brains-mcp 1.61.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +95 -0
- package/dist/access/projectShares.d.ts +48 -0
- package/dist/access/projectShares.d.ts.map +1 -0
- package/dist/access/projectShares.js +203 -0
- package/dist/access/projectShares.js.map +1 -0
- package/dist/access/sharedInstructionsNote.d.ts +37 -0
- package/dist/access/sharedInstructionsNote.d.ts.map +1 -0
- package/dist/access/sharedInstructionsNote.js +76 -0
- package/dist/access/sharedInstructionsNote.js.map +1 -0
- package/dist/admin/seedUsers.d.ts +23 -0
- package/dist/admin/seedUsers.d.ts.map +1 -0
- package/dist/admin/seedUsers.js +168 -0
- package/dist/admin/seedUsers.js.map +1 -0
- package/dist/api/openapi.d.ts +2 -0
- package/dist/api/openapi.d.ts.map +1 -0
- package/dist/api/openapi.js +942 -0
- package/dist/api/openapi.js.map +1 -0
- package/dist/auth/clientStore.d.ts +43 -0
- package/dist/auth/clientStore.d.ts.map +1 -0
- package/dist/auth/clientStore.js +168 -0
- package/dist/auth/clientStore.js.map +1 -0
- package/dist/auth/deleteAccount.d.ts +34 -0
- package/dist/auth/deleteAccount.d.ts.map +1 -0
- package/dist/auth/deleteAccount.js +203 -0
- package/dist/auth/deleteAccount.js.map +1 -0
- package/dist/auth/oauth.d.ts +118 -0
- package/dist/auth/oauth.d.ts.map +1 -0
- package/dist/auth/oauth.js +491 -0
- package/dist/auth/oauth.js.map +1 -0
- package/dist/auth/patStore.d.ts +87 -0
- package/dist/auth/patStore.d.ts.map +1 -0
- package/dist/auth/patStore.js +308 -0
- package/dist/auth/patStore.js.map +1 -0
- package/dist/auth/supabase.d.ts +15 -0
- package/dist/auth/supabase.d.ts.map +1 -0
- package/dist/auth/supabase.js +66 -0
- package/dist/auth/supabase.js.map +1 -0
- package/dist/auth/tokenStore.d.ts +73 -0
- package/dist/auth/tokenStore.d.ts.map +1 -0
- package/dist/auth/tokenStore.js +261 -0
- package/dist/auth/tokenStore.js.map +1 -0
- package/dist/backup/drive.d.ts +24 -0
- package/dist/backup/drive.d.ts.map +1 -0
- package/dist/backup/drive.js +70 -0
- package/dist/backup/drive.js.map +1 -0
- package/dist/billing/tierStore.d.ts +59 -0
- package/dist/billing/tierStore.d.ts.map +1 -0
- package/dist/billing/tierStore.js +152 -0
- package/dist/billing/tierStore.js.map +1 -0
- package/dist/digest/activityDigest.d.ts +32 -0
- package/dist/digest/activityDigest.d.ts.map +1 -0
- package/dist/digest/activityDigest.js +299 -0
- package/dist/digest/activityDigest.js.map +1 -0
- package/dist/digest/digestCron.d.ts +40 -0
- package/dist/digest/digestCron.d.ts.map +1 -0
- package/dist/digest/digestCron.js +146 -0
- package/dist/digest/digestCron.js.map +1 -0
- package/dist/digest/digestPreferences.d.ts +25 -0
- package/dist/digest/digestPreferences.d.ts.map +1 -0
- package/dist/digest/digestPreferences.js +79 -0
- package/dist/digest/digestPreferences.js.map +1 -0
- package/dist/digest/emailSender.d.ts +20 -0
- package/dist/digest/emailSender.d.ts.map +1 -0
- package/dist/digest/emailSender.js +35 -0
- package/dist/digest/emailSender.js.map +1 -0
- package/dist/drive/client.d.ts +43 -0
- package/dist/drive/client.d.ts.map +1 -0
- package/dist/drive/client.js +282 -0
- package/dist/drive/client.js.map +1 -0
- package/dist/drive/errors.d.ts +27 -0
- package/dist/drive/errors.d.ts.map +1 -0
- package/dist/drive/errors.js +51 -0
- package/dist/drive/errors.js.map +1 -0
- package/dist/drive/fileCache.d.ts +22 -0
- package/dist/drive/fileCache.d.ts.map +1 -0
- package/dist/drive/fileCache.js +57 -0
- package/dist/drive/fileCache.js.map +1 -0
- package/dist/governance/accessControl.d.ts +87 -0
- package/dist/governance/accessControl.d.ts.map +1 -0
- package/dist/governance/accessControl.js +179 -0
- package/dist/governance/accessControl.js.map +1 -0
- package/dist/html/components.d.ts +8 -0
- package/dist/html/components.d.ts.map +1 -0
- package/dist/html/components.js +19 -0
- package/dist/html/components.js.map +1 -0
- package/dist/html/layout.d.ts +7 -0
- package/dist/html/layout.d.ts.map +1 -0
- package/dist/html/layout.js +24 -0
- package/dist/html/layout.js.map +1 -0
- package/dist/html/metricsUi.d.ts +8 -0
- package/dist/html/metricsUi.d.ts.map +1 -0
- package/dist/html/metricsUi.js +271 -0
- package/dist/html/metricsUi.js.map +1 -0
- package/dist/httpServer.d.ts +19 -0
- package/dist/httpServer.d.ts.map +1 -0
- package/dist/httpServer.js +3913 -0
- package/dist/httpServer.js.map +1 -0
- package/dist/index.d.ts +3 -0
- package/dist/index.d.ts.map +1 -0
- package/dist/index.js +40 -0
- package/dist/index.js.map +1 -0
- package/dist/jobs/asyncJobRegistry.d.ts +30 -0
- package/dist/jobs/asyncJobRegistry.d.ts.map +1 -0
- package/dist/jobs/asyncJobRegistry.js +70 -0
- package/dist/jobs/asyncJobRegistry.js.map +1 -0
- package/dist/observability/metricsQuery.d.ts +41 -0
- package/dist/observability/metricsQuery.d.ts.map +1 -0
- package/dist/observability/metricsQuery.js +106 -0
- package/dist/observability/metricsQuery.js.map +1 -0
- package/dist/observability/relevanceSignal.d.ts +26 -0
- package/dist/observability/relevanceSignal.d.ts.map +1 -0
- package/dist/observability/relevanceSignal.js +95 -0
- package/dist/observability/relevanceSignal.js.map +1 -0
- package/dist/observability/requestEvents.d.ts +31 -0
- package/dist/observability/requestEvents.d.ts.map +1 -0
- package/dist/observability/requestEvents.js +54 -0
- package/dist/observability/requestEvents.js.map +1 -0
- package/dist/observability/slowQueryAlert.d.ts +25 -0
- package/dist/observability/slowQueryAlert.d.ts.map +1 -0
- package/dist/observability/slowQueryAlert.js +67 -0
- package/dist/observability/slowQueryAlert.js.map +1 -0
- package/dist/observability/zeroResultTriage.d.ts +22 -0
- package/dist/observability/zeroResultTriage.d.ts.map +1 -0
- package/dist/observability/zeroResultTriage.js +116 -0
- package/dist/observability/zeroResultTriage.js.map +1 -0
- package/dist/search/embeddings.d.ts +31 -0
- package/dist/search/embeddings.d.ts.map +1 -0
- package/dist/search/embeddings.js +91 -0
- package/dist/search/embeddings.js.map +1 -0
- package/dist/search/fileWatcher.d.ts +28 -0
- package/dist/search/fileWatcher.d.ts.map +1 -0
- package/dist/search/fileWatcher.js +103 -0
- package/dist/search/fileWatcher.js.map +1 -0
- package/dist/search/hotQueryCache.d.ts +31 -0
- package/dist/search/hotQueryCache.d.ts.map +1 -0
- package/dist/search/hotQueryCache.js +103 -0
- package/dist/search/hotQueryCache.js.map +1 -0
- package/dist/search/postgresIndex.d.ts +439 -0
- package/dist/search/postgresIndex.d.ts.map +1 -0
- package/dist/search/postgresIndex.js +1610 -0
- package/dist/search/postgresIndex.js.map +1 -0
- package/dist/search/sqliteIndex.d.ts +66 -0
- package/dist/search/sqliteIndex.d.ts.map +1 -0
- package/dist/search/sqliteIndex.js +342 -0
- package/dist/search/sqliteIndex.js.map +1 -0
- package/dist/server.d.ts +43 -0
- package/dist/server.d.ts.map +1 -0
- package/dist/server.js +532 -0
- package/dist/server.js.map +1 -0
- package/dist/session/bundle.d.ts +53 -0
- package/dist/session/bundle.d.ts.map +1 -0
- package/dist/session/bundle.js +97 -0
- package/dist/session/bundle.js.map +1 -0
- package/dist/storage/client.d.ts +157 -0
- package/dist/storage/client.d.ts.map +1 -0
- package/dist/storage/client.js +825 -0
- package/dist/storage/client.js.map +1 -0
- package/dist/tools/addWebhookPattern.d.ts +15 -0
- package/dist/tools/addWebhookPattern.d.ts.map +1 -0
- package/dist/tools/addWebhookPattern.js +15 -0
- package/dist/tools/addWebhookPattern.js.map +1 -0
- package/dist/tools/appendLog.d.ts +18 -0
- package/dist/tools/appendLog.d.ts.map +1 -0
- package/dist/tools/appendLog.js +18 -0
- package/dist/tools/appendLog.js.map +1 -0
- package/dist/tools/auditIndex.d.ts +15 -0
- package/dist/tools/auditIndex.d.ts.map +1 -0
- package/dist/tools/auditIndex.js +165 -0
- package/dist/tools/auditIndex.js.map +1 -0
- package/dist/tools/batchDeletePages.d.ts +18 -0
- package/dist/tools/batchDeletePages.d.ts.map +1 -0
- package/dist/tools/batchDeletePages.js +143 -0
- package/dist/tools/batchDeletePages.js.map +1 -0
- package/dist/tools/coerce.d.ts +3 -0
- package/dist/tools/coerce.d.ts.map +1 -0
- package/dist/tools/coerce.js +12 -0
- package/dist/tools/coerce.js.map +1 -0
- package/dist/tools/createPage.d.ts +24 -0
- package/dist/tools/createPage.d.ts.map +1 -0
- package/dist/tools/createPage.js +99 -0
- package/dist/tools/createPage.js.map +1 -0
- package/dist/tools/createPages.d.ts +51 -0
- package/dist/tools/createPages.d.ts.map +1 -0
- package/dist/tools/createPages.js +91 -0
- package/dist/tools/createPages.js.map +1 -0
- package/dist/tools/deletePage.d.ts +19 -0
- package/dist/tools/deletePage.d.ts.map +1 -0
- package/dist/tools/deletePage.js +127 -0
- package/dist/tools/deletePage.js.map +1 -0
- package/dist/tools/exportWiki.d.ts +48 -0
- package/dist/tools/exportWiki.d.ts.map +1 -0
- package/dist/tools/exportWiki.js +233 -0
- package/dist/tools/exportWiki.js.map +1 -0
- package/dist/tools/extractLinks.d.ts +14 -0
- package/dist/tools/extractLinks.d.ts.map +1 -0
- package/dist/tools/extractLinks.js +25 -0
- package/dist/tools/extractLinks.js.map +1 -0
- package/dist/tools/generateClaudeInstructions.d.ts +27 -0
- package/dist/tools/generateClaudeInstructions.d.ts.map +1 -0
- package/dist/tools/generateClaudeInstructions.js +263 -0
- package/dist/tools/generateClaudeInstructions.js.map +1 -0
- package/dist/tools/generateGptInstructions.d.ts +27 -0
- package/dist/tools/generateGptInstructions.d.ts.map +1 -0
- package/dist/tools/generateGptInstructions.js +208 -0
