@xopcai/xopc 0.0.141 → 0.0.142

package/dist/src/auth/credentials.js.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.js","names":[],"sources":["../../../src/auth/credentials.ts"],"sourcesContent":["import { readFile, mkdir, rm, readdir } from 'fs/promises';\nimport { writeTextAtomic } from '../infra/write-file-atomic.js';\nimport { join, dirname } from 'path';\nimport { createLogger } from '../utils/logger.js';\nimport { getApiKeyFromEnv } from '../providers/env-keys.js';\nimport {\n  resolveCredentialsDir,\n  resolveAuthProfilesPath,\n  resolveAgentAuthProfilesPath,\n  resolveOAuthPath,\n} from '../config/paths.js';\nimport type { Config } from '../config/schema.js';\n\nconst log = createLogger('Credentials');\nconst warnedExpiredOAuthTokens = new Set<string>();\n\n// ============================================\n// Types\n// ============================================\n\nexport type CredentialType = 'api_key' | 'oauth';\n\nexport interface ApiKeyProfile {\n  type: 'api_key';\n  provider: string;\n  profileName?: string;\n  envVar?: string | null;\n  key: string | null;\n}\n\nexport interface OAuthToken {\n  type: 'oauth';\n  provider: string;\n  access: string;\n  refresh?: string;\n  expiresAt?: number;\n  scope?: string[];\n  createdAt: string;\n  updatedAt: string;\n}\n\nexport type CredentialProfile = ApiKeyProfile;\n\nexport interface AuthProfilesFile {\n  version: number;\n  profiles: Record<string, ApiKeyProfile>;\n}\n\n// ============================================\n// Credential Resolver\n// ============================================\n\nexport interface CredentialResolverOptions {\n  stateDir?: string;\n  /** When set, per-agent auth profiles are read from `resolveAgentAuthProfilesPath(appConfig, agentId)`. */\n  agentId?: string;\n  /** Required when `agentId` is set. */\n  appConfig?: Config;\n}\n\nexport class CredentialResolver {\n  private readonly credentialsDir: string;\n  private readonly agentId?: string;\n  private readonly appConfig?: Config;\n\n  constructor(options: CredentialResolverOptions = {}) {\n    this.credentialsDir = options.stateDir\n      ? join(options.stateDir, 'credentials')\n      : resolveCredentialsDir();\n    this.agentId = options.agentId;\n    this.appConfig = options.appConfig;\n    if (this.agentId && !this.appConfig) {\n      throw new Error('CredentialResolver: appConfig is required when agentId is set');\n    }\n  }\n\n  /**\n   * Resolve API key for a provider\n   * Priority: Agent private > Global > OAuth > Environment\n   */\n  async resolveApiKey(provider: string): Promise<string | null> {\n    const normalizedProvider = provider.toLowerCase();\n\n    // 1. Try agent private credentials\n    if (this.agentId) {\n      const agentKey = await this.loadFromAgentCredentials(normalizedProvider);\n      if (agentKey) {\n        log.debug({ provider, source: 'agent' }, 'Resolved API key from agent credentials');\n        return agentKey;\n      }\n    }\n\n    // 2. Try global credentials\n    const globalKey = await this.loadFromGlobalCredentials(normalizedProvider);\n    if (globalKey) {\n      log.debug({ provider, source: 'global' }, 'Resolved API key from global credentials');\n      return globalKey;\n    }\n\n    // 3. Try OAuth token (convert to Bearer)\n    const oauthToken = await this.loadOAuthToken(normalizedProvider);\n    if (oauthToken) {\n      log.debug({ provider, source: 'oauth' }, 'Resolved API key from OAuth token');\n      return oauthToken.access;\n    }\n\n    // 4. Environment variables (see `src/providers/env-keys.ts`)\n    const envKey = getApiKeyFromEnv(normalizedProvider);\n    if (envKey) {\n      log.debug({ provider, source: 'env' }, 'Resolved API key from environment');\n      return envKey;\n    }\n\n    return null;\n  }\n\n  /**\n   * Check if a provider has credentials configured\n   */\n  async hasCredentials(provider: string): Promise<boolean> {\n    const key = await this.resolveApiKey(provider);\n    return key !== null;\n  }\n\n  /**\n   * Which step in {@link resolveApiKey} would supply the key (no secret material).\n   */\n  async resolveApiKeySource(\n    provider: string,\n  ): Promise<'agent' | 'global' | 'oauth' | 'env' | null> {\n    const normalizedProvider = provider.toLowerCase();\n\n    if (this.agentId) {\n      const agentKey = await this.loadFromAgentCredentials(normalizedProvider);\n      if (agentKey) return 'agent';\n    }\n\n    const globalKey = await this.loadFromGlobalCredentials(normalizedProvider);\n    if (globalKey) return 'global';\n\n    const oauthToken = await this.loadOAuthToken(normalizedProvider);\n    if (oauthToken) return 'oauth';\n\n    if (getApiKeyFromEnv(normalizedProvider)) return 'env';\n\n    return null;\n  }\n\n  /**\n   * List all available credential profiles\n   */\n  async listProfiles(): Promise<Array<ApiKeyProfile & { id: string; source: 'agent' | 'global' }>> {\n    const profiles: Array<ApiKeyProfile & { id: string; source: 'agent' | 'global' }> = [];\n\n    // Global profiles\n    const globalProfiles = await this.loadAuthProfilesFile();\n    for (const [id, profile] of Object.entries(globalProfiles.profiles)) {\n      profiles.push({ ...profile, id, source: 'global' });\n    }\n\n    // Agent private profiles\n    if (this.agentId) {\n      const agentProfiles = await this.loadAgentAuthProfilesFile();\n      for (const [id, profile] of Object.entries(agentProfiles.profiles)) {\n        profiles.push({ ...profile, id, source: 'agent' });\n      }\n    }\n\n    return profiles;\n  }\n\n  /**\n   * Plaintext API key from global auth profiles only (no env/oauth fallback).\n   * Used by the gateway console reveal endpoint.\n   */\n  async revealGatewayStoredApiKey(provider: string): Promise<string | null> {\n    const normalizedProvider = provider.toLowerCase();\n    const profiles = await this.loadAuthProfilesFile();\n    const profile = this.findProfileForProvider(profiles, normalizedProvider);\n    const key = profile?.key?.trim();\n    return key || null;\n  }\n\n  /**\n   * Save an API key profile\n   */\n  async saveApiKey(\n    provider: string,\n    key: string,\n    options: {\n      profileName?: string;\n      envVar?: string | null;\n      agentPrivate?: boolean;\n    } = {}\n  ): Promise<void> {\n    const normalizedProvider = provider.toLowerCase();\n    const profileId = options.profileName\n      ? `${normalizedProvider}:${options.profileName}`\n      : `${normalizedProvider}:default`;\n\n    const profile: ApiKeyProfile = {\n      type: 'api_key',\n      provider: normalizedProvider,\n      profileName: options.profileName,\n      envVar: options.envVar ?? null,\n      key,\n    };\n\n    if (options.agentPrivate && this.agentId) {\n      await this.saveAgentAuthProfile(profileId, profile);\n    } else {\n      await this.saveGlobalAuthProfile(profileId, profile);\n    }\n\n    log.info({ provider, profileId, agentPrivate: options.agentPrivate }, 'Saved API key');\n  }\n\n  /**\n   * Delete a credential profile\n   */\n  async deleteProfile(profileId: string, options: { agentPrivate?: boolean } = {}): Promise<void> {\n    if (options.agentPrivate && this.agentId) {\n      await this.deleteAgentAuthProfile(profileId);\n    } else {\n      await this.deleteGlobalAuthProfile(profileId);\n    }\n\n    log.info({ profileId, agentPrivate: options.agentPrivate }, 'Deleted credential profile');\n  }\n\n  /**\n   * Load OAuth token for a provider.\n   */\n  async loadOAuthToken(provider: string): Promise<OAuthToken | null> {\n    const token = await this.loadOAuthTokenRecord(provider);\n    if (!token) return null;\n\n    if (token.expiresAt && token.expiresAt < Date.now()) {\n      const warnKey = `${provider}:${token.expiresAt}`;\n      if (!warnedExpiredOAuthTokens.has(warnKey)) {\n        warnedExpiredOAuthTokens.add(warnKey);\n        log.warn({ provider, expiresAt: token.expiresAt }, 'OAuth token is expired');\n      }\n      return null;\n    }\n\n    return token;\n  }\n\n  /**\n   * Load the raw OAuth token record, including expired tokens for status UIs.\n   */\n  async loadOAuthTokenRecord(provider: string): Promise<OAuthToken | null> {\n    const normalizedProvider = provider.toLowerCase();\n    const oauthPath = resolveOAuthPath(normalizedProvider);\n\n    try {\n      const content = await readFile(oauthPath, 'utf-8');\n      const token = JSON.parse(content) as OAuthToken;\n      return token.provider === normalizedProvider ? token : null;\n    } catch {\n      return null;\n    }\n  }\n\n  /**\n   * List persisted OAuth tokens without exposing access/refresh values.\n   */\n  async listOAuthTokens(): Promise<Array<Omit<OAuthToken, 'access' | 'refresh'> & { hasAccess: boolean; hasRefresh: boolean }>> {\n    const oauthDir = join(this.credentialsDir, 'oauth');\n    let files: string[];\n    try {\n      files = await readdir(oauthDir);\n    } catch {\n      return [];\n    }\n\n    const tokens: Array<Omit<OAuthToken, 'access' | 'refresh'> & { hasAccess: boolean; hasRefresh: boolean }> = [];\n    for (const file of files) {\n      if (!file.endsWith('.json')) continue;\n      try {\n        const content = await readFile(join(oauthDir, file), 'utf-8');\n        const token = JSON.parse(content) as OAuthToken;\n        if (token.type !== 'oauth' || !token.provider) continue;\n        const { access, refresh, ...safe } = token;\n        tokens.push({ ...safe, hasAccess: Boolean(access?.trim()), hasRefresh: Boolean(refresh?.trim()) });\n      } catch {\n        continue;\n      }\n    }\n    return tokens.sort((a, b) => a.provider.localeCompare(b.provider));\n  }\n\n  /**\n   * Save OAuth token for a provider.\n   */\n  async saveOAuthToken(provider: string, token: Omit<OAuthToken, 'type' | 'provider' | 'updatedAt'>): Promise<void> {\n    const normalizedProvider = provider.toLowerCase();\n    const oauthPath = resolveOAuthPath(normalizedProvider);\n\n    await mkdir(dirname(oauthPath), { recursive: true });\n\n    const fullToken: OAuthToken = {\n      ...token,\n      type: 'oauth',\n      provider: normalizedProvider,\n      updatedAt: new Date().toISOString(),\n    };\n\n    await writeTextAtomic(oauthPath, JSON.stringify(fullToken, null, 2));\n    log.info({ provider: normalizedProvider }, 'Saved OAuth token');\n  }\n\n  /**\n   * Delete the OAuth token persisted for a provider.\n   */\n  async deleteOAuthToken(provider: string): Promise<void> {\n    const normalizedProvider = provider.toLowerCase();\n    const oauthPath = resolveOAuthPath(normalizedProvider);\n    await rm(oauthPath, { force: true });\n    log.info({ provider: normalizedProvider }, 'Deleted OAuth token');\n  }\n\n  /**\n   * Disconnect the default credential for a provider from local storage.\n   */\n  async deleteProviderCredential(provider: string): Promise<void> {\n    const normalizedProvider = provider.toLowerCase();\n    const file = await this.loadAuthProfilesFile();\n    await mkdir(dirname(resolveAuthProfilesPath()), { recursive: true });\n    for (const [profileId, profile] of Object.entries(file.profiles)) {\n      if (profile.provider === normalizedProvider) {\n        delete file.profiles[profileId];\n      }\n    }\n    await writeTextAtomic(resolveAuthProfilesPath(), JSON.stringify(file, null, 2));\n    await this.deleteOAuthToken(normalizedProvider);\n  }\n\n  // ============================================\n  // Private Methods\n  // ============================================\n\n  private async loadFromAgentCredentials(provider: string): Promise<string | null> {\n    if (!this.agentId) return null;\n\n    const profiles = await this.loadAgentAuthProfilesFile();\n    const profile = this.findProfileForProvider(profiles, provider);\n\n    if (!profile) return null;\n    if (profile.envVar) return this.loadFromEnv(profile.envVar) ?? profile.key;\n    return profile.key;\n  }\n\n  private async loadFromGlobalCredentials(provider: string): Promise<string | null> {\n    const profiles = await this.loadAuthProfilesFile();\n    const profile = this.findProfileForProvider(profiles, provider);\n\n    if (!profile) return null;\n    if (profile.envVar) return this.loadFromEnv(profile.envVar) ?? profile.key;\n    return profile.key;\n  }\n\n  private loadFromEnv(envVarName: string): string | null {\n    return process.env[envVarName] || null;\n  }\n\n  private findProfileForProvider(\n    file: AuthProfilesFile,\n    provider: string\n  ): ApiKeyProfile | null {\n    const normalizedProvider = provider.toLowerCase();\n\n    // Look for exact match first\n    for (const [, profile] of Object.entries(file.profiles)) {\n      if (profile.provider === normalizedProvider) {\n        return profile;\n      }\n    }\n\n    return null;\n  }\n\n  private async loadAuthProfilesFile(): Promise<AuthProfilesFile> {\n    const path = resolveAuthProfilesPath();\n\n    try {\n      const content = await readFile(path, 'utf-8');\n      const data = JSON.parse(content);\n      return {\n        version: data.version || 1,\n        profiles: data.profiles || {},\n      };\n    } catch {\n      return { version: 2, profiles: {} };\n    }\n  }\n\n  private async loadAgentAuthProfilesFile(): Promise<AuthProfilesFile> {\n    if (!this.agentId || !this.appConfig) return { version: 2, profiles: {} };\n\n    const path = resolveAgentAuthProfilesPath(this.appConfig, this.agentId);\n\n    try {\n      const content = await readFile(path, 'utf-8');\n      const data = JSON.parse(content);\n      return {\n        version: data.version || 1,\n        profiles: data.profiles || {},\n      };\n    } catch {\n      return { version: 2, profiles: {} };\n    }\n  }\n\n  private async saveGlobalAuthProfile(profileId: string, profile: ApiKeyProfile): Promise<void> {\n    const path = resolveAuthProfilesPath();\n    await mkdir(dirname(path), { recursive: true });\n\n    const file = await this.loadAuthProfilesFile();\n    file.profiles[profileId] = profile;\n\n    await writeTextAtomic(path, JSON.stringify(file, null, 2));\n  }\n\n  private async saveAgentAuthProfile(profileId: string, profile: ApiKeyProfile): Promise<void> {\n    if (!this.agentId || !this.appConfig) throw new Error('Agent ID and appConfig required for agent-private profiles');\n\n    const path = resolveAgentAuthProfilesPath(this.appConfig, this.agentId);\n    await mkdir(dirname(path), { recursive: true });\n\n    const file = await this.loadAgentAuthProfilesFile();\n    file.profiles[profileId] = profile;\n\n    await writeTextAtomic(path, JSON.stringify(file, null, 2));\n  }\n\n  private async deleteGlobalAuthProfile(profileId: string): Promise<void> {\n    const path = resolveAuthProfilesPath();\n    const file = await this.loadAuthProfilesFile();\n\n    delete file.profiles[profileId];\n\n    await writeTextAtomic(path, JSON.stringify(file, null, 2));\n  }\n\n  private async deleteAgentAuthProfile(profileId: string): Promise<void> {\n    if (!this.agentId || !this.appConfig) throw new Error('Agent ID and appConfig required for agent-private profiles');\n\n    const path = resolveAgentAuthProfilesPath(this.appConfig, this.agentId);\n    const file = await this.loadAgentAuthProfilesFile();\n\n    delete file.profiles[profileId];\n\n    await writeTextAtomic(path, JSON.stringify(file, null, 2));\n  }\n}\n\n// ============================================\n// Convenience Functions\n// ============================================\n\nlet defaultResolver: CredentialResolver | null = null;\n\nexport function getCredentialResolver(options?: CredentialResolverOptions): CredentialResolver {\n  if (!defaultResolver || options) {\n    return new CredentialResolver(options);\n  }\n  return defaultResolver;\n}\n\nexport async function resolveApiKey(provider: string, options?: CredentialResolverOptions): Promise<string | null> {\n  const resolver = getCredentialResolver(options);\n  return resolver.resolveApiKey(provider);\n}\n\nexport async function hasCredentials(provider: string, options?: CredentialResolverOptions): Promise<boolean> {\n  const resolver = getCredentialResolver(options);\n  return resolver.hasCredentials(provider);\n}\n"],"mappings":";;;;;;;;;AAgdA,SAAgB,sBAAsB,SAAyD;AAE3F,QAAO,IAAI,mBAAmB,QAAQ;;AAK1C,eAAsB,cAAc,UAAkB,SAA6D;AAEjH,QADiB,sBAAsB,QACxB,CAAC,cAAc,SAAS;;AAGzC,eAAsB,eAAe,UAAkB,SAAuD;AAE5G,QADiB,sBAAsB,QACxB,CAAC,eAAe,SAAS;;;;yBA7dsB;cAEd;gBACU;aAMhC;AAGtB,OAAM,aAAa,cAAc;AACjC,4CAA2B,IAAI,KAAa;AA8CrC,sBAAb,MAAgC;EAC9B;EACA;EACA;EAEA,YAAY,UAAqC,EAAE,EAAE;AACnD,QAAK,iBAAiB,QAAQ,WAC1B,KAAK,QAAQ,UAAU,cAAc,GACrC,uBAAuB;AAC3B,QAAK,UAAU,QAAQ;AACvB,QAAK,YAAY,QAAQ;AACzB,OAAI,KAAK,WAAW,CAAC,KAAK,UACxB,OAAM,IAAI,MAAM,gEAAgE;;;;;;EAQpF,MAAM,cAAc,UAA0C;GAC5D,MAAM,qBAAqB,SAAS,aAAa;AAGjD,OAAI,KAAK,SAAS;IAChB,MAAM,WAAW,MAAM,KAAK,yBAAyB,mBAAmB;AACxE,QAAI,UAAU;AACZ,SAAI,MAAM;MAAE;MAAU,QAAQ;MAAS,EAAE,0CAA0C;AACnF,YAAO;;;GAKX,MAAM,YAAY,MAAM,KAAK,0BAA0B,mBAAmB;AAC1E,OAAI,WAAW;AACb,QAAI,MAAM;KAAE;KAAU,QAAQ;KAAU,EAAE,2CAA2C;AACrF,WAAO;;GAIT,MAAM,aAAa,MAAM,KAAK,eAAe,mBAAmB;AAChE,OAAI,YAAY;AACd,QAAI,MAAM;KAAE;KAAU,QAAQ;KAAS,EAAE,oCAAoC;AAC7E,WAAO,WAAW;;GAIpB,MAAM,SAAS,iBAAiB,mBAAmB;AACnD,OAAI,QAAQ;AACV,QAAI,MAAM;KAAE;KAAU,QAAQ;KAAO,EAAE,oCAAoC;AAC3E,WAAO;;AAGT,UAAO;;;;;EAMT,MAAM,eAAe,UAAoC;AAEvD,UAAO,MADW,KAAK,cAAc,SAAS,KAC/B;;;;;EAMjB,MAAM,oBACJ,UACsD;GACtD,MAAM,qBAAqB,SAAS,aAAa;AAEjD,OAAI,KAAK;QAEH,MADmB,KAAK,yBAAyB,mBAAmB,CAC1D,QAAO;;AAIvB,OAAI,MADoB,KAAK,0BAA0B,mBAAmB,CAC3D,QAAO;AAGtB,OAAI,MADqB,KAAK,eAAe,mBAAmB,CAChD,QAAO;AAEvB,OAAI,iBAAiB,mBAAmB,CAAE,QAAO;AAEjD,UAAO;;;;;EAMT,MAAM,eAA2F;GAC/F,MAAM,WAA8E,EAAE;GAGtF,MAAM,iBAAiB,MAAM,KAAK,sBAAsB;AACxD,QAAK,MAAM,CAAC,IAAI,YAAY,OAAO,QAAQ,eAAe,SAAS,CACjE,UAAS,KAAK;IAAE,GAAG;IAAS;IAAI,QAAQ;IAAU,CAAC;AAIrD,OAAI,KAAK,SAAS;IAChB,MAAM,gBAAgB,MAAM,KAAK,2BAA2B;AAC5D,SAAK,MAAM,CAAC,IAAI,YAAY,OAAO,QAAQ,cAAc,SAAS,CAChE,UAAS,KAAK;KAAE,GAAG;KAAS;KAAI,QAAQ;KAAS,CAAC;;AAItD,UAAO;;;;;;EAOT,MAAM,0BAA0B,UAA0C;GACxE,MAAM,qBAAqB,SAAS,aAAa;GACjD,MAAM,WAAW,MAAM,KAAK,sBAAsB;AAGlD,UAFgB,KAAK,uBAAuB,UAAU,mBACnC,EAAE,KAAK,MAAM,IAClB;;;;;EAMhB,MAAM,WACJ,UACA,KACA,UAII,EAAE,EACS;GACf,MAAM,qBAAqB,SAAS,aAAa;GACjD,MAAM,YAAY,QAAQ,cACtB,GAAG,mBAAmB,GAAG,QAAQ,gBACjC,GAAG,mBAAmB;GAE1B,MAAM,UAAyB;IAC7B,MAAM;IACN,UAAU;IACV,aAAa,QAAQ;IACrB,QAAQ,QAAQ,UAAU;IAC1B;IACD;AAED,OAAI,QAAQ,gBAAgB,KAAK,QAC/B,OAAM,KAAK,qBAAqB,WAAW,QAAQ;OAEnD,OAAM,KAAK,sBAAsB,WAAW,QAAQ;AAGtD,OAAI,KAAK;IAAE;IAAU;IAAW,cAAc,QAAQ;IAAc,EAAE,gBAAgB;;;;;EAMxF,MAAM,cAAc,WAAmB,UAAsC,EAAE,EAAiB;AAC9F,OAAI,QAAQ,gBAAgB,KAAK,QAC/B,OAAM,KAAK,uBAAuB,UAAU;OAE5C,OAAM,KAAK,wBAAwB,UAAU;AAG/C,OAAI,KAAK;IAAE;IAAW,cAAc,QAAQ;IAAc,EAAE,6BAA6B;;;;;EAM3F,MAAM,eAAe,UAA8C;GACjE,MAAM,QAAQ,MAAM,KAAK,qBAAqB,SAAS;AACvD,OAAI,CAAC,MAAO,QAAO;AAEnB,OAAI,MAAM,aAAa,MAAM,YAAY,KAAK,KAAK,EAAE;IACnD,MAAM,UAAU,GAAG,SAAS,GAAG,MAAM;AACrC,QAAI,CAAC,yBAAyB,IAAI,QAAQ,EAAE;AAC1C,8BAAyB,IAAI,QAAQ;AACrC,SAAI,KAAK;MAAE;MAAU,WAAW,MAAM;MAAW,EAAE,yBAAyB;;AAE9E,WAAO;;AAGT,UAAO;;;;;EAMT,MAAM,qBAAqB,UAA8C;GACvE,MAAM,qBAAqB,SAAS,aAAa;GACjD,MAAM,YAAY,iBAAiB,mBAAmB;AAEtD,OAAI;IACF,MAAM,UAAU,MAAM,SAAS,WAAW,QAAQ;IAClD,MAAM,QAAQ,KAAK,MAAM,QAAQ;AACjC,WAAO,MAAM,aAAa,qBAAqB,QAAQ;WACjD;AACN,WAAO;;;;;;EAOX,MAAM,kBAAwH;GAC5H,MAAM,WAAW,KAAK,KAAK,gBAAgB,QAAQ;GACnD,IAAI;AACJ,OAAI;AACF,YAAQ,MAAM,QAAQ,SAAS;WACzB;AACN,WAAO,EAAE;;GAGX,MAAM,SAAsG,EAAE;AAC9G,QAAK,MAAM,QAAQ,OAAO;AACxB,QAAI,CAAC,KAAK,SAAS,QAAQ,CAAE;AAC7B,QAAI;KACF,MAAM,UAAU,MAAM,SAAS,KAAK,UAAU,KAAK,EAAE,QAAQ;KAC7D,MAAM,QAAQ,KAAK,MAAM,QAAQ;AACjC,SAAI,MAAM,SAAS,WAAW,CAAC,MAAM,SAAU;KAC/C,MAAM,EAAE,QAAQ,SAAS,GAAG,SAAS;AACrC,YAAO,KAAK;MAAE,GAAG;MAAM,WAAW,QAAQ,QAAQ,MAAM,CAAC;MAAE,YAAY,QAAQ,SAAS,MAAM,CAAC;MAAE,CAAC;YAC5F;AACN;;;AAGJ,UAAO,OAAO,MAAM,GAAG,MAAM,EAAE,SAAS,cAAc,EAAE,SAAS,CAAC;;;;;EAMpE,MAAM,eAAe,UAAkB,OAA2E;GAChH,MAAM,qBAAqB,SAAS,aAAa;GACjD,MAAM,YAAY,iBAAiB,mBAAmB;AAEtD,SAAM,MAAM,QAAQ,UAAU,EAAE,EAAE,WAAW,MAAM,CAAC;GAEpD,MAAM,YAAwB;IAC5B,GAAG;IACH,MAAM;IACN,UAAU;IACV,4BAAW,IAAI,MAAM,EAAC,aAAa;IACpC;AAED,SAAM,gBAAgB,WAAW,KAAK,UAAU,WAAW,MAAM,EAAE,CAAC;AACpE,OAAI,KAAK,EAAE,UAAU,oBAAoB,EAAE,oBAAoB;;;;;EAMjE,MAAM,iBAAiB,UAAiC;GACtD,MAAM,qBAAqB,SAAS,aAAa;AAEjD,SAAM,GADY,iBAAiB,mBACjB,EAAE,EAAE,OAAO,MAAM,CAAC;AACpC,OAAI,KAAK,EAAE,UAAU,oBAAoB,EAAE,sBAAsB;;;;;EAMnE,MAAM,yBAAyB,UAAiC;GAC9D,MAAM,qBAAqB,SAAS,aAAa;GACjD,MAAM,OAAO,MAAM,KAAK,sBAAsB;AAC9C,SAAM,MAAM,QAAQ,yBAAyB,CAAC,EAAE,EAAE,WAAW,MAAM,CAAC;AACpE,QAAK,MAAM,CAAC,WAAW,YAAY,OAAO,QAAQ,KAAK,SAAS,CAC9D,KAAI,QAAQ,aAAa,mBACvB,QAAO,KAAK,SAAS;AAGzB,SAAM,gBAAgB,yBAAyB,EAAE,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;AAC/E,SAAM,KAAK,iBAAiB,mBAAmB;;EAOjD,MAAc,yBAAyB,UAA0C;AAC/E,OAAI,CAAC,KAAK,QAAS,QAAO;GAE1B,MAAM,WAAW,MAAM,KAAK,2BAA2B;GACvD,MAAM,UAAU,KAAK,uBAAuB,UAAU,SAAS;AAE/D,OAAI,CAAC,QAAS,QAAO;AACrB,OAAI,QAAQ,OAAQ,QAAO,KAAK,YAAY,QAAQ,OAAO,IAAI,QAAQ;AACvE,UAAO,QAAQ;;EAGjB,MAAc,0BAA0B,UAA0C;GAChF,MAAM,WAAW,MAAM,KAAK,sBAAsB;GAClD,MAAM,UAAU,KAAK,uBAAuB,UAAU,SAAS;AAE/D,OAAI,CAAC,QAAS,QAAO;AACrB,OAAI,QAAQ,OAAQ,QAAO,KAAK,YAAY,QAAQ,OAAO,IAAI,QAAQ;AACvE,UAAO,QAAQ;;EAGjB,YAAoB,YAAmC;AACrD,UAAO,QAAQ,IAAI,eAAe;;EAGpC,uBACE,MACA,UACsB;GACtB,MAAM,qBAAqB,SAAS,aAAa;AAGjD,QAAK,MAAM,GAAG,YAAY,OAAO,QAAQ,KAAK,SAAS,CACrD,KAAI,QAAQ,aAAa,mBACvB,QAAO;AAIX,UAAO;;EAGT,MAAc,uBAAkD;GAC9D,MAAM,OAAO,yBAAyB;AAEtC,OAAI;IACF,MAAM,UAAU,MAAM,SAAS,MAAM,QAAQ;IAC7C,MAAM,OAAO,KAAK,MAAM,QAAQ;AAChC,WAAO;KACL,SAAS,KAAK,WAAW;KACzB,UAAU,KAAK,YAAY,EAAE;KAC9B;WACK;AACN,WAAO;KAAE,SAAS;KAAG,UAAU,EAAE;KAAE;;;EAIvC,MAAc,4BAAuD;AACnE,OAAI,CAAC,KAAK,WAAW,CAAC,KAAK,UAAW,QAAO;IAAE,SAAS;IAAG,UAAU,EAAE;IAAE;GAEzE,MAAM,OAAO,6BAA6B,KAAK,WAAW,KAAK,QAAQ;AAEvE,OAAI;IACF,MAAM,UAAU,MAAM,SAAS,MAAM,QAAQ;IAC7C,MAAM,OAAO,KAAK,MAAM,QAAQ;AAChC,WAAO;KACL,SAAS,KAAK,WAAW;KACzB,UAAU,KAAK,YAAY,EAAE;KAC9B;WACK;AACN,WAAO;KAAE,SAAS;KAAG,UAAU,EAAE;KAAE;;;EAIvC,MAAc,sBAAsB,WAAmB,SAAuC;GAC5F,MAAM,OAAO,yBAAyB;AACtC,SAAM,MAAM,QAAQ,KAAK,EAAE,EAAE,WAAW,MAAM,CAAC;GAE/C,MAAM,OAAO,MAAM,KAAK,sBAAsB;AAC9C,QAAK,SAAS,aAAa;AAE3B,SAAM,gBAAgB,MAAM,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;;EAG5D,MAAc,qBAAqB,WAAmB,SAAuC;AAC3F,OAAI,CAAC,KAAK,WAAW,CAAC,KAAK,UAAW,OAAM,IAAI,MAAM,6DAA6D;GAEnH,MAAM,OAAO,6BAA6B,KAAK,WAAW,KAAK,QAAQ;AACvE,SAAM,MAAM,QAAQ,KAAK,EAAE,EAAE,WAAW,MAAM,CAAC;GAE/C,MAAM,OAAO,MAAM,KAAK,2BAA2B;AACnD,QAAK,SAAS,aAAa;AAE3B,SAAM,gBAAgB,MAAM,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;;EAG5D,MAAc,wBAAwB,WAAkC;GACtE,MAAM,OAAO,yBAAyB;GACtC,MAAM,OAAO,MAAM,KAAK,sBAAsB;AAE9C,UAAO,KAAK,SAAS;AAErB,SAAM,gBAAgB,MAAM,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;;EAG5D,MAAc,uBAAuB,WAAkC;AACrE,OAAI,CAAC,KAAK,WAAW,CAAC,KAAK,UAAW,OAAM,IAAI,MAAM,6DAA6D;GAEnH,MAAM,OAAO,6BAA6B,KAAK,WAAW,KAAK,QAAQ;GACvE,MAAM,OAAO,MAAM,KAAK,2BAA2B;AAEnD,UAAO,KAAK,SAAS;AAErB,SAAM,gBAAgB,MAAM,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC"}
+{"version":3,"file":"credentials.js","names":[],"sources":["../../../src/auth/credentials.ts"],"sourcesContent":["import { readFile, mkdir, rm, readdir } from 'fs/promises';\nimport { writeTextAtomic } from '../infra/write-file-atomic.js';\nimport { join, dirname } from 'path';\nimport { createLogger } from '../utils/logger.js';\nimport { getApiKeyFromEnv } from '../providers/env-keys.js';\nimport {\n  resolveCredentialsDir,\n  resolveAuthProfilesPath,\n  resolveAgentAuthProfilesPath,\n  resolveOAuthPath,\n} from '../config/paths.js';\nimport type { Config } from '../config/schema.js';\n\nconst log = createLogger('Credentials');\nconst warnedExpiredOAuthTokens = new Set<string>();\n\n// ============================================\n// Types\n// ============================================\n\nexport type CredentialType = 'api_key' | 'oauth';\n\nexport interface ApiKeyProfile {\n  type: 'api_key';\n  provider: string;\n  profileName?: string;\n  envVar?: string | null;\n  key: string | null;\n}\n\nexport interface OAuthToken {\n  type: 'oauth';\n  provider: string;\n  access: string;\n  refresh?: string;\n  expiresAt?: number;\n  scope?: string[];\n  createdAt: string;\n  updatedAt: string;\n}\n\nexport type CredentialProfile = ApiKeyProfile;\n\nexport interface AuthProfilesFile {\n  version: number;\n  profiles: Record<string, ApiKeyProfile>;\n}\n\n// ============================================\n// Credential Resolver\n// ============================================\n\nexport interface CredentialResolverOptions {\n  stateDir?: string;\n  /** When set, per-agent auth profiles are read from `resolveAgentAuthProfilesPath(appConfig, agentId)`. */\n  agentId?: string;\n  /** Required when `agentId` is set. */\n  appConfig?: Config;\n}\n\nexport class CredentialResolver {\n  private readonly credentialsDir: string;\n  private readonly agentId?: string;\n  private readonly appConfig?: Config;\n\n  constructor(options: CredentialResolverOptions = {}) {\n    this.credentialsDir = options.stateDir\n      ? join(options.stateDir, 'credentials')\n      : resolveCredentialsDir();\n    this.agentId = options.agentId;\n    this.appConfig = options.appConfig;\n    if (this.agentId && !this.appConfig) {\n      throw new Error('CredentialResolver: appConfig is required when agentId is set');\n    }\n  }\n\n  /**\n   * Resolve API key for a provider\n   * Priority: Agent private > Global > OAuth > Environment\n   */\n  async resolveApiKey(provider: string): Promise<string | null> {\n    const normalizedProvider = provider.toLowerCase();\n\n    // 1. Try agent private credentials\n    if (this.agentId) {\n      const agentKey = await this.loadFromAgentCredentials(normalizedProvider);\n      if (agentKey) {\n        log.debug({ provider, source: 'agent' }, 'Resolved API key from agent credentials');\n        return agentKey;\n      }\n    }\n\n    // 2. Try global credentials\n    const globalKey = await this.loadFromGlobalCredentials(normalizedProvider);\n    if (globalKey) {\n      log.debug({ provider, source: 'global' }, 'Resolved API key from global credentials');\n      return globalKey;\n    }\n\n    // 3. Try OAuth token (convert to Bearer)\n    const oauthToken = await this.loadOAuthToken(normalizedProvider);\n    if (oauthToken) {\n      log.debug({ provider, source: 'oauth' }, 'Resolved API key from OAuth token');\n      return oauthToken.access;\n    }\n\n    // 4. Environment variables (see `src/providers/env-keys.ts`)\n    const envKey = getApiKeyFromEnv(normalizedProvider);\n    if (envKey) {\n      log.debug({ provider, source: 'env' }, 'Resolved API key from environment');\n      return envKey;\n    }\n\n    return null;\n  }\n\n  /**\n   * Check if a provider has credentials configured\n   */\n  async hasCredentials(provider: string): Promise<boolean> {\n    const key = await this.resolveApiKey(provider);\n    return key !== null;\n  }\n\n  /**\n   * Which step in {@link resolveApiKey} would supply the key (no secret material).\n   */\n  async resolveApiKeySource(\n    provider: string,\n  ): Promise<'agent' | 'global' | 'oauth' | 'env' | null> {\n    const normalizedProvider = provider.toLowerCase();\n\n    if (this.agentId) {\n      const agentKey = await this.loadFromAgentCredentials(normalizedProvider);\n      if (agentKey) return 'agent';\n    }\n\n    const globalKey = await this.loadFromGlobalCredentials(normalizedProvider);\n    if (globalKey) return 'global';\n\n    const oauthToken = await this.loadOAuthToken(normalizedProvider);\n    if (oauthToken) return 'oauth';\n\n    if (getApiKeyFromEnv(normalizedProvider)) return 'env';\n\n    return null;\n  }\n\n  /**\n   * List all available credential profiles\n   */\n  async listProfiles(): Promise<Array<ApiKeyProfile & { id: string; source: 'agent' | 'global' }>> {\n    const profiles: Array<ApiKeyProfile & { id: string; source: 'agent' | 'global' }> = [];\n\n    // Global profiles\n    const globalProfiles = await this.loadAuthProfilesFile();\n    for (const [id, profile] of Object.entries(globalProfiles.profiles)) {\n      profiles.push({ ...profile, id, source: 'global' });\n    }\n\n    // Agent private profiles\n    if (this.agentId) {\n      const agentProfiles = await this.loadAgentAuthProfilesFile();\n      for (const [id, profile] of Object.entries(agentProfiles.profiles)) {\n        profiles.push({ ...profile, id, source: 'agent' });\n      }\n    }\n\n    return profiles;\n  }\n\n  /**\n   * Plaintext API key from global auth profiles only (no env/oauth fallback).\n   * Used by the gateway console reveal endpoint.\n   */\n  async revealGatewayStoredApiKey(provider: string): Promise<string | null> {\n    const normalizedProvider = provider.toLowerCase();\n    const profiles = await this.loadAuthProfilesFile();\n    const profile = this.findProfileForProvider(profiles, normalizedProvider);\n    const key = profile?.key?.trim();\n    return key || null;\n  }\n\n  /**\n   * Save an API key profile\n   */\n  async saveApiKey(\n    provider: string,\n    key: string,\n    options: {\n      profileName?: string;\n      envVar?: string | null;\n      agentPrivate?: boolean;\n    } = {}\n  ): Promise<void> {\n    const normalizedProvider = provider.toLowerCase();\n    const profileId = options.profileName\n      ? `${normalizedProvider}:${options.profileName}`\n      : `${normalizedProvider}:default`;\n\n    const profile: ApiKeyProfile = {\n      type: 'api_key',\n      provider: normalizedProvider,\n      profileName: options.profileName,\n      envVar: options.envVar ?? null,\n      key,\n    };\n\n    if (options.agentPrivate && this.agentId) {\n      await this.saveAgentAuthProfile(profileId, profile);\n    } else {\n      await this.saveGlobalAuthProfile(profileId, profile);\n    }\n\n    log.info({ provider, profileId, agentPrivate: options.agentPrivate }, 'Saved API key');\n  }\n\n  /**\n   * Delete a credential profile\n   */\n  async deleteProfile(profileId: string, options: { agentPrivate?: boolean } = {}): Promise<void> {\n    if (options.agentPrivate && this.agentId) {\n      await this.deleteAgentAuthProfile(profileId);\n    } else {\n      await this.deleteGlobalAuthProfile(profileId);\n    }\n\n    log.info({ profileId, agentPrivate: options.agentPrivate }, 'Deleted credential profile');\n  }\n\n  /**\n   * Load OAuth token for a provider.