@su-record/vibe 2.7.2 → 2.7.5

package/dist/pc/browser/types.d.ts

@@ -0,0 +1,142 @@
+/**
+ * Browser Automation Types
+ *
+ * Playwright ARIA Snapshot 기반 브라우저 자동화 타입 정의.
+ */
+import type { BrowserContext, CDPSession } from 'playwright';
+/** 브라우저 프로바이더 인터페이스 — Local(Phase1) / Sandbox(Phase5) 분기 */
+export interface IBrowserProvider {
+    /** CDP WebSocket URL 반환 */
+    getCDPUrl(): Promise<string>;
+    /** 샌드박스 모드 여부 */
+    isSandboxed(): boolean;
+    /** 프로바이더 종료 */
+    terminate(): Promise<void>;
+    /** 프로바이더 이름 */
+    readonly name: string;
+}
+/** 개별 역할 참조 (e1, e2, ...) */
+export interface RoleRef {
+    role: string;
+    name?: string;
+    nth?: number;
+}
+/** ref ID → RoleRef 매핑 */
+export type RoleRefMap = Record<string, RoleRef>;
+/** 인터랙티브 역할 (클릭/입력 가능 요소) */
+export declare const INTERACTIVE_ROLES: ReadonlySet<string>;
+/** 콘텐츠 역할 (이름 있으면 ref 할당) */
+export declare const CONTENT_ROLES: ReadonlySet<string>;
+/** 구조 역할 (compact 모드에서 제거) */
+export declare const STRUCTURAL_ROLES: ReadonlySet<string>;
+export interface SnapshotOptions {
+    /** 인터랙티브 요소만 필터링 */
+    interactive?: boolean;
+    /** 구조 요소 제거 (compact 모드) */
+    compact?: boolean;
+    /** 최대 트리 깊이 */
+    maxDepth?: number;
+}
+export interface SnapshotResult {
+    /** ARIA 트리 텍스트 (AI-friendly) */
+    tree: string;
+    /** ref ID → RoleRef 매핑 */
+    refs: RoleRefMap;
+    /** 스냅샷 버전 (stale ref 감지용) */
+    snapshotVersion: number;
+    /** 콘텐츠 체크섬 (변경 감지) */
+    checksum: string;
+    /** 인터랙티브 요소 수 */
+    interactiveCount: number;
+    /** 전체 요소 수 */
+    totalCount: number;
+}
+export interface BrowserSessionInfo {
+    tenantId: string;
+    targetId: string;
+    url: string;
+    title: string;
+    connected: boolean;
+    createdAt: string;
+}
+export interface PageState {
+    roleRefs: RoleRefMap;
+    snapshotVersion: number;
+    lastSnapshotAt?: string;
+}
+export type BrowserActionType = 'click' | 'type' | 'scroll' | 'pressKey' | 'navigate' | 'screenshot' | 'fillForm';
+export interface ClickOptions {
+    button?: 'left' | 'right' | 'middle';
+    clickCount?: number;
+    modifiers?: Array<'Alt' | 'Control' | 'Meta' | 'Shift'>;
+}
+export interface TypeOptions {
+    submit?: boolean;
+    slowly?: boolean;
+}
+export interface FormField {
+    ref: string;
+    value: string;
+    type?: 'text' | 'checkbox' | 'radio' | 'select';
+}
+export interface ScrollOptions {
+    direction: 'up' | 'down' | 'left' | 'right';
+    amount?: number;
+}
+export interface ScreenshotOptions {
+    fullPage?: boolean;
+    ref?: string;
+    quality?: number;
+}
+export interface NavigateOptions {
+    waitUntil?: 'load' | 'domcontentloaded' | 'networkidle';
+}
+export interface BrowserActionResult {
+    success: boolean;
+    action: string;
+    data?: unknown;
+    error?: BrowserError;
+    durationMs: number;
+}
+export type BrowserErrorCode = 'CDP_CONNECTION_FAILED' | 'ACTION_TIMEOUT' | 'REF_STALE' | 'REF_NOT_FOUND' | 'NAVIGATION_BLOCKED' | 'SCREENSHOT_FAILED' | 'BROWSER_DISCONNECTED' | 'SNAPSHOT_FAILED' | 'UNSUPPORTED_API' | 'MAX_SESSIONS_REACHED' | 'UNKNOWN_ERROR';
+export interface BrowserError {
+    error: BrowserErrorCode;
+    message: string;
+    retries?: number;
+    timeout?: number;
+    details?: unknown;
+}
+export interface BrowserServiceConfig {
+    /** CDP 연결 타임아웃 (ms) */
+    connectTimeout?: number;
+    /** 액션 기본 타임아웃 (ms) */
+    actionTimeout?: number;
+    /** 최대 재시도 횟수 */
+    maxRetries?: number;
+    /** 로컬 최대 동시 세션 */
+    maxLocalSessions?: number;
+    /** SaaS 사용자당 최대 세션 */
+    maxSaasSessionsPerUser?: number;
+    /** 스크린샷 저장 디렉토리 */
+    screenshotDir?: string;
+}
+export declare const DEFAULT_CONFIG: BrowserServiceConfig;
+/** 허용 URL 스킴 */
+export declare const ALLOWED_SCHEMES: ReadonlySet<string>;
+/** 차단 호스트네임 (SSRF 방지) */
+export declare const BLOCKED_HOSTNAMES: ReadonlySet<string>;
+/** 차단 IP 대역 (SSRF 방지) */
+export declare const BLOCKED_IP_PATTERNS: readonly RegExp[];
+export interface ConnectedBrowser {
+    context: BrowserContext;
+    cdpSession: CDPSession;
+    cdpUrl: string;
+    provider: IBrowserProvider;
+    connectedAt: string;
+}
+export interface RoleRefsCacheEntry {
+    refs: RoleRefMap;
+    snapshotVersion: number;
