@rool-dev/sdk 0.1.0

package/dist/apps.d.ts

@@ -0,0 +1,29 @@
+import type { PublishedAppInfo, PublishAppOptions } from './types.js';
+import type { AuthManager } from './auth.js';
+export interface AppsClientConfig {
+    appsUrl: string;
+    authManager: AuthManager;
+}
+export declare class AppsClient {
+    private config;
+    constructor(config: AppsClientConfig);
+    /**
+     * List all published apps for the current user.
+     */
+    list(): Promise<PublishedAppInfo[]>;
+    /**
+     * Get info for a specific published app.
+     */
+    get(appId: string): Promise<PublishedAppInfo | null>;
+    /**
+     * Publish or update an app.
+     * @param appId - URL-safe identifier for the app
+     * @param options - App name, bundle (zip file), and optional SPA flag
+     */
+    publish(appId: string, options: PublishAppOptions): Promise<PublishedAppInfo>;
+    /**
+     * Unpublish an app.
+     */
+    unpublish(appId: string): Promise<void>;
+}
+//# sourceMappingURL=apps.d.ts.map

package/dist/apps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apps.d.ts","sourceRoot":"","sources":["../src/apps.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE7C,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,WAAW,CAAC;CAC1B;AAED,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAAmB;gBAErB,MAAM,EAAE,gBAAgB;IAIpC;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAgBzC;;OAEG;IACG,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAoB1D;;;;OAIG;IACG,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA0BnF;;OAEG;IACG,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAa9C"}

package/dist/apps.js

@@ -0,0 +1,88 @@
+// =============================================================================
+// Apps Client
+// REST API wrapper for app publishing/unpublishing/listing
+// =============================================================================
+export class AppsClient {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    /**
+     * List all published apps for the current user.
+     */
+    async list() {
+        const token = await this.config.authManager.getToken();
+        if (!token)
+            throw new Error('Not authenticated');
+        const response = await fetch(this.config.appsUrl, {
+            method: 'GET',
+            headers: { Authorization: `Bearer ${token}` },
+        });
+        if (!response.ok) {
+            throw new Error(`Failed to list apps: ${response.status} ${response.statusText}`);
+        }
+        return response.json();
+    }
+    /**
+     * Get info for a specific published app.
+     */
+    async get(appId) {
+        const token = await this.config.authManager.getToken();
+        if (!token)
+            throw new Error('Not authenticated');
+        const response = await fetch(`${this.config.appsUrl}/${encodeURIComponent(appId)}`, {
+            method: 'GET',
+            headers: { Authorization: `Bearer ${token}` },
+        });
+        if (response.status === 404) {
+            return null;
+        }
+        if (!response.ok) {
+            throw new Error(`Failed to get app: ${response.status} ${response.statusText}`);
+        }
+        return response.json();
+    }
+    /**
+     * Publish or update an app.
+     * @param appId - URL-safe identifier for the app
+     * @param options - App name, bundle (zip file), and optional SPA flag
+     */
+    async publish(appId, options) {
+        const token = await this.config.authManager.getToken();
+        if (!token)
+            throw new Error('Not authenticated');
+        const formData = new FormData();
+        formData.append('bundle', options.bundle);
+        formData.append('name', options.name);
+        if (options.spa !== undefined) {
+            formData.append('spa', String(options.spa));
+        }
+        const response = await fetch(`${this.config.appsUrl}/${encodeURIComponent(appId)}`, {
+            method: 'POST',
+            headers: { Authorization: `Bearer ${token}` },
+            body: formData,
+        });
+        if (!response.ok) {
+            const errorBody = await response.json().catch(() => ({}));
+            const errorMessage = errorBody.error || `${response.status} ${response.statusText}`;
+            throw new Error(`Failed to publish app: ${errorMessage}`);
+        }
+        return response.json();
+    }
+    /**
+     * Unpublish an app.
+     */
+    async unpublish(appId) {
+        const token = await this.config.authManager.getToken();
+        if (!token)
+            throw new Error('Not authenticated');
+        const response = await fetch(`${this.config.appsUrl}/${encodeURIComponent(appId)}`, {
+            method: 'DELETE',
+            headers: { Authorization: `Bearer ${token}` },
+        });
+        if (!response.ok && response.status !== 204) {
+            throw new Error(`Failed to unpublish app: ${response.status} ${response.statusText}`);
+        }
+    }
+}
+//# sourceMappingURL=apps.js.map

