codeply-cli 0.2.0 → 0.3.1

package/lib/oauth-connectors.js

@@ -0,0 +1,478 @@
+/**
+ * Codeply - Gmail and Slack OAuth + the real API calls the agent's tools use.
+ *
+ * Desktop-app OAuth (RFC 8252): the consent screen opens in the user's real
+ * system browser, not an embedded webview, and the redirect is caught by a
+ * short-lived local HTTP server on a fixed loopback port - Real App/main.js
+ * owns spinning that server up/down; this file only builds URLs and talks to
+ * the providers' token/API endpoints. No secrets are ever logged.
+ */
+const GMAIL_SCOPES = 'https://www.googleapis.com/auth/gmail.readonly https://www.googleapis.com/auth/gmail.send';
+// channels:join is what lets slackPostMessage auto-join a public channel
+// before posting to it - without it, chat:write alone only covers channels
+// the app has already been manually invited into.
+const SLACK_SCOPES = 'chat:write,channels:read,channels:history,channels:join';
+// Separate from the bot scopes above - Slack issues bot and user tokens
+// through entirely different mechanisms in the same OAuth exchange. `scope`
+// requests the bot token (posts as "Codeply Craft APP"); `user_scope`
+// requests a second, independent token that posts as the actual signed-in
+// user. Both come back in one authorize round-trip, but they're genuinely
+// two different tokens with two different scope sets.
+const SLACK_USER_SCOPES = 'chat:write';
+
+function buildGmailAuthUrl(clientId, redirectUri) {
+  const params = new URLSearchParams({
+    client_id: clientId,
+    redirect_uri: redirectUri,
+    response_type: 'code',
+    scope: GMAIL_SCOPES,
+    access_type: 'offline', // required to get a refresh_token back
+    prompt: 'consent', // forces the refresh_token every time, not just first connect
+  });
+  return `https://accounts.google.com/o/oauth2/v2/auth?${params}`;
+}
+
+async function exchangeGmailCode(clientId, clientSecret, code, redirectUri) {
+  const res = await fetch('https://oauth2.googleapis.com/token', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+    body: new URLSearchParams({
+      client_id: clientId, client_secret: clientSecret, code,
+      redirect_uri: redirectUri, grant_type: 'authorization_code',
+    }),
+  });
+  const body = await res.json();
+  if (!res.ok) throw new Error(body.error_description || body.error || `Gmail token exchange failed (HTTP ${res.status})`);
+  return body; // { access_token, refresh_token, expires_in, ... }
+}
+
+async function refreshGmailToken(clientId, clientSecret, refreshToken) {
+  const res = await fetch('https://oauth2.googleapis.com/token', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+    body: new URLSearchParams({
+      client_id: clientId, client_secret: clientSecret,
+      refresh_token: refreshToken, grant_type: 'refresh_token',
+    }),
+  });
+  const body = await res.json();
+  if (!res.ok) throw new Error(body.error_description || body.error || `Gmail token refresh failed (HTTP ${res.status})`);
+  return body; // { access_token, expires_in, ... } - no new refresh_token on refresh
+}
+
+async function getGmailProfile(accessToken) {
+  const res = await fetch('https://www.googleapis.com/gmail/v1/users/me/profile', {
+    headers: { Authorization: `Bearer ${accessToken}` },
+  });
+  const body = await res.json();
+  if (!res.ok) throw new Error(body.error?.message || `Gmail profile lookup failed (HTTP ${res.status})`);
+  return body.emailAddress;
+}
+
+function base64UrlEncode(str) {
+  return Buffer.from(str, 'utf8').toString('base64').replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+
+async function gmailSend(accessToken, { to, subject, body }) {
+  const raw = base64UrlEncode(`To: ${to}\r\nSubject: ${subject}\r\nContent-Type: text/plain; charset="UTF-8"\r\n\r\n${body}`);
+  const res = await fetch('https://www.googleapis.com/gmail/v1/users/me/messages/send', {
+    method: 'POST',
+    headers: { Authorization: `Bearer ${accessToken}`, 'Content-Type': 'application/json' },
+    body: JSON.stringify({ raw }),
+  });
+  const data = await res.json();
+  if (!res.ok) throw new Error(data.error?.message || `Gmail send failed (HTTP ${res.status})`);
+  return data; // { id, threadId, ... }
+}
+
+async function gmailSearch(accessToken, query, maxResults = 10) {
+  const params = new URLSearchParams({ q: query, maxResults: String(maxResults) });
+  const res = await fetch(`https://www.googleapis.com/gmail/v1/users/me/messages?${params}`, {
+    headers: { Authorization: `Bearer ${accessToken}` },
+  });
+  const list = await res.json();
+  if (!res.ok) throw new Error(list.error?.message || `Gmail search failed (HTTP ${res.status})`);
+  if (!list.messages?.length) return [];
+  // The list endpoint only returns bare ids - each result needs its own
+  // fetch for subject/from/snippet, capped by maxResults so a broad query
+  // can't fan out into dozens of requests.