+    cachedAt: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/pc/browser/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/pc/browser/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAQ,cAAc,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAMnE,4DAA4D;AAC5D,MAAM,WAAW,gBAAgB;IAC/B,2BAA2B;IAC3B,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,iBAAiB;IACjB,WAAW,IAAI,OAAO,CAAC;IACvB,eAAe;IACf,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,eAAe;IACf,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAMD,6BAA6B;AAC7B,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,0BAA0B;AAC1B,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEjD,6BAA6B;AAC7B,eAAO,MAAM,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAIhD,CAAC;AAEH,6BAA6B;AAC7B,eAAO,MAAM,aAAa,EAAE,WAAW,CAAC,MAAM,CAG5C,CAAC;AAEH,8BAA8B;AAC9B,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAI/C,CAAC;AAMH,MAAM,WAAW,eAAe;IAC9B,oBAAoB;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,4BAA4B;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,eAAe;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,gCAAgC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,0BAA0B;IAC1B,IAAI,EAAE,UAAU,CAAC;IACjB,6BAA6B;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,sBAAsB;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc;IACd,UAAU,EAAE,MAAM,CAAC;CACpB;AAMD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,UAAU,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAMD,MAAM,MAAM,iBAAiB,GACzB,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,GACxC,UAAU,GAAG,YAAY,GAAG,UAAU,CAAC;AAE3C,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,KAAK,CAAC,KAAK,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;CACzD;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAC;CACjD;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,MAAM,GAAG,kBAAkB,GAAG,aAAa,CAAC;CACzD;AAMD,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAMD,MAAM,MAAM,gBAAgB,GACxB,uBAAuB,GACvB,gBAAgB,GAChB,WAAW,GACX,eAAe,GACf,oBAAoB,GACpB,mBAAmB,GACnB,sBAAsB,GACtB,iBAAiB,GACjB,iBAAiB,GACjB,sBAAsB,GACtB,eAAe,CAAC;AAEpB,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,gBAAgB,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAMD,MAAM,WAAW,oBAAoB;IACnC,uBAAuB;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,sBAAsB;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,sBAAsB;IACtB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,mBAAmB;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,eAAO,MAAM,cAAc,EAAE,oBAM5B,CAAC;AAMF,gBAAgB;AAChB,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,CAAgC,CAAC;AAEjF,yBAAyB;AACzB,eAAO,MAAM,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAMhD,CAAC;AAEH,yBAAyB;AACzB,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAehD,CAAC;AAMF,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,UAAU,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;CAClB"}

package/dist/pc/browser/types.js

@@ -0,0 +1,60 @@
+/**
+ * Browser Automation Types
+ *
+ * Playwright ARIA Snapshot 기반 브라우저 자동화 타입 정의.
+ */
+/** 인터랙티브 역할 (클릭/입력 가능 요소) */
+export const INTERACTIVE_ROLES = new Set([
+    'button', 'link', 'textbox', 'checkbox', 'radio', 'combobox',
+    'listbox', 'menuitem', 'option', 'searchbox', 'slider',
+    'switch', 'tab', 'treeitem',
+]);
+/** 콘텐츠 역할 (이름 있으면 ref 할당) */
+export const CONTENT_ROLES = new Set([
+    'heading', 'cell', 'gridcell', 'columnheader', 'listitem',
+    'article', 'region', 'main', 'navigation',
+]);
+/** 구조 역할 (compact 모드에서 제거) */
+export const STRUCTURAL_ROLES = new Set([
+    'generic', 'group', 'list', 'table', 'row', 'menu', 'toolbar',
+    'tablist', 'tree', 'banner', 'complementary', 'contentinfo',
+    'dialog', 'form', 'grid', 'separator', 'status',
+]);
+export const DEFAULT_CONFIG = {
+    connectTimeout: 10_000,
+    actionTimeout: 8_000,
+    maxRetries: 3,
+    maxLocalSessions: 3,
+    maxSaasSessionsPerUser: 1,
+};
+// ============================================================================
+// URL Validation
+// ============================================================================
+/** 허용 URL 스킴 */
+export const ALLOWED_SCHEMES = new Set(['http:', 'https:']);
+/** 차단 호스트네임 (SSRF 방지) */
+export const BLOCKED_HOSTNAMES = new Set([
+    'localhost',
+    'localhost.localdomain',
+    '0.0.0.0',
+    '[::]',
+    '[::1]',
+]);
+/** 차단 IP 대역 (SSRF 방지) */
+export const BLOCKED_IP_PATTERNS = [
+    /^127\./, // loopback
+    /^10\./, // private A
+    /^172\.(1[6-9]|2\d|3[01])\./, // private B
+    /^192\.168\./, // private C
+    /^169\.254\./, // link-local / metadata
+    /^0\./, // unspecified
+    /^::1$/, // IPv6 loopback
+    /^fc00:/i, // IPv6 unique local
+    /^fe80:/i, // IPv6 link-local
+    /^::ffff:127\./i, // IPv4-mapped IPv6 loopback
+    /^::ffff:10\./i, // IPv4-mapped IPv6 private A
+    /^::ffff:172\.(1[6-9]|2\d|3[01])\./i, // IPv4-mapped IPv6 private B
+    /^::ffff:192\.168\./i, // IPv4-mapped IPv6 private C
+    /^::ffff:169\.254\./i, // IPv4-mapped IPv6 link-local
+];
+//# sourceMappingURL=types.js.map

