brainhub-mcp 0.1.0

package/dist/auth/oauth-loopback.js

@@ -0,0 +1,81 @@
+import { createServer } from "node:http";
+import open from "open";
+export async function startOAuthLoopback(state, options = {}) {
+    let resolveCode = () => undefined;
+    let rejectCode = () => undefined;
+    let settled = false;
+    const codePromise = new Promise((resolve, reject) => {
+        resolveCode = resolve;
+        rejectCode = reject;
+    });
+    const settleError = (error) => {
+        if (settled)
+            return;
+        settled = true;
+        rejectCode(error);
+    };
+    const server = createServer((request, response) => {
+        const url = new URL(request.url ?? "/", "http://127.0.0.1");
+        if (url.pathname !== "/oauth/callback" ||
+            url.searchParams.get("state") !== state) {
+            response.writeHead(400, { "content-type": "text/plain; charset=utf-8" });
+            response.end("BrainHub authorization failed. You can close this window.");
+            settleError(new Error("OAuth callback validation failed"));
+            return;
+        }
+        if (url.searchParams.has("error")) {
+            response.writeHead(400, { "content-type": "text/plain; charset=utf-8" });
+            response.end("BrainHub authorization was cancelled. You can close this window.");
+            settleError(new Error("OAuth authorization was cancelled"));
+            return;
+        }
+        const code = url.searchParams.get("code");
+        if (!code) {
+            response.writeHead(400, { "content-type": "text/plain; charset=utf-8" });
+            response.end("BrainHub authorization failed. You can close this window.");
+            settleError(new Error("OAuth callback validation failed"));
+            return;
+        }
+        response.writeHead(200, { "content-type": "text/plain; charset=utf-8" });
+        response.end("BrainHub authorization completed. You can close this window.");
+        if (!settled) {
+            settled = true;
+            resolveCode(code);
+        }
+    });
+    await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(0, "127.0.0.1", () => resolve());
+    });
+    const address = server.address();
+    if (!address || typeof address === "string") {
+        server.close();
+        throw new Error("Unable to open OAuth callback server");
+    }
+    const redirectUri = `http://127.0.0.1:${address.port}/oauth/callback`;
+    let timeout;
+    return {
+        redirectUri,
+        async authorize(authorizationUrl) {
+            await (options.openUrl ?? open)(authorizationUrl);
+            timeout = setTimeout(() => settleError(new Error("OAuth callback timed out")), options.timeoutMs ?? 5 * 60_000);
+            try {
+                return await codePromise;
+            }
+            finally {
+                clearTimeout(timeout);
+                timeout = undefined;
+            }
+        },
+        async close() {
+            if (timeout)
+                clearTimeout(timeout);
+            if (!server.listening)
+                return;
+            await new Promise((resolve, reject) => {
+                server.close((error) => (error ? reject(error) : resolve()));
+            });
+        },
+    };
+}
+//# sourceMappingURL=oauth-loopback.js.map

