@jsonstudio/rcc 0.89.1968 → 0.89.2202

package/dist/providers/auth/apikey-auth.d.ts

@@ -5,6 +5,7 @@
  */
 import type { IAuthProvider, AuthStatus } from './auth-interface.js';
 import type { ApiKeyAuth } from '../core/api/provider-config.js';
+import type { ApiKeyEntry, ApiKeyAuthConfig } from '../profile/provider-profile.js';
 /**
  * API Key认证提供者
  *
@@ -15,7 +16,8 @@ export declare class ApiKeyAuthProvider implements IAuthProvider {
     private config;
     private status;
     private isInitialized;
-    constructor(config: ApiKeyAuth);
+    private rotator;
+    constructor(config: ApiKeyAuth, rotator?: ApiKeyRotator);
     /**
      * 初始化认证
      */
@@ -52,4 +54,58 @@ export declare class ApiKeyAuthProvider implements IAuthProvider {
         prefix: string;
         hasCustomHeader: boolean;
     };
+    /**
+     * 轮询到下一个 API Key
+     * 仅在多 key 模式下有效
+     */
+    rotateKey(): boolean;
+    /**
+     * 获取轮询器（用于高级控制）
+     */
+    getRotator(): ApiKeyRotator | null;
 }
+/**
+ * 多 API Key 轮询器
+ * 支持在多个 API Key 之间轮询选择
+ */
+export declare class ApiKeyRotator {
+    private entries;
+    private currentIndex;
+    constructor(entries: ApiKeyEntry[]);
+    /**
+     * 添加条目
+     */
+    addEntry(entry: ApiKeyEntry): void;
+    /**
+     * 获取当前 API Key（已解析环境变量）
+     */
+    getCurrentKey(): string | undefined;
+    /**
+     * 轮询切换到下一个 API Key
+     */
+    rotate(): string | undefined;
+    /**
+     * 选择指定别名的 API Key
+     */
+    selectByAlias(alias: string): string | undefined;
+    /**
+     * 获取当前条目信息
+     */
+    getCurrentEntry(): ApiKeyEntry | undefined;
+    /**
+     * 获取条目数量
+     */
+    getEntryCount(): number;
+    /**
+     * 解析条目中的 API Key（支持环境变量）
+     */
+    private resolveEntry;
+    /**
+     * 展开环境变量 ${VAR} 格式
+     */
+    private expandEnvVars;
+}
+/**
+ * 从 ApiKeyAuthConfig 创建 ApiKeyRotator
+ */
+export declare function createApiKeyRotator(config: ApiKeyAuthConfig): ApiKeyRotator | null;

