omnara 0.1.4 → 0.1.5

package/dist/orchestrator/agent-orchestrator.d.ts

@@ -1,7 +1,7 @@
 import { type AgentClient } from './ai-client.js';
 import { Session } from './session.js';
 import { WorkerManager } from './worker-manager.js';
-import type { InboundMessage, OutboundMessage } from './types.js';
+import type { InboundMessage, OutboundMessage } from './orchestrator-types.js';
 interface AgentOrchestratorDependencies {
     createMainClient?: () => AgentClient;
     createWorkerClient?: () => AgentClient;
@@ -23,11 +23,14 @@ export declare class AgentOrchestrator {
     private readonly sessions;
     private readonly clients;
     private readonly toolUseMap;
+    private mainCodingSessionId;
+    readonly voiceSessionIds: Set<string>;
     private started;
     constructor(dependencies?: AgentOrchestratorDependencies);
     ensureSessionExists(sessionId: string): Session;
     getSession(sessionId: string): Session | undefined;
     getWorkerManager(): WorkerManager;
+    setMainCodingSessionId(sessionId: string): void;
     addClient(adapter: AgentOrchestratorClientAdapter): AgentOrchestratorConnection;
     start(): Promise<void>;
     stop(): Promise<void>;

package/dist/orchestrator/orchestrator-prompt.d.ts

@@ -1,2 +1,8 @@
-export declare const ORCHESTRATOR_SYSTEM_PROMPT: string;
-export default ORCHESTRATOR_SYSTEM_PROMPT;
+/**
+ * System prompt for the main orchestrator agent.
+ *
+ * The orchestrator's role is to coordinate and delegate work, not to execute tasks directly.
+ * It should ALWAYS use workers to handle all implementation work.
+ */
+import ORCHESTRATOR_SYSTEM_PROMPT from './orchestrator-prompt.md';
+export { ORCHESTRATOR_SYSTEM_PROMPT };

package/dist/orchestrator/{types.d.ts → orchestrator-types.d.ts}

@@ -1,16 +1,30 @@
+/**
+ * Internal orchestrator message types for communication between components
+ * These are NOT wire protocol types - they're internal to the orchestrator
+ *
+ * For wire protocol types (sent over WebSocket), use:
+ * - ControlMessage from @omnara/shared-js/schemas
+ * - MessageEnvelope from @omnara/shared-js/schemas
+ */
 import { z } from 'zod';
 export declare const inboundMessageSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
     type: z.ZodLiteral<"chat">;
     sessionId: z.ZodOptional<z.ZodString>;
     text: z.ZodString;
+    senderId: z.ZodOptional<z.ZodString>;
+    senderKind: z.ZodOptional<z.ZodEnum<["user", "agent_session"]>>;
 }, "strip", z.ZodTypeAny, {
     type: "chat";
     text: string;
     sessionId?: string | undefined;
+    senderId?: string | undefined;
+    senderKind?: "user" | "agent_session" | undefined;
 }, {
     type: "chat";
     text: string;
     sessionId?: string | undefined;
+    senderId?: string | undefined;
+    senderKind?: "user" | "agent_session" | undefined;
 }>, z.ZodObject<{
     type: z.ZodLiteral<"session_init">;
     sessionId: z.ZodString;

package/dist/orchestrator/session.d.ts

@@ -1,5 +1,5 @@
 import type { AgentClient } from './ai-client.js';
-import type { SessionSubscriber } from './types.js';
+import type { SessionSubscriber } from './orchestrator-types.js';
 type StreamEvent = {
     type: string;
     [key: string]: unknown;

package/dist/orchestrator/tools/worker-tools.d.ts

@@ -2,6 +2,7 @@ import type { WorkerManager } from '../worker-manager.js';
 interface WorkerMcpContext {
     resolveSessionIdBySdk: (sdkSessionId?: string) => string | undefined;
     resolveSessionIdByToolUse: (toolUseId: string) => string | undefined;
+    getMainCodingSessionId: () => string | null;
 }
 export declare function createWorkerMcpServer(workerManager: WorkerManager, context: WorkerMcpContext): import("@anthropic-ai/claude-agent-sdk").McpSdkServerConfigWithInstance;
 export {};

