charness 0.0.0-stage → 3.1.0

package/dist/utils/modelRecentPlan.js

@@ -0,0 +1,107 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.recentModelPickCallbackRe = exports.recentModelsOpenCallback = exports.recentModelsLimit = void 0;
+exports.pushRecentModel = pushRecentModel;
+exports.getRecentModelsInCatalog = getRecentModelsInCatalog;
+exports.getRecentModelIdentity = getRecentModelIdentity;
+exports.buildRecentModelPickCallback = buildRecentModelPickCallback;
+exports.parseRecentModelPickCallback = parseRecentModelPickCallback;
+exports.getRecentModelPick = getRecentModelPick;
+/**
+ * @description Pure layer behind the "Recently used" shortcut of the `/model`
+ * picker: the most-recently-used list itself, its catalog filter, and the
+ * callback codec of the flat list it opens.
+ *
+ * Why it exists: the two-level picker (provider → that provider's models) is
+ * what keeps `/model` inside Telegram's message cap, but an operator who hops
+ * between a few favourite models of DIFFERENT providers pays the two taps
+ * every time. The shortcut sits first on the provider level and opens one
+ * flat list of `provider/model` ids that were actually picked before —
+ * instance-wide, most recent first, deduplicated, capped.
+ *
+ * Everything here is pure so `modelProviders.ts` stays wiring and the three
+ * rules — update/dedupe/cap, the stale-entry filter, the stale-tap safety of
+ * the callbacks — are unit-tested without a Telegram surface.
+ */
+const node_crypto_1 = require("node:crypto");
+/**
+ * @description How many entries the list keeps. Ten is one keyboard that needs
+ * no paging and matches the model level's page size, so the flat list is never
+ * taller than a provider page.
+ */
+exports.recentModelsLimit = 10;
+/** Opens the flat list (provider level → recent level). */
+exports.recentModelsOpenCallback = 'mdlrecent';
+const recentModelPickCallbackPrefix = 'mdlr_';
+/** Anchored matcher for `bot.action(...)`, kept beside the builder so the wire
+ *  format has one definition. */
+exports.recentModelPickCallbackRe = /^mdlr_(\d+)_([0-9a-f]{8})$/;
+/**
+ * @description Put `modelId` at the head of the list: a repeat pick moves its
+ * entry to the front rather than duplicating it, and the oldest entry falls
+ * off once `limit` is reached. Never mutates `current`.
+ */
+function pushRecentModel(current, modelId, limit = exports.recentModelsLimit) {
+    const trimmed = modelId.trim();
+    const rest = current.filter((entry) => entry !== trimmed);
+    const next = trimmed ? [trimmed, ...rest] : rest;
+    return next.slice(0, Math.max(limit, 0));
+}
+/**
+ * @description The entries the picker may offer: those whose `provider/model`
+ * still exists in the live catalog AND whose provider is not hidden.
+ *
+ * A provider that was disconnected (or a model the server stopped serving)
+ * leaves a stale id behind in `state.json`; rendering a button for it would
+ * resolve to nothing. The entry stays on disk — the provider may come back —
+ * it is just not shown. Hidden providers are excluded for the same reason
+ * they are excluded one level up: hiding must make a provider unreachable
+ * through the picker, not just invisible on its own level.
+ */
+function getRecentModelsInCatalog(recentModels, catalog) {
+    const hiddenSet = new Set(catalog.hiddenProviders);
+    return recentModels.filter((modelId) => {
+        const slashIndex = modelId.indexOf('/');
+        if (slashIndex <= 0)
+            return false;
+        const provider = modelId.slice(0, slashIndex);
+        if (hiddenSet.has(provider))
+            return false;
+        return catalog.byProvider.get(provider)?.includes(modelId) ?? false;
+    });
+}
+/**
+ * @description Short identity of a model id that fits the callback budget:
+ * the first 8 hex chars of its SHA-256. The full id (`openrouter/anthropic/
+ * claude-sonnet-4.5`) cannot ride in `callback_data` (64 bytes), and an index
+ * alone would re-point an old keyboard at a DIFFERENT model once the list is
+ * reordered by a newer pick — so the button carries both.
+ */
+function getRecentModelIdentity(modelId) {
+    return (0, node_crypto_1.createHash)('sha256').update(modelId, 'utf8').digest('hex').slice(0, 8);
+}
+function buildRecentModelPickCallback(index, modelId) {
+    return `${recentModelPickCallbackPrefix}${index}_${getRecentModelIdentity(modelId)}`;
+}
+function parseRecentModelPickCallback(callbackData) {
+    const match = exports.recentModelPickCallbackRe.exec(callbackData);
+    if (!match)
+        return null;
+    return { index: Number(match[1]), identity: match[2] };
+}
+/**
+ * @description Resolve a tapped recent-list button against the list AS IT IS
+ * NOW. The index is only a hint: it is trusted when the entry there still has
+ * the identity the button carries; otherwise the list is searched for that
+ * identity (a newer pick just moved the entry). `null` — never another
+ * model — when the entry left the list (evicted past the cap, or filtered
+ * out because its provider is gone or hidden); the caller turns that into
+ * the "expired" toast.
+ */
+function getRecentModelPick(recentModels, ref) {
+    const atIndex = recentModels[ref.index];
+    if (atIndex !== undefined && getRecentModelIdentity(atIndex) === ref.identity)
+        return atIndex;
+    return recentModels.find((modelId) => getRecentModelIdentity(modelId) === ref.identity) ?? null;
+}
+//# sourceMappingURL=modelRecentPlan.js.map

