@pome-sh/cli 0.3.0 → 0.5.0

package/node_modules/@pome-sh/twin-linear/dist/src/oauth/routes.js

@@ -0,0 +1,340 @@
+// SPDX-License-Identifier: Apache-2.0
+import { createHash, timingSafeEqual } from "node:crypto";
+import { token } from "../ids.js";
+import { OAUTH_CODE_TTL_SECONDS } from "../types.js";
+export function registerOAuthRoutes(app, commands) {
+    app.get("/oauth/authorize", (c) => {
+        const clientId = c.req.query("client_id") ?? "";
+        const redirectUri = c.req.query("redirect_uri") ?? "";
+        const responseType = c.req.query("response_type") ?? "code";
+        const state = c.req.query("state") ?? "";
+        const scope = c.req.query("scope") ?? "read";
+        const requestedActor = normalizeActor(c.req.query("actor"));
+        const codeChallenge = c.req.query("code_challenge") ?? "";
+        const codeChallengeMethod = c.req.query("code_challenge_method") ?? "";
+        if (responseType !== "code") {
+            return c.html(errorPage("Unsupported response_type", "Only response_type=code is supported."), 400);
+        }
+        if (!redirectUri) {
+            return c.html(errorPage("Missing redirect URI", "The redirect_uri parameter is required."), 400);
+        }
+        const oauthApp = requireRegisteredOAuthApp(commands, clientId);
+        if (!oauthApp) {
+            return c.html(errorPage("Application not found", clientId
+                ? `The client_id '${escapeHtml(clientId)}' is not registered.`
+                : "No OAuth applications are registered in this twin."), 400);
+        }
+        if (!matchesRedirectUri(redirectUri, oauthApp.redirectUris)) {
+            return c.html(errorPage("Redirect URI mismatch", "The redirect_uri is not registered for this app."), 400);
+        }
+        const pkceError = validatePkceParams(codeChallenge, codeChallengeMethod);
+        if (pkceError) {
+            return c.html(errorPage("Invalid PKCE parameters", pkceError), 400);
+        }
+        const actor = requestedActor ?? oauthApp.actor ?? "user";
+        if (requestedActor && requestedActor !== oauthApp.actor) {
+            return c.html(errorPage("Invalid actor", `This app is configured for actor=${oauthApp.actor}.`), 400);
+        }
+        const requestedScopes = normalizeScopes(scope, oauthApp.scopes ?? ["read"]);
+        const invalidScopes = scopesOutsideApp(requestedScopes, oauthApp);
+        if (invalidScopes.length > 0) {
+            return c.html(errorPage("Invalid scope", `The app is not registered for scopes: ${invalidScopes.join(", ")}.`), 400);
+        }
+        const title = actor === "app" ? "Install Linear App" : "Authorize Linear App";
+        const appName = oauthApp.name;
+        const buttons = actor === "app"
+            ? userButton({
+                letter: "L",
+                login: appName,
+                name: `Install ${appName}`,
+                email: requestedScopes.join(", "),
+                hidden: {
+                    user_ref: oauthApp.appUserId ?? "",
+                    actor,
+                    redirect_uri: redirectUri,
+                    scope: requestedScopes.join(" "),
+                    state,
+                    client_id: clientId,
+                    code_challenge: codeChallenge,
+                    code_challenge_method: codeChallengeMethod,
+                },
+            })
+            : commands
+                .listUsers()
+                .filter((user) => !user.app && user.active)
+                .map((user) => userButton({
+                letter: (user.displayName[0] ?? "U").toUpperCase(),
+                login: user.email,
+                name: user.displayName,
+                email: user.email,
+                hidden: {
+                    user_ref: user.id,
+                    actor,
+                    redirect_uri: redirectUri,
+                    scope: requestedScopes.join(" "),
+                    state,
+                    client_id: clientId,
+                    code_challenge: codeChallenge,
+                    code_challenge_method: codeChallengeMethod,
+                },
+            }))
+                .join("\n");
+        return c.html(cardPage(title, `Continue to <strong>${escapeHtml(appName)}</strong> with scopes <strong>${escapeHtml(requestedScopes.join(", "))}</strong>.`, buttons || '<p class="empty">No users in the Linear twin store.</p>'));
+    });
+    app.post("/oauth/authorize/callback", async (c) => {
+        const body = await c.req.parseBody();
+        const clientId = bodyStr(body.client_id);
+        const redirectUri = bodyStr(body.redirect_uri);
+        const state = bodyStr(body.state);
+        const scopes = normalizeScopes(bodyStr(body.scope), ["read"]);
+        const requestedActor = normalizeActor(bodyStr(body.actor));
+        const userRef = bodyStr(body.user_ref);
+        const codeChallenge = bodyStr(body.code_challenge);
+        const codeChallengeMethod = bodyStr(body.code_challenge_method);
+        const oauthApp = requireRegisteredOAuthApp(commands, clientId);
+        if (!oauthApp) {
+            return c.html(errorPage("Application not found", "The OAuth app is not registered."), 400);
+        }
+        if (!matchesRedirectUri(redirectUri, oauthApp.redirectUris)) {
