npm - @xopcai/xopc - Versions diffs - 0.0.163 → 0.0.165 - Mend

@xopcai/xopc 0.0.163 → 0.0.165

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (216) hide show

package/dist/gateway/static/root/index.html CHANGED Viewed

@@ -11,7 +11,7 @@
     <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png?v=20260713-1" />
     <link rel="manifest" href="/site.webmanifest?v=20260713-1" />
     <title>xopc</title>
-    <script type="module" crossorigin src="/assets/index-HZdBKfk_.js"></script>
+    <script type="module" crossorigin src="/assets/index-CfOzvGDb.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-aKtaBQYM.js">
     <link rel="modulepreload" crossorigin href="/assets/preload-helper-zJ_50EbN.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-react-BOUWij0V.js">
@@ -24,16 +24,16 @@
     <link rel="modulepreload" crossorigin href="/assets/check-DUBLcKHA.js">
     <link rel="modulepreload" crossorigin href="/assets/circle-alert-BEjgurr2.js">
     <link rel="modulepreload" crossorigin href="/assets/middleware-Pd0e8Igk.js">
-    <link rel="modulepreload" crossorigin href="/assets/messages-BzI9Wx30.js">
-    <link rel="modulepreload" crossorigin href="/assets/locale-store-Ys6RP7Be.js">
+    <link rel="modulepreload" crossorigin href="/assets/messages-C96Zjb0V.js">
+    <link rel="modulepreload" crossorigin href="/assets/locale-store-C_ax27uc.js">
     <link rel="modulepreload" crossorigin href="/assets/cn-JdwAhgNB.js">
     <link rel="modulepreload" crossorigin href="/assets/schemas-DgQq6Z5S.js">
     <link rel="modulepreload" crossorigin href="/assets/product-delivery-BTRT9kCS.js">
     <link rel="modulepreload" crossorigin href="/assets/config-reload-event-Bjh2zoKp.js">
     <link rel="modulepreload" crossorigin href="/assets/copy-to-clipboard-HOJ79TWv.js">
-    <link rel="modulepreload" crossorigin href="/assets/gateway-startup-retry-CSRvCqxh.js">
-    <link rel="modulepreload" crossorigin href="/assets/activity-store-Xj95LzTv.js">
-    <link rel="modulepreload" crossorigin href="/assets/theme-store-DflSp9o4.js">
+    <link rel="modulepreload" crossorigin href="/assets/gateway-startup-retry-ulwTJovP.js">
+    <link rel="modulepreload" crossorigin href="/assets/activity-store-DkALQFJT.js">
+    <link rel="modulepreload" crossorigin href="/assets/theme-store-D37XLD_C.js">
     <link rel="stylesheet" crossorigin href="/assets/index-BXtJvaQl.css">
   </head>
   <body>

package/dist/package.js CHANGED Viewed

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.0.163";
+var version = "0.0.165";
 //#endregion
 export { version };

package/dist/src/agent/agent-manager.js CHANGED Viewed

@@ -2,15 +2,15 @@ import { resolveStateDir } from "../config/paths-state.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
-import { applyConfigOverrides } from "../config/runtime-overrides.js";
 import { expandWorkspacePathString, init_workspace_path } from "../config/workspace-path.js";
 import { init_agent_scope, resolveAgentProfileDir } from "./agent-scope.js";
-import { resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
 import { init_paths, resolveBundledSkillsDir, resolveUserProfilePath } from "../config/paths.js";
-import { init_sync_provider_auth, resolveProviderApiKeySync } from "../auth/sync-provider-auth.js";
 import { CredentialResolver, init_credentials } from "../auth/credentials.js";
+import { init_sync_provider_auth, resolveProviderApiKeySync } from "../auth/sync-provider-auth.js";
 import { getApiKeySync, getDefaultModelSync, init_providers, resolveModel } from "../providers/index.js";
 import { createExtensionAwareStreamFn } from "../providers/extension-stream-bridge.js";
+import { applyConfigOverrides } from "../config/runtime-overrides.js";
+import { resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
 import { extractTextContent } from "./context/workspace.js";
 import { buildActiveProjectContextForPrompt } from "./context/project-context.js";
 import { clearBootstrapSnapshot } from "./bootstrap/bootstrap-cache.js";

package/dist/src/agent/bootstrap/filter-bootstrap-files.js CHANGED Viewed

@@ -1,6 +1,6 @@
 import { isCronSessionKey, isSubagentSessionKey } from "../../routing/session-key-utils.js";
-import { init_session_key } from "../../routing/session-key.js";
 import { USER_PROFILE_FILENAME, init_paths } from "../../config/paths.js";
+import { init_session_key } from "../../routing/session-key.js";
 import { DEFAULT_AGENTS_FILENAME, DEFAULT_IDENTITY_FILENAME, DEFAULT_SOUL_FILENAME, DEFAULT_TOOLS_FILENAME } from "../context/workspace.js";
 //#region src/agent/bootstrap/filter-bootstrap-files.ts
 init_paths();

