ts +50 -0
package/dist/auth-flow.d.ts.map +1 -0
package/dist/auth-flow.js +219 -0
package/dist/auth-flow.js.map +1 -0
package/dist/auth-server.d.ts +18 -0
package/dist/auth-server.d.ts.map +1 -0
package/dist/auth-server.js +327 -0
package/dist/auth-server.js.map +1 -0
package/dist/auth-store.d.ts +81 -0
package/dist/auth-store.d.ts.map +1 -0
package/dist/auth-store.js +185 -0
package/dist/auth-store.js.map +1 -0
package/dist/auth.d.ts +47 -0
package/dist/auth.d.ts.map +1 -0
package/dist/auth.js +131 -0
package/dist/auth.js.map +1 -0
package/dist/bin/calendar.d.ts +17 -0
package/dist/bin/calendar.d.ts.map +1 -0
package/dist/bin/calendar.js +224 -0
package/dist/bin/calendar.js.map +1 -0
package/dist/bin/drive.d.ts +18 -0
package/dist/bin/drive.d.ts.map +1 -0
package/dist/bin/drive.js +205 -0
package/dist/bin/drive.js.map +1 -0
package/dist/bin/easy.d.ts +11 -0
package/dist/bin/easy.d.ts.map +1 -0
package/dist/bin/easy.js +140 -0
package/dist/bin/easy.js.map +1 -0
package/dist/bin/gmail.d.ts +25 -0
package/dist/bin/gmail.d.ts.map +1 -0
package/dist/bin/gmail.js +243 -0
package/dist/bin/gmail.js.map +1 -0
package/dist/bin/tasks.d.ts +17 -0
package/dist/bin/tasks.d.ts.map +1 -0
package/dist/bin/tasks.js +190 -0
package/dist/bin/tasks.js.map +1 -0
package/dist/calendar/helpers.d.ts +35 -0
package/dist/calendar/helpers.d.ts.map +1 -0
package/dist/calendar/helpers.js +178 -0
package/dist/calendar/helpers.js.map +1 -0
package/dist/calendar/index.d.ts +64 -0
package/dist/calendar/index.d.ts.map +1 -0
package/dist/calendar/index.js +210 -0
package/dist/calendar/index.js.map +1 -0
package/dist/calendar/types.d.ts +191 -0
package/dist/calendar/types.d.ts.map +1 -0
package/dist/calendar/types.js +12 -0
package/dist/calendar/types.js.map +1 -0
package/dist/drive/helpers.d.ts +22 -0
package/dist/drive/helpers.d.ts.map +1 -0
package/dist/drive/helpers.js +85 -0
package/dist/drive/helpers.js.map +1 -0
package/dist/drive/index.d.ts +114 -0
package/dist/drive/index.d.ts.map +1 -0
package/dist/drive/index.js +418 -0
package/dist/drive/index.js.map +1 -0
package/dist/drive/types.d.ts +91 -0
package/dist/drive/types.d.ts.map +1 -0
package/dist/drive/types.js +5 -0
package/dist/drive/types.js.map +1 -0
package/dist/errors.d.ts +58 -0
package/dist/errors.d.ts.map +1 -0
package/dist/errors.js +73 -0
package/dist/errors.js.map +1 -0
package/dist/gmail/helpers.d.ts +59 -0
package/dist/gmail/helpers.d.ts.map +1 -0
package/dist/gmail/helpers.js +308 -0
package/dist/gmail/helpers.js.map +1 -0
package/dist/gmail/index.d.ts +95 -0
package/dist/gmail/index.d.ts.map +1 -0
package/dist/gmail/index.js +465 -0
package/dist/gmail/index.js.map +1 -0
package/dist/gmail/markdown.d.ts +22 -0
package/dist/gmail/markdown.d.ts.map +1 -0
package/dist/gmail/markdown.js +30 -0
package/dist/gmail/markdown.js.map +1 -0
package/dist/gmail/types.d.ts +154 -0
package/dist/gmail/types.d.ts.map +1 -0
package/dist/gmail/types.js +5 -0
package/dist/gmail/types.js.map +1 -0
package/dist/index.d.ts +27 -0
package/dist/index.d.ts.map +1 -0
package/dist/index.js +29 -0
package/dist/index.js.map +1 -0
package/dist/safety.d.ts +58 -0
package/dist/safety.d.ts.map +1 -0
package/dist/safety.js +61 -0
package/dist/safety.js.map +1 -0
package/dist/scopes.d.ts +16 -0
package/dist/scopes.d.ts.map +1 -0
package/dist/scopes.js +28 -0
package/dist/scopes.js.map +1 -0
package/dist/tasks/helpers.d.ts +10 -0
package/dist/tasks/helpers.d.ts.map +1 -0
package/dist/tasks/helpers.js +33 -0
package/dist/tasks/helpers.js.map +1 -0
package/dist/tasks/index.d.ts +63 -0
package/dist/tasks/index.d.ts.map +1 -0
package/dist/tasks/index.js +253 -0
package/dist/tasks/index.js.map +1 -0
package/dist/tasks/types.d.ts +79 -0
package/dist/tasks/types.d.ts.map +1 -0
package/dist/tasks/types.js +5 -0
package/dist/tasks/types.js.map +1 -0
package/package.json +73 -4
package/skills/go-easy/SKILL.md +146 -0
package/skills/go-easy/calendar.md +366 -0
package/skills/go-easy/drive.md +309 -0
package/skills/go-easy/gmail.md +478 -0
package/skills/go-easy/tasks.md +260 -0

package/dist/auth-server.js ADDED Viewed

@@ -0,0 +1,327 @@
+#!/usr/bin/env node
+/**
+ * auth-server — Background loopback OAuth callback server.
