@superlayer/cli 1.0.67

package/dist/lib/oauth.d.ts

@@ -0,0 +1,306 @@
+import { Effect, Schema } from 'effect';
+import { CurrentApp } from '../context/currentApp.ts';
+import { InstantHttpAuthed } from './http.ts';
+import { BadArgsError } from '../errors.ts';
+export declare const AuthorizedOriginService: Schema.Literal<["generic", "vercel", "netlify", "custom-scheme"]>;
+export declare const AuthorizedOrigin: Schema.Struct<{
+    id: typeof Schema.String;
+    service: Schema.Literal<["generic", "vercel", "netlify", "custom-scheme"]>;
+    params: Schema.mutable<Schema.Array$<typeof Schema.String>>;
+}>;
+export declare const OAuthServiceProvider: Schema.Struct<{
+    id: typeof Schema.String;
+    provider_name: typeof Schema.String;
+}>;
+export declare const GoogleAppTypeSchema: Schema.Literal<["web", "ios", "android", "button-for-web"]>;
+export declare const OAuthClient: Schema.Struct<{
+    id: typeof Schema.String;
+    client_name: typeof Schema.String;
+    client_id: Schema.optional<Schema.Union<[typeof Schema.String, typeof Schema.Null]>>;
+    provider_id: typeof Schema.String;
+    authorization_endpoint: Schema.optional<Schema.Union<[typeof Schema.String, typeof Schema.Null]>>;
+    token_endpoint: Schema.optional<Schema.Union<[typeof Schema.String, typeof Schema.Null]>>;
+    discovery_endpoint: Schema.optional<Schema.Union<[typeof Schema.String, typeof Schema.Null]>>;
+    redirect_to: Schema.optional<Schema.Union<[typeof Schema.String, typeof Schema.Null]>>;
+    meta: Schema.optional<Schema.Union<[Schema.extend<Schema.Struct<{
+        appType: Schema.optional<Schema.Literal<["web", "ios", "android", "button-for-web"]>>;
+    }>, Schema.Record$<typeof Schema.String, typeof Schema.Any>>, typeof Schema.Null]>>;
+    use_shared_credentials: Schema.optional<Schema.Union<[typeof Schema.Boolean, typeof Schema.Null]>>;
+}>;
+export declare const AddOAuthProviderResponse: Schema.Struct<{
+    provider: Schema.Struct<{
+        id: typeof Schema.String;
+        provider_name: typeof Schema.String;
+    }>;
+}>;
+export declare const AddOAuthClientResponse: Schema.Struct<{
+    client: Schema.Struct<{
+        id: typeof Schema.String;
+        client_name: typeof Schema.String;
+        client_id: Schema.optional<Schema.Union<[typeof Schema.String, typeof Schema.Null]>>;
+        provider_id: typeof Schema.String;
+        authorization_endpoint: Schema.optional<Schema.Union<[typeof Schema.String, typeof Schema.Null]>>;
+        token_endpoint: Schema.optional<Schema.Union<[typeof Schema.String, typeof Schema.Null]>>;
+        discovery_endpoint: Schema.optional<Schema.Union<[typeof Schema.String, typeof Schema.Null]>>;
+        redirect_to: Schema.optional<Schema.Union<[typeof Schema.String, typeof Schema.Null]>>;
+        meta: Schema.optional<Schema.Union<[Schema.extend<Schema.Struct<{
+            appType: Schema.optional<Schema.Literal<["web", "ios", "android", "button-for-web"]>>;
+        }>, Schema.Record$<typeof Schema.String, typeof Schema.Any>>, typeof Schema.Null]>>;
+        use_shared_credentials: Schema.optional<Schema.Union<[typeof Schema.Boolean, typeof Schema.Null]>>;
+    }>;
+}>;
+export declare const AuthorizedOriginResponse: Schema.Struct<{
+    origin: Schema.Struct<{
+        id: typeof Schema.String;
+        service: Schema.Literal<["generic", "vercel", "netlify", "custom-scheme"]>;
+        params: Schema.mutable<Schema.Array$<typeof Schema.String>>;
+    }>;
+}>;
+export declare const AppsAuthResponse: Schema.Struct<{
+    authorized_redirect_origins: Schema.optional<Schema.Union<[Schema.mutable<Schema.Array$<Schema.Schema<{
+        readonly id: string;
+        readonly service: "generic" | "vercel" | "netlify" | "custom-scheme";
+        readonly params: string[];
+    }, {
+        readonly id: string;
+        readonly service: "generic" | "vercel" | "netlify" | "custom-scheme";
+        readonly params: string[];
+    }, never>>>, typeof Schema.Null]>>;
+    oauth_service_providers: Schema.optional<Schema.Union<[Schema.mutable<Schema.Array$<Schema.Schema<{
+        readonly id: string;
+        readonly provider_name: string;
+    }, {
+        readonly id: string;
+        readonly provider_name: string;
+    }, never>>>, typeof Schema.Null]>>;
+    oauth_clients: Schema.optional<Schema.Union<[Schema.mutable<Schema.Array$<Schema.Schema<{
+        readonly id: string;
+        readonly client_name: string;
+        readonly client_id?: string | null | undefined;
+        readonly provider_id: string;
+        readonly authorization_endpoint?: string | null | undefined;
+        readonly token_endpoint?: string | null | undefined;
+        readonly discovery_endpoint?: string | null | undefined;
+        readonly redirect_to?: string | null | undefined;
+        readonly meta?: ({
+            readonly appType?: "android" | "web" | "ios" | "button-for-web" | undefined;
+        } & {
+            readonly [x: string]: any;
+        }) | null | undefined;
+        readonly use_shared_credentials?: boolean | null | undefined;
+    }, {
+        readonly id: string;
+        readonly client_name: string;
+        readonly provider_id: string;
+        readonly client_id?: string | null | undefined;
+        readonly authorization_endpoint?: string | null | undefined;
+        readonly token_endpoint?: string | null | undefined;
+        readonly discovery_endpoint?: string | null | undefined;
+        readonly redirect_to?: string | null | undefined;
+        readonly meta?: ({
+            readonly appType?: "android" | "web" | "ios" | "button-for-web" | undefined;
+        } & {
+            readonly [x: string]: any;
+        }) | null | undefined;
+        readonly use_shared_credentials?: boolean | null | undefined;
+    }, never>>>, typeof Schema.Null]>>;
+}>;
+export declare const getAppsAuth: () => Effect.Effect<{
+    readonly authorized_redirect_origins?: {
+        readonly id: string;
+        readonly service: "generic" | "vercel" | "netlify" | "custom-scheme";
+        readonly params: string[];
+    }[] | null | undefined;
+    readonly oauth_service_providers?: {
+        readonly id: string;
+        readonly provider_name: string;
+    }[] | null | undefined;
+    readonly oauth_clients?: {
+        readonly id: string;
+        readonly client_name: string;
+        readonly client_id?: string | null | undefined;
+        readonly provider_id: string;
+        readonly authorization_endpoint?: string | null | undefined;
+        readonly token_endpoint?: string | null | undefined;
+        readonly discovery_endpoint?: string | null | undefined;
+        readonly redirect_to?: string | null | undefined;
+        readonly meta?: ({
+            readonly appType?: "android" | "web" | "ios" | "button-for-web" | undefined;
+        } & {
+            readonly [x: string]: any;
+        }) | null | undefined;
+        readonly use_shared_credentials?: boolean | null | undefined;
+    }[] | null | undefined;
+}, import("effect/ParseResult").ParseError | import("./http.ts").InstantHttpError | import("effect/Cause").TimeoutException | import("@effect/platform/HttpClientError").RequestError | import("@effect/platform/HttpClientError").ResponseError, InstantHttpAuthed | CurrentApp>;
+export declare const addOAuthProvider: (params: {
+    appId?: string;
+    providerName: string;
+}) => Effect.Effect<{
+    readonly provider: {
+        readonly id: string;
+        readonly provider_name: string;
+    };
+}, import("effect/ParseResult").ParseError | import("./http.ts").InstantHttpError | import("effect/Cause").TimeoutException | import("@effect/platform/HttpClientError").RequestError | import("@effect/platform/HttpClientError").ResponseError, InstantHttpAuthed | CurrentApp>;
+export declare const addOAuthClient: (params: {
+    appId?: string;
+    providerId: string;
+    clientName: string;
+    clientId?: string;
+    clientSecret?: string;
+    authorizationEndpoint?: string;
+    tokenEndpoint?: string;
+    discoveryEndpoint?: string;
+    redirectTo?: string;
+    meta?: unknown;
+    useSharedCredentials?: boolean;
+}) => Effect.Effect<{
+    readonly client: {
+        readonly id: string;
+        readonly client_name: string;
