patchwork-os 0.2.0-alpha.8 → 0.2.0-beta.0

package/dist/connectors/googleDrive.d.ts

@@ -0,0 +1,34 @@
+export interface DriveTokens {
+    access_token: string;
+    refresh_token?: string;
+    expiry_date?: number;
+    token_type?: string;
+    scope?: string;
+    email?: string;
+    connected_at: string;
+    _client_id?: string;
+    _client_secret?: string;
+}
+export interface ConnectorStatus {
+    id: string;
+    status: "connected" | "disconnected" | "needs_reauth";
+    lastSync?: string;
+    email?: string;
+}
+export interface ConnectorHandlerResult {
+    status: number;
+    body: string;
+    contentType?: string;
+    redirect?: string;
+}
+export declare function loadTokens(): DriveTokens | null;
+export declare function getStatus(): ConnectorStatus;
+export declare function getValidAccessToken(): Promise<string>;
+export declare function extractFileId(urlOrId: string): string;
+export declare function fetchDocContent(urlOrId: string, accessToken: string, fetchFn?: typeof fetch): Promise<string>;
+/** Fetch the Drive file's display name. Returns "" on failure. */
+export declare function fetchDocName(urlOrId: string, accessToken: string, fetchFn?: typeof fetch): Promise<string>;
+export declare function handleDriveAuthRedirect(): ConnectorHandlerResult;
+export declare function handleDriveCallback(code: string | null, state: string | null, error: string | null): Promise<ConnectorHandlerResult>;
+export declare function handleDriveTest(): Promise<ConnectorHandlerResult>;
+export declare function handleDriveDisconnect(): Promise<ConnectorHandlerResult>;