package/dist/apps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apps.js","sourceRoot":"","sources":["../src/apps.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,cAAc;AACd,2DAA2D;AAC3D,gFAAgF;AAUhF,MAAM,OAAO,UAAU;IACb,MAAM,CAAmB;IAEjC,YAAY,MAAwB;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;QACvD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAEjD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;YAChD,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;SAC9C,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACpF,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,KAAa;QACrB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;QACvD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAEjD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE;YAClF,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;SAC9C,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,sBAAsB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,OAA0B;QACrD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;QACvD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAEjD,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC;QAChC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1C,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC9B,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE;YAClF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;YAC7C,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1D,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,IAAI,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,0BAA0B,YAAY,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,KAAa;QAC3B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;QACvD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAEjD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE;YAClF,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;SAC9C,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;CACF"}

package/dist/auth-browser.d.ts

@@ -0,0 +1,80 @@
+import type { AuthProvider, AuthUser } from './types.js';
+export interface BrowserAuthConfig {
+    /** Auth service URL (e.g. https://api.dev.rool.dev/auth) */
+    authUrl: string;
+    storagePrefix?: string;
+    onAuthStateChanged: (authenticated: boolean) => void;
+}
+export declare class BrowserAuthProvider implements AuthProvider {
+    private config;
+    private apiKey;
+    private apiKeyFetchPromise;
+    private refreshPromise;
+    private refreshTimeoutId;
+    private get storageKeys();
+    /** Auth URL without trailing slash */
+    private get authBaseUrl();
+    constructor(config: BrowserAuthConfig);
+    /**
+     * Initialize auth manager - should be called on app startup.
+     * Processes any auth callback in the URL and sets up auto-refresh.
+     */
+    initialize(): boolean;
+    /**
+     * Check if user is currently authenticated (validates token is usable).
+     */
+    isAuthenticated(): Promise<boolean>;
+    /**
+     * Get current access token, refreshing if expired.
+     * Returns undefined if not authenticated.
+     */
+    getToken(): Promise<string | undefined>;
+    /**
+     * Get auth identity decoded from JWT token.
+     */
+    getAuthUser(): AuthUser;
+    /**
+     * Initiate login by redirecting to auth page.
+     * @param appName - The name of the application requesting login (displayed on auth page)
+     */
+    login(appName: string): void;
+    /**
+     * Logout - clear all tokens and state.
+     */
+    logout(): void;
+    /**
+     * Process auth callback from URL fragment.
+     * Should be called on page load.
+     * @returns true if callback was processed
+     */
+    processCallback(): boolean;
+    /**
+     * Destroy auth manager - clear refresh timers.
+     */
+    destroy(): void;
+    /**
+     * Get cached storage data from localStorage.
+     */
+    getStorage(): Record<string, unknown> | null;
+    /**
+     * Set cached storage data to localStorage.
+     */
+    setStorage(data: Record<string, unknown>): void;
+    /**
+     * Get the API key, fetching from server if not provided in config.
+     */
+    private getApiKey;
+    private tryRefreshToken;
+    private scheduleTokenRefresh;
+    private cancelScheduledRefresh;
+    private readAccessToken;
+    private readExpiresAt;
+    private writeTokens;
+    private clearTokens;
+    private storeState;
+    private readState;
+    private clearState;
+    private generateState;
+    private decodeAuthUser;
+}
+//# sourceMappingURL=auth-browser.d.ts.map