package/dist/providers/auth/apikey-auth.js

@@ -13,8 +13,10 @@ export class ApiKeyAuthProvider {
     config;
     status;
     isInitialized = false;
-    constructor(config) {
+    rotator = null;
+    constructor(config, rotator) {
         this.config = config;
+        this.rotator = rotator ?? null;
         this.status = {
             isAuthenticated: false,
             isValid: false,
@@ -27,6 +29,11 @@ export class ApiKeyAuthProvider {
      */
     async initialize() {
         try {
+            // 多 key 模式：初始化时先取当前 key
+            if (this.rotator) {
+                const currentKey = this.rotator.getCurrentKey();
+                this.config.apiKey = currentKey ?? '';
+            }
             // Local no-auth: allow empty API key (e.g., LM Studio / localhost endpoints).
             if (typeof this.config.apiKey !== 'string') {
                 throw new Error('Invalid API key: must be a string');
@@ -139,5 +146,128 @@ export class ApiKeyAuthProvider {
             hasCustomHeader: !!this.config.headerName && this.config.headerName !== 'Authorization'
         };
     }
+    /**
+     * 轮询到下一个 API Key
+     * 仅在多 key 模式下有效
+     */
+    rotateKey() {
+        if (!this.rotator) {
+            return false;
+        }
+        const nextKey = this.rotator.rotate();
+        if (nextKey) {
+            this.config.apiKey = nextKey;
+            return true;
+        }
+        return false;
+    }
+    /**
+     * 获取轮询器（用于高级控制）
+     */
+    getRotator() {
+        return this.rotator;
+    }
+}
+/**
+ * 多 API Key 轮询器
+ * 支持在多个 API Key 之间轮询选择
+ */
+export class ApiKeyRotator {
+    entries = [];
+    currentIndex = 0;
+    constructor(entries) {
+        this.entries = entries;
+    }
+    /**
+     * 添加条目
+     */
+    addEntry(entry) {
+        this.entries.push(entry);
+    }
+    /**
+     * 获取当前 API Key（已解析环境变量）
+     */
+    getCurrentKey() {
+        const entry = this.entries[this.currentIndex];
+        if (!entry) {
+            return undefined;
+        }
+        return this.resolveEntry(entry);
+    }
+    /**
+     * 轮询切换到下一个 API Key
+     */
+    rotate() {
+        if (this.entries.length === 0) {
+            return undefined;
+        }
+        this.currentIndex = (this.currentIndex + 1) % this.entries.length;
+        return this.getCurrentKey();
+    }
+    /**
+     * 选择指定别名的 API Key
+     */
+    selectByAlias(alias) {
+        const index = this.entries.findIndex(e => e.alias === alias);
+        if (index < 0) {
+            return undefined;
+        }
+        this.currentIndex = index;
+        return this.getCurrentKey();
+    }
+    /**
+     * 获取当前条目信息
+     */
+    getCurrentEntry() {
+        return this.entries[this.currentIndex];
+    }
+    /**
+     * 获取条目数量
+     */
+    getEntryCount() {
+        return this.entries.length;
+    }
+    /**
+     * 解析条目中的 API Key（支持环境变量）
+     */
+    resolveEntry(entry) {
+        if (entry.apiKey) {
+            return this.expandEnvVars(entry.apiKey);
+        }
+        if (entry.env) {
+            return process.env[entry.env];
+        }
+        return undefined;
+    }
+    /**
+     * 展开环境变量 ${VAR} 格式
+     */
+    expandEnvVars(value) {
+        return value.replace(/\$\{([^}]+)\}/g, (_, name) => {
+            return process.env[name] ?? '';
+        });
+    }
+}
+/**
+ * 从 ApiKeyAuthConfig 创建 ApiKeyRotator
+ */
+export function createApiKeyRotator(config) {
+    const entries = [];
+    // 优先使用 entries 数组
+    if (config.entries && config.entries.length > 0) {
+        entries.push(...config.entries);
+    }
+    // 兼容单 key 模式
+    else if (config.apiKey || config.env) {
+        entries.push({
+            apiKey: config.apiKey,
+            env: config.env,
+            secretRef: config.secretRef,
+        });
+    }
+    if (entries.length === 0) {
+        return null;
+    }
+    return new ApiKeyRotator(entries);
 }
 //# sourceMappingURL=apikey-auth.js.map

