veryfront 0.0.49 → 0.0.51

package/dist/oauth/providers.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/platform/compat/runtime.ts", "../../../src/platform/compat/process.ts", "../../../src/core/oauth/providers/base.ts", "../../../src/core/oauth/providers/google.ts", "../../../src/core/oauth/providers/microsoft.ts", "../../../src/core/oauth/providers/atlassian.ts", "../../../src/core/oauth/providers/common.ts"],
+  "sourcesContent": ["export const isDeno = typeof Deno !== \"undefined\";\nexport const isNode =\n  typeof (globalThis as { process?: { versions?: { node?: string } } }).process !== \"undefined\" &&\n  (globalThis as { process?: { versions?: { node?: string } } }).process?.versions?.node !==\n    undefined;\nexport const isBun = typeof (globalThis as { Bun?: unknown }).Bun !== \"undefined\";\nexport const isCloudflare = typeof globalThis !== \"undefined\" && \"caches\" in globalThis &&\n  \"WebSocketPair\" in globalThis;\n\n/**\n * Detect if running in Node.js (vs Deno)\n * Use this function instead of the constant when runtime detection needs to happen\n * at call time (e.g., when bundled with esbuild's __esm lazy initialization pattern)\n */\nexport function isNodeRuntime(): boolean {\n  // deno-lint-ignore no-explicit-any\n  const _global = globalThis as any;\n  return typeof Deno === \"undefined\" && typeof _global.process !== \"undefined\" &&\n    !!_global.process?.versions?.node;\n}\n", "import { isDeno as IS_DENO } from \"./runtime.ts\";\n\nconst nodeProcess = (globalThis as { process?: typeof import(\"node:process\") }).process;\nconst hasNodeProcess = !!nodeProcess?.versions?.node;\n\nexport function getArgs(): string[] {\n  if (IS_DENO) {\n    return Deno.args;\n  }\n  if (hasNodeProcess) {\n    return nodeProcess!.argv.slice(2);\n  }\n  return [];\n}\n\nexport function exit(code?: number): never {\n  if (IS_DENO) {\n    Deno.exit(code);\n  }\n  if (hasNodeProcess) {\n    nodeProcess!.exit(code);\n  }\n  throw new Error(\"exit() is not supported in this runtime\");\n}\n\nexport function cwd(): string {\n  if (IS_DENO) {\n    return Deno.cwd();\n  }\n  if (hasNodeProcess) {\n    return nodeProcess!.cwd();\n  }\n  throw new Error(\"cwd() is not supported in this runtime\");\n}\n\nexport function chdir(directory: string): void {\n  if (IS_DENO) {\n    Deno.chdir(directory);\n  } else {\n    if (hasNodeProcess) {\n      nodeProcess!.chdir(directory);\n      return;\n    }\n    throw new Error(\"chdir() is not supported in this runtime\");\n  }\n}\n\nexport function env(): Record<string, string> {\n  if (IS_DENO) {\n    return Deno.env.toObject();\n  }\n  if (hasNodeProcess) {\n    return nodeProcess!.env as Record<string, string>;\n  }\n  return {};\n}\n\nexport function getEnv(key: string): string | undefined {\n  if (IS_DENO) {\n    return Deno.env.get(key);\n  }\n  if (hasNodeProcess) {\n    return nodeProcess!.env[key];\n  }\n  return undefined;\n}\n\n/**\n * Get an environment variable or throw if not set\n * @throws Error if the environment variable is not set\n */\nexport function requireEnv(key: string): string {\n  const value = getEnv(key);\n  if (value === undefined) {\n    throw new Error(`Required environment variable \"${key}\" is not set`);\n  }\n  return value;\n}\n\nexport function setEnv(key: string, value: string): void {\n  if (IS_DENO) {\n    Deno.env.set(key, value);\n  } else {\n    if (hasNodeProcess) {\n      nodeProcess!.env[key] = value;\n      return;\n    }\n    throw new Error(\"setEnv() is not supported in this runtime\");\n  }\n}\n\nexport function deleteEnv(key: string): void {\n  if (IS_DENO) {\n    Deno.env.delete(key);\n  } else {\n    if (hasNodeProcess) {\n      delete nodeProcess!.env[key];\n      return;\n    }\n    throw new Error(\"deleteEnv() is not supported in this runtime\");\n  }\n}\n\nexport function pid(): number {\n  if (IS_DENO) {\n    return Deno.pid;\n  }\n  if (hasNodeProcess) {\n    return nodeProcess!.pid;\n  }\n  return 0;\n}\n\nexport function ppid(): number {\n  if (IS_DENO && \"ppid\" in Deno) {\n    return Deno.ppid || 0;\n  }\n  if (hasNodeProcess) {\n    return nodeProcess!.ppid || 0;\n  }\n  return 0;\n}\n\nexport function memoryUsage(): {\n  rss: number;\n  heapTotal: number;\n  heapUsed: number;\n  external: number;\n} {\n  if (IS_DENO) {\n    const usage = Deno.memoryUsage();\n    return {\n      rss: usage.rss,\n      heapTotal: usage.heapTotal,\n      heapUsed: usage.heapUsed,\n      external: usage.external,\n    };\n  }\n\n  if (!hasNodeProcess) {\n    throw new Error(\"memoryUsage() is not supported in this runtime\");\n  }\n\n  const usage = nodeProcess!.memoryUsage();\n  return {\n    rss: usage.rss,\n    heapTotal: usage.heapTotal,\n    heapUsed: usage.heapUsed,\n    external: usage.external || 0,\n  };\n}\n\n/**\n * Check if stdin is a TTY (terminal)\n */\nexport function isInteractive(): boolean {\n  if (IS_DENO) {\n    return Deno.stdin.isTerminal();\n  }\n  if (hasNodeProcess) {\n    return nodeProcess!.stdin.isTTY ?? false;\n  }\n  return false;\n}\n\n/**\n * Get network interfaces\n */\nexport async function getNetworkInterfaces(): Promise<\n  Array<{ name: string; address: string; family: \"IPv4\" | \"IPv6\" }>\n> {\n  if (IS_DENO) {\n    const interfaces = Deno.networkInterfaces();\n    return interfaces.map((iface) => ({\n      name: iface.name,\n      address: iface.address,\n      family: iface.family as \"IPv4\" | \"IPv6\",\n    }));\n  }\n\n  if (!hasNodeProcess) {\n    throw new Error(\"networkInterfaces() is not supported in this runtime\");\n  }\n\n  const os = await import(\"node:os\");\n  const interfaces = os.networkInterfaces();\n  const result: Array<{ name: string; address: string; family: \"IPv4\" | \"IPv6\" }> = [];\n\n  for (const [name, addrs] of Object.entries(interfaces)) {\n    if (!addrs) continue;\n    for (const addr of addrs) {\n      result.push({\n        name,\n        address: addr.address,\n        family: addr.family as \"IPv4\" | \"IPv6\",\n      });\n    }\n  }\n\n  return result;\n}\n\n/**\n * Get runtime version string\n */\nexport function getRuntimeVersion(): string {\n  if (IS_DENO) {\n    return `Deno ${Deno.version.deno}`;\n  }\n  if (\"Bun\" in globalThis) {\n    return `Bun ${(globalThis as unknown as { Bun: { version: string } }).Bun.version}`;\n  }\n  if (hasNodeProcess) {\n    return `Node.js ${nodeProcess!.version}`;\n  }\n  return \"unknown\";\n}\n\n/**\n * Register a signal handler (SIGINT, SIGTERM) for graceful shutdown\n */\nexport function onSignal(signal: \"SIGINT\" | \"SIGTERM\", handler: () => void): void {\n  if (IS_DENO) {\n    Deno.addSignalListener(signal, handler);\n  } else if (hasNodeProcess) {\n    nodeProcess!.on(signal, handler);\n  }\n}\n\n/**\n * Unreference a timer to prevent it from keeping the process alive\n */\nexport function unrefTimer(timerId: ReturnType<typeof setInterval>): void {\n  if (IS_DENO) {\n    Deno.unrefTimer(timerId as number);\n  } else if (timerId && typeof timerId === \"object\" && \"unref\" in timerId) {\n    (timerId as { unref: () => void }).unref();\n  }\n}\n\n/**\n * Get the executable path of the current runtime\n */\nexport function execPath(): string {\n  if (IS_DENO) {\n    return Deno.execPath();\n  }\n  if (hasNodeProcess) {\n    return nodeProcess!.execPath;\n  }\n  return \"\";\n}\n\n/**\n * Get process uptime in seconds\n * Returns OS uptime on Deno, process uptime on Node.js\n */\nexport function uptime(): number {\n  if (IS_DENO) {\n    // Deno.osUptime() returns system uptime in seconds\n    return Deno.osUptime?.() ?? 0;\n  }\n  if (hasNodeProcess) {\n    // process.uptime() returns process uptime in seconds\n    return nodeProcess!.uptime?.() ?? 0;\n  }\n  return 0;\n}\n\n/**\n * Get stdout stream for writing\n * Returns null if not available (e.g., in browser/workers)\n */\nexport function getStdout(): { write: (data: string) => void } | null {\n  if (IS_DENO) {\n    const encoder = new TextEncoder();\n    return {\n      write: (data: string) => {\n        Deno.stdout.writeSync(encoder.encode(data));\n      },\n    };\n  }\n  if (hasNodeProcess && nodeProcess!.stdout) {\n    return {\n      write: (data: string) => {\n        nodeProcess!.stdout.write(data);\n      },\n    };\n  }\n  return null;\n}\n\n// Cached Node.js modules for synchronous prompt\nlet cachedNodeFs: typeof import(\"node:fs\") | null = null;\n\n/**\n * Synchronous prompt function that works across Deno and Node.js\n * Displays a message and reads user input from stdin\n */\nexport function promptSync(message?: string): string | null {\n  if (IS_DENO) {\n    // Deno has a built-in prompt() function\n    return prompt(message);\n  }\n\n  if (hasNodeProcess) {\n    // Print the message\n    if (message) {\n      nodeProcess!.stdout.write(message + \" \");\n    }\n\n    // Lazy load fs module\n    if (!cachedNodeFs) {\n      // Dynamic import converted to sync require for bundling\n      // @ts-ignore - dynamic require for Node.js\n      cachedNodeFs = globalThis.require?.