@shipeasy/devtools-core 1.0.0

package/LICENSE

@@ -0,0 +1,40 @@
+Shipeasy Source-Available License (Shipeasy-SAL) 1.0
+
+Copyright (c) 2026 Shipeasy, Inc. All rights reserved.
+
+1. License Grant.
+   Subject to the terms of this License, Shipeasy, Inc. ("Shipeasy") grants
+   you a non-exclusive, non-transferable, revocable, worldwide license to:
+
+   (a) Use, copy, and modify the Software solely as a client integration for
+       interacting with Shipeasy's hosted services (the "Service");
+   (b) Distribute the Software as part of an application that calls the
+       Service, in object form, provided the recipient also agrees to this
+       License.
+
+2. Restrictions.
+   You may not:
+
+   (a) Use the Software, in whole or in part, to build, host, or operate any
+       service that competes with the Service or that provides feature-flag,
+       experimentation, configuration, internationalization, or related
+       functionality to third parties on a commercial basis;
+   (b) Sublicense, sell, rent, or lease the Software;
+   (c) Remove or alter copyright notices, license terms, or attribution.
+
+3. Contributions.
+   Any pull request you submit is licensed back to Shipeasy under this
+   License plus a perpetual, irrevocable right for Shipeasy to relicense.
+
+4. Trademarks.
+   This License does not grant rights in the names "Shipeasy", related
+   marks, or logos.
+
+5. No Warranty / Limitation of Liability.
+   THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND. IN NO
+   EVENT SHALL SHIPEASY BE LIABLE FOR ANY CLAIM, DAMAGES, OR OTHER
+   LIABILITY ARISING FROM USE OF THE SOFTWARE.
+
+6. Termination.
+   This License terminates automatically if you breach it. Sections 2-5
+   survive termination.

package/README.md

@@ -0,0 +1,19 @@
+# @shipeasy/devtools-core
+
+Headless core shared by the [Shipeasy](https://shipeasy.ai) devtools overlays —
+the admin API client, PKCE device auth, public bug intake, and the generated
+form schemas.
+
+You normally do not install this directly: it comes with
+[`@shipeasy/react-native-devtools`](https://www.npmjs.com/package/@shipeasy/react-native-devtools).
+Install it on its own only to build a custom devtools surface.
+
+```bash
+npm install @shipeasy/devtools-core
+```
+
+It reads the app's live SDK state over the `globalThis` bridge the client Engine
+publishes (`@shipeasy/sdk/devtools-contract`) rather than importing the client,
+so it can never inline a second Engine. `@shipeasy/sdk` is therefore a peer.
+
+Full docs: <https://shipeasy-ai.github.io/sdk-ts/>

