dazzer-connect 0.1.0 → 0.2.0

package/dist/lib/output.js

@@ -1,79 +0,0 @@
-function writeOut(message) {
-    process.stdout.write(`${message}\n`);
-}
-function writeErr(message) {
-    process.stderr.write(`${message}\n`);
-}
-/** Prints device-flow instructions for the user to complete in a browser. */
-export function printDeviceInstructions(deviceAuth) {
-    writeOut("");
-    if (deviceAuth.verification_uri_complete) {
-        writeOut("To finish signing in, open this link in your browser:");
-        writeOut(`  ${deviceAuth.verification_uri_complete}`);
-    }
-    else {
-        writeOut("To finish signing in, open this page in your browser:");
-        writeOut(`  ${deviceAuth.verification_uri}`);
-        writeOut("");
-        writeOut("Then enter this code:");
-        writeOut(`  ${deviceAuth.user_code}`);
-    }
-    writeOut("");
-    writeOut("Waiting for you to approve in the browser...");
-}
-/** Tells the user their browser is opening for the loopback sign-in, with a manual fallback. */
-export function printBrowserOpening(url) {
-    writeOut("");
-    writeOut("Opening your browser to sign in…");
-    writeOut("If it doesn't open automatically, paste this into your browser:");
-    writeOut(`  ${url}`);
-    writeOut("");
-}
-/** Prints success message after login completes. */
-export function printLoginSuccess(keychainOk) {
-    writeOut("");
-    writeOut("Signed in successfully.");
-    if (!keychainOk) {
-        writeErr("Warning: could not save tokens to the OS keychain. Use the config below.");
-    }
-}
-/** Prints copy-paste-ready MCP client config with Bearer authorization. */
-export function printMcpClientConfig(accessToken, mcpServerUrl) {
-    writeOut("");
-    writeOut("Copy this into your MCP client configuration:");
-    writeOut("");
-    writeOut("{");
-    writeOut('  "mcpServers": {');
-    writeOut('    "dazzer": {');
-    writeOut(`      "url": "${mcpServerUrl.replace(/\/$/, "")}",`);
-    writeOut('      "headers": {');
-    writeOut(`        "Authorization": "Bearer ${accessToken}"`);
-    writeOut("      }");
-    writeOut("    }");
-    writeOut("  }");
-    writeOut("}");
-    writeOut("");
-}
-/** Prints auth status for the status command. */
-export function printAuthStatus(params) {
-    if (!params.signedIn) {
-        writeOut("Not signed in. Run: dazzer auth login");
-        return;
-    }
-    writeOut("Signed in.");
-    if (params.issuer) {
-        writeOut(`  Issuer: ${params.issuer}`);
-    }
-    if (params.expiresAt) {
-        writeOut(`  Token expires: ${new Date(params.expiresAt).toISOString()}`);
-    }
-}
-/** Prints logout confirmation. */
-export function printLogoutSuccess() {
-    writeOut("Signed out.");
-}
-/** Prints a user-facing error and exits. */
-export function fail(message) {
-    writeErr(`Error: ${message}`);
-    process.exit(1);
-}

package/dist/lib/refresh.js

@@ -1,60 +0,0 @@
-/** Exchanges a refresh token for a new access token (and rotated refresh token). */
-export async function refreshAccessToken(options) {
-    const fetchFn = options.fetchFn ?? fetch;
-    const params = new URLSearchParams({
-        grant_type: "refresh_token",
-        client_id: options.clientId,
-        refresh_token: options.refreshToken,
-    });
-    if (options.resource) {
-        params.set("resource", options.resource);
-    }
-    const res = await fetchFn(options.discovery.tokenEndpoint, {
-        method: "POST",
-        headers: { "Content-Type": "application/x-www-form-urlencoded" },
-        body: params.toString(),
-    });
-    const body = (await res.json());
-    if (!res.ok) {
-        const error = typeof body.error === "string" ? body.error : "refresh_failed";
-        throw new Error(`Could not refresh token: ${error}`);
-    }
-    const accessToken = body.access_token;
-    const refreshToken = body.refresh_token;
-    if (typeof accessToken !== "string") {
-        throw new Error("The authorization server returned an unexpected refresh response.");
-    }
-    const newRefresh = typeof refreshToken === "string" ? refreshToken : options.refreshToken;
-    const expiresIn = typeof body.expires_in === "number" ? body.expires_in : null;
-    await options.tokenStore.save({ accessToken, refreshToken: newRefresh });
-    return { accessToken, refreshToken: newRefresh, expiresIn };
-}
-/** Returns a valid access token, refreshing when possible. */
-export async function getValidAccessToken(options) {
-    const stored = await options.tokenStore.load();
-    if (!stored) {
-        return null;
-    }
-    try {
-        return await refreshAccessToken({ ...options, refreshToken: stored.refreshToken });
-    }
-    catch {
-        return {
-            accessToken: stored.accessToken,
-            refreshToken: stored.refreshToken,
-            expiresIn: null,
-        };
-    }
-}
-/** Saves freshly issued tokens after login. */
-export async function persistLoginTokens(tokenStore, tokens) {
-    if (!tokens.refresh_token) {
-        throw new Error("The authorization server did not return a refresh token.");
-    }
-    const stored = {
-        accessToken: tokens.access_token,
-        refreshToken: tokens.refresh_token,
-    };
-    await tokenStore.save(stored);
-    return stored;
-}

package/dist/lib/token-store.js

@@ -1,60 +0,0 @@
-/**
- * @purpose Defines the token storage contract and provides keychain-backed and
- * in-memory implementations so secrets stay out of disk while tests stay hermetic.
- */
-import { Entry } from "@napi-rs/keyring";
-const SERVICE = "dazzer-oauth-cli";
-const ACCESS_ACCOUNT = "access-token";
-const REFRESH_ACCOUNT = "refresh-token";
-function accessEntry() {
-    return new Entry(SERVICE, ACCESS_ACCOUNT);
-}
-function refreshEntry() {
-    return new Entry(SERVICE, REFRESH_ACCOUNT);
-}
-/** Persists tokens in the OS keychain via @napi-rs/keyring. */
-export class KeychainTokenStore {
-    async save(tokens) {
-        accessEntry().setPassword(tokens.accessToken);
-        refreshEntry().setPassword(tokens.refreshToken);
-    }
-    async load() {
-        const accessToken = accessEntry().getPassword();
-        const refreshToken = refreshEntry().getPassword();
-        if (!accessToken || !refreshToken) {
-            return null;
-        }
-        return { accessToken, refreshToken };
-    }
-    async clear() {
-        try {
-            accessEntry().deletePassword();
-        }
-        catch {
-            // ignore missing entry
-        }
-        try {
-            refreshEntry().deletePassword();
-        }
-        catch {
-            // ignore missing entry
-        }
-    }
-}
-/** In-memory store for unit tests. */
-export class MemoryTokenStore {
-    tokens = null;
-    async save(tokens) {
-        this.tokens = { ...tokens };
-    }
-    async load() {
-        return this.tokens ? { ...this.tokens } : null;
-    }
-    async clear() {
-        this.tokens = null;
-    }
-}
-/** Default production token store. */
-export function createTokenStore() {
-    return new KeychainTokenStore();
-}