@bastani/atomic 0.9.11-alpha.7 → 0.9.11-alpha.8

package/dist/core/models-store.js

@@ -6,23 +6,14 @@ export class InMemoryCodingAgentModelsStore {
         this.entries = new Map();
     }
     async read(providerId) {
-        const entry = this.entries.get(providerId);
-        return entry === undefined ? undefined : structuredClone(entry);
+        return this.entries.get(providerId);
     }
     async write(providerId, entry) {
-        this.entries.set(providerId, structuredClone(entry));
+        this.entries.set(providerId, entry);
     }
     async delete(providerId) {
         this.entries.delete(providerId);
     }
-    async writeIf(providerId, entry, predicate) {
-        if (predicate())
-            await this.write(providerId, entry);
-    }
-    async deleteIf(providerId, predicate) {
-        if (predicate())
-            await this.delete(providerId);
-    }
 }
 /** Locked JSON-backed storage for dynamically refreshed provider catalogs. */
 export class FileModelsStore {
@@ -51,23 +42,5 @@ export class FileModelsStore {
             return { result: undefined, next: JSON.stringify(current, null, 2) };
         });
     }
-    async writeIf(providerId, entry, predicate) {
-        await this.storage.withLockAsync(async (content) => {
-            if (!predicate())
-                return { result: undefined };
-            const current = this.parse(content);
-            current[providerId] = structuredClone(entry);
-            return { result: undefined, next: JSON.stringify(current, null, 2) };
-        });
-    }
-    async deleteIf(providerId, predicate) {
-        await this.storage.withLockAsync(async (content) => {
-            if (!predicate())
-                return { result: undefined };
-            const current = this.parse(content);
-            delete current[providerId];
-            return { result: undefined, next: JSON.stringify(current, null, 2) };
-        });
-    }
 }
 //# sourceMappingURL=models-store.js.map

