@agimon-ai/doompi-core 0.0.1-alpha.70

package/dist/services/kernel/index.mjs

@@ -0,0 +1,147 @@
+//#region src/services/kernel/index.ts
+const DISPOSED_MESSAGE = "The kernel is disposed";
+function sameList(left, right) {
+	if (left === void 0 || left.length !== right.length) return false;
+	return left.every((value, index) => value === right[index]);
+}
+function describe(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+function createDoomKernel(options = {}) {
+	const slots = /* @__PURE__ */ new Map();
+	const dirty = /* @__PURE__ */ new Set();
+	/** Slots whose values render differently without the list itself changing. */
+	const forced = /* @__PURE__ */ new Set();
+	let layers = new Set(options.activeLayers ?? []);
+	let sequence = 0;
+	let tail = Promise.resolve();
+	let scheduled;
+	let disposed = false;
+	const activeOf = (slot) => [...slot.entries.entries()].sort(([left], [right]) => left - right).filter(([, entry]) => entry.layer === void 0 || layers.has(entry.layer)).map(([, entry]) => entry.value);
+	const pushOne = async (slot, force, failures) => {
+		if (slot.disposed) return;
+		const active = activeOf(slot);
+		if (!force && sameList(slot.pushed, active)) return;
+		try {
+			await slot.sink(active);
+			slot.pushed = active;
+		} catch (error) {
+			failures.push(`${slot.name}: ${describe(error)}`);
+		}
+	};
+	const flush = () => {
+		const run = tail.catch(() => void 0).then(async () => {
+			if (dirty.size === 0) return;
+			const pending = [...dirty];
+			const pendingForced = new Set(forced);
+			dirty.clear();
+			forced.clear();
+			const failures = [];
+			for (const name of pending) {
+				const slot = slots.get(name);
+				if (slot) await pushOne(slot, pendingForced.has(name), failures);
+			}
+			if (failures.length > 0) throw new Error(`Kernel slots failed to apply: ${failures.join("; ")}`);
+		});
+		tail = run;
+		return run;
+	};
+	const schedule = () => {
+		if (scheduled) return;
+		scheduled = Promise.resolve().then(() => {
+			scheduled = void 0;
+			return flush().catch(() => void 0);
+		});
+	};
+	const markDirty = (name) => {
+		dirty.add(name);
+	};
+	const contribute = (slot, entry) => {
+		if (disposed) throw new Error(DISPOSED_MESSAGE);
+		const state = slots.get(slot);
+		if (!state) throw new Error(`Unknown kernel slot: ${slot}. Defined slots: ${[...slots.keys()].join(", ") || "none"}`);
+		const key = sequence++;
+		state.entries.set(key, entry);
+		markDirty(slot);
+		schedule();
+		let removed = false;
+		return { dispose() {
+			if (removed) return;
+			removed = true;
+			state.entries.delete(key);
+			markDirty(slot);
+			schedule();
+		} };
+	};
+	return {
+		get activeLayers() {
+			return [...layers];
+		},
+		get slots() {
+			return [...slots.keys()];
+		},
+		defineSlot(name, sink) {
+			if (disposed) throw new Error(DISPOSED_MESSAGE);
+			if (slots.has(name)) throw new Error(`Kernel slot already defined: ${name}`);
+			const state = {
+				name,
+				sink,
+				entries: /* @__PURE__ */ new Map(),
+				pushed: void 0,
+				disposed: false
+			};
+			slots.set(name, state);
+			let removed = false;
+			return {
+				name,
+				contribute: (entry) => contribute(name, entry),
+				dispose() {
+					if (removed) return;
+					removed = true;
+					state.disposed = true;
+					slots.delete(name);
+					dirty.delete(name);
+					forced.delete(name);
+				}
+			};
+		},
+		contribute,
+		async setActiveLayers(next) {
+			if (disposed) throw new Error(DISPOSED_MESSAGE);
+			layers = new Set(next);
+			for (const name of slots.keys()) markDirty(name);
+			await flush();
+		},
+		async refresh(slot) {
+			if (disposed) throw new Error(DISPOSED_MESSAGE);
+			if (slot === void 0) for (const name of slots.keys()) {
+				markDirty(name);
+				forced.add(name);
+			}
+			else if (slots.has(slot)) {
+				markDirty(slot);
+				forced.add(slot);
+			}
+			await flush();
+		},
+		activeValues(slot) {
+			const state = slots.get(slot);
+			return state ? activeOf(state) : [];
+		},
+		contributions(slot) {
+			const state = slots.get(slot);
+			return state ? [...state.entries.values()] : [];
+		},
+		dispose() {
+			if (disposed) return;
+			disposed = true;
+			for (const state of slots.values()) state.disposed = true;
+			slots.clear();
+			dirty.clear();
+		}
+	};
+}
+//#endregion
+export { createDoomKernel };
+
+//# sourceMappingURL=index.mjs.map

