@theokit/agents 6.4.1 → 7.0.0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for describing the origin of the Work and
+      reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 usetheo.dev
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/dist/auth.js

@@ -1,6 +1,6 @@
 import {
   __name
-} from "./chunk-7QVYU63E.js";
+} from "./chunk-Z4QWC7IK.js";
 
 // src/auth/auth-provider.ts
 import { authFilePath, ensureFreshCredential, openaiDeviceLogin, persistOAuthTokens, readStoredOAuth } from "@theokit/sdk/auth";

package/dist/auth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/auth/auth-provider.ts","../src/auth-entry.ts","../src/auth/device-provider.ts"],"sourcesContent":["import {\n  authFilePath,\n  ensureFreshCredential,\n  openaiDeviceLogin,\n  persistOAuthTokens,\n  readStoredOAuth,\n} from '@theokit/sdk/auth'\nimport type {\n  CredentialStoreConfig,\n  OAuthProviderConfig,\n  OAuthTokens,\n  OpenAIDeviceConfig,\n  ResolvedCredential,\n} from '@theokit/sdk/auth'\nimport { withFileLock } from '@theokit/sdk/persistence'\n\n/**\n * M60 — `AuthProvider`, the OO contract that unifies the SDK's free OAuth-lifecycle functions\n * (`openaiDeviceLogin` → `persistOAuthTokens` → `ensureFreshCredential`). Those are stateful across a\n * SHARED `config` (`OAuthProviderConfig`) + `store` (`CredentialStoreConfig`); this class holds that\n * state so a consumer authors `new AuthProvider(config, store).persist(...)` / `.ensureFresh(...)`\n * instead of threading `config`/`store` through every call — the `SDK → Theokit → AgentBuilder`\n * boundary applied to the auth domain (ENRICH, per blueprint D2: auth carries orchestration + state).\n *\n * It DELEGATES, never reimplements (parsimony Rung 9): each method forwards verbatim to the SDK\n * function, so login → persist → refresh produces byte-identical state to calling the SDK directly.\n *\n * SECRET-SAFETY (hard rule): this class NEVER logs, stringifies, or otherwise surfaces token material.\n * Methods return exactly what the SDK returns and add no observability — a token is data that flows\n * through, never something this layer emits. The parity/secret tests pin both properties.\n */\n\n/** The HTTP deps of `ensureFreshCredential` (`{ fetch, now }`) — typed off the SDK to avoid drift. */\ntype EnsureFreshHttpDeps = Parameters<typeof ensureFreshCredential>[2]\n/** The device-flow deps + prompt hook of `openaiDeviceLogin` — typed off the SDK. */\ntype DeviceLoginDeps = Parameters<typeof openaiDeviceLogin>[1]\ntype DeviceLoginHooks = Parameters<typeof openaiDeviceLogin>[2]\n\n/**\n * Falha de refresh, classificada — porque a decisão de tentar de novo depende da classe, não do texto.\n *\n * M74: repetir um `invalid_grant` não é resiliência, é ruído. O refresh token foi revogado e nenhuma\n * tentativa muda isso; o usuário que revogou o login espera três backoffs para ler uma mensagem que já\n * era conhecida na primeira resposta. Rede e 5xx são o oposto: quase sempre passam na segunda.\n *\n * SECRET-SAFETY: a mensagem nunca carrega material de token — só a classe e o motivo.\n */\nexport class RefreshFailure extends Error {\n  constructor(\n    message: string,\n    /** `true` ⇒ vale tentar de novo com backoff. `false` ⇒ terminal, falha na primeira. */\n    readonly transitorio: boolean,\n  ) {\n    super(message)\n    this.name = 'RefreshFailure'\n  }\n}\n\n/**\n * O que conta como transitório. Lista NOMEADA de propósito: é decisão de produto que envelhece, e\n * espalhá-la em `if` faz cada sítio envelhecer sozinho.\n */\nconst MOTIVOS_TRANSITORIOS = [\n  'ETIMEDOUT',\n  'ECONNRESET',\n  'ECONNREFUSED',\n  'EAI_AGAIN',\n  'ENOTFOUND',\n  'AbortError',\n]\n\n/** Classifica uma falha de refresh. `invalid_grant` é terminal; rede e 5xx são transitórios. */\nexport function classificarFalhaDeRefresh(err: unknown): RefreshFailure {\n  const texto = err instanceof Error ? `${err.name}: ${err.message}` : String(err)\n  if (/invalid_grant|invalid_request|unauthorized_client/i.test(texto)) {\n    return new RefreshFailure(\n      'o refresh token não é mais válido — refaça o login. Tentar de novo não muda o resultado.',\n      false,\n    )\n  }\n  const transitorio =\n    MOTIVOS_TRANSITORIOS.some((m) => texto.includes(m)) ||\n    /\\b(5\\d{2})\\b|timeout|network/i.test(texto)\n  return new RefreshFailure(\n    transitorio ? 'falha transitória ao refrescar a credencial' : 'falha ao refrescar a credencial',\n    transitorio,\n  )\n}\n\n/** Espera com jitter: backoff exponencial ±25%, para dois processos não retentarem em uníssono. */\nexport function esperaComJitter(tentativa: number, baseMs = 200, aleatorio = Math.random): number {\n  const base = baseMs * 2 ** tentativa\n  return Math.round(base * (0.75 + aleatorio() * 0.5))\n}\n\nexport class AuthProvider {\n  constructor(\n    private readonly config: OAuthProviderConfig,\n    private readonly store: CredentialStoreConfig,\n  ) {}\n\n  /**\n   * Refresh a resolved credential if stale. Delegates to `ensureFreshCredential` with the held\n   * `config` + `store`; `env` (for reading the store's env overrides) + the `{ fetch, now }` HTTP deps\n   * thread through. Returns the fresh `ResolvedCredential` — never logs the rotated token.\n   */\n  async ensureFresh(\n    resolved: ResolvedCredential,\n    deps: EnsureFreshHttpDeps,\n    env?: Record<string, string | undefined>,\n  ): Promise<ResolvedCredential> {\n    if (resolved.kind !== 'oauth') {\n      // Chave de API não expira: nenhum lock, nenhuma releitura, nenhum I/O. Manter o caminho quente\n      // livre é o que torna o resolvedor por-run barato (M74, Risco 1).\n      // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment -- `CredentialStoreConfig` do subpath /auth resolve sob tsc; o projeto type-aware do eslint o lê como error-typed.\n      return ensureFreshCredential(resolved, { config: this.config, store: this.store, env }, deps)\n    }\n\n    const caminho: string = authFilePath(this.store, env)\n\n    // SINGLE-FLIGHT in-process, ANTES do lock (M74, EC-2 do edge-case review).