@atomic-chat/core 0.5.1

package/dist/credentials/chatgpt-oauth.js

@@ -0,0 +1,329 @@
+/**
+ * OAuth 2.0 + PKCE against `auth.openai.com`, the way the Codex CLI signs in.
+ *
+ * Ported from: src-tauri/src/core/auth/chatgpt.rs. Contract: test/fixtures/app/chatgpt-auth (PKCE,
+ * authorize URL, callback parsing, `state` comparison, JWT claims, token response → session).
+ *
+ * The issuer is injectable for tests only; production always talks to `ISSUER`. The client id is
+ * OpenAI's public Codex one (ADR `2026-08-27-connect-a-chatgpt-subscription-as-a-model-provider`),
+ * while `originator` names this client.
+ */
+import { createHash, randomBytes, timingSafeEqual } from 'node:crypto';
+import { STATUS_CODES, createServer } from 'node:http';
+import { AtomicCoreError } from '../contracts/index.js';
+import { TOKEN_FILE_VERSION } from './chatgpt-store.js';
+export const CLIENT_ID = 'app_EMoamEEZ73f0CkXaXp7hrann';
+export const ISSUER = 'https://auth.openai.com';
+export const SCOPES = 'openid profile email offline_access';
+/** Matched exactly by the authorization server, so there is no fallback port. */
+export const CALLBACK_PORT = 1455;
+export const CALLBACK_PATH = '/auth/callback';
+export const CALLBACK_TIMEOUT_MS = 300_000;
+export const ORIGINATOR = 'atomic_chat';
+const AUTH_CLAIM_NAMESPACE = 'https://api.openai.com/auth';
+/** Token-endpoint errors that mean the refresh credential itself is finished. */
+export const TERMINAL_TOKEN_ERRORS = ['invalid_grant', 'invalid_refresh_token', 'refresh_token_expired'];
+export const REAUTHORIZATION_REQUIRED = 'reauthorization required';
+const TOKEN_REQUEST_TIMEOUT_MS = 30_000;
+export function redirectUri() {
+    return `http://localhost:${CALLBACK_PORT}${CALLBACK_PATH}`;
+}
+export function deriveChallenge(verifier) {
+    return createHash('sha256').update(verifier, 'utf8').digest('base64url');
+}
+export function newPkce() {
+    const verifier = randomBytes(64).toString('base64url');
+    return { verifier, challenge: deriveChallenge(verifier) };
+}
+export function newState() {
+    return randomBytes(32).toString('base64url');
+}
+/** Constant-time for equal lengths; the callback is reachable by any local process. */
+export function stateMatches(expected, received) {
+    const a = Buffer.from(expected, 'utf8');
+    const b = Buffer.from(received, 'utf8');
+    return a.length === b.length && timingSafeEqual(a, b);
+}
+export function authorizeUrl(challenge, state, issuer = ISSUER) {
+    const params = new URLSearchParams([
+        ['response_type', 'code'],
+        ['client_id', CLIENT_ID],
+        ['redirect_uri', redirectUri()],
+        ['scope', SCOPES],
+        ['code_challenge', challenge],
+        ['code_challenge_method', 'S256'],
+        ['state', state],
+        ['originator', ORIGINATOR],
+        ['codex_cli_simplified_flow', 'true'],
+        ['id_token_add_organizations', 'true'],
+    ]);
+    return `${issuer}/oauth/authorize?${params.toString()}`;
+}
+/** `form_urlencoded::parse` into a map: `+` is a space, percent escapes decode, the last repeat wins. */
+export function parseCallbackQuery(query) {
+    const pairs = new Map(new URLSearchParams(query));
+    const error = pairs.get('error');
+    if (error !== undefined)
+        return { kind: 'error', error, description: pairs.get('error_description') ?? null };
+    const code = pairs.get('code');
+    if (!code)
+        throw new AtomicCoreError('AUTH_FAILED', 'callback carried no authorization code');
+    const state = pairs.get('state');
+    if (!state)
+        throw new AtomicCoreError('AUTH_FAILED', 'callback carried no state');
+    return { kind: 'code', code, state };
+}
+/**
+ * The `base64` crate's strict no-padding decoders: only the alphabet, no `=`, and the canonical
+ * encoding of the bytes (non-zero trailing bits are rejected). Node's decoder accepts all of those.
+ */
+function strictBase64(input, alphabet) {
+    const pattern = alphabet === 'base64url' ? /^[A-Za-z0-9_-]*$/ : /^[A-Za-z0-9+/]*$/;
+    if (!pattern.test(input) || input.length % 4 === 1)
+        return undefined;
+    const bytes = Buffer.from(input, alphabet);
+    const canonical = bytes.toString(alphabet).replace(/=+$/, '');
+    return canonical === input ? bytes : undefined;
+}
+function stringAt(value, key) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        return null;
+    const v = value[key];
+    return typeof v === 'string' ? v : null;
+}
+/**
+ * The account fields out of a JWT payload. The signature is not verified: the token arrived over a
+ * TLS connection to a pinned host, and nothing here is a security decision. Anything unparseable
+ * yields empty claims.