package/dist/providers/auth/apikey-auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"apikey-auth.js","sourceRoot":"","sources":["../../../src/providers/auth/apikey-auth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH;;;;GAIG;AACH,MAAM,OAAO,kBAAkB;IACpB,IAAI,GAAG,QAAiB,CAAC;IAE1B,MAAM,CAAa;IACnB,MAAM,CAAa;IACnB,aAAa,GAAG,KAAK,CAAC;IAE9B,YAAY,MAAkB;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG;YACZ,eAAe,EAAE,KAAK;YACtB,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,CAAC;YAChB,KAAK,EAAE,SAAS;SACjB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,CAAC;YACH,8EAA8E;YAC9E,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC/B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;gBAC1B,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,iCAAiC,CAAC,CAAC;gBACjE,OAAO;YACT,CAAC;YAED,gBAAgB;YAChB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAChD,CAAC;YAED,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;YAC1B,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,gCAAgC,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAC9E,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;YAC9C,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,YAAY;QACV,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YAC/B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,OAAO,GAA2B,EAAE,CAAC;QAE3C,eAAe;QACf,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,eAAe,CAAC;QAE7D,IAAI,UAAU,CAAC,WAAW,EAAE,KAAK,eAAe,EAAE,CAAC;YACjD,yBAAyB;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC;YAC9C,OAAO,CAAC,UAAU,CAAC,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,cAAc;YACd,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAC3C,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB;QACvB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC/B,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,+BAA+B,CAAC,CAAC;gBAC/D,OAAO,IAAI,CAAC;YACd,CAAC;YACD,uBAAuB;YACvB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;YAEhD,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;YAC5F,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC;YAClF,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;YAC7C,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,cAAc;QACd,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;QACxB,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;QAC3B,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,qBAAqB,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,eAAwB,EAAE,OAAgB,EAAE,OAAgB;QAC/E,IAAI,CAAC,MAAM,GAAG;YACZ,eAAe;YACf,OAAO;YACP,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE;YACzB,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;SACrC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB;QACtB,yBAAyB;QACzB,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,aAAa;QAKX,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM;YACjC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ;YACtC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,eAAe;SACxF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"apikey-auth.js","sourceRoot":"","sources":["../../../src/providers/auth/apikey-auth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH;;;;GAIG;AACH,MAAM,OAAO,kBAAkB;IACrB,IAAI,GAAG,QAAiB,CAAC;IAE1B,MAAM,CAAa;IACnB,MAAM,CAAa;IACnB,aAAa,GAAG,KAAK,CAAC;IACrB,OAAO,GAAyB,IAAI,CAAC;IAE7C,YAAY,MAAkB,EAAE,OAAuB;QACrD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,IAAI,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG;YACZ,eAAe,EAAE,KAAK;YACtB,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,CAAC;YAChB,KAAK,EAAE,SAAS;SACjB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,CAAC;YACH,wBAAwB;YACxB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;gBAChD,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,UAAU,IAAI,EAAE,CAAC;YACxC,CAAC;YAED,8EAA8E;YAC9E,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC/B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;gBAC1B,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,iCAAiC,CAAC,CAAC;gBACjE,OAAO;YACT,CAAC;YAED,gBAAgB;YAChB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAChD,CAAC;YAED,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;YAC1B,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,gCAAgC,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAC9E,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;YAC9C,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,YAAY;QACV,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YAC/B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,OAAO,GAA2B,EAAE,CAAC;QAE3C,eAAe;QACf,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,eAAe,CAAC;QAE7D,IAAI,UAAU,CAAC,WAAW,EAAE,KAAK,eAAe,EAAE,CAAC;YACjD,yBAAyB;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC;YAC9C,OAAO,CAAC,UAAU,CAAC,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,cAAc;YACd,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAC3C,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB;QACvB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC/B,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,+BAA+B,CAAC,CAAC;gBAC/D,OAAO,IAAI,CAAC;YACd,CAAC;YACD,uBAAuB;YACvB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;YAEhD,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;YAC5F,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC;YAClF,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;YAC7C,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,cAAc;QACd,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;QACxB,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;QAC3B,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,qBAAqB,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,eAAwB,EAAE,OAAgB,EAAE,OAAgB;QAC/E,IAAI,CAAC,MAAM,GAAG;YACZ,eAAe;YACf,OAAO;YACP,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE;YACzB,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;SACrC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB;QACtB,yBAAyB;QACzB,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,aAAa;QAKX,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM;YACjC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ;YACtC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,eAAe;SACxF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,SAAS;QACP,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACtC,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,aAAa;IAChB,OAAO,GAAkB,EAAE,CAAC;IAC5B,YAAY,GAAG,CAAC,CAAC;IAEzB,YAAY,OAAsB;QAChC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAkB;QACzB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,aAAa;QACX,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAClE,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,KAAa;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;QAC7D,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC1B,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7B,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,KAAkB;QACrC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;YACd,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,KAAa;QACjC,OAAO,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,IAAY,EAAE,EAAE;YACzD,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAwB;IAC1D,MAAM,OAAO,GAAkB,EAAE,CAAC;IAElC,kBAAkB;IAClB,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IACD,aAAa;SACR,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC;YACX,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC"}

package/dist/providers/auth/oauth-lifecycle/error-detection.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Error Detection Helpers
+ *
+ * Utilities for detecting and classifying OAuth-related errors.
+ */
+export declare function extractStatusCode(upstreamError: unknown): number | undefined;
+export declare function isGoogleAccountVerificationRequiredMessage(lower: string): boolean;
+export declare function extractGoogleAccountVerificationUrl(message: string): string | null;