+        readonly client_id?: string | null | undefined;
+        readonly provider_id: string;
+        readonly authorization_endpoint?: string | null | undefined;
+        readonly token_endpoint?: string | null | undefined;
+        readonly discovery_endpoint?: string | null | undefined;
+        readonly redirect_to?: string | null | undefined;
+        readonly meta?: ({
+            readonly appType?: "android" | "web" | "ios" | "button-for-web" | undefined;
+        } & {
+            readonly [x: string]: any;
+        }) | null | undefined;
+        readonly use_shared_credentials?: boolean | null | undefined;
+    };
+}, import("effect/ParseResult").ParseError | import("./http.ts").InstantHttpError | import("effect/Cause").TimeoutException | import("@effect/platform/HttpClientError").RequestError | import("@effect/platform/HttpClientError").ResponseError, InstantHttpAuthed | CurrentApp>;
+export declare const updateOAuthClient: (params: {
+    oauthClientId: string;
+    clientId?: string | null;
+    clientSecret?: string | null;
+    discoveryEndpoint?: string | null;
+    redirectTo?: string | null;
+    meta?: unknown;
+    useSharedCredentials?: boolean | null;
+}) => Effect.Effect<{
+    readonly client: {
+        readonly id: string;
+        readonly client_name: string;
+        readonly client_id?: string | null | undefined;
+        readonly provider_id: string;
+        readonly authorization_endpoint?: string | null | undefined;
+        readonly token_endpoint?: string | null | undefined;
+        readonly discovery_endpoint?: string | null | undefined;
+        readonly redirect_to?: string | null | undefined;
+        readonly meta?: ({
+            readonly appType?: "android" | "web" | "ios" | "button-for-web" | undefined;
+        } & {
+            readonly [x: string]: any;
+        }) | null | undefined;
+        readonly use_shared_credentials?: boolean | null | undefined;
+    };
+}, import("effect/ParseResult").ParseError | import("./http.ts").InstantHttpError | import("effect/Cause").TimeoutException | import("@effect/platform/HttpClientError").RequestError | import("@effect/platform/HttpClientError").ResponseError, InstantHttpAuthed | CurrentApp>;
+export declare const getOrCreateProvider: (type: "google" | "github" | "apple" | "linkedin" | "clerk" | "firebase") => Effect.Effect<{
+    auth: {
+        readonly authorized_redirect_origins?: {
+            readonly id: string;
+            readonly service: "generic" | "vercel" | "netlify" | "custom-scheme";
+            readonly params: string[];
+        }[] | null | undefined;
+        readonly oauth_service_providers?: {
+            readonly id: string;
+            readonly provider_name: string;
+        }[] | null | undefined;
+        readonly oauth_clients?: {
+            readonly id: string;
+            readonly client_name: string;
+            readonly client_id?: string | null | undefined;
+            readonly provider_id: string;
+            readonly authorization_endpoint?: string | null | undefined;
+            readonly token_endpoint?: string | null | undefined;
+            readonly discovery_endpoint?: string | null | undefined;
+            readonly redirect_to?: string | null | undefined;
+            readonly meta?: ({
+                readonly appType?: "android" | "web" | "ios" | "button-for-web" | undefined;
+            } & {
+                readonly [x: string]: any;
+            }) | null | undefined;
+            readonly use_shared_credentials?: boolean | null | undefined;
+        }[] | null | undefined;
+    };
+    provider: {
+        readonly id: string;
+        readonly provider_name: string;
+    };
+}, import("effect/ParseResult").ParseError | import("./http.ts").InstantHttpError | import("effect/Cause").TimeoutException | import("@effect/platform/HttpClientError").RequestError | import("@effect/platform/HttpClientError").ResponseError, InstantHttpAuthed | CurrentApp>;
+export declare const findName: (prefix: string, used: Set<string>) => string;
+export declare const getClientNameAndProvider: (providerType: "google" | "github" | "apple" | "linkedin" | "clerk" | "firebase", opts: Record<string, unknown>) => Effect.Effect<{
+    provider: {
+        readonly id: string;
+        readonly provider_name: string;
+    };
+    clientName: string;
+}, BadArgsError | import("effect/ParseResult").ParseError | import("./http.ts").InstantHttpError | import("effect/Cause").TimeoutException | import("@effect/platform/HttpClientError").RequestError | import("@effect/platform/HttpClientError").ResponseError, import("../context/globalOpts.ts").GlobalOpts | InstantHttpAuthed | CurrentApp>;
+export declare const findClientByIdOrName: (params: {
+    id?: string;
+    name?: string;
+}) => Effect.Effect<{
+    auth: {
+        readonly authorized_redirect_origins?: {
+            readonly id: string;
+            readonly service: "generic" | "vercel" | "netlify" | "custom-scheme";
+            readonly params: string[];
+        }[] | null | undefined;
+        readonly oauth_service_providers?: {
+            readonly id: string;
+            readonly provider_name: string;
+        }[] | null | undefined;
+        readonly oauth_clients?: {
+            readonly id: string;
+            readonly client_name: string;
+            readonly client_id?: string | null | undefined;
+            readonly provider_id: string;
+            readonly authorization_endpoint?: string | null | undefined;
+            readonly token_endpoint?: string | null | undefined;
+            readonly discovery_endpoint?: string | null | undefined;
+            readonly redirect_to?: string | null | undefined;
+            readonly meta?: ({
+                readonly appType?: "android" | "web" | "ios" | "button-for-web" | undefined;
+            } & {
+                readonly [x: string]: any;
+            }) | null | undefined;
+            readonly use_shared_credentials?: boolean | null | undefined;
+        }[] | null | undefined;
+    };
+    client: {
+        readonly id: string;
+        readonly client_name: string;
+        readonly client_id?: string | null | undefined;
+        readonly provider_id: string;
+        readonly authorization_endpoint?: string | null | undefined;
+        readonly token_endpoint?: string | null | undefined;
+        readonly discovery_endpoint?: string | null | undefined;
+        readonly redirect_to?: string | null | undefined;
+        readonly meta?: ({
+            readonly appType?: "android" | "web" | "ios" | "button-for-web" | undefined;
+        } & {
+            readonly [x: string]: any;
+        }) | null | undefined;
+        readonly use_shared_credentials?: boolean | null | undefined;
+    };
+}, BadArgsError | import("effect/ParseResult").ParseError | import("./http.ts").InstantHttpError | import("effect/Cause").TimeoutException | import("@effect/platform/HttpClientError").RequestError | import("@effect/platform/HttpClientError").ResponseError, InstantHttpAuthed | CurrentApp>;
+export declare const removeAuthorizedOrigin: (originId: string) => Effect.Effect<{
+    readonly origin: {
+        readonly id: string;
+        readonly service: "generic" | "vercel" | "netlify" | "custom-scheme";
+        readonly params: string[];
+    };
+}, import("effect/ParseResult").ParseError | import("./http.ts").InstantHttpError | import("effect/Cause").TimeoutException | import("@effect/platform/HttpClientError").RequestError | import("@effect/platform/HttpClientError").ResponseError, InstantHttpAuthed | CurrentApp>;
+export declare const addAuthorizedOrigin: (params: {
+    service: Schema.Schema.Type<typeof AuthorizedOriginService>;
+    params: string[];
+}) => Effect.Effect<{
+    readonly origin: {
+        readonly id: string;
+        readonly service: "generic" | "vercel" | "netlify" | "custom-scheme";
+        readonly params: string[];
+    };
+}, import("effect/ParseResult").ParseError | import("./http.ts").InstantHttpError | import("effect/Cause").TimeoutException | import("@effect/platform/HttpClientError").RequestError | import("@effect/platform/HttpClientError").ResponseError, InstantHttpAuthed | CurrentApp>;
+//# sourceMappingURL=oauth.d.ts.map

