@sentropic/llm-mesh 0.11.0 → 0.13.0

package/dist/enrollment/codex.js

@@ -0,0 +1,222 @@
+export const CODEX_AUTH_ISSUER = 'https://auth.openai.com';
+export const CODEX_CLIENT_ID = 'app_EMoamEEZ73f0CkXaXp7hrann';
+export const CODEX_DEVICE_AUTH_URL = `${CODEX_AUTH_ISSUER}/api/accounts/deviceauth/usercode`;
+export const CODEX_DEVICE_TOKEN_URL = `${CODEX_AUTH_ISSUER}/api/accounts/deviceauth/token`;
+export const CODEX_OAUTH_TOKEN_URL = `${CODEX_AUTH_ISSUER}/oauth/token`;
+export const CODEX_VERIFICATION_URL = `${CODEX_AUTH_ISSUER}/codex/device`;
+export class CodexEnrollmentProvider {
+    defaultClientId;
+    configResolver;
+    fetchFn;
+    sessions = new Map();
+    sequence = 0;
+    constructor(options = {}) {
+        this.defaultClientId = options.clientId ?? CODEX_CLIENT_ID;
+        this.configResolver = options.configResolver;
+        this.fetchFn = options.fetchFn ?? fetch;
+    }
+    async getClientId(configRef) {
+        if (this.configResolver && configRef) {
+            try {
+                const config = await this.configResolver.resolveConfig(configRef);
+                if (typeof config.clientId === 'string')
+                    return config.clientId;
+            }
+            catch {
+                // Fallback
+            }
+        }
+        return this.defaultClientId;
+    }
+    async start(input) {
+        this.sequence += 1;
+        const enrollmentId = `enr_codex_${Date.now().toString(36)}_${this.sequence.toString(36)}`;
+        const expiresAt = new Date(Date.now() + 15 * 60 * 1000).toISOString();
+        const clientId = await this.getClientId(input.configRef);
+        const response = await this.fetchFn(CODEX_DEVICE_AUTH_URL, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                accept: 'application/json',
+            },
+            body: JSON.stringify({ client_id: clientId }),
+        });
+        if (!response.ok) {
+            const text = await response.text().catch(() => '');
+            throw new Error(`Codex device auth start failed (${response.status}): ${text}`);
+        }
+        const payload = (await response.json());
+        if (!payload.device_auth_id || !payload.user_code) {
+            throw new Error('Codex device auth returned incomplete response');
+        }
+        const pollIntervalMs = typeof payload.interval === 'number'
+            ? payload.interval * 1000
+            : 5000;
+        const state = {
+            enrollmentId,
+            providerId: 'codex',
+            ownerScope: input.ownerScope,
+            pkceVerifier: '',
+            pkceState: '',
+            redirectUri: input.redirectUri,
+            configVersion: 'v1.0.0',
+            createdAt: new Date().toISOString(),
+            expiresAt,
+        };
+        this.sessions.set(enrollmentId, {
+            state,
+            deviceAuthId: payload.device_auth_id,
+            userCode: payload.user_code,
+            pollIntervalMs,
+        });
+        return {
+            kind: 'device-code',
+            enrollmentId,
+            verificationUrl: CODEX_VERIFICATION_URL,
+            userCode: payload.user_code,
+            pollIntervalMs,
+            expiresAt,
+        };
+    }
+    async pollForCompletion(enrollmentId, maxAttempts = 60) {
+        const entry = this.sessions.get(enrollmentId);
+        if (!entry) {
+            throw new Error(`Enrollment session ${enrollmentId} not found`);
+        }
+        const clientId = await this.getClientId();
+        for (let attempt = 0; attempt < maxAttempts; attempt += 1) {
+            if (entry.state.cancelledAt) {
+                throw new Error(`Enrollment session ${enrollmentId} was cancelled`);
+            }
+            const response = await this.fetchFn(CODEX_DEVICE_TOKEN_URL, {
+                method: 'POST',
+                headers: {
+                    'content-type': 'application/json',
+                    accept: 'application/json',
+                },
+                body: JSON.stringify({
+                    device_auth_id: entry.deviceAuthId,
+                    user_code: entry.userCode,
+                }),
+            });
+            if (response.status === 403) {
+                // P0-3: Wait for pollIntervalMs without hardcoded 50ms cap
+                await new Promise((res) => setTimeout(res, entry.pollIntervalMs));
+                continue;
+            }
+            if (!response.ok) {
+                const text = await response.text().catch(() => '');
+                throw new Error(`Codex device poll failed (${response.status}): ${text}`);
+            }
+            const tokenPayload = (await response.json());