+ *
+ * Spawned as a detached child by auth-flow.ts.
+ * Listens on 127.0.0.1:<port>, waits for Google OAuth callback,
+ * exchanges code for token, writes result to pending/<email>.json,
+ * updates accounts.json.
+ *
+ * Communicates with parent via:
+ *   1. stdout: JSON line with { port, pid, authUrl } (parent reads this, then detaches)
+ *   2. pending/<email>.json file (poll target for subsequent CLI calls)
+ *
+ * Usage (not meant to be called directly):
+ *   node auth-server.js <email> <port>
+ */
+import { createServer } from 'node:http';
+import { readFile, writeFile, mkdir } from 'node:fs/promises';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { URL } from 'node:url';
+// ─── Constants ─────────────────────────────────────────────
+const TIMEOUT_MS = 5 * 60 * 1000; // 5 minutes (D6)
+const GO_EASY_DIR = join(homedir(), '.go-easy');
+const PENDING_DIR = join(GO_EASY_DIR, 'pending');
+const CREDENTIALS_FILE = join(GO_EASY_DIR, 'credentials.json');
+const ACCOUNTS_FILE = join(GO_EASY_DIR, 'accounts.json');
+// All scopes requested by default (D2)
+const ALL_SCOPES = [
+    'https://mail.google.com/',
+    'https://www.googleapis.com/auth/drive',
+    'https://www.googleapis.com/auth/calendar',
+    'https://www.googleapis.com/auth/tasks',
+];
+// ─── Args ──────────────────────────────────────────────────
+const email = process.argv[2];
+const requestedPort = parseInt(process.argv[3] || '0', 10);
+if (!email) {
+    process.stderr.write('Usage: auth-server <email> [port]\n');
+    process.exit(1);
+}
+// ─── HTML responses ────────────────────────────────────────
+const SUCCESS_HTML = `<!DOCTYPE html>
+<html>
+<head><meta charset="utf-8"></head>
+<body style="font-family:system-ui;display:flex;justify-content:center;align-items:center;height:100vh;margin:0;background:#f0fdf4;">
+<div style="text-align:center;max-width:400px;">
+<h1 style="color:#16a34a;">✅ Authorization successful!</h1>
+<p>You can close this tab and return to your AI assistant.</p>
+</div>
+</body>
+</html>`;
+const DENIED_HTML = `<!DOCTYPE html>
+<html>
+<head><meta charset="utf-8"></head>
+<body style="font-family:system-ui;display:flex;justify-content:center;align-items:center;height:100vh;margin:0;background:#fef2f2;">
+<div style="text-align:center;max-width:400px;">
+<h1 style="color:#dc2626;">❌ Authorization declined</h1>
+<p>You can close this tab. Run <code>npx go-easy auth add ${email}</code> to try again.</p>
+</div>
+</body>
+</html>`;
+const PARTIAL_HTML = (granted, missing) => `<!DOCTYPE html>
+<html>
+<head><meta charset="utf-8"></head>
+<body style="font-family:system-ui;display:flex;justify-content:center;align-items:center;height:100vh;margin:0;background:#fffbeb;">
+<div style="text-align:center;max-width:500px;">
+<h1 style="color:#d97706;">⚠️ Partial authorization</h1>
+<p>Some permissions were not granted. Granted: <strong>${granted.join(', ')}</strong></p>
+<p>Missing: <strong>${missing.join(', ')}</strong></p>
+<p>Run <code>npx go-easy auth add ${email}</code> to add missing permissions.</p>
+</div>
+</body>
+</html>`;
+// ─── Helpers ───────────────────────────────────────────────
+function pendingFile() {
+    return join(PENDING_DIR, `${email.toLowerCase()}.json`);
+}
+async function writePending(data) {
+    await mkdir(PENDING_DIR, { recursive: true });
+    await writeFile(pendingFile(), JSON.stringify(data, null, 2), 'utf-8');
+}
+async function readCredentials() {
+    const raw = await readFile(CREDENTIALS_FILE, 'utf-8');
+    return JSON.parse(raw);
+}
+function scopeToService(scope) {
+    if (scope === 'https://mail.google.com/')
+        return 'gmail';
+    if (scope === 'https://www.googleapis.com/auth/drive')
+        return 'drive';
+    if (scope === 'https://www.googleapis.com/auth/calendar')
+        return 'calendar';
+    if (scope === 'https://www.googleapis.com/auth/tasks')
+        return 'tasks';
+    return scope;
+}
+// ─── Token exchange ────────────────────────────────────────
+async function exchangeCodeForToken(code, redirectUri, clientId, clientSecret) {
