@jini-ai/agent-runtime 0.1.0

package/dist/providers/openai-chat.js

@@ -0,0 +1,302 @@
+/**
+ * @module providers/openai-chat
+ *
+ * OpenAI Chat Completions API wire adapter + tool-loop turn-runner. Built
+ * fresh against OpenAI's real, current public API docs/reference
+ * (`developers.openai.com/api/docs/guides/function-calling` for the
+ * `tools`/`tool_calls`/tool-result-message shapes; the streaming delta
+ * accumulation shape below matches the long-stable, widely-documented
+ * `chat.completion.chunk` SSE format every OpenAI-compatible gateway this
+ * package's `providers/model-catalog.ts` already targets — `openai`/
+ * `senseaudio`/`aihubmix` protocols — implements identically), per this
+ * repo's "verify against real API docs, don't guess from memory"
+ * convention. Only the *shape* (a turn-runner with a tool-execution loop)
+ * is modeled on OD's `apps/daemon/src/routes/chat.ts`'s `runTurn` per
+ * `ADS-memory/reports/proposals/PROP-http-route-packs-chat-model-proxy-
+ * 2026-07-21.md` — this task did not have direct access to that file.
+ * Sibling of `anthropic-messages.ts`; see that module's header for the
+ * shared design rationale (package placement, `extraHeaders` fix for the
+ * confirmed OpenRouter product-identity leak, the `turn-end-guard.ts` fix
+ * for the confirmed duplicate-`end`-event bug — both apply identically
+ * here).
+ *
+ * **Token-limit fix**: an earlier version of this module sent no
+ * `max_tokens`/`max_completion_tokens` field at all — a live comparison
+ * against a running Open Design daemon found OD always sends one (defaulting
+ * to 8192), model-aware between the legacy and newer field name. This
+ * module now wires in `./token-params.js#buildOpenAIChatTokenParam` — that
+ * module already existed, itself a verbatim port of OD's real
+ * `apps/daemon/src/integrations/openai-chat-token-params.ts`, but was never
+ * actually called from here until this fix. `azure-chat.ts` reuses the same
+ * module's `buildLegacyMaxTokensParam` (always the legacy `max_tokens`
+ * field, not model-aware) — matching OD's own azure handler, which never
+ * uses the model-aware picker (Azure deployment names are caller-defined
+ * strings, not necessarily matching OpenAI's own model-naming scheme).
+ */
+import { createRoleMarkerGuard } from '../role-marker-guard.js';
+import { redactSecrets, validateBaseUrl } from './connection-guard.js';
+import { decodeSseStream } from './sse-decode.js';
+import { buildOpenAIChatTokenParam } from './token-params.js';
+import { createTurnEndGuard } from './turn-end-guard.js';
+const DEFAULT_OPENAI_BASE_URL = 'https://api.openai.com';
+const DEFAULT_MAX_TOOL_TURNS = 8;
+const DONE_SENTINEL = '[DONE]';
+/** Matches OD's own default (`apps/daemon/src/routes/chat.ts`'s openai/azure handlers both fall back to this when the caller doesn't supply one) — a real, explicit bound is always sent, never an unbounded request. */
+export const DEFAULT_OPENAI_MAX_TOKENS = 8192;
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function openAiRequestUrl(baseUrl) {
+    const base = (baseUrl ?? DEFAULT_OPENAI_BASE_URL).replace(/\/+$/, '');
+    return /\/v\d+(\/|$)/.test(base) ? `${base}/chat/completions` : `${base}/v1/chat/completions`;
+}
+function openAiHeaders(options) {
+    return {
+        'content-type': 'application/json',
+        authorization: `Bearer ${options.apiKey}`,
+        ...(options.extraHeaders ?? {}),
+    };
+}
+function openAiRequestBody(options, messages) {
+    const effectiveMaxTokens = typeof options.maxTokens === 'number' && options.maxTokens > 0 ? options.maxTokens : DEFAULT_OPENAI_MAX_TOKENS;
+    return {
+        model: options.model,
+        stream: true,
+        stream_options: { include_usage: true },
+        messages,
+        ...buildOpenAIChatTokenParam(options.model, effectiveMaxTokens),
+        ...(options.temperature !== undefined ? { temperature: options.temperature } : {}),
+        ...(options.tools && options.tools.length > 0 ? { tools: options.tools } : {}),
+    };
+}
+function extractOpenAiErrorDetail(rawText) {
+    try {
+        const parsed = JSON.parse(rawText);
+        if (isRecord(parsed) && isRecord(parsed.error) && typeof parsed.error.message === 'string') {
+            return parsed.error.message;
+        }
+    }
+    catch {
+        // Non-JSON error body — fall through to the raw text below.
+    }
+    return rawText.trim().slice(0, 500);
+}
+/**
+ * Runs exactly one OpenAI-compatible (Chat Completions JSON wire format)
+ * streaming HTTP request and reduces its SSE events into a single outcome.
