@modelprofile.com/authswitch 2.1.2

package/dist_ts/classes.service.js

@@ -0,0 +1,142 @@
+import * as plugins from './plugins.js';
+import { CodexHarness } from './classes.codexharness.js';
+import { OpenCodeHarness } from './classes.opencodeharness.js';
+import { ClaudeCodeHarness } from './classes.claudecodeharness.js';
+import { readAccountList } from './classes.accountlist.js';
+import { assertAuthSwitchMutation, authSwitchEnvironmentId, runAuthSwitchMutation } from './classes.operations.js';
+const publicOutcome = (outcome) => ({ lines: [...outcome.lines], problems: [...outcome.problems] });
+const publicResult = (result) => result.status === 'complete'
+    ? { status: 'complete', outcome: publicOutcome(result.outcome) }
+    : result.status === 'busy' ? { status: 'busy', message: result.message } : { status: 'unavailable' };
+const publicPrompt = (prompt) => prompt.flow === 'device'
+    ? { flow: 'device', verificationUrl: prompt.verificationUrl, userCode: prompt.userCode }
+    : { flow: 'browser', authUrl: prompt.authUrl };
+export const assertAuthSwitchServiceRequest = value => {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw new Error('Invalid authswitch request.');
+    const request = value;
+    const keys = request.action === 'login' ? ['harnessId', 'providerId', 'flow'] : request.action === 'list' ? ['harnessId']
+        : request.action === 'mutate' ? ['coordination'] : ['operationId'];
+    if (request.protocolVersion !== 1 || !['list', 'login', 'mutate', 'get', 'cancel'].includes(String(request.action))
+        || Object.keys(request).some(key => !['protocolVersion', 'action', ...keys].includes(key)))
+        throw new Error('Unsupported authswitch request.');
+    if (request.action === 'mutate') {
+        const coordination = request.coordination;
+        if (!coordination || coordination.protocolVersion !== 1 || typeof coordination.waitForIdle !== 'boolean'
+            || typeof coordination.contextId !== 'string' || !/^[a-f0-9]{64}$/.test(coordination.contextId)
+            || Object.keys(coordination).some(key => !['protocolVersion', 'contextId', 'mutation', 'waitForIdle'].includes(key)))
+            throw new Error('Invalid coordination request.');
+        assertAuthSwitchMutation(coordination.mutation);
+    }
+    else if (request.action === 'get' || request.action === 'cancel') {
+        if (typeof request.operationId !== 'string' || !/^[a-f0-9-]{36}$/.test(request.operationId))
+            throw new Error('Invalid operation ID.');
+    }
+    else if ((request.harnessId !== undefined || request.action === 'login')
+        && (typeof request.harnessId !== 'string' || !/^[a-z][a-z0-9-]{0,63}$/.test(request.harnessId)))
+        throw new Error('Invalid harness ID.');
+    if (request.action === 'login' && (typeof request.providerId !== 'string' || !/^[a-z][a-z0-9-]{0,63}$/.test(request.providerId)
+        || !['device', 'browser'].includes(String(request.flow))))
+        throw new Error('Invalid login provider or flow.');
+};
+/** Hosted account manager. Operations outlive HTTP connections and are retained briefly for polling. */
+export class AuthSwitchService {
+    harnesses;
+    coordinator;
+    operations = new Map();
+    closed = false;
+    constructor(harnesses = [new CodexHarness(), new OpenCodeHarness(), new ClaudeCodeHarness()], coordinator) {
+        this.harnesses = harnesses;
+        this.coordinator = coordinator;
+    }
+    harness(id) {
