@inerrata-corporation/errata 2.0.6-dev.2082 → 2.0.6-dev.2138

package/errata.mjs

@@ -77056,7 +77056,7 @@ function createWatchBreaker(deps) {
 }
 
 // src/engine.ts
-var DAEMON_VERSION = true ? "2.0.6-dev.2082" : "2.0.0-alpha.0";
+var DAEMON_VERSION = true ? "2.0.6-dev.2138" : "2.0.0-alpha.0";
 var IGNORED_PATH = /[\\/](?:\.git|node_modules|\.errata|\.claude|\.codex|\.cursor|\.turbo|\.next|dist|coverage|test-results|playwright-report|__pycache__)(?:[\\/]|$)/;
 var IGNORED_NOISE = /castalia\.db|eventlog\.sqlite|turn-cursors/;
 var GIT_OP_MUTE_MS = 4e3;
@@ -82572,16 +82572,49 @@ import { execFileSync as execFileSync4 } from "node:child_process";
 import { existsSync as existsSync29, writeFileSync as writeFileSync22 } from "node:fs";
 import { join as join34 } from "node:path";
 
+// src/device-poll.ts
+var THROTTLED_POLL_MIN_WAIT_MS = 11e3;
+var THROTTLED_INTERVAL_CAP_MS = 6e4;
+function throttledPoll(res, intervalMs) {
+  if (res.status !== 429 && res.status !== 503) return null;
+  const next = Math.max(intervalMs, Math.min(intervalMs + 5e3, THROTTLED_INTERVAL_CAP_MS));
+  return {
+    intervalMs: next,
+    waitMs: Math.max(next, retryAfterMs(res.headers) ?? 0, THROTTLED_POLL_MIN_WAIT_MS)
+  };
+}
+function retryAfterMs(headers, now = Date.now()) {
+  for (const name2 of ["retry-after", "x-retry-after"]) {
+    const raw2 = headers.get(name2)?.trim();
+    if (!raw2) continue;
+    if (/^\d+$/.test(raw2)) return Number(raw2) * 1e3;
+    const at = Date.parse(raw2);
+    if (!Number.isNaN(at)) return Math.max(0, at - now);
+  }
+  return null;
+}
+
 // src/oauth-login.ts
 init_src7();
 init_cloud_auth();
 import { createServer } from "node:http";
 var DEFAULT_OAUTH_SCOPE = "openid profile graph:read graph:write mcp:tools";
 var strip = (u) => u.replace(/\/+$/, "");
-function deviceEndpoints(tokenEndpoint) {
+function deviceEndpoints(tokenEndpoint, deviceAuthorizationEndpoint) {
   const token = new URL(tokenEndpoint);
   const authRoot = token.pathname.replace(/\/(?:oauth2|mcp)\/token\/?$/, "");
-  if (authRoot === token.pathname) throw new Error("authorization server exposes no device endpoint");
+  if (authRoot === token.pathname) {
+    if (deviceAuthorizationEndpoint) {
+      const device = new URL(deviceAuthorizationEndpoint);
+      const code = `${device.origin}${device.pathname.replace(/\/+$/, "")}`;
+      return {
+        code,
+        token: `${code}/token`,
+        resource: new URL("/api/gate/session-token", device.origin).toString()
+      };
+    }
+    throw new Error("authorization server exposes no device endpoint");
+  }
   const prefix = authRoot.replace(/\/api\/auth\/?$/, "");
   const at = (path2) => new URL(`${path2}`, `${token.origin}${prefix || "/"}`).toString();
   return {
@@ -82593,7 +82626,7 @@ function deviceEndpoints(tokenEndpoint) {
 async function loginOAuthDevice(opts) {
   const fetchFn = opts.fetchFn ?? fetch;
   const endpoints = await discoverEndpoints(opts.cloudUrl, fetchFn);
-  const device = deviceEndpoints(endpoints.tokenEndpoint);
+  const device = deviceEndpoints(endpoints.tokenEndpoint, endpoints.deviceAuthorizationEndpoint);
   const clientId = oauthClientId();
   const scope = opts.scope ?? DEFAULT_OAUTH_SCOPE;
   const codeResponse = await fetchFn(device.code, {
@@ -82615,10 +82648,12 @@ async function loginOAuthDevice(opts) {
   });
   const deadline = Date.now() + Math.min(code.expires_in * 1e3, opts.timeoutMs ?? Number.POSITIVE_INFINITY);
   let intervalMs = Math.max(2, code.interval ?? 5) * 1e3;
+  let waitMs = intervalMs;
   let deviceSession = null;
   let approvedInstallation = null;
   while (Date.now() < deadline) {
-    await (opts.sleep ?? ((ms) => new Promise((resolve7) => setTimeout(resolve7, ms))))(intervalMs);
+    await (opts.sleep ?? ((ms) => new Promise((resolve7) => setTimeout(resolve7, ms))))(waitMs);
+    waitMs = intervalMs;
     const poll = await fetchFn(device.token, {
       method: "POST",
       headers: { "content-type": "application/json", accept: "application/json" },
@@ -82630,10 +82665,16 @@ async function loginOAuthDevice(opts) {
     });
     const payload = await poll.json().catch(() => null);
     if (!poll.ok) {
+      const throttle = throttledPoll(poll, intervalMs);
+      if (throttle) {
+        ({ intervalMs, waitMs } = throttle);