+ * Extracted so this ~150-line SSE-reduction loop has exactly one
+ * implementation shared by every OpenAI-compatible provider turn-runner in
+ * this package: `runOpenAiToolTurn` itself (below), plus
+ * `azure-chat.ts#runAzureToolTurn` and `ollama-chat.ts#runOllamaToolTurn` —
+ * both target byte-identical chat-completions JSON, differing only in URL
+ * and auth. Callers own their own base-URL SSRF validation
+ * (`validateBaseUrl`) and URL/header/body construction *before* calling
+ * this function — it only knows how to run *a* request against whatever
+ * URL/headers/body it is handed, and has no opinion on any provider's
+ * defaults. Mirrors `anthropic-messages.ts#runSingleAnthropicRequest`'s
+ * `emitEnd` contract — see that function's doc.
+ */
+export async function runOpenAiCompatibleRequest(init) {
+    const { onEvent, emitEnd, hasEnded } = init;
+    let response;
+    try {
+        response = (await fetch(init.url, {
+            method: 'POST',
+            headers: init.headers,
+            body: JSON.stringify(init.body),
+            ...(init.signal ? { signal: init.signal } : {}),
+        }));
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        onEvent({ type: 'error', message: redactSecrets(message, init.redactSecretsList) });
+        emitEnd('error');
+        return { finishReason: null, toolCalls: [], text: '' };
+    }
+    if (!response.ok) {
+        const rawText = await response.text();
+        if (init.retryableBody) {
+            const retryBody = init.retryableBody(response.status, rawText);
+            if (retryBody) {
+                const { retryableBody: _retryableBody, ...retryInit } = init;
+                return runOpenAiCompatibleRequest({ ...retryInit, body: retryBody });
+            }
+        }
+        onEvent({
+            type: 'error',
+            message: redactSecrets(extractOpenAiErrorDetail(rawText), init.redactSecretsList),
+            code: String(response.status),
+        });
+        emitEnd('error');
+        return { finishReason: null, toolCalls: [], text: '' };
+    }
+    if (!response.body) {
+        onEvent({ type: 'error', message: `${init.providerLabel} response had no body` });
+        emitEnd('error');
+        return { finishReason: null, toolCalls: [], text: '' };
+    }
+    onEvent({ type: 'status', label: 'requesting' });
+    const guard = createRoleMarkerGuard(init.guardMessageId);
+    const toolCalls = new Map();
+    let fullText = '';
+    let finishReason = null;
+    let usage = null;
+    for await (const frame of decodeSseStream(response.body)) {
+        // No `hasEnded()` re-check at the top of this loop: the only in-loop call to `emitEnd`
+        // (contamination, below) is immediately followed by `break`, and every other call site is a
+        // pre-loop early `return` — traced across all five call sites in this function, same proof as
+        // `anthropic-messages.ts#runSingleAnthropicRequest`. `hasEnded()` is still consulted once,
+        // after this loop, to decide whether pending tool_use events should still be emitted (a
+        // contaminating delta can arrive on a *later* chunk than the one that set `finish_reason`).
+        if (frame.data === DONE_SENTINEL)
+            break;
+        let data;
+        try {
+            data = JSON.parse(frame.data);
+        }
+        catch {
+            continue; // tolerate a malformed/empty keep-alive frame
+        }
+        if (!isRecord(data))
+            continue;
+        if (isRecord(data.usage)) {
+            usage = data.usage;
+            onEvent({ type: 'usage', usage });
+        }
+        const choices = Array.isArray(data.choices) ? data.choices : [];
+        const choice = choices[0];
+        if (!isRecord(choice))
+            continue;
+        if (typeof choice.finish_reason === 'string') {
+            finishReason = choice.finish_reason;
+        }
+        const delta = isRecord(choice.delta) ? choice.delta : null;
+        if (!delta)
+            continue;
+        if (typeof delta.content === 'string' && delta.content.length > 0) {
+            // No `guard.contaminated` pre-check here: the only way it becomes true is the
+            // `emitEnd('contaminated'); break;` a few lines below, which exits this loop immediately —
+            // see `anthropic-messages.ts#runSingleAnthropicRequest`'s identical reachability proof.