package/dist/src/agent/embedded/model-runtime.d.ts ADDED Viewed

@@ -0,0 +1,4 @@
+import { ModelRuntime } from '@earendil-works/pi-coding-agent';
+export declare function resolveEmbeddedProviderApiKeySync(providerId: string): string | undefined;
+export declare function createEmbeddedModelRuntime(): Promise<ModelRuntime>;
+export declare function applyEmbeddedProviderCredential(modelRuntime: Pick<ModelRuntime, 'setRuntimeApiKey'>, providerId: string): Promise<void>;

package/dist/src/agent/embedded/model-runtime.js ADDED Viewed

@@ -0,0 +1,49 @@
+import { init_paths, resolveModelsJsonPath } from "../../config/paths.js";
+import { getModelCatalogStore, init_model_catalog_store } from "../../providers/model-catalog-store.js";
+import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
+import { init_sync_provider_auth, resolveProviderApiKeySync } from "../../auth/sync-provider-auth.js";
+import { getApiKeySync, init_providers } from "../../providers/index.js";
+import { ModelRuntime } from "@earendil-works/pi-coding-agent";
+import { InMemoryCredentialStore, InMemoryModelsStore } from "@earendil-works/pi-ai";
+//#region src/agent/embedded/model-runtime.ts
+init_credentials();
+init_sync_provider_auth();
+init_paths();
+init_providers();
+init_model_catalog_store();
+function resolveEmbeddedProviderApiKeySync(providerId) {
+	return resolveProviderApiKeySync(providerId) ?? getApiKeySync(providerId);
+}
+async function createEmbeddedModelRuntime() {
+	const modelRuntime = await ModelRuntime.create({
+		credentials: new InMemoryCredentialStore(),
+		modelsPath: resolveModelsJsonPath(),
+		modelsStore: new InMemoryModelsStore()
+	});
+	for (const source of Object.values(getModelCatalogStore().load().sources)) modelRuntime.registerProvider(source.providerId, {
+		name: source.providerId,
+		baseUrl: source.baseUrl,
+		api: source.api,
+		models: source.models.filter((model) => model.availability === "available").map((model) => ({
+			id: model.id,
+			name: model.name,
+			reasoning: false,
+			input: ["text"],
+			cost: {
+				input: 0,
+				output: 0,
+				cacheRead: 0,
+				cacheWrite: 0
+			},
+			contextWindow: 128e3,
+			maxTokens: model.maxOutputTokens ?? 16384
+		}))
+	});
+	return modelRuntime;
+}
+async function applyEmbeddedProviderCredential(modelRuntime, providerId) {
+	const key = await new CredentialResolver().resolveApiKey(providerId) ?? getApiKeySync(providerId);
+	if (key && key !== "extension-managed") await modelRuntime.setRuntimeApiKey(providerId, key, { allowNetwork: false });
+}
+//#endregion
+export { applyEmbeddedProviderCredential, createEmbeddedModelRuntime, resolveEmbeddedProviderApiKeySync };

package/dist/src/agent/embedded/run-turn.js CHANGED Viewed

@@ -7,6 +7,7 @@ import { getAssistantTurnErrorMessage, isAssistantTurnAborted, isAssistantTurnFa
 import { abortEmbeddedRun, queueEmbeddedSteer, registerEmbeddedRun, unregisterEmbeddedRun } from "./runs.js";
 import { lastAssistantPlainText, subscribeEmbeddedSessionEvents } from "./subscribe-session.js";
 import { detectToolLoops } from "../orchestration/loop-guard.js";
+import { tryApplySessionTranscriptHygiene } from "../transcript/transcript-hygiene.js";
 //#region src/agent/embedded/run-turn.ts
 init_logger();
 const log = createLogger("EmbeddedRun");
@@ -76,8 +77,13 @@ async function runXopcEmbeddedTurn(params) {
 		const { session, reused } = runner;
 		const streamFnWithXopcExtensions = wrapStreamFnForXopcExtensions(session.agent.streamFunction);
 		const loggingStreamFn = (streamModel, context, options) => {
-			const loopGuard = detectToolLoops(extractRecentToolCalls(context.messages));
-			let effectiveContext = context;
+			const sourceMessages = [...context.messages];
+			const hygienicMessages = tryApplySessionTranscriptHygiene(sourceMessages, streamModel);
+			const loopGuard = detectToolLoops(extractRecentToolCalls(hygienicMessages));
+			let effectiveContext = {
+				...context,
+				messages: hygienicMessages
+			};
 			if (loopGuard.injection || loopGuard.hiddenTools.size > 0) {
 				const messages = loopGuard.injection ? [...context.messages, {
 					role: "user",
@@ -98,6 +104,7 @@ async function runXopcEmbeddedTurn(params) {
 				modelRef: `${streamModel.provider}/${streamModel.id}`,
 				systemPromptLength: effectiveContext.systemPrompt?.length ?? 0,
 				messageCount: effectiveContext.messages.length,
+				transcriptRepaired: hygienicMessages !== sourceMessages,
 				toolCount: effectiveContext.tools?.length ?? 0,
 				lastUserMessagePreview: getLastUserMessagePreview(effectiveContext.messages),
 				loopWarningInjected: !!loopGuard.injection,

