@xopcai/xopcbot 0.1.0

package/dist/auth/oauth/pkce.d.ts

@@ -0,0 +1,8 @@
+/**
+ * PKCE utilities using Web Crypto API.
+ * Works in both Node.js 20+ and browsers.
+ */
+export declare function generatePKCE(): Promise<{
+    verifier: string;
+    challenge: string;
+}>;

package/dist/auth/oauth/pkce.js

@@ -0,0 +1,22 @@
+/**
+ * PKCE utilities using Web Crypto API.
+ * Works in both Node.js 20+ and browsers.
+ */
+function base64urlEncode(bytes) {
+    let binary = "";
+    for (const byte of bytes) {
+        binary += String.fromCharCode(byte);
+    }
+    return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
+}
+export async function generatePKCE() {
+    const verifierBytes = new Uint8Array(32);
+    crypto.getRandomValues(verifierBytes);
+    const verifier = base64urlEncode(verifierBytes);
+    const encoder = new TextEncoder();
+    const data = encoder.encode(verifier);
+    const hashBuffer = await crypto.subtle.digest("SHA-256", data);
+    const challenge = base64urlEncode(new Uint8Array(hashBuffer));
+    return { verifier, challenge };
+}
+//# sourceMappingURL=pkce.js.map

package/dist/auth/oauth/pkce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.js","sourceRoot":"","sources":["../../../src/auth/oauth/pkce.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,SAAS,eAAe,CAAC,KAAiB;IACzC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IACjC,MAAM,aAAa,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACzC,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;IAEhD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IAE9D,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AAChC,CAAC"}

package/dist/auth/oauth/qwen.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Qwen Portal OAuth Provider
+ *
+ * OAuth 2.0 authentication for Qwen (DashScope).
+ */
+import type { OAuthProviderInterface } from './types.js';
+export declare const qwenPortalOAuthProvider: OAuthProviderInterface;

