@vibes.diy/api-svc 13.1.11 → 13.1.13

package/public/connections-oauth.js

@@ -0,0 +1,302 @@
+import { BuildURI, exception2Result, TxtEnDecoderSingleton, URI } from "@adviser/cement";
+import { and, eq } from "drizzle-orm/sql/expressions";
+import { loadSelectedBackend } from "../intern/load-selected-backend.js";
+import { CONNECTION_PROVIDERS } from "../intern/connections-providers.js";
+import { timingSafeEqualString } from "./github-webhook.js";
+import { disconnectAccount, revokeConsent } from "./connections-store.js";
+import { appExists, b64urlDecode, b64urlEncode, GITHUB_OAUTH_AUTHORIZE_URL, GITHUB_SETUP_OAUTH_STATE_TTL_MS, GITHUB_SETUP_STATE_RE, hmacHex, htmlPage, sessionTokenFrom, stateSecret, } from "./github-setup.js";
+export const CONNECT_STATE_PREFIX = "c1.";
+export function isConnectState(state) {
+    return state.startsWith(CONNECT_STATE_PREFIX);
+}
+export async function signConnectState(secret, state) {
+    const blob = b64urlEncode(TxtEnDecoderSingleton().encode(JSON.stringify(state)));
+    const message = `${CONNECT_STATE_PREFIX}${blob}`;
+    return `${message}.${await hmacHex(secret, message)}`;
+}
+export async function verifyConnectState(secret, signed, nowMs) {
+    if (!isConnectState(signed))
+        return undefined;
+    const dot = signed.lastIndexOf(".");
+    if (dot <= CONNECT_STATE_PREFIX.length)
+        return undefined;
+    const message = signed.slice(0, dot);
+    const provided = signed.slice(dot + 1);
+    const expected = await hmacHex(secret, message);
+    if (!timingSafeEqualString(provided, expected))
+        return undefined;
+    const json = b64urlDecode(message.slice(CONNECT_STATE_PREFIX.length));
+    if (json === undefined)
+        return undefined;
+    const rParsed = exception2Result(() => JSON.parse(json));
+    if (rParsed.isErr())
+        return undefined;
+    const parsed = rParsed.Ok();
+    if (typeof parsed.owner !== "string" || typeof parsed.slug !== "string")
+        return undefined;
+    if (typeof parsed.provider !== "string" || parsed.provider === "")
+        return undefined;
+    if (typeof parsed.userId !== "string" || parsed.userId === "")
+        return undefined;
+    if (!Array.isArray(parsed.scopes) || parsed.scopes.some((s) => typeof s !== "string"))
+        return undefined;
+    if (typeof parsed.exp !== "number" || nowMs >= parsed.exp)
+        return undefined;
+    if (!GITHUB_SETUP_STATE_RE.test(`${parsed.owner}/${parsed.slug}`))
+        return undefined;
+    return {
+        userId: parsed.userId,
+        owner: parsed.owner,
+        slug: parsed.slug,
+        provider: parsed.provider,
+        scopes: parsed.scopes,
+        exp: parsed.exp,
+    };
+}
+export const CONNECT_APPROVAL_PREFIX = "f1.";
+export const CONNECT_APPROVAL_TTL_MS = 2 * 60 * 1000;
+export async function signConnectApproval(secret, approval) {
+    const blob = b64urlEncode(TxtEnDecoderSingleton().encode(JSON.stringify(approval)));
+    const message = `${CONNECT_APPROVAL_PREFIX}${blob}`;
+    return `${message}.${await hmacHex(secret, message)}`;
+}
+export async function verifyConnectApproval(secret, signed, nowMs) {
+    if (!signed.startsWith(CONNECT_APPROVAL_PREFIX))
+        return undefined;
+    const dot = signed.lastIndexOf(".");
+    if (dot <= CONNECT_APPROVAL_PREFIX.length)
+        return undefined;
+    const message = signed.slice(0, dot);
+    const provided = signed.slice(dot + 1);
+    const expected = await hmacHex(secret, message);
+    if (!timingSafeEqualString(provided, expected))
+        return undefined;
+    const json = b64urlDecode(message.slice(CONNECT_APPROVAL_PREFIX.length));
+    if (json === undefined)
+        return undefined;
+    const rParsed = exception2Result(() => JSON.parse(json));
+    if (rParsed.isErr())
+        return undefined;
+    const parsed = rParsed.Ok();
+    if (typeof parsed.id !== "string" || parsed.id === "")
+        return undefined;
+    if (typeof parsed.userId !== "string" || parsed.userId === "")
+        return undefined;
+    if (typeof parsed.provider !== "string" || parsed.provider === "")
+        return undefined;
+    if (typeof parsed.owner !== "string" || typeof parsed.slug !== "string")
+        return undefined;
+    if (typeof parsed.exp !== "number" || nowMs >= parsed.exp)
+        return undefined;
+    if (!GITHUB_SETUP_STATE_RE.test(`${parsed.owner}/${parsed.slug}`))
+        return undefined;
+    return {
+        id: parsed.id,
+        userId: parsed.userId,
+        provider: parsed.provider,
+        owner: parsed.owner,
+        slug: parsed.slug,
+        exp: parsed.exp,
+    };
+}
+function callbackUrl(env) {
+    const base = env.VIBES_DIY_PUBLIC_BASE_URL ?? "";
+    if (base.length === 0)
+        return undefined;
+    return BuildURI.from(base).pathname("/github/setup").cleanParams().hash("").toString();
+}
+async function connectGate(input) {
