plaud-notes-to-notion 1.0.0

package/dist/plaud/oauth.js

@@ -0,0 +1,197 @@
+import { DEFAULT_AUTHORIZATION_URL, DEFAULT_MCP_API_BASE, DEFAULT_MCP_CLIENT_ID, DEFAULT_REFRESH_URL, DEFAULT_TOKEN_URL, OAUTH_REDIRECT_URI } from "./constants.js";
+import { AuthExpiredError, AuthTransportError, isTransportError } from "./errors.js";
+import { generateCodeChallenge, generateCodeVerifier, generateState } from "./pkce.js";
+import { redactSecrets } from "../redact.js";
+function isLoopbackRedirect(uri) {
+    try {
+        const url = new URL(uri);
+        if (url.protocol !== "http:" && url.protocol !== "https:") {
+            return false;
+        }
+        const host = url.hostname.replace(/^\[|\]$/g, "").toLowerCase();
+        if (host !== "localhost" && host !== "127.0.0.1" && host !== "::1") {
+            return false;
+        }
+        if (url.username || url.password) {
+            return false;
+        }
+        return url.pathname === "/auth/callback";
+    }
+    catch {
+        return false;
+    }
+}
+export function resolveOAuthEndpoints(env = process.env) {
+    const clientId = (typeof env.PLAUD_MCP_CLIENT_ID === "string" && env.PLAUD_MCP_CLIENT_ID.trim()) ||
+        (typeof env.PLAUD_CLIENT_ID === "string" && env.PLAUD_CLIENT_ID.trim()) ||
+        DEFAULT_MCP_CLIENT_ID;
+    const redirectOverride = typeof env.PLAUD_CALLBACK_URL === "string" ? env.PLAUD_CALLBACK_URL.trim() : "";
+    const redirectUri = redirectOverride && isLoopbackRedirect(redirectOverride) ? redirectOverride : OAUTH_REDIRECT_URI;
+    return {
+        clientId,
+        redirectUri,
+        authorizationUrl: (typeof env.PLAUD_AUTH_URL === "string" && env.PLAUD_AUTH_URL.trim()) || DEFAULT_AUTHORIZATION_URL,
+        tokenUrl: (typeof env.PLAUD_TOKEN_URL === "string" && env.PLAUD_TOKEN_URL.trim()) || DEFAULT_TOKEN_URL,
+        refreshUrl: (typeof env.PLAUD_REFRESH_URL === "string" && env.PLAUD_REFRESH_URL.trim()) || DEFAULT_REFRESH_URL,
+        apiBase: (typeof env.PLAUD_MCP_API_BASE === "string" && env.PLAUD_MCP_API_BASE.trim()) || DEFAULT_MCP_API_BASE
+    };
+}
+export function createAuthorizationRequest(endpoints) {
+    const codeVerifier = generateCodeVerifier();
+    const codeChallenge = generateCodeChallenge(codeVerifier);
+    const state = generateState();
+    const params = new URLSearchParams({
+        client_id: endpoints.clientId,
+        redirect_uri: endpoints.redirectUri,
+        response_type: "code",
+        code_challenge: codeChallenge,
+        code_challenge_method: "S256",
+        state
+    });
+    return {
+        url: `${endpoints.authorizationUrl}?${params.toString()}`,
+        codeVerifier,
+        state
+    };
+}
+export function parseTokenSet(data, nowMs, previous) {
+    if (!data || typeof data !== "object") {
+        throw new Error("Plaud token response was not JSON");
+    }
+    const rec = data;
+    const access = typeof rec.access_token === "string" && rec.access_token.trim() ? rec.access_token.trim() : "";
+    if (!access) {
+        throw new Error("Plaud token response missing access_token");
+    }
+    const refresh = typeof rec.refresh_token === "string" && rec.refresh_token.trim()
+        ? rec.refresh_token.trim()
+        : previous?.refresh_token;
+    const expiresIn = typeof rec.expires_in === "number" && Number.isFinite(rec.expires_in) ? rec.expires_in : null;
+    const tokenType = typeof rec.token_type === "string" && rec.token_type.trim() ? rec.token_type.trim() : "Bearer";
+    const tokenSet = {
+        access_token: access,
+        token_type: tokenType
+    };
+    if (refresh) {
+        tokenSet.refresh_token = refresh;
+    }
+    if (expiresIn !== null) {
+        tokenSet.expires_at = nowMs + expiresIn * 1000;
+    }
+    return tokenSet;
+}
