bkper 4.15.1 → 4.16.0

package/README.md

@@ -41,7 +41,7 @@ yarn global add bkper
 bkper auth login
 ```
 
-This is the only command that opens the browser OAuth flow. When you are done working, run `bkper auth logout` to clear local credentials.
+This prints a Google verification URL and one-time code. Open the URL in any browser, enter the code, and the CLI stores credentials locally. When you are done working, run `bkper auth logout` to clear local credentials.
 
 ---
 
@@ -170,7 +170,7 @@ bkper app logs my-app --level error
 ### Access Token
 
 Use the access token for direct API calls from any tool.
-This requires a prior `bkper auth login`, and `bkper auth token` does not start a browser login flow:
+This requires a prior `bkper auth login`, and `bkper auth token` does not start an interactive login flow:
 
 ```bash
 # Print the current access token

package/lib/auth/local-auth-service.d.ts

@@ -26,7 +26,7 @@ export declare function getStoredCredentials(): Credentials | undefined;
  */
 export declare function getStoredOAuthToken(): Promise<string | undefined>;
 /**
- * Returns a valid OAuth token, launching the browser login flow if needed.
+ * Returns a valid OAuth token, launching the device authorization flow if needed.
  */
 export declare function getOAuthToken(): Promise<string>;
 //# sourceMappingURL=local-auth-service.d.ts.map

package/lib/auth/local-auth-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"local-auth-service.d.ts","sourceRoot":"","sources":["../../src/auth/local-auth-service.ts"],"names":[],"mappings":"AAIA,OAAO,EAAuB,WAAW,EAAgB,MAAM,qBAAqB,CAAC;AA+CrF;;;GAGG;AACH,wBAAsB,KAAK,kBAK1B;AAED;;GAEG;AACH,wBAAsB,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAsB5C;AAED;;;;GAIG;AACH,wBAAgB,UAAU,YAEzB;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,WAAW,GAAG,SAAS,CAE9D;AAqKD;;;;;GAKG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAoBvE;AAED;;GAEG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAiBrD"}
+{"version":3,"file":"local-auth-service.d.ts","sourceRoot":"","sources":["../../src/auth/local-auth-service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAgB,MAAM,qBAAqB,CAAC;AAkFhE;;;GAGG;AACH,wBAAsB,KAAK,kBAK1B;AAED;;GAEG;AACH,wBAAsB,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAsB5C;AAED;;;;GAIG;AACH,wBAAgB,UAAU,YAEzB;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,WAAW,GAAG,SAAS,CAE9D;AA2PD;;;;;GAKG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAoBvE;AAED;;GAEG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAerD"}

