@openlimiter/core 1.2.0 → 1.3.1

package/dist/acquire/transport.js

@@ -0,0 +1,434 @@
+/**
+ * The network layer of the Node acquisition path, closed the same way the
+ * desktop's is.
+ *
+ * There is no function here that fetches a caller supplied URL. There is a
+ * closed list of endpoints, each carrying one constant address and one constant
+ * method, and a transport that is handed a request built from that list. The
+ * whole reachable internet is the table below, and nothing read off disk or out
+ * of a provider response can widen it.
+ *
+ * Failures are a closed vocabulary with no payload, so a header, a body or a
+ * token cannot end up inside an error string no matter who formats it. A
+ * response outside the success range has its body dropped unread.
+ */
+import { OPENLIMITER_USER_AGENT } from "./identity.js";
+/** One request's total budget, connect to last body byte. */
+export const ACQUISITION_TIMEOUT_MILLISECONDS = 15_000;
+/** Largest response body accepted, the bound every state file already uses. */
+export const MAX_ACQUISITION_RESPONSE_BYTES = 1_048_576;
+/* ------------------------------------------------------------- addresses */
+/** The Claude account usage report, read with Claude Code's own OAuth token. */
+export const CLAUDE_OAUTH_USAGE_URL = "https://api.anthropic.com/api/oauth/usage";
+/** The Codex usage report, read with the session the Codex CLI holds. */
+export const CODEX_USAGE_URL = "https://chatgpt.com/backend-api/wham/usage";
+/** Gemini CLI's Code Assist account bootstrap, which names the project. */
+export const GEMINI_CLI_LOAD_URL = "https://cloudcode-pa.googleapis.com/v1internal:loadCodeAssist";
+/** Gemini CLI's per model quota report. */
+export const GEMINI_CLI_QUOTA_URL = "https://cloudcode-pa.googleapis.com/v1internal:retrieveUserQuota";
+/** The Grok Build billing report the official Grok CLI reads. */
+export const GROK_USAGE_URL = "https://cli-chat-proxy.grok.com/v1/billing?format=credits";
+/** The Kimi Code usage report the official Kimi CLI reads. */
+export const KIMI_USAGE_URL = "https://api.kimi.com/coding/v1/usages";
+/** The OpenRouter inference key report: limit, remaining and usage. */
+export const OPENROUTER_KEY_URL = "https://openrouter.ai/api/v1/key";
+/**
+ * Every address this path may speak to.
+ *
+ * Adding a provider means adding an entry here, in code, in review. Antigravity
+ * has no entry of its own: it reads the same Code Assist pair as Gemini CLI
+ * with the credential the Antigravity client stored, which is why this table is
+ * shorter than the provider list.
+ */
+export const ACQUISITION_ENDPOINTS = {
+    claude_usage: { url: CLAUDE_OAUTH_USAGE_URL, method: "GET" },
+    codex_usage: { url: CODEX_USAGE_URL, method: "GET" },
+    code_assist_load: { url: GEMINI_CLI_LOAD_URL, method: "POST" },
+    code_assist_quota: { url: GEMINI_CLI_QUOTA_URL, method: "POST" },
+    grok_billing: { url: GROK_USAGE_URL, method: "GET" },
+    kimi_usage: { url: KIMI_USAGE_URL, method: "GET" },
+    openrouter_key: { url: OPENROUTER_KEY_URL, method: "GET" }
+};
+/* ---------------------------------------------------------------- headers */
+/** The beta contract the OAuth usage route answers. */
+export const CLAUDE_OAUTH_BETA_HEADER = "anthropic-beta";
+export const CLAUDE_OAUTH_BETA_VALUE = "oauth-2025-04-20";
+/** The account header the ChatGPT backend reads beside the bearer token. */
+export const CODEX_ACCOUNT_HEADER = "chatgpt-account-id";
+/** The account identity the Grok billing service reads beside the token. */
+export const GROK_ACCOUNT_HEADER = "x-userid";
+/**
+ * The Code Assist bootstrap body, the same metadata the maintained client
+ * sends for an account that is already onboarded. Undefined project fields are
+ * omitted exactly as that client omits them.
+ */
+export const CODE_ASSIST_LOAD_BODY = JSON.stringify({
+    metadata: {
+        ideType: "IDE_UNSPECIFIED",
+        platform: "PLATFORM_UNSPECIFIED",
+        pluginType: "GEMINI"
+    }
+});
+/**
+ * Whether a secret may be written into a header at all.
+ *
+ * The value is read off disk from a file this process does not own. A control
+ * character in it would let a hostile credential file inject a second header,
+ * so anything that is not bounded printable ASCII is refused before it can
+ * reach a request. Nothing about the refusal names the value.
+ */
+export function usableHeaderSecret(value) {
+    return value.length > 0 &&
+        value.length <= 8_192 &&
+        /^[\x20-\x7E]+$/u.test(value);
+}
+/**
+ * Whether an account identifier may be written into a header.