+ */
+export function decodeJwtClaims(token) {
+    const empty = { account_id: null, plan_type: null, email: null };
+    const parts = token.split('.');
+    if (parts.length < 2)
+        return empty;
+    const payload = parts[1];
+    const bytes = strictBase64(payload, 'base64url') ?? strictBase64(payload, 'base64');
+    if (!bytes)
+        return empty;
+    let value;
+    try {
+        value = JSON.parse(bytes.toString('utf8'));
+    }
+    catch {
+        return empty;
+    }
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        return empty;
+    const auth = value[AUTH_CLAIM_NAMESPACE];
+    return {
+        account_id: stringAt(auth, 'chatgpt_account_id'),
+        plan_type: stringAt(auth, 'chatgpt_plan_type'),
+        email: stringAt(value, 'email'),
+    };
+}
+/** serde's derive for the token endpoint's body; `undefined` where serde would refuse it. */
+export function parseTokenResponse(raw) {
+    if (typeof raw !== 'object' || raw === null || Array.isArray(raw))
+        return undefined;
+    const o = raw;
+    if (typeof o['access_token'] !== 'string')
+        return undefined;
+    const opt = (v) => (v === undefined || v === null ? null : typeof v === 'string' ? v : false);
+    const refresh = opt(o['refresh_token']);
+    const id = opt(o['id_token']);
+    const lifetime = o['expires_in'];
+    if (refresh === false || id === false)
+        return undefined;
+    if (lifetime !== undefined &&
+        lifetime !== null &&
+        (typeof lifetime !== 'number' || !Number.isInteger(lifetime)))
+        return undefined;
+    return {
+        access_token: o['access_token'],
+        refresh_token: refresh,
+        id_token: id,
+        expires_in: typeof lifetime === 'number' ? lifetime : null,
+    };
+}
+/**
+ * The session to store from a token response. A refresh may omit `refresh_token` when the provider
+ * does not rotate it, so the previous one is kept. The account id is read from the access token
+ * first (a refresh may carry no id token), the email from the id token first. The lifetime defaults
+ * to an hour and is clamped to [1 minute, 30 days].
+ */
+export function toStored(response, nowUnix, previousRefresh) {
+    const refresh = response.refresh_token ?? previousRefresh;
+    if (refresh === null)
+        throw new AtomicCoreError('AUTH_FAILED', 'sign-in returned no refresh token');
+    const access = decodeJwtClaims(response.access_token);
+    const id = response.id_token !== null ? decodeJwtClaims(response.id_token) : decodeJwtClaims('');
+    const lifetime = Math.min(Math.max(response.expires_in ?? 3600, 60), 30 * 24 * 3600);
+    return {
+        version: TOKEN_FILE_VERSION,
+        access_token: response.access_token,
+        refresh_token: refresh,
+        id_token: response.id_token,
+        account_id: access.account_id ?? id.account_id,
+        plan_type: access.plan_type ?? id.plan_type,
+        email: id.email ?? access.email,
+        expires_at: nowUnix + lifetime,
+    };
+}
+/**
+ * POST a form to the token endpoint. A spent or revoked refresh credential is terminal and says so
+ * with `REAUTHORIZATION_REQUIRED`; anything else may be transient and carries the provider's words.
+ */
+export async function postTokenForm(form, endpoint = {}) {
+    const fetchImpl = endpoint.fetch ?? fetch;
+    let response;
+    try {
+        response = await fetchImpl(`${endpoint.issuer ?? ISSUER}/oauth/token`, {
+            method: 'POST',
+            headers: { 'content-type': 'application/x-www-form-urlencoded' },
+            body: new URLSearchParams(form).toString(),
+            signal: AbortSignal.timeout(TOKEN_REQUEST_TIMEOUT_MS),
+        });
+    }
+    catch (e) {
+        throw new AtomicCoreError('UPSTREAM_ERROR', `token request failed: ${e.message}`);
+    }
+    let body;
+    try {
+        body = await response.text();
+    }
+    catch (e) {
+        throw new AtomicCoreError('UPSTREAM_ERROR', `cannot read token response: ${e.message}`);
+    }
+    if (!response.ok) {
+        const code = tokenErrorCode(body);
+        if (TERMINAL_TOKEN_ERRORS.includes(code))
+            throw new AtomicCoreError('AUTH_REQUIRED', `${REAUTHORIZATION_REQUIRED}: ${code}`);
+        throw new AtomicCoreError('UPSTREAM_ERROR', `token request rejected (${response.status}${statusText(response)}): ${body}`);
+    }
+    let raw;
+    try {
+        raw = JSON.parse(body);
+    }
+    catch (e) {
+        throw new AtomicCoreError('UPSTREAM_ERROR', `cannot parse token response: ${e.message}`);
+    }
+    const parsed = parseTokenResponse(raw);
+    if (!parsed)
+        throw new AtomicCoreError('UPSTREAM_ERROR', 'cannot parse token response: unexpected shape');
+    return parsed;
+}
+/** `reqwest::StatusCode`'s Display: the canonical reason, `401 Unauthorized`, not the server's phrase. */
+function statusText(response) {
+    const reason = STATUS_CODES[response.status];
+    return reason ? ` ${reason}` : '';
+}
+/** The OAuth error code: `error` as a string, or `error.code` when `error` is an object. */
+export function tokenErrorCode(body) {
+    try {
+        const error = JSON.parse(body)?.error;
+        if (typeof error === 'string')
+            return error;
+        if (typeof error === 'object' && error !== null) {
+            const code = error.code;
+            return typeof code === 'string' ? code : '';
+        }
+    }
+    catch {
+        // not JSON
+    }
+    return '';
+}
+export async function exchangeCode(code, pkce, nowUnix, endpoint = {}) {
+    const response = await postTokenForm([
+        ['grant_type', 'authorization_code'],
+        ['client_id', CLIENT_ID],
+        ['code', code],
+        ['redirect_uri', redirectUri()],
+        ['code_verifier', pkce.verifier],
+    ], endpoint);
+    return toStored(response, nowUnix, null);
+}
+export async function refreshTokens(refreshToken, nowUnix, endpoint = {}) {
+    const response = await postTokenForm([
+        ['grant_type', 'refresh_token'],
+        ['client_id', CLIENT_ID],
+        ['refresh_token', refreshToken],
+        ['scope', SCOPES],
+    ], endpoint);
+    return toStored(response, nowUnix, refreshToken);
+}
+/** The page the browser is left on. Static: nothing from the request is reflected into it. */
+const CALLBACK_PAGE = '<!doctype html><html><head><meta charset="utf-8"><title>Atomic Chat</title></head>' +
+    '<body style="font-family:system-ui;display:flex;align-items:center;justify-content:center;height:100vh;margin:0">' +
+    '<p>You can close this tab and return to Atomic Chat.</p></body></html>';
+/**
+ * Bind the loopback listener before the browser opens, so a busy port fails before the user has
+ * signed in. Only the first callback counts; the listener closes as soon as it arrives, on cancel,
+ * or on timeout.