package/dist/connectors/googleDrive.js

@@ -0,0 +1,321 @@
+import crypto from "node:crypto";
+import { existsSync, readFileSync, unlinkSync } from "node:fs";
+import { homedir } from "node:os";
+import path from "node:path";
+import { deleteSecretJsonSync, getSecretJsonSync, storeSecretJsonSync, } from "./tokenStorage.js";
+const SCOPES = ["https://www.googleapis.com/auth/drive.readonly"];
+const REDIRECT_URI = process.env.PATCHWORK_DASHBOARD_URL
+    ? `${process.env.PATCHWORK_DASHBOARD_URL}/connections/google-drive/callback`
+    : "http://localhost:3200/dashboard/connections/google-drive/callback";
+function getTokenPath() {
+    const dir = process.env.PATCHWORK_TOKEN_DIR ??
+        path.join(homedir(), ".patchwork", "tokens");
+    return path.join(dir, "google-drive.json");
+}
+function clientId() {
+    return process.env.GOOGLE_DRIVE_CLIENT_ID ?? "";
+}
+function clientSecret() {
+    return process.env.GOOGLE_DRIVE_CLIENT_SECRET ?? "";
+}
+function isConfigured() {
+    return Boolean(clientId() && clientSecret());
+}
+export function loadTokens() {
+    const secureTokens = getSecretJsonSync("google-drive");
+    if (secureTokens)
+        return secureTokens;
+    const tokenPath = getTokenPath();
+    if (!existsSync(tokenPath))
+        return null;
+    try {
+        const tokens = JSON.parse(readFileSync(tokenPath, "utf-8"));
+        saveTokens(tokens);
+        return tokens;
+    }
+    catch {
+        return null;
+    }
+}
+function saveTokens(tokens) {
+    storeSecretJsonSync("google-drive", tokens);
+    const tokenPath = getTokenPath();
+    if (existsSync(tokenPath)) {
+        try {
+            unlinkSync(tokenPath);
+        }
+        catch { }
+    }
+}
+function deleteTokens() {
+    deleteSecretJsonSync("google-drive");
+    const tokenPath = getTokenPath();
+    if (existsSync(tokenPath)) {
+        try {
+            unlinkSync(tokenPath);
+        }
+        catch { }
+    }
+}
+export function getStatus() {
+    const tokens = loadTokens();
+    if (!tokens)
+        return { id: "google-drive", status: "disconnected" };
+    const expired = !tokens.expiry_date || Date.now() > tokens.expiry_date;
+    const hasCredentials = Boolean((process.env.GOOGLE_DRIVE_CLIENT_ID || tokens._client_id) &&
+        (process.env.GOOGLE_DRIVE_CLIENT_SECRET || tokens._client_secret));
+    const canRefresh = Boolean(tokens.refresh_token) && hasCredentials;
+    const status = expired && !canRefresh ? "needs_reauth" : "connected";
+    return {
+        id: "google-drive",
+        status,
+        lastSync: tokens.connected_at,
+        email: tokens.email,
+    };
+}
+function buildAuthUrl(state) {
+    const params = new URLSearchParams({
+        client_id: clientId(),
+        redirect_uri: REDIRECT_URI,
+        response_type: "code",
+        scope: SCOPES.join(" "),
+        access_type: "offline",
+        prompt: "consent",
+        state,
+    });
+    return `https://accounts.google.com/o/oauth2/v2/auth?${params.toString()}`;
+}
+async function exchangeCode(code) {
+    const res = await fetch("https://oauth2.googleapis.com/token", {
+        method: "POST",
+        headers: { "Content-Type": "application/x-www-form-urlencoded" },
+        body: new URLSearchParams({
+            code,
+            client_id: clientId(),
+            client_secret: clientSecret(),
+            redirect_uri: REDIRECT_URI,
+            grant_type: "authorization_code",
+        }).toString(),
+    });
+    if (!res.ok) {
+        const body = await res.text();
+        throw new Error(`Token exchange failed: ${res.status} ${body}`);
+    }
+    const json = (await res.json());
+    return {
+        access_token: json.access_token,
+        refresh_token: json.refresh_token,
+        expiry_date: json.expires_in
+            ? Date.now() + json.expires_in * 1000
+            : undefined,