package/dist/auth/oauth/qwen.js

@@ -0,0 +1,114 @@
+/**
+ * Qwen Portal OAuth Provider
+ *
+ * OAuth 2.0 authentication for Qwen (DashScope).
+ */
+const QWEN_OAUTH_BASE_URL = 'https://chat.qwen.ai';
+const QWEN_OAUTH_TOKEN_ENDPOINT = `${QWEN_OAUTH_BASE_URL}/api/v1/oauth2/token`;
+const QWEN_OAUTH_CLIENT_ID = 'f0304373b74a44d2b584a3fb70ca9e56';
+export const qwenPortalOAuthProvider = {
+    id: 'qwen',
+    name: 'Qwen (通义千问)',
+    usesCallbackServer: false,
+    async login(callbacks) {
+        // Qwen uses device code flow
+        const deviceCodeUrl = `${QWEN_OAUTH_BASE_URL}/api/v1/oauth2/device/code`;
+        const deviceResponse = await fetch(deviceCodeUrl, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                Accept: 'application/json',
+            },
+            body: JSON.stringify({
+                client_id: QWEN_OAUTH_CLIENT_ID,
+                scope: 'user:email',
+            }),
+        });
+        if (!deviceResponse.ok) {
+            throw new Error(`Qwen device code request failed: ${deviceResponse.statusText}`);
+        }
+        const deviceData = await deviceResponse.json();
+        // Show user the verification URL and code
+        callbacks.onAuth({
+            url: deviceData.verification_uri,
+            instructions: `Code: ${deviceData.user_code}`,
+        });
+        // Poll for token
+        const tokenUrl = `${QWEN_OAUTH_BASE_URL}/api/v1/oauth2/token`;
+        const expiresAt = Date.now() + deviceData.expires_in * 1000;
+        const intervalMs = deviceData.interval * 1000;
+        while (Date.now() < expiresAt) {
+            await new Promise(r => setTimeout(r, intervalMs));
+            const tokenResponse = await fetch(tokenUrl, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/x-www-form-urlencoded',
+                    Accept: 'application/json',
+                },
+                body: new URLSearchParams({
+                    grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
+                    device_code: deviceData.device_code,
+                    client_id: QWEN_OAUTH_CLIENT_ID,
+                }),
+            });
+            if (!tokenResponse.ok) {
+                const error = await tokenResponse.json();
+                if (error.error === 'authorization_pending') {
+                    callbacks.onProgress?.('Waiting for authorization...');
+                    continue;
+                }
+                if (error.error === 'slow_down') {
+                    callbacks.onProgress?.('Slowing down polling...');
+                    await new Promise(r => setTimeout(r, 2000));
+                    continue;
+                }
+                throw new Error(`Token request failed: ${error.error}`);
+            }
+            const tokenData = await tokenResponse.json();
+            return {
+                access: tokenData.access_token,
+                refresh: tokenData.refresh_token,
+                expires: Date.now() + tokenData.expires_in * 1000,
+            };
+        }
+        throw new Error('Device code expired. Please try again.');
+    },
+    async refreshToken(credentials) {
+        if (!credentials.refresh) {
+            throw new Error('Qwen OAuth refresh token missing. Re-authenticate.');
+        }
+        const response = await fetch(QWEN_OAUTH_TOKEN_ENDPOINT, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+                Accept: 'application/json',
+            },
+            body: new URLSearchParams({
+                grant_type: 'refresh_token',
+                refresh_token: credentials.refresh,
+                client_id: QWEN_OAUTH_CLIENT_ID,
+            }),
+        });
+        if (!response.ok) {
+            const text = await response.text();
+            if (response.status === 400) {
+                throw new Error('Qwen OAuth refresh token expired or invalid. Re-authenticate.');
+            }
+            throw new Error(`Qwen OAuth refresh failed: ${text || response.statusText}`);
+        }
+        const payload = await response.json();
+        if (!payload.access_token || !payload.expires_in) {
+            throw new Error('Qwen OAuth refresh response missing access token.');
+        }
+        return {
+            ...credentials,
+            access: payload.access_token,
+            refresh: payload.refresh_token || credentials.refresh,
+            expires: Date.now() + payload.expires_in * 1000,
+        };
+    },
+    getApiKey(credentials) {
+        return credentials.access;
+    },
+};
+//# sourceMappingURL=qwen.js.map

