@xopcai/xopcbot 0.1.0

package/dist/auth/profiles/store.js

@@ -0,0 +1,234 @@
+/**
+ * Auth Profile Store
+ *
+ * Persistent storage for auth profiles.
+ * Handles loading, saving, and migration of auth credentials.
+ */
+import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync, unlinkSync } from 'node:fs';
+import path from 'node:path';
+import { homedir } from 'os';
+const AUTH_STORE_VERSION = 1;
+const AUTH_STORE_FILENAME = 'auth-profiles.json';
+/** Get the auth profiles file path */
+export function resolveAuthStorePath(dataDir) {
+    const dir = dataDir ?? path.join(homedir(), '.xopcbot');
+    return path.join(dir, AUTH_STORE_FILENAME);
+}
+/** Ensure auth store file exists */
+export function ensureAuthStoreFile(authPath) {
+    const dir = path.dirname(authPath);
+    if (!existsSync(dir)) {
+        mkdirSync(dir, { recursive: true, mode: 0o700 });
+    }
+    if (!existsSync(authPath)) {
+        writeFileSync(authPath, JSON.stringify({ version: AUTH_STORE_VERSION, profiles: {} }, null, 2));
+        chmodSync(authPath, 0o600);
+    }
+}
+function loadJsonFile(filePath) {
+    if (!existsSync(filePath)) {
+        return null;
+    }
+    try {
+        const content = readFileSync(filePath, 'utf-8');
+        return JSON.parse(content);
+    }
+    catch {
+        return null;
+    }
+}
+function saveJsonFile(filePath, data) {
+    const dir = path.dirname(filePath);
+    if (!existsSync(dir)) {
+        mkdirSync(dir, { recursive: true, mode: 0o700 });
+    }
+    writeFileSync(filePath, JSON.stringify(data, null, 2));
+    chmodSync(filePath, 0o600);
+}
+function coerceAuthStore(raw) {
+    if (!raw || typeof raw !== 'object') {
+        return null;
+    }
+    const record = raw;
+    if (!record.profiles || typeof record.profiles !== 'object') {
+        return null;
+    }
+    const profiles = record.profiles;
+    const normalized = {};
+    for (const [key, value] of Object.entries(profiles)) {
+        if (!value || typeof value !== 'object') {
+            continue;
+        }
+        const typed = value;
+        if (typed.type !== 'api_key' && typed.type !== 'oauth' && typed.type !== 'token') {
+            continue;
+        }
+        if (!typed.provider) {
+            continue;
+        }
+        normalized[key] = typed;
+    }
+    const order = record.order && typeof record.order === 'object'
+        ? Object.entries(record.order).reduce((acc, [provider, value]) => {
+            if (!Array.isArray(value)) {
+                return acc;
+            }
+            const list = value
+                .map((entry) => (typeof entry === 'string' ? entry.trim() : ''))
+                .filter(Boolean);
+            if (list.length === 0) {
+                return acc;
+            }
+            acc[provider] = list;
+            return acc;
+        }, {})
+        : undefined;
+    return {
+        version: Number(record.version ?? AUTH_STORE_VERSION),
+        profiles: normalized,
+        order,
+        lastGood: record.lastGood && typeof record.lastGood === 'object'
+            ? record.lastGood
+            : undefined,
+        usageStats: record.usageStats && typeof record.usageStats === 'object'
+            ? record.usageStats
+            : undefined,
+    };
+}
+/** Handle legacy auth.json format */
+function coerceLegacyStore(raw) {
+    if (!raw || typeof raw !== 'object') {
+        return null;
+    }
+    const record = raw;
+    if ('profiles' in record) {
+        return null;
+    }
+    const entries = {};
+    for (const [key, value] of Object.entries(record)) {
+        if (!value || typeof value !== 'object') {
+            continue;
+        }
+        const typed = value;
+        if (typed.type !== 'api_key' && typed.type !== 'oauth' && typed.type !== 'token') {
+            continue;
+        }
+        entries[key] = {
+            ...typed,
+            provider: String(typed.provider ?? key),
+        };
+    }
+    return Object.keys(entries).length > 0 ? entries : null;
+}
+function applyLegacyStore(store, legacy) {
+    for (const [provider, cred] of Object.entries(legacy)) {
+        const profileId = `${provider}:default`;
+        if (cred.type === 'api_key') {
+            store.profiles[profileId] = {
+                type: 'api_key',
+                provider: String(cred.provider ?? provider),
+                key: cred.key,
+                ...(cred.email ? { email: cred.email } : {}),
+            };
+            continue;
+        }
+        if (cred.type === 'token') {
+            store.profiles[profileId] = {
+                type: 'token',
+                provider: String(cred.provider ?? provider),
+                token: cred.token,
+                ...(typeof cred.expires === 'number' ? { expires: cred.expires } : {}),
+                ...(cred.email ? { email: cred.email } : {}),
+            };
+            continue;
+        }
+        store.profiles[profileId] = {
+            type: 'oauth',
+            provider: String(cred.provider ?? provider),
+            access: cred.access,
+            refresh: cred.refresh,
+            expires: cred.expires,
+            ...cred.enterpriseUrl ? { enterpriseUrl: cred.enterpriseUrl } : {},
+            ...cred.projectId ? { projectId: cred.projectId } : {},
+            ...cred.accountId ? { accountId: cred.accountId } : {},
+            ...(cred.email ? { email: cred.email } : {}),
+        };
+    }
+}
+function mergeRecord(base, override) {
+    if (!base && !override) {
+        return undefined;
+    }
+    if (!base) {
+        return { ...override };
+    }
+    if (!override) {
+        return { ...base };
+    }
+    return { ...base, ...override };
+}
+function _mergeAuthProfileStores(base, override) {
+    if (Object.keys(override.profiles).length === 0 &&
+        !override.order &&
+        !override.lastGood &&
+        !override.usageStats) {
+        return base;
+    }
+    return {
+        version: Math.max(base.version, override.version ?? base.version),
+        profiles: { ...base.profiles, ...override.profiles },
+        order: mergeRecord(base.order, override.order),
+        lastGood: mergeRecord(base.lastGood, override.lastGood),
+        usageStats: mergeRecord(base.usageStats, override.usageStats),
+    };
+}
+/** Load auth profile store from disk */
+export function loadAuthProfileStore(dataDir) {
+    const authPath = resolveAuthStorePath(dataDir);
+    const raw = loadJsonFile(authPath);
+    const asStore = coerceAuthStore(raw);
+    if (asStore) {
+        return asStore;
+    }
+    // Check for legacy auth.json
+    const legacyPath = path.join(path.dirname(authPath), 'auth.json');
+    const legacyRaw = loadJsonFile(legacyPath);
+    const legacy = coerceLegacyStore(legacyRaw);
+    if (legacy) {
+        const store = {
+            version: AUTH_STORE_VERSION,
+            profiles: {},
+        };
+        applyLegacyStore(store, legacy);
+        // Migrate to new format
+        saveAuthProfileStore(store, dataDir);
+        // Remove legacy file
+        try {
+            unlinkSync(legacyPath);
+        }
+        catch {
+            // Ignore
+        }
+        return store;
+    }
+    return { version: AUTH_STORE_VERSION, profiles: {} };
+}
+/** Ensure auth profile store exists */
+export function ensureAuthProfileStore(dataDir) {
+    const authPath = resolveAuthStorePath(dataDir);
+    ensureAuthStoreFile(authPath);
+    return loadAuthProfileStore(dataDir);
+}
+/** Save auth profile store to disk */
+export function saveAuthProfileStore(store, dataDir) {
+    const authPath = resolveAuthStorePath(dataDir);
+    const payload = {
+        version: AUTH_STORE_VERSION,
+        profiles: store.profiles,
+        order: store.order ?? undefined,
+        lastGood: store.lastGood ?? undefined,
+        usageStats: store.usageStats ?? undefined,
+    };
+    saveJsonFile(authPath, payload);
+}
+//# sourceMappingURL=store.js.map

