@tokenfactory/acc-runner 0.45.0 → 0.46.0

package/dist/user-auth/device-login.d.ts

@@ -2,6 +2,19 @@ import { type GoTrueDeps, type StoredUserSession } from "./session.js";
 export declare const DEVICE_CODE_PATH = "/api/auth/device-code";
 /** Consecutive transient exchange failures tolerated before giving up. */
 export declare const MAX_POLL_FAILURES = 5;
+/**
+ * DEC-046 — how many REPLACEMENT device codes one sign-in will mint after the
+ * code on screen expires.
+ *
+ * Deliberately a separate constant from the identically-named one in
+ * `../login.ts`, not a shared import: the two device lanes are independent by
+ * design (this file's header: "`acc-runner login` is untouched by it"), and
+ * importing the runner lane here would drag execa, the keychain and the Supabase
+ * client into the person-auth path. Same policy number, stated twice on purpose —
+ * if it ever needs to be one source of truth, that is a new neutral module, not
+ * a cross-lane import.
+ */
+export declare const MAX_DEVICE_REMINTS = 3;
 export interface DeviceLoginDeps extends GoTrueDeps {
     sleep?: (ms: number) => Promise<unknown>;
     openBrowser?: (url: string) => Promise<unknown>;

package/dist/user-auth/device-login.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"device-login.d.ts","sourceRoot":"","sources":["../../src/user-auth/device-login.ts"],"names":[],"mappings":"AAqBA,OAAO,EAML,KAAK,UAAU,EACf,KAAK,iBAAiB,EACvB,MAAM,cAAc,CAAC;AAGtB,eAAO,MAAM,gBAAgB,0BAA0B,CAAC;AAuBxD,0EAA0E;AAC1E,eAAO,MAAM,iBAAiB,IAAI,CAAC;AAEnC,MAAM,WAAW,eAAgB,SAAQ,UAAU;IACjD,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,uDAAuD;IACvD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAwBD;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAAC,IAAI,GAAE,eAAoB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAiExF;AAED,wBAAsB,gBAAgB,CAAC,IAAI,GAAE,eAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAahF;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,GAAE,eAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBjF;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,WAAW,gCAAgC,CAAC;AAEzD,wBAAsB,iBAAiB,CAAC,IAAI,GAAE,eAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CA4BjF"}
+{"version":3,"file":"device-login.d.ts","sourceRoot":"","sources":["../../src/user-auth/device-login.ts"],"names":[],"mappings":"AAqBA,OAAO,EAML,KAAK,UAAU,EACf,KAAK,iBAAiB,EACvB,MAAM,cAAc,CAAC;AAGtB,eAAO,MAAM,gBAAgB,0BAA0B,CAAC;AAuBxD,0EAA0E;AAC1E,eAAO,MAAM,iBAAiB,IAAI,CAAC;AAEnC;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAgEpC,MAAM,WAAW,eAAgB,SAAQ,UAAU;IACjD,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,uDAAuD;IACvD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAwBD;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAAC,IAAI,GAAE,eAAoB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAkFxF;AAED,wBAAsB,gBAAgB,CAAC,IAAI,GAAE,eAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAahF;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,GAAE,eAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBjF;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,WAAW,gCAAgC,CAAC;AAEzD,wBAAsB,iBAAiB,CAAC,IAAI,GAAE,eAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CA4BjF"}

package/dist/user-auth/device-login.js

@@ -24,6 +24,64 @@ import { probeUserSession, revokedMessage } from "./liveness.js";
 export const DEVICE_CODE_PATH = "/api/auth/device-code";
 /** Consecutive transient exchange failures tolerated before giving up. */
 export const MAX_POLL_FAILURES = 5;
+/**
+ * DEC-046 — how many REPLACEMENT device codes one sign-in will mint after the
+ * code on screen expires.
+ *
+ * Deliberately a separate constant from the identically-named one in
+ * `../login.ts`, not a shared import: the two device lanes are independent by
+ * design (this file's header: "`acc-runner login` is untouched by it"), and
+ * importing the runner lane here would drag execa, the keychain and the Supabase
+ * client into the person-auth path. Same policy number, stated twice on purpose —
+ * if it ever needs to be one source of truth, that is a new neutral module, not
+ * a cross-lane import.
