@tappify/cli 1.3.2 → 1.5.0

package/README.md

@@ -4,6 +4,20 @@ A command line interface for managing deployments and more.
 
 ## Installation
 
+The CLI ships as a standalone binary (no Node.js required). npm remains available for Node users.
+
+### curl (macOS/Linux)
+
+```bash
+curl -fsSL https://get.tappify.ai | sh
+```
+
+### winget (Windows)
+
+```powershell
+winget install Tappify.CLI
+```
+
 ### NPM
 
 ```bash
@@ -33,60 +47,121 @@ choco install tappify
 ## Usage
 
 ```bash
-# Show available commands
 tappify --help
-
-# Authenticate with Tappify
 tappify login
+tappify environment
+tappify extension init
+tappify extension dev
+tappify extension publish
+```
+
+## Commands
+
+### `login`, `logout`
+
+Authenticate with Tappify through the device authorization flow, and clear the stored session.
 
-# Initialize a new app project
-tappify init
+### `upgrade`
 
-# Publish your app
-tappify publish
+Update the CLI to the latest version. Self-updates binary installs; otherwise prints the right command for your package manager.
 
-# Log out
-tappify logout
+### `environment`, `env`
 
-# Create a deployment
-tappify create-deployment <project-id> --environment production --branch main
+Choose whether the CLI connects to Production or the internal Staging sandbox:
+
+```bash
+tappify environment
+tappify environment current
+tappify environment use production
+tappify environment use staging --yes
 ```
 
-## Commands
+Staging requires confirmation unless `--yes` is supplied:
 
-### `login`
+```text
+WARNING: INTERNAL TESTING ENVIRONMENT
 
-Authenticate with Tappify via device authorization flow. Opens a browser to complete authentication.
+Staging uses https://staging.api.tappify.ai.
+Data may be incomplete, changed, or deleted.
+Do not use this environment unless you know what you are doing.
+```
 
-### `logout`
+Switching environments logs the CLI out and clears the selected sandbox project, so run `tappify login` again. `TAPPIFY_API_URL` is an internal and CI escape hatch; while set, it overrides the selected environment and emits a custom-API warning.
 
-Log out of Tappify and clear stored credentials.
+### `link`
 
-### `init`
+Link this directory to a Tappify project and its apps, writing `.tappify/project.json`.
 
-Initialize a new Tappify app project. Creates a `tap.config.json` in the current directory.
+### `deployments configure`
 
-### `publish`
+Configure CI code signing for an app.
 
-Publish your Tappify app. Bundles the `dist/` directory and `tap.config.json` into a zip and uploads it.
+### `vendor create`
 
-### `create-deployment`
+Create a vendor account, its workspace and its sandbox project. Every `extension` command that finds no vendor points you here.
 
-Create a new deployment for a project.
+### `extension`
 
-```bash
-tappify create-deployment <project-id> [options]
-```
+Build, test and publish an extension. `tappify ext` is the same command.
+
+| Command                          | Does                                                               |
+| -------------------------------- | ------------------------------------------------------------------ |
+| `extension init [dir]`           | Scaffolds an extension from the starter                            |
+| `extension add <kind> [name]`    | Adds a contribution, scaffolds its files and regenerates the types |
+| `extension remove <kind> <id>`   | Removes a contribution and, with confirmation, its files           |
+| `extension list`                 | Lists the contributions and scopes this extension declares         |
+| `extension set <field> <value>`  | Sets one field in the manifest                                     |
+| `extension scopes add <key>`     | Grants this extension one more scope                               |
+| `extension scopes remove <key>`  | Takes one scope away                                               |
+| `extension events add <name>`    | Receives one Tappify event on your server                          |
+| `extension events remove <name>` | Stops receiving one Tappify event on your server                   |
+| `extension types`                | Regenerates `src/tappify.d.ts`                                     |
+| `extension dev`                  | Serves the extension and previews it while you edit                |
+| `extension doctor`               | Runs every check the Tap Store runs, here                          |
+| `extension publish`              | Builds, checks and sends the release to the Tap Store              |
+| `extension retire`               | Takes the extension out of the Tap Store and every install         |
+| `extension status`               | Shows the live release, the release in review and the installs     |
+| `extension whoami`               | Shows the vendor, your role and the sandbox project                |
+
+Run `tappify extension <command> --help` for the flags.
+
+### `mcp`
+
+Serves the MCP server for agents over stdio.
+
+Editors and agents run `tappify mcp` themselves. The Claude Code plugin at `tappify-dev/claude-plugin` declares it, so installing that plugin is all a Claude Code user does.
+
+### `--json`
+
+Every `vendor` and `extension` command takes `--json` and prints one object on stdout: the same result its two human lines describe. A failure prints `{ "ok": false, "error": { "what": …, "why": …, "fix": … } }` and exits non-zero. `login`, `logout`, `link`, `upgrade` and `deployments configure` take no `--json`, and `mcp` has none either — its stdout carries the protocol.
