@mastra/code-sdk 0.0.0-fix-workflow-step-timing-and-parallel-status-20260715180716

package/dist/analytics.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/analytics.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';\nimport os from 'node:os';\nimport path from 'node:path';\n\nimport { PostHog } from 'posthog-node';\n\nconst POSTHOG_API_KEY = 'phc_SBLpZVAB6jmHOct9CABq3PF0Yn5FU3G2FgT4xUr2XrT';\nconst POSTHOG_HOST = 'https://us.posthog.com';\nconst MASTRA_SOURCE = 'mastracode';\nconst TRUTHY_DISABLED_VALUES = new Set(['1', 'true', 'yes', 'on']);\nconst ANALYTICS_CONFIG_PATH = path.join(os.homedir(), '.mastracode', 'analytics.json');\n\ninterface AnalyticsConfig {\n  distinctId?: string;\n}\n\nfunction createMastraAnalyticsDistinctId(): string {\n  return `mastra-${randomUUID()}`;\n}\n\nfunction isHostnameDerivedDistinctId(distinctId: string, hostname = os.hostname()): boolean {\n  return distinctId === `mastra-${hostname}`;\n}\n\nfunction isValidMastraAnalyticsDistinctId(distinctId: string): boolean {\n  return /^mastra-[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(distinctId);\n}\n\nfunction writeAnalyticsConfig(distinctId: string, configPath = ANALYTICS_CONFIG_PATH): void {\n  try {\n    mkdirSync(path.dirname(configPath), { recursive: true });\n    writeFileSync(configPath, JSON.stringify({ distinctId }));\n  } catch {\n    // swallow analytics persistence errors\n  }\n}\n\nexport function getMastraAnalyticsDistinctId(configPath = ANALYTICS_CONFIG_PATH): string {\n  try {\n    if (existsSync(configPath)) {\n      const config = JSON.parse(readFileSync(configPath, 'utf-8')) as AnalyticsConfig;\n      if (\n        config.distinctId &&\n        isValidMastraAnalyticsDistinctId(config.distinctId) &&\n        !isHostnameDerivedDistinctId(config.distinctId)\n      ) {\n        return config.distinctId;\n      }\n    }\n  } catch {\n    // regenerate below\n  }\n\n  const distinctId = createMastraAnalyticsDistinctId();\n  writeAnalyticsConfig(distinctId, configPath);\n  return distinctId;\n}\n\nfunction isAnalyticsDebugEnabled(): boolean {\n  return TRUTHY_DISABLED_VALUES.has(process.env.MASTRACODE_ANALYTICS_DEBUG?.trim().toLowerCase() ?? '');\n}\n\nfunction debugAnalytics(message: string, properties?: Record<string, unknown>): void {\n  if (!isAnalyticsDebugEnabled()) {\n    return;\n  }\n\n  const suffix = properties ? ` ${JSON.stringify(properties)}` : '';\n  process.stderr.write(`[mastracode analytics] ${message}${suffix}\\n`);\n}\n\nexport type MastraCodeAnalyticsEvent =\n  | 'mastracode_session_started'\n  | 'mastracode_prompt_submitted'\n  | 'mastracode_thread_changed'\n  | 'mastracode_model_changed'\n  | 'mastracode_command_used'\n  | 'mastracode_interactive_prompt_shown';\n\nexport interface MastraCodeAnalytics {\n  capture(event: MastraCodeAnalyticsEvent, properties?: Record<string, unknown>): void;\n  trackCommand(command: string, properties?: Record<string, unknown>): void;\n  trackInteractivePrompt(promptType: string, properties?: Record<string, unknown>): void;\n  shutdown(): Promise<void>;\n  isEnabled(): boolean;\n}\n\ninterface MastraCodeAnalyticsOptions {\n  version: string;\n  host?: string;\n  apiKey?: string;\n}\n\nclass NoopMastraCodeAnalytics implements MastraCodeAnalytics {\n  capture(event: MastraCodeAnalyticsEvent): void {\n    debugAnalytics('capture skipped: telemetry disabled', { event });\n  }\n  trackCommand(command: string): void {\n    debugAnalytics('command skipped: telemetry disabled', { command });\n  }\n  trackInteractivePrompt(promptType: string): void {\n    debugAnalytics('interactive prompt skipped: telemetry disabled', { promptType });\n  }\n  async shutdown(): Promise<void> {\n    debugAnalytics('shutdown skipped: telemetry disabled');\n  }\n  isEnabled(): boolean {\n    return false;\n  }\n}\n\nclass PostHogMastraCodeAnalytics implements MastraCodeAnalytics {\n  private readonly client: PostHog;\n  private readonly distinctId: string;\n  private readonly sessionId = randomUUID();\n  private readonly version: string;\n\n  constructor({ version, apiKey = POSTHOG_API_KEY, host = POSTHOG_HOST }: MastraCodeAnalyticsOptions) {\n    this.version = version;\n    this.distinctId = getMastraAnalyticsDistinctId();\n    this.client = new PostHog(apiKey, {\n      host,\n      flushAt: 1,\n      flushInterval: 0,\n      disableGeoip: false,\n    });\n    this.client.register({ mastraSource: MASTRA_SOURCE });\n    debugAnalytics('enabled', { host, distinctId: this.distinctId, version });\n  }\n\n  capture(event: MastraCodeAnalyticsEvent, properties?: Record<string, unknown>): void {\n    try {\n      const eventProperties = {\n        ...this.getBaseProperties(),\n        ...properties,\n      };\n      debugAnalytics('capture', { event, properties: eventProperties });\n      this.client.capture({\n        distinctId: this.distinctId,\n        event,\n        properties: eventProperties,\n      });\n    } catch (error) {\n      debugAnalytics('capture failed', { event, error: error instanceof Error ? error.message : String(error) });\n      // swallow analytics errors\n    }\n  }\n\n  trackCommand(command: string, properties?: Record<string, unknown>): void {\n    this.capture('mastracode_command_used', { command, ...properties });\n  }\n\n  trackInteractivePrompt(promptType: string, properties?: Record<string, unknown>): void {\n    this.capture('mastracode_interactive_prompt_shown', { promptType, ...properties });\n  }\n\n  async shutdown(): Promise<void> {\n    try {\n      debugAnalytics('shutdown start');\n      await this.client.shutdown();\n      debugAnalytics('shutdown complete');\n    } catch (error) {\n      debugAnalytics('shutdown failed', { error: error instanceof Error ? error.message : String(error) });\n      // swallow analytics errors\n    }\n  }\n\n  isEnabled(): boolean {\n    return true;\n  }\n\n  private getBaseProperties(): Record<string, unknown> {\n    return {\n      mastraSource: MASTRA_SOURCE,\n      sessionId: this.sessionId,\n      version: this.version,\n      os: process.platform,\n      osVersion: os.release(),\n      nodeVersion: process.version,\n      platform: process.arch,\n      machineId: os.hostname(),\n    };\n  }\n}\n\nexport function isTelemetryDisabled(env: NodeJS.ProcessEnv = process.env): boolean {\n  const value = env.MASTRA_TELEMETRY_DISABLED;\n  if (!value) {\n    return false;\n  }\n\n  return TRUTHY_DISABLED_VALUES.has(value.trim().toLowerCase());\n}\n\nexport function createMastraCodeAnalytics(options: MastraCodeAnalyticsOptions): MastraCodeAnalytics {\n  if (isTelemetryDisabled()) {\n    debugAnalytics('disabled by MASTRA_TELEMETRY_DISABLED', { value: process.env.MASTRA_TELEMETRY_DISABLED });\n    return new NoopMastraCodeAnalytics();\n  }\n\n  return new PostHogMastraCodeAnalytics(options);\n}\n"],"mappings":"AAAA,SAAS,kBAAkB;AAC3B,SAAS,YAAY,WAAW,cAAc,qBAAqB;AACnE,OAAO,QAAQ;AACf,OAAO,UAAU;AAEjB,SAAS,eAAe;AAExB,MAAM,kBAAkB;AACxB,MAAM,eAAe;AACrB,MAAM,gBAAgB;AACtB,MAAM,yBAAyB,oBAAI,IAAI,CAAC,KAAK,QAAQ,OAAO,IAAI,CAAC;AACjE,MAAM,wBAAwB,KAAK,KAAK,GAAG,QAAQ,GAAG,eAAe,gBAAgB;AAMrF,SAAS,kCAA0C;AACjD,SAAO,UAAU,WAAW,CAAC;AAC/B;AAEA,SAAS,4BAA4B,YAAoB,WAAW,GAAG,SAAS,GAAY;AAC1F,SAAO,eAAe,UAAU,QAAQ;AAC1C;AAEA,SAAS,iCAAiC,YAA6B;AACrE,SAAO,yEAAyE,KAAK,UAAU;AACjG;AAEA,SAAS,qBAAqB,YAAoB,aAAa,uBAA6B;AAC1F,MAAI;AACF,cAAU,KAAK,QAAQ,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;AACvD,kBAAc,YAAY,KAAK,UAAU,EAAE,WAAW,CAAC,CAAC;AAAA,EAC1D,QAAQ;AAAA,EAER;AACF;AAEO,SAAS,6BAA6B,aAAa,uBAA+B;AACvF,MAAI;AACF,QAAI,WAAW,UAAU,GAAG;AAC1B,YAAM,SAAS,KAAK,MAAM,aAAa,YAAY,OAAO,CAAC;AAC3D,UACE,OAAO,cACP,iCAAiC,OAAO,UAAU,KAClD,CAAC,4BAA4B,OAAO,UAAU,GAC9C;AACA,eAAO,OAAO;AAAA,MAChB;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAER;AAEA,QAAM,aAAa,gCAAgC;AACnD,uBAAqB,YAAY,UAAU;AAC3C,SAAO;AACT;AAEA,SAAS,0BAAmC;AAC1C,SAAO,uBAAuB,IAAI,QAAQ,IAAI,4BAA4B,KAAK,EAAE,YAAY,KAAK,EAAE;AACtG;AAEA,SAAS,eAAe,SAAiB,YAA4C;AACnF,MAAI,CAAC,wBAAwB,GAAG;AAC9B;AAAA,EACF;AAEA,QAAM,SAAS,aAAa,IAAI,KAAK,UAAU,UAAU,CAAC,KAAK;AAC/D,UAAQ,OAAO,MAAM,0BAA0B,OAAO,GAAG,MAAM;AAAA,CAAI;AACrE;AAwBA,MAAM,wBAAuD;AAAA,EAC3D,QAAQ,OAAuC;AAC7C,mBAAe,uCAAuC,EAAE,MAAM,CAAC;AAAA,EACjE;AAAA,EACA,aAAa,SAAuB;AAClC,mBAAe,uCAAuC,EAAE,QAAQ,CAAC;AAAA,EACnE;AAAA,EACA,uBAAuB,YAA0B;AAC/C,mBAAe,kDAAkD,EAAE,WAAW,CAAC;AAAA,EACjF;AAAA,EACA,MAAM,WAA0B;AAC9B,mBAAe,sCAAsC;AAAA,EACvD;AAAA,EACA,YAAqB;AACnB,WAAO;AAAA,EACT;AACF;AAEA,MAAM,2BAA0D;AAAA,EAC7C;AAAA,EACA;AAAA,EACA,YAAY,WAAW;AAAA,EACvB;AAAA,EAEjB,YAAY,EAAE,SAAS,SAAS,iBAAiB,OAAO,aAAa,GAA+B;AAClG,SAAK,UAAU;AACf,SAAK,aAAa,6BAA6B;AAC/C,SAAK,SAAS,IAAI,QAAQ,QAAQ;AAAA,MAChC;AAAA,MACA,SAAS;AAAA,MACT,eAAe;AAAA,MACf,cAAc;AAAA,IAChB,CAAC;AACD,SAAK,OAAO,SAAS,EAAE,cAAc,cAAc,CAAC;AACpD,mBAAe,WAAW,EAAE,MAAM,YAAY,KAAK,YAAY,QAAQ,CAAC;AAAA,EAC1E;AAAA,EAEA,QAAQ,OAAiC,YAA4C;AACnF,QAAI;AACF,YAAM,kBAAkB;AAAA,QACtB,GAAG,KAAK,kBAAkB;AAAA,QAC1B,GAAG;AAAA,MACL;AACA,qBAAe,WAAW,EAAE,OAAO,YAAY,gBAAgB,CAAC;AAChE,WAAK,OAAO,QAAQ;AAAA,QAClB,YAAY,KAAK;AAAA,QACjB;AAAA,QACA,YAAY;AAAA,MACd,CAAC;AAAA,IACH,SAAS,OAAO;AACd,qBAAe,kBAAkB,EAAE,OAAO,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;AAAA,IAE3G;AAAA,EACF;AAAA,EAEA,aAAa,SAAiB,YAA4C;AACxE,SAAK,QAAQ,2BAA2B,EAAE,SAAS,GAAG,WAAW,CAAC;AAAA,EACpE;AAAA,EAEA,uBAAuB,YAAoB,YAA4C;AACrF,SAAK,QAAQ,uCAAuC,EAAE,YAAY,GAAG,WAAW,CAAC;AAAA,EACnF;AAAA,EAEA,MAAM,WAA0B;AAC9B,QAAI;AACF,qBAAe,gBAAgB;AAC/B,YAAM,KAAK,OAAO,SAAS;AAC3B,qBAAe,mBAAmB;AAAA,IACpC,SAAS,OAAO;AACd,qBAAe,mBAAmB,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;AAAA,IAErG;AAAA,EACF;AAAA,EAEA,YAAqB;AACnB,WAAO;AAAA,EACT;AAAA,EAEQ,oBAA6C;AACnD,WAAO;AAAA,MACL,cAAc;AAAA,MACd,WAAW,KAAK;AAAA,MAChB,SAAS,KAAK;AAAA,MACd,IAAI,QAAQ;AAAA,MACZ,WAAW,GAAG,QAAQ;AAAA,MACtB,aAAa,QAAQ;AAAA,MACrB,UAAU,QAAQ;AAAA,MAClB,WAAW,GAAG,SAAS;AAAA,IACzB;AAAA,EACF;AACF;AAEO,SAAS,oBAAoB,MAAyB,QAAQ,KAAc;AACjF,QAAM,QAAQ,IAAI;AAClB,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,EACT;AAEA,SAAO,uBAAuB,IAAI,MAAM,KAAK,EAAE,YAAY,CAAC;AAC9D;AAEO,SAAS,0BAA0B,SAA0D;AAClG,MAAI,oBAAoB,GAAG;AACzB,mBAAe,yCAAyC,EAAE,OAAO,QAAQ,IAAI,0BAA0B,CAAC;AACxG,WAAO,IAAI,wBAAwB;AAAA,EACrC;AAEA,SAAO,IAAI,2BAA2B,OAAO;AAC/C;","names":[]}

