@intrect/openswarm 0.4.4 → 0.8.0

package/dist/agents/reflection.js

@@ -0,0 +1,120 @@
+// ============================================
+// OpenSwarm - Self-Repair Reflection
+// Bad-edit guard + bounded reflection loop
+// ============================================
+//
+// claude -p (and most CLI coding agents) lack the native sub-agent / structured
+// self-repair that the first-party Claude harness has. When an edit breaks the
+// build, the agent often reports success anyway. This module gives the pipeline a
+// lightweight self-repair loop, modeled on two proven techniques:
+//
+//   - SWE-agent "bad-edit guard": an edit that fails lint is treated as invalid;
+//     the concrete lint error is fed straight back so the next attempt fixes it
+//     (ablation: removing it dropped resolve rate 18% → 15%).
+//   - Aider "reflection": lint/test errors from the previous attempt are preserved
+//     into the next prompt, up to a bounded reflection count (default 3).
+//
+// The worker here is an autonomous CLI process, so we cannot intercept a single
+// tool-edit to discard it the way SWE-agent does. The equivalent is: lint the
+// changed files after the worker finishes, and on failure drive a bounded retry
+// with the exact error preserved — objective errors survive even a fresh-context
+// reset, because unlike a reviewer's subjective opinion a lint/test failure is
+// ground truth worth carrying forward.
+// Constants
+/** Default cap on objective self-repair attempts before giving up. */
+export const DEFAULT_MAX_REFLECTIONS = 3;
+/** Keep only the most recent N objective entries in the prompt (avoid bloat). */
+export const MAX_TRAIL_ENTRIES = 3;
+/** Cap error lines per entry so a chatty compiler cannot blow up the prompt. */
+const MAX_ERRORS_PER_ENTRY = 5;
+const OBJECTIVE_SOURCES = ['lint', 'bs', 'test'];
+// State
+export function createReflectionState() {
+    return { entries: [], reflectionCount: 0 };
+}
+/** True for ground-truth failures that drive (and bound) self-repair. */
+export function isObjective(source) {
+    return OBJECTIVE_SOURCES.includes(source);
+}
+/** The most recent objective entry, or undefined if none yet. */
+function lastObjectiveEntry(state) {
+    for (let i = state.entries.length - 1; i >= 0; i--) {
+        if (isObjective(state.entries[i].source))
+            return state.entries[i];
+    }
+    return undefined;
+}
+/** Two error lists are "the same failure" when their trimmed lines match exactly. */
+function sameErrors(a, b) {
+    if (a.length !== b.length)
+        return false;
+    return a.every((line, i) => line.trim() === b[i].trim());
+}
+/**
+ * Record a failure as a reflection entry.
+ *
+ * For objective sources this increments the self-repair count and reports
+ * whether progress was made — `progressed: false` means this attempt produced
+ * the exact same errors as the previous objective attempt (stagnation: the agent
+ * is stuck and further retries will only burn tokens).
+ *
+ * Subjective (review) entries are stored for completeness but never count toward
+ * the budget and always report progress (the reviewer channel handles them).
+ */
+export function recordReflection(state, entry) {
+    const trimmed = {
+        iteration: entry.iteration,
+        source: entry.source,
+        errors: entry.errors.map((e) => e.trim()).filter(Boolean).slice(0, MAX_ERRORS_PER_ENTRY),
+    };
+    if (!isObjective(trimmed.source)) {
+        state.entries.push(trimmed);
+        return { progressed: true };
+    }
+    const prev = lastObjectiveEntry(state);
+    const progressed = !prev || !sameErrors(prev.errors, trimmed.errors);
+    state.entries.push(trimmed);
+    state.reflectionCount += 1;
+    return { progressed };
+}
+/** True once the bounded self-repair budget is spent. */
+export function shouldStopReflecting(state, max = DEFAULT_MAX_REFLECTIONS) {
+    return state.reflectionCount >= max;
+}
+/**
+ * Build the worker-prompt section that carries forward objective errors from
+ * prior attempts. Returns '' when there is nothing objective to reflect on, so
+ * the caller can simply concatenate.
+ *
+ * Only objective entries are emitted (subjective review feedback travels through
+ * the reviewer channel). The list is capped to the most recent MAX_TRAIL_ENTRIES.
+ */
+export function buildReflectionFeedback(state) {
+    const objective = state.entries.filter((e) => isObjective(e.source));
+    if (objective.length === 0)
+        return '';
+    const recent = objective.slice(-MAX_TRAIL_ENTRIES);
+    const lines = [];
+    lines.push('## Self-Repair Reflection (previous attempts failed these checks)');
+    lines.push('Your prior edits were rejected by automated checks below. Treat them as invalid edits: ' +
+        'fix the exact errors and do NOT repeat the same mistakes.');
+    for (const entry of recent) {
+        lines.push('');
+        lines.push(`### Attempt @ iteration ${entry.iteration} — ${labelForSource(entry.source)}`);
+        entry.errors.forEach((err, i) => lines.push(`${i + 1}. ${err}`));
+    }
+    return lines.join('\n');
+}
+function labelForSource(source) {
+    switch (source) {
+        case 'lint':
+            return 'lint / type check failed';
+        case 'bs':
+            return 'code-smell guard failed';
+        case 'test':
+            return 'tests failed';
+        case 'review':
+            return 'reviewer feedback';
+    }
+}
+//# sourceMappingURL=reflection.js.map

