latchkey 3.14.0 → 3.15.0

package/dist/src/oauthUtils.d.ts

@@ -1,6 +1,7 @@
 /**
  * Generic OAuth utilities for localhost callback server and token exchange.
  */
+import { type ApiCredentials } from './apiCredentials/base.js';
 export interface OAuthTokenResponse {
     access_token: string;
     refresh_token?: string;
@@ -16,6 +17,22 @@ export declare class OAuthTokenExchangeError extends Error {
 export declare class OAuthCallbackServerTimeoutError extends Error {
     constructor();
 }
+/**
+ * The path the loopback callback server listens on by default.
+ */
+export declare const DEFAULT_OAUTH_CALLBACK_PATH = "/oauth2callback";
+/**
+ * The loopback redirect URI for a login that receives the authorization code
+ * itself, on the port {@link startOAuthCallbackServer} picked.
+ */
+export declare function buildLoopbackRedirectUri(port: number, callbackPath?: string): string;
+/**
+ * The pre-registered redirect URI to use instead of a loopback one, as stored
+ * by `latchkey auth prepare`; undefined when there is none and login should
+ * receive the authorization code directly. See
+ * {@link OAuthCredentials.redirectUri}.
+ */
+export declare function readRedirectUriOverride(credentials?: ApiCredentials): string | undefined;
 export interface OAuthCallbackServer {
     /** The port the server is listening on */
     port: number;

package/dist/src/oauthUtils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauthUtils.d.ts","sourceRoot":"","sources":["../../src/oauthUtils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAOH,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,0BAA2B,SAAQ,kBAAkB;IACpE,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,+BAAgC,SAAQ,KAAK;;CAKzD;AAED,MAAM,WAAW,mBAAmB;IAClC,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,WAAW,EACpB,YAAY,SAAoB,GAC/B,OAAO,CAAC,mBAAmB,CAAC,CA8F9B;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CACzC,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,YAAY,CAAC,EAAE,MAAM,EACrB,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAC7C,OAAO,CAAC,0BAA0B,CAAC,CA6DrC;AAED;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAC7C,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAuCpC"}
+{"version":3,"file":"oauthUtils.d.ts","sourceRoot":"","sources":["../../src/oauthUtils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,EAAE,KAAK,cAAc,EAAoB,MAAM,0BAA0B,CAAC;AAIjF,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,0BAA2B,SAAQ,kBAAkB;IACpE,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,+BAAgC,SAAQ,KAAK;;CAKzD;AAED;;GAEG;AACH,eAAO,MAAM,2BAA2B,oBAAoB,CAAC;AAE7D;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EACZ,YAAY,GAAE,MAAoC,GACjD,MAAM,CAER;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,CAAC,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,CAExF;AAED,MAAM,WAAW,mBAAmB;IAClC,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,WAAW,EACpB,YAAY,GAAE,MAAoC,GACjD,OAAO,CAAC,mBAAmB,CAAC,CA8F9B;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CACzC,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,YAAY,CAAC,EAAE,MAAM,EACrB,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAC7C,OAAO,CAAC,0BAA0B,CAAC,CA6DrC;AAED;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAC7C,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAuCpC"}

package/dist/src/oauthUtils.js

@@ -3,6 +3,7 @@
  */
 import * as crypto from 'node:crypto';
 import * as http from 'node:http';
+import { OAuthCredentials } from './apiCredentials/base.js';
 import { runCapturedAsync } from './curl.js';
 import { LoginCancelledError, LoginFailedError } from './services/core/base.js';
 export class OAuthTokenExchangeError extends Error {
@@ -17,6 +18,26 @@ export class OAuthCallbackServerTimeoutError extends Error {
         this.name = 'OAuthCallbackServerTimeoutError';
     }
 }
+/**
+ * The path the loopback callback server listens on by default.
+ */
+export const DEFAULT_OAUTH_CALLBACK_PATH = '/oauth2callback';
+/**
+ * The loopback redirect URI for a login that receives the authorization code
+ * itself, on the port {@link startOAuthCallbackServer} picked.
+ */
+export function buildLoopbackRedirectUri(port, callbackPath = DEFAULT_OAUTH_CALLBACK_PATH) {
+    return `http://localhost:${port.toString()}${callbackPath}`;
+}
+/**
+ * The pre-registered redirect URI to use instead of a loopback one, as stored
+ * by `latchkey auth prepare`; undefined when there is none and login should
+ * receive the authorization code directly. See
+ * {@link OAuthCredentials.redirectUri}.
+ */
+export function readRedirectUriOverride(credentials) {
+    return credentials instanceof OAuthCredentials ? credentials.redirectUri : undefined;
+}
 /**
  * Start a temporary HTTP server to receive OAuth callback.
  * Returns the assigned port and a promise that resolves with the authorization code.