+ */
+export const MAX_DEVICE_REMINTS = 3;
+/**
+ * The exit after the last replacement expires. Built at throw time, not as a
+ * module constant, because `signInCommand()` is process-scoped state: the same
+ * sentence has to read `acc login` under the unified bin and
+ * `acc-runner auth login` under the alias, and a constant evaluated at import
+ * time would freeze whichever name happened to be set first.
+ */
+function remintsExhaustedMessage() {
+    return (`Device code expired ${MAX_DEVICE_REMINTS + 1} times without a sign-in ` +
+        `(${MAX_DEVICE_REMINTS} replacement codes were printed above, and none was entered). ` +
+        `Nothing was signed in. Run \`${signInCommand()}\` when you are ready to enter the code.`);
+}
+/**
+ * The "here is your code" block, extracted so a replacement reaches the screen
+ * byte-identically to the first one. DEC-046's drift list names re-minting
+ * WITHOUT printing the new code, which would leave the person typing a code the
+ * server has already forgotten.
+ */
+function printDeviceCode(say, start) {
+    say("");
+    say(chalk.bold("To sign in to ACC from this terminal:"));
+    say("");
+    say(`  ${chalk.cyan("1.")} Visit  ${chalk.underline(start.verification_url)}`);
+    say(`  ${chalk.cyan("2.")} Enter code:  ${chalk.bold.green(start.user_code)}`);
+    say("");
+    say(chalk.gray("Waiting for confirmation…"));
+}
+/** The replacement, with the one line explaining why a second code appeared. */
+function printRemintedDeviceCode(say, start, attempt) {
+    say("");
+    say(chalk.yellow(`That code expired — codes last 10 minutes. Here is a new one (${attempt} of ${MAX_DEVICE_REMINTS}):`));
+    printDeviceCode(say, start);
+}
+/**
+ * Ask for a code and refuse anything that is not one. Shared by the first mint
+ * and every re-mint: a re-mint whose create call failed must abort rather than
+ * quietly keep polling the code that just expired.
+ */
+async function createDeviceCode(doFetch, endpoint) {
+    const created = await post(doFetch, endpoint, { action: "create" });
+    if (created.status !== 200 || !created.json.device_code) {
+        throw new Error(`Could not start device login (HTTP ${created.status}).`);
+    }
+    return created.json;
+}
 async function post(doFetch, url, body) {
     const res = await doFetch(url, {
         method: "POST",
@@ -58,56 +116,71 @@ export async function deviceLogin(deps = {}) {
     const nap = deps.sleep ?? ((ms) => sleep(ms));
     const say = deps.log ?? ((line) => console.log(line));
     const endpoint = `${cfg.publicUrl.replace(/\/+$/, "")}${DEVICE_CODE_PATH}`;
-    const created = await post(doFetch, endpoint, { action: "create" });
-    if (created.status !== 200 || !created.json.device_code) {
-        throw new Error(`Could not start device login (HTTP ${created.status}).`);
-    }
-    const start = created.json;
-    say("");
-    say(chalk.bold("To sign in to ACC from this terminal:"));
-    say("");
-    say(`  ${chalk.cyan("1.")} Visit  ${chalk.underline(start.verification_url)}`);
-    say(`  ${chalk.cyan("2.")} Enter code:  ${chalk.bold.green(start.user_code)}`);
-    say("");
-    say(chalk.gray("Waiting for confirmation…"));
+    // `let`, because an expiry re-mints into it (DEC-046).
+    let start = await createDeviceCode(doFetch, endpoint);
+    printDeviceCode(say, start);
+    // FIRST code only. A replacement deliberately does not re-open the browser:
+    // the person is already on the page (that is why they are waiting), and
+    // DEC-046 has the page clear and focus its field for the new code. Opening up
+    // to three more tabs on their machine is not a convenience — the runner lane
+    // makes the same call, for the same reason.