\n    //\n    // `withFileLock` (proper-lockfile) NÃO é reentrante: se uma run começar de dentro de um contexto\n    // que já segura o lock — uma run aninhada, ou um time disparando membros enquanto o pai refresca —\n    // a segunda aquisição espera até o timeout e o sintoma é \"a run travou\", sem erro nenhum. Com o\n    // resolvedor por-run do M74 isso deixa de ser hipotético: `ensureFresh` passa a ser chamado de\n    // dentro do stream. A promise em voo faz a reentrância resolver por composição, não por lock.\n    const emVoo = AuthProvider.refreshEmVoo.get(caminho)\n    if (emVoo !== undefined) return emVoo\n\n    const promessa = this.refrescarSobLock(caminho, resolved, deps, env)\n    AuthProvider.refreshEmVoo.set(caminho, promessa)\n    try {\n      return await promessa\n    } finally {\n      AuthProvider.refreshEmVoo.delete(caminho)\n    }\n  }\n\n  /** Refresh em voo por caminho de store — a chave é o arquivo, não a instância. */\n  private static readonly refreshEmVoo = new Map<string, Promise<ResolvedCredential>>()\n\n  /**\n   * O refresh propriamente dito, serializado entre PROCESSOS e com re-leitura.\n   *\n   * A re-leitura não é detalhe: sem ela o lock apenas serializa, e o segundo processo decide com o\n   * estado que leu ANTES de esperar — refrescando de novo e invalidando o token que o primeiro acabou\n   * de gravar. É o double-checked locking clássico, e é o que o teste de dois processos pega.\n   */\n  private refrescarSobLock(\n    caminho: string,\n    resolved: ResolvedCredential,\n    deps: EnsureFreshHttpDeps,\n    env?: Record<string, string | undefined>,\n  ): Promise<ResolvedCredential> {\n    /* eslint-disable @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-unsafe-member-access -- os subpaths `/auth` e `/persistence` do SDK resolvem sob tsc (typecheck da raiz limpo); o projeto type-aware do eslint os lê como error-typed. Mesma nota que este arquivo já carregava para `CredentialStoreConfig`. */\n    return withFileLock(caminho, async () => {\n      // RE-LEITURA depois de adquirir o lock: outro processo pode ter refrescado enquanto esperávamos.\n      const doDisco = readStoredOAuth(this.store, env)\n      const atual =\n        doDisco !== undefined\n          ? { ...resolved, apiKey: doDisco.access, expiresAt: doDisco.expires }\n          : resolved\n      // Retry SÓ no transitório. Um `invalid_grant` falha na PRIMEIRA: o token foi revogado e nenhuma\n      // tentativa muda isso — insistir só atrasa a mensagem que o usuário precisa ler.\n      //\n      // Este laço já existiu e foi APAGADO por um lint-fix meu que reescreveu o bloco inteiro; o\n      // review pegou (`tentativas de POST = 1`, contra as 3 que a DoD exige). Testar o classificador\n      // isolado prova que ele classifica, não que está LIGADO — por isso há um gate estrutural.\n      const MAX_TENTATIVAS = 3\n      for (let tentativa = 0; ; tentativa++) {\n        try {\n          return await ensureFreshCredential(\n            atual,\n            { config: this.config, store: this.store, env },\n            deps,\n          )\n        } catch (err) {\n          const falha = classificarFalhaDeRefresh(err)\n          if (!falha.transitorio || tentativa >= MAX_TENTATIVAS - 1) throw falha\n          await new Promise((resolve) => setTimeout(resolve, esperaComJitter(tentativa)))\n        }\n      }\n    }) as Promise<ResolvedCredential>\n    /* eslint-enable @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-unsafe-member-access */\n  }\n\n  /**\n   * Run the headless OpenAI device-login flow. Delegates to `openaiDeviceLogin` (which JWT-extracts the\n   * account id). `deviceConfig` is passed per-call because it is a distinct endpoint set from the\n   * refresh `config`. Returns `OAuthTokens` — the caller persists them via {@link AuthProvider.persist}.\n   */\n  deviceLogin(\n    deviceConfig: OpenAIDeviceConfig,\n    deps: DeviceLoginDeps,\n    hooks: DeviceLoginHooks,\n  ): Promise<OAuthTokens> {\n    return openaiDeviceLogin(deviceConfig, deps, hooks)\n  }\n\n  /**\n   * Persist freshly-obtained tokens through the held `store`. Delegates to `persistOAuthTokens` and\n   * returns the credential-file path (never the token). `env` selects the store's home override.\n   */\n  persist(provider: string, tokens: OAuthTokens, env?: Record<string, string | undefined>): string {\n    return persistOAuthTokens(provider, tokens, this.store, env)\n  }\n}\n","// M60 — `@theokit/agents/auth`: the OO auth contract. `AuthProvider` (ENRICH — it holds the shared\n// `config`+`store` state and delegates to the SDK's free OAuth-lifecycle functions), plus the auth\n// domain's types re-exported so a consumer types the whole surface from the Theokit layer, never\n// reaching back to `@theokit/sdk/auth`.\nexport { AuthProvider } from './auth/auth-provider.js'\n\n// M73 — \"enriquecer nunca reduz\". A mecânica de store do SDK atravessa como PASS-THROUGH PURO.\n//\n// Antes disto, este subpath exportava 1 valor e 6 tipos enquanto `@theokit/sdk/auth` exportava 19\n// símbolos: nenhuma função atravessava. Como o consumidor tem regra INQUEBRÁVEL de nunca importar\n// `@theokit/sdk*` direto, **reimplementar era a única saída legal** — e o agent-builder reescreveu\n// seis destes nomes, ~120 linhas de mecânica duplicada. A lacuna era daqui, não indisciplina de lá.\n//\n// PURO, e não wrapper (parsimony Rung 9): estas são funções de I/O sem estado a segurar. A camada\n// enriquece onde há orquestração — é o que `AuthProvider` faz com o par `config`+`store`. Envolver\n// isto acrescentaria indireção sem nada dentro, e **quebraria `instanceof`**: o consumidor faz\n// `err instanceof CredentialError`, o que só vale enquanto a classe for a MESMA referência do SDK.\n// `tests/unit/auth-parity.test.ts` trava essa identidade com `toBe`.\n//\n// `resolveCredential` NÃO atravessa, de propósito: o SDK e o agent-builder têm funções DIFERENTES com\n// esse nome (sync vs async, lança vs `undefined`, lê env vs não lê, infere provider vs recusa), e o\n// próprio SDK declara que a precedência de env, a inferência por prefixo e o provider declarado são\n// app policy do consumidor (`internal/auth/credential-store.ts`). Expor os dois no mesmo escopo seria\n// convite a importar o errado, com falha silenciosa.