package/dist/agents/reflection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reflection.js","sourceRoot":"","sources":["../../src/agents/reflection.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,qCAAqC;AACrC,2CAA2C;AAC3C,+CAA+C;AAC/C,EAAE;AACF,gFAAgF;AAChF,+EAA+E;AAC/E,kFAAkF;AAClF,kEAAkE;AAClE,EAAE;AACF,iFAAiF;AACjF,gFAAgF;AAChF,8DAA8D;AAC9D,mFAAmF;AACnF,0EAA0E;AAC1E,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,gFAAgF;AAChF,iFAAiF;AACjF,+EAA+E;AAC/E,uCAAuC;AA8BvC,YAAY;AAEZ,sEAAsE;AACtE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AACzC,iFAAiF;AACjF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AACnC,gFAAgF;AAChF,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAE/B,MAAM,iBAAiB,GAAgC,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AAE9E,QAAQ;AAER,MAAM,UAAU,qBAAqB;IACnC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,WAAW,CAAC,MAAwB;IAClD,OAAO,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED,iEAAiE;AACjE,SAAS,kBAAkB,CAAC,KAAsB;IAChD,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACnD,IAAI,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,qFAAqF;AACrF,SAAS,UAAU,CAAC,CAAW,EAAE,CAAW;IAC1C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAsB,EACtB,KAAsB;IAEtB,MAAM,OAAO,GAAoB;QAC/B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC;KACzF,CAAC;IAEF,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAErE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,KAAK,CAAC,eAAe,IAAI,CAAC,CAAC;IAC3B,OAAO,EAAE,UAAU,EAAE,CAAC;AACxB,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,oBAAoB,CAClC,KAAsB,EACtB,MAAc,uBAAuB;IAErC,OAAO,KAAK,CAAC,eAAe,IAAI,GAAG,CAAC;AACtC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAsB;IAC5D,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACrE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEtC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;IACnD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;IAChF,KAAK,CAAC,IAAI,CACR,yFAAyF;QACvF,2DAA2D,CAC9D,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,2BAA2B,KAAK,CAAC,SAAS,MAAM,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3F,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,cAAc,CAAC,MAAwB;IAC9C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,0BAA0B,CAAC;QACpC,KAAK,IAAI;YACP,OAAO,yBAAyB,CAAC;QACnC,KAAK,MAAM;YACT,OAAO,cAAc,CAAC;QACxB,KAAK,QAAQ;YACX,OAAO,mBAAmB,CAAC;IAC/B,CAAC;AACH,CAAC"}

package/dist/agents/worker.d.ts

@@ -16,6 +16,14 @@ export interface WorkerOptions {
     processContext?: ProcessContext;
     /** 코드 컨텍스트 (impact analysis + registry briefs) */
     workerContext?: WorkerContext;
+    /** no-edit 종료 가드 횟수 — 수정 필수 작업에서 모델이 edit 없이 끝내면 N회 되밂 */
+    nudgeMaxOnNoEdit?: number;
+    /** Verification-harness file protection — listed files reject edit/write */
+    protectedFiles?: string[];
+    /** bash tool timeout in ms — raise for slow verification such as docker-based tests */
+    bashTimeoutMs?: number;
+    /** Expose web_fetch + web_search tools (default true). Set false for SWE-bench integrity. */
+    webTools?: boolean;
 }
 /**
  * Run Worker agent

package/dist/agents/worker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../../src/agents/worker.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAGnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAMxE,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,kDAAkD;IAClD,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAkBD;;;GAGG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAgE7E;AAID;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE;IAC/D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,MAAM,CA0CT"}
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../../src/agents/worker.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAGnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAMxE,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,kDAAkD;IAClD,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,0DAA0D;IAC1D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,4EAA4E;IAC5E,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,uFAAuF;IACvF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6FAA6F;IAC7F,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAkBD;;;GAGG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAsF7E;AAID;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE;IAC/D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,MAAM,CA0CT"}

package/dist/agents/worker.js

@@ -45,10 +45,21 @@ export async function runWorker(options) {
             onLog: options.onLog,
             processContext: options.processContext,
             systemPrompt: getPrompts().systemPrompt,
+            // Worker is a mechanical execution role — file edits, not deep reasoning.
+            // Disable reasoning tokens to cut cost/latency (no-op on non-thinking models).
+            disableReasoning: true,
+            nudgeMaxOnNoEdit: options.nudgeMaxOnNoEdit,
+            protectedFiles: options.protectedFiles,
+            bashTimeoutMs: options.bashTimeoutMs,
+            webTools: options.webTools,
         });
         // Parse result via adapter
         const parsedResult = adapter.parseWorkerOutput(raw);
-        // Extract actually changed files via Git diff (independent of LLM report)
+        // Git diff is the source of truth for "did real work happen" — independent of
+        // whether the model emitted a well-formed JSON success block. LLMs are weak at
+        // structured output, so we never let a missing/malformed JSON block alone mark
+        // a task as failed when the working tree actually changed (VEGA-style: real
+        // signal over self-report).
         if (isGitRepo && snapshotHash) {
             const gitChangedFiles = await gitTracker.getChangedFilesSinceSnapshot(cwd, snapshotHash);
             if (gitChangedFiles.length > 0) {
@@ -59,6 +70,16 @@ export async function runWorker(options) {
                     ...parsedResult.filesChanged,
                 ]);
                 parsedResult.filesChanged = Array.from(mergedFiles);
+                // Real file changes + no explicit error signal → treat as success even if
+                // the model never produced a JSON block. Only an explicit error/halt in the
+                // output should keep success=false here.
+                if (!parsedResult.success && !parsedResult.error && !parsedResult.haltReason) {
+                    console.log('[Worker] Promoting to success: git changes present, no error signal');
+                    parsedResult.success = true;
+                    if (!parsedResult.summary || parsedResult.summary === t('common.fallback.noSummary')) {
+                        parsedResult.summary = `Modified ${gitChangedFiles.length} file(s): ${gitChangedFiles.slice(0, 5).join(', ')}`;
+                    }
+                }
             }
             else if (parsedResult.filesChanged.length === 0) {
                 console.log('[Worker] No file changes detected by Git or LLM');
@@ -71,7 +92,7 @@ export async function runWorker(options) {
         console.error(`[Worker] Execution failed: ${errMsg}`);
         // Log stderr hint if available (CLI spawn errors often contain useful info)
         if (error instanceof Error && error.message.includes('code')) {
-            console.error(`[Worker] CLI exited with non-zero code — check claude CLI availability and permissions`);
+            console.error(`[Worker] CLI exited with non-zero code — check adapter auth and permissions`);
         }
         return {
             success: false,