package/dist/utils/modelRecentPlan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modelRecentPlan.js","sourceRoot":"","sources":["../../src/utils/modelRecentPlan.ts"],"names":[],"mappings":";;;AAwCA,0CASC;AAaD,4DAYC;AASD,wDAEC;AAED,oEAEC;AAQD,oEAIC;AAWD,gDAOC;AAvHD;;;;;;;;;;;;;;;GAeG;AACH,6CAAyC;AAGzC;;;;GAIG;AACU,QAAA,iBAAiB,GAAG,EAAE,CAAC;AAEpC,2DAA2D;AAC9C,QAAA,wBAAwB,GAAG,WAAW,CAAC;AAEpD,MAAM,6BAA6B,GAAG,OAAO,CAAC;AAE9C;iCACiC;AACpB,QAAA,yBAAyB,GAAG,4BAA4B,CAAC;AAEtE;;;;GAIG;AACH,SAAgB,eAAe,CAC7B,OAA0B,EAC1B,OAAe,EACf,QAAgB,yBAAiB;IAEjC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,wBAAwB,CACtC,YAA+B,EAC/B,OAAqB;IAErB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACnD,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;QACrC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,UAAU,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAC9C,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1C,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,sBAAsB,CAAC,OAAe;IACpD,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,SAAgB,4BAA4B,CAAC,KAAa,EAAE,OAAe;IACzE,OAAO,GAAG,6BAA6B,GAAG,KAAK,IAAI,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;AACvF,CAAC;AAQD,SAAgB,4BAA4B,CAAC,YAAoB;IAC/D,MAAM,KAAK,GAAG,iCAAyB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACzD,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,kBAAkB,CAChC,YAA+B,EAC/B,GAAuB;IAEvB,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,OAAO,KAAK,SAAS,IAAI,sBAAsB,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,QAAQ;QAAE,OAAO,OAAO,CAAC;IAC9F,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;AAClG,CAAC"}