package/dist/api.d.mts

@@ -0,0 +1,143 @@
+import { o as ProjectRecord, G as GateRecord, C as ConfigRecord, E as ExperimentRecord, U as UniverseRecord, m as ProfileRecord, g as DraftRecord, K as KeyRecord, c as BugRecord, B as BugDetail, O as OpsItemDetail, h as FeatureRequestRecord, F as FeatureRequestDetail, a as AttachmentUploadResult } from './types-D0sroUDD.mjs';
+import { C as CreateBugRequestInput, a as CreateFeatureRequestRequestInput } from './zod.gen-DTKpgw-T.mjs';
+import 'zod';
+
+/** Thrown when an admin request returns 401. Distinct from generic `Error`
+ *  so callers can branch on it without string-matching. */
+declare class AuthError extends Error {
+    readonly status = 401;
+    constructor(message: string);
+}
+interface DevtoolsClientOptions {
+    /** Raw admin SDK key from device auth (`sdk_admin_*`). */
+    token: string;
+    projectId: string;
+    /** Admin API origin. Defaults to production (`https://shipeasy.ai`). */
+    adminBaseUrl?: string;
+    /** Called once per 401 so the host can clear its stored session and
+     *  re-prompt login. The request still rejects with `AuthError`. */
+    onUnauthed?: () => void;
+    /** Injectable fetch for tests / exotic runtimes. Defaults to global fetch.
+     *  Note the generated client invokes it with a single `Request` argument. */
+    fetch?: typeof fetch;
+}
+declare class DevtoolsClient {
+    private cache;
+    private readonly adminBaseUrl;
+    /** Raw admin bearer key for this session. Public so overlays can compare it
+     *  against their stored session and rebuild the client on session swap. */
+    readonly token: string;
+    readonly projectId: string;
+    private readonly onUnauthed?;
+    private readonly fetchImpl;
+    /** Session-configured generated client — every spec-covered call goes
+     *  through it (bearer auth, base URL, injectable fetch). */
+    private readonly api;
+    constructor(opts: DevtoolsClientOptions);
+    /** Admin origin this client talks to. Overlays build dashboard deep links
+     *  ("Open in dashboard ↗") off it. */
+    get adminUrl(): string;
+    /** Run `fn` once per `key` and cache the resulting promise. Rejections are
+     *  evicted so the next call retries instead of replaying the failure. */
+    private memo;
+    /** Drop all cached responses (pull-to-refresh). */
+    invalidate(): void;
+    /** Build + throw the error for a failed request. 401 produces an `AuthError`
+     *  and fires `onUnauthed` so the host can drop the stale session instead of
+     *  leaving the user staring at a failed-load message. */
+    private fail;
+    /** Resolve a generated op result to its body, or throw the normalized
+     *  error. Write ops with empty bodies pass on any 2xx. */
+    private unwrap;
+    /** Some list endpoints return a bare array, others a `{ data }` envelope
+     *  (the spec is the contract, but be tolerant like the overlays always
+     *  were). */
+    private asList;
+    /**
+     * Drain a paginated `{ data, next_cursor }` list op by walking cursors.
+     * Devtools shows the entire list at once; without this, large projects would
+     * silently truncate at the first page (limit=100 default).
+     */
+    private drain;
+    private rawInit;
+    private rawGet;
+    private rawSend;
+    /** Read the response error body for diagnostics. Best-effort; never throws. */
+    private readErrorDetail;
