@openlimiter/core 0.4.0 → 1.3.1

package/dist/acquire/credentials.js

@@ -0,0 +1,316 @@
+/**
+ * Where each vendor's own client keeps the credential it obtained, and how to
+ * read it without ever changing it.
+ *
+ * Three rules hold this whole file together.
+ *
+ * One: nothing here writes. Not a refresh, not a rewrite, not a touch of the
+ * modification time. A vendor's credential file belongs to that vendor's
+ * client, and a monitor that repairs it is a monitor that can corrupt a login
+ * somebody depends on for work.
+ *
+ * Two: no secret ever leaves this module by any route other than the request
+ * builders in `transport.ts`. Every failure is a closed literal with no
+ * payload, so a token cannot reach a log, an error string, a report or a
+ * process argument.
+ *
+ * Three: absent is not broken. A machine without Codex installed is not a
+ * failure to report, it is a provider this person does not use.
+ */
+import { homedir } from "node:os";
+import path from "node:path";
+import { readJsonFileSafely } from "../cache.js";
+/** The providers this path can read a credential for. */
+export const ACQUISITION_PROVIDERS = [
+    "CLAUDE",
+    "CODEX",
+    "GEMINI_CLI",
+    "ANTIGRAVITY",
+    "GROK",
+    "KIMI",
+    "OPENROUTER"
+];
+/** Largest credential document this path will read into memory. */
+export const MAX_CREDENTIAL_FILE_BYTES = 65_536;
+/**
+ * Whose login this actually is.
+ *
+ * The one that matters is `shared_code_assist`. Antigravity keeps its token in
+ * the Windows credential store, and when that store holds nothing this reader
+ * falls back to the Gemini CLI's file, which is what the Antigravity client's
+ * own quota shares a backend with. That fallback is legitimate and it is what
+ * every other reader does, but the resulting row is NOT Antigravity's own
+ * login, and presenting it as one would tell a person they had connected
+ * something they never connected. So the origin travels with the credential and
+ * the row says which it is.
+ */
+export const CREDENTIAL_ORIGINS = [
+    "vendor_store",
+    "vendor_file",
+    "shared_code_assist",
+    "user_key"
+];
+function resolve(options) {
+    return {
+        platform: options.platform ?? process.platform,
+        environment: options.environment ?? process.env,
+        home: options.homeDirectory ?? homedir()
+    };
+}
+function directoryFrom(value) {
+    return value === undefined || value.trim() === "" ? null : value;
+}
+function xdgConfig(context) {
+    return directoryFrom(context.environment["XDG_CONFIG_HOME"]) ??
+        path.join(context.home, ".config");
+}
+function xdgData(context) {
+    return directoryFrom(context.environment["XDG_DATA_HOME"]) ??
+        path.join(context.home, ".local", "share");
+}
+function join(base, ...parts) {
+    return base === null ? null : path.join(base, ...parts);
+}
+/**
+ * Every place a provider's own client is known to keep its credential, in the
+ * order the vendor's own environment variable would win.
+ *
+ * The first readable document that yields a usable secret wins. Order matters
+ * only for a machine carrying two of them, and in that case the explicit
+ * environment variable is the one the person set on purpose.
+ */
+export function credentialCandidatePaths(provider, options = {}) {
+    const context = resolve(options);
+    const home = context.home;
+    const candidates = [];
+    if (provider === "CLAUDE") {
+        candidates.push(join(directoryFrom(context.environment["CLAUDE_CONFIG_DIR"]), ".credentials.json"), path.join(home, ".claude", ".credentials.json"), join(xdgConfig(context), "claude", ".credentials.json"), join(xdgConfig(context), "claude-code", ".credentials.json"), join(xdgData(context), "claude-code", ".credentials.json"));
+    }
+    else if (provider === "CODEX") {
+        candidates.push(join(directoryFrom(context.environment["CODEX_HOME"]), "auth.json"), path.join(home, ".codex", "auth.json"), join(xdgConfig(context), "codex", "auth.json"), join(xdgData(context), "codex", "auth.json"));
+    }
+    else if (provider === "GEMINI_CLI" || provider === "ANTIGRAVITY") {
+        candidates.push(join(directoryFrom(context.environment["GEMINI_DIR"]), "oauth_creds.json"), path.join(home, ".gemini", "oauth_creds.json"));
+    }
+    else if (provider === "GROK") {
+        candidates.push(join(directoryFrom(context.environment["GROK_HOME"]), "auth.json"), path.join(home, ".grok", "auth.json"));
+    }
+    else if (provider === "KIMI") {