package/dist/utils/modelSetReplyDecision.d.ts

@@ -0,0 +1,67 @@
+/**
+ * @description Pure reply-decision for the four `/model`-set paths (the
+ * `/model <num>` and `/model <name>` commands, the text-handler numeric pick,
+ * and the `model_<id>` button callback — all through `applyModelSelection` in
+ * `connectors/telegram/commands/modelProviders.ts`). All four asked the adapter to
+ * set the model and now must build the SAME user-facing reply — so the branchy
+ * decision lives here, unit-testable without the Telegraf machinery (same
+ * pattern as `statusFlushDecision.ts`).
+ *
+ * The no-session decision itself now lives in the adapters (OpenCode persists
+ * the pref and returns success; Claude refuses with a notice), so this helper
+ * is purely about turning the adapter's outcome into a message — it does NOT
+ * gate on session state itself.
+ *
+ * `isActive` only distinguishes the two SUCCESS copies: a live switch
+ * (`model.set_success`) vs a pref saved for the next agent start
+ * (`model.saved_for_next_start`). BOTH copies come from i18n, so a `translate`
+ * callback is injected (callers pass `t`; tests pass a stub) to keep this module
+ * free of the i18n import and trivially testable. The live copy used to be a
+ * hardcoded English template literal — once the effort hint below was appended
+ * to it, a non-English chat would have read an English headline above a
+ * translated hint, so it moved into the catalog too.
+ *
+ * Both success copies carry the SHARED `effort.current_hint` block (the same key
+ * the post-start `agent.ready` notice renders), so the level in force and the
+ * "/effort to change it" pointer can never drift between the two messages. The
+ * caller must resolve `effort` AFTER `setModel` returned: switching to a model
+ * that does not offer the current level clears it (see
+ * `effort.cleared_on_model_switch`), so a pre-switch read would name a level
+ * that no longer applies.
+ *
+ * @name ModelSetReplyDecision
+ * @description
+ * - `unsupported` — the adapter has no `setModel`: nothing was changed.
+ * - `error`       — `setModel` returned a non-null error string.
+ * - success (`isOk: true`) — live switch or deferred-to-next-start save.
+ */
+export interface ModelSetReplyDecisionInput {
+    /** Does the thread's adapter implement `setModel`? */
+    hasSetModel: boolean;
+    /** Error string returned by `setModel`, or `null` on success. */
+    setModelError: string | null;
+    /** Is the thread's agent session live right now? */
+    isActive: boolean;
+    /** Human-facing agent label (e.g. "Claude Code"), for the unsupported copy. */
+    adapterLabel: string;
+    /** Resolved model label to show on success (current model or the picked id). */
+    displayLabel: string;
+    /**
+     * Reasoning effort in force AFTER the switch, or `null` when the backend has
+     * no effort concept (Claude tmux/terminal) — then no effort block is appended.
+     */
+    effort: string | null;
+}
+export interface ModelSetReplyDecision {
+    isOk: boolean;
+    message: string;
+}
+/**
+ * @description Build the reply for a `/model`-set attempt.
+ *
+ * @param translate i18n lookup (`t`) — used for both success copies and the
+ * shared effort block. The `unsupported` / `error` branches carry no effort
+ * hint: nothing was switched, so naming the level would only add noise.
+ */
+export declare function getModelSetReplyDecision(input: ModelSetReplyDecisionInput, translate: (code: string, vars?: Record<string, string | number>) => string): ModelSetReplyDecision;
+//# sourceMappingURL=modelSetReplyDecision.d.ts.map

package/dist/utils/modelSetReplyDecision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"modelSetReplyDecision.d.ts","sourceRoot":"","sources":["../../src/utils/modelSetReplyDecision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAM,WAAW,0BAA0B;IACzC,sDAAsD;IACtD,WAAW,EAAE,OAAO,CAAC;IACrB,iEAAiE;IACjE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,oDAAoD;IACpD,QAAQ,EAAE,OAAO,CAAC;IAClB,+EAA+E;IAC/E,YAAY,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,YAAY,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,0BAA0B,EACjC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,MAAM,GAC1E,qBAAqB,CAevB"}

package/dist/utils/modelSetReplyDecision.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getModelSetReplyDecision = getModelSetReplyDecision;
+/**
+ * @description Build the reply for a `/model`-set attempt.
+ *
+ * @param translate i18n lookup (`t`) — used for both success copies and the
+ * shared effort block. The `unsupported` / `error` branches carry no effort
+ * hint: nothing was switched, so naming the level would only add noise.
+ */
+function getModelSetReplyDecision(input, translate) {
+    if (!input.hasSetModel) {
+        return { isOk: false, message: `Model switching not supported for ${input.adapterLabel}` };
+    }
+    if (input.setModelError) {
+        return { isOk: false, message: `Error: ${input.setModelError}` };
+    }
+    const effortSuffix = input.effort === null
+        ? ''
+        : `\n${translate('effort.current_hint', { effort: input.effort })}`;
+    const successKey = input.isActive ? 'model.set_success' : 'model.saved_for_next_start';
+    return {
+        isOk: true,
+        message: translate(successKey, { model: input.displayLabel }) + effortSuffix,
+    };
+}
+//# sourceMappingURL=modelSetReplyDecision.js.map

