devchain-cli 0.23.3 → 0.24.0

package/dist/server/modules/provider-auth/provider-auth-writeback.service.js

@@ -0,0 +1,156 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProviderAuthWritebackService = void 0;
+const remote_api_key_service_1 = require("../remotes/auth/remote-api-key.service");
+const remote_tls_1 = require("../remotes/transport/remote-tls");
+const common_1 = require("@nestjs/common");
+const zod_1 = require("zod");
+const logger_1 = require("../../common/logging/logger");
+const storage_interface_1 = require("../storage/interfaces/storage.interface");
+const provider_auth_vault_service_1 = require("./provider-auth-vault.service");
+const logger = (0, logger_1.createLogger)('ProviderAuthWriteback');
+const REQUEST_TIMEOUT_MS = 3000;
+const FamiliesResponseSchema = zod_1.z.array(zod_1.z
+    .object({
+    provider: zod_1.z.string().min(1).max(32),
+    files: zod_1.z
+        .array(zod_1.z.object({
+        path: zod_1.z.string().min(1).max(512),
+        contentBase64: zod_1.z.string(),
+        mtime: zod_1.z.number().nonnegative(),
+    }))
+        .min(1),
+})
+    .strict());
+let ProviderAuthWritebackService = class ProviderAuthWritebackService {
+    storage;
+    vault;
+    apiKeys;
+    lastSeenMtimes = new Map();
+    pauses = new Map();
+    tails = new Map();
+    async pause(remoteId, operationId) {
+        this.pauses.set(operationId, remoteId);
+        await this.tails.get(remoteId)?.catch(() => undefined);
+    }
+    resume(operationId) {
+        const remoteId = this.pauses.get(operationId);
+        this.pauses.delete(operationId);
+        if (remoteId)
+            this.lastSeenMtimes.delete(remoteId);
+    }
+    async isPaused(remoteId) {
+        if ([...this.pauses.values()].includes(remoteId))
+            return true;
+        const operations = await this.storage.listRemoteOperations({
+            remoteId,
+            kinds: ['update_logins'],
+            states: ['running', 'failed'],
+        });
+        return (operations.some((operation) => operation.details.writebackPaused === true) ||
+            [...this.pauses.values()].includes(remoteId));
+    }
+    track(remoteId, work) {
+        const previous = this.tails.get(remoteId) ?? Promise.resolve();
+        const pending = previous.catch(() => undefined).then(work);
+        this.tails.set(remoteId, pending);
+        return pending.finally(() => {
+            if (this.tails.get(remoteId) === pending)
+                this.tails.delete(remoteId);
+        });
+    }
+    constructor(storage, vault, apiKeys) {
+        this.storage = storage;
+        this.vault = vault;
+        this.apiKeys = apiKeys;
+    }
+    pullIfChanged(remoteId, baseUrl, certificate) {
+        return this.track(remoteId, async () => {
+            try {
+                if (await this.isPaused(remoteId))
+                    return;
+                if ((await this.vault.familiesOfRemote(remoteId)).length === 0)
+                    return;
+                await this.pull(remoteId, baseUrl, certificate);
+            }
+            catch (error) {
+                logger.debug({ err: error, remoteId }, 'Family write-back pull skipped');
+            }
+        });
+    }
+    pullFamiliesNow(remoteId) {
+        return this.track(remoteId, () => this.pullFamiliesUnpaused(remoteId));
+    }
+    async pullFamiliesUnpaused(remoteId) {
+        if (await this.isPaused(remoteId)) {
+            return { pulled: false, families: await this.vault.familiesOfRemote(remoteId) };
+        }
+        const remote = await this.storage.getRemote(remoteId);
+        let pulled = false;
+        try {
+            if (remote.baseUrl) {
+                const { baseUrl, certificate } = (0, remote_tls_1.requireRemoteTls)(remote);
+                await this.pull(remoteId, baseUrl, certificate);
+                pulled = true;
+            }
+        }
+        catch (error) {
+            logger.warn({ err: error, remoteId }, 'Families pull before reset/delete used the last report');
+        }
+        return { pulled, families: await this.vault.familiesOfRemote(remoteId) };
+    }
+    async pull(remoteId, baseUrl, certificate) {
+        const since = this.lastSeenMtimes.get(remoteId) ?? 0;
+        const families = await this.fetchFamilies(remoteId, baseUrl, certificate, since);
+        if (families.length === 0)
+            return;
+        let newest = since;
+        for (const family of families) {
+            for (const file of family.files) {
+                newest = Math.max(newest, file.mtime);
+            }
+        }
+        await this.vault.writeBackFamilies(remoteId, families);
+        this.lastSeenMtimes.set(remoteId, newest);
+    }
+    async fetchFamilies(remoteId, baseUrl, certificate, sinceMs) {
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
+        timeout.unref?.();
+        const since = Math.ceil(sinceMs);
+        try {
+            const response = await (0, remote_tls_1.remoteFetch)(`${baseUrl.replace(/\/+$/, '')}/api/host/provider-auth/families?since=${since}`, { signal: controller.signal, headers: await this.apiKeys.headers(remoteId) }, certificate);
+            if (!response.ok) {
+                throw new Error(`Families request answered ${response.status}`);
+            }
+            const parsed = FamiliesResponseSchema.safeParse(await response.json().catch(() => null));
+            if (!parsed.success) {
+                throw new Error('Families answer had an unexpected shape');
+            }
+            return parsed.data;
+        }
+        finally {
+            clearTimeout(timeout);
+        }
+    }
+};
+exports.ProviderAuthWritebackService = ProviderAuthWritebackService;
+exports.ProviderAuthWritebackService = ProviderAuthWritebackService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(storage_interface_1.STORAGE_SERVICE)),
+    __metadata("design:paramtypes", [Object, provider_auth_vault_service_1.ProviderAuthVaultService,
+        remote_api_key_service_1.RemoteApiKeyService])
+], ProviderAuthWritebackService);
+//# sourceMappingURL=provider-auth-writeback.service.js.map

