@agenthippo-ai/agenthippo 1.110.9 → 1.110.19

package/out/auth/onboardingPrompt.js

@@ -1,112 +1,2 @@
-"use strict";
-/*---------------------------------------------------------------------------------------------
- *  Copyright (c) AgentHippo.ai. All rights reserved.
- *--------------------------------------------------------------------------------------------*/
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.showSignInOnboardingPromptIfNeeded = showSignInOnboardingPromptIfNeeded;
-exports.scheduleSignInOnboardingPrompt = scheduleSignInOnboardingPrompt;
-const vscode = __importStar(require("vscode"));
-const sessionStore_js_1 = require("./sessionStore.js");
-const PROMPT_DISMISSED_KEY = 'agentide.signInPrompt.dismissed';
-const PROVIDERS_LIST_KEY = 'agentide.providers';
-const API_KEY_PREFIX = 'agentide.apikey.';
-const OAUTH_PREFIX = 'agentide.oauth.';
-const ONBOARDING_MESSAGE = 'BYOK or Sign in for instant model access — no API key needed.';
-async function hasByokConfigured(secrets) {
-    const providersJson = await secrets.get(PROVIDERS_LIST_KEY);
-    if (!providersJson) {
-        return false;
-    }
-    try {
-        const providers = JSON.parse(providersJson);
-        if (!Array.isArray(providers)) {
-            return false;
-        }
-        for (const provider of providers) {
-            if (provider === 'agenthippo') {
-                continue;
-            }
-            const apiKey = await secrets.get(`${API_KEY_PREFIX}${provider}`);
-            if (apiKey?.trim()) {
-                return true;
-            }
-            const oauth = await secrets.get(`${OAUTH_PREFIX}${provider}`);
-            if (oauth?.trim()) {
-                return true;
-            }
-        }
-    }
-    catch {
-        // ignore malformed provider list
-    }
-    return false;
-}
-async function shouldShowOnboardingPrompt(context) {
-    if (context.globalState.get(PROMPT_DISMISSED_KEY)) {
-        return false;
-    }
-    if (await (0, sessionStore_js_1.getStoredAuthSession)(context.secrets)) {
-        return false;
-    }
-    if (await hasByokConfigured(context.secrets)) {
-        return false;
-    }
-    return true;
-}
-async function showSignInOnboardingPromptIfNeeded(context) {
-    if (!(await shouldShowOnboardingPrompt(context))) {
-        return;
-    }
-    const choice = await vscode.window.showInformationMessage(ONBOARDING_MESSAGE, 'Sign In', 'Add API Key', 'Later');
-    if (choice === 'Sign In') {
-        await vscode.commands.executeCommand('agenthippo.signIn');
-        return;
-    }
-    if (choice === 'Add API Key') {
-        await vscode.commands.executeCommand('agentide.addAPIKey');
-        return;
-    }
-    if (choice === 'Later' || choice === undefined) {
-        await context.globalState.update(PROMPT_DISMISSED_KEY, true);
-    }
-}
-/** Delay so the workbench finishes restoring before the toast appears. */
-function scheduleSignInOnboardingPrompt(context) {
-    const handle = setTimeout(() => {
-        void showSignInOnboardingPromptIfNeeded(context);
-    }, 3000);
-    context.subscriptions.push({ dispose: () => clearTimeout(handle) });
-}
+/*! Copyright (c) 2026 AgentHippo.ai. All rights reserved. Proprietary; see LICENSE. */
