oc-codex-multi-auth 6.0.0 → 6.1.1

package/scripts/install-oc-codex-multi-auth.js

@@ -1,15 +1,15 @@
-#!/usr/bin/env node
-
-import { resolve } from "node:path";
-import { fileURLToPath } from "node:url";
-import { runInstaller } from "./install-oc-codex-multi-auth-core.js";
-
-export * from "./install-oc-codex-multi-auth-core.js";
-
-if (process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
-	runInstaller().catch((error) => {
-		const message = error instanceof Error ? error.message : String(error);
-		console.error(`Installer failed: ${message}`);
-		process.exit(1);
-	});
-}
+#!/usr/bin/env node
+
+import { resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { runInstaller } from "./install-oc-codex-multi-auth-core.js";
+
+export * from "./install-oc-codex-multi-auth-core.js";
+
+if (process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+	runInstaller().catch((error) => {
+		const message = error instanceof Error ? error.message : String(error);
+		console.error(`Installer failed: ${message}`);
+		process.exit(1);
+	});
+}

package/scripts/test-all-models.sh

@@ -149,7 +149,7 @@ update_config() {
     esac
 
     # Replace npm package with local dist for testing
-    sed -i.bak -E 's|"oc-codex-multi-auth(@[^"]*)?"|"file://'"${REPO_DIR}"'/dist"|' "${OPENCODE_JSON}"
+    sed -i.bak -E 's|"oc-codex-multi-auth(@[^"]*)?"|"file://'"${REPO_DIR}"'/dist"|' "${OPENCODE_JSON}"
 
     rm -f "${OPENCODE_JSON}.bak"
     echo "✓ Using local dist for plugin"

package/dist/lib/audit.d.ts

@@ -1,45 +0,0 @@
-export declare enum AuditAction {
-    ACCOUNT_ADD = "account.add",
-    ACCOUNT_REMOVE = "account.remove",
-    ACCOUNT_SWITCH = "account.switch",
-    ACCOUNT_REFRESH = "account.refresh",
-    ACCOUNT_EXPORT = "account.export",
-    ACCOUNT_IMPORT = "account.import",
-    AUTH_LOGIN = "auth.login",
-    AUTH_LOGOUT = "auth.logout",
-    AUTH_REFRESH = "auth.refresh",
-    AUTH_FAILURE = "auth.failure",
-    CONFIG_LOAD = "config.load",
-    CONFIG_CHANGE = "config.change",
-    REQUEST_START = "request.start",
-    REQUEST_SUCCESS = "request.success",
-    REQUEST_FAILURE = "request.failure",
-    CIRCUIT_OPEN = "circuit.open",
-    CIRCUIT_CLOSE = "circuit.close"
-}
-export declare enum AuditOutcome {
-    SUCCESS = "success",
-    FAILURE = "failure",
-    PARTIAL = "partial"
-}
-export interface AuditEntry {
-    timestamp: string;
-    correlationId: string | null;
-    action: AuditAction;
-    actor: string;
-    resource: string;
-    outcome: AuditOutcome;
-    metadata?: Record<string, unknown>;
-}
-export interface AuditConfig {
-    enabled: boolean;
-    logDir: string;
-    maxFileSizeBytes: number;
-    maxFiles: number;
-}
-export declare function configureAudit(config: Partial<AuditConfig>): void;
-export declare function getAuditConfig(): AuditConfig;
-export declare function auditLog(action: AuditAction, actor: string, resource: string, outcome: AuditOutcome, metadata?: Record<string, unknown>): void;
-export declare function getAuditLogPath(): string;
-export declare function listAuditLogFiles(): string[];
-//# sourceMappingURL=audit.d.ts.map