package/dist/orchestrator/utils/session-logger.d.ts

@@ -1,4 +1,4 @@
-import type { OutboundMessage } from '../types.js';
+import type { OutboundMessage } from '../orchestrator-types.js';
 export type SessionLogger = {
     logInbound: (payload: unknown) => void;
     logOutbound: (message: OutboundMessage) => void;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omnara",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "type": "module",
   "description": "Command-line interface for Omnara.",
   "main": "dist/cli.js",
@@ -9,11 +9,13 @@
     "omnara": "./bin/omnara.js"
   },
   "scripts": {
-    "build": "tsc --project tsconfig.json && npm run copy-assets",
-    "copy-assets": "cp -r src/orchestrator/*.md dist/orchestrator/",
+    "build": "npm run build:types && node build.mjs && npm run copy-assets",
+    "build:types": "tsc --emitDeclarationOnly --project tsconfig.json",
+    "copy-assets": "mkdir -p dist/orchestrator && cp -r src/orchestrator/*.md dist/orchestrator/",
+    "preinstall": "node scripts/preinstall.js",
     "dev": "tsx watch src/cli.ts",
     "test": "tsx --test \"tests/**/*.ts\" \"tests/*.ts\"",
-    "typecheck": "tsc -p tsconfig.test.json",
+    "typecheck": "tsc --noEmit",
     "lint": "eslint --format unix \"src/**/*.ts\" \"tests/**/*.ts\"",
     "lint:fix": "eslint --format unix --fix \"src/**/*.ts\" \"tests/**/*.ts\"",
     "format": "prettier --check \"src/**/*.ts\" \"tests/**/*.ts\"",
@@ -31,23 +33,27 @@
   "files": [
     "dist",
     "bin",
+    "scripts",
     "README.md"
   ],
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.1.23",
     "@anthropic-ai/sdk": "^0.67.0",
     "@modelcontextprotocol/sdk": "^1.20.1",
-    "@omnara/shared-js": "file:../shared-js",
     "@supabase/supabase-js": "^2.76.1",
+    "ajv": "^8.17.1",
+    "ajv-formats": "^2.1.1",
     "commander": "^11.1.0",
     "ws": "^8.18.3",
     "zod": "^3.25.76"
   },
   "devDependencies": {
+    "@omnara/shared-js": "file:../shared-js",
     "@types/node": "^20.11.30",
     "@types/ws": "^8.18.1",
     "@typescript-eslint/eslint-plugin": "^8.46.2",
     "@typescript-eslint/parser": "^8.46.2",
+    "esbuild": "^0.25.12",
     "eslint": "^9.38.0",
     "eslint-formatter-unix": "^8.40.0",
     "json-schema-to-typescript": "^14.0.1",