+"use strict";var __createBinding=this&&this.__createBinding||(Object.create?(function(t,e,r,n){n===void 0&&(n=r);var i=Object.getOwnPropertyDescriptor(e,r);(!i||("get"in i?!e.__esModule:i.writable||i.configurable))&&(i={enumerable:!0,get:function(){return e[r]}}),Object.defineProperty(t,n,i)}):(function(t,e,r,n){n===void 0&&(n=r),t[n]=e[r]})),__setModuleDefault=this&&this.__setModuleDefault||(Object.create?(function(t,e){Object.defineProperty(t,"default",{enumerable:!0,value:e})}):function(t,e){t.default=e}),__importStar=this&&this.__importStar||(function(){var t=function(e){return t=Object.getOwnPropertyNames||function(r){var n=[];for(var i in r)Object.prototype.hasOwnProperty.call(r,i)&&(n[n.length]=i);return n},t(e)};return function(e){if(e&&e.__esModule)return e;var r={};if(e!=null)for(var n=t(e),i=0;i<n.length;i++)n[i]!=="default"&&__createBinding(r,e,n[i]);return __setModuleDefault(r,e),r}})();Object.defineProperty(exports,"__esModule",{value:!0}),exports.showSignInOnboardingPromptIfNeeded=showSignInOnboardingPromptIfNeeded,exports.scheduleSignInOnboardingPrompt=scheduleSignInOnboardingPrompt;const vscode=__importStar(require("vscode")),sessionStore_js_1=require("./sessionStore.js"),PROMPT_DISMISSED_KEY="agentide.signInPrompt.dismissed",PROVIDERS_LIST_KEY="agentide.providers",API_KEY_PREFIX="agentide.apikey.",OAUTH_PREFIX="agentide.oauth.",ONBOARDING_MESSAGE="BYOK or Sign in for instant model access \u2014 no API key needed.";async function hasByokConfigured(t){const e=await t.get(PROVIDERS_LIST_KEY);if(!e)return!1;try{const r=JSON.parse(e);if(!Array.isArray(r))return!1;for(const n of r){if(n==="agenthippo")continue;if((await t.get(`${API_KEY_PREFIX}${n}`))?.trim()||(await t.get(`${OAUTH_PREFIX}${n}`))?.trim())return!0}}catch{}return!1}async function shouldShowOnboardingPrompt(t){return!(t.globalState.get(PROMPT_DISMISSED_KEY)||await(0,sessionStore_js_1.getStoredAuthSession)(t.secrets)||await hasByokConfigured(t.secrets))}async function showSignInOnboardingPromptIfNeeded(t){if(!await shouldShowOnboardingPrompt(t))return;const e=await vscode.window.showInformationMessage(ONBOARDING_MESSAGE,"Sign In","Add API Key","Later");if(e==="Sign In"){await vscode.commands.executeCommand("agenthippo.signIn");return}if(e==="Add API Key"){await vscode.commands.executeCommand("agentide.addAPIKey");return}(e==="Later"||e===void 0)&&await t.globalState.update(PROMPT_DISMISSED_KEY,!0)}function scheduleSignInOnboardingPrompt(t){const e=setTimeout(()=>{showSignInOnboardingPromptIfNeeded(t)},3e3);t.subscriptions.push({dispose:()=>clearTimeout(e)})}

package/out/auth/pkce.js

@@ -1,9 +1,2 @@
-"use strict";
-/*---------------------------------------------------------------------------------------------
- *  Copyright (c) AgentHippo.ai. All rights reserved.
- *--------------------------------------------------------------------------------------------*/
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.codeChallengeFromVerifier = exports.generateCodeVerifier = void 0;
-var pkce_js_1 = require("../auth-broker/pkce.js");
-Object.defineProperty(exports, "generateCodeVerifier", { enumerable: true, get: function () { return pkce_js_1.generateCodeVerifier; } });
-Object.defineProperty(exports, "codeChallengeFromVerifier", { enumerable: true, get: function () { return pkce_js_1.codeChallengeFromVerifier; } });
+/*! Copyright (c) 2026 AgentHippo.ai. All rights reserved. Proprietary; see LICENSE. */
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.codeChallengeFromVerifier=exports.generateCodeVerifier=void 0;var pkce_js_1=require("../auth-broker/pkce.js");Object.defineProperty(exports,"generateCodeVerifier",{enumerable:!0,get:function(){return pkce_js_1.generateCodeVerifier}}),Object.defineProperty(exports,"codeChallengeFromVerifier",{enumerable:!0,get:function(){return pkce_js_1.codeChallengeFromVerifier}});

package/out/auth/provider.js

@@ -1,226 +1,2 @@
-"use strict";
-/*---------------------------------------------------------------------------------------------
- *  Copyright (c) AgentHippo.ai. All rights reserved.
