@itssimplereally/opencode-kimicode-auth 0.1.0

package/dist/src/plugin/storage.js

@@ -0,0 +1,450 @@
+import { promises as fs } from "node:fs";
+import { existsSync, readFileSync, writeFileSync, appendFileSync, mkdirSync, renameSync, copyFileSync, unlinkSync, } from "node:fs";
+import { dirname, join } from "node:path";
+import { homedir } from "node:os";
+import { randomBytes } from "node:crypto";
+import lockfile from "proper-lockfile";
+import { createLogger } from "./logger";
+const log = createLogger("storage");
+/**
+ * Files/directories that should be gitignored in the config directory.
+ * These contain sensitive data or machine-specific state.
+ */
+export const GITIGNORE_ENTRIES = [
+    ".gitignore",
+    "kimicode-accounts.json",
+    "kimicode-accounts.json.*.tmp",
+    "kimicode-logs/",
+];
+/**
+ * Ensures a .gitignore file exists in the config directory with entries
+ * for sensitive files. Creates the file if missing, or appends missing
+ * entries if it already exists.
+ */
+export async function ensureGitignore(configDir) {
+    const gitignorePath = join(configDir, ".gitignore");
+    try {
+        let content;
+        let existingLines = [];
+        try {
+            content = await fs.readFile(gitignorePath, "utf-8");
+            existingLines = content.split("\n").map((line) => line.trim());
+        }
+        catch (error) {
+            if (error.code !== "ENOENT") {
+                return;
+            }
+            content = "";
+        }
+        const missingEntries = GITIGNORE_ENTRIES.filter((entry) => !existingLines.includes(entry));
+        if (missingEntries.length === 0) {
+            return;
+        }
+        if (content === "") {
+            await fs.writeFile(gitignorePath, missingEntries.join("\n") + "\n", "utf-8");
+            log.info("Created .gitignore in config directory");
+        }
+        else {
+            const suffix = content.endsWith("\n") ? "" : "\n";
+            await fs.appendFile(gitignorePath, suffix + missingEntries.join("\n") + "\n", "utf-8");
+            log.info("Updated .gitignore with missing entries", {
+                added: missingEntries,
+            });
+        }
+    }
+    catch {
+        // Non-critical feature
+    }
+}
+/**
+ * Synchronous version of ensureGitignore for use in sync code paths.
+ */
+export function ensureGitignoreSync(configDir) {
+    const gitignorePath = join(configDir, ".gitignore");
+    try {
+        let content;
+        let existingLines = [];
+        if (existsSync(gitignorePath)) {
+            content = readFileSync(gitignorePath, "utf-8");
+            existingLines = content.split("\n").map((line) => line.trim());
+        }
+        else {
+            content = "";
+        }
+        const missingEntries = GITIGNORE_ENTRIES.filter((entry) => !existingLines.includes(entry));
+        if (missingEntries.length === 0) {
+            return;
+        }
+        if (content === "") {
+            writeFileSync(gitignorePath, missingEntries.join("\n") + "\n", "utf-8");
+            log.info("Created .gitignore in config directory");
+        }
+        else {
+            const suffix = content.endsWith("\n") ? "" : "\n";
+            appendFileSync(gitignorePath, suffix + missingEntries.join("\n") + "\n", "utf-8");
+            log.info("Updated .gitignore with missing entries", {
+                added: missingEntries,
+            });
+        }
+    }
+    catch {
+        // Non-critical feature
+    }
+}
+/**
+ * Gets the legacy Windows config directory (%APPDATA%\opencode).
+ * Used for migration from older plugin versions.
+ */
+function getLegacyWindowsConfigDir() {
+    return join(process.env.APPDATA || join(homedir(), "AppData", "Roaming"), "opencode");
+}
+/**
+ * Gets the config directory path, with the following precedence:
+ * 1. OPENCODE_CONFIG_DIR env var (if set)
+ * 2. ~/.config/opencode (all platforms, including Windows)
+ *
+ * On Windows, also checks for legacy %APPDATA%\opencode path for migration.
