@payloadcms/figma 0.0.1-alpha.1 → 0.0.1-alpha.10

package/dist/api/figma-api.spec.js

@@ -1,201 +0,0 @@
-/**
- * Tests JWT parsing helpers and validates mock API contract.
- *
- * NOTE: The Figma API is currently mocked for development.
- *
- * These tests verify:
- * 1. JWT parsing helper functions (our code)
- * 2. JWT structure matches expected Figma API contract
- * 3. Mock responses are consistent for development
- *
- * TODO: Replace with integration tests when real API is available
- */ import { describe, expect, it } from 'vitest';
-import { getProjectToken } from './figma-api.js';
-/**
- * Helper function to decode base64url JWT part
- */ function decodeJwtPart(part) {
-    const base64 = part.replace(/-/g, '+').replace(/_/g, '/');
-    const padded = base64.padEnd(base64.length + (4 - base64.length % 4) % 4, '=');
-    return Buffer.from(padded, 'base64').toString('utf-8');
-}
-/**
- * Helper function to parse JWT header
- */ function parseJwtHeader(token) {
-    const headerPart = token.split('.')[0];
-    return JSON.parse(decodeJwtPart(headerPart));
-}
-/**
- * Helper function to parse JWT payload
- */ function parseJwtPayload(token) {
-    const payloadPart = token.split('.')[1];
-    return JSON.parse(decodeJwtPart(payloadPart));
-}
-describe('Figma API Client', ()=>{
-    const mockAccessToken = 'figt_mock_access_token';
-    const mockTenantId = 'tenant-123';
-    describe('getProjectToken', ()=>{
-        // TODO: Remove/modify this when real API is available
-        describe('mock implementation', ()=>{
-            it('should generate valid project token', async ()=>{
-                const result = await getProjectToken(mockAccessToken, mockTenantId);
-                expect(result).toHaveProperty('token');
-                expect(result).toHaveProperty('expiresAt');
-                expect(result).toHaveProperty('tenantId');
-                expect(result.tenantId).toBe(mockTenantId);
-            });
-            it('should generate JWT in correct format', async ()=>{
-                const result = await getProjectToken(mockAccessToken, mockTenantId);
-                // JWT should be three base64url parts separated by dots
-                const parts = result.token.split('.');
-                expect(parts).toHaveLength(3);
-            });
-            it('should include valid expiry time', async ()=>{
-                const before = Date.now();
-                const result = await getProjectToken(mockAccessToken, mockTenantId);
-                const after = Date.now();
-                // Token should expire in ~25 minutes (mock generates 25 min expiry)
-                const expectedMin = before + 24 * 60 * 1000 // 24 minutes
-                ;
-                const expectedMax = after + 26 * 60 * 1000 // 26 minutes
-                ;
-                expect(result.expiresAt).toBeGreaterThan(expectedMin);
-                expect(result.expiresAt).toBeLessThan(expectedMax);
-            });
-            it('should generate unique tokens on multiple calls', async ()=>{
-                const token1 = await getProjectToken(mockAccessToken, mockTenantId);
-                const token2 = await getProjectToken(mockAccessToken, mockTenantId);
-                // Tokens should be unique (signatures will differ)
-                expect(token1.token).not.toBe(token2.token);
-            });
-        });
-        describe('JWT structure and claims', ()=>{
-            it('should generate JWT with RS256 algorithm in header', async ()=>{
-                const result = await getProjectToken(mockAccessToken, mockTenantId);
-                const header = parseJwtHeader(result.token);
-                expect(header.alg).toBe('RS256');
-                expect(header.typ).toBe('JWT');
-            });
-            it('should include required claims in payload', async ()=>{
-                const result = await getProjectToken(mockAccessToken, mockTenantId);
-                const payload = parseJwtPayload(result.token);
-                expect(payload).toHaveProperty('exp');
-                expect(payload).toHaveProperty('iat');
-                expect(payload).toHaveProperty('aud');
-                expect(payload.aud).toBe(mockTenantId);
-            });
-            it('should have exp claim as numeric timestamp', async ()=>{
-                const result = await getProjectToken(mockAccessToken, mockTenantId);
-                const payload = parseJwtPayload(result.token);
-                expect(typeof payload.exp).toBe('number');
-                expect(payload.exp).toBeGreaterThan(Date.now() / 1000); // Should be in future
-            });
-            it('should have iat claim as current timestamp', async ()=>{
-                const before = Math.floor(Date.now() / 1000);
-                const result = await getProjectToken(mockAccessToken, mockTenantId);
-                const after = Math.floor(Date.now() / 1000);
-                const payload = parseJwtPayload(result.token);
-                expect(payload.iat).toBeGreaterThanOrEqual(before);
-                expect(payload.iat).toBeLessThanOrEqual(after);
-            });
-            it('should convert exp from seconds to milliseconds in expiresAt', async ()=>{
-                const result = await getProjectToken(mockAccessToken, mockTenantId);
-                const payload = parseJwtPayload(result.token);
-                // expiresAt should be exp * 1000 (converted to milliseconds)
-                expect(result.expiresAt).toBe(payload.exp * 1000);
-            });
-        });
-        describe('JWT expiry parsing', ()=>{
-            it('should correctly parse expiry from generated JWT', async ()=>{
-                const result = await getProjectToken(mockAccessToken, mockTenantId);
-                // expiresAt should be a valid timestamp in milliseconds
-                expect(typeof result.expiresAt).toBe('number');
-                expect(result.expiresAt).toBeGreaterThan(Date.now());
-                // Should be ~25 minutes in the future
-                const expectedExpiry = Date.now() + 25 * 60 * 1000;
-                const tolerance = 2 * 60 * 1000 // 2 minutes tolerance
-                ;
-                expect(Math.abs(result.expiresAt - expectedExpiry)).toBeLessThan(tolerance);
-            });
-            it('should handle JWT with past expiry date', async ()=>{
-                // This tests that parsing works even for expired tokens
-                // (validation happens later in jwt-validator)
-                const result = await getProjectToken(mockAccessToken, mockTenantId);
-                // Should parse without throwing, even if theoretically expired
-                expect(result.expiresAt).toBeDefined();
-                expect(typeof result.expiresAt).toBe('number');
-            });
-            it('should handle JWT with far future expiry', async ()=>{
-                const result = await getProjectToken(mockAccessToken, mockTenantId);
-                // expiresAt should be reasonable (within next 30 days)
-                const maxFuture = Date.now() + 30 * 24 * 60 * 60 * 1000;
-                expect(result.expiresAt).toBeLessThan(maxFuture);
-            });
-        });
-        describe('error handling', ()=>{
-            it('should handle empty access token', async ()=>{
-                // Mock implementation doesn't validate access token, but real impl will
-                // For now, this should still work
-                const result = await getProjectToken('', mockTenantId);
-                expect(result).toHaveProperty('token');
-            });
-            it('should handle empty tenant ID', async ()=>{
-                // Mock implementation should handle this
-                const result = await getProjectToken(mockAccessToken, '');
-                expect(result.tenantId).toBe('');
-            });
-            it('should handle special characters in tenant ID', async ()=>{
-                const specialTenantId = 'tenant-with-special_chars.123';
-                const result = await getProjectToken(mockAccessToken, specialTenantId);
-                expect(result.tenantId).toBe(specialTenantId);
-            });
-        });
-    });
-    describe('JWT format edge cases', ()=>{
-        it('should generate base64url encoded parts (no + / =)', async ()=>{
-            const result = await getProjectToken(mockAccessToken, mockTenantId);
-            // Base64url should not contain +, /, or =
-            expect(result.token).not.toMatch(/[+/=]/);
-        });
-        it('should generate decodable header and payload', async ()=>{
-            const result = await getProjectToken(mockAccessToken, mockTenantId);
-            // Should be able to decode without errors
-            expect(()=>parseJwtHeader(result.token)).not.toThrow();
-            expect(()=>parseJwtPayload(result.token)).not.toThrow();
-        });
-        it('should generate valid JSON in payload', async ()=>{
-            const result = await getProjectToken(mockAccessToken, mockTenantId);
-            const payload = parseJwtPayload(result.token);
-            // Should be a valid object with expected structure
-            expect(payload).toBeTypeOf('object');
-            expect(payload).not.toBeNull();
-        });
-    });
-    describe('return value structure', ()=>{
-        it('should return ProjectToken with all required fields', async ()=>{
-            const result = await getProjectToken(mockAccessToken, mockTenantId);
-            expect(result).toHaveProperty('token');
-            expect(result).toHaveProperty('expiresAt');
-            expect(result).toHaveProperty('tenantId');
-            expect(typeof result.token).toBe('string');
-            expect(typeof result.expiresAt).toBe('number');
-            expect(typeof result.tenantId).toBe('string');
-        });
-        it('should not include claims in initial response', async ()=>{
-            const result = await getProjectToken(mockAccessToken, mockTenantId);
-            // Claims are added after JWT validation, not in API response
-            expect(result).not.toHaveProperty('claims');
-        });
-        it('should match ProjectToken interface', async ()=>{
-            const result = await getProjectToken(mockAccessToken, mockTenantId);
-            // Verify structure matches ProjectToken interface
-            const keys = Object.keys(result).sort();
-            expect(keys).toEqual([
-                'expiresAt',
-                'tenantId',
-                'token'
-            ]);
-        });
-    });
-});
-
-//# sourceMappingURL=figma-api.spec.js.map

