devchain-cli 0.23.3 → 0.24.0

package/dist/server/modules/provider-auth/provider-auth-vault.service.js

@@ -0,0 +1,366 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProviderAuthVaultService = void 0;
+const node_os_1 = require("node:os");
+const promises_1 = require("node:fs/promises");
+const node_path_1 = require("node:path");
+const common_1 = require("@nestjs/common");
+const error_types_1 = require("../../common/errors/error-types");
+const logger_1 = require("../../common/logging/logger");
+const provider_adapter_factory_1 = require("../providers/adapters/provider-adapter.factory");
+const storage_interface_1 = require("../storage/interfaces/storage.interface");
+const provider_auth_adapters_1 = require("./provider-auth-adapters");
+const provider_auth_dto_1 = require("./provider-auth.dto");
+const logger = (0, logger_1.createLogger)('ProviderAuthVaultService');
+let ProviderAuthVaultService = class ProviderAuthVaultService {
+    storage;
+    adapters;
+    constructor(storage, adapters) {
+        this.storage = storage;
+        this.adapters = adapters;
+    }
+    async list() {
+        return (await this.storage.listProviderAuthEntries()).map(this.toDto);
+    }
+    async get(id) {
+        return this.toDto(await this.storage.getProviderAuthEntry(id));
+    }
+    async opencodeProviderIds(entryIds) {
+        const ids = [];
+        for (const entryId of entryIds) {
+            const payload = await this.storage.readProviderAuthPayload(entryId);
+            ids.push(...Object.keys((0, provider_auth_adapters_1.opencodeEntries)(payload)));
+        }
+        return ids;
+    }
+    async createStatic(input) {
+        const spec = this.requireSupportedProvider(input.provider);
+        let payload;
+        if ('token' in input) {
+            if (spec.payloadKind !== 'env' || spec.kind !== 'static') {
+                throw new error_types_1.ValidationError(`Provider "${input.provider}" does not take a pasted token; store its login another way.`, { reason: 'provider_not_env_static' });
+            }
+            payload = { payloadKind: 'env', envKey: spec.envKey, value: input.token };
+        }
+        else {
+            payload = { payloadKind: 'env', envKey: input.envKey, value: input.value };
+        }
+        const entry = await this.storage.createProviderAuthEntry({
+            provider: input.provider,
+            kind: 'static',
+            label: input.label,
+            payload,
+        });
+        return this.toDto(entry);
+    }
+    async importOpencode(providerIds) {
+        const spec = this.requireSupportedProvider('opencode');
+        if (spec.payloadKind !== 'opencode-entry') {
+            throw new error_types_1.ValidationError('OpenCode entries are not importable on this instance.');
+        }
+        const authFile = await this.readPcOpenCodeAuthFile();
+        if (!authFile) {
+            throw new error_types_1.NotFoundError('OpenCode auth file', (0, provider_auth_adapters_1.opencodePcAuthFilePath)('<home>'));
+        }
+        const results = new Map();
+        const entries = new Map();
+        for (const providerId of providerIds) {
+            const entry = authFile[providerId];
+            if (!isPlainRecord(entry)) {
+                results.set(providerId, { providerId, outcome: 'missing' });
+                continue;
+            }
+            if (entry.type === 'oauth') {
+                results.set(providerId, {
+                    providerId,
+                    outcome: 'refused',
+                    reason: 'oauth entries refresh on use; generate a family instead',
+                });
+                continue;
+            }
+            if (entry.type !== 'api' && entry.type !== 'wellknown') {
+                results.set(providerId, {
+                    providerId,
+                    outcome: 'refused',
+                    reason: 'unknown auth entry type',
+                });
+                continue;
+            }
+            entries.set(providerId, entry);
+        }
+        if (entries.size > 0) {
+            const created = await this.storage.createProviderAuthEntry({
+                provider: 'opencode',
+                kind: 'static',
+                label: [...entries.keys()].join(', ').slice(0, 128),
+                payload: { payloadKind: 'opencode-entries', entries: Object.fromEntries(entries) },
+            });
+            logger.info({ entryId: created.id, providerIds: [...entries.keys()] }, 'Imported OpenCode auth group');
+            for (const providerId of entries.keys()) {
+                results.set(providerId, { providerId, outcome: 'imported', entryId: created.id });