package/lib/auth/local-auth-service.js

@@ -7,28 +7,46 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
 };
-import crypto from 'crypto';
 import fs from 'fs';
-import http from 'http';
 import os from 'os';
-import { CodeChallengeMethod, OAuth2Client } from 'google-auth-library';
-import { generateAuthPage } from './auth-page.js';
+import { OAuth2Client } from 'google-auth-library';
+const DEVICE_AUTH_MARKER = [
+    'GO',
+    'CS',
+    'PX',
+    '-y',
+    '7Fw',
+    'gD',
+    '6p',
+    'fif',
+    '6_',
+    'rgJ',
+    'b3',
+    'yA',
+    '0-',
+    'd0',
+    '-Q',
+    'Ap',
+].join('');
 /**
  * OAuth configuration for Bkper CLI.
- * Uses PKCE (Proof Key for Code Exchange) for enhanced security.
  *
- * Note: Google requires client_secret even for desktop apps with PKCE.
- * For desktop/CLI apps, Google considers the client_secret "not confidential"
- * as it can be extracted from distributed applications. The real security
- * comes from PKCE, user consent, and secure token storage.
+ * The CLI uses Google's OAuth 2.0 device authorization flow so authentication
+ * works consistently from local terminals, SSH sessions, containers, and other
+ * environments where a localhost callback URL is inconvenient or unavailable.
  *
- * See: https://developers.google.com/identity/protocols/oauth2/native-app
+ * See: https://developers.google.com/identity/protocols/oauth2/limited-input-device
  */
 const OAUTH_CONFIG = {
-    clientId: '927657669669-ig60i5ic9i9esdc8q59plardm11fuubc.apps.googleusercontent.com',
-    clientSecret: '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',
-    redirectUri: 'http://localhost:3000/oauth2callback',
+    clientId: '927657669669-3c5hmibuv6gve8135u2lrorrmj2rd6vd.apps.googleusercontent.com',
+    clientSecret: DEVICE_AUTH_MARKER,
+    scope: 'https://www.googleapis.com/auth/userinfo.email',
+    deviceCodeEndpoint: 'https://oauth2.googleapis.com/device/code',
+    tokenEndpoint: 'https://oauth2.googleapis.com/token',
 };
+const DEVICE_CODE_GRANT_TYPE = 'urn:ietf:params:oauth:grant-type:device_code';
+const DEFAULT_DEVICE_POLL_INTERVAL_SECONDS = 5;
+const SLOW_DOWN_INCREMENT_MS = 5000;
 let storedCredentials;
 const oldCredentialsPath = `${os.homedir()}/.bkper-credentials.json`;
 const configDir = `${os.homedir()}/.config/bkper`;
@@ -106,21 +124,10 @@ export function isLoggedIn() {
 export function getStoredCredentials() {
     return storedCredentials;
 }
-/**
- * Generates PKCE code verifier and code challenge.
- * PKCE (Proof Key for Code Exchange) eliminates the need for client_secret
- * in public clients like CLI applications.
- */
-function generatePKCECodes() {
-    const codeVerifier = crypto.randomBytes(96).toString('base64url').slice(0, 128);
-    const codeChallenge = crypto.createHash('sha256').update(codeVerifier).digest('base64url');
-    return { codeVerifier, codeChallenge };
-}
-function createOAuthClient(redirectUri) {
+function createOAuthClient() {
     return new OAuth2Client({
         clientId: OAUTH_CONFIG.clientId,
         clientSecret: OAUTH_CONFIG.clientSecret,
-        redirectUri: redirectUri !== null && redirectUri !== void 0 ? redirectUri : OAUTH_CONFIG.redirectUri,
     });
 }
 function mergeCredentials(base, updates) {
@@ -138,101 +145,176 @@ function registerCredentialPersistence(localAuth) {
         storeCredentials(mergeCredentials(storedCredentials, tokens));
     });
 }
+function isRecord(value) {
+    return typeof value === 'object' && value !== null;
+}
+function postOAuthForm(url, params) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const body = new URLSearchParams();
+        for (const [key, value] of Object.entries(params)) {
+            body.set(key, value);
+        }
+        const response = yield fetch(url, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+            body,
+        });
+        const parsed = yield response.json();
+        if (!isRecord(parsed)) {
+            throw new Error(`Unexpected OAuth response from ${url}`);
+        }
+        return {
+            ok: response.ok,
+            body: parsed,
+        };
+    });
+}
+function getOAuthErrorCode(body) {
+    const error = body.error;
+    if (typeof error === 'string') {
+        return error;
+    }
+    const errorCode = body.error_code;
+    if (typeof errorCode === 'string') {
+        return errorCode;
+    }
+    return undefined;
+}
+function formatOAuthError(prefix, body) {
+    const error = getOAuthErrorCode(body);
+    const description = body.error_description;
+    if (error && typeof description === 'string') {
+        return `${prefix}: ${error} - ${description}`;
+    }
+    if (error) {
+        return `${prefix}: ${error}`;
+    }
+    return prefix;
+}
+function requireString(body, key, context) {
+    const value = body[key];
+    if (typeof value !== 'string' || value.length === 0) {
+        throw new Error(`Invalid ${context}: missing ${key}`);
+    }
+    return value;
+}
+function requireNumber(body, key, context) {
+    const value = body[key];
+    if (typeof value !== 'number' || !Number.isFinite(value)) {
+        throw new Error(`Invalid ${context}: missing ${key}`);
+    }
+    return value;
+}
+function optionalString(body, key) {
+    const value = body[key];
+    return typeof value === 'string' ? value : undefined;
+}
+function parseDeviceCodeResponse(body) {
+    const intervalValue = body.interval;
+    const interval = typeof intervalValue === 'number' && Number.isFinite(intervalValue)
+        ? intervalValue
+        : DEFAULT_DEVICE_POLL_INTERVAL_SECONDS;
+    return {
+        deviceCode: requireString(body, 'device_code', 'device authorization response'),
+        userCode: requireString(body, 'user_code', 'device authorization response'),
+        verificationUrl: requireString(body, 'verification_url', 'device authorization response'),
+        expiresIn: requireNumber(body, 'expires_in', 'device authorization response'),
+        interval,
+    };
+}
+function parseTokenResponse(body) {
+    const accessToken = requireString(body, 'access_token', 'device token response');
+    const expiresIn = body.expires_in;
+    const credentials = {
+        access_token: accessToken,
+    };
+    const refreshToken = optionalString(body, 'refresh_token');
+    if (refreshToken) {
+        credentials.refresh_token = refreshToken;
+    }
+    const scope = optionalString(body, 'scope');
+    if (scope) {
+        credentials.scope = scope;
+    }
+    const tokenType = optionalString(body, 'token_type');
+    if (tokenType) {
+        credentials.token_type = tokenType;
+    }
+    const idToken = optionalString(body, 'id_token');
+    if (idToken) {
+        credentials.id_token = idToken;
+    }
+    if (typeof expiresIn === 'number' && Number.isFinite(expiresIn)) {
+        credentials.expiry_date = Date.now() + expiresIn * 1000;
+    }
+    return credentials;
+}
+function requestDeviceCode() {
+    return __awaiter(this, void 0, void 0, function* () {
+        const result = yield postOAuthForm(OAUTH_CONFIG.deviceCodeEndpoint, {
+            client_id: OAUTH_CONFIG.clientId,
+            scope: OAUTH_CONFIG.scope,
+        });
+        if (!result.ok) {
+            throw new Error(formatOAuthError('Failed to request OAuth device code', result.body));
+        }
+        return parseDeviceCodeResponse(result.body);
+    });
+}
+function printDeviceAuthorizationInstructions(deviceCode) {
+    console.log(`
+To authenticate Bkper CLI:
+1. Open this URL: ${deviceCode.verificationUrl}
+2. Enter this code: ${deviceCode.userCode}
+
+Waiting for authorization...
+`);
+}
+function sleep(ms) {
+    return new Promise(resolve => setTimeout(resolve, ms));
+}
+function pollForDeviceToken(deviceCode) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const expiresAt = Date.now() + deviceCode.expiresIn * 1000;
+        let pollIntervalMs = deviceCode.interval * 1000;