- package/dist/tools/generateGptInstructions.js.map +1 -0
- package/dist/tools/getBacklinks.d.ts +12 -0
- package/dist/tools/getBacklinks.d.ts.map +1 -0
- package/dist/tools/getBacklinks.js +13 -0
- package/dist/tools/getBacklinks.js.map +1 -0
- package/dist/tools/getRelated.d.ts +12 -0
- package/dist/tools/getRelated.d.ts.map +1 -0
- package/dist/tools/getRelated.js +13 -0
- package/dist/tools/getRelated.js.map +1 -0
- package/dist/tools/healthCheck.d.ts +5 -0
- package/dist/tools/healthCheck.d.ts.map +1 -0
- package/dist/tools/healthCheck.js +167 -0
- package/dist/tools/healthCheck.js.map +1 -0
- package/dist/tools/importBrainSource.d.ts +36 -0
- package/dist/tools/importBrainSource.d.ts.map +1 -0
- package/dist/tools/importBrainSource.js +314 -0
- package/dist/tools/importBrainSource.js.map +1 -0
- package/dist/tools/importWikiZip.d.ts +60 -0
- package/dist/tools/importWikiZip.d.ts.map +1 -0
- package/dist/tools/importWikiZip.js +379 -0
- package/dist/tools/importWikiZip.js.map +1 -0
- package/dist/tools/initProject.d.ts +34 -0
- package/dist/tools/initProject.d.ts.map +1 -0
- package/dist/tools/initProject.js +443 -0
- package/dist/tools/initProject.js.map +1 -0
- package/dist/tools/instructionContext.d.ts +60 -0
- package/dist/tools/instructionContext.d.ts.map +1 -0
- package/dist/tools/instructionContext.js +210 -0
- package/dist/tools/instructionContext.js.map +1 -0
- package/dist/tools/listArchivedPages.d.ts +17 -0
- package/dist/tools/listArchivedPages.d.ts.map +1 -0
- package/dist/tools/listArchivedPages.js +51 -0
- package/dist/tools/listArchivedPages.js.map +1 -0
- package/dist/tools/listPages.d.ts +28 -0
- package/dist/tools/listPages.d.ts.map +1 -0
- package/dist/tools/listPages.js +166 -0
- package/dist/tools/listPages.js.map +1 -0
- package/dist/tools/listWebhooks.d.ts +7 -0
- package/dist/tools/listWebhooks.d.ts.map +1 -0
- package/dist/tools/listWebhooks.js +10 -0
- package/dist/tools/listWebhooks.js.map +1 -0
- package/dist/tools/movePage.d.ts +18 -0
- package/dist/tools/movePage.d.ts.map +1 -0
- package/dist/tools/movePage.js +182 -0
- package/dist/tools/movePage.js.map +1 -0
- package/dist/tools/pageHistory.d.ts +36 -0
- package/dist/tools/pageHistory.d.ts.map +1 -0
- package/dist/tools/pageHistory.js +60 -0
- package/dist/tools/pageHistory.js.map +1 -0
- package/dist/tools/patchPage.d.ts +141 -0
- package/dist/tools/patchPage.d.ts.map +1 -0
- package/dist/tools/patchPage.js +287 -0
- package/dist/tools/patchPage.js.map +1 -0
- package/dist/tools/pullSessionBundle.d.ts +34 -0
- package/dist/tools/pullSessionBundle.d.ts.map +1 -0
- package/dist/tools/pullSessionBundle.js +432 -0
- package/dist/tools/pullSessionBundle.js.map +1 -0
- package/dist/tools/purgeWiki.d.ts +23 -0
- package/dist/tools/purgeWiki.d.ts.map +1 -0
- package/dist/tools/purgeWiki.js +113 -0
- package/dist/tools/purgeWiki.js.map +1 -0
- package/dist/tools/pushSessionBundle.d.ts +139 -0
- package/dist/tools/pushSessionBundle.d.ts.map +1 -0
- package/dist/tools/pushSessionBundle.js +282 -0
- package/dist/tools/pushSessionBundle.js.map +1 -0
- package/dist/tools/readGovernanceAudit.d.ts +17 -0
- package/dist/tools/readGovernanceAudit.d.ts.map +1 -0
- package/dist/tools/readGovernanceAudit.js +21 -0
- package/dist/tools/readGovernanceAudit.js.map +1 -0
- package/dist/tools/readPage.d.ts +13 -0
- package/dist/tools/readPage.d.ts.map +1 -0
- package/dist/tools/readPage.js +46 -0
- package/dist/tools/readPage.js.map +1 -0
- package/dist/tools/removeWebhook.d.ts +14 -0
- package/dist/tools/removeWebhook.d.ts.map +1 -0
- package/dist/tools/removeWebhook.js +12 -0
- package/dist/tools/removeWebhook.js.map +1 -0
- package/dist/tools/resolveProject.d.ts +58 -0
- package/dist/tools/resolveProject.d.ts.map +1 -0
- package/dist/tools/resolveProject.js +175 -0
- package/dist/tools/resolveProject.js.map +1 -0
- package/dist/tools/restorePage.d.ts +47 -0
- package/dist/tools/restorePage.d.ts.map +1 -0
- package/dist/tools/restorePage.js +111 -0
- package/dist/tools/restorePage.js.map +1 -0
- package/dist/tools/searchPages.d.ts +28 -0
- package/dist/tools/searchPages.d.ts.map +1 -0
- package/dist/tools/searchPages.js +372 -0
- package/dist/tools/searchPages.js.map +1 -0
- package/dist/tools/setWebhook.d.ts +30 -0
- package/dist/tools/setWebhook.d.ts.map +1 -0
- package/dist/tools/setWebhook.js +30 -0
- package/dist/tools/setWebhook.js.map +1 -0
- package/dist/tools/shareProject.d.ts +25 -0
- package/dist/tools/shareProject.d.ts.map +1 -0
- package/dist/tools/shareProject.js +56 -0
- package/dist/tools/shareProject.js.map +1 -0
- package/dist/tools/suggestLinks.d.ts +29 -0
- package/dist/tools/suggestLinks.d.ts.map +1 -0
- package/dist/tools/suggestLinks.js +214 -0
- package/dist/tools/suggestLinks.js.map +1 -0
- package/dist/tools/updatePage.d.ts +27 -0
- package/dist/tools/updatePage.d.ts.map +1 -0
- package/dist/tools/updatePage.js +118 -0
- package/dist/tools/updatePage.js.map +1 -0
- package/dist/webhooks/dispatch.d.ts +49 -0
- package/dist/webhooks/dispatch.d.ts.map +1 -0
- package/dist/webhooks/dispatch.js +159 -0
- package/dist/webhooks/dispatch.js.map +1 -0
- package/dist/webhooks/webhookRules.d.ts +34 -0
- package/dist/webhooks/webhookRules.d.ts.map +1 -0
- package/dist/webhooks/webhookRules.js +129 -0
- package/dist/webhooks/webhookRules.js.map +1 -0
- package/dist/wiki/frontmatter.d.ts +45 -0
- package/dist/wiki/frontmatter.d.ts.map +1 -0
- package/dist/wiki/frontmatter.js +68 -0
- package/dist/wiki/frontmatter.js.map +1 -0
- package/dist/wiki/index.d.ts +22 -0
- package/dist/wiki/index.d.ts.map +1 -0
- package/dist/wiki/index.js +203 -0
- package/dist/wiki/index.js.map +1 -0
- package/dist/wiki/ingestPolicy.d.ts +18 -0
- package/dist/wiki/ingestPolicy.d.ts.map +1 -0
- package/dist/wiki/ingestPolicy.js +64 -0
- package/dist/wiki/ingestPolicy.js.map +1 -0
- package/dist/wiki/layoutLint.d.ts +51 -0
- package/dist/wiki/layoutLint.d.ts.map +1 -0
- package/dist/wiki/layoutLint.js +146 -0
- package/dist/wiki/layoutLint.js.map +1 -0
- package/dist/wiki/links.d.ts +6 -0
- package/dist/wiki/links.d.ts.map +1 -0
- package/dist/wiki/links.js +45 -0
- package/dist/wiki/links.js.map +1 -0
- package/dist/wiki/log.d.ts +58 -0
- package/dist/wiki/log.d.ts.map +1 -0
- package/dist/wiki/log.js +126 -0
- package/dist/wiki/log.js.map +1 -0
- package/dist/wiki/path.d.ts +8 -0
- package/dist/wiki/path.d.ts.map +1 -0
- package/dist/wiki/path.js +25 -0
- package/dist/wiki/path.js.map +1 -0
- package/dist/wiki/storageLimits.d.ts +163 -0
- package/dist/wiki/storageLimits.d.ts.map +1 -0
- package/dist/wiki/storageLimits.js +281 -0
- package/dist/wiki/storageLimits.js.map +1 -0
- package/package.json +81 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"openapi.js","sourceRoot":"","sources":["../../src/api/openapi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,IAAI;SACR,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAC3D,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB;IACvB,MAAM,KAAK,GACT,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE;QACnC,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE;QAC1C,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE;QAChC,EAAE,CAAC;IAEL,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC;IAEvB,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,QAAQ,CAAC;IAClC,OAAO,GAAG,IAAI,GAAG,QAAQ,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;IACvC,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CACpC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACzB,GAAG,IAAI,CAAC,IAAI,OAAO;QACnB,IAAI,CAAC,WAAW;KACjB,CAAC,CACH,CAAC;IAEF,OAAO;QACL,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE;YACJ,KAAK,EAAE,iBAAiB;YACxB,OAAO,EAAE,OAAO;YAChB,WAAW,EACT,kJAAkJ;SACrJ;QACD,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,EAAE,CAAC;QACtC,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC;QACvE,IAAI,EAAE;YACJ,EAAE,IAAI,EAAE,MAAM,EAAE;YAChB,EAAE,IAAI,EAAE,MAAM,EAAE;YAChB,EAAE,IAAI,EAAE,SAAS,EAAE;YACnB,EAAE,IAAI,EAAE,OAAO,EAAE;YACjB,EAAE,IAAI,EAAE,QAAQ,EAAE;YAClB,EAAE,IAAI,EAAE,WAAW,EAAE;SACtB;QACD,KAAK,EAAE;YACL,GAAG,EAAE;gBACH,GAAG,EAAE;oBACH,IAAI,EAAE,CAAC,WAAW,CAAC;oBACnB,OAAO,EAAE,kBAAkB;oBAC3B,QAAQ,EAAE,EAAE;oBACZ,SAAS,EAAE;wBACT,KAAK,EAAE;4BACL,WAAW,EAAE,qBAAqB;yBACnC;qBACF;iBACF;aACF;YACD,eAAe,EAAE;gBACf,GAAG,EAAE;oBACH,IAAI,EAAE,CAAC,WAAW,CAAC;oBACnB,OAAO,EAAE,kBAAkB;oBAC3B,QAAQ,EAAE,EAAE;oBACZ,SAAS,EAAE;wBACT,KAAK,EAAE;4BACL,WAAW,EAAE,cAAc;yBAC5B;qBACF;iBACF;aACF;YACD,SAAS,EAAE;gBACT,GAAG,EAAE;oBACH,IAAI,EAAE,CAAC,WAAW,CAAC;oBACnB,OAAO,EAAE,qBAAqB;oBAC9B,WAAW,EAAE,8KAA8K;oBAC3L,QAAQ,EAAE,EAAE;oBACZ,SAAS,EAAE;wBACT,KAAK,EAAE;4BACL,WAAW,EAAE,cAAc;yBAC5B;qBACF;iBACF;aACF;YACD,yCAAyC,EAAE;gBACzC,GAAG,EAAE;oBACH,IAAI,EAAE,CAAC,WAAW,CAAC;oBACnB,OAAO,EAAE,qCAAqC;oBAC9C,QAAQ,EAAE,EAAE;oBACZ,SAAS,EAAE;wBACT,KAAK,EAAE;4BACL,WAAW,EAAE,iCAAiC;yBAC/C;qBACF;iBACF;aACF;YACD,kBAAkB,EAAE;gBAClB,GAAG,EAAE;oBACH,IAAI,EAAE,CAAC,MAAM,CAAC;oBACd,OAAO,EAAE,8BAA8B;oBACvC,QAAQ,EAAE,EAAE;oBACZ,UAAU,EAAE;wBACV,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE;wBAClG,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;wBAC9E,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;wBAChG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;wBAC3E,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;wBAC3E,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;wBACpF;4BACE,IAAI,EAAE,uBAAuB;4BAC7B,EAAE,EAAE,OAAO;4BACX,QAAQ,EAAE,KAAK;4BACf,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE;yBACpD;qBACF;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE;wBAC1C,KAAK,EAAE,EAAE,WAAW,EAAE,kCAAkC,EAAE;qBAC3D;iBACF;gBACD,IAAI,EAAE;oBACJ,IAAI,EAAE,CAAC,MAAM,CAAC;oBACd,OAAO,EAAE,iCAAiC;oBAC1C,QAAQ,EAAE,EAAE;oBACZ,WAAW,EAAE;wBACX,QAAQ,EAAE,IAAI;wBACd,OAAO,EAAE;4BACP,mCAAmC,EAAE;gCACnC,MAAM,EAAE;oCACN,IAAI,EAAE,QAAQ;oCACd,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,OAAO,CAAC;oCACxE,UAAU,EAAE;wCACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wCAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wCAC5B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wCAC7B,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE;wCAC/C,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wCACzB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wCACzB,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wCAClC,qBAAqB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE;qCACnE;iCACF;6BACF;yBACF;qBACF;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE,EAAE,WAAW,EAAE,kCAAkC,EAAE;wBAC1D,KAAK,EAAE,EAAE,WAAW,EAAE,iBAAiB,EAAE;wBACzC,KAAK,EAAE,EAAE,WAAW,EAAE,0BAA0B,EAAE;qBACnD;iBACF;aACF;YACD,cAAc,EAAE;gBACd,IAAI,EAAE;oBACJ,IAAI,EAAE,CAAC,MAAM,CAAC;oBACd,OAAO,EAAE,sBAAsB;oBAC/B,QAAQ,EAAE,EAAE;oBACZ,WAAW,EAAE;wBACX,QAAQ,EAAE,IAAI;wBACd,OAAO,EAAE;4BACP,mCAAmC,EAAE;gCACnC,MAAM,EAAE;oCACN,IAAI,EAAE,QAAQ;oCACd,QAAQ,EAAE,CAAC,YAAY,CAAC;oCACxB,UAAU,EAAE;wCACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC,EAAE;wCAC7E,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wCACxB,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE;wCAC/C,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wCAC7B,aAAa,EAAE;4CACb,IAAI,EAAE,QAAQ;4CACd,WAAW,EACT,kEAAkE;yCACrE;wCACD,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wCACjC,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qCAClC;iCACF;6BACF;yBACF;qBACF;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE,EAAE,WAAW,EAAE,uBAAuB,EAAE;wBAC/C,KAAK,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE;qBACtC;iBACF;aACF;YACD,gBAAgB,EAAE;gBAChB,GAAG,EAAE;oBACH,IAAI,EAAE,CAAC,QAAQ,CAAC;oBAChB,OAAO,EAAE,cAAc;oBACvB,SAAS,EAAE;wBACT,KAAK,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE;qBACxC;iBACF;aACF;YACD,uBAAuB,EAAE;gBACvB,GAAG,EAAE;oBACH,IAAI,EAAE,CAAC,QAAQ,CAAC;oBAChB,OAAO,EAAE,qBAAqB;oBAC9B,WAAW,EAAE,2GAA2G;oBACxH,SAAS,EAAE;wBACT,KAAK,EAAE;4BACL,WAAW,EAAE,eAAe;4BAC5B,OAAO,EAAE;gCACP,kBAAkB,EAAE;oCAClB,MAAM,EAAE;wCACN,IAAI,EAAE,QAAQ;wCACd,UAAU,EAAE;4CACV,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iCAAiC,EAAE;4CAClF,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,sCAAsC,EAAE;yCACpF;qCACF;iCACF;6BACF;yBACF;qBACF;iBACF;aACF;YACD,iBAAiB,EAAE;gBACjB,GAAG,EAAE;oBACH,IAAI,EAAE,CAAC,QAAQ,CAAC;oBAChB,OAAO,EAAE,2BAA2B;oBACpC,WAAW,EAAE,gGAAgG;oBAC7G,UAAU,EAAE;wBACV;4BACE,IAAI,EAAE,QAAQ;4BACd,EAAE,EAAE,OAAO;4BACX,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE;4BAC1E,WAAW,EAAE,qCAAqC;yBACnD;qBACF;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE;4BACL,WAAW,EAAE,qBAAqB;4BAClC,OAAO,EAAE;gCACP,kBAAkB,EAAE;oCAClB,MAAM,EAAE;wCACN,IAAI,EAAE,QAAQ;wCACd,UAAU,EAAE;4CACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4CAC1B,MAAM,EAAE;gDACN,IAAI,EAAE,QAAQ;gDACd,UAAU,EAAE;oDACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oDACvB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oDACvB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oDACvB,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;oDAClC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oDAC7B,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oDAClC,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;oDAC9E,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;iDACzD;6CACF;4CACD,MAAM,EAAE;gDACN,IAAI,EAAE,QAAQ;gDACd,UAAU,EAAE;oDACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oDACvB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oDACvB,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;iDACnC;6CACF;4CACD,OAAO,EAAE;gDACP,IAAI,EAAE,QAAQ;gDACd,UAAU,EAAE;oDACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oDACvB,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iDAC9B;6CACF;yCACF;qCACF;iCACF;6BACF;yBACF;wBACD,KAAK,EAAE,EAAE,WAAW,EAAE,0BAA0B,EAAE;wBAClD,KAAK,EAAE,EAAE,WAAW,EAAE,mCAAmC,EAAE;qBAC5D;iBACF;aACF;YACD,eAAe,EAAE;gBACf,GAAG,EAAE;oBACH,IAAI,EAAE,CAAC,MAAM,CAAC;oBACd,OAAO,EAAE,YAAY;oBACrB,UAAU,EAAE;wBACV,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;wBACxD,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE;qBACnG;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE;qBACrC;iBACF;gBACD,IAAI,EAAE;oBACJ,IAAI,EAAE,CAAC,MAAM,CAAC;oBACd,OAAO,EAAE,aAAa;oBACtB,WAAW,EAAE;wBACX,QAAQ,EAAE,IAAI;wBACd,OAAO,EAAE;4BACP,kBAAkB,EAAE;gCAClB,MAAM,EAAE,EAAE,IAAI,EAAE,uCAAuC,EAAE;6BAC1D;yBACF;qBACF;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE;qBACxC;iBACF;aACF;YACD,qBAAqB,EAAE;gBACrB,IAAI,EAAE;oBACJ,IAAI,EAAE,CAAC,MAAM,CAAC;oBACd,OAAO,EAAE,oBAAoB;oBAC7B,WAAW,EAAE;wBACX,QAAQ,EAAE,IAAI;wBACd,OAAO,EAAE;4BACP,kBAAkB,EAAE;gCAClB,MAAM,EAAE,EAAE,IAAI,EAAE,wCAAwC,EAAE;6BAC3D;yBACF;qBACF;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE,EAAE,WAAW,EAAE,cAAc,EAAE;qBACvC;iBACF;aACF;YACD,gCAAgC,EAAE;gBAChC,GAAG,EAAE;oBACH,IAAI,EAAE,CAAC,MAAM,CAAC;oBACd,OAAO,EAAE,2BAA2B;oBACpC,UAAU,EAAE;wBACV,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;wBACxE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,2DAA2D,EAAE;qBACvJ;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE,EAAE,WAAW,EAAE,uBAAuB,EAAE;wBAC/C,KAAK,EAAE,EAAE,WAAW,EAAE,iDAAiD,EAAE;qBAC1E;iBACF;aACF;YACD,8BAA8B,EAAE;gBAC9B,GAAG,EAAE;oBACH,IAAI,EAAE,CAAC,MAAM,CAAC;oBACd,OAAO,EAAE,8CAA8C;oBACvD,UAAU,EAAE;wBACV,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;wBACxE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,2DAA2D,EAAE;qBACvJ;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE;wBACvC,KAAK,EAAE,EAAE,WAAW,EAAE,iDAAiD,EAAE;qBAC1E;iBACF;aACF;YACD,cAAc,EAAE;gBACd,GAAG,EAAE;oBACH,IAAI,EAAE,CAAC,MAAM,CAAC;oBACd,OAAO,EAAE,WAAW;oBACpB,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC;oBACvF,SAAS,EAAE;wBACT,KAAK,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE;qBAC/B;iBACF;gBACD,GAAG,EAAE;oBACH,IAAI,EAAE,CAAC,MAAM,CAAC;oBACd,OAAO,EAAE,4BAA4B;oBACrC,WAAW,EAAE;wBACX,QAAQ,EAAE,IAAI;wBACd,OAAO,EAAE;4BACP,kBAAkB,EAAE;gCAClB,MAAM,EAAE,EAAE,IAAI,EAAE,uCAAuC,EAAE;6BAC1D;yBACF;qBACF;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE;qBACxC;iBACF;gBACD,KAAK,EAAE;oBACL,IAAI,EAAE,CAAC,MAAM,CAAC;oBACd,OAAO,EAAE,YAAY;oBACrB,WAAW,EAAE;wBACX,QAAQ,EAAE,IAAI;wBACd,OAAO,EAAE;4BACP,kBAAkB,EAAE;gCAClB,MAAM,EAAE,EAAE,IAAI,EAAE,sCAAsC,EAAE;6BACzD;yBACF;qBACF;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE,EAAE,WAAW,EAAE,cAAc,EAAE;qBACvC;iBACF;aACF;YACD,mBAAmB,EAAE;gBACnB,IAAI,EAAE;oBACJ,IAAI,EAAE,CAAC,MAAM,CAAC;oBACd,OAAO,EAAE,wBAAwB;oBACjC,WAAW,EAAE;wBACX,QAAQ,EAAE,IAAI;wBACd,OAAO,EAAE;4BACP,kBAAkB,EAAE;gCAClB,MAAM,EAAE,EAAE,IAAI,EAAE,qCAAqC,EAAE;6BACxD;yBACF;qBACF;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE;qBACtC;iBACF;aACF;YACD,gBAAgB,EAAE;gBAChB,GAAG,EAAE;oBACH,IAAI,EAAE,CAAC,MAAM,CAAC;oBACd,OAAO,EAAE,cAAc;oBACvB,UAAU,EAAE;wBACV,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;wBAC1E,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;wBACxD,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;wBACnE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;wBAChE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;qBACrE;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE;qBACxC;iBACF;aACF;YACD,cAAc,EAAE;gBACd,IAAI,EAAE;oBACJ,IAAI,EAAE,CAAC,MAAM,CAAC;oBACd,OAAO,EAAE,kBAAkB;oBAC3B,WAAW,EAAE;wBACX,QAAQ,EAAE,IAAI;wBACd,OAAO,EAAE;4BACP,kBAAkB,EAAE;gCAClB,MAAM,EAAE,EAAE,IAAI,EAAE,sCAAsC,EAAE;6BACzD;yBACF;qBACF;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE;qBAC3C;iBACF;aACF;YACD,uBAAuB,EAAE;gBACvB,IAAI,EAAE;oBACJ,IAAI,EAAE,CAAC,MAAM,CAAC;oBACd,OAAO,EAAE,8CAA8C;oBACvD,WAAW,EAAE,sKAAsK;oBACnL,WAAW,EAAE;wBACX,QAAQ,EAAE,IAAI;wBACd,OAAO,EAAE;4BACP,kBAAkB,EAAE;gCAClB,MAAM,EAAE;oCACN,IAAI,EAAE,QAAQ;oCACd,UAAU,EAAE;wCACV,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;wCAClD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wCAC1B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uDAAuD,EAAE;qCACjG;iCACF;6BACF;yBACF;qBACF;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE,EAAE,WAAW,EAAE,oBAAoB,EAAE;wBAC5C,KAAK,EAAE,EAAE,WAAW,EAAE,mCAAmC,EAAE;wBAC3D,KAAK,EAAE,EAAE,WAAW,EAAE,iDAAiD,EAAE;qBAC1E;iBACF;aACF;YACD,uBAAuB,EAAE;gBACvB,IAAI,EAAE;oBACJ,IAAI,EAAE,CAAC,MAAM,CAAC;oBACd,OAAO,EAAE,yEAAyE;oBAClF,WAAW,EAAE,4QAA4Q;oBACzR,WAAW,EAAE;wBACX,QAAQ,EAAE,IAAI;wBACd,OAAO,EAAE;4BACP,kBAAkB,EAAE;gCAClB,MAAM,EAAE;oCACN,IAAI,EAAE,QAAQ;oCACd,UAAU,EAAE;wCACV,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;wCAClD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wCAC1B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0DAA0D,EAAE;qCACtG;iCACF;6BACF;yBACF;qBACF;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE,EAAE,WAAW,EAAE,qCAAqC,EAAE;wBAC7D,KAAK,EAAE,EAAE,WAAW,EAAE,mCAAmC,EAAE;qBAC5D;iBACF;aACF;YACD,gBAAgB,EAAE;gBAChB,IAAI,EAAE;oBACJ,IAAI,EAAE,CAAC,MAAM,CAAC;oBACd,OAAO,EAAE,+BAA+B;oBACxC,WAAW,EAAE;wBACX,QAAQ,EAAE,IAAI;wBACd,OAAO,EAAE;4BACP,kBAAkB,EAAE;gCAClB,MAAM,EAAE,EAAE,IAAI,EAAE,+CAA+C,EAAE;6BAClE;yBACF;qBACF;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE;qBACxC;iBACF;aACF;YACD,gBAAgB,EAAE;gBAChB,IAAI,EAAE;oBACJ,IAAI,EAAE,CAAC,MAAM,CAAC;oBACd,OAAO,EAAE,4BAA4B;oBACrC,WAAW,EAAE;wBACX,QAAQ,EAAE,IAAI;wBACd,OAAO,EAAE;4BACP,kBAAkB,EAAE;gCAClB,MAAM,EAAE,EAAE,IAAI,EAAE,uCAAuC,EAAE;6BAC1D;yBACF;qBACF;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE;qBACxC;iBACF;aACF;YACD,yBAAyB,EAAE;gBACzB,GAAG,EAAE;oBACH,IAAI,EAAE,CAAC,MAAM,CAAC;oBACd,OAAO,EAAE,kCAAkC;oBAC3C,WAAW,EAAE,4KAA4K;oBACzL,UAAU,EAAE;wBACV;4BACE,IAAI,EAAE,QAAQ;4BACd,EAAE,EAAE,OAAO;4BACX,QAAQ,EAAE,KAAK;4BACf,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BAC1B,WAAW,EAAE,wDAAwD;yBACtE;wBACD;4BACE,IAAI,EAAE,MAAM;4BACZ,EAAE,EAAE,OAAO;4BACX,QAAQ,EAAE,KAAK;4BACf,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BAC1B,WAAW,EAAE,uCAAuC;yBACrD;wBACD;4BACE,IAAI,EAAE,eAAe;4BACrB,EAAE,EAAE,OAAO;4BACX,QAAQ,EAAE,KAAK;4BACf,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;4BAC3C,WAAW,EAAE,6DAA6D;yBAC3E;wBACD;4BACE,IAAI,EAAE,OAAO;4BACb,EAAE,EAAE,OAAO;4BACX,QAAQ,EAAE,KAAK;4BACf,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE;4BAC/C,WAAW,EAAE,iFAAiF;yBAC/F;qBACF;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE;4BACL,WAAW,EAAE,kHAAkH;4BAC/H,OAAO,EAAE;gCACP,kBAAkB,EAAE;oCAClB,MAAM,EAAE;wCACN,IAAI,EAAE,QAAQ;wCACd,UAAU,EAAE;4CACV,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;4CACvB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4CACzB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4CAC1B,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4CAC3B,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;yCAChC;qCACF;iCACF;6BACF;yBACF;wBACD,KAAK,EAAE,EAAE,WAAW,EAAE,yBAAyB,EAAE;wBACjD,KAAK,EAAE,EAAE,WAAW,EAAE,mCAAmC,EAAE;qBAC5D;iBACF;aACF;YACD,oBAAoB,EAAE;gBACpB,IAAI,EAAE;oBACJ,IAAI,EAAE,CAAC,MAAM,CAAC;oBACd,OAAO,EAAE,8BAA8B;oBACvC,WAAW,EAAE;wBACX,QAAQ,EAAE,IAAI;wBACd,OAAO,EAAE;4BACP,kBAAkB,EAAE;gCAClB,MAAM,EAAE,EAAE,IAAI,EAAE,uCAAuC,EAAE;6BAC1D;yBACF;qBACF;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE;qBACxC;iBACF;aACF;YACD,2BAA2B,EAAE;gBAC3B,IAAI,EAAE;oBACJ,IAAI,EAAE,CAAC,MAAM,CAAC;oBACd,OAAO,EAAE,qCAAqC;oBAC9C,UAAU,EAAE;wBACV;4BACE,IAAI,EAAE,SAAS;4BACf,EAAE,EAAE,OAAO;4BACX,QAAQ,EAAE,KAAK;4BACf,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE;4BAC1C,WAAW,EAAE,wDAAwD;yBACtE;wBACD;4BACE,IAAI,EAAE,kBAAkB;4BACxB,EAAE,EAAE,OAAO;4BACX,QAAQ,EAAE,KAAK;4BACf,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE;4BAClF,WAAW,EAAE,gDAAgD;yBAC9D;wBACD;4BACE,IAAI,EAAE,eAAe;4BACrB,EAAE,EAAE,OAAO;4BACX,QAAQ,EAAE,KAAK;4BACf,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;4BAC3C,WAAW,EAAE,6DAA6D;yBAC3E;wBACD;4BACE,IAAI,EAAE,MAAM;4BACZ,EAAE,EAAE,OAAO;4BACX,QAAQ,EAAE,KAAK;4BACf,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE;4BAC9E,WAAW,EAAE,sEAAsE;yBACpF;wBACD;4BACE,IAAI,EAAE,WAAW;4BACjB,EAAE,EAAE,OAAO;4BACX,QAAQ,EAAE,KAAK;4BACf,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;4BAC3C,WAAW,EAAE,2FAA2F;yBACzG;qBACF;oBACD,WAAW,EAAE;wBACX,QAAQ,EAAE,IAAI;wBACd,OAAO,EAAE;4BACP,iBAAiB,EAAE;gCACjB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;6BAC7C;yBACF;qBACF;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE;4BACL,WAAW,EAAE,kFAAkF;4BAC/F,OAAO,EAAE;gCACP,kBAAkB,EAAE;oCAClB,MAAM,EAAE;wCACN,IAAI,EAAE,QAAQ;wCACd,UAAU,EAAE;4CACV,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;4CACvB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4CACzB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4CAC1B,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;yCAC5B;qCACF;iCACF;6BACF;yBACF;wBACD,KAAK,EAAE,EAAE,WAAW,EAAE,yBAAyB,EAAE;wBACjD,KAAK,EAAE,EAAE,WAAW,EAAE,mCAAmC,EAAE;wBAC3D,KAAK,EAAE,EAAE,WAAW,EAAE,mBAAmB,EAAE;wBAC3C,KAAK,EAAE,EAAE,WAAW,EAAE,wBAAwB,EAAE;qBACjD;iBACF;aACF;YACD,eAAe,EAAE;gBACf,IAAI,EAAE;oBACJ,IAAI,EAAE,CAAC,MAAM,CAAC;oBACd,OAAO,EAAE,sBAAsB;oBAC/B,WAAW,EAAE;wBACX,QAAQ,EAAE,IAAI;wBACd,OAAO,EAAE;4BACP,kBAAkB,EAAE;gCAClB,MAAM,EAAE,EAAE,IAAI,EAAE,sCAAsC,EAAE;6BACzD;yBACF;qBACF;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE,EAAE,WAAW,EAAE,gCAAgC,EAAE;wBACxD,KAAK,EAAE;4BACL,WAAW,EAAE,4EAA4E;4BACzF,OAAO,EAAE;gCACP,kBAAkB,EAAE;oCAClB,MAAM,EAAE;wCACN,IAAI,EAAE,QAAQ;wCACd,UAAU,EAAE;4CACV,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;4CACvB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4CACzB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4CAC1B,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;yCAC5B;qCACF;iCACF;6BACF;yBACF;qBACF;iBACF;aACF;YACD,sBAAsB,EAAE;gBACtB,GAAG,EAAE;oBACH,IAAI,EAAE,CAAC,MAAM,CAAC;oBACd,OAAO,EAAE,iCAAiC;oBAC1C,UAAU,EAAE;wBACV;4BACE,IAAI,EAAE,OAAO;4BACb,EAAE,EAAE,MAAM;4BACV,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BAC1B,WAAW,EAAE,uDAAuD;yBACrE;qBACF;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE;4BACL,WAAW,EAAE,YAAY;4BACzB,OAAO,EAAE;gCACP,kBAAkB,EAAE;oCAClB,MAAM,EAAE;wCACN,IAAI,EAAE,QAAQ;wCACd,UAAU,EAAE;4CACV,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;4CACvB,GAAG,EAAE;gDACH,IAAI,EAAE,QAAQ;gDACd,UAAU,EAAE;oDACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oDACtB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE;oDAC/E,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE;oDACzE,QAAQ,EAAE;wDACR,IAAI,EAAE,QAAQ;wDACd,UAAU,EAAE;4DACV,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;4DAC9B,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;4DAC1B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;yDAC1B;qDACF;oDACD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oDAC1B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oDACzB,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oDAC7B,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iDAChC;6CACF;yCACF;qCACF;iCACF;6BACF;yBACF;wBACD,KAAK,EAAE,EAAE,WAAW,EAAE,mCAAmC,EAAE;wBAC3D,KAAK,EAAE,EAAE,WAAW,EAAE,qDAAqD,EAAE;qBAC9E;iBACF;aACF;YACD,+BAA+B,EAAE;gBAC/B,GAAG,EAAE;oBACH,IAAI,EAAE,CAAC,MAAM,CAAC;oBACd,OAAO,EAAE,qDAAqD;oBAC9D,UAAU,EAAE;wBACV;4BACE,IAAI,EAAE,OAAO;4BACb,EAAE,EAAE,MAAM;4BACV,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BAC1B,WAAW,EAAE,8CAA8C;yBAC5D;qBACF;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE;4BACL,WAAW,EAAE,gDAAgD;4BAC7D,OAAO,EAAE;gCACP,iBAAiB,EAAE;oCACjB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;iCAC7C;6BACF;yBACF;wBACD,KAAK,EAAE,EAAE,WAAW,EAAE,mCAAmC,EAAE;wBAC3D,KAAK,EAAE,EAAE,WAAW,EAAE,iDAAiD,EAAE;wBACzE,KAAK,EAAE,EAAE,WAAW,EAAE,uDAAuD,EAAE;qBAChF;iBACF;aACF;YACD,wBAAwB,EAAE;gBACxB,GAAG,EAAE;oBACH,IAAI,EAAE,CAAC,SAAS,CAAC;oBACjB,OAAO,EAAE,8CAA8C;oBACvD,WAAW,EAAE,qKAAqK;oBAClL,UAAU,EAAE;wBACV;4BACE,IAAI,EAAE,MAAM;4BACZ,EAAE,EAAE,OAAO;4BACX,QAAQ,EAAE,KAAK;4BACf,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BAC1B,WAAW,EAAE,oGAAoG;yBAClH;wBACD;4BACE,IAAI,EAAE,QAAQ;4BACd,EAAE,EAAE,OAAO;4BACX,QAAQ,EAAE,KAAK;4BACf,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BAC1B,WAAW,EAAE,wGAAwG;yBACtH;qBACF;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE;4BACL,WAAW,EAAE,wCAAwC;4BACrD,OAAO,EAAE;gCACP,cAAc,EAAE;oCACd,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;oCAC3B,WAAW,EAAE,wCAAwC;iCACtD;gCACD,iBAAiB,EAAE;oCACjB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oCAC1B,WAAW,EAAE,oCAAoC;iCAClD;6BACF;4BACD,OAAO,EAAE;gCACP,YAAY,EAAE;oCACZ,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iCAC3B;6BACF;yBACF;wBACD,KAAK,EAAE,EAAE,WAAW,EAAE,mCAAmC,EAAE;wBAC3D,KAAK,EAAE,EAAE,WAAW,EAAE,mCAAmC,EAAE;qBAC5D;iBACF;gBACD,IAAI,EAAE;oBACJ,IAAI,EAAE,CAAC,SAAS,CAAC;oBACjB,OAAO,EAAE,sCAAsC;oBAC/C,WAAW,EAAE,2HAA2H;oBACxI,WAAW,EAAE;wBACX,QAAQ,EAAE,IAAI;wBACd,OAAO,EAAE;4BACP,YAAY,EAAE;gCACZ,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;6BAC3B;yBACF;qBACF;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE;4BACL,WAAW,EAAE,eAAe;4BAC5B,OAAO,EAAE;gCACP,kBAAkB,EAAE;oCAClB,MAAM,EAAE;wCACN,IAAI,EAAE,QAAQ;wCACd,UAAU,EAAE;4CACV,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;4CACvB,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;4CAC5B,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;4CAC5B,MAAM,EAAE;gDACN,IAAI,EAAE,OAAO;gDACb,KAAK,EAAE;oDACL,IAAI,EAAE,QAAQ;oDACd,UAAU,EAAE;wDACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wDACxB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qDAC1B;iDACF;6CACF;yCACF;qCACF;iCACF;6BACF;yBACF;wBACD,KAAK,EAAE,EAAE,WAAW,EAAE,uBAAuB,EAAE;wBAC/C,KAAK,EAAE,EAAE,WAAW,EAAE,mCAAmC,EAAE;qBAC5D;iBACF;aACF;YACD,eAAe,EAAE;gBACf,GAAG,EAAE;oBACH,IAAI,EAAE,CAAC,OAAO,CAAC;oBACf,OAAO,EAAE,qBAAqB;oBAC9B,SAAS,EAAE;wBACT,KAAK,EAAE,EAAE,WAAW,EAAE,cAAc,EAAE;qBACvC;iBACF;aACF;YACD,sBAAsB,EAAE;gBACtB,IAAI,EAAE;oBACJ,IAAI,EAAE,CAAC,OAAO,CAAC;oBACf,OAAO,EAAE,yBAAyB;oBAClC,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC;oBACtF,WAAW,EAAE;wBACX,QAAQ,EAAE,IAAI;wBACd,OAAO,EAAE;4BACP,kBAAkB,EAAE;gCAClB,MAAM,EAAE;oCACN,IAAI,EAAE,QAAQ;oCACd,UAAU,EAAE;wCACV,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE;qCAC1D;iCACF;6BACF;yBACF;qBACF;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE,EAAE,WAAW,EAAE,uBAAuB,EAAE;qBAChD;iBACF;aACF;SACF;QACD,UAAU,EAAE;YACV,eAAe,EAAE;gBACf,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,KAAK,EAAE;wBACL,iBAAiB,EAAE;4BACjB,gBAAgB,EAAE,kBAAkB,CAAC,kBAAkB,CAAC;4BACxD,QAAQ,EAAE,kBAAkB,CAAC,cAAc,CAAC;4BAC5C,MAAM,EAAE;gCACN,WAAW,EAAE,gCAAgC;gCAC7C,YAAY,EAAE,8CAA8C;6BAC7D;yBACF;qBACF;iBACF;gBACD,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,EAAE,EAAE,QAAQ;oBACZ,IAAI,EAAE,WAAW;iBAClB;aACF;YACD,OAAO,EAAE;gBACP,GAAG,WAAW;aACf;SACF;QACD,SAAS,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACrC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;YACnC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,43 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* RFC 7591 dynamic client persistence.