package/dist/api/figma-api.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/api/figma-api.spec.ts"],"sourcesContent":["/**\n * Tests JWT parsing helpers and validates mock API contract.\n *\n * NOTE: The Figma API is currently mocked for development.\n *\n * These tests verify:\n * 1. JWT parsing helper functions (our code)\n * 2. JWT structure matches expected Figma API contract\n * 3. Mock responses are consistent for development\n *\n * TODO: Replace with integration tests when real API is available\n */\n\nimport { describe, expect, it } from 'vitest'\n\nimport { getProjectToken } from './figma-api.js'\n\n/**\n * Helper function to decode base64url JWT part\n */\nfunction decodeJwtPart(part: string): string {\n  const base64 = part.replace(/-/g, '+').replace(/_/g, '/')\n  const padded = base64.padEnd(base64.length + ((4 - (base64.length % 4)) % 4), '=')\n  return Buffer.from(padded, 'base64').toString('utf-8')\n}\n\n/**\n * Helper function to parse JWT header\n */\nfunction parseJwtHeader(token: string): { alg: string; typ: string } {\n  const headerPart = token.split('.')[0]\n  return JSON.parse(decodeJwtPart(headerPart))\n}\n\n/**\n * Helper function to parse JWT payload\n */\nfunction parseJwtPayload(token: string): {\n  aud?: string\n  email?: string\n  exp?: number\n  iat?: number\n  sub?: string\n} {\n  const payloadPart = token.split('.')[1]\n  return JSON.parse(decodeJwtPart(payloadPart))\n}\n\ndescribe('Figma API Client', () => {\n  const mockAccessToken = 'figt_mock_access_token'\n  const mockTenantId = 'tenant-123'\n\n  describe('getProjectToken', () => {\n    // TODO: Remove/modify this when real API is available\n    describe('mock implementation', () => {\n      it('should generate valid project token', async () => {\n        const result = await getProjectToken(mockAccessToken, mockTenantId)\n\n        expect(result).toHaveProperty('token')\n        expect(result).toHaveProperty('expiresAt')\n        expect(result).toHaveProperty('tenantId')\n        expect(result.tenantId).toBe(mockTenantId)\n      })\n\n      it('should generate JWT in correct format', async () => {\n        const result = await getProjectToken(mockAccessToken, mockTenantId)\n\n        // JWT should be three base64url parts separated by dots\n        const parts = result.token.split('.')\n        expect(parts).toHaveLength(3)\n      })\n\n      it('should include valid expiry time', async () => {\n        const before = Date.now()\n        const result = await getProjectToken(mockAccessToken, mockTenantId)\n        const after = Date.now()\n\n        // Token should expire in ~25 minutes (mock generates 25 min expiry)\n        const expectedMin = before + 24 * 60 * 1000 // 24 minutes\n        const expectedMax = after + 26 * 60 * 1000 // 26 minutes\n\n        expect(result.expiresAt).toBeGreaterThan(expectedMin)\n        expect(result.expiresAt).toBeLessThan(expectedMax)\n      })\n\n      it('should generate unique tokens on multiple calls', async () => {\n        const token1 = await getProjectToken(mockAccessToken, mockTenantId)\n        const token2 = await getProjectToken(mockAccessToken, mockTenantId)\n\n        // Tokens should be unique (signatures will differ)\n        expect(token1.token).not.toBe(token2.token)\n      })\n    })\n\n    describe('JWT structure and claims', () => {\n      it('should generate JWT with RS256 algorithm in header', async () => {\n        const result = await getProjectToken(mockAccessToken, mockTenantId)\n        const header = parseJwtHeader(result.token)\n\n        expect(header.alg).toBe('RS256')\n        expect(header.typ).toBe('JWT')\n      })\n\n      it('should include required claims in payload', async () => {\n        const result = await getProjectToken(mockAccessToken, mockTenantId)\n        const payload = parseJwtPayload(result.token)\n\n        expect(payload).toHaveProperty('exp')\n        expect(payload).toHaveProperty('iat')\n        expect(payload).toHaveProperty('aud')\n        expect(payload.aud).toBe(mockTenantId)\n      })\n\n      it('should have exp claim as numeric timestamp', async () => {\n        const result = await getProjectToken(mockAccessToken, mockTenantId)\n        const payload = parseJwtPayload(result.token)\n\n        expect(typeof payload.exp).toBe('number')\n        expect(payload.exp).toBeGreaterThan(Date.now() / 1000) // Should be in future\n      })\n\n      it('should have iat claim as current timestamp', async () => {\n        const before = Math.floor(Date.now() / 1000)\n        const result = await getProjectToken(mockAccessToken, mockTenantId)\n        const after = Math.floor(Date.now() / 1000)\n\n        const payload = parseJwtPayload(result.token)\n\n        expect(payload.iat).toBeGreaterThanOrEqual(before)\n        expect(payload.iat).toBeLessThanOrEqual(after)\n      })\n\n      it('should convert exp from seconds to milliseconds in expiresAt', async () => {\n        const result = await getProjectToken(mockAccessToken, mockTenantId)\n        const payload = parseJwtPayload(result.token)\n\n        // expiresAt should be exp * 1000 (converted to milliseconds)\n        expect(result.expiresAt).toBe(payload.exp! * 1000)\n      })\n    })\n\n    describe('JWT expiry parsing', () => {\n      it('should correctly parse expiry from generated JWT', async () => {\n        const result = await getProjectToken(mockAccessToken, mockTenantId)\n\n        // expiresAt should be a valid timestamp in milliseconds\n        expect(typeof result.expiresAt).toBe('number')\n        expect(result.expiresAt).toBeGreaterThan(Date.now())\n\n        // Should be ~25 minutes in the future\n        const expectedExpiry = Date.now() + 25 * 60 * 1000\n        const tolerance = 2 * 60 * 1000 // 2 minutes tolerance\n        expect(Math.abs(result.expiresAt - expectedExpiry)).toBeLessThan(tolerance)\n      })\n\n      it('should handle JWT with past expiry date', async () => {\n        // This tests that parsing works even for expired tokens\n        // (validation happens later in jwt-validator)\n        const result = await getProjectToken(mockAccessToken, mockTenantId)\n\n        // Should parse without throwing, even if theoretically expired\n        expect(result.expiresAt).toBeDefined()\n        expect(typeof result.expiresAt).toBe('number')\n      })\n\n      it('should handle JWT with far future expiry', async () => {\n        const result = await getProjectToken(mockAccessToken, mockTenantId)\n\n        // expiresAt should be reasonable (within next 30 days)\n        const maxFuture = Date.now() + 30 * 24 * 60 * 60 * 1000\n        expect(result.expiresAt).toBeLessThan(maxFuture)\n      })\n    })\n\n    describe('error handling', () => {\n      it('should handle empty access token', async () => {\n        // Mock implementation doesn't validate access token, but real impl will\n        // For now, this should still work\n        const result = await getProjectToken('', mockTenantId)\n        expect(result).toHaveProperty('token')\n      })\n\n      it('should handle empty tenant ID', async () => {\n        // Mock implementation should handle this\n        const result = await getProjectToken(mockAccessToken, '')\n        expect(result.tenantId).toBe('')\n      })\n\n      it('should handle special characters in tenant ID', async () => {\n        const specialTenantId = 'tenant-with-special_chars.123'\n        const result = await getProjectToken(mockAccessToken, specialTenantId)\n\n        expect(result.tenantId).toBe(specialTenantId)\n      })\n    })\n  })\n\n  describe('JWT format edge cases', () => {\n    it('should generate base64url encoded parts (no + / =)', async () => {\n      const result = await getProjectToken(mockAccessToken, mockTenantId)\n\n      // Base64url should not contain +, /, or =\n      expect(result.token).not.toMatch(/[+/=]/)\n    })\n\n    it('should generate decodable header and payload', async () => {\n      