devchain-cli 0.23.3 → 0.24.0

package/dist/server/modules/provider-auth/provider-auth-adapters.js

@@ -0,0 +1,271 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PROVIDER_AUTH_LOGIN_ADAPTERS = exports.PROVIDER_AUTH_VERIFY = exports.PROVIDER_AUTH_ENV_KEY_PATTERN = exports.RESERVED_PROVIDER_AUTH_ENV_KEYS = exports.OPENCODE_AUTH_FILE_PATH = exports.PROVIDER_AUTH_ADAPTERS = void 0;
+exports.specAcceptsPayload = specAcceptsPayload;
+exports.opencodeEntries = opencodeEntries;
+exports.opencodePcAuthFilePath = opencodePcAuthFilePath;
+const AGY_TOKEN_FILE_PATH = '.gemini/antigravity-cli/antigravity-oauth-token';
+exports.PROVIDER_AUTH_ADAPTERS = {
+    claude: { kind: 'static', payloadKind: 'env', envKey: 'CLAUDE_CODE_OAUTH_TOKEN' },
+    copilot: { kind: 'static', payloadKind: 'env', envKey: 'COPILOT_GITHUB_TOKEN' },
+    codex: { kind: 'family', payloadKind: 'files', filePath: '.codex/auth.json' },
+    agy: { kind: 'family', payloadKind: 'files', filePath: AGY_TOKEN_FILE_PATH },
+    opencode: { payloadKind: 'opencode-entry' },
+};
+function specAcceptsPayload(spec, payloadKind) {
+    return (payloadKind === spec.payloadKind ||
+        (spec.payloadKind === 'opencode-entry' && payloadKind === 'opencode-entries'));
+}
+exports.OPENCODE_AUTH_FILE_PATH = '.local/share/opencode/auth.json';
+function opencodeEntries(payload) {
+    switch (payload.payloadKind) {
+        case 'opencode-entry':
+            return { [payload.providerId]: payload.entry };
+        case 'opencode-entries':
+            return payload.entries;
+        default:
+            return {};
+    }
+}
+function opencodePcAuthFilePath(homedir) {
+    return `${homedir}/${exports.OPENCODE_AUTH_FILE_PATH}`;
+}
+exports.RESERVED_PROVIDER_AUTH_ENV_KEYS = new Set([
+    'HOME',
+    'USER',
+    'LOGNAME',
+    'SHELL',
+    'PATH',
+    'HOST',
+    'PORT',
+    'NODE_OPTIONS',
+    'LD_PRELOAD',
+    'LD_LIBRARY_PATH',
+    'XDG_RUNTIME_DIR',
+    'DBUS_SESSION_BUS_ADDRESS',
+    'DEVCHAIN_HOST_TLS_KEY_FILE',
+    'DEVCHAIN_HOST_TLS_CERT_FILE',
+]);
+exports.PROVIDER_AUTH_ENV_KEY_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;
+const GITHUB_TOKEN_VARIABLES = [
+    'GH_TOKEN',
+    'GITHUB_TOKEN',
+    'GH_ENTERPRISE_TOKEN',
+    'GITHUB_ENTERPRISE_TOKEN',
+];
+const OK_REPLY = /(^|\W)OK(\W|$)/;
+const VERIFY_PROMPT = 'Reply with exactly: OK';
+const alphanumeric = (value) => value.toLowerCase().replace(/[^a-z0-9]/g, '');
+const okReply = (output) => OK_REPLY.test(output) ? { ok: true } : { ok: false, hint: 'The CLI did not answer OK.' };
+function firstJsonObject(output) {
+    const start = output.indexOf('{');
+    const end = output.lastIndexOf('}');
+    if (start < 0 || end < start)
+        return null;
+    try {
+        const parsed = JSON.parse(output.slice(start, end + 1));
+        return parsed && typeof parsed === 'object' ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
+exports.PROVIDER_AUTH_VERIFY = {
+    claude: {
+        argv: (bin) => [bin('claude'), 'auth', 'status'],
+        check: (output) => {
+            const status = firstJsonObject(output);
+            if (!status || status.loggedIn !== true) {
+                return { ok: false, hint: 'Claude is not logged in; check CLAUDE_CODE_OAUTH_TOKEN.' };
+            }
+            if (status.authMethod !== 'oauth_token') {
+                return {
+                    ok: false,
+                    hint: `Claude uses ${String(status.authMethod)} instead of the token: remove ~/.claude/.credentials.json on the host.`,
+                };
+            }
+            return { ok: true };
