@skaile/workspaces 0.52.0 → 1.0.0

package/dist/chunk-OVRSNIKJ.js

@@ -1,72 +0,0 @@
-// connectors/src/rclone-config/sanitize.ts
-function sanitizeIniValue(value) {
-  return value.replace(/[\r\n]/g, "");
-}
-
-// connectors/src/rclone-config/googledrive.ts
-function renderGoogleDriveConfig(opts) {
-  const lines = [];
-  lines.push(`[${sanitizeIniValue(opts.remoteName)}]`);
-  lines.push("type = drive");
-  lines.push(`scope = ${sanitizeIniValue(opts.scope ?? "drive")}`);
-  if (opts.serviceAccountFile) {
-    lines.push(`service_account_file = ${sanitizeIniValue(opts.serviceAccountFile)}`);
-  } else {
-    const tokenObj = {
-      access_token: opts.accessToken,
-      token_type: "Bearer"
-    };
-    if (opts.refreshToken) tokenObj.refresh_token = opts.refreshToken;
-    if (opts.expiresAtMs != null) {
-      tokenObj.expiry = new Date(opts.expiresAtMs).toISOString();
-    }
-    lines.push(`token = ${JSON.stringify(tokenObj)}`);
-  }
-  if (opts.clientId) lines.push(`client_id = ${sanitizeIniValue(opts.clientId)}`);
-  if (opts.clientSecret) lines.push(`client_secret = ${sanitizeIniValue(opts.clientSecret)}`);
-  if (opts.rootFolderId) lines.push(`root_folder_id = ${sanitizeIniValue(opts.rootFolderId)}`);
-  if (opts.teamDrive) lines.push(`team_drive = ${sanitizeIniValue(opts.teamDrive)}`);
-  lines.push("");
-  return lines.join("\n");
-}
-
-// connectors/src/rclone-config/onedrive.ts
-function renderOneDriveConfig(opts) {
-  const tokenObj = {
-    access_token: opts.accessToken,
-    token_type: "Bearer"
-  };
-  if (opts.refreshToken) tokenObj.refresh_token = opts.refreshToken;
-  if (opts.expiresAtMs != null) {
-    tokenObj.expiry = new Date(opts.expiresAtMs).toISOString();
-  }
-  const lines = [];
-  lines.push(`[${sanitizeIniValue(opts.remoteName)}]`);
-  lines.push("type = onedrive");
-  lines.push(`drive_id = ${sanitizeIniValue(opts.driveId)}`);
-  lines.push(`drive_type = ${sanitizeIniValue(opts.driveType ?? "business")}`);
-  lines.push(`token = ${JSON.stringify(tokenObj)}`);
-  if (opts.clientId) lines.push(`client_id = ${sanitizeIniValue(opts.clientId)}`);
-  if (opts.clientSecret) lines.push(`client_secret = ${sanitizeIniValue(opts.clientSecret)}`);
-  if (opts.tenantId) lines.push(`tenant = ${sanitizeIniValue(opts.tenantId)}`);
-  lines.push("");
-  return lines.join("\n");
-}
-
-// connectors/src/rclone-config/webdav.ts
-function renderWebDAVConfig(opts) {
-  const lines = [];
-  lines.push(`[${sanitizeIniValue(opts.remoteName)}]`);
-  lines.push("type = webdav");
-  lines.push(`url = ${sanitizeIniValue(opts.url)}`);
-  lines.push(`vendor = ${sanitizeIniValue(opts.vendor)}`);
-  if (opts.username) lines.push(`user = ${sanitizeIniValue(opts.username)}`);
-  if (opts.obscuredPassword) lines.push(`pass = ${sanitizeIniValue(opts.obscuredPassword)}`);
-  if (opts.bearerToken) lines.push(`bearer_token = ${sanitizeIniValue(opts.bearerToken)}`);