package/dist/agents/worker.js.map

@@ -1 +1 @@
-{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../src/agents/worker.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,2BAA2B;AAC3B,2CAA2C;AAC3C,+CAA+C;AAG/C,OAAO,KAAK,UAAU,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGnD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAqB/C,UAAU;AAEV;;GAEG;AACH,SAAS,iBAAiB,CAAC,OAAsB;IAC/C,OAAO,UAAU,EAAE,CAAC,iBAAiB,CAAC;QACpC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,OAAO,EAAE,OAAO,CAAC,aAAa;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,mBAAmB;AAEnB;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB;IACpD,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAEhD,gCAAgC;IAChC,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,SAAS,EAAE,CAAC;QACd,YAAY,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,0BAA0B,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,CAAC;QACH,sBAAsB;QACtB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE;YAClC,MAAM;YACN,GAAG;YACH,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,YAAY,EAAE,UAAU,EAAE,CAAC,YAAY;SACxC,CAAC,CAAC;QAEH,2BAA2B;QAC3B,MAAM,YAAY,GAAG,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAEpD,0EAA0E;QAC1E,IAAI,SAAS,IAAI,YAAY,EAAE,CAAC;YAC9B,MAAM,eAAe,GAAG,MAAM,UAAU,CAAC,4BAA4B,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YAEzF,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,OAAO,CAAC,GAAG,CAAC,kCAAkC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAE5E,4DAA4D;gBAC5D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;oBAC1B,GAAG,eAAe;oBAClB,GAAG,YAAY,CAAC,YAAY;iBAC7B,CAAC,CAAC;gBACH,YAAY,CAAC,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtD,CAAC;iBAAM,IAAI,YAAY,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClD,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,OAAO,CAAC,KAAK,CAAC,8BAA8B,MAAM,EAAE,CAAC,CAAC;QACtD,4EAA4E;QAC5E,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7D,OAAO,CAAC,KAAK,CAAC,wFAAwF,CAAC,CAAC;QAC1G,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,yBAAyB;YAClC,YAAY,EAAE,EAAE;YAChB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,MAAM;SACd,CAAC;IACJ,CAAC;AACH,CAAC;AAED,aAAa;AAEb;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAoB,EAAE,OAItD;IACC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,+BAA+B;IAC/B,IAAI,OAAO,EAAE,WAAW,IAAI,OAAO,EAAE,eAAe,IAAI,OAAO,EAAE,WAAW,EAAE,CAAC;QAC7E,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,iEAAiE;QACjE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW;eAClC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7E,IAAI,WAAW;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC;QACjD,IAAI,OAAO,CAAC,eAAe;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;QACzE,IAAI,OAAO,CAAC,WAAW;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjG,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;QACvB,CAAC,CAAC,CAAC,CAAC,gCAAgC,CAAC;QACrC,CAAC,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC;IACtC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,8BAA8B,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAExE,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC;QAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE;YACjC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;YAClB,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,kBAAkB,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC;QAC1F,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,mCAAmC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9E,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,+BAA+B,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../src/agents/worker.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,2BAA2B;AAC3B,2CAA2C;AAC3C,+CAA+C;AAG/C,OAAO,KAAK,UAAU,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGnD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AA6B/C,UAAU;AAEV;;GAEG;AACH,SAAS,iBAAiB,CAAC,OAAsB;IAC/C,OAAO,UAAU,EAAE,CAAC,iBAAiB,CAAC;QACpC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,OAAO,EAAE,OAAO,CAAC,aAAa;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,mBAAmB;AAEnB;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB;IACpD,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAEhD,gCAAgC;IAChC,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,SAAS,EAAE,CAAC;QACd,YAAY,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,0BAA0B,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,CAAC;QACH,sBAAsB;QACtB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE;YAClC,MAAM;YACN,GAAG;YACH,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,YAAY,EAAE,UAAU,EAAE,CAAC,YAAY;YACvC,0EAA0E;YAC1E,+EAA+E;YAC/E,gBAAgB,EAAE,IAAI;YACtB,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAC;QAEH,2BAA2B;QAC3B,MAAM,YAAY,GAAG,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAEpD,8EAA8E;QAC9E,+EAA+E;QAC/E,+EAA+E;QAC/E,4EAA4E;QAC5E,4BAA4B;QAC5B,IAAI,SAAS,IAAI,YAAY,EAAE,CAAC;YAC9B,MAAM,eAAe,GAAG,MAAM,UAAU,CAAC,4BAA4B,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YAEzF,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,OAAO,CAAC,GAAG,CAAC,kCAAkC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAE5E,4DAA4D;gBAC5D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;oBAC1B,GAAG,eAAe;oBAClB,GAAG,YAAY,CAAC,YAAY;iBAC7B,CAAC,CAAC;gBACH,YAAY,CAAC,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAEpD,0EAA0E;gBAC1E,4EAA4E;gBAC5E,yCAAyC;gBACzC,IAAI,CAAC,YAAY,CAAC,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;oBAC7E,OAAO,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC;oBACnF,YAAY,CAAC,OAAO,GAAG,IAAI,CAAC;oBAC5B,IAAI,CAAC,YAAY,CAAC,OAAO,IAAI,YAAY,CAAC,OAAO,KAAK,CAAC,CAAC,2BAA2B,CAAC,EAAE,CAAC;wBACrF,YAAY,CAAC,OAAO,GAAG,YAAY,eAAe,CAAC,MAAM,aAAa,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjH,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,IAAI,YAAY,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClD,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,OAAO,CAAC,KAAK,CAAC,8BAA8B,MAAM,EAAE,CAAC,CAAC;QACtD,4EAA4E;QAC5E,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7D,OAAO,CAAC,KAAK,CAAC,6EAA6E,CAAC,CAAC;QAC/F,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,yBAAyB;YAClC,YAAY,EAAE,EAAE;YAChB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,MAAM;SACd,CAAC;IACJ,CAAC;AACH,CAAC;AAED,aAAa;AAEb;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAoB,EAAE,OAItD;IACC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,+BAA+B;IAC/B,IAAI,OAAO,EAAE,WAAW,IAAI,OAAO,EAAE,eAAe,IAAI,OAAO,EAAE,WAAW,EAAE,CAAC;QAC7E,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,iEAAiE;QACjE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW;eAClC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7E,IAAI,WAAW;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC;QACjD,IAAI,OAAO,CAAC,eAAe;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;QACzE,IAAI,OAAO,CAAC,WAAW;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjG,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;QACvB,CAAC,CAAC,CAAC,CAAC,gCAAgC,CAAC;QACrC,CAAC,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC;IACtC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,8BAA8B,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAExE,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC;QAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE;YACjC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;YAClB,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,kBAAkB,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC;QAC1F,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,mCAAmC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9E,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,+BAA+B,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/auth/index.d.ts