+
+Each payload below also carries `ok: true`.
 
-**Arguments:**
+| Command                           | Keys                                                       |
+| --------------------------------- | ---------------------------------------------------------- |
+| `tappify vendor create`           | `vendor`, `workspace`, `sandboxProject`                    |
+| `tappify extension init`          | `id`, `name`, `directory`, `files`                         |
+| `tappify extension add`           | `kind`, `id`, `files`, `scopesAdded`                       |
+| `tappify extension remove`        | `kind`, `id`, `files`                                      |
+| `tappify extension list`          | `id`, `contributions`, `scopes`                            |
+| `tappify extension set`           | `field`, `value`                                           |
+| `tappify extension scopes add`    | `key`, `justification`, `requiresSecurityReview`           |
+| `tappify extension scopes remove` | `key`, `stillNeeded`                                       |
+| `tappify extension events add`    | `name`, `events`                                           |
+| `tappify extension events remove` | `name`, `events`, `usedBy`                                 |
+| `tappify extension types`         | `file`, `schemas`                                          |
+| `tappify extension dev`           | `id`, `remoteEntry`, `previewUrl`, `hostUrl`, `installId`  |
+| `tappify extension doctor`        | `id`, `errors`, `warnings`, `passed`, `fixed`, `checks`    |
+| `tappify extension publish`       | `id`, `status`, `releaseId`, `bytes`, `entries`, `pending` |
+| `tappify extension retire`        | `id`, `status`                                             |
+| `tappify extension status`        | `id`, `live`, `pending`, `timeline`, `installCount`        |
+| `tappify extension whoami`        | `user`, `vendor`, `role`, `sandboxProject`                 |
 
-- `project-id`: The ID of the project to deploy
+`publish` carries `pending` only when the release goes to review with scopes or contribution kinds the live release does not have. `doctor` prints the same six keys whether or not a check failed; when one did, the object is the `ok: false` form and `errors` is above zero. `fixed` lists what `--fix` changed, and is empty without the flag. `scopes remove` carries `stillNeeded` on both forms: `null` when the scope went, and the reason it stayed when it did not. A failure carries whatever keys the command has beside `error`, so the shape a command prints does not change when it refuses.
 
-**Options:**
+`events remove` carries `usedBy`: the markers and banners that draw the event, which keep working because they are inbound webhooks rather than this subscription.
 
-- `-e, --environment <environment>`: Target environment (e.g., production, staging)
-- `-b, --branch <branch>`: Git branch to deploy
-- `-d, --dry-run`: Run without making actual changes
+`tappify vendor --json`, `tappify extension --json`, `tappify extension scopes --json` and `tappify extension events --json` print `{ commands }` — the verbs the group holds, not a result.
 
 ## License
 

package/dist/src/app.module.js

@@ -18,9 +18,13 @@ exports.AppModule = AppModule = __decorate([
         imports: [
             core_1.CoreModule,
             domains_1.DeploymentsModule,
+            domains_1.EnvironmentModule,
+            domains_1.ExtensionModule,
             domains_1.AuthModule,
-            domains_1.InitModule,
-            domains_1.DeployModule,
+            domains_1.LinkModule,
+            domains_1.McpModule,
+            domains_1.UpgradeModule,
+            domains_1.VendorModule,
         ],
         controllers: [],
         providers: [],

package/dist/src/app.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"app.module.js","sourceRoot":"","sources":["../../src/app.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,iCAAoC;AACpC,uCAKmB;AACnB,2CAAwC;AAajC,IAAM,SAAS,GAAf,MAAM,SAAS;CAAG,CAAA;AAAZ,8BAAS;oBAAT,SAAS;IAXrB,IAAA,eAAM,EAAC;QACN,OAAO,EAAE;YACP,iBAAU;YACV,2BAAiB;YACjB,oBAAU;YACV,oBAAU;YACV,sBAAY;SACb;QACD,WAAW,EAAE,EAAE;QACf,SAAS,EAAE,EAAE;KACd,CAAC;GACW,SAAS,CAAG"}
+{"version":3,"file":"app.module.js","sourceRoot":"","sources":["../../src/app.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,iCAAoC;AACpC,uCASmB;AACnB,2CAAwC;AAiBjC,IAAM,SAAS,GAAf,MAAM,SAAS;CAAG,CAAA;AAAZ,8BAAS;oBAAT,SAAS;IAfrB,IAAA,eAAM,EAAC;QACN,OAAO,EAAE;YACP,iBAAU;YACV,2BAAiB;YACjB,2BAAiB;YACjB,yBAAe;YACf,oBAAU;YACV,oBAAU;YACV,mBAAS;YACT,uBAAa;YACb,sBAAY;SACb;QACD,WAAW,EAAE,EAAE;QACf,SAAS,EAAE,EAAE;KACd,CAAC;GACW,SAAS,CAAG"}

package/dist/src/core/api/api.service.d.ts

@@ -1,11 +1,37 @@
