@thesashadev/girl-agent 0.1.13 → 0.1.14

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 0.1.14
+
+Дата: 2026-05-08
+
+- Merge pull request #59 from TheSashaDev/devin/1778231542-oauth-fixed-port
+- fix: update OAuth client credentials and add client_secret to token requests
+- fix: use fixed port 3000 for OAuth callback
+
 ## 0.1.13
 
 Дата: 2026-05-08

package/dist/cli.js

@@ -1070,14 +1070,16 @@ var GIRLAI_BASE = "https://api.girl-agent.com";
 var AUTHORIZE_URL = `${GIRLAI_BASE}/oauth/authorize`;
 var TOKEN_URL = `${GIRLAI_BASE}/oauth/token`;
 var REVOKE_URL = `${GIRLAI_BASE}/oauth/revoke`;
-var CLIENT_ID = "girl-agent-cli";
+var CLIENT_ID = "oac_dcce490e74a452a9ed20";
+var CLIENT_SECRET = "abnfSGmeisM7SFdMn_c1MwFYAHaqzgs7";
+var CALLBACK_PORT = 3e3;
+var REDIRECT_URI = `http://localhost:${CALLBACK_PORT}/callback`;
 async function runOAuthFlow(log) {
   const state = crypto.randomBytes(16).toString("hex");
-  const { port, waitForCode, close } = await startCallbackServer(state);
-  const redirectUri = `http://localhost:${port}/callback`;
+  const { waitForCode, close } = await startCallbackServer(state);
   const authorizeParams = new URLSearchParams({
     client_id: CLIENT_ID,
-    redirect_uri: redirectUri,
+    redirect_uri: REDIRECT_URI,
     response_type: "code",
     state
   });
@@ -1091,13 +1093,14 @@ async function runOAuthFlow(log) {
     close();
   }
   log("\u043A\u043E\u0434 \u043F\u043E\u043B\u0443\u0447\u0435\u043D, \u043E\u0431\u043C\u0435\u043D\u0438\u0432\u0430\u044E \u043D\u0430 \u0442\u043E\u043A\u0435\u043D...");
-  return exchangeCode(code, redirectUri);
+  return exchangeCode(code, REDIRECT_URI);
 }
-async function exchangeCode(code, redirectUri) {
+async function exchangeCode(code, redirectUri = REDIRECT_URI) {
   const body = new URLSearchParams({
     grant_type: "authorization_code",
     code,
     client_id: CLIENT_ID,
+    client_secret: CLIENT_SECRET,
     redirect_uri: redirectUri
   });
   const res = await fetch(TOKEN_URL, {
@@ -1120,7 +1123,8 @@ async function refreshAccessToken(refreshToken) {
   const body = new URLSearchParams({
     grant_type: "refresh_token",
     refresh_token: refreshToken,
-    client_id: CLIENT_ID
+    client_id: CLIENT_ID,
+    client_secret: CLIENT_SECRET
   });
   const res = await fetch(TOKEN_URL, {
     method: "POST",
@@ -1180,11 +1184,8 @@ function startCallbackServer(expectedState) {
       clearTimeout(timeout);
       resolveCode(code);
     });
-    server.listen(0, "127.0.0.1", () => {
-      const addr = server.address();
-      const port = typeof addr === "object" && addr ? addr.port : 0;
+    server.listen(CALLBACK_PORT, "127.0.0.1", () => {
       resolveSetup({
-        port,
         waitForCode,
         close: () => server.close()
       });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thesashadev/girl-agent",
-  "version": "0.1.13",
+  "version": "0.1.14",
   "description": "Telegram AI persona engine with memory, schedule, relationship state and MTProto userbot mode.",
   "type": "module",
   "bin": {