aemeathcli 1.0.5 → 1.0.7

package/dist/gemini-login-CNKA6JPU.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/auth/providers/gemini-login.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAgBA,IAAM,aAAA,GAAgB,UAAU,QAAQ,CAAA;AAIxC,IAAM,WAAA,GAAc,QAAA;AAEpB,SAAS,aAAA,GAAwB;AAC/B,EAAA,OAAO,QAAQ,GAAA,CAAI,aAAa,KAAK,IAAA,CAAK,OAAA,IAAW,SAAS,CAAA;AAChE;AAEA,SAAS,iBAAA,GAA4B;AACnC,EAAA,OAAO,IAAA,CAAK,aAAA,EAAc,EAAG,kBAAkB,CAAA;AACjD;AAEA,SAAS,qBAAA,GAAgC;AACvC,EAAA,OAAO,IAAA,CAAK,aAAA,EAAc,EAAG,sBAAsB,CAAA;AACrD;AAiBA,SAAS,cAAA,GAAgD;AACvD,EAAA,MAAM,YAAY,iBAAA,EAAkB;AACpC,EAAA,IAAI,CAAC,UAAA,CAAW,SAAS,CAAA,EAAG,OAAO,MAAA;AACnC,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,KAAA,CAAM,YAAA,CAAa,SAAA,EAAW,OAAO,CAAC,CAAA;AAAA,EACpD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAEA,SAAS,kBAAA,GAAkD;AACzD,EAAA,MAAM,eAAe,qBAAA,EAAsB;AAC3C,EAAA,IAAI,CAAC,UAAA,CAAW,YAAY,CAAA,EAAG,OAAO,MAAA;AACtC,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,KAAA,CAAM,YAAA,CAAa,YAAA,EAAc,OAAO,CAAC,CAAA;AAAA,EACvD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAEA,SAAS,wBAAwB,OAAA,EAAqC;AACpE,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,CAAM,GAAG,EAAE,CAAC,CAAA;AACpC,IAAA,IAAI,CAAC,SAAS,OAAO,KAAA,CAAA;AACrB,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,IAAA,CAAK,SAAS,WAAW,CAAA,CAAE,QAAA,CAAS,MAAM,CAAC,CAAA;AAC7E,IAAA,OAAO,OAAA,CAAQ,KAAA;AAAA,EACjB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAIO,IAAM,cAAN,MAAkB;AAAA,EACN,eAAA;AAAA,EAEjB,YAAY,KAAA,EAAyB;AACnC,IAAA,IAAA,CAAK,eAAA,GAAkB,KAAA,IAAS,IAAI,eAAA,EAAgB;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,KAAA,GAA8B;AAElC,IAAA,MAAM,QAAA,GAAW,KAAK,oBAAA,EAAqB;AAC3C,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,MAAM,YAAY,QAAA,CAAS,SAAA,uBAAgB,IAAA,EAAK,GAAI,SAAS,SAAA,GAAY,KAAA;AACzE,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,MAAA,CAAO,KAAK,qEAAqE,CAAA;AACjF,QAAA,MAAM,IAAA,CAAK,eAAA,CAAgB,GAAA,CAAI,QAAA,EAAU,QAAQ,CAAA;AACjD,QAAA,OAAO,QAAA;AAAA,MACT;AAAA,IACF;AAGA,IAAA,MAAM,YAAA,GAAe,MAAM,IAAA,CAAK,cAAA,EAAe;AAC/C,IAAA,IAAI,CAAC,YAAA,EAAc;AACjB,MAAA,MAAM,IAAI,mBAAA;AAAA,QACR,QAAA;AAAA,QACA;AAAA,OAEF;AAAA,IACF;AAGA,IAAA,MAAA,CAAO,KAAK,yDAAyD,CAAA;AACrE,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,CAAK,gBAAA,CAAiB,WAAA,EAAa,CAAC,OAAO,CAAC,CAAA;AAAA,IACpD,SAAS,KAAA,EAAgB;AACvB,MAAA,MAAM,MAAM,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,OAAO,KAAK,CAAA;AACjE,MAAA,MAAM,IAAI,mBAAA,CAAoB,QAAA,EAAU,CAAA,qBAAA,EAAwB,GAAG,CAAA,CAAE,CAAA;AAAA,IACvE;AAGA,IAAA,MAAM,UAAA,GAAa,KAAK,oBAAA,EAAqB;AAC7C,IAAA,IAAI,CAAC,UAAA,EAAY;AACf,MAAA,MAAM,IAAI,mBAAA;AAAA,QACR,QAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AAEA,IAAA,MAAM,IAAA,CAAK,eAAA,CAAgB,GAAA,CAAI,QAAA,EAAU,UAAU,CAAA;AACnD,IAAA,MAAA,CAAO,KAAK,0CAA0C,CAAA;AACtD,IAAA,OAAO,UAAA;AAAA,EACT;AAAA,EAEA,MAAM,MAAA,GAAwB;AAC5B,IAAA,MAAM,IAAA,CAAK,eAAA,CAAgB,MAAA,CAAO,QAAQ,CAAA;AAC1C,IAAA,MAAA,CAAO,KAAK,wCAAwC,CAAA;AAAA,EACtD;AAAA,EAEA,MAAM,UAAA,GAA+B;AACnC,IAAA,MAAM,UAAA,GAAa,KAAK,oBAAA,EAAqB;AAC7C,IAAA,IAAI,CAAC,YAAY,OAAO,KAAA;AACxB,