package/dist/services/kernel/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../src/services/kernel/index.ts"],"sourcesContent":["/**\n * The kernel contribution registry.\n *\n * DESIGN PATTERNS:\n * - Pure function of registered contributions plus the active layer set. Every\n *   push recomputes from that state, so there is no incremental bookkeeping to\n *   drift out of sync.\n * - Pushes are serialized on one tail. A sink that awaits cannot interleave\n *   with the next recompute, which is what keeps a host's whole-list setter\n *   from being called out of order.\n * - Registration coalesces into one microtask flush, so composing forty\n *   packages at startup costs one push per slot rather than forty.\n *\n * AVOID:\n * - Pushing a slot whose active list is unchanged. Hosts treat a set call as a\n *   structural change, and a redundant one is visible to the user.\n * - Throwing out of a push loop early. One broken sink must not stop the rest\n *   of the surfaces from reaching the host.\n */\n\nimport type {\n  DoomKernel,\n  KernelContribution,\n  KernelRegistration,\n  KernelSlotHandle,\n  KernelSlotSink,\n} from '../../types/kernel';\n\ninterface SlotState {\n  readonly name: string;\n  readonly sink: KernelSlotSink<unknown>;\n  readonly entries: Map<number, KernelContribution<unknown>>;\n  pushed: readonly unknown[] | undefined;\n  disposed: boolean;\n}\n\nconst DISPOSED_MESSAGE = 'The kernel is disposed';\n\nfunction sameList(left: readonly unknown[] | undefined, right: readonly unknown[]): boolean {\n  if (left === undefined || left.length !== right.length) return false;\n  return left.every((value, index) => value === right[index]);\n}\n\nfunction describe(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\nexport interface CreateDoomKernelOptions {\n  /** Layers active at creation, usually `resolveLayers(config, majorMode)`. */\n  readonly activeLayers?: readonly string[];\n}\n\nexport function createDoomKernel(options: CreateDoomKernelOptions = {}): DoomKernel {\n  const slots = new Map<string, SlotState>();\n  const dirty = new Set<string>();\n  /** Slots whose values render differently without the list itself changing. */\n  const forced = new Set<string>();\n  let layers = new Set(options.activeLayers ?? []);\n  let sequence = 0;\n  let tail: Promise<void> = Promise.resolve();\n  let scheduled: Promise<void> | undefined;\n  let disposed = false;\n\n  const activeOf = (slot: SlotState): readonly unknown[] =>\n    [...slot.entries.entries()]\n      .sort(([left], [right]) => left - right)\n      .filter(([, entry]) => entry.layer === undefined || layers.has(entry.layer))\n      .map(([, entry]) => entry.value);\n\n  const pushOne = async (slot: SlotState, force: boolean, failures: string[]): Promise<void> => {\n    if (slot.disposed) return;\n    const active = activeOf(slot);\n    if (!force && sameList(slot.pushed, active)) return;\n    try {\n      await slot.sink(active);\n      slot.pushed = active;\n    } catch (error) {\n      // Cache only an acknowledged application. A sink may be retried with the\n      // same active values after it recovers.\n      failures.push(`${slot.name}: ${describe(error)}`);\n    }\n  };\n\n  const flush = (): Promise<void> => {\n    const run = tail\n      .catch(() => undefined)\n      .then(async () => {\n        if (dirty.size === 0) return;\n        const pending = [...dirty];\n        const pendingForced = new Set(forced);\n        dirty.clear();\n        forced.clear();\n        const failures: string[] = [];\n        for (const name of pending) {\n          const slot = slots.get(name);\n          if (slot) await pushOne(slot, pendingForced.has(name), failures);\n        }\n        if (failures.length > 0) throw new Error(`Kernel slots failed to apply: ${failures.join('; ')}`);\n      });\n    tail = run;\n    return run;\n  };\n\n  const schedule = (): void => {\n    if (scheduled) return;\n    scheduled = Promise.resolve().then(() => {\n      scheduled = undefined;\n      // A scheduled flush is fire and forget; `refresh` is how a caller waits.\n      return flush().catch(() => undefined);\n    });\n  };\n\n  const markDirty = (name: string): void => {\n    dirty.add(name);\n  };\n\n  const contribute = <TValue>(slot: string, entry: KernelContribution<TValue>): KernelRegistration => {\n    if (disposed) throw new Error(DISPOSED_MESSAGE);\n    const state = slots.get(slot);\n    if (!state)\n      throw new Error(`Unknown kernel slot: ${slot}. Defined slots: ${[...slots.keys()].join(', ') || 'none'}`);\n    const key = sequence++;\n    state.entries.set(key, entry as KernelContribution<unknown>);\n    markDirty(slot);\n    schedule();\n    let removed = false;\n    return {\n      dispose(): void {\n        if (removed) return;\n        removed = true;\n        state.entries.delete(key);\n        markDirty(slot);\n        schedule();\n      },\n    };\n  };\n\n  return {\n    get activeLayers(): readonly string[] {\n      return [...layers];\n    },\n    get slots(): readonly string[] {\n      return [...slots.keys()];\n    },\n    defineSlot<TValue>(name: string, sink: KernelSlotSink<TValue>): KernelSlotHandle<TValue> {\n      if (disposed) throw new Error(DISPOSED_MESSAGE);\n      if (slots.has(name)) throw new Error(`Kernel slot already defined: ${name}`);\n      const state: SlotState = {\n        name,\n        sink: sink as KernelSlotSink<unknown>,\n        entries: new Map(),\n        pushed: undefined,\n        disposed: false,\n      };\n      slots.set(name, state);\n      let removed = false;\n      return {\n        name,\n        contribute: (entry) => contribute(name, entry),\n        dispose(): void {\n          if (removed) return;\n          removed = true;\n          state.disposed = true;\n          slots.delete(name);\n          dirty.delete(name);\n          forced.delete(name);\n        },\n      };\n    },\n    contribute,\n    async setActiveLayers(next: readonly string[]): Promise<void> {\n      if (disposed) throw new Error(DISPOSED_MESSAGE);\n      layers = new Set(next);\n      for (const name of slots.keys()) markDirty(name);\n      await flush();\n    },\n    async refresh(slot?: string): Promise<void> {\n      if (disposed) throw new Error(DISPOSED_MESSAGE);\n      if (slot === undefined) {\n        for (const name of slots.keys()) {\n          markDirty(name);\n          forced.add(name);\n        }\n      } else if (slots.has(slot)) {\n        markDirty(slot);\n        forced.add(slot);\n      }\n      await flush();\n    },\n    activeValues<TValue>(slot: string): readonly TValue[] {\n      const state = slots.get(slot);\n      return state ? (activeOf(state) as readonly TValue[]) : [];\n    },\n    contributions<TValue>(slot: string): readonly KernelContribution<TValue>[] {\n      const state = slots.get(slot);\n      return state ? ([...state.entries.values()] as readonly KernelContribution<TValue>[]) : [];\n    },\n    dispose(): void {\n      if (disposed) return;\n      disposed = true;\n      for (const state of slots.values()) state.disposed = true;\n      slots.clear();\n      dirty.clear();\n    },\n  };\n}\n"],"mappings":";AAoCA,MAAM,mBAAmB;AAEzB,SAAS,SAAS,MAAsC,OAAoC;CAC1F,IAAI,SAAS,KAAA,KAAa,KAAK,WAAW,MAAM,QAAQ,OAAO;CAC/D,OAAO,KAAK,OAAO,OAAO,UAAU,UAAU,MAAM,MAAM;AAC5D;AAEA,SAAS,SAAS,OAAwB;CACxC,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC9D;AAOA,SAAgB,iBAAiB,UAAmC,CAAC,GAAe;CAClF,MAAM,wBAAQ,IAAI,IAAuB;CACzC,MAAM,wBAAQ,IAAI,IAAY;;CAE9B,MAAM,yBAAS,IAAI,IAAY;CAC/B,IAAI,SAAS,IAAI,IAAI,QAAQ,gBAAgB,CAAC,CAAC;CAC/C,IAAI,WAAW;CACf,IAAI,OAAsB,QAAQ,QAAQ;CAC1C,IAAI;CACJ,IAAI,WAAW;CAEf,MAAM,YAAY,SAChB,CAAC,GAAG,KAAK,QAAQ,QAAQ,CAAC,CAAC,CACxB,MAAM,CAAC,OAAO,CAAC,WAAW,OAAO,KAAK,CAAC,CACvC,QAAQ,GAAG,WAAW,MAAM,UAAU,KAAA,KAAa,OAAO,IAAI,MAAM,KAAK,CAAC,CAAC,CAC3E,KAAK,GAAG,WAAW,MAAM,KAAK;CAEnC,MAAM,UAAU,OAAO,MAAiB,OAAgB,aAAsC;EAC5F,IAAI,KAAK,UAAU;EACnB,MAAM,SAAS,SAAS,IAAI;EAC5B,IAAI,CAAC,SAAS,SAAS,KAAK,QAAQ,MAAM,GAAG;EAC7C,IAAI;GACF,MAAM,KAAK,KAAK,MAAM;GACtB,KAAK,SAAS;EAChB,SAAS,OAAO;GAGd,SAAS,KAAK,GAAG,KAAK,KAAK,IAAI,SAAS,KAAK,GAAG;EAClD;CACF;CAEA,MAAM,cAA6B;EACjC,MAAM,MAAM,KACT,YAAY,KAAA,CAAS,CAAC,CACtB,KAAK,YAAY;GAChB,IAAI,MAAM,SAAS,GAAG;GACtB,MAAM,UAAU,CAAC,GAAG,KAAK;GACzB,MAAM,gBAAgB,IAAI,IAAI,MAAM;GACpC,MAAM,MAAM;GACZ,OAAO,MAAM;GACb,MAAM,WAAqB,CAAC;GAC5B,KAAK,MAAM,QAAQ,SAAS;IAC1B,MAAM,OAAO,MAAM,IAAI,IAAI;IAC3B,IAAI,MAAM,MAAM,QAAQ,MAAM,cAAc,IAAI,IAAI,GAAG,QAAQ;GACjE;GACA,IAAI,SAAS,SAAS,GAAG,MAAM,IAAI,MAAM,iCAAiC,SAAS,KAAK,IAAI,GAAG;EACjG,CAAC;EACH,OAAO;EACP,OAAO;CACT;CAEA,MAAM,iBAAuB;EAC3B,IAAI,WAAW;EACf,YAAY,QAAQ,QAAQ,CAAC,CAAC,WAAW;GACvC,YAAY,KAAA;GAEZ,OAAO,MAAM,CAAC,CAAC,YAAY,KAAA,CAAS;EACtC,CAAC;CACH;CAEA,MAAM,aAAa,SAAuB;EACxC,MAAM,IAAI,IAAI;CAChB;CAEA,MAAM,cAAsB,MAAc,UAA0D;EAClG,IAAI,UAAU,MAAM,IAAI,MAAM,gBAAgB;EAC9C,MAAM,QAAQ,MAAM,IAAI,IAAI;EAC5B,IAAI,CAAC,OACH,MAAM,IAAI,MAAM,wBAAwB,KAAK,mBAAmB,CAAC,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,KAAK,QAAQ;EAC1G,MAAM,MAAM;EACZ,MAAM,QAAQ,IAAI,KAAK,KAAoC;EAC3D,UAAU,IAAI;EACd,SAAS;EACT,IAAI,UAAU;EACd,OAAO,EACL,UAAgB;GACd,IAAI,SAAS;GACb,UAAU;GACV,MAAM,QAAQ,OAAO,GAAG;GACxB,UAAU,IAAI;GACd,SAAS;EACX,EACF;CACF;CAEA,OAAO;EACL,IAAI,eAAkC;GACpC,OAAO,CAAC,GAAG,MAAM;EACnB;EACA,IAAI,QAA2B;GAC7B,OAAO,CAAC,GAAG,MAAM,KAAK,CAAC;EACzB;EACA,WAAmB,MAAc,MAAwD;GACvF,IAAI,UAAU,MAAM,IAAI,MAAM,gBAAgB;GAC9C,IAAI,MAAM,IAAI,IAAI,GAAG,MAAM,IAAI,MAAM,gCAAgC,MAAM;GAC3E,MAAM,QAAmB;IACvB;IACM;IACN,yBAAS,IAAI,IAAI;IACjB,QAAQ,KAAA;IACR,UAAU;GACZ;GACA,MAAM,IAAI,MAAM,KAAK;GACrB,IAAI,UAAU;GACd,OAAO;IACL;IACA,aAAa,UAAU,WAAW,MAAM,KAAK;IAC7C,UAAgB;KACd,IAAI,SAAS;KACb,UAAU;KACV,MAAM,WAAW;KACjB,MAAM,OAAO,IAAI;KACjB,MAAM,OAAO,IAAI;KACjB,OAAO,OAAO,IAAI;IACpB;GACF;EACF;EACA;EACA,MAAM,gBAAgB,MAAwC;GAC5D,IAAI,UAAU,MAAM,IAAI,MAAM,gBAAgB;GAC9C,SAAS,IAAI,IAAI,IAAI;GACrB,KAAK,MAAM,QAAQ,MAAM,KAAK,GAAG,UAAU,IAAI;GAC/C,MAAM,MAAM;EACd;EACA,MAAM,QAAQ,MAA8B;GAC1C,IAAI,UAAU,MAAM,IAAI,MAAM,gBAAgB;GAC9C,IAAI,SAAS,KAAA,GACX,KAAK,MAAM,QAAQ,MAAM,KAAK,GAAG;IAC/B,UAAU,IAAI;IACd,OAAO,IAAI,IAAI;GACjB;QACK,IAAI,MAAM,IAAI,IAAI,GAAG;IAC1B,UAAU,IAAI;IACd,OAAO,IAAI,IAAI;GACjB;GACA,MAAM,MAAM;EACd;EACA,aAAqB,MAAiC;GACpD,MAAM,QAAQ,MAAM,IAAI,IAAI;GAC5B,OAAO,QAAS,SAAS,KAAK,IAA0B,CAAC;EAC3D;EACA,cAAsB,MAAqD;GACzE,MAAM,QAAQ,MAAM,IAAI,IAAI;GAC5B,OAAO,QAAS,CAAC,GAAG,MAAM,QAAQ,OAAO,CAAC,IAA8C,CAAC;EAC3F;EACA,UAAgB;GACd,IAAI,UAAU;GACd,WAAW;GACX,KAAK,MAAM,SAAS,MAAM,OAAO,GAAG,MAAM,WAAW;GACrD,MAAM,MAAM;GACZ,MAAM,MAAM;EACd;CACF;AACF"}

