@su-record/vibe 2.7.9 → 2.7.11

package/dist/pc/google/TokenStore.js

@@ -0,0 +1,324 @@
+/**
+ * TokenStore — SQLite 기반 per-user 토큰 저장소
+ *
+ * - Envelope encryption: KEK(master key) → DEK 암호화, DEK → 토큰 암호화
+ * - Token family rotation: refresh token 갱신 시 family 내 generation 증가
+ * - Reuse detection: 이전 generation token 사용 시 family 전체 폐기
+ * - AsyncMutex: 동시 갱신 방지 (1회만 갱신, 나머지 대기)
+ * - Preemptive refresh: 80% lifetime 시점에 자동 갱신
+ */
+import * as crypto from 'node:crypto';
+import * as path from 'node:path';
+import * as fs from 'node:fs';
+import Database from 'better-sqlite3';
+import { createGoogleError } from './types.js';
+import { getGlobalConfigDir } from '../../infra/lib/llm/auth/ConfigManager.js';
+const ALGORITHM = 'aes-256-gcm';
+const IV_LENGTH = 12;
+const AUTH_TAG_LENGTH = 16;
+const KEK_VERSION = 1;
+export class TokenStore {
+    db;
+    kek;
+    logger;
+    refreshMutexes = new Map();
+    ownsDb;
+    constructor(logger, dbOrPath) {
+        this.logger = logger;
+        if (dbOrPath && typeof dbOrPath !== 'string') {
+            // 외부 DB 인스턴스 주입 (Dual DB 방지)
+            this.db = dbOrPath;
+            this.ownsDb = false;
+        }
+        else {
+            const resolvedPath = (typeof dbOrPath === 'string' ? dbOrPath : undefined)
+                ?? path.join(getGlobalConfigDir(), 'google-tokens.db');
+            const dir = path.dirname(resolvedPath);
+            if (!fs.existsSync(dir)) {
+                fs.mkdirSync(dir, { recursive: true });
+            }
+            this.db = new Database(resolvedPath);
+            this.db.pragma('journal_mode = WAL');
+            this.db.pragma('foreign_keys = ON');
+            this.ownsDb = true;
+        }
+        this.kek = this.loadOrCreateKEK();
+        this.initSchema();
+    }
+    // ════════════════════════════════════════════════════════════
+    // Public API
+    // ════════════════════════════════════════════════════════════
+    /** 토큰 저장 (암호화 + family 생성) */
+    save(userId, accessToken, refreshToken, expiresIn, scopes) {
+        const familyId = this.createFamily(userId);
+        const scopeHash = this.hashScopes(scopes);
+        const expiresAt = Date.now() + expiresIn * 1000;
+        const encAccess = this.envelopeEncrypt(accessToken);
+        const encRefresh = this.envelopeEncrypt(refreshToken);
+        this.db.prepare(`
+      INSERT OR REPLACE INTO google_tokens
+        (user_id, provider, scope_hash, scopes_json, access_token_enc, refresh_token_enc,
+         expires_at, created_at, family_id, generation, dek_wrapped, kek_version)
+      VALUES (?, 'google', ?, ?, ?, ?, ?, ?, ?, 1, ?, ?)