IAAA,IAAI,UAAA,CAAW,6BAAa,IAAI,IAAA,KAAS,UAAA,CAAW,SAAA,IAAa,UAAA,CAAW,YAAA,KAAiB,MAAA,EAAW;AACtG,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,MAAM,IAAA,CAAK,eAAA,CAAgB,GAAA,CAAI,QAAA,EAAU,UAAU,CAAA;AACnD,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,MAAM,SAAA,GAAmG;AACvG,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,UAAA,EAAW;AACvC,IAAA,IAAI,CAAC,QAAA,EAAU,OAAO,EAAE,UAAU,KAAA,EAAM;AAExC,IAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,eAAA,CAAgB,IAAI,QAAQ,CAAA;AAC1D,IAAA,IAAI,CAAC,UAAA,EAAY,OAAO,EAAE,UAAU,KAAA,EAAM;AAE1C,IAAA,OAAO;AAAA,MACL,QAAA,EAAU,IAAA;AAAA,MACV,GAAI,WAAW,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,UAAA,CAAW,KAAA,EAAM,GAAI,EAAC;AAAA,MACpE,IAAA,EAAM;AAAA,KACR;AAAA,EACF;AAAA,EAEA,MAAM,mBAAA,GAAwD;AAC5D,IAAA,MAAM,UAAA,GAAa,KAAK,oBAAA,EAAqB;AAC7C,IAAA,IAAI,UAAA,EAAY;AACd,MAAA,MAAM,IAAA,CAAK,eAAA,CAAgB,GAAA,CAAI,QAAA,EAAU,UAAU,CAAA;AAAA,IACrD;AACA,IAAA,OAAO,UAAA;AAAA,EACT;AAAA;AAAA,EAIQ,oBAAA,GAAgD;AACtD,IAAA,MAAM,aAAa,cAAA,EAAe;AAClC,IAAA,IAAI,CAAC,UAAA,EAAY,YAAA,EAAc,OAAO,MAAA;AAEtC,IAAA,IAAI,KAAA;AACJ,IAAA,MAAM,WAAW,kBAAA,EAAmB;AACpC,IAAA,IAAI,UAAU,MAAA,EAAQ;AACpB,MAAA,KAAA,GAAQ,QAAA,CAAS,MAAA;AAAA,IACnB,CAAA,MAAA,IAAW,WAAW,QAAA,EAAU;AAC9B,MAAA,KAAA,GAAQ,uBAAA,CAAwB,WAAW,QAAQ,CAAA;AAAA,IACrD;AAEA,IAAA,MAAM,YAAY,UAAA,CAAW,WAAA,GAAc,IAAI,IAAA,CAAK,UAAA,CAAW,WAAW,CAAA,GAAI,MAAA;AAE9E,IAAA,OAAO;AAAA,MACL,QAAA,EAAU,QAAA;AAAA,MACV,MAAA,EAAQ,cAAA;AAAA,MACR,OAAO,UAAA,CAAW,YAAA;AAAA,MAClB,GAAI,WAAW,aAAA,KAAkB,MAAA,GAAY,EAAE,YAAA,EAAc,UAAA,CAAW,aAAA,EAAc,GAAI,EAAC;AAAA,MAC3F,GAAI,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,KAAc,EAAC;AAAA,MAC/C,GAAI,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,KAAU,EAAC;AAAA,MACvC,IAAA,EAAM;AAAA,KACR;AAAA,EACF;AAAA,EAEQ,gBAAA,CAAiB,SAAiB,IAAA,EAAwC;AAChF,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,MAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,OAAA,EAAS,CAAC,GAAG,IAAI,CAAA,EAAG,EAAE,KAAA,EAAO,SAAA,EAAW,OAAA,EAAS,GAAA,EAAS,CAAA;AAC9E,MAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAS;AAC1B,QAAA,IAAI,IAAA,KAAS,GAAG,OAAA,EAAQ;AAAA,aACnB,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,yBAAA,EAA4B,OAAO,IAAI,CAAC,EAAE,CAAC,CAAA;AAAA,MACnE,CAAC,CAAA;AACD,MAAA,KAAA,CAAM,EAAA,CAAG,SAAS,MAAM,CAAA;AAAA,IAC1B,CAAC,CAAA;AAAA,EACH;AAAA,EAEA,MAAc,cAAA,GAAmC;AAC/C,IAAA,IAAI;AACF,MAAA,MAAM,aAAA,CAAc,SAAS,CAAC,WAAW,GAAG,EAAE,OAAA,EAAS,KAAM,CAAA;AAC7D,MAAA,OAAO,IAAA;AAAA,IACT,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AACF","file":"gemini-login-CNKA6JPU.js","sourcesContent":["/**\n * Gemini (Google) delegated authentication\n * Spawns `gemini login` which opens the browser automatically for Google login.\n * After login, reads cached tokens from ~/.gemini/oauth_creds.json.