+  const details = await Promise.all(list.messages.map(async (m) => {
+    const r = await fetch(
+      `https://www.googleapis.com/gmail/v1/users/me/messages/${m.id}?format=metadata&metadataHeaders=Subject&metadataHeaders=From&metadataHeaders=Date`,
+      { headers: { Authorization: `Bearer ${accessToken}` } },
+    );
+    const msg = await r.json();
+    const header = (name) => msg.payload?.headers?.find((h) => h.name === name)?.value || '';
+    return { id: m.id, subject: header('Subject'), from: header('From'), date: header('Date'), snippet: msg.snippet || '' };
+  }));
+  return details;
+}
+
+function buildSlackAuthUrl(clientId, redirectUri) {
+  const params = new URLSearchParams({
+    client_id: clientId, redirect_uri: redirectUri,
+    scope: SLACK_SCOPES, user_scope: SLACK_USER_SCOPES,
+  });
+  return `https://slack.com/oauth/v2/authorize?${params}`;
+}
+
+async function exchangeSlackCode(clientId, clientSecret, code, redirectUri) {
+  const res = await fetch('https://slack.com/api/oauth.v2.access', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+    body: new URLSearchParams({ client_id: clientId, client_secret: clientSecret, code, redirect_uri: redirectUri }),
+  });
+  const body = await res.json();
+  // Slack's OAuth endpoint returns HTTP 200 even on failure - ok:false in the body is the real signal.
+  if (!body.ok) throw new Error(body.error || 'Slack token exchange failed');
+  return body; // { access_token, team: { id, name }, ... }
+}
+
+/** Public-channel-only equivalent of clicking "Join channel" in Slack. Idempotent - already_in_channel is fine. */
+async function slackJoinChannel(accessToken, channelId) {
+  const res = await fetch('https://slack.com/api/conversations.join', {
+    method: 'POST',
+    headers: { Authorization: `Bearer ${accessToken}`, 'Content-Type': 'application/json' },
+    body: JSON.stringify({ channel: channelId }),
+  });
+  const body = await res.json();
+  if (!body.ok && body.error !== 'already_in_channel') throw new Error(body.error || 'Could not join the channel');
+}
+
+async function slackPostMessage(accessToken, { channel, text }, { isUserToken = false } = {}) {
+  // A bot token's chat:write only covers channels the app has actually
+  // joined - not "any public channel" the way a human member can post to.
+  // Auto-joining first (public channels only; that's all resolveSlackChannel
+  // in tools.mjs ever resolves to) means the agent can post to a channel the
+  // very first time it's asked to, instead of failing with not_in_channel
+  // until someone manually runs /invite in Slack. Joining a channel it's
+  // already in is a harmless no-op (already_in_channel), so this doesn't
+  // need to track membership itself - just always try.