+            const safe = guard.feedText(delta.content);
+            if (safe.length > 0) {
+                fullText += safe;
+                onEvent({ type: 'text_delta', delta: safe });
+            }
+            if (guard.contaminated) {
+                const warn = guard.warningEvent();
+                if (warn)
+                    onEvent(warn);
+                emitEnd('contaminated');
+                break;
+            }
+        }
+        if (Array.isArray(delta.tool_calls)) {
+            for (const rawCall of delta.tool_calls) {
+                if (!isRecord(rawCall) || typeof rawCall.index !== 'number')
+                    continue;
+                let pending = toolCalls.get(rawCall.index);
+                if (!pending) {
+                    const id = typeof rawCall.id === 'string' ? rawCall.id : `call_${rawCall.index}`;
+                    const fn = isRecord(rawCall.function) ? rawCall.function : {};
+                    const name = typeof fn.name === 'string' ? fn.name : '';
+                    pending = { id, name, argsJson: '' };
+                    toolCalls.set(rawCall.index, pending);
+                }
+                const fn = isRecord(rawCall.function) ? rawCall.function : null;
+                if (fn && typeof fn.arguments === 'string') {
+                    pending.argsJson += fn.arguments;
+                }
+            }
+        }
+    }
+    const resolvedToolCalls = Array.from(toolCalls.values()).map((call) => {
+        let input = {};
+        if (call.argsJson.trim()) {
+            try {
+                input = JSON.parse(call.argsJson);
+            }
+            catch {
+                input = {};
+            }
+        }
+        return { id: call.id, name: call.name, input };
+    });
+    if (finishReason === 'tool_calls' && !hasEnded()) {
+        for (const call of resolvedToolCalls) {
+            onEvent({ type: 'tool_use', id: call.id, name: call.name, input: call.input });
+        }
+    }
+    return { finishReason, toolCalls: resolvedToolCalls, text: fullText };
+}
+/** Validates `options.baseUrl`, then delegates to {@link runOpenAiCompatibleRequest} with OpenAI's own URL/header/body builders. Thin wrapper kept so `runOpenAiToolTurn`'s per-iteration call site stays unchanged by the extraction. */
+async function runSingleOpenAiRequest(options, messages, emitEnd, hasEnded) {
+    const baseUrlCheck = validateBaseUrl(options.baseUrl ?? DEFAULT_OPENAI_BASE_URL);
+    if (baseUrlCheck.error) {
+        options.onEvent({ type: 'error', message: baseUrlCheck.error });
+        emitEnd('error');
+        return { finishReason: null, toolCalls: [], text: '' };
+    }
+    return runOpenAiCompatibleRequest({
+        url: openAiRequestUrl(options.baseUrl),
+        headers: openAiHeaders(options),
+        body: openAiRequestBody(options, messages),
+        ...(options.signal ? { signal: options.signal } : {}),
+        redactSecretsList: [options.apiKey],
+        guardMessageId: 'openai-turn',
+        providerLabel: 'OpenAI',
+        onEvent: options.onEvent,
+        emitEnd,
+        hasEnded,
+    });
+}
+/**
+ * Runs a full OpenAI Chat Completions turn, including the tool-execution
+ * loop when `options.executeTool` is supplied and the model requests a
+ * function call. See `anthropic-messages.ts#runAnthropicToolTurn`'s doc for
+ * the shared event-stream/`ended`-flag contract this mirrors exactly.
+ */
+export async function runOpenAiToolTurn(options) {
+    const maxToolTurns = options.maxToolTurns ?? DEFAULT_MAX_TOOL_TURNS;
+    const endGuard = createTurnEndGuard(options.onEvent, (reason) => ({ type: 'end', reason }));
+    const emitEnd = endGuard.emitEnd;
+    let messages = options.messages.slice();
+    let toolTurns = 0;
+    let lastFinishReason = null;
+    while (true) {
+        const outcome = await runSingleOpenAiRequest(options, messages, emitEnd, endGuard.hasEnded);
+        lastFinishReason = outcome.finishReason;
+        if (endGuard.hasEnded())
+            break;
+        if (outcome.finishReason !== 'tool_calls' || outcome.toolCalls.length === 0) {
+            emitEnd('stop');
+            break;
+        }
+        if (!options.executeTool) {
+            emitEnd('stop');
+            break;
+        }
+        if (toolTurns >= maxToolTurns) {
+            emitEnd('max_tool_turns');
+            break;
+        }
+        toolTurns += 1;
+        const assistantToolCalls = outcome.toolCalls.map((call) => ({
+            id: call.id,
+            type: 'function',
+            function: { name: call.name, arguments: JSON.stringify(call.input) },
+        }));
+        const toolResultMessages = [];
+        for (const call of outcome.toolCalls) {
+            const result = await options.executeTool(call);
+            options.onEvent({ type: 'tool_result', toolUseId: call.id, content: result.content, isError: false });
+            toolResultMessages.push({ role: 'tool', content: result.content, tool_call_id: call.id });
+        }
+        messages = [
+            ...messages,