+ */
+function getConfigDir() {
+    // 1. Check for explicit override via env var
+    if (process.env.OPENCODE_CONFIG_DIR) {
+        return process.env.OPENCODE_CONFIG_DIR;
+    }
+    // 2. Use ~/.config/opencode on all platforms (including Windows)
+    const xdgConfig = process.env.XDG_CONFIG_HOME || join(homedir(), ".config");
+    return join(xdgConfig, "opencode");
+}
+/**
+ * Migrates config from legacy Windows location to the new path.
+ * Moves the file if legacy exists and new doesn't.
+ * Returns true if migration was performed.
+ */
+function migrateLegacyWindowsConfig() {
+    if (process.platform !== "win32") {
+        return false;
+    }
+    const newPath = join(getConfigDir(), "kimicode-accounts.json");
+    const legacyPath = join(getLegacyWindowsConfigDir(), "kimicode-accounts.json");
+    // Only migrate if legacy exists and new doesn't
+    if (!existsSync(legacyPath) || existsSync(newPath)) {
+        return false;
+    }
+    try {
+        // Ensure new config directory exists
+        const newConfigDir = getConfigDir();
+        mkdirSync(newConfigDir, { recursive: true });
+        // Try rename first (atomic, but fails across filesystems)
+        try {
+            renameSync(legacyPath, newPath);
+            log.info("Migrated Windows config via rename", { from: legacyPath, to: newPath });
+        }
+        catch {
+            // Fallback: copy then delete (for cross-filesystem moves)
+            copyFileSync(legacyPath, newPath);
+            unlinkSync(legacyPath);
+            log.info("Migrated Windows config via copy+delete", { from: legacyPath, to: newPath });
+        }
+        return true;
+    }
+    catch (error) {
+        log.warn("Failed to migrate legacy Windows config, will use legacy path", {
+            legacyPath,
+            newPath,
+            error: String(error),
+        });
+        return false;
+    }
+}
+/**
+ * Gets the storage path, migrating from legacy Windows location if needed.
+ * On Windows, attempts to move legacy config to new path for alignment.
+ */
+function getStoragePathWithMigration() {
+    const newPath = join(getConfigDir(), "kimicode-accounts.json");
+    // On Windows, attempt to migrate legacy config to new location
+    if (process.platform === "win32") {
+        migrateLegacyWindowsConfig();
+        // If migration failed and legacy still exists, fall back to it
+        if (!existsSync(newPath)) {
+            const legacyPath = join(getLegacyWindowsConfigDir(), "kimicode-accounts.json");
+            if (existsSync(legacyPath)) {
+                log.info("Using legacy Windows config path (migration failed)", {
+                    legacyPath,
+                    newPath,
+                });
+                return legacyPath;
+            }
+        }
+    }
+    return newPath;
+}
+export function getStoragePath() {
+    return getStoragePathWithMigration();
+}
+/**
+ * Gets the config directory path. Exported for use by other modules.
+ */
+export { getConfigDir };
+const LOCK_OPTIONS = {
+    stale: 10000,
+    retries: {
+        retries: 5,
+        minTimeout: 100,
+        maxTimeout: 1000,
+        factor: 2,
+    },
+};
+/**
+ * Ensures the file has secure permissions (0600) on POSIX systems.
+ * This is a best-effort operation and ignores errors on Windows/unsupported FS.
