@userreason/wizard 0.1.0 → 0.2.1

package/dist/chunk-3RDJORRS.js

@@ -0,0 +1,153 @@
+import { createRequire as createWizardRequire } from 'node:module'; import { fileURLToPath as wizardFileURLToPath } from 'node:url'; import { dirname as wizardDirname } from 'node:path'; const require = createWizardRequire(import.meta.url); const __filename = wizardFileURLToPath(import.meta.url); const __dirname = wizardDirname(__filename);
+import {
+  CredentialStoreError,
+  object,
+  string,
+  uuid
+} from "./chunk-GGARVSPT.js";
+
+// src/connection.ts
+import { createHash, randomBytes } from "node:crypto";
+var BrowserConnectionUnavailable = class extends Error {
+};
+function retryableNetworkError(error) {
+  if (!(error instanceof Error)) return false;
+  const cause = error.cause;
+  const rawCode = error.code ?? cause?.code;
+  const code = typeof rawCode === "string" ? rawCode : void 0;
+  if (code && !["ECONNRESET", "ETIMEDOUT", "EAI_AGAIN", "ECONNREFUSED", "ENETUNREACH"].includes(code)) return false;
+  return error.name === "TimeoutError" || error.name === "AbortError" || error instanceof TypeError && error.message === "fetch failed";
+}
+function memoryCredentials(session = null) {
+  let value = session;
+  return {
+    load: async () => value,
+    save: async (next) => {
+      value = next;
+    },
+    clear: async () => {
+      value = null;
+    }
+  };
+}
+async function compatibilityCredentials(existing, sessionOnly, confirm) {
+  if (sessionOnly) return { credentials: memoryCredentials(), session: null, sessionOnly: true };
+  try {
+    return { credentials: existing, session: await existing.load(), sessionOnly: false };
+  } catch (error) {
+    if (!(error instanceof CredentialStoreError) || error.code === "invalid_session" || !await confirm(error)) throw error;
+    return { credentials: memoryCredentials(), session: null, sessionOnly: true };
+  }
+}
+async function connectInstallation(config, input, onBrowser, options = {}) {
+  const fetcher = options.fetcher ?? fetch, now = options.now ?? Date.now;
+  const sleep = options.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+  const discovery = await fetcher(`${config.apiUrl}/onboarding/v1/auth-config?installation=1`, {
+    redirect: "error",
+    signal: AbortSignal.timeout(1e4)
+  });
+  if (!discovery.ok) throw new Error(`Unable to discover installation login (${discovery.status})`);
+  const capabilities = object(await discovery.json(), "installation capabilities");
+  if (capabilities.client_id !== config.clientId)
+    throw new Error("Installation authentication client does not match the configured API");
+  options.onCapabilities?.({ unrestrictedOrigins: capabilities.unrestricted_origins === 1 });
+  if (capabilities.installation_login !== 1)
+    throw new BrowserConnectionUnavailable("This API uses device authentication");
+  const verifier = randomBytes(32).toString("hex"), challenge = createHash("sha256").update(verifier).digest("hex");
+  async function post(path, body, timeout = 2e4) {
+    return fetcher(`${config.apiUrl}/onboarding/v1/installations/${path}`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(body),
+      redirect: "error",
+      signal: AbortSignal.timeout(timeout)
+    });
+  }
+  const started = await post("start", {
+    challenge,
+    project_name: input.projectName,
+    workspace_id: input.workspaceId ?? null,
+    workspace_name: input.workspaceName ?? null,
+    site_id: input.siteId ?? null
+  });
+  if (started.status === 404)
+    throw new BrowserConnectionUnavailable("This API does not support browser installation yet");
+  if (!started.ok)
+    throw new Error(`Unable to start installation (${started.status}). Check the API deployment.`);
+  const data = object(await started.json(), "installation request"), id = uuid(string(data.id, "installation ID"));
+  const target = new URL(string(data.browser_url, "browser URL"));
+  const ticket = string(data.ticket, "installation ticket");
+  if (target.protocol !== "https:" && !(target.protocol === "http:" && ["localhost", "127.0.0.1", "[::1]"].includes(target.hostname)) || target.username || target.password || target.pathname !== "/install" || target.searchParams.get("id") !== id || new URLSearchParams(target.hash.slice(1)).get("request") !== ticket)
+    throw new Error("Invalid installation browser URL");
+  const expires = Date.parse(string(data.expires_at, "installation expiry"));
+  if (!Number.isFinite(expires) || expires <= now() || expires > now() + 901e3 || data.code !== challenge.slice(0, 8).toUpperCase())
+    throw new Error("Invalid installation request");
+  await onBrowser(target.href, String(data.code));
+  const waitingSince = now();
+  const deadline = Math.min(expires, waitingSince + 6e5);
+  let failures = 0, lastFailure;
+  const progress = (phase, httpStatus) => options.onProgress?.({
+    phase,
+    elapsedSeconds: Math.max(0, Math.floor((now() - waitingSince) / 1e3)),
+    consecutiveFailures: failures,
+    ...httpStatus === void 0 ? {} : { httpStatus }
+  });
+  progress("waiting");
+  while (now() < deadline) {
+    await sleep(Math.min(failures ? 5e3 : 3e3, deadline - now()));
+    if (now() >= deadline) break;
+    let response;
+    try {
+      response = await post("exchange", { id, ticket, verifier }, Math.max(1, Math.min(2e4, deadline - now())));
+    } catch (error) {
+      if (!retryableNetworkError(error)) throw error;
+      failures++;
+      lastFailure = "network connection";
+      progress("retrying");
+      continue;
+    }
+    if (response.status === 429 || response.status >= 500) {
+      failures++;
+      lastFailure = `HTTP ${response.status}`;
+      progress("retrying", response.status);
+      continue;
+    }
+    if (!response.ok)
+      throw new Error(
+        `Installation connection expired or failed (${response.status}). Run the wizard again.`
+      );
+    const result = object(await response.json(), "installation connection");
+    failures = 0;
+    lastFailure = void 0;
+    if (result.status === "pending") {
+      progress("waiting");
+      continue;
+    }
+    if (result.status !== "approved") throw new Error("Installation was declined.");
+    const user = object(result.user, "installation user"), expiry = Date.parse(string(result.expires_at, "access expiry"));
+    if (!Number.isFinite(expiry) || expiry > expires || expiry < now() + 6e4)
+      throw new Error("Installation access expired. Run the wizard again.");
+    return {
+      session: {
+        ...config,
+        accessToken: string(result.access_token, "installation token"),
+        refreshToken: "",
+        expiresAt: expiry,
+        userId: uuid(string(user.id, "user ID")),
+        email: string(user.email, "email")
+      },
+      workspaceId: result.workspace_id === null ? null : uuid(string(result.workspace_id, "workspace ID")),
+      workspaceName: result.workspace_name === null ? null : string(result.workspace_name, "workspace name"),
+      grantId: uuid(string(result.grant_id, "grant ID"))
+    };
+  }
+  if (failures) throw new Error(`Unable to confirm browser approval: the API is still failing (${lastFailure}). Run the wizard again when the connection is available.`);
+  throw new Error("Browser approval timed out. Finish sign-in and approval in the browser, then run the wizard again.");
+}
+
+export {
+  BrowserConnectionUnavailable,
+  memoryCredentials,
+  compatibilityCredentials,
+  connectInstallation
+};