package/dist/auth/oauth/qwen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"qwen.js","sourceRoot":"","sources":["../../../src/auth/oauth/qwen.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AACnD,MAAM,yBAAyB,GAAG,GAAG,mBAAmB,sBAAsB,CAAC;AAC/E,MAAM,oBAAoB,GAAG,kCAAkC,CAAC;AAEhE,MAAM,CAAC,MAAM,uBAAuB,GAA2B;IAC9D,EAAE,EAAE,MAAM;IACV,IAAI,EAAE,aAAa;IACnB,kBAAkB,EAAE,KAAK;IAEzB,KAAK,CAAC,KAAK,CAAC,SAA8B;QACzC,6BAA6B;QAC7B,MAAM,aAAa,GAAG,GAAG,mBAAmB,4BAA4B,CAAC;QAEzE,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE;YACjD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACR,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,kBAAkB;aAC1B;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACpB,SAAS,EAAE,oBAAoB;gBAC/B,KAAK,EAAE,YAAY;aACnB,CAAC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,oCAAoC,cAAc,CAAC,UAAU,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,IAAI,EAM3C,CAAC;QAEF,0CAA0C;QAC1C,SAAS,CAAC,MAAM,CAAC;YAChB,GAAG,EAAE,UAAU,CAAC,gBAAgB;YAChC,YAAY,EAAE,SAAS,UAAU,CAAC,SAAS,EAAE;SAC7C,CAAC,CAAC;QAEH,iBAAiB;QACjB,MAAM,QAAQ,GAAG,GAAG,mBAAmB,sBAAsB,CAAC;QAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,UAAU,GAAG,IAAI,CAAC;QAC5D,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,GAAG,IAAI,CAAC;QAE9C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;YAElD,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;gBAC3C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACR,cAAc,EAAE,mCAAmC;oBACnD,MAAM,EAAE,kBAAkB;iBAC1B;gBACD,IAAI,EAAE,IAAI,eAAe,CAAC;oBACzB,UAAU,EAAE,8CAA8C;oBAC1D,WAAW,EAAE,UAAU,CAAC,WAAW;oBACnC,SAAS,EAAE,oBAAoB;iBAC/B,CAAC;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;gBACvB,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,IAAI,EAAwB,CAAC;gBAC/D,IAAI,KAAK,CAAC,KAAK,KAAK,uBAAuB,EAAE,CAAC;oBAC7C,SAAS,CAAC,UAAU,EAAE,CAAC,8BAA8B,CAAC,CAAC;oBACvD,SAAS;gBACV,CAAC;gBACD,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;oBACjC,SAAS,CAAC,UAAU,EAAE,CAAC,yBAAyB,CAAC,CAAC;oBAClD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;oBAC5C,SAAS;gBACV,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YACzD,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,EAIzC,CAAC;YAEF,OAAO;gBACN,MAAM,EAAE,SAAS,CAAC,YAAY;gBAC9B,OAAO,EAAE,SAAS,CAAC,aAAa;gBAChC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,UAAU,GAAG,IAAI;aACjD,CAAC;QACH,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,WAA6B;QAC/C,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,yBAAyB,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACR,cAAc,EAAE,mCAAmC;gBACnD,MAAM,EAAE,kBAAkB;aAC1B;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACzB,UAAU,EAAE,eAAe;gBAC3B,aAAa,EAAE,WAAW,CAAC,OAAO;gBAClC,SAAS,EAAE,oBAAoB;aAC/B,CAAC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;YAClF,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAIlC,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACtE,CAAC;QAED,OAAO;YACN,GAAG,WAAW;YACd,MAAM,EAAE,OAAO,CAAC,YAAY;YAC5B,OAAO,EAAE,OAAO,CAAC,aAAa,IAAI,WAAW,CAAC,OAAO;YACrD,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI;SAC/C,CAAC;IACH,CAAC;IAED,SAAS,CAAC,WAA6B;QACtC,OAAO,WAAW,CAAC,MAAM,CAAC;IAC3B,CAAC;CACD,CAAC"}

package/dist/auth/oauth/types.d.ts

@@ -0,0 +1,46 @@
+/**
+ * OAuth Types
+ *
+ * OAuth authentication types and interfaces for provider authentication.
+ */
+export type OAuthCredentials = {
+    refresh: string;
+    access: string;
+    expires: number;
+    [key: string]: unknown;
+};
+export type OAuthProviderId = string;
+export type OAuthPrompt = {
+    message: string;
+    placeholder?: string;
+    allowEmpty?: boolean;
+};
+export type OAuthAuthInfo = {
+    url: string;
+    instructions?: string;
+};
+export interface OAuthLoginCallbacks {
+    onAuth: (info: OAuthAuthInfo) => void;
+    onPrompt: (prompt: OAuthPrompt) => Promise<string>;
+    onProgress?: (message: string) => void;
+    onManualCodeInput?: () => Promise<string>;
+    signal?: AbortSignal;
+}
+export interface OAuthProviderInterface {
+    readonly id: OAuthProviderId;
+    readonly name: string;
+    /** Run the login flow, return credentials to persist */
+    login(callbacks: OAuthLoginCallbacks): Promise<OAuthCredentials>;
+    /** Whether login uses a local callback server and supports manual code input. */
+    usesCallbackServer?: boolean;
+    /** Refresh expired credentials, return updated credentials to persist */
+    refreshToken(credentials: OAuthCredentials): Promise<OAuthCredentials>;
+    /** Convert credentials to API key string for the provider */
+    getApiKey(credentials: OAuthCredentials): string;
+}
+export type AuthCredential = {
+    type: 'api_key';
+    key: string;
+} | {
+    type: 'oauth';
+} & OAuthCredentials;