package/dist/lib/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/lib/oauth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAe,MAAM,WAAW,CAAC;AAG3D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAI5C,eAAO,MAAM,uBAAuB,mEAKnC,CAAC;AAEF,eAAO,MAAM,gBAAgB;;;;EAI3B,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;EAG/B,CAAC;AAEH,eAAO,MAAM,mBAAmB,6DAK/B,CAAC;AAmBF,eAAO,MAAM,WAAW;;;;;;;;;;;;;EAWtB,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;EAEnC,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;EAEjC,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;;EAEnC,CAAC;AAOH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAI3B,CAAC;AAEH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;iRAOtB,CAAC;AAEH,eAAO,MAAM,gBAAgB;YACnB,MAAM;kBACA,MAAM;;;;;;iRAgBpB,CAAC;AAEH,eAAO,MAAM,cAAc;YACjB,MAAM;gBACF,MAAM;gBACN,MAAM;eACP,MAAM;mBACF,MAAM;4BACG,MAAM;oBACd,MAAM;wBACF,MAAM;iBACb,MAAM;WACZ,OAAO;2BACS,OAAO;;;;;;;;;;;;;;;;;;iRAuB9B,CAAC;AAEH,eAAO,MAAM,iBAAiB;mBACb,MAAM;eACV,MAAM,GAAG,IAAI;mBACT,MAAM,GAAG,IAAI;wBACR,MAAM,GAAG,IAAI;iBACpB,MAAM,GAAG,IAAI;WACnB,OAAO;2BACS,OAAO,GAAG,IAAI;;;;;;;;;;;;;;;;;;iRAmBrC,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iRAc9B,CAAC;AAIH,eAAO,MAAM,QAAQ,GAAI,QAAQ,MAAM,EAAE,MAAM,GAAG,CAAC,MAAM,CAAC,WAWzD,CAAC;AAEF,eAAO,MAAM,wBAAwB;;;;;;gVA8BnC,CAAC;AAEH,eAAO,MAAM,oBAAoB;SAC1B,MAAM;WACJ,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gSA2Bb,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;iRAajC,CAAC;AAEH,eAAO,MAAM,mBAAmB;aACrB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,uBAAuB,CAAC;YACnD,MAAM,EAAE;;;;;;;iRAiBhB,CAAC"}