\nexport {\n  authFilePath,\n  CredentialError,\n  credentialHome,\n  readAuthFile,\n  readStoredOAuth,\n  writeCredential,\n} from '@theokit/sdk/auth'\n\n// M110 — o device flow **RFC 8628** atravessa, pelo MESMO argumento do M73 acima, sobre símbolos que\n// aquele milestone não cobriu.\n//\n// Medido: o SDK implementa o padrão (`deviceLogin`, `requestDeviceCode`, `pollDeviceToken`,\n// `DeviceOAuthConfig`), e este subpath re-exportava **apenas** a variante da OpenAI\n// (`openaiDeviceLogin`, `OpenAIDeviceConfig`). Um consumidor que precisasse do padrão tinha duas\n// saídas: violar a regra INQUEBRÁVEL, ou reimplementar o RFC. É literalmente a frase do M73 — *\"a\n// lacuna era daqui, não indisciplina de lá\"* — reencenada num subsistema vizinho.\n//\n// PURO, não wrapper, pelo critério que o M73 escreveu: são funções de I/O sem estado a segurar.\n// `DeviceDeps` já é injetável, então um consumidor testa o próprio provider sem rede.\n//\n// As duas formas COEXISTEM e nada é unificado: `DeviceOAuthConfig` tem **um** `deviceCodeEndpoint`\n// (RFC), e `OpenAIDeviceConfig` tem **dois** (`deviceUsercodeEndpoint` → `devicePollEndpoint`, com\n// PKCE). Fundi-las quebraria o Codex — o provider que este trabalho existe para facilitar.\n// E `openaiDeviceLogin` atravessa JUNTO, o que a medição do M110 mostrou faltar: ele era **importado**\n// aqui para uso interno do `AuthProvider` e nunca re-exportado. Consequência — o flow do Codex só era\n// alcançável construindo um `AuthProvider` (que exige `config`+`store`), quando o pedido concreto era\n// *\"facilitar usar o provider Codex\"*. Exportá-lo é o mesmo argumento das linhas acima, aplicado à\n// variante que já existia.\nexport {\n  deviceLogin,\n  openaiDeviceLogin,\n  pollDeviceToken,\n  requestDeviceCode,\n} from '@theokit/sdk/auth'\nexport type { DeviceCodeGrant, DeviceOAuthConfig } from '@theokit/sdk/auth'\nexport type { ResolveCredentialOptions } from '@theokit/sdk/auth'\nexport type {\n  CredentialStoreConfig,\n  DeviceDeps,\n  OAuthProviderConfig,\n  OAuthTokens,\n  OpenAIDeviceConfig,\n  ResolvedCredential,\n} from '@theokit/sdk/auth'\n\n// M111 — device auth PLUG-AND-PLAY. O M110 fez o flow RFC 8628 atravessar; ele não tocou a ergonomia.\n//\n// Para autenticar no Codex, o consumidor tinha de saber que existem DUAS formas de device flow, copiar\n// um `clientId` e três URLs da OpenAI para dentro do próprio código, montar `{fetch, sleep, now}`,\n// chamar `deviceLogin` e LEMBRAR de chamar `persist` — esquecer o último custa um round-trip OAuth\n// completo que não guarda nada.\n//\n// O desenho veio de medição contra três peers e REFUTOU a proposta original (um descritor plano com\n// discriminante `kind`): nenhum dos três discrimina protocolo por campo. `AuthMethod` é união\n// discriminada e cada método aponta para a SUA função — sem `switch`, e sem tornar representável um\n// método OAuth que não sabe autorizar.\n//\n// ENRIQUECE, não é pass-through: `loginWithDevice` orquestra `authorize` + `persist` (a forma de\n// `run_device_code_login` do codex, que retorna `()`), e `CODEX_PROVIDER` é identidade pública que\n// antes cada consumidor copiava — dois donos do mesmo fato é violação de DRY através da fronteira.\nexport { CODEX_CLIENT_ID_ENV_VAR, CODEX_PROVIDER, loginWithDevice } from './auth/device-provider.js'\nexport type { AuthMethod, DeviceAuthProvider, PromptHooks } from './auth/device-provider.js'\n","import type {\n  CredentialStoreConfig,\n  DeviceDeps,\n  OAuthProviderConfig,\n  OAuthTokens,\n  OpenAIDeviceConfig,\n} from '@theokit/sdk/auth'\nimport { openaiDeviceLogin } from '@theokit/sdk/auth'\n\nimport { AuthProvider } from './auth-provider.js'\n\n/**\n * M111 — device auth plug-and-play: um provider é um objeto com métodos ROTULADOS, e um login cabe\n * numa chamada.\n *\n * ## O problema, medido\n *\n * O M110 fez o device flow RFC 8628 atravessar esta camada. Ele não tocou a ergonomia: para\n * autenticar no Codex, o consumidor precisava saber que existem **duas** formas de device flow,\n * copiar um `clientId` e três URLs da OpenAI para dentro do próprio código, montar\n * `{ fetch, sleep, now }`, chamar `deviceLogin` e **lembrar** de chamar `persist` — e esquecer o\n * último custa um round-trip OAuth completo que não guarda nada. O docblock de `AuthProvider`\n * instruía exatamente isso: *\"the caller persists them via `AuthProvider.persist`\"*.\n *\n * ## O desenho veio de medição contra três peers, e refutou a proposta original\n *\n * - **`codex`** — `codex-rs/login/src/device_code_auth.rs:234` tem `run_device_code_login`, que\n *   retorna `()`: **nada** sai para o chamador persistir, e as duas metades granulares continuam\n *   públicas. `loginWithDevice` é a cópia dessa forma.\n * - **`opencode`** — cada provider é um objeto com `methods: [{ label, type, authorize }]`, e três\n *   providers escritos por autores diferentes convergem em **3 métodos rotulados** cada. O rótulo é o\n *   que a UI mostra: transforma escolha de protocolo em escolha de frase legível.\n * - **REJEITADO — discriminante `kind`.** Nenhum dos três discrimina protocolo por campo. A medição\n *   que fecha o caso: no `opencode`, browser e headless do Codex carregam o **mesmo** `type: 'oauth'`\n *   — logo o `type` classifica **espécie de credencial**, não protocolo. Um `kind` com despacho\n *   interno seria um `switch`, exatamente o defeito que este milestone remove do consumidor.\n *   Aqui, cada método aponta para a **sua própria** função.\n *\n * ## Por que a identidade pública mora AQUI\n *\n * `codex` exporta `CLIENT_ID` do crate que implementa o flow (`login/src/lib.rs:32`) e o CLI o\n * **importa**; o `opencode` o declara dentro do plugin. Os dois chegaram ao mesmo lugar\n * independentemente — e com o mesmo valor que o consumidor tinha copiado. Enquanto morasse no\n * consumidor, todo projeto que quisesse Codex copiaria quatro constantes públicas: é violação de DRY\n * através da fronteira, com dois donos do mesmo fato.