@useactor/core 0.1.0

package/dist/model-catalog.js

@@ -0,0 +1,92 @@
+const openAiCodexReasoningLevels = [
+    {
+        id: "low",
+        label: "Low",
+        description: "Fast responses with lighter reasoning",
+    },
+    {
+        id: "medium",
+        label: "Medium",
+        description: "Balances speed and reasoning depth for everyday tasks",
+    },
+    {
+        id: "high",
+        label: "High",
+        description: "Greater reasoning depth for complex problems",
+    },
+    {
+        id: "xhigh",
+        label: "Extra high",
+        description: "Extra high reasoning depth for complex problems",
+    },
+];
+const openAiModelCatalog = [
+    {
+        providerId: "openai",
+        modelId: "gpt-5.5",
+        contextWindow: 400_000,
+        inputLimit: 272_000,
+        outputLimit: 128_000,
+        defaultReasoningLevel: "medium",
+        supportedReasoningLevels: openAiCodexReasoningLevels,
+    },
+    {
+        providerId: "openai",
+        modelId: "gpt-5.2",
+        contextWindow: 400_000,
+        inputLimit: 272_000,
+        outputLimit: 128_000,
+        defaultReasoningLevel: "medium",
+        supportedReasoningLevels: openAiCodexReasoningLevels,
+    },
+    {
+        providerId: "openai",
+        modelId: "gpt-5.3-codex",
+        contextWindow: 400_000,
+        inputLimit: 272_000,
+        outputLimit: 128_000,
+        defaultReasoningLevel: "medium",
+        supportedReasoningLevels: openAiCodexReasoningLevels,
+    },
+    {
+        providerId: "openai",
+        modelId: "gpt-5.3-codex-spark",
+        contextWindow: 128_000,
+        inputLimit: 100_000,
+        outputLimit: 32_000,
+        defaultReasoningLevel: "medium",
+        supportedReasoningLevels: openAiCodexReasoningLevels,
+    },
+    {
+        providerId: "openai",
+        modelId: "gpt-5.4",
+        contextWindow: 1_050_000,
+        inputLimit: 922_000,
+        outputLimit: 128_000,
+        defaultReasoningLevel: "medium",
+        supportedReasoningLevels: openAiCodexReasoningLevels,
+    },
+    {
+        providerId: "openai",
+        modelId: "gpt-5.4-mini",
+        contextWindow: 400_000,
+        inputLimit: 272_000,
+        outputLimit: 128_000,
+        defaultReasoningLevel: "medium",
+        supportedReasoningLevels: openAiCodexReasoningLevels,
+    },
+];
+const modelCatalog = [...openAiModelCatalog];
+export function getModelCatalogEntry(input) {
+    return modelCatalog.find((entry) => entry.providerId === input.providerId && entry.modelId === input.modelId);
+}
+export function getCatalogContextWindows(input) {
+    return Object.fromEntries(input.modelIds.flatMap((modelId) => {
+        const entry = getModelCatalogEntry({
+            providerId: input.providerId,
+            modelId,
+        });
+        return entry ? [[modelId, entry.contextWindow]] : [];
+    }));
+}
+//# sourceMappingURL=model-catalog.js.map

