@12ui/design 0.2.0

package/dist/credential-setup.js

@@ -0,0 +1,242 @@
+import { normalizeConversionOrigin } from './config.js';
+import { readStoredConversionCredentials, resolveCredentialFile, resolveLegacyCredentialFile, removeStoredConversionCredentials, writeStoredConversionCredentials, } from './credential-store.js';
+import { authenticateTwelveUiDevice, normalizeLoginOrigin, revokeTwelveUiCredential, TWELVE_UI_DEVICE_SCOPES, verifyTwelveUiCredential, } from './login-auth.js';
+const errorValue = (value) => (value instanceof Error ? value : new Error(String(value)));
+const isCredentialRejection = (error) => (error instanceof Error
+    && /required scopes?|credential|invalid[_ ](?:api[_ ])?key|unauthori[sz]ed|forbidden|HTTP (?:401|403)/iu
+        .test(error.message));
+const throwAfterReplacementCleanup = async (args) => {
+    try {
+        await revokeTwelveUiCredential({
+            apiKey: args.apiKey,
+            loginOrigin: args.loginOrigin,
+            fetch: args.fetch,
+        });
+    }
+    catch (cleanupError) {
+        throw new AggregateError([errorValue(args.error), errorValue(cleanupError)], `${args.message}; the replacement credential could not be revoked`);
+    }
+    throw args.error;
+};
+export const prepareConversionCredentials = async (args) => {
+    const credentialFile = resolveCredentialFile();
+    const legacyCredentialFile = resolveLegacyCredentialFile();
+    const [canonicalStored, legacyStored] = await Promise.all([
+        readStoredConversionCredentials(credentialFile),
+        legacyCredentialFile
+            ? readStoredConversionCredentials(legacyCredentialFile)
+            : Promise.resolve(null),
+    ]);
+    if (canonicalStored
+        && legacyStored
+        && (canonicalStored.origin !== legacyStored.origin
+            || canonicalStored.apiKey !== legacyStored.apiKey)) {
+        throw new Error(`Conflicting 12ui credential files exist at ${credentialFile} and ${legacyCredentialFile}.`
+            + ' Resolve the conflict explicitly before installing; neither file was changed.');
+    }
+    const stored = canonicalStored ?? legacyStored;
+    const removeMigratedLegacy = async () => {
+        if (legacyCredentialFile && legacyStored) {
+            await removeStoredConversionCredentials(legacyCredentialFile);
+        }
+    };
+    const prepared = (options) => {
+        let state = 'pending';
+        const restoreCanonical = async () => {
+            if (canonicalStored) {
+                await writeStoredConversionCredentials(canonicalStored, credentialFile);
+            }
+            else {
+                await removeStoredConversionCredentials(credentialFile);
+            }
+        };
+        const revokeReplacement = async () => {
+            if (!options.replacementIsRemote)
+                return;
+            await revokeTwelveUiCredential({
+                apiKey: options.replacement.apiKey,
+                loginOrigin,
+                fetch: args.fetch,
+            });
+        };
+        return {
+            result: options.result,
+            commit: async () => {
+                if (state === 'committed')
+                    return options.result;
+                if (state === 'rolled_back') {
+                    throw new Error('Cannot commit rolled-back 12UI credentials');
+                }
+                try {
+                    await writeStoredConversionCredentials(options.replacement, credentialFile);
+                }
+                catch (error) {
+                    state = 'rolled_back';
+                    if (!options.replacementIsRemote)
+                        throw error;
+                    return throwAfterReplacementCleanup({
+                        apiKey: options.replacement.apiKey,
+                        error,
+                        fetch: args.fetch,
+                        loginOrigin,
+                        message: 'The replacement credential could not be stored',
+                    });
+                }
+                try {
+                    await removeMigratedLegacy();
+                }
+                catch (migrationError) {
+                    state = 'rolled_back';
+                    try {
+                        await restoreCanonical();
+                    }
+                    catch (rollbackError) {
+                        throw new AggregateError([errorValue(migrationError), errorValue(rollbackError)], 'Credential migration failed and the canonical credential file could not be restored');
+                    }
+                    if (options.replacementIsRemote) {
+                        try {
+                            await revokeReplacement();
+                        }
+                        catch (cleanupError) {
+                            throw new AggregateError([errorValue(migrationError), errorValue(cleanupError)], 'Credential migration failed; prior files were restored, but the replacement'
+                                + ' credential could not be revoked');
+                        }
+                    }
+                    throw migrationError;
+                }
+                if (options.credentialToUpgrade) {
+                    try {
+                        await revokeTwelveUiCredential({
+                            apiKey: options.credentialToUpgrade.apiKey,
+                            loginOrigin,
+                            fetch: args.fetch,
+                        });
+                    }
+                    catch (retirementError) {
+                        state = 'rolled_back';
+                        try {
+                            await writeStoredConversionCredentials(options.credentialToUpgrade, credentialFile);
+                        }
+                        catch (rollbackError) {
+                            throw new AggregateError([errorValue(retirementError), errorValue(rollbackError)], 'The replacement credential remains stored and usable, but the previous credential'
+                                + ' could not be revoked and the credential file could not be rolled back');
+                        }
+                        try {
+                            await revokeReplacement();
+                        }
+                        catch (cleanupError) {
+                            throw new AggregateError([errorValue(retirementError), errorValue(cleanupError)], 'Credential scope upgrade failed; the previous credential was restored, but the'
+                                + ' replacement credential could not be revoked');
+                        }
+                        throw new Error('Credential scope upgrade failed while retiring the previous credential;'
+                            + ' the previous credential was restored and the replacement was revoked', { cause: retirementError });
+                    }
+                }
+                state = 'committed';
+                return options.result;
+            },
+            rollback: async () => {
+                if (state !== 'pending')
+                    return;
+                state = 'rolled_back';
+                await revokeReplacement();
+            },
+        };
+    };
+    const fromFlag = args.apiKey?.trim();
+    const fromEnvironment = process.env.TWELVE_UI_API_KEY?.trim();
+    const supplied = fromFlag || fromEnvironment;
+    const origin = normalizeConversionOrigin(args.origin
+        ?? process.env.TWELVE_UI_ORIGIN
+        ?? stored?.origin
+        ?? 'https://12ui.com');
+    const loginOrigin = normalizeLoginOrigin(args.loginOrigin);
+    const requiredScopes = args.requiredScopes ?? ['design.convert'];
+    const verify = (apiKey, scopes = requiredScopes) => verifyTwelveUiCredential({
+        apiKey,
+        loginOrigin,
+        requiredScopes: scopes,
+        fetch: args.fetch,
+    });
+    const verifyStored = async (apiKey) => {
+        const preferred = [
+            ...requiredScopes,
+            ...TWELVE_UI_DEVICE_SCOPES,
+        ].filter((scope, index, scopes) => scopes.indexOf(scope) === index);
+        for (const scope of preferred) {
+            try {
+                return await verify(apiKey, [scope]);
+            }
+            catch (error) {
+                if (!isCredentialRejection(error))
+                    throw error;
+                // A valid credential can have only the other supported scope. Try each
+                // scope before treating the stored key as stale and reconnecting.
+            }
+        }
+        return null;
+    };
+    if (supplied) {
+        await verify(supplied);
+        const result = {
+            credentialFile,
+            origin,
+            source: fromFlag ? 'flag' : 'environment',
+        };
+        return prepared({
+            replacement: { version: 1, origin, apiKey: supplied },
+            result,
+        });
+    }
+    let credentialToUpgrade = null;
+    if (stored && !args.forceAuthentication) {
+        const verification = await verifyStored(stored.apiKey);
+        if (verification && requiredScopes.every((scope) => verification.scopes.includes(scope))) {
+            return prepared({
+                // Rewriting on commit also normalizes an accepted canonical file back
+                // to mode 0600 instead of trusting permissions that may have drifted.
+                replacement: { ...stored, origin },
+                result: { credentialFile, origin, source: 'stored' },
+            });
+        }
+        if (verification)
+            credentialToUpgrade = stored;
+    }
+    const credential = await authenticateTwelveUiDevice({
+        loginOrigin,
+        clientName: '12ui CLI',
+        deviceName: args.keyName,
+        scopes: requiredScopes,
+        onApprovalUrl: args.onApprovalUrl,
+        openApproval: args.openApproval,
+        fetch: args.fetch,
+    });
+    try {
+        await verify(credential.apiKey);
+    }
+    catch (error) {
+        return throwAfterReplacementCleanup({
+            apiKey: credential.apiKey,
+            error,
+            fetch: args.fetch,
+            loginOrigin,
+            message: 'The replacement credential failed verification',
+        });
+    }
+    const replacement = {
+        version: 1,
+        origin,
+        apiKey: credential.apiKey,
+    };
+    return prepared({
+        replacement,
+        result: { credentialFile, origin, source: 'browser' },
+        replacementIsRemote: true,
+        credentialToUpgrade,
+    });
+};
+export const setUpConversionCredentials = async (args) => {
+    const transaction = await prepareConversionCredentials(args);
+    return transaction.commit();
+};
+//# sourceMappingURL=credential-setup.js.map

