@adonis-agora/agent 0.76.2 → 0.77.0

package/dist/src/poppy-client/store.js

@@ -0,0 +1,79 @@
+import { randomBytes } from 'node:crypto';
+import { chmod, mkdir, readFile, rename, stat, writeFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+export function defaultStatePath() {
+    if (process.env.POPPY_AGENT_STATE)
+        return process.env.POPPY_AGENT_STATE;
+    const base = process.env.XDG_CONFIG_HOME || join(homedir(), '.config');
+    return join(base, 'poppy-agent', 'state.json');
+}
+/**
+ * The local state file. It holds private keys and Account Tokens, so it is written with mode
+ * 0600 (directory 0700) and atomically (temp file + rename).
+ */
+export class StateStore {
+    path;
+    data;
+    persist;
+    constructor(path, data, persist) {
+        this.path = path;
+        this.data = data;
+        this.persist = persist;
+    }
+    /**
+     * A state kept by the caller instead of a file — a server keeping each user's Companies in its
+     * own database. `persist` receives the whole state on every save (serialized, like the file).
+     */
+    static memory(data = { version: 1, profiles: {} }, persist) {
+        data.profiles ??= {};
+        return new StateStore('', data, persist);
+    }
+    static async open(path = defaultStatePath()) {
+        await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+        let data = { version: 1, profiles: {} };
+        try {
+            const raw = await readFile(path, 'utf8');
+            data = JSON.parse(raw);
+            const st = await stat(path);
+            if ((st.mode & 0o077) !== 0)
+                await chmod(path, 0o600);
+        }
+        catch (e) {
+            if (e.code !== 'ENOENT')
+                throw e;
+        }
+        data.profiles ??= {};
+        return new StateStore(path, data);
+    }
+    /** Directory next to the state file, used for the Direct Sign-In callback relay. */
+    get dir() {
+        return dirname(this.path);
+    }
+    profile(name) {
+        this.data.profiles[name] ??= { companies: {} };
+        return this.data.profiles[name];
+    }
+    #saving = Promise.resolve();
+    /**
+     * Writes the state atomically (tmp file + rename). Saves are serialized: a conversation stream
+     * and the prompt can save at the same time, and two writes sharing one tmp file made the second
+     * `rename` fail with ENOENT.
+     */
+    save() {
+        const run = this.#saving.then(() => this.#write());
+        this.#saving = run.catch(() => { });
+        return run;
+    }
+    async #write() {
+        if (this.path === '') {
+            await this.persist?.(this.data);
+            return;
+        }
+        const tmp = `${this.path}.${process.pid}.${randomBytes(6).toString('hex')}.tmp`;
+        await writeFile(tmp, `${JSON.stringify(this.data, null, 2)}\n`, { mode: 0o600 });
+        await chmod(tmp, 0o600);
+        await rename(tmp, this.path);
+    }
+}
+//# sourceMappingURL=store.js.map

package/dist/src/poppy-client/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/poppy-client/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACnF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAiE1C,MAAM,UAAU,gBAAgB;IAC9B,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACxE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IACvE,OAAO,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,UAAU;IAEV,IAAI;IACN,IAAI;IACM,OAAO;IAH1B,YACW,IAAY,EACd,IAAe,EACL,OAA0D;oBAFlE,IAAI;oBACN,IAAI;uBACM,OAAO;IACvB,CAAC;IAEJ;;;OAGG;IACH,MAAM,CAAC,MAAM,CACX,IAAI,GAAc,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,EAC9C,OAA4C;QAE5C,IAAI,CAAC,QAAQ,KAAK,EAAE,CAAC;QACrB,OAAO,IAAI,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,gBAAgB,EAAE;QACzC,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7D,IAAI,IAAI,GAAc,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACzC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAc,CAAC;YACpC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC,QAAQ,KAAK,EAAE,CAAC;QACrB,OAAO,IAAI,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,oFAAoF;IACpF,IAAI,GAAG;QACL,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,OAAO,CAAC,IAAY;QAClB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAE3C;;;;OAIG;IACH,IAAI;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACnC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,IAAI,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChC,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAChF,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjF,MAAM,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACxB,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;CACF"}

