@forgefabrik/ff-ztn 0.3.0

package/dist/zero-token/providers/deepseek-web-validator.js

@@ -0,0 +1,24 @@
+const DEEPSEEK_API = "https://chat.deepseek.com/api/v1/user/info";
+export async function validateSession(cookies, accessToken, userAgent) {
+    const headers = {
+        Accept: "application/json",
+        "User-Agent": userAgent ?? "zero-token/0.1.0",
+        Cookie: cookies,
+    };
+    if (accessToken)
+        headers["Authorization"] = `Bearer ${accessToken}`;
+    try {
+        const response = await fetch(DEEPSEEK_API, { headers });
+        if (response.status === 401 || response.status === 403) {
+            return { accountId: "", provider: "deepseek", valid: false, status: "expired", error: "Session abgelaufen" };
+        }
+        if (!response.ok) {
+            return { accountId: "", provider: "deepseek", valid: false, status: "error", error: `HTTP ${response.status}` };
+        }
+        return { accountId: "", provider: "deepseek", valid: true, status: "valid", plan: "free" };
+    }
+    catch (err) {
+        return { accountId: "", provider: "deepseek", valid: false, status: "error", error: `Netzwerkfehler: ${err instanceof Error ? err.message : String(err)}` };
+    }
+}
+//# sourceMappingURL=deepseek-web-validator.js.map

package/dist/zero-token/providers/deepseek-web-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deepseek-web-validator.js","sourceRoot":"","sources":["../../../src/zero-token/providers/deepseek-web-validator.ts"],"names":[],"mappings":"AAEA,MAAM,YAAY,GAAG,4CAA4C,CAAC;AAElE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAe,EACf,WAA+B,EAC/B,SAA6B;IAE7B,MAAM,OAAO,GAA2B;QACtC,MAAM,EAAE,kBAAkB;QAC1B,YAAY,EAAE,SAAS,IAAI,kBAAkB;QAC7C,MAAM,EAAE,OAAO;KAChB,CAAC;IACF,IAAI,WAAW;QAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,WAAW,EAAE,CAAC;IAEpE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACxD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvD,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;QAC/G,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QAClH,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC7F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,mBAAmB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC9J,CAAC;AACH,CAAC"}

package/dist/zero-token/providers/doubao-web-auth.d.ts

@@ -0,0 +1,7 @@
+import type { ProviderAuthFunction } from "./provider-types.js";
+/**
+ * Doubao-Web-Auth: Browser öffnen, auf manuellen Login warten,
+ * Cookies und Token extrahieren.
+ */
+export declare const auth: ProviderAuthFunction;
+//# sourceMappingURL=doubao-web-auth.d.ts.map

package/dist/zero-token/providers/doubao-web-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doubao-web-auth.d.ts","sourceRoot":"","sources":["../../../src/zero-token/providers/doubao-web-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAuB,MAAM,qBAAqB,CAAC;AAarF;;;GAGG;AACH,eAAO,MAAM,IAAI,EAAE,oBAgClB,CAAC"}

package/dist/zero-token/providers/doubao-web-auth.js

@@ -0,0 +1,44 @@
+import { openProviderBrowser, waitForUrlLogin, extractCookies, extractLocalStorage, } from "./browser.js";
+const DOUBAO_URL = "https://www.doubao.com";
+const AUTH_PATTERNS = ["/auth/", "/login", "/signin"];
+const COOKIE_NAMES = ["doubao", "session", "token", "Authorization"];
+const TOKEN_KEYS = ["accessToken", "doubao-token", "userToken"];
+/**
+ * Doubao-Web-Auth: Browser öffnen, auf manuellen Login warten,
+ * Cookies und Token extrahieren.
+ */
+export const auth = async (config) => {
+    let browserInstance = null;
+    try {
+        const { browser, page } = await openProviderBrowser({
+            targetUrl: DOUBAO_URL,
+            cdpPort: config.cdpPort,
+            headless: config.headless,
+            proxy: config.proxy,
+            loginTimeout: config.loginTimeout,
+        });
+        browserInstance = browser;
+        await waitForUrlLogin(page, DOUBAO_URL, AUTH_PATTERNS, config.loginTimeout ?? 300_000);
+        const cookies = await extractCookies(page, COOKIE_NAMES);
+        const accessToken = await extractLocalStorage(page, TOKEN_KEYS);
+        const userAgent = await page.evaluate(() => navigator.userAgent);
+        return {
+            ok: true,
+            session: { cookies, accessToken: accessToken ?? undefined, userAgent },
+            info: { plan: "free" },
+        };
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        if (msg.includes("Login nicht innerhalb"))
+            return { ok: false, reason: "login-timeout" };
+        if (msg.includes("Browser konnte nicht geöffnet"))
+            return { ok: false, reason: "browser-launch-failed" };
+        return { ok: false, reason: "unknown-error" };
+    }
+    finally {
+        if (browserInstance)
+            await browserInstance.close().catch(() => { });
+    }
+};
+//# sourceMappingURL=doubao-web-auth.js.map

