@quickchatai/quickreview 0.0.0-stage → 1.1.0

package/dist/src/loginrefresh/pirefresh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pirefresh.js","sourceRoot":"","sources":["../../../src/loginrefresh/pirefresh.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,gFAAgF;AAChF,+FAA+F;AAC/F,4EAA4E;AAC5E,yCAAyC;AACzC,EAAE;AACF,+FAA+F;AAC/F,8EAA8E;AAC9E,0EAA0E;AAC1E,0EAA0E;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,MAAM,KAAK,GAAG,uBAAuB,CAAC;AAEtC,kFAAkF;AAClF,MAAM,CAAC,MAAM,aAAa,GAAqC;IAC7D,SAAS,EAAE,oBAAoB;IAC/B,cAAc,EAAE,sBAAsB;IACtC,gBAAgB,EAAE,wBAAwB;IAC1C,UAAU,EAAE,qBAAqB;IACjC,aAAa,EAAE,qBAAqB;IACpC,IAAI,EAAE,eAAe;IACrB,GAAG,EAAE,cAAc;CACpB,CAAC;AAEF,8EAA8E;AAC9E,MAAM,UAAU,OAAO;IACrB,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9B,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;IACxD,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;AAClE,CAAC;AAMD,MAAM,CAAC,MAAM,cAAc,GAAc,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE;IAC9E,MAAM,UAAU,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,QAAQ,EAAE,CAAC,CAAC;IAC1F,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAA4B,CAAC;IAChF,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;IAC/B,IAAI,OAAO,MAAM,KAAK,UAAU;QAC9B,MAAM,IAAI,KAAK,CACb,WAAW,UAAU,iBAAiB,IAAI,yCAAyC,CACpF,CAAC;IACJ,MAAM,IAAI,GAAG,MAAO,MAAmC,EAAE,CAAC;IAC1D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC"}

package/dist/src/loginrefresh/refresher.js

@@ -0,0 +1,286 @@
+// The bot login's single refresher (the VM-only exception to the login-refresh rule).
+//
+// After the cutover no pi session lives long enough to refresh the bot's login:
+// workers borrow refresh-blanked copies (packages/pi-plugin/src/engine/auth.ts). So ONE process
+// owns `pihome/agent/auth.json`: this one. It is a separate small Node process
+// (main.ts) the daemon spawns and supervises by path, so the daemon imports
+// neither pi nor src/engine/.
+//
+//   Lock      an exclusive flock on `auth.json.lock` for its whole life (lock.ts);
+//             a second refresher is refused, before and after any refresh.
+//   Refresh   every 10 minutes, any OAuth entry that is inside pi's refresh
+//             window plus a margin longer than the longest worker cap is
+//             refreshed through `deps.refresh` (pi-ai's own, pirefresh.ts) and
+//             written back atomically (atomic.ts): borrowers take no lock and
+//             always read a whole file.
+//   Failure   one `onFailure` per failure episode (the daemon raises one
+//             `login_refresh_failed` anomaly); a success ends the episode.
+//   Login     the entrypoint's login mode writes `auth.json.pause` and waits for
+//             `paused: true` in the status file. The refresher then neither
+//             refreshes nor writes, but KEEPS the lock, so no second refresher
+//             can start during the login. When the pause file goes it re-reads
+//             the (new) file and resumes. A pause file left behind is lifted
+//             after 15 minutes.
+//
+// Nothing in here reads or prints a token outside the file it owns.