\n */\n\n/**\n * Uma forma rotulada de obter credencial dentro de um provider.\n *\n * UNIÃO DISCRIMINADA, não um campo `authorize?` opcional. Com opcional, `{ label, type: 'oauth' }`\n * seria representável — um método OAuth que não sabe autorizar, detectado só em runtime, no meio do\n * login do usuário. É a alternativa que o M110 já rejeitou por escrito ao recusar \"um tipo só com\n * campos opcionais\": tornaria representável um config inválido e moveria a detecção do compilador\n * para o runtime.\n */\nexport type AuthMethod =\n  | {\n      /** O que a interface mostra ao usuário. É a peça que torna o fluxo escolhível sem saber o protocolo. */\n      readonly label: string\n      readonly type: 'oauth'\n      /** A função DESTE método. Sem discriminante: o método aponta para a sua, não para um `switch`. */\n      readonly authorize: (deps: DeviceDeps, hooks: PromptHooks) => Promise<OAuthTokens>\n    }\n  | {\n      readonly label: string\n      readonly type: 'api'\n    }\n\n/** O que o consumidor liga à sua UI para mostrar o código que o usuário digita no outro dispositivo. */\nexport interface PromptHooks {\n  onPrompt: (p: { userCode: string; verificationUri: string; expiresIn?: number }) => void\n}\n\n/** Um provider de autenticação: identidade pública + as formas rotuladas de autenticar nele. */\nexport interface DeviceAuthProvider {\n  readonly name: string\n  readonly oauth: OAuthProviderConfig\n  readonly methods: readonly AuthMethod[]\n}\n\n/** Identificadores PÚBLICOS do Codex CLI da OpenAI (publicados na fonte MIT do OpenCode). Não são segredo. */\nconst CODEX_CLIENT_ID = 'app_EMoamEEZ73f0CkXaXp7hrann'\nconst CODEX_ISSUER = 'https://auth.openai.com'\n\n/**\n * Override do `clientId` por ambiente — adotado do `codex`, que exporta `CLIENT_ID` **e**\n * `CLIENT_ID_OVERRIDE_ENV_VAR` (`login/src/lib.rs:32-33`). Dissolve o falso dilema entre constante\n * fixa (inflexível) e parâmetro obrigatório (que devolve a cópia ao consumidor): default no pacote,\n * escape para quem precisa.\n */\nexport const CODEX_CLIENT_ID_ENV_VAR = 'THEOKIT_CODEX_CLIENT_ID'\n\nconst CODEX_OAUTH: OAuthProviderConfig = {\n  provider: 'openai',\n  clientId: process.env[CODEX_CLIENT_ID_ENV_VAR] ?? CODEX_CLIENT_ID,\n  authorizeEndpoint: `${CODEX_ISSUER}/oauth/authorize`,\n  tokenEndpoint: `${CODEX_ISSUER}/oauth/token`,\n  scopes: ['openid', 'profile', 'email', 'offline_access'],\n  redirectUri: `${CODEX_ISSUER}/deviceauth/callback`,\n}\n\n/**\n * A config do device flow da OpenAI — **dois** endpoints, com PKCE. É a variante NÃO-padrão, e é por\n * isso que ela não se funde com `DeviceOAuthConfig` (RFC 8628, **um** endpoint).\n */\nconst CODEX_DEVICE: OpenAIDeviceConfig = {\n  ...CODEX_OAUTH,\n  deviceUsercodeEndpoint: `${CODEX_ISSUER}/api/accounts/deviceauth/usercode`,\n  devicePollEndpoint: `${CODEX_ISSUER}/api/accounts/deviceauth/token`,\n  verificationUri: `${CODEX_ISSUER}/codex/device`,\n}\n\n/**\n * O provider do Codex, montado e **congelado**.\n *\n * Congelado porque é identidade pública COMPARTILHADA no processo: um consumidor que a mutasse\n * mudaria o login de todos os outros. `Object.freeze` é raso, então a lista de métodos é congelada\n * separadamente — sem isso, `CODEX_PROVIDER.methods.push(...)` passaria.\n */\nexport const CODEX_PROVIDER: DeviceAuthProvider = Object.freeze({\n  name: 'openai',\n  oauth: Object.freeze(CODEX_OAUTH),\n  methods: Object.freeze([\n    Object.freeze({\n      label: 'ChatGPT Pro/Plus (headless device code)',\n      type: 'oauth' as const,\n      // Aponta para a variante da OpenAI. Um provider RFC 8628 apontaria para `deviceLogin`, e é\n      // assim que as duas formas coexistem sem discriminante.\n      authorize: (deps: DeviceDeps, hooks: PromptHooks): Promise<OAuthTokens> =>\n        openaiDeviceLogin(CODEX_DEVICE, deps, hooks),\n    }),\n    Object.freeze({\n      label: 'Manually enter API Key',\n      type: 'api' as const,\n    }),\n  ]),\n})\n\n/**\n * Opções do Facade. `deps` e `env` viajam juntos num objeto em vez de dois parâmetros posicionais:\n * ambos são opcionais e raramente usados, e seis posicionais é assinatura que o chamador erra em\n * silêncio (o lint do monorepo cobra 5 como teto — o teto existe por este motivo).\n */\nexport interface LoginWithDeviceOptions {\n  /** Injeção de I/O para teste. Omitido, usa `fetch`/`setTimeout`/`Date.now` reais. */\n  readonly deps?: Partial<DeviceDeps>\n  /** Ambiente lido pelo store para resolver o diretório da credencial. */\n  readonly env?: Record<string, string | undefined>\n}\n\n/** Defaults das deps de I/O. `deps` é opcional na superfície ergonômica; a injeção fica para o teste. */\nfunction comDefaults(deps?: Partial<DeviceDeps>): DeviceDeps {\n  return {\n    fetch: deps?.fetch ?? fetch,\n    sleep: deps?.sleep ?? ((ms: number) => new Promise<void>((resolve) => setTimeout(resolve, ms))),\n    now: deps?.now ?? Date.now,\n  }\n}\n\n/**\n * Autoriza **e** persiste, numa chamada. Devolve onde a credencial ficou e a conta atribuída —\n * **nunca** material de token.\n *\n * A forma vem de `run_device_code_login` (`codex`), que retorna `()`: se nada sai para o chamador,\n * não há passo que ele possa esquecer. As duas metades continuam públicas em `AuthProvider`\n * (`deviceLogin` / `persist`) para quem precisa da granularidade — mesma escolha que o `codex` faz ao\n * manter `request_device_code` e `complete_device_code_login` públicas ao lado do Facade.\n *\n * Delega verbatim: `method.authorize` roda o flow e `AuthProvider.persist` grava. Copiar a sequência\n * em vez de chamá-la criaria um segundo oráculo sobre o mesmo fato, e dois oráculos divergem no\n * primeiro fix aplicado a um lado só.\n */\nexport async function loginWithDevice(\n  provider: DeviceAuthProvider,\n  method: AuthMethod,\n  store: CredentialStoreConfig,\n  hooks: PromptHooks,\n  opts: LoginWithDeviceOptions = {},\n): Promise<{ path: string; accountId?: string }> {\n  // VALIDAÇÃO NA FRONTEIRA, antes de qualquer I/O. As três recusas abaixo acontecem sem tocar a rede\n  // e sem tocar o disco: falhar depois de gravar deixaria credencial parcial, e a próxima execução\n  // leria um estado que nunca foi válido.