+        },
+    },
+    codex: {
+        argv: (bin) => [bin('codex'), 'login', 'status'],
+        check: (output) => output.includes('Logged in') ? { ok: true } : { ok: false, hint: 'Codex is not logged in.' },
+    },
+    opencode: {
+        argv: (bin) => [bin('opencode'), 'auth', 'list'],
+        check: (output, { opencodeProviderIds }) => {
+            const listed = alphanumeric(output);
+            const missing = opencodeProviderIds.filter((id) => !listed.includes(alphanumeric(id)));
+            return missing.length === 0
+                ? { ok: true }
+                : { ok: false, hint: `OpenCode does not list ${missing.join(', ')}.` };
+        },
+    },
+    agy: {
+        argv: (bin) => [bin('agy'), '-p', VERIFY_PROMPT],
+        check: okReply,
+    },
+    copilot: {
+        argv: (bin) => [bin('copilot'), '-p', VERIFY_PROMPT, '--allow-all-tools'],
+        check: okReply,
+    },
+};
+function opencodeIds(entries) {
+    return entries.flatMap((entry) => Object.keys(opencodeEntries(entry.payload)));
+}
+function verifySpec(provider, env, entries, bin) {
+    const verify = exports.PROVIDER_AUTH_VERIFY[provider];
+    return {
+        argv: verify.argv(bin),
+        env,
+        accepts: (output) => verify.check(output, { opencodeProviderIds: opencodeIds(entries) }).ok,
+    };
+}
+function jsonObject(content, what) {
+    const parsed = JSON.parse(content);
+    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+        throw new Error(`${what} is not a JSON object`);
+    }
+    return parsed;
+}
+function stringLeaves(value, out = []) {
+    if (typeof value === 'string') {
+        if (value.length >= 8)
+            out.push(value);
+    }
+    else if (value && typeof value === 'object') {
+        for (const child of Object.values(value))
+            stringLeaves(child, out);
+    }
+    return out;
+}
+function filesOf(captured) {
+    if (typeof captured === 'string')
+        throw new Error('expected captured files');
+    return captured;
+}
+function familyFile(content, what) {
+    const parsed = jsonObject(content, what);
+    return {
+        kind: 'family',
+        payload: { payloadKind: 'files', content },
+        secrets: stringLeaves(parsed),
+    };
+}
+const codexIsolation = (dir) => ({
+    set: { CODEX_HOME: dir },
+    unset: [],
+});
+const agyIsolation = (dir) => ({
+    set: { HOME: `${dir}/home`, XDG_RUNTIME_DIR: `${dir}/run` },
+    unset: ['DBUS_SESSION_BUS_ADDRESS'],
+});
+const opencodeIsolation = (dir) => ({
+    set: { XDG_DATA_HOME: dir },
+    unset: [],
+});
+const AGY_CAPTURE_FILE = `home/${AGY_TOKEN_FILE_PATH}`;
+exports.PROVIDER_AUTH_LOGIN_ADAPTERS = {
+    codex: {
+        isolationEnv: codexIsolation,
+        prepareDirs: [],
+        loginCommand: (bin) => [bin('codex'), 'login'],
+        capture: { kind: 'files', files: ['auth.json'] },
+        parse: (captured) => {
+            const content = filesOf(captured)['auth.json'];
+            const entry = familyFile(content, 'auth.json');
+            const tokens = jsonObject(content, 'auth.json').tokens;
+            if (!tokens || typeof tokens !== 'object')
+                throw new Error('auth.json has no tokens');
+            return [entry];
+        },
+        verifyCommand: (dir, entries, bin) => verifySpec('codex', codexIsolation(dir), entries, bin),
+    },
+    agy: {
+        isolationEnv: agyIsolation,
+        prepareDirs: ['home', 'run'],
+        loginCommand: (bin) => [bin('agy')],
+        capture: { kind: 'files', files: [AGY_CAPTURE_FILE] },
