doover-js 0.1.2 → 0.2.0-alpha.0

package/dist/auth/doover-token-auth.js

@@ -0,0 +1,178 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DooverTokenAuth = void 0;
+const doover_auth_1 = require("./doover-auth");
+const errors_1 = require("./errors");
+const jwt_1 = require("./jwt");
+/** Buffer in milliseconds before expiry at which we trigger a refresh (30 s). */
+const REFRESH_BUFFER_MS = 30000;
+class DooverTokenAuth extends doover_auth_1.DooverAuth {
+    constructor(options) {
+        super();
+        this.refreshInFlight = null;
+        this.token = options.token ?? null;
+        this.tokenExpires = this.resolveExpiry(options.tokenExpires, options.token ?? null);
+        this.refreshToken = options.refreshToken ?? null;
+        this.refreshTokenId = options.refreshTokenId ?? null;
+        this.authServerUrl = options.authServerUrl ?? null;
+        this.authServerClientId = options.authServerClientId ?? null;
+        this.fetchImpl = options.fetchImpl ?? fetch;
+    }
+    // ------------------------------------------------------------------
+    // DooverAuth interface
+    // ------------------------------------------------------------------
+    async getHttpHeaders() {
+        if (!this.token) {
+            return {};
+        }
+        return { Authorization: `Bearer ${this.token}` };
+    }
+    getFetchCredentials() {
+        return "omit";
+    }
+    async prepareWebSocket(url, canUseHeaders) {
+        if (!this.token) {
+            return { url };
+        }
+        if (canUseHeaders) {
+            return {
+                url,
+                headers: { Authorization: `Bearer ${this.token}` },
+            };
+        }
+        // Append token as a query parameter for browser-style WebSocket.
+        const parsed = new URL(url);
+        parsed.searchParams.set("token", this.token);
+        return { url: parsed.toString() };
+    }
+    setToken(token, tokenExpires) {
+        this.token = token;
+        this.tokenExpires = this.resolveExpiry(tokenExpires, token);
+    }
+    async ensureReady() {
+        if (!this.needsRefresh()) {
+            return;
+        }
+        // Deduplicate concurrent refresh attempts.
+        if (!this.refreshInFlight) {
+            this.refreshInFlight = this.refresh().finally(() => {
+                this.refreshInFlight = null;
+            });
+        }
+        return this.refreshInFlight;
+    }
+    // ------------------------------------------------------------------
+    // Profile attachment override — load refresh metadata from profile
+    // ------------------------------------------------------------------
+    attachProfile(profile, configManager) {
+        super.attachProfile(profile, configManager);
+        // Back-fill fields from the profile where not already set.
+        if (!this.token && profile.token) {
+            this.token = profile.token;
+        }
+        if (!this.tokenExpires && profile.tokenExpires) {
+            this.tokenExpires = new Date(profile.tokenExpires);
+        }
+        if (!this.tokenExpires && this.token) {
+            this.tokenExpires = (0, jwt_1.decodeTokenExpiry)(this.token);
+        }
+        if (!this.refreshToken && profile.refreshToken) {
+            this.refreshToken = profile.refreshToken;
+        }
+        if (!this.refreshTokenId && profile.refreshTokenId) {
+            this.refreshTokenId = profile.refreshTokenId;
+        }
+        if (!this.authServerUrl && profile.authServerUrl) {
+            this.authServerUrl = profile.authServerUrl;
+        }
+        if (!this.authServerClientId && profile.authServerClientId) {
+            this.authServerClientId = profile.authServerClientId;
+        }
+    }
+    // ------------------------------------------------------------------
+    // Internal
+    // ------------------------------------------------------------------
+    needsRefresh() {
+        if (!this.token) {
+            return true;
+        }
+        if (!this.tokenExpires) {
+            return false;
+        }
+        return this.tokenExpires.getTime() - Date.now() < REFRESH_BUFFER_MS;
+    }
+    async refresh() {
+        if (!this.authServerUrl ||
+            !this.refreshToken ||
+            !this.authServerClientId) {
+            throw new errors_1.DooverAuthError("Cannot refresh token: missing authServerUrl, refreshToken, or authServerClientId");
+        }
+        const url = new URL(`${this.authServerUrl}/oauth2/token`);
+        url.searchParams.set("grant_type", "refresh_token");
+        if (this.token) {
+            url.searchParams.set("access_token", this.token);
+        }
+        url.searchParams.set("refresh_token", this.refreshToken);
+        url.searchParams.set("client_id", this.authServerClientId);
+        let response;
+        try {
+            response = await this.fetchImpl(url.toString(), {
+                method: "POST",
+            });
+        }
+        catch (err) {
+            throw new errors_1.DooverAuthError(`Token refresh request failed: ${err instanceof Error ? err.message : String(err)}`);
+        }
+        if (!response.ok) {
+            throw new errors_1.DooverAuthError(`Token refresh failed with status ${response.status}`);
+        }
+        const body = (await response.json());
+        if (!body.access_token) {
+            throw new errors_1.DooverAuthError("Token refresh response did not contain an access_token");
+        }
+        this.token = body.access_token;
+        this.tokenExpires =
+            typeof body.expires_in === "number"
+                ? new Date(Date.now() + body.expires_in * 1000)
+                : (0, jwt_1.decodeTokenExpiry)(body.access_token);
+        if (body.refresh_token) {
+            this.refreshToken = body.refresh_token;
+        }
+        // Persist back to profile / config manager.
+        this.persistToProfile();
+    }
+    persistToProfile() {
+        if (!this.profile) {
+            return;
+        }
+        this.profile.token = this.token;
+        this.profile.tokenExpires = this.tokenExpires
+            ? this.tokenExpires.toISOString()
+            : null;
+        if (this.refreshToken) {
+            this.profile.refreshToken = this.refreshToken;
+        }
+        if (this.configManager) {
+            try {
+                this.configManager.create(this.profile);
+                this.configManager.write();
+            }
+            catch (err) {
+                throw new errors_1.DooverAuthError(`Failed to persist refreshed token: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+    }
+    resolveExpiry(explicit, token) {
+        if (explicit instanceof Date) {
+            return explicit;
+        }
+        if (typeof explicit === "number") {
+            return new Date(explicit);
+        }
+        if (token) {
+            return (0, jwt_1.decodeTokenExpiry)(token);
+        }
+        return null;
+    }
+}
+exports.DooverTokenAuth = DooverTokenAuth;

