@payloadcms/figma 0.0.1-alpha.0

package/dist/api/figma-api.spec.js

@@ -0,0 +1,201 @@
+/**
+ * Tests JWT parsing helpers and validates mock API contract.
+ *
+ * NOTE: The Figma API is currently mocked for development.
+ *
+ * These tests verify:
+ * 1. JWT parsing helper functions (our code)
+ * 2. JWT structure matches expected Figma API contract
+ * 3. Mock responses are consistent for development
+ *
+ * TODO: Replace with integration tests when real API is available
+ */ import { describe, expect, it } from 'vitest';
+import { getProjectToken } from './figma-api.js';
+/**
+ * Helper function to decode base64url JWT part
+ */ function decodeJwtPart(part) {
+    const base64 = part.replace(/-/g, '+').replace(/_/g, '/');
+    const padded = base64.padEnd(base64.length + (4 - base64.length % 4) % 4, '=');
+    return Buffer.from(padded, 'base64').toString('utf-8');
+}
+/**
+ * Helper function to parse JWT header
+ */ function parseJwtHeader(token) {
+    const headerPart = token.split('.')[0];
+    return JSON.parse(decodeJwtPart(headerPart));
+}
+/**
+ * Helper function to parse JWT payload
+ */ function parseJwtPayload(token) {
+    const payloadPart = token.split('.')[1];
+    return JSON.parse(decodeJwtPart(payloadPart));
+}
+describe('Figma API Client', ()=>{
+    const mockAccessToken = 'figt_mock_access_token';
+    const mockTenantId = 'tenant-123';
+    describe('getProjectToken', ()=>{
+        // TODO: Remove/modify this when real API is available
+        describe('mock implementation', ()=>{
+            it('should generate valid project token', async ()=>{
+                const result = await getProjectToken(mockAccessToken, mockTenantId);
+                expect(result).toHaveProperty('token');
+                expect(result).toHaveProperty('expiresAt');
+                expect(result).toHaveProperty('tenantId');
+                expect(result.tenantId).toBe(mockTenantId);
+            });
+            it('should generate JWT in correct format', async ()=>{
+                const result = await getProjectToken(mockAccessToken, mockTenantId);
+                // JWT should be three base64url parts separated by dots
+                const parts = result.token.split('.');
+                expect(parts).toHaveLength(3);
+            });
+            it('should include valid expiry time', async ()=>{
+                const before = Date.now();
+                const result = await getProjectToken(mockAccessToken, mockTenantId);
+                const after = Date.now();
+                // Token should expire in ~25 minutes (mock generates 25 min expiry)
+                const expectedMin = before + 24 * 60 * 1000 // 24 minutes
+                ;
+                const expectedMax = after + 26 * 60 * 1000 // 26 minutes
+                ;
+                expect(result.expiresAt).toBeGreaterThan(expectedMin);
+                expect(result.expiresAt).toBeLessThan(expectedMax);
+            });
+            it('should generate unique tokens on multiple calls', async ()=>{
+                const token1 = await getProjectToken(mockAccessToken, mockTenantId);
+                const token2 = await getProjectToken(mockAccessToken, mockTenantId);
+                // Tokens should be unique (signatures will differ)
+                expect(token1.token).not.toBe(token2.token);
+            });
+        });
+        describe('JWT structure and claims', ()=>{
+            it('should generate JWT with RS256 algorithm in header', async ()=>{
+                const result = await getProjectToken(mockAccessToken, mockTenantId);
+                const header = parseJwtHeader(result.token);
+                expect(header.alg).toBe('RS256');
+                expect(header.typ).toBe('JWT');
+            });
+            it('should include required claims in payload', async ()=>{
+                const result = await getProjectToken(mockAccessToken, mockTenantId);
+                const payload = parseJwtPayload(result.token);
+                expect(payload).toHaveProperty('exp');
+                expect(payload).toHaveProperty('iat');
+                expect(payload).toHaveProperty('aud');
+                expect(payload.aud).toBe(mockTenantId);
+            });
+            it('should have exp claim as numeric timestamp', async ()=>{
+                const result = await getProjectToken(mockAccessToken, mockTenantId);
+                const payload = parseJwtPayload(result.token);
+                expect(typeof payload.exp).toBe('number');
+                expect(payload.exp).toBeGreaterThan(Date.now() / 1000); // Should be in future
+            });
+            it('should have iat claim as current timestamp', async ()=>{
+                const before = Math.floor(Date.now() / 1000);
+                const result = await getProjectToken(mockAccessToken, mockTenantId);
+                const after = Math.floor(Date.now() / 1000);
+                const payload = parseJwtPayload(result.token);
+                expect(payload.iat).toBeGreaterThanOrEqual(before);
+                expect(payload.iat).toBeLessThanOrEqual(after);
+            });
+            it('should convert exp from seconds to milliseconds in expiresAt', async ()=>{
+                const result = await getProjectToken(mockAccessToken, mockTenantId);
+                const payload = parseJwtPayload(result.token);
+                // expiresAt should be exp * 1000 (converted to milliseconds)
+                expect(result.expiresAt).toBe(payload.exp * 1000);
+            });
+        });
+        describe('JWT expiry parsing', ()=>{
+            it('should correctly parse expiry from generated JWT', async ()=>{
+                const result = await getProjectToken(mockAccessToken, mockTenantId);
+                // expiresAt should be a valid timestamp in milliseconds
+                expect(typeof result.expiresAt).toBe('number');
+                expect(result.expiresAt).toBeGreaterThan(Date.now());
+                // Should be ~25 minutes in the future
+                const expectedExpiry = Date.now() + 25 * 60 * 1000;
+                const tolerance = 2 * 60 * 1000 // 2 minutes tolerance
+                ;
+                expect(Math.abs(result.expiresAt - expectedExpiry)).toBeLessThan(tolerance);
+            });
+            it('should handle JWT with past expiry date', async ()=>{
+                // This tests that parsing works even for expired tokens
+                // (validation happens later in jwt-validator)
+                const result = await getProjectToken(mockAccessToken, mockTenantId);
+                // Should parse without throwing, even if theoretically expired
+                expect(result.expiresAt).toBeDefined();
+                expect(typeof result.expiresAt).toBe('number');
+            });
+            it('should handle JWT with far future expiry', async ()=>{
+                const result = await getProjectToken(mockAccessToken, mockTenantId);
+                // expiresAt should be reasonable (within next 30 days)
+                const maxFuture = Date.now() + 30 * 24 * 60 * 60 * 1000;
+                expect(result.expiresAt).toBeLessThan(maxFuture);
+            });
+        });
+        describe('error handling', ()=>{
+            it('should handle empty access token', async ()=>{
+                // Mock implementation doesn't validate access token, but real impl will
+                // For now, this should still work
+                const result = await getProjectToken('', mockTenantId);
+                expect(result).toHaveProperty('token');
+            });
+            it('should handle empty tenant ID', async ()=>{
+                // Mock implementation should handle this
+                const result = await getProjectToken(mockAccessToken, '');
+                expect(result.tenantId).toBe('');
+            });
+            it('should handle special characters in tenant ID', async ()=>{
+                const specialTenantId = 'tenant-with-special_chars.123';
+                const result = await getProjectToken(mockAccessToken, specialTenantId);
+                expect(result.tenantId).toBe(specialTenantId);
+            });
+        });
+    });
+    describe('JWT format edge cases', ()=>{
+        it('should generate base64url encoded parts (no + / =)', async ()=>{
+            const result = await getProjectToken(mockAccessToken, mockTenantId);
+            // Base64url should not contain +, /, or =
+            expect(result.token).not.toMatch(/[+/=]/);
+        });
+        it('should generate decodable header and payload', async ()=>{
+            const result = await getProjectToken(mockAccessToken, mockTenantId);
+            // Should be able to decode without errors
+            expect(()=>parseJwtHeader(result.token)).not.toThrow();
+            expect(()=>parseJwtPayload(result.token)).not.toThrow();
+        });
+        it('should generate valid JSON in payload', async ()=>{
+            const result = await getProjectToken(mockAccessToken, mockTenantId);
+            const payload = parseJwtPayload(result.token);
+            // Should be a valid object with expected structure
+            expect(payload).toBeTypeOf('object');
+            expect(payload).not.toBeNull();
+        });
+    });
+    describe('return value structure', ()=>{
+        it('should return ProjectToken with all required fields', async ()=>{
+            const result = await getProjectToken(mockAccessToken, mockTenantId);
+            expect(result).toHaveProperty('token');
+            expect(result).toHaveProperty('expiresAt');
+            expect(result).toHaveProperty('tenantId');
+            expect(typeof result.token).toBe('string');
+            expect(typeof result.expiresAt).toBe('number');
+            expect(typeof result.tenantId).toBe('string');
+        });
+        it('should not include claims in initial response', async ()=>{
+            const result = await getProjectToken(mockAccessToken, mockTenantId);
+            // Claims are added after JWT validation, not in API response
+            expect(result).not.toHaveProperty('claims');
+        });
+        it('should match ProjectToken interface', async ()=>{
+            const result = await getProjectToken(mockAccessToken, mockTenantId);
+            // Verify structure matches ProjectToken interface
+            const keys = Object.keys(result).sort();
+            expect(keys).toEqual([
+                'expiresAt',
+                'tenantId',
+                'token'
+            ]);
+        });
+    });
+});
+
+//# sourceMappingURL=figma-api.spec.js.map