+    if (!Object.prototype.hasOwnProperty.call(CONNECTION_PROVIDERS, input.provider)) {
+        return { ok: false, reason: "unknown-provider" };
+    }
+    if (!GITHUB_SETUP_STATE_RE.test(`${input.owner}/${input.slug}`))
+        return { ok: false, reason: "malformed" };
+    const sql = { db: input.vctx.sql.db, tables: input.vctx.sql.tables };
+    if (!(await appExists(sql, input.owner, input.slug)))
+        return { ok: false, reason: "no-vibe" };
+    const loaded = await loadSelectedBackend(input.vctx, input.owner, input.slug);
+    const declared = loaded.ok ? (loaded.parsed.connections ?? []) : [];
+    const decl = declared.find((c) => c.provider === input.provider);
+    if (decl === undefined)
+        return { ok: false, reason: "undeclared" };
+    return { ok: true, scopes: decl.scopes };
+}
+function gateRefusalPage(reason) {
+    switch (reason) {
+        case "unknown-provider":
+            return htmlPage("Unknown connection", "That connection type is not one vibes.diy offers.", 400);
+        case "malformed":
+            return htmlPage("Invalid link", "That connection link is malformed. Open the app and try again.", 400);
+        case "no-vibe":
+            return htmlPage("Vibe not found", "That app does not exist, so there is nothing to connect it to.", 404);
+        case "undeclared":
+            return htmlPage("Not requested by this app", "This app has not asked for that connection, so there is nothing to approve. If you expected it, the app's " +
+                "author needs to publish a version that requests it.", 403);
+    }
+}
+function gateRefusalStatus(reason) {
+    switch (reason) {
+        case "unknown-provider":
+            return 400;
+        case "malformed":
+            return 400;
+        case "no-vibe":
+            return 404;
+        case "undeclared":
+            return 403;
+    }
+}
+export async function handleConnectionsApprove(request, env, deps) {
+    const token = sessionTokenFrom(request);
+    const userId = token === undefined ? undefined : await deps.verifySessionToken(token);
+    if (userId === undefined)
+        return jsonResponse({ type: "error", message: "unauthorized" }, 401);
+    const body = await readJsonBody(request);
+    if (body === undefined)
+        return jsonResponse({ type: "error", message: "invalid body" }, 400);
+    const provider = typeof body.provider === "string" ? body.provider : "";
+    const owner = typeof body.owner === "string" ? body.owner : "";
+    const slug = typeof body.slug === "string" ? body.slug : "";
+    const gate = await connectGate({ vctx: deps.vctx, provider, owner, slug });
+    if (!gate.ok) {
+        return jsonResponse({ type: "error", message: "connection not available" }, gateRefusalStatus(gate.reason));
+    }
+    const signingKey = stateSecret(env);
+    if (signingKey === undefined) {
+        return jsonResponse({ type: "error", message: "connections are not configured" }, 503);
+    }
+    const nowMs = deps.nowMs ?? Date.now();
+    const id = crypto.randomUUID();
+    const t = deps.vctx.sql.tables.connectionApprovals;
+    await deps.vctx.sql.db.insert(t).values({
+        id,
+        userId,
+        provider,
+        ownerHandle: owner,
+        appSlug: slug,
+        created: new Date(nowMs).toISOString(),
+        consumedAt: "",
+    });
+    const approval = await signConnectApproval(signingKey, {
+        id,
+        userId,
+        provider,
+        owner,
+        slug,
+        exp: nowMs + CONNECT_APPROVAL_TTL_MS,
+    });
+    return new Response(JSON.stringify({ type: "ok", approval }), {
+        status: 200,
+        headers: { "Content-Type": "application/json" },
+    });
+}
+export async function handleConnectionsStart(request, env, deps) {
+    const token = sessionTokenFrom(request);
+    const userId = token === undefined ? undefined : await deps.verifySessionToken(token);
+    if (userId === undefined) {
+        return htmlPage("Sign in required", "Sign in to vibes.diy and start the connection again from the app.", 401);
+    }
+    const uri = URI.from(request.url);
+    const provider = uri.getParam("provider") ?? "";
+    const owner = uri.getParam("owner") ?? "";
+    const slug = uri.getParam("slug") ?? "";
+    const gate = await connectGate({ vctx: deps.vctx, provider, owner, slug });
+    if (!gate.ok)
+        return gateRefusalPage(gate.reason);
+    const signingKey = stateSecret(env);
+    const clientId = env.VIBES_GH_APP_CLIENT_ID ?? "";
+    const clientSecret = env.VIBES_GH_APP_CLIENT_SECRET ?? "";
+    const redirectUri = callbackUrl(env);
+    if (clientId.length === 0 || clientSecret.length === 0 || signingKey === undefined || redirectUri === undefined) {
+        return htmlPage("Not available", "Connections are not configured on this environment, so nothing has been connected.", 503);
+    }