package/dist/pc/browser/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/pc/browser/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAkCH,6BAA6B;AAC7B,MAAM,CAAC,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC;IAC5D,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU;IAC5D,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ;IACtD,QAAQ,EAAE,KAAK,EAAE,UAAU;CAC5B,CAAC,CAAC;AAEH,6BAA6B;AAC7B,MAAM,CAAC,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAC;IACxD,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU;IACzD,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY;CAC1C,CAAC,CAAC;AAEH,8BAA8B;AAC9B,MAAM,CAAC,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC;IAC3D,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS;IAC7D,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,aAAa;IAC3D,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ;CAChD,CAAC,CAAC;AAiJH,MAAM,CAAC,MAAM,cAAc,GAAyB;IAClD,cAAc,EAAE,MAAM;IACtB,aAAa,EAAE,KAAK;IACpB,UAAU,EAAE,CAAC;IACb,gBAAgB,EAAE,CAAC;IACnB,sBAAsB,EAAE,CAAC;CAC1B,CAAC;AAEF,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,gBAAgB;AAChB,MAAM,CAAC,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEjF,yBAAyB;AACzB,MAAM,CAAC,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC;IAC5D,WAAW;IACX,uBAAuB;IACvB,SAAS;IACT,MAAM;IACN,OAAO;CACR,CAAC,CAAC;AAEH,yBAAyB;AACzB,MAAM,CAAC,MAAM,mBAAmB,GAAsB;IACpD,QAAQ,EAAe,WAAW;IAClC,OAAO,EAAgB,YAAY;IACnC,4BAA4B,EAAG,YAAY;IAC3C,aAAa,EAAU,YAAY;IACnC,aAAa,EAAU,wBAAwB;IAC/C,MAAM,EAAiB,cAAc;IACrC,OAAO,EAAgB,gBAAgB;IACvC,SAAS,EAAc,oBAAoB;IAC3C,SAAS,EAAc,kBAAkB;IACzC,gBAAgB,EAAM,4BAA4B;IAClD,eAAe,EAAO,6BAA6B;IACnD,oCAAoC,EAAE,6BAA6B;IACnE,qBAAqB,EAAE,6BAA6B;IACpD,qBAAqB,EAAE,8BAA8B;CACtD,CAAC"}

package/dist/pc/google/OAuthFlow.d.ts

@@ -0,0 +1,58 @@
+/**
+ * OAuthFlow — OAuth 2.0 Authorization Code + PKCE
+ *
+ * - PKCE code_verifier + code_challenge (S256)
+ * - State parameter: 서버 측 해시 저장, TTL 5분, 1회 사용
+ * - ICallbackHandler: Local(Phase1) / SaaS(Phase6) 분기
+ * - Replay 방지: state 사용 후 즉시 소멸
+ */
+import Database from 'better-sqlite3';
+import type { ICallbackHandler, OAuthFlowConfig, GoogleLogger } from './types.js';
+import { TokenStore } from './TokenStore.js';
+import { ScopeManager } from './ScopeManager.js';
+export declare class OAuthFlow {
+    private db;
+    private tokenStore;
+    private scopeManager;
+    private config;
+    private logger;
+    constructor(db: Database.Database, tokenStore: TokenStore, scopeManager: ScopeManager, logger: GoogleLogger, config: OAuthFlowConfig);
+    /** OAuth 인증 URL 생성 (PKCE 포함) */
+    generateAuthUrl(userId: string, scopes: string[]): {
+        url: string;
+        state: string;
+    };
+    /** 콜백 처리: code → 토큰 교환 → 저장 */
+    handleCallback(code: string, state: string): Promise<{
+        email?: string;
+    }>;
+    /** 로컬 모드: 임시 HTTP 서버로 콜백 수신 */
+    startLocalAuthFlow(userId: string, scopes: string[]): Promise<{
+        email?: string;
+        authUrl: string;
+    }>;
+    /** 토큰 자동 갱신 (refresh token rotation) */
+    refreshTokens(userId: string): Promise<void>;
+    /** 유효한 access token 반환 (자동 갱신 포함) */
+    getValidAccessToken(userId: string): Promise<string>;
+    private generatePKCE;
+    private saveState;
+    private consumeState;
+    /** 임시 verifier 캐시 (state hash → verifier, TTL 기반 정리) */
+    private verifierCache;
+    private verifierTimestamps;
+    private cleanupTimer;
+    private startVerifierCleanup;
+    private exchangeCode;
+    private fetchUserEmail;
+}
+export declare class LocalCallbackServer implements ICallbackHandler {
+    private server;
+    private port;
+    private timeoutMs;
+    constructor(port?: number, timeoutMs?: number);
+    get redirectUri(): string;
+    waitForCallback(expectedState: string): Promise<string>;
+    close(): void;
+}
+//# sourceMappingURL=OAuthFlow.d.ts.map

package/dist/pc/google/OAuthFlow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OAuthFlow.d.ts","sourceRoot":"","sources":["../../../src/pc/google/OAuthFlow.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,KAAK,EAEV,gBAAgB,EAChB,eAAe,EACf,YAAY,EACb,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAgBjD,qBAAa,SAAS;IACpB,OAAO,CAAC,EAAE,CAAoB;IAC9B,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,MAAM,CAAe;gBAG3B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,UAAU,EAAE,UAAU,EACtB,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,eAAe;IAczB,gCAAgC;IAChC,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IAuBjF,+BAA+B;IACzB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAqC9E,+BAA+B;IACzB,kBAAkB,CACtB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EAAE,GACf,OAAO,CAAC;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAa/C,wCAAwC;IAClC,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA2DlD,qCAAqC;IAC/B,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAuB1D,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,SAAS;IAmBjB,OAAO,CAAC,YAAY;IAgCpB,wDAAwD;IACxD,OAAO,CAAC,aAAa,CAA6B;IAClD,OAAO,CAAC,kBAAkB,CAA6B;IACvD,OAAO,CAAC,YAAY,CAA+C;IAEnE,OAAO,CAAC,oBAAoB;YAkBd,YAAY;YA8BZ,cAAc;CAQ7B;AAMD,qBAAa,mBAAoB,YAAW,gBAAgB;IAC1D,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,SAAS,CAAS;gBAEd,IAAI,GAAE,MAA8B,EAAE,SAAS,GAAE,MAAgC;IAK7F,IAAI,WAAW,IAAI,MAAM,CAExB;IAEK,eAAe,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAyC7D,KAAK,IAAI,IAAI;CAMd"}