package/dist/src/poppy-client/token_client.d.ts

@@ -0,0 +1,69 @@
+import type { DpopKey } from './dpop.js';
+import { type PoppyHttp } from './http.js';
+import type { AgentIdentity } from './identity.js';
+import type { AuthServerMetadata, DeviceAuthorizationResponse, TokenResponse } from './types.js';
+export declare const GRANT_JWT_BEARER = "urn:ietf:params:oauth:grant-type:jwt-bearer";
+export declare const GRANT_DEVICE_CODE = "urn:ietf:params:oauth:grant-type:device_code";
+export declare const CLIENT_ASSERTION_TYPE = "urn:ietf:params:oauth:client-assertion-type:jwt-bearer";
+export interface TokenClientOptions {
+    /**
+     * `aud` of the client assertion. RFC 7523 allows the token endpoint URL (the default here,
+     * matching the spec's examples) or the issuer identifier.
+     */
+    clientAssertionAudience?: 'token_endpoint' | 'issuer' | undefined;
+}
+export interface NarrowingParams {
+    /** Ask for fewer scopes than the Session has (4.3 "Narrower tokens"). */
+    scope?: string | undefined;
+    /** RFC 8707 resource indicator. */
+    resource?: string | undefined;
+}
+/**
+ * OAuth calls against the Company's authorization server (section 4): every request carries
+ * a `private_key_jwt` client assertion (4.1), and token requests carry a DPoP proof unless a
+ * Bearer token (MCP) is wanted (4.3).
+ */
+export declare class TokenClient {
+    private readonly identity;
+    readonly metadata: AuthServerMetadata;
+    private readonly http;
+    private readonly opts;
+    constructor(identity: AgentIdentity, metadata: AuthServerMetadata, http: PoppyHttp, opts?: TokenClientOptions);
+    private clientAuth;
+    /** POSTs a form; the builder runs per attempt so retries get fresh assertions. */
+    private post;
+    private toError;
+    /** Any token-endpoint grant. Validates the response shape of 4.2/4.4. */
+    token(params: () => Promise<Record<string, string | undefined>>, dpop?: DpopKey | undefined): Promise<TokenResponse>;
+    /** JWT bearer grant: starts a Session, or renews a signed-out one with `sessionId` (4.2). */
+    jwtBearer(input: {
+        userId: string;
+        sessionId?: string | undefined;
+        dpop?: DpopKey | undefined;
+    } & NarrowingParams): Promise<TokenResponse>;
+    /** Account Token grant (4.8): signs a Session in, or starts a new signed-in Session. */
+    refresh(input: {
+        refreshToken: string;
+        sessionId?: string | undefined;
+        dpop?: DpopKey | undefined;
+    } & NarrowingParams): Promise<TokenResponse>;
+    /** Direct Sign-In code exchange (4.5 step 4). */
+    authorizationCode(input: {
+        code: string;
+        redirectUri: string;
+        codeVerifier: string;
+        sessionId: string;
+        dpop: DpopKey;
+    }): Promise<TokenResponse>;
+    /** Device Sign-In step 1 (4.6). */
+    deviceAuthorization(scope: string): Promise<DeviceAuthorizationResponse>;
+    /** Device Sign-In polling (4.6 step 3). Throws `authorization_pending` / `slow_down` etc. */
+    deviceToken(input: {
+        deviceCode: string;
+        sessionId: string;
+        dpop: DpopKey;
+    }): Promise<TokenResponse>;
+    /** RFC 7009 revocation of an Account Token (4.9). */
+    revoke(token: string, hint?: 'refresh_token' | 'access_token'): Promise<void>;
+}
+//# sourceMappingURL=token_client.d.ts.map