(\"node:fs\") || null;\n      if (!cachedNodeFs) {\n        // Try alternative approach\n        try {\n          // @ts-ignore: __require is injected by bundlers for Node.js require\n          cachedNodeFs = __require(\"node:fs\");\n        } catch {\n          return null;\n        }\n      }\n    }\n\n    if (!cachedNodeFs) {\n      return null;\n    }\n\n    // Read synchronously using fs\n    // This works by reading from file descriptor 0 (stdin)\n    // Use Uint8Array for cross-platform compatibility\n    const bufferSize = 1024;\n    const uint8Array = new Uint8Array(bufferSize);\n    let input = \"\";\n\n    try {\n      // Read from stdin (fd 0) synchronously\n      const bytesRead = cachedNodeFs.readSync(0, uint8Array, 0, bufferSize, null);\n      if (bytesRead > 0) {\n        const decoder = new TextDecoder(\"utf-8\");\n        input = decoder.decode(uint8Array.subarray(0, bytesRead)).trim();\n      }\n    } catch {\n      // If stdin is not available or EOF, return null\n      return null;\n    }\n\n    return input || null;\n  }\n\n  return null;\n}\n", "/**\n * Base OAuth Provider\n *\n * Generic OAuth 2.0 implementation that can be extended for specific providers.\n */\n\nimport type {\n  AuthorizationUrlOptions,\n  OAuthProviderConfig,\n  OAuthServiceConfig,\n  OAuthState,\n  OAuthTokens,\n  TokenExchangeOptions,\n  TokenExchangeResult,\n  TokenStore,\n} from \"../types.ts\";\nimport { getEnv } from \"../../../platform/compat/process.ts\";\n\n/**\n * Generate cryptographically secure random string\n */\nfunction generateRandomString(length: number): string {\n  const array = new Uint8Array(length);\n  crypto.getRandomValues(array);\n  return Array.from(array, (byte) => byte.toString(16).padStart(2, \"0\")).join(\"\").slice(0, length);\n}\n\n/**\n * Generate PKCE code verifier\n */\nfunction generateCodeVerifier(): string {\n  return generateRandomString(64);\n}\n\n/**\n * Generate PKCE code challenge from verifier\n */\nasync function generateCodeChallenge(verifier: string): Promise<string> {\n  const encoder = new TextEncoder();\n  const data = encoder.encode(verifier);\n  const hash = await crypto.subtle.digest(\"SHA-256\", data);\n  return btoa(String.fromCharCode(...new Uint8Array(hash)))\n    .replace(/\\+/g, \"-\")\n    .replace(/\\//g, \"_\")\n    .replace(/=+$/, \"\");\n}\n\n/**\n * Base OAuth provider class\n */\nexport class OAuthProvider {\n  protected config: OAuthProviderConfig;\n\n  constructor(config: OAuthProviderConfig) {\n    this.config = config;\n  }\n\n  /**\n   * Get client ID from environment\n   */\n  getClientId(): string | null {\n    return getEnv(this.config.clientIdEnvVar) || null;\n  }\n\n  /**\n   * Get client secret from environment\n   */\n  getClientSecret(): string | null {\n    return getEnv(this.config.clientSecretEnvVar) || null;\n  }\n\n  /**\n   * Check if provider is configured\n   */\n  isConfigured(): boolean {\n    return !!(this.getClientId() && this.getClientSecret());\n  }\n\n  /**\n   * Create authorization URL\n   */\n  async createAuthorizationUrl(\n    options: AuthorizationUrlOptions & { defaultScopes?: string[] } = {},\n  ): Promise<{ url: string; state: OAuthState }> {\n    const clientId = this.getClientId();\n    if (!clientId) {\n      throw new Error(`${this.config.clientIdEnvVar} not configured`);\n    }\n\n    const state = options.state || generateRandomString(32);\n    const scopes = options.scopes || options.defaultScopes || [];\n    const redirectUri = options.redirectUri || \"\";\n    const usePkce = options.usePkce !== false;\n\n    let codeVerifier: string | undefined;\n    let codeChallenge: string | undefined;\n\n    if (usePkce) {\n      codeVerifier = generateCodeVerifier();\n      codeChallenge = await generateCodeChallenge(codeVerifier);\n    }\n\n    const params = new URLSearchParams({\n      client_id: clientId,\n      redirect_uri: redirectUri,\n      response_type: \"code\",\n      state,\n      ...(scopes.length > 0 && { scope: scopes.join(\" \") }),\n      ...(codeChallenge && {\n        code_challenge: codeChallenge,\n        code_challenge_method: \"S256\",\n      }),\n      ...this.config.additionalAuthParams,\n      ...options.additionalParams,\n    });\n\n    const oauthState: OAuthState = {\n      state,\n      codeVerifier,\n      redirectUri,\n      scopes,\n      createdAt: Date.now(),\n    };\n\n    return {\n      url: `${this.config.authorizationUrl}?${params.toString()}`,\n      state: oauthState,\n    };\n  }\n\n  /**\n   * Exchange authorization code for tokens\n   */\n  async exchangeCode(options: TokenExchangeOptions): Promise<TokenExchangeResult> {\n    const clientId = this.getClientId();\n    const clientSecret = this.getClientSecret();\n\n    if (!clientId || !clientSecret) {\n      return {\n        success: false,\n        error: \"OAuth not configured\",\n        errorDescription:\n          `Missing ${this.config.clientIdEnvVar} or ${this.config.clientSecretEnvVar}`,\n      };\n    }\n\n    const body = new URLSearchParams({\n      grant_type: \"authorization_code\",\n      code: options.code,\n      redirect_uri: options.redirectUri,\n      ...(options.codeVerifier && { code_verifier: options.codeVerifier }),\n      ...(!this.config.useBasicAuth && {\n        client_id: clientId,\n        client_secret: clientSecret,\n      }),\n      ...this.config.additionalTokenParams,\n    });\n\n    const headers: Record<string, string> = {\n      \"Content-Type\": \"application/x-www-form-urlencoded\",\n      Accept: \"application/json\",\n    };\n\n    if (this.config.useBasicAuth) {\n      const credentials = btoa(`${clientId}:${clientSecret}`);\n      headers.Authorization = `Basic ${credentials}`;\n    }\n\n    try {\n      const response = await fetch(this.config.tokenUrl, {\n        method: \"POST\",\n        headers,\n        body: body.toString(),\n      });\n\n      const data = await response.json();\n\n      if (!response.ok) {\n        return {\n          success: false,\n          error: data.error || \"token_exchange_failed\",\n          errorDescription: data.error_description || `Status ${response.status}`,\n        };\n      }\n\n      const mapping = this.config.tokenResponseMapping || {};\n      const tokens: OAuthTokens = {\n        accessToken: data[mapping.accessToken || \"access_token\"],\n        refreshToken: data[mapping.refreshToken || \"refresh_token\"],\n        tokenType: data[mapping.tokenType || \"token_type\"],\n        scope: data[mapping.scope || \"scope\"],\n        idToken: data.id_token,\n      };\n\n      const expiresIn = data[mapping.expiresIn || \"expires_in\"];\n      if (expiresIn) {\n        tokens.expiresAt = Date.now() + expiresIn * 1000;\n      }\n\n      return { success: true, tokens };\n    } catch (error) {\n      return {\n        success: false,\n        error: \"network_error\",\n        errorDescription: error instanceof Error ? error.message : \"Unknown error\",\n      };\n    }\n  }\n\n  /**\n   * Refresh access token\n   */\n  async refreshTokens(refreshToken: string): Promise<TokenExchangeResult> {\n    const clientId = this.getClientId();\n    const clientSecret = this.getClientSecret();\n\n    if (!clientId || !clientSecret) {\n      return {\n        success: false,\n        error: \"OAuth not configured\",\n      };\n    }\n\n    const body = new URLSearchParams({\n      grant_type: \"refresh_token\",\n      refresh_token: refreshToken,\n      ...(!this.config.useBasicAuth && {\n        client_id: clientId,\n        client_secret: clientSecret,\n      }),\n    });\n\n    const headers: Record<string, string> = {\n      \"Content-Type\": \"application/x-www-form-urlencoded\",\n      Accept: \"application/json\",\n    };\n\n    if (this.config.useBasicAuth) {\n      const credentials = btoa(`${clientId}:${clientSecret}`);\n      headers.Authorization = `Basic ${credentials}`;\n    }\n\n    try {\n      const response = await fetch(this.config.tokenUrl, {\n        method: \"POST\",\n        headers,\n        body: body.toString(),\n      });\n\n      const data = await response.json();\n\n      if (!response.ok) {\n        return {\n          success: false,\n          error: data.error || \"refresh_failed\",\n          errorDescription: data.error_description,\n        };\n      }\n\n      const mapping = this.config.tokenResponseMapping || {};\n      const tokens: OAuthTokens = {\n        accessToken: data[mapping.accessToken || \"access_token\"],\n        refreshToken: data[mapping.refreshToken || \"refresh_token\"] || refreshToken,\n        tokenType: data[mapping.tokenType || \"token_type\"],\n        scope: data[mapping.scope || \"scope\"],\n      };\n\n      const expiresIn = data[mapping.expiresIn || \"expires_in\"];\n      if (expiresIn) {\n        tokens.expiresAt = Date.now() + expiresIn * 1000;\n      }\n\n      return { success: true, tokens };\n    } catch (error) {\n      return {\n        success: false,\n        error: \"network_error\",\n        errorDescription: error instanceof Error ? error.message : \"Unknown error\",\n      };\n    }\n  }\n\n  /**\n   * Revoke tokens\n   */\n  async revokeToken(token: string): Promise<boolean> {\n    if (!this.config.revocationUrl) {\n      