package/dist/api/figma-api.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/figma-api.spec.ts"],"sourcesContent":["/**\n * Tests JWT parsing helpers and validates mock API contract.\n *\n * NOTE: The Figma API is currently mocked for development.\n *\n * These tests verify:\n * 1. JWT parsing helper functions (our code)\n * 2. JWT structure matches expected Figma API contract\n * 3. Mock responses are consistent for development\n *\n * TODO: Replace with integration tests when real API is available\n */\n\nimport { describe, expect, it } from 'vitest'\n\nimport { getProjectToken } from './figma-api.js'\n\n/**\n * Helper function to decode base64url JWT part\n */\nfunction decodeJwtPart(part: string): string {\n  const base64 = part.replace(/-/g, '+').replace(/_/g, '/')\n  const padded = base64.padEnd(base64.length + ((4 - (base64.length % 4)) % 4), '=')\n  return Buffer.from(padded, 'base64').toString('utf-8')\n}\n\n/**\n * Helper function to parse JWT header\n */\nfunction parseJwtHeader(token: string): { alg: string; typ: string } {\n  const headerPart = token.split('.')[0]\n  return JSON.parse(decodeJwtPart(headerPart))\n}\n\n/**\n * Helper function to parse JWT payload\n */\nfunction parseJwtPayload(token: string): {\n  aud?: string\n  email?: string\n  exp?: number\n  iat?: number\n  sub?: string\n} {\n  const payloadPart = token.split('.')[1]\n  return JSON.parse(decodeJwtPart(payloadPart))\n}\n\ndescribe('Figma API Client', () => {\n  const mockAccessToken = 'figt_mock_access_token'\n  const mockTenantId = 'tenant-123'\n\n  describe('getProjectToken', () => {\n    // TODO: Remove/modify this when real API is available\n    describe('mock implementation', () => {\n      it('should generate valid project token', async () => {\n        const result = await getProjectToken(mockAccessToken, mockTenantId)\n\n        expect(result).toHaveProperty('token')\n        expect(result).toHaveProperty('expiresAt')\n        expect(result).toHaveProperty('tenantId')\n        expect(result.tenantId).toBe(mockTenantId)\n      })\n\n      it('should generate JWT in correct format', async () => {\n        const result = await getProjectToken(mockAccessToken, mockTenantId)\n\n        // JWT should be three base64url parts separated by dots\n        const parts = result.token.split('.')\n        expect(parts).toHaveLength(3)\n      })\n\n      it('should include valid expiry time', async () => {\n        const before = Date.now()\n        const result = await getProjectToken(mockAccessToken, mockTenantId)\n        const after = Date.now()\n\n        // Token should expire in ~25 minutes (mock generates 25 min expiry)\n        const expectedMin = before + 24 * 60 * 1000 // 24 minutes\n        const expectedMax = after + 26 * 60 * 1000 // 26 minutes\n\n        expect(result.expiresAt).toBeGreaterThan(expectedMin)\n        expect(result.expiresAt).toBeLessThan(expectedMax)\n      })\n\n      it('should generate unique tokens on multiple calls', async () => {\n        const token1 = await getProjectToken(mockAccessToken, mockTenantId)\n        const token2 = await getProjectToken(mockAccessToken, mockTenantId)\n\n        // Tokens should be unique (signatures will differ)\n        expect(token1.token).not.toBe(token2.token)\n      })\n    })\n\n    describe('JWT structure and claims', () => {\n      it('should generate JWT with RS256 algorithm in header', async () => {\n        const result = await getProjectToken(mockAccessToken, mockTenantId)\n        const header = parseJwtHeader(result.token)\n\n        expect(header.alg).toBe('RS256')\n        expect(header.typ).toBe('JWT')\n      })\n\n      it('should include required claims in payload', async () => {\n        const result = await getProjectToken(mockAccessToken, mockTenantId)\n        const payload = parseJwtPayload(result.token)\n\n        expect(payload).toHaveProperty('exp')\n        expect(payload).toHaveProperty('iat')\n        expect(payload).toHaveProperty('aud')\n        expect(payload.aud).toBe(mockTenantId)\n      })\n\n      it('should have exp claim as numeric timestamp', async () => {\n        const result = await getProjectToken(mockAccessToken, mockTenantId)\n        const payload = parseJwtPayload(result.token)\n\n        expect(typeof payload.exp).toBe('number')\n        expect(payload.exp).toBeGreaterThan(Date.now() / 1000) // Should be in future\n      })\n\n      it('should have iat claim as current timestamp', async () => {\n        const before = Math.floor(Date.now() / 1000)\n        const result = await getProjectToken(mockAccessToken, mockTenantId)\n        const after = Math.floor(Date.now() / 1000)\n\n        const payload = parseJwtPayload(result.token)\n\n        expect(payload.iat).toBeGreaterThanOrEqual(before)\n        expect(payload.iat).toBeLessThanOrEqual(after)\n      })\n\n      it('should convert exp from seconds to milliseconds in expiresAt', async () => {\n        const result = await getProjectToken(mockAccessToken, mockTenantId)\n        const payload = parseJwtPayload(result.token)\n\n        // expiresAt should be exp * 1000 (converted to milliseconds)\n        expect(result.expiresAt).toBe(payload.exp! * 1000)\n      })\n    })\n\n    describe('JWT expiry parsing', () => {\n      it('should correctly parse expiry