@@ -25,7 +46,7 @@ export class OAuthCallbackServerTimeoutError extends Error {
  * @param signal - Optional AbortSignal to cancel the server early
  * @param callbackPath - Path to listen for OAuth callback (default: '/oauth2callback')
  */
-export function startOAuthCallbackServer(timeoutMs, signal, callbackPath = '/oauth2callback') {
+export function startOAuthCallbackServer(timeoutMs, signal, callbackPath = DEFAULT_OAUTH_CALLBACK_PATH) {
     const server = http.createServer();
     return new Promise((resolveServer, rejectServer) => {
         server.on('error', (error) => {

package/dist/src/oauthUtils.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauthUtils.js","sourceRoot":"","sources":["../../src/oauthUtils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAahF,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,MAAM,OAAO,+BAAgC,SAAQ,KAAK;IACxD;QACE,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACzE,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAChD,CAAC;CACF;AASD;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACtC,SAAiB,EACjB,MAAoB,EACpB,YAAY,GAAG,iBAAiB;IAEhC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;IAEnC,OAAO,IAAI,OAAO,CAAsB,CAAC,aAAa,EAAE,YAAY,EAAE,EAAE;QACtE,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3B,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACpD,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,YAAY,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;gBACxD,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;YAC1B,IAAI,OAAmC,CAAC;YAExC,MAAM,WAAW,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1D,MAAM,OAAO,GAAG,GAAG,EAAE;oBACnB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;wBAC1B,YAAY,CAAC,OAAO,CAAC,CAAC;oBACxB,CAAC;oBACD,MAAM,CAAC,mBAAmB,EAAE,CAAC;oBAC7B,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,CAAC,CAAC;gBAEF,MAAM,YAAY,GAAG,GAAG,EAAE;oBACxB,OAAO,EAAE,CAAC;oBACV,MAAM,CAAC,IAAI,mBAAmB,EAAE,CAAC,CAAC;gBACpC,CAAC,CAAC;gBAEF,IAAI,MAAM,EAAE,CAAC;oBACX,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;wBACnB,OAAO,EAAE,CAAC;wBACV,MAAM,CAAC,IAAI,mBAAmB,EAAE,CAAC,CAAC;wBAClC,OAAO;oBACT,CAAC;oBACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBACjE,CAAC;gBAED,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;oBAChC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,oBAAoB,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;oBAEhF,IAAI,SAAS,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;wBACxC,MAAM,IAAI,GAAG,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;wBAE7D,IAAI,IAAI,EAAE,CAAC;4BACT,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;4BACrD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;4BACd,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;4BACnD,OAAO,EAAE,CAAC;4BACV,OAAO,CAAC,IAAI,CAAC,CAAC;wBAChB,CAAC;6BAAM,CAAC;4BACN,oEAAoE;4BACpE,kEAAkE;4BAClE,mEAAmE;4BACnE,UAAU;4BACV,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;4BAClD,MAAM,gBAAgB,GAAG,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;4BACzE,MAAM,MAAM,GACV,KAAK,KAAK,IAAI;gCACZ,CAAC,CAAC,qDAAqD;gCACvD,CAAC,CAAC,yBAAyB,KAAK,EAAE;oCAChC,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,gBAAgB,GAAG,CAAC,CAAC;4BAClE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;4BACrD,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;4BACjB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;4BACnD,OAAO,EAAE,CAAC;4BACV,MAAM,CAAC,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;wBACvC,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;wBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;oBACZ,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;oBACxB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;oBACnD,OAAO,EAAE,CAAC;oBACV,MAAM,CAAC,IAAI,+BAA+B,EAAE,CAAC,CAAC;gBAChD,CAAC,EAAE,SAAS,CAAC,CAAC;gBAEd,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;oBAC3B,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;oBACnD,OAAO,EAAE,CAAC;oBACV,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,aAAqB,EACrB,IAAY,EACZ,QAAgB,EAChB,YAAoB,EACpB,WAAmB,EACnB,YAAqB,EACrB,WAA8C;IAE9C,yEAAyE;IACzE,+EAA+E;IAC/E,0EAA0E;IAC1E,qBAAqB;IACrB,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvB,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;IAC7C,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC;QACE,IAAI;QACJ,IAAI;QACJ,MAAM;QACN,IAAI;QACJ,iDAAiD;QACjD,IAAI;QACJ,IAAI,CAAC,QAAQ,EAAE;QACf,aAAa;KACd,EACD,EAAE,CACH,CAAC;IAEF,IAAI,MAAM,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,uBAAuB,CAC/B,qDAAqD,MAAM,CAAC,MAAM,EAAE,CACrE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAGxC,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;YACtD,0EAA0E;YAC1E,wDAAwD;YACxD,MAAM,MAAM,GACV,QAAQ,CAAC,KAAK,KAAK,SAAS;gBAC1B,CAAC,CAAC,uDAAuD;gBACzD,CAAC,CAAC,0BAA0B,QAAQ,CAAC,KAAK,EAAE;oBAC1C,CAAC,QAAQ,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,iBAAiB,GAAG,CAAC,CAAC;YAC3F,MAAM,IAAI,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,QAAsC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;YAC7C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,mCAAmC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC5F,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,aAAqB,EACrB,YAAoB,EACpB,QAAgB,EAChB,YAAoB,EACpB,WAA8C;IAE9C,yEAAyE;IACzE,4EAA4E;IAC5E,iDAAiD;IACjD,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IACxC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IACxC,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC;QACE,IAAI;QACJ,IAAI;QACJ,MAAM;QACN,IAAI;QACJ,iDAAiD;QACjD,IAAI;QACJ,IAAI,CAAC,QAAQ,EAAE;QACf,aAAa;KACd,EACD,EAAE,CACH,CAAC;IAEF,IAAI,MAAM,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAuB,CAAC;QACjE,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"oauthUtils.js","sourceRoot":"","sources":["../../src/oauthUtils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAuB,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAahF,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,MAAM,OAAO,+BAAgC,SAAQ,KAAK;IACxD;QACE,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACzE,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAChD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,iBAAiB,CAAC;AAE7D;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACtC,IAAY,EACZ,eAAuB,2BAA2B;IAElD,OAAO,oBAAoB,IAAI,CAAC,QAAQ,EAAE,GAAG,YAAY,EAAE,CAAC;AAC9D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,WAA4B;IAClE,OAAO,WAAW,YAAY,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;AACvF,CAAC;AASD;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACtC,SAAiB,EACjB,MAAoB,EACpB,eAAuB,2BAA2B;IAElD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;IAEnC,OAAO,IAAI,OAAO,CAAsB,CAAC,aAAa,EAAE,YAAY,EAAE,EAAE;QACtE,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3B,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACpD,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,YAAY,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;gBACxD,