@vercel/cli-auth 0.1.0 → 0.2.0

package/credentials-store.d.ts

@@ -1,59 +1,29 @@
-declare const AUTH_TOKEN_STORAGE: {
-    readonly AUTO: "auto";
-    readonly FILE: "file";
-    readonly KEYRING: "keyring";
-};
-type KeyringEntry = {
-    getPassword(): string | null;
-    setPassword(password: string): void;
-    deleteCredential(): boolean;
-};
-type KeyringEntryConstructor = new (service: string, account: string) => KeyringEntry;
-type LoadKeyringModule = () => {
-    Entry: KeyringEntryConstructor;
-};
-export type AuthTokenStorage = (typeof AUTH_TOKEN_STORAGE)[keyof typeof AUTH_TOKEN_STORAGE];
-export type CredentialsStorageLocation = Exclude<AuthTokenStorage, (typeof AUTH_TOKEN_STORAGE)['AUTO']>;
-export interface GlobalConfig {
-    authTokenStorage?: AuthTokenStorage;
-}
-export interface Credentials {
+import { z } from 'zod/mini';
+declare const Credentials: z.ZodMiniObject<{
     /** An `access_token` obtained using the OAuth Device Authorization flow. */
-    token?: string;
+    token: z.ZodMiniOptional<z.ZodMiniString<string>>;
     /** A `refresh_token` obtained using the OAuth Device Authorization flow. */
-    refreshToken?: string;
+    refreshToken: z.ZodMiniOptional<z.ZodMiniString<string>>;
     /**
      * The absolute time (seconds) when the {@link Credentials.token} expires.
      * Used to optimistically check if the token is still valid.
      */
-    expiresAt?: number;
+    expiresAt: z.ZodMiniOptional<z.ZodMiniNumber<number>>;
     /** Whether to skip writing the credentials to disk during {@link CredentialsStore.update} */
-    skipWrite?: boolean;
-    '// Note'?: string;
-    '// Docs'?: string;
-}
-export declare function hasCredentials(credentials: Partial<Credentials>): boolean;
-export declare function resolveAuthTokenStorage(value: unknown): AuthTokenStorage;
+    skipWrite: z.ZodMiniOptional<z.ZodMiniBoolean<boolean>>;
+    '// Note': z.ZodMiniOptional<z.ZodMiniString<string>>;
+    '// Docs': z.ZodMiniOptional<z.ZodMiniString<string>>;
+}, z.core.$strip>;
+export type Credentials = z.infer<typeof Credentials>;
 /**
  * Returns in which directory the config should be present
  * @internal Should only be used in {@link CredentialsStore} or tests.
  */
-export declare function getGlobalPathConfig(appName: string): string;
-export declare function getConfigFilePath(dir: string): string;
-export declare function getAuthConfigFilePath(dir: string): string;
-export declare function readGlobalConfig(dir: string): GlobalConfig;
-export declare function getAuthTokenStorage(dir: string, config?: GlobalConfig): AuthTokenStorage;
-export declare function setLoadKeyringModuleForTesting(nextLoadKeyringModule?: LoadKeyringModule): void;
-export declare function CredentialsStore(dir: string, config?: GlobalConfig): {
+export declare function getGlobalPathConfig(dir: string): string;
+export declare function CredentialsStore(dir: string): {
     configPath: string;
     get(): Credentials;
     /** Update the credentials store. If `skipWrite` is set, the update will be skipped. */
-    update(config: Partial<Credentials>): CredentialsStorageLocation | void;
-    delete(): void;
+    update(config: Partial<Credentials>): void;
 };
-export declare function readCredentials(dir: string, config?: GlobalConfig): Credentials;
-export declare function writeCredentials(dir: string, credentials: Partial<Credentials>, config?: GlobalConfig): void | CredentialsStorageLocation;
-export declare function clearCredentials(dir: string, config?: GlobalConfig): void;
-export declare function clearAllCredentials(dir: string): void;
-export declare function clearAllCredentialsStrict(dir: string): void;
 export {};

package/credentials-store.js

@@ -36,78 +36,30 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.hasCredentials = hasCredentials;
-exports.resolveAuthTokenStorage = resolveAuthTokenStorage;
 exports.getGlobalPathConfig = getGlobalPathConfig;
-exports.getConfigFilePath = getConfigFilePath;
-exports.getAuthConfigFilePath = getAuthConfigFilePath;
-exports.readGlobalConfig = readGlobalConfig;
-exports.getAuthTokenStorage = getAuthTokenStorage;
-exports.setLoadKeyringModuleForTesting = setLoadKeyringModuleForTesting;
 exports.CredentialsStore = CredentialsStore;
-exports.readCredentials = readCredentials;
-exports.writeCredentials = writeCredentials;
-exports.clearCredentials = clearCredentials;
-exports.clearAllCredentials = clearAllCredentials;
-exports.clearAllCredentialsStrict = clearAllCredentialsStrict;
 const node_path_1 = __importDefault(require("node:path"));
-const node_crypto_1 = require("node:crypto");
 const fs = __importStar(require("node:fs"));
 const node_os_1 = require("node:os");
 // NOTE: We are pinned on v5 because newer versions behave differently
 // when there are dots in the application name, eg. `com.vercel.cli` becomes `com.vercel`
 const xdg_app_paths_1 = __importDefault(require("xdg-app-paths"));
-// Avoid exposing zod v4 types to TS 4.9 workspace consumers during type-check.
-const { z } = require('zod/mini');
-const AUTH_TOKEN_STORAGE = {
-    AUTO: 'auto',
-    FILE: 'file',
-    KEYRING: 'keyring',
-};
-const AUTH_TOKEN_STORAGE_VALUES = Object.values(AUTH_TOKEN_STORAGE);
-const DEFAULT_AUTH_TOKEN_STORAGE = AUTH_TOKEN_STORAGE.FILE;
-const KEYRING_SERVICE = 'Vercel Auth';
-const KEYRING_UNAVAILABLE_ERROR = 'OS keyring support is unavailable. Set `authTokenStorage` to `auto` or `file` to store credentials in auth.json instead.';
-const defaultLoadKeyringModule = () => require('@napi-rs/keyring');
-let loadKeyringModule = defaultLoadKeyringModule;
-const CredentialsSchema = z.object({
+const mini_1 = require("zod/mini");
+const Credentials = mini_1.z.object({
     /** An `access_token` obtained using the OAuth Device Authorization flow. */
-    token: z.optional(z.string()),
-    /** The ID of the currently authenticated user, cached from `/v2/user`. */
-    userId: z.optional(z.string()),
+    token: mini_1.z.optional(mini_1.z.string()),
     /** A `refresh_token` obtained using the OAuth Device Authorization flow. */
-    refreshToken: z.optional(z.string()),
+    refreshToken: mini_1.z.optional(mini_1.z.string()),
     /**
      * The absolute time (seconds) when the {@link Credentials.token} expires.