+export function parseStoredTokenSet(raw) {
+    try {
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== "object") {
+            return null;
+        }
+        const rec = parsed;
+        const access = typeof rec.access_token === "string" ? rec.access_token.trim() : "";
+        if (!access) {
+            return null;
+        }
+        const tokenSet = { access_token: access };
+        if (typeof rec.refresh_token === "string" && rec.refresh_token.trim()) {
+            tokenSet.refresh_token = rec.refresh_token.trim();
+        }
+        if (typeof rec.token_type === "string" && rec.token_type.trim()) {
+            tokenSet.token_type = rec.token_type.trim();
+        }
+        if (typeof rec.expires_at === "number" && Number.isFinite(rec.expires_at)) {
+            tokenSet.expires_at = rec.expires_at;
+        }
+        return tokenSet;
+    }
+    catch {
+        return null;
+    }
+}
+export function serializeTokenSet(tokenSet) {
+    return JSON.stringify(tokenSet);
+}
+export function tokenNeedsRefresh(tokenSet, nowMs, skewMs) {
+    if (!tokenSet.expires_at) {
+        return false;
+    }
+    return nowMs > tokenSet.expires_at - skewMs;
+}
+async function readJson(response) {
+    const text = await response.text();
+    if (!text) {
+        return null;
+    }
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return { error: "non_json", status: response.status };
+    }
+}
+export async function exchangeAuthorizationCode(options) {
+    const fetchImpl = options.fetchImpl || fetch;
+    const now = options.now || Date.now;
+    const basicAuth = Buffer.from(`${options.endpoints.clientId}:`).toString("base64");
+    let response;
+    try {
+        response = await fetchImpl(options.endpoints.tokenUrl, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/x-www-form-urlencoded",
+                Accept: "application/json",
+                Authorization: `Basic ${basicAuth}`
+            },
+            body: new URLSearchParams({
+                code: options.code,
+                redirect_uri: options.endpoints.redirectUri,
+                code_verifier: options.codeVerifier,
+                state: options.state
+            })
+        });
+    }
+    catch {
+        throw new AuthTransportError("Plaud token exchange failed (network).");
+    }
+    if (!response.ok) {
+        throw new Error(redactSecrets(`Plaud token exchange failed (${response.status}).`));
+    }
+    const data = await readJson(response);
+    return parseTokenSet(data, now());
+}
+export async function refreshTokenSet(options) {
+    const refreshToken = options.tokenSet.refresh_token;
+    if (!refreshToken) {
+        throw new AuthExpiredError();
+    }
+    const fetchImpl = options.fetchImpl || fetch;
+    const now = options.now || Date.now;
+    let response;
+    try {
+        response = await fetchImpl(options.endpoints.refreshUrl, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/x-www-form-urlencoded",
+                Accept: "application/json"
+            },
+            body: new URLSearchParams({ refresh_token: refreshToken })
+        });
+    }
+    catch (err) {
+        if (isTransportError(err)) {
+            throw new AuthTransportError("Plaud token refresh failed (network).");
+        }
+        throw err;
+    }
+    if (!response.ok) {
+        if (response.status === 401 || response.status === 400 || response.status === 403) {
+            throw new AuthExpiredError();
+        }
+        if (response.status >= 500) {
+            throw new AuthTransportError(`Plaud token refresh failed (${response.status}).`);
+        }
+        throw new AuthExpiredError();
+    }
+    const data = await readJson(response);
+    return parseTokenSet(data, now(), options.tokenSet);
+}
+//# sourceMappingURL=oauth.js.map