package/dist/lib/audit.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../lib/audit.ts"],"names":[],"mappings":"AA4BA,oBAAY,WAAW;IACtB,WAAW,gBAAgB;IAC3B,cAAc,mBAAmB;IACjC,cAAc,mBAAmB;IACjC,eAAe,oBAAoB;IACnC,cAAc,mBAAmB;IACjC,cAAc,mBAAmB;IACjC,UAAU,eAAe;IACzB,WAAW,gBAAgB;IAC3B,YAAY,iBAAiB;IAC7B,YAAY,iBAAiB;IAC7B,WAAW,gBAAgB;IAC3B,aAAa,kBAAkB;IAC/B,aAAa,kBAAkB;IAC/B,eAAe,oBAAoB;IACnC,eAAe,oBAAoB;IACnC,YAAY,iBAAiB;IAC7B,aAAa,kBAAkB;CAC/B;AAED,oBAAY,YAAY;IACvB,OAAO,YAAY;IACnB,OAAO,YAAY;IACnB,OAAO,YAAY;CACnB;AAED,MAAM,WAAW,UAAU;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,YAAY,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,WAAW;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;CACjB;AAWD,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAEjE;AAED,wBAAgB,cAAc,IAAI,WAAW,CAE5C;AA0DD,wBAAgB,QAAQ,CACvB,MAAM,EAAE,WAAW,EACnB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,YAAY,EACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,IAAI,CAyBN;AAED,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED,wBAAgB,iBAAiB,IAAI,MAAM,EAAE,CAO5C"}