      * Used to optimistically check if the token is still valid.
      */
-    expiresAt: z.optional(z.number()),
+    expiresAt: mini_1.z.optional(mini_1.z.number()),
     /** Whether to skip writing the credentials to disk during {@link CredentialsStore.update} */
-    skipWrite: z.optional(z.boolean()),
-    '// Note': z.optional(z.string()),
-    '// Docs': z.optional(z.string()),
+    skipWrite: mini_1.z.optional(mini_1.z.boolean()),
+    '// Note': mini_1.z.optional(mini_1.z.string()),
+    '// Docs': mini_1.z.optional(mini_1.z.string()),
 });
-function hasCredentials(credentials) {
-    return Boolean(credentials.token ||
-        credentials.refreshToken ||
-        typeof credentials.expiresAt === 'number');
-}
-function parseCredentials(value) {
-    return CredentialsSchema.parse(value);
-}
-function isAuthTokenStorage(value) {
-    return (typeof value === 'string' &&
-        AUTH_TOKEN_STORAGE_VALUES.some(storage => storage === value));
-}
-function resolveAuthTokenStorage(value) {
-    if (typeof value === 'undefined') {
-        return DEFAULT_AUTH_TOKEN_STORAGE;
-    }
-    if (isAuthTokenStorage(value)) {
-        return value;
-    }
-    throw new Error(`Invalid value for \`authTokenStorage\`: ${JSON.stringify(value)}. Expected one of: ${AUTH_TOKEN_STORAGE_VALUES.map(storage => JSON.stringify(storage)).join(', ')}.`);
-}
 /** Returns whether a directory exists */
 function isDirectory(path) {
     try {
@@ -122,8 +74,8 @@ function isDirectory(path) {
  * Returns in which directory the config should be present
  * @internal Should only be used in {@link CredentialsStore} or tests.
  */
-function getGlobalPathConfig(appName) {
-    const vercelDirectories = (0, xdg_app_paths_1.default)(appName).dataDirs();
+function getGlobalPathConfig(dir) {
+    const vercelDirectories = (0, xdg_app_paths_1.default)(dir).dataDirs();
     const possibleConfigPaths = [
         ...vercelDirectories, // latest vercel directory
         node_path_1.default.join((0, node_os_1.homedir)(), '.now'), // legacy config in user's home directory
@@ -136,315 +88,21 @@ function getGlobalPathConfig(appName) {
     return (possibleConfigPaths.find(configPath => isDirectory(configPath)) ||
         vercelDirectories[0]);
 }
-function getConfigFilePath(dir) {
-    return node_path_1.default.join(dir, 'config.json');
-}
-function getAuthConfigFilePath(dir) {
-    return node_path_1.default.join(dir, 'auth.json');
-}
-function readGlobalConfig(dir) {
-    const configPath = getConfigFilePath(dir);
-    let config;
-    try {
-        config = JSON.parse(fs.readFileSync(configPath, 'utf8'));
-    }
-    catch (error) {
-        if (isENOENTError(error)) {
-            return {};
-        }
-        throw error;
-    }
-    return {
-        authTokenStorage: typeof config.authTokenStorage === 'undefined'
-            ? undefined
-            : resolveAuthTokenStorage(config.authTokenStorage),
-    };
-}
-function getAuthTokenStorage(dir, config) {
-    if (config?.authTokenStorage) {
-        return resolveAuthTokenStorage(config.authTokenStorage);
-    }
-    return resolveAuthTokenStorage(readGlobalConfig(dir).authTokenStorage);
-}
-function getKeyringAccount(configPath) {
-    const digest = (0, node_crypto_1.createHash)('sha256').update(configPath).digest('hex');
-    return `cli:${digest.slice(0, 16)}`;
-}
-function setLoadKeyringModuleForTesting(nextLoadKeyringModule) {
-    loadKeyringModule = nextLoadKeyringModule ?? defaultLoadKeyringModule;
-}
-function createKeyringEntry(configPath) {
-    try {
-        const { Entry } = loadKeyringModule();
-        return new Entry(KEYRING_SERVICE, getKeyringAccount(configPath));
-    }
-    catch (error) {
-        const wrappedError = new Error(KEYRING_UNAVAILABLE_ERROR);
-        wrappedError.cause = error;
-        throw wrappedError;
-    }
-}
-function isKeyringUnavailableError(error) {
-    return error instanceof Error && error.message === KEYRING_UNAVAILABLE_ERROR;
-}
-function readCredentialsFromFile(configPath) {
-    return parseCredentials(JSON.parse(fs.readFileSync(configPath, 'utf8')));
-}
-function isENOENTError(error) {
-    return (typeof error === 'object' &&
-        error !== null &&
-        'code' in error &&
-        error.code === 'ENOENT');
-}
-function createMissingCredentialsError(configPath) {
-    const error = new Error(`ENOENT: no such file or directory, open '${configPath}'`);
-    Object.assign(error, { code: 'ENOENT' });
-    return error;
-}
-function writeCredentialsToFile(configPath, config) {
-    const directory = node_path_1.default.dirname(configPath);
-    const temporaryPath = node_path_1.default.join(directory, `${node_path_1.default.basename(configPath)}.${process.pid}.${(0, node_crypto_1.randomUUID)()}.tmp`);
-    fs.mkdirSync(node_path_1.default.dirname(configPath), { recursive: true });
-    try {
-        fs.writeFileSync(temporaryPath, JSON.stringify(config, null, 2) + '\n', {
-            mode: 0o600,
-        });
-        fs.renameSync(temporaryPath, configPath);
-    }
-    catch (error) {
-        fs.rmSync(temporaryPath, { force: true });
-        throw error;
-    }
-}
-function readCredentialsFromKeyring(configPath) {
-    const entry = createKeyringEntry(configPath);
-    const value = entry.getPassword();
-    if (value === null) {
-        return null;
-    }
-    return parseCredentials(JSON.parse(value));
-}
-function writeCredentialsToKeyring(configPath, config) {
-    const entry = createKeyringEntry(configPath);
-    entry.setPassword(JSON.stringify(config));
-}
-function deleteCredentialsFromKeyring(configPath) {
-    const entry = createKeyringEntry(configPath);
-    return entry.deleteCredential();
-}
-function deleteCredentialsFile(configPath) {
-    fs.rmSync(configPath, { force: true });
-}
-function tryDeleteCredentialsFromKeyring(configPath) {
-    try {
-        deleteCredentialsFromKeyring(configPath);
-    }
-    catch { }
-}
-function deleteCredentialsFromKeyringIfAvailable(configPath) {
-    try {
-        deleteCredentialsFromKeyring(configPath);
-    }
-    catch (error) {
-        if (!isKeyringUnavailableError(error)) {
-            throw error;
-        }
-    }
-}
-function migrateCredentialsToFile(configPath, credentials) {
-    writeCredentialsToFile(configPath, credentials);
-    tryDeleteCredentialsFromKeyring(configPath);
-    return credentials;
-}
-function tryReadKeyringCredentialsIntoFile(configPath) {
-    try {
-        const credentials = readCredentialsFromKeyring(configPath);
-        if (credentials === null) {
-            return null;
-        }
-        return migrateCredentialsToFile(configPath, credentials);
-    }
-    catch {
-        return null;
-    }
-}
-function readFileStorageCredentials(configPath) {
-    try {
-        const credentials = readCredentialsFromFile(configPath);
-        if (hasCredentials(credentials)) {
-            return credentials;
-        }
-        // File mode treats keyring contents as stale-but-authoritative backup only
-        // when auth.json has no usable credentials.