\n   */\n  async loadOAuthToken(provider: string): Promise<OAuthToken | null> {\n    const token = await this.loadOAuthTokenRecord(provider);\n    if (!token) return null;\n\n    if (token.expiresAt && token.expiresAt < Date.now()) {\n      const warnKey = `${provider}:${token.expiresAt}`;\n      if (!warnedExpiredOAuthTokens.has(warnKey)) {\n        warnedExpiredOAuthTokens.add(warnKey);\n        log.warn({ provider, expiresAt: token.expiresAt }, 'OAuth token is expired');\n      }\n      return null;\n    }\n\n    return token;\n  }\n\n  /**\n   * Load the raw OAuth token record, including expired tokens for status UIs.\n   */\n  async loadOAuthTokenRecord(provider: string): Promise<OAuthToken | null> {\n    const normalizedProvider = provider.toLowerCase();\n    const oauthPath = resolveOAuthPath(normalizedProvider);\n\n    try {\n      const content = await readFile(oauthPath, 'utf-8');\n      const token = JSON.parse(content) as OAuthToken;\n      return token.provider === normalizedProvider ? token : null;\n    } catch {\n      return null;\n    }\n  }\n\n  /**\n   * List persisted OAuth tokens without exposing access/refresh values.\n   */\n  async listOAuthTokens(): Promise<Array<Omit<OAuthToken, 'access' | 'refresh'> & { hasAccess: boolean; hasRefresh: boolean }>> {\n    const oauthDir = join(this.credentialsDir, 'oauth');\n    let files: string[];\n    try {\n      files = await readdir(oauthDir);\n    } catch {\n      return [];\n    }\n\n    const tokens: Array<Omit<OAuthToken, 'access' | 'refresh'> & { hasAccess: boolean; hasRefresh: boolean }> = [];\n    for (const file of files) {\n      if (!file.endsWith('.json')) continue;\n      try {\n        const content = await readFile(join(oauthDir, file), 'utf-8');\n        const token = JSON.parse(content) as OAuthToken;\n        if (token.type !== 'oauth' || !token.provider) continue;\n        const { access, refresh, ...safe } = token;\n        tokens.push({ ...safe, hasAccess: Boolean(access?.trim()), hasRefresh: Boolean(refresh?.trim()) });\n      } catch {\n        continue;\n      }\n    }\n    return tokens.sort((a, b) => a.provider.localeCompare(b.provider));\n  }\n\n  /**\n   * Save OAuth token for a provider.\n   */\n  async saveOAuthToken(provider: string, token: Omit<OAuthToken, 'type' | 'provider' | 'updatedAt'>): Promise<void> {\n    const normalizedProvider = provider.toLowerCase();\n    const oauthPath = resolveOAuthPath(normalizedProvider);\n\n    await mkdir(dirname(oauthPath), { recursive: true });\n\n    const fullToken: OAuthToken = {\n      ...token,\n      type: 'oauth',\n      provider: normalizedProvider,\n      updatedAt: new Date().toISOString(),\n    };\n\n    await writeTextAtomic(oauthPath, JSON.stringify(fullToken, null, 2));\n    log.info({ provider: normalizedProvider }, 'Saved OAuth token');\n  }\n\n  /**\n   * Delete the OAuth token persisted for a provider.\n   */\n  async deleteOAuthToken(provider: string): Promise<void> {\n    const normalizedProvider = provider.toLowerCase();\n    const oauthPath = resolveOAuthPath(normalizedProvider);\n    await rm(oauthPath, { force: true });\n    log.info({ provider: normalizedProvider }, 'Deleted OAuth token');\n  }\n\n  /**\n   * Disconnect the default credential for a provider from local storage.\n   */\n  async deleteProviderCredential(provider: string): Promise<void> {\n    const normalizedProvider = provider.toLowerCase();\n    const file = await this.loadAuthProfilesFile();\n    await mkdir(dirname(resolveAuthProfilesPath()), { recursive: true });\n    for (const [profileId, profile] of Object.entries(file.profiles)) {\n      if (profile.provider === normalizedProvider) {\n        delete file.profiles[profileId];\n      }\n    }\n    await writeTextAtomic(resolveAuthProfilesPath(), JSON.stringify(file, null, 2));\n    await this.deleteOAuthToken(normalizedProvider);\n  }\n\n  // ============================================\n  // Private Methods\n  // ============================================\n\n  private async loadFromAgentCredentials(provider: string): Promise<string | null> {\n    if (!this.agentId) return null;\n\n    const profiles = await this.loadAgentAuthProfilesFile();\n    const profile = this.findProfileForProvider(profiles, provider);\n\n    if (!profile) return null;\n    if (profile.envVar) return this.loadFromEnv(profile.envVar) ?? profile.key;\n    return profile.key;\n  }\n\n  private async loadFromGlobalCredentials(provider: string): Promise<string | null> {\n    const profiles = await this.loadAuthProfilesFile();\n    const profile = this.findProfileForProvider(profiles, provider);\n\n    if (!profile) return null;\n    if (profile.envVar) return this.loadFromEnv(profile.envVar) ?? profile.key;\n    return profile.key;\n  }\n\n  private loadFromEnv(envVarName: string): string | null {\n    return process.env[envVarName] || null;\n  }\n\n  private findProfileForProvider(\n    file: AuthProfilesFile,\n    provider: string\n  ): ApiKeyProfile | null {\n    const normalizedProvider = provider.toLowerCase();\n\n    // Look for exact match first\n    for (const [, profile] of Object.entries(file.profiles)) {\n      if (profile.provider === normalizedProvider) {\n        return profile;\n      }\n    }\n\n    return null;\n  }\n\n  private async loadAuthProfilesFile(): Promise<AuthProfilesFile> {\n    const path = resolveAuthProfilesPath();\n\n    try {\n      const content = await readFile(path, 'utf-8');\n      const data = JSON.parse(content);\n      return {\n        version: data.version || 1,\n        profiles: data.profiles || {},\n      };\n    } catch {\n      return { version: 2, profiles: {} };\n    }\n  }\n\n  private async loadAgentAuthProfilesFile(): Promise<AuthProfilesFile> {\n    if (!this.agentId || !this.appConfig) return { version: 2, profiles: {} };\n\n    const path = resolveAgentAuthProfilesPath(this.appConfig, this.agentId);\n\n    try {\n      const content = await readFile(path, 'utf-8');\n      const data = JSON.parse(content);\n      return {\n        version: data.version || 1,\n        profiles: data.profiles || {},\n      };\n    } catch {\n      return { version: 2, profiles: {} };\n    }\n  }\n\n  private async saveGlobalAuthProfile(profileId: string, profile: ApiKeyProfile): Promise<void> {\n    const path = resolveAuthProfilesPath();\n    await mkdir(dirname(path), { recursive: true });\n\n    const file = await this.loadAuthProfilesFile();\n    file.profiles[profileId] = profile;\n\n    await writeTextAtomic(path, JSON.stringify(file, null, 2));\n  }\n\n  private async saveAgentAuthProfile(profileId: string, profile: ApiKeyProfile): Promise<void> {\n    if (!this.agentId || !this.appConfig) throw new Error('Agent ID and appConfig required for agent-private profiles');\n\n    const path = resolveAgentAuthProfilesPath(this.appConfig, this.agentId);\n    await mkdir(dirname(path), { recursive: true });\n\n    const file = await this.loadAgentAuthProfilesFile();\n    file.profiles[profileId] = profile;\n\n    await writeTextAtomic(path, JSON.stringify(file, null, 2));\n  }\n\n  private async deleteGlobalAuthProfile(profileId: string): Promise<void> {\n    const path = resolveAuthProfilesPath();\n    const file = await this.loadAuthProfilesFile();\n\n    delete file.profiles[profileId];\n\n    await writeTextAtomic(path, JSON.stringify(file, null, 2));\n  }\n\n  private async deleteAgentAuthProfile(profileId: string): Promise<void> {\n    if (!this.agentId || !this.appConfig) throw new Error('Agent ID and appConfig required for agent-private profiles');\n\n    const path = resolveAgentAuthProfilesPath(this.appConfig, this.agentId);\n    const file = await this.loadAgentAuthProfilesFile();\n\n    delete file.profiles[profileId];\n\n    await writeTextAtomic(path, JSON.stringify(file, null, 2));\n  }\n}\n\n// ============================================\n// Convenience Functions\n// ============================================\n\nlet defaultResolver: CredentialResolver | null = null;\n\nexport function getCredentialResolver(options?: CredentialResolverOptions): CredentialResolver {\n  if (options) return new CredentialResolver(options);\n  defaultResolver ??= new CredentialResolver();\n  return defaultResolver;\n}\n\nexport async function resolveApiKey(provider: string, options?: CredentialResolverOptions): Promise<string | null> {\n  const resolver = getCredentialResolver(options);\n  return resolver.resolveApiKey(provider);\n}\n\nexport async function hasCredentials(provider: string, options?: CredentialResolverOptions): Promise<boolean> {\n  const resolver = getCredentialResolver(options);\n  return resolver.hasCredentials(provider);\n}\n"],"mappings":";;;;;;;;;AAgdA,SAAgB,sBAAsB,SAAyD;AAC7F,KAAI,QAAS,QAAO,IAAI,mBAAmB,QAAQ;AACnD,qBAAoB,IAAI,oBAAoB;AAC5C,QAAO;;AAGT,eAAsB,cAAc,UAAkB,SAA6D;AAEjH,QADiB,sBAAsB,QACxB,CAAC,cAAc,SAAS;;AAGzC,eAAsB,eAAe,UAAkB,SAAuD;AAE5G,QADiB,sBAAsB,QACxB,CAAC,eAAe,SAAS;;;;yBA5dsB;cAEd;gBACU;aAMhC;AAGtB,OAAM,aAAa,cAAc;AACjC,4CAA2B,IAAI,KAAa;AA8CrC,sBAAb,MAAgC;EAC9B;EACA;EACA;EAEA,YAAY,UAAqC,EAAE,EAAE;AACnD,QAAK,iBAAiB,QAAQ,WAC1B,KAAK,QAAQ,UAAU,cAAc,GACrC,uBAAuB;AAC3B,QAAK,UAAU,QAAQ;AACvB,QAAK,YAAY,QAAQ;AACzB,OAAI,KAAK,WAAW,CAAC,KAAK,UACxB,OAAM,IAAI,MAAM,gEAAgE;;;;;;EAQpF,MAAM,cAAc,UAA0C;GAC5D,MAAM,qBAAqB,SAAS,aAAa;AAGjD,OAAI,KAAK,SAAS;IAChB,MAAM,WAAW,MAAM,KAAK,yBAAyB,mBAAmB;AACxE,QAAI,UAAU;AACZ,SAAI,MAAM;MAAE;MAAU,QAAQ;MAAS,EAAE,0CAA0C;AACnF,YAAO;;;GAKX,MAAM,YAAY,MAAM,KAAK,0BAA0B,mBAAmB;AAC1E,OAAI,WAAW;AACb,QAAI,MAAM;KAAE;KAAU,QAAQ;KAAU,EAAE,2CAA2C;AACrF,WAAO;;GAIT,MAAM,aAAa,MAAM,KAAK,eAAe,mBAAmB;AAChE,OAAI,YAAY;AACd,QAAI,MAAM;KAAE;KAAU,QAAQ;KAAS,EAAE,oCAAoC;AAC7E,WAAO,WAAW;;GAIpB,MAAM,SAAS,iBAAiB,mBAAmB;AACnD,OAAI,QAAQ;AACV,QAAI,MAAM;KAAE;KAAU,QAAQ;KAAO,EAAE,oCAAoC;AAC3E,WAAO;;AAGT,UAAO;;;;;EAMT,MAAM,eAAe,UAAoC;AAEvD,UAAO,MADW,KAAK,cAAc,SAAS,KAC/B;;;;;EAMjB,MAAM,oBACJ,UACsD;GACtD,MAAM,qBAAqB,SAAS,aAAa;AAEjD,OAAI,KAAK;QAEH,MADmB,KAAK,yBAAyB,mBAAmB,CAC1D,QAAO;;AAIvB,OAAI,MADoB,KAAK,0BAA0B,mBAAmB,CAC3D,QAAO;AAGtB,OAAI,MADqB,KAAK,eAAe,mBAAmB,CAChD,QAAO;AAEvB,OAAI,iBAAiB,mBAAmB,CAAE,QAAO;AAEjD,UAAO;;;;;EAMT,MAAM,eAA2F;GAC/F,MAAM,WAA8E,EAAE;GAGtF,MAAM,iBAAiB,MAAM,KAAK,sBAAsB;AACxD,QAAK,MAAM,CAAC,IAAI,YAAY,OAAO,QAAQ,eAAe,SAAS,CACjE,UAAS,KAAK;IAAE,GAAG;IAAS;IAAI,QAAQ;IAAU,CAAC;AAIrD,OAAI,KAAK,SAAS;IAChB,MAAM,gBAAgB,MAAM,KAAK,2BAA2B;AAC5D,SAAK,MAAM,CAAC,IAAI,YAAY,OAAO,QAAQ,cAAc,SAAS,CAChE,UAAS,KAAK;KAAE,GAAG;KAAS;KAAI,QAAQ;KAAS,CAAC;;AAItD,UAAO;;;;;;EAOT,MAAM,0BAA0B,UAA0C;GACxE,MAAM,qBAAqB,SAAS,aAAa;GACjD,MAAM,WAAW,MAAM,KAAK,sBAAsB;AAGlD,UAFgB,KAAK,uBAAuB,UAAU,mBACnC,EAAE,KAAK,MAAM,IAClB;;;;;EAMhB,MAAM,WACJ,UACA,KACA,UAII,EAAE,EACS;GACf,MAAM,qBAAqB,SAAS,aAAa;GACjD,MAAM,YAAY,QAAQ,cACtB,GAAG,mBAAmB,GAAG,QAAQ,gBACjC,GAAG,mBAAmB;GAE1B,MAAM,UAAyB;IAC7B,MAAM;IACN,UAAU;IACV,aAAa,QAAQ;IACrB,QAAQ,QAAQ,UAAU;IAC1B;IACD;AAED,OAAI,QAAQ,gBAAgB,KAAK,QAC/B,OAAM,KAAK,qBAAqB,WAAW,QAAQ;OAEnD,OAAM,KAAK,sBAAsB,WAAW,QAAQ;AAGtD,OAAI,KAAK;IAAE;IAAU;IAAW,cAAc,QAAQ;IAAc,EAAE,gBAAgB;;;;;EAMxF,MAAM,cAAc,WAAmB,UAAsC,EAAE,EAAiB;AAC9F,OAAI,QAAQ,gBAAgB,KAAK,QAC/B,OAAM,KAAK,uBAAuB,UAAU;OAE5C,OAAM,KAAK,wBAAwB,UAAU;AAG/C,OAAI,KAAK;IAAE;IAAW,cAAc,QAAQ;IAAc,EAAE,6BAA6B;;;;;EAM3F,MAAM,eAAe,UAA8C;GACjE,MAAM,QAAQ,MAAM,KAAK,qBAAqB,SAAS;AACvD,OAAI,CAAC,MAAO,QAAO;AAEnB,OAAI,MAAM,aAAa,MAAM,YAAY,KAAK,KAAK,EAAE;IACnD,MAAM,UAAU,GAAG,SAAS,GAAG,MAAM;AACrC,QAAI,CAAC,yBAAyB,IAAI,QAAQ,EAAE;AAC1C,8BAAyB,IAAI,QAAQ;AACrC,SAAI,KAAK;MAAE;MAAU,WAAW,MAAM;MAAW,EAAE,yBAAyB;;AAE9E,WAAO;;AAGT,UAAO;;;;;EAMT,MAAM,qBAAqB,UAA8C;GACvE,MAAM,qBAAqB,SAAS,aAAa;GACjD,MAAM,YAAY,iBAAiB,mBAAmB;AAEtD,OAAI;IACF,MAAM,UAAU,MAAM,SAAS,WAAW,QAAQ;IAClD,MAAM,QAAQ,KAAK,MAAM,QAAQ;AACjC,WAAO,MAAM,aAAa,qBAAqB,QAAQ;WACjD;AACN,WAAO;;;;;;EAOX,MAAM,kBAAwH;GAC5H,MAAM,WAAW,KAAK,KAAK,gBAAgB,QAAQ;GACnD,IAAI;AACJ,OAAI;AACF,YAAQ,MAAM,QAAQ,SAAS;WACzB;AACN,WAAO,EAAE;;GAGX,MAAM,SAAsG,EAAE;AAC9G,QAAK,MAAM,QAAQ,OAAO;AACxB,QAAI,CAAC,KAAK,SAAS,QAAQ,CAAE;AAC7B,QAAI;KACF,MAAM,UAAU,MAAM,SAAS,KAAK,UAAU,KAAK,EAAE,QAAQ;KAC7D,MAAM,QAAQ,KAAK,MAAM,QAAQ;AACjC,SAAI,MAAM,SAAS,WAAW,CAAC,MAAM,SAAU;KAC/C,MAAM,EAAE,QAAQ,SAAS,GAAG,SAAS;AACrC,YAAO,KAAK;MAAE,GAAG;MAAM,WAAW,QAAQ,QAAQ,MAAM,CAAC;MAAE,YAAY,QAAQ,SAAS,MAAM,CAAC;MAAE,CAAC;YAC5F;AACN;;;AAGJ,UAAO,OAAO,MAAM,GAAG,MAAM,EAAE,SAAS,cAAc,EAAE,SAAS,CAAC;;;;;EAMpE,MAAM,eAAe,UAAkB,OAA2E;GAChH,MAAM,qBAAqB,SAAS,aAAa;GACjD,MAAM,YAAY,iBAAiB,mBAAmB;AAEtD,SAAM,MAAM,QAAQ,UAAU,EAAE,EAAE,WAAW,MAAM,CAAC;GAEpD,MAAM,YAAwB;IAC5B,GAAG;IACH,MAAM;IACN,UAAU;IACV,4BAAW,IAAI,MAAM,EAAC,aAAa;IACpC;AAED,SAAM,gBAAgB,WAAW,KAAK,UAAU,WAAW,MAAM,EAAE,CAAC;AACpE,OAAI,KAAK,EAAE,UAAU,oBAAoB,EAAE,oBAAoB;;;;;EAMjE,MAAM,iBAAiB,UAAiC;GACtD,MAAM,qBAAqB,SAAS,aAAa;AAEjD,SAAM,GADY,iBAAiB,mBACjB,EAAE,EAAE,OAAO,MAAM,CAAC;AACpC,OAAI,KAAK,EAAE,UAAU,oBAAoB,EAAE,sBAAsB;;;;;EAMnE,MAAM,yBAAyB,UAAiC;GAC9D,MAAM,qBAAqB,SAAS,aAAa;GACjD,MAAM,OAAO,MAAM,KAAK,sBAAsB;AAC9C,SAAM,MAAM,QAAQ,yBAAyB,CAAC,EAAE,EAAE,WAAW,MAAM,CAAC;AACpE,QAAK,MAAM,CAAC,WAAW,YAAY,OAAO,QAAQ,KAAK,SAAS,CAC9D,KAAI,QAAQ,aAAa,mBACvB,QAAO,KAAK,SAAS;AAGzB,SAAM,gBAAgB,yBAAyB,EAAE,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;AAC/E,SAAM,KAAK,iBAAiB,mBAAmB;;EAOjD,MAAc,yBAAyB,UAA0C;AAC/E,OAAI,CAAC,KAAK,QAAS,QAAO;GAE1B,MAAM,WAAW,MAAM,KAAK,2BAA2B;GACvD,MAAM,UAAU,KAAK,uBAAuB,UAAU,SAAS;AAE/D,OAAI,CAAC,QAAS,QAAO;AACrB,OAAI,QAAQ,OAAQ,QAAO,KAAK,YAAY,QAAQ,OAAO,IAAI,QAAQ;AACvE,UAAO,QAAQ;;EAGjB,MAAc,0BAA0B,UAA0C;GAChF,MAAM,WAAW,MAAM,KAAK,sBAAsB;GAClD,MAAM,UAAU,KAAK,uBAAuB,UAAU,SAAS;AAE/D,OAAI,CAAC,QAAS,QAAO;AACrB,OAAI,QAAQ,OAAQ,QAAO,KAAK,YAAY,QAAQ,OAAO,IAAI,QAAQ;AACvE,UAAO,QAAQ;;EAGjB,YAAoB,YAAmC;AACrD,UAAO,QAAQ,IAAI,eAAe;;EAGpC,uBACE,MACA,UACsB;GACtB,MAAM,qBAAqB,SAAS,aAAa;AAGjD,QAAK,MAAM,GAAG,YAAY,OAAO,QAAQ,KAAK,SAAS,CACrD,KAAI,QAAQ,aAAa,mBACvB,QAAO;AAIX,UAAO;;EAGT,MAAc,uBAAkD;GAC9D,MAAM,OAAO,yBAAyB;AAEtC,OAAI;IACF,MAAM,UAAU,MAAM,SAAS,MAAM,QAAQ;IAC7C,MAAM,OAAO,KAAK,MAAM,QAAQ;AAChC,WAAO;KACL,SAAS,KAAK,WAAW;KACzB,UAAU,KAAK,YAAY,EAAE;KAC9B;WACK;AACN,WAAO;KAAE,SAAS;KAAG,UAAU,EAAE;KAAE;;;EAIvC,MAAc,4BAAuD;AACnE,OAAI,CAAC,KAAK,WAAW,CAAC,KAAK,UAAW,QAAO;IAAE,SAAS;IAAG,UAAU,EAAE;IAAE;GAEzE,MAAM,OAAO,6BAA6B,KAAK,WAAW,KAAK,QAAQ;AAEvE,OAAI;IACF,MAAM,UAAU,MAAM,SAAS,MAAM,QAAQ;IAC7C,MAAM,OAAO,KAAK,MAAM,QAAQ;AAChC,WAAO;KACL,SAAS,KAAK,WAAW;KACzB,UAAU,KAAK,YAAY,EAAE;KAC9B;WACK;AACN,WAAO;KAAE,SAAS;KAAG,UAAU,EAAE;KAAE;;;EAIvC,MAAc,sBAAsB,WAAmB,SAAuC;GAC5F,MAAM,OAAO,yBAAyB;AACtC,SAAM,MAAM,QAAQ,KAAK,EAAE,EAAE,WAAW,MAAM,CAAC;GAE/C,MAAM,OAAO,MAAM,KAAK,sBAAsB;AAC9C,QAAK,SAAS,aAAa;AAE3B,SAAM,gBAAgB,MAAM,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;;EAG5D,MAAc,qBAAqB,WAAmB,SAAuC;AAC3F,OAAI,CAAC,KAAK,WAAW,CAAC,KAAK,UAAW,OAAM,IAAI,MAAM,6DAA6D;GAEnH,MAAM,OAAO,6BAA6B,KAAK,WAAW,KAAK,QAAQ;AACvE,SAAM,MAAM,QAAQ,KAAK,EAAE,EAAE,WAAW,MAAM,CAAC;GAE/C,MAAM,OAAO,MAAM,KAAK,2BAA2B;AACnD,QAAK,SAAS,aAAa;AAE3B,SAAM,gBAAgB,MAAM,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;;EAG5D,MAAc,wBAAwB,WAAkC;GACtE,MAAM,OAAO,yBAAyB;GACtC,MAAM,OAAO,MAAM,KAAK,sBAAsB;AAE9C,UAAO,KAAK,SAAS;AAErB,SAAM,gBAAgB,MAAM,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;;EAG5D,MAAc,uBAAuB,WAAkC;AACrE,OAAI,CAAC,KAAK,WAAW,CAAC,KAAK,UAAW,OAAM,IAAI,MAAM,6DAA6D;GAEnH,MAAM,OAAO,6BAA6B,KAAK,WAAW,KAAK,QAAQ;GACvE,MAAM,OAAO,MAAM,KAAK,2BAA2B;AAEnD,UAAO,KAAK,SAAS;AAErB,SAAM,gBAAgB,MAAM,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;;;AAQ1D,mBAA6C"}