package/dist/auth/oauth-loopback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-loopback.js","sourceRoot":"","sources":["../../src/auth/oauth-loopback.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,IAAI,MAAM,MAAM,CAAC;AAaxB,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAa,EACb,UAAgC,EAAE;IAElC,IAAI,WAAW,GAA2B,GAAG,EAAE,CAAC,SAAS,CAAC;IAC1D,IAAI,UAAU,GAA2B,GAAG,EAAE,CAAC,SAAS,CAAC;IACzD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,WAAW,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1D,WAAW,GAAG,OAAO,CAAC;QACtB,UAAU,GAAG,MAAM,CAAC;IACtB,CAAC,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,CAAC,KAAY,EAAQ,EAAE;QACzC,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,UAAU,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAChD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAC5D,IACE,GAAG,CAAC,QAAQ,KAAK,iBAAiB;YAClC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,EACvC,CAAC;YACD,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACzE,QAAQ,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;YAC1E,WAAW,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACzE,QAAQ,CAAC,GAAG,CACV,kEAAkE,CACnE,CAAC;YACF,WAAW,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACzE,QAAQ,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;YAC1E,WAAW,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC;QACzE,QAAQ,CAAC,GAAG,CACV,8DAA8D,CAC/D,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,IAAI,CAAC;YACf,WAAW,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,WAAW,GAAG,oBAAoB,OAAO,CAAC,IAAI,iBAAiB,CAAC;IACtE,IAAI,OAAmC,CAAC;IACxC,OAAO;QACL,WAAW;QACX,KAAK,CAAC,SAAS,CAAC,gBAAwB;YACtC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,gBAAgB,CAAC,CAAC;YAClD,OAAO,GAAG,UAAU,CAClB,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,EACxD,OAAO,CAAC,SAAS,IAAI,CAAC,GAAG,MAAM,CAChC,CAAC;YACF,IAAI,CAAC;gBACH,OAAO,MAAM,WAAW,CAAC;YAC3B,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,OAAO,GAAG,SAAS,CAAC;YACtB,CAAC;QACH,CAAC;QACD,KAAK,CAAC,KAAK;YACT,IAAI,OAAO;gBAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,SAAS;gBAAE,OAAO;YAC9B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC/D,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/auth/official-oauth-client.d.ts

@@ -0,0 +1,5 @@
+export declare const BUNDLED_GOOGLE_OAUTH_CLIENT: {
+    clientId: string;
+    clientSecret: string;
+    redirectUris: string[];
+};

package/dist/auth/official-oauth-client.js

@@ -0,0 +1,6 @@
+export const BUNDLED_GOOGLE_OAUTH_CLIENT = {
+    clientId: "149056240470-pklabt8ej6pn91vl80vuhjbv471sao44.apps.googleusercontent.com",
+    clientSecret: "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",
+    redirectUris: ["http://127.0.0.1"],
+};
+//# sourceMappingURL=official-oauth-client.js.map

package/dist/auth/official-oauth-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"official-oauth-client.js","sourceRoot":"","sources":["../../src/auth/official-oauth-client.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,QAAQ,EAAE,qCAAqC;IAC/C,YAAY,EAAE,yCAAyC;IACvD,YAAY,EAAE,CAAC,kBAAkB,CAAC;CACnC,CAAC"}

package/dist/auth/platform-secrets.d.ts

@@ -0,0 +1,14 @@
+import type { SecretStore } from "./secret-store.js";
+export type CommandRunner = (command: string, args: string[], input?: string) => Promise<string>;
+export declare class PlatformSecretStore implements SecretStore {
+    #private;
+    constructor(options: {
+        platform?: NodeJS.Platform;
+        service?: string;
+        account: string;
+        runner?: CommandRunner;
+    });
+    get(): Promise<string | null>;
+    set(value: string): Promise<void>;
+    delete(): Promise<void>;
+}

