@within-7/minto 0.4.2 → 0.4.3

package/dist/services/oauth.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../src/services/oauth.ts"],
-  "sourcesContent": ["import * as crypto from 'crypto'\nimport * as http from 'http'\nimport { IncomingMessage, ServerResponse } from 'http'\nimport * as url from 'url'\n\nimport { OAUTH_CONFIG } from '@constants/oauth'\nimport { openBrowser } from '@utils/browser'\nimport { logError } from '@utils/log'\nimport { resetAnthropicClient } from './claude'\nimport {\n  AccountInfo,\n  getMutableGlobalConfig,\n  saveGlobalConfig,\n  normalizeApiKeyForConfig,\n} from '@utils/config'\n\n// Base64URL encoding function (RFC 4648)\nfunction base64URLEncode(buffer: Buffer): string {\n  return buffer\n    .toString('base64')\n    .replace(/\\+/g, '-')\n    .replace(/\\//g, '_')\n    .replace(/=/g, '')\n}\n\nfunction generateCodeVerifier(): string {\n  return base64URLEncode(crypto.randomBytes(32))\n}\n\nasync function generateCodeChallenge(verifier: string): Promise<string> {\n  const encoder = new TextEncoder()\n  const data = encoder.encode(verifier)\n  const digest = await crypto.subtle.digest('SHA-256', data)\n  return base64URLEncode(Buffer.from(digest))\n}\n\ntype OAuthTokenExchangeResponse = {\n  access_token: string\n  account?: {\n    uuid: string\n    email_address: string\n  }\n  organization?: {\n    uuid: string\n    name: string\n  }\n}\n\nexport type OAuthResult = {\n  accessToken: string\n}\n\nexport class OAuthService {\n  private server: http.Server | null = null\n  private codeVerifier: string\n  private expectedState: string | null = null\n  private pendingCodePromise: {\n    resolve: (result: {\n      authorizationCode: string\n      useManualRedirect: boolean\n    }) => void\n    reject: (err: Error) => void\n  } | null = null\n\n  constructor() {\n    this.codeVerifier = generateCodeVerifier()\n  }\n\n  private generateAuthUrls(\n    codeChallenge: string,\n    state: string,\n  ): { autoUrl: string; manualUrl: string } {\n    function makeUrl(isManual: boolean): string {\n      const authUrl = new URL(OAUTH_CONFIG.AUTHORIZE_URL)\n      authUrl.searchParams.append('client_id', OAUTH_CONFIG.CLIENT_ID)\n      authUrl.searchParams.append('response_type', 'code')\n      authUrl.searchParams.append(\n        'redirect_uri',\n        isManual\n          ? OAUTH_CONFIG.MANUAL_REDIRECT_URL\n          : `http://localhost:${OAUTH_CONFIG.REDIRECT_PORT}/callback`,\n      )\n      authUrl.searchParams.append('scope', OAUTH_CONFIG.SCOPES.join(' '))\n      authUrl.searchParams.append('code_challenge', codeChallenge)\n      authUrl.searchParams.append('code_challenge_method', 'S256')\n      authUrl.searchParams.append('state', state)\n      return authUrl.toString()\n    }\n\n    return {\n      autoUrl: makeUrl(false),\n      manualUrl: makeUrl(true),\n    }\n  }\n\n  async startOAuthFlow(\n    authURLHandler: (url: string) => Promise<void>,\n  ): Promise<OAuthResult> {\n    