@zhin.js/plugin-calendar 0.0.0-stage → 0.1.1

package/lib/chat-auth.js

@@ -0,0 +1,233 @@
+import { buildAuthorizeUrl, createOAuthState, createPkcePair, exchangeAuthorizationCode, } from "./oauth-auth.js";
+import { OAuthSessionRegistry, OAUTH_SESSION_TTL_MS } from "./oauth-session.js";
+import { cleanSecret } from "./secrets.js";
+import { authCommandFor, } from "./token-manager.js";
+export const DEFAULT_OAUTH_CALLBACK_PATH = "/calendar/oauth/callback";
+export const OAUTH_PROVIDERS = [
+    "google",
+    "microsoft",
+];
+const PROVIDER_DISPLAY_NAME = {
+    google: "Google 日历",
+    microsoft: "Outlook 日历",
+};
+export function parseOAuthProvider(value) {
+    const normalized = String(value ?? "")
+        .trim()
+        .toLowerCase();
+    if (normalized === "google") {
+        return "google";
+    }
+    if (normalized === "microsoft" || normalized === "outlook") {
+        return "microsoft";
+    }
+    return undefined;
+}
+/** Joins a base URL and the callback path, tolerating extra/missing slashes. */
+export function buildRedirectUri(baseUrl, callbackPath) {
+    const trimmedBase = baseUrl.trim().replace(/\/+$/, "");
+    const normalizedPath = `/${callbackPath.trim().replace(/^\/+/, "")}`;
+    return `${trimmedBase}${normalizedPath}`;
+}
+/** Turns a listening address into a browser-reachable local origin. */
+export function localOriginFromAddress(address) {
+    const wildcardHosts = new Set(["0.0.0.0", "::", "[::]", ""]);
+    const host = wildcardHosts.has(address.host) ? "127.0.0.1" : address.host;
+    const formattedHost = host.includes(":") && !host.startsWith("[") ? `[${host}]` : host;
+    return `${address.protocol}://${formattedHost}:${address.port}`;
+}
+export class CalendarAuthService {
+    #config;
+    #managers;
+    #credentials;
+    #notify;
+    #resolveRedirectUri;
+    #fetch;
+    #sessions;
+    constructor(options) {
+        this.#config = options.config;
+        this.#managers = options.managers;
+        this.#credentials = options.credentials;
+        this.#notify = options.notify;
+        this.#resolveRedirectUri = options.resolveRedirectUri;
+        this.#fetch = options.fetchImpl;
+        this.#sessions = new OAuthSessionRegistry({ now: options.now });
+    }
+    /** Handles `calendar auth <provider>` and returns the chat reply. */
+    async startAuthorization(provider, requester) {
+        const displayName = PROVIDER_DISPLAY_NAME[provider];
+        if (!this.#credentials) {
+            return "日历授权需要数据库（databaseHostToken）来保存 refresh_token，当前不可用。";
+        }
+        const client = this.#clientCredentials(provider);
+        if (!client) {
+            return this.#missingClientMessage(provider);
+        }
+        const redirectUri = this.#resolveRedirectUri();
+        if (!redirectUri) {
+            return "未找到 HTTP 服务地址：请启用 zhin 的 HTTP Host，或在 plugins.calendar.oauth_redirect_base_url 配置外部可访问地址。";
+        }
+        const pkce = createPkcePair();
+        const state = createOAuthState();
+        this.#sessions.create({
+            provider,
+            state,
+            codeVerifier: pkce.verifier,
+            redirectUri,
+            requester,
+        });
+        const authorizeUrl = buildAuthorizeUrl({
+            provider,
+            clientId: client.clientId,
+            redirectUri,
+            state,
+            codeChallenge: pkce.challenge,
+            tenant: client.tenant,
+        });
+        const validMinutes = Math.round(OAUTH_SESSION_TTL_MS / 60_000);
+        return [
+            `请在浏览器打开下面的链接完成${displayName}授权（${validMinutes} 分钟内有效，只能使用一次）：`,
+            authorizeUrl,
+            "",
+            `回调地址：${redirectUri}`,
+            "该地址必须能从打开链接的浏览器访问，并已登记在 OAuth 客户端的重定向 URI 中。",
+        ].join("\n");
+    }
+    /** Handles the OAuth redirect back to the HTTP host. */
+    async handleCallback(searchParams) {
+        const state = searchParams.get("state") ?? "";
+        const session = state ? this.#sessions.consume(state) : undefined;
+        if (!session) {
+            return {
+                statusCode: 400,
+                message: "授权链接无效、已使用或已过期，请在聊天中重新发送 calendar auth 命令。",
+            };
+        }
+        const provider = session.provider;
+        const displayName = PROVIDER_DISPLAY_NAME[provider];
+        const oauthError = searchParams.get("error");
+        if (oauthError) {
+            const description = searchParams.get("error_description") ?? "";
+            const detail = `${oauthError} ${description}`.trim();
+            await this.#notifySafely(session.requester.target, `${displayName}授权失败：${detail}`);
+            return { statusCode: 400, message: `授权失败：${detail}` };