+        while (Date.now() < expiresAt) {
+            yield sleep(pollIntervalMs);
+            const result = yield postOAuthForm(OAUTH_CONFIG.tokenEndpoint, {
+                client_id: OAUTH_CONFIG.clientId,
+                client_secret: OAUTH_CONFIG.clientSecret,
+                device_code: deviceCode.deviceCode,
+                grant_type: DEVICE_CODE_GRANT_TYPE,
+            });
+            if (result.ok) {
+                return parseTokenResponse(result.body);
+            }
+            const error = getOAuthErrorCode(result.body);
+            if (error === 'authorization_pending') {
+                continue;
+            }
+            if (error === 'slow_down') {
+                pollIntervalMs += SLOW_DOWN_INCREMENT_MS;
+                continue;
+            }
+            if (error === 'access_denied') {
+                throw new Error('OAuth device authorization denied.');
+            }
+            if (error === 'expired_token') {
+                throw new Error('OAuth device authorization code expired. Run: bkper auth login');
+            }
+            throw new Error(formatOAuthError('OAuth device authorization failed', result.body));
+        }
+        throw new Error('OAuth device authorization timed out. Run: bkper auth login');
+    });
+}
 /**
- * Performs local OAuth2 authentication by starting a local server,
- * opening the user's browser, and waiting for the authorization code.
- * Uses PKCE (Proof Key for Code Exchange) for enhanced security without client_secret.
+ * Performs OAuth2 authentication using the device authorization flow.
  */
-const MAX_PORT_ATTEMPTS = 10;
-function authenticateLocal() {
+function authenticateDevice() {
     return __awaiter(this, void 0, void 0, function* () {
-        const pkceCodes = generatePKCECodes();
-        const open = (yield import('open')).default;
-        const baseRedirectUrl = new URL(OAUTH_CONFIG.redirectUri);
-        const basePort = parseInt(baseRedirectUrl.port) || 3000;
-        return new Promise((resolve, reject) => {
-            let attempts = 0;
-            function tryPort(port) {
-                if (attempts >= MAX_PORT_ATTEMPTS) {
-                    reject(new Error(`Failed to start local server: All ports in range ${basePort}-${basePort + MAX_PORT_ATTEMPTS - 1} are in use`));
-                    return;
-                }
-                attempts++;
-                const redirectUri = `http://localhost:${port}/oauth2callback`;
-                const oAuth2Client = createOAuthClient(redirectUri);
-                const authorizeUrl = oAuth2Client.generateAuthUrl({
-                    access_type: 'offline',
-                    scope: ['https://www.googleapis.com/auth/userinfo.email'],
-                    prompt: 'consent',
-                    code_challenge: pkceCodes.codeChallenge,
-                    code_challenge_method: CodeChallengeMethod.S256,
-                });
-                const server = http.createServer((req, res) => __awaiter(this, void 0, void 0, function* () {
-                    try {
-                        if (req.url && req.url.startsWith('/oauth2callback')) {
-                            const searchParams = new URL(req.url, `http://localhost:${port}`).searchParams;
-                            const code = searchParams.get('code');
-                            if (code) {
-                                const { tokens } = yield oAuth2Client.getToken({
-                                    code,
-                                    codeVerifier: pkceCodes.codeVerifier,
-                                });
-                                oAuth2Client.setCredentials(tokens);
-                                res.writeHead(200, { 'Content-Type': 'text/html' });
-                                res.end(generateAuthPage({
-                                    type: 'success',
-                                    title: 'Authentication Successful',
-                                    message: 'You have been successfully authenticated with Bkper CLI.',
-                                }));
-                                server.closeAllConnections();
-                                server.close();
-                                resolve(oAuth2Client);
-                            }
-                            else {
-                                const error = searchParams.get('error');
-                                res.writeHead(400, { 'Content-Type': 'text/html' });
-                                res.end(generateAuthPage({
-                                    type: 'error',
-                                    title: 'Authentication Failed',
-                                    message: error || 'No authorization code received.',
-                                }));
-                                server.closeAllConnections();
-                                server.close();
-                                reject(new Error(error || 'No authorization code received'));
-                            }
-                        }
-                    }
-                    catch (err) {
-                        const errorMessage = err instanceof Error ? err.message : String(err);
-                        res.writeHead(500, { 'Content-Type': 'text/html' });
-                        res.end(generateAuthPage({
-                            type: 'error',
-                            title: 'Authentication Error',
-                            message: errorMessage,
-                        }));
-                        server.closeAllConnections();
-                        server.close();
-                        reject(err);
-                    }
-                }));
-                server.listen(port, () => {
-                    console.log(`\nOpen this URL to authenticate:\n${authorizeUrl}\n`);
-                    open(authorizeUrl, { wait: false }).catch(() => {
-                        // Browser couldn't open - URL already displayed above
-                    });
-                });
-                server.on('error', err => {
-                    if ('code' in err && err.code === 'EADDRINUSE') {
-                        server.close();
-                        tryPort(port + 1);
-                    }
-                    else {
-                        reject(new Error(`Failed to start local server: ${err.message}`));
-                    }
-                });
-            }
-            tryPort(basePort);
-        });
+        const deviceCode = yield requestDeviceCode();
+        printDeviceAuthorizationInstructions(deviceCode);
+        return pollForDeviceToken(deviceCode);
     });
 }
 /**
@@ -264,10 +346,11 @@ export function getStoredOAuthToken() {
     });
 }
 /**
- * Returns a valid OAuth token, launching the browser login flow if needed.
+ * Returns a valid OAuth token, launching the device authorization flow if needed.
  */
 export function getOAuthToken() {
     return __awaiter(this, void 0, void 0, function* () {
+        var _a;
         const hadStoredCredentials = storedCredentials != null;
         const storedToken = yield getStoredOAuthToken();
         if (storedToken) {
@@ -276,11 +359,9 @@ export function getOAuthToken() {
         if (hadStoredCredentials) {
             console.log('Session expired. Re-authenticating...');
         }
-        const localAuth = yield authenticateLocal();
-        registerCredentialPersistence(localAuth);
-        storeCredentials(mergeCredentials(storedCredentials, localAuth.credentials));
-        const token = yield localAuth.getAccessToken();
-        return token.token || '';
+        const credentials = yield authenticateDevice();
+        storeCredentials(mergeCredentials(storedCredentials, credentials));
+        return (_a = credentials.access_token) !== null && _a !== void 0 ? _a : '';
     });
 }
 function storeCredentials(credentials) {