package/dist/providers/auth/oauth-lifecycle/error-detection.js

@@ -0,0 +1,71 @@
+/**
+ * Error Detection Helpers
+ *
+ * Utilities for detecting and classifying OAuth-related errors.
+ */
+export function extractStatusCode(upstreamError) {
+    if (!upstreamError || typeof upstreamError !== 'object') {
+        return undefined;
+    }
+    const anyErr = upstreamError;
+    const direct = anyErr.statusCode;
+    if (typeof direct === 'number' && Number.isFinite(direct)) {
+        return direct;
+    }
+    const status = anyErr.status;
+    if (typeof status === 'number' && Number.isFinite(status)) {
+        return status;
+    }
+    const response = anyErr.response;
+    if (response && typeof response === 'object') {
+        const respStatus = response.status;
+        if (typeof respStatus === 'number' && Number.isFinite(respStatus)) {
+            return respStatus;
+        }
+        const respStatusCode = response.statusCode;
+        if (typeof respStatusCode === 'number' && Number.isFinite(respStatusCode)) {
+            return respStatusCode;
+        }
+    }
+    return undefined;
+}
+export function isGoogleAccountVerificationRequiredMessage(lower) {
+    if (!lower) {
+        return false;
+    }
+    return (lower.includes('verify your account') ||
+        lower.includes('validation_required') ||
+        lower.includes('validation required') ||
+        lower.includes('validation_url') ||
+        lower.includes('validation url') ||
+        lower.includes('accounts.google.com/signin/continue') ||
+        lower.includes('support.google.com/accounts?p=al_alert'));
+}
+export function extractGoogleAccountVerificationUrl(message) {
+    const msg = typeof message === 'string' ? message : '';
+    if (!msg) {
+        return null;
+    }
+    const normalized = msg
+        .replace(/\\\//g, '/')
+        .replace(/\\u0026/gi, '&')
+        .replace(/\\u003d/gi, '=')
+        .replace(/\\x26/gi, '&')
+        .replace(/\\x3d/gi, '=');
+    const patterns = [
+        /https:\/\/accounts\.google\.com\/signin\/continue[^\s"'\\<>)]*/i,
+        /https:\/\/accounts\.google\.com\/[^\s"'\\<>)]*/i,
+        /https:\/\/support\.google\.com\/accounts\?p=al_alert[^\s"'\\<>)]*/i
+    ];
+    for (const re of patterns) {
+        const m = normalized.match(re);
+        if (m && m[0]) {
+            const url = String(m[0]).trim().replace(/[\\"']+$/g, '').replace(/[),.]+$/g, '');
+            if (url) {
+                return url;
+            }
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=error-detection.js.map

package/dist/providers/auth/oauth-lifecycle/error-detection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-detection.js","sourceRoot":"","sources":["../../../../src/providers/auth/oauth-lifecycle/error-detection.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,UAAU,iBAAiB,CAAC,aAAsB;IACtD,IAAI,CAAC,aAAa,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;QACxD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,aAAoB,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC;IACjC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC7C,MAAM,UAAU,GAAI,QAAgB,CAAC,MAAM,CAAC;QAC5C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAClE,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,MAAM,cAAc,GAAI,QAAgB,CAAC,UAAU,CAAC;QACpD,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAC1E,OAAO,cAAc,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,0CAA0C,CAAC,KAAa;IACtE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CACL,KAAK,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QACrC,KAAK,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QACrC,KAAK,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QACrC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAChC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAChC,KAAK,CAAC,QAAQ,CAAC,qCAAqC,CAAC;QACrD,KAAK,CAAC,QAAQ,CAAC,wCAAwC,CAAC,CACzD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,OAAe;IACjE,MAAM,GAAG,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,UAAU,GAAG,GAAG;SACnB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC;SACzB,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC;SACzB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC3B,MAAM,QAAQ,GAAa;QACzB,iEAAiE;QACjE,iDAAiD;QACjD,oEAAoE;KACrE,CAAC;IACF,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACd,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACjF,IAAI,GAAG,EAAE,CAAC;gBACR,OAAO,GAAG,CAAC;YACb,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/providers/auth/oauth-lifecycle/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * OAuth Lifecycle Helpers
+ *
+ * Re-exports from submodules for backward compatibility.
+ */
+export { isGeminiCliFamily, type ExtendedOAuthAuth, resolveTokenFilePath, resolveCamoufoxAliasForAuth, expandHome, defaultTokenFile } from './path-resolver.js';
+export { keyFor, shouldThrottle, updateThrottle, inFlight, interactiveTail, lastRunAt } from './throttle.js';
+export { extractStatusCode, isGoogleAccountVerificationRequiredMessage, extractGoogleAccountVerificationUrl } from './error-detection.js';
+export { type StoredOAuthToken, hasNonEmptyString, extractAccessToken, extractApiKey, hasApiKeyField, hasStableQwenApiKey, hasAccessToken, getExpiresAt, resolveProjectId, coerceExpiryTimestampSeconds, hasNoRefreshFlag, evaluateTokenState } from './token-helpers.js';
+export { normalizeGeminiCliAccountToken, sanitizeToken, readTokenFromFile, backupTokenFile, restoreTokenFileFromBackup, discardBackupFile, readRawTokenFile } from './token-io.js';