from generated JWT', async () => {\n        const result = await getProjectToken(mockAccessToken, mockTenantId)\n\n        // expiresAt should be a valid timestamp in milliseconds\n        expect(typeof result.expiresAt).toBe('number')\n        expect(result.expiresAt).toBeGreaterThan(Date.now())\n\n        // Should be ~25 minutes in the future\n        const expectedExpiry = Date.now() + 25 * 60 * 1000\n        const tolerance = 2 * 60 * 1000 // 2 minutes tolerance\n        expect(Math.abs(result.expiresAt - expectedExpiry)).toBeLessThan(tolerance)\n      })\n\n      it('should handle JWT with past expiry date', async () => {\n        // This tests that parsing works even for expired tokens\n        // (validation happens later in jwt-validator)\n        const result = await getProjectToken(mockAccessToken, mockTenantId)\n\n        // Should parse without throwing, even if theoretically expired\n        expect(result.expiresAt).toBeDefined()\n        expect(typeof result.expiresAt).toBe('number')\n      })\n\n      it('should handle JWT with far future expiry', async () => {\n        const result = await getProjectToken(mockAccessToken, mockTenantId)\n\n        // expiresAt should be reasonable (within next 30 days)\n        const maxFuture = Date.now() + 30 * 24 * 60 * 60 * 1000\n        expect(result.expiresAt).toBeLessThan(maxFuture)\n      })\n    })\n\n    describe('error handling', () => {\n      it('should handle empty access token', async () => {\n        // Mock implementation doesn't validate access token, but real impl will\n        // For now, this should still work\n        const result = await getProjectToken('', mockTenantId)\n        expect(result).toHaveProperty('token')\n      })\n\n      it('should handle empty tenant ID', async () => {\n        // Mock implementation should handle this\n        const result = await getProjectToken(mockAccessToken, '')\n        expect(result.tenantId).toBe('')\n      })\n\n      it('should handle special characters in tenant ID', async () => {\n        const specialTenantId = 'tenant-with-special_chars.123'\n        const result = await getProjectToken(mockAccessToken, specialTenantId)\n\n        expect(result.tenantId).toBe(specialTenantId)\n      })\n    })\n  })\n\n  describe('JWT format edge cases', () => {\n    it('should generate base64url encoded parts (no + / =)', async () => {\n      const result = await getProjectToken(mockAccessToken, mockTenantId)\n\n      // Base64url should not contain +, /, or =\n      expect(result.token).not.toMatch(/[+/=]/)\n    })\n\n    it('should generate decodable header and payload', async () => {\n      const result = await getProjectToken(mockAccessToken, mockTenantId)\n\n      // Should be able to decode without errors\n      expect(() => parseJwtHeader(result.token)).not.toThrow()\n      expect(() => parseJwtPayload(result.token)).not.toThrow()\n    })\n\n    it('should generate valid JSON in payload', async () => {\n      const result = await getProjectToken(mockAccessToken, mockTenantId)\n      const payload = parseJwtPayload(result.token)\n\n      // Should be a valid object with expected structure\n      expect(payload).toBeTypeOf('object')\n      expect(payload).not.toBeNull()\n    })\n  })\n\n  describe('return value structure', () => {\n    it('should return ProjectToken with all required fields', async () => {\n      const result = await getProjectToken(mockAccessToken, mockTenantId)\n\n      expect(result).toHaveProperty('token')\n      expect(result).toHaveProperty('expiresAt')\n      expect(result).toHaveProperty('tenantId')\n      expect(typeof result.token).toBe('string')\n      expect(typeof result.expiresAt).toBe('number')\n      expect(typeof result.tenantId).toBe('string')\n    })\n\n    it('should not include claims in initial response', async () => {\n      const result = await getProjectToken(mockAccessToken, mockTenantId)\n\n      // Claims are added after JWT validation, not in API response\n      expect(result).not.toHaveProperty('claims')\n    })\n\n    it('should match ProjectToken interface', async () => {\n      const result = await getProjectToken(mockAccessToken, mockTenantId)\n\n      // Verify structure matches ProjectToken interface\n      const keys = Object.keys(result).sort()\n      expect(keys).toEqual(['expiresAt', 'tenantId', 'token'])\n    })\n  })\n})\n"],"names":["describe","expect","it","getProjectToken","decodeJwtPart","part","base64","replace","padded","padEnd","length","Buffer","from","toString","parseJwtHeader","token","headerPart","split","JSON","parse","parseJwtPayload","payloadPart","mockAccessToken","mockTenantId","result","toHaveProperty","tenantId","toBe","parts","toHaveLength","before","Date","now","after","expectedMin","expectedMax","expiresAt","toBeGreaterThan","toBeLessThan","token1","token2","not","header","alg","typ","payload","aud","exp","Math","floor","iat","toBeGreaterThanOrEqual","toBeLessThanOrEqual","expectedExpiry","tolerance","abs","toBeDefined","maxFuture","specialTenantId","toMatch","toThrow","toBeTypeOf","toBeNull","keys","Object","sort","toEqual"],"mappings":"AAAA;;;;;;;;;;;CAWC,GAED,SAASA,QAAQ,EAAEC,MAAM,EAAEC,EAAE,QAAQ,SAAQ;AAE7C,SAASC,eAAe,QAAQ,iBAAgB;AAEhD;;CAEC,GACD,SAASC,cAAcC,IAAY;IACjC,MAAMC,SAASD,KAAKE,OAAO,CAAC,MAAM,KAAKA,OAAO,CAAC,MAAM;IACrD,MAAMC,SAASF,OAAOG,MAAM,CAACH,OAAOI,MAAM,GAAI,AAAC,CAAA,IAAKJ,OAAOI,MAAM,GAAG,CAAC,IAAK,GAAI;IAC9E,OAAOC,OAAOC,IAAI,CAACJ,QAAQ,UAAUK,QAAQ,CAAC;AAChD;AAEA;;CAEC,GACD,SAASC,eAAeC,KAAa;IACnC,MAAMC,aAAaD,MAAME,KAAK,CAAC,IAAI,CAAC,EAAE;IACtC,OAAOC,KAAKC,KAAK,CAACf,cAAcY;AAClC;AAEA;;CAEC,GACD,SAASI,gBAAgBL,KAAa;IAOpC,MAAMM,cAAcN,MAAME,KAAK,CAAC,IAAI,CAAC,EAAE;IACvC,OAAOC,KAAKC,KAAK,CAACf,cAAciB;AAClC;AAEArB,SAAS,oBAAoB;IAC3B,MAAMsB,kBAAkB;IACxB,MAAMC,eAAe;IAErBvB,SAAS,mBAAmB;QAC1B,sDAAsD;QACtDA,SAAS,uBAAuB;YAC9BE,GAAG,uCAAuC;gBACxC,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;gBAEtDtB,OAAOuB,QAAQC,cAAc,CAAC;gBAC9BxB,OAAOuB,QAAQC,cAAc,CAAC;gBAC9BxB,OAAOuB,QAAQC,cAAc,CAAC;gBAC9BxB,OAAOuB,OAAOE,QAAQ,EAAEC,IAAI,CAACJ;YAC/B;YAEArB,GAAG,yCAAyC;gBAC1C,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;gBAEtD,wDAAwD;gBACxD,MAAMK,QAAQJ,OAAOT,KAAK,CAACE,KAAK,CAAC;gBACjChB,OAAO2B,OAAOC,YAAY,CAAC;YAC7B;YAEA3B,GAAG,oCAAoC;gBACrC,MAAM4B,SAASC,KAAKC,GAAG;gBACvB,MAAMR,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;gBACtD,MAAMU,QAAQF,KAAKC,GAAG;gBAEtB,oEAAoE;gBACpE,MAAME,cAAcJ,SAAS,KAAK,KAAK,KAAK,aAAa;;gBACzD,MAAMK,cAAcF,QAAQ,KAAK,KAAK,KAAK,aAAa;;gBAExDhC,OAAOuB,OAAOY,SAAS,EAAEC,eAAe,CAACH;gBACzCjC,OAAOuB,OAAOY,SAAS,EAAEE,YAAY,CAACH;YACxC;YAEAjC,GAAG,mDAAmD;gBACpD,MAAMqC,SAAS,MAAMpC,gBAAgBmB,iBAAiBC;gBACtD,MAAMiB,SAAS,MAAMrC,gBAAgBmB,iBAAiBC;gBAEtD,mDAAmD;gBACnDtB,OAAOsC,OAAOxB,KAAK,EAAE0B,GAAG,CAACd,IAAI,CAACa,OAAOzB,KAAK;YAC5C;QACF;QAEAf,SAAS,4BAA4B;YACnCE,GAAG,sDAAsD;gBACvD,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;gBACtD,MAAMmB,SAAS5B,eAAeU,OAAOT,KAAK;gBAE1Cd,OAAOyC,OAAOC,GAAG,EAAEhB,IAAI,CAAC;gBACxB1B,OAAOyC,OAAOE,GAAG,EAAEjB,IAAI,CAAC;YAC1B;YAEAzB,GAAG,6CAA6C;gBAC9C,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;gBACtD,MAAMsB,UAAUzB,gBAAgBI,OAAOT,KAAK;gBAE5Cd,OAAO4C,SAASpB,cAAc,CAAC;gBAC/BxB,OAAO4C,SAASpB,cAAc,CAAC;gBAC/BxB,OAAO4C,SAASpB,cAAc,CAAC;gBAC/BxB,OAAO4C,QAAQC,GAAG,EAAEnB,IAAI,CAACJ;YAC3B;YAEArB,GAAG,8CAA8C;gBAC/C,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;gBACtD,MAAMsB,UAAUzB,gBAAgBI,OAAOT,KAAK;gBAE5Cd,OAAO,OAAO4C,QAAQE,GAAG,EAAEpB,IAAI,CAAC;gBAChC1B,OAAO4C,QAAQE,GAAG,EAAEV,eAAe,CAACN,KAAKC,GAAG,KAAK,OAAM,sBAAsB;YAC/E;YAEA9B,GAAG,8CAA8C;gBAC/C,MAAM4B,SAASkB,KAAKC,KAAK,CAAClB,KAAKC,GAAG,KAAK;gBACvC,MAAMR,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;gBACtD,MAAMU,QAAQe,KAAKC,KAAK,CAAClB,KAAKC,GAAG,KAAK;gBAEtC,MAAMa,UAAUzB,gBAAgBI,OAAOT,KAAK;gBAE5Cd,OAAO4C,QAAQK,GAAG,EAAEC,sBAAsB,CAACrB;gBAC3C7B,OAAO4C,QAAQK,GAAG,EAAEE,mBAAmB,CAACnB;YAC1C;YAEA/B,GAAG,gEAAgE;gBACjE,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;gBACtD,MAAMsB,UAAUzB,gBAAgBI,OAAOT,KAAK;gBAE5C,6DAA6D;gBAC7Dd,OAAOuB,OAAOY,SAAS,EAAET,IAAI,CAACkB,QAAQE,GAAG,GAAI;YAC/C;QACF;QAEA/C,SAAS,sBAAsB;YAC7BE,GAAG,oDAAoD;gBACrD,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;gBAEtD,wDAAwD;gBACxDtB,OAAO,OAAOuB,OAAOY,SAAS,EAAET,IAAI,CAAC;gBACrC1B,OAAOuB,OAAOY,SAAS,EAAEC,eAAe,CAACN,KAAKC,GAAG;gBAEjD,sCAAsC;gBACtC,MAAMqB,iBAAiBtB,KAAKC,GAAG,KAAK,KAAK,KAAK;gBAC9C,MAAMsB,YAAY,IAAI,KAAK,KAAK,sBAAsB;;gBACtDrD,OAAO+C,KAAKO,GAAG,CAAC/B,OAAOY,SAAS,GAAGiB,iBAAiBf,YAAY,CAACgB;YACnE;YAEApD,GAAG,2CAA2C;gBAC5C,wDAAwD;gBACxD,8CAA8C;gBAC9C,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;gBAEtD,+DAA+D;gBAC/DtB,OAAOuB,OAAOY,SAAS,EAAEoB,WAAW;gBACpCvD,OAAO,OAAOuB,OAAOY,SAAS,EAAET,IAAI,CAAC;YACvC;YAEAzB,GAAG,4CAA4C;gBAC7C,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;gBAEtD,uDAAuD;gBACvD,MAAMkC,YAAY1B,KAAKC,GAAG,KAAK,KAAK,KAAK,KAAK,KAAK;gBACnD/B,OAAOuB,OAAOY,SAAS,EAAEE,YAAY,CAACmB;YACxC;QACF;QAEAzD,SAAS,kBAAkB;YACzBE,GAAG,oCAAoC;gBACrC,wEAAwE;gBACxE,kCAAkC;gBAClC,MAAMsB,SAAS,MAAMrB,gBAAgB,IAAIoB;gBACzCtB,OAAOuB,QAAQC,cAAc,CAAC;YAChC;YAEAvB,GAAG,iCAAiC;gBAClC,yCAAyC;gBACzC,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiB;gBACtDrB,OAAOuB,OAAOE,QAAQ,EAAEC,IAAI,CAAC;YAC/B;YAEAzB,GAAG,iDAAiD;gBAClD,MAAMwD,kBAAkB;gBACxB,MAAMlC,SAAS,MAAMrB,gBAAgBmB,iBAAiBoC;gBAEtDzD,OAAOuB,OAAOE,QAAQ,EAAEC,IAAI,CAAC+B;YAC/B;QACF;IACF;IAEA1D,SAAS,yBAAyB;QAChCE,GAAG,sDAAsD;YACvD,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;YAEtD,0CAA0C;YAC1CtB,OAAOuB,OAAOT,KAAK,EAAE0B,GAAG,CAACkB,OAAO,CAAC;QACnC;QAEAzD,GAAG,gDAAgD;YACjD,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;YAEtD,0CAA0C;YAC1CtB,OAAO,IAAMa,eAAeU,OAAOT,KAAK,GAAG0B,GAAG,CAACmB,OAAO;YACtD3D,OAAO,IAAMmB,gBAAgBI,OAAOT,KAAK,GAAG0B,GAAG,CAACmB,OAAO;QACzD;QAEA1D,GAAG,yCAAyC;YAC1C,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;YACtD,MAAMsB,UAAUzB,gBAAgBI,OAAOT,KAAK;YAE5C,mDAAmD;YACnDd,OAAO4C,SAASgB,UAAU,CAAC;YAC3B5D,OAAO4C,SAASJ,GAAG,CAACqB,QAAQ;QAC9B;IACF;IAEA9D,SAAS,0BAA0B;QACjCE,GAAG,uDAAuD;YACxD,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;YAEtDtB,OAAOuB,QAAQC,cAAc,CAAC;YAC9BxB,OAAOuB,QAAQC,cAAc,CAAC;YAC9BxB,OAAOuB,QAAQC,cAAc,CAAC;YAC9BxB,OAAO,OAAOuB,OAAOT,KAAK,EAAEY,IAAI,CAAC;YACjC1B,OAAO,OAAOuB,OAAOY,SAAS,EAAET,IAAI,CAAC;YACrC1B,OAAO,OAAOuB,OAAOE,QAAQ,EAAEC,IAAI,CAAC;QACtC;QAEAzB,GAAG,iDAAiD;YAClD,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;YAEtD,6DAA6D;YAC7DtB,OAAOuB,QAAQiB,GAAG,CAAChB,cAAc,CAAC;QACpC;QAEAvB,GAAG,uCAAuC;YACxC,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;YAEtD,kDAAkD;YAClD,MAAMwC,OAAOC,OAAOD,IAAI,CAACvC,QAAQyC,IAAI;YACrChE,OAAO8D,MAAMG,OAAO,CAAC;gBAAC;gBAAa;gBAAY;aAAQ;QACzD;IACF;AACF"}