package/dist/lib/oauth.js

@@ -0,0 +1,195 @@
+import { HttpBody, HttpClientResponse } from '@effect/platform';
+import { Effect, Schema } from 'effect';
+import { CurrentApp } from "../context/currentApp.js";
+import { InstantHttpAuthed, withCommand } from "./http.js";
+import { validateRequired } from "./ui.js";
+import { UI } from "../ui/index.js";
+import { BadArgsError } from "../errors.js";
+import { Args } from "./args.js";
+export const AuthorizedOriginService = Schema.Literal('generic', 'vercel', 'netlify', 'custom-scheme');
+export const AuthorizedOrigin = Schema.Struct({
+    id: Schema.String,
+    service: AuthorizedOriginService,
+    params: Schema.Array(Schema.String).pipe(Schema.mutable),
+});
+export const OAuthServiceProvider = Schema.Struct({
+    id: Schema.String,
+    provider_name: Schema.String,
+});
+export const GoogleAppTypeSchema = Schema.Literal('web', 'ios', 'android', 'button-for-web');
+const NullableString = Schema.Union(Schema.String, Schema.Null).pipe(Schema.optional);
+const NullableBoolean = Schema.Union(Schema.Boolean, Schema.Null).pipe(Schema.optional);
+const OAuthClientMeta = Schema.Struct({
+    // Currently the CLI only reads Google app type from meta. Other providers store
+    // different meta shapes, so keep the rest open until we have a clean
+    // top-level discriminator for a full provider-specific union.
+    appType: GoogleAppTypeSchema.pipe(Schema.optional),
+}).pipe(Schema.extend(Schema.Record({ key: Schema.String, value: Schema.Any })));
+export const OAuthClient = Schema.Struct({
+    id: Schema.String,
+    client_name: Schema.String,
+    client_id: NullableString,
+    provider_id: Schema.String,
+    authorization_endpoint: NullableString,
+    token_endpoint: NullableString,
+    discovery_endpoint: NullableString,
+    redirect_to: NullableString,
+    meta: Schema.Union(OAuthClientMeta, Schema.Null).pipe(Schema.optional),
+    use_shared_credentials: NullableBoolean,
+});
+export const AddOAuthProviderResponse = Schema.Struct({
+    provider: OAuthServiceProvider,
+});
+export const AddOAuthClientResponse = Schema.Struct({
+    client: OAuthClient,
+});
+export const AuthorizedOriginResponse = Schema.Struct({
+    origin: AuthorizedOrigin,
+});
+const NullableArray = (schema) => Schema.Union(Schema.Array(schema).pipe(Schema.mutable), Schema.Null).pipe(Schema.optional);
+export const AppsAuthResponse = Schema.Struct({
+    authorized_redirect_origins: NullableArray(AuthorizedOrigin),
+    oauth_service_providers: NullableArray(OAuthServiceProvider),
+    oauth_clients: NullableArray(OAuthClient),
+});
+export const getAppsAuth = Effect.fn(function* () {
+    const http = (yield* InstantHttpAuthed).pipe(withCommand('auth'));
+    const targetAppId = (yield* CurrentApp).appId;
+    return yield* http
+        .get(`/dash/apps/${targetAppId}/auth`)
+        .pipe(Effect.flatMap(HttpClientResponse.schemaBodyJson(AppsAuthResponse)));
+});
+export const addOAuthProvider = Effect.fn(function* (params) {
+    const http = (yield* InstantHttpAuthed).pipe(withCommand('auth'));
+    const targetAppId = params.appId ?? (yield* CurrentApp).appId;
+    return yield* http
+        .post(`/dash/apps/${targetAppId}/oauth_service_providers`, {
+        body: HttpBody.unsafeJson({
+            provider_name: params.providerName,
+        }),
+    })
+        .pipe(Effect.flatMap(HttpClientResponse.schemaBodyJson(AddOAuthProviderResponse)));
+});
+export const addOAuthClient = Effect.fn(function* (params) {
+    const http = (yield* InstantHttpAuthed).pipe(withCommand('auth'));
+    const targetAppId = params.appId ?? (yield* CurrentApp).appId;
+    return yield* http
+        .post(`/dash/apps/${targetAppId}/oauth_clients`, {
+        body: HttpBody.unsafeJson({
+            provider_id: params.providerId,
+            client_name: params.clientName,
+            client_id: params.clientId,
+            client_secret: params.clientSecret,
+            authorization_endpoint: params.authorizationEndpoint,
+            token_endpoint: params.tokenEndpoint,
+            discovery_endpoint: params.discoveryEndpoint,
+            redirect_to: params.redirectTo,
+            meta: params.meta,
+            use_shared_credentials: params.useSharedCredentials,
+        }),
+    })
+        .pipe(Effect.flatMap(HttpClientResponse.schemaBodyJson(AddOAuthClientResponse)));
+});
+export const updateOAuthClient = Effect.fn(function* (params) {
+    const http = (yield* InstantHttpAuthed).pipe(withCommand('auth'));
+    const targetAppId = (yield* CurrentApp).appId;
+    return yield* http
+        .post(`/dash/apps/${targetAppId}/oauth_clients/${params.oauthClientId}`, {
+        body: HttpBody.unsafeJson({
+            client_id: params.clientId,
+            client_secret: params.clientSecret,
+            discovery_endpoint: params.discoveryEndpoint,
+            redirect_to: params.redirectTo,
+            meta: params.meta,
+            use_shared_credentials: params.useSharedCredentials,
+        }),
+    })
+        .pipe(Effect.flatMap(HttpClientResponse.schemaBodyJson(AddOAuthClientResponse)));
+});
+export const getOrCreateProvider = Effect.fn(function* (type) {
+    const auth = yield* getAppsAuth();
+    const provider = auth.oauth_service_providers?.find((entry) => entry.provider_name === type);
+    if (provider) {
+        return { auth, provider };
+    }
+    const created = yield* addOAuthProvider({ providerName: type });
+    return { auth, provider: created.provider };
+});
+// Returns prefix if unused; otherwise appends integers starting at 2.
+// e.g. findName('google', new Set(['google', 'google2'])) returns 'google3'.
+export const findName = (prefix, used) => {
+    if (!used.has(prefix)) {
+        return prefix;
+    }
+    for (let i = 2;; i++) {
+        const candidate = `${prefix}${i}`;
+        if (!used.has(candidate)) {
+            return candidate;
+        }
+    }
+};
+export const getClientNameAndProvider = Effect.fn(function* (providerType, opts) {
+    const { auth, provider } = yield* getOrCreateProvider(providerType);
+    const usedClientNames = new Set((auth.oauth_clients ?? []).map((client) => client.client_name));
+    const suggestedClientName = findName(providerType, usedClientNames);
+    const clientName = yield* Args.text(opts, 'name').pipe(Args.prompt({
+        prompt: 'Client Name:',
+        defaultValue: suggestedClientName,
+        placeholder: suggestedClientName,
+        validate: validateRequired,
+        modifyOutput: UI.modifiers.piped([
+            UI.modifiers.topPadding,
+            UI.modifiers.dimOnComplete,
+        ]),
+    }), Args.required());
+    if (usedClientNames.has(clientName)) {
+        return yield* BadArgsError.make({
+            message: `The unique name '${clientName}' is already in use.`,
+        });
+    }
+    return { provider, clientName };
+});
+export const findClientByIdOrName = Effect.fn(function* (params) {
+    if (params.id && params.name) {
+        return yield* BadArgsError.make({
+            message: 'Cannot specify both --id and --name',
+        });
+    }
+    if (!params.id && !params.name) {
+        return yield* BadArgsError.make({
+            message: 'Must specify --id or --name',
+        });
+    }
+    const auth = yield* getAppsAuth();
+    const clients = auth.oauth_clients ?? [];
+    const client = params.id
+        ? clients.find((entry) => entry.id === params.id)
+        : clients.find((entry) => entry.client_name === params.name);
+    if (!client) {
+        const lookup = params.id ? `id ${params.id}` : `name ${params.name}`;
+        return yield* BadArgsError.make({
+            message: `OAuth client not found: ${lookup}`,
+        });
+    }
+    return { auth, client };
+});
+export const removeAuthorizedOrigin = Effect.fn(function* (originId) {
+    const http = (yield* InstantHttpAuthed).pipe(withCommand('auth origin delete'));
+    const { appId } = yield* CurrentApp;
+    return yield* http
+        .del(`/dash/apps/${appId}/authorized_redirect_origins/${originId}`)
+        .pipe(Effect.flatMap(HttpClientResponse.schemaBodyJson(AuthorizedOriginResponse)));
+});
+export const addAuthorizedOrigin = Effect.fn(function* (params) {
+    const http = (yield* InstantHttpAuthed).pipe(withCommand('auth origin add'));
+    const { appId } = yield* CurrentApp;
+    return yield* http
+        .post(`/dash/apps/${appId}/authorized_redirect_origins`, {
+        body: HttpBody.unsafeJson({
+            service: params.service,
+            params: params.params,
+        }),
+    })
+        .pipe(Effect.flatMap(HttpClientResponse.schemaBodyJson(AuthorizedOriginResponse)));
+});
+//# sourceMappingURL=oauth.js.map