- *--------------------------------------------------------------------------------------------*/
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AgentHippoAuthProvider = exports.getAgentHippoAccessToken = void 0;
-exports.registerAgentHippoAuth = registerAgentHippoAuth;
-exports.refreshBootstrapIfSignedIn = refreshBootstrapIfSignedIn;
-exports.startAgentHippoTokenRefreshTimer = startAgentHippoTokenRefreshTimer;
-const vscode = __importStar(require("vscode"));
-const authBaseUrl_js_1 = require("./authBaseUrl.js");
-const bootstrapApply_js_1 = require("./bootstrapApply.js");
-const types_js_1 = require("./types.js");
-const signInFlow_js_1 = require("./signInFlow.js");
-const sessionStore_js_1 = require("./sessionStore.js");
-var sessionStore_js_2 = require("./sessionStore.js");
-Object.defineProperty(exports, "getAgentHippoAccessToken", { enumerable: true, get: function () { return sessionStore_js_2.getAgentHippoAccessToken; } });
-const DEFAULT_AGENTHIPPO_MODEL_GATEWAY_URL = 'https://gateway.agenthippo.ai/v1';
-function getAgentHippoModelGatewayUrl() {
-    return vscode.workspace.getConfiguration('agentide').get('AgentHippoModelGateway.url')?.trim() || DEFAULT_AGENTHIPPO_MODEL_GATEWAY_URL;
-}
-/** Returns true if the key was successfully pushed to the model gateway. */
-async function syncAgentHippoModelGatewayToken(accessToken) {
-    try {
-        await vscode.commands.executeCommand('agentide.auth.applyBootstrapKeys', {
-            provider: 'agenthippo',
-            apiKey: accessToken,
-            baseUrl: getAgentHippoModelGatewayUrl(),
-        });
-        return true;
-    }
-    catch {
-        // workbench may not be ready yet; model registry will pick it up on next refresh
-        return false;
-    }
-}
-async function clearAgentHippoModelGatewayToken() {
-    try {
-        await vscode.commands.executeCommand('agentide.auth.applyBootstrapKeys', {
-            provider: 'agenthippo',
-            apiKey: '',
-        });
-    }
-    catch {
-        // best effort
-    }
-}
-class AgentHippoAuthProvider {
-    context;
-    _onDidChangeSessions = new vscode.EventEmitter();
-    onDidChangeSessions = this._onDidChangeSessions.event;
-    constructor(context) {
-        this.context = context;
-    }
-    dispose() {
-        // no-op
-    }
-    async getSessions(scopes) {
-        const stored = await (0, sessionStore_js_1.getStoredAuthSession)(this.context.secrets);
-        if (!stored) {
-            return [];
-        }
-        if (scopes?.length && !scopes.every((s) => stored.scopes.includes(s))) {
-            return [];
-        }
-        return [(0, sessionStore_js_1.storedSessionToVsCode)(stored)];
-    }
-    async createSession(scopes) {
-        const session = await (0, signInFlow_js_1.runAgentHippoSignInFlow)(this.context, { scopes });
-        if (!session) {
-            throw new Error('Sign-in cancelled');
-        }
-        this._onDidChangeSessions.fire({ added: [session], removed: [], changed: [] });
-        void syncAgentHippoModelGatewayToken(session.accessToken);
-        return session;
-    }
-    async removeSession(_sessionId) {
-        const stored = await (0, sessionStore_js_1.getStoredAuthSession)(this.context.secrets);
-        const removedSession = stored ? (0, sessionStore_js_1.storedSessionToVsCode)(stored) : undefined;
-        if (stored) {
-            const baseUrl = (0, authBaseUrl_js_1.resolveAuthBrokerBaseUrl)(vscode.workspace.getConfiguration('agentide'), (m) => console.warn(m));
-            try {
-                await fetch(`${baseUrl}/api/ide/signout`, {
-                    method: 'POST',
-                    headers: { Authorization: `Bearer ${stored.accessToken}` },
-                });
-            }
-            catch {
-                // best effort
-            }
-        }
-        await (0, sessionStore_js_1.clearAuthSession)(this.context.secrets);
-        void clearAgentHippoModelGatewayToken();
-        await (0, bootstrapApply_js_1.revertTeamManagedBootstrap)({
-            getConfiguration: (section) => vscode.workspace.getConfiguration(section),
-            ConfigurationTarget: vscode.ConfigurationTarget,