+            if (!tokenPayload.authorization_code || !tokenPayload.code_verifier) {
+                throw new Error('Codex device poll returned incomplete exchange payload');
+            }
+            // Exchange authorization code
+            const exchangeBody = new URLSearchParams({
+                grant_type: 'authorization_code',
+                code: tokenPayload.authorization_code,
+                redirect_uri: `${CODEX_AUTH_ISSUER}/deviceauth/callback`,
+                client_id: clientId,
+                code_verifier: tokenPayload.code_verifier,
+            });
+            const exchangeResponse = await this.fetchFn(CODEX_OAUTH_TOKEN_URL, {
+                method: 'POST',
+                headers: {
+                    'content-type': 'application/x-www-form-urlencoded',
+                    accept: 'application/json',
+                },
+                body: exchangeBody,
+            });
+            if (!exchangeResponse.ok) {
+                const text = await exchangeResponse.text().catch(() => '');
+                throw new Error(`Codex OAuth token exchange failed (${exchangeResponse.status}): ${text}`);
+            }
+            const credPayload = (await exchangeResponse.json());
+            if (!credPayload.access_token) {
+                throw new Error('Codex token exchange returned no access token');
+            }
+            const accountId = `acct_codex_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 8)}`;
+            const expiresAt = new Date(Date.now() + (credPayload.expires_in ?? 3600) * 1000).toISOString();
+            // P0-4: Store credentials so they are preserved and persisted
+            const credential = {
+                accountId,
+                accessToken: credPayload.access_token,
+                ...(credPayload.refresh_token ? { refreshToken: credPayload.refresh_token } : {}),
+                expiresAt,
+                authClientConfigVersion: entry.state.configVersion,
+            };
+            entry.credential = credential;
+            return {
+                accountId,
+                label: `Codex Account (${accountId.slice(0, 16)})`,
+                credential,
+            };
+        }
+        throw new Error('Codex device enrollment polling timed out');
+    }
+    async complete(input) {
+        const entry = this.sessions.get(input.enrollmentId);
+        if (!entry) {
+            throw new Error(`Enrollment session ${input.enrollmentId} not found`);
+        }
+        if (entry.credential) {
+            return entry.credential;
+        }
+        const accountId = `acct_codex_${Date.now().toString(36)}`;
+        return {
+            accountId,
+            accessToken: `token_${input.code}`,
+            expiresAt: new Date(Date.now() + 3600 * 1000).toISOString(),
+            authClientConfigVersion: entry.state.configVersion,
+        };
+    }
+    async resolve(credential) {
+        return {
+            provider: 'codex',
+            accountId: credential.accountId,
+        };
+    }
+    async refresh(input) {
+        const refreshToken = input.refreshToken ?? input.credentialVersion;
+        if (!refreshToken || refreshToken === 'v1.0.0') {
+            throw new Error('Codex token refresh failed: invalid or missing refresh token');
+        }
+        const clientId = await this.getClientId();
+        const body = new URLSearchParams({
+            grant_type: 'refresh_token',
+            refresh_token: refreshToken,
+            client_id: clientId,
+        });
+        const response = await this.fetchFn(CODEX_OAUTH_TOKEN_URL, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/x-www-form-urlencoded',
+                accept: 'application/json',
+            },
+            body,
+        });
+        if (!response.ok) {
+            const text = await response.text().catch(() => '');
+            throw new Error(`Codex token refresh failed (${response.status}): ${text}`);
+        }
+        const payload = (await response.json());
+        if (!payload.access_token) {
+            throw new Error('Codex token refresh returned no access token');
+        }
+        return {
+            accountId: input.accountId,
+            accessToken: payload.access_token,
+            ...(payload.refresh_token ? { refreshToken: payload.refresh_token } : { refreshToken }),
+            expiresAt: new Date(Date.now() + (payload.expires_in ?? 3600) * 1000).toISOString(),
+            authClientConfigVersion: 'v1.0.0',
+        };
+    }
+    async cancel(enrollmentId) {
+        const entry = this.sessions.get(enrollmentId);
+        if (entry) {
+            entry.state.cancelledAt = new Date().toISOString();
+        }
+    }
+}
+//# sourceMappingURL=codex.js.map

