opencode-qwen-cli-auth 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Geoff Hammond
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,162 @@
+# opencode-qwen-cli-auth
+OAuth plugin for OpenCode that lets you use Qwen models with your Qwen account, without managing a DashScope API key directly.
+
+## Scope
+
+- Uses OAuth Device Authorization Grant (RFC 8628) for sign-in.
+- Best suited for personal/dev workflows.
+- For production or commercial workloads, use DashScope API key auth instead:
+  https://dashscope.console.aliyun.com/
+
+## Features
+
+- OAuth login through `opencode auth login`.
+- Automatic token refresh before expiration.
+- Dynamic API base URL from token `resource_url` with safe fallback.
+- Model normalization to `coder-model` for Qwen Portal API.
+- Optional prompt bridge behavior via `QWEN_MODE`.
+- Optional debug and request logging via environment variables.
+
+## Requirements
+
+- Qwen account
+- OpenCode
+- Node.js `>=20` (only required when building/testing from source)
+
+## Quick start
+
+Add the plugin to your OpenCode config:
+
+```json
+{
+  "$schema": "https://opencode.ai/config.json",
+  "plugin": ["opencode-qwen-cli-auth"],
+  "model": "alibaba/coder-model"
+}
+```
+
+Then sign in:
+
+```bash
+opencode auth login
+```
+
+Choose `Alibaba` -> `Qwen Account (OAuth)`.
+
+## Usage
+
+```bash
+opencode run "create a hello world file" --model=alibaba/coder-model
+opencode chat --model=alibaba/coder-model
+```
+
+Always keep the provider prefix `alibaba/` in model configuration.
+
+## Configuration
+
+### `QWEN_MODE`
+
+Resolution order:
+
+1. Environment variable `QWEN_MODE`
+2. File `~/.opencode/qwen/auth-config.json`
+3. Default value: `true`
+
+Example `~/.opencode/qwen/auth-config.json`:
+
+```json
+{
+  "qwenMode": true
+}
+```
+
+Supported env values:
+
+- Enable: `QWEN_MODE=1` or `QWEN_MODE=true`
+- Disable: `QWEN_MODE=0` or `QWEN_MODE=false`
+
+## Logging and debug
+
+- Enable debug logs:
+
+```bash
+DEBUG_QWEN_PLUGIN=1 opencode run "your prompt"
+```
+
+- Enable request logging to files:
+
+```bash
+ENABLE_PLUGIN_REQUEST_LOGGING=1 opencode run "your prompt"
+```
+
+Log path: `~/.opencode/logs/qwen-plugin/`
+
+## Local plugin data
+
+- OAuth token: `~/.opencode/qwen/oauth_token.json`
+- Plugin config: `~/.opencode/qwen/auth-config.json`
+- Prompt cache: `~/.opencode/cache/`
+
+## Troubleshooting
+
+### `Authentication required. Please run: opencode auth login`
+
+Token is missing or refresh failed. Re-authenticate:
+
+```bash
+opencode auth login
+```
+
+### Device authorization timed out
+
+The device code expired or was not confirmed in time. Run `opencode auth login` again and confirm in the browser sooner.
+
+### `429` rate limit
+
+The server is throttling requests. Reduce request frequency and retry later.
+
+### Wrong model behavior
+
+Ensure your model is set correctly in OpenCode:
+
+```yaml
+model: alibaba/coder-model
+```
+
+## Clear auth state
+
+- macOS/Linux:
+
+```bash
+rm -rf ~/.opencode/qwen/
+```
+
+- PowerShell:
+
+```powershell
+Remove-Item -Recurse -Force "$HOME/.opencode/qwen"
+```
+
+Then log in again with `opencode auth login`.