package/dist/auth-browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-browser.d.ts","sourceRoot":"","sources":["../src/auth-browser.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAOzD,MAAM,WAAW,iBAAiB;IAC9B,4DAA4D;IAC5D,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,CAAC,aAAa,EAAE,OAAO,KAAK,IAAI,CAAC;CACxD;AAED,qBAAa,mBAAoB,YAAW,YAAY;IACpD,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,kBAAkB,CAAuC;IACjE,OAAO,CAAC,cAAc,CAAiC;IACvD,OAAO,CAAC,gBAAgB,CAA8C;IAEtE,OAAO,KAAK,WAAW,GAQtB;IAED,sCAAsC;IACtC,OAAO,KAAK,WAAW,GAEtB;gBAEW,MAAM,EAAE,iBAAiB;IAIrC;;;OAGG;IACH,UAAU,IAAI,OAAO;IAMrB;;OAEG;IACG,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC;IAKzC;;;OAGG;IACG,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAgB7C;;OAEG;IACH,WAAW,IAAI,QAAQ;IAMvB;;;OAGG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAa5B;;OAEG;IACH,MAAM,IAAI,IAAI;IAOd;;;;OAIG;IACH,eAAe,IAAI,OAAO;IAyC1B;;OAEG;IACH,OAAO,IAAI,IAAI;IAIf;;OAEG;IACH,UAAU,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAU5C;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAa/C;;OAEG;YACW,SAAS;YAgCT,eAAe;IA4E7B,OAAO,CAAC,oBAAoB;IAmB5B,OAAO,CAAC,sBAAsB;IAO9B,OAAO,CAAC,eAAe;IAIvB,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,WAAW;IAwBnB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,UAAU;IAQlB,OAAO,CAAC,SAAS;IAQjB,OAAO,CAAC,UAAU;IAQlB,OAAO,CAAC,aAAa;IAUrB,OAAO,CAAC,cAAc;CAYzB"}

