sleev 0.0.12 → 0.0.13

package/README.md

@@ -1,49 +1,29 @@
-# sleev
+# sleeved
 
-The Sleev command-line tool.
+Local Sleeve proxy daemon and setup TUI.
 
-Use it to sign in to Sleev from your terminal and connect supported local apps.
+This repository is intentionally early. The first milestone is the local
+installer shell:
 
-## Login
+- launch a TUI
+- persist local config under platform-standard user directories
+- prepare daemon lifecycle commands
+- prepare harness setup commands
 
-Run:
+OpenTUI currently runs on Bun. The package is still structured for npm
+publication, with non-TUI commands kept Node-compatible while the interactive
+TUI entrypoint is isolated.
 
 ```bash
-npx sleev auth login
+npm install
+npm run check
+npm test
+npm run build
 ```
 
-Sleev will:
-
-1. Open your browser.
-2. Ask you to sign in or create an account.
-3. Return you to the terminal after login.
-4. Ask which supported local apps you want to use with Sleev.
-
-After that, your local apps can use Sleev without logging in again.
-
-## Logout
-
-Run:
-
 ```bash
-npx sleev auth logout
+sleeved
+sleeved paths
+sleeved status
+sleeved daemon status
 ```
-
-This removes your local Sleev login from this machine.
-
-## Already Logged In
-
-If you need to replace your current local login, run:
-
-```bash
-npx sleev auth login --force
-```
-
-## Requirements
-
-- Node.js 20 or newer
-- A browser you can sign in with
-
-## Notes
-
-Your login is stored locally on your machine. Do not share your Sleev auth file.

package/dist/auth/browser.d.ts

@@ -0,0 +1,12 @@
+type Command = {
+    command: string;
+    args: string[];
+};
+type Context = {
+    platform?: NodeJS.Platform;
+    env?: NodeJS.ProcessEnv;
+    release?: string;
+};
+export declare function openBrowser(url: string): Promise<boolean>;
+export declare function browserCommands(url: string, context?: Context): Command[];
+export {};

package/dist/auth/browser.js

@@ -1,6 +1,6 @@
-// Cross-platform browser opener used by the login flow.
-import { spawn } from 'node:child_process';
-import { existsSync, readFileSync } from 'node:fs';
+// Cross-platform browser opener used by the login handoff, including WSL fallbacks.
+import { spawn } from "node:child_process";
+import { existsSync, readFileSync } from "node:fs";
 export async function openBrowser(url) {
     const commands = browserCommands(url);
     for (const command of commands) {
@@ -13,7 +13,7 @@ export async function openBrowser(url) {
 function open(command) {
     return new Promise((resolve) => {
         const child = spawn(command.command, command.args, {
-            stdio: 'ignore',
+            stdio: "ignore",
             windowsHide: true,
         });
         const timer = setTimeout(() => finish(true), 3000);
@@ -23,44 +23,51 @@ function open(command) {
                 return;
             done = true;
             clearTimeout(timer);
-            child.removeAllListeners('error');
-            child.removeAllListeners('close');
+            child.removeAllListeners("error");
+            child.removeAllListeners("close");
             if (ok)
                 child.unref();
             resolve(ok);
         };
-        child.once('error', () => finish(false));
-        child.once('close', (code) => finish(code === 0));
+        child.once("error", () => finish(false));
+        child.once("close", (code) => finish(code === 0));
     });
 }
 export function browserCommands(url, context = {}) {
     const platform = context.platform ?? process.platform;
-    if (platform === 'darwin')
-        return [{ command: 'open', args: [url] }];
-    if (platform === 'win32') {
+    if (platform === "darwin")
+        return [{ command: "open", args: [url] }];
+    if (platform === "win32") {
         return [
-            { command: 'rundll32', args: ['url.dll,FileProtocolHandler', url] },
-            { command: 'powershell', args: powershellArgs(url) },
+            { command: "rundll32", args: ["url.dll,FileProtocolHandler", url] },
+            { command: "powershell", args: powershellArgs(url) },
         ];
     }
-    if (platform === 'linux' && isWsl(context)) {
+    if (platform === "linux" && isWsl(context)) {
         return [
             ...linuxCommands(url),
-            { command: 'wslview', args: [url] },
-            { command: 'powershell.exe', args: powershellArgs(url) },
+            { command: "wslview", args: [url] },
+            { command: "powershell.exe", args: powershellArgs(url) },
         ];
     }
     return linuxCommands(url);
 }
 function linuxCommands(url) {
     return [
-        { command: 'sensible-browser', args: [url] },
-        { command: 'gio', args: ['open', url] },
-        { command: 'xdg-open', args: [url] },
+        { command: "sensible-browser", args: [url] },
+        { command: "gio", args: ["open", url] },
+        { command: "xdg-open", args: [url] },
     ];
 }
 function powershellArgs(url) {
-    return ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-Command', `Start-Process '${ps(url)}'`];
+    return [
+        "-NoProfile",
+        "-NonInteractive",
+        "-ExecutionPolicy",
+        "Bypass",
+        "-Command",
+        `Start-Process '${ps(url)}'`,
+    ];
 }
 function ps(value) {
     return value.replace(/'/g, "''");
@@ -70,11 +77,13 @@ function isWsl(context) {
     if (env.WSL_DISTRO_NAME || env.WSL_INTEROP)
         return true;
     const release = context.release ?? kernelRelease();
-    return release.toLowerCase().includes('microsoft') || release.toLowerCase().includes('wsl');
+    return (release.toLowerCase().includes("microsoft") ||
+        release.toLowerCase().includes("wsl"));
 }
 function kernelRelease() {
-    const path = '/proc/sys/kernel/osrelease';
+    const path = "/proc/sys/kernel/osrelease";
     if (!existsSync(path))
-        return '';
-    return readFileSync(path, 'utf8');
+        return "";
+    return readFileSync(path, "utf8");
 }
+//# sourceMappingURL=browser.js.map