package/dist/providers/auth/oauth-lifecycle/index.js

@@ -0,0 +1,11 @@
+/**
+ * OAuth Lifecycle Helpers
+ *
+ * Re-exports from submodules for backward compatibility.
+ */
+export { isGeminiCliFamily, resolveTokenFilePath, resolveCamoufoxAliasForAuth, expandHome, defaultTokenFile } from './path-resolver.js';
+export { keyFor, shouldThrottle, updateThrottle, inFlight, interactiveTail, lastRunAt } from './throttle.js';
+export { extractStatusCode, isGoogleAccountVerificationRequiredMessage, extractGoogleAccountVerificationUrl } from './error-detection.js';
+export { hasNonEmptyString, extractAccessToken, extractApiKey, hasApiKeyField, hasStableQwenApiKey, hasAccessToken, getExpiresAt, resolveProjectId, coerceExpiryTimestampSeconds, hasNoRefreshFlag, evaluateTokenState } from './token-helpers.js';
+export { normalizeGeminiCliAccountToken, sanitizeToken, readTokenFromFile, backupTokenFile, restoreTokenFileFromBackup, discardBackupFile, readRawTokenFile } from './token-io.js';
+//# sourceMappingURL=index.js.map

package/dist/providers/auth/oauth-lifecycle/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/providers/auth/oauth-lifecycle/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,iBAAiB,EAEjB,oBAAoB,EACpB,2BAA2B,EAC3B,UAAU,EACV,gBAAgB,EACjB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,MAAM,EACN,cAAc,EACd,cAAc,EACd,QAAQ,EACR,eAAe,EACf,SAAS,EACV,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,iBAAiB,EACjB,0CAA0C,EAC1C,mCAAmC,EACpC,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAEL,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,4BAA4B,EAC5B,gBAAgB,EAChB,kBAAkB,EACnB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,8BAA8B,EAC9B,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,0BAA0B,EAC1B,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,eAAe,CAAC"}

package/dist/providers/auth/oauth-lifecycle/path-resolver.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Path Resolver
+ *
+ * Token file path resolution utilities.
+ */
+export declare function isGeminiCliFamily(providerType: string): boolean;
+export declare function expandHome(p: string): string;
+export declare function defaultTokenFile(providerType: string): string;
+export declare function resolveIflowCredentialCandidates(): string[];
+import type { OAuthAuth } from '../../core/api/provider-config.js';
+export type ExtendedOAuthAuth = OAuthAuth & {
+    tokenFile?: string;
+    authorizationUrl?: string;
+    userInfoUrl?: string;
+    redirectUri?: string;
+};
+export declare function resolveTokenFilePath(auth: ExtendedOAuthAuth, providerType: string): string;
+export declare function resolveCamoufoxAliasForAuth(providerType: string, auth: ExtendedOAuthAuth): string;