+    const nowMs = deps.nowMs ?? Date.now();
+    const approval = await verifyConnectApproval(signingKey, uri.getParam("approval") ?? "", nowMs);
+    const bound = approval !== undefined &&
+        approval.userId === userId &&
+        approval.provider === provider &&
+        approval.owner === owner &&
+        approval.slug === slug;
+    if (!bound)
+        return approvalRefusalPage();
+    const t = deps.vctx.sql.tables.connectionApprovals;
+    const claimed = await deps.vctx.sql.db
+        .update(t)
+        .set({ consumedAt: new Date(nowMs).toISOString() })
+        .where(and(eq(t.id, approval.id), eq(t.consumedAt, ""), eq(t.userId, userId), eq(t.provider, provider), eq(t.ownerHandle, owner), eq(t.appSlug, slug)))
+        .returning({ id: t.id });
+    if (claimed.length === 0)
+        return approvalRefusalPage();
+    const signed = await signConnectState(signingKey, {
+        userId,
+        owner,
+        slug,
+        provider,
+        scopes: gate.scopes,
+        exp: nowMs + GITHUB_SETUP_OAUTH_STATE_TTL_MS,
+    });
+    const authorize = BuildURI.from(GITHUB_OAUTH_AUTHORIZE_URL)
+        .setParam("client_id", clientId)
+        .setParam("redirect_uri", redirectUri)
+        .setParam("state", signed);
+    if (gate.scopes.length > 0)
+        authorize.setParam("scope", gate.scopes.join(" "));
+    return new Response(null, { status: 302, headers: { Location: authorize.toString() } });
+}
+function approvalRefusalPage() {
+    return htmlPage("Approval required", "This connection was not approved, or the approval has already been used. Open the app and start the connection " +
+        "again from the button inside it.", 403);
+}
+function jsonResponse(body, status) {
+    return new Response(JSON.stringify(body), { status, headers: { "Content-Type": "application/json" } });
+}
+async function callerOf(request, deps) {
+    const token = sessionTokenFrom(request);
+    const userId = token === undefined ? undefined : await deps.verifySessionToken(token);
+    if (userId === undefined)
+        return { refusal: jsonResponse({ type: "error", message: "unauthorized" }, 401) };
+    return { userId };
+}
+async function readJsonBody(request) {
+    const r = await exception2Result(() => request.json());
+    if (r.isErr())
+        return undefined;
+    const body = r.Ok();
+    if (typeof body !== "object" || body === null || Array.isArray(body))
+        return undefined;
+    return body;
+}
+function providerOf(body) {
+    const provider = typeof body.provider === "string" ? body.provider : "";
+    return Object.prototype.hasOwnProperty.call(CONNECTION_PROVIDERS, provider) ? provider : undefined;
+}
+export async function handleConnectionsRevoke(request, deps) {
+    const caller = await callerOf(request, deps);
+    if ("refusal" in caller)
+        return caller.refusal;
+    const body = await readJsonBody(request);
+    if (body === undefined)
+        return jsonResponse({ type: "error", message: "invalid body" }, 400);
+    const provider = providerOf(body);
+    const ownerHandle = typeof body.owner === "string" ? body.owner : "";
+    const appSlug = typeof body.slug === "string" ? body.slug : "";
+    if (provider === undefined || !GITHUB_SETUP_STATE_RE.test(`${ownerHandle}/${appSlug}`)) {
+        return jsonResponse({ type: "error", message: "invalid request" }, 400);
+    }
+    await revokeConsent(deps.sql, { userId: caller.userId, provider, ownerHandle, appSlug }, deps.nowMs ?? Date.now());
+    return jsonResponse({ type: "ok" }, 200);
+}
+export async function handleConnectionsDisconnect(request, deps) {
+    const caller = await callerOf(request, deps);
+    if ("refusal" in caller)
+        return caller.refusal;
+    const body = await readJsonBody(request);
+    if (body === undefined)
+        return jsonResponse({ type: "error", message: "invalid body" }, 400);
+    const provider = providerOf(body);
+    if (provider === undefined)
+        return jsonResponse({ type: "error", message: "invalid request" }, 400);
+    await disconnectAccount(deps.sql, { userId: caller.userId, provider }, deps.nowMs ?? Date.now());
+    return jsonResponse({ type: "ok" }, 200);
+}
+//# sourceMappingURL=connections-oauth.js.map