+
+## Development
+
+```bash
+npm run build
+npm run typecheck
+npm run test
+npm run lint
+```
+
+## Policy and links
+
+- Terms of Service: https://qwen.ai/termsservice
+- Privacy Policy: https://qwen.ai/privacypolicy
+- Usage Policy: https://qwen.ai/usagepolicy
+- NPM: https://www.npmjs.com/package/opencode-qwen-cli-auth
+- Repository: https://github.com/TVD-00/opencode-qwen-cli-auth
+- Issues: https://github.com/TVD-00/opencode-qwen-cli-auth/issues
+
+## License
+
+MIT

package/dist/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Alibaba Qwen OAuth Authentication Plugin for opencode
+ *
+ * @license MIT with Usage Disclaimer (see LICENSE file)
+ * @repository https://github.com/TVD-00/opencode-qwen-cli-auth
+ */
+import type { Plugin } from "@opencode-ai/plugin";
+/**
+ * Alibaba Qwen OAuth authentication plugin for opencode
+ *
+ * @example
+ * ```json
+ * {
+ *   "plugin": ["opencode-alibaba-qwen-cli-auth"],
+ *   "model": "alibaba/coder-model"
+ * }
+ * ```
+ */
+export declare const QwenAuthPlugin: Plugin;
+export default QwenAuthPlugin;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAe,MAAM,qBAAqB,CAAC;AAoB/D;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,cAAc,EAAE,MA8P5B,CAAC;AAEF,eAAe,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,167 @@
+/**
+ * Alibaba Qwen OAuth Authentication Plugin for opencode
+ *
+ * Plugin don gian: chi xu ly OAuth login + tra apiKey/baseURL cho SDK.
+ * SDK tu xu ly streaming, headers, request format.
+ *
+ * @license MIT with Usage Disclaimer (see LICENSE file)
+ * @repository https://github.com/TVD-00/opencode-qwen-cli-auth
+ */
+import { createPKCE, requestDeviceCode, pollForToken, getApiBaseUrl, saveToken, refreshAccessToken, loadStoredToken } from "./lib/auth/auth.js";
+import { PROVIDER_ID, AUTH_LABELS, DEVICE_FLOW } from "./lib/constants.js";
+import { logError, logInfo, LOGGING_ENABLED } from "./lib/logger.js";
+/**
+ * Lay access token hop le tu SDK auth state, refresh neu het han
+ * Dung getAuth() cua SDK thay vi doc file truc tiep
+ *
+ * @param getAuth - Ham lay auth state tu SDK
+ * @returns access token hoac null
+ */
+async function getValidAccessToken(getAuth) {
+    const auth = await getAuth();
+    if (!auth || auth.type !== "oauth") {
+        return null;
+    }
+    let accessToken = auth.access;
+    // Refresh neu het han (buffer 60 giay)
+    if (accessToken && auth.expires && Date.now() > auth.expires - 60000 && auth.refresh) {
+        try {
+            const refreshResult = await refreshAccessToken(auth.refresh);
+            if (refreshResult.type === "success") {
+                accessToken = refreshResult.access;
+                saveToken(refreshResult);
+            }
+            else {
+                if (LOGGING_ENABLED) {
+                    logError("Token refresh failed");
+                }
+                accessToken = undefined;
+            }
+        }
+        catch (e) {
+            if (LOGGING_ENABLED) {
+                logError("Token refresh error:", e);
+            }
+            accessToken = undefined;
+        }
+    }
+    return accessToken ?? null;
+}
+/**
+ * Lay base URL tu token luu tren disk (resource_url)
+ * Fallback ve portal.qwen.ai/v1 neu khong co
+ */
+function getBaseUrl() {
+    try {
+        const stored = loadStoredToken();
+        if (stored?.resource_url) {
+            return getApiBaseUrl(stored.resource_url);
+        }
+    }
+    catch (_) {
+        // Loi doc file, dung default
+    }
+    return getApiBaseUrl();
+}
+/**
+ * Alibaba Qwen OAuth authentication plugin for opencode
+ *