package/dist/zero-token/providers/doubao-web-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doubao-web-auth.js","sourceRoot":"","sources":["../../../src/zero-token/providers/doubao-web-auth.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAEtB,MAAM,UAAU,GAAG,wBAAwB,CAAC;AAC5C,MAAM,aAAa,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AACtD,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;AACrE,MAAM,UAAU,GAAG,CAAC,aAAa,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;AAEhE;;;GAGG;AACH,MAAM,CAAC,MAAM,IAAI,GAAyB,KAAK,EAAE,MAAM,EAAE,EAAE;IACzD,IAAI,eAAe,GAA0C,IAAI,CAAC;IAElE,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,mBAAmB,CAAC;YAClD,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC,CAAC;QACH,eAAe,GAAG,OAAO,CAAC;QAE1B,MAAM,eAAe,CAAC,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,CAAC,YAAY,IAAI,OAAO,CAAC,CAAC;QAEvF,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAChE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAEjE,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,IAAI,SAAS,EAAE,SAAS,EAAE;YACtE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACvB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QACzF,IAAI,GAAG,CAAC,QAAQ,CAAC,+BAA+B,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;QACzG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAChD,CAAC;YAAS,CAAC;QACT,IAAI,eAAe;YAAE,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACrE,CAAC;AACH,CAAC,CAAC"}

package/dist/zero-token/providers/gemini-web-auth.d.ts

@@ -0,0 +1,7 @@
+import type { ProviderAuthFunction } from "./provider-types.js";
+/**
+ * Gemini-Web-Auth: Browser öffnen, auf manuellen Login warten,
+ * Google-Session-Cookies extrahieren.
+ */
+export declare const auth: ProviderAuthFunction;
+//# sourceMappingURL=gemini-web-auth.d.ts.map

package/dist/zero-token/providers/gemini-web-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini-web-auth.d.ts","sourceRoot":"","sources":["../../../src/zero-token/providers/gemini-web-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAuB,MAAM,qBAAqB,CAAC;AAYrF;;;GAGG;AACH,eAAO,MAAM,IAAI,EAAE,oBAkClB,CAAC"}

package/dist/zero-token/providers/gemini-web-auth.js

@@ -0,0 +1,47 @@
+import { openProviderBrowser, waitForUrlLogin, extractCookies, getCookieValue, } from "./browser.js";
+const GEMINI_URL = "https://gemini.google.com";
+const AUTH_PATTERNS = ["/auth/", "/signin", "/signup", "/Login"];
+const COOKIE_NAMES = ["__Secure-", "SAPISID", "APISID", "HSID", "SSID"];
+/**
+ * Gemini-Web-Auth: Browser öffnen, auf manuellen Login warten,
+ * Google-Session-Cookies extrahieren.
+ */
+export const auth = async (config) => {
+    let browserInstance = null;
+    try {
+        const { browser, page } = await openProviderBrowser({
+            targetUrl: GEMINI_URL,
+            cdpPort: config.cdpPort,
+            headless: config.headless,
+            proxy: config.proxy,
+            loginTimeout: config.loginTimeout,
+        });
+        browserInstance = browser;
+        await waitForUrlLogin(page, GEMINI_URL, AUTH_PATTERNS, config.loginTimeout ?? 300_000);
+        const cookies = await extractCookies(page, COOKIE_NAMES);
+        const sapisid = await getCookieValue(page, "SAPISID");
+        const userAgent = await page.evaluate(() => navigator.userAgent);
+        const info = await fetchGeminiAccountInfo({ cookies, userAgent });
+        return {
+            ok: true,
+            session: { cookies, accessToken: sapisid, userAgent },
+            info,
+        };
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        if (msg.includes("Login nicht innerhalb"))
+            return { ok: false, reason: "login-timeout" };
+        if (msg.includes("Browser konnte nicht geöffnet"))
+            return { ok: false, reason: "browser-launch-failed" };
+        return { ok: false, reason: "unknown-error" };
+    }
+    finally {
+        if (browserInstance)
+            await browserInstance.close().catch(() => { });
+    }
+};
+async function fetchGeminiAccountInfo(session) {
+    return { plan: "free" };
+}
+//# sourceMappingURL=gemini-web-auth.js.map