return false;\n    }\n\n    try {\n      const response = await fetch(this.config.revocationUrl, {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/x-www-form-urlencoded\",\n        },\n        body: new URLSearchParams({ token }).toString(),\n      });\n\n      return response.ok;\n    } catch {\n      return false;\n    }\n  }\n}\n\n/**\n * Service-specific OAuth handler\n */\nexport class OAuthService extends OAuthProvider {\n  protected serviceConfig: OAuthServiceConfig;\n  protected tokenStore?: TokenStore;\n\n  constructor(config: OAuthServiceConfig, tokenStore?: TokenStore) {\n    super(config);\n    this.serviceConfig = config;\n    this.tokenStore = tokenStore;\n  }\n\n  /**\n   * Get service ID\n   */\n  get serviceId(): string {\n    return this.serviceConfig.serviceId;\n  }\n\n  /**\n   * Get API base URL\n   */\n  get apiBaseUrl(): string {\n    return this.serviceConfig.apiBaseUrl;\n  }\n\n  /**\n   * Create authorization URL with service defaults\n   */\n  override createAuthorizationUrl(\n    options: AuthorizationUrlOptions = {},\n  ): Promise<{ url: string; state: OAuthState }> {\n    return super.createAuthorizationUrl({\n      ...options,\n      defaultScopes: this.serviceConfig.defaultScopes,\n    });\n  }\n\n  /**\n   * Get valid access token (refreshing if needed)\n   */\n  async getAccessToken(): Promise<string | null> {\n    if (!this.tokenStore) {\n      return null;\n    }\n\n    const tokens = await this.tokenStore.getTokens(this.serviceId);\n    if (!tokens) {\n      return null;\n    }\n\n    // Check if token is expired (with 5 min buffer)\n    if (tokens.expiresAt && Date.now() > tokens.expiresAt - 300000) {\n      if (tokens.refreshToken) {\n        const result = await this.refreshTokens(tokens.refreshToken);\n        if (result.success && result.tokens) {\n          await this.tokenStore.setTokens(this.serviceId, result.tokens);\n          return result.tokens.accessToken;\n        }\n      }\n      return null;\n    }\n\n    return tokens.accessToken;\n  }\n\n  /**\n   * Make authenticated API request\n   */\n  async fetch<T>(\n    endpoint: string,\n    options: RequestInit = {},\n  ): Promise<T> {\n    const token = await this.getAccessToken();\n    if (!token) {\n      throw new Error(`Not authenticated with ${this.serviceConfig.displayName}`);\n    }\n\n    const url = endpoint.startsWith(\"http\") ? endpoint : `${this.apiBaseUrl}${endpoint}`;\n\n    const response = await fetch(url, {\n      ...options,\n      headers: {\n        Authorization: `Bearer ${token}`,\n        \"Content-Type\": \"application/json\",\n        ...options.headers,\n      },\n    });\n\n    if (!response.ok) {\n      const error = await response.text();\n      throw new Error(`${this.serviceConfig.displayName} API error: ${response.status} ${error}`);\n    }\n\n    return response.json();\n  }\n}\n", "/**\n * Google OAuth Provider\n *\n * Pre-configured OAuth for Google services: Gmail, Calendar, Sheets, Drive\n */\n\nimport type { OAuthServiceConfig } from \"../types.ts\";\n\n/**\n * Base Google OAuth configuration\n */\nconst googleBase = {\n  providerId: \"google\",\n  displayName: \"Google\",\n  authorizationUrl: \"https://accounts.google.com/o/oauth2/v2/auth\",\n  tokenUrl: \"https://oauth2.googleapis.com/token\",\n  userInfoUrl: \"https://www.googleapis.com/oauth2/v2/userinfo\",\n  revocationUrl: \"https://oauth2.googleapis.com/revoke\",\n  clientIdEnvVar: \"GOOGLE_CLIENT_ID\",\n  clientSecretEnvVar: \"GOOGLE_CLIENT_SECRET\",\n  additionalAuthParams: {\n    access_type: \"offline\",\n    prompt: \"consent\",\n  },\n};\n\n/**\n * Gmail OAuth configuration\n */\nexport const gmailConfig: OAuthServiceConfig = {\n  ...googleBase,\n  serviceId: \"gmail\",\n  displayName: \"Gmail\",\n  apiBaseUrl: \"https://gmail.googleapis.com/gmail/v1\",\n  defaultScopes: [\n    \"https://www.googleapis.com/auth/gmail.readonly\",\n    \"https://www.googleapis.com/auth/gmail.send\",\n    \"https://www.googleapis.com/auth/gmail.compose\",\n    \"https://www.googleapis.com/auth/gmail.labels\",\n  ],\n};\n\n/**\n * Google Calendar OAuth configuration\n */\nexport const calendarConfig: OAuthServiceConfig = {\n  ...googleBase,\n  serviceId: \"calendar\",\n  displayName: \"Google Calendar\",\n  apiBaseUrl: \"https://www.googleapis.com/calendar/v3\",\n  defaultScopes: [\n    \"https://www.googleapis.com/auth/calendar.readonly\",\n    \"https://www.googleapis.com/auth/calendar.events\",\n  ],\n};\n\n/**\n * Google Sheets OAuth configuration\n */\nexport const sheetsConfig: OAuthServiceConfig = {\n  ...googleBase,\n  serviceId: \"sheets\",\n  displayName: \"Google Sheets\",\n  apiBaseUrl: \"https://sheets.googleapis.com/v4\",\n  defaultScopes: [\n    \"https://www.googleapis.com/auth/spreadsheets.readonly\",\n    \"https://www.googleapis.com/auth/spreadsheets\",\n  ],\n};\n\n/**\n * Google Drive OAuth configuration\n */\nexport const driveConfig: OAuthServiceConfig = {\n  ...googleBase,\n  serviceId: \"drive\",\n  displayName: \"Google Drive\",\n  apiBaseUrl: \"https://www.googleapis.com/drive/v3\",\n  defaultScopes: [\n    \"https://www.googleapis.com/auth/drive.readonly\",\n    \"https://www.googleapis.com/auth/drive.file\",\n  ],\n};\n\n/**\n * All Google service configurations\n */\nexport const googleServices = {\n  gmail: gmailConfig,\n  calendar: calendarConfig,\n  sheets: sheetsConfig,\n  drive: driveConfig,\n} as const;\n", "/**\n * Microsoft OAuth Provider\n *\n * Pre-configured OAuth for Microsoft services: Outlook, Teams, SharePoint, OneDrive\n */\n\nimport type { OAuthServiceConfig } from \"../types.ts\";\n\n/**\n * Base Microsoft OAuth configuration\n */\nconst microsoftBase = {\n  providerId: \"microsoft\",\n  displayName: \"Microsoft\",\n  authorizationUrl: \"https://login.microsoftonline.com/common/oauth2/v2.0/authorize\",\n  tokenUrl: \"https://login.microsoftonline.com/common/oauth2/v2.0/token\",\n  userInfoUrl: \"https://graph.microsoft.com/v1.0/me\",\n  clientIdEnvVar: \"MICROSOFT_CLIENT_ID\",\n  clientSecretEnvVar: \"MICROSOFT_CLIENT_SECRET\",\n  additionalAuthParams: {\n    response_mode: \"query\",\n  },\n};\n\n/**\n * Microsoft Outlook OAuth configuration\n */\nexport const outlookConfig: OAuthServiceConfig = {\n  ...microsoftBase,\n  serviceId: \"outlook\",\n  displayName: \"Outlook\",\n  apiBaseUrl: \"https://graph.microsoft.com/v1.0\",\n  defaultScopes: [\n    \"Mail.Read\",\n    \"Mail.Send\",\n    \"Mail.ReadWrite\",\n    \"Calendars.Read\",\n    \"Calendars.ReadWrite\",\n    \"User.Read\",\n    \"offline_access\",\n  ],\n};\n\n/**\n * Microsoft Teams OAuth configuration\n */\nexport const teamsConfig: OAuthServiceConfig = {\n  ...microsoftBase,\n  serviceId: \"teams\",\n  displayName: \"Microsoft Teams\",\n  apiBaseUrl: \"https://graph.microsoft.com/v1.0\",\n  defaultScopes: [\n    \"Team.ReadBasic.All\",\n    \"Channel.ReadBasic.All\",\n    \"Chat.Read\",\n    \"Chat.ReadWrite\",\n    \"ChannelMessage.Read.All\",\n    \"User.Read\",\n    \"offline_access\",\n  ],\n};\n\n/**\n * Microsoft SharePoint OAuth configuration\n */\nexport const sharePointConfig: OAuthServiceConfig = {\n  ...microsoftBase,\n  serviceId: \"sharepoint\",\n  displayName: \"SharePoint\",\n  apiBaseUrl: \"https://graph.microsoft.com/v1.0\",\n  defaultScopes: [\n    \"Sites.Read.All\",\n    \"Sites.ReadWrite.All\",\n    \"Files.Read.All\",\n    \"Files.ReadWrite.All\",\n    \"User.Read\",\n    \"offline_access\",\n  ],\n};\n\n/**\n * Microsoft OneDrive OAuth configuration\n */\nexport const oneDriveConfig: OAuthServiceConfig = {\n  ...microsoftBase,\n  serviceId: \"onedrive\",\n  displayName: \"OneDrive\",\n  apiBaseUrl: \"https://graph.microsoft.com/v1.0\",\n  defaultScopes: [\n    \"Files.Read\",\n    \"Files.ReadWrite\",\n    \"Files.Read.All\",\n    \"Files.ReadWrite.All\",\n    \"User.Read\",\n    \"offline_access\",\n  ],\n};\n\n/**\n * All Microsoft service configurations\n */\nexport const microsoftServices = {\n  outlook: outlookConfig,\n  teams: teamsConfig,\n  sharepoint: sharePointConfig,\n  onedrive: oneDriveConfig,\n} as const;\n", "/**\n * Atlassian OAuth Provider\n *\n * Pre-configured OAuth for Atlassian services: Jira, Confluence\n */\n\nimport type { OAuthServiceConfig } from \"../types.ts\";\n\n/**\n * Base Atlassian OAuth configuration\n */\nconst atlassianBase = {\n  providerId: \"atlassian\",\n  displayName: \"Atlassian\",\n  authorizationUrl: \"https://auth.atlassian.com/authorize\",\n  tokenUrl: \"https://auth.atlassian.com/oauth/token\",\n  userInfoUrl: \"https://api.atlassian.com/me\",\n  clientIdEnvVar: \"ATLASSIAN_CLIENT_ID\",\n  clientSecretEnvVar: \"ATLASSIAN_CLIENT_SECRET\",\n  additionalAuthParams: {\n    audience: \"api.atlassian.com\",\n    prompt: \"consent\",\n  },\n};\n\n/**\n * Jira OAuth configuration\n */\nexport const jiraConfig: OAuthServiceConfig = {\n  ...atlassianBase,\n  serviceId: \"jira\",\n  displayName: \"Jira\",\n  apiBaseUrl: \"https://api.atlassian.com/ex/jira\",\n  defaultScopes: [\n    \"read:jira-work\",\n    \"write:jira-work\",\n    \"read:jira-user\",\n    \"offline_access\",\n  ],\n};\n\n/**\n * Confluence