-            setParticipantApiKey: async (args) => {
-                await vscode.commands.executeCommand('agentide.setParticipantApiKey', args);
-                await vscode.commands.executeCommand('agentide.auth.applyBootstrapKeys', args);
-            },
-            globalStateUpdate: async (key, value) => {
-                await this.context.globalState.update(key, value);
-            },
-            globalStateGet: (key) => this.context.globalState.get(key),
-        });
-        const removed = removedSession ? [removedSession] : [];
-        this._onDidChangeSessions.fire({ added: [], removed, changed: [] });
-    }
-}
-exports.AgentHippoAuthProvider = AgentHippoAuthProvider;
-function registerAgentHippoAuth(context) {
-    const provider = new AgentHippoAuthProvider(context);
-    context.subscriptions.push(vscode.authentication.registerAuthenticationProvider(types_js_1.AUTH_PROVIDER_ID, 'AgentHippo', provider, { supportsMultipleAccounts: false }), vscode.commands.registerCommand('agenthippo.signIn', async () => {
-        try {
-            await vscode.authentication.getSession(types_js_1.AUTH_PROVIDER_ID, [...types_js_1.AUTH_SCOPES], { forceNewSession: true });
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : String(err);
-            if (!message.toLowerCase().includes('cancel')) {
-                void vscode.window.showErrorMessage(`AgentHippo sign-in failed: ${message}`);
-            }
-        }
-    }), vscode.commands.registerCommand('agenthippo.signOut', async () => {
-        const session = await (0, sessionStore_js_1.getStoredAuthSession)(context.secrets);
-        if (session) {
-            await provider.removeSession(session.accountId);
-        }
-    }), 
-    // Called by the workbench provider dispatcher on an AgentHippo model-gateway 401 to refresh
-    // the (possibly stale) JWT and re-push it to IAPIKeyService before a single retry. Returns
-    // true when a fresh key is now available in SecretStorage for the dispatcher to re-read.
-    vscode.commands.registerCommand('agentide.auth.refreshToken', async () => {
-        const token = await (0, sessionStore_js_1.getAgentHippoAccessToken)(context);
-        if (!token) {
-            return false;
-        }
-        return syncAgentHippoModelGatewayToken(token.accessToken);
-    }));
-}
-async function refreshBootstrapIfSignedIn(context) {
-    const token = await (0, sessionStore_js_1.getAgentHippoAccessToken)(context);
-    if (!token) {
-        return;
-    }
-    try {
-        await (0, sessionStore_js_1.applyIdeBootstrapForContext)(context, token.accessToken);
-    }
-    catch {
-        // ignore startup refresh errors
-    }
-    void syncAgentHippoModelGatewayToken(token.accessToken);
-}
-/**
- * Refresh cadence for the model-gateway JWT. The access token TTL is ~1h;
- * getAgentHippoAccessToken refreshes it inside a 5-min pre-expiry window, so a 60s tick always
- * lands inside that window with buffer and re-syncs the agenthippo provider key before the old
- * JWT expires (fixes stale-key 401s on long sessions). The sync is diff-gated so we don't churn
- * SecretStorage / onDidChangeKeys every tick when nothing changed. There is no routing-key
- * refresh: the bootstrap carries no routing credential — the JWT is the credential.
- */
-const TOKEN_REFRESH_INTERVAL_MS = 60_000;
-function startAgentHippoTokenRefreshTimer(context) {
-    let lastSyncedAccessToken = '';
-    let running = false;
-    const handle = setInterval(() => {
-        // Guard against overlapping ticks: a stalled fetch shouldn't let the next tick stack up.
-        if (running) {
-            return;
-        }
-        void (async () => {
-            running = true;
-            try {
-                const token = await (0, sessionStore_js_1.getAgentHippoAccessToken)(context);
-                if (!token) {
-                    return;
-                }
-                // Only push to the model gateway when the JWT actually changed (once per ~hour,
-                // on rotation) — setAPIKey fires onDidChangeKeys on every call, so re-syncing an
-                // unchanged token every 60s would churn listeners.
