@agimon-ai/po-core 0.0.0-alpha.2 → 0.0.0-alpha.21

package/dist/src/server/threadJournals.mjs

@@ -1,127 +1,63 @@
-import { readSqliteTranscript } from "../services/sqliteTranscriptReader/index.mjs";
-import { nativeChildRuntime } from "../systems/child/adapters/nativeChildRuntimes.mjs";
-import fs from "node:fs";
-import path from "node:path";
 //#region src/server/threadJournals.ts
 const POLL_MS = 250;
-const MAX_INITIAL_BYTES = 8388608;
-const NEWLINE = 10;
 function keyOf(sessionId, threadId) {
 	return `${sessionId}\n${threadId}`;
 }
-function journalFrames(text) {
-	const frames = [];
-	for (const line of text.split("\n")) {
-		let parsed;
-		try {
-			parsed = JSON.parse(line);
-		} catch {
-			continue;
-		}
-		const rows = Array.isArray(parsed) ? parsed : [parsed];
-		for (const row of rows) {
-			if (typeof row !== "object" || row === null || Array.isArray(row)) continue;
-			const entry = row;
-			const isLegacyMessage = entry.type === "message";
-			const isCurrentMessage = entry.kind === "entry" && entry.type === "message";
-			if (!isLegacyMessage && !isCurrentMessage || typeof entry.id !== "string" || typeof entry.message !== "object") continue;
-			frames.push({
-				type: "entry_appended",
-				entry
-			});
-		}
-	}
-	return frames;
-}
-function readRange(file, start, end) {
-	const buffer = Buffer.alloc(end - start);
-	let descriptor;
-	try {
-		descriptor = fs.openSync(file, "r");
-		return buffer.subarray(0, fs.readSync(descriptor, buffer, 0, buffer.length, start));
-	} catch {
-		return;
-	} finally {
-		if (descriptor !== void 0) fs.closeSync(descriptor);
-	}
-}
-/** Tails child journals only while at least one browser thread is subscribed. */
+/** Follows child transcripts only while at least one browser thread is subscribed. */
 function createThreadJournals(options) {
 	const tails = /* @__PURE__ */ new Map();
 	const listeners = /* @__PURE__ */ new Set();
 	let timer;
 	const advance = (tail) => {
-		const candidate = tail.file ?? options.resolve(tail.sessionId, tail.threadId);
-		if (candidate && path.isAbsolute(candidate) && path.extname(candidate) === ".sqlite") {
-			tail.file = candidate;
-			if (tail.stop) return [];
-			const runtime = nativeChildRuntime(candidate);
-			if (runtime) {
-				tail.stop = runtime.state.subscribe((state) => {
-					const frame = {
-						type: "transcript_state",
-						state
-					};
-					tail.retained = [frame];
-					for (const listener of listeners) listener({
-						sessionId: tail.sessionId,
-						threadId: tail.threadId,
-						frame
-					});
-				});
-				tail.retained = [{
+		if (tail.stop) return [];
+		const thread = options.resolve(tail.sessionId, tail.threadId);
+		if (!thread) return [];
+		const state = thread.state;
+		if (state) {
+			tail.stop = state.subscribe((value) => {
+				const frame = {
 					type: "transcript_state",
-					state: runtime.state.value
-				}];
-			} else tail.retained = [{ type: "transcript_ready" }];
-			return tail.retained;
-		}
-		if (candidate === void 0 || !path.isAbsolute(candidate) || path.extname(candidate) !== ".jsonl") return [];
-		tail.file = candidate;
-		let size;
-		try {
-			size = fs.statSync(candidate).size;
-		} catch {
-			return [];
+					state: value
+				};
+				tail.retained = [frame];
+				for (const listener of listeners) listener({
+					sessionId: tail.sessionId,
+					threadId: tail.threadId,
+					frame
+				});
+			});
+			tail.retained = [{
+				type: "transcript_state",
+				state: state.value
+			}];
+		} else {
+			tail.stop = () => void 0;
+			tail.retained = [{ type: "transcript_ready" }];
 		}
-		if (size < tail.offset) {
-			tail.offset = 0;
-			tail.retained = [];
+		return tail.retained;
+	};
+	const syncTimer = () => {
+		const waiting = [...tails.values()].some((tail) => !tail.stop);
+		if (waiting && timer === void 0) timer = setInterval(tick, POLL_MS);
+		if (!waiting && timer !== void 0) {
+			clearInterval(timer);
+			timer = void 0;
 		}
-		const cut = tail.offset === 0 && size > MAX_INITIAL_BYTES;
-		const start = cut ? size - MAX_INITIAL_BYTES : tail.offset;
-		if (size <= start) return [];
-		const chunk = readRange(candidate, start, size);
-		if (chunk === void 0) return [];
-		const lastNewline = chunk.lastIndexOf(NEWLINE);
-		if (lastNewline < 0) return [];
-		const first = cut ? chunk.indexOf(NEWLINE) + 1 : 0;
-		const frames = first > lastNewline ? [] : journalFrames(chunk.toString("utf8", first, lastNewline + 1));
-		tail.offset = start + lastNewline + 1;
-		if (frames.length > 0) tail.retained = [...tail.retained, ...frames].slice(-300);
-		return frames;
 	};
-	const tick = () => {
+	function tick() {
 		for (const tail of tails.values()) for (const frame of advance(tail)) for (const listener of listeners) listener({
 			sessionId: tail.sessionId,
 			threadId: tail.threadId,
 			frame
 		});
-	};
-	const syncTimer = () => {
-		if (tails.size > 0 && timer === void 0) timer = setInterval(tick, POLL_MS);
-		if (tails.size === 0 && timer !== void 0) {
-			clearInterval(timer);
-			timer = void 0;
-		}
-	};
+		syncTimer();
+	}
 	return {
 		async readPage(sessionId, threadId, request, context) {
-			const file = options.resolve(sessionId, threadId);
-			if (!file || !path.isAbsolute(file) || path.extname(file) !== ".sqlite") throw new Error("Child SQLite transcript not found");
+			const thread = options.resolve(sessionId, threadId);
+			if (!thread) throw new Error("Child transcript not found");
 			const { threadId: _threadId, ...query } = request;
-			const runtime = nativeChildRuntime(file);
-			return runtime ? runtime.readTranscriptPage(query, context) : readSqliteTranscript(file, query, context);
+			return thread.readTranscriptPage(query, context.abortSignal);
 		},
 		subscribe(sessionId, threadId) {
 			const key = keyOf(sessionId, threadId);
@@ -129,8 +65,6 @@ function createThreadJournals(options) {
 				sessionId,
 				threadId,
 				refs: 0,
-				file: void 0,
-				offset: 0,
 				retained: []
 			};
 			if (!tails.has(key)) tails.set(key, tail);