package/dist/plaud/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../src/plaud/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAEvF,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,SAAS,kBAAkB,CAAC,GAAW;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAChE,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,GAAG,CAAC,QAAQ,KAAK,gBAAgB,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACxE,MAAM,QAAQ,GACZ,CAAC,OAAO,GAAG,CAAC,mBAAmB,KAAK,QAAQ,IAAI,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC;QAC/E,CAAC,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,IAAI,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;QACvE,qBAAqB,CAAC;IACxB,MAAM,gBAAgB,GACpB,OAAO,GAAG,CAAC,kBAAkB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,MAAM,WAAW,GACf,gBAAgB,IAAI,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,kBAAkB,CAAC;IACnG,OAAO;QACL,QAAQ;QACR,WAAW;QACX,gBAAgB,EACd,CAAC,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,IAAI,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,IAAI,yBAAyB;QACpG,QAAQ,EAAE,CAAC,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,IAAI,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,IAAI,iBAAiB;QACtG,UAAU,EAAE,CAAC,OAAO,GAAG,CAAC,iBAAiB,KAAK,QAAQ,IAAI,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,IAAI,mBAAmB;QAC9G,OAAO,EAAE,CAAC,OAAO,GAAG,CAAC,kBAAkB,KAAK,QAAQ,IAAI,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,IAAI,oBAAoB;KAC/G,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,SAAyB;IAClE,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;IAC5C,MAAM,aAAa,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,SAAS,EAAE,SAAS,CAAC,QAAQ;QAC7B,YAAY,EAAE,SAAS,CAAC,WAAW;QACnC,aAAa,EAAE,MAAM;QACrB,cAAc,EAAE,aAAa;QAC7B,qBAAqB,EAAE,MAAM;QAC7B,KAAK;KACN,CAAC,CAAC;IACH,OAAO;QACL,GAAG,EAAE,GAAG,SAAS,CAAC,gBAAgB,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE;QACzD,YAAY;QACZ,KAAK;KACN,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAa,EAAE,KAAa,EAAE,QAA+B;IACzF,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,GAAG,GAAG,IAA+B,CAAC;IAC5C,MAAM,MAAM,GACV,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACjG,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,OAAO,GACX,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,IAAI,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE;QAC/D,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE;QAC1B,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC;IAC9B,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IAChH,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;IACjH,MAAM,QAAQ,GAAkB;QAC9B,YAAY,EAAE,MAAM;QACpB,UAAU,EAAE,SAAS;KACtB,CAAC;IACF,IAAI,OAAO,EAAE,CAAC;QACZ,QAAQ,CAAC,aAAa,GAAG,OAAO,CAAC;IACnC,CAAC;IACD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,QAAQ,CAAC,UAAU,GAAG,KAAK,GAAG,SAAS,GAAG,IAAI,CAAC;IACjD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,MAAiC,CAAC;QAC9C,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAkB,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;QACzD,IAAI,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,IAAI,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC;YACtE,QAAQ,CAAC,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QACpD,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;YAChE,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAC9C,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1E,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QACvC,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAuB;IACvD,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAuB,EAAE,KAAa,EAAE,MAAc;IACtF,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,GAAG,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAkB;IACxC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACxD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAO/C;IACC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnF,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE;YACrD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,MAAM,EAAE,kBAAkB;gBAC1B,aAAa,EAAE,SAAS,SAAS,EAAE;aACpC;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW;gBAC3C,aAAa,EAAE,OAAO,CAAC,YAAY;gBACnC,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB,CAAC;SACH,CAAC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kBAAkB,CAAC,wCAAwC,CAAC,CAAC;IACzE,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,gCAAgC,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtC,OAAO,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAKrC;IACC,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;IACpD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,gBAAgB,EAAE,CAAC;IAC/B,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,IAAI,eAAe,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;SAC3D,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,kBAAkB,CAAC,uCAAuC,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAClF,MAAM,IAAI,gBAAgB,EAAE,CAAC;QAC/B,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YAC3B,MAAM,IAAI,kBAAkB,CAAC,+BAA+B,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,IAAI,gBAAgB,EAAE,CAAC;IAC/B,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtC,OAAO,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;AACtD,CAAC"}