package/dist/auth/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * OAuth credential management for AI providers.
+ */
+export * from './types.js';
+export * from './storage.js';
+export { anthropicOAuthProvider } from './providers/anthropic.js';
+export { githubCopilotOAuthProvider } from './providers/github-copilot.js';
+export { openaiCodexOAuthProvider } from './providers/openai-codex.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/auth/index.js

@@ -0,0 +1,11 @@
+export * from "./types.js";
+export * from "./storage.js";
+import { anthropicOAuthProvider } from "./providers/anthropic.js";
+import { githubCopilotOAuthProvider } from "./providers/github-copilot.js";
+import { openaiCodexOAuthProvider } from "./providers/openai-codex.js";
+export {
+  anthropicOAuthProvider,
+  githubCopilotOAuthProvider,
+  openaiCodexOAuthProvider
+};
+//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/index.ts"],"sourcesContent":["/**\n * OAuth credential management for AI providers.\n */\n\nexport * from './types.js';\nexport * from './storage.js';\nexport { anthropicOAuthProvider } from './providers/anthropic.js';\nexport { githubCopilotOAuthProvider } from './providers/github-copilot.js';\nexport { openaiCodexOAuthProvider } from './providers/openai-codex.js';\n"],"mappings":"AAIA,cAAc;AACd,cAAc;AACd,SAAS,8BAA8B;AACvC,SAAS,kCAAkC;AAC3C,SAAS,gCAAgC;","names":[]}

package/dist/auth/pkce.d.ts

@@ -0,0 +1,13 @@
+/**
+ * PKCE utilities using Web Crypto API.
+ * Works in both Node.js 20+ and browsers.
+ */
+/**
+ * Generate PKCE code verifier and challenge.
+ * Uses Web Crypto API for cross-platform compatibility.
+ */
+export declare function generatePKCE(): Promise<{
+    verifier: string;
+    challenge: string;
+}>;
+//# sourceMappingURL=pkce.d.ts.map

package/dist/auth/pkce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.d.ts","sourceRoot":"","sources":["../../src/auth/pkce.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAaH;;;GAGG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,CAaD"}

package/dist/auth/pkce.js

@@ -0,0 +1,21 @@
+function base64urlEncode(bytes) {
+  let binary = "";
+  for (const byte of bytes) {
+    binary += String.fromCharCode(byte);
+  }
+  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
+}
+async function generatePKCE() {
+  const verifierBytes = new Uint8Array(32);
+  crypto.getRandomValues(verifierBytes);
+  const verifier = base64urlEncode(verifierBytes);
+  const encoder = new TextEncoder();
+  const data = encoder.encode(verifier);
+  const hashBuffer = await crypto.subtle.digest("SHA-256", data);
+  const challenge = base64urlEncode(new Uint8Array(hashBuffer));
+  return { verifier, challenge };
+}
+export {
+  generatePKCE
+};
+//# sourceMappingURL=pkce.js.map

package/dist/auth/pkce.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/pkce.ts"],"sourcesContent":["/**\n * PKCE utilities using Web Crypto API.\n * Works in both Node.js 20+ and browsers.\n */\n\n/**\n * Encode bytes as base64url string.\n */\nfunction base64urlEncode(bytes: Uint8Array): string {\n  let binary = '';\n  for (const byte of bytes) {\n    binary += String.fromCharCode(byte);\n  }\n  return btoa(binary).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=/g, '');\n}\n\n/**\n * Generate PKCE code verifier and challenge.\n * Uses Web Crypto API for cross-platform compatibility.\n */\nexport async function generatePKCE(): Promise<{\n  verifier: string;\n  challenge: string;\n}> {\n  // Generate random verifier\n  const verifierBytes = new Uint8Array(32);\n  crypto.getRandomValues(verifierBytes);\n  const verifier = base64urlEncode(verifierBytes);\n\n  // Compute SHA-256 challenge\n  const encoder = new TextEncoder();\n  const data = encoder.encode(verifier);\n  const hashBuffer = await crypto.subtle.digest('SHA-256', data);\n  const challenge = base64urlEncode(new Uint8Array(hashBuffer));\n\n  return { verifier, challenge };\n}\n"],"mappings":"AAQA,SAAS,gBAAgB,OAA2B;AAClD,MAAI,SAAS;AACb,aAAW,QAAQ,OAAO;AACxB,cAAU,OAAO,aAAa,IAAI;AAAA,EACpC;AACA,SAAO,KAAK,MAAM,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,MAAM,EAAE;AAC9E;AAMA,eAAsB,eAGnB;AAED,QAAM,gBAAgB,IAAI,WAAW,EAAE;AACvC,SAAO,gBAAgB,aAAa;AACpC,QAAM,WAAW,gBAAgB,aAAa;AAG9C,QAAM,UAAU,IAAI,YAAY;AAChC,QAAM,OAAO,QAAQ,OAAO,QAAQ;AACpC,QAAM,aAAa,MAAM,OAAO,OAAO,OAAO,WAAW,IAAI;AAC7D,QAAM,YAAY,gBAAgB,IAAI,WAAW,UAAU,CAAC;AAE5D,SAAO,EAAE,UAAU,UAAU;AAC/B;","names":[]}

