@inhuman.tools/harness 0.0.0-stage → 0.1.0

package/dist/drivers/mcp/stdio-env.js

@@ -0,0 +1,82 @@
+/** Cap ring bytes (diagnostics only — never connection failure). */
+const STDERR_RING_MAX = 64 * 1024;
+const STDERR_TAIL_LINES = 40;
+export class StderrRing {
+    #chunks = [];
+    #bytes = 0;
+    push(chunk) {
+        const buf = typeof chunk === "string" ? Buffer.from(chunk) : chunk;
+        if (buf.length === 0)
+            return;
+        this.#chunks.push(buf);
+        this.#bytes += buf.length;
+        while (this.#bytes > STDERR_RING_MAX && this.#chunks.length > 1) {
+            const dropped = this.#chunks.shift();
+            this.#bytes -= dropped.length;
+        }
+        if (this.#bytes > STDERR_RING_MAX && this.#chunks.length === 1) {
+            const only = this.#chunks[0];
+            const keep = only.subarray(only.length - STDERR_RING_MAX);
+            this.#chunks = [Buffer.from(keep)];
+            this.#bytes = keep.length;
+        }
+    }
+    /** Last N lines for error/connect messages. */
+    tail(maxLines = STDERR_TAIL_LINES) {
+        const text = Buffer.concat(this.#chunks).toString("utf8");
+        if (text.length === 0)
+            return "";
+        const lines = text.split(/\r?\n/);
+        return lines.slice(-maxLines).join("\n").trimEnd();
+    }
+    clear() {
+        this.#chunks = [];
+        this.#bytes = 0;
+    }
+}
+export function buildMcpChildEnvExtras(options) {
+    const extras = {};
+    const tmp = process.env.TMPDIR ?? process.env.TMP ?? process.env.TEMP;
+    if (typeof tmp === "string" && tmp !== "") {
+        extras.TMPDIR = tmp;
+        if (process.platform === "win32") {
+            extras.TEMP = tmp;
+            extras.TMP = tmp;
+        }
+    }
+    const names = options.envForward ?? [];
+    if (names.length > 0) {
+        const resolved = options.resolveEnv?.(names) ??
+            Object.fromEntries(names.map((n) => {
+                const v = process.env[n];
+                return [n, typeof v === "string" ? v : ""];
+            }));
+        for (const [k, v] of Object.entries(resolved)) {
+            if (v !== "")
+                extras[k] = v;
+        }
+    }
+    if (options.secrets) {
+        for (const [k, v] of Object.entries(options.secrets)) {
+            if (v !== "")
+                extras[k] = v;
+        }
+    }
+    return extras;
+}
+export function secretEnv(secrets) {
+    const out = {};
+    const bag = secrets.all?.();
+    if (!bag)
+        return out;
+    for (const [k, v] of Object.entries(bag)) {
+        if (typeof v === "string" && v !== "") {
+            if (k.startsWith("env_"))
+                out[k.slice(4)] = v;
+            else if (k === "token" || k === "apiKey")
+                out[k.toUpperCase()] = v;
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=stdio-env.js.map

package/dist/drivers/mcp/stdio-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio-env.js","sourceRoot":"","sources":["../../../src/drivers/mcp/stdio-env.ts"],"names":[],"mappings":"AAUA,oEAAoE;AACpE,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,CAAC;AAClC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,MAAM,OAAO,UAAU;IACrB,OAAO,GAAa,EAAE,CAAC;IACvB,MAAM,GAAG,CAAC,CAAC;IAEX,IAAI,CAAC,KAAsB;QACzB,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACnE,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC7B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC;QAC1B,OAAO,IAAI,CAAC,MAAM,GAAG,eAAe,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAG,CAAC;YACtC,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;QAChC,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,GAAG,eAAe,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC,CAAC;YAC1D,IAAI,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,IAAI,CAAC,QAAQ,GAAG,iBAAiB;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IACrD,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAClB,CAAC;CACF;AAED,MAAM,UAAU,sBAAsB,CAAC,OAItC;IACC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IACtE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QAC1C,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC;QACpB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC;YAClB,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC;QACnB,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;IACvC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,QAAQ,GACZ,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC;YAC3B,MAAM,CAAC,WAAW,CAChB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACd,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACzB,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7C,CAAC,CAAC,CACH,CAAC;QACJ,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,KAAK,EAAE;gBAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,KAAK,EAAE;gBAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAA8B;IACtD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,OAAO,GAAG,CAAC;IACrB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;iBACzC,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,QAAQ;gBAAE,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/drivers/oidc/oidc-driver.d.ts