package/dist/lib/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../src/lib/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC,OAAO,CACnD,SAAS,EACT,QAAQ,EACR,SAAS,EACT,eAAe,CAChB,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5C,EAAE,EAAE,MAAM,CAAC,MAAM;IACjB,OAAO,EAAE,uBAAuB;IAChC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;CACzD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;IAChD,EAAE,EAAE,MAAM,CAAC,MAAM;IACjB,aAAa,EAAE,MAAM,CAAC,MAAM;CAC7B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,OAAO,CAC/C,KAAK,EACL,KAAK,EACL,SAAS,EACT,gBAAgB,CACjB,CAAC;AAEF,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAClE,MAAM,CAAC,QAAQ,CAChB,CAAC;AAEF,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CACpE,MAAM,CAAC,QAAQ,CAChB,CAAC;AAEF,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;IACpC,gFAAgF;IAChF,qEAAqE;IACrE,8DAA8D;IAC9D,OAAO,EAAE,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;CACnD,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CACxE,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,MAAM,CAAC,MAAM;IACjB,WAAW,EAAE,MAAM,CAAC,MAAM;IAC1B,SAAS,EAAE,cAAc;IACzB,WAAW,EAAE,MAAM,CAAC,MAAM;IAC1B,sBAAsB,EAAE,cAAc;IACtC,cAAc,EAAE,cAAc;IAC9B,kBAAkB,EAAE,cAAc;IAClC,WAAW,EAAE,cAAc;IAC3B,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;IACtE,sBAAsB,EAAE,eAAe;CACxC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,MAAM,CAAC;IACpD,QAAQ,EAAE,oBAAoB;CAC/B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC;IAClD,MAAM,EAAE,WAAW;CACpB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,MAAM,CAAC;IACpD,MAAM,EAAE,gBAAgB;CACzB,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,CAAU,MAA8B,EAAE,EAAE,CAChE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CACvE,MAAM,CAAC,QAAQ,CAChB,CAAC;AAEJ,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5C,2BAA2B,EAAE,aAAa,CAAC,gBAAgB,CAAC;IAC5D,uBAAuB,EAAE,aAAa,CAAC,oBAAoB,CAAC;IAC5D,aAAa,EAAE,aAAa,CAAC,WAAW,CAAC;CAC1C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;IAC5C,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC;IAE9C,OAAO,KAAK,CAAC,CAAC,IAAI;SACf,GAAG,CAAC,cAAc,WAAW,OAAO,CAAC;SACrC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,MAGpD;IACC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC;IAE9D,OAAO,KAAK,CAAC,CAAC,IAAI;SACf,IAAI,CAAC,cAAc,WAAW,0BAA0B,EAAE;QACzD,IAAI,EAAE,QAAQ,CAAC,UAAU,CAAC;YACxB,aAAa,EAAE,MAAM,CAAC,YAAY;SACnC,CAAC;KACH,CAAC;SACD,IAAI,CACH,MAAM,CAAC,OAAO,CACZ,kBAAkB,CAAC,cAAc,CAAC,wBAAwB,CAAC,CAC5D,CACF,CAAC;AACN,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,MAYlD;IACC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC;IAE9D,OAAO,KAAK,CAAC,CAAC,IAAI;SACf,IAAI,CAAC,cAAc,WAAW,gBAAgB,EAAE;QAC/C,IAAI,EAAE,QAAQ,CAAC,UAAU,CAAC;YACxB,WAAW,EAAE,MAAM,CAAC,UAAU;YAC9B,WAAW,EAAE,MAAM,CAAC,UAAU;YAC9B,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,sBAAsB,EAAE,MAAM,CAAC,qBAAqB;YACpD,cAAc,EAAE,MAAM,CAAC,aAAa;YACpC,kBAAkB,EAAE,MAAM,CAAC,iBAAiB;YAC5C,WAAW,EAAE,MAAM,CAAC,UAAU;YAC9B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,sBAAsB,EAAE,MAAM,CAAC,oBAAoB;SACpD,CAAC;KACH,CAAC;SACD,IAAI,CACH,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAC,CAC1E,CAAC;AACN,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,MAQrD;IACC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC;IAE9C,OAAO,KAAK,CAAC,CAAC,IAAI;SACf,IAAI,CAAC,cAAc,WAAW,kBAAkB,MAAM,CAAC,aAAa,EAAE,EAAE;QACvE,IAAI,EAAE,QAAQ,CAAC,UAAU,CAAC;YACxB,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,kBAAkB,EAAE,MAAM,CAAC,iBAAiB;YAC5C,WAAW,EAAE,MAAM,CAAC,UAAU;YAC9B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,sBAAsB,EAAE,MAAM,CAAC,oBAAoB;SACpD,CAAC;KACH,CAAC;SACD,IAAI,CACH,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAC,CAC1E,CAAC;AACN,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACpD,IAAkC;IAElC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,uBAAuB,EAAE,IAAI,CACjD,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,KAAK,IAAI,CACxC,CAAC;IAEF,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;AAC9C,CAAC,CAAC,CAAC;AAEH,sEAAsE;AACtE,6EAA6E;AAC7E,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,IAAiB,EAAE,EAAE;IAC5D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,GAAI,CAAC,EAAE,EAAE,CAAC;QACtB,MAAM,SAAS,GAAG,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACzD,YAA0C,EAC1C,IAA6B;IAE7B,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;IACpE,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAC/D,CAAC;IACF,MAAM,mBAAmB,GAAG,QAAQ,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IAEpE,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,CACpD,IAAI,CAAC,MAAM,CAAC;QACV,MAAM,EAAE,cAAc;QACtB,YAAY,EAAE,mBAAmB;QACjC,WAAW,EAAE,mBAAmB;QAChC,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC;YAC/B,EAAE,CAAC,SAAS,CAAC,UAAU;YACvB,EAAE,CAAC,SAAS,CAAC,aAAa;SAC3B,CAAC;KACH,CAAC,EACF,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IAEF,IAAI,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;YAC9B,OAAO,EAAE,oBAAoB,UAAU,sBAAsB;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAClC,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,MAGxD;IACC,IAAI,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;YAC9B,OAAO,EAAE,qCAAqC;SAC/C,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;YAC9B,OAAO,EAAE,6BAA6B;SACvC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE;QACtB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC;QACjD,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC;IAE/D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACrE,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;YAC9B,OAAO,EAAE,2BAA2B,MAAM,EAAE;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAgB;IACzE,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAC1C,WAAW,CAAC,oBAAoB,CAAC,CAClC,CAAC;IACF,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IAEpC,OAAO,KAAK,CAAC,CAAC,IAAI;SACf,GAAG,CAAC,cAAc,KAAK,gCAAgC,QAAQ,EAAE,CAAC;SAClE,IAAI,CACH,MAAM,CAAC,OAAO,CACZ,kBAAkB,CAAC,cAAc,CAAC,wBAAwB,CAAC,CAC5D,CACF,CAAC;AACN,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,MAGvD;IACC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC7E,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IAEpC,OAAO,KAAK,CAAC,CAAC,IAAI;SACf,IAAI,CAAC,cAAc,KAAK,8BAA8B,EAAE;QACvD,IAAI,EAAE,QAAQ,CAAC,UAAU,CAAC;YACxB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC;KACH,CAAC;SACD,IAAI,CACH,MAAM,CAAC,OAAO,CACZ,kBAAkB,CAAC,cAAc,CAAC,wBAAwB,CAAC,CAC5D,CACF,CAAC;AACN,CAAC,CAAC,CAAC","sourcesContent":["import { HttpBody, HttpClientResponse } from '@effect/platform';\nimport { Effect, Schema } from 'effect';\nimport { CurrentApp } from '../context/currentApp.ts';\nimport { InstantHttpAuthed, withCommand } from './http.ts';\nimport { validateRequired } from './ui.ts';\nimport { UI } from '../ui/index.ts';\nimport { BadArgsError } from '../errors.ts';\nimport type { ClientTypeSchema } from '../commands/auth/client/add.ts';\nimport { Args } from './args.ts';\n\nexport const AuthorizedOriginService = Schema.Literal(\n  'generic',\n  'vercel',\n  'netlify',\n  'custom-scheme',\n);\n\nexport const AuthorizedOrigin = Schema.Struct({\n  id: Schema.String,\n  service: AuthorizedOriginService,\n  params: Schema.Array(Schema.String).pipe(Schema.mutable),\n});\n\nexport const OAuthServiceProvider = Schema.Struct({\n  id: Schema.String,\n  provider_name: Schema.String,\n});\n\nexport const GoogleAppTypeSchema = Schema.Literal(\n  'web',\n  'ios',\n  'android',\n  'button-for-web',\n);\n\nconst NullableString = Schema.Union(Schema.String, Schema.Null).pipe(\n  Schema.optional,\n);\n\nconst NullableBoolean = Schema.Union(Schema.Boolean, Schema.Null).pipe(\n  Schema.optional,\n);\n\nconst OAuthClientMeta = Schema.Struct({\n  // Currently the CLI only reads Google app type from meta. Other providers store\n  // different meta shapes, so keep the rest open until we have a clean\n  // top-level discriminator for a full provider-specific union.