package/dist/src/auth/oauth/github-copilot.d.ts

@@ -1,4 +1,3 @@
-/**
- * GitHub Copilot OAuth device code flow.
- */
-export { githubCopilotOAuthProvider, getGitHubCopilotBaseUrl, loginGitHubCopilot, normalizeDomain, refreshGitHubCopilotToken, } from '@earendil-works/pi-ai/oauth';
+/** GitHub Copilot OAuth adapter for pi-ai's provider-auth API. */
+import type { OAuthProviderInterface } from './types.js';
+export declare const githubCopilotOAuthProvider: OAuthProviderInterface;

package/dist/src/auth/oauth/github-copilot.js

@@ -1,2 +1,66 @@
-import { getGitHubCopilotBaseUrl, githubCopilotOAuthProvider, loginGitHubCopilot, normalizeDomain, refreshGitHubCopilotToken } from "@earendil-works/pi-ai/oauth";
-export { getGitHubCopilotBaseUrl, githubCopilotOAuthProvider, loginGitHubCopilot, normalizeDomain, refreshGitHubCopilotToken };
+import { githubCopilotProvider } from "@earendil-works/pi-ai/providers/github-copilot";
+//#region src/auth/oauth/github-copilot.ts
+/** GitHub Copilot OAuth adapter for pi-ai's provider-auth API. */
+function getCopilotOAuth() {
+	const oauth = githubCopilotProvider().auth.oauth;
+	if (!oauth) throw new Error("GitHub Copilot OAuth is unavailable");
+	return oauth;
+}
+function toPiCredential(credentials) {
+	return {
+		...credentials,
+		type: "oauth"
+	};
+}
+function fromPiCredential({ type: _type, ...credentials }) {
+	return credentials;
+}
+function toAuthInteraction(callbacks) {
+	return {
+		signal: callbacks.signal,
+		async prompt(prompt) {
+			if (prompt.type === "select") return await callbacks.onSelect({
+				message: prompt.message,
+				options: [...prompt.options].map(({ id, label }) => ({
+					id,
+					label
+				}))
+			}) ?? "";
+			return callbacks.onPrompt({
+				message: prompt.message,
+				placeholder: prompt.placeholder
+			});
+		},
+		notify(event) {
+			if (event.type === "auth_url") callbacks.onAuth({
+				url: event.url,
+				instructions: event.instructions
+			});
+			else if (event.type === "device_code") callbacks.onDeviceCode({
+				userCode: event.userCode,
+				verificationUri: event.verificationUri,
+				intervalSeconds: event.intervalSeconds,
+				expiresInSeconds: event.expiresInSeconds
+			});
+			else if (event.type === "progress" || event.type === "info") callbacks.onProgress?.(event.message);
+		}
+	};
+}
+const githubCopilotOAuthProvider = {
+	id: "github-copilot",
+	name: "GitHub Copilot",
+	usesCallbackServer: false,
+	async login(callbacks) {
+		return fromPiCredential(await getCopilotOAuth().login(toAuthInteraction(callbacks)));
+	},
+	async refreshToken(credentials) {
+		return fromPiCredential(await getCopilotOAuth().refresh(toPiCredential(credentials)));
+	},
+	getApiKey(credentials) {
+		return credentials.access;
+	}
+};
+//#endregion
+export { githubCopilotOAuthProvider };
+
+//# sourceMappingURL=github-copilot.js.map

package/dist/src/auth/oauth/github-copilot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-copilot.js","names":[],"sources":["../../../../src/auth/oauth/github-copilot.ts"],"sourcesContent":["/** GitHub Copilot OAuth adapter for pi-ai's provider-auth API. */\n\nimport { githubCopilotProvider } from '@earendil-works/pi-ai/providers/github-copilot';\nimport type { AuthInteraction, OAuthAuth, OAuthCredential } from '@earendil-works/pi-ai';\n\nimport type { OAuthCredentials, OAuthLoginCallbacks, OAuthProviderInterface } from './types.js';\n\nfunction getCopilotOAuth(): OAuthAuth {\n  const oauth = githubCopilotProvider().auth.oauth;\n  if (!oauth) {\n    throw new Error('GitHub Copilot OAuth is unavailable');\n  }\n  return oauth;\n}\n\nfunction toPiCredential(credentials: OAuthCredentials): OAuthCredential {\n  return { ...credentials, type: 'oauth' };\n}\n\nfunction fromPiCredential({ type: _type, ...credentials }: OAuthCredential): OAuthCredentials {\n  return credentials;\n}\n\nfunction toAuthInteraction(callbacks: OAuthLoginCallbacks): AuthInteraction {\n  return {\n    signal: callbacks.signal,\n    async prompt(prompt) {\n      if (prompt.type === 'select') {\n        return (await callbacks.onSelect({\n          message: prompt.message,\n          options: [...prompt.options].map(({ id, label }) => ({ id, label })),\n        })) ?? '';\n      }\n      return callbacks.onPrompt({\n        message: prompt.message,\n        placeholder: prompt.placeholder,\n      });\n    },\n    notify(event) {\n      if (event.type === 'auth_url') {\n        callbacks.onAuth({ url: event.url, instructions: event.instructions });\n      } else if (event.type === 'device_code') {\n        callbacks.onDeviceCode({\n          userCode: event.userCode,\n          verificationUri: event.verificationUri,\n          intervalSeconds: event.intervalSeconds,\n          expiresInSeconds: event.expiresInSeconds,\n        });\n      } else if (event.type === 'progress' || event.type === 'info') {\n        callbacks.onProgress?.(event.message);\n      }\n    },\n  };\n}\n\nexport const githubCopilotOAuthProvider: OAuthProviderInterface = {\n  id: 'github-copilot',\n  name: 'GitHub Copilot',\n  usesCallbackServer: false,\n  async login(callbacks) {\n    return fromPiCredential(await getCopilotOAuth().login(toAuthInteraction(callbacks)));\n  },\n  async refreshToken(credentials) {\n    return fromPiCredential(await getCopilotOAuth().refresh(toPiCredential(credentials)));\n  },\n  getApiKey(credentials) {\n    return credentials.access;\n  },\n};\n"],"mappings":";;;AAOA,SAAS,kBAA6B;CACpC,MAAM,QAAQ,uBAAuB,CAAC,KAAK;AAC3C,KAAI,CAAC,MACH,OAAM,IAAI,MAAM,sCAAsC;AAExD,QAAO;;AAGT,SAAS,eAAe,aAAgD;AACtE,QAAO;EAAE,GAAG;EAAa,MAAM;EAAS;;AAG1C,SAAS,iBAAiB,EAAE,MAAM,OAAO,GAAG,eAAkD;AAC5F,QAAO;;AAGT,SAAS,kBAAkB,WAAiD;AAC1E,QAAO;EACL,QAAQ,UAAU;EAClB,MAAM,OAAO,QAAQ;AACnB,OAAI,OAAO,SAAS,SAClB,QAAQ,MAAM,UAAU,SAAS;IAC/B,SAAS,OAAO;IAChB,SAAS,CAAC,GAAG,OAAO,QAAQ,CAAC,KAAK,EAAE,IAAI,aAAa;KAAE;KAAI;KAAO,EAAE;IACrE,CAAC,IAAK;AAET,UAAO,UAAU,SAAS;IACxB,SAAS,OAAO;IAChB,aAAa,OAAO;IACrB,CAAC;;EAEJ,OAAO,OAAO;AACZ,OAAI,MAAM,SAAS,WACjB,WAAU,OAAO;IAAE,KAAK,MAAM;IAAK,cAAc,MAAM;IAAc,CAAC;YAC7D,MAAM,SAAS,cACxB,WAAU,aAAa;IACrB,UAAU,MAAM;IAChB,iBAAiB,MAAM;IACvB,iBAAiB,MAAM;IACvB,kBAAkB,MAAM;IACzB,CAAC;YACO,MAAM,SAAS,cAAc,MAAM,SAAS,OACrD,WAAU,aAAa,MAAM,QAAQ;;EAG1C;;AAGH,MAAa,6BAAqD;CAChE,IAAI;CACJ,MAAM;CACN,oBAAoB;CACpB,MAAM,MAAM,WAAW;AACrB,SAAO,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,kBAAkB,UAAU,CAAC,CAAC;;CAEtF,MAAM,aAAa,aAAa;AAC9B,SAAO,iBAAiB,MAAM,iBAAiB,CAAC,QAAQ,eAAe,YAAY,CAAC,CAAC;;CAEvF,UAAU,aAAa;AACrB,SAAO,YAAY;;CAEtB"}

package/dist/src/auth/oauth/index.js

@@ -2,10 +2,10 @@ import { anthropicOAuthProvider, loginAnthropic, refreshAnthropicToken } from ".
 import { minimaxOAuthProvider } from "./minimax.js";
 import { minimaxCnOAuthProvider } from "./minimax-cn.js";
 import { kimiCodingOAuthProvider } from "./kimi-coding.js";
-import { getGitHubCopilotBaseUrl, githubCopilotOAuthProvider, loginGitHubCopilot, normalizeDomain, refreshGitHubCopilotToken } from "./github-copilot.js";
+import { githubCopilotOAuthProvider } from "./github-copilot.js";
 import { geminiCliOAuthProvider, loginGeminiCli, refreshGoogleCloudToken } from "./google-oauth/google-gemini-cli.js";
 import "./google-gemini-cli.js";
 import { antigravityOAuthProvider, loginAntigravity, refreshAntigravityToken } from "./google-oauth/google-antigravity.js";
 import "./google-antigravity.js";
 import { loginOpenAICodex, openaiCodexOAuthProvider, refreshOpenAICodexToken } from "./openai-codex.js";
-export { anthropicOAuthProvider, getGitHubCopilotBaseUrl, githubCopilotOAuthProvider, antigravityOAuthProvider as googleAntigravityOAuthProvider, geminiCliOAuthProvider as googleGeminiCliOAuthProvider, kimiCodingOAuthProvider, loginAnthropic, loginAntigravity, loginGeminiCli, loginGitHubCopilot, loginOpenAICodex, minimaxCnOAuthProvider, minimaxOAuthProvider, normalizeDomain, openaiCodexOAuthProvider, refreshAnthropicToken, refreshAntigravityToken, refreshGitHubCopilotToken, refreshGoogleCloudToken, refreshOpenAICodexToken };
+export { anthropicOAuthProvider, githubCopilotOAuthProvider, antigravityOAuthProvider as googleAntigravityOAuthProvider, geminiCliOAuthProvider as googleGeminiCliOAuthProvider, kimiCodingOAuthProvider, loginAnthropic, loginAntigravity, loginGeminiCli, loginOpenAICodex, minimaxCnOAuthProvider, minimaxOAuthProvider, openaiCodexOAuthProvider, refreshAnthropicToken, refreshAntigravityToken, refreshGoogleCloudToken, refreshOpenAICodexToken };

package/dist/src/automations/draft/automation-draft-service.js

@@ -1,10 +1,10 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { init_providers, resolveModel } from "../../providers/index.js";
+import { completeWithResolvedCredentials } from "../../providers/model-call.js";
 import { resolveDraftModelRef } from "../../workflows/draft/workflow-draft-service.js";
 import { buildAutomationDraftPrompt, buildAutomationDraftRepairPrompt, buildAutomationRunRepairPrompt, buildAutomationRunRepairRetryPrompt } from "./automation-draft-prompt.js";
 import { buildAutomationDraftResponse, parseGeneratedAutomationDraft, parseGeneratedAutomationRepairDraft } from "./automation-draft-validator.js";
-import { complete } from "@earendil-works/pi-ai/compat";
 //#region src/automations/draft/automation-draft-service.ts
 init_providers();
 init_logger();
@@ -27,7 +27,7 @@ var AutomationDraftService = class {
 		let lastText = "";
 		let lastIssues = [];
 		for (let attempt = 0; attempt <= maxRepairAttempts; attempt += 1) {
-			lastText = extractText(await complete(model, { messages: [{
+			lastText = extractText(await completeWithResolvedCredentials(model, { messages: [{
 				role: "user",
 				content: messageContent,
 				timestamp: Date.now()
@@ -80,7 +80,7 @@ var AutomationDraftService = class {
 		let lastText = "";
 		let lastIssues = [];
 		for (let attempt = 0; attempt <= maxRepairAttempts; attempt += 1) {
-			lastText = extractText(await complete(model, { messages: [{
+			lastText = extractText(await completeWithResolvedCredentials(model, { messages: [{
 				role: "user",
 				content: messageContent,
 				timestamp: Date.now()