+  //
+  // A user token is different: it posts as an actual workspace member, who
+  // either already belongs to the channel or doesn't - conversations.join
+  // isn't the right operation for a user identity the way it is for a bot,
+  // so this is skipped entirely on that path.
+  if (!isUserToken) await slackJoinChannel(accessToken, channel);
+
+  const res = await fetch('https://slack.com/api/chat.postMessage', {
+    method: 'POST',
+    headers: { Authorization: `Bearer ${accessToken}`, 'Content-Type': 'application/json' },
+    body: JSON.stringify({ channel, text }),
+  });
+  const body = await res.json();
+  if (!body.ok) throw new Error(body.error || 'Slack message failed to send');
+  return body;
+}
+
+async function slackListChannels(accessToken) {
+  // public_channel only - private_channel requires the separate groups:read
+  // scope, which isn't part of the bot scope set this app asks for
+  // (chat:write, channels:read, channels:history). Slack rejects the WHOLE
+  // conversations.list call with missing_scope if any requested type isn't
+  // covered, not just the private-channel portion - so asking for a type we
+  // don't have scope for breaks lookup even for public channels the bot can
+  // see fine, which is exactly what was happening here.
+  const res = await fetch('https://slack.com/api/conversations.list?types=public_channel&limit=100', {
+    headers: { Authorization: `Bearer ${accessToken}` },
+  });
+  const body = await res.json();
+  if (!body.ok) throw new Error(body.error || 'Slack channel list failed');
+  return (body.channels || []).map((c) => ({ id: c.id, name: c.name, isPrivate: c.is_private, isMember: c.is_member }));
+}
+
+// Vercel Integrations Console apps do NOT use a plain /oauth/authorize?
+// client_id=... URL - that endpoint belongs to a different, older Vercel
+// OAuth app system and rejects Integrations Console client IDs outright
+// ("App configuration error: The app ID is invalid"). An integration created
+// in the Integrations Console starts its install at this slug-based URL
+// instead (found on the integration's own Console settings page, not
+// derived from client_id), and Vercel redirects back to whichever Redirect
+// URL is configured in the Console (already this app's loopback callback)
+// with ?code=... (and &teamId=... when installed to a team). The code
+// exchange step below is unchanged - that part of the flow really is the
+// same as the old system.
+function buildVercelAuthUrl(slug, state) {
+  const params = new URLSearchParams();
+  if (state) params.set('state', state);
+  const qs = params.toString();
+  return `https://vercel.com/integrations/${encodeURIComponent(slug)}/new${qs ? `?${qs}` : ''}`;
+}
+
+async function exchangeVercelCode(clientId, clientSecret, code, redirectUri) {
+  const res = await fetch('https://api.vercel.com/v2/oauth/access_token', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+    body: new URLSearchParams({ client_id: clientId, client_secret: clientSecret, code, redirect_uri: redirectUri }),
+  });
+  const body = await res.json();
+  if (!res.ok) throw new Error(body.error?.message || body.error || `Vercel token exchange failed (HTTP ${res.status})`);
+  return body; // { access_token, team_id, user_id, ... }
+}
+
+async function getVercelProfile(accessToken) {
+  const res = await fetch('https://api.vercel.com/v2/user', {
+    headers: { Authorization: `Bearer ${accessToken}` },
+  });
+  const body = await res.json();
+  if (!res.ok) throw new Error(body.error?.message || `Vercel profile lookup failed (HTTP ${res.status})`);
+  return body.user?.username || body.user?.email || '';
+}
+
+// Supabase's Management API OAuth2 flow (supabase.com/docs/guides/platform/oauth-apps):
+// authorize/token both live under api.supabase.com, token exchange uses HTTP
+// Basic auth (client_id:client_secret) rather than form-body credentials.
