@ai21/gateway 0.5.3 → 0.5.4

package/dist/login/loopback.d.ts

@@ -1,9 +1,9 @@
-import { type CliCallback } from "./contract.js";
-/** Two minutes: long enough to sign in, short enough not to look wedged. */
-export declare const LOGIN_TIMEOUT_MS = 120000;
+import { type CallbackOutcome } from "./contract.js";
+/** Matches the `exp` the consent screen is told, so both sides give up together. */
+export declare const LOGIN_TIMEOUT_MS = 180000;
 export type LoopbackOutcome = {
     readonly kind: "callback";
-    readonly payload: CliCallback;
+    readonly outcome: CallbackOutcome;
 } | {
     readonly kind: "timeout";
 } | {
@@ -11,14 +11,12 @@ export type LoopbackOutcome = {
     readonly reason: string;
 };
 export interface Listener {
-    /** Open this in the browser; it redirects to the sign-in page. */
-    readonly startUrl: string;
-    /** Where the sign-in page is redirected to, and what to print if no browser opens. */
+    /** The consent screen to open, and what to print if no browser opens. */
     readonly signInUrl: string;
-    /** The URL to hand the webapp. Always loopback, always an ephemeral port. */
+    /** The URL to hand the webapp. */
     readonly callbackUrl: string;
     readonly state: string;
-    /** The interface the socket is actually bound to — asserted in tests. */
+    /** The interface the socket is actually bound to. */
     readonly host: string;
     readonly port: number;
     /** Settles once a valid callback arrives, on timeout, or on a listener error. */
@@ -26,7 +24,7 @@ export interface Listener {
     /** Idempotent; safe to call after the promise has settled. */
     readonly close: () => void;
 }
-/** 256 bits from the CSPRNG. Guessing it is not a threat model we need to model. */
+/** 256 bits from the CSPRNG. */
 export declare function newState(): string;
 export interface LoopbackOptions {
     /** Origin allowed to POST here — the webapp's, never `*`. */