package/scripts/preinstall.js

@@ -0,0 +1,141 @@
+#!/usr/bin/env node
+
+import { execSync } from 'child_process';
+
+/**
+ * Preinstall script to uninstall old omnara packages (pip and brew).
+ * This ensures a clean migration to the npm package.
+ */
+
+function log(message) {
+  console.log(`[omnara preinstall] ${message}`);
+}
+
+function checkPipCommand() {
+  const pipCommands = ['pip3', 'pip'];
+  
+  for (const cmd of pipCommands) {
+    try {
+      execSync(`${cmd} --version`, { stdio: 'ignore' });
+      return cmd;
+    } catch {
+      // Command not found, try next
+    }
+  }
+  
+  return null;
+}
+
+function isPipPackageInstalled(pipCommand) {
+  try {
+    execSync(`${pipCommand} show omnara`, { stdio: 'ignore' });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+function uninstallPipPackage(pipCommand) {
+  try {
+    log(`Detected old omnara pip package in ${pipCommand}. Uninstalling...`);
+    
+    // Try without sudo first
+    try {
+      execSync(`${pipCommand} uninstall -y omnara`, { stdio: 'inherit' });
+      log(`Successfully uninstalled old omnara pip package from ${pipCommand}.`);
+      return true;
+    } catch (firstError) {
+      // If that fails, try with sudo
+      log('Permission denied. Attempting with sudo...');
+      try {
+        execSync(`sudo ${pipCommand} uninstall -y omnara`, { stdio: 'inherit' });
+        log(`Successfully uninstalled old omnara pip package from ${pipCommand} (with sudo).`);
+        return true;
+      } catch (sudoError) {
+        throw sudoError;
+      }
+    }
+  } catch (error) {
+    log(`Warning: Failed to uninstall pip package from ${pipCommand}: ${error.message}`);
+    log('You may need to manually run: sudo ' + pipCommand + ' uninstall omnara');
+    return false;
+  }
+}
+
+function checkBrewCommand() {
+  try {
+    execSync('brew --version', { stdio: 'ignore' });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+function isBrewPackageInstalled() {
+  try {
+    execSync('brew list omnara', { stdio: 'ignore' });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+function uninstallBrewPackage() {
+  try {
+    log('Detected old omnara brew package. Uninstalling...');
+    execSync('brew uninstall omnara', { stdio: 'inherit' });
+    log('Successfully uninstalled old omnara brew package.');
+    return true;
+  } catch (error) {
+    log(`Warning: Failed to uninstall brew package: ${error.message}`);
+    return false;
+  }
+}
+
+function main() {
+  log('Checking for old omnara installations...');
+  
+  // Check for pip packages - check BOTH pip and pip3
+  log('Checking for pip packages...');
+  const pipCommands = ['pip3', 'pip'];
+  let foundAnyPip = false;
+  
+  for (const pipCmd of pipCommands) {
+    try {
+      execSync(`${pipCmd} --version`, { stdio: 'ignore' });
+      foundAnyPip = true;
+      log(`Found ${pipCmd} command`);
+      
+      if (isPipPackageInstalled(pipCmd)) {
+        uninstallPipPackage(pipCmd);
+      } else {
+        log(`No old omnara package found in ${pipCmd}.`);
+      }
+    } catch {
+      // Command not found, skip
+    }
+  }
+  
+  if (!foundAnyPip) {
+    log('pip/pip3 not found. Skipping pip package check.');
+  }
+  
+  // Check for brew package
+  log('Checking for brew package...');
+  if (!checkBrewCommand()) {
+    log('brew not found. Skipping brew package check.');
+  } else {
+    log('Found brew command');
+    
+    if (isBrewPackageInstalled()) {
+      uninstallBrewPackage();
+    } else {
+      log('No old brew package found.');
+    }
+  }
+  
+  log('Package check complete. Continuing with installation.');
+}
+
+main();
+