-  lines.push("");
-  return lines.join("\n");
-}
-
-export { renderGoogleDriveConfig, renderOneDriveConfig, renderWebDAVConfig };
-//# sourceMappingURL=chunk-OVRSNIKJ.js.map
-//# sourceMappingURL=chunk-OVRSNIKJ.js.map

package/dist/chunk-OVRSNIKJ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../connectors/src/rclone-config/sanitize.ts","../connectors/src/rclone-config/googledrive.ts","../connectors/src/rclone-config/onedrive.ts","../connectors/src/rclone-config/webdav.ts"],"names":[],"mappings":";AAOO,SAAS,iBAAiB,KAAA,EAAuB;AACtD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,SAAA,EAAW,EAAE,CAAA;AACpC;;;AC0DO,SAAS,wBAAwB,IAAA,EAA8C;AACpF,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,KAAA,CAAM,KAAK,CAAA,CAAA,EAAI,gBAAA,CAAE,IAAA,CAAK,UAAU,CAAC,CAAA,CAAA,CAAG,CAAA;AACpC,EAAA,KAAA,CAAM,KAAK,cAAc,CAAA;AACzB,EAAA,KAAA,CAAM,KAAK,CAAA,QAAA,EAAW,gBAAA,CAAE,KAAK,KAAA,IAAS,OAAO,CAAC,CAAA,CAAE,CAAA;AAEhD,EAAA,IAAI,KAAK,kBAAA,EAAoB;AAC3B,IAAA,KAAA,CAAM,KAAK,CAAA,uBAAA,EAA0B,gBAAA,CAAE,IAAA,CAAK,kBAAkB,CAAC,CAAA,CAAE,CAAA;AAAA,EACnE,CAAA,MAAO;AACL,IAAA,MAAM,QAAA,GAAmC;AAAA,MACvC,cAAc,IAAA,CAAK,WAAA;AAAA,MACnB,UAAA,EAAY;AAAA,KACd;AACA,IAAA,IAAI,IAAA,CAAK,YAAA,EAAc,QAAA,CAAS,aAAA,GAAgB,IAAA,CAAK,YAAA;AACrD,IAAA,IAAI,IAAA,CAAK,eAAe,IAAA,EAAM;AAC5B,MAAA,QAAA,CAAS,SAAS,IAAI,IAAA,CAAK,IAAA,CAAK,WAAW,EAAE,WAAA,EAAY;AAAA,IAC3D;AACA,IAAA,KAAA,CAAM,KAAK,CAAA,QAAA,EAAW,IAAA,CAAK,SAAA,CAAU,QAAQ,CAAC,CAAA,CAAE,CAAA;AAAA,EAClD;AAEA,EAAA,IAAI,IAAA,CAAK,UAAU,KAAA,CAAM,IAAA,CAAK,eAAe,gBAAA,CAAE,IAAA,CAAK,QAAQ,CAAC,CAAA,CAAE,CAAA;AAC/D,EAAA,IAAI,IAAA,CAAK,cAAc,KAAA,CAAM,IAAA,CAAK,mBAAmB,gBAAA,CAAE,IAAA,CAAK,YAAY,CAAC,CAAA,CAAE,CAAA;AAC3E,EAAA,IAAI,IAAA,CAAK,cAAc,KAAA,CAAM,IAAA,CAAK,oBAAoB,gBAAA,CAAE,IAAA,CAAK,YAAY,CAAC,CAAA,CAAE,CAAA;AAC5E,EAAA,IAAI,IAAA,CAAK,WAAW,KAAA,CAAM,IAAA,CAAK,gBAAgB,gBAAA,CAAE,IAAA,CAAK,SAAS,CAAC,CAAA,CAAE,CAAA;AAClE,EAAA,KAAA,CAAM,KAAK,EAAE,CAAA;AACb,EAAA,OAAO,KAAA,CAAM,KAAK,IAAI,CAAA;AACxB;;;AC3CO,SAAS,qBAAqB,IAAA,EAA2C;AAC9E,EAAA,MAAM,QAAA,GAAmC;AAAA,IACvC,cAAc,IAAA,CAAK,WAAA;AAAA,IACnB,UAAA,EAAY;AAAA,GACd;AACA,EAAA,IAAI,IAAA,CAAK,YAAA,EAAc,QAAA,CAAS,aAAA,GAAgB,IAAA,CAAK,YAAA;AACrD,EAAA,IAAI,IAAA,CAAK,eAAe,IAAA,EAAM;AAC5B,IAAA,QAAA,CAAS,SAAS,IAAI,IAAA,CAAK,IAAA,CAAK,WAAW,EAAE,WAAA,EAAY;AAAA,EAC3D;AAEA,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,KAAA,CAAM,KAAK,CAAA,CAAA,EAAI,gBAAA,CAAE,IAAA,CAAK,UAAU,CAAC,CAAA,CAAA,CAAG,CAAA;AACpC,EAAA,KAAA,CAAM,KAAK,iBAAiB,CAAA;AAC5B,EAAA,KAAA,CAAM,KAAK,CAAA,WAAA,EAAc,gBAAA,CAAE,IAAA,CAAK,OAAO,CAAC,CAAA,CAAE,CAAA;AAC1C,EAAA,KAAA,CAAM,KAAK,CAAA,aAAA,EAAgB,gBAAA,CAAE,KAAK,SAAA,IAAa,UAAU,CAAC,CAAA,CAAE,CAAA;AAC5D,EAAA,KAAA,CAAM,KAAK,CAAA,QAAA,EAAW,IAAA,CAAK,SAAA,CAAU,QAAQ,CAAC,CAAA,CAAE,CAAA;AAChD,EAAA,IAAI,IAAA,CAAK,UAAU,KAAA,CAAM,IAAA,CAAK,eAAe,gBAAA,CAAE,IAAA,CAAK,QAAQ,CAAC,CAAA,CAAE,CAAA;AAC/D,EAAA,IAAI,IAAA,CAAK,cAAc,KAAA,CAAM,IAAA,CAAK,mBAAmB,gBAAA,CAAE,IAAA,CAAK,YAAY,CAAC,CAAA,CAAE,CAAA;AAC3E,EAAA,IAAI,IAAA,CAAK,UAAU,KAAA,CAAM,IAAA,CAAK,YAAY,gBAAA,CAAE,IAAA,CAAK,QAAQ,CAAC,CAAA,CAAE,CAAA;AAC5D,EAAA,KAAA,CAAM,KAAK,EAAE,CAAA;AACb,EAAA,OAAO,KAAA,CAAM,KAAK,IAAI,CAAA;AACxB;;;AClBO,SAAS,mBAAmB,IAAA,EAAyC;AAC1E,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,KAAA,CAAM,KAAK,CAAA,CAAA,EAAI,gBAAA,CAAE,IAAA,CAAK,UAAU,CAAC,CAAA,CAAA,CAAG,CAAA;AACpC,EAAA,KAAA,CAAM,KAAK,eAAe,CAAA;AAC1B,EAAA,KAAA,CAAM,KAAK,CAAA,MAAA,EAAS,gBAAA,CAAE,IAAA,CAAK,GAAG,CAAC,CAAA,CAAE,CAAA;AACjC,EAAA,KAAA,CAAM,KAAK,CAAA,SAAA,EAAY,gBAAA,CAAE,IAAA,CAAK,MAAM,CAAC,CAAA,CAAE,CAAA;AACvC,EAAA,IAAI,IAAA,CAAK,UAAU,KAAA,CAAM,IAAA,CAAK,UAAU,gBAAA,CAAE,IAAA,CAAK,QAAQ,CAAC,CAAA,CAAE,CAAA;AAC1D,EAAA,IAAI,IAAA,CAAK,kBAAkB,KAAA,CAAM,IAAA,CAAK,UAAU,gBAAA,CAAE,IAAA,CAAK,gBAAgB,CAAC,CAAA,CAAE,CAAA;AAC1E,EAAA,IAAI,IAAA,CAAK,aAAa,KAAA,CAAM,IAAA,CAAK,kBAAkB,gBAAA,CAAE,IAAA,CAAK,WAAW,CAAC,CAAA,CAAE,CAAA;AACxE,EAAA,KAAA,CAAM,KAAK,EAAE,CAAA;AACb,EAAA,OAAO,KAAA,CAAM,KAAK,IAAI,CAAA;AACxB","file":"chunk-OVRSNIKJ.js","sourcesContent":["/**\n * Strip CR/LF from a value before interpolating it into an rclone INI line.\n * Without this, a value containing `\\n` would smuggle an extra `key = ...`\n * pair — or even a new `[section]` — into the rendered config.\n *\n * Used by every renderer in `@skaile/workspaces/connectors/rclone-config`.\n */\nexport function sanitizeIniValue(value: string): string {\n  return value.replace(/[\\r\\n]/g, \"\");\n}\n","/**\n * Render an rclone INI config snippet for a single Google Drive remote.\n *\n * Pure helper — no IO, no logging — so it can be unit-tested by string compare.\n * The output is the full text for one `[<remoteName>]` section using rclone's\n * `drive` backend. The OAuth `token` field is a single-line JSON literal as\n * rclone expects, in the same shape used by the OneDrive renderer.\n *\n * Lives in `@skaile/workspaces/connectors/rclone-config` so both consumers can\n * reach it: the in-container `googledrive` mount driver\n * (`factory-assets/connectors/googledrive/driver.ts`) and the platform-side\n * `RcloneFleetService` (`platform/backend/libs/session/`) which renders the\n * same INI on the host before spawning a shared rclone process.\n */\n\n/**\n * Google Drive OAuth scope values accepted by rclone's `drive` backend.\n * `drive` = full read/write, `drive.readonly` = read-only, `drive.file` =\n * only files created/opened by the app, `drive.appfolder` = the app's hidden\n * data folder, `drive.metadata.readonly` = metadata only.\n * @docLink packages/connectors/api-reference#google-drive-scope\n */\nexport type GoogleDriveScope =\n  | \"drive\"\n  | \"drive.readonly\"\n  | \"drive.file\"\n  | \"drive.appfolder\"\n  | \"drive.metadata.readonly\";\n\n/**\n * Options for `renderGoogleDriveConfig`. Carries OAuth token, optional client\n * credentials, optional scope and root/shared-drive restrictions.