package/dist/auth/__tests__/fixtures.d.ts

@@ -0,0 +1,26 @@
+import type { FigmaTokenResponse, FigmaTokens } from '../types.js';
+/**
+ * Generate mock FigmaTokens for testing
+ */
+export declare function mockFigmaTokens(overrides?: Partial<FigmaTokens>): FigmaTokens;
+/**
+ * Generate mock expired tokens for testing
+ */
+export declare function mockExpiredTokens(overrides?: Partial<FigmaTokens>): FigmaTokens;
+/**
+ * Generate mock tokens expiring soon (within buffer window) for testing
+ */
+export declare function mockTokensExpiringSoon(overrides?: Partial<FigmaTokens>): FigmaTokens;
+/**
+ * Generate mock tokens with plenty of time remaining
+ */
+export declare function mockFreshTokens(overrides?: Partial<FigmaTokens>): FigmaTokens;
+/**
+ * Generate mock Figma API token response
+ */
+export declare function mockFigmaTokenResponse(overrides?: Partial<FigmaTokenResponse>): FigmaTokenResponse;
+/**
+ * Generate mock malformed token response (missing required fields)
+ */
+export declare function mockMalformedTokenResponse(): Partial<FigmaTokenResponse>;
+//# sourceMappingURL=fixtures.d.ts.map

package/dist/auth/__tests__/fixtures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures.d.ts","sourceRoot":"","sources":["../../../src/auth/__tests__/fixtures.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAElE;;GAEG;AACH,wBAAgB,eAAe,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,WAAW,CAY7E;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,WAAW,CAO/E;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,WAAW,CAQpF;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,WAAW,CAQ7E;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,GACtC,kBAAkB,CAQpB;AAED;;GAEG;AACH,wBAAgB,0BAA0B,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAKxE"}

package/dist/auth/__tests__/fixtures.js

@@ -0,0 +1,67 @@
+/**
+ * Generate mock FigmaTokens for testing
+ */ export function mockFigmaTokens(overrides) {
+    const now = Date.now();
+    const oneHourFromNow = now + 60 * 60 * 1000 // 1 hour
+    ;
+    return {
+        accessToken: 'figt_test_access_token_123456789',
+        expiresAt: oneHourFromNow,
+        refreshToken: 'figt_test_refresh_token_987654321',
+        scopes: [
+            'current_user:read'
+        ],
+        userId: 'user_123',
+        ...overrides
+    };
+}
+/**
+ * Generate mock expired tokens for testing
+ */ export function mockExpiredTokens(overrides) {
+    const oneHourAgo = Date.now() - 60 * 60 * 1000 // 1 hour ago
+    ;
+    return mockFigmaTokens({
+        expiresAt: oneHourAgo,
+        ...overrides
+    });
+}
+/**
+ * Generate mock tokens expiring soon (within buffer window) for testing
+ */ export function mockTokensExpiringSoon(overrides) {
+    // 4 minutes from now (within 5 minute buffer)
+    const fourMinutesFromNow = Date.now() + 4 * 60 * 1000;
+    return mockFigmaTokens({
+        expiresAt: fourMinutesFromNow,
+        ...overrides
+    });
+}
+/**
+ * Generate mock tokens with plenty of time remaining
+ */ export function mockFreshTokens(overrides) {
+    // 2 hours from now
+    const twoHoursFromNow = Date.now() + 2 * 60 * 60 * 1000;
+    return mockFigmaTokens({
+        expiresAt: twoHoursFromNow,
+        ...overrides
+    });
+}
+/**
+ * Generate mock Figma API token response
+ */ export function mockFigmaTokenResponse(overrides) {
+    return {
+        access_token: 'figt_test_access_token_123456789',
+        expires_in: 3600,
+        refresh_token: 'figt_test_refresh_token_987654321',
+        user_id_string: 'user_123',
+        ...overrides
+    };
+}
+/**
+ * Generate mock malformed token response (missing required fields)
+ */ export function mockMalformedTokenResponse() {
+    return {
+        access_token: 'figt_test_access_token_123456789'
+    };
+}
+
+//# sourceMappingURL=fixtures.js.map