package/dist/auth/oauth/types.js

@@ -0,0 +1,7 @@
+/**
+ * OAuth Types
+ *
+ * OAuth authentication types and interfaces for provider authentication.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/auth/oauth/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/auth/oauth/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/auth/profiles/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Auth Profiles
+ *
+ * Credential storage and management with support for:
+ * - API keys (static)
+ * - Tokens (static bearer-style)
+ * - OAuth (refreshable credentials)
+ *
+ * Based on openclaw's auth-profiles architecture.
+ */
+export * from './types.js';
+export * from './store.js';
+export * from './profiles.js';
+export { resolveApiKeyForProfile, profileHasAuth } from './oauth.js';
+export * from './order.js';
+export * from './usage.js';

package/dist/auth/profiles/index.js

@@ -0,0 +1,17 @@
+/**
+ * Auth Profiles
+ *
+ * Credential storage and management with support for:
+ * - API keys (static)
+ * - Tokens (static bearer-style)
+ * - OAuth (refreshable credentials)
+ *
+ * Based on openclaw's auth-profiles architecture.
+ */
+export * from './types.js';
+export * from './store.js';
+export * from './profiles.js';
+export { resolveApiKeyForProfile, profileHasAuth } from './oauth.js';
+export * from './order.js';
+export * from './usage.js';
+//# sourceMappingURL=index.js.map

package/dist/auth/profiles/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/profiles/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,OAAO,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACrE,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC"}

package/dist/auth/profiles/oauth.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Auth Profiles - OAuth Support
+ *
+ * OAuth credential resolution and refresh.
+ */
+import type { OAuthCredentials } from '@mariozechner/pi-ai';
+/** Resolve API key for a profile (handles OAuth refresh) */
+export declare function resolveApiKeyForProfile(profileId: string, refreshFn?: (credentials: OAuthCredentials) => Promise<OAuthCredentials>): Promise<string | undefined>;
+/** Check if a profile has valid credentials */
+export declare function profileHasAuth(profileId: string): boolean;
+/** Resolve profile for a provider (finds first available profile) */
+export declare function resolveProfileForProvider(provider: string, order?: string[]): string | undefined;

