@puredesktop/puredesktop-ui-bridge 1.0.0-beta.1 → 2.1.0

package/src/bridge/fs.d.mts

@@ -1,41 +1,41 @@
-import type {
-  PlatformFilePreviewUrlResult,
-  PlatformFileReadBinaryResult,
-  PlatformFileReadPreviewResult,
-} from './types.js'
-
-export declare const PLATFORM_FILE_TEXT_PREVIEW_MAX_BYTES: number
-export declare const PLATFORM_FILE_BINARY_PREVIEW_MAX_BYTES: number
-
-export declare function readPlatformFilePreview(
-  path: string,
-  maxBytes?: number,
-): Promise<PlatformFileReadPreviewResult>
-
-export declare function readPlatformFileBinary(
-  path: string,
-  maxBytes?: number,
-): Promise<PlatformFileReadBinaryResult>
-
-export declare function readPlatformFilePreviewUrl(
-  path: string,
-): Promise<PlatformFilePreviewUrlResult>
-
-export declare function dataUrlFromFileBinary(
-  result: PlatformFileReadBinaryResult,
-): string
-
-export declare function readPlatformFileBinaryDataUrl(
-  path: string,
-  maxBytes?: number,
-): Promise<string>
-
-export declare function writePlatformFileBinary(
-  path: string,
-  base64: string,
-): Promise<{ ok: true }>
-
-export declare function createPlatformFolder(
-  parentPath: string,
-  name: string,
-): Promise<{ path: string }>
+import type {
+  PlatformFilePreviewUrlResult,
+  PlatformFileReadBinaryResult,
+  PlatformFileReadPreviewResult,
+} from './types.js'
+
+export declare const PLATFORM_FILE_TEXT_PREVIEW_MAX_BYTES: number
+export declare const PLATFORM_FILE_BINARY_PREVIEW_MAX_BYTES: number
+
+export declare function readPlatformFilePreview(
+  path: string,
+  maxBytes?: number,
+): Promise<PlatformFileReadPreviewResult>
+
+export declare function readPlatformFileBinary(
+  path: string,
+  maxBytes?: number,
+): Promise<PlatformFileReadBinaryResult>
+
+export declare function readPlatformFilePreviewUrl(
+  path: string,
+): Promise<PlatformFilePreviewUrlResult>
+
+export declare function dataUrlFromFileBinary(
+  result: PlatformFileReadBinaryResult,
+): string
+
+export declare function readPlatformFileBinaryDataUrl(
+  path: string,
+  maxBytes?: number,
+): Promise<string>
+
+export declare function writePlatformFileBinary(
+  path: string,
+  base64: string,
+): Promise<{ ok: true }>
+
+export declare function createPlatformFolder(
+  parentPath: string,
+  name: string,
+): Promise<{ path: string }>

