allsquare 0.1.1

package/dist/api/model.js

@@ -0,0 +1,378 @@
+import { Schema } from "effect";
+const Id = Schema.String;
+const NullableString = Schema.NullOr(Schema.String);
+// Currencies the API accepts on writes. Responses keep plain strings because
+// older records may hold other codes. The repository contract test keeps this
+// list in step with the server.
+export const SUPPORTED_CURRENCIES = ["USD", "CAD", "EUR", "GBP"];
+export const Currency = Schema.Literals(SUPPORTED_CURRENCIES);
+export const Group = Schema.Struct({
+    id: Id,
+    name: Schema.String,
+    defaultCurrency: Schema.String
+});
+export const ListGroupsResponse = Schema.Struct({
+    groups: Schema.Array(Group)
+});
+export const GroupMember = Schema.Struct({
+    id: Id,
+    name: Schema.String,
+    email: NullableString,
+    isCurrentUser: Schema.Boolean,
+    venmoUsername: NullableString
+});
+export const ListGroupMembersResponse = Schema.Struct({
+    groupId: Id,
+    currentUserId: Id,
+    members: Schema.Array(GroupMember)
+});
+export const CreateGroupRequest = Schema.Struct({
+    name: Schema.String.check(Schema.isLengthBetween(1, 100)),
+    currency: Currency,
+    memberEmails: Schema.optionalKey(Schema.Array(Schema.String).check(Schema.isLengthBetween(0, 20)))
+});
+export const CreateGroupResponse = Schema.Struct({
+    group: Group,
+    membersAdded: Schema.Number,
+    membersNotified: Schema.Number,
+    invitationsCreated: Schema.Number,
+    invitationEmailsSent: Schema.Number
+});
+export const AddGroupMemberRequest = Schema.Struct({
+    email: Schema.String
+});
+export const AddGroupMemberResponse = Schema.Union([
+    Schema.Struct({
+        status: Schema.Literals(["added", "rejoined"]),
+        groupId: Id,
+        email: Schema.String,
+        userId: Id,
+        emailSent: Schema.Boolean
+    }),
+    Schema.Struct({
+        status: Schema.Literal("invited"),
+        groupId: Id,
+        email: Schema.String,
+        expiresAt: Schema.String,
+        emailSent: Schema.Boolean
+    })
+]);
+export const BalanceEntry = Schema.Struct({
+    userId: Id,
+    name: Schema.String,
+    amount: Schema.Number
+});
+export const CurrencyTotals = Schema.Struct({
+    youOwe: Schema.Number,
+    youAreOwed: Schema.Number,
+    net: Schema.Number
+});
+export const GetAllBalancesResponse = Schema.Struct({
+    currentUserId: Id,
+    groups: Schema.Array(Schema.Struct({
+        groupId: Id,
+        groupName: NullableString,
+        currency: Schema.String,
+        youOwe: Schema.Array(BalanceEntry),
+        youAreOwed: Schema.Array(BalanceEntry),
+        net: Schema.Number
+    })),
+    totalsByCurrency: Schema.Record(Schema.String, CurrencyTotals),
+    byPerson: Schema.Array(Schema.Struct({
+        userId: Id,
+        name: Schema.String,
+        amount: Schema.Number,
+        currency: Schema.String,
+        direction: Schema.Literals(["you_owe", "owes_you"])
+    }))
+});
+export const FormattedBalanceEntry = Schema.Struct({
+    userId: Id,
+    name: Schema.String,
+    amount: Schema.String,
+    currency: Schema.String
+});
+export const GetGroupBalancesResponse = Schema.Struct({
+    groupId: Id,
+    currency: Schema.String,
+    totalSpent: Schema.String,
+    youOwe: Schema.Array(FormattedBalanceEntry),
+    youAreOwed: Schema.Array(FormattedBalanceEntry)
+});
+export const ExpenseSplit = Schema.Struct({
+    userId: Id,
+    name: Schema.String,
+    amount: Schema.NullOr(Schema.Number),
+    percentage: Schema.NullOr(Schema.Number),
+    splitType: Schema.String
+});
+export const Expense = Schema.Struct({
+    id: Id,
+    description: Schema.String,
+    amount: Schema.Number,
+    currency: Schema.String,
+    date: NullableString,
+    payer: Schema.Struct({
+        id: NullableString,
+        name: Schema.String
+    }),
+    splits: Schema.Array(ExpenseSplit),
+    isSettled: Schema.Boolean,
+    isRecurring: Schema.Boolean,
+    groupId: Id,
+    groupName: NullableString
+});
+export const ListExpensesResponse = Schema.Struct({
+    currentUserId: Id,
+    expenses: Schema.Array(Expense),
+    nextCursor: NullableString
+});
+export const GetExpenseResponse = Schema.Struct({
+    currentUserId: Id,
+    expense: Expense
+});