package/dist/src/agent/embedded/session-runner.js CHANGED Viewed

@@ -3,7 +3,7 @@ import { init_logger } from "../../utils/logger.js";
 import { guardSessionManager } from "./session-tool-result-guard.js";
 import { transformUserMessageForPersistence } from "../inbound/attachment-pipeline.js";
 import { openSqliteHydratingSessionManager } from "./sqlite-hydrating-session-manager.js";
-import { applyXopcProviderApiKey, createEmbeddedModelRuntime, resolveXopcProviderApiKey } from "./xopc-auth-storage.js";
+import { applyEmbeddedProviderCredential, createEmbeddedModelRuntime, resolveEmbeddedProviderApiKeySync } from "./model-runtime.js";
 import { wrapStreamFnForXopcExtensions } from "./xopc-stream-bridge.js";
 import { xopcToolsToDefinitions } from "./xopc-tools-bridge.js";
 import { applySystemPromptOverrideToSession } from "./system-prompt-override.js";
@@ -14,7 +14,7 @@ init_logger();
 const log = createLogger("EmbeddedSessionRunner");
 const DEFAULT_IDLE_TTL_MS = 5 * 6e4;
 function providerCredentialRevision(providerId) {
-	const apiKey = resolveXopcProviderApiKey(providerId);
+	const apiKey = resolveEmbeddedProviderApiKeySync(providerId);
 	return apiKey ? createHash("sha256").update(apiKey).digest("base64url") : "none";
 }
 function buildEmbeddedRunnerFingerprint(input) {
@@ -175,7 +175,7 @@ var EmbeddedSessionRunnerPool = class {
 		const toolDefs = xopcToolsToDefinitions(tools);
 		const toolNames = tools.map((t) => t.name);
 		const modelRuntime = await createEmbeddedModelRuntime();
-		await applyXopcProviderApiKey(modelRuntime, model.provider);
+		await applyEmbeddedProviderCredential(modelRuntime, model.provider);
 		const resourceLoader = new DefaultResourceLoader({
 			cwd: workspaceDir,
 			agentDir: getAgentDir(),

package/dist/src/agent/goals/post-turn.js CHANGED Viewed

@@ -1,9 +1,9 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
+import { resolveGoalUiLocale } from "./goal-locale.js";
 import { resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
 import { GoalService } from "../../goals/goal-service.js";
-import { resolveGoalUiLocale } from "./goal-locale.js";
 import { evaluateAfterTurnHermesLike } from "./evaluate-turn.js";
 import "../../goals/index.js";
 //#region src/agent/goals/post-turn.ts

package/dist/src/agent/image/tool-model-config.js CHANGED Viewed

@@ -1,7 +1,7 @@
 import { getAgentDefaultImageModelConfig, getAgentDefaultModelRef, init_schema, parseModelRef } from "../../config/schema.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../agent-scope.js";
-import { resolveEffectiveAgentManifestForAgent } from "../../config/agent-profile.js";
 import { getDefaultModelSync, getModelsByProvider, init_providers, isProviderConfiguredSync, resolveModel } from "../../providers/index.js";
+import { resolveEffectiveAgentManifestForAgent } from "../../config/agent-profile.js";
 import { resolveAgentModelFallbackValues, resolveAgentModelPrimaryValue } from "../../config/model-input.js";
 //#region src/agent/image/tool-model-config.ts
 init_schema();