const codeChallenge = await generateCodeChallenge(this.codeVerifier)\n    const state = base64URLEncode(crypto.randomBytes(32))\n    this.expectedState = state\n    const { autoUrl, manualUrl } = this.generateAuthUrls(codeChallenge, state)\n\n    const onReady = async () => {\n      await authURLHandler(manualUrl)\n      await openBrowser(autoUrl)\n    }\n\n    const { authorizationCode, useManualRedirect } = await new Promise<{\n      authorizationCode: string\n      useManualRedirect: boolean\n    }>((resolve, reject) => {\n      this.pendingCodePromise = { resolve, reject }\n      this.startLocalServer(state, onReady)\n    })\n\n    // Exchange code for tokens\n    const {\n      access_token: accessToken,\n      account,\n      organization,\n    } = await this.exchangeCodeForTokens(\n      authorizationCode,\n      state,\n      useManualRedirect,\n    )\n\n    // Store account info\n    if (account) {\n      const accountInfo: AccountInfo = {\n        accountUuid: account.uuid,\n        emailAddress: account.email_address,\n        organizationUuid: organization?.uuid,\n      }\n      const config = getMutableGlobalConfig()\n      config.oauthAccount = accountInfo\n      saveGlobalConfig(config)\n    }\n\n    return { accessToken }\n  }\n\n  private startLocalServer(state: string, onReady?: () => void): void {\n    if (this.server) {\n      this.closeServer()\n    }\n    this.server = http.createServer(\n      (req: IncomingMessage, res: ServerResponse) => {\n        const parsedUrl = url.parse(req.url || '', true)\n\n        if (parsedUrl.pathname === '/callback') {\n          const authorizationCode = parsedUrl.query.code as string\n          const returnedState = parsedUrl.query.state as string\n\n          if (!authorizationCode) {\n            res.writeHead(400)\n            res.end('Authorization code not found')\n            if (this.pendingCodePromise) {\n              this.pendingCodePromise.reject(\n                new Error('No authorization code received'),\n              )\n            }\n            return\n          }\n\n          if (returnedState !== state) {\n            res.writeHead(400)\n            res.end('Invalid state parameter')\n            if (this.pendingCodePromise) {\n              this.pendingCodePromise.reject(\n                new Error('Invalid state parameter'), // Possible CSRF attack\n              )\n            }\n            return\n          }\n\n          res.writeHead(302, {\n            Location: OAUTH_CONFIG.SUCCESS_URL,\n          })\n          res.end()\n\n          this.processCallback({\n            authorizationCode,\n            state,\n            useManualRedirect: false,\n          })\n        } else {\n          res.writeHead(404)\n          res.end()\n        }\n      },\n    )\n\n    this.server.listen(OAUTH_CONFIG.REDIRECT_PORT, async () => {\n      onReady?.