+export const CreateExpenseRequest = Schema.Struct({
+    description: Schema.String.check(Schema.isLengthBetween(1, 200)),
+    amount: Schema.Number.check(Schema.isGreaterThan(0)),
+    currency: Currency,
+    paidById: Schema.optionalKey(Id),
+    splitWith: Schema.Array(Id),
+    splitType: Schema.Literals(["amount", "percentage", "exact"]),
+    date: Schema.optionalKey(Schema.String),
+    percentageSplits: Schema.optionalKey(Schema.Record(Schema.String, Schema.Number)),
+    exactSplits: Schema.optionalKey(Schema.Record(Schema.String, Schema.Number))
+});
+export const CreateExpenseResponse = Schema.Struct({
+    expense: Schema.Struct({
+        id: Id,
+        description: Schema.String,
+        amount: Schema.Number,
+        currency: Schema.String,
+        date: Schema.String,
+        groupId: Id
+    })
+});
+export const UpdateExpenseRequest = Schema.Struct({
+    description: Schema.optionalKey(Schema.String.check(Schema.isLengthBetween(1, 200))),
+    amount: Schema.optionalKey(Schema.Number.check(Schema.isGreaterThan(0))),
+    currency: Schema.optionalKey(Currency),
+    paidById: Schema.optionalKey(Id),
+    splitWith: Schema.optionalKey(Schema.Array(Id)),
+    splitType: Schema.optionalKey(Schema.Literals(["amount", "percentage", "exact"])),
+    date: Schema.optionalKey(Schema.String),
+    percentageSplits: Schema.optionalKey(Schema.Record(Schema.String, Schema.Number)),
+    exactSplits: Schema.optionalKey(Schema.Record(Schema.String, Schema.Number))
+});
+export const UpdateExpenseResponse = Schema.Struct({ expense: Expense });
+export const DeleteExpenseRequest = Schema.Struct({
+    confirmed: Schema.Literal(true),
+    userIntent: Schema.String.check(Schema.isLengthBetween(1, 500))
+});
+export const DeleteExpenseResponse = Schema.Struct({
+    deleted: Schema.Literal(true),
+    expense: Schema.Struct({
+        id: Id,
+        description: Schema.String,
+        amount: Schema.Number,
+        currency: Schema.String,
+        groupId: Id
+    })
+});
+export const RecurringExpense = Schema.Struct({
+    id: Id,
+    groupId: Id,
+    groupName: NullableString,
+    description: Schema.String,
+    amount: Schema.Number,
+    currency: Schema.String,
+    frequency: Schema.String,
+    schedule: Schema.String,
+    nextOccurrence: Schema.String,
+    lastGeneratedAt: NullableString,
+    isPaused: Schema.Boolean,
+    pausedAt: NullableString,
+    payer: Schema.Struct({
+        id: Id,
+        name: Schema.String
+    }),
+    splitType: Schema.String,
+    splits: Schema.Array(Schema.Struct({
+        userId: Id,
+        name: Schema.String,
+        amount: Schema.NullOr(Schema.Number),
+        percentage: Schema.NullOr(Schema.Number)
+    })),
+    createdById: Id,
+    canEdit: Schema.Boolean
+});
+export const ListRecurringExpensesResponse = Schema.Struct({
+    currentUserId: Id,
+    recurringExpenses: Schema.Array(RecurringExpense)
+});
+export const GetRecurringExpenseResponse = Schema.Struct({
+    currentUserId: Id,
+    recurringExpense: RecurringExpense
+});
+const SplitType = Schema.Literals(["amount", "percentage", "exact"]);
+const RecurrenceFrequency = Schema.Literals([
+    "weekly",
+    "biweekly",
+    "monthly",
+    "yearly"
+]);
+const SplitAllocations = Schema.Record(Schema.String, Schema.Number);
+export const CreateRecurringExpenseRequest = Schema.Struct({
+    description: Schema.String.check(Schema.isLengthBetween(1, 200)),
+    amount: Schema.Number.check(Schema.isGreaterThan(0)),
+    currency: Currency,
+    paidById: Schema.optionalKey(Id),
+    splitWith: Schema.Array(Id),
+    splitType: SplitType,
+    frequency: RecurrenceFrequency,
+    startDate: Schema.optionalKey(Schema.String),
+    percentageSplits: Schema.optionalKey(SplitAllocations),
+    exactSplits: Schema.optionalKey(SplitAllocations)
+});
+export const CreateRecurringExpenseResponse = Schema.Struct({
+    recurringExpense: Schema.Struct({
+        id: Id,
+        description: Schema.String,
+        amount: Schema.Number,
+        currency: Schema.String,
+        frequency: Schema.String,
+        nextOccurrence: Schema.String,
+        groupId: Id,
+        immediateExpenseCreated: Schema.Boolean,
+        // Absent in replays of creates stored before the server added it.
