brainhub-mcp 0.1.0

package/dist/adapters/index.js

@@ -0,0 +1,111 @@
+import { stat } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import fg from "fast-glob";
+import { parseClaudeSession } from "./claude.js";
+import { parseCodexSession } from "./codex.js";
+import { parseGrokSession } from "./grok.js";
+const emptyStatus = () => ({
+    discovered: 0,
+    captured: 0,
+    skippedSubagents: 0,
+    malformed: 0,
+    errors: 0,
+});
+async function globFiles(patterns) {
+    return fg(patterns, {
+        absolute: true,
+        onlyFiles: true,
+        unique: true,
+        followSymbolicLinks: false,
+        suppressErrors: true,
+    });
+}
+async function incrementalFiles(paths, modifiedAfter, includePaths, sourcePath = (path) => path) {
+    if (!modifiedAfter)
+        return paths;
+    const candidates = await Promise.all(paths.map(async (path) => {
+        if (includePaths.has(path) || includePaths.has(sourcePath(path)))
+            return path;
+        try {
+            return (await stat(path)).mtime.toISOString() > modifiedAfter
+                ? path
+                : null;
+        }
+        catch {
+            return path;
+        }
+    }));
+    return candidates.filter((path) => path !== null);
+}
+export async function discoverSessions(options) {
+    const status = {
+        claude: emptyStatus(),
+        codex: emptyStatus(),
+        grok: emptyStatus(),
+    };
+    const output = {
+        sessions: [],
+        skippedSubagents: 0,
+        malformed: 0,
+        warnings: [],
+        status,
+    };
+    const parserOptions = {
+        device: options.device,
+        includeSubagents: options.includeSubagents,
+    };
+    const includePaths = new Set(options.includePaths ?? []);
+    const work = [];
+    if (options.sources.includes("claude-code")) {
+        const paths = await incrementalFiles(await globFiles(options.paths.claude.map((root) => join(root, "**", "*.jsonl"))), options.modifiedAfter?.["claude-code"], includePaths);
+        status.claude.discovered = paths.length;
+        work.push(...paths.map((path) => ({
+            name: "claude",
+            path,
+            parse: () => parseClaudeSession(path, parserOptions),
+        })));
+    }
+    if (options.sources.includes("codex")) {
+        const paths = await incrementalFiles(await globFiles(options.paths.codex.map((root) => join(root, "**", "rollout-*.jsonl"))), options.modifiedAfter?.codex, includePaths);
+        status.codex.discovered = paths.length;
+        work.push(...paths.map((path) => ({
+            name: "codex",
+            path,
+            parse: () => parseCodexSession(path, parserOptions),
+        })));
+    }
+    if (options.sources.includes("grok-build")) {
+        const histories = await incrementalFiles(await globFiles(options.paths.grok.map((root) => join(root, "**", "chat_history.jsonl"))), options.modifiedAfter?.["grok-build"], includePaths, dirname);
+        status.grok.discovered = histories.length;
+        work.push(...histories.map((path) => ({
+            name: "grok",
+            path: dirname(path),
+            parse: () => parseGrokSession(dirname(path), parserOptions),
+        })));
+    }
+    for (const item of work) {
+        try {
+            const result = await item.parse();
+            status[item.name].malformed += result.malformedLines;
+            output.malformed += result.malformedLines;
+            if (result.skippedSubagent) {
+                status[item.name].skippedSubagents += 1;
+                output.skippedSubagents += 1;
+            }
+            if (result.session) {
+                status[item.name].captured += 1;
+                output.sessions.push(result.session);
+            }
+        }
+        catch {
+            status[item.name].errors += 1;
+            output.warnings.push({
+                code: "SOURCE_PARSE_FAILED",
+                message: `${item.name} session could not be parsed: ${item.path}`,
+            });
+        }
+    }
+    output.sessions.sort((left, right) => left.updatedAt.localeCompare(right.updatedAt));
+    return output;
+}
+//# sourceMappingURL=index.js.map

