gws-axi 0.1.0

package/dist/src/config.js

@@ -0,0 +1,155 @@
+import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync, rmSync, statSync, } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+export const SETUP_VERSION = 1;
+export const CONFIG_VERSION = 1;
+const SETUP_STEP_ORDER = [
+    "gcp_project",
+    "apis_enabled",
+    "oauth_client",
+    "credentials_saved",
+    "consent_screen",
+    "test_user_added",
+    "tokens_obtained",
+];
+// Paths ────────────────────────────────────────────────────────────
+export function configDir() {
+    const xdg = process.env.XDG_CONFIG_HOME;
+    return xdg ? join(xdg, "gws-axi") : join(homedir(), ".config", "gws-axi");
+}
+export function setupStatePath() {
+    return join(configDir(), "setup.json");
+}
+export function credentialsPath() {
+    return join(configDir(), "credentials.json");
+}
+export function userConfigPath() {
+    return join(configDir(), "config.json");
+}
+export function accountsDir() {
+    return join(configDir(), "accounts");
+}
+export function accountDir(email) {
+    return join(accountsDir(), normalizeEmail(email));
+}
+export function tokensPathForAccount(email) {
+    return join(accountDir(email), "tokens.json");
+}
+export function profilePathForAccount(email) {
+    return join(accountDir(email), "profile.json");
+}
+export function normalizeEmail(email) {
+    return email.trim().toLowerCase();
+}
+// Setup state ──────────────────────────────────────────────────────
+export function defaultSetupState() {
+    return {
+        version: SETUP_VERSION,
+        auth_mode: "byo",
+        steps: Object.fromEntries(SETUP_STEP_ORDER.map((key) => [key, { done: false }])),
+    };
+}
+export function readSetupState() {
+    const path = setupStatePath();
+    if (!existsSync(path)) {
+        return defaultSetupState();
+    }
+    try {
+        return JSON.parse(readFileSync(path, "utf-8"));
+    }
+    catch {
+        return defaultSetupState();
+    }
+}
+export function writeSetupState(state) {
+    const dir = configDir();
+    if (!existsSync(dir)) {
+        mkdirSync(dir, { recursive: true });
+    }
+    writeFileSync(setupStatePath(), `${JSON.stringify(state, null, 2)}\n`);
+}
+export function setupProgress(state) {
+    let done = 0;
+    let nextStep = null;
+    for (const key of SETUP_STEP_ORDER) {
+        if (state.steps[key].done) {
+            done++;
+        }
+        else if (nextStep === null) {
+            nextStep = key;
+        }
+    }
+    return { done, total: SETUP_STEP_ORDER.length, nextStep };
+}
+// User config (default_account, etc.) ──────────────────────────────
+export function defaultUserConfig() {
+    return { version: CONFIG_VERSION };
+}
+export function readUserConfig() {
+    const path = userConfigPath();
+    if (!existsSync(path))
+        return defaultUserConfig();
+    try {
+        return JSON.parse(readFileSync(path, "utf-8"));
+    }
+    catch {
+        return defaultUserConfig();
+    }
+}
+export function writeUserConfig(cfg) {
+    const dir = configDir();
+    if (!existsSync(dir)) {
+        mkdirSync(dir, { recursive: true });
+    }
+    writeFileSync(userConfigPath(), `${JSON.stringify(cfg, null, 2)}\n`);
+}
+// Accounts ─────────────────────────────────────────────────────────
+export function listAccounts() {
+    const dir = accountsDir();
+    if (!existsSync(dir))
+        return [];
+    try {
+        return readdirSync(dir)
+            .filter((name) => {
+            const p = join(dir, name);
+            return (statSync(p).isDirectory() && existsSync(join(p, "tokens.json")));
+        })
+            .map((name) => name.toLowerCase())
+            .sort();
+    }
+    catch {
+        return [];
+    }
+}
+export function hasAccount(email) {
+    return existsSync(tokensPathForAccount(email));
+}
+export function removeAccount(email) {
+    const dir = accountDir(email);
+    if (existsSync(dir)) {
+        rmSync(dir, { recursive: true, force: true });
+    }
+    const cfg = readUserConfig();
+    if (cfg.default_account === normalizeEmail(email)) {
+        const remaining = listAccounts();
+        cfg.default_account = remaining[0];
+        writeUserConfig(cfg);
+    }
+}
+export function getDefaultAccount() {
+    const cfg = readUserConfig();
+    if (cfg.default_account && hasAccount(cfg.default_account)) {
+        return cfg.default_account;
+    }
+    const accounts = listAccounts();
+    if (accounts.length === 1)
+        return accounts[0];
+    return undefined;
+}
+export function setDefaultAccount(email) {
+    const cfg = readUserConfig();
+    cfg.default_account = normalizeEmail(email);
+    writeUserConfig(cfg);
+}
+export { SETUP_STEP_ORDER };
+//# sourceMappingURL=config.js.map