package/dist/login/loopback.js

@@ -1,20 +1,16 @@
 /**
- * The loopback listener that receives the login callback.
- *
- * This is the security surface of the whole handshake, so the invariants are
- * asserted by tests rather than trusted: bound to `127.0.0.1` only, one valid
- * callback accepted and no more, `state` compared before the payload is handed
- * over, a hard timeout so the CLI cannot sit open indefinitely, and a body size
- * cap so a stray client cannot make us buffer without bound.
+ * The loopback listener that receives the login callback. Security surface of the
+ * handshake, so its invariants are asserted in test/login.test.ts: 127.0.0.1 only,
+ * single-use, `state` compared before the body is trusted, hard timeout, body cap.
  */
 import { randomBytes, timingSafeEqual } from "node:crypto";
 import { createServer } from "node:http";
-import { CALLBACK_PATH, START_PATH, parseCallback } from "./contract.js";
-/** Two minutes: long enough to sign in, short enough not to look wedged. */
-export const LOGIN_TIMEOUT_MS = 120_000;
+import { CALLBACK_PATH, parseCallback } from "./contract.js";
+/** Matches the `exp` the consent screen is told, so both sides give up together. */
+export const LOGIN_TIMEOUT_MS = 180_000;
 const MAX_BODY_BYTES = 8_192;
 const LOOPBACK_HOST = "127.0.0.1";
-/** 256 bits from the CSPRNG. Guessing it is not a threat model we need to model. */
+/** 256 bits from the CSPRNG. */
 export function newState() {
     return randomBytes(32).toString("base64url");
 }
@@ -34,8 +30,7 @@ function readBody(req) {
             body += chunk.toString("utf8");
             if (body.length > MAX_BODY_BYTES) {
                 tooBig = true;
-                // Destroy rather than keep reading: the only client we expect sends a few
-                // hundred bytes, so anything larger is not the flow we are in.
+                // Destroy rather than keep reading; the real client sends a few hundred bytes.
                 req.destroy();
             }
         });
@@ -43,6 +38,39 @@ function readBody(req) {
         req.on("error", () => resolve(undefined));
     });
 }
+/* Served to the tab that delivered the outcome — which on the form-POST path is where
+ * the user ends up, so a decline must not read as a success. Self-contained by necessity. */
+function landingPage(outcome) {
+    const message = outcome.kind === "credential"
+        ? "Signed in. You can close this tab and return to your terminal."
+        : "Sign-in was not completed. You can close this tab and return to your terminal.";
+    return `<!doctype html>
+<html lang="en"><head><meta charset="utf-8"><title>ai21-gateway</title></head>
+<body style="font-family: system-ui, sans-serif; margin: 4rem; color: #111;">
+<p>${message}</p>
+</body></html>`;
+}
+/* JSON, or the form encoding the consent screen falls back to (deliverCliCredential.ts).
+ * A form POST is a "simple request", so no preflight ran — hence the Host and state
+ * checks before the body is read. */
+function parseBody(contentType, raw) {
+    const type = ((contentType ?? "").split(";")[0] ?? "").trim().toLowerCase();
+    if (type === "application/json") {
+        try {
+            const parsed = JSON.parse(raw);
+            return typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)
+                ? parsed
+                : undefined;
+        }
+        catch {
+            return undefined;
+        }
+    }
+    if (type === "application/x-www-form-urlencoded") {
+        return Object.fromEntries(new URLSearchParams(raw));
+    }
+    return undefined;
+}
 /**
  * Starts the listener. Resolves once it is bound, so the caller can put the real
  * port into the URL it opens.
@@ -55,10 +83,7 @@ export function startLoopback(options) {
         settle = resolve;
     });
     let done = false;
-    /**
-     * The single-use latch. A second callback — a replayed POST, a double-submitting
-     * page — must not overwrite credentials we have already accepted.
-     */
+    /** Single-use latch: a replay or double-submit must not overwrite what we accepted. */
     const finish = (outcome) => {
         if (done)
             return;
@@ -69,38 +94,26 @@ export function startLoopback(options) {
         void handle(req, res);
     });
     const cors = (res) => {
-        // The page POSTing here is on the webapp's origin, so without CORS the browser
-        // refuses the request outright. Named explicitly rather than `*`: any origin
-        // being able to talk to this port is the thing we are trying to avoid.
+        // Named explicitly, never `*` — any origin reaching this port is what we are avoiding.
         res.setHeader("Access-Control-Allow-Origin", options.allowedOrigin);
         res.setHeader("Access-Control-Allow-Headers", "content-type");
         res.setHeader("Access-Control-Allow-Methods", "POST, OPTIONS");
-        // Chrome's Private Network Access: a public HTTPS page reaching a loopback address
-        // must be granted it explicitly, or the preflight fails and the POST never happens.
+        // Chrome's Private Network Access grant; without it the preflight fails.
         res.setHeader("Access-Control-Allow-Private-Network", "true");
         res.setHeader("Vary", "Origin");
     };
-    // Single-use: an attacker who guesses the port and beats the browser to /start
-    // gets the state, but the browser then fails visibly instead of the run being
-    // hijacked in silence.
-    let redirected = false;
     let signInUrl = "";
+    let expectedHost = "";
+    /* DNS rebinding arrives same-origin, so CORS never runs and Origin cannot see it.
+     * Host is what gives it away: browsers send the name dialled, not the address. */