package/dist/auth-browser.js

@@ -0,0 +1,370 @@
+const GCIP_REFRESH_ENDPOINT = 'https://securetoken.googleapis.com/v1/token';
+const REFRESH_BUFFER_MS = 5 * 60 * 1000; // Refresh 5 minutes before expiry
+const DEFAULT_STORAGE_PREFIX = 'rool_';
+export class BrowserAuthProvider {
+    config;
+    apiKey = null;
+    apiKeyFetchPromise = null;
+    refreshPromise = null;
+    refreshTimeoutId = null;
+    get storageKeys() {
+        const prefix = this.config.storagePrefix ?? DEFAULT_STORAGE_PREFIX;
+        return {
+            access: `${prefix}access_token`,
+            refresh: `${prefix}refresh_token`,
+            expiresAt: `${prefix}token_expires_at`,
+            state: `${prefix}auth_state`,
+        };
+    }
+    /** Auth URL without trailing slash */
+    get authBaseUrl() {
+        return this.config.authUrl.replace(/\/+$/, '');
+    }
+    constructor(config) {
+        this.config = config;
+    }
+    /**
+     * Initialize auth manager - should be called on app startup.
+     * Processes any auth callback in the URL and sets up auto-refresh.
+     */
+    initialize() {
+        const wasCallback = this.processCallback();
+        this.scheduleTokenRefresh();
+        return wasCallback;
+    }
+    /**
+     * Check if user is currently authenticated (validates token is usable).
+     */
+    async isAuthenticated() {
+        const token = await this.getToken();
+        return token !== undefined;
+    }
+    /**
+     * Get current access token, refreshing if expired.
+     * Returns undefined if not authenticated.
+     */
+    async getToken() {
+        const accessToken = this.readAccessToken();
+        const expiresAt = this.readExpiresAt();
+        if (!accessToken)
+            return undefined;
+        // Token expired or about to expire - try refresh
+        if (expiresAt && Date.now() >= expiresAt - REFRESH_BUFFER_MS) {
+            const refreshed = await this.tryRefreshToken();
+            if (!refreshed)
+                return undefined;
+            return this.readAccessToken() ?? undefined;
+        }
+        return accessToken;
+    }
+    /**
+     * Get auth identity decoded from JWT token.
+     */
+    getAuthUser() {
+        const accessToken = this.readAccessToken();
+        if (!accessToken)
+            return { email: null, name: null };
+        return this.decodeAuthUser(accessToken);
+    }
+    /**
+     * Initiate login by redirecting to auth page.
+     * @param appName - The name of the application requesting login (displayed on auth page)
+     */
+    login(appName) {
+        const loginUrl = new URL(`${this.authBaseUrl}/`);
+        const redirectTarget = window.location.origin + window.location.pathname + window.location.search;
+        loginUrl.searchParams.set('redirect_uri', redirectTarget);
+        loginUrl.searchParams.set('app_name', appName);
+        const state = this.generateState();
+        this.storeState(state);
+        loginUrl.searchParams.set('state', state);
+        window.location.href = loginUrl.toString();
+    }
+    /**
+     * Logout - clear all tokens and state.
+     */
+    logout() {
+        this.clearTokens();
+        this.clearState();
+        this.cancelScheduledRefresh();
+        this.config.onAuthStateChanged(false);
+    }
+    /**
+     * Process auth callback from URL fragment.
+     * Should be called on page load.
+     * @returns true if callback was processed
+     */
+    processCallback() {
+        const hash = window.location.hash ?? '';
+        const trimmed = hash.startsWith('#') ? hash.slice(1) : hash;
+        if (!trimmed)
+            return false;
+        const params = new URLSearchParams(trimmed);
+        const idToken = params.get('id_token');
+        if (!idToken)
+            return false;
+        const refreshToken = params.get('refresh_token');
+        const expiresIn = params.get('expires_in');
+        const expiresAt = expiresIn ? Date.now() + Number(expiresIn) * 1000 : NaN;
+        const incomingState = params.get('state');
+        const storedState = this.readState();
+        // Validate state - if we stored one, require it back
+        if (storedState && incomingState !== storedState) {
+            console.error('[RoolClient] Auth state mismatch. Token fragment ignored.');
+            return false;
+        }
+        if (!Number.isFinite(expiresAt)) {
+            console.error('[RoolClient] Auth response missing expires_in. Token ignored.');
+            return false;