package/dist/services/loginFlow/index.cjs

@@ -0,0 +1,131 @@
+//#region src/services/loginFlow/index.ts
+/** The message Pi's own login dialog uses; a provider flow may match on it. */
+const CANCELLED_MESSAGE = "Login cancelled";
+const SUPERSEDED_MESSAGE = "Superseded by a newer prompt";
+/**
+* Option ids Pi's providers use for their redirect-free login.
+*
+* The spelling is not consistent across providers: openai-codex offers
+* `device_code` and radius offers `device-code`, so both are matched rather
+* than assuming one canonical form.
+*/
+const DEVICE_CODE_OPTION_IDS = /* @__PURE__ */ new Set(["device_code", "device-code"]);
+/**
+* The redirect-free option a remote login should take, when the provider
+* offers one.
+*
+* Pi asks browser-or-device-code as an ordinary select. A remote browser
+* cannot receive a loopback redirect, so answering it for the user turns a
+* dead end into the one method that works, rather than showing a choice whose
+* default is broken.
+*/
+function deviceCodeOption(prompt) {
+	if (prompt.type !== "select") return void 0;
+	return prompt.options.find((option) => DEVICE_CODE_OPTION_IDS.has(option.id))?.id;
+}
+function promptView(id, prompt) {
+	const view = {
+		id,
+		type: prompt.type,
+		message: prompt.message
+	};
+	if (prompt.type === "select") view.options = prompt.options.map((option) => ({ ...option }));
+	else if (prompt.placeholder !== void 0) view.placeholder = prompt.placeholder;
+	return view;
+}
+/**
+* The state machine between a provider login and a browser that can only
+* poll and post.
+*
+* A provider asks one question at a time and may withdraw it (a manual-code
+* prompt raced against a callback server aborts when the callback wins), so
+* the flow holds at most one pending prompt, rejects it when its signal
+* fires, and supersedes it if the provider asks again.
+*/
+function createLoginFlow(input) {
+	const controller = new AbortController();
+	const events = [];
+	let status = "running";
+	let error;
+	let pending;
+	let promptSeq = 0;
+	const failPending = (reason) => {
+		const current = pending;
+		if (!current) return;
+		pending = void 0;
+		current.detach();
+		current.reject(reason);
+	};
+	const interaction = {
+		signal: controller.signal,
+		prompt(prompt) {
+			if (controller.signal.aborted || prompt.signal?.aborted) return Promise.reject(/* @__PURE__ */ new Error(CANCELLED_MESSAGE));
+			failPending(/* @__PURE__ */ new Error(SUPERSEDED_MESSAGE));
+			if (input.remote) {
+				const deviceCode = deviceCodeOption(prompt);
+				if (deviceCode !== void 0) return Promise.resolve(deviceCode);
+			}
+			promptSeq += 1;
+			const view = promptView(String(promptSeq), prompt);
+			return new Promise((resolve, reject) => {
+				const onAbort = () => failPending(/* @__PURE__ */ new Error(CANCELLED_MESSAGE));
+				prompt.signal?.addEventListener("abort", onAbort, { once: true });
+				pending = {
+					view,
+					resolve,
+					reject,
+					detach: () => prompt.signal?.removeEventListener("abort", onAbort)
+				};
+			});
+		},
+		notify(event) {
+			events.push(event);
+		}
+	};
+	return {
+		id: input.id,
+		providerId: input.providerId,
+		interaction,
+		snapshot() {
+			const snapshot = {
+				id: input.id,
+				providerId: input.providerId,
+				providerName: input.providerName,
+				type: input.type,
+				status,
+				events: [...events]
+			};
+			if (pending) snapshot.prompt = pending.view;
+			if (input.remote) snapshot.remote = true;
+			if (error !== void 0) snapshot.error = error;
+			return snapshot;
+		},
+		answer(promptId, value) {
+			const current = pending;
+			if (!current || current.view.id !== promptId) return false;
+			pending = void 0;
+			current.detach();
+			current.resolve(value);
+			return true;
+		},
+		cancel() {
+			if (status !== "running") return;
+			status = "cancelled";
+			controller.abort();
+			failPending(/* @__PURE__ */ new Error(CANCELLED_MESSAGE));
+		},
+		settle(outcome) {
+			if (status !== "running") return;
+			if (outcome.ok) status = "succeeded";
+			else {
+				status = "failed";
+				error = outcome.error;
+			}
+			failPending(/* @__PURE__ */ new Error(CANCELLED_MESSAGE));
+		}
+	};
+}
+//#endregion
+exports.createLoginFlow = createLoginFlow;
+
+//# sourceMappingURL=index.cjs.map