+    const hostIsLoopback = (req) => (req.headers.host ?? "") === expectedHost;
     async function handle(req, res) {
-        cors(res);
         const path = (req.url ?? "").split("?")[0];
-        if (path === START_PATH) {
-            if (req.method !== "GET") {
-                res.writeHead(405).end();
-            }
-            else if (redirected) {
-                res.writeHead(410, { "content-type": "text/plain" }).end("This sign-in link has already been used.");
-            }
-            else {
-                redirected = true;
-                res.writeHead(302, { location: signInUrl }).end();
-            }
+        if (!hostIsLoopback(req)) {
+            res.writeHead(403).end();
             return;
         }
+        cors(res);
         if (path !== CALLBACK_PATH) {
             res.writeHead(404).end();
             return;
@@ -110,41 +123,48 @@ export function startLoopback(options) {
             return;
         }
         if (req.method !== "POST") {
-            // Notably this rejects GET, which is what a credential-in-the-URL flow would
-            // use. The secret must arrive in a body.
+            // Rejects GET, so a credential cannot arrive in a URL.
             res.writeHead(405).end();
             return;
         }
+        /* Wrong origin refused; absent or opaque tolerated. The form-POST fallback is a
+         * navigation from an https page to http loopback, which browsers report as the
+         * literal `null` rather than omitting the header — refusing that would 403 the one
+         * path that works on a deployed dashboard. `state` carries the weight in both cases. */
+        const origin = req.headers.origin;
+        const stated = origin !== undefined && origin !== "null";
+        if (stated && origin.replace(/\/$/, "") !== options.allowedOrigin.replace(/\/$/, "")) {
+            res.writeHead(403).end();
+            return;
+        }
         const raw = await readBody(req);
         if (raw === undefined) {
             res.writeHead(413).end();
             return;
         }
-        let parsed;
-        try {
-            parsed = JSON.parse(raw);
-        }
-        catch {
+        const parsed = parseBody(req.headers["content-type"], raw);
+        if (parsed === undefined) {
             res.writeHead(400).end();
             return;
         }
-        const payload = parseCallback(parsed);
-        if (payload === undefined) {
+        /* Rejected without abandoning the run: a stale tab must not cancel a live login. */
+        const offered = parsed["state"];
+        if (typeof offered !== "string" || !statesMatch(state, offered)) {
             res.writeHead(400).end();
             return;
         }
-        if (!statesMatch(state, payload.state)) {
-            // Rejected, and the run is *not* abandoned: a spoofed or stale POST must not
-            // be able to cancel a legitimate login that is still in progress.
-            res.writeHead(403).end();
+        const outcome = parseCallback(parsed);
+        if (outcome === undefined) {
+            res.writeHead(400).end();
             return;
         }
         if (done) {
             res.writeHead(409).end();
             return;
         }
-        res.writeHead(200, { "content-type": "application/json" }).end('{"ok":true}');
-        finish({ kind: "callback", payload });
+        // The form POST is a navigation, so this response is the page the user lands on.
+        res.writeHead(200, { "content-type": "text/html; charset=utf-8" }).end(landingPage(outcome));
+        finish({ kind: "callback", outcome });
     }
     const timer = setTimeout(() => finish({ kind: "timeout" }), timeoutMs);
     // Never hold the process open on our own account.
@@ -153,31 +173,26 @@ export function startLoopback(options) {
         clearTimeout(timer);
         server.close();
     };
-    // Closing on settle rather than making the caller remember to: a listener left
-    // open after the flow ends is an open port nobody is watching.
+    // Closed on settle, so the flow cannot leave an unwatched port open.
     void result.then(close);
     return new Promise((resolve, reject) => {
         const onError = (err) => {
-            // Nothing bound, so nothing to close — and the timer would otherwise
-            // outlive a run that never started.
+            // Nothing bound, and the timer would outlive a run that never started.
             clearTimeout(timer);
             reject(err);
         };
         server.once("error", onError);
-        // Port 0 asks the OS for an ephemeral one. The CLI tells the browser where it
-        // landed, so nothing has to guess — and there is no fixed port to collide over.
+        // Ephemeral: the CLI tells the browser where it landed, so no fixed port to collide over.
         server.listen({ port: 0, host: LOOPBACK_HOST }, () => {
             server.removeListener("error", onError);
-            /* Swapped only now that the socket is bound: until then an error is a bind
-             * failure, which rejects the promise rather than settling a run that never
-             * started. */
+            /* Only now that it is bound: until here an error is a bind failure, which rejects. */
             server.on("error", (err) => finish({ kind: "failed", reason: err.message }));
             const address = server.address();
             const origin = `http://${LOOPBACK_HOST}:${address.port}`;
             const callbackUrl = `${origin}${CALLBACK_PATH}`;
+            expectedHost = `${LOOPBACK_HOST}:${address.port}`;
             signInUrl = options.signInUrl(callbackUrl, state);
             resolve({
-                startUrl: `${origin}${START_PATH}`,
                 signInUrl,
                 callbackUrl,
                 state,