+    const params = new URLSearchParams({
+        code,
+        client_id: clientId,
+        client_secret: clientSecret,
+        redirect_uri: redirectUri,
+        grant_type: 'authorization_code',
+    });
+    const res = await fetch('https://oauth2.googleapis.com/token', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+        body: params.toString(),
+    });
+    if (!res.ok) {
+        const body = await res.text();
+        throw new Error(`Token exchange failed (${res.status}): ${body}`);
+    }
+    return res.json();
+}
+// ─── Account store update ──────────────────────────────────
+async function updateAccountStore(refreshToken, grantedScopes) {
+    // Read existing store (or create new)
+    let store;
+    try {
+        const raw = await readFile(ACCOUNTS_FILE, 'utf-8');
+        store = JSON.parse(raw);
+    }
+    catch {
+        store = { version: 1, accounts: [] };
+    }
+    const normalizedEmail = email.toLowerCase().trim();
+    const now = new Date().toISOString();
+    // Find or create account
+    let account = store.accounts.find((a) => a.email.toLowerCase() === normalizedEmail);
+    if (!account) {
+        account = {
+            email: normalizedEmail,
+            tokens: {},
+            addedAt: now,
+        };
+        store.accounts.push(account);
+    }
+    const tokens = (account.tokens ?? {});
+    // Write combined token
+    tokens.combined = {
+        refreshToken,
+        scopes: grantedScopes,
+        grantedAt: now,
+    };
+    // D1: Delete per-service tokens after successful upgrade
+    // (only if combined has all scopes those per-service tokens had)
+    for (const svc of ['gmail', 'drive', 'calendar']) {
+        const svcToken = tokens[svc];
+        if (svcToken?.scopes) {
+            const covered = svcToken.scopes.every((s) => grantedScopes.includes(s));
+            if (covered) {
+                delete tokens[svc];
+            }
+        }
+    }
+    account.tokens = tokens;
+    // Atomic write
+    const tmpFile = ACCOUNTS_FILE + '.tmp';
+    await writeFile(tmpFile, JSON.stringify(store, null, 2), 'utf-8');
+    const { rename } = await import('node:fs/promises');
+    await rename(tmpFile, ACCOUNTS_FILE);
+}
+// ─── HTTP Server ───────────────────────────────────────────
+async function start() {
+    const creds = await readCredentials();
+    const server = createServer(async (req, res) => {
+        // Only handle the callback path
+        const url = new URL(req.url ?? '/', `http://127.0.0.1`);
+        if (url.pathname !== '/callback') {
+            res.writeHead(404);
+            res.end('Not found');
+            return;
+        }
+        // Check for error (user denied)
+        const error = url.searchParams.get('error');
+        if (error) {
+            res.writeHead(200, { 'Content-Type': 'text/html' });
+            res.end(DENIED_HTML);
+            await writePending({
+                status: 'denied',
+                message: `User declined authorization: ${error}`,
+                completedAt: new Date().toISOString(),
+            });
+            shutdown();
+            return;
+        }
+        // Get the authorization code
+        const code = url.searchParams.get('code');
+        if (!code) {
+            res.writeHead(400);
+            res.end('Missing code parameter');
+            return;
+        }
+        try {
+            const redirectUri = `http://127.0.0.1:${server.address().port}/callback`;
+            // Exchange code for token
+            const tokenResponse = await exchangeCodeForToken(code, redirectUri, creds.clientId, creds.clientSecret);
+            if (!tokenResponse.refresh_token) {
+                res.writeHead(200, { 'Content-Type': 'text/html' });
+                res.end(`<!DOCTYPE html><html><head><meta charset="utf-8"></head><body style="font-family:system-ui;text-align:center;padding:40px;">
+          <h1 style="color:#dc2626;">Error: No refresh token received</h1>
+          <p>Google did not return a refresh token. This can happen if the app was previously authorized.