\n * @docLink packages/connectors/api-reference#render-google-drive-config-options\n */\nexport interface RenderGoogleDriveConfigOptions {\n  /** The rclone remote section name (e.g. `skaile-gdrive`). */\n  remoteName: string;\n  /** Current OAuth access token. */\n  accessToken: string;\n  /** Long-lived refresh token (embedded in the rclone `token` JSON field). */\n  refreshToken?: string | null;\n  /** Expiry of the access token as a Unix timestamp in milliseconds. */\n  expiresAtMs?: number | null;\n  /** OAuth client (application) ID. */\n  clientId?: string | null;\n  /** OAuth client secret. */\n  clientSecret?: string | null;\n  /** OAuth scope. Defaults to `\"drive\"` (full access). */\n  scope?: GoogleDriveScope;\n  /** Optional Drive folder ID to mount as the remote root. */\n  rootFolderId?: string | null;\n  /** Optional Shared Drive (Team Drive) ID. */\n  teamDrive?: string | null;\n  /** Optional path to a service account JSON file (used instead of OAuth). */\n  serviceAccountFile?: string | null;\n}\n\nimport { sanitizeIniValue as s } from \"./sanitize.js\";\n\n/**\n * Render an rclone INI config section for a Google Drive remote. Pure — no IO, no side effects.\n * The `token` field is serialised as a single-line JSON literal as rclone expects.\n * All interpolated values are stripped of CR/LF to prevent INI injection.\n * @param opts - Remote name, OAuth token, optional client credentials and scope/root restrictions.\n * @returns Full INI text for one `[<remoteName>]` rclone section.\n * @docLink packages/connectors/api-reference#render-google-drive-config\n */\nexport function renderGoogleDriveConfig(opts: RenderGoogleDriveConfigOptions): string {\n  const lines: string[] = [];\n  lines.push(`[${s(opts.remoteName)}]`);\n  lines.push(\"type = drive\");\n  lines.push(`scope = ${s(opts.scope ?? \"drive\")}`);\n\n  if (opts.serviceAccountFile) {\n    lines.push(`service_account_file = ${s(opts.serviceAccountFile)}`);\n  } else {\n    const tokenObj: Record<string, string> = {\n      access_token: opts.accessToken,\n      token_type: \"Bearer\",\n    };\n    if (opts.refreshToken) tokenObj.refresh_token = opts.refreshToken;\n    if (opts.expiresAtMs != null) {\n      tokenObj.expiry = new Date(opts.expiresAtMs).toISOString();\n    }\n    lines.push(`token = ${JSON.stringify(tokenObj)}`);\n  }\n\n  if (opts.clientId) lines.push(`client_id = ${s(opts.clientId)}`);\n  if (opts.clientSecret) lines.push(`client_secret = ${s(opts.clientSecret)}`);\n  if (opts.rootFolderId) lines.push(`root_folder_id = ${s(opts.rootFolderId)}`);\n  if (opts.teamDrive) lines.push(`team_drive = ${s(opts.teamDrive)}`);\n  lines.push(\"\");\n  return lines.join(\"\\n\");\n}\n","/**\n * Render an rclone INI config snippet for a single OneDrive/SharePoint remote.\n *\n * Pure helper — no IO, no logging — so it can be unit-tested by string compare.\n * The output is the full text for one `[<remoteName>]` section using rclone's\n * `onedrive` backend. The OAuth `token` field is a single-line JSON literal as\n * rclone expects.