@symerian/symi 2.1.6 → 2.1.7

package/extensions/outlook/src/auth.ts

@@ -254,6 +254,97 @@ export async function refreshAccessToken(refreshToken: string): Promise<{
   return { access, refresh, expires };
 }
 
+// =========================================================================
+// Device Code Flow — for chat-based login (no browser on this device)
+// =========================================================================
+
+const DEVICE_CODE_URL = "https://login.microsoftonline.com/common/oauth2/v2.0/devicecode";
+
+export type DeviceCodeResponse = {
+  device_code: string;
+  user_code: string;
+  verification_uri: string;
+  expires_in: number;
+  interval: number;
+};
+
+export async function requestDeviceCode(): Promise<DeviceCodeResponse> {
+  const clientId = resolveClientId();
+  const response = await fetch(DEVICE_CODE_URL, {
+    method: "POST",
+    headers: { "Content-Type": "application/x-www-form-urlencoded" },
+    body: new URLSearchParams({
+      client_id: clientId,
+      scope: SCOPES.join(" "),
+    }),
+  });
+
+  if (!response.ok) {
+    const text = await response.text();
+    throw new Error(`Device code request failed: ${text}`);
+  }
+
+  return (await response.json()) as DeviceCodeResponse;
+}
+
+export async function pollForDeviceCodeToken(params: {
+  deviceCode: string;
+  intervalMs: number;
+  expiresInMs: number;
+}): Promise<{ access: string; refresh: string; expires: number }> {
+  const clientId = resolveClientId();
+  const deadline = Date.now() + params.expiresInMs;
+
+  while (Date.now() < deadline) {
+    await new Promise((resolve) => setTimeout(resolve, params.intervalMs));
+
+    const response = await fetch(TOKEN_URL, {
+      method: "POST",
+      headers: { "Content-Type": "application/x-www-form-urlencoded" },
+      body: new URLSearchParams({
+        client_id: clientId,
+        grant_type: "urn:ietf:params:oauth:grant-type:device_code",
+        device_code: params.deviceCode,
+      }),
+    });
+
+    const data = (await response.json()) as {
+      access_token?: string;
+      refresh_token?: string;
+      expires_in?: number;
+      error?: string;
+    };
+
+    if (data.error === "authorization_pending") {
+      continue;
+    }
+    if (data.error === "slow_down") {
+      // Back off by adding 5 seconds
+      params.intervalMs += 5000;
+      continue;
+    }
+    if (data.error) {
+      throw new Error(`Device code auth failed: ${data.error}`);
+    }
+
+    const access = data.access_token?.trim();
+    const refresh = data.refresh_token?.trim();
+    const expiresIn = data.expires_in ?? 0;
+
+    if (!access) {
+      throw new Error("Token exchange returned no access_token");
+    }
+    if (!refresh) {
+      throw new Error("Token exchange returned no refresh_token");
+    }
+
+    const expires = Date.now() + expiresIn * 1000 - 5 * 60 * 1000;
+    return { access, refresh, expires };
+  }
+
+  throw new Error("Device code expired. Please try again.");
+}
+
 export async function fetchUserProfile(accessToken: string): Promise<{
   email?: string;
   displayName?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symerian/symi",
-  "version": "2.1.6",
+  "version": "2.1.7",
   "description": "Multi-channel AI gateway with extensible messaging integrations",
   "keywords": [],
   "homepage": "https://github.com/jaysteelmind/symi#readme",

package/dist/plugin-sdk/web-eAue9zIL.js

@@ -1,65 +0,0 @@
-import { a as WA_WEB_AUTH_DIR, g as webAuthExists, s as logWebSelfId, u as pickWebChannel } from "./accounts-Ddm33hQm.js";
-import "./reply-BSikbH6_.js";
-import "./paths-DR2yt_mP.js";
-import "./github-copilot-token-D9X2phUj.js";
-import "./plugins-BNByVCIH.js";
-import "./fetch-CUNoPTKm.js";
-import "./registry-D0xTnUWt.js";
-import "./retry-CwQ_iIj8.js";
-import "./send-Dw4gTEN6.js";
-import "./config-ChoJh2v6.js";
-import "./subsystem-B2uDN3TV.js";
-import "./command-format-GKSevep4.js";
-import "./model-selection-CPEL3Uc_.js";
-import "./agent-scope-CYYpcO9W.js";
-import "./manifest-registry-CPnHl_K3.js";
-import "./redact-DPnDWsnT.js";
-import "./errors-Bv8oZiTO.js";
-import "./channel-activity-DoC1xtDu.js";
-import "./image-ops-BlQR__MN.js";
-import "./ssrf-DKZ8eBrk.js";
-import "./local-roots-BHLNSI8U.js";
-import "./ir-BJ6BHE5b.js";
-import "./chunk-Dw2XBYXv.js";
-import "./message-channel-COTAJzHd.js";
-import "./bindings-C7hRtgYW.js";
-import "./markdown-tables-BoYFajMu.js";
-import "./render-BiJZ5W4Z.js";
-import "./tables-DNwXwNFa.js";
-import "./send-6DwkdgEF.js";
-import "./tool-images-HJ2sfZDV.js";
-import "./target-errors-Paro1BjP.js";
-import "./send-BNZVvZHE.js";
-import "./send-D8vgGF3T.js";
-import "./runner-Co_eR7xp.js";
-import "./reply-prefix-uxfMZW4p.js";
-import "./tokens-bC3UVmVH.js";
-import "./skill-commands-BUVE0jBL.js";
-import "./skills-_yTP47Cd.js";
-import "./chrome-BMG9BEuT.js";
-import "./thinking-CXqf7WTe.js";
-import "./accounts-s-AdhXVR.js";
-import "./accounts-BtaOa4z_.js";
-import "./deliver-PHupXW27.js";
-import "./pi-embedded-helpers-CU4D77Op.js";
-import "./paths-A0xdf3yk.js";
-import "./diagnostic-05pm5Rxi.js";
-import "./store-BdrNabcU.js";
-import { n as monitorWebInbox, t as monitorWebChannel } from "./channel-web-Bz7z_PrR.js";
-import "./image-CZeY-Q2T.js";
-import "./pi-model-discovery-LbcEa65a.js";
-import "./api-key-rotation-BNN7DLRF.js";
-import "./sqlite-CxAR5ttJ.js";
-import "./diagnostic-session-state-Wd5tNeQG.js";
-import "./manager-Cn2S7u-y.js";
-import "./commands-registry-B6QKgH1z.js";
-import "./send-D6BxZPP0.js";
-import "./proxy-MquBDehr.js";
-import "./resolve-route-B3CCBumQ.js";
-import "./replies-zmY9bbot.js";
-import "./outbound-attachment-CnslKL38.js";
-import { n as sendMessageWhatsApp } from "./outbound-ps5sAOfw.js";
-import { i as waitForWaConnection, t as createWaSocket } from "./session-BTN5wyhB.js";
-import { t as loginWeb } from "./login-WrHy4q1W.js";
-
-export { WA_WEB_AUTH_DIR, createWaSocket, logWebSelfId, loginWeb, monitorWebChannel, monitorWebInbox, pickWebChannel, sendMessageWhatsApp, waitForWaConnection, webAuthExists };