+            { role: 'assistant', content: outcome.text || null, tool_calls: assistantToolCalls },
+            ...toolResultMessages,
+        ];
+    }
+    return { finishReason: lastFinishReason, toolTurns };
+}
+//# sourceMappingURL=openai-chat.js.map

package/dist/providers/openai-chat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-chat.js","sourceRoot":"","sources":["../../src/providers/openai-chat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAsB,MAAM,qBAAqB,CAAC;AA0E7E,MAAM,uBAAuB,GAAG,wBAAwB,CAAC;AACzD,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACjC,MAAM,aAAa,GAAG,QAAQ,CAAC;AAC/B,yNAAyN;AACzN,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAE9C,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,gBAAgB,CAAC,OAA2B;IACnD,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,uBAAuB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtE,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAC,CAAC,GAAG,IAAI,sBAAsB,CAAC;AAChG,CAAC;AAED,SAAS,aAAa,CAAC,OAA0B;IAC/C,OAAO;QACL,cAAc,EAAE,kBAAkB;QAClC,aAAa,EAAE,UAAU,OAAO,CAAC,MAAM,EAAE;QACzC,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,OAA0B,EAAE,QAAuC;IAC5F,MAAM,kBAAkB,GAAG,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,yBAAyB,CAAC;IAC1I,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,IAAI;QACZ,cAAc,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE;QACvC,QAAQ;QACR,GAAG,yBAAyB,CAAC,OAAO,CAAC,KAAK,EAAE,kBAAkB,CAAC;QAC/D,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/E,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAe;IAC/C,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC3F,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QAC9B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACtC,CAAC;AA2CD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAAiC;IAChF,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAE5C,IAAI,QAAmH,CAAC;IACxH,IAAI,CAAC;QACH,QAAQ,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;YAC/B,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC,CAA+B,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QACpF,OAAO,CAAC,OAAO,CAAC,CAAC;QACjB,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACzD,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC/D,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,GAAG,SAAS,EAAE,GAAG,IAAI,CAAC;gBAC7D,OAAO,0BAA0B,CAAC,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QACD,OAAO,CAAC;YACN,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,aAAa,CAAC,wBAAwB,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,iBAAiB,CAAC;YACjF,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;SAC9B,CAAC,CAAC;QACH,OAAO,CAAC,OAAO,CAAC,CAAC;QACjB,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnB,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,aAAa,uBAAuB,EAAE,CAAC,CAAC;QAClF,OAAO,CAAC,OAAO,CAAC,CAAC;QACjB,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACzD,CAAC;IAED,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IAEjD,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,IAAI,GAAG,EAA2B,CAAC;IACrD,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,KAAK,GAAmC,IAAI,CAAC;IAEjD,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,uFAAuF;QACvF,4FAA4F;QAC5F,8FAA8F;QAC9F,2FAA2F;QAC3F,wFAAwF;QACxF,4FAA4F;QAC5F,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;YAAE,MAAM;QAExC,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,8CAA8C;QAC1D,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,SAAS;QAE9B,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACnB,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACpC,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,SAAS;QAEhC,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;YAC7C,YAAY,GAAG,MAAM,CAAC,aAAa,CAAC;QACtC,CAAC;QAED,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3D,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClE,8EAA8E;YAC9E,2FAA2F;YAC3F,wFAAwF;YACxF,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,QAAQ,IAAI,IAAI,CAAC;gBACjB,OAAO,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/C,CAAC;YACD,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;gBACvB,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;gBAClC,IAAI,IAAI;oBAAE,OAAO,CAAC,IAAI,CAAC,CAAC;gBACxB,OAAO,CAAC,cAAc,CAAC,CAAC;gBACxB,MAAM;YACR,CAAC;QACH,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACvC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;oBAAE,SAAS;gBACtE,IAAI,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,EAAE,GAAG,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,OAAO,CAAC,KAAK,EAAE,CAAC;oBACjF,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9D,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;oBACxD,OAAO,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;oBACrC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBACxC,CAAC;gBACD,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;gBAChE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;oBAC3C,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,SAAS,CAAC;gBACnC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,iBAAiB,GAAqB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACtF,IAAI,KAAK,GAAY,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,GAAG,EAAE,CAAC;YACb,CAAC;QACH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAI,YAAY,KAAK,YAAY,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;QACjD,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;YACrC,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,iBAAiB,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACxE,CAAC;AAED,0OAA0O;AAC1O,KAAK,UAAU,sBAAsB,CACnC,OAA0B,EAC1B,QAAuC,EACvC,OAA8C,EAC9C,QAAuB;IAEvB,MAAM,YAAY,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,IAAI,uBAAuB,CAAC,CAAC;IACjF,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;QACvB,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC;QAChE,OAAO,CAAC,OAAO,CAAC,CAAC;QACjB,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACzD,CAAC;IAED,OAAO,0BAA0B,CAAC;QAChC,GAAG,EAAE,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC;QACtC,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC;QAC/B,IAAI,EAAE,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC;QAC1C,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,iBAAiB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;QACnC,cAAc,EAAE,aAAa;QAC7B,aAAa,EAAE,QAAQ;QACvB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO;QACP,QAAQ;KACT,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAA0B;IAChE,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC;IAEpE,MAAM,QAAQ,GAAG,kBAAkB,CAAkB,OAAO,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC7G,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IAEjC,IAAI,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,gBAAgB,GAAkB,IAAI,CAAC;IAE3C,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC5F,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC;QAExC,IAAI,QAAQ,CAAC,QAAQ,EAAE;YAAE,MAAM;QAE/B,IAAI,OAAO,CAAC,YAAY,KAAK,YAAY,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5E,OAAO,CAAC,MAAM,CAAC,CAAC;YAChB,MAAM;QACR,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACzB,OAAO,CAAC,MAAM,CAAC,CAAC;YAChB,MAAM;QACR,CAAC;QACD,IAAI,SAAS,IAAI,YAAY,EAAE,CAAC;YAC9B,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAC1B,MAAM;QACR,CAAC;QACD,SAAS,IAAI,CAAC,CAAC;QAEf,MAAM,kBAAkB,GAA0B,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACjF,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;SACrE,CAAC,CAAC,CAAC;QACJ,MAAM,kBAAkB,GAAyB,EAAE,CAAC;QACpD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC/C,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACtG,kBAAkB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5F,CAAC;QAED,QAAQ,GAAG;YACT,GAAG,QAAQ;YACX,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,UAAU,EAAE,kBAAkB,EAAE;YACpF,GAAG,kBAAkB;SACtB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC;AACvD,CAAC"}

package/dist/providers/pkce.d.ts

@@ -0,0 +1,81 @@
+/** RFC 8414 / OIDC discovery document fields a PKCE client needs. */
+export interface AuthorizationServerMetadata {
+    issuer: string;
+    authorization_endpoint: string;
+    token_endpoint: string;
+}
+/** RFC 6749 §5.1 token endpoint response (subset). */
+export interface OAuthTokenResponse {
+    access_token: string;
+    token_type?: string;
+    expires_in?: number;
+    refresh_token?: string;
+    scope?: string;
+}
+/** In-flight authorization request, stashed in memory while the user approves in their browser. */
+export interface PendingAuthState {
+    serverId: string;
+    authServerIssuer: string;
+    tokenEndpoint: string;
+    clientId: string;
+    clientSecret?: string;
+    redirectUri: string;
+    codeVerifier: string;
+    scope?: string;
+    resource?: string;
+    createdAt: number;
+}
+export declare function generateCodeVerifier(): string;
+export declare function deriveCodeChallenge(verifier: string): string;
+export declare function generateState(): string;
+export interface AuthorizeUrlInput {
+    authServer: AuthorizationServerMetadata;
+    clientId: string;
+    redirectUri: string;
+    state: string;
+    codeChallenge: string;
+    scope?: string;
+    resource?: string;
+}
+export declare function buildAuthorizeUrl(input: AuthorizeUrlInput): string;
+export interface ExchangeCodeInput {
+    tokenEndpoint: string;
+    clientId: string;
+    clientSecret?: string;
+    redirectUri: string;
+    code: string;
+    codeVerifier: string;
+    resource?: string;
+}
+export declare function exchangeCodeForToken(input: ExchangeCodeInput, fetchImpl?: typeof fetch): Promise<OAuthTokenResponse>;
+export interface RefreshTokenInput {
+    tokenEndpoint: string;
+    clientId: string;
+    clientSecret?: string;
+    refreshToken: string;
+    scope?: string;
+    resource?: string;
+}
+export declare function refreshAccessToken(input: RefreshTokenInput, fetchImpl?: typeof fetch): Promise<OAuthTokenResponse>;
+/**
+ * In-memory pending-authorization cache keyed by the OAuth `state`
+ * parameter. Bridges the "begin" (mint state + verifier) and "complete"
+ * (browser returns code + state) halves of the dance; persistence isn't
+ * needed because the caller completes auth in the same process, and state
+ * is single-use.