+        parse: (captured) => {
+            const content = filesOf(captured)[AGY_CAPTURE_FILE];
+            const entry = familyFile(content, 'antigravity-oauth-token');
+            if (!jsonObject(content, 'antigravity-oauth-token').token) {
+                throw new Error('antigravity-oauth-token has no token');
+            }
+            return [entry];
+        },
+        verifyCommand: (dir, entries, bin) => verifySpec('agy', agyIsolation(dir), entries, bin),
+    },
+    opencode: {
+        isolationEnv: opencodeIsolation,
+        prepareDirs: [],
+        loginCommand: (bin) => [bin('opencode'), 'auth', 'login'],
+        capture: { kind: 'files', files: ['opencode/auth.json'] },
+        parse: (captured) => {
+            const auth = jsonObject(filesOf(captured)['opencode/auth.json'], 'auth.json');
+            const entries = [];
+            for (const [providerId, entry] of Object.entries(auth)) {
+                if (!entry || typeof entry !== 'object' || entry.type !== 'oauth') {
+                    continue;
+                }
+                entries.push({
+                    kind: 'family',
+                    labelSuffix: providerId,
+                    payload: {
+                        payloadKind: 'opencode-entry',
+                        providerId,
+                        entry: entry,
+                    },
+                    secrets: stringLeaves(entry),
+                });
+            }
+            if (entries.length === 0)
+                throw new Error('auth.json has no oauth login');
+            return entries;
+        },
+        verifyCommand: (dir, entries, bin) => verifySpec('opencode', opencodeIsolation(dir), entries, bin),
+    },
+    copilot: {
+        isolationEnv: (dir) => ({ set: { GH_CONFIG_DIR: dir }, unset: GITHUB_TOKEN_VARIABLES }),
+        prepareDirs: [],
+        loginCommand: (bin) => [
+            bin('gh'),
+            'auth',
+            'login',
+            '-h',
+            'github.com',
+            '-p',
+            'https',
+            '-w',
+            '--insecure-storage',
+        ],
+        capture: {
+            kind: 'command',
+            whenFile: 'hosts.yml',
+            command: (bin) => [bin('gh'), 'auth', 'token'],
+        },
+        parse: (captured) => {
+            if (typeof captured !== 'string')
+                throw new Error('expected the gh auth token output');
+            const token = captured.trim();
+            if (!/^[A-Za-z0-9_]{20,255}$/.test(token))
+                throw new Error('gh auth token printed no token');
+            return [
+                {
+                    kind: 'static',
+                    payload: { payloadKind: 'env', envKey: 'COPILOT_GITHUB_TOKEN', value: token },
+                    secrets: [token],
+                },
+            ];
+        },
+        verifyCommand: (dir, entries, bin) => {
+            const payload = entries[0]?.payload;
+            const token = payload?.payloadKind === 'env' ? payload.value : '';
+            return verifySpec('copilot', {
+                set: { COPILOT_GITHUB_TOKEN: token, GH_CONFIG_DIR: dir },
+                unset: GITHUB_TOKEN_VARIABLES,
+            }, entries, bin);
+        },
+    },
+};
+//# sourceMappingURL=provider-auth-adapters.js.map