package/dist/model-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-catalog.js","sourceRoot":"","sources":["../src/model-catalog.ts"],"names":[],"mappings":"AAwBA,MAAM,0BAA0B,GAAG;IACjC;QACE,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,KAAK;QACZ,WAAW,EAAE,uCAAuC;KACrD;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,uDAAuD;KACrE;IACD;QACE,EAAE,EAAE,MAAM;QACV,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,8CAA8C;KAC5D;IACD;QACE,EAAE,EAAE,OAAO;QACX,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,iDAAiD;KAC/D;CACsD,CAAC;AAE1D,MAAM,kBAAkB,GAAG;IACzB;QACE,UAAU,EAAE,QAAQ;QACpB,OAAO,EAAE,SAAS;QAClB,aAAa,EAAE,OAAO;QACtB,UAAU,EAAE,OAAO;QACnB,WAAW,EAAE,OAAO;QACpB,qBAAqB,EAAE,QAAQ;QAC/B,wBAAwB,EAAE,0BAA0B;KACrD;IACD;QACE,UAAU,EAAE,QAAQ;QACpB,OAAO,EAAE,SAAS;QAClB,aAAa,EAAE,OAAO;QACtB,UAAU,EAAE,OAAO;QACnB,WAAW,EAAE,OAAO;QACpB,qBAAqB,EAAE,QAAQ;QAC/B,wBAAwB,EAAE,0BAA0B;KACrD;IACD;QACE,UAAU,EAAE,QAAQ;QACpB,OAAO,EAAE,eAAe;QACxB,aAAa,EAAE,OAAO;QACtB,UAAU,EAAE,OAAO;QACnB,WAAW,EAAE,OAAO;QACpB,qBAAqB,EAAE,QAAQ;QAC/B,wBAAwB,EAAE,0BAA0B;KACrD;IACD;QACE,UAAU,EAAE,QAAQ;QACpB,OAAO,EAAE,qBAAqB;QAC9B,aAAa,EAAE,OAAO;QACtB,UAAU,EAAE,OAAO;QACnB,WAAW,EAAE,MAAM;QACnB,qBAAqB,EAAE,QAAQ;QAC/B,wBAAwB,EAAE,0BAA0B;KACrD;IACD;QACE,UAAU,EAAE,QAAQ;QACpB,OAAO,EAAE,SAAS;QAClB,aAAa,EAAE,SAAS;QACxB,UAAU,EAAE,OAAO;QACnB,WAAW,EAAE,OAAO;QACpB,qBAAqB,EAAE,QAAQ;QAC/B,wBAAwB,EAAE,0BAA0B;KACrD;IACD;QACE,UAAU,EAAE,QAAQ;QACpB,OAAO,EAAE,cAAc;QACvB,aAAa,EAAE,OAAO;QACtB,UAAU,EAAE,OAAO;QACnB,WAAW,EAAE,OAAO;QACpB,qBAAqB,EAAE,QAAQ;QAC/B,wBAAwB,EAAE,0BAA0B;KACrD;CACmD,CAAC;AAEvD,MAAM,YAAY,GAAG,CAAC,GAAG,kBAAkB,CAAU,CAAC;AAEtD,MAAM,UAAU,oBAAoB,CAAC,KAGpC;IACC,OAAO,YAAY,CAAC,IAAI,CACtB,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAC3E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAGxC;IACC,OAAO,MAAM,CAAC,WAAW,CACvB,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QACjC,MAAM,KAAK,GAAG,oBAAoB,CAAC;YACjC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,OAAO;SACR,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,CAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,CAAC,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/monoid-integration.d.ts

@@ -0,0 +1,33 @@
+import type { IntegrationRegistration } from "./integrations.js";
+type ExecRunner = (file: string, args: readonly string[], options: {
+    readonly timeout: number;
+    readonly maxBuffer: number;
+}) => Promise<{
+    readonly stdout: string;
+    readonly stderr: string;
+}>;
+export declare class MonoidIntegrationCliError extends Error {
+    readonly code: "missing_cli" | "cli_failed" | "invalid_payload";
+    readonly recoverable = true;
+    constructor(code: "missing_cli" | "cli_failed" | "invalid_payload", message: string);
+}
+export declare function createMonoidIntegrationSkeleton(): IntegrationRegistration;
+export interface MonoidReadInput {
+    readonly containerId?: string;
+    readonly projectId?: string;
+    readonly taskId?: string;
+}
+export declare function runMonoidContextRead(input: MonoidReadInput, options?: {
+    readonly exec?: ExecRunner;
+    readonly maxBytes?: number;
+}): Promise<Record<string, unknown>>;
+export declare function runMonoidUpdate(args: readonly string[], options?: {
+    readonly exec?: ExecRunner;
+    readonly maxBytes?: number;
+}): Promise<{
+    readonly ok: boolean;
+    readonly args: readonly string[];
+    readonly summary: string;
+}>;
+export {};
+//# sourceMappingURL=monoid-integration.d.ts.map

package/dist/monoid-integration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"monoid-integration.d.ts","sourceRoot":"","sources":["../src/monoid-integration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAMjE,KAAK,UAAU,GAAG,CAChB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,KAC9D,OAAO,CAAC;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEnE,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,YAAY,GAAG,iBAAiB,CAAC;IAChE,QAAQ,CAAC,WAAW,QAAQ;gBAEhB,IAAI,EAAE,aAAa,GAAG,YAAY,GAAG,iBAAiB,EAAE,OAAO,EAAE,MAAM;CAKpF;AAaD,wBAAgB,+BAA+B,IAAI,uBAAuB,CAoFzE;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,eAAe,EACtB,OAAO,GAAE;IACP,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACvB,GACL,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA+BlC;AAED,wBAAsB,eAAe,CACnC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,GAAE;IACP,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACvB,GACL,OAAO,CAAC;IAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAe/F"}