+    `).run(userId, scopeHash, JSON.stringify(scopes), encAccess.ciphertext, encRefresh.ciphertext, expiresAt, new Date().toISOString(), familyId, encRefresh.dekWrapped, encRefresh.kekVersion);
+        this.logger('info', `Token saved for user ${userId}`);
+    }
+    /** 토큰 로드 (복호화) */
+    load(userId) {
+        const row = this.db.prepare(`
+      SELECT
+        user_id AS userId, provider, scope_hash AS scopeHash,
+        scopes_json AS scopesJson,
+        access_token_enc AS accessTokenEnc, refresh_token_enc AS refreshTokenEnc,
+        expires_at AS expiresAt, created_at AS createdAt,
+        family_id AS familyId, generation,
+        dek_wrapped AS dekWrapped, kek_version AS kekVersion
+      FROM google_tokens
+      WHERE user_id = ? AND provider = 'google'
+      ORDER BY expires_at DESC LIMIT 1
+    `).get(userId);
+        if (!row)
+            return null;
+        const family = this.getFamily(row.familyId);
+        if (family?.compromised) {
+            this.logger('warn', `Token family ${row.familyId} is compromised, refusing to load`);
+            return null;
+        }
+        const accessToken = this.envelopeDecrypt(row.accessTokenEnc, row.dekWrapped, row.kekVersion);
+        const refreshToken = this.envelopeDecrypt(row.refreshTokenEnc, row.dekWrapped, row.kekVersion);
+        return {
+            accessToken,
+            refreshToken,
+            expiresAt: row.expiresAt,
+            scopes: this.parseScopesJson(row),
+            familyId: row.familyId,
+            generation: row.generation,
+        };
+    }
+    /** 토큰 삭제 (사용자 전체) */
+    revoke(userId) {
+        this.db.prepare('DELETE FROM google_tokens WHERE user_id = ?').run(userId);
+        this.db.prepare('DELETE FROM token_families WHERE user_id = ?').run(userId);
+        this.logger('info', `Tokens revoked for user ${userId}`);
+    }
+    /** Refresh token rotation: 새 토큰 저장 + generation 증가 */
+    rotateToken(userId, familyId, oldGeneration, newAccessToken, newRefreshToken, expiresIn, scopes) {
+        // Reuse detection: 이전 generation 사용 시도
+        const currentRow = this.db.prepare(`
+      SELECT generation FROM google_tokens
+      WHERE user_id = ? AND family_id = ?
+      ORDER BY generation DESC LIMIT 1
+    `).get(userId, familyId);
+        if (currentRow && oldGeneration < currentRow.generation) {
+            this.invalidateFamily(familyId);
+            throw createGoogleError('FAMILY_COMPROMISED', `Refresh token reuse detected for family ${familyId}. All tokens invalidated.`);
+        }
+        const scopeHash = this.hashScopes(scopes);
+        const expiresAt = Date.now() + expiresIn * 1000;
+        const newGeneration = oldGeneration + 1;
+        const encAccess = this.envelopeEncrypt(newAccessToken);
+        const encRefresh = this.envelopeEncrypt(newRefreshToken);
+        this.db.prepare(`
+      INSERT OR REPLACE INTO google_tokens
+        (user_id, provider, scope_hash, scopes_json, access_token_enc, refresh_token_enc,
+         expires_at, created_at, family_id, generation, dek_wrapped, kek_version)
+      VALUES (?, 'google', ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `).run(userId, scopeHash, JSON.stringify(scopes), encAccess.ciphertext, encRefresh.ciphertext, expiresAt, new Date().toISOString(), familyId, newGeneration, encRefresh.dekWrapped, encRefresh.kekVersion);
+        this.updateFamilyLastUsed(familyId);
+        this.logger('info', `Token rotated for user ${userId}, generation ${newGeneration}`);
+    }
+    /** Family 전체 폐기 (compromised) */
+    invalidateFamily(familyId) {
+        this.db.prepare(`
+      UPDATE token_families SET compromised = 1 WHERE family_id = ?
+    `).run(familyId);
+        this.db.prepare(`
+      DELETE FROM google_tokens WHERE family_id = ?
+    `).run(familyId);
+        this.logger('warn', `Token family ${familyId} invalidated (reuse detected)`);
+    }
+    /** 80% lifetime 체크 (preemptive refresh 판정) */
+    needsPreemptiveRefresh(tokens) {
+        const now = Date.now();
+        const lifetime = tokens.expiresAt - (tokens.expiresAt - 3600_000);
+        const elapsed = now - (tokens.expiresAt - 3600_000);
+        return elapsed >= lifetime * 0.8;
+    }
+    /** AsyncMutex 래핑 refresh: 동시 요청 시 1회만 갱신 */
+    async withRefreshMutex(userId, refreshFn) {
+        const existing = this.refreshMutexes.get(userId);
+        if (existing)
+            return existing;
+        const promise = refreshFn().finally(() => {
+            this.refreshMutexes.delete(userId);
+        });
+        this.refreshMutexes.set(userId, promise);
+        return promise;
+    }
+    /** 만료 여부 체크 */
+    isExpired(tokens, marginMs = 60_000) {
+        return tokens.expiresAt <= Date.now() + marginMs;
+    }
+    /** DB 닫기 (외부 주입 DB는 닫지 않음) */
+    close() {
+        if (this.ownsDb) {
+            this.db.close();
+        }
+    }
+    /** 내부 DB 참조 (ScopeManager 등 공유용) */
+    getDatabase() {
+        return this.db;
+    }
+    // ════════════════════════════════════════════════════════════
+    // Token Family Management
+    // ════════════════════════════════════════════════════════════
+    createFamily(userId) {
+        const familyId = crypto.randomUUID();
+        this.db.prepare(`
+      INSERT INTO token_families (family_id, user_id, created_at, compromised, last_used_at)
+      VALUES (?, ?, ?, 0, ?)