package/dist/src/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,SAAS,EACT,YAAY,EACZ,WAAW,EACX,aAAa,EACb,MAAM,EACN,QAAQ,GACT,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC;AAC/B,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AA8BhC,MAAM,gBAAgB,GAAmB;IACvC,aAAa;IACb,cAAc;IACd,cAAc;IACd,mBAAmB;IACnB,gBAAgB;IAChB,iBAAiB;IACjB,iBAAiB;CAClB,CAAC;AAEF,qEAAqE;AACrE,MAAM,UAAU,SAAS;IACvB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IACxC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,YAAY,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,kBAAkB,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,UAAU,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,iBAAiB;IAC/B,OAAO;QACL,OAAO,EAAE,aAAa;QACtB,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,MAAM,CAAC,WAAW,CACvB,gBAAgB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CACnB;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,iBAAiB,EAAE,CAAC;IAC7B,CAAC;IAED,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAe,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAiB;IAC/C,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,aAAa,CAAC,cAAc,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAiB;IAK7C,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,QAAQ,GAAwB,IAAI,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1B,IAAI,EAAE,CAAC;QACT,CAAC;aAAM,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC7B,QAAQ,GAAG,GAAG,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC5D,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,iBAAiB;IAC/B,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,iBAAiB,EAAE,CAAC;IAClD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAe,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAe;IAC7C,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,aAAa,CAAC,cAAc,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AACvE,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,YAAY;IAC1B,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,GAAG,CAAC;aACpB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YACf,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC1B,OAAO,CACL,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAChE,CAAC;QACJ,CAAC,CAAC;aACD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;aACjC,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,UAAU,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;IAC7B,IAAI,GAAG,CAAC,eAAe,KAAK,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;QACjC,GAAG,CAAC,eAAe,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QACnC,eAAe,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;IAC7B,IAAI,GAAG,CAAC,eAAe,IAAI,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;QAC3D,OAAO,GAAG,CAAC,eAAe,CAAC;IAC7B,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC9C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;IAC7B,GAAG,CAAC,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAC5C,eAAe,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/src/google/account.d.ts

@@ -0,0 +1,12 @@
+export interface ResolveAccountOptions {
+    mutation: boolean;
+    commandName: string;
+}
+export interface AccountResolution {
+    account: string;
+    totalAccounts: number;
+    defaultAccount?: string;
+    explicit: boolean;
+}
+export declare function resolveAccount(requestedAccount: string | undefined, options: ResolveAccountOptions): AccountResolution;
+export declare function accountHeaderFields(resolution: AccountResolution): Record<string, unknown>;

package/dist/src/google/account.js

@@ -0,0 +1,65 @@
+import { AxiError } from "axi-sdk-js";
+import { getDefaultAccount, hasAccount, listAccounts, normalizeEmail, } from "../config.js";
+export function resolveAccount(requestedAccount, options) {
+    const accounts = listAccounts();
+    if (accounts.length === 0) {
+        throw new AxiError("No accounts authenticated", "NO_ACCOUNTS", [
+            "Run `gws-axi auth setup` to configure OAuth and authenticate an account",
+            "Run `gws-axi auth login` if setup is already complete",
+        ]);
+    }
+    const defaultAccount = getDefaultAccount();
+    if (requestedAccount) {
+        const normalized = normalizeEmail(requestedAccount);
+        if (!hasAccount(normalized)) {
+            throw new AxiError(`Account ${normalized} is not authenticated`, "ACCOUNT_NOT_FOUND", [
+                `Authenticated accounts: ${accounts.join(", ")}`,
+                `Run \`gws-axi auth login --account ${normalized}\` to add it`,
+                "Run `gws-axi auth accounts` to see all authenticated accounts",
+            ]);
+        }
+        return {
+            account: normalized,
+            totalAccounts: accounts.length,
+            defaultAccount,
+            explicit: true,
+        };
+    }
+    if (accounts.length === 1) {
+        return {
+            account: accounts[0],
+            totalAccounts: 1,
+            defaultAccount,
+            explicit: false,
+        };
+    }
+    if (options.mutation) {
+        throw new AxiError(`\`${options.commandName}\` mutates state; --account is required when multiple accounts are authenticated`, "ACCOUNT_REQUIRED", [
+            `Authenticated accounts: ${accounts.join(", ")}`,
+            `Default account: ${defaultAccount ?? "(none set)"}`,
+            `Run with --account ${defaultAccount ?? accounts[0]} to use ${defaultAccount ? "the default" : "an account"}`,
+            "Multi-account write protection prevents silent wrong-account mutations",
+        ]);
+    }
+    if (!defaultAccount) {
+        throw new AxiError("No default account set", "NO_DEFAULT_ACCOUNT", [
+            `Authenticated accounts: ${accounts.join(", ")}`,
+            `Run \`gws-axi auth use <email>\` to set a default`,
+            "Or pass --account <email> to this command",
+        ]);
+    }
+    return {
+        account: defaultAccount,
+        totalAccounts: accounts.length,
+        defaultAccount,
+        explicit: false,
+    };
+}
+export function accountHeaderFields(resolution) {
+    const fields = { account: resolution.account };
+    if (resolution.totalAccounts > 1 && !resolution.explicit) {
+        fields.account_source = "default";
+    }
+    return fields;
+}
+//# sourceMappingURL=account.js.map