@@ -0,0 +1,28 @@
+import { type AdoptCallback, type DriverAdoptArgs, type DriverAdoptBags } from "../adopt.js";
+import { OpenAiCompatDriverConnection } from "../openai-compat/openai-compat-driver.js";
+import { type OidcIdentity, type OidcProfile } from "./oidc.js";
+export declare abstract class OidcDriverConnection extends OpenAiCompatDriverConnection {
+    #private;
+    static oidcProfile: OidcProfile;
+    static adopt(this: typeof OidcDriverConnection, args: DriverAdoptArgs, callback: AdoptCallback): Promise<DriverAdoptBags>;
+    accessor state: {
+        catalogName: string;
+        account: import("../openai-compat/api-extensions/types.js").AccountSnapshot | undefined;
+        keyMask: string;
+        models: string[];
+        windows: Record<string, number>;
+        identity: OidcIdentity | undefined;
+    };
+    bootstrap(): Promise<void>;
+    /**
+     * Extra identity after OIDC userinfo (Grok CLI `/user?include=subscription`).
+     * Fail-soft: never throw into bootstrap.
+     */
+    protected probeAccount(): Promise<OidcIdentity>;
+    hydrateAccount(): Promise<void>;
+    [Symbol.asyncDispose](): Promise<void>;
+    refreshSession(): Promise<void>;
+    protected reportLive(): void;
+    protected oidcCatalogName(): string;
+}
+//# sourceMappingURL=oidc-driver.d.ts.map

package/dist/drivers/oidc/oidc-driver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc-driver.d.ts","sourceRoot":"","sources":["../../../src/drivers/oidc/oidc-driver.ts"],"names":[],"mappings":"AAMA,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,eAAe,EACrB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,4BAA4B,EAAyB,MAAM,0CAA0C,CAAC;AAC/G,OAAO,EAYL,KAAK,YAAY,EACjB,KAAK,WAAW,EACjB,MAAM,WAAW,CAAC;AAEnB,8BAAsB,oBAAqB,SAAQ,4BAA4B;;IAC7E,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC;IAEhC,OAAsB,KAAK,CAAC,IAAI,EAAE,OAAO,oBAAoB,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,CAoBvI;IAID,SAAsC,KAAK;;;;;;kBAElB,YAAY,GAAG,SAAS;MAC/C;IAEa,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAQxC;IAED;;;OAGG;IACH,UAAgB,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC,CAEpD;IAEK,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAwBpC;IAEc,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAMpD;IAEK,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAOpC;IAcD,UACmB,UAAU,IAAI,IAAI,CAGpC;IAED,SAAS,CAAC,eAAe,IAAI,MAAM,CAKlC;CAmCF"}

