@codeworksh/aikit 0.8.0 → 0.9.0

package/oauth/openai/codex.d.mts

@@ -16,82 +16,101 @@
  * Everything else in this module is an implementation detail and intentionally
  * not exported.
  */
-type OpenAICodexOAuthCredentials = {
+export type OpenAICodexOAuthCredentials = {
   access: string;
   refresh: string;
   expires: number;
   accountId: string;
 };
-type OpenAICodexTokenSuccess = {
+export type OpenAICodexTokenSuccess = {
   type: "success";
   access: string;
   refresh: string;
   expires: number;
 };
-type OpenAICodexTokenFailure = {
+export type OpenAICodexTokenFailure = {
   type: "failed";
   message: string;
   status?: number;
 };
-type OpenAICodexTokenResult = OpenAICodexTokenSuccess | OpenAICodexTokenFailure;
-type OpenAICodexAuthorizationFlow = {
+export type OpenAICodexTokenResult = OpenAICodexTokenSuccess | OpenAICodexTokenFailure;
+export type OpenAICodexAuthorizationFlow = {
   url: string;
   verifier: string;
   state: string;
   redirectUri: string;
 };
-type OpenAICodexAuthorizationOptions = {
+export type OpenAICodexAuthorizationOptions = {
   originator?: string;
   redirectUri?: string;
   scope?: string;
 };
-type OpenAICodexLoginPrompt = {
+export type OpenAICodexLoginPrompt = {
   message: string;
   placeholder?: string;
   allowEmpty?: boolean;
 };
-type OpenAICodexLoginOptions = OpenAICodexAuthorizationOptions & {
+export type OpenAICodexDeviceAuth = {
+  deviceAuthId: string;
+  userCode: string;
+  verificationUri: string;
+  intervalSeconds: number;
+};
+export type OpenAICodexLoginOptions = OpenAICodexAuthorizationOptions & {
+  /** Use the device-code flow instead of the localhost browser callback. */
+  device?: boolean | undefined;
+  signal?: AbortSignal | undefined;
   onAuth: (info: {
     url: string;
-    instructions?: string;
+    userCode?: string | undefined;
+    instructions?: string | undefined;
   }) => void;
   onPrompt: (prompt: OpenAICodexLoginPrompt) => Promise<string>;
   onProgress?: (message: string) => void;
-  onManualCodeInput?: () => Promise<string>;
 };
-interface OpenAICodexAuthStorage {
+export interface OpenAICodexAuthStorage {
   get(): Promise<OpenAICodexOAuthCredentials | undefined>;
   set(credentials: OpenAICodexOAuthCredentials): Promise<void>;
   clear(): Promise<void>;
 }
-type JsonOpenAICodexAuthStorageOptions = {
+export type JsonOpenAICodexAuthStorageOptions = {
   path?: string;
   providerId?: string;
 };
-declare function parseOpenAICodexAuthorizationInput(input: string): {
+export declare function parseOpenAICodexAuthorizationInput(input: string): {
   code?: string;
   state?: string;
 };
-declare function getOpenAICodexAccountId(accessToken: string): string | null;
-declare function createOpenAICodexAuthorizationFlow(options?: OpenAICodexAuthorizationOptions): Promise<OpenAICodexAuthorizationFlow>;
-declare function exchangeOpenAICodexAuthorizationCode(code: string, verifier: string, redirectUri?: string): Promise<OpenAICodexTokenResult>;
-declare function refreshOpenAICodexToken(refreshToken: string): Promise<OpenAICodexOAuthCredentials>;
-declare function openAICodexHeaders(credentials: OpenAICodexOAuthCredentials): Record<string, string>;
-declare class JsonOpenAICodexAuthStorage implements OpenAICodexAuthStorage {
-  readonly path: string;
-  readonly providerId: string;
+export declare function getOpenAICodexAccountId(accessToken: string): string | null;