-                if (token.accessToken !== lastSyncedAccessToken) {
-                    const ok = await syncAgentHippoModelGatewayToken(token.accessToken);
-                    if (ok) {
-                        lastSyncedAccessToken = token.accessToken;
-                    }
-                }
-            }
-            finally {
-                running = false;
-            }
-        })();
-    }, TOKEN_REFRESH_INTERVAL_MS);
-    return { dispose: () => clearInterval(handle) };
-}
+/*! Copyright (c) 2026 AgentHippo.ai. All rights reserved. Proprietary; see LICENSE. */
+"use strict";var __createBinding=this&&this.__createBinding||(Object.create?(function(s,t,e,n){n===void 0&&(n=e);var o=Object.getOwnPropertyDescriptor(t,e);(!o||("get"in o?!t.__esModule:o.writable||o.configurable))&&(o={enumerable:!0,get:function(){return t[e]}}),Object.defineProperty(s,n,o)}):(function(s,t,e,n){n===void 0&&(n=e),s[n]=t[e]})),__setModuleDefault=this&&this.__setModuleDefault||(Object.create?(function(s,t){Object.defineProperty(s,"default",{enumerable:!0,value:t})}):function(s,t){s.default=t}),__importStar=this&&this.__importStar||(function(){var s=function(t){return s=Object.getOwnPropertyNames||function(e){var n=[];for(var o in e)Object.prototype.hasOwnProperty.call(e,o)&&(n[n.length]=o);return n},s(t)};return function(t){if(t&&t.__esModule)return t;var e={};if(t!=null)for(var n=s(t),o=0;o<n.length;o++)n[o]!=="default"&&__createBinding(e,t,n[o]);return __setModuleDefault(e,t),e}})();Object.defineProperty(exports,"__esModule",{value:!0}),exports.AgentHippoAuthProvider=exports.getAgentHippoAccessToken=void 0,exports.registerAgentHippoAuth=registerAgentHippoAuth,exports.refreshBootstrapIfSignedIn=refreshBootstrapIfSignedIn,exports.startAgentHippoTokenRefreshTimer=startAgentHippoTokenRefreshTimer;const vscode=__importStar(require("vscode")),authBaseUrl_js_1=require("./authBaseUrl.js"),bootstrapApply_js_1=require("./bootstrapApply.js"),types_js_1=require("./types.js"),signInFlow_js_1=require("./signInFlow.js"),sessionStore_js_1=require("./sessionStore.js");var sessionStore_js_2=require("./sessionStore.js");Object.defineProperty(exports,"getAgentHippoAccessToken",{enumerable:!0,get:function(){return sessionStore_js_2.getAgentHippoAccessToken}});const DEFAULT_AGENTHIPPO_MODEL_GATEWAY_URL="https://gateway.agenthippo.ai/v1";function getAgentHippoModelGatewayUrl(){return vscode.workspace.getConfiguration("agentide").get("AgentHippoModelGateway.url")?.trim()||DEFAULT_AGENTHIPPO_MODEL_GATEWAY_URL}async function syncAgentHippoModelGatewayToken(s){try{return await vscode.commands.executeCommand("agentide.auth.applyBootstrapKeys",{provider:"agenthippo",apiKey:s,baseUrl:getAgentHippoModelGatewayUrl()}),!0}catch{return!1}}async function clearAgentHippoModelGatewayToken(){try{await vscode.commands.executeCommand("agentide.auth.applyBootstrapKeys",{provider:"agenthippo",apiKey:""})}catch{}}class AgentHippoAuthProvider{context;_onDidChangeSessions=new vscode.EventEmitter;onDidChangeSessions=this._onDidChangeSessions.event;constructor(t){this.context=t}dispose(){}async getSessions(t){const e=await(0,sessionStore_js_1.getStoredAuthSession)(this.context.secrets);return e?t?.length&&!t.every(n=>e.scopes.includes(n))?[]:[(0,sessionStore_js_1.storedSessionToVsCode)(e)]:[]}async createSession(t){const e=await(0,signInFlow_js_1.runAgentHippoSignInFlow)(this.context,{scopes:t});if(!e)throw new Error("Sign-in cancelled");return this._onDidChangeSessions.fire({added:[e],removed:[],changed:[]}),syncAgentHippoModelGatewayToken(e.accessToken),e}async removeSession(t){const e=await(0,sessionStore_js_1.getStoredAuthSession)(this.context.secrets),n=e?