package/dist/utils/modelSetReplyDecision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modelSetReplyDecision.js","sourceRoot":"","sources":["../../src/utils/modelSetReplyDecision.ts"],"names":[],"mappings":";;AAmEA,4DAkBC;AAzBD;;;;;;GAMG;AACH,SAAgB,wBAAwB,CACtC,KAAiC,EACjC,SAA2E;IAE3E,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,qCAAqC,KAAK,CAAC,YAAY,EAAE,EAAE,CAAC;IAC7F,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,KAAK,CAAC,aAAa,EAAE,EAAE,CAAC;IACnE,CAAC;IACD,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,KAAK,IAAI;QACxC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,KAAK,SAAS,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;IACtE,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,4BAA4B,CAAC;IACvF,OAAO;QACL,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,GAAG,YAAY;KAC7E,CAAC;AACJ,CAAC"}

package/dist/utils/openCodeAuthLogin.d.ts

@@ -0,0 +1,181 @@
+/**
+ * @description Pure helpers behind the OpenCode `/connect` OAuth (subscription)
+ * flow. The bot's `/connect` used to do API-key auth only (`PUT /auth/{id}` with
+ * `{type:'api',key}`); this layer adds provider OAuth by driving
+ * `opencode auth login -p <id> -m <label>` in a pty out-of-band — the same
+ * pattern as the json-stream Claude `/login` flow (`utils/claudeAuthLogin.ts`).
+ * These are the parse/decision helpers; the impure pty driving + per-thread
+ * state live in `agentLogin/agentLogin.ts`.
+ *
+ * Two OAuth shapes are handled, auto-detected from the pty output:
+ *  - DEVICE flow (openai "ChatGPT Pro/Plus (headless)", github-copilot, …): the
+ *    CLI prints a sign-in URL + a short code to ENTER at that URL, then polls
+ *    ("Waiting for authorization…") and exits 0 once the user authorises in a
+ *    browser. Nothing is pasted back — the bot relays URL+code and waits for exit.
+ *  - PASTE flow: the CLI prints a URL then waits for the user to paste an
+ *    authorization code back — the bot arms a pending-code state (next plain text
+ *    is written into the pty, then deleted as a secret).
+ *
+ * Success is authoritative from the on-disk `auth.json` (the provider's entry
+ * flips to `type:"oauth"`), with the process exit code as the fallback.
+ */
+/** One auth method offered by a provider in the `/provider/auth` catalog. */
+export interface OpenCodeAuthMethod {
+    /** `oauth` | `api` | (future) — verbatim from the catalog. */
+    type: string;
+    /** Human label, passed verbatim to `opencode auth login -m <label>`. */
+    label: string;
+    /** Whether the method carries extra `prompts` (multi-step, e.g. an instance URL). */
+    hasPrompts: boolean;
+}
+/**
+ * @description Strip ANSI/OSC escape sequences and carriage returns so the
+ * text-shape detectors below match against clean content. Deliberately minimal
+ * (detection-only) — the topic-facing relay reuses the fuller `cleanOutput`.
+ */
+export declare function stripAnsiForDetection(raw: string): string;
+/**
+ * @description Parse a provider's auth methods out of the `GET /provider/auth`
+ * catalog (`{ providerId: [{type,label,prompts?}, …] }`). Returns `[]` for an
+ * unknown provider or a malformed catalog. Order is preserved (the picker shows
+ * methods in catalog order).
+ */
+export declare function parseProviderAuthMethods(raw: unknown, providerId: string): OpenCodeAuthMethod[];
+/** Whether a provider owns a custom auth flow in the `/provider/auth` catalog. */
+export declare function checkProviderHasAuthCatalogEntry(raw: unknown, providerId: string): boolean;
+/**
+ * OpenCode lists ordinary API-key providers in `/provider`, not `/provider/auth`.
+ * Give those providers the same one-field key flow used by the native `/connect` UI.
+ */
+export declare function getGenericProviderAuthMethods(raw: unknown, providerId: string): OpenCodeAuthMethod[];
+/** An OAuth (subscription/account) method. */
+export declare function checkIsOAuthMethod(method: OpenCodeAuthMethod): boolean;
+/** A single-field API-key method (no extra prompts) — the legacy `/connect` path. */
+export declare function checkIsSimpleApiMethod(method: OpenCodeAuthMethod): boolean;
+/** argv for `opencode auth login`, skipping the interactive provider+method pickers. */
+export declare function buildOpenCodeAuthLoginArgs(providerId: string, methodLabel: string): string[];
+export declare function parseOpenCodeOAuthUrl(ptyOutput: string): string | null;
+export declare function parseOpenCodeDeviceCode(ptyOutput: string): string | null;
+/** The device flow has printed everything and is polling for authorisation. */
+export declare function checkIsAwaitingAuthorization(ptyOutput: string): boolean;
+export declare function checkIsOpenCodeOAuthPastePrompt(ptyOutput: string): boolean;
+/**
+ * @description Whether the accumulated pty output has reached the point where the
+ * sign-in info is fully rendered and ready to relay: a URL is present AND the
+ * flow has reached a stable stage (a device code, the "waiting" poll, or a paste
+ * prompt). Gating on this avoids relaying a URL that is still rendering.
+ */
+export declare function checkIsOAuthInfoReady(ptyOutput: string): boolean;
+/**
+ * @description Resolve the OpenCode credentials file path, honouring
+ * `XDG_DATA_HOME` (falls back to `~/.local/share`). This is where a completed
+ * `opencode auth login` writes the provider's credential entry.
+ */