+        const harness = this.harnesses.find(item => item.id === id);
+        if (!harness)
+            throw new Error('Unknown harness.');
+        return harness;
+    }
+    snapshot(operation) { return structuredClone(operation.status); }
+    async request(request) {
+        assertAuthSwitchServiceRequest(request);
+        if (this.closed)
+            throw new Error('Account manager is closed.');
+        for (const [id, operation] of this.operations) {
+            if (operation.finishedAt !== undefined && Date.now() - operation.finishedAt > 10 * 60_000)
+                this.operations.delete(id);
+        }
+        if (request.action === 'get' || request.action === 'cancel') {
+            const operation = this.operations.get(request.operationId);
+            if (!operation)
+                throw new Error('Operation expired or belongs to another controller. Check account status before retrying.');
+            if (request.action === 'cancel') {
+                if (operation.status.state === 'pending' && !operation.status.prompt)
+                    throw new Error('Only a pending login can be cancelled.');
+                operation.cancelled = true;
+                await operation.login?.cancel();
+            }
+            return this.snapshot(operation);
+        }
+        if (this.operations.size >= 64 || [...this.operations.values()].filter(item => item.status.state === 'pending').length >= 8) {
+            throw new Error('Account manager operation limit reached. Finish pending operations before starting another.');
+        }
+        const operation = { status: { id: plugins.crypto.randomUUID(), contextId: authSwitchEnvironmentId(), state: 'pending' }, task: Promise.resolve(), cancelled: false };
+        this.operations.set(operation.status.id, operation);
+        operation.task = Promise.resolve().then(async () => {
+            switch (request.action) {
+                case 'list': {
+                    operation.status.accounts = await readAccountList(request.harnessId ? [this.harness(request.harnessId)] : this.harnesses);
+                    operation.status.loginCapabilities = this.harnesses.filter(item => item.beginLogin).map(item => ({ harnessId: item.id,
+                        providers: (item.loginProviders ?? []).map(provider => ({ providerId: provider.providerId, label: provider.label, flows: [...provider.flows] })) }));
+                    break;
+                }
+                case 'mutate': {
+                    if (request.coordination.contextId !== authSwitchEnvironmentId()) {
+                        operation.status.result = { status: 'complete', outcome: { lines: [], problems: ['AGL and authswitch use different credential locations. Use matching credential environment settings before switching.'] } };
+                        break;
+                    }
+                    const harness = this.harness(request.coordination.mutation.harnessId);
+                    const coordinated = this.coordinator ? await this.coordinator(request.coordination) : { status: 'unavailable' };
+                    operation.status.result = publicResult(coordinated.status === 'unavailable'
+                        ? { status: 'complete', outcome: await runAuthSwitchMutation(harness, request.coordination.mutation) } : coordinated);
+                    break;
+                }
+                case 'login': {
+                    const harness = this.harness(request.harnessId);