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;YAC1B,IAAI,OAAmC,CAAC;YAExC,MAAM,WAAW,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1D,MAAM,OAAO,GAAG,GAAG,EAAE;oBACnB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;wBAC1B,YAAY,CAAC,OAAO,CAAC,CAAC;oBACxB,CAAC;oBACD,MAAM,CAAC,mBAAmB,EAAE,CAAC;oBAC7B,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,CAAC,CAAC;gBAEF,MAAM,YAAY,GAAG,GAAG,EAAE;oBACxB,OAAO,EAAE,CAAC;oBACV,MAAM,CAAC,IAAI,mBAAmB,EAAE,CAAC,CAAC;gBACpC,CAAC,CAAC;gBAEF,IAAI,MAAM,EAAE,CAAC;oBACX,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;wBACnB,OAAO,EAAE,CAAC;wBACV,MAAM,CAAC,IAAI,mBAAmB,EAAE,CAAC,CAAC;wBAClC,OAAO;oBACT,CAAC;oBACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBACjE,CAAC;gBAED,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;oBAChC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,oBAAoB,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;oBAEhF,IAAI,SAAS,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;wBACxC,MAAM,IAAI,GAAG,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;wBAE7D,IAAI,IAAI,EAAE,CAAC;4BACT,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;4BACrD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;4BACd,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;4BACnD,OAAO,EAAE,CAAC;4BACV,OAAO,CAAC,IAAI,CAAC,CAAC;wBAChB,CAAC;6BAAM,CAAC;4BACN,oEAAoE;4BACpE,kEAAkE;4BAClE,mEAAmE;4BACnE,UAAU;4BACV,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;4BAClD,MAAM,gBAAgB,GAAG,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;4BACzE,MAAM,MAAM,GACV,KAAK,KAAK,IAAI;gCACZ,CAAC,CAAC,qDAAqD;gCACvD,CAAC,CAAC,yBAAyB,KAAK,EAAE;oCAChC,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,gBAAgB,GAAG,CAAC,CAAC;4BAClE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;4BACrD,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;4BACjB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;4BACnD,OAAO,EAAE,CAAC;4BACV,MAAM,CAAC,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;wBACvC,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;wBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;oBACZ,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;oBACxB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;oBACnD,OAAO,EAAE,CAAC;oBACV,MAAM,CAAC,IAAI,+BAA+B,EAAE,CAAC,CAAC;gBAChD,CAAC,EAAE,SAAS,CAAC,CAAC;gBAEd,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;oBAC3B,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;oBACnD,OAAO,EAAE,CAAC;oBACV,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,aAAqB,EACrB,IAAY,EACZ,QAAgB,EAChB,YAAoB,EACpB,WAAmB,EACnB,YAAqB,EACrB,WAA8C;IAE9C,yEAAyE;IACzE,+EAA+E;IAC/E,0EAA0E;IAC1E,qBAAqB;IACrB,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvB,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;IAC7C,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC;QACE,IAAI;QACJ,IAAI;QACJ,MAAM;QACN,IAAI;QACJ,iDAAiD;QACjD,IAAI;QACJ,IAAI,CAAC,QAAQ,EAAE;QACf,aAAa;KACd,EACD,EAAE,CACH,CAAC;IAEF,IAAI,MAAM,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,uBAAuB,CAC/B,qDAAqD,MAAM,CAAC,MAAM,EAAE,CACrE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAGxC,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;YACtD,0EAA0E;YAC1E,wDAAwD;YACxD,MAAM,MAAM,GACV,QAAQ,CAAC,KAAK,KAAK,SAAS;gBAC1B,CAAC,CAAC,uDAAuD;gBACzD,CAAC,CAAC,0BAA0B,QAAQ,CAAC,KAAK,EAAE;oBAC1C,CAAC,QAAQ,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,iBAAiB,GAAG,CAAC,CAAC;YAC3F,MAAM,IAAI,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,QAAsC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;YAC7C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,mCAAmC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC5F,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,aAAqB,EACrB,YAAoB,EACpB,QAAgB,EAChB,YAAoB,EACpB,WAA8C;IAE9C,yEAAyE;IACzE,4EAA4E;IAC5E,iDAAiD;IACjD,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IACxC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IACxC,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC;QACE,IAAI;QACJ,IAAI;QACJ,MAAM;QACN,IAAI;QACJ,iDAAiD;QACjD,IAAI;QACJ,IAAI,CAAC,QAAQ,EAAE;QACf,aAAa;KACd,EACD,EAAE,CACH,CAAC;IAEF,IAAI,MAAM,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAuB,CAAC;QACjE,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/src/pluginSdk.d.ts

@@ -0,0 +1,117 @@
+/**
+ * The `latchkey/plugin` entry point.
+ *
+ * At runtime, this builds the object handed to a plugin's factory: every value
+ * a plugin may use, so that a bare clone with no node_modules of its own has
+ * everything it needs. For plugin authors, it is also where the types come
+ * from, with `import type { LatchkeySdk, Service } from 'latchkey/plugin'`.
+ * That is the only way a plugin imports from it: the SDK object, not this
+ * module, is what carries the classes and helpers.
+ *
+ * Plugins declare the Latchkey versions they support as a semver range (see
+ * `src/plugins.ts`), so this surface follows semantic versioning: additions
+ * are welcome in any release, while removing or changing anything here is a
+ * breaking change that calls for a new major version of Latchkey.
+ */
+import { z } from 'zod';
+import { ApiCredentialStatus, ApiCredentialsUsageError, AuthorizationBare, AuthorizationBearer, OAuthCredentials, RawCurlCredentials } from './apiCredentials/base.js';
+import { fetchAccountFromEndpoint, tryParseJson } from './apiCredentials/account.js';
+import { runCapturedAsync } from './curl.js';
+import { OAuthCallbackServerTimeoutError, OAuthTokenExchangeError, buildLoopbackRedirectUri, exchangeCodeForTokens, generateCodeChallenge, generateCodeVerifier, readRedirectUriOverride, refreshAccessToken, startOAuthCallbackServer } from './oauthUtils.js';
+import { BrowserFeaturesUnavailableError, loadPlaywright } from './playwrightLoader.js';
+import { BrowserDisabledError, BrowserFlowsNotSupportedError, CredentialFormFieldMissingError, CredentialFormValues, GraphicalEnvironmentNotFoundError, generateLatchkeyAppName, hasGraphicalEnvironment, requestCredentialsFromUser, showSpinnerPage, typeLikeHuman, withTempBrowserContext } from './playwrightUtils.js';
+import { BrowserFollowupServiceSession, FollowupWork, LoginCancelledError, LoginFailedError, NoCurlCredentialsNotSupportedError, PrepareInputInvalidError, PrepareNotSupportedError, Service, ServiceSession, SimpleServiceSession, buildDynamicClientPreparation, buildFollowupSpinnerDetails, buildPreparedCredentials, describeSchemaIssues, isBrowserClosedError, isResponseBodyUnavailableError, isTimeoutError } from './services/core/base.js';
+import { CookieCaptureLoginFlow } from './services/core/loginFlows/cookieCapture.js';
+import { TokenCaptureLoginFlow } from './services/core/loginFlows/tokenCapture.js';
+import { RegisteredService } from './services/core/registered.js';
+import { GoogleService } from './services/google/base.js';
+export declare function createLatchkeySdk(latchkeyVersion: string): Readonly<{
+    latchkeyVersion: string;
+    z: typeof z;