+        token_type: json.token_type,
+        scope: json.scope,
+        _client_id: clientId() || undefined,
+        _client_secret: clientSecret() || undefined,
+    };
+}
+async function refreshAccessToken(tokens) {
+    if (!tokens.refresh_token)
+        throw new Error("No refresh token available");
+    const id = clientId() || tokens._client_id || "";
+    const secret = clientSecret() || tokens._client_secret || "";
+    if (!id || !secret)
+        throw new Error("Google Drive client credentials not available — reconnect the Google Drive connector");
+    const res = await fetch("https://oauth2.googleapis.com/token", {
+        method: "POST",
+        headers: { "Content-Type": "application/x-www-form-urlencoded" },
+        body: new URLSearchParams({
+            refresh_token: tokens.refresh_token,
+            client_id: id,
+            client_secret: secret,
+            grant_type: "refresh_token",
+        }).toString(),
+    });
+    if (!res.ok) {
+        const body = await res.text();
+        throw new Error(`Token refresh failed: ${res.status} ${body}`);
+    }
+    const json = (await res.json());
+    const updated = {
+        ...tokens,
+        access_token: json.access_token,
+        expiry_date: json.expires_in
+            ? Date.now() + json.expires_in * 1000
+            : tokens.expiry_date,
+    };
+    saveTokens(updated);
+    return updated;
+}
+/**
+ * In-flight refresh promise. Prevents concurrent expired-token callers from
+ * both burning the same refresh token (Google rotates on use).
+ */
+let refreshInflight = null;
+export async function getValidAccessToken() {
+    let tokens = loadTokens();
+    if (!tokens)
+        throw new Error("Google Drive not connected");
+    const bufferMs = 60_000;
+    if (!tokens.expiry_date || Date.now() > tokens.expiry_date - bufferMs) {
+        if (!refreshInflight) {
+            refreshInflight = (async () => {
+                try {
+                    return await refreshAccessToken(tokens);
+                }
+                finally {
+                    refreshInflight = null;
+                }
+            })();
+        }
+        tokens = await refreshInflight;
+    }
+    return tokens.access_token;
+}
+async function revokeToken(token) {
+    await fetch(`https://oauth2.googleapis.com/revoke?token=${encodeURIComponent(token)}`, { method: "POST" }).catch(() => { });
+}
+export function extractFileId(urlOrId) {
+    const match = /\/d\/([a-zA-Z0-9_-]+)/.exec(urlOrId);
+    return match ? match[1] : urlOrId;
+}
+const MAX_CONTENT_BYTES = 50 * 1024;
+export async function fetchDocContent(urlOrId, accessToken, fetchFn = globalThis.fetch) {
+    const fileId = extractFileId(urlOrId);
+    // Prefer Markdown export so downstream parsers (e.g. meetingNotes.parse)
+    // see real `###` headings and `- [ ] task` bullets instead of the lossy
+    // text/plain export, which collapses headings into bare lines and renders
+    // checkboxes as Unicode glyphs that the parser doesn't strip. Fall back
+    // to text/plain for older docs / accounts where Markdown export is
+    // unavailable so we never return empty content unnecessarily.
+    const tryExport = async (mime) => {
+        try {
+            const res = await fetchFn(`https://www.googleapis.com/drive/v3/files/${encodeURIComponent(fileId)}/export?mimeType=${encodeURIComponent(mime)}`, { headers: { Authorization: `Bearer ${accessToken}` } });
+            if (!res.ok)
+                return null;
+            const text = await res.text();
+            return text.length > MAX_CONTENT_BYTES
+                ? text.slice(0, MAX_CONTENT_BYTES)
+                : text;
+        }
+        catch {
+            return null;
+        }
+    };
+    const md = await tryExport("text/markdown");
+    if (md && md.trim().length > 0)