package/dist/drivers/oidc/oidc-driver.js

@@ -0,0 +1,207 @@
+var __runInitializers = (this && this.__runInitializers) || function (thisArg, initializers, value) {
+    var useValue = arguments.length > 2;
+    for (var i = 0; i < initializers.length; i++) {
+        value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
+    }
+    return useValue ? value : void 0;
+};
+var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
+    function accept(f) { if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected"); return f; }
+    var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
+    var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
+    var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
+    var _, done = false;
+    for (var i = decorators.length - 1; i >= 0; i--) {
+        var context = {};
+        for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
+        for (var p in contextIn.access) context.access[p] = contextIn.access[p];
+        context.addInitializer = function (f) { if (done) throw new TypeError("Cannot add initializers after decoration has completed"); extraInitializers.push(accept(f || null)); };
+        var result = (0, decorators[i])(kind === "accessor" ? { get: descriptor.get, set: descriptor.set } : descriptor[key], context);
+        if (kind === "accessor") {
+            if (result === void 0) continue;
+            if (result === null || typeof result !== "object") throw new TypeError("Object expected");
+            if (_ = accept(result.get)) descriptor.get = _;
+            if (_ = accept(result.set)) descriptor.set = _;
+            if (_ = accept(result.init)) initializers.unshift(_);
+        }
+        else if (_ = accept(result)) {
+            if (kind === "field") initializers.unshift(_);
+            else descriptor[key] = _;
+        }
+    }
+    if (target) Object.defineProperty(target, contextIn.name, descriptor);
+    done = true;
+};
+/**
+ * OpenAI-compat connection whose session is a refreshable OIDC bundle.
+ * Instance bootstrap refreshes the access token; the class parks PKCE for adopt.
+ */
+import { action, observable } from "mobx";
+import { asAdoptString, schemeQuote, } from "../adopt.js";
+import { OpenAiCompatDriverConnection, openaiCompatLiveState } from "../openai-compat/openai-compat-driver.js";
+import { accessTokenExpiring, exchangeOidcCode, fetchOidcUserinfo, identityFromClaims, jwtPayload, mergeOidcIdentity, mintOidcPkce, OIDC_REFRESH_MS, refreshOidcToken, secretsFromIdentity, secretsFromTokens, } from "./oidc.js";
+let OidcDriverConnection = (() => {
+    var _a;
+    let _classSuper = OpenAiCompatDriverConnection;
+    let _instanceExtraInitializers = [];
+    let _state_decorators;
+    let _state_initializers = [];
+    let _state_extraInitializers = [];
+    let _reportLive_decorators;
+    return class OidcDriverConnection extends _classSuper {
+        static {
+            const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
+            _reportLive_decorators = [action];
+            __esDecorate(this, null, _state_decorators, { kind: "accessor", name: "state", static: false, private: false, access: { has: obj => "state" in obj, get: obj => obj.state, set: (obj, value) => { obj.state = value; } }, metadata: _metadata }, _state_initializers, _state_extraInitializers);
+            __esDecorate(this, null, _reportLive_decorators, { kind: "method", name: "reportLive", static: false, private: false, access: { has: obj => "reportLive" in obj, get: obj => obj.reportLive }, metadata: _metadata }, null, _instanceExtraInitializers);
+            if (_metadata) Object.defineProperty(this, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
+        }
+        static oidcProfile;
+        static async adopt(args, callback) {
+            const profile = this.oidcProfile;
+            const minted = mintOidcPkce(profile);
+            const answer = await callback("UI", `(harness/open-url :url ${schemeQuote(minted.url)} :description ${schemeQuote(profile.loginHint)} :input 'password)`);
+            const code = asAdoptString(answer.input);
+            const redirectUri = asAdoptString(answer.redirectUri);
+            const returned = asAdoptString(answer.oauthState);
+            if (minted.state !== "" && returned !== "" && minted.state !== returned) {
+                throw new Error(`${profile.driver} sign-in state mismatch`);
+            }
+            if (redirectUri === "")
+                throw new Error(`${profile.driver} sign-in is missing the callback`);
+            const tokens = await exchangeOidcCode(profile, code, minted.verifier, redirectUri);
+            return {
+                name: typeof args.name === "string" ? args.name : undefined,
+                settings: { ...(args.settings ?? {}), baseUrl: profile.baseUrl },
+                secrets: secretsFromTokens(tokens),
+            };
+        }
+        #refreshTimer = (__runInitializers(this, _instanceExtraInitializers), null);
+        #refreshing = null;
+        #state_accessor_storage = __runInitializers(this, _state_initializers, {
+            ...openaiCompatLiveState(),
+            identity: undefined,
+        });
+        get state() { return this.#state_accessor_storage; }
+        set state(value) { this.#state_accessor_storage = value; }
+        async bootstrap() {
+            await this.refreshSession();
+            await super.bootstrap();
+            await this.hydrateAccount();
+            this.#refreshTimer = setInterval(() => {
+                void this.refreshSession();
+            }, OIDC_REFRESH_MS);
+            this.#refreshTimer.unref?.();
+        }
+        /**
+         * Extra identity after OIDC userinfo (Grok CLI `/user?include=subscription`).
+         * Fail-soft: never throw into bootstrap.
+         */
+        async probeAccount() {
+            return {};
+        }
+        async hydrateAccount() {
+            const profile = this.constructor.oidcProfile;
+            const access = this.#secretString("apiKey");
+            if (access === undefined) {
+                this.reportLive();
+                return;
+            }
+            try {
+                const jwt = identityFromClaims(jwtPayload(this.#secretString("idToken")) ?? jwtPayload(access));
+                const stored = {
+                    accountId: this.#secretString("accountId"),
+                    displayName: this.#secretString("displayName"),
+                    email: this.#secretString("email"),
+                    plan: this.#secretString("plan"),
+                };
+                const userinfo = profile.userinfoUrl !== "" ? await fetchOidcUserinfo(profile.userinfoUrl, access) : {};
+                const merged = mergeOidcIdentity(jwt, stored, userinfo, await this.probeAccount());
+                this.#deposit(secretsFromIdentity(merged));
+            }
+            catch {
+                this.reportLive();
+            }
+        }
+        async [(_state_decorators = [(_a = observable).shallow.bind(_a)], Symbol.asyncDispose)]() {
+            if (this.#refreshTimer !== null) {
+                clearInterval(this.#refreshTimer);
+                this.#refreshTimer = null;
+            }
+            await super[Symbol.asyncDispose]();
+        }
+        async refreshSession() {
+            if (this.#refreshing !== null)
+                return this.#refreshing;
+            const pending = this.#refreshOnce().finally(() => {
+                if (this.#refreshing === pending)
+                    this.#refreshing = null;
+            });
+            this.#refreshing = pending;
+            return pending;
+        }
+        async #refreshOnce() {
+            const profile = this.constructor.oidcProfile;
+            const refreshToken = this.#secretString("refreshToken");
+            if (refreshToken === undefined)
+                return;
+            if (!accessTokenExpiring(this.#secretString("expiresAt")))
+                return;
+            try {
+                this.#deposit(secretsFromTokens(await refreshOidcToken(profile, refreshToken)));
+            }
+            catch {
+                /* keep the stored bundle; the next request 401s and the user re-adopts */
+            }
+        }
+        reportLive() {
+            this.state.catalogName = this.oidcCatalogName();
+            this.state.identity = this.#liveIdentity();
+        }
+        oidcCatalogName() {
+            const label = this.constructor.configurationLabel;
+            if (label === "chatgpt")
+                return "ChatGPT";
+            if (label === "grok")
+                return "Grok";
+            return super.connectionCatalogName();
+        }
+        #liveIdentity() {
+            const jwt = identityFromClaims(jwtPayload(this.#secretString("idToken")) ?? jwtPayload(this.#secretString("apiKey")));
+            return {
+                displayName: this.#secretString("displayName") ?? jwt.displayName,
+                email: this.#secretString("email") ?? jwt.email,
+                plan: this.#secretString("plan") ?? jwt.plan,
+            };
+        }
+        #secretString(field) {
+            const value = this.secrets.get(field);
+            return typeof value === "string" && value.length > 0 ? value : undefined;
+        }
+        #deposit(next) {
+            const bag = {};
+            const current = this.secrets.all?.() ?? {};
+            for (const [key, value] of Object.entries(current)) {
+                if (typeof value === "string" && value.length > 0)
+                    bag[key] = value;
+            }
+            Object.assign(bag, next);
+            if (this.secrets.replace !== undefined) {
+                this.secrets.replace(bag);
+            }
+            else {
+                this.secrets = {
+                    get: (field) => bag[field],
+                    all: () => bag,
+                };
+            }
+            this.reportLive();
+        }
+        constructor() {
+            super(...arguments);
+            __runInitializers(this, _state_extraInitializers);
+        }
+    };
+})();
+export { OidcDriverConnection };
+//# sourceMappingURL=oidc-driver.js.map