package/dist/pc/google/OAuthFlow.js

@@ -0,0 +1,322 @@
+/**
+ * OAuthFlow — OAuth 2.0 Authorization Code + PKCE
+ *
+ * - PKCE code_verifier + code_challenge (S256)
+ * - State parameter: 서버 측 해시 저장, TTL 5분, 1회 사용
+ * - ICallbackHandler: Local(Phase1) / SaaS(Phase6) 분기
+ * - Replay 방지: state 사용 후 즉시 소멸
+ */
+import * as crypto from 'node:crypto';
+import * as http from 'node:http';
+import { createGoogleError } from './types.js';
+const OAUTH_AUTH_URL = 'https://accounts.google.com/o/oauth2/v2/auth';
+const OAUTH_TOKEN_URL = 'https://oauth2.googleapis.com/token';
+const OAUTH_USERINFO_URL = 'https://www.googleapis.com/oauth2/v1/userinfo?alt=json';
+const STATE_TTL_MS = 5 * 60 * 1000;
+const DEFAULT_CALLBACK_PORT = 51124;
+const DEFAULT_AUTH_TIMEOUT_MS = 120_000;
+export class OAuthFlow {
+    db;
+    tokenStore;
+    scopeManager;
+    config;
+    logger;
+    constructor(db, tokenStore, scopeManager, logger, config) {
+        this.db = db;
+        this.tokenStore = tokenStore;
+        this.scopeManager = scopeManager;
+        this.logger = logger;
+        this.config = {
+            clientId: config.clientId,
+            clientSecret: config.clientSecret ?? '',
+            callbackPort: config.callbackPort ?? DEFAULT_CALLBACK_PORT,
+            authTimeoutMs: config.authTimeoutMs ?? DEFAULT_AUTH_TIMEOUT_MS,
+        };
+    }
+    /** OAuth 인증 URL 생성 (PKCE 포함) */
+    generateAuthUrl(userId, scopes) {
+        const pkce = this.generatePKCE();
+        const state = crypto.randomBytes(32).toString('base64url');
+        // State 서버 측 저장 (해시, TTL 5분, 1회 사용)
+        this.saveState(state, userId, scopes, pkce.verifier);
+        const redirectUri = `http://localhost:${this.config.callbackPort}/oauth-callback`;
+        const url = new URL(OAUTH_AUTH_URL);
+        url.searchParams.set('client_id', this.config.clientId);
+        url.searchParams.set('response_type', 'code');
+        url.searchParams.set('redirect_uri', redirectUri);
+        url.searchParams.set('scope', scopes.join(' '));
+        url.searchParams.set('code_challenge', pkce.challenge);
+        url.searchParams.set('code_challenge_method', 'S256');
+        url.searchParams.set('state', state);
+        url.searchParams.set('access_type', 'offline');
+        url.searchParams.set('prompt', 'consent');
+        url.searchParams.set('include_granted_scopes', 'true');
+        return { url: url.toString(), state };
+    }
+    /** 콜백 처리: code → 토큰 교환 → 저장 */
+    async handleCallback(code, state) {
+        const stateData = this.consumeState(state);
+        const redirectUri = `http://localhost:${this.config.callbackPort}/oauth-callback`;
+        const tokens = await this.exchangeCode(code, stateData.verifier, redirectUri);
+        // 승인된 scope 기록
+        const grantedScopes = tokens.scope?.split(' ') ?? stateData.scopes;
+        this.scopeManager.grantScopes(stateData.userId, grantedScopes);
+        // 토큰 암호화 저장
+        this.tokenStore.save(stateData.userId, tokens.access_token, tokens.refresh_token ?? '', tokens.expires_in, grantedScopes);
+        // 부분 승인 감지
+        const denied = this.scopeManager.detectDeniedScopes(stateData.scopes, grantedScopes);
+        if (denied.length > 0) {
+            this.logger('warn', `Scopes denied: ${denied.join(', ')}`);
+        }
+        // 이메일 조회
+        let email;
+        try {
+            email = await this.fetchUserEmail(tokens.access_token);
+        }
+        catch {
+            this.logger('warn', 'Failed to fetch user email');
+        }
+        this.logger('info', `OAuth completed for user ${stateData.userId}`);
+        return { email };
+    }
+    /** 로컬 모드: 임시 HTTP 서버로 콜백 수신 */
+    async startLocalAuthFlow(userId, scopes) {
+        const { url, state } = this.generateAuthUrl(userId, scopes);
+        const handler = new LocalCallbackServer(this.config.callbackPort, this.config.authTimeoutMs);
+        try {
+            const code = await handler.waitForCallback(state);
+            const result = await this.handleCallback(code, state);
+            return { ...result, authUrl: url };
+        }
+        finally {
+            handler.close();
+        }
+    }
+    /** 토큰 자동 갱신 (refresh token rotation) */
+    async refreshTokens(userId) {
+        const tokens = this.tokenStore.load(userId);
+        if (!tokens) {
+            throw createGoogleError('AUTH_REQUIRED', "Google 인증이 필요합니다. 'vibe google auth'로 인증해주세요.");
+        }
+        if (!tokens.refreshToken) {