+        candidates.push(join(directoryFrom(context.environment["KIMI_CODE_HOME"]), "credentials", "kimi-code.json"), path.join(home, ".kimi", "credentials", "kimi-code.json"), path.join(home, ".kimi-code", "credentials", "kimi-code.json"), join(directoryFrom(context.environment["KIMI_SHARE_DIR"]), "credentials", "kimi-code.json"));
+    }
+    const seen = new Set();
+    const paths = [];
+    for (const candidate of candidates) {
+        if (candidate === null || seen.has(candidate))
+            continue;
+        seen.add(candidate);
+        paths.push(candidate);
+    }
+    return paths;
+}
+/** The Windows Credential Manager target the Antigravity client writes to. */
+export const ANTIGRAVITY_CREDENTIAL_TARGET = "gemini:antigravity";
+/** The macOS keychain service Claude Code writes to, which this path skips. */
+export const CLAUDE_KEYCHAIN_SERVICE = "Claude Code-credentials";
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function stringField(source, names) {
+    for (const name of names) {
+        const value = source[name];
+        if (typeof value === "string" && value.length > 0)
+            return value;
+    }
+    return null;
+}
+/**
+ * The container inside a credential document that actually holds the token.
+ *
+ * Every one of these clients nests it under a different key, and two of them
+ * changed the key between releases, so the root itself is tried last rather
+ * than first: a document that carries both a nested container and a stray top
+ * level field should be read the way its own client reads it.
+ */
+const CONTAINERS = {
+    CLAUDE: ["claudeAiOauth", "oauth", "credentials"],
+    CODEX: ["tokens", "oauth", "credentials"],
+    GEMINI_CLI: ["oauth", "tokens", "credentials"],
+    ANTIGRAVITY: ["token", "oauth", "tokens", "credentials"],
+    GROK: ["credentials", "auth", "tokens"],
+    KIMI: ["credentials", "oauth", "tokens"],
+    OPENROUTER: ["credentials"]
+};
+const SECRET_FIELDS = {
+    CLAUDE: ["accessToken", "access_token", "token"],
+    CODEX: ["access_token", "accessToken"],
+    GEMINI_CLI: ["access_token", "accessToken"],
+    ANTIGRAVITY: ["access_token", "accessToken", "token"],
+    GROK: ["access_token", "accessToken", "key"],
+    KIMI: ["access_token", "accessToken"],
+    OPENROUTER: ["key", "api_key", "apiKey"]
+};
+const ACCOUNT_FIELDS = [
+    "chatgpt_account_id",
+    "account_id",
+    "accountId",
+    "user_id",
+    "userId"
+];
+const EXPIRY_FIELDS = [
+    "expiresAt",
+    "expires_at",
+    "expiry_date",
+    "expiry",
+    "expires"
+];
+/** The issuer a Grok credential file should be read under when it names one. */
+export const GROK_PREFERRED_ISSUER = "https://auth.x.ai";
+/**
+ * An expiry, whatever unit the document happened to state it in.
+ *
+ * Seconds, milliseconds and RFC3339 all appear across these six clients. A
+ * value below the seconds ceiling is read as seconds, which is the same rule
+ * every reset parser in this product already uses.
+ */
+export function expiryMilliseconds(value) {
+    if (typeof value === "number" && Number.isFinite(value) && value > 0) {
+        return value < 1e12 ? Math.round(value * 1_000) : Math.round(value);
+    }
+    if (typeof value !== "string" || value.length === 0 || value.length > 64)
+        return null;
+    const trimmed = value.trim();
+    if (/^\d{9,14}$/u.test(trimmed)) {
+        return expiryMilliseconds(Number.parseInt(trimmed, 10));
+    }
+    const parsed = Date.parse(trimmed);
+    return Number.isFinite(parsed) ? parsed : null;
+}
+/**
+ * Read one credential document that has already been parsed.
+ *
+ * Exported so a test can prove every shape without writing a file, and so the
+ * Windows Credential Manager path can reuse exactly the same reader for the
+ * envelope it gets back from the credential store.
+ */
+export function readCredentialDocument(provider, document, nowMilliseconds, origin = "vendor_file") {
+    const root = isRecord(document) ? document : null;
+    if (root === null)
+        return { ok: false, reason: "invalid" };
+    const containers = [];
+    for (const name of CONTAINERS[provider]) {
+        const nested = root[name];
+        if (isRecord(nested))
+            containers.push(nested);
+    }
+    containers.push(root);
+    /*
+     * Grok files seen in the wild key their credentials by issuer, because the
+     * client can hold a login from more than one. The issuer this product wants
+     * is named rather than guessed at, and a file with only one entry still
+     * reads through the ordinary path below.
+     */
+    if (provider === "GROK") {
+        const issuers = isRecord(root["issuers"]) ? root["issuers"] : root;
+        const preferred = issuers[GROK_PREFERRED_ISSUER];