package/src/bridge/fs.mjs

@@ -1,82 +1,82 @@
-import { bridge } from './client.mjs'
-import { PLATFORM_BRIDGE_METHODS } from './methods.mjs'
-
-/** Default text preview cap — matches shell `readPlatformFilePreview`. */
-export const PLATFORM_FILE_TEXT_PREVIEW_MAX_BYTES = 64 * 1024
-
-/** Default binary preview cap for legacy inline image reads. Prefer `fs.previewUrl`. */
-export const PLATFORM_FILE_BINARY_PREVIEW_MAX_BYTES = 5 * 1024 * 1024
-
-/**
- * @param {string} path
- * @returns {Promise<import('./types.ts').PlatformFilePreviewUrlResult>}
- */
-export async function readPlatformFilePreviewUrl(path) {
-  return bridge.call(PLATFORM_BRIDGE_METHODS.FS_PREVIEW_URL, [{ path }])
-}
-
-/**
- * @param {string} path
- * @param {number | undefined} maxBytes
- * @returns {Promise<import('./types.ts').PlatformFileReadPreviewResult>}
- */
-export async function readPlatformFilePreview(path, maxBytes) {
-  const request = maxBytes === undefined ? { path } : { path, maxBytes }
-  return bridge.call(PLATFORM_BRIDGE_METHODS.FS_READ_PREVIEW, [request])
-}
-
-/**
- * @param {string} path
- * @param {number | undefined} maxBytes
- * @returns {Promise<import('./types.ts').PlatformFileReadBinaryResult>}
- */
-export async function readPlatformFileBinary(path, maxBytes) {
-  const request = maxBytes === undefined ? { path } : { path, maxBytes }
-  return bridge.call(PLATFORM_BRIDGE_METHODS.FS_READ_BINARY, [request])
-}
-
-/**
- * @param {import('./types.ts').PlatformFileReadBinaryResult} result
- * @returns {string}
- */
-export function dataUrlFromFileBinary(result) {
-  return `data:${result.mimeType};base64,${result.base64}`
-}
-
-/**
- * Read file bytes via bridge and return an inline data URL (non-React).
- * Default cap matches asset thumbnails and legacy inline image reads.
- *
- * @param {string} path
- * @param {number | undefined} maxBytes
- * @returns {Promise<string>}
- */
-export async function readPlatformFileBinaryDataUrl(path, maxBytes) {
-  const result = await readPlatformFileBinary(
-    path,
-    maxBytes ?? PLATFORM_FILE_BINARY_PREVIEW_MAX_BYTES,
-  )
-  return dataUrlFromFileBinary(result)
-}
-
-/**
- * @param {string} path
- * @param {string} base64
- * @returns {Promise<{ ok: true }>}
- */
-export async function writePlatformFileBinary(path, base64) {
-  return bridge.call(PLATFORM_BRIDGE_METHODS.FS_WRITE_BINARY, [
-    { path, base64 },
-  ])
-}
-
-/**
- * @param {string} parentPath
- * @param {string} name
- * @returns {Promise<{ path: string }>}
- */
-export async function createPlatformFolder(parentPath, name) {
-  return bridge.call(PLATFORM_BRIDGE_METHODS.FS_CREATE_FOLDER, [
-    { parentPath, name },
-  ])
-}
+import { bridge } from './client.mjs'
+import { PLATFORM_BRIDGE_METHODS } from './methods.mjs'
+
+/** Default text preview cap — matches shell `readPlatformFilePreview`. */
+export const PLATFORM_FILE_TEXT_PREVIEW_MAX_BYTES = 64 * 1024
+
+/** Default binary preview cap for legacy inline image reads. Prefer `fs.previewUrl`. */
+export const PLATFORM_FILE_BINARY_PREVIEW_MAX_BYTES = 5 * 1024 * 1024
+
+/**
+ * @param {string} path
+ * @returns {Promise<import('./types.ts').PlatformFilePreviewUrlResult>}
+ */
+export async function readPlatformFilePreviewUrl(path) {
+  return bridge.call(PLATFORM_BRIDGE_METHODS.FS_PREVIEW_URL, [{ path }])
+}
+
+/**
+ * @param {string} path
+ * @param {number | undefined} maxBytes
+ * @returns {Promise<import('./types.ts').PlatformFileReadPreviewResult>}
+ */
+export async function readPlatformFilePreview(path, maxBytes) {
+  const request = maxBytes === undefined ? { path } : { path, maxBytes }
+  return bridge.call(PLATFORM_BRIDGE_METHODS.FS_READ_PREVIEW, [request])
+}
+
+/**
+ * @param {string} path
+ * @param {number | undefined} maxBytes
+ * @returns {Promise<import('./types.ts').PlatformFileReadBinaryResult>}
+ */
+export async function readPlatformFileBinary(path, maxBytes) {
+  const request = maxBytes === undefined ? { path } : { path, maxBytes }
+  return bridge.call(PLATFORM_BRIDGE_METHODS.FS_READ_BINARY, [request])
+}
+
+/**
+ * @param {import('./types.ts').PlatformFileReadBinaryResult} result
+ * @returns {string}
+ */
+export function dataUrlFromFileBinary(result) {
+  return `data:${result.mimeType};base64,${result.base64}`
+}
+
+/**
+ * Read file bytes via bridge and return an inline data URL (non-React).
+ * Default cap matches asset thumbnails and legacy inline image reads.
+ *
+ * @param {string} path
+ * @param {number | undefined} maxBytes
+ * @returns {Promise<string>}
+ */
+export async function readPlatformFileBinaryDataUrl(path, maxBytes) {
+  const result = await readPlatformFileBinary(
+    path,
+    maxBytes ?? PLATFORM_FILE_BINARY_PREVIEW_MAX_BYTES,
+  )
+  return dataUrlFromFileBinary(result)
+}
+
+/**
+ * @param {string} path
+ * @param {string} base64
+ * @returns {Promise<{ ok: true }>}
+ */
+export async function writePlatformFileBinary(path, base64) {
+  return bridge.call(PLATFORM_BRIDGE_METHODS.FS_WRITE_BINARY, [
+    { path, base64 },
+  ])
+}
+
+/**
+ * @param {string} parentPath
+ * @param {string} name
+ * @returns {Promise<{ path: string }>}
+ */
+export async function createPlatformFolder(parentPath, name) {
+  return bridge.call(PLATFORM_BRIDGE_METHODS.FS_CREATE_FOLDER, [
+    { parentPath, name },
+  ])
+}