+                    if (!harness.beginLogin)
+                        throw new Error('This harness does not support hosted login.');
+                    if (!harness.loginProviders?.some(provider => provider.providerId === request.providerId && provider.flows.includes(request.flow)))
+                        throw new Error('This harness does not support that login flow.');
+                    const login = await harness.beginLogin({ providerId: request.providerId, flow: request.flow });
+                    operation.login = login;
+                    operation.status.prompt = publicPrompt(login.prompt);
+                    if (operation.cancelled || this.closed)
+                        await login.cancel();
+                    try {
+                        const result = await login.completion;
+                        operation.status.result = { status: 'complete', outcome: publicOutcome(result.outcome) };
+                        operation.status.account = result.account ? { id: result.account.id, label: result.account.label, slotId: result.account.slotId } : undefined;
+                    }
+                    finally {
+                        await login.close();
+                        operation.login = undefined;
+                    }
+                    break;
+                }
+            }
+            operation.status.state = 'complete';
+        }).catch(() => {
+            operation.status.state = 'failed';
+            operation.status.error = 'Account operation failed. Check account and runtime status before retrying.';
+        }).finally(() => { operation.finishedAt = Date.now(); });
+        return this.snapshot(operation);
+    }
+    async close() {
+        this.closed = true;
+        await Promise.allSettled([...this.operations.values()].map(async (operation) => {
+            operation.cancelled = true;
+            await operation.login?.cancel();
+        }));
+        await Promise.all([...this.operations.values()].map(operation => operation.task));
+    }
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY2xhc3Nlcy5zZXJ2aWNlLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvY2xhc3Nlcy5zZXJ2aWNlLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLE9BQU8sS0FBSyxPQUFPLE1BQU0sY0FBYyxDQUFDO0FBQ3hDLE9BQU8sRUFBRSxZQUFZLEVBQUUsTUFBTSwyQkFBMkIsQ0FBQztBQUN6RCxPQUFPLEVBQUUsZUFBZSxFQUFFLE1BQU0sOEJBQThCLENBQUM7QUFDL0QsT0FBTyxFQUFFLGlCQUFpQixFQUFFLE1BQU0sZ0NBQWdDLENBQUM7QUFDbkUsT0FBTyxFQUFFLGVBQWUsRUFBRSxNQUFNLDBCQUEwQixDQUFDO0FBQzNELE9BQU8sRUFBRSx3QkFBd0IsRUFBRSx1QkFBdUIsRUFBRSxxQkFBcUIsRUFBd0csTUFBTSx5QkFBeUIsQ0FBQztBQStCek4sTUFBTSxhQUFhLEdBQUcsQ0FBQyxPQUF3QixFQUFtQixFQUFFLENBQUMsQ0FBQyxFQUFFLEtBQUssRUFBRSxDQUFDLEdBQUcsT0FBTyxDQUFDLEtBQUssQ0FBQyxFQUFFLFFBQVEsRUFBRSxDQUFDLEdBQUcsT0FBTyxDQUFDLFFBQVEsQ0FBQyxFQUFFLENBQUMsQ0FBQztBQUN0SSxNQUFNLFlBQVksR0FBRyxDQUFDLE1BQXFDLEVBQWlDLEVBQUUsQ0FBQyxNQUFNLENBQUMsTUFBTSxLQUFLLFVBQVU7SUFDekgsQ0FBQyxDQUFDLEVBQUUsTUFBTSxFQUFFLFVBQVUsRUFBRSxPQUFPLEVBQUUsYUFBYSxDQUFDLE1BQU0sQ0FBQyxPQUFPLENBQUMsRUFBRTtJQUNoRSxDQUFDLENBQUMsTUFBTSxDQUFDLE1BQU0sS0FBSyxNQUFNLENBQUMsQ0FBQyxDQUFDLEVBQUUsTUFBTSxFQUFFLE1BQU0sRUFBRSxPQUFPLEVBQUUsTUFBTSxDQUFDLE9BQU8sRUFBRSxDQUFDLENBQUMsQ0FBQyxFQUFFLE1BQU0sRUFBRSxhQUFhLEVBQUUsQ0FBQztBQUN2RyxNQUFNLFlBQVksR0FBRyxDQUFDLE1BQXdCLEVBQW9CLEVBQUUsQ0FBQyxNQUFNLENBQUMsSUFBSSxLQUFLLFFBQVE7SUFDM0YsQ0FBQyxDQUFDLEVBQUUsSUFBSSxFQUFFLFFBQVEsRUFBRSxlQUFlLEVBQUUsTUFBTSxDQUFDLGVBQWUsRUFBRSxRQUFRLEVBQUUsTUFBTSxDQUFDLFFBQVEsRUFBRTtJQUN4RixDQUFDLENBQUMsRUFBRSxJQUFJLEVBQUUsU0FBUyxFQUFFLE9BQU8sRUFBRSxNQUFNLENBQUMsT0FBTyxFQUFFLENBQUM7QUFFakQsTUFBTSxDQUFDLE1BQU0sOEJBQThCLEdBQW1FLEtBQUssQ0FBQyxFQUFFO0lBQ3BILElBQUksQ0FBQyxLQUFLLElBQUksT0FBTyxLQUFLLEtBQUssUUFBUSxJQUFJLEtBQUssQ0FBQyxPQUFPLENBQUMsS0FBSyxDQUFDO1FBQUUsTUFBTSxJQUFJLEtBQUssQ0FBQyw2QkFBNkIsQ0FBQyxDQUFDO0lBQ2hILE1BQU0sT0FBTyxHQUFHLEtBQWdDLENBQUM7SUFDakQsTUFBTSxJQUFJLEdBQUcsT0FBTyxDQUFDLE1BQU0sS0FBSyxPQUFPLENBQUMsQ0FBQyxDQUFDLENBQUMsV0FBVyxFQUFFLFlBQVksRUFBRSxNQUFNLENBQUMsQ0FBQyxDQUFDLENBQUMsT0FBTyxDQUFDLE1BQU0sS0FBSyxNQUFNLENBQUMsQ0FBQyxDQUFDLENBQUMsV0FBVyxDQUFDO1FBQ3ZILENBQUMsQ0FBQyxPQUFPLENBQUMsTUFBTSxLQUFLLFFBQVEsQ0FBQyxDQUFDLENBQUMsQ0FBQyxjQUFjLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxhQUFhLENBQUMsQ0FBQztJQUNyRSxJQUFJLE9BQU8sQ0FBQyxlQUFlLEtBQUssQ0FBQyxJQUFJLENBQUMsQ0FBQyxNQUFNLEVBQUUsT0FBTyxFQUFFLFFBQVEsRUFBRSxLQUFLLEVBQUUsUUFBUSxDQUFDLENBQUMsUUFBUSxDQUFDLE1BQU0sQ0FBQyxPQUFPLENBQUMsTUFBTSxDQUFDLENBQUM7V0FDOUcsTUFBTSxDQUFDLElBQUksQ0FBQyxPQUFPLENBQUMsQ0FBQyxJQUFJLENBQUMsR0FBRyxDQUFDLEVBQUUsQ0FBQyxDQUFDLENBQUMsaUJBQWlCLEVBQUUsUUFBUSxFQUFFLEdBQUcsSUFBSSxDQUFDLENBQUMsUUFBUSxDQUFDLEdBQUcsQ0FBQyxDQUFDO1FBQUUsTUFBTSxJQUFJLEtBQUssQ0FBQyxpQ0FBaUMsQ0FBQyxDQUFDO0lBQ2pKLElBQUksT0FBTyxDQUFDLE1BQU0sS0FBSyxRQUFRLEVBQUUsQ0FBQztRQUNoQyxNQUFNLFlBQVksR0FBRyxPQUFPLENBQUMsWUFBMEQsQ0FBQztRQUN4RixJQUFJLENBQUMsWUFBWSxJQUFJLFlBQVksQ0FBQyxlQUFlLEtBQUssQ0FBQyxJQUFJLE9BQU8sWUFBWSxDQUFDLFdBQVcsS0FBSyxTQUFTO2VBQ25HLE9BQU8sWUFBWSxDQUFDLFNBQVMsS0FBSyxRQUFRLElBQUksQ0FBQyxnQkFBZ0IsQ0FBQyxJQUFJLENBQUMsWUFBWSxDQUFDLFNBQVMsQ0FBQztlQUM1RixNQUFNLENBQUMsSUFBSSxDQUFDLFlBQVksQ0FBQyxDQUFDLElBQUksQ0FBQyxHQUFHLENBQUMsRUFBRSxDQUFDLENBQUMsQ0FBQyxpQkFBaUIsRUFBRSxXQUFXLEVBQUUsVUFBVSxFQUFFLGFBQWEsQ0FBQyxDQUFDLFFBQVEsQ0FBQyxHQUFHLENBQUMsQ0FBQztZQUFFLE1BQU0sSUFBSSxLQUFLLENBQUMsK0JBQStCLENBQUMsQ0FBQztRQUN6Syx3QkFBd0IsQ0FBQyxZQUFZLENBQUMsUUFBUSxDQUFDLENBQUM7SUFDbEQsQ0FBQztTQUFNLElBQUksT0FBTyxDQUFDLE1BQU0sS0FBSyxLQUFLLElBQUksT0FBTyxDQUFDLE1BQU0sS0FBSyxRQUFRLEVBQUUsQ0FBQztRQUNuRSxJQUFJLE9BQU8sT0FBTyxDQUFDLFdBQVcsS0FBSyxRQUFRLElBQUksQ0FBQyxpQkFBaUIsQ0FBQyxJQUFJLENBQUMsT0FBTyxDQUFDLFdBQVcsQ0FBQztZQUFFLE1BQU0sSUFBSSxLQUFLLENBQUMsdUJBQXVCLENBQUMsQ0FBQztJQUN4SSxDQUFDO1NBQU0sSUFBSSxDQUFDLE9BQU8sQ0FBQyxTQUFTLEtBQUssU0FBUyxJQUFJLE9BQU8sQ0FBQyxNQUFNLEtBQUssT0FBTyxDQUFDO1dBQ3JFLENBQUMsT0FBTyxPQUFPLENBQUMsU0FBUyxLQUFLLFFBQVEsSUFBSSxDQUFDLHdCQUF3QixDQUFDLElBQUksQ0FBQyxPQUFPLENBQUMsU0FBUyxDQUFDLENBQUM7UUFBRSxNQUFNLElBQUksS0FBSyxDQUFDLHFCQUFxQixDQUFDLENBQUM7SUFDMUksSUFBSSxPQUFPLENBQUMsTUFBTSxLQUFLLE9BQU8sSUFBSSxDQUFDLE9BQU8sT0FBTyxDQUFDLFVBQVUsS0FBSyxRQUFRLElBQUksQ0FBQyx3QkFBd0IsQ0FBQyxJQUFJLENBQUMsT0FBTyxDQUFDLFVBQVUsQ0FBQztXQUMxSCxDQUFDLENBQUMsUUFBUSxFQUFFLFNBQVMsQ0FBQyxDQUFDLFFBQVEsQ0FBQyxNQUFNLENBQUMsT0FBTyxDQUFDLElBQUksQ0FBQyxDQUFDLENBQUM7UUFBRSxNQUFNLElBQUksS0FBSyxDQUFDLGlDQUFpQyxDQUFDLENBQUM7QUFDbEgsQ0FBQyxDQUFDO0FBRUYsd0dBQXdHO0FBQ3hHLE1BQU0sT0FBTyxpQkFBaUI7SUFJVDtJQUNBO0lBSkYsVUFBVSxHQUFHLElBQUksR0FBRyxFQUFzQixDQUFDO0lBQ3BELE1BQU0sR0FBRyxLQUFLLENBQUM7SUFDdkIsWUFDbUIsWUFBNEIsQ0FBQyxJQUFJLFlBQVksRUFBRSxFQUFFLElBQUksZUFBZSxFQUFFLEVBQUUsSUFBSSxpQkFBaUIsRUFBRSxDQUFDLEVBQ2hHLFdBQW9DO1FBRHBDLGNBQVMsR0FBVCxTQUFTLENBQXVGO1FBQ2hHLGdCQUFXLEdBQVgsV0FBVyxDQUF5QjtJQUNwRCxDQUFDO0lBQ0ksT0FBTyxDQUFDLEVBQVU7UUFDeEIsTUFBTSxPQUFPLEdBQUcsSUFBSSxDQUFDLFNBQVMsQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDLEVBQUUsQ0FBQyxJQUFJLENBQUMsRUFBRSxLQUFLLEVBQUUsQ0FBQyxDQUFDO1FBQzVELElBQUksQ0FBQyxPQUFPO1lBQUUsTUFBTSxJQUFJLEtBQUssQ0FBQyxrQkFBa0IsQ0FBQyxDQUFDO1FBQ2xELE9BQU8sT0FBTyxDQUFDO0lBQ2pCLENBQUM7SUFDTyxRQUFRLENBQUMsU0FBcUIsSUFBaUMsT0FBTyxlQUFlLENBQUMsU0FBUyxDQUFDLE1BQU0sQ0FBQyxDQUFDLENBQUMsQ0FBQztJQUMzRyxLQUFLLENBQUMsT0FBTyxDQUFDLE9BQWtDO1FBQ3JELDhCQUE4QixDQUFDLE9BQU8sQ0FBQyxDQUFDO1FBQ3hDLElBQUksSUFBSSxDQUFDLE1BQU07WUFBRSxNQUFNLElBQUksS0FBSyxDQUFDLDRCQUE0QixDQUFDLENBQUM7UUFDL0QsS0FBSyxNQUFNLENBQUMsRUFBRSxFQUFFLFNBQVMsQ0FBQyxJQUFJLElBQUksQ0FBQyxVQUFVLEVBQUUsQ0FBQztZQUM5QyxJQUFJLFNBQVMsQ0FBQyxVQUFVLEtBQUssU0FBUyxJQUFJLElBQUksQ0FBQyxHQUFHLEVBQUUsR0FBRyxTQUFTLENBQUMsVUFBVSxHQUFHLEVBQUUsR0FBRyxNQUFNO2dCQUFFLElBQUksQ0FBQyxVQUFVLENBQUMsTUFBTSxDQUFDLEVBQUUsQ0FBQyxDQUFDO1FBQ3hILENBQUM7UUFDRCxJQUFJLE9BQU8sQ0FBQyxNQUFNLEtBQUssS0FBSyxJQUFJLE9BQU8sQ0FBQyxNQUFNLEtBQUssUUFBUSxFQUFFLENBQUM7WUFDNUQsTUFBTSxTQUFTLEdBQUcsSUFBSSxDQUFDLFVBQVUsQ0FBQyxHQUFHLENBQUMsT0FBTyxDQUFDLFdBQVcsQ0FBQyxDQUFDO1lBQzNELElBQUksQ0FBQyxTQUFTO2dCQUFFLE1BQU0sSUFBSSxLQUFLLENBQUMsMkZBQTJGLENBQUMsQ0FBQztZQUM3SCxJQUFJLE9BQU8sQ0FBQyxNQUFNLEtBQUssUUFBUSxFQUFFLENBQUM7Z0JBQ2hDLElBQUksU0FBUyxDQUFDLE1BQU0sQ0FBQyxLQUFLLEtBQUssU0FBUyxJQUFJLENBQUMsU0FBUyxDQUFDLE1BQU0sQ0FBQyxNQUFNO29CQUFFLE1BQU0sSUFBSSxLQUFLLENBQUMsd0NBQXdDLENBQUMsQ0FBQztnQkFDaEksU0FBUyxDQUFDLFNBQVMsR0FBRyxJQUFJLENBQUM7Z0JBQzNCLE1BQU0sU0FBUyxDQUFDLEtBQUssRUFBRSxNQUFNLEVBQUUsQ0FBQztZQUNsQyxDQUFDO1lBQ0QsT0FBTyxJQUFJLENBQUMsUUFBUSxDQUFDLFNBQVMsQ0FBQyxDQUFDO1FBQ2xDLENBQUM7UUFDRCxJQUFJLElBQUksQ0FBQyxVQUFVLENBQUMsSUFBSSxJQUFJLEVBQUUsSUFBSSxDQUFDLEdBQUcsSUFBSSxDQUFDLFVBQVUsQ0FBQyxNQUFNLEVBQUUsQ0FBQyxDQUFDLE1BQU0sQ0FBQyxJQUFJLENBQUMsRUFBRSxDQUFDLElBQUksQ0FBQyxNQUFNLENBQUMsS0FBSyxLQUFLLFNBQVMsQ0FBQyxDQUFDLE1BQU0sSUFBSSxDQUFDLEVBQUUsQ0FBQztZQUM1SCxNQUFNLElBQUksS0FBSyxDQUFDLDZGQUE2RixDQUFDLENBQUM7UUFDakgsQ0FBQztRQUNELE1BQU0sU0FBUyxHQUFlLEVBQUUsTUFBTSxFQUFFLEVBQUUsRUFBRSxFQUFFLE9BQU8sQ0FBQyxNQUFNLENBQUMsVUFBVSxFQUFFLEVBQUUsU0FBUyxFQUFFLHVCQUF1QixFQUFFLEVBQUUsS0FBSyxFQUFFLFNBQVMsRUFBRSxFQUFFLElBQUksRUFBRSxPQUFPLENBQUMsT0FBTyxFQUFFLEVBQUUsU0FBUyxFQUFFLEtBQUssRUFBRSxDQUFDO1FBQ2pMLElBQUksQ0FBQyxVQUFVLENBQUMsR0FBRyxDQUFDLFNBQVMsQ0FBQyxNQUFNLENBQUMsRUFBRSxFQUFFLFNBQVMsQ0FBQyxDQUFDO1FBQ3BELFNBQVMsQ0FBQyxJQUFJLEdBQUcsT0FBTyxDQUFDLE9BQU8sRUFBRSxDQUFDLElBQUksQ0FBQyxLQUFLLElBQUksRUFBRTtZQUNqRCxRQUFRLE9BQU8sQ0FBQyxNQUFNLEVBQUUsQ0FBQztnQkFDdkIsS0FBSyxNQUFNLENBQUMsQ0FBQyxDQUFDO29CQUNaLFNBQVMsQ0FBQyxNQUFNLENBQUMsUUFBUSxHQUFHLE1BQU0sZUFBZSxDQUFDLE9BQU8sQ0FBQyxTQUFTLENBQUMsQ0FBQyxDQUFDLENBQUMsSUFBSSxDQUFDLE9BQU8sQ0FBQyxPQUFPLENBQUMsU0FBUyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsSUFBSSxDQUFDLFNBQVMsQ0FBQyxDQUFDO29CQUMxSCxTQUFTLENBQUMsTUFBTSxDQUFDLGlCQUFpQixHQUFHLElBQUksQ0FBQyxTQUFTLENBQUMsTUFBTSxDQUFDLElBQUksQ0FBQyxFQUFFLENBQUMsSUFBSSxDQUFDLFVBQVUsQ0FBQyxDQUFDLEdBQUcsQ0FBQyxJQUFJLENBQUMsRUFBRSxDQUFDLENBQUMsRUFBRSxTQUFTLEVBQUUsSUFBSSxDQUFDLEVBQUU7d0JBQ25ILFNBQVMsRUFBRSxDQUFDLElBQUksQ0FBQyxjQUFjLElBQUksRUFBRSxDQUFDLENBQUMsR0FBRyxDQUFDLFFBQVEsQ0FBQyxFQUFFLENBQUMsQ0FBQyxFQUFFLFVBQVUsRUFBRSxRQUFRLENBQUMsVUFBVSxFQUFFLEtBQUssRUFBRSxRQUFRLENBQUMsS0FBSyxFQUFFLEtBQUssRUFBRSxDQUFDLEdBQUcsUUFBUSxDQUFDLEtBQUssQ0FBQyxFQUFFLENBQUMsQ0FBQyxFQUFFLENBQUMsQ0FBQyxDQUFDO29CQUN2SixNQUFNO2dCQUNSLENBQUM7Z0JBQ0QsS0FBSyxRQUFRLENBQUMsQ0FBQyxDQUFDO29CQUNkLElBQUksT0FBTyxDQUFDLFlBQVksQ0FBQyxTQUFTLEtBQUssdUJBQXVCLEVBQUUsRUFBRSxDQUFDO3dCQUNqRSxTQUFTLENBQUMsTUFBTSxDQUFDLE1BQU0sR0FBRyxFQUFFLE1BQU0sRUFBRSxVQUFVLEVBQUUsT0FBTyxFQUFFLEVBQUUsS0FBSyxFQUFFLEVBQUUsRUFBRSxRQUFRLEVBQUUsQ0FBQyx1SEFBdUgsQ0FBQyxFQUFFLEVBQUUsQ0FBQzt3QkFDOU0sTUFBTTtvQkFDUixDQUFDO29CQUNELE1BQU0sT0FBTyxHQUFHLElBQUksQ0FBQyxPQUFPLENBQUMsT0FBTyxDQUFDLFlBQVksQ0FBQyxRQUFRLENBQUMsU0FBUyxDQUFDLENBQUM7b0JBQ3RFLE1BQU0sV0FBVyxHQUFHLElBQUksQ0FBQyxXQUFXLENBQUMsQ0FBQyxDQUFDLE1BQU0sSUFBSSxDQUFDLFdBQVcsQ0FBQyxPQUFPLENBQUMsWUFBWSxDQUFDLENBQUMsQ0FBQyxDQUFDLEVBQUUsTUFBTSxFQUFFLGFBQWEsRUFBVyxDQUFDO29CQUN6SCxTQUFTLENBQUMsTUFBTSxDQUFDLE1BQU0sR0FBRyxZQUFZLENBQUMsV0FBVyxDQUFDLE1BQU0sS0FBSyxhQUFhO3dCQUN6RSxDQUFDLENBQUMsRUFBRSxNQUFNLEVBQUUsVUFBVSxFQUFFLE9BQU8sRUFBRSxNQUFNLHFCQUFxQixDQUFDLE9BQU8sRUFBRSxPQUFPLENBQUMsWUFBWSxDQUFDLFFBQVEsQ0FBQyxFQUFFLENBQUMsQ0FBQyxDQUFDLFdBQVcsQ0FBQyxDQUFDO29CQUN4SCxNQUFNO2dCQUNSLENBQUM7Z0JBQ0QsS0FBSyxPQUFPLENBQUMsQ0FBQyxDQUFDO29CQUNiLE1BQU0sT0FBTyxHQUFHLElBQUksQ0FBQyxPQUFPLENBQUMsT0FBTyxDQUFDLFNBQVMsQ0FBQyxDQUFDO29CQUNoRCxJQUFJLENBQUMsT0FBTyxDQUFDLFVBQVU7d0JBQUUsTUFBTSxJQUFJLEtBQUssQ0FBQyw2Q0FBNkMsQ0FBQyxDQUFDO29CQUN4RixJQUFJLENBQUMsT0FBTyxDQUFDLGNBQWMsRUFBRSxJQUFJLENBQUMsUUFBUSxDQUFDLEVBQUUsQ0FBQyxRQUFRLENBQUMsVUFBVSxLQUFLLE9BQU8sQ0FBQyxVQUFVLElBQUksUUFBUSxDQUFDLEtBQUssQ0FBQyxRQUFRLENBQUMsT0FBTyxDQUFDLElBQUksQ0FBQyxDQUFDO3dCQUFFLE1BQU0sSUFBSSxLQUFLLENBQUMsZ0RBQWdELENBQUMsQ0FBQztvQkFDdE0sTUFBTSxLQUFLLEdBQUcsTUFBTSxPQUFPLENBQUMsVUFBVSxDQUFDLEVBQUUsVUFBVSxFQUFFLE9BQU8sQ0FBQyxVQUFVLEVBQUUsSUFBSSxFQUFFLE9BQU8sQ0FBQyxJQUFJLEVBQUUsQ0FBQyxDQUFDO29CQUMvRixTQUFTLENBQUMsS0FBSyxHQUFHLEtBQUssQ0FBQztvQkFDeEIsU0FBUyxDQUFDLE1BQU0sQ0FBQyxNQUFNLEdBQUcsWUFBWSxDQUFDLEtBQUssQ0FBQyxNQUFNLENBQUMsQ0FBQztvQkFDckQsSUFBSSxTQUFTLENBQUMsU0FBUyxJQUFJLElBQUksQ0FBQyxNQUFNO3dCQUFFLE1BQU0sS0FBSyxDQUFDLE1BQU0sRUFBRSxDQUFDO29CQUM3RCxJQUFJLENBQUM7d0JBQ0gsTUFBTSxNQUFNLEdBQUcsTUFBTSxLQUFLLENBQUMsVUFBVSxDQUFDO3dCQUN0QyxTQUFTLENBQUMsTUFBTSxDQUFDLE1BQU0sR0FBRyxFQUFFLE1BQU0sRUFBRSxVQUFVLEVBQUUsT0FBTyxFQUFFLGFBQWEsQ0FBQyxNQUFNLENBQUMsT0FBTyxDQUFDLEVBQUUsQ0FBQzt3QkFDekYsU0FBUyxDQUFDLE1BQU0sQ0FBQyxPQUFPLEdBQUcsTUFBTSxDQUFDLE9BQU8sQ0FBQyxDQUFDLENBQUMsRUFBRSxFQUFFLEVBQUUsTUFBTSxDQUFDLE9BQU8sQ0FBQyxFQUFFLEVBQUUsS0FBSyxFQUFFLE1BQU0sQ0FBQyxPQUFPLENBQUMsS0FBSyxFQUFFLE1BQU0sRUFBRSxNQUFNLENBQUMsT0FBTyxDQUFDLE1BQU0sRUFBRSxDQUFDLENBQUMsQ0FBQyxTQUFTLENBQUM7b0JBQ2hKLENBQUM7NEJBQ08sQ0FBQzt3QkFBQyxNQUFNLEtBQUssQ0FBQyxLQUFLLEVBQUUsQ0FBQzt3QkFBQyxTQUFTLENBQUMsS0FBSyxHQUFHLFNBQVMsQ0FBQztvQkFBQyxDQUFDO29CQUM3RCxNQUFNO2dCQUNSLENBQUM7WUFDSCxDQUFDO1lBQ0QsU0FBUyxDQUFDLE1BQU0sQ0FBQyxLQUFLLEdBQUcsVUFBVSxDQUFDO1FBQ3RDLENBQUMsQ0FBQyxDQUFDLEtBQUssQ0FBQyxHQUFHLEVBQUU7WUFDWixTQUFTLENBQUMsTUFBTSxDQUFDLEtBQUssR0FBRyxRQUFRLENBQUM7WUFDbEMsU0FBUyxDQUFDLE1BQU0sQ0FBQyxLQUFLLEdBQUcsNkVBQTZFLENBQUM7UUFDekcsQ0FBQyxDQUFDLENBQUMsT0FBTyxDQUFDLEdBQUcsRUFBRSxHQUFHLFNBQVMsQ0FBQyxVQUFVLEdBQUcsSUFBSSxDQUFDLEdBQUcsRUFBRSxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUM7UUFDekQsT0FBTyxJQUFJLENBQUMsUUFBUSxDQUFDLFNBQVMsQ0FBQyxDQUFDO0lBQ2xDLENBQUM7SUFDTSxLQUFLLENBQUMsS0FBSztRQUNoQixJQUFJLENBQUMsTUFBTSxHQUFHLElBQUksQ0FBQztRQUNuQixNQUFNLE9BQU8sQ0FBQyxVQUFVLENBQUMsQ0FBQyxHQUFHLElBQUksQ0FBQyxVQUFVLENBQUMsTUFBTSxFQUFFLENBQUMsQ0FBQyxHQUFHLENBQUMsS0FBSyxFQUFDLFNBQVMsRUFBQyxFQUFFO1lBQzNFLFNBQVMsQ0FBQyxTQUFTLEdBQUcsSUFBSSxDQUFDO1lBQzNCLE1BQU0sU0FBUyxDQUFDLEtBQUssRUFBRSxNQUFNLEVBQUUsQ0FBQztRQUNsQyxDQUFDLENBQUMsQ0FBQyxDQUFDO1FBQ0osTUFBTSxPQUFPLENBQUMsR0FBRyxDQUFDLENBQUMsR0FBRyxJQUFJLENBQUMsVUFBVSxDQUFDLE1BQU0sRUFBRSxDQUFDLENBQUMsR0FBRyxDQUFDLFNBQVMsQ0FBQyxFQUFFLENBQUMsU0FBUyxDQUFDLElBQUksQ0FBQyxDQUFDLENBQUM7SUFDcEYsQ0FBQztDQUNGIn0=

package/dist_ts/classes.stashstore.d.ts

@@ -0,0 +1,63 @@
+import type { ICodexIdentity, IRemoteControlEnrollment, IStashEntry, THarnessName } from './interfaces.js';
+/**
+ * Filesystem-backed store for Codex credentials and enrollment metadata.