+ */
+async function ensureSecurePermissions(path) {
+    try {
+        await fs.chmod(path, 0o600);
+    }
+    catch {
+        // Ignore errors (e.g. Windows, file doesn't exist, FS doesn't support chmod)
+    }
+}
+async function ensureFileExists(path) {
+    try {
+        await fs.access(path);
+    }
+    catch {
+        await fs.mkdir(dirname(path), { recursive: true });
+        await fs.writeFile(path, JSON.stringify({ version: 1, accounts: [], activeIndex: 0 }, null, 2), { encoding: "utf-8", mode: 0o600 });
+    }
+}
+async function withFileLock(path, fn) {
+    await ensureFileExists(path);
+    let release = null;
+    try {
+        release = await lockfile.lock(path, LOCK_OPTIONS);
+        return await fn();
+    }
+    finally {
+        if (release) {
+            try {
+                await release();
+            }
+            catch (unlockError) {
+                log.warn("Failed to release lock", { error: String(unlockError) });
+            }
+        }
+    }
+}
+function mergeAccountStorage(existing, incoming) {
+    const accountMap = new Map();
+    for (const acc of existing.accounts) {
+        if (acc.refreshToken) {
+            accountMap.set(acc.refreshToken, acc);
+        }
+    }
+    for (const acc of incoming.accounts) {
+        if (acc.refreshToken) {
+            const existingAcc = accountMap.get(acc.refreshToken);
+            if (existingAcc) {
+                accountMap.set(acc.refreshToken, {
+                    ...existingAcc,
+                    ...acc,
+                    rateLimitResetTimes: {
+                        ...existingAcc.rateLimitResetTimes,
+                        ...acc.rateLimitResetTimes,
+                    },
+                    lastUsed: Math.max(existingAcc.lastUsed || 0, acc.lastUsed || 0),
+                });
+            }
+            else {
+                accountMap.set(acc.refreshToken, acc);
+            }
+        }
+    }
+    return {
+        version: 1,
+        accounts: Array.from(accountMap.values()),
+        activeIndex: incoming.activeIndex,
+        activeIndexByFamily: incoming.activeIndexByFamily,
+    };
+}
+export function deduplicateAccountsByEmail(accounts) {
+    const emailToNewestIndex = new Map();
+    const indicesToKeep = new Set();
+    for (let i = 0; i < accounts.length; i++) {
+        const acc = accounts[i];
+        if (!acc)
+            continue;
+        if (!acc.email) {
+            indicesToKeep.add(i);
+            continue;
+        }
+        const existingIndex = emailToNewestIndex.get(acc.email);
+        if (existingIndex === undefined) {
+            emailToNewestIndex.set(acc.email, i);
+            continue;
+        }
+        const existing = accounts[existingIndex];
+        if (!existing) {
+            emailToNewestIndex.set(acc.email, i);
+            continue;
+        }
+        const currLastUsed = acc.lastUsed || 0;
+        const existLastUsed = existing.lastUsed || 0;
+        const currAddedAt = acc.addedAt || 0;
+        const existAddedAt = existing.addedAt || 0;
+        const isNewer = currLastUsed > existLastUsed ||
+            (currLastUsed === existLastUsed && currAddedAt > existAddedAt);
+        if (isNewer) {
+            emailToNewestIndex.set(acc.email, i);
+        }
+    }
+    for (const idx of emailToNewestIndex.values()) {
+        indicesToKeep.add(idx);
+    }
+    const result = [];
+    for (let i = 0; i < accounts.length; i++) {
+        if (indicesToKeep.has(i)) {
+            const acc = accounts[i];
+            if (acc) {
+                result.push(acc);
+            }
+        }
+    }
+    return result;
+}
+export async function loadAccounts() {
+    try {
+        const path = getStoragePath();
+        await ensureSecurePermissions(path);
+        const content = await fs.readFile(path, "utf-8");
+        const data = JSON.parse(content);
+        if (!Array.isArray(data.accounts)) {
+            log.warn("Invalid storage format, ignoring");
+            return null;
+        }
+        if (data.version !== 1) {
+            log.warn("Unknown storage version, ignoring", {
+                version: data.version,
+            });
+            return null;
+        }
+        const validAccounts = data.accounts.filter((a) => {
+            return (!!a &&
+                typeof a === "object" &&
+                typeof a.refreshToken === "string");
+        });
+        const deduplicatedAccounts = deduplicateAccountsByEmail(validAccounts);
+        let activeIndex = typeof data.activeIndex === "number" &&