+ *
+ * Narrower than a secret, because this one is an opaque identifier rather than
+ * a token: letters, digits and the three separators the observed identifiers
+ * use, and nothing else.
+ */
+export function usableHeaderAccountId(value) {
+    return /^[A-Za-z0-9][A-Za-z0-9_.:-]{0,127}$/u.test(value);
+}
+function bearer(secret) {
+    return {
+        authorization: "Bearer " + secret,
+        "user-agent": OPENLIMITER_USER_AGENT,
+        accept: "application/json"
+    };
+}
+/** The Claude usage request. Our identity, and the documented beta contract. */
+export function claudeUsageRequest(secret) {
+    if (!usableHeaderSecret(secret))
+        return null;
+    return {
+        endpoint: "claude_usage",
+        url: ACQUISITION_ENDPOINTS.claude_usage.url,
+        method: "GET",
+        headers: { ...bearer(secret), [CLAUDE_OAUTH_BETA_HEADER]: CLAUDE_OAUTH_BETA_VALUE },
+        body: null
+    };
+}
+/** The Codex usage request, with the account header the backend requires. */
+export function codexUsageRequest(secret, accountId) {
+    if (!usableHeaderSecret(secret) || !usableHeaderAccountId(accountId))
+        return null;
+    return {
+        endpoint: "codex_usage",
+        url: ACQUISITION_ENDPOINTS.codex_usage.url,
+        method: "GET",
+        headers: { ...bearer(secret), [CODEX_ACCOUNT_HEADER]: accountId },
+        body: null
+    };
+}
+/** The Code Assist bootstrap, which answers with the companion project. */
+export function codeAssistLoadRequest(secret) {
+    if (!usableHeaderSecret(secret))
+        return null;
+    return {
+        endpoint: "code_assist_load",
+        url: ACQUISITION_ENDPOINTS.code_assist_load.url,
+        method: "POST",
+        headers: { ...bearer(secret), "content-type": "application/json" },
+        body: CODE_ASSIST_LOAD_BODY
+    };
+}
+/**
+ * Shape of a companion project identifier, and the reason there is one.
+ *
+ * The value arrives in a provider response body and is then written into the
+ * body of our next request. That is the one place a provider gets to influence
+ * what we send, so it is held to an opaque identifier and nothing else.
+ */
+export const CODE_ASSIST_PROJECT_PATTERN = /^[A-Za-z0-9][A-Za-z0-9_.:-]{0,127}$/u;
+/** The per model quota request, scoped to a validated companion project. */
+export function codeAssistQuotaRequest(secret, project) {
+    if (!usableHeaderSecret(secret))
+        return null;
+    if (!CODE_ASSIST_PROJECT_PATTERN.test(project))
+        return null;
+    return {
+        endpoint: "code_assist_quota",
+        url: ACQUISITION_ENDPOINTS.code_assist_quota.url,
+        method: "POST",
+        headers: { ...bearer(secret), "content-type": "application/json" },
+        body: JSON.stringify({ project, userAgent: OPENLIMITER_USER_AGENT })
+    };
+}
+/**
+ * The Grok billing request.
+ *
+ * The account header is an identifier for the person's own account and is sent
+ * when the credential names one. Nothing else is: the desktop sends xAI's
+ * `x-xai-token-auth: xai-grok-cli` marker beside it, and that value NAMES THE
+ * VENDOR'S OWN TOOL, which is the same claim a copied user agent makes. Rule 1
+ * says we identify as OpenLimiter and take whatever that costs us, so the
+ * marker is not sent here and no client version is invented either.
+ *
+ * The consequence is honestly unknown rather than assumed: no Grok login exists
+ * on the machine this was written on, so whether the billing route answers a
+ * request that does not claim to be the Grok CLI is verified on the first
+ * install that has one, and the row says so until then.
+ */
+export function grokBillingRequest(secret, accountId) {
+    if (!usableHeaderSecret(secret))
+        return null;
+    const account = accountId !== null && usableHeaderAccountId(accountId)
+        ? accountId
+        : null;
+    return {
+        endpoint: "grok_billing",
+        url: ACQUISITION_ENDPOINTS.grok_billing.url,
+        method: "GET",
+        headers: {
+            ...bearer(secret),
+            ...(account === null ? {} : { [GROK_ACCOUNT_HEADER]: account })
+        },
+        body: null
+    };
+}
+/** The Kimi Code usage request. */
+export function kimiUsageRequest(secret) {
+    if (!usableHeaderSecret(secret))
+        return null;
+    return {
+        endpoint: "kimi_usage",
+        url: ACQUISITION_ENDPOINTS.kimi_usage.url,
+        method: "GET",
+        headers: bearer(secret),
+        body: null
+    };
+}
+/** The OpenRouter key report, the one documented interface in this table. */
+export function openrouterKeyRequest(secret) {
+    if (!usableHeaderSecret(secret))
+        return null;
+    return {
+        endpoint: "openrouter_key",
+        url: ACQUISITION_ENDPOINTS.openrouter_key.url,
+        method: "GET",
+        headers: bearer(secret),
+        body: null
+    };
+}
+/* -------------------------------------------------------------- outcomes */
+/**
+ * What one request achieved, in words this product owns.
