@sendmux/cli 1.5.0 → 1.6.0

package/dist/oauth-login.js

@@ -0,0 +1,236 @@
+import { execFile } from "node:child_process";
+import { createHash, randomBytes, randomUUID } from "node:crypto";
+import { createServer } from "node:http";
+import { promisify } from "node:util";
+import { discoverOAuth, oauthForm, oauthRequest, oauthTokenFields, oauthUrl, OAUTH_RESOURCE, } from "./oauth-http.js";
+import { isOAuthProfile, updateCliConfig, } from "./profiles.js";
+export async function loginOAuth(input) {
+    const issuer = oauthUrl(input.issuer).href.replace(/\/$/, "");
+    const scopes = [
+        ...new Set(input.scopes.flatMap((scope) => scope.split(/\s+/)).filter(Boolean)),
+    ];
+    if (!scopes.length)
+        throw new Error("Choose at least one OAuth scope.");
+    const sessionId = randomUUID();
+    await updateCliConfig(input.configDir, (config) => {
+        if (config.profiles[input.name])
+            throw new Error("That profile already exists. Choose another name or log out first.");
+        config.profiles[input.name] = {
+            type: "oauth",
+            state: "authorizing",
+            sessionId,
+            issuer,
+        };
+    });
+    const abort = new AbortController();
+    const cancel = () => abort.abort();
+    process.once("SIGINT", cancel);
+    process.once("SIGTERM", cancel);
+    const timeout = setTimeout(cancel, 120_000);
+    let callback;
+    let activated;
+    try {
+        const endpoints = await discoverOAuth(issuer, scopes);
+        const state = randomBytes(32).toString("base64url");
+        const verifier = randomBytes(32).toString("base64url");
+        callback = await loopbackCallback({ state, issuer, signal: abort.signal });
+        const client = await oauthRequest(endpoints.registration, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({
+                client_name: "Sendmux CLI",
+                application_type: "native",
+                redirect_uris: [callback.redirectUri],
+                grant_types: ["authorization_code", "refresh_token"],
+                response_types: ["code"],
+                token_endpoint_auth_method: "none",
+                resource: OAUTH_RESOURCE,
+                scope: scopes.join(" "),
+            }),
+        });
+        if (typeof client.client_id !== "string" ||
+            !client.client_id ||
+            client.token_endpoint_auth_method !== "none" ||
+            client.resource !== OAUTH_RESOURCE ||
+            !Array.isArray(client.redirect_uris) ||
+            client.redirect_uris.length !== 1 ||
+            client.redirect_uris[0] !== callback.redirectUri)
+            throw new Error("The issuer returned invalid client registration metadata.");
+        const url = new URL(endpoints.authorization);
+        url.search = new URLSearchParams({
+            client_id: client.client_id,
+            response_type: "code",
+            redirect_uri: callback.redirectUri,
+            scope: scopes.join(" "),
+            state,
+            resource: OAUTH_RESOURCE,
+            code_challenge_method: "S256",
+            code_challenge: createHash("sha256").update(verifier).digest("base64url"),
+        }).toString();
+        input.report(`Open this URL to sign in:\n${url.href}`);
+        if (!input.noBrowser)
+            await openBrowser(url.href).catch(() => input.report("Could not open the browser. Open the URL above to continue."));
+        const code = await callback.code;
+        await callback.close();
+        const fields = oauthTokenFields(await oauthRequest(endpoints.token, oauthForm({
+            grant_type: "authorization_code",
+            code,
+            code_verifier: verifier,
+            redirect_uri: callback.redirectUri,
+            client_id: client.client_id,
+            resource: OAUTH_RESOURCE,
+        })), scopes);
+        activated = {
+            type: "oauth",
+            state: "active",
+            sessionId,
+            issuer,
+            clientId: client.client_id,
+            tokenEndpoint: endpoints.token,
+            revocationEndpoint: endpoints.revocation,
+            ...fields,
+        };
+        const profile = activated;
+        await updateCliConfig(input.configDir, (config) => {
+            const existing = config.profiles[input.name];
+            if (!existing ||
+                !isOAuthProfile(existing) ||
+                existing.sessionId !== sessionId ||
+                existing.state !== "authorizing")
+                throw new Error("The login profile changed during authorization.");
+            config.profiles[input.name] = profile;
+            if (!config.defaultProfile)
+                config.defaultProfile = input.name;
+        });
+        return { profile: input.name, type: "oauth", scopes: profile.scopes };
+    }
+    catch (error) {
+        if (activated) {
+            await oauthRequest(activated.revocationEndpoint, oauthForm({
+                token: activated.refreshToken,
+                token_type_hint: "refresh_token",
+                client_id: activated.clientId,