+    builtinServices: readonly Service[];
+    Service: typeof Service;
+    ServiceSession: typeof ServiceSession;
+    SimpleServiceSession: typeof SimpleServiceSession;
+    BrowserFollowupServiceSession: typeof BrowserFollowupServiceSession;
+    FollowupWork: typeof FollowupWork;
+    RegisteredService: typeof RegisteredService;
+    GoogleService: typeof GoogleService;
+    CookieCaptureLoginFlow: typeof CookieCaptureLoginFlow;
+    TokenCaptureLoginFlow: typeof TokenCaptureLoginFlow;
+    buildDynamicClientPreparation: typeof buildDynamicClientPreparation;
+    buildFollowupSpinnerDetails: typeof buildFollowupSpinnerDetails;
+    buildPreparedCredentials: typeof buildPreparedCredentials;
+    describeSchemaIssues: typeof describeSchemaIssues;
+    isBrowserClosedError: typeof isBrowserClosedError;
+    isResponseBodyUnavailableError: typeof isResponseBodyUnavailableError;
+    isTimeoutError: typeof isTimeoutError;
+    LoginCancelledError: typeof LoginCancelledError;
+    LoginFailedError: typeof LoginFailedError;
+    NoCurlCredentialsNotSupportedError: typeof NoCurlCredentialsNotSupportedError;
+    PrepareNotSupportedError: typeof PrepareNotSupportedError;
+    PrepareInputInvalidError: typeof PrepareInputInvalidError;
+    RedirectUriOverrideSchema: z.ZodEffects<z.ZodString, string, string>;
+    DynamicClientPrepareInputSchema: z.ZodEffects<z.ZodObject<{
+        clientId: z.ZodOptional<z.ZodString>;
+        redirectUri: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    }, "strict", z.ZodTypeAny, {
+        clientId?: string | undefined;
+        redirectUri?: string | undefined;
+    }, {
+        clientId?: string | undefined;
+        redirectUri?: string | undefined;
+    }>, {
+        clientId?: string | undefined;
+        redirectUri?: string | undefined;
+    }, {
+        clientId?: string | undefined;
+        redirectUri?: string | undefined;
+    }>;
+    ApiCredentialStatus: typeof ApiCredentialStatus;
+    ApiCredentialsUsageError: typeof ApiCredentialsUsageError;
+    AuthorizationBearer: typeof AuthorizationBearer;
+    AuthorizationBare: typeof AuthorizationBare;
+    RawCurlCredentials: typeof RawCurlCredentials;
+    OAuthCredentials: typeof OAuthCredentials;
+    DEFAULT_ACCOUNT: "";
+    fetchAccountFromEndpoint: typeof fetchAccountFromEndpoint;
+    tryParseJson: typeof tryParseJson;
+    loadPlaywright: typeof loadPlaywright;
+    withTempBrowserContext: typeof withTempBrowserContext;
+    showSpinnerPage: typeof showSpinnerPage;
+    requestCredentialsFromUser: typeof requestCredentialsFromUser;
+    typeLikeHuman: typeof typeLikeHuman;
+    generateLatchkeyAppName: typeof generateLatchkeyAppName;
+    hasGraphicalEnvironment: typeof hasGraphicalEnvironment;
+    CredentialFormValues: typeof CredentialFormValues;
+    CredentialFormFieldMissingError: typeof CredentialFormFieldMissingError;
+    BrowserDisabledError: typeof BrowserDisabledError;
+    BrowserFlowsNotSupportedError: typeof BrowserFlowsNotSupportedError;
+    BrowserFeaturesUnavailableError: typeof BrowserFeaturesUnavailableError;
+    GraphicalEnvironmentNotFoundError: typeof GraphicalEnvironmentNotFoundError;
+    startOAuthCallbackServer: typeof startOAuthCallbackServer;
+    DEFAULT_OAUTH_CALLBACK_PATH: "/oauth2callback";
+    buildLoopbackRedirectUri: typeof buildLoopbackRedirectUri;
+    readRedirectUriOverride: typeof readRedirectUriOverride;
+    exchangeCodeForTokens: typeof exchangeCodeForTokens;
+    refreshAccessToken: typeof refreshAccessToken;
+    generateCodeVerifier: typeof generateCodeVerifier;
+    generateCodeChallenge: typeof generateCodeChallenge;
+    OAuthTokenExchangeError: typeof OAuthTokenExchangeError;
+    OAuthCallbackServerTimeoutError: typeof OAuthCallbackServerTimeoutError;
+    runCurlCapturedAsync: typeof runCapturedAsync;
+}>;
+export type LatchkeySdk = ReturnType<typeof createLatchkeySdk>;
+export type { LatchkeyPlugin, LatchkeyPluginFactory } from './plugins.js';
+export type { Service, ServiceSession, SimpleServiceSession, BrowserFollowupServiceSession, LoginResult, ManualCredentialForm, } from './services/core/base.js';
+export type { RegisteredService, RegisteredServiceOptions } from './services/core/registered.js';
+export type { LoginFlow } from './services/core/loginFlows/base.js';
+export type { GoogleService } from './services/google/base.js';
+export type { ApiCredentials, ApiCredentialsType, AuthorizationBare, AuthorizationBearer, OAuthCredentials, RawCurlCredentials, SerializedApiCredentials, } from './apiCredentials/base.js';
+export type { EncryptedStorage } from './encryptedStorage.js';
+export type { BrowserLaunchOptions, BrowserWithContext, CredentialFormDecision, CredentialFormField, CredentialFormValues, CredentialRequest, } from './playwrightUtils.js';
+export type { OAuthCallbackServer, OAuthTokenExchangeResponse, OAuthTokenResponse, } from './oauthUtils.js';
+export type { CurlResult } from './curl.js';
+export type { Browser, BrowserContext, Locator, Page, Response } from 'playwright';
+export type { z } from 'zod';
+//# sourceMappingURL=pluginSdk.d.ts.map

package/dist/src/pluginSdk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginSdk.d.ts","sourceRoot":"","sources":["../../src/pluginSdk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,wBAAwB,EACxB,YAAY,EACb,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAEL,+BAA+B,EAC/B,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,kBAAkB,EAClB,wBAAwB,EACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,+BAA+B,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACxF,OAAO,EACL,oBAAoB,EACpB,6BAA6B,EAC7B,+BAA+B,EAC/B,oBAAoB,EACpB,iCAAiC,EACjC,uBAAuB,EACvB,uBAAuB,EACvB,0BAA0B,EAC1B,eAAe,EACf,aAAa,EACb,sBAAsB,EACvB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,6BAA6B,EAE7B,YAAY,EACZ,mBAAmB,EACnB,gBAAgB,EAChB,kCAAkC,EAClC,wBAAwB,EACxB,wBAAwB,EAExB,OAAO,EACP,cAAc,EACd,oBAAoB,EACpB,6BAA6B,EAC7B,2BAA2B,EAC3B,wBAAwB,EACxB,oBAAoB,EACpB,oBAAoB,EACpB,8BAA8B,EAC9B,cAAc,EACf,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE1D,wBAAgB,iBAAiB,CAAC,eAAe,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwExD;AAED,MAAM,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAI/D,YAAY,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAE1E,YAAY,EACV,OAAO,EACP,cAAc,EACd,oBAAoB,EACpB,6BAA6B,EAC7B,WAAW,EACX,oBAAoB,GACrB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACjG,YAAY,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAC;AACpE,YAAY,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE/D,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,YAAY,EACV,oBAAoB,EACpB,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,mBAAmB,EACnB,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAI5C,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACnF,YAAY,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC"}

package/dist/src/pluginSdk.js

@@ -0,0 +1,97 @@
+/**
+ * The `latchkey/plugin` entry point.