package/dist/server/modules/provider-auth/provider-auth-writeback.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-auth-writeback.service.js","sourceRoot":"","sources":["../../../src/modules/provider-auth/provider-auth-writeback.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,mFAA6E;AAC7E,gEAAgF;AAChF,2CAAoD;AACpD,6BAAwB;AACxB,wDAA2D;AAC3D,+EAIiD;AAEjD,+EAAyE;AAEzE,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,uBAAuB,CAAC,CAAC;AAGrD,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC,MAAM,sBAAsB,GAAG,OAAC,CAAC,KAAK,CACpC,OAAC;KACE,MAAM,CAAC;IACN,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACnC,KAAK,EAAE,OAAC;SACL,KAAK,CACJ,OAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QAChC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE;QACzB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;KAChC,CAAC,CACH;SACA,GAAG,CAAC,CAAC,CAAC;CACV,CAAC;KACD,MAAM,EAAE,CACZ,CAAC;AAuBK,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;IA4CpB;IACA;IACA;IA5CF,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE3C,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEnC,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAE7D,KAAK,CAAC,KAAK,CAAC,QAAgB,EAAE,WAAmB;QAC/C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACvC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,CAAC,WAAmB;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAChC,IAAI,QAAQ;YAAE,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,QAAgB;QACrC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC;YACzD,QAAQ;YACR,KAAK,EAAE,CAAC,eAAe,CAAC;YACxB,MAAM,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;SAC9B,CAAC,CAAC;QACH,OAAO,CACL,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,KAAK,IAAI,CAAC;YAC1E,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAC7C,CAAC;IACJ,CAAC;IAEO,KAAK,CAAI,QAAgB,EAAE,IAAsB;QAEvD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAC/D,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAClC,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE;YAC1B,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,OAAO;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,YAEmB,OAA4C,EAC5C,KAA+B,EAC/B,OAA4B;QAF5B,YAAO,GAAP,OAAO,CAAqC;QAC5C,UAAK,GAAL,KAAK,CAA0B;QAC/B,YAAO,GAAP,OAAO,CAAqB;IAC5C,CAAC;IAIJ,aAAa,CAAC,QAAgB,EAAE,OAAe,EAAE,WAAmB;QAClE,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;YACrC,IAAI,CAAC;gBACH,IAAI,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAAE,OAAO;gBAG1C,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO;gBACvE,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,gCAAgC,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAOD,eAAe,CAAC,QAAgB;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzE,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,QAAgB;QACjD,IAAI,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClF,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,IAAA,6BAAgB,EAAC,MAAM,CAAC,CAAC;gBAC1D,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;gBAChD,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,EACxB,wDAAwD,CACzD,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC3E,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,QAAgB,EAAE,OAAe,EAAE,WAAmB;QACvE,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QACjF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAClC,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBAChC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACvD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;IAQO,KAAK,CAAC,aAAa,CACzB,QAAgB,EAChB,OAAe,EACf,WAAmB,EACnB,OAAe;QAEf,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,kBAAkB,CAAC,CAAC;QACzE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QAGlB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAA,wBAAW,EAChC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,0CAA0C,KAAK,EAAE,EAC/E,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAC5E,WAAW,CACZ,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;YACzF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC7D,CAAC;YACD,OAAO,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;CACF,CAAA;AAjJY,oEAA4B;uCAA5B,4BAA4B;IADxC,IAAA,mBAAU,GAAE;IA4CR,WAAA,IAAA,eAAM,EAAC,mCAAe,CAAC,CAAA;6CAEA,sDAAwB;QACtB,4CAAmB;GA9CpC,4BAA4B,CAiJxC"}

package/dist/server/modules/provider-auth/provider-auth.controller.d.ts

@@ -0,0 +1,27 @@
+import { type OpencodeLoginDto, type PerProviderIdImportResult, type ProviderAuthEntryDto } from './provider-auth.dto';
+import { ProviderAuthVaultService } from './provider-auth-vault.service';
+import { ProviderAuthReleaseService, type ProviderAuthReleaseResult } from './provider-auth-release.service';
+import { ProviderAuthGeneratorService, type ProviderAuthGeneration } from './provider-auth-generator.service';
+export declare class ProviderAuthController {
+    private readonly vault;
+    private readonly generator;
+    private readonly releaseService;
+    constructor(vault: ProviderAuthVaultService, generator: ProviderAuthGeneratorService, releaseService: ProviderAuthReleaseService);
+    list(): Promise<{
+        items: ProviderAuthEntryDto[];
+    }>;
+    createStatic(body: unknown): Promise<ProviderAuthEntryDto>;
+    importOpencode(body: unknown): Promise<{
+        results: PerProviderIdImportResult[];
+    }>;
+    listOpencodeLogins(): Promise<{
+        logins: OpencodeLoginDto[];
+    }>;
+    generate(body: unknown): Promise<ProviderAuthGeneration>;
+    getGeneration(generationId: string): ProviderAuthGeneration;
+    cancelGeneration(generationId: string): Promise<ProviderAuthGeneration>;
+    rename(id: string, body: unknown): Promise<ProviderAuthEntryDto>;
+    delete(id: string): Promise<void>;
+    checkout(id: string, body: unknown): Promise<ProviderAuthEntryDto>;
+    release(id: string, body: unknown): Promise<ProviderAuthReleaseResult>;
+}