package/dist/enrollment/codex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex.js","sourceRoot":"","sources":["../../src/enrollment/codex.ts"],"names":[],"mappings":"AAYA,MAAM,CAAC,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;AAC3D,MAAM,CAAC,MAAM,eAAe,GAAG,8BAA8B,CAAC;AAC9D,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,iBAAiB,mCAAmC,CAAC;AAC7F,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,iBAAiB,gCAAgC,CAAC;AAC3F,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,iBAAiB,cAAc,CAAC;AACxE,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,iBAAiB,eAAe,CAAC;AAQ1E,MAAM,OAAO,uBAAuB;IACjB,eAAe,CAAS;IACxB,cAAc,CAAkB;IAChC,OAAO,CAAe;IACtB,QAAQ,GAAG,IAAI,GAAG,EAShC,CAAC;IACI,QAAQ,GAAG,CAAC,CAAC;IAErB,YAAY,UAAkC,EAAE;QAC9C,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,QAAQ,IAAI,eAAe,CAAC;QAC3D,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;IAC1C,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,SAAkB;QAC1C,IAAI,IAAI,CAAC,cAAc,IAAI,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;gBAClE,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;oBAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;YAClE,CAAC;YAAC,MAAM,CAAC;gBACP,WAAW;YACb,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAA2B;QACrC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnB,MAAM,YAAY,GAAG,aAAa,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1F,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACtE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAEzD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE;YACzD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;SAC9C,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIrC,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,cAAc,GAClB,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAClC,CAAC,CAAC,OAAO,CAAC,QAAQ,GAAG,IAAI;YACzB,CAAC,CAAC,IAAI,CAAC;QAEX,MAAM,KAAK,GAAoB;YAC7B,YAAY;YACZ,UAAU,EAAE,OAAO;YACnB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,YAAY,EAAE,EAAE;YAChB,SAAS,EAAE,EAAE;YACb,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,aAAa,EAAE,QAAQ;YACvB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS;SACV,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE;YAC9B,KAAK;YACL,YAAY,EAAE,OAAO,CAAC,cAAc;YACpC,QAAQ,EAAE,OAAO,CAAC,SAAS;YAC3B,cAAc;SACf,CAAC,CAAC;QAEH,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,YAAY;YACZ,eAAe,EAAE,sBAAsB;YACvC,QAAQ,EAAE,OAAO,CAAC,SAAS;YAC3B,cAAc;YACd,SAAS;SACV,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,YAAoB,EACpB,WAAW,GAAG,EAAE;QAEhB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,sBAAsB,YAAY,YAAY,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAE1C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YAC1D,IAAI,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,sBAAsB,YAAY,gBAAgB,CAAC,CAAC;YACtE,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE;gBAC1D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,MAAM,EAAE,kBAAkB;iBAC3B;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,cAAc,EAAE,KAAK,CAAC,YAAY;oBAClC,SAAS,EAAE,KAAK,CAAC,QAAQ;iBAC1B,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,2DAA2D;gBAC3D,MAAM,IAAI,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;gBAClE,SAAS;YACX,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBACnD,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;YAC5E,CAAC;YAED,MAAM,YAAY,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAG1C,CAAC;YAEF,IAAI,CAAC,YAAY,CAAC,kBAAkB,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;gBACpE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;YAC5E,CAAC;YAED,8BAA8B;YAC9B,MAAM,YAAY,GAAG,IAAI,eAAe,CAAC;gBACvC,UAAU,EAAE,oBAAoB;gBAChC,IAAI,EAAE,YAAY,CAAC,kBAAkB;gBACrC,YAAY,EAAE,GAAG,iBAAiB,sBAAsB;gBACxD,SAAS,EAAE,QAAQ;gBACnB,aAAa,EAAE,YAAY,CAAC,aAAa;aAC1C,CAAC,CAAC;YAEH,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE;gBACjE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;oBACnD,MAAM,EAAE,kBAAkB;iBAC3B;gBACD,IAAI,EAAE,YAAY;aACnB,CAAC,CAAC;YAEH,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC;gBACzB,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC3D,MAAM,IAAI,KAAK,CAAC,sCAAsC,gBAAgB,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;YAC7F,CAAC;YAED,MAAM,WAAW,GAAG,CAAC,MAAM,gBAAgB,CAAC,IAAI,EAAE,CAIjD,CAAC;YAEF,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YAED,MAAM,SAAS,GAAG,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACpG,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAE/F,8DAA8D;YAC9D,MAAM,UAAU,GAAuB;gBACrC,SAAS;gBACT,WAAW,EAAE,WAAW,CAAC,YAAY;gBACrC,GAAG,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjF,SAAS;gBACT,uBAAuB,EAAE,KAAK,CAAC,KAAK,CAAC,aAAa;aACnD,CAAC;YAEF,KAAK,CAAC,UAAU,GAAG,UAAU,CAAC;YAE9B,OAAO;gBACL,SAAS;gBACT,KAAK,EAAE,kBAAkB,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG;gBAClD,UAAU;aACX,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAA8B;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,CAAC,YAAY,YAAY,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC,UAAU,CAAC;QAC1B,CAAC;QAED,MAAM,SAAS,GAAG,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1D,OAAO;YACL,SAAS;YACT,WAAW,EAAE,SAAS,KAAK,CAAC,IAAI,EAAE;YAClC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;YAC3D,uBAAuB,EAAE,KAAK,CAAC,KAAK,CAAC,aAAa;SACnD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,UAA8B;QAC1C,OAAO;YACL,QAAQ,EAAE,OAAO;YACjB,SAAS,EAAE,UAAU,CAAC,SAAS;SAChC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAmB;QAC/B,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,iBAAiB,CAAC;QACnE,IAAI,CAAC,YAAY,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,YAAY;YAC3B,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE;YACzD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI;SACL,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIrC,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QAED,OAAO;YACL,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,WAAW,EAAE,OAAO,CAAC,YAAY;YACjC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;YACvF,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;YACnF,uBAAuB,EAAE,QAAQ;SAClC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,YAAoB;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrD,CAAC;IACH,CAAC;CACF"}

