ralph-starter 0.0.1 → 0.1.1-beta.0

package/dist/auth/browser.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Open a URL in the user's default browser
+ * Cross-platform: macOS, Linux, Windows
+ */
+export declare function openBrowser(url: string): Promise<void>;
+/**
+ * Get a random available port for the OAuth callback server
+ */
+export declare function getRandomPort(): number;
+//# sourceMappingURL=browser.d.ts.map

package/dist/auth/browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/auth/browser.ts"],"names":[],"mappings":"AAKA;;;GAGG;AACH,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAwC5D;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAGtC"}

package/dist/auth/browser.js

@@ -0,0 +1,56 @@
+import { exec } from 'node:child_process';
+import { promisify } from 'node:util';
+const execAsync = promisify(exec);
+/**
+ * Open a URL in the user's default browser
+ * Cross-platform: macOS, Linux, Windows
+ */
+export async function openBrowser(url) {
+    const platform = process.platform;
+    let command;
+    switch (platform) {
+        case 'darwin':
+            // macOS
+            command = `open "${url}"`;
+            break;
+        case 'win32':
+            // Windows
+            command = `start "" "${url}"`;
+            break;
+        default:
+            // Linux and others
+            command = `xdg-open "${url}"`;
+            break;
+    }
+    try {
+        await execAsync(command);
+    }
+    catch (_error) {
+        // Some systems don't have xdg-open, try alternatives
+        if (platform === 'linux') {
+            try {
+                await execAsync(`sensible-browser "${url}"`);
+                return;
+            }
+            catch {
+                // Try one more fallback
+                try {
+                    await execAsync(`x-www-browser "${url}"`);
+                    return;
+                }
+                catch {
+                    // Give up
+                }
+            }
+        }
+        throw new Error(`Failed to open browser. Please open this URL manually:\n${url}`);
+    }
+}
+/**
+ * Get a random available port for the OAuth callback server
+ */
+export function getRandomPort() {
+    // Use ports in the ephemeral range
+    return Math.floor(Math.random() * (65535 - 49152)) + 49152;
+}
+//# sourceMappingURL=browser.js.map

package/dist/auth/browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.js","sourceRoot":"","sources":["../../src/auth/browser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAElC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW;IAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAElC,IAAI,OAAe,CAAC;IAEpB,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,QAAQ;YACR,OAAO,GAAG,SAAS,GAAG,GAAG,CAAC;YAC1B,MAAM;QACR,KAAK,OAAO;YACV,UAAU;YACV,OAAO,GAAG,aAAa,GAAG,GAAG,CAAC;YAC9B,MAAM;QACR;YACE,mBAAmB;YACnB,OAAO,GAAG,aAAa,GAAG,GAAG,CAAC;YAC9B,MAAM;IACV,CAAC;IAED,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QAChB,qDAAqD;QACrD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,qBAAqB,GAAG,GAAG,CAAC,CAAC;gBAC7C,OAAO;YACT,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;gBACxB,IAAI,CAAC;oBACH,MAAM,SAAS,CAAC,kBAAkB,GAAG,GAAG,CAAC,CAAC;oBAC1C,OAAO;gBACT,CAAC;gBAAC,MAAM,CAAC;oBACP,UAAU;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,2DAA2D,GAAG,EAAE,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,mCAAmC;IACnC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC;AAC7D,CAAC"}

package/dist/auth/index.d.ts

@@ -0,0 +1,5 @@
+export { getRandomPort, openBrowser } from './browser.js';
+export { getCallbackUrl, type OAuthCallbackResult, type OAuthServerOptions, startOAuthServer, } from './oauth-server.js';
+export { generatePKCE, type PKCEChallenge } from './pkce.js';
+export { BaseOAuthProvider, getConfiguredProviders, getProvider, getProviderNames, LinearOAuthProvider, linearProvider, NotionOAuthProvider, notionProvider, type OAuthProvider, type OAuthTokens, providers, TodoistOAuthProvider, todoistProvider, } from './providers/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EACL,cAAc,EACd,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,WAAW,EACX,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,SAAS,EACT,oBAAoB,EACpB,eAAe,GAChB,MAAM,sBAAsB,CAAC"}