package/dist/drivers/oidc/oidc-driver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc-driver.js","sourceRoot":"","sources":["../../../src/drivers/oidc/oidc-driver.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;GAGG;AACH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,EACL,aAAa,EACb,WAAW,GAIZ,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,4BAA4B,EAAE,qBAAqB,EAAE,MAAM,0CAA0C,CAAC;AAC/G,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,UAAU,EACV,iBAAiB,EACjB,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,GAGlB,MAAM,WAAW,CAAC;IAEG,oBAAoB;;sBAAS,4BAA4B;;;;;;iBAAzD,oBAAqB,SAAQ,WAA4B;;;sCAyG5E,MAAM;YA9Ea,oKAAkB,KAAK,6BAAL,KAAK,qFAGzC;YA4EF,iLAAmB,UAAU,6DAG5B;;;QA5GD,MAAM,CAAC,WAAW,CAAc;QAEhC,MAAM,CAAU,KAAK,CAAC,KAAK,CAAoC,IAAqB,EAAE,QAAuB;YAC3G,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;YACjC,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAC3B,IAAI,EACJ,0BAA0B,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,oBAAoB,CACrH,CAAC;YACF,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACtD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAClD,IAAI,MAAM,CAAC,KAAK,KAAK,EAAE,IAAI,QAAQ,KAAK,EAAE,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACxE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,yBAAyB,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,WAAW,KAAK,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,kCAAkC,CAAC,CAAC;YAC7F,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YACnF,OAAO;gBACL,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;gBAC3D,QAAQ,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE;gBAChE,OAAO,EAAE,iBAAiB,CAAC,MAAM,CAAC;aACnC,CAAC;QACJ,CAAC;QAED,aAAa,IAzBO,mDAAoB,EAyBe,IAAI,EAAC;QAC5D,WAAW,GAAyB,IAAI,CAAC;QACrB,uEAA0B;YAC5C,GAAG,qBAAqB,EAAE;YAC1B,QAAQ,EAAE,SAAqC;SAChD,EAAC;QAHkB,IAAkB,KAAK,2CAGzC;QAHkB,IAAkB,KAAK,iDAGzC;QAEO,KAAK,CAAC,SAAS;YACtB,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5B,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5B,IAAI,CAAC,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE;gBACpC,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;YAC7B,CAAC,EAAE,eAAe,CAAC,CAAC;YACpB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC;QAC/B,CAAC;QAED;;;WAGG;QACO,KAAK,CAAC,YAAY;YAC1B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,KAAK,CAAC,cAAc;YAClB,MAAM,OAAO,GAAI,IAAI,CAAC,WAA2C,CAAC,WAAW,CAAC;YAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,IAAI,CAAC,UAAU,EAAE,CAAC;gBAClB,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,kBAAkB,CAC5B,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAChE,CAAC;gBACF,MAAM,MAAM,GAAiB;oBAC3B,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;oBAC1C,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC;oBAC9C,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;oBAClC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;iBACjC,CAAC;gBACF,MAAM,QAAQ,GACZ,OAAO,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,iBAAiB,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzF,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;gBACnF,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,CAAC;QACH,CAAC;QAEQ,KAAK,CAAC,uBAjDd,CAAA,KAAA,UAAU,EAAC,OAAO,YAiDH,MAAM,CAAC,YAAY,EAAC;YAClC,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;gBAChC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAClC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;YAC5B,CAAC;YACD,MAAM,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QACrC,CAAC;QAED,KAAK,CAAC,cAAc;YAClB,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC,WAAW,CAAC;YACvD,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC/C,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO;oBAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YAC5D,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC;YAC3B,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,KAAK,CAAC,YAAY;YAChB,MAAM,OAAO,GAAI,IAAI,CAAC,WAA2C,CAAC,WAAW,CAAC;YAC9E,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;YACxD,IAAI,YAAY,KAAK,SAAS;gBAAE,OAAO;YACvC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;gBAAE,OAAO;YAClE,IAAI,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,gBAAgB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;YAClF,CAAC;YAAC,MAAM,CAAC;gBACP,0EAA0E;YAC5E,CAAC;QACH,CAAC;QAGkB,UAAU;YAC3B,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YAChD,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAC7C,CAAC;QAES,eAAe;YACvB,MAAM,KAAK,GAAI,IAAI,CAAC,WAA2C,CAAC,kBAAkB,CAAC;YACnF,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAC1C,IAAI,KAAK,KAAK,MAAM;gBAAE,OAAO,MAAM,CAAC;YACpC,OAAO,KAAK,CAAC,qBAAqB,EAAE,CAAC;QACvC,CAAC;QAED,aAAa;YACX,MAAM,GAAG,GAAG,kBAAkB,CAC5B,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CACtF,CAAC;YACF,OAAO;gBACL,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,WAAW;gBACjE,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,KAAK;gBAC/C,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI;aAC7C,CAAC;QACJ,CAAC;QAED,aAAa,CAAC,KAAa;YACzB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3E,CAAC;QAED,QAAQ,CAAC,IAA4B;YACnC,MAAM,GAAG,GAA2B,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC;YAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;oBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACtE,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACzB,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBACvC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,OAAO,GAAG;oBACb,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC;oBAC1B,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG;iBACf,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,CAAC;;;;;;;SAtJmB,oBAAoB"}