+ *
+ * At runtime, this builds the object handed to a plugin's factory: every value
+ * a plugin may use, so that a bare clone with no node_modules of its own has
+ * everything it needs. For plugin authors, it is also where the types come
+ * from, with `import type { LatchkeySdk, Service } from 'latchkey/plugin'`.
+ * That is the only way a plugin imports from it: the SDK object, not this
+ * module, is what carries the classes and helpers.
+ *
+ * Plugins declare the Latchkey versions they support as a semver range (see
+ * `src/plugins.ts`), so this surface follows semantic versioning: additions
+ * are welcome in any release, while removing or changing anything here is a
+ * breaking change that calls for a new major version of Latchkey.
+ */
+import { z } from 'zod';
+import { ApiCredentialStatus, ApiCredentialsUsageError, AuthorizationBare, AuthorizationBearer, OAuthCredentials, RawCurlCredentials, } from './apiCredentials/base.js';
+import { DEFAULT_ACCOUNT, fetchAccountFromEndpoint, tryParseJson, } from './apiCredentials/account.js';
+import { runCapturedAsync } from './curl.js';
+import { DEFAULT_OAUTH_CALLBACK_PATH, OAuthCallbackServerTimeoutError, OAuthTokenExchangeError, buildLoopbackRedirectUri, exchangeCodeForTokens, generateCodeChallenge, generateCodeVerifier, readRedirectUriOverride, refreshAccessToken, startOAuthCallbackServer, } from './oauthUtils.js';
+import { BrowserFeaturesUnavailableError, loadPlaywright } from './playwrightLoader.js';
+import { BrowserDisabledError, BrowserFlowsNotSupportedError, CredentialFormFieldMissingError, CredentialFormValues, GraphicalEnvironmentNotFoundError, generateLatchkeyAppName, hasGraphicalEnvironment, requestCredentialsFromUser, showSpinnerPage, typeLikeHuman, withTempBrowserContext, } from './playwrightUtils.js';
+import { BUILTIN_SERVICES } from './serviceRegistry.js';
+import { BrowserFollowupServiceSession, DynamicClientPrepareInputSchema, FollowupWork, LoginCancelledError, LoginFailedError, NoCurlCredentialsNotSupportedError, PrepareInputInvalidError, PrepareNotSupportedError, RedirectUriOverrideSchema, Service, ServiceSession, SimpleServiceSession, buildDynamicClientPreparation, buildFollowupSpinnerDetails, buildPreparedCredentials, describeSchemaIssues, isBrowserClosedError, isResponseBodyUnavailableError, isTimeoutError, } from './services/core/base.js';
+import { CookieCaptureLoginFlow } from './services/core/loginFlows/cookieCapture.js';
+import { TokenCaptureLoginFlow } from './services/core/loginFlows/tokenCapture.js';
+import { RegisteredService } from './services/core/registered.js';
+import { GoogleService } from './services/google/base.js';
+export function createLatchkeySdk(latchkeyVersion) {
+    return Object.freeze({
+        latchkeyVersion,
+        z,
+        builtinServices: BUILTIN_SERVICES,
+        // Services
+        Service,
+        ServiceSession,
+        SimpleServiceSession,
+        BrowserFollowupServiceSession,
+        FollowupWork,
+        RegisteredService,
+        GoogleService,
+        CookieCaptureLoginFlow,
+        TokenCaptureLoginFlow,
+        buildDynamicClientPreparation,
+        buildFollowupSpinnerDetails,
+        buildPreparedCredentials,
+        describeSchemaIssues,
+        isBrowserClosedError,
+        isResponseBodyUnavailableError,
+        isTimeoutError,
+        LoginCancelledError,
+        LoginFailedError,
+        NoCurlCredentialsNotSupportedError,
+        PrepareNotSupportedError,
+        PrepareInputInvalidError,
+        RedirectUriOverrideSchema,
+        DynamicClientPrepareInputSchema,
+        // Credentials
+        ApiCredentialStatus,
+        ApiCredentialsUsageError,
+        AuthorizationBearer,
+        AuthorizationBare,
+        RawCurlCredentials,
+        OAuthCredentials,
+        DEFAULT_ACCOUNT,
+        fetchAccountFromEndpoint,
+        tryParseJson,
+        // Browser automation
+        loadPlaywright,
+        withTempBrowserContext,
+        showSpinnerPage,
+        requestCredentialsFromUser,
+        typeLikeHuman,
+        generateLatchkeyAppName,
+        hasGraphicalEnvironment,
+        CredentialFormValues,
+        CredentialFormFieldMissingError,
+        BrowserDisabledError,
+        BrowserFlowsNotSupportedError,
+        BrowserFeaturesUnavailableError,
+        GraphicalEnvironmentNotFoundError,
+        // OAuth
+        startOAuthCallbackServer,
+        DEFAULT_OAUTH_CALLBACK_PATH,
+        buildLoopbackRedirectUri,
+        readRedirectUriOverride,
+        exchangeCodeForTokens,
+        refreshAccessToken,
+        generateCodeVerifier,
+        generateCodeChallenge,
+        OAuthTokenExchangeError,