package/dist/server/modules/provider-auth/provider-auth.controller.js

@@ -0,0 +1,176 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProviderAuthController = void 0;
+const common_1 = require("@nestjs/common");
+const zod_1 = require("zod");
+const logger_1 = require("../../common/logging/logger");
+const integration_admission_guard_1 = require("../../common/guards/integration-admission.guard");
+const provider_auth_dto_1 = require("./provider-auth.dto");
+const provider_auth_vault_service_1 = require("./provider-auth-vault.service");
+const provider_auth_release_service_1 = require("./provider-auth-release.service");
+const provider_auth_generator_service_1 = require("./provider-auth-generator.service");
+const logger = (0, logger_1.createLogger)('ProviderAuthController');
+let ProviderAuthController = class ProviderAuthController {
+    vault;
+    generator;
+    releaseService;
+    constructor(vault, generator, releaseService) {
+        this.vault = vault;
+        this.generator = generator;
+        this.releaseService = releaseService;
+    }
+    async list() {
+        logger.info('GET /api/provider-auth');
+        return { items: await this.vault.list() };
+    }
+    async createStatic(body) {
+        logger.info('POST /api/provider-auth/static');
+        const data = provider_auth_dto_1.CreateProviderAuthStaticSchema.parse(body);
+        return this.vault.createStatic(data);
+    }
+    async importOpencode(body) {
+        logger.info('POST /api/provider-auth/opencode-import');
+        const { providerIds } = provider_auth_dto_1.ImportOpencodeSchema.parse(body);
+        return { results: await this.vault.importOpencode(providerIds) };
+    }
+    async listOpencodeLogins() {
+        const logins = await this.vault.listOpencodeLogins();
+        logger.info({ count: logins.length }, 'GET /api/provider-auth/opencode-logins');
+        return { logins };
+    }
+    async generate(body) {
+        logger.info('POST /api/provider-auth/generate');
+        const { provider, label } = provider_auth_dto_1.GenerateProviderAuthSchema.parse(body);
+        return this.generator.start(provider, label);
+    }
+    getGeneration(generationId) {
+        return this.generator.get(provider_auth_dto_1.ProviderAuthGenerationIdSchema.parse(generationId));
+    }
+    async cancelGeneration(generationId) {
+        logger.info({ generationId }, 'POST /api/provider-auth/generate/:id/cancel');
+        return this.generator.cancel(provider_auth_dto_1.ProviderAuthGenerationIdSchema.parse(generationId));
+    }
+    async rename(id, body) {
+        logger.info({ entryId: id }, 'PATCH /api/provider-auth/:id');
+        const { label } = provider_auth_dto_1.RenameProviderAuthSchema.parse(body);
+        return this.vault.rename(provider_auth_dto_1.ProviderAuthEntryIdSchema.parse(id), label);
+    }
+    async delete(id) {
+        logger.info({ entryId: id }, 'DELETE /api/provider-auth/:id');
+        await this.vault.delete(provider_auth_dto_1.ProviderAuthEntryIdSchema.parse(id));
+    }
+    async checkout(id, body) {
+        logger.info({ entryId: id }, 'POST /api/provider-auth/:id/checkout');
+        const { remoteId } = provider_auth_dto_1.CheckoutSchema.parse(body);
+        return this.vault.checkout(provider_auth_dto_1.ProviderAuthEntryIdSchema.parse(id), remoteId);
+    }
+    async release(id, body) {
+        logger.info({ entryId: id }, 'POST /api/provider-auth/:id/release');
+        zod_1.z.object({})
+            .strict()
+            .parse(body ?? {});
+        return this.releaseService.release(provider_auth_dto_1.ProviderAuthEntryIdSchema.parse(id));
+    }
+};
+exports.ProviderAuthController = ProviderAuthController;
+__decorate([
+    (0, common_1.Get)(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], ProviderAuthController.prototype, "list", null);
+__decorate([
+    (0, common_1.Post)('static'),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], ProviderAuthController.prototype, "createStatic", null);
+__decorate([
+    (0, common_1.Post)('opencode-import'),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], ProviderAuthController.prototype, "importOpencode", null);
+__decorate([
+    (0, common_1.Get)('opencode-logins'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], ProviderAuthController.prototype, "listOpencodeLogins", null);
+__decorate([
+    (0, common_1.Post)('generate'),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], ProviderAuthController.prototype, "generate", null);
+__decorate([
+    (0, common_1.Get)('generate/:generationId'),
+    __param(0, (0, common_1.Param)('generationId')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Object)
+], ProviderAuthController.prototype, "getGeneration", null);
+__decorate([
+    (0, common_1.Post)('generate/:generationId/cancel'),
+    (0, common_1.HttpCode)(200),
+    __param(0, (0, common_1.Param)('generationId')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], ProviderAuthController.prototype, "cancelGeneration", null);
+__decorate([
+    (0, common_1.Patch)(':id'),
+    __param(0, (0, common_1.Param)('id')),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], ProviderAuthController.prototype, "rename", null);
+__decorate([
+    (0, common_1.Delete)(':id'),
+    __param(0, (0, common_1.Param)('id')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], ProviderAuthController.prototype, "delete", null);
+__decorate([
+    (0, common_1.Post)(':id/checkout'),
+    (0, common_1.HttpCode)(200),
+    __param(0, (0, common_1.Param)('id')),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], ProviderAuthController.prototype, "checkout", null);
+__decorate([
+    (0, common_1.Post)(':id/release'),
+    (0, common_1.HttpCode)(200),
+    __param(0, (0, common_1.Param)('id')),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], ProviderAuthController.prototype, "release", null);
+exports.ProviderAuthController = ProviderAuthController = __decorate([
+    (0, common_1.UseGuards)(integration_admission_guard_1.IntegrationAdmissionGuard),
+    (0, common_1.Controller)('api/provider-auth'),
+    __metadata("design:paramtypes", [provider_auth_vault_service_1.ProviderAuthVaultService,
+        provider_auth_generator_service_1.ProviderAuthGeneratorService,
+        provider_auth_release_service_1.ProviderAuthReleaseService])
+], ProviderAuthController);
+//# sourceMappingURL=provider-auth.controller.js.map

