@code-yeongyu/senpi-ai 2026.11.3-3 → 2026.11.4-2

package/dist/utils/oauth-refresh-error.d.ts

@@ -10,6 +10,17 @@ export declare class OAuthTokenEndpointError extends Error {
         credentialRefused?: boolean;
     });
 }
+export type OAuthReauthorizationCode = "invalid_grant" | "invalid_refresh_token" | "token_expired" | "refresh_token_expired" | "refresh_token_invalidated" | "refresh_token_reused";
+/** The renewable session is unusable; sign in again with its saved client ID. */
+export declare class OAuthReauthorizationRequiredError extends OAuthTokenEndpointError {
+    readonly code: OAuthReauthorizationCode;
+    constructor(code: OAuthReauthorizationCode, status: number);
+}
+/** Repeating sign-in cannot repair an invalid client configuration. */
+export declare class OAuthClientConfigurationError extends OAuthTokenEndpointError {
+    readonly code = "invalid_client";
+    constructor(status: number);
+}
 /** Closed, log-safe facts only; never inspect the message or response body. */
 export declare function oauthRefreshFailureCause(error: unknown): string | undefined;
 export declare function classifyOAuthRefreshFailure(error: unknown): "transient" | "permanent";

package/dist/utils/oauth-refresh-error.js

@@ -8,6 +8,24 @@ export class OAuthTokenEndpointError extends Error {
         this.credentialRefused = facts.credentialRefused ?? false;
     }
 }
+/** The renewable session is unusable; sign in again with its saved client ID. */
+export class OAuthReauthorizationRequiredError extends OAuthTokenEndpointError {
+    constructor(code, status) {
+        super(`OAuth refresh requires reauthorization (${code})`, status, { oauthError: code, credentialRefused: true });
+        this.name = "OAuthReauthorizationRequiredError";
+        this.code = code;
+    }
+}
+/** Repeating sign-in cannot repair an invalid client configuration. */
+export class OAuthClientConfigurationError extends OAuthTokenEndpointError {
+    constructor(status) {
+        super("OAuth refresh failed: invalid client configuration (invalid_client)", status, {
+            oauthError: "invalid_client",
+        });
+        this.code = "invalid_client";
+        this.name = "OAuthClientConfigurationError";
+    }
+}
 const TRANSPORT_CODES = new Set([
     "ConnectionRefused",
     "FailedToOpenSocket",

package/dist/utils/oauth-url.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Keep retained ID tokens out of terminal output and notification transcripts.
+ * The hint-free URL remains usable for manual authorization (with an account
+ * selector); browser launchers should receive the original URL.
+ */
+export declare function redactOAuthUrl(value: string): string;
+//# sourceMappingURL=oauth-url.d.ts.map

package/dist/utils/oauth-url.js

@@ -0,0 +1,13 @@
+/**
+ * Keep retained ID tokens out of terminal output and notification transcripts.
+ * The hint-free URL remains usable for manual authorization (with an account
+ * selector); browser launchers should receive the original URL.
+ */
+export function redactOAuthUrl(value) {
+    const url = new URL(value);
+    if (!url.searchParams.has("id_token_hint"))
+        return value;
+    url.searchParams.delete("id_token_hint");
+    return url.toString();
+}
+//# sourceMappingURL=oauth-url.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@code-yeongyu/senpi-ai",
-	"version": "2026.11.3-3",
+	"version": "2026.11.4-2",
 	"description": "Unified LLM API with automatic model discovery and provider configuration",
 	"type": "module",
 	"main": "./dist/index.js",
@@ -88,7 +88,7 @@
 	"dependencies": {
 		"@anthropic-ai/sdk": "0.127.0",
 		"@aws-sdk/client-bedrock-runtime": "3.1136.0",
-		"@earendil-works/pi-telemetry": "npm:@code-yeongyu/senpi-telemetry@2026.11.3-3",
+		"@earendil-works/pi-telemetry": "npm:@code-yeongyu/senpi-telemetry@2026.11.4-2",
 		"@google/genai": "2.23.0",
 		"@smithy/node-http-handler": "4.12.1",
 		"google-auth-library": "10.6.2",