+        }
+        // Clear state and store tokens
+        this.clearState();
+        this.writeTokens(idToken, refreshToken, expiresAt);
+        // Clean URL
+        const cleanUrl = window.location.origin + window.location.pathname + window.location.search;
+        window.history.replaceState({}, document.title, cleanUrl);
+        // Schedule refresh and notify
+        this.scheduleTokenRefresh();
+        this.config.onAuthStateChanged(true);
+        return true;
+    }
+    /**
+     * Destroy auth manager - clear refresh timers.
+     */
+    destroy() {
+        this.cancelScheduledRefresh();
+    }
+    /**
+     * Get cached storage data from localStorage.
+     */
+    getStorage() {
+        try {
+            const key = `${this.config.storagePrefix ?? DEFAULT_STORAGE_PREFIX}user_storage`;
+            const data = localStorage.getItem(key);
+            return data ? JSON.parse(data) : null;
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Set cached storage data to localStorage.
+     */
+    setStorage(data) {
+        try {
+            const key = `${this.config.storagePrefix ?? DEFAULT_STORAGE_PREFIX}user_storage`;
+            localStorage.setItem(key, JSON.stringify(data));
+        }
+        catch {
+            // Ignore localStorage errors
+        }
+    }
+    // ===========================================================================
+    // Private methods
+    // ===========================================================================
+    /**
+     * Get the API key, fetching from server if not provided in config.
+     */
+    async getApiKey() {
+        // Already have it
+        if (this.apiKey)
+            return this.apiKey;
+        // Already fetching
+        if (this.apiKeyFetchPromise)
+            return this.apiKeyFetchPromise;
+        // Fetch from server
+        this.apiKeyFetchPromise = fetch(`${this.authBaseUrl}/config.json`)
+            .then(async (response) => {
+            if (!response.ok) {
+                console.warn('[RoolClient] Failed to fetch API key from server');
+                return null;
+            }
+            const data = await response.json();
+            if (data.apiKey && typeof data.apiKey === 'string') {
+                this.apiKey = data.apiKey;
+                return this.apiKey;
+            }
+            return null;
+        })
+            .catch((error) => {
+            console.warn('[RoolClient] Failed to fetch API key:', error);
+            return null;
+        })
+            .finally(() => {
+            this.apiKeyFetchPromise = null;
+        });
+        return this.apiKeyFetchPromise;
+    }
+    async tryRefreshToken() {
+        // Deduplicate concurrent refresh attempts
+        if (this.refreshPromise) {
+            return this.refreshPromise;
+        }
+        const refreshToken = localStorage.getItem(this.storageKeys.refresh);
+        if (!refreshToken)
+            return false;
+        // Get API key (from config or server)
+        const apiKey = await this.getApiKey();
+        if (!apiKey) {
+            console.warn('[RoolClient] Cannot refresh token: no API key available');
+            return false;
+        }
+        const refreshUrl = new URL(GCIP_REFRESH_ENDPOINT);
+        refreshUrl.searchParams.set('key', apiKey);
+        this.refreshPromise = (async () => {
+            let response;
+            try {
+                response = await fetch(refreshUrl.toString(), {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+                    body: new URLSearchParams({
+                        grant_type: 'refresh_token',
+                        refresh_token: refreshToken,
+                    }),
+                });
+            }
+            catch (error) {
+                // Network error - don't clear tokens, might work next time
+                console.warn('[RoolClient] Token refresh network error:', error);
+                return false;
+            }
+            // 400/401 = refresh token is invalid, clear everything
+            if (response.status === 400 || response.status === 401) {
+                console.warn('[RoolClient] Refresh token invalid, clearing credentials');
+                this.clearTokens();
+                this.config.onAuthStateChanged(false);
+                return false;
+            }
+            // Other HTTP errors - don't clear tokens, might be transient
+            if (!response.ok) {