\n */\n\nimport { execFile, spawn } from \"node:child_process\";\nimport { promisify } from \"node:util\";\nimport { readFileSync, existsSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { homedir } from \"node:os\";\nimport type { ICredential } from \"../../types/index.js\";\nimport { AuthenticationError } from \"../../types/index.js\";\nimport { CredentialStore } from \"../credential-store.js\";\nimport { logger } from \"../../utils/index.js\";\n\nconst execFileAsync = promisify(execFile);\n\n// ── Gemini CLI Token Paths ──────────────────────────────────────────────\n\nconst CLI_COMMAND = \"gemini\";\n\nfunction getGeminiHome(): string {\n  return process.env[\"GEMINI_HOME\"] ?? join(homedir(), \".gemini\");\n}\n\nfunction getOAuthCredsPath(): string {\n  return join(getGeminiHome(), \"oauth_creds.json\");\n}\n\nfunction getGoogleAccountsPath(): string {\n  return join(getGeminiHome(), \"google_accounts.json\");\n}\n\n// ── Read existing tokens from Gemini CLI cache ──────────────────────────\n\ninterface IGeminiOAuthCreds {\n  readonly access_token?: string;\n  readonly scope?: string;\n  readonly token_type?: string;\n  readonly id_token?: string;\n  readonly expiry_date?: number;\n  readonly refresh_token?: string;\n}\n\ninterface IGoogleAccounts {\n  readonly active?: string;\n}\n\nfunction readOAuthCreds(): IGeminiOAuthCreds | undefined {\n  const credsPath = getOAuthCredsPath();\n  if (!existsSync(credsPath)) return undefined;\n  try {\n    return JSON.parse(readFileSync(credsPath, \"utf-8\")) as IGeminiOAuthCreds;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction readGoogleAccounts(): IGoogleAccounts | undefined {\n  const accountsPath = getGoogleAccountsPath();\n  if (!existsSync(accountsPath)) return undefined;\n  try {\n    return JSON.parse(readFileSync(accountsPath, \"utf-8\")) as IGoogleAccounts;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction extractEmailFromIdToken(idToken: string): string | undefined {\n  try {\n    const payload = idToken.split(\".\")[1];\n    if (!payload) return undefined;\n    const decoded = JSON.parse(Buffer.from(payload, \"base64url\").toString(\"utf8\")) as { email?: string };\n    return decoded.email;\n  } catch {\n    return undefined;\n  }\n}\n\n// ── GeminiLogin Class ───────────────────────────────────────────────────\n\nexport class GeminiLogin {\n  private readonly credentialStore: CredentialStore;\n\n  constructor(store?: CredentialStore) {\n    this.credentialStore = store ?? new CredentialStore();\n  }\n\n  /**\n   * Spawn `gemini login` which opens the browser automatically for Google login,\n   * then read the cached tokens from ~/.gemini/oauth_creds.json.\n   */\n  async login(): Promise<ICredential> {\n    // Check if already logged in via cached tokens\n    const existing = this.readCachedCredential();\n    if (existing) {\n      const isExpired = existing.expiresAt ? new Date() > existing.expiresAt : false;\n      if (!isExpired) {\n        logger.info(\"Found existing Gemini CLI credentials in ~/.gemini/oauth_creds.json\");\n        await this.credentialStore.set(\"google\", existing);\n        return existing;\n      }\n    }\n\n    // Check if the CLI is available\n    const cliAvailable = await this.isCliAvailable();\n    if (!cliAvailable) {\n      throw new AuthenticationError(\n        \"google\",\n        \"Gemini CLI not found. Install it first: npm install -g @anthropic-ai/gemini-cli\\n\" +\n        \"Or set an API key: aemeathcli auth set-key gemini <key>\",\n      );\n    }\n\n    // Spawn `gemini login` — browser opens automatically\n    logger.info(\"Spawning gemini login (browser will open automatically)\");\n    try {\n      await this.spawnInteractive(CLI_COMMAND, [\"login\"]);\n    } catch (error: unknown) {\n      const msg = error instanceof Error ? error.message : String(error);\n      throw new AuthenticationError(\"google\", `Gemini login failed: ${msg}`);\n    }\n\n    // Read the freshly cached credentials\n    const credential = this.readCachedCredential();\n    if (!credential) {\n      throw new AuthenticationError(\n        \"google\",\n        \"No credentials found after Gemini login. Please try again or set an API key: aemeathcli auth set-key gemini <key>\",\n      );\n    }\n\n    await this.credentialStore.set(\"google\", credential);\n    logger.info(\"Gemini credentials imported successfully\");\n    return credential;\n  }\n\n  async logout(): Promise<void> {\n    await this.credentialStore.delete(\"google\");\n    logger.info(\"Google session revoked from AemeathCLI\");\n  }\n\n  async isLoggedIn(): Promise<boolean> {\n    const credential = this.readCachedCredential();\n    if (!credential) return false;\n    if (credential.expiresAt && new Date() > credential.expiresAt && credential.refreshToken === undefined) {\n      return false;\n    }\n\n    await this.credentialStore.set(\"google\", credential);\n    return true;\n  }\n\n  async getStatus(): Promise<{ loggedIn: boolean; email?: string | undefined; plan?: string | undefined }> {\n    const loggedIn = await this.isLoggedIn();\n    if (!loggedIn) return { loggedIn: false };\n\n    const credential = await this.credentialStore.get(\"google\");\n    if (!credential) return { loggedIn: false };\n\n    return {\n      loggedIn: true,\n      ...(credential.email !== undefined ? { email: credential.email } : {}),\n      plan: \"Google AI\",\n    };\n  }\n\n  async getCachedCredential(): Promise<ICredential | undefined> {\n    const credential = this.readCachedCredential();\n    if (credential) {\n      await this.credentialStore.set(\"google\", credential);\n    }\n    return credential;\n  }\n\n  // ── Internal ──────────────────────────────────────────────────────────\n\n  private readCachedCredential(): ICredential | undefined {\n    const oauthCreds = readOAuthCreds();\n    if (!oauthCreds?.access_token) return undefined;\n\n    let email: string | undefined;\n    const accounts = readGoogleAccounts();\n    if (accounts?.active) {\n      email = accounts.active;\n    } else if (oauthCreds.id_token) {\n      email = extractEmailFromIdToken(oauthCreds.id_token);\n    }\n\n    const expiresAt = oauthCreds.expiry_date ? new Date(oauthCreds.expiry_date) : undefined;\n\n    return {\n      provider: \"google\",\n      method: \"native_login\",\n      token: oauthCreds.access_token,\n      ...