OAuth configuration\n */\nexport const confluenceConfig: OAuthServiceConfig = {\n  ...atlassianBase,\n  serviceId: \"confluence\",\n  displayName: \"Confluence\",\n  apiBaseUrl: \"https://api.atlassian.com/ex/confluence\",\n  defaultScopes: [\n    \"read:confluence-content.all\",\n    \"write:confluence-content\",\n    \"read:confluence-space.summary\",\n    \"read:confluence-user\",\n    \"offline_access\",\n  ],\n};\n\n/**\n * Bitbucket OAuth configuration (also Atlassian)\n */\nexport const bitbucketConfig: OAuthServiceConfig = {\n  ...atlassianBase,\n  serviceId: \"bitbucket\",\n  displayName: \"Bitbucket\",\n  // Bitbucket has its own OAuth endpoints\n  authorizationUrl: \"https://bitbucket.org/site/oauth2/authorize\",\n  tokenUrl: \"https://bitbucket.org/site/oauth2/access_token\",\n  clientIdEnvVar: \"BITBUCKET_CLIENT_ID\",\n  clientSecretEnvVar: \"BITBUCKET_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.bitbucket.org/2.0\",\n  additionalAuthParams: {},\n  defaultScopes: [\n    \"repository\",\n    \"repository:write\",\n    \"pullrequest\",\n    \"pullrequest:write\",\n    \"account\",\n  ],\n};\n\n/**\n * All Atlassian service configurations\n */\nexport const atlassianServices = {\n  jira: jiraConfig,\n  confluence: confluenceConfig,\n  bitbucket: bitbucketConfig,\n} as const;\n", "/**\n * Common OAuth Providers\n *\n * Pre-configured OAuth service configurations for popular SaaS providers.\n */\n\nimport type { OAuthServiceConfig } from \"../types.ts\";\n\n/**\n * GitHub OAuth configuration\n */\nexport const githubConfig: OAuthServiceConfig = {\n  providerId: \"github\",\n  serviceId: \"github\",\n  displayName: \"GitHub\",\n  authorizationUrl: \"https://github.com/login/oauth/authorize\",\n  tokenUrl: \"https://github.com/login/oauth/access_token\",\n  clientIdEnvVar: \"GITHUB_CLIENT_ID\",\n  clientSecretEnvVar: \"GITHUB_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.github.com\",\n  defaultScopes: [\"repo\", \"user\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Slack OAuth configuration\n */\nexport const slackConfig: OAuthServiceConfig = {\n  providerId: \"slack\",\n  serviceId: \"slack\",\n  displayName: \"Slack\",\n  authorizationUrl: \"https://slack.com/oauth/v2/authorize\",\n  tokenUrl: \"https://slack.com/api/oauth.v2.access\",\n  clientIdEnvVar: \"SLACK_CLIENT_ID\",\n  clientSecretEnvVar: \"SLACK_CLIENT_SECRET\",\n  apiBaseUrl: \"https://slack.com/api\",\n  defaultScopes: [\"channels:read\", \"chat:write\", \"users:read\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Notion OAuth configuration\n */\nexport const notionConfig: OAuthServiceConfig = {\n  providerId: \"notion\",\n  serviceId: \"notion\",\n  displayName: \"Notion\",\n  authorizationUrl: \"https://api.notion.com/v1/oauth/authorize\",\n  tokenUrl: \"https://api.notion.com/v1/oauth/token\",\n  clientIdEnvVar: \"NOTION_CLIENT_ID\",\n  clientSecretEnvVar: \"NOTION_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.notion.com/v1\",\n  defaultScopes: [],\n  useBasicAuth: true,\n  additionalAuthParams: {\n    owner: \"user\",\n  },\n};\n\n/**\n * Figma OAuth configuration\n */\nexport const figmaConfig: OAuthServiceConfig = {\n  providerId: \"figma\",\n  serviceId: \"figma\",\n  displayName: \"Figma\",\n  authorizationUrl: \"https://www.figma.com/oauth\",\n  tokenUrl: \"https://www.figma.com/api/oauth/token\",\n  clientIdEnvVar: \"FIGMA_CLIENT_ID\",\n  clientSecretEnvVar: \"FIGMA_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.figma.com/v1\",\n  defaultScopes: [\"file_read\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Discord OAuth configuration\n */\nexport const discordConfig: OAuthServiceConfig = {\n  providerId: \"discord\",\n  serviceId: \"discord\",\n  displayName: \"Discord\",\n  authorizationUrl: \"https://discord.com/api/oauth2/authorize\",\n  tokenUrl: \"https://discord.com/api/oauth2/token\",\n  clientIdEnvVar: \"DISCORD_CLIENT_ID\",\n  clientSecretEnvVar: \"DISCORD_CLIENT_SECRET\",\n  apiBaseUrl: \"https://discord.com/api/v10\",\n  defaultScopes: [\"identify\", \"guilds\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Linear OAuth configuration\n */\nexport const linearConfig: OAuthServiceConfig = {\n  providerId: \"linear\",\n  serviceId: \"linear\",\n  displayName: \"Linear\",\n  authorizationUrl: \"https://linear.app/oauth/authorize\",\n  tokenUrl: \"https://api.linear.app/oauth/token\",\n  clientIdEnvVar: \"LINEAR_CLIENT_ID\",\n  clientSecretEnvVar: \"LINEAR_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.linear.app\",\n  defaultScopes: [\"read\", \"write\"],\n  additionalAuthParams: {},\n};\n\n/**\n * GitLab OAuth configuration\n */\nexport const gitlabConfig: OAuthServiceConfig = {\n  providerId: \"gitlab\",\n  serviceId: \"gitlab\",\n  displayName: \"GitLab\",\n  authorizationUrl: \"https://gitlab.com/oauth/authorize\",\n  tokenUrl: \"https://gitlab.com/oauth/token\",\n  clientIdEnvVar: \"GITLAB_CLIENT_ID\",\n  clientSecretEnvVar: \"GITLAB_CLIENT_SECRET\",\n  apiBaseUrl: \"https://gitlab.com/api/v4\",\n  defaultScopes: [\"read_user\", \"api\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Airtable OAuth configuration\n */\nexport const airtableConfig: OAuthServiceConfig = {\n  providerId: \"airtable\",\n  serviceId: \"airtable\",\n  displayName: \"Airtable\",\n  authorizationUrl: \"https://airtable.com/oauth2/v1/authorize\",\n  tokenUrl: \"https://airtable.com/oauth2/v1/token\",\n  clientIdEnvVar: \"AIRTABLE_CLIENT_ID\",\n  clientSecretEnvVar: \"AIRTABLE_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.airtable.com/v0\",\n  defaultScopes: [\"data.records:read\", \"data.records:write\", \"schema.bases:read\"],\n  useBasicAuth: true,\n  additionalAuthParams: {},\n};\n\n/**\n * Dropbox OAuth configuration\n */\nexport const dropboxConfig: OAuthServiceConfig = {\n  providerId: \"dropbox\",\n  serviceId: \"dropbox\",\n  displayName: \"Dropbox\",\n  authorizationUrl: \"https://www.dropbox.com/oauth2/authorize\",\n  tokenUrl: \"https://api.dropbox.com/oauth2/token\",\n  clientIdEnvVar: \"DROPBOX_CLIENT_ID\",\n  clientSecretEnvVar: \"DROPBOX_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.dropboxapi.com/2\",\n  defaultScopes: [],\n  additionalAuthParams: {\n    token_access_type: \"offline\",\n  },\n};\n\n/**\n * HubSpot OAuth configuration\n */\nexport const hubspotConfig: OAuthServiceConfig = {\n  providerId: \"hubspot\",\n  serviceId: \"hubspot\",\n  displayName: \"HubSpot\",\n  authorizationUrl: \"https://app.hubspot.com/oauth/authorize\",\n  tokenUrl: \"https://api.hubapi.com/oauth/v1/token\",\n  clientIdEnvVar: \"HUBSPOT_CLIENT_ID\",\n  clientSecretEnvVar: \"HUBSPOT_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.hubapi.com\",\n  defaultScopes: [\"crm.objects.contacts.read\", \"crm.objects.contacts.write\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Salesforce OAuth configuration\n */\nexport const salesforceConfig: OAuthServiceConfig = {\n  providerId: \"salesforce\",\n  serviceId: \"salesforce\",\n  displayName: \"Salesforce\",\n  authorizationUrl: \"https://login.salesforce.com/services/oauth2/authorize\",\n  tokenUrl: \"https://login.salesforce.com/services/oauth2/token\",\n  clientIdEnvVar: \"SALESFORCE_CLIENT_ID\",\n  clientSecretEnvVar: \"SALESFORCE_CLIENT_SECRET\",\n  apiBaseUrl: \"https://login.salesforce.com/services/data/v59.0\",\n  defaultScopes: [\"api\", \"refresh_token\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Twitter/X OAuth configuration\n */\nexport const twitterConfig: OAuthServiceConfig = {\n  providerId: \"twitter\",\n  serviceId: \"twitter\",\n  displayName: \"Twitter/X\",\n  authorizationUrl: \"https://twitter.com/i/oauth2/authorize\",\n  tokenUrl: \"https://api.twitter.com/2/oauth2/token\",\n  clientIdEnvVar: \"TWITTER_CLIENT_ID\",\n  clientSecretEnvVar: \"TWITTER_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.twitter.com/2\",\n  defaultScopes: [\"tweet.read\", \"users.read\", \"offline.access\"],\n  useBasicAuth: true,\n  additionalAuthParams: {},\n};\n\n/**\n * Asana OAuth configuration\n */\nexport const asanaConfig: OAuthServiceConfig = {\n  providerId: \"asana\",\n  serviceId: \"asana\",\n  displayName: \"Asana\",\n  authorizationUrl: \"https://app.asana.com/-/oauth_authorize\",\n  tokenUrl: \"https://app.asana.com/-/oauth_token\",\n  clientIdEnvVar: \"ASANA_CLIENT_ID\",\n  clientSecretEnvVar: \"ASANA_CLIENT_SECRET\",\n  apiBaseUrl: \"https://app.asana.com/api/1.0\",\n  defaultScopes: [\"default\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Monday.com OAuth configuration\n */\nexport const mondayConfig: OAuthServiceConfig = {\n  providerId: \"monday\",\n  serviceId: \"monday\",\n  displayName: \"Monday.com\",\n  authorizationUrl: \"https://auth.monday.com/oauth2/authorize\",\n  tokenUrl: \"https://auth.monday.com/oauth2/token\",\n  clientIdEnvVar: \"MONDAY_CLIENT_ID\",\n  clientSecretEnvVar: \"MONDAY_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.monday.com/v2\",\n  defaultScopes: [\"me:read\", \"boards:read\", \"boards:write\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Zoom OAuth configuration\n */\nexport const