package/dist/auth/browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.js","sourceRoot":"","sources":["../../src/auth/browser.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAUnD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW;IACzC,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAEtC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,MAAM;YAAE,OAAO,IAAI,CAAC;IAC5B,CAAC;IAED,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,SAAS,IAAI,CAAC,OAAgB;IAC1B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;YAC/C,KAAK,EAAE,QAAQ;YACf,WAAW,EAAE,IAAI;SACpB,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,IAAI,GAAG,KAAK,CAAC;QAEjB,MAAM,MAAM,GAAG,CAAC,EAAW,EAAE,EAAE;YAC3B,IAAI,IAAI;gBAAE,OAAO;YACjB,IAAI,GAAG,IAAI,CAAC;YACZ,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,KAAK,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAClC,KAAK,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,EAAE;gBAAE,KAAK,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC,CAAC;QAEF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACP,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,UAAmB,EAAE;IAC9D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IAEtD,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrE,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO;YACH,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,6BAA6B,EAAE,GAAG,CAAC,EAAE;YACnE,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE;SACvD,CAAC;IACN,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,OAAO;YACH,GAAG,aAAa,CAAC,GAAG,CAAC;YACrB,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE;YACnC,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE;SAC3D,CAAC;IACN,CAAC;IAED,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAC9B,OAAO;QACH,EAAE,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE;QAC5C,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE;QACvC,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE;KACvC,CAAC;AACN,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IAC/B,OAAO;QACH,YAAY;QACZ,iBAAiB;QACjB,kBAAkB;QAClB,QAAQ;QACR,UAAU;QACV,kBAAkB,EAAE,CAAC,GAAG,CAAC,GAAG;KAC/B,CAAC;AACN,CAAC;AAED,SAAS,EAAE,CAAC,KAAa;IACrB,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,KAAK,CAAC,OAAgB;IAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,IAAI,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAExD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,aAAa,EAAE,CAAC;IACnD,OAAO,CACH,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC3C,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CACxC,CAAC;AACN,CAAC;AAED,SAAS,aAAa;IAClB,MAAM,IAAI,GAAG,4BAA4B,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACtC,CAAC"}