+            return c.html(errorPage("Redirect URI mismatch", "The redirect_uri is not registered for this app."), 400);
+        }
+        const pkceError = validatePkceParams(codeChallenge, codeChallengeMethod);
+        if (pkceError) {
+            return c.html(errorPage("Invalid PKCE parameters", pkceError), 400);
+        }
+        const actor = requestedActor ?? oauthApp.actor ?? "user";
+        if (requestedActor && requestedActor !== oauthApp.actor) {
+            return c.html(errorPage("Invalid actor", `This app is configured for actor=${oauthApp.actor}.`), 400);
+        }
+        const invalidScopes = scopesOutsideApp(scopes, oauthApp);
+        if (invalidScopes.length > 0) {
+            return c.html(errorPage("Invalid scope", `The app is not registered for scopes: ${invalidScopes.join(", ")}.`), 400);
+        }
+        const user = userRef
+            ? commands.getUser(userRef)
+            : commands.listUsers().find((u) => !u.app);
+        const appUser = actor === "app"
+            ? (oauthApp.appUserId ? commands.getUser(oauthApp.appUserId) : user)
+            : user;
+        if (!appUser) {
+            return c.html(errorPage("No Linear actor", "No matching user or app actor is available."), 400);
+        }
+        const code = token("lin_code");
+        commands.storePendingCode(code, {
+            appId: oauthApp.id,
+            clientId,
+            redirectUri,
+            scopes,
+            userId: appUser.id,
+            actor,
+            codeChallenge: codeChallenge || null,
+            codeChallengeMethod: codeChallengeMethod || null,
+            createdAt: commands.now(),
+        });
+        const url = new URL(redirectUri);
+        url.searchParams.set("code", code);
+        if (state)
+            url.searchParams.set("state", state);
+        return c.redirect(url.toString());
+    });
+    app.post("/oauth/token", async (c) => {
+        const body = await c.req.parseBody();
+        const grantType = bodyStr(body.grant_type);
+        const clientAuth = clientCredentials(c.req.header("Authorization"), body);
+        const oauthApp = requireRegisteredOAuthApp(commands, clientAuth.clientId);
+        if (!oauthApp) {
+            return oauthError("invalid_client", "The OAuth app is not registered.");
+        }
+        if (!constantTimeSecretEqual(clientAuth.clientSecret, oauthApp.clientSecret)) {
+            return oauthError("invalid_client", "Invalid client credentials.");
+        }
+        if (grantType === "authorization_code") {
+            const code = bodyStr(body.code);
+            const pending = commands.takePendingCode(code);
+            if (!pending)
+                return oauthError("invalid_grant", "Authorization code is invalid.");
+            const ageMs = Date.parse(commands.now()) - Date.parse(pending.createdAt);
+            if (ageMs > OAUTH_CODE_TTL_SECONDS * 1000) {
+                return oauthError("invalid_grant", "Authorization code has expired.");
+            }
+            if (pending.redirectUri !== bodyStr(body.redirect_uri)) {
+                return oauthError("invalid_grant", "redirect_uri does not match the authorization request.");
+            }
+            if (pending.clientId !== clientAuth.clientId) {
+                return oauthError("invalid_grant", "client_id does not match the authorization request.");
+            }
+            if (!verifyPkce(pending.codeChallenge, pending.codeChallengeMethod, bodyStr(body.code_verifier))) {
+                return oauthError("invalid_grant", "PKCE verification failed.");
+            }
+            return c.json(commands.issueOAuthTokens({
+                userId: pending.userId,
+                appId: pending.appId,
+                actor: pending.actor,
+                scopes: pending.scopes,
+            }));
+        }
+        if (grantType === "refresh_token") {
+            const refreshToken = bodyStr(body.refresh_token);
+            const existing = commands.getToken(refreshToken);
+            if (!existing || existing.type !== "oauth_refresh" || existing.revoked) {
+                return oauthError("invalid_grant", "Refresh token is invalid.");
+            }
+            if (existing.appId !== oauthApp.id) {
+                return oauthError("invalid_grant", "Refresh token was not issued to this OAuth app.");
+            }
+            commands.revokeToken(refreshToken);
+            return c.json(commands.issueOAuthTokens({
+                userId: existing.userId,
+                appId: existing.appId,
+                actor: existing.actorType,
+                scopes: existing.scopes,
+            }));
+        }
+        if (grantType === "client_credentials") {
+            if (oauthApp.actor !== "app") {
+                return oauthError("unauthorized_client", "The OAuth app is not configured for app actor tokens.");
+            }
+            const scopes = normalizeScopes(bodyStr(body.scope), oauthApp.scopes ?? ["read"]);
+            const invalidScopes = scopesOutsideApp(scopes, oauthApp);
+            if (invalidScopes.length > 0) {
+                return oauthError("invalid_scope", `The app is not registered for scopes: ${invalidScopes.join(", ")}.`);
+            }
+            const appUserId = oauthApp.appUserId ?? commands.listUsers().find((user) => user.app)?.id ?? null;
