nomoreide 0.2.0 → 0.3.2

package/dist/core/vercel-manager.js

@@ -1,401 +0,0 @@
-/**
- * Read-safe Vercel REST client — the agent-reachable half of the integration.
- *
- * Like {@link ./git-manager.js GitManager}, this module deliberately contains
- * no operation that changes what is deployed. Redeploy / cancel / promote /
- * rollback live in `vercel-actions.ts` behind an explicit human-driven route,
- * so an agent holding these tools can observe a deploy but never ship one.
- */
-import { providerApiBase } from "./providers/api-base.js";
-export class VercelApiError extends Error {
-    status;
-    path;
-    constructor(message, status, path) {
-        super(message);
-        this.status = status;
-        this.path = path;
-        this.name = "VercelApiError";
-    }
-}
-/** Vercel exposes a repo's project via the exact remote URL it was imported with. */
-export function vercelRepoUrl(remoteUrl) {
-    const trimmed = remoteUrl.trim().replace(/\.git$/, "").replace(/\/$/, "");
-    const ssh = /^git@([^:]+):(.+)$/.exec(trimmed);
-    if (ssh)
-        return `https://${ssh[1]}/${ssh[2]}`;
-    if (/^https?:\/\//.test(trimmed))
-        return trimmed.replace(/^http:/, "https:");
-    return null;
-}
-/** Vercel's API, or the loopback stand-in an environment override names. */
-export function vercelApiBase() {
-    return providerApiBase("NOMOREIDE_VERCEL_API_BASE", "https://api.vercel.com");
-}
-export class VercelManager {
-    token;
-    teamId;
-    baseUrl;
-    options;
-    constructor(token, teamId, baseUrl = vercelApiBase(), options = {}) {
-        this.token = token;
-        this.teamId = teamId;
-        this.baseUrl = baseUrl;
-        this.options = options;
-    }
-    /**
-     * The signed-in account.
-     *
-     * `/v2/user` is the account endpoint for CLI and personal-access tokens, but
-     * a browser sign-in has no legacy user record behind it and gets a 404 there.
-     * Those tokens answer at the issuer's OIDC userinfo endpoint instead. The
-     * caller states which it holds rather than having this infer it from a failed
-     * request, so a genuine authorization error still surfaces as one.
-     */
-    async viewer() {
-        if (this.options.identity === "oidc")
-            return this.oidcViewer();
-        const data = await this.request("/v2/user");
-        return data.user;
-    }
-    async oidcViewer() {
-        const response = await (this.options.fetch ?? fetch)(`${this.baseUrl}/login/oauth/userinfo`, { headers: { Authorization: `Bearer ${this.token}`, Accept: "application/json" } });
-        if (!response.ok) {
-            throw new VercelApiError(`Vercel rejected the sign-in (HTTP ${response.status}).`, response.status, "/login/oauth/userinfo");
-        }
-        const claims = (await response.json());
-        return {
-            id: claims.sub ?? "",
-            username: claims.preferred_username ?? claims.email ?? "vercel",
-            email: claims.email ?? null,
-            avatar: claims.picture ?? null,
-        };
-    }
-    async listTeams() {
-        const data = await this.request("/v2/teams?limit=100");
-        return (data.teams ?? []).map((team) => ({
-            id: team.id,
-            slug: team.slug,
-            name: team.name ?? null,
-        }));
-    }
-    async listProjects(opts = {}) {
-        const params = new URLSearchParams({ limit: String(opts.limit ?? 50) });
-        if (opts.search)
-            params.set("search", opts.search);
-        if (opts.repoUrl)
-            params.set("repoUrl", opts.repoUrl);
-        const data = await this.request(`/v10/projects?${params}`);
-        const projects = Array.isArray(data) ? data : data.projects ?? [];
-        return projects.map(normalizeProject);
-    }
-    async getProject(idOrName) {
-        return normalizeProject(await this.request(`/v9/projects/${encodeURIComponent(idOrName)}`));
-    }
-    async listDeployments(opts) {
-        const params = new URLSearchParams({
-            projectId: opts.projectId,
-            limit: String(opts.limit ?? 20),
-        });
-        // Vercel has no `preview` target filter — preview deployments are the ones
-        // with a null target, so they're filtered client-side below.