package/dist/auth/firebase-tokens.d.ts

@@ -0,0 +1,39 @@
+import type { FirebaseLoginResult } from "./firebase.js";
+export type StoredFirebaseAuth = {
+    version: 1;
+    refreshToken: string;
+    accountId: string;
+    email: string | null;
+    label: string | null;
+    updatedAt: string;
+};
+export declare class FirebaseAuthRequiredError extends Error {
+    constructor(message?: string);
+}
+export declare class FirebaseTokenError extends Error {
+    constructor(message: string);
+}
+export declare function readStoredFirebaseAuth(file?: string): Promise<StoredFirebaseAuth | null>;
+export declare function writeStoredFirebaseAuth(auth: StoredFirebaseAuth, file?: string): Promise<void>;
+export declare function clearStoredFirebaseAuth(file?: string): Promise<void>;
+export declare function saveFirebaseLogin(result: FirebaseLoginResult, now?: () => Date): Promise<StoredFirebaseAuth>;
+export type FirebaseTokenManagerDeps = {
+    apiKey?: string;
+    fetchImpl?: typeof fetch;
+    now?: () => number;
+    load?: () => Promise<StoredFirebaseAuth | null>;
+    save?: (auth: StoredFirebaseAuth) => Promise<void>;
+    clear?: () => Promise<void>;
+};
+export declare class FirebaseTokenManager {
+    private readonly apiKey;
+    private readonly fetchImpl;
+    private readonly now;
+    private readonly load;
+    private readonly save;
+    private readonly clear;
+    private cache;
+    constructor(deps?: FirebaseTokenManagerDeps);
+    getIdToken(forceRefresh?: boolean): Promise<string>;
+    private exchange;
+}