package/dist/src/server/threadJournals.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"threadJournals.mjs","names":[],"sources":["../../../src/server/threadJournals.ts"],"sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\n\nimport type { Context } from '@earendil-works/chord';\n\nimport type { TranscriptPage, TranscriptPageRequest } from '../exports/sessionProtocol';\nimport { readSqliteTranscript } from '../services/sqliteTranscriptReader';\nimport { nativeChildRuntime } from '../systems/child/adapters/nativeChildRuntimes';\n\nconst POLL_MS = 250;\nconst RETAIN_LIMIT = 300;\nconst MAX_INITIAL_BYTES = 8 * 1024 * 1024;\nconst NEWLINE = 0x0a;\n\ntype Frame = Record<string, unknown>;\n\ninterface Tail {\n  readonly sessionId: string;\n  readonly threadId: string;\n  refs: number;\n  file: string | undefined;\n  offset: number;\n  retained: Frame[];\n  stop?: () => void;\n}\n\nexport interface ThreadJournals {\n  readPage(\n    sessionId: string,\n    threadId: string,\n    request: TranscriptPageRequest,\n    context: Context,\n  ): Promise<TranscriptPage>;\n  subscribe(sessionId: string, threadId: string): Frame[];\n  unsubscribe(sessionId: string, threadId: string): void;\n  onFrame(listener: (event: { sessionId: string; threadId: string; frame: Frame }) => void): () => void;\n  close(): void;\n}\n\nfunction keyOf(sessionId: string, threadId: string): string {\n  return `${sessionId}\\n${threadId}`;\n}\n\nfunction journalFrames(text: string): Frame[] {\n  const frames: Frame[] = [];\n  for (const line of text.split('\\n')) {\n    let parsed: unknown;\n    try {\n      parsed = JSON.parse(line) as unknown;\n    } catch {\n      continue;\n    }\n    const rows = Array.isArray(parsed) ? parsed : [parsed];\n    for (const row of rows) {\n      if (typeof row !== 'object' || row === null || Array.isArray(row)) continue;\n      const entry = row as Record<string, unknown>;\n      const isLegacyMessage = entry.type === 'message';\n      const isCurrentMessage = entry.kind === 'entry' && entry.type === 'message';\n      if (\n        (!isLegacyMessage && !isCurrentMessage) ||\n        typeof entry.id !== 'string' ||\n        typeof entry.message !== 'object'\n      ) {\n        continue;\n      }\n      frames.push({ type: 'entry_appended', entry });\n    }\n  }\n  return frames;\n}\n\nfunction readRange(file: string, start: number, end: number): Buffer | undefined {\n  const buffer = Buffer.alloc(end - start);\n  let descriptor: number | undefined;\n  try {\n    descriptor = fs.openSync(file, 'r');\n    return buffer.subarray(0, fs.readSync(descriptor, buffer, 0, buffer.length, start));\n  } catch {\n    return undefined;\n  } finally {\n    if (descriptor !== undefined) fs.closeSync(descriptor);\n  }\n}\n\n/** Tails child journals only while at least one browser thread is subscribed. */\nexport function createThreadJournals(options: {\n  resolve(sessionId: string, threadId: string): string | undefined;\n}): ThreadJournals {\n  const tails = new Map<string, Tail>();\n  const listeners = new Set<(event: { sessionId: string; threadId: string; frame: Frame }) => void>();\n  let timer: NodeJS.Timeout | undefined;\n\n  const advance = (tail: Tail): Frame[] => {\n    const candidate = tail.file ?? options.resolve(tail.sessionId, tail.threadId);\n    if (candidate && path.isAbsolute(candidate) && path.extname(candidate) === '.sqlite') {\n      tail.file = candidate;\n      if (tail.stop) return [];\n      const runtime = nativeChildRuntime(candidate);\n      if (runtime) {\n        tail.stop = runtime.state.subscribe((state) => {\n          const frame = { type: 'transcript_state', state };\n          tail.retained = [frame];\n          for (const listener of listeners) listener({ sessionId: tail.sessionId, threadId: tail.threadId, frame });\n        });\n        tail.retained = [{ type: 'transcript_state', state: runtime.state.value }];\n      } else tail.retained = [{ type: 'transcript_ready' }];\n      return tail.retained;\n    }\n    if (candidate === undefined || !path.isAbsolute(candidate) || path.extname(candidate) !== '.jsonl') return [];\n    tail.file = candidate;\n    let size: number;\n    try {\n      size = fs.statSync(candidate).size;\n    } catch {\n      return [];\n    }\n    if (size < tail.offset) {\n      tail.offset = 0;\n      tail.retained = [];\n    }\n    const cut = tail.offset === 0 && size > MAX_INITIAL_BYTES;\n    const start = cut ? size - MAX_INITIAL_BYTES : tail.offset;\n    if (size <= start) return [];\n    const chunk = readRange(candidate, start, size);\n    if (chunk === undefined) return [];\n    const lastNewline = chunk.lastIndexOf(NEWLINE);\n    if (lastNewline < 0) return [];\n    const first = cut ? chunk.indexOf(NEWLINE) + 1 : 0;\n    const frames = first > lastNewline ? [] : journalFrames(chunk.toString('utf8', first, lastNewline + 1));\n    tail.offset = start + lastNewline + 1;\n    if (frames.length > 0) tail.retained = [...tail.retained, ...frames].slice(-RETAIN_LIMIT);\n    return frames;\n  };\n  const tick = (): void => {\n    for (const tail of tails.values()) {\n      for (const frame of advance(tail)) {\n        for (const listener of listeners) listener({ sessionId: tail.sessionId, threadId: tail.threadId, frame });\n      }\n    }\n  };\n  const syncTimer = (): void => {\n    if (tails.size > 0 && timer === undefined) timer = setInterval(tick, POLL_MS);\n    if (tails.size === 0 && timer !== undefined) {\n      clearInterval(timer);\n      timer = undefined;\n    }\n  };\n\n  return {\n    async readPage(sessionId, threadId, request, context) {\n      const file = options.resolve(sessionId, threadId);\n      if (!file || !path.isAbsolute(file) || path.extname(file) !== '.sqlite')\n        throw new Error('Child SQLite transcript not found');\n      const { threadId: _threadId, ...query } = request;\n      const runtime = nativeChildRuntime(file);\n      return runtime ? runtime.readTranscriptPage(query, context) : readSqliteTranscript(file, query, context);\n    },\n    subscribe(sessionId, threadId) {\n      const key = keyOf(sessionId, threadId);\n      const tail = tails.get(key) ?? {\n        sessionId,\n        threadId,\n        refs: 0,\n        file: undefined,\n        offset: 0,\n        retained: [],\n      };\n      if (!tails.has(key)) tails.set(key, tail);\n      tail.refs += 1;\n      advance(tail);\n      syncTimer();\n      return [...tail.retained];\n    },\n    unsubscribe(sessionId, threadId) {\n      const key = keyOf(sessionId, threadId);\n      const tail = tails.get(key);\n      if (tail === undefined) return;\n      tail.refs -= 1;\n      if (tail.refs <= 0) {\n        tail.stop?.();\n        tails.delete(key);\n      }\n      syncTimer();\n    },\n    onFrame(listener) {\n      listeners.add(listener);\n      return () => listeners.delete(listener);\n    },\n    close() {\n      if (timer !== undefined) clearInterval(timer);\n      timer = undefined;\n      for (const tail of tails.values()) tail.stop?.();\n      tails.clear();\n      listeners.clear();\n    },\n  };\n}\n"],"mappings":";;;;;AASA,MAAM,UAAU;AAEhB,MAAM,oBAAoB;AAC1B,MAAM,UAAU;AA2BhB,SAAS,MAAM,WAAmB,UAA0B;CAC1D,OAAO,GAAG,UAAU,IAAI;AAC1B;AAEA,SAAS,cAAc,MAAuB;CAC5C,MAAM,SAAkB,CAAC;CACzB,KAAK,MAAM,QAAQ,KAAK,MAAM,IAAI,GAAG;EACnC,IAAI;EACJ,IAAI;GACF,SAAS,KAAK,MAAM,IAAI;EAC1B,QAAQ;GACN;EACF;EACA,MAAM,OAAO,MAAM,QAAQ,MAAM,IAAI,SAAS,CAAC,MAAM;EACrD,KAAK,MAAM,OAAO,MAAM;GACtB,IAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,MAAM,QAAQ,GAAG,GAAG;GACnE,MAAM,QAAQ;GACd,MAAM,kBAAkB,MAAM,SAAS;GACvC,MAAM,mBAAmB,MAAM,SAAS,WAAW,MAAM,SAAS;GAClE,IACG,CAAC,mBAAmB,CAAC,oBACtB,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,YAAY,UAEzB;GAEF,OAAO,KAAK;IAAE,MAAM;IAAkB;GAAM,CAAC;EAC/C;CACF;CACA,OAAO;AACT;AAEA,SAAS,UAAU,MAAc,OAAe,KAAiC;CAC/E,MAAM,SAAS,OAAO,MAAM,MAAM,KAAK;CACvC,IAAI;CACJ,IAAI;EACF,aAAa,GAAG,SAAS,MAAM,GAAG;EAClC,OAAO,OAAO,SAAS,GAAG,GAAG,SAAS,YAAY,QAAQ,GAAG,OAAO,QAAQ,KAAK,CAAC;CACpF,QAAQ;EACN;CACF,UAAU;EACR,IAAI,eAAe,KAAA,GAAW,GAAG,UAAU,UAAU;CACvD;AACF;;AAGA,SAAgB,qBAAqB,SAElB;CACjB,MAAM,wBAAQ,IAAI,IAAkB;CACpC,MAAM,4BAAY,IAAI,IAA4E;CAClG,IAAI;CAEJ,MAAM,WAAW,SAAwB;EACvC,MAAM,YAAY,KAAK,QAAQ,QAAQ,QAAQ,KAAK,WAAW,KAAK,QAAQ;EAC5E,IAAI,aAAa,KAAK,WAAW,SAAS,KAAK,KAAK,QAAQ,SAAS,MAAM,WAAW;GACpF,KAAK,OAAO;GACZ,IAAI,KAAK,MAAM,OAAO,CAAC;GACvB,MAAM,UAAU,mBAAmB,SAAS;GAC5C,IAAI,SAAS;IACX,KAAK,OAAO,QAAQ,MAAM,WAAW,UAAU;KAC7C,MAAM,QAAQ;MAAE,MAAM;MAAoB;KAAM;KAChD,KAAK,WAAW,CAAC,KAAK;KACtB,KAAK,MAAM,YAAY,WAAW,SAAS;MAAE,WAAW,KAAK;MAAW,UAAU,KAAK;MAAU;KAAM,CAAC;IAC1G,CAAC;IACD,KAAK,WAAW,CAAC;KAAE,MAAM;KAAoB,OAAO,QAAQ,MAAM;IAAM,CAAC;GAC3E,OAAO,KAAK,WAAW,CAAC,EAAE,MAAM,mBAAmB,CAAC;GACpD,OAAO,KAAK;EACd;EACA,IAAI,cAAc,KAAA,KAAa,CAAC,KAAK,WAAW,SAAS,KAAK,KAAK,QAAQ,SAAS,MAAM,UAAU,OAAO,CAAC;EAC5G,KAAK,OAAO;EACZ,IAAI;EACJ,IAAI;GACF,OAAO,GAAG,SAAS,SAAS,CAAC,CAAC;EAChC,QAAQ;GACN,OAAO,CAAC;EACV;EACA,IAAI,OAAO,KAAK,QAAQ;GACtB,KAAK,SAAS;GACd,KAAK,WAAW,CAAC;EACnB;EACA,MAAM,MAAM,KAAK,WAAW,KAAK,OAAO;EACxC,MAAM,QAAQ,MAAM,OAAO,oBAAoB,KAAK;EACpD,IAAI,QAAQ,OAAO,OAAO,CAAC;EAC3B,MAAM,QAAQ,UAAU,WAAW,OAAO,IAAI;EAC9C,IAAI,UAAU,KAAA,GAAW,OAAO,CAAC;EACjC,MAAM,cAAc,MAAM,YAAY,OAAO;EAC7C,IAAI,cAAc,GAAG,OAAO,CAAC;EAC7B,MAAM,QAAQ,MAAM,MAAM,QAAQ,OAAO,IAAI,IAAI;EACjD,MAAM,SAAS,QAAQ,cAAc,CAAC,IAAI,cAAc,MAAM,SAAS,QAAQ,OAAO,cAAc,CAAC,CAAC;EACtG,KAAK,SAAS,QAAQ,cAAc;EACpC,IAAI,OAAO,SAAS,GAAG,KAAK,WAAW,CAAC,GAAG,KAAK,UAAU,GAAG,MAAM,CAAC,CAAC,MAAM,IAAa;EACxF,OAAO;CACT;CACA,MAAM,aAAmB;EACvB,KAAK,MAAM,QAAQ,MAAM,OAAO,GAC9B,KAAK,MAAM,SAAS,QAAQ,IAAI,GAC9B,KAAK,MAAM,YAAY,WAAW,SAAS;GAAE,WAAW,KAAK;GAAW,UAAU,KAAK;GAAU;EAAM,CAAC;CAG9G;CACA,MAAM,kBAAwB;EAC5B,IAAI,MAAM,OAAO,KAAK,UAAU,KAAA,GAAW,QAAQ,YAAY,MAAM,OAAO;EAC5E,IAAI,MAAM,SAAS,KAAK,UAAU,KAAA,GAAW;GAC3C,cAAc,KAAK;GACnB,QAAQ,KAAA;EACV;CACF;CAEA,OAAO;EACL,MAAM,SAAS,WAAW,UAAU,SAAS,SAAS;GACpD,MAAM,OAAO,QAAQ,QAAQ,WAAW,QAAQ;GAChD,IAAI,CAAC,QAAQ,CAAC,KAAK,WAAW,IAAI,KAAK,KAAK,QAAQ,IAAI,MAAM,WAC5D,MAAM,IAAI,MAAM,mCAAmC;GACrD,MAAM,EAAE,UAAU,WAAW,GAAG,UAAU;GAC1C,MAAM,UAAU,mBAAmB,IAAI;GACvC,OAAO,UAAU,QAAQ,mBAAmB,OAAO,OAAO,IAAI,qBAAqB,MAAM,OAAO,OAAO;EACzG;EACA,UAAU,WAAW,UAAU;GAC7B,MAAM,MAAM,MAAM,WAAW,QAAQ;GACrC,MAAM,OAAO,MAAM,IAAI,GAAG,KAAK;IAC7B;IACA;IACA,MAAM;IACN,MAAM,KAAA;IACN,QAAQ;IACR,UAAU,CAAC;GACb;GACA,IAAI,CAAC,MAAM,IAAI,GAAG,GAAG,MAAM,IAAI,KAAK,IAAI;GACxC,KAAK,QAAQ;GACb,QAAQ,IAAI;GACZ,UAAU;GACV,OAAO,CAAC,GAAG,KAAK,QAAQ;EAC1B;EACA,YAAY,WAAW,UAAU;GAC/B,MAAM,MAAM,MAAM,WAAW,QAAQ;GACrC,MAAM,OAAO,MAAM,IAAI,GAAG;GAC1B,IAAI,SAAS,KAAA,GAAW;GACxB,KAAK,QAAQ;GACb,IAAI,KAAK,QAAQ,GAAG;IAClB,KAAK,OAAO;IACZ,MAAM,OAAO,GAAG;GAClB;GACA,UAAU;EACZ;EACA,QAAQ,UAAU;GAChB,UAAU,IAAI,QAAQ;GACtB,aAAa,UAAU,OAAO,QAAQ;EACxC;EACA,QAAQ;GACN,IAAI,UAAU,KAAA,GAAW,cAAc,KAAK;GAC5C,QAAQ,KAAA;GACR,KAAK,MAAM,QAAQ,MAAM,OAAO,GAAG,KAAK,OAAO;GAC/C,MAAM,MAAM;GACZ,UAAU,MAAM;EAClB;CACF;AACF"}
+{"version":3,"file":"threadJournals.mjs","names":[],"sources":["../../../src/server/threadJournals.ts"],"sourcesContent":["import type { Context } from '@earendil-works/chord';\n\nimport type { PoChildThread } from '../exports/childSession';\nimport type { TranscriptPage, TranscriptPageRequest } from '../exports/sessionProtocol';\n\nconst POLL_MS = 250;\n\ntype Frame = Record<string, unknown>;\n\ninterface Tail {\n  readonly sessionId: string;\n  readonly threadId: string;\n  refs: number;\n  retained: Frame[];\n  stop?: () => void;\n}\n\nexport interface ThreadJournals {\n  readPage(\n    sessionId: string,\n    threadId: string,\n    request: TranscriptPageRequest,\n    context: Context,\n  ): Promise<TranscriptPage>;\n  subscribe(sessionId: string, threadId: string): Frame[];\n  unsubscribe(sessionId: string, threadId: string): void;\n  onFrame(listener: (event: { sessionId: string; threadId: string; frame: Frame }) => void): () => void;\n  close(): void;\n}\n\nfunction keyOf(sessionId: string, threadId: string): string {\n  return `${sessionId}\\n${threadId}`;\n}\n\n/** Follows child transcripts only while at least one browser thread is subscribed. */\nexport function createThreadJournals(options: {\n  resolve(sessionId: string, threadId: string): PoChildThread | undefined;\n}): ThreadJournals {\n  const tails = new Map<string, Tail>();\n  const listeners = new Set<(event: { sessionId: string; threadId: string; frame: Frame }) => void>();\n  let timer: NodeJS.Timeout | undefined;\n\n  // A thread is looked up until its run appears; then it follows the run's live state, or reads as finished.\n  const advance = (tail: Tail): Frame[] => {\n    if (tail.stop) return [];\n    const thread = options.resolve(tail.sessionId, tail.threadId);\n    if (!thread) return [];\n    const state = thread.state;\n    if (state) {\n      tail.stop = state.subscribe((value) => {\n        const frame = { type: 'transcript_state', state: value };\n        tail.retained = [frame];\n        for (const listener of listeners) listener({ sessionId: tail.sessionId, threadId: tail.threadId, frame });\n      });\n      tail.retained = [{ type: 'transcript_state', state: state.value }];\n    } else {\n      tail.stop = () => undefined;\n      tail.retained = [{ type: 'transcript_ready' }];\n    }\n    return tail.retained;\n  };\n  const syncTimer = (): void => {\n    const waiting = [...tails.values()].some((tail) => !tail.stop);\n    if (waiting && timer === undefined) timer = setInterval(tick, POLL_MS);\n    if (!waiting && timer !== undefined) {\n      clearInterval(timer);\n      timer = undefined;\n    }\n  };\n  function tick(): void {\n    for (const tail of tails.values()) {\n      for (const frame of advance(tail)) {\n        for (const listener of listeners) listener({ sessionId: tail.sessionId, threadId: tail.threadId, frame });\n      }\n    }\n    syncTimer();\n  }\n\n  return {\n    async readPage(sessionId, threadId, request, context) {\n      const thread = options.resolve(sessionId, threadId);\n      if (!thread) throw new Error('Child transcript not found');\n      const { threadId: _threadId, ...query } = request;\n      return thread.readTranscriptPage(query, context.abortSignal);\n    },\n    subscribe(sessionId, threadId) {\n      const key = keyOf(sessionId, threadId);\n      const tail = tails.get(key) ?? { sessionId, threadId, refs: 0, retained: [] };\n      if (!tails.has(key)) tails.set(key, tail);\n      tail.refs += 1;\n      advance(tail);\n      syncTimer();\n      return [...tail.retained];\n    },\n    unsubscribe(sessionId, threadId) {\n      const key = keyOf(sessionId, threadId);\n      const tail = tails.get(key);\n      if (tail === undefined) return;\n      tail.refs -= 1;\n      if (tail.refs <= 0) {\n        tail.stop?.();\n        tails.delete(key);\n      }\n      syncTimer();\n    },\n    onFrame(listener) {\n      listeners.add(listener);\n      return () => listeners.delete(listener);\n    },\n    close() {\n      if (timer !== undefined) clearInterval(timer);\n      timer = undefined;\n      for (const tail of tails.values()) tail.stop?.();\n      tails.clear();\n      listeners.clear();\n    },\n  };\n}\n"],"mappings":";AAKA,MAAM,UAAU;AAyBhB,SAAS,MAAM,WAAmB,UAA0B;CAC1D,OAAO,GAAG,UAAU,IAAI;AAC1B;;AAGA,SAAgB,qBAAqB,SAElB;CACjB,MAAM,wBAAQ,IAAI,IAAkB;CACpC,MAAM,4BAAY,IAAI,IAA4E;CAClG,IAAI;CAGJ,MAAM,WAAW,SAAwB;EACvC,IAAI,KAAK,MAAM,OAAO,CAAC;EACvB,MAAM,SAAS,QAAQ,QAAQ,KAAK,WAAW,KAAK,QAAQ;EAC5D,IAAI,CAAC,QAAQ,OAAO,CAAC;EACrB,MAAM,QAAQ,OAAO;EACrB,IAAI,OAAO;GACT,KAAK,OAAO,MAAM,WAAW,UAAU;IACrC,MAAM,QAAQ;KAAE,MAAM;KAAoB,OAAO;IAAM;IACvD,KAAK,WAAW,CAAC,KAAK;IACtB,KAAK,MAAM,YAAY,WAAW,SAAS;KAAE,WAAW,KAAK;KAAW,UAAU,KAAK;KAAU;IAAM,CAAC;GAC1G,CAAC;GACD,KAAK,WAAW,CAAC;IAAE,MAAM;IAAoB,OAAO,MAAM;GAAM,CAAC;EACnE,OAAO;GACL,KAAK,aAAa,KAAA;GAClB,KAAK,WAAW,CAAC,EAAE,MAAM,mBAAmB,CAAC;EAC/C;EACA,OAAO,KAAK;CACd;CACA,MAAM,kBAAwB;EAC5B,MAAM,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,KAAK,IAAI;EAC7D,IAAI,WAAW,UAAU,KAAA,GAAW,QAAQ,YAAY,MAAM,OAAO;EACrE,IAAI,CAAC,WAAW,UAAU,KAAA,GAAW;GACnC,cAAc,KAAK;GACnB,QAAQ,KAAA;EACV;CACF;CACA,SAAS,OAAa;EACpB,KAAK,MAAM,QAAQ,MAAM,OAAO,GAC9B,KAAK,MAAM,SAAS,QAAQ,IAAI,GAC9B,KAAK,MAAM,YAAY,WAAW,SAAS;GAAE,WAAW,KAAK;GAAW,UAAU,KAAK;GAAU;EAAM,CAAC;EAG5G,UAAU;CACZ;CAEA,OAAO;EACL,MAAM,SAAS,WAAW,UAAU,SAAS,SAAS;GACpD,MAAM,SAAS,QAAQ,QAAQ,WAAW,QAAQ;GAClD,IAAI,CAAC,QAAQ,MAAM,IAAI,MAAM,4BAA4B;GACzD,MAAM,EAAE,UAAU,WAAW,GAAG,UAAU;GAC1C,OAAO,OAAO,mBAAmB,OAAO,QAAQ,WAAW;EAC7D;EACA,UAAU,WAAW,UAAU;GAC7B,MAAM,MAAM,MAAM,WAAW,QAAQ;GACrC,MAAM,OAAO,MAAM,IAAI,GAAG,KAAK;IAAE;IAAW;IAAU,MAAM;IAAG,UAAU,CAAC;GAAE;GAC5E,IAAI,CAAC,MAAM,IAAI,GAAG,GAAG,MAAM,IAAI,KAAK,IAAI;GACxC,KAAK,QAAQ;GACb,QAAQ,IAAI;GACZ,UAAU;GACV,OAAO,CAAC,GAAG,KAAK,QAAQ;EAC1B;EACA,YAAY,WAAW,UAAU;GAC/B,MAAM,MAAM,MAAM,WAAW,QAAQ;GACrC,MAAM,OAAO,MAAM,IAAI,GAAG;GAC1B,IAAI,SAAS,KAAA,GAAW;GACxB,KAAK,QAAQ;GACb,IAAI,KAAK,QAAQ,GAAG;IAClB,KAAK,OAAO;IACZ,MAAM,OAAO,GAAG;GAClB;GACA,UAAU;EACZ;EACA,QAAQ,UAAU;GAChB,UAAU,IAAI,QAAQ;GACtB,aAAa,UAAU,OAAO,QAAQ;EACxC;EACA,QAAQ;GACN,IAAI,UAAU,KAAA,GAAW,cAAc,KAAK;GAC5C,QAAQ,KAAA;GACR,KAAK,MAAM,QAAQ,MAAM,OAAO,GAAG,KAAK,OAAO;GAC/C,MAAM,MAAM;GACZ,UAAU,MAAM;EAClB;CACF;AACF"}