-        return tryReadKeyringCredentialsIntoFile(configPath) ?? credentials;
-    }
-    catch (error) {
-        if (!isENOENTError(error)) {
-            throw error;
-        }
-        const credentials = tryReadKeyringCredentialsIntoFile(configPath);
-        if (credentials !== null) {
-            return credentials;
-        }
-        throw error;
-    }
-}
-function migrateCredentialsToKeyring(configPath, credentials) {
-    writeCredentialsToKeyring(configPath, credentials);
-    deleteCredentialsFile(configPath);
-    return credentials;
-}
-function readKeyringStorageCredentials(configPath) {
-    const credentials = readCredentialsFromKeyring(configPath);
-    if (credentials !== null) {
-        return credentials;
-    }
-    try {
-        const fileCredentials = readCredentialsFromFile(configPath);
-        // Keyring mode eagerly migrates any remaining plaintext credentials out of
-        // auth.json after the first successful read.
-        return migrateCredentialsToKeyring(configPath, fileCredentials);
-    }
-    catch (error) {
-        if (isENOENTError(error)) {
-            throw createMissingCredentialsError(configPath);
-        }
-        throw error;
-    }
-}
-function readAutoStorageCredentials(configPath) {
-    try {
-        const credentials = readCredentialsFromKeyring(configPath);
-        if (credentials !== null) {
-            return credentials;
-        }
-    }
-    catch { }
-    // Auto mode intentionally avoids read-time migration so that machines
-    // without usable keyring support can keep working off auth.json.
-    return readCredentialsFromFile(configPath);
-}
-function writeFileStorageCredentials(configPath, credentials) {
-    writeCredentialsToFile(configPath, credentials);
-    tryDeleteCredentialsFromKeyring(configPath);
-    return 'file';
-}
-function writeKeyringStorageCredentials(configPath, credentials) {
-    writeCredentialsToKeyring(configPath, credentials);
-    deleteCredentialsFile(configPath);
-    return 'keyring';
-}
-function writeAutoStorageCredentials(configPath, credentials) {
-    try {
-        return writeKeyringStorageCredentials(configPath, credentials);
-    }
-    catch {
-        tryDeleteCredentialsFromKeyring(configPath);
-        return writeFileStorageCredentials(configPath, credentials);
-    }
-}
-function deleteFileStorageCredentials(configPath) {
-    deleteCredentialsFile(configPath);
-    deleteCredentialsFromKeyringIfAvailable(configPath);
-}
-function deleteKeyringStorageCredentials(configPath) {
-    deleteCredentialsFromKeyring(configPath);
-    deleteCredentialsFile(configPath);
-}
-function deleteAutoStorageCredentials(configPath) {
-    try {
-        deleteCredentialsFromKeyring(configPath);
-    }
-    catch { }
-    deleteCredentialsFile(configPath);
-}
-function CredentialsStore(dir, config = {}) {
-    const configPath = getAuthConfigFilePath(dir);
-    const tokenStorage = getAuthTokenStorage(dir, config);
+function CredentialsStore(dir) {
+    const configPath = node_path_1.default.join(getGlobalPathConfig(dir), 'auth.json');
     return {
         configPath,
         get() {
-            switch (tokenStorage) {
-                case AUTH_TOKEN_STORAGE.FILE:
-                    return readFileStorageCredentials(configPath);
-                case AUTH_TOKEN_STORAGE.KEYRING:
-                    return readKeyringStorageCredentials(configPath);
-                case AUTH_TOKEN_STORAGE.AUTO:
-                    return readAutoStorageCredentials(configPath);
-            }
+            return Credentials.parse(JSON.parse(fs.readFileSync(configPath, 'utf8')));
         },
         /** Update the credentials store. If `skipWrite` is set, the update will be skipped. */
         update(config) {
             if (config.skipWrite)
                 return;
-            const parsedConfig = parseCredentials(config);
-            switch (tokenStorage) {
-                case AUTH_TOKEN_STORAGE.FILE:
-                    return writeFileStorageCredentials(configPath, parsedConfig);
-                case AUTH_TOKEN_STORAGE.KEYRING:
-                    return writeKeyringStorageCredentials(configPath, parsedConfig);
-                case AUTH_TOKEN_STORAGE.AUTO:
-                    return writeAutoStorageCredentials(configPath, parsedConfig);
-            }
-        },
-        delete() {
-            switch (tokenStorage) {
-                case AUTH_TOKEN_STORAGE.FILE:
-                    deleteFileStorageCredentials(configPath);
-                    break;
-                case AUTH_TOKEN_STORAGE.KEYRING:
-                    deleteKeyringStorageCredentials(configPath);
-                    break;
-                case AUTH_TOKEN_STORAGE.AUTO:
-                    deleteAutoStorageCredentials(configPath);
-                    break;
-            }
+            const parsedConfig = Credentials.parse(config);
+            fs.mkdirSync(node_path_1.default.dirname(configPath), { recursive: true });
+            fs.writeFileSync(configPath, JSON.stringify(parsedConfig, null, 2) + '\n', { mode: 0o600 });
         },
     };
 }
-function readCredentials(dir, config = {}) {
-    return CredentialsStore(dir, config).get();
-}
-function writeCredentials(dir, credentials, config = {}) {
-    return CredentialsStore(dir, config).update(credentials);
-}
-function clearCredentials(dir, config = {}) {
-    CredentialsStore(dir, config).delete();
-}
-function clearAllCredentials(dir) {
-    for (const authTokenStorage of [
-        AUTH_TOKEN_STORAGE.FILE,
-        AUTH_TOKEN_STORAGE.KEYRING,
-    ]) {
-        try {
-            clearCredentials(dir, { authTokenStorage });
-        }
-        catch { }
-    }
-}