package/dist/auth/providers/anthropic.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Anthropic OAuth flow (Claude Pro/Max)
+ *
+ * Inspired by pi-mono's OAuth implementation:
+ * https://github.com/badlogic/pi-mono/blob/main/packages/ai/src/utils/oauth/anthropic.ts
+ */
+import type { OAuthCredentials, OAuthProviderInterface } from '../types.js';
+/**
+ * Login with Anthropic OAuth (device code flow)
+ */
+export declare function loginAnthropic(onAuthUrl: (url: string) => void, onPromptCode: () => Promise<string>): Promise<OAuthCredentials>;
+/**
+ * Refresh Anthropic OAuth token
+ */
+export declare function refreshAnthropicToken(refreshToken: string): Promise<OAuthCredentials>;
+export declare const anthropicOAuthProvider: OAuthProviderInterface;
+//# sourceMappingURL=anthropic.d.ts.map

package/dist/auth/providers/anthropic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic.d.ts","sourceRoot":"","sources":["../../../src/auth/providers/anthropic.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAuB,sBAAsB,EAAE,MAAM,aAAa,CAAC;AASjG;;GAEG;AACH,wBAAsB,cAAc,CAClC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,EAChC,YAAY,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,GAClC,OAAO,CAAC,gBAAgB,CAAC,CA6D3B;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA2B3F;AAED,eAAO,MAAM,sBAAsB,EAAE,sBAkBpC,CAAC"}

package/dist/auth/providers/anthropic.js

@@ -0,0 +1,94 @@
+import { generatePKCE } from "../pkce.js";
+const decode = (s) => atob(s);
+const CLIENT_ID = decode("OWQxYzI1MGEtZTYxYi00NGQ5LTg4ZWQtNTk0NGQxOTYyZjVl");
+const AUTHORIZE_URL = "https://claude.ai/oauth/authorize";
+const TOKEN_URL = "https://console.anthropic.com/v1/oauth/token";
+const REDIRECT_URI = "https://console.anthropic.com/oauth/code/callback";
+const SCOPES = "org:create_api_key user:profile user:inference";
+async function loginAnthropic(onAuthUrl, onPromptCode) {
+  const { verifier, challenge } = await generatePKCE();
+  const authParams = new URLSearchParams({
+    code: "true",
+    client_id: CLIENT_ID,
+    response_type: "code",
+    redirect_uri: REDIRECT_URI,
+    scope: SCOPES,
+    code_challenge: challenge,
+    code_challenge_method: "S256",
+    state: verifier
+  });
+  const authUrl = `${AUTHORIZE_URL}?${authParams.toString()}`;
+  onAuthUrl(authUrl);
+  const authCode = await onPromptCode();
+  const splits = authCode.split("#");
+  const code = splits[0];
+  const state = splits[1];
+  const tokenResponse = await fetch(TOKEN_URL, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json"
+    },
+    body: JSON.stringify({
+      grant_type: "authorization_code",
+      client_id: CLIENT_ID,
+      code,
+      state,
+      redirect_uri: REDIRECT_URI,
+      code_verifier: verifier
+    })
+  });
+  if (!tokenResponse.ok) {
+    const error = await tokenResponse.text();
+    throw new Error(`Token exchange failed: ${error}`);
+  }
+  const tokenData = await tokenResponse.json();
+  const expiresAt = Date.now() + tokenData.expires_in * 1e3 - 5 * 60 * 1e3;
+  return {
+    refresh: tokenData.refresh_token,
+    access: tokenData.access_token,
+    expires: expiresAt
+  };
+}
+async function refreshAnthropicToken(refreshToken) {
+  const response = await fetch(TOKEN_URL, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({
+      grant_type: "refresh_token",
+      client_id: CLIENT_ID,
+      refresh_token: refreshToken
+    })
+  });
+  if (!response.ok) {
+    const error = await response.text();
+    throw new Error(`Anthropic token refresh failed: ${error}`);
+  }
+  const data = await response.json();
+  return {
+    refresh: data.refresh_token,
+    access: data.access_token,
+    expires: Date.now() + data.expires_in * 1e3 - 5 * 60 * 1e3
+  };
+}
+const anthropicOAuthProvider = {
+  id: "anthropic",
+  name: "Anthropic (Claude Pro/Max)",
+  async login(callbacks) {
+    return loginAnthropic(
+      (url) => callbacks.onAuth({ url }),
+      () => callbacks.onPrompt({ message: "Paste the authorization code:" })
+    );
+  },
+  async refreshToken(credentials) {
+    return refreshAnthropicToken(credentials.refresh);
+  },
+  getApiKey(credentials) {
+    return credentials.access;
+  }
+};
+export {
+  anthropicOAuthProvider,
+  loginAnthropic,
+  refreshAnthropicToken
+};
+//# sourceMappingURL=anthropic.js.map