package/dist/zero-token/providers/gemini-web-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini-web-auth.js","sourceRoot":"","sources":["../../../src/zero-token/providers/gemini-web-auth.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,cAAc,GACf,MAAM,cAAc,CAAC;AAEtB,MAAM,UAAU,GAAG,2BAA2B,CAAC;AAC/C,MAAM,aAAa,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AACjE,MAAM,YAAY,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAExE;;;GAGG;AACH,MAAM,CAAC,MAAM,IAAI,GAAyB,KAAK,EAAE,MAAM,EAAE,EAAE;IACzD,IAAI,eAAe,GAA0C,IAAI,CAAC;IAElE,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,mBAAmB,CAAC;YAClD,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC,CAAC;QACH,eAAe,GAAG,OAAO,CAAC;QAE1B,MAAM,eAAe,CAAC,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,CAAC,YAAY,IAAI,OAAO,CAAC,CAAC;QAEvF,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAEjE,MAAM,IAAI,GAAG,MAAM,sBAAsB,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAElE,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE;YACrD,IAAI;SACL,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QACzF,IAAI,GAAG,CAAC,QAAQ,CAAC,+BAA+B,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;QACzG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAChD,CAAC;YAAS,CAAC;QACT,IAAI,eAAe;YAAE,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACrE,CAAC;AACH,CAAC,CAAC;AAEF,KAAK,UAAU,sBAAsB,CACnC,OAAgD;IAEhD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC"}

package/dist/zero-token/providers/glm-intl-web-auth.d.ts

@@ -0,0 +1,4 @@
+import type { ProviderAuthFunction } from "./provider-types.js";
+/** GLM International browser login for chat.z.ai. */
+export declare const auth: ProviderAuthFunction;
+//# sourceMappingURL=glm-intl-web-auth.d.ts.map

package/dist/zero-token/providers/glm-intl-web-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"glm-intl-web-auth.d.ts","sourceRoot":"","sources":["../../../src/zero-token/providers/glm-intl-web-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAUhE,qDAAqD;AACrD,eAAO,MAAM,IAAI,EAAE,oBAwDlB,CAAC"}

package/dist/zero-token/providers/glm-intl-web-auth.js

@@ -0,0 +1,53 @@
+import { extractCookies, extractLocalStorage, openProviderBrowser, } from "./browser.js";
+const GLM_INTL_URL = "https://chat.z.ai";
+const TOKEN_KEYS = ["accessToken", "access_token", "auth_token", "token"];
+/** GLM International browser login for chat.z.ai. */
+export const auth = async (config) => {
+    let browserInstance = null;
+    try {
+        const { browser, page } = await openProviderBrowser({
+            targetUrl: GLM_INTL_URL,
+            cdpPort: config.cdpPort,
+            headless: config.headless,
+            proxy: config.proxy,
+            loginTimeout: config.loginTimeout,
+        });
+        browserInstance = browser;
+        await page.waitForFunction(() => {
+            const cookie = document.cookie;
+            const hasAuthCookie = [
+                "chatglm_refresh_token",
+                "refresh_token",
+                "auth_token",
+                "access_token",
+                "session",
+            ].some((name) => cookie.includes(name));
+            const hasChatInput = Boolean(document.querySelector('textarea, [contenteditable="true"], .chat-input, .message-input'));
+            const onAuthPage = /login|signin|auth/i.test(window.location.pathname);
+            return hasAuthCookie || (hasChatInput && !onAuthPage);
+        }, undefined, { timeout: config.loginTimeout ?? 300_000, polling: 1000 });
+        const cookies = await extractCookies(page);
+        const accessToken = await extractLocalStorage(page, TOKEN_KEYS);
+        const userAgent = await page.evaluate(() => navigator.userAgent);
+        return {
+            ok: true,
+            session: { cookies, accessToken: accessToken ?? undefined, userAgent },
+            info: { plan: "free" },
+        };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        if (message.includes("Timeout") || message.includes("Login nicht innerhalb")) {
+            return { ok: false, reason: "login-timeout" };
+        }
+        if (message.includes("Browser konnte nicht geöffnet")) {
+            return { ok: false, reason: "browser-launch-failed" };
+        }
+        return { ok: false, reason: "unknown-error" };
+    }
+    finally {
+        if (browserInstance)
+            await browserInstance.close().catch(() => { });
+    }
+};
+//# sourceMappingURL=glm-intl-web-auth.js.map