+            }
+        }
+        return providerIds.map((providerId) => results.get(providerId));
+    }
+    async listOpencodeLogins() {
+        const authFile = await this.readPcOpenCodeAuthFile();
+        if (!authFile)
+            return [];
+        const staticOpencodeEntryIds = (await this.storage.listProviderAuthEntries())
+            .filter((entry) => entry.provider === 'opencode' && entry.kind === 'static')
+            .map((entry) => entry.id);
+        const importedIds = new Set(await this.opencodeProviderIds(staticOpencodeEntryIds));
+        return Object.entries(authFile).map(([providerId, entry]) => {
+            const type = this.opencodeEntryType(entry);
+            return {
+                providerId,
+                type,
+                importable: (type === 'api' || type === 'wellknown') && (0, provider_auth_dto_1.isOpencodeProviderId)(providerId),
+                imported: importedIds.has(providerId),
+            };
+        });
+    }
+    async createGenerated(provider, label, entries, verifiedAt) {
+        this.requireSupportedProvider(provider);
+        const created = [];
+        for (const entry of entries) {
+            const fullLabel = entry.labelSuffix ? `${label} · ${entry.labelSuffix}` : label;
+            const stored = await this.storage.createProviderAuthEntry({
+                provider,
+                kind: entry.kind,
+                label: fullLabel.slice(0, 128),
+                payload: entry.payload,
+                lastVerifiedAt: verifiedAt,
+            });
+            logger.info({ entryId: stored.id, provider, kind: entry.kind }, 'Stored generated login');
+            created.push(this.toDto(stored));
+        }
+        return created;
+    }
+    async delete(id) {
+        await this.storage.deleteProviderAuthEntry(id);
+    }
+    async checkout(id, remoteId) {
+        return this.toDto(await this.storage.checkoutProviderAuthEntry(id, remoteId));
+    }
+    async release(id) {
+        return this.toDto(await this.storage.releaseProviderAuthEntry(id));
+    }
+    async rename(id, label) {
+        return this.toDto(await this.storage.renameProviderAuthEntry(id, label));
+    }
+    async familiesOfRemote(remoteId) {
+        const entries = await this.checkedOutFamilies(remoteId);
+        return entries.map((entry) => ({
+            provider: entry.provider,
+            entryId: entry.id,
+            lastWritebackAt: entry.lastWritebackAt,
+        }));
+    }
+    async writeBackFamilies(remoteId, reports) {
+        const checkedOut = await this.checkedOutFamilies(remoteId);
+        const updated = [];
+        for (const report of reports) {
+            const spec = provider_auth_adapters_1.PROVIDER_AUTH_ADAPTERS[report.provider];
+            if (!spec)
+                continue;
+            const file = report.files[0];
+            if (!file)
+                continue;
+            if (spec.payloadKind === 'files') {
+                const entry = checkedOut.find((candidate) => candidate.provider === report.provider);
+                if (!entry)
+                    continue;
+                const payload = await this.storage.readProviderAuthPayload(entry.id);
+                if (payload.payloadKind !== 'files')
+                    continue;
+                const content = Buffer.from(file.contentBase64, 'base64').toString('utf8');
+                if (payload.content === content)
+                    continue;
+                updated.push(await this.storage.updateProviderAuthPayload(entry.id, {
+                    payloadKind: 'files',
+                    content,
+                }));
+                continue;
+            }
+            if (spec.payloadKind === 'opencode-entry') {
+                let authFile;
+                try {
+                    authFile = JSON.parse(Buffer.from(file.contentBase64, 'base64').toString('utf8'));
+                }
+                catch {
+                    logger.warn({ provider: report.provider }, 'Family write-back file was not JSON; skipped');
+                    continue;
+                }
+                for (const entry of checkedOut.filter((candidate) => candidate.provider === report.provider)) {
+                    const payload = await this.storage.readProviderAuthPayload(entry.id);
+                    if (payload.payloadKind !== 'opencode-entry')
+                        continue;
+                    const fresh = authFile[payload.providerId];
+                    if (!fresh ||
+                        typeof fresh !== 'object' ||
+                        fresh.type !== 'oauth') {
+                        continue;