package/dist/auth/profiles/oauth.js

@@ -0,0 +1,106 @@
+/**
+ * Auth Profiles - OAuth Support
+ *
+ * OAuth credential resolution and refresh.
+ */
+import { loadAuthProfileStore, saveAuthProfileStore } from './store.js';
+/** Resolve API key for a profile (handles OAuth refresh) */
+export async function resolveApiKeyForProfile(profileId, refreshFn) {
+    const store = loadAuthProfileStore();
+    const cred = store.profiles[profileId];
+    if (!cred) {
+        return undefined;
+    }
+    // Handle API key
+    if (cred.type === 'api_key') {
+        return cred.key;
+    }
+    // Handle token
+    if (cred.type === 'token') {
+        // Check if expired
+        if (cred.expires && Date.now() >= cred.expires) {
+            return undefined;
+        }
+        return cred.token;
+    }
+    // Handle OAuth
+    if (cred.type === 'oauth') {
+        // Check if token is valid
+        const expires = cred.expires ?? 0;
+        const now = Date.now();
+        if (now >= expires) {
+            // Token expired, try to refresh
+            if (cred.refresh && refreshFn) {
+                try {
+                    const newCreds = {
+                        refresh: cred.refresh,
+                        access: cred.access || '',
+                        expires: cred.expires || 0,
+                    };
+                    const refreshed = await refreshFn(newCreds);
+                    // Update stored credentials
+                    store.profiles[profileId] = {
+                        ...cred,
+                        access: refreshed.access,
+                        refresh: refreshed.refresh,
+                        expires: refreshed.expires,
+                    };
+                    saveAuthProfileStore(store);
+                    return refreshed.access;
+                }
+                catch {
+                    return undefined;
+                }
+            }
+            return undefined;
+        }
+        return cred.access;
+    }
+    return undefined;
+}
+/** Check if a profile has valid credentials */
+export function profileHasAuth(profileId) {
+    const store = loadAuthProfileStore();
+    const cred = store.profiles[profileId];
+    if (!cred) {
+        return false;
+    }
+    if (cred.type === 'api_key') {
+        return !!cred.key;
+    }
+    if (cred.type === 'token') {
+        // Check if expired
+        if (cred.expires && Date.now() >= cred.expires) {
+            return false;
+        }
+        return !!cred.token;
+    }
+    if (cred.type === 'oauth') {
+        // Check if valid (not expired)
+        const expires = cred.expires ?? 0;
+        return !!cred.access && Date.now() < expires;
+    }
+    return false;
+}
+/** Resolve profile for a provider (finds first available profile) */
+export function resolveProfileForProvider(provider, order) {
+    const store = loadAuthProfileStore();
+    // Use provided order or fall back to stored order
+    const profileIds = order ?? store.order?.[provider];
+    if (profileIds && profileIds.length > 0) {
+        for (const profileId of profileIds) {
+            const cred = store.profiles[profileId];
+            if (cred?.provider === provider && profileHasAuth(profileId)) {
+                return profileId;
+            }
+        }
+    }
+    // Fall back to any profile for this provider
+    for (const [profileId, cred] of Object.entries(store.profiles)) {
+        if (cred.provider === provider && profileHasAuth(profileId)) {
+            return profileId;
+        }
+    }
+    return undefined;
+}
+//# sourceMappingURL=oauth.js.map

package/dist/auth/profiles/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/auth/profiles/oauth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAExE,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,SAAiB,EACjB,SAAwE;IAExE,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAEvC,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,iBAAiB;IACjB,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,GAAG,CAAC;IACjB,CAAC;IAED,eAAe;IACf,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,mBAAmB;QACnB,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAChD,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACnB,CAAC;IAED,eAAe;IACf,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,0BAA0B;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;YACpB,gCAAgC;YAChC,IAAI,IAAI,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC;gBAC/B,IAAI,CAAC;oBACJ,MAAM,QAAQ,GAAqB;wBAClC,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;wBACzB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC;qBAC1B,CAAC;oBACF,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;oBAE5C,4BAA4B;oBAC5B,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG;wBAC3B,GAAG,IAAI;wBACP,MAAM,EAAE,SAAS,CAAC,MAAM;wBACxB,OAAO,EAAE,SAAS,CAAC,OAAO;wBAC1B,OAAO,EAAE,SAAS,CAAC,OAAO;qBAC1B,CAAC;oBACF,oBAAoB,CAAC,KAAK,CAAC,CAAC;oBAE5B,OAAO,SAAS,CAAC,MAAM,CAAC;gBACzB,CAAC;gBAAC,MAAM,CAAC;oBACR,OAAO,SAAS,CAAC;gBAClB,CAAC;YACF,CAAC;YACD,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC;IACpB,CAAC;IAED,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC/C,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAEvC,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO,KAAK,CAAC;IACd,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;IACnB,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,mBAAmB;QACnB,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAChD,OAAO,KAAK,CAAC;QACd,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;IACrB,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,+BAA+B;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IAC9C,CAAC;IAED,OAAO,KAAK,CAAC;AACd,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,yBAAyB,CACxC,QAAgB,EAChB,KAAgB;IAEhB,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IAErC,kDAAkD;IAClD,MAAM,UAAU,GAAG,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC;IAEpD,IAAI,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,IAAI,EAAE,QAAQ,KAAK,QAAQ,IAAI,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC9D,OAAO,SAAS,CAAC;YAClB,CAAC;QACF,CAAC;IACF,CAAC;IAED,6CAA6C;IAC7C,KAAK,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChE,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7D,OAAO,SAAS,CAAC;QAClB,CAAC;IACF,CAAC;IAED,OAAO,SAAS,CAAC;AAClB,CAAC"}