package/dist/server/modules/provider-auth/provider-auth-adapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-auth-adapters.js","sourceRoot":"","sources":["../../../src/modules/provider-auth/provider-auth-adapters.ts"],"names":[],"mappings":";;;AA8CA,gDAQC;AAKD,0CAWC;AAGD,wDAEC;AAxCD,MAAM,mBAAmB,GAAG,iDAAiD,CAAC;AAEjE,QAAA,sBAAsB,GAA4C;IAC7E,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACjF,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE;IAC/E,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE;IAC7E,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE;IAC5E,QAAQ,EAAE,EAAE,WAAW,EAAE,gBAAgB,EAAE;CAC5C,CAAC;AAGF,SAAgB,kBAAkB,CAChC,IAA6B,EAC7B,WAA+C;IAE/C,OAAO,CACL,WAAW,KAAK,IAAI,CAAC,WAAW;QAChC,CAAC,IAAI,CAAC,WAAW,KAAK,gBAAgB,IAAI,WAAW,KAAK,kBAAkB,CAAC,CAC9E,CAAC;AACJ,CAAC;AAGY,QAAA,uBAAuB,GAAG,iCAAiC,CAAC;AAEzE,SAAgB,eAAe,CAC7B,OAA4B;IAE5B,QAAQ,OAAO,CAAC,WAAW,EAAE,CAAC;QAC5B,KAAK,gBAAgB;YACnB,OAAO,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QACjD,KAAK,kBAAkB;YACrB,OAAO,OAAO,CAAC,OAAO,CAAC;QACzB;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAGD,SAAgB,sBAAsB,CAAC,OAAe;IACpD,OAAO,GAAG,OAAO,IAAI,+BAAuB,EAAE,CAAC;AACjD,CAAC;AAGY,QAAA,+BAA+B,GAAwB,IAAI,GAAG,CAAC;IAC1E,MAAM;IACN,MAAM;IACN,SAAS;IACT,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,cAAc;IACd,YAAY;IACZ,iBAAiB;IACjB,iBAAiB;IACjB,0BAA0B;IAC1B,4BAA4B;IAC5B,6BAA6B;CAC9B,CAAC,CAAC;AAEU,QAAA,6BAA6B,GAAG,0BAA0B,CAAC;AAiExE,MAAM,sBAAsB,GAAG;IAC7B,UAAU;IACV,cAAc;IACd,qBAAqB;IACrB,yBAAyB;CAC1B,CAAC;AAEF,MAAM,QAAQ,GAAG,gBAAgB,CAAC;AAClC,MAAM,aAAa,GAAG,wBAAwB,CAAC;AAe/C,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AAEtF,MAAM,OAAO,GAAG,CAAC,MAAc,EAA6B,EAAE,CAC5D,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC;AAG3F,SAAS,eAAe,CAAC,MAAc;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,KAAK,GAAG,CAAC,IAAI,GAAG,GAAG,KAAK;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACjE,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAEY,QAAA,oBAAoB,GAA4C;IAC3E,MAAM,EAAE;QACN,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC;QAChD,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,yDAAyD,EAAE,CAAC;YACxF,CAAC;YACD,IAAI,MAAM,CAAC,UAAU,KAAK,aAAa,EAAE,CAAC;gBAExC,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,eAAe,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,wEAAwE;iBACvH,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;KACF;IACD,KAAK,EAAE;QACL,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC;QAChD,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE,CAChB,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,yBAAyB,EAAE;KAC/F;IAED,QAAQ,EAAE;QACR,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC;QAChD,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE;YACzC,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YACpC,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACvF,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC;gBACzB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE;gBACd,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3E,CAAC;KACF;IACD,GAAG,EAAE;QACH,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC;QAChD,KAAK,EAAE,OAAO;KACf;IACD,OAAO,EAAE;QACP,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,mBAAmB,CAAC;QACzE,KAAK,EAAE,OAAO;KACf;CACF,CAAC;AAEF,SAAS,WAAW,CAAC,OAAqC;IACxD,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,UAAU,CACjB,QAAgB,EAChB,GAAyB,EACzB,OAAqC,EACrC,GAA4B;IAE5B,MAAM,MAAM,GAAG,4BAAoB,CAAC,QAAQ,CAAC,CAAC;IAC9C,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QACtB,GAAG;QACH,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,mBAAmB,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE;KAC5F,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,IAAY;IAC/C,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,uBAAuB,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,MAAiC,CAAC;AAC3C,CAAC;AAGD,SAAS,YAAY,CAAC