package/dist/plaud/pkce.d.ts

@@ -0,0 +1,3 @@
+export declare function generateCodeVerifier(): string;
+export declare function generateCodeChallenge(verifier: string): string;
+export declare function generateState(): string;

package/dist/plaud/pkce.js

@@ -0,0 +1,11 @@
+import { createHash, randomBytes } from "node:crypto";
+export function generateCodeVerifier() {
+    return randomBytes(32).toString("base64url");
+}
+export function generateCodeChallenge(verifier) {
+    return createHash("sha256").update(verifier).digest("base64url");
+}
+export function generateState() {
+    return randomBytes(16).toString("base64url");
+}
+//# sourceMappingURL=pkce.js.map

package/dist/plaud/pkce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.js","sourceRoot":"","sources":["../../src/plaud/pkce.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,UAAU,oBAAoB;IAClC,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC"}

package/dist/plaud/session.d.ts

@@ -0,0 +1,23 @@
+import type { OAuthEndpoints, PlaudTokenSet } from "./types.js";
+import type { SecretStore } from "../secrets.js";
+export interface PlaudAuthSession {
+    endpoints: OAuthEndpoints;
+    getAccessToken(): Promise<string | null>;
+    /** Force a refresh (after a 401). */
+    refresh(): Promise<string>;
+    save(tokenSet: PlaudTokenSet): Promise<void>;
+    clear(): Promise<void>;
+    peek(): PlaudTokenSet | null;
+}
+/**
+ * One Plaud sign-in stored in Keychain under a profile-specific account.
+ * Before refreshing, re-reads Keychain: if another process (daemon vs a manual
+ * CLI run) already rotated the refresh token, use that instead of burning ours.
+ */
+export declare function createAuthSession(options: {
+    store: SecretStore;
+    account: string;
+    env?: NodeJS.ProcessEnv;
+    fetchImpl?: typeof fetch;
+    now?: () => number;
+}): Promise<PlaudAuthSession>;

package/dist/plaud/session.js

@@ -0,0 +1,77 @@
+import { REFRESH_SKEW_MS } from "./constants.js";
+import { AuthExpiredError, isAuthExpiredError, isTransportError } from "./errors.js";
+import { parseStoredTokenSet, refreshTokenSet, resolveOAuthEndpoints, serializeTokenSet, tokenNeedsRefresh } from "./oauth.js";
+/**
+ * One Plaud sign-in stored in Keychain under a profile-specific account.
+ * Before refreshing, re-reads Keychain: if another process (daemon vs a manual
+ * CLI run) already rotated the refresh token, use that instead of burning ours.
+ */
+export async function createAuthSession(options) {
+    const now = options.now || Date.now;
+    const endpoints = resolveOAuthEndpoints(options.env || process.env);
+    const load = async () => {
+        const raw = await options.store.get(options.account);
+        return raw ? parseStoredTokenSet(raw) : null;
+    };
+    let current = await load();
+    async function persist(next) {
+        current = next;
+        await options.store.set(options.account, serializeTokenSet(next));
+    }
+    async function refresh() {
+        const stored = await load();
+        if (stored && current && stored.access_token !== current.access_token && !tokenNeedsRefresh(stored, now(), REFRESH_SKEW_MS)) {
+            current = stored;
+            return stored.access_token;
+        }
+        if (stored) {
+            current = stored;
+        }
+        if (!current?.refresh_token) {
+            throw new AuthExpiredError();
+        }
+        try {
+            const next = await refreshTokenSet({ endpoints, tokenSet: current, fetchImpl: options.fetchImpl, now });
+            await persist(next);
+            return next.access_token;
+        }
+        catch (err) {
+            if (isTransportError(err) || isAuthExpiredError(err)) {
+                throw err;
+            }
+            throw new AuthExpiredError();
+        }
+    }
+    async function getAccessToken() {
+        if (!current) {
+            current = await load();
+            if (!current) {
+                return null;
+            }
+        }
+        if (tokenNeedsRefresh(current, now(), REFRESH_SKEW_MS)) {
+            try {
+                return await refresh();
+            }
+            catch (err) {
+                if (isTransportError(err) && current?.access_token) {
+                    return current.access_token;
+                }
+                throw err;
+            }
+        }
+        return current.access_token;
+    }
+    return {
+        endpoints,
+        getAccessToken,
+        refresh,
+        save: persist,
+        clear: async () => {
+            current = null;
+            await options.store.delete(options.account);
+        },
+        peek: () => current
+    };
+}
+//# sourceMappingURL=session.js.map