package/scripts/test-preinstall.js

@@ -0,0 +1,125 @@
+#!/usr/bin/env node
+
+/**
+ * Test script for preinstall.js
+ * This simulates various scenarios to ensure the preinstall script works correctly.
+ */
+
+import { execSync } from 'child_process';
+import { readFileSync } from 'fs';
+
+console.log('='.repeat(60));
+console.log('Testing preinstall.js');
+console.log('='.repeat(60));
+
+// Test 0: Verify package.json configuration
+console.log('\n[TEST 0] Verifying package.json configuration...');
+try {
+  const packageJson = JSON.parse(readFileSync('package.json', 'utf8'));
+  
+  // Check if preinstall script exists
+  if (packageJson.scripts?.preinstall) {
+    console.log('✅ preinstall script found in package.json');
+    console.log(`   Command: ${packageJson.scripts.preinstall}`);
+  } else {
+    console.error('❌ preinstall script NOT found in package.json');
+    process.exit(1);
+  }
+  
+  // Check if scripts directory is included in files
+  if (packageJson.files?.includes('scripts')) {
+    console.log('✅ scripts directory included in package files');
+  } else {
+    console.error('❌ scripts directory NOT included in package files');
+    process.exit(1);
+  }
+} catch (error) {
+  console.error('❌ Failed to read package.json:', error.message);
+  process.exit(1);
+}
+
+// Test 1: Check if the script runs without errors
+console.log('\n[TEST 1] Running preinstall.js...');
+try {
+  execSync('node scripts/preinstall.js', { 
+    stdio: 'inherit',
+    cwd: process.cwd()
+  });
+  console.log('✅ Script executed successfully');
+} catch (error) {
+  console.error('❌ Script failed:', error.message);
+  process.exit(1);
+}
+
+// Test 2: Check if pip/pip3 is available and check BOTH
+console.log('\n[TEST 2] Checking pip availability...');
+const pipCommands = ['pip3', 'pip'];
+let pipFound = false;
+for (const cmd of pipCommands) {
+  try {
+    execSync(`${cmd} --version`, { stdio: 'ignore' });
+    console.log(`✅ Found ${cmd}`);
+    pipFound = true;
+    
+    // Check if omnara pip package is installed
+    try {
+      const result = execSync(`${cmd} show omnara`, { encoding: 'utf8', stdio: 'pipe' });
+      console.log(`⚠️  Warning: omnara pip package IS installed in ${cmd}`);
+      console.log('   Package info:', result.split('\n')[0]);
+    } catch {
+      console.log(`✅ No omnara pip package found in ${cmd} (good)`);
+    }
+  } catch {
+    // Command not found
+  }
+}
+if (!pipFound) {
+  console.log('ℹ️  No pip/pip3 found on system');
+}
+
+// Test 3: Check if brew is available
+console.log('\n[TEST 3] Checking brew availability...');
+try {
+  execSync('brew --version', { stdio: 'ignore' });
+  console.log('✅ Found brew');
+  
+  // Check if omnara brew package is installed
+  try {
+    execSync('brew list omnara', { stdio: 'ignore' });
+    console.log('⚠️  Warning: omnara brew package IS installed');
+  } catch {
+    console.log('✅ No omnara brew package found (good)');
+  }
+} catch {
+  console.log('ℹ️  No brew found on system');
+}
+
+// Test 4: Verify script file permissions
+console.log('\n[TEST 4] Checking script permissions...');
+try {
+  const fs = await import('fs');
+  const stats = fs.statSync('scripts/preinstall.js');
+  const mode = (stats.mode & parseInt('777', 8)).toString(8);
+  console.log(`✅ Script permissions: ${mode}`);
+} catch (error) {
+  console.error('❌ Could not check permissions:', error.message);
+}
+
+console.log('\n' + '='.repeat(60));
+console.log('Test Summary:');
+console.log('='.repeat(60));
+console.log('✅ All tests passed! The preinstall script is ready to use.');
+console.log('\nThe script will automatically run when users install with:');
+console.log('  npm install -g omnara');
+console.log('\nWhat the preinstall script does:');
+console.log('  1. Checks both pip3 AND pip for old omnara packages');
+console.log('  2. Checks brew for old omnara packages');
+console.log('  3. Uninstalls any found packages (using sudo if needed)');
+console.log('  4. Continues with npm installation');
+console.log('\nTo test the full installation flow:');
+console.log('  1. Build: npm run build');
+console.log('  2. Pack: npm pack');
+console.log('  3. Install: npm install -g omnara-0.1.4.tgz');
+console.log('  4. Verify: omnara --version');
+console.log('='.repeat(60));
+

package/dist/auth/auth-provider.js

@@ -1,56 +0,0 @@
-import { CredentialsStore } from './credentials-store.js';
-import { ensureAuthContext } from './credential-manager.js';
-import { performVerificationLogin } from './login-flow.js';
-import { normalizeBaseUrl } from '../http/api-client.js';
-export class AuthProvider {
-    options;
-    cached = null;
-    backendUrl;
-    constructor(options) {
-        this.options = options;
-        this.backendUrl = normalizeBaseUrl(options.backendUrl);
-    }
-    async getAuthContext() {
-        const auth = await this.loadAuthContext();
-        this.cached = auth;
-        return auth;
-    }
-    async getAccessToken() {
-        const auth = await this.getAuthContext();
-        return auth.accessToken;
-    }
-    async loadAuthContext() {
-        try {
-            return await ensureAuthContext(this.options.store, this.backendUrl);
-        }
-        catch (error) {
-            if (!shouldAttemptLogin(error)) {
-                throw error;
-            }
-            this.options.logger?.log('Opening browser to authenticate…');
-            await performVerificationLogin({
-                backendUrlOption: this.backendUrl,
-                frontendUrlOption: this.options.frontendUrl,
-                store: this.options.store,
-            });
-            return await ensureAuthContext(this.options.store, this.backendUrl);
-        }
-    }
-}
-function shouldAttemptLogin(error) {
-    if (!(error instanceof Error)) {
-        return false;
-    }
-    const message = error.message.toLowerCase();
-    return (message.includes('no credentials found') ||
-        message.includes('run `omnara auth login` first') ||
-        message.includes('refresh token expired') ||
-        message.includes('refresh token unavailable') ||
-        message.includes('access token expired'));
-}
-export async function createAuthProvider(options) {
-    const provider = new AuthProvider(options);
-    await provider.getAuthContext();
-    return provider;
-}
-//# sourceMappingURL=auth-provider.js.map