package/dist/auth/index.js

@@ -0,0 +1,5 @@
+export { getRandomPort, openBrowser } from './browser.js';
+export { getCallbackUrl, startOAuthServer, } from './oauth-server.js';
+export { generatePKCE } from './pkce.js';
+export { BaseOAuthProvider, getConfiguredProviders, getProvider, getProviderNames, LinearOAuthProvider, linearProvider, NotionOAuthProvider, notionProvider, providers, TodoistOAuthProvider, todoistProvider, } from './providers/index.js';
+//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EACL,cAAc,EAGd,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAsB,MAAM,WAAW,CAAC;AAC7D,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,WAAW,EACX,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,EACd,mBAAmB,EACnB,cAAc,EAGd,SAAS,EACT,oBAAoB,EACpB,eAAe,GAChB,MAAM,sBAAsB,CAAC"}

package/dist/auth/oauth-server.d.ts

@@ -0,0 +1,20 @@
+export interface OAuthCallbackResult {
+    code: string;
+    state?: string;
+}
+export interface OAuthServerOptions {
+    port: number;
+    timeoutMs?: number;
+    successHtml?: string;
+    errorHtml?: string;
+}
+/**
+ * Start a local HTTP server to receive OAuth callbacks
+ * Returns a promise that resolves with the authorization code
+ */
+export declare function startOAuthServer(options: OAuthServerOptions): Promise<OAuthCallbackResult>;
+/**
+ * Get the callback URL for an OAuth server on a given port
+ */
+export declare function getCallbackUrl(port: number): string;
+//# sourceMappingURL=oauth-server.d.ts.map

package/dist/auth/oauth-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-server.d.ts","sourceRoot":"","sources":["../../src/auth/oauth-server.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAiGD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA+E1F;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnD"}