-function clearAllCredentialsStrict(dir) {
-    const configPath = getAuthConfigFilePath(dir);
-    let fileError;
-    let keyringError;
-    try {
-        deleteCredentialsFile(configPath);
-    }
-    catch (error) {
-        fileError = error;
-    }
-    try {
-        deleteCredentialsFromKeyring(configPath);
-    }
-    catch (error) {
-        if (!isKeyringUnavailableError(error)) {
-            keyringError = error;
-        }
-    }
-    if (keyringError) {
-        throw keyringError;
-    }
-    if (fileError) {
-        throw fileError;
-    }
-}
 //# sourceMappingURL=credentials-store.js.map

package/credentials-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"credentials-store.js","sourceRoot":"","sources":["credentials-store.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyFA,wCAMC;AAaD,0DAcC;AAgBD,kDAiBC;AAED,8CAEC;AAED,sDAEC;AAED,4CAwBC;AAED,kDASC;AAOD,wEAIC;AAsPD,4CA2CC;AAED,0CAEC;AAED,4CAMC;AAED,4CAEC;AAED,kDASC;AAED,8DA2BC;AA5iBD,0DAA6B;AAC7B,6CAAqD;AACrD,4CAA8B;AAC9B,qCAAkC;AAClC,sEAAsE;AACtE,yFAAyF;AACzF,kEAAwC;AAExC,+EAA+E;AAC/E,MAAM,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,UAAU,CAAe,CAAC;AAEhD,MAAM,kBAAkB,GAAG;IACzB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,SAAS;CACV,CAAC;AACX,MAAM,yBAAyB,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;AACpE,MAAM,0BAA0B,GAAG,kBAAkB,CAAC,IAAI,CAAC;AAC3D,MAAM,eAAe,GAAG,aAAa,CAAC;AACtC,MAAM,yBAAyB,GAC7B,0HAA0H,CAAC;AAiB7H,MAAM,wBAAwB,GAAsB,GAAG,EAAE,CACvD,OAAO,CAAC,kBAAkB,CAEzB,CAAC;AAEJ,IAAI,iBAAiB,GAAG,wBAAwB,CAAC;AAajD,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,4EAA4E;IAC5E,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7B,0EAA0E;IAC1E,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC9B,4EAA4E;IAC5E,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACpC;;;OAGG;IACH,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,6FAA6F;IAC7F,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAClC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAClC,CAAC,CAAC;AAkBH,SAAgB,cAAc,CAAC,WAAiC;IAC9D,OAAO,OAAO,CACZ,WAAW,CAAC,KAAK;QACf,WAAW,CAAC,YAAY;QACxB,OAAO,WAAW,CAAC,SAAS,KAAK,QAAQ,CAC5C,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAgB,CAAC;AACvD,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,KAAK,KAAK,CAAC,CAC7D,CAAC;AACJ,CAAC;AAED,SAAgB,uBAAuB,CAAC,KAAc;IACpD,IAAI,OAAO,KAAK,KAAK,WAAW,EAAE,CAAC;QACjC,OAAO,0BAA0B,CAAC;IACpC,CAAC;IAED,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,IAAI,KAAK,CACb,2CAA2C,IAAI,CAAC,SAAS,CACvD,KAAK,CACN,sBAAsB,yBAAyB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACvG,CAAC;AACJ,CAAC;AAED,yCAAyC;AACzC,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,0EAA0E;QAC1E,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,OAAe;IACjD,MAAM,iBAAiB,GAAG,IAAA,uBAAW,EAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IAE1D,MAAM,mBAAmB,GAAG;QAC1B,GAAG,iBAAiB,EAAE,0BAA0B;QAChD,mBAAI,CAAC,IAAI,CAAC,IAAA,iBAAO,GAAE,EAAE,MAAM,CAAC,EAAE,yCAAyC;QACvE,GAAG,IAAA,uBAAW,EAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,uBAAuB;KAC1D,CAAC;IAEF,iDAAiD;IACjD,oCAAoC;IACpC,iCAAiC;IACjC,oDAAoD;IACpD,OAAO,CACL,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC/D,iBAAiB,CAAC,CAAC,CAAC,CACrB,CAAC;AACJ,CAAC;AAED,SAAgB,iBAAiB,CAAC,GAAW;IAC3C,OAAO,mBAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;AACvC,CAAC;AAED,SAAgB,qBAAqB,CAAC,GAAW;IAC/C,OAAO,mBAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;AACrC,CAAC;AAED,SAAgB,gBAAgB,CAAC,GAAW;IAC1C,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,MAEH,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAEtD,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;IAED,OAAO;QACL,gBAAgB,EACd,OAAO,MAAM,CAAC,gBAAgB,KAAK,WAAW;YAC5C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,gBAAgB,CAAC;KACvD,CAAC;AACJ,CAAC;AAED,SAAgB,mBAAmB,CACjC,GAAW,EACX,MAAqB;IAErB,IAAI,MAAM,EAAE,gBAAgB,EAAE,CAAC;QAC7B,OAAO,uBAAuB,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,uBAAuB,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAkB;IAC3C,MAAM,MAAM,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrE,OAAO,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,SAAgB,8BAA8B,CAC5C,qBAAyC;IAEzC,iBAAiB,GAAG,qBAAqB,IAAI,wBAAwB,CAAC;AACxE,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAkB;IAC5C,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,GAAG,iBAAiB,EAAE,CAAC;QAEtC,OAAO,IAAI,KAAK,CAAC,eAAe,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACzD,YAA4C,CAAC,KAAK,GAAG,KAAK,CAAC;QAC5D,MAAM,YAAY,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAC/C,OAAO,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,yBAAyB,CAAC;AAC/E,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAkB;IACjD,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACf,KAAK,CAAC,IAAI,KAAK,QAAQ,CACxB,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CAAC,UAAkB;IACvD,MAAM,KAAK,GAAG,IAAI,KAAK,CACrB,4CAA4C,UAAU,GAAG,CAC1D,CAAC;IACF,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAkB,EAAE,MAAmB;IACrE,MAAM,SAAS,GAAG,mBAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,aAAa,GAAG,mBAAI,CAAC,IAAI,CAC7B,SAAS,EACT,GAAG,mBAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,IAAA,wBAAU,GAAE,MAAM,CAClE,CAAC;IAEF,EAAE,CAAC,SAAS,CAAC,mBAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5D,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;YACtE,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,EAAE,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,UAAkB;IACpD,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAElC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,yBAAyB,CAChC,UAAkB,EAClB,MAAmB;IAEnB,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC7C,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,4BAA4B,CAAC,UAAkB;IACtD,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC,gBAAgB,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,qBAAqB,CAAC,UAAkB;IAC/C,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,+BAA+B,CAAC,UAAkB;IACzD,IAAI,CAAC;QACH,4BAA4B,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;AACZ,CAAC;AAED,SAAS,uCAAuC,CAAC,UAAkB;IACjE,IAAI,CAAC;QACH,4BAA4B,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAC/B,UAAkB,EAClB,WAAwB;IAExB,sBAAsB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAChD,+BAA+B,CAAC,UAAU,CAAC,CAAC;IAC5C,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,iCAAiC,CACxC,UAAkB;IAElB,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,0BAA0B,CAAC,UAAU,CAAC,CAAC;QAE3D,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,wBAAwB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,UAAkB;IACpD,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;QAExD,IAAI,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,2EAA2E;QAC3E,4CAA4C;QAC5C,OAAO,iCAAiC,CAAC,UAAU,CAAC,IAAI,WAAW,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,WAAW,GAAG,iCAAiC,CAAC,UAAU,CAAC,CAAC;QAElE,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CAClC,UAAkB,EAClB,WAAwB;IAExB,yBAAyB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACnD,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAClC,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,6BAA6B,CAAC,UAAkB;IACvD,MAAM,WAAW,GAAG,0BAA0B,CAAC,UAAU,CAAC,CAAC;IAE3D,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;QAE5D,2EAA2E;QAC3E,6CAA6C;QAC7C,OAAO,2BAA2B,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,6BAA6B,CAAC,UAAU,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,UAAkB;IACpD,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,0BAA0B,CAAC,UAAU,CAAC,CAAC;QAE3D,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAEV,sEAAsE;IACtE,iEAAiE;IACjE,OAAO,uBAAuB,CAAC,UAAU,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,2BAA2B,CAClC,UAAkB,EAClB,WAAwB;IAExB,sBAAsB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAChD,+BAA+B,CAAC,UAAU,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,8BAA8B,CACrC,UAAkB,EAClB,WAAwB;IAExB,yBAAyB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACnD,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAClC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,2BAA2B,CAClC,UAAkB,EAClB,WAAwB;IAExB,IAAI,CAAC;QACH,OAAO,8BAA8B,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,+BAA+B,CAAC,UAAU,CAAC,CAAC;QAC5C,OAAO,2BAA2B,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CAAC,UAAkB;IACtD,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAClC,uCAAuC,CAAC,UAAU,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,+BAA+B,CAAC,UAAkB;IACzD,4BAA4B,CAAC,UAAU,CAAC,CAAC;IACzC,qBAAqB,CAAC,UAAU,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,4BAA4B,CAAC,UAAkB;IACtD,IAAI,CAAC;QACH,4BAA4B,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,qBAAqB,CAAC,UAAU,CAAC,CAAC;AACpC,CAAC;AAED,SAAgB,gBAAgB,CAAC,GAAW,EAAE,SAAuB,EAAE;IACrE,MAAM,UAAU,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,YAAY,GAAG,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAEtD,OAAO;QACL,UAAU;QACV,GAAG;YACD,QAAQ,YAAY,EAAE,CAAC;gBACrB,KAAK,kBAAkB,CAAC,IAAI;oBAC1B,OAAO,0BAA0B,CAAC,UAAU,CAAC,CAAC;gBAChD,KAAK,kBAAkB,CAAC,OAAO;oBAC7B,OAAO,6BAA6B,CAAC,UAAU,CAAC,CAAC;gBACnD,KAAK,kBAAkB,CAAC,IAAI;oBAC1B,OAAO,0BAA0B,CAAC,UAAU,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QACD,uFAAuF;QACvF,MAAM,CAAC,MAA4B;YACjC,IAAI,MAAM,CAAC,SAAS;gBAAE,OAAO;YAC7B,MAAM,YAAY,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC9C,QAAQ,YAAY,EAAE,CAAC;gBACrB,KAAK,kBAAkB,CAAC,IAAI;oBAC1B,OAAO,2BAA2B,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;gBAC/D,KAAK,kBAAkB,CAAC,OAAO;oBAC7B,OAAO,8BAA8B,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;gBAClE,KAAK,kBAAkB,CAAC,IAAI;oBAC1B,OAAO,2BAA2B,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QACD,MAAM;YACJ,QAAQ,YAAY,EAAE,CAAC;gBACrB,KAAK,kBAAkB,CAAC,IAAI;oBAC1B,4BAA4B,CAAC,UAAU,CAAC,CAAC;oBACzC,MAAM;gBACR,KAAK,kBAAkB,CAAC,OAAO;oBAC7B,+BAA+B,CAAC,UAAU,CAAC,CAAC;oBAC5C,MAAM;gBACR,KAAK,kBAAkB,CAAC,IAAI;oBAC1B,4BAA4B,CAAC,UAAU,CAAC,CAAC;oBACzC,MAAM;YACV,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAgB,eAAe,CAAC,GAAW,EAAE,SAAuB,EAAE;IACpE,OAAO,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC;AAC7C,CAAC;AAED,SAAgB,gBAAgB,CAC9B,GAAW,EACX,WAAiC,EACjC,SAAuB,EAAE;IAEzB,OAAO,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC3D,CAAC;AAED,SAAgB,gBAAgB,CAAC,GAAW,EAAE,SAAuB,EAAE;IACrE,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;AACzC,CAAC;AAED,SAAgB,mBAAmB,CAAC,GAAW;IAC7C,KAAK,MAAM,gBAAgB,IAAI;QAC7B,kBAAkB,CAAC,IAAI;QACvB,kBAAkB,CAAC,OAAO;KAClB,EAAE,CAAC;QACX,IAAI,CAAC;YACH,gBAAgB,CAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAgB,yBAAyB,CAAC,GAAW;IACnD,MAAM,UAAU,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAE9C,IAAI,SAAkB,CAAC;IACvB,IAAI,YAAqB,CAAC;IAE1B,IAAI,CAAC;QACH,qBAAqB,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,SAAS,GAAG,KAAK,CAAC;IACpB,CAAC;IAED,IAAI,CAAC;QACH,4BAA4B,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,YAAY,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IAED,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,YAAY,CAAC;IACrB,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,SAAS,CAAC;IAClB,CAAC;AACH,CAAC"}