package/dist/credential-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-setup.js","sourceRoot":"","sources":["../src/credential-setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EACL,+BAA+B,EAC/B,qBAAqB,EACrB,2BAA2B,EAC3B,iCAAiC,EACjC,gCAAgC,GACjC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,GAEzB,MAAM,iBAAiB,CAAC;AAgBzB,MAAM,UAAU,GAAG,CAAC,KAAc,EAAS,EAAE,CAAC,CAC5C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,KAAc,EAAW,EAAE,CAAC,CACzD,KAAK,YAAY,KAAK;OACnB,qGAAqG;SACrG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CACvB,CAAC;AAEF,MAAM,4BAA4B,GAAG,KAAK,EAAE,IAM3C,EAAkB,EAAE;IACnB,IAAI,CAAC;QACH,MAAM,wBAAwB,CAAC;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,YAAY,EAAE,CAAC;QACtB,MAAM,IAAI,cAAc,CACtB,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC,EAClD,GAAG,IAAI,CAAC,OAAO,mDAAmD,CACnE,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,CAAC,KAAK,CAAC;AACnB,CAAC,CAAC;AAcF,MAAM,CAAC,MAAM,4BAA4B,GAAG,KAAK,EAC/C,IAA4B,EACM,EAAE;IACpC,MAAM,cAAc,GAAG,qBAAqB,EAAE,CAAC;IAC/C,MAAM,oBAAoB,GAAG,2BAA2B,EAAE,CAAC;IAC3D,MAAM,CAAC,eAAe,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACxD,+BAA+B,CAAC,cAAc,CAAC;QAC/C,oBAAoB;YAClB,CAAC,CAAC,+BAA+B,CAAC,oBAAoB,CAAC;YACvD,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;KAC1B,CAAC,CAAC;IACH,IACE,eAAe;WACZ,YAAY;WACZ,CACD,eAAe,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM;eAC3C,eAAe,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM,CAClD,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,8CAA8C,cAAc,QAAQ,oBAAoB,GAAG;cACzF,+EAA+E,CAClF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,eAAe,IAAI,YAAY,CAAC;IAC/C,MAAM,oBAAoB,GAAG,KAAK,IAAmB,EAAE;QACrD,IAAI,oBAAoB,IAAI,YAAY,EAAE,CAAC;YACzC,MAAM,iCAAiC,CAAC,oBAAoB,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,OASjB,EAA2B,EAAE;QAC5B,IAAI,KAAK,GAA4C,SAAS,CAAC;QAC/D,MAAM,gBAAgB,GAAG,KAAK,IAAmB,EAAE;YACjD,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,gCAAgC,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;YAC1E,CAAC;iBAAM,CAAC;gBACN,MAAM,iCAAiC,CAAC,cAAc,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC,CAAC;QACF,MAAM,iBAAiB,GAAG,KAAK,IAAmB,EAAE;YAClD,IAAI,CAAC,OAAO,CAAC,mBAAmB;gBAAE,OAAO;YACzC,MAAM,wBAAwB,CAAC;gBAC7B,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,MAAM;gBAClC,WAAW;gBACX,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CAAC;QACL,CAAC,CAAC;QACF,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,KAAK,IAAI,EAAE;gBACjB,IAAI,KAAK,KAAK,WAAW;oBAAE,OAAO,OAAO,CAAC,MAAM,CAAC;gBACjD,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;oBAC5B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;gBAChE,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,gCAAgC,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;gBAC9E,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,KAAK,GAAG,aAAa,CAAC;oBACtB,IAAI,CAAC,OAAO,CAAC,mBAAmB;wBAAE,MAAM,KAAK,CAAC;oBAC9C,OAAO,4BAA4B,CAAC;wBAClC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,MAAM;wBAClC,KAAK;wBACL,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,WAAW;wBACX,OAAO,EAAE,gDAAgD;qBAC1D,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,oBAAoB,EAAE,CAAC;gBAC/B,CAAC;gBAAC,OAAO,cAAc,EAAE,CAAC;oBACxB,KAAK,GAAG,aAAa,CAAC;oBACtB,IAAI,CAAC;wBACH,MAAM,gBAAgB,EAAE,CAAC;oBAC3B,CAAC;oBAAC,OAAO,aAAa,EAAE,CAAC;wBACvB,MAAM,IAAI,cAAc,CACtB,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC,EACvD,qFAAqF,CACtF,CAAC;oBACJ,CAAC;oBACD,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;wBAChC,IAAI,CAAC;4BACH,MAAM,iBAAiB,EAAE,CAAC;wBAC5B,CAAC;wBAAC,OAAO,YAAY,EAAE,CAAC;4BACtB,MAAM,IAAI,cAAc,CACtB,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC,EACtD,6EAA6E;kCAC3E,kCAAkC,CACrC,CAAC;wBACJ,CAAC;oBACH,CAAC;oBACD,MAAM,cAAc,CAAC;gBACvB,CAAC;gBACD,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;oBAChC,IAAI,CAAC;wBACH,MAAM,wBAAwB,CAAC;4BAC7B,MAAM,EAAE,OAAO,CAAC,mBAAmB,CAAC,MAAM;4BAC1C,WAAW;4BACX,KAAK,EAAE,IAAI,CAAC,KAAK;yBAClB,CAAC,CAAC;oBACL,CAAC;oBAAC,OAAO,eAAe,EAAE,CAAC;wBACzB,KAAK,GAAG,aAAa,CAAC;wBACtB,IAAI,CAAC;4BACH,MAAM,gCAAgC,CAAC,OAAO,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC;wBACtF,CAAC;wBAAC,OAAO,aAAa,EAAE,CAAC;4BACvB,MAAM,IAAI,cAAc,CACtB,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC,EACxD,mFAAmF;kCACjF,wEAAwE,CAC3E,CAAC;wBACJ,CAAC;wBACD,IAAI,CAAC;4BACH,MAAM,iBAAiB,EAAE,CAAC;wBAC5B,CAAC;wBAAC,OAAO,YAAY,EAAE,CAAC;4BACtB,MAAM,IAAI,cAAc,CACtB,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC,EACvD,gFAAgF;kCAC9E,8CAA8C,CACjD,CAAC;wBACJ,CAAC;wBACD,MAAM,IAAI,KAAK,CACb,yEAAyE;8BACvE,uEAAuE,EACzE,EAAE,KAAK,EAAE,eAAe,EAAE,CAC3B,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,KAAK,GAAG,WAAW,CAAC;gBACpB,OAAO,OAAO,CAAC,MAAM,CAAC;YACxB,CAAC;YACD,QAAQ,EAAE,KAAK,IAAI,EAAE;gBACnB,IAAI,KAAK,KAAK,SAAS;oBAAE,OAAO;gBAChC,KAAK,GAAG,aAAa,CAAC;gBACtB,MAAM,iBAAiB,EAAE,CAAC;YAC5B,CAAC;SACF,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;IACrC,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;IAC9D,MAAM,QAAQ,GAAG,QAAQ,IAAI,eAAe,CAAC;IAC7C,MAAM,MAAM,GAAG,yBAAyB,CACtC,IAAI,CAAC,MAAM;WACN,OAAO,CAAC,GAAG,CAAC,gBAAgB;WAC5B,MAAM,EAAE,MAAM;WACd,kBAAkB,CACxB,CAAC;IACF,MAAM,WAAW,GAAG,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,CACb,MAAc,EACd,SAAyC,cAAc,EACvD,EAAE,CAAC,wBAAwB,CAAC;QAC5B,MAAM;QACN,WAAW;QACX,cAAc,EAAE,MAAM;QACtB,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,KAAK,EACxB,MAAc,EACwD,EAAE;QACxE,MAAM,SAAS,GAAG;YAChB,GAAG,cAAc;YACjB,GAAG,uBAAuB;SAC3B,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC;QACpE,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,OAAO,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;YACvC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC;oBAAE,MAAM,KAAK,CAAC;gBAC/C,uEAAuE;gBACvE,kEAAkE;YACpE,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvB,MAAM,MAAM,GAAG;YACb,cAAc;YACd,MAAM;YACN,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa;SACV,CAAC;QAClC,OAAO,QAAQ,CAAC;YACd,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;YACrD,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IACD,IAAI,mBAAmB,GAAkB,IAAI,CAAC;IAC9C,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACxC,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,YAAY,IAAI,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACzF,OAAO,QAAQ,CAAC;gBACd,sEAAsE;gBACtE,sEAAsE;gBACtE,WAAW,EAAE,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE;gBAClC,MAAM,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;aACrD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,YAAY;YAAE,mBAAmB,GAAG,MAAM,CAAC;IACjD,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,0BAA0B,CAAC;QAClD,WAAW;QACX,UAAU,EAAE,UAAU;QACtB,UAAU,EAAE,IAAI,CAAC,OAAO;QACxB,MAAM,EAAE,cAAc;QACtB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,4BAA4B,CAAC;YAClC,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,KAAK;YACL,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW;YACX,OAAO,EAAE,gDAAgD;SAC1D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,WAAW,GAAG;QAClB,OAAO,EAAE,CAAC;QACV,MAAM;QACN,MAAM,EAAE,UAAU,CAAC,MAAM;KACjB,CAAC;IACX,OAAO,QAAQ,CAAC;QACd,WAAW;QACX,MAAM,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE;QACrD,mBAAmB,EAAE,IAAI;QACzB,mBAAmB;KACpB,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,EAC7C,IAA4B,EACI,EAAE;IAClC,MAAM,WAAW,GAAG,MAAM,4BAA4B,CAAC,IAAI,CAAC,CAAC;IAC7D,OAAO,WAAW,CAAC,MAAM,EAAE,CAAC;AAC9B,CAAC,CAAC"}