package/dist/providers/auth/oauth-lifecycle/path-resolver.js

@@ -0,0 +1,121 @@
+/**
+ * Path Resolver
+ *
+ * Token file path resolution utilities.
+ */
+import fsSync from 'fs';
+import path from 'path';
+import os from 'os';
+const GEMINI_CLI_PROVIDER_IDS = new Set(['gemini-cli', 'antigravity']);
+export function isGeminiCliFamily(providerType) {
+    return GEMINI_CLI_PROVIDER_IDS.has(providerType.toLowerCase());
+}
+export function expandHome(p) {
+    return p.startsWith('~/') ? p.replace(/^~\//, `${process.env.HOME || ''}/`) : p;
+}
+export function defaultTokenFile(providerType) {
+    const home = process.env.HOME || '';
+    if (providerType === 'iflow') {
+        return path.join(home, '.routecodex', 'auth', 'iflow-oauth-1-default.json');
+    }
+    if (providerType === 'qwen') {
+        return path.join(home, '.routecodex', 'auth', 'qwen-oauth-1-default.json');
+    }
+    if (isGeminiCliFamily(providerType)) {
+        const file = providerType.toLowerCase() === 'antigravity'
+            ? 'antigravity-oauth.json'
+            : 'gemini-oauth.json';
+        return path.join(home, '.routecodex', 'auth', file);
+    }
+    return path.join(home, '.routecodex', 'tokens', `${providerType}-default.json`);
+}
+export function resolveIflowCredentialCandidates() {
+    const raw = String(process.env.IFLOW_OAUTH_TOKEN_FILE || '').trim();
+    const fromEnv = raw ? expandHome(raw) : '';
+    const candidates = [fromEnv].filter((item) => typeof item === 'string' && item.trim().length > 0);
+    return [...new Set(candidates)];
+}
+export function resolveTokenFilePath(auth, providerType) {
+    const raw = typeof auth.tokenFile === 'string' ? auth.tokenFile.trim() : '';
+    if (!raw) {
+        const fallback = defaultTokenFile(providerType);
+        auth.tokenFile = fallback;
+        return fallback;
+    }
+    if (raw.includes('/') || raw.includes('\\') || raw.endsWith('.json')) {
+        const resolved = expandHome(raw);
+        auth.tokenFile = resolved;
+        return resolved;
+    }
+    const alias = raw;
+    const homeDir = process.env.HOME || os.homedir();
+    const authDir = path.join(homeDir, '.routecodex', 'auth');
+    const pattern = new RegExp(`^${providerType}-oauth-(\\d+)(?:-(.+))?\\.json$`, 'i');
+    const pt = providerType.toLowerCase();
+    if (pt === 'qwen' && alias === 'default') {
+        const pinned = path.join(authDir, 'qwen-oauth-1-default.json');
+        try {
+            if (fsSync.existsSync(pinned)) {
+                auth.tokenFile = pinned;
+                return pinned;
+            }
+        }
+        catch {
+            // ignore and fall back to scanning
+        }
+    }
+    let existingPath = null;
+    let bestSeqForAlias = 0;
+    let maxSeq = 0;
+    try {
+        const entries = fsSync.readdirSync(authDir);
+        for (const entry of entries) {
+            const match = entry.match(pattern);
+            if (!match) {
+                continue;
+            }
+            const seq = parseInt(match[1], 10);
+            if (!Number.isFinite(seq) || seq <= 0) {
+                continue;
+            }
+            const entryAlias = (match[2] || 'default');
+            if (entryAlias === alias && seq >= bestSeqForAlias) {
+                bestSeqForAlias = seq;
+                existingPath = path.join(authDir, entry);
+            }
+            if (seq > maxSeq) {
+                maxSeq = seq;
+            }
+        }
+    }
+    catch {
+        // ignore directory errors; treat as no existing tokens
+    }
+    if (existingPath) {
+        auth.tokenFile = existingPath;
+        return existingPath;
+    }
+    const nextSeq = (pt === 'qwen' && alias === 'default') ? 1 : (maxSeq + 1);
+    const fileName = `${providerType}-oauth-${nextSeq}-${alias}.json`;
+    const fullPath = path.join(authDir, fileName);
+    auth.tokenFile = fullPath;
+    return fullPath;
+}
+export function resolveCamoufoxAliasForAuth(providerType, auth) {
+    const raw = typeof auth.tokenFile === 'string' ? auth.tokenFile.trim() : '';
+    if (raw && !raw.includes('/') && !raw.includes('\\') && !raw.endsWith('.json')) {
+        return raw;
+    }
+    const base = raw ? path.basename(raw) : '';
+    const pt = String(providerType || '').trim().toLowerCase();
+    if (base && pt) {
+        const re = new RegExp(`^${pt}-oauth-\\d+(?:-(.+))?\\.json$`, 'i');
+        const m = base.match(re);
+        const alias = m && m[1] ? String(m[1]).trim() : '';
+        if (alias) {
+            return alias;
+        }
+    }
+    return 'default';
+}
+//# sourceMappingURL=path-resolver.js.map