+        if (isRecord(preferred))
+            containers.unshift(preferred);
+    }
+    for (const container of containers) {
+        const secret = stringField(container, SECRET_FIELDS[provider]);
+        if (secret === null)
+            continue;
+        const expiry = expiryMilliseconds(EXPIRY_FIELDS.map((name) => container[name]).find((value) => value !== undefined) ?? root["expiresAt"] ?? root["expires_at"]);
+        if (expiry !== null && expiry <= nowMilliseconds) {
+            return { ok: false, reason: "expired" };
+        }
+        const accountId = stringField(container, ACCOUNT_FIELDS) ??
+            stringField(root, ACCOUNT_FIELDS);
+        return {
+            ok: true,
+            credential: {
+                secret,
+                accountId,
+                expiresAtMilliseconds: expiry,
+                origin
+            }
+        };
+    }
+    return { ok: false, reason: "invalid" };
+}
+/**
+ * Read the credential a provider's own client stored, from disk.
+ *
+ * The result is one of four things and never a mixture: a usable credential, a
+ * provider that is simply not installed here, a document that could not be
+ * believed, or a login that has run out. Nothing is refreshed and nothing is
+ * written back.
+ */
+export async function readAcquisitionCredential(provider, options = {}) {
+    const context = resolve(options);
+    const nowMilliseconds = Date.parse(options.now ?? new Date().toISOString());
+    const clock = Number.isFinite(nowMilliseconds) ? nowMilliseconds : Date.now();
+    if (provider === "ANTIGRAVITY" && context.platform === "win32") {
+        const reader = options.readWindowsCredential;
+        if (reader !== undefined) {
+            const stored = await reader(ANTIGRAVITY_CREDENTIAL_TARGET);
+            if (stored.ok) {
+                let parsed;
+                try {
+                    parsed = JSON.parse(stored.value);
+                }
+                catch {
+                    return { ok: false, reason: "invalid" };
+                }
+                return readCredentialDocument(provider, parsed, clock, "vendor_store");
+            }
+            /* A credential store that answered "not here" still lets the Gemini file
+               below stand in, which is what the Antigravity client itself falls back
+               to on a machine where the store was never written. */
+            if (stored.reason !== "absent")
+                return stored;
+        }
+    }
+    let firstFailure = null;
+    for (const candidate of credentialCandidatePaths(provider, options)) {
+        const document = await readJsonFileSafely(candidate, MAX_CREDENTIAL_FILE_BYTES);
+        if (!document.ok) {
+            if (document.reason !== "missing" && firstFailure === null) {
+                firstFailure = "unreadable";
+            }
+            continue;
+        }
+        /* Antigravity reading the Gemini CLI's file is the shared Code Assist
+           quota, not Antigravity's own login, and the row has to say so. */
+        const result = readCredentialDocument(provider, document.value, clock, provider === "ANTIGRAVITY" ? "shared_code_assist" : "vendor_file");
+        if (result.ok)
+            return result;
+        if (firstFailure === null)
+            firstFailure = result.reason;
+    }
+    if (firstFailure !== null)
+        return { ok: false, reason: firstFailure };
+    /*
+     * Claude on macOS keeps its credential in the login keychain rather than in a
+     * file, and reading it would raise an authorization prompt in the middle of a
+     * status line render. That is a deliberate omission with a sentence attached,
+     * not a silent miss, so the row can say why the poll did not happen.
+     */
+    if (provider === "CLAUDE" && context.platform === "darwin") {
+        return { ok: false, reason: "keychain_not_read" };
+    }
+    return { ok: false, reason: "absent" };
+}
+/**
+ * One sentence per failure, for the row a person actually reads.
+ *
+ * No dashes anywhere, and every sentence names the next step rather than the
+ * internal reason, because a person cannot act on the word "invalid".
+ */
+export const CREDENTIAL_FAILURE_SENTENCE = {
+    absent: "no local login found for this provider",
+    unreadable: "the local login file could not be read",
+    invalid: "the local login file was not in a shape this build understands",
+    expired: "the local login has expired, open the provider's own tool once to refresh it",
+    keychain_not_read: "the login is in the macOS keychain, which this command does not open"
+};
+//# sourceMappingURL=credentials.js.map