package/dist/core/models-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"models-store.js","sourceRoot":"","sources":["../../src/core/models-store.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,sBAAsB,EAA2B,MAAM,4BAA4B,CAAC;AAS7F,MAAM,OAAO,8BAA8B;IAA3C;QACkB,YAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;IAsBhE,CAAC;IApBA,KAAK,CAAC,IAAI,CAAC,UAAkB;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3C,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,UAAkB,EAAE,KAAuB;QACtD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC9B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,UAAkB,EAAE,KAAuB,EAAE,SAAwB;QAClF,IAAI,SAAS,EAAE;YAAE,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,UAAkB,EAAE,SAAwB;QAC1D,IAAI,SAAS,EAAE;YAAE,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC;CACD;AAED,8EAA8E;AAC9E,MAAM,OAAO,eAAe;IAG3B,YAAY,IAAI,GAAW,IAAI,CAAC,WAAW,EAAE,EAAE,mBAAmB,CAAC;QAClE,IAAI,CAAC,OAAO,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IAEO,KAAK,CAAC,OAA2B;QACxC,OAAO,OAAO,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,UAAkB;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC1C,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC;SACxD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,UAAkB,EAAE,KAAuB;QACtD,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YAClD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACpC,OAAO,CAAC,UAAU,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;YAC7C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACtE,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC9B,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YAClD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACpC,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC;YAC3B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACtE,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,UAAkB,EAAE,KAAuB,EAAE,SAAwB;QAClF,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YAClD,IAAI,CAAC,SAAS,EAAE;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACpC,OAAO,CAAC,UAAU,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;YAC7C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACtE,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,UAAkB,EAAE,SAAwB;QAC1D,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YAClD,IAAI,CAAC,SAAS,EAAE;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACpC,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC;YAC3B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACtE,CAAC,CAAC,CAAC;IACJ,CAAC;CACD","sourcesContent":["import type { ModelsStore, ModelsStoreEntry } from \"@earendil-works/pi-ai\";\nimport { join } from \"node:path\";\nimport { getAgentDir } from \"../config.ts\";\nimport { FileAuthStorageBackend, type AuthStorageBackend } from \"./auth-storage-backends.ts\";\n\ntype StoredModels = Record<string, ModelsStoreEntry>;\n\nexport interface CodingAgentModelsStore extends ModelsStore {\n\twriteIf(providerId: string, entry: ModelsStoreEntry, predicate: () => boolean): Promise<void>;\n\tdeleteIf(providerId: string, predicate: () => boolean): Promise<void>;\n}\n\nexport class InMemoryCodingAgentModelsStore implements CodingAgentModelsStore {\n\tprivate readonly entries = new Map<string, ModelsStoreEntry>();\n\n\tasync read(providerId: string): Promise<ModelsStoreEntry | undefined> {\n\t\tconst entry = this.entries.get(providerId);\n\t\treturn entry === undefined ? undefined : structuredClone(entry);\n\t}\n\n\tasync write(providerId: string, entry: ModelsStoreEntry): Promise<void> {\n\t\tthis.entries.set(providerId, structuredClone(entry));\n\t}\n\n\tasync delete(providerId: string): Promise<void> {\n\t\tthis.entries.delete(providerId);\n\t}\n\n\tasync writeIf(providerId: string, entry: ModelsStoreEntry, predicate: () => boolean): Promise<void> {\n\t\tif (predicate()) await this.write(providerId, entry);\n\t}\n\n\tasync deleteIf(providerId: string, predicate: () => boolean): Promise<void> {\n\t\tif (predicate()) await this.delete(providerId);\n\t}\n}\n\n/** Locked JSON-backed storage for dynamically refreshed provider catalogs. */\nexport class FileModelsStore implements CodingAgentModelsStore {\n\tprivate readonly storage: AuthStorageBackend;\n\n\tconstructor(path: string = join(getAgentDir(), \"models-store.json\")) {\n\t\tthis.storage = new FileAuthStorageBackend(path);\n\t}\n\n\tprivate parse(content: string | undefined): StoredModels {\n\t\treturn content ? (JSON.parse(content) as StoredModels) : {};\n\t}\n\n\tasync read(providerId: string): Promise<ModelsStoreEntry | undefined> {\n\t\treturn this.storage.withLock((content) => ({\n\t\t\tresult: structuredClone(this.parse(content)[providerId]),\n\t\t}));\n\t}\n\n\tasync write(providerId: string, entry: ModelsStoreEntry): Promise<void> {\n\t\tawait this.storage.withLockAsync(async (content) => {\n\t\t\tconst current = this.parse(content);\n\t\t\tcurrent[providerId] = structuredClone(entry);\n\t\t\treturn { result: undefined, next: JSON.stringify(current, null, 2) };\n\t\t});\n\t}\n\n\tasync delete(providerId: string): Promise<void> {\n\t\tawait this.storage.withLockAsync(async (content) => {\n\t\t\tconst current = this.parse(content);\n\t\t\tdelete current[providerId];\n\t\t\treturn { result: undefined, next: JSON.stringify(current, null, 2) };\n\t\t});\n\t}\n\n\tasync writeIf(providerId: string, entry: ModelsStoreEntry, predicate: () => boolean): Promise<void> {\n\t\tawait this.storage.withLockAsync(async (content) => {\n\t\t\tif (!predicate()) return { result: undefined };\n\t\t\tconst current = this.parse(content);\n\t\t\tcurrent[providerId] = structuredClone(entry);\n\t\t\treturn { result: undefined, next: JSON.stringify(current, null, 2) };\n\t\t});\n\t}\n\n\tasync deleteIf(providerId: string, predicate: () => boolean): Promise<void> {\n\t\tawait this.storage.withLockAsync(async (content) => {\n\t\t\tif (!predicate()) return { result: undefined };\n\t\t\tconst current = this.parse(content);\n\t\t\tdelete current[providerId];\n\t\t\treturn { result: undefined, next: JSON.stringify(current, null, 2) };\n\t\t});\n\t}\n}\n"]}
+{"version":3,"file":"models-store.js","sourceRoot":"","sources":["../../src/core/models-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAA2B,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAI7F,MAAM,OAAO,8BAA8B;IAA3C;QACkB,YAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;IAahE,CAAC;IAXA,KAAK,CAAC,IAAI,CAAC,UAAkB;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,UAAkB,EAAE,KAAuB;QACtD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC9B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACjC,CAAC;CACD;AAED,8EAA8E;AAC9E,MAAM,OAAO,eAAe;IAG3B,YAAY,IAAI,GAAW,IAAI,CAAC,WAAW,EAAE,EAAE,mBAAmB,CAAC;QAClE,IAAI,CAAC,OAAO,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IAEO,KAAK,CAAC,OAA2B;QACxC,OAAO,OAAO,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,UAAkB;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC1C,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC;SACxD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,UAAkB,EAAE,KAAuB;QACtD,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YAClD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACpC,OAAO,CAAC,UAAU,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;YAC7C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACtE,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC9B,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YAClD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACpC,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC;YAC3B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACtE,CAAC,CAAC,CAAC;IACJ,CAAC;CACD","sourcesContent":["import { join } from \"node:path\";\nimport type { ModelsStore, ModelsStoreEntry } from \"@earendil-works/pi-ai\";\nimport { getAgentDir } from \"../config.ts\";\nimport { type AuthStorageBackend, FileAuthStorageBackend } from \"./auth-storage-backends.ts\";\n\ntype StoredModels = Record<string, ModelsStoreEntry>;\n\nexport class InMemoryCodingAgentModelsStore implements ModelsStore {\n\tprivate readonly entries = new Map<string, ModelsStoreEntry>();\n\n\tasync read(providerId: string): Promise<ModelsStoreEntry | undefined> {\n\t\treturn this.entries.get(providerId);\n\t}\n\n\tasync write(providerId: string, entry: ModelsStoreEntry): Promise<void> {\n\t\tthis.entries.set(providerId, entry);\n\t}\n\n\tasync delete(providerId: string): Promise<void> {\n\t\tthis.entries.delete(providerId);\n\t}\n}\n\n/** Locked JSON-backed storage for dynamically refreshed provider catalogs. */\nexport class FileModelsStore implements ModelsStore {\n\tprivate readonly storage: AuthStorageBackend;\n\n\tconstructor(path: string = join(getAgentDir(), \"models-store.json\")) {\n\t\tthis.storage = new FileAuthStorageBackend(path);\n\t}\n\n\tprivate parse(content: string | undefined): StoredModels {\n\t\treturn content ? (JSON.parse(content) as StoredModels) : {};\n\t}\n\n\tasync read(providerId: string): Promise<ModelsStoreEntry | undefined> {\n\t\treturn this.storage.withLock((content) => ({\n\t\t\tresult: structuredClone(this.parse(content)[providerId]),\n\t\t}));\n\t}\n\n\tasync write(providerId: string, entry: ModelsStoreEntry): Promise<void> {\n\t\tawait this.storage.withLockAsync(async (content) => {\n\t\t\tconst current = this.parse(content);\n\t\t\tcurrent[providerId] = structuredClone(entry);\n\t\t\treturn { result: undefined, next: JSON.stringify(current, null, 2) };\n\t\t});\n\t}\n\n\tasync delete(providerId: string): Promise<void> {\n\t\tawait this.storage.withLockAsync(async (content) => {\n\t\t\tconst current = this.parse(content);\n\t\t\tdelete current[providerId];\n\t\t\treturn { result: undefined, next: JSON.stringify(current, null, 2) };\n\t\t});\n\t}\n}\n"]}

package/dist/core/oauth-login.d.ts

@@ -0,0 +1,24 @@
+import type { AuthInfoLink, AuthInteraction, OAuthLoginCallbacks } from "@earendil-works/pi-ai";
+export interface AtomicOAuthLoginCallbacks extends OAuthLoginCallbacks {
+    onManualCodeCancel?(): void;
+    onInfo?(message: string, links: readonly AuthInfoLink[]): void;
+}
+/** JSON-safe provider-owned OAuth metadata transported across isolated-engine boundaries. */
+export interface OAuthProviderMetadata {
+    id: string;
+    name: string;
+    loginLabel?: string;
+    usesCallbackServer?: boolean;
+}
+/** Marks failures after credential acquisition so presentation never mistakes nested AbortErrors for cancellation. */
+export declare class OAuthLoginTransactionError extends Error {
+    constructor(cause: unknown);
+}
+export declare function isOAuthLoginCancelled(error: unknown, signal?: AbortSignal, options?: {
+    includeActiveSignal?: boolean;
+}): boolean;
+export declare function normalizeOAuthLoginError(error: unknown, signal?: AbortSignal, options?: {
+    includeActiveSignal?: boolean;
+}): unknown;
+export declare function createAuthInteraction(callbacks: AtomicOAuthLoginCallbacks): AuthInteraction;
+//# sourceMappingURL=oauth-login.d.ts.map