\n *\n * Lives in `@skaile/workspaces/connectors/rclone-config` so both consumers can\n * reach it: the in-container `sharepoint` mount driver\n * (`ai-assets-skaile/mounts/sharepoint/driver.ts`) and the platform-side\n * `RcloneFleetService` (`platform/backend/libs/session/`) which renders the\n * same INI on the host before spawning a shared rclone process.\n */\n\n/**\n * Options for `renderOneDriveConfig`. Carries OAuth token, drive ID, and optional tenant/client credentials.\n * @docLink packages/connectors/api-reference#render-one-drive-config-options\n */\nexport interface RenderOneDriveConfigOptions {\n  /** The rclone remote section name (e.g. `skaile-sharepoint`). */\n  remoteName: string;\n  /** Current OAuth access token. */\n  accessToken: string;\n  /** Long-lived refresh token (embedded in the rclone `token` JSON field). */\n  refreshToken?: string | null;\n  /** Expiry of the access token as a Unix timestamp in milliseconds. */\n  expiresAtMs?: number | null;\n  /** Azure tenant ID for MSAL authentication. */\n  tenantId?: string | null;\n  /** OAuth client (application) ID. */\n  clientId?: string | null;\n  /** OAuth client secret. */\n  clientSecret?: string | null;\n  /** OneDrive drive ID (required by the rclone `onedrive` backend). */\n  driveId: string;\n  /** Drive type. Defaults to `\"business\"`. */\n  driveType?: \"business\" | \"personal\" | \"documentLibrary\";\n}\n\nimport { sanitizeIniValue as s } from \"./sanitize.js\";\n\n/**\n * Render an rclone INI config section for a OneDrive / SharePoint remote. Pure — no IO, no side effects.\n * The `token` field is serialised as a single-line JSON literal as rclone expects.\n * All interpolated values are stripped of CR/LF to prevent INI injection.\n * @param opts - Remote name, OAuth token, drive ID, and optional tenant/client credentials.\n * @returns Full INI text for one `[<remoteName>]` rclone section.\n * @docLink packages/connectors/api-reference#render-one-drive-config\n */\nexport function renderOneDriveConfig(opts: RenderOneDriveConfigOptions): string {\n  const tokenObj: Record<string, string> = {\n    access_token: opts.accessToken,\n    token_type: \"Bearer\",\n  };\n  if (opts.refreshToken) tokenObj.refresh_token = opts.refreshToken;\n  if (opts.expiresAtMs != null) {\n    tokenObj.expiry = new Date(opts.expiresAtMs).toISOString();\n  }\n\n  const lines: string[] = [];\n  lines.push(`[${s(opts.remoteName)}]`);\n  lines.push(\"type = onedrive\");\n  lines.push(`drive_id = ${s(opts.driveId)}`);\n  lines.push(`drive_type = ${s(opts.driveType ?? \"business\")}`);\n  lines.push(`token = ${JSON.stringify(tokenObj)}`);\n  if (opts.clientId) lines.push(`client_id = ${s(opts.clientId)}`);\n  if (opts.clientSecret) lines.push(`client_secret = ${s(opts.clientSecret)}`);\n  if (opts.tenantId) lines.push(`tenant = ${s(opts.tenantId)}`);\n  lines.push(\"\");\n  return lines.join(\"\\n\");\n}\n","/**\n * Render an rclone INI config snippet for a single WebDAV remote.