+import { AuthService } from '../../core/auth/auth.service.js';
 import { ConfigService } from '../../core/config/config.service.js';
+import { EnvironmentService } from '../../core/environment/environment.service.js';
+export declare class ApiError extends Error {
+    readonly status: number;
+    readonly errorCode: string | null;
+    readonly path: string;
+    readonly additionalData: Record<string, unknown> | null;
+    constructor(message: string, status: number, errorCode: string | null, path: string, additionalData?: Record<string, unknown> | null);
+}
 export declare class ApiService {
     private readonly configService;
+    private readonly authService;
+    private readonly environment;
     private readonly logger;
-    constructor(configService: ConfigService);
+    constructor(configService: ConfigService, authService: AuthService, environment: EnvironmentService);
     private get baseUrl();
-    private get headers();
+    private authHeader;
+    private expiresInMs;
+    private isExpiring;
+    private ensureFreshToken;
+    private authedFetch;
+    private toError;
+    private parseBody;
     get<T = unknown>(path: string): Promise<T>;
     post<T = unknown>(path: string, body: unknown): Promise<T>;
+    getPublic<T = unknown>(path: string, options?: {
+        timeoutMs?: number;
+    }): Promise<T>;
+    del<T = unknown>(path: string): Promise<T>;
+    uploadMultipart<T = unknown>(path: string, files: {
+        field: string;
+        filePath: string;
+        filename: string;
+    }[], fields?: Record<string, string>): Promise<T>;
     upload<T = unknown>(path: string, filePath: string): Promise<T>;
 }

package/dist/src/core/api/api.service.js

@@ -13,70 +13,194 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 var ApiService_1;
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ApiService = void 0;
+exports.ApiService = exports.ApiError = void 0;
+const auth_service_js_1 = require("../../core/auth/auth.service.js");
 const config_service_js_1 = require("../../core/config/config.service.js");
+const environment_service_js_1 = require("../../core/environment/environment.service.js");
 const common_1 = require("@nestjs/common");
 const form_data_1 = __importDefault(require("form-data"));
 const node_fs_1 = require("node:fs");
+class ApiError extends Error {
+    status;
+    errorCode;
+    path;
+    additionalData;
+    constructor(message, status, errorCode, path, additionalData = null) {
+        super(message);
+        this.status = status;
+        this.errorCode = errorCode;
+        this.path = path;
+        this.additionalData = additionalData;
+        this.name = 'ApiError';
+    }
+}
+exports.ApiError = ApiError;
+const isRecord = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
+const readErrorBody = (text) => {
+    try {
+        const parsed = JSON.parse(text);
+        return isRecord(parsed) ? parsed : {};
+    }
+    catch {
+        return {};
+    }
+};
 let ApiService = ApiService_1 = class ApiService {
     configService;
+    authService;
+    environment;
     logger = new common_1.Logger(ApiService_1.name);
-    constructor(configService) {
+    constructor(configService, authService, environment) {
         this.configService = configService;
+        this.authService = authService;
+        this.environment = environment;
     }
     get baseUrl() {
-        return (this.configService.get('apiBaseUrl') ?? 'https://api.tappify.io/api/v1');
+        return this.environment.current().apiBaseUrl;
     }
-    get headers() {
+    authHeader() {
         const token = this.configService.get('accessToken');
-        return {
-            ...(token ? { Authorization: `Bearer ${token}` } : {}),
-        };
+        return token ? { Authorization: `Bearer ${token}` } : {};
+    }
+    expiresInMs(token) {
+        if (!token)
+            return null;
+        try {
+            const [, payload] = token.split('.');
+            const { exp } = JSON.parse(Buffer.from(payload, 'base64url').toString());
+            return typeof exp === 'number' ? exp * 1000 - Date.now() : null;
+        }
+        catch {
+            return null;
+        }
+    }
+    isExpiring(token) {
+        const left = this.expiresInMs(token);
+        return left !== null && left <= 30_000;
+    }
+    async ensureFreshToken() {
+        if (this.isExpiring(this.configService.get('accessToken'))) {
+            await this.authService.refresh();
+        }
+    }
+    async authedFetch(path, init) {
+        await this.ensureFreshToken();
+        const url = `${this.baseUrl}${path}`;
+        let res = await fetch(url, {
+            ...init,
+            headers: { ...init.headers, ...this.authHeader() },