package/dist/src/poppy-client/token_client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token_client.d.ts","sourceRoot":"","sources":["../../../src/poppy-client/token_client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,EAAE,KAAK,SAAS,EAAY,MAAM,WAAW,CAAC;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,KAAK,EAAE,kBAAkB,EAAE,2BAA2B,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAGjG,eAAO,MAAM,gBAAgB,gDAAgD,CAAC;AAC9E,eAAO,MAAM,iBAAiB,iDAAiD,CAAC;AAChF,eAAO,MAAM,qBAAqB,2DAA2D,CAAC;AAE9F,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,uBAAuB,CAAC,EAAE,gBAAgB,GAAG,QAAQ,GAAG,SAAS,CAAC;CACnE;AAED,MAAM,WAAW,eAAe;IAC9B,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,mCAAmC;IACnC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B;AAED;;;;GAIG;AACH,qBAAa,WAAW;IAEpB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,QAAQ,CAAC,QAAQ,EAAE,kBAAkB;IACrC,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAJvB,YACmB,QAAQ,EAAE,aAAa,EAC/B,QAAQ,EAAE,kBAAkB,EACpB,IAAI,EAAE,SAAS,EACf,IAAI,GAAE,kBAAuB,EAC5C;YAEU,UAAU;IAYxB,kFAAkF;YACpE,IAAI;IAuBlB,OAAO,CAAC,OAAO;IAef,yEAAyE;IACnE,KAAK,CACT,MAAM,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,EACzD,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,GACzB,OAAO,CAAC,aAAa,CAAC,CAyBxB;IAED,6FAA6F;IAC7F,SAAS,CACP,KAAK,EAAE;QACL,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;KAC5B,GAAG,eAAe,GAClB,OAAO,CAAC,aAAa,CAAC,CAWxB;IAED,wFAAwF;IACxF,OAAO,CACL,KAAK,EAAE;QACL,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;KAC5B,GAAG,eAAe,GAClB,OAAO,CAAC,aAAa,CAAC,CAWxB;IAED,iDAAiD;IACjD,iBAAiB,CAAC,KAAK,EAAE;QACvB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,OAAO,CAAC;KACf,GAAG,OAAO,CAAC,aAAa,CAAC,CAWzB;IAED,mCAAmC;IAC7B,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAa7E;IAED,6FAA6F;IAC7F,WAAW,CAAC,KAAK,EAAE;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,OAAO,CAAC;KACf,GAAG,OAAO,CAAC,aAAa,CAAC,CASzB;IAED,qDAAqD;IAC/C,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,eAAe,GAAG,cAAgC,iBAMnF;CACF"}