package/dist/drivers/oidc/oidc.d.ts

@@ -0,0 +1,49 @@
+export declare const OIDC_REFRESH_SKEW_MS: number;
+export declare const OIDC_REFRESH_MS = 60000;
+export type OidcProfile = {
+    readonly driver: string;
+    readonly clientId: string;
+    readonly authorizeUrl: string;
+    readonly tokenUrl: string;
+    readonly userinfoUrl: string;
+    readonly scope: string;
+    readonly extraAuthorize: Readonly<Record<string, string>>;
+    readonly loginHint: string;
+    readonly baseUrl: string;
+};
+export type OidcPkce = {
+    readonly verifier: string;
+    readonly challenge: string;
+    readonly state: string;
+    readonly url: string;
+};
+export type OidcTokens = {
+    readonly apiKey: string;
+    readonly refreshToken: string;
+    readonly expiresAt: string;
+    readonly idToken?: string;
+    readonly accountId?: string;
+    readonly displayName?: string;
+    readonly email?: string;
+    readonly plan?: string;
+};
+export type OidcIdentity = {
+    readonly accountId?: string;
+    readonly displayName?: string;
+    readonly email?: string;
+    readonly plan?: string;
+};
+export declare function mintOidcPkce(profile: OidcProfile): OidcPkce;
+export declare function oidcFromVerifier(profile: OidcProfile, verifier: string, state: string): OidcPkce;
+export declare function exchangeOidcCode(profile: OidcProfile, code: string, verifier: string, redirectUri: string): Promise<OidcTokens>;
+export declare function refreshOidcToken(profile: OidcProfile, refreshToken: string): Promise<OidcTokens>;
+export declare function accessTokenExpiring(expiresAt: string | undefined, now?: number): boolean;
+export declare function secretsFromTokens(tokens: OidcTokens): Record<string, string>;
+export declare function identityFromClaims(claims: Record<string, unknown> | null): OidcIdentity;
+/** Later non-empty fields win. */
+export declare function mergeOidcIdentity(...parts: readonly OidcIdentity[]): OidcIdentity;
+export declare function secretsFromIdentity(identity: OidcIdentity): Record<string, string>;
+export declare function fetchOidcUserinfo(url: string, accessToken: string): Promise<OidcIdentity>;
+export declare function fetchJsonRecord(url: string, headers: Readonly<Record<string, string>>): Promise<Record<string, unknown> | null>;
+export declare function jwtPayload(token: string | undefined): Record<string, unknown> | null;
+//# sourceMappingURL=oidc.d.ts.map