package/dist/adapters/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/adapters/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,MAAM,WAAW,CAAC;AAG3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AA4B7C,MAAM,WAAW,GAAG,GAAoB,EAAE,CAAC,CAAC;IAC1C,UAAU,EAAE,CAAC;IACb,QAAQ,EAAE,CAAC;IACX,gBAAgB,EAAE,CAAC;IACnB,SAAS,EAAE,CAAC;IACZ,MAAM,EAAE,CAAC;CACV,CAAC,CAAC;AAEH,KAAK,UAAU,SAAS,CAAC,QAAkB;IACzC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAClB,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,IAAI;QACZ,mBAAmB,EAAE,KAAK;QAC1B,cAAc,EAAE,IAAI;KACrB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,KAAe,EACf,aAAiC,EACjC,YAAyB,EACzB,aAAuC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI;IAErD,IAAI,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,CAClC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACvB,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC9D,OAAO,IAAI,CAAC;QACd,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,aAAa;gBAC3D,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,IAAI,CAAC;QACX,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IACF,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAyB;IAEzB,MAAM,MAAM,GAAG;QACb,MAAM,EAAE,WAAW,EAAE;QACrB,KAAK,EAAE,WAAW,EAAE;QACpB,IAAI,EAAE,WAAW,EAAE;KACpB,CAAC;IACF,MAAM,MAAM,GAAoB;QAC9B,QAAQ,EAAE,EAAE;QACZ,gBAAgB,EAAE,CAAC;QACnB,SAAS,EAAE,CAAC;QACZ,QAAQ,EAAE,EAAE;QACZ,MAAM;KACP,CAAC;IACF,MAAM,aAAa,GAAG;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;KAC3C,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,IAAI,GAIL,EAAE,CAAC;IAER,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAClC,MAAM,SAAS,CACb,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAChE,EACD,OAAO,CAAC,aAAa,EAAE,CAAC,aAAa,CAAC,EACtC,YAAY,CACb,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC;QACxC,IAAI,CAAC,IAAI,CACP,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACtB,IAAI,EAAE,QAAiB;YACvB,IAAI;YACJ,KAAK,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,aAAa,CAAC;SACrD,CAAC,CAAC,CACJ,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAClC,MAAM,SAAS,CACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC,CACvE,EACD,OAAO,CAAC,aAAa,EAAE,KAAK,EAC5B,YAAY,CACb,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC;QACvC,IAAI,CAAC,IAAI,CACP,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACtB,IAAI,EAAE,OAAgB;YACtB,IAAI;YACJ,KAAK,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,aAAa,CAAC;SACpD,CAAC,CAAC,CACJ,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC3C,MAAM,SAAS,GAAG,MAAM,gBAAgB,CACtC,MAAM,SAAS,CACb,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC9B,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,oBAAoB,CAAC,CACvC,CACF,EACD,OAAO,CAAC,aAAa,EAAE,CAAC,YAAY,CAAC,EACrC,YAAY,EACZ,OAAO,CACR,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC;QAC1C,IAAI,CAAC,IAAI,CACP,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC1B,IAAI,EAAE,MAAe;YACrB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC;SAC5D,CAAC,CAAC,CACJ,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,cAAc,CAAC;YACrD,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,cAAc,CAAC;YAC1C,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC;gBACxC,MAAM,CAAC,gBAAgB,IAAI,CAAC,CAAC;YAC/B,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;gBAChC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;YAC9B,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,iCAAiC,IAAI,CAAC,IAAI,EAAE;aAClE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACnC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAC9C,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/adapters/jsonl.d.ts

@@ -0,0 +1,6 @@
+export declare function readJsonLines(path: string): Promise<{
+    records: unknown[];
+    malformedLines: number;
+}>;
+export declare function asRecord(value: unknown): Record<string, unknown> | null;
+export declare function asString(value: unknown): string | null;

package/dist/adapters/jsonl.js

@@ -0,0 +1,26 @@
+import { readFile } from "node:fs/promises";
+export async function readJsonLines(path) {
+    const input = await readFile(path, "utf8");
+    const records = [];
+    let malformedLines = 0;
+    for (const line of input.split(/\r?\n/u)) {
+        if (!line.trim())
+            continue;
+        try {
+            records.push(JSON.parse(line));
+        }
+        catch {
+            malformedLines += 1;
+        }
+    }
+    return { records, malformedLines };
+}
+export function asRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : null;
+}
+export function asString(value) {
+    return typeof value === "string" && value.length > 0 ? value : null;
+}
+//# sourceMappingURL=jsonl.js.map