+                    }
+                    if (JSON.stringify(payload.entry) === JSON.stringify(fresh))
+                        continue;
+                    updated.push(await this.storage.updateProviderAuthPayload(entry.id, {
+                        payloadKind: 'opencode-entry',
+                        providerId: payload.providerId,
+                        entry: fresh,
+                    }));
+                }
+            }
+        }
+        if (updated.length > 0) {
+            logger.info({ remoteId, entryIds: updated.map((entry) => entry.id) }, 'Wrote back refreshed login families');
+        }
+        return updated.map((entry) => this.toDto(entry));
+    }
+    async checkedOutFamilies(remoteId) {
+        return (await this.storage.listProviderAuthEntries()).filter((entry) => entry.kind === 'family' && entry.checkedOutRemoteId === remoteId);
+    }
+    async buildClaimBundle(selection) {
+        if (!selection.homePath.startsWith('/') || selection.homePath.includes('..')) {
+            throw new error_types_1.ValidationError('homePath must be an absolute path inside the VM home.', {
+                reason: 'home_path_invalid',
+            });
+        }
+        const bundle = { env: {}, files: [] };
+        const opencodeAuth = {};
+        const seenIds = new Set();
+        for (const entryId of selection.entryIds) {
+            if (seenIds.has(entryId)) {
+                continue;
+            }
+            seenIds.add(entryId);
+            const entry = await this.storage.getProviderAuthEntry(entryId);
+            const payload = await this.storage.readProviderAuthPayload(entryId);
+            const spec = this.requireSupportedProvider(entry.provider);
+            if (!(0, provider_auth_adapters_1.specAcceptsPayload)(spec, payload.payloadKind)) {
+                throw new error_types_1.ValidationError(`The stored entry for "${entry.provider}" no longer matches its provider shape.`, { reason: 'provider_auth_shape_mismatch', entryId });
+            }
+            switch (payload.payloadKind) {
+                case 'env':
+                    this.addEnv(bundle, payload.envKey, payload.value, entryId);
+                    break;
+                case 'files': {
+                    if (spec.payloadKind !== 'files') {
+                        throw new error_types_1.ValidationError(`The stored entry for "${entry.provider}" no longer matches its provider shape.`, { reason: 'provider_auth_shape_mismatch', entryId });
+                    }
+                    this.addFile(bundle, selection.homePath, spec.filePath, payload.content, entryId);
+                    break;
+                }
+                case 'opencode-entry':
+                case 'opencode-entries': {
+                    for (const [providerId, auth] of Object.entries((0, provider_auth_adapters_1.opencodeEntries)(payload))) {
+                        if (Object.hasOwn(opencodeAuth, providerId)) {
+                            throw new error_types_1.ValidationError(`OpenCode provider id "${providerId}" is selected twice.`, {
+                                reason: 'opencode_provider_id_duplicate',
+                                entryId,
+                            });
+                        }
+                        opencodeAuth[providerId] = auth;
+                    }
+                    break;
+                }
+            }
+        }
+        if (Object.keys(opencodeAuth).length > 0) {
+            this.addFile(bundle, selection.homePath, provider_auth_adapters_1.OPENCODE_AUTH_FILE_PATH, `${JSON.stringify(opencodeAuth, null, 2)}\n`, 'opencode-composed');
+        }
+        return bundle;
+    }
+    addEnv(bundle, envKey, value, entryId) {
+        if (bundle.env[envKey] !== undefined) {
+            throw new error_types_1.ValidationError(`Environment key "${envKey}" is selected twice.`, {
+                reason: 'provider_auth_env_duplicate',
+                entryId,
+            });
+        }
+        bundle.env[envKey] = value;
+    }
+    addFile(bundle, homePath, relativePath, content, entryId) {
+        const path = (0, node_path_1.join)(homePath, relativePath);
+        if (bundle.files.some((file) => file.path === path)) {
+            throw new error_types_1.ValidationError(`File "${relativePath}" is selected twice.`, {
+                reason: 'provider_auth_file_duplicate',
+                entryId,
+            });
+        }
+        const file = {
+            path,
+            mode: '0600',
+            contentBase64: Buffer.from(content, 'utf8').toString('base64'),
+        };
+        bundle.files.push(file);
+    }
+    requireSupportedProvider(provider) {