+          Try revoking access at <a href="https://myaccount.google.com/permissions">Google Account Permissions</a>
+          and running <code>npx go-easy auth add ${email}</code> again.</p>
+          </body></html>`);
+                await writePending({
+                    status: 'error',
+                    message: 'No refresh token received — revoke at https://myaccount.google.com/permissions and retry',
+                    completedAt: new Date().toISOString(),
+                });
+                shutdown();
+                return;
+            }
+            // Parse granted scopes
+            const grantedScopeString = tokenResponse.scope || '';
+            const grantedScopes = grantedScopeString.split(' ').filter(Boolean);
+            // Check for partial scopes
+            const missingScopes = ALL_SCOPES.filter((s) => !grantedScopes.includes(s));
+            // Update account store
+            await updateAccountStore(tokenResponse.refresh_token, grantedScopes);
+            if (missingScopes.length === 0) {
+                // Full success
+                res.writeHead(200, { 'Content-Type': 'text/html' });
+                res.end(SUCCESS_HTML);
+                await writePending({
+                    status: 'complete',
+                    email,
+                    scopes: grantedScopes.map(scopeToService),
+                    completedAt: new Date().toISOString(),
+                });
+            }
+            else {
+                // Partial authorization
+                const grantedNames = grantedScopes.map(scopeToService);
+                const missingNames = missingScopes.map(scopeToService);
+                res.writeHead(200, { 'Content-Type': 'text/html' });
+                res.end(PARTIAL_HTML(grantedNames, missingNames));
+                await writePending({
+                    status: 'partial',
+                    email,
+                    grantedScopes: grantedNames,
+                    missingScopes: missingNames,
+                    message: `User did not grant all requested scopes`,
+                    completedAt: new Date().toISOString(),
+                });
+            }
+            shutdown();
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            res.writeHead(500);
+            res.end(`Error: ${msg}`);
+            await writePending({
+                status: 'error',
+                message: msg,
+                completedAt: new Date().toISOString(),
+            });
+            shutdown();
+        }
+    });
+    // Try to listen on requested port (0 = random)
+    await new Promise((resolve, reject) => {
+        server.on('error', reject);
+        server.listen(requestedPort, '127.0.0.1', () => resolve());
+    });
+    const addr = server.address();
+    const port = addr.port;
+    const redirectUri = `http://127.0.0.1:${port}/callback`;
+    // Build Google OAuth URL
+    const authUrl = buildAuthUrl(creds.clientId, redirectUri);
+    // Write initial pending file
+    await writePending({
+        status: 'waiting',
+        port,
+        pid: process.pid,
+        authUrl,
+        startedAt: new Date().toISOString(),
+        expiresAt: new Date(Date.now() + TIMEOUT_MS).toISOString(),
+    });
+    // No stdout — parent polls the pending file instead
+    // (stdio is 'ignore' when spawned detached)
+    // Set timeout
+    const timer = setTimeout(() => {
+        writePending({
+            status: 'expired',
+            message: `Authorization not completed within ${TIMEOUT_MS / 1000 / 60} minutes`,
+            completedAt: new Date().toISOString(),
+        }).finally(() => {
+            shutdown();
+        });
+    }, TIMEOUT_MS);
+    function shutdown() {
+        clearTimeout(timer);
+        server.close(() => {
+            process.exit(0);
+        });
+        // Force exit after 3s if close hangs
+        setTimeout(() => process.exit(0), 3000).unref();
+    }
+}
+function buildAuthUrl(clientId, redirectUri) {
+    const params = new URLSearchParams({
+        client_id: clientId,
+        redirect_uri: redirectUri,
+        response_type: 'code',
+        scope: ALL_SCOPES.join(' '),
+        access_type: 'offline',
+        prompt: 'consent', // Force consent to get refresh_token
+        login_hint: email,
+    });
+    return `https://accounts.google.com/o/oauth2/v2/auth?${params.toString()}`;
+}
+// ─── Go ────────────────────────────────────────────────────
+start().catch((err) => {
+    const msg = err instanceof Error ? err.message : String(err);
+    process.stderr.write(`auth-server error: ${msg}\n`);
+    // Try to write error to pending file
+    writePending({
+        status: 'error',
+        message: msg,
+        completedAt: new Date().toISOString(),
+    }).finally(() => process.exit(1));
+});
+//# sourceMappingURL=auth-server.js.map

package/dist/auth-server.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"auth-server.js","sourceRoot":"","sources":["../src/auth-server.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAU,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAG/B,8DAA8D;AAE9D,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,iBAAiB;AACnD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;AAChD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;AACjD,MAAM,gBAAgB,GAAG,IAAI,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;AAC/D,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;AAEzD,uCAAuC;AACvC,MAAM,UAAU,GAAG;IACjB,0BAA0B;IAC1B,uCAAuC;IACvC,0CAA0C;IAC1C,uCAAuC;CACxC,CAAC;AAEF,8DAA8D;AAE9D,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC9B,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;AAE3D,IAAI,CAAC,KAAK,EAAE,CAAC;IACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,8DAA8D;AAE9D,MAAM,YAAY,GAAG;;;;;;;;;QASb,CAAC;AAET,MAAM,WAAW,GAAG;;;;;;4DAMwC,KAAK;;;QAGzD,CAAC;AAET,MAAM,YAAY,GAAG,CAAC,OAAiB,EAAE,OAAiB,EAAE,EAAE,CAAC;;;;;;yDAMN,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;sBACrD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;oCACJ,KAAK;;;QAGjC,CAAC;AAET,8DAA8D;AAE9D,SAAS,WAAW;IAClB,OAAO,IAAI,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;AAC1D,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAA6B;IACvD,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,SAAS,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACzE,CAAC;AAED,KAAK,UAAU,eAAe;IAC5B,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;IACtD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,KAAK,KAAK,0BAA0B;QAAE,OAAO,OAAO,CAAC;IACzD,IAAI,KAAK,KAAK,uCAAuC;QAAE,OAAO,OAAO,CAAC;IACtE,IAAI,KAAK,KAAK,0CAA0C;QAAE,OAAO,UAAU,CAAC;IAC5E,IAAI,KAAK,KAAK,uCAAuC;QAAE,OAAO,OAAO,CAAC;IACtE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8DAA8D;AAE9D,KAAK,UAAU,oBAAoB,CACjC,IAAY,EACZ,WAAmB,EACnB,QAAgB,EAChB,YAAoB;IAQpB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,IAAI;QACJ,SAAS,EAAE,QAAQ;QACnB,aAAa,EAAE,YAAY;QAC3B,YAAY,EAAE,WAAW;QACzB,UAAU,EAAE,oBAAoB;KACjC,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,qCAAqC,EAAE;QAC7D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;KACxB,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,OAAO,GAAG,CAAC,IAAI,EAMb,CAAC;AACL,CAAC;AAED,8DAA8D;AAE9D,KAAK,UAAU,kBAAkB,CAC/B,YAAoB,EACpB,aAAuB;IAEvB,sCAAsC;IACtC,IAAI,KAAoE,CAAC;IACzE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QACnD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACvC,CAAC;IAED,MAAM,eAAe,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IACnD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,yBAAyB;IACzB,IAAI,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAC/B,CAAC,CAA0B,EAAE,EAAE,CAC5B,CAAC,CAAC,KAAgB,CAAC,WAAW,EAAE,KAAK,eAAe,CACxD,CAAC;IAEF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,GAAG;YACR,KAAK,EAAE,eAAe;YACtB,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,GAAG;SACb,CAAC;QACF,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAC;IAEjE,uBAAuB;IACvB,MAAM,CAAC,QAAQ,GAAG;QAChB,YAAY;QACZ,MAAM,EAAE,aAAa;QACrB,SAAS,EAAE,GAAG;KACf,CAAC;IAEF,yDAAyD;IACzD,iEAAiE;IACjE,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAsC,CAAC;QAClE,IAAI,QAAQ,EAAE,MAAM,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAChF,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;IAExB,eAAe;IACf,MAAM,OAAO,GAAG,aAAa,GAAG,MAAM,CAAC;IACvC,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAClE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACpD,MAAM,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;AACvC,CAAC;AAED,8DAA8D;AAE9D,KAAK,UAAU,KAAK;IAClB,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAC;IAEtC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAE,EAAE;QAC9E,gCAAgC;QAChC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAExD,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YACjC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,gCAAgC;QAChC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,KAAK,EAAE,CAAC;YACV,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;YACpD,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAErB,MAAM,YAAY,CAAC;gBACjB,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,gCAAgC,KAAK,EAAE;gBAChD,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACtC,CAAC,CAAC;YAEH,QAAQ,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QAED,6BAA6B;QAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,oBAAqB,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,WAAW,CAAC;YAE1F,0BAA0B;YAC1B,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAC9C,IAAI,EACJ,WAAW,EACX,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,YAAY,CACnB,CAAC;YAEF,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,CAAC;gBACjC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC;;;;mDAImC,KAAK;yBAC/B,CAAC,CAAC;gBAEnB,MAAM,YAAY,CAAC;oBACjB,MAAM,EAAE,OAAO;oBACf,OAAO,EAAE,0FAA0F;oBACnG,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACtC,CAAC,CAAC;gBAEH,QAAQ,EAAE,CAAC;gBACX,OAAO;YACT,CAAC;YAED,uBAAuB;YACvB,MAAM,kBAAkB,GAAG,aAAa,CAAC,KAAK,IAAI,EAAE,CAAC;YACrD,MAAM,aAAa,GAAG,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAEpE,2BAA2B;YAC3B,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAE3E,uBAAuB;YACvB,MAAM,kBAAkB,CAAC,aAAa,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;YAErE,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,eAAe;gBACf,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBAEtB,MAAM,YAAY,CAAC;oBACjB,MAAM,EAAE,UAAU;oBAClB,KAAK;oBACL,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC;oBACzC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACtC,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,wBAAwB;gBACxB,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBACvD,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBAEvD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;gBAElD,MAAM,YAAY,CAAC;oBACjB,MAAM,EAAE,SAAS;oBACjB,KAAK;oBACL,aAAa,EAAE,YAAY;oBAC3B,aAAa,EAAE,YAAY;oBAC3B,OAAO,EAAE,yCAAyC;oBAClD,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACtC,CAAC,CAAC;YACL,CAAC;YAED,QAAQ,EAAE,CAAC;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;YAEzB,MAAM,YAAY,CAAC;gBACjB,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,GAAG;gBACZ,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACtC,CAAC,CAAC;YAEH,QAAQ,EAAE,CAAC;QACb,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,+CAA+C;IAC/C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,MAAM,WAAW,GAAG,oBAAoB,IAAI,WAAW,CAAC;IAExD,yBAAyB;IACzB,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAE1D,6BAA6B;IAC7B,MAAM,YAAY,CAAC;QACjB,MAAM,EAAE,SAAS;QACjB,IAAI;QACJ,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO;QACP,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE;KAC3D,CAAC,CAAC;IAEH,oDAAoD;IACpD,4CAA4C;IAE5C,cAAc;IACd,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,YAAY,CAAC;YACX,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,sCAAsC,UAAU,GAAG,IAAI,GAAG,EAAE,UAAU;YAC/E,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACd,QAAQ,EAAE,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,UAAU,CAAC,CAAC;IAEf,SAAS,QAAQ;QACf,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;YAChB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,qCAAqC;QACrC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;IAClD,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB,EAAE,WAAmB;IACzD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,SAAS,EAAE,QAAQ;QACnB,YAAY,EAAE,WAAW;QACzB,aAAa,EAAE,MAAM;QACrB,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;QAC3B,WAAW,EAAE,SAAS;QACtB,MAAM,EAAE,SAAS,EAAE,qCAAqC;QACxD,UAAU,EAAE,KAAK;KAClB,CAAC,CAAC;IACH,OAAO,gDAAgD,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC7E,CAAC;AAED,8DAA8D;AAE9D,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACpB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;IAEpD,qCAAqC;IACrC,YAAY,CAAC;QACX,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,GAAG;QACZ,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC,CAAC,CAAC"}

package/dist/auth-store.d.ts ADDED Viewed

@@ -0,0 +1,81 @@
+/**
+ * Auth store — manages the ~/.go-easy/ token store.