package/dist/acquire/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/acquire/credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,yDAAyD;AACzD,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,QAAQ;IACR,OAAO;IACP,YAAY;IACZ,aAAa;IACb,MAAM;IACN,MAAM;IACN,YAAY;CACJ,CAAC;AAIX,mEAAmE;AACnE,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAgBhD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,cAAc;IACd,aAAa;IACb,oBAAoB;IACpB,UAAU;CACF,CAAC;AA4CX,SAAS,OAAO,CAAC,OAAgC;IAC/C,OAAO;QACL,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;QAC9C,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG;QAC/C,IAAI,EAAE,OAAO,CAAC,aAAa,IAAI,OAAO,EAAE;KACzC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,KAAyB;IAEzB,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;AACnE,CAAC;AAED,SAAS,SAAS,CAAC,OAAiB;IAClC,OAAO,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,OAAO,CAAC,OAAiB;IAChC,OAAO,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,IAAI,CAAC,IAAmB,EAAE,GAAG,KAAwB;IAC5D,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAA6B,EAC7B,UAAmC,EAAE;IAErC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,MAAM,UAAU,GAAsB,EAAE,CAAC;IACzC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,UAAU,CAAC,IAAI,CACb,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,EAAE,mBAAmB,CAAC,EAClF,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,mBAAmB,CAAC,EAC/C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,mBAAmB,CAAC,EACvD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,mBAAmB,CAAC,EAC5D,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAC3D,CAAC;IACJ,CAAC;SAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,UAAU,CAAC,IAAI,CACb,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,EAAE,WAAW,CAAC,EACnE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,EACtC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,EAC9C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,CAC7C,CAAC;IACJ,CAAC;SAAM,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QACnE,UAAU,CAAC,IAAI,CACb,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,EAAE,kBAAkB,CAAC,EAC1E,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAC/C,CAAC;IACJ,CAAC;SAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC/B,UAAU,CAAC,IAAI,CACb,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,EAAE,WAAW,CAAC,EAClE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,CACtC,CAAC;IACJ,CAAC;SAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC/B,UAAU,CAAC,IAAI,CACb,IAAI,CACF,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,EACpD,aAAa,EACb,gBAAgB,CACjB,EACD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,gBAAgB,CAAC,EACzD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE,gBAAgB,CAAC,EAC9D,IAAI,CACF,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,EACpD,aAAa,EACb,gBAAgB,CACjB,CACF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,SAAS,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,SAAS;QACxD,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,MAAM,6BAA6B,GAAG,oBAAoB,CAAC;AAElE,+EAA+E;AAC/E,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AAEjE,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAClB,MAA+B,EAC/B,KAAwB;IAExB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IAClE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,GAA6D;IAC3E,MAAM,EAAE,CAAC,eAAe,EAAE,OAAO,EAAE,aAAa,CAAC;IACjD,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,aAAa,CAAC;IACzC,UAAU,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC;IAC9C,WAAW,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC;IACxD,IAAI,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC;IACvC,IAAI,EAAE,CAAC,aAAa,EAAE,OAAO,EAAE,QAAQ,CAAC;IACxC,UAAU,EAAE,CAAC,aAAa,CAAC;CAC5B,CAAC;AAEF,MAAM,aAAa,GAA6D;IAC9E,MAAM,EAAE,CAAC,aAAa,EAAE,cAAc,EAAE,OAAO,CAAC;IAChD,KAAK,EAAE,CAAC,cAAc,EAAE,aAAa,CAAC;IACtC,UAAU,EAAE,CAAC,cAAc,EAAE,aAAa,CAAC;IAC3C,WAAW,EAAE,CAAC,cAAc,EAAE,aAAa,EAAE,OAAO,CAAC;IACrD,IAAI,EAAE,CAAC,cAAc,EAAE,aAAa,EAAE,KAAK,CAAC;IAC5C,IAAI,EAAE,CAAC,cAAc,EAAE,aAAa,CAAC;IACrC,UAAU,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC;CACzC,CAAC;AAEF,MAAM,cAAc,GAAsB;IACxC,oBAAoB;IACpB,YAAY;IACZ,WAAW;IACX,SAAS;IACT,QAAQ;CACT,CAAC;AAEF,MAAM,aAAa,GAAsB;IACvC,WAAW;IACX,YAAY;IACZ,aAAa;IACb,QAAQ;IACR,SAAS;CACV,CAAC;AAEF,gFAAgF;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AAEzD;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACrE,OAAO,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IACtF,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,OAAO,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAA6B,EAC7B,QAAiB,EACjB,eAAuB,EACvB,SAA2B,aAAa;IAExC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC3D,MAAM,UAAU,GAA8B,EAAE,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,QAAQ,CAAC,MAAM,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB;;;;;OAKG;IACH,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACnE,MAAM,SAAS,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACjD,IAAI,QAAQ,CAAC,SAAS,CAAC;YAAE,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/D,IAAI,MAAM,KAAK,IAAI;YAAE,SAAS;QAC9B,MAAM,MAAM,GAAG,kBAAkB,CAC/B,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAC/C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAC/B,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,CAC7C,CAAC;QACF,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,IAAI,eAAe,EAAE,CAAC;YACjD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC1C,CAAC;QACD,MAAM,SAAS,GAAG,WAAW,CAAC,SAAS,EAAE,cAAc,CAAC;YACtD,WAAW,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACpC,OAAO;YACL,EAAE,EAAE,IAAI;YACR,UAAU,EAAE;gBACV,MAAM;gBACN,SAAS;gBACT,qBAAqB,EAAE,MAAM;gBAC7B,MAAM;aACP;SACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,QAA6B,EAC7B,UAAmC,EAAE;IAErC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9E,IAAI,QAAQ,KAAK,aAAa,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC/D,MAAM,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;QAC7C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;YAC3D,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;gBACd,IAAI,MAAe,CAAC;gBACpB,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAY,CAAC;gBAC/C,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;gBAC1C,CAAC;gBACD,OAAO,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;YACzE,CAAC;YACD;;oEAEwD;YACxD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC;QAChD,CAAC;IACH,CAAC;IACD,IAAI,YAAY,GAAmC,IAAI,CAAC;IACxD,KAAK,MAAM,SAAS,IAAI,wBAAwB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;QAChF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;gBAC3D,YAAY,GAAG,YAAY,CAAC;YAC9B,CAAC;YACD,SAAS;QACX,CAAC;QACD;4EACoE;QACpE,MAAM,MAAM,GAAG,sBAAsB,CACnC,QAAQ,EACR,QAAQ,CAAC,KAAK,EACd,KAAK,EACL,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,aAAa,CAClE,CAAC;QACF,IAAI,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC7B,IAAI,YAAY,KAAK,IAAI;YAAE,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1D,CAAC;IACD,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACtE;;;;;OAKG;IACH,IAAI,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC3D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACpD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GACc;IACpD,MAAM,EAAE,wCAAwC;IAChD,UAAU,EAAE,wCAAwC;IACpD,OAAO,EAAE,gEAAgE;IACzE,OAAO,EAAE,8EAA8E;IACvF,iBAAiB,EACf,sEAAsE;CACzE,CAAC"}