+ *
+ * Every value here is a decision about what to do next, never a description of
+ * a response body. `blocked` and `rate_limited` are separated because they earn
+ * different backoffs, and `drift` is separated from `remote_error` because only
+ * drift says the meaning of a stored reading is in doubt.
+ *
+ * `identity_refused` is the one that cost the most to learn. A provider can
+ * answer 200 to an honest client and still leave out the field the next request
+ * needs, which reads exactly like drift and is not: nothing changed shape, the
+ * provider simply serves that field to its own tools. Measured on 2026-09-07
+ * against Code Assist, which answered 200 with tier information and no
+ * companion project. Calling it drift would have had this build retry every
+ * fifteen minutes forever against an answer that will never differ.
+ */
+export const ACQUISITION_OUTCOMES = [
+    "ok",
+    "unauthorized",
+    "rate_limited",
+    "blocked",
+    "remote_error",
+    "transport",
+    "too_large",
+    "drift",
+    "identity_refused"
+];
+/**
+ * Turn a status into a decision.
+ *
+ * 401 and 403 are told apart on purpose. A lapsed token is a person's next
+ * step, and a refusal to serve this client at all is a reason to stay away for
+ * a day. Everything from 500 up is the provider having a bad minute and is
+ * retried on the ordinary interval.
+ */
+export function outcomeForStatus(status) {
+    if (status >= 200 && status < 300)
+        return "ok";
+    if (status === 401)
+        return "unauthorized";
+    if (status === 403)
+        return "blocked";
+    if (status === 429)
+        return "rate_limited";
+    return "remote_error";
+}
+/** Retry-After in seconds, when the header is a count of seconds we believe. */
+export function retryAfterSeconds(value) {
+    if (value === null)
+        return null;
+    const trimmed = value.trim();
+    if (!/^\d{1,7}$/u.test(trimmed))
+        return null;
+    const seconds = Number.parseInt(trimmed, 10);
+    return Number.isFinite(seconds) && seconds > 0 ? seconds : null;
+}
+/**
+ * The header names an acquisition request may carry.
+ *
+ * Closed, and checked at the boundary below rather than trusted from the
+ * builders above. The builders are the only callers today, but the transport is
+ * exported and a future caller that assembled a request by hand would otherwise
+ * be able to put anything on the wire under this product's name.
+ */
+export const ALLOWED_REQUEST_HEADERS = [
+    "authorization",
+    "accept",
+    "user-agent",
+    "content-type",
+    CLAUDE_OAUTH_BETA_HEADER,
+    CODEX_ACCOUNT_HEADER,
+    GROK_ACCOUNT_HEADER
+];
+/**
+ * Whether one header's VALUE is the value that header is allowed to hold.
+ *
+ * Checking names alone was half a check. A name allowlist stops a cookie going
+ * out; it does nothing about an authorization header carrying something that is
+ * not a bearer token, or a beta header carrying a contract we never agreed to,
+ * or an account header carrying a path. Each of these has exactly one shape and
+ * this is where each one is held to it.
+ */
+function validHeaderValue(name, value, method) {
+    if (!/^[\x20-\x7E]+$/u.test(value))
+        return false;
+    if (name === "user-agent")
+        return value === OPENLIMITER_USER_AGENT;
+    if (name === "accept")
+        return value === "application/json";
+    if (name === "content-type") {
+        return value === "application/json" && method === "POST";
+    }
+    if (name === "authorization") {
+        return value.startsWith("Bearer ") && usableHeaderSecret(value.slice(7));
+    }
+    if (name === CLAUDE_OAUTH_BETA_HEADER)
+        return value === CLAUDE_OAUTH_BETA_VALUE;
+    if (name === CODEX_ACCOUNT_HEADER || name === GROK_ACCOUNT_HEADER) {
+        return usableHeaderAccountId(value);
+    }
+    return false;
+}
+/**
+ * Whether a request body is the body that endpoint is allowed to carry.
+ *
+ * Two endpoints take a body and both bodies have a fixed shape. The bootstrap's
+ * is a constant. The quota read's carries the one field a provider response
+ * ever influences, which is exactly why it is checked here rather than trusted
+ * from the builder: this is the last point before the wire, and the last chance
+ * to notice that a project identifier grew into something else.
+ */
+function validRequestBody(request) {
+    if (request.endpoint === "code_assist_load") {
+        return request.body === CODE_ASSIST_LOAD_BODY;
+    }
+    if (request.endpoint === "code_assist_quota") {
+        if (request.body === null)
+            return false;
+        let parsed;
+        try {
+            parsed = JSON.parse(request.body);
+        }
+        catch {
+            return false;
+        }
+        if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+            return false;
+        }
+        const fields = parsed;
+        const keys = Object.keys(fields).sort();
+        if (keys.length !== 2 || keys[0] !== "project" || keys[1] !== "userAgent") {
+            return false;
+        }
+        const project = fields["project"];
+        return typeof project === "string" &&
+            CODE_ASSIST_PROJECT_PATTERN.test(project) &&
+            fields["userAgent"] === OPENLIMITER_USER_AGENT;
+    }
+    /* Every other endpoint is a GET that asks for something and sends nothing. */
+    return request.body === null && request.method === "GET";
+}
+/**
+ * Whether a request may leave this process.
