@rool-dev/sdk 0.1.0

package/dist/auth-node.js

@@ -0,0 +1,316 @@
+import * as http from 'node:http';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import * as os from 'node:os';
+import * as crypto from 'node:crypto';
+import open from 'open';
+const GCIP_REFRESH_ENDPOINT = 'https://securetoken.googleapis.com/v1/token';
+export class NodeAuthProvider {
+    config;
+    apiKey = null;
+    _authUrl = null;
+    constructor(config = {}) {
+        this.config = config;
+    }
+    /** Called by AuthManager to inject the auth URL */
+    setAuthUrl(url) {
+        this._authUrl = url;
+    }
+    /**
+     * Get a short hash of the auth URL for scoping credentials by endpoint.
+     */
+    get endpointHash() {
+        if (!this._authUrl) {
+            return 'default';
+        }
+        return crypto.createHash('sha256').update(this._authUrl).digest('hex').slice(0, 8);
+    }
+    get credentialsPath() {
+        if (this.config.credentialsPath) {
+            return this.config.credentialsPath;
+        }
+        const homeDir = os.homedir();
+        const configDir = path.join(homeDir, '.config', 'rool');
+        // Scope credentials by endpoint to avoid mixing tokens from different environments
+        return path.join(configDir, `credentials-${this.endpointHash}.json`);
+    }
+    /**
+     * Get the auth endpoint URL (without trailing slash).
+     */
+    get authEndpoint() {
+        if (!this._authUrl) {
+            throw new Error('Auth URL not set. Ensure RoolClient is configured correctly.');
+        }
+        return this._authUrl.replace(/\/+$/, '');
+    }
+    initialize() {
+        // For Node.js, initialize just checks if credentials file exists
+        // The actual validation happens in isAuthenticated()
+        return this.readCredentials() !== null;
+    }
+    async getToken() {
+        const creds = this.readCredentials();
+        if (!creds)
+            return undefined;
+        // Refresh if expiring in less than 5 minutes
+        if (Date.now() >= creds.expires_at - 5 * 60 * 1000) {
+            return this.refreshToken(creds);
+        }
+        return creds.access_token;
+    }
+    getAuthUser() {
+        const creds = this.readCredentials();
+        if (!creds?.access_token)
+            return { email: null, name: null };
+        try {
+            const payload = JSON.parse(Buffer.from(creds.access_token.split('.')[1], 'base64').toString());
+            return {
+                email: payload.email || null,
+                name: payload.name || null,
+            };
+        }
+        catch {
+            return { email: null, name: null };
+        }
+    }
+    async isAuthenticated() {
+        const token = await this.getToken();
+        return token !== undefined;
+    }
+    async login(appName) {
+        console.log("Auth url", this._authUrl);
+        const { server, closeAll } = await this.startLoopbackServer();
+        const port = server.address().port;
+        const redirectUri = `http://localhost:${port}`;
+        // Generate code verifier/state if needed, currently just state
+        const state = Math.random().toString(36).substring(2);
+        // Auth endpoint is the root of the auth service
+        const loginUrl = new URL(`${this.authEndpoint}/`);
+        loginUrl.searchParams.set('redirect_uri', redirectUri);
+        loginUrl.searchParams.set('app_name', appName);
+        loginUrl.searchParams.set('state', state);
+        console.log(`Opening browser to login to ${appName}:`, loginUrl.toString());
+        await open(loginUrl.toString());
+        const timeoutMs = this.config.loginTimeoutMs ?? 5 * 60 * 1000; // 5 minutes default
+        return new Promise((resolve, reject) => {
+            const timeout = setTimeout(() => {
+                closeAll();
+                reject(new Error('Login timed out. Please try again.'));
+            }, timeoutMs);
+            server.on('authenticated', (tokens) => {
+                clearTimeout(timeout);
+                const expiresAt = Date.now() + (tokens.expires_in * 1000);
+                this.writeCredentials({
+                    access_token: tokens.id_token, // GCIP returns id_token
+                    refresh_token: tokens.refresh_token,
+                    expires_at: expiresAt
+                });
+                this.config.onAuthStateChanged?.(true);
+                closeAll();
+                resolve();
+            });
+            server.on('error', (err) => {
+                clearTimeout(timeout);
+                closeAll();
+                reject(err);
+            });
+        });
+    }
+    logout() {
+        const filePath = this.credentialsPath;
+        if (fs.existsSync(filePath)) {
+            fs.unlinkSync(filePath);
+        }
+        this.config.onAuthStateChanged?.(false);
+    }
+    get storagePath() {
+        const dir = path.dirname(this.credentialsPath);
+        // Scope storage by endpoint to match credentials scoping
+        return path.join(dir, `storage-${this.endpointHash}.json`);
+    }
+    /**
+     * Get cached storage data from filesystem.