     const openBrowser = deps.openBrowser ?? ((url) => open(url));
     void Promise.resolve(openBrowser(start.verification_url)).catch(() => {
         /* headless box; the printed URL is the fallback */
     });
-    const interval = (deps.intervalSeconds ?? start.interval) * 1000;
     const now = () => deps.now?.() ?? Date.now();
-    const deadline = now() + (deps.timeoutSeconds ?? start.expires_in) * 1000;
-    let failures = 0;
-    let lastFailure = null;
-    while (now() < deadline) {
-        await nap(interval);
-        const { status, json } = await post(doFetch, endpoint, {
-            action: "exchange",
-            device_code: start.device_code,
-        });
-        if (status !== 200 || json.status === "retry") {
-            failures += 1;
-            lastFailure = json.status === "retry" ? (json.error ?? "retry") : `HTTP ${status}`;
-            if (failures >= MAX_POLL_FAILURES) {
-                throw new Error(`Device-code exchange failed ${failures} times in a row: ${lastFailure}`);
+    let remints = 0;
+    for (;;) {
+        const interval = (deps.intervalSeconds ?? start.interval) * 1000;
+        // Re-derived per code: a replacement carries its OWN TTL, so reusing the
+        // first code's deadline would retire a brand-new code the moment it printed.
+        const deadline = now() + (deps.timeoutSeconds ?? start.expires_in) * 1000;
+        let failures = 0;
+        let lastFailure = null;
+        // Set only by the server saying the code is spent.
+        let expired = false;
+        while (now() < deadline) {
+            await nap(interval);
+            const { status, json } = await post(doFetch, endpoint, {
+                action: "exchange",
+                device_code: start.device_code,
+            });
+            if (status !== 200 || json.status === "retry") {
+                failures += 1;
+                lastFailure = json.status === "retry" ? (json.error ?? "retry") : `HTTP ${status}`;
+                if (failures >= MAX_POLL_FAILURES) {
+                    throw new Error(`Device-code exchange failed ${failures} times in a row: ${lastFailure}`);
+                }
+                continue;
+            }
+            failures = 0;
+            if (json.status === "expired") {
+                expired = true;
+                break;
+            }
+            if (json.status === "ok") {
+                if (!json.email) {
+                    throw new Error("This account has no email address, so a CLI session cannot be issued.");
+                }
+                // The grant is spent from HERE, not on the server: GoTrue records this
+                // machine's agent and address on the session row, which is what makes the
+                // session recognisable (and therefore revocable) on Settings → Sessions.
+                return verifyEmailOtp({ supabaseUrl: json.supabase_url, anonKey: json.anon_key }, { email: json.email, token: json.token }, deps);
             }
-            continue;
         }
-        failures = 0;
-        if (json.status === "expired") {
-            throw new Error("Device code expired before sign-in completed. Run the command again.");
+        // Only a SERVER-reported expiry re-mints. Running the local deadline out
+        // without ever being TOLD the code was spent is a different fact — a silent
+        // or unreachable exchange lane — and it keeps its own sentence.
+        if (!expired) {
+            throw new Error("Device code timed out before sign-in completed.");
         }
-        if (json.status === "ok") {
-            if (!json.email) {
-                throw new Error("This account has no email address, so a CLI session cannot be issued.");
-            }
-            // The grant is spent from HERE, not on the server: GoTrue records this
-            // machine's agent and address on the session row, which is what makes the
-            // session recognisable (and therefore revocable) on Settings → Sessions.