+        OAuthCallbackServerTimeoutError,
+        // curl
+        runCurlCapturedAsync: runCapturedAsync,
+    });
+}
+//# sourceMappingURL=pluginSdk.js.map

package/dist/src/pluginSdk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginSdk.js","sourceRoot":"","sources":["../../src/pluginSdk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,YAAY,GACb,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EACL,2BAA2B,EAC3B,+BAA+B,EAC/B,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,+BAA+B,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACxF,OAAO,EACL,oBAAoB,EACpB,6BAA6B,EAC7B,+BAA+B,EAC/B,oBAAoB,EACpB,iCAAiC,EACjC,uBAAuB,EACvB,uBAAuB,EACvB,0BAA0B,EAC1B,eAAe,EACf,aAAa,EACb,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,EAC/B,YAAY,EACZ,mBAAmB,EACnB,gBAAgB,EAChB,kCAAkC,EAClC,wBAAwB,EACxB,wBAAwB,EACxB,yBAAyB,EACzB,OAAO,EACP,cAAc,EACd,oBAAoB,EACpB,6BAA6B,EAC7B,2BAA2B,EAC3B,wBAAwB,EACxB,oBAAoB,EACpB,oBAAoB,EACpB,8BAA8B,EAC9B,cAAc,GACf,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE1D,MAAM,UAAU,iBAAiB,CAAC,eAAuB;IACvD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,eAAe;QACf,CAAC;QACD,eAAe,EAAE,gBAAgB;QAEjC,WAAW;QACX,OAAO;QACP,cAAc;QACd,oBAAoB;QACpB,6BAA6B;QAC7B,YAAY;QACZ,iBAAiB;QACjB,aAAa;QACb,sBAAsB;QACtB,qBAAqB;QACrB,6BAA6B;QAC7B,2BAA2B;QAC3B,wBAAwB;QACxB,oBAAoB;QACpB,oBAAoB;QACpB,8BAA8B;QAC9B,cAAc;QACd,mBAAmB;QACnB,gBAAgB;QAChB,kCAAkC;QAClC,wBAAwB;QACxB,wBAAwB;QACxB,yBAAyB;QACzB,+BAA+B;QAE/B,cAAc;QACd,mBAAmB;QACnB,wBAAwB;QACxB,mBAAmB;QACnB,iBAAiB;QACjB,kBAAkB;QAClB,gBAAgB;QAChB,eAAe;QACf,wBAAwB;QACxB,YAAY;QAEZ,qBAAqB;QACrB,cAAc;QACd,sBAAsB;QACtB,eAAe;QACf,0BAA0B;QAC1B,aAAa;QACb,uBAAuB;QACvB,uBAAuB;QACvB,oBAAoB;QACpB,+BAA+B;QAC/B,oBAAoB;QACpB,6BAA6B;QAC7B,+BAA+B;QAC/B,iCAAiC;QAEjC,QAAQ;QACR,wBAAwB;QACxB,2BAA2B;QAC3B,wBAAwB;QACxB,uBAAuB;QACvB,qBAAqB;QACrB,kBAAkB;QAClB,oBAAoB;QACpB,qBAAqB;QACrB,uBAAuB;QACvB,+BAA+B;QAE/B,OAAO;QACP,oBAAoB,EAAE,gBAAgB;KACvC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/plugins.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Plugins: services contributed by repositories cloned into the plugins
+ * directory (`~/.latchkey/plugins/` by default). Once loaded, their services
+ * are indistinguishable from the built-in ones.
+ *
+ * A plugin is an ES module package whose default export is a factory. It is
+ * handed a {@link LatchkeySdk} and returns a {@link LatchkeyPlugin}:
+ *
+ *   export default (sdk) => {
+ *     class Foo extends sdk.Service { ... }
+ *     return { latchkeyVersion: '^3.15.0', services: [new Foo()] };
+ *   };
+ *
+ * A plugin whose services use a credentials class of their own also lists
+ * that class under `apiCredentialsTypes`, which is what lets such credentials
+ * be stored. The class carries a static `objectType` and a static `fromJSON`
+ * that validates stored data (see the built-in credentials classes).
+ *
+ * `latchkeyVersion` is the range of Latchkey versions the plugin was written
+ * for, in the syntax of a package.json dependency. Latchkey follows semantic
+ * versioning with respect to the sdk, so `^3.15.0` means "3.15.0 or newer,
+ * until the next major version", and a plugin whose range excludes the running
+ * Latchkey is refused at load time rather than failing in some subtler way
+ * later.
+ *
+ * Everything a plugin needs at runtime comes from the sdk, so a bare
+ * `git clone` into the plugins directory is a complete installation.
+ */
+import type { ApiCredentialsType } from './apiCredentials/base.js';
+import type { LatchkeySdk } from './pluginSdk.js';
+import { Service } from './services/core/base.js';
+export interface LatchkeyPlugin {
+    /**
+     * The Latchkey versions the plugin supports, as a package.json-style
+     * version range such as `^3.15.0`.
+     */
+    readonly latchkeyVersion: string;
+    readonly services: readonly Service[];
+    /** The credentials classes the plugin defines, if any. */
+    readonly apiCredentialsTypes?: readonly ApiCredentialsType[];
+}
+export type LatchkeyPluginFactory = (sdk: LatchkeySdk) => LatchkeyPlugin | Promise<LatchkeyPlugin>;
+export interface LoadedPlugin {
+    /** The name of the plugin's directory inside the plugins directory. */
+    readonly name: string;
+    readonly directory: string;
+    readonly services: readonly Service[];
+    readonly apiCredentialsTypes: readonly ApiCredentialsType[];
+}
+export declare class PluginLoadError extends Error {
+    constructor(pluginName: string, detail: string);
+}
+/**
+ * Whether the running Latchkey falls within the version range a plugin
+ * declares. A prerelease Latchkey (say a development build) counts too, as
+ * long as the range would admit its release.