+     */
+    getStorage() {
+        try {
+            const filePath = this.storagePath;
+            if (!fs.existsSync(filePath))
+                return null;
+            const data = fs.readFileSync(filePath, 'utf-8');
+            return JSON.parse(data);
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Set cached storage data to filesystem.
+     */
+    setStorage(data) {
+        try {
+            const filePath = this.storagePath;
+            const dir = path.dirname(filePath);
+            fs.mkdirSync(dir, { recursive: true });
+            fs.writeFileSync(filePath, JSON.stringify(data, null, 2), { mode: 0o600 });
+        }
+        catch (error) {
+            console.error('[RoolClient] Failed to save storage:', error);
+        }
+    }
+    // ===========================================================================
+    // Private Helpers
+    // ===========================================================================
+    readCredentials() {
+        try {
+            const filePath = this.credentialsPath;
+            if (!fs.existsSync(filePath))
+                return null;
+            const data = fs.readFileSync(filePath, 'utf-8');
+            return JSON.parse(data);
+        }
+        catch {
+            return null;
+        }
+    }
+    writeCredentials(creds) {
+        const filePath = this.credentialsPath;
+        const dir = path.dirname(filePath);
+        try {
+            fs.mkdirSync(dir, { recursive: true });
+            fs.writeFileSync(filePath, JSON.stringify(creds, null, 2), { mode: 0o600 });
+        }
+        catch (error) {
+            console.error('[RoolClient] Failed to save credentials:', error);
+        }
+    }
+    async getApiKey() {
+        if (this.apiKey)
+            return this.apiKey;
+        try {
+            const response = await fetch(`${this.authEndpoint}/config.json`);
+            if (!response.ok)
+                return null;
+            const data = await response.json();
+            this.apiKey = data.apiKey;
+            return this.apiKey;
+        }
+        catch {
+            return null;
+        }
+    }
+    async refreshToken(creds) {
+        if (!creds.refresh_token)
+            return undefined;
+        const apiKey = await this.getApiKey();
+        if (!apiKey) {
+            console.warn('[RoolClient] Cannot refresh: API key not found');
+            return undefined;
+        }
+        try {
+            // Derive referer from auth URL (required for API key restrictions)
+            const referer = new URL(this.authEndpoint).origin;
+            const response = await fetch(`${GCIP_REFRESH_ENDPOINT}?key=${apiKey}`, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/x-www-form-urlencoded',
+                    'Referer': referer,
+                },
+                body: new URLSearchParams({
+                    grant_type: 'refresh_token',
+                    refresh_token: creds.refresh_token,
+                }),
+            });
+            if (!response.ok) {
+                // 400 typically means invalid/expired refresh token - clear credentials
+                if (response.status === 400) {
+                    console.warn('[RoolClient] Refresh token expired or invalid. Please login again.');
+                    this.logout();
+                }
+                else {
+                    console.warn(`[RoolClient] Refresh failed: ${response.status}`);
+                }
+                return undefined;
+            }
+            const data = await response.json();
+            const newCreds = {
+                access_token: data.id_token || data.access_token,
+                refresh_token: data.refresh_token || creds.refresh_token,
+                expires_at: Date.now() + (Number(data.expires_in) * 1000),
+            };
+            this.writeCredentials(newCreds);
+            return newCreds.access_token;
+        }
+        catch (error) {
+            console.error('[RoolClient] Refresh failed:', error);
+            return undefined;
+        }
+    }
+    startLoopbackServer() {
+        return new Promise((resolve) => {
+            const server = http.createServer((req, res) => {
+                const url = new URL(req.url || '/', `http://localhost`);
+                // 1. Serve the capture page if we just have a root request
+                if (url.pathname === '/') {
+                    res.writeHead(200, { 'Content-Type': 'text/html' });
+                    res.end(`
+            <html>
+            <body>
+              <h1>Authenticating...</h1>
+              <script>
+                // Extract hash and post to /callback