package/dist/auth/profiles/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/auth/profiles/store.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACpG,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAG7B,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAC7B,MAAM,mBAAmB,GAAG,oBAAoB,CAAC;AAEjD,sCAAsC;AACtC,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACpD,MAAM,GAAG,GAAG,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;AAC5C,CAAC;AAED,oCAAoC;AACpC,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAChG,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;AACF,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB;IACrC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB,EAAE,IAAa;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACvD,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,eAAe,CAAC,GAAY;IACpC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,MAAM,GAAG,GAA8B,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAmC,CAAC;IAC5D,MAAM,UAAU,GAA0C,EAAE,CAAC;IAC7D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACzC,SAAS;QACV,CAAC;QACD,MAAM,KAAK,GAAG,KAAuC,CAAC;QACtD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAClF,SAAS;QACV,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACrB,SAAS;QACV,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,GAAG,KAA8B,CAAC;IAClD,CAAC;IACD,MAAM,KAAK,GACV,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;QAC/C,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAgC,CAAC,CAAC,MAAM,CAC/D,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE;YAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3B,OAAO,GAAG,CAAC;YACZ,CAAC;YACD,MAAM,IAAI,GAAG,KAAK;iBAChB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;iBAC/D,MAAM,CAAC,OAAO,CAAC,CAAC;YAClB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,GAAG,CAAC;YACZ,CAAC;YACD,GAAG,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;YACrB,OAAO,GAAG,CAAC;QACZ,CAAC,EACD,EAA8B,CAC9B;QACD,CAAC,CAAC,SAAS,CAAC;IACd,OAAO;QACN,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,kBAAkB,CAAC;QACrD,QAAQ,EAAE,UAAU;QACpB,KAAK;QACL,QAAQ,EACP,MAAM,CAAC,QAAQ,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;YACrD,CAAC,CAAE,MAAM,CAAC,QAAmC;YAC7C,CAAC,CAAC,SAAS;QACb,UAAU,EACT,MAAM,CAAC,UAAU,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;YACzD,CAAC,CAAE,MAAM,CAAC,UAAgD;YAC1D,CAAC,CAAC,SAAS;KACb,CAAC;AACH,CAAC;AAID,qCAAqC;AACrC,SAAS,iBAAiB,CAAC,GAAY;IACtC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,MAAM,GAAG,GAA8B,CAAC;IAC9C,IAAI,UAAU,IAAI,MAAM,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACzC,SAAS;QACV,CAAC;QACD,MAAM,KAAK,GAAG,KAAuC,CAAC;QACtD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAClF,SAAS;QACV,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG;YACd,GAAG,KAAK;YACR,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,GAAG,CAAC;SACd,CAAC;IAC5B,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACzD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAuB,EAAE,MAAuB;IACzE,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,GAAG,QAAQ,UAAU,CAAC;QACxC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG;gBAC3B,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;gBAC3C,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5C,CAAC;YACF,SAAS;QACV,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC3B,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG;gBAC3B,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;gBAC3C,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,GAAG,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5C,CAAC;YACF,SAAS;QACV,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG;YAC3B,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;YAC3C,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,GAAI,IAAY,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAG,IAAY,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE;YACpF,GAAI,IAAY,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAG,IAAY,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE;YACxE,GAAI,IAAY,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAG,IAAY,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE;YACxE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC;IACH,CAAC;AACF,CAAC;AAED,SAAS,WAAW,CACnB,IAAwB,EACxB,QAA4B;IAE5B,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;IACpB,CAAC;IACD,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,uBAAuB,CAC/B,IAAsB,EACtB,QAA0B;IAE1B,IACC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC;QAC3C,CAAC,QAAQ,CAAC,KAAK;QACf,CAAC,QAAQ,CAAC,QAAQ;QAClB,CAAC,QAAQ,CAAC,UAAU,EACnB,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO;QACN,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC;QACjE,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE;QACpD,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC;QAC9C,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC;QACvD,UAAU,EAAE,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC;KAC7D,CAAC;AACH,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACpD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,OAAO,EAAE,CAAC;QACb,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,6BAA6B;IAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,MAAM,EAAE,CAAC;QACZ,MAAM,KAAK,GAAqB;YAC/B,OAAO,EAAE,kBAAkB;YAC3B,QAAQ,EAAE,EAAE;SACZ,CAAC;QACF,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAChC,wBAAwB;QACxB,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACrC,qBAAqB;QACrB,IAAI,CAAC;YACJ,UAAU,CAAC,UAAU,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACR,SAAS;QACV,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AACtD,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACtD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC/C,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC9B,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC;AACtC,CAAC;AAED,sCAAsC;AACtC,MAAM,UAAU,oBAAoB,CAAC,KAAuB,EAAE,OAAgB;IAC7E,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG;QACf,OAAO,EAAE,kBAAkB;QAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,SAAS;QAC/B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,SAAS;QACrC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,SAAS;KACd,CAAC;IAC7B,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AACjC,CAAC"}