+ * @example
+ * ```json
+ * {
+ *   "plugin": ["opencode-alibaba-qwen-cli-auth"],
+ *   "model": "alibaba/coder-model"
+ * }
+ * ```
+ */
+export const QwenAuthPlugin = async (_input) => {
+    return {
+        auth: {
+            provider: PROVIDER_ID,
+            /**
+             * Loader: lay token + base URL, tra ve cho SDK
+             * Khong can custom fetch - SDK tu xu ly streaming va headers
+             */
+            async loader(getAuth, provider) {
+                const auth = await getAuth();
+                // Chi xu ly OAuth, bo qua API key auth
+                if (auth.type !== "oauth") {
+                    return {};
+                }
+                const accessToken = await getValidAccessToken(getAuth);
+                if (!accessToken) {
+                    return null;
+                }
+                const baseUrl = getBaseUrl();
+                // Tra ve apiKey + baseURL, SDK tu xu ly phan con lai
+                return {
+                    apiKey: accessToken,
+                    baseURL: baseUrl,
+                };
+            },
+            methods: [
+                {
+                    label: AUTH_LABELS.OAUTH,
+                    type: "oauth",
+                    /**
+                     * Device Authorization Grant OAuth flow (RFC 8628)
+                     */
+                    authorize: async () => {
+                        // Generate PKCE
+                        const pkce = await createPKCE();
+                        // Request device code
+                        const deviceAuth = await requestDeviceCode(pkce);
+                        if (!deviceAuth) {
+                            throw new Error("Failed to request device code");
+                        }
+                        // Hien thi user code
+                        console.log(`\nPlease visit: ${deviceAuth.verification_uri}`);
+                        console.log(`And enter code: ${deviceAuth.user_code}\n`);
+                        // URL xac thuc - SDK se tu mo browser khi method=auto
+                        const verificationUrl = deviceAuth.verification_uri_complete || deviceAuth.verification_uri;
+                        return {
+                            url: verificationUrl,
+                            method: "auto",
+                            instructions: AUTH_LABELS.INSTRUCTIONS,
+                            callback: async () => {
+                                // Poll for token
+                                let pollInterval = (deviceAuth.interval || 5) * 1000;
+                                const POLLING_MARGIN_MS = 3000;
+                                const maxInterval = DEVICE_FLOW.MAX_POLL_INTERVAL;
+                                const startTime = Date.now();
+                                const expiresIn = deviceAuth.expires_in * 1000;
+                                while (Date.now() - startTime < expiresIn) {
+                                    await new Promise(resolve => setTimeout(resolve, pollInterval + POLLING_MARGIN_MS));
+                                    const result = await pollForToken(deviceAuth.device_code, pkce.verifier);
+                                    if (result.type === "success") {
+                                        saveToken(result);
+                                        // Tra ve cho SDK luu auth state
+                                        return {
+                                            type: "success",
+                                            access: result.access,
+                                            refresh: result.refresh,