package/public/connections-oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connections-oauth.js","sourceRoot":"","sources":["../../jsr/public/connections-oauth.ts"],"names":[],"mappings":"AAgDA,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACzF,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,6BAA6B,CAAC;AAGtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAC1E,OAAO,EACL,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,0BAA0B,EAC1B,+BAA+B,EAC/B,qBAAqB,EACrB,OAAO,EACP,QAAQ,EACR,gBAAgB,EAChB,WAAW,GAEZ,MAAM,mBAAmB,CAAC;AAQ3B,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAG1C,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,KAAK,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;AAChD,CAAC;AAwBD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,KAAwB;IAC7E,MAAM,IAAI,GAAG,YAAY,CAAC,qBAAqB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,GAAG,oBAAoB,GAAG,IAAI,EAAE,CAAC;IACjD,OAAO,GAAG,OAAO,IAAI,MAAM,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;AACxD,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,MAAc,EAAE,KAAa;IACpF,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,GAAG,IAAI,oBAAoB,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IACzD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAGhD,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IACjE,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;IACtE,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAGzC,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAA+B,CAAC,CAAC;IACvF,IAAI,OAAO,CAAC,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACtC,MAAM,MAAM,GAA+B,OAAO,CAAC,EAAE,EAAE,CAAC;IACxD,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1F,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAIpF,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAChF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IACxG,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,IAAI,MAAM,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC5E,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IACpF,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,EAAE,MAAM,CAAC,GAAG;KAChB,CAAC;AACJ,CAAC;AASD,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,CAAC;AAW7C,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAqBrD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAc,EAAE,QAAyB;IACjF,MAAM,IAAI,GAAG,YAAY,CAAC,qBAAqB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,GAAG,uBAAuB,GAAG,IAAI,EAAE,CAAC;IACpD,OAAO,GAAG,OAAO,IAAI,MAAM,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;AACxD,CAAC;AAGD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAAc,EAAE,MAAc,EAAE,KAAa;IACvF,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,uBAAuB,CAAC;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,GAAG,IAAI,uBAAuB,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEhD,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IACjE,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC;IACzE,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAA6B,CAAC,CAAC;IACrF,IAAI,OAAO,CAAC,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACtC,MAAM,MAAM,GAA6B,OAAO,CAAC,EAAE,EAAE,CAAC;IACtD,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACxE,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAChF,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACpF,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1F,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,IAAI,MAAM,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAG5E,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IACpF,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,EAAE,MAAM,CAAC,GAAG;KAChB,CAAC;AACJ,CAAC;AAWD,SAAS,WAAW,CAAC,GAAU;IAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,yBAAyB,IAAI,EAAE,CAAC;IACjD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AACzF,CAAC;AA4BD,KAAK,UAAU,WAAW,CAAC,KAK1B;IACC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACnD,CAAC;IAGD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC3G,MAAM,GAAG,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;IACrE,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAK9F,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjE,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACnE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;AAC3C,CAAC;AAGD,SAAS,eAAe,CAAC,MAAoD;IAC3E,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,kBAAkB;YACrB,OAAO,QAAQ,CAAC,oBAAoB,EAAE,mDAAmD,EAAE,GAAG,CAAC,CAAC;QAClG,KAAK,WAAW;YACd,OAAO,QAAQ,CAAC,cAAc,EAAE,gEAAgE,EAAE,GAAG,CAAC,CAAC;QACzG,KAAK,SAAS;YACZ,OAAO,QAAQ,CAAC,gBAAgB,EAAE,gEAAgE,EAAE,GAAG,CAAC,CAAC;QAC3G,KAAK,YAAY;YACf,OAAO,QAAQ,CACb,2BAA2B,EAC3B,4GAA4G;gBAC1G,qDAAqD,EACvD,GAAG,CACJ,CAAC;IACN,CAAC;AACH,CAAC;AAGD,SAAS,iBAAiB,CAAC,MAAoD;IAC7E,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,kBAAkB;YACrB,OAAO,GAAG,CAAC;QACb,KAAK,WAAW;YACd,OAAO,GAAG,CAAC;QACb,KAAK,SAAS;YACZ,OAAO,GAAG,CAAC;QACb,KAAK,YAAY;YACf,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAkBD,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAAgB,EAAE,GAAU,EAAE,IAA0B;IACrG,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACtF,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;IAE/F,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;IAC7F,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAE5D,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QAEb,OAAO,YAAY,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,0BAA0B,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9G,CAAC;IAED,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