\n  if (provider.methods.length === 0) {\n    throw new TypeError(\n      `o provider \"${provider.name}\" declara nenhum método de autenticação — não há o que escolher`,\n    )\n  }\n  if (!provider.methods.includes(method)) {\n    throw new TypeError(`o método \"${method.label}\" não pertence ao provider \"${provider.name}\"`)\n  }\n  if (method.type !== 'oauth') {\n    throw new TypeError(\n      `o método \"${method.label}\" é de chave (api key), não é um método de device — use o caminho de chave`,\n    )\n  }\n\n  const tokens = await method.authorize(comDefaults(opts.deps), hooks)\n  const path = new AuthProvider(provider.oauth, store).persist(provider.name, tokens, opts.env)\n  // O retorno NÃO carrega token: o consumidor precisa saber onde ficou e de quem é, não o segredo.\n  return tokens.accountId === undefined ? { path } : { path, accountId: tokens.accountId }\n}\n"],"mappings":";;;;;AAAA,SACEA,cACAC,uBACAC,mBACAC,oBACAC,uBACK;AAQP,SAASC,oBAAoB;AAiCtB,IAAMC,iBAAN,cAA6BC,MAAAA;EA/CpC,OA+CoCA;;;;EAClC,YACEC,SAESC,aACT;AACA,UAAMD,OAAAA,GAAAA,KAFGC,cAAAA;AAGT,SAAKC,OAAO;EACd;AACF;AAMA,IAAMC,uBAAuB;EAC3B;EACA;EACA;EACA;EACA;EACA;;AAIK,SAASC,0BAA0BC,KAAY;AACpD,QAAMC,QAAQD,eAAeN,QAAQ,GAAGM,IAAIH,IAAI,KAAKG,IAAIL,OAAO,KAAKO,OAAOF,GAAAA;AAC5E,MAAI,qDAAqDG,KAAKF,KAAAA,GAAQ;AACpE,WAAO,IAAIR,eACT,gHACA,KAAA;EAEJ;AACA,QAAMG,cACJE,qBAAqBM,KAAK,CAACC,MAAMJ,MAAMK,SAASD,CAAAA,CAAAA,KAChD,gCAAgCF,KAAKF,KAAAA;AACvC,SAAO,IAAIR,eACTG,cAAc,mDAAgD,mCAC9DA,WAAAA;AAEJ;AAfgBG;AAkBT,SAASQ,gBAAgBC,WAAmBC,SAAS,KAAKC,YAAYC,KAAKC,QAAM;AACtF,QAAMC,OAAOJ,SAAS,KAAKD;AAC3B,SAAOG,KAAKG,MAAMD,QAAQ,OAAOH,UAAAA,IAAc,IAAE;AACnD;AAHgBH;AAKT,IAAMQ,eAAN,MAAMA,cAAAA;EA/Fb,OA+FaA;;;;;EACX,YACmBC,QACAC,OACjB;SAFiBD,SAAAA;SACAC,QAAAA;EAChB;;;;;;EAOH,MAAMC,YACJC,UACAC,MACAC,KAC6B;AAC7B,QAAIF,SAASG,SAAS,SAAS;AAI7B,aAAOC,sBAAsBJ,UAAU;QAAEH,QAAQ,KAAKA;QAAQC,OAAO,KAAKA;QAAOI;MAAI,GAAGD,IAAAA;IAC1F;AAEA,UAAMI,UAAkBC,aAAa,KAAKR,OAAOI,GAAAA;AASjD,UAAMK,QAAQX,cAAaY,aAAaC,IAAIJ,OAAAA;AAC5C,QAAIE,UAAUG,OAAW,QAAOH;AAEhC,UAAMI,WAAW,KAAKC,iBAAiBP,SAASL,UAAUC,MAAMC,GAAAA;AAChEN,kBAAaY,aAAaK,IAAIR,SAASM,QAAAA;AACvC,QAAI;AACF,aAAO,MAAMA;IACf,UAAA;AACEf,oBAAaY,aAAaM,OAAOT,OAAAA;IACnC;EACF;;EAGA,OAAwBG,eAAe,oBAAIO,IAAAA;;;;;;;;EASnCH,iBACNP,SACAL,UACAC,MACAC,KAC6B;AAE7B,WAAOc,aAAaX,SAAS,YAAA;AAE3B,YAAMY,UAAUC,gBAAgB,KAAKpB,OAAOI,GAAAA;AAC5C,YAAMiB,QACJF,YAAYP,SACR;QAAE,GAAGV;QAAUoB,QAAQH,QAAQI;QAAQC,WAAWL,QAAQM;MAAQ,IAClEvB;AAON,YAAMwB,iBAAiB;AACvB,eAASnC,YAAY,KAAKA,aAAa;AACrC,YAAI;AACF,iBAAO,MAAMe,sBACXe,OACA;YAAEtB,QAAQ,KAAKA;YAAQC,OAAO,KAAKA;YAAOI;UAAI,GAC9CD,IAAAA;QAEJ,SAASpB,KAAK;AACZ,gBAAM4C,QAAQ7C,0BAA0BC,GAAAA;AACxC,cAAI,CAAC4C,MAAMhD,eAAeY,aAAamC,iBAAiB,EAAG,OAAMC;AACjE,gBAAM,IAAIC,QAAQ,CAACC,YAAYC,WAAWD,SAASvC,gBAAgBC,SAAAA,CAAAA,CAAAA;QACrE;MACF;IACF,CAAA;EAEF;;;;;;EAOAwC,YACEC,cACA7B,MACA8B,OACsB;AACtB,WAAOC,kBAAkBF,cAAc7B,MAAM8B,KAAAA;EAC/C;;;;;EAMAE,QAAQC,UAAkBC,QAAqBjC,KAAkD;AAC/F,WAAOkC,mBAAmBF,UAAUC,QAAQ,KAAKrC,OAAOI,GAAAA;EAC1D;AACF;;;ACvLA,SACEmC,gBAAAA,eACAC,iBACAC,gBACAC,cACAC,mBAAAA,kBACAC,uBACK;AAsBP,SACEC,aACAC,qBAAAA,oBACAC,iBACAC,yBACK;;;ACnDP,SAASC,qBAAAA,0BAAyB;AA2ElC,IAAMC,kBAAkB;AACxB,IAAMC,eAAe;AAQd,IAAMC,0BAA0B;AAEvC,IAAMC,cAAmC;EACvCC,UAAU;EACVC,UAAUC,QAAQC,IAAIL,uBAAAA,KAA4BF;EAClDQ,mBAAmB,GAAGP,YAAAA;EACtBQ,eAAe,GAAGR,YAAAA;EAClBS,QAAQ;IAAC;IAAU;IAAW;IAAS;;EACvCC,aAAa,GAAGV,YAAAA;AAClB;AAMA,IAAMW,eAAmC;EACvC,GAAGT;EACHU,wBAAwB,GAAGZ,YAAAA;EAC3Ba,oBAAoB,GAAGb,YAAAA;EACvBc,iBAAiB,GAAGd,YAAAA;AACtB;AASO,IAAMe,iBAAqCC,OAAOC,OAAO;EAC9DC,MAAM;EACNC,OAAOH,OAAOC,OAAOf,WAAAA;EACrBkB,SAASJ,OAAOC,OAAO;IACrBD,OAAOC,OAAO;MACZI,OAAO;MACPC,MAAM;;;MAGNC,WAAW,wBAACC,MAAkBC,UAC5BC,mBAAkBf,cAAca,MAAMC,KAAAA,GAD7B;IAEb,CAAA;IACAT,OAAOC,OAAO;MACZI,OAAO;MACPC,MAAM;IACR,CAAA;GACD;AACH,CAAA;AAeA,SAASK,YAAYH,MAA0B;AAC7C,SAAO;IACLI,OAAOJ,MAAMI,SAASA;IACtBC,OAAOL,MAAMK,UAAU,CAACC,OAAe,IAAIC,QAAc,CAACC,YAAYC,WAAWD,SAASF,EAAAA,CAAAA;IAC1FI,KAAKV,MAAMU,OAAOC,KAAKD;EACzB;AACF;AANSP;AAqBT,eAAsBS,gBACpBjC,UACAkC,QACAC,OACAb,OACAc,OAA+B,CAAC,GAAC;AAKjC,MAAIpC,SAASiB,QAAQoB,WAAW,GAAG;AACjC,UAAM,IAAIC,UACR,eAAetC,SAASe,IAAI,qFAAiE;EAEjG;AACA,MAAI,CAACf,SAASiB,QAAQsB,SAASL,MAAAA,GAAS;AACtC,UAAM,IAAII,UAAU,gBAAaJ,OAAOhB,KAAK,kCAA+BlB,SAASe,IAAI,GAAG;EAC9F;AACA,MAAImB,OAAOf,SAAS,SAAS;AAC3B,UAAM,IAAImB,UACR,gBAAaJ,OAAOhB,KAAK,6FAA4E;EAEzG;AAEA,QAAMsB,SAAS,MAAMN,OAAOd,UAAUI,YAAYY,KAAKf,IAAI,GAAGC,KAAAA;AAC9D,QAAMmB,OAAO,IAAIC,aAAa1C,SAASgB,OAAOmB,KAAAA,EAAOQ,QAAQ3C,SAASe,MAAMyB,QAAQJ,KAAKjC,GAAG;AAE5F,SAAOqC,OAAOI,cAAcC,SAAY;IAAEJ;EAAK,IAAI;IAAEA;IAAMG,WAAWJ,OAAOI;EAAU;AACzF;AA5BsBX;","names":["authFilePath","ensureFreshCredential","openaiDeviceLogin","persistOAuthTokens","readStoredOAuth","withFileLock","RefreshFailure","Error","message","transitorio","name","MOTIVOS_TRANSITORIOS","classificarFalhaDeRefresh","err","texto","String","test","some","m","includes","esperaComJitter","tentativa","baseMs","aleatorio","Math","random","base","round","AuthProvider","config","store","ensureFresh","resolved","deps","env","kind","ensureFreshCredential","caminho","authFilePath","emVoo","refreshEmVoo","get","undefined","promessa","refrescarSobLock","set","delete","Map","withFileLock","doDisco","readStoredOAuth","atual","apiKey","access","expiresAt","expires","MAX_TENTATIVAS","falha","Promise","resolve","setTimeout","deviceLogin","deviceConfig","hooks","openaiDeviceLogin","persist","provider","tokens","persistOAuthTokens","authFilePath","CredentialError","credentialHome","readAuthFile","readStoredOAuth","writeCredential","deviceLogin","openaiDeviceLogin","pollDeviceToken","requestDeviceCode","openaiDeviceLogin","CODEX_CLIENT_ID","CODEX_ISSUER","CODEX_CLIENT_ID_ENV_VAR","CODEX_OAUTH","provider","clientId","process","env","authorizeEndpoint","tokenEndpoint","scopes","redirectUri","CODEX_DEVICE","deviceUsercodeEndpoint","devicePollEndpoint","verificationUri","CODEX_PROVIDER","Object","freeze","name","oauth","methods","label","type","authorize","deps","hooks","openaiDeviceLogin","comDefaults","fetch","sleep","ms","Promise","resolve","setTimeout","now","Date","loginWithDevice","method","store","opts","length","TypeError","includes","tokens","path","AuthProvider","persist","accountId","undefined"]}