package/dist/src/automations/draft/automation-draft-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"automation-draft-service.js","names":[],"sources":["../../../../src/automations/draft/automation-draft-service.ts"],"sourcesContent":["import { complete, type UserMessage } from '@earendil-works/pi-ai/compat';\n\nimport type { Config } from '../../config/schema.js';\nimport { resolveModel } from '../../providers/index.js';\nimport { createLogger } from '../../utils/logger.js';\nimport { resolveDraftModelRef } from '../../workflows/draft/workflow-draft-service.js';\nimport {\n  buildAutomationDraftPrompt,\n  buildAutomationDraftRepairPrompt,\n  buildAutomationRunRepairPrompt,\n  buildAutomationRunRepairRetryPrompt,\n  type AutomationDraftRepairIssue,\n} from './automation-draft-prompt.js';\nimport type {\n  AutomationDraftResponse,\n  AutomationRepairDraftResponse,\n  CreateAutomationDraftRequest,\n  CreateAutomationRepairDraftRequest,\n} from './automation-draft.types.js';\nimport {\n  buildAutomationDraftResponse,\n  parseGeneratedAutomationDraft,\n  parseGeneratedAutomationRepairDraft,\n} from './automation-draft-validator.js';\n\nconst log = createLogger('AutomationDraft');\nconst DEFAULT_MAX_REPAIR_ATTEMPTS = 2;\n\nexport interface AutomationDraftServiceOptions {\n  config: Config;\n  maxRepairAttempts?: number;\n}\n\nexport class AutomationDraftService {\n  constructor(private readonly options: AutomationDraftServiceOptions) {}\n\n  async createDraft(request: CreateAutomationDraftRequest, signal?: AbortSignal): Promise<AutomationDraftResponse> {\n    const prompt = request.prompt.trim();\n    if (!prompt) throw new Error('prompt is required');\n\n    const modelRef = resolveDraftModelRef(this.options.config, request.agentId);\n    const model = resolveModel(modelRef);\n    const maxRepairAttempts = this.options.maxRepairAttempts ?? DEFAULT_MAX_REPAIR_ATTEMPTS;\n    let messageContent = buildAutomationDraftPrompt({ prompt, language: request.language });\n    let lastText = '';\n    let lastIssues: AutomationDraftRepairIssue[] = [];\n\n    for (let attempt = 0; attempt <= maxRepairAttempts; attempt += 1) {\n      const userMsg: UserMessage = {\n        role: 'user',\n        content: messageContent,\n        timestamp: Date.now(),\n      };\n      const result = await complete(\n        model,\n        { messages: [userMsg] },\n        { maxTokens: 2048, temperature: attempt === 0 ? 0.2 : 0.1, signal },\n      );\n      lastText = extractText(result);\n      try {\n        const draft = parseGeneratedAutomationDraft(lastText);\n        return buildAutomationDraftResponse(draft, attempt);\n      } catch (err) {\n        lastIssues = [{\n          source: 'validation',\n          severity: 'error',\n          message: err instanceof Error ? err.message : String(err),\n        }];\n      }\n\n      if (attempt >= maxRepairAttempts) break;\n      log.warn(\n        { modelRef, attempt: attempt + 1, issueCount: lastIssues.length, preview: lastText.slice(0, 500) },\n        'Automation draft validation failed; asking model to repair',\n      );\n      messageContent = buildAutomationDraftRepairPrompt({\n        prompt,\n        language: request.language,\n        previousOutput: lastText,\n        issues: lastIssues,\n      });\n    }\n\n    const message = `Unable to generate a valid automation draft after ${maxRepairAttempts + 1} attempts`;\n    log.warn({ modelRef, issues: lastIssues, preview: lastText.slice(0, 500) }, message);\n    throw new Error(message);\n  }\n\n  async createRepairDraft(\n    request: CreateAutomationRepairDraftRequest,\n    signal?: AbortSignal,\n  ): Promise<AutomationRepairDraftResponse> {\n    const modelRef = resolveDraftModelRef(this.options.config, request.agentId);\n    const model = resolveModel(modelRef);\n    const maxRepairAttempts = this.options.maxRepairAttempts ?? DEFAULT_MAX_REPAIR_ATTEMPTS;\n    let messageContent = buildAutomationRunRepairPrompt({\n      language: request.language,\n      automation: request.automation,\n      run: request.run,\n      events: request.events,\n    });\n    let lastText = '';\n    let lastIssues: AutomationDraftRepairIssue[] = [];\n\n    for (let attempt = 0; attempt <= maxRepairAttempts; attempt += 1) {\n      const userMsg: UserMessage = {\n        role: 'user',\n        content: messageContent,\n        timestamp: Date.now(),\n      };\n      const result = await complete(\n        model,\n        { messages: [userMsg] },\n        { maxTokens: 2048, temperature: attempt === 0 ? 0.15 : 0.05, signal },\n      );\n      lastText = extractText(result);\n      try {\n        return parseGeneratedAutomationRepairDraft(lastText, attempt);\n      } catch (err) {\n        lastIssues = [{\n          source: 'validation',\n          severity: 'error',\n          message: err instanceof Error ? err.message : String(err),\n        }];\n      }\n\n      if (attempt >= maxRepairAttempts) break;\n      log.warn(\n        { modelRef, attempt: attempt + 1, issueCount: lastIssues.length, preview: lastText.slice(0, 500) },\n        'Automation repair draft validation failed; asking model to repair',\n      );\n      messageContent = buildAutomationRunRepairRetryPrompt({\n        language: request.language,\n        previousOutput: lastText,\n        issues: lastIssues,\n      });\n    }\n\n    const message = `Unable to generate a valid automation repair draft after ${maxRepairAttempts + 1} attempts`;\n    log.warn({ modelRef, issues: lastIssues, preview: lastText.slice(0, 500) }, message);\n    throw new Error(message);\n  }\n}\n\nfunction extractText(result: unknown): string {\n  const content = (result as { content?: unknown }).content;\n  if (typeof content === 'string') return content;\n  if (Array.isArray(content)) {\n    return content.map((item) => {\n      if (item && typeof item === 'object' && (item as { type?: string }).type === 'text') {\n        return String((item as { text?: string }).text ?? '');\n      }\n      return '';\n    }).join('');\n  }\n  return '';\n}\n"],"mappings":";;;;;;;;gBAGwD;aACH;AAqBrD,MAAM,MAAM,aAAa,kBAAkB;AAC3C,MAAM,8BAA8B;AAOpC,IAAa,yBAAb,MAAoC;CAClC,YAAY,SAAyD;AAAxC,OAAA,UAAA;;CAE7B,MAAM,YAAY,SAAuC,QAAwD;EAC/G,MAAM,SAAS,QAAQ,OAAO,MAAM;AACpC,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,qBAAqB;EAElD,MAAM,WAAW,qBAAqB,KAAK,QAAQ,QAAQ,QAAQ,QAAQ;EAC3E,MAAM,QAAQ,aAAa,SAAS;EACpC,MAAM,oBAAoB,KAAK,QAAQ,qBAAqB;EAC5D,IAAI,iBAAiB,2BAA2B;GAAE;GAAQ,UAAU,QAAQ;GAAU,CAAC;EACvF,IAAI,WAAW;EACf,IAAI,aAA2C,EAAE;AAEjD,OAAK,IAAI,UAAU,GAAG,WAAW,mBAAmB,WAAW,GAAG;AAWhE,cAAW,YAAY,MALF,SACnB,OACA,EAAE,UAAU,CAAC;IANb,MAAM;IACN,SAAS;IACT,WAAW,KAAK,KAAK;IAID,CAAC,EAAE,EACvB;IAAE,WAAW;IAAM,aAAa,YAAY,IAAI,KAAM;IAAK;IAAQ,CACpE,CAC6B;AAC9B,OAAI;AAEF,WAAO,6BADO,8BAA8B,SACH,EAAE,QAAQ;YAC5C,KAAK;AACZ,iBAAa,CAAC;KACZ,QAAQ;KACR,UAAU;KACV,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;KAC1D,CAAC;;AAGJ,OAAI,WAAW,kBAAmB;AAClC,OAAI,KACF;IAAE;IAAU,SAAS,UAAU;IAAG,YAAY,WAAW;IAAQ,SAAS,SAAS,MAAM,GAAG,IAAI;IAAE,EAClG,6DACD;AACD,oBAAiB,iCAAiC;IAChD;IACA,UAAU,QAAQ;IAClB,gBAAgB;IAChB,QAAQ;IACT,CAAC;;EAGJ,MAAM,UAAU,qDAAqD,oBAAoB,EAAE;AAC3F,MAAI,KAAK;GAAE;GAAU,QAAQ;GAAY,SAAS,SAAS,MAAM,GAAG,IAAI;GAAE,EAAE,QAAQ;AACpF,QAAM,IAAI,MAAM,QAAQ;;CAG1B,MAAM,kBACJ,SACA,QACwC;EACxC,MAAM,WAAW,qBAAqB,KAAK,QAAQ,QAAQ,QAAQ,QAAQ;EAC3E,MAAM,QAAQ,aAAa,SAAS;EACpC,MAAM,oBAAoB,KAAK,QAAQ,qBAAqB;EAC5D,IAAI,iBAAiB,+BAA+B;GAClD,UAAU,QAAQ;GAClB,YAAY,QAAQ;GACpB,KAAK,QAAQ;GACb,QAAQ,QAAQ;GACjB,CAAC;EACF,IAAI,WAAW;EACf,IAAI,aAA2C,EAAE;AAEjD,OAAK,IAAI,UAAU,GAAG,WAAW,mBAAmB,WAAW,GAAG;AAWhE,cAAW,YAAY,MALF,SACnB,OACA,EAAE,UAAU,CAAC;IANb,MAAM;IACN,SAAS;IACT,WAAW,KAAK,KAAK;IAID,CAAC,EAAE,EACvB;IAAE,WAAW;IAAM,aAAa,YAAY,IAAI,MAAO;IAAM;IAAQ,CACtE,CAC6B;AAC9B,OAAI;AACF,WAAO,oCAAoC,UAAU,QAAQ;YACtD,KAAK;AACZ,iBAAa,CAAC;KACZ,QAAQ;KACR,UAAU;KACV,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;KAC1D,CAAC;;AAGJ,OAAI,WAAW,kBAAmB;AAClC,OAAI,KACF;IAAE;IAAU,SAAS,UAAU;IAAG,YAAY,WAAW;IAAQ,SAAS,SAAS,MAAM,GAAG,IAAI;IAAE,EAClG,oEACD;AACD,oBAAiB,oCAAoC;IACnD,UAAU,QAAQ;IAClB,gBAAgB;IAChB,QAAQ;IACT,CAAC;;EAGJ,MAAM,UAAU,4DAA4D,oBAAoB,EAAE;AAClG,MAAI,KAAK;GAAE;GAAU,QAAQ;GAAY,SAAS,SAAS,MAAM,GAAG,IAAI;GAAE,EAAE,QAAQ;AACpF,QAAM,IAAI,MAAM,QAAQ;;;AAI5B,SAAS,YAAY,QAAyB;CAC5C,MAAM,UAAW,OAAiC;AAClD,KAAI,OAAO,YAAY,SAAU,QAAO;AACxC,KAAI,MAAM,QAAQ,QAAQ,CACxB,QAAO,QAAQ,KAAK,SAAS;AAC3B,MAAI,QAAQ,OAAO,SAAS,YAAa,KAA2B,SAAS,OAC3E,QAAO,OAAQ,KAA2B,QAAQ,GAAG;AAEvD,SAAO;GACP,CAAC,KAAK,GAAG;AAEb,QAAO"}
+{"version":3,"file":"automation-draft-service.js","names":[],"sources":["../../../../src/automations/draft/automation-draft-service.ts"],"sourcesContent":["import { type UserMessage } from '@earendil-works/pi-ai/compat';\n\nimport type { Config } from '../../config/schema.js';\nimport { resolveModel } from '../../providers/index.js';\nimport { completeWithResolvedCredentials } from '../../providers/model-call.js';\nimport { createLogger } from '../../utils/logger.js';\nimport { resolveDraftModelRef } from '../../workflows/draft/workflow-draft-service.js';\nimport {\n  buildAutomationDraftPrompt,\n  buildAutomationDraftRepairPrompt,\n  buildAutomationRunRepairPrompt,\n  buildAutomationRunRepairRetryPrompt,\n  type AutomationDraftRepairIssue,\n} from './automation-draft-prompt.js';\nimport type {\n  AutomationDraftResponse,\n  AutomationRepairDraftResponse,\n  CreateAutomationDraftRequest,\n  CreateAutomationRepairDraftRequest,\n} from './automation-draft.types.js';\nimport {\n  buildAutomationDraftResponse,\n  parseGeneratedAutomationDraft,\n  parseGeneratedAutomationRepairDraft,\n} from './automation-draft-validator.js';\n\nconst log = createLogger('AutomationDraft');\nconst DEFAULT_MAX_REPAIR_ATTEMPTS = 2;\n\nexport interface AutomationDraftServiceOptions {\n  config: Config;\n  maxRepairAttempts?: number;\n}\n\nexport class AutomationDraftService {\n  constructor(private readonly options: AutomationDraftServiceOptions) {}\n\n  async createDraft(request: CreateAutomationDraftRequest, signal?: AbortSignal): Promise<AutomationDraftResponse> {\n    const prompt = request.prompt.trim();\n    if (!prompt) throw new Error('prompt is required');\n\n    const modelRef = resolveDraftModelRef(this.options.config, request.agentId);\n    const model = resolveModel(modelRef);\n    const maxRepairAttempts = this.options.maxRepairAttempts ?? DEFAULT_MAX_REPAIR_ATTEMPTS;\n    let messageContent = buildAutomationDraftPrompt({ prompt, language: request.language });\n    let lastText = '';\n    let lastIssues: AutomationDraftRepairIssue[] = [];\n\n    for (let attempt = 0; attempt <= maxRepairAttempts; attempt += 1) {\n      const userMsg: UserMessage = {\n        role: 'user',\n        content: messageContent,\n        timestamp: Date.now(),\n      };\n      const result = await completeWithResolvedCredentials(\n        model,\n        { messages: [userMsg] },\n        { maxTokens: 2048, temperature: attempt === 0 ? 0.2 : 0.1, signal },\n      );\n      lastText = extractText(result);\n      try {\n        const draft = parseGeneratedAutomationDraft(lastText);\n        return buildAutomationDraftResponse(draft, attempt);\n      } catch (err) {\n        lastIssues = [{\n          source: 'validation',\n          severity: 'error',\n          message: err instanceof Error ? err.message : String(err),\n        }];\n      }\n\n      if (attempt >= maxRepairAttempts) break;\n      log.warn(\n        { modelRef, attempt: attempt + 1, issueCount: lastIssues.length, preview: lastText.slice(0, 500) },\n        'Automation draft validation failed; asking model to repair',\n      );\n      messageContent = buildAutomationDraftRepairPrompt({\n        prompt,\n        language: request.language,\n        previousOutput: lastText,\n        issues: lastIssues,\n      });\n    }\n\n    const message = `Unable to generate a valid automation draft after ${maxRepairAttempts + 1} attempts`;\n    log.warn({ modelRef, issues: lastIssues, preview: lastText.slice(0, 500) }, message);\n    throw new Error(message);\n  }\n\n  async createRepairDraft(\n    request: CreateAutomationRepairDraftRequest,\n    signal?: AbortSignal,\n  ): Promise<AutomationRepairDraftResponse> {\n    const modelRef = resolveDraftModelRef(this.options.config, request.agentId);\n    const model = resolveModel(modelRef);\n    const maxRepairAttempts = this.options.maxRepairAttempts ?? DEFAULT_MAX_REPAIR_ATTEMPTS;\n    let messageContent = buildAutomationRunRepairPrompt({\n      language: request.language,\n      automation: request.automation,\n      run: request.run,\n      events: request.events,\n    });\n    let lastText = '';\n    let lastIssues: AutomationDraftRepairIssue[] = [];\n\n    for (let attempt = 0; attempt <= maxRepairAttempts; attempt += 1) {\n      const userMsg: UserMessage = {\n        role: 'user',\n        content: messageContent,\n        timestamp: Date.now(),\n      };\n      const result = await completeWithResolvedCredentials(\n        model,\n        { messages: [userMsg] },\n        { maxTokens: 2048, temperature: attempt === 0 ? 0.15 : 0.05, signal },\n      );\n      lastText = extractText(result);\n      try {\n        return parseGeneratedAutomationRepairDraft(lastText, attempt);\n      } catch (err) {\n        lastIssues = [{\n          source: 'validation',\n          severity: 'error',\n          message: err instanceof Error ? err.message : String(err),\n        }];\n      }\n\n      if (attempt >= maxRepairAttempts) break;\n      log.warn(\n        { modelRef, attempt: attempt + 1, issueCount: lastIssues.length, preview: lastText.slice(0, 500) },\n        'Automation repair draft validation failed; asking model to repair',\n      );\n      messageContent = buildAutomationRunRepairRetryPrompt({\n        language: request.language,\n        previousOutput: lastText,\n        issues: lastIssues,\n      });\n    }\n\n    const message = `Unable to generate a valid automation repair draft after ${maxRepairAttempts + 1} attempts`;\n    log.warn({ modelRef, issues: lastIssues, preview: lastText.slice(0, 500) }, message);\n    throw new Error(message);\n  }\n}\n\nfunction extractText(result: unknown): string {\n  const content = (result as { content?: unknown }).content;\n  if (typeof content === 'string') return content;\n  if (Array.isArray(content)) {\n    return content.map((item) => {\n      if (item && typeof item === 'object' && (item as { type?: string }).type === 'text') {\n        return String((item as { text?: string }).text ?? '');\n      }\n      return '';\n    }).join('');\n  }\n  return '';\n}\n"],"mappings":";;;;;;;;gBAGwD;aAEH;AAqBrD,MAAM,MAAM,aAAa,kBAAkB;AAC3C,MAAM,8BAA8B;AAOpC,IAAa,yBAAb,MAAoC;CAClC,YAAY,SAAyD;AAAxC,OAAA,UAAA;;CAE7B,MAAM,YAAY,SAAuC,QAAwD;EAC/G,MAAM,SAAS,QAAQ,OAAO,MAAM;AACpC,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,qBAAqB;EAElD,MAAM,WAAW,qBAAqB,KAAK,QAAQ,QAAQ,QAAQ,QAAQ;EAC3E,MAAM,QAAQ,aAAa,SAAS;EACpC,MAAM,oBAAoB,KAAK,QAAQ,qBAAqB;EAC5D,IAAI,iBAAiB,2BAA2B;GAAE;GAAQ,UAAU,QAAQ;GAAU,CAAC;EACvF,IAAI,WAAW;EACf,IAAI,aAA2C,EAAE;AAEjD,OAAK,IAAI,UAAU,GAAG,WAAW,mBAAmB,WAAW,GAAG;AAWhE,cAAW,YAAY,MALF,gCACnB,OACA,EAAE,UAAU,CAAC;IANb,MAAM;IACN,SAAS;IACT,WAAW,KAAK,KAAK;IAID,CAAC,EAAE,EACvB;IAAE,WAAW;IAAM,aAAa,YAAY,IAAI,KAAM;IAAK;IAAQ,CACpE,CAC6B;AAC9B,OAAI;AAEF,WAAO,6BADO,8BAA8B,SACH,EAAE,QAAQ;YAC5C,KAAK;AACZ,iBAAa,CAAC;KACZ,QAAQ;KACR,UAAU;KACV,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;KAC1D,CAAC;;AAGJ,OAAI,WAAW,kBAAmB;AAClC,OAAI,KACF;IAAE;IAAU,SAAS,UAAU;IAAG,YAAY,WAAW;IAAQ,SAAS,SAAS,MAAM,GAAG,IAAI;IAAE,EAClG,6DACD;AACD,oBAAiB,iCAAiC;IAChD;IACA,UAAU,QAAQ;IAClB,gBAAgB;IAChB,QAAQ;IACT,CAAC;;EAGJ,MAAM,UAAU,qDAAqD,oBAAoB,EAAE;AAC3F,MAAI,KAAK;GAAE;GAAU,QAAQ;GAAY,SAAS,SAAS,MAAM,GAAG,IAAI;GAAE,EAAE,QAAQ;AACpF,QAAM,IAAI,MAAM,QAAQ;;CAG1B,MAAM,kBACJ,SACA,QACwC;EACxC,MAAM,WAAW,qBAAqB,KAAK,QAAQ,QAAQ,QAAQ,QAAQ;EAC3E,MAAM,QAAQ,aAAa,SAAS;EACpC,MAAM,oBAAoB,KAAK,QAAQ,qBAAqB;EAC5D,IAAI,iBAAiB,+BAA+B;GAClD,UAAU,QAAQ;GAClB,YAAY,QAAQ;GACpB,KAAK,QAAQ;GACb,QAAQ,QAAQ;GACjB,CAAC;EACF,IAAI,WAAW;EACf,IAAI,aAA2C,EAAE;AAEjD,OAAK,IAAI,UAAU,GAAG,WAAW,mBAAmB,WAAW,GAAG;AAWhE,cAAW,YAAY,MALF,gCACnB,OACA,EAAE,UAAU,CAAC;IANb,MAAM;IACN,SAAS;IACT,WAAW,KAAK,KAAK;IAID,CAAC,EAAE,EACvB;IAAE,WAAW;IAAM,aAAa,YAAY,IAAI,MAAO;IAAM;IAAQ,CACtE,CAC6B;AAC9B,OAAI;AACF,WAAO,oCAAoC,UAAU,QAAQ;YACtD,KAAK;AACZ,iBAAa,CAAC;KACZ,QAAQ;KACR,UAAU;KACV,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;KAC1D,CAAC;;AAGJ,OAAI,WAAW,kBAAmB;AAClC,OAAI,KACF;IAAE;IAAU,SAAS,UAAU;IAAG,YAAY,WAAW;IAAQ,SAAS,SAAS,MAAM,GAAG,IAAI;IAAE,EAClG,oEACD;AACD,oBAAiB,oCAAoC;IACnD,UAAU,QAAQ;IAClB,gBAAgB;IAChB,QAAQ;IACT,CAAC;;EAGJ,MAAM,UAAU,4DAA4D,oBAAoB,EAAE;AAClG,MAAI,KAAK;GAAE;GAAU,QAAQ;GAAY,SAAS,SAAS,MAAM,GAAG,IAAI;GAAE,EAAE,QAAQ;AACpF,QAAM,IAAI,MAAM,QAAQ;;;AAI5B,SAAS,YAAY,QAAyB;CAC5C,MAAM,UAAW,OAAiC;AAClD,KAAI,OAAO,YAAY,SAAU,QAAO;AACxC,KAAI,MAAM,QAAQ,QAAQ,CACxB,QAAO,QAAQ,KAAK,SAAS;AAC3B,MAAI,QAAQ,OAAO,SAAS,YAAa,KAA2B,SAAS,OAC3E,QAAO,OAAQ,KAA2B,QAAQ,GAAG;AAEvD,SAAO;GACP,CAAC,KAAK,GAAG;AAEb,QAAO"}