+{"version":3,"file":"credentials-store.js","sourceRoot":"","sources":["credentials-store.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwCA,kDAiBC;AAED,4CAmBC;AA9ED,0DAA6B;AAC7B,4CAA8B;AAC9B,qCAAkC;AAClC,sEAAsE;AACtE,yFAAyF;AACzF,kEAAwC;AACxC,mCAA6B;AAE7B,MAAM,WAAW,GAAG,QAAC,CAAC,MAAM,CAAC;IAC3B,4EAA4E;IAC5E,KAAK,EAAE,QAAC,CAAC,QAAQ,CAAC,QAAC,CAAC,MAAM,EAAE,CAAC;IAC7B,4EAA4E;IAC5E,YAAY,EAAE,QAAC,CAAC,QAAQ,CAAC,QAAC,CAAC,MAAM,EAAE,CAAC;IACpC;;;OAGG;IACH,SAAS,EAAE,QAAC,CAAC,QAAQ,CAAC,QAAC,CAAC,MAAM,EAAE,CAAC;IACjC,6FAA6F;IAC7F,SAAS,EAAE,QAAC,CAAC,QAAQ,CAAC,QAAC,CAAC,OAAO,EAAE,CAAC;IAClC,SAAS,EAAE,QAAC,CAAC,QAAQ,CAAC,QAAC,CAAC,MAAM,EAAE,CAAC;IACjC,SAAS,EAAE,QAAC,CAAC,QAAQ,CAAC,QAAC,CAAC,MAAM,EAAE,CAAC;CAClC,CAAC,CAAC;AAIH,yCAAyC;AACzC,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,0EAA0E;QAC1E,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,GAAW;IAC7C,MAAM,iBAAiB,GAAG,IAAA,uBAAW,EAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;IAEtD,MAAM,mBAAmB,GAAG;QAC1B,GAAG,iBAAiB,EAAE,0BAA0B;QAChD,mBAAI,CAAC,IAAI,CAAC,IAAA,iBAAO,GAAE,EAAE,MAAM,CAAC,EAAE,yCAAyC;QACvE,GAAG,IAAA,uBAAW,EAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,uBAAuB;KAC1D,CAAC;IAEF,iDAAiD;IACjD,oCAAoC;IACpC,iCAAiC;IACjC,oDAAoD;IACpD,OAAO,CACL,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC/D,iBAAiB,CAAC,CAAC,CAAC,CACrB,CAAC;AACJ,CAAC;AAED,SAAgB,gBAAgB,CAAC,GAAW;IAC1C,MAAM,UAAU,GAAG,mBAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC;IACpE,OAAO;QACL,UAAU;QACV,GAAG;YACD,OAAO,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5E,CAAC;QACD,uFAAuF;QACvF,MAAM,CAAC,MAA4B;YACjC,IAAI,MAAM,CAAC,SAAS;gBAAE,OAAO;YAC7B,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC/C,EAAE,CAAC,SAAS,CAAC,mBAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,EAAE,CAAC,aAAa,CACd,UAAU,EACV,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAC5C,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/credentials-store.ts

@@ -1,63 +1,14 @@
 import path from 'node:path';
-import { createHash, randomUUID } from 'node:crypto';
 import * as fs from 'node:fs';
 import { homedir } from 'node:os';
 // NOTE: We are pinned on v5 because newer versions behave differently
 // when there are dots in the application name, eg. `com.vercel.cli` becomes `com.vercel`
 import XDGAppPaths from 'xdg-app-paths';
+import { z } from 'zod/mini';
 
-// Avoid exposing zod v4 types to TS 4.9 workspace consumers during type-check.
-const { z } = require('zod/mini') as { z: any };
-
-const AUTH_TOKEN_STORAGE = {
-  AUTO: 'auto',
-  FILE: 'file',
-  KEYRING: 'keyring',
-} as const;
-const AUTH_TOKEN_STORAGE_VALUES = Object.values(AUTH_TOKEN_STORAGE);
-const DEFAULT_AUTH_TOKEN_STORAGE = AUTH_TOKEN_STORAGE.FILE;
-const KEYRING_SERVICE = 'Vercel Auth';
-const KEYRING_UNAVAILABLE_ERROR =
-  'OS keyring support is unavailable. Set `authTokenStorage` to `auto` or `file` to store credentials in auth.json instead.';
-
-type KeyringEntry = {
-  getPassword(): string | null;
-  setPassword(password: string): void;
-  deleteCredential(): boolean;
-};
-
-type KeyringEntryConstructor = new (
-  service: string,
-  account: string
-) => KeyringEntry;
-
-type LoadKeyringModule = () => {
-  Entry: KeyringEntryConstructor;
-};
-
-const defaultLoadKeyringModule: LoadKeyringModule = () =>
-  require('@napi-rs/keyring') as {
-    Entry: KeyringEntryConstructor;
-  };
-
-let loadKeyringModule = defaultLoadKeyringModule;
-
-export type AuthTokenStorage =
-  (typeof AUTH_TOKEN_STORAGE)[keyof typeof AUTH_TOKEN_STORAGE];
-export type CredentialsStorageLocation = Exclude<
-  AuthTokenStorage,
-  (typeof AUTH_TOKEN_STORAGE)['AUTO']
->;
-
-export interface GlobalConfig {
-  authTokenStorage?: AuthTokenStorage;
-}
-
-const CredentialsSchema = z.object({
+const Credentials = z.object({
   /** An `access_token` obtained using the OAuth Device Authorization flow. */
   token: z.optional(z.string()),
-  /** The ID of the currently authenticated user, cached from `/v2/user`. */
-  userId: z.optional(z.string()),
   /** A `refresh_token` obtained using the OAuth Device Authorization flow. */
   refreshToken: z.optional(z.string()),
   /**
@@ -71,56 +22,7 @@ const CredentialsSchema = z.object({
   '// Docs': z.optional(z.string()),
 });
 
-export interface Credentials {
-  /** An `access_token` obtained using the OAuth Device Authorization flow. */
-  token?: string;
-  /** A `refresh_token` obtained using the OAuth Device Authorization flow. */
-  refreshToken?: string;
-  /**
-   * The absolute time (seconds) when the {@link Credentials.token} expires.
-   * Used to optimistically check if the token is still valid.
-   */
-  expiresAt?: number;
-  /** Whether to skip writing the credentials to disk during {@link CredentialsStore.update} */
-  skipWrite?: boolean;
-  '// Note'?: string;
-  '// Docs'?: string;
-}
-
-export function hasCredentials(credentials: Partial<Credentials>): boolean {
-  return Boolean(
-    credentials.token ||
-      credentials.refreshToken ||
-      typeof credentials.expiresAt === 'number'
-  );
-}
-
-function parseCredentials(value: unknown): Credentials {
-  return CredentialsSchema.parse(value) as Credentials;
-}
-
-function isAuthTokenStorage(value: unknown): value is AuthTokenStorage {
-  return (
-    typeof value === 'string' &&
-    AUTH_TOKEN_STORAGE_VALUES.some(storage => storage === value)
-  );
-}
-
-export function resolveAuthTokenStorage(value: unknown): AuthTokenStorage {
-  if (typeof value === 'undefined') {
-    return DEFAULT_AUTH_TOKEN_STORAGE;
-  }
-
-  if (isAuthTokenStorage(value)) {
-    return value;
-  }
-
-  throw new Error(
-    `Invalid value for \`authTokenStorage\`: ${JSON.stringify(
-      value
-    )}. Expected one of: ${AUTH_TOKEN_STORAGE_VALUES.map(storage => JSON.stringify(storage)).join(', ')}.`
-  );
-}
+export type Credentials = z.infer<typeof Credentials>;
 
 /** Returns whether a directory exists */
 function isDirectory(path: string): boolean {
@@ -136,8 +38,8 @@ function isDirectory(path: string): boolean {
  * Returns in which directory the config should be present
  * @internal Should only be used in {@link CredentialsStore} or tests.