package/dist/drivers/oidc/oidc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.d.ts","sourceRoot":"","sources":["../../../src/drivers/oidc/oidc.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,oBAAoB,QAAgB,CAAC;AAClD,eAAO,MAAM,eAAe,QAAS,CAAC;AAEtC,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAIF,wBAAgB,YAAY,CAAC,OAAO,EAAE,WAAW,GAAG,QAAQ,CAI3D;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ,CAahG;AAED,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,UAAU,CAAC,CAWrB;AAED,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAUtG;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,SAAa,GAAG,OAAO,CAK5F;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAW5E;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,YAAY,CAwCvF;AAED,kCAAkC;AAClC,wBAAgB,iBAAiB,CAAC,GAAG,KAAK,EAAE,SAAS,YAAY,EAAE,GAAG,YAAY,CASjF;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOlF;AAED,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAG/F;AAmCD,wBAAsB,eAAe,CACnC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GACxC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAYzC;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAUpF"}

package/dist/drivers/oidc/oidc.js

@@ -0,0 +1,200 @@
+/**
+ * Subscription OIDC (authorization code + PKCE). Grok and ChatGPT share the
+ * dance; each driver stamps issuer, client, scopes, and the inference host.
+ * Tea injects redirect_uri after it binds the loopback.
+ */
+import { createHash, randomBytes } from "node:crypto";
+export const OIDC_REFRESH_SKEW_MS = 5 * 60 * 1000;
+export const OIDC_REFRESH_MS = 60_000;
+const CHATGPT_AUTH_CLAIMS = "https://api.openai.com/auth";
+export function mintOidcPkce(profile) {
+    const verifier = randomBytes(32).toString("base64url");
+    const state = randomBytes(16).toString("base64url");
+    return oidcFromVerifier(profile, verifier, state);
+}
+export function oidcFromVerifier(profile, verifier, state) {
+    const challenge = createHash("sha256").update(verifier).digest("base64url");
+    const url = new URL(profile.authorizeUrl);
+    url.searchParams.set("response_type", "code");
+    url.searchParams.set("client_id", profile.clientId);
+    url.searchParams.set("scope", profile.scope);
+    url.searchParams.set("code_challenge", challenge);
+    url.searchParams.set("code_challenge_method", "S256");
+    url.searchParams.set("state", state);
+    for (const [key, value] of Object.entries(profile.extraAuthorize)) {
+        url.searchParams.set(key, value);
+    }
+    return { verifier, challenge, state, url: url.toString() };
+}
+export async function exchangeOidcCode(profile, code, verifier, redirectUri) {
+    return tokenGrant(profile, {
+        grant_type: "authorization_code",
+        code,
+        redirect_uri: redirectUri,
+        client_id: profile.clientId,
+        code_verifier: verifier,
+    });
+}
+export async function refreshOidcToken(profile, refreshToken) {
+    return tokenGrant(profile, {
+        grant_type: "refresh_token",
+        refresh_token: refreshToken,
+        client_id: profile.clientId,
+    }, refreshToken);
+}
+export function accessTokenExpiring(expiresAt, now = Date.now()) {
+    if (expiresAt === undefined || expiresAt.trim() === "")
+        return false;
+    const at = Date.parse(expiresAt);
+    if (!Number.isFinite(at))
+        return false;
+    return at - now <= OIDC_REFRESH_SKEW_MS;
+}
+export function secretsFromTokens(tokens) {
+    return {
+        apiKey: tokens.apiKey,
+        refreshToken: tokens.refreshToken,
+        expiresAt: tokens.expiresAt,
+        ...(tokens.idToken !== undefined ? { idToken: tokens.idToken } : {}),
+        ...(tokens.accountId !== undefined ? { accountId: tokens.accountId } : {}),
+        ...(tokens.displayName !== undefined ? { displayName: tokens.displayName } : {}),
+        ...(tokens.email !== undefined ? { email: tokens.email } : {}),
+        ...(tokens.plan !== undefined ? { plan: tokens.plan } : {}),
+    };
+}
+export function identityFromClaims(claims) {
+    if (claims === null)
+        return {};
+    const auth = asRecord(claims[CHATGPT_AUTH_CLAIMS]);
+    const given = asNonEmpty(claims.given_name) ?? asNonEmpty(claims.first_name) ?? asNonEmpty(claims.firstName);
+    const family = asNonEmpty(claims.family_name) ?? asNonEmpty(claims.last_name) ?? asNonEmpty(claims.lastName);
+    const composed = given !== undefined && family !== undefined ? `${given} ${family}` : (given ?? family);
+    const email = asNonEmpty(claims.email) ?? asNonEmpty(auth?.email);
+    const displayName = asNonEmpty(claims.name) ??
+        asNonEmpty(claims.preferred_username) ??
+        asNonEmpty(claims.nickname) ??
+        asNonEmpty(claims.username) ??
+        asNonEmpty(claims.login) ??