+ * Other harness adapters own their storage format; this is not a universal auth schema.
+ *
+ * A stash is deliberately a directory of files rather than a database: the thing
+ * being stored *is* a credential file, the store must survive with no services
+ * running, and it must be greppable and removable by hand when something goes
+ * wrong. Everything is written owner-only.
+ */
+export declare class StashStore {
+    readonly rootDir: string;
+    readonly harness: THarnessName;
+    constructor(harnessArg: THarnessName, rootDirArg?: string);
+    /**
+     * Turns an account email into a directory name that is safe on every
+     * filesystem while staying readable, so `ls ~/.authswitch/codex` is useful.
+     */
+    slugFor(emailArg: string): string;
+    entryDir(emailArg: string): string;
+    has(emailArg: string): boolean;
+    /**
+     * Writes a credential and its remote-control enrollments under the account email,
+     * replacing any existing stash for the same account.
+     *
+     * Both files go through an atomic temp-and-rename, and the metadata is written
+     * last: a crash mid-write therefore leaves either the previous complete stash
+     * or a credential whose metadata is still the old one, never a directory that
+     * `list()` skips because its metadata never arrived. The caller is expected to
+     * verify with `readBack()` before destroying the original.
+     */
+    write(identityArg: ICodexIdentity, rawAuthArg: string, enrollmentsArg: IRemoteControlEnrollment[], codexHomeArg: string): IStashEntry;
+    /**
+     * Reads a stash back and confirms it matches what was meant to be written.
+     * Callers use this before clearing the active credential, so a stash is only
+     * ever trusted once it has been proven readable.
+     */
+    readBack(emailArg: string, expectedAuthArg: string): boolean;
+    readMeta(emailArg: string): IStashEntry | null;
+    readAuth(emailArg: string): string | null;
+    /** Every stash, newest first. Unreadable directories are skipped, not fatal. */
+    list(): IStashEntry[];
+    /**
+     * Directories under the stash root that hold a credential but no readable
+     * metadata -- the shape an interrupted write would leave behind. Reported by
+     * `doctor` so they are visible rather than silently skipped by `list()`.
+     */
+    incomplete(): string[];
+    /**
+     * Resolves a user-supplied account reference to a stashed email.
+     *
+     * Accepts the exact email, the directory slug, the local part, or a prefix.
+     * Deliberately not a substring match: this reference selects which credential
+     * becomes active, so an incidental substring hit would activate an account the
+     * user never named.
+     */
+    resolve(referenceArg: string): {
+        email: string;
+    } | {
+        candidates: string[];
+    };
+    remove(emailArg: string): boolean;
+}

package/dist_ts/classes.stashstore.js

@@ -0,0 +1,192 @@
+import * as plugins from './plugins.js';
+import { writeSecretFileAtomically } from './helpers.js';
+const AUTH_FILE_NAME = 'auth.json';
+const META_FILE_NAME = 'stash.json';
+/**
+ * Filesystem-backed store for Codex credentials and enrollment metadata.
+ * Other harness adapters own their storage format; this is not a universal auth schema.
+ *
+ * A stash is deliberately a directory of files rather than a database: the thing
+ * being stored *is* a credential file, the store must survive with no services
+ * running, and it must be greppable and removable by hand when something goes
+ * wrong. Everything is written owner-only.
+ */
+export class StashStore {
+    rootDir;
+    harness;
+    constructor(harnessArg, rootDirArg) {
+        if (!/^[a-z][a-z0-9-]*$/.test(harnessArg)) {
+            throw new Error('invalid harness namespace');
+        }
+        this.harness = harnessArg;
+        const base = rootDirArg ??
+            process.env.AUTHSWITCH_HOME ??
+            plugins.path.join(plugins.os.homedir(), '.authswitch');
+        this.rootDir = plugins.path.join(base, harnessArg);
+    }
+    /**
+     * Turns an account email into a directory name that is safe on every
+     * filesystem while staying readable, so `ls ~/.authswitch/codex` is useful.
+     */
+    slugFor(emailArg) {
+        const slug = emailArg
+            .toLowerCase()
+            .replace(/[^a-z0-9._@+-]+/g, '_')
+            .replace(/^[._]+|[._]+$/g, '');
+        if (slug.length === 0) {
+            throw new Error(`cannot derive a stash name from "${emailArg}"`);
+        }
+        return slug;
+    }
+    entryDir(emailArg) {
+        return plugins.path.join(this.rootDir, this.slugFor(emailArg));
+    }
+    has(emailArg) {
+        return plugins.fs.existsSync(plugins.path.join(this.entryDir(emailArg), META_FILE_NAME));
+    }
+    /**
+     * Writes a credential and its remote-control enrollments under the account email,
+     * replacing any existing stash for the same account.
+     *
+     * Both files go through an atomic temp-and-rename, and the metadata is written
+     * last: a crash mid-write therefore leaves either the previous complete stash
+     * or a credential whose metadata is still the old one, never a directory that
+     * `list()` skips because its metadata never arrived. The caller is expected to
+     * verify with `readBack()` before destroying the original.
+     */
+    write(identityArg, rawAuthArg, enrollmentsArg, codexHomeArg) {
+        const previous = this.readMeta(identityArg.email);
+        if (previous && (previous.email !== identityArg.email || previous.accountId !== identityArg.accountId || previous.kind !== identityArg.kind)) {
+            throw new Error('a different Codex account already occupies this email-based stash; refusing to replace its credential');
+        }
+        const dir = this.entryDir(identityArg.email);
+        plugins.fs.mkdirSync(this.rootDir, { recursive: true, mode: 0o700 });
+        plugins.fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+        // mkdirSync's mode is subject to the umask and is ignored for a directory
+        // that already exists, so tighten both levels explicitly.