+            Number.isFinite(data.activeIndex)
+            ? data.activeIndex
+            : 0;
+        if (deduplicatedAccounts.length > 0) {
+            activeIndex = Math.min(activeIndex, deduplicatedAccounts.length - 1);
+            activeIndex = Math.max(activeIndex, 0);
+        }
+        else {
+            activeIndex = 0;
+        }
+        return {
+            version: 1,
+            accounts: deduplicatedAccounts,
+            activeIndex,
+            activeIndexByFamily: data.activeIndexByFamily,
+        };
+    }
+    catch (error) {
+        const code = error.code;
+        if (code === "ENOENT") {
+            return null;
+        }
+        log.error("Failed to load account storage", { error: String(error) });
+        return null;
+    }
+}
+export async function saveAccounts(storage) {
+    const path = getStoragePath();
+    const configDir = dirname(path);
+    await fs.mkdir(configDir, { recursive: true });
+    await ensureGitignore(configDir);
+    await withFileLock(path, async () => {
+        const existing = await loadAccountsUnsafe();
+        const merged = existing ? mergeAccountStorage(existing, storage) : storage;
+        const tempPath = `${path}.${randomBytes(6).toString("hex")}.tmp`;
+        const content = JSON.stringify(merged, null, 2);
+        try {
+            await fs.writeFile(tempPath, content, { encoding: "utf-8", mode: 0o600 });
+            await fs.rename(tempPath, path);
+        }
+        catch (error) {
+            try {
+                await fs.unlink(tempPath);
+            }
+            catch {
+                // Ignore cleanup errors (file may not exist)
+            }
+            throw error;
+        }
+    });
+}
+/**
+ * Save accounts storage by replacing the entire file (no merge).
+ * Use this for destructive operations like delete where we need to
+ * remove accounts that would otherwise be merged back from existing storage.
+ */
+export async function saveAccountsReplace(storage) {
+    const path = getStoragePath();
+    const configDir = dirname(path);
+    await fs.mkdir(configDir, { recursive: true });
+    await ensureGitignore(configDir);
+    await withFileLock(path, async () => {
+        const tempPath = `${path}.${randomBytes(6).toString("hex")}.tmp`;
+        const content = JSON.stringify(storage, null, 2);
+        try {
+            await fs.writeFile(tempPath, content, { encoding: "utf-8", mode: 0o600 });
+            await fs.rename(tempPath, path);
+        }
+        catch (error) {
+            try {
+                await fs.unlink(tempPath);
+            }
+            catch {
+                // Ignore cleanup errors
+            }
+            throw error;
+        }
+    });
+}
+async function loadAccountsUnsafe() {
+    try {
+        const path = getStoragePath();
+        await ensureSecurePermissions(path);
+        const content = await fs.readFile(path, "utf-8");
+        const parsed = JSON.parse(content);
+        if (parsed.version !== 1 || !Array.isArray(parsed.accounts)) {
+            return null;
+        }
+        return {
+            ...parsed,
+            accounts: deduplicateAccountsByEmail(parsed.accounts),
+        };
+    }
+    catch (error) {
+        const code = error.code;
+        if (code === "ENOENT") {
+            return null;
+        }
+        return null;
+    }
+}
+export async function clearAccounts() {
+    try {
+        const path = getStoragePath();
+        await fs.unlink(path);
+    }
+    catch (error) {
+        const code = error.code;
+        if (code !== "ENOENT") {
+            log.error("Failed to clear account storage", { error: String(error) });
+        }
+    }
+}
+//# sourceMappingURL=storage.js.map

package/dist/src/plugin/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../../src/plugin/storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EACL,UAAU,EACV,YAAY,EACZ,aAAa,EACb,cAAc,EACd,SAAS,EACT,UAAU,EACV,YAAY,EACZ,UAAU,GACX,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,QAAQ,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;AAEpC;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,YAAY;IACZ,wBAAwB;IACxB,8BAA8B;IAC9B,gBAAgB;CACjB,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB;IACrD,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAEpD,IAAI,CAAC;QACH,IAAI,OAAe,CAAC;QACpB,IAAI,aAAa,GAAa,EAAE,CAAC;QAEjC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YACpD,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,OAAO;YACT,CAAC;YACD,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