\n  appType: GoogleAppTypeSchema.pipe(Schema.optional),\n}).pipe(\n  Schema.extend(Schema.Record({ key: Schema.String, value: Schema.Any })),\n);\n\nexport const OAuthClient = Schema.Struct({\n  id: Schema.String,\n  client_name: Schema.String,\n  client_id: NullableString,\n  provider_id: Schema.String,\n  authorization_endpoint: NullableString,\n  token_endpoint: NullableString,\n  discovery_endpoint: NullableString,\n  redirect_to: NullableString,\n  meta: Schema.Union(OAuthClientMeta, Schema.Null).pipe(Schema.optional),\n  use_shared_credentials: NullableBoolean,\n});\n\nexport const AddOAuthProviderResponse = Schema.Struct({\n  provider: OAuthServiceProvider,\n});\n\nexport const AddOAuthClientResponse = Schema.Struct({\n  client: OAuthClient,\n});\n\nexport const AuthorizedOriginResponse = Schema.Struct({\n  origin: AuthorizedOrigin,\n});\n\nconst NullableArray = <A, I, R>(schema: Schema.Schema<A, I, R>) =>\n  Schema.Union(Schema.Array(schema).pipe(Schema.mutable), Schema.Null).pipe(\n    Schema.optional,\n  );\n\nexport const AppsAuthResponse = Schema.Struct({\n  authorized_redirect_origins: NullableArray(AuthorizedOrigin),\n  oauth_service_providers: NullableArray(OAuthServiceProvider),\n  oauth_clients: NullableArray(OAuthClient),\n});\n\nexport const getAppsAuth = Effect.fn(function* () {\n  const http = (yield* InstantHttpAuthed).pipe(withCommand('auth'));\n  const targetAppId = (yield* CurrentApp).appId;\n\n  return yield* http\n    .get(`/dash/apps/${targetAppId}/auth`)\n    .pipe(Effect.flatMap(HttpClientResponse.schemaBodyJson(AppsAuthResponse)));\n});\n\nexport const addOAuthProvider = Effect.fn(function* (params: {\n  appId?: string;\n  providerName: string;\n}) {\n  const http = (yield* InstantHttpAuthed).pipe(withCommand('auth'));\n  const targetAppId = params.appId ?? (yield* CurrentApp).appId;\n\n  return yield* http\n    .post(`/dash/apps/${targetAppId}/oauth_service_providers`, {\n      body: HttpBody.unsafeJson({\n        provider_name: params.providerName,\n      }),\n    })\n    .pipe(\n      Effect.flatMap(\n        HttpClientResponse.schemaBodyJson(AddOAuthProviderResponse),\n      ),\n    );\n});\n\nexport const addOAuthClient = Effect.fn(function* (params: {\n  appId?: string;\n  providerId: string;\n  clientName: string;\n  clientId?: string;\n  clientSecret?: string;\n  authorizationEndpoint?: string;\n  tokenEndpoint?: string;\n  discoveryEndpoint?: string;\n  redirectTo?: string;\n  meta?: unknown;\n  useSharedCredentials?: boolean;\n}) {\n  const http = (yield* InstantHttpAuthed).pipe(withCommand('auth'));\n  const targetAppId = params.appId ?? (yield* CurrentApp).appId;\n\n  return yield* http\n    .post(`/dash/apps/${targetAppId}/oauth_clients`, {\n      body: HttpBody.unsafeJson({\n        provider_id: params.providerId,\n        client_name: params.clientName,\n        client_id: params.clientId,\n        client_secret: params.clientSecret,\n        authorization_endpoint: params.authorizationEndpoint,\n        token_endpoint: params.tokenEndpoint,\n        discovery_endpoint: params.discoveryEndpoint,\n        redirect_to: params.redirectTo,\n        meta: params.meta,\n        use_shared_credentials: params.useSharedCredentials,\n      }),\n    })\n    .pipe(\n      Effect.flatMap(HttpClientResponse.schemaBodyJson(AddOAuthClientResponse)),\n    );\n});\n\nexport const updateOAuthClient = Effect.fn(function* (params: {\n  oauthClientId: string;\n  clientId?: string | null;\n  clientSecret?: string | null;\n  discoveryEndpoint?: string | null;\n  redirectTo?: string | null;\n  meta?: unknown;\n  useSharedCredentials?: boolean | null;\n}) {\n  const http = (yield* InstantHttpAuthed).pipe(withCommand('auth'));\n  const targetAppId = (yield* CurrentApp).appId;\n\n  return yield* http\n    .post(`/dash/apps/${targetAppId}/oauth_clients/${params.oauthClientId}`, {\n      body: HttpBody.unsafeJson({\n        client_id: params.clientId,\n        client_secret: params.clientSecret,\n        discovery_endpoint: params.discoveryEndpoint,\n        redirect_to: params.redirectTo,\n        meta: params.meta,\n        use_shared_credentials: params.useSharedCredentials,\n      }),\n    })\n    .pipe(\n      Effect.flatMap(HttpClientResponse.schemaBodyJson(AddOAuthClientResponse)),\n    );\n});\n\nexport const getOrCreateProvider = Effect.fn(function* (\n  type: typeof ClientTypeSchema.Type,\n) {\n  const auth = yield* getAppsAuth();\n  const provider = auth.oauth_service_providers?.find(\n    (entry) => entry.provider_name === type,\n  );\n\n  if (provider) {\n    return { auth, provider };\n  }\n\n  const created = yield* addOAuthProvider({ providerName: type });\n  return { auth, provider: created.provider };\n});\n\n// Returns prefix if unused; otherwise appends integers starting at 2.\n// e.g. findName('google', new Set(['google', 'google2'])) returns 'google3'.\nexport const findName = (prefix: string, used: Set<string>) => {\n  if (!used.has(prefix)) {\n    return prefix;\n  }\n\n  for (let i = 2; ; i++) {\n    const candidate = `${prefix}${i}`;\n    if (!used.has(candidate)) {\n      return candidate;\n    }\n  }\n};\n\nexport const getClientNameAndProvider = Effect.fn(function* (\n  providerType: typeof ClientTypeSchema.Type,\n  opts: Record<string, unknown>,\n) {\n  const { auth, provider } = yield* getOrCreateProvider(providerType);\n  const usedClientNames = new Set(\n    (auth.oauth_clients ?? []).map((client) => client.client_name),\n  );\n  const suggestedClientName = findName(providerType, usedClientNames);\n\n  const clientName = yield* Args.text(opts, 'name').pipe(\n    Args.prompt({\n      prompt: 'Client Name:',\n      defaultValue: suggestedClientName,\n      placeholder: suggestedClientName,\n      validate: validateRequired,\n      modifyOutput: UI.modifiers.piped([\n        UI.modifiers.topPadding,\n        UI.modifiers.dimOnComplete,\n      ]),\n    }),\n    Args.required(),\n  );\n\n  if (usedClientNames.has(clientName)) {\n    return yield* BadArgsError.make({\n      message: `The unique name '${clientName}' is already in use.`,\n    });\n  }\n  return { provider, clientName };\n});\n\nexport const findClientByIdOrName = Effect.fn(function* (params: {\n  id?: string;\n  name?: string;\n}) {\n  if (params.id && params.name) {\n    return yield* BadArgsError.make({\n      message: 'Cannot specify both --id and --name',\n    });\n  }\n  if (!params.id && !params.name) {\n    return yield* BadArgsError.make({\n      message: 'Must specify --id or --name',\n    });\n  }\n\n  const auth = yield* getAppsAuth();\n  const clients = auth.oauth_clients ?? [];\n  const client = params.id\n    ? clients.find((entry) => entry.id === params.id)\n    : clients.find((entry) => entry.client_name === params.name);\n\n  if (!client) {\n    const lookup = params.id ? `id ${params.id}` : `name ${params.name}`;\n    return yield* BadArgsError.make({\n      message: `OAuth client not found: ${lookup}`,\n    });\n  }\n\n  return { auth, client };\n});\n\nexport const removeAuthorizedOrigin = Effect.fn(function* (originId: string) {\n  const http = (yield* InstantHttpAuthed).pipe(\n    withCommand('auth origin delete'),\n  );\n  const { appId } = yield* CurrentApp;\n\n  return yield* http\n    .del(`/dash/apps/${appId}/authorized_redirect_origins/${originId}`)\n    .pipe(\n      Effect.flatMap(\n        HttpClientResponse.schemaBodyJson(AuthorizedOriginResponse),\n      ),\n    );\n});\n\nexport const addAuthorizedOrigin = Effect.fn(function* (params: {\n  service: Schema.Schema.Type<typeof AuthorizedOriginService>;\n  params: string[];\n}) {\n  const http = (yield* InstantHttpAuthed).pipe(withCommand('auth origin add'));\n  const { appId } = yield* CurrentApp;\n\n  return yield* http\n    .post(`/dash/apps/${appId}/authorized_redirect_origins`, {\n      body: HttpBody.unsafeJson({\n        service: params.service,\n        params: params.params,\n      }),\n    })\n    .pipe(\n      Effect.flatMap(\n        HttpClientResponse.schemaBodyJson(AuthorizedOriginResponse),\n      ),\n    );\n});\n"]}