+                console.warn(`[RoolClient] Token refresh failed: ${response.status} ${response.statusText}`);
+                return false;
+            }
+            // Success - parse and store new tokens
+            try {
+                const data = await response.json();
+                const accessToken = data.id_token ?? data.access_token ?? null;
+                const nextRefreshToken = data.refresh_token ?? refreshToken;
+                const expiresAt = data.expires_in ? Date.now() + data.expires_in * 1000 : NaN;
+                if (!accessToken || !Number.isFinite(expiresAt)) {
+                    console.error('[RoolClient] Refresh response missing access token or expires_in');
+                    return false;
+                }
+                this.writeTokens(accessToken, nextRefreshToken, expiresAt);
+                this.scheduleTokenRefresh();
+                return true;
+            }
+            catch (error) {
+                console.error('[RoolClient] Failed to parse refresh response:', error);
+                return false;
+            }
+        })().finally(() => {
+            this.refreshPromise = null;
+        });
+        return this.refreshPromise;
+    }
+    scheduleTokenRefresh() {
+        this.cancelScheduledRefresh();
+        const expiresAt = this.readExpiresAt();
+        if (!expiresAt)
+            return;
+        const refreshAt = expiresAt - REFRESH_BUFFER_MS;
+        const delay = refreshAt - Date.now();
+        if (delay <= 0) {
+            // Already needs refresh
+            void this.tryRefreshToken();
+        }
+        else {
+            this.refreshTimeoutId = setTimeout(() => {
+                void this.tryRefreshToken();
+            }, delay);
+        }
+    }
+    cancelScheduledRefresh() {
+        if (this.refreshTimeoutId !== null) {
+            clearTimeout(this.refreshTimeoutId);
+            this.refreshTimeoutId = null;
+        }
+    }
+    readAccessToken() {
+        return localStorage.getItem(this.storageKeys.access);
+    }
+    readExpiresAt() {
+        const raw = localStorage.getItem(this.storageKeys.expiresAt);
+        if (!raw)
+            return null;
+        const parsed = Number.parseInt(raw, 10);
+        return Number.isFinite(parsed) ? parsed : null;
+    }
+    writeTokens(accessToken, refreshToken, expiresAt) {
+        if (accessToken) {
+            localStorage.setItem(this.storageKeys.access, accessToken);
+        }
+        else {
+            localStorage.removeItem(this.storageKeys.access);
+        }
+        if (refreshToken) {
+            localStorage.setItem(this.storageKeys.refresh, refreshToken);
+        }
+        else {
+            localStorage.removeItem(this.storageKeys.refresh);
+        }
+        if (expiresAt !== null && Number.isFinite(expiresAt)) {
+            localStorage.setItem(this.storageKeys.expiresAt, Math.floor(expiresAt).toString());
+        }
+        else {
+            localStorage.removeItem(this.storageKeys.expiresAt);
+        }
+    }
+    clearTokens() {
+        this.writeTokens(null, null, null);
+    }
+    storeState(value) {
+        try {
+            sessionStorage.setItem(this.storageKeys.state, value);
+        }
+        catch {
+            // Ignore storage restrictions
+        }
+    }
+    readState() {
+        try {
+            return sessionStorage.getItem(this.storageKeys.state);
+        }
+        catch {
+            return null;
+        }
+    }
+    clearState() {
+        try {
+            sessionStorage.removeItem(this.storageKeys.state);
+        }
+        catch {
+            // Ignore storage restrictions
+        }
+    }
+    generateState() {
+        try {
+            const buffer = new Uint8Array(16);
+            window.crypto.getRandomValues(buffer);
+            return Array.from(buffer, (value) => value.toString(16).padStart(2, '0')).join('');
+        }
+        catch {
+            return Math.random().toString(36).slice(2) + Math.random().toString(36).slice(2);
+        }
+    }
+    decodeAuthUser(accessToken) {
+        try {
+            const payload = JSON.parse(atob(accessToken.split('.')[1]));
+            return {
+                email: payload.email || null,
+                name: payload.name || null,
+            };
+        }
+        catch (error) {
+            console.error('[RoolClient] Failed to decode token:', error);
+            return { email: null, name: null };
+        }
+    }
+}
+//# sourceMappingURL=auth-browser.js.map