|
|
3
|
+
*
|
|
4
|
+
* `OAuthManager.registerDynamicClient` previously kept clients in an in-memory
|
|
5
|
+
* Map, so any process restart (Railway redeploy) invalidated every Claude
|
|
6
|
+
* desktop / mobile / ChatGPT integration that had auto-registered via DCR.
|
|
7
|
+
* Tokens persisted, but the *client_id* didn't — so refresh attempts failed
|
|
8
|
+
* with "Unknown client_id" and clients re-ran the full OAuth flow.
|
|
9
|
+
*
|
|
10
|
+
* `ClientStore` mirrors `TokenStore`: SQLite for local/single-instance,
|
|
11
|
+
* Supabase PostgREST for multi-instance / stateless deployments. See
|
|
12
|
+
* `scripts/supabase-oauth-clients.sql` for the migration.
|
|
13
|
+
*/
|
|
14
|
+
export interface StoredClient {
|
|
15
|
+
clientId: string;
|
|
16
|
+
redirectUris: string[];
|
|
17
|
+
scopes: string[];
|
|
18
|
+
createdAt: number;
|
|
19
|
+
}
|
|
20
|
+
export interface ClientStore {
|
|
21
|
+
save(record: StoredClient): Promise<void>;
|
|
22
|
+
find(clientId: string): Promise<StoredClient | null>;
|
|
23
|
+
listAll(since?: number): Promise<StoredClient[]>;
|
|
24
|
+
}
|
|
25
|
+
export declare class LocalSQLiteClientStore implements ClientStore {
|
|
26
|
+
private readonly db;
|
|
27
|
+
constructor(storageLocation: string);
|
|
28
|
+
save(record: StoredClient): Promise<void>;
|
|
29
|
+
find(clientId: string): Promise<StoredClient | null>;
|
|
30
|
+
listAll(since?: number): Promise<StoredClient[]>;
|
|
31
|
+
}
|
|
32
|
+
export declare class PostgresClientStore implements ClientStore {
|
|
33
|
+
private readonly supabaseUrl;
|
|
34
|
+
private readonly serviceRoleKey;
|
|
35
|
+
constructor(supabaseUrl: string, serviceRoleKey: string);
|
|
36
|
+
private authHeaders;
|
|
37
|
+
private get baseUrl();
|
|
38
|
+
save(record: StoredClient): Promise<void>;
|
|
39
|
+
find(clientId: string): Promise<StoredClient | null>;
|
|
40
|
+
listAll(since?: number): Promise<StoredClient[]>;
|
|
41
|
+
}
|
|
42
|
+
export declare function createClientStore(storageLocation: string): ClientStore;
|
|
43
|
+
//# sourceMappingURL=clientStore.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"clientStore.d.ts","sourceRoot":"","sources":["../../src/auth/clientStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IACrD,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;CAClD;AASD,qBAAa,sBAAuB,YAAW,WAAW;IACxD,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAoB;gBAE3B,eAAe,EAAE,MAAM;IAiB7B,IAAI,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBzC,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAQpD,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;CAMvD;AASD,qBAAa,mBAAoB,YAAW,WAAW;IACrD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;gBAE5B,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM;IAKvD,OAAO,CAAC,WAAW;IAUnB,OAAO,KAAK,OAAO,GAElB;IAEK,IAAI,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBzC,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAqBpD,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;CAevD;AAED,wBAAgB,iBAAiB,CAAC,eAAe,EAAE,MAAM,GAAG,WAAW,CAStE"}
|
|
@@ -0,0 +1,168 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* RFC 7591 dynamic client persistence.
|
|
3
|
+
*
|
|
4
|
+
* `OAuthManager.registerDynamicClient` previously kept clients in an in-memory
|
|
5
|
+
* Map, so any process restart (Railway redeploy) invalidated every Claude
|
|
6
|
+
* desktop / mobile / ChatGPT integration that had auto-registered via DCR.
|
|
7
|
+
* Tokens persisted, but the *client_id* didn't — so refresh attempts failed
|
|
8
|
+
* with "Unknown client_id" and clients re-ran the full OAuth flow.
|
|
9
|
+
*
|
|
10
|
+
* `ClientStore` mirrors `TokenStore`: SQLite for local/single-instance,
|
|
11
|
+
* Supabase PostgREST for multi-instance / stateless deployments. See
|
|
12
|
+
* `scripts/supabase-oauth-clients.sql` for the migration.
|
|
13
|
+
*/
|
|
14
|
+
import fs from "fs";
|
|
15
|
+
import path from "path";
|
|
16
|
+
import Database from "better-sqlite3";
|
|
17
|
+
export class LocalSQLiteClientStore {
|
|
18
|
+
db;
|
|
19
|
+
constructor(storageLocation) {
|
|
20
|
+
const cacheDir = path.join(storageLocation, ".cache");
|
|
21
|
+
fs.mkdirSync(cacheDir, { recursive: true });
|
|
22
|
+
const dbPath = path.join(cacheDir, "oauth-clients.db");
|
|
23
|
+
this.db = new Database(dbPath);
|
|
24
|
+
this.db.pragma("journal_mode = WAL");
|
|
25
|
+
this.db.pragma("synchronous = NORMAL");
|
|
26
|
+
this.db.exec(`
|
|
27
|
+
CREATE TABLE IF NOT EXISTS oauth_dynamic_clients (
|
|
28
|
+
client_id TEXT PRIMARY KEY,
|
|
29
|
+
redirect_uris TEXT NOT NULL,
|
|
30
|
+
scopes TEXT NOT NULL,
|
|
31
|
+
created_at INTEGER NOT NULL
|
|
32
|
+
);
|
|
33
|
+
`);
|
|
34
|
+
}
|
|
35
|
+
async save(record) {
|
|
36
|
+
this.db
|
|
37
|
+
.prepare(`INSERT INTO oauth_dynamic_clients
|
|
38
|
+
(client_id, redirect_uris, scopes, created_at)
|
|
39
|
+
VALUES
|
|
40
|
+
(@client_id, @redirect_uris, @scopes, @created_at)
|
|
41
|
+
ON CONFLICT(client_id) DO UPDATE SET
|
|
42
|
+
redirect_uris = excluded.redirect_uris,
|
|
43
|
+
scopes = excluded.scopes,
|
|
44
|
+
created_at = excluded.created_at`)
|
|
45
|
+
.run({
|
|
46
|
+
client_id: record.clientId,
|
|
47
|
+
redirect_uris: JSON.stringify(record.redirectUris),
|
|
48
|
+
scopes: record.scopes.join(" "),
|
|
49
|
+
created_at: record.createdAt,
|
|
50
|
+
});
|
|
51
|
+
}
|
|
52
|
+
async find(clientId) {
|
|
53
|
+
const row = this.db
|
|
54
|
+
.prepare("SELECT * FROM oauth_dynamic_clients WHERE client_id = ?")