package/dist/lib/audit.js

@@ -1,154 +0,0 @@
-import { mkdirSync, existsSync, statSync, renameSync, readdirSync, unlinkSync, appendFileSync } from "node:fs";
-// Simple in-memory queue to prevent EBUSY locks during highly concurrent writes
-const logQueue = [];
-let isFlushing = false;
-function flushLogQueue(logPath) {
-    if (isFlushing || logQueue.length === 0)
-        return;
-    isFlushing = true;
-    const itemsToFlush = logQueue.splice(0, logQueue.length);
-    const payload = itemsToFlush.join("");
-    try {
-        appendFileSync(logPath, payload);
-    }
-    catch (error) {
-        // If the file is locked by an external process (e.g. antivirus), 
-        // we unshift the items back to the front of the queue to try again later
-        logQueue.unshift(...itemsToFlush);
-        console.error("[AuditLog] Failed to flush queue, retaining items:", error);
-    }
-    finally {
-        isFlushing = false;
-    }
-}
-import { join } from "node:path";
-import { homedir } from "node:os";
-import { getCorrelationId, maskEmail } from "./logger.js";
-export var AuditAction;
-(function (AuditAction) {
-    AuditAction["ACCOUNT_ADD"] = "account.add";
-    AuditAction["ACCOUNT_REMOVE"] = "account.remove";
-    AuditAction["ACCOUNT_SWITCH"] = "account.switch";
-    AuditAction["ACCOUNT_REFRESH"] = "account.refresh";
-    AuditAction["ACCOUNT_EXPORT"] = "account.export";
-    AuditAction["ACCOUNT_IMPORT"] = "account.import";
-    AuditAction["AUTH_LOGIN"] = "auth.login";
-    AuditAction["AUTH_LOGOUT"] = "auth.logout";
-    AuditAction["AUTH_REFRESH"] = "auth.refresh";
-    AuditAction["AUTH_FAILURE"] = "auth.failure";
-    AuditAction["CONFIG_LOAD"] = "config.load";
-    AuditAction["CONFIG_CHANGE"] = "config.change";
-    AuditAction["REQUEST_START"] = "request.start";
-    AuditAction["REQUEST_SUCCESS"] = "request.success";
-    AuditAction["REQUEST_FAILURE"] = "request.failure";
-    AuditAction["CIRCUIT_OPEN"] = "circuit.open";
-    AuditAction["CIRCUIT_CLOSE"] = "circuit.close";
-})(AuditAction || (AuditAction = {}));
-export var AuditOutcome;
-(function (AuditOutcome) {
-    AuditOutcome["SUCCESS"] = "success";
-    AuditOutcome["FAILURE"] = "failure";
-    AuditOutcome["PARTIAL"] = "partial";
-})(AuditOutcome || (AuditOutcome = {}));
-const DEFAULT_CONFIG = {
-    enabled: true,
-    logDir: join(homedir(), ".opencode", "logs"),
-    maxFileSizeBytes: 10 * 1024 * 1024,
-    maxFiles: 5,
-};
-let auditConfig = { ...DEFAULT_CONFIG };
-export function configureAudit(config) {
-    auditConfig = { ...auditConfig, ...config };
-}
-export function getAuditConfig() {
-    return { ...auditConfig };
-}
-function ensureLogDir() {
-    if (!existsSync(auditConfig.logDir)) {
-        mkdirSync(auditConfig.logDir, { recursive: true, mode: 0o700 });
-    }
-}
-function getLogFilePath() {
-    return join(auditConfig.logDir, "audit.log");
-}
-function rotateLogsIfNeeded() {
-    const logPath = getLogFilePath();
-    if (!existsSync(logPath))
-        return;
-    const stats = statSync(logPath);
-    if (stats.size < auditConfig.maxFileSizeBytes)
-        return;
-    for (let i = auditConfig.maxFiles - 1; i >= 1; i--) {
-        const older = join(auditConfig.logDir, `audit.${i}.log`);
-        const newer = i === 1 ? logPath : join(auditConfig.logDir, `audit.${i - 1}.log`);
-        if (i === auditConfig.maxFiles - 1 && existsSync(older)) {
-            unlinkSync(older);
-        }
-        if (existsSync(newer)) {
-            renameSync(newer, older);
-        }
-    }
-}
-function sanitizeActor(actor) {
-    if (actor.includes("@")) {
-        return maskEmail(actor);
-    }
-    return actor;
-}
-function sanitizeMetadata(metadata) {
-    if (!metadata)
-        return undefined;
-    const sanitized = {};
-    for (const [key, value] of Object.entries(metadata)) {
-        const lowerKey = key.toLowerCase();
-        if (lowerKey.includes("token") || lowerKey.includes("secret") || lowerKey.includes("password")) {
-            sanitized[key] = "***REDACTED***";
-        }
-        else if (typeof value === "string" && value.includes("@")) {
-            sanitized[key] = maskEmail(value);
-        }
-        else if (typeof value === "object" && value !== null) {
-            sanitized[key] = sanitizeMetadata(value);
-        }
-        else {
-            sanitized[key] = value;
-        }
-    }
-    return sanitized;
-}
-export function auditLog(action, actor, resource, outcome, metadata) {
-    if (!auditConfig.enabled)
-        return;
-    try {
-        ensureLogDir();
-        rotateLogsIfNeeded();
-        const entry = {
-            timestamp: new Date().toISOString(),
-            correlationId: getCorrelationId(),
-            action,
-            actor: sanitizeActor(actor),
-            resource,
-            outcome,
-            metadata: sanitizeMetadata(metadata),
-        };
-        const logPath = getLogFilePath();
-        const line = JSON.stringify(entry) + "\n";
-        logQueue.push(line);
-        flushLogQueue(logPath);
-    }
-    catch {
-        // Audit logging should never break the application
-    }
-}
-export function getAuditLogPath() {
-    return getLogFilePath();
-}
-export function listAuditLogFiles() {
-    ensureLogDir();
-    const files = readdirSync(auditConfig.logDir);
-    return files
-        .filter((f) => f.startsWith("audit") && f.endsWith(".log"))
-        .map((f) => join(auditConfig.logDir, f))
-        .sort();
-}
-//# sourceMappingURL=audit.js.map