package/dist/core/oauth-login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-login.d.ts","sourceRoot":"","sources":["../../src/core/oauth-login.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAEhG,MAAM,WAAW,yBAA0B,SAAQ,mBAAmB;IACrE,kBAAkB,CAAC,IAAI,IAAI,CAAC;IAC5B,MAAM,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,YAAY,EAAE,GAAG,IAAI,CAAC;CAC/D;AAED,6FAA6F;AAC7F,MAAM,WAAW,qBAAqB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,sHAAsH;AACtH,qBAAa,0BAA2B,SAAQ,KAAK;IACpD,YAAY,KAAK,EAAE,OAAO,EAGzB;CACD;AAED,wBAAgB,qBAAqB,CACpC,KAAK,EAAE,OAAO,EACd,MAAM,CAAC,EAAE,WAAW,EACpB,OAAO,GAAE;IAAE,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7C,OAAO,CAiBT;AAED,wBAAgB,wBAAwB,CACvC,KAAK,EAAE,OAAO,EACd,MAAM,CAAC,EAAE,WAAW,EACpB,OAAO,CAAC,EAAE;IAAE,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAAE,GACzC,OAAO,CAIT;AAkBD,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,yBAAyB,GAAG,eAAe,CAsB3F"}

package/dist/core/oauth-login.js

@@ -0,0 +1,87 @@
+/** Marks failures after credential acquisition so presentation never mistakes nested AbortErrors for cancellation. */
+export class OAuthLoginTransactionError extends Error {
+    constructor(cause) {
+        super(cause instanceof Error ? cause.message : String(cause), { cause });
+        this.name = "OAuthLoginTransactionError";
+    }
+}
+export function isOAuthLoginCancelled(error, signal, options = {}) {
+    if (error instanceof OAuthLoginTransactionError)
+        return false;
+    if (options.includeActiveSignal !== false && signal?.aborted)
+        return true;
+    const reason = signal?.reason;
+    const seen = new Set();
+    let current = error;
+    while (current !== undefined && current !== null) {
+        if (current === reason && reason !== undefined)
+            return true;
+        if (current === "Login cancelled")
+            return true;
+        if (typeof current !== "object")
+            return false;
+        if (seen.has(current))
+            return false;
+        seen.add(current);
+        const candidate = current;
+        if (candidate.name === "AbortError" || candidate.message === "Login cancelled")
+            return true;
+        current = candidate.cause;
+    }
+    return false;
+}
+export function normalizeOAuthLoginError(error, signal, options) {
+    if (error instanceof Error && error.message === "Login cancelled" && error.cause !== undefined)
+        return error;
+    if (!isOAuthLoginCancelled(error, signal, options))
+        return error;
+    return new Error("Login cancelled", { cause: error });
+}
+function abortable(promise, signal, onAbort) {
+    if (!signal)
+        return promise;
+    if (signal.aborted) {
+        onAbort?.();
+        return Promise.reject(signal.reason ?? new Error("Authentication prompt cancelled"));
+    }
+    return new Promise((resolve, reject) => {
+        const abort = () => {
+            onAbort?.();
+            reject(signal.reason ?? new Error("Authentication prompt cancelled"));
+        };
+        signal.addEventListener("abort", abort, { once: true });
+        promise.then(resolve, reject).finally(() => signal.removeEventListener("abort", abort));
+    });
+}
+export function createAuthInteraction(callbacks) {
+    return {
+        signal: callbacks.signal,
+        prompt: async (prompt) => {
+            switch (prompt.type) {
+                case "select":
+                    return (await callbacks.onSelect({ message: prompt.message, options: prompt.options.map(({ id, label }) => ({ id, label })) })) ?? "";
+                case "manual_code":
+                    return abortable(callbacks.onManualCodeInput ? callbacks.onManualCodeInput() : callbacks.onPrompt({ message: prompt.message, placeholder: prompt.placeholder }), prompt.signal, callbacks.onManualCodeCancel);
+                default:
+                    return callbacks.onPrompt({ message: prompt.message, placeholder: prompt.placeholder });
+            }
+        },
+        notify: (event) => {
+            switch (event.type) {
+                case "auth_url":
+                    callbacks.onAuth({ url: event.url, instructions: event.instructions });
+                    break;
+                case "device_code":
+                    callbacks.onDeviceCode(event);
+                    break;
+                case "progress":
+                    callbacks.onProgress?.(event.message);
+                    break;
+                case "info":
+                    callbacks.onInfo?.(event.message, event.links ?? []);
+                    break;
+            }
+        },
+    };
+}
+//# sourceMappingURL=oauth-login.js.map