(0,sessionStore_js_1.storedSessionToVsCode)(e):void 0;if(e){const r=(0,authBaseUrl_js_1.resolveAuthBrokerBaseUrl)(vscode.workspace.getConfiguration("agentide"),i=>console.warn(i));try{await fetch(`${r}/api/ide/signout`,{method:"POST",headers:{Authorization:`Bearer ${e.accessToken}`}})}catch{}}await(0,sessionStore_js_1.clearAuthSession)(this.context.secrets),clearAgentHippoModelGatewayToken(),await(0,bootstrapApply_js_1.revertTeamManagedBootstrap)({getConfiguration:r=>vscode.workspace.getConfiguration(r),ConfigurationTarget:vscode.ConfigurationTarget,setParticipantApiKey:async r=>{await vscode.commands.executeCommand("agentide.setParticipantApiKey",r),await vscode.commands.executeCommand("agentide.auth.applyBootstrapKeys",r)},globalStateUpdate:async(r,i)=>{await this.context.globalState.update(r,i)},globalStateGet:r=>this.context.globalState.get(r)});const o=n?[n]:[];this._onDidChangeSessions.fire({added:[],removed:o,changed:[]})}}exports.AgentHippoAuthProvider=AgentHippoAuthProvider;function registerAgentHippoAuth(s){const t=new AgentHippoAuthProvider(s);s.subscriptions.push(vscode.authentication.registerAuthenticationProvider(types_js_1.AUTH_PROVIDER_ID,"AgentHippo",t,{supportsMultipleAccounts:!1}),vscode.commands.registerCommand("agenthippo.signIn",async()=>{try{await vscode.authentication.getSession(types_js_1.AUTH_PROVIDER_ID,[...types_js_1.AUTH_SCOPES],{forceNewSession:!0})}catch(e){const n=e instanceof Error?e.message:String(e);n.toLowerCase().includes("cancel")||vscode.window.showErrorMessage(`AgentHippo sign-in failed: ${n}`)}}),vscode.commands.registerCommand("agenthippo.signOut",async()=>{const e=await(0,sessionStore_js_1.getStoredAuthSession)(s.secrets);e&&await t.removeSession(e.accountId)}),vscode.commands.registerCommand("agentide.auth.refreshToken",async()=>{const e=await(0,sessionStore_js_1.getAgentHippoAccessToken)(s);return e?syncAgentHippoModelGatewayToken(e.accessToken):!1}))}async function refreshBootstrapIfSignedIn(s){const t=await(0,sessionStore_js_1.getAgentHippoAccessToken)(s);if(t){try{await(0,sessionStore_js_1.applyIdeBootstrapForContext)(s,t.accessToken)}catch{}syncAgentHippoModelGatewayToken(t.accessToken)}}const TOKEN_REFRESH_INTERVAL_MS=6e4;function startAgentHippoTokenRefreshTimer(s){let t="",e=!1;const n=setInterval(()=>{e||(async()=>{e=!0;try{const o=await(0,sessionStore_js_1.getAgentHippoAccessToken)(s);if(!o)return;o.accessToken!==t&&await syncAgentHippoModelGatewayToken(o.accessToken)&&(t=o.accessToken)}finally{e=!1}})()},TOKEN_REFRESH_INTERVAL_MS);return{dispose:()=>clearInterval(n)}}

package/out/auth/sessionStore.js

@@ -1,156 +1,2 @@
-"use strict";
-/*---------------------------------------------------------------------------------------------
- *  Copyright (c) AgentHippo.ai. All rights reserved.
- *--------------------------------------------------------------------------------------------*/
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getStoredAuthSession = getStoredAuthSession;
-exports.persistAuthSession = persistAuthSession;
-exports.applyIdeBootstrapForContext = applyIdeBootstrapForContext;
-exports.getAgentHippoAccessToken = getAgentHippoAccessToken;
-exports.clearAuthSession = clearAuthSession;
-exports.storedSessionToVsCode = storedSessionToVsCode;
-const vscode = __importStar(require("vscode"));
-const brokerClient_js_1 = require("./brokerClient.js");
-const authBaseUrl_js_1 = require("./authBaseUrl.js");
-const bootstrapApply_js_1 = require("./bootstrapApply.js");
-const SESSION_SECRET_KEY = 'agenthippo.auth.session';
-/**
- * Refresh this far before expiry so the model-gateway key (synced by a periodic timer in
- * provider.ts) is rotated with a buffer before the old short-lived JWT actually expires.
- */
-const REFRESH_WINDOW_MS = 5 * 60_000;
-/**
- * De-dups concurrent refresh attempts. Refresh tokens are single-use (the broker revokes the
- * rotated token on first exchange), so two simultaneous refreshes would burn one token and
- * force a re-sign-in. Only the first caller performs the refresh; others await its result.