package/dist/providers/auth/oauth-lifecycle/path-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-resolver.js","sourceRoot":"","sources":["../../../../src/providers/auth/oauth-lifecycle/path-resolver.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,MAAM,MAAM,IAAI,CAAC;AACxB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC;AAEvE,MAAM,UAAU,iBAAiB,CAAC,YAAoB;IACpD,OAAO,uBAAuB,CAAC,GAAG,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,OAAO,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,YAAoB;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IACpC,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,4BAA4B,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,2BAA2B,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,YAAY,CAAC,WAAW,EAAE,KAAK,aAAa;YACvD,CAAC,CAAC,wBAAwB;YAC1B,CAAC,CAAC,mBAAmB,CAAC;QACxB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,YAAY,eAAe,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,gCAAgC;IAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpE,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3C,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAa,CAAC;IAC9G,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;AAClC,CAAC;AAWD,MAAM,UAAU,oBAAoB,CAAC,IAAuB,EAAE,YAAoB;IAChF,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAE5E,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,QAAQ,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACrE,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC;IAClB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,IAAI,YAAY,iCAAiC,EAAE,GAAG,CAAC,CAAC;IAEnF,MAAM,EAAE,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC;IACtC,IAAI,EAAE,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;QAC/D,IAAI,CAAC;YACH,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;gBACxB,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;IACH,CAAC;IAED,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC5C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;gBACtC,SAAS;YACX,CAAC;YACD,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC;YAC3C,IAAI,UAAU,KAAK,KAAK,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;gBACnD,eAAe,GAAG,GAAG,CAAC;gBACtB,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC3C,CAAC;YACD,IAAI,GAAG,GAAG,MAAM,EAAE,CAAC;gBACjB,MAAM,GAAG,GAAG,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;IACzD,CAAC;IAED,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC,SAAS,GAAG,YAAY,CAAC;QAC9B,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,EAAE,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,GAAG,YAAY,UAAU,OAAO,IAAI,KAAK,OAAO,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9C,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC1B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,YAAoB,EAAE,IAAuB;IACvF,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/E,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3C,MAAM,EAAE,GAAG,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3D,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;QACf,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,+BAA+B,EAAE,GAAG,CAAC,CAAC;QAClE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzB,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/providers/auth/oauth-lifecycle/throttle.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Throttle Helpers
+ *
+ * Rate limiting utilities for OAuth operations.
+ */
+export declare function keyFor(providerType: string, tokenFile?: string): string;
+export declare function shouldThrottle(k: string, ms?: number): boolean;
+export declare function updateThrottle(k: string): void;
+export declare const inFlight: {
+    has: (key: string) => boolean;
+    get: (key: string) => Promise<void> | undefined;
+    set: (key: string, promise: Promise<void>) => Map<string, Promise<void>>;
+    delete: (key: string) => boolean;
+};
+export declare const lastRunAt: {
+    get: (key: string) => number | undefined;
+    set: (key: string, value: number) => Map<string, number>;
+};
+export declare const interactiveTail: {
+    readonly current: Promise<void>;
+    next: Promise<void>;
+};