package/dist/monoid-integration.js

@@ -0,0 +1,184 @@
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+const execFileAsync = promisify(execFile);
+export class MonoidIntegrationCliError extends Error {
+    code;
+    recoverable = true;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "MonoidIntegrationCliError";
+    }
+}
+function createNotWiredResult(toolId) {
+    return {
+        content: JSON.stringify({
+            ok: false,
+            code: "integration_not_wired",
+            toolId,
+            message: "MONOid CLI execution is not wired yet."
+        })
+    };
+}
+export function createMonoidIntegrationSkeleton() {
+    const readInputSchema = {
+        type: "object",
+        additionalProperties: false,
+        properties: {
+            containerId: { type: "string" },
+            projectId: { type: "string" },
+            taskId: { type: "string" }
+        }
+    };
+    const writeInputSchema = {
+        type: "object",
+        additionalProperties: false,
+        required: ["args"],
+        properties: {
+            args: {
+                type: "array",
+                minItems: 1,
+                items: { type: "string" }
+            }
+        }
+    };
+    const tools = [
+        {
+            id: "monoid_context_read",
+            name: "MONOid context read",
+            description: "Read compact MONOid context for configured container/project/task refs.",
+            inputSchema: readInputSchema,
+            permissionPolicy: "never",
+            async executor(input) {
+                const params = normalizeReadInput(input);
+                const context = await runMonoidContextRead(params);
+                return {
+                    content: JSON.stringify({
+                        context
+                    })
+                };
+            }
+        },
+        {
+            id: "monoid_update",
+            name: "MONOid update",
+            description: "Execute an approval-gated MONOid CLI write action.",
+            inputSchema: writeInputSchema,
+            permissionPolicy: "on-request",
+            async executor(input) {
+                const args = normalizeWriteArgs(input);
+                const result = await runMonoidUpdate(args);
+                return {
+                    content: JSON.stringify(result)
+                };
+            }
+        }
+    ];
+    return {
+        definition: {
+            id: "monoid",
+            kind: "monoid",
+            name: "MONOid",
+            description: "MONOid CLI-backed integration tools.",
+            tools: [
+                {
+                    id: "monoid_context_read",
+                    name: "MONOid context read",
+                    description: "Read compact MONOid context.",
+                    inputSchema: readInputSchema,
+                    permissionPolicy: "never",
+                    readOnly: true,
+                    approvalRequired: false
+                },
+                {
+                    id: "monoid_update",
+                    name: "MONOid update",
+                    description: "Approval-gated MONOid CLI write action.",
+                    inputSchema: writeInputSchema,
+                    permissionPolicy: "on-request",
+                    readOnly: false,
+                    approvalRequired: true
+                }
+            ]
+        },
+        tools
+    };
+}
+export async function runMonoidContextRead(input, options = {}) {
+    const exec = options.exec ?? execFileAsync;
+    const args = [
+        "tasks",
+        "list",
+        "-o",
+        "json",
+        ...(input.containerId ? ["--container-id", input.containerId] : []),
+        ...(input.projectId ? ["--project-id", input.projectId] : []),
+        ...(input.taskId ? ["--task-id", input.taskId] : [])
+    ];
+    try {
+        const result = await exec("monoid", args, { timeout: 10_000, maxBuffer: options.maxBytes ?? 128_000 });
+        const parsed = JSON.parse(result.stdout);
+        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+            throw new MonoidIntegrationCliError("invalid_payload", "MONOid CLI returned non-object context payload.");
+        }
+        return parsed;
+    }
+    catch (error) {
+        if (error instanceof MonoidIntegrationCliError) {
+            throw error;
+        }
+        if (typeof error === "object" && error && "code" in error && error.code === "ENOENT") {
+            throw new MonoidIntegrationCliError("missing_cli", "MONOid CLI not found. Install and login before using this tool.");
+        }
+        if (error instanceof SyntaxError) {
+            throw new MonoidIntegrationCliError("invalid_payload", "MONOid CLI returned invalid JSON.");
+        }
+        throw new MonoidIntegrationCliError("cli_failed", "MONOid CLI context read failed.");
+    }
+}
+export async function runMonoidUpdate(args, options = {}) {
+    const exec = options.exec ?? execFileAsync;
+    try {
+        const result = await exec("monoid", [...args], {
+            timeout: 10_000,
+            maxBuffer: options.maxBytes ?? 128_000
+        });
+        const summary = [result.stdout, result.stderr].filter(Boolean).join("\n").trim().slice(0, 2000);
+        return { ok: true, args, summary };
+    }
+    catch (error) {
+        if (typeof error === "object" && error && "code" in error && error.code === "ENOENT") {
+            throw new MonoidIntegrationCliError("missing_cli", "MONOid CLI not found. Install and login before using this tool.");
+        }
+        throw new MonoidIntegrationCliError("cli_failed", "MONOid CLI write execution failed.");
+    }
+}
+function normalizeReadInput(input) {
+    if (!input || typeof input !== "object" || Array.isArray(input)) {
+        return {};
+    }
+    const record = input;
+    const containerId = typeof record.containerId === "string" ? record.containerId.trim() : "";
+    const projectId = typeof record.projectId === "string" ? record.projectId.trim() : "";
+    const taskId = typeof record.taskId === "string" ? record.taskId.trim() : "";
+    return {
+        ...(containerId ? { containerId } : {}),
+        ...(projectId ? { projectId } : {}),
+        ...(taskId ? { taskId } : {})
+    };
+}
+function normalizeWriteArgs(input) {
+    if (!input || typeof input !== "object" || Array.isArray(input)) {
+        throw new Error("MONOid update requires an object input.");
+    }
+    const argsValue = input.args;
+    if (!Array.isArray(argsValue) || argsValue.length === 0) {
+        throw new Error("MONOid update requires args array.");
+    }
+    const args = argsValue.map((value) => String(value).trim()).filter(Boolean);
+    if (args.length === 0) {
+        throw new Error("MONOid update requires at least one non-empty arg.");
+    }
+    return args;
+}
+//# sourceMappingURL=monoid-integration.js.map