+export declare function createOpenAICodexAuthorizationFlow(options?: OpenAICodexAuthorizationOptions): Promise<OpenAICodexAuthorizationFlow>;
+export declare function exchangeOpenAICodexAuthorizationCode(code: string, verifier: string, redirectUri?: string): Promise<OpenAICodexTokenResult>;
+/** Ask for a user code to type at {@link DEVICE_VERIFICATION_URI}. */
+export declare function createOpenAICodexDeviceAuth(options?: {
+  signal?: AbortSignal | undefined;
+}): Promise<OpenAICodexDeviceAuth>;
+/** Wait for the code to be approved; the server returns the code and its verifier. */
+export declare function pollOpenAICodexDeviceAuth(device: OpenAICodexDeviceAuth, options?: {
+  signal?: AbortSignal | undefined;
+}): Promise<{
+  authorizationCode: string;
+  codeVerifier: string;
+}>;
+export declare function refreshOpenAICodexToken(refreshToken: string): Promise<OpenAICodexOAuthCredentials>;
+export declare function openAICodexHeaders(credentials: OpenAICodexOAuthCredentials): Record<string, string>;
+export declare class JsonOpenAICodexAuthStorage implements OpenAICodexAuthStorage {
+  private readonly storage;
   constructor(options?: JsonOpenAICodexAuthStorageOptions);
+  get path(): string;
+  get providerId(): string;
   get(): Promise<OpenAICodexOAuthCredentials | undefined>;
   set(credentials: OpenAICodexOAuthCredentials): Promise<void>;
   clear(): Promise<void>;
-  private readFile;
-  private writeFile;
 }
-type OpenAICodexOAuthClientOptions = {
+export type OpenAICodexOAuthClientOptions = {
   storage?: OpenAICodexAuthStorage;
   refreshSkewMs?: number;
 };
-declare class OpenAICodexOAuthClient {
+export declare class OpenAICodexOAuthClient {
   readonly storage: OpenAICodexAuthStorage;
   readonly refreshSkewMs: number;
   constructor(options?: OpenAICodexOAuthClientOptions);
@@ -101,7 +120,7 @@ declare class OpenAICodexOAuthClient {
   getHeaders(): Promise<Record<string, string> | undefined>;
   logout(): Promise<void>;
 }
-declare const OPENAI_CODEX_API_KEY_ENV = "OPENAI_CODEX_API_KEY";
+export declare const OPENAI_CODEX_API_KEY_ENV = "OPENAI_CODEX_API_KEY";
 /**
  * Resolve the OpenAI Codex API key the same way other provider API keys are
  * resolved: prefer the OPENAI_CODEX_API_KEY environment variable, then fall
@@ -110,7 +129,6 @@ declare const OPENAI_CODEX_API_KEY_ENV = "OPENAI_CODEX_API_KEY";
  * The result can be passed directly as `apiKey` to the runtime options or to
  * `createOpenAICodex`. Returns undefined when no key is available.
  */
-declare function getOpenAICodexApiKey(options?: OpenAICodexOAuthClientOptions): Promise<string | undefined>;
+export declare function getOpenAICodexApiKey(options?: OpenAICodexOAuthClientOptions): Promise<string | undefined>;
 //#endregion
-export { JsonOpenAICodexAuthStorage, JsonOpenAICodexAuthStorageOptions, OPENAI_CODEX_API_KEY_ENV, OpenAICodexAuthStorage, OpenAICodexAuthorizationFlow, OpenAICodexAuthorizationOptions, OpenAICodexLoginOptions, OpenAICodexLoginPrompt, OpenAICodexOAuthClient, OpenAICodexOAuthClientOptions, OpenAICodexOAuthCredentials, OpenAICodexTokenFailure, OpenAICodexTokenResult, OpenAICodexTokenSuccess, createOpenAICodexAuthorizationFlow, exchangeOpenAICodexAuthorizationCode, getOpenAICodexAccountId, getOpenAICodexApiKey, openAICodexHeaders, parseOpenAICodexAuthorizationInput, refreshOpenAICodexToken };
 //# sourceMappingURL=codex.d.mts.map