package/dist/auth/profiles/order.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Auth Profiles - Profile Order Resolution
+ *
+ * Resolves the order of auth profiles for a provider (round-robin, etc).
+ */
+/**
+ * Resolve auth profile order for a provider.
+ * Uses stored order if available, otherwise returns default order.
+ */
+export declare function resolveAuthProfileOrder(provider: string): string[];
+/**
+ * Get next profile in rotation for a provider.
+ * Considers last good profile and round-robin.
+ */
+export declare function getNextProfileInRotation(provider: string, availableProfiles: string[]): string | undefined;
+/**
+ * Mark a profile as "good" (working)
+ */
+export declare function markProfileGood(provider: string, profileId: string): void;

package/dist/auth/profiles/order.js

@@ -0,0 +1,63 @@
+/**
+ * Auth Profiles - Profile Order Resolution
+ *
+ * Resolves the order of auth profiles for a provider (round-robin, etc).
+ */
+import { loadAuthProfileStore } from './store.js';
+/**
+ * Resolve auth profile order for a provider.
+ * Uses stored order if available, otherwise returns default order.
+ */
+export function resolveAuthProfileOrder(provider) {
+    const store = loadAuthProfileStore();
+    // Use stored order if available
+    if (store.order && store.order[provider]) {
+        return store.order[provider];
+    }
+    // Return default: {provider}:default
+    return [`${provider}:default`];
+}
+/**
+ * Get next profile in rotation for a provider.
+ * Considers last good profile and round-robin.
+ */
+export function getNextProfileInRotation(provider, availableProfiles) {
+    if (availableProfiles.length === 0) {
+        return undefined;
+    }
+    if (availableProfiles.length === 1) {
+        return availableProfiles[0];
+    }
+    const store = loadAuthProfileStore();
+    const lastGood = store.lastGood?.[provider];
+    // Find next profile after last good one
+    if (lastGood) {
+        const currentIndex = availableProfiles.indexOf(lastGood);
+        if (currentIndex >= 0) {
+            const nextIndex = (currentIndex + 1) % availableProfiles.length;
+            return availableProfiles[nextIndex];
+        }
+    }
+    // Default to first available
+    return availableProfiles[0];
+}
+/**
+ * Mark a profile as "good" (working)
+ */
+export function markProfileGood(provider, profileId) {
+    const store = loadAuthProfileStore();
+    if (!store.lastGood) {
+        store.lastGood = {};
+    }
+    store.lastGood[provider] = profileId;
+    // Clear any cooldown for this profile
+    if (store.usageStats?.[profileId]) {
+        delete store.usageStats[profileId].cooldownUntil;
+        delete store.usageStats[profileId].disabledUntil;
+        delete store.usageStats[profileId].disabledReason;
+    }
+    import('./store.js').then(({ saveAuthProfileStore }) => {
+        saveAuthProfileStore(store);
+    });
+}
+//# sourceMappingURL=order.js.map