package/dist/login/loopback.js.map

@@ -1 +1 @@
-{"version":3,"file":"loopback.js","sourceRoot":"","sources":["../../src/login/loopback.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAA6C,YAAY,EAAE,MAAM,WAAW,CAAC;AAGpF,OAAO,EAAE,aAAa,EAAoB,UAAU,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE3F,4EAA4E;AAC5E,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AAExC,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,aAAa,GAAG,WAAW,CAAC;AAwBlC,oFAAoF;AACpF,MAAM,UAAU,QAAQ;IACtB,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,oEAAoE;AACpE,SAAS,WAAW,CAAC,QAAgB,EAAE,QAAgB;IACrD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAExC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,QAAQ,CAAC,GAAoB;IACpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,MAAM,GAAG,KAAK,CAAC;QAEnB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,MAAM;gBAAE,OAAO;YAEnB,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;gBACjC,MAAM,GAAG,IAAI,CAAC;gBACd,0EAA0E;gBAC1E,+DAA+D;gBAC/D,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACxD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC;AAUD;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,OAAwB;IACpD,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;IAExD,IAAI,MAA0C,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAE,EAAE;QACtD,MAAM,GAAG,OAAO,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB;;;OAGG;IACH,MAAM,MAAM,GAAG,CAAC,OAAwB,EAAQ,EAAE;QAChD,IAAI,IAAI;YAAE,OAAO;QAEjB,IAAI,GAAG,IAAI,CAAC;QACZ,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;QACxE,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,CAAC,GAAmB,EAAQ,EAAE;QACzC,+EAA+E;QAC/E,6EAA6E;QAC7E,uEAAuE;QACvE,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;QACpE,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;QAC9D,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,eAAe,CAAC,CAAC;QAC/D,mFAAmF;QACnF,oFAAoF;QACpF,GAAG,CAAC,SAAS,CAAC,sCAAsC,EAAE,MAAM,CAAC,CAAC;QAC9D,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC,CAAC;IAEF,+EAA+E;IAC/E,8EAA8E;IAC9E,uBAAuB;IACvB,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,SAAS,GAAG,EAAE,CAAC;IAEnB,KAAK,UAAU,MAAM,CAAC,GAAoB,EAAE,GAAmB;QAC7D,IAAI,CAAC,GAAG,CAAC,CAAC;QAEV,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAE3C,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACzB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAC3B,CAAC;iBAAM,IAAI,UAAU,EAAE,CAAC;gBACtB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;YACvG,CAAC;iBAAM,CAAC;gBACN,UAAU,GAAG,IAAI,CAAC;gBAClB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;YACpD,CAAC;YAED,OAAO;QACT,CAAC;QAED,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;YAC3B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAEzB,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAEzB,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1B,6EAA6E;YAC7E,yCAAyC;YACzC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAEzB,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAEzB,OAAO;QACT,CAAC;QAED,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAEzB,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAEzB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,6EAA6E;YAC7E,kEAAkE;YAClE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAEzB,OAAO;QACT,CAAC;QAED,IAAI,IAAI,EAAE,CAAC;YACT,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAEzB,OAAO;QACT,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC9E,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;IACvE,kDAAkD;IAClD,KAAK,CAAC,KAAK,EAAE,CAAC;IAEd,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC,CAAC;IAEF,+EAA+E;IAC/E,+DAA+D;IAC/D,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAExB,OAAO,IAAI,OAAO,CAAW,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC/C,MAAM,OAAO,GAAG,CAAC,GAA0B,EAAQ,EAAE;YACnD,qEAAqE;YACrE,oCAAoC;YACpC,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9B,8EAA8E;QAC9E,gFAAgF;QAChF,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE;YACnD,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACxC;;0BAEc;YACd,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAE7E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAC;YAChD,MAAM,MAAM,GAAG,UAAU,aAAa,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACzD,MAAM,WAAW,GAAG,GAAG,MAAM,GAAG,aAAa,EAAE,CAAC;YAChD,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YAElD,OAAO,CAAC;gBACN,QAAQ,EAAE,GAAG,MAAM,GAAG,UAAU,EAAE;gBAClC,SAAS;gBACT,WAAW;gBACX,KAAK;gBACL,IAAI,EAAE,OAAO,CAAC,OAAO;gBACrB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM;gBACN,KAAK;aACN,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"loopback.js","sourceRoot":"","sources":["../../src/login/loopback.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAA6C,YAAY,EAAE,MAAM,WAAW,CAAC;AAGpF,OAAO,EAAE,aAAa,EAAwB,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnF,oFAAoF;AACpF,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AAExC,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,aAAa,GAAG,WAAW,CAAC;AAsBlC,gCAAgC;AAChC,MAAM,UAAU,QAAQ;IACtB,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,oEAAoE;AACpE,SAAS,WAAW,CAAC,QAAgB,EAAE,QAAgB;IACrD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAExC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,QAAQ,CAAC,GAAoB;IACpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,MAAM,GAAG,KAAK,CAAC;QAEnB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,MAAM;gBAAE,OAAO;YAEnB,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;gBACjC,MAAM,GAAG,IAAI,CAAC;gBACd,+EAA+E;gBAC/E,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACxD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;6FAC6F;AAC7F,SAAS,WAAW,CAAC,OAAwB;IAC3C,MAAM,OAAO,GACX,OAAO,CAAC,IAAI,KAAK,YAAY;QAC3B,CAAC,CAAC,gEAAgE;QAClE,CAAC,CAAC,gFAAgF,CAAC;IAEvF,OAAO;;;KAGJ,OAAO;eACG,CAAC;AAChB,CAAC;AAED;;qCAEqC;AACrC,SAAS,SAAS,CAAC,WAA+B,EAAE,GAAW;IAC7D,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE5E,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAExC,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC5E,CAAC,CAAE,MAAkC;gBACrC,CAAC,CAAC,SAAS,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,mCAAmC,EAAE,CAAC;QACjD,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAUD;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,OAAwB;IACpD,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;IAExD,IAAI,MAA0C,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAE,EAAE;QACtD,MAAM,GAAG,OAAO,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,uFAAuF;IACvF,MAAM,MAAM,GAAG,CAAC,OAAwB,EAAQ,EAAE;QAChD,IAAI,IAAI;YAAE,OAAO;QAEjB,IAAI,GAAG,IAAI,CAAC;QACZ,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;QACxE,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,CAAC,GAAmB,EAAQ,EAAE;QACzC,uFAAuF;QACvF,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;QACpE,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;QAC9D,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,eAAe,CAAC,CAAC;QAC/D,yEAAyE;QACzE,GAAG,CAAC,SAAS,CAAC,sCAAsC,EAAE,MAAM,CAAC,CAAC;QAC9D,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC,CAAC;IAEF,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,YAAY,GAAG,EAAE,CAAC;IAEtB;sFACkF;IAClF,MAAM,cAAc,GAAG,CAAC,GAAoB,EAAW,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,KAAK,YAAY,CAAC;IAEpG,KAAK,UAAU,MAAM,CAAC,GAAoB,EAAE,GAAmB;QAC7D,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAE3C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAEzB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,CAAC;QAEV,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;YAC3B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAEzB,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAEzB,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1B,uDAAuD;YACvD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAEzB,OAAO;QACT,CAAC;QAED;;;gGAGwF;QACxF,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM,CAAC;QACzD,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;YACrF,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAEzB,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAEzB,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAEzB,OAAO;QACT,CAAC;QAED,oFAAoF;QACpF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAEzB,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAEzB,OAAO;QACT,CAAC;QAED,IAAI,IAAI,EAAE,CAAC;YACT,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAEzB,OAAO;QACT,CAAC;QAED,iFAAiF;QACjF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7F,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;IACvE,kDAAkD;IAClD,KAAK,CAAC,KAAK,EAAE,CAAC;IAEd,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC,CAAC;IAEF,qEAAqE;IACrE,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAExB,OAAO,IAAI,OAAO,CAAW,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC/C,MAAM,OAAO,GAAG,CAAC,GAA0B,EAAQ,EAAE;YACnD,uEAAuE;YACvE,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9B,0FAA0F;QAC1F,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE;YACnD,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACxC,sFAAsF;YACtF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAE7E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAC;YAChD,MAAM,MAAM,GAAG,UAAU,aAAa,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACzD,MAAM,WAAW,GAAG,GAAG,MAAM,GAAG,aAAa,EAAE,CAAC;YAChD,YAAY,GAAG,GAAG,aAAa,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YAClD,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YAElD,OAAO,CAAC;gBACN,SAAS;gBACT,WAAW;gBACX,KAAK;gBACL,IAAI,EAAE,OAAO,CAAC,OAAO;gBACrB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM;gBACN,KAAK;aACN,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/login/session.d.ts