zoomConfig: OAuthServiceConfig = {\n  providerId: \"zoom\",\n  serviceId: \"zoom\",\n  displayName: \"Zoom\",\n  authorizationUrl: \"https://zoom.us/oauth/authorize\",\n  tokenUrl: \"https://zoom.us/oauth/token\",\n  clientIdEnvVar: \"ZOOM_CLIENT_ID\",\n  clientSecretEnvVar: \"ZOOM_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.zoom.us/v2\",\n  defaultScopes: [\"meeting:read\", \"meeting:write\", \"user:read\"],\n  useBasicAuth: true,\n  additionalAuthParams: {},\n};\n\n/**\n * Intercom OAuth configuration\n */\nexport const intercomConfig: OAuthServiceConfig = {\n  providerId: \"intercom\",\n  serviceId: \"intercom\",\n  displayName: \"Intercom\",\n  authorizationUrl: \"https://app.intercom.com/oauth\",\n  tokenUrl: \"https://api.intercom.io/auth/eagle/token\",\n  clientIdEnvVar: \"INTERCOM_CLIENT_ID\",\n  clientSecretEnvVar: \"INTERCOM_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.intercom.io\",\n  defaultScopes: [],\n  additionalAuthParams: {},\n};\n\n/**\n * Freshdesk OAuth configuration\n */\nexport const freshdeskConfig: OAuthServiceConfig = {\n  providerId: \"freshdesk\",\n  serviceId: \"freshdesk\",\n  displayName: \"Freshdesk\",\n  authorizationUrl: \"https://accounts.freshworks.com/authorize\",\n  tokenUrl: \"https://accounts.freshworks.com/oauth/token\",\n  clientIdEnvVar: \"FRESHDESK_CLIENT_ID\",\n  clientSecretEnvVar: \"FRESHDESK_CLIENT_SECRET\",\n  apiBaseUrl: \"https://domain.freshdesk.com/api/v2\",\n  defaultScopes: [\"freshdesk\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Mailchimp OAuth configuration\n */\nexport const mailchimpConfig: OAuthServiceConfig = {\n  providerId: \"mailchimp\",\n  serviceId: \"mailchimp\",\n  displayName: \"Mailchimp\",\n  authorizationUrl: \"https://login.mailchimp.com/oauth2/authorize\",\n  tokenUrl: \"https://login.mailchimp.com/oauth2/token\",\n  clientIdEnvVar: \"MAILCHIMP_CLIENT_ID\",\n  clientSecretEnvVar: \"MAILCHIMP_CLIENT_SECRET\",\n  apiBaseUrl: \"https://server.api.mailchimp.com/3.0\",\n  defaultScopes: [],\n  additionalAuthParams: {},\n};\n\n/**\n * Shopify OAuth configuration\n */\nexport const shopifyConfig: OAuthServiceConfig = {\n  providerId: \"shopify\",\n  serviceId: \"shopify\",\n  displayName: \"Shopify\",\n  authorizationUrl: \"https://shop.myshopify.com/admin/oauth/authorize\",\n  tokenUrl: \"https://shop.myshopify.com/admin/oauth/access_token\",\n  clientIdEnvVar: \"SHOPIFY_CLIENT_ID\",\n  clientSecretEnvVar: \"SHOPIFY_CLIENT_SECRET\",\n  apiBaseUrl: \"https://shop.myshopify.com/admin/api/2024-01\",\n  defaultScopes: [\"read_products\", \"write_products\", \"read_orders\"],\n  additionalAuthParams: {},\n};\n\n/**\n * QuickBooks OAuth configuration\n */\nexport const quickbooksConfig: OAuthServiceConfig = {\n  providerId: \"quickbooks\",\n  serviceId: \"quickbooks\",\n  displayName: \"QuickBooks\",\n  authorizationUrl: \"https://appcenter.intuit.com/connect/oauth2\",\n  tokenUrl: \"https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer\",\n  clientIdEnvVar: \"QUICKBOOKS_CLIENT_ID\",\n  clientSecretEnvVar: \"QUICKBOOKS_CLIENT_SECRET\",\n  apiBaseUrl: \"https://quickbooks.api.intuit.com/v3\",\n  defaultScopes: [\"com.intuit.quickbooks.accounting\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Xero OAuth configuration\n */\nexport const xeroConfig: OAuthServiceConfig = {\n  providerId: \"xero\",\n  serviceId: \"xero\",\n  displayName: \"Xero\",\n  authorizationUrl: \"https://login.xero.com/identity/connect/authorize\",\n  tokenUrl: \"https://identity.xero.com/connect/token\",\n  clientIdEnvVar: \"XERO_CLIENT_ID\",\n  clientSecretEnvVar: \"XERO_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.xero.com/api.xro/2.0\",\n  defaultScopes: [\"openid\", \"profile\", \"email\", \"accounting.transactions\", \"offline_access\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Box OAuth configuration\n */\nexport const boxConfig: OAuthServiceConfig = {\n  providerId: \"box\",\n  serviceId: \"box\",\n  displayName: \"Box\",\n  authorizationUrl: \"https://account.box.com/api/oauth2/authorize\",\n  tokenUrl: \"https://api.box.com/oauth2/token\",\n  clientIdEnvVar: \"BOX_CLIENT_ID\",\n  clientSecretEnvVar: \"BOX_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.box.com/2.0\",\n  defaultScopes: [],\n  additionalAuthParams: {},\n};\n\n/**\n * Webex OAuth configuration\n */\nexport const webexConfig: OAuthServiceConfig = {\n  providerId: \"webex\",\n  serviceId: \"webex\",\n  displayName: \"Webex\",\n  authorizationUrl: \"https://webexapis.com/v1/authorize\",\n  tokenUrl: \"https://webexapis.com/v1/access_token\",\n  clientIdEnvVar: \"WEBEX_CLIENT_ID\",\n  clientSecretEnvVar: \"WEBEX_CLIENT_SECRET\",\n  apiBaseUrl: \"https://webexapis.com/v1\",\n  defaultScopes: [\"spark:all\", \"spark:kms\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Trello OAuth configuration\n */\nexport const trelloConfig: OAuthServiceConfig = {\n  providerId: \"trello\",\n  serviceId: \"trello\",\n  displayName: \"Trello\",\n  authorizationUrl: \"https://trello.com/1/authorize\",\n  tokenUrl: \"https://trello.com/1/OAuthGetAccessToken\",\n  clientIdEnvVar: \"TRELLO_CLIENT_ID\",\n  clientSecretEnvVar: \"TRELLO_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.trello.com/1\",\n  defaultScopes: [\"read\", \"write\"],\n  additionalAuthParams: {\n    expiration: \"never\",\n  },\n};\n\n/**\n * Clickup OAuth configuration\n */\nexport const clickupConfig: OAuthServiceConfig = {\n  providerId: \"clickup\",\n  serviceId: \"clickup\",\n  displayName: \"ClickUp\",\n  authorizationUrl: \"https://app.clickup.com/api\",\n  tokenUrl: \"https://api.clickup.com/api/v2/oauth/token\",\n  clientIdEnvVar: \"CLICKUP_CLIENT_ID\",\n  clientSecretEnvVar: \"CLICKUP_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.clickup.com/api/v2\",\n  defaultScopes: [],\n  additionalAuthParams: {},\n};\n\n/**\n * Pipedrive OAuth configuration\n */\nexport const pipedriveConfig: OAuthServiceConfig = {\n  providerId: \"pipedrive\",\n  serviceId: \"pipedrive\",\n  displayName: \"Pipedrive\",\n  authorizationUrl: \"https://oauth.pipedrive.com/oauth/authorize\",\n  tokenUrl: \"https://oauth.pipedrive.com/oauth/token\",\n  clientIdEnvVar: \"PIPEDRIVE_CLIENT_ID\",\n  clientSecretEnvVar: \"PIPEDRIVE_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.pipedrive.com/v1\",\n  defaultScopes: [],\n  additionalAuthParams: {},\n};\n\n/**\n * Export grouped services for convenience\n */\nexport const commonServices = {\n  github: githubConfig,\n  slack: slackConfig,\n  notion: notionConfig,\n  figma: figmaConfig,\n  discord: discordConfig,\n  linear: linearConfig,\n  gitlab: gitlabConfig,\n  airtable: airtableConfig,\n  dropbox: dropboxConfig,\n  hubspot: hubspotConfig,\n  salesforce: salesforceConfig,\n  twitter: twitterConfig,\n  asana: asanaConfig,\n  monday: mondayConfig,\n  zoom: zoomConfig,\n  intercom: intercomConfig,\n  freshdesk: freshdeskConfig,\n  mailchimp: mailchimpConfig,\n  shopify: shopifyConfig,\n  quickbooks: quickbooksConfig,\n  xero: xeroConfig,\n  box: boxConfig,\n  webex: webexConfig,\n  trello: trelloConfig,\n  clickup: clickupConfig,\n  pipedrive: pipedriveConfig,\n};\n"],
+  "mappings": ";AAAO,IAAM,SAAS,OAAO,SAAS;AAC/B,IAAM,SACX,OAAQ,WAA8D,YAAY,eACjF,WAA8D,SAAS,UAAU,SAChF;AACG,IAAM,QAAQ,OAAQ,WAAiC,QAAQ;AAC/D,IAAM,eAAe,OAAO,eAAe,eAAe,YAAY,cAC3E,mBAAmB;;;ACLrB,IAAM,cAAe,WAA2D;AAChF,IAAM,iBAAiB,CAAC,CAAC,aAAa,UAAU;AAsDzC,SAAS,OAAO,KAAiC;AACtD,MAAI,QAAS;AACX,WAAO,YAAa,GAAG;AAAA,EACzB;AACA,MAAI,gBAAgB;AAClB,WAAO,YAAa,IAAI,GAAG;AAAA,EAC7B;AACA,SAAO;AACT;;;AC5CA,SAAS,qBAAqB,QAAwB;AACpD,QAAM,QAAQ,IAAI,WAAW,MAAM;AACnC,SAAO,gBAAgB,KAAK;AAC5B,SAAO,MAAM,KAAK,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,GAAG,MAAM;AACjG;AAKA,SAAS,uBAA+B;AACtC,SAAO,qBAAqB,EAAE;AAChC;AAKA,eAAe,sBAAsB,UAAmC;AACtE,QAAM,UAAU,IAAI,YAAY;AAChC,QAAM,OAAO,QAAQ,OAAO,QAAQ;AACpC,QAAM,OAAO,MAAM,OAAO,OAAO,OAAO,WAAW,IAAI;AACvD,SAAO,KAAK,OAAO,aAAa,GAAG,IAAI,WAAW,IAAI,CAAC,CAAC,EACrD,QAAQ,OAAO,GAAG,EAClB,QAAQ,OAAO,GAAG,EAClB,QAAQ,OAAO,EAAE;AACtB;AAKO,IAAM,gBAAN,MAAoB;AAAA,EAGzB,YAAY,QAA6B;AACvC,SAAK,SAAS;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,cAA6B;AAC3B,WAAO,OAAO,KAAK,OAAO,cAAc,KAAK;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA,EAKA,kBAAiC;AAC/B,WAAO,OAAO,KAAK,OAAO,kBAAkB,KAAK;AAAA,EACnD;AAAA;AAAA;AAAA;AAAA,EAKA,eAAwB;AACtB,WAAO,CAAC,EAAE,KAAK,YAAY,KAAK,KAAK,gBAAgB;AAAA,EACvD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,uBACJ,UAAkE,CAAC,GACtB;AAC7C,UAAM,WAAW,KAAK,YAAY;AAClC,QAAI,CAAC,UAAU;AACb,YAAM,IAAI,MAAM,GAAG,KAAK,OAAO,cAAc,iBAAiB;AAAA,IAChE;AAEA,UAAM,QAAQ,QAAQ,SAAS,qBAAqB,EAAE;AACtD,UAAM,SAAS,QAAQ,UAAU,QAAQ,iBAAiB,CAAC;AAC3D,UAAM,cAAc,QAAQ,eAAe;AAC3C,UAAM,UAAU,QAAQ,YAAY;AAEpC,QAAI;AACJ,QAAI;AAEJ,QAAI,SAAS;AACX,qBAAe,qBAAqB;AACpC,sBAAgB,MAAM,sBAAsB,YAAY;AAAA,IAC1D;AAEA,UAAM,SAAS,IAAI,gBAAgB;AAAA,MACjC,WAAW;AAAA,MACX,cAAc;AAAA,MACd,eAAe;AAAA,MACf;AAAA,MACA,GAAI,OAAO,SAAS,KAAK,EAAE,OAAO,OAAO,KAAK,GAAG,EAAE;AAAA,MACnD,GAAI,iBAAiB;AAAA,QACnB,gBAAgB;AAAA,QAChB,uBAAuB;AAAA,MACzB;AAAA,MACA,GAAG,KAAK,OAAO;AAAA,MACf,GAAG,QAAQ;AAAA,IACb,CAAC;AAED,UAAM,aAAyB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW,KAAK,IAAI;AAAA,IACtB;AAEA,WAAO;AAAA,MACL,KAAK,GAAG,KAAK,OAAO,gBAAgB,IAAI,OAAO,SAAS,CAAC;AAAA,MACzD,OAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,aAAa,SAA6D;AAC9E,UAAM,WAAW,KAAK,YAAY;AAClC,UAAM,eAAe,KAAK,gBAAgB;AAE1C,QAAI,CAAC,YAAY,CAAC,cAAc;AAC9B,aAAO;AAAA,QACL,SAAS;AAAA,QACT,OAAO;AAAA,QACP,kBACE,WAAW,KAAK,OAAO,cAAc,OAAO,KAAK,OAAO,kBAAkB;AAAA,MAC9E;AAAA,IACF;AAEA,UAAM,OAAO,IAAI,gBAAgB;AAAA,MAC/B,YAAY;AAAA,MACZ,MAAM,QAAQ;AAAA,MACd,cAAc,QAAQ;AAAA,MACtB,GAAI,QAAQ,gBAAgB,EAAE,eAAe,QAAQ,aAAa;AAAA,MAClE,GAAI,CAAC,KAAK,OAAO,gBAAgB;AAAA,QAC/B,WAAW;AAAA,QACX,eAAe;AAAA,MACjB;AAAA,MACA,GAAG,KAAK,OAAO;AAAA,IACjB,CAAC;AAED,UAAM,UAAkC;AAAA,MACtC,gBAAgB;AAAA,MAChB,QAAQ;AAAA,IACV;AAEA,QAAI,KAAK,OAAO,cAAc;AAC5B,YAAM,cAAc,KAAK,GAAG,QAAQ,IAAI,YAAY,EAAE;AACtD,cAAQ,gBAAgB,SAAS,WAAW;AAAA,IAC9C;AAEA,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,KAAK,OAAO,UAAU;AAAA,QACjD,QAAQ;AAAA,QACR;AAAA,QACA,MAAM,KAAK,SAAS;AAAA,MACtB,CAAC;AAED,YAAM,OAAO,MAAM,SAAS,KAAK;AAEjC,UAAI,CAAC,SAAS,IAAI;AAChB,eAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO,KAAK,SAAS;AAAA,UACrB,kBAAkB,KAAK,qBAAqB,UAAU,SAAS,MAAM;AAAA,QACvE;AAAA,MACF;AAEA,YAAM,UAAU,KAAK,OAAO,wBAAwB,CAAC;AACrD,YAAM,SAAsB;AAAA,QAC1B,aAAa,KAAK,QAAQ,eAAe,cAAc;AAAA,QACvD,cAAc,KAAK,QAAQ,gBAAgB,eAAe;AAAA,QAC1D,WAAW,KAAK,QAAQ,aAAa,YAAY;AAAA,QACjD,OAAO,KAAK,QAAQ,SAAS,OAAO;AAAA,QACpC,SAAS,KAAK;AAAA,MAChB;AAEA,YAAM,YAAY,KAAK,QAAQ,aAAa,YAAY;AACxD,UAAI,WAAW;AACb,eAAO,YAAY,KAAK,IAAI,IAAI,YAAY;AAAA,MAC9C;AAEA,aAAO,EAAE,SAAS,MAAM,OAAO;AAAA,IACjC,SAAS,OAAO;AACd,aAAO;AAAA,QACL,SAAS;AAAA,QACT,OAAO;AAAA,QACP,kBAAkB,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAC7D;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,cAAc,cAAoD;AACtE,UAAM,WAAW,KAAK,YAAY;AAClC,UAAM,eAAe,KAAK,gBAAgB;AAE1C,QAAI,CAAC,YAAY,CAAC,cAAc;AAC9B,aAAO;AAAA,QACL,SAAS;AAAA,QACT,OAAO;AAAA,MACT;AAAA,IACF;AAEA,UAAM,OAAO,IAAI,gBAAgB;AAAA,MAC/B,YAAY;AAAA,MACZ,eAAe;AAAA,MACf,GAAI,CAAC,KAAK,OAAO,gBAAgB;AAAA,QAC/B,WAAW;AAAA,QACX,eAAe;AAAA,MACjB;AAAA,IACF,CAAC;AAED,UAAM,UAAkC;AAAA,MACtC,gBAAgB;AAAA,MAChB,QAAQ;AAAA,IACV;AAEA,QAAI,KAAK,OAAO,cAAc;AAC5B,YAAM,cAAc,KAAK,GAAG,QAAQ,IAAI,YAAY,EAAE;AACtD,cAAQ,gBAAgB,SAAS,WAAW;AAAA,IAC9C;AAEA,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,KAAK,OAAO,UAAU;AAAA,QACjD,QAAQ;AAAA,QACR;AAAA,QACA,MAAM,KAAK,SAAS;AAAA,MACtB,CAAC;AAED,YAAM,OAAO,MAAM,SAAS,KAAK;AAEjC,UAAI,CAAC,SAAS,IAAI;AAChB,eAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO,KAAK,SAAS;AAAA,UACrB,kBAAkB,KAAK;AAAA,QACzB;AAAA,MACF;AAEA,YAAM,UAAU,KAAK,OAAO,wBAAwB,CAAC;AACrD,YAAM,SAAsB;AAAA,QAC1B,aAAa,KAAK,QAAQ,eAAe,cAAc;AAAA,QACvD,cAAc,KAAK,QAAQ,gBAAgB,eAAe,KAAK;AAAA,QAC/D,WAAW,KAAK,QAAQ,aAAa,YAAY;AAAA,QACjD,OAAO,KAAK,QAAQ,SAAS,OAAO;AAAA,MACtC;AAEA,YAAM,YAAY,KAAK,QAAQ,aAAa,YAAY;AACxD,UAAI,WAAW;AACb,eAAO,YAAY,KAAK,IAAI,IAAI,YAAY;AAAA,MAC9C;AAEA,aAAO,EAAE,SAAS,MAAM,OAAO;AAAA,IACjC,SAAS,OAAO;AACd,aAAO;AAAA,QACL,SAAS;AAAA,QACT,OAAO;AAAA,QACP,kBAAkB,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAC7D;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,YAAY,OAAiC;AACjD,QAAI,CAAC,KAAK,OAAO,eAAe;AAC9B,aAAO;AAAA,IACT;AAEA,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,KAAK,OAAO,eAAe;AAAA,QACtD,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,QAClB;AAAA,QACA,MAAM,IAAI,gBAAgB,EAAE,MAAM,CAAC,EAAE,SAAS;AAAA,MAChD,CAAC;AAED,aAAO,SAAS;AAAA,IAClB,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAKO,IAAM,eAAN,cAA2B,cAAc;AAAA,EAI9C,YAAY,QAA4B,YAAyB;AAC/D,UAAM,MAAM;AACZ,SAAK,gBAAgB;AACrB,SAAK,aAAa;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,YAAoB;AACtB,WAAO,KAAK,cAAc;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,aAAqB;AACvB,WAAO,KAAK,cAAc;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA,EAKS,uBACP,UAAmC,CAAC,GACS;AAC7C,WAAO,MAAM,uBAAuB;AAAA,MAClC,GAAG;AAAA,MACH,eAAe,KAAK,cAAc;AAAA,IACpC,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,iBAAyC;AAC7C,QAAI,CAAC,KAAK,YAAY;AACpB,aAAO;AAAA,IACT;AAEA,UAAM,SAAS,MAAM,KAAK,WAAW,UAAU,KAAK,SAAS;AAC7D,QAAI,CAAC,QAAQ;AACX,aAAO;AAAA,IACT;AAGA,QAAI,OAAO,aAAa,KAAK,IAAI,IAAI,OAAO,YAAY,KAAQ;AAC9D,UAAI,OAAO,cAAc;AACvB,cAAM,SAAS,MAAM,KAAK,cAAc,OAAO,YAAY;AAC3D,YAAI,OAAO,WAAW,OAAO,QAAQ;AACnC,gBAAM,KAAK,WAAW,UAAU,KAAK,WAAW,OAAO,MAAM;AAC7D,iBAAO,OAAO,OAAO;AAAA,QACvB;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAEA,WAAO,OAAO;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MACJ,UACA,UAAuB,CAAC,GACZ;AACZ,UAAM,QAAQ,MAAM,KAAK,eAAe;AACxC,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,MAAM,0BAA0B,KAAK,cAAc,WAAW,EAAE;AAAA,IAC5E;AAEA,UAAM,MAAM,SAAS,WAAW,MAAM,IAAI,WAAW,GAAG,KAAK,UAAU,GAAG,QAAQ;AAElF,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,GAAG;AAAA,MACH,SAAS;AAAA,QACP,eAAe,UAAU,KAAK;AAAA,QAC9B,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACb;AAAA,IACF,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,QAAQ,MAAM,SAAS,KAAK;AAClC,YAAM,IAAI,MAAM,GAAG,KAAK,cAAc,WAAW,eAAe,SAAS,MAAM,IAAI,KAAK,EAAE;AAAA,IAC5F;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AACF;;;ACxYA,IAAM,aAAa;AAAA,EACjB,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,aAAa;AAAA,EACb,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,sBAAsB;AAAA,IACpB,aAAa;AAAA,IACb,QAAQ;AAAA,EACV;AACF;AAKO,IAAM,cAAkC;AAAA,EAC7C,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,iBAAqC;AAAA,EAChD,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,eAAmC;AAAA,EAC9C,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,cAAkC;AAAA,EAC7C,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,iBAAiB;AAAA,EAC5B,OAAO;AAAA,EACP,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,OAAO;AACT;;;ACjFA,IAAM,gBAAgB;AAAA,EACpB,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,aAAa;AAAA,EACb,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,sBAAsB;AAAA,IACpB,eAAe;AAAA,EACjB;AACF;AAKO,IAAM,gBAAoC;AAAA,EAC/C,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,cAAkC;AAAA,EAC7C,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,mBAAuC;AAAA,EAClD,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,iBAAqC;AAAA,EAChD,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,oBAAoB;AAAA,EAC/B,SAAS;AAAA,EACT,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,UAAU;AACZ;;;AC/FA,IAAM,gBAAgB;AAAA,EACpB,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,aAAa;AAAA,EACb,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,sBAAsB;AAAA,IACpB,UAAU;AAAA,IACV,QAAQ;AAAA,EACV;AACF;AAKO,IAAM,aAAiC;AAAA,EAC5C,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,mBAAuC;AAAA,EAClD,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,kBAAsC;AAAA,EACjD,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA;AAAA,EAEb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,sBAAsB,CAAC;AAAA,EACvB,eAAe;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,oBAAoB;AAAA,EAC/B,MAAM;AAAA,EACN,YAAY;AAAA,EACZ,WAAW;AACb;;;AC7EO,IAAM,eAAmC;AAAA,EAC9C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,QAAQ,MAAM;AAAA,EAC9B,sBAAsB,CAAC;AACzB;AAKO,IAAM,cAAkC;AAAA,EAC7C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,iBAAiB,cAAc,YAAY;AAAA,EAC3D,sBAAsB,CAAC;AACzB;AAKO,IAAM,eAAmC;AAAA,EAC9C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC;AAAA,EAChB,cAAc;AAAA,EACd,sBAAsB;AAAA,IACpB,OAAO;AAAA,EACT;AACF;AAKO,IAAM,cAAkC;AAAA,EAC7C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,WAAW;AAAA,EAC3B,sBAAsB,CAAC;AACzB;AAKO,IAAM,gBAAoC;AAAA,EAC/C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,YAAY,QAAQ;AAAA,EACpC,sBAAsB,CAAC;AACzB;AAKO,IAAM,eAAmC;AAAA,EAC9C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,QAAQ,OAAO;AAAA,EAC/B,sBAAsB,CAAC;AACzB;AAKO,IAAM,eAAmC;AAAA,EAC9C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,aAAa,KAAK;AAAA,EAClC,sBAAsB,CAAC;AACzB;AAKO,IAAM,iBAAqC;AAAA,EAChD,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,qBAAqB,sBAAsB,mBAAmB;AAAA,EAC9E,cAAc;AAAA,EACd,sBAAsB,CAAC;AACzB;AAKO,IAAM,gBAAoC;AAAA,EAC/C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC;AAAA,EAChB,sBAAsB;AAAA,IACpB,mBAAmB;AAAA,EACrB;AACF;AAKO,IAAM,gBAAoC;AAAA,EAC/C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,6BAA6B,4BAA4B;AAAA,EACzE,sBAAsB,CAAC;AACzB;AAKO,IAAM,mBAAuC;AAAA,EAClD,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,OAAO,eAAe;AAAA,EACtC,sBAAsB,CAAC;AACzB;AAKO,IAAM,gBAAoC;AAAA,EAC/C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,cAAc,cAAc,gBAAgB;AAAA,EAC5D,cAAc;AAAA,EACd,sBAAsB,CAAC;AACzB;AAKO,IAAM,cAAkC;AAAA,EAC7C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,SAAS;AAAA,EACzB,sBAAsB,CAAC;AACzB;AAKO,IAAM,eAAmC;AAAA,EAC9C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,WAAW,eAAe,cAAc;AAAA,EACxD,sBAAsB,CAAC;AACzB;AAKO,IAAM,aAAiC;AAAA,EAC5C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,gBAAgB,iBAAiB,WAAW;AAAA,EAC5D,cAAc;AAAA,EACd,sBAAsB,CAAC;AACzB;AAKO,IAAM,iBAAqC;AAAA,EAChD,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC;AAAA,EAChB,sBAAsB,CAAC;AACzB;AAKO,IAAM,kBAAsC;AAAA,EACjD,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,WAAW;AAAA,EAC3B,sBAAsB,CAAC;AACzB;AAKO,IAAM,kBAAsC;AAAA,EACjD,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC;AAAA,EAChB,sBAAsB,CAAC;AACzB;AAKO,IAAM,gBAAoC;AAAA,EAC/C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,iBAAiB,kBAAkB,aAAa;AAAA,EAChE,sBAAsB,CAAC;AACzB;AAKO,IAAM,mBAAuC;AAAA,EAClD,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,kCAAkC;AAAA,EAClD,sBAAsB,CAAC;AACzB;AAKO,IAAM,aAAiC;AAAA,EAC5C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,UAAU,WAAW,SAAS,2BAA2B,gBAAgB;AAAA,EACzF,sBAAsB,CAAC;AACzB;AAKO,IAAM,YAAgC;AAAA,EAC3C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC;AAAA,EAChB,sBAAsB,CAAC;AACzB;AAKO,IAAM,cAAkC;AAAA,EAC7C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,aAAa,WAAW;AAAA,EACxC,sBAAsB,CAAC;AACzB;AAKO,IAAM,eAAmC;AAAA,EAC9C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,QAAQ,OAAO;AAAA,EAC/B,sBAAsB;AAAA,IACpB,YAAY;AAAA,EACd;AACF;AAKO,IAAM,gBAAoC;AAAA,EAC/C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC;AAAA,EAChB,sBAAsB,CAAC;AACzB;AAKO,IAAM,kBAAsC;AAAA,EACjD,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC;AAAA,EAChB,sBAAsB,CAAC;AACzB;AAKO,IAAM,iBAAiB;AAAA,EAC5B,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,SAAS;AAAA,EACT,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,SAAS;AAAA,EACT,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,UAAU;AAAA,EACV,WAAW;AAAA,EACX,WAAW;AAAA,EACX,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,MAAM;AAAA,EACN,KAAK;AAAA,EACL,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,WAAW;AACb;",