+            throw createGoogleError('TOKEN_REFRESH_FAILED', "Google 인증이 만료되었습니다. 'vibe google auth'로 재인증해주세요.");
+        }
+        await this.tokenStore.withRefreshMutex(userId, async () => {
+            const freshTokens = this.tokenStore.load(userId);
+            if (freshTokens && !this.tokenStore.isExpired(freshTokens)) {
+                return freshTokens;
+            }
+            const body = new URLSearchParams({
+                grant_type: 'refresh_token',
+                refresh_token: tokens.refreshToken,
+                client_id: this.config.clientId,
+            });
+            if (this.config.clientSecret) {
+                body.set('client_secret', this.config.clientSecret);
+            }
+            const res = await fetch(OAUTH_TOKEN_URL, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+                body: body.toString(),
+            });
+            if (!res.ok) {
+                throw createGoogleError('TOKEN_REFRESH_FAILED', "Google 인증이 만료되었습니다. 'vibe google auth'로 재인증해주세요.");
+            }
+            const data = (await res.json());
+            const scopes = data.scope?.split(' ') ?? this.scopeManager.getGrantedScopes(userId);
+            this.tokenStore.rotateToken(userId, tokens.familyId, tokens.generation, data.access_token, data.refresh_token ?? tokens.refreshToken, data.expires_in, scopes);
+            const refreshed = this.tokenStore.load(userId);
+            if (!refreshed) {
+                throw createGoogleError('TOKEN_REFRESH_FAILED', 'Token data lost after refresh. Database may be corrupted.');
+            }
+            return refreshed;
+        });
+    }
+    /** 유효한 access token 반환 (자동 갱신 포함) */
+    async getValidAccessToken(userId) {
+        const tokens = this.tokenStore.load(userId);
+        if (!tokens) {
+            throw createGoogleError('AUTH_REQUIRED', "Google 인증이 필요합니다. 'vibe google auth'로 인증해주세요.");
+        }
+        if (this.tokenStore.isExpired(tokens) || this.tokenStore.needsPreemptiveRefresh(tokens)) {
+            await this.refreshTokens(userId);
+            const refreshed = this.tokenStore.load(userId);
+            if (!refreshed) {
+                throw createGoogleError('TOKEN_REFRESH_FAILED', 'Token refresh failed');
+            }
+            return refreshed.accessToken;
+        }
+        return tokens.accessToken;
+    }
+    // ════════════════════════════════════════════════════════════
+    // Private
+    // ════════════════════════════════════════════════════════════
+    generatePKCE() {
+        const verifier = crypto.randomBytes(32).toString('base64url');
+        const challenge = crypto.createHash('sha256').update(verifier).digest('base64url');
+        return { verifier, challenge };
+    }
+    saveState(state, userId, scopes, verifier) {
+        const stateHash = crypto.createHash('sha256').update(state).digest('hex');
+        const verifierHash = crypto.createHash('sha256').update(verifier).digest('hex');
+        this.db.prepare(`
+      INSERT INTO oauth_states (state_hash, user_id, scopes, verifier_hash, created_at, used)
+      VALUES (?, ?, ?, ?, ?, 0)
+    `).run(stateHash, userId, JSON.stringify(scopes), verifierHash, Date.now());
+        // raw verifier는 메모리에만 보관 (state → verifier 매핑, TTL 정리)
+        this.verifierCache.set(stateHash, verifier);
+        this.verifierTimestamps.set(stateHash, Date.now());
+        this.startVerifierCleanup();
+    }
+    consumeState(state) {
+        const stateHash = crypto.createHash('sha256').update(state).digest('hex');
+        const row = this.db.prepare('SELECT * FROM oauth_states WHERE state_hash = ? AND used = 0').get(stateHash);
+        if (!row) {
+            throw createGoogleError('AUTH_REQUIRED', 'Invalid or expired OAuth state (replay attempt?)');
+        }
+        // TTL 체크
+        if (Date.now() - row.created_at > STATE_TTL_MS) {
+            this.db.prepare('DELETE FROM oauth_states WHERE state_hash = ?').run(stateHash);
+            throw createGoogleError('AUTH_REQUIRED', 'OAuth state expired (5 min TTL)');
+        }
+        // 1회 사용 후 소멸
+        this.db.prepare('UPDATE oauth_states SET used = 1 WHERE state_hash = ?').run(stateHash);
+        const verifier = this.verifierCache.get(stateHash);
+        if (!verifier) {
+            throw createGoogleError('AUTH_REQUIRED', 'PKCE verifier not found');
+        }
+        this.verifierCache.delete(stateHash);
+        return {
+            userId: row.user_id,
+            scopes: parseScopesJson(row.scopes),
+            verifier,
+        };
+    }
+    /** 임시 verifier 캐시 (state hash → verifier, TTL 기반 정리) */
+    verifierCache = new Map();
+    verifierTimestamps = new Map();
+    cleanupTimer = null;
+    startVerifierCleanup() {
+        if (this.cleanupTimer)
+            return;