const result = await getProjectToken(mockAccessToken, mockTenantId)\n\n      // Should be able to decode without errors\n      expect(() => parseJwtHeader(result.token)).not.toThrow()\n      expect(() => parseJwtPayload(result.token)).not.toThrow()\n    })\n\n    it('should generate valid JSON in payload', async () => {\n      const result = await getProjectToken(mockAccessToken, mockTenantId)\n      const payload = parseJwtPayload(result.token)\n\n      // Should be a valid object with expected structure\n      expect(payload).toBeTypeOf('object')\n      expect(payload).not.toBeNull()\n    })\n  })\n\n  describe('return value structure', () => {\n    it('should return ProjectToken with all required fields', async () => {\n      const result = await getProjectToken(mockAccessToken, mockTenantId)\n\n      expect(result).toHaveProperty('token')\n      expect(result).toHaveProperty('expiresAt')\n      expect(result).toHaveProperty('tenantId')\n      expect(typeof result.token).toBe('string')\n      expect(typeof result.expiresAt).toBe('number')\n      expect(typeof result.tenantId).toBe('string')\n    })\n\n    it('should not include claims in initial response', async () => {\n      const result = await getProjectToken(mockAccessToken, mockTenantId)\n\n      // Claims are added after JWT validation, not in API response\n      expect(result).not.toHaveProperty('claims')\n    })\n\n    it('should match ProjectToken interface', async () => {\n      const result = await getProjectToken(mockAccessToken, mockTenantId)\n\n      // Verify structure matches ProjectToken interface\n      const keys = Object.keys(result).sort()\n      expect(keys).toEqual(['expiresAt', 'tenantId', 'token'])\n    })\n  })\n})\n"],"names":["describe","expect","it","getProjectToken","decodeJwtPart","part","base64","replace","padded","padEnd","length","Buffer","from","toString","parseJwtHeader","token","headerPart","split","JSON","parse","parseJwtPayload","payloadPart","mockAccessToken","mockTenantId","result","toHaveProperty","tenantId","toBe","parts","toHaveLength","before","Date","now","after","expectedMin","expectedMax","expiresAt","toBeGreaterThan","toBeLessThan","token1","token2","not","header","alg","typ","payload","aud","exp","Math","floor","iat","toBeGreaterThanOrEqual","toBeLessThanOrEqual","expectedExpiry","tolerance","abs","toBeDefined","maxFuture","specialTenantId","toMatch","toThrow","toBeTypeOf","toBeNull","keys","Object","sort","toEqual"],"mappings":"AAAA;;;;;;;;;;;CAWC,GAED,SAASA,QAAQ,EAAEC,MAAM,EAAEC,EAAE,QAAQ,SAAQ;AAE7C,SAASC,eAAe,QAAQ,iBAAgB;AAEhD;;CAEC,GACD,SAASC,cAAcC,IAAY;IACjC,MAAMC,SAASD,KAAKE,OAAO,CAAC,MAAM,KAAKA,OAAO,CAAC,MAAM;IACrD,MAAMC,SAASF,OAAOG,MAAM,CAACH,OAAOI,MAAM,GAAI,AAAC,CAAA,IAAKJ,OAAOI,MAAM,GAAG,CAAC,IAAK,GAAI;IAC9E,OAAOC,OAAOC,IAAI,CAACJ,QAAQ,UAAUK,QAAQ,CAAC;AAChD;AAEA;;CAEC,GACD,SAASC,eAAeC,KAAa;IACnC,MAAMC,aAAaD,MAAME,KAAK,CAAC,IAAI,CAAC,EAAE;IACtC,OAAOC,KAAKC,KAAK,CAACf,cAAcY;AAClC;AAEA;;CAEC,GACD,SAASI,gBAAgBL,KAAa;IAOpC,MAAMM,cAAcN,MAAME,KAAK,CAAC,IAAI,CAAC,EAAE;IACvC,OAAOC,KAAKC,KAAK,CAACf,cAAciB;AAClC;AAEArB,SAAS,oBAAoB;IAC3B,MAAMsB,kBAAkB;IACxB,MAAMC,eAAe;IAErBvB,SAAS,mBAAmB;QAC1B,sDAAsD;QACtDA,SAAS,uBAAuB;YAC9BE,GAAG,uCAAuC;gBACxC,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;gBAEtDtB,OAAOuB,QAAQC,cAAc,CAAC;gBAC9BxB,OAAOuB,QAAQC,cAAc,CAAC;gBAC9BxB,OAAOuB,QAAQC,cAAc,CAAC;gBAC9BxB,OAAOuB,OAAOE,QAAQ,EAAEC,IAAI,CAACJ;YAC/B;YAEArB,GAAG,yCAAyC;gBAC1C,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;gBAEtD,wDAAwD;gBACxD,MAAMK,QAAQJ,OAAOT,KAAK,CAACE,KAAK,CAAC;gBACjChB,OAAO2B,OAAOC,YAAY,CAAC;YAC7B;YAEA3B,GAAG,oCAAoC;gBACrC,MAAM4B,SAASC,KAAKC,GAAG;gBACvB,MAAMR,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;gBACtD,MAAMU,QAAQF,KAAKC,GAAG;gBAEtB,oEAAoE;gBACpE,MAAME,cAAcJ,SAAS,KAAK,KAAK,KAAK,aAAa;;gBACzD,MAAMK,cAAcF,QAAQ,KAAK,KAAK,KAAK,aAAa;;gBAExDhC,OAAOuB,OAAOY,SAAS,EAAEC,eAAe,CAACH;gBACzCjC,OAAOuB,OAAOY,SAAS,EAAEE,YAAY,CAACH;YACxC;YAEAjC,GAAG,mDAAmD;gBACpD,MAAMqC,SAAS,MAAMpC,gBAAgBmB,iBAAiBC;gBACtD,MAAMiB,SAAS,MAAMrC,gBAAgBmB,iBAAiBC;gBAEtD,mDAAmD;gBACnDtB,OAAOsC,OAAOxB,KAAK,EAAE0B,GAAG,CAACd,IAAI,CAACa,OAAOzB,KAAK;YAC5C;QACF;QAEAf,SAAS,4BAA4B;YACnCE,GAAG,sDAAsD;gBACvD,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;gBACtD,MAAMmB,SAAS5B,eAAeU,OAAOT,KAAK;gBAE1Cd,OAAOyC,OAAOC,GAAG,EAAEhB,IAAI,CAAC;gBACxB1B,OAAOyC,OAAOE,GAAG,EAAEjB,IAAI,CAAC;YAC1B;YAEAzB,GAAG,6CAA6C;gBAC9C,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;gBACtD,MAAMsB,UAAUzB,gBAAgBI,OAAOT,KAAK;gBAE5Cd,OAAO4C,SAASpB,cAAc,CAAC;gBAC/BxB,OAAO4C,SAASpB,cAAc,CAAC;gBAC/BxB,OAAO4C,SAASpB,cAAc,CAAC;gBAC/BxB,OAAO4C,QAAQC,GAAG,EAAEnB,IAAI,CAACJ;YAC3B;YAEArB,GAAG,8CAA8C;gBAC/C,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;gBACtD,MAAMsB,UAAUzB,gBAAgBI,OAAOT,KAAK;gBAE5Cd,OAAO,OAAO4C,QAAQE,GAAG,EAAEpB,IAAI,CAAC;gBAChC1B,OAAO4C,QAAQE,GAAG,EAAEV,eAAe,CAACN,KAAKC,GAAG,KAAK,OAAM,sBAAsB;YAC/E;YAEA9B,GAAG,8CAA8C;gBAC/C,MAAM4B,SAASkB,KAAKC,KAAK,CAAClB,KAAKC,GAAG,KAAK;gBACvC,MAAMR,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;gBACtD,MAAMU,QAAQe,KAAKC,KAAK,CAAClB,KAAKC,GAAG,KAAK;gBAEtC,MAAMa,UAAUzB,gBAAgBI,OAAOT,KAAK;gBAE5Cd,OAAO4C,QAAQK,GAAG,EAAEC,sBAAsB,CAACrB;gBAC3C7B,OAAO4C,QAAQK,GAAG,EAAEE,mBAAmB,CAACnB;YAC1C;YAEA/B,GAAG,gEAAgE;gBACjE,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;gBACtD,MAAMsB,UAAUzB,gBAAgBI,OAAOT,KAAK;gBAE5C,6DAA6D;gBAC7Dd,OAAOuB,OAAOY,SAAS,EAAET,IAAI,CAACkB,QAAQE,GAAG,GAAI;YAC/C;QACF;QAEA/C,SAAS,sBAAsB;YAC7BE,GAAG,oDAAoD;gBACrD,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;gBAEtD,wDAAwD;gBACxDtB,OAAO,OAAOuB,OAAOY,SAAS,EAAET,IAAI,CAAC;gBACrC1B,OAAOuB,OAAOY,SAAS,EAAEC,eAAe,CAACN,KAAKC,GAAG;gBAEjD,sCAAsC;gBACtC,MAAMqB,iBAAiBtB,KAAKC,GAAG,KAAK,KAAK,KAAK;gBAC9C,MAAMsB,YAAY,IAAI,KAAK,KAAK,sBAAsB;;gBACtDrD,OAAO+C,KAAKO,GAAG,CAAC/B,OAAOY,SAAS,GAAGiB,iBAAiBf,YAAY,CAACgB;YACnE;YAEApD,GAAG,2CAA2C;gBAC5C,wDAAwD;gBACxD,8CAA8C;gBAC9C,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;gBAEtD,+DAA+D;gBAC/DtB,OAAOuB,OAAOY,SAAS,EAAEoB,WAAW;gBACpCvD,OAAO,OAAOuB,OAAOY,SAAS,EAAET,IAAI,CAAC;YACvC;YAEAzB,GAAG,4CAA4C;gBAC7C,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;gBAEtD,uDAAuD;gBACvD,MAAMkC,YAAY1B,KAAKC,GAAG,KAAK,KAAK,KAAK,KAAK,KAAK;gBACnD/B,OAAOuB,OAAOY,SAAS,EAAEE,YAAY,CAACmB;YACxC;QACF;QAEAzD,SAAS,kBAAkB;YACzBE,GAAG,oCAAoC;gBACrC,wEAAwE;gBACxE,kCAAkC;gBAClC,MAAMsB,SAAS,MAAMrB,gBAAgB,IAAIoB;gBACzCtB,OAAOuB,QAAQC,cAAc,CAAC;YAChC;YAEAvB,GAAG,iCAAiC;gBAClC,yCAAyC;gBACzC,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiB;gBACtDrB,OAAOuB,OAAOE,QAAQ,EAAEC,IAAI,CAAC;YAC/B;YAEAzB,GAAG,iDAAiD;gBAClD,MAAMwD,kBAAkB;gBACxB,MAAMlC,SAAS,MAAMrB,gBAAgBmB,iBAAiBoC;gBAEtDzD,OAAOuB,OAAOE,QAAQ,EAAEC,IAAI,CAAC+B;YAC/B;QACF;IACF;IAEA1D,SAAS,yBAAyB;QAChCE,GAAG,sDAAsD;YACvD,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;YAEtD,0CAA0C;YAC1CtB,OAAOuB,OAAOT,KAAK,EAAE0B,GAAG,CAACkB,OAAO,CAAC;QACnC;QAEAzD,GAAG,gDAAgD;YACjD,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;YAEtD,0CAA0C;YAC1CtB,OAAO,IAAMa,eAAeU,OAAOT,KAAK,GAAG0B,GAAG,CAACmB,OAAO;YACtD3D,OAAO,IAAMmB,gBAAgBI,OAAOT,KAAK,GAAG0B,GAAG,CAACmB,OAAO;QACzD;QAEA1D,GAAG,yCAAyC;YAC1C,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;YACtD,MAAMsB,UAAUzB,gBAAgBI,OAAOT,KAAK;YAE5C,mDAAmD;YACnDd,OAAO4C,SAASgB,UAAU,CAAC;YAC3B5D,OAAO4C,SAASJ,GAAG,CAACqB,QAAQ;QAC9B;IACF;IAEA9D,SAAS,0BAA0B;QACjCE,GAAG,uDAAuD;YACxD,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;YAEtDtB,OAAOuB,QAAQC,cAAc,CAAC;YAC9BxB,OAAOuB,QAAQC,cAAc,CAAC;YAC9BxB,OAAOuB,QAAQC,cAAc,CAAC;YAC9BxB,OAAO,OAAOuB,OAAOT,KAAK,EAAEY,IAAI,CAAC;YACjC1B,OAAO,OAAOuB,OAAOY,SAAS,EAAET,IAAI,CAAC;YACrC1B,OAAO,OAAOuB,OAAOE,QAAQ,EAAEC,IAAI,CAAC;QACtC;QAEAzB,GAAG,iDAAiD;YAClD,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;YAEtD,6DAA6D;YAC7DtB,OAAOuB,QAAQiB,GAAG,CAAChB,cAAc,CAAC;QACpC;QAEAvB,GAAG,uCAAuC;YACxC,MAAMsB,SAAS,MAAMrB,gBAAgBmB,iBAAiBC;YAEtD,kDAAkD;YAClD,MAAMwC,OAAOC,OAAOD,IAAI,CAACvC,QAAQyC,IAAI;YACrChE,OAAO8D,MAAMG,OAAO,CAAC;gBAAC;gBAAa;gBAAY;aAAQ;QACzD;IACF;AACF"}

