claude-flow 2.0.0-alpha.8 → 2.0.0-alpha.81

package/src/ui/extension/node_modules/@azure/msal-node/src/client/ClientCredentialClient.ts

@@ -2,7 +2,6 @@
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-
 import {
     AccessTokenEntity,
     AuthenticationResult,
@@ -40,14 +39,12 @@ import {
     ManagedIdentityConfiguration,
     ManagedIdentityNodeConfiguration,
 } from "../config/Configuration.js";
-
 /**
  * OAuth2.0 client credential grant
  * @public
  */
 export class ClientCredentialClient extends BaseClient {
     private readonly appTokenProvider?: IAppTokenProvider;
-
 constructor(
         configuration: ClientConfiguration,
         appTokenProvider?: IAppTokenProvider
@@ -55,7 +52,6 @@ constructor(
 constructor(configuration);
         this.appTokenProvider = appTokenProvider;
     }
-
     /**
      * Public API to acquire a token with ClientCredential Flow for Confidential clients
      * @param request - CommonClientCredentialRequest provided by the developer
@@ -66,7 +62,6 @@ constructor(configuration);
         if (request.skipCache || request.claims) {
             return this.executeTokenRequest(request, this.authority);
         }
-
         const [cachedAuthenticationResult, lastCacheOutcome] =
             await this.getCachedAuthenticationResult(
                 request,
@@ -76,14 +71,12 @@ constructor(configuration);
                 this.cacheManager,
                 this.serverTelemetryManager
             );
-
         if (cachedAuthenticationResult) {
             // if the token is not expired but must be refreshed; get a new one in the background
             if (lastCacheOutcome === CacheOutcome.PROACTIVELY_REFRESHED) {
                 this.logger.info(
                     "ClientCredentialClient:getCachedAuthenticationResult - Cached access token's refreshOn property has been exceeded'. It's not expired, but must be refreshed."
                 );
-
                 // refresh the access token in the background
                 const refreshAccessToken = true;
                 await this.executeTokenRequest(
@@ -92,14 +85,12 @@ constructor(configuration);
                     refreshAccessToken
                 );
             }
-
             // return the cached token
             return cachedAuthenticationResult;
         } else {
             return this.executeTokenRequest(request, this.authority);
         }
     }
-
     /**
      * looks up cache if the tokens are cached already
      */
@@ -114,11 +105,9 @@ constructor(configuration);
         const clientConfiguration = config as ClientConfiguration;
         const managedIdentityConfiguration =
             config as ManagedIdentityNodeConfiguration;
-
         let lastCacheOutcome: CacheOutcome = CacheOutcome.NOT_APPLICABLE;
-
         // read the user-supplied cache into memory, if applicable
-        let cacheContext;
+        let cacheContext; // TODO: Remove if unused
         if (
             clientConfiguration.serializableCache &&
             clientConfiguration.persistencePlugin
@@ -131,7 +120,6 @@ constructor(configuration);
                 cacheContext
             );
         }
-
         const cachedAccessToken = this.readAccessTokenFromCache(
             authority,
             managedIdentityConfiguration.managedIdentityId?.id ||
@@ -139,7 +127,6 @@ constructor(configuration);
             new ScopeSet(request.scopes || []),
             cacheManager
         );
-
         if (
             clientConfiguration.serializableCache &&
             clientConfiguration.persistencePlugin &&
@@ -149,7 +136,6 @@ constructor(configuration);
                 cacheContext
             );
         }
-
         // must refresh due to non-existent access_token
         if (!cachedAccessToken) {
             serverTelemetryManager?.setCacheOutcome(
@@ -157,7 +143,6 @@ constructor(configuration);
             );
             return [null, CacheOutcome.NO_CACHED_ACCESS_TOKEN];
         }
-
         // must refresh due to the expires_in value
         if (
             TimeUtils.isTokenExpired(
@@ -171,7 +156,6 @@ constructor(configuration);
             );
             return [null, CacheOutcome.CACHED_ACCESS_TOKEN_EXPIRED];
         }
-
         // must refresh (in the background) due to the refresh_in value
         if (
             cachedAccessToken.refreshOn &&
@@ -182,7 +166,6 @@ constructor(configuration);
                 CacheOutcome.PROACTIVELY_REFRESHED
             );
         }
-
         return [
             await ResponseHandler.generateAuthenticationResult(
                 cryptoUtils,
@@ -200,7 +183,6 @@ constructor(configuration);
             lastCacheOutcome,
