@oharness/engine 0.1.0

package/dist/artifacts/store.js

@@ -0,0 +1,500 @@
+/**
+ * Artifacts: the things a turn produces, as opposed to the things it says.
+ *
+ * A file written to the working tree is already a deliverable and the review
+ * pane already shows it as a diff. This is for the other case — a chart, a
+ * rendered page, a document the model is iterating on — where the deliverable
+ * has no natural home on disk and where the interesting question is "what does
+ * it look like now", not "what changed since last time".
+ *
+ * The two properties that make this more than `write` to a temp file:
+ *
+ *   - Identity. An artifact has an id chosen by the model, so a second call
+ *     with the same id is a revision rather than a new object. That is the
+ *     whole mechanism: without it every edit would litter the panel with a
+ *     near-duplicate and the frontend would have no way to know which one is
+ *     current.
+ *   - Versions. Every revision is kept, so a frontend can offer "back to the
+ *     one before you broke it" without the model having to re-derive it.
+ *
+ * Content lives here and never travels in the event stream. Artifacts are
+ * routinely tens of kilobytes and are rewritten in full on every revision;
+ * putting that in an event would push it through the SSE relay and into every
+ * frontend's memory on every keystroke of a rewrite. Frontends get a
+ * descriptor and fetch the body if and when they are going to show it.
+ */
+/**
+ * How much a frontend has to be able to do to show an artifact honestly.
+ *
+ * This list is the contract between the engine and every frontend, and it is
+ * deliberately short. It is not "which mime types exist" — it is "how many
+ * fundamentally different rendering capabilities do we ask a frontend for",
+ * and every entry costs each frontend an implementation or an honest refusal.
+ * Adding one is a decision, which is why the list is closed and why
+ * test/artifacts.test.ts fails when a frontend has no declared answer for a
+ * member of it.
+ *
+ *   text     Plain prose or data. Any frontend can show this.
+ *   markdown Structured prose. A frontend without a renderer shows the source,
+ *            which is still readable — that is why it is separate from `code`.
+ *   code     Source, with a language hint. Degrades to text.
+ *   image    Raster bytes. A terminal generally cannot; see the TUI's answer.
+ *   vector   SVG. Renderable as a document, but also readable as source.
+ *   page     Self-contained HTML that must execute to mean anything. This is
+ *            the only kind that requires a sandbox, and the only one with no
+ *            honest textual degradation.
+ */
+export const ARTIFACT_KINDS = ["text", "markdown", "code", "image", "vector", "page"];
+/**
+ * The mime that means "this is a canvas".
+ *
+ * Deliberately a mime and not a seventh entry in ARTIFACT_KINDS. That list is
+ * the set of *rendering capabilities* we ask every frontend for, and a canvas
+ * asks for nothing new: it is HTML that has to execute, which is exactly what
+ * `page` already means. What differs is who wrote the surrounding document —
+ * for a `page` the model did, for a canvas the harness does, wrapping the
+ * model's artboards in an editor. A frontend that knows nothing about canvases
+ * still shows one correctly, because what it receives from /artifact/view is a
+ * complete page. Adding a kind would instead have forced every frontend, the
+ * website and a database enum to declare an answer to a question none of them
+ * actually needed to be asked.
+ */
+export const CANVAS_MIME = "text/canvas+html";
+/** Whether a mime names a canvas, tolerant of charset parameters and case. */
+export function isCanvas(mime) {
+    return mime.split(";")[0].trim().toLowerCase() === CANVAS_MIME;
+}
+/** Mime types the model may name, and the capability each one implies. */
+const KIND_BY_MIME = {
+    "text/plain": "text",
+    "text/markdown": "markdown",
+    "text/html": "page",
+    // A canvas is served as a document that must execute, so it lands on the
+    // same capability as any other page. See CANVAS_MIME.
+    [CANVAS_MIME]: "page",
+    "image/svg+xml": "vector",
+    "image/png": "image",
+    "image/jpeg": "image",
+    "application/json": "code",
+};
+/**
+ * The capability a mime type implies, falling back by family.