+        immediateExpenseId: Schema.optionalKey(Schema.NullOr(Id))
+    })
+});
+export const UpdateRecurringExpenseRequest = Schema.Struct({
+    description: Schema.optionalKey(Schema.String.check(Schema.isLengthBetween(1, 200))),
+    amount: Schema.optionalKey(Schema.Number.check(Schema.isGreaterThan(0))),
+    paidById: Schema.optionalKey(Id),
+    splitWith: Schema.optionalKey(Schema.Array(Id)),
+    splitType: Schema.optionalKey(SplitType),
+    frequency: Schema.optionalKey(RecurrenceFrequency),
+    percentageSplits: Schema.optionalKey(SplitAllocations),
+    exactSplits: Schema.optionalKey(SplitAllocations)
+});
+export const RecurringExpenseMutationResponse = Schema.Struct({
+    recurringExpense: RecurringExpense
+});
+export const SetRecurringExpensePausedRequest = Schema.Struct({
+    paused: Schema.Boolean
+});
+export const DeleteRecurringExpenseRequest = Schema.Struct({
+    confirmed: Schema.Literal(true),
+    userIntent: Schema.String.check(Schema.isLengthBetween(1, 500))
+});
+export const DeleteRecurringExpenseResponse = Schema.Struct({
+    deleted: Schema.Literal(true),
+    recurringExpense: Schema.Struct({
+        id: Id,
+        description: Schema.String,
+        amount: Schema.Number,
+        currency: Schema.String,
+        frequency: Schema.String,
+        groupId: Id
+    })
+});
+export const Settlement = Schema.Struct({
+    id: Id,
+    groupId: Id,
+    groupName: NullableString,
+    settledBy: Schema.Struct({
+        id: Id,
+        name: Schema.String
+    }),
+    settledAt: NullableString,
+    expenseCount: Schema.Number,
+    totalsByCurrency: Schema.Record(Schema.String, Schema.Number),
+    expenses: Schema.Array(Schema.Struct({
+        id: Id,
+        description: Schema.String,
+        amount: Schema.Number,
+        currency: Schema.String,
+        date: NullableString,
+        payerId: NullableString
+    }))
+});
+export const ListSettlementsResponse = Schema.Struct({
+    currentUserId: Id,
+    settlements: Schema.Array(Settlement)
+});
+export const PreviewSettlementRequest = Schema.Struct({
+    expenseIds: Schema.Array(Id).check(Schema.isLengthBetween(1, 100)),
+    currency: Schema.optionalKey(Currency)
+});
+export const SettlementPayment = Schema.Struct({
+    direction: Schema.Literals(["pay", "request"]),
+    userId: Id,
+    name: Schema.String,
+    amount: Schema.String,
+    currency: Schema.String,
+    venmoUsername: NullableString,
+    venmoWebUrl: NullableString,
+    venmoProfileUrl: NullableString,
+    venmoMarkdownLink: NullableString,
+    displayText: Schema.String,
+    note: Schema.String
+});
+export const PreviewSettlementResponse = Schema.Struct({
+    groupId: Id,
+    currency: Schema.String,
+    expenseIds: Schema.Array(Id),
+    payments: Schema.Array(SettlementPayment)
+});
+export const SettleExpensesRequest = Schema.Struct({
+    expenseIds: Schema.Array(Id).check(Schema.isLengthBetween(1, 100)),
+    currency: Schema.optionalKey(Currency),
+    confirmed: Schema.Literal(true),
+    userIntent: Schema.String.check(Schema.isLengthBetween(1, 500))
+});
+export const SettleExpensesResponse = Schema.Struct({
+    settlement: Schema.Struct({
+        id: Id,
+        groupId: Id,
+        settledBy: Id,
+        settledAt: NullableString,
+        expenseIds: Schema.Array(Id)
+    }),
+    payments: Schema.Array(SettlementPayment)
+});
+export const GetSpendSummaryResponse = Schema.Struct({
+    currentUserId: Id,
+    currency: Schema.String,
+    groupId: NullableString,
+    from: NullableString,
+    to: NullableString,
+    query: NullableString,
+    expenseCount: Schema.Number,
+    totalSpent: Schema.Number,
+    yourPaid: Schema.Number,
+    yourShare: Schema.Number,
+    byPerson: Schema.Array(Schema.Struct({
+        userId: Id,
+        name: Schema.String,
+        paid: Schema.Number,
+        share: Schema.Number
+    })),
+    byMonth: Schema.Array(Schema.Struct({
+        month: Schema.String,
+        total: Schema.Number,
+        count: Schema.Number
+    })),
+    byDescription: Schema.Array(Schema.Struct({
+        description: Schema.String,
+        total: Schema.Number,
+        count: Schema.Number
+    })),
+    byGroup: Schema.Array(Schema.Struct({
+        groupId: Id,
+        groupName: NullableString,
+        total: Schema.Number,
+        count: Schema.Number
+    }))
+});
+//# sourceMappingURL=model.js.map

package/dist/api/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../../src/api/model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAA;AACxB,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;AAEnD,6EAA6E;AAC7E,8EAA8E;AAC9E,gCAAgC;AAChC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAU,CAAA;AACzE,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAA;AAE7D,MAAM,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,EAAE;IACN,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,eAAe,EAAE,MAAM,CAAC,MAAM;CAC/B,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9C,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;CAC5B,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,EAAE;IACN,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,KAAK,EAAE,cAAc;IACrB,aAAa,EAAE,MAAM,CAAC,OAAO;IAC7B,aAAa,EAAE,cAAc;CAC9B,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,MAAM,CAAC;IACpD,OAAO,EAAE,EAAE;IACX,aAAa,EAAE,EAAE;IACjB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;CACnC,