package/dist/auth/auth-provider.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-provider.js","sourceRoot":"","sources":["../../src/auth/auth-provider.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAoB,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AASzD,MAAM,OAAO,YAAY;IAIM;IAHrB,MAAM,GAAuB,IAAI,CAAC;IACzB,UAAU,CAAS;IAEpC,YAA6B,OAA4B;QAA5B,YAAO,GAAP,OAAO,CAAqB;QACvD,IAAI,CAAC,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,eAAe;QAC3B,IAAI,CAAC;YACH,OAAO,MAAM,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/B,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,kCAAkC,CAAC,CAAC;YAC7D,MAAM,wBAAwB,CAAC;gBAC7B,gBAAgB,EAAE,IAAI,CAAC,UAAU;gBACjC,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;gBAC3C,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;aAC1B,CAAC,CAAC;YACH,OAAO,MAAM,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;CACF;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;IAC5C,OAAO,CACL,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QACxC,OAAO,CAAC,QAAQ,CAAC,+BAA+B,CAAC;QACjD,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QACzC,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAC7C,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CACzC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAA4B;IACnE,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,QAAQ,CAAC,cAAc,EAAE,CAAC;IAChC,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/auth/cli-auth-service.js

@@ -1,44 +0,0 @@
-import { ApiClient } from '../http/api-client.js';
-export async function createCliAuthSession(client, options = {}) {
-    const body = {};
-    if (options.frontendUrl) {
-        body.frontend_url = options.frontendUrl;
-    }
-    if (options.loopbackRedirectUri) {
-        body.loopback_redirect_uri = options.loopbackRedirectUri;
-    }
-    if (options.loopbackState) {
-        body.loopback_state = options.loopbackState;
-    }
-    if (options.pkceChallenge) {
-        body.pkce_challenge = options.pkceChallenge;
-        body.pkce_challenge_method = options.pkceChallengeMethod ?? 'S256';
-    }
-    const wire = await client.postJson('/api/v1/cli-auth/session', body);
-    return {
-        sessionId: wire.session_id,
-        verificationUri: wire.verification_uri,
-        verificationUriComplete: wire.verification_uri_complete,
-        expiresIn: wire.expires_in,
-        pollInterval: wire.poll_interval,
-    };
-}
-export async function exchangeCliCode(client, sessionId, code, options = {}) {
-    const requestBody = {
-        session_id: sessionId,
-        code,
-    };
-    if (options.codeVerifier) {
-        requestBody.code_verifier = options.codeVerifier;
-    }
-    const wire = await client.postJson('/api/v1/cli-auth/exchange', requestBody);
-    return {
-        accessToken: wire.access_token,
-        accessTokenExpiresIn: wire.access_token_expires_in,
-        refreshToken: wire.refresh_token,
-        refreshTokenExpiresIn: wire.refresh_token_expires_in,
-        relayWsPath: wire.relay_ws_path,
-        relayHeartbeatIntervalSec: wire.relay_heartbeat_interval_sec,
-    };
-}
-//# sourceMappingURL=cli-auth-service.js.map

package/dist/auth/cli-auth-service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli-auth-service.js","sourceRoot":"","sources":["../../src/auth/cli-auth-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AA0DlD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAiB,EACjB,UAAuC,EAAE;IAEzC,MAAM,IAAI,GAA6B,EAAE,CAAC;IAC1C,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAChC,IAAI,CAAC,qBAAqB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;IAC9C,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;QAC5C,IAAI,CAAC,qBAAqB,GAAG,OAAO,CAAC,mBAAmB,IAAI,MAAM,CAAC;IACrE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,CAChC,0BAA0B,EAC1B,IAAI,CACL,CAAC;IACF,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,UAAU;QAC1B,eAAe,EAAE,IAAI,CAAC,gBAAgB;QACtC,uBAAuB,EAAE,IAAI,CAAC,yBAAyB;QACvD,SAAS,EAAE,IAAI,CAAC,UAAU;QAC1B,YAAY,EAAE,IAAI,CAAC,aAAa;KACjC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAiB,EACjB,SAAiB,EACjB,IAAY,EACZ,UAAqC,EAAE;IAEvC,MAAM,WAAW,GAAwB;QACvC,UAAU,EAAE,SAAS;QACrB,IAAI;KACL,CAAC;IACF,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,WAAW,CAAC,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;IACnD,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,CAChC,2BAA2B,EAC3B,WAAW,CACZ,CAAC;IACF,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,oBAAoB,EAAE,IAAI,CAAC,uBAAuB;QAClD,YAAY,EAAE,IAAI,CAAC,aAAa;QAChC,qBAAqB,EAAE,IAAI,CAAC,wBAAwB;QACpD,WAAW,EAAE,IAAI,CAAC,aAAa;QAC/B,yBAAyB,EAAE,IAAI,CAAC,4BAA4B;KAC7D,CAAC;AACJ,CAAC"}