package/dist/auth/oauth-server.js

@@ -0,0 +1,168 @@
+import { createServer } from 'node:http';
+import { URL } from 'node:url';
+const DEFAULT_TIMEOUT_MS = 5 * 60 * 1000; // 5 minutes
+const DEFAULT_SUCCESS_HTML = `
+<!DOCTYPE html>
+<html>
+<head>
+  <title>Authentication Successful</title>
+  <style>
+    body {
+      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, sans-serif;
+      display: flex;
+      justify-content: center;
+      align-items: center;
+      min-height: 100vh;
+      margin: 0;
+      background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
+    }
+    .container {
+      background: white;
+      padding: 2rem 3rem;
+      border-radius: 12px;
+      box-shadow: 0 10px 40px rgba(0,0,0,0.2);
+      text-align: center;
+    }
+    h1 {
+      color: #22c55e;
+      margin-bottom: 0.5rem;
+    }
+    p {
+      color: #64748b;
+      margin-top: 0;
+    }
+    .icon {
+      font-size: 3rem;
+      margin-bottom: 1rem;
+    }
+  </style>
+</head>
+<body>
+  <div class="container">
+    <div class="icon">✓</div>
+    <h1>Authentication Successful!</h1>
+    <p>You can close this window and return to the terminal.</p>
+  </div>
+</body>
+</html>
+`;
+const DEFAULT_ERROR_HTML = `
+<!DOCTYPE html>
+<html>
+<head>
+  <title>Authentication Failed</title>
+  <style>
+    body {
+      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, sans-serif;
+      display: flex;
+      justify-content: center;
+      align-items: center;
+      min-height: 100vh;
+      margin: 0;
+      background: linear-gradient(135deg, #ef4444 0%, #dc2626 100%);
+    }
+    .container {
+      background: white;
+      padding: 2rem 3rem;
+      border-radius: 12px;
+      box-shadow: 0 10px 40px rgba(0,0,0,0.2);
+      text-align: center;
+    }
+    h1 {
+      color: #ef4444;
+      margin-bottom: 0.5rem;
+    }
+    p {
+      color: #64748b;
+      margin-top: 0;
+    }
+    .icon {
+      font-size: 3rem;
+      margin-bottom: 1rem;
+    }
+  </style>
+</head>
+<body>
+  <div class="container">
+    <div class="icon">✗</div>
+    <h1>Authentication Failed</h1>
+    <p>{{ERROR_MESSAGE}}</p>
+    <p>Please close this window and try again.</p>
+  </div>
+</body>
+</html>
+`;
+/**
+ * Start a local HTTP server to receive OAuth callbacks
+ * Returns a promise that resolves with the authorization code
+ */
+export function startOAuthServer(options) {
+    const { port, timeoutMs = DEFAULT_TIMEOUT_MS, successHtml = DEFAULT_SUCCESS_HTML, errorHtml = DEFAULT_ERROR_HTML, } = options;
+    return new Promise((resolve, reject) => {
+        let server = null;
+        let timeoutId = null;
+        const cleanup = () => {
+            if (timeoutId) {
+                clearTimeout(timeoutId);
+                timeoutId = null;
+            }
+            if (server) {
+                server.close();
+                server = null;
+            }
+        };
+        const handleRequest = (req, res) => {
+            const reqUrl = new URL(req.url || '/', `http://localhost:${port}`);
+            // Only handle the callback path
+            if (reqUrl.pathname !== '/callback') {
+                res.writeHead(404, { 'Content-Type': 'text/plain' });
+                res.end('Not Found');
+                return;
+            }
+            const code = reqUrl.searchParams.get('code');
+            const state = reqUrl.searchParams.get('state');
+            const error = reqUrl.searchParams.get('error');
+            const errorDescription = reqUrl.searchParams.get('error_description');
+            if (error) {
+                const errorMessage = errorDescription || error;
+                res.writeHead(400, { 'Content-Type': 'text/html' });
+                res.end(errorHtml.replace('{{ERROR_MESSAGE}}', errorMessage));
+                cleanup();
+                reject(new Error(`OAuth error: ${errorMessage}`));
+                return;
+            }
+            if (!code) {
+                const errorMessage = 'No authorization code received';
+                res.writeHead(400, { 'Content-Type': 'text/html' });
+                res.end(errorHtml.replace('{{ERROR_MESSAGE}}', errorMessage));
+                cleanup();
+                reject(new Error(errorMessage));
+                return;
+            }
+            // Success!
+            res.writeHead(200, { 'Content-Type': 'text/html' });
+            res.end(successHtml);
+            cleanup();
+            resolve({ code, state: state || undefined });
+        };
+        server = createServer(handleRequest);
+        server.on('error', (err) => {
+            cleanup();
+            reject(new Error(`Failed to start OAuth server: ${err.message}`));
+        });
+        server.listen(port, '127.0.0.1', () => {
+            // Set timeout
+            timeoutId = setTimeout(() => {
+                cleanup();
+                reject(new Error('OAuth authentication timed out. Please try again.'));
+            }, timeoutMs);
+        });
+    });
+}
+/**
+ * Get the callback URL for an OAuth server on a given port
+ */
+export function getCallbackUrl(port) {
+    return `http://127.0.0.1:${port}/callback`;
+}
+//# sourceMappingURL=oauth-server.js.map

package/dist/auth/oauth-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-server.js","sourceRoot":"","sources":["../../src/auth/oauth-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AACjG,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAc/B,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;AAEtD,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4C5B,CAAC;AAEF,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6C1B,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAA2B;IAC1D,MAAM,EACJ,IAAI,EACJ,SAAS,GAAG,kBAAkB,EAC9B,WAAW,GAAG,oBAAoB,EAClC,SAAS,GAAG,kBAAkB,GAC/B,GAAG,OAAO,CAAC;IAEZ,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,IAAI,SAAS,GAA0B,IAAI,CAAC;QAE5C,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,IAAI,SAAS,EAAE,CAAC;gBACd,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxB,SAAS,GAAG,IAAI,CAAC;YACnB,CAAC;YACD,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,aAAa,GAAG,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;YAClE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;YAEnE,gCAAgC;YAChC,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACpC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;gBACrD,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,gBAAgB,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;YAEtE,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,YAAY,GAAG,gBAAgB,IAAI,KAAK,CAAC;gBAC/C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC,CAAC;gBAC9D,OAAO,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,YAAY,EAAE,CAAC,CAAC,CAAC;gBAClD,OAAO;YACT,CAAC;YAED,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,YAAY,GAAG,gCAAgC,CAAC;gBACtD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC,CAAC;gBAC9D,OAAO,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;gBAChC,OAAO;YACT,CAAC;YAED,WAAW;YACX,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;YACpD,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAErB,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC;QAC/C,CAAC,CAAC;QAEF,MAAM,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;QAErC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;YACpC,cAAc;YACd,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC1B,OAAO,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC,CAAC;YACzE,CAAC,EAAE,SAAS,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,oBAAoB,IAAI,WAAW,CAAC;AAC7C,CAAC"}