package/dist/auth/firebase-tokens.js

@@ -0,0 +1,173 @@
+// Stores the Firebase refresh token and mints short-lived ID tokens from it
+// so the CLI can call the control server with Firebase auth, headlessly.
+import fs from "node:fs/promises";
+import path from "node:path";
+import { resolveSleevedPaths } from "../config/paths.js";
+import { firebaseConfig } from "../product.js";
+const SECURE_TOKEN_URL = "https://securetoken.googleapis.com/v1/token";
+// Refresh a little early so an in-flight request never carries a token that
+// expires mid-flight.
+const EXPIRY_SKEW_MS = 60_000;
+// Thrown when there is no usable refresh token (never signed in, or the
+// refresh token was revoked/expired). Callers should prompt a fresh sign-in.
+export class FirebaseAuthRequiredError extends Error {
+    constructor(message = "Firebase sign-in is required.") {
+        super(message);
+        this.name = "FirebaseAuthRequiredError";
+    }
+}
+export class FirebaseTokenError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "FirebaseTokenError";
+    }
+}
+export async function readStoredFirebaseAuth(file = resolveSleevedPaths().firebaseCredentialsFile) {
+    try {
+        return normalize(JSON.parse(await fs.readFile(file, "utf8")));
+    }
+    catch (error) {
+        if (isNotFoundError(error))
+            return null;
+        throw error;
+    }
+}
+export async function writeStoredFirebaseAuth(auth, file = resolveSleevedPaths().firebaseCredentialsFile) {
+    await fs.mkdir(path.dirname(file), { recursive: true });
+    await fs.writeFile(file, `${JSON.stringify(auth, null, 2)}\n`, {
+        mode: 0o600,
+    });
+}
+export async function clearStoredFirebaseAuth(file = resolveSleevedPaths().firebaseCredentialsFile) {
+    try {
+        await fs.unlink(file);
+    }
+    catch (error) {
+        if (!isNotFoundError(error))
+            throw error;
+    }
+}
+export async function saveFirebaseLogin(result, now = () => new Date()) {
+    const auth = {
+        version: 1,
+        refreshToken: result.refreshToken,
+        accountId: result.accountId,
+        email: result.email,
+        label: result.label,
+        updatedAt: now().toISOString(),
+    };
+    await writeStoredFirebaseAuth(auth);
+    return auth;
+}
+// Caches the ID token in memory and refreshes it from the stored refresh
+// token when it is missing or about to expire.
+export class FirebaseTokenManager {
+    apiKey;
+    fetchImpl;
+    now;
+    load;
+    save;
+    clear;
+    cache = null;
+    constructor(deps = {}) {
+        this.apiKey = deps.apiKey ?? firebaseConfig().apiKey;
+        this.fetchImpl = deps.fetchImpl ?? fetch;
+        this.now = deps.now ?? Date.now;
+        this.load = deps.load ?? (() => readStoredFirebaseAuth());
+        this.save = deps.save ?? ((auth) => writeStoredFirebaseAuth(auth));
+        this.clear = deps.clear ?? (() => clearStoredFirebaseAuth());
+    }
+    async getIdToken(forceRefresh = false) {
+        if (!forceRefresh &&
+            this.cache &&
+            this.now() < this.cache.expiresAtMs - EXPIRY_SKEW_MS) {
+            return this.cache.idToken;
+        }
+        const stored = await this.load();
+        if (!stored) {
+            throw new FirebaseAuthRequiredError();
+        }
+        const exchanged = await this.exchange(stored.refreshToken);
+        // Firebase may rotate the refresh token; persist it if it changed.
+        if (exchanged.refresh_token !== stored.refreshToken) {
+            await this.save({
+                ...stored,
+                refreshToken: exchanged.refresh_token,
+                updatedAt: new Date(this.now()).toISOString(),
+            });
+        }
+        const ttlMs = Number(exchanged.expires_in) * 1000;
+        this.cache = {
+            idToken: exchanged.id_token,
+            expiresAtMs: this.now() + (Number.isFinite(ttlMs) ? ttlMs : 3_600_000),
+        };
+        return exchanged.id_token;
+    }
+    async exchange(refreshToken) {
+        let response;
+        try {
+            response = await this.fetchImpl(`${SECURE_TOKEN_URL}?key=${encodeURIComponent(this.apiKey)}`, {
+                method: "POST",
+                headers: {
+                    "content-type": "application/x-www-form-urlencoded",
+                },
+                body: `grant_type=refresh_token&refresh_token=${encodeURIComponent(refreshToken)}`,
+            });
+        }
+        catch (error) {
+            throw new FirebaseTokenError(`Could not reach Firebase token endpoint: ${error instanceof Error ? error.message : "network error"}`);
+        }
+        const body = (await response.json().catch(() => null));
+        if (!response.ok) {
+            const reason = body?.error?.message ?? `HTTP ${response.status}`;
+            // A revoked/invalid/expired refresh token is unrecoverable
+            // without a fresh browser sign-in.
+            if (reason === "TOKEN_EXPIRED" ||
+                reason === "USER_DISABLED" ||
+                reason === "USER_NOT_FOUND" ||
+                reason === "INVALID_REFRESH_TOKEN" ||
+                reason === "INVALID_GRANT") {
+                this.cache = null;
+                await this.clear();
+                throw new FirebaseAuthRequiredError(`Firebase session is no longer valid (${reason}). Sign in again.`);
+            }
+            throw new FirebaseTokenError(`Firebase token refresh failed: ${reason}`);
+        }
+        if (!body ||
+            typeof body.id_token !== "string" ||
+            typeof body.refresh_token !== "string" ||
+            typeof body.expires_in !== "string") {
+            throw new FirebaseTokenError("Firebase token response was malformed.");
+        }
+        return {
+            id_token: body.id_token,
+            refresh_token: body.refresh_token,
+            expires_in: body.expires_in,
+        };
+    }
+}
+function normalize(value) {
+    if (typeof value !== "object" || value === null)
+        return null;
+    const v = value;
+    if (typeof v.refreshToken !== "string" || !v.refreshToken)
+        return null;
+    if (typeof v.accountId !== "string" || !v.accountId)
+        return null;
+    return {
+        version: 1,
+        refreshToken: v.refreshToken,
+        accountId: v.accountId,
+        email: typeof v.email === "string" ? v.email : null,
+        label: typeof v.label === "string" ? v.label : null,
+        updatedAt: typeof v.updatedAt === "string"
+            ? v.updatedAt
+            : new Date(0).toISOString(),
+    };
+}
+function isNotFoundError(error) {
+    return (error instanceof Error &&
+        "code" in error &&
+        error.code === "ENOENT");
+}
+//# sourceMappingURL=firebase-tokens.js.map