+        });
+        if (res.status === 401 && (await this.authService.refresh())) {
+            res = await fetch(url, {
+                ...init,
+                headers: { ...init.headers, ...this.authHeader() },
+            });
+        }
+        return res;
+    }
+    async toError(method, path, res) {
+        const text = await res.text();
+        const body = readErrorBody(text);
+        const errorCode = typeof body.errorCode === 'string' ? body.errorCode : null;
+        const message = typeof body.message === 'string' ? body.message : text;
+        const additionalData = isRecord(body.additionalData)
+            ? body.additionalData
+            : null;
+        if (res.status === 401) {
+            const left = this.expiresInMs(this.configService.get('accessToken'));
+            if (left !== null && left > 0) {
+                return new ApiError(`The server at ${this.baseUrl} rejected your credentials even though your login is still valid. ` +
+                    `That environment's API is likely misconfigured (wrong auth provider), not a login problem.`, 401, errorCode ?? 'INVALID_TOKEN', path, additionalData);
+            }
+            return new ApiError('Your session has expired. Run `tappify login`.', 401, 'SESSION_EXPIRED', path, additionalData);
+        }
+        return new ApiError(message === '' ? `${method} ${path} failed (${res.status}).` : message, res.status, errorCode, path, additionalData);
+    }
+    async parseBody(res) {
+        if (res.status === 204)
+            return undefined;
+        const text = await res.text();
+        return (text ? JSON.parse(text) : undefined);
     }
     async get(path) {
-        const res = await fetch(`${this.baseUrl}${path}`, {
+        const res = await this.authedFetch(path, {
             method: 'GET',
-            headers: { ...this.headers, 'Content-Type': 'application/json' },
+            headers: { 'Content-Type': 'application/json' },
         });
-        if (!res.ok) {
-            const text = await res.text();
-            throw new Error(`GET ${path} failed (${res.status}): ${text}`);
-        }
-        return res.json();
+        if (!res.ok)
+            throw await this.toError('GET', path, res);
+        return this.parseBody(res);
     }
     async post(path, body) {
-        const res = await fetch(`${this.baseUrl}${path}`, {
+        const res = await this.authedFetch(path, {
             method: 'POST',
-            headers: { ...this.headers, 'Content-Type': 'application/json' },
+            headers: { 'Content-Type': 'application/json' },
             body: JSON.stringify(body),
         });
-        if (!res.ok) {
-            const text = await res.text();
-            throw new Error(`POST ${path} failed (${res.status}): ${text}`);
+        if (!res.ok)
+            throw await this.toError('POST', path, res);
+        return this.parseBody(res);
+    }
+    async getPublic(path, options = {}) {
+        const res = await fetch(`${this.baseUrl}${path}`, {
+            method: 'GET',
+            headers: { 'Content-Type': 'application/json' },
+            ...(options.timeoutMs === undefined
+                ? {}
+                : { signal: AbortSignal.timeout(options.timeoutMs) }),
+        });
+        if (!res.ok)
+            throw await this.toError('GET', path, res);
+        return this.parseBody(res);
+    }
+    async del(path) {
+        const res = await this.authedFetch(path, { method: 'DELETE' });
+        if (!res.ok)
+            throw await this.toError('DELETE', path, res);
+        return this.parseBody(res);
+    }
+    async uploadMultipart(path, files, fields = {}) {
+        await this.ensureFreshToken();
+        const form = new form_data_1.default();
+        for (const [name, value] of Object.entries(fields)) {
+            form.append(name, value);
         }
-        return (await res.json());
+        for (const file of files) {
+            form.append(file.field, (0, node_fs_1.readFileSync)(file.filePath), {
+                filename: file.filename,
+            });
+        }
+        const res = await fetch(`${this.baseUrl}${path}`, {
+            method: 'POST',
+            headers: { ...this.authHeader(), ...form.getHeaders() },
+            body: new Uint8Array(form.getBuffer()),
+        });
+        if (!res.ok)
+            throw await this.toError('POST', path, res);
+        return this.parseBody(res);
     }
     async upload(path, filePath) {
+        await this.ensureFreshToken();
         const form = new form_data_1.default();
         form.append('file', (0, node_fs_1.createReadStream)(filePath));
         const res = await fetch(`${this.baseUrl}${path}`, {