+            return c.json(commands.issueOAuthTokens({
+                userId: appUserId,
+                appId: oauthApp.id,
+                actor: "app",
+                scopes,
+                includeRefresh: false,
+            }));
+        }
+        return oauthError("unsupported_grant_type", "Only authorization_code, refresh_token, and client_credentials are supported.");
+    });
+    app.post("/oauth/revoke", async (c) => {
+        const body = await c.req.parseBody();
+        const value = bodyStr(body.token) || bodyStr(body.access_token) || bodyStr(body.refresh_token);
+        if (value)
+            commands.revokeToken(value);
+        return c.body(null, 200);
+    });
+}
+function oauthError(error, description) {
+    return new Response(JSON.stringify({ error, error_description: description }), {
+        status: 400,
+        headers: { "Content-Type": "application/json" },
+    });
+}
+function clientCredentials(authHeader, body) {
+    if (authHeader?.startsWith("Basic ")) {
+        try {
+            const decoded = Buffer.from(authHeader.slice("Basic ".length), "base64").toString("utf-8");
+            const separator = decoded.indexOf(":");
+            if (separator < 0)
+                return { clientId: "", clientSecret: "" };
+            return {
+                clientId: decodeURIComponent(decoded.slice(0, separator)),
+                clientSecret: decodeURIComponent(decoded.slice(separator + 1)),
+            };
+        }
+        catch {
+            return { clientId: "", clientSecret: "" };
+        }
+    }
+    return { clientId: bodyStr(body.client_id), clientSecret: bodyStr(body.client_secret) };
+}
+function normalizeActor(value) {
+    if (value === "app" || value === "user")
+        return value;
+    return undefined;
+}
+function scopesOutsideApp(scopes, oauthApp) {
+    if (!oauthApp)
+        return [];
+    const allowed = new Set(oauthApp.scopes);
+    return scopes.filter((scope) => !allowed.has(scope));
+}
+function normalizeScopes(value, fallback) {
+    const parts = value
+        .split(/[,\s]+/)
+        .map((s) => s.trim())
+        .filter(Boolean);
+    return parts.length ? parts : [...fallback];
+}
+function requireRegisteredOAuthApp(commands, clientId) {
+    if (!clientId)
+        return null;
+    return commands.getOAuthApp(clientId) ?? null;
+}
+function validatePkceParams(challenge, method) {
+    if (!challenge && !method)
+        return null;
+    if (challenge && !method) {
+        return "code_challenge_method is required when code_challenge is set.";
+    }
+    if (!challenge && method) {
+        return "code_challenge is required when code_challenge_method is set.";
+    }
+    if (method !== "S256" && method !== "plain") {
+        return "Unsupported code_challenge_method. Only S256 and plain are accepted.";
+    }
+    return null;
+}
+function verifyPkce(challenge, method, verifier) {
+    if (!challenge)
+        return true;
+    if (!verifier)
+        return false;
+    if (method === "S256") {
+        const hashed = createHash("sha256").update(verifier).digest("base64url");
+        return hashed === challenge;
+    }
+    if (method === "plain") {
+        return verifier === challenge;
+    }
+    // Unknown / missing method with a stored challenge must fail closed.
+    return false;
+}
+function matchesRedirectUri(redirectUri, allowed) {
+    return allowed.some((uri) => uri === redirectUri);
+}
+function constantTimeSecretEqual(a, b) {
+    const left = Buffer.from(a);
+    const right = Buffer.from(b);
+    if (left.length !== right.length)
+        return false;
+    return timingSafeEqual(left, right);
+}
+function bodyStr(value) {
+    return typeof value === "string" ? value : "";
+}
+function escapeHtml(value) {
+    return value
+        .replace(/&/g, "&amp;")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;");
+}
+function errorPage(title, message) {
+    return cardPage(title, escapeHtml(message), "");
+}
+function cardPage(title, subtitleHtml, bodyHtml) {
+    return `<!doctype html>
+<html><head><meta charset="utf-8"/><title>${escapeHtml(title)}</title>
+<style>
+body{font-family:ui-sans-serif,system-ui,sans-serif;background:#0d1117;color:#e6edf3;margin:0;padding:2rem}
+.card{max-width:480px;margin:0 auto;background:#161b22;border:1px solid #30363d;border-radius:12px;padding:1.5rem}
+h1{font-size:1.25rem;margin:0 0 .75rem}p{opacity:.85;line-height:1.5}
+button,form button{display:block;width:100%;text-align:left;margin:.5rem 0;padding:.85rem 1rem;border-radius:8px;border:1px solid #30363d;background:#21262d;color:#e6edf3;cursor:pointer}
+button:hover{border-color:#58a6ff}
+.meta{font-size:.85rem;opacity:.7}
+</style></head>
+<body><div class="card"><h1>${escapeHtml(title)}</h1><p>${subtitleHtml}</p>${bodyHtml}</div></body></html>`;
+}
+function userButton(opts) {
+    const fields = Object.entries(opts.hidden)
+        .map(([key, value]) => `<input type="hidden" name="${escapeHtml(key)}" value="${escapeHtml(value)}" />`)
+        .join("");
+    return `<form method="post" action="/oauth/authorize/callback">${fields}
+<button type="submit"><strong>${escapeHtml(opts.name)}</strong><div class="meta">${escapeHtml(opts.email)}</div></button></form>`;
+}
+//# sourceMappingURL=routes.js.map