package/dist/auth/firebase-tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firebase-tokens.js","sourceRoot":"","sources":["../../src/auth/firebase-tokens.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,yEAAyE;AACzE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAG/C,MAAM,gBAAgB,GAAG,6CAA6C,CAAC;AACvE,4EAA4E;AAC5E,sBAAsB;AACtB,MAAM,cAAc,GAAG,MAAM,CAAC;AAW9B,wEAAwE;AACxE,6EAA6E;AAC7E,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAChD,YAAY,OAAO,GAAG,+BAA+B;QACjD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC5C,CAAC;CACJ;AAED,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IACzC,YAAY,OAAe;QACvB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACrC,CAAC;CACJ;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,IAAI,GAAG,mBAAmB,EAAE,CAAC,uBAAuB;IAEpD,IAAI,CAAC;QACD,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,eAAe,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CACzC,IAAwB,EACxB,IAAI,GAAG,mBAAmB,EAAE,CAAC,uBAAuB;IAEpD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QAC3D,IAAI,EAAE,KAAK;KACd,CAAC,CAAC;AACP,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CACzC,IAAI,GAAG,mBAAmB,EAAE,CAAC,uBAAuB;IAEpD,IAAI,CAAC;QACD,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;IAC7C,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACnC,MAA2B,EAC3B,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;IAElC,MAAM,IAAI,GAAuB;QAC7B,OAAO,EAAE,CAAC;QACV,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,SAAS,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;KACjC,CAAC;IACF,MAAM,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC;AAChB,CAAC;AAiBD,yEAAyE;AACzE,+CAA+C;AAC/C,MAAM,OAAO,oBAAoB;IACZ,MAAM,CAAS;IACf,SAAS,CAAe;IACxB,GAAG,CAAe;IAClB,IAAI,CAA2C;IAC/C,IAAI,CAA8C;IAClD,KAAK,CAAsB;IACpC,KAAK,GAAoD,IAAI,CAAC;IAEtE,YAAY,OAAiC,EAAE;QAC3C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,cAAc,EAAE,CAAC,MAAM,CAAC;QACrD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;QACzC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,sBAAsB,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,uBAAuB,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,YAAY,GAAG,KAAK;QACjC,IACI,CAAC,YAAY;YACb,IAAI,CAAC,KAAK;YACV,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,cAAc,EACtD,CAAC;YACC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAC9B,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,yBAAyB,EAAE,CAAC;QAC1C,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAE3D,mEAAmE;QACnE,IAAI,SAAS,CAAC,aAAa,KAAK,MAAM,CAAC,YAAY,EAAE,CAAC;YAClD,MAAM,IAAI,CAAC,IAAI,CAAC;gBACZ,GAAG,MAAM;gBACT,YAAY,EAAE,SAAS,CAAC,aAAa;gBACrC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;aAChD,CAAC,CAAC;QACP,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;QAClD,IAAI,CAAC,KAAK,GAAG;YACT,OAAO,EAAE,SAAS,CAAC,QAAQ;YAC3B,WAAW,EACP,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;SAChE,CAAC;QACF,OAAO,SAAS,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,YAAoB;QACvC,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACD,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAC3B,GAAG,gBAAgB,QAAQ,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAC5D;gBACI,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACL,cAAc,EAAE,mCAAmC;iBACtD;gBACD,IAAI,EAAE,0CAA0C,kBAAkB,CAAC,YAAY,CAAC,EAAE;aACrF,CACJ,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,kBAAkB,CACxB,4CACI,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAC7C,EAAE,CACL,CAAC;QACN,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAI3C,CAAC;QAEX,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,OAAO,IAAI,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;YACjE,2DAA2D;YAC3D,mCAAmC;YACnC,IACI,MAAM,KAAK,eAAe;gBAC1B,MAAM,KAAK,eAAe;gBAC1B,MAAM,KAAK,gBAAgB;gBAC3B,MAAM,KAAK,uBAAuB;gBAClC,MAAM,KAAK,eAAe,EAC5B,CAAC;gBACC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;gBAClB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;gBACnB,MAAM,IAAI,yBAAyB,CAC/B,wCAAwC,MAAM,mBAAmB,CACpE,CAAC;YACN,CAAC;YACD,MAAM,IAAI,kBAAkB,CACxB,kCAAkC,MAAM,EAAE,CAC7C,CAAC;QACN,CAAC;QAED,IACI,CAAC,IAAI;YACL,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;YACjC,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ;YACtC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,EACrC,CAAC;YACC,MAAM,IAAI,kBAAkB,CACxB,wCAAwC,CAC3C,CAAC;QACN,CAAC;QAED,OAAO;YACH,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,UAAU,EAAE,IAAI,CAAC,UAAU;SAC9B,CAAC;IACN,CAAC;CACJ;AAED,SAAS,SAAS,CAAC,KAAc;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IACvE,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IACjE,OAAO;QACH,OAAO,EAAE,CAAC;QACV,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;QACnD,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;QACnD,SAAS,EACL,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;YAC3B,CAAC,CAAC,CAAC,CAAC,SAAS;YACb,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;KACtC,CAAC;AACN,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACnC,OAAO,CACH,KAAK,YAAY,KAAK;QACtB,MAAM,IAAI,KAAK;QACd,KAA+B,CAAC,IAAI,KAAK,QAAQ,CACrD,CAAC;AACN,CAAC"}