package/src/bridge/fs.test.ts

@@ -1,16 +1,16 @@
-import { describe, expect, it } from 'vitest'
-import { dataUrlFromFileBinary } from './fs.mjs'
-
-describe('dataUrlFromFileBinary', () => {
-  it('builds a data URL from bridge binary result', () => {
-    expect(
-      dataUrlFromFileBinary({
-        path: '/tmp/image.png',
-        mimeType: 'image/png',
-        base64: 'abc123',
-        truncated: false,
-        byteLength: 3,
-      }),
-    ).toBe('data:image/png;base64,abc123')
-  })
-})
+import { describe, expect, it } from 'vitest'
+import { dataUrlFromFileBinary } from './fs.mjs'
+
+describe('dataUrlFromFileBinary', () => {
+  it('builds a data URL from bridge binary result', () => {
+    expect(
+      dataUrlFromFileBinary({
+        path: '/tmp/image.png',
+        mimeType: 'image/png',
+        base64: 'abc123',
+        truncated: false,
+        byteLength: 3,
+      }),
+    ).toBe('data:image/png;base64,abc123')
+  })
+})

package/src/bridge/fs.ts

@@ -1,10 +1,10 @@
-export {
-  dataUrlFromFileBinary,
-  readPlatformFileBinary,
-  readPlatformFileBinaryDataUrl,
-  readPlatformFilePreview,
-  readPlatformFilePreviewUrl,
-  writePlatformFileBinary,
-  PLATFORM_FILE_BINARY_PREVIEW_MAX_BYTES,
-  PLATFORM_FILE_TEXT_PREVIEW_MAX_BYTES,
-} from './fs.mjs'
+export {
+  dataUrlFromFileBinary,
+  readPlatformFileBinary,
+  readPlatformFileBinaryDataUrl,
+  readPlatformFilePreview,
+  readPlatformFilePreviewUrl,
+  writePlatformFileBinary,
+  PLATFORM_FILE_BINARY_PREVIEW_MAX_BYTES,
+  PLATFORM_FILE_TEXT_PREVIEW_MAX_BYTES,
+} from './fs.mjs'