+ *
+ * Responsibilities:
+ *   - Read/write accounts.json (v1 schema, atomic writes)
+ *   - File permissions (0o700 dir, 0o600 files)
+ *   - Provide typed account/token resolution
+ *
+ * Does NOT handle OAuth flows — that's auth-flow.ts (Phase 2).
+ */
+export type GoogleService = 'gmail' | 'drive' | 'calendar' | 'tasks';
+export interface OAuthToken {
+    refreshToken: string;
+    scopes: string[];
+    grantedAt: string;
+}
+export interface GoEasyAccount {
+    email: string;
+    tokens: {
+        combined?: OAuthToken;
+        gmail?: OAuthToken;
+        drive?: OAuthToken;
+        calendar?: OAuthToken;
+        tasks?: OAuthToken;
+    };
+    addedAt: string;
+}
+export interface AccountStore {
+    version: 1;
+    accounts: GoEasyAccount[];
+}
+export interface OAuthCredentials {
+    clientId: string;
+    clientSecret: string;
+}
+/** Get the go-easy config directory path */
+export declare function getConfigDir(): string;
+/** Get the pending auth directory path */
+export declare function getPendingDir(): string;
+/**
+ * Read the account store. Returns null if it doesn't exist.
+ */
+export declare function readAccountStore(): Promise<AccountStore | null>;
+/**
+ * Write the account store atomically.
+ * Creates ~/.go-easy/ if needed with correct permissions.
+ */
+export declare function writeAccountStore(store: AccountStore): Promise<void>;
+/**
+ * Read OAuth credentials (clientId + clientSecret).
+ * Returns null if credentials.json doesn't exist.
+ */
+export declare function readCredentials(): Promise<OAuthCredentials | null>;
+/**
+ * Write OAuth credentials.
+ */
+export declare function writeCredentials(creds: OAuthCredentials): Promise<void>;
+/**
+ * Find an account in the store by email (case-insensitive).
+ * If no email given, returns the first account.
+ */
+export declare function findAccount(store: AccountStore, email?: string): GoEasyAccount | undefined;
+/**
+ * Resolve the token for a specific service from an account.
+ *
+ * Priority: combined (if it has the scope) > per-service token.
+ */
+export declare function resolveToken(account: GoEasyAccount, service: GoogleService): {
+    refreshToken: string;
+    scopes: string[];
+} | null;
+/**
+ * Upsert an account in the store. Merges tokens if account exists.
+ */
+export declare function upsertAccount(store: AccountStore, account: GoEasyAccount): AccountStore;
+/**
+ * Remove an account from the store by email.
+ * Returns true if found and removed.
+ */
+export declare function removeAccount(store: AccountStore, email: string): boolean;
+//# sourceMappingURL=auth-store.d.ts.map

package/dist/auth-store.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"auth-store.d.ts","sourceRoot":"","sources":["../src/auth-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,GAAG,OAAO,CAAC;AAErE,MAAM,WAAW,UAAU;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE;QACN,QAAQ,CAAC,EAAE,UAAU,CAAC;QACtB,KAAK,CAAC,EAAE,UAAU,CAAC;QACnB,KAAK,CAAC,EAAE,UAAU,CAAC;QACnB,QAAQ,CAAC,EAAE,UAAU,CAAC;QACtB,KAAK,CAAC,EAAE,UAAU,CAAC;KACpB,CAAC;IACF,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,CAAC,CAAC;IACX,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB;AAWD,4CAA4C;AAC5C,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,0CAA0C;AAC1C,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED;;GAEG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAYrE;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAM1E;AAED;;;GAGG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAUxE;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAM7E;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,YAAY,EACnB,KAAK,CAAC,EAAE,MAAM,GACb,aAAa,GAAG,SAAS,CAM3B;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,aAAa,GACrB;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,IAAI,CAyBnD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,aAAa,GACrB,YAAY,CAed;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAQzE"}

package/dist/auth-store.js ADDED Viewed

@@ -0,0 +1,185 @@
+/**
+ * Auth store — manages the ~/.go-easy/ token store.
+ *
+ * Responsibilities:
+ *   - Read/write accounts.json (v1 schema, atomic writes)
+ *   - File permissions (0o700 dir, 0o600 files)
+ *   - Provide typed account/token resolution
+ *
+ * Does NOT handle OAuth flows — that's auth-flow.ts (Phase 2).