+    `).run(familyId, userId, new Date().toISOString(), new Date().toISOString());
+        return familyId;
+    }
+    getFamily(familyId) {
+        const row = this.db.prepare('SELECT * FROM token_families WHERE family_id = ?').get(familyId);
+        if (!row)
+            return null;
+        return {
+            familyId: row.family_id,
+            userId: row.user_id,
+            createdAt: row.created_at,
+            compromised: Boolean(row.compromised),
+            lastUsedAt: row.last_used_at,
+        };
+    }
+    updateFamilyLastUsed(familyId) {
+        this.db.prepare('UPDATE token_families SET last_used_at = ? WHERE family_id = ?').run(new Date().toISOString(), familyId);
+    }
+    // ════════════════════════════════════════════════════════════
+    // Envelope Encryption
+    // ════════════════════════════════════════════════════════════
+    envelopeEncrypt(plaintext) {
+        const dek = crypto.randomBytes(32);
+        const iv = crypto.randomBytes(IV_LENGTH);
+        const cipher = crypto.createCipheriv(ALGORITHM, dek, iv);
+        const encrypted = Buffer.concat([cipher.update(plaintext, 'utf8'), cipher.final()]);
+        const authTag = cipher.getAuthTag();
+        const ciphertext = Buffer.concat([iv, authTag, encrypted]).toString('base64');
+        // KEK로 DEK 보호
+        const dekIv = crypto.randomBytes(IV_LENGTH);
+        const dekCipher = crypto.createCipheriv(ALGORITHM, this.kek, dekIv);
+        const dekEncrypted = Buffer.concat([dekCipher.update(dek), dekCipher.final()]);
+        const dekAuthTag = dekCipher.getAuthTag();
+        const dekWrapped = Buffer.concat([dekIv, dekAuthTag, dekEncrypted]).toString('base64');
+        return { ciphertext, dekWrapped, kekVersion: KEK_VERSION };
+    }
+    envelopeDecrypt(ciphertext, dekWrapped, _kekVersion) {
+        // DEK 복호화
+        const dekBuf = Buffer.from(dekWrapped, 'base64');
+        const dekIv = dekBuf.subarray(0, IV_LENGTH);
+        const dekAuthTag = dekBuf.subarray(IV_LENGTH, IV_LENGTH + AUTH_TAG_LENGTH);
+        const dekEncrypted = dekBuf.subarray(IV_LENGTH + AUTH_TAG_LENGTH);
+        const dekDecipher = crypto.createDecipheriv(ALGORITHM, this.kek, dekIv);
+        dekDecipher.setAuthTag(dekAuthTag);
+        const dek = Buffer.concat([dekDecipher.update(dekEncrypted), dekDecipher.final()]);
+        // 데이터 복호화
+        const dataBuf = Buffer.from(ciphertext, 'base64');
+        const iv = dataBuf.subarray(0, IV_LENGTH);
+        const authTag = dataBuf.subarray(IV_LENGTH, IV_LENGTH + AUTH_TAG_LENGTH);
+        const encrypted = dataBuf.subarray(IV_LENGTH + AUTH_TAG_LENGTH);
+        const decipher = crypto.createDecipheriv(ALGORITHM, dek, iv);
+        decipher.setAuthTag(authTag);
+        return Buffer.concat([decipher.update(encrypted), decipher.final()]).toString('utf8');
+    }
+    // ════════════════════════════════════════════════════════════
+    // KEK Management
+    // ════════════════════════════════════════════════════════════
+    loadOrCreateKEK() {
+        // 로컬: 파일시스템, SaaS: 환경변수
+        const envKey = process.env.VIBE_GOOGLE_MASTER_KEY;
+        if (envKey) {
+            return Buffer.from(envKey, 'base64');
+        }
+        const kekPath = path.join(getGlobalConfigDir(), '.google-kek');
+        if (fs.existsSync(kekPath)) {
+            return Buffer.from(fs.readFileSync(kekPath, 'utf-8'), 'base64');
+        }
+        const newKey = crypto.randomBytes(32);
+        const dir = path.dirname(kekPath);
+        if (!fs.existsSync(dir)) {
+            fs.mkdirSync(dir, { recursive: true });
+        }
+        fs.writeFileSync(kekPath, newKey.toString('base64'), { encoding: 'utf-8', mode: 0o600 });
+        return newKey;
+    }
+    // ════════════════════════════════════════════════════════════
+    // Scope Hashing
+    // ════════════════════════════════════════════════════════════
+    hashScopes(scopes) {
+        const sorted = [...scopes].sort().join(',');
+        return crypto.createHash('sha256').update(sorted).digest('hex').slice(0, 16);
+    }
+    parseScopesJson(row) {
+        const json = row.scopesJson ?? row.scopes_json;
+        if (json) {
+            try {
+                const parsed = JSON.parse(json);
+                if (Array.isArray(parsed) && parsed.every((s) => typeof s === 'string')) {
+                    return parsed;
+                }
+            }
+            catch {
+                this.logger('warn', `Failed to parse scopes_json for user ${row.userId}`);