+ *
+ * Unknown types resolve to `text` rather than throwing: a model that invents
+ * `text/x-rst` should get a usable artifact showing its source, not a tool
+ * error that costs a turn. The fallback is deliberately the least capable
+ * kind — guessing upward would mean handing an unvetted string to a renderer.
+ */
+export function kindForMime(mime) {
+    const base = mime.split(";")[0].trim().toLowerCase();
+    const known = KIND_BY_MIME[base];
+    if (known)
+        return known;
+    if (base.startsWith("image/"))
+        return "image";
+    if (base.startsWith("text/"))
+        return "text";
+    return "text";
+}
+/** True for kinds whose body is only meaningful when executed by a browser. */
+export function needsSandbox(kind) {
+    return kind === "page";
+}
+/** Reject a log line this build cannot make sense of, rather than half-read it. */
+export function asArtifactRevision(value) {
+    if (!value || typeof value !== "object")
+        return undefined;
+    const c = value;
+    if (typeof c.artifact !== "string" || typeof c.content !== "string")
+        return undefined;
+    if (typeof c.title !== "string" || typeof c.mime !== "string")
+        return undefined;
+    if (typeof c.version !== "number")
+        return undefined;
+    return {
+        ...(typeof c.id === "string" ? { id: c.id } : {}),
+        ...(typeof c.seq === "number" ? { seq: c.seq } : {}),
+        ...(typeof c.device === "string" ? { device: c.device } : {}),
+        artifact: c.artifact,
+        title: c.title,
+        mime: c.mime,
+        ...(typeof c.language === "string" ? { language: c.language } : {}),
+        version: c.version,
+        content: c.content,
+        at: typeof c.at === "number" ? c.at : 0,
+        ...(c.author === "user" ? { author: "user" } : {}),
+    };
+}
+/** Ids are addressable in a URL path, so the character set is restricted. */
+const ID_PATTERN = /^[a-zA-Z0-9][a-zA-Z0-9._-]{0,63}$/;
+export function isValidArtifactId(id) {
+    // Rejected rather than sanitised. A sanitising rule would let two different
+    // ids collapse onto one artifact, and the model would have no way to see it
+    // happen — it would just find its previous revision silently overwritten.
+    return ID_PATTERN.test(id) && !id.includes("..");
+}
+/**
+ * How many revisions of one artifact are kept.
+ *
+ * Bounded because the store is memory and a model iterating on a page can
+ * produce dozens of revisions in a turn. The newest is never dropped; the
+ * oldest go first.
+ */
+const MAX_VERSIONS = 20;
+/** Refused rather than truncated: half a document renders as a broken one. */
+export const MAX_ARTIFACT_BYTES = 2 * 1024 * 1024;
+export class ArtifactStore {
+    items = new Map();
+    /**
+     * Told about every revision this store accepts.
+     *
+     * A callback rather than a store reference, so this file keeps knowing
+     * nothing about disks, projects or sync — it holds artifacts, and whoever
+     * owns it decides what durability means. It is also what keeps the two
+     * writers symmetrical: a model's `put` and a person's `edit` are the same
+     * kind of event to anything downstream, which is the property that was
+     * missing when only one of them left a trace.
+     */
+    onRevision;
+    announce(artifact, revision) {
+        if (!this.onRevision)
+            return;
+        this.onRevision({
+            artifact: artifact.id,
+            title: artifact.title,
+            mime: artifact.mime,
+            ...(artifact.language ? { language: artifact.language } : {}),
+            version: revision.version,
+            content: revision.content,
+            at: revision.createdAt,
+            ...(revision.author ? { author: revision.author } : {}),
+        });
+    }
+    /**
+     * Record a revision, creating the artifact if this id is new.
+     *
+     * Returns the descriptor rather than the artifact so callers cannot hold a
+     * reference into the store and mutate a stored version in place.