package/dist/monoid-integration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"monoid-integration.js","sourceRoot":"","sources":["../src/monoid-integration.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAO1C,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACzC,IAAI,CAAmD;IACvD,WAAW,GAAG,IAAI,CAAC;IAE5B,YAAY,IAAsD,EAAE,OAAe;QACjF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED,SAAS,oBAAoB,CAAC,MAAc;IAC1C,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;YACtB,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,uBAAuB;YAC7B,MAAM;YACN,OAAO,EAAE,wCAAwC;SAClD,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC7C,MAAM,eAAe,GAAG;QACtB,IAAI,EAAE,QAAQ;QACd,oBAAoB,EAAE,KAAK;QAC3B,UAAU,EAAE;YACV,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC/B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC7B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC3B;KACF,CAAC;IACF,MAAM,gBAAgB,GAAG;QACvB,IAAI,EAAE,QAAQ;QACd,oBAAoB,EAAE,KAAK;QAC3B,QAAQ,EAAE,CAAC,MAAM,CAAC;QAClB,UAAU,EAAE;YACV,IAAI,EAAE;gBACJ,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,CAAC;gBACX,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC1B;SACF;KACF,CAAC;IACF,MAAM,KAAK,GAAqB;QAC9B;YACE,EAAE,EAAE,qBAAqB;YACzB,IAAI,EAAE,qBAAqB;YAC3B,WAAW,EAAE,yEAAyE;YACtF,WAAW,EAAE,eAAe;YAC5B,gBAAgB,EAAE,OAAO;YACzB,KAAK,CAAC,QAAQ,CAAC,KAAK;gBAClB,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBACzC,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC;gBACnD,OAAO;oBACL,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;wBACtB,OAAO;qBACR,CAAC;iBACH,CAAC;YACJ,CAAC;SACF;QACD;YACE,EAAE,EAAE,eAAe;YACnB,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,oDAAoD;YACjE,WAAW,EAAE,gBAAgB;YAC7B,gBAAgB,EAAE,YAAY;YAC9B,KAAK,CAAC,QAAQ,CAAC,KAAK;gBAClB,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBACvC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;gBAC3C,OAAO;oBACL,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;iBAChC,CAAC;YACJ,CAAC;SACF;KACF,CAAC;IAEF,OAAO;QACL,UAAU,EAAE;YACV,EAAE,EAAE,QAAQ;YACZ,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,sCAAsC;YACnD,KAAK,EAAE;gBACL;oBACE,EAAE,EAAE,qBAAqB;oBACzB,IAAI,EAAE,qBAAqB;oBAC3B,WAAW,EAAE,8BAA8B;oBAC3C,WAAW,EAAE,eAAe;oBAC5B,gBAAgB,EAAE,OAAO;oBACzB,QAAQ,EAAE,IAAI;oBACd,gBAAgB,EAAE,KAAK;iBACxB;gBACD;oBACE,EAAE,EAAE,eAAe;oBACnB,IAAI,EAAE,eAAe;oBACrB,WAAW,EAAE,yCAAyC;oBACtD,WAAW,EAAE,gBAAgB;oBAC7B,gBAAgB,EAAE,YAAY;oBAC9B,QAAQ,EAAE,KAAK;oBACf,gBAAgB,EAAE,IAAI;iBACvB;aACF;SACF;QACD,KAAK;KACN,CAAC;AACJ,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAsB,EACtB,UAGI,EAAE;IAEN,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,aAAa,CAAC;IAC3C,MAAM,IAAI,GAAG;QACX,OAAO;QACP,MAAM;QACN,IAAI;QACJ,MAAM;QACN,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO,EAAE,CAAC,CAAC;QACvG,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,EAAE,iDAAiD,CAAC,CAAC;QAC5G,CAAC;QACD,OAAO,MAAiC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,yBAAyB,EAAE,CAAC;YAC/C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrF,MAAM,IAAI,yBAAyB,CAAC,aAAa,EAAE,iEAAiE,CAAC,CAAC;QACxH,CAAC;QACD,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YACjC,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,IAAI,yBAAyB,CAAC,YAAY,EAAE,iCAAiC,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAuB,EACvB,UAGI,EAAE;IAEN,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,aAAa,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;YAC7C,OAAO,EAAE,MAAM;YACf,SAAS,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO;SACvC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAChG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrF,MAAM,IAAI,yBAAyB,CAAC,aAAa,EAAE,iEAAiE,CAAC,CAAC;QACxH,CAAC;QACD,MAAM,IAAI,yBAAyB,CAAC,YAAY,EAAE,oCAAoC,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,WAAW,GAAG,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAE7E,OAAO;QACL,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,SAAS,GAAI,KAAiC,CAAC,IAAI,CAAC;IAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/openai-oauth.d.ts