package/dist/src/chat-commands/builtins/review.js

@@ -7,7 +7,7 @@ import { formatReviewMarkdown } from "../../review/review-types.js";
 import { randomUUID } from "node:crypto";
 //#region src/chat-commands/builtins/review.ts
 const MAX_DIFF_CHARS = 6e4;
-const REVIEW_JUDGE_MAX_TOKENS = 8192;
+const REVIEW_JUDGE_MAX_TOKENS = 16384;
 async function emitToolStart(ctx, toolCallId, toolName, args) {
 	await ctx.emitEvent?.({
 		type: "tool_execution_start",
@@ -31,6 +31,19 @@ async function emitToolEnd(ctx, toolCallId, toolName, resultText, details, isErr
 		}
 	});
 }
+async function emitToolTextDelta(ctx, toolCallId, toolName, delta) {
+	if (!delta) return;
+	await ctx.emitEvent?.({
+		type: "tool_execution_update",
+		toolCallId,
+		toolName,
+		args: {},
+		partialResult: { content: [{
+			type: "text",
+			text: delta
+		}] }
+	});
+}
 function truncateForPrompt(text) {
 	if (text.length <= MAX_DIFF_CHARS) return {
 		text,
@@ -102,9 +115,12 @@ function previewText(text, max = 500) {
 	const trimmed = text.trim();
 	return trimmed.length > max ? `${trimmed.slice(0, max)}…` : trimmed;
 }
-function reviewDefaultModelRef(ctx) {
+async function reviewModelRef(ctx) {
+	const sessionOverride = await ctx.getSessionConfigStore?.()?.get(ctx.sessionKey).then((config) => config?.modelOverride?.trim()).catch(() => void 0);
+	if (sessionOverride) return sessionOverride;
 	try {
-		return resolveEffectiveAgentProfileForSession(ctx.config, ctx.sessionKey).primaryModelRef;
+		const profile = resolveEffectiveAgentProfileForSession(ctx.config, ctx.sessionKey);
+		return profile.manifest.models.roles.review?.model?.trim() || profile.primaryModelRef;
 	} catch {
 		return;
 	}
@@ -174,7 +190,7 @@ async function buildReview(ctx, args) {
 		truncated,
 		instructions
 	});
-	const reviewerModelRef = reviewDefaultModelRef(ctx);
+	const reviewerModelRef = await reviewModelRef(ctx);
 	const judgeToolCallId = `review_judge_${randomUUID()}`;
 	await emitToolStart(ctx, judgeToolCallId, "review.model_judge", {
 		target,
@@ -184,7 +200,8 @@ async function buildReview(ctx, args) {
 	});
 	const answer = ctx.btwQuery ? await ctx.btwQuery(prompt, {
 		maxTokens: REVIEW_JUDGE_MAX_TOKENS,
-		temperature: .1,
+		includeSessionContext: false,
+		onTextDelta: (delta) => emitToolTextDelta(ctx, judgeToolCallId, "review.model_judge", delta),
 		...reviewerModelRef ? { modelRef: reviewerModelRef } : {}
 	}) : {
 		text: "",