package/dist/core/oauth-login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-login.js","sourceRoot":"","sources":["../../src/core/oauth-login.ts"],"names":[],"mappings":"AAeA,sHAAsH;AACtH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACpD,YAAY,KAAc;QACzB,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC1C,CAAC;CACD;AAED,MAAM,UAAU,qBAAqB,CACpC,KAAc,EACd,MAAoB,EACpB,OAAO,GAAsC,EAAE;IAE/C,IAAI,KAAK,YAAY,0BAA0B;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,OAAO,CAAC,mBAAmB,KAAK,KAAK,IAAI,MAAM,EAAE,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1E,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,OAAO,GAAY,KAAK,CAAC;IAC7B,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAClD,IAAI,OAAO,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAC5D,IAAI,OAAO,KAAK,iBAAiB;YAAE,OAAO,IAAI,CAAC;QAC/C,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC9C,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QACpC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClB,MAAM,SAAS,GAAG,OAAiE,CAAC;QACpF,IAAI,SAAS,CAAC,IAAI,KAAK,YAAY,IAAI,SAAS,CAAC,OAAO,KAAK,iBAAiB;YAAE,OAAO,IAAI,CAAC;QAC5F,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC;IAC3B,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,UAAU,wBAAwB,CACvC,KAAc,EACd,MAAoB,EACpB,OAA2C;IAE3C,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,iBAAiB,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7G,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACjE,OAAO,IAAI,KAAK,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,SAAS,CAAI,OAAmB,EAAE,MAA+B,EAAE,OAAoB;IAC/F,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACzC,MAAM,KAAK,GAAG,GAAG,EAAE;YAClB,OAAO,EAAE,EAAE,CAAC;YACZ,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,SAAoC;IACzE,OAAO;QACN,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACxB,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;gBACrB,KAAK,QAAQ;oBACZ,OAAO,CAAC,MAAM,SAAS,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACvI,KAAK,aAAa;oBACjB,OAAO,SAAS,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,kBAAkB,CAAC,CAAC;gBAC/M;oBACC,OAAO,SAAS,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YAC1F,CAAC;QACF,CAAC;QACD,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACjB,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;gBACpB,KAAK,UAAU;oBAAE,SAAS,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;oBAAC,MAAM;gBAC/F,KAAK,aAAa;oBAAE,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;oBAAC,MAAM;gBACzD,KAAK,UAAU;oBAAE,SAAS,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBAAC,MAAM;gBAC9D,KAAK,MAAM;oBAAE,SAAS,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;oBAAC,MAAM;YAC1E,CAAC;QACF,CAAC;KACD,CAAC;AACH,CAAC","sourcesContent":["import type { AuthInfoLink, AuthInteraction, OAuthLoginCallbacks } from \"@earendil-works/pi-ai\";\n\nexport interface AtomicOAuthLoginCallbacks extends OAuthLoginCallbacks {\n\tonManualCodeCancel?(): void;\n\tonInfo?(message: string, links: readonly AuthInfoLink[]): void;\n}\n\n/** JSON-safe provider-owned OAuth metadata transported across isolated-engine boundaries. */\nexport interface OAuthProviderMetadata {\n\tid: string;\n\tname: string;\n\tloginLabel?: string;\n\tusesCallbackServer?: boolean;\n}\n\n/** Marks failures after credential acquisition so presentation never mistakes nested AbortErrors for cancellation. */\nexport class OAuthLoginTransactionError extends Error {\n\tconstructor(cause: unknown) {\n\t\tsuper(cause instanceof Error ? cause.message : String(cause), { cause });\n\t\tthis.name = \"OAuthLoginTransactionError\";\n\t}\n}\n\nexport function isOAuthLoginCancelled(\n\terror: unknown,\n\tsignal?: AbortSignal,\n\toptions: { includeActiveSignal?: boolean } = {},\n): boolean {\n\tif (error instanceof OAuthLoginTransactionError) return false;\n\tif (options.includeActiveSignal !== false && signal?.aborted) return true;\n\tconst reason = signal?.reason;\n\tconst seen = new Set<object>();\n\tlet current: unknown = error;\n\twhile (current !== undefined && current !== null) {\n\t\tif (current === reason && reason !== undefined) return true;\n\t\tif (current === \"Login cancelled\") return true;\n\t\tif (typeof current !== \"object\") return false;\n\t\tif (seen.has(current)) return false;\n\t\tseen.add(current);\n\t\tconst candidate = current as { name?: unknown; message?: unknown; cause?: unknown };\n\t\tif (candidate.name === \"AbortError\" || candidate.message === \"Login cancelled\") return true;\n\t\tcurrent = candidate.cause;\n\t}\n\treturn false;\n}\n\nexport function normalizeOAuthLoginError(\n\terror: unknown,\n\tsignal?: AbortSignal,\n\toptions?: { includeActiveSignal?: boolean },\n): unknown {\n\tif (error instanceof Error && error.message === \"Login cancelled\" && error.cause !== undefined) return error;\n\tif (!isOAuthLoginCancelled(error, signal, options)) return error;\n\treturn new Error(\"Login cancelled\", { cause: error });\n}\n\nfunction abortable<T>(promise: Promise<T>, signal: AbortSignal | undefined, onAbort?: () => void): Promise<T> {\n\tif (!signal) return promise;\n\tif (signal.aborted) {\n\t\tonAbort?.();\n\t\treturn Promise.reject(signal.reason ?? new Error(\"Authentication prompt cancelled\"));\n\t}\n\treturn new Promise<T>((resolve, reject) => {\n\t\tconst abort = () => {\n\t\t\tonAbort?.();\n\t\t\treject(signal.reason ?? new Error(\"Authentication prompt cancelled\"));\n\t\t};\n\t\tsignal.addEventListener(\"abort\", abort, { once: true });\n\t\tpromise.then(resolve, reject).finally(() => signal.removeEventListener(\"abort\", abort));\n\t});\n}\n\nexport function createAuthInteraction(callbacks: AtomicOAuthLoginCallbacks): AuthInteraction {\n\treturn {\n\t\tsignal: callbacks.signal,\n\t\tprompt: async (prompt) => {\n\t\t\tswitch (prompt.type) {\n\t\t\t\tcase \"select\":\n\t\t\t\t\treturn (await callbacks.onSelect({ message: prompt.message, options: prompt.options.map(({ id, label }) => ({ id, label })) })) ?? \"\";\n\t\t\t\tcase \"manual_code\":\n\t\t\t\t\treturn abortable(callbacks.onManualCodeInput ? callbacks.onManualCodeInput() : callbacks.onPrompt({ message: prompt.message, placeholder: prompt.placeholder }), prompt.signal, callbacks.onManualCodeCancel);\n\t\t\t\tdefault:\n\t\t\t\t\treturn callbacks.onPrompt({ message: prompt.message, placeholder: prompt.placeholder });\n\t\t\t}\n\t\t},\n\t\tnotify: (event) => {\n\t\t\tswitch (event.type) {\n\t\t\t\tcase \"auth_url\": callbacks.onAuth({ url: event.url, instructions: event.instructions }); break;\n\t\t\t\tcase \"device_code\": callbacks.onDeviceCode(event); break;\n\t\t\t\tcase \"progress\": callbacks.onProgress?.(event.message); break;\n\t\t\t\tcase \"info\": callbacks.onInfo?.(event.message, event.links ?? []); break;\n\t\t\t}\n\t\t},\n\t};\n}\n"]}