+    project(): Promise<ProjectRecord>;
+    gates(): Promise<GateRecord[]>;
+    configs(): Promise<ConfigRecord[]>;
+    /** Experiments list. The endpoint returns the non-archived set (running /
+     *  draft / stopped) by default; pass `{ archived: true }` for the archive tab
+     *  (a separate memo bucket so the overlay's Archived section loads on demand). */
+    experiments(opts?: {
+        archived?: boolean;
+    }): Promise<ExperimentRecord[]>;
+    universes(): Promise<UniverseRecord[]>;
+    profiles(): Promise<ProfileRecord[]>;
+    drafts(): Promise<DraftRecord[]>;
+    keys(profileId?: string): Promise<KeyRecord[]>;
+    createDraft(input: {
+        profileId: string;
+        name: string;
+    }): Promise<DraftRecord>;
+    upsertDraftKey(draftId: string, key: string, value: string): Promise<void>;
+    updateKeyById(id: string, value: string): Promise<void>;
+    upsertKeys(profileId: string, keys: Array<{
+        key: string;
+        value: string;
+    }>, chunk?: string): Promise<void>;
+    /** Drop every cached `keys(profileId?)` response. We don't track which
+     *  profile a single key write affects, so be safe and clear them all. */
+    private invalidateKeysCache;
+    bugs(): Promise<BugRecord[]>;
+    bug(id: string): Promise<BugDetail>;
+    /** Auto-filed error tickets. Same list endpoint, `type=error`. */
+    errors(): Promise<BugRecord[]>;
+    /** Auto-filed alert tickets. Same list endpoint, `type=alert`. */
+    alerts(): Promise<BugRecord[]>;
+    /** Generic ops-item detail — works for any type (bug/feature/error/alert). */
+    opsItem(id: string): Promise<OpsItemDetail>;
+    /** Triage-only update (status / priority) that works for ANY item type —
+     *  the only editable shape for auto-filed error/alert tickets. Scrubs every
+     *  list bucket + the item's detail so the panels refetch. */
+    updateOps(id: string, patch: {
+        status?: BugRecord["status"];
+        priority?: BugRecord["priority"];
+    }): Promise<void>;
+    createBug(input: Omit<CreateBugRequestInput, "type">): Promise<{
+        id: string;
+    }>;
+    updateBug(id: string, patch: {
+        title?: string;
+        stepsToReproduce?: string;
+        actualResult?: string;
+        expectedResult?: string;
+        status?: BugRecord["status"];
+        priority?: BugRecord["priority"];
+    }): Promise<void>;
+    featureRequests(): Promise<FeatureRequestRecord[]>;
+    featureRequest(id: string): Promise<FeatureRequestDetail>;
+    createFeatureRequest(input: Omit<CreateFeatureRequestRequestInput, "type">): Promise<{
+        id: string;
+    }>;
+    updateFeatureRequest(id: string, patch: {
+        title?: string;
+        description?: string;
+        useCase?: string;
+        status?: FeatureRequestRecord["status"];
+        priority?: FeatureRequestRecord["priority"];
+    }): Promise<void>;
+    /** Fetch an attachment file as a Blob via the authenticated stream route
+     *  (an <Image>/<img> can't send the Authorization header itself). */
+    attachmentBlob(id: string): Promise<Blob>;
+    uploadAttachment(args: {
+        reportKind: "bug" | "feature_request";
+        reportId: string;
+        kind: "screenshot" | "recording" | "file";
+        filename: string;
+        blob: Blob;
+    }): Promise<AttachmentUploadResult>;
+}
+
+export { AuthError, DevtoolsClient, type DevtoolsClientOptions };