package/dist/src/services/apiSurfaceAssert/index.cjs

@@ -4,7 +4,7 @@ function sorted(values) {
 	return [...new Set(values)].sort();
 }
 /** A path under the same mount that no contract declares, used to calibrate. */
-const CONTROL_PATH = "/__doom_surface_control__";
+const CONTROL_PATH = "/__po_surface_control__";
 /**
 * Whether a response is the framework's own miss rather than a handler's answer.
 *

package/dist/src/services/apiSurfaceAssert/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["mountPackageApi"],"sources":["../../../../src/services/apiSurfaceAssert/index.ts"],"sourcesContent":["/**\n * Checks that what a package declares is what it actually serves.\n *\n * Nothing else in the toolchain does. `parseApiContract` checks a contract's\n * shape, its id uniqueness and that it is JSON, and stops there; no step\n * compares it to a mounted route or to a registration. That gap is not\n * theoretical. One package shipped a valid four-route contract, a well-tested\n * Hono app and a full unit suite for an API that was never mounted at all, and\n * the only test touching the mount asserted the emptiness rather than noticing\n * it.\n *\n * Two questions, both about liveness rather than semantics: are the base paths\n * this scope registers the same set it declares, and does every declared route\n * reach a handler. A route answering 500 passes; a route answering 404 or 405\n * does not exist.\n */\n\nimport type { DoomApiContract } from '../../schemas/apiContracts';\nimport type { DoomApi, DoomApiScope } from '../../schemas/packageApi';\nimport { mountPackageApi, type MountPackageApiOptions } from '../packageApiHarness';\n\nexport interface ApiSurfaceOptions {\n  readonly contract: DoomApiContract;\n  /** The scope being checked; only its declarations and registrations are compared. */\n  readonly scope: DoomApiScope;\n  /** What the generated facet registered at this scope, in registration order. */\n  readonly apis: readonly DoomApi[];\n  /** Passed through to the harness, so a session API gets its id and working directory. */\n  readonly mount?: Omit<MountPackageApiOptions, 'scope'>;\n  /**\n   * Extra request detail for a route a bare request cannot reach, keyed by\n   * contract id, most often a path parameter to substitute.\n   */\n  readonly probe?: Readonly<Record<string, RequestInit & { readonly path?: string }>>;\n}\n\nfunction sorted(values: Iterable<string>): string[] {\n  return [...new Set(values)].sort();\n}\n\n/** A path under the same mount that no contract declares, used to calibrate. */\nconst CONTROL_PATH = '/__doom_surface_control__';\n\n/**\n * Whether a response is the framework's own miss rather than a handler's answer.\n *\n * Status alone cannot tell them apart: a route that refuses an unknown record\n * answers 404 legitimately, and reading that as \"not mounted\" would fail every\n * honest API. So the same request is sent to a path nothing declares, and the\n * two are compared. A declared route answering exactly what an undeclared one\n * answers is not being served.\n *\n * A catch-all route would match the control too and read as unrouted. No\n * package has one; if one appears it should probe an explicit path instead.\n */\nasync function isUnrouted(\n  mounted: { readonly mountPath: string; fetch(path: string, init?: RequestInit): Promise<Response> },\n  response: Response,\n  init: RequestInit,\n): Promise<boolean> {\n  if (response.status !== 404 && response.status !== 405) return false;\n  const control = await mounted.fetch(`${mounted.mountPath}${CONTROL_PATH}`, init);\n  if (control.status !== response.status) return false;\n  return (await control.text()) === (await response.text());\n}\n\n/** Throws with the disagreement spelled out, or returns having found none. */\nexport async function assertContractSurface(options: ApiSurfaceOptions): Promise<void> {\n  const routes = options.contract.http.filter((route) => route.scope === options.scope && route.basePath !== undefined);\n  const declared = sorted(routes.map((route) => route.basePath as string));\n  const registered = sorted(options.apis.map((api) => api.basePath));\n\n  const missing = declared.filter((basePath) => !registered.includes(basePath));\n  if (missing.length > 0) {\n    throw new Error(\n      `The contract declares ${missing.join(', ')} at ${options.scope} scope, but nothing is mounted there. ` +\n        `Mounted: ${registered.join(', ') || '(nothing)'}.`,\n    );\n  }\n  const undeclared = registered.filter((basePath) => !declared.includes(basePath));\n  if (undeclared.length > 0) {\n    throw new Error(\n      `${undeclared.join(', ')} is mounted at ${options.scope} scope but the contract never declares it there.`,\n    );\n  }\n\n  for (const api of options.apis) {\n    const mounted = mountPackageApi(api, { ...options.mount, scope: options.scope });\n    try {\n      for (const route of routes.filter((entry) => entry.basePath === api.basePath)) {\n        const probe = options.probe?.[route.id];\n        const path = probe?.path ?? route.path;\n        const init = { method: route.method, ...probe };\n        const response = await mounted.fetch(`${mounted.mountPath}${path === '/' ? '' : path}`, init);\n        if (!(await isUnrouted(mounted, response, init))) continue;\n        throw new Error(\n          `${route.method} ${mounted.mountPath}${path} is declared as '${route.id}' but answered ` +\n            `${response.status} exactly as an unrouted path does, so no handler serves it.`,\n        );\n      }\n    } finally {\n      mounted.close();\n    }\n  }\n}\n"],"mappings":";;AAoCA,SAAS,OAAO,QAAoC;CAClD,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK;AACnC;;AAGA,MAAM,eAAe;;;;;;;;;;;;;AAcrB,eAAe,WACb,SACA,UACA,MACkB;CAClB,IAAI,SAAS,WAAW,OAAO,SAAS,WAAW,KAAK,OAAO;CAC/D,MAAM,UAAU,MAAM,QAAQ,MAAM,GAAG,QAAQ,YAAY,gBAAgB,IAAI;CAC/E,IAAI,QAAQ,WAAW,SAAS,QAAQ,OAAO;CAC/C,OAAQ,MAAM,QAAQ,KAAK,MAAQ,MAAM,SAAS,KAAK;AACzD;;AAGA,eAAsB,sBAAsB,SAA2C;CACrF,MAAM,SAAS,QAAQ,SAAS,KAAK,QAAQ,UAAU,MAAM,UAAU,QAAQ,SAAS,MAAM,aAAa,KAAA,CAAS;CACpH,MAAM,WAAW,OAAO,OAAO,KAAK,UAAU,MAAM,QAAkB,CAAC;CACvE,MAAM,aAAa,OAAO,QAAQ,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC;CAEjE,MAAM,UAAU,SAAS,QAAQ,aAAa,CAAC,WAAW,SAAS,QAAQ,CAAC;CAC5E,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,MACR,yBAAyB,QAAQ,KAAK,IAAI,EAAE,MAAM,QAAQ,MAAM,iDAClD,WAAW,KAAK,IAAI,KAAK,YAAY,EACrD;CAEF,MAAM,aAAa,WAAW,QAAQ,aAAa,CAAC,SAAS,SAAS,QAAQ,CAAC;CAC/E,IAAI,WAAW,SAAS,GACtB,MAAM,IAAI,MACR,GAAG,WAAW,KAAK,IAAI,EAAE,iBAAiB,QAAQ,MAAM,iDAC1D;CAGF,KAAK,MAAM,OAAO,QAAQ,MAAM;EAC9B,MAAM,UAAUA,cAAAA,gBAAgB,KAAK;GAAE,GAAG,QAAQ;GAAO,OAAO,QAAQ;EAAM,CAAC;EAC/E,IAAI;GACF,KAAK,MAAM,SAAS,OAAO,QAAQ,UAAU,MAAM,aAAa,IAAI,QAAQ,GAAG;IAC7E,MAAM,QAAQ,QAAQ,QAAQ,MAAM;IACpC,MAAM,OAAO,OAAO,QAAQ,MAAM;IAClC,MAAM,OAAO;KAAE,QAAQ,MAAM;KAAQ,GAAG;IAAM;IAC9C,MAAM,WAAW,MAAM,QAAQ,MAAM,GAAG,QAAQ,YAAY,SAAS,MAAM,KAAK,QAAQ,IAAI;IAC5F,IAAI,CAAE,MAAM,WAAW,SAAS,UAAU,IAAI,GAAI;IAClD,MAAM,IAAI,MACR,GAAG,MAAM,OAAO,GAAG,QAAQ,YAAY,KAAK,mBAAmB,MAAM,GAAG,iBACnE,SAAS,OAAO,4DACvB;GACF;EACF,UAAU;GACR,QAAQ,MAAM;EAChB;CACF;AACF"}
+{"version":3,"file":"index.cjs","names":["mountPackageApi"],"sources":["../../../../src/services/apiSurfaceAssert/index.ts"],"sourcesContent":["/**\n * Checks that what a package declares is what it actually serves.\n *\n * Nothing else in the toolchain does. `parseApiContract` checks a contract's\n * shape, its id uniqueness and that it is JSON, and stops there; no step\n * compares it to a mounted route or to a registration. That gap is not\n * theoretical. One package shipped a valid four-route contract, a well-tested\n * Hono app and a full unit suite for an API that was never mounted at all, and\n * the only test touching the mount asserted the emptiness rather than noticing\n * it.\n *\n * Two questions, both about liveness rather than semantics: are the base paths\n * this scope registers the same set it declares, and does every declared route\n * reach a handler. A route answering 500 passes; a route answering 404 or 405\n * does not exist.\n */\n\nimport type { PoApiContract } from '../../schemas/apiContracts';\nimport type { PoApi, PoApiScope } from '../../schemas/packageApi';\nimport { mountPackageApi, type MountPackageApiOptions } from '../packageApiHarness';\n\nexport interface ApiSurfaceOptions {\n  readonly contract: PoApiContract;\n  /** The scope being checked; only its declarations and registrations are compared. */\n  readonly scope: PoApiScope;\n  /** What the generated server plugin registered at this scope, in registration order. */\n  readonly apis: readonly PoApi[];\n  /** Passed through to the harness, so a session API gets its id and working directory. */\n  readonly mount?: Omit<MountPackageApiOptions, 'scope'>;\n  /**\n   * Extra request detail for a route a bare request cannot reach, keyed by\n   * contract id, most often a path parameter to substitute.\n   */\n  readonly probe?: Readonly<Record<string, RequestInit & { readonly path?: string }>>;\n}\n\nfunction sorted(values: Iterable<string>): string[] {\n  return [...new Set(values)].sort();\n}\n\n/** A path under the same mount that no contract declares, used to calibrate. */\nconst CONTROL_PATH = '/__po_surface_control__';\n\n/**\n * Whether a response is the framework's own miss rather than a handler's answer.\n *\n * Status alone cannot tell them apart: a route that refuses an unknown record\n * answers 404 legitimately, and reading that as \"not mounted\" would fail every\n * honest API. So the same request is sent to a path nothing declares, and the\n * two are compared. A declared route answering exactly what an undeclared one\n * answers is not being served.\n *\n * A catch-all route would match the control too and read as unrouted. No\n * package has one; if one appears it should probe an explicit path instead.\n */\nasync function isUnrouted(\n  mounted: { readonly mountPath: string; fetch(path: string, init?: RequestInit): Promise<Response> },\n  response: Response,\n  init: RequestInit,\n): Promise<boolean> {\n  if (response.status !== 404 && response.status !== 405) return false;\n  const control = await mounted.fetch(`${mounted.mountPath}${CONTROL_PATH}`, init);\n  if (control.status !== response.status) return false;\n  return (await control.text()) === (await response.text());\n}\n\n/** Throws with the disagreement spelled out, or returns having found none. */\nexport async function assertContractSurface(options: ApiSurfaceOptions): Promise<void> {\n  const routes = options.contract.http.filter((route) => route.scope === options.scope && route.basePath !== undefined);\n  const declared = sorted(routes.map((route) => route.basePath as string));\n  const registered = sorted(options.apis.map((api) => api.basePath));\n\n  const missing = declared.filter((basePath) => !registered.includes(basePath));\n  if (missing.length > 0) {\n    throw new Error(\n      `The contract declares ${missing.join(', ')} at ${options.scope} scope, but nothing is mounted there. ` +\n        `Mounted: ${registered.join(', ') || '(nothing)'}.`,\n    );\n  }\n  const undeclared = registered.filter((basePath) => !declared.includes(basePath));\n  if (undeclared.length > 0) {\n    throw new Error(\n      `${undeclared.join(', ')} is mounted at ${options.scope} scope but the contract never declares it there.`,\n    );\n  }\n\n  for (const api of options.apis) {\n    const mounted = mountPackageApi(api, { ...options.mount, scope: options.scope });\n    try {\n      for (const route of routes.filter((entry) => entry.basePath === api.basePath)) {\n        const probe = options.probe?.[route.id];\n        const path = probe?.path ?? route.path;\n        const init = { method: route.method, ...probe };\n        const response = await mounted.fetch(`${mounted.mountPath}${path === '/' ? '' : path}`, init);\n        if (!(await isUnrouted(mounted, response, init))) continue;\n        throw new Error(\n          `${route.method} ${mounted.mountPath}${path} is declared as '${route.id}' but answered ` +\n            `${response.status} exactly as an unrouted path does, so no handler serves it.`,\n        );\n      }\n    } finally {\n      mounted.close();\n    }\n  }\n}\n"],"mappings":";;AAoCA,SAAS,OAAO,QAAoC;CAClD,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK;AACnC;;AAGA,MAAM,eAAe;;;;;;;;;;;;;AAcrB,eAAe,WACb,SACA,UACA,MACkB;CAClB,IAAI,SAAS,WAAW,OAAO,SAAS,WAAW,KAAK,OAAO;CAC/D,MAAM,UAAU,MAAM,QAAQ,MAAM,GAAG,QAAQ,YAAY,gBAAgB,IAAI;CAC/E,IAAI,QAAQ,WAAW,SAAS,QAAQ,OAAO;CAC/C,OAAQ,MAAM,QAAQ,KAAK,MAAQ,MAAM,SAAS,KAAK;AACzD;;AAGA,eAAsB,sBAAsB,SAA2C;CACrF,MAAM,SAAS,QAAQ,SAAS,KAAK,QAAQ,UAAU,MAAM,UAAU,QAAQ,SAAS,MAAM,aAAa,KAAA,CAAS;CACpH,MAAM,WAAW,OAAO,OAAO,KAAK,UAAU,MAAM,QAAkB,CAAC;CACvE,MAAM,aAAa,OAAO,QAAQ,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC;CAEjE,MAAM,UAAU,SAAS,QAAQ,aAAa,CAAC,WAAW,SAAS,QAAQ,CAAC;CAC5E,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,MACR,yBAAyB,QAAQ,KAAK,IAAI,EAAE,MAAM,QAAQ,MAAM,iDAClD,WAAW,KAAK,IAAI,KAAK,YAAY,EACrD;CAEF,MAAM,aAAa,WAAW,QAAQ,aAAa,CAAC,SAAS,SAAS,QAAQ,CAAC;CAC/E,IAAI,WAAW,SAAS,GACtB,MAAM,IAAI,MACR,GAAG,WAAW,KAAK,IAAI,EAAE,iBAAiB,QAAQ,MAAM,iDAC1D;CAGF,KAAK,MAAM,OAAO,QAAQ,MAAM;EAC9B,MAAM,UAAUA,cAAAA,gBAAgB,KAAK;GAAE,GAAG,QAAQ;GAAO,OAAO,QAAQ;EAAM,CAAC;EAC/E,IAAI;GACF,KAAK,MAAM,SAAS,OAAO,QAAQ,UAAU,MAAM,aAAa,IAAI,QAAQ,GAAG;IAC7E,MAAM,QAAQ,QAAQ,QAAQ,MAAM;IACpC,MAAM,OAAO,OAAO,QAAQ,MAAM;IAClC,MAAM,OAAO;KAAE,QAAQ,MAAM;KAAQ,GAAG;IAAM;IAC9C,MAAM,WAAW,MAAM,QAAQ,MAAM,GAAG,QAAQ,YAAY,SAAS,MAAM,KAAK,QAAQ,IAAI;IAC5F,IAAI,CAAE,MAAM,WAAW,SAAS,UAAU,IAAI,GAAI;IAClD,MAAM,IAAI,MACR,GAAG,MAAM,OAAO,GAAG,QAAQ,YAAY,KAAK,mBAAmB,MAAM,GAAG,iBACnE,SAAS,OAAO,4DACvB;GACF;EACF,UAAU;GACR,QAAQ,MAAM;EAChB;CACF;AACF"}