+            })).catch(() => input.report("Could not revoke the interrupted login. Revoke the connection in Sendmux settings."));
+        }
+        await updateCliConfig(input.configDir, (config) => {
+            const existing = config.profiles[input.name];
+            if (existing &&
+                isOAuthProfile(existing) &&
+                existing.sessionId === sessionId &&
+                existing.state === "authorizing")
+                delete config.profiles[input.name];
+        });
+        throw error;
+    }
+    finally {
+        clearTimeout(timeout);
+        process.removeListener("SIGINT", cancel);
+        process.removeListener("SIGTERM", cancel);
+        await callback?.close();
+    }
+}
+async function openBrowser(url) {
+    const command = process.platform === "darwin"
+        ? "open"
+        : process.platform === "win32"
+            ? "rundll32.exe"
+            : "xdg-open";
+    await promisify(execFile)(command, process.platform === "win32" ? ["url.dll,FileProtocolHandler", url] : [url], { timeout: 5_000 });
+}
+async function loopbackCallback({ state, issuer, signal, }) {
+    let resolveCode;
+    let rejectCode;
+    const code = new Promise((resolve, reject) => {
+        resolveCode = resolve;
+        rejectCode = reject;
+    });
+    // Attach before registration/browser work so cancellation cannot become an unhandled rejection.
+    void code.catch(() => undefined);
+    let redirectUri = "";
+    let received = false;
+    const server = createServer((request, response) => {
+        response.setHeader("Cache-Control", "no-store");
+        response.setHeader("Content-Type", "text/plain; charset=utf-8");
+        let url;
+        try {
+            url = new URL(request.url ?? "/", redirectUri);
+        }
+        catch {
+            response.writeHead(400);
+            response.end("Invalid authorization response.");
+            return;
+        }
+        const one = (key) => url.searchParams.getAll(key).length === 1;
+        const valid = request.method === "GET" &&
+            url.pathname === "/callback" &&
+            request.headers.host === new URL(redirectUri).host &&
+            one("state") &&
+            url.searchParams.get("state") === state &&
+            one("iss") &&
+            url.searchParams.get("iss") === issuer &&
+            ((one("code") &&
+                !url.searchParams.has("error") &&
+                !!url.searchParams.get("code")) ||
+                (one("error") && !url.searchParams.has("code")));
+        if (!valid || received) {
+            response.writeHead(400);
+            response.end("Invalid authorization response.");
+            return;
+        }
+        received = true;
+        response.setHeader("Content-Type", "text/html; charset=utf-8");
+        response.end('<!doctype html><meta charset="utf-8"><link rel="icon" href="data:image/svg+xml,%3Csvg%20xmlns=%27http://www.w3.org/2000/svg%27/%3E"><pre>Authorization received. You can return to the terminal.</pre>', () => {
+            if (url.searchParams.has("error"))
+                rejectCode(new Error("OAuth authorization was declined."));
+            else
+                resolveCode(url.searchParams.get("code"));
+        });
+    });
+    server.headersTimeout = 5_000;
+    server.requestTimeout = 10_000;
+    let host = "127.0.0.1";
+    for (const candidate of ["127.0.0.1", "::1"]) {
+        try {
+            await new Promise((resolve, reject) => {
+                const failed = (error) => {
+                    server.removeListener("listening", bound);
+                    reject(error);
+                };
+                const bound = () => {
+                    server.removeListener("error", failed);
+                    resolve();
+                };
+                server.once("error", failed);
+                server.once("listening", bound);
+                server.listen(0, candidate);
+            });
+            host = candidate;
+            break;
+        }
+        catch {
+            if (candidate === "::1")
+                throw new Error("Could not bind the OAuth callback listener.");
+        }
+    }
+    const address = server.address();
+    if (!address || typeof address === "string")
+        throw new Error("Could not bind the OAuth callback listener.");
+    redirectUri = `http://${host === "::1" ? "[::1]" : host}:${address.port}/callback`;
+    const cancel = () => rejectCode(new Error("OAuth login was cancelled or timed out."));
+    signal.addEventListener("abort", cancel, { once: true });
+    if (signal.aborted)
+        cancel();
+    let closing;
+    return {
+        redirectUri,
+        code,
+        close: () => {
+            if (closing)
+                return closing;
+            signal.removeEventListener("abort", cancel);
+            closing = new Promise((resolve, reject) => server.close((error) => (error ? reject(error) : resolve())));
+            server.closeAllConnections();
+            return closing;
+        },
+    };
+}