+export declare function getOpenCodeAuthFilePath(env: {
+    XDG_DATA_HOME?: string;
+    HOME?: string;
+}): string;
+/**
+ * @description Whether the provider is authed in the parsed `auth.json` map. When
+ * `wantType` is given (e.g. `'oauth'`), the entry's `type` must match — this is
+ * what distinguishes a fresh OAuth success from a stale `api` entry left by an
+ * earlier key-based `/connect`. Returns `null` when the map is unreadable so the
+ * caller can fall back to the process exit code.
+ */
+export declare function checkProviderAuthed(authJson: unknown, providerId: string, wantType?: string): boolean | null;
+/**
+ * @description Final success decision for the OAuth flow. `auth.json` is
+ * authoritative (it reflects the real on-disk credential the CLI just wrote); the
+ * process exit code is only the fallback when the file could not be read
+ * (`authed === null`).
+ */
+export declare function checkIsOpenCodeOAuthSucceeded(input: {
+    exitCode: number | null;
+    authed: boolean | null;
+}): boolean;
+/**
+ * @description Short button label for a method in the `/connect` picker: a lock
+ * for OAuth, a key for API. The catalog label is used verbatim but capped so a
+ * long label never blows the inline-button width.
+ */
+export declare function buildConnectMethodButtonLabel(method: OpenCodeAuthMethod): string;
+/** Details parsed out of the CLI's `Go to: <authorize-url>` sign-in URL. */
+export interface OAuthAuthorizeDetails {
+    /** The loopback callback port from `redirect_uri` (e.g. 1455), or `null`. */
+    redirectPort: number | null;
+    /** The loopback callback path from `redirect_uri` (e.g. `/auth/callback`), or `null`. */
+    redirectPath: string | null;
+    /** Whether `redirect_uri` targets loopback (localhost / 127.0.0.1 / [::1]). */
+    isLoopback: boolean;
+    /** The `state` param the CLI generated (needed to complete a bare-code reply). */
+    state: string | null;
+}
+/**
+ * @description Parse the authorize URL rendered by `opencode auth login` into its
+ * loopback redirect target + `state`. Returns all-null/false when there is no
+ * URL yet or it carries no loopback `redirect_uri`. Robust to junk: a malformed
+ * URL yields the empty result rather than throwing.
+ */
+export declare function parseOAuthAuthorizeDetails(ptyOutput: string): OAuthAuthorizeDetails;
+/**
+ * @description A loopback (browser) OAuth flow: the CLI redirects to a localhost
+ * callback and shows NO device code (so it can't be relayed as a device flow).
+ * This is the shape that can't self-complete over Telegram and needs the paste
+ * bridge.
+ */
+export declare function checkIsLoopbackOAuthFlow(ptyOutput: string): boolean;
+export declare function checkIsPlausibleOAuthCode(text: string): boolean;
+/**
+ * @description Is `text` a plausible provider API key? A key is sent verbatim as
+ * an HTTP `Authorization: Bearer <key>` header, and HTTP header values are
+ * ISO-8859-1 with no whitespace/controls — so a value carrying spaces, tabs,
+ * newlines, control chars or non-Latin-1 characters (e.g. Cyrillic) can NEVER be
+ * a real key. Rejecting them up front turns a stray chat message ("я
+ * перезагрузил") captured by a stale `/connect` state into a clear error at
+ * paste time, instead of a cryptic `Header … has invalid value` on the next
+ * request (live 2026-07-20). Deliberately permissive otherwise — it
+ * only rules out the impossible, never guesses a provider's key shape.
+ */
+export declare function checkIsPlausibleProviderApiKey(text: string): boolean;
+/** A parsed OAuth callback URL the user pasted back (or one embedded in text). */
+export interface OAuthCallbackParts {
+    code: string | null;
+    state: string | null;
+    port: number | null;
+    path: string | null;
+}
+/**
+ * @description Extract callback parts from a pasted string IF it contains an
+ * `http(s)` URL that looks like an OAuth callback — i.e. it carries a `code`
+ * query param, or its path ends in `/callback`. Returns `null` when the text has
+ * no such URL (so the caller can fall back to bare-code parsing). Never throws.
+ */
+export declare function parseOAuthCallbackFromReply(text: string): OAuthCallbackParts | null;
+/**
+ * @name OpenCodeOAuthReply
+ * @description The classified user reply to a pending OAuth flow. URL-FIRST (a
+ * pasted callback URL wins), then a bare code, else `null` (not an OAuth reply —
+ * the caller must NOT consume it as one). This ordering is the requested
+ * behaviour: recognise a link first, otherwise recognise + validate a code.
+ */
+export type OpenCodeOAuthReply = ({
+    kind: 'callback';
+} & OAuthCallbackParts) | {
+    kind: 'code';
+    code: string;
+} | null;
+export declare function classifyOpenCodeOAuthReply(text: string): OpenCodeOAuthReply;
+/**
+ * @description Build the loopback completion URL to replay against the CLI's
+ * local callback server on the host: `http://127.0.0.1:<port><path>?code&state`.
+ * Returns `null` unless all of port, code and state are known (state may come
+ * from the stored authorize URL when the user pasted only a bare code). Path
+ * defaults to `/auth/callback`.
+ */
+export declare function buildLoopbackCompletionUrl(input: {
+    port: number | null;
+    path: string | null;
+    code: string | null;
+    state: string | null;
+}): string | null;
+//# sourceMappingURL=openCodeAuthLogin.d.ts.map