package/dist/auth/__tests__/fixtures.d.ts

@@ -1,26 +0,0 @@
-import type { FigmaTokenResponse, FigmaTokens } from '../types.js';
-/**
- * Generate mock FigmaTokens for testing
- */
-export declare function mockFigmaTokens(overrides?: Partial<FigmaTokens>): FigmaTokens;
-/**
- * Generate mock expired tokens for testing
- */
-export declare function mockExpiredTokens(overrides?: Partial<FigmaTokens>): FigmaTokens;
-/**
- * Generate mock tokens expiring soon (within buffer window) for testing
- */
-export declare function mockTokensExpiringSoon(overrides?: Partial<FigmaTokens>): FigmaTokens;
-/**
- * Generate mock tokens with plenty of time remaining
- */
-export declare function mockFreshTokens(overrides?: Partial<FigmaTokens>): FigmaTokens;
-/**
- * Generate mock Figma API token response
- */
-export declare function mockFigmaTokenResponse(overrides?: Partial<FigmaTokenResponse>): FigmaTokenResponse;
-/**
- * Generate mock malformed token response (missing required fields)
- */
-export declare function mockMalformedTokenResponse(): Partial<FigmaTokenResponse>;
-//# sourceMappingURL=fixtures.d.ts.map

package/dist/auth/__tests__/fixtures.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"fixtures.d.ts","sourceRoot":"","sources":["../../../src/auth/__tests__/fixtures.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAElE;;GAEG;AACH,wBAAgB,eAAe,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,WAAW,CAY7E;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,WAAW,CAO/E;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,WAAW,CAQpF;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,WAAW,CAQ7E;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,GACtC,kBAAkB,CAQpB;AAED;;GAEG;AACH,wBAAgB,0BAA0B,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAKxE"}