+        }
+        const code = searchParams.get("code") ?? "";
+        const client = this.#clientCredentials(provider);
+        if (!code || !client || !this.#credentials) {
+            return {
+                statusCode: 400,
+                message: "缺少授权码或客户端配置，请重新授权。",
+            };
+        }
+        try {
+            const tokens = await exchangeAuthorizationCode({
+                provider,
+                clientId: client.clientId,
+                clientSecret: client.clientSecret || undefined,
+                tenant: client.tenant,
+                redirectUri: session.redirectUri,
+                code,
+                codeVerifier: session.codeVerifier,
+                fetchImpl: this.#fetch,
+            });
+            await this.#credentials.save(provider, tokens.refreshToken, session.requester);
+            this.#managers[provider]?.setRefreshToken(tokens.refreshToken);
+        }
+        catch (error) {
+            const reason = error instanceof Error ? error.message : String(error);
+            await this.#notifySafely(session.requester.target, `${displayName}授权失败：${reason}`);
+            return { statusCode: 502, message: `授权失败：${reason}` };
+        }
+        const providerHint = this.#config.provider === provider
+            ? ""
+            : `\n注意：当前 plugins.calendar.provider 是 ${this.#config.provider}，日历工具不会使用 ${provider}。`;
+        await this.#notifySafely(session.requester.target, `${displayName}授权成功，refresh_token 已保存到插件数据库。${providerHint}`);
+        return { statusCode: 200, message: "授权成功，可以关闭此页回到聊天。" };
+    }
+    /** Handles `calendar status`. */
+    async describeStatus() {
+        const lines = [`当前 provider：${this.#config.provider}`];
+        for (const provider of OAUTH_PROVIDERS) {
+            lines.push(await this.#describeProvider(provider));
+        }
+        return lines.join("\n");
+    }
+    /** Handles `calendar logout <provider>`: removes the stored token. */
+    async logout(provider) {
+        const displayName = PROVIDER_DISPLAY_NAME[provider];
+        if (!this.#credentials) {
+            return "数据库不可用，没有可删除的授权。";
+        }
+        await this.#credentials.delete(provider);
+        this.#managers[provider]?.clearTokens();
+        return `已删除${displayName}在插件数据库中的授权。若 .env 里仍有 refresh_token，重载配置后会继续作为后备使用。`;
+    }
+    /** Called by the token manager once when the refresh token is rejected. */
+    async notifyAuthorizationLost(provider, message) {
+        const credential = await this.#credentials?.get(provider);
+        const owner = credential?.authorized_by;
+        if (!owner) {
+            return;
+        }
+        await this.#notifySafely(owner.target, message);
+    }
+    async #describeProvider(provider) {
+        const displayName = PROVIDER_DISPLAY_NAME[provider];
+        if (!this.#clientCredentials(provider)) {
+            return `${displayName}：未配置 client_id`;
+        }
+        const credential = await this.#credentials?.get(provider);
+        const manager = this.#managers[provider];
+        if (manager?.authorizationLost) {
+            return `${displayName}：授权已失效，请发送「${authCommandFor(provider)}」`;
+        }
+        if (credential) {
+            return `${displayName}：已授权（数据库，${credential.authorized_at}）`;
+        }
+        if (manager?.hasRefreshToken) {
+            return `${displayName}：使用配置/环境变量中的 refresh_token`;
+        }
+        return `${displayName}：未授权，请发送「${authCommandFor(provider)}」`;
+    }
+    #clientCredentials(provider) {
+        if (provider === "google") {
+            const google = this.#config.google;
+            const clientId = cleanSecret(google?.client_id ?? "");
+            const clientSecret = cleanSecret(google?.client_secret ?? "");
+            if (!clientId || !clientSecret) {
+                return undefined;
+            }
+            return { clientId, clientSecret, tenant: "common" };
+        }
+        const microsoft = this.#config.microsoft;
+        const clientId = cleanSecret(microsoft?.client_id ?? "");
+        if (!clientId) {
+            return undefined;
+        }
+        return {
+            clientId,
+            clientSecret: cleanSecret(microsoft?.client_secret ?? ""),
+            tenant: microsoft?.tenant || "common",
+        };
+    }
+    #missingClientMessage(provider) {
+        if (provider === "google") {
+            return "请先在 plugins.calendar.google 配置 client_id 和 client_secret（例如 ${GOOGLE_CALENDAR_CLIENT_ID} / ${GOOGLE_CALENDAR_CLIENT_SECRET}）。";
+        }
+        return "请先在 plugins.calendar.microsoft 配置 client_id（例如 ${MS_GRAPH_CLIENT_ID}）。";
+    }