package/dist/auth-browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-browser.js","sourceRoot":"","sources":["../src/auth-browser.ts"],"names":[],"mappings":"AAGA,MAAM,qBAAqB,GAAG,6CAA6C,CAAC;AAC5E,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,kCAAkC;AAE3E,MAAM,sBAAsB,GAAG,OAAO,CAAC;AASvC,MAAM,OAAO,mBAAmB;IACpB,MAAM,CAAoB;IAC1B,MAAM,GAAkB,IAAI,CAAC;IAC7B,kBAAkB,GAAkC,IAAI,CAAC;IACzD,cAAc,GAA4B,IAAI,CAAC;IAC/C,gBAAgB,GAAyC,IAAI,CAAC;IAEtE,IAAY,WAAW;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,sBAAsB,CAAC;QACnE,OAAO;YACH,MAAM,EAAE,GAAG,MAAM,cAAc;YAC/B,OAAO,EAAE,GAAG,MAAM,eAAe;YACjC,SAAS,EAAE,GAAG,MAAM,kBAAkB;YACtC,KAAK,EAAE,GAAG,MAAM,YAAY;SACtB,CAAC;IACf,CAAC;IAED,sCAAsC;IACtC,IAAY,WAAW;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,YAAY,MAAyB;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,UAAU;QACN,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAC3C,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC5B,OAAO,WAAW,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe;QACjB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,OAAO,KAAK,KAAK,SAAS,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ;QACV,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAEvC,IAAI,CAAC,WAAW;YAAE,OAAO,SAAS,CAAC;QAEnC,iDAAiD;QACjD,IAAI,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,SAAS,GAAG,iBAAiB,EAAE,CAAC;YAC3D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;YAC/C,IAAI,CAAC,SAAS;gBAAE,OAAO,SAAS,CAAC;YACjC,OAAO,IAAI,CAAC,eAAe,EAAE,IAAI,SAAS,CAAC;QAC/C,CAAC;QAED,OAAO,WAAW,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,WAAW;QACP,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAC3C,IAAI,CAAC,WAAW;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAe;QACjB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;QACjD,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAClG,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;QAC1D,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAE/C,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACvB,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAE1C,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,MAAM;QACF,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED;;;;OAIG;IACH,eAAe;QACX,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5D,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAE3B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAE3B,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QAC1E,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAErC,qDAAqD;QACrD,IAAI,WAAW,IAAI,aAAa,KAAK,WAAW,EAAE,CAAC;YAC/C,OAAO,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;YAC3E,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAC;YAC/E,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,+BAA+B;QAC/B,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QAEnD,YAAY;QACZ,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC5F,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAE1D,8BAA8B;QAC9B,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAErC,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,OAAO;QACH,IAAI,CAAC,sBAAsB,EAAE,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,UAAU;QACN,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,sBAAsB,cAAc,CAAC;YACjF,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,IAA6B;QACpC,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,sBAAsB,cAAc,CAAC;YACjF,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACL,6BAA6B;QACjC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,kBAAkB;IAClB,8EAA8E;IAE9E;;OAEG;IACK,KAAK,CAAC,SAAS;QACnB,kBAAkB;QAClB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QAEpC,mBAAmB;QACnB,IAAI,IAAI,CAAC,kBAAkB;YAAE,OAAO,IAAI,CAAC,kBAAkB,CAAC;QAE5D,oBAAoB;QACpB,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,WAAW,cAAc,CAAC;aAC7D,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;YACrB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;gBACjE,OAAO,IAAI,CAAC;YAChB,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACjD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;gBAC1B,OAAO,IAAI,CAAC,MAAM,CAAC;YACvB,CAAC;YACD,OAAO,IAAI,CAAC;QAChB,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACb,OAAO,CAAC,IAAI,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;YAC7D,OAAO,IAAI,CAAC;QAChB,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACV,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QACnC,CAAC,CAAC,CAAC;QAEP,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACnC,CAAC;IAEO,KAAK,CAAC,eAAe;QACzB,0CAA0C;QAC1C,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,cAAc,CAAC;QAC/B,CAAC;QAED,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACpE,IAAI,CAAC,YAAY;YAAE,OAAO,KAAK,CAAC;QAEhC,sCAAsC;QACtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;YACxE,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAClD,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAE3C,IAAI,CAAC,cAAc,GAAG,CAAC,KAAK,IAAI,EAAE;YAC9B,IAAI,QAAkB,CAAC;YACvB,IAAI,CAAC;gBACD,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE;oBAC1C,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;oBAChE,IAAI,EAAE,IAAI,eAAe,CAAC;wBACtB,UAAU,EAAE,eAAe;wBAC3B,aAAa,EAAE,YAAY;qBAC9B,CAAC;iBACL,CAAC,CAAC;YACP,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,2DAA2D;gBAC3D,OAAO,CAAC,IAAI,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;gBACjE,OAAO,KAAK,CAAC;YACjB,CAAC;YAED,uDAAuD;YACvD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrD,OAAO,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;gBACzE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACnB,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBACtC,OAAO,KAAK,CAAC;YACjB,CAAC;YAED,6DAA6D;YAC7D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,sCAAsC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;gBAC7F,OAAO,KAAK,CAAC;YACjB,CAAC;YAED,uCAAuC;YACvC,IAAI,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,MAAM,WAAW,GAAkB,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC;gBAC9E,MAAM,gBAAgB,GAAkB,IAAI,CAAC,aAAa,IAAI,YAAY,CAAC;gBAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;gBAE9E,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC9C,OAAO,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC;oBAClF,OAAO,KAAK,CAAC;gBACjB,CAAC;gBAED,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAC;gBAC3D,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC5B,OAAO,IAAI,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,gDAAgD,EAAE,KAAK,CAAC,CAAC;gBACvE,OAAO,KAAK,CAAC;YACjB,CAAC;QACL,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YACd,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,cAAc,CAAC;IAC/B,CAAC;IAEO,oBAAoB;QACxB,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAE9B,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACvC,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,MAAM,SAAS,GAAG,SAAS,GAAG,iBAAiB,CAAC;QAChD,MAAM,KAAK,GAAG,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAErC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACb,wBAAwB;YACxB,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;QAChC,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,GAAG,EAAE;gBACpC,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;YAChC,CAAC,EAAE,KAAK,CAAC,CAAC;QACd,CAAC;IACL,CAAC;IAEO,sBAAsB;QAC1B,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;YACjC,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACpC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QACjC,CAAC;IACL,CAAC;IAEO,eAAe;QACnB,OAAO,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IAEO,aAAa;QACjB,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACxC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACnD,CAAC;IAEO,WAAW,CACf,WAA0B,EAC1B,YAA2B,EAC3B,SAAwB;QAExB,IAAI,WAAW,EAAE,CAAC;YACd,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACJ,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,YAAY,EAAE,CAAC;YACf,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACjE,CAAC;aAAM,CAAC;YACJ,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,SAAS,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvF,CAAC;aAAM,CAAC;YACJ,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACxD,CAAC;IACL,CAAC;IAEO,WAAW;QACf,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IAEO,UAAU,CAAC,KAAa;QAC5B,IAAI,CAAC;YACD,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACL,8BAA8B;QAClC,CAAC;IACL,CAAC;IAEO,SAAS;QACb,IAAI,CAAC;YACD,OAAO,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAEO,UAAU;QACd,IAAI,CAAC;YACD,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACL,8BAA8B;QAClC,CAAC;IACL,CAAC;IAEO,aAAa;QACjB,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;YAClC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YACtC,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvF,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrF,CAAC;IACL,CAAC;IAEO,cAAc,CAAC,WAAmB;QACtC,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5D,OAAO;gBACH,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;gBAC5B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;aAC7B,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;YAC7D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACvC,CAAC;IACL,CAAC;CACJ"}