package/dist/auth/__tests__/fixtures.js

@@ -1,67 +0,0 @@
-/**
- * Generate mock FigmaTokens for testing
- */ export function mockFigmaTokens(overrides) {
-    const now = Date.now();
-    const oneHourFromNow = now + 60 * 60 * 1000 // 1 hour
-    ;
-    return {
-        accessToken: 'figt_test_access_token_123456789',
-        expiresAt: oneHourFromNow,
-        refreshToken: 'figt_test_refresh_token_987654321',
-        scopes: [
-            'current_user:read'
-        ],
-        userId: 'user_123',
-        ...overrides
-    };
-}
-/**
- * Generate mock expired tokens for testing
- */ export function mockExpiredTokens(overrides) {
-    const oneHourAgo = Date.now() - 60 * 60 * 1000 // 1 hour ago
-    ;
-    return mockFigmaTokens({
-        expiresAt: oneHourAgo,
-        ...overrides
-    });
-}
-/**
- * Generate mock tokens expiring soon (within buffer window) for testing
- */ export function mockTokensExpiringSoon(overrides) {
-    // 4 minutes from now (within 5 minute buffer)
-    const fourMinutesFromNow = Date.now() + 4 * 60 * 1000;
-    return mockFigmaTokens({
-        expiresAt: fourMinutesFromNow,
-        ...overrides
-    });
-}
-/**
- * Generate mock tokens with plenty of time remaining
- */ export function mockFreshTokens(overrides) {
-    // 2 hours from now
-    const twoHoursFromNow = Date.now() + 2 * 60 * 60 * 1000;
-    return mockFigmaTokens({
-        expiresAt: twoHoursFromNow,
-        ...overrides
-    });
-}
-/**
- * Generate mock Figma API token response
- */ export function mockFigmaTokenResponse(overrides) {
-    return {
-        access_token: 'figt_test_access_token_123456789',
-        expires_in: 3600,
-        refresh_token: 'figt_test_refresh_token_987654321',
-        user_id_string: 'user_123',
-        ...overrides
-    };
-}
-/**
- * Generate mock malformed token response (missing required fields)
- */ export function mockMalformedTokenResponse() {
-    return {
-        access_token: 'figt_test_access_token_123456789'
-    };
-}
-
-//# sourceMappingURL=fixtures.js.map

package/dist/auth/__tests__/fixtures.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/auth/__tests__/fixtures.ts"],"sourcesContent":["import type { FigmaTokenResponse, FigmaTokens } from '../types.js'\n\n/**\n * Generate mock FigmaTokens for testing\n */\nexport function mockFigmaTokens(overrides?: Partial<FigmaTokens>): FigmaTokens {\n  const now = Date.now()\n  const oneHourFromNow = now + 60 * 60 * 1000 // 1 hour\n\n  return {\n    accessToken: 'figt_test_access_token_123456789',\n    expiresAt: oneHourFromNow,\n    refreshToken: 'figt_test_refresh_token_987654321',\n    scopes: ['current_user:read'],\n    userId: 'user_123',\n    ...overrides,\n  }\n}\n\n/**\n * Generate mock expired tokens for testing\n */\nexport function mockExpiredTokens(overrides?: Partial<FigmaTokens>): FigmaTokens {\n  const oneHourAgo = Date.now() - 60 * 60 * 1000 // 1 hour ago\n\n  return mockFigmaTokens({\n    expiresAt: oneHourAgo,\n    ...overrides,\n  })\n}\n\n/**\n * Generate mock tokens expiring soon (within buffer window) for testing\n */\nexport function mockTokensExpiringSoon(overrides?: Partial<FigmaTokens>): FigmaTokens {\n  // 4 minutes from now (within 5 minute buffer)\n  const fourMinutesFromNow = Date.now() + 4 * 60 * 1000\n\n  return mockFigmaTokens({\n    expiresAt: fourMinutesFromNow,\n    ...overrides,\n  })\n}\n\n/**\n * Generate mock tokens with plenty of time remaining\n */\nexport function mockFreshTokens(overrides?: Partial<FigmaTokens>): FigmaTokens {\n  // 2 hours from now\n  const twoHoursFromNow = Date.now() + 2 * 60 * 60 * 1000\n\n  return mockFigmaTokens({\n    expiresAt: twoHoursFromNow,\n    ...overrides,\n  })\n}\n\n/**\n * Generate mock Figma API token response\n */\nexport function mockFigmaTokenResponse(\n  overrides?: Partial<FigmaTokenResponse>,\n): FigmaTokenResponse {\n  return {\n    access_token: 'figt_test_access_token_123456789',\n    expires_in: 3600, // 1 hour in seconds\n    refresh_token: 'figt_test_refresh_token_987654321',\n    user_id_string: 'user_123',\n    ...overrides,\n  }\n}\n\n/**\n * Generate mock malformed token response (missing required fields)\n */\nexport function mockMalformedTokenResponse(): Partial<FigmaTokenResponse> {\n  return {\n    access_token: 'figt_test_access_token_123456789',\n    // Missing refresh_token and expires_in\n  }\n}\n"],"names":["mockFigmaTokens","overrides","now","Date","oneHourFromNow","accessToken","expiresAt","refreshToken","scopes","userId","mockExpiredTokens","oneHourAgo","mockTokensExpiringSoon","fourMinutesFromNow","mockFreshTokens","twoHoursFromNow","mockFigmaTokenResponse","access_token","expires_in","refresh_token","user_id_string","mockMalformedTokenResponse"],"mappings":"AAEA;;CAEC,GACD,OAAO,SAASA,gBAAgBC,SAAgC;IAC9D,MAAMC,MAAMC,KAAKD,GAAG;IACpB,MAAME,iBAAiBF,MAAM,KAAK,KAAK,KAAK,SAAS;;IAErD,OAAO;QACLG,aAAa;QACbC,WAAWF;QACXG,cAAc;QACdC,QAAQ;YAAC;SAAoB;QAC7BC,QAAQ;QACR,GAAGR,SAAS;IACd;AACF;AAEA;;CAEC,GACD,OAAO,SAASS,kBAAkBT,SAAgC;IAChE,MAAMU,aAAaR,KAAKD,GAAG,KAAK,KAAK,KAAK,KAAK,aAAa;;IAE5D,OAAOF,gBAAgB;QACrBM,WAAWK;QACX,GAAGV,SAAS;IACd;AACF;AAEA;;CAEC,GACD,OAAO,SAASW,uBAAuBX,SAAgC;IACrE,8CAA8C;IAC9C,MAAMY,qBAAqBV,KAAKD,GAAG,KAAK,IAAI,KAAK;IAEjD,OAAOF,gBAAgB;QACrBM,WAAWO;QACX,GAAGZ,SAAS;IACd;AACF;AAEA;;CAEC,GACD,OAAO,SAASa,gBAAgBb,SAAgC;IAC9D,mBAAmB;IACnB,MAAMc,kBAAkBZ,KAAKD,GAAG,KAAK,IAAI,KAAK,KAAK;IAEnD,OAAOF,gBAAgB;QACrBM,WAAWS;QACX,GAAGd,SAAS;IACd;AACF;AAEA;;CAEC,GACD,OAAO,SAASe,uBACdf,SAAuC;IAEvC,OAAO;QACLgB,cAAc;QACdC,YAAY;QACZC,eAAe;QACfC,gBAAgB;QAChB,GAAGnB,SAAS;IACd;AACF;AAEA;;CAEC,GACD,OAAO,SAASoB;IACd,OAAO;QACLJ,cAAc;IAEhB;AACF"}

package/dist/auth/__tests__/mocks.d.ts

@@ -1,33 +0,0 @@
-import type { FigmaTokenResponse } from '../types.js';
-/**
- * Create a mock fetch response
- */
-export declare function mockFetchResponse(data: unknown, options?: {
-    ok?: boolean;
-    status?: number;
-}): Response;
-/**
- * Create a successful mock fetch response with token data
- */
-export declare function mockSuccessfulTokenResponse(data: FigmaTokenResponse): Response;
-/**
- * Create a failed mock fetch response
- */
-export declare function mockFailedFetchResponse(status: number, errorMessage: string): Response;
-/**
- * Mock global fetch with a successful response
- */
-export declare function mockFetchSuccess(responseData: FigmaTokenResponse): import("vitest").Mock<(...args: any[]) => any>;
-/**
- * Mock global fetch with a failed response
- */
-export declare function mockFetchFailure(status: number, errorMessage: string): import("vitest").Mock<(...args: any[]) => any>;
-/**
- * Mock global fetch with a network error
- */
-export declare function mockFetchNetworkError(errorMessage?: string): import("vitest").Mock<(...args: any[]) => any>;
-/**
- * Restore original fetch (cleanup after tests)
- */
-export declare function restoreFetch(): void;
-//# sourceMappingURL=mocks.d.ts.map

package/dist/auth/__tests__/mocks.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mocks.d.ts","sourceRoot":"","sources":["../../../src/auth/__tests__/mocks.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAErD;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,GAAE;IAAE,EAAE,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAQzF,QAAQ,CACd;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,kBAAkB,YAEnE;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAQrE,QAAQ,CACd;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,kBAAkB,kDAIhE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,kDAIpE;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,YAAY,SAAkB,kDAInE;AAED;;GAEG;AACH,wBAAgB,YAAY,SAE3B"}