(oauthCreds.refresh_token !== undefined ? { refreshToken: oauthCreds.refresh_token } : {}),\n      ...(expiresAt !== undefined ? { expiresAt } : {}),\n      ...(email !== undefined ? { email } : {}),\n      plan: \"Google AI\",\n    };\n  }\n\n  private spawnInteractive(command: string, args: readonly string[]): Promise<void> {\n    return new Promise((resolve, reject) => {\n      const child = spawn(command, [...args], { stdio: \"inherit\", timeout: 300_000 });\n      child.on(\"close\", (code) => {\n        if (code === 0) resolve();\n        else reject(new Error(`Process exited with code ${String(code)}`));\n      });\n      child.on(\"error\", reject);\n    });\n  }\n\n  private async isCliAvailable(): Promise<boolean> {\n    try {\n      await execFileAsync(\"which\", [CLI_COMMAND], { timeout: 3000 });\n      return true;\n    } catch {\n      return false;\n    }\n  }\n}\n"]}

package/dist/kimi-login-CZPS63NK.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/auth/providers/kimi-login.ts"],"names":["expiresAt"],"mappings":";;;;;;;;;;;;;;AAiBA,IAAM,aAAA,GAAgB,UAAU,QAAQ,CAAA;AAIxC,IAAM,WAAA,GAAc,MAAA;AAEpB,SAAS,WAAA,GAAsB;AAC7B,EAAA,OAAO,QAAQ,GAAA,CAAI,WAAW,KAAK,IAAA,CAAK,OAAA,IAAW,OAAO,CAAA;AAC5D;AAEA,SAAS,kBAAA,GAA6B;AACpC,EAAA,OAAO,IAAA,CAAK,WAAA,EAAY,EAAG,aAAA,EAAe,gBAAgB,CAAA;AAC5D;AAYA,SAAS,mBAAA,GAAoD;AAC3D,EAAA,MAAM,YAAY,kBAAA,EAAmB;AACrC,EAAA,IAAI,CAAC,UAAA,CAAW,SAAS,CAAA,EAAG,OAAO,MAAA;AACnC,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,KAAA,CAAM,YAAA,CAAa,SAAA,EAAW,OAAO,CAAC,CAAA;AAAA,EACpD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAIO,IAAM,YAAN,MAAgB;AAAA,EACJ,eAAA;AAAA,EAEjB,YAAY,KAAA,EAAyB;AACnC,IAAA,IAAA,CAAK,eAAA,GAAkB,KAAA,IAAS,IAAI,eAAA,EAAgB;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,KAAA,GAA8B;AAElC,IAAA,MAAM,QAAA,GAAW,KAAK,qBAAA,EAAsB;AAC5C,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,MAAA,CAAO,KAAK,qCAAqC,CAAA;AACjD,MAAA,MAAM,IAAA,CAAK,eAAA,CAAgB,GAAA,CAAI,MAAA,EAAQ,QAAQ,CAAA;AAC/C,MAAA,OAAO,QAAA;AAAA,IACT;AAGA,IAAA,MAAM,YAAA,GAAe,MAAM,IAAA,CAAK,cAAA,EAAe;AAC/C,IAAA,IAAI,CAAC,YAAA,EAAc;AACjB,MAAA,MAAM,IAAI,mBAAA;AAAA,QACR,MAAA;AAAA,QACA;AAAA,OAEF;AAAA,IACF;AAGA,IAAA,MAAA,CAAO,KAAK,+DAA+D,CAAA;AAC3E,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,CAAK,gBAAA,CAAiB,WAAA,EAAa,CAAC,OAAO,CAAC,CAAA;AAAA,IACpD,CAAA,CAAA,MAAQ;AAEN,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,CAAK,gBAAA,CAAiB,WAAA,EAAa,EAAE,CAAA;AAAA,MAC7C,SAAS,MAAA,EAAiB;AACxB,QAAA,MAAM,MAAM,MAAA,YAAkB,KAAA,GAAQ,MAAA,CAAO,OAAA,GAAU,OAAO,MAAM,CAAA;AACpE,QAAA,MAAM,IAAI,mBAAA,CAAoB,MAAA,EAAQ,CAAA,mBAAA,EAAsB,GAAG,CAAA,CAAE,CAAA;AAAA,MACnE;AAAA,IACF;AAGA,IAAA,MAAM,UAAA,GAAa,KAAK,qBAAA,EAAsB;AAC9C,IAAA,IAAI,CAAC,UAAA,EAAY;AACf,MAAA,MAAM,IAAI,mBAAA;AAAA,QACR,MAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AAEA,IAAA,MAAM,IAAA,CAAK,eAAA,CAAgB,GAAA,CAAI,MAAA,EAAQ,UAAU,CAAA;AACjD,IAAA,MAAA,CAAO,KAAK,wCAAwC,CAAA;AACpD,IAAA,OAAO,UAAA;AAAA,EACT;AAAA,EAEA,MAAM,MAAA,GAAwB;AAC5B,IAAA,MAAM,IAAA,CAAK,eAAA,CAAgB,MAAA,CAAO,MAAM,CAAA;AACxC,IAAA,MAAA,CAAO,KAAK,sCAAsC,CAAA;AAAA,EACpD;AAAA,EAEA,MAAM,UAAA,GAA+B;AACnC,IAAA,MAAM,UAAA,GAAa,KAAK,qBAAA,EAAsB;AAC9C,IAAA,IAAI,CAAC,UAAA,EAAY;AACf,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,MAAM,IAAA,CAAK,eAAA,CAAgB,GAAA,CAAI,MAAA,EAAQ,UAAU,CAAA;AACjD,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,MAAM,SAAA,GAAmG;AACvG,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,UAAA,EAAW;AACvC,IAAA,IAAI,CAAC,QAAA,EAAU,OAAO,EAAE,UAAU,KAAA,EAAM;AAExC,IAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,eAAA,CAAgB,IAAI,MAAM,CAAA;AACxD,IAAA,IAAI,CAAC,UAAA,EAAY,OAAO,EAAE,UAAU,KAAA,EAAM;AAE1C,IAAA,OAAO;AAAA,MACL,QAAA,EAAU,IAAA;AAAA,MACV,GAAI,WAAW,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,UAAA,CAAW,KAAA,EAAM,GAAI;AAAC,KACtE;AAAA,EACF;AAAA,EAEA,MAAM,mBAAA,GAAwD;AAC5D,IAAA,MAAM,UAAA,GAAa,KAAK,qBAAA,EAAsB;AAC9C,IAAA,IAAI,UAAA,EAAY;AACd,MAAA,MAAM,IAAA,CAAK,eAAA,CAAgB,GAAA,CAAI,MAAA,EAAQ,UAAU,CAAA;AAAA,IACnD;AACA,IAAA,OAAO,UAAA;AAAA,EACT;AAAA;AAAA,EAIQ,qBAAA,GAAiD;AACvD,IAAA,MAAM,YAAY,mBAAA,EAAoB;AACtC,IAAA,IAAI,CAAC,SAAA,EAAW,YAAA,EAAc,OAAO,MAAA;AAGrC,IAAA,IAAI,UAAU,UAAA,EAAY;AACxB,MAAA,MAAMA,UAAAA,GAAY,IAAI,IAAA,CAAK,SAAA,CAAU,aAAa,GAAI,CAAA;AACtD,MAAA,wBAAQ,IAAA,EAAK,GAAIA,UAAAA,IAAa,CAAC,UAAU,aAAA,EAAe;AACtD,QAAA,MAAA,CAAO,MAAM,8CAA8C,CAAA;AAC3D,QAAA,OAAO,MAAA;AAAA,MACT;AAAA,IACF;AAEA,IAAA,MAAM,SAAA,GAAY,UAAU,UAAA,GACxB,IAAI,KAAK,SAAA,CAAU,UAAA,GAAa,GAAI,CAAA,GACpC,MAAA;AAEJ,IAAA,OAAO;AAAA,MACL,QAAA,EAAU,MAAA;AAAA,MACV,MAAA,EAAQ,cAAA;AAAA,MACR,OAAO,SAAA,CAAU,YAAA;AAAA,MACjB,GAAI,UAAU,aAAA,KAAkB,MAAA,GAAY,EAAE,YAAA,EAAc,SAAA,CAAU,aAAA,EAAc,GAAI,EAAC;AAAA,MACzF,GAAI,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,KAAc;AAAC,KACjD;AAAA,EACF;AAAA,EAEQ,gBAAA,CAAiB,SAAiB,IAAA,EAAwC;AAChF,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,MAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,OAAA,EAAS,CAAC,GAAG,IAAI,CAAA,EAAG,EAAE,KAAA,EAAO,SAAA,EAAW,OAAA,EAAS,GAAA,EAAS,CAAA;AAC9E,MAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAS;AAC1B,QAAA,IAAI,IAAA,KAAS,GAAG,OAAA,EAAQ;AAAA,aACnB,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,yBAAA,EAA4B,OAAO,IAAI,CAAC,EAAE,CAAC,CAAA;AAAA,MACnE,CAAC,CAAA;AACD,MAAA,KAAA,CAAM,EAAA,CAAG,SAAS,MAAM,CAAA;AAAA,IAC1B,CAAC,CAAA;AAAA,EACH;AAAA,EAEA,MAAc,cAAA,GAAmC;AAC/C,IAAA,IAAI;AACF,MAAA,MAAM,aAAA,CAAc,SAAS,CAAC,WAAW,GAAG,EAAE,OAAA,EAAS,KAAM,CAAA;AAC7D,MAAA,OAAO,IAAA;AAAA,IACT,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AACF","file":"kimi-login-CZPS63NK.js","sourcesContent":["/**\n * Kimi (Moonshot) delegated authentication\n * Reads cached credentials from Kimi CLI's ~/.kimi/credentials/kimi-code.json.\n * If not found, spawns `kimi` CLI for interactive login.\n * Kimi's login opens a browser automatically from its interactive session.