+ */
+import { readFile, writeFile, rename, mkdir, chmod } from 'node:fs/promises';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { SCOPES } from './scopes.js';
+// ─── Paths ─────────────────────────────────────────────────
+const GO_EASY_DIR = join(homedir(), '.go-easy');
+const ACCOUNTS_FILE = join(GO_EASY_DIR, 'accounts.json');
+const CREDENTIALS_FILE = join(GO_EASY_DIR, 'credentials.json');
+const PENDING_DIR = join(GO_EASY_DIR, 'pending');
+// ─── Public API ────────────────────────────────────────────
+/** Get the go-easy config directory path */
+export function getConfigDir() {
+    return GO_EASY_DIR;
+}
+/** Get the pending auth directory path */
+export function getPendingDir() {
+    return PENDING_DIR;
+}
+/**
+ * Read the account store. Returns null if it doesn't exist.
+ */
+export async function readAccountStore() {
+    try {
+        const raw = await readFile(ACCOUNTS_FILE, 'utf-8');
+        const parsed = JSON.parse(raw);
+        if (!parsed || parsed.version !== 1 || !Array.isArray(parsed.accounts)) {
+            return null;
+        }
+        return parsed;
+    }
+    catch (err) {
+        if (isEnoent(err))
+            return null;
+        throw err;
+    }
+}
+/**
+ * Write the account store atomically.
+ * Creates ~/.go-easy/ if needed with correct permissions.
+ */
+export async function writeAccountStore(store) {
+    await ensureConfigDir();
+    const tmpFile = ACCOUNTS_FILE + '.tmp';
+    await writeFile(tmpFile, JSON.stringify(store, null, 2), 'utf-8');
+    await safeChmod(tmpFile, 0o600);
+    await rename(tmpFile, ACCOUNTS_FILE);
+}
+/**
+ * Read OAuth credentials (clientId + clientSecret).
+ * Returns null if credentials.json doesn't exist.
+ */
+export async function readCredentials() {
+    try {
+        const raw = await readFile(CREDENTIALS_FILE, 'utf-8');
+        const parsed = JSON.parse(raw);
+        if (!parsed?.clientId || !parsed?.clientSecret)
+            return null;
+        return { clientId: parsed.clientId, clientSecret: parsed.clientSecret };
+    }
+    catch (err) {
+        if (isEnoent(err))
+            return null;
+        throw err;
+    }
+}
+/**
+ * Write OAuth credentials.
+ */
+export async function writeCredentials(creds) {
+    await ensureConfigDir();
+    const tmpFile = CREDENTIALS_FILE + '.tmp';
+    await writeFile(tmpFile, JSON.stringify(creds, null, 2), 'utf-8');
+    await safeChmod(tmpFile, 0o600);
+    await rename(tmpFile, CREDENTIALS_FILE);
+}
+/**
+ * Find an account in the store by email (case-insensitive).
+ * If no email given, returns the first account.
+ */
+export function findAccount(store, email) {
+    if (!email)
+        return store.accounts[0];
+    const normalized = email.trim().toLowerCase();
+    return store.accounts.find((a) => a.email.toLowerCase() === normalized);
+}
+/**
+ * Resolve the token for a specific service from an account.
+ *
+ * Priority: combined (if it has the scope) > per-service token.
+ */
+export function resolveToken(account, service) {
+    const neededScope = SCOPES[service];
+    // 1. Try combined token
+    if (account.tokens.combined) {
+        if (account.tokens.combined.scopes.includes(neededScope)) {
+            return {
+                refreshToken: account.tokens.combined.refreshToken,
+                scopes: account.tokens.combined.scopes,
+            };
+        }
+        // Combined exists but lacks this scope — don't fall through to per-service
+        // (per-service tokens are deleted after upgrade per D1)
+    }
+    // 2. Try per-service token
+    const serviceToken = account.tokens[service];
+    if (serviceToken) {
+        return {
+            refreshToken: serviceToken.refreshToken,
+            scopes: serviceToken.scopes,
+        };
+    }
+    return null;
+}
+/**
+ * Upsert an account in the store. Merges tokens if account exists.
+ */
+export function upsertAccount(store, account) {
+    const idx = store.accounts.findIndex((a) => a.email.toLowerCase() === account.email.toLowerCase());
+    if (idx >= 0) {
+        // Merge tokens
+        const existing = store.accounts[idx];
+        store.accounts[idx] = {
+            ...existing,
+            tokens: { ...existing.tokens, ...account.tokens },
+        };
+    }
+    else {
+        store.accounts.push(account);
+    }
+    return store;
+}
+/**
+ * Remove an account from the store by email.
+ * Returns true if found and removed.