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACzD,QAAQ,EAAE,QAAQ;IAClB,YAAY,EAAE,MAAM,CAAC,WAAW,CAC9B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CACjE;CACF,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/C,KAAK,EAAE,KAAK;IACZ,YAAY,EAAE,MAAM,CAAC,MAAM;IAC3B,eAAe,EAAE,MAAM,CAAC,MAAM;IAC9B,kBAAkB,EAAE,MAAM,CAAC,MAAM;IACjC,oBAAoB,EAAE,MAAM,CAAC,MAAM;CACpC,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC;IACjD,KAAK,EAAE,MAAM,CAAC,MAAM;CACrB,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,KAAK,CAAC;IACjD,MAAM,CAAC,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC9C,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,MAAM,CAAC,MAAM;QACpB,MAAM,EAAE,EAAE;QACV,SAAS,EAAE,MAAM,CAAC,OAAO;KAC1B,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;QACjC,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,MAAM,CAAC,MAAM;QACpB,SAAS,EAAE,MAAM,CAAC,MAAM;QACxB,SAAS,EAAE,MAAM,CAAC,OAAO;KAC1B,CAAC;CACH,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM;CACtB,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1C,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,UAAU,EAAE,MAAM,CAAC,MAAM;IACzB,GAAG,EAAE,MAAM,CAAC,MAAM;CACnB,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC;IAClD,aAAa,EAAE,EAAE;IACjB,MAAM,EAAE,MAAM,CAAC,KAAK,CAClB,MAAM,CAAC,MAAM,CAAC;QACZ,OAAO,EAAE,EAAE;QACX,SAAS,EAAE,cAAc;QACzB,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;QAClC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;QACtC,GAAG,EAAE,MAAM,CAAC,MAAM;KACnB,CAAC,CACH;IACD,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC;IAC9D,QAAQ,EAAE,MAAM,CAAC,KAAK,CACpB,MAAM,CAAC,MAAM,CAAC;QACZ,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,MAAM,CAAC,MAAM;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;KACpD,CAAC,CACH;CACF,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC;IACjD,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,QAAQ,EAAE,MAAM,CAAC,MAAM;CACxB,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,MAAM,CAAC;IACpD,OAAO,EAAE,EAAE;IACX,QAAQ,EAAE,MAAM,CAAC,MAAM;IACvB,UAAU,EAAE,MAAM,CAAC,MAAM;IACzB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC;IAC3C,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC;CAChD,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACpC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC,MAAM;CACzB,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;IACnC,EAAE,EAAE,EAAE;IACN,WAAW,EAAE,MAAM,CAAC,MAAM;IAC1B,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,QAAQ,EAAE,MAAM,CAAC,MAAM;IACvB,IAAI,EAAE,cAAc;IACpB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,MAAM,CAAC,MAAM;KACpB,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC,OAAO;IACzB,WAAW,EAAE,MAAM,CAAC,OAAO;IAC3B,OAAO,EAAE,EAAE;IACX,SAAS,EAAE,cAAc;CAC1B,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;IAChD,aAAa,EAAE,EAAE;IACjB,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;IAC/B,UAAU,EAAE,cAAc;CAC3B,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9C,aAAa,EAAE,EAAE;IACjB,OAAO,EAAE,OAAO;CACjB,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;IAChD,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAChE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACpD,QAAQ,EAAE,QAAQ;IAClB,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IAC7D,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;IACvC,gBAAgB,EAAE,MAAM,CAAC,WAAW,CAClC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAC5C;IACD,WAAW,EAAE,MAAM,CAAC,WAAW,CAC7B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAC5C;CACF,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC;IACjD,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;QACrB,EAAE,EAAE,EAAE;QACN,WAAW,EAAE,MAAM,CAAC,MAAM;QAC1B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,IAAI,EAAE,MAAM,CAAC,MAAM;QACnB,OAAO,EAAE,EAAE;KACZ,CAAC;CACH,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;IAChD,WAAW,EAAE,MAAM,CAAC,WAAW,CAC7B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CACpD;IACD,MAAM,EAAE,MAAM,CAAC,WAAW,CACxB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAC7C;IACD,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC;IACtC,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/C,SAAS,EAAE,MAAM,CAAC,WAAW,CAC3B,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,CACnD;IACD,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;IACvC,gBAAgB,EAAE,MAAM,CAAC,WAAW,CAClC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAC5C;IACD,WAAW,EAAE,MAAM,CAAC,WAAW,CAC7B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAC5C;CACF,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;AAGxE,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;IAChD,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;CAChE,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC;IACjD,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;QACrB,EAAE,EAAE,EAAE;QACN,WAAW,EAAE,MAAM,CAAC,MAAM;QAC1B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,OAAO,EAAE,EAAE;KACZ,CAAC;CACH,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5C,EAAE,EAAE,EAAE;IACN,OAAO,EAAE,EAAE;IACX,SAAS,EAAE,cAAc;IACzB,WAAW,EAAE,MAAM,CAAC,MAAM;IAC1B,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,QAAQ,EAAE,MAAM,CAAC,MAAM;IACvB,SAAS,EAAE,MAAM,CAAC,MAAM;IACxB,QAAQ,EAAE,MAAM,CAAC,MAAM;IACvB,cAAc,EAAE,MAAM,CAAC,MAAM;IAC7B,eAAe,EAAE,cAAc;IAC/B,QAAQ,EAAE,MAAM,CAAC,OAAO;IACxB,QAAQ,EAAE,cAAc;IACxB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,EAAE;QACN,IAAI,EAAE,MAAM,CAAC,MAAM;KACpB,CAAC;IACF,SAAS,EAAE,MAAM,CAAC,MAAM;IACxB,MAAM,EAAE,MAAM,CAAC,KAAK,CAClB,MAAM,CAAC,MAAM,CAAC;QACZ,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,MAAM,CAAC,MAAM;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QACpC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;KACzC,CAAC,CACH;IACD,WAAW,EAAE,EAAE;IACf,OAAO,EAAE,MAAM,CAAC,OAAO;CACxB,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC,MAAM,CAAC;IACzD,aAAa,EAAE,EAAE;IACjB,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC;CAClD,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC,MAAM,CAAC;IACvD,aAAa,EAAE,EAAE;IACjB,gBAAgB,EAAE,gBAAgB;CACnC,CAAC,CAAA;AAIF,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,CAAA;AACpE,MAAM,mBAAmB,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC1C,QAAQ;IACR,UAAU;IACV,SAAS;IACT,QAAQ;CACT,CAAC,CAAA;AACF,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;AAEpE,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC,MAAM,CAAC;IACzD,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAChE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACpD,QAAQ,EAAE,QAAQ;IAClB,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC3B,SAAS,EAAE,SAAS;IACpB,SAAS,EAAE,mBAAmB;IAC9B,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5C,gBAAgB,EAAE,MAAM,CAAC,WAAW,CAAC,gBAAgB,CAAC;IACtD,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,gBAAgB,CAAC;CAClD,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,8BAA8B,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1D,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC;QAC9B,EAAE,EAAE,EAAE;QACN,WAAW,EAAE,MAAM,CAAC,MAAM;QAC1B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,SAAS,EAAE,MAAM,CAAC,MAAM;QACxB,cAAc,EAAE,MAAM,CAAC,MAAM;QAC7B,OAAO,EAAE,EAAE;QACX,uBAAuB,EAAE,MAAM,CAAC,OAAO;QACvC,kEAAkE;QAClE,kBAAkB,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;KAC1D,CAAC;CACH,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC,MAAM,CAAC;IACzD,WAAW,EAAE,MAAM,CAAC,WAAW,CAC7B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CACpD;IACD,MAAM,EAAE,MAAM,CAAC,WAAW,CACxB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAC7C;IACD,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/C,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,mBAAmB,CAAC;IAClD,gBAAgB,EAAE,MAAM,CAAC,WAAW,CAAC,gBAAgB,CAAC;IACtD,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,gBAAgB,CAAC;CAClD,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,gCAAgC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5D,gBAAgB,EAAE,gBAAgB;CACnC,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,gCAAgC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5D,MAAM,EAAE,MAAM,CAAC,OAAO;CACvB,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC,MAAM,CAAC;IACzD,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;CAChE,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,8BAA8B,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1D,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;IAC7B,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC;QAC9B,EAAE,EAAE,EAAE;QACN,WAAW,EAAE,MAAM,CAAC,MAAM;QAC1B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,SAAS,EAAE,MAAM,CAAC,MAAM;QACxB,OAAO,EAAE,EAAE;KACZ,CAAC;CACH,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;IACtC,EAAE,EAAE,EAAE;IACN,OAAO,EAAE,EAAE;IACX,SAAS,EAAE,cAAc;IACzB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC;QACvB,EAAE,EAAE,EAAE;QACN,IAAI,EAAE,MAAM,CAAC,MAAM;KACpB,CAAC;IACF,SAAS,EAAE,cAAc;IACzB,YAAY,EAAE,MAAM,CAAC,MAAM;IAC3B,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;IAC7D,QAAQ,EAAE,MAAM,CAAC,KAAK,CACpB,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,EAAE;QACN,WAAW,EAAE,MAAM,CAAC,MAAM;QAC1B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,cAAc;KACxB,CAAC,CACH;CACF,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,CAAC;IACnD,aAAa,EAAE,EAAE;IACjB,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;CACtC,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,MAAM,CAAC;IACpD,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAClE,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC;CACvC,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7C,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC9C,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,QAAQ,EAAE,MAAM,CAAC,MAAM;IACvB,aAAa,EAAE,cAAc;IAC7B,WAAW,EAAE,cAAc;IAC3B,eAAe,EAAE,cAAc;IAC/B,iBAAiB,EAAE,cAAc;IACjC,WAAW,EAAE,MAAM,CAAC,MAAM;IAC1B,IAAI,EAAE,MAAM,CAAC,MAAM;CACpB,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,MAAM,CAAC;IACrD,OAAO,EAAE,EAAE;IACX,QAAQ,EAAE,MAAM,CAAC,MAAM;IACvB,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC;CAC1C,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC;IACjD,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAClE,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;CAChE,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC;IAClD,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC;QACxB,EAAE,EAAE,EAAE;QACN,OAAO,EAAE,EAAE;QACX,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,cAAc;QACzB,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;KAC7B,CAAC;IACF,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC;CAC1C,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,CAAC;IACnD,aAAa,EAAE,EAAE;IACjB,QAAQ,EAAE,MAAM,CAAC,MAAM;IACvB,OAAO,EAAE,cAAc;IACvB,IAAI,EAAE,cAAc;IACpB,EAAE,EAAE,cAAc;IAClB,KAAK,EAAE,cAAc;IACrB,YAAY,EAAE,MAAM,CAAC,MAAM;IAC3B,UAAU,EAAE,MAAM,CAAC,MAAM;IACzB,QAAQ,EAAE,MAAM,CAAC,MAAM;IACvB,SAAS,EAAE,MAAM,CAAC,MAAM;IACxB,QAAQ,EAAE,MAAM,CAAC,KAAK,CACpB,MAAM,CAAC,MAAM,CAAC;QACZ,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,MAAM,CAAC,MAAM;QACnB,IAAI,EAAE,MAAM,CAAC,MAAM;QACnB,KAAK,EAAE,MAAM,CAAC,MAAM;KACrB,CAAC,CACH;IACD,OAAO,EAAE,MAAM,CAAC,KAAK,CACnB,MAAM,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC,MAAM;QACpB,KAAK,EAAE,MAAM,CAAC,MAAM;QACpB,KAAK,EAAE,MAAM,CAAC,MAAM;KACrB,CAAC,CACH;IACD,aAAa,EAAE,MAAM,CAAC,KAAK,CACzB,MAAM,CAAC,MAAM,CAAC;QACZ,WAAW,EAAE,MAAM,CAAC,MAAM;QAC1B,KAAK,EAAE,MAAM,CAAC,MAAM;QACpB,KAAK,EAAE,MAAM,CAAC,MAAM;KACrB,CAAC,CACH;IACD,OAAO,EAAE,MAAM,CAAC,KAAK,CACnB,MAAM,CAAC,MAAM,CAAC;QACZ,OAAO,EAAE,EAAE;QACX,SAAS,EAAE,cAAc;QACzB,KAAK,EAAE,MAAM,CAAC,MAAM;QACpB,KAAK,EAAE,MAAM,CAAC,MAAM;KACrB,CAAC,CACH;CACF,CAAC,CAAA"}