package/dist/auth/profiles/types.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Auth Profiles Types
+ *
+ * Type definitions for auth profile credentials and storage.
+ */
+import type { OAuthCredentials } from '@mariozechner/pi-ai';
+/** API key credential (static) */
+export interface ApiKeyCredential {
+    type: 'api_key';
+    provider: string;
+    key?: string;
+    email?: string;
+    /** Optional provider-specific metadata */
+    metadata?: Record<string, string>;
+}
+/** Token credential (static bearer-style, non-refreshable) */
+export interface TokenCredential {
+    type: 'token';
+    provider: string;
+    token: string;
+    /** Optional expiry timestamp (ms since epoch) */
+    expires?: number;
+    email?: string;
+}
+/** OAuth credential (refreshable) */
+export interface OAuthCredential extends OAuthCredentials {
+    type: 'oauth';
+    provider: string;
+    clientId?: string;
+    email?: string;
+}
+/** Any credential type */
+export type AuthProfileCredential = ApiKeyCredential | TokenCredential | OAuthCredential;
+/** Failure reason for auth profile */
+export type AuthProfileFailureReason = 'auth' | 'format' | 'rate_limit' | 'billing' | 'timeout' | 'unknown';
+/** Per-profile usage statistics for round-robin and cooldown tracking */
+export interface ProfileUsageStats {
+    lastUsed?: number;
+    cooldownUntil?: number;
+    disabledUntil?: number;
+    disabledReason?: AuthProfileFailureReason;
+    errorCount?: number;
+    failureCounts?: Partial<Record<AuthProfileFailureReason, number>>;
+    lastFailureAt?: number;
+}
+/** Auth profile store */
+export interface AuthProfileStore {
+    version: number;
+    profiles: Record<string, AuthProfileCredential>;
+    /** Optional per-agent preferred profile order overrides */
+    order?: Record<string, string[]>;
+    lastGood?: Record<string, string>;
+    /** Usage statistics per profile for round-robin rotation */
+    usageStats?: Record<string, ProfileUsageStats>;
+}
+/** Auth profile entry (for listing) */
+export interface AuthProfileEntry {
+    profileId: string;
+    provider: string;
+    type: 'api_key' | 'token' | 'oauth';
+    email?: string;
+    hasKey: boolean;
+    expires?: number;
+}