+     */
+    put(input) {
+        if (!isValidArtifactId(input.id)) {
+            throw new Error(`Invalid artifact id ${JSON.stringify(input.id)}: use letters, digits, dot, dash or underscore (max 64).`);
+        }
+        const bytes = Buffer.byteLength(input.content, "utf8");
+        if (bytes > MAX_ARTIFACT_BYTES) {
+            throw new Error(`Artifact is ${bytes} bytes, over the ${MAX_ARTIFACT_BYTES} byte limit.`);
+        }
+        const existing = this.items.get(input.id);
+        const version = existing ? existing.versions[existing.versions.length - 1].version + 1 : 1;
+        const revision = {
+            version,
+            content: input.content,
+            createdAt: Date.now(),
+            bytes,
+        };
+        const artifact = existing ?? {
+            id: input.id,
+            title: input.title,
+            mime: input.mime,
+            kind: kindForMime(input.mime),
+            versions: [],
+        };
+        // Title and mime follow the latest revision: renaming an artifact or
+        // switching it from markdown to HTML is a legitimate edit, and forcing a
+        // new id for it would break the identity that makes revisions work.
+        artifact.title = input.title;
+        artifact.mime = input.mime;
+        artifact.kind = kindForMime(input.mime);
+        if (input.language !== undefined)
+            artifact.language = input.language;
+        artifact.versions.push(revision);
+        if (artifact.versions.length > MAX_VERSIONS) {
+            artifact.versions.splice(0, artifact.versions.length - MAX_VERSIONS);
+        }
+        this.items.set(artifact.id, artifact);
+        this.announce(artifact, revision);
+        return describe(artifact, revision);
+    }
+    /**
+     * Record a revision a *person* wrote, in a frontend, to an artifact that
+     * already exists.
+     *
+     * Separate from `put` rather than a flag on it, because the two have
+     * different preconditions and different failure modes. `put` may create, and
+     * takes a title and a mime because the model is declaring what the thing is.
+     * An edit may only revise: there is no such thing as a person creating an
+     * artifact out of nothing here, and letting an edit invent one would give a
+     * frontend a way to conjure artifacts the transcript has no record of. It
+     * also leaves title and mime alone — the canvas editor changes content, and
+     * silently relabelling the artifact because a save round-tripped a field is
+     * not something anybody asked for.
+     *
+     * Returns undefined for an unknown id so the caller can answer 404 rather
+     * than distinguishing exception types; the size ceiling still throws,
+     * because that one is a rejected write and not a missing thing.
+     */
+    edit(id, content) {
+        const artifact = this.items.get(id);
+        if (!artifact)
+            return undefined;
+        const bytes = Buffer.byteLength(content, "utf8");
+        if (bytes > MAX_ARTIFACT_BYTES) {
+            throw new Error(`Artifact is ${bytes} bytes, over the ${MAX_ARTIFACT_BYTES} byte limit.`);
+        }
+        const revision = {
+            version: artifact.versions[artifact.versions.length - 1].version + 1,
+            content,
+            createdAt: Date.now(),
+            bytes,
+            author: "user",
+        };
+        artifact.versions.push(revision);
+        if (artifact.versions.length > MAX_VERSIONS) {
+            artifact.versions.splice(0, artifact.versions.length - MAX_VERSIONS);
+        }
+        this.announce(artifact, revision);
+        return describe(artifact, revision);
+    }
+    /**
+     * Put back a revision that was read from disk or arrived over sync.
+     *
+     * Separate from `put` and `edit` because it is not a new event: the version
+     * number and the author were decided when it first happened, and inventing
+     * fresh ones here would renumber a history that other things already refer
+     * to. It also stays silent — announcing would write the log back to the log.
+     */
+    restore(revision) {
+        if (!isValidArtifactId(revision.artifact))
+            return;
+        const existing = this.items.get(revision.artifact);
+        const artifact = existing ?? {
+            id: revision.artifact,
+            title: revision.title,
+            mime: revision.mime,
+            kind: kindForMime(revision.mime),
+            versions: [],
+        };
+        // The newest line wins on the fields that describe the thing, exactly as
+        // the live path lets a revision rename or retype an artifact.
+        artifact.title = revision.title;
+        artifact.mime = revision.mime;
+        artifact.kind = kindForMime(revision.mime);
+        if (revision.language !== undefined)
+            artifact.language = revision.language;
+        // A log can be replayed twice — a resume after a sync pull, say — so a
+        // version already held is not appended again.
+        if (artifact.versions.some((v) => v.version === revision.version)) {
+            this.items.set(artifact.id, artifact);
+            return;
+        }
+        artifact.versions.push({
+            version: revision.version,
+            content: revision.content,
+            createdAt: revision.at,
+            bytes: Buffer.byteLength(revision.content, "utf8"),
+            ...(revision.author ? { author: revision.author } : {}),
+        });
+        artifact.versions.sort((a, b) => a.version - b.version);
+        if (artifact.versions.length > MAX_VERSIONS) {
+            artifact.versions.splice(0, artifact.versions.length - MAX_VERSIONS);
+        }
+        this.items.set(artifact.id, artifact);
+    }
+    /** The latest revision, or a specific one. Undefined if either is unknown. */
+    get(id, version) {
+        const artifact = this.items.get(id);
+        if (!artifact)
+            return undefined;
+        const revision = version === undefined
+            ? artifact.versions[artifact.versions.length - 1]
+            : artifact.versions.find((v) => v.version === version);
+        return revision ? { artifact, revision } : undefined;
+    }
+    /** Every artifact at its latest revision, oldest first. */
+    list() {
+        return [...this.items.values()].map((artifact) => describe(artifact, artifact.versions[artifact.versions.length - 1]));
+    }
+    /**
+     * Every revision this store holds, oldest first, in the shape it is written
+     * down in.
+     *
+     * Exists for the one-time seeding of a session whose artifacts were rebuilt
+     * by replaying its transcript: without it that session's log would start at
+     * whatever happened next, and the versions that came before would vanish the
+     * moment the log took precedence over the replay.
+     */
+    export() {
+        const out = [];
+        for (const artifact of this.items.values()) {
+            for (const revision of artifact.versions) {
+                out.push({
+                    artifact: artifact.id,
+                    title: artifact.title,
+                    mime: artifact.mime,
+                    ...(artifact.language ? { language: artifact.language } : {}),
+                    version: revision.version,
+                    content: revision.content,
+                    at: revision.createdAt,
+                    ...(revision.author ? { author: revision.author } : {}),
+                });
+            }
+        }
+        return out.sort((a, b) => a.at - b.at || a.version - b.version);
+    }
+    /** Record that this artifact now has a URL on the site. */
+    markPublished(id, publication) {
+        const artifact = this.items.get(id);
+        if (!artifact)
+            return undefined;
+        artifact.publication = publication;
+        return describe(artifact, artifact.versions[artifact.versions.length - 1]);
+    }
+    /** Forget a publication after it has been withdrawn from the site. */
+    clearPublication(id) {
+        const artifact = this.items.get(id);
+        if (!artifact)
+            return undefined;
+        delete artifact.publication;
+        return describe(artifact, artifact.versions[artifact.versions.length - 1]);
+    }
+    delete(id) {
+        return this.items.delete(id);
+    }
+    get size() {
+        return this.items.size;
+    }
+}
+function describe(artifact, revision) {
+    return {
+        id: artifact.id,
+        title: artifact.title,
+        mime: artifact.mime,
+        kind: artifact.kind,
+        ...(artifact.language ? { language: artifact.language } : {}),
+        version: revision.version,
+        bytes: revision.bytes,
+        ...(revision.author ? { author: revision.author } : {}),
+        versionCount: artifact.versions.length,
+        ...(artifact.publication ? { publication: artifact.publication } : {}),
+    };
+}
+/**
+ * Where the store hangs off the session.
+ *
+ * In `session.state` rather than a field on Session, for the same reason the
+ * todo list is: that map is already the session-scoped scratch space tools
+ * reach through `ctx.host.state`, and it is already copied into and out of
+ * subagents. A field would need both of those paths taught about it.
+ *
+ * Consequence worth stating plainly: this is memory, so artifacts live as long
+ * as the process. That matches the todo list and is the right default for a
+ * scratch surface — but it means a frontend must not treat an artifact as a
+ * durable deliverable. Anything that needs to outlive the session gets written
+ * to the working tree with `write`.
+ */
+export const ARTIFACTS_KEY = "artifacts:store";
+/**
+ * Rebuild a session's artifacts from its transcript.