package/dist/core/oauth-provider-metadata.d.ts

@@ -0,0 +1,5 @@
+import type { Provider } from "@earendil-works/pi-ai";
+import type { OAuthProviderMetadata } from "./oauth-login.ts";
+import type { ProviderConfigInput } from "./provider-composer.ts";
+export declare function collectOAuthProviderMetadata(providers: readonly Provider[], extensions: ReadonlyMap<string, ProviderConfigInput>): OAuthProviderMetadata[];
+//# sourceMappingURL=oauth-provider-metadata.d.ts.map

package/dist/core/oauth-provider-metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-provider-metadata.d.ts","sourceRoot":"","sources":["../../src/core/oauth-provider-metadata.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAIlE,wBAAgB,4BAA4B,CAC3C,SAAS,EAAE,SAAS,QAAQ,EAAE,EAC9B,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,mBAAmB,CAAC,GAClD,qBAAqB,EAAE,CAgBzB"}

package/dist/core/oauth-provider-metadata.js

@@ -0,0 +1,19 @@
+const CALLBACK_SERVER_PROVIDERS = new Set(["anthropic", "openai-codex"]);
+export function collectOAuthProviderMetadata(providers, extensions) {
+    return providers.filter((provider) => provider.auth.oauth).map((provider) => {
+        const providerOAuth = provider.auth.oauth;
+        const extensionOAuth = extensions.get(provider.id)?.oauth;
+        const loginLabel = extensionOAuth?.loginLabel ?? providerOAuth?.loginLabel;
+        const hasCallbackServerMetadata = extensionOAuth?.usesCallbackServer !== undefined
+            || CALLBACK_SERVER_PROVIDERS.has(provider.id);
+        const usesCallbackServer = extensionOAuth?.usesCallbackServer
+            ?? CALLBACK_SERVER_PROVIDERS.has(provider.id);
+        return {
+            id: provider.id,
+            name: provider.name ?? provider.id,
+            ...(loginLabel ? { loginLabel } : {}),
+            ...(hasCallbackServerMetadata ? { usesCallbackServer } : {}),
+        };
+    });
+}
+//# sourceMappingURL=oauth-provider-metadata.js.map

package/dist/core/oauth-provider-metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-provider-metadata.js","sourceRoot":"","sources":["../../src/core/oauth-provider-metadata.ts"],"names":[],"mappings":"AAIA,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;AAEzE,MAAM,UAAU,4BAA4B,CAC3C,SAA8B,EAC9B,UAAoD;IAEpD,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC3E,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1C,MAAM,cAAc,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC;QAC1D,MAAM,UAAU,GAAG,cAAc,EAAE,UAAU,IAAI,aAAa,EAAE,UAAU,CAAC;QAC3E,MAAM,yBAAyB,GAAG,cAAc,EAAE,kBAAkB,KAAK,SAAS;eAC9E,yBAAyB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC/C,MAAM,kBAAkB,GAAG,cAAc,EAAE,kBAAkB;eACzD,yBAAyB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC/C,OAAO;YACN,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,EAAE;YAClC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import type { Provider } from \"@earendil-works/pi-ai\";\nimport type { OAuthProviderMetadata } from \"./oauth-login.ts\";\nimport type { ProviderConfigInput } from \"./provider-composer.ts\";\n\nconst CALLBACK_SERVER_PROVIDERS = new Set([\"anthropic\", \"openai-codex\"]);\n\nexport function collectOAuthProviderMetadata(\n\tproviders: readonly Provider[],\n\textensions: ReadonlyMap<string, ProviderConfigInput>,\n): OAuthProviderMetadata[] {\n\treturn providers.filter((provider) => provider.auth.oauth).map((provider) => {\n\t\tconst providerOAuth = provider.auth.oauth;\n\t\tconst extensionOAuth = extensions.get(provider.id)?.oauth;\n\t\tconst loginLabel = extensionOAuth?.loginLabel ?? providerOAuth?.loginLabel;\n\t\tconst hasCallbackServerMetadata = extensionOAuth?.usesCallbackServer !== undefined\n\t\t\t|| CALLBACK_SERVER_PROVIDERS.has(provider.id);\n\t\tconst usesCallbackServer = extensionOAuth?.usesCallbackServer\n\t\t\t?? CALLBACK_SERVER_PROVIDERS.has(provider.id);\n\t\treturn {\n\t\t\tid: provider.id,\n\t\t\tname: provider.name ?? provider.id,\n\t\t\t...(loginLabel ? { loginLabel } : {}),\n\t\t\t...(hasCallbackServerMetadata ? { usesCallbackServer } : {}),\n\t\t};\n\t});\n}\n"]}