package/dist/oauth-profile.d.ts

@@ -0,0 +1,6 @@
+export declare function resolveOAuthToken(configDir: string, name: string): Promise<string>;
+export declare function logoutOAuth(configDir: string, name: string): Promise<{
+    profile: string;
+    revoked: boolean;
+}>;
+//# sourceMappingURL=oauth-profile.d.ts.map

package/dist/oauth-profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-profile.d.ts","sourceRoot":"","sources":["../src/oauth-profile.ts"],"names":[],"mappings":"AAsBA,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,CAAC,CA4CjB;AA0DD,wBAAsB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;;;GA4ChE"}

package/dist/oauth-profile.js

@@ -0,0 +1,123 @@
+import { oauthForm, oauthRequest, oauthTokenFields, oauthUrl, OAUTH_RESOURCE, } from "./oauth-http.js";
+import { isOAuthProfile, readCliConfig, updateCliConfig, } from "./profiles.js";
+function activeProfile(profile) {
+    if (!profile || !isOAuthProfile(profile) || profile.state === "authorizing") {
+        throw new Error("The OAuth profile is not ready. Complete login first.");
+    }
+    return profile;
+}
+export async function resolveOAuthToken(configDir, name) {
+    const deadline = Date.now() + 20_000;
+    while (true) {
+        const profile = activeProfile((await readCliConfig(configDir)).profiles[name]);
+        if (profile.state === "revoking" || profile.state === "reauthorize") {
+            throw new Error("This OAuth profile needs a new login. Run auth:logout, then auth:login.");
+        }
+        if (profile.state === "active" && profile.expiresAt > Date.now() + 30_000)
+            return profile.accessToken;
+        if (profile.state === "refreshing") {
+            if (Date.now() >= deadline ||
+                Date.now() - (profile.refreshStartedAt ?? 0) >= 20_000) {
+                throw new Error("OAuth refresh did not finish. Log out and sign in again; the old refresh token will not be replayed.");
+            }
+            await new Promise((resolve) => setTimeout(resolve, 50));
+            continue;
+        }
+        const reserved = await updateCliConfig(configDir, (config) => {
+            const current = activeProfile(config.profiles[name]);
+            if (current.state !== "active" ||
+                current.sessionId !== profile.sessionId ||
+                current.expiresAt > Date.now() + 30_000)
+                return null;
+            const next = {
+                ...current,
+                state: "refreshing",
+                refreshStartedAt: Date.now(),
+            };
+            config.profiles[name] = next;
+            return next;
+        });
+        if (!reserved)
+            continue;
+        return refreshReservedProfile(configDir, name, reserved);
+    }
+}
+async function refreshReservedProfile(configDir, name, profile) {
+    try {
+        const endpoint = oauthUrl(profile.tokenEndpoint, profile.issuer).href;
+        const fields = oauthTokenFields(await oauthRequest(endpoint, oauthForm({
+            grant_type: "refresh_token",
+            refresh_token: profile.refreshToken,
+            client_id: profile.clientId,
+            resource: OAUTH_RESOURCE,
+        })), profile.scopes);
+        await updateCliConfig(configDir, (config) => {
+            const current = activeProfile(config.profiles[name]);
+            if (current.sessionId !== profile.sessionId ||
+                current.state !== "refreshing" ||
+                current.refreshStartedAt !== profile.refreshStartedAt) {
+                throw new Error("The OAuth profile changed during refresh.");
+            }
+            const next = {
+                ...profile,
+                ...fields,
+                state: "active",
+            };
+            delete next.refreshStartedAt;
+            config.profiles[name] = next;
+        });
+        return fields.accessToken;
+    }
+    catch {
+        await updateCliConfig(configDir, (config) => {
+            const current = config.profiles[name];
+            if (current &&
+                isOAuthProfile(current) &&
+                current.state === "refreshing" &&
+                current.sessionId === profile.sessionId &&
+                current.refreshStartedAt === profile.refreshStartedAt) {
+                current.state = "reauthorize";
+            }
+        });
+        throw new Error("OAuth refresh failed. Log out and sign in again; the old refresh token will not be replayed.");
+    }
+}
+export async function logoutOAuth(configDir, name) {
+    const profile = await updateCliConfig(configDir, (config) => {
+        const stored = config.profiles[name];
+        if (stored && isOAuthProfile(stored) && stored.state === "authorizing") {
+            delete config.profiles[name];
+            if (config.defaultProfile === name)
+                delete config.defaultProfile;
+            return null;
+        }
+        const current = activeProfile(stored);
+        if (current.state === "refreshing" &&
+            Date.now() - (current.refreshStartedAt ?? 0) < 20_000) {
+            throw new Error("OAuth refresh is in progress. Retry logout when it finishes.");
+        }
+        const next = { ...current, state: "revoking" };
+        config.profiles[name] = next;
+        return next;
+    });
+    if (!profile)
+        return { profile: name, revoked: false };
+    const endpoint = oauthUrl(profile.revocationEndpoint, profile.issuer).href;
+    await oauthRequest(endpoint, oauthForm({
+        token: profile.refreshToken,
+        token_type_hint: "refresh_token",
+        client_id: profile.clientId,
+    }));
+    await updateCliConfig(configDir, (config) => {
+        const current = config.profiles[name];
+        if (current &&
+            isOAuthProfile(current) &&
+            current.sessionId === profile.sessionId &&
+            current.state === "revoking") {
+            delete config.profiles[name];
+            if (config.defaultProfile === name)
+                delete config.defaultProfile;
+        }
+    });
+    return { profile: name, revoked: true };
+}