package/dist/zero-token/providers/glm-intl-web-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"glm-intl-web-auth.js","sourceRoot":"","sources":["../../../src/zero-token/providers/glm-intl-web-auth.ts"],"names":[],"mappings":"AACA,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAEtB,MAAM,YAAY,GAAG,mBAAmB,CAAC;AACzC,MAAM,UAAU,GAAG,CAAC,aAAa,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;AAE1E,qDAAqD;AACrD,MAAM,CAAC,MAAM,IAAI,GAAyB,KAAK,EAAE,MAAM,EAAE,EAAE;IACzD,IAAI,eAAe,GAA0C,IAAI,CAAC;IAElE,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,mBAAmB,CAAC;YAClD,SAAS,EAAE,YAAY;YACvB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC,CAAC;QACH,eAAe,GAAG,OAAO,CAAC;QAE1B,MAAM,IAAI,CAAC,eAAe,CACxB,GAAG,EAAE;YACH,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC/B,MAAM,aAAa,GAAG;gBACpB,uBAAuB;gBACvB,eAAe;gBACf,YAAY;gBACZ,cAAc;gBACd,SAAS;aACV,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YACxC,MAAM,YAAY,GAAG,OAAO,CAC1B,QAAQ,CAAC,aAAa,CACpB,iEAAiE,CAClE,CACF,CAAC;YACF,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACvE,OAAO,aAAa,IAAI,CAAC,YAAY,IAAI,CAAC,UAAU,CAAC,CAAC;QACxD,CAAC,EACD,SAAS,EACT,EAAE,OAAO,EAAE,MAAM,CAAC,YAAY,IAAI,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAC3D,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAChE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAEjE,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,IAAI,SAAS,EAAE,SAAS,EAAE;YACtE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACvB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC;YAC7E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QAChD,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,+BAA+B,CAAC,EAAE,CAAC;YACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;QACxD,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAChD,CAAC;YAAS,CAAC;QACT,IAAI,eAAe;YAAE,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACrE,CAAC;AACH,CAAC,CAAC"}

package/dist/zero-token/providers/glm-web-auth.d.ts

@@ -0,0 +1,3 @@
+import type { ProviderAuthFunction } from "./provider-types.js";
+export declare const auth: ProviderAuthFunction;
+//# sourceMappingURL=glm-web-auth.d.ts.map

package/dist/zero-token/providers/glm-web-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"glm-web-auth.d.ts","sourceRoot":"","sources":["../../../src/zero-token/providers/glm-web-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAahE,eAAO,MAAM,IAAI,EAAE,oBAmClB,CAAC"}

package/dist/zero-token/providers/glm-web-auth.js

@@ -0,0 +1,42 @@
+import { openProviderBrowser, waitForUrlLogin, extractCookies, extractLocalStorage, } from "./browser.js";
+const GLM_URL = "https://chatglm.cn";
+const AUTH_PATTERNS = ["/auth/", "/login", "/signin"];
+const COOKIE_NAMES = ["chatglm", "session", "token", "Authorization"];
+const TOKEN_KEYS = ["accessToken", "glm-token", "userToken"];
+export const auth = async (config) => {
+    let browserInstance = null;
+    try {
+        const { browser, page } = await openProviderBrowser({
+            targetUrl: GLM_URL,
+            cdpUrl: config.cdpUrl,
+            cdpPort: config.cdpPort,
+            headless: config.headless,
+            proxy: config.proxy,
+            loginTimeout: config.loginTimeout,
+        });
+        browserInstance = browser;
+        await waitForUrlLogin(page, GLM_URL, AUTH_PATTERNS, config.loginTimeout ?? 300_000);
+        const cookies = await extractCookies(page, COOKIE_NAMES);
+        const accessToken = await extractLocalStorage(page, TOKEN_KEYS);
+        const userAgent = await page.evaluate(() => navigator.userAgent);
+        return {
+            ok: true,
+            session: { cookies, accessToken: accessToken ?? undefined, userAgent },
+            info: { plan: "free" },
+        };
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        if (msg.includes("Login nicht innerhalb"))
+            return { ok: false, reason: "login-timeout" };
+        if (msg.includes("Browser konnte nicht geöffnet"))
+            return { ok: false, reason: "browser-launch-failed" };
+        return { ok: false, reason: "unknown-error" };
+    }
+    finally {
+        if (browserInstance && !config.cdpUrl) {
+            await browserInstance.close().catch(() => { });
+        }
+    }
+};
+//# sourceMappingURL=glm-web-auth.js.map

