@earendil-works/pi-ai/dist/auth/helpers.js

Unified LLM API with automatic model discovery and provider configuration

/**
 * Standard api-key auth: a stored credential key wins, otherwise the first
 * set env var resolves. Includes a `login` that prompts for the key.
 * Providers with non-standard resolution (provider env, ambient files, IAM)
 * write their own `ApiKeyAuth`.
 */
export function envApiKeyAuth(name, envVars) {
    return {
        name,
        login: async (interaction) => {
            interaction.signal.throwIfAborted();
            const key = await interaction.prompt({ type: "secret", message: `Enter ${name}` });
            interaction.signal.throwIfAborted();
            return { type: "api_key", key };
        },
        resolve: async ({ ctx, credential, signal }) => {
            signal.throwIfAborted();
            if (credential?.key) {
                return { auth: { apiKey: credential.key }, env: credential.env, source: "stored credential" };
            }
            for (const envVar of envVars) {
                const value = await ctx.env(envVar);
                signal.throwIfAborted();
                if (value)
                    return { auth: { apiKey: value }, source: envVar };
            }
            return undefined;
        },
    };
}
/**
 * Wraps a dynamically imported `OAuthAuth` so provider definitions can
 * advertise OAuth without importing the implementation. The flow loads on
 * first `login`/`refresh`/`toAuth` call; callers keep Node-only flow code out
 * of bundles by loading through a bundler-opaque dynamic import (variable
 * specifier, see the bedrock lazy wrapper).
 */
export function lazyOAuth(input) {
    let promise;
    const loaded = () => {
        promise ??= input.load();
        return promise;
    };
    return {
        name: input.name,
        isSubscription: input.isSubscription,
        loginLabel: input.loginLabel,
        login: async (interaction, options) => (await loaded()).login(interaction, options),
        refresh: async (credential, signal) => (await loaded()).refresh(credential, signal),
        toAuth: async (credential) => (await loaded()).toAuth(credential),
    };
}
//# sourceMappingURL=helpers.js.map