-            return verifyEmailOtp({ supabaseUrl: json.supabase_url, anonKey: json.anon_key }, { email: json.email, token: json.token }, deps);
+        if (remints >= MAX_DEVICE_REMINTS) {
+            throw new Error(remintsExhaustedMessage());
         }
+        remints += 1;
+        start = await createDeviceCode(doFetch, endpoint);
+        printRemintedDeviceCode(say, start, remints);
     }
-    throw new Error("Device code timed out before sign-in completed.");
 }
 export async function authLoginCommand(deps = {}) {
     const session = await deviceLogin(deps);

package/dist/user-auth/device-login.js.map

@@ -1 +1 @@
-{"version":3,"file":"device-login.js","sourceRoot":"","sources":["../../src/user-auth/device-login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,eAAe,EACf,eAAe,EACf,cAAc,GAGf,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEjE,MAAM,CAAC,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AAuBxD,0EAA0E;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAWnC,KAAK,UAAU,IAAI,CACjB,OAAqB,EACrB,GAAW,EACX,IAAa;IAEb,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;QAC7B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,YAAY,EAAE,cAAc,gBAAgB,EAAE;SAC/C;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC;KACjC,CAAC,CAAC;IACH,IAAI,IAAI,GAAG,EAAO,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;AACtC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAwB,EAAE;IAC1D,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,gBAAgB,EAAE,CAAC;IAE3E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAiB,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpF,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,sCAAsC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC;IAE3B,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC,CAAC;IACzD,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC/E,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC/E,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAC;IAE7C,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrE,KAAK,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QACnE,mDAAmD;IACrD,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;IACjE,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;IAC1E,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,WAAW,GAAkB,IAAI,CAAC;IAEtC,OAAO,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QACxB,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAmB,OAAO,EAAE,QAAQ,EAAE;YACvE,MAAM,EAAE,UAAU;YAClB,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9C,QAAQ,IAAI,CAAC,CAAC;YACd,WAAW,GAAG,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,MAAM,EAAE,CAAC;YACnF,IAAI,QAAQ,IAAI,iBAAiB,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,oBAAoB,WAAW,EAAE,CAAC,CAAC;YAC5F,CAAC;YACD,SAAS;QACX,CAAC;QACD,QAAQ,GAAG,CAAC,CAAC;QACb,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;YAC3F,CAAC;YACD,uEAAuE;YACvE,0EAA0E;YAC1E,yEAAyE;YACzE,OAAO,cAAc,CACnB,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,EAC1D,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EACxC,IAAI,CACL,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAwB,EAAE;IAC/D,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACvE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC,CAAC;IACxE,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mDAAmD,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;IACvF,GAAG,CACD,KAAK,CAAC,IAAI,CACR,6BAA6B,OAAO,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,wBAAwB,KAAK,CAChG,CACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAwB,EAAE;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,MAAM,eAAe,EAAE,CAAC;IACxC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,wBAAwB,aAAa,EAAE,KAAK,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IACD,GAAG,CAAC,gBAAgB,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACxD,GAAG,CAAC,wBAAwB,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAEzD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,gBAAgB,EAAE,CAAC;QACzB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IACD,GAAG,CACD,OAAO,CAAC,QAAQ;QACd,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,0CAA0C,CAAC;QACzD,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,CACnF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,6BAA6B,CAAC;AAEzD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAwB,EAAE;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,MAAM,eAAe,EAAE,CAAC;IACxC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACtB,OAAO;IACT,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;QACpC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,WAAW,EAAE,EAAE;YACrF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,OAAO,CAAC,QAAQ;gBACxB,aAAa,EAAE,UAAU,OAAO,CAAC,YAAY,EAAE;gBAC/C,YAAY,EAAE,IAAI,CAAC,SAAS,IAAI,YAAY,EAAE;aAC/C;SACF,CAAC,CAAC;QACH,OAAO,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;IACD,MAAM,gBAAgB,EAAE,CAAC;IACzB,GAAG,CACD,OAAO;QACL,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,6CAA6C,CAAC;QAC5D,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,mGAAmG,CAAC,CACtH,CAAC;AACJ,CAAC"}