+                                            expires: result.expires,
+                                        };
+                                    }
+                                    if (result.type === "slow_down") {
+                                        pollInterval = Math.min(pollInterval + 5000, maxInterval);
+                                        continue;
+                                    }
+                                    if (result.type === "pending") {
+                                        continue;
+                                    }
+                                    // denied, expired, failed -> dung lai
+                                    return { type: "failed" };
+                                }
+                                console.error("[qwen-oauth-plugin] Device authorization timed out");
+                                return { type: "failed" };
+                            },
+                        };
+                    },
+                },
+            ],
+        },
+    };
+};
+export default QwenAuthPlugin;
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC1H,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEhE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAEN,WAAW,EAEX,WAAW,EACX,WAAW,GACX,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,cAAc,GAAW,KAAK,EAAE,EAAE,MAAM,EAAe,EAAE,EAAE;IACvE,OAAO;QACN,IAAI,EAAE;YACL,QAAQ,EAAE,WAAW;YACrB;;;;;;;;;;;;eAYG;YACH,KAAK,CAAC,MAAM,CAAC,OAA4B,EAAE,QAAiB;gBAC3D,MAAM,IAAI,GAAG,MAAM,OAAO,EAAE,CAAC;gBAE7B,iDAAiD;gBACjD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC3B,OAAO,EAAE,CAAC;gBACX,CAAC;gBAED,wCAAwC;gBACxC,MAAM,SAAS,GAAG,MAAM,aAAa,EAAE,CAAC;gBAExC,IAAI,CAAC,SAAS,EAAE,CAAC;oBAChB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;gBAC7E,CAAC;gBAED,2BAA2B;gBAC3B,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;gBAErD,oDAAoD;gBACpD,6DAA6D;gBAC7D,MAAM,YAAY,GAAG,gBAAgB,EAAE,CAAC;gBACxC,MAAM,QAAQ,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;gBAE3C,2BAA2B;gBAC3B,OAAO;oBACN,gFAAgF;oBAChF,+EAA+E;oBAC/E,6EAA6E;oBAC7E,qDAAqD;oBACrD,MAAM,EAAE,SAAS,CAAC,WAAW;oBAC7B,OAAO,EAAE,OAAO;oBAChB;;;;;;;;;;;;;uBAaG;oBACH,KAAK,CAAC,KAAK,CAAC,KAA6B,EAAE,IAAkB;wBAC5D,8DAA8D;wBAC9D,MAAM,YAAY,GAAG,MAAM,aAAa,EAAE,CAAC;wBAE3C,IAAI,CAAC,YAAY,EAAE,CAAC;4BACnB,MAAM,aAAa,GAAkB;gCACpC,KAAK,EAAE,yBAAyB;gCAChC,OAAO,EAAE,0DAA0D;gCACnE,IAAI,EAAE,eAAe;6BACrB,CAAC;4BACF,OAAO,IAAI,QAAQ,CAClB,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,EAC7B,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CAChE,CAAC;wBACH,CAAC;wBAED,+BAA+B;wBAC/B,MAAM,cAAc,GAAG,aAAa,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;wBAE/D,mDAAmD;wBACnD,MAAM,WAAW,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;wBAC5G,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;wBAEpD,iCAAiC;wBACjC,IAAI,eAAe,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;wBAClC,IAAI,IAAI,EAAE,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;4BACjD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAgB,CAAC;4BAElD,qDAAqD;4BACrD,MAAM,kBAAkB,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BAEzE,MAAM,WAAW,GAAG,oBAAoB,CAAC,IAAI,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;4BAC7E,eAAe,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;wBACpD,CAAC;wBAED,sBAAsB;wBACtB,oEAAoE;wBACpE,MAAM,KAAK,GAAG,YAAY,CAAC,YAAY,CAAC,WAAW,EAAE,YAAY,CAAC,WAAW,CAAC,CAAC;wBAC/E,MAAM,YAAY,GAAG,YAAY,CAChC,eAAe,CAAC,OAAO,EACvB,KAAK,EACL,CAAC,eAAe,EAAE,cAAc,EAAE,sBAAsB,CAAC,CACzD,CAAC;wBACF,eAAe,CAAC,OAAO,GAAG,YAAY,CAAC;wBAEvC,2BAA2B;wBAC3B,IAAI,eAAe,EAAE,CAAC;4BACrB,MAAM,UAAU,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;4BAC5E,MAAM,EAAE,aAAa,EAAE,GAAG,IAAI,EAAE,GAAG,YAAY,CAAC;4BAChD,UAAU,CAAC,cAAc,EAAE;gCAC1B,GAAG;gCACH,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE;gCAC/C,QAAQ;6BACR,CAAC,CAAC;wBACJ,CAAC;wBAED,0BAA0B;wBAC1B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;wBAEnD,iCAAiC;wBACjC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;4BAC7B,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;4BACvD,MAAM,OAAO,GAAG,UAAU;gCACzB,CAAC,CAAC,qCAAqC,UAAU,WAAW;gCAC5D,CAAC,CAAC,uCAAuC,CAAC;4BAE3C,OAAO,CAAC,KAAK,CAAC,uBAAuB,OAAO,EAAE,CAAC,CAAC;4BAEhD,MAAM,aAAa,GAAkB;gCACpC,KAAK,EAAE,qBAAqB;gCAC5B,OAAO,EAAE,OAAO;gCAChB,IAAI,EAAE,YAAY;6BAClB,CAAC;4BAEF,OAAO,IAAI,QAAQ,CAClB,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,EAC7B;gCACC,MAAM,EAAE,GAAG;gCACX,OAAO,EAAE;oCACR,cAAc,EAAE,kBAAkB;oCAClC,GAAG,CAAC,UAAU,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC;iCAChD;6BACD,CACD,CAAC;wBACH,CAAC;wBAED,4FAA4F;wBAC5F,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;wBAC9E,IAAI,WAAW,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;4BAC/C,IAAI,CAAC;gCACJ,OAAO,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;4BAC7C,CAAC;4BAAC,OAAO,CAAC,EAAE,CAAC;gCACZ,uCAAuC;gCACvC,OAAO,QAAQ,CAAC;4BACjB,CAAC;wBACF,CAAC;wBACD,OAAO,QAAQ,CAAC;oBACjB,CAAC;iBACD,CAAC;YACH,CAAC;YACD,OAAO,EAAE;gBACR;oBACC,KAAK,EAAE,WAAW,CAAC,KAAK;oBACxB,IAAI,EAAE,OAAgB;oBACtB;;;;;;;;;;;uBAWG;oBACH,SAAS,EAAE,KAAK,IAAI,EAAE;wBACrB,gBAAgB;wBAChB,MAAM,IAAI,GAAG,MAAM,UAAU,EAAE,CAAC;wBAEhC,sBAAsB;wBACtB,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;wBACjD,IAAI,CAAC,UAAU,EAAE,CAAC;4BACjB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;wBAClD,CAAC;wBAED,yCAAyC;wBACzC,OAAO,CAAC,GAAG,CAAC,mBAAmB,UAAU,CAAC,gBAAgB,EAAE,CAAC,CAAC;wBAC9D,OAAO,CAAC,GAAG,CAAC,mBAAmB,UAAU,CAAC,SAAS,IAAI,CAAC,CAAC;wBAEzD,mCAAmC;wBACnC,MAAM,eAAe,GAAG,UAAU,CAAC,yBAAyB,IAAI,UAAU,CAAC,gBAAgB,CAAC;wBAC5F,cAAc,CAAC,eAAe,CAAC,CAAC;wBAEhC,OAAO;4BACN,GAAG,EAAE,eAAe;4BACpB,MAAM,EAAE,MAAe;4BACvB,YAAY,EAAE,WAAW,CAAC,YAAY;4BACtC,QAAQ,EAAE,KAAK,IAAI,EAAE;gCACpB,0CAA0C;gCAC1C,IAAI,YAAY,GAAG,CAAC,UAAU,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,0BAA0B;gCAChF,MAAM,WAAW,GAAG,WAAW,CAAC,iBAAiB,CAAC;gCAClD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gCAC7B,MAAM,SAAS,GAAG,UAAU,CAAC,UAAU,GAAG,IAAI,CAAC;gCAE/C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;oCAC3C,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;oCAEhE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;oCAEzE,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;wCAC/B,qBAAqB;wCACrB,SAAS,CAAC,MAAM,CAAC,CAAC;wCAClB,OAAO,MAAM,CAAC;oCACf,CAAC;oCAED,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;wCACjC,4BAA4B;wCAC5B,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,WAAW,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC;wCACpF,SAAS;oCACV,CAAC;oCAED,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;wCAC/B,mBAAmB;wCACnB,SAAS;oCACV,CAAC;oCAED,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wCAC9B,OAAO,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;wCAC/D,OAAO,EAAE,IAAI,EAAE,QAAiB,EAAE,CAAC;oCACpC,CAAC;oCAED,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;wCAC/B,OAAO,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;wCACzD,OAAO,EAAE,IAAI,EAAE,QAAiB,EAAE,CAAC;oCACpC,CAAC;oCAED,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wCAC9B,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;wCAC1D,OAAO,EAAE,IAAI,EAAE,QAAiB,EAAE,CAAC;oCACpC,CAAC;gCACF,CAAC;gCAED,OAAO,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;gCACpE,OAAO,EAAE,IAAI,EAAE,QAAiB,EAAE,CAAC;4BACpC,CAAC;yBACD,CAAC;oBACH,CAAC;iBACD;aACD;SACD;KACD,CAAC;AACH,CAAC,CAAC;AAEF,eAAe,cAAc,CAAC"}