+        if (!this.adapters.isSupported(provider)) {
+            throw new error_types_1.ValidationError(`Provider "${provider}" is not supported.`, {
+                reason: 'provider_not_supported',
+                supported: this.adapters.getSupportedProviders(),
+            });
+        }
+        const spec = provider_auth_adapters_1.PROVIDER_AUTH_ADAPTERS[provider.toLowerCase()];
+        if (!spec) {
+            throw new error_types_1.ValidationError(`Provider "${provider}" has no auth storage shape.`, {
+                reason: 'provider_auth_shape_missing',
+            });
+        }
+        return spec;
+    }
+    async readPcOpenCodeAuthFile() {
+        let content;
+        try {
+            content = await (0, promises_1.readFile)((0, provider_auth_adapters_1.opencodePcAuthFilePath)((0, node_os_1.homedir)()), 'utf8');
+        }
+        catch {
+            return null;
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(content);
+        }
+        catch {
+            return null;
+        }
+        if (!isPlainRecord(parsed))
+            return null;
+        return parsed;
+    }
+    opencodeEntryType(entry) {
+        if (!isPlainRecord(entry))
+            return 'other';
+        const type = entry.type;
+        if (type === 'api' || type === 'wellknown' || type === 'oauth')
+            return type;
+        return 'other';
+    }
+    toDto(entry) {
+        const { payloadCiphertext: _payloadCiphertext, ...metadata } = entry;
+        return metadata;
+    }
+};
+exports.ProviderAuthVaultService = ProviderAuthVaultService;
+exports.ProviderAuthVaultService = ProviderAuthVaultService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(storage_interface_1.STORAGE_SERVICE)),
+    __metadata("design:paramtypes", [Object, provider_adapter_factory_1.ProviderAdapterFactory])
+], ProviderAuthVaultService);
+function isPlainRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=provider-auth-vault.service.js.map

package/dist/server/modules/provider-auth/provider-auth-vault.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-auth-vault.service.js","sourceRoot":"","sources":["../../../src/modules/provider-auth/provider-auth-vault.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,qCAAkC;AAClC,+CAA4C;AAC5C,yCAAiC;AACjC,2CAAoD;AACpD,iEAAiF;AACjF,wDAA2D;AAC3D,6FAAwF;AACxF,+EAIiD;AAEjD,qEAUkC;AAClC,2DAM6B;AAG7B,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,0BAA0B,CAAC,CAAC;AAQjD,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IAGhB;IACA;IAHnB,YAEmB,OAA4C,EAC5C,QAAgC;QADhC,YAAO,GAAP,OAAO,CAAqC;QAC5C,aAAQ,GAAR,QAAQ,CAAwB;IAChD,CAAC;IAGJ,KAAK,CAAC,IAAI;QACR,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAU;QAClB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,CAAC;IAGD,KAAK,CAAC,mBAAmB,CAAC,QAAkB;QAC1C,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;YACpE,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAA,wCAAe,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAmC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,OAA4B,CAAC;QACjC,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;YACrB,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACzD,MAAM,IAAI,6BAAe,CACvB,aAAa,KAAK,CAAC,QAAQ,8DAA8D,EACzF,EAAE,MAAM,EAAE,yBAAyB,EAAE,CACtC,CAAC;YACJ,CAAC;YACD,OAAO,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAC5E,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAC7E,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC;YACvD,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO;SACR,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAOD,KAAK,CAAC,cAAc,CAAC,WAAqB;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,WAAW,KAAK,gBAAgB,EAAE,CAAC;YAC1C,MAAM,IAAI,6BAAe,CAAC,uDAAuD,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,2BAAa,CAAC,oBAAoB,EAAE,IAAA,+CAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAqC,CAAC;QAC7D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAmC,CAAC;QAC3D,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;YACnC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC5D,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC3B,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE;oBACtB,UAAU;oBACV,OAAO,EAAE,SAAS;oBAClB,MAAM,EAAE,yDAAyD;iBAClE,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACvD,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE;oBACtB,UAAU;oBACV,OAAO,EAAE,SAAS;oBAClB,MAAM,EAAE,yBAAyB;iBAClC,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC;gBACzD,QAAQ,EAAE,UAAU;gBACpB,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBACnD,OAAO,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE;aACnF,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CACT,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,EACzD,8BAA8B,CAC/B,CAAC;YACF,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;gBACxC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QACD,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC,CAAC;IACnE,CAAC;IAQD,KAAK,CAAC,kBAAkB;QACtB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACrD,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QACzB,MAAM,sBAAsB,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,CAAC;aAC1E,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;aAC3E,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,sBAAsB,CAAC,CAAC,CAAC;QACpF,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE;YAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC3C,OAAO;gBACL,UAAU;gBACV,IAAI;gBACJ,UAAU,EAAE,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,WAAW,CAAC,IAAI,IAAA,wCAAoB,EAAC,UAAU,CAAC;gBACxF,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;aACtC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAGD,KAAK,CAAC,eAAe,CACnB,QAAgB,EAChB,KAAa,EACb,OAAqC,EACrC,UAAkB;QAElB,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;YAChF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC;gBACxD,QAAQ;gBACR,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,cAAc,EAAE,UAAU;aAC3B,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,wBAAwB,CAAC,CAAC;YAC1F,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAU,EAAE,QAAgB;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,KAAa;QACpC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3E,CAAC;IAGD,KAAK,CAAC,gBAAgB,CACpB,QAAgB;QAEhB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACxD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC7B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,eAAe,EAAE,KAAK,CAAC,eAAe;SACvC,CAAC,CAAC,CAAC;IACN,CAAC;IASD,KAAK,CAAC,iBAAiB,CACrB,QAAgB,EAChB,OAAmC;QAEnC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAwB,EAAE,CAAC;QAExC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,+CAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACrD,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC7B,IAAI,CAAC,IAAI;gBAAE,SAAS;YAEpB,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACrF,IAAI,CAAC,KAAK;oBAAE,SAAS;gBACrB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACrE,IAAI,OAAO,CAAC,WAAW,KAAK,OAAO;oBAAE,SAAS;gBAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC3E,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO;oBAAE,SAAS;gBAC1C,OAAO,CAAC,IAAI,CACV,MAAM,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC,KAAK,CAAC,EAAE,EAAE;oBACrD,WAAW,EAAE,OAAO;oBACpB,OAAO;iBACR,CAAC,CACH,CAAC;gBACF,SAAS;YACX,CAAC;YAED,IAAI,IAAI,CAAC,WAAW,KAAK,gBAAgB,EAAE,CAAC;gBAC1C,IAAI,QAAiC,CAAC;gBACtC,IAAI,CAAC;oBACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CACnB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAChC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,CAAC,IAAI,CACT,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAC7B,8CAA8C,CAC/C,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,CACnC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CACtD,EAAE,CAAC;oBACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBACrE,IAAI,OAAO,CAAC,WAAW,KAAK,gBAAgB;wBAAE,SAAS;oBACvD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;oBAE3C,IACE,CAAC,KAAK;wBACN,OAAO,KAAK,KAAK,QAAQ;wBACxB,KAA4B,CAAC,IAAI,KAAK,OAAO,EAC9C,CAAC;wBACD,SAAS;oBACX,CAAC;oBACD,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;wBAAE,SAAS;oBACtE,OAAO,CAAC,IAAI,CACV,MAAM,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC,KAAK,CAAC,EAAE,EAAE;wBACrD,WAAW,EAAE,gBAAgB;wBAC7B,UAAU,EAAE,OAAO,CAAC,UAAU;wBAC9B,KAAK,EAAE,KAAgC;qBACxC,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CACT,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EACxD,qCAAqC,CACtC,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACnD,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,QAAgB;QAC/C,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAC,MAAM,CAC1D,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,kBAAkB,KAAK,QAAQ,CAC5E,CAAC;IACJ,CAAC;IASD,KAAK,CAAC,gBAAgB,CAAC,SAGtB;QACC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,6BAAe,CAAC,uDAAuD,EAAE;gBACjF,MAAM,EAAE,mBAAmB;aAC5B,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAA4B,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC/D,MAAM,YAAY,GAA4B,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAElC,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;YACzC,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzB,SAAS;YACX,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACrB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;YAC/D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