package/dist/src/agent/index.js CHANGED Viewed

@@ -5,10 +5,10 @@ import { AgentInbox } from "./ipc/inbox.js";
 import { AgentBus } from "./ipc/bus.js";
 import { AgentSocketClient, AgentSocketServer, isSocketAvailable } from "./ipc/socket.js";
 import "./ipc/index.js";
-import { AgentService } from "./service.js";
 import { resolveTranscriptPolicy } from "./transcript/transcript-policy.js";
 import { dropThinkingBlocks } from "./transcript/thinking.js";
 import { applySessionTranscriptHygiene, applySessionTranscriptHygieneForPersistence, applySessionTranscriptHygieneWithPolicy, resolvePolicyForModel, tryApplySessionTranscriptHygiene, tryApplySessionTranscriptHygieneForPersistence } from "./transcript/transcript-hygiene.js";
+import { AgentService } from "./service.js";
 import { stripToolMessages } from "./transcript/strip-tool-messages.js";
 import "./transcript/index.js";
 export { AgentBus, AgentInbox, AgentService, AgentSocketClient, AgentSocketServer, applySessionTranscriptHygiene, applySessionTranscriptHygieneForPersistence, applySessionTranscriptHygieneWithPolicy, createResponseMessage, createSignalMessage, createTaskMessage, dropThinkingBlocks, extractToolCallsFromAssistant, extractToolResultId, isSocketAvailable, isValidIPCMessage, makeMissingToolResult, repairToolUseResultPairing, resolvePolicyForModel, resolveTranscriptPolicy, sanitizeToolCallId, sanitizeToolCallIdsForCloudCodeAssist, sanitizeToolCallInputs, sanitizeToolUseResultPairing, stripToolMessages, stripToolResultDetails, tryApplySessionTranscriptHygiene, tryApplySessionTranscriptHygieneForPersistence };

package/dist/src/agent/ipc/inbox.js CHANGED Viewed

@@ -1,7 +1,7 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { init_paths, resolveAgentDir } from "../../config/paths.js";
 import { init_write_file_atomic, writeTextAtomic } from "../../infra/write-file-atomic.js";
+import { init_paths, resolveAgentDir } from "../../config/paths.js";
 import { join } from "path";
 import { existsSync, watch } from "fs";
 import { mkdir, readFile, readdir, rename } from "fs/promises";

package/dist/src/agent/memory/dreaming/config.js CHANGED Viewed

@@ -1,5 +1,5 @@
-import { DEFAULT_DEEP_CRON, DEFAULT_LIGHT_CRON, DEFAULT_REM_CRON } from "./constants.js";
 import { buildMemoryRuntime } from "../../../agent-runtime/memory-runtime.js";
+import { DEFAULT_DEEP_CRON, DEFAULT_LIGHT_CRON, DEFAULT_REM_CRON } from "./constants.js";
 //#region src/agent/memory/dreaming/config.ts
 function clampScore(value, fallback) {
 	if (!Number.isFinite(value)) return fallback;

package/dist/src/agent/service.js CHANGED Viewed

@@ -2,10 +2,10 @@ import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { parseNoteAttachmentTarget } from "../notes/attachment-ref.js";
 import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
-import { applyConfigOverrides } from "../config/runtime-overrides.js";
 import { init_agent_scope, resolveAgentHomeDir, resolveDefaultAgentId } from "./agent-scope.js";
-import { extractProfileAgentId } from "../config/agent-profile.js";
 import { init_paths, resolveUserProfilePath } from "../config/paths.js";
+import { applyConfigOverrides } from "../config/runtime-overrides.js";
+import { extractProfileAgentId } from "../config/agent-profile.js";
 import { extractTextContent } from "./context/workspace.js";
 import { effectiveWorkspacePathForSession } from "../session/session-workspace.js";
 import { getProjectForSession } from "../projects/workspace.js";

package/dist/src/agent/skills/hub-lock.js CHANGED Viewed

@@ -1,5 +1,5 @@
-import { init_paths, resolveSkillsLockPath } from "../../config/paths.js";
 import { init_write_file_atomic, writeTextAtomicSync } from "../../infra/write-file-atomic.js";
+import { init_paths, resolveSkillsLockPath } from "../../config/paths.js";
 import { existsSync, readFileSync } from "node:fs";
 //#region src/agent/skills/hub-lock.ts
 /**

package/dist/src/agent-runtime/index.js CHANGED Viewed

@@ -1,7 +1,7 @@
-import { buildMemoryRuntime } from "./memory-runtime.js";
 import { checkBoundary } from "./boundary-guard.js";
 import { resolveModelRole } from "./model-router.js";
 import { buildRuntimeToolRegistry } from "./tool-registry.js";
+import { buildMemoryRuntime } from "./memory-runtime.js";
 import { resolveWorkflow, validateWorkflowForRuntime } from "./workflow-runtime.js";
 import { buildAgentRuntimeProfile } from "./runtime-profile.js";
 import { appendAgentRunEvent, createAgentRunTrace, finishAgentRunTrace, hashEffectiveManifest } from "./run-trace.js";