package/dist/operation-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"operation-runner.d.ts","sourceRoot":"","sources":["../src/operation-runner.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAsBhE,wBAAsB,eAAe,CACnC,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,mBAAmB,EAC9B,KAAK,EAAE,cAAc,GACpB,OAAO,CAAC,OAAO,CAAC,CAwElB"}
+{"version":3,"file":"operation-runner.d.ts","sourceRoot":"","sources":["../src/operation-runner.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAmBhE,wBAAsB,eAAe,CACnC,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,mBAAmB,EAC9B,KAAK,EAAE,cAAc,GACpB,OAAO,CAAC,OAAO,CAAC,CAwElB"}

package/dist/operation-runner.js

@@ -23,7 +23,7 @@ export async function runSdkOperation(command, operation, flags) {
         const auth = await command.resolveAuth(flags, operation.requiredKeyKind);
         baseUrl = auth.baseUrl;
         client = clientFactories[operation.surface]({
-            apiKey: auth.apiKey,
+            ...(auth.apiKeyKind === "oauth" ? { accessToken: auth.accessToken } : { apiKey: auth.apiKey }),
             ...(baseUrl ? { baseUrl } : {}),
         });
     }

package/dist/profiles.d.ts

@@ -31,7 +31,28 @@ export interface ActiveAgentCliProfile extends AgentProfileBase {
     state: "active";
 }
 export type AgentCliProfile = ActiveAgentCliProfile | RegisteringAgentCliProfile;
-export type CliProfile = AgentCliProfile | ApiKeyCliProfile;
+export interface AuthorizingOAuthCliProfile {
+    type: "oauth";
+    state: "authorizing";
+    sessionId: string;
+    issuer: string;
+}
+export interface ActiveOAuthCliProfile {
+    type: "oauth";
+    state: "active" | "refreshing" | "revoking" | "reauthorize";
+    sessionId: string;
+    issuer: string;
+    clientId: string;
+    tokenEndpoint: string;
+    revocationEndpoint: string;
+    accessToken: string;
+    refreshToken: string;
+    expiresAt: number;
+    scopes: string[];
+    refreshStartedAt?: number;
+}
+export type OAuthCliProfile = AuthorizingOAuthCliProfile | ActiveOAuthCliProfile;
+export type CliProfile = AgentCliProfile | ApiKeyCliProfile | OAuthCliProfile;
 export interface CliConfig {
     defaultProfile?: string;
     profiles: Record<string, CliProfile>;
@@ -43,6 +64,7 @@ export declare function clearAgentRegistrationIntent(configDir: string, profileN
 export declare function configPath(configDir: string): string;
 export declare function isAgentProfile(profile: CliProfile): profile is AgentCliProfile;
 export declare function isApiKeyProfile(profile: CliProfile): profile is ApiKeyCliProfile;
+export declare function isOAuthProfile(profile: CliProfile): profile is OAuthCliProfile;
 export declare function isActiveAgentProfile(profile: CliProfile): profile is ActiveAgentCliProfile;
 export {};
 //# sourceMappingURL=profiles.d.ts.map