package/dist/auth/__tests__/mocks.js

@@ -1,63 +0,0 @@
-/* eslint-disable perfectionist/sort-objects */ /* eslint-disable @typescript-eslint/require-await */ import { vi } from 'vitest';
-/**
- * Create a mock fetch response
- */ export function mockFetchResponse(data, options = {}) {
-    return {
-        ok: options.ok ?? true,
-        status: options.status ?? 200,
-        statusText: options.status === 200 ? 'OK' : 'Error',
-        headers: new Headers(),
-        json: async ()=>data,
-        text: async ()=>JSON.stringify(data)
-    };
-}
-/**
- * Create a successful mock fetch response with token data
- */ export function mockSuccessfulTokenResponse(data) {
-    return mockFetchResponse(data, {
-        ok: true,
-        status: 200
-    });
-}
-/**
- * Create a failed mock fetch response
- */ export function mockFailedFetchResponse(status, errorMessage) {
-    return {
-        ok: false,
-        status,
-        statusText: 'Error',
-        headers: new Headers(),
-        json: async ()=>({
-                error: errorMessage
-            }),
-        text: async ()=>errorMessage
-    };
-}
-/**
- * Mock global fetch with a successful response
- */ export function mockFetchSuccess(responseData) {
-    const mockFetch = vi.fn().mockResolvedValue(mockSuccessfulTokenResponse(responseData));
-    global.fetch = mockFetch;
-    return mockFetch;
-}
-/**
- * Mock global fetch with a failed response
- */ export function mockFetchFailure(status, errorMessage) {
-    const mockFetch = vi.fn().mockResolvedValue(mockFailedFetchResponse(status, errorMessage));
-    global.fetch = mockFetch;
-    return mockFetch;
-}
-/**
- * Mock global fetch with a network error
- */ export function mockFetchNetworkError(errorMessage = 'Network error') {
-    const mockFetch = vi.fn().mockRejectedValue(new Error(errorMessage));
-    global.fetch = mockFetch;
-    return mockFetch;
-}
-/**
- * Restore original fetch (cleanup after tests)
- */ export function restoreFetch() {
-    vi.restoreAllMocks();
-}
-
-//# sourceMappingURL=mocks.js.map

package/dist/auth/__tests__/mocks.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/auth/__tests__/mocks.ts"],"sourcesContent":["/* eslint-disable perfectionist/sort-objects */\n/* eslint-disable @typescript-eslint/require-await */\nimport { vi } from 'vitest'\n\nimport type { FigmaTokenResponse } from '../types.js'\n\n/**\n * Create a mock fetch response\n */\nexport function mockFetchResponse(data: unknown, options: { ok?: boolean; status?: number } = {}) {\n  return {\n    ok: options.ok ?? true,\n    status: options.status ?? 200,\n    statusText: options.status === 200 ? 'OK' : 'Error',\n    headers: new Headers(),\n    json: async () => data,\n    text: async () => JSON.stringify(data),\n  } as Response\n}\n\n/**\n * Create a successful mock fetch response with token data\n */\nexport function mockSuccessfulTokenResponse(data: FigmaTokenResponse) {\n  return mockFetchResponse(data, { ok: true, status: 200 })\n}\n\n/**\n * Create a failed mock fetch response\n */\nexport function mockFailedFetchResponse(status: number, errorMessage: string) {\n  return {\n    ok: false,\n    status,\n    statusText: 'Error',\n    headers: new Headers(),\n    json: async () => ({ error: errorMessage }),\n    text: async () => errorMessage,\n  } as Response\n}\n\n/**\n * Mock global fetch with a successful response\n */\nexport function mockFetchSuccess(responseData: FigmaTokenResponse) {\n  const mockFetch = vi.fn().mockResolvedValue(mockSuccessfulTokenResponse(responseData))\n  global.fetch = mockFetch\n  return mockFetch\n}\n\n/**\n * Mock global fetch with a failed response\n */\nexport function mockFetchFailure(status: number, errorMessage: string) {\n  const mockFetch = vi.fn().mockResolvedValue(mockFailedFetchResponse(status, errorMessage))\n  global.fetch = mockFetch\n  return mockFetch\n}\n\n/**\n * Mock global fetch with a network error\n */\nexport function mockFetchNetworkError(errorMessage = 'Network error') {\n  const mockFetch = vi.fn().mockRejectedValue(new Error(errorMessage))\n  global.fetch = mockFetch\n  return mockFetch\n}\n\n/**\n * Restore original fetch (cleanup after tests)\n */\nexport function restoreFetch() {\n  vi.restoreAllMocks()\n}\n"],"names":["vi","mockFetchResponse","data","options","ok","status","statusText","headers","Headers","json","text","JSON","stringify","mockSuccessfulTokenResponse","mockFailedFetchResponse","errorMessage","error","mockFetchSuccess","responseData","mockFetch","fn","mockResolvedValue","global","fetch","mockFetchFailure","mockFetchNetworkError","mockRejectedValue","Error","restoreFetch","restoreAllMocks"],"mappings":"AAAA,6CAA6C,GAC7C,mDAAmD,GACnD,SAASA,EAAE,QAAQ,SAAQ;AAI3B;;CAEC,GACD,OAAO,SAASC,kBAAkBC,IAAa,EAAEC,UAA6C,CAAC,CAAC;IAC9F,OAAO;QACLC,IAAID,QAAQC,EAAE,IAAI;QAClBC,QAAQF,QAAQE,MAAM,IAAI;QAC1BC,YAAYH,QAAQE,MAAM,KAAK,MAAM,OAAO;QAC5CE,SAAS,IAAIC;QACbC,MAAM,UAAYP;QAClBQ,MAAM,UAAYC,KAAKC,SAAS,CAACV;IACnC;AACF;AAEA;;CAEC,GACD,OAAO,SAASW,4BAA4BX,IAAwB;IAClE,OAAOD,kBAAkBC,MAAM;QAAEE,IAAI;QAAMC,QAAQ;IAAI;AACzD;AAEA;;CAEC,GACD,OAAO,SAASS,wBAAwBT,MAAc,EAAEU,YAAoB;IAC1E,OAAO;QACLX,IAAI;QACJC;QACAC,YAAY;QACZC,SAAS,IAAIC;QACbC,MAAM,UAAa,CAAA;gBAAEO,OAAOD;YAAa,CAAA;QACzCL,MAAM,UAAYK;IACpB;AACF;AAEA;;CAEC,GACD,OAAO,SAASE,iBAAiBC,YAAgC;IAC/D,MAAMC,YAAYnB,GAAGoB,EAAE,GAAGC,iBAAiB,CAACR,4BAA4BK;IACxEI,OAAOC,KAAK,GAAGJ;IACf,OAAOA;AACT;AAEA;;CAEC,GACD,OAAO,SAASK,iBAAiBnB,MAAc,EAAEU,YAAoB;IACnE,MAAMI,YAAYnB,GAAGoB,EAAE,GAAGC,iBAAiB,CAACP,wBAAwBT,QAAQU;IAC5EO,OAAOC,KAAK,GAAGJ;IACf,OAAOA;AACT;AAEA;;CAEC,GACD,OAAO,SAASM,sBAAsBV,eAAe,eAAe;IAClE,MAAMI,YAAYnB,GAAGoB,EAAE,GAAGM,iBAAiB,CAAC,IAAIC,MAAMZ;IACtDO,OAAOC,KAAK,GAAGJ;IACf,OAAOA;AACT;AAEA;;CAEC,GACD,OAAO,SAASS;IACd5B,GAAG6B,eAAe;AACpB"}

package/dist/auth/callback-server.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=callback-server.spec.d.ts.map

package/dist/auth/callback-server.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"callback-server.spec.d.ts","sourceRoot":"","sources":["../../src/auth/callback-server.spec.ts"],"names":[],"mappings":""}