package/dist/api.d.ts

@@ -0,0 +1,143 @@
+import { o as ProjectRecord, G as GateRecord, C as ConfigRecord, E as ExperimentRecord, U as UniverseRecord, m as ProfileRecord, g as DraftRecord, K as KeyRecord, c as BugRecord, B as BugDetail, O as OpsItemDetail, h as FeatureRequestRecord, F as FeatureRequestDetail, a as AttachmentUploadResult } from './types-D0sroUDD.js';
+import { C as CreateBugRequestInput, a as CreateFeatureRequestRequestInput } from './zod.gen-DTKpgw-T.js';
+import 'zod';
+
+/** Thrown when an admin request returns 401. Distinct from generic `Error`
+ *  so callers can branch on it without string-matching. */
+declare class AuthError extends Error {
+    readonly status = 401;
+    constructor(message: string);
+}
+interface DevtoolsClientOptions {
+    /** Raw admin SDK key from device auth (`sdk_admin_*`). */
+    token: string;
+    projectId: string;
+    /** Admin API origin. Defaults to production (`https://shipeasy.ai`). */
+    adminBaseUrl?: string;
+    /** Called once per 401 so the host can clear its stored session and
+     *  re-prompt login. The request still rejects with `AuthError`. */
+    onUnauthed?: () => void;
+    /** Injectable fetch for tests / exotic runtimes. Defaults to global fetch.
+     *  Note the generated client invokes it with a single `Request` argument. */
+    fetch?: typeof fetch;
+}
+declare class DevtoolsClient {
+    private cache;
+    private readonly adminBaseUrl;
+    /** Raw admin bearer key for this session. Public so overlays can compare it
+     *  against their stored session and rebuild the client on session swap. */
+    readonly token: string;
+    readonly projectId: string;
+    private readonly onUnauthed?;
+    private readonly fetchImpl;
+    /** Session-configured generated client — every spec-covered call goes
+     *  through it (bearer auth, base URL, injectable fetch). */
+    private readonly api;
+    constructor(opts: DevtoolsClientOptions);
+    /** Admin origin this client talks to. Overlays build dashboard deep links
+     *  ("Open in dashboard ↗") off it. */
+    get adminUrl(): string;
+    /** Run `fn` once per `key` and cache the resulting promise. Rejections are
+     *  evicted so the next call retries instead of replaying the failure. */
+    private memo;
+    /** Drop all cached responses (pull-to-refresh). */
+    invalidate(): void;
+    /** Build + throw the error for a failed request. 401 produces an `AuthError`
+     *  and fires `onUnauthed` so the host can drop the stale session instead of
+     *  leaving the user staring at a failed-load message. */
+    private fail;
+    /** Resolve a generated op result to its body, or throw the normalized
+     *  error. Write ops with empty bodies pass on any 2xx. */
+    private unwrap;
+    /** Some list endpoints return a bare array, others a `{ data }` envelope
+     *  (the spec is the contract, but be tolerant like the overlays always
+     *  were). */
+    private asList;
+    /**
+     * Drain a paginated `{ data, next_cursor }` list op by walking cursors.
+     * Devtools shows the entire list at once; without this, large projects would
+     * silently truncate at the first page (limit=100 default).
+     */
+    private drain;
+    private rawInit;
+    private rawGet;
+    private rawSend;
+    /** Read the response error body for diagnostics. Best-effort; never throws. */
+    private readErrorDetail;
+    project(): Promise<ProjectRecord>;
+    gates(): Promise<GateRecord[]>;
+    configs(): Promise<ConfigRecord[]>;
+    /** Experiments list. The endpoint returns the non-archived set (running /
+     *  draft / stopped) by default; pass `{ archived: true }` for the archive tab
+     *  (a separate memo bucket so the overlay's Archived section loads on demand). */
+    experiments(opts?: {
+        archived?: boolean;
+    }): Promise<ExperimentRecord[]>;
+    universes(): Promise<UniverseRecord[]>;
+    profiles(): Promise<ProfileRecord[]>;
+    drafts(): Promise<DraftRecord[]>;
+    keys(profileId?: string): Promise<KeyRecord[]>;
+    createDraft(input: {
+        profileId: string;
+        name: string;
+    }): Promise<DraftRecord>;
+    upsertDraftKey(draftId: string, key: string, value: string): Promise<void>;
+    updateKeyById(id: string, value: string): Promise<void>;
+    upsertKeys(profileId: string, keys: Array<{
+        key: string;
+        value: string;
+    }>, chunk?: string): Promise<void>;
+    /** Drop every cached `keys(profileId?)` response. We don't track which
+     *  profile a single key write affects, so be safe and clear them all. */
+    private invalidateKeysCache;
+    bugs(): Promise<BugRecord[]>;
+    bug(id: string): Promise<BugDetail>;
+    /** Auto-filed error tickets. Same list endpoint, `type=error`. */
+    errors(): Promise<BugRecord[]>;
+    /** Auto-filed alert tickets. Same list endpoint, `type=alert`. */
+    alerts(): Promise<BugRecord[]>;
+    /** Generic ops-item detail — works for any type (bug/feature/error/alert). */
+    opsItem(id: string): Promise<OpsItemDetail>;
+    /** Triage-only update (status / priority) that works for ANY item type —
+     *  the only editable shape for auto-filed error/alert tickets. Scrubs every
+     *  list bucket + the item's detail so the panels refetch. */
+    updateOps(id: string, patch: {
+        status?: BugRecord["status"];
+        priority?: BugRecord["priority"];
+    }): Promise<void>;
+    createBug(input: Omit<CreateBugRequestInput, "type">): Promise<{
+        id: string;
+    }>;
+    updateBug(id: string, patch: {
+        title?: string;
+        stepsToReproduce?: string;
+        actualResult?: string;
+        expectedResult?: string;
+        status?: BugRecord["status"];
+        priority?: BugRecord["priority"];
+    }): Promise<void>;
+    featureRequests(): Promise<FeatureRequestRecord[]>;
+    featureRequest(id: string): Promise<FeatureRequestDetail>;
+    createFeatureRequest(input: Omit<CreateFeatureRequestRequestInput, "type">): Promise<{
+        id: string;
+    }>;
+    updateFeatureRequest(id: string, patch: {
+        title?: string;
+        description?: string;
+        useCase?: string;
+        status?: FeatureRequestRecord["status"];
+        priority?: FeatureRequestRecord["priority"];
+    }): Promise<void>;
+    /** Fetch an attachment file as a Blob via the authenticated stream route
+     *  (an <Image>/<img> can't send the Authorization header itself). */
+    attachmentBlob(id: string): Promise<Blob>;
+    uploadAttachment(args: {
+        reportKind: "bug" | "feature_request";
+        reportId: string;
+        kind: "screenshot" | "recording" | "file";
+        filename: string;
+        blob: Blob;
+    }): Promise<AttachmentUploadResult>;
+}
+
+export { AuthError, DevtoolsClient, type DevtoolsClientOptions };