package/dist/core/provider-composer-internal.d.ts

@@ -0,0 +1,53 @@
+import { type Api, type ApiKeyAuth, type AssistantMessageEventStream, type Context, type Model, type OAuthAuth, type OAuthCredentials, type OAuthLoginCallbacks, type Provider, type RefreshModelsContext, type SimpleStreamOptions } from "@earendil-works/pi-ai";
+import type { ModelsJsonModelOverride, ModelsJsonProvider } from "./model-config.ts";
+import { clearConfigValueCache } from "./resolve-config-value.ts";
+export interface ExtensionOAuthConfig {
+    name: string;
+    loginLabel?: string;
+    usesCallbackServer?: boolean;
+    login(callbacks: OAuthLoginCallbacks): Promise<OAuthCredentials>;
+    refreshToken(credentials: OAuthCredentials): Promise<OAuthCredentials>;
+    getApiKey(credentials: OAuthCredentials): string;
+    modifyModels?(models: Model<Api>[], credentials: OAuthCredentials): Model<Api>[];
+}
+/** Input type for the extension registerProvider API. */
+export interface ProviderConfigInput {
+    name?: string;
+    baseUrl?: string;
+    apiKey?: string;
+    api?: Api;
+    streamSimple?: (model: Model<Api>, context: Context, options?: SimpleStreamOptions) => AssistantMessageEventStream;
+    headers?: Record<string, string>;
+    authHeader?: boolean;
+    oauth?: ExtensionOAuthConfig;
+    models?: Array<{
+        id: string;
+        name: string;
+        api?: Api;
+        baseUrl?: string;
+        reasoning: boolean;
+        thinkingLevelMap?: Model<Api>["thinkingLevelMap"];
+        input: ("text" | "image")[];
+        cost: Model<Api>["cost"];
+        contextWindow: number;
+        maxTokens: number;
+        headers?: Record<string, string>;
+        compat?: Model<Api>["compat"];
+    }>;
+    refreshModels?(context: RefreshModelsContext): Promise<NonNullable<ProviderConfigInput["models"]>>;
+}
+export type AuthStatus = {
+    configured: boolean;
+    source?: "stored" | "runtime" | "environment" | "fallback" | "models_json_key" | "models_json_command";
+    label?: string;
+};
+export declare const clearApiKeyCache: typeof clearConfigValueCache;
+export declare function applyModelOverride(model: Model<Api>, override: ModelsJsonModelOverride): Model<Api>;
+export declare function applyModelsJson(providerId: string, baseModels: readonly Model<Api>[], config: ModelsJsonProvider | undefined): Model<Api>[];
+export declare function applyExtension(providerId: string, models: readonly Model<Api>[], config: ProviderConfigInput | undefined): Model<Api>[];
+export declare function configuredApiKey(config: ModelsJsonProvider | undefined, extension: ProviderConfigInput | undefined): string | undefined;
+export declare function configuredHeaders(config: ModelsJsonProvider | undefined, extension: ProviderConfigInput | undefined): Record<string, string> | undefined;
+export declare function composeApiKeyAuth(providerId: string, base: Provider | undefined, config: ModelsJsonProvider | undefined, extension: ProviderConfigInput | undefined): ApiKeyAuth | undefined;
+export declare function composeOAuthAuth(providerId: string, base: Provider | undefined, config: ModelsJsonProvider | undefined, extension: ProviderConfigInput | undefined): OAuthAuth | undefined;
+export declare function rawModelHeaders(model: Model<Api>, config: ModelsJsonProvider | undefined, extension: ProviderConfigInput | undefined): Record<string, string> | undefined;
+//# sourceMappingURL=provider-composer-internal.d.ts.map

package/dist/core/provider-composer-internal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-composer-internal.d.ts","sourceRoot":"","sources":["../../src/core/provider-composer-internal.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,KAAK,GAAG,EACR,KAAK,UAAU,EACf,KAAK,2BAA2B,EAIhC,KAAK,OAAO,EACZ,KAAK,KAAK,EAEV,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,QAAQ,EAEb,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAmB,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACtG,OAAO,EACN,qBAAqB,EAKrB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,WAAW,oBAAoB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,KAAK,CAAC,SAAS,EAAE,mBAAmB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACjE,YAAY,CAAC,WAAW,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACvE,SAAS,CAAC,WAAW,EAAE,gBAAgB,GAAG,MAAM,CAAC;IACjD,YAAY,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,EAAE,gBAAgB,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;CACjF;AAED,yDAAyD;AACzD,MAAM,WAAW,mBAAmB;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,GAAG,CAAC;IACV,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,mBAAmB,KAAK,2BAA2B,CAAC;IACnH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,KAAK,CAAC,EAAE,oBAAoB,CAAC;IAC7B,MAAM,CAAC,EAAE,KAAK,CAAC;QACd,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,GAAG,CAAC;QACV,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,OAAO,CAAC;QACnB,gBAAgB,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAClD,KAAK,EAAE,CAAC,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC;QAC5B,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;QACzB,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,MAAM,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;KAC9B,CAAC,CAAC;IACH,aAAa,CAAC,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,WAAW,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;CACnG;AAED,MAAM,MAAM,UAAU,GAAG;IACxB,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,aAAa,GAAG,UAAU,GAAG,iBAAiB,GAAG,qBAAqB,CAAC;IACvG,KAAK,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,eAAO,MAAM,gBAAgB,8BAAwB,CAAC;AAwBtD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,uBAAuB,GAAG,KAAK,CAAC,GAAG,CAAC,CAsBnG;AAuCD,wBAAgB,eAAe,CAC9B,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,SAAS,KAAK,CAAC,GAAG,CAAC,EAAE,EACjC,MAAM,EAAE,kBAAkB,GAAG,SAAS,GACpC,KAAK,CAAC,GAAG,CAAC,EAAE,CAkCd;AAED,wBAAgB,cAAc,CAC7B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,SAAS,KAAK,CAAC,GAAG,CAAC,EAAE,EAC7B,MAAM,EAAE,mBAAmB,GAAG,SAAS,GACrC,KAAK,CAAC,GAAG,CAAC,EAAE,CAuBd;AAwCD,wBAAgB,gBAAgB,CAC/B,MAAM,EAAE,kBAAkB,GAAG,SAAS,EACtC,SAAS,EAAE,mBAAmB,GAAG,SAAS,GACxC,MAAM,GAAG,SAAS,CAEpB;AAED,wBAAgB,iBAAiB,CAChC,MAAM,EAAE,kBAAkB,GAAG,SAAS,EACtC,SAAS,EAAE,mBAAmB,GAAG,SAAS,GACxC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAGpC;AAgBD,wBAAgB,iBAAiB,CAChC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,QAAQ,GAAG,SAAS,EAC1B,MAAM,EAAE,kBAAkB,GAAG,SAAS,EACtC,SAAS,EAAE,mBAAmB,GAAG,SAAS,GACxC,UAAU,GAAG,SAAS,CA2DxB;AAED,wBAAgB,gBAAgB,CAC/B,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,QAAQ,GAAG,SAAS,EAC1B,MAAM,EAAE,kBAAkB,GAAG,SAAS,EACtC,SAAS,EAAE,mBAAmB,GAAG,SAAS,GACxC,SAAS,GAAG,SAAS,CAkBvB;AAED,wBAAgB,eAAe,CAC9B,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EACjB,MAAM,EAAE,kBAAkB,GAAG,SAAS,EACtC,SAAS,EAAE,mBAAmB,GAAG,SAAS,GACxC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CASpC"}