+        asNonEmpty(claims.handle) ??
+        composed ??
+        email;
+    const plan = asNonEmpty(auth?.chatgpt_plan_type) ??
+        asNonEmpty(claims.chatgpt_plan_type) ??
+        asNonEmpty(claims.plan) ??
+        asNonEmpty(claims.subscription) ??
+        asNonEmpty(claims.subscription_tier) ??
+        asNonEmpty(claims.subscriptionTier) ??
+        asNonEmpty(claims.tier);
+    // `sub` is the OIDC subject, not ChatGPT's chatgpt_account_id or Grok's userId.
+    const accountId = asNonEmpty(auth?.chatgpt_account_id) ??
+        asNonEmpty(claims.chatgpt_account_id) ??
+        asNonEmpty(claims.userId) ??
+        asNonEmpty(claims.user_id) ??
+        asNonEmpty(claims.account_id);
+    return {
+        ...(accountId !== undefined ? { accountId } : {}),
+        ...(displayName !== undefined ? { displayName } : {}),
+        ...(email !== undefined ? { email } : {}),
+        ...(plan !== undefined ? { plan } : {}),
+    };
+}
+/** Later non-empty fields win. */
+export function mergeOidcIdentity(...parts) {
+    const out = {};
+    for (const part of parts) {
+        if (part.accountId !== undefined && part.accountId !== "")
+            out.accountId = part.accountId;
+        if (part.displayName !== undefined && part.displayName !== "")
+            out.displayName = part.displayName;
+        if (part.email !== undefined && part.email !== "")
+            out.email = part.email;
+        if (part.plan !== undefined && part.plan !== "")
+            out.plan = part.plan;
+    }
+    return out;
+}
+export function secretsFromIdentity(identity) {
+    return {
+        ...(identity.accountId !== undefined ? { accountId: identity.accountId } : {}),
+        ...(identity.displayName !== undefined ? { displayName: identity.displayName } : {}),
+        ...(identity.email !== undefined ? { email: identity.email } : {}),
+        ...(identity.plan !== undefined ? { plan: identity.plan } : {}),
+    };
+}
+export async function fetchOidcUserinfo(url, accessToken) {
+    const rec = await fetchJsonRecord(url, { authorization: `Bearer ${accessToken}` });
+    return identityFromClaims(rec);
+}
+async function tokenGrant(profile, body, fallbackRefresh = "") {
+    const response = await fetch(profile.tokenUrl, {
+        method: "POST",
+        headers: {
+            accept: "application/json",
+            "content-type": "application/x-www-form-urlencoded",
+        },
+        body: new URLSearchParams(body),
+    });
+    if (!response.ok) {
+        throw new Error(`${profile.driver} token exchange failed (${response.status})`);
+    }
+    const rec = asRecord(await response.json());
+    const apiKey = asNonEmpty(rec?.access_token);
+    const refreshToken = asNonEmpty(rec?.refresh_token) ?? asNonEmpty(fallbackRefresh);
+    if (apiKey === undefined)
+        throw new Error(`${profile.driver} token exchange returned no access token`);
+    if (refreshToken === undefined)
+        throw new Error(`${profile.driver} token exchange returned no refresh token`);
+    const expiresIn = asExpiresIn(rec?.expires_in);
+    const idToken = asNonEmpty(rec?.id_token);
+    const tokens = {
+        apiKey,
+        refreshToken,
+        expiresAt: new Date(Date.now() + expiresIn * 1000).toISOString(),
+        ...(idToken !== undefined ? { idToken } : {}),
+        ...identityFromClaims(jwtPayload(idToken) ?? jwtPayload(apiKey)),
+    };
+    return tokens;
+}
+export async function fetchJsonRecord(url, headers) {
+    const ctrl = new AbortController();
+    const timer = setTimeout(() => ctrl.abort(), 8_000);
+    try {
+        const response = await fetch(url, { method: "GET", headers: { accept: "application/json", ...headers }, signal: ctrl.signal });
+        if (!response.ok)
+            return null;
+        return asRecord(await response.json());
+    }
+    catch {
+        return null;
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+export function jwtPayload(token) {
+    if (token === undefined || token.trim() === "")
+        return null;
+    const parts = token.split(".");
+    if (parts.length < 2)
+        return null;
+    try {
+        const json = Buffer.from(parts[1] ?? "", "base64url").toString("utf8");
+        return asRecord(JSON.parse(json));
+    }
+    catch {
+        return null;
+    }
+}
+function asRecord(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        return null;
+    return value;
+}
+function asNonEmpty(value) {
+    return typeof value === "string" && value.trim() !== "" ? value.trim() : undefined;
+}
+function asExpiresIn(value) {
+    const n = typeof value === "number" ? value : typeof value === "string" ? Number(value) : Number.NaN;
+    return Number.isFinite(n) && n > 0 ? n : 3600;
+}
+//# sourceMappingURL=oidc.js.map