package/dist/lib/platformApi.d.ts

@@ -0,0 +1,5 @@
+import { Effect } from 'effect';
+import { PlatformApi as InstantPlatformApi } from '@superlayer/platform';
+import { AuthToken } from '../context/authToken.ts';
+export declare const getAuthedPlatformApi: Effect.Effect<InstantPlatformApi, import("../errors.ts").BadArgsError | import("effect/Cause").UnknownException | import("effect/ConfigError").ConfigError, AuthToken>;
+//# sourceMappingURL=platformApi.d.ts.map

package/dist/lib/platformApi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platformApi.d.ts","sourceRoot":"","sources":["../../src/lib/platformApi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,WAAW,IAAI,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAGpD,eAAO,MAAM,oBAAoB,wKAK/B,CAAC"}

package/dist/lib/platformApi.js

@@ -0,0 +1,11 @@
+import { Effect } from 'effect';
+import { PlatformApi as InstantPlatformApi } from '@superlayer/platform';
+import { AuthToken } from "../context/authToken.js";
+import { getBaseUrl } from "./config.js";
+export const getAuthedPlatformApi = Effect.gen(function* () {
+    const apiURI = yield* getBaseUrl;
+    const authToken = yield* AuthToken;
+    const token = yield* authToken.getAuthToken;
+    return new InstantPlatformApi({ apiURI, auth: { token } });
+});
+//# sourceMappingURL=platformApi.js.map

package/dist/lib/platformApi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platformApi.js","sourceRoot":"","sources":["../../src/lib/platformApi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,WAAW,IAAI,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IACtD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IACjC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;IACnC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC;IAC5C,OAAO,IAAI,kBAAkB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;AAC7D,CAAC,CAAC,CAAC","sourcesContent":["import { Effect } from 'effect';\nimport { PlatformApi as InstantPlatformApi } from '@superlayer/platform';\nimport { AuthToken } from '../context/authToken.ts';\nimport { getBaseUrl } from './config.ts';\n\nexport const getAuthedPlatformApi = Effect.gen(function* () {\n  const apiURI = yield* getBaseUrl;\n  const authToken = yield* AuthToken;\n  const token = yield* authToken.getAuthToken;\n  return new InstantPlatformApi({ apiURI, auth: { token } });\n});\n"]}