-        if (opts.target === "production")
-            params.set("target", "production");
-        const data = await this.request(`/v7/deployments?${params}`);
-        const deployments = (data.deployments ?? []).map(normalizeDeployment);
-        return opts.target === "preview"
-            ? deployments.filter((deployment) => deployment.target !== "production")
-            : deployments;
-    }
-    async getDeployment(idOrUrl) {
-        const data = await this.request(`/v13/deployments/${encodeURIComponent(idOrUrl)}?withGitRepoInfo=true`);
-        return {
-            ...normalizeDeployment(data),
-            aliases: data.alias ?? [],
-            buildingAt: data.buildingAt,
-            errorMessage: data.errorMessage ?? undefined,
-        };
-    }
-    /**
-     * Build logs for a deployment. Requested without `follow`, so the endpoint
-     * answers as a one-shot JSON document instead of an open event stream — the
-     * dashboard polls while a build is running rather than holding a socket.
-     */
-    async deploymentBuildLogs(idOrUrl, limit = 500) {
-        const params = new URLSearchParams({
-            builds: "1",
-            direction: "backward",
-            limit: String(limit),
-        });
-        const raw = await this.request(`/v3/deployments/${encodeURIComponent(idOrUrl)}/events?${params}`, { accept: "text/plain" });
-        return parseBuildLogEvents(raw);
-    }
-    /**
-     * The project's environment variables, without their values.
-     *
-     * `decrypt` is left off, so Vercel returns encrypted variables as ciphertext
-     * — but plain and system ones would still come back readable, so the value is
-     * dropped here for every type rather than for some of them. One door for
-     * reading a value keeps that door easy to audit.
-     */
-    async listEnv(projectId) {
-        const data = await this.request(`/v9/projects/${encodeURIComponent(projectId)}/env?limit=200`);
-        const envs = Array.isArray(data) ? data : data.envs ?? [];
-        return envs.map(normalizeEnvVar).sort((a, b) => a.key.localeCompare(b.key));
-    }
-    /**
-     * One variable's decrypted value.
-     *
-     * Deliberately a single-key read rather than a `decrypt=true` list: the
-     * dashboard reveals one row at a time on an explicit click, and nothing else
-     * in the app has a reason to hold every secret at once.
-     */
-    async getEnvValue(projectId, envId) {
-        const data = await this.request(`/v9/projects/${encodeURIComponent(projectId)}/env/${encodeURIComponent(envId)}`);
-        return data.value ?? "";
-    }
-    async listDomains(projectId) {
-        const data = await this.request(`/v9/projects/${encodeURIComponent(projectId)}/domains?limit=100`);
-        return (data.domains ?? []).map(normalizeDomain);
-    }
-    /**
-     * Runtime (function) logs, as opposed to build logs: why a deployed request
-     * failed, rather than why the build did.
-     *
-     * This endpoint is not available on every plan and answers NDJSON rather than
-     * JSON, so the caller gets an empty list for a 402/403/404 instead of an
-     * error — an absent capability is not a broken dashboard. Genuine auth
-     * failures still throw.
-     */
-    async deploymentRuntimeLogs(idOrUrl, limit = 200) {
-        const params = new URLSearchParams({ limit: String(limit) });
-        try {
-            const raw = await this.request(`/v1/deployments/${encodeURIComponent(idOrUrl)}/runtime-logs?${params}`, { accept: "text/plain" });
-            return parseRuntimeLogEvents(raw);
-        }
-        catch (error) {
-            if (error instanceof VercelApiError && RUNTIME_LOGS_UNAVAILABLE.has(error.status)) {
-                return [];
-            }
-            throw error;
-        }
-    }
-    request(path, opts) {
-        return vercelRequest({ token: this.token, teamId: this.teamId, baseUrl: this.baseUrl, fetch: this.options.fetch }, path, opts);
-    }
-}
-/**
- * The one place a Vercel API call is made. Shared with `vercel-actions.ts` so
- * auth, team scoping, and error shaping stay identical across the read and
- * write halves — the read/write boundary is which module exposes an operation,
- * not which one can reach the network.