package/dist/core/provider-composer-internal.js

@@ -0,0 +1,273 @@
+import { clearConfigValueCache, getConfigValueEnvVarNames, isCommandConfigValue, resolveConfigValueOrThrow, resolveHeadersOrThrow, } from "./resolve-config-value.js";
+export const clearApiKeyCache = clearConfigValueCache;
+function mergeCompat(base, override) {
+    if (!override)
+        return base;
+    const merged = { ...base, ...override };
+    const baseNested = base;
+    const overrideNested = override;
+    const mergedNested = merged;
+    for (const key of ["openRouterRouting", "vercelGatewayRouting", "chatTemplateKwargs"]) {
+        const baseValue = baseNested?.[key];
+        const overrideValue = overrideNested[key];
+        if ((typeof baseValue === "object" && baseValue !== null) ||
+            (typeof overrideValue === "object" && overrideValue !== null)) {
+            mergedNested[key] = { ...baseValue, ...overrideValue };
+        }
+    }
+    return merged;
+}
+export function applyModelOverride(model, override) {
+    return {
+        ...model,
+        name: override.name ?? model.name,
+        reasoning: override.reasoning ?? model.reasoning,
+        thinkingLevelMap: override.thinkingLevelMap
+            ? { ...model.thinkingLevelMap, ...override.thinkingLevelMap }
+            : model.thinkingLevelMap,
+        input: override.input ?? model.input,
+        cost: override.cost
+            ? {
+                input: override.cost.input ?? model.cost.input,
+                output: override.cost.output ?? model.cost.output,
+                cacheRead: override.cost.cacheRead ?? model.cost.cacheRead,
+                cacheWrite: override.cost.cacheWrite ?? model.cost.cacheWrite,
+                tiers: override.cost.tiers ?? model.cost.tiers,
+            }
+            : model.cost,
+        contextWindow: override.contextWindow ?? model.contextWindow,
+        maxTokens: override.maxTokens ?? model.maxTokens,
+        compat: mergeCompat(model.compat, override.compat),
+    };
+}
+function modelFromJson(providerId, definition, providerConfig, defaults) {
+    const api = definition.api ?? providerConfig.api ?? defaults?.api;
+    if (!api) {
+        throw new Error(`Provider ${providerId}, model ${definition.id}: no "api" specified. Set at provider or model level.`);
+    }
+    const baseUrl = definition.baseUrl ?? providerConfig.baseUrl ?? defaults?.baseUrl;
+    if (!baseUrl)
+        throw new Error(`Provider ${providerId}: "baseUrl" is required when defining custom models.`);
+    if (definition.contextWindow !== undefined && definition.contextWindow <= 0) {
+        throw new Error(`Provider ${providerId}, model ${definition.id}: invalid contextWindow`);
+    }
+    if (definition.maxTokens !== undefined && definition.maxTokens <= 0) {
+        throw new Error(`Provider ${providerId}, model ${definition.id}: invalid maxTokens`);
+    }
+    return {
+        id: definition.id,
+        name: definition.name ?? definition.id,
+        api: api,
+        provider: providerId,
+        baseUrl,
+        reasoning: definition.reasoning ?? false,
+        thinkingLevelMap: definition.thinkingLevelMap,
+        input: (definition.input ?? ["text"]),
+        cost: definition.cost ?? { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
+        contextWindow: definition.contextWindow ?? 128000,
+        maxTokens: definition.maxTokens ?? 16384,
+        headers: undefined,
+        compat: mergeCompat(providerConfig.compat, definition.compat),
+    };
+}
+export function applyModelsJson(providerId, baseModels, config) {
+    if (!config)
+        return [...baseModels];
+    if (config.oauth && !config.baseUrl) {
+        throw new Error(`Provider ${providerId}: "baseUrl" is required when "oauth" is set.`);
+    }
+    const hasOverrides = config.modelOverrides && Object.keys(config.modelOverrides).length > 0;
+    if (!config.models?.length &&
+        !config.baseUrl &&
+        !config.headers &&
+        !config.compat &&
+        !hasOverrides &&
+        !config.apiKey &&
+        !config.oauth &&
+        config.authHeader === undefined) {
+        throw new Error(`Provider ${providerId}: must specify "baseUrl", "headers", "compat", "modelOverrides", or "models".`);
+    }
+    const models = baseModels.map((model) => ({
+        ...model,
+        baseUrl: config.oauth === "radius" ? model.baseUrl : (config.baseUrl ?? model.baseUrl),
+        compat: mergeCompat(model.compat, config.compat),
+    }));
+    for (const definition of config.models ?? []) {
+        const existingIndex = models.findIndex((model) => model.id === definition.id);
+        const defaults = existingIndex >= 0 ? models[existingIndex] : models[0];
+        const model = modelFromJson(providerId, definition, config, defaults);
+        if (existingIndex >= 0)
+            models[existingIndex] = model;
+        else
+            models.push(model);
+    }
+    return models;
+}
+export function applyExtension(providerId, models, config) {
+    if (!config)
+        return [...models];
+    if (!config.models) {
+        return config.baseUrl ? models.map((model) => ({ ...model, baseUrl: config.baseUrl })) : [...models];
+    }
+    return config.models.map((definition) => {
+        const defaults = models.find((model) => model.id === definition.id) ?? models[0];
+        const api = definition.api ?? config.api ?? defaults?.api;
+        if (!api) {
+            throw new Error(`Provider ${providerId}, model ${definition.id}: no "api" specified. Set at provider or model level.`);
+        }
+        const baseUrl = definition.baseUrl ?? config.baseUrl ?? defaults?.baseUrl;
+        if (!baseUrl)
+            throw new Error(`Provider ${providerId}: "baseUrl" is required when defining custom models.`);
+        return {
+            ...definition,
+            api,
+            provider: providerId,
+            baseUrl,
+            headers: undefined,
+        };
+    });
+}
+function adaptOAuth(config) {
+    return {
+        name: config.name,
+        login: async (callbacks) => {
+            const legacyCallbacks = {
+                onAuth: (info) => callbacks.notify({ type: "auth_url", ...info }),
+                onDeviceCode: (info) => callbacks.notify({ type: "device_code", ...info }),
+                onPrompt: (prompt) => callbacks.prompt({ type: "text", ...prompt }),
+                onProgress: (message) => callbacks.notify({ type: "progress", message }),