package/dist/enrollment/contracts.d.ts

@@ -0,0 +1,77 @@
+export type EnrollmentSession = {
+    kind: 'authorization-url';
+    enrollmentId: string;
+    url: string;
+    expiresAt: string;
+} | {
+    kind: 'device-code';
+    enrollmentId: string;
+    verificationUrl: string;
+    userCode: string;
+    pollIntervalMs: number;
+    expiresAt: string;
+};
+export interface EnrollmentState {
+    enrollmentId: string;
+    providerId: 'cloud-code' | 'codex' | 'claude-code';
+    ownerScope: string;
+    pkceVerifier: string;
+    pkceState: string;
+    redirectUri: string;
+    configVersion: string;
+    createdAt: string;
+    expiresAt: string;
+    consumedAt?: string;
+    cancelledAt?: string;
+}
+export interface StartEnrollmentInput {
+    configRef: string;
+    mode: 'cli' | 'portal';
+    redirectUri: string;
+    ownerScope: string;
+}
+export interface CompleteEnrollmentInput {
+    enrollmentId: string;
+    code: string;
+}
+export interface PreparedCredential {
+    accountId: string;
+    accessToken: string;
+    refreshToken?: string;
+    expiresAt: string;
+    authClientConfigVersion: string;
+    accountEmail?: string;
+}
+export interface RefreshInput {
+    accountId: string;
+    refreshToken?: string;
+    credentialVersion: string;
+}
+export interface ResolvedProviderMetadata {
+    cloudaicompanionProject?: string;
+    cloudCodeUserAgentVersion?: string;
+    [key: string]: unknown;
+}
+export interface AccountPublic {
+    accountId: string;
+    accountLabel?: string;
+    providerId: string;
+    status: string;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface CredentialEnvelope {
+    accountId: string;
+    accessToken: string;
+    refreshToken?: string;
+    expiresAt: string;
+    authClientConfigVersion: string;
+}
+export interface EnrollmentProvider {
+    start(input: StartEnrollmentInput): Promise<EnrollmentSession>;
+    complete(input: CompleteEnrollmentInput): Promise<PreparedCredential>;
+    resolve(credential: PreparedCredential): Promise<ResolvedProviderMetadata>;
+    refresh(input: RefreshInput): Promise<PreparedCredential>;
+    cancel?(enrollmentId: string): Promise<void>;
+}
+//# sourceMappingURL=contracts.d.ts.map

package/dist/enrollment/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../src/enrollment/contracts.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACnF;IACE,IAAI,EAAE,aAAa,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAGN,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,YAAY,GAAG,OAAO,GAAG,aAAa,CAAC;IACnD,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,KAAK,GAAG,QAAQ,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAGD,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,uBAAuB,EAAE,MAAM,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAGD,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,uBAAuB,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC/D,QAAQ,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACtE,OAAO,CAAC,UAAU,EAAE,kBAAkB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC3E,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC1D,MAAM,CAAC,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9C"}