;QAED,MAAM,cAAc,GAAG,iBAAiB,CAAC,MAAM,CAC7C,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAC1C,CAAC;QAEF,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QAED,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YACnB,MAAM,EAAE,CAAC,SAAS,CAChB,aAAa,EACb,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAChC,OAAO,CACR,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAClD,MAAM,EAAE,CAAC,UAAU,CACjB,aAAa,EACb,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EACzC,OAAO,CACR,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,yCAAyC,EAAE;gBAClD,KAAK,EAAE,cAAc;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uBAAuB;IACzB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAEpD,IAAI,CAAC;QACH,IAAI,OAAe,CAAC;QACpB,IAAI,aAAa,GAAa,EAAE,CAAC;QAEjC,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9B,OAAO,GAAG,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YAC/C,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;QAED,MAAM,cAAc,GAAG,iBAAiB,CAAC,MAAM,CAC7C,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAC1C,CAAC;QAEF,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QAED,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YACnB,aAAa,CAAC,aAAa,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;YACxE,GAAG,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAClD,cAAc,CACZ,aAAa,EACb,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EACzC,OAAO,CACR,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,yCAAyC,EAAE;gBAClD,KAAK,EAAE,cAAc;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uBAAuB;IACzB,CAAC;AACH,CAAC;AAoDD;;;GAGG;AACH,SAAS,yBAAyB;IAChC,OAAO,IAAI,CACT,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,EAC5D,UAAU,CACX,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY;IACnB,6CAA6C;IAC7C,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;QACpC,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACzC,CAAC;IAED,iEAAiE;IACjE,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IAC5E,OAAO,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,SAAS,0BAA0B;IACjC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,EAAE,wBAAwB,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,IAAI,CACrB,yBAAyB,EAAE,EAC3B,wBAAwB,CACzB,CAAC;IAEF,gDAAgD;IAChD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC;QACH,qCAAqC;QACrC,MAAM,YAAY,GAAG,YAAY,EAAE,CAAC;QAEpC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE7C,0DAA0D;QAC1D,IAAI,CAAC;YACH,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAChC,GAAG,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACpF,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;YAC1D,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAClC,UAAU,CAAC,UAAU,CAAC,CAAC;YACvB,GAAG,CAAC,IAAI,CAAC,yCAAyC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,IAAI,CAAC,+DAA+D,EAAE;YACxE,UAAU;YACV,OAAO;YACP,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;SACrB,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,2BAA2B;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,EAAE,wBAAwB,CAAC,CAAC;IAE/D,+DAA+D;IAC/D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,0BAA0B,EAAE,CAAC;QAE7B,+DAA+D;QAC/D,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,MAAM,UAAU,GAAG,IAAI,CACrB,yBAAyB,EAAE,EAC3B,wBAAwB,CACzB,CAAC;YACF,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC3B,GAAG,CAAC,IAAI,CAAC,qDAAqD,EAAE;oBAC9D,UAAU;oBACV,OAAO;iBACR,CAAC,CAAC;gBACH,OAAO,UAAU,CAAC;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,2BAA2B,EAAE,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,OAAO,EAAE,YAAY,EAAE,CAAC;AAExB,MAAM,YAAY,GAAG;IACnB,KAAK,EAAE,KAAK;IACZ,OAAO,EAAE;QACP,OAAO,EAAE,CAAC;QACV,UAAU,EAAE,GAAG;QACf,UAAU,EAAE,IAAI;QAChB,MAAM,EAAE,CAAC;KACV;CACF,CAAC;AAEF;;;GAGG;AACH,KAAK,UAAU,uBAAuB,CAAC,IAAY;IACjD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,6EAA6E;IAC/E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,EACJ,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EACrE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CACnC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAI,IAAY,EAAE,EAAoB;IAC/D,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,OAAO,GAAiC,IAAI,CAAC;IACjD,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAClD,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,OAAO,EAAE,CAAC;YAClB,CAAC;YAAC,OAAO,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAAwB,EACxB,QAAwB;IAExB,MAAM,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEtD,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACpC,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