package/dist/services/loginFlow/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":[],"sources":["../../../src/services/loginFlow/index.ts"],"sourcesContent":["import type {\n  AuthMethodType,\n  LoginEvent,\n  LoginFlowSnapshot,\n  LoginFlowStatus,\n  LoginInteraction,\n  LoginPrompt,\n  LoginPromptView,\n} from '../../types/server/auth';\n\n/** The message Pi's own login dialog uses; a provider flow may match on it. */\nconst CANCELLED_MESSAGE = 'Login cancelled';\nconst SUPERSEDED_MESSAGE = 'Superseded by a newer prompt';\n\n/**\n * Option ids Pi's providers use for their redirect-free login.\n *\n * The spelling is not consistent across providers: openai-codex offers\n * `device_code` and radius offers `device-code`, so both are matched rather\n * than assuming one canonical form.\n */\nconst DEVICE_CODE_OPTION_IDS: ReadonlySet<string> = new Set(['device_code', 'device-code']);\n\ninterface PendingPrompt {\n  view: LoginPromptView;\n  resolve(value: string): void;\n  reject(error: Error): void;\n  detach(): void;\n}\n\nexport interface LoginFlowInput {\n  id: string;\n  providerId: string;\n  providerName: string;\n  type: AuthMethodType;\n  /**\n   * The login was started from the tunnel, so the browser is on another\n   * machine and a loopback redirect cannot reach this host.\n   */\n  remote?: boolean;\n}\n\n/**\n * The redirect-free option a remote login should take, when the provider\n * offers one.\n *\n * Pi asks browser-or-device-code as an ordinary select. A remote browser\n * cannot receive a loopback redirect, so answering it for the user turns a\n * dead end into the one method that works, rather than showing a choice whose\n * default is broken.\n */\nfunction deviceCodeOption(prompt: LoginPrompt): string | undefined {\n  if (prompt.type !== 'select') return undefined;\n  return prompt.options.find((option) => DEVICE_CODE_OPTION_IDS.has(option.id))?.id;\n}\n\n/**\n * One login in progress, seen from both sides: the provider's flow talks to\n * it through `interaction`, the page through snapshots and answers.\n */\nexport interface LoginFlow {\n  readonly id: string;\n  readonly providerId: string;\n  /** Hand this to the runtime's login; prompts and events route through the flow. */\n  readonly interaction: LoginInteraction;\n  snapshot(): LoginFlowSnapshot;\n  /** Answers the pending prompt; false when the flow is not waiting on that prompt. */\n  answer(promptId: string, value: string): boolean;\n  /** Aborts the provider's flow; a settled flow is left as it ended. */\n  cancel(): void;\n  /** Records how the runtime's login ended; a cancelled flow stays cancelled. */\n  settle(outcome: { ok: true } | { ok: false; error: string }): void;\n}\n\nfunction promptView(id: string, prompt: LoginPrompt): LoginPromptView {\n  const view: LoginPromptView = { id, type: prompt.type, message: prompt.message };\n  if (prompt.type === 'select') view.options = prompt.options.map((option) => ({ ...option }));\n  else if (prompt.placeholder !== undefined) view.placeholder = prompt.placeholder;\n  return view;\n}\n\n/**\n * The state machine between a provider login and a browser that can only\n * poll and post.\n *\n * A provider asks one question at a time and may withdraw it (a manual-code\n * prompt raced against a callback server aborts when the callback wins), so\n * the flow holds at most one pending prompt, rejects it when its signal\n * fires, and supersedes it if the provider asks again.\n */\nexport function createLoginFlow(input: LoginFlowInput): LoginFlow {\n  const controller = new AbortController();\n  const events: LoginEvent[] = [];\n  let status: LoginFlowStatus = 'running';\n  let error: string | undefined;\n  let pending: PendingPrompt | undefined;\n  let promptSeq = 0;\n\n  const failPending = (reason: Error): void => {\n    const current = pending;\n    if (!current) return;\n    pending = undefined;\n    current.detach();\n    current.reject(reason);\n  };\n\n  const interaction: LoginInteraction = {\n    signal: controller.signal,\n    prompt(prompt) {\n      if (controller.signal.aborted || prompt.signal?.aborted) return Promise.reject(new Error(CANCELLED_MESSAGE));\n      failPending(new Error(SUPERSEDED_MESSAGE));\n      // Answered before a view exists, so the page never renders a choice the\n      // remote browser cannot complete.\n      if (input.remote) {\n        const deviceCode = deviceCodeOption(prompt);\n        if (deviceCode !== undefined) return Promise.resolve(deviceCode);\n      }\n      promptSeq += 1;\n      const view = promptView(String(promptSeq), prompt);\n      return new Promise<string>((resolve, reject) => {\n        const onAbort = (): void => failPending(new Error(CANCELLED_MESSAGE));\n        prompt.signal?.addEventListener('abort', onAbort, { once: true });\n        pending = {\n          view,\n          resolve,\n          reject,\n          detach: () => prompt.signal?.removeEventListener('abort', onAbort),\n        };\n      });\n    },\n    notify(event) {\n      events.push(event);\n    },\n  };\n\n  return {\n    id: input.id,\n    providerId: input.providerId,\n    interaction,\n    snapshot() {\n      const snapshot: LoginFlowSnapshot = {\n        id: input.id,\n        providerId: input.providerId,\n        providerName: input.providerName,\n        type: input.type,\n        status,\n        events: [...events],\n      };\n      if (pending) snapshot.prompt = pending.view;\n      if (input.remote) snapshot.remote = true;\n      if (error !== undefined) snapshot.error = error;\n      return snapshot;\n    },\n    answer(promptId, value) {\n      const current = pending;\n      if (!current || current.view.id !== promptId) return false;\n      pending = undefined;\n      current.detach();\n      current.resolve(value);\n      return true;\n    },\n    cancel() {\n      if (status !== 'running') return;\n      status = 'cancelled';\n      controller.abort();\n      failPending(new Error(CANCELLED_MESSAGE));\n    },\n    settle(outcome) {\n      if (status !== 'running') return;\n      if (outcome.ok) {\n        status = 'succeeded';\n      } else {\n        status = 'failed';\n        error = outcome.error;\n      }\n      failPending(new Error(CANCELLED_MESSAGE));\n    },\n  };\n}\n"],"mappings":";;AAWA,MAAM,oBAAoB;AAC1B,MAAM,qBAAqB;;;;;;;;AAS3B,MAAM,yCAA8C,IAAI,IAAI,CAAC,eAAe,aAAa,CAAC;;;;;;;;;;AA8B1F,SAAS,iBAAiB,QAAyC;CACjE,IAAI,OAAO,SAAS,UAAU,OAAO,KAAA;CACrC,OAAO,OAAO,QAAQ,MAAM,WAAW,uBAAuB,IAAI,OAAO,EAAE,CAAC,CAAC,EAAE;AACjF;AAoBA,SAAS,WAAW,IAAY,QAAsC;CACpE,MAAM,OAAwB;EAAE;EAAI,MAAM,OAAO;EAAM,SAAS,OAAO;CAAQ;CAC/E,IAAI,OAAO,SAAS,UAAU,KAAK,UAAU,OAAO,QAAQ,KAAK,YAAY,EAAE,GAAG,OAAO,EAAE;MACtF,IAAI,OAAO,gBAAgB,KAAA,GAAW,KAAK,cAAc,OAAO;CACrE,OAAO;AACT;;;;;;;;;;AAWA,SAAgB,gBAAgB,OAAkC;CAChE,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,SAAuB,CAAC;CAC9B,IAAI,SAA0B;CAC9B,IAAI;CACJ,IAAI;CACJ,IAAI,YAAY;CAEhB,MAAM,eAAe,WAAwB;EAC3C,MAAM,UAAU;EAChB,IAAI,CAAC,SAAS;EACd,UAAU,KAAA;EACV,QAAQ,OAAO;EACf,QAAQ,OAAO,MAAM;CACvB;CAEA,MAAM,cAAgC;EACpC,QAAQ,WAAW;EACnB,OAAO,QAAQ;GACb,IAAI,WAAW,OAAO,WAAW,OAAO,QAAQ,SAAS,OAAO,QAAQ,uBAAO,IAAI,MAAM,iBAAiB,CAAC;GAC3G,4BAAY,IAAI,MAAM,kBAAkB,CAAC;GAGzC,IAAI,MAAM,QAAQ;IAChB,MAAM,aAAa,iBAAiB,MAAM;IAC1C,IAAI,eAAe,KAAA,GAAW,OAAO,QAAQ,QAAQ,UAAU;GACjE;GACA,aAAa;GACb,MAAM,OAAO,WAAW,OAAO,SAAS,GAAG,MAAM;GACjD,OAAO,IAAI,SAAiB,SAAS,WAAW;IAC9C,MAAM,gBAAsB,4BAAY,IAAI,MAAM,iBAAiB,CAAC;IACpE,OAAO,QAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;IAChE,UAAU;KACR;KACA;KACA;KACA,cAAc,OAAO,QAAQ,oBAAoB,SAAS,OAAO;IACnE;GACF,CAAC;EACH;EACA,OAAO,OAAO;GACZ,OAAO,KAAK,KAAK;EACnB;CACF;CAEA,OAAO;EACL,IAAI,MAAM;EACV,YAAY,MAAM;EAClB;EACA,WAAW;GACT,MAAM,WAA8B;IAClC,IAAI,MAAM;IACV,YAAY,MAAM;IAClB,cAAc,MAAM;IACpB,MAAM,MAAM;IACZ;IACA,QAAQ,CAAC,GAAG,MAAM;GACpB;GACA,IAAI,SAAS,SAAS,SAAS,QAAQ;GACvC,IAAI,MAAM,QAAQ,SAAS,SAAS;GACpC,IAAI,UAAU,KAAA,GAAW,SAAS,QAAQ;GAC1C,OAAO;EACT;EACA,OAAO,UAAU,OAAO;GACtB,MAAM,UAAU;GAChB,IAAI,CAAC,WAAW,QAAQ,KAAK,OAAO,UAAU,OAAO;GACrD,UAAU,KAAA;GACV,QAAQ,OAAO;GACf,QAAQ,QAAQ,KAAK;GACrB,OAAO;EACT;EACA,SAAS;GACP,IAAI,WAAW,WAAW;GAC1B,SAAS;GACT,WAAW,MAAM;GACjB,4BAAY,IAAI,MAAM,iBAAiB,CAAC;EAC1C;EACA,OAAO,SAAS;GACd,IAAI,WAAW,WAAW;GAC1B,IAAI,QAAQ,IACV,SAAS;QACJ;IACL,SAAS;IACT,QAAQ,QAAQ;GAClB;GACA,4BAAY,IAAI,MAAM,iBAAiB,CAAC;EAC1C;CACF;AACF"}