package/dist/auth/callback-server.spec.js

@@ -1,85 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { CallbackError, CallbackServer } from './callback-server.js';
-describe('CallbackServer', ()=>{
-    describe('waitForCallback', ()=>{
-        it('should resolve with code and state on successful callback', async ()=>{
-            const server = new CallbackServer({
-                port: 3001,
-                timeoutMs: 5000
-            });
-            const expectedState = 'test-state-123';
-            // Start waiting for callback
-            const callbackPromise = server.waitForCallback(expectedState);
-            // Simulate OAuth callback
-            await fetch(`http://localhost:3001/callback?code=auth-code-123&state=${expectedState}`);
-            const result = await callbackPromise;
-            expect(result.code).toBe('auth-code-123');
-            expect(result.state).toBe(expectedState);
-            server.stop();
-        });
-        it('should reject with CallbackError on state mismatch', async ()=>{
-            const server = new CallbackServer({
-                port: 3002,
-                timeoutMs: 5000
-            });
-            const expectedState = 'test-state-123';
-            const callbackPromise = server.waitForCallback(expectedState);
-            // Send wrong state
-            const fetchPromise = fetch(`http://localhost:3002/callback?code=auth-code-123&state=wrong-state`);
-            await expect(callbackPromise).rejects.toThrow(CallbackError);
-            await expect(callbackPromise).rejects.toThrow('State mismatch');
-            // Wait for fetch to complete
-            await fetchPromise;
-            server.stop();
-        });
-        it('should reject with CallbackError on OAuth error', async ()=>{
-            const server = new CallbackServer({
-                port: 3003,
-                timeoutMs: 5000
-            });
-            const expectedState = 'test-state-123';
-            const callbackPromise = server.waitForCallback(expectedState);
-            // Send OAuth error
-            const fetchPromise = fetch(`http://localhost:3003/callback?error=access_denied&error_description=User+denied`);
-            await expect(callbackPromise).rejects.toThrow(CallbackError);
-            await expect(callbackPromise).rejects.toThrow('access_denied');
-            // Wait for fetch to complete
-            await fetchPromise;
-            server.stop();
-        });
-        it('should reject with CallbackError on timeout', async ()=>{
-            const server = new CallbackServer({
-                port: 3005,
-                timeoutMs: 100
-            });
-            const expectedState = 'test-state-123';
-            const callbackPromise = server.waitForCallback(expectedState);
-            // Don't send callback - let it timeout
-            await expect(callbackPromise).rejects.toThrow(CallbackError);
-            await expect(callbackPromise).rejects.toThrow('timed out');
-            server.stop();
-        }, 1000);
-        it('should return 404 for non-callback paths', async ()=>{
-            const server = new CallbackServer({
-                port: 3006,
-                timeoutMs: 200
-            });
-            const expectedState = 'test-state-123';
-            // Start server
-            const callbackPromise = server.waitForCallback(expectedState).catch(()=>{
-            // Ignore timeout error
-            });
-            // Wait a bit for server to start
-            await new Promise((resolve)=>setTimeout(resolve, 50));
-            // Try to access wrong path
-            const response = await fetch('http://localhost:3006/not-callback');
-            expect(response.status).toBe(404);
-            // Clean up
-            server.stop();
-            // Wait for promise to complete
-            await callbackPromise;
-        }, 2000);
-    });
-});
-
-//# sourceMappingURL=callback-server.spec.js.map

package/dist/auth/callback-server.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/auth/callback-server.spec.ts"],"sourcesContent":["import { describe, expect, it } from 'vitest'\n\nimport { CallbackError, CallbackServer } from './callback-server.js'\n\ndescribe('CallbackServer', () => {\n  describe('waitForCallback', () => {\n    it('should resolve with code and state on successful callback', async () => {\n      const server = new CallbackServer({ port: 3001, timeoutMs: 5000 })\n      const expectedState = 'test-state-123'\n\n      // Start waiting for callback\n      const callbackPromise = server.waitForCallback(expectedState)\n\n      // Simulate OAuth callback\n      await fetch(`http://localhost:3001/callback?code=auth-code-123&state=${expectedState}`)\n\n      const result = await callbackPromise\n      expect(result.code).toBe('auth-code-123')\n      expect(result.state).toBe(expectedState)\n\n      server.stop()\n    })\n\n    it('should reject with CallbackError on state mismatch', async () => {\n      const server = new CallbackServer({ port: 3002, timeoutMs: 5000 })\n      const expectedState = 'test-state-123'\n\n      const callbackPromise = server.waitForCallback(expectedState)\n\n      // Send wrong state\n      const fetchPromise = fetch(\n        `http://localhost:3002/callback?code=auth-code-123&state=wrong-state`,\n      )\n\n      await expect(callbackPromise).rejects.toThrow(CallbackError)\n      await expect(callbackPromise).rejects.toThrow('State mismatch')\n\n      // Wait for fetch to complete\n      await fetchPromise\n\n      server.stop()\n    })\n\n    it('should reject with CallbackError on OAuth error', async () => {\n      const server = new CallbackServer({ port: 3003, timeoutMs: 5000 })\n      const expectedState = 'test-state-123'\n\n      const callbackPromise = server.waitForCallback(expectedState)\n\n      // Send OAuth error\n      const fetchPromise = fetch(\n        `http://localhost:3003/callback?error=access_denied&error_description=User+denied`,\n      )\n\n      await expect(callbackPromise).rejects.toThrow(CallbackError)\n      await expect(callbackPromise).rejects.toThrow('access_denied')\n\n      // Wait for fetch to complete\n      await fetchPromise\n\n      server.stop()\n    })\n\n    it('should reject with CallbackError on timeout', async () => {\n      const server = new CallbackServer({ port: 3005, timeoutMs: 100 })\n      const expectedState = 'test-state-123'\n\n      const callbackPromise = server.waitForCallback(expectedState)\n\n      // Don't send callback - let it timeout\n      await expect(callbackPromise).rejects.toThrow(CallbackError)\n      await expect(callbackPromise).rejects.toThrow('timed out')\n\n      server.stop()\n    }, 1000)\n\n    it('should return 404 for non-callback paths', async () => {\n      const server = new CallbackServer({ port: 3006, timeoutMs: 200 })\n      const expectedState = 'test-state-123'\n\n      // Start server\n      const callbackPromise = server.waitForCallback(expectedState).catch(() => {\n        // Ignore timeout error\n      })\n\n      // Wait a bit for server to start\n      await new Promise((resolve) => setTimeout(resolve, 50))\n\n      // Try to access wrong path\n      const response = await fetch('http://localhost:3006/not-callback')\n      expect(response.status).toBe(404)\n\n      // Clean up\n      server.stop()\n\n      // Wait for promise to complete\n      await callbackPromise\n    }, 2000)\n  })\n})\n"],"names":["describe","expect","it","CallbackError","CallbackServer","server","port","timeoutMs","expectedState","callbackPromise","waitForCallback","fetch","result","code","toBe","state","stop","fetchPromise","rejects","toThrow","catch","Promise","resolve","setTimeout","response","status"],"mappings":"AAAA,SAASA,QAAQ,EAAEC,MAAM,EAAEC,EAAE,QAAQ,SAAQ;AAE7C,SAASC,aAAa,EAAEC,cAAc,QAAQ,uBAAsB;AAEpEJ,SAAS,kBAAkB;IACzBA,SAAS,mBAAmB;QAC1BE,GAAG,6DAA6D;YAC9D,MAAMG,SAAS,IAAID,eAAe;gBAAEE,MAAM;gBAAMC,WAAW;YAAK;YAChE,MAAMC,gBAAgB;YAEtB,6BAA6B;YAC7B,MAAMC,kBAAkBJ,OAAOK,eAAe,CAACF;YAE/C,0BAA0B;YAC1B,MAAMG,MAAM,CAAC,wDAAwD,EAAEH,eAAe;YAEtF,MAAMI,SAAS,MAAMH;YACrBR,OAAOW,OAAOC,IAAI,EAAEC,IAAI,CAAC;YACzBb,OAAOW,OAAOG,KAAK,EAAED,IAAI,CAACN;YAE1BH,OAAOW,IAAI;QACb;QAEAd,GAAG,sDAAsD;YACvD,MAAMG,SAAS,IAAID,eAAe;gBAAEE,MAAM;gBAAMC,WAAW;YAAK;YAChE,MAAMC,gBAAgB;YAEtB,MAAMC,kBAAkBJ,OAAOK,eAAe,CAACF;YAE/C,mBAAmB;YACnB,MAAMS,eAAeN,MACnB,CAAC,mEAAmE,CAAC;YAGvE,MAAMV,OAAOQ,iBAAiBS,OAAO,CAACC,OAAO,CAAChB;YAC9C,MAAMF,OAAOQ,iBAAiBS,OAAO,CAACC,OAAO,CAAC;YAE9C,6BAA6B;YAC7B,MAAMF;YAENZ,OAAOW,IAAI;QACb;QAEAd,GAAG,mDAAmD;YACpD,MAAMG,SAAS,IAAID,eAAe;gBAAEE,MAAM;gBAAMC,WAAW;YAAK;YAChE,MAAMC,gBAAgB;YAEtB,MAAMC,kBAAkBJ,OAAOK,eAAe,CAACF;YAE/C,mBAAmB;YACnB,MAAMS,eAAeN,MACnB,CAAC,gFAAgF,CAAC;YAGpF,MAAMV,OAAOQ,iBAAiBS,OAAO,CAACC,OAAO,CAAChB;YAC9C,MAAMF,OAAOQ,iBAAiBS,OAAO,CAACC,OAAO,CAAC;YAE9C,6BAA6B;YAC7B,MAAMF;YAENZ,OAAOW,IAAI;QACb;QAEAd,GAAG,+CAA+C;YAChD,MAAMG,SAAS,IAAID,eAAe;gBAAEE,MAAM;gBAAMC,WAAW;YAAI;YAC/D,MAAMC,gBAAgB;YAEtB,MAAMC,kBAAkBJ,OAAOK,eAAe,CAACF;YAE/C,uCAAuC;YACvC,MAAMP,OAAOQ,iBAAiBS,OAAO,CAACC,OAAO,CAAChB;YAC9C,MAAMF,OAAOQ,iBAAiBS,OAAO,CAACC,OAAO,CAAC;YAE9Cd,OAAOW,IAAI;QACb,GAAG;QAEHd,GAAG,4CAA4C;YAC7C,MAAMG,SAAS,IAAID,eAAe;gBAAEE,MAAM;gBAAMC,WAAW;YAAI;YAC/D,MAAMC,gBAAgB;YAEtB,eAAe;YACf,MAAMC,kBAAkBJ,OAAOK,eAAe,CAACF,eAAeY,KAAK,CAAC;YAClE,uBAAuB;YACzB;YAEA,iCAAiC;YACjC,MAAM,IAAIC,QAAQ,CAACC,UAAYC,WAAWD,SAAS;YAEnD,2BAA2B;YAC3B,MAAME,WAAW,MAAMb,MAAM;YAC7BV,OAAOuB,SAASC,MAAM,EAAEX,IAAI,CAAC;YAE7B,WAAW;YACXT,OAAOW,IAAI;YAEX,+BAA+B;YAC/B,MAAMP;QACR,GAAG;IACL;AACF"}