+const SUPABASE_SCOPES = 'all';
+
+function buildSupabaseAuthUrl(clientId, redirectUri) {
+  const params = new URLSearchParams({
+    client_id: clientId, redirect_uri: redirectUri,
+    response_type: 'code', scope: SUPABASE_SCOPES,
+  });
+  return `https://api.supabase.com/v1/oauth/authorize?${params}`;
+}
+
+async function exchangeSupabaseCode(clientId, clientSecret, code, redirectUri) {
+  const basic = Buffer.from(`${clientId}:${clientSecret}`).toString('base64');
+  const res = await fetch('https://api.supabase.com/v1/oauth/token', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/x-www-form-urlencoded', Authorization: `Basic ${basic}` },
+    body: new URLSearchParams({ code, grant_type: 'authorization_code', redirect_uri: redirectUri }),
+  });
+  const body = await res.json();
+  if (!res.ok) throw new Error(body.error_description || body.error || `Supabase token exchange failed (HTTP ${res.status})`);
+  return body; // { access_token, refresh_token, expires_in, ... }
+}
+
+// Non-git deployment: upload isn't needed for small projects - files are
+// inlined as base64 directly in the create-deployment body (Vercel's REST API
+// supports both an inline `data`+`encoding` file or a reference to one
+// pre-uploaded via /v2/files; inlining avoids a second round-trip per file
+// and this app only ever deploys folders small enough for that to be fine).
+async function vercelDeploy(accessToken, teamId, projectName, files) {
+  // A brand-new project (no projectSettings passed - framework is left to
+  // Vercel's own auto-detection) otherwise gets rejected with "projectSettings
+  // is required... or use skipAutoDetectionConfirmation=1" on its first-ever
+  // deploy, since Vercel wants an explicit confirmation step before it'll
+  // guess the framework unattended.
+  const params = new URLSearchParams({ skipAutoDetectionConfirmation: '1' });
+  if (teamId) params.set('teamId', teamId);
+  const res = await fetch(`https://api.vercel.com/v13/deployments${params.toString() ? `?${params}` : ''}`, {
+    method: 'POST',
+    headers: { Authorization: `Bearer ${accessToken}`, 'Content-Type': 'application/json' },
+    body: JSON.stringify({ name: projectName, target: 'production', files }),
+  });
+  const body = await res.json();
+  if (!res.ok) throw new Error(body.error?.message || body.error_description || `Vercel deploy failed (HTTP ${res.status})`);
+  return body; // { id, url, readyState, ... }
+}
+
+/** Bulk-create/update project env vars - `vars` is [{ key, value }]. `type: 'encrypted'` hides values in the dashboard by default, same as a normal manual entry. */
+async function vercelSetEnvVars(accessToken, teamId, projectIdOrName, vars) {
+  const params = new URLSearchParams({ upsert: 'true' });
+  if (teamId) params.set('teamId', teamId);
+  const res = await fetch(`https://api.vercel.com/v10/projects/${encodeURIComponent(projectIdOrName)}/env?${params}`, {
+    method: 'POST',
+    headers: { Authorization: `Bearer ${accessToken}`, 'Content-Type': 'application/json' },
+    body: JSON.stringify(vars.map((v) => ({
+      key: v.key, value: v.value, type: 'encrypted', target: ['production', 'preview', 'development'],
+    }))),
+  });
+  const body = await res.json();
+  if (!res.ok) throw new Error(body.error?.message || `Vercel env var update failed (HTTP ${res.status})`);
+  return body; // { created, failed: [...] }
+}
+
+async function supabaseListOrganizations(accessToken) {
+  const res = await fetch('https://api.supabase.com/v1/organizations', {
+    headers: { Authorization: `Bearer ${accessToken}` },
+  });
+  const body = await res.json();
+  if (!res.ok) throw new Error(body.message || `Supabase organization lookup failed (HTTP ${res.status})`);
+  return body; // [{ id, slug, name }]
+}
+
+const SUPABASE_PROVISION_POLL_MS = 5000;
+const SUPABASE_PROVISION_TIMEOUT_MS = 3 * 60 * 1000;
+
+/**
+ * Project creation is asynchronous - the initial response comes back
+ * `status: "INACTIVE"` while Supabase provisions the database, so this polls
+ * until it flips to `ACTIVE_HEALTHY` (or gives up after the timeout; the
+ * project still exists at that point, it's just not confirmed ready yet).