package/dist/enrollment/contracts.js

@@ -0,0 +1,3 @@
+// @sentropic/llm-mesh/enrollment/contracts.ts
+export {};
+//# sourceMappingURL=contracts.js.map

package/dist/enrollment/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../src/enrollment/contracts.ts"],"names":[],"mappings":"AAAA,8CAA8C"}

package/dist/enrollment/index.d.ts

@@ -0,0 +1,2 @@
+export type { AccountPublic, CredentialEnvelope, EnrollmentProvider, EnrollmentSession, PreparedCredential, ResolvedProviderMetadata, StartEnrollmentInput, } from './contracts.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/enrollment/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/enrollment/index.ts"],"names":[],"mappings":"AAEA,YAAY,EACV,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,gBAAgB,CAAC"}

package/dist/enrollment/index.js

@@ -0,0 +1,3 @@
+// Public enrollment contract exports for @sentropic/llm-mesh/enrollment
+export {};
+//# sourceMappingURL=index.js.map

package/dist/enrollment/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/enrollment/index.ts"],"names":[],"mappings":"AAAA,wEAAwE"}

package/dist/enrollment/pkce.d.ts

@@ -0,0 +1,18 @@
+export interface PkcePair {
+    codeVerifier: string;
+    codeChallenge: string;
+}
+export declare function generatePkcePair(): PkcePair;
+export declare function generateNonce(): string;
+export interface LoopbackCallbackResult {
+    code: string;
+    state: string;
+}
+export interface LoopbackServer {
+    port: number;
+    redirectUri: string;
+    waitForCallback(timeoutMs?: number): Promise<LoopbackCallbackResult>;
+    close(): Promise<void>;
+}
+export declare function createLoopbackServer(expectedState: string, preferredPort?: number): Promise<LoopbackServer>;
+//# sourceMappingURL=pkce.d.ts.map

package/dist/enrollment/pkce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.d.ts","sourceRoot":"","sources":["../../src/enrollment/pkce.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,QAAQ;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,gBAAgB,IAAI,QAAQ,CAI3C;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACrE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,wBAAsB,oBAAoB,CACxC,aAAa,EAAE,MAAM,EACrB,aAAa,SAAI,GAChB,OAAO,CAAC,cAAc,CAAC,CAgGzB"}

package/dist/enrollment/pkce.js

@@ -0,0 +1,104 @@
+import { createHash, randomBytes } from 'crypto';
+import { createServer } from 'http';
+const base64Url = (buf) => buf
+    .toString('base64')
+    .replace(/\+/g, '-')
+    .replace(/\//g, '_')
+    .replace(/=+$/, '');
+export function generatePkcePair() {
+    const codeVerifier = base64Url(randomBytes(32));
+    const codeChallenge = base64Url(createHash('sha256').update(codeVerifier).digest());
+    return { codeVerifier, codeChallenge };
+}
+export function generateNonce() {
+    return base64Url(randomBytes(16));
+}
+export async function createLoopbackServer(expectedState, preferredPort = 0) {
+    let server = null;
+    let resolveCallback = null;
+    let rejectCallback = null;
+    let handled = false;
+    const callbackPromise = new Promise((res, rej) => {
+        resolveCallback = res;
+        rejectCallback = rej;
+    });
+    server = createServer((req, res) => {
+        try {
+            const addressInfo = server?.address();
+            const portNum = typeof addressInfo === 'object' && addressInfo ? addressInfo.port : preferredPort;
+            const reqUrl = new URL(req.url ?? '/', `http://127.0.0.1:${portNum}`);
+            // P0-2: Ignore non-callback requests (e.g. GET /favicon.ico)
+            if (reqUrl.pathname !== '/oauth/callback') {
+                res.writeHead(204);
+                res.end();
+                return;
+            }
+            // P1-3: Prevent double-handling of replay callbacks
+            if (handled) {
+                res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+                res.end('<h1>Authentication completed</h1><p>Callback already consumed.</p>');
+                return;
+            }
+            const code = reqUrl.searchParams.get('code');
+            const state = reqUrl.searchParams.get('state');
+            if (!state || state !== expectedState) {
+                handled = true;
+                res.writeHead(400, { 'Content-Type': 'text/html; charset=utf-8' });
+                res.end('<h1>Authentication failed</h1><p>State/nonce mismatch.</p>');
+                rejectCallback?.(new Error('State/nonce mismatch'));
+                return;
+            }
+            if (!code) {
+                handled = true;
+                res.writeHead(400, { 'Content-Type': 'text/html; charset=utf-8' });
+                res.end('<h1>Authentication failed</h1><p>Missing authorization code.</p>');
+                rejectCallback?.(new Error('Missing authorization code'));
+                return;
+            }
+            handled = true;
+            res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+            res.end('<h1>Authentication successful</h1><p>You may close this window and return to your terminal.</p>');
+            resolveCallback?.({ code, state });
+        }
+        catch (err) {
+            if (!handled) {
+                handled = true;
+                if (!res.headersSent) {
+                    res.writeHead(500, { 'Content-Type': 'text/plain' });
+                }
+                res.end('Internal error');
+                rejectCallback?.(err instanceof Error ? err : new Error(String(err)));
+            }
+        }
+    });
+    await new Promise((res) => {
+        server?.listen(preferredPort, '127.0.0.1', () => res());
+    });
+    const address = server.address();
+    const actualPort = typeof address === 'object' && address ? address.port : preferredPort;
+    const redirectUri = `http://127.0.0.1:${actualPort}/oauth/callback`;
+    return {
+        port: actualPort,
+        redirectUri,
+        async waitForCallback(timeoutMs = 5 * 60 * 1000) {
+            let timer;
+            const timeoutPromise = new Promise((_, reject) => {
+                timer = setTimeout(() => reject(new Error('OAuth loopback callback timed out')), timeoutMs);
+            });
+            try {
+                return await Promise.race([callbackPromise, timeoutPromise]);
+            }
+            finally {
+                if (timer)
+                    clearTimeout(timer);
+            }
+        },
+        async close() {
+            if (server) {
+                await new Promise((res) => server?.close(() => res()));
+                server = null;
+            }
+        },
+    };
+}
+//# sourceMappingURL=pkce.js.map