package/dist/server/modules/provider-auth/provider-auth.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-auth.controller.js","sourceRoot":"","sources":["../../../src/modules/provider-auth/provider-auth.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAUwB;AACxB,6BAAwB;AACxB,wDAA2D;AAC3D,iGAA4F;AAC5F,2DAW6B;AAC7B,+EAAyE;AACzE,mFAGyC;AACzC,uFAG2C;AAE3C,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,wBAAwB,CAAC,CAAC;AAK/C,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;IAEd;IACA;IACA;IAHnB,YACmB,KAA+B,EAC/B,SAAuC,EACvC,cAA0C;QAF1C,UAAK,GAAL,KAAK,CAA0B;QAC/B,cAAS,GAAT,SAAS,CAA8B;QACvC,mBAAc,GAAd,cAAc,CAA4B;IAC1D,CAAC;IAGE,AAAN,KAAK,CAAC,IAAI;QACR,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACtC,OAAO,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;IAC5C,CAAC;IAGK,AAAN,KAAK,CAAC,YAAY,CAAS,IAAa;QACtC,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,kDAA8B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAGK,AAAN,KAAK,CAAC,cAAc,CAAS,IAAa;QACxC,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;QACvD,MAAM,EAAE,WAAW,EAAE,GAAG,wCAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzD,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;IACnE,CAAC;IAIK,AAAN,KAAK,CAAC,kBAAkB;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,wCAAwC,CAAC,CAAC;QAChF,OAAO,EAAE,MAAM,EAAE,CAAC;IACpB,CAAC;IAIK,AAAN,KAAK,CAAC,QAAQ,CAAS,IAAa;QAClC,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAChD,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,8CAA0B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAGD,aAAa,CAAwB,YAAoB;QACvD,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,kDAA8B,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IAChF,CAAC;IAIK,AAAN,KAAK,CAAC,gBAAgB,CACG,YAAoB;QAE3C,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,EAAE,6CAA6C,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,kDAA8B,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IACnF,CAAC;IAGK,AAAN,KAAK,CAAC,MAAM,CAAc,EAAU,EAAU,IAAa;QACzD,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,8BAA8B,CAAC,CAAC;QAC7D,MAAM,EAAE,KAAK,EAAE,GAAG,4CAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,6CAAyB,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IACvE,CAAC;IAGK,AAAN,KAAK,CAAC,MAAM,CAAc,EAAU;QAClC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,+BAA+B,CAAC,CAAC;QAC9D,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,6CAAyB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/D,CAAC;IAIK,AAAN,KAAK,CAAC,QAAQ,CAAc,EAAU,EAAU,IAAa;QAC3D,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,sCAAsC,CAAC,CAAC;QACrE,MAAM,EAAE,QAAQ,EAAE,GAAG,kCAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,6CAAyB,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC5E,CAAC;IAIK,AAAN,KAAK,CAAC,OAAO,CACE,EAAU,EACf,IAAa;QAErB,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,qCAAqC,CAAC,CAAC;QACpE,OAAC,CAAC,MAAM,CAAC,EAAE,CAAC;aACT,MAAM,EAAE;aACR,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,6CAAyB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1E,CAAC;CACF,CAAA;AA1FY,wDAAsB;AAQ3B;IADL,IAAA,YAAG,GAAE;;;;kDAIL;AAGK;IADL,IAAA,aAAI,EAAC,QAAQ,CAAC;IACK,WAAA,IAAA,aAAI,GAAE,CAAA;;;;0DAIzB;AAGK;IADL,IAAA,aAAI,EAAC,iBAAiB,CAAC;IACF,WAAA,IAAA,aAAI,GAAE,CAAA;;;;4DAI3B;AAIK;IADL,IAAA,YAAG,EAAC,iBAAiB,CAAC;;;;gEAKtB;AAIK;IADL,IAAA,aAAI,EAAC,UAAU,CAAC;IACD,WAAA,IAAA,aAAI,GAAE,CAAA;;;;sDAIrB;AAGD;IADC,IAAA,YAAG,EAAC,wBAAwB,CAAC;IACf,WAAA,IAAA,cAAK,EAAC,cAAc,CAAC,CAAA;;;;2DAEnC;AAIK;IAFL,IAAA,aAAI,EAAC,+BAA+B,CAAC;IACrC,IAAA,iBAAQ,EAAC,GAAG,CAAC;IAEX,WAAA,IAAA,cAAK,EAAC,cAAc,CAAC,CAAA;;;;8DAIvB;AAGK;IADL,IAAA,cAAK,EAAC,KAAK,CAAC;IACC,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IAAc,WAAA,IAAA,aAAI,GAAE,CAAA;;;;oDAI5C;AAGK;IADL,IAAA,eAAM,EAAC,KAAK,CAAC;IACA,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;;;;oDAGxB;AAIK;IAFL,IAAA,aAAI,EAAC,cAAc,CAAC;IACpB,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACE,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IAAc,WAAA,IAAA,aAAI,GAAE,CAAA;;;;sDAI9C;AAIK;IAFL,IAAA,aAAI,EAAC,aAAa,CAAC;IACnB,IAAA,iBAAQ,EAAC,GAAG,CAAC;IAEX,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IACX,WAAA,IAAA,aAAI,GAAE,CAAA;;;;qDAOR;iCAzFU,sBAAsB;IAFlC,IAAA,kBAAS,EAAC,uDAAyB,CAAC;IACpC,IAAA,mBAAU,EAAC,mBAAmB,CAAC;qCAGJ,sDAAwB;QACpB,8DAA4B;QACvB,0DAA0B;GAJlD,sBAAsB,CA0FlC"}