package/dist/utils/openCodeAuthLogin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openCodeAuthLogin.d.ts","sourceRoot":"","sources":["../../src/utils/openCodeAuthLogin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,6EAA6E;AAC7E,MAAM,WAAW,kBAAkB;IACjC,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,KAAK,EAAE,MAAM,CAAC;IACd,qFAAqF;IACrF,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CASzD;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAY/F;AAED,kFAAkF;AAClF,wBAAgB,gCAAgC,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAG1F;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAWpG;AAED,8CAA8C;AAC9C,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAEtE;AAED,qFAAqF;AACrF,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAE1E;AAED,wFAAwF;AACxF,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAE5F;AAID,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGtE;AAQD,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGxE;AAED,+EAA+E;AAC/E,wBAAgB,4BAA4B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAEvE;AAQD,wBAAgB,+BAA+B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAE1E;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAOhE;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,MAAM,CAGT;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,OAAO,EACjB,UAAU,EAAE,MAAM,EAClB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,GAAG,IAAI,CAQhB;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;CACxB,GAAG,OAAO,CAGV;AAED;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAIhF;AAYD,4EAA4E;AAC5E,MAAM,WAAW,qBAAqB;IACpC,6EAA6E;IAC7E,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,yFAAyF;IACzF,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,+EAA+E;IAC/E,UAAU,EAAE,OAAO,CAAC;IACpB,kFAAkF;IAClF,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAOD;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,GAAG,qBAAqB,CAgCnF;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAGnE;AAUD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CASpE;AAED,kFAAkF;AAClF,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAmBnF;AAED;;;;;;GAMG;AACH,MAAM,MAAM,kBAAkB,GAC1B,CAAC;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GAAG,kBAAkB,CAAC,GAC3C;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B,IAAI,CAAC;AAET,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAM3E;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB,GAAG,MAAM,GAAG,IAAI,CAMhB"}