package/src/bridge/googleAuth.ts

@@ -0,0 +1,159 @@
+export interface GoogleOauthTokens {
+  accessToken: string
+  refreshToken?: string
+  expiresAt: number
+  scope: string
+}
+
+export const GMAIL_SCOPES = [
+  'https://www.googleapis.com/auth/gmail.modify',
+  'https://www.googleapis.com/auth/gmail.send',
+]
+
+export const CALENDAR_SCOPES = [
+  'https://www.googleapis.com/auth/calendar.events',
+]
+
+export const GOOGLE_AUTHORIZATION_ENDPOINT =
+  'https://accounts.google.com/o/oauth2/v2/auth'
+export const GOOGLE_TOKEN_ENDPOINT = 'https://oauth2.googleapis.com/token'
+
+const EXPIRY_SLACK_MS = 60_000
+
+export interface PkcePair {
+  verifier: string
+  challenge: string
+}
+
+function base64UrlEncode(bytes: Uint8Array): string {
+  let binary = ''
+  for (const byte of bytes) {
+    binary += String.fromCharCode(byte)
+  }
+  return btoa(binary).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '')
+}
+
+export function randomUrlSafeString(byteLength = 32): string {
+  const bytes = new Uint8Array(byteLength)
+  crypto.getRandomValues(bytes)
+  return base64UrlEncode(bytes)
+}
+
+export async function createPkcePair(): Promise<PkcePair> {
+  const verifier = randomUrlSafeString(48)
+  const digest = await crypto.subtle.digest(
+    'SHA-256',
+    new TextEncoder().encode(verifier),
+  )
+  return { verifier, challenge: base64UrlEncode(new Uint8Array(digest)) }
+}
+
+export interface GoogleAuthUrlInput {
+  clientId: string
+  challenge: string
+  state: string
+  scopes?: string[]
+}
+
+export function buildGoogleAuthorizationUrl(input: GoogleAuthUrlInput): string {
+  const url = new URL(GOOGLE_AUTHORIZATION_ENDPOINT)
+  url.searchParams.set('client_id', input.clientId)
+  url.searchParams.set('response_type', 'code')
+  url.searchParams.set('scope', (input.scopes ?? CALENDAR_SCOPES).join(' '))
+  url.searchParams.set('code_challenge', input.challenge)
+  url.searchParams.set('code_challenge_method', 'S256')
+  url.searchParams.set('state', input.state)
+  url.searchParams.set('access_type', 'offline')
+  url.searchParams.set('prompt', 'consent')
+  return url.toString()
+}
+
+interface GoogleTokenResponse {
+  access_token: string
+  refresh_token?: string
+  expires_in: number
+  scope: string
+}
+
+export function tokensFromTokenResponse(
+  payload: GoogleTokenResponse,
+  previousRefreshToken?: string,
+  now = Date.now(),
+): GoogleOauthTokens {
+  const refreshToken = payload.refresh_token ?? previousRefreshToken
+  return {
+    accessToken: payload.access_token,
+    ...(refreshToken === undefined ? {} : { refreshToken }),
+    expiresAt: now + payload.expires_in * 1000,
+    scope: payload.scope,
+  }
+}
+
+export function accessTokenIsFresh(
+  tokens: GoogleOauthTokens,
+  now = Date.now(),
+): boolean {
+  return tokens.expiresAt - EXPIRY_SLACK_MS > now
+}
+
+export interface TokenExchangeInput {
+  clientId: string
+  clientSecret?: string
+  code: string
+  verifier: string
+  redirectUri: string
+}
+
+type FormPost = (
+  url: string,
+  body: string,
+) => Promise<{ ok: boolean; status: number; body: string }>
+
+export async function exchangeCodeForTokens(
+  post: FormPost,
+  input: TokenExchangeInput,
+): Promise<GoogleOauthTokens> {
+  const body = new URLSearchParams({
+    client_id: input.clientId,
+    grant_type: 'authorization_code',
+    code: input.code,
+    code_verifier: input.verifier,
+    redirect_uri: input.redirectUri,
+  })
+  if (input.clientSecret) body.set('client_secret', input.clientSecret)
+  const response = await post(GOOGLE_TOKEN_ENDPOINT, body.toString())
+  if (!response.ok) {
+    throw new Error(
+      `Google token exchange failed (${response.status}): ${response.body}`,
+    )
+  }
+  return tokensFromTokenResponse(JSON.parse(response.body) as GoogleTokenResponse)
+}
+
+export interface TokenRefreshInput {
+  clientId: string
+  clientSecret?: string
+  refreshToken: string
+}
+
+export async function refreshAccessToken(
+  post: FormPost,
+  input: TokenRefreshInput,
+): Promise<GoogleOauthTokens> {
+  const body = new URLSearchParams({
+    client_id: input.clientId,
+    grant_type: 'refresh_token',
+    refresh_token: input.refreshToken,
+  })
+  if (input.clientSecret) body.set('client_secret', input.clientSecret)
+  const response = await post(GOOGLE_TOKEN_ENDPOINT, body.toString())
+  if (!response.ok) {
+    throw new Error(
+      `Google token refresh failed (${response.status}): ${response.body}`,
+    )
+  }
+  return tokensFromTokenResponse(
+    JSON.parse(response.body) as GoogleTokenResponse,
+    input.refreshToken,
+  )
+}

package/src/bridge/googleProviderConfig.ts

@@ -0,0 +1,73 @@
+import type { GoogleOauthTokens } from './googleAuth.js'
+
+export const GOOGLE_OAUTH_CLIENT_SECRET_KEY = 'google-oauth-client'
+export const PUREMAIL_GOOGLE_SECRET_KEY = 'puremail-google'
+export const PURECALENDAR_GOOGLE_SECRET_KEY = 'purecalendar-google'
+
+export interface GoogleProviderPublicSettings {
+  clientId?: string
+  email?: string
+}
+
+export interface GoogleOAuthClientSecretPayload {
+  clientSecret?: string
+}
+
+export interface GoogleProviderSecretPayload {
+  tokens?: GoogleOauthTokens
+}
+
+export interface GoogleProviderSettingsSource {
+  label: string
+  publicSettings: GoogleProviderPublicSettings | undefined
+}
+
+export interface ResolvedGoogleProviderPublicSettings {
+  publicSettings: GoogleProviderPublicSettings
+  sourceLabel?: string
+}
+
+export function normalizeGooglePublicSettings(
+  value: GoogleProviderPublicSettings | undefined,
+): GoogleProviderPublicSettings {
+  return {
+    clientId: value?.clientId?.trim() || undefined,
+    email: value?.email?.trim() || undefined,
+  }
+}
+
+export function resolveGooglePublicSettings(
+  sources: GoogleProviderSettingsSource[],
+): ResolvedGoogleProviderPublicSettings {
+  for (const source of sources) {
+    const publicSettings = normalizeGooglePublicSettings(source.publicSettings)
+    if (publicSettings.clientId || publicSettings.email) {
+      return { publicSettings, sourceLabel: source.label }
+    }
+  }
+  return { publicSettings: {} }
+}
+
+export function parseGoogleClientSecretPayload(
+  raw: string | null,
+): GoogleOAuthClientSecretPayload {
+  if (!raw) return {}
+  try {
+    const parsed = JSON.parse(raw) as GoogleOAuthClientSecretPayload
+    return { clientSecret: parsed.clientSecret?.trim() || undefined }
+  } catch {
+    return {}
+  }
+}
+
+export function parseGoogleProviderSecretPayload(
+  raw: string | null,
+): GoogleProviderSecretPayload {
+  if (!raw) return {}
+  try {
+    const parsed = JSON.parse(raw) as GoogleProviderSecretPayload
+    return parsed.tokens ? { tokens: parsed.tokens } : {}
+  } catch {
+    return {}
+  }
+}