         ];
     }
-
     /**
      * Reads access token from the cache
      */
@@ -219,7 +201,6 @@ constructor(configuration);
             realm: authority.tenant,
             target: ScopeSet.createSearchScopes(scopeSet.asArray()),
         };
-
         const accessTokens =
             cacheManager.getAccessTokensByFilter(accessTokenFilter);
         if (accessTokens.length < 1) {
@@ -231,7 +212,6 @@ constructor(configuration);
         }
         return accessTokens[0] as AccessTokenEntity;
     }
-
     /**
      * Makes a network call to request the token from the service
      * @param request - CommonClientCredentialRequest provided by the developer
@@ -242,24 +222,20 @@ constructor(configuration);
         authority: Authority,
         refreshAccessToken?: boolean
     ): Promise<AuthenticationResult | null> {
-        let serverTokenResponse: ServerAuthorizationTokenResponse;
-        let reqTimestamp: number;
-
+        let serverTokenResponse: ServerAuthorizationTokenResponse; // TODO: Remove if unused
+        let reqTimestamp: number; // TODO: Remove if unused
         if (this.appTokenProvider) {
             this.logger.info("Using appTokenProvider extensibility.");
-
             const appTokenPropviderParameters = {
                 correlationId: request.correlationId,
                 tenantId: this.config.authOptions.authority.tenant,
                 scopes: request.scopes,
                 claims: request.claims,
             };
-
             reqTimestamp = TimeUtils.nowSeconds();
             const appTokenProviderResult = await this.appTokenProvider(
                 appTokenPropviderParameters
             );
-
             serverTokenResponse = {
                 access_token: appTokenProviderResult.accessToken,
                 expires_in: appTokenProviderResult.expiresInSeconds,
@@ -273,7 +249,6 @@ constructor(configuration);
                 authority.tokenEndpoint,
                 queryParametersString
             );
-
             const requestBody = await this.createTokenRequestBody(request);
             const headers: Record<string, string> =
                 this.createTokenRequestHeaders();
@@ -288,11 +263,9 @@ constructor(configuration);
                 shrClaims: request.shrClaims,
                 sshKid: request.sshKid,
             };
-
             this.logger.info(
                 "Sending token request to endpoint: " + authority.tokenEndpoint
             );
-
             reqTimestamp = TimeUtils.nowSeconds();
             const response = await this.executePostToTokenEndpoint(
                 endpoint,
@@ -301,11 +274,9 @@ constructor(configuration);
                 thumbprint,
                 request.correlationId
             );
-
             serverTokenResponse = response.body;
             serverTokenResponse.status = response.status;
         }
-
         const responseHandler = new ResponseHandler(
             this.config.authOptions.clientId,
             this.cacheManager,
@@ -314,22 +285,18 @@ constructor(configuration);
             this.config.serializableCache,
             this.config.persistencePlugin
         );
-
         responseHandler.validateTokenResponse(
             serverTokenResponse,
             refreshAccessToken
         );
-
         const tokenResponse = await responseHandler.handleServerTokenResponse(
             serverTokenResponse,
             this.authority,
             reqTimestamp,
             request
         );
-
         return tokenResponse;
     }
-
     /**
      * generate the request to the server in the acceptable format
      * @param request - CommonClientCredentialRequest provided by the developer
@@ -338,19 +305,15 @@ constructor(configuration);
         request: CommonClientCredentialRequest
     ): Promise<string> {
         const parameters = new Map<string, string>();
-
         RequestParameterBuilder.addClientId(
             parameters,
             this.config.authOptions.clientId
         );
-
         RequestParameterBuilder.addScopes(parameters, request.scopes, false);
-
         RequestParameterBuilder.addGrantType(
             parameters,
             GrantType.CLIENT_CREDENTIALS_GRANT
         );
-
         RequestParameterBuilder.addLibraryInfo(
             parameters,
             this.config.libraryInfo
@@ -359,33 +322,27 @@ constructor(configuration);
             parameters,
             this.config.telemetry.application
         );
-
         RequestParameterBuilder.addThrottling(parameters);
-
         if (this.serverTelemetryManager) {
             RequestParameterBuilder.addServerTelemetry(
                 parameters,