package/node_modules/@pome-sh/twin-linear/dist/src/oauth/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/oauth/routes.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAG1D,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,sBAAsB,EAAkD,MAAM,aAAa,CAAC;AAErG,MAAM,UAAU,mBAAmB,CACjC,GAAsC,EACtC,QAAsB;IAEtB,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAU,EAAE,EAAE;QACzC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QACtD,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,MAAM,CAAC;QAC5D,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC;QAC7C,MAAM,cAAc,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5D,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;QAC1D,MAAM,mBAAmB,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,IAAI,EAAE,CAAC;QAEvE,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,2BAA2B,EAAE,uCAAuC,CAAC,EAAE,GAAG,CAAC,CAAC;QACtG,CAAC;QACD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,sBAAsB,EAAE,yCAAyC,CAAC,EAAE,GAAG,CAAC,CAAC;QACnG,CAAC;QAED,MAAM,QAAQ,GAAG,yBAAyB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CACP,uBAAuB,EACvB,QAAQ;gBACN,CAAC,CAAC,kBAAkB,UAAU,CAAC,QAAQ,CAAC,sBAAsB;gBAC9D,CAAC,CAAC,oDAAoD,CACzD,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5D,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,uBAAuB,EAAE,kDAAkD,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7G,CAAC;QACD,MAAM,SAAS,GAAG,kBAAkB,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;QACzE,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,yBAAyB,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,KAAK,GAAG,cAAc,IAAI,QAAQ,CAAC,KAAK,IAAI,MAAM,CAAC;QACzD,IAAI,cAAc,IAAI,cAAc,KAAK,QAAQ,CAAC,KAAK,EAAE,CAAC;YACxD,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,oCAAoC,QAAQ,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QACxG,CAAC;QACD,MAAM,eAAe,GAAG,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5E,MAAM,aAAa,GAAG,gBAAgB,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;QAClE,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CAAC,eAAe,EAAE,yCAAyC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAChG,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,sBAAsB,CAAC;QAC9E,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC9B,MAAM,OAAO,GACX,KAAK,KAAK,KAAK;YACb,CAAC,CAAC,UAAU,CAAC;gBACT,MAAM,EAAE,GAAG;gBACX,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,WAAW,OAAO,EAAE;gBAC1B,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;gBACjC,MAAM,EAAE;oBACN,QAAQ,EAAE,QAAQ,CAAC,SAAS,IAAI,EAAE;oBAClC,KAAK;oBACL,YAAY,EAAE,WAAW;oBACzB,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;oBAChC,KAAK;oBACL,SAAS,EAAE,QAAQ;oBACnB,cAAc,EAAE,aAAa;oBAC7B,qBAAqB,EAAE,mBAAmB;iBAC3C;aACF,CAAC;YACJ,CAAC,CAAC,QAAQ;iBACL,SAAS,EAAE;iBACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC;iBAC1C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ,UAAU,CAAC;gBACT,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE;gBAClD,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,WAAW;gBACtB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE;oBACN,QAAQ,EAAE,IAAI,CAAC,EAAE;oBACjB,KAAK;oBACL,YAAY,EAAE,WAAW;oBACzB,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;oBAChC,KAAK;oBACL,SAAS,EAAE,QAAQ;oBACnB,cAAc,EAAE,aAAa;oBAC7B,qBAAqB,EAAE,mBAAmB;iBAC3C;aACF,CAAC,CACH;iBACA,IAAI,CAAC,IAAI,CAAC,CAAC;QAEpB,OAAO,CAAC,CAAC,IAAI,CACX,QAAQ,CACN,KAAK,EACL,uBAAuB,UAAU,CAAC,OAAO,CAAC,iCAAiC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,EAC7H,OAAO,IAAI,yDAAyD,CACrE,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,2BAA2B,EAAE,KAAK,EAAE,CAAU,EAAE,EAAE;QACzD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9D,MAAM,cAAc,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACnD,MAAM,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAEhE,MAAM,QAAQ,GAAG,yBAAyB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,uBAAuB,EAAE,kCAAkC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7F,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5D,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,uBAAuB,EAAE,kDAAkD,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7G,CAAC;QACD,MAAM,SAAS,GAAG,kBAAkB,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;QACzE,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,yBAAyB,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,KAAK,GAAG,cAAc,IAAI,QAAQ,CAAC,KAAK,IAAI,MAAM,CAAC;QACzD,IAAI,cAAc,IAAI,cAAc,KAAK,QAAQ,CAAC,KAAK,EAAE,CAAC;YACxD,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,oCAAoC,QAAQ,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QACxG,CAAC;QACD,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACzD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CAAC,eAAe,EAAE,yCAAyC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAChG,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GACR,OAAO;YACL,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;YAC3B,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,OAAO,GACX,KAAK,KAAK,KAAK;YACb,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACpE,CAAC,CAAC,IAAI,CAAC;QACX,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,6CAA6C,CAAC,EAAE,GAAG,CAAC,CAAC;QAClG,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;QAC/B,QAAQ,CAAC,gBAAgB,CAAC,IAAI,EAAE;YAC9B,KAAK,EAAE,QAAQ,CAAC,EAAE;YAClB,QAAQ;YACR,WAAW;YACX,MAAM;YACN,MAAM,EAAE,OAAO,CAAC,EAAE;YAClB,KAAK;YACL,aAAa,EAAE,aAAa,IAAI,IAAI;YACpC,mBAAmB,EAAE,mBAAmB,IAAI,IAAI;YAChD,SAAS,EAAE,QAAQ,CAAC,GAAG,EAAE;SAC1B,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnC,IAAI,KAAK;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAChD,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,