package/dist/credential-store.d.ts

@@ -0,0 +1,12 @@
+export type StoredConversionCredentials = {
+    version: 1;
+    origin: string;
+    apiKey: string;
+};
+export declare const resolveCredentialFile: (environment?: NodeJS.ProcessEnv, homeDirectory?: string) => string;
+export declare const resolveLegacyCredentialFile: (environment?: NodeJS.ProcessEnv, homeDirectory?: string) => string | null;
+export declare const readStoredConversionCredentialsSync: (filePath?: string) => StoredConversionCredentials | null;
+export declare const readStoredConversionCredentials: (filePath?: string) => Promise<StoredConversionCredentials | null>;
+export declare const writeStoredConversionCredentials: (credentials: StoredConversionCredentials, filePath?: string) => Promise<void>;
+export declare const removeStoredConversionCredentials: (filePath?: string) => Promise<boolean>;
+//# sourceMappingURL=credential-store.d.ts.map

package/dist/credential-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-store.d.ts","sourceRoot":"","sources":["../src/credential-store.ts"],"names":[],"mappings":"AAaA,MAAM,MAAM,2BAA2B,GAAG;IACxC,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAgCF,eAAO,MAAM,qBAAqB,GAChC,cAAa,MAAM,CAAC,UAAwB,EAC5C,sBAA4B,KAC3B,MAOF,CAAC;AAEF,eAAO,MAAM,2BAA2B,GACtC,cAAa,MAAM,CAAC,UAAwB,EAC5C,sBAA4B,KAC3B,MAAM,GAAG,IAMX,CAAC;AAEF,eAAO,MAAM,mCAAmC,GAC9C,iBAAkC,KACjC,2BAA2B,GAAG,IAShC,CAAC;AAEF,eAAO,MAAM,+BAA+B,GAC1C,iBAAkC,KACjC,OAAO,CAAC,2BAA2B,GAAG,IAAI,CAS5C,CAAC;AAEF,eAAO,MAAM,gCAAgC,GAC3C,aAAa,2BAA2B,EACxC,iBAAkC,KACjC,OAAO,CAAC,IAAI,CAiBd,CAAC;AAEF,eAAO,MAAM,iCAAiC,GAC5C,iBAAkC,KACjC,OAAO,CAAC,OAAO,CAQjB,CAAC"}