package/dist/auth/errors.d.ts

@@ -0,0 +1,3 @@
+export declare class DooverAuthError extends Error {
+    constructor(message: string);
+}

package/dist/auth/errors.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DooverAuthError = void 0;
+class DooverAuthError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "DooverAuthError";
+    }
+}
+exports.DooverAuthError = DooverAuthError;

package/dist/auth/jwt.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Decode the `exp` claim from a JWT without verifying the signature.
+ * Returns the expiry as a `Date`, or `null` if the token has no `exp` claim
+ * or cannot be decoded.
+ */
+export declare function decodeTokenExpiry(token: string): Date | null;

package/dist/auth/jwt.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeTokenExpiry = decodeTokenExpiry;
+/**
+ * Decode the `exp` claim from a JWT without verifying the signature.
+ * Returns the expiry as a `Date`, or `null` if the token has no `exp` claim
+ * or cannot be decoded.
+ */
+function decodeTokenExpiry(token) {
+    try {
+        const parts = token.split(".");
+        if (parts.length < 2) {
+            return null;
+        }
+        // Base64url → Base64 → decode
+        const base64 = parts[1].replace(/-/g, "+").replace(/_/g, "/");
+        const json = typeof atob === "function"
+            ? atob(base64)
+            : Buffer.from(base64, "base64").toString("utf-8");
+        const payload = JSON.parse(json);
+        if (typeof payload.exp !== "number") {
+            return null;
+        }
+        return new Date(payload.exp * 1000);
+    }
+    catch {
+        return null;
+    }
+}

package/dist/client/doover-client.d.ts

@@ -8,10 +8,12 @@ import { NotificationsApi } from "../apis/notifications-api";
 import { PermissionsApi } from "../apis/permissions-api";
 import { ProcessorsApi } from "../apis/processors-api";
 import { TurnApi } from "../apis/turn-api";
+import type { DooverAuth } from "../auth/doover-auth";
 import { GatewayClient } from "../gateway/gateway-client";
 import { RestClient, type DooverClientConfig } from "../http/rest-client";
 import { DooverDataProvider } from "../viewer/doover-data-provider";
 export declare class DooverClient {
+    readonly auth: DooverAuth;
     readonly rest: RestClient;
     readonly viewer: DooverDataProvider;
     readonly channels: ChannelsApi;