+        continue;
+      }
       const error48 = typeof payload?.["error"] === "string" ? payload["error"] : "device_poll_failed";
       if (error48 === "authorization_pending") continue;
       if (error48 === "slow_down") {
         intervalMs += 5e3;
+        waitMs = intervalMs;
         continue;
       }
       throw new Error(`device authorization failed: ${error48}`);
@@ -82692,7 +82733,8 @@ async function discoverEndpoints(cloudUrl, fetchFn = fetch) {
         return {
           authorizationEndpoint: j.authorization_endpoint,
           tokenEndpoint: j.token_endpoint,
-          ...j.registration_endpoint ? { registrationEndpoint: j.registration_endpoint } : {}
+          ...j.registration_endpoint ? { registrationEndpoint: j.registration_endpoint } : {},
+          ...j.device_authorization_endpoint ? { deviceAuthorizationEndpoint: j.device_authorization_endpoint } : {}
         };
       }
     }
@@ -82809,7 +82851,7 @@ function isDecision(value) {
 async function linkThroughConsole(opts) {
   const fetchFn = opts.fetchFn ?? fetch;
   const endpoints = await discoverEndpoints(opts.cloudUrl, fetchFn);
-  const device = deviceEndpoints(endpoints.tokenEndpoint);
+  const device = deviceEndpoints(endpoints.tokenEndpoint, endpoints.deviceAuthorizationEndpoint);
   const clientId = oauthClientId();
   const link = {
     locator: opts.facts.locator,
@@ -82843,9 +82885,11 @@ async function linkThroughConsole(opts) {
   });
   const deadline = Date.now() + Math.min(code.expires_in * 1e3, opts.timeoutMs ?? Number.POSITIVE_INFINITY);
   let intervalMs = Math.max(2, code.interval ?? 5) * 1e3;
+  let waitMs = intervalMs;
   const sleep = opts.sleep ?? ((ms) => new Promise((resolve7) => setTimeout(resolve7, ms)));
   while (Date.now() < deadline) {
-    await sleep(intervalMs);
+    await sleep(waitMs);
+    waitMs = intervalMs;
     const poll = await fetchFn(device.token, {
       method: "POST",
       headers: { "content-type": "application/json", accept: "application/json" },
@@ -82857,10 +82901,16 @@ async function linkThroughConsole(opts) {
     });
     const payload = await poll.json().catch(() => null);
     if (!poll.ok) {
+      const throttle = throttledPoll(poll, intervalMs);
+      if (throttle) {
+        ({ intervalMs, waitMs } = throttle);
+        continue;
+      }
       const error48 = typeof payload?.["error"] === "string" ? payload["error"] : "device_poll_failed";
       if (error48 === "authorization_pending") continue;
       if (error48 === "slow_down") {
         intervalMs += 5e3;
+        waitMs = intervalMs;
         continue;
       }
       if (error48 === "access_denied") return { status: "denied" };
@@ -84886,9 +84936,11 @@ async function requestDeviceAuthorization(fetchFn, deviceEndpoint, p) {
 async function pollDeviceApproval(fetchFn, deviceEndpoint, p, sleep = (ms) => new Promise((r) => setTimeout(r, ms))) {
   const deadline = Date.now() + p.timeoutMs;
   let intervalMs = Math.max(1, p.intervalSeconds) * 1e3;
+  let waitMs = intervalMs;
   for (; ; ) {
     if (Date.now() >= deadline) throw new Error("device approval timed out \u2014 run `errata login` again");
-    await sleep(intervalMs);
+    await sleep(waitMs);
+    waitMs = intervalMs;
     const res = await fetchFn(`${strip2(deviceEndpoint)}/token`, {
       method: "POST",
       headers: { "content-type": "application/json", accept: "application/json" },
@@ -84900,9 +84952,15 @@ async function pollDeviceApproval(fetchFn, deviceEndpoint, p, sleep = (ms) => ne
     });
     const j = await res.json().catch(() => ({}));
     if (res.ok && j.access_token) return j.access_token;
+    const throttle = throttledPoll(res, intervalMs);
+    if (throttle) {
+      ({ intervalMs, waitMs } = throttle);
+      continue;
+    }
     if (j.error === "authorization_pending") continue;
     if (j.error === "slow_down") {
       intervalMs += 5e3;
+      waitMs = intervalMs;
       continue;
     }
     throw new Error(`device approval failed: ${j.error ?? `HTTP ${res.status}`}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inerrata-corporation/errata",
-  "version": "2.0.6-dev.2082",
+  "version": "2.0.6-dev.2138",
   "description": "errata - local-first observation engine for AI coding agents",
   "type": "module",
   "bin": {