package/dist/credential-store.js

@@ -0,0 +1,103 @@
+import { randomUUID } from 'node:crypto';
+import { chmod, mkdir, readFile, rename, rm, writeFile, } from 'node:fs/promises';
+import { readFileSync } from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+const parseStoredCredentials = (source, filePath) => {
+    let value;
+    try {
+        value = JSON.parse(source);
+    }
+    catch (error) {
+        throw new Error(`Invalid 12ui credential file ${filePath}: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    if (value === null
+        || typeof value !== 'object'
+        || Array.isArray(value)
+        || value.version !== 1
+        || typeof value.origin !== 'string'
+        || typeof value.apiKey !== 'string') {
+        throw new Error(`Invalid 12ui credential file ${filePath}`);
+    }
+    const credentials = value;
+    if (!credentials.origin.trim() || !credentials.apiKey.trim()) {
+        throw new Error(`Invalid 12ui credential file ${filePath}`);
+    }
+    return {
+        version: 1,
+        origin: credentials.origin.trim(),
+        apiKey: credentials.apiKey.trim(),
+    };
+};
+export const resolveCredentialFile = (environment = process.env, homeDirectory = os.homedir()) => {
+    const explicit = environment.TWELVE_UI_CONFIG?.trim();
+    if (explicit)
+        return path.resolve(explicit);
+    const configRoot = environment.XDG_CONFIG_HOME?.trim()
+        ? path.resolve(environment.XDG_CONFIG_HOME)
+        : path.join(homeDirectory, '.config');
+    return path.join(configRoot, '12ui', 'credentials.json');
+};
+export const resolveLegacyCredentialFile = (environment = process.env, homeDirectory = os.homedir()) => {
+    if (environment.TWELVE_UI_CONFIG?.trim())
+        return null;
+    const configRoot = environment.XDG_CONFIG_HOME?.trim()
+        ? path.resolve(environment.XDG_CONFIG_HOME)
+        : path.join(homeDirectory, '.config');
+    return path.join(configRoot, 'just-every', '12ui', 'credentials.json');
+};
+export const readStoredConversionCredentialsSync = (filePath = resolveCredentialFile()) => {
+    let source;
+    try {
+        source = readFileSync(filePath, 'utf8');
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return null;
+        throw error;
+    }
+    return parseStoredCredentials(source, filePath);
+};
+export const readStoredConversionCredentials = async (filePath = resolveCredentialFile()) => {
+    let source;
+    try {
+        source = await readFile(filePath, 'utf8');
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return null;
+        throw error;
+    }
+    return parseStoredCredentials(source, filePath);
+};
+export const writeStoredConversionCredentials = async (credentials, filePath = resolveCredentialFile()) => {
+    const parent = path.dirname(filePath);
+    await mkdir(parent, { recursive: true, mode: 0o700 });
+    await chmod(parent, 0o700);
+    const temporary = path.join(parent, `.credentials-${randomUUID()}.tmp`);
+    try {
+        await writeFile(temporary, `${JSON.stringify(credentials, null, 2)}\n`, {
+            encoding: 'utf8',
+            flag: 'wx',
+            mode: 0o600,
+        });
+        await rename(temporary, filePath);
+        await chmod(filePath, 0o600);
+    }
+    catch (error) {
+        await rm(temporary, { force: true });
+        throw error;
+    }
+};
+export const removeStoredConversionCredentials = async (filePath = resolveCredentialFile()) => {
+    try {
+        await rm(filePath);
+        return true;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return false;
+        throw error;
+    }
+};
+//# sourceMappingURL=credential-store.js.map