package/dist/src/chat-commands/builtins/review.js.map

@@ -1 +1 @@
-{"version":3,"file":"review.js","names":[],"sources":["../../../../src/chat-commands/builtins/review.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport type { CommandDefinition, CommandContext } from '../types.js';\nimport { commandRegistry } from '../registry.js';\nimport { effectiveWorkspacePathForSession } from '../../session/session-workspace.js';\nimport { resolveEffectiveAgentProfileForSession } from '../../config/agent-profile.js';\nimport { getProjectForSession } from '../../projects/workspace.js';\nimport {\n  buildReviewDiffBundle,\n  parseReviewTargetArgs,\n  resolveGitRoot,\n} from '../../review/review-git.js';\nimport {\n  formatReviewMarkdown,\n  type ReviewFinding,\n  type ReviewOutput,\n  type ReviewPriority,\n} from '../../review/review-types.js';\n\nconst MAX_DIFF_CHARS = 60_000;\nconst REVIEW_JUDGE_MAX_TOKENS = 8_192;\n\nasync function emitToolStart(\n  ctx: CommandContext,\n  toolCallId: string,\n  toolName: string,\n  args: Record<string, unknown>,\n): Promise<void> {\n  await ctx.emitEvent?.({\n    type: 'tool_execution_start',\n    toolCallId,\n    toolName,\n    args,\n  });\n}\n\nasync function emitToolEnd(\n  ctx: CommandContext,\n  toolCallId: string,\n  toolName: string,\n  resultText: string,\n  details?: Record<string, unknown>,\n  isError = false,\n): Promise<void> {\n  await ctx.emitEvent?.({\n    type: 'tool_execution_end',\n    toolCallId,\n    toolName,\n    isError,\n    result: {\n      content: [{ type: 'text', text: resultText }],\n      ...(details ? { details } : {}),\n    },\n  });\n}\n\nfunction truncateForPrompt(text: string): { text: string; truncated: boolean } {\n  if (text.length <= MAX_DIFF_CHARS) return { text, truncated: false };\n  return {\n    text: text.slice(0, MAX_DIFF_CHARS) + '\\n\\n[diff truncated]',\n    truncated: true,\n  };\n}\n\nfunction extractJsonObject(raw: string): unknown {\n  const fenced = raw.match(/```(?:json)?\\s*([\\s\\S]*?)```/i);\n  const text = (fenced?.[1] ?? raw).trim();\n  const start = text.indexOf('{');\n  const end = text.lastIndexOf('}');\n  if (start < 0 || end <= start) throw new Error('review response did not contain JSON');\n  return JSON.parse(text.slice(start, end + 1));\n}\n\nfunction priorityFrom(raw: unknown): ReviewPriority {\n  const n = typeof raw === 'number' ? raw : Number.parseInt(String(raw ?? ''), 10);\n  if (n === 0 || n === 1 || n === 2 || n === 3) return n;\n  return 2;\n}\n\nfunction numberFrom(raw: unknown): number | undefined {\n  return typeof raw === 'number' && Number.isFinite(raw) ? raw : undefined;\n}\n\nfunction stringFrom(raw: unknown): string {\n  return typeof raw === 'string' ? raw.trim() : '';\n}\n\nfunction parseReviewJson(raw: string, target: string): ReviewOutput {\n  const parsed = extractJsonObject(raw);\n  const rec = parsed && typeof parsed === 'object' && !Array.isArray(parsed)\n    ? parsed as Record<string, unknown>\n    : {};\n  const rawFindings = Array.isArray(rec.findings) ? rec.findings : [];\n  const findings: ReviewFinding[] = rawFindings\n    .map((item) => {\n      const f = item && typeof item === 'object' && !Array.isArray(item)\n        ? item as Record<string, unknown>\n        : {};\n      const loc = f.code_location && typeof f.code_location === 'object'\n        ? f.code_location as Record<string, unknown>\n        : {};\n      const range = loc.line_range && typeof loc.line_range === 'object'\n        ? loc.line_range as Record<string, unknown>\n        : {};\n      const title = stringFrom(f.title);\n      const body = stringFrom(f.body);\n      if (!title && !body) return undefined;\n      const finding: ReviewFinding = {\n        title: title || body.slice(0, 80),\n        body,\n        priority: priorityFrom(f.priority),\n      };\n      const confidenceScore = numberFrom(f.confidence_score ?? f.confidenceScore);\n      const filePath = stringFrom(loc.file_path ?? f.filePath);\n      const lineStart = numberFrom(range.start ?? f.lineStart);\n      const lineEnd = numberFrom(range.end ?? f.lineEnd);\n      if (confidenceScore !== undefined) finding.confidenceScore = confidenceScore;\n      if (filePath) finding.filePath = filePath;\n      if (lineStart !== undefined) finding.lineStart = lineStart;\n      if (lineEnd !== undefined) finding.lineEnd = lineEnd;\n      return finding;\n    })\n    .filter((item): item is ReviewFinding => Boolean(item));\n\n  const correctness = stringFrom(rec.overall_correctness ?? rec.overallCorrectness);\n  const overallCorrectness =\n    correctness === 'patch is correct' || correctness === 'patch is incorrect'\n      ? correctness\n      : 'unknown';\n  return {\n    type: 'review',\n    target,\n    summary: stringFrom(rec.summary) || `${findings.length} finding${findings.length === 1 ? '' : 's'}`,\n    findings,\n    overallCorrectness,\n    overallExplanation: stringFrom(rec.overall_explanation ?? rec.overallExplanation),\n    overallConfidenceScore: numberFrom(rec.overall_confidence_score ?? rec.overallConfidenceScore),\n    generatedAt: Date.now(),\n    source: 'model',\n  };\n}\n\nfunction previewText(text: string, max = 500): string {\n  const trimmed = text.trim();\n  return trimmed.length > max ? `${trimmed.slice(0, max)}…` : trimmed;\n}\n\nfunction reviewDefaultModelRef(ctx: CommandContext): string | undefined {\n  try {\n    return resolveEffectiveAgentProfileForSession(ctx.config, ctx.sessionKey).primaryModelRef;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction buildReviewPrompt(params: {\n  target: string;\n  status: string;\n  stat: string;\n  diff: string;\n  truncated: boolean;\n  instructions: string;\n}): string {\n  return [\n    'You are a senior code reviewer. Review the provided git diff for correctness bugs only.',\n    'Prioritize concrete regressions, broken behavior, missing required tests for changed behavior, data loss, security issues, and runtime/type errors.',\n    'Do not mention style, broad refactors, praise, or speculative improvements.',\n    'Return strict JSON only with this shape:',\n    '{\"findings\":[{\"title\":\"...\",\"body\":\"...\",\"priority\":1,\"confidence_score\":0.9,\"code_location\":{\"file_path\":\"path\",\"line_range\":{\"start\":12,\"end\":12}}}],\"overall_correctness\":\"patch is correct\",\"overall_explanation\":\"...\",\"overall_confidence_score\":0.8,\"summary\":\"...\"}',\n    'Use priority 0 for release-blocking, 1 for high, 2 for medium, 3 for low.',\n    params.instructions ? `Extra reviewer instructions: ${params.instructions}` : '',\n    `Target: ${params.target}`,\n    params.truncated ? 'The diff was truncated; only report findings supported by visible lines.' : '',\n    'Git status:',\n    params.status || '(clean)',\n    'Diff stat:',\n    params.stat || '(none)',\n    'Diff:',\n    params.diff || '(none)',\n  ].filter(Boolean).join('\\n\\n');\n}\n\nasync function resolveWorkspace(ctx: CommandContext): Promise<string> {\n  const sessionConfigStore = ctx.getSessionConfigStore?.();\n  const sessionConfig = sessionConfigStore\n    ? await sessionConfigStore.get(ctx.sessionKey).catch(() => null)\n    : null;\n  return effectiveWorkspacePathForSession(\n    ctx.config,\n    ctx.sessionKey,\n    sessionConfig,\n    getProjectForSession(ctx.sessionKey),\n  );\n}\n\nasync function buildReview(ctx: CommandContext, args: string): Promise<ReviewOutput> {\n  const workspace = await resolveWorkspace(ctx);\n  const cwd = await resolveGitRoot(workspace);\n  const reviewTarget = parseReviewTargetArgs(args);\n  const prepareToolCallId = `review_prepare_${randomUUID()}`;\n  await emitToolStart(ctx, prepareToolCallId, 'review.prepare_diff', {\n    target: args.trim() || 'uncommitted',\n    cwd,\n  });\n  let bundle: Awaited<ReturnType<typeof buildReviewDiffBundle>>;\n  try {\n    bundle = await buildReviewDiffBundle(cwd, reviewTarget);\n    await emitToolEnd(\n      ctx,\n      prepareToolCallId,\n      'review.prepare_diff',\n      [\n        `Target: ${bundle.targetLabel}`,\n        bundle.stat.trim() ? `Changed files:\\n${bundle.stat.trim()}` : 'No diff stat.',\n      ].join('\\n\\n'),\n      {\n        target: bundle.targetLabel,\n        status: bundle.status,\n        stat: bundle.stat,\n      },\n    );\n  } catch (err) {\n    const em = err instanceof Error ? err.message : String(err);\n    await emitToolEnd(ctx, prepareToolCallId, 'review.prepare_diff', em, { cwd }, true);\n    throw err;\n  }\n  const { text: diff, truncated } = truncateForPrompt(bundle.diff);\n  const target = bundle.targetLabel;\n  const instructions = reviewTarget.instructions ?? '';\n\n  if (!bundle.status.trim() && !bundle.diff.trim()) {\n    return {\n      type: 'review',\n      target,\n      summary: 'Working tree is clean.',\n      findings: [],\n      overallCorrectness: 'patch is correct',\n      overallExplanation: 'No uncommitted changes were found to review.',\n      generatedAt: Date.now(),\n      source: 'local',\n    };\n  }\n\n  const prompt = buildReviewPrompt({\n    target,\n    status: bundle.status,\n    stat: bundle.stat,\n    diff,\n    truncated,\n    instructions,\n  });\n  const reviewerModelRef = reviewDefaultModelRef(ctx);\n  const judgeToolCallId = `review_judge_${randomUUID()}`;\n  await emitToolStart(ctx, judgeToolCallId, 'review.model_judge', {\n    target,\n    diffChars: diff.length,\n    truncated,\n    ...(reviewerModelRef ? { modelRef: reviewerModelRef } : {}),\n  });\n  const answer = ctx.btwQuery\n    ? await ctx.btwQuery(prompt, {\n        maxTokens: REVIEW_JUDGE_MAX_TOKENS,\n        temperature: 0.1,\n        ...(reviewerModelRef ? { modelRef: reviewerModelRef } : {}),\n      })\n    : { text: '', error: 'Review model query is not available in this command context.' };\n  let judgeFailure = answer.error\n    ? { reason: `Reviewer model error: ${answer.error}` }\n    : answer.text\n      ? undefined\n      : { reason: 'Reviewer model returned no text.' };\n  if (answer?.text && !answer.error) {\n    try {\n      const parsed = parseReviewJson(answer.text, target);\n      await emitToolEnd(\n        ctx,\n        judgeToolCallId,\n        'review.model_judge',\n        parsed.summary || `${parsed.findings.length} findings`,\n        {\n          target,\n          findings: parsed.findings.length,\n          overallCorrectness: parsed.overallCorrectness,\n        },\n      );\n      return parsed;\n    } catch (err) {\n      const em = err instanceof Error ? err.message : String(err);\n      judgeFailure = {\n        reason: `Reviewer model output could not be parsed: ${em}`,\n      };\n    }\n  }\n\n  const reason = judgeFailure?.reason ?? 'Reviewer model output could not be parsed.';\n  const fallback: ReviewOutput = {\n    type: 'review',\n    target,\n    summary: 'Review model did not complete; returned a local diff summary.',\n    findings: [],\n    overallCorrectness: 'unknown',\n    overallExplanation: [\n      reason,\n      bundle.stat.trim() ? `Changed files:\\n${bundle.stat.trim()}` : 'No textual diff stat was available.',\n    ].join('\\n\\n'),\n    generatedAt: Date.now(),\n    source: 'local',\n  };\n  await emitToolEnd(\n    ctx,\n    judgeToolCallId,\n    'review.model_judge',\n    fallback.summary,\n    {\n      target,\n      findings: 0,\n      overallCorrectness: fallback.overallCorrectness,\n      fallback: true,\n      reason,\n      ...(answer.text ? { responsePreview: previewText(answer.text) } : {}),\n    },\n    true,\n  );\n  return fallback;\n}\n\nconst reviewCommand: CommandDefinition = {\n  id: 'coding.review',\n  name: 'review',\n  description: 'Review current workspace changes for correctness issues',\n  category: 'tool',\n  scope: ['global', 'private', 'group'],\n  acceptsArgs: true,\n  examples: ['/review', '/review focus on auth and persistence'],\n  handler: async (ctx: CommandContext, args: string) => {\n    await ctx.setTyping(true);\n    const review = await buildReview(ctx, args);\n    return {\n      content: formatReviewMarkdown(review),\n      success: true,\n      metadata: { review },\n    };\n  },\n};\n\nexport function registerReviewCommand(): void {\n  commandRegistry.register(reviewCommand);\n}\n"],"mappings":";;;;;;;;AAmBA,MAAM,iBAAiB;AACvB,MAAM,0BAA0B;AAEhC,eAAe,cACb,KACA,YACA,UACA,MACe;AACf,OAAM,IAAI,YAAY;EACpB,MAAM;EACN;EACA;EACA;EACD,CAAC;;AAGJ,eAAe,YACb,KACA,YACA,UACA,YACA,SACA,UAAU,OACK;AACf,OAAM,IAAI,YAAY;EACpB,MAAM;EACN;EACA;EACA;EACA,QAAQ;GACN,SAAS,CAAC;IAAE,MAAM;IAAQ,MAAM;IAAY,CAAC;GAC7C,GAAI,UAAU,EAAE,SAAS,GAAG,EAAE;GAC/B;EACF,CAAC;;AAGJ,SAAS,kBAAkB,MAAoD;AAC7E,KAAI,KAAK,UAAU,eAAgB,QAAO;EAAE;EAAM,WAAW;EAAO;AACpE,QAAO;EACL,MAAM,KAAK,MAAM,GAAG,eAAe,GAAG;EACtC,WAAW;EACZ;;AAGH,SAAS,kBAAkB,KAAsB;CAE/C,MAAM,QADS,IAAI,MAAM,gCACL,GAAG,MAAM,KAAK,MAAM;CACxC,MAAM,QAAQ,KAAK,QAAQ,IAAI;CAC/B,MAAM,MAAM,KAAK,YAAY,IAAI;AACjC,KAAI,QAAQ,KAAK,OAAO,MAAO,OAAM,IAAI,MAAM,uCAAuC;AACtF,QAAO,KAAK,MAAM,KAAK,MAAM,OAAO,MAAM,EAAE,CAAC;;AAG/C,SAAS,aAAa,KAA8B;CAClD,MAAM,IAAI,OAAO,QAAQ,WAAW,MAAM,OAAO,SAAS,OAAO,OAAO,GAAG,EAAE,GAAG;AAChF,KAAI,MAAM,KAAK,MAAM,KAAK,MAAM,KAAK,MAAM,EAAG,QAAO;AACrD,QAAO;;AAGT,SAAS,WAAW,KAAkC;AACpD,QAAO,OAAO,QAAQ,YAAY,OAAO,SAAS,IAAI,GAAG,MAAM,KAAA;;AAGjE,SAAS,WAAW,KAAsB;AACxC,QAAO,OAAO,QAAQ,WAAW,IAAI,MAAM,GAAG;;AAGhD,SAAS,gBAAgB,KAAa,QAA8B;CAClE,MAAM,SAAS,kBAAkB,IAAI;CACrC,MAAM,MAAM,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,OAAO,GACtE,SACA,EAAE;CAEN,MAAM,YADc,MAAM,QAAQ,IAAI,SAAS,GAAG,IAAI,WAAW,EAAE,EAEhE,KAAK,SAAS;EACb,MAAM,IAAI,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAC9D,OACA,EAAE;EACN,MAAM,MAAM,EAAE,iBAAiB,OAAO,EAAE,kBAAkB,WACtD,EAAE,gBACF,EAAE;EACN,MAAM,QAAQ,IAAI,cAAc,OAAO,IAAI,eAAe,WACtD,IAAI,aACJ,EAAE;EACN,MAAM,QAAQ,WAAW,EAAE,MAAM;EACjC,MAAM,OAAO,WAAW,EAAE,KAAK;AAC/B,MAAI,CAAC,SAAS,CAAC,KAAM,QAAO,KAAA;EAC5B,MAAM,UAAyB;GAC7B,OAAO,SAAS,KAAK,MAAM,GAAG,GAAG;GACjC;GACA,UAAU,aAAa,EAAE,SAAS;GACnC;EACD,MAAM,kBAAkB,WAAW,EAAE,oBAAoB,EAAE,gBAAgB;EAC3E,MAAM,WAAW,WAAW,IAAI,aAAa,EAAE,SAAS;EACxD,MAAM,YAAY,WAAW,MAAM,SAAS,EAAE,UAAU;EACxD,MAAM,UAAU,WAAW,MAAM,OAAO,EAAE,QAAQ;AAClD,MAAI,oBAAoB,KAAA,EAAW,SAAQ,kBAAkB;AAC7D,MAAI,SAAU,SAAQ,WAAW;AACjC,MAAI,cAAc,KAAA,EAAW,SAAQ,YAAY;AACjD,MAAI,YAAY,KAAA,EAAW,SAAQ,UAAU;AAC7C,SAAO;GACP,CACD,QAAQ,SAAgC,QAAQ,KAAK,CAAC;CAEzD,MAAM,cAAc,WAAW,IAAI,uBAAuB,IAAI,mBAAmB;CACjF,MAAM,qBACJ,gBAAgB,sBAAsB,gBAAgB,uBAClD,cACA;AACN,QAAO;EACL,MAAM;EACN;EACA,SAAS,WAAW,IAAI,QAAQ,IAAI,GAAG,SAAS,OAAO,UAAU,SAAS,WAAW,IAAI,KAAK;EAC9F;EACA;EACA,oBAAoB,WAAW,IAAI,uBAAuB,IAAI,mBAAmB;EACjF,wBAAwB,WAAW,IAAI,4BAA4B,IAAI,uBAAuB;EAC9F,aAAa,KAAK,KAAK;EACvB,QAAQ;EACT;;AAGH,SAAS,YAAY,MAAc,MAAM,KAAa;CACpD,MAAM,UAAU,KAAK,MAAM;AAC3B,QAAO,QAAQ,SAAS,MAAM,GAAG,QAAQ,MAAM,GAAG,IAAI,CAAC,KAAK;;AAG9D,SAAS,sBAAsB,KAAyC;AACtE,KAAI;AACF,SAAO,uCAAuC,IAAI,QAAQ,IAAI,WAAW,CAAC;SACpE;AACN;;;AAIJ,SAAS,kBAAkB,QAOhB;AACT,QAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA,OAAO,eAAe,gCAAgC,OAAO,iBAAiB;EAC9E,WAAW,OAAO;EAClB,OAAO,YAAY,6EAA6E;EAChG;EACA,OAAO,UAAU;EACjB;EACA,OAAO,QAAQ;EACf;EACA,OAAO,QAAQ;EAChB,CAAC,OAAO,QAAQ,CAAC,KAAK,OAAO;;AAGhC,eAAe,iBAAiB,KAAsC;CACpE,MAAM,qBAAqB,IAAI,yBAAyB;CACxD,MAAM,gBAAgB,qBAClB,MAAM,mBAAmB,IAAI,IAAI,WAAW,CAAC,YAAY,KAAK,GAC9D;AACJ,QAAO,iCACL,IAAI,QACJ,IAAI,YACJ,eACA,qBAAqB,IAAI,WAAW,CACrC;;AAGH,eAAe,YAAY,KAAqB,MAAqC;CAEnF,MAAM,MAAM,MAAM,eAAe,MADT,iBAAiB,IAAI,CACF;CAC3C,MAAM,eAAe,sBAAsB,KAAK;CAChD,MAAM,oBAAoB,kBAAkB,YAAY;AACxD,OAAM,cAAc,KAAK,mBAAmB,uBAAuB;EACjE,QAAQ,KAAK,MAAM,IAAI;EACvB;EACD,CAAC;CACF,IAAI;AACJ,KAAI;AACF,WAAS,MAAM,sBAAsB,KAAK,aAAa;AACvD,QAAM,YACJ,KACA,mBACA,uBACA,CACE,WAAW,OAAO,eAClB,OAAO,KAAK,MAAM,GAAG,mBAAmB,OAAO,KAAK,MAAM,KAAK,gBAChE,CAAC,KAAK,OAAO,EACd;GACE,QAAQ,OAAO;GACf,QAAQ,OAAO;GACf,MAAM,OAAO;GACd,CACF;UACM,KAAK;AAEZ,QAAM,YAAY,KAAK,mBAAmB,uBAD/B,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,EACU,EAAE,KAAK,EAAE,KAAK;AACnF,QAAM;;CAER,MAAM,EAAE,MAAM,MAAM,cAAc,kBAAkB,OAAO,KAAK;CAChE,MAAM,SAAS,OAAO;CACtB,MAAM,eAAe,aAAa,gBAAgB;AAElD,KAAI,CAAC,OAAO,OAAO,MAAM,IAAI,CAAC,OAAO,KAAK,MAAM,CAC9C,QAAO;EACL,MAAM;EACN;EACA,SAAS;EACT,UAAU,EAAE;EACZ,oBAAoB;EACpB,oBAAoB;EACpB,aAAa,KAAK,KAAK;EACvB,QAAQ;EACT;CAGH,MAAM,SAAS,kBAAkB;EAC/B;EACA,QAAQ,OAAO;EACf,MAAM,OAAO;EACb;EACA;EACA;EACD,CAAC;CACF,MAAM,mBAAmB,sBAAsB,IAAI;CACnD,MAAM,kBAAkB,gBAAgB,YAAY;AACpD,OAAM,cAAc,KAAK,iBAAiB,sBAAsB;EAC9D;EACA,WAAW,KAAK;EAChB;EACA,GAAI,mBAAmB,EAAE,UAAU,kBAAkB,GAAG,EAAE;EAC3D,CAAC;CACF,MAAM,SAAS,IAAI,WACf,MAAM,IAAI,SAAS,QAAQ;EACzB,WAAW;EACX,aAAa;EACb,GAAI,mBAAmB,EAAE,UAAU,kBAAkB,GAAG,EAAE;EAC3D,CAAC,GACF;EAAE,MAAM;EAAI,OAAO;EAAgE;CACvF,IAAI,eAAe,OAAO,QACtB,EAAE,QAAQ,yBAAyB,OAAO,SAAS,GACnD,OAAO,OACL,KAAA,IACA,EAAE,QAAQ,oCAAoC;AACpD,KAAI,QAAQ,QAAQ,CAAC,OAAO,MAC1B,KAAI;EACF,MAAM,SAAS,gBAAgB,OAAO,MAAM,OAAO;AACnD,QAAM,YACJ,KACA,iBACA,sBACA,OAAO,WAAW,GAAG,OAAO,SAAS,OAAO,YAC5C;GACE;GACA,UAAU,OAAO,SAAS;GAC1B,oBAAoB,OAAO;GAC5B,CACF;AACD,SAAO;UACA,KAAK;AAEZ,iBAAe,EACb,QAAQ,8CAFC,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,IAG1D;;CAIL,MAAM,SAAS,cAAc,UAAU;CACvC,MAAM,WAAyB;EAC7B,MAAM;EACN;EACA,SAAS;EACT,UAAU,EAAE;EACZ,oBAAoB;EACpB,oBAAoB,CAClB,QACA,OAAO,KAAK,MAAM,GAAG,mBAAmB,OAAO,KAAK,MAAM,KAAK,sCAChE,CAAC,KAAK,OAAO;EACd,aAAa,KAAK,KAAK;EACvB,QAAQ;EACT;AACD,OAAM,YACJ,KACA,iBACA,sBACA,SAAS,SACT;EACE;EACA,UAAU;EACV,oBAAoB,SAAS;EAC7B,UAAU;EACV;EACA,GAAI,OAAO,OAAO,EAAE,iBAAiB,YAAY,OAAO,KAAK,EAAE,GAAG,EAAE;EACrE,EACD,KACD;AACD,QAAO;;AAGT,MAAM,gBAAmC;CACvC,IAAI;CACJ,MAAM;CACN,aAAa;CACb,UAAU;CACV,OAAO;EAAC;EAAU;EAAW;EAAQ;CACrC,aAAa;CACb,UAAU,CAAC,WAAW,wCAAwC;CAC9D,SAAS,OAAO,KAAqB,SAAiB;AACpD,QAAM,IAAI,UAAU,KAAK;EACzB,MAAM,SAAS,MAAM,YAAY,KAAK,KAAK;AAC3C,SAAO;GACL,SAAS,qBAAqB,OAAO;GACrC,SAAS;GACT,UAAU,EAAE,QAAQ;GACrB;;CAEJ;AAED,SAAgB,wBAA8B;AAC5C,iBAAgB,SAAS,cAAc"}