()\n    })\n\n    this.server.on('error', (err: Error) => {\n      const portError = err as NodeJS.ErrnoException\n      if (portError.code === 'EADDRINUSE') {\n        const error = new Error(\n          `Port ${OAUTH_CONFIG.REDIRECT_PORT} is already in use. Please ensure no other applications are using this port.`,\n        )\n        logError(error)\n        this.closeServer()\n        if (this.pendingCodePromise) {\n          this.pendingCodePromise.reject(error)\n        }\n        return\n      } else {\n        logError(err)\n        this.closeServer()\n        if (this.pendingCodePromise) {\n          this.pendingCodePromise.reject(err)\n        }\n        return\n      }\n    })\n  }\n\n  private async exchangeCodeForTokens(\n    authorizationCode: string,\n    state: string,\n    useManualRedirect: boolean = false,\n  ): Promise<OAuthTokenExchangeResponse> {\n    const requestBody = {\n      grant_type: 'authorization_code',\n      code: authorizationCode,\n      redirect_uri: useManualRedirect\n        ? OAUTH_CONFIG.MANUAL_REDIRECT_URL\n        : `http://localhost:${OAUTH_CONFIG.REDIRECT_PORT}/callback`,\n      client_id: OAUTH_CONFIG.CLIENT_ID,\n      code_verifier: this.codeVerifier,\n      state,\n    }\n\n    const response = await fetch(OAUTH_CONFIG.TOKEN_URL, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify(requestBody),\n      signal: AbortSignal.timeout(30_000),\n    })\n\n    if (!response.ok) {\n      throw new Error(`Token exchange failed: ${response.statusText}`)\n    }\n\n    const data = await response.json()\n    return data\n  }\n\n  processCallback({\n    authorizationCode,\n    state,\n    useManualRedirect,\n  }: {\n    authorizationCode: string\n    state: string\n    useManualRedirect: boolean\n  }): void {\n    this.closeServer()\n\n    if (state !== this.expectedState) {\n      if (this.pendingCodePromise) {\n        this.pendingCodePromise.reject(\n          new Error('Invalid state parameter'), // Possible CSRF attack\n        )\n        this.pendingCodePromise = null\n      }\n      return\n    }\n\n    if (this.pendingCodePromise) {\n      this.pendingCodePromise.resolve({ authorizationCode, useManualRedirect })\n      this.pendingCodePromise = null\n    }\n  }\n\n  private closeServer(): void {\n    if (this.server) {\n      this.server.close()\n      this.server = null\n    }\n  }\n}\n\nexport async function createAndStoreApiKey(\n  accessToken: string,\n): Promise<string | null> {\n  try {\n    // Call create_api_key endpoint\n    const createApiKeyResp = await fetch(OAUTH_CONFIG.API_KEY_URL, {\n      method: 'POST',\n      headers: { Authorization: `Bearer ${accessToken}` },\n      signal: AbortSignal.timeout(30_000),\n    })\n\n    let apiKeyData\n    let errorText = ''\n\n    try {\n      apiKeyData = await createApiKeyResp.json()\n    } catch (_e) {\n      // If response is not valid JSON, get as text for error logging\n      errorText = await createApiKeyResp.text()\n    }\n\n    if (createApiKeyResp.ok && apiKeyData && apiKeyData.raw_key) {\n      