@@ -0,0 +1,69 @@
+import { randomBytes } from "node:crypto";
+import type { SecretStore } from "./secrets.js";
+export interface OpenAiOAuthCredential {
+    readonly type: "oauth";
+    readonly accessToken: string;
+    readonly refreshToken?: string;
+    readonly expiresAt: string;
+    readonly accountId?: string;
+}
+export interface OpenAiOAuthMetadata {
+    readonly type: "oauth";
+    readonly authenticated: boolean;
+    readonly expiresAt?: string;
+    readonly accountId?: string;
+}
+export interface PkcePair {
+    readonly verifier: string;
+    readonly challenge: string;
+    readonly method: "S256";
+}
+export interface OAuthTokenResponse {
+    readonly access_token: string;
+    readonly refresh_token?: string;
+    readonly expires_in?: number;
+    readonly account_id?: string;
+}
+export interface OpenAiOAuthTokenClient {
+    readonly tokenEndpoint?: string;
+    readonly clientId: string;
+    readonly fetch: typeof fetch;
+    readonly now?: () => Date;
+}
+export interface StoreOpenAiOAuthCredentialOptions {
+    readonly secretStore: SecretStore;
+    readonly secretId: string;
+    readonly credential: OpenAiOAuthCredential;
+}
+export interface LoadOpenAiOAuthCredentialOptions {
+    readonly secretStore: SecretStore;
+    readonly secretId: string;
+}
+export interface RefreshOpenAiOAuthCredentialOptions extends OpenAiOAuthTokenClient {
+    readonly credential: OpenAiOAuthCredential;
+}
+export interface EnsureFreshOpenAiOAuthCredentialOptions extends OpenAiOAuthTokenClient {
+    readonly secretStore: SecretStore;
+    readonly secretId: string;
+    readonly skewMs?: number;
+}
+export interface OpenAiOAuthAuthorizationUrlOptions {
+    readonly authorizationEndpoint?: string;
+    readonly clientId: string;
+    readonly redirectUri: string;
+    readonly scope?: string;
+    readonly state: string;
+    readonly pkce: PkcePair;
+}
+export declare function createPkcePair(random?: typeof randomBytes): PkcePair;
+export declare function createOAuthState(): string;
+export declare function createOpenAiOAuthAuthorizationUrl(options: OpenAiOAuthAuthorizationUrlOptions): string;
+export declare function parseOpenAiOAuthCredential(value: string): OpenAiOAuthCredential;
+export declare function storeOpenAiOAuthCredential(options: StoreOpenAiOAuthCredentialOptions): Promise<void>;
+export declare function loadOpenAiOAuthCredential(options: LoadOpenAiOAuthCredentialOptions): Promise<OpenAiOAuthCredential | undefined>;
+export declare function deleteOpenAiOAuthCredential(options: LoadOpenAiOAuthCredentialOptions): Promise<boolean>;
+export declare function refreshOpenAiOAuthCredential(options: RefreshOpenAiOAuthCredentialOptions): Promise<OpenAiOAuthCredential>;
+export declare function ensureFreshOpenAiOAuthCredential(options: EnsureFreshOpenAiOAuthCredentialOptions): Promise<OpenAiOAuthCredential | undefined>;
+export declare function getOpenAiOAuthMetadata(credential: OpenAiOAuthCredential | undefined): OpenAiOAuthMetadata;
+export declare function getOpenAiOAuthHeaders(credential: OpenAiOAuthCredential): Record<string, string>;
+//# sourceMappingURL=openai-oauth.d.ts.map

package/dist/openai-oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-oauth.d.ts","sourceRoot":"","sources":["../src/openai-oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,WAAW,EAAc,MAAM,aAAa,CAAC;AAClE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,OAAO,KAAK,CAAC;IAC7B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;CAC5C;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,mCAAoC,SAAQ,sBAAsB;IACjF,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;CAC5C;AAED,MAAM,WAAW,uCAAwC,SAAQ,sBAAsB;IACrF,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;CACzB;AAMD,wBAAgB,cAAc,CAAC,MAAM,qBAAc,GAAG,QAAQ,CAK7D;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,kCAAkC,GAC1C,MAAM,CAYR;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,GAAG,qBAAqB,CAmB/E;AAED,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,iCAAiC,GACzC,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,gCAAgC,GACxC,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAQ5C;AAED,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,gCAAgC,GACxC,OAAO,CAAC,OAAO,CAAC,CAElB;AAED,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,mCAAmC,GAC3C,OAAO,CAAC,qBAAqB,CAAC,CA0BhC;AAED,wBAAsB,gCAAgC,CACpD,OAAO,EAAE,uCAAuC,GAC/C,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAkB5C;AAED,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,qBAAqB,GAAG,SAAS,GAC5C,mBAAmB,CAOrB;AAED,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,qBAAqB,GAChC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAKxB"}