+import { existsSync, readFileSync, statSync, unlinkSync } from "node:fs";
+import { join } from "node:path";
+import { writeFileAtomic } from "./atomic.js";
+import { acquireLoginLock } from "./lock.js";
+export const AUTH_FILE = "auth.json";
+export const LOCK_FILE = "auth.json.lock";
+export const PAUSE_FILE = "auth.json.pause";
+export const STATUS_FILE = "loginrefresh.status.json";
+/** How often the expiry is checked. */
+export const CHECK_EVERY_MS = 10 * 60_000;
+/** How often the pause file is looked at, so a login is not kept waiting. */
+export const PAUSE_POLL_MS = 2_000;
+/** A pause file older than this was left behind and is lifted. */
+export const PAUSE_STALE_MS = 15 * 60_000;
+/** pi refreshes an OAuth token with less than this left (pi-ai auth/resolve.js
+ * DEFAULT_OAUTH_MINIMUM_VALIDITY_MS). VERIFY-ON-PIN. */
+export const PI_REFRESH_WINDOW_MS = 5 * 60_000;
+/** A refresh request is abandoned after this (pi's own bound). */
+export const REFRESH_TIMEOUT_MS = 15_000;
+/** An error text safe to log and publish: token-looking runs removed, bounded. */
+export function redactError(err) {
+    const text = err instanceof Error ? err.message : String(err);
+    return text.replace(/[A-Za-z0-9._~+/=-]{32,}/g, "[redacted]").slice(0, 300);
+}
+function isOAuthEntry(v) {
+    if (typeof v !== "object" || v === null)
+        return false;
+    const c = v;
+    return c["type"] === "oauth" && typeof c["expires"] === "number";
+}
+export class LoginRefresher {
+    deps;
+    lock;
+    auth;
+    pause;
+    statusPath;
+    now;
+    checkEveryMs;
+    pauseStaleMs;
+    startedAt;
+    nextCheckAt = 0;
+    busy = false;
+    paused = false;
+    expiresAt = null;
+    provider = null;
+    lastRefresh = null;
+    lastError = null;
+    errorSince = null;
+    checkedAt = null;
+    /** A refreshed file that could not be written yet: the rotated refresh token
+     * lives only here, so the next check writes it before anything else. */
+    unsaved = null;
+    timer = null;
+    constructor(deps, lock) {
+        this.deps = deps;
+        this.lock = lock;
+        this.auth = join(deps.agentDir, AUTH_FILE);
+        this.pause = join(deps.agentDir, PAUSE_FILE);
+        this.statusPath = join(deps.agentDir, STATUS_FILE);
+        this.now = deps.now ?? Date.now;
+        this.checkEveryMs = deps.checkEveryMs ?? CHECK_EVERY_MS;
+        this.pauseStaleMs = deps.pauseStaleMs ?? PAUSE_STALE_MS;
+        this.startedAt = new Date(this.now()).toISOString();
+    }
+    /**
+     * Take the lock (throws `LoginLockHeld` when another refresher has it), look
+     * at the login once, and, unless `autoRun` is false (tests drive `tick`),
+     * keep looking.
+     */
+    static async start(deps, o = {}) {
+        const lock = await acquireLoginLock(join(deps.agentDir, LOCK_FILE), {
+            ...(deps.flockBin ? { flockBin: deps.flockBin } : {}),
+            gid: deps.gid,
+        });
+        const r = new LoginRefresher(deps, lock);
+        r.publish();
+        await r.tick();
+        if (o.autoRun !== false) {
+            r.timer = setInterval(() => {
+                void r.tick().catch((err) => deps.log("login refresh: tick failed", err));
+            }, deps.pollMs ?? PAUSE_POLL_MS);
+        }
+        return r;
+    }
+    /** Resolves with a reason when the lock is lost under us (the process must end). */
+    get lost() {
+        return this.lock.lost;
+    }
+    status() {
+        return {
+            pid: process.pid,
+            started_at: this.startedAt,
+            expires_at: this.expiresAt === null ? null : new Date(this.expiresAt).toISOString(),
+            provider: this.provider,
+            last_refresh: this.lastRefresh,
+            last_error: this.lastError,
+            error_since: this.errorSince,
+            paused: this.paused,
+            checked_at: this.checkedAt,
+        };
+    }
+    /** Stop looking and drop the lock. */
+    async stop() {
+        if (this.timer)
+            clearInterval(this.timer);
+        this.timer = null;
+        await this.lock.release();
+    }
+    /** One look: the pause file first, then the expiry when it is due. */
+    async tick() {
+        if (this.busy)
+            return;
+        this.busy = true;
+        try {
+            if (this.pauseActive()) {
+                if (!this.paused) {
+                    this.paused = true;
+                    this.deps.log("login refresh: paused for a login (lock kept)");
+                    this.publish();
+                }
+                return;
+            }
+            if (this.paused) {
+                // The login ended: whatever it wrote is the file now. Look at once.
+                this.paused = false;
+                this.nextCheckAt = 0;
+                // A refreshed file held back from before the login is older than it.