package/dist/api.js

@@ -0,0 +1,10 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+var _chunkYQHCUZGPjs = require('./chunk-YQHCUZGP.js');
+require('./chunk-KPO3R7ND.js');
+require('./chunk-I2KLQ2HA.js');
+
+
+
+exports.AuthError = _chunkYQHCUZGPjs.AuthError; exports.DevtoolsClient = _chunkYQHCUZGPjs.DevtoolsClient;

package/dist/api.mjs

@@ -0,0 +1,10 @@
+import {
+  AuthError,
+  DevtoolsClient
+} from "./chunk-LZDNBMH6.mjs";
+import "./chunk-RH6X24HG.mjs";
+import "./chunk-U5DDQYSF.mjs";
+export {
+  AuthError,
+  DevtoolsClient
+};

package/dist/auth.d.mts

@@ -0,0 +1,57 @@
+import { f as DevtoolsSession } from './types-D0sroUDD.mjs';
+
+/** Thrown when the user dismisses the auth browser without completing login. */
+declare class LoginCancelled extends Error {
+    constructor();
+}
+/** Result contract of an auth-session opener (mirrors expo-web-browser's
+ *  `openAuthSessionAsync`): resolves when the browser deep-links back to
+ *  `redirectUri` (type "success", `url` = the full deep link) or the user
+ *  dismisses it. */
+interface AuthSessionResult {
+    type: "success" | "cancel" | "dismiss" | string;
+    url?: string;
+}
+interface DeviceAuthAdapters {
+    /** Open `url` in an auth browser session and resolve when it redirects to
+     *  `redirectUri` (or the user cancels). RN: `WebBrowser.openAuthSessionAsync`. */
+    openAuthSession(url: string, redirectUri: string): Promise<AuthSessionResult>;
+    /** base64url(SHA-256(input)) — the PKCE S256 transform. Defaults to
+     *  `crypto.subtle` where available; RN injects expo-crypto. */
+    sha256Base64Url?(input: string): Promise<string>;
+    /** UUID source for the verifier. Defaults to `crypto.randomUUID`. */
+    randomUUID?(): string;
+    /** Injectable fetch for tests. Defaults to global fetch. */
+    fetch?: typeof fetch;
+}
+interface DeviceAuthOptions {
+    /** The HOST APP's deep-link redirect URI (its own scheme), e.g.
+     *  `acme://se-auth`. Must match a scheme the app registered with the OS. */
+    redirectUri: string;
+    /** Edge worker origin (`/auth/device/*`). Defaults to production. */
+    edgeBaseUrl?: string;
+    /** Admin web origin (the `/cli-auth` page). Defaults to production. */
+    adminBaseUrl?: string;
+    /** Pre-select a project on the /cli-auth page (skips the picker when the
+     *  user has access). */
+    projectId?: string;
+    /** The app's public client key (`sdk_client_*`). The /cli-auth page resolves
+     *  it to the project it belongs to and locks the flow there — the key IS the
+     *  project identity, so the user never sees a project picker (same contract
+     *  as the browser overlay's `sdkKey` param). An explicit `projectId` wins. */
+    clientKey?: string;
+}
+/** Parse a deep link's query params without relying on the host's URL
+ *  implementation (React Native's URL polyfill is historically incomplete). */
+declare function parseDeepLinkQuery(url: string): Record<string, string>;
+/**
+ * Run the full device-auth flow and return the session. Throws
+ * {@link LoginCancelled} if the user dismisses the browser, or `Error` on a
+ * protocol failure (state mismatch, exchange rejection).
+ *
+ * The caller persists the returned session (RN: SecureStore/Keychain) — this
+ * core deliberately does no storage of its own.
+ */
+declare function startDeviceAuth(opts: DeviceAuthOptions, adapters: DeviceAuthAdapters): Promise<DevtoolsSession>;
+
+export { type AuthSessionResult, type DeviceAuthAdapters, type DeviceAuthOptions, LoginCancelled, parseDeepLinkQuery, startDeviceAuth };