package/dist/auth/firebase.d.ts

@@ -0,0 +1,17 @@
+import type { Writable } from "node:stream";
+export type FirebaseLoginResult = {
+    refreshToken: string;
+    accountId: string;
+    email: string | null;
+    label: string | null;
+};
+export type FirebaseLoginOptions = {
+    webOrigin?: string;
+    label?: string;
+    output?: Writable;
+    opener?: (url: string) => Promise<boolean>;
+    onUrl?: (url: string) => void;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+};
+export declare function firebaseLogin(options?: FirebaseLoginOptions): Promise<FirebaseLoginResult>;

package/dist/auth/firebase.js

@@ -0,0 +1,55 @@
+// Browser handoff that returns a Firebase refresh token for headless,
+// Firebase-authenticated control-server calls (local installation mode).
+import { randomBytes } from "node:crypto";
+import { hostname } from "node:os";
+import { webOrigin as defaultWebOrigin } from "../product.js";
+import { openBrowser } from "./browser.js";
+import { startFirebaseLoopback } from "./loopback.js";
+const FIREBASE_TIMEOUT_MS = 10 * 60 * 1000;
+export async function firebaseLogin(options = {}) {
+    const output = options.output ?? process.stdout;
+    const origin = options.webOrigin ?? defaultWebOrigin();
+    const opener = options.opener ?? openBrowser;
+    const state = randomBytes(32).toString("base64url");
+    const loopback = await startFirebaseLoopback({
+        state,
+        webOrigin: origin,
+        timeoutMs: options.timeoutMs ?? FIREBASE_TIMEOUT_MS,
+        ...(options.signal ? { signal: options.signal } : {}),
+    });
+    const url = firebaseUrl(origin, state, loopback.callback, options.label);
+    options.onUrl?.(url);
+    output.write(`Opening ${origin} to sign in.\n`);
+    try {
+        const opened = await opener(url);
+        if (!opened) {
+            output.write("Could not open a browser automatically. Open this URL instead:\n");
+            output.write(`${url}\n`);
+        }
+        output.write("Waiting for browser confirmation...\n");
+        const payload = await loopback.wait;
+        output.write("Browser login confirmed.\n");
+        return {
+            refreshToken: payload.refreshToken,
+            accountId: payload.accountId,
+            email: payload.email,
+            label: payload.label,
+        };
+    }
+    finally {
+        await loopback.close();
+    }
+}
+function firebaseUrl(origin, state, callback, label) {
+    const url = new URL("/cli/login", origin);
+    url.searchParams.set("mode", "signin");
+    url.searchParams.set("client", "sleeved");
+    url.searchParams.set("handoff", "firebase");
+    url.searchParams.set("state", state);
+    url.searchParams.set("callback", callback);
+    url.searchParams.set("device", hostname().slice(0, 80));
+    if (label)
+        url.searchParams.set("label", label);
+    return url.toString();
+}
+//# sourceMappingURL=firebase.js.map