package/dist/auth/platform-secrets.js

@@ -0,0 +1,81 @@
+import { spawn } from "node:child_process";
+import { BrainHubError } from "../domain/errors.js";
+const defaultRunner = async (command, args, input) => new Promise((resolve, reject) => {
+    const child = spawn(command, args, { stdio: ["pipe", "pipe", "pipe"] });
+    const stdout = [];
+    const stderr = [];
+    child.stdout.on("data", (chunk) => stdout.push(chunk));
+    child.stderr.on("data", (chunk) => stderr.push(chunk));
+    child.on("error", reject);
+    child.on("close", (code) => {
+        if (code === 0)
+            resolve(Buffer.concat(stdout).toString("utf8"));
+        else {
+            const error = new Error(`${command} exited with ${code}: ${Buffer.concat(stderr).toString("utf8").trim()}`);
+            error.exitCode = code;
+            reject(error);
+        }
+    });
+    child.stdin.end(input);
+});
+export class PlatformSecretStore {
+    #platform;
+    #service;
+    #account;
+    #runner;
+    constructor(options) {
+        this.#platform = options.platform ?? process.platform;
+        this.#service = options.service ?? "brainhub-mcp-google-oauth";
+        this.#account = options.account;
+        this.#runner = options.runner ?? defaultRunner;
+        if (this.#platform !== "darwin") {
+            throw new BrainHubError("PLATFORM_UNSUPPORTED", "BrainHub MCP v1 supports macOS only");
+        }
+    }
+    async get() {
+        try {
+            const output = await this.#runner("security", [
+                "find-generic-password",
+                "-s",
+                this.#service,
+                "-a",
+                this.#account,
+                "-w",
+            ]);
+            return output.trim() || null;
+        }
+        catch {
+            return null;
+        }
+    }
+    async set(value) {
+        await this.#runner("security", [
+            "add-generic-password",
+            "-U",
+            "-s",
+            this.#service,
+            "-a",
+            this.#account,
+            "-w",
+            value,
+        ]);
+    }
+    async delete() {
+        try {
+            await this.#runner("security", [
+                "delete-generic-password",
+                "-s",
+                this.#service,
+                "-a",
+                this.#account,
+            ]);
+        }
+        catch (error) {
+            const exitCode = error.exitCode;
+            if (exitCode === 44)
+                return;
+            throw error;
+        }
+    }
+}
+//# sourceMappingURL=platform-secrets.js.map

package/dist/auth/platform-secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-secrets.js","sourceRoot":"","sources":["../../src/auth/platform-secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AASpD,MAAM,aAAa,GAAkB,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAClE,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACxE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;QACzB,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;aAC3D,CAAC;YACJ,MAAM,KAAK,GAAG,IAAI,KAAK,CACrB,GAAG,OAAO,gBAAgB,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAC5C,CAAC;YACzC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;YACtB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC;IACH,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC,CAAC,CAAC;AAEL,MAAM,OAAO,mBAAmB;IACrB,SAAS,CAAkB;IAC3B,QAAQ,CAAS;IACjB,QAAQ,CAAS;IACjB,OAAO,CAAgB;IAEhC,YAAY,OAKX;QACC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;QACtD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,IAAI,2BAA2B,CAAC;QAC/D,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC;QAC/C,IAAI,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,IAAI,aAAa,CACrB,sBAAsB,EACtB,qCAAqC,CACtC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG;QACP,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE;gBAC5C,uBAAuB;gBACvB,IAAI;gBACJ,IAAI,CAAC,QAAQ;gBACb,IAAI;gBACJ,IAAI,CAAC,QAAQ;gBACb,IAAI;aACL,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAa;QACrB,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE;YAC7B,sBAAsB;YACtB,IAAI;YACJ,IAAI;YACJ,IAAI,CAAC,QAAQ;YACb,IAAI;YACJ,IAAI,CAAC,QAAQ;YACb,IAAI;YACJ,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE;gBAC7B,yBAAyB;gBACzB,IAAI;gBACJ,IAAI,CAAC,QAAQ;gBACb,IAAI;gBACJ,IAAI,CAAC,QAAQ;aACd,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAI,KAAgC,CAAC,QAAQ,CAAC;YAC5D,IAAI,QAAQ,KAAK,EAAE;gBAAE,OAAO;YAC5B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/dist/auth/secret-store-factory.d.ts