+ */
+export async function listenForCallback(expectedState, options = {}) {
+    const port = options.port ?? CALLBACK_PORT;
+    let settle = () => { };
+    const outcome = new Promise((resolve) => (settle = resolve));
+    let settled = false;
+    const finish = (value) => {
+        if (settled)
+            return;
+        settled = true;
+        settle(value);
+    };
+    const server = createServer((req, res) => {
+        const url = req.url ?? '/';
+        const q = url.indexOf('?');
+        const path = q >= 0 ? url.slice(0, q) : url;
+        if (path !== CALLBACK_PATH) {
+            res.writeHead(404, { 'content-length': '0' });
+            res.end();
+            return;
+        }
+        let result;
+        try {
+            const params = parseCallbackQuery(q >= 0 ? url.slice(q + 1) : '');
+            if (params.kind === 'error') {
+                const message = params.description === null ? params.error : `${params.error}: ${params.description}`;
+                result = { error: new AtomicCoreError('AUTH_FAILED', message) };
+            }
+            else if (stateMatches(expectedState, params.state)) {
+                result = { code: params.code };
+            }
+            else {
+                result = { error: new AtomicCoreError('AUTH_FAILED', 'callback state did not match this sign-in') };
+            }
+        }
+        catch (e) {
+            result = { error: e };
+        }
+        // Settle only once the page has gone out: settling closes the listener, and closing first would
+        // leave the browser with a reset connection instead of the "you can close this tab" page.
+        res.once('finish', () => finish(result));
+        res.writeHead(200, { 'content-type': 'text/html; charset=utf-8' });
+        res.end(CALLBACK_PAGE);
+    });
+    await new Promise((resolve, reject) => {
+        server.once('error', (e) => reject(new AtomicCoreError('IO_ERROR', `cannot listen on 127.0.0.1:${port} for the sign-in callback (${e.message}). This port is fixed by OpenAI's redirect URI — close whatever is using it (often the Codex CLI mid-login) and try again.`)));
+        server.listen(port, '127.0.0.1', () => resolve());
+    });
+    const timer = setTimeout(() => finish({ error: new AtomicCoreError('AUTH_FAILED', 'timed out waiting for the browser sign-in') }), options.timeoutMs ?? CALLBACK_TIMEOUT_MS);
+    timer.unref?.();
+    const code = outcome.then((result) => {
+        clearTimeout(timer);
+        // Idle connections only: the one that brought the callback may still be delivering its page.
+        server.close();
+        server.closeIdleConnections();
+        if ('error' in result)
+            throw result.error;
+        return result.code;
+    });
+    // Nobody may be awaiting yet; an unobserved rejection must not crash the process.
+    code.catch(() => { });
+    return {
+        code,
+        cancel: () => finish({ error: new AtomicCoreError('AUTH_CANCELLED', 'sign-in cancelled') }),
+    };
+}
+//# sourceMappingURL=chatgpt-oauth.js.map

package/dist/credentials/chatgpt-oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chatgpt-oauth.js","sourceRoot":"","sources":["../../src/credentials/chatgpt-oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACtE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAGvD,MAAM,CAAC,MAAM,SAAS,GAAG,8BAA8B,CAAA;AACvD,MAAM,CAAC,MAAM,MAAM,GAAG,yBAAyB,CAAA;AAC/C,MAAM,CAAC,MAAM,MAAM,GAAG,qCAAqC,CAAA;AAC3D,iFAAiF;AACjF,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAA;AACjC,MAAM,CAAC,MAAM,aAAa,GAAG,gBAAgB,CAAA;AAC7C,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CAAA;AAC1C,MAAM,CAAC,MAAM,UAAU,GAAG,aAAa,CAAA;AACvC,MAAM,oBAAoB,GAAG,6BAA6B,CAAA;AAC1D,iFAAiF;AACjF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,eAAe,EAAE,uBAAuB,EAAE,uBAAuB,CAAC,CAAA;AACxG,MAAM,CAAC,MAAM,wBAAwB,GAAG,0BAA0B,CAAA;AAClE,MAAM,wBAAwB,GAAG,MAAM,CAAA;AAEvC,MAAM,UAAU,WAAW;IACzB,OAAO,oBAAoB,aAAa,GAAG,aAAa,EAAE,CAAA;AAC5D,CAAC;AAOD,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;AAC1E,CAAC;AAED,MAAM,UAAU,OAAO;IACrB,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;IACtD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAA;AAC3D,CAAC;AAED,MAAM,UAAU,QAAQ;IACtB,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AAC9C,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,QAAgB;IAC7D,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IACvC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IACvC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AACvD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,SAAiB,EAAE,KAAa,EAAE,MAAM,GAAG,MAAM;IAC5E,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,CAAC,eAAe,EAAE,MAAM,CAAC;QACzB,CAAC,WAAW,EAAE,SAAS,CAAC;QACxB,CAAC,cAAc,EAAE,WAAW,EAAE,CAAC;QAC/B,CAAC,OAAO,EAAE,MAAM,CAAC;QACjB,CAAC,gBAAgB,EAAE,SAAS,CAAC;QAC7B,CAAC,uBAAuB,EAAE,MAAM,CAAC;QACjC,CAAC,OAAO,EAAE,KAAK,CAAC;QAChB,CAAC,YAAY,EAAE,UAAU,CAAC;QAC1B,CAAC,2BAA2B,EAAE,MAAM,CAAC;QACrC,CAAC,4BAA4B,EAAE,MAAM,CAAC;KACvC,CAAC,CAAA;IACF,OAAO,GAAG,MAAM,oBAAoB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAA;AACzD,CAAC;AAKD,yGAAyG;AACzG,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC,CAAA;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAChC,IAAI,KAAK,KAAK,SAAS;QACrB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,IAAI,EAAE,CAAA;IACtF,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAC9B,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,wCAAwC,CAAC,CAAA;IAC7F,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAChC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAA;IACjF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;AACtC,CAAC;AAQD;;;GAGG;AACH,SAAS,YAAY,CAAC,KAAa,EAAE,QAAgC;IACnE,MAAM,OAAO,GAAG,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,CAAA;IAClF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACpE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;IAC1C,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC7D,OAAO,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAChD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,GAAW;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACpF,MAAM,CAAC,GAAI,KAAiC,CAAC,GAAG,CAAC,CAAA;IACjD,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,KAAK,GAAa,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IAC1E,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IAClC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAW,CAAA;IAClC,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;IACnF,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAA;IACxB,IAAI,KAAc,CAAA;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACrF,MAAM,IAAI,GAAI,KAAiC,CAAC,oBAAoB,CAAC,CAAA;IACrE,OAAO;QACL,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;QAChD,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;QAC9C,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;KAChC,CAAA;AACH,CAAC;AASD,6FAA6F;AAC7F,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IACnF,MAAM,CAAC,GAAG,GAA8B,CAAA;IACxC,IAAI,OAAO,CAAC,CAAC,cAAc,CAAC,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IAC3D,MAAM,GAAG,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IACtG,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAA;IACvC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA;IAC7B,MAAM,QAAQ,GAAG,CAAC,CAAC,YAAY,CAAC,CAAA;IAChC,IAAI,OAAO,KAAK,KAAK,IAAI,EAAE,KAAK,KAAK;QAAE,OAAO,SAAS,CAAA;IACvD,IACE,QAAQ,KAAK,SAAS;QACtB,QAAQ,KAAK,IAAI;QACjB,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAE7D,OAAO,SAAS,CAAA;IAClB,OAAO;QACL,YAAY,EAAE,CAAC,CAAC,cAAc,CAAC;QAC/B,aAAa,EAAE,OAAO;QACtB,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;KAC3D,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CACtB,QAAuB,EACvB,OAAe,EACf,eAA8B;IAE9B,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,IAAI,eAAe,CAAA;IACzD,IAAI,OAAO,KAAK,IAAI;QAAE,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,mCAAmC,CAAC,CAAA;IACnG,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;IACrD,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC,CAAA;IAChG,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,IAAI,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IACpF,OAAO;QACL,OAAO,EAAE,kBAAkB;QAC3B,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,aAAa,EAAE,OAAO;QACtB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,UAAU;QAC9C,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,SAAS;QAC3C,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK;QAC/B,UAAU,EAAE,OAAO,GAAG,QAAQ;KAC/B,CAAA;AACH,CAAC;AAOD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAA6B,EAC7B,WAA0B,EAAE;IAE5B,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,IAAI,KAAK,CAAA;IACzC,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,QAAQ,CAAC,MAAM,IAAI,MAAM,cAAc,EAAE;YACrE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;YAC1C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,wBAAwB,CAAC;SACtD,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,yBAA0B,CAAW,CAAC,OAAO,EAAE,CAAC,CAAA;IAC9F,CAAC;IACD,IAAI,IAAY,CAAA;IAChB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAC9B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,+BAAgC,CAAW,CAAC,OAAO,EAAE,CAAC,CAAA;IACpG,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;QACjC,IAAI,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC;YACtC,MAAM,IAAI,eAAe,CAAC,eAAe,EAAE,GAAG,wBAAwB,KAAK,IAAI,EAAE,CAAC,CAAA;QACpF,MAAM,IAAI,eAAe,CACvB,gBAAgB,EAChB,2BAA2B,QAAQ,CAAC,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAC9E,CAAA;IACH,CAAC;IACD,IAAI,GAAY,CAAA;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACxB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,gCAAiC,CAAW,CAAC,OAAO,EAAE,CAAC,CAAA;IACrG,CAAC;IACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;IACtC