package/oauth/openai/codex.mjs

@@ -1,2 +1,2 @@
-import { a as exchangeOpenAICodexAuthorizationCode, c as openAICodexHeaders, i as createOpenAICodexAuthorizationFlow, l as parseOpenAICodexAuthorizationInput, n as OPENAI_CODEX_API_KEY_ENV, o as getOpenAICodexAccountId, r as OpenAICodexOAuthClient, s as getOpenAICodexApiKey, t as JsonOpenAICodexAuthStorage, u as refreshOpenAICodexToken } from "../../codex-MtP1574D.mjs";
-export { JsonOpenAICodexAuthStorage, OPENAI_CODEX_API_KEY_ENV, OpenAICodexOAuthClient, createOpenAICodexAuthorizationFlow, exchangeOpenAICodexAuthorizationCode, getOpenAICodexAccountId, getOpenAICodexApiKey, openAICodexHeaders, parseOpenAICodexAuthorizationInput, refreshOpenAICodexToken };
+import { a as createOpenAICodexDeviceAuth, c as getOpenAICodexApiKey, d as pollOpenAICodexDeviceAuth, f as refreshOpenAICodexToken, i as createOpenAICodexAuthorizationFlow, l as openAICodexHeaders, n as OPENAI_CODEX_API_KEY_ENV, o as exchangeOpenAICodexAuthorizationCode, r as OpenAICodexOAuthClient, s as getOpenAICodexAccountId, t as JsonOpenAICodexAuthStorage, u as parseOpenAICodexAuthorizationInput } from "../../codex-CLDBTrFm.mjs";
+export { JsonOpenAICodexAuthStorage, OPENAI_CODEX_API_KEY_ENV, OpenAICodexOAuthClient, createOpenAICodexAuthorizationFlow, createOpenAICodexDeviceAuth, exchangeOpenAICodexAuthorizationCode, getOpenAICodexAccountId, getOpenAICodexApiKey, openAICodexHeaders, parseOpenAICodexAuthorizationInput, pollOpenAICodexDeviceAuth, refreshOpenAICodexToken };

package/oauth/summary.d.mts

@@ -0,0 +1,67 @@
+//#region src/oauth/summary.d.ts
+/**
+ * One presentation and one rule set for every OAuth login, so a command behaves
+ * the same whichever CLI runs it.
+ *
+ * Credentials differ per provider; what a user is shown does not. Each provider
+ * narrows to an {@link OAuthSummary} — metadata only, never a token — and
+ * everything downstream works from that.
+ *
+ * Output convention: the summary is the command's result and belongs on stdout,
+ * alone, so `--json` stays parseable. Every notice here is progress, not result,
+ * and belongs on stderr.
+ */
+export type OAuthProviderId = "openai-codex" | "github-copilot";
+export declare const OAUTH_PROVIDER_LABELS: Record<OAuthProviderId, string>;
+export declare const oauthProviderLabel: (provider: OAuthProviderId) => string;
+/** A stored login as the outside world sees it. */
+export type OAuthSummary = {
+  readonly provider: OAuthProviderId;
+  /** Epoch millis, or 0 for a credential that does not expire. */
+  readonly expires: number;
+  readonly accountId?: string | undefined;
+  readonly apiEndpoint?: string | undefined;
+  readonly enterpriseUrl?: string | undefined;
+  readonly availableModels?: number | undefined;
+};
+export declare const summarizeOpenAICodex: (credentials: {
+  readonly accountId: string;
+  readonly expires: number;
+}) => OAuthSummary;
+export declare const summarizeGitHubCopilot: (credentials: {
+  readonly expires: number;
+  readonly apiEndpoint?: string | undefined;
+  readonly enterpriseUrl?: string | undefined;
+  readonly availableModelIds?: ReadonlyArray<string> | undefined;
+}) => OAuthSummary;
+/** Render a summary. Tokens never appear in it. */
+export declare function formatOAuthSummary(summary: OAuthSummary, options?: {
+  readonly json?: boolean | undefined;
+}): string;
+export type OAuthNoticeKind = "saved" | "cleared" | "refreshed" | "missing";
+/** `location` is a bare place — a file path, or "the server". */
+export declare function oauthNotice(kind: OAuthNoticeKind, provider: OAuthProviderId, location: string): string;
+export type OAuthProviderFlags = {
+  readonly openaiCodex?: boolean | undefined;
+  readonly githubCopilot?: boolean | undefined;
+};
+export type OAuthFlagCheck = {
+  ok: true;
+  provider: OAuthProviderId;
+} | {
+  ok: false;
+  message: string;
+};
+/** Resolve the provider from the two mutually exclusive flags. */
+export declare function checkOAuthProvider(flags: OAuthProviderFlags): OAuthFlagCheck;
+export type OAuthLoginFlags = {
+  readonly device?: boolean | undefined;
+  readonly enterprise?: string | undefined;
+  readonly enableModels?: boolean | undefined;
+};
+/** A login option the chosen provider has no use for, when one was given. */
+export declare function oauthLoginIssue(provider: OAuthProviderId, flags: OAuthLoginFlags): string | undefined;
+/** Why a provider cannot be refreshed, when it cannot. */
+export declare function oauthRefreshIssue(provider: OAuthProviderId): string | undefined;
+//#endregion
+//# sourceMappingURL=summary.d.mts.map