- */
-export async function vercelRequest(auth, path, opts) {
-    const url = new URL(path.startsWith("http") ? path : `${auth.baseUrl ?? vercelApiBase()}${path}`);
-    if (auth.teamId)
-        url.searchParams.set("teamId", auth.teamId);
-    const headers = {
-        Authorization: `Bearer ${auth.token}`,
-        Accept: opts?.accept ?? "application/json",
-    };
-    const init = { method: opts?.method ?? "GET", headers };
-    if (opts?.body !== undefined) {
-        headers["Content-Type"] = "application/json";
-        init.body = JSON.stringify(opts.body);
-    }
-    const response = await (auth.fetch ?? fetch)(url, init);
-    if (!response.ok) {
-        throw new VercelApiError(await readApiError(response, path), response.status, path);
-    }
-    if (opts?.accept === "text/plain") {
-        return (await response.text());
-    }
-    return response.json();
-}
-/**
- * Vercel wraps its failures in `{ error: { code, message } }`. When it sends
- * no message the bare status text ("Not Found") says nothing about what was
- * being asked, so name the request instead — that string is what the dashboard
- * shows the user, and it is the only clue they get.
- */
-async function readApiError(response, path) {
-    try {
-        const body = (await response.json());
-        if (body.error?.message)
-            return body.error.message;
-    }
-    catch {
-        /* fall through to a description of the request */
-    }
-    const status = [response.status, response.statusText].filter(Boolean).join(" ");
-    return `Vercel returned ${status} for ${path}`;
-}
-/**
- * The events endpoint answers either a JSON array or newline-delimited JSON
- * depending on how it decides to stream, so both shapes are accepted and
- * anything unparseable is dropped rather than failing the whole log read.
- */
-export function parseBuildLogEvents(raw) {
-    const events = [];
-    const trimmed = raw.trim();
-    if (!trimmed)
-        return [];
-    try {
-        const parsed = JSON.parse(trimmed);
-        events.push(...(Array.isArray(parsed) ? parsed : [parsed]));
-    }
-    catch {
-        for (const line of trimmed.split("\n")) {
-            if (!line.trim())
-                continue;
-            try {
-                events.push(JSON.parse(line));
-            }
-            catch {
-                /* skip partial lines */
-            }
-        }
-    }
-    return events
-        .map((event, index) => ({
-        id: event.payload?.id ?? `${event.created ?? index}-${index}`,
-        createdAt: event.payload?.date ?? event.created ?? 0,
-        type: event.type ?? "stdout",
-        // Build output is ANSI-colored; strip the SGR codes so the log renders
-        // as plain text rather than as escape soup. The ESC is the point here.
-        //
-        // The `typeof` guard is not belt-and-braces: `?? ""` passes a number
-        // through, and a build event whose `text` is not a string used to throw
-        // `.replace is not a function` out of a log read — an unreadable failure
-        // in place of the one line it could not use.
-        text: typeof event.payload?.text === "string"
-            ? // biome-ignore lint/suspicious/noControlCharactersInRegex: matching an ANSI escape sequence requires the ESC character.
-                event.payload.text.replace(/\u001b\[[0-9;]*m/g, "").trimEnd()
-            : "",
-    }))
-        .filter((line) => line.text.length > 0)
-        .sort((a, b) => a.createdAt - b.createdAt);
-}
-/**
- * Statuses that mean "this account cannot use runtime logs" rather than "the
- * request was wrong": plan-gated (402), not entitled (403), or the endpoint not
- * being served for this deployment (404).
- */
-const RUNTIME_LOGS_UNAVAILABLE = new Set([402, 403, 404]);
-/**
- * Runtime logs arrive as newline-delimited JSON. Unparseable lines are dropped
- * rather than failing the read — a truncated final line is normal for a stream
- * that was cut off at the limit.
- */
-export function parseRuntimeLogEvents(raw) {
-    const trimmed = raw.trim();
-    if (!trimmed)
-        return [];
-    const rows = [];
-    for (const line of trimmed.split("\n")) {
-        if (!line.trim())
-            continue;
-        try {
-            const parsed = JSON.parse(line);
-            rows.push(...(Array.isArray(parsed) ? parsed : [parsed]));
-        }
-        catch {
-            /* skip partial lines */
-        }
-    }
-    return rows
-        .map((row, index) => ({
-        id: row.rowId ?? row.requestId ?? `${row.timestampInMs ?? index}-${index}`,
-        createdAt: row.timestampInMs ?? row.timestamp ?? 0,
-        level: row.level ?? "info",
-        message: (row.message ?? "").trimEnd(),
-        source: row.source,
-        statusCode: row.statusCode,
-        requestMethod: row.requestMethod,
-        requestPath: row.requestPath,
-    }))
-        .filter((line) => line.message.length > 0)
-        .sort((a, b) => a.createdAt - b.createdAt);
-}
-function normalizeProject(project) {
-    return {
-        id: project.id,
-        name: project.name,
-        framework: project.framework ?? null,
-        updatedAt: project.updatedAt,
-        link: project.link?.type
-            ? {
-                type: project.link.type,
-                org: project.link.org,
-                repo: project.link.repo,
-                productionBranch: project.link.productionBranch,
-            }
-            : undefined,
-        // The list endpoint returns these too, but only the single-project read
-        // fills them all in; undefined therefore means "not read", while null
-        // means Vercel is using the framework default.