+            }
+        }
+        return [];
+    }
+    // ════════════════════════════════════════════════════════════
+    // Schema
+    // ════════════════════════════════════════════════════════════
+    initSchema() {
+        this.db.exec(`
+      CREATE TABLE IF NOT EXISTS google_tokens (
+        user_id TEXT NOT NULL,
+        provider TEXT NOT NULL DEFAULT 'google',
+        scope_hash TEXT NOT NULL,
+        scopes_json TEXT NOT NULL DEFAULT '[]',
+        access_token_enc TEXT NOT NULL,
+        refresh_token_enc TEXT NOT NULL,
+        expires_at INTEGER NOT NULL,
+        created_at TEXT NOT NULL,
+        family_id TEXT NOT NULL,
+        generation INTEGER NOT NULL DEFAULT 1,
+        dek_wrapped TEXT NOT NULL,
+        kek_version INTEGER NOT NULL DEFAULT 1,
+        PRIMARY KEY (user_id, provider)
+      );
+
+      CREATE TABLE IF NOT EXISTS token_families (
+        family_id TEXT PRIMARY KEY,
+        user_id TEXT NOT NULL,
+        created_at TEXT NOT NULL,
+        compromised INTEGER NOT NULL DEFAULT 0,
+        last_used_at TEXT NOT NULL
+      );
+
+      CREATE TABLE IF NOT EXISTS oauth_states (
+        state_hash TEXT PRIMARY KEY,
+        user_id TEXT NOT NULL,
+        scopes TEXT NOT NULL,
+        verifier_hash TEXT NOT NULL,
+        created_at INTEGER NOT NULL,
+        used INTEGER NOT NULL DEFAULT 0
+      );
+
+      CREATE TABLE IF NOT EXISTS user_scopes (
+        user_id TEXT NOT NULL,
+        scope TEXT NOT NULL,
+        granted_at TEXT NOT NULL,
+        PRIMARY KEY (user_id, scope)
+      );
+    `);
+    }
+}
+//# sourceMappingURL=TokenStore.js.map

package/dist/pc/google/TokenStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenStore.js","sourceRoot":"","sources":["../../../src/pc/google/TokenStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAQtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAE/E,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB,MAAM,OAAO,UAAU;IACb,EAAE,CAAoB;IACtB,GAAG,CAAS;IACZ,MAAM,CAAe;IACrB,cAAc,GAAG,IAAI,GAAG,EAAoC,CAAC;IAE7D,MAAM,CAAU;IAExB,YAAY,MAAoB,EAAE,QAAqC;QACrE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAErB,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC7C,6BAA6B;YAC7B,IAAI,CAAC,EAAE,GAAG,QAAQ,CAAC;YACnB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,MAAM,YAAY,GAAG,CAAC,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;mBACrE,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,kBAAkB,CAAC,CAAC;YACzD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,CAAC;YACD,IAAI,CAAC,EAAE,GAAG,IAAI,QAAQ,CAAC,YAAY,CAAC,CAAC;YACrC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACrC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACpC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAClC,IAAI,CAAC,UAAU,EAAE,CAAC;IACpB,CAAC;IAED,+DAA+D;IAC/D,aAAa;IACb,+DAA+D;IAE/D,8BAA8B;IAC9B,IAAI,CACF,MAAc,EACd,WAAmB,EACnB,YAAoB,EACpB,SAAiB,EACjB,MAAgB;QAEhB,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC;QAEhD,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;QAEtD,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;KAKf,CAAC,CAAC,GAAG,CACJ,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EACzC,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,UAAU,EAC3C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EACnC,QAAQ,EAAE,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,UAAU,CACvD,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,wBAAwB,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,kBAAkB;IAClB,IAAI,CAAC,MAAc;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;;;;;KAW3B,CAAC,CAAC,GAAG,CAAC,MAAM,CAA8D,CAAC;QAE5E,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QAEtB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,MAAM,EAAE,WAAW,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,GAAG,CAAC,QAAQ,mCAAmC,CAAC,CAAC;YACrF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QAC7F,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QAE/F,OAAO;YACL,WAAW;YACX,YAAY;YACZ,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;YACjC,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,UAAU,EAAE,GAAG,CAAC,UAAU;SAC3B,CAAC;IACJ,CAAC;IAED,qBAAqB;IACrB,MAAM,CAAC,MAAc;QACnB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3E,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5E,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,2BAA2B,MAAM,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,sDAAsD;IACtD,WAAW,CACT,MAAc,EACd,QAAgB,EAChB,