@earendil-works/pi-coding-agent/dist/core/runtime-credentials.js

Coding agent CLI with read, bash, edit, write tools and session management

/** Async credential store overlay for non-persistent runtime API keys. */
export class RuntimeCredentials {
    store;
    overrides = new Map();
    /** Modifications not yet written or failed, for example an OAuth refresh. */
    pendingModifications = new Set();
    constructor(store) {
        this.store = store;
    }
    setRuntimeApiKey(providerId, apiKey) {
        this.overrides.set(providerId, apiKey);
    }
    removeRuntimeApiKey(providerId) {
        this.overrides.delete(providerId);
    }
    hasRuntimeApiKey(providerId) {
        return this.overrides.has(providerId);
    }
    async read(providerId, options) {
        options?.signal?.throwIfAborted();
        const override = this.overrides.get(providerId);
        return override ? { type: "api_key", key: override } : this.store.read(providerId, options);
    }
    async list(options) {
        const entries = new Map((await this.store.list(options)).map((entry) => [entry.providerId, entry]));
        options?.signal?.throwIfAborted();
        for (const providerId of this.overrides.keys()) {
            entries.set(providerId, { providerId, type: "api_key" });
        }
        return [...entries.values()];
    }
    modify(providerId, fn, options) {
        const modification = this.store.modify(providerId, fn, options);
        const pending = modification.then(() => undefined, () => undefined);
        this.pendingModifications.add(pending);
        void pending.finally(() => this.pendingModifications.delete(pending));
        return modification;
    }
    /**
     * Resolves when every modification started so far is written or failed. An OAuth refresh may
     * already have spent the single-use refresh token, so exiting before its result is written would
     * leave only the spent token in auth.json.
     */
    async settled() {
        await Promise.all(this.pendingModifications);
    }
    async delete(providerId, options) {
        options?.signal?.throwIfAborted();
        await this.store.delete(providerId, options);
        this.overrides.delete(providerId);
    }
}
//# sourceMappingURL=runtime-credentials.js.map