+ */
+async function supabaseCreateProject(accessToken, { name, organizationSlug, dbPass, region = 'us-east-1' }) {
+  const res = await fetch('https://api.supabase.com/v1/projects', {
+    method: 'POST',
+    headers: { Authorization: `Bearer ${accessToken}`, 'Content-Type': 'application/json' },
+    // Despite older docs listing it as optional, the API now rejects project
+    // creation without exactly one of region/region_selection set.
+    body: JSON.stringify({ name, organization_slug: organizationSlug, db_pass: dbPass, region }),
+  });
+  let project = await res.json();
+  if (!res.ok) throw new Error(project.message || `Supabase project creation failed (HTTP ${res.status})`);
+
+  const ref = project.ref;
+  const deadline = Date.now() + SUPABASE_PROVISION_TIMEOUT_MS;
+  while (project.status !== 'ACTIVE_HEALTHY' && Date.now() < deadline) {
+    await new Promise((r) => setTimeout(r, SUPABASE_PROVISION_POLL_MS));
+    const pr = await fetch(`https://api.supabase.com/v1/projects/${ref}`, { headers: { Authorization: `Bearer ${accessToken}` } });
+    project = await pr.json();
+    if (!pr.ok) throw new Error(project.message || `Supabase project status check failed (HTTP ${pr.status})`);
+  }
+  if (project.status !== 'ACTIVE_HEALTHY') {
+    throw new Error(`Project ${ref} is still provisioning (status: ${project.status}) after ${SUPABASE_PROVISION_TIMEOUT_MS / 1000}s - it will likely finish shortly; check the Supabase dashboard.`);
+  }
+  return project; // { ref, name, status, ... }
+}
+
+async function supabaseListProjects(accessToken) {
+  const res = await fetch('https://api.supabase.com/v1/projects', {
+    headers: { Authorization: `Bearer ${accessToken}` },
+  });
+  const body = await res.json();
+  if (!res.ok) throw new Error(body.message || `Supabase project list failed (HTTP ${res.status})`);
+  return body; // [{ id, organization_id, name, ref, status, region, ... }]
+}
+
+/** Permanent, irreversible - Supabase does not soft-delete or restore a removed project. */
+async function supabaseDeleteProject(accessToken, ref) {
+  const res = await fetch(`https://api.supabase.com/v1/projects/${ref}`, {
+    method: 'DELETE',
+    headers: { Authorization: `Bearer ${accessToken}` },
+  });
+  if (res.status === 204 || res.status === 200) return true;
+  const body = await res.json().catch(() => ({}));
+  throw new Error(body.message || `Supabase project deletion failed (HTTP ${res.status})`);
+}
+
+/** anon/public key + project URL + DB connection string. The connection string is built locally (not fetched) since dbPass was chosen by the caller, not returned by the API. */
+async function supabaseGetProjectKeys(accessToken, ref, dbPass) {
+  const res = await fetch(`https://api.supabase.com/v1/projects/${ref}/api-keys?reveal=true`, {
+    headers: { Authorization: `Bearer ${accessToken}` },
+  });
+  const keys = await res.json();
+  if (!res.ok) throw new Error(keys.message || `Supabase API key lookup failed (HTTP ${res.status})`);
+  const anon = keys.find((k) => /^anon$/i.test(k.name || '') || /anon|publishable/i.test(k.name || k.type || ''));
+  if (!anon?.api_key) throw new Error(`Project ${ref} has no anon/public key yet - it may still be finishing setup.`);