package/dist/plaud/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/plaud/session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACrF,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,YAAY,CAAC;AAcpB;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAMvC;IACC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,SAAS,GAAG,qBAAqB,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,KAAK,IAAmC,EAAE;QACrD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrD,OAAO,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/C,CAAC,CAAC;IACF,IAAI,OAAO,GAAG,MAAM,IAAI,EAAE,CAAC;IAE3B,KAAK,UAAU,OAAO,CAAC,IAAmB;QACxC,OAAO,GAAG,IAAI,CAAC;QACf,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,UAAU,OAAO;QACpB,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;QAC5B,IAAI,MAAM,IAAI,OAAO,IAAI,MAAM,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,eAAe,CAAC,EAAE,CAAC;YAC5H,OAAO,GAAG,MAAM,CAAC;YACjB,OAAO,MAAM,CAAC,YAAY,CAAC;QAC7B,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,GAAG,MAAM,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,CAAC;YAC5B,MAAM,IAAI,gBAAgB,EAAE,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;YACxG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;YACpB,OAAO,IAAI,CAAC,YAAY,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,MAAM,IAAI,gBAAgB,EAAE,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,KAAK,UAAU,cAAc;QAC3B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,MAAM,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,IAAI,iBAAiB,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,eAAe,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC;gBACH,OAAO,MAAM,OAAO,EAAE,CAAC;YACzB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,OAAO,EAAE,YAAY,EAAE,CAAC;oBACnD,OAAO,OAAO,CAAC,YAAY,CAAC;gBAC9B,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC,YAAY,CAAC;IAC9B,CAAC;IAED,OAAO;QACL,SAAS;QACT,cAAc;QACd,OAAO;QACP,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO;KACpB,CAAC;AACJ,CAAC"}

package/dist/plaud/types.d.ts

@@ -0,0 +1,21 @@
+/** Token document persisted in Keychain (compatible with `@plaud-ai/mcp` token files). */
+export interface PlaudTokenSet {
+    access_token: string;
+    refresh_token?: string;
+    token_type?: string;
+    /** epoch ms; omitted if Plaud did not send expires_in */
+    expires_at?: number;
+}
+export interface OAuthEndpoints {
+    clientId: string;
+    redirectUri: string;
+    authorizationUrl: string;
+    tokenUrl: string;
+    refreshUrl: string;
+    apiBase: string;
+}
+export interface AuthorizationRequest {
+    url: string;
+    codeVerifier: string;
+    state: string;
+}

package/dist/plaud/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/plaud/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/plaud/types.ts"],"names":[],"mappings":""}

package/dist/redact.d.ts

@@ -0,0 +1,3 @@
+export declare function redactSecrets(text: string): string;
+export declare function looksLikeSecret(value: string): boolean;
+export declare function safeErrorMessage(err: unknown): string;