+                this.unsaved = null;
+                this.deps.log("login refresh: resumed");
+                this.publish();
+            }
+            if (this.now() < this.nextCheckAt)
+                return;
+            await this.check();
+        }
+        finally {
+            this.busy = false;
+        }
+    }
+    /** True while a login holds the pause. A stale file is removed (and false). */
+    pauseActive() {
+        let mtime;
+        try {
+            mtime = statSync(this.pause).mtimeMs;
+        }
+        catch {
+            return false;
+        }
+        if (this.now() - mtime < this.pauseStaleMs)
+            return true;
+        try {
+            unlinkSync(this.pause);
+        }
+        catch {
+            /* lifted by someone else meanwhile */
+        }
+        this.deps.log(`login refresh: lifted a pause file left behind for over ${Math.round(this.pauseStaleMs / 60_000)} minutes`);
+        return false;
+    }
+    async check() {
+        this.nextCheckAt = this.now() + this.checkEveryMs;
+        this.checkedAt = new Date(this.now()).toISOString();
+        const failures = [];
+        if (this.unsaved !== null) {
+            try {
+                writeFileAtomic(this.auth, this.unsaved, { gid: this.deps.gid });
+                this.unsaved = null;
+            }
+            catch (err) {
+                failures.push(`could not write the refreshed login: ${redactError(err)}`);
+            }
+        }
+        let parsed = null;
+        if (this.unsaved === null && !existsSync(this.auth)) {
+            this.expiresAt = null;
+            this.provider = null;
+        }
+        if (this.unsaved === null && existsSync(this.auth)) {
+            try {
+                const v = JSON.parse(readFileSync(this.auth, "utf8"));
+                if (typeof v !== "object" || v === null || Array.isArray(v))
+                    throw new Error("not an object");
+                parsed = v;
+            }
+            catch (err) {
+                failures.push(`auth.json is unreadable: ${redactError(err)}`);
+            }
+        }
+        if (parsed) {
+            const threshold = this.now() + PI_REFRESH_WINDOW_MS + this.deps.marginMs;
+            for (const [name, entry] of Object.entries(parsed)) {
+                if (!isOAuthEntry(entry) || entry.expires > threshold)
+                    continue;
+                try {
+                    const fresh = await this.deps.refresh(name, entry, AbortSignal.timeout(REFRESH_TIMEOUT_MS));
+                    parsed[name] = { ...entry, ...fresh, type: "oauth" };
+                    this.lastRefresh = new Date(this.now()).toISOString();
+                    // Persist now: the provider may have rotated the refresh token.
+                    const text = JSON.stringify(parsed, null, 2) + "\n";
+                    try {
+                        writeFileAtomic(this.auth, text, { gid: this.deps.gid });
+                    }
+                    catch (err) {
+                        this.unsaved = text;
+                        failures.push(`could not write the refreshed ${name} login: ${redactError(err)}`);
+                        break;
+                    }
+                    this.deps.log(`login refresh: refreshed ${name}`);
+                }
+                catch (err) {
+                    failures.push(`${name}: ${redactError(err)}`);
+                }
+            }
+            this.expiresAt = null;
+            this.provider = null;
+            for (const [name, entry] of Object.entries(parsed)) {
+                if (!isOAuthEntry(entry))
+                    continue;
+                if (this.expiresAt === null || entry.expires < this.expiresAt) {
+                    this.expiresAt = entry.expires;
+                    this.provider = name;
+                }
+            }
+        }
+        if (failures.length > 0)
+            this.fail(failures.join("; "));
+        else
+            this.recover();
+        this.publish();
+    }
+    fail(message) {
+        this.lastError = message;
+        this.deps.log(`login refresh: failed — ${message}`);
+        if (this.errorSince !== null)
+            return;
+        this.errorSince = new Date(this.now()).toISOString();
+        try {
+            this.deps.onFailure?.(message);
+        }
+        catch (err) {
+            this.deps.log("login refresh: failure hook threw", err);
+        }
+    }
+    recover() {
+        if (this.errorSince !== null)
+            this.deps.log("login refresh: recovered");
+        this.lastError = null;
+        this.errorSince = null;
+    }
+    publish() {
+        try {
+            writeFileAtomic(this.statusPath, JSON.stringify(this.status(), null, 2) + "\n", {
+                gid: this.deps.gid,
+            });
+        }
+        catch (err) {
+            this.deps.log("login refresh: status file not written", err);
+        }
+    }
+}
+//# sourceMappingURL=refresher.js.map

