@pikku/core 0.12.80 → 0.12.83

package/dist/wirings/oauth2/oauth2-routes.js

@@ -1,146 +0,0 @@
-import { OAuth2Client } from './oauth2-client.js';
-const TOKEN_EXPIRY_BUFFER_MS = 60_000;
-function getCredentialMeta(ctx, name) {
-    const meta = ctx.credentialsMeta[name];
-    if (!meta) {
-        throw new Error(`Credential '${name}' not found`);
-    }
-    if (!meta.oauth2) {
-        throw new Error(`Credential '${name}' is not an OAuth2 credential`);
-    }
-    return meta;
-}
-/**
- * Creates OAuth2 route handlers for user credential management.
- *
- * Returns individual handler functions for connect/callback/disconnect/status
- * that handle the OAuth2 authorization code flow and store tokens in CredentialService.
- *
- * @example
- * ```typescript
- * const oauth2 = createOAuth2Handler({ credentialsMeta })
- *
- * const oauth2Routes = defineHTTPRoutes({
- *   auth: true,
- *   basePath: '/credentials',
- *   routes: {
- *     connect: { method: 'get', route: '/:name/connect', func: oauth2.connect },
- *     callback: { method: 'get', route: '/:name/callback', func: oauth2.callback, auth: false },
- *     disconnect: { method: 'delete', route: '/:name', func: oauth2.disconnect },
- *     status: { method: 'get', route: '/:name/status', func: oauth2.status },
- *   },
- * })
- *
- * wireHTTPRoutes({ routes: { credentials: oauth2Routes } })
- * ```
- */
-export const createOAuth2Handler = (options) => {
-    const basePath = options.basePath ?? '/credentials';
-    const ctx = {
-        credentialsMeta: options.credentialsMeta,
-        basePath,
-    };
-    const connectHandler = async (services, _data, wire) => {
-        const { name } = wire.http.request.params();
-        const meta = getCredentialMeta(ctx, name);
-        const queryParams = wire.http.request.query();
-        const redirectUrl = queryParams.redirect_url || queryParams.redirect;
-        const oauth2Client = new OAuth2Client(meta.oauth2, meta.oauth2.appCredentialSecretId, services.secrets);
-        const userId = wire.session?.userId;
-        if (!userId) {
-            throw new Error('Authentication required for OAuth2 connect');
-        }
-        const state = await services.jwt.encode({ value: 10, unit: 'minute' }, {
-            userId,
-            credentialName: name,
-            redirectUrl,
-        });
-        let origin = wire.http.request.header('origin');
-        if (!origin) {
-            const host = wire.http.request.header('host');
-            if (!host) {
-                throw new Error('Unable to determine request origin for OAuth2 callback');
-            }
-            const protocol = wire.http.request.header('x-forwarded-proto') || 'http';
-            origin = `${protocol}://${host}`;
-        }
-        const callbackUrl = `${origin}${basePath}/${name}/callback`;
-        const authUrl = await oauth2Client.getAuthorizationUrl(state, callbackUrl);
-        return Response.redirect(authUrl, 302);
-    };
-    const callbackHandler = async (services, _data, wire) => {
-        const { name } = wire.http.request.params();
-        const meta = getCredentialMeta(ctx, name);
-        const queryParams = wire.http.request.query();
-        const code = queryParams.code;
-        const state = queryParams.state;
-        if (!code || !state) {
-            throw new Error('Missing code or state parameter');
-        }
-        let statePayload;
-        try {
-            statePayload = await services.jwt.decode(state);
-        }
-        catch {
-            throw new Error('Invalid or expired OAuth2 state');
-        }
-        if (statePayload.credentialName !== name) {
-            throw new Error('Credential name mismatch in state');
-        }
-        const oauth2Client = new OAuth2Client(meta.oauth2, meta.oauth2.appCredentialSecretId, services.secrets);
-        let origin = wire.http.request.header('origin');
-        if (!origin) {
-            const host = wire.http.request.header('host');
-            if (!host) {
-                throw new Error('Unable to determine request origin for OAuth2 callback');
-            }
-            const protocol = wire.http.request.header('x-forwarded-proto') || 'http';
-            origin = `${protocol}://${host}`;
-        }
-        const callbackUrl = `${origin}${basePath}/${name}/callback`;
-        const tokens = await oauth2Client.exchangeCode(code, callbackUrl);
-        await services.credentialService.set(name, tokens, statePayload.userId);
-        services.logger.info(`OAuth2 tokens stored for user '${statePayload.userId}', credential '${name}'`);
-        if (statePayload.redirectUrl) {
-            return Response.redirect(statePayload.redirectUrl, 302);
-        }
-        else {
-            return { success: true, credentialName: name };
-        }
-    };
-    const disconnectHandler = async (services, _data, wire) => {
-        const { name } = wire.http.request.params();
-        const userId = wire.session?.userId;
-        if (!userId) {
-            throw new Error('Authentication required');
-        }
-        await services.credentialService.delete(name, userId);
-        services.logger.info(`OAuth2 credential '${name}' disconnected for user '${userId}'`);
-        return { success: true };
-    };
-    const statusHandler = async (services, _data, wire) => {
-        const { name } = wire.http.request.params();
-        const userId = wire.session?.userId;
-        if (!userId) {
-            throw new Error('Authentication required');
-        }
-        const credential = await services.credentialService.get(name, userId);
-        if (!credential) {
-            return { connected: false };
-        }
-        return {
-            connected: true,
-            hasRefreshToken: !!credential.refreshToken,
-            expiresAt: credential.expiresAt,
-            isExpired: credential.expiresAt
-                ? credential.expiresAt < Date.now() + TOKEN_EXPIRY_BUFFER_MS
-                : false,
-        };
-    };
-    return {
-        connect: { func: connectHandler },
-        callback: { func: callbackHandler },
-        disconnect: { func: disconnectHandler },
-        status: { func: statusHandler },
-    };
-};