+ *
+ * The store is memory, so resuming a conversation used to bring back every
+ * message and none of the things those messages made: the panel was empty, the
+ * cards were gone, and an artifact the user had been looking at ten minutes
+ * earlier had no way back. The content was never actually lost — an artifact's
+ * body is the argument of the `artifact_write` call that made it, and that is
+ * in the transcript like any other tool call. This replays those calls.
+ *
+ * Replaying in order is what restores the version history for free: the second
+ * call for an id becomes v2 exactly as it did the first time round.
+ *
+ * Calls whose result came back an error are skipped — they never made an
+ * artifact, and re-running them here would invent one that never existed.
+ *
+ * What this cannot bring back is a revision written by a person — a canvas
+ * edit is not a tool call and so leaves no trace in the transcript. A resumed
+ * session therefore shows the model's last version as the latest, and the
+ * edits made on top of it are gone. Stated here rather than fixed, because
+ * fixing it means deciding where a human-authored revision is durably stored,
+ * and every cheap answer (a synthetic tool call, a user message carrying the
+ * body) either lies about who acted or pays the artifact's full size in
+ * transcript tokens on every save.
+ */
+export function rehydrateArtifacts(store, messages) {
+    // Which calls failed. Collected first because the result arrives in a later
+    // message than the call it answers.
+    const failed = new Set();
+    for (const message of messages) {
+        if (!Array.isArray(message.content))
+            continue;
+        for (const block of message.content) {
+            if (block.type === "tool_result" && block.isError)
+                failed.add(block.toolCallId);
+        }
+    }
+    let restored = 0;
+    for (const message of messages) {
+        if (!Array.isArray(message.content))
+            continue;
+        for (const block of message.content) {
+            if (block.type !== "tool_call" || block.name !== ARTIFACT_TOOL)
+                continue;
+            if (failed.has(block.id))
+                continue;
+            const input = block.input;
+            if (!input || typeof input !== "object")
+                continue;
+            const { id, title, mime, content, language } = input;
+            if (typeof id !== "string" || typeof title !== "string")
+                continue;
+            if (typeof mime !== "string" || typeof content !== "string")
+                continue;
+            try {
+                store.put({
+                    id,
+                    title,
+                    mime,
+                    content,
+                    ...(typeof language === "string" ? { language } : {}),
+                });
+                restored++;
+            }
+            catch {
+                // A transcript can hold a call the store would refuse today — an id
+                // whose rules have since tightened, a body over a limit that has since
+                // come down. Skipping one is right; refusing to restore the rest
+                // because of it is not.
+            }
+        }
+    }
+    return restored;
+}
+/**
+ * Rebuild a session's artifacts from what was written down, in order.
+ *
+ * Preferred over `rehydrateArtifacts` wherever a log exists, and the two must
+ * not both run: replay derives version numbers by counting writes, the log
+ * carries the numbers that actually happened, and applying one on top of the
+ * other would renumber the history and duplicate every revision.
+ *
+ * The transcript replay stays as the fallback, and has to: every session
+ * recorded before artifacts were written down has no log, and refusing to
+ * rebuild those would take away something that works today.
+ */
+export function restoreArtifacts(store, revisions) {
+    for (const revision of revisions)
+        store.restore(revision);
+    return store.size;
+}
+/**
+ * The tool whose calls this reads. A constant rather than the string inline so
+ * renaming the tool cannot quietly stop old sessions from restoring.