package/dist/src/agent-runtime/runtime-profile.js CHANGED Viewed

@@ -1,9 +1,9 @@
 import { buildAgentManifestPromptSection } from "../agent-manifest/prompt.js";
 import "../agent-manifest/index.js";
-import { buildMemoryRuntime } from "./memory-runtime.js";
 import { checkBoundary } from "./boundary-guard.js";
 import { resolveModelRole } from "./model-router.js";
 import { buildRuntimeToolRegistry } from "./tool-registry.js";
+import { buildMemoryRuntime } from "./memory-runtime.js";
 import { resolveWorkflow, validateWorkflowForRuntime } from "./workflow-runtime.js";
 //#region src/agent-runtime/runtime-profile.ts
 function buildAgentRuntimeProfile(params) {

package/dist/src/auth/credentials.js CHANGED Viewed

@@ -1,9 +1,10 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { init_paths, resolveAgentAuthProfilesPath, resolveAuthProfilesPath, resolveCredentialsDir, resolveOAuthPath } from "../config/paths.js";
 import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
+import { init_paths, resolveAgentAuthProfilesPath, resolveAuthProfilesPath, resolveCredentialsDir, resolveOAuthPath } from "../config/paths.js";
 import { getApiKeyFromEnv, init_env_keys } from "../providers/env-keys.js";
+import { getOAuthProviderDefinition, init_registry } from "./oauth/registry.js";
 import { dirname, join } from "path";
 import { mkdir, readFile, readdir, rm } from "fs/promises";
 //#region src/auth/credentials.ts
@@ -18,14 +19,16 @@ async function resolveApiKey(provider, options) {
 async function hasCredentials(provider, options) {
 	return getCredentialResolver(options).hasCredentials(provider);
 }
-var log, warnedExpiredOAuthTokens, CredentialResolver, defaultResolver;
+var log, warnedExpiredOAuthTokens, oauthRefreshes, CredentialResolver, defaultResolver;
 var init_credentials = __esmMin((() => {
 	init_write_file_atomic();
 	init_logger();
 	init_env_keys();
 	init_paths();
+	init_registry();
 	log = createLogger("Credentials");
 	warnedExpiredOAuthTokens = /* @__PURE__ */ new Set();
+	oauthRefreshes = /* @__PURE__ */ new Map();
 	CredentialResolver = class {
 		credentialsDir;
 		agentId;
@@ -42,6 +45,7 @@ var init_credentials = __esmMin((() => {
 		*/
 		async resolveApiKey(provider) {
 			const normalizedProvider = provider.toLowerCase();
+			if (getOAuthProviderDefinition(normalizedProvider)?.oauthOnly) return (await this.loadOAuthToken(normalizedProvider))?.access ?? null;
 			if (this.agentId) {
 				const agentKey = await this.loadFromAgentCredentials(normalizedProvider);
 				if (agentKey) {
@@ -89,6 +93,7 @@ var init_credentials = __esmMin((() => {
 		*/
 		async resolveApiKeySource(provider) {
 			const normalizedProvider = provider.toLowerCase();
+			if (getOAuthProviderDefinition(normalizedProvider)?.oauthOnly) return await this.loadOAuthToken(normalizedProvider) ? "oauth" : null;
 			if (this.agentId) {
 				if (await this.loadFromAgentCredentials(normalizedProvider)) return "agent";
 			}
@@ -132,6 +137,7 @@ var init_credentials = __esmMin((() => {
 		*/
 		async saveApiKey(provider, key, options = {}) {
 			const normalizedProvider = provider.toLowerCase();
+			if (getOAuthProviderDefinition(normalizedProvider)?.oauthOnly) throw new Error(`${normalizedProvider} only supports OAuth credentials`);
 			const profileId = options.profileName ? `${normalizedProvider}:${options.profileName}` : `${normalizedProvider}:default`;
 			const profile = {
 				type: "api_key",
@@ -165,7 +171,44 @@ var init_credentials = __esmMin((() => {
 		async loadOAuthToken(provider) {
 			const token = await this.loadOAuthTokenRecord(provider);
 			if (!token) return null;
-			if (token.expiresAt && token.expiresAt < Date.now()) {
+			const expiresAt = token.expiresAt ?? Number.POSITIVE_INFINITY;
+			if (expiresAt <= Date.now() + 6e4 && token.refresh) {
+				const definition = getOAuthProviderDefinition(provider);
+				if (definition) {
+					let pending = oauthRefreshes.get(provider);
+					if (!pending) {
+						pending = definition.provider.refreshToken({
+							access: token.access,
+							refresh: token.refresh,
+							expires: expiresAt
+						}).then(async (refreshed) => {
+							const updated = {
+								...token,
+								access: definition.provider.getApiKey(refreshed),
+								refresh: refreshed.refresh,
+								expiresAt: refreshed.expires,
+								scope: Array.isArray(refreshed.scope) ? refreshed.scope.filter((value) => typeof value === "string") : token.scope,
+								updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+							};
+							await this.saveOAuthToken(provider, updated);
+							return updated;
+						}).finally(() => oauthRefreshes.delete(provider));
+						oauthRefreshes.set(provider, pending);
+					}
+					try {
+						return await pending;
+					} catch (err) {
+						if (expiresAt > Date.now()) {
+							log.warn({
+								err,
+								provider
+							}, "OAuth refresh failed; using the current access token");
+							return token;
+						}
+					}
+				}
+			}
+			if (expiresAt <= Date.now()) {
 				const warnKey = `${provider}:${token.expiresAt}`;
 				if (!warnedExpiredOAuthTokens.has(warnKey)) {
 					warnedExpiredOAuthTokens.add(warnKey);