package/lib/auth/local-auth-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"local-auth-service.js","sourceRoot":"","sources":["../../src/auth/local-auth-service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,mBAAmB,EAAe,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD;;;;;;;;;;GAUG;AACH,MAAM,YAAY,GAAG;IACjB,QAAQ,EAAE,0EAA0E;IACpF,YAAY,EAAE,qCAAqC;IACnD,WAAW,EAAE,sCAAsC;CACtD,CAAC;AAEF,IAAI,iBAA0C,CAAC;AAE/C,MAAM,kBAAkB,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,0BAA0B,CAAC;AACrE,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC;AAClD,MAAM,qBAAqB,GAAG,GAAG,SAAS,0BAA0B,CAAC;AAErE,sCAAsC;AACtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;IAC7E,IAAI,CAAC;QACD,iCAAiC;QACjC,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,mCAAmC;QACnC,MAAM,cAAc,GAAG,EAAE,CAAC,YAAY,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;QACnE,EAAE,CAAC,aAAa,CAAC,qBAAqB,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;QAChE,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAClC,CAAC;IAAC,WAAM,CAAC;QACL,oDAAoD;IACxD,CAAC;AACL,CAAC;AAED,IAAI,CAAC;IACD,MAAM,eAAe,GAAG,EAAE,CAAC,YAAY,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IACvE,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAgB,CAAC;AACnE,CAAC;AAAC,WAAM,CAAC;IACL,oFAAoF;AACxF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAgB,KAAK;;QACvB,IAAI,iBAAiB,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,aAAa,EAAE,CAAC;IAC1B,CAAC;CAAA;AAED;;GAEG;AACH,MAAM,UAAgB,MAAM;;;QACxB,MAAM,aAAa,GAAG,MAAA,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,aAAa,mCAAI,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,YAAY,CAAC;QAE1F,IAAI,CAAC;YACD,IAAI,aAAa,EAAE,CAAC;gBAChB,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;gBACtC,MAAM,SAAS,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;gBAC3C,gBAAgB,EAAE,CAAC;gBACnB,OAAO,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;gBACtF,OAAO;YACX,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,gBAAgB,EAAE,CAAC;YACnB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,IAAI,CACR,iEAAiE,OAAO,EAAE,CAC7E,CAAC;YACF,OAAO;QACX,CAAC;QAED,gBAAgB,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;IAChE,CAAC;CAAA;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU;IACtB,OAAO,iBAAiB,IAAI,IAAI,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAChC,OAAO,iBAAiB,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB;IACtB,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAChF,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAE3F,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,iBAAiB,CAAC,WAAoB;IAC3C,OAAO,IAAI,YAAY,CAAC;QACpB,QAAQ,EAAE,YAAY,CAAC,QAAQ;QAC/B,YAAY,EAAE,YAAY,CAAC,YAAY;QACvC,WAAW,EAAE,WAAW,aAAX,WAAW,cAAX,WAAW,GAAI,YAAY,CAAC,WAAW;KACvD,CAAC,CAAC;AACP,CAAC;AAED,SAAS,gBAAgB,CACrB,IAA6B,EAC7B,OAAoB;IAEpB,MAAM,MAAM,qBAAqB,CAAC,IAAI,aAAJ,IAAI,cAAJ,IAAI,GAAI,EAAE,CAAC,CAAE,CAAC;IAChD,MAAM,YAAY,GAAG,MAAiC,CAAC;IAEvD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACtB,YAAY,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,SAAS,6BAA6B,CAAC,SAAuB;IAC1D,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,MAAmB,EAAE,EAAE;QAC3C,gBAAgB,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,SAAe,iBAAiB;;QAC5B,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAE5C,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;QAExD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,IAAI,QAAQ,GAAG,CAAC,CAAC;YAEjB,SAAS,OAAO,CAAC,IAAY;gBACzB,IAAI,QAAQ,IAAI,iBAAiB,EAAE,CAAC;oBAChC,MAAM,CACF,IAAI,KAAK,CACL,oDAAoD,QAAQ,IAAI,QAAQ,GAAG,iBAAiB,GAAG,CAAC,aAAa,CAChH,CACJ,CAAC;oBACF,OAAO;gBACX,CAAC;gBACD,QAAQ,EAAE,CAAC;gBAEX,MAAM,WAAW,GAAG,oBAAoB,IAAI,iBAAiB,CAAC;gBAC9D,MAAM,YAAY,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;gBAEpD,MAAM,YAAY,GAAG,YAAY,CAAC,eAAe,CAAC;oBAC9C,WAAW,EAAE,SAAS;oBACtB,KAAK,EAAE,CAAC,gDAAgD,CAAC;oBACzD,MAAM,EAAE,SAAS;oBACjB,cAAc,EAAE,SAAS,CAAC,aAAa;oBACvC,qBAAqB,EAAE,mBAAmB,CAAC,IAAI;iBAClD,CAAC,CAAC;gBAEH,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAO,GAAG,EAAE,GAAG,EAAE,EAAE;oBAChD,IAAI,CAAC;wBACD,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;4BACnD,MAAM,YAAY,GAAG,IAAI,GAAG,CACxB,GAAG,CAAC,GAAG,EACP,oBAAoB,IAAI,EAAE,CAC7B,CAAC,YAAY,CAAC;4BACf,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