@@ -1,3 +1,5 @@
 export { AuthProfileStore, ensureValidToken, type AuthProfile } from './oauthStore.js';
-export { runOAuthPkceFlow, loginAndSaveProfile, type OAuthFlowResult, type OAuthFlowOptions } from './oauthPkce.js';
+export { runOAuthPkceFlow, loginAndSaveProfile, DEFAULT_OPENAI_CLIENT_ID, type OAuthFlowResult, type OAuthFlowOptions, } from './oauthPkce.js';
+export { runOpenRouterPkceFlow, loginAndSaveOpenRouterProfile, saveOpenRouterApiKey, type OpenRouterFlowResult, type OpenRouterFlowOptions, } from './openrouterPkce.js';
+export { runLinearPkceFlow, loginAndSaveLinearProfile, type LinearFlowResult, type LinearFlowOptions, } from './linearPkce.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,KAAK,eAAe,EAAE,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACvF,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,wBAAwB,EACxB,KAAK,eAAe,EACpB,KAAK,gBAAgB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,6BAA6B,EAC7B,oBAAoB,EACpB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,GACvB,MAAM,iBAAiB,CAAC"}

package/dist/auth/index.js

@@ -2,5 +2,7 @@
 // OpenSwarm - Auth Module
 // ============================================
 export { AuthProfileStore, ensureValidToken } from './oauthStore.js';
-export { runOAuthPkceFlow, loginAndSaveProfile } from './oauthPkce.js';
+export { runOAuthPkceFlow, loginAndSaveProfile, DEFAULT_OPENAI_CLIENT_ID, } from './oauthPkce.js';
+export { runOpenRouterPkceFlow, loginAndSaveOpenRouterProfile, saveOpenRouterApiKey, } from './openrouterPkce.js';
+export { runLinearPkceFlow, loginAndSaveLinearProfile, } from './linearPkce.js';
 //# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,0BAA0B;AAC1B,+CAA+C;AAE/C,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAoB,MAAM,iBAAiB,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAA+C,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,0BAA0B;AAC1B,+CAA+C;AAE/C,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAoB,MAAM,iBAAiB,CAAC;AACvF,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,wBAAwB,GAGzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,6BAA6B,EAC7B,oBAAoB,GAGrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,iBAAiB,EACjB,yBAAyB,GAG1B,MAAM,iBAAiB,CAAC"}

package/dist/auth/linearPkce.d.ts

@@ -0,0 +1,22 @@
+export declare const PROFILE_KEY = "linear:default";
+export interface LinearFlowResult {
+    accessToken: string;
+    refreshToken: string;
+    expiresIn: number;
+}
+export interface LinearFlowOptions {
+    port?: number;
+    scopes?: string;
+}
+/**
+ * Linear OAuth 2.0 PKCE flow.
+ *   1. generate PKCE verifier/challenge + state
+ *   2. open https://linear.app/oauth/authorize?...&code_challenge=...&code_challenge_method=S256
+ *   3. receive ?code=... on the local callback server
+ *   4. POST https://api.linear.app/oauth/token (code_verifier, client_id — NO secret)
+ *      → access_token + refresh_token
+ */
+export declare function runLinearPkceFlow(options?: LinearFlowOptions): Promise<LinearFlowResult>;
+/** Full PKCE flow + persist the linear:default profile. Returns the access token. */
+export declare function loginAndSaveLinearProfile(port?: number): Promise<string>;
+//# sourceMappingURL=linearPkce.d.ts.map