package/dist/zero-token/providers/glm-web-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"glm-web-auth.js","sourceRoot":"","sources":["../../../src/zero-token/providers/glm-web-auth.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAEtB,MAAM,OAAO,GAAG,oBAAoB,CAAC;AACrC,MAAM,aAAa,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AACtD,MAAM,YAAY,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;AACtE,MAAM,UAAU,GAAG,CAAC,aAAa,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;AAE7D,MAAM,CAAC,MAAM,IAAI,GAAyB,KAAK,EAAE,MAAM,EAAE,EAAE;IACzD,IAAI,eAAe,GAA0C,IAAI,CAAC;IAElE,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,mBAAmB,CAAC;YAClD,SAAS,EAAE,OAAO;YAClB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC,CAAC;QACH,eAAe,GAAG,OAAO,CAAC;QAE1B,MAAM,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,YAAY,IAAI,OAAO,CAAC,CAAC;QAEpF,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAChE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAEjE,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,IAAI,SAAS,EAAE,SAAS,EAAE;YACtE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACvB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QACzF,IAAI,GAAG,CAAC,QAAQ,CAAC,+BAA+B,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;QACzG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAChD,CAAC;YAAS,CAAC;QACT,IAAI,eAAe,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACtC,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;AACH,CAAC,CAAC"}

package/dist/zero-token/providers/glm-web-models.d.ts

@@ -0,0 +1,3 @@
+import type { ModelDiscoverer } from "../models/model-types.js";
+export declare const discoverModels: ModelDiscoverer;
+//# sourceMappingURL=glm-web-models.d.ts.map

package/dist/zero-token/providers/glm-web-models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"glm-web-models.d.ts","sourceRoot":"","sources":["../../../src/zero-token/providers/glm-web-models.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAa,MAAM,0BAA0B,CAAC;AA0C3E,eAAO,MAAM,cAAc,EAAE,eAa5B,CAAC"}

package/dist/zero-token/providers/glm-web-models.js

@@ -0,0 +1,52 @@
+import { getProviderBrowserPage } from "./remote-browser-session.js";
+const SUPPORTED_MODELS = [
+    {
+        id: "glm-4-plus",
+        slug: "glm-4-plus",
+        name: "GLM-4 Plus",
+        provider: "glm",
+        capabilities: { text: true },
+        maxTokens: 4096,
+        enabled: true,
+    },
+    {
+        id: "glm-4",
+        slug: "glm-4",
+        name: "GLM-4",
+        provider: "glm",
+        capabilities: { text: true },
+        maxTokens: 4096,
+        enabled: true,
+    },
+    {
+        id: "glm-4-think",
+        slug: "glm-4-think",
+        name: "GLM-4 Think",
+        provider: "glm",
+        capabilities: { text: true },
+        maxTokens: 4096,
+        enabled: true,
+    },
+    {
+        id: "glm-4-zero",
+        slug: "glm-4-zero",
+        name: "GLM-4 Zero",
+        provider: "glm",
+        capabilities: { text: true },
+        maxTokens: 4096,
+        enabled: true,
+    },
+];
+export const discoverModels = async () => {
+    const page = await getProviderBrowserPage("https://chatglm.cn/");
+    await page.goto("https://chatglm.cn/", {
+        waitUntil: "domcontentloaded",
+        timeout: 30_000,
+    });
+    const current = new URL(page.url());
+    if (/login|signin|auth/i.test(current.pathname)) {
+        throw new Error("GLM-Browserprofil ist nicht angemeldet.");
+    }
+    return SUPPORTED_MODELS;
+};
+//# sourceMappingURL=glm-web-models.js.map

package/dist/zero-token/providers/glm-web-models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"glm-web-models.js","sourceRoot":"","sources":["../../../src/zero-token/providers/glm-web-models.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,MAAM,gBAAgB,GAAgB;IACpC;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,KAAK;QACf,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;QAC5B,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,KAAK;QACf,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;QAC5B,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,KAAK;QACf,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;QAC5B,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,KAAK;QACf,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;QAC5B,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,IAAI;KACd;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAoB,KAAK,IAAI,EAAE;IACxD,MAAM,IAAI,GAAG,MAAM,sBAAsB,CAAC,qBAAqB,CAAC,CAAC;IACjE,MAAM,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE;QACrC,SAAS,EAAE,kBAAkB;QAC7B,OAAO,EAAE,MAAM;KAChB,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACpC,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,gBAAgB,CAAC;AAC1B,CAAC,CAAC"}

package/dist/zero-token/providers/grok-web-auth.d.ts

@@ -0,0 +1,7 @@
+import type { ProviderAuthFunction } from "./provider-types.js";
+/**
+ * Grok-Web-Auth: Browser öffnen, auf manuellen Login warten,
+ * Cookies und Auth-Token extrahieren.
+ */
+export declare const auth: ProviderAuthFunction;
+//# sourceMappingURL=grok-web-auth.d.ts.map

package/dist/zero-token/providers/grok-web-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grok-web-auth.d.ts","sourceRoot":"","sources":["../../../src/zero-token/providers/grok-web-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAuB,MAAM,qBAAqB,CAAC;AAarF;;;GAGG;AACH,eAAO,MAAM,IAAI,EAAE,oBAgClB,CAAC"}