+  return {
+    url: `https://${ref}.supabase.co`,
+    anonKey: anon.api_key,
+    databaseUrl: `postgresql://postgres:${dbPass}@db.${ref}.supabase.co:5432/postgres`,
+  };
+}
+
+/** Supabase OAuth access tokens expire; the refresh token doesn't (until revoked). */
+async function refreshSupabaseToken(clientId, clientSecret, refreshToken) {
+  const basic = Buffer.from(`${clientId}:${clientSecret}`).toString('base64');
+  const res = await fetch('https://api.supabase.com/v1/oauth/token', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/x-www-form-urlencoded', Authorization: `Basic ${basic}` },
+    body: new URLSearchParams({ grant_type: 'refresh_token', refresh_token: refreshToken }),
+  });
+  const body = await res.json().catch(() => ({}));
+  if (!res.ok) throw new Error(body.error_description || body.error || `Supabase token refresh failed (HTTP ${res.status})`);
+  return body; // { access_token, refresh_token, expires_in }
+}
+
+const API_TIMEOUT_MS = 60_000;
+
+/**
+ * Generic authenticated JSON call used by the agent's full-access tools
+ * (supabase_api / vercel_api). Returns { ok, status, body } and never throws
+ * for an HTTP error - the status and the provider's own error body are
+ * exactly what the agent needs to see to fix its request.
+ */
+async function apiCall(base, accessToken, method, apiPath, body, query) {
+  const cleanPath = '/' + String(apiPath || '').replace(/^\/+/, '');
+  const url = new URL(base + cleanPath);
+  for (const [k, v] of Object.entries(query || {})) {
+    if (v !== undefined && v !== null && v !== '' && !url.searchParams.has(k)) url.searchParams.set(k, v);
+  }
+  const init = {
+    method,
+    headers: { Authorization: `Bearer ${accessToken}`, Accept: 'application/json' },
+    signal: AbortSignal.timeout(API_TIMEOUT_MS),
+  };
+  if (body !== undefined && body !== null && body !== '' && method !== 'GET' && method !== 'HEAD') {
+    init.headers['Content-Type'] = 'application/json';
+    init.body = typeof body === 'string' ? body : JSON.stringify(body);
+  }
+  const res = await fetch(url, init);
+  const text = await res.text();
+  let parsed = text;
+  try { parsed = text ? JSON.parse(text) : null; } catch {}
+  return { ok: res.ok, status: res.status, body: parsed, url: url.toString() };
+}
+
+function supabaseApi(accessToken, method, apiPath, body) {
+  return apiCall('https://api.supabase.com', accessToken, method, apiPath, body);
+}
+
+/** Runs SQL against a project's Postgres through the Management API. */
+function supabaseQuery(accessToken, ref, query) {
+  return apiCall('https://api.supabase.com', accessToken, 'POST', `/v1/projects/${encodeURIComponent(ref)}/database/query`, { query });
+}
+
+/** teamId is appended automatically when the connection was installed to a team. */
+function vercelApi(accessToken, teamId, method, apiPath, body) {
+  return apiCall('https://api.vercel.com', accessToken, method, apiPath, body, { teamId });
+}
+
+// GitHub's standard OAuth Apps flow (docs.github.com/apps/oauth-apps) - much
+// simpler registration than Vercel/Supabase: no scopes picker or store
+// listing, just a name + callback URL. `repo` scope is what lets
+// githubCreateRepo actually create repositories under the connected account.