+    async #notifySafely(target, text) {
+        if (!this.#notify) {
+            return;
+        }
+        try {
+            await this.#notify(target, text);
+        }
+        catch (error) {
+            const reason = error instanceof Error ? error.message : String(error);
+            console.warn(`[calendar] 发送授权通知失败：${reason}`);
+        }
+    }
+}
+//# sourceMappingURL=chat-auth.js.map

package/lib/chat-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-auth.js","sourceRoot":"","sources":["../src/chat-auth.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EACL,cAAc,GAGf,MAAM,oBAAoB,CAAC;AAE5B,MAAM,CAAC,MAAM,2BAA2B,GAAG,0BAA0B,CAAC;AAEtE,MAAM,CAAC,MAAM,eAAe,GAAiC;IAC3D,QAAQ;IACR,WAAW;CACZ,CAAC;AA6BF,MAAM,qBAAqB,GAAsC;IAC/D,MAAM,EAAE,WAAW;IACnB,SAAS,EAAE,YAAY;CACxB,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAChC,KAAc;IAEd,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;SACnC,IAAI,EAAE;SACN,WAAW,EAAE,CAAC;IACjB,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC3D,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,YAAoB;IAEpB,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvD,MAAM,cAAc,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;IACrE,OAAO,GAAG,WAAW,GAAG,cAAc,EAAE,CAAC;AAC3C,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,sBAAsB,CAAC,OAItC;IACC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAC1E,MAAM,aAAa,GACjB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,OAAO,GAAG,OAAO,CAAC,QAAQ,MAAM,aAAa,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;AAClE,CAAC;AAED,MAAM,OAAO,mBAAmB;IACrB,OAAO,CAAiB;IACxB,SAAS,CAAwD;IACjE,YAAY,CAAsC;IAClD,OAAO,CAAuC;IAC9C,mBAAmB,CAA2B;IAC9C,MAAM,CAA2B;IACjC,SAAS,CAAgD;IAElE,YAAY,OAA2C;QACrD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC;QACtD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,IAAI,oBAAoB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,qEAAqE;IACrE,KAAK,CAAC,kBAAkB,CACtB,QAA2B,EAC3B,SAAkC;QAElC,MAAM,WAAW,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,OAAO,sDAAsD,CAAC;QAChE,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,2FAA2F,CAAC;QACrG,CAAC;QAED,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;QACjC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YACpB,QAAQ;YACR,KAAK;YACL,YAAY,EAAE,IAAI,CAAC,QAAQ;YAC3B,WAAW;YACX,SAAS;SACV,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,iBAAiB,CAAC;YACrC,QAAQ;YACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW;YACX,KAAK;YACL,aAAa,EAAE,IAAI,CAAC,SAAS;YAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,GAAG,MAAM,CAAC,CAAC;QAC/D,OAAO;YACL,iBAAiB,WAAW,MAAM,YAAY,iBAAiB;YAC/D,YAAY;YACZ,EAAE;YACF,QAAQ,WAAW,EAAE;YACrB,8CAA8C;SAC/C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAED,wDAAwD;IACxD,KAAK,CAAC,cAAc,CAAC,YAA6B;QAChD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,UAAU,EAAE,GAAG;gBACf,OAAO,EACL,4CAA4C;aAC/C,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,MAAM,WAAW,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC;YAChE,MAAM,MAAM,GAAG,GAAG,UAAU,IAAI,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;YACrD,MAAM,IAAI,CAAC,aAAa,CACtB,OAAO,CAAC,SAAS,CAAC,MAAM,EACxB,GAAG,WAAW,QAAQ,MAAM,EAAE,CAC/B,CAAC;YACF,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,MAAM,EAAE,EAAE,CAAC;QACxD,CAAC;QAED,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAC3C,OAAO;gBACL,UAAU,EAAE,GAAG;gBACf,OAAO,EAAE,oBAAoB;aAC9B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC;gBAC7C,QAAQ;gBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,SAAS;gBAC9C,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,IAAI;gBACJ,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,SAAS,EAAE,IAAI,CAAC,MAAM;aACvB,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAC1B,QAAQ,EACR,MAAM,CAAC,YAAY,EACnB,OAAO,CAAC,SAA4B,CACrC,CAAC;YACF,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,MAAM,IAAI,CAAC,aAAa,CACtB,OAAO,CAAC,SAAS,CAAC,MAAM,EACxB,GAAG,WAAW,QAAQ,MAAM,EAAE,CAC/B,CAAC;YACF,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,MAAM,EAAE,EAAE,CAAC;QACxD,CAAC;QAED,MAAM,YAAY,GAChB,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAChC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,uCACE,IAAI,CAAC,OAAO,CAAC,QACf,aAAa,QAAQ,GAAG,CAAC;QAC/B,MAAM,IAAI,CAAC,aAAa,CACtB,OAAO,CAAC,SAAS,CAAC,MAAM,EACxB,GAAG,WAAW,gCAAgC,YAAY,EAAE,CAC7D,CAAC;QACF,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC1D,CAAC;IAED,iCAAiC;IACjC,KAAK,CAAC,cAAc;QAClB,MAAM,KAAK,GAAG,CAAC,eAAe,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvD,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,MAAM,CAAC,QAA2B;QACtC,MAAM,WAAW,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,OAAO,kBAAkB,CAAC;QAC5B,CAAC;QACD,