package/dist/openai-oauth.js

@@ -0,0 +1,127 @@
+import { createHash, randomBytes, randomUUID } from "node:crypto";
+const defaultTokenEndpoint = "https://auth.openai.com/oauth/token";
+const defaultAuthorizationEndpoint = "https://auth.openai.com/oauth/authorize";
+const defaultScope = "openid profile email offline_access";
+export function createPkcePair(random = randomBytes) {
+    const verifier = base64Url(random(32));
+    const challenge = base64Url(createHash("sha256").update(verifier).digest());
+    return { verifier, challenge, method: "S256" };
+}
+export function createOAuthState() {
+    return randomUUID();
+}
+export function createOpenAiOAuthAuthorizationUrl(options) {
+    const url = new URL(options.authorizationEndpoint ?? defaultAuthorizationEndpoint);
+    url.searchParams.set("response_type", "code");
+    url.searchParams.set("client_id", options.clientId);
+    url.searchParams.set("redirect_uri", options.redirectUri);
+    url.searchParams.set("scope", options.scope ?? defaultScope);
+    url.searchParams.set("state", options.state);
+    url.searchParams.set("code_challenge", options.pkce.challenge);
+    url.searchParams.set("code_challenge_method", options.pkce.method);
+    return url.toString();
+}
+export function parseOpenAiOAuthCredential(value) {
+    const parsed = JSON.parse(value);
+    if (parsed.type !== "oauth" ||
+        typeof parsed.accessToken !== "string" ||
+        !parsed.accessToken ||
+        typeof parsed.expiresAt !== "string") {
+        throw new Error("Invalid OpenAI OAuth credential.");
+    }
+    return {
+        type: "oauth",
+        accessToken: parsed.accessToken,
+        expiresAt: parsed.expiresAt,
+        ...(parsed.refreshToken ? { refreshToken: parsed.refreshToken } : {}),
+        ...(parsed.accountId ? { accountId: parsed.accountId } : {})
+    };
+}
+export async function storeOpenAiOAuthCredential(options) {
+    await options.secretStore.setSecret({
+        secretId: options.secretId,
+        providerId: "openai",
+        label: "OpenAI OAuth",
+        value: JSON.stringify(options.credential)
+    });
+}
+export async function loadOpenAiOAuthCredential(options) {
+    const value = await options.secretStore.getSecret(options.secretId);
+    if (!value) {
+        return undefined;
+    }
+    return parseOpenAiOAuthCredential(value);
+}
+export async function deleteOpenAiOAuthCredential(options) {
+    return options.secretStore.deleteSecret(options.secretId);
+}
+export async function refreshOpenAiOAuthCredential(options) {
+    if (!options.credential.refreshToken) {
+        throw new Error("OpenAI OAuth credential has no refresh token.");
+    }
+    const response = await options.fetch(options.tokenEndpoint ?? defaultTokenEndpoint, {
+        method: "POST",
+        headers: {
+            "content-type": "application/x-www-form-urlencoded"
+        },
+        body: new URLSearchParams({
+            grant_type: "refresh_token",
+            client_id: options.clientId,
+            refresh_token: options.credential.refreshToken
+        })
+    });
+    if (!response.ok) {
+        throw new Error(`OpenAI OAuth refresh failed with status ${response.status}.`);
+    }
+    return credentialFromTokenResponse((await response.json()), options.now ?? (() => new Date()), options.credential);
+}
+export async function ensureFreshOpenAiOAuthCredential(options) {
+    const credential = await loadOpenAiOAuthCredential(options);
+    if (!credential) {
+        return undefined;
+    }
+    const now = options.now ?? (() => new Date());
+    const skewMs = options.skewMs ?? 60_000;
+    if (Date.parse(credential.expiresAt) - now().getTime() > skewMs) {
+        return credential;
+    }
+    const refreshed = await refreshOpenAiOAuthCredential({ ...options, credential });
+    await storeOpenAiOAuthCredential({ ...options, credential: refreshed });
+    return refreshed;
+}
+export function getOpenAiOAuthMetadata(credential) {
+    return {
+        type: "oauth",
+        authenticated: Boolean(credential),
+        ...(credential?.expiresAt ? { expiresAt: credential.expiresAt } : {}),
+        ...(credential?.accountId ? { accountId: credential.accountId } : {})
+    };
+}
+export function getOpenAiOAuthHeaders(credential) {
+    return {
+        authorization: `Bearer ${credential.accessToken}`,
+        ...(credential.accountId ? { "chatgpt-account-id": credential.accountId } : {})
+    };
+}
+function credentialFromTokenResponse(response, now, previous) {
+    if (!response.access_token) {
+        throw new Error("OpenAI OAuth token response did not include an access token.");
+    }
+    const refreshToken = response.refresh_token ?? previous?.refreshToken;
+    const accountId = response.account_id ?? previous?.accountId;
+    return {
+        type: "oauth",
+        accessToken: response.access_token,
+        expiresAt: new Date(now().getTime() + (response.expires_in ?? 3600) * 1000).toISOString(),
+        ...(refreshToken ? { refreshToken } : {}),
+        ...(accountId ? { accountId } : {})
+    };
+}
+function base64Url(value) {
+    return value
+        .toString("base64")
+        .replaceAll("+", "-")
+        .replaceAll("/", "_")
+        .replaceAll("=", "");
+}
+//# sourceMappingURL=openai-oauth.js.map