-        buildCommand: project.buildCommand,
-        devCommand: project.devCommand,
-        installCommand: project.installCommand,
-        outputDirectory: project.outputDirectory,
-        rootDirectory: project.rootDirectory,
-        nodeVersion: project.nodeVersion,
-        serverlessFunctionRegion: project.serverlessFunctionRegion,
-    };
-}
-export function normalizeEnvVar(env) {
-    return {
-        id: env.id ?? env.key,
-        key: env.key,
-        target: Array.isArray(env.target) ? env.target : env.target ? [env.target] : [],
-        type: env.type ?? "encrypted",
-        gitBranch: env.gitBranch ?? null,
-        comment: env.comment ?? null,
-        createdAt: env.createdAt,
-        updatedAt: env.updatedAt,
-    };
-}
-function normalizeDomain(domain) {
-    return {
-        name: domain.name,
-        apexName: domain.apexName,
-        verified: domain.verified ?? false,
-        redirect: domain.redirect ?? null,
-        gitBranch: domain.gitBranch ?? null,
-        createdAt: domain.createdAt,
-        updatedAt: domain.updatedAt,
-        verification: (domain.verification ?? [])
-            .filter((entry) => entry.domain && entry.value)
-            .map((entry) => ({
-            type: entry.type ?? "TXT",
-            domain: entry.domain ?? "",
-            value: entry.value ?? "",
-            reason: entry.reason,
-        })),
-    };
-}
-function normalizeDeployment(deployment) {
-    const meta = deployment.meta ?? {};
-    return {
-        uid: deployment.uid ?? deployment.id ?? "",
-        name: deployment.name,
-        url: deployment.url,
-        state: deployment.readyState ?? deployment.state ?? "QUEUED",
-        target: deployment.target ?? null,
-        createdAt: deployment.createdAt ?? deployment.created ?? 0,
-        readyAt: deployment.readyAt ?? deployment.ready,
-        // `PROMOTED`/`ROLLING` mark the deployment currently aliased to production;
-        // `STAGED` means built for production but not serving it yet.
-        isCurrentProduction: deployment.target === "production" && deployment.readySubstate !== "STAGED",
-        creator: deployment.creator,
-        meta: {
-            branch: meta.githubCommitRef ?? meta.gitlabCommitRef ?? meta.bitbucketCommitRef,
-            sha: meta.githubCommitSha ?? meta.gitlabCommitSha ?? meta.bitbucketCommitSha,
-            commitMessage: meta.githubCommitMessage ?? meta.gitlabCommitMessage ?? meta.bitbucketCommitMessage,
-            commitAuthor: meta.githubCommitAuthorName ??
-                meta.gitlabCommitAuthorName ??