package/dist/auth/pkce.d.ts

@@ -0,0 +1,46 @@
+/**
+ * PKCE (Proof Key for Code Exchange) utilities for OAuth 2.0
+ *
+ * PKCE is an extension to OAuth that protects authorization codes
+ * from interception attacks. It's required for public clients (like CLI apps)
+ * that cannot securely store a client secret.
+ *
+ * Flow:
+ * 1. Generate a random code_verifier
+ * 2. Create code_challenge = base64url(sha256(code_verifier))
+ * 3. Send code_challenge with authorization request
+ * 4. Send code_verifier with token exchange request
+ * 5. Server verifies sha256(code_verifier) === code_challenge
+ */
+export interface PKCEChallenge {
+    /** Random string used to verify the token exchange */
+    verifier: string;
+    /** SHA256 hash of verifier, sent with auth request */
+    challenge: string;
+    /** Always 'S256' for SHA256 */
+    method: 'S256';
+}
+/**
+ * Generate a complete PKCE challenge
+ *
+ * @example
+ * ```typescript
+ * const pkce = generatePKCE();
+ *
+ * // Include in authorization URL
+ * const authUrl = `https://api.example.com/oauth/authorize?` +
+ *   `code_challenge=${pkce.challenge}&` +
+ *   `code_challenge_method=${pkce.method}`;
+ *
+ * // Include in token exchange
+ * const tokenResponse = await fetch('https://api.example.com/oauth/token', {
+ *   method: 'POST',
+ *   body: new URLSearchParams({
+ *     code: authorizationCode,
+ *     code_verifier: pkce.verifier,
+ *   }),
+ * });
+ * ```
+ */
+export declare function generatePKCE(): PKCEChallenge;
+//# sourceMappingURL=pkce.d.ts.map

package/dist/auth/pkce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.d.ts","sourceRoot":"","sources":["../../src/auth/pkce.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,aAAa;IAC5B,sDAAsD;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,SAAS,EAAE,MAAM,CAAC;IAClB,+BAA+B;IAC/B,MAAM,EAAE,MAAM,CAAC;CAChB;AA6BD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,YAAY,IAAI,aAAa,CAS5C"}

package/dist/auth/pkce.js

@@ -0,0 +1,57 @@
+import crypto from 'node:crypto';
+/**
+ * Generate a cryptographically random code verifier
+ * Per RFC 7636: 43-128 characters, using [A-Z], [a-z], [0-9], "-", ".", "_", "~"
+ */
+function generateCodeVerifier() {
+    // Generate 32 random bytes = 43 base64url characters
+    const buffer = crypto.randomBytes(32);
+    return base64urlEncode(buffer);
+}
+/**
+ * Create code challenge from verifier using SHA256
+ * Per RFC 7636: code_challenge = BASE64URL(SHA256(code_verifier))
+ */
+function createCodeChallenge(verifier) {
+    const hash = crypto.createHash('sha256').update(verifier).digest();
+    return base64urlEncode(hash);
+}
+/**
+ * Base64url encode (RFC 4648 Section 5)
+ * Standard base64 with + → -, / → _, and no padding
+ */
+function base64urlEncode(buffer) {
+    return buffer.toString('base64').replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+/**
+ * Generate a complete PKCE challenge
+ *
+ * @example
+ * ```typescript
+ * const pkce = generatePKCE();
+ *
+ * // Include in authorization URL
+ * const authUrl = `https://api.example.com/oauth/authorize?` +
+ *   `code_challenge=${pkce.challenge}&` +
+ *   `code_challenge_method=${pkce.method}`;
+ *
+ * // Include in token exchange
+ * const tokenResponse = await fetch('https://api.example.com/oauth/token', {
+ *   method: 'POST',
+ *   body: new URLSearchParams({
+ *     code: authorizationCode,
+ *     code_verifier: pkce.verifier,
+ *   }),
+ * });
+ * ```
+ */
+export function generatePKCE() {
+    const verifier = generateCodeVerifier();
+    const challenge = createCodeChallenge(verifier);
+    return {
+        verifier,
+        challenge,
+        method: 'S256',
+    };
+}
+//# sourceMappingURL=pkce.js.map