,YAAY,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,gCAAgC,EAAE,EAAE,GAAG,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACvC,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC;IACnD,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACtC,EAAE;QACF,MAAM;QACN,QAAQ;QACR,WAAW,EAAE,KAAK;QAClB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;QACtC,UAAU,EAAE,EAAE;KACf,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE;QACrD,EAAE;QACF,MAAM;QACN,QAAQ;QACR,KAAK;QACL,IAAI;QACJ,GAAG,EAAE,KAAK,GAAG,uBAAuB;KACrC,CAAC,CAAC;IACH,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE;QAC5D,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAgB,EAAE,GAAU,EAAE,IAA0B;IACnG,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACtF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,QAAQ,CAAC,kBAAkB,EAAE,mEAAmE,EAAE,GAAG,CAAC,CAAC;IAChH,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAExC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAKlD,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC;IAClD,MAAM,YAAY,GAAG,GAAG,CAAC,0BAA0B,IAAI,EAAE,CAAC;IAC1D,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAChH,OAAO,QAAQ,CAAC,eAAe,EAAE,oFAAoF,EAAE,GAAG,CAAC,CAAC;IAC9H,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAIvC,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IAChG,MAAM,KAAK,GACT,QAAQ,KAAK,SAAS;QACtB,QAAQ,CAAC,MAAM,KAAK,MAAM;QAC1B,QAAQ,CAAC,QAAQ,KAAK,QAAQ;QAC9B,QAAQ,CAAC,KAAK,KAAK,KAAK;QACxB,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC;IACzB,IAAI,CAAC,KAAK;QAAE,OAAO,mBAAmB,EAAE,CAAC;IAMzC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC;IACnD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;SACnC,MAAM,CAAC,CAAC,CAAC;SACT,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;SAClD,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,EACrB,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,EAGpB,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,EACpB,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACxB,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,EACxB,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CACpB,CACF;SACA,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,mBAAmB,EAAE,CAAC;IAEvD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,UAAU,EAAE;QAChD,MAAM;QACN,KAAK;QACL,IAAI;QACJ,QAAQ;QACR,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,EAAE,KAAK,GAAG,+BAA+B;KAC7C,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,0BAA0B,CAAC;SACxD,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC;SAC/B,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC;SACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAG7B,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/E,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;AAC1F,CAAC;AAUD,SAAS,mBAAmB;IAC1B,OAAO,QAAQ,CACb,mBAAmB,EACnB,iHAAiH;QAC/G,kCAAkC,EACpC,GAAG,CACJ,CAAC;AACJ,CAAC;AAQD,SAAS,YAAY,CAAC,IAA4B,EAAE,MAAc;IAChE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;AACzG,CAAC;AAWD,KAAK,UAAU,QAAQ,CAAC,OAAgB,EAAE,IAA2B;IACnE,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACtF,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC;IAC5G,OAAO,EAAE,MAAM,EAAE,CAAC;AACpB,CAAC;AAGD,KAAK,UAAU,YAAY,CAAC,OAAgB;IAC1C,MAAM,CAAC,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAsB,CAAC,CAAC;IAC3E,IAAI,CAAC,CAAC,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,IAAI,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC;IACpB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACvF,OAAO,IAA+B,CAAC;AACzC,CAAC;AAED,SAAS,UAAU,CAAC,IAA6B;IAC/C,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AACrG,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAgB,EAAE,IAA2B;IACzF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC7C,IAAI,SAAS,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;IAC7F,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,WAAW,IAAI,OAAO,EAAE,CAAC,EAAE,CAAC;QACvF,OAAO,YAAY,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACnH,OAAO,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;AAC3C,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,OAAgB,EAAE,IAA2B;IAC7F,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC7C,IAAI,SAAS,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;IAC7F,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;IACpG,MAAM,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACjG,OAAO,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;AAC3C,CAAC"}

package/public/connections-status.d.ts

@@ -0,0 +1,18 @@
+import type { VibesApiSQLCtx } from "../types.js";
+import { type VerifySessionToken } from "./github-setup.js";
+export interface ConnectionsStatusDeps {
+    readonly verifySessionToken: VerifySessionToken;
+    readonly vctx: VibesApiSQLCtx;
+    readonly nowMs?: number;
+}
+export interface ConnectionsStatusBody {
+    readonly provider: string;
+    readonly declared?: boolean;