package/dist/src/auth/index.js CHANGED Viewed

@@ -1,6 +1,7 @@
+import { anthropicOAuthProvider, init_anthropic } from "./oauth/anthropic.js";
 import { CredentialResolver, getCredentialResolver, hasCredentials, init_credentials, resolveApiKey } from "./credentials.js";
-import { anthropicOAuthProvider } from "./oauth/anthropic.js";
 //#region src/auth/index.ts
 init_credentials();
+init_anthropic();
 //#endregion
 export { CredentialResolver, anthropicOAuthProvider, getCredentialResolver, hasCredentials, resolveApiKey };

package/dist/src/auth/oauth/anthropic.js CHANGED Viewed

@@ -1,14 +1,6 @@
-import { generatePKCE } from "./pkce.js";
+import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
+import { generatePKCE, init_pkce } from "./pkce.js";
 //#region src/auth/oauth/anthropic.ts
-/**
-* Anthropic OAuth flow (Claude Pro/Max)
-*/
-const decode = (s) => atob(s);
-const CLIENT_ID = decode("OWQxYzI1MGEtZTYxYi00NGQ5LTg4ZWQtNTk0NGQxOTYyZjVl");
-const AUTHORIZE_URL = "https://claude.ai/oauth/authorize";
-const TOKEN_URL = "https://console.anthropic.com/v1/oauth/token";
-const REDIRECT_URI = "https://console.anthropic.com/oauth/code/callback";
-const SCOPES = "org:create_api_key user:profile user:inference";
 async function loginAnthropic(onAuthUrl, onPromptCode) {
 	const { verifier, challenge } = await generatePKCE();
 	onAuthUrl(`${AUTHORIZE_URL}?${new URLSearchParams({
@@ -69,18 +61,29 @@ async function refreshAnthropicToken(refreshToken) {
 		expires: Date.now() + data.expires_in * 1e3 - 300 * 1e3
 	};
 }
-const anthropicOAuthProvider = {
-	id: "anthropic",
-	name: "Anthropic (Claude Pro/Max)",
-	async login(callbacks) {
-		return loginAnthropic((url) => callbacks.onAuth({ url }), () => callbacks.onPrompt({ message: "Paste the authorization code:" }));
-	},
-	async refreshToken(credentials) {
-		return refreshAnthropicToken(credentials.refresh);
-	},
-	getApiKey(credentials) {
-		return credentials.access;
-	}
-};
+var decode, CLIENT_ID, AUTHORIZE_URL, TOKEN_URL, REDIRECT_URI, SCOPES, anthropicOAuthProvider;
+var init_anthropic = __esmMin((() => {
+	init_pkce();
+	decode = (s) => atob(s);
+	CLIENT_ID = decode("OWQxYzI1MGEtZTYxYi00NGQ5LTg4ZWQtNTk0NGQxOTYyZjVl");
+	AUTHORIZE_URL = "https://claude.ai/oauth/authorize";
+	TOKEN_URL = "https://console.anthropic.com/v1/oauth/token";
+	REDIRECT_URI = "https://console.anthropic.com/oauth/code/callback";
+	SCOPES = "org:create_api_key user:profile user:inference";
+	anthropicOAuthProvider = {
+		id: "anthropic",
+		name: "Anthropic (Claude Pro/Max)",
+		async login(callbacks) {
+			return loginAnthropic((url) => callbacks.onAuth({ url }), () => callbacks.onPrompt({ message: "Paste the authorization code:" }));
+		},
+		async refreshToken(credentials) {
+			return refreshAnthropicToken(credentials.refresh);
+		},
+		getApiKey(credentials) {
+			return credentials.access;
+		}
+	};
+}));
 //#endregion
-export { anthropicOAuthProvider, loginAnthropic, refreshAnthropicToken };
+init_anthropic();
+export { anthropicOAuthProvider, init_anthropic, loginAnthropic, refreshAnthropicToken };