package/dist/auth/profiles/types.js

@@ -0,0 +1,7 @@
+/**
+ * Auth Profiles Types
+ *
+ * Type definitions for auth profile credentials and storage.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/auth/profiles/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/auth/profiles/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/auth/profiles/usage.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Auth Profiles - Usage Tracking
+ *
+ * Track profile usage for round-robin rotation and cooldown management.
+ */
+import type { AuthProfileFailureReason, ProfileUsageStats } from './types.js';
+/** Mark a profile as used */
+export declare function markProfileUsed(profileId: string): void;
+/** Mark a profile failure */
+export declare function markProfileFailure(profileId: string, reason: AuthProfileFailureReason): void;
+/** Check if profile is in cooldown */
+export declare function isProfileInCooldown(profileId: string): boolean;
+/** Get cooldown status for display */
+export declare function getCooldownStatus(profileId: string): {
+    inCooldown: boolean;
+    until?: number;
+    reason?: string;
+};
+/** Clear cooldown for a profile */
+export declare function clearProfileCooldown(profileId: string): void;
+/** Get profile usage stats */
+export declare function getProfileUsageStats(profileId: string): ProfileUsageStats | undefined;
+/** Calculate cooldown ms for a profile */
+export declare function calculateProfileCooldownMs(profileId: string): number;