package/dist/src/poppy-client/token_client.js

@@ -0,0 +1,154 @@
+import { OAuthError } from './errors.js';
+import { readJson } from './http.js';
+import { parseRetryAfter } from './util.js';
+export const GRANT_JWT_BEARER = 'urn:ietf:params:oauth:grant-type:jwt-bearer';
+export const GRANT_DEVICE_CODE = 'urn:ietf:params:oauth:grant-type:device_code';
+export const CLIENT_ASSERTION_TYPE = 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer';
+/**
+ * OAuth calls against the Company's authorization server (section 4): every request carries
+ * a `private_key_jwt` client assertion (4.1), and token requests carry a DPoP proof unless a
+ * Bearer token (MCP) is wanted (4.3).
+ */
+export class TokenClient {
+    identity;
+    metadata;
+    http;
+    opts;
+    constructor(identity, metadata, http, opts = {}) {
+        this.identity = identity;
+        this.metadata = metadata;
+        this.http = http;
+        this.opts = opts;
+    }
+    async clientAuth() {
+        const aud = this.opts.clientAssertionAudience === 'issuer'
+            ? this.metadata.issuer
+            : this.metadata.token_endpoint;
+        return {
+            client_id: this.identity.clientId,
+            client_assertion_type: CLIENT_ASSERTION_TYPE,
+            client_assertion: await this.identity.clientAssertion(aud),
+        };
+    }
+    /** POSTs a form; the builder runs per attempt so retries get fresh assertions. */
+    async post(endpoint, build, dpop) {
+        const res = await this.http.request(endpoint, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/x-www-form-urlencoded',
+                accept: 'application/json',
+            },
+            dpop,
+            body: async () => {
+                const params = { ...(await build()), ...(await this.clientAuth()) };
+                const form = new URLSearchParams();
+                for (const [k, v] of Object.entries(params))
+                    if (v !== undefined && v !== '')
+                        form.set(k, v);
+                return form.toString();
+            },
+        });
+        return { status: res.status, body: await readJson(res), headers: res.headers };
+    }
+    toError(r) {
+        const code = typeof r.body?.error === 'string' ? r.body.error : `http_${r.status}`;
+        return new OAuthError(code, {
+            status: r.status,
+            description: typeof r.body?.error_description === 'string' ? r.body.error_description : undefined,
+            retryAfter: parseRetryAfter(r.headers.get('retry-after')),
+            details: r.body,
+        });
+    }
+    /** Any token-endpoint grant. Validates the response shape of 4.2/4.4. */
+    async token(params, dpop) {
+        const r = await this.post(this.metadata.token_endpoint, params, dpop);
+        if (r.status !== 200 || !r.body)
+            throw this.toError(r);
+        const t = r.body;
+        if (typeof t.access_token !== 'string' || !t.access_token) {
+            throw new OAuthError('invalid_response', {
+                description: 'no access_token in token response',
+            });
+        }
+        if (typeof t.expires_in !== 'number' || !(t.expires_in > 0)) {
+            throw new OAuthError('invalid_response', { description: 'expires_in must be > 0 (4.2)' });
+        }
+        if (typeof t.session_id !== 'string' || !t.session_id) {
+            throw new OAuthError('invalid_response', { description: 'no session_id in token response' });
+        }
+        const expected = dpop ? 'dpop' : 'bearer';
+        if (String(t.token_type).toLowerCase() !== expected) {
+            // RFC 9449 section 5: a client that sent a proof must not accept a downgraded token.
+            throw new OAuthError('invalid_response', {
+                description: `token_type is ${t.token_type}, expected ${dpop ? 'DPoP' : 'Bearer'}`,
+            });
+        }
+        t.signed_in = t.signed_in === true;
+        t.scope = typeof t.scope === 'string' ? t.scope : '';
+        return t;
+    }
+    /** JWT bearer grant: starts a Session, or renews a signed-out one with `sessionId` (4.2). */
+    jwtBearer(input) {
+        return this.token(async () => ({
+            grant_type: GRANT_JWT_BEARER,
+            assertion: await this.identity.sessionAssertion(input.userId, this.metadata.token_endpoint),
+            session_id: input.sessionId,
+            scope: input.scope,
+            resource: input.resource,
+        }), input.dpop);
+    }
+    /** Account Token grant (4.8): signs a Session in, or starts a new signed-in Session. */
+    refresh(input) {
+        return this.token(async () => ({
+            grant_type: 'refresh_token',
+            refresh_token: input.refreshToken,
+            session_id: input.sessionId,
+            scope: input.scope,
+            resource: input.resource,
+        }), input.dpop);
+    }
+    /** Direct Sign-In code exchange (4.5 step 4). */
+    authorizationCode(input) {
+        return this.token(async () => ({
+            grant_type: 'authorization_code',
+            code: input.code,
+            redirect_uri: input.redirectUri,
+            code_verifier: input.codeVerifier,
+            session_id: input.sessionId,
+        }), input.dpop);
+    }
+    /** Device Sign-In step 1 (4.6). */
+    async deviceAuthorization(scope) {
+        const endpoint = this.metadata.device_authorization_endpoint;
+        if (!endpoint)
+            throw new OAuthError('unsupported', { description: 'no device_authorization_endpoint' });
+        const r = await this.post(endpoint, async () => ({ scope }));
+        if (r.status !== 200 || !r.body)
+            throw this.toError(r);
+        const d = r.body;
+        if (!d.device_code || !d.user_code || !d.verification_uri) {
+            throw new OAuthError('invalid_response', {
+                description: 'incomplete device authorization response',
+            });
+        }
+        return d;
+    }
+    /** Device Sign-In polling (4.6 step 3). Throws `authorization_pending` / `slow_down` etc. */
+    deviceToken(input) {
+        return this.token(async () => ({
+            grant_type: GRANT_DEVICE_CODE,
+            device_code: input.deviceCode,
+            session_id: input.sessionId,
+        }), input.dpop);
+    }
+    /** RFC 7009 revocation of an Account Token (4.9). */
+    async revoke(token, hint = 'refresh_token') {
+        const r = await this.post(this.metadata.revocation_endpoint, async () => ({
+            token,
+            token_type_hint: hint,
+        }));
+        if (r.status !== 200)
+            throw this.toError(r);
+    }
+}
+//# sourceMappingURL=token_client.js.map