;YACpE,MAAM,IAAI,GAAG,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAE3D,IAAI,CAAC,IAAA,2CAAkB,EAAC,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBACnD,MAAM,IAAI,6BAAe,CACvB,yBAAyB,KAAK,CAAC,QAAQ,yCAAyC,EAChF,EAAE,MAAM,EAAE,8BAA8B,EAAE,OAAO,EAAE,CACpD,CAAC;YACJ,CAAC;YACD,QAAQ,OAAO,CAAC,WAAW,EAAE,CAAC;gBAC5B,KAAK,KAAK;oBACR,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;oBAC5D,MAAM;gBACR,KAAK,OAAO,CAAC,CAAC,CAAC;oBACb,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO,EAAE,CAAC;wBACjC,MAAM,IAAI,6BAAe,CACvB,yBAAyB,KAAK,CAAC,QAAQ,yCAAyC,EAChF,EAAE,MAAM,EAAE,8BAA8B,EAAE,OAAO,EAAE,CACpD,CAAC;oBACJ,CAAC;oBACD,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAClF,MAAM;gBACR,CAAC;gBACD,KAAK,gBAAgB,CAAC;gBACtB,KAAK,kBAAkB,CAAC,CAAC,CAAC;oBACxB,KAAK,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAA,wCAAe,EAAC,OAAO,CAAC,CAAC,EAAE,CAAC;wBAC1E,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,EAAE,CAAC;4BAC5C,MAAM,IAAI,6BAAe,CAAC,yBAAyB,UAAU,sBAAsB,EAAE;gCACnF,MAAM,EAAE,gCAAgC;gCACxC,OAAO;6BACR,CAAC,CAAC;wBACL,CAAC;wBACD,YAAY,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;oBAClC,CAAC;oBACD,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,OAAO,CACV,MAAM,EACN,SAAS,CAAC,QAAQ,EAClB,gDAAuB,EACvB,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAC5C,mBAAmB,CACpB,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,MAAM,CACZ,MAA+B,EAC/B,MAAc,EACd,KAAa,EACb,OAAe;QAEf,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,IAAI,6BAAe,CAAC,oBAAoB,MAAM,sBAAsB,EAAE;gBAC1E,MAAM,EAAE,6BAA6B;gBACrC,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;IAC7B,CAAC;IAEO,OAAO,CACb,MAA+B,EAC/B,QAAgB,EAChB,YAAoB,EACpB,OAAe,EACf,OAAe;QAEf,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC1C,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,6BAAe,CAAC,SAAS,YAAY,sBAAsB,EAAE;gBACrE,MAAM,EAAE,8BAA8B;gBACtC,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QACD,MAAM,IAAI,GAA0B;YAClC,IAAI;YACJ,IAAI,EAAE,MAAM;YACZ,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAC/D,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAGO,wBAAwB,CAAC,QAAgB;QAC/C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,6BAAe,CAAC,aAAa,QAAQ,qBAAqB,EAAE;gBACpE,MAAM,EAAE,wBAAwB;gBAChC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,qBAAqB,EAAE;aACjD,CAAC,CAAC;QACL,CAAC;QACD,MAAM,IAAI,GAAG,+CAAsB,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,6BAAe,CAAC,aAAa,QAAQ,8BAA8B,EAAE;gBAC7E,MAAM,EAAE,6BAA6B;aACtC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAOO,KAAK,CAAC,sBAAsB;QAClC,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAA,mBAAQ,EAAC,IAAA,+CAAsB,EAAC,IAAA,iBAAO,GAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,OAAO,MAA+C,CAAC;IACzD,CAAC;IAGO,iBAAiB,CAAC,KAAc;QACtC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC;QAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACxB,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QAC5E,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,KAAwB;QACpC,MAAM,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,CAAC;QACrE,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAA;AAvbY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,mCAAe,CAAC,CAAA;6CAEG,iDAAsB;GAJxC,wBAAwB,CAubpC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/server/modules/provider-auth/provider-auth-watcher.service.d.ts

@@ -0,0 +1,28 @@
+import { OnModuleDestroy, OnModuleInit } from '@nestjs/common';
+export interface ProviderAuthFamilyFile {
+    path: string;
+    contentBase64: string;
+    mtime: number;
+}
+export interface ProviderAuthFamilyReport {
+    provider: string;
+    files: ProviderAuthFamilyFile[];
+}
+export declare function familyFilePaths(): Array<{
+    provider: string;
+    path: string;
+}>;
+export declare class ProviderAuthWatcherService implements OnModuleInit, OnModuleDestroy {
+    private readonly watchers;
+    private readonly snapshot;
+    private refreshTimer;
+    onModuleInit(): void;
+    onModuleDestroy(): void;
+    getFamilies(sinceMs: number): Promise<ProviderAuthFamilyReport[]>;
+    private readSnapshotted;
+    private ensureWatchers;
+    private dropWatcher;
+    private scheduleRefresh;
+    private refreshSnapshot;
+    private absolute;
+}

package/dist/server/modules/provider-auth/provider-auth-watcher.service.js

@@ -0,0 +1,130 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProviderAuthWatcherService = void 0;
+exports.familyFilePaths = familyFilePaths;
+const node_fs_1 = require("node:fs");
+const promises_1 = require("node:fs/promises");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const common_1 = require("@nestjs/common");