+ *
+ * Address, method, every header name, every header VALUE and the body, all
+ * answered against constants in this file. A request that fails any of them
+ * never reaches the network.
+ */
+export function validAcquisitionRequest(request) {
+    const endpoint = ACQUISITION_ENDPOINTS[request.endpoint];
+    if (endpoint === undefined)
+        return false;
+    if (request.url !== endpoint.url || request.method !== endpoint.method)
+        return false;
+    if (request.headers["user-agent"] !== OPENLIMITER_USER_AGENT)
+        return false;
+    for (const name of Object.keys(request.headers)) {
+        if (!ALLOWED_REQUEST_HEADERS.includes(name))
+            return false;
+        const value = request.headers[name];
+        if (value === undefined)
+            return false;
+        if (!validHeaderValue(name, value, request.method))
+            return false;
+    }
+    return validRequestBody(request);
+}
+/**
+ * The transport the product uses, built on the runtime's own fetch.
+ *
+ * Redirects are refused rather than followed: a redirect on any of these
+ * addresses would carry the bearer token somewhere the closed table above never
+ * named. The body is bounded before it is decoded, and the whole request lives
+ * under one deadline. A transport level failure is an exception, which the
+ * runner turns into the `transport` outcome without ever formatting it.
+ */
+export function createFetchTransport(fetchImplementation = globalThis.fetch) {
+    return async (request) => {
+        /* Payload free on purpose. The runner turns this into the `transport`
+           outcome, and an error carrying a URL or a header would be the one place
+           a credential could reach a log. */
+        if (!validAcquisitionRequest(request)) {
+            throw new Error("Refused a request outside the acquisition contract");
+        }
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), ACQUISITION_TIMEOUT_MILLISECONDS);
+        try {
+            const response = await fetchImplementation(request.url, {
+                method: request.method,
+                headers: { ...request.headers },
+                redirect: "error",
+                signal: controller.signal,
+                ...(request.body === null ? {} : { body: request.body })
+            });
+            const retryAfter = retryAfterSeconds(response.headers.get("retry-after"));
+            if (response.status < 200 || response.status >= 300) {
+                /* The body of a refusal is never read. It cannot help, and reading it
+                   is how a provider's prose reaches a log. */
+                return { status: response.status, body: "", retryAfterSeconds: retryAfter };
+            }
+            const buffer = await response.arrayBuffer();
+            if (buffer.byteLength > MAX_ACQUISITION_RESPONSE_BYTES) {
+                /* Status zero is this layer's way of saying the answer was refused
+                   before it was read, which the runner reads as too large. */
+                return { status: 0, body: "", retryAfterSeconds: retryAfter };
+            }
+            return {
+                status: response.status,
+                body: new TextDecoder("utf-8", { fatal: false }).decode(buffer),
+                retryAfterSeconds: retryAfter
+            };
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    };
+}
+//# sourceMappingURL=transport.js.map

package/dist/acquire/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../src/acquire/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAEvD,6DAA6D;AAC7D,MAAM,CAAC,MAAM,gCAAgC,GAAG,MAAM,CAAC;AAEvD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,8BAA8B,GAAG,SAAS,CAAC;AAExD,6EAA6E;AAE7E,gFAAgF;AAChF,MAAM,CAAC,MAAM,sBAAsB,GAAG,2CAA2C,CAAC;AAElF,yEAAyE;AACzE,MAAM,CAAC,MAAM,eAAe,GAAG,4CAA4C,CAAC;AAE5E,2EAA2E;AAC3E,MAAM,CAAC,MAAM,mBAAmB,GAC9B,+DAA+D,CAAC;AAElE,2CAA2C;AAC3C,MAAM,CAAC,MAAM,oBAAoB,GAC/B,kEAAkE,CAAC;AAErE,iEAAiE;AACjE,MAAM,CAAC,MAAM,cAAc,GAAG,2DAA2D,CAAC;AAE1F,8DAA8D;AAC9D,MAAM,CAAC,MAAM,cAAc,GAAG,uCAAuC,CAAC;AAEtE,uEAAuE;AACvE,MAAM,CAAC,MAAM,kBAAkB,GAAG,kCAAkC,CAAC;AAErE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,YAAY,EAAE,EAAE,GAAG,EAAE,sBAAsB,EAAE,MAAM,EAAE,KAAK,EAAE;IAC5D,WAAW,EAAE,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,KAAK,EAAE;IACpD,gBAAgB,EAAE,EAAE,GAAG,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAAE;IAC9D,iBAAiB,EAAE,EAAE,GAAG,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,EAAE;IAChE,YAAY,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE;IACpD,UAAU,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE;IAClD,cAAc,EAAE,EAAE,GAAG,EAAE,kBAAkB,EAAE,MAAM,EAAE,KAAK