+    readonly scopes?: readonly string[];
+    readonly why?: string;
+    readonly state: "absent" | "live" | "expiring" | "dead";
+    readonly consented?: boolean;
+    readonly accountLabel?: string;
+    readonly expiresAt?: string;
+}
+export declare function handleConnectionsStatus(request: Request, deps: ConnectionsStatusDeps): Promise<Response>;

package/public/connections-status.js

@@ -0,0 +1,42 @@
+import { URI } from "@adviser/cement";
+import { loadSelectedBackend } from "../intern/load-selected-backend.js";
+import { CONNECTION_PROVIDERS } from "../intern/connections-providers.js";
+import { readConnectionStatus } from "./connections-store.js";
+import { GITHUB_SETUP_STATE_RE, sessionTokenFrom } from "./github-setup.js";
+function jsonResponse(body, status) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { "Content-Type": "application/json", "Cache-Control": "no-store" },
+    });
+}
+export async function handleConnectionsStatus(request, deps) {
+    const uri = URI.from(request.url);
+    const provider = uri.getParam("provider") ?? "";
+    const owner = uri.getParam("owner") ?? "";
+    const slug = uri.getParam("slug") ?? "";
+    const accountScoped = owner === "" && slug === "";
+    if (!accountScoped && !GITHUB_SETUP_STATE_RE.test(`${owner}/${slug}`)) {
+        return jsonResponse({ type: "error", message: "invalid request" }, 400);
+    }
+    const known = Object.prototype.hasOwnProperty.call(CONNECTION_PROVIDERS, provider);
+    const loaded = known && !accountScoped ? await loadSelectedBackend(deps.vctx, owner, slug) : undefined;
+    const declared = loaded !== undefined && loaded.ok ? (loaded.parsed.connections ?? []) : [];
+    const decl = declared.find((c) => c.provider === provider);
+    const token = sessionTokenFrom(request);
+    const userId = token === undefined ? undefined : await deps.verifySessionToken(token);
+    const declarationHalf = accountScoped
+        ? { provider }
+        : { provider, declared: decl !== undefined, scopes: decl?.scopes ?? [], why: decl?.why ?? "" };
+    if (userId === undefined) {
+        return jsonResponse({ ...declarationHalf, state: "absent", ...(accountScoped ? {} : { consented: false }) }, 200);
+    }
+    const status = await readConnectionStatus({ db: deps.vctx.sql.db, tables: deps.vctx.sql.tables }, { userId, provider, ownerHandle: owner, appSlug: slug }, deps.nowMs ?? Date.now());
+    return jsonResponse({
+        ...declarationHalf,
+        state: status.state,
+        ...(accountScoped ? {} : { consented: status.consented }),
+        ...(status.accountLabel === undefined ? {} : { accountLabel: status.accountLabel }),
+        ...(status.expiresAt === undefined ? {} : { expiresAt: status.expiresAt }),
+    }, 200);
+}
+//# sourceMappingURL=connections-status.js.map

package/public/connections-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connections-status.js","sourceRoot":"","sources":["../../jsr/public/connections-status.ts"],"names":[],"mappings":"AA0BA,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAEtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAA2B,MAAM,mBAAmB,CAAC;AA4CrG,SAAS,YAAY,CAAC,IAAa,EAAE,MAAc;IACjD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QAIN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE;KAC7E,CAAC,CAAC;AACL,CAAC;AAsBD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAgB,EAAE,IAA2B;IACzF,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAMxC,MAAM,aAAa,GAAG,KAAK,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE,CAAC;IAClD,IAAI,CAAC,aAAa,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;QACtE,OAAO,YAAY,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,KAAK,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvG,MAAM,QAAQ,GAAG,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IAE3D,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAEtF,MAAM,eAAe,GAAG,aAAa;QACnC,CAAC,CAAC,EAAE,QAAQ,EAAE;QACd,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,KAAK,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC;IAEjG,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAGzB,OAAO,YAAY,CACjB,EAAE,GAAG,eAAe,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAkC,EACvH,GAAG,CACJ,CAAC;IACJ,CAAC;IAQD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CACvC,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EACtD,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EACvD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CACzB,CAAC;IAEF,OAAO,YAAY,CACjB;QACE,GAAG,eAAe;QAClB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;QACzD,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;QACnF,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;KAC3C,EACjC,GAAG,CACJ,CAAC;AACJ,CAAC"}

package/public/connections-store.d.ts

@@ -0,0 +1,73 @@
+import { cfDrizzle, VibesApiTables } from "@vibes.diy/api-sql";
+export interface ConnectionsSql {