package/dist/auth/firebase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firebase.js","sourceRoot":"","sources":["../../src/auth/firebase.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,yEAAyE;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEnC,OAAO,EAAE,SAAS,IAAI,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAEtD,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAmB3C,MAAM,CAAC,KAAK,UAAU,aAAa,CAC/B,UAAgC,EAAE;IAElC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAChD,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,EAAE,CAAC;IACvD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC;IAC7C,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC;QACzC,KAAK;QACL,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,mBAAmB;QACnD,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACzE,OAAO,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC;IACrB,MAAM,CAAC,KAAK,CAAC,WAAW,MAAM,gBAAgB,CAAC,CAAC;IAEhD,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CACR,kEAAkE,CACrE,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC3C,OAAO;YACH,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,OAAO,CAAC,KAAK;SACvB,CAAC;IACN,CAAC;YAAS,CAAC;QACP,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAChB,MAAc,EACd,KAAa,EACb,QAAgB,EAChB,KAAc;IAEd,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC1C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACvC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC1C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC5C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC3C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACxD,IAAI,KAAK;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AAC1B,CAAC"}

package/dist/auth/login.d.ts

@@ -0,0 +1,22 @@
+import type { Writable } from "node:stream";
+import type { AccountIdentity } from "./schema.js";
+export type LoginMode = "signup" | "signin";
+export type LoginResult = {
+    label: string | null;
+    accountId: string;
+    email: string | null;
+    createdAt: string;
+};
+export type LoginOptions = {
+    mode?: LoginMode;
+    webOrigin?: string;
+    output?: Writable;
+    opener?: (url: string) => Promise<boolean>;
+    onUrl?: (url: string) => void;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+    now?: () => Date;
+    expectedAccount?: AccountIdentity;
+    label?: string;
+};
+export declare function login(options?: LoginOptions): Promise<LoginResult>;

package/dist/auth/login.js

@@ -1,43 +1,42 @@
-// Browser login orchestration for `sleev auth login`.
-import { randomBytes } from 'node:crypto';
-import { hostname } from 'node:os';
-import { webOrigin as defaultWebOrigin } from '../product.js';
-import { brand, field, line, note, step, success } from '../terminal.js';
-import { openBrowser } from './browser.js';
-import { startLoopback } from './loopback.js';
+import { randomBytes } from "node:crypto";
+import { hostname } from "node:os";
+import { webOrigin as defaultWebOrigin } from "../product.js";
+import { openBrowser } from "./browser.js";
+import { startLoopback } from "./loopback.js";
 const LOGIN_TIMEOUT_MS = 10 * 60 * 1000;
 export async function login(options = {}) {
-    const output = options.output ?? process.stdout;
-    brand(output);
-    return runHandoff({ ...options, mode: options.mode ?? 'signup', output });
+    return runHandoff({ ...options, mode: options.mode ?? "signin" });
 }
 async function runHandoff(options) {
-    const output = options.output;
-    const mode = options.mode;
+    const output = options.output ?? process.stdout;
     const origin = options.webOrigin ?? defaultWebOrigin();
     const opener = options.opener ?? openBrowser;
-    const state = randomBytes(32).toString('base64url');
+    const state = randomBytes(32).toString("base64url");
     const loopback = await startLoopback({
         state,
         webOrigin: origin,
         timeoutMs: options.timeoutMs ?? LOGIN_TIMEOUT_MS,
+        ...(options.signal ? { signal: options.signal } : {}),
+        ...(options.expectedAccount
+            ? { expectedAccount: options.expectedAccount }
+            : {}),
     });
-    const url = loginUrl(origin, mode, state, loopback.callback);
-    const action = mode === 'signup' ? 'create your account' : 'log in';
-    step(output, `Opening browser to ${action}`);
-    field(output, 'url', url);
+    const url = loginUrl(origin, options.mode, state, loopback.callback, options.label);
+    options.onUrl?.(url);
+    output.write(`Opening ${origin} to sign in.\n`);
     try {
         const opened = await opener(url);
         if (!opened) {
-            note(output, 'Could not open a browser automatically. Open the URL above instead');
+            output.write("Could not open a browser automatically. Open this URL instead:\n");
+            output.write(`${url}\n`);
         }
-        note(output, 'Waiting for the browser confirmation...');
+        output.write("Waiting for browser confirmation...\n");
         const payload = await loopback.wait;
-        success(output, 'Browser login confirmed');
+        output.write("Browser login confirmed.\n");
         return {
-            token: payload.token,
             label: payload.label,
-            proxyUrl: payload.proxyUrl,
+            accountId: payload.accountId,
+            email: payload.email,
             createdAt: (options.now ?? (() => new Date()))().toISOString(),
         };
     }
@@ -45,11 +44,15 @@ async function runHandoff(options) {
         await loopback.close();
     }
 }
-function loginUrl(origin, mode, state, callback) {
-    const url = new URL('/cli/login', origin);
-    url.searchParams.set('mode', mode);
-    url.searchParams.set('state', state);
-    url.searchParams.set('callback', callback);
-    url.searchParams.set('device', hostname().slice(0, 80));
+function loginUrl(origin, mode, state, callback, label) {
+    const url = new URL("/cli/login", origin);
+    url.searchParams.set("mode", mode);
+    if (label)
+        url.searchParams.set("label", label);
+    url.searchParams.set("client", "sleeved");
+    url.searchParams.set("state", state);
+    url.searchParams.set("callback", callback);
+    url.searchParams.set("device", hostname().slice(0, 80));
     return url.toString();
 }
+//# sourceMappingURL=login.js.map