package/dist/src/auth/oauth/github-copilot.js CHANGED Viewed

@@ -1,3 +1,4 @@
+import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
 import { githubCopilotProvider } from "@earendil-works/pi-ai/providers/github-copilot";
 //#region src/auth/oauth/github-copilot.ts
 /** GitHub Copilot OAuth adapter for pi-ai's provider-auth API. */
@@ -46,19 +47,23 @@ function toAuthInteraction(callbacks) {
 		}
 	};
 }
-const githubCopilotOAuthProvider = {
-	id: "github-copilot",
-	name: "GitHub Copilot",
-	usesCallbackServer: false,
-	async login(callbacks) {
-		return fromPiCredential(await getCopilotOAuth().login(toAuthInteraction(callbacks)));
-	},
-	async refreshToken(credentials) {
-		return fromPiCredential(await getCopilotOAuth().refresh(toPiCredential(credentials)));
-	},
-	getApiKey(credentials) {
-		return credentials.access;
-	}
-};
+var githubCopilotOAuthProvider;
+var init_github_copilot = __esmMin((() => {
+	githubCopilotOAuthProvider = {
+		id: "github-copilot",
+		name: "GitHub Copilot",
+		usesCallbackServer: false,
+		async login(callbacks) {
+			return fromPiCredential(await getCopilotOAuth().login(toAuthInteraction(callbacks)));
+		},
+		async refreshToken(credentials) {
+			return fromPiCredential(await getCopilotOAuth().refresh(toPiCredential(credentials)));
+		},
+		getApiKey(credentials) {
+			return credentials.access;
+		}
+	};
+}));
 //#endregion
-export { githubCopilotOAuthProvider };
+init_github_copilot();
+export { githubCopilotOAuthProvider, init_github_copilot };

package/dist/src/auth/oauth/google-antigravity.js CHANGED Viewed

@@ -1,2 +1,9 @@
-import { antigravityOAuthProvider, loginAntigravity, refreshAntigravityToken } from "./google-oauth/google-antigravity.js";
-export { antigravityOAuthProvider as googleAntigravityOAuthProvider, loginAntigravity, refreshAntigravityToken };
+import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
+import { antigravityOAuthProvider, init_google_antigravity as init_google_antigravity$1, loginAntigravity, refreshAntigravityToken } from "./google-oauth/google-antigravity.js";
+//#region src/auth/oauth/google-antigravity.ts
+var init_google_antigravity = __esmMin((() => {
+	init_google_antigravity$1();
+}));
+//#endregion
+init_google_antigravity();
+export { antigravityOAuthProvider as googleAntigravityOAuthProvider, init_google_antigravity, loginAntigravity, refreshAntigravityToken };

package/dist/src/auth/oauth/google-gemini-cli.js CHANGED Viewed

@@ -1,2 +1,9 @@
-import { geminiCliOAuthProvider, loginGeminiCli, refreshGoogleCloudToken } from "./google-oauth/google-gemini-cli.js";
-export { geminiCliOAuthProvider as googleGeminiCliOAuthProvider, loginGeminiCli, refreshGoogleCloudToken };
+import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
+import { geminiCliOAuthProvider, init_google_gemini_cli as init_google_gemini_cli$1, loginGeminiCli, refreshGoogleCloudToken } from "./google-oauth/google-gemini-cli.js";
+//#region src/auth/oauth/google-gemini-cli.ts
+var init_google_gemini_cli = __esmMin((() => {
+	init_google_gemini_cli$1();
+}));
+//#endregion
+init_google_gemini_cli();
+export { geminiCliOAuthProvider as googleGeminiCliOAuthProvider, init_google_gemini_cli, loginGeminiCli, refreshGoogleCloudToken };