package/dist/enrollment/pkce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.js","sourceRoot":"","sources":["../../src/enrollment/pkce.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAEjD,OAAO,EAAE,YAAY,EAAE,MAAM,MAAM,CAAC;AAEpC,MAAM,SAAS,GAAG,CAAC,GAAW,EAAU,EAAE,CACxC,GAAG;KACA,QAAQ,CAAC,QAAQ,CAAC;KAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;KACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;KACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAOxB,MAAM,UAAU,gBAAgB;IAC9B,MAAM,YAAY,GAAG,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IAChD,MAAM,aAAa,GAAG,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACpF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;AACpC,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,aAAqB,EACrB,aAAa,GAAG,CAAC;IAEjB,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,eAAe,GAAmD,IAAI,CAAC;IAC3E,IAAI,cAAc,GAAkC,IAAI,CAAC;IACzD,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,MAAM,eAAe,GAAG,IAAI,OAAO,CAAyB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACvE,eAAe,GAAG,GAAG,CAAC;QACtB,cAAc,GAAG,GAAG,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,MAAM,GAAG,YAAY,CAAC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;QAClE,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC;YAClG,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,OAAO,EAAE,CAAC,CAAC;YAEtE,6DAA6D;YAC7D,IAAI,MAAM,CAAC,QAAQ,KAAK,iBAAiB,EAAE,CAAC;gBAC1C,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YAED,oDAAoD;YACpD,IAAI,OAAO,EAAE,CAAC;gBACZ,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;gBAC9E,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAE/C,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;gBACtC,OAAO,GAAG,IAAI,CAAC;gBACf,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;gBACtE,cAAc,EAAE,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YAED,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,GAAG,IAAI,CAAC;gBACf,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;gBAC5E,cAAc,EAAE,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;gBAC1D,OAAO;YACT,CAAC;YAED,OAAO,GAAG,IAAI,CAAC;YACf,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;YACnE,GAAG,CAAC,GAAG,CAAC,iGAAiG,CAAC,CAAC;YAE3G,eAAe,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;gBACvD,CAAC;gBACD,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;gBAC1B,cAAc,EAAE,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,EAAE;QAC9B,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,MAAM,UAAU,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC;IACzF,MAAM,WAAW,GAAG,oBAAoB,UAAU,iBAAiB,CAAC;IAEpE,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,WAAW;QACX,KAAK,CAAC,eAAe,CAAC,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI;YAC7C,IAAI,KAAgD,CAAC;YACrD,MAAM,cAAc,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBACtD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YAC9F,CAAC,CAAC,CAAC;YACH,IAAI,CAAC;gBACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC;YAC/D,CAAC;oBAAS,CAAC;gBACT,IAAI,KAAK;oBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QACD,KAAK,CAAC,KAAK;YACT,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC7D,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/generation.d.ts