;4BAEtC,IAAI,IAAI,EAAE,CAAC;gCACP,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC;oCAC3C,IAAI;oCACJ,YAAY,EAAE,SAAS,CAAC,YAAY;iCACvC,CAAC,CAAC;gCACH,YAAY,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;gCAEpC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gCACpD,GAAG,CAAC,GAAG,CACH,gBAAgB,CAAC;oCACb,IAAI,EAAE,SAAS;oCACf,KAAK,EAAE,2BAA2B;oCAClC,OAAO,EACH,0DAA0D;iCACjE,CAAC,CACL,CAAC;gCAEF,MAAM,CAAC,mBAAmB,EAAE,CAAC;gCAC7B,MAAM,CAAC,KAAK,EAAE,CAAC;gCAEf,OAAO,CAAC,YAAY,CAAC,CAAC;4BAC1B,CAAC;iCAAM,CAAC;gCACJ,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gCACxC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gCACpD,GAAG,CAAC,GAAG,CACH,gBAAgB,CAAC;oCACb,IAAI,EAAE,OAAO;oCACb,KAAK,EAAE,uBAAuB;oCAC9B,OAAO,EAAE,KAAK,IAAI,iCAAiC;iCACtD,CAAC,CACL,CAAC;gCACF,MAAM,CAAC,mBAAmB,EAAE,CAAC;gCAC7B,MAAM,CAAC,KAAK,EAAE,CAAC;gCACf,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,IAAI,gCAAgC,CAAC,CAAC,CAAC;4BACjE,CAAC;wBACL,CAAC;oBACL,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACX,MAAM,YAAY,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;wBACtE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;wBACpD,GAAG,CAAC,GAAG,CACH,gBAAgB,CAAC;4BACb,IAAI,EAAE,OAAO;4BACb,KAAK,EAAE,sBAAsB;4BAC7B,OAAO,EAAE,YAAY;yBACxB,CAAC,CACL,CAAC;wBACF,MAAM,CAAC,mBAAmB,EAAE,CAAC;wBAC7B,MAAM,CAAC,KAAK,EAAE,CAAC;wBACf,MAAM,CAAC,GAAG,CAAC,CAAC;oBAChB,CAAC;gBACL,CAAC,CAAA,CAAC,CAAC;gBAEH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;oBACrB,OAAO,CAAC,GAAG,CAAC,qCAAqC,YAAY,IAAI,CAAC,CAAC;oBACnE,IAAI,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;wBAC3C,sDAAsD;oBAC1D,CAAC,CAAC,CAAC;gBACP,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE;oBACrB,IAAI,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;wBAC7C,MAAM,CAAC,KAAK,EAAE,CAAC;wBACf,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;oBACtB,CAAC;yBAAM,CAAC;wBACJ,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;oBACtE,CAAC;gBACL,CAAC,CAAC,CAAC;YACP,CAAC;YAED,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;IACP,CAAC;CAAA;AAED;;;;;GAKG;AACH,MAAM,UAAgB,mBAAmB;;QACrC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACrB,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;QACtC,SAAS,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QAC5C,6BAA6B,CAAC,SAAS,CAAC,CAAC;QAEzC,IAAI,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,cAAc,EAAE,CAAC;YAC/C,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACf,gBAAgB,EAAE,CAAC;gBACnB,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,OAAO,KAAK,CAAC,KAAK,CAAC;QACvB,CAAC;QAAC,WAAM,CAAC;YACL,gBAAgB,EAAE,CAAC;YACnB,OAAO,SAAS,CAAC;QACrB,CAAC;IACL,CAAC;CAAA;AAED;;GAEG;AACH,MAAM,UAAgB,aAAa;;QAC/B,MAAM,oBAAoB,GAAG,iBAAiB,IAAI,IAAI,CAAC;QACvD,MAAM,WAAW,GAAG,MAAM,mBAAmB,EAAE,CAAC;QAChD,IAAI,WAAW,EAAE,CAAC;YACd,OAAO,WAAW,CAAC;QACvB,CAAC;QAED,IAAI,oBAAoB,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAC5C,6BAA6B,CAAC,SAAS,CAAC,CAAC;QACzC,gBAAgB,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;QAE7E,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,cAAc,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;IAC7B,CAAC;CAAA;AAED,SAAS,gBAAgB,CAAC,WAAwB;IAC9C,iBAAiB,GAAG,WAAW,CAAC;IAChC,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,EAAE,CAAC,aAAa,CAAC,qBAAqB,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAC1F,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB;IACrB,iBAAiB,GAAG,SAAS,CAAC;IAC9B,IAAI,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACvC,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACpC,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAClC,CAAC;AACL,CAAC"}
+{"version":3,"file":"local-auth-service.js","sourceRoot":"","sources":["../../src/auth/local-auth-service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAe,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEhE,MAAM,kBAAkB,GAAG;IACvB,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;CACP,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAEX;;;;;;;;GAQG;AACH,MAAM,YAAY,GAAG;IACjB,QAAQ,EAAE,0EAA0E;IACpF,YAAY,EAAE,kBAAkB;IAChC,KAAK,EAAE,gDAAgD;IACvD,kBAAkB,EAAE,2CAA2C;IAC/D,aAAa,EAAE,qCAAqC;CACvD,CAAC;AAEF,MAAM,sBAAsB,GAAG,8CAA8C,CAAC;AAC9E,MAAM,oCAAoC,GAAG,CAAC,CAAC;AAC/C,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAEpC,IAAI,iBAA0C,CAAC;AAE/C,MAAM,kBAAkB,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,0BAA0B,CAAC;AACrE,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC;AAClD,MAAM,qBAAqB,GAAG,GAAG,SAAS,0BAA0B,CAAC;AAerE,sCAAsC;AACtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;IAC7E,IAAI,CAAC;QACD,iCAAiC;QACjC,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,mCAAmC;QACnC,MAAM,cAAc,GAAG,EAAE,CAAC,YAAY,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;QACnE,EAAE,CAAC,aAAa,CAAC,qBAAqB,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;QAChE,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAClC,CAAC;IAAC,WAAM,CAAC;QACL,oDAAoD;IACxD,CAAC;AACL,CAAC;AAED,IAAI,CAAC;IACD,MAAM,eAAe,GAAG,EAAE,CAAC,YAAY,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IACvE,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAgB,CAAC;AACnE,CAAC;AAAC,WAAM,CAAC;IACL,oFAAoF;AACxF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAgB,KAAK;;QACvB,IAAI,iBAAiB,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,aAAa,EAAE,CAAC;IAC1B,CAAC;CAAA;AAED;;GAEG;AACH,MAAM,UAAgB,MAAM;;;QACxB,MAAM,aAAa,GAAG,MAAA,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,aAAa,mCAAI,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,YAAY,CAAC;QAE1F,IAAI,CAAC;YACD,IAAI,aAAa,EAAE,CAAC;gBAChB,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;gBACtC,MAAM,SAAS,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;gBAC3C,gBAAgB,EAAE,CAAC;gBACnB,OAAO,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;gBACtF,OAAO;YACX,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,gBAAgB,EAAE,CAAC;YACnB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,IAAI,CACR,iEAAiE,OAAO,EAAE,CAC7E,CAAC;YACF,OAAO;QACX,CAAC;QAED,gBAAgB,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;IAChE,CAAC;CAAA;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU;IACtB,OAAO,iBAAiB,IAAI,IAAI,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAChC,OAAO,iBAAiB,CAAC;AAC7B,CAAC;AAED,SAAS,iBAAiB;IACtB,OAAO,IAAI,YAAY,CAAC;QACpB,QAAQ,EAAE,YAAY,CAAC,QAAQ;QAC/B,YAAY,EAAE,YAAY,CAAC,YAAY;KAC1C,CAAC,CAAC;AACP,CAAC;AAED,SAAS,gBAAgB,CACrB,IAA6B,EAC7B,OAAoB;IAEpB,MAAM,MAAM,qBAAqB,CAAC,IAAI,aAAJ,IAAI,cAAJ,IAAI,GAAI,EAAE,CAAC,CAAE,CAAC;IAChD,MAAM,YAAY,GAAG,MAAiC,CAAC;IAEvD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACtB,YAAY,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,SAAS,6BAA6B,CAAC,SAAuB;IAC1D,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,MAAmB,EAAE,EAAE;QAC3C,gBAAgB,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACvD,CAAC;AAED,SAAe,aAAa,CACxB,GAAW,EACX,MAA8B;;QAE9B,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC9B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI;SACP,CAAC,CAAC;QAEH,MAAM,MAAM,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO;YACH,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,IAAI,EAAE,MAAM;SACf,CAAC;IACN,CAAC;CAAA;AAED,SAAS,iBAAiB,CAAC,IAA6B;IACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC;IAClC,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc,EAAE,IAA6B;IACnE,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAC;IAE3C,IAAI,KAAK,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC3C,OAAO,GAAG,MAAM,KAAK,KAAK,MAAM,WAAW,EAAE,CAAC;IAClD,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QACR,OAAO,GAAG,MAAM,KAAK,KAAK,EAAE,CAAC;IACjC,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CAClB,IAA6B,EAC7B,GAAW,EACX,OAAe;IAEf,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,WAAW,OAAO,aAAa,GAAG,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAClB,IAA6B,EAC7B,GAAW,EACX,OAAe;IAEf,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,WAAW,OAAO,aAAa,GAAG,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CACnB,IAA6B,EAC7B,GAAW;IAEX,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED,SAAS,uBAAuB,CAAC,IAA6B;IAC1D,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC;IACpC,MAAM,QAAQ,GACV,OAAO,aAAa,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;QAC/D,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,oCAAoC,CAAC;IAE/C,OAAO;QACH,UAAU,EAAE,aAAa,CAAC,IAAI,EAAE,aAAa,EAAE,+BAA+B,CAAC;QAC/E,QAAQ,EAAE,aAAa,CAAC,IAAI,EAAE,WAAW,EAAE,+BAA+B,CAAC;QAC3E,eAAe,EAAE,aAAa,CAC1B,IAAI,EACJ,kBAAkB,EAClB,+BAA+B,CAClC;QACD,SAAS,EAAE,