+        plugins.fs.chmodSync(this.rootDir, 0o700);
+        plugins.fs.chmodSync(dir, 0o700);
+        const entry = {
+            email: identityArg.email,
+            kind: identityArg.kind,
+            accountId: identityArg.accountId,
+            planType: identityArg.planType,
+            userId: identityArg.userId,
+            stashedAt: new Date().toISOString(),
+            codexHome: codexHomeArg,
+            enrollments: enrollmentsArg,
+        };
+        writeSecretFileAtomically(plugins.path.join(dir, AUTH_FILE_NAME), rawAuthArg);
+        writeSecretFileAtomically(plugins.path.join(dir, META_FILE_NAME), `${JSON.stringify(entry, null, 2)}\n`);
+        return entry;
+    }
+    /**
+     * Reads a stash back and confirms it matches what was meant to be written.
+     * Callers use this before clearing the active credential, so a stash is only
+     * ever trusted once it has been proven readable.
+     */
+    readBack(emailArg, expectedAuthArg) {
+        const meta = this.readMeta(emailArg);
+        const auth = this.readAuth(emailArg);
+        return meta !== null && auth === expectedAuthArg;
+    }
+    readMeta(emailArg) {
+        const metaPath = plugins.path.join(this.entryDir(emailArg), META_FILE_NAME);
+        if (!plugins.fs.existsSync(metaPath)) {
+            return null;
+        }
+        try {
+            return JSON.parse(plugins.fs.readFileSync(metaPath, 'utf8'));
+        }
+        catch {
+            return null;
+        }
+    }
+    readAuth(emailArg) {
+        const authPath = plugins.path.join(this.entryDir(emailArg), AUTH_FILE_NAME);
+        if (!plugins.fs.existsSync(authPath)) {
+            return null;
+        }
+        return plugins.fs.readFileSync(authPath, 'utf8');
+    }
+    /** Every stash, newest first. Unreadable directories are skipped, not fatal. */
+    list() {
+        if (!plugins.fs.existsSync(this.rootDir)) {
+            return [];
+        }
+        const entries = [];
+        for (const nameArg of plugins.fs.readdirSync(this.rootDir)) {
+            const metaPath = plugins.path.join(this.rootDir, nameArg, META_FILE_NAME);
+            if (!plugins.fs.existsSync(metaPath)) {
+                continue;
+            }
+            try {
+                entries.push(JSON.parse(plugins.fs.readFileSync(metaPath, 'utf8')));
+            }
+            catch {
+                continue;
+            }
+        }
+        return entries.sort((leftArg, rightArg) => rightArg.stashedAt.localeCompare(leftArg.stashedAt));
+    }
+    /**
+     * Directories under the stash root that hold a credential but no readable
+     * metadata -- the shape an interrupted write would leave behind. Reported by
+     * `doctor` so they are visible rather than silently skipped by `list()`.
+     */
+    incomplete() {
+        if (!plugins.fs.existsSync(this.rootDir)) {
+            return [];
+        }
+        return plugins.fs.readdirSync(this.rootDir).filter((nameArg) => {
+            const dir = plugins.path.join(this.rootDir, nameArg);
+            if (!plugins.fs.statSync(dir).isDirectory()) {
+                return false;
+            }
+            const hasAuth = plugins.fs.existsSync(plugins.path.join(dir, AUTH_FILE_NAME));
+            const hasMeta = plugins.fs.existsSync(plugins.path.join(dir, META_FILE_NAME));
+            return hasAuth && !hasMeta;
+        });
+    }
+    /**
+     * Resolves a user-supplied account reference to a stashed email.
+     *
+     * Accepts the exact email, the directory slug, the local part, or a prefix.
+     * Deliberately not a substring match: this reference selects which credential
+     * becomes active, so an incidental substring hit would activate an account the
+     * user never named.
+     */
+    resolve(referenceArg) {
+        const needle = referenceArg.toLowerCase();
+        const all = this.list();
+        const exact = all.find((entryArg) => entryArg.email.toLowerCase() === needle);
+        if (exact) {
+            return { email: exact.email };
+        }
+        const bySlug = all.find((entryArg) => this.slugFor(entryArg.email) === needle);
+        if (bySlug) {
+            return { email: bySlug.email };
+        }
+        const byLocalPart = all.filter((entryArg) => entryArg.email.toLowerCase().split('@')[0] === needle);
+        if (byLocalPart.length === 1) {
+            return { email: byLocalPart[0].email };
+        }
+        if (byLocalPart.length > 1) {
+            return { candidates: byLocalPart.map((entryArg) => entryArg.email) };
+        }
+        const byPrefix = all.filter((entryArg) => entryArg.email.toLowerCase().startsWith(needle));
+        if (byPrefix.length === 1) {
+            return { email: byPrefix[0].email };
+        }
+        return { candidates: byPrefix.map((entryArg) => entryArg.email) };
+    }
+    remove(emailArg) {
+        const dir = this.entryDir(emailArg);
+        if (!plugins.fs.existsSync(dir)) {
+            return false;
+        }
+        plugins.fs.rmSync(dir, { recursive: true, force: true });
+        return true;
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/classes.tui.d.ts

@@ -0,0 +1,11 @@
+import * as plugins from './plugins.js';
+import type { IAuthHarness } from './interfaces.harness.js';
+import { AuthSwitchOperations } from './classes.operations.js';
+/** Owns account-management actions; terminal rendering and interaction belong to smartconsole. */
+export declare class AuthSwitchTui {
+    private readonly harnesses;
+    private readonly out;
+    private readonly operations;
+    constructor(harnesses: readonly IAuthHarness[], out: plugins.smartconsole.SmartConsole, operations?: AuthSwitchOperations);
+    run(preferredArg?: IAuthHarness): Promise<number>;
+}