package/dist/services/loginFlow/index.mjs

@@ -0,0 +1,131 @@
+//#region src/services/loginFlow/index.ts
+/** The message Pi's own login dialog uses; a provider flow may match on it. */
+const CANCELLED_MESSAGE = "Login cancelled";
+const SUPERSEDED_MESSAGE = "Superseded by a newer prompt";
+/**
+* Option ids Pi's providers use for their redirect-free login.
+*
+* The spelling is not consistent across providers: openai-codex offers
+* `device_code` and radius offers `device-code`, so both are matched rather
+* than assuming one canonical form.
+*/
+const DEVICE_CODE_OPTION_IDS = /* @__PURE__ */ new Set(["device_code", "device-code"]);
+/**
+* The redirect-free option a remote login should take, when the provider
+* offers one.
+*
+* Pi asks browser-or-device-code as an ordinary select. A remote browser
+* cannot receive a loopback redirect, so answering it for the user turns a
+* dead end into the one method that works, rather than showing a choice whose
+* default is broken.
+*/
+function deviceCodeOption(prompt) {
+	if (prompt.type !== "select") return void 0;
+	return prompt.options.find((option) => DEVICE_CODE_OPTION_IDS.has(option.id))?.id;
+}
+function promptView(id, prompt) {
+	const view = {
+		id,
+		type: prompt.type,
+		message: prompt.message
+	};
+	if (prompt.type === "select") view.options = prompt.options.map((option) => ({ ...option }));
+	else if (prompt.placeholder !== void 0) view.placeholder = prompt.placeholder;
+	return view;
+}
+/**
+* The state machine between a provider login and a browser that can only
+* poll and post.
+*
+* A provider asks one question at a time and may withdraw it (a manual-code
+* prompt raced against a callback server aborts when the callback wins), so
+* the flow holds at most one pending prompt, rejects it when its signal
+* fires, and supersedes it if the provider asks again.
+*/
+function createLoginFlow(input) {
+	const controller = new AbortController();
+	const events = [];
+	let status = "running";
+	let error;
+	let pending;
+	let promptSeq = 0;
+	const failPending = (reason) => {
+		const current = pending;
+		if (!current) return;
+		pending = void 0;
+		current.detach();
+		current.reject(reason);
+	};
+	const interaction = {
+		signal: controller.signal,
+		prompt(prompt) {
+			if (controller.signal.aborted || prompt.signal?.aborted) return Promise.reject(/* @__PURE__ */ new Error(CANCELLED_MESSAGE));
+			failPending(/* @__PURE__ */ new Error(SUPERSEDED_MESSAGE));
+			if (input.remote) {
+				const deviceCode = deviceCodeOption(prompt);
+				if (deviceCode !== void 0) return Promise.resolve(deviceCode);
+			}
+			promptSeq += 1;
+			const view = promptView(String(promptSeq), prompt);
+			return new Promise((resolve, reject) => {
+				const onAbort = () => failPending(/* @__PURE__ */ new Error(CANCELLED_MESSAGE));
+				prompt.signal?.addEventListener("abort", onAbort, { once: true });
+				pending = {
+					view,
+					resolve,
+					reject,
+					detach: () => prompt.signal?.removeEventListener("abort", onAbort)
+				};
+			});
+		},
+		notify(event) {
+			events.push(event);
+		}
+	};
+	return {
+		id: input.id,
+		providerId: input.providerId,
+		interaction,
+		snapshot() {
+			const snapshot = {
+				id: input.id,
+				providerId: input.providerId,
+				providerName: input.providerName,
+				type: input.type,
+				status,
+				events: [...events]
+			};
+			if (pending) snapshot.prompt = pending.view;
+			if (input.remote) snapshot.remote = true;
+			if (error !== void 0) snapshot.error = error;
+			return snapshot;
+		},
+		answer(promptId, value) {
+			const current = pending;
+			if (!current || current.view.id !== promptId) return false;
+			pending = void 0;
+			current.detach();
+			current.resolve(value);
+			return true;
+		},
+		cancel() {
+			if (status !== "running") return;
+			status = "cancelled";
+			controller.abort();
+			failPending(/* @__PURE__ */ new Error(CANCELLED_MESSAGE));
+		},
+		settle(outcome) {
+			if (status !== "running") return;
+			if (outcome.ok) status = "succeeded";
+			else {
+				status = "failed";
+				error = outcome.error;
+			}
+			failPending(/* @__PURE__ */ new Error(CANCELLED_MESSAGE));
+		}
+	};
+}
+//#endregion
+export { createLoginFlow };
+
+//# sourceMappingURL=index.mjs.map