package/dist/src/auth/oauth/google-oauth/google-antigravity.js CHANGED Viewed

@@ -1,13 +1,7 @@
-import { oauthErrorHtml, oauthSuccessHtml } from "./oauth-page.js";
-import { generatePKCE } from "./pkce.js";
+import { __esmMin } from "../../../../_virtual/_rolldown/runtime.js";
+import { init_oauth_page, oauthErrorHtml, oauthSuccessHtml } from "./oauth-page.js";
+import { generatePKCE, init_pkce } from "./pkce.js";
 //#region src/auth/oauth/google-oauth/google-antigravity.ts
-let _createServer = null;
-let _httpImportPromise = null;
-if (typeof process !== "undefined" && (process.versions?.node || process.versions?.bun)) _httpImportPromise = import("node:http").then((m) => {
-	_createServer = m.createServer;
-});
-const ANTIGRAVITY_CLIENT_ID_ENV = "XOPC_GOOGLE_ANTIGRAVITY_OAUTH_CLIENT_ID";
-const ANTIGRAVITY_CLIENT_SECRET_ENV = "XOPC_GOOGLE_ANTIGRAVITY_OAUTH_CLIENT_SECRET";
 /** Desktop OAuth client for this flow — must be set locally (not committed; avoids GitHub push protection). */
 function getAntigravityOAuthClient() {
 	const clientId = process.env[ANTIGRAVITY_CLIENT_ID_ENV]?.trim();
@@ -18,16 +12,6 @@ function getAntigravityOAuthClient() {
 		clientSecret
 	};
 }
-const REDIRECT_URI = "http://localhost:51121/oauth-callback";
-const SCOPES = [
-	"https://www.googleapis.com/auth/cloud-platform",
-	"https://www.googleapis.com/auth/userinfo.email",
-	"https://www.googleapis.com/auth/userinfo.profile",
-	"https://www.googleapis.com/auth/cclog",
-	"https://www.googleapis.com/auth/experimentsandconfigs"
-];
-const AUTH_URL = "https://accounts.google.com/o/oauth2/v2/auth";
-const TOKEN_URL = "https://oauth2.googleapis.com/token";
 /**
 * Start a local HTTP server to receive the OAuth callback
 */
@@ -278,25 +262,48 @@ async function loginAntigravity(onAuth, onProgress, onManualCodeInput) {
 		server.server.close();
 	}
 }
-const antigravityOAuthProvider = {
-	id: "google-antigravity",
-	name: "Antigravity (Gemini 3, Claude, GPT-OSS)",
-	usesCallbackServer: true,
-	async login(callbacks) {
-		return loginAntigravity(callbacks.onAuth, callbacks.onProgress, callbacks.onManualCodeInput);
-	},
-	async refreshToken(credentials) {
-		const creds = credentials;
-		if (!creds.projectId) throw new Error("Antigravity credentials missing projectId");
-		return refreshAntigravityToken(creds.refresh, creds.projectId);
-	},
-	getApiKey(credentials) {
-		const creds = credentials;
-		return JSON.stringify({
-			token: creds.access,
-			projectId: creds.projectId
-		});
-	}
-};
+var _createServer, _httpImportPromise, ANTIGRAVITY_CLIENT_ID_ENV, ANTIGRAVITY_CLIENT_SECRET_ENV, REDIRECT_URI, SCOPES, AUTH_URL, TOKEN_URL, antigravityOAuthProvider;
+var init_google_antigravity = __esmMin((() => {
+	init_oauth_page();
+	init_pkce();
+	_createServer = null;
+	_httpImportPromise = null;
+	if (typeof process !== "undefined" && (process.versions?.node || process.versions?.bun)) _httpImportPromise = import("node:http").then((m) => {
+		_createServer = m.createServer;
+	});
+	ANTIGRAVITY_CLIENT_ID_ENV = "XOPC_GOOGLE_ANTIGRAVITY_OAUTH_CLIENT_ID";
+	ANTIGRAVITY_CLIENT_SECRET_ENV = "XOPC_GOOGLE_ANTIGRAVITY_OAUTH_CLIENT_SECRET";
+	REDIRECT_URI = "http://localhost:51121/oauth-callback";
+	SCOPES = [
+		"https://www.googleapis.com/auth/cloud-platform",
+		"https://www.googleapis.com/auth/userinfo.email",
+		"https://www.googleapis.com/auth/userinfo.profile",
+		"https://www.googleapis.com/auth/cclog",
+		"https://www.googleapis.com/auth/experimentsandconfigs"
+	];
+	AUTH_URL = "https://accounts.google.com/o/oauth2/v2/auth";
+	TOKEN_URL = "https://oauth2.googleapis.com/token";
+	antigravityOAuthProvider = {
+		id: "google-antigravity",
+		name: "Antigravity (Gemini 3, Claude, GPT-OSS)",
+		usesCallbackServer: true,
+		async login(callbacks) {
+			return loginAntigravity(callbacks.onAuth, callbacks.onProgress, callbacks.onManualCodeInput);
+		},
+		async refreshToken(credentials) {
+			const creds = credentials;
+			if (!creds.projectId) throw new Error("Antigravity credentials missing projectId");
+			return refreshAntigravityToken(creds.refresh, creds.projectId);
+		},
+		getApiKey(credentials) {
+			const creds = credentials;
+			return JSON.stringify({
+				token: creds.access,
+				projectId: creds.projectId
+			});
+		}
+	};
+}));
 //#endregion
-export { antigravityOAuthProvider, loginAntigravity, refreshAntigravityToken };
+init_google_antigravity();
+export { antigravityOAuthProvider, init_google_antigravity, loginAntigravity, refreshAntigravityToken };