CAAU,EAAE,EAAE;QAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,yBAAyB,CAAC,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,UAAU,CAAC,gBAAgB,EAAE,kCAAkC,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC,uBAAuB,CAAC,UAAU,CAAC,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7E,OAAO,UAAU,CAAC,gBAAgB,EAAE,6BAA6B,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,SAAS,KAAK,oBAAoB,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,OAAO,GAAG,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,CAAC,OAAO;gBAAE,OAAO,UAAU,CAAC,eAAe,EAAE,gCAAgC,CAAC,CAAC;YACnF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACzE,IAAI,KAAK,GAAG,sBAAsB,GAAG,IAAI,EAAE,CAAC;gBAC1C,OAAO,UAAU,CAAC,eAAe,EAAE,iCAAiC,CAAC,CAAC;YACxE,CAAC;YACD,IAAI,OAAO,CAAC,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;gBACvD,OAAO,UAAU,CAAC,eAAe,EAAE,wDAAwD,CAAC,CAAC;YAC/F,CAAC;YACD,IAAI,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,QAAQ,EAAE,CAAC;gBAC7C,OAAO,UAAU,CAAC,eAAe,EAAE,qDAAqD,CAAC,CAAC;YAC5F,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,mBAAmB,EAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;gBACjG,OAAO,UAAU,CAAC,eAAe,EAAE,2BAA2B,CAAC,CAAC;YAClE,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX,QAAQ,CAAC,gBAAgB,CAAC;gBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CACH,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,KAAK,eAAe,EAAE,CAAC;YAClC,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACjD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YACjD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,eAAe,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACvE,OAAO,UAAU,CAAC,eAAe,EAAE,2BAA2B,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACnC,OAAO,UAAU,CAAC,eAAe,EAAE,iDAAiD,CAAC,CAAC;YACxF,CAAC;YACD,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;YACnC,OAAO,CAAC,CAAC,IAAI,CACX,QAAQ,CAAC,gBAAgB,CAAC;gBACxB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,KAAK,EAAE,QAAQ,CAAC,SAAS;gBACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;aACxB,CAAC,CACH,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,KAAK,oBAAoB,EAAE,CAAC;YACvC,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;gBAC7B,OAAO,UAAU,CAAC,qBAAqB,EAAE,uDAAuD,CAAC,CAAC;YACpG,CAAC;YACD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YACjF,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACzD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,OAAO,UAAU,CAAC,eAAe,EAAE,yCAAyC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3G,CAAC;YACD,MAAM,SAAS,GACb,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,IAAI,CAAC;YAClF,OAAO,CAAC,CAAC,IAAI,CACX,QAAQ,CAAC,gBAAgB,CAAC;gBACxB,MAAM,EAAE,SAAS;gBACjB,KAAK,EAAE,QAAQ,CAAC,EAAE;gBAClB,KAAK,EAAE,KAAK;gBACZ,MAAM;gBACN,cAAc,EAAE,KAAK;aACtB,CAAC,CACH,CAAC;QACJ,CAAC;QAED,OAAO,UAAU,CACf,wBAAwB,EACxB,+EAA+E,CAChF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,CAAU,EAAE,EAAE;QAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC/F,IAAI,KAAK;YAAE,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACvC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,WAAmB;IACpD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,CAAC,EAAE;QAC7E,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CACxB,UAA8B,EAC9B,IAA6B;IAE7B,IAAI,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC3F,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,SAAS,GAAG,CAAC;gBAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;YAC7D,OAAO;gBACL,QAAQ,EAAE,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;gBACzD,YAAY,EAAE,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;aAC/D,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;AAC1F,CAAC;AAED,SAAS,cAAc,CAAC,KAAyB;IAC/C,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACtD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAgB,EAAE,QAA2C;IACrF,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,QAAkB;IACxD,MAAM,KAAK,GAAG,KAAK;SAChB,KAAK,CAAC,QAAQ,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,yBAAyB,CAChC,QAAsB,EACtB,QAAgB;IAEhB,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;AAChD,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAiB,EAAE,MAAc;IAC3D,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,OAAO,+DAA+D,CAAC;IACzE,CAAC;IACD,IAAI,CAAC,SAAS,IAAI,MAAM,EAAE,CAAC;QACzB,OAAO,+DAA+D,CAAC;IACzE,CAAC;IACD,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QAC5C,OAAO,sEAAsE,CAAC;IAChF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CACjB,SAAwB,EACxB,MAAqB,EACrB,QAAgB;IAEhB,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACzE,OAAO,MAAM,KAAK,SAAS,CAAC;IAC9B,CAAC;IACD,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,QAAQ,KAAK,SAAS,CAAC;IAChC,CAAC;IACD,qEAAqE;IACrE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,WAAmB,EAAE,OAAiB;IAChE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,WAAW,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,uBAAuB,CAAC,CAAS,EAAE,CAAS;IACnD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/C,OAAO,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,OAAe;IAC/C,OAAO,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,YAAoB,EAAE,QAAgB;IACrE,OAAO;4CACmC,UAAU,CAAC,KAAK,CAAC;;;;;;;;;8BAS/B,UAAU,CAAC,KAAK,CAAC,WAAW,YAAY,OAAO,QAAQ,sBAAsB,CAAC;AAC5G,CAAC;AAED,SAAS,UAAU,CAAC,IAMnB;IACC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;SACvC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,8BAA8B,UAAU,CAAC,GAAG,CAAC,YAAY,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC;SACvG,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,OAAO,0DAA0D,MAAM;gCACzC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC;AAClI,CAAC"}