package/dist/auth/linearPkce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"linearPkce.d.ts","sourceRoot":"","sources":["../../src/auth/linearPkce.ts"],"names":[],"mappings":"AAoBA,eAAO,MAAM,WAAW,mBAAqB,CAAC;AA6C9C,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAkIlG;AAED,qFAAqF;AACrF,wBAAsB,yBAAyB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAiB9E"}

package/dist/auth/linearPkce.js

@@ -0,0 +1,208 @@
+// ============================================
+// OpenSwarm - Linear OAuth 2.0 PKCE Flow
+// Browser-based login that exchanges an authorization code for a Linear
+// access_token (+ refresh_token). PKCE → NO client_secret is used or stored.
+// ============================================
+import { createServer } from 'node:http';
+import { randomBytes, createHash } from 'node:crypto';
+import { exec } from 'node:child_process';
+import { AuthProfileStore } from './oauthStore.js';
+// ----- Constants -----
+const LINEAR_AUTH_ENDPOINT = 'https://linear.app/oauth/authorize';
+const LINEAR_TOKEN_ENDPOINT = 'https://api.linear.app/oauth/token';
+const DEFAULT_CALLBACK_PORT = 1457; // distinct from codex (1455) / openrouter (1456)
+const DEFAULT_SCOPES = 'read,write';
+const LOGIN_TIMEOUT_MS = 120_000;
+const LINEAR_PROFILE_KEY = 'linear:default';
+export const PROFILE_KEY = LINEAR_PROFILE_KEY;
+/**
+ * Public OAuth client_id for the OpenSwarm Linear app. PKCE means no client
+ * secret is needed. Read from LINEAR_OAUTH_CLIENT_ID so the id is not baked into
+ * source/git; a future public build can set a hardcoded default here.
+ */
+function getClientId() {
+    const id = process.env.LINEAR_OAUTH_CLIENT_ID?.trim();
+    if (!id) {
+        // cxt-ignore-next-line: fake_data — real redirect URI shown in setup guidance
+        throw new Error('LINEAR_OAUTH_CLIENT_ID is not set. Register a Linear OAuth app at https://linear.app/settings/api/applications/new (redirect http://localhost:1457/callback, scopes read,write, PKCE) and set LINEAR_OAUTH_CLIENT_ID in .env.');
+    }
+    return id;
+}
+// ----- PKCE helpers (same shape as oauthPkce.ts / openrouterPkce.ts) -----
+function generateCodeVerifier() {
+    return randomBytes(96).toString('base64url');
+}
+function generateCodeChallenge(verifier) {
+    return createHash('sha256').update(verifier).digest('base64url');
+}
+function generateState() {
+    return randomBytes(32).toString('hex');
+}
+// ----- Browser open (cross-platform) -----
+function openBrowser(url) {
+    const platform = process.platform;
+    const cmd = platform === 'darwin' ? 'open' : platform === 'win32' ? 'start' : 'xdg-open';
+    exec(`${cmd} "${url}"`, (err) => {
+        if (err) {
+            console.error('[Auth] 브라우저를 자동으로 열 수 없습니다. 직접 열어주세요:');
+            console.error(url);
+        }
+    });
+}
+/**
+ * Linear OAuth 2.0 PKCE flow.
+ *   1. generate PKCE verifier/challenge + state
+ *   2. open https://linear.app/oauth/authorize?...&code_challenge=...&code_challenge_method=S256
+ *   3. receive ?code=... on the local callback server
+ *   4. POST https://api.linear.app/oauth/token (code_verifier, client_id — NO secret)
+ *      → access_token + refresh_token
+ */
+export async function runLinearPkceFlow(options = {}) {
+    const { port = DEFAULT_CALLBACK_PORT, scopes = DEFAULT_SCOPES } = options;
+    const clientId = getClientId();
+    // Must match the redirect URI registered on the Linear OAuth app exactly.
+    const redirectUri = `http://localhost:${port}/callback`;
+    const codeVerifier = generateCodeVerifier();
+    const codeChallenge = generateCodeChallenge(codeVerifier);
+    const state = generateState();
+    const authParams = new URLSearchParams({
+        response_type: 'code',
+        client_id: clientId,
+        redirect_uri: redirectUri,
+        code_challenge: codeChallenge,
+        code_challenge_method: 'S256',
+        scope: scopes,
+        state,
+    });
+    const authUrl = `${LINEAR_AUTH_ENDPOINT}?${authParams.toString()}`;
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        const timeout = setTimeout(() => {
+            if (!settled) {
+                settled = true;
+                server.close();
+                reject(new Error('Linear login timed out (120s). 다시 시도하세요.'));
+            }
+        }, LOGIN_TIMEOUT_MS);
+        const server = createServer(async (req, res) => {
+            if (settled) {
+                res.writeHead(400);
+                res.end();
+                return;
+            }
+            const url = new URL(req.url ?? '/', `http://127.0.0.1:${port}`);
+            if (url.pathname !== '/callback') {
+                res.writeHead(404);
+                res.end('Not found');
+                return;
+            }
+            const code = url.searchParams.get('code');
+            const returnedState = url.searchParams.get('state');
+            const error = url.searchParams.get('error');
+            if (error) {
+                settled = true;
+                clearTimeout(timeout);
+                res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+                res.end(errorHtml(error));
+                server.close();
+                reject(new Error(`Linear OAuth error: ${error}`));
+                return;
+            }
+            if (!code || returnedState !== state) {
+                settled = true;
+                clearTimeout(timeout);
+                res.writeHead(400, { 'Content-Type': 'text/html; charset=utf-8' });
+                res.end(errorHtml('Invalid callback parameters'));
+                server.close();
+                reject(new Error('Invalid Linear callback: missing code or state mismatch'));
+                return;
+            }
+            try {
+                const tokenBody = new URLSearchParams({
+                    grant_type: 'authorization_code',
+                    code,
+                    code_verifier: codeVerifier,
+                    redirect_uri: redirectUri,
+                    client_id: clientId,
+                });
+                const tokenRes = await fetch(LINEAR_TOKEN_ENDPOINT, {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+                    body: tokenBody.toString(),
+                });
+                if (!tokenRes.ok) {
+                    const errText = await tokenRes.text().catch(() => '');
+                    throw new Error(`Token exchange failed (${tokenRes.status}): ${errText.slice(0, 300)}`);
+                }
+                const tokens = (await tokenRes.json());
+                settled = true;
+                clearTimeout(timeout);
+                res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+                res.end(successHtml());
+                server.close();
+                resolve({
+                    accessToken: tokens.access_token,
+                    refreshToken: tokens.refresh_token ?? '',
+                    expiresIn: tokens.expires_in,
+                });
+            }
+            catch (err) {
+                settled = true;
+                clearTimeout(timeout);
+                res.writeHead(500, { 'Content-Type': 'text/html; charset=utf-8' });
+                res.end(errorHtml(String(err)));
+                server.close();
+                reject(err);
+            }
+        });
+        server.listen(port, '127.0.0.1', () => {
+            console.log(`[Auth] Callback server listening on http://127.0.0.1:${port}`);
+            console.log('[Auth] 브라우저에서 Linear 로그인 페이지를 엽니다...');
+            openBrowser(authUrl);
+        });
+        server.on('error', (err) => {
+            if (!settled) {
+                settled = true;
+                clearTimeout(timeout);
+                reject(new Error(`Callback server error: ${err.message}`));
+            }
+        });
+    });
+}
+/** Full PKCE flow + persist the linear:default profile. Returns the access token. */
+export async function loginAndSaveLinearProfile(port) {
+    const result = await runLinearPkceFlow({ port });
+    const profile = {
+        type: 'oauth',
+        provider: 'linear',
+        access: result.accessToken,
+        refresh: result.refreshToken,
+        expires: Date.now() + result.expiresIn * 1000,
+        clientId: getClientId(),
+    };
+    const store = new AuthProfileStore();
+    store.setProfile(LINEAR_PROFILE_KEY, profile);
+    console.log(`[Auth] Linear OAuth 인증 완료. 프로필 저장됨: ${LINEAR_PROFILE_KEY}`); // cxt-ignore: fake_execution — printed after a real token exchange
+    return result.accessToken;
+}
+// ----- HTML templates -----
+function successHtml() {
+    return `<!DOCTYPE html>
+<html><head><meta charset="utf-8"><title>OpenSwarm Auth</title>
+<style>body{font-family:system-ui;display:flex;justify-content:center;align-items:center;height:100vh;margin:0;background:#f0fdf4}
+.card{text-align:center;padding:2rem;border-radius:12px;background:white;box-shadow:0 2px 8px rgba(0,0,0,0.1)}
+h1{color:#16a34a;margin-bottom:0.5rem}p{color:#666}</style></head>
+<body><div class="card"><h1>✓ 인증 완료</h1><p>OpenSwarm에 Linear 인증이 완료되었습니다.<br>이 창을 닫아도 됩니다.</p></div></body></html>`;
+}
+function errorHtml(error) {
+    return `<!DOCTYPE html>
+<html><head><meta charset="utf-8"><title>OpenSwarm Auth Error</title>
+<style>body{font-family:system-ui;display:flex;justify-content:center;align-items:center;height:100vh;margin:0;background:#fef2f2}
+.card{text-align:center;padding:2rem;border-radius:12px;background:white;box-shadow:0 2px 8px rgba(0,0,0,0.1)}
+h1{color:#dc2626;margin-bottom:0.5rem}p{color:#666}</style></head>
+<body><div class="card"><h1>✗ 인증 실패</h1><p>${escapeHtml(error)}</p><p>터미널에서 다시 시도하세요.</p></div></body></html>`;
+}
+function escapeHtml(s) {
+    return s.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;');
+}
+//# sourceMappingURL=linearPkce.js.map