package/dist/auth/profiles/usage.js

@@ -0,0 +1,99 @@
+/**
+ * Auth Profiles - Usage Tracking
+ *
+ * Track profile usage for round-robin rotation and cooldown management.
+ */
+import { loadAuthProfileStore, saveAuthProfileStore } from './store.js';
+const DEFAULT_COOLDOWN_HOURS = 5;
+const MAX_COOLDOWN_HOURS = 24;
+const _FAILURE_WINDOW_HOURS = 24;
+/** Mark a profile as used */
+export function markProfileUsed(profileId) {
+    const store = loadAuthProfileStore();
+    if (!store.usageStats) {
+        store.usageStats = {};
+    }
+    const stats = store.usageStats[profileId] ?? {};
+    stats.lastUsed = Date.now();
+    store.usageStats[profileId] = stats;
+    saveAuthProfileStore(store);
+}
+/** Mark a profile failure */
+export function markProfileFailure(profileId, reason) {
+    const store = loadAuthProfileStore();
+    if (!store.usageStats) {
+        store.usageStats = {};
+    }
+    const stats = store.usageStats[profileId] ?? {};
+    stats.lastFailureAt = Date.now();
+    stats.errorCount = (stats.errorCount ?? 0) + 1;
+    stats.failureCounts = {
+        ...stats.failureCounts,
+        [reason]: (stats.failureCounts?.[reason] ?? 0) + 1,
+    };
+    // Apply cooldown based on failure count
+    const failures = stats.errorCount ?? 1;
+    const cooldownHours = Math.min(defaultCooldownHours() * Math.pow(2, failures - 1), MAX_COOLDOWN_HOURS);
+    stats.cooldownUntil = Date.now() + cooldownHours * 60 * 60 * 1000;
+    stats.disabledReason = reason;
+    store.usageStats[profileId] = stats;
+    saveAuthProfileStore(store);
+}
+function defaultCooldownHours() {
+    // Could be made configurable
+    return DEFAULT_COOLDOWN_HOURS;
+}
+/** Check if profile is in cooldown */
+export function isProfileInCooldown(profileId) {
+    const store = loadAuthProfileStore();
+    const stats = store.usageStats?.[profileId];
+    if (!stats) {
+        return false;
+    }
+    const cooldownUntil = stats.cooldownUntil ?? 0;
+    return Date.now() < cooldownUntil;
+}
+/** Get cooldown status for display */
+export function getCooldownStatus(profileId) {
+    const store = loadAuthProfileStore();
+    const stats = store.usageStats?.[profileId];
+    if (!stats || !stats.cooldownUntil) {
+        return { inCooldown: false };
+    }
+    const now = Date.now();
+    if (now >= stats.cooldownUntil) {
+        return { inCooldown: false };
+    }
+    return {
+        inCooldown: true,
+        until: stats.cooldownUntil,
+        reason: stats.disabledReason,
+    };
+}
+/** Clear cooldown for a profile */
+export function clearProfileCooldown(profileId) {
+    const store = loadAuthProfileStore();
+    if (store.usageStats?.[profileId]) {
+        delete store.usageStats[profileId].cooldownUntil;
+        delete store.usageStats[profileId].disabledUntil;
+        delete store.usageStats[profileId].disabledReason;
+        saveAuthProfileStore(store);
+    }
+}
+/** Get profile usage stats */
+export function getProfileUsageStats(profileId) {
+    const store = loadAuthProfileStore();
+    return store.usageStats?.[profileId];
+}
+/** Calculate cooldown ms for a profile */
+export function calculateProfileCooldownMs(profileId) {
+    const store = loadAuthProfileStore();
+    const stats = store.usageStats?.[profileId];
+    if (!stats?.errorCount) {
+        return 0;
+    }
+    const failures = stats.errorCount;
+    const cooldownHours = Math.min(defaultCooldownHours() * Math.pow(2, failures - 1), MAX_COOLDOWN_HOURS);
+    return cooldownHours * 60 * 60 * 1000;
+}
+//# sourceMappingURL=usage.js.map

package/dist/auth/profiles/usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.js","sourceRoot":"","sources":["../../../src/auth/profiles/usage.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAExE,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACjC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAEjC,6BAA6B;AAC7B,MAAM,UAAU,eAAe,CAAC,SAAiB;IAChD,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IAErC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACvB,KAAK,CAAC,UAAU,GAAG,EAAE,CAAC;IACvB,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAChD,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE5B,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;IACpC,oBAAoB,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,6BAA6B;AAC7B,MAAM,UAAU,kBAAkB,CAAC,SAAiB,EAAE,MAAgC;IACrF,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IAErC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACvB,KAAK,CAAC,UAAU,GAAG,EAAE,CAAC;IACvB,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAChD,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACjC,KAAK,CAAC,UAAU,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/C,KAAK,CAAC,aAAa,GAAG;QACrB,GAAG,KAAK,CAAC,aAAa;QACtB,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;KAClD,CAAC;IAEF,wCAAwC;IACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC;IACvC,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAC7B,oBAAoB,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,EAClD,kBAAkB,CAClB,CAAC;IAEF,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAClE,KAAK,CAAC,cAAc,GAAG,MAAM,CAAC;IAE9B,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;IACpC,oBAAoB,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,oBAAoB;IAC5B,6BAA6B;IAC7B,OAAO,sBAAsB,CAAC;AAC/B,CAAC;AAED,sCAAsC;AACtC,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACpD,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC,CAAC;IAE5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC;IACd,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC;IAC/C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC;AACnC,CAAC;AAED,sCAAsC;AACtC,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IAClD,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC,CAAC;IAE5C,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QACpC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,GAAG,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QAChC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO;QACN,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,aAAa;QAC1B,MAAM,EAAE,KAAK,CAAC,cAAc;KAC5B,CAAC;AACH,CAAC;AAED,mCAAmC;AACnC,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACrD,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IAErC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC;QACjD,OAAO,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC;QACjD,OAAO,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC;QAClD,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;AACF,CAAC;AAED,8BAA8B;AAC9B,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACrD,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACrC,OAAO,KAAK,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC,CAAC;AACtC,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,0BAA0B,CAAC,SAAiB;IAC3D,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC,CAAC;IAE5C,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC;QACxB,OAAO,CAAC,CAAC;IACV,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC;IAClC,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAC7B,oBAAoB,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,EAClD,kBAAkB,CAClB,CAAC;IAEF,OAAO,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACvC,CAAC"}