+        this.cleanupTimer = setInterval(() => {
+            const now = Date.now();
+            for (const [hash, ts] of this.verifierTimestamps) {
+                if (now - ts > STATE_TTL_MS) {
+                    this.verifierCache.delete(hash);
+                    this.verifierTimestamps.delete(hash);
+                }
+            }
+            if (this.verifierCache.size === 0 && this.cleanupTimer) {
+                clearInterval(this.cleanupTimer);
+                this.cleanupTimer = null;
+            }
+        }, 60_000);
+        if (this.cleanupTimer.unref)
+            this.cleanupTimer.unref();
+    }
+    async exchangeCode(code, verifier, redirectUri) {
+        const body = new URLSearchParams({
+            client_id: this.config.clientId,
+            code,
+            grant_type: 'authorization_code',
+            redirect_uri: redirectUri,
+            code_verifier: verifier,
+        });
+        if (this.config.clientSecret) {
+            body.set('client_secret', this.config.clientSecret);
+        }
+        const res = await fetch(OAUTH_TOKEN_URL, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+            body: body.toString(),
+        });
+        if (!res.ok) {
+            const text = await res.text();
+            throw createGoogleError('AUTH_REQUIRED', `Token exchange failed: ${text}`);
+        }
+        return (await res.json());
+    }
+    async fetchUserEmail(accessToken) {
+        const res = await fetch(OAUTH_USERINFO_URL, {
+            headers: { Authorization: `Bearer ${accessToken}` },
+        });
+        if (!res.ok)
+            return undefined;
+        const data = (await res.json());
+        return data.email;
+    }
+}
+// ============================================================================
+// LocalCallbackServer — ICallbackHandler 구현 (Phase 1: 로컬)
+// ============================================================================
+export class LocalCallbackServer {
+    server = null;
+    port;
+    timeoutMs;
+    constructor(port = DEFAULT_CALLBACK_PORT, timeoutMs = DEFAULT_AUTH_TIMEOUT_MS) {
+        this.port = port;
+        this.timeoutMs = timeoutMs;
+    }
+    get redirectUri() {
+        return `http://localhost:${this.port}/oauth-callback`;
+    }
+    async waitForCallback(expectedState) {
+        return new Promise((resolve, reject) => {
+            this.server = http.createServer((req, res) => {
+                const url = new URL(req.url ?? '/', 'http://localhost');
+                if (url.pathname !== '/oauth-callback') {
+                    res.writeHead(404).end();
+                    return;
+                }
+                const code = url.searchParams.get('code');
+                const state = url.searchParams.get('state');
+                const error = url.searchParams.get('error');
+                res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+                res.end('<script>window.close()</script><p>인증 완료. 이 창을 닫아도 됩니다.</p>');
+                this.close();
+                if (error) {
+                    reject(createGoogleError('AUTH_REQUIRED', `OAuth error: ${error}`));
+                    return;
+                }
+                if (!code) {
+                    reject(createGoogleError('AUTH_REQUIRED', '인증 코드가 없습니다'));
+                    return;
+                }
+                if (state !== expectedState) {
+                    reject(createGoogleError('AUTH_REQUIRED', 'State mismatch (CSRF detected)'));
+                    return;
+                }
+                resolve(code);
+            });
+            this.server.listen(this.port);
+            setTimeout(() => {
+                this.close();
+                reject(createGoogleError('AUTH_REQUIRED', `OAuth 인증 타임아웃 (${this.timeoutMs / 1000}초)`));
+            }, this.timeoutMs);
+        });
+    }
+    close() {
+        if (this.server) {
+            this.server.close();
+            this.server = null;
+        }
+    }
+}
+/** JSON.parse + 런타임 검증: scopes 배열 파싱 */
+function parseScopesJson(json) {
+    try {
+        const parsed = JSON.parse(json);
+        if (!Array.isArray(parsed)) {
+            throw new Error(`Expected array, got ${typeof parsed}`);
+        }
+        if (!parsed.every((s) => typeof s === 'string')) {
+            throw new Error('Array contains non-string elements');
+        }
+        return parsed;
+    }
+    catch (err) {
+        throw createGoogleError('UNKNOWN_ERROR', `OAuth scopes 파싱 실패: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+//# sourceMappingURL=OAuthFlow.js.map