\n *\n * Pure helper -- no IO, no logging -- so it can be unit-tested by string compare.\n * The output is the full text for one `[<remoteName>]` section using rclone's\n * `webdav` backend.\n *\n * NOTE: rclone's `pass` field is not plaintext; it must already be passed\n * through `rclone obscure` by the caller. See the driver's `obscurePassword`\n * helper for the spawn that produces it.\n *\n * Lives in `@skaile/workspaces/connectors/rclone-config` so both consumers can\n * reach it: the in-container `webdav` mount driver\n * (`ai-assets-skaile/mounts/webdav/driver.ts`) and the platform-side\n * `RcloneFleetService` (`platform/backend/libs/session/`) which renders the\n * same INI on the host before spawning a shared rclone process.\n */\n\n/**\n * Supported WebDAV vendor identifiers for the rclone `webdav` backend.\n * @docLink packages/connectors/api-reference#web-dav-vendor\n */\nexport type WebDAVVendor = \"nextcloud\" | \"owncloud\" | \"sharepoint\" | \"fastmail\" | \"other\";\n\n/**\n * Options for `renderWebDAVConfig`. Carries remote name, URL, vendor, and credentials.\n * @docLink packages/connectors/api-reference#render-web-dav-config-options\n */\nexport interface RenderWebDAVConfigOptions {\n  /** The rclone remote section name (e.g. `skaile-docs`). */\n  remoteName: string;\n  /** Base URL of the WebDAV server. */\n  url: string;\n  /** WebDAV vendor; drives rclone's `vendor =` field. */\n  vendor: WebDAVVendor;\n  /** Basic-auth username. */\n  username?: string | null;\n  /** Already passed through `rclone obscure`. */\n  obscuredPassword?: string | null;\n  /** OAuth bearer token (used instead of basic-auth for SharePoint). */\n  bearerToken?: string | null;\n}\n\nimport { sanitizeIniValue as s } from \"./sanitize.js\";\n\n/**\n * Render an rclone INI config section for a WebDAV remote. Pure — no IO, no side effects.\n * The `obscuredPassword` field must already have been processed through `rclone obscure`.\n * All interpolated values are stripped of CR/LF to prevent INI injection.\n * @param opts - Remote name, URL, vendor, and credentials.\n * @returns Full INI text for one `[<remoteName>]` rclone section.\n * @docLink packages/connectors/api-reference#render-web-dav-config\n */\nexport function renderWebDAVConfig(opts: RenderWebDAVConfigOptions): string {\n  const lines: string[] = [];\n  lines.push(`[${s(opts.remoteName)}]`);\n  lines.push(\"type = webdav\");\n  lines.push(`url = ${s(opts.url)}`);\n  lines.push(`vendor = ${s(opts.vendor)}`);\n  if (opts.username) lines.push(`user = ${s(opts.username)}`);\n  if (opts.obscuredPassword) lines.push(`pass = ${s(opts.obscuredPassword)}`);\n  if (opts.bearerToken) lines.push(`bearer_token = ${s(opts.bearerToken)}`);\n  lines.push(\"\");\n  return lines.join(\"\\n\");\n}\n"]}