package/dist/src/services/apiSurfaceAssert/index.d.mts

@@ -1,13 +1,13 @@
-import { DoomApi, DoomApiScope } from "../../schemas/packageApi.mjs";
-import { DoomApiContract } from "../../schemas/apiContracts.mjs";
+import { PoApi, PoApiScope } from "../../schemas/packageApi.mjs";
+import { PoApiContract } from "../../schemas/apiContracts.mjs";
 import { MountPackageApiOptions } from "../packageApiHarness/index.mjs";
 //#region src/services/apiSurfaceAssert/index.d.ts
 export interface ApiSurfaceOptions {
-  readonly contract: DoomApiContract;
+  readonly contract: PoApiContract;
   /** The scope being checked; only its declarations and registrations are compared. */
-  readonly scope: DoomApiScope;
-  /** What the generated facet registered at this scope, in registration order. */
-  readonly apis: readonly DoomApi[];
+  readonly scope: PoApiScope;
+  /** What the generated server plugin registered at this scope, in registration order. */
+  readonly apis: readonly PoApi[];
   /** Passed through to the harness, so a session API gets its id and working directory. */
   readonly mount?: Omit<MountPackageApiOptions, 'scope'>;
   /**

package/dist/src/services/apiSurfaceAssert/index.mjs

@@ -4,7 +4,7 @@ function sorted(values) {
 	return [...new Set(values)].sort();
 }
 /** A path under the same mount that no contract declares, used to calibrate. */
-const CONTROL_PATH = "/__doom_surface_control__";
+const CONTROL_PATH = "/__po_surface_control__";
 /**
 * Whether a response is the framework's own miss rather than a handler's answer.
 *