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,CAAC;QACxC,OAAO,MAAM,WAAW,qDAAqD,CAAC;IAChF,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,uBAAuB,CAC3B,QAA2B,EAC3B,OAAe;QAEf,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,UAAU,EAAE,aAA+C,CAAC;QAC1E,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,QAA2B;QACjD,MAAM,WAAW,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,OAAO,GAAG,WAAW,gBAAgB,CAAC;QACxC,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,OAAO,EAAE,iBAAiB,EAAE,CAAC;YAC/B,OAAO,GAAG,WAAW,cAAc,cAAc,CAC/C,QAAQ,CACT,GAAG,CAAC;QACP,CAAC;QACD,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,GAAG,WAAW,YAAY,UAAU,CAAC,aAAa,GAAG,CAAC;QAC/D,CAAC;QACD,IAAI,OAAO,EAAE,eAAe,EAAE,CAAC;YAC7B,OAAO,GAAG,WAAW,4BAA4B,CAAC;QACpD,CAAC;QACD,OAAO,GAAG,WAAW,YAAY,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC;IAC/D,CAAC;IAED,kBAAkB,CAChB,QAA2B;QAE3B,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YACnC,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;YACtD,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC;YAC9D,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC/B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACtD,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACzC,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO;YACL,QAAQ;YACR,YAAY,EAAE,WAAW,CAAC,SAAS,EAAE,aAAa,IAAI,EAAE,CAAC;YACzD,MAAM,EAAE,SAAS,EAAE,MAAM,IAAI,QAAQ;SACtC,CAAC;IACJ,CAAC;IAED,qBAAqB,CAAC,QAA2B;QAC/C,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO,+HAA+H,CAAC;QACzI,CAAC;QACD,OAAO,wEAAwE,CAAC;IAClF,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAAc,EAAE,IAAY;QAC9C,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,OAAO,CAAC,IAAI,CAAC,uBAAuB,MAAM,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;CACF"}

package/lib/cli/auth.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=auth.d.ts.map

package/lib/cli/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/cli/auth.ts"],"names":[],"mappings":""}

package/lib/cli/auth.js

@@ -0,0 +1,182 @@
+#!/usr/bin/env node
+/**
+ * One-time OAuth loopback helper for Google Calendar / Microsoft Graph.
+ *
+ * After installing the package:
+ *   npx zhin-calendar-auth google
+ *   npx zhin-calendar-auth microsoft
+ *
+ * Inside the zhin monorepo:
+ *   pnpm --filter @zhin.js/plugin-calendar auth google
+ *
+ * Reads credentials from process.env only (does not load .env files).
+ * Prints the refresh token for the user to paste into their env and never writes files.
+ */
+import { createServer, } from "node:http";
+import { spawn } from "node:child_process";
+import { buildAuthorizeUrl, createOAuthState, createPkcePair, exchangeAuthorizationCode, } from "../oauth-auth.js";
+const DEFAULT_CALLBACK_PORT = 53682;
+function printUsageAndExit() {
+    console.error(`用法：npx zhin-calendar-auth <google|microsoft>
+
+环境变量：
+  google:    GOOGLE_CALENDAR_CLIENT_ID, GOOGLE_CALENDAR_CLIENT_SECRET
+  microsoft: MS_GRAPH_CLIENT_ID, 可选 MS_GRAPH_CLIENT_SECRET, 可选 MS_GRAPH_TENANT (默认 common)
+
+回调地址固定为 http://127.0.0.1:<port>/callback （默认端口 ${DEFAULT_CALLBACK_PORT}，可用 CALENDAR_OAUTH_PORT 覆盖）。
+完成后只打印 refresh_token，请手动写入 .env；本工具不会改写任何文件。`);
+    process.exit(1);
+}
+function getBrowserCommand(url) {
+    if (process.platform === "darwin") {
+        return { command: "open", args: [url] };
+    }
+    if (process.platform === "win32") {
+        return { command: "cmd", args: ["/c", "start", "", url] };
+    }
+    return { command: "xdg-open", args: [url] };
+}
+function openBrowser(url) {
+    const { command, args } = getBrowserCommand(url);
+    try {
+        const child = spawn(command, args, { detached: true, stdio: "ignore" });
+        child.on("error", () => {
+            console.error("无法自动打开浏览器，请手动访问上面的 URL。");
+        });
+        child.unref();
+    }
+    catch {
+        console.error("无法自动打开浏览器，请手动访问上面的 URL。");
+    }
+}
+function sendText(response, statusCode, text) {
+    response.writeHead(statusCode, {
+        "content-type": "text/plain; charset=utf-8",
+    });
+    response.end(text);
+}
+function waitForAuthorizationCode(port, expectedState) {
+    return new Promise((resolve, reject) => {
+        const server = createServer((request, response) => {
+            const fail = (statusCode, text, error) => {
+                sendText(response, statusCode, text);
+                server.close();
+                reject(error);
+            };
+            try {
+                const callbackUrl = new URL(request.url ?? "/", "http://127.0.0.1");
+                if (callbackUrl.pathname !== "/callback") {
+                    sendText(response, 404, "not found");
+                    return;
+                }