+ */
+export declare class PendingAuthCache {
+    private readonly ttlMs;
+    private store;
+    private timer;
+    constructor(ttlMs?: number);
+    put(state: string, value: PendingAuthState): void;
+    /** One-shot consume — any successful callback removes the state so a replay can't reuse it. */
+    consume(state: string): PendingAuthState | null;
+    size(): number;
+    /** Stops the background sweeper. Production lets the timer ride on the host process lifetime. */
+    stop(): void;
+    private startSweeper;
+    private sweep;
+}
+//# sourceMappingURL=pkce.d.ts.map

package/dist/providers/pkce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.d.ts","sourceRoot":"","sources":["../../src/providers/pkce.ts"],"names":[],"mappings":"AA0BA,qEAAqE;AACrE,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,sBAAsB,EAAE,MAAM,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,sDAAsD;AACtD,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,mGAAmG;AACnG,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAYD,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,2BAA2B,CAAC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CAclE;AAED,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,iBAAiB,EACxB,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,kBAAkB,CAAC,CAS7B;AAED,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,iBAAiB,EACxB,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,kBAAkB,CAAC,CAQ7B;AA6CD;;;;;;GAMG;AACH,qBAAa,gBAAgB;IAIf,OAAO,CAAC,QAAQ,CAAC,KAAK;IAHlC,OAAO,CAAC,KAAK,CAAuC;IACpD,OAAO,CAAC,KAAK,CAA+C;gBAE/B,KAAK,GAAE,MAAuB;IAE3D,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,GAAG,IAAI;IAKjD,+FAA+F;IAC/F,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI;IAQ/C,IAAI,IAAI,MAAM;IAId,iGAAiG;IACjG,IAAI,IAAI,IAAI;IAOZ,OAAO,CAAC,YAAY;IASpB,OAAO,CAAC,KAAK;CAUd"}

package/dist/providers/pkce.js

@@ -0,0 +1,176 @@
+/**
+ * @module providers/pkce
+ *
+ * Generic OAuth 2.0 Authorization Code + PKCE (RFC 7636) client primitives —
+ * verifier/challenge/state generation, authorize-URL building, and the
+ * code-exchange/refresh token-endpoint calls.
+ *
+ * Vendored from the minimal subset of OD's `apps/daemon/src/mcp-oauth.ts`
+ * (a 601-line "daemon-side OAuth 2.1 client for HTTP/SSE MCP servers") that
+ * `integrations/xai-oauth.ts` actually depends on: PKCE generation,
+ * `buildAuthorizeUrl`, `exchangeCodeForToken`, `refreshAccessToken`, and the
+ * in-memory `PendingAuthCache`. The origin file's protected-resource /
+ * authorization-server RFC 9728+8414 *discovery* and Dynamic Client
+ * Registration (RFC 7591) machinery — `discoverProtectedResource`,
+ * `discoverAuthServer`, `registerClient`, `getOrRegisterClient`, `beginAuth`
+ * — is a distinct, separately-scoped MCP-server-OAuth-discovery subsystem
+ * that `xai-oauth.ts` never calls (xAI's OAuth server is hardcoded, no MCP
+ * discovery involved) and is not part of this task's 13-file scope; not
+ * ported, mirroring the same reasoning `@jini-ai/agent-runtime`'s
+ * `acp-model-probe.ts` used to exclude the ACP transport (a distinct
+ * subsystem named as its own future extraction target). No product-identity
+ * strings in the vendored subset — ported verbatim apart from doc-comment
+ * wording.
+ */
+import { createHash, randomBytes } from 'node:crypto';
+const VERIFIER_LEN = 64; // RFC 7636 §4.1: 43-128 chars
+function base64url(buf) {
+    return buf
+        .toString('base64')
+        .replace(/\+/g, '-')
+        .replace(/\//g, '_')
+        .replace(/=+$/g, '');
+}
+export function generateCodeVerifier() {
+    return base64url(randomBytes(VERIFIER_LEN));
+}
+export function deriveCodeChallenge(verifier) {
+    return base64url(createHash('sha256').update(verifier).digest());
+}
+export function generateState() {
+    return base64url(randomBytes(32));
+}
+export function buildAuthorizeUrl(input) {
+    const u = new URL(input.authServer.authorization_endpoint);
+    u.searchParams.set('response_type', 'code');
+    u.searchParams.set('client_id', input.clientId);
+    u.searchParams.set('redirect_uri', input.redirectUri);
+    u.searchParams.set('state', input.state);
+    u.searchParams.set('code_challenge', input.codeChallenge);
+    u.searchParams.set('code_challenge_method', 'S256');
+    if (input.scope)
+        u.searchParams.set('scope', input.scope);
+    // RFC 8707 resource indicator — narrows the issued token to the resource
+    // actually being requested. Most authoritative servers require it;
+    // harmless when ignored.
+    if (input.resource)
+        u.searchParams.set('resource', input.resource);
+    return u.toString();
+}
+export async function exchangeCodeForToken(input, fetchImpl = fetch) {
+    const form = new URLSearchParams();
+    form.set('grant_type', 'authorization_code');
+    form.set('code', input.code);
+    form.set('redirect_uri', input.redirectUri);
+    form.set('client_id', input.clientId);
+    form.set('code_verifier', input.codeVerifier);
+    if (input.resource)
+        form.set('resource', input.resource);
+    return tokenRequest(input.tokenEndpoint, form, input.clientSecret, fetchImpl);
+}
+export async function refreshAccessToken(input, fetchImpl = fetch) {
+    const form = new URLSearchParams();
+    form.set('grant_type', 'refresh_token');
+    form.set('refresh_token', input.refreshToken);
+    form.set('client_id', input.clientId);
+    if (input.scope)
+        form.set('scope', input.scope);
+    if (input.resource)
+        form.set('resource', input.resource);
+    return tokenRequest(input.tokenEndpoint, form, input.clientSecret, fetchImpl);
+}
+async function tokenRequest(tokenEndpoint, form, clientSecret, fetchImpl) {
+    const headers = {
+        'content-type': 'application/x-www-form-urlencoded',
+        accept: 'application/json',
+    };
+    if (clientSecret) {
+        // RFC 6749 §2.3.1 — confidential clients use HTTP Basic with the
+        // client_id already in the form. Public clients (PKCE-only) skip this.