+ */
+const ARTIFACT_TOOL = "artifact_write";
+export function getArtifactStore(state) {
+    const existing = state.get(ARTIFACTS_KEY);
+    if (existing instanceof ArtifactStore)
+        return existing;
+    const created = new ArtifactStore();
+    state.set(ARTIFACTS_KEY, created);
+    return created;
+}
+//# sourceMappingURL=store.js.map

package/dist/artifacts/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/artifacts/store.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAU,CAAC;AAI/F;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,kBAAkB,CAAC;AAE9C,8EAA8E;AAC9E,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC;AAClE,CAAC;AAED,0EAA0E;AAC1E,MAAM,YAAY,GAAiC;IACjD,YAAY,EAAE,MAAM;IACpB,eAAe,EAAE,UAAU;IAC3B,WAAW,EAAE,MAAM;IACnB,yEAAyE;IACzE,sDAAsD;IACtD,CAAC,WAAW,CAAC,EAAE,MAAM;IACrB,eAAe,EAAE,QAAQ;IACzB,WAAW,EAAE,OAAO;IACpB,YAAY,EAAE,OAAO;IACrB,kBAAkB,EAAE,MAAM;CAC3B,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9C,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC;IAC5C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,IAAkB;IAC7C,OAAO,IAAI,KAAK,MAAM,CAAC;AACzB,CAAC;AAmHD,mFAAmF;AACnF,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,CAAC,GAAG,KAAwC,CAAC;IACnD,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACtF,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChF,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACpD,OAAO;QACL,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,EAAE,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACvC,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,GAAG,mCAAmC,CAAC;AAEvD,MAAM,UAAU,iBAAiB,CAAC,EAAU;IAC1C,4EAA4E;IAC5E,4EAA4E;IAC5E,0EAA0E;IAC1E,OAAO,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,YAAY,GAAG,EAAE,CAAC;AAExB,8EAA8E;AAC9E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAElD,MAAM,OAAO,aAAa;IACP,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;IAErD;;;;;;;;;OASG;IACH,UAAU,CAA8C;IAEhD,QAAQ,CAAC,QAAkB,EAAE,QAAyB;QAC5D,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO;QAC7B,IAAI,CAAC,UAAU,CAAC;YACd,QAAQ,EAAE,QAAQ,CAAC,EAAE;YACrB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,EAAE,EAAE,QAAQ,CAAC,SAAS;YACtB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,GAAG,CAAC,KAMH;QACC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,uBAAuB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,0DAA0D,CAC1G,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,KAAK,GAAG,kBAAkB,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,eAAe,KAAK,oBAAoB,kBAAkB,cAAc,CACzE,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5F,MAAM,QAAQ,GAAoB;YAChC,OAAO;YACP,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,KAAK;SACN,CAAC;QAEF,MAAM,QAAQ,GAAa,QAAQ,IAAI;YACrC,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC;YAC7B,QAAQ,EAAE,EAAE;SACb,CAAC;QACF,qEAAqE;QACrE,yEAAyE;QACzE,oEAAoE;QACpE,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC7B,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QAC3B,QAAQ,CAAC,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,QAAQ,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAErE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;YAC5C,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAEtC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAClC,OAAO,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,IAAI,CAAC,EAAU,EAAE,OAAe;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QAEhC,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjD,IAAI,KAAK,GAAG,kBAAkB,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,oBAAoB,kBAAkB,cAAc,CAAC,CAAC;QAC5F,CAAC;QAED,MAAM,QAAQ,GAAoB;YAChC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,OAAO,GAAG,CAAC;YACrE,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,KAAK;YACL,MAAM,EAAE,MAAM;SACf,CAAC;QACF,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;YAC5C,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAClC,OAAO,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,QAAgC;QACtC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAa,QAAQ,IAAI;YACrC,EAAE,EAAE,QAAQ,CAAC,QAAQ;YACrB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,IAAI,EAAE,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC;YAChC,QAAQ,EAAE,EAAE;SACb,CAAC;QACF,yEAAyE;QACzE,8DAA8D;QAC9D,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QAChC,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC9B,QAAQ,CAAC,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS;YAAE,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;QAE3E,uEAAuE;QACvE,8CAA8C;QAC9C,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;YACrB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,SAAS,EAAE,QAAQ,CAAC,EAAE;YACtB,