package/dist/credential-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-store.js","sourceRoot":"","sources":["../src/credential-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,KAAK,EACL,KAAK,EACL,QAAQ,EACR,MAAM,EACN,EAAE,EACF,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAQ7B,MAAM,sBAAsB,GAAG,CAAC,MAAc,EAAE,QAAgB,EAA+B,EAAE;IAC/F,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,KACtD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CAAC,CAAC;IACN,CAAC;IACD,IACE,KAAK,KAAK,IAAI;WACX,OAAO,KAAK,KAAK,QAAQ;WACzB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WACnB,KAAiC,CAAC,OAAO,KAAK,CAAC;WAChD,OAAQ,KAAiC,CAAC,MAAM,KAAK,QAAQ;WAC7D,OAAQ,KAAiC,CAAC,MAAM,KAAK,QAAQ,EAChE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,WAAW,GAAG,KAAoC,CAAC;IACzD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO;QACL,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE;QACjC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE;KAClC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,cAAiC,OAAO,CAAC,GAAG,EAC5C,aAAa,GAAG,EAAE,CAAC,OAAO,EAAE,EACpB,EAAE;IACV,MAAM,QAAQ,GAAG,WAAW,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC;IACtD,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,WAAW,CAAC,eAAe,EAAE,IAAI,EAAE;QACpD,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,eAAe,CAAC;QAC3C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;AAC3D,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CACzC,cAAiC,OAAO,CAAC,GAAG,EAC5C,aAAa,GAAG,EAAE,CAAC,OAAO,EAAE,EACb,EAAE;IACjB,IAAI,WAAW,CAAC,gBAAgB,EAAE,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IACtD,MAAM,UAAU,GAAG,WAAW,CAAC,eAAe,EAAE,IAAI,EAAE;QACpD,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,eAAe,CAAC;QAC3C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;AACzE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mCAAmC,GAAG,CACjD,QAAQ,GAAG,qBAAqB,EAAE,EACE,EAAE;IACtC,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,sBAAsB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAClD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,+BAA+B,GAAG,KAAK,EAClD,QAAQ,GAAG,qBAAqB,EAAE,EACW,EAAE;IAC/C,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,sBAAsB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAClD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gCAAgC,GAAG,KAAK,EACnD,WAAwC,EACxC,QAAQ,GAAG,qBAAqB,EAAE,EACnB,EAAE;IACjB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,MAAM,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,UAAU,EAAE,MAAM,CAAC,CAAC;IACxE,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YACtE,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAClC,MAAM,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iCAAiC,GAAG,KAAK,EACpD,QAAQ,GAAG,qBAAqB,EAAE,EAChB,EAAE;IACpB,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC"}

package/dist/idempotency-key.d.ts

@@ -0,0 +1,2 @@
+export declare const normalizeOptionalIdempotencyKey: (value: unknown, label?: string) => string | undefined;
+//# sourceMappingURL=idempotency-key.d.ts.map

package/dist/idempotency-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency-key.d.ts","sourceRoot":"","sources":["../src/idempotency-key.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,+BAA+B,GAC1C,OAAO,OAAO,EACd,cAAwB,KACvB,MAAM,GAAG,SAiBX,CAAC"}

package/dist/idempotency-key.js

@@ -0,0 +1,19 @@
+const MAX_IDEMPOTENCY_KEY_LENGTH = 128;
+const CONTROL_CHARACTER = /[\u0000-\u001f\u007f]/;
+export const normalizeOptionalIdempotencyKey = (value, label = 'idempotencyKey') => {
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== 'string') {
+        throw new Error(`${label} must be a string`);
+    }
+    const normalized = value.trim();
+    if (!normalized) {
+        throw new Error(`${label} must not be empty`);
+    }
+    if (normalized.length > MAX_IDEMPOTENCY_KEY_LENGTH
+        || CONTROL_CHARACTER.test(normalized)) {
+        throw new Error(`${label} must be at most 128 printable characters`);
+    }
+    return normalized;
+};
+//# sourceMappingURL=idempotency-key.js.map

package/dist/idempotency-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency-key.js","sourceRoot":"","sources":["../src/idempotency-key.ts"],"names":[],"mappings":"AAAA,MAAM,0BAA0B,GAAG,GAAG,CAAC;AACvC,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;AAElD,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAC7C,KAAc,EACd,KAAK,GAAG,gBAAgB,EACJ,EAAE;IACtB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAChD,CAAC;IACD,IACE,UAAU,CAAC,MAAM,GAAG,0BAA0B;WAC3C,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,EACrC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2CAA2C,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC"}

package/dist/image-generation-evidence.d.ts

@@ -0,0 +1,26 @@
+export type ImageGenerationAttempt = {
+    schemaVersion: 1;
+    status: 'prepared' | 'dispatched' | 'succeeded' | 'failed';
+    idempotencyKey: string;
+    provider: 'codex' | 'openai';
+    model: 'codex-gpt-image-2' | 'gpt-image-2';
+    providerEvidence: {
+        codexVersion?: string;
+        keySource?: 'process' | 'project-env';
+    };
+    promptFile: string;
+    promptSha256: string;
+    references: Array<{
+        path: string;
+        sha256: string;
+    }>;
+    outputPath: string;
+    preparedAt: string;
+    dispatchedAt?: string;
+    completedAt?: string;
+    outputSha256?: string;
+    error?: string;
+};
+export declare const imageAttemptPath: (outputPath: string) => string;
+export declare const writeImageGenerationAttempt: (filePath: string, attempt: ImageGenerationAttempt, exclusive?: boolean) => Promise<void>;
+//# sourceMappingURL=image-generation-evidence.d.ts.map

package/dist/image-generation-evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-generation-evidence.d.ts","sourceRoot":"","sources":["../src/image-generation-evidence.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,sBAAsB,GAAG;IACnC,aAAa,EAAE,CAAC,CAAC;IACjB,MAAM,EAAE,UAAU,GAAG,YAAY,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC3D,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC7B,KAAK,EAAE,mBAAmB,GAAG,aAAa,CAAC;IAC3C,gBAAgB,EAAE;QAChB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,SAAS,CAAC,EAAE,SAAS,GAAG,aAAa,CAAC;KACvC,CAAC;IACF,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAI,YAAY,MAAM,KAAG,MAAsC,CAAC;AAE7F,eAAO,MAAM,2BAA2B,GACtC,UAAU,MAAM,EAChB,SAAS,sBAAsB,EAC/B,mBAAiB,KAChB,OAAO,CAAC,IAAI,CAqBd,CAAC"}