+const logger_1 = require("../../common/logging/logger");
+const provider_auth_adapters_1 = require("./provider-auth-adapters");
+const logger = (0, logger_1.createLogger)('ProviderAuthWatcher');
+function familyFilePaths() {
+    const files = [];
+    for (const [provider, spec] of Object.entries(provider_auth_adapters_1.PROVIDER_AUTH_ADAPTERS)) {
+        if (spec.payloadKind === 'files') {
+            files.push({ provider, path: spec.filePath });
+        }
+    }
+    files.push({ provider: 'opencode', path: provider_auth_adapters_1.OPENCODE_AUTH_FILE_PATH });
+    return files;
+}
+const WATCH_DEBOUNCE_MS = 500;
+let ProviderAuthWatcherService = class ProviderAuthWatcherService {
+    watchers = new Map();
+    snapshot = new Map();
+    refreshTimer = null;
+    onModuleInit() {
+        this.ensureWatchers();
+    }
+    onModuleDestroy() {
+        if (this.refreshTimer) {
+            clearTimeout(this.refreshTimer);
+            this.refreshTimer = null;
+        }
+        for (const watcher of this.watchers.values())
+            watcher.close();
+        this.watchers.clear();
+    }
+    async getFamilies(sinceMs) {
+        this.ensureWatchers();
+        const reports = [];
+        for (const { provider, path } of familyFilePaths()) {
+            const absolute = this.absolute(path);
+            let mtimeMs;
+            try {
+                mtimeMs = (await (0, promises_1.stat)(absolute)).mtimeMs;
+            }
+            catch {
+                continue;
+            }
+            if (!(mtimeMs > sinceMs))
+                continue;
+            const contentBase64 = await this.readSnapshotted(absolute, mtimeMs);
+            reports.push({ provider, files: [{ path, contentBase64, mtime: mtimeMs }] });
+        }
+        if (reports.length > 0) {
+            logger.info({ providers: reports.map((report) => report.provider) }, 'Reporting changed provider families');
+        }
+        return reports;
+    }
+    async readSnapshotted(absolute, mtimeMs) {
+        const cached = this.snapshot.get(absolute);
+        if (cached && cached.mtimeMs === mtimeMs) {
+            return cached.contentBase64;
+        }
+        const contentBase64 = (await (0, promises_1.readFile)(absolute)).toString('base64');
+        this.snapshot.set(absolute, { contentBase64, mtimeMs });
+        return contentBase64;
+    }
+    ensureWatchers() {
+        for (const { path } of familyFilePaths()) {
+            const dir = (0, node_path_1.dirname)(this.absolute(path));
+            if (this.watchers.has(dir))
+                continue;
+            try {
+                const watcher = (0, node_fs_1.watch)(dir, { persistent: false }, () => this.scheduleRefresh());
+                watcher.on('error', () => this.dropWatcher(dir));
+                this.watchers.set(dir, watcher);
+            }
+            catch {
+            }
+        }
+    }
+    dropWatcher(dir) {
+        this.watchers.get(dir)?.close();
+        this.watchers.delete(dir);
+    }
+    scheduleRefresh() {
+        if (this.refreshTimer)
+            return;
+        this.refreshTimer = setTimeout(() => {
+            this.refreshTimer = null;
+            void this.refreshSnapshot();
+        }, WATCH_DEBOUNCE_MS);
+        this.refreshTimer.unref?.();
+    }
+    async refreshSnapshot() {
+        for (const { path } of familyFilePaths()) {
+            const absolute = this.absolute(path);
+            try {
+                const mtimeMs = (await (0, promises_1.stat)(absolute)).mtimeMs;
+                const cached = this.snapshot.get(absolute);
+                if (!cached || cached.mtimeMs !== mtimeMs) {
+                    this.snapshot.set(absolute, {
+                        contentBase64: (await (0, promises_1.readFile)(absolute)).toString('base64'),
+                        mtimeMs,
+                    });
+                }
+            }
+            catch {
+                this.snapshot.delete(absolute);
+            }
+        }
+    }
+    absolute(relativePath) {
+        return (0, node_path_1.join)(process.env.HOME || (0, node_os_1.homedir)(), relativePath);
+    }
+};
+exports.ProviderAuthWatcherService = ProviderAuthWatcherService;
+exports.ProviderAuthWatcherService = ProviderAuthWatcherService = __decorate([
+    (0, common_1.Injectable)()
+], ProviderAuthWatcherService);
+//# sourceMappingURL=provider-auth-watcher.service.js.map