package/dist/lib/audit.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../lib/audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE/G,gFAAgF;AAChF,MAAM,QAAQ,GAAa,EAAE,CAAC;AAC9B,IAAI,UAAU,GAAG,KAAK,CAAC;AAEvB,SAAS,aAAa,CAAC,OAAe;IACrC,IAAI,UAAU,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAChD,UAAU,GAAG,IAAI,CAAC;IAElB,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEtC,IAAI,CAAC;QACJ,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,kEAAkE;QAClE,yEAAyE;QACzE,QAAQ,CAAC,OAAO,CAAC,GAAG,YAAY,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,oDAAoD,EAAE,KAAK,CAAC,CAAC;IAC5E,CAAC;YAAS,CAAC;QACV,UAAU,GAAG,KAAK,CAAC;IACpB,CAAC;AACF,CAAC;AACD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,CAAN,IAAY,WAkBX;AAlBD,WAAY,WAAW;IACtB,0CAA2B,CAAA;IAC3B,gDAAiC,CAAA;IACjC,gDAAiC,CAAA;IACjC,kDAAmC,CAAA;IACnC,gDAAiC,CAAA;IACjC,gDAAiC,CAAA;IACjC,wCAAyB,CAAA;IACzB,0CAA2B,CAAA;IAC3B,4CAA6B,CAAA;IAC7B,4CAA6B,CAAA;IAC7B,0CAA2B,CAAA;IAC3B,8CAA+B,CAAA;IAC/B,8CAA+B,CAAA;IAC/B,kDAAmC,CAAA;IACnC,kDAAmC,CAAA;IACnC,4CAA6B,CAAA;IAC7B,8CAA+B,CAAA;AAChC,CAAC,EAlBW,WAAW,KAAX,WAAW,QAkBtB;AAED,MAAM,CAAN,IAAY,YAIX;AAJD,WAAY,YAAY;IACvB,mCAAmB,CAAA;IACnB,mCAAmB,CAAA;IACnB,mCAAmB,CAAA;AACpB,CAAC,EAJW,YAAY,KAAZ,YAAY,QAIvB;AAmBD,MAAM,cAAc,GAAgB;IACnC,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC;IAC5C,gBAAgB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAClC,QAAQ,EAAE,CAAC;CACX,CAAC;AAEF,IAAI,WAAW,GAAgB,EAAE,GAAG,cAAc,EAAE,CAAC;AAErD,MAAM,UAAU,cAAc,CAAC,MAA4B;IAC1D,WAAW,GAAG,EAAE,GAAG,WAAW,EAAE,GAAG,MAAM,EAAE,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,cAAc;IAC7B,OAAO,EAAE,GAAG,WAAW,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,YAAY;IACpB,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,SAAS,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjE,CAAC;AACF,CAAC;AAED,SAAS,cAAc;IACtB,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,kBAAkB;IAC1B,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO;IAEjC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,IAAI,GAAG,WAAW,CAAC,gBAAgB;QAAE,OAAO;IAEtD,KAAK,IAAI,CAAC,GAAG,WAAW,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEjF,IAAI,CAAC,KAAK,WAAW,CAAC,QAAQ,GAAG,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACzD,UAAU,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;QACD,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACvB,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC1B,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IACnC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,QAA6C;IACtE,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAEhC,MAAM,SAAS,GAA4B,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAChG,SAAS,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAC;QACnC,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7D,SAAS,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACxD,SAAS,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAC,KAAgC,CAAC,CAAC;QACrE,CAAC;aAAM,CAAC;YACP,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACxB,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,QAAQ,CACvB,MAAmB,EACnB,KAAa,EACb,QAAgB,EAChB,OAAqB,EACrB,QAAkC;IAElC,IAAI,CAAC,WAAW,CAAC,OAAO;QAAE,OAAO;IAEjC,IAAI,CAAC;QACJ,YAAY,EAAE,CAAC;QACf,kBAAkB,EAAE,CAAC;QAErB,MAAM,KAAK,GAAe;YACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,aAAa,EAAE,gBAAgB,EAAE;YACjC,MAAM;YACN,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC;YAC3B,QAAQ;YACR,OAAO;YACP,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC;SACpC,CAAC;QAEF,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;QAE1C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,aAAa,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACR,mDAAmD;IACpD,CAAC;AACF,CAAC;AAED,MAAM,UAAU,eAAe;IAC9B,OAAO,cAAc,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,iBAAiB;IAChC,YAAY,EAAE,CAAC;IACf,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9C,OAAO,KAAK;SACV,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;SAC1D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;SACvC,IAAI,EAAE,CAAC;AACV,CAAC"}