|
|
55
|
+
.get(clientId);
|
|
56
|
+
if (!row)
|
|
57
|
+
return null;
|
|
58
|
+
return rowToStoredClient(row);
|
|
59
|
+
}
|
|
60
|
+
async listAll(since) {
|
|
61
|
+
const rows = since
|
|
62
|
+
? this.db.prepare("SELECT * FROM oauth_dynamic_clients WHERE created_at >= ? ORDER BY created_at ASC").all(since)
|
|
63
|
+
: this.db.prepare("SELECT * FROM oauth_dynamic_clients ORDER BY created_at ASC").all();
|
|
64
|
+
return rows.map(rowToStoredClient);
|
|
65
|
+
}
|
|
66
|
+
}
|
|
67
|
+
export class PostgresClientStore {
|
|
68
|
+
supabaseUrl;
|
|
69
|
+
serviceRoleKey;
|
|
70
|
+
constructor(supabaseUrl, serviceRoleKey) {
|
|
71
|
+
this.supabaseUrl = supabaseUrl.trim().replace(/\/$/, "");
|
|
72
|
+
this.serviceRoleKey = serviceRoleKey.trim();
|
|
73
|
+
}
|
|
74
|
+
authHeaders(extra) {
|
|
75
|
+
return {
|
|
76
|
+
apikey: this.serviceRoleKey,
|
|
77
|
+
authorization: `Bearer ${this.serviceRoleKey}`,
|
|
78
|
+
"content-type": "application/json",
|
|
79
|
+
prefer: "return=minimal",
|
|
80
|
+
...extra,
|
|
81
|
+
};
|
|
82
|
+
}
|
|
83
|
+
get baseUrl() {
|
|
84
|
+
return `${this.supabaseUrl}/rest/v1/oauth_dynamic_clients`;
|
|
85
|
+
}
|
|
86
|
+
async save(record) {
|
|
87
|
+
const body = JSON.stringify({
|
|
88
|
+
client_id: record.clientId,
|
|
89
|
+
redirect_uris: JSON.stringify(record.redirectUris),
|
|
90
|
+
scopes: record.scopes.join(" "),
|
|
91
|
+
created_at: record.createdAt,
|
|
92
|
+
});
|
|
93
|
+
const response = await fetch(this.baseUrl, {
|
|
94
|
+
method: "POST",
|
|
95
|
+
headers: this.authHeaders({ prefer: "resolution=merge-duplicates,return=minimal" }),
|
|
96
|
+
body,
|
|
97
|
+
});
|
|
98
|
+
if (!response.ok) {
|
|
99
|
+
const text = await response.text().catch(() => "");
|
|
100
|
+
throw new Error(`PostgresClientStore.save failed (${response.status}): ${text}`);
|
|
101
|
+
}
|
|
102
|
+
}
|
|
103
|
+
async find(clientId) {
|
|
104
|
+
const url = `${this.baseUrl}?client_id=eq.${encodeURIComponent(clientId)}&limit=1`;
|
|
105
|
+
const response = await fetch(url, {
|
|
106
|
+
method: "GET",
|
|
107
|
+
headers: this.authHeaders({ prefer: "return=representation" }),
|
|
108
|
+
}).catch(() => null);
|
|
109
|
+
if (!response || !response.ok)
|
|
110
|
+
return null;
|
|
111
|
+
const rows = (await response.json().catch(() => []));
|
|
112
|
+
const row = rows[0];
|
|
113
|
+
if (!row)
|
|
114
|
+
return null;
|
|
115
|
+
return {
|
|
116
|
+
clientId: row.client_id,
|
|
117
|
+
redirectUris: parseJsonArray(row.redirect_uris),
|
|
118
|
+
scopes: row.scopes.split(/\s+/).filter(Boolean),
|
|
119
|
+
createdAt: Number(row.created_at),
|
|
120
|
+
};
|
|
121
|
+
}
|
|
122
|
+
async listAll(since) {
|
|
123
|
+
let url = `${this.baseUrl}?order=created_at.asc&select=*`;
|
|
124
|
+
if (since)
|
|
125
|
+
url += `&created_at=gte.${since}`;
|
|
126
|
+
const response = await fetch(url, {
|
|
127
|
+
headers: this.authHeaders({ prefer: "return=representation" }),
|
|
128
|
+
}).catch(() => null);
|
|
129
|
+
if (!response || !response.ok)
|
|
130
|
+
return [];
|
|
131
|
+
const rows = (await response.json().catch(() => []));
|
|
132
|
+
return rows.map(row => ({
|
|
133
|
+
clientId: row.client_id,
|
|
134
|
+
redirectUris: parseJsonArray(row.redirect_uris),
|
|
135
|
+
scopes: row.scopes.split(/\s+/).filter(Boolean),
|
|
136
|
+
createdAt: Number(row.created_at),
|
|
137
|
+
}));
|
|
138
|
+
}
|
|
139
|
+
}
|
|
140
|
+
export function createClientStore(storageLocation) {
|
|
141
|
+
const supabaseUrl = (process.env.SUPABASE_URL ?? "").trim();
|
|
142
|
+
const serviceRoleKey = (process.env.SUPABASE_SERVICE_ROLE_KEY ?? "").trim();
|
|
143
|
+
if (supabaseUrl && serviceRoleKey) {
|
|
144
|
+
return new PostgresClientStore(supabaseUrl, serviceRoleKey);
|
|
145
|
+
}
|
|
146
|
+
return new LocalSQLiteClientStore(storageLocation);
|
|
147
|
+
}
|
|
148
|
+
function parseJsonArray(raw) {
|
|
149
|
+
try {
|
|
150
|
+
const parsed = JSON.parse(raw);
|
|
151
|
+
if (Array.isArray(parsed)) {
|
|
152
|
+
return parsed.filter((v) => typeof v === "string");
|
|
153
|
+
}
|
|
154
|
+
}
|
|
155
|
+
catch {
|
|
156
|
+
// fall through
|
|
157
|
+
}
|
|
158
|
+
return [];
|
|
159
|
+
}
|
|
160
|
+
function rowToStoredClient(row) {
|
|
161
|
+
return {
|
|
162
|
+
clientId: row.client_id,
|
|
163
|
+
redirectUris: parseJsonArray(row.redirect_uris),
|
|
164
|
+
scopes: row.scopes.split(/\s+/).filter(Boolean),
|
|
165
|
+
createdAt: row.created_at,
|
|
166
|
+
};
|
|
167
|
+
}
|
|
168
|
+
//# sourceMappingURL=clientStore.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"clientStore.js","sourceRoot":"","sources":["../../src/auth/clientStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAsBtC,MAAM,OAAO,sBAAsB;IAChB,EAAE,CAAoB;IAEvC,YAAY,eAAuB;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;QACtD,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QACvD,IAAI,CAAC,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;QACvC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;KAOZ,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAoB;QAC7B,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;;;;;;+CAOuC,CACxC;aACA,GAAG,CAAC;YACH,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC;YAClD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YAC/B,UAAU,EAAE,MAAM,CAAC,SAAS;SAC7B,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAgB;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,yDAAyD,CAAC;aAClE,GAAG,CAAC,QAAQ,CAA0B,CAAC;QAC1C,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAc;QAC1B,MAAM,IAAI,GAAG,KAAK;YAChB,CAAC,CAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,mFAAmF,CAAC,CAAC,GAAG,CAAC,KAAK,CAAiB;YAClI,CAAC,CAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,6DAA6D,CAAC,CAAC,GAAG,EAAkB,CAAC;QAC1G,OAAO,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;CACF;AASD,MAAM,OAAO,mBAAmB;IACb,WAAW,CAAS;IACpB,cAAc,CAAS;IAExC,YAAY,WAAmB,EAAE,cAAsB;QACrD,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC;IAC9C,CAAC;IAEO,WAAW,CAAC,KAA8B;QAChD,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,cAAc;YAC3B,aAAa,EAAE,UAAU,IAAI,CAAC,cAAc,EAAE;YAC9C,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,gBAAgB;YACxB,GAAG,KAAK;SACT,CAAC;IACJ,CAAC;IAED,IAAY,OAAO;QACjB,OAAO,GAAG,IAAI,CAAC,WAAW,gCAAgC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAoB;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC;YAClD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YAC/B,UAAU,EAAE,MAAM,CAAC,SAAS;SAC7B,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE;YACzC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;YACnF,IAAI;SACL,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAgB;QACzB,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,iBAAiB,kBAAkB,CAAC,QAAQ,CAAC,UAAU,CAAC;QACnF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;SAC/D,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAErB,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAE3C,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAwB,CAAC;QAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QAEtB,OAAO;YACL,QAAQ,EAAE,GAAG,CAAC,SAAS;YACvB,YAAY,EAAE,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC;YAC/C,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YAC/C,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;SAClC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAc;QAC1B,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,gCAAgC,CAAC;QAC1D,IAAI,KAAK;YAAE,GAAG,IAAI,mBAAmB,KAAK,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;SAC/D,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAwB,CAAC;QAC5E,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACtB,QAAQ,EAAE,GAAG,CAAC,SAAS;YACvB,YAAY,EAAE,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC;YAC/C,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YAC/C,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;SAClC,CAAC,CAAC,CAAC;IACN,CAAC;CACF;AAED,MAAM,UAAU,iBAAiB,CAAC,eAAuB;IACvD,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5D,MAAM,cAAc,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAE5E,IAAI,WAAW,IAAI,cAAc,EAAE,CAAC;QAClC,OAAO,IAAI,mBAAmB,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,IAAI,sBAAsB,CAAC,eAAe,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAc;IACvC,OAAO;QACL,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,YAAY,EAAE,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC;QAC/C,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/C,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,34 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Unified account deletion cascade with a `pending_deletions` safety fence.
|
|
3
|
+
*
|
|
4
|
+
* Flow:
|
|
5
|
+
* 1. Upsert a row in `pending_deletions` (idempotent — preserves partial progress).
|
|
6
|
+
* 2. For each sub-step: skip if already done, run if not, then flag done.
|
|
7
|
+
* 3. When all sub-steps succeed, set completed_at.
|
|
8
|
+
*
|
|
9
|
+
* All sub-steps are idempotent: DELETE WHERE on absent rows is a no-op.
|
|
10
|
+
* If a step throws, the row stays partially done and resumePendingDeletions()
|
|
11
|
+
* will retry it after 10 minutes.
|
|
12
|
+
*
|
|
13
|
+
* Auth user row is deleted last: once gone, the identity cannot be recovered,
|
|
14
|
+
* so all Postgres data must be cleaned first.
|
|
15
|
+
*/
|
|
16
|
+
import type { TokenStore } from "./tokenStore.js";
|
|
17
|
+
export interface DeleteAccountOpts {
|
|
18
|
+
tokenStore: TokenStore;
|
|
19
|
+
supabaseUrl: string;
|
|
20
|
+
serviceRoleKey: string;
|
|
21
|
+
/** Storage bucket name. Defaults to SUPABASE_STORAGE_BUCKET env or "brains-wiki". */
|
|
22
|
+
bucket?: string;
|
|
23
|
+
/** Root prefix inside the bucket. Defaults to SUPABASE_STORAGE_PREFIX env or "". */
|
|
24
|
+
storagePrefix?: string;
|
|
25
|
+
}
|
|
26
|
+
export interface DeleteAccountResult {
|
|
27
|
+
userId: string;
|
|
28
|
+
stepsCompleted: string[];
|
|
29
|
+
stepsFailed: string[];
|
|
30
|
+
completed: boolean;
|
|
31
|
+
}
|
|
32
|
+
export declare function deleteAccount(userId: string, opts: DeleteAccountOpts): Promise<DeleteAccountResult>;
|
|
33
|
+
export declare function resumePendingDeletions(opts: DeleteAccountOpts): Promise<DeleteAccountResult[]>;
|
|
34
|
+
//# sourceMappingURL=deleteAccount.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"deleteAccount.d.ts","sourceRoot":"","sources":["../../src/auth/deleteAccount.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAIlD,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,qFAAqF;IACrF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oFAAoF;IACpF,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;CACpB;AA0JD,wBAAsB,aAAa,CACjC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,mBAAmB,CAAC,CAyF9B;AAID,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAgCpG"}
|
|
@@ -0,0 +1,203 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Unified account deletion cascade with a `pending_deletions` safety fence.
|
|
3
|
+
*
|
|
4
|
+
* Flow:
|
|
5
|
+
* 1. Upsert a row in `pending_deletions` (idempotent — preserves partial progress).
|
|
6
|
+
* 2. For each sub-step: skip if already done, run if not, then flag done.
|
|
7
|
+
* 3. When all sub-steps succeed, set completed_at.
|
|
8
|
+
*
|
|
9
|
+
* All sub-steps are idempotent: DELETE WHERE on absent rows is a no-op.
|
|
10
|
+
* If a step throws, the row stays partially done and resumePendingDeletions()
|
|
11
|
+
* will retry it after 10 minutes.
|
|
12
|
+
*
|
|
13
|
+
* Auth user row is deleted last: once gone, the identity cannot be recovered,
|
|
14
|
+
* so all Postgres data must be cleaned first.