package/dist/server/modules/provider-auth/provider-auth.dto.d.ts

@@ -0,0 +1,88 @@
+import { z } from 'zod';
+import type { ProviderAuthEntry } from '../storage/models/domain.models';
+export type ProviderAuthEntryDto = Omit<ProviderAuthEntry, 'payloadCiphertext'>;
+export declare const ProviderAuthEnvKeySchema: z.ZodEffects<z.ZodString, string, string>;
+export declare const ProviderAuthEnvValueSchema: z.ZodEffects<z.ZodString, string, string>;
+export declare const PROVIDER_AUTH_LABEL_MAX_LENGTH = 128;
+export declare const CreateProviderAuthStaticSchema: z.ZodUnion<[z.ZodObject<{
+    provider: z.ZodString;
+    label: z.ZodString;
+    token: z.ZodEffects<z.ZodString, string, string>;
+}, "strict", z.ZodTypeAny, {
+    provider: string;
+    label: string;
+    token: string;
+}, {
+    provider: string;
+    label: string;
+    token: string;
+}>, z.ZodObject<{
+    provider: z.ZodString;
+    label: z.ZodString;
+    envKey: z.ZodEffects<z.ZodString, string, string>;
+    value: z.ZodEffects<z.ZodString, string, string>;
+}, "strict", z.ZodTypeAny, {
+    value: string;
+    provider: string;
+    label: string;
+    envKey: string;
+}, {
+    value: string;
+    provider: string;
+    label: string;
+    envKey: string;
+}>]>;
+export type CreateProviderAuthStaticData = z.infer<typeof CreateProviderAuthStaticSchema>;
+export declare function isOpencodeProviderId(value: string): boolean;
+export declare const ImportOpencodeSchema: z.ZodObject<{
+    providerIds: z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">;
+}, "strict", z.ZodTypeAny, {
+    providerIds: string[];
+}, {
+    providerIds: string[];
+}>;
+export type ImportOpencodeData = z.infer<typeof ImportOpencodeSchema>;
+export interface OpencodeLoginDto {
+    providerId: string;
+    type: 'api' | 'wellknown' | 'oauth' | 'other';
+    importable: boolean;
+    imported: boolean;
+}
+export declare const ProviderAuthEntryIdSchema: z.ZodString;
+export declare const CheckoutSchema: z.ZodObject<{
+    remoteId: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    remoteId: string;
+}, {
+    remoteId: string;
+}>;
+export declare const RenameProviderAuthSchema: z.ZodObject<{
+    label: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    label: string;
+}, {
+    label: string;
+}>;
+export type PerProviderIdImportResult = {
+    providerId: string;
+    outcome: 'imported';
+    entryId: string;
+} | {
+    providerId: string;
+    outcome: 'refused';
+    reason: string;
+} | {
+    providerId: string;
+    outcome: 'missing';
+};
+export declare const GenerateProviderAuthSchema: z.ZodObject<{
+    provider: z.ZodString;
+    label: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    provider: string;
+    label?: string | undefined;
+}, {
+    provider: string;
+    label?: string | undefined;
+}>;
+export declare const ProviderAuthGenerationIdSchema: z.ZodString;