+{"version":3,"file":"device-login.js","sourceRoot":"","sources":["../../src/user-auth/device-login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,eAAe,EACf,eAAe,EACf,cAAc,GAGf,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEjE,MAAM,CAAC,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AAuBxD,0EAA0E;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAEnC;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAEpC;;;;;;GAMG;AACH,SAAS,uBAAuB;IAC9B,OAAO,CACL,uBAAuB,kBAAkB,GAAG,CAAC,2BAA2B;QACxE,IAAI,kBAAkB,gEAAgE;QACtF,gCAAgC,aAAa,EAAE,0CAA0C,CAC1F,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,GAA2B,EAAE,KAAqB;IACzE,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC,CAAC;IACzD,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC/E,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC/E,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,gFAAgF;AAChF,SAAS,uBAAuB,CAC9B,GAA2B,EAC3B,KAAqB,EACrB,OAAe;IAEf,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CACD,KAAK,CAAC,MAAM,CACV,iEAAiE,OAAO,OAAO,kBAAkB,IAAI,CACtG,CACF,CAAC;IACF,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,gBAAgB,CAC7B,OAAqB,EACrB,QAAgB;IAEhB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAiB,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpF,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,sCAAsC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC;AACtB,CAAC;AAWD,KAAK,UAAU,IAAI,CACjB,OAAqB,EACrB,GAAW,EACX,IAAa;IAEb,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;QAC7B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,YAAY,EAAE,cAAc,gBAAgB,EAAE;SAC/C;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC;KACjC,CAAC,CAAC;IACH,IAAI,IAAI,GAAG,EAAO,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;AACtC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAwB,EAAE;IAC1D,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,gBAAgB,EAAE,CAAC;IAE3E,uDAAuD;IACvD,IAAI,KAAK,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAEtD,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAE5B,4EAA4E;IAC5E,wEAAwE;IACxE,8EAA8E;IAC9E,6EAA6E;IAC7E,4CAA4C;IAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrE,KAAK,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QACnE,mDAAmD;IACrD,CAAC,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7C,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,SAAS,CAAC;QACR,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;QACjE,yEAAyE;QACzE,6EAA6E;QAC7E,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;QAC1E,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,WAAW,GAAkB,IAAI,CAAC;QACtC,mDAAmD;QACnD,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,OAAO,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YACxB,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC;YACpB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAmB,OAAO,EAAE,QAAQ,EAAE;gBACvE,MAAM,EAAE,UAAU;gBAClB,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC,CAAC;YACH,IAAI,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC9C,QAAQ,IAAI,CAAC,CAAC;gBACd,WAAW,GAAG,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,MAAM,EAAE,CAAC;gBACnF,IAAI,QAAQ,IAAI,iBAAiB,EAAE,CAAC;oBAClC,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,oBAAoB,WAAW,EAAE,CAAC,CAAC;gBAC5F,CAAC;gBACD,SAAS;YACX,CAAC;YACD,QAAQ,GAAG,CAAC,CAAC;YACb,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM;YACR,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;oBAChB,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;gBAC3F,CAAC;gBACD,uEAAuE;gBACvE,0EAA0E;gBAC1E,yEAAyE;gBACzE,OAAO,cAAc,CACnB,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,EAC1D,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EACxC,IAAI,CACL,CAAC;YACJ,CAAC;QACH,CAAC;QAED,yEAAyE;QACzE,4EAA4E;QAC5E,gEAAgE;QAChE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,OAAO,IAAI,kBAAkB,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,uBAAuB,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,IAAI,CAAC,CAAC;QACb,KAAK,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAClD,uBAAuB,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAwB,EAAE;IAC/D,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACvE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC,CAAC;IACxE,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mDAAmD,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;IACvF,GAAG,CACD,KAAK,CAAC,IAAI,CACR,6BAA6B,OAAO,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,wBAAwB,KAAK,CAChG,CACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAwB,EAAE;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,MAAM,eAAe,EAAE,CAAC;IACxC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,wBAAwB,aAAa,EAAE,KAAK,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IACD,GAAG,CAAC,gBAAgB,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACxD,GAAG,CAAC,wBAAwB,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAEzD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,gBAAgB,EAAE,CAAC;QACzB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IACD,GAAG,CACD,OAAO,CAAC,QAAQ;QACd,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,0CAA0C,CAAC;QACzD,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,CACnF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,6BAA6B,CAAC;AAEzD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAwB,EAAE;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,MAAM,eAAe,EAAE,CAAC;IACxC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACtB,OAAO;IACT,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;QACpC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,WAAW,EAAE,EAAE;YACrF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,OAAO,CAAC,QAAQ;gBACxB,aAAa,EAAE,UAAU,OAAO,CAAC,YAAY,EAAE;gBAC/C,YAAY,EAAE,IAAI,CAAC,SAAS,IAAI,YAAY,EAAE;aAC/C;SACF,CAAC,CAAC;QACH,OAAO,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;IACD,MAAM,gBAAgB,EAAE,CAAC;IACzB,GAAG,CACD,OAAO;QACL,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,6CAA6C,CAAC;QAC5D,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,mGAAmG,CAAC,CACtH,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenfactory/acc-runner",
-  "version": "0.45.0",
+  "version": "0.46.0",
   "description": "Agent Control Center CLI (`acc`). Sign in, read the task board, ask ACC, and run agents on this machine. `acc-runner` is retained as a deprecated alias.",
   "license": "UNLICENSED",
   "private": false,