package/dist/adapters/jsonl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonl.js","sourceRoot":"","sources":["../../src/adapters/jsonl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAY;IAEZ,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAc,EAAE,CAAC;IAC9B,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAC3B,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,cAAc,IAAI,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC"}

package/dist/adapters/types.d.ts

@@ -0,0 +1,10 @@
+import type { NormalizedSession } from "../domain/session.js";
+export interface AdapterOptions {
+    device: string;
+    includeSubagents: boolean;
+}
+export interface AdapterResult {
+    session: NormalizedSession | null;
+    skippedSubagent: boolean;
+    malformedLines: number;
+}

package/dist/adapters/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/adapters/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/adapters/types.ts"],"names":[],"mappings":""}

package/dist/auth/account-status.d.ts

@@ -0,0 +1,50 @@
+import type { BrainHubConfig } from "../domain/config.js";
+import type { GoogleDriveAccount } from "./google-account.js";
+export declare function resolveGoogleAccountStatus(options: {
+    config: BrainHubConfig;
+    credential: string | null;
+    loadAccount: () => Promise<GoogleDriveAccount>;
+}): Promise<{
+    drive: {
+        rootFolderName: string;
+        rootFolderId?: string;
+        configured: boolean;
+    };
+    configuredAccount?: {
+        email: string;
+        displayName: string;
+    };
+    authenticated: false;
+    reason: "missing_credential";
+} | {
+    identityMatches: boolean;
+    drive: {
+        rootFolderName: string;
+        rootFolderId?: string;
+        configured: boolean;
+    };
+    configuredAccount?: {
+        email: string;
+        displayName: string;
+    };
+    authenticated: true;
+    account: {
+        email: string;
+        displayName: string;
+    };
+} | {
+    drive: {
+        rootFolderName: string;
+        rootFolderId?: string;
+        configured: boolean;
+    };
+    configuredAccount?: {
+        email: string;
+        displayName: string;
+    };
+    authenticated: false;
+    reason: "invalid_credential";
+}>;
+export declare function resolveReusableGoogleAccount(options: Parameters<typeof resolveGoogleAccountStatus>[0]): Promise<{
+    email: string;
+} | null>;

package/dist/auth/account-status.js

@@ -0,0 +1,59 @@
+function configuredAccount(config) {
+    if (!config.drive.accountEmail || !config.drive.accountDisplayName) {
+        return undefined;
+    }
+    return {
+        email: config.drive.accountEmail,
+        displayName: config.drive.accountDisplayName,
+    };
+}
+function driveStatus(config) {
+    return {
+        configured: Boolean(config.drive.rootFolderId),
+        ...(config.drive.rootFolderId
+            ? { rootFolderId: config.drive.rootFolderId }
+            : {}),
+        rootFolderName: config.drive.rootFolderName,
+    };
+}
+export async function resolveGoogleAccountStatus(options) {
+    const configured = configuredAccount(options.config);
+    const drive = driveStatus(options.config);
+    if (!options.credential) {
+        return {
+            authenticated: false,
+            reason: "missing_credential",
+            ...(configured ? { configuredAccount: configured } : {}),
+            drive,
+        };
+    }
+    try {
+        const account = await options.loadAccount();
+        return {
+            authenticated: true,
+            account: { email: account.email, displayName: account.displayName },
+            ...(configured ? { configuredAccount: configured } : {}),
+            identityMatches: Boolean(options.config.drive.accountPermissionId) &&
+                options.config.drive.accountPermissionId === account.permissionId,
+            drive,
+        };
+    }
+    catch {
+        return {
+            authenticated: false,
+            reason: "invalid_credential",
+            ...(configured ? { configuredAccount: configured } : {}),
+            drive,
+        };
+    }
+}
+export async function resolveReusableGoogleAccount(options) {
+    const status = await resolveGoogleAccountStatus(options);
+    if (!status.authenticated ||
+        !status.identityMatches ||
+        !status.drive.configured) {
+        return null;
+    }
+    return { email: status.account.email };
+}
+//# sourceMappingURL=account-status.js.map