package/dist/auth/credential-manager.js

@@ -1,71 +0,0 @@
-import { CredentialsStore } from './credentials-store.js';
-import { buildSupabaseClient } from './supabase-client.js';
-import { getSupabaseAuthConfig } from './supabase-config.js';
-const EXPIRY_BUFFER_MS = 60_000; // refresh tokens one minute before expiry
-export async function ensureAuthContext(store, backendUrl) {
-    const credentials = await store.load();
-    if (!credentials) {
-        throw new Error('No credentials found. Run `omnara auth login` first.');
-    }
-    if (!credentials.refreshToken) {
-        throw new Error('Refresh token unavailable. Please run `omnara auth login`.');
-    }
-    if (!credentials.accessToken) {
-        return await refreshWithStoredToken(store, credentials, backendUrl, 'No access token stored.');
-    }
-    if (!isExpiring(credentials.accessTokenExpiresAt, EXPIRY_BUFFER_MS)) {
-        return { credentials, accessToken: credentials.accessToken };
-    }
-    return await refreshWithStoredToken(store, credentials, backendUrl, 'Access token expired.');
-}
-async function refreshWithStoredToken(store, credentials, backendUrl, reason) {
-    const refreshToken = credentials.refreshToken;
-    if (!refreshToken) {
-        throw new Error(`${reason} Refresh token unavailable. Please run \`omnara auth login\`.`);
-    }
-    if (credentials.refreshTokenExpiresAt && isExpiring(credentials.refreshTokenExpiresAt, 0)) {
-        throw new Error('Refresh token expired. Please run `omnara auth login`.');
-    }
-    const supabaseConfig = await getSupabaseAuthConfig(backendUrl);
-    const supabase = buildSupabaseClient(supabaseConfig);
-    const { data, error } = await supabase.auth.refreshSession({ refresh_token: refreshToken });
-    if (error || !data?.session) {
-        throw new Error(`${reason} Failed to refresh Supabase session: ${error?.message ?? 'unknown error'}.`);
-    }
-    const updated = applySession(credentials, data.session);
-    await store.save(updated);
-    if (!updated.accessToken) {
-        throw new Error('Supabase refresh completed without an access token.');
-    }
-    return { credentials: updated, accessToken: updated.accessToken };
-}
-function isExpiring(expiresAtIso, bufferMs) {
-    if (!expiresAtIso) {
-        return true;
-    }
-    const timestamp = Date.parse(expiresAtIso);
-    if (Number.isNaN(timestamp)) {
-        return true;
-    }
-    return timestamp - bufferMs <= Date.now();
-}
-function applySession(credentials, session) {
-    const expiresAt = deriveAccessExpiry(session);
-    return {
-        ...credentials,
-        accessToken: session.access_token,
-        accessTokenExpiresAt: expiresAt,
-        refreshToken: session.refresh_token ?? credentials.refreshToken,
-        refreshTokenExpiresAt: credentials.refreshTokenExpiresAt,
-    };
-}
-function deriveAccessExpiry(session) {
-    if (session.expires_at) {
-        return new Date(session.expires_at * 1000).toISOString();
-    }
-    if (session.expires_in) {
-        return new Date(Date.now() + session.expires_in * 1000).toISOString();
-    }
-    return undefined;
-}
-//# sourceMappingURL=credential-manager.js.map