+                const oauthError = callbackUrl.searchParams.get("error");
+                if (oauthError) {
+                    const description = callbackUrl.searchParams.get("error_description") ?? "";
+                    fail(400, `授权失败：${oauthError}\n可以关闭此页。`, new Error(`OAuth error: ${oauthError} ${description}`.trim()));
+                    return;
+                }
+                const state = callbackUrl.searchParams.get("state") ?? "";
+                if (state !== expectedState) {
+                    fail(400, "state 不匹配，请重试。", new Error("OAuth state mismatch"));
+                    return;
+                }
+                const code = callbackUrl.searchParams.get("code") ?? "";
+                if (!code) {
+                    fail(400, "missing code", new Error("missing code"));
+                    return;
+                }
+                response.writeHead(200, {
+                    "content-type": "text/html; charset=utf-8",
+                });
+                response.end('<!doctype html><meta charset="utf-8"><title>OK</title><p>授权成功，可以关闭此页回到终端。</p>');
+                server.close();
+                resolve(code);
+            }
+            catch (error) {
+                server.close();
+                reject(error);
+            }
+        });
+        server.on("error", reject);
+        server.listen(port, "127.0.0.1", () => {
+            console.error(`等待回调 http://127.0.0.1:${port}/callback …`);
+        });
+    });
+}
+function readEnv(name) {
+    return process.env[name]?.trim() ?? "";
+}
+function parseProvider(value) {
+    const normalized = (value ?? "").toLowerCase();
+    if (normalized === "google" || normalized === "microsoft") {
+        return normalized;
+    }
+    return printUsageAndExit();
+}
+async function main() {
+    const provider = parseProvider(process.argv[2]);
+    const isGoogle = provider === "google";
+    const port = Number(process.env.CALENDAR_OAUTH_PORT ?? DEFAULT_CALLBACK_PORT);
+    const redirectUri = `http://127.0.0.1:${port}/callback`;
+    const clientIdEnvName = isGoogle
+        ? "GOOGLE_CALENDAR_CLIENT_ID"
+        : "MS_GRAPH_CLIENT_ID";
+    const clientSecretEnvName = isGoogle
+        ? "GOOGLE_CALENDAR_CLIENT_SECRET"
+        : "MS_GRAPH_CLIENT_SECRET";
+    const refreshTokenEnvName = isGoogle
+        ? "GOOGLE_CALENDAR_REFRESH_TOKEN"
+        : "MS_GRAPH_REFRESH_TOKEN";
+    const clientId = readEnv(clientIdEnvName);
+    const clientSecret = readEnv(clientSecretEnvName);
+    const tenant = readEnv("MS_GRAPH_TENANT") || "common";
+    if (!clientId) {
+        console.error(`请先 export ${clientIdEnvName}=...`);
+        process.exit(1);
+    }
+    if (isGoogle && !clientSecret) {
+        console.error(`Google 需要 export ${clientSecretEnvName}=...`);
+        process.exit(1);
+    }
+    const pkce = createPkcePair();
+    const state = createOAuthState();
+    const authorizeUrl = buildAuthorizeUrl({
+        provider,
+        clientId,
+        redirectUri,
+        state,
+        codeChallenge: pkce.challenge,
+        tenant,
+    });
+    console.error("\n将打开浏览器完成登录。若未自动打开，请复制以下 URL：\n");
+    console.error(authorizeUrl);
+    console.error("");
+    const codePromise = waitForAuthorizationCode(port, state);
+    openBrowser(authorizeUrl);
+    const code = await codePromise;
+    const tokens = await exchangeAuthorizationCode({
+        provider,
+        clientId,
+        clientSecret: clientSecret || undefined,
+        tenant,
+        redirectUri,
+        code,
+        codeVerifier: pkce.verifier,
+    });
+    const output = [
+        "",
+        "===== 请把下面的值写入环境变量（不要提交到 git）=====",
+        `${refreshTokenEnvName}=${tokens.refreshToken}`,
+        "====================================================",
+        "",
+        "",
+    ].join("\n");
+    process.stdout.write(output);
+    console.error("本工具不会写入 .env。请手动粘贴后重启/重载配置。");
+}
+main().catch((error) => {
+    const message = error instanceof Error ? error.message : String(error);
+    console.error(message);
+    process.exit(1);
+});
+//# sourceMappingURL=auth.js.map