package/dist/redact.js

@@ -0,0 +1,37 @@
+const SECRET_PATTERN = /(PLAUD_API_TOKEN\s*[=:=]\s*)([^\s"',}]+)|(X-Amz-(?:Security-Token|Signature|Credential)=)([^\s&"']+)|(code=)([^\s&"']+)|(NOTION_TOKEN\s*[=:=]\s*)([^\s"',}]+)|((?:OPENAI|ANTHROPIC)_API_KEY\s*[=:=]\s*)([^\s"',}]+)|(Bearer\s+)([A-Za-z0-9._\-+=/]+)|(authorization["']?\s*[:=]\s*["']?)([^"'\s]+)|((?:access_token|refresh_token)\s*[=:]\s*["']?)([^"'\s,}]+)|(sk-[A-Za-z0-9_-]{16,})|(ntn_[A-Za-z0-9]+)|(secret_[A-Za-z0-9]+)/gi;
+export function redactSecrets(text) {
+    if (!text) {
+        return text;
+    }
+    return text
+        .replace(SECRET_PATTERN, (full, a, _b, c, _d, e, _f, g, _h, i, _j, k, _l, m, _n, o) => {
+        if (a)
+            return `${a}[REDACTED]`;
+        if (c)
+            return `${c}[REDACTED]`;
+        if (e)
+            return `${e}[REDACTED]`;
+        if (g)
+            return `${g}[REDACTED]`;
+        if (i)
+            return `${i}[REDACTED]`;
+        if (k)
+            return `${k}[REDACTED]`;
+        if (m)
+            return `${m}[REDACTED]`;
+        if (o)
+            return `${o}[REDACTED]`;
+        return "[REDACTED]";
+    })
+        .replace(/\beyJ[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g, "[REDACTED]");
+}
+export function looksLikeSecret(value) {
+    return /sk-[A-Za-z0-9_-]{16,}|ntn_[A-Za-z0-9]{8,}|secret_[A-Za-z0-9]{8,}|Bearer\s+[A-Za-z0-9._\-]{20,}|eyJ[A-Za-z0-9_-]{20,}\./.test(value);
+}
+export function safeErrorMessage(err) {
+    if (err instanceof Error) {
+        return redactSecrets(err.message);
+    }
+    return redactSecrets(String(err));
+}
+//# sourceMappingURL=redact.js.map

package/dist/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../src/redact.ts"],"names":[],"mappings":"AAAA,MAAM,cAAc,GAClB,maAAma,CAAC;AAEta,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI;SACR,OAAO,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE;QACpF,IAAI,CAAC;YAAE,OAAO,GAAG,CAAC,YAAY,CAAC;QAC/B,IAAI,CAAC;YAAE,OAAO,GAAG,CAAC,YAAY,CAAC;QAC/B,IAAI,CAAC;YAAE,OAAO,GAAG,CAAC,YAAY,CAAC;QAC/B,IAAI,CAAC;YAAE,OAAO,GAAG,CAAC,YAAY,CAAC;QAC/B,IAAI,CAAC;YAAE,OAAO,GAAG,CAAC,YAAY,CAAC;QAC/B,IAAI,CAAC;YAAE,OAAO,GAAG,CAAC,YAAY,CAAC;QAC/B,IAAI,CAAC;YAAE,OAAO,GAAG,CAAC,YAAY,CAAC;QAC/B,IAAI,CAAC;YAAE,OAAO,GAAG,CAAC,YAAY,CAAC;QAC/B,OAAO,YAAY,CAAC;IACtB,CAAC,CAAC;SACD,OAAO,CAAC,4DAA4D,EAAE,YAAY,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,wHAAwH,CAAC,IAAI,CAClI,KAAK,CACN,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACzB,OAAO,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AACpC,CAAC"}