+        return md;
+    const plain = await tryExport("text/plain");
+    return plain ?? "";
+}
+/** Fetch the Drive file's display name. Returns "" on failure. */
+export async function fetchDocName(urlOrId, accessToken, fetchFn = globalThis.fetch) {
+    const fileId = extractFileId(urlOrId);
+    try {
+        const res = await fetchFn(`https://www.googleapis.com/drive/v3/files/${encodeURIComponent(fileId)}?fields=name`, { headers: { Authorization: `Bearer ${accessToken}` } });
+        if (!res.ok)
+            return "";
+        const data = (await res.json());
+        return data.name ?? "";
+    }
+    catch {
+        return "";
+    }
+}
+import { createOAuthStateStore } from "./oauthStateStore.js";
+const pendingStates = createOAuthStateStore();
+function generateState() {
+    const state = crypto.randomBytes(32).toString("hex");
+    if (!pendingStates.add(state)) {
+        throw new Error("OAuth state store full — too many concurrent authorize requests");
+    }
+    return state;
+}
+export function handleDriveAuthRedirect() {
+    if (!isConfigured()) {
+        return {
+            status: 400,
+            contentType: "application/json",
+            body: JSON.stringify({
+                ok: false,
+                error: "GOOGLE_DRIVE_CLIENT_ID and GOOGLE_DRIVE_CLIENT_SECRET env vars not set",
+            }),
+        };
+    }
+    const state = generateState();
+    return { status: 302, body: "", redirect: buildAuthUrl(state) };
+}
+export async function handleDriveCallback(code, state, error) {
+    if (error) {
+        return {
+            status: 400,
+            contentType: "application/json",
+            body: JSON.stringify({ ok: false, error }),
+        };
+    }
+    if (!code || !state || !pendingStates.consume(state)) {
+        return {
+            status: 400,
+            contentType: "application/json",
+            body: JSON.stringify({ ok: false, error: "Invalid OAuth state" }),
+        };
+    }
+    try {
+        const oauthTokens = await exchangeCode(code);
+        const tokens = {
+            ...oauthTokens,
+            connected_at: new Date().toISOString(),
+        };
+        saveTokens(tokens);
+        return {
+            status: 200,
+            contentType: "application/json",
+            body: JSON.stringify({ ok: true }),
+        };
+    }
+    catch (err) {
+        return {
+            status: 400,
+            contentType: "application/json",
+            body: JSON.stringify({
+                ok: false,
+                error: err instanceof Error ? err.message : String(err),
+            }),
+        };
+    }
+}
+export async function handleDriveTest() {
+    try {
+        const accessToken = await getValidAccessToken();
+        const res = await fetch("https://www.googleapis.com/drive/v3/about?fields=user", { headers: { Authorization: `Bearer ${accessToken}` } });
+        if (!res.ok)
+            throw new Error(`Drive API error ${res.status}`);
+        const json = (await res.json());
+        return {
+            status: 200,
+            contentType: "application/json",
+            body: JSON.stringify({ ok: true, email: json.user?.emailAddress }),
+        };
+    }
+    catch (err) {
+        return {
+            status: 400,
+            contentType: "application/json",
+            body: JSON.stringify({
+                ok: false,
+                error: err instanceof Error ? err.message : String(err),
+            }),
+        };
+    }
+}
+export async function handleDriveDisconnect() {
+    const tokens = loadTokens();
+    if (tokens?.access_token)
+        await revokeToken(tokens.access_token);
+    deleteTokens();
+    return {
+        status: 200,
+        contentType: "application/json",
+        body: JSON.stringify({ ok: true }),
+    };
+}
+//# sourceMappingURL=googleDrive.js.map