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;YAClD,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD,CAAC,CAAC;QACH,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;QACxD,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;YAC5C,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC;IAED,8EAA8E;IAC9E,GAAG,CAAC,EAAU,EAAE,OAAgB;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChC,MAAM,QAAQ,GACZ,OAAO,KAAK,SAAS;YACnB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;YACjD,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;QAC3D,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC;IAED,2DAA2D;IAC3D,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC/C,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CACrE,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM;QACJ,MAAM,GAAG,GAA6B,EAAE,CAAC;QACzC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACzC,GAAG,CAAC,IAAI,CAAC;oBACP,QAAQ,EAAE,QAAQ,CAAC,EAAE;oBACrB,KAAK,EAAE,QAAQ,CAAC,KAAK;oBACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7D,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,EAAE,EAAE,QAAQ,CAAC,SAAS;oBACtB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;IAClE,CAAC;IAED,2DAA2D;IAC3D,aAAa,CAAC,EAAU,EAAE,WAAgC;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChC,QAAQ,CAAC,WAAW,GAAG,WAAW,CAAC;QACnC,OAAO,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC;IAC9E,CAAC;IAED,sEAAsE;IACtE,gBAAgB,CAAC,EAAU;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChC,OAAO,QAAQ,CAAC,WAAW,CAAC;QAC5B,OAAO,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,CAAC,EAAU;QACf,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,QAAkB,EAAE,QAAyB;IAC7D,OAAO;QACL,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM;QACtC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAoB,EAAE,QAA4B;IACnF,4EAA4E;IAC5E,oCAAoC;IACpC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,SAAS;QAC9C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,KAAK,CAAC,OAAO;gBAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,SAAS;QAC9C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;gBAAE,SAAS;YACzE,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAAE,SAAS;YAEnC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAuC,CAAC;YAC5D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,SAAS;YAClD,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,KAAgC,CAAC;YAChF,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,SAAS;YAClE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,SAAS;YAEtE,IAAI,CAAC;gBACH,KAAK,CAAC,GAAG,CAAC;oBACR,EAAE;oBACF,KAAK;oBACL,IAAI;oBACJ,OAAO;oBACP,GAAG,CAAC,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACtD,CAAC,CAAC;gBACH,QAAQ,EAAE,CAAC;YACb,CAAC;YAAC,MAAM,CAAC;gBACP,oEAAoE;gBACpE,uEAAuE;gBACvE,iEAAiE;gBACjE,wBAAwB;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAoB,EACpB,SAA4C;IAE5C,KAAK,MAAM,QAAQ,IAAI,SAAS;QAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1D,OAAO,KAAK,CAAC,IAAI,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,aAAa,GAAG,gBAAgB,CAAC;AAEvC,MAAM,UAAU,gBAAgB,CAAC,KAA2B;IAC1D,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC1C,IAAI,QAAQ,YAAY,aAAa;QAAE,OAAO,QAAQ,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;IACpC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAClC,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/auth/index.d.ts

@@ -0,0 +1,13 @@
+export { AuthStore } from "./store.ts";
+export { AuthManager, BUILTIN_AUTH_PROVIDERS } from "./manager.ts";
+export type { AuthStatus } from "./manager.ts";
+export { anthropicAuth, antAccessToken, ANT_PROFILE_MARKER } from "./providers/anthropic.ts";
+export { ottoportAuth, ottoportBaseUrl } from "./providers/ottoport.ts";
+export { officialAuth, officialBaseUrl } from "./providers/official.ts";
+export { browserSignInUrl, exchangeHandoff, siteUrl } from "./providers/account.ts";
+export { apiKeyProvider, oauthProvider } from "./providers/generic.ts";
+export type { OAuthProviderOptions } from "./providers/generic.ts";
+export { createPkce, exchangeToken, refreshCredential, startAuthCodeFlow, startDeviceFlow, startLoopbackFlow, toCredential, } from "./oauth.ts";
+export type { DeviceFlowOptions, AuthCodeFlowOptions, TokenResponse } from "./oauth.ts";
+export { isExpired } from "./types.ts";
+export type { ApiCredential, ApiKeyMethod, AuthContext, AuthMethod, AuthProvider, AuthResolver, AuthorizeResult, CallbackResult, Credential, OAuthCredential, OAuthMethod, Prompt, PromptCondition, ResolvedAuth, SelectPrompt, TextPrompt, WellKnownCredential, } from "./types.ts";

package/dist/auth/index.js

@@ -0,0 +1,10 @@
+export { AuthStore } from "./store.js";
+export { AuthManager, BUILTIN_AUTH_PROVIDERS } from "./manager.js";