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,+CAA+C,CAAC,CAAA;IACzG,OAAO,MAAM,CAAA;AACf,CAAC;AAED,0GAA0G;AAC1G,SAAS,UAAU,CAAC,QAAkB;IACpC,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC5C,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AACnC,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,IAAI,CAAC;QACH,MAAM,KAAK,GAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgC,EAAE,KAAK,CAAA;QACrE,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;QAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAChD,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAA;YAC/C,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;QAC7C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,WAAW;IACb,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,IAAU,EACV,OAAe,EACf,WAA0B,EAAE;IAE5B,MAAM,QAAQ,GAAG,MAAM,aAAa,CAClC;QACE,CAAC,YAAY,EAAE,oBAAoB,CAAC;QACpC,CAAC,WAAW,EAAE,SAAS,CAAC;QACxB,CAAC,MAAM,EAAE,IAAI,CAAC;QACd,CAAC,cAAc,EAAE,WAAW,EAAE,CAAC;QAC/B,CAAC,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC;KACjC,EACD,QAAQ,CACT,CAAA;IACD,OAAO,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,YAAoB,EACpB,OAAe,EACf,WAA0B,EAAE;IAE5B,MAAM,QAAQ,GAAG,MAAM,aAAa,CAClC;QACE,CAAC,YAAY,EAAE,eAAe,CAAC;QAC/B,CAAC,WAAW,EAAE,SAAS,CAAC;QACxB,CAAC,eAAe,EAAE,YAAY,CAAC;QAC/B,CAAC,OAAO,EAAE,MAAM,CAAC;KAClB,EACD,QAAQ,CACT,CAAA;IACD,OAAO,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,CAAA;AAClD,CAAC;AAED,8FAA8F;AAC9F,MAAM,aAAa,GACjB,oFAAoF;IACpF,mHAAmH;IACnH,wEAAwE,CAAA;AAQ1E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,aAAqB,EACrB,UAAiD,EAAE;IAEnD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,aAAa,CAAA;IAC1C,IAAI,MAAM,GAAqE,GAAG,EAAE,GAAE,CAAC,CAAA;IACvF,MAAM,OAAO,GAAG,IAAI,OAAO,CAAgD,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAA;IAC3G,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,MAAM,MAAM,GAAG,CAAC,KAAoD,EAAE,EAAE;QACtE,IAAI,OAAO;YAAE,OAAM;QACnB,OAAO,GAAG,IAAI,CAAA;QACd,MAAM,CAAC,KAAK,CAAC,CAAA;IACf,CAAC,CAAA;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACvC,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAA;QAC1B,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC1B,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;QAC3C,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;YAC3B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAA;YAC7C,GAAG,CAAC,GAAG,EAAE,CAAA;YACT,OAAM;QACR,CAAC;QACD,IAAI,MAAqD,CAAA;QACzD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YACjE,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,WAAW,EAAE,CAAA;gBACrG,MAAM,GAAG,EAAE,KAAK,EAAE,IAAI,eAAe,CAAC,aAAa,EAAE,OAAO,CAAC,EAAE,CAAA;YACjE,CAAC;iBAAM,IAAI,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrD,MAAM,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAA;YAChC,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,EAAE,KAAK,EAAE,IAAI,eAAe,CAAC,aAAa,EAAE,2CAA2C,CAAC,EAAE,CAAA;YACrG,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,GAAG,EAAE,KAAK,EAAE,CAAoB,EAAE,CAAA;QAC1C,CAAC;QACD,gGAAgG;QAChG,0FAA0F;QAC1F,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;QACxC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAA;QAClE,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IACxB,CAAC,CAAC,CAAA;IAEF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAQ,EAAE,EAAE,CAChC,MAAM,CACJ,IAAI,eAAe,CACjB,UAAU,EACV,8BAA8B,IAAI,8BAA8B,CAAC,CAAC,OAAO,4HAA4H,CACtM,CACF,CACF,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IAEF,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,eAAe,CAAC,aAAa,EAAE,2CAA2C,CAAC,EAAE,CAAC,EACxG,OAAO,CAAC,SAAS,IAAI,mBAAmB,CACzC,CAAA;IACD,KAAK,CAAC,KAAK,EAAE,EAAE,CAAA;IAEf,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;QACnC,YAAY,CAAC,KAAK,CAAC,CAAA;QACnB,6FAA6F;QAC7F,MAAM,CAAC,KAAK,EAAE,CAAA;QACd,MAAM,CAAC,oBAAoB,EAAE,CAAA;QAC7B,IAAI,OAAO,IAAI,MAAM;YAAE,MAAM,MAAM,CAAC,KAAK,CAAA;QACzC,OAAO,MAAM,CAAC,IAAI,CAAA;IACpB,CAAC,CAAC,CAAA;IACF,kFAAkF;IAClF,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACpB,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,eAAe,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,EAAE,CAAC;KAC5F,CAAA;AACH,CAAC"}

package/dist/credentials/chatgpt-store.d.ts

@@ -0,0 +1,33 @@
+/**
+ * `<data>/atomic-chatgpt-auth.json`: the ChatGPT subscription session, shared with the app.
+ *
+ * Ported from: src-tauri/src/core/auth/store.rs. Contract: test/fixtures/app/chatgpt-auth (`save`,
+ * `load`, `clear`, `is_expired_at` cases).
+ *
+ * The same file the app reads, byte-compatible: serde's pretty print with fields in declaration
+ * order and `null` for an absent optional. Reading is as strict as serde's derive — a wrong type or
+ * a missing required field reads as "no session", as does a version other than 1. Unknown fields
+ * are ignored. The file is owner-readable only, and the mode is set when it is opened for writing so
+ * a refresh token is never briefly on disk under a wider one.