aAAqB,EACrB,cAAsB,EACtB,eAAuB,EACvB,SAAiB,EACjB,MAAgB;QAEhB,uCAAuC;QACvC,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;KAIlC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAuC,CAAC;QAE/D,IAAI,UAAU,IAAI,aAAa,GAAG,UAAU,CAAC,UAAU,EAAE,CAAC;YACxD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAChC,MAAM,iBAAiB,CAAC,oBAAoB,EAC1C,2CAA2C,QAAQ,2BAA2B,CAAC,CAAC;QACpF,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC;QAChD,MAAM,aAAa,GAAG,aAAa,GAAG,CAAC,CAAC;QAExC,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;QAEzD,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;KAKf,CAAC,CAAC,GAAG,CACJ,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EACzC,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,UAAU,EAC3C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EACnC,QAAQ,EAAE,aAAa,EAAE,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,UAAU,CACtE,CAAC;QAEF,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,0BAA0B,MAAM,gBAAgB,aAAa,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,iCAAiC;IACjC,gBAAgB,CAAC,QAAgB;QAC/B,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;KAEf,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;KAEf,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjB,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,QAAQ,+BAA+B,CAAC,CAAC;IAC/E,CAAC;IAED,8CAA8C;IAC9C,sBAAsB,CAAC,MAAuB;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,GAAG,CAAC,MAAM,CAAC,SAAS,GAAG,QAAQ,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,GAAG,QAAQ,CAAC,CAAC;QACpD,OAAO,OAAO,IAAI,QAAQ,GAAG,GAAG,CAAC;IACnC,CAAC;IAED,4CAA4C;IAC5C,KAAK,CAAC,gBAAgB,CACpB,MAAc,EACd,SAAyC;QAEzC,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAE9B,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YACvC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACzC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,eAAe;IACf,SAAS,CAAC,MAAuB,EAAE,WAAmB,MAAM;QAC1D,OAAO,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;IACnD,CAAC;IAED,8BAA8B;IAC9B,KAAK;QACH,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,WAAW;QACT,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAED,+DAA+D;IAC/D,0BAA0B;IAC1B,+DAA+D;IAEvD,YAAY,CAAC,MAAc;QACjC,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;KAGf,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAC7E,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,SAAS,CAAC,QAAgB;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACzB,kDAAkD,CACnD,CAAC,GAAG,CAAC,QAAQ,CAA+B,CAAC;QAE9C,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO;YACL,QAAQ,EAAE,GAAG,CAAC,SAAS;YACvB,MAAM,EAAE,GAAG,CAAC,OAAO;YACnB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;YACrC,UAAU,EAAE,GAAG,CAAC,YAAY;SAC7B,CAAC;IACJ,CAAC;IAEO,oBAAoB,CAAC,QAAgB;QAC3C,IAAI,CAAC,EAAE,CAAC,OAAO,CACb,gEAAgE,CACjE,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,+DAA+D;IAC/D,sBAAsB;IACtB,+DAA+D;IAEvD,eAAe,CAAC,SAAiB;QACvC,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACzD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACpF,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAE9E,cAAc;QACd,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACpE,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC/E,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAEvF,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;IAC7D,CAAC;IAEO,eAAe,CACrB,UAAkB,EAClB,UAAkB,EAClB,WAAmB;QAEnB,UAAU;QACV,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,eAAe,CAAC,CAAC;QAC3E,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,GAAG,eAAe,CAAC,CAAC;QAClE,MAAM,WAAW,GAAG,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACxE,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAEnF,UAAU;QACV,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAClD,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,eAAe,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,GAAG,eAAe,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7D,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxF,CAAC;IAED,+DAA+D;IAC/D,iBAAiB;IACjB,+DAA+D;IAEvD,eAAe;QACrB,wBAAwB;QACxB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QAClD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,aAAa,CAAC,CAAC;QAC/D,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,+DAA+D;IAC/D,gBAAgB;IAChB,+DAA+D;IAEvD,UAAU,CAAC,MAAgB;QACjC,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/E,CAAC;IAEO,eAAe,CAAC,GAAsE;QAC5F,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,WAAW,CAAC;QAC/C,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC;gBACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACzC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;oBACrF,OAAO,MAAM,CAAC;gBAChB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,wCAAwC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,+DAA+D;IAC/D,SAAS;IACT,+DAA+D;IAEvD,UAAU;QAChB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAwCZ,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/pc/google/TokenStore.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * TokenStore Tests