+                if (window.location.hash) {
+                  const hash = window.location.hash.substring(1);
+                  fetch('/callback', {
+                    method: 'POST',
+                    headers: {'Content-Type': 'application/x-www-form-urlencoded'},
+                    body: hash
+                  })
+                  .then(() => document.body.innerHTML = '<h1>Login Successful. You can close this window.</h1>')
+                  .catch(err => document.body.innerHTML = '<h1>Error: ' + err.message + '</h1>');
+                }
+              </script>
+            </body>
+            </html>
+          `);
+                    return;
+                }
+                // 2. Handle the callback POST
+                if (url.pathname === '/callback' && req.method === 'POST') {
+                    let body = '';
+                    req.on('data', (chunk) => body += chunk.toString());
+                    req.on('end', () => {
+                        const params = new URLSearchParams(body);
+                        const idToken = params.get('id_token');
+                        const refreshToken = params.get('refresh_token');
+                        const expiresIn = params.get('expires_in');
+                        if (idToken && expiresIn) {
+                            res.writeHead(200);
+                            res.end('OK');
+                            server.emit('authenticated', {
+                                id_token: idToken,
+                                refresh_token: refreshToken,
+                                expires_in: Number(expiresIn)
+                            });
+                        }
+                        else {
+                            res.writeHead(400);
+                            res.end('Invalid tokens');
+                        }
+                    });
+                    return;
+                }
+                res.writeHead(404);
+                res.end();
+            });
+            // Listen on random port
+            server.listen(0, '127.0.0.1', () => resolve({
+                server,
+                closeAll: () => {
+                    server.close();
+                    server.closeAllConnections();
+                },
+            }));
+        });
+    }
+}
+//# sourceMappingURL=auth-node.js.map

package/dist/auth-node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-node.js","sourceRoot":"","sources":["../src/auth-node.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,MAAM,qBAAqB,GAAG,6CAA6C,CAAC;AAgB5E,MAAM,OAAO,gBAAgB;IACjB,MAAM,CAAiB;IACvB,MAAM,GAAkB,IAAI,CAAC;IAC7B,QAAQ,GAAkB,IAAI,CAAC;IAEvC,YAAY,SAAyB,EAAE;QACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;IAED,mDAAmD;IACnD,UAAU,CAAC,GAAW;QAClB,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,IAAY,YAAY;QACpB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjB,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACvF,CAAC;IAED,IAAY,eAAe;QACvB,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;QACvC,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACxD,mFAAmF;QACnF,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,IAAI,CAAC,YAAY,OAAO,CAAC,CAAC;IACzE,CAAC;IAED;;OAEG;IACH,IAAY,YAAY;QACpB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,UAAU;QACN,iEAAiE;QACjE,qDAAqD;QACrD,OAAO,IAAI,CAAC,eAAe,EAAE,KAAK,IAAI,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,QAAQ;QACV,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAE7B,6CAA6C;QAC7C,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;YACjD,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;QAED,OAAO,KAAK,CAAC,YAAY,CAAC;IAC9B,CAAC;IAED,WAAW;QACP,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,EAAE,YAAY;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAE7D,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC/F,OAAO;gBACH,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;gBAC5B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;aAC7B,CAAC;QACN,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACvC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe;QACjB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,OAAO,KAAK,KAAK,SAAS,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAe;QACvB,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC9D,MAAM,IAAI,GAAI,MAAM,CAAC,OAAO,EAAU,CAAC,IAAI,CAAC;QAC5C,MAAM,WAAW,GAAG,oBAAoB,IAAI,EAAE,CAAC;QAE/C,+DAA+D;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAEtD,gDAAgD;QAChD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;QAClD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACvD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC/C,