package/node_modules/@pome-sh/twin-linear/dist/src/pagination.d.ts

@@ -0,0 +1,29 @@
+export type ConnectionArgs = {
+    first?: number | null;
+    after?: string | null;
+    last?: number | null;
+    before?: string | null;
+};
+export type PageInfo = {
+    hasNextPage: boolean;
+    hasPreviousPage: boolean;
+    startCursor: string | null;
+    endCursor?: string | null;
+};
+export type Connection<T> = {
+    nodes: T[];
+    edges: Array<{
+        node: T;
+        cursor: string;
+    }>;
+    pageInfo: PageInfo;
+};
+export declare function resolveCursorSecret(env?: NodeJS.ProcessEnv): string;
+export declare function connectionFromArray<T>(items: T[], args?: ConnectionArgs, binding?: string, secret?: string): Connection<T>;
+export declare function encodeCursor(index: number, binding: string, secret?: string): string;
+export declare function decodeCursor(cursor: string, binding: string, secret?: string): number;
+export declare function clampPageSize(value: number, max?: number, fallback?: number): number;
+export declare function mcpPage(items: unknown[], limit: number | undefined, cursor: string | undefined, binding: string): {
+    items: unknown[];
+    cursor?: string;
+};

package/node_modules/@pome-sh/twin-linear/dist/src/pagination.js

@@ -0,0 +1,101 @@
+// SPDX-License-Identifier: Apache-2.0
+import { createHash, createHmac, randomBytes, timingSafeEqual } from "node:crypto";
+import { badUserInput } from "./errors.js";
+import { RELAY_PAGE_DEFAULT, RELAY_PAGE_MAX } from "./types.js";
+let ephemeralSecret;
+export function resolveCursorSecret(env = process.env) {
+    if (env.TWIN_AUTH_SECRET) {
+        return createHash("sha256").update(`pome-linear-cursor:${env.TWIN_AUTH_SECRET}`).digest("hex");
+    }
+    ephemeralSecret ??= randomBytes(32).toString("hex");
+    return ephemeralSecret;
+}
+export function connectionFromArray(items, args = {}, binding = "default", secret = resolveCursorSecret()) {
+    if (typeof args.first === "number" && typeof args.last === "number") {
+        badUserInput("Cannot provide both first and last to a connection");
+    }
+    const beforeIndex = args.before != null ? decodeCursor(args.before, binding, secret) : items.length;
+    const afterIndex = args.after != null ? decodeCursor(args.after, binding, secret) + 1 : 0;
+    let start = Math.max(0, afterIndex);
+    let end = Math.min(items.length, beforeIndex);
+    if (typeof args.first === "number") {
+        const first = clampPageSize(args.first);
+        end = Math.min(end, start + first);
+    }
+    else if (typeof args.last === "number") {
+        const last = clampPageSize(args.last);
+        start = Math.max(start, end - last);
+    }
+    else {
+        end = Math.min(end, start + RELAY_PAGE_DEFAULT);
+    }
+    const slice = items.slice(start, end);
+    const edges = slice.map((node, offset) => ({
+        node,
+        cursor: encodeCursor(start + offset, binding, secret),
+    }));
+    const hasNextPage = end < items.length;
+    const pageInfo = {
+        hasNextPage,
+        hasPreviousPage: start > 0,
+        startCursor: edges[0]?.cursor ?? null,
+        // Relay/Linear: endCursor is the last edge's cursor regardless of exhaustion
+        // (hasNextPage carries the "more pages?" signal). Null only when empty.
+        endCursor: edges[edges.length - 1]?.cursor ?? null,
+    };
+    return { nodes: slice, edges, pageInfo };
+}
+export function encodeCursor(index, binding, secret = resolveCursorSecret()) {
+    const payload = Buffer.from(JSON.stringify({ v: 1, i: index, b: binding }), "utf8").toString("base64url");
+    const signature = createHmac("sha256", secret).update(payload).digest("base64url");
+    return `${payload}.${signature}`;
+}
+export function decodeCursor(cursor, binding, secret = resolveCursorSecret()) {
+    const [payload, signature, extra] = cursor.split(".");
+    if (!payload || !signature || extra)
+        badUserInput("Invalid pagination cursor");
+    const expected = createHmac("sha256", secret).update(payload).digest();
+    let actual;
+    try {
+        actual = Buffer.from(signature, "base64url");
+    }
+    catch {
+        badUserInput("Invalid pagination cursor");
+    }
+    if (actual.length !== expected.length || !timingSafeEqual(actual, expected)) {
+        badUserInput("Invalid pagination cursor");
+    }
+    try {
+        const parsed = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
+        if (parsed.v !== 1 ||