package/dist/auth.d.ts

@@ -0,0 +1,57 @@
+import { f as DevtoolsSession } from './types-D0sroUDD.js';
+
+/** Thrown when the user dismisses the auth browser without completing login. */
+declare class LoginCancelled extends Error {
+    constructor();
+}
+/** Result contract of an auth-session opener (mirrors expo-web-browser's
+ *  `openAuthSessionAsync`): resolves when the browser deep-links back to
+ *  `redirectUri` (type "success", `url` = the full deep link) or the user
+ *  dismisses it. */
+interface AuthSessionResult {
+    type: "success" | "cancel" | "dismiss" | string;
+    url?: string;
+}
+interface DeviceAuthAdapters {
+    /** Open `url` in an auth browser session and resolve when it redirects to
+     *  `redirectUri` (or the user cancels). RN: `WebBrowser.openAuthSessionAsync`. */
+    openAuthSession(url: string, redirectUri: string): Promise<AuthSessionResult>;
+    /** base64url(SHA-256(input)) — the PKCE S256 transform. Defaults to
+     *  `crypto.subtle` where available; RN injects expo-crypto. */
+    sha256Base64Url?(input: string): Promise<string>;
+    /** UUID source for the verifier. Defaults to `crypto.randomUUID`. */
+    randomUUID?(): string;
+    /** Injectable fetch for tests. Defaults to global fetch. */
+    fetch?: typeof fetch;
+}
+interface DeviceAuthOptions {
+    /** The HOST APP's deep-link redirect URI (its own scheme), e.g.
+     *  `acme://se-auth`. Must match a scheme the app registered with the OS. */
+    redirectUri: string;
+    /** Edge worker origin (`/auth/device/*`). Defaults to production. */
+    edgeBaseUrl?: string;
+    /** Admin web origin (the `/cli-auth` page). Defaults to production. */
+    adminBaseUrl?: string;
+    /** Pre-select a project on the /cli-auth page (skips the picker when the
+     *  user has access). */
+    projectId?: string;
+    /** The app's public client key (`sdk_client_*`). The /cli-auth page resolves
+     *  it to the project it belongs to and locks the flow there — the key IS the
+     *  project identity, so the user never sees a project picker (same contract
+     *  as the browser overlay's `sdkKey` param). An explicit `projectId` wins. */
+    clientKey?: string;
+}
+/** Parse a deep link's query params without relying on the host's URL
+ *  implementation (React Native's URL polyfill is historically incomplete). */
+declare function parseDeepLinkQuery(url: string): Record<string, string>;
+/**
+ * Run the full device-auth flow and return the session. Throws
+ * {@link LoginCancelled} if the user dismisses the browser, or `Error` on a
+ * protocol failure (state mismatch, exchange rejection).
+ *
+ * The caller persists the returned session (RN: SecureStore/Keychain) — this
+ * core deliberately does no storage of its own.
+ */
+declare function startDeviceAuth(opts: DeviceAuthOptions, adapters: DeviceAuthAdapters): Promise<DevtoolsSession>;
+
+export { type AuthSessionResult, type DeviceAuthAdapters, type DeviceAuthOptions, LoginCancelled, parseDeepLinkQuery, startDeviceAuth };