package/dist/auth/auth-service.d.ts

@@ -0,0 +1,34 @@
+import { Context, Crypto, Effect, Layer } from "effect";
+import { CliConfig } from "../config.js";
+import { AuthRequiredError, BrowserOpenError, CliConfigError, CliStorageError, OAuthCallbackError, OAuthRequestError, RefreshLockError } from "../errors.js";
+import { BrowserLauncher } from "./browser.js";
+import { CredentialStore } from "./credential-store.js";
+import { InstallationStore } from "./installation-store.js";
+import { API_READ_SCOPE, API_WRITE_SCOPE } from "./model.js";
+import type { AuthStatus } from "./model.js";
+import { OAuthClient } from "./oauth-client.js";
+import { AuthorizationCallback } from "./oauth-callback.js";
+export type AuthError = AuthRequiredError | CliConfigError | CliStorageError | OAuthCallbackError | OAuthRequestError | RefreshLockError;
+export type LogoutStatus = AuthStatus & {
+    readonly revocation: "confirmed" | "unconfirmed" | "not_needed";
+};
+export type LoginStatus = AuthStatus & {
+    readonly replacedSessionRevocation?: "confirmed" | "unconfirmed";
+};
+declare const AuthService_base: Context.ServiceClass<AuthService, "@allsquare/cli/AuthService", {
+    readonly login: (options: {
+        readonly write: boolean;
+        readonly noBrowser: boolean;
+        readonly onAuthorizationUrl: (url: string) => Effect.Effect<void>;
+        readonly onBrowserOpenError: (error: BrowserOpenError) => Effect.Effect<void>;
+    }) => Effect.Effect<LoginStatus, AuthError>;
+    readonly status: Effect.Effect<AuthStatus, AuthError>;
+    readonly logout: Effect.Effect<LogoutStatus, AuthError>;
+    readonly refresh: Effect.Effect<AuthStatus, AuthError>;
+    readonly accessToken: (requiredScope?: typeof API_READ_SCOPE | typeof API_WRITE_SCOPE) => Effect.Effect<string, AuthError>;
+}>;
+export declare class AuthService extends AuthService_base {
+    static readonly layer: Layer.Layer<AuthService, never, CliConfig | BrowserLauncher | CredentialStore | InstallationStore | Crypto.Crypto | OAuthClient | AuthorizationCallback>;
+}
+export {};
+//# sourceMappingURL=auth-service.d.ts.map

package/dist/auth/auth-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-service.d.ts","sourceRoot":"","sources":["../../src/auth/auth-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAA;AAEvD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACxC,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EACL,cAAc,EACd,eAAe,EAIhB,MAAM,YAAY,CAAA;AACnB,OAAO,KAAK,EAAE,UAAU,EAAiC,MAAM,YAAY,CAAA;AAC3E,OAAO,EAAyB,WAAW,EAAE,MAAM,mBAAmB,CAAA;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAG3D,MAAM,MAAM,SAAS,GACjB,iBAAiB,GACjB,cAAc,GACd,eAAe,GACf,kBAAkB,GAClB,iBAAiB,GACjB,gBAAgB,CAAA;AAEpB,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG;IACtC,QAAQ,CAAC,UAAU,EAAE,WAAW,GAAG,aAAa,GAAG,YAAY,CAAA;CAChE,CAAA;AAED,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG;IAErC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,WAAW,GAAG,aAAa,CAAA;CACjE,CAAA;;oBAsCiB,CAAC,OAAO,EAAE;QACxB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;QACvB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;QAC3B,QAAQ,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACjE,QAAQ,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;KAC9E,KAAK,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC;qBAC1B,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC;qBACpC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,CAAC;sBACrC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC;0BAChC,CACpB,aAAa,CAAC,EAAE,OAAO,cAAc,GAAG,OAAO,eAAe,KAC3D,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC;;AAZvC,qBAAa,WAAY,SAAQ,gBAaC;IAChC,MAAM,CAAC,QAAQ,CAAC,KAAK,2JA8PpB;CACF"}

package/dist/auth/auth-service.js

@@ -0,0 +1,221 @@
+import { Context, Crypto, Effect, Layer } from "effect";
+import { CliConfig } from "../config.js";
+import { AuthRequiredError, BrowserOpenError, CliConfigError, CliStorageError, OAuthCallbackError, OAuthRequestError, RefreshLockError } from "../errors.js";
+import { BrowserLauncher } from "./browser.js";
+import { CredentialStore } from "./credential-store.js";
+import { InstallationStore } from "./installation-store.js";
+import { API_READ_SCOPE, API_WRITE_SCOPE, Credentials, Installation, REGISTERED_REDIRECT_URI } from "./model.js";
+import { buildAuthorizationUrl, OAuthClient } from "./oauth-client.js";
+import { AuthorizationCallback } from "./oauth-callback.js";
+import { createPkceAuthorization } from "./pkce.js";
+const insufficientScope = (requiredScope) => new AuthRequiredError({
+    message: requiredScope === API_WRITE_SCOPE
+        ? "This session is read-only. Run `allsquare auth login` to grant write access."