@@ -1,36 +1,35 @@
-/**
- * `login` orchestration: open the browser, wait on the loopback listener, hand
- * whatever comes back to the ordinary config writer.
- *
- * The credentials live in a local variable for the length of one run and are
- * written only into `settings.json`. Nothing else is persisted — no token cache, no
- * `~/.ai21/credentials` — so there is nothing for an attacker to find later.
- */
 import { type ResolvedUrls } from "../args.js";
+import type { FetchLike } from "./tokens.js";
+import { type CliCredential } from "./contract.js";
 import { type Listener, type LoopbackOptions } from "./loopback.js";
 export interface LoginDeps {
     readonly startListener: (options: LoopbackOptions) => Promise<Listener>;
     readonly openBrowser: (url: string) => boolean;
+    /** For the token exchange and workspace listing; injected so tests make no calls. */
+    readonly fetchImpl: FetchLike;
 }
 export type LoginOutcome = {
-    readonly kind: "credentials";
-    readonly agentId: string;
-    readonly ai21Key: string;
-    /** Present only when the callback supplied a well-formed one. */
-    readonly workspaceId?: string | undefined;
+    readonly kind: "credential";
+    readonly credential: CliCredential;
 } | {
     readonly kind: "timeout";
 } | {
-    readonly kind: "rejected";
+    readonly kind: "declined";
     readonly reason: string;
 } | {
     readonly kind: "failed";
     readonly reason: string;
 };
-/** The `/welcome` URL, carrying where to call back and the nonce to echo. */
-export declare function loginUrl(urls: ResolvedUrls, callbackUrl: string, state: string): string;
 export interface LoginProgress {
-    /** Told what to say while waiting; the caller decides which stream it lands on. */
+    /** The caller decides which stream this lands on. */
     readonly notify: (message: string) => void;
 }
+/**
+ * The consent screen's URL.
+ *
+ * `exp` is here because the listener does not outlive the deadline but the tab does: once
+ * the port is freed, whatever binds it next would receive the credential if the user came
+ * back and approved. The code cannot catch that — it is rendered from this same URL.
+ */
+export declare function loginUrl(urls: ResolvedUrls, callbackUrl: string, state: string, code: string, expiresAtSeconds: number): string;
 export declare function runLogin(urls: ResolvedUrls, deps: LoginDeps, io: LoginProgress): Promise<LoginOutcome>;