package/dist/src/poppy-client/token_client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token_client.js","sourceRoot":"","sources":["../../../src/poppy-client/token_client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAkB,QAAQ,EAAE,MAAM,WAAW,CAAC;AAGrD,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C,MAAM,CAAC,MAAM,gBAAgB,GAAG,6CAA6C,CAAC;AAC9E,MAAM,CAAC,MAAM,iBAAiB,GAAG,8CAA8C,CAAC;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,wDAAwD,CAAC;AAiB9F;;;;GAIG;AACH,MAAM,OAAO,WAAW;IAEH,QAAQ;IAChB,QAAQ;IACA,IAAI;IACJ,IAAI;IAJvB,YACmB,QAAuB,EAC/B,QAA4B,EACpB,IAAe,EACf,IAAI,GAAuB,EAAE;wBAH7B,QAAQ;wBAChB,QAAQ;oBACA,IAAI;oBACJ,IAAI;IACpB,CAAC;IAEI,KAAK,CAAC,UAAU;QACtB,MAAM,GAAG,GACP,IAAI,CAAC,IAAI,CAAC,uBAAuB,KAAK,QAAQ;YAC5C,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM;YACtB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;QACnC,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;YACjC,qBAAqB,EAAE,qBAAqB;YAC5C,gBAAgB,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC;SAC3D,CAAC;IACJ,CAAC;IAED,kFAAkF;IAC1E,KAAK,CAAC,IAAI,CAChB,QAAgB,EAChB,KAAwD,EACxD,IAA0B;QAE1B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;YAC5C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI;YACJ,IAAI,EAAE,KAAK,IAAI,EAAE;gBACf,MAAM,MAAM,GAAG,EAAE,GAAG,CAAC,MAAM,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;gBACpE,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;gBACnC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;oBACzC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE;wBAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAClD,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzB,CAAC;SACF,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;IACjF,CAAC;IAEO,OAAO,CAAC,CAIf;QACC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;QACnF,OAAO,IAAI,UAAU,CAAC,IAAI,EAAE;YAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,WAAW,EACT,OAAO,CAAC,CAAC,IAAI,EAAE,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;YACtF,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACzD,OAAO,EAAE,CAAC,CAAC,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,KAAK,CACT,MAAyD,EACzD,IAA0B;QAE1B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACtE,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,CAAC,CAAC,IAAgC,CAAC;QAC7C,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;YAC1D,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE;gBACvC,WAAW,EAAE,mCAAmC;aACjD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,EAAE,WAAW,EAAE,8BAA8B,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;YACtD,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,EAAE,WAAW,EAAE,iCAAiC,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC1C,IAAI,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,EAAE,CAAC;YACpD,qFAAqF;YACrF,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE;gBACvC,WAAW,EAAE,iBAAiB,CAAC,CAAC,UAAU,cAAc,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;aACnF,CAAC,CAAC;QACL,CAAC;QACD,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC;QACnC,CAAC,CAAC,KAAK,GAAG,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,6FAA6F;IAC7F,SAAS,CACP,KAImB;QAEnB,OAAO,IAAI,CAAC,KAAK,CACf,KAAK,IAAI,EAAE,CAAC,CAAC;YACX,UAAU,EAAE,gBAAgB;YAC5B,SAAS,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;YAC3F,UAAU,EAAE,KAAK,CAAC,SAAS;YAC3B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,EACF,KAAK,CAAC,IAAI,CACX,CAAC;IACJ,CAAC;IAED,wFAAwF;IACxF,OAAO,CACL,KAImB;QAEnB,OAAO,IAAI,CAAC,KAAK,CACf,KAAK,IAAI,EAAE,CAAC,CAAC;YACX,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,KAAK,CAAC,YAAY;YACjC,UAAU,EAAE,KAAK,CAAC,SAAS;YAC3B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,EACF,KAAK,CAAC,IAAI,CACX,CAAC;IACJ,CAAC;IAED,iDAAiD;IACjD,iBAAiB,CAAC,KAMjB;QACC,OAAO,IAAI,CAAC,KAAK,CACf,KAAK,IAAI,EAAE,CAAC,CAAC;YACX,UAAU,EAAE,oBAAoB;YAChC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,aAAa,EAAE,KAAK,CAAC,YAAY;YACjC,UAAU,EAAE,KAAK,CAAC,SAAS;SAC5B,CAAC,EACF,KAAK,CAAC,IAAI,CACX,CAAC;IACJ,CAAC;IAED,mCAAmC;IACnC,KAAK,CAAC,mBAAmB,CAAC,KAAa;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC;QAC7D,IAAI,CAAC,QAAQ;YACX,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC,CAAC;QAC3F,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,CAAC,CAAC,IAA8C,CAAC;QAC3D,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC1D,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE;gBACvC,WAAW,EAAE,0CAA0C;aACxD,CAAC,CAAC;QACL,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,6FAA6F;IAC7F,WAAW,CAAC,KAIX;QACC,OAAO,IAAI,CAAC,KAAK,CACf,KAAK,IAAI,EAAE,CAAC,CAAC;YACX,UAAU,EAAE,iBAAiB;YAC7B,WAAW,EAAE,KAAK,CAAC,UAAU;YAC7B,UAAU,EAAE,KAAK,CAAC,SAAS;SAC5B,CAAC,EACF,KAAK,CAAC,IAAI,CACX,CAAC;IACJ,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,IAAI,GAAqC,eAAe;QAClF,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YACxE,KAAK;YACL,eAAe,EAAE,IAAI;SACtB,CAAC,CAAC,CAAC;QACJ,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;CACF"}