package/dist/src/loginrefresh/refresher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresher.js","sourceRoot":"","sources":["../../../src/loginrefresh/refresher.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,EAAE;AACF,gFAAgF;AAChF,gGAAgG;AAChG,+EAA+E;AAC/E,4EAA4E;AAC5E,8BAA8B;AAC9B,EAAE;AACF,mFAAmF;AACnF,2EAA2E;AAC3E,4EAA4E;AAC5E,yEAAyE;AACzE,+EAA+E;AAC/E,8EAA8E;AAC9E,wCAAwC;AACxC,yEAAyE;AACzE,2EAA2E;AAC3E,iFAAiF;AACjF,4EAA4E;AAC5E,+EAA+E;AAC/E,+EAA+E;AAC/E,6EAA6E;AAC7E,gCAAgC;AAChC,EAAE;AACF,oEAAoE;AACpE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACzE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAkB,MAAM,WAAW,CAAC;AAG7D,MAAM,CAAC,MAAM,SAAS,GAAG,WAAW,CAAC;AACrC,MAAM,CAAC,MAAM,SAAS,GAAG,gBAAgB,CAAC;AAC1C,MAAM,CAAC,MAAM,UAAU,GAAG,iBAAiB,CAAC;AAC5C,MAAM,CAAC,MAAM,WAAW,GAAG,0BAA0B,CAAC;AAEtD,uCAAuC;AACvC,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,MAAM,CAAC;AAC1C,6EAA6E;AAC7E,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,CAAC;AACnC,kEAAkE;AAClE,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,MAAM,CAAC;AAC1C;wDACwD;AACxD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,GAAG,MAAM,CAAC;AAC/C,kEAAkE;AAClE,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAqCzC,kFAAkF;AAClF,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,MAAM,IAAI,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC,OAAO,CAAC,0BAA0B,EAAE,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,YAAY,CAAC,CAAU;IAC9B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,OAAO,IAAI,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC;AACnE,CAAC;AAED,MAAM,OAAO,cAAc;IAuBN;IACA;IAvBF,IAAI,CAAS;IACb,KAAK,CAAS;IACd,UAAU,CAAS;IACnB,GAAG,CAAe;IAClB,YAAY,CAAS;IACrB,YAAY,CAAS;IACrB,SAAS,CAAS;IAC3B,WAAW,GAAG,CAAC,CAAC;IAChB,IAAI,GAAG,KAAK,CAAC;IACb,MAAM,GAAG,KAAK,CAAC;IACf,SAAS,GAAkB,IAAI,CAAC;IAChC,QAAQ,GAAkB,IAAI,CAAC;IAC/B,WAAW,GAAkB,IAAI,CAAC;IAClC,SAAS,GAAkB,IAAI,CAAC;IAChC,UAAU,GAAkB,IAAI,CAAC;IACjC,SAAS,GAAkB,IAAI,CAAC;IACxC;4EACwE;IAChE,OAAO,GAAkB,IAAI,CAAC;IAC9B,KAAK,GAA0C,IAAI,CAAC;IAE5D,YACmB,IAAmB,EACnB,IAAe;QADf,SAAI,GAAJ,IAAI,CAAe;QACnB,SAAI,GAAJ,IAAI,CAAW;QAEhC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,cAAc,CAAC;QACxD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,cAAc,CAAC;QACxD,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACtD,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAmB,EAAE,IAA2B,EAAE;QACnE,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE;YAClE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACzC,CAAC,CAAC,OAAO,EAAE,CAAC;QACZ,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YACxB,CAAC,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;gBACzB,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC,CAAC;YAC5E,CAAC,EAAE,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,oFAAoF;IACpF,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IACxB,CAAC;IAED,MAAM;QACJ,OAAO;YACL,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,UAAU,EAAE,IAAI,CAAC,SAAS;YAC1B,UAAU,EAAE,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YACnF,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY,EAAE,IAAI,CAAC,WAAW;YAC9B,UAAU,EAAE,IAAI,CAAC,SAAS;YAC1B,WAAW,EAAE,IAAI,CAAC,UAAU;YAC5B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,SAAS;SAC3B,CAAC;IACJ,CAAC;IAED,sCAAsC;IACtC,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IAC5B,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO;QACtB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;oBACjB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;oBACnB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;oBAC/D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,CAAC;gBACD,OAAO;YACT,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,oEAAoE;gBACpE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;gBACpB,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;gBACrB,qEAAqE;gBACrE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;gBACxC,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW;gBAAE,OAAO;YAC1C,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;QACpB,CAAC;IACH,CAAC;IAED,+EAA+E;IACvE,WAAW;QACjB,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QACxD,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;QACxC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CACX,2DAA2D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,UAAU,CAC5G,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,KAAK;QACjB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC;QAClD,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACjE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACtB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CAAC,wCAAwC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;QAED,IAAI,MAAM,GAAmC,IAAI,CAAC;QAClD,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC;gBACH,MAAM,CAAC,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;gBAC/D,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;oBACzD,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;gBACnC,MAAM,GAAG,CAA4B,CAAC;YACxC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CAAC,4BAA4B,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;YACzE