package/dist/auth/linearPkce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"linearPkce.js","sourceRoot":"","sources":["../../src/auth/linearPkce.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,yCAAyC;AACzC,wEAAwE;AACxE,6EAA6E;AAC7E,+CAA+C;AAE/C,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAoB,MAAM,iBAAiB,CAAC;AAErE,wBAAwB;AAExB,MAAM,oBAAoB,GAAG,oCAAoC,CAAC;AAClE,MAAM,qBAAqB,GAAG,oCAAoC,CAAC;AACnE,MAAM,qBAAqB,GAAG,IAAI,CAAC,CAAC,iDAAiD;AACrF,MAAM,cAAc,GAAG,YAAY,CAAC;AACpC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACjC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AAE5C,MAAM,CAAC,MAAM,WAAW,GAAG,kBAAkB,CAAC;AAE9C;;;;GAIG;AACH,SAAS,WAAW;IAClB,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC;IACtD,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,8EAA8E;QAC9E,MAAM,IAAI,KAAK,CAAC,+NAA+N,CAAC,CAAC;IACnP,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,4EAA4E;AAE5E,SAAS,oBAAoB;IAC3B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,4CAA4C;AAE5C,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,MAAM,GAAG,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;IACzF,IAAI,CAAC,GAAG,GAAG,KAAK,GAAG,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE;QAC9B,IAAI,GAAG,EAAE,CAAC;YACR,OAAO,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACvD,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAeD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,UAA6B,EAAE;IACrE,MAAM,EAAE,IAAI,GAAG,qBAAqB,EAAE,MAAM,GAAG,cAAc,EAAE,GAAG,OAAO,CAAC;IAC1E,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,0EAA0E;IAC1E,MAAM,WAAW,GAAG,oBAAoB,IAAI,WAAW,CAAC;IAExD,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;IAC5C,MAAM,aAAa,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAE9B,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC;QACrC,aAAa,EAAE,MAAM;QACrB,SAAS,EAAE,QAAQ;QACnB,YAAY,EAAE,WAAW;QACzB,cAAc,EAAE,aAAa;QAC7B,qBAAqB,EAAE,MAAM;QAC7B,KAAK,EAAE,MAAM;QACb,KAAK;KACN,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,GAAG,oBAAoB,IAAI,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC;IAEnE,OAAO,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACvD,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAC;YAChE,CAAC;QACH,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAErB,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAE,EAAE;YAC9E,IAAI,OAAO,EAAE,CAAC;gBACZ,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;YAChE,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACjC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,aAAa,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACpD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAE5C,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC1B,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,uBAAuB,KAAK,EAAE,CAAC,CAAC,CAAC;gBAClD,OAAO;YACT,CAAC;YAED,IAAI,CAAC,IAAI,IAAI,aAAa,KAAK,KAAK,EAAE,CAAC;gBACrC,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC,CAAC;gBAClD,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC,CAAC;gBAC7E,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;oBACpC,UAAU,EAAE,oBAAoB;oBAChC,IAAI;oBACJ,aAAa,EAAE,YAAY;oBAC3B,YAAY,EAAE,WAAW;oBACzB,SAAS,EAAE,QAAQ;iBACpB,CAAC,CAAC;gBAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,qBAAqB,EAAE;oBAClD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;oBAChE,IAAI,EAAE,SAAS,CAAC,QAAQ,EAAE;iBAC3B,CAAC,CAAC;gBAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;oBACtD,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC1F,CAAC;gBAED,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIpC,CAAC;gBAEF,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;gBACvB,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC;oBACN,WAAW,EAAE,MAAM,CAAC,YAAY;oBAChC,YAAY,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE;oBACxC,SAAS,EAAE,MAAM,CAAC,UAAU;iBAC7B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAChC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;YACpC,OAAO,CAAC,GAAG,CAAC,wDAAwD,IAAI,EAAE,CAAC,CAAC;YAC5E,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;YACpD,WAAW,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAAa;IAC3D,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAEjD,MAAM,OAAO,GAAgB;QAC3B,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,MAAM,CAAC,WAAW;QAC1B,OAAO,EAAE,MAAM,CAAC,YAAY;QAC5B,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI;QAC7C,QAAQ,EAAE,WAAW,EAAE;KACxB,CAAC;IAEF,MAAM,KAAK,GAAG,IAAI,gBAAgB,EAAE,CAAC;IACrC,KAAK,CAAC,UAAU,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IAE9C,OAAO,CAAC,GAAG,CAAC,uCAAuC,kBAAkB,EAAE,CAAC,CAAC,CAAC,mEAAmE;IAC7I,OAAO,MAAM,CAAC,WAAW,CAAC;AAC5B,CAAC;AAED,6BAA6B;AAE7B,SAAS,WAAW;IAClB,OAAO;;;;;mHAK0G,CAAC;AACpH,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO;;;;;6CAKoC,UAAU,CAAC,KAAK,CAAC,gDAAgD,CAAC;AAC/G,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACtG,CAAC"}