+ */
+export declare const TOKEN_FILE_VERSION = 1;
+export interface StoredTokens {
+    version: number;
+    access_token: string;
+    refresh_token: string;
+    id_token: string | null;
+    account_id: string | null;
+    plan_type: string | null;
+    email: string | null;
+    /** Unix seconds; absolute so a restart does not extend the token's life. */
+    expires_at: number;
+}
+export declare function isExpiredAt(tokens: Pick<StoredTokens, 'expires_at'>, nowUnix: number, marginSecs: number): boolean;
+/** serde's derive for `StoredTokens`, then the version check. */
+export declare function parseStoredTokens(text: string): StoredTokens | undefined;
+/** serde_json's `to_string_pretty`: two-space indent, declaration order, no trailing newline. */
+export declare function serializeStoredTokens(tokens: StoredTokens): string;
+export declare function loadTokens(path: string): Promise<StoredTokens | undefined>;
+export declare function saveTokens(path: string, tokens: StoredTokens): Promise<void>;
+/** Missing is success: "not connected" is the goal state. */
+export declare function clearTokens(path: string): Promise<void>;

package/dist/credentials/chatgpt-store.js

@@ -0,0 +1,110 @@
+/**
+ * `<data>/atomic-chatgpt-auth.json`: the ChatGPT subscription session, shared with the app.
+ *
+ * Ported from: src-tauri/src/core/auth/store.rs. Contract: test/fixtures/app/chatgpt-auth (`save`,
+ * `load`, `clear`, `is_expired_at` cases).
+ *
+ * The same file the app reads, byte-compatible: serde's pretty print with fields in declaration
+ * order and `null` for an absent optional. Reading is as strict as serde's derive — a wrong type or
+ * a missing required field reads as "no session", as does a version other than 1. Unknown fields
+ * are ignored. The file is owner-readable only, and the mode is set when it is opened for writing so
+ * a refresh token is never briefly on disk under a wider one.
+ */
+import { chmod, mkdir, open, readFile, unlink } from 'node:fs/promises';
+import { dirname } from 'node:path';
+export const TOKEN_FILE_VERSION = 1;
+export function isExpiredAt(tokens, nowUnix, marginSecs) {
+    return tokens.expires_at - marginSecs <= nowUnix;
+}
+const U32_MAX = 0xffffffff;
+function optionalString(value) {
+    if (value === undefined || value === null)
+        return null;
+    return typeof value === 'string' ? value : false;
+}
+/** serde's derive for `StoredTokens`, then the version check. */
+export function parseStoredTokens(text) {
+    let raw;
+    try {
+        raw = JSON.parse(text);
+    }
+    catch {
+        return undefined;
+    }
+    if (typeof raw !== 'object' || raw === null || Array.isArray(raw))
+        return undefined;
+    const o = raw;
+    const version = o['version'];
+    const expires = o['expires_at'];
+    if (typeof version !== 'number' || !Number.isInteger(version) || version < 0 || version > U32_MAX)
+        return undefined;
+    if (typeof o['access_token'] !== 'string' || typeof o['refresh_token'] !== 'string')
+        return undefined;
+    if (typeof expires !== 'number' || !Number.isInteger(expires))
+        return undefined;
+    const id = optionalString(o['id_token']);
+    const account = optionalString(o['account_id']);
+    const plan = optionalString(o['plan_type']);
+    const email = optionalString(o['email']);
+    if (id === false || account === false || plan === false || email === false)
+        return undefined;
+    if (version !== TOKEN_FILE_VERSION)
+        return undefined;
+    return {
+        version,
+        access_token: o['access_token'],
+        refresh_token: o['refresh_token'],
+        id_token: id,
+        account_id: account,
+        plan_type: plan,
+        email,
+        expires_at: expires,
+    };
+}
+/** serde_json's `to_string_pretty`: two-space indent, declaration order, no trailing newline. */
+export function serializeStoredTokens(tokens) {
+    return JSON.stringify({
+        version: tokens.version,
+        access_token: tokens.access_token,
+        refresh_token: tokens.refresh_token,
+        id_token: tokens.id_token,
+        account_id: tokens.account_id,
+        plan_type: tokens.plan_type,
+        email: tokens.email,
+        expires_at: tokens.expires_at,
+    }, null, 2);
+}
+export async function loadTokens(path) {
+    let text;
+    try {
+        text = await readFile(path, 'utf8');
+    }
+    catch {
+        return undefined;
+    }
+    return parseStoredTokens(text);
+}
+export async function saveTokens(path, tokens) {
+    await mkdir(dirname(path), { recursive: true });
+    const handle = await open(path, 'w', 0o600);
+    try {
+        await handle.writeFile(serializeStoredTokens(tokens));
+    }
+    finally {
+        await handle.close();
+    }
+    // An existing file keeps its old mode through `open`, so restate it.