package/dist/client/doover-client.js

@@ -11,13 +11,26 @@ const notifications_api_1 = require("../apis/notifications-api");
 const permissions_api_1 = require("../apis/permissions-api");
 const processors_api_1 = require("../apis/processors-api");
 const turn_api_1 = require("../apis/turn-api");
+const build_auth_1 = require("../auth/build-auth");
 const gateway_client_1 = require("../gateway/gateway-client");
 const rest_client_1 = require("../http/rest-client");
 const doover_data_provider_1 = require("../viewer/doover-data-provider");
 class DooverClient {
     constructor(config) {
-        this.rest = new rest_client_1.RestClient(config);
-        this.viewer = new doover_data_provider_1.DooverDataProvider(config);
+        this.auth = (0, build_auth_1.buildAuth)({
+            auth: config.auth,
+            profile: config.profile,
+            configManager: config.configManager,
+            token: config.token,
+            tokenExpires: config.tokenExpires,
+            refreshToken: config.refreshToken,
+            refreshTokenId: config.refreshTokenId,
+            authServerUrl: config.authServerUrl,
+            authServerClientId: config.authServerClientId,
+            fetchImpl: config.fetchImpl,
+        });
+        this.rest = new rest_client_1.RestClient(config, this.auth);
+        this.viewer = new doover_data_provider_1.DooverDataProvider(config, this.auth);
         this.channels = new channels_api_1.ChannelsApi(this.rest);
         this.messages = new messages_api_1.MessagesApi(this.rest);
         this.aggregates = new aggregates_api_1.AggregatesApi(this.rest);
@@ -28,7 +41,7 @@ class DooverClient {
         this.processors = new processors_api_1.ProcessorsApi(this.rest);
         this.turn = new turn_api_1.TurnApi(this.rest);
         this.agents = new agents_api_1.AgentsApi(this.rest);
-        this.gateway = new gateway_client_1.GatewayClient(config);
+        this.gateway = new gateway_client_1.GatewayClient(config, this.auth);
     }
 }
 exports.DooverClient = DooverClient;

package/dist/gateway/gateway-client.d.ts

@@ -1,3 +1,4 @@
+import type { DooverAuth } from "../auth/doover-auth";
 import type { DooverClientConfig } from "../http/rest-client";
 import type { GatewayListenerMap, WebSocketSession } from "./types";
 import type { ChannelRef, JSONValue } from "../types/common";
@@ -11,8 +12,9 @@ export declare class GatewayClient {
     private reconnectTimer;
     private listeners;
     private subscriptions;
-    constructor(config: DooverClientConfig);
-    connect(): void;
+    private readonly auth;
+    constructor(config: DooverClientConfig, auth?: DooverAuth);
+    connect(): Promise<void>;
     disconnect(code?: number, reason?: string): void;
     on<K extends keyof GatewayListenerMap>(eventName: K, listener: GatewayListenerMap[K]): void;
     off<K extends keyof GatewayListenerMap>(eventName: K, listener: GatewayListenerMap[K]): void;