  */
-export function getGlobalPathConfig(appName: string): string {
-  const vercelDirectories = XDGAppPaths(appName).dataDirs();
+export function getGlobalPathConfig(dir: string): string {
+  const vercelDirectories = XDGAppPaths(dir).dataDirs();
 
   const possibleConfigPaths = [
     ...vercelDirectories, // latest vercel directory
@@ -155,403 +57,23 @@ export function getGlobalPathConfig(appName: string): string {
   );
 }
 
-export function getConfigFilePath(dir: string): string {
-  return path.join(dir, 'config.json');
-}
-
-export function getAuthConfigFilePath(dir: string): string {
-  return path.join(dir, 'auth.json');
-}
-
-export function readGlobalConfig(dir: string): GlobalConfig {
-  const configPath = getConfigFilePath(dir);
-  let config: {
-    authTokenStorage?: unknown;
-  };
-
-  try {
-    config = JSON.parse(fs.readFileSync(configPath, 'utf8')) as {
-      authTokenStorage?: unknown;
-    };
-  } catch (error) {
-    if (isENOENTError(error)) {
-      return {};
-    }
-
-    throw error;
-  }
-
-  return {
-    authTokenStorage:
-      typeof config.authTokenStorage === 'undefined'
-        ? undefined
-        : resolveAuthTokenStorage(config.authTokenStorage),
-  };
-}
-
-export function getAuthTokenStorage(
-  dir: string,
-  config?: GlobalConfig
-): AuthTokenStorage {
-  if (config?.authTokenStorage) {
-    return resolveAuthTokenStorage(config.authTokenStorage);
-  }
-
-  return resolveAuthTokenStorage(readGlobalConfig(dir).authTokenStorage);
-}
-
-function getKeyringAccount(configPath: string): string {
-  const digest = createHash('sha256').update(configPath).digest('hex');
-  return `cli:${digest.slice(0, 16)}`;
-}
-
-export function setLoadKeyringModuleForTesting(
-  nextLoadKeyringModule?: LoadKeyringModule
-) {
-  loadKeyringModule = nextLoadKeyringModule ?? defaultLoadKeyringModule;
-}
-
-function createKeyringEntry(configPath: string): KeyringEntry {
-  try {
-    const { Entry } = loadKeyringModule();
-
-    return new Entry(KEYRING_SERVICE, getKeyringAccount(configPath));
-  } catch (error) {
-    const wrappedError = new Error(KEYRING_UNAVAILABLE_ERROR);
-    (wrappedError as Error & { cause?: unknown }).cause = error;
-    throw wrappedError;
-  }
-}
-
-function isKeyringUnavailableError(error: unknown): boolean {
-  return error instanceof Error && error.message === KEYRING_UNAVAILABLE_ERROR;
-}
-
-function readCredentialsFromFile(configPath: string): Credentials {
-  return parseCredentials(JSON.parse(fs.readFileSync(configPath, 'utf8')));
-}
-
-function isENOENTError(error: unknown): boolean {
-  return (
-    typeof error === 'object' &&
-    error !== null &&
-    'code' in error &&
-    error.code === 'ENOENT'
-  );
-}
-
-function createMissingCredentialsError(configPath: string): Error {
-  const error = new Error(
-    `ENOENT: no such file or directory, open '${configPath}'`
-  );
-  Object.assign(error, { code: 'ENOENT' });
-  return error;
-}
-
-function writeCredentialsToFile(configPath: string, config: Credentials): void {
-  const directory = path.dirname(configPath);
-  const temporaryPath = path.join(
-    directory,
-    `${path.basename(configPath)}.${process.pid}.${randomUUID()}.tmp`
-  );
-
-  fs.mkdirSync(path.dirname(configPath), { recursive: true });
-
-  try {
-    fs.writeFileSync(temporaryPath, JSON.stringify(config, null, 2) + '\n', {
-      mode: 0o600,
-    });
-    fs.renameSync(temporaryPath, configPath);
-  } catch (error) {
-    fs.rmSync(temporaryPath, { force: true });
-    throw error;
-  }
-}
-
-function readCredentialsFromKeyring(configPath: string): Credentials | null {
-  const entry = createKeyringEntry(configPath);
-  const value = entry.getPassword();
-
-  if (value === null) {
-    return null;
-  }
-
-  return parseCredentials(JSON.parse(value));
-}
-
-function writeCredentialsToKeyring(
-  configPath: string,
-  config: Credentials
-): void {
-  const entry = createKeyringEntry(configPath);
-  entry.setPassword(JSON.stringify(config));
-}
-
-function deleteCredentialsFromKeyring(configPath: string): boolean {
-  const entry = createKeyringEntry(configPath);
-  return entry.deleteCredential();
-}
-
-function deleteCredentialsFile(configPath: string): void {
-  fs.rmSync(configPath, { force: true });
-}
-
-function tryDeleteCredentialsFromKeyring(configPath: string): void {
-  try {
-    deleteCredentialsFromKeyring(configPath);
-  } catch {}
-}
-
-function deleteCredentialsFromKeyringIfAvailable(configPath: string): void {
-  try {
-    deleteCredentialsFromKeyring(configPath);
-  } catch (error) {
-    if (!isKeyringUnavailableError(error)) {
-      throw error;
-    }
-  }
-}
-
-function migrateCredentialsToFile(
-  configPath: string,
-  credentials: Credentials
-): Credentials {
-  writeCredentialsToFile(configPath, credentials);
-  tryDeleteCredentialsFromKeyring(configPath);
-  return credentials;
-}
-
-function tryReadKeyringCredentialsIntoFile(
-  configPath: string
-): Credentials | null {
-  try {
-    const credentials = readCredentialsFromKeyring(configPath);
-
-    if (credentials === null) {
-      return null;
-    }
-
-    return migrateCredentialsToFile(configPath, credentials);
-  } catch {
-    return null;
-  }
-}
-
-function readFileStorageCredentials(configPath: string): Credentials {
-  try {
-    const credentials = readCredentialsFromFile(configPath);
-
-    if (hasCredentials(credentials)) {
-      return credentials;
-    }
-
-    // File mode treats keyring contents as stale-but-authoritative backup only
-    // when auth.json has no usable credentials.
-    return tryReadKeyringCredentialsIntoFile(configPath) ?? credentials;
-  } catch (error) {
-    if (!isENOENTError(error)) {
-      throw error;
-    }
-
-    const credentials = tryReadKeyringCredentialsIntoFile(configPath);
-
-    if (credentials !== null) {
-      return credentials;
-    }
-
-    throw error;
-  }
-}
-
-function migrateCredentialsToKeyring(
-  configPath: string,
-  credentials: Credentials
-): Credentials {
-  writeCredentialsToKeyring(configPath, credentials);
-  deleteCredentialsFile(configPath);
-  return credentials;
-}
-
-function readKeyringStorageCredentials(configPath: string): Credentials {
-  const credentials = readCredentialsFromKeyring(configPath);
-
-  if (credentials !== null) {
-    return credentials;
-  }
-
-  try {
-    const fileCredentials = readCredentialsFromFile(configPath);
-
-    // Keyring mode eagerly migrates any remaining plaintext credentials out of
-    // auth.json after the first successful read.