,EAAE;CAC0B,CAAC;AAIvF,8EAA8E;AAE9E,uDAAuD;AACvD,MAAM,CAAC,MAAM,wBAAwB,GAAG,gBAAgB,CAAC;AACzD,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AAE1D,4EAA4E;AAC5E,MAAM,CAAC,MAAM,oBAAoB,GAAG,oBAAoB,CAAC;AAEzD,4EAA4E;AAC5E,MAAM,CAAC,MAAM,mBAAmB,GAAG,UAAU,CAAC;AAE9C;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC,SAAS,CAAC;IAClD,QAAQ,EAAE;QACR,OAAO,EAAE,iBAAiB;QAC1B,QAAQ,EAAE,sBAAsB;QAChC,UAAU,EAAE,QAAQ;KACrB;CACF,CAAC,CAAC;AAUH;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC;QACrB,KAAK,CAAC,MAAM,IAAI,KAAK;QACrB,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,OAAO,sCAAsC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,MAAM,CAAC,MAAc;IAC5B,OAAO;QACL,aAAa,EAAE,SAAS,GAAG,MAAM;QACjC,YAAY,EAAE,sBAAsB;QACpC,MAAM,EAAE,kBAAkB;KAC3B,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO;QACL,QAAQ,EAAE,cAAc;QACxB,GAAG,EAAE,qBAAqB,CAAC,YAAY,CAAC,GAAG;QAC3C,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,wBAAwB,CAAC,EAAE,uBAAuB,EAAE;QACnF,IAAI,EAAE,IAAI;KACX,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,SAAiB;IAEjB,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAClF,OAAO;QACL,QAAQ,EAAE,aAAa;QACvB,GAAG,EAAE,qBAAqB,CAAC,WAAW,CAAC,GAAG;QAC1C,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,oBAAoB,CAAC,EAAE,SAAS,EAAE;QACjE,IAAI,EAAE,IAAI;KACX,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAClD,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO;QACL,QAAQ,EAAE,kBAAkB;QAC5B,GAAG,EAAE,qBAAqB,CAAC,gBAAgB,CAAC,GAAG;QAC/C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAClE,IAAI,EAAE,qBAAqB;KAC5B,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,sCAAsC,CAAC;AAElF,4EAA4E;AAC5E,MAAM,UAAU,sBAAsB,CACpC,MAAc,EACd,OAAe;IAEf,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,OAAO;QACL,QAAQ,EAAE,mBAAmB;QAC7B,GAAG,EAAE,qBAAqB,CAAC,iBAAiB,CAAC,GAAG;QAChD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAClE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,sBAAsB,EAAE,CAAC;KACrE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAc,EACd,SAAwB;IAExB,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,OAAO,GAAG,SAAS,KAAK,IAAI,IAAI,qBAAqB,CAAC,SAAS,CAAC;QACpE,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,CAAC;IACT,OAAO;QACL,QAAQ,EAAE,cAAc;QACxB,GAAG,EAAE,qBAAqB,CAAC,YAAY,CAAC,GAAG;QAC3C,MAAM,EAAE,KAAK;QACb,OAAO,EAAE;YACP,GAAG,MAAM,CAAC,MAAM,CAAC;YACjB,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,OAAO,EAAE,CAAC;SAChE;QACD,IAAI,EAAE,IAAI;KACX,CAAC;AACJ,CAAC;AAED,mCAAmC;AACnC,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO;QACL,QAAQ,EAAE,YAAY;QACtB,GAAG,EAAE,qBAAqB,CAAC,UAAU,CAAC,GAAG;QACzC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;QACvB,IAAI,EAAE,IAAI;KACX,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO;QACL,QAAQ,EAAE,gBAAgB;QAC1B,GAAG,EAAE,qBAAqB,CAAC,cAAc,CAAC,GAAG;QAC7C,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;QACvB,IAAI,EAAE,IAAI;KACX,CAAC;AACJ,CAAC;AAED,6EAA6E;AAE7E;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,IAAI;IACJ,cAAc;IACd,cAAc;IACd,SAAS;IACT,cAAc;IACd,WAAW;IACX,WAAW;IACX,OAAO;IACP,kBAAkB;CACV,CAAC;AAeX;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,cAAc,CAAC;IAC1C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IACrC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,cAAc,CAAC;IAC1C,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,iBAAiB,CAAC,KAAoB;IACpD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAsB;IACxD,eAAe;IACf,QAAQ;IACR,YAAY;IACZ,cAAc;IACd,wBAAwB;IACxB,oBAAoB;IACpB,mBAAmB;CACpB,CAAC;AAEF;;;;;;;;GAQG;AACH,SAAS,gBAAgB,CAAC,IAAY,EAAE,KAAa,EAAE,MAAc;IACnE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,KAAK,KAAK,sBAAsB,CAAC;IACnE,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,KAAK,kBAAkB,CAAC;IAC3D,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QAC5B,OAAO,KAAK,KAAK,kBAAkB,IAAI,MAAM,KAAK,MAAM,CAAC;IAC3D,CAAC;IACD,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,IAAI,KAAK,wBAAwB;QAAE,OAAO,KAAK,KAAK,uBAAuB,CAAC;IAChF,IAAI,IAAI,KAAK,oBAAoB,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QAClE,OAAO,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,gBAAgB,CAAC,OAA2B;IACnD,IAAI,OAAO,CAAC,QAAQ,KAAK,kBAAkB,EAAE,CAAC;QAC5C,OAAO,OAAO,CAAC,IAAI,KAAK,qBAAqB,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,mBAAmB,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACxC,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAY,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,MAAM,GAAG,MAAiC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;YAC1E,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QAClC,OAAO,OAAO,OAAO,KAAK,QAAQ;YAChC,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC;YACzC,MAAM,CAAC,WAAW,CAAC,KAAK,sBAAsB,