+{"version":3,"sources":["../src/auth/auth-provider.ts","../src/auth-entry.ts","../src/auth/device-provider.ts"],"mappings":";;;;;AAAA,SACEA,cACAC,uBACAC,mBACAC,oBACAC,uBACK;AAQP,SAASC,oBAAoB;AAiCtB,IAAMC,iBAAN,cAA6BC,MAAAA;EA/CpC,OA+CoCA;;;;EAClC,YACEC,SAESC,aACT;AACA,UAAMD,OAAAA,GAAAA,KAFGC,cAAAA;AAGT,SAAKC,OAAO;EACd;AACF;AAMA,IAAMC,uBAAuB;EAC3B;EACA;EACA;EACA;EACA;EACA;;AAIK,SAASC,0BAA0BC,KAAY;AACpD,QAAMC,QAAQD,eAAeN,QAAQ,GAAGM,IAAIH,IAAI,KAAKG,IAAIL,OAAO,KAAKO,OAAOF,GAAAA;AAC5E,MAAI,qDAAqDG,KAAKF,KAAAA,GAAQ;AACpE,WAAO,IAAIR,eACT,gHACA,KAAA;EAEJ;AACA,QAAMG,cACJE,qBAAqBM,KAAK,CAACC,MAAMJ,MAAMK,SAASD,CAAAA,CAAAA,KAChD,gCAAgCF,KAAKF,KAAAA;AACvC,SAAO,IAAIR,eACTG,cAAc,mDAAgD,mCAC9DA,WAAAA;AAEJ;AAfgBG;AAkBT,SAASQ,gBAAgBC,WAAmBC,SAAS,KAAKC,YAAYC,KAAKC,QAAM;AACtF,QAAMC,OAAOJ,SAAS,KAAKD;AAC3B,SAAOG,KAAKG,MAAMD,QAAQ,OAAOH,UAAAA,IAAc,IAAE;AACnD;AAHgBH;AAKT,IAAMQ,eAAN,MAAMA,cAAAA;EA/Fb,OA+FaA;;;;;EACX,YACmBC,QACAC,OACjB;SAFiBD,SAAAA;SACAC,QAAAA;EAChB;;;;;;EAOH,MAAMC,YACJC,UACAC,MACAC,KAC6B;AAC7B,QAAIF,SAASG,SAAS,SAAS;AAI7B,aAAOC,sBAAsBJ,UAAU;QAAEH,QAAQ,KAAKA;QAAQC,OAAO,KAAKA;QAAOI;MAAI,GAAGD,IAAAA;IAC1F;AAEA,UAAMI,UAAkBC,aAAa,KAAKR,OAAOI,GAAAA;AASjD,UAAMK,QAAQX,cAAaY,aAAaC,IAAIJ,OAAAA;AAC5C,QAAIE,UAAUG,OAAW,QAAOH;AAEhC,UAAMI,WAAW,KAAKC,iBAAiBP,SAASL,UAAUC,MAAMC,GAAAA;AAChEN,kBAAaY,aAAaK,IAAIR,SAASM,QAAAA;AACvC,QAAI;AACF,aAAO,MAAMA;IACf,UAAA;AACEf,oBAAaY,aAAaM,OAAOT,OAAAA;IACnC;EACF;;EAGA,OAAwBG,eAAe,oBAAIO,IAAAA;;;;;;;;EASnCH,iBACNP,SACAL,UACAC,MACAC,KAC6B;AAE7B,WAAOc,aAAaX,SAAS,YAAA;AAE3B,YAAMY,UAAUC,gBAAgB,KAAKpB,OAAOI,GAAAA;AAC5C,YAAMiB,QACJF,YAAYP,SACR;QAAE,GAAGV;QAAUoB,QAAQH,QAAQI;QAAQC,WAAWL,QAAQM;MAAQ,IAClEvB;AAON,YAAMwB,iBAAiB;AACvB,eAASnC,YAAY,KAAKA,aAAa;AACrC,YAAI;AACF,iBAAO,MAAMe,sBACXe,OACA;YAAEtB,QAAQ,KAAKA;YAAQC,OAAO,KAAKA;YAAOI;UAAI,GAC9CD,IAAAA;QAEJ,SAASpB,KAAK;AACZ,gBAAM4C,QAAQ7C,0BAA0BC,GAAAA;AACxC,cAAI,CAAC4C,MAAMhD,eAAeY,aAAamC,iBAAiB,EAAG,OAAMC;AACjE,gBAAM,IAAIC,QAAQ,CAACC,YAAYC,WAAWD,SAASvC,gBAAgBC,SAAAA,CAAAA,CAAAA;QACrE;MACF;IACF,CAAA;EAEF;;;;;;EAOAwC,YACEC,cACA7B,MACA8B,OACsB;AACtB,WAAOC,kBAAkBF,cAAc7B,MAAM8B,KAAAA;EAC/C;;;;;EAMAE,QAAQC,UAAkBC,QAAqBjC,KAAkD;AAC/F,WAAOkC,mBAAmBF,UAAUC,QAAQ,KAAKrC,OAAOI,GAAAA;EAC1D;AACF;;;ACvLA,SACEmC,gBAAAA,eACAC,iBACAC,gBACAC,cACAC,mBAAAA,kBACAC,uBACK;AAsBP,SACEC,aACAC,qBAAAA,oBACAC,iBACAC,yBACK;;;ACnDP,SAASC,qBAAAA,0BAAyB;AA2ElC,IAAMC,kBAAkB;AACxB,IAAMC,eAAe;AAQd,IAAMC,0BAA0B;AAEvC,IAAMC,cAAmC;EACvCC,UAAU;EACVC,UAAUC,QAAQC,IAAIL,uBAAAA,KAA4BF;EAClDQ,mBAAmB,GAAGP,YAAAA;EACtBQ,eAAe,GAAGR,YAAAA;EAClBS,QAAQ;IAAC;IAAU;IAAW;IAAS;;EACvCC,aAAa,GAAGV,YAAAA;AAClB;AAMA,IAAMW,eAAmC;EACvC,GAAGT;EACHU,wBAAwB,GAAGZ,YAAAA;EAC3Ba,oBAAoB,GAAGb,YAAAA;EACvBc,iBAAiB,GAAGd,YAAAA;AACtB;AASO,IAAMe,iBAAqCC,OAAOC,OAAO;EAC9DC,MAAM;EACNC,OAAOH,OAAOC,OAAOf,WAAAA;EACrBkB,SAASJ,OAAOC,OAAO;IACrBD,OAAOC,OAAO;MACZI,OAAO;MACPC,MAAM;;;MAGNC,WAAW,wBAACC,MAAkBC,UAC5BC,mBAAkBf,cAAca,MAAMC,KAAAA,GAD7B;IAEb,CAAA;IACAT,OAAOC,OAAO;MACZI,OAAO;MACPC,MAAM;IACR,CAAA;GACD;AACH,CAAA;AAeA,SAASK,YAAYH,MAA0B;AAC7C,SAAO;IACLI,OAAOJ,MAAMI,SAASA;IACtBC,OAAOL,MAAMK,UAAU,CAACC,OAAe,IAAIC,QAAc,CAACC,YAAYC,WAAWD,SAASF,EAAAA,CAAAA;IAC1FI,KAAKV,MAAMU,OAAOC,KAAKD;EACzB;AACF;AANSP;AAqBT,eAAsBS,gBACpBjC,UACAkC,QACAC,OACAb,OACAc,OAA+B,CAAC,GAAC;AAKjC,MAAIpC,SAASiB,QAAQoB,WAAW,GAAG;AACjC,UAAM,IAAIC,UACR,eAAetC,SAASe,IAAI,qFAAiE;EAEjG;AACA,MAAI,CAACf,SAASiB,QAAQsB,SAASL,MAAAA,GAAS;AACtC,UAAM,IAAII,UAAU,gBAAaJ,OAAOhB,KAAK,kCAA+BlB,SAASe,IAAI,GAAG;EAC9F;AACA,MAAImB,OAAOf,SAAS,SAAS;AAC3B,UAAM,IAAImB,UACR,gBAAaJ,OAAOhB,KAAK,6FAA4E;EAEzG;AAEA,QAAMsB,SAAS,MAAMN,OAAOd,UAAUI,YAAYY,KAAKf,IAAI,GAAGC,KAAAA;AAC9D,QAAMmB,OAAO,IAAIC,aAAa1C,SAASgB,OAAOmB,KAAAA,EAAOQ,QAAQ3C,SAASe,MAAMyB,QAAQJ,KAAKjC,GAAG;AAE5F,SAAOqC,OAAOI,cAAcC,SAAY;IAAEJ;EAAK,IAAI;IAAEA;IAAMG,WAAWJ,OAAOI;EAAU;AACzF;AA5BsBX;","names":["authFilePath","ensureFreshCredential","openaiDeviceLogin","persistOAuthTokens","readStoredOAuth","withFileLock","RefreshFailure","Error","message","transitorio","name","MOTIVOS_TRANSITORIOS","classificarFalhaDeRefresh","err","texto","String","test","some","m","includes","esperaComJitter","tentativa","baseMs","aleatorio","Math","random","base","round","AuthProvider","config","store","ensureFresh","resolved","deps","env","kind","ensureFreshCredential","caminho","authFilePath","emVoo","refreshEmVoo","get","undefined","promessa","refrescarSobLock","set","delete","Map","withFileLock","doDisco","readStoredOAuth","atual","apiKey","access","expiresAt","expires","MAX_TENTATIVAS","falha","Promise","resolve","setTimeout","deviceLogin","deviceConfig","hooks","openaiDeviceLogin","persist","provider","tokens","persistOAuthTokens","authFilePath","CredentialError","credentialHome","readAuthFile","readStoredOAuth","writeCredential","deviceLogin","openaiDeviceLogin","pollDeviceToken","requestDeviceCode","openaiDeviceLogin","CODEX_CLIENT_ID","CODEX_ISSUER","CODEX_CLIENT_ID_ENV_VAR","CODEX_OAUTH","provider","clientId","process","env","authorizeEndpoint","tokenEndpoint","scopes","redirectUri","CODEX_DEVICE","deviceUsercodeEndpoint","devicePollEndpoint","verificationUri","CODEX_PROVIDER","Object","freeze","name","oauth","methods","label","type","authorize","deps","hooks","openaiDeviceLogin","comDefaults","fetch","sleep","ms","Promise","resolve","setTimeout","now","Date","loginWithDevice","method","store","opts","length","TypeError","includes","tokens","path","AuthProvider","persist","accountId","undefined"]}

package/dist/{bridge-entry-C_jckCIk.d.ts → bridge-entry-F9XyPi0K.d.ts}

@@ -1,5 +1,5 @@
 import { ExecutionContext } from '@theokit/http';
-import { McpServerConfig, SystemPromptResolver, InlineSkill, SettingSource, MemorySettings, SkillsSettings, ContextSettings, PreToolCallContext, PreToolCallDecision, PostToolCallContext, ToolResultTransformContext, TransformContext, SessionLifecycleContext, PreUserSendContext, PreUserSendResult, PostAssistantReplyContext, CustomTool, ModelSelection, PluginsSettings, Plugin, ProviderRoutingSettings, AgentDefinition as AgentDefinition$1, BudgetTracker } from '@theokit/sdk';