package/dist/auth/providers/anthropic.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/auth/providers/anthropic.ts"],"sourcesContent":["/**\n * Anthropic OAuth flow (Claude Pro/Max)\n *\n * Inspired by pi-mono's OAuth implementation:\n * https://github.com/badlogic/pi-mono/blob/main/packages/ai/src/utils/oauth/anthropic.ts\n */\n\nimport { generatePKCE } from '../pkce.js';\nimport type { OAuthCredentials, OAuthLoginCallbacks, OAuthProviderInterface } from '../types.js';\n\nconst decode = (s: string) => atob(s);\nconst CLIENT_ID = decode('OWQxYzI1MGEtZTYxYi00NGQ5LTg4ZWQtNTk0NGQxOTYyZjVl');\nconst AUTHORIZE_URL = 'https://claude.ai/oauth/authorize';\nconst TOKEN_URL = 'https://console.anthropic.com/v1/oauth/token';\nconst REDIRECT_URI = 'https://console.anthropic.com/oauth/code/callback';\nconst SCOPES = 'org:create_api_key user:profile user:inference';\n\n/**\n * Login with Anthropic OAuth (device code flow)\n */\nexport async function loginAnthropic(\n  onAuthUrl: (url: string) => void,\n  onPromptCode: () => Promise<string>,\n): Promise<OAuthCredentials> {\n  const { verifier, challenge } = await generatePKCE();\n\n  // Build authorization URL\n  const authParams = new URLSearchParams({\n    code: 'true',\n    client_id: CLIENT_ID,\n    response_type: 'code',\n    redirect_uri: REDIRECT_URI,\n    scope: SCOPES,\n    code_challenge: challenge,\n    code_challenge_method: 'S256',\n    state: verifier,\n  });\n\n  const authUrl = `${AUTHORIZE_URL}?${authParams.toString()}`;\n\n  // Notify caller with URL to open\n  onAuthUrl(authUrl);\n\n  // Wait for user to paste authorization code (format: code#state)\n  const authCode = await onPromptCode();\n  const splits = authCode.split('#');\n  const code = splits[0];\n  const state = splits[1];\n\n  // Exchange code for tokens\n  const tokenResponse = await fetch(TOKEN_URL, {\n    method: 'POST',\n    headers: {\n      'Content-Type': 'application/json',\n    },\n    body: JSON.stringify({\n      grant_type: 'authorization_code',\n      client_id: CLIENT_ID,\n      code: code,\n      state: state,\n      redirect_uri: REDIRECT_URI,\n      code_verifier: verifier,\n    }),\n  });\n\n  if (!tokenResponse.ok) {\n    const error = await tokenResponse.text();\n    throw new Error(`Token exchange failed: ${error}`);\n  }\n\n  const tokenData = (await tokenResponse.json()) as {\n    access_token: string;\n    refresh_token: string;\n    expires_in: number;\n  };\n\n  // Calculate expiry time (current time + expires_in seconds - 5 min buffer)\n  const expiresAt = Date.now() + tokenData.expires_in * 1000 - 5 * 60 * 1000;\n\n  return {\n    refresh: tokenData.refresh_token,\n    access: tokenData.access_token,\n    expires: expiresAt,\n  };\n}\n\n/**\n * Refresh Anthropic OAuth token\n */\nexport async function refreshAnthropicToken(refreshToken: string): Promise<OAuthCredentials> {\n  const response = await fetch(TOKEN_URL, {\n    method: 'POST',\n    headers: { 'Content-Type': 'application/json' },\n    body: JSON.stringify({\n      grant_type: 'refresh_token',\n      client_id: CLIENT_ID,\n      refresh_token: refreshToken,\n    }),\n  });\n\n  if (!response.ok) {\n    const error = await response.text();\n    throw new Error(`Anthropic token refresh failed: ${error}`);\n  }\n\n  const data = (await response.json()) as {\n    access_token: string;\n    refresh_token: string;\n    expires_in: number;\n  };\n\n  return {\n    refresh: data.refresh_token,\n    access: data.access_token,\n    expires: Date.now() + data.expires_in * 1000 - 5 * 60 * 1000,\n  };\n}\n\nexport const anthropicOAuthProvider: OAuthProviderInterface = {\n  id: 'anthropic',\n  name: 'Anthropic (Claude Pro/Max)',\n\n  async login(callbacks: OAuthLoginCallbacks): Promise<OAuthCredentials> {\n    return loginAnthropic(\n      url => callbacks.onAuth({ url }),\n      () => callbacks.onPrompt({ message: 'Paste the authorization code:' }),\n    );\n  },\n\n  async refreshToken(credentials: OAuthCredentials): Promise<OAuthCredentials> {\n    return refreshAnthropicToken(credentials.refresh);\n  },\n\n  getApiKey(credentials: OAuthCredentials): string {\n    return credentials.access;\n  },\n};\n"],"mappings":"AAOA,SAAS,oBAAoB;AAG7B,MAAM,SAAS,CAAC,MAAc,KAAK,CAAC;AACpC,MAAM,YAAY,OAAO,kDAAkD;AAC3E,MAAM,gBAAgB;AACtB,MAAM,YAAY;AAClB,MAAM,eAAe;AACrB,MAAM,SAAS;AAKf,eAAsB,eACpB,WACA,cAC2B;AAC3B,QAAM,EAAE,UAAU,UAAU,IAAI,MAAM,aAAa;AAGnD,QAAM,aAAa,IAAI,gBAAgB;AAAA,IACrC,MAAM;AAAA,IACN,WAAW;AAAA,IACX,eAAe;AAAA,IACf,cAAc;AAAA,IACd,OAAO;AAAA,IACP,gBAAgB;AAAA,IAChB,uBAAuB;AAAA,IACvB,OAAO;AAAA,EACT,CAAC;AAED,QAAM,UAAU,GAAG,aAAa,IAAI,WAAW,SAAS,CAAC;AAGzD,YAAU,OAAO;AAGjB,QAAM,WAAW,MAAM,aAAa;AACpC,QAAM,SAAS,SAAS,MAAM,GAAG;AACjC,QAAM,OAAO,OAAO,CAAC;AACrB,QAAM,QAAQ,OAAO,CAAC;AAGtB,QAAM,gBAAgB,MAAM,MAAM,WAAW;AAAA,IAC3C,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,gBAAgB;AAAA,IAClB;AAAA,IACA,MAAM,KAAK,UAAU;AAAA,MACnB,YAAY;AAAA,MACZ,WAAW;AAAA,MACX;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,eAAe;AAAA,IACjB,CAAC;AAAA,EACH,CAAC;AAED,MAAI,CAAC,cAAc,IAAI;AACrB,UAAM,QAAQ,MAAM,cAAc,KAAK;AACvC,UAAM,IAAI,MAAM,0BAA0B,KAAK,EAAE;AAAA,EACnD;AAEA,QAAM,YAAa,MAAM,cAAc,KAAK;AAO5C,QAAM,YAAY,KAAK,IAAI,IAAI,UAAU,aAAa,MAAO,IAAI,KAAK;AAEtE,SAAO;AAAA,IACL,SAAS,UAAU;AAAA,IACnB,QAAQ,UAAU;AAAA,IAClB,SAAS;AAAA,EACX;AACF;AAKA,eAAsB,sBAAsB,cAAiD;AAC3F,QAAM,WAAW,MAAM,MAAM,WAAW;AAAA,IACtC,QAAQ;AAAA,IACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAC9C,MAAM,KAAK,UAAU;AAAA,MACnB,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe;AAAA,IACjB,CAAC;AAAA,EACH,CAAC;AAED,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,QAAQ,MAAM,SAAS,KAAK;AAClC,UAAM,IAAI,MAAM,mCAAmC,KAAK,EAAE;AAAA,EAC5D;AAEA,QAAM,OAAQ,MAAM,SAAS,KAAK;AAMlC,SAAO;AAAA,IACL,SAAS,KAAK;AAAA,IACd,QAAQ,KAAK;AAAA,IACb,SAAS,KAAK,IAAI,IAAI,KAAK,aAAa,MAAO,IAAI,KAAK;AAAA,EAC1D;AACF;AAEO,MAAM,yBAAiD;AAAA,EAC5D,IAAI;AAAA,EACJ,MAAM;AAAA,EAEN,MAAM,MAAM,WAA2D;AACrE,WAAO;AAAA,MACL,SAAO,UAAU,OAAO,EAAE,IAAI,CAAC;AAAA,MAC/B,MAAM,UAAU,SAAS,EAAE,SAAS,gCAAgC,CAAC;AAAA,IACvE;AAAA,EACF;AAAA,EAEA,MAAM,aAAa,aAA0D;AAC3E,WAAO,sBAAsB,YAAY,OAAO;AAAA,EAClD;AAAA,EAEA,UAAU,aAAuC;AAC/C,WAAO,YAAY;AAAA,EACrB;AACF;","names":[]}