CAAC;IACnD,CAAC;IACD,8EAA8E;IAC9E,OAAO,OAAO,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC;AAC3D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAA2B;IACjE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACrF,IAAI,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,sBAAsB;QAAE,OAAO,KAAK,CAAC;IAC3E,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACtC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;IACnE,CAAC;IACD,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAClC,sBAA+C,UAAU,CAAC,KAAK;IAE/D,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB;;6CAEqC;QACrC,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EACxB,gCAAgC,CACjC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,GAAG,EAAE;gBACtD,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE;gBAC/B,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;aACzD,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;YAC1E,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;gBACpD;8DAC8C;gBAC9C,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC;YAC9E,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC5C,IAAI,MAAM,CAAC,UAAU,GAAG,8BAA8B,EAAE,CAAC;gBACvD;8EAC8D;gBAC9D,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC;YAChE,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,IAAI,EAAE,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC/D,iBAAiB,EAAE,UAAU;aAC9B,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/acquire/windows-credential.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Reading one Windows Credential Manager entry, with no native dependency.
+ *
+ * The Antigravity client keeps its token in the credential store rather than in
+ * a file, so a Windows machine has nothing on disk to read. Every published way
+ * to reach the store from Node is a native module with an install script, which
+ * is a compiler on a user's machine and a post install hook in our supply chain
+ * for the sake of one string. This asks Windows itself instead: PowerShell with
+ * no profile, a small block that declares CredRead through the platform
+ * invocation layer, and base64 on the way out so a credential containing a
+ * quote or a newline cannot change the shape of what comes back.
+ *
+ * Nothing here writes to the store, and the target is a constant supplied by
+ * the caller rather than anything read off disk.
+ */
+/** How long the helper may run before it is abandoned. */
+export declare const WINDOWS_CREDENTIAL_TIMEOUT_MILLISECONDS = 5000;
+/** Largest credential blob accepted, matching the desktop's own bound. */
+export declare const MAX_WINDOWS_CREDENTIAL_BYTES = 16384;
+/**
+ * The one shape a credential target may take.
+ *
+ * Bounded printable ASCII with no quote and no newline, so the value can never
+ * end a string literal inside the script below. A target outside this shape is
+ * refused rather than escaped: there is exactly one target in this product and
+ * it is a constant.
+ */
+export declare const CREDENTIAL_TARGET_PATTERN: RegExp;
+export type CredentialCommandRunner = (executable: string, argumentsList: readonly string[], timeoutMilliseconds: number) => Promise<{
+    ok: true;
+    stdout: string;
+} | {
+    ok: false;
+}>;
+export type WindowsCredentialOutcome = {
+    ok: true;
+    value: string;
+} | {
+    ok: false;
+    reason: "absent" | "unreadable" | "invalid";
+};
+/**
+ * The script the helper runs.
+ *
+ * It declares only CredRead and CredFree, reads the blob as bytes, and writes
+ * base64 to standard output. A missing entry prints nothing and exits zero,
+ * which is how "this machine has no Antigravity login" reaches us as an absence
+ * rather than as an error.
+ */
+export declare function credentialReadScript(target: string): string;
+/**
+ * Decode what the helper printed.
+ *
+ * Empty output is an absent entry, which is the ordinary answer on a machine
+ * that never ran the Antigravity client. Anything that is not base64 of valid
+ * UTF-16 or UTF-8 text is unreadable, and neither branch ever echoes what it
+ * saw.
+ */
+export declare function decodeCredentialOutput(stdout: string): WindowsCredentialOutcome;
+export interface WindowsCredentialOptions {
+    readonly runCommand: CredentialCommandRunner;
+    readonly powerShellExecutable?: string;
+    readonly timeoutMilliseconds?: number;
+}
+/** The executable the helper is run through, named rather than searched for. */
+export declare const DEFAULT_POWERSHELL_EXECUTABLE = "powershell.exe";
+/**
+ * Read one credential target through the helper.
+ *
+ * The runner is injected so this whole path is provable without a credential on
+ * the machine and so a test can never reach the real store.
+ */
+export declare function readWindowsCredentialWith(target: string, options: WindowsCredentialOptions): Promise<WindowsCredentialOutcome>;
+//# sourceMappingURL=windows-credential.d.ts.map

package/dist/acquire/windows-credential.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"windows-credential.d.ts","sourceRoot":"","sources":["../../src/acquire/windows-credential.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,0DAA0D;AAC1D,eAAO,MAAM,uCAAuC,OAAQ,CAAC;AAE7D,0EAA0E;AAC1E,eAAO,MAAM,4BAA4B,QAAS,CAAC;AAEnD;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,QAA6C,CAAC;AAEpF,MAAM,MAAM,uBAAuB,GAAG,CACpC,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,SAAS,MAAM,EAAE,EAChC,mBAAmB,EAAE,MAAM,KACxB,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,CAAC,CAAC;AAE3D,MAAM,MAAM,wBAAwB,GAChC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC3B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,QAAQ,GAAG,YAAY,GAAG,SAAS,CAAA;CAAE,CAAC;AAE/D;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CA2B3D;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,wBAAwB,CAwB/E;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAC;IAC7C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;CACvC;AAED,gFAAgF;AAChF,eAAO,MAAM,6BAA6B,mBAAmB,CAAC;AAE9D;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,wBAAwB,CAAC,CAiBnC"}

package/dist/acquire/windows-credential.js

@@ -0,0 +1,124 @@
+/**
+ * Reading one Windows Credential Manager entry, with no native dependency.
+ *
+ * The Antigravity client keeps its token in the credential store rather than in
+ * a file, so a Windows machine has nothing on disk to read. Every published way
+ * to reach the store from Node is a native module with an install script, which
+ * is a compiler on a user's machine and a post install hook in our supply chain
+ * for the sake of one string. This asks Windows itself instead: PowerShell with
+ * no profile, a small block that declares CredRead through the platform
+ * invocation layer, and base64 on the way out so a credential containing a
+ * quote or a newline cannot change the shape of what comes back.
+ *
+ * Nothing here writes to the store, and the target is a constant supplied by
+ * the caller rather than anything read off disk.
+ */
+/** How long the helper may run before it is abandoned. */
+export const WINDOWS_CREDENTIAL_TIMEOUT_MILLISECONDS = 5_000;
+/** Largest credential blob accepted, matching the desktop's own bound. */
+export const MAX_WINDOWS_CREDENTIAL_BYTES = 16_384;
+/**
+ * The one shape a credential target may take.
+ *
+ * Bounded printable ASCII with no quote and no newline, so the value can never
+ * end a string literal inside the script below. A target outside this shape is
+ * refused rather than escaped: there is exactly one target in this product and
+ * it is a constant.
+ */
+export const CREDENTIAL_TARGET_PATTERN = /^[A-Za-z0-9][A-Za-z0-9_.:@\\/-]{0,127}$/u;
+/**
+ * The script the helper runs.
+ *
+ * It declares only CredRead and CredFree, reads the blob as bytes, and writes
+ * base64 to standard output. A missing entry prints nothing and exits zero,
+ * which is how "this machine has no Antigravity login" reaches us as an absence
+ * rather than as an error.
+ */
+export function credentialReadScript(target) {
+    return [
+        "$ErrorActionPreference = 'Stop';",
+        "Add-Type -Namespace OpenLimiterCred -Name Native -MemberDefinition @'",
+        "[DllImport(\"advapi32.dll\", CharSet = CharSet.Unicode, SetLastError = true)]",
+        "public static extern bool CredRead(string target, uint type, uint flags, out IntPtr credential);",
+        "[DllImport(\"advapi32.dll\", SetLastError = true)]",
+        "public static extern void CredFree(IntPtr buffer);",
+        "'@;",
+        "$handle = [IntPtr]::Zero;",
+        "if (-not [OpenLimiterCred.Native]::CredRead('" + target + "', 1, 0, [ref] $handle)) { exit 0 };",
+        "try {",
+        /* CREDENTIALW packs its blob size and blob pointer at different offsets on
+           a 32 bit and a 64 bit host, so the offsets are derived from the pointer
+           width rather than hard coded to whichever one this machine happens to
+           be. Reading the wrong offset would hand back another field's bytes. */
+        "  $wide = [IntPtr]::Size -eq 8;",
+        "  $sizeOffset = if ($wide) { 32 } else { 24 };",
+        "  $blobOffset = if ($wide) { 40 } else { 28 };",
+        "  $size = [Runtime.InteropServices.Marshal]::ReadInt32($handle, $sizeOffset);",
+        "  $blob = [Runtime.InteropServices.Marshal]::ReadIntPtr($handle, $blobOffset);",
+        "  if ($size -le 0 -or $size -gt " + String(MAX_WINDOWS_CREDENTIAL_BYTES) + ") { exit 0 };",
+        "  $bytes = New-Object byte[] $size;",
+        "  [Runtime.InteropServices.Marshal]::Copy($blob, $bytes, 0, $size);",
+        "  [Console]::Out.Write([Convert]::ToBase64String($bytes));",
+        "} finally { [OpenLimiterCred.Native]::CredFree($handle) }"
+    ].join("\n");
+}
+/**
+ * Decode what the helper printed.