package/dist/services/loginFlow/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../src/services/loginFlow/index.ts"],"sourcesContent":["import type {\n  AuthMethodType,\n  LoginEvent,\n  LoginFlowSnapshot,\n  LoginFlowStatus,\n  LoginInteraction,\n  LoginPrompt,\n  LoginPromptView,\n} from '../../types/server/auth';\n\n/** The message Pi's own login dialog uses; a provider flow may match on it. */\nconst CANCELLED_MESSAGE = 'Login cancelled';\nconst SUPERSEDED_MESSAGE = 'Superseded by a newer prompt';\n\n/**\n * Option ids Pi's providers use for their redirect-free login.\n *\n * The spelling is not consistent across providers: openai-codex offers\n * `device_code` and radius offers `device-code`, so both are matched rather\n * than assuming one canonical form.\n */\nconst DEVICE_CODE_OPTION_IDS: ReadonlySet<string> = new Set(['device_code', 'device-code']);\n\ninterface PendingPrompt {\n  view: LoginPromptView;\n  resolve(value: string): void;\n  reject(error: Error): void;\n  detach(): void;\n}\n\nexport interface LoginFlowInput {\n  id: string;\n  providerId: string;\n  providerName: string;\n  type: AuthMethodType;\n  /**\n   * The login was started from the tunnel, so the browser is on another\n   * machine and a loopback redirect cannot reach this host.\n   */\n  remote?: boolean;\n}\n\n/**\n * The redirect-free option a remote login should take, when the provider\n * offers one.\n *\n * Pi asks browser-or-device-code as an ordinary select. A remote browser\n * cannot receive a loopback redirect, so answering it for the user turns a\n * dead end into the one method that works, rather than showing a choice whose\n * default is broken.\n */\nfunction deviceCodeOption(prompt: LoginPrompt): string | undefined {\n  if (prompt.type !== 'select') return undefined;\n  return prompt.options.find((option) => DEVICE_CODE_OPTION_IDS.has(option.id))?.id;\n}\n\n/**\n * One login in progress, seen from both sides: the provider's flow talks to\n * it through `interaction`, the page through snapshots and answers.\n */\nexport interface LoginFlow {\n  readonly id: string;\n  readonly providerId: string;\n  /** Hand this to the runtime's login; prompts and events route through the flow. */\n  readonly interaction: LoginInteraction;\n  snapshot(): LoginFlowSnapshot;\n  /** Answers the pending prompt; false when the flow is not waiting on that prompt. */\n  answer(promptId: string, value: string): boolean;\n  /** Aborts the provider's flow; a settled flow is left as it ended. */\n  cancel(): void;\n  /** Records how the runtime's login ended; a cancelled flow stays cancelled. */\n  settle(outcome: { ok: true } | { ok: false; error: string }): void;\n}\n\nfunction promptView(id: string, prompt: LoginPrompt): LoginPromptView {\n  const view: LoginPromptView = { id, type: prompt.type, message: prompt.message };\n  if (prompt.type === 'select') view.options = prompt.options.map((option) => ({ ...option }));\n  else if (prompt.placeholder !== undefined) view.placeholder = prompt.placeholder;\n  return view;\n}\n\n/**\n * The state machine between a provider login and a browser that can only\n * poll and post.\n *\n * A provider asks one question at a time and may withdraw it (a manual-code\n * prompt raced against a callback server aborts when the callback wins), so\n * the flow holds at most one pending prompt, rejects it when its signal\n * fires, and supersedes it if the provider asks again.\n */\nexport function createLoginFlow(input: LoginFlowInput): LoginFlow {\n  const controller = new AbortController();\n  const events: LoginEvent[] = [];\n  let status: LoginFlowStatus = 'running';\n  let error: string | undefined;\n  let pending: PendingPrompt | undefined;\n  let promptSeq = 0;\n\n  const failPending = (reason: Error): void => {\n    const current = pending;\n    if (!current) return;\n    pending = undefined;\n    current.detach();\n    current.reject(reason);\n  };\n\n  const interaction: LoginInteraction = {\n    signal: controller.signal,\n    prompt(prompt) {\n      if (controller.signal.aborted || prompt.signal?.aborted) return Promise.reject(new Error(CANCELLED_MESSAGE));\n      failPending(new Error(SUPERSEDED_MESSAGE));\n      // Answered before a view exists, so the page never renders a choice the\n      // remote browser cannot complete.\n      if (input.remote) {\n        const deviceCode = deviceCodeOption(prompt);\n        if (deviceCode !== undefined) return Promise.resolve(deviceCode);\n      }\n      promptSeq += 1;\n      const view = promptView(String(promptSeq), prompt);\n      return new Promise<string>((resolve, reject) => {\n        const onAbort = (): void => failPending(new Error(CANCELLED_MESSAGE));\n        prompt.signal?.addEventListener('abort', onAbort, { once: true });\n        pending = {\n          view,\n          resolve,\n          reject,\n          detach: () => prompt.signal?.removeEventListener('abort', onAbort),\n        };\n      });\n    },\n    notify(event) {\n      events.push(event);\n    },\n  };\n\n  return {\n    id: input.id,\n    providerId: input.providerId,\n    interaction,\n    snapshot() {\n      const snapshot: LoginFlowSnapshot = {\n        id: input.id,\n        providerId: input.providerId,\n        providerName: input.providerName,\n        type: input.type,\n        status,\n        events: [...events],\n      };\n      if (pending) snapshot.prompt = pending.view;\n      if (input.remote) snapshot.remote = true;\n      if (error !== undefined) snapshot.error = error;\n      return snapshot;\n    },\n    answer(promptId, value) {\n      const current = pending;\n      if (!current || current.view.id !== promptId) return false;\n      pending = undefined;\n      current.detach();\n      current.resolve(value);\n      return true;\n    },\n    cancel() {\n      if (status !== 'running') return;\n      status = 'cancelled';\n      controller.abort();\n      failPending(new Error(CANCELLED_MESSAGE));\n    },\n    settle(outcome) {\n      if (status !== 'running') return;\n      if (outcome.ok) {\n        status = 'succeeded';\n      } else {\n        status = 'failed';\n        error = outcome.error;\n      }\n      failPending(new Error(CANCELLED_MESSAGE));\n    },\n  };\n}\n"],"mappings":";;AAWA,MAAM,oBAAoB;AAC1B,MAAM,qBAAqB;;;;;;;;AAS3B,MAAM,yCAA8C,IAAI,IAAI,CAAC,eAAe,aAAa,CAAC;;;;;;;;;;AA8B1F,SAAS,iBAAiB,QAAyC;CACjE,IAAI,OAAO,SAAS,UAAU,OAAO,KAAA;CACrC,OAAO,OAAO,QAAQ,MAAM,WAAW,uBAAuB,IAAI,OAAO,EAAE,CAAC,CAAC,EAAE;AACjF;AAoBA,SAAS,WAAW,IAAY,QAAsC;CACpE,MAAM,OAAwB;EAAE;EAAI,MAAM,OAAO;EAAM,SAAS,OAAO;CAAQ;CAC/E,IAAI,OAAO,SAAS,UAAU,KAAK,UAAU,OAAO,QAAQ,KAAK,YAAY,EAAE,GAAG,OAAO,EAAE;MACtF,IAAI,OAAO,gBAAgB,KAAA,GAAW,KAAK,cAAc,OAAO;CACrE,OAAO;AACT;;;;;;;;;;AAWA,SAAgB,gBAAgB,OAAkC;CAChE,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,SAAuB,CAAC;CAC9B,IAAI,SAA0B;CAC9B,IAAI;CACJ,IAAI;CACJ,IAAI,YAAY;CAEhB,MAAM,eAAe,WAAwB;EAC3C,MAAM,UAAU;EAChB,IAAI,CAAC,SAAS;EACd,UAAU,KAAA;EACV,QAAQ,OAAO;EACf,QAAQ,OAAO,MAAM;CACvB;CAEA,MAAM,cAAgC;EACpC,QAAQ,WAAW;EACnB,OAAO,QAAQ;GACb,IAAI,WAAW,OAAO,WAAW,OAAO,QAAQ,SAAS,OAAO,QAAQ,uBAAO,IAAI,MAAM,iBAAiB,CAAC;GAC3G,4BAAY,IAAI,MAAM,kBAAkB,CAAC;GAGzC,IAAI,MAAM,QAAQ;IAChB,MAAM,aAAa,iBAAiB,MAAM;IAC1C,IAAI,eAAe,KAAA,GAAW,OAAO,QAAQ,QAAQ,UAAU;GACjE;GACA,aAAa;GACb,MAAM,OAAO,WAAW,OAAO,SAAS,GAAG,MAAM;GACjD,OAAO,IAAI,SAAiB,SAAS,WAAW;IAC9C,MAAM,gBAAsB,4BAAY,IAAI,MAAM,iBAAiB,CAAC;IACpE,OAAO,QAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;IAChE,UAAU;KACR;KACA;KACA;KACA,cAAc,OAAO,QAAQ,oBAAoB,SAAS,OAAO;IACnE;GACF,CAAC;EACH;EACA,OAAO,OAAO;GACZ,OAAO,KAAK,KAAK;EACnB;CACF;CAEA,OAAO;EACL,IAAI,MAAM;EACV,YAAY,MAAM;EAClB;EACA,WAAW;GACT,MAAM,WAA8B;IAClC,IAAI,MAAM;IACV,YAAY,MAAM;IAClB,cAAc,MAAM;IACpB,MAAM,MAAM;IACZ;IACA,QAAQ,CAAC,GAAG,MAAM;GACpB;GACA,IAAI,SAAS,SAAS,SAAS,QAAQ;GACvC,IAAI,MAAM,QAAQ,SAAS,SAAS;GACpC,IAAI,UAAU,KAAA,GAAW,SAAS,QAAQ;GAC1C,OAAO;EACT;EACA,OAAO,UAAU,OAAO;GACtB,MAAM,UAAU;GAChB,IAAI,CAAC,WAAW,QAAQ,KAAK,OAAO,UAAU,OAAO;GACrD,UAAU,KAAA;GACV,QAAQ,OAAO;GACf,QAAQ,QAAQ,KAAK;GACrB,OAAO;EACT;EACA,SAAS;GACP,IAAI,WAAW,WAAW;GAC1B,SAAS;GACT,WAAW,MAAM;GACjB,4BAAY,IAAI,MAAM,iBAAiB,CAAC;EAC1C;EACA,OAAO,SAAS;GACd,IAAI,WAAW,WAAW;GAC1B,IAAI,QAAQ,IACV,SAAS;QACJ;IACL,SAAS;IACT,QAAQ,QAAQ;GAClB;GACA,4BAAY,IAAI,MAAM,iBAAiB,CAAC;EAC1C;CACF;AACF"}

package/dist/services/packageApiHarness/index.cjs

@@ -0,0 +1,36 @@
+const require_packageApi = require("../../schemas/packageApi.cjs");
+//#region src/services/packageApiHarness/index.ts
+const DEFAULT_SCOPE = "global";
+const DEFAULT_CWD = "/repo";
+/** Any origin will do: the host routes on path, and a Request needs an absolute URL. */
+const ORIGIN = "http://host";
+function mountPackageApi(api, options = {}) {
+	const scope = options.scope ?? DEFAULT_SCOPE;
+	const notices = [];
+	const mountPath = `${require_packageApi.DOOM_API_ROUTE_PREFIX}/${api.basePath}`;
+	const context = {
+		scope,
+		...scope === "session" ? {
+			sessionId: options.sessionId ?? "test-session",
+			cwd: options.cwd ?? DEFAULT_CWD
+		} : {},
+		...options.directEvents ? { directEvents: options.directEvents } : {},
+		onNotice: (message) => notices.push(message)
+	};
+	const handler = api.start(context);
+	return {
+		mountPath,
+		notices,
+		async fetch(path, init) {
+			const url = new URL(path, ORIGIN);
+			if (url.pathname !== mountPath && !url.pathname.startsWith(`${mountPath}/`)) return new Response(`No package API is mounted at ${url.pathname}.`, { status: 404 });
+			url.pathname = url.pathname.slice(mountPath.length) || "/";
+			return handler.fetch(new Request(url, init));
+		},
+		close: () => handler.close()
+	};
+}
+//#endregion
+exports.mountPackageApi = mountPackageApi;
+
+//# sourceMappingURL=index.cjs.map

package/dist/services/packageApiHarness/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["DOOM_API_ROUTE_PREFIX"],"sources":["../../../src/services/packageApiHarness/index.ts"],"sourcesContent":["import type { DoomDirectEventBus } from '../../schemas/hubChannel';\nimport {\n  type DoomApi,\n  type DoomApiContext,\n  type DoomApiHandler,\n  DOOM_API_ROUTE_PREFIX,\n  type DoomApiScope,\n} from '../../schemas/packageApi';\n\n/**\n * A package's HTTP surface, mounted the way a host mounts it.\n *\n * A package tests its routes by calling its Hono app directly, which proves the\n * routes but not the mount: the host serves them under\n * `/api/plugin/<basePath>` and strips that prefix before the app sees the\n * request. A package whose routes are written absolute passes its own suite and\n * answers nothing in a running cockpit.\n *\n * This mounts the declared `DoomApi` the same way, so a test asks for the URL a\n * browser would ask for. Plain `Request` and `Response`; no HTTP framework and\n * no server.\n */\n\nexport interface MountPackageApiOptions {\n  scope?: DoomApiScope;\n  sessionId?: string;\n  cwd?: string;\n  directEvents?: DoomDirectEventBus;\n}\n\nexport interface MountedPackageApi {\n  /** Where the host mounted it, for building a URL the way a client does. */\n  readonly mountPath: string;\n  /** What the API reported to its host; a package that notices nothing leaves this empty. */\n  readonly notices: readonly string[];\n  /**\n   * Fetches one path.\n   *\n   * The path is host-absolute, so it carries the mount the client would send:\n   * `/api/plugin/workflow/runs/repo/blog-4`. A path outside the mount is a 404\n   * from this, exactly as it is from the host.\n   */\n  fetch(path: string, init?: RequestInit): Promise<Response>;\n  close(): void;\n}\n\nconst DEFAULT_SCOPE: DoomApiScope = 'global';\nconst DEFAULT_CWD = '/repo';\n/** Any origin will do: the host routes on path, and a Request needs an absolute URL. */\nconst ORIGIN = 'http://host';\n\nexport function mountPackageApi(api: DoomApi, options: MountPackageApiOptions = {}): MountedPackageApi {\n  const scope = options.scope ?? DEFAULT_SCOPE;\n  const notices: string[] = [];\n  const mountPath = `${DOOM_API_ROUTE_PREFIX}/${api.basePath}`;\n  const context: DoomApiContext = {\n    scope,\n    // A session-scoped host knows both; a hub-scoped one knows neither, and an\n    // API that reads them anyway should see the same undefined it would there.\n    ...(scope === 'session' ? { sessionId: options.sessionId ?? 'test-session', cwd: options.cwd ?? DEFAULT_CWD } : {}),\n    ...(options.directEvents ? { directEvents: options.directEvents } : {}),\n    onNotice: (message) => notices.push(message),\n  };\n  const handler: DoomApiHandler = api.start(context);\n\n  return {\n    mountPath,\n    notices,\n    async fetch(path, init) {\n      const url = new URL(path, ORIGIN);\n      if (url.pathname !== mountPath && !url.pathname.startsWith(`${mountPath}/`)) {\n        return new Response(`No package API is mounted at ${url.pathname}.`, { status: 404 });\n      }\n      // The host strips its own mount, so a package declares '/runs/:id' and\n      // never repeats where it was mounted.\n      url.pathname = url.pathname.slice(mountPath.length) || '/';\n      return handler.fetch(new Request(url, init));\n    },\n    close: () => handler.close(),\n  };\n}\n"],"mappings":";;AA8CA,MAAM,gBAA8B;AACpC,MAAM,cAAc;;AAEpB,MAAM,SAAS;AAEf,SAAgB,gBAAgB,KAAc,UAAkC,CAAC,GAAsB;CACrG,MAAM,QAAQ,QAAQ,SAAS;CAC/B,MAAM,UAAoB,CAAC;CAC3B,MAAM,YAAY,GAAGA,mBAAAA,sBAAsB,GAAG,IAAI;CAClD,MAAM,UAA0B;EAC9B;EAGA,GAAI,UAAU,YAAY;GAAE,WAAW,QAAQ,aAAa;GAAgB,KAAK,QAAQ,OAAO;EAAY,IAAI,CAAC;EACjH,GAAI,QAAQ,eAAe,EAAE,cAAc,QAAQ,aAAa,IAAI,CAAC;EACrE,WAAW,YAAY,QAAQ,KAAK,OAAO;CAC7C;CACA,MAAM,UAA0B,IAAI,MAAM,OAAO;CAEjD,OAAO;EACL;EACA;EACA,MAAM,MAAM,MAAM,MAAM;GACtB,MAAM,MAAM,IAAI,IAAI,MAAM,MAAM;GAChC,IAAI,IAAI,aAAa,aAAa,CAAC,IAAI,SAAS,WAAW,GAAG,UAAU,EAAE,GACxE,OAAO,IAAI,SAAS,gCAAgC,IAAI,SAAS,IAAI,EAAE,QAAQ,IAAI,CAAC;GAItF,IAAI,WAAW,IAAI,SAAS,MAAM,UAAU,MAAM,KAAK;GACvD,OAAO,QAAQ,MAAM,IAAI,QAAQ,KAAK,IAAI,CAAC;EAC7C;EACA,aAAa,QAAQ,MAAM;CAC7B;AACF"}

package/dist/services/packageApiHarness/index.d.cts

@@ -0,0 +1,40 @@
+import { DoomDirectEventBus } from "../../schemas/hubChannel.cjs";
+import { DoomApi, DoomApiScope } from "../../schemas/packageApi.cjs";
+//#region src/services/packageApiHarness/index.d.ts
+/**
+ * A package's HTTP surface, mounted the way a host mounts it.
+ *
+ * A package tests its routes by calling its Hono app directly, which proves the
+ * routes but not the mount: the host serves them under
+ * `/api/plugin/<basePath>` and strips that prefix before the app sees the
+ * request. A package whose routes are written absolute passes its own suite and
+ * answers nothing in a running cockpit.
+ *
+ * This mounts the declared `DoomApi` the same way, so a test asks for the URL a
+ * browser would ask for. Plain `Request` and `Response`; no HTTP framework and
+ * no server.
+ */
+export interface MountPackageApiOptions {
+  scope?: DoomApiScope;
+  sessionId?: string;
+  cwd?: string;
+  directEvents?: DoomDirectEventBus;
+}
+export interface MountedPackageApi {
+  /** Where the host mounted it, for building a URL the way a client does. */
+  readonly mountPath: string;
+  /** What the API reported to its host; a package that notices nothing leaves this empty. */
+  readonly notices: readonly string[];
+  /**
+   * Fetches one path.
+   *
+   * The path is host-absolute, so it carries the mount the client would send:
+   * `/api/plugin/workflow/runs/repo/blog-4`. A path outside the mount is a 404
+   * from this, exactly as it is from the host.
+   */
+  fetch(path: string, init?: RequestInit): Promise<Response>;
+  close(): void;
+}
+export declare function mountPackageApi(api: DoomApi, options?: MountPackageApiOptions): MountedPackageApi;
+//#endregion
+//# sourceMappingURL=index.d.cts.map

package/dist/services/packageApiHarness/index.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.cts","names":[],"sources":["../../../src/services/packageApiHarness/index.ts"],"mappings":";;;;;;;;;;;;;;;;iBAuBiB;EACf,QAAQ;EACR;EACA;EACA,eAAe;;iBAGA;;WAEN;;WAEA;;;;;;;;EAQT,MAAM,cAAc,OAAO,cAAc,QAAQ;EACjD;;wBAQc,gBAAgB,KAAK,SAAS,UAAS,yBAA8B"}