package/dist/auth/providers/github-copilot.d.ts

@@ -0,0 +1,100 @@
+/**
+ * GitHub Copilot OAuth flow
+ *
+ * Inspired by:
+ *   - pi-mono: https://github.com/badlogic/pi-mono/blob/main/packages/ai/src/utils/oauth/github-copilot.ts
+ *   - opencode: https://github.com/anomalyco/opencode/blob/dev/packages/opencode/src/plugin/github-copilot/copilot.ts
+ *
+ * Storage layout in AuthStorage:
+ *   - `refresh` holds the long-lived GitHub OAuth access token (used to mint Copilot tokens).
+ *   - `access`  holds the short-lived Copilot bearer token (~30 minutes).
+ *   - `expires` is the Copilot bearer expiry (ms epoch, with a 5-minute safety buffer).
+ *   - `enterpriseUrl` is the GitHub Enterprise hostname, or undefined for github.com.
+ */
+import type { OAuthCredentials, OAuthProviderInterface } from '../types.js';
+export type GitHubCopilotCredentials = OAuthCredentials & {
+    enterpriseUrl?: string;
+};
+export declare const COPILOT_USER_AGENT = "GitHubCopilotChat/0.35.0";
+/** Headers that Copilot endpoints expect from a VS Code-like client. */
+export declare const COPILOT_HEADERS: {
+    readonly 'User-Agent': "GitHubCopilotChat/0.35.0";
+    readonly 'Editor-Version': "vscode/1.107.0";
+    readonly 'Editor-Plugin-Version': "copilot-chat/0.35.0";
+    readonly 'Copilot-Integration-Id': "vscode-chat";
+};
+/**
+ * Normalize a user-entered Enterprise URL/domain into a hostname (e.g. `company.ghe.com`).
+ * Returns null for an empty input or an unparseable URL.
+ */
+export declare function normalizeDomain(input: string): string | null;
+/**
+ * Resolve the Copilot API base URL.
+ * Prefers the `proxy-ep` parsed from the bearer token, then falls back to enterprise/individual defaults.
+ */
+export declare function getGitHubCopilotBaseUrl(token?: string, enterpriseDomain?: string): string;
+/**
+ * Refresh the short-lived Copilot bearer token using the long-lived GitHub OAuth token.
+ *
+ * `refreshToken` here is the GitHub OAuth access token; the Copilot endpoint returns a
+ * fresh bearer token (`token`) and absolute expiry (`expires_at`, seconds since epoch).
+ */
+export declare function refreshGitHubCopilotToken(refreshToken: string, enterpriseDomain?: string, signal?: AbortSignal): Promise<GitHubCopilotCredentials>;
+/**
+ * Login with GitHub Copilot OAuth (device-code flow).
+ *
+ * Prompts for an optional GitHub Enterprise URL/domain, performs the device-code flow,
+ * then exchanges the GitHub OAuth token for a Copilot bearer token.
+ */
+export declare function loginGitHubCopilot(options: {
+    onAuth: (url: string, instructions?: string) => void;
+    onPrompt: (prompt: {
+        message: string;
+        placeholder?: string;
+        allowEmpty?: boolean;
+    }) => Promise<string>;
+    onProgress?: (message: string) => void;
+    signal?: AbortSignal;
+}): Promise<GitHubCopilotCredentials>;
+/**
+ * Filtered, normalized entry from the Copilot `/models` API.
+ *
+ * The full API payload includes a lot of capability metadata; we only keep the bits
+ * we need to expose models in `listAvailableModels()` and route requests sensibly.
+ */
+export type CopilotModelEntry = {
+    /** Stable model id (e.g. `claude-sonnet-4.5`, `gpt-4.1`). */
+    id: string;
+    /** Human-readable display name (e.g. `Claude Sonnet 4.5`). */
+    name: string;
+    /** Vendor field from the API (e.g. `Anthropic`, `OpenAI`). */
+    vendor: string;
+    /**
+     * Endpoints the model exposes (e.g. `/chat/completions`, `/responses`, `/v1/messages`).
+     * Empty when the API didn't return `supported_endpoints` for this entry.
+     */
+    supportedEndpoints: string[];
+    /** True when `supported_endpoints` includes `/v1/messages` (Anthropic-shaped Copilot model). */
+    isAnthropicShaped: boolean;
+    /** True when `capabilities.supports.vision` is true. */
+    supportsVision: boolean;
+    /** True when the model supports tool calling. */
+    supportsToolCalls: boolean;
+};
+/**
+ * Fetch the Copilot model list available to the current subscription.
+ *
+ * Hits `${baseURL}/models` with the Copilot bearer token, filters to
+ * `model_picker_enabled === true && policy.state !== 'disabled'`, and returns
+ * a normalized list. Mirrors opencode's filtering rules.
+ *
+ * Inspired by:
+ *   - opencode: https://github.com/anomalyco/opencode/blob/dev/packages/opencode/src/plugin/github-copilot/models.ts
+ */
+export declare function fetchCopilotModels(opts: {
+    baseUrl: string;
+    bearerToken: string;
+    signal?: AbortSignal;
+}): Promise<CopilotModelEntry[]>;
+export declare const githubCopilotOAuthProvider: OAuthProviderInterface;
+//# sourceMappingURL=github-copilot.d.ts.map