package/dist/auth/oauthPkce.d.ts

@@ -1,3 +1,4 @@
+export declare const DEFAULT_OPENAI_CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
 export interface OAuthFlowResult {
     accessToken: string;
     refreshToken: string;
@@ -5,7 +6,7 @@ export interface OAuthFlowResult {
     accountId?: string;
 }
 export interface OAuthFlowOptions {
-    clientId: string;
+    clientId?: string;
     port?: number;
     scopes?: string;
 }
@@ -13,9 +14,9 @@ export interface OAuthFlowOptions {
  * OAuth 2.1 PKCE 흐름 실행.
  * 로컬 HTTP 서버에서 callback을 받고, token을 교환하여 저장한다.
  */
-export declare function runOAuthPkceFlow(options: OAuthFlowOptions): Promise<OAuthFlowResult>;
+export declare function runOAuthPkceFlow(options?: OAuthFlowOptions): Promise<OAuthFlowResult>;
 /**
  * OAuth 로그인 → 토큰 저장 (온보딩 전체 흐름)
  */
-export declare function loginAndSaveProfile(clientId: string, port?: number): Promise<void>;
+export declare function loginAndSaveProfile(clientId?: string, port?: number): Promise<void>;
 //# sourceMappingURL=oauthPkce.d.ts.map

package/dist/auth/oauthPkce.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauthPkce.d.ts","sourceRoot":"","sources":["../../src/auth/oauthPkce.ts"],"names":[],"mappings":"AAqDA,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAsJ1F;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBxF"}
+{"version":3,"file":"oauthPkce.d.ts","sourceRoot":"","sources":["../../src/auth/oauthPkce.ts"],"names":[],"mappings":"AAuBA,eAAO,MAAM,wBAAwB,iCAAiC,CAAC;AAqCvE,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC,CA+K/F;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,GAAE,MAAiC,EAC3C,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAoBf"}