+const GITHUB_SCOPES = 'repo gist';
+
+function buildGithubAuthUrl(clientId, redirectUri, state) {
+  const params = new URLSearchParams({ client_id: clientId, redirect_uri: redirectUri, scope: GITHUB_SCOPES });
+  if (state) params.set('state', state);
+  return `https://github.com/login/oauth/authorize?${params}`;
+}
+
+async function exchangeGithubCode(clientId, clientSecret, code, redirectUri) {
+  const res = await fetch('https://github.com/login/oauth/access_token', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/x-www-form-urlencoded', Accept: 'application/json' },
+    body: new URLSearchParams({ client_id: clientId, client_secret: clientSecret, code, redirect_uri: redirectUri }),
+  });
+  const body = await res.json();
+  if (!res.ok || body.error) throw new Error(body.error_description || body.error || `GitHub token exchange failed (HTTP ${res.status})`);
+  return body; // { access_token, scope, token_type }
+}
+
+async function getGithubProfile(accessToken) {
+  const res = await fetch('https://api.github.com/user', {
+    headers: { Authorization: `Bearer ${accessToken}`, Accept: 'application/vnd.github+json' },
+  });
+  const body = await res.json();
+  if (!res.ok) throw new Error(body.message || `GitHub profile lookup failed (HTTP ${res.status})`);
+  return body.login || '';
+}
+
+/** Creates a new repo under the connected user's account. Defaults to private - safer for an arbitrary local folder than defaulting public. */
+async function githubCreateRepo(accessToken, name, { private: isPrivate = true } = {}) {
+  const res = await fetch('https://api.github.com/user/repos', {
+    method: 'POST',
+    headers: {
+      Authorization: `Bearer ${accessToken}`,
+      Accept: 'application/vnd.github+json',
+      'Content-Type': 'application/json',
+      'X-GitHub-Api-Version': '2022-11-28',
+    },
+    body: JSON.stringify({ name, private: isPrivate }),
+  });
+  const body = await res.json();
+  if (!res.ok) throw new Error(body.message || `GitHub repo creation failed (HTTP ${res.status})`);
+  return body; // { name, full_name, html_url, clone_url, default_branch, ... }
+}
+
+module.exports = {
+  buildGmailAuthUrl, exchangeGmailCode, refreshGmailToken, getGmailProfile, gmailSend, gmailSearch,
+  buildSlackAuthUrl, exchangeSlackCode, slackPostMessage, slackListChannels, slackJoinChannel,
+  buildVercelAuthUrl, exchangeVercelCode, getVercelProfile, vercelDeploy, vercelSetEnvVars,
+  buildSupabaseAuthUrl, exchangeSupabaseCode, refreshSupabaseToken, supabaseListOrganizations, supabaseCreateProject, supabaseGetProjectKeys,
+  supabaseListProjects, supabaseDeleteProject, supabaseApi, supabaseQuery, vercelApi,
+  buildGithubAuthUrl, exchangeGithubCode, getGithubProfile, githubCreateRepo,
+};

package/lib/permissions.js

@@ -0,0 +1,109 @@
+/**
+ * Standing permission rules, set once in a file instead of clicked per chat.
+ *
+ *   ~/.codeply/permissions.json            (every project)
+ *   <project>/.codeply/permissions.json    (this project, checked first)
+ *
+ *   {
+ *     "deny":  ["run:git push*", "run:rm*", "write_file:*.env", "supabase_delete_project"],
+ *     "allow": ["run:npm test", "run:npm run *", "run:git status", "edit_file:src/**"]
+ *   }
+ *
+ * A rule is "<tool>" or "<tool>:<pattern>". For run the pattern matches the
+ * command's name (npm run dev, git checkout) and the full command line; for
+ * file tools it matches the path relative to the project. * matches within a
+ * path segment, ** across them, and a trailing " *" also matches the bare
+ * command. Deny beats allow; project rules beat global ones; anything no rule
+ * mentions is asked as usual. Evaluation is the same idea as opencode's
+ * permission/ rulesets.