package/dist/src/google/account.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account.js","sourceRoot":"","sources":["../../../src/google/account.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EACL,iBAAiB,EACjB,UAAU,EACV,YAAY,EACZ,cAAc,GACf,MAAM,cAAc,CAAC;AActB,MAAM,UAAU,cAAc,CAC5B,gBAAoC,EACpC,OAA8B;IAE9B,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAEhC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,QAAQ,CAChB,2BAA2B,EAC3B,aAAa,EACb;YACE,yEAAyE;YACzE,uDAAuD;SACxD,CACF,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,iBAAiB,EAAE,CAAC;IAE3C,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,UAAU,GAAG,cAAc,CAAC,gBAAgB,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,QAAQ,CAChB,WAAW,UAAU,uBAAuB,EAC5C,mBAAmB,EACnB;gBACE,2BAA2B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAChD,sCAAsC,UAAU,cAAc;gBAC9D,+DAA+D;aAChE,CACF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE,UAAU;YACnB,aAAa,EAAE,QAAQ,CAAC,MAAM;YAC9B,cAAc;YACd,QAAQ,EAAE,IAAI;SACf,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;YACpB,aAAa,EAAE,CAAC;YAChB,cAAc;YACd,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,IAAI,QAAQ,CAChB,KAAK,OAAO,CAAC,WAAW,kFAAkF,EAC1G,kBAAkB,EAClB;YACE,2BAA2B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAChD,oBAAoB,cAAc,IAAI,YAAY,EAAE;YACpD,sBAAsB,cAAc,IAAI,QAAQ,CAAC,CAAC,CAAC,WAAW,cAAc,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,EAAE;YAC7G,wEAAwE;SACzE,CACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,QAAQ,CAChB,wBAAwB,EACxB,oBAAoB,EACpB;YACE,2BAA2B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAChD,mDAAmD;YACnD,2CAA2C;SAC5C,CACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,cAAc;QACvB,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,cAAc;QACd,QAAQ,EAAE,KAAK;KAChB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,UAA6B;IAE7B,MAAM,MAAM,GAA4B,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC;IACxE,IAAI,UAAU,CAAC,aAAa,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACzD,MAAM,CAAC,cAAc,GAAG,SAAS,CAAC;IACpC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/google/client.d.ts

@@ -0,0 +1,29 @@
+import { AxiError } from "axi-sdk-js";
+import { type calendar_v3, type docs_v1, type drive_v3, type gmail_v1, type slides_v1 } from "googleapis";
+import { OAuth2Client } from "google-auth-library";
+/**
+ * Build an OAuth2Client seeded with the stored tokens for `email`. Uses
+ * google-auth-library's refresh mechanism via the refresh_token so the
+ * client auto-refreshes mid-request if the access token hits 401. We also
+ * set expiry_date so the library proactively refreshes before 401s.
+ */
+export declare function oauthClientForAccount(email: string): Promise<OAuth2Client>;
+export declare function calendarClient(email: string): Promise<calendar_v3.Calendar>;
+export declare function gmailClient(email: string): Promise<gmail_v1.Gmail>;
+export declare function docsClient(email: string): Promise<docs_v1.Docs>;
+export declare function driveClient(email: string): Promise<drive_v3.Drive>;
+export declare function slidesClient(email: string): Promise<slides_v1.Slides>;
+/**
+ * Translate a Google API error into an AxiError with actionable suggestions.
+ * Caller context (account, operation name) improves the suggestions.
+ */
+export declare function translateGoogleError(err: unknown, context: {
+    account: string;
+    operation: string;
+}): AxiError;
+/**
+ * Convenience wrapper: run a Google API call for `email` and translate any
+ * thrown error. Callers pass the operation name (e.g. "calendar.events.list")
+ * so error messages are specific.
+ */
+export declare function runGoogleApi<T>(email: string, operation: string, fn: (auth: OAuth2Client) => Promise<T>): Promise<T>;