package/dist/lib/auth-rate-limit.d.ts

@@ -1,20 +0,0 @@
-export interface AuthRateLimitConfig {
-    maxAttempts: number;
-    windowMs: number;
-}
-export declare function configureAuthRateLimit(newConfig: Partial<AuthRateLimitConfig>): void;
-export declare function getAuthRateLimitConfig(): AuthRateLimitConfig;
-export declare function canAttemptAuth(accountId: string): boolean;
-export declare function recordAuthAttempt(accountId: string): void;
-export declare function getAttemptsRemaining(accountId: string): number;
-export declare function getTimeUntilReset(accountId: string): number;
-export declare function resetAuthRateLimit(accountId: string): void;
-export declare function resetAllAuthRateLimits(): void;
-export declare class AuthRateLimitError extends Error {
-    readonly accountId: string;
-    readonly attemptsRemaining: number;
-    readonly resetAfterMs: number;
-    constructor(accountId: string, attemptsRemaining: number, resetAfterMs: number);
-}
-export declare function checkAuthRateLimit(accountId: string): void;
-//# sourceMappingURL=auth-rate-limit.d.ts.map

package/dist/lib/auth-rate-limit.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-rate-limit.d.ts","sourceRoot":"","sources":["../../lib/auth-rate-limit.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,mBAAmB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CACjB;AAcD,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,OAAO,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAEpF;AAED,wBAAgB,sBAAsB,IAAI,mBAAmB,CAE5D;AAWD,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAYzD;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAYzD;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAY9D;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAmB3D;AAED,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAG1D;AAED,wBAAgB,sBAAsB,IAAI,IAAI,CAE7C;AAED,qBAAa,kBAAmB,SAAQ,KAAK;aAE3B,SAAS,EAAE,MAAM;aACjB,iBAAiB,EAAE,MAAM;aACzB,YAAY,EAAE,MAAM;gBAFpB,SAAS,EAAE,MAAM,EACjB,iBAAiB,EAAE,MAAM,EACzB,YAAY,EAAE,MAAM;CAMrC;AAED,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAQ1D"}

package/dist/lib/auth-rate-limit.js

@@ -1,91 +0,0 @@
-const DEFAULT_CONFIG = {
-    maxAttempts: 5,
-    windowMs: 60_000,
-};
-const attemptsByAccount = new Map();
-let config = { ...DEFAULT_CONFIG };
-export function configureAuthRateLimit(newConfig) {
-    config = { ...config, ...newConfig };
-}
-export function getAuthRateLimitConfig() {
-    return { ...config };
-}
-function getAccountKey(accountId) {
-    return accountId.toLowerCase().trim();
-}
-function pruneOldAttempts(record, now) {
-    const cutoff = now - config.windowMs;
-    record.timestamps = record.timestamps.filter((ts) => ts > cutoff);
-}
-export function canAttemptAuth(accountId) {
-    const key = getAccountKey(accountId);
-    const record = attemptsByAccount.get(key);
-    if (!record) {
-        return true;
-    }
-    const now = Date.now();
-    pruneOldAttempts(record, now);
-    return record.timestamps.length < config.maxAttempts;
-}
-export function recordAuthAttempt(accountId) {
-    const key = getAccountKey(accountId);
-    const now = Date.now();
-    let record = attemptsByAccount.get(key);
-    if (!record) {
-        record = { timestamps: [] };
-        attemptsByAccount.set(key, record);
-    }
-    pruneOldAttempts(record, now);
-    record.timestamps.push(now);
-}
-export function getAttemptsRemaining(accountId) {
-    const key = getAccountKey(accountId);
-    const record = attemptsByAccount.get(key);
-    if (!record) {
-        return config.maxAttempts;
-    }
-    const now = Date.now();
-    pruneOldAttempts(record, now);
-    return Math.max(0, config.maxAttempts - record.timestamps.length);
-}
-export function getTimeUntilReset(accountId) {
-    const key = getAccountKey(accountId);
-    const record = attemptsByAccount.get(key);
-    if (!record || record.timestamps.length === 0) {
-        return 0;
-    }
-    const now = Date.now();
-    pruneOldAttempts(record, now);
-    if (record.timestamps.length === 0) {
-        return 0;
-    }
-    const oldestAttempt = Math.min(...record.timestamps);
-    const resetTime = oldestAttempt + config.windowMs;
-    return Math.max(0, resetTime - now);
-}
-export function resetAuthRateLimit(accountId) {
-    const key = getAccountKey(accountId);
-    attemptsByAccount.delete(key);
-}
-export function resetAllAuthRateLimits() {
-    attemptsByAccount.clear();
-}
-export class AuthRateLimitError extends Error {
-    accountId;
-    attemptsRemaining;
-    resetAfterMs;
-    constructor(accountId, attemptsRemaining, resetAfterMs) {
-        const resetSeconds = Math.ceil(resetAfterMs / 1000);
-        super(`Auth rate limit exceeded for account. Retry after ${resetSeconds}s`);
-        this.accountId = accountId;
-        this.attemptsRemaining = attemptsRemaining;
-        this.resetAfterMs = resetAfterMs;
-        this.name = "AuthRateLimitError";
-    }
-}
-export function checkAuthRateLimit(accountId) {
-    if (!canAttemptAuth(accountId)) {
-        throw new AuthRateLimitError(accountId, getAttemptsRemaining(accountId), getTimeUntilReset(accountId));
-    }
-}
-//# sourceMappingURL=auth-rate-limit.js.map