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,GAAG,SAAS;oBAAE,SAAS;gBAChE,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CACnC,IAAI,EACJ,KAAK,EACL,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC,CACxC,CAAC;oBACF,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;oBACrD,IAAI,CAAC,WAAW,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;oBACtD,gEAAgE;oBAChE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;oBACpD,IAAI,CAAC;wBACH,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;oBAC3D,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;wBACpB,QAAQ,CAAC,IAAI,CAAC,iCAAiC,IAAI,WAAW,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBAClF,MAAM;oBACR,CAAC;oBACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;gBACpD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;YACD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;oBAAE,SAAS;gBACnC,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;oBAC9D,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC;oBAC/B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACvB,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;;YACnD,IAAI,CAAC,OAAO,EAAE,CAAC;QACpB,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAEO,IAAI,CAAC,OAAe;QAC1B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,2BAA2B,OAAO,EAAE,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI;YAAE,OAAO;QACrC,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACrD,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAEO,OAAO;QACb,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QACxE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;IACzB,CAAC;IAEO,OAAO;QACb,IAAI,CAAC;YACH,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;gBAC9E,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG;aACnB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,wCAAwC,EAAE,GAAG,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;CACF"}

package/dist/src/loginrefresh/supervisor.js

@@ -0,0 +1,253 @@
+// The login refresher as a supervised child of the daemon.
+//
+// The daemon spawns `dist/src/loginrefresh/main.js` BY PATH, like the local
+// embedder (src/openviking/embedder.ts), so it imports neither pi nor
+// src/engine/ (tests/fences-engine.test.ts holds the second, and
+// tests/loginrefresh.test.ts the first). Same three properties as the other
+// supervised children: `start()` never blocks, a crash respawns on a capped
+// ladder forever, `status()` is synchronous and total.
+//
+// What the daemon adds to the refresher's own file (loginrefresh.status.json):
+//   - one `login_refresh_failed` anomaly per failure episode, through the
+//     existing anomaly sink (`raiseAnomaly` is store.logAnomaly), so a refresh
+//     that cannot work is known at the first failure and not at authwatch's
+//     "expires in under 48 h" backstop;
+//   - `paused()` / `whenResumed()`: the spawn supervisor (the per-round
+//     worker) holds spawns while a login has the refresher paused, because a
+//     borrower's copy of a file a login is rewriting may not parse.
+//
+// Only started when `[login_refresh] enabled` (the cutover's config): until the
+// bot's tmux pi sessions are gone they refresh auth.json themselves, and a
+// second refresher would rotate the refresh token under them.
+import { existsSync, readFileSync } from "node:fs";
+import { spawn as nodeSpawn } from "node:child_process";
+import { join } from "node:path";
+import { foldChildLines, restartDelayMs, terminateChild, } from "../openviking/supervisor.js";
+import { LOCK_HELD_EXIT } from "./lock.js";
+/** The restart ladder, ms: a refresher that cannot start (lock held, config) is
+ * retried slowly; one that crashed after a good run is retried at once. */
+export const LOGIN_RESTART_LADDER_MS = [2_000, 10_000, 60_000];
+/** A run this long resets the ladder. */
+const RESET_AFTER_MS = 60_000;
+/** How often the status file is read for the heartbeat and the failure episodes. */
+export const LOGIN_STATUS_POLL_MS = 5_000;
+const defaultSchedule = (fn, ms) => {
+    const t = setTimeout(fn, ms);
+    t.unref?.();
+    return () => clearTimeout(t);
+};
+export function loginRefreshMain(repoRoot) {
+    return join(repoRoot, "dist", "src", "loginrefresh", "main.js");
+}
+export class LoginRefreshSupervisor {
+    deps;
+    main;
+    spawnFn;
+    schedule;
+    now;
+    exists;
+    readStatusFile;
+    started = false;
+    stopping = false;
+    state = "off";
+    reason = "not started";
+    child = null;
+    startedAt = null;
+    attempt = 0;
+    restarts = 0;
+    lastExit;
+    file;
+    raisedFor = null;
+    cancelRestart = null;
+    cancelPoll = null;
+    resumeWaiters = [];
+    constructor(deps) {
+        this.deps = deps;
+        this.main = loginRefreshMain(deps.repoRoot);
+        this.spawnFn = deps.spawn ?? ((cmd, args, opts) => nodeSpawn(cmd, args, opts));
+        this.schedule = deps.schedule ?? defaultSchedule;
+        this.now = deps.now ?? (() => new Date());
+        this.exists = deps.exists ?? existsSync;
+        this.readStatusFile =
+            deps.readStatusFile ??
+                (() => {
+                    try {
+                        return readFileSync(join(deps.agentDir, "loginrefresh.status.json"), "utf8");
+                    }
+                    catch {
+                        return null;
+                    }
+                });
+    }
+    /** Spawn the refresher and arm the status poll. Synchronous, non-blocking. */
+    start() {
+        if (this.started)
+            return;
+        this.started = true;
+        if (!this.exists(this.main)) {
+            this.state = "unavailable";
+            this.reason = `${this.main} not found — the build carries it; this one predates it`;
+            this.deps.log(`login refresh: unavailable — ${this.reason}`);
+            return;
+        }
+        this.state = "supervised";
+        this.reason = undefined;
+        this.spawnChild();
+        this.armPoll();
+    }
+    /** A login holds the handover: spawns that borrow auth.json wait. */
+    paused() {
+        return this.current()?.paused === true;
+    }
+    /** The cached file, only while it is the running refresher's own: a leftover
+     * from a process that died (or from before a daemon restart) says nothing
+     * about the refresher now holding the lock. */
+    current() {
+        const file = this.file;
+        if (!file || this.child === null)
+            return undefined;
+        return this.child.pid === undefined || file.pid === this.child.pid ? file : undefined;
+    }
+    /** Resolves true once the refresher is not paused (at once when it is not),
+     * false after `timeoutMs`. For the spawn supervisor's hold. */
+    whenResumed(timeoutMs) {
+        if (!this.paused())
+            return Promise.resolve(true);
+        return new Promise((resolve) => {
+            const cancel = this.schedule(() => {
+                this.resumeWaiters = this.resumeWaiters.filter((w) => w !== wake);
+                resolve(false);
+            }, timeoutMs);
+            const wake = () => {
+                cancel();
+                resolve(true);
+            };
+            this.resumeWaiters.push(wake);
+        });
+    }
+    status() {
+        try {
+            return {
+                state: this.state,
+                ...(this.reason ? { reason: this.reason } : {}),
+                running: this.child !== null,
+                restarts: this.restarts,
+                ...(this.lastExit ? { last_exit: this.lastExit } : {}),
+                ...(this.file ? { login: this.file } : {}),
+            };
+        }
+        catch {
+            return { state: this.state, running: false, restarts: this.restarts };
+        }
+    }
+    /** SIGTERM the refresher (its lock goes with it) and stop supervising. */
+    async stop() {
+        this.stopping = true;
+        this.cancelRestart?.();
+        this.cancelPoll?.();
+        for (const w of this.resumeWaiters.splice(0))
+            w();
+        if (this.child)
+            await terminateChild(this.child, this.schedule);
+    }
+    spawnChild() {
+        if (this.stopping)
+            return;
+        this.cancelRestart = null;
+        try {
+            const env = {
+                ...process.env,
+                QCR_LOGIN_AGENT_DIR: this.deps.agentDir,
+                QCR_LOGIN_MARGIN_MIN: String(this.deps.marginMin),
+            };
+            if (this.deps.gid !== undefined)
+                env["QCR_LOGIN_GID"] = String(this.deps.gid);
+            const child = this.spawnFn(process.execPath, [this.main], {
+                env,
+                stdio: ["ignore", "pipe", "pipe"],
+            });
+            this.child = child;
+            this.startedAt = this.now().getTime();
+            foldChildLines(child, (line) => this.deps.log(line));
+            child.on("error", (err) => {
+                this.deps.log("login refresh: spawn error", err);
+                if (this.child !== child || child.pid !== undefined)
+                    return;
+                this.child = null;
+                this.scheduleRestart();
+            });
+            child.on("exit", (code, signal) => this.onExit(child, code, signal));
+            this.deps.log(`login refresh: started (pid ${child.pid ?? "?"})`);
+        }
+        catch (err) {
+            this.child = null;
+            this.deps.log("login refresh: spawn failed", err);
+            this.scheduleRestart();
+        }
+    }
+    onExit(child, code, signal) {
+        if (this.child !== child)
+            return;
+        const upMs = this.startedAt !== null ? this.now().getTime() - this.startedAt : 0;
+        this.child = null;
+        this.startedAt = null;
+        this.lastExit = { code, signal, at: this.now().toISOString() };