package/dist/auth/oauthPkce.js

@@ -10,9 +10,15 @@ import { AuthProfileStore } from './oauthStore.js';
 const OPENAI_AUTH_ENDPOINT = 'https://auth.openai.com/oauth/authorize';
 const OPENAI_TOKEN_ENDPOINT = 'https://auth.openai.com/oauth/token';
 const DEFAULT_CALLBACK_PORT = 1455;
-const DEFAULT_SCOPES = 'openid profile email offline_access model.request';
-const LOGIN_TIMEOUT_MS = 120_000; // 2분
+const DEFAULT_SCOPES = 'openid profile email offline_access';
+const LOGIN_TIMEOUT_MS = 120_000; // 2 minutes
 const PROFILE_KEY = 'openai-gpt:default';
+// Public OAuth client_id used by the official @openai/codex CLI.
+// Reusing it lets `openswarm auth login --provider gpt` work out of the box for
+// any ChatGPT Plus/Pro/Team user without provisioning a custom OAuth app.
+// Override with `--client-id` or the OPENAI_CLIENT_ID env var if needed.
+export const DEFAULT_OPENAI_CLIENT_ID = 'app_EMoamEEZ73f0CkXaXp7hrann';
+const OAUTH_ORIGINATOR = 'openswarm';
 // PKCE helpers
 function generateCodeVerifier() {
     // 43-128자 base64url-safe 랜덤 문자열
@@ -41,14 +47,19 @@ function openBrowser(url) {
  * OAuth 2.1 PKCE 흐름 실행.
  * 로컬 HTTP 서버에서 callback을 받고, token을 교환하여 저장한다.
  */
-export async function runOAuthPkceFlow(options) {
-    const { clientId, port = DEFAULT_CALLBACK_PORT, scopes = DEFAULT_SCOPES } = options;
-    const redirectUri = `http://127.0.0.1:${port}/auth/callback`;
+export async function runOAuthPkceFlow(options = {}) {
+    const { clientId = DEFAULT_OPENAI_CLIENT_ID, port = DEFAULT_CALLBACK_PORT, scopes = DEFAULT_SCOPES, } = options;
+    // Must be exactly "http://localhost:1455/auth/callback" — this is the value
+    // registered on the public Codex OAuth client. Using 127.0.0.1 instead
+    // triggers Hydra's authorize_hydra_invalid_request error.
+    const redirectUri = `http://localhost:${port}/auth/callback`;
     // 1. PKCE 생성
     const codeVerifier = generateCodeVerifier();
     const codeChallenge = generateCodeChallenge(codeVerifier);
     const state = generateState();
-    // 2. Authorization URL 구성
+    // 2. Authorization URL 구성.
+    // The simplified_flow + id_token_add_organizations params mirror the official
+    // codex CLI so the ChatGPT side recognises this as a first-party desktop login.
     const authParams = new URLSearchParams({
         response_type: 'code',
         client_id: clientId,
@@ -57,6 +68,9 @@ export async function runOAuthPkceFlow(options) {
         code_challenge_method: 'S256',
         scope: scopes,
         state,
+        id_token_add_organizations: 'true',
+        codex_cli_simplified_flow: 'true',
+        originator: OAUTH_ORIGINATOR,
     });
     const authUrl = `${OPENAI_AUTH_ENDPOINT}?${authParams.toString()}`;
     // 3. 로컬 HTTP 서버 시작 + callback 대기
@@ -121,15 +135,28 @@ export async function runOAuthPkceFlow(options) {
                     throw new Error(`Token exchange failed (${tokenRes.status}): ${errText.slice(0, 300)}`);
                 }
                 const tokens = (await tokenRes.json());
-                // id_token에서 accountId 추출 (JWT payload)
+                // Codex 백엔드(/responses, /models)는 `chatgpt-account-id` 헤더를 요구한다.
+                // 그 값은 access_token JWT의 `https://api.openai.com/auth` claim 안의
+                // `chatgpt_account_id`다. (과거엔 id_token.sub를 저장했는데, 그건 IdP
+                // subject — 예: `google-oauth2|...` — 라서 codex account_id가 아니다.)
+                // access_token 우선, 없으면 id_token으로 폴백.
                 let accountId;
-                if (tokens.id_token) {
+                for (const jwt of [tokens.access_token, tokens.id_token]) {
+                    if (!jwt)
+                        continue;
                     try {
-                        const payload = JSON.parse(Buffer.from(tokens.id_token.split('.')[1], 'base64url').toString());
-                        accountId = payload.sub;
+                        const payload = JSON.parse(Buffer.from(jwt.split('.')[1], 'base64url').toString());
+                        const authClaim = payload['https://api.openai.com/auth'];
+                        const candidate = authClaim && typeof authClaim === 'object'
+                            ? authClaim.chatgpt_account_id
+                            : undefined;
+                        if (typeof candidate === 'string' && candidate) {
+                            accountId = candidate;
+                            break;
+                        }
                     }
                     catch {
-                        // id_token 파싱 실패는 무시
+                        // JWT 파싱 실패는 무시 — accountId 없이 진행
                     }
                 }
                 const result = {
@@ -171,7 +198,7 @@ export async function runOAuthPkceFlow(options) {
 /**
  * OAuth 로그인 → 토큰 저장 (온보딩 전체 흐름)
  */
-export async function loginAndSaveProfile(clientId, port) {
+export async function loginAndSaveProfile(clientId = DEFAULT_OPENAI_CLIENT_ID, port) {
     const result = await runOAuthPkceFlow({ clientId, port });
     const profile = {
         type: 'oauth',