@@ -15,8 +15,14 @@ export type ResponseFormat = {
     description?: string;
     strict?: boolean;
 };
+/**
+ * Reasoning effort ladder, ascending. `max` is the top rung (owner decision
+ * 2026-07-25) — some upstreams expose a tier above `xhigh`; a provider that
+ * does not support it should clamp to its own maximum rather than fail.
+ */
+export type ReasoningEffort = 'none' | 'low' | 'medium' | 'high' | 'xhigh' | 'max';
 export interface ReasoningOptions {
-    effort?: 'none' | 'low' | 'medium' | 'high' | 'xhigh';
+    effort?: ReasoningEffort;
     summary?: 'auto' | 'concise' | 'detailed';
 }
 export interface LlmMeshRequestMetadata {

package/dist/generation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generation.d.ts","sourceRoot":"","sources":["../src/generation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC5F,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEzF,MAAM,MAAM,cAAc,GAAG,gBAAgB,GAAG,cAAc,CAAC;AAE/D,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,GACvB;IACE,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,gBAAgB,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEN,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC;IACtD,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,CAAC;CAC3C;AAED,MAAM,WAAW,sBAAsB;IACrC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,SAAS,cAAc,EAAE,CAAC;IACpC,IAAI,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;IAChC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAClC,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,aAAc,SAAQ,eAAe;IACpD,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,UAAU,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,SAAS,QAAQ,EAAE,CAAC;IAC/B,YAAY,EAAE,YAAY,CAAC;IAC3B,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C;AAED,MAAM,MAAM,YAAY,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC"}
+{"version":3,"file":"generation.d.ts","sourceRoot":"","sources":["../src/generation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC5F,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEzF,MAAM,MAAM,cAAc,GAAG,gBAAgB,GAAG,cAAc,CAAC;AAE/D,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,GACvB;IACE,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,gBAAgB,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEN;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,CAAC;AAEnF,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,CAAC;CAC3C;AAED,MAAM,WAAW,sBAAsB;IACrC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,SAAS,cAAc,EAAE,CAAC;IACpC,IAAI,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;IAChC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAClC,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,aAAc,SAAQ,eAAe;IACpD,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,UAAU,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,SAAS,QAAQ,EAAE,CAAC;IAC/B,YAAY,EAAE,YAAY,CAAC;IAC3B,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C;AAED,MAAM,MAAM,YAAY,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC"}

package/dist/node/index.d.ts

@@ -0,0 +1,6 @@
+export type { KeyringAdapter } from '../service/facade.js';
+export { EnvKeyring } from './keyring/env-keyring.js';
+export { InMemoryKeyring } from './keyring/in-memory-keyring.js';
+export { LinuxSecretstoreKeyring } from './keyring/linux-secretstore-keyring.js';
+export { MacOSKeychainKeyring } from './keyring/macos-keychain-keyring.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/node/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/node/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC"}

package/dist/node/index.js

@@ -0,0 +1,5 @@
+export { EnvKeyring } from './keyring/env-keyring.js';
+export { InMemoryKeyring } from './keyring/in-memory-keyring.js';
+export { LinuxSecretstoreKeyring } from './keyring/linux-secretstore-keyring.js';
+export { MacOSKeychainKeyring } from './keyring/macos-keychain-keyring.js';
+//# sourceMappingURL=index.js.map

package/dist/node/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/node/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC"}

package/dist/node/keyring/env-keyring.d.ts

@@ -0,0 +1,11 @@
+import type { KeyringAdapter } from '../../service/facade.js';
+export declare class EnvKeyring implements KeyringAdapter {
+    private readonly envPrefix;
+    private readonly memoryFallback;
+    constructor(envPrefix?: string);
+    private envKey;
+    getSecret(key: string): Promise<string | null>;
+    setSecret(key: string, secret: string): Promise<void>;
+    deleteSecret(key: string): Promise<void>;
+}
+//# sourceMappingURL=env-keyring.d.ts.map