+ *
+ * Empty output is an absent entry, which is the ordinary answer on a machine
+ * that never ran the Antigravity client. Anything that is not base64 of valid
+ * UTF-16 or UTF-8 text is unreadable, and neither branch ever echoes what it
+ * saw.
+ */
+export function decodeCredentialOutput(stdout) {
+    const trimmed = stdout.trim();
+    if (trimmed === "")
+        return { ok: false, reason: "absent" };
+    if (!/^[A-Za-z0-9+/=]+$/u.test(trimmed))
+        return { ok: false, reason: "unreadable" };
+    let bytes;
+    try {
+        bytes = Buffer.from(trimmed, "base64");
+    }
+    catch {
+        return { ok: false, reason: "unreadable" };
+    }
+    if (bytes.byteLength === 0 || bytes.byteLength > MAX_WINDOWS_CREDENTIAL_BYTES) {
+        return { ok: false, reason: "unreadable" };
+    }
+    /* The store holds the blob the writer chose, and this one is UTF-8 JSON. A
+       zero byte in an even position is the signature of UTF-16, which the same
+       writer uses on some releases, so both are read and neither is guessed. */
+    const utf16 = bytes.byteLength % 2 === 0 && bytes[1] === 0;
+    const text = utf16
+        ? bytes.toString("utf16le")
+        : bytes.toString("utf8");
+    const value = text.replace(/\0+$/u, "");
+    return value.length === 0
+        ? { ok: false, reason: "unreadable" }
+        : { ok: true, value };
+}
+/** The executable the helper is run through, named rather than searched for. */
+export const DEFAULT_POWERSHELL_EXECUTABLE = "powershell.exe";
+/**
+ * Read one credential target through the helper.
+ *
+ * The runner is injected so this whole path is provable without a credential on
+ * the machine and so a test can never reach the real store.
+ */
+export async function readWindowsCredentialWith(target, options) {
+    if (!CREDENTIAL_TARGET_PATTERN.test(target))
+        return { ok: false, reason: "invalid" };
+    const result = await options.runCommand(options.powerShellExecutable ?? DEFAULT_POWERSHELL_EXECUTABLE, [
+        "-NoProfile",
+        "-NonInteractive",
+        "-ExecutionPolicy",
+        "Bypass",
+        "-Command",
+        credentialReadScript(target)
+    ], options.timeoutMilliseconds ?? WINDOWS_CREDENTIAL_TIMEOUT_MILLISECONDS);
+    return result.ok
+        ? decodeCredentialOutput(result.stdout)
+        : { ok: false, reason: "unreadable" };
+}
+//# sourceMappingURL=windows-credential.js.map

package/dist/acquire/windows-credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"windows-credential.js","sourceRoot":"","sources":["../../src/acquire/windows-credential.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,0DAA0D;AAC1D,MAAM,CAAC,MAAM,uCAAuC,GAAG,KAAK,CAAC;AAE7D,0EAA0E;AAC1E,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAEnD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,0CAA0C,CAAC;AAYpF;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,OAAO;QACL,kCAAkC;QAClC,uEAAuE;QACvE,+EAA+E;QAC/E,kGAAkG;QAClG,oDAAoD;QACpD,oDAAoD;QACpD,KAAK;QACL,2BAA2B;QAC3B,+CAA+C,GAAG,MAAM,GAAG,sCAAsC;QACjG,OAAO;QACP;;;iFAGyE;QACzE,iCAAiC;QACjC,gDAAgD;QAChD,gDAAgD;QAChD,+EAA+E;QAC/E,gFAAgF;QAChF,kCAAkC,GAAG,MAAM,CAAC,4BAA4B,CAAC,GAAG,eAAe;QAC3F,qCAAqC;QACrC,qEAAqE;QACrE,4DAA4D;QAC5D,2DAA2D;KAC5D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC3D,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACpF,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC7C,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,GAAG,4BAA4B,EAAE,CAAC;QAC9E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC7C,CAAC;IACD;;gFAE4E;IAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,KAAK;QAChB,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC3B,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACxC,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;QACvB,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE;QACrC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC;AAQD,gFAAgF;AAChF,MAAM,CAAC,MAAM,6BAA6B,GAAG,gBAAgB,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAc,EACd,OAAiC;IAEjC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACrF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CACrC,OAAO,CAAC,oBAAoB,IAAI,6BAA6B,EAC7D;QACE,YAAY;QACZ,iBAAiB;QACjB,kBAAkB;QAClB,QAAQ;QACR,UAAU;QACV,oBAAoB,CAAC,MAAM,CAAC;KAC7B,EACD,OAAO,CAAC,mBAAmB,IAAI,uCAAuC,CACvE,CAAC;IACF,OAAO,MAAM,CAAC,EAAE;QACd,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC;QACvC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AAC1C,CAAC"}