YACrB,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACpC,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YACrB,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACrD,IAAI,WAAW,EAAE,CAAC;gBAChB,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE;oBAC/B,GAAG,WAAW;oBACd,GAAG,GAAG;oBACN,mBAAmB,EAAE;wBACnB,GAAG,WAAW,CAAC,mBAAmB;wBAClC,GAAG,GAAG,CAAC,mBAAmB;qBAC3B;oBACD,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,IAAI,CAAC,EAAE,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;iBACjE,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QACzC,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;KAClD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAExC,QAAa;IACb,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACrD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IAExC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,GAAG;YAAE,SAAS;QAEnB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QAED,MAAM,aAAa,GAAG,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACrC,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACrC,SAAS;QACX,CAAC;QAED,MAAM,YAAY,GAAG,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;QACvC,MAAM,aAAa,GAAG,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;QACrC,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,IAAI,CAAC,CAAC;QAE3C,MAAM,OAAO,GACX,YAAY,GAAG,aAAa;YAC5B,CAAC,YAAY,KAAK,aAAa,IAAI,WAAW,GAAG,YAAY,CAAC,CAAC;QAEjE,IAAI,OAAO,EAAE,CAAC;YACZ,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,kBAAkB,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9C,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,MAAM,GAAQ,EAAE,CAAC;IACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;QAC9B,MAAM,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAEpC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB,CAAC;QAEnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,IAAI,CAAC,mCAAmC,EAAE;gBAC5C,OAAO,EAAG,IAA8B,CAAC,OAAO;aACjD,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CACxC,CAAC,CAAC,EAAwB,EAAE;YAC1B,OAAO,CACL,CAAC,CAAC,CAAC;gBACH,OAAO,CAAC,KAAK,QAAQ;gBACrB,OAAQ,CAAqB,CAAC,YAAY,KAAK,QAAQ,CACxD,CAAC;QACJ,CAAC,CACF,CAAC;QAEF,MAAM,oBAAoB,GAAG,0BAA0B,CAAC,aAAa,CAAC,CAAC;QAEvE,IAAI,WAAW,GACb,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;YACpC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC;YAC/B,CAAC,CAAC,IAAI,CAAC,WAAW;YAClB,CAAC,CAAC,CAAC,CAAC;QACR,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACrE,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,WAAW,GAAG,CAAC,CAAC;QAClB,CAAC;QAED,OAAO;YACL,OAAO,EAAE,CAAC;YACV,QAAQ,EAAE,oBAAoB;YAC9B,WAAW;YACX,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;SAC9C,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAuB;IACxD,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;IAEjC,MAAM,YAAY,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QAClC,MAAM,QAAQ,GAAG,MAAM,kBAAkB,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAE3E,MAAM,QAAQ,GAAG,GAAG,IAAI,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAEhD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1E,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,6CAA6C;YAC/C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAuB;IAC/D,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;IAEjC,MAAM,YAAY,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QAClC,MAAM,QAAQ,GAAG,GAAG,IAAI,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAEjD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1E,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,kBAAkB;IAC/B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;QAC9B,MAAM,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAEpC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB,CAAC;QAErD,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO;YACL,GAAG,MAAM;YACT,QAAQ,EAAE,0BAA0B,CAAC,MAAM,CAAC,QAAQ,CAAC;SACtD,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;QAC9B,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,GAAG,CAAC,KAAK,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/src/plugin/token.d.ts

@@ -0,0 +1,19 @@
+import type { OAuthAuthDetails, PluginClient } from "./types";
+export declare class KimiTokenRefreshError extends Error {
+    code?: string;
+    description?: string;
+    status: number;
+    statusText: string;
+    constructor(options: {
+        message: string;
+        code?: string;
+        description?: string;
+        status: number;
+        statusText: string;
+    });
+}
+/**
+ * Refreshes a Kimi OAuth access token using the refresh_token grant.