package/src/bridge/index.ts

@@ -1,12 +1,12 @@
-export type { PlatformBridgeEventName } from './events.mjs'
-export type {
-  PlatformFileKind,
-  PlatformAppManifest,
-  PlatformShellManifest,
-  PlatformBridgeReadyMeta,
-  PlatformBridgeViewportBinding,
-  PlatformThemeBridgePayload,
-  ResourceOpenEvent,
-  PlatformBridgeEventHandler,
-  PlatformBridgeClient,
-} from './types.js'
+export type { PlatformBridgeEventName } from './events.mjs'
+export type {
+  PlatformFileKind,
+  PlatformAppManifest,
+  PlatformShellManifest,
+  PlatformBridgeReadyMeta,
+  PlatformBridgeViewportBinding,
+  PlatformThemeBridgePayload,
+  ResourceOpenEvent,
+  PlatformBridgeEventHandler,
+  PlatformBridgeClient,
+} from './types.js'

package/src/bridge/inlinePreview.d.mts

@@ -1,35 +1,35 @@
-export type InlineAssetPreviewKind = 'mermaid' | 'table' | 'math'
-
-export interface InlineAssetPreviewResult {
-  html: string
-  error?: string
-}
-
-export declare function extractMermaidSourceFromHtml(html: string): string
-
-export interface ExpandMermaidBlocksOptions {
-  theme?: 'default' | 'dark'
-  /** Wrapper div class around rendered SVG. Default `platform-print-mermaid`. */
-  wrapperClass?: string
-}
-
-export declare function expandMermaidBlocksForPrint(
-  html: string,
-  options?: ExpandMermaidBlocksOptions,
-): Promise<string>
-
-export declare function sanitizeInlineTableHtml(source: string): string
-
-export declare function renderMermaidPreviewSvg(
-  sourceCode: string,
-  options?: { theme?: 'default' | 'dark' },
-): Promise<string>
-
-export declare function renderMathPreviewHtml(
-  sourceCode: string,
-): Promise<string>
-
-export declare function renderInlineAssetPreview(
-  kind: InlineAssetPreviewKind,
-  sourceCode: string,
-): Promise<InlineAssetPreviewResult>
+export type InlineAssetPreviewKind = 'mermaid' | 'table' | 'math'
+
+export interface InlineAssetPreviewResult {
+  html: string
+  error?: string
+}
+
+export declare function extractMermaidSourceFromHtml(html: string): string
+
+export interface ExpandMermaidBlocksOptions {
+  theme?: 'default' | 'dark'
+  /** Wrapper div class around rendered SVG. Default `platform-print-mermaid`. */
+  wrapperClass?: string
+}
+
+export declare function expandMermaidBlocksForPrint(
+  html: string,
+  options?: ExpandMermaidBlocksOptions,
+): Promise<string>
+
+export declare function sanitizeInlineTableHtml(source: string): string
+
+export declare function renderMermaidPreviewSvg(
+  sourceCode: string,
+  options?: { theme?: 'default' | 'dark' },
+): Promise<string>
+
+export declare function renderMathPreviewHtml(
+  sourceCode: string,
+): Promise<string>
+
+export declare function renderInlineAssetPreview(
+  kind: InlineAssetPreviewKind,
+  sourceCode: string,
+): Promise<InlineAssetPreviewResult>