                 this.serverTelemetryManager
             );
         }
-
         const correlationId =
             request.correlationId ||
             this.config.cryptoInterface.createNewGuid();
         RequestParameterBuilder.addCorrelationId(parameters, correlationId);
-
         if (this.config.clientCredentials.clientSecret) {
             RequestParameterBuilder.addClientSecret(
                 parameters,
                 this.config.clientCredentials.clientSecret
             );
         }
-
         // Use clientAssertion from request, fallback to client assertion in base configuration
         const clientAssertion: ClientAssertion | undefined =
             request.clientAssertion ||
             this.config.clientCredentials.clientAssertion;
-
         if (clientAssertion) {
             RequestParameterBuilder.addClientAssertion(
                 parameters,
@@ -400,7 +357,6 @@ constructor(configuration);
                 clientAssertion.assertionType
             );
         }
-
         if (
             !StringUtils.isEmptyObj(request.claims) ||
             (this.config.authOptions.clientCapabilities &&
@@ -412,7 +368,6 @@ constructor(configuration);
                 this.config.authOptions.clientCapabilities
             );
         }
-
         return UrlUtils.mapToQueryString(parameters);
     }
-}
+}

package/src/ui/extension/node_modules/@azure/msal-node/src/client/ConfidentialClientApplication.ts

@@ -3,9 +3,7 @@ import process from "node:process";
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-
 // AADAuthorityConstants
-
 import { ClientApplication } from "./ClientApplication.js";
 import { Configuration } from "../config/Configuration.js";
 import { ClientAssertion } from "./ClientAssertion.js";
@@ -36,7 +34,6 @@ import { OnBehalfOfRequest } from "../request/OnBehalfOfRequest.js";
 import { ClientCredentialRequest } from "../request/ClientCredentialRequest.js";
 import { ClientCredentialClient } from "./ClientCredentialClient.js";
 import { OnBehalfOfClient } from "./OnBehalfOfClient.js";
-
 /**
  *  This class is to be used to acquire tokens for confidential client applications (webApp, webAPI). Confidential client applications
  *  will configure application secrets, client certificates/assertions as applicable
@@ -47,7 +44,6 @@ export class ConfidentialClientApplication
     implements IConfidentialClientApplication
 {
     private appTokenProvider?: IAppTokenProvider;
-
     /**
      * Constructor for the ConfidentialClientApplication
      *
@@ -69,14 +65,12 @@ export class ConfidentialClientApplication
      */
 constructor(configuration: Configuration) {
 constructor(configuration);
-
         const clientSecretNotEmpty = !!this.config.auth.clientSecret;
         const clientAssertionNotEmpty = !!this.config.auth.clientAssertion;
         const certificateNotEmpty =
             (!!this.config.auth.clientCertificate?.thumbprint ||
                 !!this.config.auth.clientCertificate?.thumbprintSha256) &&
             !!this.config.auth.clientCertificate?.privateKey;
-
         /*
          * If app developer configures this callback, they don't need a credential
          * i.e. AzureSDK can get token from Managed Identity without a cert / secret
@@ -84,7 +78,6 @@ constructor(configuration);
         if (this.appTokenProvider) {
             return;
         }
-
         // Check that at most one credential is set on the application
         if (
             (clientSecretNotEmpty && clientAssertionNotEmpty) ||
@@ -95,18 +88,15 @@ constructor(configuration);
                 ClientAuthErrorCodes.invalidClientCredential
             );
         }
-
         if (this.config.auth.clientSecret) {
             this.clientSecret = this.config.auth.clientSecret;
             return;
         }
-
         if (this.config.auth.clientAssertion) {
             this.developerProvidedClientAssertion =
                 this.config.auth.clientAssertion;
             return;
         }
-
         if (!certificateNotEmpty) {
             throw createClientAuthError(
                 ClientAuthErrorCodes.invalidClientCredential
@@ -128,7 +118,6 @@ constructor(configuration);
         }
         this.appTokenProvider = undefined;
     }
-
     /**
      * This extensibility point only works for the client_credential flow, i.e. acquireTokenByClientCredential and
      * is meant for Azure SDK to enhance Managed Identity support.
@@ -138,7 +127,6 @@ constructor(configuration);
 constructor(provider: IAppTokenProvider): void {
         this.appTokenProvider = provider;
     }
-
     /**
      * Acquires tokens from the authority for the application (not for an end user).