+        : "Read access is required. Run `allsquare auth login`.",
+    reason: "insufficient_scope"
+});
+const credentialsFromToken = (token) => ({
+    accessToken: token.accessToken,
+    refreshToken: token.refreshToken,
+    tokenType: token.tokenType,
+    expiresAt: Date.now() + token.expiresIn * 1_000,
+    scopes: [...token.scopes]
+});
+const statusFrom = (apiUrl, installation, credentials) => {
+    if (!installation || !credentials) {
+        return { authenticated: false, apiUrl };
+    }
+    return {
+        authenticated: true,
+        apiUrl,
+        clientId: installation.clientId,
+        scopes: credentials.scopes,
+        expiresAt: new Date(credentials.expiresAt).toISOString()
+    };
+};
+export class AuthService extends Context.Service()("@allsquare/cli/AuthService") {
+    static layer = Layer.effect(AuthService, Effect.gen(function* () {
+        const config = yield* CliConfig;
+        const installations = yield* InstallationStore;
+        const credentialStore = yield* CredentialStore;
+        const oauth = yield* OAuthClient;
+        const callback = yield* AuthorizationCallback;
+        const browser = yield* BrowserLauncher;
+        const crypto = yield* Crypto.Crypto;
+        const resource = config.apiUrl;
+        const getOrRegisterInstallation = (apiUrl, endpoints) => installations.withAuthLock(Effect.gen(function* () {
+            const existing = yield* installations.load(apiUrl);
+            if (existing)
+                return existing;
+            const installationId = yield* crypto.randomUUIDv4.pipe(Effect.mapError((cause) => new OAuthRequestError({
+                message: `Could not create an installation identifier: ${cause.message}`
+            })));
+            const clientId = yield* oauth.register({
+                endpoints,
+                name: `AllSquare CLI (${installationId.slice(0, 8)})`,
+                redirectUri: REGISTERED_REDIRECT_URI
+            });
+            const installation = {
+                installationId,
+                clientId,
+                resource: endpoints.resource,
+                registeredRedirectUri: REGISTERED_REDIRECT_URI,
+                registeredAt: new Date().toISOString()
+            };
+            yield* installations.save(installation);
+            return installation;
+        }));
+        const invalidateRotatedSession = (apiUrl, error) => {
+            if (error.oauthError !== "invalid_grant")
+                return Effect.fail(error);
+            return credentialStore.remove(apiUrl).pipe(Effect.andThen(Effect.fail(new AuthRequiredError({
+                message: "Your session can no longer be refreshed. Run `allsquare auth login` again."
+            }))));
+        };
+        // The server revokes exactly the token it is given, so revoking an old
+        // session cannot affect a session issued by a later authorization.
+        const revokeCredentials = (endpoints, clientId, credentials) => oauth.revoke({ endpoints, clientId, token: credentials.refreshToken }).pipe(Effect.andThen(oauth.revoke({ endpoints, clientId, token: credentials.accessToken })));
+        const refreshCredentials = (apiUrl, force, requiredScope) => installations.withAuthLock(Effect.gen(function* () {
+            // Always reload after acquiring the cross-process lock. Another CLI
+            // process may have rotated and saved the refresh token while this
+            // process was waiting.
+            const current = yield* credentialStore.load(apiUrl);
+            if (!current) {
+                return yield* new AuthRequiredError({
+                    message: "You are not logged in. Run `allsquare auth login`."
+                });
+            }
+            // Check scope before refreshing: a failed refresh deletes the
+            // session and would hide that it was deliberately read-only.
+            if (requiredScope && !current.scopes.includes(requiredScope)) {
+                return yield* insufficientScope(requiredScope);
+            }
+            if (!force && current.expiresAt > Date.now() + 60_000)
+                return current;
+            const installation = yield* installations.load(apiUrl);
+            if (!installation) {
+                return yield* new AuthRequiredError({
+                    message: "This CLI installation is not registered. Run `allsquare auth login`."