+ */
+export function removeAccount(store, email) {
+    const normalized = email.trim().toLowerCase();
+    const idx = store.accounts.findIndex((a) => a.email.toLowerCase() === normalized);
+    if (idx < 0)
+        return false;
+    store.accounts.splice(idx, 1);
+    return true;
+}
+// ─── Internal helpers ──────────────────────────────────────
+async function ensureConfigDir() {
+    try {
+        await mkdir(GO_EASY_DIR, { recursive: true });
+        await safeChmod(GO_EASY_DIR, 0o700);
+    }
+    catch {
+        // Directory already exists
+    }
+    try {
+        await mkdir(PENDING_DIR, { recursive: true });
+    }
+    catch {
+        // Already exists
+    }
+}
+function isEnoent(err) {
+    return (typeof err === 'object' &&
+        err !== null &&
+        'code' in err &&
+        err.code === 'ENOENT');
+}
+/** chmod that doesn't throw on Windows (NTFS ACLs ≠ POSIX) */
+async function safeChmod(path, mode) {
+    try {
+        await chmod(path, mode);
+    }
+    catch {
+        // Windows may not support POSIX chmod — best-effort
+    }
+}
+//# sourceMappingURL=auth-store.js.map

package/dist/auth-store.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"auth-store.js","sourceRoot":"","sources":["../src/auth-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAkCrC,8DAA8D;AAE9D,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;AAChD,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;AACzD,MAAM,gBAAgB,GAAG,IAAI,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;AAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;AAEjD,8DAA8D;AAE9D,4CAA4C;AAC5C,MAAM,UAAU,YAAY;IAC1B,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,aAAa;IAC3B,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,MAAsB,CAAC;IAChC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/B,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAmB;IACzD,MAAM,eAAe,EAAE,CAAC;IACxB,MAAM,OAAO,GAAG,aAAa,GAAG,MAAM,CAAC;IACvC,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAClE,MAAM,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChC,MAAM,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,EAAE,QAAQ,IAAI,CAAC,MAAM,EAAE,YAAY;YAAE,OAAO,IAAI,CAAC;QAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;IAC1E,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/B,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAuB;IAC5D,MAAM,eAAe,EAAE,CAAC;IACxB,MAAM,OAAO,GAAG,gBAAgB,GAAG,MAAM,CAAC;IAC1C,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAClE,MAAM,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChC,MAAM,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,KAAmB,EACnB,KAAc;IAEd,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,CACxB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,UAAU,CAC5C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAsB,EACtB,OAAsB;IAEtB,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAEpC,wBAAwB;IACxB,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACzD,OAAO;gBACL,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY;gBAClD,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM;aACvC,CAAC;QACJ,CAAC;QACD,2EAA2E;QAC3E,wDAAwD;IAC1D,CAAC;IAED,2BAA2B;IAC3B,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO;YACL,YAAY,EAAE,YAAY,CAAC,YAAY;YACvC,MAAM,EAAE,YAAY,CAAC,MAAM;SAC5B,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,KAAmB,EACnB,OAAsB;IAEtB,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAC7D,CAAC;IACF,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QACb,eAAe;QACf,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACrC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG;YACpB,GAAG,QAAQ;YACX,MAAM,EAAE,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE;SAClD,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAmB,EAAE,KAAa;IAC9D,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,UAAU,CAC5C,CAAC;IACF,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1B,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8DAA8D;AAE9D,KAAK,UAAU,eAAe;IAC5B,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;IAC7B,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,GAAY;IAC5B,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACZ,MAAM,IAAI,GAAG;QACZ,GAAwB,CAAC,IAAI,KAAK,QAAQ,CAC5C,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,IAAY;IACjD,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,oDAAoD;IACtD,CAAC;AACH,CAAC"}

package/dist/auth.d.ts ADDED Viewed

@@ -0,0 +1,47 @@
+/**
+ * Auth module — OAuth2 client factory with multi-account support.
+ *
+ * Reads tokens from the unified store at ~/.go-easy/accounts.json.
+ * Falls back to legacy CLI stores (~/.gmcli, ~/.gdcli, ~/.gccli) via migration.
+ *
+ * Token resolution per account:
+ *   1. combined token (if it has the needed scope) → use it
+ *   2. per-service token (legacy migration) → use it
+ *   3. neither → AUTH_MISSING_SCOPE with fix command
+ */
+import { OAuth2Client } from 'google-auth-library';
+import type { GoogleService } from './auth-store.js';
+export type { GoogleService } from './auth-store.js';
+/**
+ * Get an OAuth2Client for a specific service and account.
+ *
+ * @param service - Which Google service (determines scope check)
+ * @param account - Email address (defaults to first account in the store)
+ * @returns Configured OAuth2Client with refresh token set
+ * @throws AuthError with specific code and fix command
+ *
+ * @example
+ * ```ts
+ * import { getAuth } from '@marcfargas/go-easy/auth';
+ * const auth = await getAuth('gmail', 'marc@blegal.eu');
+ * ```
+ */
+export declare function getAuth(service: GoogleService, account?: string): Promise<OAuth2Client>;
+/**
+ * List available accounts (emails) for a service.
+ * Only returns accounts that have a token for the given service.
+ */
+export declare function listAccounts(service: GoogleService): Promise<string[]>;
+/**
+ * List all accounts regardless of service.
+ */
+export declare function listAllAccounts(): Promise<Array<{
+    email: string;
+    scopes: string[];
+    source: string;
+}>>;
+/**
+ * Clear the client cache. Useful for tests or token rotation.
+ */
+export declare function clearAuthCache(): void;
+//# sourceMappingURL=auth.d.ts.map