package/dist/lib/pullPerms.d.ts

@@ -0,0 +1,7 @@
+import { Effect } from 'effect';
+import { CurrentApp } from '../context/currentApp.ts';
+import { InstantHttpAuthed } from './http.ts';
+import { ProjectInfo } from '../context/projectInfo.ts';
+import { Path } from '@effect/platform';
+export declare const pullPerms: Effect.Effect<void, import("effect/Cause").UnknownException | import("effect/ParseResult").ParseError | import("./http.ts").InstantHttpError | import("effect/Cause").TimeoutException | import("@effect/platform/HttpClientError").RequestError | import("@effect/platform/HttpClientError").ResponseError | import("@effect/platform/Error").PlatformError, import("../context/globalOpts.ts").GlobalOpts | ProjectInfo | InstantHttpAuthed | import("@effect/platform/FileSystem").FileSystem | Path.Path | CurrentApp>;
+//# sourceMappingURL=pullPerms.d.ts.map

package/dist/lib/pullPerms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pullPerms.d.ts","sourceRoot":"","sources":["../../src/lib/pullPerms.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAkB,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAe,MAAM,WAAW,CAAC;AAQ3D,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAExC,eAAO,MAAM,SAAS,4fAoCpB,CAAC"}

package/dist/lib/pullPerms.js

@@ -0,0 +1,41 @@
+import { Effect, Option, Schema } from 'effect';
+import { CurrentApp } from "../context/currentApp.js";
+import { InstantHttpAuthed, withCommand } from "./http.js";
+import { HttpClientResponse } from '@effect/platform';
+import { readLocalPermsFile } from '../old.js';
+import { getPermsPathToWrite } from "../util/findConfigCandidates.js";
+import { promptOk } from "./ui.js";
+import { UI } from "../ui/index.js";
+import { writeTypescript } from "./pullSchema.js";
+import { generatePermsTypescriptFile } from '@superlayer/platform';
+import { ProjectInfo } from "../context/projectInfo.js";
+import { Path } from '@effect/platform';
+export const pullPerms = Effect.gen(function* () {
+    yield* Effect.log('\nPulling perms...');
+    const { appId } = yield* CurrentApp;
+    const http = yield* InstantHttpAuthed;
+    const permsResponse = yield* http
+        .pipe(withCommand('pull'))
+        .get(`/dash/apps/${appId}/perms/pull`)
+        .pipe(Effect.flatMap(HttpClientResponse.schemaBodyJson(Schema.Any))); // parse result body into "any"
+    const prevPermsFile = yield* Effect.tryPromise(readLocalPermsFile).pipe(Effect.map(Option.fromNullable));
+    const shortPermsPath = Option.match(prevPermsFile, {
+        onSome: (file) => file.path,
+        onNone: () => getPermsPathToWrite(),
+    });
+    if (Option.isSome(prevPermsFile)) {
+        const shouldContinue = yield* promptOk({
+            promptText: `This will overwrite your local ${shortPermsPath} file, OK to proceed?`,
+            modifyOutput: UI.modifiers.yPadding,
+            inline: true,
+        });
+        if (!shouldContinue)
+            return;
+    }
+    const { instantModuleName, pkgDir } = yield* ProjectInfo;
+    const fileContent = generatePermsTypescriptFile(permsResponse?.perms || {}, instantModuleName);
+    const path = yield* Path.Path;
+    yield* writeTypescript(path.join(pkgDir, shortPermsPath), fileContent);
+    yield* Effect.log('✅ Wrote permissions to ' + shortPermsPath);
+});
+//# sourceMappingURL=pullPerms.js.map

package/dist/lib/pullPerms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pullPerms.js","sourceRoot":"","sources":["../../src/lib/pullPerms.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAExC,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC3C,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACxC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IACpC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;IACtC,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,IAAI;SAC9B,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;SACzB,GAAG,CAAC,cAAc,KAAK,aAAa,CAAC;SACrC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,+BAA+B;IAEvG,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,IAAI,CACrE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAChC,CAAC;IAEF,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE;QACjD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI;QAC3B,MAAM,EAAE,GAAG,EAAE,CAAC,mBAAmB,EAAE;KACpC,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC;YACrC,UAAU,EAAE,kCAAkC,cAAc,uBAAuB;YACnF,YAAY,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ;YACnC,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;QACH,IAAI,CAAC,cAAc;YAAE,OAAO;IAC9B,CAAC;IACD,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;IACzD,MAAM,WAAW,GAAG,2BAA2B,CAC7C,aAAa,EAAE,KAAK,IAAI,EAAE,EAC1B,iBAAiB,CAClB,CAAC;IAEF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IAE9B,KAAK,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,WAAW,CAAC,CAAC;IACvE,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,yBAAyB,GAAG,cAAc,CAAC,CAAC;AAChE,CAAC,CAAC,CAAC","sourcesContent":["import { Effect, Option, Schema } from 'effect';\nimport { CurrentApp } from '../context/currentApp.ts';\nimport { InstantHttpAuthed, withCommand } from './http.ts';\nimport { HttpClientResponse } from '@effect/platform';\nimport { readLocalPermsFile } from '../old.js';\nimport { getPermsPathToWrite } from '../util/findConfigCandidates.ts';\nimport { promptOk } from './ui.ts';\nimport { UI } from '../ui/index.ts';\nimport { writeTypescript } from './pullSchema.ts';\nimport { generatePermsTypescriptFile } from '@superlayer/platform';\nimport { ProjectInfo } from '../context/projectInfo.ts';\nimport { Path } from '@effect/platform';\n\nexport const pullPerms = Effect.gen(function* () {\n  yield* Effect.log('\\nPulling perms...');\n  const { appId } = yield* CurrentApp;\n  const http = yield* InstantHttpAuthed;\n  const permsResponse = yield* http\n    .pipe(withCommand('pull'))\n    .get(`/dash/apps/${appId}/perms/pull`)\n    .pipe(Effect.flatMap(HttpClientResponse.schemaBodyJson(Schema.Any))); // parse result body into \"any\"\n\n  const prevPermsFile = yield* Effect.tryPromise(readLocalPermsFile).pipe(\n    Effect.map(Option.fromNullable),\n  );\n\n  const shortPermsPath = Option.match(prevPermsFile, {\n    onSome: (file) => file.path,\n    onNone: () => getPermsPathToWrite(),\n  });\n\n  if (Option.isSome(prevPermsFile)) {\n    const shouldContinue = yield* promptOk({\n      promptText: `This will overwrite your local ${shortPermsPath} file, OK to proceed?`,\n      modifyOutput: UI.modifiers.yPadding,\n      inline: true,\n    });\n    if (!shouldContinue) return;\n  }\n  const { instantModuleName, pkgDir } = yield* ProjectInfo;\n  const fileContent = generatePermsTypescriptFile(\n    permsResponse?.perms || {},\n    instantModuleName,\n  );\n\n  const path = yield* Path.Path;\n\n  yield* writeTypescript(path.join(pkgDir, shortPermsPath), fileContent);\n  yield* Effect.log('✅ Wrote permissions to ' + shortPermsPath);\n});\n"]}