+{"version":3,"file":"review.js","names":[],"sources":["../../../../src/chat-commands/builtins/review.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport type { CommandDefinition, CommandContext } from '../types.js';\nimport { commandRegistry } from '../registry.js';\nimport { effectiveWorkspacePathForSession } from '../../session/session-workspace.js';\nimport { resolveEffectiveAgentProfileForSession } from '../../config/agent-profile.js';\nimport { getProjectForSession } from '../../projects/workspace.js';\nimport {\n  buildReviewDiffBundle,\n  parseReviewTargetArgs,\n  resolveGitRoot,\n} from '../../review/review-git.js';\nimport {\n  formatReviewMarkdown,\n  type ReviewFinding,\n  type ReviewOutput,\n  type ReviewPriority,\n} from '../../review/review-types.js';\n\nconst MAX_DIFF_CHARS = 60_000;\nconst REVIEW_JUDGE_MAX_TOKENS = 16_384;\n\nasync function emitToolStart(\n  ctx: CommandContext,\n  toolCallId: string,\n  toolName: string,\n  args: Record<string, unknown>,\n): Promise<void> {\n  await ctx.emitEvent?.({\n    type: 'tool_execution_start',\n    toolCallId,\n    toolName,\n    args,\n  });\n}\n\nasync function emitToolEnd(\n  ctx: CommandContext,\n  toolCallId: string,\n  toolName: string,\n  resultText: string,\n  details?: Record<string, unknown>,\n  isError = false,\n): Promise<void> {\n  await ctx.emitEvent?.({\n    type: 'tool_execution_end',\n    toolCallId,\n    toolName,\n    isError,\n    result: {\n      content: [{ type: 'text', text: resultText }],\n      ...(details ? { details } : {}),\n    },\n  });\n}\n\nasync function emitToolTextDelta(\n  ctx: CommandContext,\n  toolCallId: string,\n  toolName: string,\n  delta: string,\n): Promise<void> {\n  if (!delta) return;\n  await ctx.emitEvent?.({\n    type: 'tool_execution_update',\n    toolCallId,\n    toolName,\n    args: {},\n    partialResult: {\n      content: [{ type: 'text', text: delta }],\n    },\n  });\n}\n\nfunction truncateForPrompt(text: string): { text: string; truncated: boolean } {\n  if (text.length <= MAX_DIFF_CHARS) return { text, truncated: false };\n  return {\n    text: text.slice(0, MAX_DIFF_CHARS) + '\\n\\n[diff truncated]',\n    truncated: true,\n  };\n}\n\nfunction extractJsonObject(raw: string): unknown {\n  const fenced = raw.match(/```(?:json)?\\s*([\\s\\S]*?)```/i);\n  const text = (fenced?.[1] ?? raw).trim();\n  const start = text.indexOf('{');\n  const end = text.lastIndexOf('}');\n  if (start < 0 || end <= start) throw new Error('review response did not contain JSON');\n  return JSON.parse(text.slice(start, end + 1));\n}\n\nfunction priorityFrom(raw: unknown): ReviewPriority {\n  const n = typeof raw === 'number' ? raw : Number.parseInt(String(raw ?? ''), 10);\n  if (n === 0 || n === 1 || n === 2 || n === 3) return n;\n  return 2;\n}\n\nfunction numberFrom(raw: unknown): number | undefined {\n  return typeof raw === 'number' && Number.isFinite(raw) ? raw : undefined;\n}\n\nfunction stringFrom(raw: unknown): string {\n  return typeof raw === 'string' ? raw.trim() : '';\n}\n\nfunction parseReviewJson(raw: string, target: string): ReviewOutput {\n  const parsed = extractJsonObject(raw);\n  const rec = parsed && typeof parsed === 'object' && !Array.isArray(parsed)\n    ? parsed as Record<string, unknown>\n    : {};\n  const rawFindings = Array.isArray(rec.findings) ? rec.findings : [];\n  const findings: ReviewFinding[] = rawFindings\n    .map((item) => {\n      const f = item && typeof item === 'object' && !Array.isArray(item)\n        ? item as Record<string, unknown>\n        : {};\n      const loc = f.code_location && typeof f.code_location === 'object'\n        ? f.code_location as Record<string, unknown>\n        : {};\n      const range = loc.line_range && typeof loc.line_range === 'object'\n        ? loc.line_range as Record<string, unknown>\n        : {};\n      const title = stringFrom(f.title);\n      const body = stringFrom(f.body);\n      if (!title && !body) return undefined;\n      const finding: ReviewFinding = {\n        title: title || body.slice(0, 80),\n        body,\n        priority: priorityFrom(f.priority),\n      };\n      const confidenceScore = numberFrom(f.confidence_score ?? f.confidenceScore);\n      const filePath = stringFrom(loc.file_path ?? f.filePath);\n      const lineStart = numberFrom(range.start ?? f.lineStart);\n      const lineEnd = numberFrom(range.end ?? f.lineEnd);\n      if (confidenceScore !== undefined) finding.confidenceScore = confidenceScore;\n      if (filePath) finding.filePath = filePath;\n      if (lineStart !== undefined) finding.lineStart = lineStart;\n      if (lineEnd !== undefined) finding.lineEnd = lineEnd;\n      return finding;\n    })\n    .filter((item): item is ReviewFinding => Boolean(item));\n\n  const correctness = stringFrom(rec.overall_correctness ?? rec.overallCorrectness);\n  const overallCorrectness =\n    correctness === 'patch is correct' || correctness === 'patch is incorrect'\n      ? correctness\n      : 'unknown';\n  return {\n    type: 'review',\n    target,\n    summary: stringFrom(rec.summary) || `${findings.length} finding${findings.length === 1 ? '' : 's'}`,\n    findings,\n    overallCorrectness,\n    overallExplanation: stringFrom(rec.overall_explanation ?? rec.overallExplanation),\n    overallConfidenceScore: numberFrom(rec.overall_confidence_score ?? rec.overallConfidenceScore),\n    generatedAt: Date.now(),\n    source: 'model',\n  };\n}\n\nfunction previewText(text: string, max = 500): string {\n  const trimmed = text.trim();\n  return trimmed.length > max ? `${trimmed.slice(0, max)}…` : trimmed;\n}\n\nasync function reviewModelRef(ctx: CommandContext): Promise<string | undefined> {\n  const sessionOverride = await ctx.getSessionConfigStore?.()\n    ?.get(ctx.sessionKey)\n    .then((config) => config?.modelOverride?.trim())\n    .catch(() => undefined);\n  if (sessionOverride) return sessionOverride;\n\n  try {\n    const profile = resolveEffectiveAgentProfileForSession(ctx.config, ctx.sessionKey);\n    return profile.manifest.models.roles.review?.model?.trim() || profile.primaryModelRef;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction buildReviewPrompt(params: {\n  target: string;\n  status: string;\n  stat: string;\n  diff: string;\n  truncated: boolean;\n  instructions: string;\n}): string {\n  return [\n    'You are a senior code reviewer. Review the provided git diff for correctness bugs only.',\n    'Prioritize concrete regressions, broken behavior, missing required tests for changed behavior, data loss, security issues, and runtime/type errors.',\n    'Do not mention style, broad refactors, praise, or speculative improvements.',\n    'Return strict JSON only with this shape:',\n    '{\"findings\":[{\"title\":\"...\",\"body\":\"...\",\"priority\":1,\"confidence_score\":0.9,\"code_location\":{\"file_path\":\"path\",\"line_range\":{\"start\":12,\"end\":12}}}],\"overall_correctness\":\"patch is correct\",\"overall_explanation\":\"...\",\"overall_confidence_score\":0.8,\"summary\":\"...\"}',\n    'Use priority 0 for release-blocking, 1 for high, 2 for medium, 3 for low.',\n    params.instructions ? `Extra reviewer instructions: ${params.instructions}` : '',\n    `Target: ${params.target}`,\n    params.truncated ? 'The diff was truncated; only report findings supported by visible lines.' : '',\n    'Git status:',\n    params.status || '(clean)',\n    'Diff stat:',\n    params.stat || '(none)',\n    'Diff:',\n    params.diff || '(none)',\n  ].filter(Boolean).join('\\n\\n');\n}\n\nasync function resolveWorkspace(ctx: CommandContext): Promise<string> {\n  const sessionConfigStore = ctx.getSessionConfigStore?.();\n  const sessionConfig = sessionConfigStore\n    ? await sessionConfigStore.get(ctx.sessionKey).catch(() => null)\n    : null;\n  return effectiveWorkspacePathForSession(\n    ctx.config,\n    ctx.sessionKey,\n    sessionConfig,\n    getProjectForSession(ctx.sessionKey),\n  );\n}\n\nasync function buildReview(ctx: CommandContext, args: string): Promise<ReviewOutput> {\n  const workspace = await resolveWorkspace(ctx);\n  const cwd = await resolveGitRoot(workspace);\n  const reviewTarget = parseReviewTargetArgs(args);\n  const prepareToolCallId = `review_prepare_${randomUUID()}`;\n  await emitToolStart(ctx, prepareToolCallId, 'review.prepare_diff', {\n    target: args.trim() || 'uncommitted',\n    cwd,\n  });\n  let bundle: Awaited<ReturnType<typeof buildReviewDiffBundle>>;\n  try {\n    bundle = await buildReviewDiffBundle(cwd, reviewTarget);\n    await emitToolEnd(\n      ctx,\n      prepareToolCallId,\n      'review.prepare_diff',\n      [\n        `Target: ${bundle.targetLabel}`,\n        bundle.stat.trim() ? `Changed files:\\n${bundle.stat.trim()}` : 'No diff stat.',\n      ].join('\\n\\n'),\n      {\n        target: bundle.targetLabel,\n        status: bundle.status,\n        stat: bundle.stat,\n      },\n    );\n  } catch (err) {\n    const em = err instanceof Error ? err.message : String(err);\n    await emitToolEnd(ctx, prepareToolCallId, 'review.prepare_diff', em, { cwd }, true);\n    throw err;\n  }\n  const { text: diff, truncated } = truncateForPrompt(bundle.diff);\n  const target = bundle.targetLabel;\n  const instructions = reviewTarget.instructions ?? '';\n\n  if (!bundle.status.trim() && !bundle.diff.trim()) {\n    return {\n      type: 'review',\n      target,\n      summary: 'Working tree is clean.',\n      findings: [],\n      overallCorrectness: 'patch is correct',\n      overallExplanation: 'No uncommitted changes were found to review.',\n      generatedAt: Date.now(),\n      source: 'local',\n    };\n  }\n\n  const prompt = buildReviewPrompt({\n    target,\n    status: bundle.status,\n    stat: bundle.stat,\n    diff,\n    truncated,\n    instructions,\n  });\n  const reviewerModelRef = await reviewModelRef(ctx);\n  const judgeToolCallId = `review_judge_${randomUUID()}`;\n  await emitToolStart(ctx, judgeToolCallId, 'review.model_judge', {\n    target,\n    diffChars: diff.length,\n    truncated,\n    ...(reviewerModelRef ? { modelRef: reviewerModelRef } : {}),\n  });\n  const answer = ctx.btwQuery\n    ? await ctx.btwQuery(prompt, {\n      maxTokens: REVIEW_JUDGE_MAX_TOKENS,\n      includeSessionContext: false,\n      onTextDelta: (delta) => emitToolTextDelta(ctx, judgeToolCallId, 'review.model_judge', delta),\n      ...(reviewerModelRef ? { modelRef: reviewerModelRef } : {}),\n      })\n    : { text: '', error: 'Review model query is not available in this command context.' };\n  let judgeFailure = answer.error\n    ? { reason: `Reviewer model error: ${answer.error}` }\n    : answer.text\n      ? undefined\n      : { reason: 'Reviewer model returned no text.' };\n  if (answer?.text && !answer.error) {\n    try {\n      const parsed = parseReviewJson(answer.text, target);\n      await emitToolEnd(\n        ctx,\n        judgeToolCallId,\n        'review.model_judge',\n        parsed.summary || `${parsed.findings.length} findings`,\n        {\n          target,\n          findings: parsed.findings.length,\n          overallCorrectness: parsed.overallCorrectness,\n        },\n      );\n      return parsed;\n    } catch (err) {\n      const em = err instanceof Error ? err.message : String(err);\n      judgeFailure = {\n        reason: `Reviewer model output could not be parsed: ${em}`,\n      };\n    }\n  }\n\n  const reason = judgeFailure?.reason ?? 'Reviewer model output could not be parsed.';\n  const fallback: ReviewOutput = {\n    type: 'review',\n    target,\n    summary: 'Review model did not complete; returned a local diff summary.',\n    findings: [],\n    overallCorrectness: 'unknown',\n    overallExplanation: [\n      reason,\n      bundle.stat.trim() ? `Changed files:\\n${bundle.stat.trim()}` : 'No textual diff stat was available.',\n    ].join('\\n\\n'),\n    generatedAt: Date.now(),\n    source: 'local',\n  };\n  await emitToolEnd(\n    ctx,\n    judgeToolCallId,\n    'review.model_judge',\n    fallback.summary,\n    {\n      target,\n      findings: 0,\n      overallCorrectness: fallback.overallCorrectness,\n      fallback: true,\n      reason,\n      ...(answer.text ? { responsePreview: previewText(answer.text) } : {}),\n    },\n    true,\n  );\n  return fallback;\n}\n\nconst reviewCommand: CommandDefinition = {\n  id: 'coding.review',\n  name: 'review',\n  description: 'Review current workspace changes for correctness issues',\n  category: 'tool',\n  scope: ['global', 'private', 'group'],\n  acceptsArgs: true,\n  examples: ['/review', '/review focus on auth and persistence'],\n  handler: async (ctx: CommandContext, args: string) => {\n    await ctx.setTyping(true);\n    const review = await buildReview(ctx, args);\n    return {\n      content: formatReviewMarkdown(review),\n      success: true,\n      metadata: { review },\n    };\n  },\n};\n\nexport function registerReviewCommand(): void {\n  commandRegistry.register(reviewCommand);\n}\n"],"mappings":";;;;;;;;AAmBA,MAAM,iBAAiB;AACvB,MAAM,0BAA0B;AAEhC,eAAe,cACb,KACA,YACA,UACA,MACe;AACf,OAAM,IAAI,YAAY;EACpB,MAAM;EACN;EACA;EACA;EACD,CAAC;;AAGJ,eAAe,YACb,KACA,YACA,UACA,YACA,SACA,UAAU,OACK;AACf,OAAM,IAAI,YAAY;EACpB,MAAM;EACN;EACA;EACA;EACA,QAAQ;GACN,SAAS,CAAC;IAAE,MAAM;IAAQ,MAAM;IAAY,CAAC;GAC7C,GAAI,UAAU,EAAE,SAAS,GAAG,EAAE;GAC/B;EACF,CAAC;;AAGJ,eAAe,kBACb,KACA,YACA,UACA,OACe;AACf,KAAI,CAAC,MAAO;AACZ,OAAM,IAAI,YAAY;EACpB,MAAM;EACN;EACA;EACA,MAAM,EAAE;EACR,eAAe,EACb,SAAS,CAAC;GAAE,MAAM;GAAQ,MAAM;GAAO,CAAC,EACzC;EACF,CAAC;;AAGJ,SAAS,kBAAkB,MAAoD;AAC7E,KAAI,KAAK,UAAU,eAAgB,QAAO;EAAE;EAAM,WAAW;EAAO;AACpE,QAAO;EACL,MAAM,KAAK,MAAM,GAAG,eAAe,GAAG;EACtC,WAAW;EACZ;;AAGH,SAAS,kBAAkB,KAAsB;CAE/C,MAAM,QADS,IAAI,MAAM,gCACL,GAAG,MAAM,KAAK,MAAM;CACxC,MAAM,QAAQ,KAAK,QAAQ,IAAI;CAC/B,MAAM,MAAM,KAAK,YAAY,IAAI;AACjC,KAAI,QAAQ,KAAK,OAAO,MAAO,OAAM,IAAI,MAAM,uCAAuC;AACtF,QAAO,KAAK,MAAM,KAAK,MAAM,OAAO,MAAM,EAAE,CAAC;;AAG/C,SAAS,aAAa,KAA8B;CAClD,MAAM,IAAI,OAAO,QAAQ,WAAW,MAAM,OAAO,SAAS,OAAO,OAAO,GAAG,EAAE,GAAG;AAChF,KAAI,MAAM,KAAK,MAAM,KAAK,MAAM,KAAK,MAAM,EAAG,QAAO;AACrD,QAAO;;AAGT,SAAS,WAAW,KAAkC;AACpD,QAAO,OAAO,QAAQ,YAAY,OAAO,SAAS,IAAI,GAAG,MAAM,KAAA;;AAGjE,SAAS,WAAW,KAAsB;AACxC,QAAO,OAAO,QAAQ,WAAW,IAAI,MAAM,GAAG;;AAGhD,SAAS,gBAAgB,KAAa,QAA8B;CAClE,MAAM,SAAS,kBAAkB,IAAI;CACrC,MAAM,MAAM,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,OAAO,GACtE,SACA,EAAE;CAEN,MAAM,YADc,MAAM,QAAQ,IAAI,SAAS,GAAG,IAAI,WAAW,EAAE,EAEhE,KAAK,SAAS;EACb,MAAM,IAAI,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAC9D,OACA,EAAE;EACN,MAAM,MAAM,EAAE,iBAAiB,OAAO,EAAE,kBAAkB,WACtD,EAAE,gBACF,EAAE;EACN,MAAM,QAAQ,IAAI,cAAc,OAAO,IAAI,eAAe,WACtD,IAAI,aACJ,EAAE;EACN,MAAM,QAAQ,WAAW,EAAE,MAAM;EACjC,MAAM,OAAO,WAAW,EAAE,KAAK;AAC/B,MAAI,CAAC,SAAS,CAAC,KAAM,QAAO,KAAA;EAC5B,MAAM,UAAyB;GAC7B,OAAO,SAAS,KAAK,MAAM,GAAG,GAAG;GACjC;GACA,UAAU,aAAa,EAAE,SAAS;GACnC;EACD,MAAM,kBAAkB,WAAW,EAAE,oBAAoB,EAAE,gBAAgB;EAC3E,MAAM,WAAW,WAAW,IAAI,aAAa,EAAE,SAAS;EACxD,MAAM,YAAY,WAAW,MAAM,SAAS,EAAE,UAAU;EACxD,MAAM,UAAU,WAAW,MAAM,OAAO,EAAE,QAAQ;AAClD,MAAI,oBAAoB,KAAA,EAAW,SAAQ,kBAAkB;AAC7D,MAAI,SAAU,SAAQ,WAAW;AACjC,MAAI,cAAc,KAAA,EAAW,SAAQ,YAAY;AACjD,MAAI,YAAY,KAAA,EAAW,SAAQ,UAAU;AAC7C,SAAO;GACP,CACD,QAAQ,SAAgC,QAAQ,KAAK,CAAC;CAEzD,MAAM,cAAc,WAAW,IAAI,uBAAuB,IAAI,mBAAmB;CACjF,MAAM,qBACJ,gBAAgB,sBAAsB,gBAAgB,uBAClD,cACA;AACN,QAAO;EACL,MAAM;EACN;EACA,SAAS,WAAW,IAAI,QAAQ,IAAI,GAAG,SAAS,OAAO,UAAU,SAAS,WAAW,IAAI,KAAK;EAC9F;EACA;EACA,oBAAoB,WAAW,IAAI,uBAAuB,IAAI,mBAAmB;EACjF,wBAAwB,WAAW,IAAI,4BAA4B,IAAI,uBAAuB;EAC9F,aAAa,KAAK,KAAK;EACvB,QAAQ;EACT;;AAGH,SAAS,YAAY,MAAc,MAAM,KAAa;CACpD,MAAM,UAAU,KAAK,MAAM;AAC3B,QAAO,QAAQ,SAAS,MAAM,GAAG,QAAQ,MAAM,GAAG,IAAI,CAAC,KAAK;;AAG9D,eAAe,eAAe,KAAkD;CAC9E,MAAM,kBAAkB,MAAM,IAAI,yBAAyB,EACvD,IAAI,IAAI,WAAW,CACpB,MAAM,WAAW,QAAQ,eAAe,MAAM,CAAC,CAC/C,YAAY,KAAA,EAAU;AACzB,KAAI,gBAAiB,QAAO;AAE5B,KAAI;EACF,MAAM,UAAU,uCAAuC,IAAI,QAAQ,IAAI,WAAW;AAClF,SAAO,QAAQ,SAAS,OAAO,MAAM,QAAQ,OAAO,MAAM,IAAI,QAAQ;SAChE;AACN;;;AAIJ,SAAS,kBAAkB,QAOhB;AACT,QAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA,OAAO,eAAe,gCAAgC,OAAO,iBAAiB;EAC9E,WAAW,OAAO;EAClB,OAAO,YAAY,6EAA6E;EAChG;EACA,OAAO,UAAU;EACjB;EACA,OAAO,QAAQ;EACf;EACA,OAAO,QAAQ;EAChB,CAAC,OAAO,QAAQ,CAAC,KAAK,OAAO;;AAGhC,eAAe,iBAAiB,KAAsC;CACpE,MAAM,qBAAqB,IAAI,yBAAyB;CACxD,MAAM,gBAAgB,qBAClB,MAAM,mBAAmB,IAAI,IAAI,WAAW,CAAC,YAAY,KAAK,GAC9D;AACJ,QAAO,iCACL,IAAI,QACJ,IAAI,YACJ,eACA,qBAAqB,IAAI,WAAW,CACrC;;AAGH,eAAe,YAAY,KAAqB,MAAqC;CAEnF,MAAM,MAAM,MAAM,eAAe,MADT,iBAAiB,IAAI,CACF;CAC3C,MAAM,eAAe,sBAAsB,KAAK;CAChD,MAAM,oBAAoB,kBAAkB,YAAY;AACxD,OAAM,cAAc,KAAK,mBAAmB,uBAAuB;EACjE,QAAQ,KAAK,MAAM,IAAI;EACvB;EACD,CAAC;CACF,IAAI;AACJ,KAAI;AACF,WAAS,MAAM,sBAAsB,KAAK,aAAa;AACvD,QAAM,YACJ,KACA,mBACA,uBACA,CACE,WAAW,OAAO,eAClB,OAAO,KAAK,MAAM,GAAG,mBAAmB,OAAO,KAAK,MAAM,KAAK,gBAChE,CAAC,KAAK,OAAO,EACd;GACE,QAAQ,OAAO;GACf,QAAQ,OAAO;GACf,MAAM,OAAO;GACd,CACF;UACM,KAAK;AAEZ,QAAM,YAAY,KAAK,mBAAmB,uBAD/B,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,EACU,EAAE,KAAK,EAAE,KAAK;AACnF,QAAM;;CAER,MAAM,EAAE,MAAM,MAAM,cAAc,kBAAkB,OAAO,KAAK;CAChE,MAAM,SAAS,OAAO;CACtB,MAAM,eAAe,aAAa,gBAAgB;AAElD,KAAI,CAAC,OAAO,OAAO,MAAM,IAAI,CAAC,OAAO,KAAK,MAAM,CAC9C,QAAO;EACL,MAAM;EACN;EACA,SAAS;EACT,UAAU,EAAE;EACZ,oBAAoB;EACpB,oBAAoB;EACpB,aAAa,KAAK,KAAK;EACvB,QAAQ;EACT;CAGH,MAAM,SAAS,kBAAkB;EAC/B;EACA,QAAQ,OAAO;EACf,MAAM,OAAO;EACb;EACA;EACA;EACD,CAAC;CACF,MAAM,mBAAmB,MAAM,eAAe,IAAI;CAClD,MAAM,kBAAkB,gBAAgB,YAAY;AACpD,OAAM,cAAc,KAAK,iBAAiB,sBAAsB;EAC9D;EACA,WAAW,KAAK;EAChB;EACA,GAAI,mBAAmB,EAAE,UAAU,kBAAkB,GAAG,EAAE;EAC3D,CAAC;CACF,MAAM,SAAS,IAAI,WACf,MAAM,IAAI,SAAS,QAAQ;EAC3B,WAAW;EACX,uBAAuB;EACvB,cAAc,UAAU,kBAAkB,KAAK,iBAAiB,sBAAsB,MAAM;EAC5F,GAAI,mBAAmB,EAAE,UAAU,kBAAkB,GAAG,EAAE;EACzD,CAAC,GACF;EAAE,MAAM;EAAI,OAAO;EAAgE;CACvF,IAAI,eAAe,OAAO,QACtB,EAAE,QAAQ,yBAAyB,OAAO,SAAS,GACnD,OAAO,OACL,KAAA,IACA,EAAE,QAAQ,oCAAoC;AACpD,KAAI,QAAQ,QAAQ,CAAC,OAAO,MAC1B,KAAI;EACF,MAAM,SAAS,gBAAgB,OAAO,MAAM,OAAO;AACnD,QAAM,YACJ,KACA,iBACA,sBACA,OAAO,WAAW,GAAG,OAAO,SAAS,OAAO,YAC5C;GACE;GACA,UAAU,OAAO,SAAS;GAC1B,oBAAoB,OAAO;GAC5B,CACF;AACD,SAAO;UACA,KAAK;AAEZ,iBAAe,EACb,QAAQ,8CAFC,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,IAG1D;;CAIL,MAAM,SAAS,cAAc,UAAU;CACvC,MAAM,WAAyB;EAC7B,MAAM;EACN;EACA,SAAS;EACT,UAAU,EAAE;EACZ,oBAAoB;EACpB,oBAAoB,CAClB,QACA,OAAO,KAAK,MAAM,GAAG,mBAAmB,OAAO,KAAK,MAAM,KAAK,sCAChE,CAAC,KAAK,OAAO;EACd,aAAa,KAAK,KAAK;EACvB,QAAQ;EACT;AACD,OAAM,YACJ,KACA,iBACA,sBACA,SAAS,SACT;EACE;EACA,UAAU;EACV,oBAAoB,SAAS;EAC7B,UAAU;EACV;EACA,GAAI,OAAO,OAAO,EAAE,iBAAiB,YAAY,OAAO,KAAK,EAAE,GAAG,EAAE;EACrE,EACD,KACD;AACD,QAAO;;AAGT,MAAM,gBAAmC;CACvC,IAAI;CACJ,MAAM;CACN,aAAa;CACb,UAAU;CACV,OAAO;EAAC;EAAU;EAAW;EAAQ;CACrC,aAAa;CACb,UAAU,CAAC,WAAW,wCAAwC;CAC9D,SAAS,OAAO,KAAqB,SAAiB;AACpD,QAAM,IAAI,UAAU,KAAK;EACzB,MAAM,SAAS,MAAM,YAAY,KAAK,KAAK;AAC3C,SAAO;GACL,SAAS,qBAAqB,OAAO;GACrC,SAAS;GACT,UAAU,EAAE,QAAQ;GACrB;;CAEJ;AAED,SAAgB,wBAA8B;AAC5C,iBAAgB,SAAS,cAAc"}

package/dist/src/chat-commands/types.d.ts

@@ -112,6 +112,10 @@ export type BtwQueryOptions = {
     maxTokens?: number;
     temperature?: number;
     modelRef?: string;
+    /** Run as an isolated one-shot task instead of adding recent session history. */
+    includeSessionContext?: boolean;
+    /** Receives visible model text as it arrives for rich command surfaces. */
+    onTextDelta?: (delta: string) => void | Promise<void>;
 };
 export interface CommandContext {
     /** Unified session key */

package/dist/src/gateway/hono/routes/models.js

@@ -4,6 +4,7 @@ import { init_resolve_config_value, testApiKeyResolution } from "../../../config
 import { init_models_json, loadModelsJson, saveModelsJson, validateModelsConfig } from "../../../config/models-json.js";
 import { getModelRegistry } from "../../../providers/model-registry.js";
 import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
+import "../../../providers/constants.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";
 import { PROVIDER_META, getAllModels, getAllProviders, getAvailableModels, getProviderAuthState, init_providers, isProviderConfigured, resolveModel } from "../../../providers/index.js";
 import { getImageGenerationProvider } from "../../../agent/image/generation/provider-registry.js";