\n */\n\nimport { execFile, spawn } from \"node:child_process\";\nimport { promisify } from \"node:util\";\nimport { readFileSync, existsSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { homedir } from \"node:os\";\nimport type { ICredential } from \"../../types/index.js\";\nimport { AuthenticationError } from \"../../types/index.js\";\nimport { CredentialStore } from \"../credential-store.js\";\nimport { logger } from \"../../utils/index.js\";\n\nconst execFileAsync = promisify(execFile);\n\n// ── Kimi CLI Token Paths ────────────────────────────────────────────────\n\nconst CLI_COMMAND = \"kimi\";\n\nfunction getKimiHome(): string {\n  return process.env[\"KIMI_HOME\"] ?? join(homedir(), \".kimi\");\n}\n\nfunction getCredentialsPath(): string {\n  return join(getKimiHome(), \"credentials\", \"kimi-code.json\");\n}\n\n// ── kimi-code.json Schema ───────────────────────────────────────────────\n\ninterface IKimiCredentials {\n  readonly access_token?: string;\n  readonly refresh_token?: string;\n  readonly expires_at?: number;\n  readonly scope?: string;\n  readonly token_type?: string;\n}\n\nfunction readKimiCredentials(): IKimiCredentials | undefined {\n  const credsPath = getCredentialsPath();\n  if (!existsSync(credsPath)) return undefined;\n  try {\n    return JSON.parse(readFileSync(credsPath, \"utf-8\")) as IKimiCredentials;\n  } catch {\n    return undefined;\n  }\n}\n\n// ── KimiLogin Class ─────────────────────────────────────────────────────\n\nexport class KimiLogin {\n  private readonly credentialStore: CredentialStore;\n\n  constructor(store?: CredentialStore) {\n    this.credentialStore = store ?? new CredentialStore();\n  }\n\n  /**\n   * Login via the Kimi CLI.\n   * First checks for cached credentials. If not found, spawns the Kimi CLI\n   * interactive session which handles browser-based login automatically.\n   */\n  async login(): Promise<ICredential> {\n    // Check if already logged in via cached tokens\n    const existing = this.readCachedCredentials();\n    if (existing) {\n      logger.info(\"Found existing Kimi CLI credentials\");\n      await this.credentialStore.set(\"kimi\", existing);\n      return existing;\n    }\n\n    // Check if the CLI is available\n    const cliAvailable = await this.isCliAvailable();\n    if (!cliAvailable) {\n      throw new AuthenticationError(\n        \"kimi\",\n        \"Kimi CLI not found. Install it first: npm install -g @anthropic-ai/kimi-cli\\n\" +\n        \"Or set an API key: aemeathcli auth set-key kimi <key>\",\n      );\n    }\n\n    // Spawn kimi CLI — it handles login with browser automatically\n    logger.info(\"Spawning Kimi CLI for login (browser will open automatically)\");\n    try {\n      await this.spawnInteractive(CLI_COMMAND, [\"login\"]);\n    } catch {\n      // Some versions may not have `kimi login` — try spawning interactive session\n      try {\n        await this.spawnInteractive(CLI_COMMAND, []);\n      } catch (error2: unknown) {\n        const msg = error2 instanceof Error ? error2.message : String(error2);\n        throw new AuthenticationError(\"kimi\", `Kimi login failed: ${msg}`);\n      }\n    }\n\n    // Read the freshly cached credentials\n    const credential = this.readCachedCredentials();\n    if (!credential) {\n      throw new