- */
-let inFlightRefresh;
-async function getStoredAuthSession(secrets) {
-    const raw = await secrets.get(SESSION_SECRET_KEY);
-    if (!raw) {
-        return undefined;
-    }
-    try {
-        return JSON.parse(raw);
-    }
-    catch {
-        return undefined;
-    }
-}
-async function storeAuthSession(secrets, session) {
-    await secrets.store(SESSION_SECRET_KEY, JSON.stringify(session));
-}
-function toVsCodeSession(stored) {
-    return {
-        id: stored.accountId,
-        accessToken: stored.accessToken,
-        account: { id: stored.accountId, label: stored.accountLabel },
-        scopes: stored.scopes,
-    };
-}
-async function persistAuthSession(secrets, tokens, bootstrap, scopes) {
-    const session = {
-        accessToken: tokens.access_token,
-        refreshToken: tokens.refresh_token,
-        accountId: bootstrap.user.id,
-        accountLabel: bootstrap.user.email,
-        scopes: [...scopes],
-        expiresAt: Date.now() + tokens.expires_in * 1000,
-    };
-    await storeAuthSession(secrets, session);
-    return toVsCodeSession(session);
-}
-async function applyIdeBootstrapForContext(context, accessToken) {
-    const baseUrl = (0, authBaseUrl_js_1.resolveAuthBrokerBaseUrl)(vscode.workspace.getConfiguration('agentide'), (m) => console.warn(m));
-    const bootstrap = await (0, brokerClient_js_1.fetchBootstrap)(baseUrl, accessToken);
-    await (0, bootstrapApply_js_1.applyIdeBootstrap)(bootstrap, {
-        getConfiguration: (section) => vscode.workspace.getConfiguration(section),
-        ConfigurationTarget: vscode.ConfigurationTarget,
-        setParticipantApiKey: async (args) => {
-            await vscode.commands.executeCommand('agentide.setParticipantApiKey', args);
-            await vscode.commands.executeCommand('agentide.auth.applyBootstrapKeys', args);
-        },
-        globalStateUpdate: async (key, value) => {
-            await context.globalState.update(key, value);
-        },
-        globalStateGet: (key) => context.globalState.get(key),
-    });
-    return bootstrap;
-}
-async function getAgentHippoAccessToken(context) {
-    const stored = await getStoredAuthSession(context.secrets);
-    if (!stored) {
-        return undefined;
-    }
-    if (stored.expiresAt > Date.now() + REFRESH_WINDOW_MS) {
-        return { accessToken: stored.accessToken, email: stored.accountLabel };
-    }
-    // Near expiry — refresh exactly once across concurrent callers.
-    if (!inFlightRefresh) {
-        const baseUrl = (0, authBaseUrl_js_1.resolveAuthBrokerBaseUrl)(vscode.workspace.getConfiguration('agentide'), (m) => console.warn(m));
-        const refreshing = stored;
-        inFlightRefresh = (async () => {
-            try {
-                const refreshed = await (0, brokerClient_js_1.refreshAccessToken)(baseUrl, refreshing.refreshToken);
-                const next = {
-                    ...refreshing,
-                    accessToken: refreshed.access_token,
-                    refreshToken: refreshed.refresh_token,
-                    expiresAt: Date.now() + refreshed.expires_in * 1000,
-                };
-                await storeAuthSession(context.secrets, next);
-                return next;
-            }
-            catch {
-                return undefined;
-            }
-            finally {
-                inFlightRefresh = undefined;
-            }
-        })();
-    }
-    const result = await inFlightRefresh;
-    if (!result) {
-        return undefined;
-    }
-    return { accessToken: result.accessToken, email: result.accountLabel };
-}
-async function clearAuthSession(secrets) {
-    await secrets.delete(SESSION_SECRET_KEY);
-}
-function storedSessionToVsCode(stored) {
-    return toVsCodeSession(stored);
-}