|
|
15
|
+
*/
|
|
16
|
+
// ─── Helpers ──────────────────────────────────────────────────────────────────
|
|
17
|
+
function sanitizeSubjectForPath(subject) {
|
|
18
|
+
const trimmed = subject.trim().toLowerCase();
|
|
19
|
+
const normalized = trimmed.replace(/[^a-z0-9._-]/g, "_").replace(/^_+|_+$/g, "");
|
|
20
|
+
return normalized.slice(0, 96) || "user";
|
|
21
|
+
}
|
|
22
|
+
function serviceHeaders(key, extra = {}) {
|
|
23
|
+
return {
|
|
24
|
+
apikey: key,
|
|
25
|
+
authorization: `Bearer ${key}`,
|
|
26
|
+
"content-type": "application/json",
|
|
27
|
+
prefer: "return=minimal",
|
|
28
|
+
...extra,
|
|
29
|
+
};
|
|
30
|
+
}
|
|
31
|
+
function pgUrl(supabaseUrl, table, filter) {
|
|
32
|
+
const base = `${supabaseUrl.trim().replace(/\/$/, "")}/rest/v1/${table}`;
|
|
33
|
+
return filter ? `${base}?${filter}` : base;
|
|
34
|
+
}
|
|
35
|
+
// ─── pending_deletions helpers ────────────────────────────────────────────────
|
|
36
|
+
async function upsertPendingDeletion(supabaseUrl, key, userId) {
|
|
37
|
+
const url = pgUrl(supabaseUrl, "pending_deletions", "");
|
|
38
|
+
const body = JSON.stringify({ user_id: userId });
|
|
39
|
+
const res = await fetch(url, {
|
|
40
|
+
method: "POST",
|
|
41
|
+
headers: serviceHeaders(key, {
|
|
42
|
+
prefer: "resolution=ignore-duplicates,return=representation",
|
|
43
|
+
}),
|
|
44
|
+
body,
|
|
45
|
+
});
|
|
46
|
+
if (res.status === 409 || res.status === 200 || res.status === 201) {
|
|
47
|
+
// Either inserted or already exists — fetch the current row
|
|
48
|
+
const getUrl = pgUrl(supabaseUrl, "pending_deletions", `user_id=eq.${encodeURIComponent(userId)}&limit=1`);
|
|
49
|
+
const getRes = await fetch(getUrl, {
|
|
50
|
+
method: "GET",
|
|
51
|
+
headers: serviceHeaders(key, { prefer: "return=representation" }),
|
|
52
|
+
});
|
|
53
|
+
const rows = (await getRes.json().catch(() => []));
|
|
54
|
+
if (rows[0])
|
|
55
|
+
return rows[0];
|
|
56
|
+
}
|
|
57
|
+
throw new Error(`upsertPendingDeletion failed (${res.status}): ${await res.text().catch(() => "")}`);
|
|
58
|
+
}
|
|
59
|
+
async function setStepDone(supabaseUrl, key, userId, field) {
|
|
60
|
+
const url = pgUrl(supabaseUrl, "pending_deletions", `user_id=eq.${encodeURIComponent(userId)}`);
|
|
61
|
+
await fetch(url, {
|
|
62
|
+
method: "PATCH",
|
|
63
|
+
headers: serviceHeaders(key),
|
|
64
|
+
body: JSON.stringify({ [field]: true }),
|
|
65
|
+
});
|
|
66
|
+
}
|
|
67
|
+
async function markCompleted(supabaseUrl, key, userId) {
|
|
68
|
+
const url = pgUrl(supabaseUrl, "pending_deletions", `user_id=eq.${encodeURIComponent(userId)}`);
|
|
69
|
+
await fetch(url, {
|
|
70
|
+
method: "PATCH",
|
|
71
|
+
headers: serviceHeaders(key),
|
|
72
|
+
body: JSON.stringify({ completed_at: new Date().toISOString() }),
|
|
73
|
+
});
|
|
74
|
+
}
|
|
75
|
+
// ─── Storage deletion ─────────────────────────────────────────────────────────
|
|
76
|
+
async function listStorageFiles(supabaseUrl, key, bucket, prefix, acc = []) {
|
|
77
|
+
const url = `${supabaseUrl}/storage/v1/object/list/${encodeURIComponent(bucket)}`;
|
|
78
|
+
const res = await fetch(url, {
|
|
79
|
+
method: "POST",
|
|
80
|
+
headers: serviceHeaders(key),
|
|
81
|
+
body: JSON.stringify({ prefix, limit: 1000, offset: 0 }),
|
|
82
|
+
});
|
|
83
|
+
if (!res.ok)
|
|
84
|
+
return acc;
|
|
85
|
+
const items = (await res.json().catch(() => []));
|
|
86
|
+
for (const item of items) {
|
|
87
|
+
if (!item.id) {
|
|
88
|
+
// directory — recurse
|
|
89
|
+
const next = prefix ? `${prefix}/${item.name}` : item.name;
|
|
90
|
+
await listStorageFiles(supabaseUrl, key, bucket, next, acc);
|
|
91
|
+
}
|
|
92
|
+
else {
|
|
93
|
+
acc.push(prefix ? `${prefix}/${item.name}` : item.name);
|
|
94
|
+
}
|
|
95
|
+
}
|
|
96
|
+
return acc;
|
|
97
|
+
}
|
|
98
|
+
async function deleteStorageFiles(supabaseUrl, key, bucket, userPrefix) {
|
|
99
|
+
const files = await listStorageFiles(supabaseUrl, key, bucket, userPrefix);
|
|
100
|
+
const url = `${supabaseUrl}/storage/v1/object/${encodeURIComponent(bucket)}`;
|
|
101
|
+
for (let i = 0; i < files.length; i += 100) {
|
|
102
|
+
const batch = files.slice(i, i + 100);
|
|
103
|
+
await fetch(url, {
|
|
104
|
+
method: "DELETE",
|
|
105
|
+
headers: serviceHeaders(key),
|
|
106
|
+
body: JSON.stringify({ prefixes: batch }),
|
|
107
|
+
});
|
|
108
|
+
}
|
|
109
|
+
}
|
|
110
|
+
// ─── Postgres table deletions ─────────────────────────────────────────────────
|
|
111
|
+
async function pgDelete(supabaseUrl, key, table, filter) {
|
|
112
|
+
const url = pgUrl(supabaseUrl, table, filter);
|
|
113
|
+
const res = await fetch(url, { method: "DELETE", headers: serviceHeaders(key) });
|
|
114
|
+
if (!res.ok) {
|
|
115
|
+
const text = await res.text().catch(() => "");
|
|
116
|
+
throw new Error(`pgDelete(${table}) failed (${res.status}): ${text}`);
|
|
117
|
+
}
|
|
118
|
+
}
|
|
119
|
+
// ─── deleteAccount ────────────────────────────────────────────────────────────
|
|
120
|
+
export async function deleteAccount(userId, opts) {
|
|
121
|
+
const { tokenStore, supabaseUrl, serviceRoleKey, bucket = (process.env.SUPABASE_STORAGE_BUCKET ?? "brains-wiki"), storagePrefix = (process.env.SUPABASE_STORAGE_PREFIX ?? ""), } = opts;
|
|
122
|
+
const subjectKey = sanitizeSubjectForPath(userId);
|
|
123
|
+
const userStoragePrefix = storagePrefix ? `${storagePrefix}/users/${subjectKey}` : `users/${subjectKey}`;
|
|
124
|
+
const uidFilter = `user_id=eq.${encodeURIComponent(userId)}`;
|
|
125
|
+
const subjectFilter = `subject=eq.${encodeURIComponent(userId)}`;
|
|
126
|
+
const stepsCompleted = [];
|
|
127
|
+
const stepsFailed = [];
|
|
128
|
+
// 1. Fence: insert pending_deletion row (idempotent)
|
|
129
|
+
const row = await upsertPendingDeletion(supabaseUrl, serviceRoleKey, userId);
|
|
130
|
+
async function runStep(name, field, fn) {
|
|
131
|
+
if (row[field]) {
|
|
132
|
+
stepsCompleted.push(`${name}:skipped`);
|
|
133
|
+
return;
|
|
134
|
+
}
|
|
135
|
+
try {
|
|
136
|
+
await fn();
|
|
137
|
+
await setStepDone(supabaseUrl, serviceRoleKey, userId, field);
|
|
138
|
+
row[field] = true;
|
|
139
|
+
stepsCompleted.push(name);
|
|
140
|
+
}
|
|
141
|
+
catch (err) {
|
|
142
|
+
stepsFailed.push(`${name}: ${err instanceof Error ? err.message : String(err)}`);
|
|
143
|
+
}
|
|
144
|
+
}
|
|
145
|
+
// 2. Storage files
|
|
146
|
+
await runStep("storage", "storage_done", () => deleteStorageFiles(supabaseUrl, serviceRoleKey, bucket, userStoragePrefix));
|
|
147
|
+
// 3. Postgres: pages
|
|
148
|
+
await runStep("pages", "pages_done", () => pgDelete(supabaseUrl, serviceRoleKey, "pages", uidFilter));
|
|
149
|
+
// 4. Postgres: wiki_links
|
|
150
|
+
await runStep("wiki_links", "wiki_links_done", () => pgDelete(supabaseUrl, serviceRoleKey, "wiki_links", uidFilter));
|
|
151
|
+
// 5. OAuth tokens (all types, all clients)
|
|
152
|
+
await runStep("tokens", "tokens_done", () => tokenStore.deleteAllTokensForSubject(userId));
|
|
153
|
+
// 6. User access levels
|
|
154
|
+
await runStep("access_levels", "access_levels_done", () => pgDelete(supabaseUrl, serviceRoleKey, "user_access_levels", uidFilter));
|
|
155
|
+
// 7. Governance audit log (GDPR erasure)
|
|
156
|
+
await runStep("audit_log", "audit_log_done", () => pgDelete(supabaseUrl, serviceRoleKey, "governance_audit_log", uidFilter));
|
|
157
|
+
// 8. Auth user (last — once gone, identity is unrecoverable)
|
|
158
|
+
await runStep("auth_user", "auth_done", async () => {
|
|
159
|
+
const url = `${supabaseUrl}/auth/v1/admin/users/${encodeURIComponent(userId)}`;
|
|
160
|
+
const res = await fetch(url, {
|
|
161
|
+
method: "DELETE",
|
|
162
|
+
headers: {
|
|
163
|
+
apikey: serviceRoleKey,
|
|
164
|
+
authorization: `Bearer ${serviceRoleKey}`,
|
|
165
|
+
},
|
|
166
|
+
});
|
|
167
|
+
if (!res.ok && res.status !== 404) {
|
|
168
|
+
const text = await res.text().catch(() => "");
|
|
169
|
+
throw new Error(`auth user delete failed (${res.status}): ${text}`);
|
|
170
|
+
}
|
|
171
|
+
});
|
|
172
|
+
const completed = stepsFailed.length === 0;
|
|
173
|
+
if (completed) {
|
|
174
|
+
await markCompleted(supabaseUrl, serviceRoleKey, userId);
|
|
175
|
+
}
|
|
176
|
+
return { userId, stepsCompleted, stepsFailed, completed };
|
|
177
|
+
}
|
|
178
|
+
// ─── resumePendingDeletions ───────────────────────────────────────────────────
|
|
179
|
+
export async function resumePendingDeletions(opts) {
|
|
180
|
+
const { supabaseUrl, serviceRoleKey } = opts;
|
|
181
|
+
// Rows stuck > 10 minutes with no completed_at
|
|
182
|
+
const cutoff = new Date(Date.now() - 10 * 60 * 1000).toISOString();
|
|
183
|
+
const url = pgUrl(supabaseUrl, "pending_deletions", `completed_at=is.null&requested_at=lt.${encodeURIComponent(cutoff)}`);
|
|
184
|
+
const res = await fetch(url, {
|
|
185
|
+
method: "GET",
|
|
186
|
+
headers: serviceHeaders(serviceRoleKey, { prefer: "return=representation" }),
|
|
187
|
+
});
|
|
188
|
+
if (!res.ok)
|
|
189
|
+
return [];
|
|
190
|
+
const rows = (await res.json().catch(() => []));
|
|
191
|
+
const results = [];
|
|
192
|
+
for (const row of rows) {
|
|
193
|
+
const result = await deleteAccount(row.user_id, opts).catch((err) => ({
|
|
194
|
+
userId: row.user_id,
|
|
195
|
+
stepsCompleted: [],
|
|
196
|
+
stepsFailed: [String(err)],
|
|
197
|
+
completed: false,
|
|
198
|
+
}));
|
|
199
|
+
results.push(result);
|
|
200
|
+
}
|
|
201
|
+
return results;
|
|
202
|
+
}
|
|
203
|
+