package/dist/src/services/apiSurfaceAssert/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/services/apiSurfaceAssert/index.ts"],"sourcesContent":["/**\n * Checks that what a package declares is what it actually serves.\n *\n * Nothing else in the toolchain does. `parseApiContract` checks a contract's\n * shape, its id uniqueness and that it is JSON, and stops there; no step\n * compares it to a mounted route or to a registration. That gap is not\n * theoretical. One package shipped a valid four-route contract, a well-tested\n * Hono app and a full unit suite for an API that was never mounted at all, and\n * the only test touching the mount asserted the emptiness rather than noticing\n * it.\n *\n * Two questions, both about liveness rather than semantics: are the base paths\n * this scope registers the same set it declares, and does every declared route\n * reach a handler. A route answering 500 passes; a route answering 404 or 405\n * does not exist.\n */\n\nimport type { DoomApiContract } from '../../schemas/apiContracts';\nimport type { DoomApi, DoomApiScope } from '../../schemas/packageApi';\nimport { mountPackageApi, type MountPackageApiOptions } from '../packageApiHarness';\n\nexport interface ApiSurfaceOptions {\n  readonly contract: DoomApiContract;\n  /** The scope being checked; only its declarations and registrations are compared. */\n  readonly scope: DoomApiScope;\n  /** What the generated facet registered at this scope, in registration order. */\n  readonly apis: readonly DoomApi[];\n  /** Passed through to the harness, so a session API gets its id and working directory. */\n  readonly mount?: Omit<MountPackageApiOptions, 'scope'>;\n  /**\n   * Extra request detail for a route a bare request cannot reach, keyed by\n   * contract id, most often a path parameter to substitute.\n   */\n  readonly probe?: Readonly<Record<string, RequestInit & { readonly path?: string }>>;\n}\n\nfunction sorted(values: Iterable<string>): string[] {\n  return [...new Set(values)].sort();\n}\n\n/** A path under the same mount that no contract declares, used to calibrate. */\nconst CONTROL_PATH = '/__doom_surface_control__';\n\n/**\n * Whether a response is the framework's own miss rather than a handler's answer.\n *\n * Status alone cannot tell them apart: a route that refuses an unknown record\n * answers 404 legitimately, and reading that as \"not mounted\" would fail every\n * honest API. So the same request is sent to a path nothing declares, and the\n * two are compared. A declared route answering exactly what an undeclared one\n * answers is not being served.\n *\n * A catch-all route would match the control too and read as unrouted. No\n * package has one; if one appears it should probe an explicit path instead.\n */\nasync function isUnrouted(\n  mounted: { readonly mountPath: string; fetch(path: string, init?: RequestInit): Promise<Response> },\n  response: Response,\n  init: RequestInit,\n): Promise<boolean> {\n  if (response.status !== 404 && response.status !== 405) return false;\n  const control = await mounted.fetch(`${mounted.mountPath}${CONTROL_PATH}`, init);\n  if (control.status !== response.status) return false;\n  return (await control.text()) === (await response.text());\n}\n\n/** Throws with the disagreement spelled out, or returns having found none. */\nexport async function assertContractSurface(options: ApiSurfaceOptions): Promise<void> {\n  const routes = options.contract.http.filter((route) => route.scope === options.scope && route.basePath !== undefined);\n  const declared = sorted(routes.map((route) => route.basePath as string));\n  const registered = sorted(options.apis.map((api) => api.basePath));\n\n  const missing = declared.filter((basePath) => !registered.includes(basePath));\n  if (missing.length > 0) {\n    throw new Error(\n      `The contract declares ${missing.join(', ')} at ${options.scope} scope, but nothing is mounted there. ` +\n        `Mounted: ${registered.join(', ') || '(nothing)'}.`,\n    );\n  }\n  const undeclared = registered.filter((basePath) => !declared.includes(basePath));\n  if (undeclared.length > 0) {\n    throw new Error(\n      `${undeclared.join(', ')} is mounted at ${options.scope} scope but the contract never declares it there.`,\n    );\n  }\n\n  for (const api of options.apis) {\n    const mounted = mountPackageApi(api, { ...options.mount, scope: options.scope });\n    try {\n      for (const route of routes.filter((entry) => entry.basePath === api.basePath)) {\n        const probe = options.probe?.[route.id];\n        const path = probe?.path ?? route.path;\n        const init = { method: route.method, ...probe };\n        const response = await mounted.fetch(`${mounted.mountPath}${path === '/' ? '' : path}`, init);\n        if (!(await isUnrouted(mounted, response, init))) continue;\n        throw new Error(\n          `${route.method} ${mounted.mountPath}${path} is declared as '${route.id}' but answered ` +\n            `${response.status} exactly as an unrouted path does, so no handler serves it.`,\n        );\n      }\n    } finally {\n      mounted.close();\n    }\n  }\n}\n"],"mappings":";;AAoCA,SAAS,OAAO,QAAoC;CAClD,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK;AACnC;;AAGA,MAAM,eAAe;;;;;;;;;;;;;AAcrB,eAAe,WACb,SACA,UACA,MACkB;CAClB,IAAI,SAAS,WAAW,OAAO,SAAS,WAAW,KAAK,OAAO;CAC/D,MAAM,UAAU,MAAM,QAAQ,MAAM,GAAG,QAAQ,YAAY,gBAAgB,IAAI;CAC/E,IAAI,QAAQ,WAAW,SAAS,QAAQ,OAAO;CAC/C,OAAQ,MAAM,QAAQ,KAAK,MAAQ,MAAM,SAAS,KAAK;AACzD;;AAGA,eAAsB,sBAAsB,SAA2C;CACrF,MAAM,SAAS,QAAQ,SAAS,KAAK,QAAQ,UAAU,MAAM,UAAU,QAAQ,SAAS,MAAM,aAAa,KAAA,CAAS;CACpH,MAAM,WAAW,OAAO,OAAO,KAAK,UAAU,MAAM,QAAkB,CAAC;CACvE,MAAM,aAAa,OAAO,QAAQ,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC;CAEjE,MAAM,UAAU,SAAS,QAAQ,aAAa,CAAC,WAAW,SAAS,QAAQ,CAAC;CAC5E,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,MACR,yBAAyB,QAAQ,KAAK,IAAI,EAAE,MAAM,QAAQ,MAAM,iDAClD,WAAW,KAAK,IAAI,KAAK,YAAY,EACrD;CAEF,MAAM,aAAa,WAAW,QAAQ,aAAa,CAAC,SAAS,SAAS,QAAQ,CAAC;CAC/E,IAAI,WAAW,SAAS,GACtB,MAAM,IAAI,MACR,GAAG,WAAW,KAAK,IAAI,EAAE,iBAAiB,QAAQ,MAAM,iDAC1D;CAGF,KAAK,MAAM,OAAO,QAAQ,MAAM;EAC9B,MAAM,UAAU,gBAAgB,KAAK;GAAE,GAAG,QAAQ;GAAO,OAAO,QAAQ;EAAM,CAAC;EAC/E,IAAI;GACF,KAAK,MAAM,SAAS,OAAO,QAAQ,UAAU,MAAM,aAAa,IAAI,QAAQ,GAAG;IAC7E,MAAM,QAAQ,QAAQ,QAAQ,MAAM;IACpC,MAAM,OAAO,OAAO,QAAQ,MAAM;IAClC,MAAM,OAAO;KAAE,QAAQ,MAAM;KAAQ,GAAG;IAAM;IAC9C,MAAM,WAAW,MAAM,QAAQ,MAAM,GAAG,QAAQ,YAAY,SAAS,MAAM,KAAK,QAAQ,IAAI;IAC5F,IAAI,CAAE,MAAM,WAAW,SAAS,UAAU,IAAI,GAAI;IAClD,MAAM,IAAI,MACR,GAAG,MAAM,OAAO,GAAG,QAAQ,YAAY,KAAK,mBAAmB,MAAM,GAAG,iBACnE,SAAS,OAAO,4DACvB;GACF;EACF,UAAU;GACR,QAAQ,MAAM;EAChB;CACF;AACF"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/services/apiSurfaceAssert/index.ts"],"sourcesContent":["/**\n * Checks that what a package declares is what it actually serves.\n *\n * Nothing else in the toolchain does. `parseApiContract` checks a contract's\n * shape, its id uniqueness and that it is JSON, and stops there; no step\n * compares it to a mounted route or to a registration. That gap is not\n * theoretical. One package shipped a valid four-route contract, a well-tested\n * Hono app and a full unit suite for an API that was never mounted at all, and\n * the only test touching the mount asserted the emptiness rather than noticing\n * it.\n *\n * Two questions, both about liveness rather than semantics: are the base paths\n * this scope registers the same set it declares, and does every declared route\n * reach a handler. A route answering 500 passes; a route answering 404 or 405\n * does not exist.\n */\n\nimport type { PoApiContract } from '../../schemas/apiContracts';\nimport type { PoApi, PoApiScope } from '../../schemas/packageApi';\nimport { mountPackageApi, type MountPackageApiOptions } from '../packageApiHarness';\n\nexport interface ApiSurfaceOptions {\n  readonly contract: PoApiContract;\n  /** The scope being checked; only its declarations and registrations are compared. */\n  readonly scope: PoApiScope;\n  /** What the generated server plugin registered at this scope, in registration order. */\n  readonly apis: readonly PoApi[];\n  /** Passed through to the harness, so a session API gets its id and working directory. */\n  readonly mount?: Omit<MountPackageApiOptions, 'scope'>;\n  /**\n   * Extra request detail for a route a bare request cannot reach, keyed by\n   * contract id, most often a path parameter to substitute.\n   */\n  readonly probe?: Readonly<Record<string, RequestInit & { readonly path?: string }>>;\n}\n\nfunction sorted(values: Iterable<string>): string[] {\n  return [...new Set(values)].sort();\n}\n\n/** A path under the same mount that no contract declares, used to calibrate. */\nconst CONTROL_PATH = '/__po_surface_control__';\n\n/**\n * Whether a response is the framework's own miss rather than a handler's answer.\n *\n * Status alone cannot tell them apart: a route that refuses an unknown record\n * answers 404 legitimately, and reading that as \"not mounted\" would fail every\n * honest API. So the same request is sent to a path nothing declares, and the\n * two are compared. A declared route answering exactly what an undeclared one\n * answers is not being served.\n *\n * A catch-all route would match the control too and read as unrouted. No\n * package has one; if one appears it should probe an explicit path instead.\n */\nasync function isUnrouted(\n  mounted: { readonly mountPath: string; fetch(path: string, init?: RequestInit): Promise<Response> },\n  response: Response,\n  init: RequestInit,\n): Promise<boolean> {\n  if (response.status !== 404 && response.status !== 405) return false;\n  const control = await mounted.fetch(`${mounted.mountPath}${CONTROL_PATH}`, init);\n  if (control.status !== response.status) return false;\n  return (await control.text()) === (await response.text());\n}\n\n/** Throws with the disagreement spelled out, or returns having found none. */\nexport async function assertContractSurface(options: ApiSurfaceOptions): Promise<void> {\n  const routes = options.contract.http.filter((route) => route.scope === options.scope && route.basePath !== undefined);\n  const declared = sorted(routes.map((route) => route.basePath as string));\n  const registered = sorted(options.apis.map((api) => api.basePath));\n\n  const missing = declared.filter((basePath) => !registered.includes(basePath));\n  if (missing.length > 0) {\n    throw new Error(\n      `The contract declares ${missing.join(', ')} at ${options.scope} scope, but nothing is mounted there. ` +\n        `Mounted: ${registered.join(', ') || '(nothing)'}.`,\n    );\n  }\n  const undeclared = registered.filter((basePath) => !declared.includes(basePath));\n  if (undeclared.length > 0) {\n    throw new Error(\n      `${undeclared.join(', ')} is mounted at ${options.scope} scope but the contract never declares it there.`,\n    );\n  }\n\n  for (const api of options.apis) {\n    const mounted = mountPackageApi(api, { ...options.mount, scope: options.scope });\n    try {\n      for (const route of routes.filter((entry) => entry.basePath === api.basePath)) {\n        const probe = options.probe?.[route.id];\n        const path = probe?.path ?? route.path;\n        const init = { method: route.method, ...probe };\n        const response = await mounted.fetch(`${mounted.mountPath}${path === '/' ? '' : path}`, init);\n        if (!(await isUnrouted(mounted, response, init))) continue;\n        throw new Error(\n          `${route.method} ${mounted.mountPath}${path} is declared as '${route.id}' but answered ` +\n            `${response.status} exactly as an unrouted path does, so no handler serves it.`,\n        );\n      }\n    } finally {\n      mounted.close();\n    }\n  }\n}\n"],"mappings":";;AAoCA,SAAS,OAAO,QAAoC;CAClD,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK;AACnC;;AAGA,MAAM,eAAe;;;;;;;;;;;;;AAcrB,eAAe,WACb,SACA,UACA,MACkB;CAClB,IAAI,SAAS,WAAW,OAAO,SAAS,WAAW,KAAK,OAAO;CAC/D,MAAM,UAAU,MAAM,QAAQ,MAAM,GAAG,QAAQ,YAAY,gBAAgB,IAAI;CAC/E,IAAI,QAAQ,WAAW,SAAS,QAAQ,OAAO;CAC/C,OAAQ,MAAM,QAAQ,KAAK,MAAQ,MAAM,SAAS,KAAK;AACzD;;AAGA,eAAsB,sBAAsB,SAA2C;CACrF,MAAM,SAAS,QAAQ,SAAS,KAAK,QAAQ,UAAU,MAAM,UAAU,QAAQ,SAAS,MAAM,aAAa,KAAA,CAAS;CACpH,MAAM,WAAW,OAAO,OAAO,KAAK,UAAU,MAAM,QAAkB,CAAC;CACvE,MAAM,aAAa,OAAO,QAAQ,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC;CAEjE,MAAM,UAAU,SAAS,QAAQ,aAAa,CAAC,WAAW,SAAS,QAAQ,CAAC;CAC5E,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,MACR,yBAAyB,QAAQ,KAAK,IAAI,EAAE,MAAM,QAAQ,MAAM,iDAClD,WAAW,KAAK,IAAI,KAAK,YAAY,EACrD;CAEF,MAAM,aAAa,WAAW,QAAQ,aAAa,CAAC,SAAS,SAAS,QAAQ,CAAC;CAC/E,IAAI,WAAW,SAAS,GACtB,MAAM,IAAI,MACR,GAAG,WAAW,KAAK,IAAI,EAAE,iBAAiB,QAAQ,MAAM,iDAC1D;CAGF,KAAK,MAAM,OAAO,QAAQ,MAAM;EAC9B,MAAM,UAAU,gBAAgB,KAAK;GAAE,GAAG,QAAQ;GAAO,OAAO,QAAQ;EAAM,CAAC;EAC/E,IAAI;GACF,KAAK,MAAM,SAAS,OAAO,QAAQ,UAAU,MAAM,aAAa,IAAI,QAAQ,GAAG;IAC7E,MAAM,QAAQ,QAAQ,QAAQ,MAAM;IACpC,MAAM,OAAO,OAAO,QAAQ,MAAM;IAClC,MAAM,OAAO;KAAE,QAAQ,MAAM;KAAQ,GAAG;IAAM;IAC9C,MAAM,WAAW,MAAM,QAAQ,MAAM,GAAG,QAAQ,YAAY,SAAS,MAAM,KAAK,QAAQ,IAAI;IAC5F,IAAI,CAAE,MAAM,WAAW,SAAS,UAAU,IAAI,GAAI;IAClD,MAAM,IAAI,MACR,GAAG,MAAM,OAAO,GAAG,QAAQ,YAAY,KAAK,mBAAmB,MAAM,GAAG,iBACnE,SAAS,OAAO,4DACvB;GACF;EACF,UAAU;GACR,QAAQ,MAAM;EAChB;CACF;AACF"}