+ */
+export declare function refreshAccessToken(auth: OAuthAuthDetails, _client: PluginClient, _providerId: string): Promise<OAuthAuthDetails | undefined>;
+//# sourceMappingURL=token.d.ts.map

package/dist/src/plugin/token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../../src/plugin/token.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAsC7D,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;gBAEN,OAAO,EAAE;QACnB,OAAO,EAAE,MAAM,CAAA;QACf,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,MAAM,EAAE,MAAM,CAAA;QACd,UAAU,EAAE,MAAM,CAAA;KACnB;CAQF;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,gBAAgB,EACtB,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAmEvC"}

package/dist/src/plugin/token.js

@@ -0,0 +1,112 @@
+import { KIMI_CLIENT_ID, KIMI_TOKEN_ENDPOINT, getKimiOAuthHeaders } from "../constants";
+import { calculateTokenExpiry } from "./auth";
+import { clearCachedAuth, storeCachedAuth } from "./cache";
+import { createLogger } from "./logger";
+const log = createLogger("token");
+function parseOAuthErrorPayload(text) {
+    if (!text)
+        return {};
+    try {
+        const payload = JSON.parse(text);
+        if (!payload || typeof payload !== "object")
+            return { description: text };
+        let code;
+        if (typeof payload.error === "string") {
+            code = payload.error;
+        }
+        else if (payload.error && typeof payload.error === "object") {
+            code = payload.error.status ?? payload.error.code;
+            if (!payload.error_description && payload.error.message) {
+                return { code, description: payload.error.message };
+            }
+        }
+        const description = payload.error_description;
+        if (description)
+            return { code, description };
+        if (payload.error && typeof payload.error === "object" && payload.error.message) {
+            return { code, description: payload.error.message };
+        }
+        return { code };
+    }
+    catch {
+        return { description: text };
+    }
+}
+export class KimiTokenRefreshError extends Error {
+    code;
+    description;
+    status;
+    statusText;
+    constructor(options) {
+        super(options.message);
+        this.name = "KimiTokenRefreshError";
+        this.code = options.code;
+        this.description = options.description;
+        this.status = options.status;
+        this.statusText = options.statusText;
+    }
+}
+/**
+ * Refreshes a Kimi OAuth access token using the refresh_token grant.