package/dist/image-generation-evidence.js

@@ -0,0 +1,28 @@
+import { randomUUID } from 'node:crypto';
+import { mkdir, rename, rm, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+export const imageAttemptPath = (outputPath) => `${outputPath}.attempt.json`;
+export const writeImageGenerationAttempt = async (filePath, attempt, exclusive = false) => {
+    await mkdir(path.dirname(filePath), { recursive: true });
+    if (exclusive) {
+        await writeFile(filePath, `${JSON.stringify(attempt, null, 2)}\n`, {
+            encoding: 'utf8',
+            flag: 'wx',
+            mode: 0o600,
+        });
+        return;
+    }
+    const temporary = `${filePath}.${randomUUID()}.tmp`;
+    try {
+        await writeFile(temporary, `${JSON.stringify(attempt, null, 2)}\n`, {
+            encoding: 'utf8',
+            flag: 'wx',
+            mode: 0o600,
+        });
+        await rename(temporary, filePath);
+    }
+    finally {
+        await rm(temporary, { force: true });
+    }
+};
+//# sourceMappingURL=image-generation-evidence.js.map

package/dist/image-generation-evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-generation-evidence.js","sourceRoot":"","sources":["../src/image-generation-evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,IAAI,MAAM,WAAW,CAAC;AAuB7B,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,UAAkB,EAAU,EAAE,CAAC,GAAG,UAAU,eAAe,CAAC;AAE7F,MAAM,CAAC,MAAM,2BAA2B,GAAG,KAAK,EAC9C,QAAgB,EAChB,OAA+B,EAC/B,SAAS,GAAG,KAAK,EACF,EAAE;IACjB,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YACjE,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,QAAQ,IAAI,UAAU,EAAE,MAAM,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YAClE,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACpC,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;AACH,CAAC,CAAC"}

package/dist/image-output-width.d.ts

@@ -0,0 +1,11 @@
+export declare const MAX_IMAGE_OUTPUT_WIDTH = 8192;
+export declare const MAX_IMAGE_OUTPUT_PIXELS = 8000000;
+type ImageMediaType = 'image/png' | 'image/jpeg' | 'image/webp';
+export declare const parseImageOutputWidth: (value?: string) => number | undefined;
+export declare const normalizeImageOutputWidth: (args: {
+    bytes: Uint8Array;
+    mediaType: ImageMediaType;
+    width: number;
+}) => Promise<Uint8Array>;
+export {};
+//# sourceMappingURL=image-output-width.d.ts.map

package/dist/image-output-width.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-output-width.d.ts","sourceRoot":"","sources":["../src/image-output-width.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,sBAAsB,OAAQ,CAAC;AAC5C,eAAO,MAAM,uBAAuB,UAAY,CAAC;AAEjD,KAAK,cAAc,GAAG,WAAW,GAAG,YAAY,GAAG,YAAY,CAAC;AAkBhE,eAAO,MAAM,qBAAqB,GAAI,QAAQ,MAAM,KAAG,MAAM,GAAG,SAO/D,CAAC;AAEF,eAAO,MAAM,yBAAyB,GAAU,MAAM;IACpD,KAAK,EAAE,UAAU,CAAC;IAClB,SAAS,EAAE,cAAc,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;CACf,KAAG,OAAO,CAAC,UAAU,CAiCrB,CAAC"}