package/dist/login/session.js

@@ -1,75 +1,61 @@
 /**
- * `login` orchestration: open the browser, wait on the loopback listener, hand
- * whatever comes back to the ordinary config writer.
+ * `login` orchestration: bind the listener, send the user to the consent screen, and hand
+ * back the credential. Bound before the browser opens, so the page is never told to post
+ * to a port nothing is listening on.
+ */
+import { randomInt } from "node:crypto";
+import { CLIENT_ID, CLIENT_PARAM, CLI_LOGIN_PATH, CODE_PARAM, EXPIRES_PARAM, REDIRECT_PARAM, STATE_PARAM, verificationCode, } from "./contract.js";
+import { LOGIN_TIMEOUT_MS } from "./loopback.js";
+/**
+ * The consent screen's URL.
  *
- * The credentials live in a local variable for the length of one run and are
- * written only into `settings.json`. Nothing else is persisted — no token cache, no
- * `~/.ai21/credentials` — so there is nothing for an attacker to find later.
+ * `exp` is here because the listener does not outlive the deadline but the tab does: once
+ * the port is freed, whatever binds it next would receive the credential if the user came
+ * back and approved. The code cannot catch that — it is rendered from this same URL.
  */
-import { containsControlCharacters } from "../args.js";
-import { CALLBACK_PARAM, STATE_PARAM } from "./contract.js";
-/** The `/welcome` URL, carrying where to call back and the nonce to echo. */
-export function loginUrl(urls, callbackUrl, state) {
-    const url = new URL("/welcome", urls.app);
-    url.searchParams.set(CALLBACK_PARAM, callbackUrl);
+export function loginUrl(urls, callbackUrl, state, code, expiresAtSeconds) {
+    const url = new URL(CLI_LOGIN_PATH, urls.app);
+    url.searchParams.set(REDIRECT_PARAM, callbackUrl);
     url.searchParams.set(STATE_PARAM, state);
+    url.searchParams.set(CODE_PARAM, code);
+    url.searchParams.set(EXPIRES_PARAM, String(expiresAtSeconds));
+    // So the screen names this CLI and not another.
+    url.searchParams.set(CLIENT_PARAM, CLIENT_ID);
     return url.toString();
 }
-/**
- * Callback values are remote input, so they are validated by exactly the rule the
- * flags use. They land in the same `\n`-joined header string, where a newline
- * forges a header that Claude Code would then send on every request — and unlike a
- * flag, nobody typed this.
- */
-function rejectBadValues(payload) {
-    for (const [name, value] of [
-        ["agentId", payload.agentId],
-        ["ai21Key", payload.ai21Key],
-    ]) {
-        if (containsControlCharacters(value)) {
-            return `the ${name} in the login response contains control characters`;
-        }
-    }
-    return undefined;
-}
 export async function runLogin(urls, deps, io) {
+    const code = verificationCode((max) => randomInt(max));
+    // Stamped early, so the page gives up a moment before the listener, not after.
+    const expiresAtSeconds = Math.floor((Date.now() + LOGIN_TIMEOUT_MS) / 1000);
     let listener;
     try {
         listener = await deps.startListener({
             allowedOrigin: urls.app,
-            signInUrl: (callbackUrl, state) => loginUrl(urls, callbackUrl, state),
+            signInUrl: (callbackUrl, state) => loginUrl(urls, callbackUrl, state, code, expiresAtSeconds),
         });
     }
     catch (err) {
         return { kind: "failed", reason: err instanceof Error ? err.message : "the local listener could not be started" };
     }
-    // The browser is pointed at the loopback redirect, so the nonce never reaches its
-    // command line. The printed URL is the real one, since a manual path needs it.
-    //
-    // Claims nothing about whether a browser appeared: `spawn` reports a missing binary
-    // asynchronously, so a failed launch still looks like a success from here.
-    deps.openBrowser(listener.startUrl);
-    io.notify(`Sign in to continue — your browser should open. If it does not, visit:\n\n  ${listener.signInUrl}\n\nWaiting…`);
+    /* Printed as well as opened: `openBrowser` cannot tell us a browser appeared, and over
+     * SSH the URL is the only way in. */
+    deps.openBrowser(listener.signInUrl);
+    io.notify(`Sign in to continue — your browser should open. If it does not, visit:\n\n  ${listener.signInUrl}\n\n` +
+        `  verification code: ${code}\n\n` +
+        `The page will show this code. If it shows anything else, choose Deny — something\n` +
+        `other than this terminal is asking to sign in.\n\nWaiting…`);
     return settle(await listener.result);
 }
-/** Shared tail: turn a listener outcome into the credentials, or say why not. */
 function settle(outcome) {
     switch (outcome.kind) {
         case "timeout":
             return { kind: "timeout" };
         case "failed":
             return { kind: "failed", reason: outcome.reason };
-        case "callback": {
-            const problem = rejectBadValues(outcome.payload);
-            if (problem !== undefined)
-                return { kind: "rejected", reason: problem };
-            return {
-                kind: "credentials",
-                agentId: outcome.payload.agentId,
-                ai21Key: outcome.payload.ai21Key,
-                ...(outcome.payload.workspaceId === undefined ? {} : { workspaceId: outcome.payload.workspaceId }),
-            };
-        }
+        case "callback":
+            return outcome.outcome.kind === "declined"
+                ? { kind: "declined", reason: outcome.outcome.reason }
+                : { kind: "credential", credential: outcome.outcome.credential };
     }
 }
 //# sourceMappingURL=session.js.map