package/dist/lib/auth-rate-limit.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-rate-limit.js","sourceRoot":"","sources":["../../lib/auth-rate-limit.ts"],"names":[],"mappings":"AAKA,MAAM,cAAc,GAAwB;IAC3C,WAAW,EAAE,CAAC;IACd,QAAQ,EAAE,MAAM;CAChB,CAAC;AAMF,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAyB,CAAC;AAC3D,IAAI,MAAM,GAAwB,EAAE,GAAG,cAAc,EAAE,CAAC;AAExD,MAAM,UAAU,sBAAsB,CAAC,SAAuC;IAC7E,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,sBAAsB;IACrC,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB;IACvC,OAAO,SAAS,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAqB,EAAE,GAAW;IAC3D,MAAM,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC;IACrC,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC/C,MAAM,GAAG,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAE1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAE9B,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IAClD,MAAM,GAAG,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,IAAI,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QAC5B,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACrD,MAAM,GAAG,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAE1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,MAAM,CAAC,WAAW,CAAC;IAC3B,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAE9B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IAClD,MAAM,GAAG,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAE1C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/C,OAAO,CAAC,CAAC;IACV,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAE9B,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,CAAC;IACV,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC;IAElD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,GAAG,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IACnD,MAAM,GAAG,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACrC,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,sBAAsB;IACrC,iBAAiB,CAAC,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAE3B;IACA;IACA;IAHjB,YACiB,SAAiB,EACjB,iBAAyB,EACzB,YAAoB;QAEpC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;QACpD,KAAK,CAAC,qDAAqD,YAAY,GAAG,CAAC,CAAC;QAL5D,cAAS,GAAT,SAAS,CAAQ;QACjB,sBAAiB,GAAjB,iBAAiB,CAAQ;QACzB,iBAAY,GAAZ,YAAY,CAAQ;QAIpC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IAClC,CAAC;CACD;AAED,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IACnD,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,kBAAkB,CAC3B,SAAS,EACT,oBAAoB,CAAC,SAAS,CAAC,EAC/B,iBAAiB,CAAC,SAAS,CAAC,CAC5B,CAAC;IACH,CAAC;AACF,CAAC"}