-                meta.bitbucketCommitAuthorName,
-        },
-        inspectorUrl: deployment.inspectorUrl,
-    };
-}
-//# sourceMappingURL=vercel-manager.js.map

package/dist/core/vercel-manager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"vercel-manager.js","sourceRoot":"","sources":["../../src/core/vercel-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAgJ1D,MAAM,OAAO,cAAe,SAAQ,KAAK;IAGrB;IACA;IAHlB,YACE,OAAe,EACC,MAAc,EACd,IAAY;QAE5B,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QAG5B,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,qFAAqF;AACrF,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,GAAG;QAAE,OAAO,WAAW,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9C,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC7E,OAAO,IAAI,CAAC;AACd,CAAC;AAiBD,4EAA4E;AAC5E,MAAM,UAAU,aAAa;IAC3B,OAAO,eAAe,CAAC,2BAA2B,EAAE,wBAAwB,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,OAAO,aAAa;IAEL;IACA;IACA;IACA;IAJnB,YACmB,KAAa,EACb,MAAe,EACf,UAAU,aAAa,EAAE,EACzB,UAAgC,EAAE;QAHlC,UAAK,GAAL,KAAK,CAAQ;QACb,WAAM,GAAN,MAAM,CAAS;QACf,YAAO,GAAP,OAAO,CAAkB;QACzB,YAAO,GAAP,OAAO,CAA2B;IAClD,CAAC;IAEJ;;;;;;;;OAQG;IACH,KAAK,CAAC,MAAM;QACV,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAyB,UAAU,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,CAClD,GAAG,IAAI,CAAC,OAAO,uBAAuB,EACtC,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CACnF,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,cAAc,CACtB,qCAAqC,QAAQ,CAAC,MAAM,IAAI,EACxD,QAAQ,CAAC,MAAM,EACf,uBAAuB,CACxB,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAKpC,CAAC;QACF,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,GAAG,IAAI,EAAE;YACpB,QAAQ,EAAE,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,KAAK,IAAI,QAAQ;YAC/D,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI;YAC3B,MAAM,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;SAC/B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS;QACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAwB,qBAAqB,CAAC,CAAC;QAC9E,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACvC,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;SACxB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAA8D,EAAE;QACjF,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAC7B,iBAAiB,MAAM,EAAE,CAC1B,CAAC;QACF,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;QAClE,OAAO,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAgB;QAC/B,OAAO,gBAAgB,CACrB,MAAM,IAAI,CAAC,OAAO,CAAa,gBAAgB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAC/E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,IAIrB;QACC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;SAChC,CAAC,CAAC;QACH,2EAA2E;QAC3E,6DAA6D;QAC7D,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAC7B,mBAAmB,MAAM,EAAE,CAC5B,CAAC;QACF,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC,MAAM,KAAK,SAAS;YAC9B,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,KAAK,YAAY,CAAC;YACxE,CAAC,CAAC,WAAW,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAe;QACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAC7B,oBAAoB,kBAAkB,CAAC,OAAO,CAAC,uBAAuB,CACvE,CAAC;QACF,OAAO;YACL,GAAG,mBAAmB,CAAC,IAAI,CAAC;YAC5B,OAAO,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,SAAS;SAC7C,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,mBAAmB,CAAC,OAAe,EAAE,KAAK,GAAG,GAAG;QACpD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,MAAM,EAAE,GAAG;YACX,SAAS,EAAE,UAAU;YACrB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;SACrB,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAC5B,mBAAmB,kBAAkB,CAAC,OAAO,CAAC,WAAW,MAAM,EAAE,EACjE,EAAE,MAAM,EAAE,YAAY,EAAE,CACzB,CAAC;QACF,OAAO,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO,CAAC,SAAiB;QAC7B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAC7B,gBAAgB,kBAAkB,CAAC,SAAS,CAAC,gBAAgB,CAC9D,CAAC;QACF,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAC1D,OAAO,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,KAAa;QAChD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAC7B,gBAAgB,kBAAkB,CAAC,SAAS,CAAC,QAAQ,kBAAkB,CAAC,KAAK,CAAC,EAAE,CACjF,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,SAAiB;QACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAC7B,gBAAgB,kBAAkB,CAAC,SAAS,CAAC,oBAAoB,CAClE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACnD,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,qBAAqB,CAAC,OAAe,EAAE,KAAK,GAAG,GAAG;QACtD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAC5B,mBAAmB,kBAAkB,CAAC,OAAO,CAAC,iBAAiB,MAAM,EAAE,EACvE,EAAE,MAAM,EAAE,YAAY,EAAE,CACzB,CAAC;YACF,OAAO,qBAAqB,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,cAAc,IAAI,wBAAwB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClF,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,OAAO,CACb,IAAY,EACZ,IAA2D;QAE3D,OAAO,aAAa,CAClB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAC5F,IAAI,EACJ,IAAI,CACL,CAAC;IACJ,CAAC;CACF;AAcD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAuB,EACvB,IAAY,EACZ,IAA2D;IAE3D,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,aAAa,EAAE,GAAG,IAAI,EAAE,CAC7E,CAAC;IACF,IAAI,IAAI,CAAC,MAAM;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAE7D,MAAM,OAAO,GAA2B;QACtC,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;QACrC,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,kBAAkB;KAC3C,CAAC;IACF,MAAM,IAAI,GAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,KAAK,EAAE,OAAO,EAAE,CAAC;IACrE,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,cAAc,CAAC,MAAM,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,IAAI,EAAE,MAAM,KAAK,YAAY,EAAE,CAAC;QAClC,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAiB,CAAC;IACjD,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,EAAgB,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,YAAY,CAAC,QAAkB,EAAE,IAAY;IAC1D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAqC,CAAC;QACzE,IAAI,IAAI,CAAC,KAAK,EAAE,OAAO;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;IACpD,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChF,OAAO,mBAAmB,MAAM,QAAQ,IAAI,EAAE,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA0B,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,SAAS;YAC3B,IAAI,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAa,CAAC,CAAC;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACtB,EAAE,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,IAAI,KAAK,EAAE;QAC7D,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC;QACpD,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,QAAQ;QAC5B,uEAAuE;QACvE,uEAAuE;QACvE,EAAE;QACF,qEAAqE;QACrE,wEAAwE;QACxE,yEAAyE;QACzE,6CAA6C;QAC7C,IAAI,EACF,OAAO,KAAK,CAAC,OAAO,EAAE,IAAI,KAAK,QAAQ;YACrC,CAAC,CAAC,wHAAwH;gBACxH,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;YAC/D,CAAC,CAAC,EAAE;KACT,CAAC,CAAC;SACF,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;SACtC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAE1D;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,MAAM,IAAI,GAAoB,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAC3B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoC,CAAC;YACnE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACpB,EAAE,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,GAAG,CAAC,aAAa,IAAI,KAAK,IAAI,KAAK,EAAE;QAC1E,SAAS,EAAE,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,SAAS,IAAI,CAAC;QAClD,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,MAAM;QAC1B,OAAO,EAAE,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;QACtC,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,WAAW,EAAE,GAAG,CAAC,WAAW;KAC7B,CAAC,CAAC;SACF,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;SACzC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;AAC/C,CAAC;AAsFD,SAAS,gBAAgB,CAAC,OAAmB;IAC3C,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;QACpC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI;YACtB,CAAC,CAAC;gBACE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;gBACvB,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG;gBACrB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;gBACvB,gBAAgB,EAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB;aAChD;YACH,CAAC,CAAC,SAAS;QACb,wEAAwE;QACxE,sEAAsE;QACtE,+CAA+C;QAC/C,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,wBAAwB,EAAE,OAAO,CAAC,wBAAwB;KAC3D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAc;IAC5C,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG;QACrB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;QAC/E,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,WAAW;QAC7B,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI;QAChC,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,IAAI;QAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,MAAiB;IACxC,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,KAAK;QAClC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;QACjC,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;QACnC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,YAAY,EAAE,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC;aACtC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC;aAC9C,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACf,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK;YACzB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAC;KACN,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAyB;IACpD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;IACnC,OAAO;QACL,GAAG,EAAE,UAAU,CAAC,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE;QAC1C,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,GAAG,EAAE,UAAU,CAAC,GAAG;QACnB,KAAK,EAAE,UAAU,CAAC,UAAU,IAAI,UAAU,CAAC,KAAK,IAAI,QAAQ;QAC5D,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,IAAI;QACjC,SAAS,EAAE,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,OAAO,IAAI,CAAC;QAC1D,OAAO,EAAE,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,KAAK;QAC/C,4EAA4E;QAC5E,8DAA8D;QAC9D,mBAAmB,EACjB,UAAU,CAAC,MAAM,KAAK,YAAY,IAAI,UAAU,CAAC,aAAa,KAAK,QAAQ;QAC7E,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,IAAI,EAAE;YACJ,MAAM,EAAE,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,kBAAkB;YAC/E,GAAG,EAAE,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,kBAAkB;YAC5E,aAAa,EACX,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,sBAAsB;YACrF,YAAY,EACV,IAAI,CAAC,sBAAsB;gBAC3B,IAAI,CAAC,sBAAsB;gBAC3B,IAAI,CAAC,yBAAyB;SACjC;QACD,YAAY,EAAE,UAAU,CAAC,YAAY;KACtC,CAAC;AACJ,CAAC"}

package/dist/core/vercel-oauth.d.ts

@@ -1,37 +0,0 @@
-import { type OAuthDeps, type OAuthMetadata, type OAuthTokens, type PendingLogin, type ProviderOAuthSpec } from "./providers/oauth.js";
-/**
- * Vercel's half of the shared browser sign-in — four constants and the
- * bindings that pin `providers/oauth.ts` to them.