package/dist/node/keyring/env-keyring.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-keyring.d.ts","sourceRoot":"","sources":["../../../src/node/keyring/env-keyring.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAE9D,qBAAa,UAAW,YAAW,cAAc;IAC/C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6B;gBAEhD,SAAS,SAAuB;IAI5C,OAAO,CAAC,MAAM;IAIR,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAQ9C,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrD,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAI/C"}

package/dist/node/keyring/env-keyring.js

@@ -0,0 +1,26 @@
+export class EnvKeyring {
+    envPrefix;
+    memoryFallback = new Map();
+    constructor(envPrefix = 'SENTROPIC_KEYRING_') {
+        this.envPrefix = envPrefix;
+    }
+    envKey(key) {
+        return `${this.envPrefix}${key.replace(/[^a-zA-Z0-9_]/g, '_').toUpperCase()}`;
+    }
+    async getSecret(key) {
+        const envVal = process.env[this.envKey(key)] ?? process.env[key];
+        if (typeof envVal === 'string' && envVal.length > 0) {
+            return envVal;
+        }
+        return this.memoryFallback.get(key) ?? null;
+    }
+    async setSecret(key, secret) {
+        process.env[this.envKey(key)] = secret;
+        this.memoryFallback.set(key, secret);
+    }
+    async deleteSecret(key) {
+        delete process.env[this.envKey(key)];
+        this.memoryFallback.delete(key);
+    }
+}
+//# sourceMappingURL=env-keyring.js.map

package/dist/node/keyring/env-keyring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-keyring.js","sourceRoot":"","sources":["../../../src/node/keyring/env-keyring.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,UAAU;IACJ,SAAS,CAAS;IAClB,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE5D,YAAY,SAAS,GAAG,oBAAoB;QAC1C,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAEO,MAAM,CAAC,GAAW;QACxB,OAAO,GAAG,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAW;QACzB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAW,EAAE,MAAc;QACzC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC;QACvC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAW;QAC5B,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;CACF"}

package/dist/node/keyring/in-memory-keyring.d.ts

@@ -0,0 +1,8 @@
+import type { KeyringAdapter } from '../../service/facade.js';
+export declare class InMemoryKeyring implements KeyringAdapter {
+    private readonly store;
+    getSecret(key: string): Promise<string | null>;
+    setSecret(key: string, secret: string): Promise<void>;
+    deleteSecret(key: string): Promise<void>;
+}
+//# sourceMappingURL=in-memory-keyring.d.ts.map

package/dist/node/keyring/in-memory-keyring.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-memory-keyring.d.ts","sourceRoot":"","sources":["../../../src/node/keyring/in-memory-keyring.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAE9D,qBAAa,eAAgB,YAAW,cAAc;IACpD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA6B;IAE7C,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAI9C,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrD,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG/C"}

package/dist/node/keyring/in-memory-keyring.js

@@ -0,0 +1,13 @@
+export class InMemoryKeyring {
+    store = new Map();
+    async getSecret(key) {
+        return this.store.get(key) ?? null;
+    }
+    async setSecret(key, secret) {
+        this.store.set(key, secret);
+    }
+    async deleteSecret(key) {
+        this.store.delete(key);
+    }
+}
+//# sourceMappingURL=in-memory-keyring.js.map

package/dist/node/keyring/in-memory-keyring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-memory-keyring.js","sourceRoot":"","sources":["../../../src/node/keyring/in-memory-keyring.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,eAAe;IACT,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEnD,KAAK,CAAC,SAAS,CAAC,GAAW;QACzB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAW,EAAE,MAAc;QACzC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAW;QAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;CACF"}

package/dist/node/keyring/linux-secretstore-keyring.d.ts

@@ -0,0 +1,10 @@
+import type { KeyringAdapter } from '../../service/facade.js';
+export declare class LinuxSecretstoreKeyring implements KeyringAdapter {
+    private readonly memoryStore;
+    private readonly serviceName;
+    constructor(serviceName?: string);
+    getSecret(key: string): Promise<string | null>;
+    setSecret(key: string, secret: string): Promise<void>;
+    deleteSecret(key: string): Promise<void>;
+}
+//# sourceMappingURL=linux-secretstore-keyring.d.ts.map

package/dist/node/keyring/linux-secretstore-keyring.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"linux-secretstore-keyring.d.ts","sourceRoot":"","sources":["../../../src/node/keyring/linux-secretstore-keyring.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAE9D,qBAAa,uBAAwB,YAAW,cAAc;IAC5D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6B;IACzD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;gBAEzB,WAAW,SAAuB;IAIxC,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAI9C,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrD,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG/C"}