package/dist/src/poppy-client/types.d.ts

@@ -0,0 +1,184 @@
+/**
+ * Wire types from the Personal Agent Protocol (Poppy) Draft 0.1.
+ *
+ * Every object is "open": the spec requires both sides to ignore fields they don't recognize
+ * (3.3), so these interfaces only name what this client reads, and keep an index signature.
+ */
+export interface PoppyDocument {
+    protocol_version: string;
+    organization: {
+        name: string;
+        domain: string;
+        [k: string]: unknown;
+    };
+    auth?: PoppyAuth | undefined;
+    agent?: {
+        protocols: PoppyProtocolEntry[];
+        [k: string]: unknown;
+    } | undefined;
+    web?: {
+        browser_session_endpoint?: string | undefined;
+        [k: string]: unknown;
+    };
+    apis?: PoppyApiEntry[] | undefined;
+    extensions?: Record<string, {
+        version: string;
+        [k: string]: unknown;
+    }> | undefined;
+    [k: string]: unknown;
+}
+export interface PoppyAuth {
+    issuer: string;
+    direct?: {
+        scopes: string[];
+        [k: string]: unknown;
+    } | undefined;
+    device?: {
+        scopes: string[];
+        [k: string]: unknown;
+    } | undefined;
+    mediated?: {
+        endpoint: string;
+        fields: MediatedField[];
+        scopes: string[];
+        [k: string]: unknown;
+    };
+    custom_scopes?: Record<string, string> | undefined;
+    [k: string]: unknown;
+}
+export interface MediatedField {
+    name: string;
+    label: string;
+    secret: boolean;
+    [k: string]: unknown;
+}
+export interface PoppyProtocolEntry {
+    type: string;
+    endpoint: string;
+    resource?: string | undefined;
+    [k: string]: unknown;
+}
+export interface PoppyApiEntry {
+    type: string;
+    url: string;
+    description?: string | undefined;
+    resource?: string | undefined;
+    [k: string]: unknown;
+}
+/** RFC 8414 metadata, plus the Poppy `poppy_domains` field (3.2). */
+export interface AuthServerMetadata {
+    issuer: string;
+    token_endpoint: string;
+    revocation_endpoint: string;
+    authorization_endpoint?: string | undefined;
+    device_authorization_endpoint?: string | undefined;
+    poppy_domains: string[];
+    [k: string]: unknown;
+}
+/** Client ID Metadata Document published by the Personal Agent (4.1). */
+export interface ClientMetadata {
+    client_id: string;
+    client_name: string;
+    logo_uri?: string | undefined;
+    jwks_uri: string;
+    redirect_uris: string[];
+    token_endpoint_auth_method: 'private_key_jwt';
+    extensions?: Record<string, {
+        version: string;
+    }> | undefined;
+    [k: string]: unknown;
+}
+/** Token endpoint success response (4.2, 4.4). */
+export interface TokenResponse {
+    access_token: string;
+    token_type: string;
+    expires_in: number;
+    scope?: string | undefined;
+    session_id: string;
+    signed_in: boolean;
+    refresh_token?: string | undefined;
+    refresh_token_expires_in?: number | undefined;
+    [k: string]: unknown;
+}
+/** RFC 8628 device authorization response (4.6). */
+export interface DeviceAuthorizationResponse {
+    device_code: string;
+    user_code: string;
+    verification_uri: string;
+    verification_uri_complete?: string | undefined;
+    expires_in: number;
+    interval?: number | undefined;
+    [k: string]: unknown;
+}
+export type MediatedStatus = 'complete' | 'code_required' | 'failed' | 'expired';
+export interface MediatedResponse extends Partial<TokenResponse> {
+    status: MediatedStatus;
+    sign_in_id?: string | undefined;
+    code?: {
+        sent_to?: string | undefined;
+        [k: string]: unknown;
+    };
+    expires_at?: string | undefined;
+}
+export interface MessageContext {
+    locale?: string | undefined;
+    time_zone?: string | undefined;
+    user_available?: boolean | undefined;
+    [k: string]: unknown;
+}
+/** A message the Personal Agent sends (7.4). */
+export interface OutgoingMessage {
+    id: string;
+    sender: 'agent' | 'human';
+    text?: string | undefined;
+    data?: Record<string, unknown> | undefined;
+    context?: MessageContext | undefined;
+}
+/** A message as it appears in a `message` event (7.5). */
+export interface EventMessage {
+    id: string;
+    role?: 'user' | 'company' | undefined;
+    sender: 'agent' | 'human';
+    text?: string | undefined;
+    data?: Record<string, unknown> | undefined;