,KAAc,EAAE,MAAgB,EAAE;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;SAAM,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,OAAO,CAAC,QAAyC;IACxD,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7E,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,IAAY;IAC/C,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACzC,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE;QAC1C,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC;KAC9B,CAAC;AACJ,CAAC;AAGD,MAAM,cAAc,GAAG,CAAC,GAAW,EAAwB,EAAE,CAAC,CAAC;IAC7D,GAAG,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE;IACxB,KAAK,EAAE,EAAE;CACV,CAAC,CAAC;AAGH,MAAM,YAAY,GAAG,CAAC,GAAW,EAAwB,EAAE,CAAC,CAAC;IAC3D,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,GAAG,OAAO,EAAE,eAAe,EAAE,GAAG,GAAG,MAAM,EAAE;IAC3D,KAAK,EAAE,CAAC,0BAA0B,CAAC;CACpC,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,GAAW,EAAwB,EAAE,CAAC,CAAC;IAChE,GAAG,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE;IAC3B,KAAK,EAAE,EAAE;CACV,CAAC,CAAC;AACH,MAAM,gBAAgB,GAAG,QAAQ,mBAAmB,EAAE,CAAC;AAE1C,QAAA,4BAA4B,GAA6C;IACpF,KAAK,EAAE;QACL,YAAY,EAAE,cAAc;QAC5B,WAAW,EAAE,EAAE;QACf,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;QAC9C,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE;QAChD,KAAK,EAAE,CAAC,QAAQ,EAAE,EAAE;YAClB,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC;YACvD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACtF,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;QACD,aAAa,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC;KAC7F;IACD,GAAG,EAAE;QACH,YAAY,EAAE,YAAY;QAC1B,WAAW,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC;QAC5B,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnC,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,gBAAgB,CAAC,EAAE;QACrD,KAAK,EAAE,CAAC,QAAQ,EAAE,EAAE;YAClB,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,gBAAgB,CAAC,CAAC;YACpD,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;YAC7D,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC,KAAK,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;QACD,aAAa,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC;KACzF;IACD,QAAQ,EAAE;QACR,YAAY,EAAE,iBAAiB;QAC/B,WAAW,EAAE,EAAE;QACf,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC;QACzD,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,oBAAoB,CAAC,EAAE;QACzD,KAAK,EAAE,CAAC,QAAQ,EAAE,EAAE;YAClB,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,EAAE,WAAW,CAAC,CAAC;YAC9E,MAAM,OAAO,GAAiC,EAAE,CAAC;YACjD,KAAK,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAEvD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAK,KAA4B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC1F,SAAS;gBACX,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,UAAU;oBACvB,OAAO,EAAE;wBACP,WAAW,EAAE,gBAAgB;wBAC7B,UAAU;wBACV,KAAK,EAAE,KAAgC;qBACxC;oBACD,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC;iBAC7B,CAAC,CAAC;YACL,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAC1E,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,aAAa,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CACnC,UAAU,CAAC,UAAU,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC;KAC/D;IACD,OAAO,EAAE;QACP,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;QACvF,WAAW,EAAE,EAAE;QAEf,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC;YACrB,GAAG,CAAC,IAAI,CAAC;YACT,MAAM;YACN,OAAO;YACP,IAAI;YACJ,YAAY;YACZ,IAAI;YACJ,OAAO;YACP,IAAI;YACJ,oBAAoB;SACrB;QACD,OAAO,EAAE;YACP,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,WAAW;YACrB,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC;SAC/C;QACD,KAAK,EAAE,CAAC,QAAQ,EAAE,