package/lib/cli/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/cli/auth.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;GAYG;AACH,OAAO,EACL,YAAY,GAGb,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAI1B,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAEpC,SAAS,iBAAiB;IACxB,OAAO,CAAC,KAAK,CAAC;;;;;;iDAMiC,qBAAqB;6CACzB,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACrB,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CACf,QAAwB,EACxB,UAAkB,EAClB,IAAY;IAEZ,QAAQ,CAAC,SAAS,CAAC,UAAU,EAAE;QAC7B,cAAc,EAAE,2BAA2B;KAC5C,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,wBAAwB,CAC/B,IAAY,EACZ,aAAqB;IAErB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,YAAY,CACzB,CAAC,OAAwB,EAAE,QAAwB,EAAE,EAAE;YACrD,MAAM,IAAI,GAAG,CAAC,UAAkB,EAAE,IAAY,EAAE,KAAY,EAAE,EAAE;gBAC9D,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;gBACrC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC,CAAC;YAEF,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;gBACpE,IAAI,WAAW,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;oBACzC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;oBACrC,OAAO;gBACT,CAAC;gBAED,MAAM,UAAU,GAAG,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACzD,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,WAAW,GACf,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC;oBAC1D,IAAI,CACF,GAAG,EACH,QAAQ,UAAU,WAAW,EAC7B,IAAI,KAAK,CAAC,gBAAgB,UAAU,IAAI,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,CAC9D,CAAC;oBACF,OAAO;gBACT,CAAC;gBAED,MAAM,KAAK,GAAG,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAC1D,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;oBAC5B,IAAI,CACF,GAAG,EACH,gBAAgB,EAChB,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAClC,CAAC;oBACF,OAAO;gBACT,CAAC;gBAED,MAAM,IAAI,GAAG,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACxD,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;oBACrD,OAAO;gBACT,CAAC;gBAED,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;oBACtB,cAAc,EAAE,0BAA0B;iBAC3C,CAAC,CAAC;gBACH,QAAQ,CAAC,GAAG,CACV,+EAA+E,CAChF,CAAC;gBACF,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CACF,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;YACpC,OAAO,CAAC,KAAK,CAAC,yBAAyB,IAAI,aAAa,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB;IAC9C,MAAM,UAAU,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/C,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;QAC1D,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,iBAAiB,EAAE,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,QAAQ,KAAK,QAAQ,CAAC;IAEvC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,qBAAqB,CAAC,CAAC;IAC9E,MAAM,WAAW,GAAG,oBAAoB,IAAI,WAAW,CAAC;IAExD,MAAM,eAAe,GAAG,QAAQ;QAC9B,CAAC,CAAC,2BAA2B;QAC7B,CAAC,CAAC,oBAAoB,CAAC;IACzB,MAAM,mBAAmB,GAAG,QAAQ;QAClC,CAAC,CAAC,+BAA+B;QACjC,CAAC,CAAC,wBAAwB,CAAC;IAC7B,MAAM,mBAAmB,GAAG,QAAQ;QAClC,CAAC,CAAC,+BAA+B;QACjC,CAAC,CAAC,wBAAwB,CAAC;IAE7B,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,IAAI,QAAQ,CAAC;IAEtD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,aAAa,eAAe,MAAM,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,oBAAoB,mBAAmB,MAAM,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,MAAM,YAAY,GAAG,iBAAiB,CAAC;QACrC,QAAQ;QACR,QAAQ;QACR,WAAW;QACX,KAAK;QACL,aAAa,EAAE,IAAI,CAAC,SAAS;QAC7B,MAAM;KACP,CAAC,CAAC;IAEH,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAClD,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC5B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAElB,MAAM,WAAW,GAAG,wBAAwB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1D,WAAW,CAAC,YAAY,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC;IAE/B,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC;QAC7C,QAAQ;QACR,QAAQ;QACR,YAAY,EAAE,YAAY,IAAI,SAAS;QACvC,MAAM;QACN,WAAW;QACX,IAAI;QACJ,YAAY,EAAE,IAAI,CAAC,QAAQ;KAC5B,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG;QACb,EAAE;QACF,oCAAoC;QACpC,GAAG,mBAAmB,IAAI,MAAM,CAAC,YAAY,EAAE;QAC/C,sDAAsD;QACtD,EAAE;QACF,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;AAC/C,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/lib/config.d.ts

@@ -0,0 +1,87 @@
+import { Schema } from "zhin.js";
+export declare const calendarConfig: Schema<Schema.InputRecord<{
+    provider: Schema<"caldav" | "none" | "google" | "microsoft", "caldav" | "none" | "google" | "microsoft"> & Schema.Present;
+    timezone: Schema<string, string> & Schema.Present;
+    work_day_start: Schema<string, string> & Schema.Present;
+    work_day_end: Schema<string, string> & Schema.Present;
+    oauth_redirect_base_url: Schema<string, string> & Schema.Present;
+    oauth_callback_path: Schema<string, string> & Schema.Present;
+    caldav: Schema<Schema.InputRecord<{
+        enabled: Schema<boolean, boolean> & Schema.Present;
+        calendar_url: Schema<string, string> & Schema.Present;
+        username: Schema<string, string> & Schema.Present;
+        password: Schema<string, string> & Schema.Present;
+    }>, {
+        enabled: boolean;
+        calendar_url: string;
+        username: string;
+        password: string;
+    } & {}>;
+    google: Schema<Schema.InputRecord<{
+        enabled: Schema<boolean, boolean> & Schema.Present;
+        client_id: Schema<string, string> & Schema.Present;