package/dist/lib/auth/auth.d.ts

@@ -0,0 +1,65 @@
+import type { PKCEPair, DeviceAuthorizationResponse, TokenResult, StoredTokenData } from "../types.js";
+/**
+ * Request device authorization code
+ * @param pkce - PKCE challenge/verifier pair
+ * @returns Device authorization response with user code and verification URL
+ */
+export declare function requestDeviceCode(pkce: PKCEPair): Promise<DeviceAuthorizationResponse | null>;
+/**
+ * Poll for token using device code
+ * @param deviceCode - Device code from authorization response
+ * @param verifier - PKCE verifier
+ * @param interval - Polling interval in seconds (from device response)
+ * @returns Token result or null if still pending
+ */
+export declare function pollForToken(deviceCode: string, verifier: string, interval?: number): Promise<TokenResult>;
+/**
+ * Refresh access token using refresh token
+ * @param refreshToken - Refresh token
+ * @returns Token result
+ */
+export declare function refreshAccessToken(refreshToken: string): Promise<TokenResult>;
+/**
+ * Generate PKCE challenge and verifier
+ * @returns PKCE pair
+ */
+export declare function createPKCE(): Promise<PKCEPair>;
+/**
+ * Load stored token from disk
+ * @returns Stored token data or null if not found
+ */
+export declare function loadStoredToken(): StoredTokenData | null;
+/**
+ * Xoa token luu tren disk khi token khong con hop le
+ */
+export declare function clearStoredToken(): void;
+/**
+ * Save token to disk
+ * @param tokenResult - Token result from OAuth flow
+ */
+export declare function saveToken(tokenResult: TokenResult): void;
+/**
+ * Check if token is expired (with 5 minute buffer)
+ * @param expiresAt - Expiration timestamp in milliseconds
+ * @returns True if token is expired or will expire soon
+ */
+export declare function isTokenExpired(expiresAt: number): boolean;
+/**
+ * Get valid access token, refreshing if necessary
+ * @returns Access token and resource URL, or null if authentication required
+ */
+export declare function getValidToken(): Promise<{
+    accessToken: string;
+    resourceUrl?: string;
+} | null>;
+/**
+ * Get Portal API base URL from token or use default
+ * @param resourceUrl - Resource URL from token (optional)
+ * @returns Portal API base URL
+ *
+ * IMPORTANT: Portal API uses /v1 path (not /api/v1)
+ * - OAuth endpoints: /api/v1/oauth2/ (for authentication)
+ * - Chat API: /v1/ (for completions)
+ */
+export declare function getApiBaseUrl(resourceUrl?: string): string;
+//# sourceMappingURL=auth.d.ts.map

package/dist/lib/auth/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../lib/auth/auth.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,2BAA2B,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAgEvG;;;;GAIG;AACH,wBAAsB,iBAAiB,CACtC,IAAI,EAAE,QAAQ,GACZ,OAAO,CAAC,2BAA2B,GAAG,IAAI,CAAC,CA6C7C;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CACjC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,QAAQ,GAAE,MAAU,GAClB,OAAO,CAAC,WAAW,CAAC,CA4EtB;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CA2DnF;AAED;;;GAGG;AACH,wBAAsB,UAAU,IAAI,OAAO,CAAC,QAAQ,CAAC,CAGpD;AAED;;;GAGG;AACH,wBAAgB,eAAe,IAAI,eAAe,GAAG,IAAI,CAsBxD;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI,CA8BxD;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED;;;GAGG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,IAAI,CAAC,CAiCR;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAoC1D"}