package/dist/auth/account-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-status.js","sourceRoot":"","sources":["../../src/auth/account-status.ts"],"names":[],"mappings":"AAGA,SAAS,iBAAiB,CAAC,MAAsB;IAC/C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;QACnE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY;QAChC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,kBAAkB;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,MAAsB;IACzC,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;QAC9C,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY;YAC3B,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE;YAC7C,CAAC,CAAC,EAAE,CAAC;QACP,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,cAAc;KAC5C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,OAIhD;IACC,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACxB,OAAO;YACL,aAAa,EAAE,KAAc;YAC7B,MAAM,EAAE,oBAA6B;YACrC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,KAAK;SACN,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;QAC5C,OAAO;YACL,aAAa,EAAE,IAAa;YAC5B,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE;YACnE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,eAAe,EACb,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC;gBACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,KAAK,OAAO,CAAC,YAAY;YACnE,KAAK;SACN,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,aAAa,EAAE,KAAc;YAC7B,MAAM,EAAE,oBAA6B;YACrC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,KAAK;SACN,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OAAyD;IAEzD,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACzD,IACE,CAAC,MAAM,CAAC,aAAa;QACrB,CAAC,MAAM,CAAC,eAAe;QACvB,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EACxB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;AACzC,CAAC"}

package/dist/auth/google-account.d.ts

@@ -0,0 +1,21 @@
+import type { drive_v3 } from "googleapis";
+import type { BrainHubConfig } from "../domain/config.js";
+import type { GoogleOAuthClient } from "./google-oauth.js";
+export interface GoogleDriveAccount {
+    email: string;
+    displayName: string;
+    permissionId: string;
+}
+export interface GoogleAccountConnection {
+    account: GoogleDriveAccount;
+    rootFolderId: string;
+}
+export declare function readGoogleDriveAccount(client: drive_v3.Drive): Promise<GoogleDriveAccount>;
+export declare function connectGoogleAccount(options: {
+    authClient: GoogleOAuthClient;
+    drive: (auth: GoogleOAuthClient) => drive_v3.Drive;
+    rootFolderName: string;
+    rootFolderId?: string;
+}): Promise<GoogleAccountConnection>;
+export declare function applyGoogleConnection(config: BrainHubConfig, connection: GoogleAccountConnection): BrainHubConfig;
+export declare function clearGoogleConnection(config: BrainHubConfig): BrainHubConfig;

package/dist/auth/google-account.js

@@ -0,0 +1,45 @@
+import { BrainHubError } from "../domain/errors.js";
+import { GoogleDrive } from "../drive/google-drive.js";
+export async function readGoogleDriveAccount(client) {
+    const response = await client.about.get({
+        fields: "user(displayName,emailAddress,permissionId)",
+    });
+    const email = response.data.user?.emailAddress?.trim();
+    const displayName = response.data.user?.displayName?.trim();
+    const permissionId = response.data.user?.permissionId?.trim();
+    if (!email || !displayName || !permissionId) {
+        throw new BrainHubError("AUTH_ACCOUNT_UNAVAILABLE", "Google Drive did not return a complete account identity");
+    }
+    return { email, displayName, permissionId };
+}
+export async function connectGoogleAccount(options) {
+    const client = options.drive(options.authClient);
+    const account = await readGoogleDriveAccount(client);
+    const rootFolderId = await GoogleDrive.createRoot(client, options.rootFolderName, options.rootFolderId);
+    return { account, rootFolderId };
+}
+export function applyGoogleConnection(config, connection) {
+    return {
+        ...config,
+        drive: {
+            ...config.drive,
+            rootFolderId: connection.rootFolderId,
+            accountEmail: connection.account.email,
+            accountDisplayName: connection.account.displayName,
+            accountPermissionId: connection.account.permissionId,
+        },
+    };
+}
+export function clearGoogleConnection(config) {
+    return {
+        ...config,
+        drive: {
+            ...config.drive,
+            rootFolderId: "",
+            accountEmail: "",
+            accountDisplayName: "",
+            accountPermissionId: "",
+        },
+    };
+}
+//# sourceMappingURL=google-account.js.map