package/dist/providers/auth/oauth-lifecycle/throttle.js

@@ -0,0 +1,37 @@
+/**
+ * Throttle Helpers
+ *
+ * Rate limiting utilities for OAuth operations.
+ */
+const inFlightMap = new Map();
+const lastRunAtMap = new Map();
+let interactiveTailPromise = Promise.resolve();
+export function keyFor(providerType, tokenFile) {
+    return `${providerType}::${tokenFile || ''}`;
+}
+export function shouldThrottle(k, ms = 60_000) {
+    const t = lastRunAtMap.get(k) || 0;
+    return Date.now() - t < ms;
+}
+export function updateThrottle(k) {
+    lastRunAtMap.set(k, Date.now());
+}
+export const inFlight = {
+    has: (key) => inFlightMap.has(key),
+    get: (key) => inFlightMap.get(key),
+    set: (key, promise) => inFlightMap.set(key, promise),
+    delete: (key) => inFlightMap.delete(key)
+};
+export const lastRunAt = {
+    get: (key) => lastRunAtMap.get(key),
+    set: (key, value) => lastRunAtMap.set(key, value)
+};
+export const interactiveTail = {
+    get current() {
+        return interactiveTailPromise;
+    },
+    set next(p) {
+        interactiveTailPromise = p;
+    }
+};
+//# sourceMappingURL=throttle.js.map

package/dist/providers/auth/oauth-lifecycle/throttle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"throttle.js","sourceRoot":"","sources":["../../../../src/providers/auth/oauth-lifecycle/throttle.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,GAA+B,IAAI,GAAG,EAAE,CAAC;AAC1D,MAAM,YAAY,GAAwB,IAAI,GAAG,EAAE,CAAC;AACpD,IAAI,sBAAsB,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;AAE9D,MAAM,UAAU,MAAM,CAAC,YAAoB,EAAE,SAAkB;IAC7D,OAAO,GAAG,YAAY,KAAK,SAAS,IAAI,EAAE,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,CAAS,EAAE,EAAE,GAAG,MAAM;IACnD,MAAM,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,CAAS;IACtC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,GAAG,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;IAC1C,GAAG,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;IAC1C,GAAG,EAAE,CAAC,GAAW,EAAE,OAAsB,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC;IAC3E,MAAM,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC;CACjD,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,GAAG,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3C,GAAG,EAAE,CAAC,GAAW,EAAE,KAAa,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC;CAClE,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,IAAI,OAAO;QACT,OAAO,sBAAsB,CAAC;IAChC,CAAC;IACD,IAAI,IAAI,CAAC,CAAgB;QACvB,sBAAsB,GAAG,CAAC,CAAC;IAC7B,CAAC;CACF,CAAC"}

package/dist/providers/auth/oauth-lifecycle/token-helpers.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Token Helpers
+ *
+ * Token extraction and validation utilities.
+ */
+import type { UnknownObject } from '../../../modules/pipeline/types/common-types.js';
+export type StoredOAuthToken = UnknownObject & {
+    access_token?: string;
+    AccessToken?: string;
+    refresh_token?: string;
+    api_key?: string;
+    apiKey?: string;
+    expires_at?: number | string;
+    expired?: number | string;
+    expiry_date?: number | string;
+    norefresh?: boolean;
+};
+export declare function hasNonEmptyString(value: unknown): value is string;
+export declare function extractAccessToken(token: StoredOAuthToken | null): string | undefined;
+export declare function extractApiKey(token: StoredOAuthToken | null): string | undefined;
+export declare function hasApiKeyField(token: StoredOAuthToken | null): boolean;
+export declare function hasStableQwenApiKey(token: StoredOAuthToken | null): boolean;
+export declare function hasAccessToken(token: StoredOAuthToken | null): boolean;
+export declare function getExpiresAt(token: StoredOAuthToken | null): number | null;
+export declare function resolveProjectId(token: UnknownObject | null): string | undefined;
+export declare function coerceExpiryTimestampSeconds(token: StoredOAuthToken | null): number | undefined;
+export declare function hasNoRefreshFlag(token: StoredOAuthToken | null): boolean;
+export declare function evaluateTokenState(token: StoredOAuthToken | null, providerType: string): {
+    hasApiKey: boolean;
+    hasAccess: boolean;
+    expiresAt: number | null;
+    isExpired: boolean;
+    isNearExpiry: boolean;
+    validAccess: boolean;
+    isExpiredOrNear: boolean;
+};