+import { McpServerConfig, SystemPromptResolver, InlineSkill, SettingSource, MemorySettings, SkillsSettings, ContextSettings, PreToolCallContext, PreToolCallDecision, PostToolCallContext, ToolResultTransformContext, TransformContext, SessionLifecycleContext, PreUserSendContext, PreUserSendResult, PostAssistantReplyContext, CustomTool, ModelSelection, PluginsSettings, Plugin, ProviderRoutingSettings, AgentDefinition as AgentDefinition$1, BudgetTracker, RunEventSink } from '@theokit/sdk';
 import { z } from 'zod';
 import { UIMessageChunk } from 'ai';
 import { RetryOptions } from '@theokit/sdk/retry';
@@ -582,6 +582,40 @@ interface ApprovalRequiredEvent {
     /** M20 — JSON-schema descriptor of the custom payload the approver may attach (optional). */
     payloadSchema?: Record<string, unknown>;
 }
+/**
+ * The run is blocked awaiting user input or approval — theokit#141.
+ *
+ * The SDK's low-fidelity pause signal (`SDKRequestMessage`), distinct from {@link
+ * ApprovalRequiredEvent}. The latter is the framework's own, produced by `createHitlPlugin`, and
+ * carries everything an approval UI needs to be actionable. This one carries only the request id,
+ * because that is all the SDK provides — and it matters most exactly where the plugin is absent
+ * (the ACP/serving path of theokit#139), which is where a dropped pause reads to the user as a
+ * hang with no explanation.
+ *
+ * A consumer that cannot resolve the request should still SHOW that the run is waiting. Silence is
+ * the one response that is always wrong.
+ */
+interface InputRequestedEvent {
+    type: 'input_requested';
+    requestId: string;
+}
+/** Task-level milestone or summary — theokit#141. Both fields are optional at the source. */
+interface TaskProgressEvent {
+    type: 'task_progress';
+    status?: string;
+    text?: string;
+}
+/**
+ * Live output from a shell command the SDK is running — theokit#141.
+ *
+ * `event` is passed through opaquely because the SDK types it as `Record<string, unknown>`. The
+ * layer deliberately does not interpret or render it: guessing a shape here would be a second,
+ * weaker oracle over a payload whose real contract lives upstream.
+ */
+interface ShellOutputEvent {
+    type: 'shell_output';
+    event: Record<string, unknown>;
+}
 /** Agent encountered an error. */
 interface ErrorEvent {
     type: 'error';
@@ -667,7 +701,7 @@ interface FileEditEvent {
     endLine?: number;
 }
 /** Discriminated union of all agent stream events. */
-type AgentStreamEvent = RunStartedEvent | TextDeltaEvent | ToolCallEvent | PartialToolCallEvent | ToolResultEvent | ThinkingEvent | IterationEvent | ApprovalRequiredEvent | ArtifactStartEvent | ArtifactChunkEvent | StateUpdateEvent | CheckpointSavedEvent | FileEditEvent | ErrorEvent | DoneEvent;
+type AgentStreamEvent = RunStartedEvent | TextDeltaEvent | ToolCallEvent | PartialToolCallEvent | ToolResultEvent | ThinkingEvent | IterationEvent | ApprovalRequiredEvent | InputRequestedEvent | TaskProgressEvent | ShellOutputEvent | ArtifactStartEvent | ArtifactChunkEvent | StateUpdateEvent | CheckpointSavedEvent | FileEditEvent | ErrorEvent | DoneEvent;
 /** Type guard helpers. */
 declare function isTextDelta(e: AgentStreamEvent): e is TextDeltaEvent;
 declare function isToolCall(e: AgentStreamEvent): e is ToolCallEvent;
@@ -1064,6 +1098,18 @@ interface RuntimeOverrides {
      * come from imperative SDK factories supply them without the `@Tool` compile path.
      */
     sdkTools?: readonly CustomTool[];
+    /**
+     * theokit#132 — sink for the SDK's typed `RunEvent`s (`tool_progress`, `rate_limit`,
+     * `permission_denied`, `task_*`, `compact_boundary`, `tripwire`, `completion_check`), threaded
+     * straight to `SendOptions.onRunEvent`.
+     *
+     * Threaded, NOT multiplexed into the UIMessage stream. These are run diagnostics for an observer —
+     * theokit-studio's event inspector is the demand that opened the issue — and folding them into the
+     * message protocol would force every consumer of the chat stream to know about frames it has no
+     * use for. Threading leaves the chat path byte-identical for anyone who does not opt in, which is
+     * why the key is omitted entirely rather than set to `undefined` when absent.
+     */
+    onRunEvent?: RunEventSink;
 }
 declare function createSdkAgentStream(compiled: CompiledAgentOptions, compiledTools: CompiledTool[], apiKey: string | (() => string | Promise<string>), overrides?: RuntimeOverrides): ((message: string, sessionId: string, factoryOpts?: {
     disableTools?: boolean;
@@ -1476,6 +1522,19 @@ interface StreamAgentOptions {
      * follow-up. The non-HITL path is pull-based and already tears down on the consumer's return.
      */
     signal?: AbortSignal;
+    /**
+     * theokit#132 — observe the SDK's typed `RunEvent`s for this run (`tool_progress`, `rate_limit`,
+     * `permission_denied`, `task_*`, `compact_boundary`, `tripwire`, `completion_check`).
+     *
+     * The seam theokit-studio's M1 event inspector needs: without it the run endpoint can only stream
+     * `{kind:"message"}`, and the inspector degrades to showing nothing about the run itself.
+     *
+     * Deliberately a SINK rather than extra chunks on the returned generator. The generator's contract
+     * is the UIMessage protocol a chat consumer renders; run diagnostics are a different audience, and
+     * multiplexing them would make every chat consumer step over frames it has no use for. Absent ⇒
+     * the stream is byte-identical to before.
+     */
+    onRunEvent?: RuntimeOverrides['onRunEvent'];
 }
 /**
  * Run a compiled agent and yield the M0/M1 `UIMessageStream` chunks. `apiKey` is resolved by the
@@ -2082,9 +2141,19 @@ type McpApprovalSpec = HumanInTheLoopOptions | string;
  */
 declare function mcpToolApprovals(specs: Record<string, McpApprovalSpec>): Record<string, HumanInTheLoopOptions>;
 
-/** Canal por onde uma entrada omitida é NOMEADA. Sem ele, estreitar o raio viraria fail-open. */
+/**
+ * The channel by which a skipped entry is NAMED. Without it, narrowing the blast radius would turn
+ * into fail-open.