package/dist/src/google/client.js

@@ -0,0 +1,106 @@
+import { AxiError } from "axi-sdk-js";
+import { google } from "googleapis";
+import { OAuth2Client } from "google-auth-library";
+import { getValidAccessToken } from "./tokens.js";
+/**
+ * Build an OAuth2Client seeded with the stored tokens for `email`. Uses
+ * google-auth-library's refresh mechanism via the refresh_token so the
+ * client auto-refreshes mid-request if the access token hits 401. We also
+ * set expiry_date so the library proactively refreshes before 401s.
+ */
+export async function oauthClientForAccount(email) {
+    const tokens = await getValidAccessToken(email);
+    const auth = new OAuth2Client();
+    auth.setCredentials({
+        access_token: tokens.access_token,
+        refresh_token: tokens.refresh_token,
+        expiry_date: tokens.expiry_date,
+        scope: tokens.scope,
+        token_type: tokens.token_type,
+    });
+    return auth;
+}
+export async function calendarClient(email) {
+    const auth = await oauthClientForAccount(email);
+    return google.calendar({ version: "v3", auth });
+}
+export async function gmailClient(email) {
+    const auth = await oauthClientForAccount(email);
+    return google.gmail({ version: "v1", auth });
+}
+export async function docsClient(email) {
+    const auth = await oauthClientForAccount(email);
+    return google.docs({ version: "v1", auth });
+}
+export async function driveClient(email) {
+    const auth = await oauthClientForAccount(email);
+    return google.drive({ version: "v3", auth });
+}
+export async function slidesClient(email) {
+    const auth = await oauthClientForAccount(email);
+    return google.slides({ version: "v1", auth });
+}
+function extractError(err) {
+    const e = err;
+    const apiError = e.response?.data?.error;
+    const code = apiError?.code ?? e.code ?? (e.response?.status ?? 0);
+    const message = apiError?.message ?? e.message ?? (err instanceof Error ? err.message : String(err));
+    const reason = apiError?.errors?.[0]?.reason ?? e.errors?.[0]?.reason;
+    const status = apiError?.status;
+    return { code, message, reason, status };
+}
+/**
+ * Translate a Google API error into an AxiError with actionable suggestions.
+ * Caller context (account, operation name) improves the suggestions.
+ */
+export function translateGoogleError(err, context) {
+    const { code, message, reason, status } = extractError(err);
+    const { account, operation } = context;
+    if (code === 401 || status === "UNAUTHENTICATED") {
+        return new AxiError(`Authentication failed for ${account} — token revoked or invalid`, "TOKEN_INVALID", [
+            `Run \`gws-axi auth login --account ${account}\` to re-authenticate`,
+            "Then run `gws-axi auth login --wait` to complete the OAuth flow",
+        ]);
+    }
+    if (code === 403 || status === "PERMISSION_DENIED") {
+        if (reason === "insufficientPermissions" ||
+            reason === "ACCESS_TOKEN_SCOPE_INSUFFICIENT" ||
+            /insufficient scope|scope/i.test(message)) {
+            return new AxiError(`Insufficient scope for ${operation} — this account needs to re-consent`, "SCOPE_MISSING", [
+                `Run \`gws-axi auth login --account ${account}\` to re-consent to the full scope set`,
+            ]);
+        }
+        if (reason === "accessNotConfigured" ||
+            /has not been used|not enabled|API is disabled/i.test(message)) {
+            return new AxiError(`API not enabled in the GCP project backing this OAuth client`, "API_NOT_ENABLED", [
+                "Re-run `gws-axi auth setup` — the step 2 API-enable flow will fix this",
+            ]);
+        }
+        return new AxiError(`Forbidden: ${message}`, "FORBIDDEN", reason ? [`Reason: ${reason}`] : []);
+    }
+    if (code === 404 || status === "NOT_FOUND") {
+        return new AxiError(message || "not found", "NOT_FOUND", []);
+    }
+    if (code === 429 || status === "RESOURCE_EXHAUSTED") {