package/dist/auth/providers/github-copilot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-copilot.d.ts","sourceRoot":"","sources":["../../../src/auth/providers/github-copilot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAuB,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAEjG,MAAM,MAAM,wBAAwB,GAAG,gBAAgB,GAAG;IACxD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAMF,eAAO,MAAM,kBAAkB,6BAA6B,CAAC;AAE7D,wEAAwE;AACxE,eAAO,MAAM,eAAe;;;;;CAKlB,CAAC;AAyBX;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAS5D;AA0BD;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE,MAAM,GAAG,MAAM,CAOzF;AA0JD;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAC7C,YAAY,EAAE,MAAM,EACpB,gBAAgB,CAAC,EAAE,MAAM,EACzB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,wBAAwB,CAAC,CAsCnC;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE;IAChD,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACrD,QAAQ,EAAE,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACvG,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CA+BpC;AAED;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,6DAA6D;IAC7D,EAAE,EAAE,MAAM,CAAC;IACX,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,gGAAgG;IAChG,iBAAiB,EAAE,OAAO,CAAC;IAC3B,wDAAwD;IACxD,cAAc,EAAE,OAAO,CAAC;IACxB,iDAAiD;IACjD,iBAAiB,EAAE,OAAO,CAAC;CAC5B,CAAC;AAEF;;;;;;;;;GASG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CA8D/B;AAED,eAAO,MAAM,0BAA0B,EAAE,sBAqBxC,CAAC"}

