@cleocode/contracts 2026.6.1 → 2026.6.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/dist/llm/oauth.d.ts +17 -0
  2. package/dist/llm/oauth.d.ts.map +1 -1
  3. package/package.json +2 -2
  4. package/src/llm/oauth.ts +17 -0
package/dist/llm/oauth.d.ts CHANGED
@@ -118,8 +118,25 @@ export interface ProviderOAuthConfig {
118
118
  /**
119
119
  * Redirect URI (required for `pkce` mode; omit for `device-code`).
120
120
  *
121
+ * When this is a fixed loopback URL with an explicit port
122
+ * (e.g. `http://localhost:1455/auth/callback`), the PKCE login flow binds its
123
+ * local callback server to THAT exact port + path instead of a random free
124
+ * port — required by providers (e.g. OpenAI/Codex) that pre-register a fixed
125
+ * redirect. A non-loopback URL (e.g. a hosted paste-back page) keeps the
126
+ * random-port interactive flow.
127
+ *
121
128
  * @default 'http://localhost'
122
129
  */
123
130
  redirectUri?: string;
131
+ /**
132
+ * Provider-specific extra query parameters appended to the authorization URL
133
+ * (beyond the RFC-required `response_type`/`client_id`/`redirect_uri`/`scope`/
134
+ * `code_challenge`/`code_challenge_method`/`state`).
135
+ *
136
+ * Used by OpenAI/Codex (`id_token_add_organizations=true`,
137
+ * `codex_cli_simplified_flow=true`, `originator=codex_cli_rs`). Anthropic and
138
+ * Kimi Code leave this unset.
139
+ */
140
+ extraAuthParams?: Readonly<Record<string, string>>;
124
141
  }
125
142
  //# sourceMappingURL=oauth.d.ts.map
package/dist/llm/oauth.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/llm/oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH;;;;;;;GAOG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,aAAa,CAAC;AAM/C;;;;;;;GAOG;AACH,MAAM,WAAW,WAAW;IAC1B,2BAA2B;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD;;;;;;;;GAQG;AACH,MAAM,WAAW,cAAc;IAC7B,8DAA8D;IAC9D,QAAQ,EAAE,MAAM,CAAC;IACjB,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,qBAAqB,EAAE,MAAM,CAAC;IAC9B;;;;;OAKG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACjD;AAMD;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC,2CAA2C;IAC3C,IAAI,EAAE,SAAS,CAAC;IAChB,2BAA2B;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,0BAA0B;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,oCAAoC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB"}
1
+ {"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/llm/oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH;;;;;;;GAOG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,aAAa,CAAC;AAM/C;;;;;;;GAOG;AACH,MAAM,WAAW,WAAW;IAC1B,2BAA2B;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD;;;;;;;;GAQG;AACH,MAAM,WAAW,cAAc;IAC7B,8DAA8D;IAC9D,QAAQ,EAAE,MAAM,CAAC;IACjB,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,qBAAqB,EAAE,MAAM,CAAC;IAC9B;;;;;OAKG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACjD;AAMD;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC,2CAA2C;IAC3C,IAAI,EAAE,SAAS,CAAC;IAChB,2BAA2B;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,0BAA0B;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,oCAAoC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;;;;;OAWG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACpD"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@cleocode/contracts",
3
- "version": "2026.6.1",
3
+ "version": "2026.6.3",
4
4
  "description": "Domain types, interfaces, and contracts for the CLEO ecosystem",
5
5
  "type": "module",
6
6
  "main": "./dist/index.js",
@@ -182,7 +182,7 @@
182
182
  "dependencies": {
183
183
  "zod": "^4.3.6",
184
184
  "zod-to-json-schema": "^3.25.2",
185
- "@cleocode/lafs": "2026.6.1"
185
+ "@cleocode/lafs": "2026.6.3"
186
186
  },
187
187
  "scripts": {
188
188
  "build": "tsc -b --force && node scripts/copy-assets.mjs && node scripts/emit-schemas.mjs",
package/src/llm/oauth.ts CHANGED
@@ -138,7 +138,24 @@ export interface ProviderOAuthConfig {
138
138
  /**
139
139
  * Redirect URI (required for `pkce` mode; omit for `device-code`).
140
140
  *
141
+ * When this is a fixed loopback URL with an explicit port
142
+ * (e.g. `http://localhost:1455/auth/callback`), the PKCE login flow binds its
143
+ * local callback server to THAT exact port + path instead of a random free
144
+ * port — required by providers (e.g. OpenAI/Codex) that pre-register a fixed
145
+ * redirect. A non-loopback URL (e.g. a hosted paste-back page) keeps the
146
+ * random-port interactive flow.
147
+ *
141
148
  * @default 'http://localhost'
142
149
  */
143
150
  redirectUri?: string;
151
+ /**
152
+ * Provider-specific extra query parameters appended to the authorization URL
153
+ * (beyond the RFC-required `response_type`/`client_id`/`redirect_uri`/`scope`/
154
+ * `code_challenge`/`code_challenge_method`/`state`).
155
+ *
156
+ * Used by OpenAI/Codex (`id_token_add_organizations=true`,
157
+ * `codex_cli_simplified_flow=true`, `originator=codex_cli_rs`). Anthropic and
158
+ * Kimi Code leave this unset.
159
+ */
160
+ extraAuthParams?: Readonly<Record<string, string>>;
144
161
  }