package/dist/zero-token/providers/grok-web-auth.js

@@ -0,0 +1,47 @@
+import { openProviderBrowser, waitForUrlLogin, extractCookies, extractLocalStorage, } from "./browser.js";
+const GROK_URL = "https://grok.com";
+const AUTH_PATTERNS = ["/auth/", "/login", "/signin"];
+const COOKIE_NAMES = ["grok", "session", "token", "x-auth-token"];
+const TOKEN_KEYS = ["accessToken", "authToken", "grokToken"];
+/**
+ * Grok-Web-Auth: Browser öffnen, auf manuellen Login warten,
+ * Cookies und Auth-Token extrahieren.
+ */
+export const auth = async (config) => {
+    let browserInstance = null;
+    try {
+        const { browser, page } = await openProviderBrowser({
+            targetUrl: GROK_URL,
+            cdpPort: config.cdpPort,
+            headless: config.headless,
+            proxy: config.proxy,
+            loginTimeout: config.loginTimeout,
+        });
+        browserInstance = browser;
+        await waitForUrlLogin(page, GROK_URL, AUTH_PATTERNS, config.loginTimeout ?? 300_000);
+        const cookies = await extractCookies(page, COOKIE_NAMES);
+        const accessToken = await extractLocalStorage(page, TOKEN_KEYS);
+        const userAgent = await page.evaluate(() => navigator.userAgent);
+        return {
+            ok: true,
+            session: { cookies, accessToken: accessToken ?? undefined, userAgent },
+            info: await fetchGrokAccountInfo({ cookies, accessToken, userAgent }),
+        };
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        if (msg.includes("Login nicht innerhalb"))
+            return { ok: false, reason: "login-timeout" };
+        if (msg.includes("Browser konnte nicht geöffnet"))
+            return { ok: false, reason: "browser-launch-failed" };
+        return { ok: false, reason: "unknown-error" };
+    }
+    finally {
+        if (browserInstance)
+            await browserInstance.close().catch(() => { });
+    }
+};
+async function fetchGrokAccountInfo(session) {
+    return { plan: "free" };
+}
+//# sourceMappingURL=grok-web-auth.js.map

package/dist/zero-token/providers/grok-web-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grok-web-auth.js","sourceRoot":"","sources":["../../../src/zero-token/providers/grok-web-auth.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAEtB,MAAM,QAAQ,GAAG,kBAAkB,CAAC;AACpC,MAAM,aAAa,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AACtD,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;AAClE,MAAM,UAAU,GAAG,CAAC,aAAa,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;AAE7D;;;GAGG;AACH,MAAM,CAAC,MAAM,IAAI,GAAyB,KAAK,EAAE,MAAM,EAAE,EAAE;IACzD,IAAI,eAAe,GAA0C,IAAI,CAAC;IAElE,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,mBAAmB,CAAC;YAClD,SAAS,EAAE,QAAQ;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC,CAAC;QACH,eAAe,GAAG,OAAO,CAAC;QAE1B,MAAM,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,YAAY,IAAI,OAAO,CAAC,CAAC;QAErF,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAChE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAEjE,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,IAAI,SAAS,EAAE,SAAS,EAAE;YACtE,IAAI,EAAE,MAAM,oBAAoB,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;SACtE,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QACzF,IAAI,GAAG,CAAC,QAAQ,CAAC,+BAA+B,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;QACzG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAChD,CAAC;YAAS,CAAC;QACT,IAAI,eAAe;YAAE,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACrE,CAAC;AACH,CAAC,CAAC;AAEF,KAAK,UAAU,oBAAoB,CACjC,OAA6E;IAE7E,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC"}

package/dist/zero-token/providers/identity/chatgpt-identity.d.ts

@@ -0,0 +1,15 @@
+export declare const CHATGPT_IDENTITY_SPEC: Readonly<{
+    provider: "chatgpt";
+    allowedHosts: string[];
+    sessionCookieNames: never[];
+    accessTokenCandidates: never[];
+    refreshTokenCandidates: never[];
+    deviceIdCandidates: never[];
+    csrfTokenCandidates: never[];
+    requirements: {
+        sessionCredential: true;
+        deviceId: false;
+        csrfToken: false;
+    };
+}>;
+//# sourceMappingURL=chatgpt-identity.d.ts.map

package/dist/zero-token/providers/identity/chatgpt-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chatgpt-identity.d.ts","sourceRoot":"","sources":["../../../../src/zero-token/providers/identity/chatgpt-identity.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;EAaD,CAAC"}