             method: 'POST',
             headers: {
-                ...this.headers,
+                ...this.authHeader(),
                 ...form.getHeaders(),
             },
             body: form,
         });
-        if (!res.ok) {
-            const text = await res.text();
-            throw new Error(`Upload to ${path} failed (${res.status}): ${text}`);
-        }
-        return (await res.json());
+        if (!res.ok)
+            throw await this.toError('Upload to', path, res);
+        return this.parseBody(res);
     }
 };
 exports.ApiService = ApiService;
 exports.ApiService = ApiService = ApiService_1 = __decorate([
     (0, common_1.Injectable)(),
-    __metadata("design:paramtypes", [config_service_js_1.ConfigService])
+    __metadata("design:paramtypes", [config_service_js_1.ConfigService,
+        auth_service_js_1.AuthService,
+        environment_service_js_1.EnvironmentService])
 ], ApiService);
 //# sourceMappingURL=api.service.js.map

package/dist/src/core/api/api.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"api.service.js","sourceRoot":"","sources":["../../../../src/core/api/api.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uEAAgE;AAChE,2CAAoD;AACpD,0DAAiC;AACjC,qCAA2C;AAGpC,IAAM,UAAU,kBAAhB,MAAM,UAAU;IAGQ;IAFZ,MAAM,GAAG,IAAI,eAAM,CAAC,YAAU,CAAC,IAAI,CAAC,CAAC;IAEtD,YAA6B,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;IAAG,CAAC;IAE7D,IAAY,OAAO;QACjB,OAAO,CACL,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,+BAA+B,CACxE,CAAC;IACJ,CAAC;IAED,IAAY,OAAO;QACjB,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACpD,OAAO;YACL,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAc,IAAY;QACjC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YAChD,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE;SACjE,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,YAAY,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,EAAgB,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,IAAI,CAAc,IAAY,EAAE,IAAa;QACjD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YAChD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAChE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,YAAY,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAe,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,MAAM,CAAc,IAAY,EAAE,QAAgB;QACtD,MAAM,IAAI,GAAG,IAAI,mBAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAA,0BAAgB,EAAC,QAAQ,CAAC,CAAC,CAAC;QAEhD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YAChD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,GAAG,IAAI,CAAC,OAAO;gBACf,GAAG,IAAI,CAAC,UAAU,EAAE;aACrB;YACD,IAAI,EAAE,IAA2B;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,YAAY,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAe,CAAC;IAC1C,CAAC;CACF,CAAA;AAnEY,gCAAU;qBAAV,UAAU;IADtB,IAAA,mBAAU,GAAE;qCAIiC,iCAAa;GAH9C,UAAU,CAmEtB"}
+{"version":3,"file":"api.service.js","sourceRoot":"","sources":["../../../../src/core/api/api.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iEAA0D;AAC1D,uEAAgE;AAChE,sFAA+E;AAC/E,2CAAoD;AACpD,0DAAiC;AACjC,qCAAyD;AAQzD,MAAa,QAAS,SAAQ,KAAK;IAGtB;IACA;IACA;IACA;IALX,YACE,OAAe,EACN,MAAc,EACd,SAAwB,EACxB,IAAY,EACZ,iBAAiD,IAAI;QAE9D,KAAK,CAAC,OAAO,CAAC,CAAC;QALN,WAAM,GAAN,MAAM,CAAQ;QACd,cAAS,GAAT,SAAS,CAAe;QACxB,SAAI,GAAJ,IAAI,CAAQ;QACZ,mBAAc,GAAd,cAAc,CAAuC;QAG9D,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAXD,4BAWC;AAQD,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CACpE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEvE,MAAM,aAAa,GAAG,CAAC,IAAY,EAAa,EAAE;IAChD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC;AAGK,IAAM,UAAU,kBAAhB,MAAM,UAAU;IAIF;IACA;IACA;IALF,MAAM,GAAG,IAAI,eAAM,CAAC,YAAU,CAAC,IAAI,CAAC,CAAC;IAEtD,YACmB,aAA4B,EAC5B,WAAwB,EACxB,WAA+B;QAF/B,kBAAa,GAAb,aAAa,CAAe;QAC5B,gBAAW,GAAX,WAAW,CAAa;QACxB,gBAAW,GAAX,WAAW,CAAoB;IAC/C,CAAC;IAEJ,IAAY,OAAO;QACjB,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC;IAC/C,CAAC;IAEO,UAAU;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACpD,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,CAAC;IAGO,WAAW,CAAC,KAAyB;QAC3C,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACrC,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CACxB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CACzB,CAAC;YACtB,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAGO,UAAU,CAAC,KAAyB;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACrC,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,IAAI,MAAM,CAAC;IACzC,CAAC;IAGO,KAAK,CAAC,gBAAgB;QAC5B,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACnC,CAAC;IACH,CAAC;IAMO,KAAK,CAAC,WAAW,CACvB,IAAY,EACZ,IAAiB;QAEjB,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC;QACrC,IAAI,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACzB,GAAG,IAAI;YACP,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,EAAE;SACnD,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YAC7D,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBACrB,GAAG,IAAI;gBACP,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,EAAE;aACnD,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAc,EACd,IAAY,EACZ,GAAa;QAEb,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,SAAS,GACb,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7D,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QACvE,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC;YAClD,CAAC,CAAC,IAAI,CAAC,cAAc;YACrB,CAAC,CAAC,IAAI,CAAC;QAIT,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;YACrE,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;gBAC9B,OAAO,IAAI,QAAQ,CACjB,iBAAiB,IAAI,CAAC,OAAO,oEAAoE;oBAC/F,4FAA4F,EAC9F,GAAG,EACH,SAAS,IAAI,eAAe,EAC5B,IAAI,EACJ,cAAc,CACf,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,QAAQ,CACjB,gDAAgD,EAChD,GAAG,EACH,iBAAiB,EACjB,IAAI,EACJ,cAAc,CACf,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,QAAQ,CACjB,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,YAAY,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,OAAO,EACtE,GAAG,CAAC,MAAM,EACV,SAAS,EACT,IAAI,EACJ,cAAc,CACf,CAAC;IACJ,CAAC;IAGO,KAAK,CAAC,SAAS,CAAI,GAAa;QACtC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAc,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAM,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,GAAG,CAAc,IAAY;QACjC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE;YACvC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,SAAS,CAAI,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,IAAI,CAAc,IAAY,EAAE,IAAa;QACjD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE;YACvC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,SAAS,CAAI,GAAG,CAAC,CAAC;IAChC,CAAC;IAOD,KAAK,CAAC,SAAS,CACb,IAAY,EACZ,UAAkC,EAAE;QAEpC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YAChD,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS;gBACjC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;SACxD,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,SAAS,CAAI,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,GAAG,CAAc,IAAY;QACjC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,SAAS,CAAI,GAAG,CAAC,CAAC;IAChC,CAAC;IAOD,KAAK,CAAC,eAAe,CACnB,IAAY,EACZ,KAA8D,EAC9D,SAAiC,EAAE;QAEnC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,mBAAQ,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAA,sBAAY,EAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;gBACnD,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YAChD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,EAAE;YACvD,IAAI,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;SACvC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,SAAS,CAAI,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,MAAM,CAAc,IAAY,EAAE,QAAgB;QAGtD,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,mBAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAA,0BAAgB,EAAC,QAAQ,CAAC,CAAC,CAAC;QAEhD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YAChD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,GAAG,IAAI,CAAC,UAAU,EAAE;gBACpB,GAAG,IAAI,CAAC,UAAU,EAAE;aACrB;YACD,IAAI,EAAE,IAA2B;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC,SAAS,CAAI,GAAG,CAAC,CAAC;IAChC,CAAC;CACF,CAAA;AAxNY,gCAAU;qBAAV,UAAU;IADtB,IAAA,mBAAU,GAAE;qCAKuB,iCAAa;QACf,6BAAW;QACX,2CAAkB;GANvC,UAAU,CAwNtB"}

package/dist/src/core/auth/auth.service.d.ts

@@ -22,8 +22,10 @@ export declare class AuthService {
     private readonly configService;
     private readonly logger;
     constructor(configService: ConfigService);
+    private get clientId();
     startDeviceAuthorization(): Promise<DeviceAuthResponse>;
     pollForToken(deviceCode: string, interval: number, expiresIn: number): Promise<TokenResponse>;
+    refresh(): Promise<boolean>;
     private storeCredentials;
     private sleep;
 }

package/dist/src/core/auth/auth.service.js

@@ -14,18 +14,23 @@ exports.AuthService = void 0;
 const config_service_js_1 = require("../../core/config/config.service.js");
 const common_1 = require("@nestjs/common");
 const WORKOS_BASE_URL = 'https://api.workos.com';
-const CLIENT_ID = process.env.WORKOS_CLIENT_ID ?? 'client_01JYN3YC15ECJVH7805KERWA1Y';
+const DEFAULT_CLIENT_ID = 'client_01JYN3YC15ECJVH7805KERWA1Y';
 let AuthService = AuthService_1 = class AuthService {
     configService;
     logger = new common_1.Logger(AuthService_1.name);
     constructor(configService) {
         this.configService = configService;
     }
+    get clientId() {
+        return (process.env.WORKOS_CLIENT_ID ??
+            this.configService.get('workosClientId') ??