+        client_secret: Schema<string, string> & Schema.Present;
+        refresh_token: Schema<string, string> & Schema.Present;
+        calendar_id: Schema<string, string> & Schema.Present;
+        token_file: Schema<string, string> & Schema.Present;
+    }>, {
+        enabled: boolean;
+        client_id: string;
+        client_secret: string;
+        refresh_token: string;
+        calendar_id: string;
+        token_file: string;
+    } & {}>;
+    microsoft: Schema<Schema.InputRecord<{
+        enabled: Schema<boolean, boolean> & Schema.Present;
+        client_id: Schema<string, string> & Schema.Present;
+        client_secret: Schema<string, string> & Schema.Present;
+        refresh_token: Schema<string, string> & Schema.Present;
+        tenant: Schema<string, string> & Schema.Present;
+        calendar_id: Schema<string, string> & Schema.Present;
+        token_file: Schema<string, string> & Schema.Present;
+    }>, {
+        enabled: boolean;
+        client_id: string;
+        client_secret: string;
+        refresh_token: string;
+        tenant: string;
+        calendar_id: string;
+        token_file: string;
+    } & {}>;
+}>, {
+    provider: "caldav" | "none" | "google" | "microsoft";
+    timezone: string;
+    work_day_start: string;
+    work_day_end: string;
+    oauth_redirect_base_url: string;
+    oauth_callback_path: string;
+} & {
+    caldav?: ({
+        enabled: boolean;
+        calendar_url: string;
+        username: string;
+        password: string;
+    } & {}) | undefined;
+    google?: ({
+        enabled: boolean;
+        client_id: string;
+        client_secret: string;
+        refresh_token: string;
+        calendar_id: string;
+        token_file: string;
+    } & {}) | undefined;
+    microsoft?: ({
+        enabled: boolean;
+        client_id: string;
+        client_secret: string;
+        refresh_token: string;
+        tenant: string;
+        calendar_id: string;
+        token_file: string;
+    } & {}) | undefined;
+}>;
+export type CalendarConfig = Schema.Output<typeof calendarConfig>;
+export declare function assertCalendarTimezone(timezone: string): void;
+export { cleanSecret } from "./secrets.js";
+//# sourceMappingURL=config.d.ts.map

package/lib/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2FzB,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,cAAc,CAAC,CAAC;AAElE,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAQ7D;AAED,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC"}

package/lib/config.js

@@ -0,0 +1,95 @@
+import { Schema } from "zhin.js";
+export const calendarConfig = Schema.object({
+    provider: Schema.union([
+        Schema.const("none"),
+        Schema.const("caldav"),
+        Schema.const("google"),
+        Schema.const("microsoft"),
+    ])
+        .default("none")
+        .description("日历后端；none 时工具返回未启用提示")
+        .effect("reload"),
+    timezone: Schema.string()
+        .default("Asia/Manila")
+        .description("解释无偏移时间与展示用的 IANA 时区")
+        .effect("reload"),
+    work_day_start: Schema.string().default("09:00").effect("reload"),
+    work_day_end: Schema.string().default("18:00").effect("reload"),
+    oauth_redirect_base_url: Schema.string()
+        .default("")
+        .description("聊天授权回调的外部基础地址（如 https://bot.example.com）；留空时使用 zhin HTTP Host 的本机地址")
+        .effect("reload"),
+    oauth_callback_path: Schema.string()
+        .default("/calendar/oauth/callback")
+        .description("聊天授权回调路由，挂在 zhin HTTP Host 上；反向代理/隧道只转发部分路径时可调整")
+        .effect("reload"),
+    caldav: Schema.object({
+        enabled: Schema.boolean().default(false),
+        calendar_url: Schema.string()
+            .default("")
+            .description("日历 collection URL")
+            .effect("reload"),
+        username: Schema.string().default("").effect("reload"),
+        password: Schema.string().default("").effect("reload"),
+    }),
+    google: Schema.object({
+        enabled: Schema.boolean().default(false),
+        client_id: Schema.string()
+            .default("")
+            .description("${GOOGLE_CALENDAR_CLIENT_ID}")
+            .effect("reload"),
+        client_secret: Schema.string()
+            .default("")
+            .description("${GOOGLE_CALENDAR_CLIENT_SECRET}")
+            .effect("reload"),
+        refresh_token: Schema.string()
+            .default("")
+            .description("${GOOGLE_CALENDAR_REFRESH_TOKEN}；用 auth google 获取")
+            .effect("reload"),
+        calendar_id: Schema.string()
+            .default("primary")
+            .description("日历 ID，默认 primary；可换成其它日历的 id")
+            .effect("reload"),
+        token_file: Schema.string()