package/dist/zero-token/providers/identity/chatgpt-identity.js

@@ -0,0 +1,15 @@
+export const CHATGPT_IDENTITY_SPEC = Object.freeze({
+    provider: "chatgpt",
+    allowedHosts: ["chatgpt.com"],
+    sessionCookieNames: [],
+    accessTokenCandidates: [],
+    refreshTokenCandidates: [],
+    deviceIdCandidates: [],
+    csrfTokenCandidates: [],
+    requirements: {
+        sessionCredential: true,
+        deviceId: false,
+        csrfToken: false,
+    },
+});
+//# sourceMappingURL=chatgpt-identity.js.map

package/dist/zero-token/providers/identity/chatgpt-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chatgpt-identity.js","sourceRoot":"","sources":["../../../../src/zero-token/providers/identity/chatgpt-identity.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC;IACjD,QAAQ,EAAE,SAAS;IACnB,YAAY,EAAE,CAAC,aAAa,CAAC;IAC7B,kBAAkB,EAAE,EAAE;IACtB,qBAAqB,EAAE,EAAE;IACzB,sBAAsB,EAAE,EAAE;IAC1B,kBAAkB,EAAE,EAAE;IACtB,mBAAmB,EAAE,EAAE;IACvB,YAAY,EAAE;QACZ,iBAAiB,EAAE,IAAI;QACvB,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,KAAK;KACjB;CAC6B,CAAC,CAAC"}

package/dist/zero-token/providers/identity/identity-validation.d.ts

@@ -0,0 +1,3 @@
+import type { IdentityValidationResult, ProviderIdentity, ProviderIdentitySpec } from "./provider-identity.js";
+export declare function validateProviderIdentity(spec: ProviderIdentitySpec, identity: ProviderIdentity): IdentityValidationResult;
+//# sourceMappingURL=identity-validation.d.ts.map

package/dist/zero-token/providers/identity/identity-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-validation.d.ts","sourceRoot":"","sources":["../../../../src/zero-token/providers/identity/identity-validation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,wBAAwB,EACxB,gBAAgB,EAChB,oBAAoB,EACrB,MAAM,wBAAwB,CAAC;AAMhC,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,oBAAoB,EAC1B,QAAQ,EAAE,gBAAgB,GACzB,wBAAwB,CA2E1B"}

package/dist/zero-token/providers/identity/identity-validation.js

@@ -0,0 +1,74 @@
+function hostMatches(hostname, allowedHost) {
+    return hostname === allowedHost || hostname.endsWith(`.${allowedHost}`);
+}
+export function validateProviderIdentity(spec, identity) {
+    const issues = [];
+    if (!identity.userAgent.trim()) {
+        issues.push({
+            code: "missing-user-agent",
+            severity: "error",
+            field: "userAgent",
+            message: `${spec.provider}: User-Agent fehlt.`,
+        });
+    }
+    if (!identity.origin.trim()) {
+        issues.push({
+            code: "missing-origin",
+            severity: "error",
+            field: "origin",
+            message: `${spec.provider}: Browser-Origin fehlt.`,
+        });
+    }
+    else {
+        try {
+            const hostname = new URL(identity.origin).hostname.toLowerCase();
+            if (!spec.allowedHosts.some((allowed) => hostMatches(hostname, allowed))) {
+                issues.push({
+                    code: "origin-host-mismatch",
+                    severity: "error",
+                    field: "origin",
+                    message: `${spec.provider}: Origin ${hostname} gehört nicht zum Providerprofil.`,
+                });
+            }
+        }
+        catch {
+            issues.push({
+                code: "invalid-origin",
+                severity: "error",
+                field: "origin",
+                message: `${spec.provider}: Browser-Origin ist ungültig.`,
+            });
+        }
+    }
+    if (spec.requirements.sessionCredential &&
+        !identity.accessToken &&
+        Object.keys(identity.cookies).length === 0) {
+        issues.push({
+            code: "missing-session-credential",
+            severity: "error",
+            field: "sessionCredential",
+            message: `${spec.provider}: Keine Session-Credentials verfügbar.`,
+        });
+    }
+    if (spec.requirements.deviceId && !identity.deviceId) {
+        issues.push({
+            code: "missing-device-id",
+            severity: "error",
+            field: "deviceId",
+            message: `${spec.provider}: Persistente Geräte-ID fehlt.`,
+        });
+    }
+    if (spec.requirements.csrfToken && !identity.csrfToken) {
+        issues.push({
+            code: "missing-csrf-token",
+            severity: "error",
+            field: "csrfToken",
+            message: `${spec.provider}: CSRF-Token fehlt.`,
+        });
+    }
+    return Object.freeze({
+        valid: !issues.some((issue) => issue.severity === "error"),
+        issues: Object.freeze(issues),
+    });
+}
+//# sourceMappingURL=identity-validation.js.map