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAE1C,OAAO,CAAC,GAAG,CAAC,+BAA+B,OAAO,GAAG,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5E,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEhC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,oBAAoB;QAEnF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,QAAQ,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;YAC5D,CAAC,EAAE,SAAS,CAAC,CAAC;YAEd,MAAM,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,MAAW,EAAE,EAAE;gBACvC,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;gBAC1D,IAAI,CAAC,gBAAgB,CAAC;oBAClB,YAAY,EAAE,MAAM,CAAC,QAAQ,EAAE,wBAAwB;oBACvD,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,UAAU,EAAE,SAAS;iBACxB,CAAC,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,IAAI,CAAC,CAAC;gBACvC,QAAQ,EAAE,CAAC;gBACX,OAAO,EAAE,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;gBAC9B,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,QAAQ,EAAE,CAAC;gBACX,MAAM,CAAC,GAAG,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IAED,MAAM;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC;QACtC,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED,IAAY,WAAW;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC/C,yDAAyD;QACzD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,IAAI,CAAC,YAAY,OAAO,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,UAAU;QACN,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC;YAClC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC1C,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,IAA6B;QACpC,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACnC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;QACjE,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,kBAAkB;IAClB,8EAA8E;IAEtE,eAAe;QACnB,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC;YACtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC1C,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAEO,gBAAgB,CAAC,KAAwB;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEnC,IAAI,CAAC;YACD,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAC;QACrE,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,SAAS;QACnB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QAEpC,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,YAAY,cAAc,CAAC,CAAC;YACjE,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YAC9B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC1B,OAAO,IAAI,CAAC,MAAM,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,KAAwB;QAC/C,IAAI,CAAC,KAAK,CAAC,aAAa;YAAE,OAAO,SAAS,CAAC;QAE3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;YAC/D,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,IAAI,CAAC;YACD,mEAAmE;YACnE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC;YAElD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,qBAAqB,QAAQ,MAAM,EAAE,EAAE;gBACnE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACL,cAAc,EAAE,mCAAmC;oBACnD,SAAS,EAAE,OAAO;iBACrB;gBACD,IAAI,EAAE,IAAI,eAAe,CAAC;oBACtB,UAAU,EAAE,eAAe;oBAC3B,aAAa,EAAE,KAAK,CAAC,aAAa;iBACrC,CAAC;aACL,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACf,wEAAwE;gBACxE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC1B,OAAO,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;oBACnF,IAAI,CAAC,MAAM,EAAE,CAAC;gBAClB,CAAC;qBAAM,CAAC;oBACJ,OAAO,CAAC,IAAI,CAAC,gCAAgC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBACpE,CAAC;gBACD,OAAO,SAAS,CAAC;YACrB,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAEnC,MAAM,QAAQ,GAAsB;gBAChC,YAAY,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,YAAY;gBAChD,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa;gBACxD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;aAC5D,CAAC;YAEF,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAChC,OAAO,QAAQ,CAAC,YAAY,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;YACrD,OAAO,SAAS,CAAC;QACrB,CAAC;IACL,CAAC;IAEO,mBAAmB;QACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAyB,EAAE,GAAwB,EAAE,EAAE;gBACrF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;gBAExD,2DAA2D;gBAC3D,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,EAAE,CAAC;oBACvB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;oBACpD,GAAG,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;WAmBjB,CAAC,CAAC;oBACO,OAAO;gBACX,CAAC;gBAED,8BAA8B;gBAC9B,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBACxD,IAAI,IAAI,GAAG,EAAE,CAAC;oBACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;oBAC5D,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;wBACf,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;wBACzC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;wBACvC,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;wBACjD