package/dist/auth/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/auth/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEnC,OAAO,EAAE,SAAS,IAAI,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAG9C,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAwBxC,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,UAAwB,EAAE;IAClD,OAAO,UAAU,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,UAAU,CACrB,OAA2C;IAE3C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAChD,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,EAAE,CAAC;IACvD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC;IAC7C,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC;QACjC,KAAK;QACL,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,gBAAgB;QAChD,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,OAAO,CAAC,eAAe;YACvB,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE;YAC9C,CAAC,CAAC,EAAE,CAAC;KACZ,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,QAAQ,CAChB,MAAM,EACN,OAAO,CAAC,IAAI,EACZ,KAAK,EACL,QAAQ,CAAC,QAAQ,EACjB,OAAO,CAAC,KAAK,CAChB,CAAC;IACF,OAAO,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC;IACrB,MAAM,CAAC,KAAK,CAAC,WAAW,MAAM,gBAAgB,CAAC,CAAC;IAEhD,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CACR,kEAAkE,CACrE,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC3C,OAAO;YACH,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE;SACjE,CAAC;IACN,CAAC;YAAS,CAAC;QACP,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CACb,MAAc,EACd,IAAe,EACf,KAAa,EACb,QAAgB,EAChB,KAAyB;IAEzB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC1C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnC,IAAI,KAAK;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC1C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC3C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACxD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AAC1B,CAAC"}

package/dist/auth/loopback.d.ts

@@ -0,0 +1,19 @@
+import { type AccountIdentity, type FirebaseHandoff, type LoginHandoff, type TokenHandoff } from "./schema.js";
+export type Loopback<T = LoginHandoff> = {
+    callback: string;
+    wait: Promise<T>;
+    close: () => Promise<void>;
+};
+type BaseLoopbackOptions = {
+    state: string;
+    webOrigin: string;
+    timeoutMs: number;
+    signal?: AbortSignal;
+};
+export type LoopbackOptions = BaseLoopbackOptions & {
+    expectedAccount?: AccountIdentity;
+};
+export declare function startLoopback(options: LoopbackOptions): Promise<Loopback>;
+export declare function startTokenLoopback(options: BaseLoopbackOptions): Promise<Loopback<TokenHandoff>>;
+export declare function startFirebaseLoopback(options: BaseLoopbackOptions): Promise<Loopback<FirebaseHandoff>>;
+export {};