package/dist/zero-token/providers/identity/identity-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-validation.js","sourceRoot":"","sources":["../../../../src/zero-token/providers/identity/identity-validation.ts"],"names":[],"mappings":"AAOA,SAAS,WAAW,CAAC,QAAgB,EAAE,WAAmB;IACxD,OAAO,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,IAA0B,EAC1B,QAA0B;IAE1B,MAAM,MAAM,GAA8B,EAAE,CAAC;IAE7C,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,qBAAqB;SAC/C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,yBAAyB;SACnD,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YACjE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;gBACzE,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,sBAAsB;oBAC5B,QAAQ,EAAE,OAAO;oBACjB,KAAK,EAAE,QAAQ;oBACf,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,YAAY,QAAQ,mCAAmC;iBACjF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,gBAAgB;gBACtB,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,gCAAgC;aAC1D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IACE,IAAI,CAAC,YAAY,CAAC,iBAAiB;QACnC,CAAC,QAAQ,CAAC,WAAW;QACrB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAC1C,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,4BAA4B;YAClC,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,mBAAmB;YAC1B,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,wCAAwC;SAClE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mBAAmB;YACzB,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,gCAAgC;SAC1D,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,qBAAqB;SAC/C,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC;QAC1D,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;KAC9B,CAAC,CAAC;AACL,CAAC"}

package/dist/zero-token/providers/identity/provider-identity-readiness.d.ts

@@ -0,0 +1,16 @@
+import type { ProviderType } from "../../accounts/account-types.js";
+export interface ProviderIdentitySignals {
+    provider: ProviderType;
+    origin: string;
+    userAgentPresent: boolean;
+    accountSessionPresent: boolean;
+    deviceBindingPresent: boolean;
+    requestProtectionPresent: boolean;
+}
+export interface ProviderIdentityReadiness {
+    provider: ProviderType;
+    ready: boolean;
+    missing: readonly string[];
+}
+export declare function evaluateProviderIdentityReadiness(signals: ProviderIdentitySignals): ProviderIdentityReadiness;
+//# sourceMappingURL=provider-identity-readiness.d.ts.map

package/dist/zero-token/providers/identity/provider-identity-readiness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-identity-readiness.d.ts","sourceRoot":"","sources":["../../../../src/zero-token/providers/identity/provider-identity-readiness.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAEpE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,YAAY,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,OAAO,CAAC;IAC1B,qBAAqB,EAAE,OAAO,CAAC;IAC/B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,wBAAwB,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,YAAY,CAAC;IACvB,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5B;AA0CD,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,uBAAuB,GAC/B,yBAAyB,CAsB3B"}

package/dist/zero-token/providers/identity/provider-identity-readiness.js

@@ -0,0 +1,56 @@
+const RULES = {
+    chatgpt: {
+        allowedHosts: ["chatgpt.com"],
+        requireDeviceBinding: false,
+        requireRequestProtection: false,
+    },
+    claude: {
+        allowedHosts: ["claude.ai"],
+        requireDeviceBinding: true,
+        requireRequestProtection: false,
+    },
+    qwen: {
+        allowedHosts: ["chat.qwen.ai"],
+        requireDeviceBinding: false,
+        requireRequestProtection: false,
+    },
+    glm: {
+        allowedHosts: ["chatglm.cn"],
+        requireDeviceBinding: true,
+        requireRequestProtection: false,
+    },
+};
+function matchesAllowedHost(origin, allowedHosts) {
+    try {
+        const hostname = new URL(origin).hostname.toLowerCase();
+        return allowedHosts.some((allowed) => hostname === allowed || hostname.endsWith(`.${allowed}`));
+    }
+    catch {
+        return false;
+    }
+}
+export function evaluateProviderIdentityReadiness(signals) {
+    const rule = RULES[signals.provider];
+    const missing = [];
+    if (!rule)
+        missing.push("provider-rule");
+    if (!signals.userAgentPresent)
+        missing.push("user-agent");
+    if (!signals.accountSessionPresent)
+        missing.push("account-session");
+    if (!rule || !matchesAllowedHost(signals.origin, rule.allowedHosts)) {
+        missing.push("provider-origin");
+    }
+    if (rule?.requireDeviceBinding && !signals.deviceBindingPresent) {
+        missing.push("device-binding");
+    }
+    if (rule?.requireRequestProtection && !signals.requestProtectionPresent) {
+        missing.push("request-protection");
+    }
+    return Object.freeze({
+        provider: signals.provider,
+        ready: missing.length === 0,
+        missing: Object.freeze(missing),
+    });
+}
+//# sourceMappingURL=provider-identity-readiness.js.map