package/dist/src/services/chatgptAuth/index.cjs

@@ -1,27 +1,8 @@
-const require_runtime = require("../../../_virtual/_rolldown/runtime.cjs");
-const require_runtimePiSettings = require("../../../runtimePiSettings.cjs");
-let node_crypto = require("node:crypto");
-let node_path = require("node:path");
-node_path = require_runtime.__toESM(node_path, 1);
-let node_http = require("node:http");
-let _earendil_works_pi_coding_agent = require("@earendil-works/pi-coding-agent");
 //#region src/services/chatgptAuth/index.ts
 /** The one ChatGPT sign-in every Po feature shares; separate from Pi's `openai-codex` model login. */
 const CHATGPT_AUTH_PROVIDER_ID = "po-chatgpt";
 const CHATGPT_AUTH_PROVIDER_NAME = "ChatGPT for Po features";
 const CHATGPT_SIGN_IN_HINT = `Sign in to ${CHATGPT_AUTH_PROVIDER_NAME} under Settings > Providers, or with /login.`;
-const CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
-const AUTH_ORIGIN = "https://auth.openai.com";
-const TOKEN_URL = `${AUTH_ORIGIN}/oauth/token`;
-/** Realtime voice needs the connector scopes that Pi's own ChatGPT login does not request. */
-const SCOPE = "openid profile email offline_access api.connectors.read api.connectors.invoke";
-const CALLBACK_HOST = "127.0.0.1";
-const CALLBACK_PORT = 1455;
-const CALLBACK_PATH = "/auth/callback";
-/** The redirect registered for this OAuth client; the browser reaches the listener through localhost. */
-const REDIRECT_URI = `http://localhost:${CALLBACK_PORT}${CALLBACK_PATH}`;
-const MAX_TOKEN_RESPONSE_BYTES = 1048576;
-const TOKEN_TIMEOUT_MS = 3e4;
 function record(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -76,212 +57,12 @@ async function chatgptCredentials(source, loginMessage, signal) {
 		accountId
 	};
 }
-async function requestTokens(body, previousRefresh, signal) {
-	const bounded = AbortSignal.any([AbortSignal.timeout(TOKEN_TIMEOUT_MS), ...signal ? [signal] : []]);
-	const response = await fetch(TOKEN_URL, {
-		method: "POST",
-		headers: { "content-type": "application/x-www-form-urlencoded" },
-		body,
-		redirect: "error",
-		signal: bounded
-	});
-	if (!response.ok) {
-		await response.body?.cancel().catch(() => void 0);
-		throw new Error(`ChatGPT sign-in was rejected (HTTP ${response.status}). Sign in again.`);
-	}
-	const json = await readBoundedJson(response, MAX_TOKEN_RESPONSE_BYTES, bounded);
-	const access = record(json) ? json.access_token : void 0;
-	const refresh = record(json) ? json.refresh_token ?? previousRefresh : void 0;
-	const expiresIn = record(json) ? json.expires_in : void 0;
-	if (typeof access !== "string" || typeof refresh !== "string" || typeof expiresIn !== "number" || expiresIn <= 0) throw new Error("ChatGPT sign-in returned an invalid token response.");
-	const accountId = accountIdOf(access);
-	if (!accountId) throw new Error("ChatGPT sign-in did not include a ChatGPT account.");
-	return {
-		access,
-		refresh,
-		expires: Date.now() + expiresIn * 1e3,
-		accountId
-	};
-}
-function sameState(supplied, expected) {
-	const left = Buffer.from(supplied ?? "");
-	const right = Buffer.from(expected);
-	return left.length === right.length && (0, node_crypto.timingSafeEqual)(left, right);
-}
-/** The authorization code from a redirect URL; pasted input must carry the expected state. */
-function codeFromRedirect(url, state) {
-	for (const name of [
-		"state",
-		"code",
-		"error"
-	]) if (url.searchParams.getAll(name).length > 1) throw new Error("The sign-in address is invalid.");
-	if (!sameState(url.searchParams.get("state"), state)) throw new Error("The sign-in address does not match this attempt.");
-	if (url.searchParams.get("error")) throw new Error("ChatGPT sign-in was declined.");
-	const code = url.searchParams.get("code");
-	if (!code || code.trim() !== code) throw new Error("The sign-in address has no authorization code.");
-	return code;
-}
-/** Listens for the browser redirect on the registered loopback port; rejects when the port is taken. */
-async function listenForCode(state, signal) {
-	const server = (0, node_http.createServer)();
-	let resolveCode;
-	let rejectCode;
-	const code = new Promise((resolve, reject) => {
-		resolveCode = resolve;
-		rejectCode = reject;
-	});
-	code.catch(() => void 0);
-	server.on("request", (request, response) => {
-		const reply = (status, text) => {
-			response.writeHead(status, {
-				"content-type": "text/plain; charset=utf-8",
-				"cache-control": "no-store"
-			});
-			response.end(text);
-		};
-		const url = new URL(request.url ?? "/", REDIRECT_URI);
-		if (request.method !== "GET" || url.pathname !== CALLBACK_PATH) return reply(404, "Not found.");
-		try {
-			resolveCode(codeFromRedirect(url, state));
-			reply(200, "Signed in. You can close this page.");
-		} catch (error) {
-			if (sameState(url.searchParams.get("state"), state)) rejectCode(error);
-			reply(400, "Sign-in could not be completed.");
-		}
-	});
-	await new Promise((resolve, reject) => {
-		server.once("error", reject);
-		server.listen({
-			host: CALLBACK_HOST,
-			port: CALLBACK_PORT,
-			exclusive: true
-		}, () => {
-			server.off("error", reject);
-			resolve();
-		});
-	});
-	const close = () => {
-		server.close();
-		server.closeAllConnections();
-	};
-	signal?.addEventListener("abort", close, { once: true });
-	return {
-		code,
-		close
-	};
-}
-async function login(callbacks) {
-	const { signal } = callbacks;
-	const verifier = (0, node_crypto.randomBytes)(64).toString("base64url");
-	const state = (0, node_crypto.randomBytes)(32).toString("base64url");
-	const authorize = new URL(`${AUTH_ORIGIN}/oauth/authorize`);
-	authorize.search = new URLSearchParams({
-		response_type: "code",
-		client_id: CLIENT_ID,
-		redirect_uri: REDIRECT_URI,
-		scope: SCOPE,
-		code_challenge: (0, node_crypto.createHash)("sha256").update(verifier).digest("base64url"),
-		code_challenge_method: "S256",
-		id_token_add_organizations: "true",
-		state
-	}).toString();
-	const callback = await listenForCode(state, signal).catch(() => void 0);
-	try {
-		callbacks.onAuth({
-			url: authorize.toString(),
-			instructions: "Sign in in your browser. If it does not return here, paste the address it lands on."
-		});
-		const pasted = (callbacks.onManualCodeInput?.() ?? callbacks.onPrompt({
-			message: "Paste the address your browser lands on",
-			placeholder: REDIRECT_URI
-		})).then((input) => {
-			if (!URL.canParse(input.trim())) throw new Error("Paste the full address from your browser.");
-			return codeFromRedirect(new URL(input.trim()), state);
-		});
-		const code = await (callback ? Promise.race([callback.code, pasted]) : pasted);
-		signal?.throwIfAborted();
-		return await requestTokens(new URLSearchParams({
-			grant_type: "authorization_code",
-			client_id: CLIENT_ID,
-			code,
-			code_verifier: verifier,
-			redirect_uri: REDIRECT_URI
-		}), void 0, signal);
-	} finally {
-		callback?.close();
-	}
-}
-const chatgptAuthProvider = {
-	name: CHATGPT_AUTH_PROVIDER_NAME,
-	oauth: {
-		name: CHATGPT_AUTH_PROVIDER_NAME,
-		isSubscription: true,
-		login,
-		refreshToken: (credentials, signal) => requestTokens(new URLSearchParams({
-			grant_type: "refresh_token",
-			client_id: CLIENT_ID,
-			refresh_token: credentials.refresh
-		}), credentials.refresh, signal),
-		getApiKey: (credentials) => credentials.access
-	}
-};
-/** Adds the shared sign-in to a Pi model runtime: its Providers row, /login entry, refresh and storage. */
-function registerChatgptAuthProvider(runtime) {
-	runtime.registerProvider(CHATGPT_AUTH_PROVIDER_ID, chatgptAuthProvider);
-}
-/**
-* Reads the shared sign-in outside a session (Voice runs at the hub). It opens the same auth.json
-* a session uses; Pi's file lock keeps refreshes from different runtimes from racing.
-*/
-function createChatgptAuthReader(options) {
-	let loading;
-	const runtime = () => {
-		loading ??= (async () => {
-			const agentDirectory = require_runtimePiSettings.piAgentDirectory(options.environment, options.homeDirectory);
-			const directory = require_runtimePiSettings.modelConfigDirectory(agentDirectory, options.homeDirectory);
-			const created = await _earendil_works_pi_coding_agent.ModelRuntime.create({
-				authPath: node_path.default.join(directory, "auth.json"),
-				modelsPath: node_path.default.join(directory, "models.json"),
-				refreshOnCreate: false
-			});
-			registerChatgptAuthProvider(created);
-			return created;
-		})().catch((error) => {
-			loading = void 0;
-			throw error;
-		});
-		return loading;
-	};
-	const fresh = async (signal) => {
-		const current = await runtime();
-		await current.refresh({
-			allowNetwork: false,
-			providers: [CHATGPT_AUTH_PROVIDER_ID],
-			...signal ? { signal } : {}
-		});
-		return current;
-	};
-	return {
-		/** Whether the shared sign-in exists on disk. No network call; the same check `credentials` runs first. */
-		async signedIn(signal) {
-			return (await fresh(signal)).isUsingSubscription(CHATGPT_AUTH_PROVIDER_ID);
-		},
-		async credentials(loginMessage, signal) {
-			const current = await fresh(signal);
-			return chatgptCredentials({
-				available: () => current.isUsingSubscription(CHATGPT_AUTH_PROVIDER_ID),
-				getAuth: (authSignal) => current.getAuth(CHATGPT_AUTH_PROVIDER_ID, authSignal ? { signal: authSignal } : {})
-			}, loginMessage, signal);
-		}
-	};
-}
 //#endregion
 exports.CHATGPT_AUTH_PROVIDER_ID = CHATGPT_AUTH_PROVIDER_ID;
 exports.CHATGPT_AUTH_PROVIDER_NAME = CHATGPT_AUTH_PROVIDER_NAME;
 exports.CHATGPT_SIGN_IN_HINT = CHATGPT_SIGN_IN_HINT;
+exports.accountIdOf = accountIdOf;
 exports.chatgptCredentials = chatgptCredentials;
-exports.createChatgptAuthReader = createChatgptAuthReader;
 exports.readBoundedJson = readBoundedJson;
-exports.registerChatgptAuthProvider = registerChatgptAuthProvider;
 