+            DEFAULT_CLIENT_ID);
+    }
     async startDeviceAuthorization() {
         const res = await fetch(`${WORKOS_BASE_URL}/user_management/authorize/device`, {
             method: 'POST',
             headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({ client_id: CLIENT_ID }),
+            body: JSON.stringify({ client_id: this.clientId }),
         });
         if (!res.ok) {
             const text = await res.text();
@@ -42,7 +47,7 @@ let AuthService = AuthService_1 = class AuthService {
                 method: 'POST',
                 headers: { 'Content-Type': 'application/json' },
                 body: JSON.stringify({
-                    client_id: CLIENT_ID,
+                    client_id: this.clientId,
                     grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
                     device_code: deviceCode,
                 }),
@@ -64,6 +69,29 @@ let AuthService = AuthService_1 = class AuthService {
         }
         throw new Error('Device authorization timed out.');
     }
+    async refresh() {
+        const refreshToken = this.configService.get('refreshToken');
+        if (!refreshToken)
+            return false;
+        try {
+            const res = await fetch(`${WORKOS_BASE_URL}/user_management/authenticate`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({
+                    client_id: this.clientId,
+                    grant_type: 'refresh_token',
+                    refresh_token: refreshToken,
+                }),
+            });
+            if (!res.ok)
+                return false;
+            this.storeCredentials((await res.json()));
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
     storeCredentials(data) {
         this.configService.set('accessToken', data.access_token);
         this.configService.set('refreshToken', data.refresh_token);

package/dist/src/core/auth/auth.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../../../src/core/auth/auth.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,uEAAgE;AAChE,2CAAoD;AA4BpD,MAAM,eAAe,GAAG,wBAAwB,CAAC;AACjD,MAAM,SAAS,GACb,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,mCAAmC,CAAC;AAG/D,IAAM,WAAW,mBAAjB,MAAM,WAAW;IAGO;IAFZ,MAAM,GAAG,IAAI,eAAM,CAAC,aAAW,CAAC,IAAI,CAAC,CAAC;IAEvD,YAA6B,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;IAAG,CAAC;IAE7D,KAAK,CAAC,wBAAwB;QAC5B,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,eAAe,mCAAmC,EACrD;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;SAC/C,CACF,CAAC;QAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,EAAiC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,UAAkB,EAClB,QAAgB,EAChB,SAAiB;QAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC;QAC/C,IAAI,YAAY,GAAG,QAAQ,GAAG,IAAI,CAAC;QAEnC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAE/B,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,eAAe,+BAA+B,EACjD;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,SAAS,EAAE,SAAS;oBACpB,UAAU,EAAE,8CAA8C;oBAC1D,WAAW,EAAE,UAAU;iBACxB,CAAC;aACH,CACF,CAAC;YAEF,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAkB,CAAC;gBACjD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;gBAC5B,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAc,CAAC;YAE9C,IAAI,KAAK,CAAC,KAAK,KAAK,uBAAuB,EAAE,CAAC;gBAC5C,SAAS;YACX,CAAC;YAED,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;gBAChC,YAAY,IAAI,IAAI,CAAC;gBACrB,SAAS;YACX,CAAC;YAED,MAAM,IAAI,KAAK,CACb,KAAK,CAAC,iBAAiB,IAAI,yBAAyB,KAAK,CAAC,KAAK,EAAE,CAClE,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAEO,gBAAgB,CAAC,IAAmB;QAC1C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACzD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3D,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,EAAU;QACtB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACzD,CAAC;CACF,CAAA;AApFY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;qCAIiC,iCAAa;GAH9C,WAAW,CAoFvB"}
+{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../../../src/core/auth/auth.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,uEAAgE;AAChE,2CAAoD;AA4BpD,MAAM,eAAe,GAAG,wBAAwB,CAAC;AACjD,MAAM,iBAAiB,GAAG,mCAAmC,CAAC;AAGvD,IAAM,WAAW,mBAAjB,MAAM,WAAW;IAGO;IAFZ,MAAM,GAAG,IAAI,eAAM,CAAC,aAAW,CAAC,IAAI,CAAC,CAAC;IAEvD,YAA6B,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;IAAG,CAAC;IAG7D,IAAY,QAAQ;QAClB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,gBAAgB;YAC5B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACxC,iBAAiB,CAClB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,wBAAwB;QAC5B,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,eAAe,mCAAmC,EACrD;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;SACnD,CACF,CAAC;QAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,EAAiC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,UAAkB,EAClB,QAAgB,EAChB,SAAiB;QAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC;QAC/C,IAAI,YAAY,GAAG,QAAQ,GAAG,IAAI,CAAC;QAEnC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAE/B,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,eAAe,+BAA+B,EACjD;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,SAAS,EAAE,IAAI,CAAC,QAAQ;oBACxB,UAAU,EAAE,8CAA8C;oBAC1D,WAAW,EAAE,UAAU;iBACxB,CAAC;aACH,CACF,CAAC;YAEF,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAkB,CAAC;gBACjD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;gBAC5B,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAc,CAAC;YAE9C,IAAI,KAAK,CAAC,KAAK,KAAK,uBAAuB,EAAE,CAAC;gBAC5C,SAAS;YACX,CAAC;YAED,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;gBAChC,YAAY,IAAI,IAAI,CAAC;gBACrB,SAAS;YACX,CAAC;YAED,MAAM,IAAI,KAAK,CACb,KAAK,CAAC,iBAAiB,IAAI,yBAAyB,KAAK,CAAC,KAAK,EAAE,CAClE,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAQD,KAAK,CAAC,OAAO;QACX,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5D,IAAI,CAAC,YAAY;YAAE,OAAO,KAAK,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,eAAe,+BAA+B,EACjD;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,SAAS,EAAE,IAAI,CAAC,QAAQ;oBACxB,UAAU,EAAE,eAAe;oBAC3B,aAAa,EAAE,YAAY;iBAC5B,CAAC;aACH,CACF,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,KAAK,CAAC;YAC1B,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAkB,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,IAAmB;QAC1C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACzD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3D,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,EAAU;QACtB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACzD,CAAC;CACF,CAAA;AA3HY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;qCAIiC,iCAAa;GAH9C,WAAW,CA2HvB"}

package/dist/src/core/config/config.service.d.ts

@@ -4,8 +4,15 @@ export interface TappifyConfig {
     userId?: string;
     organizationId?: string;
     apiBaseUrl?: string;
-    updateCheckedAt?: number;
-    latestVersion?: string;
+    environment?: 'production' | 'staging';
+    workosClientId?: string;
+    portalUrl?: string;
+    sandboxProjectId?: string;
+    sandboxProjectName?: string;
+    updateCheckedAtStable?: number;
+    updateCheckedAtCanary?: number;
+    latestVersionStable?: string;
+    latestVersionCanary?: string;
 }
 export declare class ConfigService {
     private readonly store;
@@ -14,5 +21,7 @@ export declare class ConfigService {
     set<K extends keyof TappifyConfig>(key: K, value: TappifyConfig[K]): void;
     delete<K extends keyof TappifyConfig>(key: K): void;
     clear(): void;
+    clearAuth(): void;
+    clearEnvironmentSession(): void;
     isAuthenticated(): boolean;
 }

package/dist/src/core/config/config.service.js

@@ -20,9 +20,6 @@ let ConfigService = class ConfigService {
     constructor() {
         this.store = new conf_1.default({
             projectName: 'tappify',
-            defaults: {
-                apiBaseUrl: 'https://api.tappify.io/api/v1',
-            },
         });
     }
     get(key) {
@@ -37,6 +34,19 @@ let ConfigService = class ConfigService {
     clear() {
         this.store.clear();
     }
+    clearAuth() {
+        ['accessToken', 'refreshToken', 'userId', 'organizationId'].forEach(key => this.store.delete(key));
+    }
+    clearEnvironmentSession() {
+        [
+            'accessToken',
+            'refreshToken',
+            'userId',
+            'organizationId',
+            'sandboxProjectId',
+            'sandboxProjectName',
+        ].forEach(key => this.store.delete(key));
+    }
     isAuthenticated() {
         return !!this.store.get('accessToken');
     }

package/dist/src/core/config/config.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.service.js","sourceRoot":"","sources":["../../../../src/core/config/config.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA4C;AAC5C,gDAAwB;AAcjB,IAAM,aAAa,GAAnB,MAAM,aAAa;IACP,KAAK,CAAsB;IAE5C;QACE,IAAI,CAAC,KAAK,GAAG,IAAI,cAAI,CAAgB;YACnC,WAAW,EAAE,SAAS;YACtB,QAAQ,EAAE;gBACR,UAAU,EAAE,+BAA+B;aAC5C;SACF,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAgC,GAAM;QACvC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,GAAG,CAAgC,GAAM,EAAE,KAAuB;QAChE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,CAAgC,GAAM;QAC1C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,eAAe;QACb,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACzC,CAAC;CACF,CAAA;AA/BY,sCAAa;wBAAb,aAAa;IADzB,IAAA,mBAAU,GAAE;;GACA,aAAa,CA+BzB"}
+{"version":3,"file":"config.service.js","sourceRoot":"","sources":["../../../../src/core/config/config.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA4C;AAC5C,gDAAwB;AAqBjB,IAAM,aAAa,GAAnB,MAAM,aAAa;IACP,KAAK,CAAsB;IAE5C;QACE,IAAI,CAAC,KAAK,GAAG,IAAI,cAAI,CAAgB;YACnC,WAAW,EAAE,SAAS;SACvB,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAgC,GAAM;QACvC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,GAAG,CAAgC,GAAM,EAAE,KAAuB;QAChE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,CAAgC,GAAM;QAC1C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAOD,SAAS;QAEL,CAAC,aAAa,EAAE,cAAc,EAAE,QAAQ,EAAE,gBAAgB,CAC3D,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,uBAAuB;QAEnB;YACE,aAAa;YACb,cAAc;YACd,QAAQ;YACR,gBAAgB;YAChB,kBAAkB;YAClB,oBAAoB;SAEvB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,eAAe;QACb,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACzC,CAAC;CACF,CAAA;AApDY,sCAAa;wBAAb,aAAa;IADzB,IAAA,mBAAU,GAAE;;GACA,aAAa,CAoDzB"}