+ */
+export declare function isLatchkeyVersionSupported(versionRange: string, latchkeyVersion: string): boolean;
+/**
+ * Load every plugin found in `directory`, in alphabetical order of directory
+ * name. Entries that are not directories (following symlinks, so a checkout
+ * elsewhere can be linked in) are ignored, as are `node_modules` and dot
+ * directories. A missing directory means no plugins. Throws `PluginLoadError`
+ * on the first plugin that cannot be loaded.
+ */
+export declare function loadPlugins(directory: string, sdk: LatchkeySdk): Promise<readonly LoadedPlugin[]>;
+/**
+ * The built-in services followed by every plugin's, refusing a plugin service
+ * whose name is already taken. The registry itself only checks names as
+ * services are added one by one, and these all go in together.
+ */
+export declare function combineWithPluginServices(builtinServices: readonly Service[], plugins: readonly LoadedPlugin[]): readonly Service[];
+export declare function combineWithPluginApiCredentialsTypes(builtinTypes: readonly ApiCredentialsType[], plugins: readonly LoadedPlugin[]): readonly ApiCredentialsType[];
+//# sourceMappingURL=plugins.d.ts.map

package/dist/src/plugins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugins.d.ts","sourceRoot":"","sources":["../../src/plugins.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAMH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAElD,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;IACtC,0DAA0D;IAC1D,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;CAC9D;AAED,MAAM,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE,WAAW,KAAK,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;AAEnG,MAAM,WAAW,YAAY;IAC3B,uEAAuE;IACvE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;IACtC,QAAQ,CAAC,mBAAmB,EAAE,SAAS,kBAAkB,EAAE,CAAC;CAC7D;AAED,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAI/C;AAuDD;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAEjG;AAqID;;;;;;GAMG;AACH,wBAAsB,WAAW,CAC/B,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,WAAW,GACf,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC,CAclC;AA+BD;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,eAAe,EAAE,SAAS,OAAO,EAAE,EACnC,OAAO,EAAE,SAAS,YAAY,EAAE,GAC/B,SAAS,OAAO,EAAE,CAQpB;AAED,wBAAgB,oCAAoC,CAClD,YAAY,EAAE,SAAS,kBAAkB,EAAE,EAC3C,OAAO,EAAE,SAAS,YAAY,EAAE,GAC/B,SAAS,kBAAkB,EAAE,CAQ/B"}

package/dist/src/plugins.js

@@ -0,0 +1,221 @@
+/**
+ * Plugins: services contributed by repositories cloned into the plugins
+ * directory (`~/.latchkey/plugins/` by default). Once loaded, their services
+ * are indistinguishable from the built-in ones.
+ *
+ * A plugin is an ES module package whose default export is a factory. It is
+ * handed a {@link LatchkeySdk} and returns a {@link LatchkeyPlugin}:
+ *
+ *   export default (sdk) => {
+ *     class Foo extends sdk.Service { ... }
+ *     return { latchkeyVersion: '^3.15.0', services: [new Foo()] };
+ *   };
+ *
+ * A plugin whose services use a credentials class of their own also lists
+ * that class under `apiCredentialsTypes`, which is what lets such credentials
+ * be stored. The class carries a static `objectType` and a static `fromJSON`
+ * that validates stored data (see the built-in credentials classes).
+ *
+ * `latchkeyVersion` is the range of Latchkey versions the plugin was written
+ * for, in the syntax of a package.json dependency. Latchkey follows semantic
+ * versioning with respect to the sdk, so `^3.15.0` means "3.15.0 or newer,
+ * until the next major version", and a plugin whose range excludes the running
+ * Latchkey is refused at load time rather than failing in some subtler way
+ * later.
+ *
+ * Everything a plugin needs at runtime comes from the sdk, so a bare
+ * `git clone` into the plugins directory is a complete installation.
+ */
+import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { satisfies as satisfiesVersionRange, validRange } from 'semver';
+import { Service } from './services/core/base.js';
+export class PluginLoadError extends Error {
+    constructor(pluginName, detail) {
+        super(`Failed to load plugin '${pluginName}': ${detail}`);
+        this.name = 'PluginLoadError';
+    }
+}
+const PACKAGE_JSON_FILENAME = 'package.json';
+const DEFAULT_ENTRY_FILENAME = 'index.js';
+// ─── Loading ──────────────────────────────────────────────────────────────────
+/**
+ * The entry a package.json `exports` field points at for the package root,
+ * or undefined when it names none that an `import` would pick.
+ */
+function pickEntryFromExports(exportsField) {
+    if (typeof exportsField === 'string') {
+        return exportsField;
+    }
+    if (typeof exportsField !== 'object' || exportsField === null) {
+        return undefined;
+    }
+    const record = exportsField;
+    if ('.' in record) {
+        return pickEntryFromExports(record['.']);
+    }
+    return pickEntryFromExports(record.import ?? record.default);
+}
+function resolvePluginEntryFile(pluginName, pluginDirectory) {
+    const packageJsonPath = join(pluginDirectory, PACKAGE_JSON_FILENAME);
+    let entry = DEFAULT_ENTRY_FILENAME;
+    if (existsSync(packageJsonPath)) {
+        let packageJson;
+        try {
+            packageJson = JSON.parse(readFileSync(packageJsonPath, 'utf-8'));
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            throw new PluginLoadError(pluginName, `invalid ${PACKAGE_JSON_FILENAME}: ${message}`);
+        }
+        const { exports: exportsField, main } = packageJson;
+        entry = pickEntryFromExports(exportsField) ?? (typeof main === 'string' ? main : entry);
+    }
+    const entryFile = join(pluginDirectory, entry);
+    if (!existsSync(entryFile)) {
+        throw new PluginLoadError(pluginName, `entry file '${entryFile}' does not exist. ` +
+            'If the plugin is written in TypeScript, it has to be built first.');
+    }
+    return entryFile;
+}
+const EXAMPLE_VERSION_RANGE = '^3.15.0';
+/**
+ * Whether the running Latchkey falls within the version range a plugin
+ * declares. A prerelease Latchkey (say a development build) counts too, as
+ * long as the range would admit its release.