package/dist/auth/storage.d.ts

@@ -0,0 +1,99 @@
+/**
+ * Auth Storage
+ *
+ * Credential storage for API keys and OAuth tokens.
+ * Supports environment variables, file-based storage, and OAuth with token refresh.
+ */
+import type { OAuthCredentials, OAuthProviderInterface, OAuthLoginCallbacks } from './oauth/types.js';
+export interface AuthEntry {
+    provider: string;
+    type: 'api_key' | 'token' | 'oauth';
+    key?: string;
+    metadata?: Record<string, string>;
+    createdAt?: string;
+    updatedAt?: string;
+    refresh?: string;
+    access?: string;
+    expires?: number;
+}
+export interface AuthStorageOptions {
+    /** Directory for auth file (default: ~/.xopcbot) */
+    dataDir?: string;
+    /** Auth filename (default: auth.json) */
+    filename?: string;
+}
+export declare class AuthStorage {
+    private filePath;
+    private cache;
+    private dataDir;
+    private runtimeOverrides;
+    private oauthProviders;
+    constructor(options?: AuthStorageOptions);
+    private load;
+    private save;
+    /**
+     * Register an OAuth provider for login support.
+     */
+    registerOAuthProvider(provider: OAuthProviderInterface): void;
+    /**
+     * Set a runtime API key override (not persisted to disk).
+     * Used for CLI --api-key flag.
+     */
+    setRuntimeApiKey(provider: string, apiKey: string): void;
+    /**
+     * Remove a runtime API key override.
+     */
+    removeRuntimeApiKey(provider: string): void;
+    /** Get API key for a provider (async for OAuth) */
+    getApiKey(provider: string): Promise<string | undefined>;
+    /**
+     * Get API key for OAuth provider, with automatic token refresh if needed.
+     */
+    private getOAuthApiKey;
+    /** Get token for a provider */
+    getToken(provider: string): string | undefined;
+    /** Set API key for a provider */
+    setApiKey(provider: string, key: string, metadata?: Record<string, string>): void;
+    /** Set token for a provider */
+    setToken(provider: string, token: string, metadata?: Record<string, string>): void;
+    /**
+     * Set OAuth credentials for a provider.
+     */
+    setOAuthCredentials(provider: string, credentials: OAuthCredentials): void;
+    /**
+     * Get OAuth credentials for a provider.
+     */
+    getOAuthCredentials(provider: string): OAuthCredentials | undefined;
+    /**
+     * Check if provider has OAuth credentials.
+     */
+    hasOAuthCredentials(provider: string): boolean;
+    /**
+     * Login to an OAuth provider.
+     */
+    login(providerId: string, callbacks: OAuthLoginCallbacks): Promise<void>;
+    /**
+     * Logout from a provider (removes credentials).
+     */
+    logout(provider: string): void;
+    /** Check if provider has auth configured */
+    hasAuth(provider: string): boolean;
+    /** Get all configured providers */
+    getConfiguredProviders(): string[];
+    /** Get credential type for a provider */
+    getCredentialType(provider: string): string | undefined;
+    /** Remove auth for a provider */
+    remove(provider: string): boolean;
+    /** Clear all auth */
+    clear(): void;
+    /** Reload credentials from disk */
+    reload(): void;
+    /** Export auth data (safe for debugging) */
+    export(): Record<string, {
+        type: string;
+        hasKey: boolean;
+        hasOAuth?: boolean;
+    }>;
+    /** Get the auth file path */
+    getAuthPath(): string;
+}