package/dist/login/session.js.map

@@ -1 +1 @@
-{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/login/session.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,yBAAyB,EAAqB,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAoB,WAAW,EAAE,MAAM,eAAe,CAAC;AAoB9E,6EAA6E;AAC7E,MAAM,UAAU,QAAQ,CAAC,IAAkB,EAAE,WAAmB,EAAE,KAAa;IAC7E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAEzC,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,OAAoB;IAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI;QAC1B,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC;QAC5B,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC;KACpB,EAAE,CAAC;QACX,IAAI,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,OAAO,OAAO,IAAI,oDAAoD,CAAC;QACzE,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAkB,EAAE,IAAe,EAAE,EAAiB;IACnF,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC;YAClC,aAAa,EAAE,IAAI,CAAC,GAAG;YACvB,SAAS,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC;SACtE,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,yCAAyC,EAAE,CAAC;IACpH,CAAC;IAED,kFAAkF;IAClF,+EAA+E;IAC/E,EAAE;IACF,oFAAoF;IACpF,2EAA2E;IAC3E,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpC,EAAE,CAAC,MAAM,CACP,+EAA+E,QAAQ,CAAC,SAAS,cAAc,CAChH,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC;AAED,iFAAiF;AACjF,SAAS,MAAM,CAAC,OAAwB;IACtC,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC7B,KAAK,QAAQ;YACX,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACpD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACjD,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAExE,OAAO;gBACL,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO;gBAChC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO;gBAChC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;aACnG,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/login/session.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAIxC,OAAO,EACL,SAAS,EACT,YAAY,EACZ,cAAc,EAEd,UAAU,EACV,aAAa,EACb,cAAc,EACd,WAAW,EACX,gBAAgB,GACjB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,gBAAgB,EAA6D,MAAM,eAAe,CAAC;AAoB5G;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CACtB,IAAkB,EAClB,WAAmB,EACnB,KAAa,EACb,IAAY,EACZ,gBAAwB;IAExB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACzC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACvC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC9D,gDAAgD;IAChD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAE9C,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAkB,EAAE,IAAe,EAAE,EAAiB;IACnF,MAAM,IAAI,GAAG,gBAAgB,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,+EAA+E;IAC/E,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC;IAE5E,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC;YAClC,aAAa,EAAE,IAAI,CAAC,GAAG;YACvB,SAAS,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,CAAC;SAC9F,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,yCAAyC,EAAE,CAAC;IACpH,CAAC;IAED;yCACqC;IACrC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACrC,EAAE,CAAC,MAAM,CACP,+EAA+E,QAAQ,CAAC,SAAS,MAAM;QACrG,wBAAwB,IAAI,MAAM;QAClC,oFAAoF;QACpF,4DAA4D,CAC/D,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,MAAM,CAAC,OAAwB;IACtC,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC7B,KAAK,QAAQ;YACX,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACpD,KAAK,UAAU;YACb,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU;gBACxC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE;gBACtD,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;IACvE,CAAC;AACH,CAAC"}

package/dist/login/tokens.d.ts

@@ -0,0 +1,16 @@
+export declare class DeadCredentialError extends Error {
+}
+export interface ExchangeResult {
+    readonly idToken: string;
+    /** Google may hand back a new refresh token; whatever it returns is what to store. */
+    readonly refreshToken: string;
+}
+export type FetchLike = (url: string, init: RequestInit) => Promise<Response>;
+/**
+ * Exchanges a refresh token for an ID token.
+ *
+ * Throws `DeadCredentialError` when the session is genuinely gone — the caller should
+ * tell the user to sign in again — and a plain `Error` for anything transient, which is
+ * worth retrying rather than acting on.
+ */
+export declare function exchangeRefreshToken(refreshToken: string, firebaseApiKey: string, fetchImpl?: FetchLike): Promise<ExchangeResult>;