package/dist/auth/__tests__/fixtures.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/auth/__tests__/fixtures.ts"],"sourcesContent":["import type { FigmaTokenResponse, FigmaTokens } from '../types.js'\n\n/**\n * Generate mock FigmaTokens for testing\n */\nexport function mockFigmaTokens(overrides?: Partial<FigmaTokens>): FigmaTokens {\n  const now = Date.now()\n  const oneHourFromNow = now + 60 * 60 * 1000 // 1 hour\n\n  return {\n    accessToken: 'figt_test_access_token_123456789',\n    expiresAt: oneHourFromNow,\n    refreshToken: 'figt_test_refresh_token_987654321',\n    scopes: ['current_user:read'],\n    userId: 'user_123',\n    ...overrides,\n  }\n}\n\n/**\n * Generate mock expired tokens for testing\n */\nexport function mockExpiredTokens(overrides?: Partial<FigmaTokens>): FigmaTokens {\n  const oneHourAgo = Date.now() - 60 * 60 * 1000 // 1 hour ago\n\n  return mockFigmaTokens({\n    expiresAt: oneHourAgo,\n    ...overrides,\n  })\n}\n\n/**\n * Generate mock tokens expiring soon (within buffer window) for testing\n */\nexport function mockTokensExpiringSoon(overrides?: Partial<FigmaTokens>): FigmaTokens {\n  // 4 minutes from now (within 5 minute buffer)\n  const fourMinutesFromNow = Date.now() + 4 * 60 * 1000\n\n  return mockFigmaTokens({\n    expiresAt: fourMinutesFromNow,\n    ...overrides,\n  })\n}\n\n/**\n * Generate mock tokens with plenty of time remaining\n */\nexport function mockFreshTokens(overrides?: Partial<FigmaTokens>): FigmaTokens {\n  // 2 hours from now\n  const twoHoursFromNow = Date.now() + 2 * 60 * 60 * 1000\n\n  return mockFigmaTokens({\n    expiresAt: twoHoursFromNow,\n    ...overrides,\n  })\n}\n\n/**\n * Generate mock Figma API token response\n */\nexport function mockFigmaTokenResponse(\n  overrides?: Partial<FigmaTokenResponse>,\n): FigmaTokenResponse {\n  return {\n    access_token: 'figt_test_access_token_123456789',\n    expires_in: 3600, // 1 hour in seconds\n    refresh_token: 'figt_test_refresh_token_987654321',\n    user_id_string: 'user_123',\n    ...overrides,\n  }\n}\n\n/**\n * Generate mock malformed token response (missing required fields)\n */\nexport function mockMalformedTokenResponse(): Partial<FigmaTokenResponse> {\n  return {\n    access_token: 'figt_test_access_token_123456789',\n    // Missing refresh_token and expires_in\n  }\n}\n"],"names":["mockFigmaTokens","overrides","now","Date","oneHourFromNow","accessToken","expiresAt","refreshToken","scopes","userId","mockExpiredTokens","oneHourAgo","mockTokensExpiringSoon","fourMinutesFromNow","mockFreshTokens","twoHoursFromNow","mockFigmaTokenResponse","access_token","expires_in","refresh_token","user_id_string","mockMalformedTokenResponse"],"mappings":"AAEA;;CAEC,GACD,OAAO,SAASA,gBAAgBC,SAAgC;IAC9D,MAAMC,MAAMC,KAAKD,GAAG;IACpB,MAAME,iBAAiBF,MAAM,KAAK,KAAK,KAAK,SAAS;;IAErD,OAAO;QACLG,aAAa;QACbC,WAAWF;QACXG,cAAc;QACdC,QAAQ;YAAC;SAAoB;QAC7BC,QAAQ;QACR,GAAGR,SAAS;IACd;AACF;AAEA;;CAEC,GACD,OAAO,SAASS,kBAAkBT,SAAgC;IAChE,MAAMU,aAAaR,KAAKD,GAAG,KAAK,KAAK,KAAK,KAAK,aAAa;;IAE5D,OAAOF,gBAAgB;QACrBM,WAAWK;QACX,GAAGV,SAAS;IACd;AACF;AAEA;;CAEC,GACD,OAAO,SAASW,uBAAuBX,SAAgC;IACrE,8CAA8C;IAC9C,MAAMY,qBAAqBV,KAAKD,GAAG,KAAK,IAAI,KAAK;IAEjD,OAAOF,gBAAgB;QACrBM,WAAWO;QACX,GAAGZ,SAAS;IACd;AACF;AAEA;;CAEC,GACD,OAAO,SAASa,gBAAgBb,SAAgC;IAC9D,mBAAmB;IACnB,MAAMc,kBAAkBZ,KAAKD,GAAG,KAAK,IAAI,KAAK,KAAK;IAEnD,OAAOF,gBAAgB;QACrBM,WAAWS;QACX,GAAGd,SAAS;IACd;AACF;AAEA;;CAEC,GACD,OAAO,SAASe,uBACdf,SAAuC;IAEvC,OAAO;QACLgB,cAAc;QACdC,YAAY;QACZC,eAAe;QACfC,gBAAgB;QAChB,GAAGnB,SAAS;IACd;AACF;AAEA;;CAEC,GACD,OAAO,SAASoB;IACd,OAAO;QACLJ,cAAc;IAEhB;AACF"}

package/dist/auth/__tests__/mocks.d.ts

@@ -0,0 +1,33 @@
+import type { FigmaTokenResponse } from '../types.js';
+/**
+ * Create a mock fetch response
+ */
+export declare function mockFetchResponse(data: unknown, options?: {
+    ok?: boolean;
+    status?: number;
+}): Response;
+/**
+ * Create a successful mock fetch response with token data
+ */
+export declare function mockSuccessfulTokenResponse(data: FigmaTokenResponse): Response;
+/**
+ * Create a failed mock fetch response
+ */
+export declare function mockFailedFetchResponse(status: number, errorMessage: string): Response;
+/**
+ * Mock global fetch with a successful response
+ */
+export declare function mockFetchSuccess(responseData: FigmaTokenResponse): import("vitest").Mock<(...args: any[]) => any>;
+/**
+ * Mock global fetch with a failed response
+ */
+export declare function mockFetchFailure(status: number, errorMessage: string): import("vitest").Mock<(...args: any[]) => any>;
+/**
+ * Mock global fetch with a network error
+ */
+export declare function mockFetchNetworkError(errorMessage?: string): import("vitest").Mock<(...args: any[]) => any>;
+/**
+ * Restore original fetch (cleanup after tests)
+ */
+export declare function restoreFetch(): void;
+//# sourceMappingURL=mocks.d.ts.map

package/dist/auth/__tests__/mocks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mocks.d.ts","sourceRoot":"","sources":["../../../src/auth/__tests__/mocks.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAErD;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,GAAE;IAAE,EAAE,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAQzF,QAAQ,CACd;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,kBAAkB,YAEnE;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAQrE,QAAQ,CACd;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,kBAAkB,kDAIhE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,kDAIpE;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,YAAY,SAAkB,kDAInE;AAED;;GAEG;AACH,wBAAgB,YAAY,SAE3B"}

package/dist/auth/__tests__/mocks.js

@@ -0,0 +1,63 @@
+/* eslint-disable perfectionist/sort-objects */ /* eslint-disable @typescript-eslint/require-await */ import { vi } from 'vitest';
+/**
+ * Create a mock fetch response
+ */ export function mockFetchResponse(data, options = {}) {
+    return {
+        ok: options.ok ?? true,
+        status: options.status ?? 200,
+        statusText: options.status === 200 ? 'OK' : 'Error',
+        headers: new Headers(),
+        json: async ()=>data,
+        text: async ()=>JSON.stringify(data)
+    };
+}
+/**
+ * Create a successful mock fetch response with token data
+ */ export function mockSuccessfulTokenResponse(data) {
+    return mockFetchResponse(data, {
+        ok: true,
+        status: 200
+    });
+}
+/**
+ * Create a failed mock fetch response
+ */ export function mockFailedFetchResponse(status, errorMessage) {
+    return {
+        ok: false,
+        status,
+        statusText: 'Error',
+        headers: new Headers(),
+        json: async ()=>({
+                error: errorMessage
+            }),
+        text: async ()=>errorMessage
+    };
+}
+/**
+ * Mock global fetch with a successful response
+ */ export function mockFetchSuccess(responseData) {
+    const mockFetch = vi.fn().mockResolvedValue(mockSuccessfulTokenResponse(responseData));
+    global.fetch = mockFetch;
+    return mockFetch;
+}
+/**
+ * Mock global fetch with a failed response
+ */ export function mockFetchFailure(status, errorMessage) {
+    const mockFetch = vi.fn().mockResolvedValue(mockFailedFetchResponse(status, errorMessage));
+    global.fetch = mockFetch;
+    return mockFetch;
+}
+/**
+ * Mock global fetch with a network error
+ */ export function mockFetchNetworkError(errorMessage = 'Network error') {
+    const mockFetch = vi.fn().mockRejectedValue(new Error(errorMessage));
+    global.fetch = mockFetch;
+    return mockFetch;
+}
+/**
+ * Restore original fetch (cleanup after tests)
+ */ export function restoreFetch() {
+    vi.restoreAllMocks();
+}
+
+//# sourceMappingURL=mocks.js.map