@@ -0,0 +1,11 @@
+import { type CommandRunner } from "./platform-secrets.js";
+import { type SecretStore } from "./secret-store.js";
+export interface ConfigSecretStoreOptions {
+    platform: NodeJS.Platform;
+    configFile: string;
+    legacyAccount: string;
+    runner?: CommandRunner;
+}
+export type ConfigSecretStoreFactory = (options: ConfigSecretStoreOptions) => SecretStore;
+export declare function credentialStoreAccount(configFile: string): string;
+export declare function createConfigSecretStore(options: ConfigSecretStoreOptions): SecretStore;

package/dist/auth/secret-store-factory.js

@@ -0,0 +1,37 @@
+import { createHash } from "node:crypto";
+import { resolve } from "node:path";
+import { PlatformSecretStore } from "./platform-secrets.js";
+import { MigratingSecretStore } from "./secret-store.js";
+export function credentialStoreAccount(configFile) {
+    const digest = createHash("sha256")
+        .update(resolve(configFile))
+        .digest("hex")
+        .slice(0, 32);
+    return `config-${digest}`;
+}
+export function createConfigSecretStore(options) {
+    const common = {
+        platform: options.platform,
+        ...(options.runner ? { runner: options.runner } : {}),
+    };
+    const account = credentialStoreAccount(options.configFile);
+    const primary = new PlatformSecretStore({
+        ...common,
+        account,
+    });
+    const legacyAccount = new PlatformSecretStore({
+        ...common,
+        account: options.legacyAccount,
+    });
+    const renamedService = new MigratingSecretStore(new PlatformSecretStore({
+        ...common,
+        service: "brain-mcp-google-oauth",
+        account,
+    }), new PlatformSecretStore({
+        ...common,
+        service: "brain-mcp-google-oauth",
+        account: options.legacyAccount,
+    }));
+    return new MigratingSecretStore(primary, new MigratingSecretStore(legacyAccount, renamedService));
+}
+//# sourceMappingURL=secret-store-factory.js.map

package/dist/auth/secret-store-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-store-factory.js","sourceRoot":"","sources":["../../src/auth/secret-store-factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,mBAAmB,EAAsB,MAAM,uBAAuB,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAoB,MAAM,mBAAmB,CAAC;AAa3E,MAAM,UAAU,sBAAsB,CAAC,UAAkB;IACvD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;SAChC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;SAC3B,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,OAAO,UAAU,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAAiC;IAEjC,MAAM,MAAM,GAAG;QACb,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC;IACF,MAAM,OAAO,GAAG,sBAAsB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC;QACtC,GAAG,MAAM;QACT,OAAO;KACR,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC;QAC5C,GAAG,MAAM;QACT,OAAO,EAAE,OAAO,CAAC,aAAa;KAC/B,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,IAAI,oBAAoB,CAC7C,IAAI,mBAAmB,CAAC;QACtB,GAAG,MAAM;QACT,OAAO,EAAE,wBAAwB;QACjC,OAAO;KACR,CAAC,EACF,IAAI,mBAAmB,CAAC;QACtB,GAAG,MAAM;QACT,OAAO,EAAE,wBAAwB;QACjC,OAAO,EAAE,OAAO,CAAC,aAAa;KAC/B,CAAC,CACH,CAAC;IACF,OAAO,IAAI,oBAAoB,CAC7B,OAAO,EACP,IAAI,oBAAoB,CAAC,aAAa,EAAE,cAAc,CAAC,CACxD,CAAC;AACJ,CAAC"}

package/dist/auth/secret-store.d.ts

@@ -0,0 +1,13 @@
+export interface SecretStore {
+    get(): Promise<string | null>;
+    set(value: string): Promise<void>;
+    delete(): Promise<void>;
+}
+export declare class MigratingSecretStore implements SecretStore {
+    readonly primary: SecretStore;
+    readonly legacy: SecretStore;
+    constructor(primary: SecretStore, legacy: SecretStore);
+    get(): Promise<string | null>;
+    set(value: string): Promise<void>;
+    delete(): Promise<void>;
+}