+                onInfo: (message, links) => callbacks.notify({ type: "info", message, links }),
+                onManualCodeInput: () => callbacks.prompt({ type: "manual_code", message: "Paste the authorization code" }),
+                onSelect: (prompt) => callbacks.prompt({ type: "select", ...prompt }),
+                signal: callbacks.signal,
+            };
+            const credential = await config.login(legacyCallbacks);
+            return { ...credential, type: "oauth" };
+        },
+        refresh: async (credential) => ({ ...(await config.refreshToken(credential)), type: "oauth" }),
+        toAuth: async (credential) => ({ apiKey: config.getApiKey(credential) }),
+    };
+}
+function withConfiguredAuth(auth, headers, authHeader) {
+    let mergedHeaders = auth.headers || headers ? { ...auth.headers, ...headers } : undefined;
+    if (authHeader) {
+        if (!auth.apiKey)
+            throw new Error("authHeader requires a resolved API key");
+        mergedHeaders = { ...mergedHeaders, Authorization: `Bearer ${auth.apiKey}` };
+    }
+    return { ...auth, headers: mergedHeaders };
+}
+export function configuredApiKey(config, extension) {
+    return extension?.apiKey ?? config?.apiKey;
+}
+export function configuredHeaders(config, extension) {
+    if (!config?.headers && !extension?.headers)
+        return undefined;
+    return { ...config?.headers, ...extension?.headers };
+}
+async function configContextEnv(values, ctx, explicit) {
+    const env = { ...explicit };
+    for (const name of new Set(values.flatMap(getConfigValueEnvVarNames))) {
+        if (env[name] !== undefined)
+            continue;
+        const value = await ctx.env(name);
+        if (value !== undefined)
+            env[name] = value;
+    }
+    return Object.keys(env).length > 0 ? env : undefined;
+}
+export function composeApiKeyAuth(providerId, base, config, extension) {
+    const inherited = base?.auth.apiKey;
+    const rawKey = configuredApiKey(config, extension);
+    const oauth = extension?.oauth ?? base?.auth.oauth;
+    // OAuth-only providers get no fabricated API-key login method.
+    if (!inherited && rawKey === undefined && oauth)
+        return undefined;
+    const rawHeaders = configuredHeaders(config, extension);
+    const authHeader = extension?.authHeader ?? config?.authHeader ?? false;
+    return {
+        name: inherited?.name ?? "API key",
+        login: inherited?.login ??
+            (async (interaction) => ({
+                type: "api_key",
+                key: await interaction.prompt({ type: "secret", message: "Enter API key" }),
+            })),
+        check: async (input) => {
+            if (input.credential) {
+                if (inherited?.check)
+                    return inherited.check(input);
+                if (input.credential.key)
+                    return { type: "api_key", source: "stored credential" };
+                const resolved = await inherited?.resolve(input);
+                return resolved ? { type: "api_key", source: resolved.source } : undefined;
+            }
+            if (rawKey !== undefined) {
+                if (isCommandConfigValue(rawKey))
+                    return { type: "api_key", source: "configured API key" };
+                const envNames = getConfigValueEnvVarNames(rawKey);
+                for (const name of envNames) {
+                    if ((await input.ctx.env(name)) === undefined)
+                        return undefined;
+                }
+                return { type: "api_key", source: "configured API key" };
+            }
+            if (inherited?.check)
+                return inherited.check(input);
+            const resolved = await inherited?.resolve(input);
+            return resolved ? { type: "api_key", source: resolved.source } : undefined;
+        },
+        resolve: async (input) => {
+            let result;
+            if (input.credential) {
+                result = inherited
+                    ? await inherited.resolve(input)
+                    : input.credential.key
+                        ? { auth: { apiKey: input.credential.key }, env: input.credential.env, source: "stored credential" }
+                        : undefined;
+            }
+            else if (rawKey !== undefined) {
+                const env = await configContextEnv([rawKey], input.ctx);
+                const key = resolveConfigValueOrThrow(rawKey, `API key for provider "${providerId}"`, env);
+                result = inherited
+                    ? await inherited.resolve({ ...input, credential: { type: "api_key", key } })
+                    : { auth: { apiKey: key }, source: "configured API key" };
+            }
+            else {
+                result = await inherited?.resolve(input);
+            }
+            if (!result)
+                return undefined;
+            const explicitEnv = { ...(input.credential?.env ?? {}), ...(result.env ?? {}) };
+            const headerEnv = await configContextEnv(Object.values(rawHeaders ?? {}), input.ctx, explicitEnv);
+            const headers = resolveHeadersOrThrow(rawHeaders, `provider "${providerId}"`, headerEnv);
+            return { ...result, auth: withConfiguredAuth(result.auth, headers, authHeader) };
+        },
+    };
+}
+export function composeOAuthAuth(providerId, base, config, extension) {
+    const oauth = extension?.oauth ? adaptOAuth(extension.oauth) : base?.auth.oauth;
+    if (!oauth)
+        return undefined;
+    const rawHeaders = configuredHeaders(config, extension);
+    const authHeader = extension?.authHeader ?? config?.authHeader ?? false;
+    return {
+        ...oauth,
+        toAuth: async (credential) => {
+            const auth = await oauth.toAuth(credential);
+            const env = credential.env;
+            const headers = resolveHeadersOrThrow(rawHeaders, `provider "${providerId}"`, typeof env === "object" && env !== null ? env : undefined);
+            return withConfiguredAuth(auth, headers, authHeader);
+        },
+    };
+}
+export function rawModelHeaders(model, config, extension) {
+    const definition = config?.models?.find((entry) => entry.id === model.id);
+    const extensionModel = extension?.models?.find((entry) => entry.id === model.id);
+    const headers = {
+        ...config?.modelOverrides?.[model.id]?.headers,
+        ...definition?.headers,
+        ...extensionModel?.headers,
+    };
+    return Object.keys(headers).length > 0 ? headers : undefined;
+}
+//# sourceMappingURL=provider-composer-internal.js.map