package/dist/auth/pkce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.js","sourceRoot":"","sources":["../../src/auth/pkce.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AA0BjC;;;GAGG;AACH,SAAS,oBAAoB;IAC3B,qDAAqD;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACtC,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;IACnE,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC9F,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;IACxC,MAAM,SAAS,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAEhD,OAAO;QACL,QAAQ;QACR,SAAS;QACT,MAAM,EAAE,MAAM;KACf,CAAC;AACJ,CAAC"}

package/dist/auth/providers/base.d.ts

@@ -0,0 +1,52 @@
+/**
+ * OAuth Provider Configuration
+ */
+export interface OAuthProvider {
+    /** Provider name (e.g., 'notion', 'linear', 'todoist') */
+    name: string;
+    /** Human-readable display name */
+    displayName: string;
+    /** OAuth authorization endpoint */
+    authorizationUrl: string;
+    /** OAuth token exchange endpoint */
+    tokenUrl: string;
+    /** Required OAuth scopes */
+    scopes: string[];
+    /** Client ID for the OAuth app (ralph-starter's registered app) */
+    clientId: string;
+    /** Client secret for the OAuth app (set via env var for security) */
+    clientSecret?: string;
+    /** Additional authorization URL parameters */
+    authParams?: Record<string, string>;
+    /** Whether this provider supports PKCE (no client secret needed) */
+    supportsPKCE: boolean;
+    /** Build the full authorization URL */
+    buildAuthUrl(redirectUri: string, state: string, codeChallenge?: string): string;
+    /** Exchange authorization code for access token */
+    exchangeCode(code: string, redirectUri: string, codeVerifier?: string): Promise<OAuthTokens>;
+}
+export interface OAuthTokens {
+    accessToken: string;
+    refreshToken?: string;
+    expiresIn?: number;
+    tokenType: string;
+    scope?: string;
+}
+/**
+ * Base class for OAuth providers
+ */
+export declare abstract class BaseOAuthProvider implements OAuthProvider {
+    abstract name: string;
+    abstract displayName: string;
+    abstract authorizationUrl: string;
+    abstract tokenUrl: string;
+    abstract scopes: string[];
+    abstract clientId: string;
+    clientSecret?: string;
+    authParams?: Record<string, string>;
+    /** Override in subclass to enable PKCE flow */
+    supportsPKCE: boolean;
+    buildAuthUrl(redirectUri: string, state: string, codeChallenge?: string): string;
+    exchangeCode(code: string, redirectUri: string, codeVerifier?: string): Promise<OAuthTokens>;
+}
+//# sourceMappingURL=base.d.ts.map

package/dist/auth/providers/base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../src/auth/providers/base.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;IAEb,kCAAkC;IAClC,WAAW,EAAE,MAAM,CAAC;IAEpB,mCAAmC;IACnC,gBAAgB,EAAE,MAAM,CAAC;IAEzB,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IAEjB,4BAA4B;IAC5B,MAAM,EAAE,MAAM,EAAE,CAAC;IAEjB,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAC;IAEjB,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,8CAA8C;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEpC,oEAAoE;IACpE,YAAY,EAAE,OAAO,CAAC;IAEtB,uCAAuC;IACvC,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAEjF,mDAAmD;IACnD,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CAC9F;AAED,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,8BAAsB,iBAAkB,YAAW,aAAa;IAC9D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEpC,+CAA+C;IAC/C,YAAY,UAAS;IAErB,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM;IAuB1E,YAAY,CAChB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,WAAW,CAAC;CAkDxB"}

