@inerrata-corporation/errata 2.0.6-dev.2082 → 2.0.6-dev.2115

package/errata.mjs

@@ -77056,7 +77056,7 @@ function createWatchBreaker(deps) {
 }
 
 // src/engine.ts
-var DAEMON_VERSION = true ? "2.0.6-dev.2082" : "2.0.0-alpha.0";
+var DAEMON_VERSION = true ? "2.0.6-dev.2115" : "2.0.0-alpha.0";
 var IGNORED_PATH = /[\\/](?:\.git|node_modules|\.errata|\.claude|\.codex|\.cursor|\.turbo|\.next|dist|coverage|test-results|playwright-report|__pycache__)(?:[\\/]|$)/;
 var IGNORED_NOISE = /castalia\.db|eventlog\.sqlite|turn-cursors/;
 var GIT_OP_MUTE_MS = 4e3;
@@ -82578,10 +82578,21 @@ init_cloud_auth();
 import { createServer } from "node:http";
 var DEFAULT_OAUTH_SCOPE = "openid profile graph:read graph:write mcp:tools";
 var strip = (u) => u.replace(/\/+$/, "");
-function deviceEndpoints(tokenEndpoint) {
+function deviceEndpoints(tokenEndpoint, deviceAuthorizationEndpoint) {
   const token = new URL(tokenEndpoint);
   const authRoot = token.pathname.replace(/\/(?:oauth2|mcp)\/token\/?$/, "");
-  if (authRoot === token.pathname) throw new Error("authorization server exposes no device endpoint");
+  if (authRoot === token.pathname) {
+    if (deviceAuthorizationEndpoint) {
+      const device = new URL(deviceAuthorizationEndpoint);
+      const code = `${device.origin}${device.pathname.replace(/\/+$/, "")}`;
+      return {
+        code,
+        token: `${code}/token`,
+        resource: new URL("/api/gate/session-token", device.origin).toString()
+      };
+    }
+    throw new Error("authorization server exposes no device endpoint");
+  }
   const prefix = authRoot.replace(/\/api\/auth\/?$/, "");
   const at = (path2) => new URL(`${path2}`, `${token.origin}${prefix || "/"}`).toString();
   return {
@@ -82593,7 +82604,7 @@ function deviceEndpoints(tokenEndpoint) {
 async function loginOAuthDevice(opts) {
   const fetchFn = opts.fetchFn ?? fetch;
   const endpoints = await discoverEndpoints(opts.cloudUrl, fetchFn);
-  const device = deviceEndpoints(endpoints.tokenEndpoint);
+  const device = deviceEndpoints(endpoints.tokenEndpoint, endpoints.deviceAuthorizationEndpoint);
   const clientId = oauthClientId();
   const scope = opts.scope ?? DEFAULT_OAUTH_SCOPE;
   const codeResponse = await fetchFn(device.code, {
@@ -82692,7 +82703,8 @@ async function discoverEndpoints(cloudUrl, fetchFn = fetch) {
         return {
           authorizationEndpoint: j.authorization_endpoint,
           tokenEndpoint: j.token_endpoint,
-          ...j.registration_endpoint ? { registrationEndpoint: j.registration_endpoint } : {}
+          ...j.registration_endpoint ? { registrationEndpoint: j.registration_endpoint } : {},
+          ...j.device_authorization_endpoint ? { deviceAuthorizationEndpoint: j.device_authorization_endpoint } : {}
         };
       }
     }
@@ -82809,7 +82821,7 @@ function isDecision(value) {
 async function linkThroughConsole(opts) {
   const fetchFn = opts.fetchFn ?? fetch;
   const endpoints = await discoverEndpoints(opts.cloudUrl, fetchFn);
-  const device = deviceEndpoints(endpoints.tokenEndpoint);
+  const device = deviceEndpoints(endpoints.tokenEndpoint, endpoints.deviceAuthorizationEndpoint);
   const clientId = oauthClientId();
   const link = {
     locator: opts.facts.locator,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inerrata-corporation/errata",
-  "version": "2.0.6-dev.2082",
+  "version": "2.0.6-dev.2115",
   "description": "errata - local-first observation engine for AI coding agents",
   "type": "module",
   "bin": {