package/dist/auth/secret-store.js

@@ -0,0 +1,40 @@
+export class MigratingSecretStore {
+    primary;
+    legacy;
+    constructor(primary, legacy) {
+        this.primary = primary;
+        this.legacy = legacy;
+    }
+    async get() {
+        const current = await this.primary.get();
+        if (current)
+            return current;
+        const legacy = await this.legacy.get();
+        if (!legacy)
+            return null;
+        await this.primary.set(legacy);
+        await this.legacy.delete();
+        return legacy;
+    }
+    async set(value) {
+        await this.primary.set(value);
+    }
+    async delete() {
+        const previous = await this.primary.get();
+        await this.primary.delete();
+        try {
+            await this.legacy.delete();
+        }
+        catch (error) {
+            try {
+                if (previous !== null)
+                    await this.primary.set(previous);
+            }
+            catch (restoreError) {
+                throw new AggregateError([error, restoreError], "Legacy credential deletion and primary credential restore both failed", { cause: restoreError });
+            }
+            throw error;
+        }
+    }
+}
+//# sourceMappingURL=secret-store.js.map

package/dist/auth/secret-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-store.js","sourceRoot":"","sources":["../../src/auth/secret-store.ts"],"names":[],"mappings":"AAMA,MAAM,OAAO,oBAAoB;IAEpB;IACA;IAFX,YACW,OAAoB,EACpB,MAAmB;QADnB,YAAO,GAAP,OAAO,CAAa;QACpB,WAAM,GAAN,MAAM,CAAa;IAC3B,CAAC;IAEJ,KAAK,CAAC,GAAG;QACP,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACzC,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACvC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC3B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAa;QACrB,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,MAAM;QACV,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1C,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,IAAI,QAAQ,KAAK,IAAI;oBAAE,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1D,CAAC;YAAC,OAAO,YAAY,EAAE,CAAC;gBACtB,MAAM,IAAI,cAAc,CACtB,CAAC,KAAK,EAAE,YAAY,CAAC,EACrB,uEAAuE,EACvE,EAAE,KAAK,EAAE,YAAY,EAAE,CACxB,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/dist/capture/images.d.ts

@@ -0,0 +1,11 @@
+import type { NormalizedSession } from "../domain/session.js";
+export interface ImageArtifact {
+    sha256: string;
+    drivePath: string;
+    bytes: Buffer;
+}
+export declare function embeddedImageKey(data: string): string;
+export declare function processSessionImages(session: NormalizedSession): Promise<{
+    artifacts: ImageArtifact[];
+    references: Map<string, string>;
+}>;

package/dist/capture/images.js

@@ -0,0 +1,27 @@
+import { createHash } from "node:crypto";
+import sharp from "sharp";
+export function embeddedImageKey(data) {
+    return createHash("sha256").update(Buffer.from(data, "base64")).digest("hex");
+}
+export async function processSessionImages(session) {
+    const artifacts = [];
+    const references = new Map();
+    for (const turn of session.turns) {
+        for (const image of turn.images) {
+            if (image.kind !== "embedded")
+                continue;
+            const sha256 = embeddedImageKey(image.data);
+            if (references.has(sha256))
+                continue;
+            const drivePath = `inbox/_assets/sha256/${sha256.slice(0, 2)}/${sha256}.webp`;
+            const bytes = await sharp(Buffer.from(image.data, "base64"))
+                .rotate()
+                .webp({ quality: 80 })
+                .toBuffer();
+            references.set(sha256, drivePath);
+            artifacts.push({ sha256, drivePath, bytes });
+        }
+    }
+    return { artifacts, references };
+}
+//# sourceMappingURL=images.js.map

package/dist/capture/images.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"images.js","sourceRoot":"","sources":["../../src/capture/images.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,KAAK,MAAM,OAAO,CAAC;AAU1B,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAA0B;IAK1B,MAAM,SAAS,GAAoB,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACjC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;gBAAE,SAAS;YACxC,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,SAAS;YACrC,MAAM,SAAS,GAAG,wBAAwB,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,OAAO,CAAC;YAC9E,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;iBACzD,MAAM,EAAE;iBACR,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;iBACrB,QAAQ,EAAE,CAAC;YACd,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAClC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACnC,CAAC"}