+    [k: string]: unknown;
+}
+export type ConversationStatus = 'working' | 'idle' | 'queued' | 'closed';
+export type Responder = 'agent' | 'human';
+export interface ConversationEvent {
+    id: string;
+    type: string;
+    created_at: string;
+    message?: EventMessage | undefined;
+    status?: ConversationStatus | undefined;
+    responder?: Responder | undefined;
+    error?: string | undefined;
+    scope?: string | undefined;
+    reason?: string | undefined;
+    conversation_id?: string | undefined;
+    [k: string]: unknown;
+}
+export interface ConversationState {
+    status: ConversationStatus;
+    responder: Responder;
+}
+export interface StartConversationResponse extends ConversationState {
+    conversation_id: string;
+    /** Present when the request carried `wait` (7.3). */
+    events?: ConversationEvent[] | undefined;
+    cursor?: string | undefined;
+    has_more?: boolean | undefined;
+    [k: string]: unknown;
+}
+export interface EventsPage extends ConversationState {
+    conversation_id: string;
+    events: ConversationEvent[];
+    cursor?: string | undefined;
+    has_more: boolean;
+    [k: string]: unknown;
+}
+export interface TextDelta {
+    message_id: string;
+    text: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/src/poppy-client/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/poppy-client/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,aAAa;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IACrE,IAAI,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAC7B,KAAK,CAAC,EAAE;QAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,GAAG,SAAS,CAAC;IAC9E,GAAG,CAAC,EAAE;QAAE,wBAAwB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAC9E,IAAI,CAAC,EAAE,aAAa,EAAE,GAAG,SAAS,CAAC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC,GAAG,SAAS,CAAC;IACnF,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,GAAG,SAAS,CAAC;IAChE,MAAM,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,EAAE;QACT,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,aAAa,EAAE,CAAC;QACxB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;KACtB,CAAC;IACF,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IACnD,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,qEAAqE;AACrE,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,6BAA6B,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnD,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,yEAAyE;AACzE,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,0BAA0B,EAAE,iBAAiB,CAAC;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,SAAS,CAAC;IAC7D,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,kDAAkD;AAClD,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,wBAAwB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9C,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,oDAAoD;AACpD,MAAM,WAAW,2BAA2B;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,yBAAyB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,eAAe,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEjF,MAAM,WAAW,gBAAiB,SAAQ,OAAO,CAAC,aAAa,CAAC;IAC9D,MAAM,EAAE,cAAc,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAC9D,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC;AAID,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACrC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,gDAAgD;AAChD,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC3C,OAAO,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;CACtC;AAED,0DAA0D;AAC1D,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;IACtC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC3C,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAC1E,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;AAE1C,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IACnC,MAAM,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IACxC,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAClC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,SAAS,EAAE,SAAS,CAAC;CACtB;AAED,MAAM,WAAW,yBAA0B,SAAQ,iBAAiB;IAClE,eAAe,EAAE,MAAM,CAAC;IACxB,qDAAqD;IACrD,MAAM,CAAC,EAAE,iBAAiB,EAAE,GAAG,SAAS,CAAC;IACzC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC/B,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,UAAW,SAAQ,iBAAiB;IACnD,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,QAAQ,EAAE,OAAO,CAAC;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd"}