+        // a dead refresher holds no login handover: release the spawn hold now
+        for (const w of this.resumeWaiters.splice(0))
+            w();
+        if (this.stopping)
+            return;
+        if (upMs >= RESET_AFTER_MS)
+            this.attempt = 0;
+        this.deps.log(code === LOCK_HELD_EXIT
+            ? "login refresh: another refresher holds the lock — retrying later"
+            : `login refresh: exited (code=${code ?? "null"} signal=${signal ?? "null"})`);
+        this.scheduleRestart();
+    }
+    scheduleRestart() {
+        if (this.stopping)
+            return;
+        const delay = restartDelayMs(LOGIN_RESTART_LADDER_MS, this.attempt);
+        this.attempt += 1;
+        this.restarts += 1;
+        this.cancelRestart = this.schedule(() => this.spawnChild(), delay);
+    }
+    armPoll() {
+        if (this.stopping)
+            return;
+        this.cancelPoll = this.schedule(() => {
+            this.readFile();
+            this.armPoll();
+        }, LOGIN_STATUS_POLL_MS);
+    }
+    /** Read the refresher's file: cache it, raise the episode's anomaly once,
+     * wake the spawn hold. Never throws. */
+    readFile() {
+        try {
+            const raw = this.readStatusFile();
+            if (raw === null)
+                return;
+            const file = JSON.parse(raw);
+            this.file = file;
+            // the published file is shown as-is, but only the running refresher's own
+            // drives the episode and the hold (see current())
+            if (!this.current())
+                return;
+            if (file.error_since === null || file.error_since === undefined)
+                this.raisedFor = null;
+            else if (this.raisedFor !== file.error_since) {
+                this.deps.raiseAnomaly(`the bot's model login could not be refreshed since ${file.error_since}: ${file.last_error ?? "no detail"}` +
+                    ` (token expires ${file.expires_at ?? "unknown"}); recover with the entrypoint's login mode`);
+                // marked only once raised: a failed write leaves the episode to the next poll
+                this.raisedFor = file.error_since;
+            }
+            if (!this.paused())
+                for (const w of this.resumeWaiters.splice(0))
+                    w();
+        }
+        catch (err) {
+            this.deps.log("login refresh: status file unreadable", err);
+        }
+    }
+}
+//# sourceMappingURL=supervisor.js.map

package/dist/src/loginrefresh/supervisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor.js","sourceRoot":"","sources":["../../../src/loginrefresh/supervisor.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,EAAE;AACF,4EAA4E;AAC5E,sEAAsE;AACtE,iEAAiE;AACjE,4EAA4E;AAC5E,4EAA4E;AAC5E,uDAAuD;AACvD,EAAE;AACF,+EAA+E;AAC/E,0EAA0E;AAC1E,+EAA+E;AAC/E,4EAA4E;AAC5E,wCAAwC;AACxC,wEAAwE;AACxE,6EAA6E;AAC7E,oEAAoE;AACpE,EAAE;AACF,gFAAgF;AAChF,2EAA2E;AAC3E,8DAA8D;AAC9D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,cAAc,EACd,cAAc,EACd,cAAc,GAIf,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAG3C;2EAC2E;AAC3E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAC/D,yCAAyC;AACzC,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,oFAAoF;AACpF,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAoB1C,MAAM,eAAe,GAAa,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;IAC3C,MAAM,CAAC,GAAG,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;IACZ,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;AAC/B,CAAC,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,OAAO,sBAAsB;IAsBJ;IArBZ,IAAI,CAAS;IACb,OAAO,CAAU;IACjB,QAAQ,CAAW;IACnB,GAAG,CAAa;IAChB,MAAM,CAA4B;IAClC,cAAc,CAAsB;IAC7C,OAAO,GAAG,KAAK,CAAC;IAChB,QAAQ,GAAG,KAAK,CAAC;IACjB,KAAK,GAAgC,KAAK,CAAC;IAC3C,MAAM,GAAuB,aAAa,CAAC;IAC3C,KAAK,GAA2B,IAAI,CAAC;IACrC,SAAS,GAAkB,IAAI,CAAC;IAChC,OAAO,GAAG,CAAC,CAAC;IACZ,QAAQ,GAAG,CAAC,CAAC;IACb,QAAQ,CAAkC;IAC1C,IAAI,CAAqC;IACzC,SAAS,GAAkB,IAAI,CAAC;IAChC,aAAa,GAAwB,IAAI,CAAC;IAC1C,UAAU,GAAwB,IAAI,CAAC;IACvC,aAAa,GAAsB,EAAE,CAAC;IAE9C,YAA6B,IAAgC;QAAhC,SAAI,GAAJ,IAAI,CAA4B;QAC3D,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,eAAe,CAAC;QACjD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC;QACxC,IAAI,CAAC,cAAc;YACjB,IAAI,CAAC,cAAc;gBACnB,CAAC,GAAG,EAAE;oBACJ,IAAI,CAAC;wBACH,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,0BAA0B,CAAC,EAAE,MAAM,CAAC,CAAC;oBAC/E,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,IAAI,CAAC;oBACd,CAAC;gBACH,CAAC,CAAC,CAAC;IACP,CAAC;IAED,8EAA8E;IAC9E,KAAK;QACH,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,GAAG,aAAa,CAAC;YAC3B,IAAI,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,yDAAyD,CAAC;YACpF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,gCAAgC