+        const basic = Buffer.from(`${form.get('client_id')}:${clientSecret}`).toString('base64');
+        headers['authorization'] = `Basic ${basic}`;
+    }
+    const res = await fetchImpl(tokenEndpoint, {
+        method: 'POST',
+        headers,
+        body: form.toString(),
+    });
+    if (!res.ok) {
+        const txt = await safeText(res);
+        throw new Error(`token endpoint rejected request: HTTP ${res.status} ${res.statusText} ${txt}`);
+    }
+    const json = (await res.json());
+    if (!json.access_token) {
+        throw new Error('token endpoint response missing access_token');
+    }
+    return json;
+}
+async function safeText(res) {
+    try {
+        const t = await res.text();
+        return t.slice(0, 500);
+    }
+    catch {
+        return '';
+    }
+}
+/**
+ * In-memory pending-authorization cache keyed by the OAuth `state`
+ * parameter. Bridges the "begin" (mint state + verifier) and "complete"
+ * (browser returns code + state) halves of the dance; persistence isn't
+ * needed because the caller completes auth in the same process, and state
+ * is single-use.
+ */
+export class PendingAuthCache {
+    ttlMs;
+    store = new Map();
+    timer = null;
+    constructor(ttlMs = 10 * 60 * 1000) {
+        this.ttlMs = ttlMs;
+    }
+    put(state, value) {
+        this.store.set(state, value);
+        this.startSweeper();
+    }
+    /** One-shot consume — any successful callback removes the state so a replay can't reuse it. */
+    consume(state) {
+        const v = this.store.get(state);
+        if (!v)
+            return null;
+        this.store.delete(state);
+        if (Date.now() - v.createdAt > this.ttlMs)
+            return null;
+        return v;
+    }
+    size() {
+        return this.store.size;
+    }
+    /** Stops the background sweeper. Production lets the timer ride on the host process lifetime. */
+    stop() {
+        if (this.timer) {
+            clearInterval(this.timer);
+            this.timer = null;
+        }
+    }
+    startSweeper() {
+        if (this.timer)
+            return;
+        this.timer = setInterval(() => this.sweep(), Math.min(this.ttlMs, 60_000));
+        // unref so the cache doesn't keep the event loop alive in tests.
+        if (typeof this.timer === 'object' && this.timer && typeof this.timer.unref === 'function') {
+            this.timer.unref();
+        }
+    }
+    sweep() {
+        const now = Date.now();
+        for (const [k, v] of this.store) {
+            if (now - v.createdAt > this.ttlMs)
+                this.store.delete(k);
+        }
+        if (this.store.size === 0 && this.timer) {
+            clearInterval(this.timer);
+            this.timer = null;
+        }
+    }
+}
+//# sourceMappingURL=pkce.js.map

package/dist/providers/pkce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.js","sourceRoot":"","sources":["../../src/providers/pkce.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAgCtD,MAAM,YAAY,GAAG,EAAE,CAAC,CAAC,8BAA8B;AAEvD,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG;SACP,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,SAAS,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,OAAO,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;AACpC,CAAC;AAYD,MAAM,UAAU,iBAAiB,CAAC,KAAwB;IACxD,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;IAC3D,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IACtD,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAC1D,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;IACpD,IAAI,KAAK,CAAC,KAAK;QAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1D,yEAAyE;IACzE,mEAAmE;IACnE,yBAAyB;IACzB,IAAI,KAAK,CAAC,QAAQ;QAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAwB,EACxB,YAA0B,KAAK;IAE/B,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;IAC7C,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAC5C,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,QAAQ;QAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzD,OAAO,YAAY,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;AAChF,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAwB,EACxB,YAA0B,KAAK;IAE/B,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IACxC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,KAAK;QAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,QAAQ;QAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzD,OAAO,YAAY,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;AAChF,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,aAAqB,EACrB,IAAqB,EACrB,YAAgC,EAChC,SAAuB;IAEvB,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,mCAAmC;QACnD,MAAM,EAAE,kBAAkB;KAC3B,CAAC;IACF,IAAI,YAAY,EAAE,CAAC;QACjB,iEAAiE;QACjE,uEAAuE;QACvE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzF,OAAO,CAAC,eAAe,CAAC,GAAG,SAAS,KAAK,EAAE,CAAC;IAC9C,