+ *
+ * **`onWarn` is optional; the WARNING is not.** Omitted, warnings go to `stderr` — never nowhere.
+ * The M112 review measured why that matters: the only production caller (the agent-builder's
+ * `agents/chat.ts:530`) did NOT pass `onWarn`, and the whole defence against `error-handling.md § 2`
+ * — repeated across four artifacts — rested on the phrase *"the error stays visible on the channel"*.
+ * With no subscriber it did not: the entry was dropped in total silence, and the user saw "the tool
+ * disappeared" and nothing else.
+ */
 interface LoadMcpJsonOptions {
-    onWarn?: (aviso: string) => void;
+    onWarn?: (warning: string) => void;
 }
 /**
  * Raised when `<cwd>/.mcp.json` exists but cannot be read, is not valid JSON, or does not match the

package/dist/bridge.d.ts

@@ -1,4 +1,4 @@
-export { i as AGENT_BRAND, j as AfterToolCallContext, k as AgentBuilder, l as AgentDefinition, m as AgentDefinitionError, n as AgentExecutionContext, o as AgentManifest, f as AgentManifestEntry, p as AgentManifestSource, q as AgentManifestTool, t as AgentRoute, u as AgentRouteContext, v as AgentRunInfo, w as AgentStreamEvent, x as AgentTurnMetadata, y as AgentsPluginOptions, z as ApiErrorContext, B as ApiErrorDecision, E as ApiErrorPolicy, h as ApprovalPosture, F as ApprovalRequiredEvent, I as ArtifactChunkEvent, J as ArtifactStartEvent, K as BackgroundDelegation, N as BeforeToolCallContext, O as BudgetExceededError, Q as CheckpointSavedEvent, C as CompiledAgentOptions, U as CompiledContextWindow, a as CompiledTool, V as ContextualTool, Y as DefineAgentConfig, Z as DefinicaoOuThunk, _ as DelegateFn, $ as DelegateOptions, a0 as DelegationBudgetExceededError, a1 as DelegationError, D as DelegationResult, a2 as DoneEvent, a3 as ErrorEvent, a4 as FileEditEvent, aa as InferAgentInput, ab as InferAgentToolNames, ac as IterationEvent, ad as LLMCallContext, ai as McpApprovalSpec, aj as McpFileError, ak as McpRegistryConfig, al as McpRequestContext, am as McpSelection, ao as PartialToolCallEvent, aq as ProcessInputContext, au as RunStartedEvent, av as ScoreVerdict, aw as ScoredDelegation, ax as Scorer, ay as SdkAgentHandle, az as SdkMessage, aA as SdkSendOptions, aB as SdkTurnHandle, aC as Segment, aF as StateUpdateEvent, S as StreamEvent, aG as TextDeltaEvent, aH as ThinkingEvent, aJ as ToolCallEvent, aK as ToolCallVeto, aL as ToolHooks, aM as ToolHooksPlugin, aN as ToolResultEvent, aO as ToolWalkResult, aQ as ToolboxWalkResult, aR as agentsPlugin, aS as buildModelSelection, aT as compileAgentDefinition, aU as compileAgentModule, aV as compileContextWindow, aW as compileProjectContext, aX as compileSkills, aY as compileTools, aZ as createAgentExecutionContext, a_ as createApiErrorHandler, a$ as createSdkAgentStream, b0 as createThinkTagExtractor, b1 as createToolHooksPlugin, b2 as delegate, b3 as delegateBackground, b4 as delegateWithScoring, b5 as extractThinkTagStream, b6 as generateAgentManifest, b7 as generateAgentRoutes, b8 as isAgentContext, b9 as isAgentDefinition, ba as isApprovalRequired, bb as isDone, bc as isError, bd as isPartialToolCall, be as isTextDelta, bf as isToolCall, bg as isToolResult, bi as loadMcpJson, bk as mcpRegistry, bl as mcpToolApprovals, bn as presentUIMessageStream, bo as projectContextMetadataOnlyKnobs, bp as reasoningEffortOf, bt as resolveMcpServers, bu as runWithApiErrorHandling, bv as streamAgentResponse, s as streamAgentUIMessages, bw as toAgentFactory, bx as translateSdkEvent } from './bridge-entry-C_jckCIk.js';
+export { i as AGENT_BRAND, j as AfterToolCallContext, k as AgentBuilder, l as AgentDefinition, m as AgentDefinitionError, n as AgentExecutionContext, o as AgentManifest, f as AgentManifestEntry, p as AgentManifestSource, q as AgentManifestTool, t as AgentRoute, u as AgentRouteContext, v as AgentRunInfo, w as AgentStreamEvent, x as AgentTurnMetadata, y as AgentsPluginOptions, z as ApiErrorContext, B as ApiErrorDecision, E as ApiErrorPolicy, h as ApprovalPosture, F as ApprovalRequiredEvent, I as ArtifactChunkEvent, J as ArtifactStartEvent, K as BackgroundDelegation, N as BeforeToolCallContext, O as BudgetExceededError, Q as CheckpointSavedEvent, C as CompiledAgentOptions, U as CompiledContextWindow, a as CompiledTool, V as ContextualTool, Y as DefineAgentConfig, Z as DefinicaoOuThunk, _ as DelegateFn, $ as DelegateOptions, a0 as DelegationBudgetExceededError, a1 as DelegationError, D as DelegationResult, a2 as DoneEvent, a3 as ErrorEvent, a4 as FileEditEvent, aa as InferAgentInput, ab as InferAgentToolNames, ac as IterationEvent, ad as LLMCallContext, ai as McpApprovalSpec, aj as McpFileError, ak as McpRegistryConfig, al as McpRequestContext, am as McpSelection, ao as PartialToolCallEvent, aq as ProcessInputContext, au as RunStartedEvent, av as ScoreVerdict, aw as ScoredDelegation, ax as Scorer, ay as SdkAgentHandle, az as SdkMessage, aA as SdkSendOptions, aB as SdkTurnHandle, aC as Segment, aF as StateUpdateEvent, S as StreamEvent, aG as TextDeltaEvent, aH as ThinkingEvent, aJ as ToolCallEvent, aK as ToolCallVeto, aL as ToolHooks, aM as ToolHooksPlugin, aN as ToolResultEvent, aO as ToolWalkResult, aQ as ToolboxWalkResult, aR as agentsPlugin, aS as buildModelSelection, aT as compileAgentDefinition, aU as compileAgentModule, aV as compileContextWindow, aW as compileProjectContext, aX as compileSkills, aY as compileTools, aZ as createAgentExecutionContext, a_ as createApiErrorHandler, a$ as createSdkAgentStream, b0 as createThinkTagExtractor, b1 as createToolHooksPlugin, b2 as delegate, b3 as delegateBackground, b4 as delegateWithScoring, b5 as extractThinkTagStream, b6 as generateAgentManifest, b7 as generateAgentRoutes, b8 as isAgentContext, b9 as isAgentDefinition, ba as isApprovalRequired, bb as isDone, bc as isError, bd as isPartialToolCall, be as isTextDelta, bf as isToolCall, bg as isToolResult, bi as loadMcpJson, bk as mcpRegistry, bl as mcpToolApprovals, bn as presentUIMessageStream, bo as projectContextMetadataOnlyKnobs, bp as reasoningEffortOf, bt as resolveMcpServers, bu as runWithApiErrorHandling, bv as streamAgentResponse, s as streamAgentUIMessages, bw as toAgentFactory, bx as translateSdkEvent } from './bridge-entry-F9XyPi0K.js';
 import '@theokit/http';
 import '@theokit/sdk';
 import 'zod';

package/dist/bridge.js

@@ -47,8 +47,8 @@ import {
   streamAgentUIMessages,
   toAgentFactory,
   translateSdkEvent
-} from "./chunk-C5RUE4DB.js";
-import "./chunk-7QVYU63E.js";
+} from "./chunk-3YPKTOJ6.js";
+import "./chunk-Z4QWC7IK.js";
 export {
   AGENT_BRAND,
   AgentBuilder,

package/dist/bridge.js.map

@@ -1 +1 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}
+{"version":3,"sources":[],"mappings":"","names":[]}