package/dist/server/modules/provider-auth/provider-auth-watcher.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-auth-watcher.service.js","sourceRoot":"","sources":["../../../src/modules/provider-auth/provider-auth-watcher.service.ts"],"names":[],"mappings":";;;;;;;;;AAwBA,0CASC;AAjCD,qCAAgD;AAChD,+CAAkD;AAClD,qCAAkC;AAClC,yCAA0C;AAC1C,2CAA2E;AAC3E,wDAA2D;AAC3D,qEAA2F;AAE3F,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,qBAAqB,CAAC,CAAC;AAgBnD,SAAgB,eAAe;IAC7B,MAAM,KAAK,GAA8C,EAAE,CAAC;IAC5D,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,+CAAsB,CAAC,EAAE,CAAC;QACtE,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,gDAAuB,EAAE,CAAC,CAAC;IACpE,OAAO,KAAK,CAAC;AACf,CAAC;AAID,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAUvB,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IACpB,QAAQ,GAAG,IAAI,GAAG,EAAqB,CAAC;IACxC,QAAQ,GAAG,IAAI,GAAG,EAAsD,CAAC;IAClF,YAAY,GAA0B,IAAI,CAAC;IAEnD,YAAY;QACV,IAAI,CAAC,cAAc,EAAE,CAAC;IACxB,CAAC;IAED,eAAe;QACb,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAC9D,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAGD,KAAK,CAAC,WAAW,CAAC,OAAe;QAC/B,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,MAAM,OAAO,GAA+B,EAAE,CAAC;QAC/C,KAAK,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,eAAe,EAAE,EAAE,CAAC;YACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,GAAG,CAAC,MAAM,IAAA,eAAI,EAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC;gBAAE,SAAS;YACnC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CACT,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EACvD,qCAAqC,CACtC,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,QAAgB,EAAE,OAAe;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YACzC,OAAO,MAAM,CAAC,aAAa,CAAC;QAC9B,CAAC;QACD,MAAM,aAAa,GAAG,CAAC,MAAM,IAAA,mBAAQ,EAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACpE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC;QACxD,OAAO,aAAa,CAAC;IACvB,CAAC;IAGO,cAAc;QACpB,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,eAAe,EAAE,EAAE,CAAC;YACzC,MAAM,GAAG,GAAG,IAAA,mBAAO,EAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YACzC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YACrC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAA,eAAK,EAAC,GAAG,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;gBAChF,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;gBACjD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;YAET,CAAC;QACH,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,GAAW;QAC7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAGO,eAAe;QACrB,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO;QAC9B,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;YAClC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;QAC9B,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACtB,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,eAAe;QAC3B,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,eAAe,EAAE,EAAE,CAAC;YACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,CAAC,MAAM,IAAA,eAAI,EAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;gBAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAC3C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;oBAC1C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE;wBAC1B,aAAa,EAAE,CAAC,MAAM,IAAA,mBAAQ,EAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;wBAC5D,OAAO;qBACR,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,YAAoB;QACnC,OAAO,IAAA,gBAAI,EAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAA,iBAAO,GAAE,EAAE,YAAY,CAAC,CAAC;IAC3D,CAAC;CACF,CAAA;AAxGY,gEAA0B;qCAA1B,0BAA0B;IADtC,IAAA,mBAAU,GAAE;GACA,0BAA0B,CAwGtC"}

package/dist/server/modules/provider-auth/provider-auth-writeback.service.d.ts

@@ -0,0 +1,30 @@
+import { RemoteApiKeyService } from '../remotes/auth/remote-api-key.service';
+import { type ProviderAuthStorage, type RemoteStorage } from '../storage/interfaces/storage.interface';
+import { ProviderAuthVaultService } from './provider-auth-vault.service';
+export interface PulledFamilyStatus {
+    provider: string;
+    entryId: string;
+    lastWritebackAt: string | null;
+}
+export interface PullFamiliesResult {
+    pulled: boolean;
+    families: PulledFamilyStatus[];
+}
+export declare class ProviderAuthWritebackService {
+    private readonly storage;
+    private readonly vault;
+    private readonly apiKeys;
+    private readonly lastSeenMtimes;
+    private readonly pauses;
+    private readonly tails;
+    pause(remoteId: string, operationId: string): Promise<void>;
+    resume(operationId: string): void;
+    private isPaused;
+    private track;
+    constructor(storage: ProviderAuthStorage & RemoteStorage, vault: ProviderAuthVaultService, apiKeys: RemoteApiKeyService);
+    pullIfChanged(remoteId: string, baseUrl: string, certificate: string): Promise<void>;
+    pullFamiliesNow(remoteId: string): Promise<PullFamiliesResult>;
+    private pullFamiliesUnpaused;
+    private pull;
+    private fetchFamilies;
+}