package/dist/gateway/gateway-client.js

@@ -4,7 +4,7 @@ exports.GatewayClient = void 0;
 const errors_1 = require("../http/errors");
 const snowflake_1 = require("../utils/snowflake");
 class GatewayClient {
-    constructor(config) {
+    constructor(config, auth) {
         this.config = config;
         this.socket = null;
         this.session = null;
@@ -29,13 +29,29 @@ class GatewayClient {
             heartbeatAck: new Set(),
         };
         this.subscriptions = new Map();
+        this.auth = auth ?? null;
     }
-    connect() {
+    async connect() {
         if (this.socket && this.socket.readyState <= WebSocket.OPEN) {
             return;
         }
-        const WebSocketImpl = this.config.webSocketImpl ?? WebSocket;
-        this.socket = new WebSocketImpl(this.config.dataWssUrl);
+        if (this.auth) {
+            await this.auth.ensureReady();
+        }
+        const hasFactory = !!this.config.webSocketFactory;
+        const wsParams = this.auth
+            ? await this.auth.prepareWebSocket(this.config.dataWssUrl, hasFactory)
+            : { url: this.config.dataWssUrl };
+        if (this.config.webSocketFactory) {
+            this.socket = this.config.webSocketFactory({
+                url: wsParams.url,
+                headers: wsParams.headers,
+            });
+        }
+        else {
+            const WebSocketImpl = this.config.webSocketImpl ?? WebSocket;
+            this.socket = new WebSocketImpl(wsParams.url);
+        }
         this.socket.onopen = () => this.emit("open");
         this.socket.onclose = (event) => {
             this.stopHeartbeat();
@@ -66,7 +82,7 @@ class GatewayClient {
             diff_only: options?.diff_only ?? false,
         });
         if (!this.isConnected()) {
-            this.connect();
+            void this.connect();
             return;
         }
         this.send({
@@ -93,7 +109,7 @@ class GatewayClient {
     }
     syncChannel(channel) {
         if (!this.isConnected()) {
-            this.connect();
+            void this.connect();
             return;
         }
         this.send({
@@ -106,7 +122,7 @@ class GatewayClient {
     }
     sendOneShotMessage(channel, data) {
         if (!this.isConnected()) {
-            this.connect();
+            void this.connect();
             return;
         }
         this.send({
@@ -248,7 +264,7 @@ class GatewayClient {
         }
         this.reconnectTimer = setTimeout(() => {
             this.reconnectTimer = null;
-            this.connect();
+            void this.connect();
         }, 1000);
     }
     channelKey(channel) {

package/dist/http/rest-client.d.ts

@@ -1,4 +1,6 @@
-export interface DooverClientConfig {
+import type { AuthConfig } from "../auth/build-auth";
+import type { DooverAuth } from "../auth/doover-auth";
+export interface DooverClientConfig extends AuthConfig {
     dataRestUrl: string;
     controlApiUrl: string;
     dataWssUrl: string;
@@ -7,6 +9,10 @@ export interface DooverClientConfig {
     impersonateUserStorageKey?: string;
     fetchImpl?: typeof fetch;
     webSocketImpl?: typeof WebSocket;
+    webSocketFactory?: (options: {
+        url: string;
+        headers?: Record<string, string>;
+    }) => WebSocket;
 }
 export interface RequestOptions {
     baseUrl?: string;
@@ -20,8 +26,9 @@ export interface RequestOptions {
 type QueryValue = string | number | boolean | null | undefined | Array<string | number | boolean>;
 type QueryParams = Record<string, QueryValue> | object;
 export declare class RestClient {
-    readonly config: Required<Pick<DooverClientConfig, "dataRestUrl" | "controlApiUrl" | "dataWssUrl" | "sharing" | "impersonateUserStorageKey">> & Pick<DooverClientConfig, "organisationId" | "fetchImpl" | "webSocketImpl">;
-    constructor(config: DooverClientConfig);
+    readonly config: Required<Pick<DooverClientConfig, "dataRestUrl" | "controlApiUrl" | "dataWssUrl" | "sharing" | "impersonateUserStorageKey">> & Pick<DooverClientConfig, "organisationId" | "fetchImpl" | "webSocketImpl" | "webSocketFactory">;
+    readonly auth: DooverAuth | null;
+    constructor(config: DooverClientConfig, auth?: DooverAuth);
     request<T>(options: RequestOptions): Promise<T>;
     get<T>(path: string, query?: RequestOptions["query"], baseUrl?: string): Promise<T>;
     post<T>(path: string, body?: RequestOptions["body"], query?: RequestOptions["query"], baseUrl?: string): Promise<T>;