+ */
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+
+function readRules(file) {
+  try {
+    const j = JSON.parse(fs.readFileSync(file, 'utf8'));
+    const list = (k) => (Array.isArray(j[k]) ? j[k].map(String).filter(Boolean) : []);
+    return { allow: list('allow'), deny: list('deny') };
+  } catch { return { allow: [], deny: [] }; }
+}
+
+function wildcard(pattern) {
+  let re = '';
+  for (let i = 0; i < pattern.length; i++) {
+    const c = pattern[i];
+    if (c === '*' && pattern[i + 1] === '*') { re += '.*'; i++; }
+    else if (c === '*') re += '[^/]*';
+    else if (c === '?') re += '.';
+    else re += c.replace(/[.+^${}()|[\]\\]/g, '\\$&');
+  }
+  // "npm run *" should also cover plain "npm run".
+  re = re.replace(/ \[\^\/\]\*$/, '(?: .*)?').replace(/ \.\*$/, '(?: .*)?');
+  return new RegExp(`^${re}$`, process.platform === 'win32' ? 'i' : '');
+}
+
+/** Strings a request can be matched against for its tool. */
+function subjects(req, cwd) {
+  if (req.tool === 'run') {
+    const cmd = String(req.detail || '').trim();
+    // Commands match by name AND as full text, so "run:npm run *" and
+    // "run:git push*" both work.
+    return { cmd, names: Array.isArray(req.patterns) ? req.patterns : [] };
+  }
+  if (req.path) {
+    const abs = path.isAbsolute(req.path) ? req.path : path.resolve(cwd || '.', req.path);
+    const rel = path.relative(cwd || '.', abs).replace(/\\/g, '/');
+    return { path: rel.startsWith('..') ? abs.replace(/\\/g, '/') : rel };
+  }
+  return {};
+}
+
+function ruleMatches(rule, req, subj) {
+  const i = rule.indexOf(':');
+  const tool = (i === -1 ? rule : rule.slice(0, i)).trim();
+  const pattern = i === -1 ? null : rule.slice(i + 1).trim();
+  if (tool !== req.tool && tool !== '*') return false;
+  if (!pattern || pattern === '*') return true;
+  const re = wildcard(pattern);
+  if (req.tool === 'run') {
+    if (re.test(subj.cmd)) return true;
+    // For allow on a compound command every part must be covered (checked by
+    // the caller); here a single name matching is enough to count.
+    return subj.names.some((n) => re.test(n));
+  }
+  return subj.path ? re.test(subj.path) : false;
+}
+
+/**
+ * @param {object} req  the approval request ({tool, detail, patterns, path, danger})
+ * @returns {{decision: 'allow'|'deny'|null, rule?: string, file?: string}}
+ */
+function decide(req, cwd) {
+  const files = [cwd && path.join(cwd, '.codeply', 'permissions.json'), path.join(os.homedir(), '.codeply', 'permissions.json')].filter(Boolean);
+  const sets = files.map((f) => ({ file: f, ...readRules(f) }));
+  const subj = subjects(req, cwd);
+  for (const s of sets) {
+    const hit = s.deny.find((r) => ruleMatches(r, req, subj));
+    if (hit) return { decision: 'deny', rule: hit, file: s.file };
+  }
+  // Risky-looking commands (rm -rf, format, curl | sh...) always ask.
+  if (req.danger) return { decision: null };
+  for (const s of sets) {
+    if (req.tool === 'run') {
+      // Allow is judged per command, never on the whole line: "npm run *"
+      // must not let "npm run build && npm install" through. A line that
+      // can't be split into named commands (subshells, redirects) is never
+      // auto-allowed.
+      if (!subj.names.length) continue;
+      const parts = subj.names.length === 1 ? [{ cmd: subj.cmd, names: subj.names }] : subj.names.map((n) => ({ cmd: n, names: [n] }));
+      if (parts.every((p) => s.allow.some((r) => ruleMatches(r, req, p)))) return { decision: 'allow', rule: 'allow rules', file: s.file };
+      continue;
+    }
+    const hit = s.allow.find((r) => ruleMatches(r, req, subj));
+    if (hit) return { decision: 'allow', rule: hit, file: s.file };
+  }
+  return { decision: null };
+}
+
+module.exports = { decide, wildcard };