package/dist/server/modules/provider-auth/provider-auth.dto.js

@@ -0,0 +1,63 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProviderAuthGenerationIdSchema = exports.GenerateProviderAuthSchema = exports.RenameProviderAuthSchema = exports.CheckoutSchema = exports.ProviderAuthEntryIdSchema = exports.ImportOpencodeSchema = exports.CreateProviderAuthStaticSchema = exports.PROVIDER_AUTH_LABEL_MAX_LENGTH = exports.ProviderAuthEnvValueSchema = exports.ProviderAuthEnvKeySchema = void 0;
+exports.isOpencodeProviderId = isOpencodeProviderId;
+const zod_1 = require("zod");
+const provider_auth_adapters_1 = require("./provider-auth-adapters");
+const ENV_KEY_MESSAGE = 'envKey must be an upper-case style environment variable name';
+exports.ProviderAuthEnvKeySchema = zod_1.z
+    .string()
+    .trim()
+    .min(1)
+    .max(128)
+    .regex(provider_auth_adapters_1.PROVIDER_AUTH_ENV_KEY_PATTERN, ENV_KEY_MESSAGE)
+    .refine((key) => !provider_auth_adapters_1.RESERVED_PROVIDER_AUTH_ENV_KEYS.has(key), {
+    message: 'This environment key is reserved and cannot be stored.',
+});
+exports.ProviderAuthEnvValueSchema = zod_1.z
+    .string()
+    .min(1)
+    .max(16 * 1024)
+    .refine((value) => !/[\0\r\n]/.test(value), {
+    message: 'The value must be a single line without control characters.',
+});
+exports.PROVIDER_AUTH_LABEL_MAX_LENGTH = 128;
+const LabelSchema = zod_1.z.string().trim().min(1).max(exports.PROVIDER_AUTH_LABEL_MAX_LENGTH);
+const ProviderSchema = zod_1.z.string().trim().min(1).max(32);
+exports.CreateProviderAuthStaticSchema = zod_1.z.union([
+    zod_1.z
+        .object({ provider: ProviderSchema, label: LabelSchema, token: exports.ProviderAuthEnvValueSchema })
+        .strict(),
+    zod_1.z
+        .object({
+        provider: ProviderSchema,
+        label: LabelSchema,
+        envKey: exports.ProviderAuthEnvKeySchema,
+        value: exports.ProviderAuthEnvValueSchema,
+    })
+        .strict(),
+]);
+const OPENCODE_PROVIDER_ID = /^[a-z0-9][a-z0-9-]*$/i;
+function isOpencodeProviderId(value) {
+    return value.length >= 1 && value.length <= 128 && OPENCODE_PROVIDER_ID.test(value);
+}
+const OpencodeProviderIdSchema = zod_1.z.string().trim().refine(isOpencodeProviderId, {
+    message: 'providerId must be 1-128 letters, digits or dashes.',
+});
+exports.ImportOpencodeSchema = zod_1.z
+    .object({
+    providerIds: zod_1.z.array(OpencodeProviderIdSchema).min(1),
+})
+    .strict();
+exports.ProviderAuthEntryIdSchema = zod_1.z.string().uuid();
+exports.CheckoutSchema = zod_1.z
+    .object({
+    remoteId: zod_1.z.string().uuid(),
+})
+    .strict();
+exports.RenameProviderAuthSchema = zod_1.z.object({ label: LabelSchema }).strict();
+exports.GenerateProviderAuthSchema = zod_1.z
+    .object({ provider: ProviderSchema, label: LabelSchema.optional() })
+    .strict();
+exports.ProviderAuthGenerationIdSchema = zod_1.z.string().uuid();
+//# sourceMappingURL=provider-auth.dto.js.map

package/dist/server/modules/provider-auth/provider-auth.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-auth.dto.js","sourceRoot":"","sources":["../../../src/modules/provider-auth/provider-auth.dto.ts"],"names":[],"mappings":";;;AAyDA,oDAEC;AA3DD,6BAAwB;AAExB,qEAGkC;AAKlC,MAAM,eAAe,GAAG,8DAA8D,CAAC;AAE1E,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,sDAA6B,EAAE,eAAe,CAAC;KACrD,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,wDAA+B,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;IAC1D,OAAO,EAAE,wDAAwD;CAClE,CAAC,CAAC;AAGQ,QAAA,0BAA0B,GAAG,OAAC;KACxC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC;KACd,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;IAC1C,OAAO,EAAE,6DAA6D;CACvE,CAAC,CAAC;AAEQ,QAAA,8BAA8B,GAAG,GAAG,CAAC;AAElD,MAAM,WAAW,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,sCAA8B,CAAC,CAAC;AAEjF,MAAM,cAAc,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAG3C,QAAA,8BAA8B,GAAG,OAAC,CAAC,KAAK,CAAC;IACpD,OAAC;SACE,MAAM,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,kCAA0B,EAAE,CAAC;SAC3F,MAAM,EAAE;IACX,OAAC;SACE,MAAM,CAAC;QACN,QAAQ,EAAE,cAAc;QACxB,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,gCAAwB;QAChC,KAAK,EAAE,kCAA0B;KAClC,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAIH,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAGrD,SAAgB,oBAAoB,CAAC,KAAa;IAChD,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,wBAAwB,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,oBAAoB,EAAE;IAC9E,OAAO,EAAE,qDAAqD;CAC/D,CAAC,CAAC;AAEU,QAAA,oBAAoB,GAAG,OAAC;KAClC,MAAM,CAAC;IACN,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACtD,CAAC;KACD,MAAM,EAAE,CAAC;AAYC,QAAA,yBAAyB,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;AAE9C,QAAA,cAAc,GAAG,OAAC;KAC5B,MAAM,CAAC;IACN,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;CAC5B,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,wBAAwB,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAOrE,QAAA,0BAA0B,GAAG,OAAC;KACxC,MAAM,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC;KACnE,MAAM,EAAE,CAAC;AAEC,QAAA,8BAA8B,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC"}