package/dist/http/rest-client.js

@@ -3,19 +3,30 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.RestClient = void 0;
 const errors_1 = require("./errors");
 class RestClient {
-    constructor(config) {
+    constructor(config, auth) {
         this.config = {
             ...config,
             sharing: config.sharing ?? "internal",
             organisationId: config.organisationId ?? null,
             impersonateUserStorageKey: config.impersonateUserStorageKey ?? "impersonate_user_id",
         };
+        this.auth = auth ?? null;
     }
     async request(options) {
+        if (this.auth) {
+            await this.auth.ensureReady();
+        }
         const method = options.method ?? "GET";
         const url = this.buildUrl(options.baseUrl ?? this.config.dataRestUrl, options.path, options.query);
         const headers = new Headers(options.headers);
         const body = this.normalizeBody(options.body, headers);
+        // Merge auth headers.
+        if (this.auth) {
+            const authHeaders = await this.auth.getHttpHeaders();
+            for (const [key, value] of Object.entries(authHeaders)) {
+                headers.set(key, value);
+            }
+        }
         if (!options.omitSharingHeader) {
             headers.set("X-Doover-Sharing", this.config.sharing);
         }
@@ -26,12 +37,15 @@ class RestClient {
         if (impersonated) {
             headers.set("X-Doover-Assume", impersonated);
         }
+        const credentials = this.auth
+            ? this.auth.getFetchCredentials()
+            : "include";
         const fetchImpl = this.config.fetchImpl ?? fetch;
         const response = await fetchImpl(url, {
             method,
             headers,
             body,
-            credentials: "include",
+            credentials,
         });
         const payload = await this.parseResponse(response);
         if (!response.ok) {

package/dist/index.d.ts

@@ -9,6 +9,15 @@ export { NotificationsApi } from "./apis/notifications-api";
 export { PermissionsApi } from "./apis/permissions-api";
 export { ProcessorsApi } from "./apis/processors-api";
 export { TurnApi } from "./apis/turn-api";
+export { DooverAuth } from "./auth/doover-auth";
+export { CookieAuth } from "./auth/cookie-auth";
+export { DooverTokenAuth } from "./auth/doover-token-auth";
+export { AuthProfile } from "./auth/auth-profile";
+export type { AuthProfileData } from "./auth/auth-profile";
+export type { AuthProfileStore } from "./auth/auth-store";
+export { DooverAuthError } from "./auth/errors";
+export { buildAuth } from "./auth/build-auth";
+export type { AuthConfig } from "./auth/build-auth";
 export { GatewayClient } from "./gateway/gateway-client";
 export type * from "./gateway/types";
 export { RestClient } from "./http/rest-client";