package/dist/profiles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../src/profiles.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,SAAS,CAAC;CAClB;AAED,UAAU,gBAAgB;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,0BAA2B,SAAQ,gBAAgB;IAClE,KAAK,EAAE,aAAa,CAAC;CACtB;AAED,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,EAAE,aAAa,GAAG,SAAS,CAAC;KACnC,CAAC;IACF,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,KAAK,EAAE,QAAQ,CAAC;CACjB;AAED,MAAM,MAAM,eAAe,GAAG,qBAAqB,GAAG,0BAA0B,CAAC;AACjF,MAAM,MAAM,UAAU,GAAG,eAAe,GAAG,gBAAgB,CAAC;AAE5D,MAAM,WAAW,SAAS;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;CACtC;AAOD,wBAAsB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAiBzE;AAED,wBAAsB,eAAe,CAAC,CAAC,EACrC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,CAAC,MAAM,EAAE,SAAS,KAAK,CAAC,GAC/B,OAAO,CAAC,CAAC,CAAC,CAWZ;AAED,wBAAsB,8BAA8B,CAClD,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,0BAA0B,GACpC,OAAO,CAAC,0BAA0B,CAAC,CAqCrC;AAED,wBAAsB,4BAA4B,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMxG;AAED,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEpD;AAkFD,wBAAgB,cAAc,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,IAAI,eAAe,CAE9E;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,IAAI,gBAAgB,CAEhF;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,IAAI,qBAAqB,CAE1F"}
+{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../src/profiles.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,SAAS,CAAC;CAClB;AAED,UAAU,gBAAgB;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,0BAA2B,SAAQ,gBAAgB;IAClE,KAAK,EAAE,aAAa,CAAC;CACtB;AAED,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,EAAE,aAAa,GAAG,SAAS,CAAC;KACnC,CAAC;IACF,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,KAAK,EAAE,QAAQ,CAAC;CACjB;AAED,MAAM,MAAM,eAAe,GAAG,qBAAqB,GAAG,0BAA0B,CAAC;AACjF,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,aAAa,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,QAAQ,GAAG,YAAY,GAAG,UAAU,GAAG,aAAa,CAAC;IAC5D,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,eAAe,GAAG,0BAA0B,GAAG,qBAAqB,CAAC;AACjF,MAAM,MAAM,UAAU,GAAG,eAAe,GAAG,gBAAgB,GAAG,eAAe,CAAC;AAE9E,MAAM,WAAW,SAAS;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;CACtC;AAOD,wBAAsB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAiBzE;AAED,wBAAsB,eAAe,CAAC,CAAC,EACrC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,CAAC,MAAM,EAAE,SAAS,KAAK,CAAC,GAC/B,OAAO,CAAC,CAAC,CAAC,CAWZ;AAED,wBAAsB,8BAA8B,CAClD,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,0BAA0B,GACpC,OAAO,CAAC,0BAA0B,CAAC,CAqCrC;AAED,wBAAsB,4BAA4B,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMxG;AAED,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEpD;AAkFD,wBAAgB,cAAc,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,IAAI,eAAe,CAE9E;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,IAAI,gBAAgB,CAEhF;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,IAAI,eAAe,CAE9E;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,IAAI,qBAAqB,CAE1F"}

package/dist/profiles.js

@@ -168,7 +168,10 @@ export function isAgentProfile(profile) {
     return profile.type === "agent";
 }
 export function isApiKeyProfile(profile) {
-    return !isAgentProfile(profile);
+    return profile.type === undefined || profile.type === "api_key";
+}
+export function isOAuthProfile(profile) {
+    return profile.type === "oauth";
 }
 export function isActiveAgentProfile(profile) {
     return isAgentProfile(profile) && profile.state === "active";