package/dist/capture/normalize.d.ts

@@ -0,0 +1,11 @@
+import type { NormalizedSession } from "../domain/session.js";
+export interface RenderOptions {
+    redactionVersion: number;
+    redactionCount: number;
+    imageReferences: Map<string, string>;
+}
+export declare function sessionFilename(session: NormalizedSession): string;
+export declare function renderSessionMarkdown(session: NormalizedSession, options: RenderOptions): {
+    markdown: string;
+    contentSha256: string;
+};

package/dist/capture/normalize.js

@@ -0,0 +1,43 @@
+import { createHash } from "node:crypto";
+import { embeddedImageKey } from "./images.js";
+function renderImage(image, references) {
+    if (image.kind === "remote")
+        return `![](${image.url})`;
+    const path = references.get(embeddedImageKey(image.data));
+    return path ? `![](${path})` : null;
+}
+export function sessionFilename(session) {
+    const date = session.startedAt.slice(0, 10).replaceAll("-", "");
+    const shortId = session.conversationId
+        .replace(/[^A-Za-z0-9]/gu, "")
+        .slice(0, 8);
+    return `${session.source}-${date}-${shortId}.md`;
+}
+export function renderSessionMarkdown(session, options) {
+    const body = session.turns
+        .map((turn) => {
+        const images = turn.images
+            .map((image) => renderImage(image, options.imageReferences))
+            .filter((value) => Boolean(value));
+        const content = [turn.text, ...images].filter(Boolean).join("\n\n");
+        return `## ${turn.role === "user" ? "User" : "Assistant"}\n${content}`;
+    })
+        .join("\n\n");
+    const canonical = [
+        `source: ${session.source}`,
+        `conversation_id: ${session.conversationId}`,
+        `device: ${session.device}`,
+        `started_at: ${session.startedAt}`,
+        `updated_at: ${session.updatedAt}`,
+        `turn_count: ${session.turns.length}`,
+        `redaction_version: ${options.redactionVersion}`,
+        `redaction_count: ${options.redactionCount}`,
+        "---",
+        body,
+        "",
+    ].join("\n");
+    const contentSha256 = createHash("sha256").update(canonical).digest("hex");
+    const markdown = `---\n${canonical.replace("---\n", `content_sha256: ${contentSha256}\n---\n`)}`;
+    return { markdown, contentSha256 };
+}
+//# sourceMappingURL=normalize.js.map

package/dist/capture/normalize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.js","sourceRoot":"","sources":["../../src/capture/normalize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAQ/C,SAAS,WAAW,CAClB,KAAe,EACf,UAA+B;IAE/B,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,OAAO,KAAK,CAAC,GAAG,GAAG,CAAC;IACxD,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAA0B;IACxD,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc;SACnC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;SAC7B,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACf,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,IAAI,OAAO,KAAK,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAA0B,EAC1B,OAAsB;IAEtB,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK;SACvB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM;aACvB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;aAC3D,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpE,OAAO,MAAM,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,KAAK,OAAO,EAAE,CAAC;IACzE,CAAC,CAAC;SACD,IAAI,CAAC,MAAM,CAAC,CAAC;IAChB,MAAM,SAAS,GAAG;QAChB,WAAW,OAAO,CAAC,MAAM,EAAE;QAC3B,oBAAoB,OAAO,CAAC,cAAc,EAAE;QAC5C,WAAW,OAAO,CAAC,MAAM,EAAE;QAC3B,eAAe,OAAO,CAAC,SAAS,EAAE;QAClC,eAAe,OAAO,CAAC,SAAS,EAAE;QAClC,eAAe,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE;QACrC,sBAAsB,OAAO,CAAC,gBAAgB,EAAE;QAChD,oBAAoB,OAAO,CAAC,cAAc,EAAE;QAC5C,KAAK;QACL,IAAI;QACJ,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,QAAQ,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,mBAAmB,aAAa,SAAS,CAAC,EAAE,CAAC;IACjG,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;AACrC,CAAC"}