package/oauth/summary.mjs

@@ -0,0 +1,2 @@
+import { a as oauthNotice, c as summarizeGitHubCopilot, i as oauthLoginIssue, l as summarizeOpenAICodex, n as checkOAuthProvider, o as oauthProviderLabel, r as formatOAuthSummary, s as oauthRefreshIssue, t as OAUTH_PROVIDER_LABELS } from "../summary-C_QyCVWa.mjs";
+export { OAUTH_PROVIDER_LABELS, checkOAuthProvider, formatOAuthSummary, oauthLoginIssue, oauthNotice, oauthProviderLabel, oauthRefreshIssue, summarizeGitHubCopilot, summarizeOpenAICodex };

package/{openai-codex-t4B7g-gv.mjs → openai-codex-Bqzti6Mc.mjs}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
 import { a as FailureSchema } from "./schema-rXSoWhic.mjs";
-import { a as KnownProviderEnumSchema, o as ProviderInfo } from "./model-CBnredXj.mjs";
-import { o as getOpenAICodexAccountId } from "./codex-MtP1574D.mjs";
+import { a as KnownProviderEnumSchema, o as ProviderInfo } from "./model-gCDbmGqT.mjs";
+import { s as getOpenAICodexAccountId } from "./codex-CLDBTrFm.mjs";
 import Type$1 from "typebox";
 import { uuidv7 } from "uuidv7";
 import { APICallError, LoadAPIKeyError, NoSuchModelError } from "@ai-sdk/provider";
@@ -1592,4 +1592,4 @@ const openaiCodex = createOpenAICodex();
 //#endregion
 export { ToolCallSchema as C, transformMessages as D, resolveJsonSchemaConstraint as E, AssistantMessageSchema as S, message_exports as T, appendOpenAICodexGrammarInputJsonDelta as _, OpenAICodexLanguageModel as a, resolveOpenAICodexDeferredToolsMode as b, convertOpenAICodexUsage as c, convertToOpenAICodexPrompt as d, joinToolCallId as f, shortHash as g, openAICodexErrorMessage as h, OPENAI_CODEX_DEFAULT_BASE_URL as i, mapOpenAICodexFinishReason as l, createOpenAICodexAPICallError as m, createOpenAICodex as n, clampOpenAICodexPromptCacheKey as o, splitToolCallId as p, openaiCodex as r, resolveOpenAICodexUrl as s, OPENAI_CODEX_API_KEY_ENV as t, collectOpenAICodexDeferredToolNames as u, openAICodexTools as v, createAssistantMessage as w, resolveOpenAICodexToolConstraint as x, prepareOpenAICodexTools as y };
 
-//# sourceMappingURL=openai-codex-t4B7g-gv.mjs.map
+//# sourceMappingURL=openai-codex-Bqzti6Mc.mjs.map