From 1b5917e9eb309b4b78e8d2b88b66e7f7bc1834ef Mon Sep 17 00:00:00 2001
From: t <t@tjp.lol>
Date: Sat, 13 Jun 2026 12:02:11 -0600
Subject: auth: OAuth device flows, refresh, and Copilot exchange (C5)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Implement the device-authorization flow for both dialects (GitHub `token`
direct-poll; Codex `codex` poll→authorization-code→PKCE exchange), refresh_token
grant, Copilot secondary token exchange, JWT exp parsing, Codex account-id
extraction, and pure credential-building/refresh predicates. Adds a Presenter
hook for rendering the device-code prompt. Exported from public.zig.
---
 libpanto/src/public.zig | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

(limited to 'libpanto/src/public.zig')

diff --git a/libpanto/src/public.zig b/libpanto/src/public.zig
index aa2f7e8..2c15f1e 100644
--- a/libpanto/src/public.zig
+++ b/libpanto/src/public.zig
@@ -93,6 +93,22 @@ pub const loadTokenSet = auth_mod.loadTokenSet;
 pub const saveTokenSet = auth_mod.saveTokenSet;
 pub const deleteTokenSet = auth_mod.deleteTokenSet;
 
+// OAuth device-flow mechanism: interactive login, refresh, exchange, and the
+// pure credential/JWT helpers the embedder's auth manager composes.
+pub const AuthError = auth_mod.AuthError;
+pub const Presenter = auth_mod.Presenter;
+pub const DeviceCodePrompt = auth_mod.DeviceCodePrompt;
+pub const OAuthTokens = auth_mod.OAuthTokens;
+pub const oauthLogin = auth_mod.login;
+pub const refreshTokens = auth_mod.refreshTokens;
+pub const runExchange = auth_mod.runExchange;
+pub const buildCredential = auth_mod.buildCredential;
+pub const tokensToTokenSet = auth_mod.tokensToTokenSet;
+pub const needsRefresh = auth_mod.needsRefresh;
+pub const needsExchange = auth_mod.needsExchange;
+pub const parseJwtExp = auth_mod.parseJwtExp;
+pub const extractAccountId = auth_mod.extractAccountId;
+
 /// Non-streaming HTTP helper over the process-global client, plus JSON
 /// path readers — the building blocks of the OAuth flows.
 pub const http = @import("http_helper.zig");
-- 
cgit v1.3