EAAE;YAClB,IAAI,OAAO,QAAQ,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvF,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YAC7F,OAAO;gBACL;oBACE,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,KAAK,EAAE,KAAK,EAAE;oBAC7E,OAAO,EAAE,CAAC,KAAK,CAAC;iBACjB;aACF,CAAC;QACJ,CAAC;QACD,aAAa,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YACnC,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC;YACpC,MAAM,KAAK,GAAG,OAAO,EAAE,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,OAAO,UAAU,CACf,SAAS,EACT;gBACE,GAAG,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE;gBACxD,KAAK,EAAE,sBAAsB;aAC9B,EACD,OAAO,EACP,GAAG,CACJ,CAAC;QACJ,CAAC;KACF;CACF,CAAC"}

package/dist/server/modules/provider-auth/provider-auth-generator.service.d.ts

@@ -0,0 +1,57 @@
+import { OnModuleDestroy, OnModuleInit } from '@nestjs/common';
+import { ProviderAdapterFactory } from '../providers/adapters/provider-adapter.factory';
+import { type ProviderStorage } from '../storage/interfaces/storage.interface';
+import { ProcessExecutor } from '../terminal/services/process-executor/process-executor.port';
+import { StandaloneTerminalService } from '../terminal/services/standalone-terminal.service';
+import { type ProviderAuthLoginEnv } from './provider-auth-adapters';
+import type { ProviderAuthEntryDto } from './provider-auth.dto';
+import { ProviderAuthVaultService } from './provider-auth-vault.service';
+export declare const PROVIDER_AUTH_GENERATOR_OPTIONS: unique symbol;
+export interface ProviderAuthGeneratorOptions {
+    baseDir?: string;
+    pollIntervalMs?: number;
+    timeoutMs?: number;
+    commandTimeoutMs?: number;
+}
+export type ProviderAuthGenerationState = 'waiting' | 'verifying' | 'stored' | 'failed' | 'cancelled' | 'timed_out';
+export interface ProviderAuthGeneration {
+    id: string;
+    provider: string;
+    sessionId: string;
+    state: ProviderAuthGenerationState;
+    startedAt: string;
+    finishedAt: string | null;
+    entries: ProviderAuthEntryDto[];
+    error: string | null;
+}
+export declare function redactSecrets(text: string, secrets: string[]): string;
+export declare function buildLoginEnv(base: NodeJS.ProcessEnv, change: ProviderAuthLoginEnv): Record<string, string>;
+export declare function loginArgv(argv: string[], change: ProviderAuthLoginEnv): string[];
+export declare function resolveExecutable(command: string, path: string | undefined): Promise<string | null>;
+export declare class ProviderAuthGeneratorService implements OnModuleInit, OnModuleDestroy {
+    private readonly vault;
+    private readonly terminals;
+    private readonly adapters;
+    private readonly executor;
+    private readonly storage;
+    private readonly generations;
+    private readonly starting;
+    private readonly baseDir;
+    private readonly pollIntervalMs;
+    private readonly timeoutMs;
+    private readonly commandTimeoutMs;
+    constructor(vault: ProviderAuthVaultService, terminals: StandaloneTerminalService, adapters: ProviderAdapterFactory, executor: ProcessExecutor, storage: Pick<ProviderStorage, 'listProviders'>, options?: ProviderAuthGeneratorOptions | null);
+    onModuleInit(): Promise<void>;
+    onModuleDestroy(): Promise<void>;
+    start(provider: string, label?: string): Promise<ProviderAuthGeneration>;
+    private launch;
+    get(id: string): ProviderAuthGeneration;
+    cancel(id: string): Promise<ProviderAuthGeneration>;
+    private schedule;
+    private tick;
+    private capture;
+    private finish;
+    private pruneFinished;
+    private binResolver;
+    private runCommand;
+}