+ *
+ * Envelope encryption, token family rotation, reuse detection.
+ */
+export {};
+//# sourceMappingURL=TokenStore.test.d.ts.map

package/dist/pc/google/TokenStore.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenStore.test.d.ts","sourceRoot":"","sources":["../../../src/pc/google/TokenStore.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/pc/google/TokenStore.test.js

@@ -0,0 +1,134 @@
+/**
+ * TokenStore Tests
+ *
+ * Envelope encryption, token family rotation, reuse detection.
+ */
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import * as path from 'node:path';
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import { TokenStore } from './TokenStore.js';
+const logger = () => { };
+function createTempDir() {
+    return fs.mkdtempSync(path.join(os.tmpdir(), 'vibe-token-test-'));
+}
+describe('TokenStore', () => {
+    let tmpDir;
+    let store;
+    beforeEach(() => {
+        tmpDir = createTempDir();
+        // KEK를 환경변수로 제공 (테스트 안정성)
+        process.env.VIBE_GOOGLE_MASTER_KEY = Buffer.from('a'.repeat(32)).toString('base64');
+        store = new TokenStore(logger, path.join(tmpDir, 'test.db'));
+    });
+    afterEach(() => {
+        store.close();
+        delete process.env.VIBE_GOOGLE_MASTER_KEY;
+        fs.rmSync(tmpDir, { recursive: true, force: true });
+    });
+    // ════════════════════════════════════════════════════════════
+    // Encryption
+    // ════════════════════════════════════════════════════════════
+    describe('Envelope Encryption', () => {
+        it('should save and load tokens with encryption', () => {
+            store.save('user1', 'access_abc', 'refresh_xyz', 3600, ['scope1']);
+            const loaded = store.load('user1');
+            expect(loaded).not.toBeNull();
+            expect(loaded.accessToken).toBe('access_abc');
+            expect(loaded.refreshToken).toBe('refresh_xyz');
+        });
+        it('should encrypt tokens at rest (not plaintext in DB)', () => {
+            store.save('user1', 'my_secret_token', 'my_refresh_token', 3600, ['scope1']);
+            // Read raw DB file
+            const dbContent = fs.readFileSync(path.join(tmpDir, 'test.db'));
+            const text = dbContent.toString('utf-8');
+            expect(text).not.toContain('my_secret_token');
+            expect(text).not.toContain('my_refresh_token');
+        });
+        it('should return null for non-existent user', () => {
+            const loaded = store.load('nonexistent');
+            expect(loaded).toBeNull();
+        });
+    });
+    // ════════════════════════════════════════════════════════════
+    // Token Family
+    // ════════════════════════════════════════════════════════════
+    describe('Token Family Rotation', () => {
+        it('should create family on save', () => {
+            store.save('user1', 'access', 'refresh', 3600, ['scope1']);
+            const loaded = store.load('user1');
+            expect(loaded).not.toBeNull();
+            expect(loaded.familyId).toBeTruthy();
+            expect(loaded.generation).toBe(1);
+        });
+        it('should increment generation on rotate', () => {
+            store.save('user1', 'access1', 'refresh1', 3600, ['scope1']);
+            const tokens = store.load('user1');
+            store.rotateToken('user1', tokens.familyId, tokens.generation, 'access2', 'refresh2', 3600, ['scope1']);
+            const rotated = store.load('user1');
+            expect(rotated.generation).toBe(2);
+            expect(rotated.accessToken).toBe('access2');
+        });
+        it('should detect reuse and invalidate family', () => {
+            store.save('user1', 'access1', 'refresh1', 3600, ['scope1']);
+            const tokens = store.load('user1');
+            // First rotate (gen 1 → 2)
+            store.rotateToken('user1', tokens.familyId, 1, 'access2', 'refresh2', 3600, ['scope1']);
+            // Attempt reuse with old generation (gen 1 again)
+            expect(() => {