const apiKey = apiKeyData.raw_key\n\n      // Store in global config\n      const config = getMutableGlobalConfig()\n\n      // Note: API key is now managed per model profile\n\n      // Add to approved list\n      if (!config.customApiKeyResponses) {\n        config.customApiKeyResponses = { approved: [], rejected: [] }\n      }\n      if (!config.customApiKeyResponses.approved) {\n        config.customApiKeyResponses.approved = []\n      }\n\n      const normalizedKey = normalizeApiKeyForConfig(apiKey)\n      if (!config.customApiKeyResponses.approved.includes(normalizedKey)) {\n        config.customApiKeyResponses.approved.push(normalizedKey)\n      }\n\n      // Save config\n      saveGlobalConfig(config)\n\n      // Reset the Anthropic client to force creation with new API key\n      resetAnthropicClient()\n\n      return apiKey\n    }\n\n    return null\n  } catch (error) {\n    throw error\n  }\n}\n"],
-  "mappings": "AAAA,YAAY,YAAY;AACxB,YAAY,UAAU;AAEtB,YAAY,SAAS;AAErB,SAAS,oBAAoB;AAC7B,SAAS,mBAAmB;AAC5B,SAAS,gBAAgB;AACzB,SAAS,4BAA4B;AACrC;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP,SAAS,gBAAgB,QAAwB;AAC/C,SAAO,OACJ,SAAS,QAAQ,EACjB,QAAQ,OAAO,GAAG,EAClB,QAAQ,OAAO,GAAG,EAClB,QAAQ,MAAM,EAAE;AACrB;AAEA,SAAS,uBAA+B;AACtC,SAAO,gBAAgB,OAAO,YAAY,EAAE,CAAC;AAC/C;AAEA,eAAe,sBAAsB,UAAmC;AACtE,QAAM,UAAU,IAAI,YAAY;AAChC,QAAM,OAAO,QAAQ,OAAO,QAAQ;AACpC,QAAM,SAAS,MAAM,OAAO,OAAO,OAAO,WAAW,IAAI;AACzD,SAAO,gBAAgB,OAAO,KAAK,MAAM,CAAC;AAC5C;AAkBO,MAAM,aAAa;AAAA,EAChB,SAA6B;AAAA,EAC7B;AAAA,EACA,gBAA+B;AAAA,EAC/B,qBAMG;AAAA,EAEX,cAAc;AACZ,SAAK,eAAe,qBAAqB;AAAA,EAC3C;AAAA,EAEQ,iBACN,eACA,OACwC;AACxC,aAAS,QAAQ,UAA2B;AAC1C,YAAM,UAAU,IAAI,IAAI,aAAa,aAAa;AAClD,cAAQ,aAAa,OAAO,aAAa,aAAa,SAAS;AAC/D,cAAQ,aAAa,OAAO,iBAAiB,MAAM;AACnD,cAAQ,aAAa;AAAA,QACnB;AAAA,QACA,WACI,aAAa,sBACb,oBAAoB,aAAa,aAAa;AAAA,MACpD;AACA,cAAQ,aAAa,OAAO,SAAS,aAAa,OAAO,KAAK,GAAG,CAAC;AAClE,cAAQ,aAAa,OAAO,kBAAkB,aAAa;AAC3D,cAAQ,aAAa,OAAO,yBAAyB,MAAM;AAC3D,cAAQ,aAAa,OAAO,SAAS,KAAK;AAC1C,aAAO,QAAQ,SAAS;AAAA,IAC1B;AAEA,WAAO;AAAA,MACL,SAAS,QAAQ,KAAK;AAAA,MACtB,WAAW,QAAQ,IAAI;AAAA,IACzB;AAAA,EACF;AAAA,EAEA,MAAM,eACJ,gBACsB;AACtB,UAAM,gBAAgB,MAAM,sBAAsB,KAAK,YAAY;AACnE,UAAM,QAAQ,gBAAgB,OAAO,YAAY,EAAE,CAAC;AACpD,SAAK,gBAAgB;AACrB,UAAM,EAAE,SAAS,UAAU,IAAI,KAAK,iBAAiB,eAAe,KAAK;AAEzE,UAAM,UAAU,YAAY;AAC1B,YAAM,eAAe,SAAS;AAC9B,YAAM,YAAY,OAAO;AAAA,IAC3B;AAEA,UAAM,EAAE,mBAAmB,kBAAkB,IAAI,MAAM,IAAI,QAGxD,CAAC,SAAS,WAAW;AACtB,WAAK,qBAAqB,EAAE,SAAS,OAAO;AAC5C,WAAK,iBAAiB,OAAO,OAAO;AAAA,IACtC,CAAC;AAGD,UAAM;AAAA,MACJ,cAAc;AAAA,MACd;AAAA,MACA;AAAA,IACF,IAAI,MAAM,KAAK;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAGA,QAAI,SAAS;AACX,YAAM,cAA2B;AAAA,QAC/B,aAAa,QAAQ;AAAA,QACrB,cAAc,QAAQ;AAAA,QACtB,kBAAkB,cAAc;AAAA,MAClC;AACA,YAAM,SAAS,uBAAuB;AACtC,aAAO,eAAe;AACtB,uBAAiB,MAAM;AAAA,IACzB;AAEA,WAAO,EAAE,YAAY;AAAA,EACvB;AAAA,EAEQ,iBAAiB,OAAe,SAA4B;AAClE,QAAI,KAAK,QAAQ;AACf,WAAK,YAAY;AAAA,IACnB;AACA,SAAK,SAAS,KAAK;AAAA,MACjB,CAAC,KAAsB,QAAwB;AAC7C,cAAM,YAAY,IAAI,MAAM,IAAI,