package/dist/auth-node.d.ts

@@ -0,0 +1,46 @@
+import type { AuthProvider, AuthUser } from './types.js';
+export interface NodeAuthConfig {
+    /** Path to store credentials (default: ~/.config/rool/credentials.json) */
+    credentialsPath?: string;
+    /** Timeout for login flow in ms (default: 5 minutes) */
+    loginTimeoutMs?: number;
+    onAuthStateChanged?: (authenticated: boolean) => void;
+}
+export declare class NodeAuthProvider implements AuthProvider {
+    private config;
+    private apiKey;
+    private _authUrl;
+    constructor(config?: NodeAuthConfig);
+    /** Called by AuthManager to inject the auth URL */
+    setAuthUrl(url: string): void;
+    /**
+     * Get a short hash of the auth URL for scoping credentials by endpoint.
+     */
+    private get endpointHash();
+    private get credentialsPath();
+    /**
+     * Get the auth endpoint URL (without trailing slash).
+     */
+    private get authEndpoint();
+    initialize(): boolean;
+    getToken(): Promise<string | undefined>;
+    getAuthUser(): AuthUser;
+    isAuthenticated(): Promise<boolean>;
+    login(appName: string): Promise<void>;
+    logout(): void;
+    private get storagePath();
+    /**
+     * Get cached storage data from filesystem.
+     */
+    getStorage(): Record<string, unknown> | null;
+    /**
+     * Set cached storage data to filesystem.
+     */
+    setStorage(data: Record<string, unknown>): void;
+    private readCredentials;
+    private writeCredentials;
+    private getApiKey;
+    private refreshToken;
+    private startLoopbackServer;
+}
+//# sourceMappingURL=auth-node.d.ts.map

package/dist/auth-node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-node.d.ts","sourceRoot":"","sources":["../src/auth-node.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAIzD,MAAM,WAAW,cAAc;IAC3B,2EAA2E;IAC3E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wDAAwD;IACxD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,CAAC,aAAa,EAAE,OAAO,KAAK,IAAI,CAAC;CACzD;AAQD,qBAAa,gBAAiB,YAAW,YAAY;IACjD,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,QAAQ,CAAuB;gBAE3B,MAAM,GAAE,cAAmB;IAIvC,mDAAmD;IACnD,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAI7B;;OAEG;IACH,OAAO,KAAK,YAAY,GAKvB;IAED,OAAO,KAAK,eAAe,GAQ1B;IAED;;OAEG;IACH,OAAO,KAAK,YAAY,GAKvB;IAED,UAAU,IAAI,OAAO;IAMf,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAY7C,WAAW,IAAI,QAAQ;IAejB,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC;IAKnC,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA+C3C,MAAM,IAAI,IAAI;IAQd,OAAO,KAAK,WAAW,GAItB;IAED;;OAEG;IACH,UAAU,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAW5C;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAe/C,OAAO,CAAC,eAAe;IAWvB,OAAO,CAAC,gBAAgB;YAYV,SAAS;YAcT,YAAY;IAoD1B,OAAO,CAAC,mBAAmB;CAuE9B"}