+ */
+export function isLatchkeyVersionSupported(versionRange, latchkeyVersion) {
+    return satisfiesVersionRange(latchkeyVersion, versionRange, { includePrerelease: true });
+}
+function validatePluginManifest(pluginName, manifest, latchkeyVersion) {
+    if (typeof manifest !== 'object' || manifest === null) {
+        throw new PluginLoadError(pluginName, 'the plugin factory did not return an object.');
+    }
+    const { latchkeyVersion: versionRange, services, apiCredentialsTypes, } = manifest;
+    if (typeof versionRange !== 'string') {
+        throw new PluginLoadError(pluginName, "'latchkeyVersion' must be a string declaring the Latchkey versions the plugin supports, " +
+            `like '${EXAMPLE_VERSION_RANGE}'.`);
+    }
+    if (validRange(versionRange) === null) {
+        throw new PluginLoadError(pluginName, `'${versionRange}' is not a valid version range for 'latchkeyVersion'. ` +
+            `Use the syntax of a package.json dependency, like '${EXAMPLE_VERSION_RANGE}'.`);
+    }
+    if (!isLatchkeyVersionSupported(versionRange, latchkeyVersion)) {
+        throw new PluginLoadError(pluginName, `it supports Latchkey ${versionRange}, but this is Latchkey ${latchkeyVersion}.`);
+    }
+    if (!Array.isArray(services)) {
+        throw new PluginLoadError(pluginName, "'services' must be an array of Service instances.");
+    }
+    for (const service of services) {
+        if (!(service instanceof Service)) {
+            throw new PluginLoadError(pluginName, "every entry of 'services' must extend the Service class handed to the plugin " +
+                'as sdk.Service. A service that looks right but is still refused usually extends ' +
+                'the class of a separately installed latchkey instead.');
+        }
+    }
+    return {
+        latchkeyVersion: versionRange,
+        services: services,
+        apiCredentialsTypes: validateApiCredentialsTypes(pluginName, apiCredentialsTypes),
+    };
+}
+function isApiCredentialsType(value) {
+    if ((typeof value !== 'object' && typeof value !== 'function') || value === null) {
+        return false;
+    }
+    const { objectType, fromJSON } = value;
+    return typeof objectType === 'string' && typeof fromJSON === 'function';
+}
+function validateApiCredentialsTypes(pluginName, apiCredentialsTypes) {
+    if (apiCredentialsTypes === undefined) {
+        return [];
+    }
+    if (!Array.isArray(apiCredentialsTypes)) {
+        throw new PluginLoadError(pluginName, "'apiCredentialsTypes' must be an array when present.");
+    }
+    for (const type of apiCredentialsTypes) {
+        if (!isApiCredentialsType(type)) {
+            throw new PluginLoadError(pluginName, "every entry of 'apiCredentialsTypes' must be a credentials class with a static " +
+                "'objectType' and a static 'fromJSON'.");
+        }
+    }
+    return apiCredentialsTypes;
+}
+async function loadPlugin(pluginName, pluginDirectory, sdk) {
+    const entryFile = resolvePluginEntryFile(pluginName, pluginDirectory);
+    let importedModule;
+    try {
+        importedModule = (await import(pathToFileURL(entryFile).href));
+    }
+    catch (error) {
+        throw new PluginLoadError(pluginName, `could not import '${entryFile}': ${error instanceof Error ? error.message : String(error)}`);
+    }
+    const factory = importedModule.default;
+    if (typeof factory !== 'function') {
+        throw new PluginLoadError(pluginName, `'${entryFile}' must have a default export that is a function (sdk) => plugin.`);
+    }
+    let manifest;
+    try {
+        manifest = await factory(sdk);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        throw new PluginLoadError(pluginName, `the plugin factory threw: ${message}`);
+    }
+    const { services, apiCredentialsTypes } = validatePluginManifest(pluginName, manifest, sdk.latchkeyVersion);
+    return { name: pluginName, directory: pluginDirectory, services, apiCredentialsTypes };
+}
+function isDirectory(path) {
+    return statSync(path, { throwIfNoEntry: false })?.isDirectory() ?? false;
+}
+/**
+ * Load every plugin found in `directory`, in alphabetical order of directory
+ * name. Entries that are not directories (following symlinks, so a checkout
+ * elsewhere can be linked in) are ignored, as are `node_modules` and dot
+ * directories. A missing directory means no plugins. Throws `PluginLoadError`
+ * on the first plugin that cannot be loaded.
+ */
+export async function loadPlugins(directory, sdk) {
+    if (!isDirectory(directory)) {
+        return [];
+    }
+    const pluginNames = readdirSync(directory)
+        .filter((name) => !name.startsWith('.') && name !== 'node_modules')
+        .filter((name) => isDirectory(join(directory, name)))
+        .sort();
+    const plugins = [];
+    for (const pluginName of pluginNames) {
+        plugins.push(await loadPlugin(pluginName, join(directory, pluginName), sdk));
+    }
+    return plugins;
+}
+/**
+ * The built-in items followed by every plugin's, refusing a plugin item whose
+ * key is already taken.
+ */
+function combineWithPluginContributions(kind, builtinItems, plugins, itemsOf, keyOf) {
+    const providers = new Map(builtinItems.map((item) => [keyOf(item), 'Latchkey itself']));
+    for (const plugin of plugins) {
+        for (const item of itemsOf(plugin)) {
+            const provider = providers.get(keyOf(item));
+            if (provider !== undefined) {
+                throw new PluginLoadError(plugin.name, `${kind} '${keyOf(item)}' is already provided by ${provider}.`);
+            }
+            providers.set(keyOf(item), `plugin '${plugin.name}'`);
+        }
+    }
+    return [...builtinItems, ...plugins.flatMap(itemsOf)];
+}
+/**
+ * The built-in services followed by every plugin's, refusing a plugin service
+ * whose name is already taken. The registry itself only checks names as
+ * services are added one by one, and these all go in together.
+ */
+export function combineWithPluginServices(builtinServices, plugins) {
+    return combineWithPluginContributions('service', builtinServices, plugins, (plugin) => plugin.services, (service) => service.name);
+}
+export function combineWithPluginApiCredentialsTypes(builtinTypes, plugins) {
+    return combineWithPluginContributions('credentials type', builtinTypes, plugins, (plugin) => plugin.apiCredentialsTypes, (type) => type.objectType);
+}
+//# sourceMappingURL=plugins.js.map