package/dist/capture/redact.d.ts

@@ -0,0 +1,10 @@
+export interface RedactionOptions {
+    internalDomains?: string[];
+    internalCidrs?: string[];
+}
+export interface RedactionResult {
+    text: string;
+    count: number;
+    version: 1;
+}
+export declare function redactText(input: string, options?: RedactionOptions): RedactionResult;

package/dist/capture/redact.js

@@ -0,0 +1,60 @@
+const replacement = "[REDACTED]";
+function escapeRegExp(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
+}
+function ipv4ToInteger(value) {
+    const parts = value.split(".").map(Number);
+    if (parts.length !== 4 ||
+        parts.some((part) => !Number.isInteger(part) || part < 0 || part > 255)) {
+        return null;
+    }
+    return parts.reduce((result, part) => ((result << 8) | part) >>> 0, 0);
+}
+function isInCidr(ip, cidr) {
+    const [networkText, prefixText] = cidr.split("/");
+    const ipValue = ipv4ToInteger(ip);
+    const network = networkText ? ipv4ToInteger(networkText) : null;
+    const prefix = Number(prefixText);
+    if (ipValue === null ||
+        network === null ||
+        !Number.isInteger(prefix) ||
+        prefix < 0 ||
+        prefix > 32) {
+        return false;
+    }
+    const mask = prefix === 0 ? 0 : (0xffffffff << (32 - prefix)) >>> 0;
+    return (ipValue & mask) === (network & mask);
+}
+export function redactText(input, options = {}) {
+    let text = input;
+    let count = 0;
+    const replace = (pattern, replacer) => {
+        text = text.replace(pattern, (...args) => {
+            count += 1;
+            if (typeof replacer === "string")
+                return replacer;
+            return replacer(args[0], ...args.slice(1, -2));
+        });
+    };
+    replace(/-----BEGIN (?:[A-Z0-9]+ )?PRIVATE KEY-----[\s\S]*?-----END (?:[A-Z0-9]+ )?PRIVATE KEY-----/gu, replacement);
+    replace(/(authorization\s*:\s*bearer\s+)[^\s]+/giu, (_match, prefix) => `${prefix}${replacement}`);
+    replace(/((?:"(?:password|passwd|pwd)"|'(?:password|passwd|pwd)'|(?:password|passwd|pwd))\s*[=:]\s*)(["'])([\s\S]*?)\2/giu, (_match, prefix, quote) => `${prefix}${quote}${replacement}${quote}`);
+    replace(/((?:password|passwd|pwd)\s*[=:]\s*)[^\s&;]+/giu, (_match, prefix) => `${prefix}${replacement}`);
+    replace(/((?:access[_-]?token|api[_-]?key|x-amz-signature|x-goog-signature|signature|sig)\s*[=:]\s*)[^\s&;]+/giu, (_match, prefix) => `${prefix}${replacement}`);
+    replace(/(https?:\/\/)[^\s/@:]+:[^\s/@]+@/giu, (_match, scheme) => `${scheme}${replacement}@`);
+    replace(/\bsk-[A-Za-z0-9_-]{20,}\b/gu, replacement);
+    for (const domain of options.internalDomains ?? []) {
+        if (!domain.trim())
+            continue;
+        replace(new RegExp(`\\b(?:[a-z0-9-]+\\.)*${escapeRegExp(domain)}\\b`, "giu"), replacement);
+    }
+    const cidrs = options.internalCidrs ?? [];
+    if (cidrs.length > 0) {
+        replace(/\b(?:\d{1,3}\.){3}\d{1,3}\b/gu, (ip) => cidrs.some((cidr) => isInCidr(ip, cidr)) ? replacement : ip);
+        // The replacement callback is invoked for every IPv4 candidate; compensate public addresses.
+        const candidates = input.match(/\b(?:\d{1,3}\.){3}\d{1,3}\b/gu) ?? [];
+        count -= candidates.filter((ip) => !cidrs.some((cidr) => isInCidr(ip, cidr))).length;
+    }
+    return { text, count, version: 1 };
+}
+//# sourceMappingURL=redact.js.map