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED,qEAAqE;IACrE,MAAM;QACJ,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,CAAC;IAED;;mDAE+C;IACvC,OAAO;QACb,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACnD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,CAAC;IAED;mEAC+D;IAC/D,WAAW,CAAC,SAAiB;QAC3B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjD,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;YACtC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE;gBAChC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;gBAClE,OAAO,CAAC,KAAK,CAAC,CAAC;YACjB,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,MAAM,IAAI,GAAG,GAAS,EAAE;gBACtB,MAAM,EAAE,CAAC;gBACT,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC,CAAC;YACF,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM;QACJ,IAAI,CAAC;YACH,OAAO;gBACL,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/C,OAAO,EAAE,IAAI,CAAC,KAAK,KAAK,IAAI;gBAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3C,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxE,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACvB,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,CAAC,EAAE,CAAC;QAClD,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClE,CAAC;IAEO,UAAU;QAChB,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,GAAsB;gBAC7B,GAAG,OAAO,CAAC,GAAG;gBACd,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ;gBACvC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;aAClD,CAAC;YACF,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS;gBAAE,GAAG,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACxD,GAAG;gBACH,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aAClC,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YACnB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;YACtC,cAAc,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YACrD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACxB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;gBACjD,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;oBAAE,OAAO;gBAC5D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;gBAClB,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YACrE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,+BAA+B,KAAK,CAAC,GAAG,IAAI,GAAG,GAAG,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;YAClD,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,KAAsB,EAAE,IAAmB,EAAE,MAA6B;QACvF,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;YAAE,OAAO;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,QAAQ,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QAC/D,uEAAuE;QACvE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,CAAC,EAAE,CAAC;QAClD,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,IAAI,IAAI,cAAc;YAAE,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,GAAG,CACX,IAAI,KAAK,cAAc;YACrB,CAAC,CAAC,kEAAkE;YACpE,CAAC,CAAC,+BAA+B,IAAI,IAAI,MAAM,WAAW,MAAM,IAAI,MAAM,GAAG,CAChF,CAAC;QACF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;IAEO,eAAe;QACrB,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,MAAM,KAAK,GAAG,cAAc,CAAC,uBAAuB,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACpE,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAClB,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,KAAK,CAAC,CAAC;IACrE,CAAC;IAEO,OAAO;QACb,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE;YACnC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC3B,CAAC;IAED;4CACwC;IACxC,QAAQ;QACN,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YAClC,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2B,CAAC;YACvD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,0EAA0E;YAC1E,kDAAkD;YAClD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;gBAAE,OAAO;YAC5B,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;gBAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;iBAClF,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC7C,IAAI,CAAC,IAAI,CAAC,YAAY,CACpB,sDAAsD,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,UAAU,IAAI,WAAW,EAAE;oBACzG,mBAAmB,IAAI,CAAC,UAAU,IAAI,SAAS,6CAA6C,CAC/F,CAAC;gBACF,8EAA8E;gBAC9E,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC;YACpC,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAAE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;oBAAE,CAAC,EAAE,CAAC;QACxE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;CACF"}

package/dist/src/loginrefresh/types.js

@@ -0,0 +1,4 @@
+// The refresher's published state. Its own module, so `src/state.ts` can type
+// the heartbeat block without importing the supervisor.
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/loginrefresh/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/loginrefresh/types.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,wDAAwD"}