 //# sourceMappingURL=index.cjs.map

package/dist/src/services/chatgptAuth/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["timingSafeEqual","createServer","randomBytes","createHash","piAgentDirectory","modelConfigDirectory","ModelRuntime","path"],"sources":["../../../../src/services/chatgptAuth/index.ts"],"sourcesContent":["/*\n * Portions of this file are adapted from OpenAI Codex at commit 5ecb3afd1b, by way of po-voice.\n * Copyright OpenAI. Licensed under the Apache License, Version 2.0.\n */\n\nimport { createHash, randomBytes, timingSafeEqual } from 'node:crypto';\nimport { createServer } from 'node:http';\nimport path from 'node:path';\n\nimport { ModelRuntime, type ProviderConfig } from '@earendil-works/pi-coding-agent';\n\nimport { modelConfigDirectory, piAgentDirectory } from '../piSettings';\n\n/** The one ChatGPT sign-in every Po feature shares; separate from Pi's `openai-codex` model login. */\nexport const CHATGPT_AUTH_PROVIDER_ID = 'po-chatgpt';\nexport const CHATGPT_AUTH_PROVIDER_NAME = 'ChatGPT for Po features';\nexport const CHATGPT_SIGN_IN_HINT = `Sign in to ${CHATGPT_AUTH_PROVIDER_NAME} under Settings > Providers, or with /login.`;\n\nconst CLIENT_ID = 'app_EMoamEEZ73f0CkXaXp7hrann';\nconst AUTH_ORIGIN = 'https://auth.openai.com';\nconst TOKEN_URL = `${AUTH_ORIGIN}/oauth/token`;\n/** Realtime voice needs the connector scopes that Pi's own ChatGPT login does not request. */\nconst SCOPE = 'openid profile email offline_access api.connectors.read api.connectors.invoke';\nconst CALLBACK_HOST = '127.0.0.1';\nconst CALLBACK_PORT = 1455;\nconst CALLBACK_PATH = '/auth/callback';\n/** The redirect registered for this OAuth client; the browser reaches the listener through localhost. */\nconst REDIRECT_URI = `http://localhost:${CALLBACK_PORT}${CALLBACK_PATH}`;\nconst MAX_TOKEN_RESPONSE_BYTES = 1024 * 1024;\nconst TOKEN_TIMEOUT_MS = 30_000;\n\ntype ChatgptOAuth = NonNullable<ProviderConfig['oauth']>;\ntype LoginCallbacks = Parameters<ChatgptOAuth['login']>[0];\ntype OAuthCredentials = Awaited<ReturnType<ChatgptOAuth['login']>>;\n\n/** Where a feature reads the shared sign-in: a session's or the hub's Pi model runtime. */\nexport interface ChatgptAuthSource {\n  available(): boolean;\n  getAuth(signal?: AbortSignal): Promise<{ auth: { apiKey?: string } } | undefined>;\n}\n\nfunction record(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\n/** Reads a JSON body without buffering more than `limit` bytes. Errors are generic; callers map them. */\nexport async function readBoundedJson(response: Response, limit: number, signal?: AbortSignal): Promise<unknown> {\n  if (!response.body) throw new Error('Response has no body.');\n  const reader = response.body.getReader();\n  const chunks: Uint8Array[] = [];\n  let length = 0;\n  try {\n    while (true) {\n      signal?.throwIfAborted();\n      const { value, done } = await reader.read();\n      if (done) break;\n      length += value.length;\n      if (length > limit) throw new Error('Response body is too large.');\n      chunks.push(value);\n    }\n    signal?.throwIfAborted();\n    return JSON.parse(Buffer.concat(chunks).toString('utf8')) as unknown;\n  } finally {\n    await reader.cancel().catch(() => undefined); // Response cleanup never replaces the operation error.\n    reader.releaseLock();\n  }\n}\n\n/** The ChatGPT account claim of an access token, or undefined when it is missing or malformed. */\nfunction accountIdOf(token: string): string | undefined {\n  try {\n    const payload: unknown = JSON.parse(Buffer.from(token.split('.')[1] ?? '', 'base64url').toString('utf8'));\n    const auth = record(payload) ? payload['https://api.openai.com/auth'] : undefined;\n    const id = record(auth) ? auth.chatgpt_account_id : undefined;\n    return typeof id === 'string' && /^[A-Za-z0-9_-]{1,256}$/.test(id) ? id : undefined;\n  } catch {\n    return undefined; // Documented fallback: a malformed token has no account, which callers treat as signed out.\n  }\n}\n\n/** Resolves the subscription token and account claim; every failure becomes `loginMessage` unless aborted. */\nexport async function chatgptCredentials(\n  source: ChatgptAuthSource,\n  loginMessage: string,\n  signal?: AbortSignal,\n): Promise<{ token: string; accountId: string }> {\n  if (!source.available()) throw new Error(loginMessage);\n  let token: string | undefined;\n  try {\n    token = (await source.getAuth(signal))?.auth.apiKey;\n  } catch {\n    signal?.throwIfAborted();\n    throw new Error(loginMessage);\n  }\n  signal?.throwIfAborted();\n  const accountId = token ? accountIdOf(token) : undefined;\n  if (!token || !accountId) throw new Error(loginMessage);\n  return { token, accountId };\n}\n\nasync function requestTokens(\n  body: URLSearchParams,\n  previousRefresh: string | undefined,\n  signal: AbortSignal | undefined,\n): Promise<OAuthCredentials> {\n  const bounded = AbortSignal.any([AbortSignal.timeout(TOKEN_TIMEOUT_MS), ...(signal ? [signal] : [])]);\n  const response = await fetch(TOKEN_URL, {\n    method: 'POST',\n    headers: { 'content-type': 'application/x-www-form-urlencoded' },\n    body,\n    redirect: 'error',\n    signal: bounded,\n  });\n  if (!response.ok) {\n    await response.body?.cancel().catch(() => undefined); // The body may echo tokens; it is never read.\n    throw new Error(`ChatGPT sign-in was rejected (HTTP ${response.status}). Sign in again.`);\n  }\n  const json = await readBoundedJson(response, MAX_TOKEN_RESPONSE_BYTES, bounded);\n  const access = record(json) ? json.access_token : undefined;\n  const refresh = record(json) ? (json.refresh_token ?? previousRefresh) : undefined;\n  const expiresIn = record(json) ? json.expires_in : undefined;\n  if (typeof access !== 'string' || typeof refresh !== 'string' || typeof expiresIn !== 'number' || expiresIn <= 0)\n    throw new Error('ChatGPT sign-in returned an invalid token response.');\n  const accountId = accountIdOf(access);\n  if (!accountId) throw new Error('ChatGPT sign-in did not include a ChatGPT account.');\n  return { access, refresh, expires: Date.now() + expiresIn * 1000, accountId };\n}\n\nfunction sameState(supplied: string | null, expected: string): boolean {\n  const left = Buffer.from(supplied ?? '');\n  const right = Buffer.from(expected);\n  return left.length === right.length && timingSafeEqual(left, right);\n}\n\n/** The authorization code from a redirect URL; pasted input must carry the expected state. */\nfunction codeFromRedirect(url: URL, state: string): string {\n  for (const name of ['state', 'code', 'error'])\n    if (url.searchParams.getAll(name).length > 1) throw new Error('The sign-in address is invalid.');\n  if (!sameState(url.searchParams.get('state'), state))\n    throw new Error('The sign-in address does not match this attempt.');\n  if (url.searchParams.get('error')) throw new Error('ChatGPT sign-in was declined.');\n  const code = url.searchParams.get('code');\n  if (!code || code.trim() !== code) throw new Error('The sign-in address has no authorization code.');\n  return code;\n}\n\n/** Listens for the browser redirect on the registered loopback port; rejects when the port is taken. */\nasync function listenForCode(state: string, signal: AbortSignal | undefined) {\n  const server = createServer();\n  let resolveCode!: (code: string) => void;\n  let rejectCode!: (error: Error) => void;\n  const code = new Promise<string>((resolve, reject) => {\n    resolveCode = resolve;\n    rejectCode = reject;\n  });\n  code.catch(() => undefined); // Observed by the caller's race; never an unhandled rejection.\n  server.on('request', (request, response) => {\n    const reply = (status: number, text: string): void => {\n      response.writeHead(status, { 'content-type': 'text/plain; charset=utf-8', 'cache-control': 'no-store' });\n      response.end(text);\n    };\n    const url = new URL(request.url ?? '/', REDIRECT_URI);\n    if (request.method !== 'GET' || url.pathname !== CALLBACK_PATH) return reply(404, 'Not found.');\n    try {\n      resolveCode(codeFromRedirect(url, state));\n      reply(200, 'Signed in. You can close this page.');\n    } catch (error) {\n      // A stray or forged request must not end the attempt; only a matching declined redirect does.\n      if (sameState(url.searchParams.get('state'), state)) rejectCode(error as Error);\n      reply(400, 'Sign-in could not be completed.');\n    }\n  });\n  await new Promise<void>((resolve, reject) => {\n    server.once('error', reject);\n    server.listen({ host: CALLBACK_HOST, port: CALLBACK_PORT, exclusive: true }, () => {\n      server.off('error', reject);\n      resolve();\n    });\n  });\n  const close = (): void => {\n    server.close();\n    server.closeAllConnections();\n  };\n  signal?.addEventListener('abort', close, { once: true });\n  return { code, close };\n}\n\nasync function login(callbacks: LoginCallbacks): Promise<OAuthCredentials> {\n  const { signal } = callbacks;\n  const verifier = randomBytes(64).toString('base64url');\n  const state = randomBytes(32).toString('base64url');\n  const authorize = new URL(`${AUTH_ORIGIN}/oauth/authorize`);\n  authorize.search = new URLSearchParams({\n    response_type: 'code',\n    client_id: CLIENT_ID,\n    redirect_uri: REDIRECT_URI,\n    scope: SCOPE,\n    code_challenge: createHash('sha256').update(verifier).digest('base64url'),\n    code_challenge_method: 'S256',\n    id_token_add_organizations: 'true',\n    state,\n  }).toString();\n  // Port 1455 is shared with Codex and Pi's own ChatGPT login; when it is taken, the pasted address still works.\n  const callback = await listenForCode(state, signal).catch(() => undefined);\n  try {\n    callbacks.onAuth({\n      url: authorize.toString(),\n      instructions: 'Sign in in your browser. If it does not return here, paste the address it lands on.',\n    });\n    const pasted = (\n      callbacks.onManualCodeInput?.() ??\n      callbacks.onPrompt({ message: 'Paste the address your browser lands on', placeholder: REDIRECT_URI })\n    ).then((input) => {\n      if (!URL.canParse(input.trim())) throw new Error('Paste the full address from your browser.');\n      return codeFromRedirect(new URL(input.trim()), state);\n    });\n    const code = await (callback ? Promise.race([callback.code, pasted]) : pasted);\n    signal?.throwIfAborted();\n    return await requestTokens(\n      new URLSearchParams({\n        grant_type: 'authorization_code',\n        client_id: CLIENT_ID,\n        code,\n        code_verifier: verifier,\n        redirect_uri: REDIRECT_URI,\n      }),\n      undefined,\n      signal,\n    );\n  } finally {\n    callback?.close();\n  }\n}\n\nconst chatgptAuthProvider: ProviderConfig = {\n  name: CHATGPT_AUTH_PROVIDER_NAME,\n  oauth: {\n    name: CHATGPT_AUTH_PROVIDER_NAME,\n    isSubscription: true,\n    login,\n    refreshToken: (credentials, signal) =>\n      requestTokens(\n        new URLSearchParams({ grant_type: 'refresh_token', client_id: CLIENT_ID, refresh_token: credentials.refresh }),\n        credentials.refresh,\n        signal,\n      ),\n    getApiKey: (credentials) => credentials.access,\n  },\n};\n\n/** Adds the shared sign-in to a Pi model runtime: its Providers row, /login entry, refresh and storage. */\nexport function registerChatgptAuthProvider(runtime: Pick<ModelRuntime, 'registerProvider'>): void {\n  runtime.registerProvider(CHATGPT_AUTH_PROVIDER_ID, chatgptAuthProvider);\n}\n\n/**\n * Reads the shared sign-in outside a session (Voice runs at the hub). It opens the same auth.json\n * a session uses; Pi's file lock keeps refreshes from different runtimes from racing.\n */\nexport function createChatgptAuthReader(options: {\n  environment?: Readonly<Record<string, string | undefined>>;\n  homeDirectory?: string;\n}) {\n  let loading: Promise<ModelRuntime> | undefined;\n  const runtime = (): Promise<ModelRuntime> => {\n    loading ??