package/dist/acquire/identity.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Who OpenLimiter says it is on the wire.
+ *
+ * One string, one place, no exceptions. Every other quota monitor that reads a
+ * vendor CLI's token also copies that CLI's user agent, so the vendor cannot
+ * tell the two apart. That is impersonation, it is what the vendor terms
+ * actually forbid, and it is the one line a product with a company behind it
+ * may not cross. We identify as ourselves and accept whatever rate bucket that
+ * puts us in.
+ *
+ * The version is a constant rather than a read of package.json, because this
+ * module is bundled into a published package and a runtime file read would be
+ * one more thing that can fail inside a status line. A test holds it to the
+ * package's own version, so the constant cannot drift.
+ */
+/** The published version this build identifies as. */
+export declare const ACQUISITION_CLIENT_VERSION = "1.3.1";
+/** The only user agent any acquisition request may carry. */
+export declare const OPENLIMITER_USER_AGENT: string;
+//# sourceMappingURL=identity.d.ts.map

package/dist/acquire/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/acquire/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,sDAAsD;AACtD,eAAO,MAAM,0BAA0B,UAAU,CAAC;AAElD,6DAA6D;AAC7D,eAAO,MAAM,sBAAsB,QAC0C,CAAC"}

package/dist/acquire/identity.js

@@ -0,0 +1,20 @@
+/**
+ * Who OpenLimiter says it is on the wire.
+ *
+ * One string, one place, no exceptions. Every other quota monitor that reads a
+ * vendor CLI's token also copies that CLI's user agent, so the vendor cannot
+ * tell the two apart. That is impersonation, it is what the vendor terms
+ * actually forbid, and it is the one line a product with a company behind it
+ * may not cross. We identify as ourselves and accept whatever rate bucket that
+ * puts us in.
+ *
+ * The version is a constant rather than a read of package.json, because this
+ * module is bundled into a published package and a runtime file read would be
+ * one more thing that can fail inside a status line. A test holds it to the
+ * package's own version, so the constant cannot drift.
+ */
+/** The published version this build identifies as. */
+export const ACQUISITION_CLIENT_VERSION = "1.3.1";
+/** The only user agent any acquisition request may carry. */
+export const OPENLIMITER_USER_AGENT = "OpenLimiter/" + ACQUISITION_CLIENT_VERSION + " (+https://openlimiter.com)";
+//# sourceMappingURL=identity.js.map

package/dist/acquire/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/acquire/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,sDAAsD;AACtD,MAAM,CAAC,MAAM,0BAA0B,GAAG,OAAO,CAAC;AAElD,6DAA6D;AAC7D,MAAM,CAAC,MAAM,sBAAsB,GACjC,cAAc,GAAG,0BAA0B,GAAG,6BAA6B,CAAC"}

package/dist/acquire/index.d.ts

@@ -0,0 +1,10 @@
+export * from "./cadence.js";
+export * from "./coordination.js";
+export * from "./credentials.js";
+export * from "./identity.js";
+export * from "./providers.js";
+export * from "./runner.js";
+export * from "./transport.js";
+export * from "./windows-credential.js";
+export * from "./antigravity-probe.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/acquire/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/acquire/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC"}

package/dist/acquire/index.js

@@ -0,0 +1,10 @@
+export * from "./cadence.js";
+export * from "./coordination.js";
+export * from "./credentials.js";
+export * from "./identity.js";
+export * from "./providers.js";
+export * from "./runner.js";
+export * from "./transport.js";
+export * from "./windows-credential.js";
+export * from "./antigravity-probe.js";
+//# sourceMappingURL=index.js.map

package/dist/acquire/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/acquire/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC"}