+                });
+            }
+            const endpoints = yield* oauth.discover(apiUrl);
+            const token = yield* oauth.refresh({
+                endpoints,
+                clientId: installation.clientId,
+                refreshToken: current.refreshToken
+            }).pipe(Effect.catchTag("OAuthRequestError", (error) => invalidateRotatedSession(apiUrl, error)));
+            const next = credentialsFromToken(token);
+            yield* credentialStore.save(apiUrl, next);
+            return next;
+        }));
+        const status = Effect.gen(function* () {
+            const apiUrl = yield* resource;
+            const [installation, credentials] = yield* Effect.all([
+                installations.load(apiUrl),
+                credentialStore.load(apiUrl)
+            ]);
+            return statusFrom(apiUrl, installation, credentials);
+        });
+        return AuthService.of({
+            login: ({ write, noBrowser, onAuthorizationUrl, onBrowserOpenError }) => Effect.gen(function* () {
+                const apiUrl = yield* resource;
+                const endpoints = yield* oauth.discover(apiUrl);
+                const installation = yield* getOrRegisterInstallation(apiUrl, endpoints);
+                const pkce = yield* createPkceAuthorization.pipe(Effect.provideService(Crypto.Crypto, crypto));
+                const scopes = write
+                    ? [API_READ_SCOPE, API_WRITE_SCOPE]
+                    : [API_READ_SCOPE];
+                let redirectUri = "";
+                const code = yield* callback.receive({
+                    state: pkce.state,
+                    onReady: (callbackUri) => {
+                        redirectUri = callbackUri;
+                        const authorizationUrl = buildAuthorizationUrl({
+                            endpoint: endpoints.authorizationEndpoint,
+                            clientId: installation.clientId,
+                            redirectUri: callbackUri,
+                            resource: endpoints.resource,
+                            scopes,
+                            state: pkce.state,
+                            challenge: pkce.challenge
+                        });
+                        return onAuthorizationUrl(authorizationUrl).pipe(Effect.andThen(noBrowser
+                            ? Effect.void
+                            : browser.open(authorizationUrl).pipe(Effect.catchTag("BrowserOpenError", onBrowserOpenError))));
+                    }
+                });
+                const token = yield* oauth.exchangeCode({
+                    endpoints,
+                    clientId: installation.clientId,
+                    code,
+                    verifier: pkce.verifier,
+                    redirectUri
+                });
+                if (scopes.some((scope) => !token.scopes.includes(scope))) {
+                    return yield* new OAuthRequestError({
+                        message: "The authorization server did not grant all requested scopes."
+                    });
+                }
+                const credentials = credentialsFromToken(token);
+                const replaced = yield* installations.withAuthLock(Effect.gen(function* () {
+                    const previous = yield* Effect.result(credentialStore.load(apiUrl));
+                    yield* credentialStore.save(apiUrl, credentials);
+                    return previous._tag === "Success" ? previous.success : undefined;
+                }));
+                const status = statusFrom(apiUrl, installation, credentials);
+                if (!replaced || replaced.refreshToken === credentials.refreshToken)
+                    return status;
+                // A login replaces the earlier grant rather than narrowing it, so
+                // revoke the old tokens; otherwise --read-only would leave
+                // previously issued write access valid on the server.
+                const revocation = yield* Effect.result(revokeCredentials(endpoints, installation.clientId, replaced));
+                return {
+                    ...status,
+                    replacedSessionRevocation: revocation._tag === "Success"
+                        ? "confirmed"
+                        : "unconfirmed"
+                };
+            }),
+            status,
+            logout: Effect.gen(function* () {
+                const apiUrl = yield* resource;
+                return yield* installations.withAuthLock(Effect.gen(function* () {
+                    const credentials = yield* credentialStore.load(apiUrl);
+                    // Broken registration metadata must not strand a local token.
+                    const installationLookup = yield* Effect.result(installations.load(apiUrl));
+                    const installation = installationLookup._tag === "Success"
+                        ? installationLookup.success
+                        : undefined;
+                    if (!credentials) {
+                        return { ...statusFrom(apiUrl, installation, undefined), revocation: "not_needed" };
+                    }
+                    const revocation = installation
+                        ? yield* oauth.discover(apiUrl).pipe(Effect.flatMap((endpoints) => revokeCredentials(endpoints, installation.clientId, credentials)), Effect.result)
+                        : undefined;
+                    // Local logout must not depend on the authorization server being
+                    // reachable. An unconfirmed revocation is reported to the user.
+                    yield* credentialStore.remove(apiUrl);
+                    return {
+                        ...statusFrom(apiUrl, installation, undefined),
+                        revocation: revocation?._tag === "Success" ? "confirmed" : "unconfirmed"
+                    };
+                }));
+            }),
+            refresh: Effect.gen(function* () {
+                const apiUrl = yield* resource;
+                const credentials = yield* refreshCredentials(apiUrl, true);
+                const installation = yield* installations.load(apiUrl);
+                return statusFrom(apiUrl, installation, credentials);
+            }),
+            accessToken: (requiredScope = API_READ_SCOPE) => Effect.gen(function* () {
+                const apiUrl = yield* resource;
+                const credentials = yield* refreshCredentials(apiUrl, false, requiredScope);
+                if (!credentials.scopes.includes(requiredScope)) {
+                    return yield* insufficientScope(requiredScope);
+                }
+                return credentials.accessToken;
+            })
+        });
+    }));
+}
+//# sourceMappingURL=auth-service.js.map