+            parsed.b !== binding ||
+            !Number.isInteger(parsed.i) ||
+            parsed.i < 0) {
+            badUserInput("Invalid pagination cursor");
+        }
+        return parsed.i;
+    }
+    catch (error) {
+        if (error instanceof Error && error.name === "LinearTwinError")
+            throw error;
+        badUserInput("Invalid pagination cursor");
+    }
+}
+export function clampPageSize(value, max = RELAY_PAGE_MAX, fallback = RELAY_PAGE_DEFAULT) {
+    if (!Number.isFinite(value) || value < 0)
+        return fallback;
+    return Math.min(Math.trunc(value), max);
+}
+export function mcpPage(items, limit, cursor, binding) {
+    const size = clampPageSize(limit ?? RELAY_PAGE_DEFAULT, RELAY_PAGE_MAX, RELAY_PAGE_DEFAULT);
+    const offset = cursor ? decodeCursor(cursor, binding) : 0;
+    if (offset > items.length)
+        badUserInput("Invalid pagination cursor");
+    const page = items.slice(offset, offset + size);
+    const next = offset + page.length;
+    return {
+        items: page,
+        ...(next < items.length ? { cursor: encodeCursor(next, binding) } : {}),
+    };
+}
+//# sourceMappingURL=pagination.js.map

package/node_modules/@pome-sh/twin-linear/dist/src/pagination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.js","sourceRoot":"","sources":["../../src/pagination.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnF,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAsBhE,IAAI,eAAmC,CAAC;AAExC,MAAM,UAAU,mBAAmB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACtE,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACzB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,sBAAsB,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjG,CAAC;IACD,eAAe,KAAK,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,KAAU,EACV,OAAuB,EAAE,EACzB,OAAO,GAAG,SAAS,EACnB,SAAiB,mBAAmB,EAAE;IAEtC,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpE,YAAY,CAAC,oDAAoD,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;IACpG,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1F,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IACpC,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAE9C,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC;IACrC,CAAC;SAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,GAAG,kBAAkB,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACzC,IAAI;QACJ,MAAM,EAAE,YAAY,CAAC,KAAK,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC;KACtD,CAAC,CAAC,CAAC;IAEJ,MAAM,WAAW,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC;IACvC,MAAM,QAAQ,GAAa;QACzB,WAAW;QACX,eAAe,EAAE,KAAK,GAAG,CAAC;QAC1B,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,IAAI;QACrC,6EAA6E;QAC7E,wEAAwE;QACxE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,MAAM,IAAI,IAAI;KACnD,CAAC;IAEF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,KAAa,EACb,OAAe,EACf,SAAiB,mBAAmB,EAAE;IAEtC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAC1F,WAAW,CACZ,CAAC;IACF,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACnF,OAAO,GAAG,OAAO,IAAI,SAAS,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,MAAc,EACd,OAAe,EACf,SAAiB,mBAAmB,EAAE;IAEtC,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,IAAI,KAAK;QAAE,YAAY,CAAC,2BAA2B,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;IACvE,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,YAAY,CAAC,2BAA2B,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC5E,YAAY,CAAC,2BAA2B,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAI3E,CAAC;QACF,IACE,MAAM,CAAC,CAAC,KAAK,CAAC;YACd,MAAM,CAAC,CAAC,KAAK,OAAO;YACpB,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1B,MAAM,CAAC,CAAY,GAAG,CAAC,EACxB,CAAC;YACD,YAAY,CAAC,2BAA2B,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,MAAM,CAAC,CAAW,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB;YAAE,MAAM,KAAK,CAAC;QAC5E,YAAY,CAAC,2BAA2B,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,GAAG,GAAG,cAAc,EAAE,QAAQ,GAAG,kBAAkB;IAC9F,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC1D,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,OAAO,CACrB,KAAgB,EAChB,KAAyB,EACzB,MAA0B,EAC1B,OAAe;IAEf,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,IAAI,kBAAkB,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;IAC5F,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,IAAI,MAAM,GAAG,KAAK,CAAC,MAAM;QAAE,YAAY,CAAC,2BAA2B,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAClC,OAAO;QACL,KAAK,EAAE,IAAI;QACX,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxE,CAAC;AACJ,CAAC"}