+  "names": []
+}

package/dist/oauth/token-store.js

@@ -0,0 +1,82 @@
+// src/core/oauth/token-store/memory.ts
+var MemoryTokenStore = class {
+  constructor() {
+    this.tokens = /* @__PURE__ */ new Map();
+    this.states = /* @__PURE__ */ new Map();
+    /** State expiration time in ms (10 minutes) */
+    this.stateExpirationMs = 10 * 60 * 1e3;
+  }
+  getTokens(serviceId) {
+    return Promise.resolve(this.tokens.get(serviceId) || null);
+  }
+  setTokens(serviceId, tokens) {
+    this.tokens.set(serviceId, tokens);
+    return Promise.resolve();
+  }
+  clearTokens(serviceId) {
+    this.tokens.delete(serviceId);
+    return Promise.resolve();
+  }
+  getState(state) {
+    const oauthState = this.states.get(state);
+    if (!oauthState) {
+      return Promise.resolve(null);
+    }
+    if (Date.now() - oauthState.createdAt > this.stateExpirationMs) {
+      this.states.delete(state);
+      return Promise.resolve(null);
+    }
+    return Promise.resolve(oauthState);
+  }
+  setState(oauthState) {
+    this.states.set(oauthState.state, oauthState);
+    this.cleanupExpiredStates();
+    return Promise.resolve();
+  }
+  clearState(state) {
+    this.states.delete(state);
+    return Promise.resolve();
+  }
+  /**
+   * Clean up expired states
+   */
+  cleanupExpiredStates() {
+    const now = Date.now();
+    for (const [state, oauthState] of this.states) {
+      if (now - oauthState.createdAt > this.stateExpirationMs) {
+        this.states.delete(state);
+      }
+    }
+  }
+  /**
+   * Get all stored service IDs
+   */
+  getConnectedServices() {
+    return Array.from(this.tokens.keys());
+  }
+  /**
+   * Check if a service is connected
+   */
+  isConnected(serviceId) {
+    const tokens = this.tokens.get(serviceId);
+    if (!tokens)
+      return false;
+    if (tokens.expiresAt && Date.now() > tokens.expiresAt) {
+      return !!tokens.refreshToken;
+    }
+    return true;
+  }
+  /**
+   * Clear all tokens
+   */
+  clearAll() {
+    this.tokens.clear();
+    this.states.clear();
+  }
+};
+var memoryTokenStore = new MemoryTokenStore();
+export {
+  MemoryTokenStore,
+  memoryTokenStore
+};
+//# sourceMappingURL=token-store.js.map

package/dist/oauth/token-store.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/core/oauth/token-store/memory.ts"],
+  "sourcesContent": ["/**\n * In-Memory Token Store\n *\n * Simple in-memory storage for OAuth tokens and state.\n * Suitable for development and single-instance deployments.\n */\n\nimport type { OAuthState, OAuthTokens, TokenStore } from \"../types.ts\";\n\n/**\n * In-memory token store implementation\n */\nexport class MemoryTokenStore implements TokenStore {\n  private tokens: Map<string, OAuthTokens> = new Map();\n  private states: Map<string, OAuthState> = new Map();\n\n  /** State expiration time in ms (10 minutes) */\n  private stateExpirationMs = 10 * 60 * 1000;\n\n  getTokens(serviceId: string): Promise<OAuthTokens | null> {\n    return Promise.resolve(this.tokens.get(serviceId) || null);\n  }\n\n  setTokens(serviceId: string, tokens: OAuthTokens): Promise<void> {\n    this.tokens.set(serviceId, tokens);\n    return Promise.resolve();\n  }\n\n  clearTokens(serviceId: string): Promise<void> {\n    this.tokens.delete(serviceId);\n    return Promise.resolve();\n  }\n\n  getState(state: string): Promise<OAuthState | null> {\n    const oauthState = this.states.get(state);\n    if (!oauthState) {\n      return Promise.resolve(null);\n    }\n\n    // Check if state has expired\n    if (Date.now() - oauthState.createdAt > this.stateExpirationMs) {\n      this.states.delete(state);\n      return Promise.resolve(null);\n    }\n\n    return Promise.resolve(oauthState);\n  }\n\n  setState(oauthState: OAuthState): Promise<void> {\n    this.states.set(oauthState.state, oauthState);\n    this.cleanupExpiredStates();\n    return Promise.resolve();\n  }\n\n  clearState(state: string): Promise<void> {\n    this.states.delete(state);\n    return Promise.resolve();\n  }\n\n  /**\n   * Clean up expired states\n   */\n  private cleanupExpiredStates(): void {\n    const now = Date.now();\n    for (const [state, oauthState] of this.states) {\n      if (now - oauthState.createdAt > this.stateExpirationMs) {\n        this.states.delete(state);\n      }\n    }\n  }\n\n  /**\n   * Get all stored service IDs\n   */\n  getConnectedServices(): string[] {\n    return Array.from(this.tokens.keys());\n  }\n\n  /**\n   * Check if a service is connected\n   */\n  isConnected(serviceId: string): boolean {\n    const tokens = this.tokens.get(serviceId);\n    if (!tokens) return false;\n\n    // Check if token is expired\n    if (tokens.expiresAt && Date.now() > tokens.expiresAt) {\n      // Token expired, but might be refreshable\n      return !!tokens.refreshToken;\n    }\n\n    return true;\n  }\n\n  /**\n   * Clear all tokens\n   */\n  clearAll(): void {\n    this.tokens.clear();\n    this.states.clear();\n  }\n}\n\n/**\n * Default in-memory token store instance\n */\nexport const memoryTokenStore = new MemoryTokenStore();\n"],
+  "mappings": ";AAYO,IAAM,mBAAN,MAA6C;AAAA,EAA7C;AACL,SAAQ,SAAmC,oBAAI,IAAI;AACnD,SAAQ,SAAkC,oBAAI,IAAI;AAGlD;AAAA,SAAQ,oBAAoB,KAAK,KAAK;AAAA;AAAA,EAEtC,UAAU,WAAgD;AACxD,WAAO,QAAQ,QAAQ,KAAK,OAAO,IAAI,SAAS,KAAK,IAAI;AAAA,EAC3D;AAAA,EAEA,UAAU,WAAmB,QAAoC;AAC/D,SAAK,OAAO,IAAI,WAAW,MAAM;AACjC,WAAO,QAAQ,QAAQ;AAAA,EACzB;AAAA,EAEA,YAAY,WAAkC;AAC5C,SAAK,OAAO,OAAO,SAAS;AAC5B,WAAO,QAAQ,QAAQ;AAAA,EACzB;AAAA,EAEA,SAAS,OAA2C;AAClD,UAAM,aAAa,KAAK,OAAO,IAAI,KAAK;AACxC,QAAI,CAAC,YAAY;AACf,aAAO,QAAQ,QAAQ,IAAI;AAAA,IAC7B;AAGA,QAAI,KAAK,IAAI,IAAI,WAAW,YAAY,KAAK,mBAAmB;AAC9D,WAAK,OAAO,OAAO,KAAK;AACxB,aAAO,QAAQ,QAAQ,IAAI;AAAA,IAC7B;AAEA,WAAO,QAAQ,QAAQ,UAAU;AAAA,EACnC;AAAA,EAEA,SAAS,YAAuC;AAC9C,SAAK,OAAO,IAAI,WAAW,OAAO,UAAU;AAC5C,SAAK,qBAAqB;AAC1B,WAAO,QAAQ,QAAQ;AAAA,EACzB;AAAA,EAEA,WAAW,OAA8B;AACvC,SAAK,OAAO,OAAO,KAAK;AACxB,WAAO,QAAQ,QAAQ;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA,EAKQ,uBAA6B;AACnC,UAAM,MAAM,KAAK,IAAI;AACrB,eAAW,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ;AAC7C,UAAI,MAAM,WAAW,YAAY,KAAK,mBAAmB;AACvD,aAAK,OAAO,OAAO,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,uBAAiC;AAC/B,WAAO,MAAM,KAAK,KAAK,OAAO,KAAK,CAAC;AAAA,EACtC;AAAA;AAAA;AAAA;AAAA,EAKA,YAAY,WAA4B;AACtC,UAAM,SAAS,KAAK,OAAO,IAAI,SAAS;AACxC,QAAI,CAAC;AAAQ,aAAO;AAGpB,QAAI,OAAO,aAAa,KAAK,IAAI,IAAI,OAAO,WAAW;AAErD,aAAO,CAAC,CAAC,OAAO;AAAA,IAClB;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,WAAiB;AACf,SAAK,OAAO,MAAM;AAClB,SAAK,OAAO,MAAM;AAAA,EACpB;AACF;AAKO,IAAM,mBAAmB,IAAI,iBAAiB;",
+  "names": []
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "veryfront",
-  "version": "0.0.49",
+  "version": "0.0.51",
   "description": "Zero-config React meta-framework for building agentic AI applications",
   "type": "module",
   "main": "./dist/index.js",
@@ -53,6 +53,30 @@
     "./ai/dev": {
       "types": "./dist/ai/dev.d.ts",
       "import": "./dist/ai/dev.js"
+    },
+    "./ai/workflow": {
+      "types": "./dist/ai/workflow.d.ts",
+      "import": "./dist/ai/workflow.js"
+    },
+    "./ai/workflow/react": {
+      "types": "./dist/ai/workflow-react.d.ts",
+      "import": "./dist/ai/workflow-react.js"
+    },
+    "./oauth": {
+      "types": "./dist/oauth/index.d.ts",
+      "import": "./dist/oauth/index.js"
+    },
+    "./oauth/providers": {
+      "types": "./dist/oauth/providers.d.ts",
+      "import": "./dist/oauth/providers.js"
+    },
+    "./oauth/handlers": {
+      "types": "./dist/oauth/handlers.d.ts",
+      "import": "./dist/oauth/handlers.js"
+    },
+    "./oauth/token-store": {
+      "types": "./dist/oauth/token-store.d.ts",
+      "import": "./dist/oauth/token-store.js"
     }
   },
   "files": [

package/dist/integrations/calendar/files/lib/token-store.ts

@@ -1,113 +0,0 @@
-/**
- * OAuth Token Store
- *
- * Simple in-memory token store for development.