package/dist/connectors/googleDrive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"googleDrive.js","sourceRoot":"","sources":["../../src/connectors/googleDrive.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,MAAM,GAAG,CAAC,gDAAgD,CAAC,CAAC;AAClE,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB;IACtD,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,oCAAoC;IAC5E,CAAC,CAAC,mEAAmE,CAAC;AAExE,SAAS,YAAY;IACnB,MAAM,GAAG,GACP,OAAO,CAAC,GAAG,CAAC,mBAAmB;QAC/B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;AAC7C,CAAC;AA4BD,SAAS,QAAQ;IACf,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,OAAO,CAAC,QAAQ,EAAE,IAAI,YAAY,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,YAAY,GAAG,iBAAiB,CAAc,cAAc,CAAC,CAAC;IACpE,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IAEtC,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAgB,CAAC;QAC3E,UAAU,CAAC,MAAM,CAAC,CAAC;QACnB,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,MAAmB;IACrC,mBAAmB,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,UAAU,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,YAAY;IACnB,oBAAoB,CAAC,cAAc,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,UAAU,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACnE,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC;IACvE,MAAM,cAAc,GAAG,OAAO,CAC5B,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,MAAM,CAAC,UAAU,CAAC;QACvD,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,MAAM,CAAC,cAAc,CAAC,CACpE,CAAC;IACF,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,cAAc,CAAC;IACnE,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC;IACrE,OAAO;QACL,EAAE,EAAE,cAAc;QAClB,MAAM;QACN,QAAQ,EAAE,MAAM,CAAC,YAAY;QAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,SAAS,EAAE,QAAQ,EAAE;QACrB,YAAY,EAAE,YAAY;QAC1B,aAAa,EAAE,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QACvB,WAAW,EAAE,SAAS;QACtB,MAAM,EAAE,SAAS;QACjB,KAAK;KACN,CAAC,CAAC;IACH,OAAO,gDAAgD,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,IAAY;IAEZ,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,qCAAqC,EAAE;QAC7D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,eAAe,CAAC;YACxB,IAAI;YACJ,SAAS,EAAE,QAAQ,EAAE;YACrB,aAAa,EAAE,YAAY,EAAE;YAC7B,YAAY,EAAE,YAAY;YAC1B,UAAU,EAAE,oBAAoB;SACjC,CAAC,CAAC,QAAQ,EAAE;KACd,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAM7B,CAAC;IACF,OAAO;QACL,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,WAAW,EAAE,IAAI,CAAC,UAAU;YAC1B,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI;YACrC,CAAC,CAAC,SAAS;QACb,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,UAAU,EAAE,QAAQ,EAAE,IAAI,SAAS;QACnC,cAAc,EAAE,YAAY,EAAE,IAAI,SAAS;KAC5C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,MAAmB;IACnD,IAAI,CAAC,MAAM,CAAC,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACzE,MAAM,EAAE,GAAG,QAAQ,EAAE,IAAI,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;IACjD,MAAM,MAAM,GAAG,YAAY,EAAE,IAAI,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC;IAC7D,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM;QAChB,MAAM,IAAI,KAAK,CACb,sFAAsF,CACvF,CAAC;IACJ,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,qCAAqC,EAAE;QAC7D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,eAAe,CAAC;YACxB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,MAAM;YACrB,UAAU,EAAE,eAAe;SAC5B,CAAC,CAAC,QAAQ,EAAE;KACd,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAI7B,CAAC;IACF,MAAM,OAAO,GAAgB;QAC3B,GAAG,MAAM;QACT,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,WAAW,EAAE,IAAI,CAAC,UAAU;YAC1B,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI;YACrC,CAAC,CAAC,MAAM,CAAC,WAAW;KACvB,CAAC;IACF,UAAU,CAAC,OAAO,CAAC,CAAC;IACpB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,IAAI,eAAe,GAAgC,IAAI,CAAC;AAExD,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,IAAI,MAAM,GAAG,UAAU,EAAE,CAAC;IAC1B,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC;IACxB,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,WAAW,GAAG,QAAQ,EAAE,CAAC;QACtE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,eAAe,GAAG,CAAC,KAAK,IAAI,EAAE;gBAC5B,IAAI,CAAC;oBACH,OAAO,MAAM,kBAAkB,CAAC,MAAqB,CAAC,CAAC;gBACzD,CAAC;wBAAS,CAAC;oBACT,eAAe,GAAG,IAAI,CAAC;gBACzB,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,MAAM,GAAG,MAAM,eAAe,CAAC;IACjC,CAAC;IACD,OAAO,MAAM,CAAC,YAAY,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,KAAa;IACtC,MAAM,KAAK,CACT,8CAA8C,kBAAkB,CAAC,KAAK,CAAC,EAAE,EACzE,EAAE,MAAM,EAAE,MAAM,EAAE,CACnB,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,MAAM,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpD,OAAO,KAAK,CAAC,CAAC,CAAE,KAAK,CAAC,CAAC,CAAY,CAAC,CAAC,CAAC,OAAO,CAAC;AAChD,CAAC;AAED,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAC;AAEpC,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAe,EACf,WAAmB,EACnB,UAAwB,UAAU,CAAC,KAAK;IAExC,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACtC,yEAAyE;IACzE,wEAAwE;IACxE,0EAA0E;IAC1E,wEAAwE;IACxE,mEAAmE;IACnE,8DAA8D;IAC9D,MAAM,SAAS,GAAG,KAAK,EAAE,IAAY,EAA0B,EAAE;QAC/D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,6CAA6C,kBAAkB,CAAC,MAAM,CAAC,oBAAoB,kBAAkB,CAAC,IAAI,CAAC,EAAE,EACrH,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,EAAE,CACxD,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,MAAM,GAAG,iBAAiB;gBACpC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC;gBAClC,CAAC,CAAC,IAAI,CAAC;QACX,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,eAAe,CAAC,CAAC;IAC5C,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,CAAC;IAC5C,OAAO,KAAK,IAAI,EAAE,CAAC;AACrB,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAe,EACf,WAAmB,EACnB,UAAwB,UAAU,CAAC,KAAK;IAExC,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,6CAA6C,kBAAkB,CAAC,MAAM,CAAC,cAAc,EACrF,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,EAAE,CACxD,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAsB,CAAC;QACrD,OAAO,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,MAAM,aAAa,GAAG,qBAAqB,EAAE,CAAC;AAE9C,SAAS,aAAa;IACpB,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;QACpB,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,EAAE,EAAE,KAAK;gBACT,KAAK,EACH,wEAAwE;aAC3E,CAAC;SACH,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAmB,EACnB,KAAoB,EACpB,KAAoB;IAEpB,IAAI,KAAK,EAAE,CAAC;QACV,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;SAC3C,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;SAClE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAgB;YAC1B,GAAG,WAAW;YACd,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACvC,CAAC;QACF,UAAU,CAAC,MAAM,CAAC,CAAC;QACnB,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;SACnC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC;SACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,mBAAmB,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,uDAAuD,EACvD,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,EAAE,CACxD,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAyC,CAAC;QACxE,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC;SACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,MAAM,EAAE,YAAY;QAAE,MAAM,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACjE,YAAY,EAAE,CAAC;IACf,OAAO;QACL,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,kBAAkB;QAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;KACnC,CAAC;AACJ,CAAC"}