package/dist/auth/__tests__/mocks.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/auth/__tests__/mocks.ts"],"sourcesContent":["/* eslint-disable perfectionist/sort-objects */\n/* eslint-disable @typescript-eslint/require-await */\nimport { vi } from 'vitest'\n\nimport type { FigmaTokenResponse } from '../types.js'\n\n/**\n * Create a mock fetch response\n */\nexport function mockFetchResponse(data: unknown, options: { ok?: boolean; status?: number } = {}) {\n  return {\n    ok: options.ok ?? true,\n    status: options.status ?? 200,\n    statusText: options.status === 200 ? 'OK' : 'Error',\n    headers: new Headers(),\n    json: async () => data,\n    text: async () => JSON.stringify(data),\n  } as Response\n}\n\n/**\n * Create a successful mock fetch response with token data\n */\nexport function mockSuccessfulTokenResponse(data: FigmaTokenResponse) {\n  return mockFetchResponse(data, { ok: true, status: 200 })\n}\n\n/**\n * Create a failed mock fetch response\n */\nexport function mockFailedFetchResponse(status: number, errorMessage: string) {\n  return {\n    ok: false,\n    status,\n    statusText: 'Error',\n    headers: new Headers(),\n    json: async () => ({ error: errorMessage }),\n    text: async () => errorMessage,\n  } as Response\n}\n\n/**\n * Mock global fetch with a successful response\n */\nexport function mockFetchSuccess(responseData: FigmaTokenResponse) {\n  const mockFetch = vi.fn().mockResolvedValue(mockSuccessfulTokenResponse(responseData))\n  global.fetch = mockFetch\n  return mockFetch\n}\n\n/**\n * Mock global fetch with a failed response\n */\nexport function mockFetchFailure(status: number, errorMessage: string) {\n  const mockFetch = vi.fn().mockResolvedValue(mockFailedFetchResponse(status, errorMessage))\n  global.fetch = mockFetch\n  return mockFetch\n}\n\n/**\n * Mock global fetch with a network error\n */\nexport function mockFetchNetworkError(errorMessage = 'Network error') {\n  const mockFetch = vi.fn().mockRejectedValue(new Error(errorMessage))\n  global.fetch = mockFetch\n  return mockFetch\n}\n\n/**\n * Restore original fetch (cleanup after tests)\n */\nexport function restoreFetch() {\n  vi.restoreAllMocks()\n}\n"],"names":["vi","mockFetchResponse","data","options","ok","status","statusText","headers","Headers","json","text","JSON","stringify","mockSuccessfulTokenResponse","mockFailedFetchResponse","errorMessage","error","mockFetchSuccess","responseData","mockFetch","fn","mockResolvedValue","global","fetch","mockFetchFailure","mockFetchNetworkError","mockRejectedValue","Error","restoreFetch","restoreAllMocks"],"mappings":"AAAA,6CAA6C,GAC7C,mDAAmD,GACnD,SAASA,EAAE,QAAQ,SAAQ;AAI3B;;CAEC,GACD,OAAO,SAASC,kBAAkBC,IAAa,EAAEC,UAA6C,CAAC,CAAC;IAC9F,OAAO;QACLC,IAAID,QAAQC,EAAE,IAAI;QAClBC,QAAQF,QAAQE,MAAM,IAAI;QAC1BC,YAAYH,QAAQE,MAAM,KAAK,MAAM,OAAO;QAC5CE,SAAS,IAAIC;QACbC,MAAM,UAAYP;QAClBQ,MAAM,UAAYC,KAAKC,SAAS,CAACV;IACnC;AACF;AAEA;;CAEC,GACD,OAAO,SAASW,4BAA4BX,IAAwB;IAClE,OAAOD,kBAAkBC,MAAM;QAAEE,IAAI;QAAMC,QAAQ;IAAI;AACzD;AAEA;;CAEC,GACD,OAAO,SAASS,wBAAwBT,MAAc,EAAEU,YAAoB;IAC1E,OAAO;QACLX,IAAI;QACJC;QACAC,YAAY;QACZC,SAAS,IAAIC;QACbC,MAAM,UAAa,CAAA;gBAAEO,OAAOD;YAAa,CAAA;QACzCL,MAAM,UAAYK;IACpB;AACF;AAEA;;CAEC,GACD,OAAO,SAASE,iBAAiBC,YAAgC;IAC/D,MAAMC,YAAYnB,GAAGoB,EAAE,GAAGC,iBAAiB,CAACR,4BAA4BK;IACxEI,OAAOC,KAAK,GAAGJ;IACf,OAAOA;AACT;AAEA;;CAEC,GACD,OAAO,SAASK,iBAAiBnB,MAAc,EAAEU,YAAoB;IACnE,MAAMI,YAAYnB,GAAGoB,EAAE,GAAGC,iBAAiB,CAACP,wBAAwBT,QAAQU;IAC5EO,OAAOC,KAAK,GAAGJ;IACf,OAAOA;AACT;AAEA;;CAEC,GACD,OAAO,SAASM,sBAAsBV,eAAe,eAAe;IAClE,MAAMI,YAAYnB,GAAGoB,EAAE,GAAGM,iBAAiB,CAAC,IAAIC,MAAMZ;IACtDO,OAAOC,KAAK,GAAGJ;IACf,OAAOA;AACT;AAEA;;CAEC,GACD,OAAO,SAASS;IACd5B,GAAG6B,eAAe;AACpB"}

package/dist/auth/browser.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Error thrown when browser launch fails
+ */
+export declare class BrowserError extends Error {
+    constructor(message: string);
+}
+/**
+ * Open a URL in the user's default browser
+ *
+ * Uses the `open` package for cross-platform browser launching
+ *
+ * @param url - URL to open in browser
+ * @throws BrowserError if browser launch fails
+ */
+export declare function openBrowser(url: string): Promise<void>;
+/**
+ * Build OAuth authorization URL with all required parameters
+ *
+ * @param params - Authorization URL parameters
+ * @returns Complete authorization URL
+ */
+export declare function buildAuthorizationUrl(params: {
+    authorizationUrl: string;
+    clientId: string;
+    codeChallenge: string;
+    codeChallengeMethod: 'S256';
+    redirectUri: string;
+    scopes: string[];
+    state: string;
+}): string;
+//# sourceMappingURL=browser.d.ts.map

package/dist/auth/browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/auth/browser.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,qBAAa,YAAa,SAAQ,KAAK;gBACzB,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ5D;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,gBAAgB,EAAE,MAAM,CAAA;IACxB,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,MAAM,CAAA;IACrB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,MAAM,CAYT"}

package/dist/auth/browser.js

@@ -0,0 +1,41 @@
+import open from 'open';
+/**
+ * Error thrown when browser launch fails
+ */ export class BrowserError extends Error {
+    constructor(message){
+        super(message);
+        this.name = 'BrowserError';
+    }
+}
+/**
+ * Open a URL in the user's default browser
+ *
+ * Uses the `open` package for cross-platform browser launching
+ *
+ * @param url - URL to open in browser
+ * @throws BrowserError if browser launch fails
+ */ export async function openBrowser(url) {
+    try {
+        await open(url);
+    } catch (error) {
+        throw new BrowserError(`Failed to open browser: ${error instanceof Error ? error.message : 'Unknown error'}`);
+    }
+}
+/**
+ * Build OAuth authorization URL with all required parameters
+ *
+ * @param params - Authorization URL parameters
+ * @returns Complete authorization URL
+ */ export function buildAuthorizationUrl(params) {
+    const url = new URL(params.authorizationUrl);
+    url.searchParams.set('client_id', params.clientId);
+    url.searchParams.set('redirect_uri', params.redirectUri);
+    url.searchParams.set('response_type', 'code');
+    url.searchParams.set('scope', params.scopes.join(' '));
+    url.searchParams.set('state', params.state);
+    url.searchParams.set('code_challenge', params.codeChallenge);
+    url.searchParams.set('code_challenge_method', params.codeChallengeMethod);
+    return url.toString();
+}
+
+//# sourceMappingURL=browser.js.map