- * Replace with a database or KV store for production.
- */
-
-export interface OAuthToken {
-  accessToken: string;
-  refreshToken?: string;
-  expiresAt?: number;
-  tokenType?: string;
-  scope?: string;
-}
-
-export interface TokenStore {
-  getToken(userId: string, service: string): Promise<OAuthToken | null>;
-  setToken(userId: string, service: string, token: OAuthToken): Promise<void>;
-  revokeToken(userId: string, service: string): Promise<void>;
-  isConnected(userId: string, service: string): Promise<boolean>;
-}
-
-// In-memory storage for development
-// Use globalThis to share across esbuild bundles (each API route is bundled separately)
-const TOKENS_KEY = "__veryfront_oauth_tokens__";
-// deno-lint-ignore no-explicit-any
-const globalStore = globalThis as any;
-const tokens: Map<string, OAuthToken> = globalStore[TOKENS_KEY] ||= new Map<string, OAuthToken>();
-
-function getKey(userId: string, service: string): string {
-  return `${userId}:${service}`;
-}
-
-/**
- * Simple in-memory token store
- *
- * NOTE: This is for development only. In production, use:
- * - Database (Postgres, SQLite, etc.)
- * - KV store (Cloudflare Workers KV, Vercel KV, etc.)
- * - Encrypted file storage
- */
-export const tokenStore: TokenStore = {
-  getToken(userId: string, service: string): Promise<OAuthToken | null> {
-    const key = getKey(userId, service);
-    return Promise.resolve(tokens.get(key) || null);
-  },
-
-  setToken(
-    userId: string,
-    service: string,
-    token: OAuthToken,
-  ): Promise<void> {
-    const key = getKey(userId, service);
-    tokens.set(key, token);
-    return Promise.resolve();
-  },
-
-  revokeToken(userId: string, service: string): Promise<void> {
-    const key = getKey(userId, service);
-    tokens.delete(key);
-    return Promise.resolve();
-  },
-
-  async isConnected(userId: string, service: string): Promise<boolean> {
-    const token = await this.getToken(userId, service);
-    if (!token) return false;
-    // Check if token is not expired (if no expiry, token doesn't expire)
-    return !token.expiresAt || token.expiresAt > Date.now();
-  },
-};
-
-/**
- * Factory function to create a custom token store
- */
-export function createTokenStore(options: {
-  get: (key: string) => Promise<string | null>;
-  set: (key: string, value: string) => Promise<void>;
-  delete: (key: string) => Promise<void>;
-}): TokenStore {
-  return {
-    async getToken(userId: string, service: string): Promise<OAuthToken | null> {
-      const key = getKey(userId, service);
-      const data = await options.get(key);
-      if (!data) return null;
-      try {
-        return JSON.parse(data) as OAuthToken;
-      } catch {
-        return null;
-      }
-    },
-
-    async setToken(
-      userId: string,
-      service: string,
-      token: OAuthToken,
-    ): Promise<void> {
-      const key = getKey(userId, service);
-      await options.set(key, JSON.stringify(token));
-    },
-
-    async revokeToken(userId: string, service: string): Promise<void> {
-      const key = getKey(userId, service);
-      await options.delete(key);
-    },
-
-    async isConnected(userId: string, service: string): Promise<boolean> {
-      const token = await this.getToken(userId, service);
-      if (!token) return false;
-      // Check if token is not expired (if no expiry, token doesn't expire)
-      return !token.expiresAt || token.expiresAt > Date.now();
-    },
-  };
-}

package/dist/integrations/github/files/lib/token-store.ts

@@ -1,113 +0,0 @@
-/**
- * OAuth Token Store
- *
- * Simple in-memory token store for development.
- * Replace with a database or KV store for production.
- */
-
-export interface OAuthToken {
-  accessToken: string;
-  refreshToken?: string;
-  expiresAt?: number;
-  tokenType?: string;
-  scope?: string;
-}
-
-export interface TokenStore {
-  getToken(userId: string, service: string): Promise<OAuthToken | null>;
-  setToken(userId: string, service: string, token: OAuthToken): Promise<void>;
-  revokeToken(userId: string, service: string): Promise<void>;
-  isConnected(userId: string, service: string): Promise<boolean>;
-}
-
-// In-memory storage for development
-// Use globalThis to share across esbuild bundles (each API route is bundled separately)
-const TOKENS_KEY = "__veryfront_oauth_tokens__";
-// deno-lint-ignore no-explicit-any
-const globalStore = globalThis as any;
-const tokens: Map<string, OAuthToken> = globalStore[TOKENS_KEY] ||= new Map<string, OAuthToken>();
-
-function getKey(userId: string, service: string): string {
-  return `${userId}:${service}`;
-}
-
-/**
- * Simple in-memory token store
- *
- * NOTE: This is for development only. In production, use:
- * - Database (Postgres, SQLite, etc.)
- * - KV store (Cloudflare Workers KV, Vercel KV, etc.)
- * - Encrypted file storage
- */
-export const tokenStore: TokenStore = {
-  getToken(userId: string, service: string): Promise<OAuthToken | null> {
-    const key = getKey(userId, service);
-    return Promise.resolve(tokens.get(key) || null);
-  },
-
-  setToken(
-    userId: string,
-    service: string,
-    token: OAuthToken,
-  ): Promise<void> {
-    const key = getKey(userId, service);
-    tokens.set(key, token);
-    return Promise.resolve();
-  },
-
-  revokeToken(userId: string, service: string): Promise<void> {
-    const key = getKey(userId, service);
-    tokens.delete(key);
-    return Promise.resolve();
-  },
-
-  async isConnected(userId: string, service: string): Promise<boolean> {
-    const token = await this.getToken(userId, service);
-    if (!token) return false;
-    // Check if token is not expired (if no expiry, token doesn't expire)
-    return !token.expiresAt || token.expiresAt > Date.now();
-  },
-};
-
-/**
- * Factory function to create a custom token store
- */
-export function createTokenStore(options: {
-  get: (key: string) => Promise<string | null>;
-  set: (key: string, value: string) => Promise<void>;
-  delete: (key: string) => Promise<void>;
-}): TokenStore {
-  return {
-    async getToken(userId: string, service: string): Promise<OAuthToken | null> {
-      const key = getKey(userId, service);
-      const data = await options.get(key);
-      if (!data) return null;
-      try {
-        return JSON.parse(data) as OAuthToken;
-      } catch {
-        return null;
-      }
-    },
-
-    async setToken(
-      userId: string,
-      service: string,
-      token: OAuthToken,
-    ): Promise<void> {
-      const key = getKey(userId, service);
-      await options.set(key, JSON.stringify(token));
-    },
-
-    async revokeToken(userId: string, service: string): Promise<void> {
-      const key = getKey(userId, service);
-      await options.delete(key);
-    },
-
-    async isConnected(userId: string, service: string): Promise<boolean> {
-      const token = await this.getToken(userId, service);
-      if (!token) return false;
-      // Check if token is not expired (if no expiry, token doesn't expire)
-      return !token.expiresAt || token.expiresAt > Date.now();
-    },
-  };
-}

package/dist/integrations/gmail/files/lib/oauth.ts

@@ -1,145 +0,0 @@
-/**
- * OAuth Helper Functions
- *
- * Provides utilities for OAuth 2.0 authorization flows.
- */
-
-import { type OAuthToken, tokenStore } from "./token-store.ts";
-
-export interface OAuthProvider {
-  name: string;
-  authorizationUrl: string;
-  tokenUrl: string;
-  clientId: string;
-  clientSecret: string;
-  scopes: string[];
-  callbackPath: string;
-}
-
-/**
- * Generate OAuth authorization URL
- */
-export function getAuthorizationUrl(
-  provider: OAuthProvider,
-  state: string,
-  redirectUri: string,
-): string {
-  const params = new URLSearchParams({
-    client_id: provider.clientId,
-    redirect_uri: redirectUri,
-    response_type: "code",
-    scope: provider.scopes.join(" "),
-    state,
-    access_type: "offline",
-    prompt: "consent",
-  });
-
-  return `${provider.authorizationUrl}?${params.toString()}`;
-}
-
-/**
- * Exchange authorization code for tokens
- */
-export async function exchangeCodeForTokens(
-  provider: OAuthProvider,
-  code: string,
-  redirectUri: string,
-): Promise<OAuthToken> {
-  const response = await fetch(provider.tokenUrl, {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/x-www-form-urlencoded",
-    },
-    body: new URLSearchParams({
-      client_id: provider.clientId,
-      client_secret: provider.clientSecret,
-      code,
-      grant_type: "authorization_code",
-      redirect_uri: redirectUri,
-    }),
-  });
-
-  if (!response.ok) {
-    const error = await response.text();
-    throw new Error(`Token exchange failed: ${response.status} - ${error}`);
-  }
-
-  const data = await response.json();
-
-  return {
-    accessToken: data.access_token,
-    refreshToken: data.refresh_token,
-    expiresAt: data.expires_in ? Date.now() + (data.expires_in * 1000) : undefined,
-    tokenType: data.token_type || "Bearer",
-    scope: data.scope,
-  };
-}
-
-/**
- * Refresh an expired access token
- */
-export async function refreshAccessToken(
-  provider: OAuthProvider,
-  refreshToken: string,
-): Promise<OAuthToken> {
-  const response = await fetch(provider.tokenUrl, {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/x-www-form-urlencoded",
-    },
-    body: new URLSearchParams({
-      client_id: provider.clientId,
-      client_secret: provider.clientSecret,
-      refresh_token: refreshToken,
-      grant_type: "refresh_token",
-    }),
-  });
-
-  if (!response.ok) {
-    const error = await response.text();
-    throw new Error(`Token refresh failed: ${response.status} - ${error}`);
-  }
-
-  const data = await response.json();
-
-  return {
-    accessToken: data.access_token,
-    refreshToken: data.refresh_token || refreshToken,
-    expiresAt: data.expires_in ? Date.now() + (data.expires_in * 1000) : undefined,
-    tokenType: data.token_type || "Bearer",
-    scope: data.scope,
-  };
-}
-
-/**
- * Get a valid access token, refreshing if necessary
- */
-export async function getValidToken(
-  provider: OAuthProvider,
-  userId: string,
-  service: string,
-): Promise<string | null> {
-  const token = await tokenStore.getToken(userId, service);
-
-  if (!token) {
-    return null;
-  }
-
-  // Check if token is expired (with 5 minute buffer)
-  // If no expiresAt, token doesn't expire (e.g., GitHub)
-  const isExpired = token.expiresAt ? token.expiresAt < Date.now() + 5 * 60 * 1000 : false;
-
-  if (isExpired && token.refreshToken) {
-    try {
-      const newToken = await refreshAccessToken(provider, token.refreshToken);
-      await tokenStore.setToken(userId, service, newToken);
-      return newToken.accessToken;
-    } catch {
-      // Refresh failed, user needs to re-authorize
-      await tokenStore.revokeToken(userId, service);
-      return null;
-    }
-  }
-
-  return token.accessToken;
-}