package/dist/auth/credential-manager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"credential-manager.js","sourceRoot":"","sources":["../../src/auth/credential-manager.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAA0B,MAAM,wBAAwB,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,MAAM,gBAAgB,GAAG,MAAM,CAAC,CAAC,0CAA0C;AAO3E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAuB,EACvB,UAAkB;IAElB,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;QAC7B,OAAO,MAAM,sBAAsB,CAAC,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,yBAAyB,CAAC,CAAC;IACjG,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE,CAAC;IAC/D,CAAC;IAED,OAAO,MAAM,sBAAsB,CAAC,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAC;AAC/F,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,KAAuB,EACvB,WAA8B,EAC9B,UAAkB,EAClB,MAAc;IAEd,MAAM,YAAY,GAAG,WAAW,CAAC,YAAY,CAAC;IAC9C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,+DAA+D,CAAC,CAAC;IAC5F,CAAC;IAED,IAAI,WAAW,CAAC,qBAAqB,IAAI,UAAU,CAAC,WAAW,CAAC,qBAAqB,EAAE,CAAC,CAAC,EAAE,CAAC;QAC1F,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC;IACrD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC;IAC5F,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,wCAAwC,KAAK,EAAE,OAAO,IAAI,eAAe,GAAG,CACtF,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAExD,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1B,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,UAAU,CAAC,YAAgC,EAAE,QAAgB;IACpE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC3C,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,SAAS,GAAG,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,WAA8B,EAAE,OAAgB;IACpE,MAAM,SAAS,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAE9C,OAAO;QACL,GAAG,WAAW;QACd,WAAW,EAAE,OAAO,CAAC,YAAY;QACjC,oBAAoB,EAAE,SAAS;QAC/B,YAAY,EAAE,OAAO,CAAC,aAAa,IAAI,WAAW,CAAC,YAAY;QAC/D,qBAAqB,EAAE,WAAW,CAAC,qBAAqB;KACzD,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAgB;IAC1C,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACxE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/auth/credentials-store.js

@@ -1,69 +0,0 @@
-import fs from 'fs/promises';
-import os from 'os';
-import path from 'path';
-const DEFAULT_DIR = path.join(os.homedir(), '.omnara');
-export const DEFAULT_CREDENTIALS_PATH = path.join(DEFAULT_DIR, 'credentials.json');
-const DEFAULT_FILE_MODE = 0o600;
-const DEFAULT_DIR_MODE = 0o700;
-function isStoredCredentials(value) {
-    return Boolean(value) && typeof value === 'object';
-}
-export class CredentialsStore {
-    filePath;
-    constructor(filePath = DEFAULT_CREDENTIALS_PATH) {
-        this.filePath = filePath;
-    }
-    async load() {
-        try {
-            const raw = await fs.readFile(this.filePath, 'utf8');
-            const parsed = JSON.parse(raw);
-            if (!isStoredCredentials(parsed)) {
-                throw new Error('File does not contain valid credentials data');
-            }
-            return parsed;
-        }
-        catch (error) {
-            if (isFileNotFound(error)) {
-                return null;
-            }
-            throw new Error(`Failed to read credentials from ${this.filePath}: ${extractErrorMessage(error)}`);
-        }
-    }
-    async save(credentials) {
-        const payload = {
-            accessToken: credentials.accessToken,
-            accessTokenExpiresAt: credentials.accessTokenExpiresAt,
-            refreshToken: credentials.refreshToken,
-            refreshTokenExpiresAt: credentials.refreshTokenExpiresAt,
-        };
-        await fs.mkdir(path.dirname(this.filePath), { recursive: true, mode: DEFAULT_DIR_MODE });
-        const tempPath = `${this.filePath}.tmp`;
-        const serialized = JSON.stringify(payload, null, 2);
-        await fs.writeFile(tempPath, serialized, { mode: DEFAULT_FILE_MODE });
-        await fs.chmod(tempPath, DEFAULT_FILE_MODE);
-        await fs.rename(tempPath, this.filePath);
-    }
-    async clear() {
-        try {
-            await fs.unlink(this.filePath);
-        }
-        catch (error) {
-            if (!isFileNotFound(error)) {
-                throw new Error(`Failed to remove credentials file ${this.filePath}: ${extractErrorMessage(error)}`);
-            }
-        }
-    }
-}
-function isFileNotFound(error) {
-    return Boolean(error &&
-        typeof error === 'object' &&
-        'code' in error &&
-        error.code === 'ENOENT');
-}
-function extractErrorMessage(error) {
-    if (error instanceof Error && error.message) {
-        return error.message;
-    }
-    return String(error);
-}
-//# sourceMappingURL=credentials-store.js.map