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;wBAE3C,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC;4BACvB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;4BACnB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;4BACd,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE;gCACzB,QAAQ,EAAE,OAAO;gCACjB,aAAa,EAAE,YAAY;gCAC3B,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC;6BAChC,CAAC,CAAC;wBACP,CAAC;6BAAM,CAAC;4BACJ,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;4BACnB,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;wBAC9B,CAAC;oBACL,CAAC,CAAC,CAAC;oBACH,OAAO;gBACX,CAAC;gBAED,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,wBAAwB;YACxB,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC;gBACxC,MAAM;gBACN,QAAQ,EAAE,GAAG,EAAE;oBACX,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,mBAAmB,EAAE,CAAC;gBACjC,CAAC;aACJ,CAAC,CAAC,CAAC;QACR,CAAC,CAAC,CAAC;IACP,CAAC;CACJ"}

package/dist/auth.d.ts

@@ -0,0 +1,56 @@
+import type { AuthUser, AuthProvider } from './types.js';
+export interface AuthManagerConfig {
+    authUrl: string;
+    onAuthStateChanged?: (authenticated: boolean) => void;
+    /** External auth provider - when set, delegates all auth to this provider */
+    authProvider?: AuthProvider;
+}
+export declare class AuthManager {
+    private provider;
+    constructor(config: AuthManagerConfig);
+    /**
+     * Initialize auth manager - should be called on app startup.
+     */
+    initialize(): boolean;
+    /**
+     * Check if user is currently authenticated (validates token is usable).
+     */
+    isAuthenticated(): Promise<boolean>;
+    /**
+     * Get current access token.
+     * Returns undefined if not authenticated.
+     */
+    getToken(): Promise<string | undefined>;
+    /**
+     * Get auth identity from current session (decoded from token).
+     */
+    getAuthUser(): AuthUser;
+    /**
+     * Initiate login.
+     * @param appName - The name of the application requesting login (displayed on auth page)
+     */
+    login(appName: string): Promise<void> | void;
+    /**
+     * Logout - clear all tokens and state.
+     */
+    logout(): void;
+    /**
+     * Process auth callback from URL fragment.
+     * Should be called on page load.
+     * @returns true if callback was processed
+     */
+    processCallback(): boolean;
+    /**
+     * Destroy auth manager - cleanup resources.
+     */
+    destroy(): void;
+    /**
+     * Get cached storage data.
+     */
+    getStorage(): Record<string, unknown> | null;
+    /**
+     * Set cached storage data.
+     */
+    setStorage(data: Record<string, unknown>): void;
+}
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAGzD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,CAAC,EAAE,CAAC,aAAa,EAAE,OAAO,KAAK,IAAI,CAAC;IACtD,6EAA6E;IAC7E,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAe;gBAEnB,MAAM,EAAE,iBAAiB;IAmBrC;;OAEG;IACH,UAAU,IAAI,OAAO;IAIrB;;OAEG;IACG,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC;IAIzC;;;OAGG;IACG,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAI7C;;OAEG;IACH,WAAW,IAAI,QAAQ;IAIvB;;;OAGG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAI5C;;OAEG;IACH,MAAM,IAAI,IAAI;IAId;;;;OAIG;IACH,eAAe,IAAI,OAAO;IAQ1B;;OAEG;IACH,OAAO,IAAI,IAAI;IAIf;;OAEG;IACH,UAAU,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI5C;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;CAGhD"}

package/dist/auth.js

@@ -0,0 +1,96 @@
+// =============================================================================
+// Auth Manager
+// Handles authentication via configurable AuthProvider
+// =============================================================================
+import { BrowserAuthProvider } from './auth-browser.js';
+export class AuthManager {
+    provider;
+    constructor(config) {
+        if (config.authProvider) {
+            this.provider = config.authProvider;
+            // Inject auth URL if the provider supports it (e.g. NodeAuthProvider)
+            if ('setAuthUrl' in this.provider && typeof this.provider.setAuthUrl === 'function') {
+                this.provider.setAuthUrl(config.authUrl);
+            }
+        }
+        else {
+            // Default to BrowserAuthProvider if no external provider specified
+            // This preserves existing behavior for browser usage
+            this.provider = new BrowserAuthProvider({
+                authUrl: config.authUrl,
+                onAuthStateChanged: (authenticated) => {
+                    config.onAuthStateChanged?.(authenticated);
+                },
+            });
+        }
+    }
+    /**
+     * Initialize auth manager - should be called on app startup.