package/dist/services/packageApiHarness/index.d.mts

@@ -0,0 +1,40 @@
+import { DoomDirectEventBus } from "../../schemas/hubChannel.mjs";
+import { DoomApi, DoomApiScope } from "../../schemas/packageApi.mjs";
+//#region src/services/packageApiHarness/index.d.ts
+/**
+ * A package's HTTP surface, mounted the way a host mounts it.
+ *
+ * A package tests its routes by calling its Hono app directly, which proves the
+ * routes but not the mount: the host serves them under
+ * `/api/plugin/<basePath>` and strips that prefix before the app sees the
+ * request. A package whose routes are written absolute passes its own suite and
+ * answers nothing in a running cockpit.
+ *
+ * This mounts the declared `DoomApi` the same way, so a test asks for the URL a
+ * browser would ask for. Plain `Request` and `Response`; no HTTP framework and
+ * no server.
+ */
+export interface MountPackageApiOptions {
+  scope?: DoomApiScope;
+  sessionId?: string;
+  cwd?: string;
+  directEvents?: DoomDirectEventBus;
+}
+export interface MountedPackageApi {
+  /** Where the host mounted it, for building a URL the way a client does. */
+  readonly mountPath: string;
+  /** What the API reported to its host; a package that notices nothing leaves this empty. */
+  readonly notices: readonly string[];
+  /**
+   * Fetches one path.
+   *
+   * The path is host-absolute, so it carries the mount the client would send:
+   * `/api/plugin/workflow/runs/repo/blog-4`. A path outside the mount is a 404
+   * from this, exactly as it is from the host.
+   */
+  fetch(path: string, init?: RequestInit): Promise<Response>;
+  close(): void;
+}
+export declare function mountPackageApi(api: DoomApi, options?: MountPackageApiOptions): MountedPackageApi;
+//#endregion
+//# sourceMappingURL=index.d.mts.map

package/dist/services/packageApiHarness/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../src/services/packageApiHarness/index.ts"],"mappings":";;;;;;;;;;;;;;;;iBAuBiB;EACf,QAAQ;EACR;EACA;EACA,eAAe;;iBAGA;;WAEN;;WAEA;;;;;;;;EAQT,MAAM,cAAc,OAAO,cAAc,QAAQ;EACjD;;wBAQc,gBAAgB,KAAK,SAAS,UAAS,yBAA8B"}

package/dist/services/packageApiHarness/index.mjs

@@ -0,0 +1,36 @@
+import { DOOM_API_ROUTE_PREFIX } from "../../schemas/packageApi.mjs";
+//#region src/services/packageApiHarness/index.ts
+const DEFAULT_SCOPE = "global";
+const DEFAULT_CWD = "/repo";
+/** Any origin will do: the host routes on path, and a Request needs an absolute URL. */
+const ORIGIN = "http://host";
+function mountPackageApi(api, options = {}) {
+	const scope = options.scope ?? DEFAULT_SCOPE;
+	const notices = [];
+	const mountPath = `${DOOM_API_ROUTE_PREFIX}/${api.basePath}`;
+	const context = {
+		scope,
+		...scope === "session" ? {
+			sessionId: options.sessionId ?? "test-session",
+			cwd: options.cwd ?? DEFAULT_CWD
+		} : {},
+		...options.directEvents ? { directEvents: options.directEvents } : {},
+		onNotice: (message) => notices.push(message)
+	};
+	const handler = api.start(context);
+	return {
+		mountPath,
+		notices,
+		async fetch(path, init) {
+			const url = new URL(path, ORIGIN);
+			if (url.pathname !== mountPath && !url.pathname.startsWith(`${mountPath}/`)) return new Response(`No package API is mounted at ${url.pathname}.`, { status: 404 });
+			url.pathname = url.pathname.slice(mountPath.length) || "/";
+			return handler.fetch(new Request(url, init));
+		},
+		close: () => handler.close()
+	};
+}
+//#endregion
+export { mountPackageApi };
+
+//# sourceMappingURL=index.mjs.map

package/dist/services/packageApiHarness/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../src/services/packageApiHarness/index.ts"],"sourcesContent":["import type { DoomDirectEventBus } from '../../schemas/hubChannel';\nimport {\n  type DoomApi,\n  type DoomApiContext,\n  type DoomApiHandler,\n  DOOM_API_ROUTE_PREFIX,\n  type DoomApiScope,\n} from '../../schemas/packageApi';\n\n/**\n * A package's HTTP surface, mounted the way a host mounts it.\n *\n * A package tests its routes by calling its Hono app directly, which proves the\n * routes but not the mount: the host serves them under\n * `/api/plugin/<basePath>` and strips that prefix before the app sees the\n * request. A package whose routes are written absolute passes its own suite and\n * answers nothing in a running cockpit.\n *\n * This mounts the declared `DoomApi` the same way, so a test asks for the URL a\n * browser would ask for. Plain `Request` and `Response`; no HTTP framework and\n * no server.\n */\n\nexport interface MountPackageApiOptions {\n  scope?: DoomApiScope;\n  sessionId?: string;\n  cwd?: string;\n  directEvents?: DoomDirectEventBus;\n}\n\nexport interface MountedPackageApi {\n  /** Where the host mounted it, for building a URL the way a client does. */\n  readonly mountPath: string;\n  /** What the API reported to its host; a package that notices nothing leaves this empty. */\n  readonly notices: readonly string[];\n  /**\n   * Fetches one path.\n   *\n   * The path is host-absolute, so it carries the mount the client would send:\n   * `/api/plugin/workflow/runs/repo/blog-4`. A path outside the mount is a 404\n   * from this, exactly as it is from the host.\n   */\n  fetch(path: string, init?: RequestInit): Promise<Response>;\n  close(): void;\n}\n\nconst DEFAULT_SCOPE: DoomApiScope = 'global';\nconst DEFAULT_CWD = '/repo';\n/** Any origin will do: the host routes on path, and a Request needs an absolute URL. */\nconst ORIGIN = 'http://host';\n\nexport function mountPackageApi(api: DoomApi, options: MountPackageApiOptions = {}): MountedPackageApi {\n  const scope = options.scope ?? DEFAULT_SCOPE;\n  const notices: string[] = [];\n  const mountPath = `${DOOM_API_ROUTE_PREFIX}/${api.basePath}`;\n  const context: DoomApiContext = {\n    scope,\n    // A session-scoped host knows both; a hub-scoped one knows neither, and an\n    // API that reads them anyway should see the same undefined it would there.\n    ...(scope === 'session' ? { sessionId: options.sessionId ?? 'test-session', cwd: options.cwd ?? DEFAULT_CWD } : {}),\n    ...(options.directEvents ? { directEvents: options.directEvents } : {}),\n    onNotice: (message) => notices.push(message),\n  };\n  const handler: DoomApiHandler = api.start(context);\n\n  return {\n    mountPath,\n    notices,\n    async fetch(path, init) {\n      const url = new URL(path, ORIGIN);\n      if (url.pathname !== mountPath && !url.pathname.startsWith(`${mountPath}/`)) {\n        return new Response(`No package API is mounted at ${url.pathname}.`, { status: 404 });\n      }\n      // The host strips its own mount, so a package declares '/runs/:id' and\n      // never repeats where it was mounted.\n      url.pathname = url.pathname.slice(mountPath.length) || '/';\n      return handler.fetch(new Request(url, init));\n    },\n    close: () => handler.close(),\n  };\n}\n"],"mappings":";;AA8CA,MAAM,gBAA8B;AACpC,MAAM,cAAc;;AAEpB,MAAM,SAAS;AAEf,SAAgB,gBAAgB,KAAc,UAAkC,CAAC,GAAsB;CACrG,MAAM,QAAQ,QAAQ,SAAS;CAC/B,MAAM,UAAoB,CAAC;CAC3B,MAAM,YAAY,GAAG,sBAAsB,GAAG,IAAI;CAClD,MAAM,UAA0B;EAC9B;EAGA,GAAI,UAAU,YAAY;GAAE,WAAW,QAAQ,aAAa;GAAgB,KAAK,QAAQ,OAAO;EAAY,IAAI,CAAC;EACjH,GAAI,QAAQ,eAAe,EAAE,cAAc,QAAQ,aAAa,IAAI,CAAC;EACrE,WAAW,YAAY,QAAQ,KAAK,OAAO;CAC7C;CACA,MAAM,UAA0B,IAAI,MAAM,OAAO;CAEjD,OAAO;EACL;EACA;EACA,MAAM,MAAM,MAAM,MAAM;GACtB,MAAM,MAAM,IAAI,IAAI,MAAM,MAAM;GAChC,IAAI,IAAI,aAAa,aAAa,CAAC,IAAI,SAAS,WAAW,GAAG,UAAU,EAAE,GACxE,OAAO,IAAI,SAAS,gCAAgC,IAAI,SAAS,IAAI,EAAE,QAAQ,IAAI,CAAC;GAItF,IAAI,WAAW,IAAI,SAAS,MAAM,UAAU,MAAM,KAAK;GACvD,OAAO,QAAQ,MAAM,IAAI,QAAQ,KAAK,IAAI,CAAC;EAC7C;EACA,aAAa,QAAQ,MAAM;CAC7B;AACF"}