package/dist/auth/google-account.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-account.js","sourceRoot":"","sources":["../../src/auth/google-account.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAcvD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAsB;IAEtB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;QACtC,MAAM,EAAE,6CAA6C;KACtD,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACvD,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC5D,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC9D,IAAI,CAAC,KAAK,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5C,MAAM,IAAI,aAAa,CACrB,0BAA0B,EAC1B,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAK1C;IACC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,UAAU,CAC/C,MAAM,EACN,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,YAAY,CACrB,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,MAAsB,EACtB,UAAmC;IAEnC,OAAO;QACL,GAAG,MAAM;QACT,KAAK,EAAE;YACL,GAAG,MAAM,CAAC,KAAK;YACf,YAAY,EAAE,UAAU,CAAC,YAAY;YACrC,YAAY,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK;YACtC,kBAAkB,EAAE,UAAU,CAAC,OAAO,CAAC,WAAW;YAClD,mBAAmB,EAAE,UAAU,CAAC,OAAO,CAAC,YAAY;SACrD;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAsB;IAC1D,OAAO;QACL,GAAG,MAAM;QACT,KAAK,EAAE;YACL,GAAG,MAAM,CAAC,KAAK;YACf,YAAY,EAAE,EAAE;YAChB,YAAY,EAAE,EAAE;YAChB,kBAAkB,EAAE,EAAE;YACtB,mBAAmB,EAAE,EAAE;SACxB;KACF,CAAC;AACJ,CAAC"}

package/dist/auth/google-oauth.d.ts

@@ -0,0 +1,35 @@
+import { google } from "googleapis";
+import { type OAuthLoopbackSession } from "./oauth-loopback.js";
+import type { SecretStore } from "./secret-store.js";
+export declare const GOOGLE_DRIVE_SCOPE = "https://www.googleapis.com/auth/drive";
+export type GoogleOAuthClient = InstanceType<typeof google.auth.OAuth2>;
+type GoogleAuthorizationOptions = NonNullable<Parameters<GoogleOAuthClient["generateAuthUrl"]>[0]>;
+export interface StagedGoogleAuthorization {
+    client: GoogleOAuthClient;
+    commit(): Promise<void>;
+    rollback(): Promise<void>;
+}
+export interface GoogleOAuthDependencies {
+    createClient?: (clientId: string, clientSecret: string, redirectUri?: string) => GoogleOAuthClient;
+    startLoopback?: (state: string) => Promise<OAuthLoopbackSession>;
+}
+export interface OAuthClientConfig {
+    clientId: string;
+    clientSecret: string;
+    redirectUris: string[];
+}
+export declare function parseOAuthClientConfig(value: unknown): OAuthClientConfig;
+export declare function googleAuthorizationOptions(state: string, codeChallenge: string): GoogleAuthorizationOptions;
+export declare function readOAuthClientConfig(path: string, bundled?: OAuthClientConfig): Promise<OAuthClientConfig>;
+export declare function revokeGoogleCredential(serialized: string, fetcher?: typeof fetch): Promise<boolean>;
+export declare class GoogleOAuth {
+    #private;
+    readonly clientFile: string;
+    readonly secrets: SecretStore;
+    constructor(clientFile: string, secrets: SecretStore, dependencies?: GoogleOAuthDependencies);
+    getClient(options: {
+        interactive: boolean;
+    }): Promise<GoogleOAuthClient>;
+    beginInteractiveAuthorization(): Promise<StagedGoogleAuthorization>;
+}
+export {};