+/*! Copyright (c) 2026 AgentHippo.ai. All rights reserved. Proprietary; see LICENSE. */
+"use strict";var __createBinding=this&&this.__createBinding||(Object.create?(function(t,e,r,s){s===void 0&&(s=r);var n=Object.getOwnPropertyDescriptor(e,r);(!n||("get"in n?!e.__esModule:n.writable||n.configurable))&&(n={enumerable:!0,get:function(){return e[r]}}),Object.defineProperty(t,s,n)}):(function(t,e,r,s){s===void 0&&(s=r),t[s]=e[r]})),__setModuleDefault=this&&this.__setModuleDefault||(Object.create?(function(t,e){Object.defineProperty(t,"default",{enumerable:!0,value:e})}):function(t,e){t.default=e}),__importStar=this&&this.__importStar||(function(){var t=function(e){return t=Object.getOwnPropertyNames||function(r){var s=[];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(s[s.length]=n);return s},t(e)};return function(e){if(e&&e.__esModule)return e;var r={};if(e!=null)for(var s=t(e),n=0;n<s.length;n++)s[n]!=="default"&&__createBinding(r,e,s[n]);return __setModuleDefault(r,e),r}})();Object.defineProperty(exports,"__esModule",{value:!0}),exports.getStoredAuthSession=getStoredAuthSession,exports.persistAuthSession=persistAuthSession,exports.applyIdeBootstrapForContext=applyIdeBootstrapForContext,exports.getAgentHippoAccessToken=getAgentHippoAccessToken,exports.clearAuthSession=clearAuthSession,exports.storedSessionToVsCode=storedSessionToVsCode;const vscode=__importStar(require("vscode")),brokerClient_js_1=require("./brokerClient.js"),authBaseUrl_js_1=require("./authBaseUrl.js"),bootstrapApply_js_1=require("./bootstrapApply.js"),SESSION_SECRET_KEY="agenthippo.auth.session",REFRESH_WINDOW_MS=5*6e4;let inFlightRefresh;async function getStoredAuthSession(t){const e=await t.get(SESSION_SECRET_KEY);if(e)try{return JSON.parse(e)}catch{return}}async function storeAuthSession(t,e){await t.store(SESSION_SECRET_KEY,JSON.stringify(e))}function toVsCodeSession(t){return{id:t.accountId,accessToken:t.accessToken,account:{id:t.accountId,label:t.accountLabel},scopes:t.scopes}}async function persistAuthSession(t,e,r,s){const n={accessToken:e.access_token,refreshToken:e.refresh_token,accountId:r.user.id,accountLabel:r.user.email,scopes:[...s],expiresAt:Date.now()+e.expires_in*1e3};return await storeAuthSession(t,n),toVsCodeSession(n)}async function applyIdeBootstrapForContext(t,e){const r=(0,authBaseUrl_js_1.resolveAuthBrokerBaseUrl)(vscode.workspace.getConfiguration("agentide"),n=>console.warn(n)),s=await(0,brokerClient_js_1.fetchBootstrap)(r,e);return await(0,bootstrapApply_js_1.applyIdeBootstrap)(s,{getConfiguration:n=>vscode.workspace.getConfiguration(n),ConfigurationTarget:vscode.ConfigurationTarget,setParticipantApiKey:async n=>{await vscode.commands.executeCommand("agentide.setParticipantApiKey",n),await vscode.commands.executeCommand("agentide.auth.applyBootstrapKeys",n)},globalStateUpdate:async(n,o)=>{await t.globalState.update(n,o)},globalStateGet:n=>t.globalState.get(n)}),s}async function getAgentHippoAccessToken(t){const e=await getStoredAuthSession(t.secrets);if(!e)return;if(e.expiresAt>Date.now()+REFRESH_WINDOW_MS)return{accessToken:e.accessToken,email:e.accountLabel};if(!inFlightRefresh){const s=(0,authBaseUrl_js_1.resolveAuthBrokerBaseUrl)(vscode.workspace.getConfiguration("agentide"),o=>console.warn(o)),n=e;inFlightRefresh=(async()=>{try{const o=await(0,brokerClient_js_1.refreshAccessToken)(s,n.refreshToken),a={...n,accessToken:o.access_token,refreshToken:o.refresh_token,expiresAt:Date.now()+o.expires_in*1e3};return await storeAuthSession(t.secrets,a),a}catch{return}finally{inFlightRefresh=void 0}})()}const r=await inFlightRefresh;if(r)return{accessToken:r.accessToken,email:r.accountLabel}}async function clearAuthSession(t){await t.delete(SESSION_SECRET_KEY)}function storedSessionToVsCode(t){return toVsCodeSession(t)}