package/dist/image-output-width.js

@@ -0,0 +1,55 @@
+import sharp from 'sharp';
+export const MAX_IMAGE_OUTPUT_WIDTH = 8_192;
+export const MAX_IMAGE_OUTPUT_PIXELS = 8_000_000;
+const orientedDimensions = (metadata) => {
+    if (!metadata.width || !metadata.height) {
+        throw new Error('The input image dimensions could not be read');
+    }
+    const swapsAxes = metadata.orientation !== undefined
+        && metadata.orientation >= 5
+        && metadata.orientation <= 8;
+    return swapsAxes
+        ? { width: metadata.height, height: metadata.width }
+        : { width: metadata.width, height: metadata.height };
+};
+export const parseImageOutputWidth = (value) => {
+    if (value === undefined)
+        return undefined;
+    const width = Number(value);
+    if (!Number.isSafeInteger(width) || width < 1 || width > MAX_IMAGE_OUTPUT_WIDTH) {
+        throw new Error(`--width must be an integer between 1 and ${MAX_IMAGE_OUTPUT_WIDTH}`);
+    }
+    return width;
+};
+export const normalizeImageOutputWidth = async (args) => {
+    const source = sharp(args.bytes, { animated: false, failOn: 'warning' });
+    const metadata = await source.metadata();
+    if ((metadata.pages ?? 1) !== 1) {
+        throw new Error('--width accepts only a static image');
+    }
+    const dimensions = orientedDimensions(metadata);
+    const height = Math.max(1, Math.round(dimensions.height * args.width / dimensions.width));
+    if (height > MAX_IMAGE_OUTPUT_WIDTH || args.width * height > MAX_IMAGE_OUTPUT_PIXELS) {
+        throw new Error(`--width ${args.width} would produce a ${args.width}x${height} canvas, `
+            + `which exceeds the upload limit of ${MAX_IMAGE_OUTPUT_WIDTH}px per side or `
+            + `${MAX_IMAGE_OUTPUT_PIXELS.toLocaleString('en-US')} pixels`);
+    }
+    if (args.width === dimensions.width && (metadata.orientation ?? 1) === 1) {
+        return args.bytes;
+    }
+    const resized = sharp(args.bytes, { animated: false, failOn: 'warning' })
+        .autoOrient()
+        .resize({ width: args.width, height, fit: 'fill', kernel: sharp.kernel.lanczos3 });
+    const encoded = args.mediaType === 'image/png'
+        ? resized.png()
+        : args.mediaType === 'image/jpeg'
+            ? resized.jpeg({ quality: 95 })
+            : resized.webp({ quality: 95 });
+    const result = await encoded.toBuffer();
+    const output = await sharp(result).metadata();
+    if (output.width !== args.width || output.height !== height) {
+        throw new Error(`The input image could not be normalized to ${args.width}x${height}`);
+    }
+    return new Uint8Array(result);
+};
+//# sourceMappingURL=image-output-width.js.map

package/dist/image-output-width.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-output-width.js","sourceRoot":"","sources":["../src/image-output-width.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAC5C,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAS,CAAC;AAIjD,MAAM,kBAAkB,GAAG,CAAC,QAI3B,EAAqC,EAAE;IACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,KAAK,SAAS;WAC/C,QAAQ,CAAC,WAAW,IAAI,CAAC;WACzB,QAAQ,CAAC,WAAW,IAAI,CAAC,CAAC;IAC/B,OAAO,SAAS;QACd,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,EAAE;QACpD,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;AACzD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,KAAc,EAAsB,EAAE;IAC1E,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,sBAAsB,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,4CAA4C,sBAAsB,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,EAAE,IAI/C,EAAuB,EAAE;IACxB,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;IACzC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,UAAU,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1F,IAAI,MAAM,GAAG,sBAAsB,IAAI,IAAI,CAAC,KAAK,GAAG,MAAM,GAAG,uBAAuB,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CACb,WAAW,IAAI,CAAC,KAAK,oBAAoB,IAAI,CAAC,KAAK,IAAI,MAAM,WAAW;cACtE,qCAAqC,sBAAsB,iBAAiB;cAC5E,GAAG,uBAAuB,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;SACtE,UAAU,EAAE;SACZ,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,KAAK,WAAW;QAC5C,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;QACf,CAAC,CAAC,IAAI,CAAC,SAAS,KAAK,YAAY;YAC/B,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;YAC/B,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC9C,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,8CAA8C,IAAI,CAAC,KAAK,IAAI,MAAM,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC,CAAC"}

package/dist/image-provider-preflight.d.ts

@@ -0,0 +1,21 @@
+export declare const IMAGE_GENERATION_PROVIDERS: readonly ["auto", "codex", "openai"];
+export type ImageGenerationProvider = typeof IMAGE_GENERATION_PROVIDERS[number];
+export type ImageProviderPreflight = {
+    provider: 'codex';
+    model: 'codex-gpt-image-2';
+    codexVersion: string;
+} | {
+    provider: 'openai';
+    model: 'gpt-image-2';
+    keySource: 'process' | 'project-env';
+    apiKey: string;
+};
+export declare const isImageGenerationProvider: (value: unknown) => value is ImageGenerationProvider;
+export declare const preflightImageProvider: (args: {
+    provider: ImageGenerationProvider;
+    projectRoot: string;
+    environment?: NodeJS.ProcessEnv;
+    runCodex?: (args: string[]) => Promise<string>;
+    isTrackedProjectEnv?: (projectRoot: string) => Promise<boolean>;
+}) => Promise<ImageProviderPreflight>;
+//# sourceMappingURL=image-provider-preflight.d.ts.map

package/dist/image-provider-preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-provider-preflight.d.ts","sourceRoot":"","sources":["../src/image-provider-preflight.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,0BAA0B,sCAAuC,CAAC;AAC/E,MAAM,MAAM,uBAAuB,GAAG,OAAO,0BAA0B,CAAC,MAAM,CAAC,CAAC;AAEhF,MAAM,MAAM,sBAAsB,GAC9B;IACE,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,mBAAmB,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;CACtB,GACD;IACE,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,aAAa,CAAC;IACrB,SAAS,EAAE,SAAS,GAAG,aAAa,CAAC;IACrC,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEN,eAAO,MAAM,yBAAyB,GACpC,OAAO,OAAO,KACb,KAAK,IAAI,uBAGX,CAAC;AA0KF,eAAO,MAAM,sBAAsB,GAAU,MAAM;IACjD,QAAQ,EAAE,uBAAuB,CAAC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,mBAAmB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACjE,KAAG,OAAO,CAAC,sBAAsB,CA+BjC,CAAC"}