package/dist/auth/google-oauth.js

@@ -0,0 +1,191 @@
+import { randomBytes } from "node:crypto";
+import { readFile } from "node:fs/promises";
+import { google } from "googleapis";
+import { BrainHubError } from "../domain/errors.js";
+import { BUNDLED_GOOGLE_OAUTH_CLIENT } from "./official-oauth-client.js";
+import { startOAuthLoopback, } from "./oauth-loopback.js";
+export const GOOGLE_DRIVE_SCOPE = "https://www.googleapis.com/auth/drive";
+export function parseOAuthClientConfig(value) {
+    const root = value && typeof value === "object"
+        ? value
+        : {};
+    const candidate = (root.installed ?? root.web);
+    const clientId = candidate?.client_id;
+    const clientSecret = candidate?.client_secret;
+    const redirectUris = candidate?.redirect_uris;
+    if (typeof clientId !== "string" ||
+        typeof clientSecret !== "string" ||
+        !Array.isArray(redirectUris) ||
+        !redirectUris.every((uri) => typeof uri === "string")) {
+        throw new Error("OAuth client file is incomplete");
+    }
+    return { clientId, clientSecret, redirectUris };
+}
+export function googleAuthorizationOptions(state, codeChallenge) {
+    return {
+        access_type: "offline",
+        prompt: "select_account consent",
+        scope: [GOOGLE_DRIVE_SCOPE],
+        state,
+        code_challenge: codeChallenge,
+        code_challenge_method: "S256",
+    };
+}
+export async function readOAuthClientConfig(path, bundled = BUNDLED_GOOGLE_OAUTH_CLIENT) {
+    if (!path) {
+        if (bundled.clientId.endsWith(".apps.googleusercontent.com") &&
+            !bundled.clientId.startsWith("__") &&
+            bundled.clientSecret.length > 0 &&
+            !bundled.clientSecret.startsWith("__") &&
+            bundled.redirectUris.length > 0) {
+            return bundled;
+        }
+        throw new BrainHubError("AUTH_REQUIRED", "Official Google OAuth client is missing from this build; source builds must configure BRAINHUB_GOOGLE_OAUTH_CLIENT_FILE");
+    }
+    try {
+        return parseOAuthClientConfig(JSON.parse(await readFile(path, "utf8")));
+    }
+    catch (error) {
+        if (error instanceof BrainHubError)
+            throw error;
+        throw new BrainHubError("AUTH_REQUIRED", "Unable to read a valid Google OAuth client file");
+    }
+}
+export async function revokeGoogleCredential(serialized, fetcher = fetch) {
+    let credentials;
+    try {
+        credentials = JSON.parse(serialized);
+    }
+    catch {
+        return false;
+    }
+    const token = typeof credentials.refresh_token === "string"
+        ? credentials.refresh_token
+        : typeof credentials.access_token === "string"
+            ? credentials.access_token
+            : null;
+    if (!token)
+        return false;
+    const response = await fetcher("https://oauth2.googleapis.com/revoke", {
+        method: "POST",
+        headers: { "content-type": "application/x-www-form-urlencoded" },
+        body: new URLSearchParams({ token }),
+    });
+    if (!response.ok) {
+        throw new Error(`Google OAuth revocation failed with ${response.status}`);
+    }
+    return true;
+}
+export class GoogleOAuth {
+    clientFile;
+    secrets;
+    #createClient;
+    #startLoopback;
+    constructor(clientFile, secrets, dependencies = {}) {
+        this.clientFile = clientFile;
+        this.secrets = secrets;
+        this.#createClient =
+            dependencies.createClient ??
+                ((clientId, clientSecret, redirectUri) => new google.auth.OAuth2(clientId, clientSecret, redirectUri));
+        this.#startLoopback = dependencies.startLoopback ?? startOAuthLoopback;
+    }
+    async getClient(options) {
+        const config = await readOAuthClientConfig(this.clientFile);
+        const stored = await this.secrets.get();
+        if (!stored) {
+            if (!options.interactive) {
+                throw new BrainHubError("AUTH_REQUIRED", "Google Drive authentication is required");
+            }