- *
- * Everything else (PKCE, dynamic client registration, the loopback redirect,
- * rotating refresh, the pending-login store) lives in the shared module and is
- * not Vercel-specific.
- *
- * Why not the device flow we use for GitHub: Vercel restricts
- * `urn:ietf:params:oauth:grant-type:device_code` to its own first-party
- * clients. A client we register is refused with `unauthorized_client`, so the
- * loopback flow is the only browser sign-in available to us.
- *
- * `offline_access` is **required** here specifically — without it Vercel's
- * grant comes back with no refresh token and dies after an hour.
- */
-export declare const VERCEL_OAUTH: ProviderOAuthSpec;
-export type VercelOAuthMetadata = OAuthMetadata;
-export type VercelOAuthTokens = OAuthTokens;
-export type VercelPendingLogin = PendingLogin;
-export type VercelOAuthDeps = OAuthDeps;
-export { LoginSessions as VercelLoginSessions, TOKEN_REFRESH_SKEW_MS as VERCEL_TOKEN_REFRESH_SKEW_MS } from "./providers/oauth.js";
-/** Exposed for tests, which must not inherit another case's cached discovery. */
-export declare function resetVercelOAuthDiscoveryCache(): void;
-export declare function discoverVercelOAuth(deps?: VercelOAuthDeps): Promise<VercelOAuthMetadata>;
-/** Registers a client and builds the URL the user's browser must open. */
-export declare function beginVercelLogin(redirectUri: string, deps?: VercelOAuthDeps): Promise<VercelPendingLogin>;
-/** Exchanges the authorization code the callback received for tokens. */
-export declare function completeVercelLogin(pending: VercelPendingLogin, code: string, deps?: VercelOAuthDeps): Promise<VercelOAuthTokens>;
-/**
- * Trades a refresh token for a fresh access token. The returned
- * `refreshToken` replaces the one passed in — Vercel rotates on every use.
- */
-export declare function refreshVercelOAuthTokens(clientId: string, refreshToken: string, deps?: VercelOAuthDeps): Promise<VercelOAuthTokens>;
-/** The loopback callback URL for a request that arrived on `host`. */
-export declare function vercelCallbackUrl(host: string | undefined): string;

package/dist/core/vercel-oauth.js

@@ -1,57 +0,0 @@
-import { beginLogin, completeLogin, discoverOAuth, loopbackCallbackUrl, refreshOAuthTokens, resetOAuthDiscoveryCache, } from "./providers/oauth.js";
-import { providerApiBase } from "./providers/api-base.js";
-/**
- * Vercel's half of the shared browser sign-in — four constants and the
- * bindings that pin `providers/oauth.ts` to them.
- *
- * Everything else (PKCE, dynamic client registration, the loopback redirect,
- * rotating refresh, the pending-login store) lives in the shared module and is
- * not Vercel-specific.
- *
- * Why not the device flow we use for GitHub: Vercel restricts
- * `urn:ietf:params:oauth:grant-type:device_code` to its own first-party
- * clients. A client we register is refused with `unauthorized_client`, so the
- * loopback flow is the only browser sign-in available to us.
- *
- * `offline_access` is **required** here specifically — without it Vercel's
- * grant comes back with no refresh token and dies after an hour.
- */
-export const VERCEL_OAUTH = {
-    name: "Vercel",
-    // Overridable the same loopback-only way the API base is
-    // (`providers/api-base.ts`), so a sign-in can be driven end to end against a
-    // stub. Without it the token exchange and the connection it writes are the
-    // one part of this flow nothing can reach without a real Vercel account —
-    // and the same variable points the native runtime at the same stub.