package/dist/auth/profiles/order.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"order.js","sourceRoot":"","sources":["../../../src/auth/profiles/order.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAElD;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACvD,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IAErC,gCAAgC;IAChC,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAED,qCAAqC;IACrC,OAAO,CAAC,GAAG,QAAQ,UAAU,CAAC,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACvC,QAAgB,EAChB,iBAA2B;IAE3B,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC;IAE5C,wCAAwC;IACxC,IAAI,QAAQ,EAAE,CAAC;QACd,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzD,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC;YAChE,OAAO,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACrC,CAAC;IACF,CAAC;IAED,6BAA6B;IAC7B,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,SAAiB;IAClE,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrB,KAAK,CAAC,QAAQ,GAAG,EAAE,CAAC;IACrB,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC;IAErC,sCAAsC;IACtC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC;QACjD,OAAO,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC;QACjD,OAAO,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC;IACnD,CAAC;IAED,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,oBAAoB,EAAE,EAAE,EAAE;QACtD,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/auth/profiles/profiles.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Auth Profiles - Profile Management
+ *
+ * CRUD operations for auth profiles.
+ */
+import type { AuthProfileCredential, AuthProfileEntry } from './types.js';
+/** Get all profiles for a provider */
+export declare function listProfilesForProvider(provider: string, dataDir?: string): AuthProfileEntry[];
+/** Get all auth profiles */
+export declare function listAllProfiles(dataDir?: string): AuthProfileEntry[];
+/** Get profile by ID */
+export declare function getProfile(profileId: string, dataDir?: string): AuthProfileCredential | undefined;
+/** Upsert (insert or update) an auth profile */
+export declare function upsertAuthProfile(profile: {
+    profileId: string;
+    credential: AuthProfileCredential;
+}, dataDir?: string): void;
+/** Remove an auth profile */
+export declare function removeAuthProfile(profileId: string, dataDir?: string): boolean;
+/** Set profile order for a provider */
+export declare function setAuthProfileOrder(provider: string, profileIds: string[], dataDir?: string): void;
+/** Get profile order for a provider */
+export declare function getAuthProfileOrder(provider: string, dataDir?: string): string[] | undefined;
+/** Get all providers with profiles */
+export declare function getProvidersWithProfiles(dataDir?: string): string[];
+/** Get auth path for display */
+export declare function getAuthStorePath(dataDir?: string): string;

package/dist/auth/profiles/profiles.js

@@ -0,0 +1,110 @@
+/**
+ * Auth Profiles - Profile Management
+ *
+ * CRUD operations for auth profiles.
+ */
+import { ensureAuthProfileStore, loadAuthProfileStore, saveAuthProfileStore, resolveAuthStorePath } from './store.js';
+function hasKey(cred) {
+    if (cred.type === 'api_key') {
+        return !!cred.key;
+    }
+    if (cred.type === 'token') {
+        return !!cred.token;
+    }
+    if (cred.type === 'oauth') {
+        return !!cred.access;
+    }
+    return false;
+}
+function getExpires(cred) {
+    if (cred.type === 'token') {
+        return cred.expires;
+    }
+    if (cred.type === 'oauth') {
+        return cred.expires;
+    }
+    return undefined;
+}
+/** Get all profiles for a provider */
+export function listProfilesForProvider(provider, dataDir) {
+    const store = loadAuthProfileStore(dataDir);
+    const profiles = [];
+    for (const [profileId, cred] of Object.entries(store.profiles)) {
+        if (cred.provider === provider) {
+            profiles.push({
+                profileId,
+                provider: cred.provider,
+                type: cred.type,
+                email: cred.email,
+                hasKey: hasKey(cred),
+                expires: getExpires(cred),
+            });
+        }
+    }
+    return profiles;
+}
+/** Get all auth profiles */
+export function listAllProfiles(dataDir) {
+    const store = loadAuthProfileStore(dataDir);
+    const profiles = [];
+    for (const [profileId, cred] of Object.entries(store.profiles)) {
+        profiles.push({
+            profileId,
+            provider: cred.provider,
+            type: cred.type,
+            email: cred.email,
+            hasKey: hasKey(cred),
+            expires: getExpires(cred),
+        });
+    }
+    return profiles;
+}
+/** Get profile by ID */
+export function getProfile(profileId, dataDir) {
+    const store = loadAuthProfileStore(dataDir);
+    return store.profiles[profileId];
+}
+/** Upsert (insert or update) an auth profile */
+export function upsertAuthProfile(profile, dataDir) {
+    const store = ensureAuthProfileStore(dataDir);
+    store.profiles[profile.profileId] = profile.credential;
+    saveAuthProfileStore(store, dataDir);
+}
+/** Remove an auth profile */
+export function removeAuthProfile(profileId, dataDir) {
+    const store = loadAuthProfileStore(dataDir);
+    if (store.profiles[profileId]) {
+        delete store.profiles[profileId];
+        saveAuthProfileStore(store, dataDir);
+        return true;
+    }
+    return false;
+}
+/** Set profile order for a provider */
+export function setAuthProfileOrder(provider, profileIds, dataDir) {
+    const store = ensureAuthProfileStore(dataDir);
+    if (!store.order) {
+        store.order = {};
+    }
+    store.order[provider] = profileIds;
+    saveAuthProfileStore(store, dataDir);
+}
+/** Get profile order for a provider */
+export function getAuthProfileOrder(provider, dataDir) {
+    const store = loadAuthProfileStore(dataDir);
+    return store.order?.[provider];
+}
+/** Get all providers with profiles */
+export function getProvidersWithProfiles(dataDir) {
+    const store = loadAuthProfileStore(dataDir);
+    const providers = new Set();
+    for (const cred of Object.values(store.profiles)) {
+        providers.add(cred.provider);
+    }
+    return Array.from(providers);
+}
+/** Get auth path for display */
+export function getAuthStorePath(dataDir) {
+    return resolveAuthStorePath(dataDir);
+}
+//# sourceMappingURL=profiles.js.map