+            const staged = await this.#authorizeInteractive(config, null);
+            await staged.commit();
+            return staged.client;
+        }
+        const client = this.#createClient(config.clientId, config.clientSecret);
+        try {
+            const credentials = JSON.parse(stored);
+            if (!credentials.refresh_token)
+                throw new Error("refresh token missing");
+            client.setCredentials(credentials);
+            this.#persistNewTokens(client, credentials);
+            await client.getAccessToken();
+            return client;
+        }
+        catch {
+            if (!options.interactive) {
+                throw new BrainHubError("AUTH_REQUIRED", "Stored Google authentication is invalid");
+            }
+            const staged = await this.#authorizeInteractive(config, stored);
+            await staged.commit();
+            return staged.client;
+        }
+    }
+    #persistNewTokens(client, base) {
+        client.on("tokens", (tokens) => {
+            void this.secrets
+                .set(JSON.stringify({ ...base, ...tokens }))
+                .catch(() => undefined);
+        });
+    }
+    async beginInteractiveAuthorization() {
+        const config = await readOAuthClientConfig(this.clientFile);
+        const previousCredential = await this.secrets.get();
+        return this.#authorizeInteractive(config, previousCredential);
+    }
+    async #authorizeInteractive(config, previousCredential) {
+        const state = randomBytes(24).toString("hex");
+        const loopback = await this.#startLoopback(state);
+        const client = this.#createClient(config.clientId, config.clientSecret, loopback.redirectUri);
+        try {
+            const { codeVerifier, codeChallenge } = await client.generateCodeVerifierAsync();
+            if (!codeChallenge)
+                throw new Error("Unable to generate PKCE challenge");
+            const authorizationUrl = client.generateAuthUrl(googleAuthorizationOptions(state, codeChallenge));
+            const code = await loopback.authorize(authorizationUrl);
+            const { tokens } = await client.getToken({ code, codeVerifier });
+            if (!tokens.refresh_token)
+                throw new Error("Google did not return a refresh token");
+            client.setCredentials(tokens);
+            let pending = tokens;
+            let active = true;
+            let committed = false;
+            let commitAttempted = false;
+            client.on("tokens", (newTokens) => {
+                pending = { ...pending, ...newTokens };
+                if (active && committed) {
+                    void this.secrets.set(JSON.stringify(pending)).catch(() => undefined);
+                }
+            });
+            return {
+                client,
+                commit: async () => {
+                    if (!active)
+                        throw new Error("OAuth authorization was rolled back");
+                    if (committed)
+                        return;
+                    commitAttempted = true;
+                    const serialized = JSON.stringify(pending);
+                    await this.secrets.set(serialized);
+                    committed = true;
+                    const latest = JSON.stringify(pending);
+                    if (latest !== serialized)
+                        await this.secrets.set(latest);
+                },
+                rollback: async () => {
+                    if (!active)
+                        return;
+                    active = false;
+                    if (!commitAttempted && !committed)
+                        return;
+                    if (previousCredential)
+                        await this.secrets.set(previousCredential);
+                    else
+                        await this.secrets.delete();
+                },
+            };
+        }
+        finally {
+            await loopback.close();
+        }
+    }
+}
+//# sourceMappingURL=google-oauth.js.map