+    db: ReturnType<typeof cfDrizzle>["db"];
+    tables: VibesApiTables;
+}
+export type ConnectionState = "absent" | "live" | "expiring" | "dead";
+export declare const CONNECTION_EXPIRING_WINDOW_MS: number;
+export interface ConnectionStatus {
+    readonly provider: string;
+    readonly state: ConnectionState;
+    readonly consented: boolean;
+    readonly accountLabel?: string;
+    readonly expiresAt?: string;
+}
+export interface ConnectionKey {
+    readonly userId: string;
+    readonly provider: string;
+    readonly ownerHandle: string;
+    readonly appSlug: string;
+}
+export declare function packScopes(scopes: readonly string[]): string;
+export declare function readConnectionStatus(sql: ConnectionsSql, key: ConnectionKey, nowMs?: number): Promise<ConnectionStatus>;
+export interface ExpiringGrantRow {
+    readonly userId: string;
+    readonly provider: string;
+    readonly accountLabel: string;
+    readonly expiresAt: string;
+}
+export interface ExpiringGrantCursor {
+    readonly expiresAt: string;
+    readonly userId: string;
+    readonly provider: string;
+}
+export declare function listGrantsExpiringBefore(sql: ConnectionsSql, input: {
+    readonly nowIso: string;
+    readonly horizonIso: string;
+    readonly limit: number;
+    readonly after?: ExpiringGrantCursor;
+}): Promise<ExpiringGrantRow[]>;
+export declare function countGrantsExpiringBefore(sql: ConnectionsSql, input: {
+    readonly nowIso: string;
+    readonly horizonIso: string;
+    readonly after?: ExpiringGrantCursor;
+}): Promise<number>;
+export interface UpsertGrantInput {
+    readonly userId: string;
+    readonly provider: string;
+    readonly accessToken: string;
+    readonly accountLabel: string;
+    readonly accountId?: string;
+    readonly refreshToken?: string;
+    readonly expiresAt?: string;
+    readonly scopes: readonly string[];
+    readonly nowMs: number;
+}
+export interface UpsertGrantResult {
+    readonly consentsRevoked: boolean;
+}
+export declare function upsertGrant(sql: ConnectionsSql, input: UpsertGrantInput): Promise<UpsertGrantResult>;
+export interface UpsertConsentInput {
+    readonly userId: string;
+    readonly provider: string;
+    readonly ownerHandle: string;
+    readonly appSlug: string;
+    readonly scopes: readonly string[];
+    readonly nowMs: number;
+}
+export declare function upsertConsent(sql: ConnectionsSql, input: UpsertConsentInput): Promise<void>;
+export declare function revokeConsent(sql: ConnectionsSql, key: ConnectionKey, nowMs?: number): Promise<void>;
+export declare function disconnectAccount(sql: ConnectionsSql, input: {
+    readonly userId: string;
+    readonly provider: string;
+}, nowMs?: number): Promise<void>;

package/public/connections-store.js

@@ -0,0 +1,173 @@
+import { and, eq, gt, lte, ne, or } from "drizzle-orm/sql/expressions";
+import { sql as drizzleSql } from "drizzle-orm";
+export const CONNECTION_EXPIRING_WINDOW_MS = 14 * 24 * 60 * 60 * 1000;
+export function packScopes(scopes) {
+    return scopes.filter((s) => s !== "").join(" ");
+}
+export async function readConnectionStatus(sql, key, nowMs = Date.now()) {
+    const t_g = sql.tables.thirdPartyGrants;
+    const grant = await sql.db
+        .select({
+        accountLabel: t_g.accountLabel,
+        expiresAt: t_g.expiresAt,
+        status: t_g.status,
+        revokedAt: t_g.revokedAt,
+    })
+        .from(t_g)
+        .where(and(eq(t_g.userId, key.userId), eq(t_g.provider, key.provider)))
+        .limit(1)
+        .then((rows) => rows[0]);
+    const t_c = sql.tables.thirdPartyConsents;
+    const consent = await sql.db
+        .select({ userId: t_c.userId })
+        .from(t_c)
+        .where(and(eq(t_c.userId, key.userId), eq(t_c.provider, key.provider), eq(t_c.ownerHandle, key.ownerHandle), eq(t_c.appSlug, key.appSlug), eq(t_c.revokedAt, "")))
+        .limit(1)
+        .then((rows) => rows[0]);
+    const consented = consent !== undefined;
+    if (grant === undefined)
+        return { provider: key.provider, state: "absent", consented };
+    const expiresAt = grant.expiresAt === "" ? undefined : grant.expiresAt;
+    const base = {
+        provider: key.provider,
+        consented,
+        ...(grant.accountLabel === "" ? {} : { accountLabel: grant.accountLabel }),
+        ...(expiresAt === undefined ? {} : { expiresAt }),
+    };
+    if (grant.revokedAt !== "" || grant.status === "dead")
+        return { ...base, state: "dead" };
+    if (expiresAt !== undefined) {
+        const at = Date.parse(expiresAt);
+        if (Number.isNaN(at) || at <= nowMs)
+            return { ...base, state: "dead" };
+        if (at - nowMs <= CONNECTION_EXPIRING_WINDOW_MS)
+            return { ...base, state: "expiring" };
+    }
+    return { ...base, state: "live" };
+}
+function expiringWindowWhere(t, input) {