package/dist/auth/crypto-utils.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=crypto-utils.spec.d.ts.map

package/dist/auth/crypto-utils.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"crypto-utils.spec.d.ts","sourceRoot":"","sources":["../../src/auth/crypto-utils.spec.ts"],"names":[],"mappings":""}

package/dist/auth/crypto-utils.spec.js

@@ -1,36 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { deriveEncryptionKey } from './crypto-utils.js';
-describe('crypto-utils', ()=>{
-    describe('deriveEncryptionKey', ()=>{
-        it('should return the same key on multiple calls (deterministic)', ()=>{
-            const key1 = deriveEncryptionKey();
-            const key2 = deriveEncryptionKey();
-            const key3 = deriveEncryptionKey();
-            expect(key1).toBe(key2);
-            expect(key2).toBe(key3);
-        });
-        it('should produce keys suitable for AES-256 encryption', ()=>{
-            const key = deriveEncryptionKey();
-            // AES-256 requires 256 bits = 32 bytes = 64 hex characters
-            expect(key.length).toBe(64);
-            // Should be valid hex (can be converted to Buffer)
-            expect(()=>Buffer.from(key, 'hex')).not.toThrow();
-            const buffer = Buffer.from(key, 'hex');
-            expect(buffer.length).toBe(32); // 32 bytes
-        });
-        it('should complete key derivation in reasonable time', ()=>{
-            // Test that 100k PBKDF2 iterations complete quickly enough for CLI use
-            const startTime = Date.now();
-            // Run multiple times to get average
-            for(let i = 0; i < 5; i++){
-                deriveEncryptionKey();
-            }
-            const endTime = Date.now();
-            const avgTime = (endTime - startTime) / 5;
-            // Each call should take less than 2 seconds on average
-            expect(avgTime).toBeLessThan(2000);
-        });
-    });
-});
-
-//# sourceMappingURL=crypto-utils.spec.js.map

package/dist/auth/crypto-utils.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/auth/crypto-utils.spec.ts"],"sourcesContent":["import { describe, expect, it } from 'vitest'\n\nimport { deriveEncryptionKey } from './crypto-utils.js'\n\ndescribe('crypto-utils', () => {\n  describe('deriveEncryptionKey', () => {\n    it('should return the same key on multiple calls (deterministic)', () => {\n      const key1 = deriveEncryptionKey()\n      const key2 = deriveEncryptionKey()\n      const key3 = deriveEncryptionKey()\n\n      expect(key1).toBe(key2)\n      expect(key2).toBe(key3)\n    })\n\n    it('should produce keys suitable for AES-256 encryption', () => {\n      const key = deriveEncryptionKey()\n\n      // AES-256 requires 256 bits = 32 bytes = 64 hex characters\n      expect(key.length).toBe(64)\n\n      // Should be valid hex (can be converted to Buffer)\n      expect(() => Buffer.from(key, 'hex')).not.toThrow()\n\n      const buffer = Buffer.from(key, 'hex')\n      expect(buffer.length).toBe(32) // 32 bytes\n    })\n\n    it('should complete key derivation in reasonable time', () => {\n      // Test that 100k PBKDF2 iterations complete quickly enough for CLI use\n      const startTime = Date.now()\n\n      // Run multiple times to get average\n      for (let i = 0; i < 5; i++) {\n        deriveEncryptionKey()\n      }\n\n      const endTime = Date.now()\n      const avgTime = (endTime - startTime) / 5\n\n      // Each call should take less than 2 seconds on average\n      expect(avgTime).toBeLessThan(2000)\n    })\n  })\n})\n"],"names":["describe","expect","it","deriveEncryptionKey","key1","key2","key3","toBe","key","length","Buffer","from","not","toThrow","buffer","startTime","Date","now","i","endTime","avgTime","toBeLessThan"],"mappings":"AAAA,SAASA,QAAQ,EAAEC,MAAM,EAAEC,EAAE,QAAQ,SAAQ;AAE7C,SAASC,mBAAmB,QAAQ,oBAAmB;AAEvDH,SAAS,gBAAgB;IACvBA,SAAS,uBAAuB;QAC9BE,GAAG,gEAAgE;YACjE,MAAME,OAAOD;YACb,MAAME,OAAOF;YACb,MAAMG,OAAOH;YAEbF,OAAOG,MAAMG,IAAI,CAACF;YAClBJ,OAAOI,MAAME,IAAI,CAACD;QACpB;QAEAJ,GAAG,uDAAuD;YACxD,MAAMM,MAAML;YAEZ,2DAA2D;YAC3DF,OAAOO,IAAIC,MAAM,EAAEF,IAAI,CAAC;YAExB,mDAAmD;YACnDN,OAAO,IAAMS,OAAOC,IAAI,CAACH,KAAK,QAAQI,GAAG,CAACC,OAAO;YAEjD,MAAMC,SAASJ,OAAOC,IAAI,CAACH,KAAK;YAChCP,OAAOa,OAAOL,MAAM,EAAEF,IAAI,CAAC,KAAI,WAAW;QAC5C;QAEAL,GAAG,qDAAqD;YACtD,uEAAuE;YACvE,MAAMa,YAAYC,KAAKC,GAAG;YAE1B,oCAAoC;YACpC,IAAK,IAAIC,IAAI,GAAGA,IAAI,GAAGA,IAAK;gBAC1Bf;YACF;YAEA,MAAMgB,UAAUH,KAAKC,GAAG;YACxB,MAAMG,UAAU,AAACD,CAAAA,UAAUJ,SAAQ,IAAK;YAExC,uDAAuD;YACvDd,OAAOmB,SAASC,YAAY,CAAC;QAC/B;IACF;AACF"}

package/dist/auth/jwt-validator.spec.d.ts

@@ -1,10 +0,0 @@
-/**
- * Unit tests for JWT validator
- *
- * Tests our wrapper logic around jose's JWT validation:
- * - Cache management (clearJWKSCache)
- * - Environment-based JWKS URI routing
- * - Error mapping from jose errors to our custom error codes
- */
-export {};
-//# sourceMappingURL=jwt-validator.spec.d.ts.map

package/dist/auth/jwt-validator.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"jwt-validator.spec.d.ts","sourceRoot":"","sources":["../../src/auth/jwt-validator.spec.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}