OAAO,IAAI,IAAI;AAE/C,YAAI,UAAU,aAAa,aAAa;AACtC,gBAAM,oBAAoB,UAAU,MAAM;AAC1C,gBAAM,gBAAgB,UAAU,MAAM;AAEtC,cAAI,CAAC,mBAAmB;AACtB,gBAAI,UAAU,GAAG;AACjB,gBAAI,IAAI,8BAA8B;AACtC,gBAAI,KAAK,oBAAoB;AAC3B,mBAAK,mBAAmB;AAAA,gBACtB,IAAI,MAAM,gCAAgC;AAAA,cAC5C;AAAA,YACF;AACA;AAAA,UACF;AAEA,cAAI,kBAAkB,OAAO;AAC3B,gBAAI,UAAU,GAAG;AACjB,gBAAI,IAAI,yBAAyB;AACjC,gBAAI,KAAK,oBAAoB;AAC3B,mBAAK,mBAAmB;AAAA,gBACtB,IAAI,MAAM,yBAAyB;AAAA;AAAA,cACrC;AAAA,YACF;AACA;AAAA,UACF;AAEA,cAAI,UAAU,KAAK;AAAA,YACjB,UAAU,aAAa;AAAA,UACzB,CAAC;AACD,cAAI,IAAI;AAER,eAAK,gBAAgB;AAAA,YACnB;AAAA,YACA;AAAA,YACA,mBAAmB;AAAA,UACrB,CAAC;AAAA,QACH,OAAO;AACL,cAAI,UAAU,GAAG;AACjB,cAAI,IAAI;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAEA,SAAK,OAAO,OAAO,aAAa,eAAe,YAAY;AACzD,gBAAU;AAAA,IACZ,CAAC;AAED,SAAK,OAAO,GAAG,SAAS,CAAC,QAAe;AACtC,YAAM,YAAY;AAClB,UAAI,UAAU,SAAS,cAAc;AACnC,cAAM,QAAQ,IAAI;AAAA,UAChB,QAAQ,aAAa,aAAa;AAAA,QACpC;AACA,iBAAS,KAAK;AACd,aAAK,YAAY;AACjB,YAAI,KAAK,oBAAoB;AAC3B,eAAK,mBAAmB,OAAO,KAAK;AAAA,QACtC;AACA;AAAA,MACF,OAAO;AACL,iBAAS,GAAG;AACZ,aAAK,YAAY;AACjB,YAAI,KAAK,oBAAoB;AAC3B,eAAK,mBAAmB,OAAO,GAAG;AAAA,QACpC;AACA;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,sBACZ,mBACA,OACA,oBAA6B,OACQ;AACrC,UAAM,cAAc;AAAA,MAClB,YAAY;AAAA,MACZ,MAAM;AAAA,MACN,cAAc,oBACV,aAAa,sBACb,oBAAoB,aAAa,aAAa;AAAA,MAClD,WAAW,aAAa;AAAA,MACxB,eAAe,KAAK;AAAA,MACpB;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,MAAM,aAAa,WAAW;AAAA,MACnD,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU,WAAW;AAAA,MAChC,QAAQ,YAAY,QAAQ,GAAM;AAAA,IACpC,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,MAAM,0BAA0B,SAAS,UAAU,EAAE;AAAA,IACjE;AAEA,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,WAAO;AAAA,EACT;AAAA,EAEA,gBAAgB;AAAA,IACd;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAIS;AACP,SAAK,YAAY;AAEjB,QAAI,UAAU,KAAK,eAAe;AAChC,UAAI,KAAK,oBAAoB;AAC3B,aAAK,mBAAmB;AAAA,UACtB,IAAI,MAAM,yBAAyB;AAAA;AAAA,QACrC;AACA,aAAK,qBAAqB;AAAA,MAC5B;AACA;AAAA,IACF;AAEA,QAAI,KAAK,oBAAoB;AAC3B,WAAK,mBAAmB,QAAQ,EAAE,mBAAmB,kBAAkB,CAAC;AACxE,WAAK,qBAAqB;AAAA,IAC5B;AAAA,EACF;AAAA,EAEQ,cAAoB;AAC1B,QAAI,KAAK,QAAQ;AACf,WAAK,OAAO,MAAM;AAClB,WAAK,SAAS;AAAA,IAChB;AAAA,EACF;AACF;AAEA,eAAsB,qBACpB,aACwB;AACxB,MAAI;AAEF,UAAM,mBAAmB,MAAM,MAAM,aAAa,aAAa;AAAA,MAC7D,QAAQ;AAAA,MACR,SAAS,EAAE,eAAe,UAAU,WAAW,GAAG;AAAA,MAClD,QAAQ,YAAY,QAAQ,GAAM;AAAA,IACpC,CAAC;AAED,QAAI;AACJ,QAAI,YAAY;AAEhB,QAAI;AACF,mBAAa,MAAM,iBAAiB,KAAK;AAAA,IAC3C,SAAS,IAAI;AAEX,kBAAY,MAAM,iBAAiB,KAAK;AAAA,IAC1C;AAEA,QAAI,iBAAiB,MAAM,cAAc,WAAW,SAAS;AAC3D,YAAM,SAAS,WAAW;AAG1B,YAAM,SAAS,uBAAuB;AAKtC,UAAI,CAAC,OAAO,uBAAuB;AACjC,eAAO,wBAAwB,EAAE,UAAU,CAAC,GAAG,UAAU,CAAC,EAAE;AAAA,MAC9D;AACA,UAAI,CAAC,OAAO,sBAAsB,UAAU;AAC1C,eAAO,sBAAsB,WAAW,CAAC;AAAA,MAC3C;AAEA,YAAM,gBAAgB,yBAAyB,MAAM;AACrD,UAAI,CAAC,OAAO,sBAAsB,SAAS,SAAS,aAAa,GAAG;AAClE,eAAO,sBAAsB,SAAS,KAAK,aAAa;AAAA,MAC1D;AAGA,uBAAiB,MAAM;AAGvB,2BAAqB;AAErB,aAAO;AAAA,IACT;AAEA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,UAAM;AAAA,EACR;AACF;",
-  "names": []
-}