package/dist/auth/browser.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/browser.ts"],"sourcesContent":["import open from 'open'\n\n/**\n * Error thrown when browser launch fails\n */\nexport class BrowserError extends Error {\n  constructor(message: string) {\n    super(message)\n    this.name = 'BrowserError'\n  }\n}\n\n/**\n * Open a URL in the user's default browser\n *\n * Uses the `open` package for cross-platform browser launching\n *\n * @param url - URL to open in browser\n * @throws BrowserError if browser launch fails\n */\nexport async function openBrowser(url: string): Promise<void> {\n  try {\n    await open(url)\n  } catch (error) {\n    throw new BrowserError(\n      `Failed to open browser: ${error instanceof Error ? error.message : 'Unknown error'}`,\n    )\n  }\n}\n\n/**\n * Build OAuth authorization URL with all required parameters\n *\n * @param params - Authorization URL parameters\n * @returns Complete authorization URL\n */\nexport function buildAuthorizationUrl(params: {\n  authorizationUrl: string\n  clientId: string\n  codeChallenge: string\n  codeChallengeMethod: 'S256'\n  redirectUri: string\n  scopes: string[]\n  state: string\n}): string {\n  const url = new URL(params.authorizationUrl)\n\n  url.searchParams.set('client_id', params.clientId)\n  url.searchParams.set('redirect_uri', params.redirectUri)\n  url.searchParams.set('response_type', 'code')\n  url.searchParams.set('scope', params.scopes.join(' '))\n  url.searchParams.set('state', params.state)\n  url.searchParams.set('code_challenge', params.codeChallenge)\n  url.searchParams.set('code_challenge_method', params.codeChallengeMethod)\n\n  return url.toString()\n}\n"],"names":["open","BrowserError","Error","message","name","openBrowser","url","error","buildAuthorizationUrl","params","URL","authorizationUrl","searchParams","set","clientId","redirectUri","scopes","join","state","codeChallenge","codeChallengeMethod","toString"],"mappings":"AAAA,OAAOA,UAAU,OAAM;AAEvB;;CAEC,GACD,OAAO,MAAMC,qBAAqBC;IAChC,YAAYC,OAAe,CAAE;QAC3B,KAAK,CAACA;QACN,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA;;;;;;;CAOC,GACD,OAAO,eAAeC,YAAYC,GAAW;IAC3C,IAAI;QACF,MAAMN,KAAKM;IACb,EAAE,OAAOC,OAAO;QACd,MAAM,IAAIN,aACR,CAAC,wBAAwB,EAAEM,iBAAiBL,QAAQK,MAAMJ,OAAO,GAAG,iBAAiB;IAEzF;AACF;AAEA;;;;;CAKC,GACD,OAAO,SAASK,sBAAsBC,MAQrC;IACC,MAAMH,MAAM,IAAII,IAAID,OAAOE,gBAAgB;IAE3CL,IAAIM,YAAY,CAACC,GAAG,CAAC,aAAaJ,OAAOK,QAAQ;IACjDR,IAAIM,YAAY,CAACC,GAAG,CAAC,gBAAgBJ,OAAOM,WAAW;IACvDT,IAAIM,YAAY,CAACC,GAAG,CAAC,iBAAiB;IACtCP,IAAIM,YAAY,CAACC,GAAG,CAAC,SAASJ,OAAOO,MAAM,CAACC,IAAI,CAAC;IACjDX,IAAIM,YAAY,CAACC,GAAG,CAAC,SAASJ,OAAOS,KAAK;IAC1CZ,IAAIM,YAAY,CAACC,GAAG,CAAC,kBAAkBJ,OAAOU,aAAa;IAC3Db,IAAIM,YAAY,CAACC,GAAG,CAAC,yBAAyBJ,OAAOW,mBAAmB;IAExE,OAAOd,IAAIe,QAAQ;AACrB"}

package/dist/auth/callback-server.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Result from OAuth callback server
+ */
+export interface CallbackResult {
+    /** Authorization code from OAuth provider */
+    code: string;
+    /** State parameter for CSRF verification */
+    state: string;
+}
+/**
+ * Error from OAuth callback
+ */
+export declare class CallbackError extends Error {
+    code?: string | undefined;
+    constructor(message: string, code?: string | undefined);
+}
+/**
+ * Local HTTP server for handling OAuth callbacks
+ *
+ * Starts a temporary server on localhost to receive the OAuth authorization code.
+ * The server automatically shuts down after receiving the callback or on timeout.
+ *
+ * Implements dynamic port allocation: tries preferred port first, falls back to
+ * OS-assigned port if unavailable.
+ */
+export declare class CallbackServer {
+    private actualPort?;
+    private preferredPort;
+    private server;
+    private timeoutMs;
+    constructor(options?: {
+        port?: number;
+        timeoutMs?: number;
+    });
+    /**
+     * Render error page shown in browser when auth fails
+     */
+    private renderErrorPage;
+    /**
+     * Render success page shown in browser after successful auth
+     */
+    private renderSuccessPage;
+    /**
+     * Get the actual port the server is listening on
+     * @returns Port number (may differ from preferred if that was in use)
+     */
+    getActualPort(): number;
+    /**
+     * Stop the server if running
+     */
+    stop(): void;
+    /**
+     * Start server and wait for OAuth callback
+     *
+     * @param expectedState - State parameter to verify CSRF protection
+     * @returns Promise resolving to callback result with code and state
+     * @throws CallbackError if callback fails or times out
+     */
+    waitForCallback(expectedState: string): Promise<CallbackResult>;
+}
+//# sourceMappingURL=callback-server.d.ts.map

package/dist/auth/callback-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"callback-server.d.ts","sourceRoot":"","sources":["../../src/auth/callback-server.ts"],"names":[],"mappings":"AAQA;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAA;IACZ,4CAA4C;IAC5C,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;GAEG;AACH,qBAAa,aAAc,SAAQ,KAAK;IAG7B,IAAI,CAAC,EAAE,MAAM;gBADpB,OAAO,EAAE,MAAM,EACR,IAAI,CAAC,EAAE,MAAM,YAAA;CAKvB;AAED;;;;;;;;GAQG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,UAAU,CAAC,CAAQ;IAC3B,OAAO,CAAC,aAAa,CAAQ;IAC7B,OAAO,CAAC,MAAM,CAAsB;IACpC,OAAO,CAAC,SAAS,CAAQ;gBAEb,OAAO,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO;IAM/D;;OAEG;IACH,OAAO,CAAC,eAAe;IAOvB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAIzB;;;OAGG;IACH,aAAa,IAAI,MAAM;IAIvB;;OAEG;IACH,IAAI,IAAI,IAAI;IAOZ;;;;;;OAMG;IACG,eAAe,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;CA8GtE"}