package/dist/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.generateSnowflakeIdAtTime = exports.extractSnowflakeId = exports.addTimestampToMessage = exports.getIdentifierFromPath = exports.DooverDataProvider = exports.DooverValidationError = exports.DooverGatewayError = exports.DooverApiError = exports.RestClient = exports.GatewayClient = exports.TurnApi = exports.ProcessorsApi = exports.PermissionsApi = exports.NotificationsApi = exports.MessagesApi = exports.ConnectionsApi = exports.ChannelsApi = exports.AlarmsApi = exports.AggregatesApi = exports.AgentsApi = exports.DooverClient = void 0;
+exports.generateSnowflakeIdAtTime = exports.extractSnowflakeId = exports.addTimestampToMessage = exports.getIdentifierFromPath = exports.DooverDataProvider = exports.DooverValidationError = exports.DooverGatewayError = exports.DooverApiError = exports.RestClient = exports.GatewayClient = exports.buildAuth = exports.DooverAuthError = exports.AuthProfile = exports.DooverTokenAuth = exports.CookieAuth = exports.DooverAuth = exports.TurnApi = exports.ProcessorsApi = exports.PermissionsApi = exports.NotificationsApi = exports.MessagesApi = exports.ConnectionsApi = exports.ChannelsApi = exports.AlarmsApi = exports.AggregatesApi = exports.AgentsApi = exports.DooverClient = void 0;
 var doover_client_1 = require("./client/doover-client");
 Object.defineProperty(exports, "DooverClient", { enumerable: true, get: function () { return doover_client_1.DooverClient; } });
 var agents_api_1 = require("./apis/agents-api");
@@ -23,14 +23,26 @@ var processors_api_1 = require("./apis/processors-api");
 Object.defineProperty(exports, "ProcessorsApi", { enumerable: true, get: function () { return processors_api_1.ProcessorsApi; } });
 var turn_api_1 = require("./apis/turn-api");
 Object.defineProperty(exports, "TurnApi", { enumerable: true, get: function () { return turn_api_1.TurnApi; } });
+var doover_auth_1 = require("./auth/doover-auth");
+Object.defineProperty(exports, "DooverAuth", { enumerable: true, get: function () { return doover_auth_1.DooverAuth; } });
+var cookie_auth_1 = require("./auth/cookie-auth");
+Object.defineProperty(exports, "CookieAuth", { enumerable: true, get: function () { return cookie_auth_1.CookieAuth; } });
+var doover_token_auth_1 = require("./auth/doover-token-auth");
+Object.defineProperty(exports, "DooverTokenAuth", { enumerable: true, get: function () { return doover_token_auth_1.DooverTokenAuth; } });
+var auth_profile_1 = require("./auth/auth-profile");
+Object.defineProperty(exports, "AuthProfile", { enumerable: true, get: function () { return auth_profile_1.AuthProfile; } });
+var errors_1 = require("./auth/errors");
+Object.defineProperty(exports, "DooverAuthError", { enumerable: true, get: function () { return errors_1.DooverAuthError; } });
+var build_auth_1 = require("./auth/build-auth");
+Object.defineProperty(exports, "buildAuth", { enumerable: true, get: function () { return build_auth_1.buildAuth; } });
 var gateway_client_1 = require("./gateway/gateway-client");
 Object.defineProperty(exports, "GatewayClient", { enumerable: true, get: function () { return gateway_client_1.GatewayClient; } });
 var rest_client_1 = require("./http/rest-client");
 Object.defineProperty(exports, "RestClient", { enumerable: true, get: function () { return rest_client_1.RestClient; } });
-var errors_1 = require("./http/errors");
-Object.defineProperty(exports, "DooverApiError", { enumerable: true, get: function () { return errors_1.DooverApiError; } });
-Object.defineProperty(exports, "DooverGatewayError", { enumerable: true, get: function () { return errors_1.DooverGatewayError; } });
-Object.defineProperty(exports, "DooverValidationError", { enumerable: true, get: function () { return errors_1.DooverValidationError; } });
+var errors_2 = require("./http/errors");
+Object.defineProperty(exports, "DooverApiError", { enumerable: true, get: function () { return errors_2.DooverApiError; } });
+Object.defineProperty(exports, "DooverGatewayError", { enumerable: true, get: function () { return errors_2.DooverGatewayError; } });
+Object.defineProperty(exports, "DooverValidationError", { enumerable: true, get: function () { return errors_2.DooverValidationError; } });
 var doover_data_provider_1 = require("./viewer/doover-data-provider");
 Object.defineProperty(exports, "DooverDataProvider", { enumerable: true, get: function () { return doover_data_provider_1.DooverDataProvider; } });
 var path_parsing_1 = require("./viewer/path-parsing");

package/dist/node/config-manager.d.ts

@@ -0,0 +1,34 @@
+import { AuthProfile } from "../auth/auth-profile";
+import type { AuthProfileStore } from "../auth/auth-store";
+/**
+ * File-backed profile store compatible with pydoover's config format.
+ *
+ * Reads `~/.doover/config` (or a custom path) synchronously on construction,
+ * matching Python's eager-read model.
+ *
+ * Behaviour:
+ * - Doover2 `[profile=...]` blocks are parsed into `AuthProfile` entries.
+ * - Legacy Doover1 `[...]` blocks and unrecognised raw blocks are preserved
+ *   verbatim in their original order and written back unchanged.
+ * - `write()` creates the `~/.doover` directory if missing.
+ */
+export declare class ConfigManager implements AuthProfileStore {
+    currentProfile: string | null;
+    current: AuthProfile | null;
+    /** Parsed Doover2 profiles keyed by profile name. */
+    private profiles;
+    /**
+     * Ordered list of *blocks* in the file as they were originally read. Each
+     * entry is either a `{ type: "managed"; name: string }` reference into
+     * `this.profiles`, or a `{ type: "raw"; text: string }` blob that is
+     * preserved verbatim.
+     */
+    private blocks;
+    private readonly configPath;
+    constructor(configPath?: string);
+    get(profileName: string): AuthProfile | undefined;
+    create(entry: AuthProfile): void;
+    delete(profileName: string): void;
+    write(): void;
+    private read;
+}