package/dist/src/poppy-client/types.js

@@ -0,0 +1,8 @@
+/**
+ * Wire types from the Personal Agent Protocol (Poppy) Draft 0.1.
+ *
+ * Every object is "open": the spec requires both sides to ignore fields they don't recognize
+ * (3.3), so these interfaces only name what this client reads, and keep an index signature.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/poppy-client/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/poppy-client/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/src/poppy-client/util.d.ts

@@ -0,0 +1,42 @@
+/** A random URL-safe ID. 16 bytes = 128 random bits, the floor the spec sets for `jti` (4.2). */
+export declare function randomId(prefix?: string, bytes?: number): string;
+export declare function sha256b64url(input: string): string;
+export declare function nowSeconds(): number;
+export declare function sleep(ms: number, signal?: AbortSignal): Promise<void>;
+export type FetchLike = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
+/** Hosts we treat as "local development" for messages and defaults. */
+export declare function isLoopbackHost(hostname: string): boolean;
+export interface SecurityOptions {
+    /**
+     * NON-SPEC. Lets `http:` URLs through every place the spec demands HTTPS (client_id,
+     * discovery, issuer, endpoints, redirects). Only for testing against a local dev server.
+     */
+    insecureDev?: boolean | undefined;
+}
+/**
+ * Parses `value` as an absolute URL and enforces the spec's HTTPS requirement. With
+ * `insecureDev`, plain `http:` is tolerated too.
+ */
+export declare function requireSecureUrl(value: unknown, what: string, sec: SecurityOptions): URL;
+/** Strip a single leading `www.` and lowercase, as the spec compares domains (3.1). */
+export declare function normalizeDomain(domain: string): string;
+/** `Retry-After` as seconds: either delta-seconds or an HTTP-date. */
+export declare function parseRetryAfter(value: string | null): number | undefined;
+export interface WwwAuthChallenge {
+    scheme: string;
+    params: Record<string, string>;
+}
+/**
+ * Minimal `WWW-Authenticate` parser: enough for `DPoP error="...", scope="..."` and
+ * `Bearer error="..."` (RFC 6750 / RFC 9449). Handles several challenges in one header.
+ */
+export declare function parseWwwAuthenticate(header: string | null): WwwAuthChallenge[];
+/** The first `error` found in any challenge of a `WWW-Authenticate` header. */
+export declare function wwwAuthError(header: string | null): {
+    error?: string | undefined;
+    scope?: string | undefined;
+    description?: string | undefined;
+};
+/** A space-separated scope string as a set (OAuth scope syntax, RFC 6749 3.3). */
+export declare function scopeSet(scope: string | undefined): Set<string>;
+//# sourceMappingURL=util.d.ts.map

package/dist/src/poppy-client/util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../../src/poppy-client/util.ts"],"names":[],"mappings":"AAEA,iGAAiG;AACjG,wBAAgB,QAAQ,CAAC,MAAM,SAAK,EAAE,KAAK,SAAK,GAAG,MAAM,CAExD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAElD;AAED,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED,wBAAgB,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAarE;AAED,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEjG,uEAAuE;AACvE,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAKxD;AAED,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACnC;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,GAAG,CAiBxF;AAED,uFAAuF;AACvF,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,sEAAsE;AACtE,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAOxE;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,gBAAgB,EAAE,CA2B9E;AAED,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG;IACnD,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC,CAWA;AAED,kFAAkF;AAClF,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,CAE/D"}