package/dist/runtime.d.ts

@@ -0,0 +1,44 @@
+import type { AppConfig, ProfileConfig } from "./config.js";
+import { type Labeler } from "./llm.js";
+import { type NotionStore } from "./notion.js";
+import { type PlaudClient } from "./plaud/client.js";
+import type { SecretStore } from "./secrets.js";
+export declare class SetupError extends Error {
+    constructor(message: string);
+}
+export interface ProfileRuntime {
+    plaud: PlaudClient;
+    notion: NotionStore;
+    labeler: Labeler;
+}
+export declare function openaiKey(store: SecretStore, credentials: string, env: NodeJS.ProcessEnv): Promise<string>;
+export declare function anthropicKey(store: SecretStore, credentials: string, env: NodeJS.ProcessEnv): Promise<string>;
+/** The API key for the configured model's provider; SetupError naming the right `set-secret` if missing. */
+export declare function llmKey(store: SecretStore, credentials: string, model: string, env: NodeJS.ProcessEnv): Promise<string>;
+export declare function buildProfileRuntime(options: {
+    name: string;
+    profile: ProfileConfig;
+    config: AppConfig;
+    store: SecretStore;
+    env?: NodeJS.ProcessEnv;
+    needPlaud: boolean;
+    needLabeler: boolean;
+}): Promise<ProfileRuntime>;
+export interface ProfileStatus {
+    lastPollAt?: string;
+    lastPollOkAt?: string;
+    lastSyncOkAt?: string;
+    lastWritten?: {
+        title: string;
+        at: string;
+    };
+    pending?: number;
+    lastError?: string;
+    lastErrorAt?: string;
+    alertedAt?: string;
+}
+export type StatusFile = Record<string, ProfileStatus>;
+export declare function readStatus(env?: NodeJS.ProcessEnv): StatusFile;
+export declare function updateStatus(profile: string, patch: Partial<ProfileStatus>, env?: NodeJS.ProcessEnv): ProfileStatus;
+/** macOS banner so an expired sign-in never fails silently. Best effort. */
+export declare function notifyMac(title: string, message: string): void;

package/dist/runtime.js

@@ -0,0 +1,94 @@
+import { spawn } from "node:child_process";
+import { ANTHROPIC_ACCOUNT, OPENAI_ACCOUNT, RELLOGIN_ANTHROPIC, RELLOGIN_LLM, RELLOGIN_NOTION, anthropicAccount, isAnthropicModel, notionAccount, openaiAccount, plaudAccount, relogin } from "./constants.js";
+import { createLabeler } from "./llm.js";
+import { HttpNotionStore } from "./notion.js";
+import { getStatusPath, readJson, writeJsonAtomic } from "./paths.js";
+import { HttpPlaudClient } from "./plaud/client.js";
+import { createAuthSession } from "./plaud/session.js";
+export class SetupError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "SetupError";
+    }
+}
+export async function openaiKey(store, credentials, env) {
+    const key = env.OPENAI_API_KEY?.trim() || (await store.get(openaiAccount(credentials))) || (await store.get(OPENAI_ACCOUNT));
+    if (!key) {
+        throw new SetupError(RELLOGIN_LLM);
+    }
+    return key;
+}
+export async function anthropicKey(store, credentials, env) {
+    const key = env.ANTHROPIC_API_KEY?.trim() || (await store.get(anthropicAccount(credentials))) || (await store.get(ANTHROPIC_ACCOUNT));
+    if (!key) {
+        throw new SetupError(RELLOGIN_ANTHROPIC);
+    }
+    return key;
+}
+/** The API key for the configured model's provider; SetupError naming the right `set-secret` if missing. */
+export async function llmKey(store, credentials, model, env) {
+    return isAnthropicModel(model) ? anthropicKey(store, credentials, env) : openaiKey(store, credentials, env);
+}
+export async function buildProfileRuntime(options) {
+    const env = options.env || process.env;
+    const creds = options.profile.credentials;
+    const notionToken = await options.store.get(notionAccount(creds));
+    if (!notionToken) {
+        throw new SetupError(RELLOGIN_NOTION(creds));
+    }
+    const notion = new HttpNotionStore({ token: notionToken, dataSourceId: options.profile.notionDataSourceId });
+    let plaud = {
+        listFiles: () => Promise.reject(new SetupError("Plaud not needed for this command")),
+        getRecording: () => Promise.reject(new SetupError("Plaud not needed for this command")),
+        currentUser: () => Promise.reject(new SetupError("Plaud not needed for this command"))
+    };
+    if (options.needPlaud) {
+        const session = await createAuthSession({ store: options.store, account: plaudAccount(creds), env });
+        if (!session.peek()) {
+            throw new SetupError(relogin(creds));
+        }
+        plaud = new HttpPlaudClient(session);
+    }
+    let labeler = { label: () => Promise.reject(new SetupError("Labeler not needed for this command")) };
+    if (options.needLabeler) {
+        const { llmModel, llmEffort, openaiBaseUrl, anthropicBaseUrl } = options.config;
+        const key = await llmKey(options.store, creds, llmModel, env);
+        labeler = createLabeler({
+            model: llmModel,
+            effort: llmEffort,
+            openaiKey: isAnthropicModel(llmModel) ? undefined : key,
+            anthropicKey: isAnthropicModel(llmModel) ? key : undefined,
+            openaiBaseUrl,
+            anthropicBaseUrl
+        });
+    }
+    return { plaud, notion, labeler };
+}
+export function readStatus(env = process.env) {
+    return readJson(getStatusPath(env)) || {};
+}
+export function updateStatus(profile, patch, env = process.env) {
+    const all = readStatus(env);
+    const next = { ...(all[profile] || {}), ...patch };
+    all[profile] = next;
+    writeJsonAtomic(getStatusPath(env), all);
+    return next;
+}
+/** macOS banner so an expired sign-in never fails silently. Best effort. */
+export function notifyMac(title, message) {
+    if (process.platform !== "darwin") {
+        return;
+    }
+    const esc = (s) => s.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+    try {
+        const child = spawn("/usr/bin/osascript", ["-e", `display notification "${esc(message)}" with title "${esc(title)}"`], {
+            stdio: "ignore",
+            detached: true
+        });
+        child.unref();
+    }
+    catch {
+        /* ignore */
+    }
+}
+//# sourceMappingURL=runtime.js.map