-    issuer: providerApiBase("NOMOREIDE_VERCEL_OAUTH_ISSUER", "https://vercel.com"),
-    scope: "offline_access",
-    callbackPath: "/api/providers/vercel/oauth/callback",
-};
-export { LoginSessions as VercelLoginSessions, TOKEN_REFRESH_SKEW_MS as VERCEL_TOKEN_REFRESH_SKEW_MS } from "./providers/oauth.js";
-/** Exposed for tests, which must not inherit another case's cached discovery. */
-export function resetVercelOAuthDiscoveryCache() {
-    resetOAuthDiscoveryCache(VERCEL_OAUTH.issuer);
-}
-export function discoverVercelOAuth(deps) {
-    return discoverOAuth(VERCEL_OAUTH, deps);
-}
-/** Registers a client and builds the URL the user's browser must open. */
-export function beginVercelLogin(redirectUri, deps) {
-    return beginLogin(VERCEL_OAUTH, redirectUri, deps);
-}
-/** Exchanges the authorization code the callback received for tokens. */
-export function completeVercelLogin(pending, code, deps) {
-    return completeLogin(VERCEL_OAUTH, pending, code, deps);
-}
-/**
- * Trades a refresh token for a fresh access token. The returned
- * `refreshToken` replaces the one passed in — Vercel rotates on every use.
- */
-export function refreshVercelOAuthTokens(clientId, refreshToken, deps) {
-    return refreshOAuthTokens(VERCEL_OAUTH, clientId, refreshToken, deps);
-}
-/** The loopback callback URL for a request that arrived on `host`. */
-export function vercelCallbackUrl(host) {
-    return loopbackCallbackUrl(VERCEL_OAUTH, host);
-}
-//# sourceMappingURL=vercel-oauth.js.map

package/dist/core/vercel-oauth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"vercel-oauth.js","sourceRoot":"","sources":["../../src/core/vercel-oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,aAAa,EACb,aAAa,EACb,mBAAmB,EACnB,kBAAkB,EAClB,wBAAwB,GAMzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,YAAY,GAAsB;IAC7C,IAAI,EAAE,QAAQ;IACd,yDAAyD;IACzD,6EAA6E;IAC7E,2EAA2E;IAC3E,0EAA0E;IAC1E,oEAAoE;IACpE,MAAM,EAAE,eAAe,CAAC,+BAA+B,EAAE,oBAAoB,CAAC;IAC9E,KAAK,EAAE,gBAAgB;IACvB,YAAY,EAAE,sCAAsC;CACrD,CAAC;AAOF,OAAO,EAAE,aAAa,IAAI,mBAAmB,EAAE,qBAAqB,IAAI,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AAEnI,iFAAiF;AACjF,MAAM,UAAU,8BAA8B;IAC5C,wBAAwB,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAsB;IACxD,OAAO,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,gBAAgB,CAC9B,WAAmB,EACnB,IAAsB;IAEtB,OAAO,UAAU,CAAC,YAAY,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,mBAAmB,CACjC,OAA2B,EAC3B,IAAY,EACZ,IAAsB;IAEtB,OAAO,aAAa,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAgB,EAChB,YAAoB,EACpB,IAAsB;IAEtB,OAAO,kBAAkB,CAAC,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;AACxE,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,iBAAiB,CAAC,IAAwB;IACxD,OAAO,mBAAmB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;AACjD,CAAC"}

package/dist/core/vercel-provider.d.ts

@@ -1,23 +0,0 @@
-import { type VercelActions } from "./vercel-actions.js";
-import { type VercelDeployment, type VercelEnvVar, type VercelManager, type VercelProject } from "./vercel-manager.js";
-import type { DeployProvider, DeployProviderActions, DeployProviderHooks, DeployProviderManifest, ProviderDeployment, ProviderEnvVar, ProviderProject } from "./providers/deploy-provider.js";
-/**
- * Vercel as `DeployProvider` implementation #1.
- *
- * A pure adapter: every method delegates straight to `VercelManager` or
- * `VercelActions` and only reshapes the result. No REST path, no auth, and no
- * normalizer moves here — those stay in `vercel-manager.ts`, which is the file
- * that knows what Vercel's API looks like.
- */
-export declare const VERCEL_MANIFEST: DeployProviderManifest;
-export declare const VERCEL_HOOKS: DeployProviderHooks;
-export declare function toProviderProject(project: VercelProject): ProviderProject;
-export declare function toProviderDeployment(deployment: VercelDeployment): ProviderDeployment;
-export declare function toProviderEnvVar(env: VercelEnvVar): ProviderEnvVar;
-/** The read-safe half, over an already-authenticated `VercelManager`. */
-export declare function createVercelDeployProvider(manager: VercelManager): DeployProvider;
-/**
- * The write-capable half. Kept a separate factory, resolved separately, and
- * never handed to an MCP tool — the same boundary `VercelActions` already has.
- */
-export declare function createVercelDeployActions(actions: VercelActions): DeployProviderActions;