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,aAAa,EAAE;QACzC,MAAM,EAAE,MAAM;QACd,OAAO;QACP,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;KACtB,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,yCAAyC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,EAAE,CAC/E,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAuB,CAAC;IACtD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAa;IACnC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,gBAAgB;IAIE;IAHrB,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC5C,KAAK,GAA0C,IAAI,CAAC;IAE5D,YAA6B,QAAgB,EAAE,GAAG,EAAE,GAAG,IAAI;QAA9B,UAAK,GAAL,KAAK,CAAyB;IAAG,CAAC;IAE/D,GAAG,CAAC,KAAa,EAAE,KAAuB;QACxC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAED,+FAA+F;IAC/F,OAAO,CAAC,KAAa;QACnB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACvD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IAED,iGAAiG;IACjG,IAAI;QACF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAEO,YAAY;QAClB,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3E,iEAAiE;QACjE,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,IAAI,OAAQ,IAAI,CAAC,KAAgC,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YACtH,IAAI,CAAC,KAA+B,CAAC,KAAK,EAAE,CAAC;QAChD,CAAC;IACH,CAAC;IAEO,KAAK;QACX,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,GAAG,GAAG,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACxC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;CACF"}

package/dist/providers/sse-decode.d.ts

@@ -0,0 +1,47 @@
+/**
+ * @module providers/sse-decode
+ *
+ * Minimal, tolerant Server-Sent-Events *frame decoder* for an INBOUND
+ * provider stream — the response body a call to the Anthropic Messages API
+ * or the OpenAI Chat Completions API sends back when `stream: true` is
+ * requested. This is deliberately not `@jini-ai/http`'s `sse.ts`: that module
+ * is the OUTBOUND channel a route uses to push events to a browser client
+ * (bounded queue, backpressure, `Last-Event-ID` replay). This module has
+ * none of that — it only turns a raw byte/text stream into `{event, data}`
+ * frames per the SSE wire format (`text/event-stream`, RFC-ish: fields
+ * separated by `\n`, records separated by a blank line), so a provider-
+ * specific turn-runner (`anthropic-messages.ts`, `openai-chat.ts`) can
+ * `JSON.parse` each frame's `data` field without re-deriving line/record
+ * framing itself.
+ *
+ * New file, not a port — chat.ts's origin used the Node `fetch` global's
+ * response body directly with ad hoc inline buffering per call site; this
+ * factors that concern into one shared, independently-tested primitive so
+ * both provider turn-runners consume the same framing logic (the same
+ * "shared mechanism, one implementation" discipline `@jini-ai/http`'s
+ * `sse.ts`/`origin-validation.ts` already apply to their own domains).
+ */
+/** One decoded SSE record. `event` is `null` when the record had no `event:` line (OpenAI's Chat Completions stream never sends one; every `data:` line is implicitly a plain message). `data` is the joined value of every `data:` line in the record (multi-line `data:` fields are joined with `\n`, per the SSE spec). */
+export interface DecodedSseEvent {
+    readonly event: string | null;
+    readonly data: string;
+}
+/**
+ * Decodes an inbound byte/text stream into SSE records. Accepts either
+ * `Uint8Array` chunks (a real `fetch` response body) or `string` chunks (test
+ * fixtures, or any caller that already has decoded text) in the same
+ * iterable — this keeps unit tests free of any need to construct a real web
+ * `ReadableStream`, matching this package's existing `fetch`-mocking
+ * convention (`vi.stubGlobal('fetch', ...)`, see `model-catalog.test.ts`).
+ *
+ * Tolerant per the SSE spec: accepts both `\n` and `\r\n` line endings,
+ * ignores comment lines (leading `:`) and unrecognized field names (`id`/
+ * `retry` are parsed by real SSE clients for reconnect bookkeeping, which is
+ * meaningless for a single proxied request/response pair, so this decoder
+ * intentionally drops them), and flushes a trailing unterminated record —
+ * even one whose very last line has no trailing `\n` at all — once the
+ * source iterable ends, so a provider closing the connection immediately
+ * after its last byte never silently loses that last record.
+ */
+export declare function decodeSseStream(source: AsyncIterable<Uint8Array | string>): AsyncGenerator<DecodedSseEvent>;
+//# sourceMappingURL=sse-decode.d.ts.map

package/dist/providers/sse-decode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse-decode.d.ts","sourceRoot":"","sources":["../../src/providers/sse-decode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,8TAA8T;AAC9T,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAuB,eAAe,CACpC,MAAM,EAAE,aAAa,CAAC,UAAU,GAAG,MAAM,CAAC,GACzC,cAAc,CAAC,eAAe,CAAC,CAkEjC"}