package/dist/openai-oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-oauth.js","sourceRoot":"","sources":["../src/openai-oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAoElE,MAAM,oBAAoB,GAAG,qCAAqC,CAAC;AACnE,MAAM,4BAA4B,GAAG,yCAAyC,CAAC;AAC/E,MAAM,YAAY,GAAG,qCAAqC,CAAC;AAE3D,MAAM,UAAU,cAAc,CAAC,MAAM,GAAG,WAAW;IACjD,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAE5E,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,OAA2C;IAE3C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,qBAAqB,IAAI,4BAA4B,CAAC,CAAC;IAEnF,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,IAAI,YAAY,CAAC,CAAC;IAC7D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEnE,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAa;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAmC,CAAC;IAEnE,IACE,MAAM,CAAC,IAAI,KAAK,OAAO;QACvB,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;QACtC,CAAC,MAAM,CAAC,WAAW;QACnB,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EACpC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,OAAO;QACL,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAA0C;IAE1C,MAAM,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC;QAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,UAAU,EAAE,QAAQ;QACpB,KAAK,EAAE,cAAc;QACrB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC;KAC1C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAyC;IAEzC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEpE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,0BAA0B,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAAyC;IAEzC,OAAO,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OAA4C;IAE5C,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,IAAI,oBAAoB,EAAE;QAClF,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;SACpD;QACD,IAAI,EAAE,IAAI,eAAe,CAAC;YACxB,UAAU,EAAE,eAAe;YAC3B,SAAS,EAAE,OAAO,CAAC,QAAQ;YAC3B,aAAa,EAAE,OAAO,CAAC,UAAU,CAAC,YAAY;SAC/C,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,2CAA2C,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACjF,CAAC;IAED,OAAO,2BAA2B,CAChC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuB,EAC7C,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EACjC,OAAO,CAAC,UAAU,CACnB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,OAAgD;IAEhD,MAAM,UAAU,GAAG,MAAM,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAE5D,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC;IAExC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC;QAChE,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;IACjF,MAAM,0BAA0B,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;IAExE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,UAA6C;IAE7C,OAAO;QACL,IAAI,EAAE,OAAO;QACb,aAAa,EAAE,OAAO,CAAC,UAAU,CAAC;QAClC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,UAAiC;IAEjC,OAAO;QACL,aAAa,EAAE,UAAU,UAAU,CAAC,WAAW,EAAE;QACjD,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChF,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAClC,QAA4B,EAC5B,GAAe,EACf,QAAgC;IAEhC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,YAAY,GAAG,QAAQ,CAAC,aAAa,IAAI,QAAQ,EAAE,YAAY,CAAC;IACtE,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,IAAI,QAAQ,EAAE,SAAS,CAAC;IAE7D,OAAO;QACL,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,QAAQ,CAAC,YAAY;QAClC,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;QACzF,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK;SACT,QAAQ,CAAC,QAAQ,CAAC;SAClB,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;SACpB,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;SACpB,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACzB,CAAC"}

package/dist/permission-grant-store.d.ts

@@ -0,0 +1,7 @@
+import { type ActorPathResolverOptions } from "@useactor/storage";
+import { type PermissionGrantStore } from "./permission-grants.js";
+export interface FilePermissionGrantStoreOptions extends ActorPathResolverOptions {
+}
+export declare function getPermissionGrantsPath(options?: FilePermissionGrantStoreOptions): string;
+export declare function createFilePermissionGrantStore(options?: FilePermissionGrantStoreOptions): PermissionGrantStore;
+//# sourceMappingURL=permission-grant-store.d.ts.map

package/dist/permission-grant-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-grant-store.d.ts","sourceRoot":"","sources":["../src/permission-grant-store.ts"],"names":[],"mappings":"AAGA,OAAO,EAAoB,KAAK,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAIL,KAAK,oBAAoB,EAC1B,MAAM,wBAAwB,CAAC;AAEhC,MAAM,WAAW,+BAAgC,SAAQ,wBAAwB;CAAG;AAEpF,wBAAgB,uBAAuB,CAAC,OAAO,CAAC,EAAE,+BAA+B,GAAG,MAAM,CAEzF;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,GAAE,+BAAoC,GAC5C,oBAAoB,CA4CtB"}