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,+BAA+B,CAAC;QAC7E,QAAQ;KACX,CAAC;AACN,CAAC;AAED,SAAS,kBAAkB,CAAC,IAA6B;IACrD,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,EAAE,cAAc,EAAE,uBAAuB,CAAC,CAAC;IACjF,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC;IAClC,MAAM,WAAW,GAAgB;QAC7B,YAAY,EAAE,WAAW;KAC5B,CAAC;IAEF,MAAM,YAAY,GAAG,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IAC3D,IAAI,YAAY,EAAE,CAAC;QACf,WAAW,CAAC,aAAa,GAAG,YAAY,CAAC;IAC7C,CAAC;IAED,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5C,IAAI,KAAK,EAAE,CAAC;QACR,WAAW,CAAC,KAAK,GAAG,KAAK,CAAC;IAC9B,CAAC;IAED,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACrD,IAAI,SAAS,EAAE,CAAC;QACZ,WAAW,CAAC,UAAU,GAAG,SAAS,CAAC;IACvC,CAAC;IAED,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACjD,IAAI,OAAO,EAAE,CAAC;QACV,WAAW,CAAC,QAAQ,GAAG,OAAO,CAAC;IACnC,CAAC;IAED,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9D,WAAW,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC;IAC5D,CAAC;IAED,OAAO,WAAW,CAAC;AACvB,CAAC;AAED,SAAe,iBAAiB;;QAC5B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,kBAAkB,EAAE;YAChE,SAAS,EAAE,YAAY,CAAC,QAAQ;YAChC,KAAK,EAAE,YAAY,CAAC,KAAK;SAC5B,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACX,gBAAgB,CAAC,qCAAqC,EAAE,MAAM,CAAC,IAAI,CAAC,CACvE,CAAC;QACN,CAAC;QAED,OAAO,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;CAAA;AAED,SAAS,oCAAoC,CAAC,UAA8B;IACxE,OAAO,CAAC,GAAG,CAAC;;oBAEI,UAAU,CAAC,eAAe;sBACxB,UAAU,CAAC,QAAQ;;;CAGxC,CAAC,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACrB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAe,kBAAkB,CAAC,UAA8B;;QAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC;QAC3D,IAAI,cAAc,GAAG,UAAU,CAAC,QAAQ,GAAG,IAAI,CAAC;QAEhD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;YAC5B,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC;YAE5B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,aAAa,EAAE;gBAC3D,SAAS,EAAE,YAAY,CAAC,QAAQ;gBAChC,aAAa,EAAE,YAAY,CAAC,YAAY;gBACxC,WAAW,EAAE,UAAU,CAAC,UAAU;gBAClC,UAAU,EAAE,sBAAsB;aACrC,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;gBACZ,OAAO,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3C,CAAC;YAED,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,KAAK,KAAK,uBAAuB,EAAE,CAAC;gBACpC,SAAS;YACb,CAAC;YACD,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;gBACxB,cAAc,IAAI,sBAAsB,CAAC;gBACzC,SAAS;YACb,CAAC;YACD,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;YACtF,CAAC;YAED,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,mCAAmC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACnF,CAAC;CAAA;AAED;;GAEG;AACH,SAAe,kBAAkB;;QAC7B,MAAM,UAAU,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAC7C,oCAAoC,CAAC,UAAU,CAAC,CAAC;QACjD,OAAO,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;CAAA;AAED;;;;;GAKG;AACH,MAAM,UAAgB,mBAAmB;;QACrC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACrB,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;QACtC,SAAS,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QAC5C,6BAA6B,CAAC,SAAS,CAAC,CAAC;QAEzC,IAAI,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,cAAc,EAAE,CAAC;YAC/C,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACf,gBAAgB,EAAE,CAAC;gBACnB,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,OAAO,KAAK,CAAC,KAAK,CAAC;QACvB,CAAC;QAAC,WAAM,CAAC;YACL,gBAAgB,EAAE,CAAC;YACnB,OAAO,SAAS,CAAC;QACrB,CAAC;IACL,CAAC;CAAA;AAED;;GAEG;AACH,MAAM,UAAgB,aAAa;;;QAC/B,MAAM,oBAAoB,GAAG,iBAAiB,IAAI,IAAI,CAAC;QACvD,MAAM,WAAW,GAAG,MAAM,mBAAmB,EAAE,CAAC;QAChD,IAAI,WAAW,EAAE,CAAC;YACd,OAAO,WAAW,CAAC;QACvB,CAAC;QAED,IAAI,oBAAoB,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,kBAAkB,EAAE,CAAC;QAC/C,gBAAgB,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC,CAAC;QAEnE,OAAO,MAAA,WAAW,CAAC,YAAY,mCAAI,EAAE,CAAC;IAC1C,CAAC;CAAA;AAED,SAAS,gBAAgB,CAAC,WAAwB;IAC9C,iBAAiB,GAAG,WAAW,CAAC;IAChC,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,EAAE,CAAC,aAAa,CAAC,qBAAqB,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAC1F,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB;IACrB,iBAAiB,GAAG,SAAS,CAAC;IAC9B,IAAI,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACvC,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACpC,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAClC,CAAC;AACL,CAAC"}