package/dist/auth/providers/base.js

@@ -0,0 +1,70 @@
+/**
+ * Base class for OAuth providers
+ */
+export class BaseOAuthProvider {
+    clientSecret;
+    authParams;
+    /** Override in subclass to enable PKCE flow */
+    supportsPKCE = false;
+    buildAuthUrl(redirectUri, state, codeChallenge) {
+        const params = new URLSearchParams({
+            client_id: this.clientId,
+            redirect_uri: redirectUri,
+            response_type: 'code',
+            state,
+            ...this.authParams,
+        });
+        // Add PKCE challenge if provided
+        if (codeChallenge) {
+            params.set('code_challenge', codeChallenge);
+            params.set('code_challenge_method', 'S256');
+        }
+        // Add scopes (format varies by provider)
+        if (this.scopes.length > 0) {
+            params.set('scope', this.scopes.join(' '));
+        }
+        return `${this.authorizationUrl}?${params.toString()}`;
+    }
+    async exchangeCode(code, redirectUri, codeVerifier) {
+        // For PKCE flow, we don't need client_secret
+        if (!this.supportsPKCE && !this.clientSecret) {
+            throw new Error(`No client secret configured for ${this.displayName}. ` +
+                `Set RALPH_${this.name.toUpperCase()}_CLIENT_SECRET environment variable.`);
+        }
+        const body = {
+            grant_type: 'authorization_code',
+            client_id: this.clientId,
+            code,
+            redirect_uri: redirectUri,
+        };
+        // Add client_secret for non-PKCE flow
+        if (this.clientSecret) {
+            body.client_secret = this.clientSecret;
+        }
+        // Add code_verifier for PKCE flow
+        if (codeVerifier) {
+            body.code_verifier = codeVerifier;
+        }
+        const response = await fetch(this.tokenUrl, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+                Accept: 'application/json',
+            },
+            body: new URLSearchParams(body).toString(),
+        });
+        if (!response.ok) {
+            const error = await response.text();
+            throw new Error(`Failed to exchange code: ${error}`);
+        }
+        const data = (await response.json());
+        return {
+            accessToken: data.access_token,
+            refreshToken: data.refresh_token,
+            expiresIn: data.expires_in,
+            tokenType: data.token_type || 'Bearer',
+            scope: data.scope,
+        };
+    }
+}
+//# sourceMappingURL=base.js.map

package/dist/auth/providers/base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../src/auth/providers/base.ts"],"names":[],"mappings":"AA8CA;;GAEG;AACH,MAAM,OAAgB,iBAAiB;IAOrC,YAAY,CAAU;IACtB,UAAU,CAA0B;IAEpC,+CAA+C;IAC/C,YAAY,GAAG,KAAK,CAAC;IAErB,YAAY,CAAC,WAAmB,EAAE,KAAa,EAAE,aAAsB;QACrE,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,QAAQ;YACxB,YAAY,EAAE,WAAW;YACzB,aAAa,EAAE,MAAM;YACrB,KAAK;YACL,GAAG,IAAI,CAAC,UAAU;SACnB,CAAC,CAAC;QAEH,iCAAiC;QACjC,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;YAC5C,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAED,yCAAyC;QACzC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7C,CAAC;QAED,OAAO,GAAG,IAAI,CAAC,gBAAgB,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,IAAY,EACZ,WAAmB,EACnB,YAAqB;QAErB,6CAA6C;QAC7C,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CACb,mCAAmC,IAAI,CAAC,WAAW,IAAI;gBACrD,aAAa,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,sCAAsC,CAC7E,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAA2B;YACnC,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,IAAI,CAAC,QAAQ;YACxB,IAAI;YACJ,YAAY,EAAE,WAAW;SAC1B,CAAC;QAEF,sCAAsC;QACtC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC;QACzC,CAAC;QAED,kCAAkC;QAClC,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC;QACpC,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;YAC1C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;SAC3C,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;QAEhE,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,YAAsB;YACxC,YAAY,EAAE,IAAI,CAAC,aAAmC;YACtD,SAAS,EAAE,IAAI,CAAC,UAAgC;YAChD,SAAS,EAAG,IAAI,CAAC,UAAqB,IAAI,QAAQ;YAClD,KAAK,EAAE,IAAI,CAAC,KAA2B;SACxC,CAAC;IACJ,CAAC;CACF"}

package/dist/auth/providers/index.d.ts

@@ -0,0 +1,23 @@
+export type { OAuthProvider, OAuthTokens } from './base.js';
+export { BaseOAuthProvider } from './base.js';
+export { LinearOAuthProvider, linearProvider } from './linear.js';
+export { NotionOAuthProvider, notionProvider } from './notion.js';
+export { TodoistOAuthProvider, todoistProvider } from './todoist.js';
+import type { OAuthProvider } from './base.js';
+/**
+ * All available OAuth providers
+ */
+export declare const providers: Record<string, OAuthProvider>;
+/**
+ * Get a provider by name
+ */
+export declare function getProvider(name: string): OAuthProvider | undefined;
+/**
+ * Get all provider names
+ */
+export declare function getProviderNames(): string[];
+/**
+ * Check which providers are configured (have OAuth credentials)
+ */
+export declare function getConfiguredProviders(): string[];
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/providers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/auth/providers/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAErE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAK/C;;GAEG;AACH,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAInD,CAAC;AAEF;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAEnE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,EAAE,CAE3C;AAED;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,EAAE,CAOjD"}