package/dist/connectors/htmlEscape.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Minimal HTML escape for interpolating untrusted text (vendor error
+ * descriptions, exception messages) into OAuth callback HTML pages.
+ */
+export declare function escHtml(s: string): string;

package/dist/connectors/htmlEscape.js

@@ -0,0 +1,13 @@
+/**
+ * Minimal HTML escape for interpolating untrusted text (vendor error
+ * descriptions, exception messages) into OAuth callback HTML pages.
+ */
+export function escHtml(s) {
+    return s
+        .replace(/&/g, "&")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;")
+        .replace(/'/g, "&#39;");
+}
+//# sourceMappingURL=htmlEscape.js.map

package/dist/connectors/htmlEscape.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"htmlEscape.js","sourceRoot":"","sources":["../../src/connectors/htmlEscape.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,CAAS;IAC/B,OAAO,CAAC;SACL,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5B,CAAC"}

package/dist/connectors/hubspot.d.ts

@@ -0,0 +1,112 @@
+/**
+ * HubSpot connector — read/write HubSpot CRM via the HubSpot REST API v3.
+ *
+ * Auth: Private App access token (Bearer).
+ *   - Env var: HUBSPOT_ACCESS_TOKEN
+ *   - Stored: getSecretJsonSync("hubspot") → HubSpotTokens
+ *
+ * Tools: listContacts, getContact, listDeals, getDeal, createNote, searchContacts
+ *
+ * Extends BaseConnector for unified auth, retry, rate-limit, error handling.
+ */
+import { type AuthContext, BaseConnector, type ConnectorError, type ConnectorStatus } from "./baseConnector.js";
+export interface HubSpotTokens {
+    accessToken: string;
+    hubId?: number;
+    portalName?: string;
+    connected_at: string;
+}
+export interface HubSpotContact {
+    id: string;
+    properties: {
+        firstname?: string;
+        lastname?: string;
+        email?: string;
+        phone?: string;
+        company?: string;
+        lifecyclestage?: string;
+        [key: string]: string | undefined;
+    };
+    createdAt: string;
+    updatedAt: string;
+}
+export interface HubSpotDeal {
+    id: string;
+    properties: {
+        dealname?: string;
+        amount?: string;
+        dealstage?: string;
+        closedate?: string;
+        pipeline?: string;
+        hs_deal_stage_probability?: string;
+        [key: string]: string | undefined;
+    };
+    createdAt: string;
+    updatedAt: string;
+}
+export interface HubSpotNote {
+    id: string;
+    properties: {
+        hs_note_body?: string;
+        hs_timestamp?: string;
+        [key: string]: string | undefined;
+    };
+    createdAt: string;
+    updatedAt: string;
+}
+export interface HubSpotPaging {
+    next?: {
+        after: string;
+        link?: string;
+    };
+}
+export interface HubSpotListResult<T> {
+    results: T[];
+    paging?: HubSpotPaging;
+}
+export declare class HubSpotConnector extends BaseConnector {
+    readonly providerName = "hubspot";
+    protected getOAuthConfig(): null;
+    authenticate(): Promise<AuthContext>;
+    healthCheck(): Promise<{
+        ok: boolean;
+        error?: ConnectorError;
+    }>;
+    normalizeError(error: unknown): ConnectorError;
+    getStatus(): ConnectorStatus;
+    listContacts(params?: {
+        limit?: number;
+        after?: string;
+    }): Promise<HubSpotListResult<HubSpotContact>>;
+    getContact(contactId: string): Promise<HubSpotContact | null>;
+    listDeals(params?: {
+        limit?: number;
+        stage?: string;
+    }): Promise<HubSpotListResult<HubSpotDeal>>;
+    getDeal(dealId: string): Promise<HubSpotDeal | null>;
+    createNote(body: string, contactId?: string, dealId?: string): Promise<HubSpotNote>;
+    searchContacts(query: string): Promise<HubSpotContact[]>;
+    private buildHeaders;
+}
+export declare function loadTokens(): HubSpotTokens | null;
+export declare function saveTokens(tokens: HubSpotTokens): void;
+export declare function clearTokens(): void;
+export declare function getHubSpotConnector(): HubSpotConnector;
+export { getHubSpotConnector as hubspot };
+export interface ConnectorHandlerResult {
+    status: number;
+    body: string;
+    contentType?: string;
+}
+/**
+ * POST /connections/hubspot/connect  { accessToken }
+ */
+export declare function handleHubSpotConnect(body: string): Promise<ConnectorHandlerResult>;
+/**
+ * POST /connections/hubspot/test
+ */
+export declare function handleHubSpotTest(): Promise<ConnectorHandlerResult>;
+/**
+ * DELETE /connections/hubspot
+ */
+export declare function handleHubSpotDisconnect(): ConnectorHandlerResult;