      */
@@ -149,9 +137,8 @@ constructor(provider: IAppTokenProvider): void {
             "acquireTokenByClientCredential called",
             request.correlationId
         );
-
         // If there is a client assertion present in the request, it overrides the one present in the client configuration
-        let clientAssertion: ClientAssertionType | undefined;
+        let clientAssertion: ClientAssertionType | undefined; // TODO: Remove if unused
         if (request.clientAssertion) {
             clientAssertion = {
                 assertion: await getClientAssertion(
@@ -162,9 +149,7 @@ constructor(provider: IAppTokenProvider): void {
                 assertionType: NodeConstants.JWT_BEARER_ASSERTION_TYPE,
             };
         }
-
         const baseRequest = await this.initializeBaseRequest(request);
-
         // valid base request should not contain oidc scopes in this grant type
         const validBaseRequest = {
             ...baseRequest,
@@ -172,13 +157,11 @@ constructor(provider: IAppTokenProvider): void {
                 (scope: string) => !OIDC_DEFAULT_SCOPES.includes(scope)
             ),
         };
-
         const validRequest: CommonClientCredentialRequest = {
             ...request,
             ...validBaseRequest,
             clientAssertion,
         };
-
         /*
          * valid request should not have "common" or "organizations" in lieu of the tenant_id in the authority in the auth configuration
          * example authority: "https://login.microsoftonline.com/TenantId",
@@ -194,15 +177,13 @@ constructor(provider: IAppTokenProvider): void {
                 ClientAuthErrorCodes.missingTenantIdError
             );
         }
-
         /*
          * if this env variable is set, and the developer provided region isn't defined and isn't "DisableMsalForceRegion",
          * MSAL shall opt-in to ESTS-R with the value of this variable
          */
         const ENV_MSAL_FORCE_REGION: AzureRegion | undefined =
             process.env[MSAL_FORCE_REGION];
-
-        let region: AzureRegion | undefined;
+        let region: AzureRegion | undefined; // TODO: Remove if unused
         if (validRequest.azureRegion !== "DisableMsalForceRegion") {
             if (!validRequest.azureRegion && ENV_MSAL_FORCE_REGION) {
                 region = ENV_MSAL_FORCE_REGION;
@@ -210,12 +191,10 @@ constructor(provider: IAppTokenProvider): void {
                 region = validRequest.azureRegion;
             }
         }
-
         const azureRegionConfiguration: AzureRegionConfiguration = {
             azureRegion: region,
             environmentRegion: process.env[REGION_ENVIRONMENT_VARIABLE],
         };
-
         const serverTelemetryManager = this.initializeServerTelemetryManager(
             ApiId.acquireTokenByClientCredential,
             validRequest.correlationId,
@@ -252,7 +231,6 @@ constructor(provider: IAppTokenProvider): void {
             throw e;
         }
     }
-
     /**
      * Acquires tokens from the authority for the application.
      *
@@ -301,4 +279,4 @@ constructor(provider: IAppTokenProvider): void {
             throw e;
         }
     }
-}
+}

package/src/ui/extension/node_modules/@azure/msal-node/src/client/DeviceCodeClient.ts

@@ -2,7 +2,6 @@
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-
 import {
     AuthErrorCodes,
     AuthenticationResult,
@@ -25,7 +24,6 @@ import {
     createAuthError,
     createClientAuthError,
 } from "@azure/msal-common/node";
-
 /**
  * OAuth2.0 Device code client
  * @public
@@ -34,7 +32,6 @@ export class DeviceCodeClient extends BaseClient {
 constructor(configuration: ClientConfiguration) {
 constructor(configuration);
     }
-
     /**
      * Gets device code from device code endpoint, calls back to with device code response, and
      * polls token endpoint to exchange device code for tokens
@@ -50,7 +47,6 @@ constructor(configuration);
         const reqTimestamp = TimeUtils.nowSeconds();
         const response: ServerAuthorizationTokenResponse =
             await this.acquireTokenWithDeviceCode(request, deviceCodeResponse);
-
         const responseHandler = new ResponseHandler(
             this.config.authOptions.clientId,
             this.cacheManager,
@@ -59,7 +55,6 @@ constructor(configuration);
             this.config.serializableCache,
             this.config.persistencePlugin
         );
-
         // Validate response. This function throws a server error if an error is returned by the server.