package/dist/auth/profiles/profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.js","sourceRoot":"","sources":["../../../src/auth/profiles/profiles.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEtH,SAAS,MAAM,CAAC,IAA2B;IAC1C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;IACnB,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;IACrB,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IACtB,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,IAA2B;IAC9C,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAC;IACrB,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAC;IACrB,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,sCAAsC;AACtC,MAAM,UAAU,uBAAuB,CAAC,QAAgB,EAAE,OAAgB;IACzE,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAuB,EAAE,CAAC;IAExC,KAAK,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChE,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC;gBACb,SAAS;gBACT,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC;gBACpB,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC;aACzB,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,4BAA4B;AAC5B,MAAM,UAAU,eAAe,CAAC,OAAgB;IAC/C,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAuB,EAAE,CAAC;IAExC,KAAK,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChE,QAAQ,CAAC,IAAI,CAAC;YACb,SAAS;YACT,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC;YACpB,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC;SACzB,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,wBAAwB;AACxB,MAAM,UAAU,UAAU,CAAC,SAAiB,EAAE,OAAgB;IAC7D,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC5C,OAAO,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,iBAAiB,CAChC,OAGC,EACD,OAAgB;IAEhB,MAAM,KAAK,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAC9C,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;IACvD,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AACtC,CAAC;AAED,6BAA6B;AAC7B,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,OAAgB;IACpE,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACjC,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,UAAoB,EAAE,OAAgB;IAC3F,MAAM,KAAK,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAClB,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;IAClB,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC;IACnC,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AACtC,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,OAAgB;IACrE,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC5C,OAAO,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC;AAED,sCAAsC;AACtC,MAAM,UAAU,wBAAwB,CAAC,OAAgB;IACxD,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClD,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAC9B,CAAC;AAED,gCAAgC;AAChC,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAChD,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC;AACtC,CAAC"}

package/dist/auth/profiles/store.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Auth Profile Store
+ *
+ * Persistent storage for auth profiles.
+ * Handles loading, saving, and migration of auth credentials.
+ */
+import type { AuthProfileStore } from './types.js';
+/** Get the auth profiles file path */
+export declare function resolveAuthStorePath(dataDir?: string): string;
+/** Ensure auth store file exists */
+export declare function ensureAuthStoreFile(authPath: string): void;
+/** Load auth profile store from disk */
+export declare function loadAuthProfileStore(dataDir?: string): AuthProfileStore;
+/** Ensure auth profile store exists */
+export declare function ensureAuthProfileStore(dataDir?: string): AuthProfileStore;
+/** Save auth profile store to disk */
+export declare function saveAuthProfileStore(store: AuthProfileStore, dataDir?: string): void;