package/dist/auth.js

@@ -0,0 +1,12 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+var _chunkLCRTLHGLjs = require('./chunk-LCRTLHGL.js');
+require('./chunk-KPO3R7ND.js');
+require('./chunk-I2KLQ2HA.js');
+
+
+
+
+exports.LoginCancelled = _chunkLCRTLHGLjs.LoginCancelled; exports.parseDeepLinkQuery = _chunkLCRTLHGLjs.parseDeepLinkQuery; exports.startDeviceAuth = _chunkLCRTLHGLjs.startDeviceAuth;

package/dist/auth.mjs

@@ -0,0 +1,12 @@
+import {
+  LoginCancelled,
+  parseDeepLinkQuery,
+  startDeviceAuth
+} from "./chunk-5VQLXGNR.mjs";
+import "./chunk-RH6X24HG.mjs";
+import "./chunk-U5DDQYSF.mjs";
+export {
+  LoginCancelled,
+  parseDeepLinkQuery,
+  startDeviceAuth
+};

package/dist/chunk-2B75JLTX.js

@@ -0,0 +1,25 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }// src/feedback-state.ts
+function prMerged(pr) {
+  return pr.merged === true || pr.state === "merged" || typeof pr.mergedAt === "string";
+}
+function agentAwaitingReply(cd) {
+  const a = _optionalChain([cd, 'optionalAccess', _ => _.agent]);
+  return _optionalChain([a, 'optionalAccess', _2 => _2.awaitingReply]) === true || _optionalChain([a, 'optionalAccess', _3 => _3.state]) === "awaiting_reply";
+}
+function feedbackAgentInfo(item) {
+  const pr = _nullishCoalesce(_optionalChain([item, 'access', _4 => _4.connectorData, 'optionalAccess', _5 => _5.github, 'optionalAccess', _6 => _6.pr]), () => ( null));
+  if (pr && prMerged(pr)) return { state: "pr_landed", pr: { number: pr.number, url: pr.url } };
+  if (agentAwaitingReply(item.connectorData)) return { state: "question" };
+  if (pr) return { state: "pr_ready", pr: { number: pr.number, url: pr.url } };
+  return null;
+}
+var FEEDBACK_AGENT_LABEL = {
+  pr_landed: "merged",
+  question: "needs reply",
+  pr_ready: "PR ready"
+};
+
+
+
+
+exports.feedbackAgentInfo = feedbackAgentInfo; exports.FEEDBACK_AGENT_LABEL = FEEDBACK_AGENT_LABEL;