         responseHandler.validateTokenResponse(response);
         return responseHandler.handleServerTokenResponse(
@@ -69,7 +64,6 @@ constructor(configuration);
             request
         );
     }
-
     /**
      * Creates device code request and executes http GET
      * @param request - developer provided CommonDeviceCodeRequest
@@ -95,7 +89,6 @@ constructor(configuration);
             shrClaims: request.shrClaims,
             sshKid: request.sshKid,
         };
-
         return this.executePostRequestToDeviceCodeEndpoint(
             endpoint,
             queryString,
@@ -104,7 +97,6 @@ constructor(configuration);
             request.correlationId
         );
     }
-
     /**
      * Creates query string for the device code request
      * @param request - developer provided CommonDeviceCodeRequest
@@ -113,17 +105,14 @@ constructor(configuration);
         request: CommonDeviceCodeRequest
     ): string {
         const parameters = new Map<string, string>();
-
         if (request.extraQueryParameters) {
             RequestParameterBuilder.addExtraQueryParameters(
                 parameters,
                 request.extraQueryParameters
             );
         }
-
         return UrlUtils.mapToQueryString(parameters);
     }
-
     /**
      * Executes POST request to device code endpoint
      * @param deviceCodeEndpoint - token endpoint
@@ -139,7 +128,7 @@ constructor(configuration);
         thumbprint: RequestThumbprint,
         correlationId: string
     ): Promise<DeviceCodeResponse> {
-        const {
+        const { // TODO: Remove if unused
             body: {
                 user_code: userCode,
                 device_code: deviceCode,
@@ -157,7 +146,6 @@ constructor(configuration);
             },
             correlationId
         );
-
         return {
             userCode,
             deviceCode,
@@ -167,27 +155,23 @@ constructor(configuration);
             message,
         };
     }
-
     /**
      * Create device code endpoint query parameters and returns string
      * @param request - developer provided CommonDeviceCodeRequest
      */
     private createQueryString(request: CommonDeviceCodeRequest): string {
         const parameters = new Map<string, string>();
-
         RequestParameterBuilder.addScopes(parameters, request.scopes);
         RequestParameterBuilder.addClientId(
             parameters,
             this.config.authOptions.clientId
         );
-
         if (request.extraQueryParameters) {
             RequestParameterBuilder.addExtraQueryParameters(
                 parameters,
                 request.extraQueryParameters
             );
         }
-
         if (
             request.claims ||
             (this.config.authOptions.clientCapabilities &&
@@ -199,10 +183,8 @@ constructor(configuration);
                 this.config.authOptions.clientCapabilities
             );
         }
-
         return UrlUtils.mapToQueryString(parameters);
     }
-
     /**
      * Breaks the polling with specific conditions
      * @param deviceCodeExpirationTime - expiration time for the device code request
@@ -245,7 +227,6 @@ constructor(configuration);
         }
         return true;
     }
-
     /**
      * Creates token request with device code response and polls token endpoint at interval set by the device code response
      * @param request - developer provided CommonDeviceCodeRequest
@@ -266,14 +247,12 @@ constructor(configuration);
         );
         const headers: Record<string, string> =
             this.createTokenRequestHeaders();
-
         const userSpecifiedTimeout = request.timeout
             ? TimeUtils.nowSeconds() + request.timeout
             : undefined;
         const deviceCodeExpirationTime =
             TimeUtils.nowSeconds() + deviceCodeResponse.expiresIn;
         const pollingIntervalMilli = deviceCodeResponse.interval * 1000;
-
         /*
          * Poll token endpoint while (device code is not expired AND operation has not been cancelled by
          * setting CancellationToken.cancel = true). POST request is sent at interval set by pollingIntervalMilli
@@ -303,7 +282,6 @@ constructor(configuration);
                 thumbprint,
                 request.correlationId
             );
-
             if (response.body && response.body.error) {
                 // user authorization is pending. Sleep for polling interval and try again
                 if (response.body.error === Constants.AUTHORIZATION_PENDING) {
@@ -328,7 +306,6 @@ constructor(configuration);
                 return response.body;
             }
         }
-
         /*
          * The above code should've thrown by this point, but to satisfy TypeScript,
          * and in the rare case the conditionals in continuePolling() may not catch everything...
@@ -338,7 +315,6 @@ constructor(configuration);
             ClientAuthErrorCodes.deviceCodeUnknownError
         );
     }
-
     /**
      * Creates query parameters and converts to string.
      * @param request - developer provided CommonDeviceCodeRequest
@@ -349,7 +325,6 @@ constructor(configuration);
         deviceCodeResponse: DeviceCodeResponse
     ): string {
         const parameters = new Map<string, string>();
-
         RequestParameterBuilder.addScopes(parameters, request.scopes);
         RequestParameterBuilder.addClientId(
             parameters,
@@ -383,7 +358,6 @@ constructor(configuration);
                 this.serverTelemetryManager
             );
         }
-
         if (
             !StringUtils.isEmptyObj(request.claims) ||
             (this.config.authOptions.clientCapabilities &&
@@ -397,4 +371,4 @@ constructor(configuration);
         }
         return UrlUtils.mapToQueryString(parameters);
     }
-}
+}