= (async () => {\n      const agentDirectory = piAgentDirectory(options.environment, options.homeDirectory);\n      const directory = modelConfigDirectory(agentDirectory, options.homeDirectory);\n      const created = await ModelRuntime.create({\n        authPath: path.join(directory, 'auth.json'),\n        modelsPath: path.join(directory, 'models.json'),\n        refreshOnCreate: false,\n      });\n      registerChatgptAuthProvider(created);\n      return created;\n    })().catch((error: unknown) => {\n      loading = undefined; // A failed open is retried on the next use rather than pinned.\n      throw error;\n    });\n    return loading;\n  };\n  // Sign-in happens in another runtime (the Providers page or a session), so re-read the file first.\n  const fresh = async (signal?: AbortSignal): Promise<ModelRuntime> => {\n    const current = await runtime();\n    await current.refresh({\n      allowNetwork: false,\n      providers: [CHATGPT_AUTH_PROVIDER_ID],\n      ...(signal ? { signal } : {}),\n    });\n    return current;\n  };\n  return {\n    /** Whether the shared sign-in exists on disk. No network call; the same check `credentials` runs first. */\n    async signedIn(signal?: AbortSignal): Promise<boolean> {\n      return (await fresh(signal)).isUsingSubscription(CHATGPT_AUTH_PROVIDER_ID);\n    },\n    async credentials(loginMessage: string, signal?: AbortSignal): Promise<{ token: string; accountId: string }> {\n      const current = await fresh(signal);\n      return chatgptCredentials(\n        {\n          available: () => current.isUsingSubscription(CHATGPT_AUTH_PROVIDER_ID),\n          getAuth: (authSignal) => current.getAuth(CHATGPT_AUTH_PROVIDER_ID, authSignal ? { signal: authSignal } : {}),\n        },\n        loginMessage,\n        signal,\n      );\n    },\n  };\n}\n"],"mappings":";;;;;;;;;AAcA,MAAa,2BAA2B;AACxC,MAAa,6BAA6B;AAC1C,MAAa,uBAAuB,cAAc,2BAA2B;AAE7E,MAAM,YAAY;AAClB,MAAM,cAAc;AACpB,MAAM,YAAY,GAAG,YAAY;;AAEjC,MAAM,QAAQ;AACd,MAAM,gBAAgB;AACtB,MAAM,gBAAgB;AACtB,MAAM,gBAAgB;;AAEtB,MAAM,eAAe,oBAAoB,gBAAgB;AACzD,MAAM,2BAA2B;AACjC,MAAM,mBAAmB;AAYzB,SAAS,OAAO,OAAkD;CAChE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;;AAGA,eAAsB,gBAAgB,UAAoB,OAAe,QAAwC;CAC/G,IAAI,CAAC,SAAS,MAAM,MAAM,IAAI,MAAM,uBAAuB;CAC3D,MAAM,SAAS,SAAS,KAAK,UAAU;CACvC,MAAM,SAAuB,CAAC;CAC9B,IAAI,SAAS;CACb,IAAI;EACF,OAAO,MAAM;GACX,QAAQ,eAAe;GACvB,MAAM,EAAE,OAAO,SAAS,MAAM,OAAO,KAAK;GAC1C,IAAI,MAAM;GACV,UAAU,MAAM;GAChB,IAAI,SAAS,OAAO,MAAM,IAAI,MAAM,6BAA6B;GACjE,OAAO,KAAK,KAAK;EACnB;EACA,QAAQ,eAAe;EACvB,OAAO,KAAK,MAAM,OAAO,OAAO,MAAM,CAAC,CAAC,SAAS,MAAM,CAAC;CAC1D,UAAU;EACR,MAAM,OAAO,OAAO,CAAC,CAAC,YAAY,KAAA,CAAS;EAC3C,OAAO,YAAY;CACrB;AACF;;AAGA,SAAS,YAAY,OAAmC;CACtD,IAAI;EACF,MAAM,UAAmB,KAAK,MAAM,OAAO,KAAK,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC;EACxG,MAAM,OAAO,OAAO,OAAO,IAAI,QAAQ,iCAAiC,KAAA;EACxE,MAAM,KAAK,OAAO,IAAI,IAAI,KAAK,qBAAqB,KAAA;EACpD,OAAO,OAAO,OAAO,YAAY,yBAAyB,KAAK,EAAE,IAAI,KAAK,KAAA;CAC5E,QAAQ;EACN;CACF;AACF;;AAGA,eAAsB,mBACpB,QACA,cACA,QAC+C;CAC/C,IAAI,CAAC,OAAO,UAAU,GAAG,MAAM,IAAI,MAAM,YAAY;CACrD,IAAI;CACJ,IAAI;EACF,SAAS,MAAM,OAAO,QAAQ,MAAM,EAAA,EAAI,KAAK;CAC/C,QAAQ;EACN,QAAQ,eAAe;EACvB,MAAM,IAAI,MAAM,YAAY;CAC9B;CACA,QAAQ,eAAe;CACvB,MAAM,YAAY,QAAQ,YAAY,KAAK,IAAI,KAAA;CAC/C,IAAI,CAAC,SAAS,CAAC,WAAW,MAAM,IAAI,MAAM,YAAY;CACtD,OAAO;EAAE;EAAO;CAAU;AAC5B;AAEA,eAAe,cACb,MACA,iBACA,QAC2B;CAC3B,MAAM,UAAU,YAAY,IAAI,CAAC,YAAY,QAAQ,gBAAgB,GAAG,GAAI,SAAS,CAAC,MAAM,IAAI,CAAC,CAAE,CAAC;CACpG,MAAM,WAAW,MAAM,MAAM,WAAW;EACtC,QAAQ;EACR,SAAS,EAAE,gBAAgB,oCAAoC;EAC/D;EACA,UAAU;EACV,QAAQ;CACV,CAAC;CACD,IAAI,CAAC,SAAS,IAAI;EAChB,MAAM,SAAS,MAAM,OAAO,CAAC,CAAC,YAAY,KAAA,CAAS;EACnD,MAAM,IAAI,MAAM,sCAAsC,SAAS,OAAO,kBAAkB;CAC1F;CACA,MAAM,OAAO,MAAM,gBAAgB,UAAU,0BAA0B,OAAO;CAC9E,MAAM,SAAS,OAAO,IAAI,IAAI,KAAK,eAAe,KAAA;CAClD,MAAM,UAAU,OAAO,IAAI,IAAK,KAAK,iBAAiB,kBAAmB,KAAA;CACzE,MAAM,YAAY,OAAO,IAAI,IAAI,KAAK,aAAa,KAAA;CACnD,IAAI,OAAO,WAAW,YAAY,OAAO,YAAY,YAAY,OAAO,cAAc,YAAY,aAAa,GAC7G,MAAM,IAAI,MAAM,qDAAqD;CACvE,MAAM,YAAY,YAAY,MAAM;CACpC,IAAI,CAAC,WAAW,MAAM,IAAI,MAAM,oDAAoD;CACpF,OAAO;EAAE;EAAQ;EAAS,SAAS,KAAK,IAAI,IAAI,YAAY;EAAM;CAAU;AAC9E;AAEA,SAAS,UAAU,UAAyB,UAA2B;CACrE,MAAM,OAAO,OAAO,KAAK,YAAY,EAAE;CACvC,MAAM,QAAQ,OAAO,KAAK,QAAQ;CAClC,OAAO,KAAK,WAAW,MAAM,WAAA,GAAUA,YAAAA,gBAAAA,CAAgB,MAAM,KAAK;AACpE;;AAGA,SAAS,iBAAiB,KAAU,OAAuB;CACzD,KAAK,MAAM,QAAQ;EAAC;EAAS;EAAQ;CAAO,GAC1C,IAAI,IAAI,aAAa,OAAO,IAAI,CAAC,CAAC,SAAS,GAAG,MAAM,IAAI,MAAM,iCAAiC;CACjG,IAAI,CAAC,UAAU,IAAI,aAAa,IAAI,OAAO,GAAG,KAAK,GACjD,MAAM,IAAI,MAAM,kDAAkD;CACpE,IAAI,IAAI,aAAa,IAAI,OAAO,GAAG,MAAM,IAAI,MAAM,+BAA+B;CAClF,MAAM,OAAO,IAAI,aAAa,IAAI,MAAM;CACxC,IAAI,CAAC,QAAQ,KAAK,KAAK,MAAM,MAAM,MAAM,IAAI,MAAM,gDAAgD;CACnG,OAAO;AACT;;AAGA,eAAe,cAAc,OAAe,QAAiC;CAC3E,MAAM,UAAA,GAASC,UAAAA,aAAAA,CAAa;CAC5B,IAAI;CACJ,IAAI;CACJ,MAAM,OAAO,IAAI,SAAiB,SAAS,WAAW;EACpD,cAAc;EACd,aAAa;CACf,CAAC;CACD,KAAK,YAAY,KAAA,CAAS;CAC1B,OAAO,GAAG,YAAY,SAAS,aAAa;EAC1C,MAAM,SAAS,QAAgB,SAAuB;GACpD,SAAS,UAAU,QAAQ;IAAE,gBAAgB;IAA6B,iBAAiB;GAAW,CAAC;GACvG,SAAS,IAAI,IAAI;EACnB;EACA,MAAM,MAAM,IAAI,IAAI,QAAQ,OAAO,KAAK,YAAY;EACpD,IAAI,QAAQ,WAAW,SAAS,IAAI,aAAa,eAAe,OAAO,MAAM,KAAK,YAAY;EAC9F,IAAI;GACF,YAAY,iBAAiB,KAAK,KAAK,CAAC;GACxC,MAAM,KAAK,qCAAqC;EAClD,SAAS,OAAO;GAEd,IAAI,UAAU,IAAI,aAAa,IAAI,OAAO,GAAG,KAAK,GAAG,WAAW,KAAc;GAC9E,MAAM,KAAK,iCAAiC;EAC9C;CACF,CAAC;CACD,MAAM,IAAI,SAAe,SAAS,WAAW;EAC3C,OAAO,KAAK,SAAS,MAAM;EAC3B,OAAO,OAAO;GAAE,MAAM;GAAe,MAAM;GAAe,WAAW;EAAK,SAAS;GACjF,OAAO,IAAI,SAAS,MAAM;GAC1B,QAAQ;EACV,CAAC;CACH,CAAC;CACD,MAAM,cAAoB;EACxB,OAAO,MAAM;EACb,OAAO,oBAAoB;CAC7B;CACA,QAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;CACvD,OAAO;EAAE;EAAM;CAAM;AACvB;AAEA,eAAe,MAAM,WAAsD;CACzE,MAAM,EAAE,WAAW;CACnB,MAAM,YAAA,GAAWC,YAAAA,YAAAA,CAAY,EAAE,CAAC,CAAC,SAAS,WAAW;CACrD,MAAM,SAAA,GAAQA,YAAAA,YAAAA,CAAY,EAAE,CAAC,CAAC,SAAS,WAAW;CAClD,MAAM,YAAY,IAAI,IAAI,GAAG,YAAY,iBAAiB;CAC1D,UAAU,SAAS,IAAI,gBAAgB;EACrC,eAAe;EACf,WAAW;EACX,cAAc;EACd,OAAO;EACP,iBAAA,GAAgBC,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,OAAO,WAAW;EACxE,uBAAuB;EACvB,4BAA4B;EAC5B;CACF,CAAC,CAAC,CAAC,SAAS;CAEZ,MAAM,WAAW,MAAM,cAAc,OAAO,MAAM,CAAC,CAAC,YAAY,KAAA,CAAS;CACzE,IAAI;EACF,UAAU,OAAO;GACf,KAAK,UAAU,SAAS;GACxB,cAAc;EAChB,CAAC;EACD,MAAM,UACJ,UAAU,oBAAoB,KAC9B,UAAU,SAAS;GAAE,SAAS;GAA2C,aAAa;EAAa,CAAC,EAAA,CACpG,MAAM,UAAU;GAChB,IAAI,CAAC,IAAI,SAAS,MAAM,KAAK,CAAC,GAAG,MAAM,IAAI,MAAM,2CAA2C;GAC5F,OAAO,iBAAiB,IAAI,IAAI,MAAM,KAAK,CAAC,GAAG,KAAK;EACtD,CAAC;EACD,MAAM,OAAO,OAAO,WAAW,QAAQ,KAAK,CAAC,SAAS,MAAM,MAAM,CAAC,IAAI;EACvE,QAAQ,eAAe;EACvB,OAAO,MAAM,cACX,IAAI,gBAAgB;GAClB,YAAY;GACZ,WAAW;GACX;GACA,eAAe;GACf,cAAc;EAChB,CAAC,GACD,KAAA,GACA,MACF;CACF,UAAU;EACR,UAAU,MAAM;CAClB;AACF;AAEA,MAAM,sBAAsC;CAC1C,MAAM;CACN,OAAO;EACL,MAAM;EACN,gBAAgB;EAChB;EACA,eAAe,aAAa,WAC1B,cACE,IAAI,gBAAgB;GAAE,YAAY;GAAiB,WAAW;GAAW,eAAe,YAAY;EAAQ,CAAC,GAC7G,YAAY,SACZ,MACF;EACF,YAAY,gBAAgB,YAAY;CAC1C;AACF;;AAGA,SAAgB,4BAA4B,SAAuD;CACjG,QAAQ,iBAAiB,0BAA0B,mBAAmB;AACxE;;;;;AAMA,SAAgB,wBAAwB,SAGrC;CACD,IAAI;CACJ,MAAM,gBAAuC;EAC3C,aAAa,YAAY;GACvB,MAAM,iBAAiBC,0BAAAA,iBAAiB,QAAQ,aAAa,QAAQ,aAAa;GAClF,MAAM,YAAYC,0BAAAA,qBAAqB,gBAAgB,QAAQ,aAAa;GAC5E,MAAM,UAAU,MAAMC,gCAAAA,aAAa,OAAO;IACxC,UAAUC,UAAAA,QAAK,KAAK,WAAW,WAAW;IAC1C,YAAYA,UAAAA,QAAK,KAAK,WAAW,aAAa;IAC9C,iBAAiB;GACnB,CAAC;GACD,4BAA4B,OAAO;GACnC,OAAO;EACT,EAAA,CAAG,CAAC,CAAC,OAAO,UAAmB;GAC7B,UAAU,KAAA;GACV,MAAM;EACR,CAAC;EACD,OAAO;CACT;CAEA,MAAM,QAAQ,OAAO,WAAgD;EACnE,MAAM,UAAU,MAAM,QAAQ;EAC9B,MAAM,QAAQ,QAAQ;GACpB,cAAc;GACd,WAAW,CAAC,wBAAwB;GACpC,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;EAC7B,CAAC;EACD,OAAO;CACT;CACA,OAAO;;EAEL,MAAM,SAAS,QAAwC;GACrD,QAAQ,MAAM,MAAM,MAAM,EAAA,CAAG,oBAAoB,wBAAwB;EAC3E;EACA,MAAM,YAAY,cAAsB,QAAqE;GAC3G,MAAM,UAAU,MAAM,MAAM,MAAM;GAClC,OAAO,mBACL;IACE,iBAAiB,QAAQ,oBAAoB,wBAAwB;IACrE,UAAU,eAAe,QAAQ,QAAQ,0BAA0B,aAAa,EAAE,QAAQ,WAAW,IAAI,CAAC,CAAC;GAC7G,GACA,cACA,MACF;EACF;CACF;AACF"}
+{"version":3,"file":"index.cjs","names":[],"sources":["../../../../src/services/chatgptAuth/index.ts"],"sourcesContent":["/*\n * Portions of this file are adapted from OpenAI Codex at commit 5ecb3afd1b, by way of po-voice.\n * Copyright OpenAI. Licensed under the Apache License, Version 2.0.\n */\n\n/** The one ChatGPT sign-in every Po feature shares; separate from Pi's `openai-codex` model login. */\nexport const CHATGPT_AUTH_PROVIDER_ID = 'po-chatgpt';\nexport const CHATGPT_AUTH_PROVIDER_NAME = 'ChatGPT for Po features';\nexport const CHATGPT_SIGN_IN_HINT = `Sign in to ${CHATGPT_AUTH_PROVIDER_NAME} under Settings > Providers, or with /login.`;\n\n/** Where a feature reads the shared sign-in: a session's or the hub's Pi model runtime. */\nexport interface ChatgptAuthSource {\n  available(): boolean;\n  getAuth(signal?: AbortSignal): Promise<{ auth: { apiKey?: string } } | undefined>;\n}\n\nfunction record(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\n/** Reads a JSON body without buffering more than `limit` bytes. Errors are generic; callers map them. */\nexport async function readBoundedJson(response: Response, limit: number, signal?: AbortSignal): Promise<unknown> {\n  if (!response.body) throw new Error('Response has no body.');\n  const reader = response.body.getReader();\n  const chunks: Uint8Array[] = [];\n  let length = 0;\n  try {\n    while (true) {\n      signal?.throwIfAborted();\n      const { value, done } = await reader.read();\n      if (done) break;\n      length += value.length;\n      if (length > limit) throw new Error('Response body is too large.');\n      chunks.push(value);\n    }\n    signal?.throwIfAborted();\n    return JSON.parse(Buffer.concat(chunks).toString('utf8')) as unknown;\n  } finally {\n    await reader.cancel().catch(() => undefined); // Response cleanup never replaces the operation error.\n    reader.releaseLock();\n  }\n}\n\n/** The ChatGPT account claim of an access token, or undefined when it is missing or malformed. */\nexport function accountIdOf(token: string): string | undefined {\n  try {\n    const payload: unknown = JSON.parse(Buffer.from(token.split('.')[1] ?? '', 'base64url').toString('utf8'));\n    const auth = record(payload) ? payload['https://api.openai.com/auth'] : undefined;\n    const id = record(auth) ? auth.chatgpt_account_id : undefined;\n    return typeof id === 'string' && /^[A-Za-z0-9_-]{1,256}$/.test(id) ? id : undefined;\n  } catch {\n    return undefined; // Documented fallback: a malformed token has no account, which callers treat as signed out.\n  }\n}\n\n/** Resolves the subscription token and account claim; every failure becomes `loginMessage` unless aborted. */\nexport async function chatgptCredentials(\n  source: ChatgptAuthSource,\n  loginMessage: string,\n  signal?: AbortSignal,\n): Promise<{ token: string; accountId: string }> {\n  if (!source.available()) throw new Error(loginMessage);\n  let token: string | undefined;\n  try {\n    token = (await source.getAuth(signal))?.auth.apiKey;\n  } catch {\n    signal?.throwIfAborted();\n    throw new Error(loginMessage);\n  }\n  signal?.throwIfAborted();\n  const accountId = token ? accountIdOf(token) : undefined;\n  if (!token || !accountId) throw new Error(loginMessage);\n  return { token, accountId };\n}\n"],"mappings":";;AAMA,MAAa,2BAA2B;AACxC,MAAa,6BAA6B;AAC1C,MAAa,uBAAuB,cAAc,2BAA2B;AAQ7E,SAAS,OAAO,OAAkD;CAChE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;;AAGA,eAAsB,gBAAgB,UAAoB,OAAe,QAAwC;CAC/G,IAAI,CAAC,SAAS,MAAM,MAAM,IAAI,MAAM,uBAAuB;CAC3D,MAAM,SAAS,SAAS,KAAK,UAAU;CACvC,MAAM,SAAuB,CAAC;CAC9B,IAAI,SAAS;CACb,IAAI;EACF,OAAO,MAAM;GACX,QAAQ,eAAe;GACvB,MAAM,EAAE,OAAO,SAAS,MAAM,OAAO,KAAK;GAC1C,IAAI,MAAM;GACV,UAAU,MAAM;GAChB,IAAI,SAAS,OAAO,MAAM,IAAI,MAAM,6BAA6B;GACjE,OAAO,KAAK,KAAK;EACnB;EACA,QAAQ,eAAe;EACvB,OAAO,KAAK,MAAM,OAAO,OAAO,MAAM,CAAC,CAAC,SAAS,MAAM,CAAC;CAC1D,UAAU;EACR,MAAM,OAAO,OAAO,CAAC,CAAC,YAAY,KAAA,CAAS;EAC3C,OAAO,YAAY;CACrB;AACF;;AAGA,SAAgB,YAAY,OAAmC;CAC7D,IAAI;EACF,MAAM,UAAmB,KAAK,MAAM,OAAO,KAAK,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC;EACxG,MAAM,OAAO,OAAO,OAAO,IAAI,QAAQ,iCAAiC,KAAA;EACxE,MAAM,KAAK,OAAO,IAAI,IAAI,KAAK,qBAAqB,KAAA;EACpD,OAAO,OAAO,OAAO,YAAY,yBAAyB,KAAK,EAAE,IAAI,KAAK,KAAA;CAC5E,QAAQ;EACN;CACF;AACF;;AAGA,eAAsB,mBACpB,QACA,cACA,QAC+C;CAC/C,IAAI,CAAC,OAAO,UAAU,GAAG,MAAM,IAAI,MAAM,YAAY;CACrD,IAAI;CACJ,IAAI;EACF,SAAS,MAAM,OAAO,QAAQ,MAAM,EAAA,EAAI,KAAK;CAC/C,QAAQ;EACN,QAAQ,eAAe;EACvB,MAAM,IAAI,MAAM,YAAY;CAC9B;CACA,QAAQ,eAAe;CACvB,MAAM,YAAY,QAAQ,YAAY,KAAK,IAAI,KAAA;CAC/C,IAAI,CAAC,SAAS,CAAC,WAAW,MAAM,IAAI,MAAM,YAAY;CACtD,OAAO;EAAE;EAAO;CAAU;AAC5B"}