package/dist/login/tokens.js

@@ -0,0 +1,78 @@
+/**
+ * Turning the stored refresh token into the hour-long ID token identity checks. One call
+ * to Google's secure token service, and this module's entire network surface.
+ *
+ * Nothing here verifies a token: the CLI is the bearer, not the audience.
+ */
+const TOKEN_ENDPOINT = "https://securetoken.googleapis.com/v1/token";
+const TIMEOUT_MS = 20_000;
+/**
+ * Firebase's names for "this refresh token will never work again". Anything else — a 5xx,
+ * a timeout, a DNS blip — is transient, and signing the user out over it would be wrong.
+ * A wrong API key is deliberately absent: that is our misconfiguration, not a dead session.
+ */
+const DEAD_CREDENTIAL_ERRORS = ["TOKEN_EXPIRED", "INVALID_REFRESH_TOKEN", "USER_DISABLED", "USER_NOT_FOUND"];
+export class DeadCredentialError extends Error {
+}
+/**
+ * Exchanges a refresh token for an ID token.
+ *
+ * Throws `DeadCredentialError` when the session is genuinely gone — the caller should
+ * tell the user to sign in again — and a plain `Error` for anything transient, which is
+ * worth retrying rather than acting on.
+ */
+export async function exchangeRefreshToken(refreshToken, firebaseApiKey, fetchImpl = fetch) {
+    const url = `${TOKEN_ENDPOINT}?key=${encodeURIComponent(firebaseApiKey)}`;
+    const body = new URLSearchParams({ grant_type: "refresh_token", refresh_token: refreshToken });
+    let response;
+    try {
+        response = await fetchImpl(url, {
+            method: "POST",
+            headers: { "content-type": "application/x-www-form-urlencoded" },
+            body: body.toString(),
+            signal: AbortSignal.timeout(TIMEOUT_MS),
+        });
+    }
+    catch (err) {
+        // A transport failure is never a dead credential.
+        throw new Error(`could not reach Google's token service: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    const text = await response.text();
+    if (!response.ok) {
+        const message = errorMessage(text);
+        if (DEAD_CREDENTIAL_ERRORS.some((code) => message.includes(code))) {
+            throw new DeadCredentialError("your session has expired — run `ai21-gateway login` again");
+        }
+        throw new Error(`the token service refused the request (${response.status})${message === "" ? "" : `: ${message}`}`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch {
+        throw new Error("the token service returned a body that is not JSON");
+    }
+    const payload = parsed;
+    const idToken = payload["id_token"];
+    const rotated = payload["refresh_token"];
+    if (typeof idToken !== "string" || idToken === "") {
+        throw new Error("the token service returned no id_token");
+    }
+    return {
+        idToken,
+        // Falls back to the token we sent: a response without one means it was not rotated.
+        refreshToken: typeof rotated === "string" && rotated !== "" ? rotated : refreshToken,
+    };
+}
+/** Pulls Firebase's error code out of its body, without assuming the shape. */
+function errorMessage(text) {
+    try {
+        const parsed = JSON.parse(text);
+        const message = parsed.error?.message;
+        return typeof message === "string" ? message : "";
+    }
+    catch {
+        return "";
+    }
+}
+//# sourceMappingURL=tokens.js.map

package/dist/login/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../src/login/tokens.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,cAAc,GAAG,6CAA6C,CAAC;AACrE,MAAM,UAAU,GAAG,MAAM,CAAC;AAE1B;;;;GAIG;AACH,MAAM,sBAAsB,GAAG,CAAC,eAAe,EAAE,uBAAuB,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC;AAE7G,MAAM,OAAO,mBAAoB,SAAQ,KAAK;CAAG;AAUjD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,YAAoB,EACpB,cAAsB,EACtB,YAAuB,KAAK;IAE5B,MAAM,GAAG,GAAG,GAAG,cAAc,QAAQ,kBAAkB,CAAC,cAAc,CAAC,EAAE,CAAC;IAC1E,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC;IAE/F,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;YAC9B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;YACrB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC;SACxC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,kDAAkD;QAClD,MAAM,IAAI,KAAK,CAAC,2CAA2C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjH,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAEnC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,mBAAmB,CAAC,2DAA2D,CAAC,CAAC;QAC7F,CAAC;QAED,MAAM,IAAI,KAAK,CACb,0CAA0C,QAAQ,CAAC,MAAM,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,EAAE,CACpG,CAAC;IACJ,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,OAAO,GAAG,MAAiC,CAAC;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAEzC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO;QACL,OAAO;QACP,oFAAoF;QACpF,YAAY,EAAE,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY;KACrF,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAsC,CAAC;QACrE,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC;QAEtC,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/login/workspaces.d.ts

@@ -0,0 +1,17 @@
+/**
+ * The caller's AI21 workspaces, so `login` can say which one it signed in to.
+ *
+ * Identity shares the gateway's origin (`api.<domain>/identity`), so the URL is derived
+ * from it. Authenticated with the Firebase ID token in a `firebase-token` header —
+ * identity does not read `Authorization: Bearer`.
+ */
+import type { FetchLike } from "./tokens.js";
+export interface Workspace {
+    readonly id: string;
+    readonly name: string;
+}
+/** `https://api.example.com/gateway` → `https://api.example.com`. */
+export declare function identityBase(gatewayUrl: string): string | undefined;
+/** Empty rather than throwing on anything unexpected: a completed login must not be lost
+ *  to a failed listing. */
+export declare function fetchWorkspaces(gatewayUrl: string, idToken: string, fetchImpl?: FetchLike): Promise<readonly Workspace[]>;