package/node_modules/@pome-sh/twin-linear/dist/src/recording.d.ts

@@ -0,0 +1,2 @@
+import type { RecorderEvent } from "@pome-sh/sdk";
+export declare function projectLinearRecording(event: RecorderEvent): RecorderEvent;

package/node_modules/@pome-sh/twin-linear/dist/src/recording.js

@@ -0,0 +1,46 @@
+// Keys are compared after normalizing away non-alphanumerics (see `shouldRedact`),
+// so entries here are the normalized forms. This projection is a twin-specific
+// backstop; the SDK's `redactEvent` runs afterward and covers the common keys —
+// `codeverifier` (PKCE) is the one field it does not, so it must stay here.
+const SECRET_KEYS = new Set([
+    "clientsecret",
+    "accesstoken",
+    "refreshtoken",
+    "token",
+    "secret",
+    "authorization",
+    "codeverifier",
+    "password",
+]);
+export function projectLinearRecording(event) {
+    return {
+        ...event,
+        request_body: projectValue(event.request_body),
+        response_body: projectValue(event.response_body),
+        state_delta: projectValue(event.state_delta),
+        error: projectValue(event.error),
+    };
+}
+function projectValue(value, key = "") {
+    if (Array.isArray(value))
+        return value.map((item) => projectValue(item, key));
+    if (!value || typeof value !== "object") {
+        return shouldRedact(key) && typeof value === "string" ? "[redacted]" : value;
+    }
+    const out = {};
+    for (const [childKey, child] of Object.entries(value)) {
+        out[childKey] = projectValue(child, childKey);
+    }
+    return out;
+}
+function shouldRedact(key) {
+    const normalized = key.toLowerCase().replace(/[^a-z0-9]/g, "");
+    if (SECRET_KEYS.has(normalized))
+        return true;
+    if (normalized.includes("secret"))
+        return true;
+    if (normalized.includes("authorization"))
+        return true;
+    return false;
+}
+//# sourceMappingURL=recording.js.map

package/node_modules/@pome-sh/twin-linear/dist/src/recording.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recording.js","sourceRoot":"","sources":["../../src/recording.ts"],"names":[],"mappings":"AAGA,mFAAmF;AACnF,+EAA+E;AAC/E,gFAAgF;AAChF,4EAA4E;AAC5E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,cAAc;IACd,aAAa;IACb,cAAc;IACd,OAAO;IACP,QAAQ;IACR,eAAe;IACf,cAAc;IACd,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,UAAU,sBAAsB,CAAC,KAAoB;IACzD,OAAO;QACL,GAAG,KAAK;QACR,YAAY,EAAE,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC;QAC9C,aAAa,EAAE,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC;QAChD,WAAW,EAAE,YAAY,CAAC,KAAK,CAAC,WAAW,CAAiC;QAC5E,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,KAAK,CAA2B;KAC3D,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,GAAG,GAAG,EAAE;IAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9E,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,YAAY,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/E,CAAC;IACD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAC/D,IAAI,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/node_modules/@pome-sh/twin-linear/dist/src/routes.d.ts

@@ -0,0 +1,9 @@
+import type { RouteContext } from "@pome-sh/sdk";
+import type { Hono } from "hono";
+import type { LinearDomain } from "./domain/index.js";
+/**
+ * Session-mounted routes (also available at root via mountSessionAtRoot).
+ * OAuth is mounted publicly by `withPublicOAuth` — authorize/token/revoke
+ * must not sit behind bearerAuth.
+ */
+export declare function registerLinearRoutes(app: Hono, ctx: RouteContext<LinearDomain>): void;

package/node_modules/@pome-sh/twin-linear/dist/src/routes.js

@@ -0,0 +1,10 @@
+import { registerGraphqlRoutes } from "./graphql/routes.js";
+/**
+ * Session-mounted routes (also available at root via mountSessionAtRoot).
+ * OAuth is mounted publicly by `withPublicOAuth` — authorize/token/revoke
+ * must not sit behind bearerAuth.
+ */
+export function registerLinearRoutes(app, ctx) {
+    registerGraphqlRoutes(app, ctx);
+}
+//# sourceMappingURL=routes.js.map

package/node_modules/@pome-sh/twin-linear/dist/src/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/routes.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAE5D;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAS,EAAE,GAA+B;IAC7E,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAClC,CAAC"}

package/node_modules/@pome-sh/twin-linear/dist/src/seed/apply.d.ts

@@ -0,0 +1,4 @@
+import type { LinearDomain } from "../domain/linear-domain.js";
+import type { ParsedLinearStateSeed } from "../seed.js";
+/** Apply a parsed seed into an empty Linear twin database. */
+export declare function applySeed(domain: LinearDomain, seed: ParsedLinearStateSeed): void;