+        return new AxiError(`Rate limit exceeded for ${operation}`, "RATE_LIMITED", ["Retry after a short wait"]);
+    }
+    if (code >= 500) {
+        return new AxiError(`Google server error (${code}) on ${operation}: ${message}`, "SERVER_ERROR", ["Retry after a moment"]);
+    }
+    return new AxiError(message || `Unknown error on ${operation}`, code ? `GOOGLE_API_ERROR_${code}` : "UNKNOWN_ERROR", reason ? [`Reason: ${reason}`] : []);
+}
+/**
+ * Convenience wrapper: run a Google API call for `email` and translate any
+ * thrown error. Callers pass the operation name (e.g. "calendar.events.list")
+ * so error messages are specific.
+ */
+export async function runGoogleApi(email, operation, fn) {
+    const auth = await oauthClientForAccount(email);
+    try {
+        return await fn(auth);
+    }
+    catch (err) {
+        throw translateGoogleError(err, { account: email, operation });
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/src/google/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/google/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,MAAM,EAAgF,MAAM,YAAY,CAAC;AAClH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAa;IACvD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,IAAI,YAAY,EAAE,CAAC;IAChC,IAAI,CAAC,cAAc,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAa;IAChD,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAa;IAC7C,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAa;IAC5C,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAa;IAC7C,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAa;IAC9C,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC;AA0BD,SAAS,YAAY,CAAC,GAAY;IAChC,MAAM,CAAC,GAAG,GAA0B,CAAC;IACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC;IACzC,MAAM,IAAI,GAAG,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC;IACnE,MAAM,OAAO,GACX,QAAQ,EAAE,OAAO,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACvF,MAAM,MAAM,GAAG,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;IACtE,MAAM,MAAM,GAAG,QAAQ,EAAE,MAAM,CAAC;IAChC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAY,EACZ,OAA+C;IAE/C,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC5D,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAEvC,IAAI,IAAI,KAAK,GAAG,IAAI,MAAM,KAAK,iBAAiB,EAAE,CAAC;QACjD,OAAO,IAAI,QAAQ,CACjB,6BAA6B,OAAO,6BAA6B,EACjE,eAAe,EACf;YACE,sCAAsC,OAAO,uBAAuB;YACpE,iEAAiE;SAClE,CACF,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,KAAK,GAAG,IAAI,MAAM,KAAK,mBAAmB,EAAE,CAAC;QACnD,IACE,MAAM,KAAK,yBAAyB;YACpC,MAAM,KAAK,iCAAiC;YAC5C,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC,EACzC,CAAC;YACD,OAAO,IAAI,QAAQ,CACjB,0BAA0B,SAAS,qCAAqC,EACxE,eAAe,EACf;gBACE,sCAAsC,OAAO,wCAAwC;aACtF,CACF,CAAC;QACJ,CAAC;QACD,IACE,MAAM,KAAK,qBAAqB;YAChC,gDAAgD,CAAC,IAAI,CAAC,OAAO,CAAC,EAC9D,CAAC;YACD,OAAO,IAAI,QAAQ,CACjB,8DAA8D,EAC9D,iBAAiB,EACjB;gBACE,wEAAwE;aACzE,CACF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,QAAQ,CACjB,cAAc,OAAO,EAAE,EACvB,WAAW,EACX,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CACpC,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,KAAK,GAAG,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3C,OAAO,IAAI,QAAQ,CAAC,OAAO,IAAI,WAAW,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,IAAI,KAAK,GAAG,IAAI,MAAM,KAAK,oBAAoB,EAAE,CAAC;QACpD,OAAO,IAAI,QAAQ,CACjB,2BAA2B,SAAS,EAAE,EACtC,cAAc,EACd,CAAC,0BAA0B,CAAC,CAC7B,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;QAChB,OAAO,IAAI,QAAQ,CACjB,wBAAwB,IAAI,QAAQ,SAAS,KAAK,OAAO,EAAE,EAC3D,cAAc,EACd,CAAC,sBAAsB,CAAC,CACzB,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,QAAQ,CACjB,OAAO,IAAI,oBAAoB,SAAS,EAAE,EAC1C,IAAI,CAAC,CAAC,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,CAAC,eAAe,EACnD,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CACpC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAa,EACb,SAAiB,EACjB,EAAsC;IAEtC,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,oBAAoB,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC"}