package/dist/wirings/scope/wire-scope.d.ts

@@ -1,33 +0,0 @@
-import type { CoreScopes } from './scope.types.js';
-/**
- * No-op function for declaring scopes.
- * This exists purely for TypeScript type checking and will be tree-shaken.
- * The CLI extracts metadata via AST parsing and generates a `ScopeId` union,
- * so a function referencing an undeclared scope fails the build.
- *
- * Scopes are keyed by segment at every level: a scope is named by its key, and
- * its value describes it. Every node is grantable — the declaration below
- * yields `admin`, `admin:invoices`, `admin:invoices:create`,
- * `admin:invoices:void` and `billing`.
- *
- * @example
- * ```typescript
- * wireScope({
- *   admin: {
- *     displayName: 'Administration',
- *     description: 'Administrative access',
- *     scopes: {
- *       invoices: {
- *         description: 'Invoice management',
- *         scopes: {
- *           create: { description: 'Create invoices' },
- *           void: { description: 'Void invoices' },
- *         },
- *       },
- *     },
- *   },
- *   billing: {},
- * })
- * ```
- */
-export declare const wireScope: (_config: CoreScopes) => void;

package/dist/wirings/scope/wire-scope.js

@@ -1,32 +0,0 @@
-/**
- * No-op function for declaring scopes.
- * This exists purely for TypeScript type checking and will be tree-shaken.
- * The CLI extracts metadata via AST parsing and generates a `ScopeId` union,
- * so a function referencing an undeclared scope fails the build.
- *
- * Scopes are keyed by segment at every level: a scope is named by its key, and
- * its value describes it. Every node is grantable — the declaration below
- * yields `admin`, `admin:invoices`, `admin:invoices:create`,
- * `admin:invoices:void` and `billing`.
- *
- * @example
- * ```typescript
- * wireScope({
- *   admin: {
- *     displayName: 'Administration',
- *     description: 'Administrative access',
- *     scopes: {
- *       invoices: {
- *         description: 'Invoice management',
- *         scopes: {
- *           create: { description: 'Create invoices' },
- *           void: { description: 'Void invoices' },
- *         },
- *       },
- *     },
- *   },
- *   billing: {},
- * })
- * ```
- */
-export const wireScope = (_config) => { };

package/dist/wirings/workflow/dsl/index.d.ts

@@ -1,5 +0,0 @@
-/**
- * DSL (Domain Specific Language) workflow exports
- */
-export { addWorkflow } from './workflow-runner.js';
-export type { WorkflowStepOptions, WorkflowWireDoRPC, WorkflowWireDoInline, WorkflowWireSleep, WorkflowWireSuspend, WorkflowWireApproval, WorkflowApprovalOptions, ApprovalOutcome, InputSource, OutputBinding, RpcStepMeta, SimpleCondition, Condition, BranchStepMeta, ParallelGroupStepMeta, FanoutStepMeta, ReturnStepMeta, InlineStepMeta, SleepStepMeta, CancelStepMeta, SuspendStepMeta, ApprovalStepMeta, SwitchCaseMeta, SwitchStepMeta, FilterStepMeta, ArrayPredicateStepMeta, WorkflowStepMeta, WorkflowStepWire, PikkuWorkflowWire, } from './workflow-dsl.types.js';

package/dist/wirings/workflow/dsl/index.js

@@ -1,4 +0,0 @@
-/**
- * DSL (Domain Specific Language) workflow exports
- */
-export { addWorkflow } from './workflow-runner.js';

package/dist/wirings/workflow/graph/index.d.ts

@@ -1,5 +0,0 @@
-export { continueGraph, executeGraphStep, onGraphNodeComplete, runFromMeta, runWorkflowGraph, } from './graph-runner.js';
-export { template } from './template.js';
-export type { TemplateString } from './template.js';
-export { pikkuWorkflowGraph, type PikkuWorkflowGraphConfig, type PikkuWorkflowGraphResult, } from './wire-workflow-graph.js';
-export { generateMermaidDiagram } from './graph-validation.js';

package/dist/wirings/workflow/graph/index.js

@@ -1,4 +0,0 @@
-export { continueGraph, executeGraphStep, onGraphNodeComplete, runFromMeta, runWorkflowGraph, } from './graph-runner.js';
-export { template } from './template.js';
-export { pikkuWorkflowGraph, } from './wire-workflow-graph.js';
-export { generateMermaidDiagram } from './graph-validation.js';