+export { anthropicAuth, antAccessToken, ANT_PROFILE_MARKER } from "./providers/anthropic.js";
+export { ottoportAuth, ottoportBaseUrl } from "./providers/ottoport.js";
+export { officialAuth, officialBaseUrl } from "./providers/official.js";
+export { browserSignInUrl, exchangeHandoff, siteUrl } from "./providers/account.js";
+export { apiKeyProvider, oauthProvider } from "./providers/generic.js";
+export { createPkce, exchangeToken, refreshCredential, startAuthCodeFlow, startDeviceFlow, startLoopbackFlow, toCredential, } from "./oauth.js";
+export { isExpired } from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAEnE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC7F,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvE,OAAO,EACL,UAAU,EACV,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC"}

package/dist/auth/manager.d.ts

@@ -0,0 +1,83 @@
+import type { Logger } from "../util/logger.ts";
+import { AuthStore } from "./store.ts";
+import type { AuthContext, AuthMethod, AuthProvider, AuthorizeResult, Credential, Prompt, ResolvedAuth } from "./types.ts";
+export interface AuthStatus {
+    providerId: string;
+    label: string;
+    authenticated: boolean;
+    /** Where the credential came from: `env:…`, `stored:oauth`, `ant-cli`, … */
+    source?: string;
+    /** For OAuth credentials, when the access token expires. */
+    expiresAt?: number;
+    methods: Array<{
+        index: number;
+        type: AuthMethod["type"];
+        label: string;
+    }>;
+}
+export declare const BUILTIN_AUTH_PROVIDERS: AuthProvider[];
+/**
+ * Owns credentials: stores them, resolves them per request, and refreshes
+ * OAuth tokens before they expire.
+ *
+ * Refresh is in-flight-deduplicated. Without that, a turn issuing several
+ * parallel tool calls fires several simultaneous refreshes, and providers that
+ * rotate the refresh token on use will invalidate each other's result.
+ */
+export declare class AuthManager {
+    readonly store: AuthStore;
+    private readonly providers;
+    private readonly logger;
+    private readonly refreshing;
+    constructor(opts?: {
+        store?: AuthStore;
+        providers?: AuthProvider[];
+        logger?: Logger;
+    });
+    register(provider: AuthProvider): this;
+    get(providerId: string): AuthProvider | undefined;
+    list(): AuthProvider[];
+    /**
+     * Resolve credentials for a request. Safe to call on every request — that is
+     * the point, since a token valid at startup may not be valid an hour later.
+     */
+    resolve(ctx: AuthContext): Promise<ResolvedAuth | undefined>;
+    /**
+     * The current access token for an OAuth provider, refreshed if it has run
+     * out.
+     *
+     * Separate from `resolve` because the caller wants the token itself rather
+     * than the headers a model request would carry — sync sends it to a server
+     * that is not a model provider, and digging it back out of a header would
+     * depend on how that provider happens to spell authorization today.
+     *
+     * Read per use, never held: these last an hour, and something that cached
+     * one would work until it silently did not.
+     */
+    accessToken(providerId: string): Promise<string | undefined>;
+    /** Whether a provider has usable credentials, without making a request. */
+    isAuthenticated(providerId: string): Promise<boolean>;
+    status(): Promise<AuthStatus[]>;
+    /**
+     * Which prompts apply given the answers collected so far. Conditional
+     * prompts let one method cover, say, public vs enterprise deployments
+     * without the CLI knowing anything about either.
+     */
+    promptsFor(method: AuthMethod, answers?: Record<string, string>): Prompt[];
+    /** Validate collected answers. Returns the first failure, if any. */
+    validate(method: AuthMethod, answers: Record<string, string>): {
+        field: string;
+        message: string;
+    } | undefined;
+    /** Begin an OAuth login. The caller drives the returned flow. */
+    authorize(providerId: string, methodIndex: number, answers?: Record<string, string>): Promise<AuthorizeResult>;
+    /** Complete an API-key login (or an OAuth method's non-interactive variant). */
+    submit(providerId: string, methodIndex: number, answers: Record<string, string>): Promise<Credential>;
+    /** Store the result of a completed OAuth callback. */
+    complete(providerId: string, result: Awaited<ReturnType<AuthorizeResult["callback"]>>): Promise<Credential>;
+    logout(providerId: string): Promise<boolean>;
+    private persist;
+    private methodAt;
+    /** Collapse concurrent refreshes of the same provider into one exchange. */
+    private refreshOnce;
+}