+            .default("")
+            .description("可选：持久化轮换后的 refresh_token 的 JSON 路径（如 data/calendar-google-token.json）")
+            .effect("reload"),
+    }),
+    microsoft: Schema.object({
+        enabled: Schema.boolean().default(false),
+        client_id: Schema.string()
+            .default("")
+            .description("${MS_GRAPH_CLIENT_ID}")
+            .effect("reload"),
+        client_secret: Schema.string()
+            .default("")
+            .description("可选；公共客户端可留空。${MS_GRAPH_CLIENT_SECRET}")
+            .effect("reload"),
+        refresh_token: Schema.string()
+            .default("")
+            .description("${MS_GRAPH_REFRESH_TOKEN}；用 auth microsoft 获取")
+            .effect("reload"),
+        tenant: Schema.string()
+            .default("common")
+            .description("Azure tenant，默认 common")
+            .effect("reload"),
+        calendar_id: Schema.string()
+            .default("")
+            .description("留空或 primary/me = 默认日历；否则为 Graph calendar id")
+            .effect("reload"),
+        token_file: Schema.string()
+            .default("")
+            .description("可选：持久化轮换后的 refresh_token 的 JSON 路径（如 data/calendar-ms-token.json）")
+            .effect("reload"),
+    }),
+});
+export function assertCalendarTimezone(timezone) {
+    try {
+        new Intl.DateTimeFormat("zh-CN", { timeZone: timezone }).format(0);
+    }
+    catch {
+        throw new TypeError(`calendar timezone 必须是有效的 IANA 时区：${timezone}`);
+    }
+}
+export { cleanSecret } from "./secrets.js";
+//# sourceMappingURL=config.js.map

package/lib/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1C,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC;QACrB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QACpB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;QACtB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;QACtB,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;KAC1B,CAAC;SACC,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,sBAAsB,CAAC;SACnC,MAAM,CAAC,QAAQ,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE;SACtB,OAAO,CAAC,aAAa,CAAC;SACtB,WAAW,CAAC,sBAAsB,CAAC;SACnC,MAAM,CAAC,QAAQ,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;IACjE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC/D,uBAAuB,EAAE,MAAM,CAAC,MAAM,EAAE;SACrC,OAAO,CAAC,EAAE,CAAC;SACX,WAAW,CACV,qEAAqE,CACtE;SACA,MAAM,CAAC,QAAQ,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE;SACjC,OAAO,CAAC,0BAA0B,CAAC;SACnC,WAAW,CACV,iDAAiD,CAClD;SACA,MAAM,CAAC,QAAQ,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QACxC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE;aAC1B,OAAO,CAAC,EAAE,CAAC;aACX,WAAW,CAAC,mBAAmB,CAAC;aAChC,MAAM,CAAC,QAAQ,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;QACtD,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;KACvD,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QACxC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE;aACvB,OAAO,CAAC,EAAE,CAAC;aACX,WAAW,CAAC,8BAA8B,CAAC;aAC3C,MAAM,CAAC,QAAQ,CAAC;QACnB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE;aAC3B,OAAO,CAAC,EAAE,CAAC;aACX,WAAW,CAAC,kCAAkC,CAAC;aAC/C,MAAM,CAAC,QAAQ,CAAC;QACnB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE;aAC3B,OAAO,CAAC,EAAE,CAAC;aACX,WAAW,CAAC,mDAAmD,CAAC;aAChE,MAAM,CAAC,QAAQ,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE;aACzB,OAAO,CAAC,SAAS,CAAC;aAClB,WAAW,CAAC,8BAA8B,CAAC;aAC3C,MAAM,CAAC,QAAQ,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE;aACxB,OAAO,CAAC,EAAE,CAAC;aACX,WAAW,CACV,uEAAuE,CACxE;aACA,MAAM,CAAC,QAAQ,CAAC;KACpB,CAAC;IACF,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC;QACvB,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QACxC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE;aACvB,OAAO,CAAC,EAAE,CAAC;aACX,WAAW,CAAC,uBAAuB,CAAC;aACpC,MAAM,CAAC,QAAQ,CAAC;QACnB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE;aAC3B,OAAO,CAAC,EAAE,CAAC;aACX,WAAW,CAAC,uCAAuC,CAAC;aACpD,MAAM,CAAC,QAAQ,CAAC;QACnB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE;aAC3B,OAAO,CAAC,EAAE,CAAC;aACX,WAAW,CAAC,+CAA+C,CAAC;aAC5D,MAAM,CAAC,QAAQ,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;aACpB,OAAO,CAAC,QAAQ,CAAC;aACjB,WAAW,CAAC,wBAAwB,CAAC;aACrC,MAAM,CAAC,QAAQ,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE;aACzB,OAAO,CAAC,EAAE,CAAC;aACX,WAAW,CAAC,6CAA6C,CAAC;aAC1D,MAAM,CAAC,QAAQ,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE;aACxB,OAAO,CAAC,EAAE,CAAC;aACX,WAAW,CACV,mEAAmE,CACpE;aACA,MAAM,CAAC,QAAQ,CAAC;KACpB,CAAC;CACH,CAAC,CAAC;AAIH,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CACjB,oCAAoC,QAAQ,EAAE,CAC/C,CAAC;IACJ,CAAC;AACH,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC"}