gitlab-ai-provider 6.9.1 → 6.9.3

package/dist/index.mjs

@@ -648,6 +648,9 @@ var GitLabDirectAccessClient = class {
     if (this.config.featureFlags && Object.keys(this.config.featureFlags).length > 0) {
       requestBody.feature_flags = this.config.featureFlags;
     }
+    if (this.config.ensureApiKey) {
+      await this.config.ensureApiKey();
+    }
     try {
       const response = await this.fetchFn(url, {
         method: "POST",
@@ -743,6 +746,7 @@ var GitLabAnthropicLanguageModel = class {
     this.directAccessClient = new GitLabDirectAccessClient({
       instanceUrl: config.instanceUrl,
       getHeaders: config.getHeaders,
+      ensureApiKey: config.ensureApiKey,
       refreshApiKey: config.refreshApiKey,
       fetch: config.fetch,
       featureFlags: config.featureFlags,
@@ -1476,6 +1480,7 @@ var GitLabOpenAILanguageModel = class {
     this.directAccessClient = new GitLabDirectAccessClient({
       instanceUrl: config.instanceUrl,
       getHeaders: config.getHeaders,
+      ensureApiKey: config.ensureApiKey,
       refreshApiKey: config.refreshApiKey,
       fetch: config.fetch,
       featureFlags: config.featureFlags,
@@ -2417,7 +2422,7 @@ import { AsyncResource } from "async_hooks";
 import WebSocket from "isomorphic-ws";
 
 // src/version.ts
-var VERSION = true ? "6.9.0" : "0.0.0-dev";
+var VERSION = true ? "6.9.2" : "0.0.0-dev";
 
 // src/gitlab-workflow-client.ts
 var WS_CONNECT_TIMEOUT_MS = 3e4;
@@ -4754,9 +4759,10 @@ var TOKEN_EXPIRY_SKEW_MS = 5 * 60 * 1e3;
 var OAUTH_SCOPES = ["api"];
 
 // src/gitlab-oauth-manager.ts
+var globalInFlightRefreshes = /* @__PURE__ */ new Map();
 var GitLabOAuthManager = class {
   fetch;
-  inFlightRefreshes = /* @__PURE__ */ new Map();
+  inFlightRefreshes = globalInFlightRefreshes;
   constructor(fetchImpl = fetch) {
     this.fetch = fetchImpl;
   }
@@ -4969,12 +4975,15 @@ async function loadOpenCodeAuth(instanceUrl) {
     }
     const authData = JSON.parse(fs3.readFileSync(authPath, "utf-8"));
     const normalizedUrl = instanceUrl.replace(/\/$/, "");
-    if (authData.gitlab?.type === "oauth") {
-      const gitlabAuth = authData.gitlab;
-      const normalizedEnterpriseUrl = typeof gitlabAuth.enterpriseUrl === "string" ? gitlabAuth.enterpriseUrl.replace(/\/$/, "") : gitlabAuth.enterpriseUrl;
-      if (normalizedEnterpriseUrl === normalizedUrl) {
+    const gitlabAuth = authData.gitlab;
+    if (gitlabAuth?.type === "oauth") {
+      const normalizedEnterpriseUrl = typeof gitlabAuth.enterpriseUrl === "string" ? gitlabAuth.enterpriseUrl.replace(/\/$/, "") : void 0;
+      const matchesInstance = normalizedEnterpriseUrl === normalizedUrl || normalizedEnterpriseUrl === void 0 && normalizedUrl === GITLAB_COM_URL;
+      if (matchesInstance) {
         return gitlabAuth;
       }
+    } else if (gitlabAuth?.type === "api" && typeof gitlabAuth.key === "string") {
+      return gitlabAuth;
     }
     const auth = authData[normalizedUrl] || authData[`${normalizedUrl}/`];
     return auth;
@@ -4982,32 +4991,52 @@ async function loadOpenCodeAuth(instanceUrl) {
     return void 0;
   }
 }
+var inFlightOAuthRefreshes = /* @__PURE__ */ new Map();
+async function refreshOAuthToken(auth, instanceUrl, clientId) {
+  const existing = inFlightOAuthRefreshes.get(instanceUrl);
+  if (existing) {
+    return existing;
+  }
+  const refreshPromise = (async () => {
+    const oauthManager = new GitLabOAuthManager();
+    const refreshed = await oauthManager.exchangeRefreshToken({
+      instanceUrl,
+      refreshToken: auth.refresh,
+      clientId
+    });
+    const authPath = getOpenCodeAuthPath();
+    const authData = JSON.parse(fs3.readFileSync(authPath, "utf-8"));
+    authData.gitlab = {
+      type: "oauth",
+      refresh: refreshed.refreshToken,
+      access: refreshed.accessToken,
+      expires: refreshed.expiresAt,
+      enterpriseUrl: instanceUrl
+      // Use enterpriseUrl to match auth plugin format
+    };
+    fs3.writeFileSync(authPath, JSON.stringify(authData, null, 2), { mode: 384 });
+    return refreshed.accessToken;
+  })();
+  inFlightOAuthRefreshes.set(instanceUrl, refreshPromise);
+  try {
+    return await refreshPromise;
+  } finally {
+    inFlightOAuthRefreshes.delete(instanceUrl);
+  }
+}
 async function loadApiKey(options, instanceUrl, clientId) {
   if (options.apiKey) {
     return options.apiKey;
   }
   const auth = await loadOpenCodeAuth(instanceUrl);
+  if (auth?.type === "api") {
+    return auth.key;
+  }
   if (auth?.type === "oauth") {
     const oauthManager = new GitLabOAuthManager();
     if (oauthManager.needsRefresh(auth.expires)) {
       try {
-        const refreshed = await oauthManager.exchangeRefreshToken({
-          instanceUrl,
-          refreshToken: auth.refresh,
-          clientId
-        });
-        const authPath = getOpenCodeAuthPath();
-        const authData = JSON.parse(fs3.readFileSync(authPath, "utf-8"));
-        authData.gitlab = {
-          type: "oauth",
-          refresh: refreshed.refreshToken,
-          access: refreshed.accessToken,
-          expires: refreshed.expiresAt,
-          enterpriseUrl: instanceUrl
-          // Use enterpriseUrl to match auth plugin format
-        };
-        fs3.writeFileSync(authPath, JSON.stringify(authData, null, 2), { mode: 384 });
-        return refreshed.accessToken;
+        return await refreshOAuthToken(auth, instanceUrl, clientId);
       } catch (error) {
         const refreshErrorMsg = error instanceof Error ? error.message : String(error);
         const envApiKey = process.env[options.environmentVariableName];
@@ -5106,6 +5135,12 @@ function createGitLab(options = {}) {
       `ai-sdk-gitlab/${VERSION}`
     );
   };
+  const ensureApiKey = async () => {
+    try {
+      await getApiKey();
+    } catch {
+    }
+  };
   getApiKey().catch(() => {
   });
   const createAgenticChatModel = (modelId, agenticOptions) => {
@@ -5140,6 +5175,7 @@ function createGitLab(options = {}) {
       provider: `${providerName}.agentic`,
       instanceUrl,
       getHeaders,
+      ensureApiKey,
       refreshApiKey,
       fetch: options.fetch,
       maxTokens: agenticOptions?.maxTokens,