package/dist/pc/google/OAuthFlow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OAuthFlow.js","sourceRoot":"","sources":["../../../src/pc/google/OAuthFlow.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAQlC,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAI/C,MAAM,cAAc,GAAG,8CAA8C,CAAC;AACtE,MAAM,eAAe,GAAG,qCAAqC,CAAC;AAC9D,MAAM,kBAAkB,GAAG,wDAAwD,CAAC;AACpF,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,MAAM,qBAAqB,GAAG,KAAK,CAAC;AACpC,MAAM,uBAAuB,GAAG,OAAO,CAAC;AASxC,MAAM,OAAO,SAAS;IACZ,EAAE,CAAoB;IACtB,UAAU,CAAa;IACvB,YAAY,CAAe;IAC3B,MAAM,CAA4B;IAClC,MAAM,CAAe;IAE7B,YACE,EAAqB,EACrB,UAAsB,EACtB,YAA0B,EAC1B,MAAoB,EACpB,MAAuB;QAEvB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG;YACZ,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;YACvC,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,qBAAqB;YAC1D,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,uBAAuB;SAC/D,CAAC;IACJ,CAAC;IAED,gCAAgC;IAChC,eAAe,CAAC,MAAc,EAAE,MAAgB;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAE3D,oCAAoC;QACpC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAErD,MAAM,WAAW,GAAG,oBAAoB,IAAI,CAAC,MAAM,CAAC,YAAY,iBAAiB,CAAC;QAClF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;QACpC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACvD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;QACtD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QAC/C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC1C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC;QAEvD,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC;IACxC,CAAC;IAED,+BAA+B;IAC/B,KAAK,CAAC,cAAc,CAAC,IAAY,EAAE,KAAa;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAE3C,MAAM,WAAW,GAAG,oBAAoB,IAAI,CAAC,MAAM,CAAC,YAAY,iBAAiB,CAAC;QAClF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAE9E,eAAe;QACf,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC;QACnE,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAE/D,YAAY;QACZ,IAAI,CAAC,UAAU,CAAC,IAAI,CAClB,SAAS,CAAC,MAAM,EAChB,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,aAAa,IAAI,EAAE,EAC1B,MAAM,CAAC,UAAU,EACjB,aAAa,CACd,CAAC;QAEF,WAAW;QACX,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,SAAS,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACrF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,SAAS;QACT,IAAI,KAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,4BAA4B,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QACpE,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IAED,+BAA+B;IAC/B,KAAK,CAAC,kBAAkB,CACtB,MAAc,EACd,MAAgB;QAEhB,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAE7F,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACtD,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QACrC,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,KAAK,CAAC,aAAa,CAAC,MAAc;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,iBAAiB,CAAC,eAAe,EACrC,+CAA+C,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YACzB,MAAM,iBAAiB,CAAC,sBAAsB,EAC5C,kDAAkD,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,WAAW,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC3D,OAAO,WAAW,CAAC;YACrB,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;gBAC/B,UAAU,EAAE,eAAe;gBAC3B,aAAa,EAAE,MAAM,CAAC,YAAY;gBAClC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;aAChC,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC7B,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACtD,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE;gBACvC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;aACtB,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,iBAAiB,CAAC,sBAAsB,EAC5C,kDAAkD,CAAC,CAAC;YACxD,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAkB,CAAC;YACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAEpF,IAAI,CAAC,UAAU,CAAC,WAAW,CACzB,MAAM,EACN,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,UAAU,EACjB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,YAAY,EACzC,IAAI,CAAC,UAAU,EACf,MAAM,CACP,CAAC;YAEF,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,iBAAiB,CAAC,sBAAsB,EAC5C,2DAA2D,CAAC,CAAC;YACjE,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,qCAAqC;IACrC,KAAK,CAAC,mBAAmB,CAAC,MAAc;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,iBAAiB,CAAC,eAAe,EACrC,+CAA+C,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC;YACxF,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YACjC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,iBAAiB,CAAC,sBAAsB,EAAE,sBAAsB,CAAC,CAAC;YAC1E,CAAC;YACD,OAAO,SAAS,CAAC,WAAW,CAAC;QAC/B,CAAC;QAED,OAAO,MAAM,CAAC,WAAW,CAAC;IAC5B,CAAC;IAED,+DAA+D;IAC/D,UAAU;IACV,+DAA+D;IAEvD,YAAY;QAClB,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACnF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACjC,CAAC;IAEO,SAAS,CACf,KAAa,EACb,MAAc,EACd,MAAgB,EAChB,QAAgB;QAEhB,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1E,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChF,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;KAGf,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAE5E,uDAAuD;QACvD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,oBAAoB,EAAE,CAAC;IAC9B,CAAC;IAEO,YAAY,CAAC,KAAa;QAChC,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACzB,8DAA8D,CAC/D,CAAC,GAAG,CAAC,SAAS,CAA8B,CAAC;QAE9C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,iBAAiB,CAAC,eAAe,EAAE,kDAAkD,CAAC,CAAC;QAC/F,CAAC;QAED,SAAS;QACT,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,UAAU,GAAG,YAAY,EAAE,CAAC;YAC/C,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAChF,MAAM,iBAAiB,CAAC,eAAe,EAAE,iCAAiC,CAAC,CAAC;QAC9E,CAAC;QAED,aAAa;QACb,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,uDAAuD,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAExF,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,iBAAiB,CAAC,eAAe,EAAE,yBAAyB,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAErC,OAAO;YACL,MAAM,EAAE,GAAG,CAAC,OAAO;YACnB,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC;YACnC,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,wDAAwD;IAChD,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,kBAAkB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/C,YAAY,GAA0C,IAAI,CAAC;IAE3D,oBAAoB;QAC1B,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO;QAC9B,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;YACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACjD,IAAI,GAAG,GAAG,EAAE,GAAG,YAAY,EAAE,CAAC;oBAC5B,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAChC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC;YACD,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACvD,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACjC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YAC3B,CAAC;QACH,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK;YAAE,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;IACzD,CAAC;IAEO,KAAK,CAAC,YAAY,CACxB,IAAY,EACZ,QAAgB,EAChB,WAAmB;QAEnB,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,IAAI;YACJ,UAAU,EAAE,oBAAoB;YAChC,YAAY,EAAE,WAAW;YACzB,aAAa,EAAE,QAAQ;SACxB,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC7B,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE;YACvC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;SACtB,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,iBAAiB,CAAC,eAAe,EAAE,0BAA0B,IAAI,EAAE,CAAC,CAAC;QAC7E,CAAC;QAED,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAkB,CAAC;IAC7C,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,WAAmB;QAC9C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,kBAAkB,EAAE;YAC1C,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE;SACpD,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAuB,CAAC;QACtD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;CACF;AAED,+EAA+E;AAC/E,0DAA0D;AAC1D,+EAA+E;AAE/E,MAAM,OAAO,mBAAmB;IACtB,MAAM,GAAuB,IAAI,CAAC;IAClC,IAAI,CAAS;IACb,SAAS,CAAS;IAE1B,YAAY,OAAe,qBAAqB,EAAE,YAAoB,uBAAuB;QAC3F,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,IAAI,WAAW;QACb,OAAO,oBAAoB,IAAI,CAAC,IAAI,iBAAiB,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,aAAqB;QACzC,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBAC3C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;gBACxD,IAAI,GAAG,CAAC,QAAQ,KAAK,iBAAiB,EAAE,CAAC;oBACvC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;oBACzB,OAAO;gBACT,CAAC;gBAED,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAE5C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;gBACtE,IAAI,CAAC,KAAK,EAAE,CAAC;gBAEb,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CAAC,iBAAiB,CAAC,eAAe,EAAE,gBAAgB,KAAK,EAAE,CAAC,CAAC,CAAC;oBACpE,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,MAAM,CAAC,iBAAiB,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC,CAAC;oBAC1D,OAAO;gBACT,CAAC;gBACD,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;oBAC5B,MAAM,CAAC,iBAAiB,CAAC,eAAe,EAAE,gCAAgC,CAAC,CAAC,CAAC;oBAC7E,OAAO;gBACT,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAE9B,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,CAAC,KAAK,EAAE,CAAC;gBACb,MAAM,CAAC,iBAAiB,CAAC,eAAe,EAAE,kBAAkB,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;YAC1F,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,CAAC;IACH,CAAC;CACF;AAYD,wCAAwC;AACxC,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,MAAM,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,iBAAiB,CAAC,eAAe,EACrC,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC"}

package/dist/pc/google/OAuthFlow.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * OAuthFlow Tests
+ *
+ * PKCE generation, state management, scope manager.
+ */
+export {};
+//# sourceMappingURL=OAuthFlow.test.d.ts.map

package/dist/pc/google/OAuthFlow.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OAuthFlow.test.d.ts","sourceRoot":"","sources":["../../../src/pc/google/OAuthFlow.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}