package/dist/acquire/providers.d.ts

@@ -0,0 +1,86 @@
+/**
+ * One acquisition specification per provider.
+ *
+ * Each is a credential source, a request or two, and the sentence its row
+ * carries. The parser is handed in by the caller, because the parsers live one
+ * package up. Nothing here decides whether a provider should be read: that is
+ * cadence, coordination and configuration, and they are separate on purpose.
+ */
+import type { RawMeter } from "../types.js";
+import type { AcquiredCredential } from "./credentials.js";
+import type { AcquisitionSpec, AcquisitionStep } from "./runner.js";
+export type PayloadParser = (payload: unknown, now: string) => readonly RawMeter[] | null;
+/**
+ * The sentence each row carries about how its number was obtained.
+ *
+ * Every one of these credentials was issued to somebody else's client. That is
+ * a thing a person is entitled to know before they rely on a bar, and it is the
+ * same thing every honest reader of these endpoints says, so it is said here
+ * once rather than implied.
+ */
+export declare const ACQUISITION_DISCLOSURE: {
+    readonly claude: string;
+    readonly codex: "reads the login the Codex CLI stored, may break when OpenAI changes it";
+    readonly gemini: "reads the login the Gemini CLI stored, may break when Google changes it";
+    readonly antigravity: string;
+    readonly grok: string;
+    readonly antigravityShared: string;
+    readonly kimi: "reads the login the Kimi CLI stored, may break when Moonshot changes it";
+    readonly openrouter: "reads OpenRouter's documented key report with your own key";
+};
+/** What the Code Assist bootstrap calls the project the quota read is scoped to. */
+export declare const CODE_ASSIST_PROJECT_FIELD = "cloudaicompanionProject";
+/** The account label a reading taken from the shared Gemini login carries. */
+export declare const SHARED_CODE_ASSIST_ACCOUNT = "gemini-cli-shared";
+/** What a surface should print for that account instead of the identifier. */
+export declare const SHARED_CODE_ASSIST_LABEL = "Shared Google Code Assist quota";
+/** The list a bootstrap carries when it answered and withheld the project. */
+export declare const CODE_ASSIST_TIERS_FIELD = "allowedTiers";
+/**
+ * What the row says when Google withholds the companion project.
+ *
+ * Measured on 2026-09-07 on Lucas's own machine, read only: `loadCodeAssist`
+ * answered 200 to a request identifying as OpenLimiter and returned
+ * `allowedTiers` and `ineligibleTiers` and no `cloudaicompanionProject`, so
+ * there is nothing to scope the quota read to. The desktop reaches the same
+ * endpoint by claiming to be Google's own client
+ * (`apps/desktop/src-tauri/src/net.rs` 273 to 285 records exactly this), which
+ * Rule 1 forbids here. So the row states the fact rather than pretending the
+ * response was malformed.
+ *
+ * This conclusion is drawn ONLY from that measured signature. A day of silence
+ * bought on a guess would hide a provider that was merely having a bad
+ * afternoon, so anything else, a timeout, a 500, a rate limit, or a body that
+ * is not this, stays an ordinary transient failure on the ordinary cadence.
+ */
+export declare const CODE_ASSIST_IDENTITY_SENTENCE: string;
+/**
+ * The two step Code Assist read, shared by Gemini CLI and Antigravity.
+ *
+ * The second step is scoped to the project the first one named. A bootstrap
+ * that names no project produces no request, which the runner reads as a shape
+ * this build did not understand rather than as a reason to ask anyway.
+ */
+export declare function codeAssistSteps(): readonly AcquisitionStep[];
+export interface ClaudeSpecOptions {
+    readonly parse: PayloadParser;
+    /**
+     * Whether the poll is on.
+     *
+     * Off by default and off in every code path that does not read a
+     * configuration file. The documented status line payload is Claude's primary
+     * source; this poll only exists for the hours Claude Code is closed, and a
+     * person opts into it knowing what it does.
+     */
+    readonly enabled: boolean;
+}
+export declare function claudeSpec(options: ClaudeSpecOptions): AcquisitionSpec;
+export declare function codexSpec(parse: PayloadParser): AcquisitionSpec;
+export declare function geminiCliSpec(parse: PayloadParser): AcquisitionSpec;
+/** Whether this credential is the Gemini CLI's, borrowed for the shared quota. */
+export declare function isSharedCodeAssist(credential: AcquiredCredential): boolean;
+export declare function antigravitySpec(parse: PayloadParser): AcquisitionSpec;
+export declare function grokSpec(parse: PayloadParser): AcquisitionSpec;
+export declare function kimiSpec(parse: PayloadParser): AcquisitionSpec;
+export declare function openrouterSpec(parse: PayloadParser): AcquisitionSpec;
+//# sourceMappingURL=providers.d.ts.map

package/dist/acquire/providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../src/acquire/providers.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAWpE,MAAM,MAAM,aAAa,GAAG,CAC1B,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,MAAM,KACR,SAAS,QAAQ,EAAE,GAAG,IAAI,CAAC;AAEhC;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;CAmBzB,CAAC;AAEX,oFAAoF;AACpF,eAAO,MAAM,yBAAyB,4BAA4B,CAAC;AAEnE,8EAA8E;AAC9E,eAAO,MAAM,0BAA0B,sBAAsB,CAAC;AAE9D,8EAA8E;AAC9E,eAAO,MAAM,wBAAwB,oCAAoC,CAAC;AAE1E,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB,iBAAiB,CAAC;AAEtD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,6BAA6B,QAEU,CAAC;AAMrD;;;;;;GAMG;AACH,wBAAgB,eAAe,IAAI,SAAS,eAAe,EAAE,CAwB5D;AAOD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,eAAe,CAWtE;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,aAAa,GAAG,eAAe,CAY/D;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,aAAa,GAAG,eAAe,CASnE;AAED,kFAAkF;AAClF,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,kBAAkB,GAAG,OAAO,CAE1E;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,aAAa,GAAG,eAAe,CAkBrE;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,eAAe,CAU9D;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,eAAe,CAQ9D;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,aAAa,GAAG,eAAe,CAQpE"}