+    if (process.platform !== 'win32')
+        await chmod(path, 0o600);
+}
+/** Missing is success: "not connected" is the goal state. */
+export async function clearTokens(path) {
+    try {
+        await unlink(path);
+    }
+    catch (e) {
+        if (e.code !== 'ENOENT')
+            throw e;
+    }
+}
+//# sourceMappingURL=chatgpt-store.js.map

package/dist/credentials/chatgpt-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chatgpt-store.js","sourceRoot":"","sources":["../../src/credentials/chatgpt-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACvE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAA;AAcnC,MAAM,UAAU,WAAW,CACzB,MAAwC,EACxC,OAAe,EACf,UAAkB;IAElB,OAAO,MAAM,CAAC,UAAU,GAAG,UAAU,IAAI,OAAO,CAAA;AAClD,CAAC;AAED,MAAM,OAAO,GAAG,UAAU,CAAA;AAE1B,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IACtD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAA;AAClD,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,GAAY,CAAA;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IACnF,MAAM,CAAC,GAAG,GAA8B,CAAA;IACxC,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,CAAA;IAC5B,MAAM,OAAO,GAAG,CAAC,CAAC,YAAY,CAAC,CAAA;IAC/B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,OAAO;QAC/F,OAAO,SAAS,CAAA;IAClB,IAAI,OAAO,CAAC,CAAC,cAAc,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,eAAe,CAAC,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACrG,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAA;IAC/E,MAAM,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA;IACxC,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAA;IAC/C,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAA;IAC3C,MAAM,KAAK,GAAG,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;IACxC,IAAI,EAAE,KAAK,KAAK,IAAI,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,SAAS,CAAA;IAC5F,IAAI,OAAO,KAAK,kBAAkB;QAAE,OAAO,SAAS,CAAA;IACpD,OAAO;QACL,OAAO;QACP,YAAY,EAAE,CAAC,CAAC,cAAc,CAAC;QAC/B,aAAa,EAAE,CAAC,CAAC,eAAe,CAAC;QACjC,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,OAAO;QACnB,SAAS,EAAE,IAAI;QACf,KAAK;QACL,UAAU,EAAE,OAAO;KACpB,CAAA;AACH,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,qBAAqB,CAAC,MAAoB;IACxD,OAAO,IAAI,CAAC,SAAS,CACnB;QACE,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,EACD,IAAI,EACJ,CAAC,CACF,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,IAAI,IAAY,CAAA;IAChB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAA;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,MAAoB;IACjE,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAA;IACvD,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;IACD,qEAAqE;IACrE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;AAC5D,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY;IAC5C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAA;IACpB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,CAAC,CAAA;IAC7D,CAAC;AACH,CAAC"}

package/dist/credentials/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Secrets: cloud provider API keys in `<data>/atomic-core/credentials.json` (0600), and the ChatGPT
+ * subscription session in `<data>/atomic-chatgpt-auth.json`, shared with the app.
+ *
+ * Ported from: src-tauri/src/core/auth/{store,chatgpt,state}.rs.
+ * See PLAN.md §3.2. Public API of this module is exported from this file only.
+ */
+export * from './api-keys.js';
+export * from './chatgpt-store.js';
+export * from './chatgpt-oauth.js';
+export * from './chatgpt-auth.js';

package/dist/credentials/index.js

@@ -0,0 +1,12 @@
+/**
+ * Secrets: cloud provider API keys in `<data>/atomic-core/credentials.json` (0600), and the ChatGPT
+ * subscription session in `<data>/atomic-chatgpt-auth.json`, shared with the app.
+ *
+ * Ported from: src-tauri/src/core/auth/{store,chatgpt,state}.rs.
+ * See PLAN.md §3.2. Public API of this module is exported from this file only.
+ */
+export * from './api-keys.js';
+export * from './chatgpt-store.js';
+export * from './chatgpt-oauth.js';
+export * from './chatgpt-auth.js';
+//# sourceMappingURL=index.js.map

package/dist/credentials/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/credentials/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,cAAc,eAAe,CAAA;AAC7B,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,mBAAmB,CAAA"}

package/dist/diffusion/args.d.ts

@@ -0,0 +1,102 @@
+/**
+ * Pure argv and request builders for `sd-server`: no I/O and no process, so every flag decision is
+ * tested without a binary or a model file. Port of `args.rs` in `tauri-plugin-atomic-diffusion` (app
+ * commit `ec1fd3ea7`, and the host switch of `process.rs`), itself a port of Studio's `sd_cpp_args.py`.
+ *
+ * Every flag emitted here is listed in `test/fixtures/sdcpp/required-flags.txt`, which the live test
+ * holds against the pinned binary's `--help`.
+ */
+import type { DiffusionBackend, DiffusionFamilyDefaults, DiffusionModality, DiffusionOffloadPolicy, ImageGenerateRequest, VideoGenerateRequest } from '../contracts/index.js';
+import type { ResolvedInputs, ServerSpec } from './types.js';
+/** Kill switch for the Metal text-encoder placement: `1`/`true`/`yes`/`on` keeps the encoder on Metal. */
+export declare const METAL_TE_GPU_ENV = "ATOMIC_DIFFUSION_METAL_TE_GPU";
+/**
+ * Opt-in for `-M vid_gen` on a video load. `sd-server` infers its modes from the model, and the flag
+ * is documented for `sd-cli`; it is emitted only when this is `1`/`true`/`yes`/`on`, until the live
+ * test has shown whether the server wants it.
+ */
+export declare const VID_GEN_MODE_FLAG_ENV = "ATOMIC_DIFFUSION_VID_GEN_MODE_FLAG";
+/** The host facts the argv depends on, injected so a test can be any platform. */
+export interface ArgsHost {
+    platform: NodeJS.Platform;
+    env: Record<string, string | undefined>;
+}
+/**
+ * The memory policy as sd.cpp offload flags. `group` streams the model (`--offload-to-cpu`) with
+ * flash attention; `model` also puts CLIP and the VAE on the CPU and tiles the VAE.