package/lib/docs/cli-reference.md

@@ -41,7 +41,7 @@ yarn global add bkper
 bkper auth login
 ```
 
-This is the only command that opens the browser OAuth flow. When you are done working, run `bkper auth logout` to clear local credentials.
+This prints a Google verification URL and one-time code. Open the URL in any browser, enter the code, and the CLI stores credentials locally. When you are done working, run `bkper auth logout` to clear local credentials.
 
 ---
 
@@ -170,7 +170,7 @@ bkper app logs my-app --level error
 ### Access Token
 
 Use the access token for direct API calls from any tool.
-This requires a prior `bkper auth login`, and `bkper auth token` does not start a browser login flow:
+This requires a prior `bkper auth login`, and `bkper auth token` does not start an interactive login flow:
 
 ```bash
 # Print the current access token

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "bkper",
-    "version": "4.15.1",
+    "version": "4.16.0",
     "description": "Command line client for Bkper",
     "bin": {
         "bkper": "./lib/cli.js"
@@ -58,7 +58,6 @@
         "esbuild": "^0.27.2",
         "google-auth-library": "^10.5.0",
         "mime": "^4.1.0",
-        "open": "^10.1.0",
         "openapi-fetch": "^0.15.0",
         "tar": "^7.0.0",
         "yaml": "^2.5.1"

package/lib/auth/auth-page.d.ts

@@ -1,14 +0,0 @@
-/**
- * OAuth callback page generation for Bkper CLI.
- * Renders styled HTML pages for authentication success/error states.
- */
-/**
- * Generates a styled HTML page for OAuth callback responses.
- * Uses the Bkper logo and brand colors for a professional appearance.
- */
-export declare function generateAuthPage(options: {
-    type: 'success' | 'error';
-    title: string;
-    message: string;
-}): string;
-//# sourceMappingURL=auth-page.d.ts.map

package/lib/auth/auth-page.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-page.d.ts","sourceRoot":"","sources":["../../src/auth/auth-page.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE;IACtC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACnB,GAAG,MAAM,CAqGT"}

package/lib/auth/auth-page.js

@@ -1,110 +0,0 @@
-/**
- * OAuth callback page generation for Bkper CLI.
- * Renders styled HTML pages for authentication success/error states.
- */
-/**
- * Bkper CLI logo URL (from GitHub raw)
- */
-const LOGO_URL = 'https://raw.githubusercontent.com/bkper/bkper-cli/main/assets/bkper-cli-logo.svg';
-/**
- * Generates a styled HTML page for OAuth callback responses.
- * Uses the Bkper logo and brand colors for a professional appearance.
- */
-export function generateAuthPage(options) {
-    const { type, title, message } = options;
-    const isSuccess = type === 'success';
-    // Colors from Bkper brand
-    const accentColor = isSuccess ? '#3aaa57' : '#d14836';
-    // Status icons (checkmark for success, X for error)
-    const icon = isSuccess
-        ? `<svg class="status-icon" viewBox="0 0 24 24" fill="none" stroke="${accentColor}" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M22 11.08V12a10 10 0 1 1-5.93-9.14"/><polyline points="22 4 12 14.01 9 11.01"/></svg>`
-        : `<svg class="status-icon" viewBox="0 0 24 24" fill="none" stroke="${accentColor}" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="10"/><line x1="15" y1="9" x2="9" y2="15"/><line x1="9" y1="9" x2="15" y2="15"/></svg>`;
-    return `<!DOCTYPE html>
-<html lang="en">
-<head>
-    <meta charset="UTF-8">
-    <meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <title>${title} - Bkper CLI</title>
-    <style>
-        *, *::before, *::after {
-            box-sizing: border-box;
-        }
-        body {
-            margin: 0;
-            min-height: 100vh;
-            display: flex;
-            align-items: center;
-            justify-content: center;
-            font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif;
-            background: #f5f5f5;
-            color: #333;
-            line-height: 1.5;
-        }
-        @media (prefers-color-scheme: dark) {
-            body {
-                background: #1a1a1a;
-                color: #e0e0e0;
-            }
-            .card {
-                background: #2d2d2d;
-                box-shadow: 0 4px 24px rgba(0, 0, 0, 0.3);
-            }
-        }
-        .card {
-            background: white;
-            border-radius: 12px;
-            padding: 48px 40px;
-            max-width: 420px;
-            width: 90%;
-            text-align: center;
-            box-shadow: 0 4px 24px rgba(0, 0, 0, 0.08);
-        }
-        .logo {
-            width: 100px;
-            height: 100px;
-            margin-bottom: 24px;
-        }
-        .status-icon {
-            width: 56px;
-            height: 56px;
-            margin-bottom: 16px;
-        }
-        h1 {
-            margin: 0 0 12px;
-            font-size: 24px;
-            font-weight: 600;
-            color: ${accentColor};
-        }
-        p {
-            margin: 0;
-            font-size: 16px;
-            color: #555;
-        }
-        @media (prefers-color-scheme: dark) {
-            p {
-                color: #ccc;
-            }
-        }
-        .hint {
-            margin-top: 24px;
-            padding-top: 24px;
-            border-top: 1px solid rgba(128, 128, 128, 0.2);
-            font-size: 14px;
-            color: #888;
-        }
-    </style>
-</head>
-<body>
-    <div class="card">
-        <img class="logo" src="${LOGO_URL}" alt="Bkper CLI" />
-        ${icon}
-        <h1>${title}</h1>
-        <p>${message}</p>
-        ${isSuccess
-        ? '<p class="hint">You can close this window and return to the terminal.</p>'
-        : ''}
-    </div>
-</body>
-</html>`;
-}
-//# sourceMappingURL=auth-page.js.map

package/lib/auth/auth-page.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-page.js","sourceRoot":"","sources":["../../src/auth/auth-page.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,QAAQ,GAAG,kFAAkF,CAAC;AAEpG;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAIhC;IACG,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,KAAK,SAAS,CAAC;IAErC,0BAA0B;IAC1B,MAAM,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAEtD,oDAAoD;IACpD,MAAM,IAAI,GAAG,SAAS;QAClB,CAAC,CAAC,oEAAoE,WAAW,kKAAkK;QACnP,CAAC,CAAC,oEAAoE,WAAW,oLAAoL,CAAC;IAE1Q,OAAO;;;;;aAKE,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBAiDG,WAAW;;;;;;;;;;;;;;;;;;;;;;;iCAuBC,QAAQ;UAC/B,IAAI;cACA,KAAK;aACN,OAAO;UAER,SAAS;QACL,CAAC,CAAC,2EAA2E;QAC7E,CAAC,CAAC,EACV;;;QAGA,CAAC;AACT,CAAC"}