package/dist/auth/providers/index.js

@@ -0,0 +1,39 @@
+export { BaseOAuthProvider } from './base.js';
+export { LinearOAuthProvider, linearProvider } from './linear.js';
+export { NotionOAuthProvider, notionProvider } from './notion.js';
+export { TodoistOAuthProvider, todoistProvider } from './todoist.js';
+import { linearProvider } from './linear.js';
+import { notionProvider } from './notion.js';
+import { todoistProvider } from './todoist.js';
+/**
+ * All available OAuth providers
+ */
+export const providers = {
+    notion: notionProvider,
+    linear: linearProvider,
+    todoist: todoistProvider,
+};
+/**
+ * Get a provider by name
+ */
+export function getProvider(name) {
+    return providers[name.toLowerCase()];
+}
+/**
+ * Get all provider names
+ */
+export function getProviderNames() {
+    return Object.keys(providers);
+}
+/**
+ * Check which providers are configured (have OAuth credentials)
+ */
+export function getConfiguredProviders() {
+    return Object.entries(providers)
+        .filter(([, provider]) => {
+        const p = provider;
+        return p.isConfigured?.() ?? (provider.clientId && provider.clientSecret);
+    })
+        .map(([name]) => name);
+}
+//# sourceMappingURL=index.js.map

package/dist/auth/providers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/providers/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAGrE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C;;GAEG;AACH,MAAM,CAAC,MAAM,SAAS,GAAkC;IACtD,MAAM,EAAE,cAAc;IACtB,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,eAAe;CACzB,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB;IACpC,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;SAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,EAAE;QACvB,MAAM,CAAC,GAAG,QAA4D,CAAC;QACvE,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC5E,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC"}

package/dist/auth/providers/linear.d.ts

@@ -0,0 +1,37 @@
+import { BaseOAuthProvider } from './base.js';
+/**
+ * Linear OAuth Provider with PKCE Support
+ *
+ * Linear supports PKCE (Proof Key for Code Exchange) which allows
+ * public clients (like CLI apps) to authenticate without a client secret.
+ *
+ * Linear's OAuth flow:
+ * https://developers.linear.app/docs/oauth/authentication
+ *
+ * To configure ralph-starter's Linear OAuth app:
+ * 1. Go to https://linear.app/settings/api/applications
+ * 2. Create a new OAuth application
+ * 3. Set redirect URI to http://127.0.0.1:52847/callback
+ * 4. Copy the Client ID and set RALPH_LINEAR_CLIENT_ID env var
+ */
+export declare class LinearOAuthProvider extends BaseOAuthProvider {
+    name: string;
+    displayName: string;
+    authorizationUrl: string;
+    tokenUrl: string;
+    supportsPKCE: boolean;
+    scopes: string[];
+    clientId: string;
+    clientSecret: string | undefined;
+    authParams: {
+        prompt: string;
+        actor: string;
+    };
+    /**
+     * Check if Linear OAuth is configured
+     * With PKCE, we only need the client_id (no secret required)
+     */
+    isConfigured(): boolean;
+}
+export declare const linearProvider: LinearOAuthProvider;
+//# sourceMappingURL=linear.d.ts.map

package/dist/auth/providers/linear.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"linear.d.ts","sourceRoot":"","sources":["../../../src/auth/providers/linear.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C;;;;;;;;;;;;;;GAcG;AACH,qBAAa,mBAAoB,SAAQ,iBAAiB;IACxD,IAAI,SAAY;IAChB,WAAW,SAAY;IACvB,gBAAgB,SAAwC;IACxD,QAAQ,SAAwC;IAGhD,YAAY,UAAQ;IAGpB,MAAM,WAEJ;IAIF,QAAQ,SAA4C;IAGpD,YAAY,qBAA0C;IAEtD,UAAU;;;MAGR;IAEF;;;OAGG;IACH,YAAY,IAAI,OAAO;CAGxB;AAED,eAAO,MAAM,cAAc,qBAA4B,CAAC"}