package/dist/src/google/probe.d.ts

@@ -0,0 +1,15 @@
+import { type ServiceName } from "../auth/scopes.js";
+export interface ProbeResult {
+    service: ServiceName;
+    status: "ok" | "warn" | "fail";
+    detail: string;
+}
+/**
+ * Run all service probes for a single account in parallel (where they're
+ * independent) and return results keyed by service name.
+ */
+export declare function probeAccount(email: string): Promise<{
+    service: ServiceName;
+    status: "ok" | "warn" | "fail";
+    detail: string;
+}[]>;

package/dist/src/google/probe.js

@@ -0,0 +1,200 @@
+import { SERVICE_SCOPES } from "../auth/scopes.js";
+import { getValidAccessToken } from "./tokens.js";
+function hasScope(tokens, scope) {
+    const granted = tokens.scope.split(" ").filter(Boolean);
+    return granted.includes(scope);
+}
+async function gfetch(url, accessToken) {
+    const res = await fetch(url, {
+        headers: { authorization: `Bearer ${accessToken}` },
+    });
+    if (res.status === 204)
+        return { status: 204, body: null };
+    const text = await res.text();
+    let body = text;
+    try {
+        body = JSON.parse(text);
+    }
+    catch {
+        // leave as text
+    }
+    return { status: res.status, body, text };
+}
+function classifyError(service, status, body) {
+    const err = body
+        ?.error;
+    const message = err?.message ?? "";
+    if (status === 401) {
+        return {
+            service,
+            status: "fail",
+            detail: `401 unauthorized — token revoked or invalid (${message})`,
+        };
+    }
+    if (status === 403) {
+        if (/scope|insufficient/i.test(message)) {
+            return {
+                service,
+                status: "fail",
+                detail: `403 insufficient_scope — ${service} scope not granted`,
+            };
+        }
+        if (/disabled|not enabled/i.test(message)) {
+            return {
+                service,
+                status: "fail",
+                detail: `403 api_not_enabled — enable the ${service} API in the Console`,
+            };
+        }
+        return { service, status: "fail", detail: `403 forbidden — ${message}` };
+    }
+    if (status === 429) {
+        return { service, status: "warn", detail: `429 rate_limited — try again shortly` };
+    }
+    if (status >= 500) {
+        return { service, status: "warn", detail: `${status} server_error — Google side` };
+    }
+    return {
+        service,
+        status: "fail",
+        detail: `${status} ${message || "unexpected error"}`,
+    };
+}
+async function probeGmail(ctx) {
+    const service = "gmail";
+    if (!hasScope(ctx.tokens, SERVICE_SCOPES.gmail)) {
+        return { service, status: "fail", detail: "scope not granted" };
+    }
+    const { status, body } = await gfetch("https://gmail.googleapis.com/gmail/v1/users/me/profile", ctx.accessToken);
+    if (status === 200) {
+        const profile = body;
+        return {
+            service,
+            status: "ok",
+            detail: `${profile.emailAddress ?? ctx.email}${profile.messagesTotal !== undefined ? ` · ${profile.messagesTotal} messages` : ""}`,
+        };
+    }
+    return classifyError(service, status, body);
+}
+async function probeCalendar(ctx) {
+    const service = "calendar";
+    if (!hasScope(ctx.tokens, SERVICE_SCOPES.calendar)) {
+        return { service, status: "fail", detail: "scope not granted" };
+    }
+    const { status, body } = await gfetch("https://www.googleapis.com/calendar/v3/users/me/calendarList?maxResults=1&fields=items(id),nextPageToken", ctx.accessToken);
+    if (status === 200) {
+        // API doesn't directly give a total count; do a second tiny call to count
+        // all accessible calendars. Skip if the first call already showed none.
+        const first = body;
+        if (!first.items?.length) {
+            return { service, status: "ok", detail: "0 calendars" };
+        }
+        // Second call to get full count cheaply — fields filter keeps payload tiny