-    return migrateCredentialsToKeyring(configPath, fileCredentials);
-  } catch (error) {
-    if (isENOENTError(error)) {
-      throw createMissingCredentialsError(configPath);
-    }
-
-    throw error;
-  }
-}
-
-function readAutoStorageCredentials(configPath: string): Credentials {
-  try {
-    const credentials = readCredentialsFromKeyring(configPath);
-
-    if (credentials !== null) {
-      return credentials;
-    }
-  } catch {}
-
-  // Auto mode intentionally avoids read-time migration so that machines
-  // without usable keyring support can keep working off auth.json.
-  return readCredentialsFromFile(configPath);
-}
-
-function writeFileStorageCredentials(
-  configPath: string,
-  credentials: Credentials
-): CredentialsStorageLocation {
-  writeCredentialsToFile(configPath, credentials);
-  tryDeleteCredentialsFromKeyring(configPath);
-  return 'file';
-}
-
-function writeKeyringStorageCredentials(
-  configPath: string,
-  credentials: Credentials
-): CredentialsStorageLocation {
-  writeCredentialsToKeyring(configPath, credentials);
-  deleteCredentialsFile(configPath);
-  return 'keyring';
-}
-
-function writeAutoStorageCredentials(
-  configPath: string,
-  credentials: Credentials
-): CredentialsStorageLocation {
-  try {
-    return writeKeyringStorageCredentials(configPath, credentials);
-  } catch {
-    tryDeleteCredentialsFromKeyring(configPath);
-    return writeFileStorageCredentials(configPath, credentials);
-  }
-}
-
-function deleteFileStorageCredentials(configPath: string): void {
-  deleteCredentialsFile(configPath);
-  deleteCredentialsFromKeyringIfAvailable(configPath);
-}
-
-function deleteKeyringStorageCredentials(configPath: string): void {
-  deleteCredentialsFromKeyring(configPath);
-  deleteCredentialsFile(configPath);
-}
-
-function deleteAutoStorageCredentials(configPath: string): void {
-  try {
-    deleteCredentialsFromKeyring(configPath);
-  } catch {}
-  deleteCredentialsFile(configPath);
-}
-
-export function CredentialsStore(dir: string, config: GlobalConfig = {}) {
-  const configPath = getAuthConfigFilePath(dir);
-  const tokenStorage = getAuthTokenStorage(dir, config);
-
+export function CredentialsStore(dir: string) {
+  const configPath = path.join(getGlobalPathConfig(dir), 'auth.json');
   return {
     configPath,
     get(): Credentials {
-      switch (tokenStorage) {
-        case AUTH_TOKEN_STORAGE.FILE:
-          return readFileStorageCredentials(configPath);
-        case AUTH_TOKEN_STORAGE.KEYRING:
-          return readKeyringStorageCredentials(configPath);
-        case AUTH_TOKEN_STORAGE.AUTO:
-          return readAutoStorageCredentials(configPath);
-      }
+      return Credentials.parse(JSON.parse(fs.readFileSync(configPath, 'utf8')));
     },
     /** Update the credentials store. If `skipWrite` is set, the update will be skipped. */
-    update(config: Partial<Credentials>): CredentialsStorageLocation | void {
+    update(config: Partial<Credentials>): void {
       if (config.skipWrite) return;
-      const parsedConfig = parseCredentials(config);
-      switch (tokenStorage) {
-        case AUTH_TOKEN_STORAGE.FILE:
-          return writeFileStorageCredentials(configPath, parsedConfig);
-        case AUTH_TOKEN_STORAGE.KEYRING:
-          return writeKeyringStorageCredentials(configPath, parsedConfig);
-        case AUTH_TOKEN_STORAGE.AUTO:
-          return writeAutoStorageCredentials(configPath, parsedConfig);
-      }
-    },
-    delete(): void {
-      switch (tokenStorage) {
-        case AUTH_TOKEN_STORAGE.FILE:
-          deleteFileStorageCredentials(configPath);
-          break;
-        case AUTH_TOKEN_STORAGE.KEYRING:
-          deleteKeyringStorageCredentials(configPath);
-          break;
-        case AUTH_TOKEN_STORAGE.AUTO:
-          deleteAutoStorageCredentials(configPath);
-          break;
-      }
+      const parsedConfig = Credentials.parse(config);
+      fs.mkdirSync(path.dirname(configPath), { recursive: true });
+      fs.writeFileSync(
+        configPath,
+        JSON.stringify(parsedConfig, null, 2) + '\n',
+        { mode: 0o600 }
+      );
     },
   };
 }
-
-export function readCredentials(dir: string, config: GlobalConfig = {}) {
-  return CredentialsStore(dir, config).get();
-}
-
-export function writeCredentials(
-  dir: string,
-  credentials: Partial<Credentials>,
-  config: GlobalConfig = {}
-) {
-  return CredentialsStore(dir, config).update(credentials);
-}
-
-export function clearCredentials(dir: string, config: GlobalConfig = {}) {
-  CredentialsStore(dir, config).delete();
-}
-
-export function clearAllCredentials(dir: string) {
-  for (const authTokenStorage of [
-    AUTH_TOKEN_STORAGE.FILE,
-    AUTH_TOKEN_STORAGE.KEYRING,
-  ] as const) {
-    try {
-      clearCredentials(dir, { authTokenStorage });
-    } catch {}
-  }
-}
-
-export function clearAllCredentialsStrict(dir: string) {
-  const configPath = getAuthConfigFilePath(dir);
-
-  let fileError: unknown;
-  let keyringError: unknown;
-
-  try {
-    deleteCredentialsFile(configPath);
-  } catch (error) {
-    fileError = error;
-  }
-
-  try {
-    deleteCredentialsFromKeyring(configPath);
-  } catch (error) {
-    if (!isKeyringUnavailableError(error)) {
-      keyringError = error;
-    }
-  }
-
-  if (keyringError) {
-    throw keyringError;
-  }
-
-  if (fileError) {
-    throw fileError;
-  }
-}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@vercel/cli-auth",
   "description": "Used by Vercel's CLIs to handle authentication",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "publishConfig": {
     "access": "public"
   },
@@ -19,7 +19,6 @@
     "!**/*.test.ts"
   ],
   "dependencies": {
-    "@napi-rs/keyring": "1.2.0",
     "async-listen": "3.0.0",
     "open": "8.4.0",
     "xdg-app-paths": "5",
@@ -28,7 +27,6 @@
   "devDependencies": {
     "@types/node": "20.11.0",
     "memfs": "4.14.0",
-    "typescript": "5.9.2",
     "vite": "7.1.7",
     "vitest": "2.1.4"
   },