+     */
+    initialize() {
+        return this.provider.initialize?.() ?? false;
+    }
+    /**
+     * Check if user is currently authenticated (validates token is usable).
+     */
+    async isAuthenticated() {
+        return this.provider.isAuthenticated();
+    }
+    /**
+     * Get current access token.
+     * Returns undefined if not authenticated.
+     */
+    async getToken() {
+        return this.provider.getToken();
+    }
+    /**
+     * Get auth identity from current session (decoded from token).
+     */
+    getAuthUser() {
+        return this.provider.getAuthUser();
+    }
+    /**
+     * Initiate login.
+     * @param appName - The name of the application requesting login (displayed on auth page)
+     */
+    login(appName) {
+        return this.provider.login(appName);
+    }
+    /**
+     * Logout - clear all tokens and state.
+     */
+    logout() {
+        this.provider.logout();
+    }
+    /**
+     * Process auth callback from URL fragment.
+     * Should be called on page load.
+     * @returns true if callback was processed
+     */
+    processCallback() {
+        // Only BrowserAuthProvider knows how to process URL callbacks
+        if (this.provider instanceof BrowserAuthProvider) {
+            return this.provider.processCallback();
+        }
+        return false;
+    }
+    /**
+     * Destroy auth manager - cleanup resources.
+     */
+    destroy() {
+        this.provider.destroy?.();
+    }
+    /**
+     * Get cached storage data.
+     */
+    getStorage() {
+        return this.provider.getStorage();
+    }
+    /**
+     * Set cached storage data.
+     */
+    setStorage(data) {
+        this.provider.setStorage(data);
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,eAAe;AACf,uDAAuD;AACvD,gFAAgF;AAGhF,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AASxD,MAAM,OAAO,WAAW;IACd,QAAQ,CAAe;IAE/B,YAAY,MAAyB;QACnC,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC;YACpC,sEAAsE;YACtE,IAAI,YAAY,IAAI,IAAI,CAAC,QAAQ,IAAI,OAAQ,IAAI,CAAC,QAAgB,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;gBAC5F,IAAI,CAAC,QAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,mEAAmE;YACnE,qDAAqD;YACrD,IAAI,CAAC,QAAQ,GAAG,IAAI,mBAAmB,CAAC;gBACtC,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,kBAAkB,EAAE,CAAC,aAAa,EAAE,EAAE;oBACpC,MAAM,CAAC,kBAAkB,EAAE,CAAC,aAAa,CAAC,CAAC;gBAC7C,CAAC;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,IAAI,KAAK,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe;QACnB,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;IACzC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ;QACZ,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAe;QACnB,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;IACzB,CAAC;IAED;;;;OAIG;IACH,eAAe;QACb,8DAA8D;QAC9D,IAAI,IAAI,CAAC,QAAQ,YAAY,mBAAmB,EAAE,CAAC;YACjD,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;QACzC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,OAAO;QACL,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,IAA6B;QACtC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;CACF"}