+                store.rotateToken('user1', tokens.familyId, 1, 'access3', 'refresh3', 3600, ['scope1']);
+            }).toThrow(/reuse detected/i);
+            // Tokens should be gone (family compromised)
+            const loaded = store.load('user1');
+            expect(loaded).toBeNull();
+        });
+    });
+    // ════════════════════════════════════════════════════════════
+    // Revoke
+    // ════════════════════════════════════════════════════════════
+    describe('Token Revocation', () => {
+        it('should delete all tokens for user', () => {
+            store.save('user1', 'access', 'refresh', 3600, ['scope1']);
+            expect(store.load('user1')).not.toBeNull();
+            store.revoke('user1');
+            expect(store.load('user1')).toBeNull();
+        });
+    });
+    // ════════════════════════════════════════════════════════════
+    // Expiry
+    // ════════════════════════════════════════════════════════════
+    describe('Token Expiry', () => {
+        it('should detect expired tokens', () => {
+            store.save('user1', 'access', 'refresh', 1, ['scope1']); // 1 second
+            const loaded = store.load('user1');
+            // Token expires in 1 second, margin is 60s → should be expired
+            expect(store.isExpired(loaded, 60_000)).toBe(true);
+        });
+        it('should not flag valid tokens as expired', () => {
+            store.save('user1', 'access', 'refresh', 7200, ['scope1']); // 2 hours
+            const loaded = store.load('user1');
+            expect(store.isExpired(loaded, 60_000)).toBe(false);
+        });
+    });
+    // ════════════════════════════════════════════════════════════
+    // Multi-user Isolation
+    // ════════════════════════════════════════════════════════════
+    describe('Multi-user Isolation', () => {
+        it('should isolate tokens per user', () => {
+            store.save('userA', 'accessA', 'refreshA', 3600, ['scope1']);
+            store.save('userB', 'accessB', 'refreshB', 3600, ['scope2']);
+            const tokensA = store.load('userA');
+            const tokensB = store.load('userB');
+            expect(tokensA.accessToken).toBe('accessA');
+            expect(tokensB.accessToken).toBe('accessB');
+        });
+        it('should not leak tokens between users on revoke', () => {
+            store.save('userA', 'accessA', 'refreshA', 3600, ['scope1']);
+            store.save('userB', 'accessB', 'refreshB', 3600, ['scope2']);
+            store.revoke('userA');
+            expect(store.load('userA')).toBeNull();
+            expect(store.load('userB')).not.toBeNull();
+        });
+    });
+});
+//# sourceMappingURL=TokenStore.test.js.map

package/dist/pc/google/TokenStore.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenStore.test.js","sourceRoot":"","sources":["../../../src/pc/google/TokenStore.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAG7C,MAAM,MAAM,GAAiB,GAAG,EAAE,GAAE,CAAC,CAAC;AAEtC,SAAS,aAAa;IACpB,OAAO,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,IAAI,MAAc,CAAC;IACnB,IAAI,KAAiB,CAAC;IAEtB,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,GAAG,aAAa,EAAE,CAAC;QACzB,0BAA0B;QAC1B,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,MAAM,CAAC,IAAI,CAC9C,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CACf,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrB,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QAC1C,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,aAAa;IACb,+DAA+D;IAE/D,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACnC,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;YACrD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;YACnE,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC9B,MAAM,CAAC,MAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC/C,MAAM,CAAC,MAAO,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;YAC7D,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7E,mBAAmB;YACnB,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;YAChE,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACzC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,eAAe;IACf,+DAA+D;IAE/D,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;QACrC,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;YACtC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC9B,MAAM,CAAC,MAAO,CAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAC;YACtC,MAAM,CAAC,MAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAE,CAAC;YACpC,KAAK,CAAC,WAAW,CACf,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,EAC3C,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,CACxC,CAAC;YACF,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpC,MAAM,CAAC,OAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpC,MAAM,CAAC,OAAQ,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAE,CAAC;YAEpC,2BAA2B;YAC3B,KAAK,CAAC,WAAW,CACf,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,EAC3B,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,CACxC,CAAC;YAEF,kDAAkD;YAClD,MAAM,CAAC,GAAG,EAAE;gBACV,KAAK,CAAC,WAAW,CACf,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,EAC3B,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,CACxC,CAAC;YACJ,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;YAE9B,6CAA6C;YAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,SAAS;IACT,+DAA+D;IAE/D,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;YAC3C,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC3D,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC3C,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,SAAS;IACT,+DAA+D;IAE/D,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;QAC5B,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;YACtC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW;YACpE,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAE,CAAC;YACpC,+DAA+D;YAC/D,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU;YACtE,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAE,CAAC;YACpC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,uBAAuB;IACvB,+DAA+D;IAE/D,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACpC,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7D,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;YAE7D,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAE,CAAC;YACrC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAE,CAAC;YAErC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC5C,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7D,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;YAE7D,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;YACvC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/pc/google/services/CalendarService.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Per-User CalendarService — userId 기반 Google Calendar API 래퍼
+ *
+ * 일정 CRUD + 자연어 날짜 파싱 + 재시도.
+ */
+import type { GoogleLogger, GoogleServiceConfig } from '../types.js';
+import { OAuthFlow } from '../OAuthFlow.js';
+export interface CalendarEvent {
+    id: string;
+    summary: string;
+    description?: string;
+    location?: string;
+    start: string;
+    end: string;
+    htmlLink?: string;
+}
+export interface CreateEventInput {
+    summary: string;
+    start: string;
+    end: string;
+    description?: string;
+    location?: string;
+    timeZone?: string;
+}
+export interface UpdateEventInput {
+    summary?: string;
+    start?: string;
+    end?: string;
+    description?: string;
+    location?: string;
+}
+export declare class PerUserCalendarService {
+    private oauthFlow;
+    private logger;
+    private config;
+    constructor(oauthFlow: OAuthFlow, logger: GoogleLogger, config?: GoogleServiceConfig);
+    /** 일정 조회 */
+    listEvents(userId: string, timeMin: string, timeMax: string, maxResults?: number): Promise<CalendarEvent[]>;
+    /** 일정 생성 */
+    createEvent(userId: string, input: CreateEventInput): Promise<CalendarEvent>;
+    /** 일정 수정 */
+    updateEvent(userId: string, eventId: string, updates: UpdateEventInput): Promise<CalendarEvent>;
+    private fetchWithRetry;
+}
+//# sourceMappingURL=CalendarService.d.ts.map

package/dist/pc/google/services/CalendarService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CalendarService.d.ts","sourceRoot":"","sources":["../../../../src/pc/google/services/CalendarService.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAErE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAM5C,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,sBAAsB;IACjC,OAAO,CAAC,SAAS,CAAY;IAC7B,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,MAAM,CAAgC;gBAElC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,mBAAmB;IAUpF,YAAY;IACN,UAAU,CACd,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,UAAU,GAAE,MAAW,GACtB,OAAO,CAAC,aAAa,EAAE,CAAC;IAoB3B,YAAY;IACN,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,aAAa,CAAC;IA0BlF,YAAY;IACN,WAAW,CACf,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,aAAa,CAAC;YA6BX,cAAc;CAmC7B"}