package/dist/lib/runtime-contracts.d.ts

@@ -1,16 +0,0 @@
-/**
- * Shared runtime constants and sentinel helpers only. This module is pure: it
- * does not perform I/O, persistence, or logging, so centralizing these values
- * does not introduce new Windows lock or token-redaction surfaces.
- */
-export declare const OAUTH_CALLBACK_LOOPBACK_HOST = "127.0.0.1";
-export declare const OAUTH_CALLBACK_PORT = 1455;
-export declare const OAUTH_CALLBACK_PATH = "/auth/callback";
-export declare const OAUTH_CALLBACK_BIND_URL = "http://127.0.0.1:1455";
-export declare const DEACTIVATED_WORKSPACE_ERROR_CODE = "deactivated_workspace";
-export declare const USAGE_REQUEST_TIMEOUT_MESSAGE = "Usage request timed out";
-export declare function createDeactivatedWorkspaceError(): Error;
-export declare function isDeactivatedWorkspaceErrorMessage(message: string | undefined): boolean;
-export declare function createUsageRequestTimeoutError(): Error;
-export declare function isUsageRequestTimeoutMessage(message: string | undefined): boolean;
-//# sourceMappingURL=runtime-contracts.d.ts.map

package/dist/lib/runtime-contracts.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime-contracts.d.ts","sourceRoot":"","sources":["../../lib/runtime-contracts.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,cAAc,CAAC;AACxD,eAAO,MAAM,mBAAmB,OAAO,CAAC;AACxC,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AACpD,eAAO,MAAM,uBAAuB,0BAAkE,CAAC;AAEvG,eAAO,MAAM,gCAAgC,0BAA0B,CAAC;AACxE,eAAO,MAAM,6BAA6B,4BAA4B,CAAC;AAEvE,wBAAgB,+BAA+B,IAAI,KAAK,CAEvD;AAED,wBAAgB,kCAAkC,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAEvF;AAED,wBAAgB,8BAA8B,IAAI,KAAK,CAEtD;AAED,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAEjF"}

package/dist/lib/runtime-contracts.js

@@ -1,24 +0,0 @@
-/**
- * Shared runtime constants and sentinel helpers only. This module is pure: it
- * does not perform I/O, persistence, or logging, so centralizing these values
- * does not introduce new Windows lock or token-redaction surfaces.
- */
-export const OAUTH_CALLBACK_LOOPBACK_HOST = "127.0.0.1";
-export const OAUTH_CALLBACK_PORT = 1455;
-export const OAUTH_CALLBACK_PATH = "/auth/callback";
-export const OAUTH_CALLBACK_BIND_URL = `http://${OAUTH_CALLBACK_LOOPBACK_HOST}:${OAUTH_CALLBACK_PORT}`;
-export const DEACTIVATED_WORKSPACE_ERROR_CODE = "deactivated_workspace";
-export const USAGE_REQUEST_TIMEOUT_MESSAGE = "Usage request timed out";
-export function createDeactivatedWorkspaceError() {
-    return new Error(DEACTIVATED_WORKSPACE_ERROR_CODE);
-}
-export function isDeactivatedWorkspaceErrorMessage(message) {
-    return message === DEACTIVATED_WORKSPACE_ERROR_CODE;
-}
-export function createUsageRequestTimeoutError() {
-    return new Error(USAGE_REQUEST_TIMEOUT_MESSAGE);
-}
-export function isUsageRequestTimeoutMessage(message) {
-    return message === USAGE_REQUEST_TIMEOUT_MESSAGE;
-}
-//# sourceMappingURL=runtime-contracts.js.map

package/dist/lib/runtime-contracts.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime-contracts.js","sourceRoot":"","sources":["../../lib/runtime-contracts.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,WAAW,CAAC;AACxD,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACxC,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AACpD,MAAM,CAAC,MAAM,uBAAuB,GAAG,UAAU,4BAA4B,IAAI,mBAAmB,EAAE,CAAC;AAEvG,MAAM,CAAC,MAAM,gCAAgC,GAAG,uBAAuB,CAAC;AACxE,MAAM,CAAC,MAAM,6BAA6B,GAAG,yBAAyB,CAAC;AAEvE,MAAM,UAAU,+BAA+B;IAC9C,OAAO,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,OAA2B;IAC7E,OAAO,OAAO,KAAK,gCAAgC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,8BAA8B;IAC7C,OAAO,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,OAA2B;IACvE,OAAO,OAAO,KAAK,6BAA6B,CAAC;AAClD,CAAC"}