+ */
+export async function refreshAccessToken(auth, _client, _providerId) {
+    const refreshToken = auth.refresh;
+    if (!refreshToken)
+        return undefined;
+    try {
+        const startTime = Date.now();
+        const response = await fetch(KIMI_TOKEN_ENDPOINT, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/x-www-form-urlencoded",
+                ...getKimiOAuthHeaders(),
+            },
+            body: new URLSearchParams({
+                grant_type: "refresh_token",
+                refresh_token: refreshToken,
+                client_id: KIMI_CLIENT_ID,
+            }),
+        });
+        if (!response.ok) {
+            let errorText;
+            try {
+                errorText = await response.text();
+            }
+            catch {
+                errorText = undefined;
+            }
+            const { code, description } = parseOAuthErrorPayload(errorText);
+            const details = [code, description ?? errorText].filter(Boolean).join(": ");
+            const baseMessage = `Kimi token refresh failed (${response.status} ${response.statusText})`;
+            const message = details ? `${baseMessage} - ${details}` : baseMessage;
+            log.warn("Token refresh failed", { status: response.status, code, details });
+            if (code === "invalid_grant" || response.status === 401 || response.status === 403) {
+                log.warn("Kimi revoked the stored refresh token - reauthentication required");
+                clearCachedAuth(auth.refresh);
+            }
+            throw new KimiTokenRefreshError({
+                message,
+                code,
+                description: description ?? errorText,
+                status: response.status,
+                statusText: response.statusText,
+            });
+        }
+        const payload = (await response.json());
+        const updatedAuth = {
+            ...auth,
+            access: payload.access_token,
+            expires: calculateTokenExpiry(startTime, payload.expires_in),
+            refresh: payload.refresh_token ?? refreshToken,
+        };
+        storeCachedAuth(updatedAuth);
+        return updatedAuth;
+    }
+    catch (error) {
+        if (error instanceof KimiTokenRefreshError)
+            throw error;
+        log.error("Unexpected token refresh error", { error: String(error) });
+        return undefined;
+    }
+}
+//# sourceMappingURL=token.js.map

package/dist/src/plugin/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../../src/plugin/token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AACvF,OAAO,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAGvC,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;AAOjC,SAAS,sBAAsB,CAAC,IAAwB;IACtD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAA;IAEpB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAsB,CAAA;QACrD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAA;QAEzE,IAAI,IAAwB,CAAA;QAC5B,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACtC,IAAI,GAAG,OAAO,CAAC,KAAK,CAAA;QACtB,CAAC;aAAM,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9D,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAA;YACjD,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACxD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAA;YACrD,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAA;QAC7C,IAAI,WAAW;YAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;QAC7C,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAChF,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAA;QACrD,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,CAAA;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAA;IAC9B,CAAC;AACH,CAAC;AAED,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,IAAI,CAAS;IACb,WAAW,CAAS;IACpB,MAAM,CAAQ;IACd,UAAU,CAAQ;IAElB,YAAY,OAMX;QACC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QACtB,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAA;QACnC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAA;QACxB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;QACtC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;QAC5B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;IACtC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAsB,EACtB,OAAqB,EACrB,WAAmB;IAEnB,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAA;IACjC,IAAI,CAAC,YAAY;QAAE,OAAO,SAAS,CAAA;IAEnC,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC5B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,mBAAmB,EAAE;YAChD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,GAAG,mBAAmB,EAAE;aACzB;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,UAAU,EAAE,eAAe;gBAC3B,aAAa,EAAE,YAAY;gBAC3B,SAAS,EAAE,cAAc;aAC1B,CAAC;SACH,CAAC,CAAA;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,SAA6B,CAAA;YACjC,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,GAAG,SAAS,CAAA;YACvB,CAAC;YAED,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAA;YAC/D,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,WAAW,IAAI,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC3E,MAAM,WAAW,GAAG,8BAA8B,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,GAAG,CAAA;YAC3F,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,WAAW,MAAM,OAAO,EAAE,CAAC,CAAC,CAAC,WAAW,CAAA;YACrE,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;YAE5E,IAAI,IAAI,KAAK,eAAe,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACnF,GAAG,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAA;gBAC7E,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAC/B,CAAC;YAED,MAAM,IAAI,qBAAqB,CAAC;gBAC9B,OAAO;gBACP,IAAI;gBACJ,WAAW,EAAE,WAAW,IAAI,SAAS;gBACrC,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIrC,CAAA;QAED,MAAM,WAAW,GAAqB;YACpC,GAAG,IAAI;YACP,MAAM,EAAE,OAAO,CAAC,YAAY;YAC5B,OAAO,EAAE,oBAAoB,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC;YAC5D,OAAO,EAAE,OAAO,CAAC,aAAa,IAAI,YAAY;SAC/C,CAAA;QAED,eAAe,CAAC,WAAW,CAAC,CAAA;QAC5B,OAAO,WAAW,CAAA;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,qBAAqB;YAAE,MAAM,KAAK,CAAA;QACvD,GAAG,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACrE,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC"}