package/dist/server/modules/provider-auth/provider-auth.module.d.ts

@@ -0,0 +1,2 @@
+export declare class ProviderAuthModule {
+}

package/dist/server/modules/provider-auth/provider-auth.module.js

@@ -0,0 +1,50 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProviderAuthModule = void 0;
+const remote_api_key_module_1 = require("../remotes/auth/remote-api-key.module");
+const common_1 = require("@nestjs/common");
+const storage_module_1 = require("../storage/storage.module");
+const provider_adapters_module_1 = require("../providers/adapters/provider-adapters.module");
+const provider_auth_controller_1 = require("./provider-auth.controller");
+const provider_auth_vault_service_1 = require("./provider-auth-vault.service");
+const provider_auth_generator_service_1 = require("./provider-auth-generator.service");
+const provider_auth_watcher_service_1 = require("./provider-auth-watcher.service");
+const provider_auth_writeback_service_1 = require("./provider-auth-writeback.service");
+const provider_auth_release_service_1 = require("./provider-auth-release.service");
+const terminal_module_1 = require("../terminal/terminal.module");
+const process_executor_module_1 = require("../terminal/services/process-executor/process-executor.module");
+let ProviderAuthModule = class ProviderAuthModule {
+};
+exports.ProviderAuthModule = ProviderAuthModule;
+exports.ProviderAuthModule = ProviderAuthModule = __decorate([
+    (0, common_1.Module)({
+        imports: [
+            remote_api_key_module_1.RemoteApiKeyModule,
+            storage_module_1.StorageModule,
+            provider_adapters_module_1.ProviderAdaptersModule,
+            terminal_module_1.TerminalModule,
+            process_executor_module_1.ProcessExecutorModule,
+        ],
+        controllers: [provider_auth_controller_1.ProviderAuthController],
+        providers: [
+            provider_auth_vault_service_1.ProviderAuthVaultService,
+            provider_auth_generator_service_1.ProviderAuthGeneratorService,
+            provider_auth_watcher_service_1.ProviderAuthWatcherService,
+            provider_auth_writeback_service_1.ProviderAuthWritebackService,
+            provider_auth_release_service_1.ProviderAuthReleaseService,
+        ],
+        exports: [
+            provider_auth_vault_service_1.ProviderAuthVaultService,
+            provider_auth_generator_service_1.ProviderAuthGeneratorService,
+            provider_auth_watcher_service_1.ProviderAuthWatcherService,
+            provider_auth_writeback_service_1.ProviderAuthWritebackService,
+        ],
+    })
+], ProviderAuthModule);
+//# sourceMappingURL=provider-auth.module.js.map

package/dist/server/modules/provider-auth/provider-auth.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-auth.module.js","sourceRoot":"","sources":["../../../src/modules/provider-auth/provider-auth.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,iFAA2E;AAC3E,2CAAwC;AACxC,8DAA0D;AAC1D,6FAAwF;AACxF,yEAAoE;AACpE,+EAAyE;AACzE,uFAAiF;AACjF,mFAA6E;AAC7E,uFAAiF;AACjF,mFAA6E;AAC7E,iEAA6D;AAC7D,2GAAsG;AA2B/F,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;CAAG,CAAA;AAArB,gDAAkB;6BAAlB,kBAAkB;IAzB9B,IAAA,eAAM,EAAC;QACN,OAAO,EAAE;YACP,0CAAkB;YAClB,8BAAa;YACb,iDAAsB;YACtB,gCAAc;YACd,+CAAqB;SACtB;QACD,WAAW,EAAE,CAAC,iDAAsB,CAAC;QACrC,SAAS,EAAE;YACT,sDAAwB;YACxB,8DAA4B;YAC5B,0DAA0B;YAC1B,8DAA4B;YAC5B,0DAA0B;SAC3B;QACD,OAAO,EAAE;YACP,sDAAwB;YACxB,8DAA4B;YAG5B,0DAA0B;YAC1B,8DAA4B;SAC7B;KACF,CAAC;GACW,kBAAkB,CAAG"}

package/dist/server/modules/providers/adapters/antigravity.adapter.d.ts

@@ -4,6 +4,7 @@ import { AntigravityTrustedWorkspacesService } from '../../core/services/antigra
 export declare class AntigravityAdapter implements ProviderAdapter, TranscriptDiscoveryCapability, GlobalMcpConfigCapability, ProjectProvisioningCapability {
     private readonly trustedWorkspaces;
     readonly providerName = "agy";
+    readonly launchEnv: Record<string, string>;
     readonly requiresProjectProvisioning: true;
     constructor(trustedWorkspaces: AntigravityTrustedWorkspacesService);
     readonly terminalOutputBehavior: TerminalOutputBehavior;

package/dist/server/modules/providers/adapters/antigravity.adapter.js

@@ -10,11 +10,13 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AntigravityAdapter = void 0;
+const provider_cli_policy_1 = require("./provider-cli-policy");
 const common_1 = require("@nestjs/common");
 const antigravity_trusted_workspaces_service_1 = require("../../core/services/antigravity-trusted-workspaces.service");
 let AntigravityAdapter = class AntigravityAdapter {
     trustedWorkspaces;
     providerName = 'agy';
+    launchEnv = (0, provider_cli_policy_1.getProviderCliNoUpdateOptions)(this.providerName).env;
     requiresProjectProvisioning = true;
     constructor(trustedWorkspaces) {
         this.trustedWorkspaces = trustedWorkspaces;