package/dist/chunk-5VQLXGNR.mjs

@@ -0,0 +1,101 @@
+import {
+  DEFAULT_ADMIN_BASE_URL,
+  DEFAULT_EDGE_BASE_URL,
+  types_exports
+} from "./chunk-RH6X24HG.mjs";
+
+// src/auth.ts
+var LoginCancelled = class extends Error {
+  constructor() {
+    super("Login cancelled");
+    this.name = "LoginCancelled";
+  }
+};
+function defaultRandomUUID() {
+  const c = globalThis.crypto;
+  if (c?.randomUUID) return c.randomUUID();
+  return "xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g, (ch) => {
+    const r = Math.random() * 16 | 0;
+    return (ch === "x" ? r : r & 3 | 8).toString(16);
+  });
+}
+async function defaultSha256Base64Url(input) {
+  const subtle = globalThis.crypto?.subtle;
+  if (!subtle) {
+    throw new Error(
+      "No crypto.subtle available \u2014 pass adapters.sha256Base64Url (e.g. expo-crypto's digestStringAsync)."
+    );
+  }
+  const hash = await subtle.digest("SHA-256", new TextEncoder().encode(input));
+  const bytes = new Uint8Array(hash);
+  let binary = "";
+  for (let i = 0; i < bytes.length; i++) binary += String.fromCharCode(bytes[i]);
+  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function makeVerifier(randomUUID) {
+  return (randomUUID() + randomUUID()).replace(/-/g, "");
+}
+function parseDeepLinkQuery(url) {
+  const q = url.indexOf("?");
+  if (q < 0) return {};
+  const out = {};
+  const query = url.slice(q + 1).split("#")[0];
+  for (const pair of query.split("&")) {
+    if (!pair) continue;
+    const eq = pair.indexOf("=");
+    const k = eq < 0 ? pair : pair.slice(0, eq);
+    const v = eq < 0 ? "" : pair.slice(eq + 1);
+    try {
+      out[decodeURIComponent(k)] = decodeURIComponent(v.replace(/\+/g, " "));
+    } catch {
+      out[k] = v;
+    }
+  }
+  return out;
+}
+async function startDeviceAuth(opts, adapters) {
+  const edge = (opts.edgeBaseUrl ?? DEFAULT_EDGE_BASE_URL).replace(/\/$/, "");
+  const admin = (opts.adminBaseUrl ?? DEFAULT_ADMIN_BASE_URL).replace(/\/$/, "");
+  const fetchImpl = adapters.fetch ?? ((...args) => fetch(...args));
+  const randomUUID = adapters.randomUUID ?? defaultRandomUUID;
+  const digest = adapters.sha256Base64Url ?? defaultSha256Base64Url;
+  const verifier = makeVerifier(randomUUID);
+  const challenge = await digest(verifier);
+  const startRes = await fetchImpl(`${edge}/auth/device/start`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ code_challenge: challenge })
+  });
+  if (!startRes.ok) {
+    throw new Error(`Login could not start (HTTP ${startRes.status}). Please try again.`);
+  }
+  const { state } = await startRes.json();
+  if (!state) throw new Error("Login could not start (no state). Please try again.");
+  const authUrl = `${admin}/cli-auth?state=${encodeURIComponent(state)}&code_challenge=${encodeURIComponent(challenge)}&redirect_uri=${encodeURIComponent(opts.redirectUri)}` + (opts.projectId ? `&project_id=${encodeURIComponent(opts.projectId)}` : "") + (!opts.projectId && opts.clientKey ? `&client_key=${encodeURIComponent(opts.clientKey)}` : "");
+  const result = await adapters.openAuthSession(authUrl, opts.redirectUri);
+  if (result.type !== "success" || !result.url) throw new LoginCancelled();
+  const params = parseDeepLinkQuery(result.url);
+  if (!params.state || params.state !== state) throw new Error("Auth state mismatch");
+  const tokenRes = await fetchImpl(`${edge}/auth/device/token`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ state, code_verifier: verifier })
+  });
+  if (!tokenRes.ok) {
+    throw new Error(`Login did not complete (HTTP ${tokenRes.status}). Please try again.`);
+  }
+  const data = await tokenRes.json();
+  if (!data.token || !data.project_id) throw new Error("Login did not return a token");
+  return {
+    token: data.token,
+    projectId: data.project_id,
+    userEmail: data.user_email ?? null,
+    projectName: data.project_name ?? null
+  };
+}
+
+export {
+  LoginCancelled,
+  parseDeepLinkQuery,
+  startDeviceAuth
+};