package/dist/permission-grant-store.js

@@ -0,0 +1,77 @@
+import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
+import { randomUUID } from "node:crypto";
+import path from "node:path";
+import { resolveActorHome } from "@useactor/storage";
+import { permissionGrantMatchesRequest, validatePermissionGrant } from "./permission-grants.js";
+export function getPermissionGrantsPath(options) {
+    return path.join(resolveActorHome(options), "permission_grants.json");
+}
+export function createFilePermissionGrantStore(options = {}) {
+    const filePath = getPermissionGrantsPath(options);
+    return {
+        async listPermissionGrants() {
+            return readPermissionGrantsFile(filePath);
+        },
+        async savePermissionGrant(grant) {
+            const validated = normalizePersistentGrant(validatePermissionGrant(grant));
+            const grants = await readPermissionGrantsFile(filePath);
+            await writePermissionGrantsFile(filePath, upsertPermissionGrant(grants, validated));
+            return validated;
+        },
+        async deletePermissionGrant(grantId) {
+            const grants = await readPermissionGrantsFile(filePath);
+            const next = grants.filter((grant) => grant.id !== grantId);
+            if (next.length === grants.length) {
+                return false;
+            }
+            await writePermissionGrantsFile(filePath, next);
+            return true;
+        },
+        async deleteMatchingPermissionGrant(request) {
+            const grants = await readPermissionGrantsFile(filePath);
+            const matching = grants.find((grant) => permissionGrantMatchesRequest(grant, request));
+            if (!matching) {
+                return undefined;
+            }
+            await writePermissionGrantsFile(filePath, grants.filter((grant) => grant.id !== matching.id));
+            return matching;
+        }
+    };
+}
+async function readPermissionGrantsFile(filePath) {
+    let file = "";
+    try {
+        file = await readFile(filePath, "utf8");
+    }
+    catch (error) {
+        if (isNotFoundError(error)) {
+            return [];
+        }
+        throw error;
+    }
+    const parsed = JSON.parse(file);
+    if (!Array.isArray(parsed)) {
+        throw new Error(`Permission grants file must contain an array: ${filePath}`);
+    }
+    return parsed.map((grant) => validatePermissionGrant(grant));
+}
+function upsertPermissionGrant(grants, grant) {
+    return [...grants.filter((existing) => existing.id !== grant.id), grant].sort((first, second) => first.id.localeCompare(second.id));
+}
+function normalizePersistentGrant(grant) {
+    if (grant.type !== "allow_always" || grant.sessionId === undefined) {
+        return grant;
+    }
+    const { sessionId: _sessionId, ...rest } = grant;
+    return rest;
+}
+async function writePermissionGrantsFile(filePath, grants) {
+    await mkdir(path.dirname(filePath), { recursive: true });
+    const tempPath = path.join(path.dirname(filePath), `.${path.basename(filePath)}.${process.pid}.${randomUUID()}.tmp`);
+    await writeFile(tempPath, `${JSON.stringify(grants, null, 2)}\n`, "utf8");
+    await rename(tempPath, filePath);
+}
+function isNotFoundError(error) {
+    return Boolean(error && typeof error === "object" && "code" in error && error.code === "ENOENT");
+}
+//# sourceMappingURL=permission-grant-store.js.map

package/dist/permission-grant-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-grant-store.js","sourceRoot":"","sources":["../src/permission-grant-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAiC,MAAM,mBAAmB,CAAC;AACpF,OAAO,EACL,6BAA6B,EAC7B,uBAAuB,EAGxB,MAAM,wBAAwB,CAAC;AAIhC,MAAM,UAAU,uBAAuB,CAAC,OAAyC;IAC/E,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,wBAAwB,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,UAA2C,EAAE;IAE7C,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAElD,OAAO;QACL,KAAK,CAAC,oBAAoB;YACxB,OAAO,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QAC5C,CAAC;QAED,KAAK,CAAC,mBAAmB,CAAC,KAAK;YAC7B,MAAM,SAAS,GAAG,wBAAwB,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3E,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,QAAQ,CAAC,CAAC;YACxD,MAAM,yBAAyB,CAC7B,QAAQ,EACR,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC,CACzC,CAAC;YACF,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,KAAK,CAAC,qBAAqB,CAAC,OAAO;YACjC,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,QAAQ,CAAC,CAAC;YACxD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;YAC5D,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClC,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,yBAAyB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,CAAC,6BAA6B,CAAC,OAAO;YACzC,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,QAAQ,CAAC,CAAC;YACxD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,6BAA6B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;YAEvF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,MAAM,yBAAyB,CAC7B,QAAQ,EACR,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC,CACnD,CAAC;YACF,OAAO,QAAQ,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,QAAgB;IACtD,IAAI,IAAI,GAAG,EAAE,CAAC;IAEd,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,iDAAiD,QAAQ,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,KAAwB,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAAkC,EAClC,KAAsB;IAEtB,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAC9F,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAClC,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAsB;IACtD,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACnE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IACjD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,QAAgB,EAChB,MAAkC;IAElC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEzD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EACtB,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CACjE,CAAC;IAEF,MAAM,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1E,MAAM,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;AACnG,CAAC"}