+        const { status: s2, body: b2 } = await gfetch("https://www.googleapis.com/calendar/v3/users/me/calendarList?fields=items(id)", ctx.accessToken);
+        if (s2 === 200) {
+            const count = (b2.items ?? []).length;
+            return { service, status: "ok", detail: `${count} calendars accessible` };
+        }
+        return { service, status: "ok", detail: "≥1 calendar (partial count)" };
+    }
+    return classifyError(service, status, body);
+}
+async function probeDrive(ctx) {
+    const service = "drive";
+    if (!hasScope(ctx.tokens, SERVICE_SCOPES.drive)) {
+        return { service, status: "fail", detail: "scope not granted" };
+    }
+    const { status, body } = await gfetch("https://www.googleapis.com/drive/v3/about?fields=user(emailAddress),storageQuota(usage,limit)", ctx.accessToken);
+    if (status === 200) {
+        const about = body;
+        const email = about.user?.emailAddress ?? ctx.email;
+        const usage = about.storageQuota?.usage
+            ? `${Math.round(Number(about.storageQuota.usage) / 1_000_000)}MB used`
+            : "";
+        return {
+            service,
+            status: "ok",
+            detail: usage ? `${email} · ${usage}` : email,
+        };
+    }
+    return classifyError(service, status, body);
+}
+/**
+ * Docs has no equivalent of drive.about — querying requires a known
+ * document ID. Rely on scope presence + whether drive.about.get worked.
+ * Caller should run probeDrive first and pass its status.
+ */
+function probeDocs(ctx, driveOk) {
+    const service = "docs";
+    if (!hasScope(ctx.tokens, SERVICE_SCOPES.docs)) {
+        return { service, status: "fail", detail: "scope not granted" };
+    }
+    if (!driveOk) {
+        return {
+            service,
+            status: "warn",
+            detail: "scope granted; drive probe failed so auth state unclear",
+        };
+    }
+    return { service, status: "ok", detail: "scope granted (no cheap direct probe)" };
+}
+/**
+ * Slides: same situation as docs — no cheap generic endpoint. Check scope
+ * presence and rely on the drive probe as a proxy for auth health.
+ */
+function probeSlides(ctx, driveOk) {
+    const service = "slides";
+    if (!hasScope(ctx.tokens, SERVICE_SCOPES.slides)) {
+        return { service, status: "fail", detail: "scope not granted" };
+    }
+    if (!driveOk) {
+        return {
+            service,
+            status: "warn",
+            detail: "scope granted; drive probe failed so auth state unclear",
+        };
+    }
+    return { service, status: "ok", detail: "scope granted (no cheap direct probe)" };
+}
+/**
+ * Run all service probes for a single account in parallel (where they're
+ * independent) and return results keyed by service name.
+ */
+export async function probeAccount(email) {
+    let tokens;
+    try {
+        tokens = await getValidAccessToken(email);
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        // token refresh failed — every service fails for this account
+        return ["gmail", "calendar", "docs", "drive", "slides"].map((service) => ({
+            service,
+            status: "fail",
+            detail: message,
+        }));
+    }
+    const ctx = {
+        email,
+        tokens,
+        accessToken: tokens.access_token,
+    };
+    // Gmail, Calendar, Drive are independent — run in parallel.
+    const [gmail, calendar, drive] = await Promise.all([
+        probeGmail(ctx).catch((e) => errorResult("gmail", e)),
+        probeCalendar(ctx).catch((e) => errorResult("calendar", e)),
+        probeDrive(ctx).catch((e) => errorResult("drive", e)),
+    ]);
+    const driveOk = drive.status === "ok";
+    const docs = probeDocs(ctx, driveOk);
+    const slides = probeSlides(ctx, driveOk);
+    return [gmail, calendar, docs, drive, slides];
+}
+function errorResult(service, err) {
+    return {
+        service,
+        status: "fail",
+        detail: `probe error: ${err instanceof Error ? err.message : String(err)}`,
+    };
+}
+//# sourceMappingURL=probe.js.map