package/dist/drivers/oidc/oidc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.js","sourceRoot":"","sources":["../../../src/drivers/oidc/oidc.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAClD,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AAuCtC,MAAM,mBAAmB,GAAG,6BAA6B,CAAC;AAE1D,MAAM,UAAU,YAAY,CAAC,OAAoB;IAC/C,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpD,OAAO,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAoB,EAAE,QAAgB,EAAE,KAAa;IACpF,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;IAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;IACtD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAoB,EACpB,IAAY,EACZ,QAAgB,EAChB,WAAmB;IAEnB,OAAO,UAAU,CACf,OAAO,EACP;QACE,UAAU,EAAE,oBAAoB;QAChC,IAAI;QACJ,YAAY,EAAE,WAAW;QACzB,SAAS,EAAE,OAAO,CAAC,QAAQ;QAC3B,aAAa,EAAE,QAAQ;KACxB,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAoB,EAAE,YAAoB;IAC/E,OAAO,UAAU,CACf,OAAO,EACP;QACE,UAAU,EAAE,eAAe;QAC3B,aAAa,EAAE,YAAY;QAC3B,SAAS,EAAE,OAAO,CAAC,QAAQ;KAC5B,EACD,YAAY,CACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,SAA6B,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACjF,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACrE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,OAAO,EAAE,GAAG,GAAG,IAAI,oBAAoB,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAkB;IAClD,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAsC;IACvE,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACnD,MAAM,KAAK,GACT,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACjG,MAAM,MAAM,GACV,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChG,MAAM,QAAQ,GACZ,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC;IACzF,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClE,MAAM,WAAW,GACf,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC;QACvB,UAAU,CAAC,MAAM,CAAC,kBAAkB,CAAC;QACrC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC3B,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC3B,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;QACxB,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;QACzB,QAAQ;QACR,KAAK,CAAC;IACR,MAAM,IAAI,GACR,UAAU,CAAC,IAAI,EAAE,iBAAiB,CAAC;QACnC,UAAU,CAAC,MAAM,CAAC,iBAAiB,CAAC;QACpC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC;QACvB,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC;QAC/B,UAAU,CAAC,MAAM,CAAC,iBAAiB,CAAC;QACpC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACnC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,gFAAgF;IAChF,MAAM,SAAS,GACb,UAAU,CAAC,IAAI,EAAE,kBAAkB,CAAC;QACpC,UAAU,CAAC,MAAM,CAAC,kBAAkB,CAAC;QACrC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;QACzB,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;QAC1B,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAChC,OAAO;QACL,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,kCAAkC;AAClC,MAAM,UAAU,iBAAiB,CAAC,GAAG,KAA8B;IACjE,MAAM,GAAG,GAAgF,EAAE,CAAC;IAC5F,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,EAAE;YAAE,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1F,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,EAAE;YAAE,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QAClG,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,EAAE;YAAE,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAC1E,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,EAAE;YAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACxE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAsB;IACxD,OAAO;QACL,GAAG,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,QAAQ,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAW,EAAE,WAAmB;IACtE,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,CAAC,CAAC;IACnF,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,OAAoB,EACpB,IAA4B,EAC5B,eAAe,GAAG,EAAE;IAEpB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE;QAC7C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,MAAM,EAAE,kBAAkB;YAC1B,cAAc,EAAE,mCAAmC;SACpD;QACD,IAAI,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC;KAChC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,2BAA2B,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE,aAAa,CAAC,IAAI,UAAU,CAAC,eAAe,CAAC,CAAC;IACnF,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,0CAA0C,CAAC,CAAC;IACvG,IAAI,YAAY,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,2CAA2C,CAAC,CAAC;IAC9G,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAe;QACzB,MAAM;QACN,YAAY;QACZ,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;QAChE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,kBAAkB,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;KACjE,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAW,EACX,OAAyC;IAEzC,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,GAAG,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/H,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9B,OAAO,QAAQ,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAyB;IAClD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC5D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvE,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACrF,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,MAAM,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;IACrG,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC"}

package/dist/drivers/openai-compat/account-look.d.ts

@@ -0,0 +1,5 @@
+import { type AccountRequest, type AccountSnapshot } from "./api-extensions/index.js";
+export type AccountGetter = (req: AccountRequest) => Promise<AccountSnapshot>;
+export declare function accountGetterFor(baseUrl: string): AccountGetter | undefined;
+export declare function paintAccountHint(snap: AccountSnapshot, apiKey?: string): string;
+//# sourceMappingURL=account-look.d.ts.map

package/dist/drivers/openai-compat/account-look.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-look.d.ts","sourceRoot":"","sources":["../../../src/drivers/openai-compat/account-look.ts"],"names":[],"mappings":"AAAA,OAAO,EAcL,KAAK,cAAc,EACnB,KAAK,eAAe,EACrB,MAAM,2BAA2B,CAAC;AAGnC,MAAM,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;AAmB9E,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAI3E;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,eAAe,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAK/E"}