//# sourceMappingURL=deleteAccount.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"deleteAccount.js","sourceRoot":"","sources":["../../src/auth/deleteAccount.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAoCH,iFAAiF;AAEjF,SAAS,sBAAsB,CAAC,OAAe;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACjF,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC;AAC3C,CAAC;AAED,SAAS,cAAc,CAAC,GAAW,EAAE,QAAgC,EAAE;IACrE,OAAO;QACL,MAAM,EAAE,GAAG;QACX,aAAa,EAAE,UAAU,GAAG,EAAE;QAC9B,cAAc,EAAE,kBAAkB;QAClC,MAAM,EAAE,gBAAgB;QACxB,GAAG,KAAK;KACT,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,WAAmB,EAAE,KAAa,EAAE,MAAc;IAC/D,MAAM,IAAI,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,KAAK,EAAE,CAAC;IACzE,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,iFAAiF;AAEjF,KAAK,UAAU,qBAAqB,CAClC,WAAmB,EACnB,GAAW,EACX,MAAc;IAEd,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAEjD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,cAAc,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,oDAAoD;SAC7D,CAAC;QACF,IAAI;KACL,CAAC,CAAC;IAEH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACnE,4DAA4D;QAC5D,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,EAAE,mBAAmB,EAAE,cAAc,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC3G,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE;YACjC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,cAAc,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;SAClE,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAyB,CAAC;QAC3E,IAAI,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,CAAC,MAAM,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACvG,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,WAAmB,EACnB,GAAW,EACX,MAAc,EACd,KAAkF;IAElF,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,mBAAmB,EAAE,cAAc,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAChG,MAAM,KAAK,CAAC,GAAG,EAAE;QACf,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC;QAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;KACxC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,WAAmB,EAAE,GAAW,EAAE,MAAc;IAC3E,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,mBAAmB,EAAE,cAAc,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAChG,MAAM,KAAK,CAAC,GAAG,EAAE;QACf,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC;QAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;KACjE,CAAC,CAAC;AACL,CAAC;AAED,iFAAiF;AAEjF,KAAK,UAAU,gBAAgB,CAC7B,WAAmB,EACnB,GAAW,EACX,MAAc,EACd,MAAc,EACd,MAAgB,EAAE;IAElB,MAAM,GAAG,GAAG,GAAG,WAAW,2BAA2B,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;IAClF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC;QAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;KACzD,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IAExB,MAAM,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAyC,CAAC;IACzF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,sBAAsB;YACtB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAC3D,MAAM,gBAAgB,CAAC,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,WAAmB,EACnB,GAAW,EACX,MAAc,EACd,UAAkB;IAElB,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAG,GAAG,WAAW,sBAAsB,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;IAC7E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC;QACtC,MAAM,KAAK,CAAC,GAAG,EAAE;YACf,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC;YAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;SAC1C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF,KAAK,UAAU,QAAQ,CAAC,WAAmB,EAAE,GAAW,EAAE,KAAa,EAAE,MAAc;IACrF,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,YAAY,KAAK,aAAa,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,IAAuB;IAEvB,MAAM,EACJ,UAAU,EACV,WAAW,EACX,cAAc,EACd,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,aAAa,CAAC,EAC/D,aAAa,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,EAAE,CAAC,GAC5D,GAAG,IAAI,CAAC;IAET,MAAM,UAAU,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,iBAAiB,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,aAAa,UAAU,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,UAAU,EAAE,CAAC;IACzG,MAAM,SAAS,GAAG,cAAc,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;IAC7D,MAAM,aAAa,GAAG,cAAc,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;IAEjE,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,qDAAqD;IACrD,MAAM,GAAG,GAAG,MAAM,qBAAqB,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;IAE7E,KAAK,UAAU,OAAO,CACpB,IAAY,EACZ,KAAkF,EAClF,EAAuB;QAEvB,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACf,cAAc,CAAC,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC;YACvC,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,EAAE,CAAC;YACX,MAAM,WAAW,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YAC9D,GAAG,CAAC,KAAK,CAAC,GAAG,IAAa,CAAC;YAC3B,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,MAAM,OAAO,CAAC,SAAS,EAAE,cAAc,EAAE,GAAG,EAAE,CAC5C,kBAAkB,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAC3E,CAAC;IAEF,qBAAqB;IACrB,MAAM,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,CACxC,QAAQ,CAAC,WAAW,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,CAAC,CAC1D,CAAC;IAEF,0BAA0B;IAC1B,MAAM,OAAO,CAAC,YAAY,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAClD,QAAQ,CAAC,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,SAAS,CAAC,CAC/D,CAAC;IAEF,2CAA2C;IAC3C,MAAM,OAAO,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC;IAE3F,wBAAwB;IACxB,MAAM,OAAO,CAAC,eAAe,EAAE,oBAAoB,EAAE,GAAG,EAAE,CACxD,QAAQ,CAAC,WAAW,EAAE,cAAc,EAAE,oBAAoB,EAAE,SAAS,CAAC,CACvE,CAAC;IAEF,yCAAyC;IACzC,MAAM,OAAO,CAAC,WAAW,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAChD,QAAQ,CAAC,WAAW,EAAE,cAAc,EAAE,sBAAsB,EAAE,SAAS,CAAC,CACzE,CAAC;IAEF,6DAA6D;IAC7D,MAAM,OAAO,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,GAAG,GAAG,GAAG,WAAW,wBAAwB,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE;gBACP,MAAM,EAAE,cAAc;gBACtB,aAAa,EAAE,UAAU,cAAc,EAAE;aAC1C;SACF,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC;IAC3C,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,aAAa,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;AAC5D,CAAC;AAED,iFAAiF;AAEjF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAAuB;IAClE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IAE7C,+CAA+C;IAC/C,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACnE,MAAM,GAAG,GAAG,KAAK,CACf,WAAW,EACX,mBAAmB,EACnB,wCAAwC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CACrE,CAAC;IAEF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,cAAc,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;KAC7E,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC;IAEvB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAyB,CAAC;IACxE,MAAM,OAAO,GAA0B,EAAE,CAAC;IAE1C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACpE,MAAM,EAAE,GAAG,CAAC,OAAO;YACnB,cAAc,EAAE,EAAE;YAClB,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}
|
|
@@ -0,0 +1,118 @@
|
|
|
1
|
+
import type { ClientStore } from "./clientStore.js";
|
|
2
|
+
import type { TokenStore } from "./tokenStore.js";
|
|
3
|
+
export interface OAuthClientConfig {
|
|
4
|
+
clientId: string;
|
|
5
|
+
clientSecret?: string;
|
|
6
|
+
tokenEndpointAuthMethod: "client_secret_post" | "client_secret_basic" | "none";
|
|
7
|
+
redirectUris: string[];
|
|
8
|
+
scopes: string[];
|
|
9
|
+
}
|
|
10
|
+
interface TokenResponse {
|
|
11
|
+
tokenType: "Bearer";
|
|
12
|
+
accessToken: string;
|
|
13
|
+
expiresIn: number;
|
|
14
|
+
refreshToken: string;
|
|
15
|
+
scope: string;
|
|
16
|
+
}
|
|
17
|
+
interface AuthenticatedToken {
|
|
18
|
+
subject: string;
|
|
19
|
+
clientId: string;
|
|
20
|
+
scopes: string[];
|
|
21
|
+
}
|
|
22
|
+
export declare class OAuthManager {
|
|
23
|
+
private readonly clients;
|
|
24
|
+
private readonly loginUser;
|
|
25
|
+
private readonly loginPassword;
|
|
26
|
+
private readonly supabaseUrl;
|
|
27
|
+
private readonly supabaseAnonKey;
|
|
28
|
+
private readonly store;
|
|
29
|
+
private readonly clientStore;
|
|
30
|
+
private readonly authCache;
|
|
31
|
+
constructor(store: TokenStore, clientStore?: ClientStore | null);
|
|
32
|
+
isEnabled(): boolean;
|
|
33
|
+
hasLoginConfig(): boolean;
|
|
34
|
+
private hasSupabaseLoginConfig;
|
|
35
|
+
listClients(): OAuthClientConfig[];
|
|
36
|
+
getTokenEndpointAuthMethods(): Array<OAuthClientConfig["tokenEndpointAuthMethod"]>;
|
|
37
|
+
getClientConfigs(): OAuthClientConfig[];
|
|
38
|
+
private findClient;
|
|
39
|
+
validateAuthorizeRequest(input: {
|
|
40
|
+
responseType: string;
|
|
41
|
+
clientId: string;
|
|
42
|
+
redirectUri: string;
|
|
43
|
+
scope?: string;
|
|
44
|
+
state?: string;
|
|
45
|
+
codeChallenge?: string;
|
|
46
|
+
codeChallengeMethod?: string;
|
|
47
|
+
}): Promise<{
|
|
48
|
+
client: OAuthClientConfig;
|
|
49
|
+
scope: string[];
|
|
50
|
+
state?: string;
|
|
51
|
+
}>;
|
|
52
|
+
verifyLogin(username: string, password: string): Promise<string | null>;
|
|
53
|
+
signUpWithEmail(email: string, password: string, redirectTo?: string): Promise<{
|
|
54
|
+
ok: true;
|
|
55
|
+
} | {
|
|
56
|
+
ok: false;
|
|
57
|
+
error: string;
|
|
58
|
+
}>;
|
|
59
|
+
issueAuthorizationCode(input: {
|
|
60
|
+
clientId: string;
|
|
61
|
+
redirectUri: string;
|
|
62
|
+
scope: string[];
|
|
63
|
+
subject: string;
|
|
64
|
+
codeChallenge?: string;
|
|
65
|
+
codeChallengeMethod?: "S256" | "plain";
|
|
66
|
+
}): Promise<string>;
|
|
67
|
+
exchangeAuthorizationCode(input: {
|
|
68
|
+
code: string;
|
|
69
|
+
clientId: string;
|
|
70
|
+
clientSecret?: string;
|
|
71
|
+
redirectUri: string;
|
|
72
|
+
codeVerifier?: string;
|
|
73
|
+
}): Promise<TokenResponse>;
|
|
74
|
+
refreshAccessToken(input: {
|
|
75
|
+
refreshToken: string;
|
|
76
|
+
clientId: string;
|
|
77
|
+
clientSecret?: string;
|
|
78
|
+
}): Promise<TokenResponse>;
|
|
79
|
+
authenticateAccessToken(token: string): Promise<AuthenticatedToken | null>;
|
|
80
|
+
invalidateAuthCache(token: string): void;
|
|
81
|
+
/**
|
|
82
|
+
* Revoke a token per RFC 7009.
|
|
83
|
+
*
|
|
84
|
+
* Accepts either an access_token or refresh_token. Uses `tokenTypeHint`
|
|
85
|
+
* to try the likely type first, then falls back to the other. Always
|
|
86
|
+
* returns `ok: true` — callers must not reveal whether a token existed.
|
|
87
|
+
*
|
|
88
|
+
* For confidential clients, `clientId` + `clientSecret` must match the
|
|
89
|
+
* registered client. For public clients (PKCE), only `clientId` is needed.
|
|
90
|
+
*
|
|
91
|
+
* Returns `{ ok: true }` on success.
|
|
92
|
+
* Throws if `clientId` is unknown or credentials are invalid.
|
|
93
|
+
*/
|
|
94
|
+
revokeToken(input: {
|
|
95
|
+
token: string;
|
|
96
|
+
tokenTypeHint?: string;
|
|
97
|
+
clientId: string;
|
|
98
|
+
clientSecret?: string;
|
|
99
|
+
}): Promise<void>;
|
|
100
|
+
private issueTokens;
|
|
101
|
+
registerDynamicClient(input: {
|
|
102
|
+
redirectUris: string[];
|
|
103
|
+
clientName?: string;
|
|
104
|
+
tokenEndpointAuthMethod?: string;
|
|
105
|
+
grantTypes?: string[];
|
|
106
|
+
responseTypes?: string[];
|
|
107
|
+
scope?: string;
|
|
108
|
+
}): Promise<{
|
|
109
|
+
clientId: string;
|
|
110
|
+
redirectUris: string[];
|
|
111
|
+
tokenEndpointAuthMethod: string;
|
|
112
|
+
grantTypes: string[];
|
|
113
|
+
responseTypes: string[];
|
|
114
|
+
scope: string;
|
|
115
|
+
}>;
|
|
116
|
+
}
|
|
117
|
+
export {};
|
|
118
|
+
//# sourceMappingURL=oauth.d.ts.map
|