package/dist/src/google/probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.js","sourceRoot":"","sources":["../../../src/google/probe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAoB,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAqB,MAAM,aAAa,CAAC;AAcrE,SAAS,QAAQ,CAAC,MAAoB,EAAE,KAAa;IACnD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxD,OAAO,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,GAAW,EACX,WAAmB;IAEnB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE;KACpD,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,IAAI,GAAY,IAAI,CAAC;IACzB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,gBAAgB;IAClB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,aAAa,CACpB,OAAoB,EACpB,MAAc,EACd,IAAa;IAEb,MAAM,GAAG,GAAI,IAAiE;QAC5E,EAAE,KAAK,CAAC;IACV,MAAM,OAAO,GAAG,GAAG,EAAE,OAAO,IAAI,EAAE,CAAC;IACnC,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO;YACL,OAAO;YACP,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,gDAAgD,OAAO,GAAG;SACnE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACxC,OAAO;gBACL,OAAO;gBACP,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,4BAA4B,OAAO,oBAAoB;aAChE,CAAC;QACJ,CAAC;QACD,IAAI,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,OAAO;gBACL,OAAO;gBACP,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,oCAAoC,OAAO,qBAAqB;aACzE,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,OAAO,EAAE,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;IACrF,CAAC;IACD,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAClB,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,6BAA6B,EAAE,CAAC;IACrF,CAAC;IACD,OAAO;QACL,OAAO;QACP,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,GAAG,MAAM,IAAI,OAAO,IAAI,kBAAkB,EAAE;KACrD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAiB;IACzC,MAAM,OAAO,GAAgB,OAAO,CAAC;IACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAClE,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CACnC,wDAAwD,EACxD,GAAG,CAAC,WAAW,CAChB,CAAC;IACF,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,MAAM,OAAO,GAAG,IAGf,CAAC;QACF,OAAO;YACL,OAAO;YACP,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,IAAI,GAAG,CAAC,KAAK,GAAG,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,aAAa,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE;SACnI,CAAC;IACJ,CAAC;IACD,OAAO,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAiB;IAC5C,MAAM,OAAO,GAAgB,UAAU,CAAC;IACxC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAClE,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CACnC,0GAA0G,EAC1G,GAAG,CAAC,WAAW,CAChB,CAAC;IACF,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,0EAA0E;QAC1E,wEAAwE;QACxE,MAAM,KAAK,GAAG,IAAqD,CAAC;QACpE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;YACzB,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QAC1D,CAAC;QACD,2EAA2E;QAC3E,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAC3C,+EAA+E,EAC/E,GAAG,CAAC,WAAW,CAChB,CAAC;QACF,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,CAAE,EAA4B,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YACjE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,KAAK,uBAAuB,EAAE,CAAC;QAC5E,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAiB;IACzC,MAAM,OAAO,GAAgB,OAAO,CAAC;IACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAClE,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CACnC,+FAA+F,EAC/F,GAAG,CAAC,WAAW,CAChB,CAAC;IACF,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,IAGb,CAAC;QACF,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,YAAY,IAAI,GAAG,CAAC,KAAK,CAAC;QACpD,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,EAAE,KAAK;YACrC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,SAAS;YACtE,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,OAAO;YACP,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK;SAC9C,CAAC;IACJ,CAAC;IACD,OAAO,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAChB,GAAiB,EACjB,OAAgB;IAEhB,MAAM,OAAO,GAAgB,MAAM,CAAC;IACpC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,OAAO;YACP,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,yDAAyD;SAClE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;AACpF,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAClB,GAAiB,EACjB,OAAgB;IAEhB,MAAM,OAAO,GAAgB,QAAQ,CAAC;IACtC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QACjD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,OAAO;YACP,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,yDAAyD;SAClE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;AACpF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAa;IAEb,IAAI,MAAoB,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,8DAA8D;QAC9D,OAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAmB,CAAC,GAAG,CAC5E,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACZ,OAAO;YACP,MAAM,EAAE,MAAe;YACvB,MAAM,EAAE,OAAO;SAChB,CAAC,CACH,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAiB;QACxB,KAAK;QACL,MAAM;QACN,WAAW,EAAE,MAAM,CAAC,YAAY;KACjC,CAAC;IAEF,4DAA4D;IAC5D,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjD,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACrD,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAC3D,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;KACtD,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC;IACtC,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAEzC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,WAAW,CAAC,OAAoB,EAAE,GAAY;IACrD,OAAO;QACL,OAAO;QACP,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,gBAAgB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;KAC3E,CAAC;AACJ,CAAC"}

package/dist/src/google/tokens.d.ts

@@ -0,0 +1,22 @@
+export interface StoredTokens {
+    client_id: string;
+    access_token: string;
+    refresh_token?: string;
+    expiry_date: number;
+    scope: string;
+    token_type: string;
+    obtained_at: string;
+}
+export declare function readTokens(email: string): StoredTokens | null;
+/**
+ * Force-refresh the access token using the stored refresh_token. Persists
+ * the new access_token + expiry_date back to tokens.json (keeps the
+ * existing refresh_token since Google doesn't rotate it on every refresh).
+ */
+export declare function refreshAccessToken(email: string): Promise<StoredTokens>;
+/**
+ * Return a valid access token for the account — auto-refreshing if the
+ * stored one is expired or within EXPIRY_BUFFER_MS of expiry. Throws
+ * AxiError if the account isn't authenticated or refresh fails.
+ */
+export declare function getValidAccessToken(email: string): Promise<StoredTokens>;