package/dist/auth/google-oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-oauth.js","sourceRoot":"","sources":["../../src/auth/google-oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEpC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EACL,kBAAkB,GAEnB,MAAM,qBAAqB,CAAC;AAG7B,MAAM,CAAC,MAAM,kBAAkB,GAAG,uCAAuC,CAAC;AA6B1E,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,MAAM,IAAI,GACR,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAChC,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CACR,CAAC;IACtC,MAAM,QAAQ,GAAG,SAAS,EAAE,SAAS,CAAC;IACtC,MAAM,YAAY,GAAG,SAAS,EAAE,aAAa,CAAC;IAC9C,MAAM,YAAY,GAAG,SAAS,EAAE,aAAa,CAAC;IAC9C,IACE,OAAO,QAAQ,KAAK,QAAQ;QAC5B,OAAO,YAAY,KAAK,QAAQ;QAChC,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;QAC5B,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,EACrD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,KAAa,EACb,aAAqB;IAErB,OAAO;QACL,WAAW,EAAE,SAAS;QACtB,MAAM,EAAE,wBAAwB;QAChC,KAAK,EAAE,CAAC,kBAAkB,CAAC;QAC3B,KAAK;QACL,cAAc,EAAE,aAAa;QAC7B,qBAAqB,EAAE,MAEtB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAY,EACZ,UAA6B,2BAA2B;IAExD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IACE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,6BAA6B,CAAC;YACxD,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;YAClC,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YAC/B,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC;YACtC,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAC/B,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,IAAI,aAAa,CACrB,eAAe,EACf,yHAAyH,CAC1H,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,OAAO,sBAAsB,CAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CACpD,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,aAAa;YAAE,MAAM,KAAK,CAAC;QAChD,MAAM,IAAI,aAAa,CACrB,eAAe,EACf,iDAAiD,CAClD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,UAAkB,EAClB,UAAwB,KAAK;IAE7B,IAAI,WAAgE,CAAC;IACrE,IAAI,CAAC;QACH,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAuB,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GACT,OAAO,WAAW,CAAC,aAAa,KAAK,QAAQ;QAC3C,CAAC,CAAC,WAAW,CAAC,aAAa;QAC3B,CAAC,CAAC,OAAO,WAAW,CAAC,YAAY,KAAK,QAAQ;YAC5C,CAAC,CAAC,WAAW,CAAC,YAAY;YAC1B,CAAC,CAAC,IAAI,CAAC;IACb,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,sCAAsC,EAAE;QACrE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC;KACrC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,uCAAuC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,OAAO,WAAW;IAOX;IACA;IAPF,aAAa,CAAuD;IACpE,cAAc,CAErB;IAEF,YACW,UAAkB,EAClB,OAAoB,EAC7B,eAAwC,EAAE;QAFjC,eAAU,GAAV,UAAU,CAAQ;QAClB,YAAO,GAAP,OAAO,CAAa;QAG7B,IAAI,CAAC,aAAa;YAChB,YAAY,CAAC,YAAY;gBACzB,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,EAAE,CACvC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,cAAc,GAAG,YAAY,CAAC,aAAa,IAAI,kBAAkB,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAEf;QACC,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACxC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;gBACzB,MAAM,IAAI,aAAa,CACrB,eAAe,EACf,yCAAyC,CAC1C,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC9D,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,OAAO,MAAM,CAAC,MAAM,CAAC;QACvB,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QACxE,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAsB,CAAC;YAC5D,IAAI,CAAC,WAAW,CAAC,aAAa;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YACzE,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;YACnC,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAC5C,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC;YAC9B,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;gBACzB,MAAM,IAAI,aAAa,CACrB,eAAe,EACf,yCAAyC,CAC1C,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAChE,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,OAAO,MAAM,CAAC,MAAM,CAAC;QACvB,CAAC;IACH,CAAC;IAED,iBAAiB,CAAC,MAAyB,EAAE,IAAuB;QAClE,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE;YAC7B,KAAK,IAAI,CAAC,OAAO;iBACd,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;iBAC3C,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,6BAA6B;QACjC,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5D,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACpD,OAAO,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,MAAyB,EACzB,kBAAiC;QAEjC,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAC/B,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,YAAY,EACnB,QAAQ,CAAC,WAAW,CACrB,CAAC;QACF,IAAI,CAAC;YACH,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,GACnC,MAAM,MAAM,CAAC,yBAAyB,EAAE,CAAC;YAC3C,IAAI,CAAC,aAAa;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACzE,MAAM,gBAAgB,GAAG,MAAM,CAAC,eAAe,CAC7C,0BAA0B,CAAC,KAAK,EAAE,aAAa,CAAC,CACjD,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;YACxD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,MAAM,CAAC,aAAa;gBACvB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAC9B,IAAI,OAAO,GAAsB,MAAM,CAAC;YACxC,IAAI,MAAM,GAAG,IAAI,CAAC;YAClB,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,IAAI,eAAe,GAAG,KAAK,CAAC;YAC5B,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,EAAE;gBAChC,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC;gBACvC,IAAI,MAAM,IAAI,SAAS,EAAE,CAAC;oBACxB,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACxE,CAAC;YACH,CAAC,CAAC,CAAC;YACH,OAAO;gBACL,MAAM;gBACN,MAAM,EAAE,KAAK,IAAI,EAAE;oBACjB,IAAI,CAAC,MAAM;wBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;oBACpE,IAAI,SAAS;wBAAE,OAAO;oBACtB,eAAe,GAAG,IAAI,CAAC;oBACvB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;oBAC3C,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBACnC,SAAS,GAAG,IAAI,CAAC;oBACjB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;oBACvC,IAAI,MAAM,KAAK,UAAU;wBAAE,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC5D,CAAC;gBACD,QAAQ,EAAE,KAAK,IAAI,EAAE;oBACnB,IAAI,CAAC,MAAM;wBAAE,OAAO;oBACpB,MAAM,GAAG,KAAK,CAAC;oBACf,IAAI,CAAC,eAAe,IAAI,CAAC,SAAS;wBAAE,OAAO;oBAC3C,IAAI,kBAAkB;wBAAE,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;;wBAC9D,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnC,CAAC;aACF,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;CACF"}

package/dist/auth/oauth-loopback.d.ts

@@ -0,0 +1,10 @@
+export interface OAuthLoopbackSession {
+    redirectUri: string;
+    authorize(authorizationUrl: string): Promise<string>;
+    close(): Promise<void>;
+}
+export interface OAuthLoopbackOptions {
+    openUrl?: (url: string) => Promise<unknown>;
+    timeoutMs?: number;
+}
+export declare function startOAuthLoopback(state: string, options?: OAuthLoopbackOptions): Promise<OAuthLoopbackSession>;