package/dist/capture/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/capture/redact.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,GAAG,YAAY,CAAC;AAEjC,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3C,IACE,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,GAAG,CAAC,EACvE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,QAAQ,CAAC,EAAU,EAAE,IAAY;IACxC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAClC,IACE,OAAO,KAAK,IAAI;QAChB,OAAO,KAAK,IAAI;QAChB,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;QACzB,MAAM,GAAG,CAAC;QACV,MAAM,GAAG,EAAE,EACX,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IACpE,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,KAAa,EACb,UAA4B,EAAE;IAE9B,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,OAAO,GAAG,CACd,OAAe,EACf,QAAmE,EACnE,EAAE;QACF,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE;YAClD,KAAK,IAAI,CAAC,CAAC;YACX,IAAI,OAAO,QAAQ,KAAK,QAAQ;gBAAE,OAAO,QAAQ,CAAC;YAClD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAW,EAAE,GAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAc,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO,CACL,8FAA8F,EAC9F,WAAW,CACZ,CAAC;IACF,OAAO,CACL,0CAA0C,EAC1C,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,WAAW,EAAE,CAC9C,CAAC;IACF,OAAO,CACL,kHAAkH,EAClH,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,KAAK,GAAG,WAAW,GAAG,KAAK,EAAE,CACrE,CAAC;IACF,OAAO,CACL,gDAAgD,EAChD,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,WAAW,EAAE,CAC9C,CAAC;IACF,OAAO,CACL,wGAAwG,EACxG,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,WAAW,EAAE,CAC9C,CAAC;IACF,OAAO,CACL,qCAAqC,EACrC,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,WAAW,GAAG,CAC/C,CAAC;IACF,OAAO,CAAC,6BAA6B,EAAE,WAAW,CAAC,CAAC;IAEpD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YAAE,SAAS;QAC7B,OAAO,CACL,IAAI,MAAM,CAAC,wBAAwB,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EACpE,WAAW,CACZ,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;IAC1C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,+BAA+B,EAAE,CAAC,EAAE,EAAE,EAAE,CAC9C,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAC5D,CAAC;QACF,6FAA6F;QAC7F,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,+BAA+B,CAAC,IAAI,EAAE,CAAC;QACtE,KAAK,IAAI,UAAU,CAAC,MAAM,CACxB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAClD,CAAC,MAAM,CAAC;IACX,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AACrC,CAAC"}

package/dist/cli/index.d.ts

@@ -0,0 +1,20 @@
+#!/usr/bin/env node
+import { type drive_v3 } from "googleapis";
+import { GoogleOAuth, type GoogleOAuthClient } from "../auth/google-oauth.js";
+import { type ConfigSecretStoreFactory } from "../auth/secret-store-factory.js";
+import type { SecretStore } from "../auth/secret-store.js";
+import { writeConfig } from "../domain/config-io.js";
+import { type BackfillResult } from "../setup/backfill-service.js";
+export interface CliDependencies {
+    writeOutput?: (value: string) => void;
+    secretStoreFactory?: ConfigSecretStoreFactory;
+    oauthFactory?: (clientFile: string, secrets: SecretStore) => Pick<GoogleOAuth, "beginInteractiveAuthorization" | "getClient">;
+    driveFactory?: (auth: GoogleOAuthClient) => drive_v3.Drive;
+    writeConfig?: typeof writeConfig;
+    runBackfill?: (options: {
+        yes: boolean;
+        json: boolean;
+    }) => Promise<BackfillResult>;
+}
+export declare function isAffirmativeConfirmation(value: string): boolean;
+export declare function runCli(argv?: string[], dependencies?: CliDependencies): Promise<void>;