+    const window = and(eq(t.revokedAt, ""), eq(t.status, "live"), ne(t.expiresAt, ""), gt(t.expiresAt, input.nowIso), lte(t.expiresAt, input.horizonIso));
+    const after = input.after;
+    if (after === undefined)
+        return window;
+    return and(window, or(gt(t.expiresAt, after.expiresAt), and(eq(t.expiresAt, after.expiresAt), gt(t.userId, after.userId)), and(eq(t.expiresAt, after.expiresAt), eq(t.userId, after.userId), gt(t.provider, after.provider))));
+}
+export async function listGrantsExpiringBefore(sql, input) {
+    const t = sql.tables.thirdPartyGrants;
+    return sql.db
+        .select({
+        userId: t.userId,
+        provider: t.provider,
+        accountLabel: t.accountLabel,
+        expiresAt: t.expiresAt,
+    })
+        .from(t)
+        .where(expiringWindowWhere(t, input))
+        .orderBy(t.expiresAt, t.userId, t.provider)
+        .limit(input.limit);
+}
+export async function countGrantsExpiringBefore(sql, input) {
+    const t = sql.tables.thirdPartyGrants;
+    const row = await sql.db
+        .select({ n: drizzleSql `cast(count(*) as int)` })
+        .from(t)
+        .where(expiringWindowWhere(t, input))
+        .then((rows) => rows[0]);
+    return row === undefined ? 0 : Number(row.n);
+}
+export async function upsertGrant(sql, input) {
+    const now = new Date(input.nowMs).toISOString();
+    const t_g = sql.tables.thirdPartyGrants;
+    const scopes = packScopes(input.scopes);
+    const expiresAt = input.expiresAt ?? "";
+    const accountId = input.accountId ?? "";
+    const existing = await sql.db
+        .select({ accountId: t_g.accountId })
+        .from(t_g)
+        .where(and(eq(t_g.userId, input.userId), eq(t_g.provider, input.provider)))
+        .limit(1)
+        .then((rows) => rows[0]);
+    const sameAccountProven = existing !== undefined && existing.accountId !== "" && accountId !== "" && existing.accountId === accountId;
+    const consentsRevoked = existing !== undefined && sameAccountProven === false;
+    if (consentsRevoked === true) {
+        const t_c = sql.tables.thirdPartyConsents;
+        await sql.db
+            .update(t_c)
+            .set({ revokedAt: now, updated: now })
+            .where(and(eq(t_c.userId, input.userId), eq(t_c.provider, input.provider), eq(t_c.revokedAt, "")));
+    }
+    await sql.db
+        .insert(t_g)
+        .values({
+        userId: input.userId,
+        provider: input.provider,
+        accountLabel: input.accountLabel,
+        accountId,
+        accessToken: input.accessToken,
+        refreshToken: input.refreshToken ?? "",
+        expiresAt,
+        scopes,
+        status: "live",
+        created: now,
+        updated: now,
+        revokedAt: "",
+    })
+        .onConflictDoUpdate({
+        target: [t_g.userId, t_g.provider],
+        set: {
+            accountLabel: input.accountLabel,
+            accountId,
+            accessToken: input.accessToken,
+            refreshToken: input.refreshToken ?? "",
+            expiresAt,
+            scopes,
+            status: "live",
+            updated: now,
+            revokedAt: "",
+        },
+    });
+    return { consentsRevoked };
+}
+export async function upsertConsent(sql, input) {
+    const now = new Date(input.nowMs).toISOString();
+    const t_c = sql.tables.thirdPartyConsents;
+    const scopes = packScopes(input.scopes);
+    await sql.db
+        .insert(t_c)
+        .values({
+        userId: input.userId,
+        provider: input.provider,
+        ownerHandle: input.ownerHandle,
+        appSlug: input.appSlug,
+        scopes,
+        created: now,
+        updated: now,
+        revokedAt: "",
+    })
+        .onConflictDoUpdate({
+        target: [t_c.userId, t_c.provider, t_c.ownerHandle, t_c.appSlug],
+        set: { scopes, updated: now, revokedAt: "" },
+    });
+}
+export async function revokeConsent(sql, key, nowMs = Date.now()) {
+    const now = new Date(nowMs).toISOString();
+    const t_c = sql.tables.thirdPartyConsents;
+    await sql.db
+        .update(t_c)
+        .set({ revokedAt: now, updated: now })
+        .where(and(eq(t_c.userId, key.userId), eq(t_c.provider, key.provider), eq(t_c.ownerHandle, key.ownerHandle), eq(t_c.appSlug, key.appSlug), eq(t_c.revokedAt, "")));
+}
+export async function disconnectAccount(sql, input, nowMs = Date.now()) {
+    const now = new Date(nowMs).toISOString();
+    const t_g = sql.tables.thirdPartyGrants;
+    await sql.db
+        .update(t_g)
+        .set({ revokedAt: now, status: "dead", updated: now })
+        .where(and(eq(t_g.userId, input.userId), eq(t_g.provider, input.provider), eq(t_g.revokedAt, "")));
+    const t_c = sql.tables.thirdPartyConsents;
+    await sql.db
+        .update(t_c)
+        .set({ revokedAt: now, updated: now })
+        .where(and(eq(t_c.userId, input.userId), eq(t_c.provider, input.provider), eq(t_c.revokedAt, "")));
+}
+//# sourceMappingURL=connections-store.js.map