package/dist/server/modules/providers/adapters/antigravity.adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"antigravity.adapter.js","sourceRoot":"","sources":["../../../../src/modules/providers/adapters/antigravity.adapter.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAc5C,uHAAiH;AA8B1G,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAcA;IAPpB,YAAY,GAAG,KAAK,CAAC;IAKrB,2BAA2B,GAAG,IAAa,CAAC;IAErD,YAA6B,iBAAsD;QAAtD,sBAAiB,GAAjB,iBAAiB,CAAqC;IAAG,CAAC;IAK9E,sBAAsB,GAA2B,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC;IAI/E,qBAAqB,GAAG,MAAe,CAAC;IAIxC,2BAA2B,GAAG,KAAc,CAAC;IAC7C,mCAAmC,GAAG,IAAI,CAAC;IAEpD,eAAe,CAAC,EACd,IAAI,EACJ,iBAAiB,EACjB,iBAAiB,EACjB,aAAa,GACQ;QACrB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAGvB,OAAO,EAAE,IAAI,EAAE,CAAC,gBAAgB,EAAE,iBAAkB,EAAE,GAAG,iBAAiB,CAAC,EAAE,CAAC;QAChF,CAAC;QAID,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,EAAE,IAAI,EAAE,CAAC,sBAAsB,EAAE,aAAa,EAAE,GAAG,iBAAiB,CAAC,EAAE,CAAC;QACjF,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,iBAAiB,CAAC,EAAE,CAAC;IAC1C,CAAC;IAQD,KAAK,CAAC,oBAAoB,CAAC,WAAmB;QAC5C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAChE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACzE,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE;oBACR;wBACE,MAAM,EAAE,oBAAoB;wBAC5B,KAAK,EAAE,MAAM;wBACb,OAAO;wBACP,IAAI,EAAE,4BAA4B;qBACnC;iBACF;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IASD,oBAAoB,CAAC,OAAe;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,EAAE,UAAU,CAAC;QACnC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAEvD,MAAM,OAAO,GAAqB,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5D,MAAM,GAAG,GAAG,YAAuC,CAAC;YAGpD,MAAM,QAAQ,GAAG,OAAO,GAAG,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC;YAC/E,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACjC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAOD,yBAAyB,CAAC,OAA4B;QAIpD,OAAO;YACL,GAAG,EAAE,OAAO,CAAC,KAAK,IAAI,UAAU;YAChC,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE;SACvC,CAAC;IACJ,CAAC;CACF,CAAA;AAnHY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;qCAeqC,4EAAmC;GAdxE,kBAAkB,CAmH9B"}
+{"version":3,"file":"antigravity.adapter.js","sourceRoot":"","sources":["../../../../src/modules/providers/adapters/antigravity.adapter.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,+DAAsE;AACtE,2CAA4C;AAc5C,uHAAiH;AA8B1G,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAeA;IARpB,YAAY,GAAG,KAAK,CAAC;IACrB,SAAS,GAAG,IAAA,mDAA6B,EAAC,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC;IAKjE,2BAA2B,GAAG,IAAa,CAAC;IAErD,YAA6B,iBAAsD;QAAtD,sBAAiB,GAAjB,iBAAiB,CAAqC;IAAG,CAAC;IAK9E,sBAAsB,GAA2B,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC;IAI/E,qBAAqB,GAAG,MAAe,CAAC;IAIxC,2BAA2B,GAAG,KAAc,CAAC;IAC7C,mCAAmC,GAAG,IAAI,CAAC;IAEpD,eAAe,CAAC,EACd,IAAI,EACJ,iBAAiB,EACjB,iBAAiB,EACjB,aAAa,GACQ;QACrB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAGvB,OAAO,EAAE,IAAI,EAAE,CAAC,gBAAgB,EAAE,iBAAkB,EAAE,GAAG,iBAAiB,CAAC,EAAE,CAAC;QAChF,CAAC;QAID,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,EAAE,IAAI,EAAE,CAAC,sBAAsB,EAAE,aAAa,EAAE,GAAG,iBAAiB,CAAC,EAAE,CAAC;QACjF,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,iBAAiB,CAAC,EAAE,CAAC;IAC1C,CAAC;IAQD,KAAK,CAAC,oBAAoB,CAAC,WAAmB;QAC5C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAChE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACzE,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE;oBACR;wBACE,MAAM,EAAE,oBAAoB;wBAC5B,KAAK,EAAE,MAAM;wBACb,OAAO;wBACP,IAAI,EAAE,4BAA4B;qBACnC;iBACF;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IASD,oBAAoB,CAAC,OAAe;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,EAAE,UAAU,CAAC;QACnC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAEvD,MAAM,OAAO,GAAqB,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5D,MAAM,GAAG,GAAG,YAAuC,CAAC;YAGpD,MAAM,QAAQ,GAAG,OAAO,GAAG,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC;YAC/E,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACjC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAOD,yBAAyB,CAAC,OAA4B;QAIpD,OAAO;YACL,GAAG,EAAE,OAAO,CAAC,KAAK,IAAI,UAAU;YAChC,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE;SACvC,CAAC;IACJ,CAAC;CACF,CAAA;AApHY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;qCAgBqC,4EAAmC;GAfxE,kBAAkB,CAoH9B"}

package/dist/server/modules/providers/adapters/capabilities/index.d.ts

@@ -1,2 +1,2 @@
-export type { AuthProbeCapability, AuthProbeResult, ConfigFileMcpCapability, McpCliCapability, AutoCompactCapability, AutoCompactProviderState, EffortCapability, HookCapability, HookEnvContext, ProjectProvisioningCapability, ProvisioningResult, ProvisioningWarningItem, ProjectMcpSettingsCapability, ProviderPluginCapability, TranscriptDiscoveryCapability, GlobalMcpConfigCapability, } from './type-guards';
+export type { AuthProbeCapability, AuthProbeResult, ConfigFileMcpCapability, McpCliCapability, AutoCompactCapability, AutoCompactProviderState, EffortCapability, HookCapability, HookEnvContext, ProjectProvisioningCapability, ProjectProvisioningContext, ProvisioningResult, ProvisioningWarningItem, ProjectMcpSettingsCapability, ProviderPluginCapability, TranscriptDiscoveryCapability, GlobalMcpConfigCapability, } from './type-guards';
 export { isAuthProbeCapable, isConfigFileMcpCapable, isMcpCli, isGlobalMcpConfigCapable, isAutoCompactCapable, isEffortCapable, isHookCapable, isProjectProvisioningCapable, isProjectMcpSettingsCapable, isTranscriptDiscoveryCapable, isProviderPluginCapable, } from './type-guards';