AuthenticationError(\n        \"kimi\",\n        \"No Kimi credentials found after login. Please try again or set an API key: aemeathcli auth set-key kimi <key>\",\n      );\n    }\n\n    await this.credentialStore.set(\"kimi\", credential);\n    logger.info(\"Kimi credentials imported successfully\");\n    return credential;\n  }\n\n  async logout(): Promise<void> {\n    await this.credentialStore.delete(\"kimi\");\n    logger.info(\"Kimi session revoked from AemeathCLI\");\n  }\n\n  async isLoggedIn(): Promise<boolean> {\n    const credential = this.readCachedCredentials();\n    if (!credential) {\n      return false;\n    }\n\n    await this.credentialStore.set(\"kimi\", credential);\n    return true;\n  }\n\n  async getStatus(): Promise<{ loggedIn: boolean; email?: string | undefined; plan?: string | undefined }> {\n    const loggedIn = await this.isLoggedIn();\n    if (!loggedIn) return { loggedIn: false };\n\n    const credential = await this.credentialStore.get(\"kimi\");\n    if (!credential) return { loggedIn: false };\n\n    return {\n      loggedIn: true,\n      ...(credential.email !== undefined ? { email: credential.email } : {}),\n    };\n  }\n\n  async getCachedCredential(): Promise<ICredential | undefined> {\n    const credential = this.readCachedCredentials();\n    if (credential) {\n      await this.credentialStore.set(\"kimi\", credential);\n    }\n    return credential;\n  }\n\n  // ── Internal ──────────────────────────────────────────────────────────\n\n  private readCachedCredentials(): ICredential | undefined {\n    const kimiCreds = readKimiCredentials();\n    if (!kimiCreds?.access_token) return undefined;\n\n    // Check expiry (expires_at is seconds since epoch)\n    if (kimiCreds.expires_at) {\n      const expiresAt = new Date(kimiCreds.expires_at * 1000);\n      if (new Date() > expiresAt && !kimiCreds.refresh_token) {\n        logger.debug(\"Kimi CLI token expired with no refresh token\");\n        return undefined;\n      }\n    }\n\n    const expiresAt = kimiCreds.expires_at\n      ? new Date(kimiCreds.expires_at * 1000)\n      : undefined;\n\n    return {\n      provider: \"kimi\",\n      method: \"native_login\",\n      token: kimiCreds.access_token,\n      ...(kimiCreds.refresh_token !== undefined ? { refreshToken: kimiCreds.refresh_token } : {}),\n      ...(expiresAt !== undefined ? { expiresAt } : {}),\n    };\n  }\n\n  private spawnInteractive(command: string, args: readonly string[]): Promise<void> {\n    return new Promise((resolve, reject) => {\n      const child = spawn(command, [...args], { stdio: \"inherit\", timeout: 300_000 });\n      child.on(\"close\", (code) => {\n        if (code === 0) resolve();\n        else reject(new Error(`Process exited with code ${String(code)}`));\n      });\n      child.on(\"error\", reject);\n    });\n  }\n\n  private async isCliAvailable(): Promise<boolean> {\n    try {\n      await execFileAsync(\"which\", [CLI_COMMAND], { timeout: 3000 });\n      return true;\n    } catch {\n      return false;\n    }\n  }\n}\n"]}