package/dist/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,YAAY,EACZ,OAAO,EACR,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAgB,MAAM,UAAU,CAAC;AACvD,OAAO,EAAE,eAAe,EAAoB,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,eAAe,EAAoB,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAGvD,MAAM,OAAO,UAAW,SAAQ,KAAK;IACnC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAQD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAkB,EAAE,WAAmB,EAAE,GAAsB;IAC7F,MAAM,GAAG,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;IAC7H,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAkB,EAAE,WAAmB,EAAE,GAAsB;IAChG,MAAM,GAAG,GACP,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC5H,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,UAAU,CAAC,kBAAkB,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,4GAA4G;AAC5G,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,KAAkB,EAAE,WAAmB,EAAE,KAAa,EAAE,GAAsB;IACzG,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;AAC9G,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAQzC;IACC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;IAC1C,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,UAAU,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAE7G,IAAI,KAAK,GAAgB;QACvB,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,mCAAmC,CAAC,CAAC;QACpF,YAAY,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,mCAAmC,CAAC,CAAC;QACvF,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,mCAAmC,CAAC,CAAC;KACvF,CAAC;IACF,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACrG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACvC,CAAC;QACD,KAAK,GAAG,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,OAAO,GAAY,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,qCAAqC,CAAC,CAAC,EAAE,CAAC;IAC9G,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QAChF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC9D,OAAO,GAAG,aAAa,CAAC;YACtB,KAAK,EAAE,QAAQ;YACf,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG;YACvD,YAAY,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;YAC1D,aAAa;YACb,gBAAgB;SACjB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACpC,CAAC;AAeD,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,OAAO,QAAQ,CAAa,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,KAA6B,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC/G,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;IACnD,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;IACpB,eAAe,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACzC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,SAAS,CAAC,KAAa,EAAE,OAAe;IACtD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,oBAAoB,EAAE,CAAC,IAAI,EAAE,yBAAyB,GAAG,CAAC,OAAO,CAAC,iBAAiB,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;YACrH,KAAK,EAAE,QAAQ;YACf,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;AACH,CAAC"}

package/dist/scrub.d.ts

@@ -0,0 +1,17 @@
+export interface ScrubResult {
+    rowsScanned: number;
+    rowsAffected: Array<{
+        title: string;
+        type: string;
+        ssn: number;
+        card: number;
+    }>;
+    blocksUpdated: number;
+}
+export declare function scrubSensitive(options: {
+    token: string;
+    dataSourceId: string;
+    apply: boolean;
+    log: (m: string) => void;
+    fetchImpl?: typeof fetch;
+}): Promise<ScrubResult>;