+ */
+export declare function offloadFlags(policy: DiffusionOffloadPolicy): string[];
+/** Numerically exact speed-ups: flash attention, and direct convolution in the diffusion model. */
+export declare function speedFlags(): string[];
+/**
+ * Keep the text encoder on the CPU under Apple Metal. ggml's Metal backend aborts on `RMS_NORM` for
+ * non-contiguous rows with no per-op CPU fallback, so an LLM text encoder (Qwen3 for Z-Image and
+ * FLUX.2, T5 for FLUX.1) takes the whole server down on the first prompt. The encoder runs once per
+ * prompt and the denoiser every step, so pinning only the encoder keeps Metal where it matters.
+ */
+export declare function metalTextEncoderFlags(isMacos: boolean, envOverride: string | undefined): string[];
+/** `-M vid_gen` for a video model, only while the environment opts in. */
+export declare function videoModeFlags(modality: DiffusionModality, envOverride: string | undefined): string[];
+/** An Apple M5 CPU brand string: `Apple M5`, `Apple M5 Max`. */
+export declare function isM5Brand(brand: string): boolean;
+/**
+ * The environment `sd-server` gets for this host. ggml's Metal Tensor API is unstable on some M5 and
+ * macOS combinations: it can fail command buffers, or return NaN latents that come out as white
+ * images. On an M5 with the Metal backend it is switched off, which keeps Metal on its mature
+ * SIMD-group path; the argv is left alone, because older engine builds reject newer scaling flags.
+ */
+export declare function hostEnv(platform: NodeJS.Platform, backend: DiffusionBackend, cpuBrand: string | undefined): Record<string, string>;
+/**
+ * `flags` with every `--backend <spec>` pair removed. sd.cpp concatenates repeated `--backend`
+ * values instead of replacing them, and a per-module entry beats the bare default: appending
+ * `--backend cpu` to a spec that still says `diffusion=CUDA0` would leave the denoiser on CUDA.
+ */
+export declare function withoutDeviceBackendFlags(flags: readonly string[]): string[];
+/** The `extraArgs` of the one automatic recovery: everything on the CPU backend. */
+export declare function cpuBackendExtraArgs(extraArgs: readonly string[]): string[];
+/**
+ * True when the captured output carries a ggml unsupported-op abort. That signature is
+ * deterministic for the graph in question: a retry on the same backend fails identically, a CPU
+ * restart runs it. No other death may be retried automatically.
+ */
+export declare function isGgmlUnsupportedOpAbort(text: string): boolean;
+/**
+ * The `sd-server` argv, without the binary. Model files first, then the listener, the scratch
+ * directories sd-server insists on iterating, threads, the hardware flags (de-duplicated, stable
+ * order), `-v` so the per-step sampling lines are printed, and the caller's `extraArgs` last.
+ */
+export declare function buildServerArgs(spec: ServerSpec, port: number, scratchDir: string, host: ArgsHost): string[];
+/**
+ * Output area above which a request turns VAE tiling on. The VAE's compute buffer grows with the
+ * pixel count (FLUX.2: 6.7 GB to decode at 1024², 26.6 GB at 2048², where a 2x Upscale lands and
+ * where it failed on a 24 GB card). Tiled, the peak stays at the one-tile figure. Up to 1024²
+ * nothing changes.
+ */
+export declare const VAE_TILING_AREA: number;
+/**
+ * Pixel-frames (width × height × frames) above which a video request turns VAE tiling on. A video
+ * VAE decodes the whole clip in one graph, so its buffer grows with the frame count as much as with
+ * the frame size: the Wan 2.2 VAE asked Metal for 27.6 GB at 1280×704 × 121 frames (≈250 bytes per
+ * pixel-frame, 2026-09-23) and failed on a machine with 14.9 GB free. Eight megapixel-frames is
+ * about 2 GB of that, the point past which a single-graph decode stops being safe anywhere.
+ */
+export declare const VIDEO_VAE_TILING_PIXEL_FRAMES: number;
+/**
+ * The `POST /sdcpp/v1/img_gen` body. The whole batch goes in one request; guidance is split the way
+ * sd.cpp expects (CFG → `txt_cfg`, FLUX distilled → `distilled_guidance`). Only set keys are sent,
+ * so the server's own defaults apply to the rest. The workflow decides which images go in. sd.cpp
+ * resizes the init image to `width`×`height` itself, which is how Upscale works.
+ *
+ * sd.cpp reads integers with `is_number_integer()` and floats with `is_number()`, so `1` for a
+ * `cfgScale` of 1.0 is accepted (checked in its `common.cpp`).
+ */
+export declare function buildImgGenRequest(request: ImageGenerateRequest, defaults: DiffusionFamilyDefaults, seed: number, inputs: ResolvedInputs): Record<string, unknown>;
+/**
+ * The `POST /sdcpp/v1/vid_gen` body: one clip, the frame count and rate resolved against the family,
+ * `custom_sigmas` when the family ships a fixed schedule for exactly this many steps (LTX-2 distilled),
+ * VP8 in WebM (the one container the app plays), and the first and last frames when a later workflow
+ * resolves them. Only set keys are sent, like the image body.
+ */
+export declare function buildVidGenRequest(request: VideoGenerateRequest, defaults: DiffusionFamilyDefaults, seed: number, inputs: ResolvedInputs): Record<string, unknown>;
+/** One line for the log: the model's basename and the numeric settings, never a path or a prompt. */
+export declare function commandSummaryForLog(args: readonly string[]): string;