package/dist/auth/providers/github-copilot.js

@@ -0,0 +1,302 @@
+const decode = (s) => atob(s);
+const CLIENT_ID = decode("SXYxLmI1MDdhMDhjODdlY2ZlOTg=");
+const COPILOT_USER_AGENT = "GitHubCopilotChat/0.35.0";
+const COPILOT_HEADERS = {
+  "User-Agent": COPILOT_USER_AGENT,
+  "Editor-Version": "vscode/1.107.0",
+  "Editor-Plugin-Version": "copilot-chat/0.35.0",
+  "Copilot-Integration-Id": "vscode-chat"
+};
+const INITIAL_POLL_INTERVAL_MULTIPLIER = 1.2;
+const SLOW_DOWN_POLL_INTERVAL_MULTIPLIER = 1.4;
+function normalizeDomain(input) {
+  const trimmed = input.trim();
+  if (!trimmed) return null;
+  try {
+    const url = trimmed.includes("://") ? new URL(trimmed) : new URL(`https://${trimmed}`);
+    return url.hostname || null;
+  } catch {
+    return null;
+  }
+}
+function getUrls(domain) {
+  return {
+    deviceCodeUrl: `https://${domain}/login/device/code`,
+    accessTokenUrl: `https://${domain}/login/oauth/access_token`,
+    copilotTokenUrl: `https://api.${domain}/copilot_internal/v2/token`
+  };
+}
+function getBaseUrlFromToken(token) {
+  const match = token.match(/proxy-ep=([^;]+)/);
+  if (!match) return null;
+  const proxyHost = match[1];
+  const apiHost = proxyHost.replace(/^proxy\./, "api.");
+  return `https://${apiHost}`;
+}
+function getGitHubCopilotBaseUrl(token, enterpriseDomain) {
+  if (token) {
+    const fromToken = getBaseUrlFromToken(token);
+    if (fromToken) return fromToken;
+  }
+  if (enterpriseDomain) return `https://copilot-api.${enterpriseDomain}`;
+  return "https://api.individual.githubcopilot.com";
+}
+async function fetchJson(url, init, signal) {
+  const response = await fetch(url, signal ? { ...init, signal } : init);
+  if (!response.ok) {
+    const text = await response.text().catch(() => "");
+    throw new Error(`${response.status} ${response.statusText}: ${text}`);
+  }
+  return response.json();
+}
+async function startDeviceFlow(domain, signal) {
+  const urls = getUrls(domain);
+  const data = await fetchJson(
+    urls.deviceCodeUrl,
+    {
+      method: "POST",
+      headers: {
+        Accept: "application/json",
+        "Content-Type": "application/x-www-form-urlencoded",
+        "User-Agent": COPILOT_USER_AGENT
+      },
+      body: new URLSearchParams({
+        client_id: CLIENT_ID,
+        scope: "read:user"
+      })
+    },
+    signal
+  );
+  if (!data || typeof data !== "object") {
+    throw new Error("Invalid device code response");
+  }
+  const obj = data;
+  const deviceCode = obj.device_code;
+  const userCode = obj.user_code;
+  const verificationUri = obj.verification_uri;
+  const interval = obj.interval;
+  const expiresIn = obj.expires_in;
+  if (typeof deviceCode !== "string" || typeof userCode !== "string" || typeof verificationUri !== "string" || typeof interval !== "number" || typeof expiresIn !== "number") {
+    throw new Error("Invalid device code response fields");
+  }
+  return {
+    device_code: deviceCode,
+    user_code: userCode,
+    verification_uri: verificationUri,
+    interval,
+    expires_in: expiresIn
+  };
+}
+function abortableSleep(ms, signal) {
+  return new Promise((resolve, reject) => {
+    if (signal?.aborted) {
+      reject(new Error("Login cancelled"));
+      return;
+    }
+    let timeout;
+    const onAbort = () => {
+      clearTimeout(timeout);
+      reject(new Error("Login cancelled"));
+    };
+    timeout = setTimeout(() => {
+      signal?.removeEventListener("abort", onAbort);
+      resolve();
+    }, ms);
+    signal?.addEventListener("abort", onAbort, { once: true });
+  });
+}
+async function pollForGitHubAccessToken(domain, deviceCode, intervalSeconds, expiresIn, signal) {
+  const urls = getUrls(domain);
+  const deadline = Date.now() + expiresIn * 1e3;
+  let intervalMs = Math.max(1e3, Math.floor(intervalSeconds * 1e3));
+  let intervalMultiplier = INITIAL_POLL_INTERVAL_MULTIPLIER;
+  let slowDownResponses = 0;
+  while (Date.now() < deadline) {
+    if (signal?.aborted) {
+      throw new Error("Login cancelled");
+    }
+    const remainingMs = deadline - Date.now();
+    const waitMs = Math.min(Math.ceil(intervalMs * intervalMultiplier), remainingMs);
+    await abortableSleep(waitMs, signal);
+    const raw = await fetchJson(
+      urls.accessTokenUrl,
+      {
+        method: "POST",
+        headers: {
+          Accept: "application/json",
+          "Content-Type": "application/x-www-form-urlencoded",
+          "User-Agent": COPILOT_USER_AGENT
+        },
+        body: new URLSearchParams({
+          client_id: CLIENT_ID,
+          device_code: deviceCode,
+          grant_type: "urn:ietf:params:oauth:grant-type:device_code"
+        })
+      },
+      signal
+    );
+    if (raw && typeof raw === "object" && typeof raw.access_token === "string") {
+      return raw.access_token;
+    }
+    if (raw && typeof raw === "object" && typeof raw.error === "string") {
+      const { error, error_description: description, interval } = raw;
+      if (error === "authorization_pending") {
+        continue;
+      }
+      if (error === "slow_down") {
+        slowDownResponses += 1;
+        intervalMs = typeof interval === "number" && interval > 0 ? interval * 1e3 : Math.max(1e3, intervalMs + 5e3);
+        intervalMultiplier = SLOW_DOWN_POLL_INTERVAL_MULTIPLIER;
+        continue;
+      }
+      const descriptionSuffix = description ? `: ${description}` : "";
+      throw new Error(`Device flow failed: ${error}${descriptionSuffix}`);
+    }
+  }
+  if (slowDownResponses > 0) {
+    throw new Error(
+      "Device flow timed out after one or more slow_down responses. This is often caused by clock drift in WSL or VM environments. Please sync or restart the VM clock and try again."
+    );
+  }
+  throw new Error("Device flow timed out");
+}
+async function refreshGitHubCopilotToken(refreshToken, enterpriseDomain, signal) {
+  const domain = enterpriseDomain || "github.com";
+  const urls = getUrls(domain);
+  const raw = await fetchJson(
+    urls.copilotTokenUrl,
+    {
+      headers: {
+        Accept: "application/json",
+        Authorization: `Bearer ${refreshToken}`,
+        ...COPILOT_HEADERS
+      }
+    },
+    signal
+  );
+  if (!raw || typeof raw !== "object") {
+    throw new Error("Invalid Copilot token response");
+  }
+  const obj = raw;
+  const token = obj.token;
+  const expiresAt = obj.expires_at;
+  if (typeof token !== "string" || typeof expiresAt !== "number") {
+    throw new Error("Invalid Copilot token response fields");
+  }
+  const credentials = {
+    refresh: refreshToken,
+    access: token,
+    // expires_at is seconds; subtract 5 minutes so we refresh before actual expiry.
+    expires: expiresAt * 1e3 - 5 * 60 * 1e3
+  };
+  if (enterpriseDomain) {
+    credentials.enterpriseUrl = enterpriseDomain;
+  }
+  return credentials;
+}
+async function loginGitHubCopilot(options) {
+  const input = await options.onPrompt({
+    message: "GitHub Enterprise URL/domain (blank for github.com)",
+    placeholder: "company.ghe.com",
+    allowEmpty: true
+  });
+  if (options.signal?.aborted) {
+    throw new Error("Login cancelled");
+  }
+  const trimmed = input.trim();
+  const enterpriseDomain = normalizeDomain(input);
+  if (trimmed && !enterpriseDomain) {
+    throw new Error("Invalid GitHub Enterprise URL/domain");
+  }
+  const domain = enterpriseDomain || "github.com";
+  const device = await startDeviceFlow(domain, options.signal);
+  options.onAuth(device.verification_uri, `Enter code: ${device.user_code}`);
+  const githubAccessToken = await pollForGitHubAccessToken(
+    domain,
+    device.device_code,
+    device.interval,
+    device.expires_in,
+    options.signal
+  );
+  options.onProgress?.("Fetching Copilot token...");
+  return refreshGitHubCopilotToken(githubAccessToken, enterpriseDomain ?? void 0, options.signal);
+}
+async function fetchCopilotModels(opts) {
+  const url = `${opts.baseUrl.replace(/\/$/, "")}/models`;
+  const response = await fetch(url, {
+    headers: {
+      Accept: "application/json",
+      Authorization: `Bearer ${opts.bearerToken}`,
+      ...COPILOT_HEADERS
+    },
+    signal: opts.signal
+  });
+  if (!response.ok) {
+    const text = await response.text().catch(() => "");
+    throw new Error(`Failed to fetch Copilot models: ${response.status} ${response.statusText}: ${text}`);
+  }
+  const json = await response.json().catch(() => null);
+  if (!json || typeof json !== "object" || !Array.isArray(json.data)) {
+    throw new Error("Invalid Copilot models response: missing `data` array");
+  }
+  const data = json.data;
+  const result = [];
+  for (const item of data) {
+    if (!item || typeof item !== "object") continue;
+    const obj = item;
+    if (obj.model_picker_enabled !== true) continue;
+    const policy = obj.policy;
+    if (policy && policy.state === "disabled") continue;
+    const id = obj.id;
+    if (typeof id !== "string" || !id) continue;
+    const name = typeof obj.name === "string" ? obj.name : id;
+    const vendor = typeof obj.vendor === "string" ? obj.vendor : "";
+    const capabilities = obj.capabilities;
+    const supports = capabilities?.supports;
+    const supportsVision = supports?.vision === true;
+    const supportsToolCalls = supports?.tool_calls === true;
+    const rawEndpoints = obj.supported_endpoints;
+    const supportedEndpoints = Array.isArray(rawEndpoints) ? rawEndpoints.filter((e) => typeof e === "string") : [];
+    const isAnthropicShaped = supportedEndpoints.includes("/v1/messages");
+    result.push({
+      id,
+      name,
+      vendor,
+      supportedEndpoints,
+      isAnthropicShaped,
+      supportsVision,
+      supportsToolCalls
+    });
+  }
+  return result;
+}
+const githubCopilotOAuthProvider = {
+  id: "github-copilot",
+  name: "GitHub Copilot",
+  async login(callbacks) {
+    return loginGitHubCopilot({
+      onAuth: (url, instructions) => callbacks.onAuth({ url, instructions }),
+      onPrompt: callbacks.onPrompt,
+      onProgress: callbacks.onProgress,
+      signal: callbacks.signal
+    });
+  },
+  async refreshToken(credentials) {
+    const creds = credentials;
+    return refreshGitHubCopilotToken(creds.refresh, creds.enterpriseUrl);
+  },
+  getApiKey(credentials) {
+    return credentials.access;
+  }
+};
+export {
+  COPILOT_HEADERS,
+  COPILOT_USER_AGENT,
+  fetchCopilotModels,
+  getGitHubCopilotBaseUrl,
+  githubCopilotOAuthProvider,
+  loginGitHubCopilot,
+  normalizeDomain,
+  refreshGitHubCopilotToken
+};
+//# sourceMappingURL=github-copilot.js.map